dsh-device-fleet 0.1.0-dev.2 → 0.1.0-dev.20

package/src/host/tool-policy.js

@@ -3,7 +3,7 @@
 // the raw-tool allowlist, and short-lived grants created by approvals.
 import path from 'node:path'
 
-export const CAPABILITIES = ['read', 'list', 'grep', 'fetch', 'run', 'tool']
+export const CAPABILITIES = ['read', 'list', 'grep', 'fetch', 'run', 'tool', 'delegate']
 
 export const DEFAULT_POLICY = Object.freeze({
   allowedRoots: [],
@@ -13,7 +13,8 @@ export const DEFAULT_POLICY = Object.freeze({
     grep: 'auto',
     fetch: 'auto',
     run: 'ask',
-    tool: 'deny',
+    tool: 'auto',
+    delegate: 'ask',
   },
   allowedTools: [],
   approvalTtlMs: 15 * 60 * 1000,
@@ -76,15 +77,17 @@ export class ToolPolicy {
       return { decision: 'allow', reason: 'run is allowed by policy', key: grantKey, capability: capabilityName }
     }
     if (capabilityName === 'tool') {
-      if (!this.config.allowedTools.includes(String(tool))) {
-        return {
-          decision: 'deny',
-          reason: `tool ${String(tool)} is not in the allowed tools list`,
-          key: grantKey,
-          capability: capabilityName,
-        }
+      // Raw tools follow the normal DSH tool pipeline on this device: the
+      // target Session's tool pre-execute policy and approval seam decide
+      // whether a call runs, asks, or is rejected. `deny` disables raw tools
+      // entirely; `ask` adds the plugin-level approval in front of DSH.
+      if (mode === 'deny') {
+        return { decision: 'deny', reason: 'raw tool calls are disabled by policy', key: grantKey, capability: capabilityName }
+      }
+      if (mode === 'ask') {
+        return { decision: 'ask', reason: 'raw tool call requires local approval', key: grantKey, capability: capabilityName }
       }
-      return { decision: 'allow', reason: 'tool is allowlisted', key: grantKey, capability: capabilityName }
+      return { decision: 'allow', reason: 'raw tool call follows the DSH tool pipeline', key: grantKey, capability: capabilityName }
     }
     if (mode === 'allow') return { decision: 'allow', reason: 'capability is allowed by policy', key: grantKey, capability: capabilityName }
     if (mode === 'auto') return { decision: 'allow', reason: 'capability is auto-approved', key: grantKey, capability: capabilityName }

package/src/host/tools.js

@@ -22,8 +22,71 @@ function fail(error) {
 }
 
 /** Pure handlers; wrapped into ToolDefinitions by `createFleetToolDefinitions`. */
-export function createFleetHandlers({ node, client = new DirectCallClient({ node }), pairing = null }) {
+export function createFleetHandlers({
+  node,
+  client = new DirectCallClient({ node }),
+  pairing = null,
+  onPeerHint = null,
+  approvals = null,
+  rooms = null,
+}) {
   return {
+    async fleet_approvals() {
+      if (!approvals?.list) return { text: 'Error: [unsupported] the approval inbox is unavailable' }
+      const items = approvals.list()
+      if (items.length === 0) return { text: '(no pending approvals)' }
+      const lines = items.map(
+        (item) =>
+          `- ${item.id} · ${item.fromDeviceId} · ${item.capability}${item.tool ? `/${String(item.tool)}` : ''} · ${item.expiresInMs}ms left · ${item.argsSummary}`,
+      )
+      return { text: lines.join('\n') }
+    },
+
+    async fleet_approve({ id, scope }) {
+      if (!approvals?.approve) return { text: 'Error: [unsupported] the approval inbox is unavailable' }
+      try {
+        const result = approvals.approve(id, { scope: scope ?? 'once' })
+        return { text: `approved ${result.id} (${result.scope})` }
+      } catch (error) {
+        return fail(error)
+      }
+    },
+
+    async fleet_deny({ id, reason }) {
+      if (!approvals?.deny) return { text: 'Error: [unsupported] the approval inbox is unavailable' }
+      try {
+        const result = approvals.deny(id, reason ?? 'denied by local user')
+        return { text: `denied ${result.id}` }
+      } catch (error) {
+        return fail(error)
+      }
+    },
+
+    async fleet_simulate_request({ fromDeviceId, capability, tool, reason }) {
+      if (!approvals?.simulate) return { text: 'Error: [unsupported] approval simulation is disabled' }
+      try {
+        return { text: await approvals.simulate({ fromDeviceId, capability, tool, reason }) }
+      } catch (error) {
+        return fail(error)
+      }
+    },
+    async fleet_status() {
+      if (typeof node.status !== 'function') return { text: 'Error: [unsupported] status is unavailable' }
+      return { text: JSON.stringify(node.status(), null, 2) }
+    },
+
+    async fleet_connect({ host, port }) {
+      if (typeof node.connectAddress !== 'function') return { text: 'Error: [unsupported] manual connect is unavailable' }
+      try {
+        node.addPeerHint?.({ host, port })
+        const peer = await node.connectAddress(host, port)
+        await onPeerHint?.({ host, port })
+        return { text: `connected to ${peer.deviceId} (${peer.name ?? 'device'}) at ${host}:${port}` }
+      } catch (error) {
+        return fail(error)
+      }
+    },
+
     async fleet_invite() {
       if (!pairing?.invite) return { text: 'Error: [unsupported] this device cannot create an invite' }
       try {
@@ -52,6 +115,123 @@ export function createFleetHandlers({ node, client = new DirectCallClient({ node
       }
     },
 
