arkaos 2.87.0 → 2.89.0

package/VERSION

@@ -1 +1 @@
-2.87.0
+2.89.0

package/dashboard/app/pages/knowledge.vue

@@ -324,6 +324,90 @@ async function handleSearch() {
 function formatScore(score: number): string {
   return `${(score * 100).toFixed(0)}%`
 }
+
+// PR71 v2.88.0 — delete all chunks from a given source.
+
+const deletingSource = ref<string | null>(null)
+
+async function askDeleteSource(source: string) {
+  if (!source) return
+  if (typeof window === 'undefined') return
+  const ok = window.confirm(
+    `Delete every indexed chunk from this source?\n\n${source}\n\n`
+    + 'This removes the source from search results but does not delete the original file. '
+    + 'You can re-ingest the source later if needed.',
+  )
+  if (!ok) return
+  await deleteSource(source)
+}
+
+async function deleteSource(source: string) {
+  deletingSource.value = source
+  try {
+    const res = await $fetch<{ deleted?: number, source?: string, error?: string }>(
+      `${apiBase}/api/knowledge/sources`,
+      { method: 'DELETE', query: { source } },
+    )
+    if (res.error) {
+      toast.add({
+        title: 'Delete failed',
+        description: res.error,
+        color: 'error',
+      })
+      return
+    }
+    const deleted = res.deleted ?? 0
+    // Drop the matching rows from the in-memory list without a full re-fetch.
+    searchResults.value = searchResults.value.filter((r) => r.source !== source)
+    searchTotal.value = searchResults.value.length
+    // Refresh stats so the chunk count in the header updates.
+    if (typeof refresh === 'function') {
+      await refresh()
+    }
+    toast.add({
+      title: deleted > 0
+        ? `Deleted ${deleted} chunk${deleted === 1 ? '' : 's'}`
+        : 'Nothing to delete',
+      description: source,
+      color: 'success',
+    })
+  } catch (err) {
+    toast.add({
+      title: 'Delete failed',
+      description: err instanceof Error ? err.message : 'unknown error',
+      color: 'error',
+    })
+  } finally {
+    deletingSource.value = null
+  }
+}
+
+// PR71 — highlight the search query in the preview text.
+// Tolerates malformed regex (escapes special characters) and HTML-
+// escapes the input so v-html'd output is safe from XSS via DB rows.
+function highlightMatches(text: string, query: string): string {
+  const safe = escapeHtml(text || '')
+  const q = (query || '').trim()
+  if (!q) return safe
+  const pattern = new RegExp(`(${escapeRegex(q)})`, 'gi')
+  return safe.replace(
+    pattern,
+    '<mark class="bg-primary/20 text-primary rounded px-0.5">$1</mark>',
+  )
+}
+
+function escapeHtml(value: string): string {
+  return value
+    .replace(/&/g, '&amp;')
+    .replace(/</g, '&lt;')
+    .replace(/>/g, '&gt;')
+    .replace(/"/g, '&quot;')
+    .replace(/'/g, '&#39;')
+}
+
+function escapeRegex(value: string): string {
+  return value.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')
+}
 </script>
 
 <template>
@@ -771,17 +855,30 @@ function formatScore(score: number): string {
                         {{ result.heading }}
                       </span>
                     </div>
-                    <span class="text-xs text-muted whitespace-nowrap">
-                      Score: {{ formatScore(result.score) }}
-                    </span>
+                    <div class="flex items-center gap-2 shrink-0">
+                      <span class="text-xs text-muted whitespace-nowrap">
+                        Score: {{ formatScore(result.score) }}
+                      </span>
+                      <UButton
+                        v-if="result.source"
+                        :icon="deletingSource === result.source
+                          ? 'i-lucide-loader-2'
+                          : 'i-lucide-trash-2'"
+                        :loading="deletingSource === result.source"
+                        variant="ghost"
+                        color="error"
+                        size="xs"
+                        aria-label="Delete all chunks from this source"
+                        @click.stop="askDeleteSource(result.source)"
+                      />
+                    </div>
                   </div>
                   <p v-if="result.source" class="text-xs text-muted mb-1 truncate">
                     <UIcon name="i-lucide-file-text" class="size-3 inline-block mr-1" />
                     {{ result.source }}
                   </p>
-                  <p class="text-sm text-muted line-clamp-3">
-                    {{ result.text || result.content }}
-                  </p>
+                  <!-- PR71 v2.88.0 — highlight query matches in the preview -->
+                  <p class="text-sm text-muted line-clamp-3" v-html="highlightMatches(result.text || result.content, searchQuery)" />
                 </div>
               </div>
 

package/dashboard/app/pages/settings.vue

@@ -141,14 +141,87 @@ const keyOptions = [
   { label: 'Custom...', value: 'custom' },
 ]
 
