@q-agent/agent 0.1.0 → 0.1.1

package/README.md

@@ -38,6 +38,30 @@ node dist/src/cli.js pair <code> --server http://127.0.0.1:8787
 node dist/src/cli.js start
 ```
 
+## Windows binary (no Node required)
+
+For machines without Node, build a self-contained Windows bundle:
+
+```bash
+cd agent
+npm install
+npm run package:win
+```
+
+This produces `dist-bin/qagent-agent-win-x64/` — a `qagent-agent.exe` (the CLI as
+a Node Single Executable Application) plus a bundled Node runtime, production
+`node_modules`, and `vendor/`. Zip that folder for distribution; the user unzips
+and runs it with **no global Node installed**:
+
+```bat
+qagent-agent.exe pair <code> --server https://your-qagent-server.example.com/api
+qagent-agent.exe start
+```
+
+Chromium still auto-installs on first `start`. Build the bundle on Windows with a
+Node 20+ that supports SEA (the local `node.exe` is used as the executable base —
+no compiler or download needed).
+
 ## Commands
 
 | Command | Description |

package/dist/src/bus.js

@@ -0,0 +1,27 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.bus = void 0;
+exports.emit = emit;
+exports.recentEvents = recentEvents;
+/**
+ * In-process event bus bridging the job loop (runner.ts) to the local web UI
+ * (ui.ts). The runner emits structured activity events; the UI streams them to
+ * the browser over SSE. A small ring buffer lets a UI that connects mid-run
+ * replay recent activity.
+ */
+const node_events_1 = require("node:events");
+const BUFFER_MAX = 300;
+const buffer = [];
+exports.bus = new node_events_1.EventEmitter();
+/** Record + broadcast an agent activity event. */
+function emit(type, data = {}) {
+    const event = { ts: Date.now(), type, ...data };
+    buffer.push(event);
+    if (buffer.length > BUFFER_MAX)
+        buffer.shift();
+    exports.bus.emit("event", event);
+}
+/** Snapshot of buffered events, for a UI client that just connected. */
+function recentEvents() {
+    return buffer.slice();
+}

package/dist/src/cli.js

@@ -48,6 +48,11 @@ const os = __importStar(require("os"));
 const config_1 = require("./config");
 const api_1 = require("./api");
 const runner_1 = require("./runner");
+/** How the user invoked this agent, for accurate "run X" hints: the bare command
+ * inside a packaged bundle, else the `npx` form of the published package. */
+function invocation() {
+    return process.pkg ? "qagent-agent" : "npx @q-agent/agent";
+}
 const program = new commander_1.Command();
 program.name("qagent-agent").description("Q-Agent Local Agent — runs Playwright locally for this machine's owner.");
 program
@@ -63,7 +68,7 @@ program
         const cfg = { serverUrl, deviceToken, deviceId, deviceName: opts.name };
         (0, config_1.saveConfig)(cfg);
         console.log(`Paired as device #${deviceId} (${opts.name}) against ${serverUrl}`);
-        console.log("Device token stored — run `qagent-agent start` to begin claiming jobs.");
+        console.log(`Device token stored — run \`${invocation()} start\` to begin claiming jobs.`);
     }
     catch (err) {
         console.error("Pairing failed:", err.message);
@@ -77,7 +82,7 @@ program
     .action(async (opts) => {
     const cfg = (0, config_1.loadConfig)();
     if (!cfg) {
-        console.error("Not paired yet — run `qagent-agent pair <code>` first.");
+        console.error(`Not paired yet — run \`${invocation()} pair <code>\` first.`);
         process.exitCode = 1;
         return;
     }
@@ -99,7 +104,7 @@ program
     .action(() => {
     const cfg = (0, config_1.loadConfig)();
     if (!cfg) {
-        console.log("Not paired. Run `qagent-agent pair <code>` to pair this machine.");
+        console.log(`Not paired. Run \`${invocation()} pair <code>\` to pair this machine.`);
         return;
     }
     console.log(`Paired as device #${cfg.deviceId} (${cfg.deviceName})`);
@@ -110,7 +115,7 @@ program
     .description("Forget the paired device token")
     .action(() => {
     (0, config_1.clearConfig)();
-    console.log("Device token cleared. Run `qagent-agent pair <code>` to pair again.");
+    console.log(`Device token cleared. Run \`${invocation()} pair <code>\` to pair again.`);
 });
 program.parseAsync(process.argv).catch((err) => {
     console.error(err);

package/dist/src/ensureBrowser.js

@@ -44,19 +44,7 @@ exports.ensureChromium = ensureChromium;
  */
 const child_process_1 = require("child_process");
 const fs = __importStar(require("fs"));
-const path = __importStar(require("path"));
-function firstExisting(paths) {
-    for (const p of paths) {
-        if (fs.existsSync(p))
-            return p;
-    }
-    return null;
-}
-/** The agent package's own node_modules (mirrors runner.ts's resolver). */
-function agentNodeModules() {
-    return (firstExisting([path.join(__dirname, "..", "..", "node_modules"), path.join(__dirname, "..", "node_modules")]) ??
