@commandgarden/cli 2.14.0 → 2.14.1

package/node_modules/@commandgarden/app/dist/server/main.js

@@ -33,7 +33,7 @@ async function start() {
     }
     const port = readAppPort();
     const daemonUrl = 'http://127.0.0.1:9091';
-    const daemon = new DaemonClient(daemonUrl, token, TOKEN_PATH);
+    const daemon = new DaemonClient(daemonUrl, token);
     const store = await AppStore.create(join(CG_HOME, 'app.db'));
     const app = Fastify();
     registerRoutes(app, daemon, store);

package/node_modules/@commandgarden/app/dist/server/routes/audit.js

@@ -1,31 +1,20 @@
-import { daemonErrorMessage } from './utils.js';
 export function auditRoutes(app, daemon) {
-    app.get('/api/audit', async (req, reply) => {
-        try {
-            const query = req.query;
-            const params = new URLSearchParams();
-            if (query.since)
-                params.set('since', query.since);
-            if (query.connector)
-                params.set('connector', query.connector);
-            if (query.type)
-                params.set('type', query.type);
-            if (query.limit)
-                params.set('limit', query.limit);
-            const qs = params.toString();
-            return await daemon.get(`/api/audit${qs ? `?${qs}` : ''}`);
-        }
-        catch (err) {
-            reply.code(502).send({ ok: false, error: daemonErrorMessage(err) });
-        }
+    app.get('/api/audit', async (req) => {
+        const query = req.query;
+        const params = new URLSearchParams();
+        if (query.since)
+            params.set('since', query.since);
+        if (query.connector)
+            params.set('connector', query.connector);
+        if (query.type)
+            params.set('type', query.type);
+        if (query.limit)
+            params.set('limit', query.limit);
+        const qs = params.toString();
+        return daemon.get(`/api/audit${qs ? `?${qs}` : ''}`);
     });
-    app.get('/api/audit/:id', async (req, reply) => {
-        try {
-            const { id } = req.params;
-            return await daemon.get(`/api/audit/${id}`);
-        }
-        catch (err) {
-            reply.code(502).send({ ok: false, error: daemonErrorMessage(err) });
-        }
+    app.get('/api/audit/:id', async (req) => {
+        const { id } = req.params;
+        return daemon.get(`/api/audit/${id}`);
     });
 }

package/node_modules/@commandgarden/app/dist/server/routes/config.js

@@ -1,4 +1,3 @@
-import { daemonErrorMessage } from './utils.js';
 export function configRoutes(app, daemon) {
     app.get('/api/config', async () => {
         try {
@@ -8,12 +7,7 @@ export function configRoutes(app, daemon) {
             return { ok: false, config: {} };
         }
     });
-    app.post('/api/config', async (req, reply) => {
-        try {
-            return await daemon.post('/api/config', req.body);
-        }
-        catch (err) {
-            reply.code(502).send({ ok: false, error: daemonErrorMessage(err) });
-        }
+    app.post('/api/config', async (req) => {
+        return daemon.post('/api/config', req.body);
     });
 }

