botmancers 0.1.0 → 0.3.0

package/app/public/globe.svg

@@ -0,0 +1 @@
+<svg fill="none" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 16 16"><g clip-path="url(#a)"><path fill-rule="evenodd" clip-rule="evenodd" d="M10.27 14.1a6.5 6.5 0 0 0 3.67-3.45q-1.24.21-2.7.34-.31 1.83-.97 3.1M8 16A8 8 0 1 0 8 0a8 8 0 0 0 0 16m.48-1.52a7 7 0 0 1-.96 0H7.5a4 4 0 0 1-.84-1.32q-.38-.89-.63-2.08a40 40 0 0 0 3.92 0q-.25 1.2-.63 2.08a4 4 0 0 1-.84 1.31zm2.94-4.76q1.66-.15 2.95-.43a7 7 0 0 0 0-2.58q-1.3-.27-2.95-.43a18 18 0 0 1 0 3.44m-1.27-3.54a17 17 0 0 1 0 3.64 39 39 0 0 1-4.3 0 17 17 0 0 1 0-3.64 39 39 0 0 1 4.3 0m1.1-1.17q1.45.13 2.69.34a6.5 6.5 0 0 0-3.67-3.44q.65 1.26.98 3.1M8.48 1.5l.01.02q.41.37.84 1.31.38.89.63 2.08a40 40 0 0 0-3.92 0q.25-1.2.63-2.08a4 4 0 0 1 .85-1.32 7 7 0 0 1 .96 0m-2.75.4a6.5 6.5 0 0 0-3.67 3.44 29 29 0 0 1 2.7-.34q.31-1.83.97-3.1M4.58 6.28q-1.66.16-2.95.43a7 7 0 0 0 0 2.58q1.3.27 2.95.43a18 18 0 0 1 0-3.44m.17 4.71q-1.45-.12-2.69-.34a6.5 6.5 0 0 0 3.67 3.44q-.65-1.27-.98-3.1" fill="#666"/></g><defs><clipPath id="a"><path fill="#fff" d="M0 0h16v16H0z"/></clipPath></defs></svg>

package/app/public/next.svg

@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" fill="none" viewBox="0 0 394 80"><path fill="#000" d="M262 0h68.5v12.7h-27.2v66.6h-13.6V12.7H262V0ZM149 0v12.7H94v20.4h44.3v12.6H94v21h55v12.6H80.5V0h68.7zm34.3 0h-17.8l63.8 79.4h17.9l-32-39.7 32-39.6h-17.9l-23 28.6-23-28.6zm18.3 56.7-9-11-27.1 33.7h17.8l18.3-22.7z"/><path fill="#000" d="M81 79.3 17 0H0v79.3h13.6V17l50.2 62.3H81Zm252.6-.4c-1 0-1.8-.4-2.5-1s-1.1-1.6-1.1-2.6.3-1.8 1-2.5 1.6-1 2.6-1 1.8.3 2.5 1a3.4 3.4 0 0 1 .6 4.3 3.7 3.7 0 0 1-3 1.8zm23.2-33.5h6v23.3c0 2.1-.4 4-1.3 5.5a9.1 9.1 0 0 1-3.8 3.5c-1.6.8-3.5 1.3-5.7 1.3-2 0-3.7-.4-5.3-1s-2.8-1.8-3.7-3.2c-.9-1.3-1.4-3-1.4-5h6c.1.8.3 1.6.7 2.2s1 1.2 1.6 1.5c.7.4 1.5.5 2.4.5 1 0 1.8-.2 2.4-.6a4 4 0 0 0 1.6-1.8c.3-.8.5-1.8.5-3V45.5zm30.9 9.1a4.4 4.4 0 0 0-2-3.3 7.5 7.5 0 0 0-4.3-1.1c-1.3 0-2.4.2-3.3.5-.9.4-1.6 1-2 1.6a3.5 3.5 0 0 0-.3 4c.3.5.7.9 1.3 1.2l1.8 1 2 .5 3.2.8c1.3.3 2.5.7 3.7 1.2a13 13 0 0 1 3.2 1.8 8.1 8.1 0 0 1 3 6.5c0 2-.5 3.7-1.5 5.1a10 10 0 0 1-4.4 3.5c-1.8.8-4.1 1.2-6.8 1.2-2.6 0-4.9-.4-6.8-1.2-2-.8-3.4-2-4.5-3.5a10 10 0 0 1-1.7-5.6h6a5 5 0 0 0 3.5 4.6c1 .4 2.2.6 3.4.6 1.3 0 2.5-.2 3.5-.6 1-.4 1.8-1 2.4-1.7a4 4 0 0 0 .8-2.4c0-.9-.2-1.6-.7-2.2a11 11 0 0 0-2.1-1.4l-3.2-1-3.8-1c-2.8-.7-5-1.7-6.6-3.2a7.2 7.2 0 0 1-2.4-5.7 8 8 0 0 1 1.7-5 10 10 0 0 1 4.3-3.5c2-.8 4-1.2 6.4-1.2 2.3 0 4.4.4 6.2 1.2 1.8.8 3.2 2 4.3 3.4 1 1.4 1.5 3 1.5 5h-5.8z"/></svg>