-        path.join(__dirname, "..", "..", "node_modules"));
-}
+const paths_1 = require("./paths");
 /** Path Playwright expects the Chromium build at, or null if it can't be resolved. */
 function chromiumExecutable() {
     try {
@@ -72,7 +60,9 @@ function chromiumExecutable() {
  * Ensure Chromium is installed, running `playwright install chromium` if it's missing.
  *
  * Fast no-op once the browser exists. Streams the download progress so a first-run
- * fetch (~100 MB) is visible rather than a silent hang.
+ * fetch (~100 MB) is visible rather than a silent hang. Invokes Playwright's CLI
+ * through the resolved node runtime (`node cli.js install chromium`) so it works
+ * from source, via npx, and in a packaged bundle alike.
  *
  * Returns:
  *   true when Chromium is available (already present, or installed successfully);
@@ -83,13 +73,8 @@ async function ensureChromium() {
     if (exe && fs.existsSync(exe))
         return true;
     console.log("Chromium not found — installing Playwright's Chromium (one-time download)...");
-    const nm = agentNodeModules();
-    const bin = path.join(nm, ".bin", process.platform === "win32" ? "playwright.cmd" : "playwright");
-    const useBin = fs.existsSync(bin);
-    const cmd = useBin ? bin : "npx";
-    const args = useBin ? ["install", "chromium"] : ["playwright", "install", "chromium"];
     const code = await new Promise((resolve) => {
-        const child = (0, child_process_1.spawn)(cmd, args, { stdio: "inherit", shell: process.platform === "win32" });
+        const child = (0, child_process_1.spawn)((0, paths_1.nodeBin)(), [(0, paths_1.playwrightCli)(), "install", "chromium"], { stdio: "inherit" });
         child.on("close", resolve);
         child.on("error", () => resolve(null));
     });

package/dist/src/paths.js

@@ -0,0 +1,137 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.firstExisting = firstExisting;
+exports.packagedRoot = packagedRoot;
+exports.nodeBin = nodeBin;
+exports.agentNodeModules = agentNodeModules;
+exports.playwrightCli = playwrightCli;
+exports.vendorCaptureScript = vendorCaptureScript;
+/**
+ * Runtime path resolution for the agent's child processes (Playwright CLI +
+ * the headed-login capture script), working in three layouts:
+ *
+ *   1. from source / `npx @q-agent/agent` — `node` on PATH, deps in the package's
+ *      own node_modules;
+ *   2. a packaged Windows bundle (built by `scripts/package-win.mjs`, run as a
+ *      `@yao-pkg/pkg` binary) — a bundled `node.exe`, `node_modules/`, and
+ *      `vendor/` sit next to the executable.
+ *
+ * Everything the agent spawns is invoked as `nodeBin() <script/cli.js> …`, so
+ * the same code path works whether `node` comes from PATH or the bundle.
+ */
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+function firstExisting(candidates) {
+    for (const c of candidates) {
+        if (fs.existsSync(c))
+            return c;
+    }
+    return null;
+}
+/** True when running as a Node Single Executable Application (the packaged .exe). */
+function isSea() {
+    try {
+        return require("node:sea").isSea();
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * The folder beside the executable in a packaged bundle (holds the bundled
+ * node runtime, node_modules, and vendor/). Null when running from source/npx.
+ * Set when running as a SEA binary (the Windows bundle) — or a pkg binary.
+ */
+function packagedRoot() {
+    return isSea() || process.pkg ? path.dirname(process.execPath) : null;
+}
+/**
+ * Node runtime used to spawn child processes. Prefers the bundled `node.exe`
+ * in a packaged install (so no global Node is required), else `node` from PATH.
