acrylblends 1.0.3 → 1.0.4

package/docs/framework/workshop/README.md

@@ -182,8 +182,8 @@ Then `inject: ['router', 'kv', 'db']` with `import type {} from '../plugins/acry
 `await ctx.db.run('INSERT INTO visits (at) VALUES (?)', new Date().toISOString())` before the reply. The database is `my-hero/.acrylblends/data.sqlite`,
 and the migrations run at start, in order.
 
-**Stuck?** `migrations "migrations" is relative, but this app has no file base URL` means the folder was named in `blend.yaml`; move it into
-`src/app.ts` as above. "no such table" means the file is not in `migrations/` at the app root.
+**Stuck?** `migrations "migrations" is relative, but this app has no file base URL` means the app has `acrylblends` older than 1.0.3, where a relative path in `blend.yaml` was not read
+from the app folder; move it into `src/app.ts` as above, or update (`npx acrylblends@latest upgrade`). "no such table" means the file is not in `migrations/` at the app root.
 
 ## 5. A desktop window (7 minutes)
 
@@ -280,7 +280,7 @@ few minutes; the panel shows each step, and has a stop button. Open `/board` whe
 A terminal agent works too: choose `pty:codex` (or `pty:claude`, `pty:pi`) for its normal interactive session inside the app folder, where it can use
 the door (`.acryl/bin/acryl`) to look at the page it built.
 
-**Stuck?** The panel uses your own agent account: `codex login` (or `claude`) in a terminal first. If `npm install` warns that npm blocked
+**Stuck?** The panel uses your own agent account: `codex login` (or `claude`) in a terminal first. Your own agent settings travel with it: skills or hooks of your own can make it stop and ask for approval instead of acting, so write the task as "do it now, without asking for approval", or start the agent from a clean configuration (a fresh `CODEX_HOME`, or no personal skills). If `npm install` warns that npm blocked
 `node-pty`'s install script, ignore it: prebuilt binaries ship. Only if the panel lists no `pty:` terminal, run `npm approve-scripts node-pty` and
 `npm rebuild node-pty` (the `add` output says the same).
 

package/docs/framework/workshop/facilitator.md

@@ -54,6 +54,7 @@ what the optional column is for, and the handout names the same choices so nobod
 
 These are the defects found by the walk. They are known; say so rather than letting people think they broke something.
 
+- **An agent with its own settings acts differently.** Skills, hooks and instructions in a person's own Codex or Claude configuration travel into the panel's run: on the owner's laptop Codex stopped to "present a design for approval" instead of building. Word every task for the agent as "do it now, without asking for approval", and for a demo machine start the agent from a clean configuration (a fresh `CODEX_HOME`, no personal skills).
 - **The data step is the slow one.** Wiring `kv` then `db` by hand is about ten minutes of edits for a newcomer (two rows, two registry lines, two
   type imports, the migrations folder). It is the block the handout names optional, and the one to help with first.
 - **A relative migrations path in `blend.yaml` fails.** `migrations: migrations` in the row stops the app with "this app has no file base URL to

package/lib/{audit-BXnYsLge.d.ts → audit-D5z9uwOP.d.ts}

@@ -1,4 +1,4 @@
-import { _ as UiResult, g as UiRequest, n as ChannelToHost, t as AuditEntry } from "./protocol-BizVt4J6.js";
+import { _ as UiRequest, n as AuditEntry, r as ChannelToHost, v as UiResult } from "./protocol-C37gPePD.js";
 
 //#region ../../plugins/acryl-door/src/host/channel.d.ts
 /** The slice of a page's stream the channel needs, so tests can supply their own. */
@@ -12,6 +12,8 @@ declare class UiChannel {
   private nextId;
   private clock;
   private closed;
+  /** Callers waiting for a page to (re)connect: each is told once, by the next stream that attaches. */
+  private readonly attachWaiters;
   /**
    * Register a page's stream. A stream already open for the same window is closed first, and its calls settle as `disconnected`.
    * @returns the function to call when this stream ends.
@@ -34,6 +36,17 @@ declare class UiChannel {
     signal?: AbortSignal;
     timeoutMs?: number;
   }): Promise<UiResult>;
+  /**
+   * A promise for the next time a page connects (a page that reloaded or moved opens a new stream). Ask for it BEFORE the call that makes the page leave, or a fast page is missed.
+   * @returns whether a page connected within `timeoutMs`.
+   */
+  expectAttach(timeoutMs: number, count?: number): Promise<boolean>;
+  /**
+   * Ask every connected page to reload (the app just changed under them) and wait, up to `timeoutMs`, for them to come back. Best effort: a page that does not come back
+   * (it was closed, or it moved to a page without the door) is not an error here.
+   * @returns how many pages were asked.
+   */
+  reloadAll(timeoutMs?: number): Promise<number>;
   /** Close every page's stream and settle every pending call as `unloaded`. */
   close(): void;
   private byRecency;

package/lib/cordis/door.d.ts

@@ -1,5 +1,5 @@
-import { d as UiActionResult, v as UiSnapshot } from "../protocol-BizVt4J6.js";
-import { i as UiChannel, t as AuditLog } from "../audit-BXnYsLge.js";
+import { f as UiActionResult, y as UiSnapshot } from "../protocol-C37gPePD.js";
+import { i as UiChannel, t as AuditLog } from "../audit-D5z9uwOP.js";
 import { Context } from "@deepseek-ai/cordis";
 import z from "@deepseek-ai/schemastery";
 