package/node_modules/@commandgarden/app/dist/server/routes/connectors.js

@@ -1,5 +1,4 @@
 import { HIGH_RISK_CAPABILITIES } from '@commandgarden/shared';
-import { daemonErrorMessage } from './utils.js';
 const APP_ROUTES = {
     'timetracking/report': '/apps/timetracking',
     'teams/room-availability': '/apps/rooms',
@@ -8,42 +7,32 @@ const APP_ROUTES = {
     'tokenmaster/client-trustedby': '/apps/trusted-peer-expiry',
 };
 export function connectorRoutes(app, daemon) {
-    app.get('/api/connectors', async (_req, reply) => {
-        try {
-            const [connectorData, configData] = await Promise.all([
-                daemon.get('/api/connectors'),
-                daemon.get('/api/config')
-                    .catch(() => ({ ok: false, config: {} })),
-            ]);
-            const security = (configData.config?.security ?? {});
-            const highRiskCaps = new Set(security.highRiskCapabilities ?? [...HIGH_RISK_CAPABILITIES]);
-            const approvedHighRisk = new Set(security.approvedHighRisk ?? []);
-            const autoApproveConnectors = new Set(security.autoApproveConnectors ?? []);
-            const enriched = connectorData.connectors.map((c) => {
-                const key = c.key;
-                const capabilities = c.capabilities ?? [];
-                return {
-                    ...c,
-                    hasAppPage: key in APP_ROUTES,
-                    appRoute: APP_ROUTES[key] ?? null,
-                    isHighRisk: capabilities.some(cap => highRiskCaps.has(cap)),
-                    isApproved: approvedHighRisk.has(key),
-                    isAutoApproved: autoApproveConnectors.has(key),
-                };
-            });
-            return { ok: true, connectors: enriched };
-        }
-        catch (err) {
-            reply.code(502).send({ ok: false, error: daemonErrorMessage(err) });
-        }
+    app.get('/api/connectors', async () => {
+        const [connectorData, configData] = await Promise.all([
+            daemon.get('/api/connectors'),
+            daemon.get('/api/config')
+                .catch(() => ({ ok: false, config: {} })),
+        ]);
+        const security = (configData.config?.security ?? {});
+        const highRiskCaps = new Set(security.highRiskCapabilities ?? [...HIGH_RISK_CAPABILITIES]);
+        const approvedHighRisk = new Set(security.approvedHighRisk ?? []);
+        const autoApproveConnectors = new Set(security.autoApproveConnectors ?? []);
+        const enriched = connectorData.connectors.map((c) => {
+            const key = c.key;
+            const capabilities = c.capabilities ?? [];
+            return {
+                ...c,
+                hasAppPage: key in APP_ROUTES,
+                appRoute: APP_ROUTES[key] ?? null,
+                isHighRisk: capabilities.some(cap => highRiskCaps.has(cap)),
+                isApproved: approvedHighRisk.has(key),
+                isAutoApproved: autoApproveConnectors.has(key),
+            };
+        });
+        return { ok: true, connectors: enriched };
     });
-    app.get('/api/connectors/:site/:name', async (req, reply) => {
-        try {
-            const { site, name } = req.params;
-            return await daemon.get(`/api/connectors/${site}/${name}`);
-        }
-        catch (err) {
-            reply.code(502).send({ ok: false, error: daemonErrorMessage(err) });
-        }
+    app.get('/api/connectors/:site/:name', async (req) => {
+        const { site, name } = req.params;
+        return daemon.get(`/api/connectors/${site}/${name}`);
     });
 }

