acrylblends 1.1.0 → 1.3.0

package/lib/cordis/door.js

@@ -2,16 +2,31 @@ import { t as Acryl } from "../app-CQcGWjrk.js";
 import { r as streamSSE } from "../streaming-BlDaph8U.js";
 import { r as loopbackAuthority } from "../loopback-only-BbasoF7R.js";
 import "../helpers-BEjcdbgw.js";
-import { n as clientModules } from "../client-modules-drj4mjhj.js";
+import { n as clientModules } from "../client-modules-Bkdr83jO.js";
 import { a as MAX_WAIT_MS, d as parseChannelToHost, l as UiControlError, p as parseUiRequest, r as MAX_SNAPSHOT_NODES, u as WINDOW_ID } from "../protocol-CQ_if7Dg.js";
-import { a as INVALID_JSON, c as operatorOnly, d as AuditLog, f as auditPath, i as DOOR_PREFIX, l as privateApi, o as error, p as UiChannel, r as pageChannelRoutes, s as jsonBody, t as renderSnapshot, u as readJson } from "../snapshot-text-BwM6T2nG.js";
-import "../src-BTBm4OPD.js";
+import { a as INVALID_JSON, c as operatorOnly, d as AuditLog, f as auditPath, i as DOOR_PREFIX, l as privateApi, o as error, p as UiChannel, r as pageChannelRoutes, s as jsonBody, t as renderSnapshot, u as readJson } from "../snapshot-text-CXTnjxGx.js";
+import "../src-iBJ2ysV9.js";
 import "../middleware-BfG_fp8P.js";
 import { isAbsolute, join, relative, resolve } from "node:path";
 import { chmodSync, existsSync, mkdirSync, readFileSync, renameSync, rmSync, writeFileSync } from "node:fs";
 import z from "@deepseek-ai/schemastery";
 import { randomBytes } from "node:crypto";
 import { spawnSync } from "node:child_process";
+//#region ../../plugins/acryl-door/src/page/base.ts
+/**
+* `path` (an app path, optionally with a query) under `base`: '/board' under '/app' is '/app/board'; the app's root is the base itself, so '/' is
+* '/app' (its mount) and not '/app/'; without a base, the path as written.
+*/
+function underAppBase(base, path) {
+	if (base === "") return path;
+	const at = path.search(/[?#]/u);
+	const route = at === -1 ? path : path.slice(0, at);
+	const rest = at === -1 ? "" : path.slice(at);
+	if (route === base || route.startsWith(`${base}/`)) return path;
+	if (route === "/" || route === "") return `${base}${rest}`;
+	return `${base}${route.startsWith("/") ? "" : "/"}${route}${rest}`;
+}
+//#endregion
 //#region ../../plugins/acryl-door/src/shell/protocol.ts
 var ShellError = class extends Error {
 	code;
@@ -283,12 +298,16 @@ function shellRoutes(prefix, secret, channel, heartbeatMs = SHELL_HEARTBEAT_MS)
 * MCP (`tools/list`) and the built-in chat (the `tools` registry). A verb added here is in all three, or the comparison test fails.
