acrylblends 1.1.0 → 1.2.0

package/lib/cordis/door.d.ts

@@ -1,5 +1,5 @@
-import { f as UiActionResult, y as UiSnapshot } from "../protocol-a2aqrp2X.js";
-import { i as UiChannel, r as PageStream, t as AuditLog } from "../audit-BFpULBCj.js";
+import { f as UiActionResult, y as UiSnapshot } from "../protocol-BeIYCgTo.js";
+import { i as UiChannel, r as PageStream, t as AuditLog } from "../audit-Bok_UNCn.js";
 import { Context } from "@deepseek-ai/cordis";
 import z from "@deepseek-ai/schemastery";
 
@@ -102,7 +102,10 @@ interface ToolsPort {
   register(name: string, tool: {
     readonly description: string;
     readonly parameters?: Readonly<Record<string, unknown>>;
-    run(input: unknown): unknown;
+    run(input: unknown, options?: {
+      signal?: AbortSignal;
+      page?: string;
+    }): unknown;
   }): () => void;
   list(): ReadonlyArray<{
     readonly name: string;
@@ -121,6 +124,8 @@ interface DoorDeps {
     readonly root: string;
     readonly url?: string | undefined;
   };
+  /** The prefix the app's pages answer under (the frame's canvas, `/app`); absent on the app's own server, at the root. */
+  readonly appBase?: string | undefined;
   /** Read at each call: the services may come and go while the door runs. */
   readonly extensions: () => ExtensionsPort | undefined;
   readonly tools: () => ToolsPort | undefined;
@@ -131,6 +136,10 @@ interface DoorDeps {
   /** How long a reload or a move may take before the new page has connected again (tests shorten it). Default 15 s. */
   readonly pageBackMs?: number;
 }
+/** Who a verb runs for: `page`, the door's id of the page a run was asked from; its look and act go to that page alone (followed into its tab), never to another one. */
+interface VerbScope {
+  readonly page?: string;
+}
 /** What one verb answered: the value for `--json` and programs, the text for an agent reading a terminal. */
 interface VerbAnswer {
   readonly value: unknown;
@@ -142,10 +151,10 @@ declare class Door {
   /** A run asked for from the panel of this page is going: its verbs that name no window are for that page. @returns the function to call when the run ends. */
   driveFor(windowId: string): () => void;
   /** Run one verb. @throws DoorError or UiControlError. */
-  run(verb: string, args: unknown, signal: AbortSignal): Promise<VerbAnswer>;
+  run(verb: string, args: unknown, signal: AbortSignal, scope?: VerbScope): Promise<VerbAnswer>;
   brief(): VerbAnswer;
-  look(input: Record<string, unknown>, signal: AbortSignal): Promise<UiSnapshot>;
-  act(input: Record<string, unknown>, signal: AbortSignal): Promise<UiActionResult>;
+  look(input: Record<string, unknown>, signal: AbortSignal, scope?: VerbScope): Promise<UiSnapshot>;
+  act(input: Record<string, unknown>, signal: AbortSignal, scope?: VerbScope): Promise<UiActionResult>;
   /**
    * What the app answers at a path the page was sent to, so an agent that mistyped one is told ("404 at /nope") and not left to find out from a page it did not expect.
    * A second GET of the same path (a page is read-only); nothing when the app has no address or does not answer in time.
@@ -174,6 +183,8 @@ declare class Door {
  * MCP (`tools/list`) and the built-in chat (the `tools` registry). A verb added here is in all three, or the comparison test fails.
  */
 /** Every verb, in the order `brief` lists them. */
+/** The verbs that only use the page: what a page-only door (a production assistant) offers. */
+declare const PAGE_VERBS: readonly ["look", "act"];
 declare const VERBS: readonly ["brief", "look", "act", "plugin-list", "plugin-add", "plugin-remove", "plugin-reload", "tool-list", "tool-call", "window-list", "window-open", "window-focus", "window-close", "window-resize", "menu-list", "menu-click"];
 type Verb = (typeof VERBS)[number];
 /** The JSON Schema of a verb's arguments, as MCP lists it. */
@@ -229,6 +240,12 @@ interface DoorFile {
 declare function doorFilePath(appRoot: string): string;
 /** The connection file as written, or undefined when there is none or it does not parse. */
 declare function readDoorFile(appRoot: string): DoorFile | undefined;
+/**
+ * Write this run's connection file, replacing a stale one.