+ */
+function nodeBin() {
+    const root = packagedRoot();
+    if (root) {
+        const bundled = path.join(root, process.platform === "win32" ? "node.exe" : "node");
+        if (fs.existsSync(bundled))
+            return bundled;
+    }
+    // From source / npx, the agent itself runs under a real Node — reuse it. An
+    // absolute path lets children spawn without a shell (safe with spaces in the
+    // path); `process.execPath` is only the pkg binary when packagedRoot() is set.
+    return process.execPath;
+}
+/** node_modules holding `playwright` + `@playwright/test`. */
+function agentNodeModules() {
+    const root = packagedRoot();
+    if (root) {
+        const nm = path.join(root, "node_modules");
+        if (fs.existsSync(nm))
+            return nm;
+    }
+    // From source / npx / global install, let Node's own resolver find the
+    // node_modules that actually holds the deps. npm (and `npx`) HOIST
+    // `@playwright/test` and `playwright` to a parent node_modules — the npx
+    // cache root or the global root — rather than nesting them under the package,
+    // so a hardcoded relative guess misses them (the cause of the
+    // "Cannot find module '@playwright/test'" failure on npx/global installs).
+    // `.../node_modules/@playwright/test/package.json` → `.../node_modules`.
+    const testPkgJson = require.resolve("@playwright/test/package.json");
+    return path.dirname(path.dirname(path.dirname(testPkgJson)));
+}
+/** Playwright's CLI entry — drives both `test` (run specs) and `install` (browsers). */
+function playwrightCli() {
+    const root = packagedRoot();
+    if (root) {
+        const bundled = path.join(root, "node_modules", "playwright", "cli.js");
+        if (fs.existsSync(bundled))
+            return bundled;
+    }
+    // Resolve via Node so it works whether npm nested or hoisted `playwright`.
+    return path.join(path.dirname(require.resolve("playwright/package.json")), "cli.js");
+}
+/** The vendored headed-login capture script (`capture_auth.cjs`). */
+function vendorCaptureScript() {
+    const root = packagedRoot();
+    const found = firstExisting([
+        ...(root ? [path.join(root, "vendor", "capture_auth.cjs")] : []),
+        path.join(__dirname, "..", "..", "vendor", "capture_auth.cjs"),
+        path.join(__dirname, "..", "vendor", "capture_auth.cjs"),
+    ]);
+    if (!found)
+        throw new Error("capture_auth.cjs not found — the agent package is missing vendor/");
+    return found;
+}

package/dist/src/runner.js

@@ -49,6 +49,7 @@ const os = __importStar(require("os"));
 const path = __importStar(require("path"));
 const api = __importStar(require("./api"));
 const ensureBrowser_1 = require("./ensureBrowser");
+const paths_1 = require("./paths");
 const playwrightConfig_1 = require("./playwrightConfig");
 const report_1 = require("./report");
 const session_1 = require("./session");
@@ -68,35 +69,15 @@ function killActiveChild() {
         }
     }
 }
-function firstExisting(candidates) {
-    for (const c of candidates) {
-        if (fs.existsSync(c))
-            return c;
-    }
-    return null;
-}
-/** Resolve the vendored capture_auth.cjs, whether running from `dist/` or via ts-node from `src/`. */
-function vendorCaptureScript() {
-    const found = firstExisting([
-        path.join(__dirname, "..", "..", "vendor", "capture_auth.cjs"),
-        path.join(__dirname, "..", "vendor", "capture_auth.cjs"),
-    ]);
-    if (!found)
-        throw new Error("capture_auth.cjs not found — the agent package is missing vendor/");
-    return found;
-}
-/** The agent package's own node_modules, where @playwright/test + playwright are installed. */
-function agentNodeModules() {
-    return (firstExisting([path.join(__dirname, "..", "..", "node_modules"), path.join(__dirname, "..", "node_modules")]) ??
-        path.join(__dirname, "..", "..", "node_modules"));
-}
 function nodePathEnv(nm) {
     const existing = process.env.NODE_PATH;
     return { ...process.env, NODE_PATH: existing ? `${nm}${path.delimiter}${existing}` : nm };
 }
 function runProcess(cmd, args, cwd, env, timeoutMs) {
     return new Promise((resolve) => {
-        const child = (0, child_process_1.spawn)(cmd, args, { cwd, env, shell: process.platform === "win32" });
+        // No shell: cmd is always an absolute node path (nodeBin()) and args are
+        // absolute script/CLI paths, so this is safe even when paths contain spaces.