+    async room_create(args, exec) {
+      if (!rooms) return { text: 'Error: [unsupported] rooms are unavailable' }
+      try {
+        const room = await rooms.upgradeHost({ agent: exec?.agent, policy: args?.policy ?? {} })
+        return {
+          text: [
+            `room created: ${room.roomId}`,
+            `host: ${room.members.find((member) => member.role === 'host')?.memberId ?? '?'}`,
+            'Add participants with room_add_local (simulation) or the remote invite flow later, then room_send.',
+          ].join('\n'),
+        }
+      } catch (error) {
+        return fail(error)
+      }
+    },
+
+    async room_add_local({ roomId, name, agentPreset, cwd }) {
+      if (!rooms) return { text: 'Error: [unsupported] rooms are unavailable' }
+      try {
+        const member = await rooms.addLocalParticipant({ roomId, name, agentPreset, cwd })
+        return { text: `participant added: ${member.memberId} (${member.name}) session=${member.sessionId}` }
+      } catch (error) {
+        return fail(error)
+      }
+    },
+
+    async room_remove_member({ roomId, memberId, reason }) {
+      if (!rooms) return { text: 'Error: [unsupported] rooms are unavailable' }
+      try {
+        const result = await rooms.removeMember({ roomId, memberId, reason })
+        return { text: `member removed: ${result.memberId}` }
+      } catch (error) {
+        return fail(error)
+      }
+    },
+
+    async room_send({ roomId, to, text }, exec) {
+      if (!rooms) return { text: 'Error: [unsupported] rooms are unavailable' }
+      try {
+        const from = { sessionId: exec?.agent?.session?.id }
+        const result = await rooms.send({ roomId, from, to, text })
+        const woken = result.woken.length > 0 ? `, woke ${result.woken.join(', ')}` : ''
+        return { text: `message ${result.messageId} sent to ${result.to.join(', ')}${woken}` }
+      } catch (error) {
+        return fail(error)
+      }
+    },
+
+    async room_messages({ roomId, limit }) {
+      if (!rooms) return { text: 'Error: [unsupported] rooms are unavailable' }
+      try {
+        const items = rooms.messages({ roomId, limit })
+        if (items.length === 0) return { text: '(no messages)' }
+        const lines = items.map(
+          (message) => `- [${new Date(message.createdAt).toISOString()}] ${message.fromLabel} → ${message.to.join(', ')}: ${message.text}`,
+        )
+        return { text: lines.join('\n') }
+      } catch (error) {
+        return fail(error)
+      }
+    },
+
+    async room_status({ roomId }) {
+      if (!rooms) return { text: 'Error: [unsupported] rooms are unavailable' }
+      try {
+        return { text: JSON.stringify(rooms.status(roomId), null, 2) }
+      } catch (error) {
+        return fail(error)
+      }
+    },
+
+    async room_task_add({ roomId, title, owner, dependsOn, description }) {
+      if (!rooms) return { text: 'Error: [unsupported] rooms are unavailable' }
+      try {
+        const task = await rooms.addTask({ roomId, title, owner, dependsOn: dependsOn ?? [], description: description ?? '' })
+        return { text: `task ${task.id} added for ${task.owner}: ${task.title}` }
+      } catch (error) {
+        return fail(error)
+      }
+    },
+
+    async room_task_update({ roomId, id, status, note }) {
+      if (!rooms) return { text: 'Error: [unsupported] rooms are unavailable' }
+      try {
+        const result = await rooms.updateTask({ roomId, id, status, note })
+        const handed = result.handedOff.length > 0 ? `; handed off to ${result.handedOff.map((item) => item.owner).join(', ')}` : ''
+        return { text: `task ${result.task.id} updated (${result.task.status})${handed}` }
+      } catch (error) {
+        return fail(error)
+      }
+    },
+
+    async room_task_list({ roomId }) {
+      if (!rooms) return { text: 'Error: [unsupported] rooms are unavailable' }
+      try {
+        const tasks = rooms.listTasks(roomId)
+        if (tasks.length === 0) return { text: '(no tasks)' }
+        return {
+          text: tasks
+            .map((task) => `- [${task.status}] ${task.title} (${task.id}) owner=${task.owner}${task.dependsOn.length ? ` deps=${task.dependsOn.join(',')}` : ''}`)
+            .join('\n'),
+        }
+      } catch (error) {
+        return fail(error)
+      }
+    },
+
+    async room_close({ roomId, reason }) {
+      if (!rooms) return { text: 'Error: [unsupported] rooms are unavailable' }
+      try {
+        await rooms.close({ roomId, reason: reason ?? 'closed by host' })
+        return { text: `room closed: ${roomId}` }
+      } catch (error) {
+        return fail(error)
+      }
+    },
+
     async fleet_list() {
       const lines = []
       lines.push(`this device: ${node.identity.deviceId} (${node.name})`)
@@ -93,6 +273,20 @@ export function createFleetHandlers({ node, client = new DirectCallClient({ node
       }
     },
 
