@beastmode-develeap/beastmode 0.1.35 → 0.1.37

package/dist/index.js

@@ -4583,6 +4583,47 @@ function proxyToBoard(boardUrl, method, path, body, query) {
     req.end();
   });
 }
+function proxyBinaryToBoard(boardUrl, path, query) {
+  return new Promise((resolve20, reject) => {
+    const url = new URL(path, boardUrl);
+    if (query) {
+      for (const [k, v] of Object.entries(query)) {
+        if (v !== void 0 && v !== null && v !== "") {
+          url.searchParams.set(k, v);
+        }
+      }
+    }
+    const req = http2.request(
+      url,
+      { method: "GET" },
+      (res) => {
+        if (res.statusCode && res.statusCode >= 400) {
+          reject(
+            new Error(
+              `Board proxy error: HTTP ${res.statusCode} for ${path}`
+            )
+          );
+          return;
+        }
+        const chunks = [];
+        res.on("data", (chunk) => chunks.push(chunk));
+        res.on("end", () => {
+          const body = Buffer.concat(chunks);
+          const contentType = res.headers["content-type"] || "application/octet-stream";
+          const cd = res.headers["content-disposition"] || "";
+          const match = /filename="([^"]+)"/.exec(cd);
+          const filename = match ? match[1] : void 0;
+          resolve20(new BinaryResponse(body, contentType, filename));
+        });
+      }
+    );
+    req.on(
+      "error",
+      (err) => reject(new Error(`Board proxy error: ${err.message}`))
+    );
+    req.end();
+  });
+}
 function scopedQuery(query) {
   if (!query) return void 0;
   const b = query.board;
@@ -4974,6 +5015,40 @@ function getBoardRoutes(factoryDir) {
         return proxyToBoard(boardUrl, "POST", `/api/items/${params.id}/updates`, body, scopedQuery(query));
       }
     },
+    // ── Attachments (Gap 8a — 2026-04-15) ──
+    // The board service stores per-item attachments (screenshots from
+    // verify_production.py, uploaded files from the "new task"
+    // dialog, etc.) at /app/data/attachments/<project>/<item>/<id>_<name>.
+    // Before this proxy existed, the UI had no way to list or fetch
+    // them, which meant Story 4's Done Evidence message said "2
+    // screenshots attached" but the UI showed nothing. See
+    // docs/zero-to-productive-readiness.md Gap 8a.
+    {
+      method: "GET",
+      pattern: "/api/board/items/:id/attachments",
+      handler: async (_body, params, query) => {
+        const boardUrl = getBoardUrl2(factoryDir);
+        return proxyToBoard(
+          boardUrl,
+          "GET",
+          `/api/items/${params.id}/attachments`,
+          void 0,
+          scopedQuery(query)
+        );
+      }
+    },
+    {
+      method: "GET",
+      pattern: "/api/board/attachments/:id/download",
+      handler: async (_body, params, query) => {
+        const boardUrl = getBoardUrl2(factoryDir);
+        return proxyBinaryToBoard(
+          boardUrl,
+          `/api/attachments/${params.id}/download`,
+          scopedQuery(query)
+        );
+      }
+    },
     // ── Replies ──
     {
       method: "GET",
@@ -6103,13 +6178,20 @@ function matchBoardRoute(routes, method, url) {
   }
   return null;
 }
-var _TERMINAL_STAGES;
+var BinaryResponse, _TERMINAL_STAGES;
 var init_board_api_routes = __esm({
   "src/cli/ui/board-api-routes.ts"() {
     "use strict";
     init_archival();
     init_chat_handler();
     init_engine();
+    BinaryResponse = class {
+      constructor(body, contentType, filename) {
+        this.body = body;
+        this.contentType = contentType;
+        this.filename = filename;
+      }
+    };
     _TERMINAL_STAGES = /* @__PURE__ */ new Set([
       "done",
       "shipped",
@@ -6350,7 +6432,19 @@ async function startServer(options = {}) {
             body = await parseBody(req);
           }
           const result = await boardMatch.route.handler(body, boardMatch.params, query);
-          sendJson(res, 200, result);
+          if (result instanceof BinaryResponse) {
+            const headers = {
+              "Content-Type": result.contentType,
+              "Content-Length": result.body.length
+            };
+            if (result.filename) {
+              headers["Content-Disposition"] = `inline; filename="${result.filename.replace(/"/g, "")}"`;
+            }
+            res.writeHead(200, headers);
+            res.end(result.body);
+          } else {
+            sendJson(res, 200, result);
+          }
         } catch (err) {
           const message = err instanceof Error ? err.message : "Internal server error";
           sendJson(res, 500, { error: message });
@@ -7224,7 +7318,13 @@ function generateComposeYaml(tag) {
       - ./config:/app/config
       - ./runs:/app/runs
       - ./daemon/logs:/app/daemon/logs:ro
-      - \${HOME}/.claude:/root/.claude:ro
+      # Claude credentials for the chat feature. Target /home/appuser/.claude
+      # matches the ui image's USER appuser (cli/Dockerfile sets HOME to
+      # /home/appuser); the entrypoint restores .claude.json from the
+      # newest backup in this dir at startup so chat works across container
+      # restarts. Pre-2026-04-15 this used /root/.claude, which silently
+      # broke chat because appuser couldn't read those files.
+      - \${HOME}/.claude:/home/appuser/.claude:ro
     depends_on:
       board:
         condition: service_healthy
@@ -7243,6 +7343,15 @@ function generateComposeYaml(tag) {
       - BEASTMODE_ROOT=/app
       - BEASTMODE_BOARD_URL=http://board:8080
     volumes:
+      # Factory state (projects, extensions, deploy strategies). Shared
+      # with the ui container so Settings UI edits AND daemon-side
+      # template seeding (from project-templates/) both land in the same
+      # bind-mounted location. Pre-2026-04-15 this mount was missing
+      # from the daemon service, which silently caused the daemon's
+      # template-seeding logic to write to ephemeral in-container
+      # storage \u2014 the seeded files were invisible to the ui and lost
+      # on restart.
+      - ./.beastmode:/app/.beastmode
       # Daemon config files. Mounted from the host so Settings UI writes
       # (to beastmode.docker.json) are picked up on daemon restart without
       # rebuilding the image.