@nordbyte/nordrelay 0.5.0 → 0.5.2

package/dist/webui-assets/dashboard.css

@@ -62,7 +62,9 @@
   background: var(--surface);
   color: var(--text);
   border-color: var(--border);
+  min-height: 32px;
   height: 32px;
+  line-height: 1;
 }
 .agent-settings-nav button.active {
   background: var(--accent);
@@ -84,10 +86,13 @@
 .chip {
   display: inline-flex;
   align-items: center;
+  justify-content: center;
+  min-height: 20px;
   border-radius: 999px;
   border: 1px solid var(--border);
-  padding: 2px 8px;
+  padding: 0 8px;
   font-size: 12px;
+  line-height: 1;
   color: var(--muted);
   margin-right: 6px;
 }
@@ -139,6 +144,7 @@
   cursor: pointer;
   font-weight: 700;
   margin-bottom: 0;
+  line-height: 1.25;
 }
 .session-detail-section[open] summary {
   margin-bottom: 10px;
@@ -239,9 +245,11 @@
   margin-top: 22px;
 }
 .mini-button {
+  min-height: 26px;
   height: 26px;
   padding: 0 8px;
   font-size: 12px;
+  line-height: 1;
 }
 .update-log {
   max-height: 280px;
@@ -264,16 +272,26 @@
 * {
   box-sizing: border-box;
 }
+html {
+  font-size: 16px;
+  -webkit-text-size-adjust: 100%;
+  text-size-adjust: 100%;
+}
 body {
   margin: 0;
   background: var(--bg);
   color: var(--text);
   font-family:
     Inter,
+    "Segoe UI",
     system-ui,
     -apple-system,
-    Segoe UI,
+    BlinkMacSystemFont,
+    Roboto,
+    Arial,
     sans-serif;
+  line-height: 1.4;
+  font-synthesis: none;
 }
 .app {
   min-height: 100vh;
@@ -421,14 +439,30 @@ textarea {
   background: var(--surface);
   color: var(--text);
   font: inherit;
+  line-height: 1.2;
+  vertical-align: middle;
 }
 button {
+  appearance: none;
+  -webkit-appearance: none;
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  gap: 6px;
+  min-height: 36px;
   height: 36px;
   padding: 0 12px;
   background: var(--accent);
   color: white;
   border-color: var(--accent);
   cursor: pointer;
+  line-height: 1;
+  text-align: center;
+  white-space: nowrap;
+}
+button::-moz-focus-inner {
+  border: 0;
+  padding: 0;
 }
 button:hover {
   background: var(--accent-strong);
@@ -437,8 +471,12 @@ button.secondary {
   background: var(--surface);
   color: var(--text);
 }
+button:disabled {
+  cursor: not-allowed;
+}
 input,
 select {
+  min-height: 36px;
   height: 36px;
   padding: 0 10px;
 }
@@ -446,6 +484,23 @@ textarea {
   width: 100%;
   padding: 10px;
   resize: vertical;
+  line-height: 1.4;
+}
+nav button {
+  display: flex;
+  align-items: center;
+  justify-content: flex-start;
+  width: 100%;
+  min-height: 40px;
+  height: 40px;
+  padding: 0 12px;
+  line-height: 1.1;
+  text-align: left;
+}
+.menu {
+  align-items: center;
+  justify-content: center;
+  line-height: 1;
 }
 .chat-layout {
   display: grid;
@@ -520,6 +575,8 @@ textarea {
 .file-button {
   display: inline-flex;
   align-items: center;
+  justify-content: center;
+  min-height: 34px;
   height: 34px;
   padding: 0 10px;
   border: 1px solid var(--border);
@@ -527,6 +584,7 @@ textarea {
   background: var(--surface);
   color: var(--text);
   cursor: pointer;
+  line-height: 1;
 }
 input[type=file] {
   display: none;
@@ -551,6 +609,7 @@ input[type=file] {
 }
 .copy-id {
   height: auto;
+  min-height: 0;
   padding: 0;
   border: 0;
   background: transparent;
@@ -562,6 +621,8 @@ input[type=file] {
     Consolas,
     monospace;
   font-size: 12px;
+  line-height: 1.25;
+  white-space: normal;
 }
 .copy-id:hover {
   background: transparent;
@@ -603,11 +664,13 @@ input[type=file] {
 .item strong {
   display: block;
   overflow-wrap: anywhere;
+  line-height: 1.25;
 }
 .item small {
   display: block;
   color: var(--muted);
   overflow-wrap: anywhere;
+  line-height: 1.35;
 }
 .queue-item {
   cursor: grab;
@@ -619,11 +682,14 @@ input[type=file] {
 .adapter-status {
   display: inline-flex;
   align-items: center;
+  justify-content: center;
+  min-height: 20px;