+// ─── PR63b v2.89.0 — MCPs / Hooks / Plugins / Theme sections ────────────
+
+interface McpRow {
+  name: string
+  source: 'user-global' | 'arkaos-registry' | string
+  transport: string
+  command: string
+}
+
+interface HookCommand {
+  command: string
+  type: string
+  timeout?: number | null
+}
+
+interface HookRow {
+  hook: string
+  count: number
+  commands: HookCommand[]
+}
+
+interface PluginRow {
+  name: string
+  marketplace: string
+  version: string
+  scope: string
+  installed_at: string
+  last_updated: string
+}
+
+const { data: mcpsData, refresh: refreshMcps } = fetchApi<{ mcps: McpRow[], total: number }>('/api/settings/mcps')
+const { data: hooksData, refresh: refreshHooks } = fetchApi<{
+  hooks: HookRow[]
+  settings_path: string
+  hard_enforcement: boolean
+}>('/api/settings/hooks')
+const { data: pluginsData, refresh: refreshPlugins } = fetchApi<{
+  plugins: PluginRow[]
+  total: number
+  plugins_path: string
+}>('/api/settings/plugins')
+
+const mcps = computed(() => mcpsData.value?.mcps ?? [])
+const hooks = computed(() => hooksData.value?.hooks ?? [])
+const plugins = computed(() => pluginsData.value?.plugins ?? [])
+
+// Theme — Nuxt UI ships useColorMode; we just expose a picker.
+const colorMode = useColorMode()
+const themeOptions = [
+  { label: 'System (auto)', value: 'system' },
+  { label: 'Light', value: 'light' },
+  { label: 'Dark', value: 'dark' },
+]
+
+function transportColor(transport: string): 'primary' | 'warning' | 'success' | 'neutral' {
+  if (transport === 'stdio') return 'primary'
+  if (transport === 'http' || transport === 'sse') return 'success'
+  return 'neutral'
+}
+
+function formatInstalledAt(iso: string): string {
+  if (!iso) return ''
+  try {
+    return new Intl.DateTimeFormat('en-US', { month: 'short', day: 'numeric', year: 'numeric' }).format(new Date(iso))
+  } catch {
+    return iso
+  }
+}
+
 // ─── Section nav ────────────────────────────────────────────────────────
 
-type SectionId = 'profile' | 'projects' | 'keys'
+type SectionId = 'profile' | 'projects' | 'keys' | 'mcps' | 'hooks' | 'plugins' | 'theme'
 
 const sections: { id: SectionId; label: string; icon: string }[] = [
-  { id: 'profile', label: 'Profile', icon: 'i-lucide-user-circle' },
-  { id: 'projects', label: 'Projects', icon: 'i-lucide-folders' },
-  { id: 'keys', label: 'API Keys', icon: 'i-lucide-key' },
+  { id: 'profile',  label: 'Profile',   icon: 'i-lucide-user-circle' },
+  { id: 'projects', label: 'Projects',  icon: 'i-lucide-folders' },
+  { id: 'keys',     label: 'API Keys',  icon: 'i-lucide-key' },
+  { id: 'mcps',     label: 'MCPs',      icon: 'i-lucide-plug-2' },
+  { id: 'hooks',    label: 'Hooks',     icon: 'i-lucide-webhook' },
+  { id: 'plugins',  label: 'Plugins',   icon: 'i-lucide-puzzle' },
+  { id: 'theme',    label: 'Theme',     icon: 'i-lucide-palette' },
 ]
 
 const activeSection = ref<SectionId>('profile')
@@ -182,7 +255,8 @@ const activeSection = ref<SectionId>('profile')
             <span>{{ s.label }}</span>
           </button>
           <p class="text-xs text-muted px-3 mt-6">
-            More sections (MCPs, Hooks, Plugins, Theme) coming in PR63b.
+            7 sections. Profile + Projects edit data; everything else is
+            read-only diagnostics until an explicit edit endpoint lands.
           </p>
         </nav>
 
