beecork 1.3.0 → 1.3.2

package/dist/daemon.js

@@ -178,7 +178,7 @@ async function main() {
                     const anomaly = checkAnomalies();
                     if (anomaly)
                         broadcastNotify(anomaly);
-                }).catch(() => { });
+                }).catch(err => logger.debug('Anomaly check failed:', err));
             }
         }
         catch (err) {
@@ -278,4 +278,3 @@ main().catch(err => {
     closeDb();
     process.exit(1);
 });
-//# sourceMappingURL=daemon.js.map

package/dist/dashboard/html.d.ts

@@ -1,2 +1 @@
 export declare function getDashboardHtml(token: string): string;
-//# sourceMappingURL=html.d.ts.map

package/dist/dashboard/html.js

@@ -5,20 +5,10 @@ export function getDashboardHtml(token) {
   <meta charset="UTF-8">
   <meta name="viewport" content="width=device-width, initial-scale=1.0">
   <title>Beecork Dashboard</title>
-  <script src="https://cdn.tailwindcss.com"></script>
-  <script>
-    tailwind.config = {
-      theme: {
-        extend: {
-          colors: {
-            honey: { 50: '#fefce8', 100: '#fef9c3', 200: '#fef08a', 300: '#fde047', 400: '#facc15', 500: '#eab308', 600: '#ca8a04', 700: '#a16207' },
-            bee: { 900: '#111111', 850: '#181818', 800: '#1e1e1e', 750: '#252525', 700: '#2e2e2e', 600: '#3a3a3a', 500: '#555555' }
-          }
-        }
-      }
-    }
-  </script>
   <style>
+    /* Compiled Tailwind CSS (v4.2.2) — generated via: npx tailwindcss --content src/dashboard/html.ts --minify */
+    /*! tailwindcss v4.2.2 | MIT License | https://tailwindcss.com */@layer properties{@supports (((-webkit-hyphens:none)) and (not (margin-trim:inline))) or ((-moz-orient:inline) and (not (color:rgb(from red r g b)))){*,:before,:after,::backdrop{--tw-rotate-x:initial;--tw-rotate-y:initial;--tw-rotate-z:initial;--tw-skew-x:initial;--tw-skew-y:initial;--tw-space-y-reverse:0;--tw-border-style:solid;--tw-leading:initial;--tw-font-weight:initial;--tw-tracking:initial;--tw-outline-style:solid;--tw-blur:initial;--tw-brightness:initial;--tw-contrast:initial;--tw-grayscale:initial;--tw-hue-rotate:initial;--tw-invert:initial;--tw-opacity:initial;--tw-saturate:initial;--tw-sepia:initial;--tw-drop-shadow:initial;--tw-drop-shadow-color:initial;--tw-drop-shadow-alpha:100%;--tw-drop-shadow-size:initial}}}@layer theme{:root,:host{--font-sans:ui-sans-serif, system-ui, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji";--font-mono:ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", "Courier New", monospace;--color-red-200:oklch(88.5% .062 18.334);--color-red-400:oklch(70.4% .191 22.216);--color-red-900:oklch(39.6% .141 25.723);--color-green-200:oklch(92.5% .084 155.995);--color-green-400:oklch(79.2% .209 151.711);--color-green-900:oklch(39.3% .095 152.535);--color-blue-400:oklch(70.7% .165 254.624);--color-blue-900:oklch(37.9% .146 265.522);--color-purple-400:oklch(71.4% .203 305.504);--color-purple-900:oklch(38.1% .176 304.987);--color-gray-200:oklch(92.8% .006 264.531);--color-gray-300:oklch(87.2% .01 258.338);--color-gray-400:oklch(70.7% .022 261.325);--color-gray-500:oklch(55.1% .027 264.364);--color-gray-600:oklch(44.6% .03 256.802);--color-gray-700:oklch(37.3% .034 259.733);--color-black:#000;--color-white:#fff;--spacing:.25rem;--container-lg:32rem;--text-xs:.75rem;--text-xs--line-height:calc(1 / .75);--text-sm:.875rem;--text-sm--line-height:calc(1.25 / .875);--text-base:1rem;--text-base--line-height:calc(1.5 / 1);--text-xl:1.25rem;--text-xl--line-height:calc(1.75 / 1.25);--font-weight-medium:500;--font-weight-semibold:600;--tracking-wider:.05em;--leading-relaxed:1.625;--radius-lg:.5rem;--default-transition-duration:.15s;--default-transition-timing-function:cubic-bezier(.4, 0, .2, 1);--default-font-family:var(--font-sans);--default-mono-font-family:var(--font-mono);--color-honey-400:#facc15;--color-honey-500:#eab308;--color-honey-600:#ca8a04;--color-bee-900:#111;--color-bee-850:#181818;--color-bee-800:#1e1e1e;--color-bee-750:#252525;--color-bee-700:#2e2e2e}}@layer base{*,:after,:before,::backdrop{box-sizing:border-box;border:0 solid;margin:0;padding:0}::file-selector-button{box-sizing:border-box;border:0 solid;margin:0;padding:0}html,:host{-webkit-text-size-adjust:100%;tab-size:4;line-height:1.5;font-family:var(--default-font-family,ui-sans-serif, system-ui, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji");font-feature-settings:var(--default-font-feature-settings,normal);font-variation-settings:var(--default-font-variation-settings,normal);-webkit-tap-highlight-color:transparent}hr{height:0;color:inherit;border-top-width:1px}abbr:where([title]){-webkit-text-decoration:underline dotted;text-decoration:underline dotted}h1,h2,h3,h4,h5,h6{font-size:inherit;font-weight:inherit}a{color:inherit;-webkit-text-decoration:inherit;text-decoration:inherit}b,strong{font-weight:bolder}code,kbd,samp,pre{font-family:var(--default-mono-font-family,ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", "Courier