@alashi/cli 0.1.0 → 0.2.0

package/dist/{store-CwgDCAAx.mjs → store-Ckx0oLB6.mjs}

@@ -5,7 +5,7 @@ import { randomUUID } from "node:crypto";
 import { mkdir, readFile, readdir, rename, rm, symlink, writeFile } from "node:fs/promises";
 import { extname, isAbsolute, join, resolve, sep } from "node:path";
 import { promisify } from "node:util";
-import { pathToFileURL } from "node:url";
+import { fileURLToPath, pathToFileURL } from "node:url";
 import { z } from "zod";
 import { Hono } from "hono";
 import { streamSSE } from "hono/streaming";
@@ -574,8 +574,10 @@ var Scheduler = class {
 //#endregion
 //#region src/settings-page.ts
 /**
-* Self-contained per-app settings page. All data comes from
+* Self-contained per-app settings page. Config data comes from
 * GET /api/apps/:name/config at runtime; saving PUTs only changed keys.
+* The read-only "App definition" section (instructions, agents, skills,
+* allowed tools, MCP servers, jobs) comes from GET /api/apps/:name/manifest.
 * The app name is injected via a JSON-encoded script constant, never into
 * markup, so no escaping subtleties apply.
 */
@@ -586,42 +588,24 @@ function settingsPage(name) {
 <meta charset="utf-8">
 <meta name="viewport" content="width=device-width, initial-scale=1">
 <title>Settings</title>
+<link rel="stylesheet" href="/assets/v1/system.css">
 <style>
-  :root { --accent: #6d28d9; --bg: #f6f5f8; --card: #fff; --line: #e5e2eb; --muted: #6b6478; }
-  * { box-sizing: border-box; }
-  body { margin: 0; font: 15px/1.5 system-ui, sans-serif; background: var(--bg); color: #1d1a24; }
-  header { background: #17141f; color: #fff; padding: 14px 24px; display: flex; align-items: center; gap: 12px; }
-  header a { color: #cbc4dd; text-decoration: none; }
-  main { max-width: 760px; margin: 24px auto; padding: 0 16px; }
-  .banner { border-radius: 8px; padding: 10px 14px; margin-bottom: 16px; font-weight: 500; }
-  .banner.ok { background: #e7f6ec; color: #16652f; }
-  .banner.warn { background: #fdeeee; color: #9c2121; }
-  .card { background: var(--card); border: 1px solid var(--line); border-radius: 10px; margin-bottom: 16px; }
-  .card h2 { margin: 0; padding: 12px 16px; font-size: 15px; border-bottom: 1px solid var(--line);
-             display: flex; align-items: center; justify-content: space-between; }
-  .chip { font-size: 12px; font-weight: 600; border-radius: 999px; padding: 2px 10px; }
-  .chip.on { background: #e7f6ec; color: #16652f; }
-  .chip.off { background: #f1eef7; color: var(--muted); }
-  .card .body { padding: 12px 16px 16px; }
-  .field { margin-bottom: 12px; }
-  .field label { display: block; font-weight: 600; font-size: 13px; margin-bottom: 2px; }
-  .field .desc { font-size: 12.5px; color: var(--muted); margin-bottom: 4px; }
-  .field input { width: 100%; padding: 8px 10px; border: 1px solid var(--line); border-radius: 6px;
-                 font: inherit; }
-  .field input:focus { outline: 2px solid var(--accent); border-color: transparent; }
-  .req { color: #9c2121; }
-  button { background: var(--accent); color: #fff; border: 0; border-radius: 6px;
-           padding: 9px 18px; font: inherit; font-weight: 600; cursor: pointer; }
-  button:disabled { opacity: 0.5; cursor: default; }
+  .card { margin-bottom: 16px; }
   #status { margin-left: 12px; color: var(--muted); }
+  #manifest-cards { margin-top: 32px; }
+  .ro-pre { white-space: pre-wrap; word-break: break-word; margin: 8px 0 0; }
+  .ro-item { margin-bottom: 12px; }
+  .ro-item:last-child { margin-bottom: 0; }
+  details summary { cursor: pointer; }
 </style>
 </head>
 <body>
-<header><a href="/">alashi</a> <span>/</span> <strong id="title"></strong> <span>settings</span></header>