   border: 1px solid var(--border);
   border-radius: 999px;
-  padding: 2px 8px;
+  padding: 0 8px;
   color: var(--muted);
   font-size: 12px;
+  line-height: 1;
 }
 .adapter-status {
   margin-left: 6px;
@@ -651,12 +717,14 @@ input[type=file] {
 }
 .feature-chip {
   display: flex;
+  align-items: center;
   justify-content: space-between;
   gap: 8px;
   border: 1px solid var(--border-soft);
   border-radius: 6px;
   padding: 5px 7px;
   font-size: 12px;
+  line-height: 1.2;
   color: var(--muted);
   background: var(--surface);
 }
@@ -726,7 +794,9 @@ input[type=file] {
   background: var(--surface);
   color: var(--text);
   border-color: var(--border);
+  min-height: 34px;
   height: 34px;
+  line-height: 1;
 }
 .tabs button.active {
   background: var(--accent);
@@ -836,7 +906,7 @@ dialog::backdrop {
     transform: translateX(0);
   }
   .menu {
-    display: inline-block;
+    display: inline-flex;
   }
   .header-actions {
     justify-content: flex-end;

package/dist/webui-assets/dashboard.js

@@ -1,17 +1,145 @@
 (() => {
-  const state = { snapshot: null, controls: null, newSessionControls: null, enabledAgents: [], auth: null, permissions: [], settings: [], currentPage: "overview", settingsGroup: null, logsPlain: "", logTimer: null, toastTimer: null, cliStatusActive: false, selectedArtifactTurns: /* @__PURE__ */ new Set(), mediaRecorder: null, recordedChunks: [], events: null, reconnectTimer: null, notifications: false, toolTooltipTimer: null, toolTooltipTarget: null, agentUpdateJobs: [], sessionsRequestId: 0 };
+  const WEB_API_CLIENT_ROUTE_RULES = [
+    { path: "/api/auth/me", methods: ["GET"] },
+    { path: "/api/dashboard/logout", methods: ["POST"] },
+    { path: "/api/bootstrap", methods: ["GET"] },
+    { path: "/api/health", methods: ["GET"] },
+    { path: "/api/snapshot", methods: ["GET"] },
+    { path: "/api/tasks", methods: ["GET"] },
+    { path: "/api/progress", methods: ["GET"] },
+    { path: "/api/version", methods: ["GET"] },
+    { path: "/api/update", methods: ["POST"] },
+    { path: "/api/agent-updates", methods: ["GET"] },
+    { path: "/api/agent-update", methods: ["POST"] },
+    { re: /^\/api\/agent-update\/[^\/]+\/log$/, methods: ["GET", "DELETE"] },
+    { re: /^\/api\/agent-update\/[^\/]+\/input$/, methods: ["POST"] },
+    { re: /^\/api\/agent-update\/[^\/]+\/cancel$/, methods: ["POST"] },
+    { path: "/api/adapters/health", methods: ["GET"] },
+    { path: "/api/permissions", methods: ["GET"] },
+    { path: "/api/users", methods: ["GET", "POST"] },
+    { re: /^\/api\/users\/[^\/]+$/, methods: ["PATCH"] },
+    { re: /^\/api\/users\/[^\/]+\/password$/, methods: ["POST"] },
+    { re: /^\/api\/users\/[^\/]+\/sessions$/, methods: ["GET", "DELETE"] },
+    { re: /^\/api\/users\/[^\/]+\/sessions\/[^\/]+$/, methods: ["DELETE"] },
+    { re: /^\/api\/users\/[^\/]+\/telegram$/, methods: ["POST"] },
+    { re: /^\/api\/users\/[^\/]+\/telegram\/[^\/]+$/, methods: ["DELETE"] },
+    { path: "/api/groups", methods: ["GET", "POST"] },
+    { re: /^\/api\/groups\/[^\/]+$/, methods: ["PATCH"] },
+    { path: "/api/telegram-chats", methods: ["GET", "POST"] },
+    { re: /^\/api\/telegram-chats\/[^\/]+$/, methods: ["PATCH"] },
+    { path: "/api/audit", methods: ["GET"] },
+    { path: "/api/locks", methods: ["GET", "POST", "DELETE"] },
+    { path: "/api/auth/status", methods: ["GET"] },
+    { path: "/api/auth/login", methods: ["POST"] },
+    { path: "/api/auth/logout", methods: ["POST"] },
+    { path: "/api/settings", methods: ["GET", "PATCH"] },
+    { path: "/api/control-options", methods: ["GET"] },
+    { path: "/api/sessions", methods: ["GET"] },
+    { path: "/api/sessions/new", methods: ["POST"] },
+    { path: "/api/sessions/switch", methods: ["POST"] },
+    { path: "/api/sessions/attach", methods: ["POST"] },
+    { path: "/api/sessions/detail", methods: ["GET"] },