+        const child = (0, child_process_1.spawn)(cmd, args, { cwd, env });
         activeChild = child;
         let stdout = "";
         let stderr = "";
@@ -134,9 +115,9 @@ function runProcess(cmd, args, cwd, env, timeoutMs) {
  */
 async function captureAuth(baseUrl, storageStatePath, sessionStoragePath) {
     fs.mkdirSync(path.dirname(storageStatePath), { recursive: true });
-    const script = vendorCaptureScript();
-    const nm = agentNodeModules();
-    const result = await runProcess("node", [script, baseUrl, storageStatePath, sessionStoragePath], nm, nodePathEnv(nm), AUTH_CAPTURE_TIMEOUT_MS);
+    const script = (0, paths_1.vendorCaptureScript)();
+    const nm = (0, paths_1.agentNodeModules)();
+    const result = await runProcess((0, paths_1.nodeBin)(), [script, baseUrl, storageStatePath, sessionStoragePath], nm, nodePathEnv(nm), AUTH_CAPTURE_TIMEOUT_MS);
     if (result.code !== 0) {
         console.error(`Auth capture exited ${result.code}: ${(result.stderr || result.stdout || "").slice(0, 800)}`);
     }
@@ -147,21 +128,15 @@ async function captureAuth(baseUrl, storageStatePath, sessionStoragePath) {
         return false;
     }
 }
-/** Prefer the agent's own installed `playwright` binary over a fresh `npx` fetch. */
-function playwrightCommand() {
-    const nm = agentNodeModules();
-    const bin = path.join(nm, ".bin", process.platform === "win32" ? "playwright.cmd" : "playwright");
-    if (fs.existsSync(bin))
-        return { cmd: bin, baseArgs: ["test"] };
-    return { cmd: "npx", baseArgs: ["playwright", "test"] };
-}
 async function runPlaywright(workDir, workers, specFile) {
-    const { cmd, baseArgs } = playwrightCommand();
-    const args = [...baseArgs, `--workers=${workers}`];
+    // Invoke Playwright's CLI through the resolved node runtime (`node cli.js test …`)
+    // so the same path works from source, via npx, and in a packaged bundle where
+    // `node`/`node_modules` live beside the executable rather than on PATH.
+    const args = [(0, paths_1.playwrightCli)(), "test", `--workers=${workers}`];
     if (specFile)
         args.push(specFile);
-    const nm = agentNodeModules();
-    return runProcess(cmd, args, workDir, nodePathEnv(nm), EXEC_TIMEOUT_MS);
+    const nm = (0, paths_1.agentNodeModules)();
+    return runProcess((0, paths_1.nodeBin)(), args, workDir, nodePathEnv(nm), EXEC_TIMEOUT_MS);
 }
 /**
  * Best identity `{ticket, caseCode}` for wire events: prefers explicit

package/dist/src/ui.js

@@ -0,0 +1,390 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.startUi = startUi;
+/**
+ * Local web UI for the agent, served on 127.0.0.1 and opened in the browser.
+ *
+ * Lets the user connect by pasting a pair code + server URL (no CLI), then shows
+ * live pulling/execution progress streamed from the job loop over SSE. Styled to
+ * match the Q-Agent app (dark, glass, violet). No framework / no extra deps —
+ * Node's built-in http plus the in-process event bus (bus.ts).
+ */
+const node_child_process_1 = require("node:child_process");
+const http = __importStar(require("node:http"));
+const os = __importStar(require("node:os"));
+const api_1 = require("./api");
+const bus_1 = require("./bus");
+const config_1 = require("./config");
+const runner_1 = require("./runner");
+let signal = { aborted: false };
+let running = false;
+/** Start the claim→run loop for `cfg` (no-op if already running). */
+function startLoop(cfg) {
+    if (running)
+        return;
+    running = true;
+    signal = { aborted: false };
+    (0, bus_1.emit)("agent-status", { running: true, deviceId: cfg.deviceId, deviceName: cfg.deviceName, serverUrl: cfg.serverUrl });
+    (0, runner_1.runAgentLoop)(cfg, signal)
+        .catch((err) => (0, bus_1.emit)("error", { message: err.message || String(err) }))
+        .finally(() => {
+        running = false;
+        (0, bus_1.emit)("agent-status", { running: false });
+    });
+}
+function stopLoop() {
+    signal.aborted = true;
+    (0, runner_1.killActiveChild)();
+    running = false;
+}
+function state() {
+    const cfg = (0, config_1.loadConfig)();
+    return {
+        paired: Boolean(cfg),
+        running,
+        deviceId: cfg?.deviceId ?? null,
+        deviceName: cfg?.deviceName ?? null,
+        serverUrl: cfg?.serverUrl ?? "",
+        events: (0, bus_1.recentEvents)(),
+    };
+}
+function readBody(req) {
+    return new Promise((resolve) => {
+        let data = "";
+        req.on("data", (c) => (data += c));
+        req.on("end", () => resolve(data));
+    });
+}
+function sendJson(res, code, body) {
+    const s = JSON.stringify(body);
+    res.writeHead(code, { "Content-Type": "application/json", "Content-Length": Buffer.byteLength(s) });
+    res.end(s);
+}
+function openBrowser(url) {
+    try {
+        const opts = { detached: true, stdio: "ignore" };
+        if (process.platform === "win32")
+            (0, node_child_process_1.spawn)("cmd", ["/c", "start", "", url], opts).unref();
+        else if (process.platform === "darwin")
+            (0, node_child_process_1.spawn)("open", [url], opts).unref();
+        else
+            (0, node_child_process_1.spawn)("xdg-open", [url], opts).unref();
+    }
+    catch {
+        // Non-fatal: the URL is printed to the console as a fallback.