@@ -43,6 +43,10 @@ interface DoorDeps {
   readonly tools: () => ToolsPort | undefined;
   /** The app tools the door offers; anything else is refused before it reaches the registry. */
   readonly expose: readonly string[];
+  /** Reload the open pages after a plugin was added, removed or reloaded, so the page an agent looks at next is the new one. Default: true. */
+  readonly reloadOnChange?: boolean;
+  /** How long a reload or a move may take before the new page has connected again (tests shorten it). Default 15 s. */
+  readonly pageBackMs?: number;
 }
 /** What one verb answered: the value for `--json` and programs, the text for an agent reading a terminal. */
 interface VerbAnswer {
@@ -158,6 +162,8 @@ interface Config {
    * run it in production (a packaged desktop app whose user drives it with an agent) says so here; `ACRYL_DOOR=off` still wins.
    */
   allowInProduction?: boolean;
+  /** Reload the open pages after a live plugin change, so an agent that built a feature sees it on the page it has open. Default: true. */
+  reloadOnChange?: boolean;
 }
 declare const Config: z<Config>;
 declare function apply(ctx: Context, rawConfig?: Config): void;

package/lib/cordis/door.js

@@ -1,12 +1,13 @@
 import { t as Acryl } from "../app-BM0rTCp7.js";
 import { n as clientModules } from "../client-modules-CLvWOjbd.js";
 import { MAX_SNAPSHOT_NODES, MAX_WAIT_MS, UiControlError, parseUiRequest } from "../door/protocol.js";
-import { a as INVALID_JSON, c as operatorOnly, d as AuditLog, f as auditPath, i as DOOR_PREFIX, l as privateApi, o as error, p as UiChannel, r as pageChannelRoutes, s as jsonBody, t as renderSnapshot, u as readJson } from "../snapshot-text-DmE0YfeZ.js";
-import "../src-2Z4mJg0x.js";
+import { a as INVALID_JSON, c as operatorOnly, d as AuditLog, f as auditPath, i as DOOR_PREFIX, l as privateApi, o as error, p as UiChannel, r as pageChannelRoutes, s as jsonBody, t as renderSnapshot, u as readJson } from "../snapshot-text-BLz8nlSc.js";
+import "../src-dy3Fk9tA.js";
 import { isAbsolute, join, relative, resolve } from "node:path";
 import { chmodSync, existsSync, mkdirSync, readFileSync, renameSync, rmSync, writeFileSync } from "node:fs";
 import z from "@deepseek-ai/schemastery";
 import { randomBytes } from "node:crypto";
+import { spawnSync } from "node:child_process";
 //#region ../../plugins/acryl-door/src/host/verbs.ts
 /**
 * The one verb list (spec 049 slice 13). Every face of the door reads it: the operator client (`acryl <verb>`, its `verbs` and `brief`),
@@ -56,8 +57,8 @@ const VERB_SPECS = {
 		}
 	},
 	"act": {
-		usage: "act click|type|select|press|scroll|wait ...: do one thing on the page (refs from the latest look)",
-		description: "Do one thing on the page: click, type, select, press a key, scroll, or wait for text or a control. Look again before the next act.",
+		usage: "act click|type|select|press|scroll|wait|reload|navigate ...: do one thing on the page (refs from the latest look)",
+		description: "Do one thing on the page: click, type, select, press a key, scroll, wait for text or a control, reload the page, or navigate to another path of the app. Look again before the next act.",
 		arguments: {
 			type: "object",
 			properties: {
@@ -69,9 +70,15 @@ const VERB_SPECS = {
 						"select",
 						"press",
 						"scroll",
-						"wait"
+						"wait",
+						"reload",
+						"navigate"
 					]
 				},
+				path: {
+					type: "string",
+					description: "navigate: a path of this app, e.g. /demo (the page must load the door script to be controlled afterwards)"
+				},
 				ref: {
 					type: "string",
 					description: "a ref from the latest look, e.g. 3.12"
@@ -211,6 +218,8 @@ const SELF_KNOWLEDGE = [
 	"docs",
 	"plugins"
 ];
+/** How long a reload or a move may take before the new page has connected to the door again. */
+const PAGE_BACK_MS = 15e3;
 var Door = class {
 	deps;
 	constructor(deps) {
@@ -235,7 +244,7 @@ var Door = class {
 					text: `done${result.target === void 0 ? "" : `: ${result.target.role} "${result.target.name}"`}${result.detail === void 0 ? "" : ` (${result.detail})`}; look again before the next act`
 				};
 			}
-			case "plugin-list": return this.plugin((extensions) => extensions.list());
+			case "plugin-list": return this.plugin((extensions) => extensions.list(), false);
 			case "plugin-add": return this.plugin((extensions) => extensions.install(this.insideApp(input.folder)));
 			case "plugin-remove": {
 				const name = input.name;
@@ -286,9 +295,26 @@ var Door = class {
 		});
 		return this.callPage("look", request, signal);
 	}
-	act(input, signal) {
+	async act(input, signal) {
 		if (input.op === "snapshot") throw new DoorError("invalid", "use look to see the page");
-		return this.callPage(`act ${String(input.op)}`, this.parse(input), signal);
+		const request = this.parse(input);
+		if (request.op !== "reload" && request.op !== "navigate") return await this.callPage(`act ${String(input.op)}`, request, signal);
+		const back = this.deps.channel.expectAttach(this.deps.pageBackMs ?? PAGE_BACK_MS);
+		let answer;
+		try {
+			answer = await this.callPage(`act ${request.op}`, request, signal);
+		} catch (cause) {
+			if (!(cause instanceof UiControlError && cause.code === "disconnected")) throw cause;
+			answer = {
+				ok: true,
+				detail: request.op === "reload" ? "reloading" : `going to ${request.path}`
+			};
+		}
+		if (!await back) throw new UiControlError("timeout", request.op === "reload" ? "the page did not come back after the reload" : `the page did not come back after going to ${request.path}: is there a page at that path, and does it load the door's script?`);