+ * @throws when another live process already serves this folder's door: two apps from one folder would race for one file.
+ */
+/** @throws when another live process already serves this folder's door: two apps from one folder would race for one file. */
+declare function assertDoorIsFree(appRoot: string): void;
 //#endregion
 //#region ../../plugins/acryl-door/src/host/operator-routes.d.ts
 type CallResponse = {
@@ -259,12 +276,30 @@ interface Config {
    * run it in production (a packaged desktop app whose user drives it with an agent) says so here; `ACRYL_DOOR=off` still wins.
    */
   allowInProduction?: boolean;
+  /**
+   * Page only, for a production assistant: the page channel and two chat tools, `door_look` and `door_act`, and nothing else - no operator routes, no MCP, no desktop
+   * shell channel, no `.acryl/` file, no plugin, tool or window verbs. The app's agent can then use the page for a visitor and cannot change the app. Runs in production
+   * without `allowInProduction`; `ACRYL_DOOR=off` still wins.
+   */
+  pageOnly?: boolean;
   /** Reload the open pages after a live plugin change, so an agent that built a feature sees it on the page it has open. Default: true. */
   reloadOnChange?: boolean;
+  /**
+   * Put the page script in the host's own index page (DSH's web UI) too, so an agent can drive that UI. Default: true. A host whose index is a frame
+   * around the app (the ACRYL Blends frame, whose centre shows the app's page) turns it off: the door then drives the app's page in the canvas, and an
+   * agent's `act navigate` or a reload after a plugin change never takes the person's tab out of the frame.
+   */
+  hostIndex?: boolean;
+  /**
+   * The host prefix the app's pages are served under (the frame's canvas, `/app`); absent on the app's own server, where they are at the root. The
+   * door puts it on every page as `<meta name="acryl-app-base">`, and `act navigate` with an app path goes under it: a page the app serves at
+   * `/board` is reached at `/app/board` in the frame and at `/board` in production, and the same verb works in both.
+   */
+  appBase?: string;
 }
 declare const Config: z<Config>;
 /** The page of a path the app does not serve, development only: what is missing, a way back, and the door's script. */
 declare function notFoundPage(path: string, scriptTag: string): string;
 declare function apply(ctx: Context, rawConfig?: Config): void;
 //#endregion
-export { type CallResponse, Config, DOOR_PREFIX, Door, DoorError, type DoorFile, STATE_DIR, VERBS, VERB_SPECS, type Verb, type VerbAnswer, type VerbSpec, apply, chatToolName, doorFilePath, inject, mcpTools, name, notFoundPage, readDoorFile };
+export { type CallResponse, Config, DOOR_PREFIX, Door, DoorError, type DoorFile, PAGE_VERBS, STATE_DIR, VERBS, VERB_SPECS, type Verb, type VerbAnswer, type VerbSpec, apply, assertDoorIsFree, chatToolName, doorFilePath, inject, mcpTools, name, notFoundPage, readDoorFile };

package/lib/cordis/door.js

@@ -2,16 +2,31 @@ import { t as Acryl } from "../app-CQcGWjrk.js";
 import { r as streamSSE } from "../streaming-BlDaph8U.js";
 import { r as loopbackAuthority } from "../loopback-only-BbasoF7R.js";
 import "../helpers-BEjcdbgw.js";
-import { n as clientModules } from "../client-modules-drj4mjhj.js";
+import { n as clientModules } from "../client-modules-Bkdr83jO.js";
 import { a as MAX_WAIT_MS, d as parseChannelToHost, l as UiControlError, p as parseUiRequest, r as MAX_SNAPSHOT_NODES, u as WINDOW_ID } from "../protocol-CQ_if7Dg.js";
-import { a as INVALID_JSON, c as operatorOnly, d as AuditLog, f as auditPath, i as DOOR_PREFIX, l as privateApi, o as error, p as UiChannel, r as pageChannelRoutes, s as jsonBody, t as renderSnapshot, u as readJson } from "../snapshot-text-BwM6T2nG.js";
-import "../src-BTBm4OPD.js";
+import { a as INVALID_JSON, c as operatorOnly, d as AuditLog, f as auditPath, i as DOOR_PREFIX, l as privateApi, o as error, p as UiChannel, r as pageChannelRoutes, s as jsonBody, t as renderSnapshot, u as readJson } from "../snapshot-text-CXTnjxGx.js";
+import "../src-iBJ2ysV9.js";
 import "../middleware-BfG_fp8P.js";
 import { isAbsolute, join, relative, resolve } from "node:path";
 import { chmodSync, existsSync, mkdirSync, readFileSync, renameSync, rmSync, writeFileSync } from "node:fs";
 import z from "@deepseek-ai/schemastery";
 import { randomBytes } from "node:crypto";
 import { spawnSync } from "node:child_process";
+//#region ../../plugins/acryl-door/src/page/base.ts
+/**
+* `path` (an app path, optionally with a query) under `base`: '/board' under '/app' is '/app/board'; the app's root is the base itself, so '/' is
+* '/app' (its mount) and not '/app/'; without a base, the path as written.
