@anhlp/alp 0.0.1-beta.3 → 0.0.1-beta.4

package/packages/cli/dist/backup.js

@@ -7,7 +7,7 @@ import { acquireDaemonLock, alpHome, assertPrivateDirectory, daemonPaths, lockAl
 import { daemonHeld, holdDaemon, releaseHold } from "@anhlp/alp-client/supervise";
 import { start, stop } from "./daemon.js";
 import { UsageError } from "./usage.js";
-var VERSION = true ? "0.0.1-beta.3" : "dev";
+var VERSION = true ? "0.0.1-beta.4" : "dev";
 var BY = `alp ${VERSION}`;
 var size = (bytes) => bytes >= 1024 * 1024 ? `${(bytes / 1024 / 1024).toFixed(1)} MB` : bytes >= 1024 ? `${(bytes / 1024).toFixed(1)} KB` : `${bytes} B`;
 var stamp = () => (/* @__PURE__ */ new Date()).toISOString().replace(/[-:]/g, "").replace(/\.\d+Z$/, "Z");
@@ -138,7 +138,7 @@ async function restoreCommand(args) {
   for (const { root, reason } of result.skipped) console.log(`  skipped ${root}: ${reason}`);
   for (const warning of result.warnings) console.log(`  note: ${warning}`);
   if (result.stateSchema !== null && result.stateSchema !== void 0) console.log("  sessions that were working when the backup was made wait for you; alpd continues none by itself");
-  if (result.safety) console.log(`the data it replaced is in ${result.safety}; alp restore ${result.safety} puts it back`);
+  if (result.safety) console.log(`the data it replaced is in ${result.safety}; alp restore ${result.safety} restores that data with the same workspace authority checks`);
 }
 export {
   backupCommand,

