@anhlp/alp-paseo 0.0.0-beta.2 → 0.0.1-beta.4

package/NOTICE

@@ -12,15 +12,11 @@ This package includes software from Paseo (https://github.com/getpaseo/paseo),
 Copyright (c) 2025-present Mohamed Boudra, licensed under the Apache License,
 Version 2.0. Third-party components incorporated into Paseo remain licensed
 under the licenses provided by their respective copyright holders.
+LICENSE.paseo.txt is Paseo's licence as Paseo ships it.
 
-All of it is taken from Paseo at commit
+Except for provider-prompt.ts noted below, the following is taken from Paseo at commit
 b63a325be3d3ae444fbd38815658cca01ab1288f (0.11.2) and changed for ALP:
 
-* server/dist/web-app: Paseo's web app (packages/app), built with the patches
-  in ALP's paseo-web/patches. Its NOTICE.txt says what they change,
-  LICENSE.paseo.txt is Paseo's licence as Paseo ships it, and
-  THIRD-PARTY-NOTICES.txt reproduces the licences of the third-party
-  packages bundled into the app.
 * server/dist: code from Paseo's daemon (packages/server/src/server), each
   source file in ALP's integrations/paseo/server/paseo saying what changed:
   - agent/chat-search/index.ts (chat-search.ts)
@@ -32,3 +28,10 @@ b63a325be3d3ae444fbd38815658cca01ab1288f (0.11.2) and changed for ALP:
   - utils/diff-highlighter.ts, its unified-diff parser (checkout.ts)
 * server/dist also bundles Paseo's @getpaseo/protocol and @getpaseo/relay;
   see server/dist/THIRD-PARTY-NOTICES.txt.
+
+* server/provider-prompt.ts adapts renderPromptAttachmentAsText from
+  packages/server/src/server/agent/prompt-attachments.ts at
+  cafe4b01c8522ff39560241c5deb01427dc8dc5b (0.12.0), identical at
+  ab10a6694ccf068959d1a6b67b6c915e21a9fe91 (0.11.1). It renders textual
+  context as user text, preserves images and uploads for their dedicated paths,
+  and applies the protocol's GitHub default when forge is omitted.

package/README.md

@@ -34,24 +34,43 @@ as a full screen from the chat:
   lists the open tasks. Tapping one opens it; **All tasks** opens the board.
 - `/alp-tasks` opens the board, and `/alp-tasks <id>` opens that task.
 
-## Host settings on the ALP web app
-
-Settings → Host exposes **Templates**, **Agents**, **Skills**, **Hooks**, and
-**MCP servers** directly. Templates opens the Phở/Cafe team editor for models,
-members, delegation, supervisor, and house rules. Changes are saved in the selected
-host's ALP library; saving a built-in entry creates an override. The ALP plugin
-settings screen and the ALP project panel remain available for library management
-and project overrides.
+## Host settings
+
+The ALP plugin settings screen and the ALP project panel manage the host's ALP
+library (teams, agents, skills, hooks, MCP servers) and project overrides; saving a
+built-in entry creates an override. ALP's patched build of Paseo's web app, which
+also showed these under Settings → Host, was removed (t-55ce.3). ALP's own web app
+(`alp web`) shows the library under Settings, within the limits in
+[web.md](https://github.com/phucanh08/alp/blob/main/docs/alp/web.md).
+
+## Managed worktree removal through the web facade
+
+The facade accepts Paseo's native `paseo_worktree_archive_request`. Set
+`scope: "worktree"` to remove an ALP-managed user worktree, targeting its
+`workspaceId` or absolute `worktreePath` (or `repoRoot` and `branchName`). If
+multiple target fields are supplied they must agree. A workspace archived earlier
+can still be targeted explicitly. Removal retains the Git branch.
+
+The daemon's `workspace.worktree.remove` is the sole deletion authority. It checks
+the creator, approved mapping, checkout identity, dirty files, runtime admission,
+leases, assignments and saved session history. A refusal leaves workspace metadata
+and checkout files intact; sessions are never archived to bypass these checks.
+External checkouts cannot be deleted. Older daemons return an upgrade error.
+
+Omitting `scope`, choosing `scope: "workspace"`, or using
+`archive_workspace_request` only archives the workspace. As in supported Paseo
+0.11.1–0.12.x, the legacy `deleteWorktreeFromDisk` flag does not request deletion.
+This follows [Paseo's native archive contract](https://github.com/getpaseo/paseo/blob/b63a325be3d3ae444fbd38815658cca01ab1288f/packages/server/src/server/worktree/commands.ts#L121).
 