 */
 /** Every verb, in the order `brief` lists them. */
+/** The verbs that only use the page: what a page-only door (a production assistant) offers. */
+const PAGE_VERBS = ["look", "act"];
 const VERBS = [
 	"brief",
 	"look",
 	"act",
 	"plugin-list",
 	"plugin-add",
+	"plugin-pull",
+	"plugin-publish",
 	"plugin-remove",
 	"plugin-reload",
 	"tool-list",
@@ -444,6 +463,42 @@ const VERB_SPECS = {
 			additionalProperties: false
 		}
 	},
+	"plugin-pull": {
+		usage: "plugin pull <source>: fetch a plugin someone released (github:<owner>/<repo>[@<version>][@sha256:<digest>], or a .tgz), check it and start it, live",
+		description: "Fetch a plugin someone released, without running anything; check its digest, that it works on every OS and that this app has the services it needs; then install and start it without a restart. A refusal says why and changes nothing.",
+		arguments: {
+			type: "object",
+			properties: { source: {
+				type: "string",
+				description: "github:<owner>/<repo>[@<version>][@sha256:<digest>], or a .tgz path or https address"
+			} },
+			required: ["source"],
+			additionalProperties: false
+		}
+	},
+	"plugin-publish": {
+		usage: "plugin publish <name> [--owner <account>] [--license <id>]: show what publishing this plugin would send; in a person's own terminal, ask them",
+		description: "Show what publishing a plugin would send: the account, repository, version, license, files and the line a friend pulls it with. Sends nothing. Only a person can say yes, in their own terminal or with Share in the frame; tell them the plan and how.",
+		arguments: {
+			type: "object",
+			properties: {
+				name: {
+					type: "string",
+					description: "a plugin of plugins/"
+				},
+				owner: {
+					type: "string",
+					description: "the GitHub account or organization; the signed-in one when absent"
+				},
+				license: {
+					type: "string",
+					description: "an SPDX license id; MIT when absent"
+				}
+			},
+			required: ["name"],
+			additionalProperties: false
+		}
+	},
 	"plugin-remove": {
 		usage: "plugin remove <name>: stop and remove an installed plugin",
 		description: "Stop and remove an installed plugin.",
@@ -598,6 +653,14 @@ var DoorError = class extends Error {
 		this.name = "DoorError";
 	}
 };
+/** What a plan says, for a person deciding. */
+function renderPublishPlan(plan) {
+	return [
+		`Publish to ${plan.owner}/${plan.repo}${plan.createsRepository ? " (a new repository)" : ""}, ${plan.visibility}, version ${plan.version}, license ${plan.license}.`,
+		`Files: ${plan.files.join(", ")}.`,
+		`A friend gets exactly these bytes with: ${plan.pullLine}`
+	].join("\n");
+}
 /** A shell answer as text an agent reads: windows and menu items one to a line. */
 function renderShell(result) {
 	if ("windows" in result) return result.windows.length === 0 ? "no windows are open" : result.windows.map((window) => `${String(window.id)}  ${JSON.stringify(window.title)}  ${window.path}  ${String(window.width)}x${String(window.height)}${window.x === void 0 || window.y === void 0 ? "" : `@${String(window.x)},${String(window.y)}`}${window.focused ? "  focused" : ""}`).join("\n");
@@ -625,19 +688,19 @@ var Door = class {
 		return this.deps.channel.driveFor(windowId);
 	}
 	/** Run one verb. @throws DoorError or UiControlError. */
-	async run(verb, args, signal) {
+	async run(verb, args, signal, scope = {}) {
 		const input = typeof args === "object" && args !== null && !Array.isArray(args) ? args : {};
 		switch (verb) {
 			case "brief": return this.brief();
 			case "look": {
-				const snapshot = await this.look(input, signal);
+				const snapshot = await this.look(input, signal, scope);
 				return {
 					value: snapshot,
 					text: renderSnapshot(snapshot, (cursor) => `run look --cursor ${String(cursor)}`)
 				};
 			}
 			case "act": {
-				const result = await this.act(input, signal);
+				const result = await this.act(input, signal, scope);
 				return {
 					value: result,
 					text: `done${result.target === void 0 ? "" : `: ${result.target.role} "${result.target.name}"`}${result.detail === void 0 ? "" : ` (${result.detail})`}; look again before the next act`
@@ -645,6 +708,8 @@ var Door = class {
 			}
 			case "plugin-list": return this.plugin((extensions) => extensions.list(), false);
 			case "plugin-add": return this.plugin((extensions) => extensions.install(this.insideApp(input.folder)));
+			case "plugin-pull": return this.pull(input.source);
