@makerstufferupper/flypi 0.1.4 → 0.1.6

package/dist/ui/assets/index-BCcOueOd.css

@@ -0,0 +1 @@
+.revealed.svelte-19l53a6{color:var(--ink)}.memory-body.svelte-3w3u32{color:var(--ink);flex-basis:100%}.memory-row.svelte-3w3u32{align-items:flex-start}.memory-why.svelte-3w3u32,.memory-history.svelte-3w3u32,.memory-uses.svelte-3w3u32{gap:.25rem;width:100%;margin:.3rem 0 0;padding:0;list-style:none;display:grid}.memory-why.svelte-3w3u32 li:where(.svelte-3w3u32),.memory-history.svelte-3w3u32 li:where(.svelte-3w3u32){flex-wrap:wrap;align-items:center;gap:.4rem;display:flex}.search.svelte-3w3u32{font:inherit;background:var(--panel);color:var(--ink);border:1px solid var(--line);border-radius:4px;padding:.2rem .3rem}.preimage.svelte-3w3u32 summary:where(.svelte-3w3u32){color:var(--muted);cursor:pointer;font-size:11px}.preimage.svelte-3w3u32 pre:where(.svelte-3w3u32){max-height:12rem}.wiki-page.svelte-3w3u32 h4:where(.svelte-3w3u32){margin:.8rem 0 .2rem;font-size:13px}:root{--lightningcss-light:initial;--lightningcss-dark: ;color-scheme:light;--bg:#fbfbfd;--panel:#fff;--line:#e3e4e9;--ink:#17181d;--muted:#6b6f7a;--accent:#2f6f4f;--error:#a3262a;--surface:#f4f5f7;--code:#f6f7f9;--queue:#f2f7f4}:root[data-theme=dark]{--lightningcss-light: ;--lightningcss-dark:initial;color-scheme:dark;--bg:#13151a;--panel:#1b1e25;--line:#2c303a;--ink:#e6e8ee;--muted:#98a0ae;--accent:#6cb892;--error:#e08084;--surface:#232730;--code:#1f232b;--queue:#1d2b24}*{box-sizing:border-box}body{background:var(--bg);color:var(--ink);margin:0}.layout{grid-template-columns:var(--sidebar-w,15rem) .5rem minmax(0, 1fr) .5rem var(--activity-w,22rem);gap:.25rem;height:100vh;padding:.75rem;font:14px/1.5 ui-sans-serif,system-ui,sans-serif;display:grid}.updating{text-align:center;height:100vh;color:var(--muted);place-content:center;gap:.3rem;padding:1rem;font:14px/1.5 ui-sans-serif,system-ui,sans-serif;display:grid}.updating h2{color:var(--ink);margin:0 0 .3rem;font-size:1.1rem}.updating p{margin:0}.sidebar,.chat,.activity-panel,.settings-view{background:var(--panel);border:1px solid var(--line);border-radius:8px;padding:.75rem;overflow:auto}.gutter{cursor:col-resize;touch-action:none;background:var(--line);border-radius:3px}.gutter:hover,.gutter:focus-visible{background:var(--accent)}.activity-panel{flex-direction:column;display:flex}.sidebar h1{margin:0 0 .5rem;font-size:1rem}.sidebar .port{color:var(--muted);font-weight:400}.sidebar .update{color:var(--muted);flex-wrap:wrap;align-items:center;gap:.3rem;margin:0 0 .5rem;font-size:.8rem;display:flex}.panel-head{flex-wrap:wrap;align-items:center;gap:.35rem;margin-bottom:.5rem;display:flex}.panel-head h1{flex:1;margin:0}.panel-actions{gap:.35rem;margin-bottom:.5rem;display:flex}.icon{flex:none;padding:.2rem .35rem}.panel-head .logo{border-radius:6px;flex:none;width:2.5rem;height:2.5rem}.icon svg{width:1.05rem;height:1.05rem;display:block}.field{color:var(--muted);margin-bottom:.5rem;font-size:12px;display:block}.field select{width:100%;margin-top:.15rem}.sessions{margin:.5rem 0;padding:0;list-style:none}.sessions li{align-items:center;gap:.15rem;display:flex}.sessions .session,.sessions input.name{flex:1;min-width:0}.sessions .run-dot{background:var(--accent,#3b82f6);border-radius:50%;flex:none;width:.45rem;height:.45rem;animation:1.4s ease-in-out infinite run-pulse}@media (prefers-reduced-motion:reduce){.sessions .run-dot{animation:none}}@keyframes run-pulse{0%,to{opacity:1}50%{opacity:.3}}.sessions .unread-dot{background:var(--accent,#3b82f6);border-radius:50%;flex:none;width:.45rem;height:.45rem}.sessions li.unread .session{font-weight:700}.sessions .remove{opacity:.6}.sessions .remove:hover{opacity:1}.sessions .session{text-align:left;white-space:nowrap;text-overflow:ellipsis;background:0 0;border:0;border-radius:6px;width:100%;overflow:hidden}.sessions .session:hover{background:var(--surface)}.sessions .session.current{background:var(--queue)}.sessions input.name{background:var(--queue);width:100%;color:inherit;border:0;border-radius:6px;font-weight:600}.sessions input.name:hover{background:var(--queue)}button,select,input,textarea{font:inherit;color:inherit}button{border:1px solid var(--line);background:var(--surface);cursor:pointer;border-radius:6px;padding:.25rem .5rem}button:hover{border-color:var(--accent)}input:not([type=checkbox]),select,textarea{border:1px solid var(--line);background:var(--surface);border-radius:6px;padding:.3rem .4rem}textarea{width:100%}.chat{flex-direction:column;display:flex}.messages{flex:1;margin:0;padding:0;list-style:none;overflow:auto}.msg{border-bottom:1px solid var(--line);padding:.4rem 0}.msg .role{text-transform:uppercase;letter-spacing:.04em;color:var(--muted);font-size:11px;display:block}.msg[data-role=user] .role{color:var(--accent)}.usage{color:var(--muted);float:right;font-size:11px}.msg .fork{opacity:.45;margin-top:.2rem}.msg:hover .fork{opacity:.8}.msg .fork:hover{opacity:1}.markdown pre,.tool-output,.thinking pre,.system-prompt,.orphan-result,.memory-block,.cache-usage,.cfg-log{background:var(--code);border:1px solid var(--line);white-space:pre-wrap;border-radius:6px;padding:.4rem;font-family:ui-monospace,monospace;font-size:12.5px;overflow:auto}.markdown pre{margin:.35rem 0}.markdown code{font-family:ui-monospace,monospace}details.thinking summary{cursor:pointer;color:var(--muted);font-size:12px}.tool-card{border:1px solid var(--line);border-radius:6px;margin:.35rem 0;padding:.35rem .5rem}.tool-card[data-state=running]{border-color:var(--accent)}.tool-card[data-state=error]{border-color:var(--error)}.tool-card header{align-items:baseline;gap:.5rem;display:flex}.tool-name{font-weight:600}.tool-args{color:var(--muted);text-overflow:ellipsis;white-space:nowrap;flex:1;font-size:12px;overflow:hidden}.tool-state{color:var(--muted);font-size:11px}.queue{margin:.35rem 0 0;padding:0;list-style:none}.queued{border-left:3px solid var(--accent);background:var(--queue);padding:.25rem .4rem;font-size:12.5px}.extension-output{margin:.35rem 0 0;padding:0;list-style:none}.extension-note{border-left:3px solid var(--accent);background:var(--queue);white-space:pre-wrap;padding:.25rem .4rem;font-size:12.5px}.extension-note[data-level=warning]{border-left-color:var(--muted)}.extension-note[data-level=error]{border-left-color:var(--error)}.extension-dialog{border:1px solid var(--line);background:var(--surface);border-radius:8px;margin:.35rem 0 0;padding:.4rem .5rem}.extension-dialog .ask{white-space:pre-wrap;margin:0 0 .35rem;font-size:13px}.answers{flex-wrap:wrap;align-items:center;gap:.35rem;display:flex}.answer-input{align-items:center;gap:.35rem;display:flex}.commands{flex-wrap:wrap;gap:.3rem;margin:.35rem 0 0;padding:0;list-style:none;display:flex}.command{border:1px solid var(--line);background:var(--surface);cursor:pointer;border-radius:6px;padding:.15rem .4rem;font-size:12px}.command .desc{color:var(--muted);margin-left:.3rem}.attachments{flex-wrap:wrap;gap:.35rem;margin:0 0 .35rem;padding:0;list-style:none;display:flex}.attachment{border:1px solid var(--line);background:var(--surface);border-radius:6px;align-items:center;gap:.35rem;padding:.2rem .35rem;font-size:12px;display:flex}.attachment .thumb{object-fit:cover;border-radius:4px;flex:none;width:1.5rem;height:1.5rem}.attachment .name{text-overflow:ellipsis;white-space:nowrap;max-width:14rem;overflow:hidden}.attachment .remove{color:var(--muted);cursor:pointer;background:0 0;border:0;padding:0 .15rem}.attachment .remove:hover{color:var(--error)}.attachment-image{border:1px solid var(--line);border-radius:6px;max-width:min(100%,32rem);max-height:24rem;margin:.35rem 0;display:block}.error{color:var(--error)}.muted{color:var(--muted)}.notice{color:var(--muted);border-left:2px solid var(--line);padding:.15rem 0 .15rem .5rem}.picker{gap:.5rem;margin-top:.5rem;display:flex}.picker .field{flex:1;margin-bottom:0}.composer{border-top:1px solid var(--line);padding-top:.5rem}.controls{flex-wrap:wrap;align-items:center;gap:.5rem;margin-top:.35rem;display:flex}.controls .stop{border-color:var(--error);color:var(--error)}.offline{color:var(--muted);font-size:12px}.metrics{color:var(--muted);flex-wrap:wrap;align-items:center;gap:.6rem;margin-left:auto;font-size:11.5px;display:flex}.metrics b{color:var(--ink);font-variant-numeric:tabular-nums;font-weight:600}.gauge{flex:none;width:1.15rem;height:1.15rem;position:relative}.gauge svg{width:100%;height:100%;position:absolute;inset:0;transform:rotate(-90deg)}.gauge circle{fill:none;stroke-width:3px}.gauge .track{stroke:var(--line)}.gauge .fill{stroke:var(--accent);stroke-linecap:round;transition:stroke-dasharray .3s}.activity-panel h2{text-transform:uppercase;color:var(--muted);margin:0 0 .5rem;font-size:12px}.activity-panel h2 .count{font-weight:400}.activity-panel footer{border-top:1px solid