package/packages/cli/dist/build-manifest.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.0.1-beta.3",
+  "version": "0.0.1-beta.4",
   "entries": {
     "packages/cli/dist/alpd.js": {
       "inputs": [
@@ -11,16 +11,19 @@
         "packages/client/src/rpc/framing.js",
         "packages/client/src/rpc/handshake.js",
         "packages/client/src/rpc/reconnect.js",
+        "packages/client/src/rpc/registry.js",
         "packages/client/src/rpc/timers.js",
         "packages/client/src/websocket.js",
         "packages/core/src/adapter.js",
         "packages/core/src/atomic.js",
         "packages/core/src/backup.js",
+        "packages/core/src/beads.js",
         "packages/core/src/delegation.js",
         "packages/core/src/errors.js",
         "packages/core/src/formulas.js",
         "packages/core/src/hook-run.js",
         "packages/core/src/hooks.js",
+        "packages/core/src/index.js",
         "packages/core/src/init.js",
         "packages/core/src/library-edit.js",
         "packages/core/src/library.js",
@@ -40,18 +43,30 @@
         "packages/core/src/teams.js",
         "packages/core/src/template-path.js",
         "packages/core/src/trust.js",
+        "packages/core/src/upgrade.js",
         "packages/core/src/user-settings.js",
+        "packages/core/src/user-worktree.js",
         "packages/core/src/validation.js",
         "packages/core/src/verify.js",
         "packages/core/src/workflow.js",
+        "packages/daemon/src/attachments.ts",
+        "packages/daemon/src/conversation.ts",
         "packages/daemon/src/files.ts",
+        "packages/daemon/src/git.ts",
         "packages/daemon/src/gitignore.ts",
+        "packages/daemon/src/history.ts",
+        "packages/daemon/src/lifecycle.ts",
         "packages/daemon/src/lock.ts",
         "packages/daemon/src/main.ts",
         "packages/daemon/src/operations.ts",
+        "packages/daemon/src/registry.ts",
         "packages/daemon/src/rpc-error.ts",
+        "packages/daemon/src/scheduler.ts",
+        "packages/daemon/src/schedules.ts",
         "packages/daemon/src/server.ts",
         "packages/daemon/src/store.ts",
+        "packages/daemon/src/terminals.ts",
+        "packages/daemon/src/worktrees.ts",
         "packages/protocol/src/contract-v1.js",
         "packages/protocol/src/contract.js",
         "packages/protocol/src/index.ts",
@@ -59,11 +74,15 @@
         "packages/protocol/src/wire.js",
         "packages/runtime/src/acp-transport.ts",
         "packages/runtime/src/antigravity-transport.ts",
+        "packages/runtime/src/assignment-results.ts",
+        "packages/runtime/src/attachments.ts",
         "packages/runtime/src/board-domain.ts",
         "packages/runtime/src/board.ts",
         "packages/runtime/src/catalog.ts",
         "packages/runtime/src/claude-transport.ts",
+        "packages/runtime/src/configure.ts",
         "packages/runtime/src/contracts.ts",
+        "packages/runtime/src/conversation.ts",
         "packages/runtime/src/github.ts",
         "packages/runtime/src/handoff.ts",
         "packages/runtime/src/index.ts",
@@ -94,6 +113,7 @@
         "node:crypto",
         "node:fs",
         "node:fs/promises",
+        "node:module",
         "node:net",
         "node:os",
         "node:path",
@@ -120,6 +140,7 @@
         "packages/client/src/rpc/framing.js",
         "packages/client/src/rpc/handshake.js",
         "packages/client/src/rpc/reconnect.js",
+        "packages/client/src/rpc/registry.js",
         "packages/client/src/rpc/timers.js",
         "packages/client/src/service.js",
         "packages/client/src/supervise.js",
@@ -137,6 +158,83 @@
         "node:path",
         "node:stream"
       ]
+    },
+    "packages/cli/dist/alp-web.js": {
+      "inputs": [
+        "apps/gateway/src/config.js",
+        "apps/gateway/src/connection.js",
+        "apps/gateway/src/credentials.js",
+        "apps/gateway/src/index.js",
+        "apps/gateway/src/log.js",
+        "apps/gateway/src/policy.js",
+        "apps/gateway/src/server.js",
+        "apps/gateway/src/tickets.js",
+        "apps/gateway/src/upstream.js",
+        "packages/cli/src/web/grant.js",
+        "packages/cli/src/web/main.js",
+        "packages/cli/src/web/serve.js",
+        "packages/client/src/command.js",
+        "packages/client/src/index.js",
+        "packages/client/src/integration-lock.js",
+        "packages/client/src/ipc.js",
+        "packages/client/src/portable.js",
+        "packages/client/src/rpc/client.js",
+        "packages/client/src/rpc/errors.js",
+        "packages/client/src/rpc/framing.js",
+        "packages/client/src/rpc/handshake.js",
+        "packages/client/src/rpc/reconnect.js",
+        "packages/client/src/rpc/registry.js",
+        "packages/client/src/rpc/timers.js",
+        "packages/client/src/service.js",
+        "packages/client/src/supervise.js",
+        "packages/client/src/websocket.js",
+        "packages/core/src/atomic.js",
+        "packages/core/src/errors.js",
+        "packages/core/src/library-edit.js",
+        "packages/core/src/library.js",
+        "packages/core/src/log.js",
+        "packages/core/src/models.js",
+        "packages/core/src/permissions.js",
+        "packages/core/src/providers.js",
+        "packages/core/src/resolver.js",
+        "packages/core/src/safe-path.js",
+        "packages/core/src/shell.js",
+        "packages/core/src/teams.js",
+        "packages/core/src/template-path.js",
+        "packages/core/src/validation.js",
+        "packages/core/src/verify.js",
+        "packages/protocol/src/contract-v1.js",
+        "packages/protocol/src/contract.js",
+        "packages/protocol/src/index.ts",
+        "packages/protocol/src/validate.js",
+        "packages/protocol/src/wire.js"
+      ],
+      "external": [
+        "buffer",
+        "bufferutil",
+        "crypto",
+        "events",
+        "http",
+        "https",
+        "net",
+        "node:child_process",
+        "node:crypto",
+        "node:fs",
+        "node:fs/promises",
+        "node:http",
+        "node:https",
+        "node:net",
+        "node:os",
+        "node:path",
+        "node:url",
+        "node:util",
+        "stream",
+        "tls",
+        "url",
+        "utf-8-validate",
+        "util",
+        "zlib"
+      ]
     }
   }
 }

