@loompad/cli 0.1.0 → 1.1.2

package/dist/daemon/routes/team.js

@@ -0,0 +1,193 @@
+import { bearerToken } from "../auth.js";
+/** Register team routes in the order established by LoomDaemon.routes(). */
+export function registerTeamRoutes(app, ctx) {
+    // ---- Loom Teams: this daemon on a Team Hub (daemon/team.ts) -------------
+    app.post("/api/team/crew-requests/:action", (req, res) => {
+        if (ctx.auth.allowedProjects(bearerToken(req.headers.authorization) ?? ""))
+            return void res.status(403).json({ error: "crew requests need a full client" });
+        void (async () => {
+            try {
+                const b = req.body ?? {}, rt = ctx.runtimes.get(String(b.projectId ?? ""));
+                if (!rt)
+                    throw new Error("open the team project before requesting its crew");
+                const action = String(req.params.action);
+                let result;
+                if (action === "runner-start")
+                    result = await ctx.team.startCrewOnRunner(rt, String(b.crew ?? ""), String(b.text ?? ""), b.runner);
+                else if (action === "runner-control")
+                    result = await ctx.team.controlRunnerCrew(rt, String(b.jobId ?? ""), b.action, b.text, b.to);
+                else if (action === "send")
+                    result = await ctx.team.requestCrew(rt, { owner: String(b.owner ?? ""), crew: String(b.crew ?? ""), teammate: String(b.teammate ?? ""), text: String(b.text ?? "") });
+                else if (action === "answer" && typeof b.accept === "boolean")
+                    result = await ctx.team.answerCrewRequest(rt, String(b.requestId ?? ""), b.accept);
+                else
+                    throw new Error("choose send or answer with accept true/false");
+                res.json({ result });
+            }
+            catch (error) {
+                res.status(400).json({ error: error.message });
+            }
+        })();
+    });
+    // Reading the team view is for any full client; changing membership,
+    // keys or sign-in is admin-only — it's this machine's identity.
+    app.get("/api/team", (req, res) => {
+        if (ctx.auth.allowedProjects(bearerToken(req.headers.authorization) ?? "")) {
+            return void res.status(403).json({ error: "team view needs a full (unscoped) client" });
+        }
+        res.json(ctx.team.status());
+    });
+    /**
+     * Sign in to the hosted Team Hub with GitHub, from the app.
+     *
+     * It only existed in the CLI, so the app's Team screen offered a
+     * self-hosted form and nothing for the hub most people use. The daemon runs
+     * the same loopback sign-in the CLI does and answers with GitHub's
+     * authorize URL for the app to open; when GitHub sends the browser back,
+     * the session lands here and the team connects. The app watches /api/team.
+     */
+    let hostedPending = null;
+    app.post("/api/team/hosted-signin", (req, res) => {
+        if (!req.isAdmin) {
+            return void res.status(403).json({ error: "admin only" });
+        }
+        void (async () => {
+            try {
+                const { hostedHubUrl, hostedSupabaseUrl, publishableKeyFor } = await import("../../core/hosted.js");
+                const { hostedSignIn } = await import("../../hub/supabase-client.js");
+                const supabaseUrl = hostedSupabaseUrl("hosted");
+                if (!supabaseUrl)
+                    throw new Error("no hosted hub is configured for this build");
+                let answered = false;
+                hostedPending = { startedAt: Date.now() };
+                const done = hostedSignIn({
+                    supabaseUrl,
+                    publishableKey: publishableKeyFor(supabaseUrl),
+                    timeoutMs: 10 * 60 * 1000,
+                    openBrowser: (url) => {
+                        answered = true;
+                        res.json({ url });
+                    },
+                });
+                done
+                    .then(async (session) => {
+                    await ctx.team.signIn(hostedHubUrl(supabaseUrl), { token: session.refreshToken });
+                    await ctx.team.connect();
+                    hostedPending = null;
+                })
+                    .catch((err) => {
+                    hostedPending = { startedAt: Date.now(), error: err.message };
+                    if (!answered)
+                        res.status(400).json({ error: err.message });
+                });
+            }
+            catch (err) {
+                res.status(400).json({ error: err.message });
+            }
+        })();
+    });
+    app.get("/api/team/hosted-signin", (_req, res) => {
+        res.json({ pending: Boolean(hostedPending && !hostedPending.error), error: hostedPending?.error ?? null });
+    });
+    app.post("/api/team/:action", (req, res) => {
+        if (!req.isAdmin) {
+            return void res.status(403).json({ error: "admin only" });
+        }
+        const b = (req.body ?? {});