+			case "plugin-publish": return this.planPublish(input);
 			case "plugin-remove": {
 				const name = input.name;
 				if (typeof name !== "string" || name === "") throw new DoorError("invalid", "plugin remove needs a plugin name");
@@ -694,33 +759,47 @@ var Door = class {
 			].join("\n")
 		};
 	}
-	look(input, signal) {
-		const { window, rest } = this.windowOf(input);
+	look(input, signal, scope = {}) {
+		const { window, rest } = this.windowOf(input, scope);
 		const request = this.parse({
 			...rest,
 			op: "snapshot"
 		});
-		return this.callPage("look", request, signal, window);
+		return this.callPage("look", request, signal, window, scope.page);
 	}
-	async act(input, signal) {
+	async act(input, signal, scope = {}) {
 		if (input.op === "snapshot") throw new DoorError("invalid", "use look to see the page");
-		const { window, rest } = this.windowOf(input);
+		const { window, rest } = this.windowOf(input, scope);
 		const request = this.parse(rest);
-		if (request.op !== "reload" && request.op !== "navigate") return await this.callPage(`act ${String(input.op)}`, request, signal, window);
-		const back = this.deps.channel.expectNewPage(this.deps.pageBackMs ?? PAGE_BACK_MS);
+		const page = scope.page;
+		const moves = request.op === "reload" || request.op === "navigate";
+		if (!moves && request.op !== "click" && request.op !== "press" && request.op !== "type") return await this.callPage(`act ${String(input.op)}`, request, signal, window, page);
+		const backMs = this.deps.pageBackMs ?? PAGE_BACK_MS;
+		const stay = new AbortController();
+		const back = page === void 0 ? this.deps.channel.expectNewPage(backMs, stay.signal) : this.deps.channel.expectPageBack(page, backMs, stay.signal);
 		let answer;
+		let left = moves;
 		try {
-			answer = await this.callPage(`act ${request.op}`, request, signal, window);
+			answer = await this.callPage(`act ${request.op}`, request, signal, window, page);
+			left ||= answer.leaving === true;
 		} catch (cause) {
-			if (!(cause instanceof UiControlError && cause.code === "disconnected")) throw cause;
+			if (!(cause instanceof UiControlError && cause.code === "disconnected")) {
+				stay.abort();
+				throw cause;
+			}
 			answer = {
 				ok: true,
-				detail: request.op === "reload" ? "reloading" : `going to ${request.path}`
+				detail: request.op === "reload" ? "reloading" : request.op === "navigate" ? `going to ${request.path}` : "the page is going to another address"
 			};
+			left = true;
+		}
+		if (!left) {
+			stay.abort();
+			return answer;
 		}
 		const came = await back;
-		if (came !== void 0) this.deps.channel.prefer(came);
-		if (came === void 0) throw new UiControlError("timeout", request.op === "reload" ? "the page did not come back after the reload" : `the page did not come back after going to ${request.path}: is there a page at that path, and does it load the door's script?`);
+		if (came !== void 0 && page === void 0) this.deps.channel.prefer(came);
+		if (came === void 0) throw new UiControlError("timeout", request.op === "reload" ? "the page did not come back after the reload" : request.op === "navigate" ? `the page did not come back after going to ${request.path}: is there a page at that path, and does it load the door's script?` : `the ${request.op} took the page to another address, and no page came back: does the page there load the door's script?`);
 		const landed = request.op === "navigate" ? await this.statusAt(request.path) : void 0;
 		return {
 			...answer,
@@ -735,7 +814,8 @@ var Door = class {
 		const base = this.deps.app.url;
 		if (base === void 0) return void 0;
 		try {
-			const response = await fetch(new URL(path, base), {
+			const target = underAppBase(this.deps.appBase ?? "", path);
+			const response = await fetch(new URL(target, base), {
 				headers: { accept: "text/html" },
 				signal: AbortSignal.timeout(3e3)
 			});
@@ -800,12 +880,13 @@ var Door = class {
 		}
 	}
 	/** `window` on look and act: the desktop window (the number `window list` prints) whose page the call is for; without it, the page used last. */
-	windowOf(input) {
+	windowOf(input, scope = {}) {
 		const { window, ...rest } = input;
 		if (window === void 0) return {
 			window: void 0,
 			rest
 		};
+		if (scope.page !== void 0) throw new DoorError("invalid", "this run drives only the page it was asked from; window does not apply");
