@frumu/tandem-panel 0.4.14 → 0.4.16

package/.env.example

@@ -1,7 +1,7 @@
 # Control panel bind port
 TANDEM_CONTROL_PANEL_PORT=39732
 
-# Tip: run `tandem-setup init` to auto-generate this file and token.
+# Tip: run `tandem panel init` to auto-generate this file and token.
 
 # Control panel bind host (loopback by default)
 TANDEM_CONTROL_PANEL_HOST=127.0.0.1
@@ -70,3 +70,27 @@ TANDEM_SEARCH_TIMEOUT_MS=10000
 
 # Session TTL in minutes
 TANDEM_CONTROL_PANEL_SESSION_TTL_MINUTES=1440
+
+# ─── ACA Integration ─────────────────────────────────────────────────
+# Optional external ACA base URL. Leave blank to disable ACA integration.
+# When set, the control panel probes this URL on startup and exposes it via
+# /api/capabilities as aca_integration.
+# Example: ACA_BASE_URL=http://127.0.0.1:39735
+ACA_BASE_URL=
+
+# ACA bearer token. Required for ACA project, run, and log APIs.
+# If both ACA_API_TOKEN and ACA_API_TOKEN_FILE are set, ACA_API_TOKEN wins.
+ACA_API_TOKEN=
+
+# Optional path to a file containing the ACA bearer token.
+ACA_API_TOKEN_FILE=
+
+# Path on ACA_BASE_URL to use for health/status probe (default: /health)
+ACA_HEALTH_PATH=/health
+
+# Probe timeout in milliseconds. Probes that take longer return "aca_probe_timeout".
+ACA_PROBE_TIMEOUT_MS=5000
+
+# How long to cache capability probe results, in milliseconds (default: 45000 = 45 s).
+# Set lower for faster ACA availability detection, higher to reduce probe frequency.
+ACA_CAPABILITY_CACHE_TTL_MS=45000

package/README.md

@@ -2,6 +2,10 @@
 
 Full web control center for Tandem Engine (non-desktop entry point).
 
+This package remains the control-panel add-on during migration. The canonical
+master CLI now lives in `@frumu/tandem` as `tandem`, and this package keeps
+`tandem-setup` / `tandem-control-panel` as compatibility shims.
+
 ## Install
 
 ```bash
@@ -41,7 +45,9 @@ Use the scaffold when you want the actual app source in your own folder so you c
 ## Official Bootstrap
 
 ```bash
-tandem-setup init
+npm i -g @frumu/tandem
+tandem install panel
+tandem panel init
 ```
 
 This creates a canonical env file, bootstraps engine state, and installs services on Linux/macOS when run with the privileges needed for service registration.
@@ -49,10 +55,12 @@ This creates a canonical env file, bootstraps engine state, and installs service
 Useful follow-up commands:
 
 ```bash
-tandem-setup doctor
-tandem-setup service status
-tandem-setup service restart
-tandem-setup pair mobile
+tandem doctor
+tandem status
+tandem service status
+tandem service restart
+tandem panel doctor
+tandem panel open
 ```
 
 ## Run Foreground
@@ -76,7 +84,8 @@ tandem-setup service restart
 tandem-setup service logs
 ```
 
-Legacy flag mode is still supported for compatibility:
+Legacy flag mode is still supported for compatibility, but new installs should
+prefer `tandem` and the panel add-on commands:
 
 `tandem-control-panel --init`, `--install-services`, and `--service-op=...`
 
@@ -168,8 +177,8 @@ Notes:
 
 ## Setup Flow
 
-1. Run `tandem-setup init`.
-2. Verify with `tandem-setup doctor`.
+1. Run `tandem panel init` or `tandem-setup init`.
+2. Verify with `tandem panel doctor` or `tandem-setup doctor`.
 3. If running foreground, start `tandem-control-panel`.
 4. Sign in with the printed `TANDEM_CONTROL_PANEL_ENGINE_TOKEN`.
 