+*/
+function underAppBase(base, path) {
+	if (base === "") return path;
+	const at = path.search(/[?#]/u);
+	const route = at === -1 ? path : path.slice(0, at);
+	const rest = at === -1 ? "" : path.slice(at);
+	if (route === base || route.startsWith(`${base}/`)) return path;
+	if (route === "/" || route === "") return `${base}${rest}`;
+	return `${base}${route.startsWith("/") ? "" : "/"}${route}${rest}`;
+}
+//#endregion
 //#region ../../plugins/acryl-door/src/shell/protocol.ts
 var ShellError = class extends Error {
 	code;
@@ -283,6 +298,8 @@ function shellRoutes(prefix, secret, channel, heartbeatMs = SHELL_HEARTBEAT_MS)
 * MCP (`tools/list`) and the built-in chat (the `tools` registry). A verb added here is in all three, or the comparison test fails.
 */
 /** Every verb, in the order `brief` lists them. */
+/** The verbs that only use the page: what a page-only door (a production assistant) offers. */
+const PAGE_VERBS = ["look", "act"];
 const VERBS = [
 	"brief",
 	"look",
@@ -625,19 +642,19 @@ var Door = class {
 		return this.deps.channel.driveFor(windowId);
 	}
 	/** Run one verb. @throws DoorError or UiControlError. */
-	async run(verb, args, signal) {
+	async run(verb, args, signal, scope = {}) {
 		const input = typeof args === "object" && args !== null && !Array.isArray(args) ? args : {};
 		switch (verb) {
 			case "brief": return this.brief();
 			case "look": {
-				const snapshot = await this.look(input, signal);
+				const snapshot = await this.look(input, signal, scope);
 				return {
 					value: snapshot,
 					text: renderSnapshot(snapshot, (cursor) => `run look --cursor ${String(cursor)}`)
 				};
 			}
 			case "act": {
-				const result = await this.act(input, signal);
+				const result = await this.act(input, signal, scope);
 				return {
 					value: result,
 					text: `done${result.target === void 0 ? "" : `: ${result.target.role} "${result.target.name}"`}${result.detail === void 0 ? "" : ` (${result.detail})`}; look again before the next act`
@@ -694,33 +711,47 @@ var Door = class {
 			].join("\n")
 		};
 	}
-	look(input, signal) {
-		const { window, rest } = this.windowOf(input);
+	look(input, signal, scope = {}) {
+		const { window, rest } = this.windowOf(input, scope);
 		const request = this.parse({
 			...rest,
 			op: "snapshot"
 		});
-		return this.callPage("look", request, signal, window);
+		return this.callPage("look", request, signal, window, scope.page);
 	}
-	async act(input, signal) {
+	async act(input, signal, scope = {}) {
 		if (input.op === "snapshot") throw new DoorError("invalid", "use look to see the page");
-		const { window, rest } = this.windowOf(input);
+		const { window, rest } = this.windowOf(input, scope);
 		const request = this.parse(rest);
-		if (request.op !== "reload" && request.op !== "navigate") return await this.callPage(`act ${String(input.op)}`, request, signal, window);
-		const back = this.deps.channel.expectNewPage(this.deps.pageBackMs ?? PAGE_BACK_MS);
+		const page = scope.page;
+		const moves = request.op === "reload" || request.op === "navigate";
+		if (!moves && request.op !== "click" && request.op !== "press" && request.op !== "type") return await this.callPage(`act ${String(input.op)}`, request, signal, window, page);
+		const backMs = this.deps.pageBackMs ?? PAGE_BACK_MS;
+		const stay = new AbortController();
+		const back = page === void 0 ? this.deps.channel.expectNewPage(backMs, stay.signal) : this.deps.channel.expectPageBack(page, backMs, stay.signal);
 		let answer;
+		let left = moves;
 		try {
-			answer = await this.callPage(`act ${request.op}`, request, signal, window);
+			answer = await this.callPage(`act ${request.op}`, request, signal, window, page);
+			left ||= answer.leaving === true;
 		} catch (cause) {
-			if (!(cause instanceof UiControlError && cause.code === "disconnected")) throw cause;
+			if (!(cause instanceof UiControlError && cause.code === "disconnected")) {
+				stay.abort();
+				throw cause;
+			}
 			answer = {
