fluncle 0.198.0 → 0.200.0

package/bin/fluncle.mjs

@@ -561,7 +561,7 @@ function parseVersion(version) {
 var currentVersion;
 var init_version = __esm(() => {
   init_output();
-  currentVersion = "0.198.0".trim() ? "0.198.0".trim() : "0.1.0";
+  currentVersion = "0.200.0".trim() ? "0.200.0".trim() : "0.1.0";
 });
 
 // src/update-notifier.ts
@@ -797,7 +797,7 @@ var init_env = __esm(() => {
 });
 
 // src/user-token.ts
-import { mkdirSync, readFileSync, rmSync, writeFileSync } from "node:fs";
+import { chmodSync, mkdirSync, readFileSync, rmSync, writeFileSync } from "node:fs";
 import { homedir as homedir3 } from "node:os";
 import { dirname as dirname2, join as join3 } from "node:path";
 function activeProfile() {
@@ -824,9 +824,14 @@ function readUserToken() {
 }
 function writeUserToken(value) {
   const path2 = userTokenPath();
-  mkdirSync(dirname2(path2), { recursive: true });
+  const dir = dirname2(path2);
+  mkdirSync(dir, { mode: 448, recursive: true });
+  try {
+    chmodSync(dir, 448);
+  } catch {}
   writeFileSync(path2, `${JSON.stringify(value, null, 2)}
 `, { mode: 384 });
+  chmodSync(path2, 384);
 }
 function clearUserToken() {
   const path2 = userTokenPath();
@@ -2443,7 +2448,7 @@ function parseVersion2(version) {
 var currentVersion2, latestReleaseUrl = "https://api.github.com/repos/mauricekleine/fluncle/releases/latest";
 var init_version2 = __esm(() => {
   init_output();
-  currentVersion2 = "0.198.0".trim() ? "0.198.0".trim() : "0.1.0";
+  currentVersion2 = "0.200.0".trim() ? "0.200.0".trim() : "0.1.0";
 });
 