+    { path: "/api/agent", methods: ["POST"] },
+    { path: "/api/models", methods: ["GET"] },
+    { path: "/api/session/model", methods: ["POST"] },
+    { path: "/api/session/reasoning", methods: ["POST"] },
+    { path: "/api/session/fast", methods: ["POST"] },
+    { path: "/api/session/launch", methods: ["POST"] },
+    { path: "/api/prompt", methods: ["POST"] },
+    { path: "/api/prompt/upload", methods: ["POST"] },
+    { path: "/api/abort", methods: ["POST"] },
+    { path: "/api/stop", methods: ["POST"] },
+    { path: "/api/handback", methods: ["POST"] },
+    { path: "/api/retry", methods: ["POST"] },
+    { path: "/api/sync", methods: ["POST"] },
+    { path: "/api/queue", methods: ["GET", "POST"] },
+    { path: "/api/chat/history", methods: ["GET", "DELETE"] },
+    { path: "/api/activity", methods: ["GET"] },
+    { path: "/api/artifacts", methods: ["GET", "DELETE"] },
+    { path: "/api/artifacts/bulk", methods: ["POST"] },
+    { path: "/api/artifacts/zip", methods: ["GET"] },
+    { path: "/api/artifacts/file", methods: ["GET"] },
+    { path: "/api/artifacts/preview", methods: ["GET"] },
+    { path: "/api/logs", methods: ["GET"] },
+    { path: "/api/logs/clear", methods: ["POST"] },
+    { path: "/api/diagnostics", methods: ["GET"] },
+    { path: "/api/diagnostics/bundle", methods: ["GET"] },
+    { path: "/api/runtime/restart", methods: ["POST"] }
+  ];
+  globalThis.NORDRELAY_WEB_API_CLIENT_ROUTE_RULES = WEB_API_CLIENT_ROUTE_RULES;
+  const API_ROUTE_RULES = (
+    /** @type {{ NORDRELAY_WEB_API_CLIENT_ROUTE_RULES?: ApiRouteRule[] }} */
+    globalThis.NORDRELAY_WEB_API_CLIENT_ROUTE_RULES ?? []
+  );
   async function api(path, options = {}) {
-    const headers = { ...options.body ? { "content-type": "application/json" } : {}, ...options.headers || {} };
-    const res = await fetch(path, { ...options, headers });
+    const method = normalizeMethod(options.method, options.body);
+    const url = apiUrl(path, options.query);
+    assertApiRoute(url.pathname, method);
+    const body = normalizeBody(options.body);
+    const headers = {
+      ...body !== void 0 && shouldSendJsonHeader(options.body) ? { "content-type": "application/json" } : {},
+      ...options.headers || {}
+    };
+    const res = await fetch(url.pathname + url.search, { method, headers, body });
     if (res.status === 401) {
       location.reload();
-      return;
+      return (
+        /** @type {never} */
+        void 0
+      );
     }
     const text = await res.text();
     const data = text ? JSON.parse(text) : {};
     if (!res.ok) throw new Error(data.error || res.statusText);
     return data;
   }
+  function apiUrl(path, query) {
+    const url = new URL(path, location.origin);
+    if (query) {
+      for (const [key, rawValue] of Object.entries(query)) {
+        const values = Array.isArray(rawValue) ? rawValue : [rawValue];
+        for (const value of values) {
+          if (value !== void 0 && value !== null && value !== "") {
+            url.searchParams.append(key, String(value));
+          }
+        }
+      }
+    }
+    return url;
+  }
+  function normalizeMethod(method, body) {
+    if (method) {
+      const upper = method.toUpperCase();
+      if (upper === "GET" || upper === "POST" || upper === "PATCH" || upper === "PUT" || upper === "DELETE") {
+        return upper;
+      }
+    }
+    return body === void 0 || body === null ? "GET" : "POST";
+  }
+  function normalizeBody(body) {
+    if (body === void 0 || body === null) return void 0;
+    if (typeof body === "string") return body;
+    if (isNativeBody(body)) return body;
+    return JSON.stringify(body);
+  }
+  function shouldSendJsonHeader(body) {
+    return body !== void 0 && body !== null && !isNativeBody(body);
+  }
+  function isNativeBody(body) {