var(--line);padding-top:.5rem}.activity{flex:1;margin:0;padding:0;list-style:none;overflow:auto}.activity li{border-bottom:1px solid var(--line);padding:.3rem 0}.activity li .tool-card{margin:0}.activity-empty{color:var(--muted);font-size:12px}.settings-view{grid-column:3/-1}.settings-view .panel-head h2{flex:1;margin:0;font-size:1rem}.settings-view .cfg-note{color:var(--muted);margin:0 0 .5rem;font-size:12px}.settings-view .cfg-note code{font:11px/1.4 ui-monospace,SFMono-Regular,Menlo,monospace}.cfg-stack{gap:1rem;max-width:46rem;display:grid}.cfg-section{align-items:center;gap:.5rem;margin:.9rem 0 .25rem;display:flex}.cfg-section h3{flex:1;margin:0;font-size:13px}.cfg-list.cfg-plain{border:0}.cfg-list.cfg-plain li{border-bottom:0;padding-left:0}.cfg-list{border:1px solid var(--line);border-radius:6px;margin:0;padding:0;list-style:none}.cfg-list li{border-bottom:1px solid var(--line);flex-wrap:wrap;align-items:center;gap:.4rem;padding:.3rem .4rem;display:flex}.cfg-list li:last-child{border-bottom:0}.cfg-list code{min-width:8rem;color:var(--muted);overflow-wrap:anywhere;flex:1;font:11px/1.4 ui-monospace,SFMono-Regular,Menlo,monospace}.cfg-list .cfg-name{color:inherit;font:inherit;text-align:left;cursor:pointer;background:0 0;border:0;padding:0;font-weight:600}.cfg-list .field{flex:none;margin:0}.cfg-list .field select{width:auto;margin-top:0}.cfg-list .icon{opacity:.6;flex:none}.cfg-list .icon:hover{opacity:1}.cfg-list .icon:disabled{opacity:.2;cursor:default}.cfg-list .remove{color:var(--error)}.cfg-default{color:var(--accent);white-space:nowrap;align-items:center;gap:.25rem;font-size:11px;font-weight:600;display:flex}.cfg-default select{font:inherit;background:var(--panel);color:var(--ink);border:1px solid var(--line);border-radius:4px;padding:.1rem .2rem;font-weight:400}.cfg-list .cfg-off,.cfg-list .cfg-none{color:var(--muted);font-size:11px}.cfg-list .cfg-state{color:var(--muted);white-space:nowrap;font-size:11px}.cfg-list .cfg-state.connected{color:var(--accent)}.cfg-list .cfg-state.failed,.cfg-list .cfg-state.needs-auth,.cfg-list .cfg-state-error{color:var(--error)}.cfg-log{max-height:12rem;margin:.4rem 0 0}.cfg-signin{border-top:1px solid var(--line);flex:1 0 100%;margin-top:.3rem;padding-top:.35rem}.cfg-signin p{overflow-wrap:anywhere;margin:.2rem 0;font-size:12px}.cfg-signin-form{flex-wrap:wrap;align-items:end;gap:.4rem;display:flex}.cfg-signin-form .field{flex:18rem;margin:0}.cfg-signin-form input{background:var(--panel);width:100%;color:var(--ink);border:1px solid var(--line);border-radius:4px;margin-top:.15rem;padding:.2rem .3rem;font:11px/1.4 ui-monospace,monospace}.cfg-modal{background:var(--panel);width:min(30rem,92vw);color:var(--ink);border:1px solid var(--line);border-radius:8px;max-height:78vh;margin:12vh auto auto;padding:.9rem;overflow:auto}.cfg-modal::backdrop{background:#0000008c}.cfg-modal .cfg-section{margin-top:0}.cfg-modal .field{margin-bottom:.35rem}.cfg-modal input,.cfg-modal select{width:100%;font:inherit;background:var(--panel);color:var(--ink);border:1px solid var(--line);border-radius:4px;margin-top:.15rem;padding:.2rem .3rem}.cfg-modal input:disabled{color:var(--muted)}.cfg-inline{align-items:end;gap:.5rem;display:flex}.cfg-inline .field:first-child{flex:1}.cfg-install{align-items:end;gap:.5rem;margin-bottom:.4rem;display:flex}.cfg-install .field{flex:18rem;margin:0}.cfg-install input{background:var(--panel);width:100%;color:var(--ink);border:1px solid var(--line);border-radius:4px;margin-top:.15rem;padding:.2rem .3rem;font:11px/1.4 ui-monospace,monospace}.cfg-modal textarea,.cfg-raw{background:var(--panel);width:100%;color:var(--ink);border:1px solid var(--line);resize:vertical;border-radius:4px;margin-top:.15rem;padding:.2rem .3rem;font:12px/1.4 ui-monospace,SFMono-Regular,Menlo,monospace}.cfg-modal details{margin:.45rem 0}.cfg-modal summary{color:var(--accent);cursor:pointer;font-size:12px}.cfg-modal details .cfg-note{margin:.35rem 0}.cfg-modal .error{font-size:12px}.cfg-modal .cfg-note{color:var(--muted);margin:0 0 .6rem;font-size:12px}.cfg-enabled{white-space:nowrap;align-items:center;gap:.25rem;display:flex}.cfg-enabled input{margin:0;width:auto!important}.cfg-actions{gap:.4rem;display:flex}.cfg-actions .remove{color:var(--error)}.linklike{color:var(--accent);font:inherit;background:0 0;border:0;padding:0;text-decoration:underline}.cfg-errors{max-width:46rem;margin:0 0 .5rem;padding:0;font-size:12px;list-style:none}

