@kl-c/matrixos 0.3.53 → 0.3.55

package/dist/cli-node/index.js

@@ -2163,7 +2163,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@kl-c/matrixos",
-    version: "0.3.53",
+    version: "0.3.55",
     description: "MaTrixOS \u2014 Agentic OS for OpenCode. Personalizable, communicating, self-improving, resilient.",
     main: "./dist/index.js",
     types: "dist/index.d.ts",
@@ -167148,6 +167148,153 @@ var init_project_memory = __esm(() => {
   init_project_context();
 });
 
+// packages/omo-opencode/src/cli/project-init.ts
+var exports_project_init = {};
+__export(exports_project_init, {
+  projectInit: () => projectInit
+});
+import * as fs24 from "fs";
+import * as path29 from "path";
+function projectInit(options) {
+  const target = path29.resolve(options.path ?? process.cwd(), options.name);
+  const apply = options.apply ?? false;
+  if (fs24.existsSync(target) && fs24.readdirSync(target).length > 0) {
+    console.error(`[project] target exists and is not empty: ${target}`);
+    return 1;
+  }
+  const files = Object.entries(TEMPLATES).map(([rel, fn]) => ({ rel, content: fn(options.name) }));
+  if (!apply) {
+    console.log(`[dry-run] would create project '${options.name}' at:
+${target}
+`);
+    console.log("Files:");
+    for (const f2 of files) {
+      console.log(`  ${f2.rel}`);
+    }
+    console.log(`
+[dry-run] re-run with --apply to write the files.`);
+    return 0;
+  }
+  fs24.mkdirSync(path29.join(target, "src"), { recursive: true });
+  for (const f2 of files) {
+    const full = path29.join(target, f2.rel);
+    fs24.mkdirSync(path29.dirname(full), { recursive: true });
+    fs24.writeFileSync(full, f2.content);
+    console.log(`[project] wrote ${f2.rel}`);
+  }
+  console.log(`
+[project] '${options.name}' initialized at ${target}`);
+  console.log(`[project] Next: cd ${target} && matrixos run --agent Architect 'refine the plan.md'`);
+  return 0;
+}
+var TEMPLATES;
+var init_project_init = __esm(() => {
+  TEMPLATES = {
+    "AGENTS.md": (name2) => `# ${name2}
+
+> Project context for AI agents. Keep this file accurate \u2014 agents read it first.
+
+## OVERVIEW
+
+One-paragraph description of what this project is and who uses it.
+
+## CONVENTIONS
+
+- Code style: TBD
+- Tests: TBD
+- Commits: conventional commits
+
+## STRUCTURE
+
+\`\`\`
+${name2}/
+\u251C\u2500\u2500 README.md
+\u251C\u2500\u2500 PROJECT.md   # project state / roadmap
+\u251C\u2500\u2500 plan.md      # current plan
+\u2514\u2500\u2500 src/
+\`\`\`
+
+## NOTES
+
+- Link the relevant MaTrixOS Goal/Kanban board for tracking.
+`,
+    "README.md": (name2) => `# ${name2}
+
+## Install
+
+\`\`\`bash
+# add your install steps
+\`\`\`
+
+## Usage
+
+\`\`\`bash
+# add your usage steps
+\`\`\`
+
+## Development
+
+See AGENTS.md for agent context.
+`,
+    ".gitignore": () => `# Dependencies
+node_modules/
+.venv/
+__pycache__/
+
+# Build
+/dist/
+build/
+
+# Env / secrets
+.env
+.env.local
+*.secret
+
+# OS
+.DS_Store
+
+# MaTrixOS
+.omo/
+`,
+    "PROJECT.md": (name2) => `# ${name2} \u2014 Project State
+
+## STATUS
+
+| Item | State |
+|------|-------|
+| Scope | defined / wip / done |
+| Health | green / yellow / red |
+
+## ROADMAP
+
+- [ ] Milestone 1
+- [ ] Milestone 2
+
+## LINKS
+
+- MaTrixOS Goal: (create via dashboard)
+- Kanban: (link board)
+`,
+    "plan.md": () => `# Plan
+
+## Goal
+
+What are we trying to achieve?