 		if (typeof window !== "number" || !Number.isSafeInteger(window) || window < 1) throw new DoorError("invalid", "window must be the number `window list` prints for the window");
 		return {
 			window,
@@ -820,12 +901,13 @@ var Door = class {
 		}
 	}
 	/** Run one call on the page and record it. The audit holds which control was touched and how it ended, never what was typed. */
-	async callPage(verb, request, signal, window) {
+	async callPage(verb, request, signal, window, page) {
 		const approval = "token";
 		try {
 			const value = await this.deps.channel.call(request, {
 				signal,
 				...window === void 0 ? {} : { window },
+				...page === void 0 ? {} : { page },
 				...request.op === "wait" ? { timeoutMs: (request.timeoutMs ?? 3e3) + 5e3 } : {}
 			});
 			const target = "target" in value ? value.target : void 0;
@@ -862,7 +944,7 @@ var Door = class {
 	}
 	async plugin(run, mutates = true) {
 		const extensions = this.deps.extensions();
-		if (extensions === void 0) throw new DoorError("unavailable", "this app has no extensions plugin, so plugins cannot be installed while it runs");
+		if (extensions === void 0) throw new DoorError("unavailable", "this door has no extensions plugin to drive. In ACRYL's frame none is needed: a saved change in src/ or plugins/ reloads the app by itself, so do not restart it. Elsewhere, the app has no way to install plugins while it runs");
 		const value = await run(extensions);
 		const unchanged = typeof value === "object" && value !== null && value.action === "unchanged";
 		if (mutates && !unchanged && this.deps.reloadOnChange !== false) await this.deps.channel.reloadAll();
@@ -871,6 +953,50 @@ var Door = class {
 			text: JSON.stringify(value, null, 2)
 		};
 	}
+	share() {
+		const share = this.deps.pluginShare?.();
+		if (share === void 0) throw new DoorError("unavailable", "plugin-share is not running in this app. If the app just changed it is restarting, so try again in a moment. An app made by an older version does not have it, and upgrade does not add it: run `npx acrylblends add plugin-share` and follow its README");
+		return share;
+	}
+	/** Only a plan: no argument of any verb can publish, so an agent never says yes for a person. */
+	async planPublish(input) {
+		const { name, owner, license } = input;
+		if (typeof name !== "string" || name === "") throw new DoorError("invalid", "plugin publish needs a plugin name, e.g. plugin publish pomodoro");
+		const value = await this.share().planPublish(name, {
+			...typeof owner === "string" && owner !== "" ? { owner } : {},
+			...typeof license === "string" && license !== "" ? { license } : {}
+		});
+		if ("ok" in value) throw new DoorError("refused", `${value.reason}. ${value.next}.`);
+		return {
+			value,
+			text: `${renderPublishPlan(value)}\nNothing was sent. Only a person can say yes: they run \`npm run acryl -- plugin publish ${name}\` in their own terminal, or press Share in the frame. \`--license <id>\` changes the license before the yes.`
+		};
+	}
+	/** The person's yes, from their own terminal. Not a verb: MCP and the chat do not have it. */
+	async publishConfirmed(name, confirmed, options) {
+		const value = await this.share().publish(name, confirmed, options);
+		this.deps.audit.record({
+			at: (/* @__PURE__ */ new Date()).toISOString(),
+			tool: "plugin-publish",
+			target: {
+				role: "plugin",
+				name: `${confirmed.owner}/${confirmed.repo}@${confirmed.version}`
+			},
+			outcome: value.ok ? "ok" : "refused",
+			approval: "token"
+		});
+		return value;
+	}
+	async pull(source) {
+		if (typeof source !== "string" || source === "") throw new DoorError("invalid", "plugin pull needs a source, e.g. plugin pull github:someone/pomodoro@0.1.0");
+		const value = await this.share().pull(source);
+		if (!value.ok) throw new DoorError("refused", `${value.reason ?? "the pull was refused"}. ${value.next ?? "nothing changed"}.`);
+		if (value.action !== "unchanged" && this.deps.reloadOnChange !== false) await this.deps.channel.reloadAll();
+		return {
+			value,
+			text: JSON.stringify(value, null, 2)
+		};
+	}
 	/** A folder named by an agent, resolved from the app folder; it must be inside the app. */
 	insideApp(folder) {
 		if (typeof folder !== "string" || folder === "") throw new DoorError("invalid", "plugin add needs a folder, e.g. plugins/pomodoro");
@@ -914,8 +1040,8 @@ var Door = class {
 * `door_<verb>`. A tool answers the verb's text, what an agent reads in a terminal; a failed verb throws with its code, as the operator
 * client prints it.