New", monospace);font-feature-settings:var(--default-mono-font-feature-settings,normal);font-variation-settings:var(--default-mono-font-variation-settings,normal);font-size:1em}small{font-size:80%}sub,sup{vertical-align:baseline;font-size:75%;line-height:0;position:relative}sub{bottom:-.25em}sup{top:-.5em}table{text-indent:0;border-color:inherit;border-collapse:collapse}:-moz-focusring{outline:auto}progress{vertical-align:baseline}summary{display:list-item}ol,ul,menu{list-style:none}img,svg,video,canvas,audio,iframe,embed,object{vertical-align:middle;display:block}img,video{max-width:100%;height:auto}button,input,select,optgroup,textarea{font:inherit;font-feature-settings:inherit;font-variation-settings:inherit;letter-spacing:inherit;color:inherit;opacity:1;background-color:#0000;border-radius:0}::file-selector-button{font:inherit;font-feature-settings:inherit;font-variation-settings:inherit;letter-spacing:inherit;color:inherit;opacity:1;background-color:#0000;border-radius:0}:where(select:is([multiple],[size])) optgroup{font-weight:bolder}:where(select:is([multiple],[size])) optgroup option{padding-inline-start:20px}::file-selector-button{margin-inline-end:4px}::placeholder{opacity:1}@supports (not ((-webkit-appearance:-apple-pay-button))) or (contain-intrinsic-size:1px){::placeholder{color:currentColor}@supports (color:color-mix(in lab, red, red)){::placeholder{color:color-mix(in oklab, currentcolor 50%, transparent)}}}textarea{resize:vertical}::-webkit-search-decoration{-webkit-appearance:none}::-webkit-date-and-time-value{min-height:1lh;text-align:inherit}::-webkit-datetime-edit{display:inline-flex}::-webkit-datetime-edit-fields-wrapper{padding:0}::-webkit-datetime-edit{padding-block:0}::-webkit-datetime-edit-year-field{padding-block:0}::-webkit-datetime-edit-month-field{padding-block:0}::-webkit-datetime-edit-day-field{padding-block:0}::-webkit-datetime-edit-hour-field{padding-block:0}::-webkit-datetime-edit-minute-field{padding-block:0}::-webkit-datetime-edit-second-field{padding-block:0}::-webkit-datetime-edit-millisecond-field{padding-block:0}::-webkit-datetime-edit-meridiem-field{padding-block:0}::-webkit-calendar-picker-indicator{line-height:1}:-moz-ui-invalid{box-shadow:none}button,input:where([type=button],[type=reset],[type=submit]){appearance:button}::file-selector-button{appearance:button}::-webkit-inner-spin-button{height:auto}::-webkit-outer-spin-button{height:auto}[hidden]:where(:not([hidden=until-found])){display:none!important}}@layer components;@layer utilities{.absolute{position:absolute}.fixed{position:fixed}.relative{position:relative}.start{inset-inline-start:var(--spacing)}.end{inset-inline-end:var(--spacing)}.right-4{right:calc(var(--spacing) * 4)}.bottom-4{bottom:calc(var(--spacing) * 4)}.z-50{z-index:50}.container{width:100%}@media (min-width:40rem){.container{max-width:40rem}}@media (min-width:48rem){.container{max-width:48rem}}@media (min-width:64rem){.container{max-width:64rem}}@media (min-width:80rem){.container{max-width:80rem}}@media (min-width:96rem){.container{max-width:96rem}}.mt-0\.5{margin-top:calc(var(--spacing) * .5)}.mt-1{margin-top:calc(var(--spacing) * 1)}.mt-5{margin-top:calc(var(--spacing) * 5)}.mb-1{margin-bottom:calc(var(--spacing) * 1)}.mb-4{margin-bottom:calc(var(--spacing) * 4)}.ml-2{margin-left:calc(var(--spacing) * 2)}.block{display:block}.contents{display:contents}.flex{display:flex}.grid{display:grid}.hidden{display:none}.table{display:table}.h-20{height:calc(var(--spacing) * 20)}.h-24{height:calc(var(--spacing) * 24)}.h-48{height:calc(var(--spacing) * 48)}.h-\[var\(--header-height\)\]{height:var(--header-height)}.h-full{height:100%}.max-h-48{max-height:calc(var(--spacing) * 48)}.max-h-\[calc\(100vh-240px\)\]{max-height:calc(100vh - 240px)}.w-full{width:100%}.max-w-lg{max-width:var(--container-lg)}.min-w-0{min-width:calc(var(--spacing) * 0)}.flex-1{flex:1}.shrink-0{flex-shrink:0}.grow{flex-grow:1}.transform{transform:var(--tw-rotate-x,) var(--tw-rotate-y,) var(--tw-rotate-z,) var(--tw-skew-x,) var(--tw-skew-y,)}.cursor-pointer{cursor:pointer}.resize-none{resize:none}.grid-cols-2{grid-template-columns:repeat(2,minmax(0,1fr))}.flex-col{flex-direction:column}.items-center{align-items:center}.items-end{align-items:flex-end}.items-start{align-items:flex-start}.justify-between{justify-content:space-between}.justify-end{justify-content:flex-end}.gap-1{gap:calc(var(--spacing) * 1)}.gap-2{gap:calc(var(--spacing) * 2)}.gap-3{gap:calc(var(--spacing) * 3)}.gap-4{gap:calc(var(--spacing) * 4)}:where(.space-y-3>:not(:last-child)){--tw-space-y-reverse:0;margin-block-start:calc(calc(var(--spacing) * 3) * var(--tw-space-y-reverse));margin-block-end:calc(calc(var(--spacing) * 3) * calc(1 - var(--tw-space-y-reverse)))}.truncate{text-overflow:ellipsis;white-space:nowrap;overflow:hidden}.overflow-hidden{overflow:hidden}.overflow-y-auto{overflow-y:auto}.rounded{border-radius:.25rem}.rounded-lg{border-radius:var(--radius-lg)}.border{border-style:var(--tw-border-style);border-width:1px}.border-t{border-top-style:var(--tw-border-style);border-top-width:1px}.border-r{border-right-style:var(--tw-border-style);border-right-width:1px}.border-b{border-bottom-style:var(--tw-border-style);border-bottom-width:1px}.border-b-2{border-bottom-style:var(--tw-border-style);border-bottom-width:2px}.border-bee-700{border-color:var(--color-bee-700)}.border-honey-500{border-color:var(--color-honey-500)}.border-transparent{border-color:#0000}.bg-bee-800{background-color:var(--color-bee-800)}.bg-bee-850{background-color:var(--color-bee-850)}.bg-bee-900{background-color:var(--color-bee-900)}.bg-blue-900\/50{background-color:#1c398e80}@supports (color:color-mix(in lab, red, red)){.bg-blue-900\/50{background-color:color-mix(in oklab, var(--color-blue-900) 50%, transparent)}}.bg-green-900\/90{background-color:#0d542be6}@supports (color:color-mix(in lab, red, red)){.bg-green-900\/90{background-color:color-mix(in oklab, var(--color-green-900) 