+
+## Steps
+
+1. 
+2. 
+3. 
+
+## Open Questions
+
+- 
+`,
+    "src/.gitkeep": () => ""
+  };
+});
+
 // packages/omo-opencode/src/cli/adopt.ts
 var exports_adopt = {};
 __export(exports_adopt, {
@@ -167158,7 +167305,7 @@ import { chmod } from "fs/promises";
 import { createInterface as createInterface4 } from "readline";
 async function askMasked(prompt) {
   const rl = createInterface4({ input: process.stdin, output: process.stdout });
-  const answer = await new Promise((resolve20) => {
+  const answer = await new Promise((resolve21) => {
     process.stdout.write(prompt);
     process.stdin.setRawMode?.(true);
     process.stdin.resume();
@@ -167173,7 +167320,7 @@ async function askMasked(prompt) {
           process.stdout.write(`
 `);
           rl.close();
-          resolve20(value);
+          resolve21(value);
           return;
         } else if (ch === "\x03") {
           process.exit(130);
@@ -167195,10 +167342,10 @@ async function askMasked(prompt) {
 async function ask(question, defaultValue) {
   const rl = createInterface4({ input: process.stdin, output: process.stdout });
   const d = defaultValue ? ` (${defaultValue})` : "";
-  const answer = await new Promise((resolve20) => {
+  const answer = await new Promise((resolve21) => {
     rl.question(`${question}${d}: `, (a2) => {
       rl.close();
-      resolve20(a2);
+      resolve21(a2);
     });
   });
   return answer.trim() || defaultValue || "";
@@ -167301,7 +167448,7 @@ function isValidType(type2) {
   return VALID_TYPES.includes(type2);
 }
 async function readMaskedToken(prompt) {
-  return new Promise((resolve20, reject) => {
+  return new Promise((resolve21, reject) => {
     if (!process.stdin.isTTY || !process.stdout.isTTY) {
       reject(new Error("Interactive mode requires a TTY. Use --token <value> instead."));
       return;
@@ -167321,7 +167468,7 @@ async function readMaskedToken(prompt) {
           process.stdin.setRawMode(false);
           process.stdin.pause();
           process.stdin.off("data", onData);
-          resolve20(token);
+          resolve21(token);
           return;
         }
         if (code === 127 || code === 8) {
@@ -167398,8 +167545,8 @@ var exports_skill_create = {};
 __export(exports_skill_create, {
   executeSkillCreateCommand: () => executeSkillCreateCommand
 });
-import { mkdirSync as mkdirSync30, writeFileSync as writeFileSync29, existsSync as existsSync78 } from "fs";
-import { join as join85 } from "path";
+import { mkdirSync as mkdirSync31, writeFileSync as writeFileSync30, existsSync as existsSync79 } from "fs";
+import { join as join86 } from "path";
 function slugify2(input) {
   return input.toLowerCase().trim().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "");
 }
@@ -167456,13 +167603,13 @@ function executeSkillCreateCommand(options) {
   if (options.targetDir) {
     skillDir = options.targetDir;
   } else if (options.scope === "project") {
-    skillDir = join85(process.cwd(), ".opencode", "skills");
+    skillDir = join86(process.cwd(), ".opencode", "skills");
   } else {
     const dirs = getOpenCodeSkillDirs({ binary: "opencode" });
-    skillDir = dirs[0] ?? join85(getHomeDirectory(), ".config", "opencode", "skills");
+    skillDir = dirs[0] ?? join86(getHomeDirectory(), ".config", "opencode", "skills");
   }
-  const skillPath = join85(skillDir, slug);
-  const skillFile = join85(skillPath, "SKILL.md");
+  const skillPath = join86(skillDir, slug);
+  const skillFile = join86(skillPath, "SKILL.md");
   const content = buildSkillMarkdown(options.name.trim(), description, category2);