+		return {
+			...answer,
+			detail: `${answer.detail ?? "done"}; the page is back: look again`
+		};
 	}
 	parse(input) {
 		try {
@@ -335,10 +361,12 @@ var Door = class {
 			throw cause;
 		}
 	}
-	async plugin(run) {
+	async plugin(run, mutates = true) {
 		const extensions = this.deps.extensions();
 		if (extensions === void 0) throw new DoorError("unavailable", "this app has no extensions plugin, so plugins cannot be installed while it runs");
 		const value = await run(extensions);
+		const unchanged = typeof value === "object" && value !== null && value.action === "unchanged";
+		if (mutates && !unchanged && this.deps.reloadOnChange !== false) await this.deps.channel.reloadAll();
 		return {
 			value,
 			text: JSON.stringify(value, null, 2)
@@ -631,6 +659,34 @@ function operatorRoutes(prefix, secret, door, reportError) {
 		}
 	});
 }
+/** The oldest Node the client runs on (the framework's own floor). */
+const MIN_NODE = [22, 19];
+/**
+* A real Node for the command, when the app runs inside Electron: Electron can run the client as Node, but on macOS every such call prints a code-signing complaint on stderr,
+* which lands in an agent's transcript. A `node` on the PATH that is new enough is used instead; without one, Electron runs the client. `find` is replaceable for tests.
+*/
+function realNode(find = findNodeOnPath) {
+	const found = find();
+	if (found === void 0) return void 0;
+	const [major = 0, minor = 0] = found.version.replace(/^v/u, "").split(".").map(Number);
+	return major > MIN_NODE[0] || major === MIN_NODE[0] && minor >= MIN_NODE[1] ? found.path : void 0;
+}
+function findNodeOnPath() {
+	const located = spawnSync(process.platform === "win32" ? "where" : "which", ["node"], {
+		encoding: "utf8",
+		env: {
+			...process.env,
+			ELECTRON_RUN_AS_NODE: void 0
+		}
+	});
+	const path = located.status === 0 ? located.stdout.split(/\r?\n/u).find((line) => line.trim() !== "")?.trim() : void 0;
+	if (path === void 0) return void 0;
+	const asked = spawnSync(path, ["--version"], { encoding: "utf8" });
+	return asked.status === 0 ? {
+		path,
+		version: asked.stdout.trim()
+	} : void 0;
+}
 /** A word for `sh`: single-quoted, with each `'` closed, escaped and reopened. */
 function shWord(value) {
 	return `'${value.replaceAll("'", "'\\''")}'`;
@@ -698,6 +754,7 @@ const inject = [
 ];
 const Config = z.object({
 	allowInProduction: z.boolean().default(false).description("Run in production too (NODE_ENV=production); ACRYL_DOOR=off still turns it off."),
+	reloadOnChange: z.boolean().default(true).description("Reload the open pages after a plugin was added, removed or reloaded while the app runs."),
 	tools: z.object({ expose: z.array(z.string().pattern(/^(?!door_)[A-Za-z][A-Za-z0-9_-]{0,63}$/u)).description("App tools (from the tools registry) the door offers; none by default.") })
 });
 /** The page module, served compiled from source by the app's own TypeScript. */
@@ -707,11 +764,13 @@ const CLIENT = import.meta.url.endsWith(".ts") ? join(import.meta.dirname, "cli"
 /** How the folder's `.acryl/bin/acryl` starts the client: with the Node that runs the app, and its type-stripping flag when run from source. */
 function shimTarget() {
 	const fromSource = CLIENT.endsWith(".ts");
+	const inElectron = process.versions.electron !== void 0;
+	const node = inElectron ? realNode() : void 0;
 	return {
-		node: process.execPath,
+		node: node ?? process.execPath,
 		nodeOptions: fromSource ? process.execArgv.filter((option) => /^--experimental-(strip|transform)-types$/u.test(option)) : [],
 		client: CLIENT,
-		electron: process.versions.electron !== void 0
+		electron: inElectron && node === void 0
 	};
 }
 /** A listening address as one the operator reaches: an any-address bind is reached on loopback. */
@@ -741,12 +800,29 @@ function apply(ctx, rawConfig = {}) {
 		},
 		extensions: () => ctx.get("extensions"),
 		tools: () => ctx.get("tools"),
-		expose: config.tools?.expose ?? []
+		expose: config.tools?.expose ?? [],
+		reloadOnChange: config.reloadOnChange !== false
 	});
 	ctx.effect(() => () => {
 		channel.close();
 	}, "acryl-door: page channel");
 	const pageModule = new Acryl().get(`${DOOR_PREFIX}/page.js`, (c) => c.body(`import '${DOOR_PREFIX}/page/main.ts'\n`, 200, { "content-type": "text/javascript; charset=utf-8" })).route(`${DOOR_PREFIX}/page`, clientModules({ root: PAGE_DIR }));
+	const tag = `<script type="module" src="${DOOR_PREFIX}/page.js"><\/script>`;
+	const addScript = async (c, next) => {
+		await next();
+		if (!(c.res.headers.get("content-type") ?? "").includes("text/html")) return;
+		const html = await c.res.text();
+		const headers = new Headers(c.res.headers);
+		headers.delete("content-length");
+		const carries = html.includes(`${DOOR_PREFIX}/page.js`);
+		c.res = new Response(carries ? html : html.includes("</body>") ? html.replace("</body>", `${tag}</body>`) : html + tag, {
+			status: c.res.status,
+			headers
+		});
+	};
+	const router = ctx.router;
+	if (typeof router.wrap === "function") router.wrap(addScript);
+	else ctx.router.route("/", new Acryl().use("*", addScript));
 	ctx.router.route("/", privateApi(DOOR_PREFIX, pageModule, pageChannelRoutes(channel, { prefix: DOOR_PREFIX }), operatorRoutes(DOOR_PREFIX, secret, door, reportError), mcpRoutes(DOOR_PREFIX, secret, door, reportError)));
 	ctx.inject(["tools"], (inner) => {
 		inner.effect(() => registerChatTools(inner.get("tools"), door), "acryl-door: the verbs in the tools registry");