package/app/public/vercel.svg

@@ -0,0 +1 @@
+<svg fill="none" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 1155 1000"><path d="m577.3 0 577.4 1000H0z" fill="#fff"/></svg>

package/app/public/window.svg

@@ -0,0 +1 @@
+<svg fill="none" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 16 16"><path fill-rule="evenodd" clip-rule="evenodd" d="M1.5 2.5h13v10a1 1 0 0 1-1 1h-11a1 1 0 0 1-1-1zM0 1h16v11.5a2.5 2.5 0 0 1-2.5 2.5h-11A2.5 2.5 0 0 1 0 12.5zm3.75 4.5a.75.75 0 1 0 0-1.5.75.75 0 0 0 0 1.5M7 4.75a.75.75 0 1 1-1.5 0 .75.75 0 0 1 1.5 0m1.75.75a.75.75 0 1 0 0-1.5.75.75 0 0 0 0 1.5" fill="#666"/></svg>

package/app/server.js

@@ -0,0 +1,38 @@
+const path = require('path')
+
+const dir = path.join(__dirname)
+
+process.env.NODE_ENV = 'production'
+process.chdir(__dirname)
+
+const currentPort = parseInt(process.env.PORT, 10) || 3000
+const hostname = process.env.HOSTNAME || '0.0.0.0'
+
+let keepAliveTimeout = parseInt(process.env.KEEP_ALIVE_TIMEOUT, 10)
+const nextConfig = {"env":{"BOTMANCERS_BUILD_VERSION":"0.3.0","BOTMANCERS_BUILD_COMMIT":"a08e532e759845e03310017398ab584ebc9d5b9e"},"webpack":null,"typescript":{"ignoreBuildErrors":false},"typedRoutes":false,"distDir":"./.next","cleanDistDir":true,"assetPrefix":"","cacheMaxMemorySize":52428800,"configOrigin":"next.config.ts","useFileSystemPublicRoutes":true,"generateEtags":true,"pageExtensions":["tsx","ts","jsx","js"],"instrumentationClientInject":[],"poweredByHeader":true,"compress":true,"images":{"deviceSizes":[640,750,828,1080,1200,1920,2048,3840],"imageSizes":[32,48,64,96,128,256,384],"path":"/_next/image","loader":"default","loaderFile":"","domains":[],"disableStaticImages":false,"minimumCacheTTL":14400,"formats":["image/webp"],"maximumRedirects":3,"maximumResponseBody":50000000,"dangerouslyAllowLocalIP":false,"dangerouslyAllowSVG":false,"contentSecurityPolicy":"script-src 'none'; frame-src 'none'; sandbox;","contentDispositionType":"attachment","localPatterns":[{"pathname":"**","search":""}],"remotePatterns":[],"qualities":[75],"unoptimized":true,"customCacheHandler":false},"devIndicators":{"position":"bottom-left"},"onDemandEntries":{"maxInactiveAge":60000,"pagesBufferLength":5},"basePath":"","sassOptions":{},"trailingSlash":false,"i18n":null,"productionBrowserSourceMaps":false,"excludeDefaultMomentLocales":true,"reactProductionProfiling":false,"reactStrictMode":null,"reactMaxHeadersLength":6000,"httpAgentOptions":{"keepAlive":true},"logging":{"serverFunctions":true,"browserToTerminal":"warn"},"compiler":{},"expireTime":31536000,"staticPageGenerationTimeout":60,"output":"standalone","modularizeImports":{"@mui/icons-material":{"transform":"@mui/icons-material/{{member}}"},"lodash":{"transform":"lodash/{{member}}"}},"outputFileTracingRoot":__dirname,"enablePrerenderSourceMaps":true,"cacheComponents":false,"cacheLife":{"default":{"stale":300,"revalidate":900,"expire":4294967294},"seconds":{"stale":30,"revalidate":1,"expire":60},"minutes":{"stale":300,"revalidate":60,"expire":3600},"hours":{"stale":300,"revalidate":3600,"expire":86400},"days":{"stale":300,"revalidate":86400,"expire":604800},"weeks":{"stale":300,"revalidate":604800,"expire":2592000},"max":{"stale":300,"revalidate":2592000,"expire":31536000}},"cacheHandlers":{},"experimental":{"appNewScrollHandler":true,"coldCacheBadge":false,"devValidationWorker":true,"useSkewCookie":false,"cssChunking":true,"multiZoneDraftMode":false,"appNavFailHandling":false,"prerenderEarlyExit":true,"serverMinification":true,"linkNoTouchStart":false,"caseSensitiveRoutes":false,"cachedNavigations":false,"dynamicOnHover":false,"useOffline":false,"varyParams":true,"optimisticRouting":true,"instrumentationClientRouterTransitionEvents":false,"prefetchInlining":{"maxSize":2048,"maxBundleSize":10240},"preloadEntriesOnStart":true,"clientRouterFilter":true,"clientRouterFilterRedirects":false,"fetchCacheKeyPrefix":"","proxyPrefetch":"flexible","optimisticClientCache":true,"manualClientBasePath":false,"cpus":9,"memoryBasedWorkersCount":false,"imgOptConcurrency":null,"imgOptOperationCache":null,"imgOptTimeoutInSeconds