   const result = {
     ok: true,
@@ -167476,9 +167623,9 @@ function executeSkillCreateCommand(options) {
     return result;
   }
   try {
-    if (!existsSync78(skillPath))
-      mkdirSync30(skillPath, { recursive: true });
-    writeFileSync29(skillFile, content, "utf-8");
+    if (!existsSync79(skillPath))
+      mkdirSync31(skillPath, { recursive: true });
+    writeFileSync30(skillFile, content, "utf-8");
     result.applied = true;
   } catch (e) {
     result.ok = false;
@@ -167506,13 +167653,13 @@ function isTelegramAdoptCommand(env5) {
 }
 async function runCliCommand(args, replyMsg) {
   const started = Date.now();
-  return new Promise((resolve20) => {
+  return new Promise((resolve21) => {
     let settled = false;
     const finish = (result) => {
       if (settled)
         return;
       settled = true;
-      resolve20({ ...result, durationMs: Date.now() - started });
+      resolve21({ ...result, durationMs: Date.now() - started });
     };
     let child;
     try {
@@ -167538,7 +167685,7 @@ async function handleGatewayMessage(env5, opts = {}) {
   const cwd = opts.cwd ?? process.cwd();
   const timeoutMs = opts.timeoutMs ?? 120000;
   const started = Date.now();
-  return new Promise((resolve20) => {
+  return new Promise((resolve21) => {
     let stdout2 = "";
     let stderr = "";
     let settled = false;
@@ -167546,7 +167693,7 @@ async function handleGatewayMessage(env5, opts = {}) {
       if (settled)
         return;
       settled = true;
-      resolve20({ ...result, durationMs: Date.now() - started });
+      resolve21({ ...result, durationMs: Date.now() - started });
     };
     let child;
     try {
@@ -167626,8 +167773,8 @@ __export(exports_gateway_start, {
   buildTelegramConfig: () => buildTelegramConfig,
   buildGatewayConfig: () => buildGatewayConfig
 });
-import { readFileSync as readFileSync64, existsSync as existsSync79 } from "fs";
-import { resolve as resolve20 } from "path";
+import { readFileSync as readFileSync64, existsSync as existsSync80 } from "fs";
+import { resolve as resolve21 } from "path";
 import { execSync as execSync2 } from "child_process";
 function resolveMatrixosCommand(fallback = "matrixos") {
   try {
@@ -167637,10 +167784,10 @@ function resolveMatrixosCommand(fallback = "matrixos") {
   } catch {}
   return fallback;
 }
-function loadGatewayEnv(path29 = ENV_PATH) {
-  if (!existsSync79(path29))
+function loadGatewayEnv(path30 = ENV_PATH) {
+  if (!existsSync80(path30))
     return {};
-  const text = readFileSync64(path29, "utf8");
+  const text = readFileSync64(path30, "utf8");
   const out = {};
   for (const raw of text.split(/\r?\n/)) {
     const line = raw.trim();
@@ -167767,7 +167914,7 @@ var ENV_PATH, DEFAULT_MATRIXOS_COMMAND;
 var init_gateway_start = __esm(() => {
   init_src4();
   init_gateway_handler();
-  ENV_PATH = resolve20(process.cwd(), ".klc-gateway.env");
+  ENV_PATH = resolve21(process.cwd(), ".klc-gateway.env");
   DEFAULT_MATRIXOS_COMMAND = resolveMatrixosCommand();
 });
 
@@ -167788,19 +167935,19 @@ var init_deployment_core = __esm(() => {
 
 // packages/omo-opencode/src/deployment/deploy-static.ts
 import { spawn as spawn6 } from "child_process";
-import { existsSync as existsSync80 } from "fs";
-import { resolve as resolve21 } from "path";
+import { existsSync as existsSync81 } from "fs";
+import { resolve as resolve22 } from "path";
 function pushStage(stage, message, ok = true) {
   return { stage, message, ok };
 }
 function run2(cmd, args, cwd) {
-  return new Promise((resolve22) => {
+  return new Promise((resolve23) => {
