clauderipple 0.10.0 → 0.11.0

package/dist/router/src/admin.js

@@ -14,6 +14,9 @@
 //   PATCH/DELETE /api/google-accounts/:id rename, pause/resume, clear a cooldown; remove
 //   GET  /api/update    whether a newer version is published, and how this copy was installed
 //   POST /api/update    start `clauderipple update` in the background (it restarts this router)
+//   GET  /api/power     lid-closed awake + hotspot failover state (power.ts)
+//   PUT  /api/power     change awake mode/until, tether on/off (saved), pin (in memory)
+//   POST /api/power/setup  start `clauderipple awake setup [--ssid]` (macOS password dialog); GET polls it
 //   GET  /*           static files from packages/ui (the GUI itself)
 import crypto from "node:crypto";
 import { phoneRequest } from "./phone.js";
@@ -24,7 +27,7 @@ import path from "node:path";
 import http from "node:http";
 import { execFile, spawn } from "node:child_process";
 import { fileURLToPath } from "node:url";
-import { adminPort, headerValueProblem, homeDir, searchProviderFor, validate } from "./config.js";
+import { adminPort, headerValueProblem, homeDir, searchProviderFor, ssidProblem, validate } from "./config.js";
 export { adminPort } from "./config.js";
 import { generatedAgents } from "./agents.js";
 import { isJudgeOnlyModel } from "./model-policy.js";
@@ -60,6 +63,7 @@ import { GoogleOAuthSession } from "./providers/google/login.js";
 import { GROK_AUTH_HINT, grokAuthPath, grokHome, readGrokToken, sharedGrokAuth } from "./providers/grok/auth.js";
 import { GROK_DEFAULT_URL, GROK_EFFORT_LEVELS, GROK_FALLBACK_MODELS, grokModelsFromListing } from "./providers/grok/catalog.js";
 import { GROK_WARNING, grokHeaders } from "./providers/grok/index.js";
+import { parsePowerChange, persistPowerChange } from "./power.js";
 const MAX_BODY = 1024 * 1024;
 /** `/api/image` carries reference images inline, so it gets more room than a config save. */
 const MAX_IMAGE_BODY = 32 * 1024 * 1024;
@@ -190,12 +194,17 @@ async function googleLimitAccounts(deps, name) {
     const groups = (await google.usage?.(name)) ?? {};
     const kept = statuses.filter((a) => a.state !== "paused" && a.state !== "needs-login");
     const at = Date.now();
+    // The third-party (Claude and GPT) windows only when this provider has such a model selected:
+    // beside Gemini's own they made four figures, two of them a pool nobody here spends (2026-10-20).
+    const provider = deps.config().providers[name];
+    const models = provider && "models" in provider && Array.isArray(provider.models) ? provider.models : [];
+    const thirdParty = models.some((m) => /^(claude-|gpt-oss(-|$))/i.test(typeof m === "string" ? m : m.id));
     const out = [];
     kept.forEach((account, index) => {
         const quotient = groups[account.id];
         if (!quotient || !quotient.length)
             return;
-        const windows = googleWindowsFromGroups(quotient);
+        const windows = googleWindowsFromGroups(quotient).filter((w) => thirdParty || w.kind !== "scoped");
         if (windows.length)
             out.push({ account: index, windows, at });
     });
@@ -1665,6 +1674,8 @@ export function startAdmin(deps) {
     const scores = new ModelScoreCatalog({ home: homeDir(), warn: message => deps.log.warn(message), ...(deps.modelScoresFetch ? { fetch: deps.modelScoresFetch } : {}) });
     // Set again once the socket is bound (port 0 in tests); the Origin check below compares against it.