@@ -409,6 +483,183 @@ const activeSection = ref<SectionId>('profile')
               </div>
             </DashboardState>
           </section>
+
+          <!-- MCPs -->
+          <section v-else-if="activeSection === 'mcps'">
+            <div class="flex items-baseline justify-between mb-1">
+              <h2 class="text-lg font-semibold">MCPs</h2>
+              <UButton
+                label="Refresh"
+                variant="ghost"
+                icon="i-lucide-refresh-cw"
+                size="xs"
+                @click="refreshMcps()"
+              />
+            </div>
+            <p class="text-sm text-muted mb-6">
+              MCP servers configured globally for your Claude Code account.
+              Sourced from <code class="font-mono text-xs">~/.claude.json</code>
+              and the ArkaOS registry. Read-only.
+            </p>
+            <div v-if="!mcps.length" class="rounded-lg border border-default p-6 text-center">
+              <UIcon name="i-lucide-plug-2" class="size-10 text-muted mx-auto mb-2" />
+              <p class="text-sm text-muted">No MCP servers configured.</p>
+            </div>
+            <div v-else class="space-y-2">
+              <div
+                v-for="m in mcps"
+                :key="`${m.source}:${m.name}`"
+                class="flex items-center gap-3 rounded-lg border border-default p-3"
+              >
+                <UIcon name="i-lucide-plug-2" class="size-4 text-muted shrink-0" />
+                <div class="flex-1 min-w-0">
+                  <div class="flex items-center gap-2 mb-0.5">
+                    <span class="text-sm font-mono font-medium">{{ m.name }}</span>
+                    <UBadge :label="m.source" variant="outline" size="xs" />
+                    <UBadge
+                      :label="m.transport"
+                      :color="transportColor(m.transport)"
+                      variant="subtle"
+                      size="xs"
+                    />
+                  </div>
+                  <p v-if="m.command" class="text-xs font-mono text-muted truncate" :title="m.command">
+                    {{ m.command }}
+                  </p>
+                </div>
+              </div>
+            </div>
+          </section>
+
+          <!-- Hooks -->
+          <section v-else-if="activeSection === 'hooks'">
+            <div class="flex items-baseline justify-between mb-1">
+              <h2 class="text-lg font-semibold">Hooks</h2>
+              <UButton
+                label="Refresh"
+                variant="ghost"
+                icon="i-lucide-refresh-cw"
+                size="xs"
+                @click="refreshHooks()"
+              />
+            </div>
+            <p class="text-sm text-muted mb-6">
+              Claude Code hooks wired by the ArkaOS installer.
+              Sourced from
+              <code class="font-mono text-xs">{{ hooksData?.settings_path ?? '~/.claude/settings.json' }}</code>.
+              Read-only — re-wire via <code class="font-mono text-xs">npx arkaos@latest update</code>.
+            </p>
+            <div
+              v-if="hooksData?.hard_enforcement"
+              class="mb-4 rounded-lg border border-primary/30 bg-primary/5 p-3 text-sm"
+            >
+              <UIcon name="i-lucide-shield-check" class="size-4 inline text-primary mr-1" />
+              Hard enforcement is <strong>ON</strong>. Effect tools require
+              <code class="font-mono text-xs">[arka:routing]</code> markers.
+            </div>
+            <div v-if="!hooks.length" class="rounded-lg border border-default p-6 text-center">
+              <UIcon name="i-lucide-webhook" class="size-10 text-muted mx-auto mb-2" />
+              <p class="text-sm text-muted">No hooks wired in settings.json.</p>
+            </div>
+            <div v-else class="space-y-3">
+              <div
+                v-for="h in hooks"
+                :key="h.hook"
+                class="rounded-lg border border-default p-3"
+              >
+                <div class="flex items-center gap-2 mb-2">
+                  <span class="text-sm font-mono font-semibold">{{ h.hook }}</span>
+                  <UBadge :label="`${h.count}`" variant="subtle" size="xs" />
+                </div>
