@withbuddi/buddi 0.1.0-pre.36 → 0.1.0-pre.38

package/node_modules/@buddi/gateway/dist/web/api-routes.js

@@ -60,7 +60,7 @@ export const API_ROUTES = [
     {
         method: 'GET', path: '/api/session', area: 'session', whileLocked: true,
         summary: 'Who is signed in, the CSRF value writes must echo, and facts every page formats with.',
-        answer: "{ csrf: string, timezone: string, timeFormat: '12h'|'24h'|null, dateFormat: 'short'|'long'|'iso'|null, host: string, port: number, platform: string, recovery: boolean, scope: 'local'|'remote', signedInThrough: 'local'|'ticket'|'tailscale'|'token', tailscaleName?: string, tailscaleLogin?: string, expiresAt: string, version: string }",
+        answer: "{ csrf: string, timezone: string, timeFormat: '12h'|'24h'|null, dateFormat: 'short'|'long'|'iso'|null, host: string, port: number, platform: string, recovery: boolean, scope: 'local'|'remote', signedInThrough: 'local'|'ticket'|'tailscale'|'cloudflare-access'|'token', provider?: 'tailscale'|'cloudflare-access', providerSubject?: string, tailscaleName?: string, tailscaleLogin?: string, expiresAt: string, version: string }",
     },
     {
         method: 'GET', path: '/api/lock', area: 'session', whileLocked: true,
@@ -115,16 +115,78 @@ export const API_ROUTES = [
         summary: 'Remove the lock screen picture (the background goes back to a built-in one).', answer: 'the lock state',
     },
     {
-        method: 'GET', path: '/api/tailscale', area: 'session',
+        method: 'GET', path: '/api/access', area: 'session',
+        summary: 'Sign in from elsewhere: every trusted access provider (Tailscale, Cloudflare Access) with its status in one line, and whether this request came through one (the block is then read-only).',
+        answer: "{ proxied: boolean, providers: [{ id: 'tailscale'|'cloudflare-access', title, identity: 'login'|'device', proxy: 'this-machine'|'elsewhere', enabled: boolean, status: { state: 'off'|'needs-setup'|'waiting'|'ready'|'unanswered', sentence } }] }",
+    },
+    {
+        method: 'GET', path: '/api/access/tailscale', area: 'session',
         summary: 'Tailscale sign-in: the stored setting, the daemon, and the command that serves this dashboard on the tailnet.',
         answer: '{ enabled: boolean, login: string, available: boolean, self: { login, name }|null, proxied: boolean, serveCommand: string }',
     },
     {
-        method: 'PUT', path: '/api/tailscale', area: 'session', localOnly: true, token: 'access',
+        method: 'PUT', path: '/api/access/tailscale', area: 'session', localOnly: true, token: 'access',
         summary: 'Turn Tailscale sign-in on or off, for one login. Every Tailscale session ends.',
         body: '{ enabled: boolean, login?: string }', answer: 'as GET',
         errors: '400 not a Tailscale login; 403 not from the computer buddi runs on',
     },
+    {
+        method: 'GET', path: '/api/access/cloudflare-access', area: 'session',
+        summary: 'Cloudflare Access sign-in: the stored fields, the status, the setup steps with the ingress port cloudflared must point at, and the last verified visit.',
+        answer: '{ enabled, teamDomain, aud, email, publicOrigin, status: { state, sentence }, ingressPort: number, listening: boolean, lastVisit: { at, email }|null, setup: { steps: [{ text, command? }], fields: [{ key, label, hint?, placeholder? }] }, proxied: boolean }',
+    },
+    {
+        method: 'PUT', path: '/api/access/cloudflare-access', area: 'session', localOnly: true, token: 'access',
+        summary: 'Save Cloudflare Access sign-in: the team domain, the application AUD tag, the one allowed email and the public address. Binds or closes the ingress listener and fetches the team\'s signing keys once; sessions it admitted end unless the same person, team and application stay on.',
+        body: '{ enabled: boolean, teamDomain: string, aud: string, email: string, publicOrigin: string }', answer: 'as GET, plus test: { ok, keys, error? } when on',
+        errors: '400 a field that is not what it should be, or a field missing to turn it on; 403 not from the computer buddi runs on',