+    async fleet_delegate({ device, task, label, cwd }) {
+      try {
+        const result = await client.delegate(
+          device,
+          { task, ...(label ? { label } : {}), ...(cwd ? { cwd } : {}) },
+          { timeoutMs: 200_000 },
+        )
+        const meta = result?.childId ? `\n[delegated on ${device} · ${String(result.durationMs ?? 0)}ms · child ${String(result.childId)}]` : ''
+        return { text: `${String(result?.text ?? '')}${meta}`.trim() }
+      } catch (error) {
+        return fail(error)
+      }
+    },
+
     async fleet_read({ device, path, offset, limit }) {
       try {
         const args = { file_path: path }
@@ -130,6 +324,174 @@ export function createFleetToolDefinitions({ defineTool, handlers }) {
   const output = textOutput()
   const commonDevice = { type: 'string', required: true, description: 'Target device id from `fleet_list`.' }
   return [
+    defineTool({
+      name: 'fleet_status',
+      description:
+        'Show this device\'s Fleet network status for troubleshooting: device id, direct listener address/port, discovery, connected peers, roster and invite/manual address hints. Use it when discovery does not find the other device.',
+      parameters: {},
+      output,
+      execute: () => handlers.fleet_status(),
+    }),
+    defineTool({
+      name: 'fleet_connect',
+      description:
+        'Connect to another device by explicit host and port when LAN discovery is unavailable. Use it with the port printed by that device\'s `fleet_status`; the peer id is learned from the authenticated handshake.',
+      parameters: {
+        host: { type: 'string', required: true, description: 'Target host/IP address on the LAN or VPN.' },
+        port: { type: 'number', required: true, description: 'Target device\'s Fleet direct port (from its fleet_status).' },
+      },
+      output,
+      execute: (args) => handlers.fleet_connect(args),
+    }),
+    defineTool({
+      name: 'fleet_approvals',
+      description:
+        'List pending approval requests waiting on this device (remote direct calls or delegations whose Tool Policy is `ask`). Approve or deny them with `fleet_approve` / `fleet_deny`. Approvals expire after the configured timeout and fail closed.',
+      parameters: {},
+      output,
+      execute: () => handlers.fleet_approvals(),
+    }),
+    defineTool({
+      name: 'fleet_approve',
+      description:
+        'Approve one pending approval request on this device. `scope: "once"` allows one call; `scope: "ttl"` allows that capability for the configured TTL (default 15 minutes). Permanent grants belong in the device settings, not here.',
+      parameters: {
+        id: { type: 'string', required: true, description: 'Approval request id from `fleet_approvals`.' },
+        scope: { type: 'string', enum: ['once', 'ttl'], description: 'Approval scope; defaults to once.' },
+      },
+      output,
+      execute: (args) => handlers.fleet_approve(args),
+    }),
+    defineTool({
+      name: 'fleet_deny',
+      description: 'Deny one pending approval request on this device.',
+      parameters: {
+        id: { type: 'string', required: true, description: 'Approval request id from `fleet_approvals`.' },
+        reason: { type: 'string', description: 'Optional reason returned to the caller.' },
+      },
+      output,
+      execute: (args) => handlers.fleet_deny(args),
+    }),
+    defineTool({
+      name: 'fleet_simulate_request',
+      description:
+        'Development helper (only when approval simulation is enabled): create a fake pending approval request so the inbox flow can be exercised without a second device. It does not execute anything.',
+      parameters: {
+        fromDeviceId: { type: 'string', description: 'Pretend caller device id.' },
+        capability: { type: 'string', description: 'Capability name, e.g. run.' },
+        tool: { type: 'string', description: 'Optional tool name.' },
+        reason: { type: 'string', description: 'Optional reason shown in the request.' },
+      },
+      output,
+      execute: (args) => handlers.fleet_simulate_request(args),
+    }),
+    defineTool({
+      name: 'room_create',
+      description:
+        'Upgrade the current session into a Room Host (local logic layer) so multiple agents can collaborate with shared messages and a shared task board. Add participants with `room_add_local` (simulation) or the future remote invite flow. Only do this when the user explicitly wants multi-agent collaboration, not for a one-off remote tool call.',
+      parameters: {
+        policy: { type: 'object', additionalProperties: true, description: 'Optional room policy overrides (invite/join/maxMembers/boardWrite/remove).' },
+      },
+      output,
+      execute: (args, exec) => handlers.room_create(args, exec),
+    }),
+    defineTool({
+      name: 'room_add_local',
+      description:
+        'Simulation helper: add a real local DSH agent as a Room participant (its own session). Use it to exercise addressing/wake/board logic in one DSH before the remote participant transport exists.',
+      parameters: {
+        roomId: { type: 'string', required: true, description: 'Room id returned by room_create.' },
+        name: { type: 'string', description: 'Participant display name.' },
+        agentPreset: { type: 'string', description: 'Optional agent preset id for the participant session.' },
+        cwd: { type: 'string', description: 'Optional working directory for the participant session.' },
+      },
+      output,