     let output = "";
     let error51 = "";
     const child = spawn6(cmd, args, { cwd, shell: false });
     child.stdout.on("data", (d) => output += d.toString());
     child.stderr.on("data", (d) => error51 += d.toString());
-    child.on("close", (code) => resolve22({ ok: code === 0, output, error: error51 }));
+    child.on("close", (code) => resolve23({ ok: code === 0, output, error: error51 }));
   });
 }
 var deployStatic;
@@ -167809,7 +167956,7 @@ var init_deploy_static = __esm(() => {
     name: "static",
     async deploy(ctx, params) {
       const stages = [];
-      const buildDir = resolve21(ctx.projectRoot, params.buildDir ?? "dist");
+      const buildDir = resolve22(ctx.projectRoot, params.buildDir ?? "dist");
       const destination = params.destination;
       const prebuild = params.prebuild ?? "bun run build";
       try {
@@ -167845,7 +167992,7 @@ var init_deploy_static = __esm(() => {
           }
           stages.push(pushStage("build", "build succeeded"));
         }
-        if (!existsSync80(buildDir)) {
+        if (!existsSync81(buildDir)) {
           stages.push(pushStage("push", `build directory not found: ${buildDir}`, false));
           return { target: "static", ok: false, stages, error: "build directory missing" };
         }
@@ -167882,13 +168029,13 @@ function pushStage2(stage, message, ok = true) {
   return { stage, message, ok };
 }
 function run3(cmd, args, cwd, env5) {
-  return new Promise((resolve22) => {
+  return new Promise((resolve23) => {
     let output = "";
     let error51 = "";
     const child = spawn7(cmd, args, { cwd, env: { ...process.env, ...env5 }, shell: false });
     child.stdout.on("data", (d) => output += d.toString());
     child.stderr.on("data", (d) => error51 += d.toString());
-    child.on("close", (code) => resolve22({ ok: code === 0, output, error: error51 }));
+    child.on("close", (code) => resolve23({ ok: code === 0, output, error: error51 }));
   });
 }
 var deployVercel;
@@ -167954,13 +168101,13 @@ function pushStage3(stage, message, ok = true) {
   return { stage, message, ok };
 }
 function run4(cmd, args, cwd, env5) {
-  return new Promise((resolve22) => {
+  return new Promise((resolve23) => {
     let output = "";
     let error51 = "";
     const child = spawn8(cmd, args, { cwd, env: { ...process.env, ...env5 }, shell: false });
     child.stdout.on("data", (d) => output += d.toString());
     child.stderr.on("data", (d) => error51 += d.toString());
-    child.on("close", (code) => resolve22({ ok: code === 0, output, error: error51 }));
+    child.on("close", (code) => resolve23({ ok: code === 0, output, error: error51 }));
   });
 }
 var deployVps;
@@ -168042,7 +168189,7 @@ var init_deploy_vps = __esm(() => {
 });
 
 // packages/omo-opencode/src/deployment/deploy-cli.ts
-import { resolve as resolve22 } from "path";
+import { resolve as resolve23 } from "path";
 async function runDeploy(options) {
   const target = getTarget(options.target);
   if (!target) {
@@ -168055,7 +168202,7 @@ async function runDeploy(options) {
     console.error("No active project. Run `matrixos project switch <slug>` or pass --project-root.");
     return 1;
   }
-  const projectRoot = resolve22(options.projectRoot ?? getProjectDir(project.slug));
+  const projectRoot = resolve23(options.projectRoot ?? getProjectDir(project.slug));
   const ctx = {
     projectRoot,
     projectSlug: project?.slug,
@@ -168121,10 +168268,10 @@ var init_deployment = __esm(() => {
 });
 
 // packages/omo-opencode/src/audit/self-audit.ts
