@danieltmn/tamnora 0.7.1 → 0.8.0

package/harness/packages/server/public/landing/index.html

@@ -450,8 +450,8 @@
           <h1>Tamnora<br /><span>Harness</span></h1>
 
           <p class="hero-copy">
-            Un harness simple y centralizado para orquestar agentes de IA, gestionar procesos y mantener
-            el control de tu operación desde cualquier dispositivo.
+            Un harness local para orquestar agentes de IA, ejecutar tools en tu workspace y mantener el
+            control desde tu máquina o el celular (túnel + QR o Telegram).
           </p>
 
           <div class="actions">
@@ -462,15 +462,15 @@
           <div class="features" id="caracteristicas">
             <div class="feature">
               <div class="feature-icon">◈</div>
-              <div><b>Centralizado</b><span>Tus agentes y flujos en un solo lugar.</span></div>
+              <div><b>Local</b><span>Corre en tu máquina; el estado vive en tu casa.</span></div>
             </div>
             <div class="feature">
               <div class="feature-icon">↗</div>
-              <div><b>Accesible</b><span>Disponible desde cualquier dispositivo.</span></div>
+              <div><b>Accesible</b><span>Consola web, TUI y Telegram; túnel con QR.</span></div>
             </div>
             <div class="feature">
               <div class="feature-icon">✓</div>
-              <div><b>Control</b><span>Ejecuciones claras y trazables.</span></div>
+              <div><b>Control</b><span>Permisos allow/ask/deny y runs trazables.</span></div>
             </div>
           </div>
         </section>

package/harness/packages/server/public/styles.css

@@ -445,53 +445,61 @@ body.resizing * { cursor: col-resize !important; }
 .msg-menu-btn {
   display: inline-grid;
   place-items: center;
-  width: auto;
-  min-height: 24px;
-  padding: 2px 9px;
+  width: 26px;
+  height: 24px;
+  padding: 0;
   background: transparent;
-  border: 1px solid var(--border);
+  border: 1px solid transparent;
   border-radius: 7px;
   color: var(--muted);
   cursor: pointer;
-  font: 500 11px var(--mono);
-  opacity: 0.45;
-  transition: opacity 0.12s ease;
+  opacity: 0.4;
+  transition: opacity 0.12s ease, background 0.12s ease, color 0.12s ease;
 }
 .msg:hover .msg-menu-btn,
 .msg:focus-within .msg-menu-btn,
 .msg-menu-btn[aria-expanded='true'] { opacity: 1; }
 .msg-menu-btn:hover,
-.msg-menu-btn[aria-expanded='true'] { color: var(--text); border-color: var(--accent); }
+.msg-menu-btn[aria-expanded='true'] { color: var(--text); background: var(--theirs); }
 .msg-menu {
   position: fixed;
   top: 0;
   left: 0;
   z-index: 60;
-  min-width: 170px;
+  min-width: 178px;
   display: flex;
   flex-direction: column;
-  gap: 2px;
+  gap: 1px;
   padding: 5px;
   border: 1px solid var(--border);
-  border-radius: 10px;
-  background: var(--panel);
-  box-shadow: 0 12px 30px rgb(0 0 0 / 0.22);
+  border-radius: 11px;
+  background: var(--solid, var(--panel));
+  box-shadow: 0 14px 34px rgb(0 0 0 / 0.24);
+  backdrop-filter: blur(18px);
 }
 .msg-menu[hidden] { display: none; }
+.msg-menu-sep { height: 1px; margin: 4px 6px; background: var(--border); }
 .msg-actions button.msg-act {
   width: 100%;
+  display: flex;
+  align-items: center;
+  gap: 8px;
   text-align: left;
   background: transparent;
-  border: 1px solid transparent;
+  border: 0;
   border-radius: 7px;
-  color: var(--muted);
-  font: 500 11px var(--mono);
-  padding: 5px 8px;
+  color: var(--text);
+  font: 500 12.5px var(--sans);
+  padding: 6px 8px;
   cursor: pointer;
 }
-.msg-actions button.msg-act:hover { color: var(--text); background: var(--theirs); }
+.msg-act .mi { flex: 0 0 auto; color: var(--muted); }
+.msg-act .mlabel { min-width: 0; }
+.msg-actions button.msg-act:hover { background: var(--theirs); }
+.msg-actions button.msg-act:hover .mi { color: var(--accent); }
 .msg-actions button.msg-act.danger { color: var(--danger); }
 .msg-actions button.msg-act.danger:hover { background: var(--theirs); }
+.msg-actions button.msg-act.danger:hover .mi { color: var(--danger); }
 .bubble .tools { margin-top: 10px; display: flex; flex-direction: column; gap: 6px; font-weight: 700; }
 