package/lib/cordis/inspect.js

@@ -1,6 +1,6 @@
 import { t as Acryl } from "../app-BM0rTCp7.js";
 import { loopbackOnly } from "../loopback-only.js";
-import "../src-2Z4mJg0x.js";
+import "../src-dy3Fk9tA.js";
 import "../middleware-CPQ8himN.js";
 import { Service } from "@deepseek-ai/cordis";
 //#region ../../plugins/acryl-inspect/src/report.ts

package/lib/cordis/router-http.d.ts

@@ -1,5 +1,5 @@
 import { n as UpgradeWebSocket } from "../index-C-SklY6u.js";
-import { i as RouterHttpService } from "../index-D4nVR3wu.js";
+import { i as RouterHttpService } from "../index-DMOtA-NJ.js";
 import { IncomingMessage, ServerResponse } from "node:http";
 import { Duplex } from "node:stream";
 import { Context, Service } from "@deepseek-ai/cordis";

package/lib/cordis/router.d.ts

@@ -2,6 +2,6 @@ import { B as NotFoundHandler, L as MiddlewareHandler, O as Handler, Q as Valida
 import { c as StatusCode, n as ContentfulStatusCode } from "../http-status-DaAwGAFL.js";
 import { a as getConnInfo, i as connectionOf, n as RouterBindings, r as RouterEnv, t as ConnectionInfo } from "../connection-ZLEso7XL.js";
 import { t as Acryl } from "../app-D8riatvv.js";
-import { a as TrailingSlash, i as RouterHttpService, n as MountableApp, o as apply, r as Router, s as name, t as Config } from "../index-D4nVR3wu.js";
+import { a as TrailingSlash, i as RouterHttpService, n as MountableApp, o as apply, r as Router, s as name, t as Config } from "../index-DMOtA-NJ.js";
 import { t as HTTPException } from "../http-exception-kpGJkmpi.js";
 export { Acryl, type AcrylRequest, Config, type ConnectionInfo, type ContentfulStatusCode, Context, type ContextRenderer, type ContextVariableMap, type Env, type ErrorHandler, type ExecutionContext, HTTPException, type Handler, type Input, type MiddlewareHandler, type MountableApp, type Next, type NotFoundHandler, type NotFoundResponse, Router, type RouterBindings, type RouterEnv, type RouterHttpService, type Schema, type StatusCode, type ToSchema, type TrailingSlash, type TypedResponse, type ValidationTargets, apply, connectionOf, getConnInfo, name };