-import { existsSync as existsSync81, mkdirSync as mkdirSync31, readdirSync as readdirSync18, readFileSync as readFileSync65, writeFileSync as writeFileSync30 } from "fs";
-import { join as join86 } from "path";
+import { existsSync as existsSync82, mkdirSync as mkdirSync32, readdirSync as readdirSync19, readFileSync as readFileSync65, writeFileSync as writeFileSync31 } from "fs";
+import { join as join87 } from "path";
 function getAuditDir(cwd = process.cwd()) {
-  return join86(cwd, ".matrixos", "audits");
+  return join87(cwd, ".matrixos", "audits");
 }
 function getWeekString(date5 = new Date) {
   const d = new Date(Date.UTC(date5.getFullYear(), date5.getMonth(), date5.getDate()));
@@ -168231,10 +168378,10 @@ function formatAuditReport(report) {
 }
 function writeAuditReport(report, cwd) {
   const dir = getAuditDir(cwd);
-  mkdirSync31(dir, { recursive: true });
-  const path29 = join86(dir, `${report.week}.md`);
-  writeFileSync30(path29, formatAuditReport(report), "utf-8");
-  return path29;
+  mkdirSync32(dir, { recursive: true });
+  const path30 = join87(dir, `${report.week}.md`);
+  writeFileSync31(path30, formatAuditReport(report), "utf-8");
+  return path30;
 }
 var init_self_audit = () => {};
 
@@ -168279,8 +168426,8 @@ async function executeSelfAuditCommand(options = {}) {
     project: t2.project || t2.context?.project || undefined,
     errorCount: t2.error_count || t2.errorCount || 0
   })), signals, options.week);
-  const path29 = writeAuditReport(report);
-  return { ok: true, path: path29, message: `Self-audit written to ${path29}`, report };
+  const path30 = writeAuditReport(report);
+  return { ok: true, path: path30, message: `Self-audit written to ${path30}`, report };
 }
 function normalizeStatus(status2) {
   if (!status2)
@@ -168535,153 +168682,6 @@ function submitPr(options) {
 }
 var init_prepare = () => {};
 
-// packages/omo-opencode/src/cli/project-init.ts
-var exports_project_init = {};
-__export(exports_project_init, {
-  projectInit: () => projectInit
-});
-import * as fs24 from "fs";
-import * as path29 from "path";
-function projectInit(options) {
-  const target = path29.resolve(options.path ?? process.cwd(), options.name);
-  const apply = options.apply ?? false;
-  if (fs24.existsSync(target) && fs24.readdirSync(target).length > 0) {
-    console.error(`[project] target exists and is not empty: ${target}`);
-    return 1;
-  }
-  const files = Object.entries(TEMPLATES).map(([rel, fn]) => ({ rel, content: fn(options.name) }));
-  if (!apply) {
-    console.log(`[dry-run] would create project '${options.name}' at:
-${target}
-`);
-    console.log("Files:");
-    for (const f2 of files) {
-      console.log(`  ${f2.rel}`);
-    }
-    console.log(`
-[dry-run] re-run with --apply to write the files.`);
-    return 0;
-  }
-  fs24.mkdirSync(path29.join(target, "src"), { recursive: true });
-  for (const f2 of files) {
-    const full = path29.join(target, f2.rel);
-    fs24.mkdirSync(path29.dirname(full), { recursive: true });
-    fs24.writeFileSync(full, f2.content);
-    console.log(`[project] wrote ${f2.rel}`);
-  }
-  console.log(`
-[project] '${options.name}' initialized at ${target}`);
-  console.log(`[project] Next: cd ${target} && matrixos run --agent Architect 'refine the plan.md'`);
-  return 0;
-}
-var TEMPLATES;
-var init_project_init = __esm(() => {
-  TEMPLATES = {
-    "AGENTS.md": (name2) => `# ${name2}
-
-> Project context for AI agents. Keep this file accurate \u2014 agents read it first.
-
-## OVERVIEW
-
-One-paragraph description of what this project is and who uses it.