":7,"imgOptMaxInputPixels":268402689,"imgOptSequentialRead":null,"isrFlushToDisk":true,"workerThreads":false,"optimizeCss":false,"nextScriptWorkers":false,"scrollRestoration":false,"externalDir":false,"devMemoryThresholdRestart":true,"disableOptimizedLoading":false,"gzipSize":true,"craCompat":false,"esmExternals":true,"fullySpecified":false,"swcTraceProfiling":false,"forceSwcTransforms":false,"requestInsights":false,"largePageDataBytes":128000,"typedEnv":false,"parallelServerCompiles":false,"parallelServerBuildTraces":false,"ppr":false,"authInterrupts":false,"webpackMemoryOptimizations":false,"optimizeServerReact":true,"strictRouteTypes":false,"useTypeScriptCli":true,"removeUncaughtErrorAndRejectionListeners":false,"validateRSCRequestHeaders":true,"staleTimes":{"dynamic":0,"static":300},"reactDebugChannel":true,"serverComponentsHmrCache":true,"serverComponentsHmrCancellation":false,"staticGenerationMaxConcurrency":8,"staticGenerationMinPagesPerWorker":25,"transitionIndicator":false,"gestureTransition":false,"inlineCss":false,"useCache":false,"globalNotFound":false,"browserDebugInfoInTerminal":"warn","lockDistDir":true,"proxyClientMaxBodySize":10485760,"hideLogsAfterAbort":false,"mcpServer":true,"turbopackFileSystemCacheForDev":true,"turbopackFileSystemCacheForBuild":true,"turbopackInferModuleSideEffects":true,"turbopackPluginRuntimeStrategy":"childProcesses","turbopackMemoryEvictionMode":"auto","optimizePackageImports":["lucide-react","date-fns","lodash-es","ramda","antd","react-bootstrap","ahooks","@ant-design/icons","@headlessui/react","@headlessui-float/react","@heroicons/react/20/solid","@heroicons/react/24/solid","@heroicons/react/24/outline","@visx/visx","@tremor/react","rxjs","@mui/material","@mui/icons-material","recharts","react-use","effect","@effect/schema","@effect/platform","@effect/platform-node","@effect/platform-browser","@effect/platform-bun","@effect/sql","@effect/sql-mssql","@effect/sql-mysql2","@effect/sql-pg","@effect/sql-sqlite-node","@effect/sql-sqlite-bun","@effect/sql-sqlite-wasm","@effect/sql-sqlite-react-native","@effect/rpc","@effect/rpc-http","@effect/typeclass","@effect/experimental","@effect/opentelemetry","@material-ui/core","@material-ui/icons","@tabler/icons-react","mui-core","react-icons/ai","react-icons/bi","react-icons/bs","react-icons/cg","react-icons/ci","react-icons/di","react-icons/fa","react-icons/fa6","react-icons/fc","react-icons/fi","react-icons/gi","react-icons/go","react-icons/gr","react-icons/hi","react-icons/hi2","react-icons/im","react-icons/io","react-icons/io5","react-icons/lia","react-icons/lib","react-icons/lu","react-icons/md","react-icons/pi","react-icons/ri","react-icons/rx","react-icons/si","react-icons/sl","react-icons/tb","react-icons/tfi","react-icons/ti","react-icons/vsc","react-icons/wi"],"useCacheTimeout":54,"instantInsights":{"validationLevel":"warning"},"trustHostHeader":false,"isExperimentalCompile":false},"htmlLimitedBots":"[\\w-]+-Google|Google-[\\w-]+|Chrome-Lighthouse|Slurp|DuckDuckBot|baiduspider|yandex|sogou|bitlybot|tumblr|vkShare|quora link preview|redditbot|ia_archiver|Bingbot|BingPreview|applebot|facebookexternalhit|facebookcatalog|Twitterbot|LinkedInBot|Slackbot|Discordbot|WhatsApp|SkypeUriPreview|Yeti|googleweblight","bundlePagesRouterDependencies":false,"configFileName":"next.config.ts","repoRoot":__dirname,"turbopack":{"root":__dirname},"distDirRoot":".next","_originalRewrites":{"beforeFiles":[],"afterFiles":[{"source":"/favicon.ico","destination":"/brand/botmancers-logo-filled-64.png"}],"fallback":[]}}
+
+process.env.__NEXT_PRIVATE_STANDALONE_CONFIG = JSON.stringify(nextConfig)
+
+require('next')
+const { startServer } = require('next/dist/server/lib/start-server')
+
+if (
+  Number.isNaN(keepAliveTimeout) ||
+  !Number.isFinite(keepAliveTimeout) ||
+  keepAliveTimeout < 0
+) {
+  keepAliveTimeout = undefined
+}
+
+startServer({
+  dir,
+  isDev: false,
+  config: nextConfig,
+  hostname,
+  port: currentPort,
+  allowRetry: false,
+  keepAliveTimeout,
+}).catch((err) => {
+  console.error(err);
+  process.exit(1);
+});