+        const action = String(req.params.action);
+        void (async () => {
+            try {
+                let out = { ok: true };
+                if (action === "signin") {
+                    // no hub = the hosted one; `token` is a hosted refresh token from a CLI that ran the browser sign-in
+                    await ctx.team.signIn(b.hub ?? "", {
+                        ...(b.github ? { github: b.github } : {}),
+                        ...(b.secret ? { secret: b.secret } : {}),
+                        ...(b.token ? { token: b.token } : {}),
+                    });
+                    await ctx.team.connect();
+                }
+                else if (action === "create")
+                    out = await ctx.team.createTeam(String(b.name ?? ""));
+                else if (action === "invite")
+                    out = await ctx.team.invite(b.teamId || undefined);
+                else if (action === "join") {
+                    if (!b.link)
+                        throw new Error("missing invite link");
+                    out = await ctx.team.join(b.link, { ...(b.github ? { github: b.github } : {}), ...(b.secret ? { secret: b.secret } : {}) });
+                }
+                else if (action === "leave")
+                    await ctx.team.leave(b.teamId || undefined);
+                else if (action === "remove") {
+                    if (!b.userId)
+                        throw new Error("missing userId");
+                    out = await ctx.team.removeMember(b.userId, b.teamId || undefined);
+                }
+                else if (action === "rotate")
+                    out = await ctx.team.rotate(b.teamId || undefined);
+                else if (action === "beat")
+                    out = { sessions: await ctx.team.beat() };
+                else if (action === "poll-github")
+                    out = { added: await ctx.team.pollGitHub() };
+                else if (action === "webhook") {
+                    // Phase 6 (D83): the team's GitHub webhook — payload URL + secret, optionally installed on the repo
+                    const q = (req.body ?? {});
+                    const rt = q.projectId ? ctx.runtimes.get(String(q.projectId)) : undefined;
+                    out = await ctx.team.webhook({
+                        ...(b.teamId ? { teamId: b.teamId } : {}),
+                        ...(b.repo ? { repo: b.repo } : {}),
+                        ...(q.install ? { install: true } : {}),
+                        ...(q.rotate ? { rotate: true } : {}),
+                        ...(rt ? { rt } : {}),
+                    });
+                }
+                else
+                    return void res.status(404).json({ error: `unknown team action "${action}"` });
+                res.json({ result: out, team: ctx.team.status() });
+            }
+            catch (err) {
+                res.status(400).json({ error: err.message });
+            }
+        })();
+    });
+    // ---- this daemon as a runner (Phase 5): admin only — it's this machine ----
+    app.get("/api/runner", (req, res) => {
+        if (!req.isAdmin)
+            return void res.status(403).json({ error: "admin only" });
+        res.json(ctx.team.runner?.status() ?? { running: false, config: ctx.team.runnerConfig() });
+    });
+    app.post("/api/runner/:action", (req, res) => {
+        if (!req.isAdmin)
+            return void res.status(403).json({ error: "admin only" });
+        const b = (req.body ?? {});
+        void (async () => {
+            try {
+                const action = String(req.params.action);
+                let out = { ok: true };
+                if (action === "pair")
+                    out = { link: ctx.team.pairRunnerLink() };
+                else if (action === "join") {
+                    out = await ctx.team.joinAsRunner(String(b.link ?? ""), {
+                        ...(b.github ? { github: String(b.github) } : {}),
+                        ...(b.secret ? { secret: String(b.secret) } : {}),
+                        ...(b.token ? { token: String(b.token) } : {}),
+                        ...(b.shared !== undefined ? { shared: Boolean(b.shared) } : {}),
+                    });
+                }
+                else if (action === "start")
+                    out = await ctx.team.startRunner({ ...(b.shared !== undefined ? { shared: Boolean(b.shared) } : {}), ...(b.capacity ? { capacity: Number(b.capacity) } : {}) });
+                else if (action === "stop")
+                    await ctx.team.stopRunner();
+                else if (action === "revoke")
+                    await ctx.team.revokeRunner(String(b.deviceId ?? ""));
+                else
+                    return void res.status(404).json({ error: `unknown runner action "${action}"` });
+                res.json({ result: out });
+            }
+            catch (err) {
+                res.status(400).json({ error: err.message });
+            }
+        })();
+    });
+}
+//# sourceMappingURL=team.js.map