package/node_modules/@commandgarden/app/dist/server/routes/routes.test.js

@@ -0,0 +1,137 @@
+import { describe, it, expect, vi, beforeEach } from 'vitest';
+import Fastify from 'fastify';
+import { registerRoutes } from './index.js';
+import { AppStore } from '../store.js';
+function mockDaemon() {
+    return {
+        get: vi.fn(),
+        post: vi.fn(),
+        pipeRaw: vi.fn(),
+    };
+}
+describe('routes', () => {
+    let app;
+    let daemon;
+    let store;
+    beforeEach(async () => {
+        app = Fastify();
+        daemon = mockDaemon();
+        store = new AppStore(':memory:');
+        registerRoutes(app, daemon, store);
+        await app.ready();
+    });
+    describe('GET /api/status', () => {
+        it('proxies daemon status', async () => {
+            daemon.get.mockResolvedValueOnce({
+                ok: true, extensionConnected: true, connectorCount: 2,
+            });
+            const resp = await app.inject({ method: 'GET', url: '/api/status' });
+            expect(resp.statusCode).toBe(200);
+            const body = JSON.parse(resp.payload);
+            expect(body.ok).toBe(true);
+            expect(body.extensionConnected).toBe(true);
+        });
+    });
+    describe('GET /api/connectors', () => {
+        it('proxies and enriches connector list', async () => {
+            daemon.get
+                .mockImplementation((path) => {
+                if (path === '/api/connectors') {
+                    return Promise.resolve({
+                        ok: true,
+                        connectors: [
+                            { key: 'timetracking/report', description: 'test', access: 'read', domains: [], capabilities: [] },
+                        ],
+                    });
+                }
+                if (path === '/api/config') {
+                    return Promise.resolve({
+                        ok: true,
+                        config: { security: { highRiskCapabilities: ['js_evaluate', 'cookie_write'], approvedHighRisk: [], autoApproveConnectors: [] } },
+                    });
+                }
+                return Promise.resolve({ ok: true });
+            });
+            const resp = await app.inject({ method: 'GET', url: '/api/connectors' });
+            expect(resp.statusCode).toBe(200);
+            const body = JSON.parse(resp.payload);
+            expect(body.connectors).toHaveLength(1);
+            expect(body.connectors[0].hasAppPage).toBe(true);
+            expect(body.connectors[0].appRoute).toBe('/apps/timetracking');
+        });
+        it('enriches connectors with security flags from config', async () => {
+            daemon.get
+                .mockImplementation((path) => {
+                if (path === '/api/connectors') {
+                    return Promise.resolve({
+                        ok: true,
+                        connectors: [
+                            { key: 'timetracking/report', description: 'test', access: 'read', domains: [], capabilities: ['navigate', 'js_evaluate'] },
+                            { key: 'safe/connector', description: 'safe', access: 'read', domains: [], capabilities: ['navigate'] },
+                        ],
+                    });
+                }
+                if (path === '/api/config') {
+                    return Promise.resolve({
+                        ok: true,
+                        config: {
+                            security: {
+                                highRiskCapabilities: ['js_evaluate', 'cookie_write'],
+                                approvedHighRisk: ['timetracking/report'],
+                                autoApproveConnectors: ['timetracking/report'],
+                            },
+                        },
+                    });
+                }
+                return Promise.resolve({ ok: true });
+            });
+            const resp = await app.inject({ method: 'GET', url: '/api/connectors' });
+            const body = JSON.parse(resp.payload);
+            expect(body.connectors[0].isHighRisk).toBe(true);
+            expect(body.connectors[0].isApproved).toBe(true);
+            expect(body.connectors[0].isAutoApproved).toBe(true);
+            expect(body.connectors[1].isHighRisk).toBe(false);
+            expect(body.connectors[1].isApproved).toBe(false);
+            expect(body.connectors[1].isAutoApproved).toBe(false);
+        });
+    });
+    describe('GET /api/preferences', () => {
+        it('returns empty preferences', async () => {
+            const resp = await app.inject({ method: 'GET', url: '/api/preferences' });
+            expect(resp.statusCode).toBe(200);
+            expect(JSON.parse(resp.payload)).toEqual({ ok: true, preferences: {} });
+        });
+        it('sets and gets a preference via PUT', async () => {
+            await app.inject({
+                method: 'PUT', url: '/api/preferences',
+                payload: { key: 'theme', value: 'dark' },
+            });
+            const resp = await app.inject({ method: 'GET', url: '/api/preferences' });
+            expect(JSON.parse(resp.payload).preferences).toEqual({ theme: 'dark' });
+        });
+    });
+    describe('POST /api/run', () => {
+        it('proxies run to daemon', async () => {
+            daemon.post.mockResolvedValueOnce({
+                ok: true, data: [{ a: 1 }], rowCount: 1,
+            });
+            const resp = await app.inject({
+                method: 'POST', url: '/api/run',
+                payload: { connector: 'test/cmd', args: {} },
+            });
+            expect(resp.statusCode).toBe(200);
+            expect(JSON.parse(resp.payload).ok).toBe(true);
+        });
+        it('returns 502 with error message when daemon throws', async () => {
+            daemon.post.mockRejectedValueOnce(new Error('Extension not connected'));
+            const resp = await app.inject({
+                method: 'POST', url: '/api/run',
+                payload: { connector: 'test/cmd', args: {} },
+            });
+            expect(resp.statusCode).toBe(502);
+            const body = JSON.parse(resp.payload);
+            expect(body.ok).toBe(false);
+            expect(body.error).toBe('Extension not connected');
+        });
+    });
+});

