donguri-journal 0.1.0

package/dist/embedding/provider.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Embedding backend abstraction.
+ *
+ * The default runs fully in-process via transformers.js (no Ollama, no manual
+ * model pull) so the server works with a bare `npx`. The interface is swappable
+ * so power users can plug in Ollama or a cloud API later — the active model id
+ * and dimension are recorded in `embedding_meta` so a backend switch can be
+ * detected and trigger a reindex (vectors from different models are not
+ * comparable).
+ */
+export interface EmbeddingProvider {
+    /** Stable identifier of the model, e.g. "Xenova/all-MiniLM-L6-v2". */
+    readonly modelId: string;
+    /** Output dimensionality. Fixed for the lifetime of the provider. */
+    readonly dim: number;
+    /** Embed a batch of texts. Returns one vector (length `dim`) per input. */
+    embed(texts: string[]): Promise<number[][]>;
+}
+/**
+ * Default provider: mean-pooled, L2-normalized sentence embeddings computed
+ * locally with transformers.js. The model is downloaded and cached on first
+ * use, so the pipeline is created lazily (the server can start, and alternative
+ * backends can be used, without ever loading transformers.js).
+ */
+export declare class LocalTransformersProvider implements EmbeddingProvider {
+    #private;
+    readonly modelId: string;
+    readonly dim: number;
+    constructor(modelId?: string, dim?: number);
+    embed(texts: string[]): Promise<number[][]>;
+}
+/**
+ * Choose an embedding backend. Today this always returns the in-process default;
+ * later it will read an env var (e.g. JOURNAL_EMBEDDING_BACKEND) to select an
+ * Ollama or cloud provider.
+ */
+export declare function createEmbeddingProvider(): EmbeddingProvider;

package/dist/embedding/provider.js

@@ -0,0 +1,53 @@
+/**
+ * Embedding backend abstraction.
+ *
+ * The default runs fully in-process via transformers.js (no Ollama, no manual
+ * model pull) so the server works with a bare `npx`. The interface is swappable
+ * so power users can plug in Ollama or a cloud API later — the active model id
+ * and dimension are recorded in `embedding_meta` so a backend switch can be
+ * detected and trigger a reindex (vectors from different models are not
+ * comparable).
+ */
+const DEFAULT_MODEL = "Xenova/all-MiniLM-L6-v2";
+const DEFAULT_DIM = 384;
+/**
+ * Default provider: mean-pooled, L2-normalized sentence embeddings computed
+ * locally with transformers.js. The model is downloaded and cached on first
+ * use, so the pipeline is created lazily (the server can start, and alternative
+ * backends can be used, without ever loading transformers.js).
+ */
+export class LocalTransformersProvider {
+    modelId;
+    dim;
+    #pipeline = null;
+    constructor(modelId = DEFAULT_MODEL, dim = DEFAULT_DIM) {
+        this.modelId = modelId;
+        this.dim = dim;
+    }
+    #getPipeline() {
+        if (!this.#pipeline) {
+            this.#pipeline = (async () => {
+                const { pipeline } = await import("@xenova/transformers");
+                const extractor = await pipeline("feature-extraction", this.modelId);
+                return extractor;
+            })();
+        }
+        return this.#pipeline;
+    }
+    async embed(texts) {
+        if (texts.length === 0)
+            return [];
+        const extractor = await this.#getPipeline();
+        const output = await extractor(texts, { pooling: "mean", normalize: true });
+        return output.tolist();
+    }
+}
+/**
+ * Choose an embedding backend. Today this always returns the in-process default;
+ * later it will read an env var (e.g. JOURNAL_EMBEDDING_BACKEND) to select an
+ * Ollama or cloud provider.
+ */
+export function createEmbeddingProvider() {
+    return new LocalTransformersProvider();
+}
+//# sourceMappingURL=provider.js.map