+    return typeof FormData !== "undefined" && body instanceof FormData || typeof Blob !== "undefined" && body instanceof Blob || typeof URLSearchParams !== "undefined" && body instanceof URLSearchParams || typeof ArrayBuffer !== "undefined" && body instanceof ArrayBuffer;
+  }
+  function assertApiRoute(path, method) {
+    const rule = API_ROUTE_RULES.find(
+      (candidate) => "path" in candidate && candidate.path === path || "re" in candidate && candidate.re.test(path)
+    );
+    if (!rule) {
+      throw new Error("Unknown WebUI API route: " + path);
+    }
+    if (!rule.methods.includes(method)) {
+      throw new Error("Unsupported WebUI API method: " + method + " " + path);
+    }
+  }
+  const state = { snapshot: null, controls: null, newSessionControls: null, enabledAgents: [], auth: null, permissions: [], settings: [], currentPage: "overview", settingsGroup: null, logsPlain: "", logTimer: null, toastTimer: null, cliStatusActive: false, selectedArtifactTurns: /* @__PURE__ */ new Set(), mediaRecorder: null, recordedChunks: [], events: null, reconnectTimer: null, notifications: false, toolTooltipTimer: null, toolTooltipTarget: null, agentUpdateJobs: [], sessionsRequestId: 0 };
   function toast(msg, options = {}) {
     const el = document.getElementById("toast");
     el.textContent = msg;
@@ -772,7 +900,7 @@
     state.newSessionControls = state.controls || {};
     renderNewSessionControls(state.newSessionControls);
     agentSelect.onchange = () => safe(async () => {
-      state.newSessionControls = await api("/api/control-options?agent=" + encodeURIComponent(agentSelect.value));
+      state.newSessionControls = await api("/api/control-options", { query: { agent: agentSelect.value } });
       renderNewSessionControls(state.newSessionControls);
     });
   }
@@ -806,8 +934,7 @@
     const requestId = ++state.sessionsRequestId;
     setLoading("sessionsList", "Loading " + (expectedAgent || "agent") + " sessions...");
     const q = document.getElementById("sessionSearch").value || "";
-    const agentParam = expectedAgent ? "&agent=" + encodeURIComponent(expectedAgent) : "";
-    const data = await api("/api/sessions?query=" + encodeURIComponent(q) + "&page=" + sessionsPager.page + "&limit=" + sessionsPager.pageSize + agentParam);
+    const data = await api("/api/sessions", { query: { query: q, page: sessionsPager.page, limit: sessionsPager.pageSize, agent: expectedAgent || void 0 } });
     if (requestId !== state.sessionsRequestId || expectedAgent !== activeAgentId()) return;
     document.getElementById("sessionsList").innerHTML = data.sessions.map((s) => '<div class="item"><strong title="' + attr(s.title || s.firstUserMessage || s.id) + '">' + esc(short(s.title || s.firstUserMessage || s.id)) + '</strong><small><button type="button" class="copy-id" data-copy-id="' + attr(s.id) + '" title="Copy thread ID">' + esc(short(s.id, 64)) + "</button> / " + esc(short((s.cwd || "") + " / " + fmtDate(s.updatedAt))) + '</small><div class="row"><button data-switch="' + attr(s.id) + '"' + disabledAttr("sessions.write") + '>Switch</button><button class="secondary" data-session-detail="' + attr(s.id) + '">Details</button></div></div>').join("") || '<div class="item">No sessions found.</div>';
     sessionsPager.render(data.pagination || {});
@@ -817,7 +944,7 @@
         toast("Permission required: sessions.write");
         return;
       }
-      await api("/api/sessions/switch", { method: "POST", body: JSON.stringify({ threadId: b.dataset.switch }) });
+      await api("/api/sessions/switch", { method: "POST", body: { threadId: b.dataset.switch } });
       toast("Session switched");
       loadBootstrap();
     }));
@@ -836,7 +963,7 @@
     return '<details class="session-detail-section"><summary>' + esc(title + " (" + count + ")") + '</summary><div class="list">' + (body || '<div class="item">No entries.</div>') + "</div></details>";
   }
   async function loadSessionDetail(threadId) {