+                <ul class="space-y-1">
+                  <li
+                    v-for="(c, idx) in h.commands"
+                    :key="idx"
+                    class="flex items-center gap-2 text-xs"
+                  >
+                    <UIcon name="i-lucide-terminal" class="size-3 text-muted shrink-0" />
+                    <code class="font-mono text-xs truncate flex-1" :title="c.command">
+                      {{ c.command }}
+                    </code>
+                    <span v-if="c.timeout" class="text-muted whitespace-nowrap">
+                      {{ c.timeout }}s
+                    </span>
+                  </li>
+                </ul>
+              </div>
+            </div>
+          </section>
+
+          <!-- Plugins -->
+          <section v-else-if="activeSection === 'plugins'">
+            <div class="flex items-baseline justify-between mb-1">
+              <h2 class="text-lg font-semibold">Plugins</h2>
+              <UButton
+                label="Refresh"
+                variant="ghost"
+                icon="i-lucide-refresh-cw"
+                size="xs"
+                @click="refreshPlugins()"
+              />
+            </div>
+            <p class="text-sm text-muted mb-6">
+              Claude Code plugins installed via the marketplace system
+              (PR43 auto-install + PR55 ArkaOS marketplace). Sourced
+              from <code class="font-mono text-xs">{{ pluginsData?.plugins_path ?? '~/.claude/plugins/installed_plugins.json' }}</code>.
+            </p>
+            <div v-if="!plugins.length" class="rounded-lg border border-default p-6 text-center">
+              <UIcon name="i-lucide-puzzle" class="size-10 text-muted mx-auto mb-2" />
+              <p class="text-sm text-muted">No plugins installed.</p>
+              <p class="text-xs text-muted mt-2">
+                Try <code class="font-mono">/plugin marketplace add andreagroferreira/arka-os</code>
+                from Claude Code.
+              </p>
+            </div>
+            <div v-else class="space-y-2">
+              <div
+                v-for="p in plugins"
+                :key="`${p.marketplace}:${p.name}:${p.version}`"
+                class="flex items-center gap-3 rounded-lg border border-default p-3"
+              >
+                <UIcon name="i-lucide-puzzle" class="size-4 text-muted shrink-0" />
+                <div class="flex-1 min-w-0">
+                  <div class="flex items-center gap-2 mb-0.5">
+                    <span class="text-sm font-semibold">{{ p.name }}</span>
+                    <UBadge :label="p.marketplace" variant="outline" size="xs" />
+                    <UBadge v-if="p.scope" :label="p.scope" variant="soft" size="xs" />
+                    <UBadge v-if="p.version" :label="`v${p.version}`" variant="subtle" size="xs" />
+                  </div>
+                  <p v-if="p.installed_at" class="text-xs text-muted">
+                    Installed {{ formatInstalledAt(p.installed_at) }}
+                  </p>
+                </div>
+              </div>
+            </div>
+          </section>
+
+          <!-- Theme -->
+          <section v-else-if="activeSection === 'theme'">
+            <h2 class="text-lg font-semibold mb-1">Theme</h2>
+            <p class="text-sm text-muted mb-6">
+              Light / dark / system (follows OS preference).
+              Stored locally by your browser.
+            </p>
+            <UCard>
+              <div class="space-y-4">
+                <UFormField label="Appearance">
+                  <USelect
+                    v-model="colorMode.preference"
+                    :items="themeOptions"
+                    class="w-full max-w-xs"
+                  />
+                </UFormField>
+                <p class="text-xs text-muted">
+                  Currently rendering as
+                  <UBadge :label="colorMode.value" variant="subtle" size="xs" />
+                </p>
+              </div>
+            </UCard>
+          </section>
         </div>
       </div>
     </template>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "arkaos",
-  "version": "2.87.0",
+  "version": "2.89.0",
   "description": "The Operating System for AI Agent Teams",
   "type": "module",
   "bin": {