package/dist/embedding/provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider.js","sourceRoot":"","sources":["../../src/embedding/provider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAWH,MAAM,aAAa,GAAG,yBAAyB,CAAC;AAChD,MAAM,WAAW,GAAG,GAAG,CAAC;AAQxB;;;;;GAKG;AACH,MAAM,OAAO,yBAAyB;IAC3B,OAAO,CAAS;IAChB,GAAG,CAAS;IACrB,SAAS,GAA8C,IAAI,CAAC;IAE5D,YAAY,UAAkB,aAAa,EAAE,MAAc,WAAW;QACpE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;IACjB,CAAC;IAED,YAAY;QACV,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;YACpB,IAAI,CAAC,SAAS,GAAG,CAAC,KAAK,IAAI,EAAE;gBAC3B,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;gBAC1D,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,oBAAoB,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;gBACrE,OAAO,SAAiD,CAAC;YAC3D,CAAC,CAAC,EAAE,CAAC;QACP,CAAC;QACD,OAAO,IAAI,CAAC,SAAS,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,KAAe;QACzB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAClC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5E,OAAO,MAAM,CAAC,MAAM,EAAE,CAAC;IACzB,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,UAAU,uBAAuB;IACrC,OAAO,IAAI,yBAAyB,EAAE,CAAC;AACzC,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/index.js

@@ -0,0 +1,49 @@
+#!/usr/bin/env node
+/**
+ * donguri-journal — local-first, time-aware journaling memory server over MCP.
+ *
+ * A squirrel stashing acorns (capture) and digging them up later (recall).
+ * The front-end multimodal LLM is the companion/UI; this server is the
+ * persistent memory organ behind it.
+ *
+ * This entrypoint is deliberately thin: it builds the kernel context and
+ * registers a list of modules. The core tools live in the `core` module; opt-in
+ * features plug in the same way.
+ *
+ * NOTE: stdout is reserved for the MCP protocol. All logging goes to stderr.
+ */
+import { mkdirSync } from "node:fs";
+import { dirname } from "node:path";
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { JournalStore } from "./db/store.js";
+import { createEmbeddingProvider } from "./embedding/provider.js";
+import { loadConfig } from "./kernel/config.js";
+import { createContext } from "./kernel/context.js";
+import { registerModules } from "./kernel/module.js";
+import { loadInstalledPlugins } from "./kernel/plugin.js";
+import { managementModule } from "./management/module.js";
+import { coreModule } from "./modules/core.js";
+import { pluginsModule } from "./modules/plugins.js";
+import { createOriginalStore } from "./originals/store.js";
+const config = loadConfig();
+mkdirSync(dirname(config.dbPath), { recursive: true });
+const store = new JournalStore(config.dbPath, createEmbeddingProvider());
+store.init();
+const originals = createOriginalStore(config.originalsDir);
+const server = new McpServer({ name: "donguri-journal", version: "0.1.0" });
+const ctx = createContext({ server, store, originals, config });
+// Built-in modules. Installed plugins are loaded separately (see below).
+const modules = [coreModule, managementModule, pluginsModule];
+async function main() {
+    await registerModules(ctx, modules);
+    await loadInstalledPlugins(ctx);
+    const transport = new StdioServerTransport();
+    await server.connect(transport);
+    ctx.log(`running on stdio (db: ${config.dbPath})`);
+}
+main().catch((err) => {
+    console.error("Fatal error starting donguri-journal:", err);
+    process.exit(1);
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAC7C,OAAO,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAC;AAClE,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAsB,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACzE,OAAO,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,wBAAwB,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAE3D,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;AAC5B,SAAS,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;AAEvD,MAAM,KAAK,GAAG,IAAI,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE,uBAAuB,EAAE,CAAC,CAAC;AACzE,KAAK,CAAC,IAAI,EAAE,CAAC;AACb,MAAM,SAAS,GAAG,mBAAmB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;AAE3D,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC;AAC5E,MAAM,GAAG,GAAG,aAAa,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;AAEhE,yEAAyE;AACzE,MAAM,OAAO,GAAoB,CAAC,UAAU,EAAE,gBAAgB,EAAE,aAAa,CAAC,CAAC;AAE/E,KAAK,UAAU,IAAI;IACjB,MAAM,eAAe,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;IACpC,MAAM,oBAAoB,CAAC,GAAG,CAAC,CAAC;IAChC,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChC,GAAG,CAAC,GAAG,CAAC,yBAAyB,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;AACrD,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAY,EAAE,EAAE;IAC5B,OAAO,CAAC,KAAK,CAAC,uCAAuC,EAAE,GAAG,CAAC,CAAC;IAC5D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/kernel/config.d.ts