 ## Install
 
-This is the beta `0.0.0-beta.2` (until it is on npm, `@beta` installs `0.0.0-beta.1`; check with
+This is the beta `0.0.1-beta.3` (until it is on npm, `@beta` installs `0.0.0-beta.2`, which Paseo 0.12 refuses; check with
 `npm view @anhlp/alp-paseo dist-tags`); name it when you install (`@beta`, or
-exactly `@0.0.0-beta.2`). See the
+exactly `@0.0.1-beta.3`). See the
 [release notes](https://github.com/phucanh08/alp/blob/main/docs/alp/beta-release-notes.md) and
 [install, upgrade and removal steps](https://github.com/phucanh08/alp/blob/main/docs/alp/beta-install.md).
 
-Requires Paseo `>=0.11.1 <0.12.0`, Node.js 22 (22.12 or later) or 24 on Linux or macOS
+Requires Paseo `>=0.11.1 <1.0.0` (the published `0.0.1-beta.3` declares `<0.13.0`, so 0.11.x or 0.12.x), Node.js 22 (22.12 or later) or 24 on Linux or macOS
 (Windows and Node.js 26 are experimental), and an authenticated native Codex or Claude Code
 executable on PATH.
 
@@ -98,6 +117,20 @@ reports that alpd.js was not found, run `alp daemon start` once, or set
 environment. `ALP_HOME` (default `~/.alp`) selects the daemon's directory and
 must match between the CLI and Paseo.
 
+The provider offers images when alpd's connection handshake (or `daemon.hello`
+for an embedded connection) lists `prompt.images`, and Paseo requests them.
+Individual sessions still validate runtime support and image limits. The offer
+is fixed for the provider connection; a replacement backend validates each prompt.
+Missing or failed capability discovery leaves images unavailable.
+
+Forge issues and change requests, legacy GitHub attachments, reviews, and text
+context are sent as ordinary user text using Paseo's attachment rendering. Bodies
+and review lines retain their content and order; context metadata grants no system
+authority. Uploaded files continue through alpd's attachment store. Native command prompts
+(`{ type: "command", name, arguments }`) are unsupported: the provider does not
+advertise `prompt.command` and rejects them before waking or contacting a session.
+It does not translate commands into prose.
+
 Closing an agent in Paseo stops watching it; work in progress finishes in
 alpd. Use interrupt to stop work. You talk with main: when main asks you a
 question with `alp_ask`, Paseo shows it as a question prompt; your answer, or a
@@ -129,7 +162,7 @@ for existing projects, model selection, permissions, and runtime limitations.
 
 ## Remote mode (deferred, not in the beta)
 
-Remote mode is **not part of the beta (`0.0.0-beta.2`)**: it needs `@anhlp/alp-gateway`, which is not
+Remote mode is **not part of the beta (`0.0.1-beta.3`)**: it needs `@anhlp/alp-gateway`, which is not
 published. The text below describes the code in this repository for development only.
 