 .tools-actions { display: flex; align-items: center; gap: 8px; }
@@ -710,6 +718,14 @@ details.reasoning .body { color: var(--muted); white-space: pre-wrap; margin-top
 .btn.icon svg { width: 18px; height: 18px; display: block; }
 .btn.icon:hover { color: var(--accent); }
 
+.chat-queue { display: flex; flex-direction: column; gap: 4px; padding: 8px 10px; border: 1px dashed var(--border); border-radius: 9px; background: var(--theirs); }
+.chat-queue[hidden] { display: none; }
+.queue-label { color: var(--muted); font: 600 10.5px var(--mono); text-transform: uppercase; letter-spacing: 0.05em; }
+.queue-item { display: flex; align-items: center; gap: 8px; }
+.queue-text { flex: 1; min-width: 0; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; font: 500 12.5px var(--sans); }
+.queue-remove { flex: 0 0 auto; width: 20px; height: 20px; padding: 0; line-height: 1; border-radius: 50%; border: 0; background: transparent; color: var(--muted); cursor: pointer; }
+.queue-remove:hover { color: var(--danger); background: var(--theirs); }
+.shell-out { margin: 0; padding: 8px 10px; max-height: 320px; overflow: auto; background: var(--theirs); border: 1px solid var(--border); border-radius: 8px; font: 11.5px/1.5 var(--mono); white-space: pre-wrap; word-break: break-word; }
 .attach-preview { display: flex; gap: 8px; flex-wrap: wrap; padding-bottom: 2px; }
 .attach-thumb { position: relative; }
 .attach-thumb img { height: 64px; border-radius: 6px; border: 1px solid var(--border); display: block; }
@@ -1049,6 +1065,26 @@ pre.code code { background: none; border: 0; padding: 0; font-size: 0.92em; }
 #xp-preview.preview-maximized .preview-stage { border-radius: 10px; }
 #procs-list { flex: 1; min-height: 0; overflow-y: auto; }
 .procs-log { margin: 0; padding: 8px 12px; height: 150px; overflow: auto; background: var(--theirs); border-top: 1px solid var(--border); font: 500 11px var(--mono); white-space: pre-wrap; word-break: break-word; }
+.git-branch { font: 700 12px var(--mono); color: var(--accent); overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+.git-list { list-style: none; margin: 0; padding: 0 8px 10px; overflow-y: auto; flex: 1; min-height: 0; }
+.git-group { padding: 8px 6px 3px; color: var(--muted); font: 600 11px var(--sans); text-transform: uppercase; letter-spacing: 0.04em; }
+.git-item { border-radius: 7px; }
+.git-row { display: flex; align-items: center; gap: 8px; padding: 4px 6px; border-radius: 7px; cursor: pointer; }
+.git-row:hover { background: var(--theirs); }
+.git-badge { flex: 0 0 auto; width: 16px; text-align: center; font: 700 11px var(--mono); }
+.git-badge.mod, .git-badge.ren { color: var(--accent); }
+.git-badge.add, .git-badge.new { color: var(--ok); }
+.git-badge.del, .git-badge.conf { color: var(--danger); }
+.git-badge.ign { color: var(--muted); }
+.git-path { overflow: hidden; text-overflow: ellipsis; white-space: nowrap; min-width: 0; font: 500 12px var(--sans); }
+.git-diff { margin: 2px 0 8px; padding: 8px 10px; max-height: 320px; overflow: auto; background: var(--theirs); border-radius: 8px; font: 11px/1.5 var(--mono); white-space: pre; }
+.git-diff.err { color: var(--danger); }
+.git-diff .diff-line { display: block; }
+.git-diff .diff-add { color: var(--ok); }
+.git-diff .diff-del { color: var(--danger); }
+.git-diff .diff-eq { color: var(--muted); }
+.git-diff .diff-sep { color: var(--accent); opacity: 0.8; }
+.git-diff .diff-meta { color: var(--muted); opacity: 0.7; }
 .import-bar { display: flex; gap: 6px; margin: 4px 0 10px; }
 .import-bar input { flex: 1; min-width: 0; }
 