@@ -0,0 +1,17 @@
+export interface JournalConfig {
+    /** SQLite database file path. */
+    dbPath: string;
+    /** Directory for content-addressed original artifacts. */
+    originalsDir: string;
+    /** Max accepted size of a single original artifact (decoded bytes). */
+    maxOriginalBytes: number;
+    /** Directory where installed plugins live (one subdirectory per plugin id). */
+    pluginsDir: string;
+    /** JSON file recording which plugins are installed / enabled. */
+    pluginsConfigPath: string;
+    /** Host the management UI binds to. Localhost-only by default. */
+    uiHost: string;
+    /** Port for the management UI. 0 = an ephemeral port chosen at listen time. */
+    uiPort: number;
+}
+export declare function loadConfig(): JournalConfig;

package/dist/kernel/config.js

@@ -0,0 +1,26 @@
+/**
+ * Centralized configuration, resolved once from the environment. Modules read
+ * config through the kernel context rather than touching process.env directly.
+ */
+import { homedir } from "node:os";
+import { join } from "node:path";
+const DEFAULT_MAX_ORIGINAL_BYTES = 25 * 1024 * 1024;
+function envOr(name, fallback) {
+    const value = process.env[name];
+    return value && value.length > 0 ? value : fallback;
+}
+export function loadConfig() {
+    const home = homedir();
+    const max = Number(process.env.JOURNAL_MAX_ORIGINAL_BYTES);
+    const uiPort = Number(process.env.JOURNAL_UI_PORT);
+    return {
+        dbPath: envOr("JOURNAL_DB_PATH", join(home, ".journal-mcp", "journal.db")),
+        originalsDir: envOr("JOURNAL_ORIGINALS_DIR", join(home, ".journal-mcp", "originals")),
+        maxOriginalBytes: Number.isFinite(max) && max > 0 ? Math.floor(max) : DEFAULT_MAX_ORIGINAL_BYTES,
+        pluginsDir: envOr("JOURNAL_PLUGINS_DIR", join(home, ".journal-mcp", "plugins")),
+        pluginsConfigPath: envOr("JOURNAL_PLUGINS_CONFIG", join(home, ".journal-mcp", "plugins.json")),
+        uiHost: envOr("JOURNAL_UI_HOST", "127.0.0.1"),
+        uiPort: Number.isInteger(uiPort) && uiPort >= 0 && uiPort <= 65535 ? uiPort : 0,
+    };
+}
+//# sourceMappingURL=config.js.map

package/dist/kernel/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/kernel/config.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAmBjC,MAAM,0BAA0B,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAEpD,SAAS,KAAK,CAAC,IAAY,EAAE,QAAgB;IAC3C,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChC,OAAO,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;IACvB,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC;IAC3D,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IACnD,OAAO;QACL,MAAM,EAAE,KAAK,CAAC,iBAAiB,EAAE,IAAI,CAAC,IAAI,EAAE,cAAc,EAAE,YAAY,CAAC,CAAC;QAC1E,YAAY,EAAE,KAAK,CAAC,uBAAuB,EAAE,IAAI,CAAC,IAAI,EAAE,cAAc,EAAE,WAAW,CAAC,CAAC;QACrF,gBAAgB,EACd,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,0BAA0B;QAChF,UAAU,EAAE,KAAK,CAAC,qBAAqB,EAAE,IAAI,CAAC,IAAI,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC;QAC/E,iBAAiB,EAAE,KAAK,CAAC,wBAAwB,EAAE,IAAI,CAAC,IAAI,EAAE,cAAc,EAAE,cAAc,CAAC,CAAC;QAC9F,MAAM,EAAE,KAAK,CAAC,iBAAiB,EAAE,WAAW,CAAC;QAC7C,MAAM,EAAE,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,IAAI,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;KAChF,CAAC;AACJ,CAAC"}

