comisai 1.0.16 → 1.0.18

package/node_modules/@comis/agent/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@comis/agent",
   "private": true,
-  "version": "1.0.16",
+  "version": "1.0.18",
   "author": "Moshe Anconina",
   "license": "Apache-2.0",
   "description": "AI agent executor, budget control, and session management for Comis",

package/node_modules/@comis/channels/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@comis/channels",
   "private": true,
-  "version": "1.0.16",
+  "version": "1.0.18",
   "author": "Moshe Anconina",
   "license": "Apache-2.0",
   "description": "Chat platform adapters — Discord, Telegram, Slack, WhatsApp, Signal, iMessage, IRC, LINE",

package/node_modules/@comis/cli/dist/wizard/non-interactive.js

@@ -230,6 +230,7 @@ export function buildNonInteractiveState(opts) {
         authMethod: gatewayAuth,
         ...(gatewayToken !== undefined && { token: gatewayToken }),
         ...(gatewayPassword !== undefined && { password: gatewayPassword }),
+        webEnabled: true,
     };
     // Data directory
     const dataDir = opts.dataDir ?? safePath(homedir(), ".comis", "data");

package/node_modules/@comis/cli/dist/wizard/steps/01-detect-existing.js

@@ -69,11 +69,13 @@ function extractStateFromConfig(raw, envRecord = {}) {
             customIp = host;
         }
         if (port !== undefined) {
+            const webRaw = gatewayRaw["web"];
             gateway = {
                 port,
                 bindMode,
                 ...(customIp !== undefined && { customIp }),
                 authMethod: "token",
+                webEnabled: typeof webRaw?.["enabled"] === "boolean" ? webRaw["enabled"] : true,
             };
         }
     }

package/node_modules/@comis/cli/dist/wizard/steps/07-gateway.js

@@ -91,6 +91,14 @@ export const gatewayStep = {
                 },
             });
         }
+        // 5b. Web dashboard prompt
+        const webEnabled = await prompter.confirm({
+            message: "Enable web dashboard? (served at /app/ on the gateway port)",
+            initialValue: state.gateway?.webEnabled ?? true,
+        });
+        if (webEnabled && bindMode === "loopback") {
+            prompter.log.info("Dashboard will bind to 127.0.0.1 only. For remote access, SSH-tunnel: `ssh -L 4766:localhost:4766 user@host`.");
+        }
         // 6. Build config and update state
         const config = {
             port,
@@ -99,6 +107,7 @@ export const gatewayStep = {
             authMethod: authMethod,
             ...(token !== undefined && { token }),
             ...(password !== undefined && { password }),
+            webEnabled,
         };
         return updateState(state, { gateway: config });
     },

package/node_modules/@comis/cli/dist/wizard/steps/10-write-config.js

@@ -96,6 +96,8 @@ function buildConfigObject(state) {
         else if (state.gateway.authMethod === "password") {
             gatewayConfig.password = "${COMIS_GATEWAY_PASSWORD}";
         }
+        // Web dashboard -- default true; wizard always sets this explicitly
+        gatewayConfig.web = { enabled: state.gateway.webEnabled };
         config.gateway = gatewayConfig;
     }
     // Channels section

package/node_modules/@comis/cli/dist/wizard/steps/12-finish.js

@@ -54,6 +54,9 @@ function buildGatewayInfo(state) {
             host = "127.0.0.1";
     }
     const wsLine = `  WebSocket:  ${brand(`ws://${host}:${state.gateway.port}/ws`)}`;
+    const dashboardLine = state.gateway.webEnabled
+        ? `  Dashboard:  ${brand(`http://${host}:${state.gateway.port}/app/`)}`
+        : undefined;
     let authLine;
     if (state.gateway.authMethod === "password") {
         authLine = "  Auth:       Password auth (in ~/.comis/.env)";
@@ -64,8 +67,8 @@ function buildGatewayInfo(state) {
             : "see file";
         authLine = `  Token:      ${tokenPreview} (in ~/.comis/.env)`;
     }
-    const webLine = `  Web App:    ${brand(`http://${host}:${state.gateway.port}`)}`;
-    return `${wsLine}\n${webLine}\n${authLine}`;
+    const lines = [wsLine, dashboardLine, authLine].filter((l) => l !== undefined);
+    return lines.join("\n");
 }
 // ---------- Step Implementation ----------
 export const finishStep = {

package/node_modules/@comis/cli/dist/wizard/types.d.ts

@@ -65,6 +65,7 @@ export type GatewayConfig = {
     authMethod: "token" | "password";
     token?: string;
     password?: string;
+    webEnabled: boolean;
 };
 /** Auth method for providers that support both API keys and OAuth tokens. */
 export type AuthMethod = "apikey" | "oauth";