package/node_modules/@commandgarden/app/dist/server/routes/run.js

@@ -1,11 +1,11 @@
-import { daemonErrorMessage } from './utils.js';
 export function runRoutes(app, daemon) {
     app.post('/api/run', async (req, reply) => {
         try {
             return await daemon.post('/api/run', req.body);
         }
         catch (err) {
-            reply.code(502).send({ ok: false, error: daemonErrorMessage(err) });
+            const message = err instanceof Error ? err.message : 'Unknown error';
+            reply.code(502).send({ ok: false, error: message });
         }
     });
     app.post('/api/approval', async (req, reply) => {
@@ -13,7 +13,8 @@ export function runRoutes(app, daemon) {
             return await daemon.post('/api/approval', req.body);
         }
         catch (err) {
-            reply.code(502).send({ ok: false, error: daemonErrorMessage(err) });
+            const message = err instanceof Error ? err.message : 'Unknown error';
+            reply.code(502).send({ ok: false, error: message });
         }
     });
     app.get('/api/run/events/:requestId', async (req, reply) => {

package/node_modules/@commandgarden/app/dist/server/routes/status.js

@@ -1,4 +1,3 @@
-import { daemonErrorMessage } from './utils.js';
 export function statusRoutes(app, daemon) {
     app.get('/api/status', async (req, reply) => {
         try {
@@ -6,7 +5,7 @@ export function statusRoutes(app, daemon) {
             return data;
         }
         catch (err) {
-            reply.code(503).send({ ok: false, error: daemonErrorMessage(err) });
+            reply.code(503).send({ ok: false, error: err instanceof Error ? err.message : 'Daemon unreachable' });
         }
     });
 }