package/dist/kernel/context.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Kernel context — the small, stable surface that every module is given.
+ *
+ * Modules depend ONLY on this (not on core internals), so the core can evolve
+ * without breaking extensions. This is the basis of the "extensible by design"
+ * promise; keep it small.
+ */
+import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import type { JournalStore } from "../db/store.js";
+import type { OriginalStore } from "../originals/store.js";
+import type { JournalConfig } from "./config.js";
+export interface JournalContext {
+    /** Register MCP tools (and, later, other capabilities). */
+    readonly server: McpServer;
+    readonly store: JournalStore;
+    readonly originals: OriginalStore;
+    readonly config: JournalConfig;
+    /** Log to stderr — stdout is reserved for the MCP protocol. */
+    readonly log: (...args: unknown[]) => void;
+}
+export declare function createContext(parts: {
+    server: McpServer;
+    store: JournalStore;
+    originals: OriginalStore;
+    config: JournalConfig;
+}): JournalContext;

package/dist/kernel/context.js

@@ -0,0 +1,7 @@
+export function createContext(parts) {
+    return {
+        ...parts,
+        log: (...args) => console.error("[donguri-journal]", ...args),
+    };
+}
+//# sourceMappingURL=context.js.map

package/dist/kernel/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../../src/kernel/context.ts"],"names":[],"mappings":"AAsBA,MAAM,UAAU,aAAa,CAAC,KAK7B;IACC,OAAO;QACL,GAAG,KAAK;QACR,GAAG,EAAE,CAAC,GAAG,IAAe,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,mBAAmB,EAAE,GAAG,IAAI,CAAC;KACzE,CAAC;AACJ,CAAC"}

package/dist/kernel/module.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Module contract. The core ships as a module, and opt-in features (management
+ * UI, album, Eagle connector, …) will plug in through the same interface — later
+ * loaded dynamically from installed plugins.
+ */
+import type { JournalContext } from "./context.js";
+export interface JournalModule {
+    /** Stable id, e.g. "core", "management-ui", "eagle". */
+    readonly id: string;
+    /** Register the module's tools / capabilities against the kernel context. */
+    register(ctx: JournalContext): void | Promise<void>;
+}
+export declare function registerModules(ctx: JournalContext, modules: JournalModule[]): Promise<void>;

package/dist/kernel/module.js

@@ -0,0 +1,7 @@
+export async function registerModules(ctx, modules) {
+    for (const module of modules) {
+        await module.register(ctx);
+        ctx.log(`module registered: ${module.id}`);
+    }
+}
+//# sourceMappingURL=module.js.map

package/dist/kernel/module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.js","sourceRoot":"","sources":["../../src/kernel/module.ts"],"names":[],"mappings":"AAcA,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,GAAmB,EACnB,OAAwB;IAExB,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC3B,GAAG,CAAC,GAAG,CAAC,sBAAsB,MAAM,CAAC,EAAE,EAAE,CAAC,CAAC;IAC7C,CAAC;AACH,CAAC"}