+    }
+}
+async function handle(req, res) {
+    const url = req.url || "/";
+    if (req.method === "GET" && (url === "/" || url.startsWith("/?"))) {
+        res.writeHead(200, { "Content-Type": "text/html; charset=utf-8" });
+        res.end(PAGE);
+        return;
+    }
+    if (req.method === "GET" && url === "/api/state") {
+        sendJson(res, 200, state());
+        return;
+    }
+    if (req.method === "POST" && url === "/api/pair") {
+        try {
+            const { code, server } = JSON.parse((await readBody(req)) || "{}");
+            const serverUrl = String(server || "").replace(/\/+$/, "");
+            if (!code || !serverUrl)
+                return sendJson(res, 400, { error: "Pair code and server URL are required." });
+            const name = os.hostname();
+            const { deviceToken, deviceId } = await (0, api_1.redeemDevice)(serverUrl, String(code).trim(), name);
+            const cfg = { serverUrl, deviceToken, deviceId, deviceName: name };
+            (0, config_1.saveConfig)(cfg);
+            (0, bus_1.emit)("log", { message: `Paired as device #${deviceId} (${name})` });
+            startLoop(cfg);
+            sendJson(res, 200, { ok: true, deviceId });
+        }
+        catch (err) {
+            sendJson(res, 400, { error: err.message || "Pairing failed" });
+        }
+        return;
+    }
+    if (req.method === "POST" && url === "/api/disconnect") {
+        stopLoop();
+        (0, config_1.clearConfig)();
+        (0, bus_1.emit)("agent-status", { running: false });
+        sendJson(res, 200, { ok: true });
+        return;
+    }
+    if (req.method === "GET" && url === "/api/events") {
+        res.writeHead(200, {
+            "Content-Type": "text/event-stream",
+            "Cache-Control": "no-cache",
+            Connection: "keep-alive",
+        });
+        res.write(": connected\n\n");
+        for (const ev of (0, bus_1.recentEvents)())
+            res.write(`data: ${JSON.stringify(ev)}\n\n`);
+        const onEvent = (ev) => res.write(`data: ${JSON.stringify(ev)}\n\n`);
+        bus_1.bus.on("event", onEvent);
+        const ka = setInterval(() => res.write(": keep-alive\n\n"), 25_000);
+        req.on("close", () => {
+            clearInterval(ka);
+            bus_1.bus.off("event", onEvent);
+        });
+        return;
+    }
+    res.writeHead(404, { "Content-Type": "text/plain" });
+    res.end("Not found");
+}
+/** Start the UI server, begin the loop if already paired, and open the browser. */
+function startUi(opts = {}) {
+    let port = opts.port ?? 7420;
+    const server = http.createServer((req, res) => {
+        handle(req, res).catch(() => {
+            if (!res.headersSent)
+                res.writeHead(500);
+            res.end();
+        });
+    });
+    server.on("error", (err) => {
+        if (err.code === "EADDRINUSE" && port < 7440) {
+            port += 1;
+            server.listen(port, "127.0.0.1");
+        }
+        else {
+            console.error("UI server error:", err.message);
+        }
+    });
+    server.listen(port, "127.0.0.1", () => {
+        const addr = `http://127.0.0.1:${port}`;
+        console.log(`Local Agent UI → ${addr}`);
+        const cfg = (0, config_1.loadConfig)();
+        if (cfg)
+            startLoop(cfg);
+        if (opts.open !== false)
+            openBrowser(addr);
+    });
+}
+// ---------------------------------------------------------------- the page
+const PAGE = `<!doctype html>
+<html lang="en">
+<head>
+<meta charset="utf-8" />
+<meta name="viewport" content="width=device-width, initial-scale=1" />
+<title>Q-Agent · Local Agent</title>
+<style>
+  :root {
+    --bg: #0f0f16; --panel: rgba(24,24,32,.72); --border: rgba(255,255,255,.10);