package/packages/cli/dist/cli.js

@@ -9,14 +9,16 @@ import { project, permissionsCommand, trustCommand, language, verify, doctor } f
 import { daemon } from "./daemon.js";
 import { run, ps, attach, send, questions, answer, top, log, board, pause, resume, recall, interrupt } from "./sessions.js";
 import { libraryCommand, editCommand, teamsCommand } from "./library.js";
+import { scheduleCommand } from "./schedules.js";
 import { tasksCommand, formulaCommand, taskCommand } from "./tasks.js";
 import { webCommand, acpCommand } from "./interfaces.js";
 import { backupCommand, restoreCommand } from "./backup.js";
-var commands = { setup: (args2) => setup(args2, alpHome()), init: (args2) => project("init", args2), upgrade: (args2) => project("upgrade", args2), update: (args2) => project("upgrade", args2), daemon, doctor, run, ps, top, attach, send, questions, answer, log, board, tasks: tasksCommand, task: taskCommand, formula: formulaCommand, permissions: permissionsCommand, agents: (args2) => libraryCommand("agents", args2), skills: (args2) => libraryCommand("skills", args2), mcp: (args2) => ["add", "rm", "mv", "cp", "test", "show", "edit"].includes(args2[0]) ? editCommand("mcp", args2) : libraryCommand("mcp", args2), hooks: (args2) => libraryCommand("hooks", args2), providers: (args2) => libraryCommand("providers", args2), provider: (args2) => editCommand("providers", args2), teams: teamsCommand, trust: trustCommand, agent: (args2) => editCommand("agents", args2), team: (args2) => editCommand("teams", args2), skill: (args2) => editCommand("skills", args2), hook: (args2) => editCommand("hooks", args2), verify, recall, pause, resume, language, interrupt, acp: acpCommand, web: webCommand, backup: backupCommand, restore: restoreCommand };
+import { terminalCommand } from "./terminal.js";
+var commands = { schedule: scheduleCommand, setup: (args2) => setup(args2, alpHome()), init: (args2) => project("init", args2), upgrade: (args2) => project("upgrade", args2), update: (args2) => project("upgrade", args2), daemon, doctor, run, ps, top, attach, send, questions, answer, log, board, tasks: tasksCommand, task: taskCommand, formula: formulaCommand, permissions: permissionsCommand, agents: (args2) => libraryCommand("agents", args2), skills: (args2) => libraryCommand("skills", args2), mcp: (args2) => ["add", "rm", "mv", "cp", "test", "show", "edit"].includes(args2[0]) ? editCommand("mcp", args2) : libraryCommand("mcp", args2), hooks: (args2) => libraryCommand("hooks", args2), providers: (args2) => libraryCommand("providers", args2), provider: (args2) => editCommand("providers", args2), teams: teamsCommand, trust: trustCommand, agent: (args2) => editCommand("agents", args2), team: (args2) => editCommand("teams", args2), skill: (args2) => editCommand("skills", args2), hook: (args2) => editCommand("hooks", args2), verify, recall, pause, resume, language, interrupt, acp: acpCommand, web: webCommand, backup: backupCommand, restore: restoreCommand, terminal: terminalCommand };
 var [command, ...args] = process.argv.slice(2);
 try {
   if (command === "--version") {
-    console.log(true ? "0.0.1-beta.3" : JSON.parse(readFileSync(new URL("../package.json", import.meta.url), "utf8")).version);
+    console.log(true ? "0.0.1-beta.4" : JSON.parse(readFileSync(new URL("../package.json", import.meta.url), "utf8")).version);
   } else {
     if (!Object.hasOwn(commands, command)) throw new UsageError();
     await commands[command](args);

package/packages/cli/dist/interfaces.d.ts

@@ -1,6 +1,14 @@
+/**
+ * Starts the Paseo integration. For one release, a home that still has only the descriptor
+ * registered before the rename (`integrations/web.json`) keeps working, with a hint to re-register.
+ * Exported for tests.
+ * @param {string} home
+ */
+export function startPaseoIntegration(home: string): Promise<any>;
 /**
  * alp web pair: the link that pairs Paseo's app on another device with alpd through Paseo's relay
- * (ALPD §64). The device then signs in with the token that `alp web --print` shows.
+ * (ALPD §64). The device then signs in with the password this command prints (the token kept in
+ * ~/.alp/paseo.json).
  */
 /**
  * `web.pairing` is an extension the integration registers on its alpd connection. Right after an