package/lib/cordis/router.js

@@ -2,5 +2,5 @@ import { HTTPException } from "../http-exception.js";
 import { t as Context } from "../context-DDO0cfuP.js";
 import { t as Acryl } from "../app-BM0rTCp7.js";
 import { n as getConnInfo, t as connectionOf } from "../connection-C7xgP1hP.js";
-import { i as name, n as Router, r as apply, t as Config } from "../src-2Z4mJg0x.js";
+import { i as name, n as Router, r as apply, t as Config } from "../src-dy3Fk9tA.js";
 export { Acryl, Config, Context, HTTPException, Router, apply, connectionOf, getConnInfo, name };

package/lib/cordis/state.js

@@ -3,7 +3,7 @@ import { methodNotAllowed } from "../method-not-allowed.js";
 import { r as streamSSE } from "../streaming-DHST3Scg.js";
 import { loopbackOnly } from "../loopback-only.js";
 import "../helpers-CvTauQT5.js";
-import "../src-2Z4mJg0x.js";
+import "../src-dy3Fk9tA.js";
 import "../middleware-CPQ8himN.js";
 import { Service } from "@deepseek-ai/cordis";
 //#region ../../plugins/acryl-state/src/cell.ts

package/lib/door/host.d.ts

@@ -1,6 +1,6 @@
 import { t as Acryl } from "../app-D8riatvv.js";
-import { t as AuditEntry, v as UiSnapshot } from "../protocol-BizVt4J6.js";
-import { i as UiChannel, n as auditPath, r as PageStream, t as AuditLog } from "../audit-BXnYsLge.js";
+import { n as AuditEntry, y as UiSnapshot } from "../protocol-C37gPePD.js";
+import { i as UiChannel, n as auditPath, r as PageStream, t as AuditLog } from "../audit-D5z9uwOP.js";
 
 //#region ../../plugins/acryl-door/src/host/page-routes.d.ts
 /** How often the Host writes a `ping`; the page gives up on a stream that is silent for three of these. */

package/lib/door/host.js

@@ -1,2 +1,2 @@
-import { d as AuditLog, f as auditPath, n as HEARTBEAT_MS, p as UiChannel, r as pageChannelRoutes, t as renderSnapshot } from "../snapshot-text-DmE0YfeZ.js";
+import { d as AuditLog, f as auditPath, n as HEARTBEAT_MS, p as UiChannel, r as pageChannelRoutes, t as renderSnapshot } from "../snapshot-text-BLz8nlSc.js";
 export { AuditLog, HEARTBEAT_MS, UiChannel, auditPath, pageChannelRoutes, renderSnapshot };

package/lib/door/page.d.ts

@@ -1,4 +1,4 @@
-import { _ as UiResult, g as UiRequest } from "../protocol-BizVt4J6.js";
+import { _ as UiRequest, v as UiResult } from "../protocol-C37gPePD.js";
 
 //#region ../../plugins/acryl-door/src/page/driver/driver.d.ts
 interface DriverActivity {
@@ -14,6 +14,12 @@ interface UiDriverOptions {
   /** Milliseconds since the user last used the page (mouse, keyboard); Infinity when never. */
   readonly msSinceUserInput?: () => number;
   readonly sleep?: (ms: number, signal: AbortSignal) => Promise<void>;
+  /** Leave the page: reload it, or go to a path of the app. Default: the document's own `location`, a moment after the answer is sent. */
+  readonly leave?: (to: {
+    readonly reload: true;
+  } | {
+    readonly path: string;
+  }) => void;
 }
 declare class UiDriver {
   private readonly refs;
@@ -40,6 +46,11 @@ declare class UiDriver {
   /** @param signal - the Host cancelled the call. @throws UiControlError. */
   handle(request: UiRequest, signal?: AbortSignal): Promise<UiResult>;
   private run;
+  /**
+   * The page is about to be replaced, so the answer is given first and the move happens a moment later (the answer is a POST that the page's own unload would cut off).
+   * The Host does not wait for this answer to be the last word: it waits for the page to come back.
+   */
+  private leave;
   private yieldToUser;
   private emit;
 }

package/lib/door/page.js

@@ -894,8 +894,29 @@ var UiDriver = class {
 			case "press": return pressKey(this.env, request);
 			case "scroll": return scroll(this.env, request);
 			case "wait": return wait(this.env, request, signal);
+			case "reload": return this.leave({ reload: true }, "reloading");
+			case "navigate": return this.leave({ path: request.path }, `going to ${request.path}`);
 		}
 	}
+	/**
+	* The page is about to be replaced, so the answer is given first and the move happens a moment later (the answer is a POST that the page's own unload would cut off).
+	* The Host does not wait for this answer to be the last word: it waits for the page to come back.
+	*/
+	leave(to, detail) {
+		const go = this.options.leave ?? ((target) => {
+			const location = this.options.document().defaultView?.location;
+			if (location === void 0) return;
+			if ("reload" in target) location.reload();
+			else location.assign(target.path);
+		});
+		setTimeout(() => {
+			if (!this.disposed) go(to);
+		}, 150);
+		return {
+			ok: true,
+			detail
+		};
+	}
 	async yieldToUser(signal) {
 		const since = this.options.msSinceUserInput;
 		if (since === void 0) return;