 To use ALP running on another machine, start the daemon process that loads this plugin with
@@ -151,16 +184,21 @@ npm run test -w @anhlp/alp-paseo
 npm pack -w @anhlp/alp-paseo
 ```
 
-`integrations/paseo` owns the plugin client, server, shared types and manifest. The build writes the self-contained server bundles (including the integration entry `server/dist/main.js` and `server/dist/alpd.js`) and the web app to `server/dist`; only the plugin package ships these Paseo artifacts. The npm package is `@anhlp/alp-paseo` (`alp-paseo-plugin` up to 0.10.0); the Paseo plugin ID remains `alp-provider`.
+`integrations/paseo` owns the plugin client, server, shared types and manifest. The build writes the self-contained server bundles (including the integration entry `server/dist/main.js` and `server/dist/alpd.js`) to `server/dist`; only the plugin package ships these Paseo artifacts. It no longer builds or ships Paseo's web app (removed in t-55ce.3); the package ships Paseo's licence as `LICENSE.paseo.txt` for the code it takes from Paseo. The npm package is `@anhlp/alp-paseo` (`alp-paseo-plugin` up to 0.10.0); the Paseo plugin ID remains `alp-provider`.
 
-## Optional web installation
+<a id="optional-web-installation"></a>
 
-`@anhlp/alp` and the six core packages install without Paseo. To use the web UI:
+## Optional standalone integration (relay pairing)
+
+`@anhlp/alp` and the six core packages install without Paseo. `alp web` no longer needs this
+package: from the release after `0.0.1-beta.3` it runs the CLI's own `alp-web` service
+([web.md](https://github.com/phucanh08/alp/blob/main/docs/alp/web.md)). This package's standalone
+integration (integration `paseo`) is what pairs Paseo's app on another device through the relay:
 