package/dist/daemon/routes/team.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"team.js","sourceRoot":"","sources":["../../../src/daemon/routes/team.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAEzC,4EAA4E;AAC5E,MAAM,UAAU,kBAAkB,CAAC,GAAY,EAAE,GAAqD;IAEpG,4EAA4E;IAC5E,GAAG,CAAC,IAAI,CAAC,iCAAiC,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACvD,IAAI,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;YAAE,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kCAAkC,EAAE,CAAC,CAAC;QAC5J,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,IAAI,CAAC;gBACH,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,IAAI,EAAE,EAAE,EAAE,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC;gBAC3E,IAAI,CAAC,EAAE;oBAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;gBAC7E,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBACzC,IAAI,MAAe,CAAC;gBACpB,IAAI,MAAM,KAAK,cAAc;oBAAE,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;qBAC9H,IAAI,MAAM,KAAK,gBAAgB;oBAAE,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;qBAC9H,IAAI,MAAM,KAAK,MAAM;oBAAE,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;qBAC7L,IAAI,MAAM,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,MAAM,KAAK,SAAS;oBAAE,MAAM,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;;oBAC7I,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;gBACrE,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC;YACvB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAG,KAAe,CAAC,OAAO,EAAE,CAAC,CAAC;YAAC,CAAC;QAChF,CAAC,CAAC,EAAE,CAAC;IACP,CAAC,CAAC,CAAC;IACH,qEAAqE;IACrE,gEAAgE;IAChE,GAAG,CAAC,GAAG,CAAC,WAAW,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAChC,IAAI,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YAC3E,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,0CAA0C,EAAE,CAAC,CAAC;QAC1F,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH;;;;;;;;OAQG;IACH,IAAI,aAAa,GAAiD,IAAI,CAAC;IACvE,GAAG,CAAC,IAAI,CAAC,yBAAyB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC/C,IAAI,CAAE,GAAuC,CAAC,OAAO,EAAE,CAAC;YACtD,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;QAC5D,CAAC;QACD,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,IAAI,CAAC;gBACH,MAAM,EAAE,YAAY,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;gBACpG,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,8BAA8B,CAAC,CAAC;gBACtE,MAAM,WAAW,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;gBAChD,IAAI,CAAC,WAAW;oBAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;gBAChF,IAAI,QAAQ,GAAG,KAAK,CAAC;gBACrB,aAAa,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;gBAC1C,MAAM,IAAI,GAAG,YAAY,CAAC;oBACxB,WAAW;oBACX,cAAc,EAAE,iBAAiB,CAAC,WAAW,CAAC;oBAC9C,SAAS,EAAE,EAAE,GAAG,EAAE,GAAG,IAAI;oBACzB,WAAW,EAAE,CAAC,GAAG,EAAE,EAAE;wBACnB,QAAQ,GAAG,IAAI,CAAC;wBAChB,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;oBACpB,CAAC;iBACF,CAAC,CAAC;gBACH,IAAI;qBACD,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE;oBACtB,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,WAAW,CAAC,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;oBAClF,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;oBACzB,aAAa,GAAG,IAAI,CAAC;gBACvB,CAAC,CAAC;qBACD,KAAK,CAAC,CAAC,GAAU,EAAE,EAAE;oBACpB,aAAa,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;oBAC9D,IAAI,CAAC,QAAQ;wBAAE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;gBAC9D,CAAC,CAAC,CAAC;YACP,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;IACP,CAAC,CAAC,CAAC;IACH,GAAG,CAAC,GAAG,CAAC,yBAAyB,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QAC/C,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,aAAa,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,IAAI,IAAI,EAAE,CAAC,CAAC;IAC7G,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACzC,IAAI,CAAE,GAAuC,CAAC,OAAO,EAAE,CAAC;YACtD,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;QAC5D,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAuC,CAAC;QACjE,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACzC,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,IAAI,CAAC;gBACH,IAAI,GAAG,GAAY,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;gBAChC,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;oBACxB,qGAAqG;oBACrG,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE;wBACjC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACzC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACzC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBACvC,CAAC,CAAC;oBACH,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;gBAC3B,CAAC;qBAAM,IAAI,MAAM,KAAK,QAAQ;oBAAE,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;qBACjF,IAAI,MAAM,KAAK,QAAQ;oBAAE,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,SAAS,CAAC,CAAC;qBAC5E,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;oBAC3B,IAAI,CAAC,CAAC,CAAC,IAAI;wBAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC;oBACpD,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;gBAC9H,CAAC;qBAAM,IAAI,MAAM,KAAK,OAAO;oBAAE,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,IAAI,SAAS,CAAC,CAAC;qBACtE,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;oBAC7B,IAAI,CAAC,CAAC,CAAC,MAAM;wBAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;oBACjD,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,SAAS,CAAC,CAAC;gBACrE,CAAC;qBAAM,IAAI,MAAM,KAAK,QAAQ;oBAAE,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,SAAS,CAAC,CAAC;qBAC9E,IAAI,MAAM,KAAK,MAAM;oBAAE,GAAG,GAAG,EAAE,QAAQ,EAAE,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;qBACjE,IAAI,MAAM,KAAK,aAAa;oBAAE,GAAG,GAAG,EAAE,KAAK,EAAE,MAAM,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,CAAC;qBAC3E,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;oBAC9B,oGAAoG;oBACpG,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAA4B,CAAC;oBACtD,MAAM,EAAE,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;oBAC3E,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC;wBAC3B,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACzC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACnC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACvC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACrC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBACtB,CAAC,CAAC;gBACL,CAAC;;oBACI,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wBAAwB,MAAM,GAAG,EAAE,CAAC,CAAC;gBACpF,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YACrD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,8EAA8E;IAC9E,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAClC,IAAI,CAAE,GAAuC,CAAC,OAAO;YAAE,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;QACjH,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;IAC7F,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,qBAAqB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC3C,IAAI,CAAE,GAAuC,CAAC,OAAO;YAAE,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;QACjH,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAA4B,CAAC;QACtD,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;gBACzC,IAAI,GAAG,GAAY,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;gBAChC,IAAI,MAAM,KAAK,MAAM;oBAAE,GAAG,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,cAAc,EAAE,EAAE,CAAC;qBAC5D,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;oBAC3B,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE;wBACtD,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACjD,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACjD,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC9C,GAAG,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBACjE,CAAC,CAAC;gBACL,CAAC;qBAAM,IAAI,MAAM,KAAK,OAAO;oBAAE,GAAG,GAAG,MAAM,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;qBAC1L,IAAI,MAAM,KAAK,MAAM;oBAAE,MAAM,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;qBACnD,IAAI,MAAM,KAAK,QAAQ;oBAAE,MAAM,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC;;oBAC/E,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,0BAA0B,MAAM,GAAG,EAAE,CAAC,CAAC;gBACtF,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YAC5B,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAG,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;YAC1D,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;IACP,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/daemon/routes/terminals.d.ts