package/node_modules/@commandgarden/app/dist/server/store.js

@@ -49,16 +49,16 @@ export class AppStore {
         });
     }
     migrate() {
-        this.db.run(`CREATE TABLE IF NOT EXISTS preferences (
-      key   TEXT PRIMARY KEY,
-      value TEXT NOT NULL
+        this.db.run(`CREATE TABLE IF NOT EXISTS preferences (
+      key   TEXT PRIMARY KEY,
+      value TEXT NOT NULL
     )`);
-        this.db.run(`CREATE TABLE IF NOT EXISTS saved_views (
-      id          TEXT PRIMARY KEY,
-      app         TEXT NOT NULL,
-      name        TEXT NOT NULL,
-      config      TEXT NOT NULL,
-      created_at  TEXT NOT NULL DEFAULT (datetime('now'))
+        this.db.run(`CREATE TABLE IF NOT EXISTS saved_views (
+      id          TEXT PRIMARY KEY,
+      app         TEXT NOT NULL,
+      name        TEXT NOT NULL,
+      config      TEXT NOT NULL,
+      created_at  TEXT NOT NULL DEFAULT (datetime('now'))
     )`);
         // Drop legacy goals table (had category column) and recreate with activity
         try {
@@ -76,41 +76,41 @@ export class AppStore {
             }
             catch { /* ignore */ }
         }
-        this.db.run(`CREATE TABLE IF NOT EXISTS goals (
-      id           INTEGER PRIMARY KEY AUTOINCREMENT,
-      month        TEXT NOT NULL,
-      project_id   TEXT NOT NULL,
-      activity     TEXT NOT NULL DEFAULT '',
-      target_days  REAL NOT NULL,
-      target_hours REAL NOT NULL,
-      created_at   TEXT NOT NULL DEFAULT (datetime('now')),
-      updated_at   TEXT NOT NULL DEFAULT (datetime('now')),
-      UNIQUE(month, project_id, activity)
+        this.db.run(`CREATE TABLE IF NOT EXISTS goals (
+      id           INTEGER PRIMARY KEY AUTOINCREMENT,
+      month        TEXT NOT NULL,
+      project_id   TEXT NOT NULL,
+      activity     TEXT NOT NULL DEFAULT '',
+      target_days  REAL NOT NULL,
+      target_hours REAL NOT NULL,
+      created_at   TEXT NOT NULL DEFAULT (datetime('now')),
+      updated_at   TEXT NOT NULL DEFAULT (datetime('now')),
+      UNIQUE(month, project_id, activity)
     )`);
-        this.db.run(`CREATE TABLE IF NOT EXISTS report_cache (
-      month      TEXT PRIMARY KEY,
-      data       TEXT NOT NULL,
-      fetched_at TEXT NOT NULL
+        this.db.run(`CREATE TABLE IF NOT EXISTS report_cache (
+      month      TEXT PRIMARY KEY,
+      data       TEXT NOT NULL,
+      fetched_at TEXT NOT NULL
     )`);
-        this.db.run(`CREATE TABLE IF NOT EXISTS projects_cache (
-      id         INTEGER PRIMARY KEY CHECK (id = 1),
-      data       TEXT NOT NULL,
-      fetched_at TEXT NOT NULL
+        this.db.run(`CREATE TABLE IF NOT EXISTS projects_cache (
+      id         INTEGER PRIMARY KEY CHECK (id = 1),
+      data       TEXT NOT NULL,
+      fetched_at TEXT NOT NULL
     )`);
-        this.db.run(`CREATE TABLE IF NOT EXISTS security_news_cache (
-      id         INTEGER PRIMARY KEY CHECK (id = 1),
-      data       TEXT NOT NULL,
-      fetched_at TEXT NOT NULL
+        this.db.run(`CREATE TABLE IF NOT EXISTS security_news_cache (
+      id         INTEGER PRIMARY KEY CHECK (id = 1),
+      data       TEXT NOT NULL,
+      fetched_at TEXT NOT NULL
     )`);
-        this.db.run(`CREATE TABLE IF NOT EXISTS trusted_peers_cache (
-      id         INTEGER PRIMARY KEY CHECK (id = 1),
-      data       TEXT NOT NULL,
-      fetched_at TEXT NOT NULL
+        this.db.run(`CREATE TABLE IF NOT EXISTS trusted_peers_cache (
+      id         INTEGER PRIMARY KEY CHECK (id = 1),
+      data       TEXT NOT NULL,
+      fetched_at TEXT NOT NULL
     )`);
-        this.db.run(`CREATE TABLE IF NOT EXISTS room_availability_cache (
-      date       TEXT PRIMARY KEY,
-      data       TEXT NOT NULL,
-      fetched_at TEXT NOT NULL
+        this.db.run(`CREATE TABLE IF NOT EXISTS room_availability_cache (
+      date       TEXT PRIMARY KEY,
+      data       TEXT NOT NULL,
+      fetched_at TEXT NOT NULL
     )`);
         // Legacy schema keyed by cache_key (weekStart + sources signature) —
         // migrate to a plain weekStart-keyed table (one cached result per week,
@@ -121,10 +121,10 @@ export class AppStore {
             this.db.run(`DROP TABLE journal_cache`);
         }
         catch { /* already on new schema, or table doesn't exist yet */ }
-        this.db.run(`CREATE TABLE IF NOT EXISTS journal_cache (
-      week_start TEXT PRIMARY KEY,
-      data       TEXT NOT NULL,
-      fetched_at TEXT NOT NULL
+        this.db.run(`CREATE TABLE IF NOT EXISTS journal_cache (
+      week_start TEXT PRIMARY KEY,
+      data       TEXT NOT NULL,
+      fetched_at TEXT NOT NULL
     )`);
         // saba_data holds the last Saba "pending training" connector result for
         // the week, saved separately from `data` since it's fetched client-side
@@ -137,14 +137,14 @@ export class AppStore {
         // Remembers the last-selected source toggles (Timetracking/Meetings/Jira/
         // Git/Saba) so the UI can restore the user's picks on next load, instead
         // of always resetting to "all enabled".
-        this.db.run(`CREATE TABLE IF NOT EXISTS journal_source_prefs (
-      id           INTEGER PRIMARY KEY CHECK (id = 1),
-      timetracking INTEGER NOT NULL DEFAULT 1,
-      meetings     INTEGER NOT NULL DEFAULT 1,
-      jira         INTEGER NOT NULL DEFAULT 1,
-      git          INTEGER NOT NULL DEFAULT 1,
-      saba         INTEGER NOT NULL DEFAULT 1,
-      updated_at   TEXT NOT NULL DEFAULT (datetime('now'))
+        this.db.run(`CREATE TABLE IF NOT EXISTS journal_source_prefs (
+      id           INTEGER PRIMARY KEY CHECK (id = 1),
+      timetracking INTEGER NOT NULL DEFAULT 1,
+      meetings     INTEGER NOT NULL DEFAULT 1,
+      jira         INTEGER NOT NULL DEFAULT 1,
+      git          INTEGER NOT NULL DEFAULT 1,
+      saba         INTEGER NOT NULL DEFAULT 1,
+      updated_at   TEXT NOT NULL DEFAULT (datetime('now'))
     )`);
     }
     getPreference(key) {
@@ -291,7 +291,7 @@ export class AppStore {
         // ON CONFLICT (rather than INSERT OR REPLACE) so an existing saba_data
         // value for this week isn't wiped out when the main journal result is
         // (re)generated — the two are cached independently.
-        this.db.run(`INSERT INTO journal_cache (week_start, data, fetched_at) VALUES (?, ?, ?)
+        this.db.run(`INSERT INTO journal_cache (week_start, data, fetched_at) VALUES (?, ?, ?)
        ON CONFLICT(week_start) DO UPDATE SET data = excluded.data, fetched_at = excluded.fetched_at`, [weekStart, JSON.stringify(data), now]);
         this.persist();
         return now;
@@ -332,7 +332,7 @@ export class AppStore {
     }
     saveJournalSourcePrefs(sources) {
         const now = new Date().toISOString();
-        this.db.run(`INSERT OR REPLACE INTO journal_source_prefs (id, timetracking, meetings, jira, git, saba, updated_at)
+        this.db.run(`INSERT OR REPLACE INTO journal_source_prefs (id, timetracking, meetings, jira, git, saba, updated_at)
        VALUES (1, ?, ?, ?, ?, ?, ?)`, [
             sources.timetracking ? 1 : 0,
             sources.meetings ? 1 : 0,