+    },
+    {
+        method: 'POST', path: '/api/access/cloudflare-access/test', area: 'session', localOnly: true, token: 'access',
+        summary: '"Test my setup": fetch the signing keys of the team domain given (or the stored one) and say what came back. Nothing is stored.',
+        body: '{ teamDomain?: string }', answer: '{ ok: boolean, keys: number, teamDomain, sentence, listening: boolean, ingressPort: number|null }',
+        errors: '400 not a Cloudflare team domain; 403 not from the computer buddi runs on',
+    },
+    {
+        method: 'GET', path: '/api/access/cloudflare-access/setup', area: 'session', localOnly: true,
+        summary: '"Set it up for me": the run in progress (or the last one), whether a Cloudflare API token is kept, what buddi made last time, the token permissions to ask for and the ingress port. The install line in `progress.install` holds the tunnel\'s connector token.',
+        answer: "{ progress: { state: 'idle'|'running'|'waiting'|'done'|'failed'|'stopped'|'removing'|'removed', host, email, steps: [{ id, state: 'next'|'now'|'done'|'failed', text, why? }], install: { command, note }|null, error, url, removed: string[], uninstall, adoptable: boolean }, tokenStored: boolean, record: { host, email, zone, teamDomain }|null, permissions: string[], tokenUrl: string, ingressPort: number }",
+        errors: '403 not from the computer buddi runs on',
+    },
+    {
+        method: 'POST', path: '/api/access/cloudflare-access/setup', area: 'session', localOnly: true, token: 'access',
+        summary: 'Start "Set it up for me": with the API token (kept as the owner secret CLOUDFLARE_API_TOKEN; omit it to use the kept one), buddi finds the zone, creates (or reuses what it made before) the tunnel buddi-<host>, its ingress, the DNS record, the Access policy and application, fills in Cloudflare Access sign-in, shows the service install line, waits for the tunnel and runs the test. Poll GET for progress. An object of buddi\'s name that buddi did not make stops the run with `progress.adoptable`; `adopt: true` uses it anyway.',
+        body: '{ token?: string, host: string, email: string, zone?: string, adopt?: boolean }', answer: '202, as GET',
+        errors: '400 a hostname, email or token that is not one, or no token kept; 403 not from the computer buddi runs on; 409 a setup or removal already going, or the vault refused the token',
+    },
+    {
+        method: 'POST', path: '/api/access/cloudflare-access/zones', area: 'session', localOnly: true, token: 'access',
+        summary: 'Check a Cloudflare API token (omit it to use the kept one) and list the domains (zones) it can see, for the setup form\'s domain choice. The pasted token is not kept and never echoed.',
+        body: '{ token?: string }', answer: '{ zones: [{ id, name }] }',
+        errors: '400 a token Cloudflare refuses, one that cannot list domains (Zone · DNS · Edit missing), or no token kept or given; 403 not from the computer buddi runs on; 502 Cloudflare unreachable or failing',
+    },
+    {
+        method: 'POST', path: '/api/access/cloudflare-access/setup/stop', area: 'session', localOnly: true, token: 'access',
+        summary: 'Stop waiting for the tunnel. What buddi made stays; a new run picks it up.',
+        answer: 'as GET', errors: '403 not from the computer buddi runs on; 409 a removal going',
+    },
+    {
+        method: 'POST', path: '/api/access/cloudflare-access/setup/remove', area: 'session', localOnly: true, token: 'access',
+        summary: 'Remove what "Set it up for me" made — the Access application and policy, the DNS record and the tunnel, only those whose ids buddi recorded making — turn Cloudflare Access sign-in off when setup filled it in, and forget the token once all of it went.',
+        body: '{ token?: string, host?: string }', answer: 'as GET; progress.removed lists what went, progress.error what did not',
+        errors: '400 no token kept or given; 403 not from the computer buddi runs on; 409 a setup or removal going',