-
-## CONVENTIONS
-
-- Code style: TBD
-- Tests: TBD
-- Commits: conventional commits
-
-## STRUCTURE
-
-\`\`\`
-${name2}/
-\u251C\u2500\u2500 README.md
-\u251C\u2500\u2500 PROJECT.md   # project state / roadmap
-\u251C\u2500\u2500 plan.md      # current plan
-\u2514\u2500\u2500 src/
-\`\`\`
-
-## NOTES
-
-- Link the relevant MaTrixOS Goal/Kanban board for tracking.
-`,
-    "README.md": (name2) => `# ${name2}
-
-## Install
-
-\`\`\`bash
-# add your install steps
-\`\`\`
-
-## Usage
-
-\`\`\`bash
-# add your usage steps
-\`\`\`
-
-## Development
-
-See AGENTS.md for agent context.
-`,
-    ".gitignore": () => `# Dependencies
-node_modules/
-.venv/
-__pycache__/
-
-# Build
-/dist/
-build/
-
-# Env / secrets
-.env
-.env.local
-*.secret
-
-# OS
-.DS_Store
-
-# MaTrixOS
-.omo/
-`,
-    "PROJECT.md": (name2) => `# ${name2} \u2014 Project State
-
-## STATUS
-
-| Item | State |
-|------|-------|
-| Scope | defined / wip / done |
-| Health | green / yellow / red |
-
-## ROADMAP
-
-- [ ] Milestone 1
-- [ ] Milestone 2
-
-## LINKS
-
-- MaTrixOS Goal: (create via dashboard)
-- Kanban: (link board)
-`,
-    "plan.md": () => `# Plan
-
-## Goal
-
-What are we trying to achieve?
-
-## Steps
-
-1. 
-2. 
-3. 
-
-## Open Questions
-
-- 
-`,
-    "src/.gitkeep": () => ""
-  };
-});
-
 // packages/omo-opencode/src/cli/service.ts
 var exports_service = {};
 __export(exports_service, {
@@ -189474,6 +189474,16 @@ function createDashboardServer(dataProvider, config5) {
           if (req.method === "OPTIONS") {
             return new Response(null, { headers: corsHeaders });
           }
+          if (config5.dashboardPassphrase) {
+            const isHealth = path25 === "/api/health";
+            const isGatewayToken = path25 === "/api/gateway/token";
+            if (path25.startsWith("/api/") && !isHealth && !isGatewayToken) {
+              const provided = req.headers.get("x-passphrase");
+              if (!provided || provided !== config5.dashboardPassphrase) {
+                return Response.json({ error: "Unauthorized \u2014 dashboard passphrase required" }, { status: 401, headers: corsHeaders });
+              }
+            }
+          }
           if (path25.startsWith("/api/")) {
             if (path25 === "/api/logs/stream") {
               const headers = new Headers({
@@ -189751,7 +189761,7 @@ async function dashboardCli(options) {
   console.log(`[dashboard] frontend: ${frontendDir}`);
   try {
     const dataProvider = createDataProvider();
-    const server2 = createDashboardServer(dataProvider, { port: port3, host, frontendDir, gatewayPassphrase });
+    const server2 = createDashboardServer(dataProvider, { port: port3, host, frontendDir, gatewayPassphrase, dashboardPassphrase: gatewayPassphrase });
     server2.start();
     console.log(`[dashboard] ready \u2014 http://${host}:${port3}`);
     if (!options.daemon) {
@@ -190367,6 +190377,20 @@ project.command("add-doc <slug> <file>").description("Copy a document into the p
   process.stdout.write(JSON.stringify({ ok: true, dest }, null, 2) + `
 `);
 });
+project.command("init <name>").description("Scaffold a generic project skeleton (AGENTS.md, README, .gitignore, PROJECT.md, plan.md)").option("-p, --path <dir>", "Target directory (default: cwd)").option("--apply", "Actually write the files (default dry-run)").option("--json", "Output as JSON").addHelpText("after", `
+Examples:
+  $ matrixos project init my-app            # dry-run
+  $ matrixos project init my-app --apply    # write files
+`).action(async (name2, options) => {