 // ../../packages/registry/src/index.ts
@@ -2489,7 +2494,7 @@ var init_src = __esm(() => {
       probeConfig: { cadenceMs: PROBE_CADENCE_MS, kind: "http", timeoutMs: PROBE_TIMEOUT_MS },
       route: "/logbook",
       url: `${SITE}/logbook`,
-      weights: { ssh: "tertiary", web: "primary" }
+      weights: { web: "primary" }
     },
     {
       exposedContent: ["Fluncle's own DJ mixtapes — each a checkpoint set with an F-marked Log ID"],
@@ -2680,6 +2685,56 @@ var init_src = __esm(() => {
       url: `${SITE}/galaxies`,
       weights: { ssh: "secondary", web: "secondary" }
     },
+    {
+      exposedContent: [
+        "the signed-in account door: a listener's Galaxy progress, the findings and sets they saved, the tracks they submitted, and their account settings"
+      ],
+      kind: "web_route",
+      name: "web.account",
+      operatorNotes: "A WORKSTATION, not a lore page (VOICE.md §5 The Three Areas): chrome register throughout. PUBLIC and always 200 — signed out it serves the sign-in / join door, so it is honestly HTTP-probeable; every door's data is session-scoped and read on the server. `noindex` (a private per-user surface, self-canonical), so it stays out of the sitemap and llms.txt while remaining a registered, advertised surface: the nav's `Your account` CTA points here. Source: apps/web/src/routes/account.tsx + components/account.",
+      probeConfig: { cadenceMs: PROBE_CADENCE_MS, kind: "http", timeoutMs: PROBE_TIMEOUT_MS },
+      route: "/account",
+      url: `${SITE}/account`,
+      weights: { web: "secondary" }
+    },
+    {
+      exposedContent: [
+        "ChatDnB — a chat with Fluncle over his own archive; he answers from his certified findings"
+      ],
+      kind: "web_route",
+      name: "web.chat",
+      operatorNotes: "The public face of ChatDnB. Gated to verified-email accounts (the rollout cohort); the server route re-checks the session, the verification, the origin/CSRF, and the rate dials on every turn. PENDING = registered but dark until the rollout opens to everyone.",
+      pending: true,
+      probeConfig: { cadenceMs: PROBE_CADENCE_MS, kind: "http", timeoutMs: PROBE_TIMEOUT_MS },
+      route: "/chat",
+      url: `${SITE}/chat`,
+      weights: { web: "secondary" }
+    },
+    {
+      exposedContent: [
+        "the per-listener recommendations door: a signed-in listener names the tracks they love, the Ear lines the catalogue up against those seeds, and the result lands as a playlist on Fluncle's own Spotify, refreshed weekly"
+      ],
+      kind: "web_route",
+      name: "web.recommendations",
+      operatorNotes: "E1/E2, the recommendation machine's public door. Three states off the session (anonymous pitch, unverified pointer, verified surface); the DRAFT read is the one place the live vector scan sits on a read path, rate-limited per user and degrading to empty rather than blocking the door. PENDING = registered but dark until the rollout opens.",
+      pending: true,
+      probeConfig: { cadenceMs: PROBE_CADENCE_MS, kind: "http", timeoutMs: PROBE_TIMEOUT_MS },
+      route: "/recommendations",
+      url: `${SITE}/recommendations`,
+      weights: { web: "secondary" }
+    },
+    {
+      exposedContent: [
+        "the galaxy factory — a draggable map of a finding's whole life, from the first CMD+F through the enrichment sweeps to the launch into the Galaxy"
+      ],
+      kind: "web_route",
+      name: "web.pipeline",
+      operatorNotes: "A public console page (VOICE.md §5 The Three Areas), written in the builder's-tour register. Client-only DOM/SVG/canvas — the whole map is a chunk loaded in useEffect, so it costs the archive's bundle nothing — over an SSR shell that answers 200, so it is HTTP-probeable. `noindex` (a for-the-nerds machinery view, not a search surface), so it stays out of the sitemap; the nav's Crew section links it. Source: apps/web/src/routes/pipeline.tsx + src/pipeline.",
+      probeConfig: { cadenceMs: PROBE_CADENCE_MS, kind: "http", timeoutMs: PROBE_TIMEOUT_MS },
+      route: "/pipeline",
+      url: `${SITE}/pipeline`,
+      weights: { web: "tertiary" }
+    },
     {
       exposedContent: ["the privacy policy"],
       kind: "web_route",
@@ -3156,6 +3211,20 @@ var init_src = __esm(() => {
       url: `${SITE}/oembed`,
       weights: { web: "tertiary" }
     },
+    {
+      apiFormat: "text/x-shellscript",
+      discoveryUrl: `${SITE}/llms.txt`,
+      exposedContent: [
+        "the one-line CLI installer: picks the right `fluncle` binary for the machine off the latest GitHub release and drops it in place"
+      ],
+      kind: "discovery",
+      name: "discovery.cli-installer",
+      operatorNotes: "`curl -fsSL https://www.fluncle.com/cli/latest.sh | sh`, the install path the /docs/cli page, the rave terminal's Install CLI screen, the CLI's own update hint, and llms.txt (§Tools) all point at. A machine-FETCHED document rather than a page, which is why it is catalogued as `discovery` next to robots.txt and llms.txt: nothing about it is browsable, and its only reader is a shell. Always 200 (it is generated in the route, no upstream call), so the post-deploy probe asserts a non-empty body on it. Source: apps/web/src/routes/cli/latest[.]sh.ts.",
+      probeConfig: { cadenceMs: PROBE_CADENCE_MS, kind: "http", timeoutMs: PROBE_TIMEOUT_MS },
+      route: "/cli/latest.sh",
+      url: `${SITE}/cli/latest.sh`,
+      weights: { web: "tertiary" }
+    },
     {
       apiFormat: "application/json",
       discoveryUrl: `${SITE}/.well-known/mcp/server-card.json`,
@@ -3239,6 +3308,15 @@ var init_src = __esm(() => {
       name: "cli.labels",
       weights: { cli: "secondary" }
     },
+    {
+      command: "fluncle galaxies",
+      exposedContent: [
+        "wander Fluncle's sonic galaxies, the browse-by-feel lens (bare `slug` opens one)"
+      ],
+      kind: "cli",
+      name: "cli.galaxies",
+      weights: { cli: "secondary" }
+    },
     {
       command: "fluncle search",
       exposedContent: ["search the archive by coordinate, track, artist, label, or album"],
@@ -3274,6 +3352,27 @@ var init_src = __esm(() => {
       name: "cli.submit",
       weights: { cli: "secondary" }
     },
+    {
+      command: "fluncle login",
+      exposedContent: ["link this device to your Fluncle account, so your Galaxy progress syncs"],
+      kind: "cli",
+      name: "cli.login",
+      weights: { cli: "secondary" }
+    },
+    {
+      command: "fluncle me",
+      exposedContent: ["your account and Galaxy progress (sign in with `fluncle login`)"],
+      kind: "cli",
+      name: "cli.me",
+      weights: { cli: "secondary" }
+    },
+    {
+      command: "fluncle logout",
+      exposedContent: ["unlink this device from your account"],
+      kind: "cli",
+      name: "cli.logout",
+      weights: { cli: "tertiary" }
+    },
     {
       command: "fluncle tracks get",
       exposedContent: ["look up one finding by id or Log ID (group alias `track`)"],
@@ -3304,6 +3403,14 @@ var init_src = __esm(() => {
       name: "cli.version",
       weights: { cli: "tertiary" }
     },
+    {
+      command: "fluncle status",
+      exposedContent: ["how Fluncle's services are holding up (the /status board, in the terminal)"],
+      kind: "cli",
+      name: "cli.status",
+      operatorNotes: "Reads the public status snapshot and labels each service off `liveSurfaces()` — a registry CONSUMER as well as a registry entry. Source: apps/cli/src/commands/status.ts.",
+      weights: { cli: "tertiary" }
+    },
     {
       command: "fluncle admin",
       exposedContent: [
@@ -3324,6 +3431,17 @@ var init_src = __esm(() => {
       url: "https://chromewebstore.google.com/detail/efkkceaofendabikblfjhoepgejfpakk",
       weights: { web: "secondary" }
     },
+    {
+      exposedContent: [
+        "Fluncle for iOS — the archive as a native app: the Feed, the Archive, the Decks, the Radio, and the Mixtapes, each finding opening its own /log screen, plus a submit door and push when a new banger lands"
+      ],
+      kind: "app",
+      name: "app.ios",
+      operatorNotes: "Fluncle for iOS (apps/mobile). PENDING App Store review — DARK until approval, then flip `pending` + set the assigned listing URL. No probeConfig: a vendor store listing is not one of our own health-probeable endpoints (the box prober walks web/r2/dns/ssh + the crons, never an external GET), and Apple would bot-block or redirect a bare GET and read back as a false 'down' — the extension.lens ruling, which dropped its probeConfig on going live for the same reason.",
+      pending: true,
+      url: "https://apps.apple.com/search?term=fluncle",
+      weights: { web: "secondary" }
+    },
     {
       command: "fluncle admin tracks enrich --queue",
       exposedContent: [
@@ -6446,6 +6564,25 @@ var init_auth_tiktok = __esm(() => {
   init_api();
 });
 