package/lib/door/protocol.d.ts

@@ -1,2 +1,2 @@
-import { S as parseUiRequest, _ as UiResult, a as MAX_SNAPSHOT_NODES, b as parseChannelToHost, c as MUTATING_OPS, d as UiActionResult, f as UiControlError, g as UiRequest, h as UiOp, i as DEFAULT_SNAPSHOT_NODES, l as UI_ERROR_CODES, m as UiNode, n as ChannelToHost, o as MAX_TEXT_LENGTH, p as UiErrorCode, r as ChannelToPage, s as MAX_WAIT_MS, t as AuditEntry, u as UI_OPS, v as UiSnapshot, x as parseChannelToPage, y as WINDOW_ID } from "../protocol-BizVt4J6.js";
-export { AuditEntry, ChannelToHost, ChannelToPage, DEFAULT_SNAPSHOT_NODES, MAX_SNAPSHOT_NODES, MAX_TEXT_LENGTH, MAX_WAIT_MS, MUTATING_OPS, UI_ERROR_CODES, UI_OPS, UiActionResult, UiControlError, UiErrorCode, UiNode, UiOp, UiRequest, UiResult, UiSnapshot, WINDOW_ID, parseChannelToHost, parseChannelToPage, parseUiRequest };
+import { C as parseUiRequest, S as parseChannelToPage, _ as UiRequest, a as DEFAULT_SNAPSHOT_NODES, b as WINDOW_ID, c as MAX_WAIT_MS, d as UI_OPS, f as UiActionResult, g as UiOp, h as UiNode, i as ChannelToPage, l as MUTATING_OPS, m as UiErrorCode, n as AuditEntry, o as MAX_SNAPSHOT_NODES, p as UiControlError, r as ChannelToHost, s as MAX_TEXT_LENGTH, t as APP_PATH, u as UI_ERROR_CODES, v as UiResult, x as parseChannelToHost, y as UiSnapshot } from "../protocol-C37gPePD.js";
+export { APP_PATH, AuditEntry, ChannelToHost, ChannelToPage, DEFAULT_SNAPSHOT_NODES, MAX_SNAPSHOT_NODES, MAX_TEXT_LENGTH, MAX_WAIT_MS, MUTATING_OPS, UI_ERROR_CODES, UI_OPS, UiActionResult, UiControlError, UiErrorCode, UiNode, UiOp, UiRequest, UiResult, UiSnapshot, WINDOW_ID, parseChannelToHost, parseChannelToPage, parseUiRequest };

package/lib/door/protocol.js

@@ -14,15 +14,21 @@ const UI_OPS = [
 	"select",
 	"press",
 	"scroll",
-	"wait"
+	"wait",
+	"reload",
+	"navigate"
 ];
 /** Operations that change the page, so each call needs approval. `snapshot`, `scroll` and `wait` only look. */
 const MUTATING_OPS = [
 	"click",
 	"type",
 	"select",
-	"press"
+	"press",
+	"reload",
+	"navigate"
 ];
+/** A place in the app to go to: a path on the page's own origin (`/demo`, `/notes?q=a#top`), never another site and never a `//host` address. */
+const APP_PATH = /^\/(?![/\\])[^\0\\]{0,2000}$/u;
 const MAX_TEXT_LENGTH = 1e4;
 const MAX_WAIT_MS = 1e4;
 const MAX_SNAPSHOT_NODES = 1e3;
@@ -142,6 +148,16 @@ function parseUiRequest(value) {
 				...timeoutMs === void 0 ? {} : { timeoutMs }
 			};
 		}
+		case "reload":
+			only([]);
+			return { op };
+		case "navigate":
+			only(["path"]);
+			if (typeof value.path !== "string" || !APP_PATH.test(value.path)) return invalid("path must be a path of this app, such as /demo (it starts with one /, and names no other site)");
+			return {
+				op,
+				path: value.path
+			};
 		default: return invalid(`unknown op ${String(op)}`);
 	}
 }
@@ -194,4 +210,4 @@ function parseChannelToHost(value) {
 	return null;
 }
 //#endregion
-export { DEFAULT_SNAPSHOT_NODES, MAX_SNAPSHOT_NODES, MAX_TEXT_LENGTH, MAX_WAIT_MS, MUTATING_OPS, UI_ERROR_CODES, UI_OPS, UiControlError, WINDOW_ID, parseChannelToHost, parseChannelToPage, parseUiRequest };
+export { APP_PATH, DEFAULT_SNAPSHOT_NODES, MAX_SNAPSHOT_NODES, MAX_TEXT_LENGTH, MAX_WAIT_MS, MUTATING_OPS, UI_ERROR_CODES, UI_OPS, UiControlError, WINDOW_ID, parseChannelToHost, parseChannelToPage, parseUiRequest };