package/dist/kernel/plugin.d.ts

@@ -0,0 +1,68 @@
+import { z } from "zod";
+import type { JournalContext } from "./context.js";
+import type { JournalModule } from "./module.js";
+export declare const manifestSchema: z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodString;
+    version: z.ZodString;
+    description: z.ZodOptional<z.ZodString>;
+    /** Entry file relative to the plugin directory. */
+    main: z.ZodDefault<z.ZodString>;
+    /** Capabilities the plugin declares it needs (shown for consent). */
+    capabilities: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    /** Kernel API version the plugin targets (for future compatibility checks). */
+    kernelApi: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    id: string;
+    name: string;
+    version: string;
+    main: string;
+    capabilities: string[];
+    description?: string | undefined;
+    kernelApi?: string | undefined;
+}, {
+    id: string;
+    name: string;
+    version: string;
+    description?: string | undefined;
+    main?: string | undefined;
+    capabilities?: string[] | undefined;
+    kernelApi?: string | undefined;
+}>;
+export type PluginManifest = z.infer<typeof manifestSchema>;
+declare const pluginConfigSchema: z.ZodObject<{
+    plugins: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        enabled: z.ZodBoolean;
+    }, "strip", z.ZodTypeAny, {
+        id: string;
+        enabled: boolean;
+    }, {
+        id: string;
+        enabled: boolean;
+    }>, "many">>;
+}, "strip", z.ZodTypeAny, {
+    plugins: {
+        id: string;
+        enabled: boolean;
+    }[];
+}, {
+    plugins?: {
+        id: string;
+        enabled: boolean;
+    }[] | undefined;
+}>;
+export type PluginConfig = z.infer<typeof pluginConfigSchema>;
+export declare function loadPluginConfig(path: string): Promise<PluginConfig>;
+export declare function savePluginConfig(path: string, cfg: PluginConfig): Promise<void>;
+/** Read + validate a plugin manifest from a plugin directory. */
+export declare function readManifest(dir: string): Promise<PluginManifest>;
+/** Dynamically import a plugin's module and validate its shape. */
+export declare function loadPluginModule(dir: string, manifest: PluginManifest): Promise<JournalModule>;
+/** Load and register every enabled installed plugin. Never throws — a bad
+ *  plugin is logged and skipped so the server still starts. */
+export declare function loadInstalledPlugins(ctx: JournalContext): Promise<void>;
+export declare function isValidPluginId(id: string): boolean;
+export declare function pluginDir(ctx: JournalContext, id: string): string;
+export declare function assertAbsoluteDir(source: string): void;
+export {};