+    },
+    {
+        method: 'GET', path: '/api/tailscale', area: 'session',
+        summary: 'Alias of GET /api/access/tailscale, kept for one release.',
+        answer: '{ enabled: boolean, login: string, available: boolean, self: { login, name }|null, proxied: boolean, serveCommand: string }',
+    },
+    {
+        method: 'PUT', path: '/api/tailscale', area: 'session', localOnly: true, token: 'access',
+        summary: 'Alias of PUT /api/access/tailscale, kept for one release.',
+        body: '{ enabled: boolean, login?: string }', answer: 'as GET',
+        errors: '400 not a Tailscale login; 403 not from the computer buddi runs on',
+    },
     /* ---------------- API tokens ---------------- */
     {
         method: 'GET', path: '/api/api-tokens', area: 'tokens', token: 'access',
@@ -199,7 +261,11 @@ export const API_ROUTES = [
     { method: 'GET', path: '/api/events/kinds', area: 'home', summary: 'Every event kind in the log, with its count.', answer: '{ kinds: Array<{ kind, count }> }' },
     { method: 'POST', path: '/api/pause', area: 'home', summary: 'Pause or resume the installation: nothing new is claimed while paused.', body: '{ paused: boolean }' },
     /* ---------------- chat ---------------- */
-    { method: 'GET', path: '/api/chat/agents', area: 'chat', summary: 'The agents a chat can be with, with their pictures.', answer: '{ agents: Array<{ id, name, handle, avatar, … }>, default: string }' },
+    { method: 'GET', path: '/api/chat/agents', area: 'chat', summary: 'The agents a chat can be with, with their pictures, and the commands plugins add to the composer.', answer: '{ agents: Array<{ id, name, handle, avatar, … }>, default: string, commands: Array<{ plugin, name, description, args? }> }' },
+    {
+        method: 'POST', path: '/api/quiet', area: 'chat', summary: '`/quiet` from the composer: no proactive messages for a while (7 days by default), or `off`.',
+        body: '{ arg?: "" | "1d" | "1w" | "off" }', answer: '{ text }  // the sentence to show, the same one Telegram and the terminal say',
+    },
     { method: 'GET', path: '/api/chat/attention', area: 'chat', summary: 'Which agents are waiting on the owner, and why.' },
     {
         method: 'GET', path: '/api/chat/attention/stream', area: 'chat', kind: 'stream',
@@ -309,7 +375,41 @@ export const API_ROUTES = [
         answer: '{ skills: SkillRow[], agents: [{ id, handle, name, writable }] } where SkillRow is { id (name, or agent/name for one in an agent\'s folder), name, title, ' +
             'description, group: mine|learned|plugin|catalogue, file, home: agent id | null, every, holders: [{ agent, how: home|every|filter|granted }], ' +
             'untrusted: upload|page|null, provenance, source, created, updatedAt, learned: { by, version, edited, keptAt } | null, ' +
-            'from: { kind: plugin, plugin, version, installed } | { kind: catalogue, package, version, agent } | { kind: upload, filename } | null, editable, deletable, shareable }',
+            'from: { kind: plugin, plugin, version, installed } | { kind: catalogue, package, version, agent } | { kind: upload, filename } | null, editable, deletable, shareable, ' +
+            'bundle: { files, scripts: path[], size } | null }; an agent\'s canRunScripts says it holds host.exec, which a bundle\'s scripts run through',
+    },
+    {
+        method: 'POST', path: '/api/skills/bundles', area: 'agents', token: 'shapes', kind: 'upload',
+        summary: 'Read a skill bundle (.zip with SKILL.md, scripts/, assets/) before keeping it: streamed to a temporary folder, checked (20 MB unpacked, 500 files, SKILL.md with a description, no absolute paths, .., links or encrypted entries, nothing executable outside scripts/) and unpacked into staging. Nothing in it runs.',
+        body: 'the .zip bytes; X-Filename header',
+        answer: '{ staged: { id, filename, packed, size, files: [{ path, size, kind: skill|script|font|image|template|data|other, setup? }], scripts, skill: { name, title, description, firstLines }, createdAt } }',