@@ -0,0 +1,4 @@
+import type { Express } from 'express';
+import type { RouteContext } from './context.js';
+/** Register terminals routes in the order established by LoomDaemon.routes(). */
+export declare function registerTerminalsRoutes(app: Express, ctx: Pick<RouteContext, "terminals">): void;

package/dist/daemon/routes/terminals.js

@@ -0,0 +1,87 @@
+import { findProject } from "../../core/registry.js";
+import { TooManySessionsError } from "../terminals.js";
+/** Register terminals routes in the order established by LoomDaemon.routes(). */
+export function registerTerminalsRoutes(app, ctx) {
+    // Terminal: one long-lived shell per tab. A real pty when node-pty is
+    // available (echo, job control, vim), otherwise a pipe-backed shell — see
+    // terminals.ts. Output streams over the project WebSocket; input arrives
+    // there too, because a tty needs a round-trip per keystroke. Bearer auth +
+    // the tailnet are the trust boundary, same as the agents the daemon runs.
+    app.post("/api/projects/:id/term/open", (req, res) => {
+        const info = findProject(String(req.params.id));
+        if (!info)
+            return void res.status(404).json({ error: "unknown project" });
+        const { term, cols, rows } = (req.body ?? {});
+        const termId = String(term ?? "t1");
+        const existing = ctx.terminals.get(info.id, termId);
+        if (existing) {
+            // A reload rejoins the session it left, and gets replayed what it missed.
+            return void res.json({
+                term: termId,
+                cwd: existing.cwd,
+                mode: existing.mode,
+                reused: true,
+                scrollback: existing.scrollback(),
+            });
+        }
+        try {
+            const sess = ctx.terminals.open(info.id, termId, info.dir, cols ?? 80, rows ?? 24);
+            res.json({ term: termId, cwd: sess.cwd, mode: sess.mode, reused: false, scrollback: "" });
+        }
+        catch (err) {
+            // only the cap is a 429 — a shell that won't spawn is our problem, not
+            // the client's rate
+            res.status(err instanceof TooManySessionsError ? 429 : 500).json({
+                error: err.message,
+            });
+        }
+    });
+    app.post("/api/projects/:id/term/input", (req, res) => {
+        const info = findProject(String(req.params.id));
+        if (!info)
+            return void res.status(404).json({ error: "unknown project" });
+        const { term, data } = (req.body ?? {});
+        const termId = String(term ?? "t1");
+        try {
+            // this opens a session when none exists, so it can fail the same ways
+            // /term/open can — uncaught, Express answers a JSON client with HTML
+            const sess = ctx.terminals.get(info.id, termId) ?? ctx.terminals.open(info.id, termId, info.dir);
+            sess.write(String(data ?? ""));
+            res.json({ ok: true });
+        }
+        catch (err) {
+            res.status(err instanceof TooManySessionsError ? 429 : 500).json({
+                error: err.message,
+            });
+        }
+    });
+    app.post("/api/projects/:id/term/signal", (req, res) => {
+        const info = findProject(String(req.params.id));
+        if (!info)
+            return void res.status(404).json({ error: "unknown project" });
+        const sess = ctx.terminals.get(info.id, String((req.body ?? {}).term ?? "t1"));
+        if (!sess)
+            return void res.json({ signalled: false });
+        sess.interrupt();
+        res.json({ signalled: true });
+    });
+    app.post("/api/projects/:id/term/resize", (req, res) => {
+        const info = findProject(String(req.params.id));
+        if (!info)
+            return void res.status(404).json({ error: "unknown project" });
+        const { term, cols, rows } = (req.body ?? {});
+        const sess = ctx.terminals.get(info.id, String(term ?? "t1"));
+        if (!sess)
+            return void res.json({ resized: false });
+        sess.resize(Number(cols) || 80, Number(rows) || 24);
+        res.json({ resized: true });
+    });
+    app.post("/api/projects/:id/term/close", (req, res) => {
+        const info = findProject(String(req.params.id));
+        if (!info)
+            return void res.status(404).json({ error: "unknown project" });
+        ctx.terminals.close(info.id, String((req.body ?? {}).term ?? "t1"));
+        res.json({ closed: true });
+    });
+}
+//# sourceMappingURL=terminals.js.map

package/dist/daemon/routes/terminals.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"terminals.js","sourceRoot":"","sources":["../../../src/daemon/routes/terminals.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AAEvD,iFAAiF;AACjF,MAAM,UAAU,uBAAuB,CAAC,GAAY,EAAE,GAAoC;IAExF,sEAAsE;IACtE,0EAA0E;IAC1E,yEAAyE;IACzE,2EAA2E;IAC3E,0EAA0E;IAC1E,GAAG,CAAC,IAAI,CAAC,6BAA6B,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACnD,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAChD,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAC1E,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAI3C,CAAC;QACF,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC;QACpC,MAAM,QAAQ,GAAG,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QACpD,IAAI,QAAQ,EAAE,CAAC;YACb,0EAA0E;YAC1E,OAAO,KAAK,GAAG,CAAC,IAAI,CAAC;gBACnB,IAAI,EAAE,MAAM;gBACZ,GAAG,EAAE,QAAQ,CAAC,GAAG;gBACjB,IAAI,EAAE,QAAQ,CAAC,IAAI;gBACnB,MAAM,EAAE,IAAI;gBACZ,UAAU,EAAE,QAAQ,CAAC,UAAU,EAAE;aAClC,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,IAAI,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;YACnF,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC;QAC5F,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,uEAAuE;YACvE,oBAAoB;YACpB,GAAG,CAAC,MAAM,CAAC,GAAG,YAAY,oBAAoB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC/D,KAAK,EAAG,GAAa,CAAC,OAAO;aAC9B,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,8BAA8B,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACpD,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAChD,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAC1E,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAqC,CAAC;QAC5E,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC;QACpC,IAAI,CAAC;YACH,sEAAsE;YACtE,qEAAqE;YACrE,MAAM,IAAI,GACR,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;YACtF,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC;YAC/B,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACzB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,CAAC,GAAG,YAAY,oBAAoB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC/D,KAAK,EAAG,GAAa,CAAC,OAAO;aAC9B,CAAC,CAAC;QACL,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,+BAA+B,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACrD,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAChD,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAC1E,MAAM,IAAI,GAAG,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC;QAC/E,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,GAAG,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QACtD,IAAI,CAAC,SAAS,EAAE,CAAC;QACjB,GAAG,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChC,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,+BAA+B,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACrD,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAChD,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAC1E,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAI3C,CAAC;QACF,MAAM,IAAI,GAAG,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC;QAC9D,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QACpD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QACpD,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,8BAA8B,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACpD,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC;QAChD,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAC1E,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC;QACpE,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/daemon/routes/tools.d.ts