package/bin/cli.js

@@ -57,7 +57,9 @@ async function main() {
   }
 
   if (first.startsWith("--")) {
-    console.warn("[Tandem Setup] Legacy flag mode is deprecated. Use `tandem-setup init|service|doctor`.");
+    console.warn(
+      "[Tandem Setup] Legacy flag mode is deprecated. Use `tandem panel init|service|doctor`."
+    );
     process.exit(await runLegacy(argv));
   }
 

package/bin/setup.js

@@ -12,7 +12,16 @@ import { fileURLToPath } from "url";
 import { createRequire } from "module";
 import { homedir } from "os";
 import { ensureBootstrapEnv, resolveEnvLoadOrder } from "../lib/setup/env.js";
-import { createSwarmApiHandler } from "../server/routes/swarm.js";
+import {
+  readControlPanelConfig,
+  resolveControlPanelConfigPath,
+  resolveControlPanelMode,
+  summarizeControlPanelConfig,
+} from "../lib/setup/control-panel-config.js";
+import { createSwarmApiHandler, getOrchestratorMetrics } from "../server/routes/swarm.js";
+import { createAcaApiHandler } from "../server/routes/aca.js";
+import { createCapabilitiesHandler, getCapabilitiesMetrics } from "../server/routes/capabilities.js";
+import { createControlPanelConfigHandler } from "../server/routes/control-panel-config.js";
 
 function parseDotEnv(content) {
   const out = {};
@@ -177,6 +186,11 @@ const ENGINE_PORT = Number.parseInt(process.env.TANDEM_ENGINE_PORT || "39731", 1
 const ENGINE_URL = (
   process.env.TANDEM_ENGINE_URL || `http://${ENGINE_HOST}:${ENGINE_PORT}`
 ).replace(/\/+$/, "");
+const ACA_BASE_URL = String(process.env.ACA_BASE_URL || "")
+  .trim()
+  .replace(/\/+$/, "");
+const CONTROL_PANEL_CONFIG_FILE = String(process.env.TANDEM_CONTROL_PANEL_CONFIG_FILE || "").trim();
+const CONTROL_PANEL_MODE = String(process.env.TANDEM_CONTROL_PANEL_MODE || "auto").trim();
 const DEFAULT_TANDEM_SEARCH_URL = (
   process.env.TANDEM_SEARCH_URL || "https://search.tandem.frumu.ai"
 ).replace(/\/+$/, "");
@@ -188,11 +202,20 @@ const SWARM_HIDDEN_RUNS_PATH = resolve(
   "swarm-hidden-runs.json"
 );
 const AUTO_START_ENGINE = (process.env.TANDEM_CONTROL_PANEL_AUTO_START_ENGINE || "1") !== "0";
-const CONFIGURED_ENGINE_TOKEN = (
-  process.env.TANDEM_CONTROL_PANEL_ENGINE_TOKEN ||
-  process.env.TANDEM_API_TOKEN ||
-  ""
-).trim();
+const CONFIGURED_ENGINE_TOKEN = (() => {
+  const explicit = String(
+    process.env.TANDEM_CONTROL_PANEL_ENGINE_TOKEN || process.env.TANDEM_API_TOKEN || ""
+  ).trim();
+  if (explicit) return explicit;
+  const tokenFile = String(process.env.TANDEM_API_TOKEN_FILE || "").trim();
+  if (tokenFile) {
+    try {
+      return readFileSync(resolve(tokenFile), "utf8").trim();
+    } catch {}
+  }
+  return "";
+})();
+const ACA_TOKEN_FILE = String(process.env.ACA_API_TOKEN_FILE || "").trim();
 const SESSION_TTL_MS =
   Number.parseInt(process.env.TANDEM_CONTROL_PANEL_SESSION_TTL_MINUTES || "1440", 10) * 60 * 1000;
 const FILES_ROOT = resolve(
@@ -1061,7 +1084,9 @@ function readManagedSearchSettings() {
       has_brave_key: !!String(
         env.TANDEM_BRAVE_SEARCH_API_KEY || env.BRAVE_SEARCH_API_KEY || ""
       ).trim(),
-      has_exa_key: !!String(env.TANDEM_EXA_API_KEY || env.EXA_API_KEY || "").trim(),
+      has_exa_key: !!String(
+        env.TANDEM_EXA_API_KEY || env.TANDEM_EXA_SEARCH_API_KEY || env.EXA_API_KEY || ""
+      ).trim(),
     },
     reason: localEngine
       ? ""
@@ -1102,9 +1127,13 @@ async function writeManagedSearchSettings(payload = {}) {
   }
 