+        errors: '400; 413 too big; 415 not a .zip; 422 refused, with { error, refusal: { kind: notzip|big|count|noskill|paths|frontmatter|executable|damaged, filename, size?, files?, entries?: [{ path, why, target? }], looked? } }',
+    },
+    {
+        method: 'GET', path: '/api/skills/bundles/:staged/file', area: 'agents', summary: 'One file of a staged upload, for the preview\'s viewer (?path=).',
+        answer: '{ file: { path, size, kind, setup?, text? | binary: true, image? } }', errors: '404',
+    },
+    {
+        method: 'GET', path: '/api/skills/bundles/:staged/image', area: 'agents', kind: 'bytes', summary: 'A picture in a staged upload (?path=), served under a CSP that runs nothing.',
+        answer: 'image/*', errors: '404',
+    },
+    {
+        method: 'POST', path: '/api/skills/bundles/:staged', area: 'agents', token: 'shapes',
+        summary: 'Keep a staged bundle: unpacked into the skills folder under its own directory, SKILL.md written in buddi\'s front matter (untrusted unless mine), the grant written in each agent\'s file, all checked by a catalog reload.',
+        body: '{ every?: boolean, agents?: agent id[], mine?: boolean }', answer: '201 { skill: SkillRow }',
+        errors: '400; 404 the upload is gone; 409 a shipped agent, or the catalog refused the result (nothing kept)',
+    },
+    {
+        method: 'DELETE', path: '/api/skills/bundles/:staged', area: 'agents', token: 'shapes', summary: 'Drop a staged upload nobody kept.',
+        answer: '{ discarded }',
+    },
+    {
+        method: 'GET', path: '/api/skills/:id/file', area: 'agents', summary: 'One of a bundle\'s files, for the sheet\'s viewer (?path=): its text, or its size when it is not text.',
+        answer: '{ file: { path, size, kind, setup?, text? | binary: true, image? } }', errors: '404',
+    },
+    {
+        method: 'GET', path: '/api/skills/:id/image', area: 'agents', kind: 'bytes', summary: 'A picture in a bundle (?path=), served under a CSP that runs nothing.',
+        answer: 'image/*', errors: '404',
     },
     {
         method: 'POST', path: '/api/skills', area: 'agents', token: 'shapes',
@@ -319,13 +419,13 @@ export const API_ROUTES = [
         errors: '400 a field missing or the loader\'s sentence; 409 an agent that ships with buddi, or the catalog refused the result (nothing written); 413 over 50 KB; 415 not .md',
     },
     {
-        method: 'GET', path: '/api/skills/:id', area: 'agents', summary: 'One skill whole: its row, its text, the file as written, a learned one\'s versions, and what deleting it does.',
-        answer: '{ skill: SkillRow, body, text, versions?: number[], onDelete: { stops: agent id[], every, then: trash|versions-kept|catalogue-asks }, agents }',
+        method: 'GET', path: '/api/skills/:id', area: 'agents', summary: 'One skill whole: its row, its text, the file as written, a learned one\'s versions, a bundle\'s file tree, and what deleting it does.',
+        answer: '{ skill: SkillRow, body, text, versions?: number[], bundle?: { files: [{ path, size, kind, setup? }], size, scripts }, onDelete: { stops: agent id[], every, then: trash|versions-kept|catalogue-asks }, agents }',
         errors: '404',
     },
     {
-        method: 'GET', path: '/api/skills/:id/download', area: 'agents', kind: 'bytes', summary: 'The skill as its .md file, as an attachment.',
-        answer: 'text/markdown', errors: '404',
+        method: 'GET', path: '/api/skills/:id/download', area: 'agents', kind: 'bytes', summary: 'The skill as its .md file, or a bundle as a .zip with its files, as an attachment.',
+        answer: 'text/markdown | application/zip', errors: '404',
     },
     {
         method: 'POST', path: '/api/skills/:id/text', area: 'agents', token: 'shapes',
@@ -366,7 +466,7 @@ export const API_ROUTES = [
         summary: 'Which agents this one may hand work to.', body: '{ delegates: agent id[] }', errors: '400; 404',
     },
     {
-        method: 'POST', path: '/api/agents/:id/engine', area: 'agents', summary: 'Change engine settings (effort, context, idle rollover…).',