package/node_modules/@commandgarden/app/dist/server/store.test.js

@@ -0,0 +1,59 @@
+import { describe, it, expect, beforeEach, afterEach } from 'vitest';
+import { AppStore } from './store.js';
+describe('AppStore', () => {
+    let store;
+    beforeEach(() => {
+        store = new AppStore(':memory:');
+    });
+    afterEach(() => {
+        store.close();
+    });
+    describe('preferences', () => {
+        it('returns undefined for missing key', () => {
+            expect(store.getPreference('missing')).toBeUndefined();
+        });
+        it('sets and gets a preference', () => {
+            store.setPreference('theme', 'light');
+            expect(store.getPreference('theme')).toBe('light');
+        });
+        it('overwrites existing preference', () => {
+            store.setPreference('theme', 'light');
+            store.setPreference('theme', 'dark');
+            expect(store.getPreference('theme')).toBe('dark');
+        });
+        it('returns all preferences', () => {
+            store.setPreference('a', '1');
+            store.setPreference('b', '2');
+            expect(store.getAllPreferences()).toEqual({ a: '1', b: '2' });
+        });
+    });
+    describe('saved views', () => {
+        it('returns empty array when no views', () => {
+            expect(store.listViews('timetracking')).toEqual([]);
+        });
+        it('creates and lists a view', () => {
+            const view = store.createView('timetracking', 'June report', '{"month":"2026-06"}');
+            expect(view.id).toBeDefined();
+            expect(view.app).toBe('timetracking');
+            expect(view.name).toBe('June report');
+            expect(view.config).toBe('{"month":"2026-06"}');
+            const views = store.listViews('timetracking');
+            expect(views).toHaveLength(1);
+            expect(views[0].name).toBe('June report');
+        });
+        it('filters views by app', () => {
+            store.createView('timetracking', 'View A', '{}');
+            store.createView('rooms', 'View B', '{}');
+            expect(store.listViews('timetracking')).toHaveLength(1);
+            expect(store.listViews('rooms')).toHaveLength(1);
+        });
+        it('deletes a view', () => {
+            const view = store.createView('timetracking', 'To delete', '{}');
+            expect(store.deleteView(view.id)).toBe(true);
+            expect(store.listViews('timetracking')).toHaveLength(0);
+        });
+        it('returns false when deleting non-existent view', () => {
+            expect(store.deleteView('nonexistent')).toBe(false);
+        });
+    });
+});