+  const { projectInit: projectInit2 } = await Promise.resolve().then(() => (init_project_init(), exports_project_init));
+  const code = projectInit2({
+    name: name2,
+    path: options.path,
+    apply: options.apply ?? false,
+    json: options.json ?? false
+  });
+  process.exit(code);
+});
 var gateway2 = program2.command("gateway").description("Gateway configuration \u2014 bot token management");
 var gatewayAdopt = gateway2.command("adopt").description("Adopt a gateway channel (Telegram, Discord, WhatsApp)");
 var gatewayAdoptTelegram = gatewayAdopt.command("telegram").description("Set up the Telegram gateway: prompt for bot token, validate, write .klc-gateway.env").option("-t, --token <value>", "Bot token (non-interactive)").option("-c, --chat <id>", "Restrict to a single chat id").addHelpText("after", `
@@ -190638,21 +190662,6 @@ prepare.command("submit <pr>").description("Mark a prepared PR as ready (human v
   const code = submitPr2({ pr, json: options.json ?? false });
   process.exit(code);
 });
-var projectCmd = program2.command("project").description("Project lifecycle helpers (generic scaffolding)");
-projectCmd.command("init <name>").description("Scaffold a generic project (AGENTS.md, README, .gitignore, PROJECT.md, plan.md)").option("-p, --path <dir>", "Target directory (default: cwd)").option("--apply", "Actually write the files (default dry-run)").option("--json", "Output as JSON").addHelpText("after", `
-Examples:
-  $ matrixos project init my-app            # dry-run
-  $ matrixos project init my-app --apply    # write files
-`).action(async (name2, options) => {
-  const { projectInit: projectInit2 } = await Promise.resolve().then(() => (init_project_init(), exports_project_init));
-  const code = projectInit2({
-    name: name2,
-    path: options.path,
-    apply: options.apply ?? false,
-    json: options.json ?? false
-  });
-  process.exit(code);
-});
 program2.command("service").description("Install MaTrixOS as a persistent OS service (dashboard + gateway)").argument("<action>", "install | uninstall").option("--no-dashboard", "Skip dashboard service").option("--no-gateway", "Skip gateway service").option("--no-cron", "Skip cron scheduler service").option("--user", "Install as current user (systemd --user / launchd user agent)").action(async (action, options) => {
   if (action !== "install" && action !== "uninstall") {
     console.error(`[service] unknown action: ${action}. Use 'install' or 'uninstall'.`);

package/dist/features/dashboard/frontend/js/api.js

@@ -22,8 +22,20 @@ const API={
   cronRemove:(id)=>fetchJSON(`/cron?id=${encodeURIComponent(id)}`,{method:'DELETE'}),
   gatewayToken:(type,token,passphrase)=>fetch('/api/gateway/token',{method:'POST',headers:{'Content-Type':'application/json'},body:JSON.stringify({type,token,passphrase})}).then(r=>r.json())
 }
-async function fetchJSON(e,opts){
-  const r=await fetch(`/api${e}`,opts)
-  if(!r.ok)throw new Error(`API ${e}: ${r.status}`)
+async function fetchJSON(e, opts) {
+  opts = opts || {}
+  opts.headers = Object.assign({ "x-passphrase": localStorage.getItem("matrixos_dashboard_passphrase") || "" }, opts.headers || {})
+  const r = await fetch(`/api${e}`, opts)
+  if (r.status === 401) {
+    const tried = localStorage.getItem("matrixos_dashboard_passphrase")
+    if (!tried) {
+      const p = prompt("Dashboard passphrase required:")
+      if (p) {
+        localStorage.setItem("matrixos_dashboard_passphrase", p)
+        return fetchJSON(e, opts)
+      }
+    }
+  }
+  if (!r.ok) throw new Error(`API ${e}: ${r.status}`)
   return r.json()
 }