+        method: 'POST', path: '/api/agents/:id/engine', area: 'agents', summary: 'Change engine settings (effort, context, idle rollover, where it may look: browser auto/own/chrome/apps…).',
         body: 'engine fields; the account and model go through /account', errors: '400',
     },
     {
@@ -561,6 +661,13 @@ export const API_ROUTES = [
         body: "{ content?: string, scope?: string, kind?: 'fact'|'observation'|'todo' }", errors: '400; 404',
     },
     { method: 'POST', path: '/api/memory/notes/:id/forget', area: 'memory', summary: 'Forget a note.', answer: '204', errors: '404' },
+    { method: 'GET', path: '/api/memory/people', area: 'memory', summary: 'The owner’s people: who they are, how to address them, their dates, the next one and whether its reminders are on.', answer: '{ people: Array<{ id, name, relationship, addressAs, birthday, anniversary, notes, next: { what, inDays, turning }|null, reminders: boolean|null }>, today }' },
+    {
+        method: 'POST', path: '/api/memory/people', area: 'memory', summary: 'Add a person, or change one by id; reminders switches their date missions.',
+        body: '{ id?, name, relationship?, addressAs?, notes?: string|null, birthday?, anniversary?: { day, month, year? }|null, reminders?: boolean }', answer: '{ person, people }', errors: '400; 409 the name is taken',
+    },
+    { method: 'POST', path: '/api/memory/people/:id/forget', area: 'memory', summary: 'Forget a person; their reminders go with them.', answer: '{ person, people }', errors: '404' },
+    { method: 'POST', path: '/api/memory/people/:id/restore', area: 'memory', summary: 'Bring a forgotten person back (Undo).', answer: '{ person, people }', errors: '404' },
     /* ---------------- files ---------------- */
     {
         method: 'GET', path: '/api/artifacts', area: 'files', summary: 'The library: every file buddi holds, paged.',
@@ -585,16 +692,17 @@ export const API_ROUTES = [
         answer: '204', errors: '404; 409 already sent, or not from the dashboard',
     },
     /* ---------------- owner ---------------- */
-    { method: 'GET', path: '/api/owner', area: 'owner', summary: 'The owner’s profile, places, and the timezones this host knows.', answer: '{ preferredName, timezone, language, about, timeFormat, dateFormat, places, detectedTimezone, zones }' },
+    { method: 'GET', path: '/api/owner', area: 'owner', summary: 'The owner’s profile, places, and the timezones this host knows.', answer: '{ preferredName, fullName, pronouns, birthday: { day, month, year|null }|null, timezone, language, about, timeFormat, dateFormat, places, detectedTimezone, zones }' },
     {
         method: 'POST', path: '/api/owner', area: 'owner', summary: 'Change the profile; what is left out stays.',
-        body: "{ preferredName?, timezone?, language?, about?: string|null, timeFormat?: '12h'|'24h'|null, dateFormat?: 'short'|'long'|'iso'|null }", answer: 'as GET', errors: '400',
+        body: "{ preferredName?, fullName?, pronouns?, timezone?, language?, about?: string|null, birthday?: { day, month, year? }|null, timeFormat?: '12h'|'24h'|null, dateFormat?: 'short'|'long'|'iso'|null }", answer: 'as GET', errors: '400',
     },
     {
         method: 'POST', path: '/api/owner/places', area: 'owner', summary: 'Save a place (new, or by id).',
         body: '{ id?, label: string, name: string, address?: string, latitude: number, longitude: number, timezone?: string }', answer: '{ place, places }', errors: '400',
     },
     { method: 'POST', path: '/api/owner/places/find', area: 'owner', summary: 'Find a place by address or town (Open-Meteo).', body: '{ address: string }', answer: '{ found: Array<{ name, latitude, longitude, timezone? }> }', errors: '400; 502' },
+    { method: 'GET', path: '/api/owner/birthday', area: 'owner', summary: 'Home on the owner’s birthday: whether it is today, and the team’s note and picture once sent.', answer: '{ today, date, name, age, note, from, image }' },