package/dist/cli.d.ts

@@ -10,4 +10,10 @@ export interface CliIo {
     stdout: (text: string) => void;
     stderr: (text: string) => void;
 }
+export declare const PRODUCT_COMMANDS: readonly ["setup", "start", "stop", "status", "doctor", "open"];
+export declare const INSTALL_COMMANDS: readonly ["install", "upgrade"];
+export declare const UPDATE_WORKER_COMMAND = "__update-check";
+export declare const PRODUCT_HELP = "Usage: botmancers <command>\n\nRun Botmancers (UI, API, core engine, and MCP bridge) from this package:\n\n  setup                     Create BOTMANCERS_HOME (owner-only) and generate the\n                            bridge credentials; prints Hermes and Agent Deck steps\n  start [--daemon] [--open] Start the UI/core on 127.0.0.1:43123 and the MCP bridge\n                            on 127.0.0.1:43124 under one supervisor\n  stop                      Stop the supervisor, core, and bridge\n  status                    Report healthy / degraded / stopped, versions, endpoints\n  doctor                    Check the installation, home, ports, Hermes, Agent Deck\n  open                      Open the UI in a browser\n  mcp [options]             Run only the MCP bridge (same as bare `botmancers`)\n  install [--to VERSION]    Managed install into ~/.botmancers/versions with the\n                            ~/.local/bin/botmancers launcher (--help for options)\n  upgrade [--check] [--to VERSION] [--yes]\n                            Update this installation (managed or npm-global)\n\nManaged installs update themselves: at most one npm check a day, a background\ndownload, activation at the next `botmancers start` once nothing is running.\nBOTMANCERS_DISABLE_AUTOUPDATER=1 turns that off; `botmancers upgrade` still works.\n\nEnvironment: BOTMANCERS_HOME (default ~/.botmancers), BOTMANCERS_UI_PORT,\nBOTMANCERS_MCP_PORT. Variables exported in your shell (HERMES_*, BOTMANCERS_DB_PATH,\n...) take precedence over <home>/config/core.env.\n\nExit codes: 0 ok, 1 degraded or check failed, 2 usage, 3 not running,\n6 port in use, 7 core or bridge failed to start, 8 packaged app incomplete,\n9 home not writable, 10 not set up (run botmancers setup).\n";
+export declare function productMain(command: typeof PRODUCT_COMMANDS[number], argv: string[], env: NodeJS.ProcessEnv, io?: CliIo): Promise<number>;
 export declare function main(argv: string[], env: NodeJS.ProcessEnv, io?: CliIo): Promise<number | 'serving'>;
+export declare function bridgeMain(argv: string[], env: NodeJS.ProcessEnv, io?: CliIo): Promise<number | 'serving'>;