 ```sh
 npm install -g @anhlp/alp@beta @anhlp/alp-paseo@beta
-alp-web-integration --register
-alp web --print
+alp-paseo-integration --register
+alp web pair --on       # starts the integration, turns the relay on, prints the link and password
 alp web pair --off
 ```
 
@@ -169,17 +207,40 @@ React Native are optional peers that the Paseo app provides, so npm does not ins
 Do not use `--legacy-peer-deps` for a standalone installation unless you supply the required
 peers explicitly. The binary is also discoverable on PATH, so registration is optional
 for a global install. For a local install, run
-`./node_modules/.bin/alp-web-integration --register` with the intended `ALP_HOME`.
+`./node_modules/.bin/alp-paseo-integration --register` with the intended `ALP_HOME`.
+
+A plugin directory managed by `paseo plugin add npm:…` is not a standalone web
+installation. Paseo installs it without peers and supplies `@getpaseo/plugin` through
+its plugin loader. Running `node <managed-plugin>/server/dist/main.js --register`
+directly bypasses that loader and can fail with `ERR_MODULE_NOT_FOUND` for
+`@getpaseo/plugin`; this invocation from the managed directory is unsupported
+([#154](https://github.com/phucanh08/alp/issues/154)). Use the normal npm installation
+and `alp-paseo-integration --register` shown above. For a local npm installation with
+required peers, use `./node_modules/.bin/alp-paseo-integration --register` with the
+intended `ALP_HOME`. Registration records the entry path; it does not install missing
+peers or turn a host-managed plugin into a standalone installation.
+
 Adding the plugin to a Paseo host (`npm:` from beta.2; by path in beta.1, see above) remains
 available independently of this standalone web process.
 
 Core upgrades no longer update a bundled plugin: upgrade `@anhlp/alp-paseo`
 separately, and re-register if its installation location changes. Keep existing
-`web` settings, `web.json` token/server identity and ALP session storage.
-`alp web`, `alp web --print`, `alp web pair --on/--off`, `ALP_WEB_INTEGRATION`,
-`ALP_INTEGRATION_ENTRY`, `ALP_DAEMON_ENTRY`, `ALP_SUPERVISE` and `ALP_HOME` retain
-their meanings. Without the plugin, web commands explain how to install it;
-CLI, daemon, IPC and ACP remain usable.
+`web` settings and ALP session storage. The integration is named `paseo`: it keeps its token and
+server identity in `paseo.json` (carried over once from a `web.json` written before the rename),
+locks `integrations/paseo.lock`, registers `integrations/paseo.json` and binds a port the system
+picks, since `web.port` and `web.json` now belong to `alp-web`. `alp-web-integration` remains an
+alias of `alp-paseo-integration` for one release, and a home that has only the old
+`integrations/web.json` descriptor still starts it, with a hint to re-register.
+When Paseo's app asks for a password, give it the one `alp web pair` prints.
+`ALP_PASEO_INTEGRATION` names the integration's entry; `ALP_WEB_INTEGRATION` is read for it too,
+after `ALP_PASEO_INTEGRATION`, for one release, and never selects what `alp web` runs.
+`alp web pair --on/--off`, `ALP_INTEGRATION_ENTRY`, `ALP_DAEMON_ENTRY`, `ALP_SUPERVISE` and
+`ALP_HOME` retain their meanings. `alp web` and `alp web --print` now open the CLI's `alp-web`
+service; this package no longer has a web app, and its listener answers plain HTTP with 404 and
+keeps only the token-guarded Paseo socket. The first `alp web` stops a pre-rename integration
+that still holds `integrations/web.lock` (only a provable same-user, same-boot owner). Without the
+plugin, `alp web pair` explains how to install it; CLI, daemon, IPC, ACP and `alp web` remain
+usable.
 
 The public provider (`alp`), plugin ID (`alp-provider`), exports (`.`, `/main`,
 `/web`, `/paseo/*`, `/panel/*`), Phở/Cafe sessions, streaming/cancel, delegation,
@@ -188,6 +249,5 @@ daemon supervision/reconnection are unchanged. `release:tarball-check` runs the
 existing provider, team, human, web, relay and transport regressions against a
 separately installed plugin and real SDK peers.
 
-For source builds, `npm run build:paseo` builds the server; `npm run build:web`
-builds the pinned web app. Plugin prepack verifies its own web artifact. Neither
-step is required by core build/prepack.
+For source builds, `npm run build:paseo` builds the server (plugin prepack runs it). It
+is not required by core build/prepack.

package/client/library.tsx

@@ -55,7 +55,7 @@ export const LANGUAGES = [
   { label: 'Deutsch', value: 'German' }, { label: 'Español', value: 'Spanish' },
 ];
 /** librarySkills: for agents, the skills the library gives it by name (role-skills.json). */
-type Entry = { kind: Kind; name: string; source: string; overrides?: string; content: Content; revision: string | null; usedBy: string[]; librarySkills?: string[] };