90%, transparent)}}.bg-honey-600{background-color:var(--color-honey-600)}.bg-purple-900\/50{background-color:#59168b80}@supports (color:color-mix(in lab, red, red)){.bg-purple-900\/50{background-color:color-mix(in oklab, var(--color-purple-900) 50%, transparent)}}.bg-red-900\/90{background-color:#82181ae6}@supports (color:color-mix(in lab, red, red)){.bg-red-900\/90{background-color:color-mix(in oklab, var(--color-red-900) 90%, transparent)}}.p-3{padding:calc(var(--spacing) * 3)}.p-4{padding:calc(var(--spacing) * 4)}.p-6{padding:calc(var(--spacing) * 6)}.px-1\.5{padding-inline:calc(var(--spacing) * 1.5)}.px-2{padding-inline:calc(var(--spacing) * 2)}.px-3{padding-inline:calc(var(--spacing) * 3)}.px-4{padding-inline:calc(var(--spacing) * 4)}.py-0\.5{padding-block:calc(var(--spacing) * .5)}.py-1{padding-block:calc(var(--spacing) * 1)}.py-1\.5{padding-block:calc(var(--spacing) * 1.5)}.py-2{padding-block:calc(var(--spacing) * 2)}.py-2\.5{padding-block:calc(var(--spacing) * 2.5)}.py-3{padding-block:calc(var(--spacing) * 3)}.py-8{padding-block:calc(var(--spacing) * 8)}.py-16{padding-block:calc(var(--spacing) * 16)}.pl-5{padding-left:calc(var(--spacing) * 5)}.text-center{text-align:center}.font-mono{font-family:var(--font-mono)}.font-sans{font-family:var(--font-sans)}.text-base{font-size:var(--text-base);line-height:var(--tw-leading,var(--text-base--line-height))}.text-sm{font-size:var(--text-sm);line-height:var(--tw-leading,var(--text-sm--line-height))}.text-xl{font-size:var(--text-xl);line-height:var(--tw-leading,var(--text-xl--line-height))}.text-xs{font-size:var(--text-xs);line-height:var(--tw-leading,var(--text-xs--line-height))}.leading-relaxed{--tw-leading:var(--leading-relaxed);line-height:var(--leading-relaxed)}.font-medium{--tw-font-weight:var(--font-weight-medium);font-weight:var(--font-weight-medium)}.font-semibold{--tw-font-weight:var(--font-weight-semibold);font-weight:var(--font-weight-semibold)}.tracking-wider{--tw-tracking:var(--tracking-wider);letter-spacing:var(--tracking-wider)}.break-words{overflow-wrap:break-word}.whitespace-nowrap{white-space:nowrap}.whitespace-pre-wrap{white-space:pre-wrap}.text-black{color:var(--color-black)}.text-blue-400{color:var(--color-blue-400)}.text-gray-200{color:var(--color-gray-200)}.text-gray-300{color:var(--color-gray-300)}.text-gray-400{color:var(--color-gray-400)}.text-gray-500{color:var(--color-gray-500)}.text-gray-600{color:var(--color-gray-600)}.text-gray-700{color:var(--color-gray-700)}.text-green-200{color:var(--color-green-200)}.text-green-400{color:var(--color-green-400)}.text-honey-400{color:var(--color-honey-400)}.text-purple-400{color:var(--color-purple-400)}.text-red-200{color:var(--color-red-200)}.text-red-400{color:var(--color-red-400)}.text-white{color:var(--color-white)}.uppercase{text-transform:uppercase}.opacity-0{opacity:0}.outline{outline-style:var(--tw-outline-style);outline-width:1px}.filter{filter:var(--tw-blur,) var(--tw-brightness,) var(--tw-contrast,) var(--tw-grayscale,) var(--tw-hue-rotate,) var(--tw-invert,) var(--tw-saturate,) var(--tw-sepia,) var(--tw-drop-shadow,)}.transition{transition-property:color,background-color,border-color,outline-color,text-decoration-color,fill,stroke,--tw-gradient-from,--tw-gradient-via,--tw-gradient-to,opacity,box-shadow,transform,translate,scale,rotate,filter,-webkit-backdrop-filter,backdrop-filter,display,content-visibility,overlay,pointer-events;transition-timing-function:var(--tw-ease,var(--default-transition-timing-function));transition-duration:var(--tw-duration,var(--default-transition-duration))}@media (hover:hover){.group-hover\:opacity-100:is(:where(.group):hover *){opacity:1}.hover\:bg-bee-750:hover{background-color:var(--color-bee-750)}.hover\:bg-honey-500:hover{background-color:var(--color-honey-500)}.hover\:text-white:hover{color:var(--color-white)}}@media (min-width:40rem){.sm\:block{display:block}.sm\:w-48{width:calc(var(--spacing) * 48)}.sm\:w-auto{width:auto}.sm\:flex-row{flex-direction:row}.sm\:items-center{align-items:center}}}@property --tw-rotate-x{syntax:"*";inherits:false}@property --tw-rotate-y{syntax:"*";inherits:false}@property --tw-rotate-z{syntax:"*";inherits:false}@property --tw-skew-x{syntax:"*";inherits:false}@property --tw-skew-y{syntax:"*";inherits:false}@property --tw-space-y-reverse{syntax:"*";inherits:false;initial-value:0}@property --tw-border-style{syntax:"*";inherits:false;initial-value:solid}@property --tw-leading{syntax:"*";inherits:false}@property --tw-font-weight{syntax:"*";inherits:false}@property --tw-tracking{syntax:"*";inherits:false}@property --tw-outline-style{syntax:"*";inherits:false;initial-value:solid}@property --tw-blur{syntax:"*";inherits:false}@property --tw-brightness{syntax:"*";inherits:false}@property --tw-contrast{syntax:"*";inherits:false}@property --tw-grayscale{syntax:"*";inherits:false}@property --tw-hue-rotate{syntax:"*";inherits:false}@property --tw-invert{syntax:"*";inherits:false}@property --tw-opacity{syntax:"*";inherits:false}@property --tw-saturate{syntax:"*";inherits:false}@property --tw-sepia{syntax:"*";inherits:false}@property --tw-drop-shadow{syntax:"*";inherits:false}@property --tw-drop-shadow-color{syntax:"*";inherits:false}@property --tw-drop-shadow-alpha{syntax:"<percentage>";inherits:false;initial-value:100%}@property --tw-drop-shadow-size{syntax:"*";inherits:false}
+
     :root {
       --sidebar-width: 280px;
       --header-height: 52px;
@@ -213,12 +203,30 @@ export function getDashboardHtml(token) {
   let memorySearchTimer = null;
   let tabsData = [];
 