package/dist/cli.js

@@ -1,5 +1,14 @@
 #!/usr/bin/env node
-// `npx botmancers`: validate configuration, check that Botmancers is reachable
+// The `botmancers` command.
+//
+//   botmancers [options]        the MCP bridge only (unchanged since 0.1.0)
+//   botmancers mcp [options]    the same, explicitly
+//   botmancers setup|start|stop|status|doctor|open
+//                               the full product: UI, API, core engine, and
+//                               bridge under one supervisor (./product)
+//   botmancers install|upgrade  the managed install and its updates (./upgrade)
+//
+// Bridge mode: validate configuration, check that Botmancers is reachable
 // and accepts the service token, then serve the MCP bridge until a signal.
 import { pathToFileURL } from 'node:url';
 import { realpathSync } from 'node:fs';
@@ -8,6 +17,10 @@ import { packageVersion } from './contract.js';
 import { createRedactor } from './redact.js';
 import { HEALTH_PATH, MCP_PATH, createBridge } from './server.js';
 import { UpstreamError } from './upstream.js';
+import { PRODUCT_EXIT, UsageError, doctor, open, parseStartArgs, productContext, start, status, stop } from './product.js';
+import { SetupError, runSetup } from './setup.js';
+import { DISABLE_AUTOUPDATER_ENV, runUpdateCheck, scheduleAutoUpdate } from './managed.js';
+import { runInstall, runUpgrade } from './upgrade.js';
 export const EXIT = { ok: 0, config: 2, listen: 3, unavailable: 4, credentials: 5 };
 const processIo = {
     stdout: text => process.stdout.write(text),
@@ -16,7 +29,98 @@ const processIo = {
 function urlHost(url) {
     return new URL(url).hostname;
 }
+export const PRODUCT_COMMANDS = ['setup', 'start', 'stop', 'status', 'doctor', 'open'];
+export const INSTALL_COMMANDS = ['install', 'upgrade'];
+// The detached auto-update worker (./managed scheduleAutoUpdate); not for people.
+export const UPDATE_WORKER_COMMAND = '__update-check';
+export const PRODUCT_HELP = `Usage: botmancers <command>
+
+Run Botmancers (UI, API, core engine, and MCP bridge) from this package:
+
+  setup                     Create BOTMANCERS_HOME (owner-only) and generate the
+                            bridge credentials; prints Hermes and Agent Deck steps
+  start [--daemon] [--open] Start the UI/core on 127.0.0.1:43123 and the MCP bridge
+                            on 127.0.0.1:43124 under one supervisor
+  stop                      Stop the supervisor, core, and bridge
+  status                    Report healthy / degraded / stopped, versions, endpoints
+  doctor                    Check the installation, home, ports, Hermes, Agent Deck
+  open                      Open the UI in a browser
+  mcp [options]             Run only the MCP bridge (same as bare \`botmancers\`)
+  install [--to VERSION]    Managed install into ~/.botmancers/versions with the
+                            ~/.local/bin/botmancers launcher (--help for options)
+  upgrade [--check] [--to VERSION] [--yes]
+                            Update this installation (managed or npm-global)
+
+Managed installs update themselves: at most one npm check a day, a background
+download, activation at the next \`botmancers start\` once nothing is running.
+${DISABLE_AUTOUPDATER_ENV}=1 turns that off; \`botmancers upgrade\` still works.
+
+Environment: BOTMANCERS_HOME (default ~/.botmancers), BOTMANCERS_UI_PORT,
+BOTMANCERS_MCP_PORT. Variables exported in your shell (HERMES_*, BOTMANCERS_DB_PATH,
+...) take precedence over <home>/config/core.env.
+
+Exit codes: 0 ok, 1 degraded or check failed, 2 usage, 3 not running,
+6 port in use, 7 core or bridge failed to start, 8 packaged app incomplete,
+9 home not writable, 10 not set up (run botmancers setup).
+`;
+// Product commands (./product). Resolves when the command finishes; a
+// foreground `start` resolves only after the product stops.
+export async function productMain(command, argv, env, io = processIo) {
+    if (argv.includes('-h') || argv.includes('--help')) {
+        io.stdout(PRODUCT_HELP);
+        return PRODUCT_EXIT.ok;
+    }
+    try {
+        const ctx = productContext(env, io);
+        // The running supervisor schedules its own checks; `start` reaches it.
+        if (command !== 'start')
+            scheduleAutoUpdate(env);
+        if (command !== 'start' && argv.length)
+            throw new UsageError(`${command} takes no arguments.`);
+        switch (command) {
+            case 'setup': {
+                const result = runSetup(ctx.paths, { ui: ctx.uiPort, mcp: ctx.mcpPort });
+                ctx.io.stdout(`${result.lines.join('\n')}\n`);
+                return PRODUCT_EXIT.ok;
+            }
+            case 'start': return await start(ctx, parseStartArgs(argv));
+            case 'stop': return await stop(ctx);
+            case 'status': return await status(ctx);
+            case 'doctor': return await doctor(ctx);
+            case 'open': return await open(ctx);
+        }
+    }
+    catch (error) {
+        if (error instanceof UsageError) {
+            io.stderr(`botmancers ${command}: ${error.message} Run botmancers ${command} --help.\n`);
+            return PRODUCT_EXIT.usage;
+        }
+        if (error instanceof SetupError) {
+            io.stderr(`botmancers setup: ${error.message}\n`);
+            return PRODUCT_EXIT.home;
+        }
+        throw error;
+    }
+}
+// Routes product commands and `mcp`; anything else is bridge mode, exactly
+// as before the product commands existed.
 export async function main(argv, env, io = processIo) {
+    const [first, ...rest] = argv;
+    if (first === 'mcp')
+        return bridgeMain(rest, env, io);
+    if (first === 'install')
+        return runInstall(rest, env, io);
+    if (first === 'upgrade')
+        return runUpgrade(rest, env, io);
+    if (first === UPDATE_WORKER_COMMAND) {
+        await runUpdateCheck(env);
+        return EXIT.ok;
+    }
+    if (PRODUCT_COMMANDS.includes(first))
+        return productMain(first, rest, env, io);
+    return bridgeMain(argv, env, io);
+}
+export async function bridgeMain(argv, env, io = processIo) {
     // Redact whatever secrets the environment holds before anything is printed.
     const redact = createRedactor([env[ENV.serviceToken]?.trim(), env[ENV.mcpToken]?.trim()]);
     const err = (line) => io.stderr(`${redact(line)}\n`);
@@ -100,8 +204,12 @@ function invokedDirectly() {
 }
 if (invokedDirectly()) {
     main(process.argv.slice(2), process.env).then(outcome => {
-        if (outcome !== 'serving')
+        if (outcome !== 'serving') {
             process.exitCode = outcome;
+            // A finished product command must not linger on open handles.
+            if (process.argv[2] && [...PRODUCT_COMMANDS, ...INSTALL_COMMANDS, UPDATE_WORKER_COMMAND].includes(process.argv[2]))
+                process.exit(outcome);
+        }
     }, error => {
         const redact = createRedactor([process.env[ENV.serviceToken]?.trim(), process.env[ENV.mcpToken]?.trim()]);
         process.stderr.write(`botmancers: unexpected error: ${redact(error?.message ?? String(error))}\n`);

package/dist/config.js

@@ -185,4 +185,8 @@ Example:
 