+type Entry = { kind: Kind; name: string; source: string; overrides?: string; content: Content; revision: string | null; usedBy: string[]; librarySkills?: string[]; secrets?: string[] };
 /** `readOnly`: the library can only be looked at from here (ALP remote mode), and why. */
 type Where = { projectRoot: string | null; library: string; readOnly?: { reason: string; unlisted?: string } } | null;
 
@@ -189,7 +189,7 @@ type WorkspaceProps = {
 };
 
 /** The aside's groups: General (the library only), Organisation, Capabilities and Runtimes, each kind with its entries. */
-export function navGroups(scope: Scope, lists: Lists, readOnly = false): NavGroup[] {
+export function navGroups(scope: Scope, lists: Lists): NavGroup[] {
   const groups: NavGroup[] = scope === 'library' ? [{ key: 'General', label: 'General', items: [{ key: 'language', label: 'Language', icon: 'Languages' }] }] : [];
   for (const item of shownIn(scope)) {
     let group = groups.find(candidate => candidate.label === item.group);
@@ -197,8 +197,7 @@ export function navGroups(scope: Scope, lists: Lists, readOnly = false): NavGrou
     const rows = lists[item.kind];
     group.items.push({
       key: item.kind, label: item.title, icon: item.icon, ...(rows ? { count: rows.length } : {}),
-      // A read-only library's entries cannot be opened, so the aside lists kinds only.
-      children: readOnly ? [] : (rows ?? []).map(row => ({ key: row.name, label: row.name, tone: sourceTone(row.source) })),
+      children: (rows ?? []).map(row => ({ key: row.name, label: row.name, tone: sourceTone(row.source) })),
     });
   }
   return groups;
@@ -209,7 +208,7 @@ export function LibraryWorkspace({ theme, compact, scope, where, lists, error, s
   const styles = useMemo(() => makeStyles(theme, compact), [theme, compact]);
   const title = scope === 'library' ? 'ALP library' : 'ALP project';
   const subtitle = scope === 'library' ? where?.library : where?.projectRoot ?? undefined;
-  const groups = navGroups(scope, lists, !!where?.readOnly);
+  const groups = navGroups(scope, lists);
   const onSelect = (kind: string, name?: string) => actions.select(kind === 'language' ? { kind } : { kind: kind as Kind, ...(name ? { name } : {}) });
   if (scope === 'project' && where?.readOnly?.unlisted) {
     return <View style={styles.screen}><Text style={styles.muted}>{where.readOnly.unlisted}</Text></View>;
@@ -221,6 +220,23 @@ export function LibraryWorkspace({ theme, compact, scope, where, lists, error, s
     return <LanguageSettings theme={theme} compact={compact} language={language ?? null} error={error} actions={actions} layout={{ title, subtitle, groups, onSelect, initialCollapsed, embedded }} styles={styles} />;
   }
   const kind = kindOf(selection.kind);
+  if (where?.readOnly && (selection.name || selection.creating)) {
+    // A selection can change before its async get resolves; never label the previous entry as the new one.
+    const viewed = !where.readOnly.unlisted && entry && entry.name === selection.name && entry.kind === selection.kind ? entry : null;
+    return <SideNavLayout theme={theme} compact={compact} title={title} subtitle={subtitle} groups={groups} active={{ item: selection.kind, ...(selection.name ? { child: selection.name } : {}) }} onSelect={onSelect} initialCollapsed={initialCollapsed} embedded={embedded}
+      breadcrumb={[kind.title, selection.name ?? 'Read only']}
+      badges={viewed ? <Pill theme={theme} label={sourceLabel(viewed.source)} tone={sourceTone(viewed.source)} /> : null}
+      actions={<Button theme={theme} icon="ArrowLeft" label={`All ${kind.title.toLowerCase()}`} onPress={() => actions.select({ kind: selection.kind })} />}>
+      <Text style={styles.muted}>{where.readOnly.reason}</Text>
+      {error || where.readOnly.unlisted ? <Text style={styles.muted}>{error ?? where.readOnly.unlisted}</Text> : selection.creating ? <Text style={styles.muted}>Create entries on the ALP host.</Text> : !viewed ? <Text style={styles.muted}>Loading…</Text> : <>
+        {viewed.overrides ? <Text style={styles.small}>Overrides {sourceLabel(viewed.overrides)}.</Text> : null}
+        {viewed.usedBy.length ? <Text style={styles.small}>Used by {viewed.usedBy.join(', ')}.</Text> : null}
+        {viewed.librarySkills?.length ? <Text style={styles.small}>Library skills: {viewed.librarySkills.join(', ')}.</Text> : null}
+        {viewed.secrets?.length ? <Text style={styles.muted}>Secrets hidden: {viewed.secrets.join(', ')}. Secret markers stand for values kept on the ALP host.</Text> : null}
+        <Text selectable style={styles.small}>{JSON.stringify(viewed.content, null, 2)}</Text>
+      </>}
+    </SideNavLayout>;