-    const d = await api("/api/sessions/detail?threadId=" + encodeURIComponent(threadId));
+    const d = await api("/api/sessions/detail", { query: { threadId } });
     const r = d.record || {};
     const messages = d.messages || [];
     const activity = d.activity || [];
@@ -972,7 +1099,7 @@
         return;
       }
       if (confirm("Delete artifact turn " + b.dataset.delArt + "?")) {
-        await api("/api/artifacts?turnId=" + encodeURIComponent(b.dataset.delArt), { method: "DELETE" });
+        await api("/api/artifacts", { method: "DELETE", query: { turnId: b.dataset.delArt } });
         state.selectedArtifactTurns.delete(b.dataset.delArt);
         loadArtifacts();
       }
@@ -1016,7 +1143,7 @@
     target.innerHTML = '<div class="panel">' + loadingHtml("Loading preview...") + "</div>";
     target.scrollIntoView({ block: "start", behavior: "smooth" });
     try {
-      const data = await api("/api/artifacts/preview?turnId=" + encodeURIComponent(turnId) + "&path=" + encodeURIComponent(path));
+      const data = await api("/api/artifacts/preview", { query: { turnId, path } });
       if (data.kind === "image") {
         target.innerHTML = '<div class="panel"><h2>' + esc(data.name) + '</h2><img src="/api/artifacts/file?turnId=' + encodeURIComponent(turnId) + "&path=" + encodeURIComponent(path) + '"></div>';
         return;
@@ -1033,8 +1160,7 @@
   }
   async function loadActivity() {
     setLoading("activityList", "Loading activity...");
-    const q = "?source=" + encodeURIComponent(val("activitySource")) + "&status=" + encodeURIComponent(val("activityStatus")) + "&limit=" + encodeURIComponent(val("activityLimit") || "100");
-    const data = await api("/api/activity" + q);
+    const data = await api("/api/activity", { query: { source: val("activitySource"), status: val("activityStatus"), limit: val("activityLimit") || "100" } });
     state.activityEvents = data.events || [];
     renderActivity(state.activityEvents);
   }
@@ -1376,7 +1502,7 @@
       document.getElementById("auditList").innerHTML = '<div class="item">Permission required: audit.read</div>';
       return;
     }
-    const d = await api("/api/audit?limit=" + encodeURIComponent(val("auditLimit") || "50"));
+    const d = await api("/api/audit", { query: { limit: val("auditLimit") || "50" } });
     document.getElementById("auditList").innerHTML = (d.events || []).map((e) => '<div class="item"><strong>' + esc(fmtDate(e.timestamp) + " / " + (e.channelId || "-") + " / " + e.status + " / " + e.action) + "</strong><small>" + esc((e.contextKey || "-") + " / " + (e.agentId || "-") + " / " + (e.threadId || "-")) + "</small><small>" + esc(e.description || e.detail || "") + "</small></div>").join("") || '<div class="item">No audit events.</div>';
   }
   document.getElementById("loadAuditBtn").onclick = () => loadAudit();
@@ -1384,7 +1510,7 @@
     if (!document.getElementById("logAutoRefresh").checked) setLoading("logs", "Loading logs...");
     const target = document.getElementById("logTarget").value;
     const lines = document.getElementById("logLines").value;
-    const data = await api("/api/logs?target=" + target + "&lines=" + lines);
+    const data = await api("/api/logs", { query: { target, lines } });
     state.logsPlain = data.plain || "";
     renderLogs();
     if (document.getElementById("logFollow").checked) document.getElementById("logs").scrollTop = document.getElementById("logs").scrollHeight;
@@ -1441,7 +1567,7 @@
     const d = await api("/api/adapters/health");