 */
-/** Register every verb. @returns the function that removes them all; it also aborts the calls still running. */
-function registerChatTools(tools, door) {
+/** Register the verbs (default: every one). @returns the function that removes them all; it also aborts the calls still running. */
+function registerChatTools(tools, door, verbs = VERBS) {
 	const running = new AbortController();
 	const removers = [];
 	const removeAll = () => {
@@ -923,12 +1049,13 @@ function registerChatTools(tools, door) {
 		for (const remove of removers.splice(0).reverse()) remove();
 	};
 	try {
-		for (const verb of VERBS) removers.push(tools.register(chatToolName(verb), {
+		for (const verb of verbs) removers.push(tools.register(chatToolName(verb), {
 			description: VERB_SPECS[verb].description,
 			parameters: VERB_SPECS[verb].arguments,
-			run: async (input) => {
+			run: async (input, options) => {
+				const signal = options?.signal === void 0 ? running.signal : AbortSignal.any([running.signal, options.signal]);
 				try {
-					return (await door.run(verb, input ?? {}, running.signal)).text;
+					return (await door.run(verb, input ?? {}, signal, options?.page === void 0 ? {} : { page: options.page })).text;
 				} catch (cause) {
 					if (cause instanceof DoorError || cause instanceof UiControlError) throw new Error(`${cause.code}: ${cause.message}`, { cause });
 					throw cause;
@@ -997,10 +1124,14 @@ function alive(pid) {
 * Write this run's connection file, replacing a stale one.
 * @throws when another live process already serves this folder's door: two apps from one folder would race for one file.
 */
-function writeDoorFile(appRoot, url, secret) {
-	const dir = ensureStateDir(appRoot);
+/** @throws when another live process already serves this folder's door: two apps from one folder would race for one file. */
+function assertDoorIsFree(appRoot) {
 	const existing = readDoorFile(appRoot);
 	if (existing !== void 0 && existing.pid !== process.pid && alive(existing.pid)) throw new Error(`acryl-door: another process (pid ${String(existing.pid)}) serves the door of ${appRoot}; stop it first`);
+}
+function writeDoorFile(appRoot, url, secret) {
+	const dir = ensureStateDir(appRoot);
+	assertDoorIsFree(appRoot);
 	const file = doorFilePath(appRoot);
 	const temporary = join(dir, `${DOOR_FILE}.${String(process.pid)}.tmp`);
 	const content = {
@@ -1157,6 +1288,33 @@ function operatorRoutes(prefix, secret, door, reportError) {
 			reportError(`run the door verb ${verb}`, cause);
 			return c.json(error("the verb could not be run"), 500);
 		}
+	}).post(`${prefix}/publish-confirmed`, operatorOnly(secret), jsonBody, async (c) => {
+		const body = await readJson(c);
+		const { name, confirm, owner, license } = body === INVALID_JSON || typeof body !== "object" || body === null ? {} : body;
+		if (typeof name !== "string" || typeof confirm !== "object" || confirm === null) return c.json({
+			ok: false,
+			code: "invalid",
+			message: "the body is { name, confirm }"
+		}, 400);
+		try {
+			const value = await door.publishConfirmed(name, confirm, {
+				...typeof owner === "string" ? { owner } : {},
+				...typeof license === "string" ? { license } : {}
+			});
+			return c.json({
+				ok: true,
+				value,
+				text: JSON.stringify(value, null, 2)
+			});
+		} catch (cause) {
+			if (cause instanceof DoorError) return c.json({
+				ok: false,
+				code: cause.code,
+				message: cause.message
+			}, 409);
+			reportError("publish a plugin", cause);
+			return c.json(error("the plugin could not be published"), 500);
+		}
 	});
 }
 /** The upgrade request comes from this app's own page: a loopback peer on this port, and an `Origin` that is exactly this app's origin. Nothing else is read as proof. */
@@ -1171,11 +1329,13 @@ const ownOrigin = async (c, next) => {
 };
 function pageSocketRoutes(channel, options) {
 	const heartbeatMs = options.heartbeatMs ?? 15e3;