+  // Toast notifications
+  function showToast(msg, isError) {
+    const toast = document.createElement('div');
+    toast.className = 'fixed bottom-4 right-4 px-4 py-2 rounded-lg text-sm z-50 ' + (isError ? 'bg-red-900/90 text-red-200' : 'bg-green-900/90 text-green-200');
+    toast.textContent = msg;
+    document.body.appendChild(toast);
+    setTimeout(() => toast.remove(), 4000);
+  }
+
   // API helpers
   async function api(path, opts) {
     const headers = { 'Authorization': 'Bearer ' + API_TOKEN };
     if (opts && opts.body) headers['Content-Type'] = 'application/json';
-    const res = await fetch(path, { headers, ...opts });
-    return res.json();
+    try {
+      const res = await fetch(path, { headers, ...opts });
+      if (!res.ok) {
+        const err = await res.json().catch(() => ({ error: res.statusText }));
+        throw new Error(err.error || 'Request failed');
+      }
+      return res.json();
+    } catch (err) {
+      showToast('API error: ' + err.message, true);
+      throw err;
+    }
   }
 
   function timeAgo(iso) {
@@ -234,12 +242,12 @@ export function getDashboardHtml(token) {
 
   function esc(s) {
     if (!s) return '';
-    return String(s).replace(/&/g,'&amp;').replace(/</g,'&lt;').replace(/>/g,'&gt;').replace(/"/g,'&quot;');
+    return String(s).replace(/&/g,'&amp;').replace(/</g,'&lt;').replace(/>/g,'&gt;').replace(/"/g,'&quot;').replace(/'/g,'&#39;');
   }
 
   // --- SSE ---
   function connectSSE() {
-    const es = new EventSource('/api/events?token=' + API_TOKEN);
+    const es = new EventSource('/api/events');
     es.onopen = () => {
       document.getElementById('sse-dot').className = 'sse-indicator sse-connected';
       document.getElementById('sse-label').textContent = 'live';
@@ -313,7 +321,7 @@ export function getDashboardHtml(token) {
 
   // --- Tabs ---
   async function loadTabs() {
-    tabsData = await api('/api/tabs');
+    try { tabsData = await api('/api/tabs'); } catch { return; }
     const list = document.getElementById('tab-list');
     document.getElementById('tab-count').textContent = tabsData.length.toString();
 
@@ -325,13 +333,13 @@ export function getDashboardHtml(token) {
     list.innerHTML = tabsData.map(t => {
       const isActive = selectedTab === t.name ? ' active' : '';
       const cost = t.total_cost > 0 ? '$' + t.total_cost.toFixed(4) : '';
-      return '<div class="tab-item px-3 py-2.5 cursor-pointer' + isActive + '" data-tab-name="' + esc(t.name) + '" onclick="selectTab(\\'' + esc(t.name).replace(/'/g, "\\\\'") + '\\')">' +
+      return '<div class="tab-item px-3 py-2.5 cursor-pointer' + isActive + '" data-tab-name="' + esc(t.name) + '" role="button" tabindex="0" onclick="selectTab(\\'' + esc(t.name).replace(/'/g, "\\\\'") + '\\')" onkeydown="if(event.key===\\'Enter\\')selectTab(\\'' + esc(t.name).replace(/'/g, "\\\\'") + '\\')">' +
         '<div class="flex items-center justify-between">' +
           '<div class="flex items-center gap-2 min-w-0">' +
-            '<span class="status-dot tab-status-dot status-' + t.status + '"></span>' +
+            '<span class="status-dot tab-status-dot status-' + esc(t.status) + '"></span>' +
             '<span class="text-sm font-medium text-gray-200 truncate">' + esc(t.name) + '</span>' +
           '</div>' +
-          '<span class="text-xs tab-status-label text-gray-500 shrink-0">' + t.status + '</span>' +
+          '<span class="text-xs tab-status-label text-gray-500 shrink-0">' + esc(t.status) + '</span>' +
         '</div>' +
         '<div class="flex items-center justify-between mt-0.5 pl-5">' +
           '<span class="text-xs text-gray-600">' + t.message_count + ' msgs' + (cost ? ' &middot; ' + cost : '') + '</span>' +
@@ -357,7 +365,7 @@ export function getDashboardHtml(token) {
       document.getElementById('msg-tab-status').textContent = tab.status;
     }
 