 				ok: true,
-				detail: request.op === "reload" ? "reloading" : `going to ${request.path}`
+				detail: request.op === "reload" ? "reloading" : request.op === "navigate" ? `going to ${request.path}` : "the page is going to another address"
 			};
+			left = true;
+		}
+		if (!left) {
+			stay.abort();
+			return answer;
 		}
 		const came = await back;
-		if (came !== void 0) this.deps.channel.prefer(came);
-		if (came === void 0) throw new UiControlError("timeout", request.op === "reload" ? "the page did not come back after the reload" : `the page did not come back after going to ${request.path}: is there a page at that path, and does it load the door's script?`);
+		if (came !== void 0 && page === void 0) this.deps.channel.prefer(came);
+		if (came === void 0) throw new UiControlError("timeout", request.op === "reload" ? "the page did not come back after the reload" : request.op === "navigate" ? `the page did not come back after going to ${request.path}: is there a page at that path, and does it load the door's script?` : `the ${request.op} took the page to another address, and no page came back: does the page there load the door's script?`);
 		const landed = request.op === "navigate" ? await this.statusAt(request.path) : void 0;
 		return {
 			...answer,
@@ -735,7 +766,8 @@ var Door = class {
 		const base = this.deps.app.url;
 		if (base === void 0) return void 0;
 		try {
-			const response = await fetch(new URL(path, base), {
+			const target = underAppBase(this.deps.appBase ?? "", path);
+			const response = await fetch(new URL(target, base), {
 				headers: { accept: "text/html" },
 				signal: AbortSignal.timeout(3e3)
 			});
@@ -800,12 +832,13 @@ var Door = class {
 		}
 	}
 	/** `window` on look and act: the desktop window (the number `window list` prints) whose page the call is for; without it, the page used last. */
-	windowOf(input) {
+	windowOf(input, scope = {}) {
 		const { window, ...rest } = input;
 		if (window === void 0) return {
 			window: void 0,
 			rest
 		};
+		if (scope.page !== void 0) throw new DoorError("invalid", "this run drives only the page it was asked from; window does not apply");
 		if (typeof window !== "number" || !Number.isSafeInteger(window) || window < 1) throw new DoorError("invalid", "window must be the number `window list` prints for the window");
 		return {
 			window,
@@ -820,12 +853,13 @@ var Door = class {
 		}
 	}
 	/** Run one call on the page and record it. The audit holds which control was touched and how it ended, never what was typed. */
-	async callPage(verb, request, signal, window) {
+	async callPage(verb, request, signal, window, page) {
 		const approval = "token";
 		try {
 			const value = await this.deps.channel.call(request, {
 				signal,
 				...window === void 0 ? {} : { window },
+				...page === void 0 ? {} : { page },
 				...request.op === "wait" ? { timeoutMs: (request.timeoutMs ?? 3e3) + 5e3 } : {}
 			});
 			const target = "target" in value ? value.target : void 0;
@@ -862,7 +896,7 @@ var Door = class {
 	}
 	async plugin(run, mutates = true) {
 		const extensions = this.deps.extensions();
-		if (extensions === void 0) throw new DoorError("unavailable", "this app has no extensions plugin, so plugins cannot be installed while it runs");
+		if (extensions === void 0) throw new DoorError("unavailable", "this door has no extensions plugin to drive. In ACRYL's frame none is needed: a saved change in src/ or plugins/ reloads the app by itself, so do not restart it. Elsewhere, the app has no way to install plugins while it runs");
 		const value = await run(extensions);
 		const unchanged = typeof value === "object" && value !== null && value.action === "unchanged";
 		if (mutates && !unchanged && this.deps.reloadOnChange !== false) await this.deps.channel.reloadAll();
@@ -914,8 +948,8 @@ var Door = class {
 * `door_<verb>`. A tool answers the verb's text, what an agent reads in a terminal; a failed verb throws with its code, as the operator
 * client prints it.