package/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "arkaos-core"
-version = "2.87.0"
+version = "2.89.0"
 description = "Core engine for ArkaOS — The Operating System for AI Agent Teams"
 readme = "README.md"
 license = {text = "MIT"}

package/scripts/dashboard-api.py

@@ -612,6 +612,32 @@ def knowledge_search(q: str = Query(...), top_k: int = Query(5)):
     return {"results": results, "query": q, "total": len(results)}
 
 
+@app.delete("/api/knowledge/sources")
+def knowledge_delete_source(source: str = Query(...)):
+    """PR71 v2.88.0 — remove all chunks from a given source.
+
+    Operators sometimes ingest a noisy / wrong source and want to nuke
+    every chunk that came from it without rebuilding the whole vector
+    DB. The vector store already exposes `remove_file(source)` —
+    this endpoint just exposes it on the wire.
+
+    Returns ``{deleted: N, source: "..."}``. Refuses empty source
+    paths so a runaway client doesn't accidentally request "delete
+    everything that has no source".
+    """
+    clean = (source or "").strip()
+    if not clean:
+        return {"error": "source query param is required"}
+    store = _get_vector_store()
+    if not store:
+        return {"error": "vector store unavailable", "deleted": 0}
+    try:
+        deleted = store.remove_file(clean)
+    except Exception as exc:  # noqa: BLE001 — surface as 200+error
+        return {"error": f"delete failed: {exc}", "deleted": 0}
+    return {"deleted": int(deleted), "source": clean}
+
+
 @app.get("/api/health")
 def health():
     """PR70 v2.87.0 — per-check severity + response timestamp.
@@ -1084,6 +1110,189 @@ def llm_costs_trend(days: int = 7):
     return {"days": out_days, "period_days": capped_days}
 