package/dist/kernel/plugin.js

@@ -0,0 +1,144 @@
+/**
+ * Plugin loading.
+ *
+ * A plugin is a directory containing a `donguri.plugin.json` manifest and an ESM
+ * entry that default-exports a JournalModule. Installed plugins live under
+ * `config.pluginsDir/<id>`; which ones are enabled is recorded in
+ * `config.pluginsConfigPath`.
+ *
+ * SECURITY: installing a plugin runs third-party code in-process with the same
+ * access as the core. Installation therefore requires explicit owner
+ * confirmation (see the install_plugin tool), and manifests declare the
+ * capabilities they need. Capability *enforcement* (a restricted context) and
+ * process isolation are later hardening steps — today the declared capabilities
+ * are surfaced for consent but not yet sandboxed.
+ */
+import { existsSync } from "node:fs";
+import { mkdir, readFile, realpath, rename, writeFile } from "node:fs/promises";
+import { isAbsolute, join, resolve, sep } from "node:path";
+import { pathToFileURL } from "node:url";
+import { z } from "zod";
+const PLUGIN_ID = /^[a-z0-9][a-z0-9-]{0,63}$/;
+export const manifestSchema = z.object({
+    id: z.string().regex(PLUGIN_ID, "id must be a lowercase slug (a-z, 0-9, -)"),
+    name: z.string().min(1),
+    version: z.string().min(1),
+    description: z.string().optional(),
+    /** Entry file relative to the plugin directory. */
+    main: z.string().default("index.js"),
+    /** Capabilities the plugin declares it needs (shown for consent). */
+    capabilities: z.array(z.string()).default([]),
+    /** Kernel API version the plugin targets (for future compatibility checks). */
+    kernelApi: z.string().optional(),
+});
+const pluginConfigSchema = z.object({
+    plugins: z.array(z.object({ id: z.string(), enabled: z.boolean() })).default([]),
+});
+export async function loadPluginConfig(path) {
+    if (!existsSync(path))
+        return { plugins: [] };
+    const raw = await readFile(path, "utf8");
+    try {
+        return pluginConfigSchema.parse(JSON.parse(raw));
+    }
+    catch (err) {
+        // Do NOT silently fall back to empty: a caller that then saves would wipe
+        // the enabled-plugins list. Surface it so callers can abort.
+        throw new Error(`plugin config at ${path} is unreadable/invalid: ${err instanceof Error ? err.message : String(err)}`);
+    }
+}
+export async function savePluginConfig(path, cfg) {
+    await mkdir(resolve(path, ".."), { recursive: true });
+    // Write atomically (tmp + rename) so an interrupted write can't corrupt it.
+    const tmp = `${path}.tmp`;
+    await writeFile(tmp, JSON.stringify(cfg, null, 2));
+    await rename(tmp, path);
+}
+/**
+ * Resolve the entry file and prove it stays inside the plugin directory. Uses
+ * realpath so a symlink under the plugin dir can't point `import()` outside, and
+ * checks on a path boundary (not a bare prefix) so a sibling like `<dir>-evil`
+ * can't pass either. Returns the real (canonical) entry path.
+ */
+async function safeEntryPath(dir, main) {
+    const base = await realpath(dir);
+    let entry;
+    try {
+        entry = await realpath(resolve(dir, main));
+    }
+    catch {
+        throw new Error("manifest.main does not resolve to a file inside the plugin directory");
+    }
+    if (entry !== base && !entry.startsWith(base + sep)) {
+        throw new Error("manifest.main escapes the plugin directory");
+    }
+    return entry;
+}
+/** Read + validate a plugin manifest from a plugin directory. */
+export async function readManifest(dir) {
+    const manifestPath = join(dir, "donguri.plugin.json");
+    if (!existsSync(manifestPath)) {
+        throw new Error(`no donguri.plugin.json in ${dir}`);
+    }
+    const manifest = manifestSchema.parse(JSON.parse(await readFile(manifestPath, "utf8")));
+    await safeEntryPath(dir, manifest.main);
+    return manifest;
+}
+/** Dynamically import a plugin's module and validate its shape. */
+export async function loadPluginModule(dir, manifest) {
+    const entry = await safeEntryPath(dir, manifest.main);
+    const imported = (await import(pathToFileURL(entry).href));
+    const candidate = imported.default ?? imported.module;
+    if (!isJournalModule(candidate)) {
+        throw new Error(`plugin ${manifest.id} does not export a JournalModule`);
+    }
+    return candidate;
+}
+function isJournalModule(value) {
+    return (typeof value === "object" &&
+        value !== null &&
+        typeof value.id === "string" &&
+        typeof value.register === "function");
+}
+/** Load and register every enabled installed plugin. Never throws — a bad
+ *  plugin is logged and skipped so the server still starts. */
+export async function loadInstalledPlugins(ctx) {
+    let cfg;
+    try {
+        cfg = await loadPluginConfig(ctx.config.pluginsConfigPath);
+    }
+    catch (err) {
+        ctx.log("plugin config unreadable; loading no plugins:", err);
+        return;
+    }
+    for (const entry of cfg.plugins) {
+        if (!entry.enabled)
+            continue;
+        if (!PLUGIN_ID.test(entry.id)) {
+            ctx.log(`skipping plugin with invalid id: ${entry.id}`);
+            continue;
+        }
+        const dir = join(ctx.config.pluginsDir, entry.id);
+        try {
+            const manifest = await readManifest(dir);
+            const mod = await loadPluginModule(dir, manifest);
+            await mod.register(ctx);
+            ctx.log(`plugin loaded: ${manifest.id}@${manifest.version}`);
+        }
+        catch (err) {
+            ctx.log(`failed to load plugin ${entry.id}:`, err);
+        }
+    }
+}
+export function isValidPluginId(id) {
+    return PLUGIN_ID.test(id);
+}
+export function pluginDir(ctx, id) {
+    return join(ctx.config.pluginsDir, id);
+}
+export function assertAbsoluteDir(source) {
+    if (!isAbsolute(source) || !existsSync(source)) {
+        throw new Error("source must be an absolute path to an existing plugin directory");
+    }
+}
+//# sourceMappingURL=plugin.js.map