package/packages/cli/dist/interfaces.js

@@ -1,55 +1,111 @@
 // packages/cli/src/interfaces.js
-import { spawn } from "node:child_process";
-import { readFile } from "node:fs/promises";
+import { execFile, spawn } from "node:child_process";
+import { readFile, stat } from "node:fs/promises";
 import path from "node:path";
 import { parseArgs } from "node:util";
-import { alpHome, lockAlive, readLock, startIntegration } from "@anhlp/alp-client/index";
+import { alpHome, discoverIntegration, startIntegration } from "@anhlp/alp-client/index";
 import { UsageError } from "./usage.js";
 import { built, start, running } from "./daemon.js";
 import { DAEMON_ENTRY, distributionEntry } from "./paths.js";
+import { alpWebEntry, refusal, stopPreRenamePaseo, stopWebService, webOwner } from "./web-service.js";
+var PASEO = "paseo";
+var WEB = "web";
+async function startPaseoIntegration(home) {
+  const entry = await discoverIntegration(PASEO, { home });
+  if (!entry) {
+    const legacy = path.join(home, "integrations", "web.json");
+    const legacyEntry = await legacyDescriptorEntry(legacy, home);
+    if (legacyEntry) {
+      console.error(`Using the Paseo integration registered before its rename (${legacy}); run \`alp-paseo-integration --register\` to register it again.`);
+      return startIntegration({ name: PASEO, entry: legacyEntry, home });
+    }
+  }
+  return startIntegration({ name: PASEO, home });
+}
+async function legacyDescriptorEntry(file, home) {
+  const raw = await readFile(file, "utf8").then((text) => JSON.parse(text)).catch(() => void 0);
+  const isFile = (candidate) => stat(candidate).then((info) => info.isFile(), () => false);
+  for (const field of ["main", "entry", "path", "command"]) {
+    const value = raw?.[field];
+    if (typeof value !== "string" || !value.trim()) continue;
+    const candidates = path.isAbsolute(value) ? [value] : [path.resolve(path.dirname(file), value), path.resolve(home, value)];
+    for (const candidate of candidates) if (await isFile(candidate)) return candidate;
+  }
+  return void 0;
+}
+async function projectArgs() {
+  const cwd = process.cwd();
+  return await stat(path.join(cwd, ".alp")).then((info) => info.isDirectory(), () => false) ? ["--project", cwd] : [];
+}
+async function webDisabled(home) {
+  const settings = await readFile(path.join(home, "settings.json"), "utf8").then((text) => JSON.parse(text), () => void 0);
+  return settings?.web?.enabled === false;
+}
+var DISABLED = 'alp web is disabled by settings ("web.enabled": false).';
+async function serveWeb(home, entry) {
+  await stopPreRenamePaseo(home);
+  const held = await webOwner(home);
+  const published = await readFile(path.join(home, "web.json"), "utf8").then((text) => JSON.parse(text), () => void 0);
+  const claimed = published?.app === "alp-web" && published.pid === await readFile(path.join(home, "integrations", "web.lock"), "utf8").then((text) => JSON.parse(text)?.pid, () => void 0);
+  if ("reason" in held && held.alive && held.kind === "foreign" && !claimed) throw new Error(`${refusal(home)} (${held.reason}). Stop it, then run alp web again.`);
+  let lock;
+  try {
+    lock = await startIntegration({ name: WEB, entry, home, args: await projectArgs() });
+  } catch (error) {
+    const owner = await webOwner(home);
+    if ("reason" in owner && owner.alive) throw new Error(`${error?.message ?? error}
+${refusal(home)} (${owner.reason}). If it is not alp web, stop it, then run alp web again.`, { cause: error });
+    throw error;
+  }
+  const info = await readFile(path.join(home, "web.json"), "utf8").then((text) => JSON.parse(text), () => void 0);
+  if (info?.app !== "alp-web" || info.pid !== lock.pid) {
+    const owner = await webOwner(home);
+    throw new Error(`${refusal(home)}${"reason" in owner ? ` (${owner.reason})` : ""}. Stop pid ${lock.pid}, then run alp web again.`);
+  }
+  if (typeof info.url !== "string" || typeof info.token !== "string") throw new Error(`alp web published no address; see ${path.join(home, "logs", "integrations", "alp-web.log")}`);
+  return `${info.url}#token=${info.token}`;
+}
 async function webCommand(args) {
   if (args[0] === "pair") return pairCommand(args.slice(1));
+  if (args[0] === "rotate") return rotateCommand(args.slice(1));
   const { values, positionals } = parseArgs({ args, allowPositionals: true, options: { print: { type: "boolean" } } });
   if (positionals.length) throw new UsageError();
-  const lock = await readLock(alpHome()).catch(() => void 0);
-  await start();
-  try {
-    const settings = JSON.parse(await readFile(path.join(alpHome(), "settings.json"), "utf8"));