   const exaKey = String(payload.exa_api_key || payload.exaApiKey || "").trim();
-  if (exaKey) nextEnv.TANDEM_EXA_API_KEY = exaKey;
+  if (exaKey) {
+    nextEnv.TANDEM_EXA_API_KEY = exaKey;
+    delete nextEnv.TANDEM_EXA_SEARCH_API_KEY;
+  }
   else if (payload.clear_exa_key || payload.clearExaKey) {
     delete nextEnv.TANDEM_EXA_API_KEY;
+    delete nextEnv.TANDEM_EXA_SEARCH_API_KEY;
     delete nextEnv.EXA_API_KEY;
   }
 
@@ -1142,6 +1171,54 @@ function sendJson(res, code, payload) {
   res.end(body);
 }
 
+function readOptionalTokenFile(pathname) {
+  const target = String(pathname || "").trim();
+  if (!target) return "";
+  try {
+    return readFileSync(resolve(target), "utf8").trim();
+  } catch {
+    return "";
+  }
+}
+
+function getAcaToken() {
+  return (
+    String(process.env.ACA_API_TOKEN || "").trim() ||
+    readOptionalTokenFile(ACA_TOKEN_FILE) ||
+    ""
+  );
+}
+
+function getControlPanelConfigPath() {
+  return resolveControlPanelConfigPath({
+    explicitPath: CONTROL_PANEL_CONFIG_FILE,
+    stateDir: process.env.TANDEM_CONTROL_PANEL_STATE_DIR,
+    env: process.env,
+  });
+}
+
+async function getInstallProfile({ acaAvailable = false, acaReason = "" } = {}) {
+  const configPath = getControlPanelConfigPath();
+  const config = readControlPanelConfig(configPath);
+  const mode = resolveControlPanelMode({
+    config,
+    envMode: CONTROL_PANEL_MODE,
+    acaAvailable,
+  });
+  const summary = summarizeControlPanelConfig(config);
+  return {
+    control_panel_mode: mode.mode,
+    control_panel_mode_source: mode.source,
+    control_panel_mode_reason: mode.reason || "",
+    control_panel_config_path: configPath,
+    control_panel_config_ready: summary.ready,
+    control_panel_config_missing: summary.missing,
+    control_panel_compact_nav: !!summary.control_panel?.aca_compact_nav,
+    aca_integration: !!acaAvailable,
+    aca_reason: acaReason || "",
+  };
+}
+
 function pushSwarmEvent(kind, payload = {}) {
   const event = {
     kind,
@@ -1187,6 +1264,73 @@ async function engineHealth(token = "") {
   }
 }
 