+  }
   if (selection.name || selection.creating) {
     return <EntryEditor key={`${selection.kind}/${selection.name ?? 'new'}/${entry?.revision ?? 'new'}/${(entry?.librarySkills ?? []).join(',')}`} theme={theme} compact={compact} scope={scope} kind={selection.kind} entry={selection.creating ? null : entry}
       lists={lists} actions={actions} layout={{ title, subtitle, groups, onSelect, initialCollapsed, embedded }} />;
@@ -306,7 +322,7 @@ export function KindOverview({ theme, compact, scope, kind, rows, error, where,
         <View style={styles.table}>
           {shown.map((row, index) => (
             <View key={row.name} style={[styles.tableRow, index ? styles.tableRowRule : null]}>
-              <Pressable accessibilityRole={readOnly ? undefined : 'button'} accessibilityLabel={`${readOnly ? '' : 'Open '}${one} ${row.name}`} disabled={!!readOnly} onPress={() => actions.select({ kind, name: row.name })} style={styles.rowMain}>
+              <Pressable accessibilityRole="button" accessibilityLabel={`Open ${one} ${row.name}`} onPress={() => actions.select({ kind, name: row.name })} style={styles.rowMain}>
                 <View style={styles.rowTitle}>
                   <Text style={styles.name}>{row.name}</Text>
                   <Pill theme={theme} label={sourceLabel(row.source)} tone={sourceTone(row.source)} />

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@anhlp/alp-paseo",
-  "version": "0.0.0-beta.2",
+  "version": "0.0.1-beta.4",
   "type": "module",
   "files": [
     "paseo-plugin.json",
@@ -9,27 +9,28 @@
     "client",
     "shared",
     "server/dist",
-    "NOTICE"
+    "NOTICE",
+    "LICENSE.paseo.txt"
   ],
   "dependencies": {
     "@anthropic-ai/claude-agent-sdk": "0.3.292",
     "@anthropic-ai/sdk": "0.131.0",
     "@modelcontextprotocol/sdk": "1.32.1",
     "zod": "4.4.3",
-    "@anhlp/alp-protocol": "0.0.0-beta.2",
-    "@anhlp/alp-core": "0.0.0-beta.2",
-    "@anhlp/alp-runtime": "0.0.0-beta.2",
-    "@anhlp/alp-daemon": "0.0.0-beta.2",
-    "@anhlp/alp-client": "0.0.0-beta.2",
+    "@anhlp/alp-protocol": "0.0.1-beta.4",
+    "@anhlp/alp-core": "0.0.1-beta.4",
+    "@anhlp/alp-runtime": "0.0.1-beta.4",
+    "@anhlp/alp-daemon": "0.0.1-beta.4",
+    "@anhlp/alp-client": "0.0.1-beta.4",
     "ws": "^8.22.0"
   },
   "peerDependencies": {
-    "@getpaseo/plugin": ">=0.11.1 <0.12.0",
+    "@getpaseo/plugin": ">=0.11.1 <1.0.0",
     "react": ">=19 <20",
     "react-native": ">=0.81 <0.82",
-    "@getpaseo/client": ">=0.11.1 <0.12.0",
-    "@getpaseo/protocol": ">=0.11.1 <0.12.0",
-    "@getpaseo/relay": ">=0.11.1 <0.12.0",
+    "@getpaseo/client": ">=0.11.1 <1.0.0",
+    "@getpaseo/protocol": ">=0.11.1 <1.0.0",
+    "@getpaseo/relay": ">=0.11.1 <1.0.0",
     "ws": "*"
   },
   "peerDependenciesMeta": {
@@ -62,9 +63,10 @@
   "scripts": {
     "build": "node ../../scripts/build-workspace.mjs paseo",
     "test": "node ../../scripts/test-package.mjs paseo",
-    "prepack": "npm run build && node ../../scripts/check-web-app.mjs"
+    "prepack": "npm run build"
   },
   "bin": {
+    "alp-paseo-integration": "server/dist/main.js",
     "alp-web-integration": "server/dist/main.js"
   },
   "exports": {
@@ -88,11 +90,14 @@
     }
   },
   "devDependencies": {
-    "@getpaseo/client": "0.11.1",
-    "@getpaseo/plugin": "0.11.1",
-    "@getpaseo/protocol": "0.11.2",
-    "@getpaseo/relay": "0.11.1",
+    "@getpaseo/client": "0.12.0",
+    "@getpaseo/plugin": "0.12.0",
+    "@getpaseo/protocol": "0.12.0",
+    "@getpaseo/relay": "0.12.0",
     "esbuild": "0.25.12",
     "react-dom": "19.1.0"
+  },
+  "optionalDependencies": {
+    "node-pty": "1.2.0-beta.15"
   }
 }

package/paseo-plugin.json

@@ -1,5 +1,5 @@
 {
   "id": "alp-provider",
   "description": "Run filesystem-defined ALP agents",
-  "requirements": { "paseo": ">=0.11.1 <0.12.0" }
+  "requirements": { "paseo": ">=0.11.1 <1.0.0" }
 }

package/server/dist/THIRD-PARTY-NOTICES.txt

@@ -4,7 +4,7 @@ The bundled files of this package include code from the packages below; each kee
 its own licence, reproduced here.
 
 ================================================================================
-@getpaseo/protocol@0.11.2 (Apache-2.0)
+@getpaseo/protocol@0.12.0 (Apache-2.0)
 ================================================================================
 
 Copyright (c) 2025-present Mohamed Boudra
@@ -220,7 +220,7 @@ Portions of this software are licensed as follows:
    limitations under the License.
 
 ================================================================================
-@getpaseo/relay@0.11.1 (Apache-2.0)
+@getpaseo/relay@0.12.0 (Apache-2.0)
 ================================================================================
 
 Copyright (c) 2025-present Mohamed Boudra