-    if (settings?.web?.enabled === false) throw new Error('ALP web app is disabled by settings ("web.enabled": false).');
-  } catch (error) {
-    if (/disabled by settings/.test(error?.message ?? "")) throw error;
-  }
-  await startIntegration();
+  const entry = alpWebEntry();
   const home = alpHome();
-  const file = path.join(home, "web.json");
-  let info;
-  for (let i = 0; i < 100; i++) {
-    info = await readFile(file, "utf8").then(JSON.parse, () => void 0);
-    let alive = false;
-    try {
-      if (info?.pid) {
-        process.kill(info.pid, 0);
-        alive = true;
-      }
-    } catch {
-      alive = false;
-    }
-    let integrationPid = void 0;
-    try {
-      integrationPid = JSON.parse(await readFile(path.join(home, "integrations", "web.lock"), "utf8"))?.pid;
-    } catch {
-    }
-    if (info?.token && info?.url && alive && info.pid !== lock?.pid && (!integrationPid || info.pid === integrationPid)) break;
-    info = void 0;
-    await new Promise((resolve) => setTimeout(resolve, 100));
-  }
-  if (!info) throw new Error(lockAlive(lock) ? 'alpd serves no web app: it is older than this alp (alp daemon restart), or "web": { "enabled": false } is set in ~/.alp/settings.json' : "alpd started without its web app; see ~/.alp/logs/alpd.log");
-  const url = `${info.url}#token=${info.token}`;
+  if (await webDisabled(home)) throw new Error(DISABLED);
+  await start();
+  const url = await serveWeb(home, entry);
   console.log(url);
   if (values.print) return;
   const opener = process.platform === "darwin" ? "open" : process.platform === "win32" ? "explorer" : "xdg-open";
   spawn(opener, [url], { stdio: "ignore", detached: true }).on("error", () => console.error("Open the address above in your browser")).unref();
 }
+async function rotateCommand(args) {
+  if (args.length) throw new UsageError();
+  const entry = alpWebEntry();
+  const home = alpHome();
+  await start();
+  const project = await projectArgs();
+  for (let attempt = 1; ; attempt++) {
+    await stopWebService(home);
+    const rotated = await new Promise((resolve) => {
+      execFile(
+        process.execPath,
+        [entry, "--rotate", ...project],
+        { env: { ...process.env, ALP_HOME: home }, encoding: "utf8", timeout: 6e4, killSignal: "SIGTERM" },
+        (error, stdout, stderr) => resolve({ code: error ? typeof error.code === "number" ? error.code : 1 : 0, output: `${stderr}${stdout}`.trim() })
+      );
+    });
+    if (rotated.code === 0) break;
+    if (rotated.code !== 3 || attempt >= 3) throw new Error(`alp web could not rotate its token${rotated.output ? `:
+${rotated.output.slice(-2e3)}` : ""}`);
+  }
+  if (await webDisabled(home)) {
+    console.log(`alp web has a new token; the old one no longer works. ${DISABLED.replace(/\.$/, "")}, so it was not started.`);
+    return;
+  }
+  console.log(await serveWeb(home, entry));
+}
 async function requestPairing(client, params, attempts = 50) {
   let last;
   for (let attempt = 0; attempt < attempts; attempt += 1) {
@@ -66,7 +122,8 @@ async function pairCommand(args) {
   const { values, positionals } = parseArgs({ args, allowPositionals: true, options: { on: { type: "boolean" }, off: { type: "boolean" } } });
   if (positionals.length || values.on && values.off) throw new UsageError();
   await start();
-  await startIntegration();
+  const home = alpHome();
+  await startPaseoIntegration(home);
   const client = await running();
   try {
     const pairing = await requestPairing(client, values.on ? { enable: true } : values.off ? { enable: false } : {});
@@ -75,9 +132,11 @@ async function pairCommand(args) {
       return;
     }
     console.log(`Relay ${pairing.endpoint}: ${pairing.connected ? "connected" : "connecting"}`);
-    console.log(`Open this link on the device, or scan the QR code in the web app (Settings \u2192 host \u2192 Pair device):
+    console.log(`Open this link on the device that runs Paseo's app:
 ${pairing.url}`);
-    console.log("When Paseo's app asks for a password, give it alpd's token: the part after #token= in alp web --print.");
+    const password = await readFile(path.join(home, `${PASEO}.json`), "utf8").then((text) => JSON.parse(text)?.token).catch(() => void 0);
+    if (typeof password === "string" && password) console.log(`When Paseo's app asks for a password, give it: ${password}`);
+    else console.log(`When Paseo's app asks for a password, give it the token in ${path.join(home, `${PASEO}.json`)}.`);
   } finally {
     client.close();
   }
@@ -92,5 +151,6 @@ export {
   acpCommand,
   pairCommand,
   requestPairing,
+  startPaseoIntegration,
   webCommand
 };