+    --ink: #ececf1; --soft: #c3c3d0; --dim: #8b8b9e; --violet: #8b5cf6; --violet-2: #a78bfa;
+    --green: #34d399; --red: #f43f5e; --amber: #f59e0b;
+  }
+  * { box-sizing: border-box; }
+  body {
+    margin: 0; font: 14px/1.5 -apple-system, "Segoe UI", Roboto, sans-serif; color: var(--ink);
+    background: radial-gradient(1000px 600px at 80% -10%, rgba(139,92,246,.18), transparent 60%), var(--bg);
+    min-height: 100vh;
+  }
+  .wrap { max-width: 760px; margin: 0 auto; padding: 40px 20px 60px; }
+  .brand { display: flex; align-items: center; gap: 11px; margin-bottom: 22px; }
+  .logo { width: 38px; height: 38px; border-radius: 11px; background: linear-gradient(135deg,#8b5cf6,#f59e0b);
+    display: flex; align-items: center; justify-content: center; font-size: 20px; }
+  .brand h1 { margin: 0; font-size: 19px; font-weight: 800; letter-spacing: -.02em; }
+  .brand .sub { font-size: 12px; color: var(--dim); }
+  .card { background: var(--panel); border: 1px solid var(--border); border-radius: 16px; padding: 18px;
+    margin-bottom: 16px; backdrop-filter: blur(8px); box-shadow: 0 30px 70px -30px #000; }
+  .card h2 { margin: 0 0 14px; font-size: 11px; letter-spacing: .1em; color: var(--dim); font-weight: 800; }
+  label { display: block; font-size: 12px; color: var(--soft); margin: 12px 0 5px; }
+  input, textarea { width: 100%; background: rgba(0,0,0,.30); border: 1px solid var(--border); border-radius: 10px;
+    color: var(--ink); padding: 10px 12px; font: inherit; }
+  input:focus, textarea:focus { outline: none; border-color: var(--violet); }
+  textarea { resize: vertical; min-height: 60px; font-family: ui-monospace, monospace; font-size: 12px; }
+  button { cursor: pointer; border: none; border-radius: 10px; font: inherit; font-weight: 700; padding: 10px 16px; }
+  .primary { background: linear-gradient(135deg,#8b5cf6,#7c3aed); color: #fff; }
+  .primary:disabled { opacity: .6; cursor: default; }
+  .ghost { background: rgba(255,255,255,.06); color: var(--soft); }
+  .row { display: flex; align-items: center; gap: 10px; }
+  .pill { font-size: 11px; font-weight: 700; padding: 3px 10px; border-radius: 999px; display: inline-flex; align-items: center; gap: 6px; }
+  .dot { width: 7px; height: 7px; border-radius: 50%; }
+  .err { color: var(--red); font-size: 12px; margin-top: 10px; min-height: 16px; }
+  .mut { color: var(--dim); font-size: 12px; }
+  .bar { height: 8px; border-radius: 999px; background: rgba(255,255,255,.08); overflow: hidden; margin: 12px 0 6px; }
+  .bar > i { display: block; height: 100%; background: linear-gradient(90deg,#8b5cf6,#a78bfa); width: 0; transition: width .3s; }
+  .counts { display: flex; gap: 16px; font-size: 12px; }
+  .banner { background: rgba(245,158,11,.12); border: 1px solid rgba(245,158,11,.35); color: #f6c177;
+    border-radius: 10px; padding: 10px 12px; font-size: 12.5px; margin-bottom: 12px; display: none; }
+  .feed { display: flex; flex-direction: column; gap: 8px; max-height: 360px; overflow: auto; }
+  .ev { display: flex; gap: 10px; align-items: baseline; font-size: 12.5px; padding: 7px 10px; border-radius: 9px;
+    background: rgba(255,255,255,.03); }
+  .ev .t { color: var(--dim); font-family: ui-monospace, monospace; font-size: 10.5px; flex-shrink: 0; }
+  .ev .m { color: var(--soft); }
+  .ev.pass { border-left: 2px solid var(--green); } .ev.fail { border-left: 2px solid var(--red); }
+  .ev.err { border-left: 2px solid var(--red); } .ev.err .m { color: #fca5a5; }
+  .badge { font-size: 10px; font-weight: 800; padding: 1px 7px; border-radius: 999px; }
+  .badge.pass { background: rgba(52,211,153,.18); color: var(--green); }
+  .badge.fail { background: rgba(244,63,94,.18); color: var(--red); }