 */
-/** Register every verb. @returns the function that removes them all; it also aborts the calls still running. */
-function registerChatTools(tools, door) {
+/** Register the verbs (default: every one). @returns the function that removes them all; it also aborts the calls still running. */
+function registerChatTools(tools, door, verbs = VERBS) {
 	const running = new AbortController();
 	const removers = [];
 	const removeAll = () => {
@@ -923,12 +957,13 @@ function registerChatTools(tools, door) {
 		for (const remove of removers.splice(0).reverse()) remove();
 	};
 	try {
-		for (const verb of VERBS) removers.push(tools.register(chatToolName(verb), {
+		for (const verb of verbs) removers.push(tools.register(chatToolName(verb), {
 			description: VERB_SPECS[verb].description,
 			parameters: VERB_SPECS[verb].arguments,
-			run: async (input) => {
+			run: async (input, options) => {
+				const signal = options?.signal === void 0 ? running.signal : AbortSignal.any([running.signal, options.signal]);
 				try {
-					return (await door.run(verb, input ?? {}, running.signal)).text;
+					return (await door.run(verb, input ?? {}, signal, options?.page === void 0 ? {} : { page: options.page })).text;
 				} catch (cause) {
 					if (cause instanceof DoorError || cause instanceof UiControlError) throw new Error(`${cause.code}: ${cause.message}`, { cause });
 					throw cause;
@@ -997,10 +1032,14 @@ function alive(pid) {
 * Write this run's connection file, replacing a stale one.
 * @throws when another live process already serves this folder's door: two apps from one folder would race for one file.
 */
-function writeDoorFile(appRoot, url, secret) {
-	const dir = ensureStateDir(appRoot);
+/** @throws when another live process already serves this folder's door: two apps from one folder would race for one file. */
+function assertDoorIsFree(appRoot) {
 	const existing = readDoorFile(appRoot);
 	if (existing !== void 0 && existing.pid !== process.pid && alive(existing.pid)) throw new Error(`acryl-door: another process (pid ${String(existing.pid)}) serves the door of ${appRoot}; stop it first`);
+}
+function writeDoorFile(appRoot, url, secret) {
+	const dir = ensureStateDir(appRoot);
+	assertDoorIsFree(appRoot);
 	const file = doorFilePath(appRoot);
 	const temporary = join(dir, `${DOOR_FILE}.${String(process.pid)}.tmp`);
 	const content = {
@@ -1171,11 +1210,13 @@ const ownOrigin = async (c, next) => {
 };
 function pageSocketRoutes(channel, options) {
 	const heartbeatMs = options.heartbeatMs ?? 15e3;
-	return new Acryl().get(`${options.prefix}/channel/ws`, ownOrigin, options.upgrade((c) => {
+	const events = (c) => {
 		const windowId = c.req.query("window");
 		const focused = c.req.query("focused") === "1";
 		const shellQuery = Number(c.req.query("shell"));
 		const shellWindow = Number.isSafeInteger(shellQuery) && shellQuery > 0 ? shellQuery : void 0;
+		const tabQuery = c.req.query("tab");
+		const tab = tabQuery !== void 0 && WINDOW_ID.test(tabQuery) ? tabQuery : void 0;
 		let detach;
 		let beat;
 		return {
@@ -1199,7 +1240,7 @@ function pageSocketRoutes(channel, options) {
 					close: () => {
 						ws.close(1e3, "replaced");
 					}
-				}, shellWindow);
+				}, shellWindow, tab);
 				write({ e: "ready" });
 				beat = setInterval(() => {
 					try {
@@ -1223,7 +1264,12 @@ function pageSocketRoutes(channel, options) {
 				detach?.();
 			}
 		};
-	}, { textOnly: true }));
+	};
+	return new Acryl().get(`${options.prefix}/channel/ws`, ownOrigin, async (c, next) => {
+		const allow = options.upgrade();