-<main>
+<header class="topbar"><a href="/">alashi</a> <span>/</span> <strong id="title"></strong> <span>settings</span></header>
+<main class="narrow">
   <div id="banner" class="banner" hidden></div>
   <div id="cards"></div>
-  <button id="save">Save changes</button><span id="status"></span>
+  <button id="save" class="primary">Save changes</button><span id="status"></span>
+  <div id="manifest-cards"></div>
 </main>
 <script>
 const APP = ${JSON.stringify(name)};
@@ -650,8 +634,36 @@ function displayValue(value) {
   return typeof value === 'string' ? value : value === undefined ? '' : JSON.stringify(value);
 }
 
+const ACRONYMS = new Set(['url', 'uri', 'api', 'id', 'ip', 'db', 'ssl', 'tls', 'ttl', 'http', 'https']);
+
+function labelFor(key, decl) {
+  if (decl.label) return decl.label;
+  const words = key
+    .replace(/([a-z0-9])([A-Z])/g, '$1 $2')
+    .replace(/[_-]+/g, ' ')
+    .toLowerCase()
+    .split(' ');
+  return words
+    .map((w, i) => (ACRONYMS.has(w) ? w.toUpperCase() : i === 0 ? w.charAt(0).toUpperCase() + w.slice(1) : w))
+    .join(' ');
+}
+
 function field(key, decl, data) {
   const secret = decl.secret === true;
+  const isBool = !secret &&
+    (typeof decl.default === 'boolean' || typeof data.values[key] === 'boolean');
+  if (isBool) {
+    const input = el('input', {
+      type: 'checkbox',
+      onchange: () => state.dirty.set(key, { secret: false, input }),
+    });
+    input.checked = data.values[key] === true;
+    const labelChildren = [input, document.createTextNode(labelFor(key, decl))];
+    if (decl.required) labelChildren.push(el('span', { class: 'req', text: ' *' }));
+    const parts = [el('label', { class: 'check' }, labelChildren)];
+    if (decl.description) parts.push(el('div', { class: 'desc', text: decl.description }));
+    return el('div', { class: 'field' }, parts);
+  }
   const isSet = secret ? data.secretsSet.includes(key) : data.values[key] !== undefined;
   const input = el('input', {
     type: secret ? 'password' : 'text',
@@ -659,7 +671,7 @@ function field(key, decl, data) {
     placeholder: secret && isSet ? '(set — type to replace)' : '',
     oninput: () => state.dirty.set(key, { secret, input }),
   });
-  const labelChildren = [document.createTextNode(key)];
+  const labelChildren = [document.createTextNode(labelFor(key, decl))];
   if (decl.required) labelChildren.push(el('span', { class: 'req', text: ' *' }));
   const parts = [el('label', {}, labelChildren)];
   if (decl.description) parts.push(el('div', { class: 'desc', text: decl.description }));
@@ -694,12 +706,27 @@ function render(data) {
   const cards = document.getElementById('cards');
   cards.replaceChildren();
   const integrationKeys = new Set(data.integrations.flatMap((i) => i.configKeys));
-  const generalKeys = Object.keys(data.schema).filter((k) => !integrationKeys.has(k));
-  if (generalKeys.length > 0) cards.append(card('General', generalKeys, data, undefined));
+
+  // Non-integration keys, sectioned by their declared group ("General" first).
+  const sections = new Map();
+  for (const key of Object.keys(data.schema)) {
+    if (integrationKeys.has(key)) continue;
+    const title = data.schema[key].group ?? 'General';
+    if (!sections.has(title)) sections.set(title, []);
+    sections.get(title).push(key);
+  }
+  if (sections.has('General')) cards.append(card('General', sections.get('General'), data, undefined));
+  for (const [title, keys] of sections) {
+    if (title !== 'General') cards.append(card(title, keys, data, undefined));
+  }
+
+  // Integration cards, titled by the keys' shared group when declared.