+async function executeEngineTool(token, tool, args = {}) {
+  const response = await fetch(`${ENGINE_URL}/tool/execute`, {
+    method: "POST",
+    headers: {
+      "content-type": "application/json",
+      authorization: `Bearer ${token}`,
+      "x-tandem-token": token,
+    },
+    body: JSON.stringify({ tool, args }),
+    signal: AbortSignal.timeout(15000),
+  });
+  const text = await response.text().catch(() => "");
+  let parsed = null;
+  try {
+    parsed = text ? JSON.parse(text) : {};
+  } catch {
+    parsed = null;
+  }
+  if (!response.ok) {
+    const message =
+      parsed?.error || parsed?.detail || text || `${tool} failed (${response.status})`;
+    const error = new Error(message);
+    error.statusCode = response.status;
+    error.payload = parsed;
+    throw error;
+  }
+  return parsed || {};
+}
+
+function buildSearchTestMarkdown(payload) {
+  const query = String(payload?.query || "").trim();
+  const backend = String(payload?.backend || "unknown").trim();
+  const configuredBackend = String(payload?.configured_backend || backend || "unknown").trim();
+  const attemptedBackends = Array.isArray(payload?.attempted_backends)
+    ? payload.attempted_backends.filter(Boolean)
+    : [];
+  const resultCount = Number(payload?.result_count || 0) || 0;
+  const partial = payload?.partial === true;
+  const results = Array.isArray(payload?.results) ? payload.results : [];
+
+  const lines = [
+    "# Websearch test",
+    "",
+    `- Query: \`${query || "n/a"}\``,
+    `- Backend used: \`${backend || "unknown"}\``,
+    `- Configured backend: \`${configuredBackend || "unknown"}\``,
+    `- Attempted backends: ${attemptedBackends.length ? attemptedBackends.map((name) => `\`${name}\``).join(", ") : "none"}`,
+    `- Results: ${resultCount}${partial ? " (partial)" : ""}`,
+    "",
+  ];
+
+  if (!results.length) {
+    lines.push("No search results were returned.");
+    return lines.join("\n");
+  }
+
+  lines.push("## Top results", "");
+  for (const [index, row] of results.entries()) {
+    const title = String(row?.title || row?.url || `Result ${index + 1}`).trim();
+    const url = String(row?.url || "").trim();
+    const snippet = String(row?.snippet || "").trim();
+    lines.push(`${index + 1}. [${title}](${url || "#"})`);
+    if (snippet) lines.push(`   ${snippet}`);
+  }
+  return lines.join("\n");
+}
+
 async function validateEngineToken(token) {
   try {
     const response = await fetch(`${ENGINE_URL}/config/providers`, {
@@ -1224,7 +1368,7 @@ async function ensureEngineRunning() {
     engineEntrypoint = require.resolve("@frumu/tandem/bin/tandem-engine.js");
   } catch (e) {
     err("Could not resolve @frumu/tandem binary entrypoint.");
-    err("Reinstall with: npm i -g @frumu/tandem-panel");
+    err("Reinstall with: npm i -g @frumu/tandem");
     throw e;
   }
 
@@ -4519,6 +4663,38 @@ const handleSwarmApi = createSwarmApiHandler({
   setActiveSwarmRunId,
 });
 
+const handleCapabilities = createCapabilitiesHandler({
+  PROBE_TIMEOUT_MS: Number.parseInt(process.env.ACA_PROBE_TIMEOUT_MS || "5000", 10),
+  ACA_BASE_URL,
+  ACA_HEALTH_PATH: process.env.ACA_HEALTH_PATH || "/health",
+  getAcaToken,
+  getInstallProfile,
+  engineHealth: async (token) => {
+    const health = await engineHealth(token).catch(() => null);
+    return health;
+  },
+  sendJson,
+  cacheTtlMs: Number.parseInt(process.env.ACA_CAPABILITY_CACHE_TTL_MS || "45000", 10),
+});
+
+const handleAcaApi = createAcaApiHandler({
+  PORTAL_PORT,
+  ACA_BASE_URL,
+  getAcaToken,
+  sendJson,
+});
+
+const handleControlPanelConfig = createControlPanelConfigHandler({
+  CONTROL_PANEL_CONFIG_FILE,
+  TANDEM_CONTROL_PANEL_STATE_DIR: process.env.TANDEM_CONTROL_PANEL_STATE_DIR || "",
+  CONTROL_PANEL_MODE,
+  ACA_BASE_URL,
+  PROBE_TIMEOUT_MS: Number.parseInt(process.env.ACA_PROBE_TIMEOUT_MS || "5000", 10),
+  getAcaToken,
+  sendJson,
+  readJsonBody,
+});
+
 async function handleApi(req, res) {
   const pathname = new URL(req.url, `http://127.0.0.1:${PORTAL_PORT}`).pathname;
 