package/harness/packages/server/src/routes/chat.js

@@ -264,6 +264,9 @@ export function registerChat(route, ctx) {
             } else if (event.type === 'retry') {
               partials.flush();
               ctx.runs.emit(sessionId, 'retry', { attempt: event.attempt, delayMs: event.delayMs, message: event.message });
+            } else if (event.type === 'usage') {
+              partials.flush();
+              ctx.runs.emit(sessionId, 'usage', { tokens: event.usage });
             } else if (event.type === 'trim') {
               partials.flush();
               ctx.runs.emit(sessionId, 'trim', { trimmed: event.trimmed, dropped: event.dropped, tokens: event.tokens });

package/harness/packages/server/src/routes/git.js

@@ -0,0 +1,43 @@
+import path from 'node:path';
+import { gitStatus, gitDiff } from '../lib/core.js';
+import { sendJson, sendError } from '../lib/http.js';
+import { isLoopback, resolveExistingDir } from '../lib/workspace.js';
+
+function isInside(root, target) {
+  const rel = path.relative(root, target);
+  return rel === '' || (!rel.startsWith('..') && !path.isAbsolute(rel));
+}
+
+export function registerGit(route, ctx) {
+  const resolveRoot = (req, res, raw) => {
+    if (!isLoopback(req.socket.localAddress)) {
+      sendError(res, 403, 'El estado de git solo está disponible en conexiones locales.');
+      return null;
+    }
+    try {
+      return resolveExistingDir(raw || ctx.cwd);
+    } catch (error) {
+      sendError(res, 400, error.message);
+      return null;
+    }
+  };
+
+  route('GET', '/api/git/status', async ({ req, res, query }) => {
+    const root = resolveRoot(req, res, query.get('cwd'));
+    if (!root) return;
+    const status = await gitStatus(root);
+    sendJson(res, 200, { root, ...status });
+  });
+
+  route('GET', '/api/git/diff', async ({ req, res, query }) => {
+    const root = resolveRoot(req, res, query.get('cwd'));
+    if (!root) return;
+    const rel = String(query.get('path') ?? '').replace(/^[/\\]+/, '');
+    if (rel && !isInside(root, path.resolve(root, rel))) {
+      return sendError(res, 400, 'La ruta queda fuera del workspace.');
+    }
+    const result = await gitDiff(root, { path: rel, staged: query.get('staged') === '1' });
+    if (!result.ok) return sendError(res, 400, result.error ?? 'No se pudo obtener el diff.');
+    sendJson(res, 200, { root, path: rel || null, ...result });
+  });
+}

package/harness/packages/server/src/routes/procs.js

@@ -1,6 +1,6 @@
-import { detectProcs } from '../lib/core.js';
+import { detectProcs, killPort } from '../lib/core.js';
 import { readJson, sendJson, sendError } from '../lib/http.js';
-import { resolveExistingDir } from '../lib/workspace.js';
+import { isLoopback, resolveExistingDir } from '../lib/workspace.js';
 
 export function registerProcs(route, ctx) {
   route('GET', '/api/procs', ({ res }) => {
@@ -44,4 +44,16 @@ export function registerProcs(route, ctx) {
     if (!ctx.procs.stop(params.id)) return sendError(res, 404, 'Proceso no encontrado.');
     sendJson(res, 200, { ok: true });
   });
+
+  route('POST', '/api/procs/kill', async ({ req, res }) => {
+    if (!isLoopback(req.socket.localAddress)) {
+      return sendError(res, 403, 'Matar procesos solo está disponible en conexiones locales.');
+    }
+    const body = await readJson(req);
+    try {
+      sendJson(res, 200, await killPort(body.port));
+    } catch (error) {
+      sendError(res, 400, error.message);
+    }
+  });
 }