   for (const integration of data.integrations) {
     if (integration.configKeys.length === 0) continue;
+    const groups = new Set(integration.configKeys.map((k) => data.schema[k]?.group).filter(Boolean));
+    const title = groups.size === 1 ? [...groups][0] : integration.name;
     cards.append(card(
-      integration.name + (integration.optional ? ' (optional integration)' : ''),
+      title + (integration.optional ? ' (optional integration)' : ''),
       integration.configKeys, data, integration.configured,
     ));
   }
@@ -708,8 +735,83 @@ function render(data) {
   }
 }
 
+function roCard(title, children) {
+  return el('div', { class: 'card' }, [
+    el('h2', { text: title }),
+    el('div', { class: 'body' }, children),
+  ]);
+}
+
+function renderManifest(m) {
+  const root = document.getElementById('manifest-cards');
+  root.replaceChildren();
+  const cards = [];
+
+  const about = [el('div', { class: 'desc', text: 'Version ' + m.version + (m.model ? ' · model: ' + m.model : '') })];
+  if (m.description) about.unshift(el('div', { text: m.description }));
+  cards.push(roCard('About', about));
+
+  if (m.instructions) {
+    cards.push(roCard('Instructions', [el('pre', { class: 'ro-pre', text: m.instructions })]));
+  }
+
+  const agentNames = Object.keys(m.agents);
+  if (agentNames.length > 0) {
+    cards.push(roCard('Agents', agentNames.map((name) => {
+      const a = m.agents[name];
+      const meta = [a.model && 'model: ' + a.model, a.tools && 'tools: ' + a.tools.join(', ')]
+        .filter(Boolean).join(' · ');
+      const body = meta ? [el('div', { class: 'desc', text: meta })] : [];
+      body.push(el('pre', { class: 'ro-pre', text: a.prompt }));
+      return el('details', { class: 'ro-item' }, [
+        el('summary', {}, [el('strong', { text: name }), document.createTextNode(' — ' + a.description)]),
+        ...body,
+      ]);
+    })));
+  }
+
+  if (m.skills.length > 0) {
+    cards.push(roCard('Skills', m.skills.map((s) => el('div', { class: 'ro-item' }, [
+      el('code', { text: s.dir + '/' }),
+      el('div', { class: 'desc', text: s.entries.length ? s.entries.join(', ') : '(directory not found or empty)' }),
+    ]))));
+  }
+
+  if (m.mcpServers.length > 0) {
+    cards.push(roCard('MCP servers', m.mcpServers.map((s) => el('div', { class: 'ro-item' }, [
+      el('strong', { text: s.name }),
+      document.createTextNode(' (' + s.type + (s.optional ? ', optional' : '') + ') '),
+      el('span', { class: 'chip ' + (s.configured ? 'on' : 'off'),
+                   text: s.configured ? 'configured' : 'not configured' }),
+      el('div', { class: 'desc', text: s.type === 'stdio' ? s.command : s.url }),
+    ]))));
+  }
+
+  if (m.allowedTools.length > 0) {
+    cards.push(roCard('Allowed tools', m.allowedTools.map((t) =>
+      el('div', {}, [el('code', { text: t })]))));
+  }
+
+  if (m.jobs.length > 0) {
+    cards.push(roCard('Jobs', m.jobs.map((j) => el('div', { class: 'ro-item' }, [
+      el('strong', { text: j.name }),
+      el('code', { text: ' ' + j.schedule }),
+      ...(j.description ? [el('div', { class: 'desc', text: j.description })] : []),
+    ]))));
+  }
+
+  root.append(
+    el('h1', { text: 'App definition' }),
+    el('p', { class: 'subtitle', text: 'Declared by the app; read-only.' }),
+    ...cards,
+  );
+}
+
 async function load() {
-  const res = await fetch('/api/apps/' + APP + '/config');
+  const [res, manRes] = await Promise.all([
+    fetch('/api/apps/' + APP + '/config'),
+    fetch('/api/apps/' + APP + '/manifest'),
+  ]);
   if (!res.ok) {
     document.getElementById('banner').hidden = false;
     document.getElementById('banner').className = 'banner warn';
@@ -717,13 +819,14 @@ async function load() {
     return;
   }
   render(await res.json());
+  if (manRes.ok) renderManifest(await manRes.json());
 }
 
 document.getElementById('save').addEventListener('click', async () => {
   const body = {};
   for (const [key, { secret, input }] of state.dirty) {
     if (secret && input.value === '') continue; // untouched secret: keep as-is
-    body[key] = parseInput(input.value);