package/dist/kernel/plugin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin.js","sourceRoot":"","sources":["../../src/kernel/plugin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAChF,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAC3D,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,MAAM,SAAS,GAAG,2BAA2B,CAAC;AAE9C,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,2CAA2C,CAAC;IAC5E,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,mDAAmD;IACnD,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC;IACpC,qEAAqE;IACrE,YAAY,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC7C,+EAA+E;IAC/E,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACjC,CAAC,CAAC;AAIH,MAAM,kBAAkB,GAAG,CAAC,CAAC,MAAM,CAAC;IAClC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;CACjF,CAAC,CAAC;AAIH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAY;IACjD,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAC9C,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACzC,IAAI,CAAC;QACH,OAAO,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;IACnD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,0EAA0E;QAC1E,6DAA6D;QAC7D,MAAM,IAAI,KAAK,CACb,oBAAoB,IAAI,2BAA2B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACtG,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAY,EAAE,GAAiB;IACpE,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,4EAA4E;IAC5E,MAAM,GAAG,GAAG,GAAG,IAAI,MAAM,CAAC;IAC1B,MAAM,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IACnD,MAAM,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,aAAa,CAAC,GAAW,EAAE,IAAY;IACpD,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,KAAa,CAAC;IAClB,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,sEAAsE,CAAC,CAAC;IAC1F,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,iEAAiE;AACjE,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,GAAW;IAC5C,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,EAAE,qBAAqB,CAAC,CAAC;IACtD,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,6BAA6B,GAAG,EAAE,CAAC,CAAC;IACtD,CAAC;IACD,MAAM,QAAQ,GAAG,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;IACxF,MAAM,aAAa,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;IACxC,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,mEAAmE;AACnE,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,GAAW,EACX,QAAwB;IAExB,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,CAAC,MAAM,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAGxD,CAAC;IACF,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC;IACtD,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC,EAAE,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,UAAU,QAAQ,CAAC,EAAE,kCAAkC,CAAC,CAAC;IAC3E,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,OAAQ,KAAuB,CAAC,EAAE,KAAK,QAAQ;QAC/C,OAAQ,KAAuB,CAAC,QAAQ,KAAK,UAAU,CACxD,CAAC;AACJ,CAAC;AAED;+DAC+D;AAC/D,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,GAAmB;IAC5D,IAAI,GAAiB,CAAC;IACtB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;IAC7D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,GAAG,CAAC,GAAG,CAAC,+CAA+C,EAAE,GAAG,CAAC,CAAC;QAC9D,OAAO;IACT,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;QAChC,IAAI,CAAC,KAAK,CAAC,OAAO;YAAE,SAAS;QAC7B,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;YAC9B,GAAG,CAAC,GAAG,CAAC,oCAAoC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC;YACxD,SAAS;QACX,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;QAClD,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;YACzC,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YAClD,MAAM,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YACxB,GAAG,CAAC,GAAG,CAAC,kBAAkB,QAAQ,CAAC,EAAE,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAC;QAC/D,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,GAAG,CAAC,yBAAyB,KAAK,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;AACH,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,EAAU;IACxC,OAAO,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,GAAmB,EAAE,EAAU;IACvD,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAAc;IAC9C,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;IACrF,CAAC;AACH,CAAC"}

package/dist/kernel/result.d.ts

@@ -0,0 +1,14 @@
+/** Shared MCP tool-result helpers used across modules. */
+export declare function jsonResult(payload: unknown): {
+    content: {
+        type: "text";
+        text: string;
+    }[];
+};
+export declare function errorResult(message: string): {
+    content: {
+        type: "text";
+        text: string;
+    }[];
+    isError: boolean;
+};

package/dist/kernel/result.js

@@ -0,0 +1,11 @@
+/** Shared MCP tool-result helpers used across modules. */
+export function jsonResult(payload) {
+    return { content: [{ type: "text", text: JSON.stringify(payload, null, 2) }] };
+}
+export function errorResult(message) {
+    return {
+        content: [{ type: "text", text: JSON.stringify({ error: message }, null, 2) }],
+        isError: true,
+    };
+}
+//# sourceMappingURL=result.js.map

package/dist/kernel/result.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"result.js","sourceRoot":"","sources":["../../src/kernel/result.ts"],"names":[],"mappings":"AAAA,0DAA0D;AAE1D,MAAM,UAAU,UAAU,CAAC,OAAgB;IACzC,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AAC1F,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,OAAe;IACzC,OAAO;QACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;QACvF,OAAO,EAAE,IAAI;KACd,CAAC;AACJ,CAAC"}

package/dist/management/module.d.ts

@@ -0,0 +1,2 @@
+import type { JournalModule } from "../kernel/module.js";
+export declare const managementModule: JournalModule;