package/dist/ui/index.html

@@ -8,8 +8,8 @@
 			one of the two files and there is no script in this document to do anything else. -->
 		<link rel="icon" href="/flypi-logo-light.jpeg" media="(prefers-color-scheme: light)" />
 		<link rel="icon" href="/flypi-logo-dark.jpeg" media="(prefers-color-scheme: dark)" />
-		<script type="module" crossorigin src="/assets/index-Dv6ZykyY.js"></script>
-		<link rel="stylesheet" crossorigin href="/assets/index-CBuNmrDT.css">
+		<script type="module" crossorigin src="/assets/index-0MqV7dOT.js"></script>
+		<link rel="stylesheet" crossorigin href="/assets/index-BCcOueOd.css">
 	</head>
 	<body>
 		<div id="app"></div>

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@makerstufferupper/flypi",
-	"version": "0.1.4",
+	"version": "0.1.6",
 	"type": "module",
 	"description": "Local multi-model agent tool with a browser UI and a personal knowledge wiki, built on the pi SDK.",
 	"license": "MIT",
@@ -29,6 +29,7 @@
 		"probe:boundary": "tsx scripts/turn-boundary.ts",
 		"start": "node scripts/start.mjs",
 		"dev": "vite",
+		"dev:container": "node scripts/dev-container.mjs",
 		"models:warm": "tsx scripts/warm-models.ts",
 		"build": "vite build",
 		"prepublishOnly": "npm run typecheck && npm test && npm run build",
@@ -44,7 +45,8 @@
 		"serve": "tsx scripts/serve.ts",
 		"daemon": "tsx scripts/serve-daemon.ts",
 		"flypi": "node scripts/flypi.mjs",
-		"release": "node scripts/release.mjs"
+		"release": "node scripts/release.mjs",
+		"release:check": "node scripts/release-check.mjs"
 	},
 	"dependencies": {
 		"@earendil-works/pi-coding-agent": "^1.4.0",

package/scripts/dev-container.mjs

@@ -0,0 +1,131 @@
+#!/usr/bin/env node
+/**
+ * The local dev container, rebuilt from the working tree (docs/release.md, "Deploying something that is
+ * *not* released"). One command for what used to be four.
+ *
+ *   npm run dev:container
+ *
+ * build → pack → `docker build` with `docker/Dockerfile.local` and the tarball's directory as the build
+ * context (the repo's `.dockerignore` excludes `*.tgz`, so the repo is never the context) → replace the
+ * `flypi` container with one off the new image → wait for `/healthz`.
+ *
+ * It removes the `flypi` container and the `flypi:local-*` images older than the one it built. It never
+ * removes the `flypi-data` volume: that holds the memory models (~933 MB), and re-downloading them is the
+ * slowest part of the next start — which is also why the healthcheck gets a 15-minute start period.
+ *
+ * No gates here; `npm run release:check` is the rehearsal that runs them. This is the fast path, and it
+ * touches only the names above: never a published image, never a container this script did not build.
+ */
+import { spawnSync } from "node:child_process";
+import { copyFileSync, mkdtempSync, readFileSync, rmSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+
+const NAME = "flypi";
+const PORT = 8791;
+const VOLUME = "flypi-data";
+
+if (process.argv.includes("--help") || process.argv.includes("-h")) {
+	console.log(`flypi dev container — docs/release.md "Deploying something that is *not* released"
+
+  npm run dev:container        build → pack → image → replace the ${NAME} container on 127.0.0.1:${PORT}
+
+Removes: the ${NAME} container, and flypi:local-* images older than the one it just built.
+Keeps:   the ${VOLUME} volume — the memory models live there, and this script never deletes a volume.
+Tags:    flypi:local-<commit sha>, plus -dirty if the tree is not clean, because the package version
+         inside such an image collides with the published one.
+Stages:  build → pack → image → replace → serve → prune`);
+	process.exit(0);
+}
+
+const version = JSON.parse(readFileSync("package.json", "utf8")).version;
+const die = (message) => {
+	console.error(`dev:container: ${message}`);
+	process.exit(1);
+};
+function git(args) {
+	const result = spawnSync("git", args, { encoding: "utf8" });
+	if (result.status !== 0) die(`git ${args.join(" ")}: ${result.stderr.trim()}`);
+	return result.stdout.trim();
+}
+/** One step. It stops at the first failure: a half-replaced dev container is worse than an old one. */
+function run(command, args, { quiet = false } = {}) {
+	const result = spawnSync(command, args, { encoding: "utf8" });
+	if (result.status !== 0) {
+		die(`${command} ${args.join(" ")} exited ${result.status}${result.stderr ? `: ${result.stderr.trim().split("\n").slice(-3).join(" ")}` : ""}`);
+	}
+	if (!quiet && result.stdout) process.stdout.write(result.stdout);
+	return result;
+}
+const step = (what) => console.log(`\n${what}`);
+
+const sha = git(["rev-parse", "--short", "HEAD"]);
+const tag = `flypi:local-${sha}${git(["status", "--porcelain"]) ? "-dirty" : ""}`;
+const packDir = mkdtempSync(join(tmpdir(), "flypi-dev-"));
+
+try {
+	step("build — dist/ui, which the tarball ships");
+	run("npm", ["run", "build"]);
+
+	step("pack — the same artifact npm would publish, installed by the image");
+	run("npm", ["pack", "--pack-destination", packDir]);
+	const tgz = `makerstufferupper-flypi-${version}.tgz`;
+	copyFileSync("docker/Dockerfile.local", join(packDir, "Dockerfile"));
+
+	step(`image — ${tag} from ${tgz}`);
+	run("docker", ["build", "-q", "--build-arg", `FLYPI_TGZ=${tgz}`, "-t", tag, packDir]);
+
+	step(`replace — container ${NAME} on 127.0.0.1:${PORT}, volume ${VOLUME} kept`);
+	// `rm -f` on a name that is not there exits 1; that is the normal first run, not a failure.
+	spawnSync("docker", ["rm", "-f", NAME], { encoding: "utf8" });
+	run("docker", [
+		"run",
+		"-d",
+		"--name",
+		NAME,
+		"-p",
+		`127.0.0.1:${PORT}:${PORT}`,
+		"-v",
+		`${VOLUME}:/data`,
+		"-e",
+		"FLYPI_ROOT=/data",
+		// The image's own CMD downloads the memory models on a fresh state root, so "unhealthy" for the
+		// first quarter hour is the download, not a broken build.
+		"--health-cmd",
+		`node -e "fetch('http://127.0.0.1:${PORT}/healthz').then(r=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))"`,
+		"--health-interval",
+		"30s",
+		"--health-timeout",
+		"5s",
+		"--health-start-period",
+		"900s",
+		"--health-retries",
+		"3",
+		tag,
+	]);
+
+	step(`serve — waiting on http://127.0.0.1:${PORT}/healthz`);
+	const deadline = Date.now() + 180_000;
+	let body = null;
+	while (Date.now() < deadline && !body) {
+		try {
+			const response = await fetch(`http://127.0.0.1:${PORT}/healthz`);
+			if (response.ok) body = await response.json();
+		} catch {}
+		if (!body) await new Promise((resolve) => setTimeout(resolve, 2000));
+	}
+	if (!body) die(`${NAME} never answered /healthz — docker logs ${NAME}`);
+	console.log(`  ok    flypi ${body.version} · pi ${body.pi?.version ?? "?"} · ${tag}`);
+
+	step("prune — the flypi:local-* images this replaces");
+	const stale = run("docker", ["image", "ls", "flypi:local-*", "--format", "{{.Repository}}:{{.Tag}}"], { quiet: true }).stdout
+		.split("\n")
+		.map((image) => image.trim())
+		.filter((image) => image && image !== tag);
+	for (const image of stale) run("docker", ["rmi", image], { quiet: true });
+	console.log(stale.length ? `  removed ${stale.join(", ")}` : "  nothing older to remove");
+
+	console.log(`\n${NAME} is on http://127.0.0.1:${PORT} — docker logs -f ${NAME} to watch it`);
+} finally {
+	rmSync(packDir, { recursive: true, force: true });
+}