+  .hidden { display: none; }
+  code { background: rgba(0,0,0,.3); padding: 1px 5px; border-radius: 5px; font-size: 11.5px; color: var(--violet-2); }
+</style>
+</head>
+<body>
+<div class="wrap">
+  <div class="brand">
+    <div class="logo">⭐</div>
+    <div>
+      <h1>Q-Agent · Local Agent</h1>
+      <div class="sub">Runs Playwright on this machine — your session stays local.</div>
+    </div>
+    <div style="margin-left:auto"><span id="status" class="pill"><span class="dot"></span><span id="statusText">…</span></span></div>
+  </div>
+
+  <!-- Pairing -->
+  <div id="pairCard" class="card hidden">
+    <h2>CONNECT</h2>
+    <div class="mut">Generate a pairing code on the Q-Agent app's <b>Local Agent</b> screen, then paste it here.</div>
+    <label>Server URL</label>
+    <input id="server" placeholder="https://your-qagent-server/api" />
+    <label>Pair code</label>
+    <textarea id="code" placeholder="paste the one-time pairing code"></textarea>
+    <div class="err" id="pairErr"></div>
+    <div class="row" style="margin-top:12px"><button id="connect" class="primary">Connect</button></div>
+  </div>
+
+  <!-- Connected -->
+  <div id="connCard" class="card hidden">
+    <div class="row">
+      <div>
+        <h2 style="margin-bottom:6px">DEVICE</h2>
+        <div id="devName" style="font-weight:700"></div>
+        <div class="mut" id="devServer"></div>
+      </div>
+      <button id="disconnect" class="ghost" style="margin-left:auto">Disconnect</button>
+    </div>
+  </div>
+
+  <div id="runCard" class="card hidden">
+    <h2>ACTIVITY</h2>
+    <div id="banner" class="banner"></div>
+    <div id="progWrap" class="hidden">
+      <div class="bar"><i id="progBar"></i></div>
+      <div class="counts">
+        <span style="color:var(--green)">✓ <b id="cPass">0</b></span>
+        <span style="color:var(--red)">✗ <b id="cFail">0</b></span>
+        <span class="mut"><b id="cRem">0</b> remaining</span>
+      </div>
+    </div>
+    <div class="feed" id="feed"></div>
+  </div>
+</div>
+
+<script>
+const $ = (id) => document.getElementById(id);
+const time = (ts) => new Date(ts).toLocaleTimeString();
+
+function setStatus(running, paired) {
+  const dot = $("status").querySelector(".dot");
+  if (!paired) { $("statusText").textContent = "Not connected"; dot.style.background = "#8b8b9e"; }
+  else if (running) { $("statusText").textContent = "Running"; dot.style.background = "var(--green)"; }
+  else { $("statusText").textContent = "Idle"; dot.style.background = "var(--amber)"; }
+}
+
+function addEv(ev) {
+  const feed = $("feed");
+  const row = document.createElement("div");
+  row.className = "ev";
+  let m = "";
+  switch (ev.type) {
+    case "job-claimed": m = \`Claimed execution #\${ev.executionId} — run \${ev.runCode} (\${ev.total} spec\${ev.total===1?"":"s"})\`; resetProgress(ev.total); break;
+    case "auth-waiting": showBanner(\`A browser opened on this machine — log in to continue.\${ev.url?" ("+ev.url+")":""}\`); m = "Waiting for manual login…"; break;
+    case "auth-captured": hideBanner(); m = "Login captured — session saved locally."; break;
+    case "case-running": m = \`Running \${ev.index}/\${ev.total} — \${ev.ticket||""} \${ev.caseCode||""}\`; break;
+    case "case-result": {
+      row.className = "ev " + (ev.status === "pass" ? "pass" : "fail");
+      const b = document.createElement("span"); b.className = "badge " + (ev.status==="pass"?"pass":"fail"); b.textContent = ev.status.toUpperCase();
+      m = \`\${ev.ticket||""} \${ev.caseCode||""}\`;
+      row.appendChild(mkTime(ev.ts)); const mm = document.createElement("span"); mm.className="m"; mm.textContent=m; row.appendChild(mm); row.appendChild(b);
+      feed.prepend(row); return;
+    }