@@ -0,0 +1,4 @@
+import type { Express } from 'express';
+import type { WithRuntime } from './context.js';
+/** Register tools routes in the order established by LoomDaemon.routes(). */
+export declare function registerToolsRoutes(app: Express, withRuntime: WithRuntime): void;

package/dist/daemon/routes/tools.js

@@ -0,0 +1,180 @@
+import path from "node:path";
+import { searchCatalog } from "../../core/mcp-catalog.js";
+import { probeMcpServer } from "../../core/mcp.js";
+import { authorSkill, SkillInstallError } from "../../core/skill-install.js";
+import { suggestSkill } from "../../core/skills.js";
+/** Register tools routes in the order established by LoomDaemon.routes(). */
+export function registerToolsRoutes(app, withRuntime) {
+    // Skills: the SKILL.md context blocks; per-project enable state; a keyword
+    // suggestion for the current message (?suggest=<text>).
+    app.get("/api/projects/:id/skills", withRuntime(async (rt, req, res) => {
+        const skills = rt.getSkills();
+        const suggest = req.query.suggest ? suggestSkill(String(req.query.suggest), skills) : null;
+        res.json({ skills, suggestion: suggest });
+    }));
+    app.put("/api/projects/:id/skills/:skillId", withRuntime(async (rt, req, res) => {
+        const { enabled } = (req.body ?? {});
+        const id = String(req.params.skillId);
+        // turning on a skill that doesn't exist saved a phantom row and said OK
+        if (enabled !== false && !rt.skillsCatalog().some((sk) => sk.id === id)) {
+            return void res.status(404).json({ error: `no skill "${id}" in this project or on this machine` });
+        }
+        res.json({ skills: rt.setSkillEnabled(id, enabled !== false) });
+    }));
+    // The skill picker's list: every skill discoverable from this project, from
+    // all four roots (project, ~/.claude, plugin caches, bundled), without the
+    // bodies. `origin` and `source` say where each one lives, and `installed`
+    // marks the ones in the project's own skills/ dir — the only ones DELETE
+    // will touch.
+    app.get("/api/projects/:id/skills/catalog", withRuntime(async (rt, _req, res) => {
+        res.json({ skills: rt.skillsCatalog() });
+    }));
+    // Install a skill: from a git remote, or from a directory on this machine.
+    // Everything the user can fix — a URL that isn't git, a repo with no
+    // SKILL.md, a name already taken — comes back as a 400 with the reason,
+    // because "invalid input" is useless when the real answer is "that repo has
+    // no SKILL.md in it".
+    app.post("/api/projects/:id/skills/install", withRuntime(async (rt, req, res) => {
+        const body = (req.body ?? {});
+        try {
+            const skill = await rt.installSkill(body);
+            res.json({ skill, skills: rt.skillsCatalog() });
+        }
+        catch (err) {
+            if (err instanceof SkillInstallError) {
+                return void res.status(400).json({ error: err.message });
+            }
+            throw err;
+        }
+    }));
+    // Remove a project-installed skill from disk. Refused (400) for a skill
+    // that lives in ~/.claude or a plugin cache: those are shared with every
+    // other tool on the machine and are not ours to delete.
+    app.delete("/api/projects/:id/skills/:skillId", withRuntime(async (rt, req, res) => {
+        try {
+            const removed = rt.removeSkill(String(req.params.skillId));
+            res.json({ ...removed, skills: rt.skillsCatalog() });
+        }
+        catch (err) {
+            if (err instanceof SkillInstallError) {
+                return void res.status(400).json({ error: err.message });
+            }
+            throw err;
+        }
+    }));
+    // The MCP catalog: the official registry, searchable, plus a hand-verified
+    // shortlist for the empty state. Not project-scoped — it is the same
+    // catalog for everyone, and caching it per-project would multiply the
+    // requests against somebody else's public service by the project count.
+    //
+    // `degraded: true` means the registry did not answer and `servers` is
+    // therefore empty; `featured` needs no network and is always there.
+    app.get("/api/mcp/catalog", (req, res) => {
+        void (async () => {
+            const q = String(req.query.q ?? "").trim();
+            const limit = req.query.limit ? Number(req.query.limit) : undefined;
+            res.json(await searchCatalog(q, limit));
+        })();
+    });
+    // MCP servers: the connect/toggle list. PATCH upserts one by name.
+    //
+    // `connected` on each row is measured here, not inferred from the presence
+    // of a url — every configured endpoint gets a bounded probe (2s, in
+    // parallel) and reports what actually answered. `?probe=0` skips it for a
+    // caller that only wants the configured list back fast.
+    app.get("/api/projects/:id/mcps", withRuntime(async (rt, req, res) => {
+        const probe = String(req.query.probe ?? "1") !== "0";