package/scripts/release-check.mjs

@@ -0,0 +1,239 @@
+#!/usr/bin/env node
+/**
+ * The release rehearsal (docs/release-checks.md). It runs the checks that have to pass before a version goes
+ * to the registry, and with `--published` the ones that prove what landed there is what was built.
+ *
+ *   node scripts/release-check.mjs                 # gates → pack → npm-install → image
+ *   node scripts/release-check.mjs --published     # registry + pushed image + run the published image
+ *   node scripts/release-check.mjs --skip-gates    # the docker half only
+ *   node scripts/release-check.mjs --keep          # leave the containers and volumes for a look
+ *
+ * It never publishes, pushes an image, or touches a container it did not create: everything it makes is named
+ * `flypi-check-*` on ports 8792/8793, so the serving `flypi` container on 8791 and its `flypi-data` volume are
+ * out of reach. Exit code is the number of failed checks.
+ */
+import { spawnSync } from "node:child_process";
+import { copyFileSync, mkdtempSync, readFileSync, rmSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+
+const argv = process.argv.slice(2);
+const has = (flag) => argv.includes(flag);
+const valueOf = (flag) => {
+	const at = argv.indexOf(flag);
+	return at === -1 ? undefined : argv[at + 1];
+};
+const version = valueOf("--version") ?? JSON.parse(readFileSync("package.json", "utf8")).version;
+
+if (has("--help") || has("-h")) {
+	console.log(`flypi release rehearsal — docs/release-checks.md
+
+  npm run release:check                        gates → pack → npm-install → image
+  npm run release:check -- --published         the registry and the pushed image, after the publish
+  npm run release:check -- --skip-gates        the docker half only
+  npm run release:check -- --keep              leave the containers and volumes for a look
+  npm run release:check -- --version <v>       check a version other than package.json's
+  npm run release:check -- --help              this list (-h is the same)
+
+It never publishes or pushes, and only touches containers named flypi-check-*.`);
+	process.exit(0);
+}
+const IMAGE = "makerstufferupper/flypi";
+const TARBALL_URL = `https://registry.npmjs.org/@makerstufferupper/flypi/-/flypi-${version}.tgz`;
+
+let failures = 0;
+const ok = (name, detail) => console.log(`  ok    ${name}${detail ? ` — ${detail}` : ""}`);
+const bad = (name, detail) => {
+	failures++;
+	console.log(`  FAIL  ${name}${detail ? ` — ${detail}` : ""}`);
+};
+/** One check: run something, say whether it worked, keep going either way. */
+function check(name, command, args, options = {}) {
+	const result = spawnSync(command, args, { encoding: "utf8", ...options });
+	if (result.status === 0) {
+		ok(name, options.show && result.stdout ? result.stdout.trim().split("\n").at(-1) : undefined);
+		return result;
+	}
+	bad(name, `${command} ${args.join(" ")} exited ${result.status}${result.stderr ? `: ${result.stderr.trim().split("\n")[0]}` : ""}`);
+	return result;
+}
+
+const packDir = mkdtempSync(join(tmpdir(), "flypi-release-"));
+const created = { containers: [], volumes: [], images: [] };
+
+function docker(args, options = {}) {
+	return spawnSync("docker", args, { encoding: "utf8", ...options });
+}
+/** A container of our own, on a port and a volume nothing else is using. */
+function freshContainer(name, image, port, volume, command) {
+	docker(["rm", "-f", name]);
+	docker(["volume", "rm", volume]);
+	created.containers.push(name);
+	created.volumes.push(volume);
+	const run = docker(["run", "-d", "--name", name, "-p", `127.0.0.1:${port}:${port}`, "-v", `${volume}:/data`, "-e", "FLYPI_ROOT=/data", image, ...command]);
+	return run.status === 0 ? name : (bad(`docker run ${image}`, run.stderr.trim().split("\n")[0]), null);
+}
+/** Poll /healthz — the first start of a fresh state root is not instant. */
+async function health(port, seconds = 180) {
+	const deadline = Date.now() + seconds * 1000;
+	while (Date.now() < deadline) {
+		try {
+			const response = await fetch(`http://127.0.0.1:${port}/healthz`);
+			if (response.ok) return await response.json();
+		} catch {}
+		await new Promise((resolve) => setTimeout(resolve, 2000));
+	}
+	return null;
+}
+/** The three things every serving flypi owes: its own version, the pi it loaded, and a page. */
+async function assertServing(name, port, expectVersion) {
+	const body = await health(port);
+	if (!body) return bad(`${name}: /healthz never answered`, `port ${port}`);
+	body.version === expectVersion
+		? ok(`${name}: /healthz reports flypi ${body.version}`)
+		: bad(`${name}: /healthz version`, `expected ${expectVersion}, got ${body.version}`);
+	body.pi?.version
+		? ok(`${name}: it loaded pi ${body.pi.version}`, body.pi.pinned ? "pinned" : "not pinned")
+		: bad(`${name}: /healthz names no pi`, "Phase 8.1 — the loaded version must be reported");
+	const page = spawnSync("curl", ["-s", "-o", "/dev/null", "-w", "%{http_code}", `http://127.0.0.1:${port}/`], { encoding: "utf8" });
+	page.stdout === "200" ? ok(`${name}: GET / is 200`) : bad(`${name}: GET /`, `got ${page.stdout || "no answer"}`);
+	return body;
+}
+/**
+ * The agent has a bash tool in here, so the tools a turn reaches for have to be present *and* working: git over
+ * https, git-lfs, curl, wget. Slim has none of them, and a git-lfs binary without its filters registered still
+ * checks in an LFS file's contents rather than a pointer — so this tracks one and reads the blob back out.
+ */
+function hasTools(name) {
+	const probe = docker([
+		"exec",
+		name,
+		"sh",
+		"-c",
+		"git --version >/dev/null && curl --version >/dev/null && wget --version >/dev/null" +
+			" && cd /tmp && rm -rf lfs-check && git init -q lfs-check && cd lfs-check && git lfs track '*.bin' >/dev/null" +
+			" && echo hello > a.bin && git -c user.email=flypi@example.com -c user.name=flypi add a.bin && git cat-file -p :a.bin",
+	]);
+	/git-lfs\.github\.com\/spec\/v1/.test(probe.stdout ?? "")
+		? ok(`${name}: it has git + git-lfs, curl and wget`)
+		: bad(`${name}: git + git-lfs, curl and wget`, `exit ${probe.status}: ${(probe.stderr || probe.stdout || "").trim().split("\n")[0]}`);
+}
+function cleanup() {
+	if (has("--keep")) return console.log(`\nkept: ${created.containers.join(", ")} · volumes ${created.volumes.join(", ")} · ${packDir}`);
+	for (const name of created.containers) docker(["rm", "-f", name]);
+	for (const volume of created.volumes) docker(["volume", "rm", volume]);
+	for (const image of created.images) docker(["rmi", image]);
+	rmSync(packDir, { recursive: true, force: true });
+}
+
+// ── stages ────────────────────────────────────────────────────────────────────────────────────────────────
+
+function gates() {
+	console.log(`gates — the suite this version would be published with`);
