@blotout/qinto-cli 0.1.11 → 0.1.13

package/dist/worker-artifact/version.json

@@ -1,8 +1,8 @@
 {
   "main": {
     "version": "0.1.0",
-    "gitSha": "83bcac7072f2feb866505c4a7b99f7281b08d972",
-    "builtAt": "2026-08-29T21:13:15.188Z",
+    "gitSha": "d2c28f81511d0b1e69a222d04905c6cbea53bb89",
+    "builtAt": "2026-09-01T16:47:48.958Z",
     "compatibilityDate": "2026-06-23",
     "compatibilityFlags": [
       "nodejs_compat"
@@ -23,8 +23,8 @@
   },
   "wfp": {
     "version": "0.1.0",
-    "gitSha": "c71e3d19431cd96a0c9f43eccabaa36d021401f7",
-    "builtAt": "2026-08-24T10:38:20.398Z",
+    "gitSha": "6064f0fb074965ec6add05255c92ece93bb31321",
+    "builtAt": "2026-08-31T12:30:46.702Z",
     "compatibilityDate": "2026-06-23",
     "compatibilityFlags": [
       "nodejs_compat"

package/dist/worker-artifact/wfp/index.js

@@ -2158,10 +2158,9 @@ var EDGETAG_PREFIXES = [
 
 // src/allowed-paths.ts
 var QINTO_PREFIXES = ["/open", "/q.js", "/health", "/v1/", "/openapi.json", "/apps/", "/app/"];
-var QINTO_EXACT = /* @__PURE__ */ new Set(["/__qinto/control"]);
 var ALLOWED_PREFIXES = [...QINTO_PREFIXES, ...EDGETAG_PREFIXES];
 var allowedPaths = /* @__PURE__ */ __name((path) => {
-  return path === "/" || QINTO_EXACT.has(path) || ALLOWED_PREFIXES.some((prefix) => path.startsWith(prefix));
+  return path === "/" || ALLOWED_PREFIXES.some((prefix) => path.startsWith(prefix));
 }, "allowedPaths");
 
 // ../../libs/wfp-control-token/src/control-token.ts
@@ -2244,6 +2243,21 @@ var requireControlToken = /* @__PURE__ */ __name(async (c, next) => {
   return next();
 }, "requireControlToken");
 
+// src/control/app.ts
+var forwardAppControl = /* @__PURE__ */ __name(async (c) => {
+  const workerName = c.req.query("workerName");
+  if (workerName === void 0 || workerName === "") {
+    return c.text("workerName required", 400);
+  }
+  const url = new URL(c.req.url);
+  url.pathname = "/__qinto/control";
+  url.search = "";
+  const headers = new Headers(c.req.raw.headers);
+  headers.delete("authorization");
+  const body = await c.req.raw.text();
+  return c.env.DISPATCHER.get(workerName).fetch(new Request(url, { method: "POST", headers, body }));
+}, "forwardAppControl");
+
 // src/control/id-graph.ts
 var INSPECT_AUTHORIZATION_HEADER = "x-qinto-inspect-authorization";
 var ACTIONS = /* @__PURE__ */ new Set(["resolve", "inspect", "rows"]);
@@ -2683,6 +2697,7 @@ var Tail = class extends DurableObject {
 // src/index.ts
 var app = new Hono2();
 app.get("/tail", requireControlToken, openTailSocket);
+app.post("/control/app", requireControlToken, forwardAppControl);
 app.post("/control/id-graph/:action", requireControlToken, forwardIdGraph);
 app.all("*", (c) => {
   if (!allowedPaths(c.req.path)) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@blotout/qinto-cli",
-  "version": "0.1.11",
+  "version": "0.1.13",
   "type": "module",
   "description": "Qinto CLI: authenticate against the Qinto platform and operate it from the terminal or from an agent.",
   "repository": {
@@ -40,9 +40,9 @@
     "typescript": "6.0.3",
     "vite": "^8.0.0",
     "vitest": "4.1.10",
-    "@qinto/app-build": "0.0.0",
     "@qinto/app-dev": "0.0.0",
     "@qinto/app-manifest": "0.0.0",
+    "@qinto/app-build": "0.0.0",
     "@qinto/oauth-grammar": "0.0.0"
   },
   "scripts": {