-    const data = await api('/api/tabs/' + encodeURIComponent(name) + '/messages?limit=100');
+    let data; try { data = await api('/api/tabs/' + encodeURIComponent(name) + '/messages?limit=100'); } catch { return; }
     const list = document.getElementById('msg-list');
     document.getElementById('msg-count').textContent = data.total + ' messages';
 
@@ -425,7 +433,7 @@ export function getDashboardHtml(token) {
   async function deleteSelectedTab() {
     if (!selectedTab) return;
     if (!confirm('Delete tab "' + selectedTab + '" and all its messages?')) return;
-    await api('/api/tabs/' + encodeURIComponent(selectedTab), { method: 'DELETE' });
+    try { await api('/api/tabs/' + encodeURIComponent(selectedTab), { method: 'DELETE' }); } catch { return; }
     selectedTab = null;
     document.getElementById('msg-title').textContent = 'Select a tab';
     document.getElementById('msg-tab-status').textContent = '';
@@ -464,7 +472,7 @@ export function getDashboardHtml(token) {
     if (!name) return;
     const workingDir = document.getElementById('modal-tab-dir').value.trim() || undefined;
     const systemPrompt = document.getElementById('modal-tab-prompt').value.trim() || undefined;
-    await api('/api/tabs', { method: 'POST', body: JSON.stringify({ name, workingDir, systemPrompt }) });
+    try { await api('/api/tabs', { method: 'POST', body: JSON.stringify({ name, workingDir, systemPrompt }) }); } catch { return; }
     closeModal();
     loadTabs();
   }
@@ -472,7 +480,7 @@ export function getDashboardHtml(token) {
   // --- Memories ---
   async function loadMemories(query) {
     const q = query || document.getElementById('memory-search').value || '';
-    const data = await api('/api/memories?limit=100&q=' + encodeURIComponent(q));
+    let data; try { data = await api('/api/memories?limit=100&q=' + encodeURIComponent(q)); } catch { return; }
     const list = document.getElementById('memory-list');
     document.getElementById('memory-count').textContent = data.total + ' total';
 
@@ -482,7 +490,7 @@ export function getDashboardHtml(token) {
     }
 
     list.innerHTML = data.memories.map(m => {
-      const scope = m.tab_name ? 'tab:' + m.tab_name : 'global';
+      const scope = m.tab_name ? 'tab:' + esc(m.tab_name) : 'global';
       return '<div class="px-4 py-3 border-b border-bee-700 group hover:bg-bee-750">' +
         '<div class="flex items-center justify-between mb-1">' +
           '<div class="flex items-center gap-2">' +
@@ -491,7 +499,7 @@ export function getDashboardHtml(token) {
           '</div>' +
           '<div class="flex items-center gap-2">' +
             '<span class="text-xs text-gray-700">' + timeAgo(m.created_at) + '</span>' +
-            '<button class="btn-danger px-1.5 py-0.5 text-xs opacity-0 group-hover:opacity-100" onclick="deleteMemory(' + m.id + ')">x</button>' +
+            '<button class="btn-danger px-1.5 py-0.5 text-xs opacity-0 group-hover:opacity-100" aria-label="Delete memory" onclick="deleteMemory(' + m.id + ')">x</button>' +
           '</div>' +
         '</div>' +
         '<p class="text-sm text-gray-300 leading-relaxed">' + esc(m.content) + '</p>' +
@@ -505,7 +513,7 @@ export function getDashboardHtml(token) {
   }
 
   async function deleteMemory(id) {
-    await api('/api/memories/' + id, { method: 'DELETE' });
+    try { await api('/api/memories/' + id, { method: 'DELETE' }); } catch { return; }
     loadMemories();
   }
 
@@ -533,14 +541,14 @@ export function getDashboardHtml(token) {
     const content = document.getElementById('modal-mem-content').value.trim();
     if (!content) return;
     const tabName = document.getElementById('modal-mem-tab').value.trim() || undefined;
-    await api('/api/memories', { method: 'POST', body: JSON.stringify({ content, tabName }) });
+    try { await api('/api/memories', { method: 'POST', body: JSON.stringify({ content, tabName }) }); } catch { return; }
     closeModal();
     loadMemories();
   }
 
   // --- Tasks (formerly Crons) ---
   async function loadCrons() {
-    const crons = await api('/api/tasks');
+    let crons; try { crons = await api('/api/tasks'); } catch { return; }
     const list = document.getElementById('cron-list');
 
     if (crons.length === 0) {
@@ -558,7 +566,7 @@ export function getDashboardHtml(token) {
           '</div>' +
           '<div class="flex items-center gap-2">' +
             '<span class="text-xs font-mono text-gray-400">' + c.schedule_type + ': ' + esc(c.schedule) + '</span>' +
-            '<button class="btn-danger px-1.5 py-0.5 text-xs opacity-0 group-hover:opacity-100" onclick="deleteCron(\\'' + esc(c.id) + '\\')">x</button>' +
+            '<button class="btn-danger px-1.5 py-0.5 text-xs opacity-0 group-hover:opacity-100" aria-label="Delete task" onclick="deleteCron(\\'' + esc(c.id) + '\\')">x</button>' +
           '</div>' +
         '</div>' +
         '<div class="flex items-center justify-between mt-1 pl-5">' +
@@ -571,7 +579,7 @@ export function getDashboardHtml(token) {
 
   async function deleteCron(id) {
     if (!confirm('Delete this task?')) return;
-    await api('/api/tasks/' + encodeURIComponent(id), { method: 'DELETE' });
+    try { await api('/api/tasks/' + encodeURIComponent(id), { method: 'DELETE' }); } catch { return; }
     loadCrons();
   }
 