+      execute: (args) => handlers.room_add_local(args),
+    }),
+    defineTool({
+      name: 'room_remove_member',
+      description: 'Remove a participant from a Room (the host cannot be removed; close the room instead).',
+      parameters: {
+        roomId: { type: 'string', required: true, description: 'Room id.' },
+        memberId: { type: 'string', required: true, description: 'Member id from room_status.' },
+        reason: { type: 'string', description: 'Optional reason recorded in the room log.' },
+      },
+      output,
+      execute: (args) => handlers.room_remove_member(args),
+    }),
+    defineTool({
+      name: 'room_send',
+      description:
+        'Send one addressed Room message as the calling agent. The host appends it to the canonical room log and wakes only the addressed participants; unaddressed members do not run. To say different things to different members, send separate messages.',
+      parameters: {
+        roomId: { type: 'string', required: true, description: 'Room id.' },
+        to: { type: 'array', items: { type: 'string' }, required: true, description: 'Recipient member ids.' },
+        text: { type: 'string', required: true, description: 'Message body.' },
+      },
+      output,
+      execute: (args, exec) => handlers.room_send(args, exec),
+    }),
+    defineTool({
+      name: 'room_messages',
+      description: 'Read the Room transcript (the user-visible complete conversation, including agent-to-agent messages).',
+      parameters: {
+        roomId: { type: 'string', required: true, description: 'Room id.' },
+        limit: { type: 'number', description: 'Maximum recent messages to return (default 50).' },
+      },
+      output,
+      execute: (args) => handlers.room_messages(args),
+    }),
+    defineTool({
+      name: 'room_status',
+      description: 'Show one Room\'s members, policy, message count and task count.',
+      parameters: { roomId: { type: 'string', required: true, description: 'Room id.' } },
+      output,
+      execute: (args) => handlers.room_status(args),
+    }),
+    defineTool({
+      name: 'room_task_add',
+      description:
+        'Add one shared Room Board task. Use dependsOn to express serial handoff: when all dependencies are done, the owner is woken with a "ready" message. Parallel tasks have no dependencies and do not block each other.',
+      parameters: {
+        roomId: { type: 'string', required: true, description: 'Room id.' },
+        title: { type: 'string', required: true, description: 'Task title.' },
+        owner: { type: 'string', required: true, description: 'Owner member id.' },
+        dependsOn: { type: 'array', items: { type: 'string' }, description: 'Task ids that must complete first.' },
+        description: { type: 'string', description: 'Optional task detail.' },
+      },
+      output,
+      execute: (args) => handlers.room_task_add(args),
+    }),
+    defineTool({
+      name: 'room_task_update',
+      description:
+        'Update one Room Board task. Marking it done triggers serial handoff: owners of pending dependent tasks are woken. Keep status/steps current when starting and finishing your block.',
+      parameters: {
+        roomId: { type: 'string', required: true, description: 'Room id.' },
+        id: { type: 'string', required: true, description: 'Task id.' },
+        status: { type: 'string', enum: ['pending', 'running', 'done', 'blocked'], description: 'New status.' },
+        note: { type: 'string', description: 'Optional progress note.' },
+      },
+      output,
+      execute: (args) => handlers.room_task_update(args),
+    }),
+    defineTool({
+      name: 'room_task_list',
+      description: 'List the shared Room Board tasks with status, owner and dependencies.',
+      parameters: { roomId: { type: 'string', required: true, description: 'Room id.' } },
+      output,
+      execute: (args) => handlers.room_task_list(args),
+    }),
+    defineTool({
+      name: 'room_close',
+      description: 'Close a Room (archives its canonical log); participants are no longer woken afterwards.',
+      parameters: {
+        roomId: { type: 'string', required: true, description: 'Room id.' },
+        reason: { type: 'string', description: 'Optional close reason.' },
+      },
+      output,
+      execute: (args) => handlers.room_close(args),
+    }),
     defineTool({
       name: 'fleet_invite',
       description:
@@ -176,6 +538,19 @@ export function createFleetToolDefinitions({ defineTool, handlers }) {
       output,
       execute: (args) => handlers.fleet_call(args),
     }),
+    defineTool({
+      name: 'fleet_delegate',
+      description:
+        'Delegate a one-shot task to another device\'s agent and wait for its final answer. Use it when the work needs that device\'s model and tools ("let B build/check this"), not just one tool call. The delegated agent runs on the target device; it does not join a Room and its history is not shared. The target device decides whether delegation is allowed or needs local approval.',
+      parameters: {
+        device: commonDevice,
+        task: { type: 'string', required: true, description: 'Self-contained task instructions for the target agent.' },
+        label: { type: 'string', description: 'Short label shown in the target device\'s subagent list.' },
+        cwd: { type: 'string', description: 'Optional working directory on the target device.' },
+      },
+      output,
+      execute: (args) => handlers.fleet_delegate(args),
+    }),
     defineTool({
       name: 'fleet_read',
       description:

package/src/host/ui-web.js

@@ -0,0 +1,133 @@
+// Read/action HTTP surface for the Fleet console: device overview, room list and
+// detail, room user actions, pairing actions, and approval history.
+const MAX_BODY_BYTES = 128 * 1024
+
+function json(res, status, value) {
+  res.statusCode = status
+  res.setHeader('content-type', 'application/json; charset=utf-8')
+  res.setHeader('cache-control', 'no-store')
+  res.end(JSON.stringify(value))
+}
+
+async function readJsonBody(req) {
+  const chunks = []
+  let size = 0
+  for await (const chunk of req) {
+    size += chunk.length
+    if (size > MAX_BODY_BYTES) throw Object.assign(new Error('request body is too large'), { code: 'body-too-large' })
+    chunks.push(chunk)
+  }
+  if (chunks.length === 0) return {}
+  try {
+    return JSON.parse(Buffer.concat(chunks).toString('utf8'))
+  } catch {
+    throw Object.assign(new Error('request body must be JSON'), { code: 'bad-json' })
+  }
+}
+
+function statusFor(error) {
+  if (error?.code === 'unknown-room') return 404
+  return ['bad-request', 'bad-json', 'body-too-large', 'readonly', 'unknown-member', 'unknown-task'].includes(error?.code)
+    ? 400
+    : 500
+}
+
+function actionRoute(webServer, path, method, run) {
+  return webServer.register({
+    kind: 'exact',
+    path,
+    handler: async (req, res) => {
+      if (req.method !== method) return json(res, 405, { error: 'method not allowed' })
+      try {
+        const body = method === 'POST' ? await readJsonBody(req) : {}
+        json(res, 200, (await run(body, req)) ?? { ok: true })
+      } catch (error) {
+        json(res, statusFor(error), { error: String(error?.message ?? error), code: error?.code ?? 'error' })
+      }
+    },
+  })
+}
+
+/**
+ * @param {object} options
+ * @param {object} options.webServer ctx.webServer
+ * @param {object} options.inbox ApprovalInbox
+ * @param {object} options.rooms RoomService
+ * @param {() => object} options.getOverview
+ * @param {object} [options.actions] UI actions (room send/task/close, pairing)
+ */
+export function registerUiRoutes({ webServer, inbox, rooms, getOverview, actions = null, logger = null }) {
+  if (!webServer?.register || !rooms) return () => {}
+  const disposers = []
+  disposers.push(
+    actionRoute(webServer, '/device-fleet/overview', 'GET', async () => ({
+      ...getOverview(),
+      approvals: inbox?.list?.() ?? [],
+      approvalHistory: inbox?.history?.() ?? [],
+    })),
+  )
+  disposers.push(
+    actionRoute(webServer, '/device-fleet/rooms', 'GET', async () => ({ rooms: rooms.list() })),
+  )
+  disposers.push(
+    actionRoute(webServer, '/device-fleet/room', 'GET', async (_body, req) => {
+      let roomId = ''
+      try {