 Exit codes: 0 stopped by signal, 2 configuration, 3 cannot listen,
 4 Botmancers unreachable or incompatible, 5 credentials rejected.
+
+\`botmancers mcp [options]\` is the same bridge-only command. To run the whole
+product (UI, API, core engine, and this bridge) instead:
+  botmancers setup && botmancers start --daemon     (see: botmancers start --help)
 `;

package/dist/home.d.ts

@@ -0,0 +1,39 @@
+export declare const HOME_ENV = "BOTMANCERS_HOME";
+export declare const APP_DIR_ENV = "BOTMANCERS_APP_DIR";
+export declare const UI_PORT_ENV = "BOTMANCERS_UI_PORT";
+export declare const DEFAULT_UI_PORT = 43123;
+export declare const PRODUCT_HOST = "127.0.0.1";
+export declare const HOME_DIRS: readonly ["config", "data", "files", "skills", "logs", "run"];
+export interface HomePaths {
+    home: string;
+    config: string;
+    coreEnv: string;
+    bridgeEnv: string;
+    data: string;
+    db: string;
+    files: string;
+    skills: string;
+    logs: string;
+    supervisorLog: string;
+    uiLog: string;
+    mcpLog: string;
+    run: string;
+    runFile: string;
+}
+export declare function resolveHome(env: NodeJS.ProcessEnv): string;
+export declare function homePaths(home: string): HomePaths;
+export declare function appDir(env: NodeJS.ProcessEnv): string;
+export declare const CLI_PATH: string;
+export declare const REQUIRED_APP_FILES: readonly ["server.js", "package.json", "BUILD_INFO.json", ".next/BUILD_ID", ".next/static", "public", "node_modules/next/package.json", "node_modules/better-sqlite3/package.json"];
+export declare function missingAppFiles(dir: string): string[];
+export interface BuildInfo {
+    version: string;
+    commit: string;
+}
+export declare function readBuildInfo(dir: string): BuildInfo | null;
+export declare function parseEnvFile(text: string): Record<string, string>;
+export declare function readEnvFile(path: string): Record<string, string> | null;
+export declare function writePrivateFile(path: string, text: string): void;
+export declare function ensurePrivateDir(path: string): void;
+export declare function modeOf(path: string): number | null;
+export declare function portFrom(env: NodeJS.ProcessEnv, name: string, fallback: number): number;