package/packages/cli/dist/schedules.d.ts

@@ -0,0 +1,2 @@
+/** One-shot continuations of an existing root session; timestamps need an explicit offset. */
+export function scheduleCommand(args: any): Promise<void>;

package/packages/cli/dist/schedules.js

@@ -0,0 +1,45 @@
+// packages/cli/src/schedules.js
+import path from "node:path";
+import { parseArgs } from "node:util";
+import { running } from "./daemon.js";
+import { UsageError } from "./usage.js";
+async function scheduleCommand(args) {
+  const { values, positionals } = parseArgs({ args, allowPositionals: true, options: {
+    project: { type: "string" },
+    session: { type: "string" },
+    at: { type: "string" },
+    prompt: { type: "string" },
+    status: { type: "string" },
+    json: { type: "boolean" }
+  } });
+  const [action, id, ...extra] = positionals;
+  if (!["create", "list", "show", "cancel"].includes(action) || extra.length) throw new UsageError();
+  if (action === "show" || action === "cancel" ? !id : !!id) throw new UsageError();
+  if (action !== "create" && (values.session || values.at || values.prompt)) throw new UsageError();
+  if (action !== "list" && values.status) throw new UsageError();
+  if (action === "create" && (!values.session || !values.prompt?.trim() || !/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(\.\d{1,3})?(Z|[+-]\d{2}:\d{2})$/.test(values.at ?? "") || !Number.isFinite(Date.parse(values.at)))) throw new Error("create needs --session, --prompt and --at ISO timestamp with Z or a UTC offset (for example 2026-10-20T16:00:00+07:00)");
+  const projectRoot = path.resolve(values.project ?? process.cwd());
+  const params = action === "create" ? { projectRoot, sessionId: values.session, dueAt: values.at, prompt: values.prompt } : { projectRoot, ...id ? { id } : {}, ...values.status ? { status: values.status } : {} };
+  const client = await running();
+  try {
+    const result = await client.request(`schedule.${action === "show" ? "get" : action}`, params);
+    if (values.json) {
+      console.log(JSON.stringify(result));
+      return;
+    }
+    const jobs = result.jobs ?? [result.job];
+    if (!jobs.length) console.log("No scheduled continuations");
+    for (const job of jobs) {
+      console.log(`${job.id}  ${job.status}  ${job.dueAt}  session ${job.sessionId}`);
+      console.log(`  ${job.prompt}`);
+      if (job.attemptedAt) console.log(`  attempted ${job.attemptedAt}; attempts ${job.attempts}; late ${job.lateByMs ?? 0} ms`);
+      for (const field of ["deliveredAt", "failedAt", "cancelledAt"]) if (job[field]) console.log(`  ${field}: ${job[field]}`);
+      if (job.lastError) console.log(`  ${job.lastError.code ?? "error"}: ${job.lastError.message}`);
+    }
+  } finally {
+    client.close();
+  }
+}
+export {
+  scheduleCommand
+};

package/packages/cli/dist/sessions.d.ts

@@ -7,9 +7,11 @@ export function answerer(client: any): {
     close(): void;
 };
 /** Streams a tree until its root is idle; the first Ctrl-C interrupts it, the second detaches. */
-export function follow(client: any, rootId: any, print: any, { untilIdle, interactive }: {
+export function follow(client: any, rootId: any, print: any, { untilIdle, interactive, targetOnly, promptId }: {
     untilIdle: any;
     interactive?: boolean | undefined;
+    targetOnly?: boolean | undefined;
+    promptId: any;
 }): Promise<any>;
 export function run(args: any): Promise<void>;
 export function ps(args: any): Promise<void>;

