arkaos 3.71.0 → 3.72.0

package/installer/autostart.js

@@ -0,0 +1,178 @@
+/**
+ * Cross-OS autostart for the ArkaOS dashboard (v3.72.0, feature #2).
+ *
+ * Opt-in: `npx arkaos autostart enable|disable|status`. Installs a per-OS
+ * boot item that runs `scripts/start-dashboard.sh` (macOS/Linux) or
+ * `scripts/start-dashboard.ps1` (Windows) — the same launcher the
+ * `dashboard` command uses, which already starts the Python API + the
+ * dashboard UI (preferring the production build, falling back to dev).
+ *
+ * ESM, Node + Bun, no interactive prompts. The unit-generation (`unitFor`)
+ * is pure so it can be unit-tested without touching the OS.
+ */
+
+import { execSync } from "node:child_process";
+import { existsSync, mkdirSync, rmSync, writeFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+
+export const AUTOSTART_LABEL = "io.wizardingcode.arkaos.dashboard";
+const SERVICE_NAME = "arkaos-dashboard.service";
+
+function defaultRepoRoot() {
+  return join(dirname(fileURLToPath(import.meta.url)), "..");
+}
+
+/** Pure: the boot unit for a given platform. Throws on unsupported OS. */
+export function unitFor(os, { repoRoot, home }) {
+  if (os === "darwin") {
+    const startScript = `${repoRoot}/scripts/start-dashboard.sh`;
+    const log = `${home}/.arkaos/logs/dashboard-autostart.log`;
+    const content = `<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+  <key>Label</key>
+  <string>${AUTOSTART_LABEL}</string>
+  <key>ProgramArguments</key>
+  <array>
+    <string>/bin/bash</string>
+    <string>${startScript}</string>
+  </array>
+  <key>EnvironmentVariables</key>
+  <dict>
+    <key>ARKAOS_ROOT</key>
+    <string>${repoRoot}</string>
+  </dict>
+  <key>RunAtLoad</key>
+  <true/>
+  <key>StandardOutPath</key>
+  <string>${log}</string>
+  <key>StandardErrorPath</key>
+  <string>${log}</string>
+</dict>
+</plist>
+`;
+    return {
+      kind: "launchd",
+      path: join(home, "Library", "LaunchAgents", `${AUTOSTART_LABEL}.plist`),
+      content,
+    };
+  }
+
+  if (os === "linux") {
+    const startScript = `${repoRoot}/scripts/start-dashboard.sh`;
+    const content = `[Unit]
+Description=ArkaOS Dashboard (Python API + UI)
+After=network.target
+
+[Service]
+Type=simple
+Environment=ARKAOS_ROOT=${repoRoot}
+ExecStart=/bin/bash ${startScript}
+Restart=on-failure
+
+[Install]
+WantedBy=default.target
+`;
+    return {
+      kind: "systemd",
+      path: join(home, ".config", "systemd", "user", SERVICE_NAME),
+      content,
+    };
+  }
+
+  if (os === "win32") {
+    const ps1 = join(repoRoot, "scripts", "start-dashboard.ps1");
+    const content = `@echo off
+rem ArkaOS dashboard autostart (login).
+powershell -NoProfile -NonInteractive -ExecutionPolicy Bypass -File "${ps1}"
+`;
+    return {
+      kind: "startup",
+      path: join(
+        home,
+        "AppData", "Roaming", "Microsoft", "Windows",
+        "Start Menu", "Programs", "Startup",
+        "arkaos-dashboard.cmd",
+      ),
+      content,
+    };
+  }
+
+  throw new Error(`unsupported platform for autostart: ${os}`);
+}
+
+function _silent(cmd) {
+  try {
+    execSync(cmd, { stdio: "pipe" });
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+export function enable({ repoRoot = defaultRepoRoot() } = {}) {
+  const unit = unitFor(process.platform, { repoRoot, home: homedir() });
+  mkdirSync(dirname(unit.path), { recursive: true });
+  mkdirSync(join(homedir(), ".arkaos", "logs"), { recursive: true });
+  writeFileSync(unit.path, unit.content, "utf8");
+  if (unit.kind === "launchd") {
+    _silent(`launchctl unload "${unit.path}"`);
+    if (!_silent(`launchctl load -w "${unit.path}"`)) {
+      return { ok: false, path: unit.path,
+        message: `Plist written but launchctl load failed — it will still run at next login.` };
+    }
+  } else if (unit.kind === "systemd") {
+    _silent("systemctl --user daemon-reload");
+    if (!_silent(`systemctl --user enable --now ${SERVICE_NAME}`)) {
+      return { ok: false, path: unit.path,
+        message: `Service written but systemctl enable failed — check 'systemctl --user' availability.` };
+    }
+  }
+  // startup: writing the .cmd is sufficient; it runs on next login.
+  return { ok: true, path: unit.path,
+    message: `Autostart enabled (${unit.kind}). The dashboard will start on login.` };
+}
+
+export function disable() {
+  const unit = unitFor(process.platform, { repoRoot: defaultRepoRoot(), home: homedir() });
+  if (unit.kind === "launchd") _silent(`launchctl unload "${unit.path}"`);
+  else if (unit.kind === "systemd") _silent(`systemctl --user disable --now ${SERVICE_NAME}`);
+  if (existsSync(unit.path)) rmSync(unit.path);
+  return { ok: true, path: unit.path, message: "Autostart disabled." };
+}
+
+export function status() {
+  let unit;
+  try {
+    unit = unitFor(process.platform, { repoRoot: defaultRepoRoot(), home: homedir() });
+  } catch (err) {
+    return { installed: false, supported: false, message: err.message };
+  }
+  return {
+    installed: existsSync(unit.path),
+    supported: true,
+    kind: unit.kind,
+    path: unit.path,
+  };
+}
+
+export async function autostart(args = []) {
+  const action = (args[0] || "status").toLowerCase();
+  if (action === "enable") {
+    const r = enable();
+    console.log(`  ${r.ok ? "✓" : "⚠"} ${r.message}\n    ${r.path}`);
+  } else if (action === "disable") {
+    const r = disable();
+    console.log(`  ✓ ${r.message}`);
+  } else if (action === "status") {
+    const s = status();
+    if (!s.supported) console.log(`  Autostart not supported here: ${s.message}`);
+    else console.log(`  Autostart: ${s.installed ? "ENABLED" : "disabled"} (${s.kind})\n    ${s.path}`);
+  } else {
+    console.error(`  Unknown autostart action: ${action}. Use enable | disable | status.`);
+    process.exitCode = 1;
+  }
+}