package/dist/management/module.js

@@ -0,0 +1,39 @@
+import { jsonResult } from "../kernel/result.js";
+import { startManagementUi } from "./server.js";
+export const managementModule = {
+    id: "management",
+    register(ctx) {
+        let running = null;
+        let starting = null;
+        ctx.server.registerTool("open_management_ui", {
+            title: "Open the management console",
+            description: "Start (or return the URL of) the local, browser-based management console for the owner " +
+                "to inspect their journal directly — outside this LLM conversation. It offers browsing, " +
+                "filtering, semantic recall, and storage stats over a localhost-only web page. Use this " +
+                "when the user wants to look through their journal themselves, manage it, or see storage " +
+                "usage in a UI. The URL contains a session token and binds to localhost only; share it " +
+                "with the user so they can open it in their browser. It is NOT for you to fetch data " +
+                "from — use query_entries / recall_related / storage_stats for that.",
+            inputSchema: {},
+        }, async () => {
+            if (running) {
+                return jsonResult({ url: running.url, port: running.port, already_running: true });
+            }
+            // Guard against concurrent calls racing two listeners onto the port.
+            if (!starting) {
+                starting = startManagementUi(ctx)
+                    .then((ui) => {
+                    running = ui;
+                    ctx.log(`management UI listening on ${ctx.config.uiHost}:${ui.port}`);
+                    return ui;
+                })
+                    .finally(() => {
+                    starting = null;
+                });
+            }
+            const ui = await starting;
+            return jsonResult({ url: ui.url, port: ui.port, already_running: false });
+        });
+    },
+};
+//# sourceMappingURL=module.js.map

package/dist/management/module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.js","sourceRoot":"","sources":["../../src/management/module.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACjD,OAAO,EAAqB,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAEnE,MAAM,CAAC,MAAM,gBAAgB,GAAkB;IAC7C,EAAE,EAAE,YAAY;IAChB,QAAQ,CAAC,GAAmB;QAC1B,IAAI,OAAO,GAAwB,IAAI,CAAC;QACxC,IAAI,QAAQ,GAAiC,IAAI,CAAC;QAElD,GAAG,CAAC,MAAM,CAAC,YAAY,CACrB,oBAAoB,EACpB;YACE,KAAK,EAAE,6BAA6B;YACpC,WAAW,EACT,yFAAyF;gBACzF,yFAAyF;gBACzF,yFAAyF;gBACzF,0FAA0F;gBAC1F,wFAAwF;gBACxF,sFAAsF;gBACtF,qEAAqE;YACvE,WAAW,EAAE,EAAE;SAChB,EACD,KAAK,IAAI,EAAE;YACT,IAAI,OAAO,EAAE,CAAC;gBACZ,OAAO,UAAU,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC;YACrF,CAAC;YACD,qEAAqE;YACrE,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACd,QAAQ,GAAG,iBAAiB,CAAC,GAAG,CAAC;qBAC9B,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE;oBACX,OAAO,GAAG,EAAE,CAAC;oBACb,GAAG,CAAC,GAAG,CAAC,8BAA8B,GAAG,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;oBACtE,OAAO,EAAE,CAAC;gBACZ,CAAC,CAAC;qBACD,OAAO,CAAC,GAAG,EAAE;oBACZ,QAAQ,GAAG,IAAI,CAAC;gBAClB,CAAC,CAAC,CAAC;YACP,CAAC;YACD,MAAM,EAAE,GAAG,MAAM,QAAQ,CAAC;YAC1B,OAAO,UAAU,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5E,CAAC,CACF,CAAC;IACJ,CAAC;CACF,CAAC"}

package/dist/management/server.d.ts

@@ -0,0 +1,18 @@
+import { type Server } from "node:http";
+import type { JournalContext } from "../kernel/context.js";
+export interface ManagementUi {
+    url: string;
+    port: number;
+    token: string;
+    close: () => Promise<void>;
+}
+/**
+ * Build (but do not start) the management HTTP server. Exposed for tests, which
+ * drive it on an ephemeral port. Production goes through startManagementUi.
+ */
+export declare function createManagementServer(ctx: JournalContext, token: string): Server;
+/**
+ * Start the management UI on config.uiHost:uiPort (an ephemeral port by
+ * default). Returns the URL (with the session token) to hand to the owner.
+ */
+export declare function startManagementUi(ctx: JournalContext): Promise<ManagementUi>;