+    case "progress": updateProgress(ev); return;
+    case "job-complete": m = \`Execution #\${ev.executionId} complete — \${ev.passed} passed, \${ev.failed} failed\`; break;
+    case "agent-status": setStatus(ev.running, true); return;
+    case "error": row.className = "ev err"; m = ev.message || "Error"; break;
+    case "log": m = ev.message || ""; break;
+    default: return;
+  }
+  if (!m) return;
+  row.appendChild(mkTime(ev.ts));
+  const mm = document.createElement("span"); mm.className = "m"; mm.textContent = m; row.appendChild(mm);
+  feed.prepend(row);
+}
+function mkTime(ts){ const t=document.createElement("span"); t.className="t"; t.textContent=time(ts); return t; }
+function resetProgress(total){ $("progWrap").classList.remove("hidden"); $("progBar").style.width="0%"; $("cPass").textContent="0"; $("cFail").textContent="0"; $("cRem").textContent=String(total||0); }
+function updateProgress(ev){ $("progWrap").classList.remove("hidden"); $("progBar").style.width=(ev.progress||0)+"%"; $("cPass").textContent=ev.passed; $("cFail").textContent=ev.failed; $("cRem").textContent=ev.remaining; }
+function showBanner(t){ const b=$("banner"); b.textContent=t; b.style.display="block"; }
+function hideBanner(){ $("banner").style.display="none"; }
+
+let es = null;
+function openStream(){ if (es) return; es = new EventSource("/api/events"); es.onmessage = (e)=>{ try{ addEv(JSON.parse(e.data)); }catch{} }; }
+
+async function refresh() {
+  const s = await (await fetch("/api/state")).json();
+  setStatus(s.running, s.paired);
+  if (s.paired) {
+    $("pairCard").classList.add("hidden");
+    $("connCard").classList.remove("hidden"); $("runCard").classList.remove("hidden");
+    $("devName").textContent = (s.deviceName||"This device") + " · #" + s.deviceId;
+    $("devServer").textContent = s.serverUrl;
+    $("feed").innerHTML = ""; (s.events||[]).forEach(addEv);
+    openStream();
+  } else {
+    $("pairCard").classList.remove("hidden");
+    $("connCard").classList.add("hidden"); $("runCard").classList.add("hidden");
+    if (s.serverUrl) $("server").value = s.serverUrl;
+  }
+}
+
+$("connect").onclick = async () => {
+  const btn = $("connect"); btn.disabled = true; $("pairErr").textContent = "";
+  try {
+    const r = await fetch("/api/pair", { method:"POST", headers:{"Content-Type":"application/json"},
+      body: JSON.stringify({ code: $("code").value.trim(), server: $("server").value.trim() }) });
+    const j = await r.json();
+    if (!r.ok) throw new Error(j.error || "Pairing failed");
+    await refresh();
+  } catch (e) { $("pairErr").textContent = e.message; }
+  finally { btn.disabled = false; }
+};
+$("disconnect").onclick = async () => { await fetch("/api/disconnect", { method:"POST" }); if (es){es.close(); es=null;} await refresh(); };
+
+refresh();
+</script>
+</body>
+</html>`;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@q-agent/agent",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "Q-Agent Local Agent — claims execution jobs from the Q-Agent server and runs Playwright locally, so manual login/MFA happens on the user's own machine and session credentials never leave it.",
   "license": "UNLICENSED",
   "bin": {
@@ -25,7 +25,9 @@
   "scripts": {
     "build": "tsc -p tsconfig.json",
     "test": "npm run build && node --test dist/test",
-    "prepublishOnly": "npm run build"
+    "release": "node scripts/release.mjs",
+    "prepublishOnly": "npm run build",
+    "package:win": "node scripts/package-win.mjs"
   },
   "dependencies": {
     "@playwright/test": "^1.61.1",
@@ -34,6 +36,8 @@
   },
   "devDependencies": {
     "@types/node": "^20.14.0",
+    "esbuild": "^0.24.0",
+    "postject": "^1.0.0-alpha.6",
     "typescript": "^5.5.4"
   }
 }