     document.getElementById("adapterHealth").innerHTML = (d.adapters || []).map((a) => '<div class="item"><strong>' + esc(a.label) + ' <span class="adapter-status ' + esc(a.status) + '">' + esc(a.status) + "</span></strong><small>" + esc("CLI: " + (a.cli.label || "-") + " / path " + (a.cli.path || "-") + " / version " + (a.cli.version || "-")) + "</small><small>" + esc("Auth: " + (a.auth.supported ? a.auth.authenticated ? "authenticated" : "not authenticated" : "not managed") + " " + (a.auth.detail || "")) + "</small><small>" + esc("Version: " + a.version.installed + " / latest " + (a.version.latest || "-") + " / " + a.version.status) + "</small>" + featureMatrix(a.capabilities) + '<div class="row"><button data-auth-status="' + attr(a.id) + '">Auth status</button><button data-auth-login="' + attr(a.id) + '" class="secondary" ' + (!a.capabilities.login ? "disabled" : "") + disabledAttr("auth.manage") + '>Login</button><button data-auth-logout="' + attr(a.id) + '" class="secondary" ' + (!a.capabilities.logout ? "disabled" : "") + disabledAttr("auth.manage") + ">Logout</button></div></div>").join("") || '<div class="item">No adapters.</div>';
     document.querySelectorAll("[data-auth-status]").forEach((b) => b.onclick = () => safe(async () => {
-      const r = await api("/api/auth/status?agent=" + encodeURIComponent(b.dataset.authStatus));
+      const r = await api("/api/auth/status", { query: { agent: b.dataset.authStatus } });
       toast(r.agentLabel + ": " + r.detail, { duration: 6e3 });
     }));
     document.querySelectorAll("[data-auth-login]").forEach((b) => b.onclick = () => safe(async () => {
@@ -1449,7 +1575,7 @@
         toast("Permission required: auth.manage");
         return;
       }
-      const r = await api("/api/auth/login", { method: "POST", body: JSON.stringify({ agentId: b.dataset.authLogin }) });
+      const r = await api("/api/auth/login", { method: "POST", body: { agentId: b.dataset.authLogin } });
       toast(r.result?.message || r.detail, { duration: 8e3 });
       loadAdapterHealth();
     }));
@@ -1458,7 +1584,7 @@
         toast("Permission required: auth.manage");
         return;
       }
-      const r = await api("/api/auth/logout", { method: "POST", body: JSON.stringify({ agentId: b.dataset.authLogout }) });
+      const r = await api("/api/auth/logout", { method: "POST", body: { agentId: b.dataset.authLogout } });
       toast(r.result?.message || r.detail, { duration: 8e3 });
       loadAdapterHealth();
     }));
@@ -1482,7 +1608,10 @@
   function versionCard(key, v) {
     const agentId = versionAgentIds[key];
     const running = agentId && state.agentUpdateJobs.some((j) => j.agentId === agentId && j.status === "running");
-    const button = agentId && v.status === "outdated" ? '<button class="secondary mini-button" data-update-agent="' + attr(agentId) + '" ' + (running ? "disabled" : "") + ">" + (running ? "Updating" : "Update") + "</button>" : "";
+    const operation = v.status === "not-installed" ? "install" : v.status === "outdated" ? "update" : "";
+    const actionLabel = operation === "install" ? "Install" : "Update";
+    const runningLabel = operation === "install" ? "Installing" : "Updating";
+    const button = agentId && operation ? '<button class="secondary mini-button" data-update-agent="' + attr(agentId) + '" data-update-operation="' + attr(operation) + '" ' + (running ? "disabled" : "") + ">" + (running ? runningLabel : actionLabel) + "</button>" : "";
     return '<div class="item"><strong>' + esc(v.label) + ' <span class="adapter-status ' + esc(versionStatusClass(v.status)) + '">' + esc(versionStatusLabel(v.status)) + "</span> " + button + "</strong><small>" + esc("Installed: " + (v.installedLabel || "-")) + "</small><small>" + esc("Latest: " + (v.latestVersion || "-")) + "</small>" + (v.detail ? "<small>" + esc(v.detail) + "</small>" : "") + "</div>";
   }
   async function loadAgentUpdateJobs(showLoading = true) {
@@ -1516,11 +1645,12 @@
   }
   function updateJobCard(job) {
     const command = [job.command].concat(job.args || []).join(" ");
+    const operation = job.operation || "update";
     const needs = job.needsInput ? '<small><span class="chip warn">Input may be required</span></small>' : "";