package/node_modules/@commandgarden/app/package.json

@@ -1,42 +1,42 @@
-{
-  "name": "@commandgarden/app",
-  "version": "0.1.0",
-  "private": true,
-  "type": "module",
-  "files": [
-    "dist"
-  ],
-  "scripts": {
-    "build": "vite build && tsc -p tsconfig.server.json",
-    "dev": "concurrently \"vite\" \"tsx watch src/server/main.ts\"",
-    "start": "node dist/server/main.js",
-    "test": "vitest run",
-    "test:watch": "vitest"
-  },
-  "dependencies": {
-    "@commandgarden/shared": "*",
-    "@fastify/static": "^8.0.0",
-    "fastify": "^5.0.0",
-    "lucide-react": "^1.23.0",
-    "react": "^18.3.0",
-    "react-dom": "^18.3.0",
-    "react-router-dom": "^6.23.0",
-    "sql.js": "^1.11.0",
-    "yaml": "^2.4.0"
-  },
-  "devDependencies": {
-    "@types/node": "^22.0.0",
-    "@types/react": "^18.3.0",
-    "@types/react-dom": "^18.3.0",
-    "@vitejs/plugin-react": "^4.3.0",
-    "autoprefixer": "^10.4.0",
-    "concurrently": "^9.0.0",
-    "daisyui": "^4.12.0",
-    "postcss": "^8.4.0",
-    "tailwindcss": "^3.4.0",
-    "tsx": "^4.0.0",
-    "typescript": "^5.4.0",
-    "vite": "^5.4.0",
-    "vitest": "^2.0.0"
-  }
-}
+{
+  "name": "@commandgarden/app",
+  "version": "0.1.0",
+  "private": true,
+  "type": "module",
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build": "vite build && tsc -p tsconfig.server.json",
+    "dev": "concurrently \"vite\" \"tsx watch src/server/main.ts\"",
+    "start": "node dist/server/main.js",
+    "test": "vitest run",
+    "test:watch": "vitest"
+  },
+  "dependencies": {
+    "@commandgarden/shared": "*",
+    "@fastify/static": "^8.0.0",
+    "fastify": "^5.0.0",
+    "lucide-react": "^1.23.0",
+    "react": "^18.3.0",
+    "react-dom": "^18.3.0",
+    "react-router-dom": "^6.23.0",
+    "sql.js": "^1.11.0",
+    "yaml": "^2.4.0"
+  },
+  "devDependencies": {
+    "@types/node": "^22.0.0",
+    "@types/react": "^18.3.0",
+    "@types/react-dom": "^18.3.0",
+    "@vitejs/plugin-react": "^4.3.0",
+    "autoprefixer": "^10.4.0",
+    "concurrently": "^9.0.0",
+    "daisyui": "^4.12.0",
+    "postcss": "^8.4.0",
+    "tailwindcss": "^3.4.0",
+    "tsx": "^4.0.0",
+    "typescript": "^5.4.0",
+    "vite": "^5.4.0",
+    "vitest": "^2.0.0"
+  }
+}