     { method: 'POST', path: '/api/owner/places/remove', area: 'owner', summary: 'Remove a place.', body: '{ id: string }', answer: '{ removed, places }', errors: '404' },
     /* ---------------- model accounts ---------------- */
     {
@@ -715,8 +823,6 @@ export const API_ROUTES = [
     },
     { method: 'POST', path: '/api/host/stop', area: 'computer', summary: 'Stop an agent’s running commands in a conversation.', body: '{ agentId: string, conversationId: string }', answer: '{ stopped }' },
     { method: 'POST', path: '/api/host/revoke', area: 'computer', summary: 'Revoke a standing host-execution permission.', body: '{ id: uuid }', answer: '{ revoked: true }', errors: '400; 404' },
-    { method: 'GET', path: '/api/host/apps', area: 'computer', summary: 'Apps installed on this computer.', answer: '{ apps }' },
-    { method: 'GET', path: '/api/host/browser-profiles', area: 'computer', summary: "A browser app's profiles.", query: 'app: string', answer: '{ profiles }' },
     { method: 'GET', path: '/api/browser', area: 'computer', summary: "The agents' browser: installed, running, its session and page.", query: 'agentId?, conversationId?' },
     {
         method: 'GET', path: '/api/browser/screenshot', area: 'computer', kind: 'bytes', summary: 'The browser’s current screen, as JPEG.',
@@ -724,9 +830,11 @@ export const API_ROUTES = [
     },
     { method: 'POST', path: '/api/browser/install', area: 'computer', token: 'code', summary: 'Download the browser agents use (about 150 MB); follow on GET /api/browser.', answer: '202', errors: '409' },
     { method: 'POST', path: '/api/browser/check', area: 'computer', summary: 'Launch the browser once to see it starts.', answer: '{ ok: boolean, message? }' },
-    { method: 'POST', path: '/api/browser/settings', area: 'computer', token: 'grants', summary: 'Change the browser control modes.', errors: '409' },
-    { method: 'POST', path: '/api/browser/permissions', area: 'computer', summary: 'Check (and optionally ask for) the operating system’s permissions.', body: '{ prompt?: boolean }', errors: '400; 409' },
-    { method: 'POST', path: '/api/browser/stop', area: 'computer', summary: 'Stop the browser session.', body: '{ sessionId?: string }' },
+    { method: 'POST', path: '/api/browser/settings', area: 'computer', token: 'grants', summary: 'Change where agents may look: your Chrome on/off, your apps off/ask/on, sites that need your sign-in, the Stop\'s expiry, pages at once, show the window. A partial object.', errors: '409' },
+    { method: 'POST', path: '/api/browser/pin', area: 'computer', summary: 'Pin one conversation to a route, or clear it.', body: '{ conversationId: string, route: auto|own|chrome|apps }', errors: '400; 409' },
+    { method: 'POST', path: '/api/browser/card', area: 'computer', summary: 'Answer a browser card (Look, Keep going, Take over, Use my Chrome, Resume) without a chat message.', body: '{ conversationId: string, answer: string }', answer: '{ answered?, status }', errors: '400' },
+    { method: 'GET', path: '/api/browser/telemetry', area: 'computer', summary: 'Browser stops by cause, cards and routes over the last days.', query: 'days?: number', answer: '{ days, tasks, stops, cards, byCause, routes, stopsPerTask }' },
+    { method: 'POST', path: '/api/browser/stop', area: 'computer', summary: 'Stop one page, or with no session stop agents\' browsing (expires after the set time unless forever).', body: '{ sessionId?: string, forever?: boolean }' },
     { method: 'POST', path: '/api/browser/takeover', area: 'computer', summary: 'Take over the screen from the agent.', body: '{ sessionId?: string }', answer: 'the status, with hand: boolean' },
     { method: 'POST', path: '/api/browser/resume', area: 'computer', summary: 'Give the screen back to the agent.', body: '{ sessionId?: string }' },
     { method: 'POST', path: '/api/browser/release', area: 'computer', summary: 'Release the session.', body: '{ sessionId?: string }' },
@@ -781,7 +889,9 @@ export const API_ROUTES = [
     },
     { method: 'POST', path: '/api/onboarding/agent/update', area: 'onboarding', summary: 'Change the assistant’s name, face or purpose.', body: '{ name?, description?, instructions?, avatar? }', errors: '400; 404' },