     const logDeleted = job.logDeletedAt ? "<small>Log deleted " + esc(fmtDate(job.logDeletedAt)) + "</small>" : "";
     const deleteLogButton = job.status !== "running" && !job.logDeletedAt ? '<button class="danger mini-button" data-update-delete-log="' + attr(job.id) + '"' + disabledAttr("updates.run") + ">Delete Log</button>" : "";
-    const input = job.canInput ? '<div class="update-input"><input data-update-input="' + attr(job.id) + '" placeholder="Send response to update process"><button data-update-send="' + attr(job.id) + '" class="secondary"' + disabledAttr("updates.run") + '>Send</button><button data-update-cancel="' + attr(job.id) + '" class="danger"' + disabledAttr("updates.run") + ">Cancel</button></div>" : "";
-    return '<div class="item"><div class="update-job-header"><strong>' + esc(job.agentLabel) + ' <span class="adapter-status ' + esc(jobStatusClass(job.status)) + '">' + esc(job.status) + '</span></strong><div class="row">' + deleteLogButton + "</div></div><small>" + esc(job.method + " / " + fmtDate(job.startedAt) + (job.finishedAt ? " - " + fmtDate(job.finishedAt) : "")) + "</small><small>" + esc(command) + "</small><small>" + esc(job.error || job.summary || "") + "</small>" + logDeleted + needs + '<pre class="update-log">' + esc(job.outputTail || (job.logDeletedAt ? "(log deleted)" : "(waiting for output)")) + "</pre>" + input + "</div>";
+    const input = job.canInput ? '<div class="update-input"><input data-update-input="' + attr(job.id) + '" placeholder="Send response to ' + operation + ' process"><button data-update-send="' + attr(job.id) + '" class="secondary"' + disabledAttr("updates.run") + '>Send</button><button data-update-cancel="' + attr(job.id) + '" class="danger"' + disabledAttr("updates.run") + ">Cancel</button></div>" : "";
+    return '<div class="item"><div class="update-job-header"><strong>' + esc(job.agentLabel + " " + operation) + ' <span class="adapter-status ' + esc(jobStatusClass(job.status)) + '">' + esc(job.status) + '</span></strong><div class="row">' + deleteLogButton + "</div></div><small>" + esc(job.method + " / " + fmtDate(job.startedAt) + (job.finishedAt ? " - " + fmtDate(job.finishedAt) : "")) + "</small><small>" + esc(command) + "</small><small>" + esc(job.error || job.summary || "") + "</small>" + logDeleted + needs + '<pre class="update-log">' + esc(job.outputTail || (job.logDeletedAt ? "(log deleted)" : "(waiting for output)")) + "</pre>" + input + "</div>";
   }
   function bindAgentUpdateButtons() {
     document.querySelectorAll("[data-update-agent]").forEach((b) => b.onclick = () => safe(async () => {
@@ -1528,11 +1658,12 @@
         toast("Permission required: updates.run");
         return;
       }
-      if (confirm("Start update for " + b.dataset.updateAgent + "?")) {
-        const r = await api("/api/agent-update", { method: "POST", body: JSON.stringify({ agentId: b.dataset.updateAgent }) });
+      const operation = b.dataset.updateOperation || "update";
+      if (confirm("Start " + operation + " for " + b.dataset.updateAgent + "?")) {
+        const r = await api("/api/agent-update", { method: "POST", body: JSON.stringify({ agentId: b.dataset.updateAgent, operation }) });
         upsertAgentUpdateJob(r.job);
         renderAgentUpdateJobs();
-        toast(r.job.agentLabel + " update started", { duration: 6e3 });
+        toast(r.job.agentLabel + " " + (r.job.operation || operation) + " started", { duration: 6e3 });
         loadVersion();
       }
     }));
@@ -1592,6 +1723,14 @@
     const data = await api("/api/diagnostics");
     document.getElementById("diagnostics").innerHTML = diagnosticsHtml(data);
   }
+  const exportDiagnosticsBundleBtn = document.getElementById("exportDiagnosticsBundleBtn");
+  if (exportDiagnosticsBundleBtn) exportDiagnosticsBundleBtn.onclick = () => {
+    if (!can("diagnostics.read")) {