package/packages/cli/dist/sessions.js

@@ -121,7 +121,7 @@ function answerer(client) {
     }
   };
 }
-function follow(client, rootId, print, { untilIdle, interactive = false }) {
+function follow(client, rootId, print, { untilIdle, interactive = false, targetOnly = false, promptId }) {
   const answering = interactive ? answerer(client) : void 0;
   const done = new Promise((resolve, reject) => {
     let failed = false;
@@ -144,10 +144,13 @@ function follow(client, rootId, print, { untilIdle, interactive = false }) {
     process.on("SIGINT", onSignal);
     client.onClose((error) => {
       process.off("SIGINT", onSignal);
+      answering?.close();
       reject(error);
     });
     let rootEnded = false;
     client.onEvent((envelope) => {
+      if (targetOnly && envelope.sessionId !== rootId) return;
+      if (promptId && envelope.event.type === "prompt.failed" && envelope.event.clientMessageId !== promptId) return;
       print(envelope);
       answering?.accept(envelope.event);
       const { sessionId, event } = envelope;
@@ -234,28 +237,36 @@ async function attach(args) {
   }
 }
 async function send(args) {
-  const { values, positionals: [sessionId, ...words] } = parseArgs({ args, allowPositionals: true, options: { json: { type: "boolean" } } });
+  const { values, positionals: [sessionId, ...words] } = parseArgs({ args, allowPositionals: true, options: { json: { type: "boolean" }, prompt: { type: "boolean" } } });
   const text = words.join(" ").trim();
   if (!sessionId || !text) throw new UsageError();
   const client = await connect(await start(), { name: "alp-cli", version: "1" });
+  let subscriptionId;
   try {
     const { session } = await client.request("session.get", { sessionId });
-    if (session.parentId) {
+    if (session.parentId && !values.prompt) {
       await client.request("session.message", { sessionId, text });
       if (!values.json) console.error(`Sent to ${session.agent} as mail from the user`);
       return;
     }
-    const done = follow(client, sessionId, printer(values.json), { untilIdle: true, interactive: !values.json && process.stdin.isTTY });
     const live = session.status === "idle" || session.status === "running";
-    if (live) await client.request("session.attach", { sessionId, replay: false });
-    else await client.request("session.create", { sessionId, spec: { cwd: session.projectRoot } });
-    const steer = live && !!session.activeTurnId;
-    await client.request("session.prompt", { sessionId, clientMessageId: randomUUID(), delivery: steer ? "steer" : "auto", content: [{ type: "text", text }] });
-    if (!values.json) console.error(steer ? "Steered the running turn" : live ? "Started a turn" : "Resumed the session");
+    if (values.prompt && !live) throw new Error("Explicit prompts require a live session; use default alp send to reopen a root");
+    const clientMessageId = randomUUID();
+    const done = follow(client, sessionId, printer(values.json), { untilIdle: true, interactive: !values.json && process.stdin.isTTY, targetOnly: !!session.parentId, promptId: clientMessageId });
+    if (live) {
+      const attached = await client.request("session.attach", { sessionId, replay: false });
+      subscriptionId = attached.session.id;
+    } else {
+      await client.request("session.create", { sessionId, spec: { cwd: session.projectRoot } });
+      subscriptionId = sessionId;
+    }
+    const steer = !values.prompt && live && !!session.activeTurnId;
+    await client.request("session.prompt", { sessionId, clientMessageId, delivery: steer ? "steer" : "auto", content: [{ type: "text", text }] });
+    if (!values.json) console.error(values.prompt ? "Submitted an explicit prompt" : steer ? "Steered the running turn" : live ? "Started a turn" : "Resumed the session");
     if (!await done) process.exitCode = 1;
-    await client.request("session.release", { sessionId }).catch(() => {
-    });
   } finally {
+    if (subscriptionId) await client.request("session.release", { sessionId: subscriptionId }).catch(() => {
+    });
     client.close();
   }
 }

package/packages/cli/dist/terminal.d.ts

@@ -0,0 +1,8 @@
+export function terminalCommand(args: any, { home, out }?: {
+    home?: string | undefined;
+    out?: {
+        (...data: any[]): void;
+        (message?: any, ...optionalParams: any[]): void;
+    } | undefined;
+}): Promise<void>;
+export function TERMINAL_WARNING(user?: string): string;