@@ -4534,6 +4710,26 @@ async function handleApi(req, res) {
     return true;
   }
 
+  if (pathname === "/api/capabilities" && req.method === "GET") {
+    await handleCapabilities(req, res);
+    return true;
+  }
+
+  if (pathname === "/api/capabilities/metrics" && req.method === "GET") {
+    sendJson(res, 200, getCapabilitiesMetrics());
+    return true;
+  }
+
+  if (pathname === "/api/install/profile" && req.method === "GET") {
+    await handleCapabilities(req, res);
+    return true;
+  }
+
+  if (pathname === "/api/system/orchestrator-metrics" && req.method === "GET") {
+    sendJson(res, 200, getOrchestratorMetrics());
+    return true;
+  }
+
   if (pathname === "/api/system/search-settings" && req.method === "GET") {
     const session = requireSession(req, res);
     if (!session) return true;
@@ -4557,6 +4753,49 @@ async function handleApi(req, res) {
     return true;
   }
 
+  if (pathname === "/api/system/search-settings/test" && req.method === "POST") {
+    const session = requireSession(req, res);
+    if (!session) return true;
+    try {
+      const payload = await readJsonBody(req);
+      const query = String(payload?.query || "").trim();
+      const limitRaw = Number.parseInt(String(payload?.limit || "5"), 10);
+      const limit = Number.isFinite(limitRaw) ? Math.min(Math.max(limitRaw, 1), 10) : 5;
+      if (!query) {
+        sendJson(res, 400, { ok: false, error: "Search query is required." });
+        return true;
+      }
+      const result = await executeEngineTool(session.token, "websearch", {
+        query,
+        limit,
+      });
+      const output = String(result?.output || "");
+      let parsedOutput = null;
+      try {
+        parsedOutput = output ? JSON.parse(output) : null;
+      } catch {
+        parsedOutput = null;
+      }
+      const markdown = parsedOutput
+        ? buildSearchTestMarkdown(parsedOutput)
+        : `# Websearch test\n\n## Output\n\n\`\`\`\n${output || "No output returned."}\n\`\`\``;
+      sendJson(res, 200, {
+        ok: true,
+        query,
+        markdown,
+        output,
+        parsed_output: parsedOutput,
+        metadata: result?.metadata || {},
+      });
+    } catch (error) {
+      sendJson(res, Number(error?.statusCode || 500), {
+        ok: false,
+        error: error instanceof Error ? error.message : String(error),
+      });
+    }
+    return true;
+  }
+
   if (pathname === "/api/auth/login" && req.method === "POST") {
     await handleAuthLogin(req, res);
     return true;
@@ -4592,12 +4831,24 @@ async function handleApi(req, res) {
     return true;
   }
 
+  if (pathname === "/api/control-panel/config" && (req.method === "GET" || req.method === "PATCH")) {
+    const session = requireSession(req, res);
+    if (!session) return true;
+    return handleControlPanelConfig(req, res);
+  }
+
   if (pathname.startsWith("/api/swarm") || pathname.startsWith("/api/orchestrator")) {
     const session = requireSession(req, res);
     if (!session) return true;
     return handleSwarmApi(req, res, session);
   }
 
+  if (pathname.startsWith("/api/aca")) {
+    const session = requireSession(req, res);
+    if (!session) return true;
+    return handleAcaApi(req, res);
+  }
+
   if (pathname.startsWith("/api/files")) {
     const session = requireSession(req, res);
     if (!session) return true;