+// src/commands/auth-revoke-grants.ts
+var exports_auth_revoke_grants = {};
+__export(exports_auth_revoke_grants, {
+  authRevokeGrantsCommand: () => authRevokeGrantsCommand
+});
+async function authRevokeGrantsCommand(options = {}) {
+  const response = await adminApiPost("/api/v1/admin/auth/revoke-grants");
+  if (options.json) {
+    console.log(JSON.stringify(response, null, 2));
+    return;
+  }
+  console.log(`Every admin browser session is out. Grant epoch is now ${response.epoch}.
+
+Sign back in at /admin/login. Your CLI and the agent box are unaffected.`);
+}
+var init_auth_revoke_grants = __esm(() => {
+  init_api();
+});
+
 // src/commands/auth-lastfm.ts
 var exports_auth_lastfm = {};
 __export(exports_auth_lastfm, {
@@ -9804,6 +9941,10 @@ function addAdminCommands(program2) {
     const { authTikTokCommand: authTikTokCommand2 } = await Promise.resolve().then(() => (init_auth_tiktok(), exports_auth_tiktok));
     await authTikTokCommand2();
   });
+  auth.command("revoke-grants").description("Sign every admin browser session out (bump the grant epoch)").option("--json", "Output raw JSON").action(async (options) => {
+    const { authRevokeGrantsCommand: authRevokeGrantsCommand2 } = await Promise.resolve().then(() => (init_auth_revoke_grants(), exports_auth_revoke_grants));
+    await authRevokeGrantsCommand2(options);
+  });
   auth.command("lastfm").description("Authorize Last.fm access (love-on-add). Run once for the URL, then again with --token").option("--token <token>", "The approved request token, to mint the session key").action(async (options) => {
     const { authLastfmCommand: authLastfmCommand2 } = await Promise.resolve().then(() => (init_auth_lastfm(), exports_auth_lastfm));
     await authLastfmCommand2(options);

package/package.json

@@ -31,5 +31,5 @@
     "url": "git+https://github.com/mauricekleine/fluncle.git"
   },
   "type": "module",
-  "version": "0.198.0"
+  "version": "0.200.0"
 }