package/harness/packages/server/src/routes/shell.js

@@ -0,0 +1,23 @@
+import { createTools } from '../lib/core.js';
+import { readJson, sendJson, sendError } from '../lib/http.js';
+import { isLoopback, resolveExistingDir } from '../lib/workspace.js';
+
+export function registerShell(route, ctx) {
+  route('POST', '/api/shell', async ({ req, res }) => {
+    if (!isLoopback(req.socket.localAddress)) {
+      return sendError(res, 403, 'El shell solo está disponible en conexiones locales.');
+    }
+    const body = await readJson(req);
+    const command = String(body.command ?? '').trim();
+    if (!command) return sendError(res, 400, 'Falta "command".');
+    let root;
+    try {
+      root = resolveExistingDir(body.cwd || ctx.cwd);
+    } catch (error) {
+      return sendError(res, 400, error.message);
+    }
+    const tools = createTools({ root, enabled: ['bash'], yes: true });
+    const output = await tools.execute('bash', { command });
+    sendJson(res, 200, { command, cwd: root, output: String(output ?? '') });
+  });
+}

package/harness/packages/server/src/server.js

@@ -28,12 +28,14 @@ import { registerAuth } from './routes/auth.js';
 import { registerSessions } from './routes/sessions.js';
 import { registerFolders } from './routes/folders.js';
 import { registerFiles } from './routes/files.js';
+import { registerGit } from './routes/git.js';
 import { registerModels } from './routes/models.js';
 import { registerProviders } from './routes/providers.js';
 import { registerMcp } from './routes/mcp.js';
 import { registerSkills } from './routes/skills.js';
 import { registerChannels } from './routes/channels.js';
 import { registerProcs } from './routes/procs.js';
+import { registerShell } from './routes/shell.js';
 import { registerPreview } from './routes/preview.js';
 import { registerChat } from './routes/chat.js';
 import { registerEval } from './routes/eval.js';
@@ -212,12 +214,14 @@ export async function createTamnoraServer({
   registerSessions(route, ctx);
   registerFolders(route, ctx);
   registerFiles(route, ctx);
+  registerGit(route, ctx);
   registerModels(route, ctx);
   registerProviders(route, ctx);
   registerMcp(route, ctx);
   registerSkills(route, ctx);
   registerChannels(route, ctx);
   registerProcs(route, ctx);
+  registerShell(route, ctx);
   const preview = registerPreview(route, ctx);
   registerChat(route, ctx);
   registerEval(route, ctx);

package/harness/packages/server/test/server.test.js

@@ -1,6 +1,7 @@
 import { test } from 'node:test';
 import assert from 'node:assert/strict';
 import http from 'node:http';
+import { execFileSync } from 'node:child_process';
 import { mkdtemp, mkdir, writeFile, readFile, stat } from 'node:fs/promises';
 import { tmpdir } from 'node:os';
 import path from 'node:path';
@@ -30,6 +31,21 @@ async function startServer(overrides = {}) {
   return { instance, base: info.url };
 }
 
+const HAS_GIT = (() => {
+  try {
+    execFileSync('git', ['--version'], { stdio: 'ignore' });
+    return true;
+  } catch {
+    return false;
+  }
+})();
+
+function gitInit(root) {
+  execFileSync('git', ['init', '-q'], { cwd: root });
+  execFileSync('git', ['config', 'user.email', 'test@tamnora.dev'], { cwd: root });
+  execFileSync('git', ['config', 'user.name', 'Test'], { cwd: root });
+}
+
 test('serves health, providers and the console', async () => {
   const { instance, base } = await startServer();
   try {
@@ -570,6 +586,46 @@ test('detects, runs and stops dev processes', async () => {
   }
 });
 