package/dist/home.js

@@ -0,0 +1,131 @@
+// BOTMANCERS_HOME (default ~/.botmancers): everything the installed product
+// writes. The core engine derives the same data/files/skills/logs paths from
+// BOTMANCERS_HOME in lib/home.ts of the Botmancers app; keep the two layouts
+// in step. Existing explicit path variables (BOTMANCERS_DB_PATH, ...) are
+// passed through to the engine untouched and still win.
+//
+//   <home>/config/core.env     engine configuration: the bridge's service-token
+//                              digest, plus anything the operator adds (Hermes)
+//   <home>/config/bridge.env   the bridge's two bearer tokens (raw)
+//   <home>/data/               SQLite database and WAL
+//   <home>/files/ skills/      artifacts and local skills
+//   <home>/logs/               supervisor, core, and bridge logs
+//   <home>/run/product.json    run metadata of the supervised product
+import { existsSync, mkdirSync, readFileSync, statSync, chmodSync, writeFileSync, renameSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { join, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+export const HOME_ENV = 'BOTMANCERS_HOME';
+export const APP_DIR_ENV = 'BOTMANCERS_APP_DIR';
+export const UI_PORT_ENV = 'BOTMANCERS_UI_PORT';
+export const DEFAULT_UI_PORT = 43123;
+export const PRODUCT_HOST = '127.0.0.1';
+export const HOME_DIRS = ['config', 'data', 'files', 'skills', 'logs', 'run'];
+export function resolveHome(env) {
+    const configured = (env[HOME_ENV] ?? '').trim();
+    return resolve(configured || join(env.HOME?.trim() || homedir(), '.botmancers'));
+}
+export function homePaths(home) {
+    return {
+        home,
+        config: join(home, 'config'),
+        coreEnv: join(home, 'config', 'core.env'),
+        bridgeEnv: join(home, 'config', 'bridge.env'),
+        data: join(home, 'data'),
+        db: join(home, 'data', 'botmancers.db'),
+        files: join(home, 'files'),
+        skills: join(home, 'skills'),
+        logs: join(home, 'logs'),
+        supervisorLog: join(home, 'logs', 'supervisor.log'),
+        uiLog: join(home, 'logs', 'core.log'),
+        mcpLog: join(home, 'logs', 'bridge.log'),
+        run: join(home, 'run'),
+        runFile: join(home, 'run', 'product.json'),
+    };
+}
+// The packaged standalone app (UI, API routes, core engine). The override
+// exists for tests and for running a locally assembled app.
+export function appDir(env) {
+    const override = (env[APP_DIR_ENV] ?? '').trim();
+    return override ? resolve(override) : fileURLToPath(new URL('../app', import.meta.url));
+}
+export const CLI_PATH = fileURLToPath(new URL('./cli.js', import.meta.url));
+// Paths the packaged app must contain before `start` will launch it.
+export const REQUIRED_APP_FILES = [
+    'server.js',
+    'package.json',
+    'BUILD_INFO.json',
+    '.next/BUILD_ID',
+    '.next/static',
+    'public',
+    'node_modules/next/package.json',
+    'node_modules/better-sqlite3/package.json',
+];
+export function missingAppFiles(dir) {
+    return REQUIRED_APP_FILES.filter(entry => !existsSync(join(dir, entry)));
+}
+export function readBuildInfo(dir) {
+    try {
+        const info = JSON.parse(readFileSync(join(dir, 'BUILD_INFO.json'), 'utf8'));
+        return typeof info.version === 'string' ? { version: info.version, commit: String(info.commit ?? 'unknown') } : null;
+    }
+    catch {
+        return null;
+    }
+}
+// Minimal KEY=value files: comments and blank lines ignored, no expansion.
+export function parseEnvFile(text) {
+    const out = {};
+    for (const raw of text.split(/\r?\n/)) {
+        const line = raw.trim();
+        if (!line || line.startsWith('#'))
+            continue;
+        const at = line.indexOf('=');
+        if (at <= 0)
+            continue;
+        const key = line.slice(0, at).trim().replace(/^export\s+/, '');
+        let value = line.slice(at + 1).trim();
+        if (/^(['"]).*\1$/.test(value))
+            value = value.slice(1, -1);
+        if (/^[A-Za-z_][A-Za-z0-9_]*$/.test(key))
+            out[key] = value;
+    }
+    return out;
+}
+export function readEnvFile(path) {
+    try {
+        return parseEnvFile(readFileSync(path, 'utf8'));
+    }
+    catch {
+        return null;
+    }
+}
+// Owner-only, atomically replaced.
+export function writePrivateFile(path, text) {
+    const temp = `${path}.${process.pid}.tmp`;
+    writeFileSync(temp, text, { mode: 0o600 });
+    chmodSync(temp, 0o600);
+    renameSync(temp, path);
+}
+export function ensurePrivateDir(path) {
+    mkdirSync(path, { recursive: true, mode: 0o700 });
+    chmodSync(path, 0o700);
+}
+export function modeOf(path) {
+    try {
+        return statSync(path).mode & 0o777;
+    }
+    catch {
+        return null;
+    }
+}
+// Never echoes the value: a token pasted into the wrong variable must not print.
+export function portFrom(env, name, fallback) {
+    const value = (env[name] ?? '').trim();
+    if (!value)
+        return fallback;
+    const port = /^\d+$/.test(value) ? Number(value) : NaN;
+    if (!Number.isInteger(port) || port < 1 || port > 65535)
+        throw new RangeError(`${name} must be an integer port between 1 and 65535.`);
+    return port;
+}