package/installer/cli.js

@@ -45,6 +45,7 @@ Usage:
   npx arkaos migrate          Migrate from v1 to v2
   npx arkaos migrate-user-data  Move user data (~/.claude/skills/arka/ → ~/.arkaos/)
   npx arkaos dashboard        Start monitoring dashboard
+  npx arkaos autostart <enable|disable|status>  Start dashboard on boot
   npx arkaos keys             Manage API keys (OpenAI, fal.ai, etc.)
   npx arkaos doctor           Run health checks
   npx arkaos uninstall        Remove ArkaOS
@@ -101,6 +102,12 @@ async function main() {
       await update();
       break;
 
+    case "autostart": {
+      const { autostart } = await import("./autostart.js");
+      await autostart(positionals.slice(1));
+      break;
+    }
+
     case "uninstall":
       const { uninstall } = await import("./uninstall.js");
       await uninstall();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "arkaos",
-  "version": "3.71.0",
+  "version": "3.72.0",
   "description": "The Operating System for AI Agent Teams",
   "type": "module",
   "bin": {

package/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "arkaos-core"
-version = "3.71.0"
+version = "3.72.0"
 description = "Core engine for ArkaOS — The Operating System for AI Agent Teams"
 readme = "README.md"
 license = {text = "MIT"}

package/scripts/dashboard-api.py

@@ -20,7 +20,7 @@ from typing import Optional
 ARKAOS_ROOT = Path(os.environ.get("ARKAOS_ROOT", Path(__file__).resolve().parent.parent))
 sys.path.insert(0, str(ARKAOS_ROOT))
 