+    body[key] = input.type === 'checkbox' ? input.checked : parseInput(input.value);
   }
   if (Object.keys(body).length === 0) return;
   const status = document.getElementById('status');
@@ -768,9 +871,15 @@ function escapeHtml(value) {
 *                               (omit conversationId to start a new conversation; the
 *                                id is echoed in the x-conversation-id response header)
 *   GET  /api/apps/:name/chat/conversations          conversations, most recent first
+*   POST /api/apps/:name/chat/conversations  { sessionId?, title? } -> create a conversation,
+*                               optionally adopting an existing provider session (e.g. an
+*                               app-run investigation) so chat continues where it left off
 *   GET  /api/apps/:name/chat/:conversationId/history  past turns from the provider transcript
 *   GET  /api/apps/:name/jobs           manifest-declared jobs with schedule/status
 *   POST /api/apps/:name/jobs/:job/run  trigger a job now (409 while already running)
+*   GET  /api/apps/:name/manifest       read-only app definition: instructions, agents,
+*                                       skills (with dir contents), allowed tools,
+*                                       MCP servers (with configured state), jobs, model
 *   GET  /api/apps/:name/config         declared config schema + merged values
 *                                       (secrets masked) + readiness/integrations
 *   PUT  /api/apps/:name/config         merge keys into the per-app config layer
@@ -868,6 +977,30 @@ function createServer(store, provider) {
 	}
 	const app = new Hono();
 	app.onError((err, c) => c.json({ error: String(err) }, 500));
+	const assetsDir = fileURLToPath(new URL("../assets", import.meta.url));
+	app.get("/assets/*", async (c) => {
+		let rest;
+		try {
+			rest = decodeURIComponent(c.req.path.slice(8));
+		} catch {
+			return c.json({ error: "Not found" }, 404);
+		}
+		const filePath = resolve(assetsDir, rest);
+		if (!filePath.startsWith(assetsDir + sep)) return c.json({ error: "Not found" }, 404);
+		try {
+			const body = await readFile(filePath);
+			const type = CONTENT_TYPES[extname(filePath)] ?? "application/octet-stream";
+			return new Response(new Uint8Array(body), {
+				status: 200,
+				headers: {
+					"content-type": type,
+					"cache-control": "public, max-age=300"
+				}
+			});
+		} catch {
+			return c.json({ error: "Not found" }, 404);
+		}
+	});
 	/** Readiness for the dashboard badge; undefined when the app fails to load. */
 	async function readiness(name) {
 		try {
@@ -883,15 +1016,38 @@ function createServer(store, provider) {
 		const rows = (await Promise.all(records.map(async (r) => {
 			const name = escapeHtml(r.name);
 			const status = await readiness(r.name);
-			const badge = status && !status.ready ? ` <a href="/settings/${name}" style="color:#9c2121;font-weight:600">needs setup</a>` : "";
-			return `<li><a href="/app/${name}/">${name}</a> <small>v${escapeHtml(r.version)} (${escapeHtml(r.source.type)})</small> <a href="/settings/${name}"><small>settings</small></a>${badge}</li>`;
+			const badge = !status ? "<span class=\"badge err\">failed to load</span>" : status.ready ? "<span class=\"badge ok\">ready</span>" : `<a href="/settings/${name}"><span class="badge err">needs setup</span></a>`;
+			return `<tr>
+  <td><a href="/app/${name}/">${name}</a></td>
+  <td class="muted">v${escapeHtml(r.version)}</td>
+  <td class="muted">${escapeHtml(r.source.type)}</td>
+  <td>${badge}</td>
+  <td style="text-align:right"><a href="/settings/${name}">settings</a></td>
+</tr>`;
 		}))).join("\n");
+		const body = records.length === 0 ? "<div class=\"empty\">No apps installed. Run <code>alashi install &lt;name&gt;</code>.</div>" : `<table>
+<thead><tr><th>App</th><th>Version</th><th>Source</th><th>Status</th><th></th></tr></thead>
+<tbody>
+${rows}
+</tbody>
+</table>`;
 		return c.html(`<!doctype html>
 <html lang="en">
-<head><meta charset="utf-8"><title>alashi</title></head>
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<title>alashi</title>
+<link rel="stylesheet" href="/assets/v1/system.css">
+</head>