+        res.json({ mcps: probe ? await rt.getMcpsProbed() : rt.getMcps(), probed: probe });
+    }));
+    app.patch("/api/projects/:id/mcps", withRuntime(async (rt, req, res) => {
+        const body = (req.body ?? {});
+        if (!body.mcp?.name)
+            return void res.status(400).json({ error: "mcp.name required" });
+        res.json({ mcps: rt.upsertMcp(body.mcp) });
+    }));
+    // Install a server picked out of the catalog.
+    //
+    // Two things separate this from the PATCH above. It refuses a server with
+    // neither a url nor a command — that is the exact shape of the old
+    // placeholder rows, and the whole point of the catalog is that a row means
+    // something now. And it probes what it just wrote, so the response carries a
+    // measured `connected` rather than leaving the UI to render a green badge
+    // off the presence of a string.
+    app.post("/api/projects/:id/mcps/install", withRuntime(async (rt, req, res) => {
+        const body = (req.body ?? {});
+        const name = String(body.name ?? "").trim();
+        if (!name)
+            return void res.status(400).json({ error: "name required" });
+        const url = String(body.url ?? "").trim();
+        const command = String(body.command ?? "").trim();
+        if (!url && !command) {
+            return void res.status(400).json({
+                error: `"${name}" has neither a url nor a command — an MCP server needs somewhere to connect to or something to run`,
+            });
+        }
+        if (url && !/^https?:\/\//i.test(url)) {
+            return void res.status(400).json({ error: `"${url}" is not an http(s) URL` });
+        }
+        const transport = body.transport === "sse" || body.transport === "http" ? body.transport : undefined;
+        const args = Array.isArray(body.args) ? body.args.map((a) => String(a)) : undefined;
+        const mcps = rt.upsertMcp({
+            name,
+            url,
+            ...(command ? { command } : {}),
+            ...(args?.length ? { args } : {}),
+            ...(url && transport ? { transport } : {}),
+            ...(body.headers && Object.keys(body.headers).length ? { headers: body.headers } : {}),
+            ...(body.env && Object.keys(body.env).length ? { env: body.env } : {}),
+            ...(body.description ? { description: String(body.description) } : {}),
+            ...(body.slug ? { slug: String(body.slug) } : {}),
+            enabledForSession: true,
+        });
+        // Probe after persisting: the answer describes what is now configured,
+        // and a server that fails its probe is still installed — unreachable is
+        // a state to show, not a reason to refuse to save.
+        const installed = mcps.find((m) => m.name === name);
+        const connected = url ? await probeMcpServer(url).catch(() => false) : false;
+        res.json({
+            installed: installed ? { ...installed, connected, probedAt: Date.now() } : null,
+            mcps: await rt.getMcpsProbed(),
+        });
+    }));
+    // The background poll's live view: up/down, consecutive failures, last
+    // probe. POST forces a poll now instead of waiting for the next tick.
+    app.get("/api/projects/:id/mcps/health", withRuntime(async (rt, _req, res) => {
+        res.json({ health: rt.mcpHealthReport() });
+    }));
+    app.post("/api/projects/:id/mcps/health", withRuntime(async (rt, _req, res) => {
+        await rt.pollMcpHealth();
+        res.json({ health: rt.mcpHealthReport() });
+    }));
+    // Author a skill in place: scaffold skills/<id>/SKILL.md, validated by the
+    // same parser the roster reads with — a skill this accepts is one the
+    // loader will actually offer.
+    app.post("/api/projects/:id/skills/author", withRuntime(async (rt, req, res) => {
+        const b = (req.body ?? {});
+        try {
+            const out = authorSkill(rt.info.dir, {
+                id: String(b.id ?? ""),
+                name: String(b.name ?? ""),
+                description: String(b.description ?? ""),
+                ...(b.body ? { body: String(b.body) } : {}),
+            });
+            if (b.enable !== false)
+                rt.setSkillEnabled(path.basename(out.dir), true);
+            res.json(out);
+        }
+        catch (err) {
+            res.status(400).json({ error: err instanceof Error ? err.message : String(err) });
+        }
+    }));
+    // Uninstall a server. 404 when nothing was configured under that name —
+    // "deleted a thing that wasn't there" hides a typo in a server name.
+    app.delete("/api/projects/:id/mcps/:name", withRuntime(async (rt, req, res) => {
+        const { removed, mcps } = rt.removeMcp(String(req.params.name));
+        if (!removed)
+            return void res.status(404).json({ error: `no configured MCP server "${req.params.name}"` });
+        res.json({ removed: true, mcps });
+    }));
+}
+//# sourceMappingURL=tools.js.map