-	return new Acryl().get(`${options.prefix}/channel/ws`, ownOrigin, options.upgrade((c) => {
+	const events = (c) => {
 		const windowId = c.req.query("window");
 		const focused = c.req.query("focused") === "1";
 		const shellQuery = Number(c.req.query("shell"));
 		const shellWindow = Number.isSafeInteger(shellQuery) && shellQuery > 0 ? shellQuery : void 0;
+		const tabQuery = c.req.query("tab");
+		const tab = tabQuery !== void 0 && WINDOW_ID.test(tabQuery) ? tabQuery : void 0;
 		let detach;
 		let beat;
 		return {
@@ -1199,7 +1359,7 @@ function pageSocketRoutes(channel, options) {
 					close: () => {
 						ws.close(1e3, "replaced");
 					}
-				}, shellWindow);
+				}, shellWindow, tab);
 				write({ e: "ready" });
 				beat = setInterval(() => {
 					try {
@@ -1223,7 +1383,12 @@ function pageSocketRoutes(channel, options) {
 				detach?.();
 			}
 		};
-	}, { textOnly: true }));
+	};
+	return new Acryl().get(`${options.prefix}/channel/ws`, ownOrigin, async (c, next) => {
+		const allow = options.upgrade();
+		if (allow === void 0) return c.json(error("the page channel is not ready yet"), 503);
+		return allow(events, { textOnly: true })(c, next);
+	});
 }
 /** The oldest Node the client runs on (the framework's own floor). */
 const MIN_NODE = [22, 19];
@@ -1343,14 +1508,13 @@ function writeShims(root, target) {
 */
 /** Stable Cordis plugin name, equal to the package name and the Loader row id. */
 const name = "acryl-door";
-const inject = [
-	"router",
-	"appInstance",
-	"nodeServer"
-];
+const inject = ["router", "appInstance"];
 const Config = z.object({
 	allowInProduction: z.boolean().default(false).description("Run in production too (NODE_ENV=production); ACRYL_DOOR=off still turns it off."),
+	pageOnly: z.boolean().default(false).description("Only the page and the look and act chat tools (a production assistant); runs in production."),
 	reloadOnChange: z.boolean().default(true).description("Reload the open pages after a plugin was added, removed or reloaded while the app runs."),
+	hostIndex: z.boolean().default(true).description("Put the page script in the host's own index page too; off when that index is a frame around the app."),
+	appBase: z.string().default("").description("The prefix the app pages are served under (the frame canvas), without a trailing slash; empty at the root."),
 	tools: z.object({ expose: z.array(z.string().pattern(/^(?!door_)[A-Za-z][A-Za-z0-9_-]{0,63}$/u)).description("App tools (from the tools registry) the door offers; none by default.") })
 });
 /** The page module, served compiled from source by the app's own TypeScript. */
@@ -1382,26 +1546,53 @@ function notFoundPage(path, scriptTag) {
 }
 function apply(ctx, rawConfig = {}) {
 	const config = Config(rawConfig);
-	if (process.env.ACRYL_DOOR === "off" || process.env.NODE_ENV === "production" && config.allowInProduction !== true) return;
+	const pageOnly = config.pageOnly === true;
+	if (process.env.ACRYL_DOOR === "off" || process.env.NODE_ENV === "production" && config.allowInProduction !== true && !pageOnly) return;
 	const app = ctx.get("appInstance");
-	const server = ctx.get("nodeServer");
+	const carrier = () => {
+		const web = ctx.get("acrylWeb");
+		if (web !== void 0) return web;
+		const node = ctx.get("nodeServer");
+		if (typeof node?.url !== "string") return void 0;
+		try {
+			const parsed = new URL(node.url);
+			return {
+				host: parsed.hostname,
+				port: Number(parsed.port)
+			};
+		} catch {
+			return;
+		}
+	};
 	if (typeof app?.root !== "string") throw new Error("acryl-door: the appInstance service has no app folder (root)");
 	const reportError = (operation, cause) => {
 		ctx.logger?.error?.(`acryl-door: failed to ${operation}: ${cause instanceof Error ? cause.message : String(cause)}`);
 	};
+	const address = { url: "" };
+	if (!pageOnly) assertDoorIsFree(app.root);
 	const secret = newSecret();
-	const channel = new UiChannel({ attachWaitMs: 2e3 });