+        roomId = new URL(req.url ?? '/', 'http://local').searchParams.get('id') ?? ''
+      } catch {
+        roomId = ''
+      }
+      if (roomId === '') throw Object.assign(new Error('room id is required'), { code: 'bad-request' })
+      return { room: rooms.detail(roomId, { limit: 100 }) }
+    }),
+  )
+  disposers.push(
+    actionRoute(webServer, '/device-fleet/room/send', 'POST', async (body) => {
+      if (!actions?.sendRoomMessage) throw Object.assign(new Error('room actions are unavailable'), { code: 'unsupported' })
+      return { ok: true, result: await actions.sendRoomMessage(body ?? {}) }
+    }),
+  )
+  disposers.push(
+    actionRoute(webServer, '/device-fleet/room/task', 'POST', async (body) => {
+      if (!actions?.roomTask) throw Object.assign(new Error('room actions are unavailable'), { code: 'unsupported' })
+      return { ok: true, result: await actions.roomTask(body ?? {}) }
+    }),
+  )
+  disposers.push(
+    actionRoute(webServer, '/device-fleet/room/close', 'POST', async (body) => {
+      if (!actions?.closeRoom) throw Object.assign(new Error('room actions are unavailable'), { code: 'unsupported' })
+      return { ok: true, result: await actions.closeRoom(body ?? {}) }
+    }),
+  )
+  disposers.push(
+    actionRoute(webServer, '/device-fleet/room/member/remove', 'POST', async (body) => {
+      if (!actions?.removeMember) throw Object.assign(new Error('room actions are unavailable'), { code: 'unsupported' })
+      return { ok: true, result: await actions.removeMember(body ?? {}) }
+    }),
+  )
+  disposers.push(
+    actionRoute(webServer, '/device-fleet/room/upgrade', 'POST', async (body) => {
+      if (!actions?.upgradeRoom) throw Object.assign(new Error('room actions are unavailable'), { code: 'unsupported' })
+      return { ok: true, room: await actions.upgradeRoom(body ?? {}) }
+    }),
+  )
+  disposers.push(
+    actionRoute(webServer, '/device-fleet/pair/invite', 'POST', async () => {
+      if (!actions?.createInvite) throw Object.assign(new Error('pairing actions are unavailable'), { code: 'unsupported' })
+      return { ok: true, code: await actions.createInvite() }
+    }),
+  )
+  disposers.push(
+    actionRoute(webServer, '/device-fleet/pair/connect', 'POST', async (body) => {
+      if (!actions?.connectAddress) throw Object.assign(new Error('pairing actions are unavailable'), { code: 'unsupported' })
+      return { ok: true, result: await actions.connectAddress(body ?? {}) }
+    }),
+  )
+  disposers.push(
+    actionRoute(webServer, '/device-fleet/approvals/history', 'GET', async () => ({ history: inbox?.history?.() ?? [] })),
+  )
+  if (logger) logger.debug?.('[device-fleet] UI action routes registered')
+  return () => {
+    for (const dispose of disposers) dispose()
+  }
+}