     let boundPort = adminPort(deps.config());
+    /** The dashboard's `awake setup` run in progress (or the last one), for GET /api/power/setup. */
+    let powerSetup = { running: false };
     const server = http.createServer((req, res) => {
         void handle(req, res);
     });
@@ -1747,6 +1758,98 @@ export function startAdmin(deps) {
                 sendJson(res, 200, { hosts: deps.remote.reload() });
                 return;
             }
+            if (pathname === "/api/power" && (method === "GET" || method === "PUT")) {
+                if (!deps.power) {
+                    sendJson(res, 501, { error: "power control not available" });
+                    return;
+                }
+                if (method === "GET") {
+                    sendJson(res, 200, deps.power.status());
+                    return;
+                }
+                let parsed;
+                try {
+                    parsed = JSON.parse((await readBody(req, 4096)).toString("utf8"));
+                }
+                catch {
+                    sendJson(res, 400, { error: "invalid JSON" });
+                    return;
+                }
+                const change = parsePowerChange(parsed);
+                if (typeof change === "string") {
+                    sendJson(res, 400, { error: change });
+                    return;
+                }
+                if (persistPowerChange(deps.configFile, change)) {
+                    deps.log.info(`admin: power saved (${JSON.stringify({ ...(change.awake ? { awake: change.awake } : {}), ...(change.tether?.enabled !== undefined ? { tether: { enabled: change.tether.enabled } } : {}) })})`);
+                }
+                if (change.tether?.pin !== undefined)
+                    deps.power.pin(change.tether.pin);
+                await deps.power.poke();
+                sendJson(res, 200, deps.power.status());
+                return;
+            }
+            // The one privileged step, from the dashboard: the CLI's `awake setup`, which shows macOS's own
+            // password dialog. It runs in the background and is polled, like the ChatGPT sign-in: the user
+            // may take minutes to type, and the app's window gives up on a response with no headers after
+            // 4s (packages/app/src/protocol.ts) — a reply held open until the end would read as a dead router.
+            if (pathname === "/api/power/setup" && (method === "GET" || method === "POST")) {
+                if (!deps.power) {
+                    sendJson(res, 501, { error: "power control not available" });
+                    return;
+                }
+                if (method === "GET") {
+                    sendJson(res, 200, powerSetup);
+                    return;
+                }
+                let parsed;
+                try {
+                    const text = (await readBody(req, 4096)).toString("utf8");
+                    parsed = text.trim() ? JSON.parse(text) : {};
+                }
+                catch {
+                    sendJson(res, 400, { error: "invalid JSON" });
+                    return;
+                }
+                if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
+                    sendJson(res, 400, { error: "expected an object" });
+                    return;
+                }
+                const extra = Object.keys(parsed).find((key) => key !== "ssid");
+                if (extra) {
+                    sendJson(res, 400, { error: `unknown field "${extra}"` });
+                    return;
+                }
+                const ssid = parsed.ssid;
+                if (ssid !== undefined) {
+                    // Checked here too so a bad name is refused before a password dialog, not after it.
+                    const problem = ssidProblem(ssid);
+                    if (problem) {
+                        sendJson(res, 400, { error: problem });
+                        return;
+                    }
+                }
+                if (powerSetup.running) {
+                    sendJson(res, 409, { error: "setup is already running", running: true });
+                    return;
+                }
+                powerSetup = { running: true, startedAt: new Date().toISOString() };
+                const args = ["awake", "setup", ...(typeof ssid === "string" ? ["--ssid", ssid] : [])];
+                deps.log.info(`admin: awake setup via GUI -> started${typeof ssid === "string" ? ` (hotspot "${ssid}")` : ""}`);
+                const power = deps.power;
+                // The CLI's own dialog times out at 5 min; this leaves it room to say so itself.
+                void (deps.runCli ?? runCli)(args, 330_000).then((result) => ({ ok: result.ok, output: result.output }), (error) => ({ ok: false, output: errorText(error) })).then(async (result) => {
+                    powerSetup = { ...powerSetup, running: false, finishedAt: new Date().toISOString(), ...result };
+                    deps.log.info(`admin: awake setup via GUI -> ${result.ok ? "ok" : "failed"}`);
+                    // Re-read whether the rule is in place now, so the next GET /api/power says so.
+                    try {
+                        await power.poke();
+                    }
+                    catch { /* the next tick does it */ }
+                });
+                sendJson(res, 202, { started: true });
+                return;
+            }
             // Liveness is answering at all; readiness is 200 only when a request can actually go through.
             if (pathname === "/readyz" && method === "GET") {
                 const readiness = (await buildStatus(deps)).readiness;