package/lib/{index-D4nVR3wu.d.ts → index-DMOtA-NJ.d.ts}

@@ -1,4 +1,4 @@
-import { B as NotFoundHandler, y as ErrorHandler } from "./context-DS3fYyG-.js";
+import { B as NotFoundHandler, E as H, y as ErrorHandler } from "./context-DS3fYyG-.js";
 import { t as ConnectionInfo } from "./connection-ZLEso7XL.js";
 import { n as UpgradeWebSocket } from "./index-C-SklY6u.js";
 import { Context, Service } from "@deepseek-ai/cordis";
@@ -77,6 +77,12 @@ declare class Router extends Service {
    * are copied now: one the app registers after this call is not served (mount again, or finish the app first).
    */
   route(path: string, app: MountableApp): () => void;
+  /**
+   * Run `middleware` around every request the router serves, whenever the plugin that asks was mounted: a middleware in a plain mount wraps only the routes mounted after it,
+   * which is the wrong tool for a plugin that must see every page (the door adds its script to each HTML response, the pages of a plugin that loaded earlier included). It goes
+   * outside all mounts, in the order wrappers were added, and goes away when the calling plugin unloads or when the returned function is called.
+   */
+  wrap(middleware: H): () => void;
   /**
    * The mount's own copy of `app`'s routes as they are now (like the core's `app.route`), each handler wrapped so the router knows which
    * mount's code a request is in. The core's `app.route` runs first so a sub-app's own `onError` still applies to its routes.

package/lib/{protocol-BizVt4J6.d.ts → protocol-C37gPePD.d.ts}

@@ -7,10 +7,12 @@
  * lives with the page code and has no Node imports.
  */
 /** The operations the driver performs on the page. */
-declare const UI_OPS: readonly ["snapshot", "click", "type", "select", "press", "scroll", "wait"];
+declare const UI_OPS: readonly ["snapshot", "click", "type", "select", "press", "scroll", "wait", "reload", "navigate"];
 type UiOp = (typeof UI_OPS)[number];
 /** Operations that change the page, so each call needs approval. `snapshot`, `scroll` and `wait` only look. */
 declare const MUTATING_OPS: readonly UiOp[];
+/** A place in the app to go to: a path on the page's own origin (`/demo`, `/notes?q=a#top`), never another site and never a `//host` address. */
+declare const APP_PATH: RegExp;
 declare const MAX_TEXT_LENGTH = 10000;
 declare const MAX_WAIT_MS = 10000;
 declare const MAX_SNAPSHOT_NODES = 1000;
@@ -77,6 +79,11 @@ type UiRequest = {
   readonly name?: string;
   readonly gone?: boolean;
   readonly timeoutMs?: number;
+} | {
+  readonly op: 'reload';
+} | {
+  readonly op: 'navigate';
+  readonly path: string;
 };
 /** What the page did, and to which control (for the audit log and the approval prompt). */
 interface UiActionResult {
@@ -141,4 +148,4 @@ interface AuditEntry {
   readonly approval: 'asked' | 'none' | 'not-needed' | 'token';
 }
 //#endregion
-export { parseUiRequest as S, UiResult as _, MAX_SNAPSHOT_NODES as a, parseChannelToHost as b, MUTATING_OPS as c, UiActionResult as d, UiControlError as f, UiRequest as g, UiOp as h, DEFAULT_SNAPSHOT_NODES as i, UI_ERROR_CODES as l, UiNode as m, ChannelToHost as n, MAX_TEXT_LENGTH as o, UiErrorCode as p, ChannelToPage as r, MAX_WAIT_MS as s, AuditEntry as t, UI_OPS as u, UiSnapshot as v, parseChannelToPage as x, WINDOW_ID as y };
+export { parseUiRequest as C, parseChannelToPage as S, UiRequest as _, DEFAULT_SNAPSHOT_NODES as a, WINDOW_ID as b, MAX_WAIT_MS as c, UI_OPS as d, UiActionResult as f, UiOp as g, UiNode as h, ChannelToPage as i, MUTATING_OPS as l, UiErrorCode as m, AuditEntry as n, MAX_SNAPSHOT_NODES as o, UiControlError as p, ChannelToHost as r, MAX_TEXT_LENGTH as s, APP_PATH as t, UI_ERROR_CODES as u, UiResult as v, parseChannelToHost as x, UiSnapshot as y };