+		if (allow === void 0) return c.json(error("the page channel is not ready yet"), 503);
+		return allow(events, { textOnly: true })(c, next);
+	});
 }
 /** The oldest Node the client runs on (the framework's own floor). */
 const MIN_NODE = [22, 19];
@@ -1343,14 +1389,13 @@ function writeShims(root, target) {
 */
 /** Stable Cordis plugin name, equal to the package name and the Loader row id. */
 const name = "acryl-door";
-const inject = [
-	"router",
-	"appInstance",
-	"nodeServer"
-];
+const inject = ["router", "appInstance"];
 const Config = z.object({
 	allowInProduction: z.boolean().default(false).description("Run in production too (NODE_ENV=production); ACRYL_DOOR=off still turns it off."),
+	pageOnly: z.boolean().default(false).description("Only the page and the look and act chat tools (a production assistant); runs in production."),
 	reloadOnChange: z.boolean().default(true).description("Reload the open pages after a plugin was added, removed or reloaded while the app runs."),
+	hostIndex: z.boolean().default(true).description("Put the page script in the host's own index page too; off when that index is a frame around the app."),
+	appBase: z.string().default("").description("The prefix the app pages are served under (the frame canvas), without a trailing slash; empty at the root."),
 	tools: z.object({ expose: z.array(z.string().pattern(/^(?!door_)[A-Za-z][A-Za-z0-9_-]{0,63}$/u)).description("App tools (from the tools registry) the door offers; none by default.") })
 });
 /** The page module, served compiled from source by the app's own TypeScript. */
@@ -1382,25 +1427,51 @@ function notFoundPage(path, scriptTag) {
 }
 function apply(ctx, rawConfig = {}) {
 	const config = Config(rawConfig);
-	if (process.env.ACRYL_DOOR === "off" || process.env.NODE_ENV === "production" && config.allowInProduction !== true) return;
+	const pageOnly = config.pageOnly === true;
+	if (process.env.ACRYL_DOOR === "off" || process.env.NODE_ENV === "production" && config.allowInProduction !== true && !pageOnly) return;
 	const app = ctx.get("appInstance");
-	const server = ctx.get("nodeServer");
+	const carrier = () => {
+		const web = ctx.get("acrylWeb");
+		if (web !== void 0) return web;
+		const node = ctx.get("nodeServer");
+		if (typeof node?.url !== "string") return void 0;
+		try {
+			const parsed = new URL(node.url);
+			return {
+				host: parsed.hostname,
+				port: Number(parsed.port)
+			};
+		} catch {
+			return;
+		}
+	};
 	if (typeof app?.root !== "string") throw new Error("acryl-door: the appInstance service has no app folder (root)");
 	const reportError = (operation, cause) => {
 		ctx.logger?.error?.(`acryl-door: failed to ${operation}: ${cause instanceof Error ? cause.message : String(cause)}`);
 	};
+	const address = { url: "" };
+	if (!pageOnly) assertDoorIsFree(app.root);
 	const secret = newSecret();
-	const channel = new UiChannel({ attachWaitMs: 2e3 });
+	const channel = new UiChannel({
+		attachWaitMs: 2e3,
+		requirePage: pageOnly
+	});
 	const shell = new ShellChannel();
+	const audit = new AuditLog(auditPath(stateDir(app.root)));
+	const rawBase = typeof config.appBase === "string" ? config.appBase.trim() : "";
+	const appBase = rawBase.startsWith("/") && rawBase !== "/" ? rawBase.replace(/\/+$/u, "") : "";
 	const door = new Door({
 		channel,
 		shell,
-		audit: new AuditLog(auditPath(stateDir(app.root))),
+		audit,
 		app: {
 			name: app.name,
 			root: app.root,
-			url: loopbackUrl(server.url)
+			get url() {
+				return address.url;
+			}
 		},
+		...appBase === "" ? {} : { appBase },