-from fastapi import FastAPI, Query, WebSocket, WebSocketDisconnect
+from fastapi import FastAPI, Query, Request, WebSocket, WebSocketDisconnect
 from fastapi.middleware.cors import CORSMiddleware
 
 app = FastAPI(title="ArkaOS Dashboard API", version="2.2.0")
@@ -2259,6 +2259,160 @@ def workflow_update_yaml(workflow_id: str, body: dict):
     return {"updated": True, "id": workflow_id, "file": str(target)}
 
 
+# ============================================================================
+# v3.72.0 — Cognition: surface Dreaming insights (read-only) to the dashboard.
+# Reads existing markdown insights from <vault>/Projects/ArkaOS/Dreams via
+# core.cognition.dreams_reader. No new engine — pure read.
+# ============================================================================
+
+
+def _dreams_dir():
+    """Resolve the Dreams folder from the user's vault, or None."""
+    from core.runtime.path_resolver import load_profile, ProfileMissingError
+    try:
+        profile = load_profile()
+    except ProfileMissingError:
+        return None
+    except Exception:  # noqa: BLE001 — never break the endpoint on profile errors
+        return None
+    vault = getattr(profile, "vault_path", None)
+    return (Path(vault) / "Projects" / "ArkaOS" / "Dreams") if vault else None
+
+
+def _insight_to_dict(ins) -> dict:
+    return {
+        "date": ins.date,
+        "title": ins.title,
+        "confidence": ins.confidence,
+        "sources": list(ins.sources),
+        "tags": list(ins.tags),
+        "body": ins.body,
+    }
+
+
+@app.get("/api/cognition/insights")
+def cognition_insights(days: int = 7):
+    """Recent Dreaming insights within the given window. Never 500s."""
+    dreams = _dreams_dir()
+    if dreams is None:
+        return {"insights": [], "available": False}
+    from core.cognition.dreams_reader import list_insights
+    items = list_insights(dreams, since_days=max(1, int(days)))
+    return {"insights": [_insight_to_dict(i) for i in items], "available": True}
+
+
+@app.get("/api/cognition/status")
+def cognition_status():
+    """Insight counts + confidence breakdown + last activity date."""
+    dreams = _dreams_dir()
+    if dreams is None:
+        return {
+            "today": 0, "week": 0, "total": 0,
+            "by_confidence": {"high": 0, "medium": 0, "low": 0},
+            "vault_configured": False, "last_date": None,
+        }
+    from core.cognition.dreams_reader import list_insights
+    all_items = list_insights(dreams, since_days=36500)
+    by_conf = {"high": 0, "medium": 0, "low": 0}
+    for i in all_items:
+        by_conf[i.confidence if i.confidence in by_conf else "medium"] += 1
+    return {
+        "today": len(list_insights(dreams, since_days=1)),
+        "week": len(list_insights(dreams, since_days=7)),
+        "total": len(all_items),
+        "by_confidence": by_conf,
+        "vault_configured": True,
+        "last_date": all_items[0].date if all_items else None,
+    }
+
+
+# ============================================================================
+# v3.72.0 — System: version check + one-click core update (feature #3).
+# ============================================================================
+
+_npm_latest_cache = {"version": None, "ts": 0.0}
+
+
+def _current_version() -> str:
+    root = os.environ.get("ARKAOS_ROOT") or str(Path(__file__).resolve().parent.parent)
+    try:
+        return (Path(root) / "VERSION").read_text(encoding="utf-8").strip()
+    except OSError:
+        return "0.0.0"
+
+
+def _npm_latest_version():
+    import subprocess
+    import time
+    now = time.time()
+    if _npm_latest_cache["version"] and now - _npm_latest_cache["ts"] < 600:
+        return _npm_latest_cache["version"]
+    try:
+        out = subprocess.run(
+            ["npm", "view", "arkaos", "version"],
+            capture_output=True, text=True, timeout=20,
+        )
+        latest = (out.stdout or "").strip() or None
+    except Exception:  # noqa: BLE001
+        latest = None
+    if latest:
+        _npm_latest_cache["version"] = latest
+        _npm_latest_cache["ts"] = now
+    return latest
+
+
+def _is_newer(latest: str, current: str) -> bool:
+    import re
+    def _parts(v):
+        nums = [int(n) for n in re.findall(r"\d+", v)[:3]]
+        return nums or [0]
+    try:
+        return _parts(latest) > _parts(current)
+    except Exception:  # noqa: BLE001
+        return False
+
+
+def _run_core_update() -> dict:
+    import subprocess
+    try:
+        out = subprocess.run(
+            ["npx", "arkaos@latest", "update"],
+            capture_output=True, text=True, timeout=600,
+        )
+        tail = ((out.stdout or "") + (out.stderr or ""))[-2000:]
+        return {"ok": out.returncode == 0, "output": tail}
+    except Exception as exc:  # noqa: BLE001
+        return {"ok": False, "output": f"update failed: {exc}"}
+
+
+@app.get("/api/system/version")
+def system_version():
+    """Current installed version vs the latest on npm."""
+    current = _current_version()
+    latest = _npm_latest_version()
+    return {
+        "current": current,
+        "latest": latest,
+        "update_available": bool(latest) and _is_newer(latest, current),
+    }
+
+
+@app.post("/api/system/update")
+def system_update(request: Request):
+    """Run `npx arkaos@latest update` (update step 1). Step 2 (project
+    sync via /arka update) is a Claude Code action the UI prompts for.
+
+    A regular POST is CORS-protected; as defense-in-depth for an endpoint
+    that runs an update, reject any explicitly non-localhost origin (an
+    empty origin — local CLI / same-origin — is allowed).
+    """
+    origin = request.headers.get("origin", "")
+    if origin and not _terminal_origin_ok(origin):
+        from fastapi import HTTPException
+        raise HTTPException(status_code=403, detail="origin not allowed")
+    return _run_core_update()
+
+
 # ============================================================================
 # PR99a v3.67.0 — Terminal PTY WebSocket + REST.
 #
@@ -2282,6 +2436,12 @@ def _terminal_origin_ok(origin: str) -> bool:
     )
 