+	check("tsc --noEmit", "npm", ["run", "typecheck"]);
+	check("npm test", "npm", ["test"]);
+	check("npm run smoke", "npm", ["run", "smoke"]);
+	check("npm run probe:pi", "npm", ["run", "probe:pi"]);
+}
+
+function pack() {
+	console.log(`\npack — the artifact, before anything installs it`);
+	check("npm run build (dist/ui)", "npm", ["run", "build"]);
+	check(`npm pack`, "npm", ["pack", "--pack-destination", packDir]);
+	const tgz = `makerstufferupper-flypi-${version}.tgz`;
+	const packed = spawnSync("tar", ["xzOf", join(packDir, tgz), "package/package.json"], { encoding: "utf8" });
+	if (packed.status !== 0) return bad(`read ${tgz}`, "npm pack produced nothing readable");
+	const pkg = JSON.parse(packed.stdout);
+	pkg.version === version ? ok(`tarball version ${pkg.version}`) : bad("tarball version", `package.json says ${pkg.version}`);
+	const self = Object.keys(pkg.dependencies).filter((d) => d.includes("makerstufferupper"));
+	self.length ? bad("no self-dependency", `${self.join(", ")} — flypi must not depend on flypi`) : ok("no self-dependency in dependencies");
+	const listed = spawnSync("tar", ["tzf", join(packDir, tgz)], { encoding: "utf8" }).stdout.split("\n");
+	for (const file of ["dist/ui/index.html", "bin/flypi.mjs", "src/daemon/pi.ts"]) {
+		listed.includes(`package/${file}`) ? ok(`ships ${file}`) : bad(`ships ${file}`, "missing from the tarball — check package.json `files`");
+	}
+	const stray = listed.filter((f) => /package\/(\.scratch|\.flypi|node_modules|coverage)\//.test(f));
+	stray.length ? bad("no stray files", stray.slice(0, 3).join(", ")) : ok("nothing stray (.scratch, .flypi, node_modules, coverage)");
+	return tgz;
+}
+
+async function npmInstall(tgz) {
+	console.log(`\nnpm-install — the tarball in a clean container, the way \`npm install -g\` does it`);
+	const name = "flypi-check-npm";
+	const container = freshContainer(name, "node:24-slim", 8792, "flypi-check-npm-data", ["sleep", "7200"]);
+	if (!container) return;
+	if (docker(["cp", join(packDir, tgz), `${name}:/tmp/flypi.tgz`]).status !== 0) return bad("docker cp the tarball");
+	check("npm i -g /tmp/flypi.tgz", "docker", ["exec", name, "npm", "i", "-g", "--no-audit", "--no-fund", "/tmp/flypi.tgz"]);
+	const installed = docker(["exec", name, "node", "-e", `console.log(require("/usr/local/lib/node_modules/@makerstufferupper/flypi/package.json").version)`]);
+	installed.stdout?.trim() === version ? ok(`installed package reports ${version}`) : bad("installed package version", installed.stdout?.trim() || installed.stderr?.trim());
+	docker(["exec", "-d", name, "flypi", "start", "--foreground", "--port", "8792", "--host", "0.0.0.0", "--embeddings", "none", "--judge", "none"]);
+	await assertServing(name, 8792, version);
+}
+
+async function image(tgz) {
+	console.log(`\nimage — the published image's runtime shape, built from the same tarball`);
+	copyFileSync("docker/Dockerfile.local", join(packDir, "Dockerfile"));
+	const tag = `flypi-check:${version}`;
+	const built = docker(["build", "-q", "--build-arg", `FLYPI_TGZ=${tgz}`, "-t", tag, packDir]);
+	if (built.status !== 0) return bad("docker build", built.stderr.trim().split("\n").slice(-3).join(" "));
+	created.images.push(tag);
+	ok(`docker build ${tag}`);
+	const name = "flypi-check-image";
+	// Keyword-only memory: the image's own CMD would fetch ~900 MB of models into a volume that is deleted after.
+	const container = freshContainer(name, tag, 8793, "flypi-check-image-data", ["flypi", "start", "--foreground", "--port", "8793", "--host", "0.0.0.0", "--embeddings", "none", "--judge", "none"]);
+	if (!container) return;
+	await assertServing(name, 8793, version);
+	// The container must refuse to move pi in one sentence, not a stack trace (docs/pi-upgrades.md 8.3).
+	const refused = docker(["exec", name, "flypi", "pi", "use", "0.0.0"]);
+	/std|not writable|not the npm global/.test(`${refused.stdout}${refused.stderr}`) && refused.status !== 0
+		? ok("flypi pi use refuses in a container, in one sentence")
+		: bad("flypi pi use in a container", `exit ${refused.status}: ${(refused.stderr || refused.stdout).trim().split("\n")[0]}`);
+	const state = docker(["exec", name, "sh", "-c", "ls /data/.flypi/pi 2>&1"]);
+	/state/.test(state.stdout) ? bad("a refused switch leaves no pin behind", state.stdout.trim()) : ok("a refused switch left nothing behind");
+	hasTools(name);
+}
+
+async function published() {
+	console.log(`\npublished — that ${version} is really in the registry, and the image installs it`);
+	// The metadata and the tarball propagate at different speeds: `npm view` can answer minutes before the
+	// tarball URL stops 404-ing, which is what kills a pinned image build. Poll the URL, not the tag.
+	let code = "000";
+	for (let i = 0; i < 30 && code !== "200"; i++) {
+		code = spawnSync("curl", ["-s", "-o", "/dev/null", "-w", "%{http_code}", TARBALL_URL], { encoding: "utf8" }).stdout;
+		if (code !== "200") await new Promise((resolve) => setTimeout(resolve, 10000));
+	}
+	code === "200" ? ok("the registry serves the tarball") : bad("the registry serves the tarball", `${code} after 5 min — ${TARBALL_URL}`);
+	const latest = spawnSync("npm", ["view", "@makerstufferupper/flypi", "version"], { encoding: "utf8" });
+	latest.stdout?.trim() === version ? ok(`npm's latest is ${version}`) : bad("npm's latest", `the registry answers ${latest.stdout?.trim() || "nothing"}`);
+
+	const inspect = docker(["buildx", "imagetools", "inspect", `${IMAGE}:${version}`]);
+	const platforms = ["linux/amd64", "linux/arm64"].filter((p) => inspect.stdout?.includes(p));
+	platforms.length === 2 ? ok("the pushed image carries both platforms") : bad("the pushed image's platforms", platforms.join(", ") || "the manifest was not readable");
+
+	const name = "flypi-check-published";
+	const container = freshContainer(name, `${IMAGE}:${version}`, 8793, "flypi-check-published-data", ["flypi", "start", "--foreground", "--port", "8793", "--host", "0.0.0.0", "--embeddings", "none", "--judge", "none"]);
+	if (!container) return;
+	await assertServing(name, 8793, version);
+	// A stale push is exactly what this stage exists to catch, and the tools come from the Dockerfile — so the
+	// image Docker Hub serves, not just the one built here, has to carry them.
+	hasTools(name);
+}
+
+// ── run ───────────────────────────────────────────────────────────────────────────────────────────────────
+
+try {
+	if (has("--published")) {
+		await published();
+	} else {
+		if (!has("--skip-gates")) gates();
+		const tgz = pack();
+		if (tgz) {
+			await npmInstall(tgz);
+			await image(tgz);
+		}
+	}
+} finally {
+	cleanup();
+}
+
+console.log(failures ? `\n${failures} check(s) failed` : `\nall checks passed for ${version}`);
+process.exit(failures ? 1 : 0);