     { method: 'POST', path: '/api/onboarding/brain', area: 'onboarding', summary: 'Move the assistant (and the maker following it) to an account and model.', body: '{ accountId: string, model: string }', errors: '400; 404' },
-    { method: 'GET', path: '/api/onboarding/ollama', area: 'onboarding', summary: 'Is Ollama running on this computer.' },
+    { method: 'GET', path: '/api/onboarding/ollama', area: 'onboarding', summary: 'Is Ollama running on this computer, is it installed, and which model suits it.', answer: '{ running, models, baseUrl, downloadUrl, cloudBaseUrl, machine: { platform, memoryGb, gpu, installed, recommended, install, cloudSuggested }, pull }' },
+    { method: 'GET', path: '/api/onboarding/ollama/pull', area: 'onboarding', summary: 'How the model fetch into the local Ollama stands.', answer: '{ pull: { model, state, completed, total, status, error? } | null }' },
+    { method: 'POST', path: '/api/onboarding/ollama/pull', area: 'onboarding', summary: 'Fetch a model into the local Ollama, with progress.', body: '{ model: string }', answer: '202 { pull }', errors: '400 not a model name; 409 another fetch is going' },
     { method: 'GET', path: '/api/onboarding/mlxh', area: 'onboarding', summary: 'Is mlxh running on this computer.' },
     { method: 'GET', path: '/api/onboarding/take-on', area: 'onboarding', summary: "Chapter 3's progress, per plugin." },
     { method: 'POST', path: '/api/onboarding/take-on', area: 'onboarding', token: 'code', summary: 'Record what buddi takes on and start those installs.', body: '{ tiles: string[] }', answer: '202', errors: '400' },
@@ -949,7 +1059,10 @@ The API is served by the gateway, on the dashboard's own address, under
 - **This computer:** \`http://127.0.0.1:4317\` by default (\`BUDDI_WEB_PORT\`
   changes the port; \`buddi status\` prints the address).
 - **Your tailnet:** the HTTPS address \`tailscale serve\` gives the dashboard
-  (Settings → System → Tailscale prints the command).
+  (Settings → System → Sign in from elsewhere → Tailscale prints the command).
+- **Your own domain through Cloudflare:** the public hostname of a Cloudflare
+  Tunnel with Cloudflare Access in front (Settings → System → Sign in from
+  elsewhere → Cloudflare Access walks through it).
 
 Requests and answers are JSON (\`Content-Type: application/json\`), except
 where a route says *bytes*, *upload*, *server-sent events* or *WebSocket*. A
@@ -1000,7 +1113,9 @@ request.
 
 **A dashboard session** — what the browser holds. It comes from a sign-in
 link (\`buddi dashboard\`: a five-minute ticket, \`?t=…\`, exchanged at a
-page URL and never under \`/api\`) or a Tailscale identity the owner allowed;
+page URL and never under \`/api\`) or an identity a trusted access provider
+verified for the person the owner allowed (Tailscale's daemon, Cloudflare
+Access's signed JWT);
 a source checkout bound to loopback also mints one for any request from this
 computer. The session is a cookie
 (\`buddi_session_<port>\`, HttpOnly, SameSite=Strict). Every request that is
@@ -1042,7 +1157,7 @@ route, with an empty body:
 | 405 | A method the path does not take. |
 | 423 | \`{ "locked": true, … }\`: the dashboard session is locked (Settings → Lock screen). Tokens are not covered. |
 | 429 | Too many failed sign-ins from this address; \`Retry-After\` says when to try again. |
-| 503 | Tailscale could not be asked, or a part of buddi is not running in this process. |
+| 503 | A sign-in provider could not be asked (Tailscale's daemon, Cloudflare's signing keys), or a part of buddi is not running in this process. |
 
 ## Rate limits and lockout
 
@@ -1079,10 +1194,40 @@ curl -N -H "Authorization: Bearer $BUDDI_TOKEN" "$BUDDI_URL/api/chat/conversatio
 `;
 /**
  * The release each route first shipped in, from the history (the earliest
- * tag whose gateway source dispatched it). A route added since the last
- * release has no entry and reads "unreleased" until the release adds it.