 
+# v3.71.1 — enforce a single live WebSocket per session (latest wins), so a
+# reload or a second tab can't fight over the one PTY fd reader.
+from core.terminal.connections import ConnectionRegistry as _TerminalConnRegistry
+_terminal_conns = _TerminalConnRegistry()
+
+
 @app.get("/api/terminal/token")
 def terminal_token_endpoint():
     """Return the per-process bearer token used in WS handshakes.
@@ -2366,6 +2526,16 @@ async def ws_terminal(ws: WebSocket, session_id: str, token: str = Query("")):
 
     await ws.accept()
 
+    # v3.71.1 — single live connection per session: a newer connection
+    # (a reload, or a second tab) supersedes the previous one, which we
+    # close so it stops pumping the shared PTY fd.
+    superseded = _terminal_conns.acquire(session_id, ws)
+    if superseded is not None:
+        try:
+            await superseded.close(code=4409, reason="superseded by a newer connection")
+        except Exception:
+            pass
+
     # v3.71.0 — replay recent scrollback so a client reconnecting after
     # the operator navigated away / reloaded restores its session as it
     # left it. Sent before the live reader is attached, so the historical
@@ -2437,10 +2607,13 @@ async def ws_terminal(ws: WebSocket, session_id: str, token: str = Query("")):
         pass
     finally:
         pump_task.cancel()
-        try:
-            loop.remove_reader(session.master_fd)
-        except (ValueError, OSError):
-            pass
+        # Only the still-active connection owns the fd reader — a superseded
+        # connection tearing down must not remove its replacement's reader.
+        if _terminal_conns.release(session_id, ws):
+            try:
+                loop.remove_reader(session.master_fd)
+            except (ValueError, OSError):
+                pass
 
 
 @app.on_event("startup")