package/lib/{snapshot-text-DmE0YfeZ.js → snapshot-text-BLz8nlSc.js}

@@ -5,7 +5,7 @@ import { r as streamSSE } from "./streaming-DHST3Scg.js";
 import { loopbackAuthority, loopbackOnly } from "./loopback-only.js";
 import "./helpers-CvTauQT5.js";
 import { UiControlError, WINDOW_ID, parseChannelToHost } from "./door/protocol.js";
-import "./src-2Z4mJg0x.js";
+import "./src-dy3Fk9tA.js";
 import "./middleware-CPQ8himN.js";
 import { dirname, join } from "node:path";
 import { closeSync, mkdirSync, openSync, readFileSync, renameSync, statSync, writeSync } from "node:fs";
@@ -26,6 +26,8 @@ var UiChannel = class {
 	nextId = 1;
 	clock = 0;
 	closed = false;
+	/** Callers waiting for a page to (re)connect: each is told once, by the next stream that attaches. */
+	attachWaiters = /* @__PURE__ */ new Set();
 	/**
 	* Register a page's stream. A stream already open for the same window is closed first, and its calls settle as `disconnected`.
 	* @returns the function to call when this stream ends.
@@ -40,6 +42,7 @@ var UiChannel = class {
 			lastActive: ++this.clock
 		};
 		this.connections.set(windowId, connection);
+		for (const waiter of [...this.attachWaiters]) waiter();
 		return () => {
 			if (this.connections.get(windowId) === connection) this.drop(connection, false);
 		};
@@ -110,6 +113,51 @@ var UiChannel = class {
 			}
 		});
 	}
+	/**
+	* A promise for the next time a page connects (a page that reloaded or moved opens a new stream). Ask for it BEFORE the call that makes the page leave, or a fast page is missed.
+	* @returns whether a page connected within `timeoutMs`.
+	*/
+	expectAttach(timeoutMs, count = 1) {
+		return new Promise((resolve) => {
+			let left = count;
+			const done = (value) => {
+				clearTimeout(timer);
+				this.attachWaiters.delete(waiter);
+				resolve(value);
+			};
+			const waiter = () => {
+				left -= 1;
+				if (left <= 0) done(true);
+			};
+			const timer = setTimeout(() => {
+				done(false);
+			}, timeoutMs);
+			this.attachWaiters.add(waiter);
+		});
+	}
+	/**
+	* Ask every connected page to reload (the app just changed under them) and wait, up to `timeoutMs`, for them to come back. Best effort: a page that does not come back
+	* (it was closed, or it moved to a page without the door) is not an error here.
+	* @returns how many pages were asked.
+	*/
+	async reloadAll(timeoutMs = 8e3) {
+		const targets = this.byRecency();
+		if (this.closed || targets.length === 0) return 0;
+		const back = this.expectAttach(timeoutMs, targets.length);
+		for (const target of targets) {
+			const id = this.nextId;
+			this.nextId += 1;
+			try {
+				target.stream.send(JSON.stringify({
+					t: "call",
+					id,
+					request: { op: "reload" }
+				}));
+			} catch {}
+		}
+		await back;
+		return targets.length;
+	}
 	/** Close every page's stream and settle every pending call as `unloaded`. */
 	close() {
 		this.closed = true;

package/lib/{src-2Z4mJg0x.js → src-dy3Fk9tA.js}

@@ -39,6 +39,7 @@ var Router = class extends Service {
 	/** Everything that changes after construction, kept in one object so the service's live state is in one place. */
 	state = {
 		mounts: /* @__PURE__ */ new Set(),
+		wrappers: /* @__PURE__ */ new Set(),
 		errorHandler: void 0,
 		notFoundHandler: void 0,
 		composed: void 0,
@@ -95,6 +96,20 @@ var Router = class extends Service {
 		};
 	}
 	/**
+	* Run `middleware` around every request the router serves, whenever the plugin that asks was mounted: a middleware in a plain mount wraps only the routes mounted after it,
+	* which is the wrong tool for a plugin that must see every page (the door adds its script to each HTML response, the pages of a plugin that loaded earlier included). It goes
+	* outside all mounts, in the order wrappers were added, and goes away when the calling plugin unloads or when the returned function is called.
+	*/
+	wrap(middleware) {
+		this.state.wrappers.add(middleware);
+		this.state.composed = void 0;
+		const remove = () => {
+			if (this.state.wrappers.delete(middleware)) this.state.composed = void 0;
+		};
+		this.ctx.effect(() => remove, "acryl-router: wrapper");
+		return remove;
+	}
+	/**
 	* The mount's own copy of `app`'s routes as they are now (like the core's `app.route`), each handler wrapped so the router knows which
 	* mount's code a request is in. The core's `app.route` runs first so a sub-app's own `onError` still applies to its routes.
 	*/
@@ -251,6 +266,7 @@ var Router = class extends Service {
 			strict: this.strict,
 			router: new TrieRouter()
 		});
+		for (const wrapper of this.state.wrappers) root.use("*", wrapper);
 		for (const mount of this.state.mounts) root.route(mount.path, mount.app);
 		root.onError(this.state.errorHandler ?? this.logError);
 		if (this.state.notFoundHandler !== void 0) root.notFound(this.state.notFoundHandler);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "acrylblends",
-  "version": "1.0.3",
+  "version": "1.0.4",
   "description": "The Acryl web framework (import { Acryl } from \"acrylblends\") and the acrylblends command that scaffolds Cordis apps.",
   "license": "MIT",
   "type": "module",