package/packages/cli/dist/terminal.js

@@ -0,0 +1,79 @@
+// packages/cli/src/terminal.js
+import { randomUUID } from "node:crypto";
+import { chmod, lstat, mkdir, readFile, rename, rm, writeFile } from "node:fs/promises";
+import os from "node:os";
+import path from "node:path";
+import { alpHome } from "@anhlp/alp-client/index";
+import { UsageError } from "./usage.js";
+var TERMINAL_WARNING = (user = os.userInfo().username) => [
+  `A remote terminal runs a real shell on this computer as ${user}, with that account's full access:`,
+  "every file it can read or write, any program, and the network.",
+  "A workspace only picks the directory the shell starts in. It is NOT a sandbox.",
+  "Only gateway credentials that hold the terminal.exec permission can open one (never a default);",
+  "Paseo app devices paired with this host only after alp terminal allow --paseo."
+].join("\n");
+var file = (home) => path.join(home, "terminal.json");
+async function read(home) {
+  const info = await lstat(file(home)).catch(() => void 0);
+  if (!info) return { exists: false, value: void 0, private: true };
+  const own = !process.getuid || info.uid === process.getuid();
+  const value = info.isFile() ? await readFile(file(home), "utf8").then(JSON.parse, () => void 0) : void 0;
+  return { exists: true, value, private: info.isFile() && own && !(info.mode & 63) };
+}
+async function write(home, value) {
+  await mkdir(home, { recursive: true, mode: 448 });
+  const temporary = `${file(home)}.${randomUUID().slice(0, 8)}.tmp`;
+  await writeFile(temporary, JSON.stringify(value, null, 2) + "\n", { mode: 384, flag: "wx" });
+  await chmod(temporary, 384);
+  await rename(temporary, file(home)).catch(async (error) => {
+    await rm(temporary, { force: true });
+    throw error;
+  });
+}
+async function terminalCommand(args, { home = alpHome(), out = console.log } = {}) {
+  const [action, ...rest] = args;
+  const json = rest.includes("--json");
+  const current = await read(home);
+  const limits = current.value && typeof current.value.limits === "object" && current.value.limits ? { limits: current.value.limits } : {};
+  const paseo = rest.includes("--paseo");
+  const paseoBefore = current.private && current.value?.allowPaseoTerminal === true;
+  if (action === "allow") {
+    if (!rest.includes("--yes")) {
+      out(`${TERMINAL_WARNING()}
+
+Run again with --yes to allow remote terminals on this host.`);
+      process.exitCode = 1;
+      return;
+    }
+    const allowPaseoTerminal = paseo || paseoBefore;
+    await write(home, { version: 1, allowRemoteTerminal: true, ...allowPaseoTerminal ? { allowPaseoTerminal: true } : {}, ...limits });
+    out(json ? JSON.stringify({ allowRemoteTerminal: true, allowPaseoTerminal }) : `${TERMINAL_WARNING()}
+
+Remote terminals are allowed on this host (${file(home)})${allowPaseoTerminal ? ", also for every Paseo app device paired with it" : ""}. alp terminal deny turns them off and ends every open one.`);
+    return;
+  }
+  if (action === "deny") {
+    if (paseo) {
+      const allowed = current.private && current.value?.allowRemoteTerminal === true;
+      await write(home, { version: 1, allowRemoteTerminal: allowed, ...limits });
+      out(json ? JSON.stringify({ allowRemoteTerminal: allowed, allowPaseoTerminal: false }) : "Paseo app devices can no longer open terminals on this host; the bridge ends the terminals it holds.");
+      return;
+    }
+    await write(home, { version: 1, allowRemoteTerminal: false, ...limits });
+    out(json ? JSON.stringify({ allowRemoteTerminal: false, allowPaseoTerminal: false }) : "Remote terminals are off on this host; alpd ends every open terminal within 5 seconds.");
+    return;
+  }
+  if (action === "status") {
+    const allowed = current.private && current.value?.version === 1 && current.value.allowRemoteTerminal === true;
+    const allowPaseoTerminal = allowed && current.value.allowPaseoTerminal === true;
+    const problem = current.exists && !current.private ? `${file(home)} is not a private file of this user, so terminals stay off` : void 0;
+    if (json) out(JSON.stringify({ allowRemoteTerminal: allowed, allowPaseoTerminal, ...limits, ...problem ? { problem } : {} }));
+    else out([`Remote terminals: ${allowed ? "allowed" : "off"}${allowPaseoTerminal ? " (also for paired Paseo app devices)" : ""}`, ...problem ? [problem] : [], ...allowed ? ["", TERMINAL_WARNING()] : []].join("\n"));
+    return;
+  }
+  throw new UsageError();
+}
+export {
+  TERMINAL_WARNING,
+  terminalCommand
+};