@@ -610,14 +618,14 @@ export function getDashboardHtml(token) {
     const tabName = document.getElementById('modal-cron-tab').value.trim() || 'default';
     const message = document.getElementById('modal-cron-msg').value.trim();
     if (!name || !schedule || !message) return;
-    await api('/api/tasks', { method: 'POST', body: JSON.stringify({ name, scheduleType, schedule, tabName, message }) });
+    try { await api('/api/tasks', { method: 'POST', body: JSON.stringify({ name, scheduleType, schedule, tabName, message }) }); } catch { return; }
     closeModal();
     loadCrons();
   }
 
   // --- Watchers ---
   async function loadWatchers() {
-    const watchers = await api('/api/watchers');
+    let watchers; try { watchers = await api('/api/watchers'); } catch { return; }
     const list = document.getElementById('watcher-list');
 
     if (watchers.length === 0) {
@@ -636,7 +644,7 @@ export function getDashboardHtml(token) {
           '<div class="flex items-center gap-2">' +
             '<span class="text-xs font-mono text-gray-400">' + esc(w.schedule) + '</span>' +
             '<span class="text-xs text-gray-500">action: ' + esc(w.action) + '</span>' +
-            '<button class="btn-danger px-1.5 py-0.5 text-xs opacity-0 group-hover:opacity-100" onclick="deleteWatcher(\\'' + esc(w.id) + '\\')">x</button>' +
+            '<button class="btn-danger px-1.5 py-0.5 text-xs opacity-0 group-hover:opacity-100" aria-label="Delete watcher" onclick="deleteWatcher(\\'' + esc(w.id) + '\\')">x</button>' +
           '</div>' +
         '</div>' +
         '<div class="flex items-center justify-between mt-1 pl-5">' +
@@ -649,13 +657,13 @@ export function getDashboardHtml(token) {
 
   async function deleteWatcher(id) {
     if (!confirm('Delete this watcher?')) return;
-    await api('/api/watchers/' + encodeURIComponent(id), { method: 'DELETE' });
+    try { await api('/api/watchers/' + encodeURIComponent(id), { method: 'DELETE' }); } catch { return; }
     loadWatchers();
   }
 
   // --- Costs ---
   async function loadCosts() {
-    const costs = await api('/api/costs');
+    let costs; try { costs = await api('/api/costs'); } catch { return; }
     const chart = document.getElementById('cost-chart');
 
     if (costs.length === 0) {
@@ -759,4 +767,3 @@ export function getDashboardHtml(token) {
 </body>
 </html>`;
 }
-//# sourceMappingURL=html.js.map

package/dist/dashboard/server.d.ts

@@ -1,2 +1 @@
 export declare function startDashboardServer(port?: number): void;
-//# sourceMappingURL=server.d.ts.map