package/dist/daemon/routes/tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tools.js","sourceRoot":"","sources":["../../../src/daemon/routes/tools.ts"],"names":[],"mappings":"AACA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AACnD,OAAO,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAC7E,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAEpD,6EAA6E;AAC7E,MAAM,UAAU,mBAAmB,CAAC,GAAY,EAAE,WAAwB;IAExE,2EAA2E;IAC3E,wDAAwD;IACxD,GAAG,CAAC,GAAG,CACL,0BAA0B,EAC1B,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACjC,MAAM,MAAM,GAAG,EAAE,CAAC,SAAS,EAAE,CAAC;QAC9B,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC3F,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;IAC5C,CAAC,CAAC,CACH,CAAC;IAEF,GAAG,CAAC,GAAG,CACL,mCAAmC,EACnC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACjC,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAA0B,CAAC;QAC9D,MAAM,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACtC,wEAAwE;QACxE,IAAI,OAAO,KAAK,KAAK,IAAI,CAAC,EAAE,CAAC,aAAa,EAAE,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;YACxE,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,aAAa,EAAE,sCAAsC,EAAE,CAAC,CAAC;QACrG,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,eAAe,CAAC,EAAE,EAAE,OAAO,KAAK,KAAK,CAAC,EAAE,CAAC,CAAC;IAClE,CAAC,CAAC,CACH,CAAC;IAEF,4EAA4E;IAC5E,2EAA2E;IAC3E,0EAA0E;IAC1E,yEAAyE;IACzE,cAAc;IACd,GAAG,CAAC,GAAG,CACL,kCAAkC,EAClC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAClC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;IAC3C,CAAC,CAAC,CACH,CAAC;IAEF,2EAA2E;IAC3E,qEAAqE;IACrE,wEAAwE;IACxE,4EAA4E;IAC5E,sBAAsB;IACtB,GAAG,CAAC,IAAI,CACN,kCAAkC,EAClC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACjC,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAuD,CAAC;QACpF,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,MAAM,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;YAC1C,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,iBAAiB,EAAE,CAAC;gBACrC,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YAC3D,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC,CAAC,CACH,CAAC;IAEF,wEAAwE;IACxE,yEAAyE;IACzE,wDAAwD;IACxD,GAAG,CAAC,MAAM,CACR,mCAAmC,EACnC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACjC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;YAC3D,GAAG,CAAC,IAAI,CAAC,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;QACvD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,iBAAiB,EAAE,CAAC;gBACrC,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YAC3D,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC,CAAC,CACH,CAAC;IAEF,2EAA2E;IAC3E,qEAAqE;IACrE,sEAAsE;IACtE,wEAAwE;IACxE,EAAE;IACF,sEAAsE;IACtE,oEAAoE;IACpE,GAAG,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACvC,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;YAC3C,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,GAAG,CAAC,IAAI,CAAC,MAAM,aAAa,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;QAC1C,CAAC,CAAC,EAAE,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,mEAAmE;IACnE,EAAE;IACF,2EAA2E;IAC3E,oEAAoE;IACpE,0EAA0E;IAC1E,wDAAwD;IACxD,GAAG,CAAC,GAAG,CACL,wBAAwB,EACxB,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACjC,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,IAAI,GAAG,CAAC,KAAK,GAAG,CAAC;QACrD,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;IACrF,CAAC,CAAC,CACH,CAAC;IAEF,GAAG,CAAC,KAAK,CACP,wBAAwB,EACxB,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACjC,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAgC,CAAC;QAC7D,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI;YAAE,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;QACtF,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,GAAyC,CAAC,EAAE,CAAC,CAAC;IACnF,CAAC,CAAC,CACH,CAAC;IAEF,8CAA8C;IAC9C,EAAE;IACF,0EAA0E;IAC1E,mEAAmE;IACnE,2EAA2E;IAC3E,6EAA6E;IAC7E,0EAA0E;IAC1E,gCAAgC;IAChC,GAAG,CAAC,IAAI,CACN,gCAAgC,EAChC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACjC,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAU3B,CAAC;QACF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC5C,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC;QACxE,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAC1C,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QAClD,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;YACrB,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC/B,KAAK,EAAE,IAAI,IAAI,qGAAqG;aACrH,CAAC,CAAC;QACL,CAAC;QACD,IAAI,GAAG,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACtC,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,GAAG,yBAAyB,EAAE,CAAC,CAAC;QAChF,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,KAAK,KAAK,IAAI,IAAI,CAAC,SAAS,KAAK,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;QACrG,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACpF,MAAM,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC;YACxB,IAAI;YACJ,GAAG;YACH,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/B,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjC,GAAG,CAAC,GAAG,IAAI,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1C,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtF,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjD,iBAAiB,EAAE,IAAI;SACxB,CAAC,CAAC;QACH,uEAAuE;QACvE,wEAAwE;QACxE,mDAAmD;QACnD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QACpD,MAAM,SAAS,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,cAAc,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QAC7E,GAAG,CAAC,IAAI,CAAC;YACP,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,GAAG,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI;YAC/E,IAAI,EAAE,MAAM,EAAE,CAAC,aAAa,EAAE;SAC/B,CAAC,CAAC;IACL,CAAC,CAAC,CACH,CAAC;IAEF,uEAAuE;IACvE,sEAAsE;IACtE,GAAG,CAAC,GAAG,CACL,+BAA+B,EAC/B,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAClC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;IAC7C,CAAC,CAAC,CACH,CAAC;IAEF,GAAG,CAAC,IAAI,CACN,+BAA+B,EAC/B,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE;QAClC,MAAM,EAAE,CAAC,aAAa,EAAE,CAAC;QACzB,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,EAAE,CAAC,eAAe,EAAE,EAAE,CAAC,CAAC;IAC7C,CAAC,CAAC,CACH,CAAC;IAEF,2EAA2E;IAC3E,sEAAsE;IACtE,8BAA8B;IAC9B,GAAG,CAAC,IAAI,CACN,iCAAiC,EACjC,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACjC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAMxB,CAAC;QACF,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,WAAW,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE;gBACnC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;gBACtB,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;gBAC1B,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC;gBACxC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC5C,CAAC,CAAC;YACH,IAAI,CAAC,CAAC,MAAM,KAAK,KAAK;gBAAE,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;YACzE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpF,CAAC;IACH,CAAC,CAAC,CACH,CAAC;IAEF,wEAAwE;IACxE,qEAAqE;IACrE,GAAG,CAAC,MAAM,CACR,8BAA8B,EAC9B,WAAW,CAAC,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QACjC,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QAChE,IAAI,CAAC,OAAO;YAAE,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,6BAA6B,GAAG,CAAC,MAAM,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC;QAC3G,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACpC,CAAC,CAAC,CACH,CAAC;AACJ,CAAC"}