 <body>
-<h1>alashi</h1>
-${records.length === 0 ? "<p>No apps installed. Run <code>alashi install &lt;name&gt;</code>.</p>" : `<ul>\n${rows}\n</ul>`}
+<header class="topbar"><strong>alashi</strong></header>
+<main class="narrow">
+<h1>Apps</h1>
+<p class="subtitle">Installed apps and their status.</p>
+<div class="panel">
+${body}
+</div>
+</main>
 </body>
 </html>
 `);
@@ -908,6 +1064,29 @@ ${records.length === 0 ? "<p>No apps installed. Run <code>alashi install &lt;nam
 		const { conversations } = await getChatState(name);
 		return c.json({ conversations: [...conversations].sort((a, b) => b.updatedAt.localeCompare(a.updatedAt)) });
 	});
+	app.post("/api/apps/:name/chat/conversations", async (c) => {
+		const name = c.req.param("name");
+		if (!await getApp(name)) return c.json({ error: `App "${name}" is not installed` }, 404);
+		let sessionId;
+		let title;
+		try {
+			({sessionId, title} = await c.req.json());
+		} catch {
+			return c.json({ error: "Body must be JSON" }, 400);
+		}
+		if (sessionId !== void 0 && (typeof sessionId !== "string" || sessionId.length === 0)) return c.json({ error: "\"sessionId\" must be a non-empty string" }, 400);
+		if (title !== void 0 && typeof title !== "string") return c.json({ error: "\"title\" must be a string" }, 400);
+		const state = await getChatState(name);
+		const convo = {
+			id: randomUUID(),
+			title: (title ?? "").slice(0, 80) || "New conversation",
+			updatedAt: (/* @__PURE__ */ new Date()).toISOString(),
+			...sessionId !== void 0 && { sessionId }
+		};
+		state.conversations.push(convo);
+		await store.writeChatState(name, state);
+		return c.json({ conversation: convo }, 201);
+	});
 	app.get("/api/apps/:name/chat/:conversationId/history", async (c) => {
 		const name = c.req.param("name");
 		if (!await getApp(name)) return c.json({ error: `App "${name}" is not installed` }, 404);
@@ -927,6 +1106,49 @@ ${records.length === 0 ? "<p>No apps installed. Run <code>alashi install &lt;nam
 			session.then((s) => s.close()).catch(() => void 0);
 		}
 	}
+	app.get("/api/apps/:name/manifest", async (c) => {
+		const name = c.req.param("name");
+		const running = await getApp(name);
+		if (!running) return c.json({ error: `App "${name}" is not installed` }, 404);
+		const { manifest } = running;
+		const { merged, status } = await resolveAppConfig(store, manifest);
+		const repoDir = store.appRepoDir(name);
+		const skills = await Promise.all(manifest.skills.map(async (dir) => {
+			let entries = [];
+			try {
+				entries = (await readdir(resolve(repoDir, dir))).sort();
+			} catch {}
+			return {
+				dir,
+				entries
+			};
+		}));
+		const configured = new Map(status.integrations.map((i) => [i.name, i.configured]));
+		const mcpServers = Object.entries(manifest.mcpServers).map(([server, decl]) => ({
+			name: server,
+			..."command" in decl ? {
+				type: "stdio",
+				command: [decl.command, ...decl.args ?? []].join(" ")
+			} : {
+				type: decl.type,
+				url: decl.url
+			},
+			optional: decl.optional === true,
+			configured: configured.get(server) ?? true
+		}));
+		return c.json({
+			name: manifest.name,
+			version: manifest.version,
+			...manifest.description !== void 0 && { description: manifest.description },
+			...manifest.instructions !== void 0 && { instructions: manifest.instructions },
+			...typeof merged.model === "string" && { model: merged.model },
+			agents: manifest.agents,
+			skills,
+			allowedTools: manifest.permissions.allowedTools,
+			mcpServers,
+			jobs: manifest.jobs
+		});
+	});
 	app.get("/api/apps/:name/config", async (c) => {
 		const name = c.req.param("name");
 		const running = await getApp(name);
@@ -1198,4 +1420,4 @@ var Store = class {
 //#endregion
 export { checkSdkCompatibility as _, installApp as a, addRegistry as c, removeRegistry as d, resolveApp as f, loadApp as g, updateSource as h, resolveAppConfig as i, readCachedIndex as l, parseSourceArg as m, createServer as n, removeApp as o, fetchSource as p, buildAppContext as r, updateApp as s, Store as t, refreshRegistry as u };
 
-//# sourceMappingURL=store-CwgDCAAx.mjs.map
+//# sourceMappingURL=store-Ckx0oLB6.mjs.map