+	const channel = new UiChannel({
+		attachWaitMs: 2e3,
+		requirePage: pageOnly
+	});
 	const shell = new ShellChannel();
+	const audit = new AuditLog(auditPath(stateDir(app.root)));
+	const rawBase = typeof config.appBase === "string" ? config.appBase.trim() : "";
+	const appBase = rawBase.startsWith("/") && rawBase !== "/" ? rawBase.replace(/\/+$/u, "") : "";
 	const door = new Door({
 		channel,
 		shell,
-		audit: new AuditLog(auditPath(stateDir(app.root))),
+		audit,
 		app: {
 			name: app.name,
 			root: app.root,
-			url: loopbackUrl(server.url)
+			get url() {
+				return address.url;
+			}
 		},
+		...appBase === "" ? {} : { appBase },
 		extensions: () => ctx.get("extensions"),
+		pluginShare: () => ctx.get("pluginShare"),
 		tools: () => ctx.get("tools"),
 		expose: config.tools?.expose ?? [],
 		reloadOnChange: config.reloadOnChange !== false
@@ -1412,8 +1603,12 @@ function apply(ctx, rawConfig = {}) {
 	ctx.effect(() => () => {
 		shell.close();
 	}, "acryl-door: desktop shell channel");
-	const pageModule = new Acryl().get(`${DOOR_PREFIX}/page.js`, (c) => c.body(`import '${DOOR_PREFIX}/page/main.ts'\n`, 200, { "content-type": "text/javascript; charset=utf-8" })).route(`${DOOR_PREFIX}/page`, clientModules({ root: PAGE_DIR }));
+	const pageModule = new Acryl().get(`${DOOR_PREFIX}/page.js`, (c) => c.body(`import '${DOOR_PREFIX}/page/main.ts'\n`, 200, { "content-type": "text/javascript; charset=utf-8" })).route(`${DOOR_PREFIX}/page`, clientModules({
+		root: PAGE_DIR,
+		mount: `${DOOR_PREFIX}/page`
+	}));
 	const tag = `<script type="module" src="${DOOR_PREFIX}/page.js"><\/script>`;
+	const meta = appBase === "" ? "" : `<meta name="acryl-app-base" content="${appBase}">`;
 	const addScript = async (c, next) => {
 		await next();
 		if (!(c.res.headers.get("content-type") ?? "").includes("text/html")) {
@@ -1423,11 +1618,12 @@ function apply(ctx, rawConfig = {}) {
 			});
 			return;
 		}
-		const html = await c.res.text();
+		let html = await c.res.text();
 		const headers = new Headers(c.res.headers);
 		headers.delete("content-length");
-		const carries = html.includes(`${DOOR_PREFIX}/page.js`);
-		c.res = new Response(carries ? html : html.includes("</body>") ? html.replace("</body>", `${tag}</body>`) : html + tag, {
+		if (meta !== "" && !html.includes("name=\"acryl-app-base\"")) html = html.includes("</head>") ? html.replace("</head>", `${meta}</head>`) : meta + html;
+		if (!html.includes(`/api/acryl-door/page.js`)) html = html.includes("</body>") ? html.replace("</body>", `${tag}</body>`) : html + tag;
+		c.res = new Response(html, {
 			status: c.res.status,
 			headers
 		});
@@ -1435,31 +1631,99 @@ function apply(ctx, rawConfig = {}) {
 	const router = ctx.router;
 	if (typeof router.wrap === "function") router.wrap(addScript);
 	else ctx.router.route("/", new Acryl().use("*", addScript));
-	let upgrade;
-	try {
-		upgrade = ctx.nodeServer?.upgrades?.();
-	} catch (cause) {
-		reportError("open the page channel over a WebSocket (the pages use the event stream)", cause);
-	}
-	ctx.router.route("/", privateApi(DOOR_PREFIX, pageModule, pageChannelRoutes(channel, { prefix: DOOR_PREFIX }), ...upgrade === void 0 ? [] : [pageSocketRoutes(channel, {
+	if (config.hostIndex !== false) ctx.inject(["webServer"], (inner) => {
+		inner.effect(() => {
+			const taps = inner.get("webServer");
+			if (typeof taps?.tapIndex !== "function") return () => {};
+			return taps.tapIndex((html) => {
+				if (html.includes(`/api/acryl-door/page.js`)) return html;
+				return html.includes("</body>") ? html.replace("</body>", `${tag}</body>`) : html + tag;
+			});
+		}, "acryl-door: the page script in the host index");
+	});
+	let pageUpgrade;
+	let nodeUpgrade;
+	const endNodeOwner = () => {
+		if (pageUpgrade === nodeUpgrade) pageUpgrade = void 0;
+		nodeUpgrade = void 0;
+	};
+	const nodeFallback = () => {
+		if (ctx.get("routerHttp") !== void 0 || nodeUpgrade !== void 0) return;