package/src/server/event-log.ts

@@ -6,9 +6,15 @@
  * numbering and the client can dedupe on it. When the ring overwrites old events the gap is
  * reported rather than hidden: a client that asks for something evicted is told, not fed a
  * transcript that quietly starts later.
+ *
+ * `at` is stamped here too, for the same reason: this process is the only one that sees an event
+ * **when it happens**. A replay hands the same stamp back, so a client that attaches later still
+ * measures the response's real window instead of the burst it arrived in (src/shared/metrics.ts).
  */
 export interface BufferedEvent<T> {
 	seq: number;
+	/** When this process saw the event, in epoch milliseconds. */
+	at: number;
 	event: T;
 }
 
@@ -16,10 +22,13 @@ export class EventLog<T> {
 	private readonly events: BufferedEvent<T>[] = [];
 	private nextSeq = 1;
 
-	constructor(private readonly capacity: number = 5000) {}
+	constructor(
+		private readonly capacity: number = 5000,
+		private readonly now: () => number = Date.now,
+	) {}
 
 	push(event: T): BufferedEvent<T> {
-		const buffered: BufferedEvent<T> = { seq: this.nextSeq++, event };
+		const buffered: BufferedEvent<T> = { seq: this.nextSeq++, at: this.now(), event };
 		this.events.push(buffered);
 		if (this.events.length > this.capacity) this.events.shift();
 		return buffered;
@@ -29,12 +38,6 @@ export class EventLog<T> {
 		return this.nextSeq - 1;
 	}
 