 
+# --- Settings sections (PR63b v2.89.0): MCPs / Hooks / Plugins ---
+
+
+@app.get("/api/settings/mcps")
+def settings_mcps():
+    """List MCP servers across user-global config + ArkaOS registry.
+
+    Reads:
+      - ``~/.claude.json::mcpServers`` (Claude Code user-global)
+      - ``~/.claude/skills/arka/mcps/registry.json`` (ArkaOS registry)
+
+    Returns a deduplicated list with each entry's name + source +
+    transport (stdio / http / sse) where the config exposes it.
+    """
+    out: list[dict] = []
+    seen: set[str] = set()
+
+    user_global = Path.home() / ".claude.json"
+    if user_global.exists():
+        try:
+            data = json.loads(user_global.read_text(encoding="utf-8"))
+        except (json.JSONDecodeError, OSError):
+            data = {}
+        for name, cfg in (data.get("mcpServers") or {}).items():
+            if not isinstance(name, str) or name in seen:
+                continue
+            seen.add(name)
+            out.append({
+                "name": name,
+                "source": "user-global",
+                "transport": _detect_mcp_transport(cfg),
+                "command": (cfg or {}).get("command", "") if isinstance(cfg, dict) else "",
+            })
+
+    registry = Path.home() / ".claude" / "skills" / "arka" / "mcps" / "registry.json"
+    if registry.exists():
+        try:
+            data = json.loads(registry.read_text(encoding="utf-8"))
+        except (json.JSONDecodeError, OSError):
+            data = {}
+        servers = data.get("servers") if isinstance(data, dict) else None
+        if isinstance(servers, dict):
+            for name, cfg in servers.items():
+                if not isinstance(name, str) or name in seen:
+                    continue
+                seen.add(name)
+                out.append({
+                    "name": name,
+                    "source": "arkaos-registry",
+                    "transport": _detect_mcp_transport(cfg),
+                    "command": (cfg or {}).get("command", "") if isinstance(cfg, dict) else "",
+                })
+        elif isinstance(servers, list):
+            for entry in servers:
+                if not isinstance(entry, dict):
+                    continue
+                name = str(entry.get("name") or "")
+                if not name or name in seen:
+                    continue
+                seen.add(name)
+                out.append({
+                    "name": name,
+                    "source": "arkaos-registry",
+                    "transport": _detect_mcp_transport(entry),
+                    "command": entry.get("command", ""),
+                })
+
+    out.sort(key=lambda r: r["name"])
+    return {"mcps": out, "total": len(out)}
+
+
+def _detect_mcp_transport(cfg: object) -> str:
+    """Best-effort transport sniff from an MCP server config dict."""
+    if not isinstance(cfg, dict):
+        return "unknown"
+    if cfg.get("url"):
+        return "http"
+    if cfg.get("transport"):
+        return str(cfg["transport"])
+    if cfg.get("command"):
+        return "stdio"
+    return "unknown"
+
+
+@app.get("/api/settings/hooks")
+def settings_hooks():
+    """Inspect the hooks block of ~/.claude/settings.json.
+
+    Returns one row per hook type with command paths + timeouts so the
+    operator can see at a glance which hooks are wired and which are
+    missing. We never edit the file from here (Hooks ship from the
+    ArkaOS installer); this is purely read-only diagnostics.
+    """
+    settings_file = Path.home() / ".claude" / "settings.json"
+    if not settings_file.exists():
+        return {"hooks": [], "settings_path": str(settings_file)}
+    try:
+        data = json.loads(settings_file.read_text(encoding="utf-8"))
+    except (json.JSONDecodeError, OSError):
+        return {"hooks": [], "settings_path": str(settings_file)}
+
+    hooks_block = data.get("hooks") if isinstance(data, dict) else None
+    if not isinstance(hooks_block, dict):
+        return {"hooks": [], "settings_path": str(settings_file)}
+
+    rows: list[dict] = []
+    for hook_type, entries in hooks_block.items():
+        if not isinstance(entries, list):
+            continue
+        commands: list[dict] = []
+        for entry in entries:
+            if not isinstance(entry, dict):
+                continue
+            inner = entry.get("hooks") if isinstance(entry, dict) else None
+            if not isinstance(inner, list):
+                continue
+            for h in inner:
+                if not isinstance(h, dict):
+                    continue
+                commands.append({
+                    "command": str(h.get("command", ""))[:200],
+                    "type": str(h.get("type", "command")),
+                    "timeout": h.get("timeout"),
+                })
+        rows.append({
+            "hook": hook_type,
+            "count": len(commands),
+            "commands": commands,
+        })
+    rows.sort(key=lambda r: r["hook"])
+    hard_enforcement = bool(
+        isinstance(data.get("hooks"), dict)
+        and data["hooks"].get("hardEnforcement")
+    )
+    return {
+        "hooks": rows,
+        "settings_path": str(settings_file),
+        "hard_enforcement": hard_enforcement,
+    }
+
+
+@app.get("/api/settings/plugins")
+def settings_plugins():
+    """List Claude Code plugins installed via ~/.claude/plugins/installed_plugins.json.
+
+    The PR43 auto-installer + PR55 marketplace flow both touch this
+    file. Format is ``{"plugins": {"<name>@<marketplace>": [entry,...]}}``.
+    We flatten to one row per (name, marketplace, version).
+    """
+    plugins_file = Path.home() / ".claude" / "plugins" / "installed_plugins.json"
+    if not plugins_file.exists():
+        return {"plugins": [], "total": 0, "plugins_path": str(plugins_file)}
+    try:
+        data = json.loads(plugins_file.read_text(encoding="utf-8"))
+    except (json.JSONDecodeError, OSError):
+        return {"plugins": [], "total": 0, "plugins_path": str(plugins_file)}
+
+    rows: list[dict] = []
+    plugins_map = data.get("plugins") if isinstance(data, dict) else None
+    if isinstance(plugins_map, dict):
+        for key, entries in plugins_map.items():
+            if not isinstance(entries, list):
+                continue
+            name, _, marketplace = str(key).partition("@")
+            for entry in entries:
+                if not isinstance(entry, dict):
+                    continue
+                rows.append({
+                    "name": name,
+                    "marketplace": marketplace,
+                    "version": entry.get("version", ""),
+                    "scope": entry.get("scope", ""),
+                    "installed_at": entry.get("installedAt", ""),
+                    "last_updated": entry.get("lastUpdated", ""),
+                })
+    rows.sort(key=lambda r: (r["marketplace"], r["name"]))
+    return {
+        "plugins": rows,
+        "total": len(rows),
+        "plugins_path": str(plugins_file),
+    }
+
+
 # --- Profile (PR63 v2.81.0) ---
 
 @app.get("/api/profile")