 		extensions: () => ctx.get("extensions"),
 		tools: () => ctx.get("tools"),
 		expose: config.tools?.expose ?? [],
@@ -1412,8 +1483,12 @@ function apply(ctx, rawConfig = {}) {
 	ctx.effect(() => () => {
 		shell.close();
 	}, "acryl-door: desktop shell channel");
-	const pageModule = new Acryl().get(`${DOOR_PREFIX}/page.js`, (c) => c.body(`import '${DOOR_PREFIX}/page/main.ts'\n`, 200, { "content-type": "text/javascript; charset=utf-8" })).route(`${DOOR_PREFIX}/page`, clientModules({ root: PAGE_DIR }));
+	const pageModule = new Acryl().get(`${DOOR_PREFIX}/page.js`, (c) => c.body(`import '${DOOR_PREFIX}/page/main.ts'\n`, 200, { "content-type": "text/javascript; charset=utf-8" })).route(`${DOOR_PREFIX}/page`, clientModules({
+		root: PAGE_DIR,
+		mount: `${DOOR_PREFIX}/page`
+	}));
 	const tag = `<script type="module" src="${DOOR_PREFIX}/page.js"><\/script>`;
+	const meta = appBase === "" ? "" : `<meta name="acryl-app-base" content="${appBase}">`;
 	const addScript = async (c, next) => {
 		await next();
 		if (!(c.res.headers.get("content-type") ?? "").includes("text/html")) {
@@ -1423,11 +1498,12 @@ function apply(ctx, rawConfig = {}) {
 			});
 			return;
 		}
-		const html = await c.res.text();
+		let html = await c.res.text();
 		const headers = new Headers(c.res.headers);
 		headers.delete("content-length");
-		const carries = html.includes(`${DOOR_PREFIX}/page.js`);
-		c.res = new Response(carries ? html : html.includes("</body>") ? html.replace("</body>", `${tag}</body>`) : html + tag, {
+		if (meta !== "" && !html.includes("name=\"acryl-app-base\"")) html = html.includes("</head>") ? html.replace("</head>", `${meta}</head>`) : meta + html;
+		if (!html.includes(`/api/acryl-door/page.js`)) html = html.includes("</body>") ? html.replace("</body>", `${tag}</body>`) : html + tag;
+		c.res = new Response(html, {
 			status: c.res.status,
 			headers
 		});
@@ -1435,31 +1511,99 @@ function apply(ctx, rawConfig = {}) {
 	const router = ctx.router;
 	if (typeof router.wrap === "function") router.wrap(addScript);
 	else ctx.router.route("/", new Acryl().use("*", addScript));
-	let upgrade;
-	try {
-		upgrade = ctx.nodeServer?.upgrades?.();
-	} catch (cause) {
-		reportError("open the page channel over a WebSocket (the pages use the event stream)", cause);
-	}
-	ctx.router.route("/", privateApi(DOOR_PREFIX, pageModule, pageChannelRoutes(channel, { prefix: DOOR_PREFIX }), ...upgrade === void 0 ? [] : [pageSocketRoutes(channel, {
+	if (config.hostIndex !== false) ctx.inject(["webServer"], (inner) => {
+		inner.effect(() => {
+			const taps = inner.get("webServer");
+			if (typeof taps?.tapIndex !== "function") return () => {};
+			return taps.tapIndex((html) => {
+				if (html.includes(`/api/acryl-door/page.js`)) return html;
+				return html.includes("</body>") ? html.replace("</body>", `${tag}</body>`) : html + tag;
+			});
+		}, "acryl-door: the page script in the host index");
+	});
+	let pageUpgrade;
+	let nodeUpgrade;
+	const endNodeOwner = () => {
+		if (pageUpgrade === nodeUpgrade) pageUpgrade = void 0;
+		nodeUpgrade = void 0;
+	};
+	const nodeFallback = () => {
+		if (ctx.get("routerHttp") !== void 0 || nodeUpgrade !== void 0) return;
+		try {
+			const allow = ctx.get("nodeServer")?.upgrades?.();
+			if (allow !== void 0) {
+				nodeUpgrade = allow;
+				pageUpgrade = allow;
+			}
+		} catch (cause) {
+			reportError("open the page channel over a WebSocket (the pages use the event stream)", cause);
+		}
+	};
+	ctx.inject(["routerHttp"], (inner) => {
+		endNodeOwner();
+		const http = inner.get("routerHttp");