-	/** Start over. Opening another session replaces the transcript a client is looking at. */
-	reset(): void {
-		this.events.length = 0;
-		this.nextSeq = 1;
-	}
-
 	/** Highest seq already dropped from the ring (0 when nothing has been dropped). */
 	get evictedThroughSeq(): number {
 		return this.events[0] ? this.events[0].seq - 1 : this.lastSeq;

package/src/server/index.ts

@@ -181,15 +181,24 @@ export async function startFlypiServer(options: FlypiServerOptions): Promise<Fly
 			if (requestId) send({ type: "result", requestId, ...extra });
 		};
 
-		/** Start (or keep) this socket's subscription to a conversation; `afterSeq` replays what it missed. */
+		/**
+		 * Start (or keep) this socket's subscription to a conversation; `afterSeq` replays what it missed.
+		 *
+		 * Subscriptions are additive: one socket may follow several conversations, because a page holds every
+		 * session it has opened — the one on screen and any background turn still running. Nothing is detached
+		 * here; a client that is finished with an idle conversation says so with `unsubscribe`, which is what
+		 * lets `evictIdle` release it.
+		 */
 		const subscribe = (conversationId: string, afterSeq?: number) => {
 			let subscription = subscriptions.get(conversationId);
 			if (!subscription) {
 				const state: Subscription = { lastSent: 0, detach: () => {}, detachUi: () => {} };
-				state.detach = registry.attach(conversationId, (seq, event) => {
+				state.detach = registry.attach(conversationId, (seq, event, at) => {
 					if (seq <= state.lastSent) return;
 					state.lastSent = seq;
-					send({ type: "event", conversationId, seq, event });
+					// `at` is the backend's own clock: it is what lets a client attaching late measure the
+					// response's real window rather than the burst its replay arrived in.
+					send({ type: "event", conversationId, seq, at, event });
 				});
 				// Extension output is not a pi event, so it has no seq to dedupe: the page sees each frame once,
 				// live, and a dialog it was not connected for is simply missed (src/server/extension-ui.ts).
@@ -210,11 +219,22 @@ export async function startFlypiServer(options: FlypiServerOptions): Promise<Fly
 			for (const entry of replay.events) {
 				if (entry.seq <= subscription.lastSent) continue;
 				subscription.lastSent = entry.seq;
-				send({ type: "event", conversationId, seq: entry.seq, event: entry.event });
+				send({ type: "event", conversationId, seq: entry.seq, at: entry.at, event: entry.event });
 			}
 		};
 
-		send({ type: "hello", protocolVersion: PROTOCOL_VERSION, serverVersion: options.serverVersion ?? "dev", ...(options.pi ? { pi: options.pi() } : {}) });
+		/** Stop following one conversation. The pi session behind it is untouched: only this socket lets go. */
+		const unsubscribe = (conversationId: string) => {
+			const subscription = subscriptions.get(conversationId);
+			if (!subscription) return;
+			subscription.detach();
+			subscription.detachUi();
+			subscriptions.delete(conversationId);
+		};
+
+		// `now` is this process's clock, so a client on another machine can put its own ticking windows on
+		// the same timeline the events are stamped with instead of a skew's worth of milliseconds off.
+		send({ type: "hello", protocolVersion: PROTOCOL_VERSION, serverVersion: options.serverVersion ?? "dev", now: Date.now(), ...(options.pi ? { pi: options.pi() } : {}) });
 
 		const handle = async (raw: string): Promise<void> => {
 			const parsed = parseClientCommand(raw);
@@ -222,10 +242,10 @@ export async function startFlypiServer(options: FlypiServerOptions): Promise<Fly
 			const command = parsed.command;
 			const requestId = command.requestId;
 			const conversationId = "conversationId" in command ? command.conversationId : undefined;
-			const onError = (error: Error) => {
+			const onError = (error: Error & { code?: string }) => {
 				// What the page was told, in the dev log: an error frame alone leaves a stuck UI inexplicable.
 				console.error(`flypi: ${command.type} failed: ${error.message}${conversationId ? ` (conversation ${conversationId})` : ""}`);
-				fail(error.message, { requestId, conversationId });
+				fail(error.message, { ...(error.code ? { code: error.code } : {}), requestId, conversationId });
 			};
 
 			try {
@@ -239,6 +259,9 @@ export async function startFlypiServer(options: FlypiServerOptions): Promise<Fly
 					case "resume":
 						subscribe(command.conversationId, command.afterSeq);
 						return;
+					case "unsubscribe":
+						unsubscribe(command.conversationId);
+						return reply(requestId, { conversationId });
 					case "extensionReply":
 						// The answer to an extension's question. Nothing waiting on that id means it timed out or
 						// another tab answered it, and the page has to stop showing the dialog either way.
@@ -257,10 +280,13 @@ export async function startFlypiServer(options: FlypiServerOptions): Promise<Fly
 						await registry.abort(command.conversationId);
 						return reply(requestId, { conversationId });
 					case "switchSession": {
-						const switched = await registry.switchSession(command.conversationId, command.sessionPath);
+						const switched = await registry.switchSession(command.sessionPath);
 						// A turn the last process left half-done is reported with the session it belongs to — the
 						// client is about to render that chat, and nothing else tells it why the last answer stops short.
 						const interrupted = options.interruptedRun?.(switched.session.sessionFile ?? "");
+						// Opened but not followed: the client is handed the conversation id and decides what to
+						// watch. Following it here would make every session ever clicked a live subscription, and
+						// an unattached idle conversation is what `evictIdle` exists to release.
 						return reply(requestId, {
 							conversationId: switched.id,
 							sessionPath: switched.session.sessionFile,