package/node_modules/@comis/cli/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@comis/cli",
   "private": true,
-  "version": "1.0.16",
+  "version": "1.0.18",
   "author": "Moshe Anconina",
   "license": "Apache-2.0",
   "description": "Command-line interface for the Comis AI agent platform",

package/node_modules/@comis/core/dist/config/schema-gateway.d.ts

@@ -29,9 +29,9 @@ export declare const GatewayTokenSchema: z.ZodObject<{
     /** The secret value (min 32 chars; resolved at runtime if omitted; string or SecretRef) */
     secret: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
         source: z.ZodEnum<{
+            env: "env";
             file: "file";
             exec: "exec";
-            env: "env";
         }>;
         provider: z.ZodString;
         id: z.ZodString;
@@ -48,6 +48,15 @@ export declare const GatewayRateLimitSchema: z.ZodObject<{
     /** Maximum requests per window (default: 100) */
     maxRequests: z.ZodDefault<z.ZodNumber>;
 }, z.core.$strict>;
+/**
+ * Web dashboard configuration. Controls whether the @comis/web SPA is mounted
+ * at /app/* alongside the gateway, sharing the same host/port/auth. When
+ * disabled, the daemon skips /app/*, /api, SSE, and the `/` -> `/app/` redirect.
+ */
+export declare const GatewayWebConfigSchema: z.ZodObject<{
+    /** Enable the web dashboard SPA (default: true) */
+    enabled: z.ZodDefault<z.ZodBoolean>;
+}, z.core.$strict>;
 /**
  * Gateway server configuration schema.
  *
@@ -79,9 +88,9 @@ export declare const GatewayConfigSchema: z.ZodObject<{
         /** The secret value (min 32 chars; resolved at runtime if omitted; string or SecretRef) */
         secret: z.ZodOptional<z.ZodUnion<readonly [z.ZodString, z.ZodObject<{
             source: z.ZodEnum<{
+                env: "env";
                 file: "file";
                 exec: "exec";
-                env: "env";
             }>;
             provider: z.ZodString;
             id: z.ZodString;
@@ -96,6 +105,11 @@ export declare const GatewayConfigSchema: z.ZodObject<{
         /** Maximum requests per window (default: 100) */
         maxRequests: z.ZodDefault<z.ZodNumber>;
     }, z.core.$strict>>;
+    /** Web dashboard (mounted at /app/*, shares gateway host/port/auth) */
+    web: z.ZodDefault<z.ZodObject<{
+        /** Enable the web dashboard SPA (default: true) */
+        enabled: z.ZodDefault<z.ZodBoolean>;
+    }, z.core.$strict>>;
     /** Maximum JSON-RPC batch size (default: 50) */
     maxBatchSize: z.ZodDefault<z.ZodNumber>;
     /** WebSocket heartbeat interval in milliseconds (default: 30000) */
@@ -122,3 +136,4 @@ export type GatewayConfig = z.infer<typeof GatewayConfigSchema>;
 export type GatewayTlsConfig = z.infer<typeof GatewayTlsConfigSchema>;
 export type GatewayToken = z.infer<typeof GatewayTokenSchema>;
 export type GatewayRateLimit = z.infer<typeof GatewayRateLimitSchema>;
+export type GatewayWebConfig = z.infer<typeof GatewayWebConfigSchema>;

package/node_modules/@comis/core/dist/config/schema-gateway.js

@@ -42,6 +42,15 @@ export const GatewayRateLimitSchema = z.strictObject({
     /** Maximum requests per window (default: 100) */
     maxRequests: z.number().int().positive().default(100),
 });
+/**
+ * Web dashboard configuration. Controls whether the @comis/web SPA is mounted
+ * at /app/* alongside the gateway, sharing the same host/port/auth. When
+ * disabled, the daemon skips /app/*, /api, SSE, and the `/` -> `/app/` redirect.
+ */
+export const GatewayWebConfigSchema = z.strictObject({
+    /** Enable the web dashboard SPA (default: true) */
+    enabled: z.boolean().default(true),
+});
 /**
  * Gateway server configuration schema.
  *
@@ -61,6 +70,8 @@ export const GatewayConfigSchema = z.strictObject({
     tokens: z.array(GatewayTokenSchema).default([]),
     /** Rate limiting settings */
     rateLimit: GatewayRateLimitSchema.default(() => GatewayRateLimitSchema.parse({})),
+    /** Web dashboard (mounted at /app/*, shares gateway host/port/auth) */
+    web: GatewayWebConfigSchema.default(() => GatewayWebConfigSchema.parse({})),
     /** Maximum JSON-RPC batch size (default: 50) */
     maxBatchSize: z.number().int().positive().default(50),
     /** WebSocket heartbeat interval in milliseconds (default: 30000) */