package/dist/daemon/routes/updates.d.ts

@@ -0,0 +1,4 @@
+import type { Express } from 'express';
+import type { RouteContext } from './context.js';
+/** Register updates routes in the order established by LoomDaemon.routes(). */
+export declare function registerUpdatesRoutes(app: Express, ctx: Pick<RouteContext, "cachedRelease" | "updating" | "close">): void;

package/dist/daemon/routes/updates.js

@@ -0,0 +1,89 @@
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+import { logbook } from "../../core/logbook.js";
+import { detectInstall, newerThan, plan, refuseDirtyCheckout } from "../../core/updater.js";
+import { VERSION } from "../../version.js";
+import { defaultExec } from "../landing.js";
+import { BUILD_REV, loomRoot } from '../system.js';
+/** Register updates routes in the order established by LoomDaemon.routes(). */
+export function registerUpdatesRoutes(app, ctx) {
+    app.get("/api/updates", (req, res) => {
+        void (async () => {
+            const root = loomRoot();
+            let git = null;
+            if (root) {
+                const { remoteBehind } = await import("../../core/git.js");
+                git = await remoteBehind(root).catch(() => null);
+            }
+            const release = await ctx.cachedRelease(req.query.refresh !== undefined);
+            const install = detectInstall(path.dirname(path.dirname(fileURLToPath(import.meta.url))));
+            const p = plan(install);
+            res.json({
+                version: VERSION,
+                rev: BUILD_REV,
+                root,
+                git,
+                // The release half: what's published, and whether this copy can fetch it.
+                latest: release?.version ?? null,
+                release,
+                behindRelease: release ? newerThan(release.version, VERSION) : false,
+                install: p.install,
+                canApply: p.refusal === null,
+                refusal: p.refusal,
+                steps: p.steps.map((x) => [x.cmd, ...x.args].join(" ")),
+            });
+        })();
+    });
+    /**
+     * Bring this copy up to date, in the words the plan showed.
+     *
+     * The update runs as a sequence of real commands whose output goes to the
+     * logbook (and so to every open client, live). When it finishes, the daemon
+     * exits: whatever started it — the CLI's ensureDaemon, the desktop shell,
+     * a service manager — brings it back on the new build, which is also how a
+     * stale build is replaced today.
+     */
+    app.post("/api/updates/apply", (req, res) => {
+        // Updating replaces the code this machine runs: the local admin only,
+        // never a paired phone.
+        if (!req.isAdmin) {
+            return void res.status(403).json({ error: "admin only" });
+        }
+        void (async () => {
+            if (ctx.updating)
+                return void res.status(409).json({ error: "an update is already running" });
+            const install = detectInstall(path.dirname(path.dirname(fileURLToPath(import.meta.url))));
+            const p = plan(install);
+            if (p.refusal)
+                return void res.status(400).json({ error: p.refusal });
+            if (p.install === "git" && p.cwd) {
+                const dirty = await defaultExec("git", ["status", "--porcelain"], p.cwd);
+                const refusal = refuseDirtyCheckout(dirty.out);
+                if (refusal)
+                    return void res.status(400).json({ error: refusal });
+            }
+            ctx.updating = true;
+            res.json({ started: true, steps: p.steps.map((x) => [x.cmd, ...x.args].join(" ")) });
+            const ran = [];
+            for (const step of p.steps) {
+                const line = [step.cmd, ...step.args].join(" ");
+                logbook.info("update", `running ${line}`);
+                const r = await defaultExec(step.cmd, step.args, p.cwd ?? process.cwd(), { timeoutMs: 15 * 60_000 });
+                ran.push(line);
+                if (r.code !== 0) {
+                    ctx.updating = false;
+                    logbook.error("update", `${line} failed (exit ${r.code})`, (r.err || r.out).slice(-4000));
+                    return;
+                }
+                if (r.out.trim())
+                    logbook.info("update", `${step.cmd} finished`, r.out.trim().slice(-2000));
+            }
+            logbook.info("update", `updated via ${ran.join(" && ")} — restarting on the new build`);
+            // Let the answer and the log frames reach the clients before we go.
+            setTimeout(() => {
+                void ctx.close().finally(() => process.exit(0));
+            }, 750);
+        })();
+    });
+}
+//# sourceMappingURL=updates.js.map

package/dist/daemon/routes/updates.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"updates.js","sourceRoot":"","sources":["../../../src/daemon/routes/updates.ts"],"names":[],"mappings":"AAEA,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,IAAI,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAC5F,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAC3C,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAC5C,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAEnD,+EAA+E;AAC/E,MAAM,UAAU,qBAAqB,CAAC,GAAY,EAAE,GAA+D;IAEjH,GAAG,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QACnC,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,MAAM,IAAI,GAAG,QAAQ,EAAE,CAAC;YACxB,IAAI,GAAG,GAAG,IAAI,CAAC;YACf,IAAI,IAAI,EAAE,CAAC;gBACT,MAAM,EAAE,YAAY,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;gBAC3D,GAAG,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YACnD,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC;YACzE,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1F,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;YACxB,GAAG,CAAC,IAAI,CAAC;gBACP,OAAO,EAAE,OAAO;gBAChB,GAAG,EAAE,SAAS;gBACd,IAAI;gBACJ,GAAG;gBACH,0EAA0E;gBAC1E,MAAM,EAAE,OAAO,EAAE,OAAO,IAAI,IAAI;gBAChC,OAAO;gBACP,aAAa,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK;gBACpE,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,QAAQ,EAAE,CAAC,CAAC,OAAO,KAAK,IAAI;gBAC5B,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;aACxD,CAAC,CAAC;QACL,CAAC,CAAC,EAAE,CAAC;IACP,CAAC,CAAC,CAAC;IAEH;;;;;;;;OAQG;IACH,GAAG,CAAC,IAAI,CAAC,oBAAoB,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC1C,sEAAsE;QACtE,wBAAwB;QACxB,IAAI,CAAE,GAAuC,CAAC,OAAO,EAAE,CAAC;YACtD,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC,CAAC;QAC5D,CAAC;QACD,KAAK,CAAC,KAAK,IAAI,EAAE;YACf,IAAI,GAAG,CAAC,QAAQ;gBAAE,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,8BAA8B,EAAE,CAAC,CAAC;YAC9F,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YAC1F,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;YACxB,IAAI,CAAC,CAAC,OAAO;gBAAE,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;YACtE,IAAI,CAAC,CAAC,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC;gBACjC,MAAM,KAAK,GAAG,MAAM,WAAW,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,aAAa,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC;gBACzE,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBAC/C,IAAI,OAAO;oBAAE,OAAO,KAAK,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;YACpE,CAAC;YACD,GAAG,CAAC,QAAQ,GAAG,IAAI,CAAC;YACpB,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;YACrF,MAAM,GAAG,GAAa,EAAE,CAAC;YACzB,KAAK,MAAM,IAAI,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;gBAC3B,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAChD,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,IAAI,EAAE,CAAC,CAAC;gBAC1C,MAAM,CAAC,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;gBACrG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACf,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;oBACjB,GAAG,CAAC,QAAQ,GAAG,KAAK,CAAC;oBACrB,OAAO,CAAC,KAAK,CAAC,QAAQ,EAAE,GAAG,IAAI,iBAAiB,CAAC,CAAC,IAAI,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;oBAC1F,OAAO;gBACT,CAAC;gBACD,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE;oBAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,GAAG,WAAW,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YAC9F,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,eAAe,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,gCAAgC,CAAC,CAAC;YACxF,oEAAoE;YACpE,UAAU,CAAC,GAAG,EAAE;gBACd,KAAK,GAAG,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAClD,CAAC,EAAE,GAAG,CAAC,CAAC;QACV,CAAC,CAAC,EAAE,CAAC;IACP,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/daemon/routes/voice.d.ts

@@ -0,0 +1,4 @@
+import type { Express } from 'express';
+import type { WithRuntime } from './context.js';
+/** Register voice routes in the order established by LoomDaemon.routes(). */
+export declare function registerVoiceRoutes(app: Express, withRuntime: WithRuntime): void;