package/dist/dashboard/server.js

@@ -9,6 +9,7 @@ import { getDashboardHtml } from './html.js';
 import { VERSION } from '../version.js';
 import { getDaemonPid } from '../cli/helpers.js';
 import { validateTabName } from '../config.js';
+import { createTabRecord } from '../db/index.js';
 let cachedDashDb = null;
 function getDashDb() {
     if (!cachedDashDb) {
@@ -17,22 +18,32 @@ function getDashDb() {
     }
     return cachedDashDb;
 }
-function withWriteDb(fn) {
-    const db = new Database(getDbPath());
-    try {
-        return fn(db);
-    }
-    finally {
-        db.close();
+let cachedWriteDb = null;
+function getWriteDb() {
+    if (!cachedWriteDb) {
+        cachedWriteDb = new Database(getDbPath());
+        cachedWriteDb.pragma('journal_mode = WAL');
     }
+    return cachedWriteDb;
+}
+function withWriteDb(fn) {
+    return fn(getWriteDb());
 }
 function json(res, data, status = 200) {
     res.writeHead(status, { 'Content-Type': 'application/json' });
     res.end(JSON.stringify(data));
 }
 function openBrowser(url) {
-    const cmd = platform() === 'darwin' ? 'open' : 'xdg-open';
-    execFile(cmd, [url]);
+    const p = platform();
+    if (p === 'darwin') {
+        execFile('open', [url]);
+    }
+    else if (p === 'win32') {
+        execFile('cmd', ['/c', 'start', url]);
+    }
+    else {
+        execFile('xdg-open', [url]);
+    }
 }
 export function startDashboardServer(port = 0) {
     // Generate auth token at server start
@@ -54,7 +65,11 @@ export function startDashboardServer(port = 0) {
                 res.end('Forbidden');
                 return;
             }
-            res.writeHead(200, { 'Content-Type': 'text/html', 'Referrer-Policy': 'no-referrer' });
+            res.writeHead(200, {
+                'Content-Type': 'text/html',
+                'Referrer-Policy': 'no-referrer',
+                'Set-Cookie': `beecork_dash=${authToken}; HttpOnly; SameSite=Strict; Path=/`,
+            });
             res.end(getDashboardHtml(authToken));
             return;
         }
@@ -62,7 +77,8 @@ export function startDashboardServer(port = 0) {
         if (path.startsWith('/api/')) {
             const authHeader = req.headers.authorization;
             const queryToken = url.searchParams.get('token');
-            const providedToken = authHeader?.replace('Bearer ', '') || queryToken;
+            const cookieToken = req.headers.cookie?.split(';').map(c => c.trim()).find(c => c.startsWith('beecork_dash='))?.split('=')[1];
+            const providedToken = authHeader?.replace('Bearer ', '') || queryToken || cookieToken;
             if (providedToken !== authToken) {
                 json(res, { error: 'Unauthorized' }, 401);
                 return;
@@ -116,8 +132,9 @@ export function startDashboardServer(port = 0) {
                     return;
                 }
                 const tabName = decodeURIComponent(path.split('/')[3]);
-                if (!validateTabName(tabName)) {
-                    json(res, { error: 'Invalid tab name' }, 400);
+                const tabErr = validateTabName(tabName);
+                if (tabErr) {
+                    json(res, { error: tabErr }, 400);
                     return;
                 }
                 withWriteDb(db => db.prepare('INSERT INTO pending_messages (tab_name, message, type) VALUES (?, ?, ?)').run(tabName, message, 'user'));
@@ -147,12 +164,12 @@ export function startDashboardServer(port = 0) {
                     json(res, { error: 'Missing tab name' }, 400);
                     return;
                 }
-                if (!validateTabName(name)) {
-                    json(res, { error: 'Invalid tab name' }, 400);
+                const nameErr = validateTabName(name);
+                if (nameErr) {
+                    json(res, { error: nameErr }, 400);
                     return;
                 }
-                const id = crypto.randomUUID();
-                withWriteDb(db => db.prepare('INSERT OR IGNORE INTO tabs (id, name, session_id, status, working_dir, system_prompt) VALUES (?, ?, ?, ?, ?, ?)').run(id, name, crypto.randomUUID(), 'idle', workingDir || process.env.HOME || '/', systemPrompt || null));
+                withWriteDb(db => createTabRecord(db, { name, workingDir, systemPrompt }));
                 json(res, { success: true, name });
                 return;
             }
@@ -193,8 +210,9 @@ export function startDashboardServer(port = 0) {
                     return;
                 }
                 const effectiveTab = tabName || 'default';
-                if (!validateTabName(effectiveTab)) {
-                    json(res, { error: 'Invalid tab name' }, 400);
+                const cronTabErr = validateTabName(effectiveTab);
+                if (cronTabErr) {
+                    json(res, { error: cronTabErr }, 400);
                     return;
                 }
                 const id = crypto.randomUUID();
@@ -282,8 +300,13 @@ export function startDashboardServer(port = 0) {
             }
             if (path === '/api/computer-use' && req.method === 'POST') {
                 let body = '';
-                for await (const chunk of req)
+                for await (const chunk of req) {
                     body += chunk;
+                    if (body.length > 1_000_000) {
+                        json(res, { error: 'Payload too large' }, 413);
+                        return;
+                    }
+                }
                 let parsedCU;
                 try {
                     parsedCU = JSON.parse(body);
@@ -454,7 +477,7 @@ export function startDashboardServer(port = 0) {
                     json(res, { success: true, package: pkgName, output: stdout.trim() });
                 }
                 catch (err) {
-                    json(res, { error: err.message }, 500);
+                    json(res, { error: err instanceof Error ? err.message : String(err) }, 500);
                 }
                 return;
             }
@@ -474,16 +497,29 @@ export function startDashboardServer(port = 0) {
             if (path.match(/^\/api\/capabilities\/[^/]+\/enable$/) && req.method === 'POST') {
                 const packId = path.split('/')[3];
                 let body = '';
-                for await (const chunk of req)
+                for await (const chunk of req) {
                     body += chunk;
-                const { apiKey } = JSON.parse(body);
+                    if (body.length > 1_000_000) {
+                        json(res, { error: 'Payload too large' }, 413);
+                        return;
+                    }
+                }
+                let parsedCap;
+                try {
+                    parsedCap = JSON.parse(body);
+                }
+                catch {
+                    json(res, { error: 'Invalid JSON' }, 400);
+                    return;
+                }
+                const { apiKey } = parsedCap;
                 const { enablePack } = await import('../capabilities/index.js');
                 try {
                     enablePack(packId, apiKey);
                     json(res, { success: true, message: 'Restart daemon to activate.' });
                 }
                 catch (err) {
-                    json(res, { error: err.message }, 400);
+                    json(res, { error: err instanceof Error ? err.message : String(err) }, 400);
                 }
                 return;
             }
@@ -517,4 +553,3 @@ export function startDashboardServer(port = 0) {
         process.exit(0);
     });
 }
-//# sourceMappingURL=server.js.map

package/dist/db/index.d.ts

@@ -1,4 +1,14 @@
 import Database from 'better-sqlite3';
 export declare function getDb(): Database.Database;
+export interface CreateTabOptions {
+    name: string;
+    workingDir?: string;
+    systemPrompt?: string | null;
+}
+/** Shared tab record creation — used by dashboard, MCP, and TabManager */
+export declare function createTabRecord(db: Database.Database, opts: CreateTabOptions): {
+    id: string;
+    name: string;
+    created: boolean;
+};
 export declare function closeDb(): void;
-//# sourceMappingURL=index.d.ts.map

package/dist/db/index.js

@@ -1,3 +1,4 @@
+import crypto from 'node:crypto';
 import Database from 'better-sqlite3';
 import { getDbPath, ensureBeecorkDirs } from '../util/paths.js';
 import { runMigrations } from './migrations.js';
@@ -65,6 +66,7 @@ export function getDb() {
             // Prune old routing/permission history (keep last 1000 entries)
             db?.exec('DELETE FROM routing_history WHERE created_at < (SELECT created_at FROM routing_history ORDER BY created_at DESC LIMIT 1 OFFSET 999)');
             db?.exec('DELETE FROM permission_history WHERE created_at < (SELECT created_at FROM permission_history ORDER BY created_at DESC LIMIT 1 OFFSET 999)');
+            db?.exec("DELETE FROM activity_log WHERE created_at < datetime('now', '-90 days')");
         }
         catch (err) {
             logger.warn('WAL checkpoint/cleanup error:', err);
@@ -72,6 +74,16 @@ export function getDb() {
     }, 30 * 60 * 1000); // every 30 minutes
     return db;
 }
+/** Shared tab record creation — used by dashboard, MCP, and TabManager */
+export function createTabRecord(db, opts) {
+    const existing = db.prepare('SELECT name FROM tabs WHERE name = ?').get(opts.name);
+    if (existing)
+        return { id: '', name: opts.name, created: false };
+    const id = crypto.randomUUID();
+    const dir = opts.workingDir || process.env.HOME || '/';
+    db.prepare('INSERT INTO tabs (id, name, session_id, status, working_dir, system_prompt) VALUES (?, ?, ?, ?, ?, ?)').run(id, opts.name, crypto.randomUUID(), 'idle', dir, opts.systemPrompt || null);
+    return { id, name: opts.name, created: true };
+}
 export function closeDb() {
     if (walInterval) {
         clearInterval(walInterval);
@@ -82,4 +94,3 @@ export function closeDb() {
         db = null;
     }
 }
-//# sourceMappingURL=index.js.map