+		try {
+			const allow = ctx.get("nodeServer")?.upgrades?.();
+			if (allow !== void 0) {
+				nodeUpgrade = allow;
+				pageUpgrade = allow;
+			}
+		} catch (cause) {
+			reportError("open the page channel over a WebSocket (the pages use the event stream)", cause);
+		}
+	};
+	ctx.inject(["routerHttp"], (inner) => {
+		endNodeOwner();
+		const http = inner.get("routerHttp");
+		try {
+			const allow = http?.upgrades?.();
+			if (allow === void 0 || http === void 0 || typeof http.mount !== "function") return;
+			pageUpgrade = allow;
+			const remove = http.mount(DOOR_PREFIX, { upgrade: [`${DOOR_PREFIX}/channel/ws`] });
+			inner.effect(() => () => {
+				remove();
+				if (pageUpgrade === allow) pageUpgrade = void 0;
+				nodeFallback();
+			}, "acryl-door: the page socket via routerHttp");
+		} catch (cause) {
+			reportError("open the page channel over a WebSocket (the pages use the event stream)", cause);
+		}
+	});
+	ctx.inject(["nodeServer"], (inner) => {
+		inner.effect(() => {
+			nodeFallback();
+			const onService = inner.on;
+			const off = onService("internal/service", () => {
+				if (ctx.get("routerHttp") !== void 0) endNodeOwner();
+				else nodeFallback();
+			});
+			return () => {
+				off();
+				endNodeOwner();
+			};
+		}, "acryl-door: the page socket on the node server");
+	});
+	ctx.router.route("/", pageSocketRoutes(channel, {
 		prefix: DOOR_PREFIX,
-		upgrade
-	})], shellRoutes(DOOR_PREFIX, secret, shell), operatorRoutes(DOOR_PREFIX, secret, door, reportError), mcpRoutes(DOOR_PREFIX, secret, door, reportError)));
+		upgrade: () => pageUpgrade
+	}));
+	ctx.router.route("/", privateApi(DOOR_PREFIX, pageModule, pageChannelRoutes(channel, { prefix: DOOR_PREFIX }), ...pageOnly ? [] : [
+		shellRoutes(DOOR_PREFIX, secret, shell),
+		operatorRoutes(DOOR_PREFIX, secret, door, reportError),
+		mcpRoutes(DOOR_PREFIX, secret, door, reportError)
+	]));
 	ctx.inject(["tools"], (inner) => {
-		inner.effect(() => registerChatTools(inner.get("tools"), door), "acryl-door: the verbs in the tools registry");
+		inner.effect(() => registerChatTools(inner.get("tools"), door, pageOnly ? PAGE_VERBS : VERBS), "acryl-door: the verbs in the tools registry");
 	});
 	ctx.effect(function* () {
 		yield ctx.reflect.provide("door", door);
-		writeDoorFile(app.root, loopbackUrl(server.url), secret);
+	}, "acryl-door: the door service");
+	if (pageOnly) return;
+	ctx.effect(async () => {
+		let bound = carrier();
+		for (let at = 0; at < 500 && (bound === void 0 || !(bound.port > 0)); at += 1) {
+			await new Promise((done) => setTimeout(done, 10));
+			bound = carrier();
+		}
+		if (bound === void 0) throw new Error("acryl-door: no carrier bound the app (neither acrylWeb nor nodeServer answered)");
+		address.url = loopbackUrl(`http://${bound.host}:${String(bound.port)}`);
+		writeDoorFile(app.root, address.url, secret);
 		try {
 			writeShims(app.root, shimTarget());
 		} catch (cause) {
 			reportError("write .acryl/bin", cause);
 		}
-		yield () => {
+		return () => {
 			removeDoorFile(app.root, secret);
 		};
-	}, "acryl-door: the door service, .acryl/door.json and .acryl/bin/acryl");
+	}, "acryl-door: .acryl/door.json and .acryl/bin/acryl");
 }
 //#endregion
-export { Config, DOOR_PREFIX, Door, DoorError, STATE_DIR, VERBS, VERB_SPECS, apply, chatToolName, doorFilePath, inject, mcpTools, name, notFoundPage, readDoorFile };
+export { Config, DOOR_PREFIX, Door, DoorError, PAGE_VERBS, STATE_DIR, VERBS, VERB_SPECS, apply, assertDoorIsFree, chatToolName, doorFilePath, inject, mcpTools, name, notFoundPage, readDoorFile };

package/lib/cordis/inspect.js

@@ -1,6 +1,6 @@
 import { t as Acryl } from "../app-CQcGWjrk.js";
 import { i as loopbackOnly } from "../loopback-only-BbasoF7R.js";
-import "../src-BTBm4OPD.js";
+import "../src-iBJ2ysV9.js";
 import "../middleware-BfG_fp8P.js";
 import { Service } from "@deepseek-ai/cordis";
 //#region ../../plugins/acryl-inspect/src/report.ts