package/dist/managed.d.ts

@@ -0,0 +1,145 @@
+export declare const PACKAGE_NAME = "botmancers";
+export declare const DISABLE_AUTOUPDATER_ENV = "BOTMANCERS_DISABLE_AUTOUPDATER";
+export declare const LOCAL_BIN_ENV = "BOTMANCERS_LOCAL_BIN";
+export declare const DEFAULT_REGISTRY = "https://registry.npmjs.org";
+export declare const CHECK_INTERVAL_MS: number;
+export declare const KEEP_PREVIOUS_RELEASES = 2;
+export declare const RESTART_ACTION = "botmancers stop && botmancers start --daemon";
+export declare const MANAGED_INSTALL_COMMAND = "curl -fsSL https://raw.githubusercontent.com/not-so-fat/botmancers/main/scripts/install.sh | bash";
+export declare const NPM_TIMEOUT_MS: number;
+export declare const START_LOCK_ENV = "BOTMANCERS_START_LOCK_TOKEN";
+export interface ManagedPaths {
+    home: string;
+    versions: string;
+    current: string;
+    state: string;
+    lock: string;
+    startLock: string;
+    localBin: string;
+    launcher: string;
+}
+export declare function managedPaths(env: NodeJS.ProcessEnv): ManagedPaths;
+export declare const versionDir: (paths: ManagedPaths, version: string) => string;
+export declare const partialDir: (paths: ManagedPaths, version: string) => string;
+export declare const packageDirIn: (dir: string) => string;
+export declare const cliEntryIn: (dir: string) => string;
+export declare function currentVersionDir(paths: ManagedPaths): string | null;
+export declare function currentManagedVersion(paths: ManagedPaths): string | null;
+/** Positive when a > b. A prerelease sorts before its release. */
+export declare function compareSemver(a: string, b: string): number;
+export declare const isSemver: (value: string | null | undefined) => value is string;
+export type InstallKind = 'managed' | 'npm-global' | 'npx' | 'project-local' | 'dev-checkout' | 'unknown';
+export interface InstallInfo {
+    kind: InstallKind;
+    cliPath: string;
+    versionDir: string | null;
+}
+export declare function detectInstallKind(env: NodeJS.ProcessEnv, options?: {
+    cliPath?: string;
+    spawnNpm?: boolean;
+}): InstallInfo;
+export interface UpdateState {
+    checkedAt: string | null;
+    latest: string | null;
+    pendingVersion: string | null;
+    pendingIntegrity: string | null;
+    stagedAt: string | null;
+    declinedVersion: string | null;
+    lastError: string | null;
+}
+export declare function readUpdateState(paths: ManagedPaths): UpdateState;
+export declare function writeUpdateState(paths: ManagedPaths, patch: Partial<UpdateState>): UpdateState;
+export declare function isAutoupdaterDisabled(env: NodeJS.ProcessEnv): boolean;
+export declare function nativeBindingProblem(appDir: string): string | null;
+export declare function nativeLoadProblem(appDir: string): string | null;
+export declare function verifiedReleaseProblem(dir: string, version: string): string | null;
+export declare function releaseProblem(dir: string, version: string): string | null;
+export interface Release {
+    version: string;
+    dir: string;
+    complete: boolean;
+    problem: string | null;
+}
+export declare function listReleases(paths: ManagedPaths): Release[];
+export declare function writeLauncher(paths: ManagedPaths): void;
+export declare function launcherInstalled(paths: ManagedPaths): boolean;
+export declare function activateRelease(paths: ManagedPaths, version: string): void;
+export declare function pruneReleases(paths: ManagedPaths): string[];
+export declare function registryUrl(env: NodeJS.ProcessEnv): string;
+export declare function fetchLatestVersion(env: NodeJS.ProcessEnv, timeoutMs?: number): Promise<string>;
+export declare function fetchIntegrity(env: NodeJS.ProcessEnv, version: string): Promise<string>;
+export type NpmRunner = (args: string[], env: NodeJS.ProcessEnv) => Promise<{
+    code: number;
+    stderr: string;
+}>;
+export declare const runNpm: NpmRunner;
+export interface StageDeps {
+    npm?: NpmRunner;
+    integrity?: (version: string) => Promise<string>;
+}
+export interface Staged {
+    version: string;
+    dir: string;
+    integrity: string | null;
+    reused: boolean;
+}
+export declare function stageRelease(paths: ManagedPaths, env: NodeJS.ProcessEnv, version: string, deps?: StageDeps): Promise<Staged>;
+export declare function lockedIntegrity(dir: string): string | null;
+export declare const HANDOFF_LEASE_MS = 30000;
+export declare function beginHandOff(path: string, token: string, leaseMs?: number): boolean;
+export declare function handOffFileLock(path: string, token: string, pid: number): boolean;
+export type Unlock = () => void;
+export declare function acquireFileLock(path: string, options?: {
+    inherit?: string;
+}): {
+    release: Unlock;
+    token: string;
+} | null;
+export declare function waitForFileLock(path: string, options: {
+    timeoutMs: number;
+    inherit?: string;
+    onWait?: () => void;
+}): Promise<{
+    release: Unlock;
+    token: string;
+} | null>;
+export declare function acquireLock(paths: ManagedPaths): Unlock | null;
+export interface Clock {
+    now: () => number;
+}
+export declare function checkDue(paths: ManagedPaths, clock?: Clock): boolean;
+export type AutoUpdateSkip = 'disabled' | 'not-managed' | 'not-due';
+export declare function scheduleAutoUpdate(env: NodeJS.ProcessEnv, options?: {
+    clock?: Clock;
+    cliPath?: string;
+    spawnWorker?: (cliPath: string, env: NodeJS.ProcessEnv) => void;
+}): AutoUpdateSkip | 'scheduled';
+export interface CheckDeps extends StageDeps {
+    clock?: Clock;
+    latest?: () => Promise<string>;
+}
+export type CheckOutcome = {
+    result: 'disabled' | 'not-managed' | 'not-due' | 'busy' | 'up-to-date' | 'declined';
+} | {
+    result: 'staged';
+    version: string;
+    reused: boolean;
+} | {
+    result: 'error';
+    error: string;
+};
+export declare function runUpdateCheck(env: NodeJS.ProcessEnv, deps?: CheckDeps, cliPath?: string): Promise<CheckOutcome>;
+export declare function activatablePending(env: NodeJS.ProcessEnv, cliPath?: string): string | null;
+export declare function botmancersOnPath(env: NodeJS.ProcessEnv): string[];
+export interface ManagedReport {
+    install: InstallInfo;
+    paths: ManagedPaths;
+    launcher: boolean;
+    resolved: string | null;
+    shadowedBy: string | null;
+    current: string | null;
+    pending: string | null;
+    autoupdate: boolean;
+    state: UpdateState;
+}
+export declare function managedReport(env: NodeJS.ProcessEnv, cliPath?: string): ManagedReport;