package/dist/db/migrations.d.ts

@@ -1,3 +1,2 @@
 import type Database from 'better-sqlite3';
 export declare function runMigrations(db: Database.Database): void;
-//# sourceMappingURL=migrations.d.ts.map

package/dist/db/migrations.js

@@ -234,6 +234,11 @@ const MIGRATIONS = [
       created_at TEXT DEFAULT (datetime('now'))
     )`,
     },
+    {
+        version: 21,
+        description: 'Add index on activity_log.created_at',
+        up: 'CREATE INDEX IF NOT EXISTS idx_activity_log_created ON activity_log(created_at)',
+    },
 ];
 export function runMigrations(db) {
     // Ensure schema_version table exists
@@ -286,4 +291,3 @@ export function runMigrations(db) {
         db.prepare('UPDATE schema_version SET version = ?').run(migration.version);
     }
 }
-//# sourceMappingURL=migrations.js.map

package/dist/delegation/manager.d.ts

@@ -12,10 +12,7 @@ export interface Delegation {
 }
 /** Create a new delegation */
 export declare function createDelegation(sourceTab: string, targetTab: string, message: string, returnToTab?: string): Delegation;
-/** Mark a delegation as running */
-export declare function markDelegationRunning(id: string): void;
 /** Complete a delegation with a result */
 export declare function completeDelegation(targetTab: string, result: string): Delegation | null;
 /** Get pending delegations for a tab */
 export declare function getPendingDelegations(tabName?: string): Delegation[];
-//# sourceMappingURL=manager.d.ts.map

package/dist/delegation/manager.js

@@ -33,10 +33,6 @@ export function createDelegation(sourceTab, targetTab, message, returnToTab) {
     logger.info(`Delegation created: ${sourceTab} → ${targetTab} (depth ${delegation.depth})`);
     return delegation;
 }
-/** Mark a delegation as running */
-export function markDelegationRunning(id) {
-    getDb().prepare("UPDATE delegations SET status = 'running' WHERE id = ?").run(id);
-}
 /** Complete a delegation with a result */
 export function completeDelegation(targetTab, result) {
     const db = getDb();
@@ -85,4 +81,3 @@ function getCurrentDepth(tabName) {
     const row = db.prepare("SELECT MAX(depth) as d FROM delegations WHERE source_tab = ? AND status IN ('pending', 'running')").get(tabName);
     return row.d ?? 0;
 }
-//# sourceMappingURL=manager.js.map

package/dist/index.d.ts

@@ -1,3 +1,2 @@
 #!/usr/bin/env node
 export {};
-//# sourceMappingURL=index.d.ts.map

package/dist/index.js

@@ -240,7 +240,7 @@ program
         console.log('\nClaude can now control your mouse, keyboard, and screen.');
         console.log('Make sure you have granted permissions:');
         console.log('  macOS: System Settings → Privacy → Screen Recording + Accessibility');
-        console.log('  Guide: https://support.beecork.com/computer-use');
+        console.log('  Guide: https://github.com/beecork/beecork/blob/main/docs/troubleshooting.md');
     }
     console.log('\nRestart daemon to apply: beecork stop && beecork start\n');
 });
@@ -475,12 +475,22 @@ program
 });
 program
     .command('knowledge [scope]')
-    .description('List stored knowledge (global, project, or all)')
+    .description('List stored knowledge (global, project <path>, or all)')
     .action(async (scope) => {
-    const { getGlobalKnowledge, formatKnowledgeForContext } = await import('./knowledge/index.js');
-    const entries = getGlobalKnowledge();
+    const { getGlobalKnowledge, getProjectKnowledge, getAllKnowledge, formatKnowledgeForContext } = await import('./knowledge/index.js');
+    let entries;
+    if (scope === 'global') {
+        entries = getGlobalKnowledge();
+    }
+    else if (scope?.startsWith('project')) {
+        const projectPath = scope.split(' ').slice(1).join(' ') || process.cwd();
+        entries = getProjectKnowledge(projectPath);
+    }
+    else {
+        entries = getAllKnowledge();
+    }
     if (entries.length === 0) {
-        console.log('No global knowledge stored yet.');
+        console.log('No knowledge stored yet.');
         return;
     }
     console.log(formatKnowledgeForContext(entries));
@@ -509,5 +519,10 @@ storeCmd
     const { storeInfo } = await import('./cli/store.js');
     await storeInfo(pkg);
 });
+program
+    .command('help')
+    .description('Show help')
+    .action(() => {
+    program.outputHelp();
+});
 program.parse();
-//# sourceMappingURL=index.js.map

package/dist/knowledge/index.d.ts

@@ -1,3 +1,2 @@
 export type { KnowledgeEntry, KnowledgeScope } from './types.js';
 export { getGlobalKnowledge, addGlobalKnowledge, getProjectKnowledge, addProjectKnowledge, getTabKnowledge, getAllKnowledge, formatKnowledgeForContext, addKnowledge, searchKnowledge, } from './manager.js';
-//# sourceMappingURL=index.d.ts.map

package/dist/knowledge/index.js

@@ -1,2 +1 @@
 export { getGlobalKnowledge, addGlobalKnowledge, getProjectKnowledge, addProjectKnowledge, getTabKnowledge, getAllKnowledge, formatKnowledgeForContext, addKnowledge, searchKnowledge, } from './manager.js';
-//# sourceMappingURL=index.js.map

package/dist/knowledge/manager.d.ts

@@ -15,4 +15,3 @@ export declare function addKnowledge(content: string, scope: KnowledgeScope, opt
 }): void;
 /** Search knowledge across all layers */
 export declare function searchKnowledge(query: string, projectPath?: string, tabName?: string): KnowledgeEntry[];
-//# sourceMappingURL=manager.d.ts.map