+test('runs a console shell command and kills a port', async () => {
+  const cwd = await mkdtemp(path.join(tmpdir(), 'tamnora-shell-'));
+  const { instance, base } = await startServer({ cwd });
+  const json = { 'Content-Type': 'application/json' };
+  try {
+    const shell = await fetch(`${base}/api/shell`, {
+      method: 'POST',
+      headers: json,
+      body: JSON.stringify({ command: 'echo hola-shell' }),
+    });
+    assert.equal(shell.status, 200);
+    const out = await shell.json();
+    assert.match(out.output, /hola-shell/);
+
+    const missing = await fetch(`${base}/api/shell`, {
+      method: 'POST',
+      headers: json,
+      body: JSON.stringify({ command: '   ' }),
+    });
+    assert.equal(missing.status, 400);
+
+    const badPort = await fetch(`${base}/api/procs/kill`, {
+      method: 'POST',
+      headers: json,
+      body: JSON.stringify({ port: 0 }),
+    });
+    assert.equal(badPort.status, 400);
+
+    const none = await fetch(`${base}/api/procs/kill`, {
+      method: 'POST',
+      headers: json,
+      body: JSON.stringify({ port: 47555 }),
+    });
+    assert.equal(none.status, 200);
+    assert.deepEqual((await none.json()).pids, []);
+  } finally {
+    await instance.close();
+  }
+});
+
 test('the agent can install a skill from chat (with approval)', async () => {
   const calls = { n: 0 };
   const toolProvider = {
@@ -775,6 +831,56 @@ test('lists and previews workspace files, confining to the root', async () => {
   }
 });
 
+test('reports git status and per-file diffs', { skip: !HAS_GIT }, async () => {
+  const root = await mkdtemp(path.join(tmpdir(), 'tamnora-git-'));
+  gitInit(root);
+  await writeFile(path.join(root, 'app.js'), 'const a = 1;\n');
+  execFileSync('git', ['add', 'app.js'], { cwd: root });
+  execFileSync('git', ['commit', '-q', '-m', 'init'], { cwd: root });
+  await writeFile(path.join(root, 'app.js'), 'const a = 2;\n');
+  await writeFile(path.join(root, 'nuevo.txt'), 'hola\n');
+
+  const { instance, base } = await startServer();
+  try {
+    const status = await (
+      await fetch(`${base}/api/git/status?${new URLSearchParams({ cwd: root })}`)
+    ).json();
+    assert.equal(status.isRepo, true);
+    assert.ok(status.branch);
+    assert.deepEqual(
+      status.entries.map((e) => e.path).sort(),
+      ['app.js', 'nuevo.txt']
+    );
+    assert.equal(status.entries.find((e) => e.path === 'app.js').status, 'modified');
+    assert.equal(status.entries.find((e) => e.path === 'nuevo.txt').status, 'untracked');
+
+    const diff = await (
+      await fetch(`${base}/api/git/diff?${new URLSearchParams({ cwd: root, path: 'app.js' })}`)
+    ).json();
+    assert.match(diff.diff, /-const a = 1;/);
+    assert.match(diff.diff, /\+const a = 2;/);
+
+    const untracked = await (
+      await fetch(`${base}/api/git/diff?${new URLSearchParams({ cwd: root, path: 'nuevo.txt' })}`)
+    ).json();
+    assert.equal(untracked.untracked, true);
+    assert.match(untracked.diff, /\+hola/);
+
+    const outside = await fetch(
+      `${base}/api/git/diff?${new URLSearchParams({ cwd: root, path: '../fuera' })}`
+    );
+    assert.equal(outside.status, 400);
+
+    const plain = await mkdtemp(path.join(tmpdir(), 'tamnora-nogit-'));
+    const none = await (
+      await fetch(`${base}/api/git/status?${new URLSearchParams({ cwd: plain })}`)
+    ).json();
+    assert.equal(none.isRepo, false);
+  } finally {
+    await instance.close();
+  }
+});
+
 test('previews an HTML file through a static server', async () => {
   const root = await mkdtemp(path.join(tmpdir(), 'tamnora-html-'));
   await writeFile(path.join(root, 'index.html'), '<h1>hola</h1>');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@danieltmn/tamnora",
-  "version": "0.7.1",
+  "version": "0.8.0",
   "description": "Harness local para IAs: agente CLI-first con TUI, consola web y evaluacion. Node puro, sin dependencias.",
   "type": "module",
   "packageManager": "pnpm@11.25.0",