+		try {
+			const allow = http?.upgrades?.();
+			if (allow === void 0 || http === void 0 || typeof http.mount !== "function") return;
+			pageUpgrade = allow;
+			const remove = http.mount(DOOR_PREFIX, { upgrade: [`${DOOR_PREFIX}/channel/ws`] });
+			inner.effect(() => () => {
+				remove();
+				if (pageUpgrade === allow) pageUpgrade = void 0;
+				nodeFallback();
+			}, "acryl-door: the page socket via routerHttp");
+		} catch (cause) {
+			reportError("open the page channel over a WebSocket (the pages use the event stream)", cause);
+		}
+	});
+	ctx.inject(["nodeServer"], (inner) => {
+		inner.effect(() => {
+			nodeFallback();
+			const onService = inner.on;
+			const off = onService("internal/service", () => {
+				if (ctx.get("routerHttp") !== void 0) endNodeOwner();
+				else nodeFallback();
+			});
+			return () => {
+				off();
+				endNodeOwner();
+			};
+		}, "acryl-door: the page socket on the node server");
+	});
+	ctx.router.route("/", pageSocketRoutes(channel, {
 		prefix: DOOR_PREFIX,
-		upgrade
-	})], shellRoutes(DOOR_PREFIX, secret, shell), operatorRoutes(DOOR_PREFIX, secret, door, reportError), mcpRoutes(DOOR_PREFIX, secret, door, reportError)));
+		upgrade: () => pageUpgrade
+	}));
+	ctx.router.route("/", privateApi(DOOR_PREFIX, pageModule, pageChannelRoutes(channel, { prefix: DOOR_PREFIX }), ...pageOnly ? [] : [
+		shellRoutes(DOOR_PREFIX, secret, shell),
+		operatorRoutes(DOOR_PREFIX, secret, door, reportError),
+		mcpRoutes(DOOR_PREFIX, secret, door, reportError)
+	]));
 	ctx.inject(["tools"], (inner) => {
-		inner.effect(() => registerChatTools(inner.get("tools"), door), "acryl-door: the verbs in the tools registry");
+		inner.effect(() => registerChatTools(inner.get("tools"), door, pageOnly ? PAGE_VERBS : VERBS), "acryl-door: the verbs in the tools registry");
 	});
 	ctx.effect(function* () {
 		yield ctx.reflect.provide("door", door);
-		writeDoorFile(app.root, loopbackUrl(server.url), secret);
+	}, "acryl-door: the door service");
+	if (pageOnly) return;
+	ctx.effect(async () => {
+		let bound = carrier();
+		for (let at = 0; at < 500 && (bound === void 0 || !(bound.port > 0)); at += 1) {
+			await new Promise((done) => setTimeout(done, 10));
+			bound = carrier();
+		}
+		if (bound === void 0) throw new Error("acryl-door: no carrier bound the app (neither acrylWeb nor nodeServer answered)");
+		address.url = loopbackUrl(`http://${bound.host}:${String(bound.port)}`);
+		writeDoorFile(app.root, address.url, secret);
 		try {
 			writeShims(app.root, shimTarget());
 		} catch (cause) {
 			reportError("write .acryl/bin", cause);
 		}
-		yield () => {
+		return () => {
 			removeDoorFile(app.root, secret);
 		};
-	}, "acryl-door: the door service, .acryl/door.json and .acryl/bin/acryl");
+	}, "acryl-door: .acryl/door.json and .acryl/bin/acryl");
 }
 //#endregion
-export { Config, DOOR_PREFIX, Door, DoorError, STATE_DIR, VERBS, VERB_SPECS, apply, chatToolName, doorFilePath, inject, mcpTools, name, notFoundPage, readDoorFile };
+export { Config, DOOR_PREFIX, Door, DoorError, PAGE_VERBS, STATE_DIR, VERBS, VERB_SPECS, apply, assertDoorIsFree, chatToolName, doorFilePath, inject, mcpTools, name, notFoundPage, readDoorFile };

package/lib/cordis/inspect.js

@@ -1,6 +1,6 @@
 import { t as Acryl } from "../app-CQcGWjrk.js";
 import { i as loopbackOnly } from "../loopback-only-BbasoF7R.js";
-import "../src-BTBm4OPD.js";
+import "../src-iBJ2ysV9.js";
 import "../middleware-BfG_fp8P.js";
 import { Service } from "@deepseek-ai/cordis";
 //#region ../../plugins/acryl-inspect/src/report.ts