+      toast("Permission required: diagnostics.read");
+      return;
+    }
+    window.open("/api/diagnostics/bundle", "_blank");
+  };
   function diagnosticsHtml(d) {
     const h = d.health || {};
     const s = d.snapshot?.session || {};

package/dist/zip-writer.js

@@ -0,0 +1,83 @@
+export function createZipBuffer(entries) {
+    const localParts = [];
+    const centralParts = [];
+    let offset = 0;
+    for (const entry of entries) {
+        const name = normalizeZipEntryName(entry.name);
+        const nameBuffer = Buffer.from(name, "utf8");
+        const data = Buffer.isBuffer(entry.data) ? entry.data : Buffer.from(entry.data, "utf8");
+        const crc = crc32(data);
+        const date = entry.date ?? new Date();
+        const { dosTime, dosDate } = dateToDos(date);
+        const localHeader = Buffer.alloc(30);
+        localHeader.writeUInt32LE(0x04034b50, 0);
+        localHeader.writeUInt16LE(20, 4);
+        localHeader.writeUInt16LE(0x0800, 6);
+        localHeader.writeUInt16LE(0, 8);
+        localHeader.writeUInt16LE(dosTime, 10);
+        localHeader.writeUInt16LE(dosDate, 12);
+        localHeader.writeUInt32LE(crc, 14);
+        localHeader.writeUInt32LE(data.byteLength, 18);
+        localHeader.writeUInt32LE(data.byteLength, 22);
+        localHeader.writeUInt16LE(nameBuffer.byteLength, 26);
+        localHeader.writeUInt16LE(0, 28);
+        localParts.push(localHeader, nameBuffer, data);
+        const centralHeader = Buffer.alloc(46);
+        centralHeader.writeUInt32LE(0x02014b50, 0);
+        centralHeader.writeUInt16LE(20, 4);
+        centralHeader.writeUInt16LE(20, 6);
+        centralHeader.writeUInt16LE(0x0800, 8);
+        centralHeader.writeUInt16LE(0, 10);
+        centralHeader.writeUInt16LE(dosTime, 12);
+        centralHeader.writeUInt16LE(dosDate, 14);
+        centralHeader.writeUInt32LE(crc, 16);
+        centralHeader.writeUInt32LE(data.byteLength, 20);
+        centralHeader.writeUInt32LE(data.byteLength, 24);
+        centralHeader.writeUInt16LE(nameBuffer.byteLength, 28);
+        centralHeader.writeUInt16LE(0, 30);
+        centralHeader.writeUInt16LE(0, 32);
+        centralHeader.writeUInt16LE(0, 34);
+        centralHeader.writeUInt16LE(0, 36);
+        centralHeader.writeUInt32LE(0, 38);
+        centralHeader.writeUInt32LE(offset, 42);
+        centralParts.push(centralHeader, nameBuffer);
+        offset += localHeader.byteLength + nameBuffer.byteLength + data.byteLength;
+    }
+    const centralOffset = offset;
+    const centralDirectory = Buffer.concat(centralParts);
+    const end = Buffer.alloc(22);
+    end.writeUInt32LE(0x06054b50, 0);
+    end.writeUInt16LE(0, 4);
+    end.writeUInt16LE(0, 6);
+    end.writeUInt16LE(entries.length, 8);
+    end.writeUInt16LE(entries.length, 10);
+    end.writeUInt32LE(centralDirectory.byteLength, 12);
+    end.writeUInt32LE(centralOffset, 16);
+    end.writeUInt16LE(0, 20);
+    return Buffer.concat([...localParts, centralDirectory, end]);
+}
+function normalizeZipEntryName(name) {
+    return name.replace(/\\/g, "/").replace(/^\/+/, "");
+}
+function dateToDos(date) {
+    const year = Math.max(1980, date.getFullYear());
+    return {
+        dosTime: (date.getHours() << 11) | (date.getMinutes() << 5) | Math.floor(date.getSeconds() / 2),
+        dosDate: ((year - 1980) << 9) | ((date.getMonth() + 1) << 5) | date.getDate(),
+    };
+}
+const CRC32_TABLE = new Uint32Array(256);
+for (let index = 0; index < CRC32_TABLE.length; index += 1) {
+    let value = index;
+    for (let bit = 0; bit < 8; bit += 1) {
+        value = value & 1 ? 0xedb88320 ^ (value >>> 1) : value >>> 1;
+    }
+    CRC32_TABLE[index] = value >>> 0;
+}
+function crc32(data) {
+    let crc = 0xffffffff;
+    for (const byte of data) {
+        crc = CRC32_TABLE[(crc ^ byte) & 0xff] ^ (crc >>> 8);
+    }
+    return (crc ^ 0xffffffff) >>> 0;
+}