+ * tag whose gateway source dispatched it). Every row has an entry: a route
+ * added for the coming release takes that release's version when it lands
+ * (the test holds both directions).
  */
 export const API_SINCE = {
+    'GET /api/access': '0.1.0-pre.38',
+    'GET /api/access/tailscale': '0.1.0-pre.38',
+    'PUT /api/access/tailscale': '0.1.0-pre.38',
+    'GET /api/access/cloudflare-access': '0.1.0-pre.38',
+    'PUT /api/access/cloudflare-access': '0.1.0-pre.38',
+    'POST /api/access/cloudflare-access/test': '0.1.0-pre.38',
+    'GET /api/access/cloudflare-access/setup': '0.1.0-pre.38',
+    'POST /api/access/cloudflare-access/setup': '0.1.0-pre.38',
+    'POST /api/access/cloudflare-access/setup/stop': '0.1.0-pre.38',
+    'POST /api/access/cloudflare-access/setup/remove': '0.1.0-pre.38',
+    'POST /api/access/cloudflare-access/zones': '0.1.0-pre.38',
+    'POST /api/browser/pin': '0.1.0-pre.38',
+    'POST /api/browser/card': '0.1.0-pre.38',
+    'GET /api/browser/telemetry': '0.1.0-pre.38',
+    'POST /api/quiet': '0.1.0-pre.37',
+    'POST /api/skills/bundles': '0.1.0-pre.37',
+    'GET /api/skills/bundles/:staged/file': '0.1.0-pre.37',
+    'GET /api/skills/bundles/:staged/image': '0.1.0-pre.37',
+    'POST /api/skills/bundles/:staged': '0.1.0-pre.37',
+    'DELETE /api/skills/bundles/:staged': '0.1.0-pre.37',
+    'GET /api/skills/:id/file': '0.1.0-pre.37',
+    'GET /api/skills/:id/image': '0.1.0-pre.37',
+    'GET /api/memory/people': '0.1.0-pre.37',
+    'POST /api/memory/people': '0.1.0-pre.37',
+    'POST /api/memory/people/:id/forget': '0.1.0-pre.37',
+    'POST /api/memory/people/:id/restore': '0.1.0-pre.37',
+    'GET /api/owner/birthday': '0.1.0-pre.37',
+    'GET /api/onboarding/ollama/pull': '0.1.0-pre.37',
+    'POST /api/onboarding/ollama/pull': '0.1.0-pre.37',
     'GET /api/plugin-assets/:plugin/:key': '0.1.0-pre.36',
     'POST /api/missions/:id/still-useful': '0.1.0-pre.35',
     'GET /api/artifacts/:id/export/:format': '0.1.0-pre.35',
@@ -1309,14 +1454,11 @@ export const API_SINCE = {
     'GET /api/host': '0.1.0-pre.15',
     'POST /api/host/stop': '0.1.0-pre.15',
     'POST /api/host/revoke': '0.1.0-pre.15',
-    'GET /api/host/apps': '0.1.0-pre.15',
-    'GET /api/host/browser-profiles': '0.1.0-pre.15',
     'GET /api/browser': '0.1.0-pre.15',
     'GET /api/browser/screenshot': '0.1.0-pre.15',
     'POST /api/browser/install': '0.1.0-pre.15',
     'POST /api/browser/check': '0.1.0-pre.15',
     'POST /api/browser/settings': '0.1.0-pre.15',
-    'POST /api/browser/permissions': '0.1.0-pre.15',
     'POST /api/browser/stop': '0.1.0-pre.15',
     'POST /api/browser/takeover': '0.1.0-pre.15',
     'POST /api/browser/resume': '0.1.0-pre.15',