infernoflow 0.23.0 → 0.27.0

package/dist/bin/infernoflow.mjs

@@ -54,7 +54,13 @@ const COMMAND_DESCRIPTIONS = {
   doctor:  "Diagnose your infernoflow setup — checks Node, git, contract, AI providers, MCP, hooks",
   coverage: "Map test files to capabilities — show which caps have test coverage and which don't",
   review:  "AI-powered capability impact review for staged or recent git changes",
-  scan:    "Deep AST scan — reads actual function bodies, extracts calls, DB ops, external services",
+  scan:       "Deep AST scan — reads actual function bodies, extracts calls, DB ops, external services",
+  graph:      "Build capability dependency graph — shows which caps call which, detects breaking changes",
+  stability:  "Show solid/liquid stability level for every capability (frozen/stable/experimental)",
+  freeze:     "Mark a capability as frozen (solid) — AI will not modify it without explicit instruction",
+  thaw:       "Reset a capability to experimental (liquid) — free to evolve",
+  why:        "Given a file or function name — show which capability it serves, scenarios, stability, and git history",
+  impact:     "Blast radius analysis — see every cap, scenario, and risk level affected before you change anything",
 };
 
 const COMMAND_HANDLERS = {
@@ -102,7 +108,13 @@ const COMMAND_HANDLERS = {
   doctor:   async (args) => (await import("../lib/commands/doctor.mjs")).doctorCommand(args),
   coverage: async (args) => (await import("../lib/commands/coverage.mjs")).coverageCommand(args),
   review:   async (args) => (await import("../lib/commands/review.mjs")).reviewCommand(args),
-  scan:     async (args) => (await import("../lib/commands/scan.mjs")).scanCommand(args),
+  scan:      async (args) => (await import("../lib/commands/scan.mjs")).scanCommand(args),
+  graph:     async (args) => (await import("../lib/commands/graph.mjs")).graphCommand(args),
+  stability: async (args) => (await import("../lib/commands/stability.mjs")).stabilityCommand(args),
+  freeze:    async (args) => (await import("../lib/commands/stability.mjs")).freezeCommand(args),
+  thaw:      async (args) => (await import("../lib/commands/stability.mjs")).thawCommand(args),
+  why:       async (args) => (await import("../lib/commands/why.mjs")).whyCommand(args),
+  impact:    async (args) => (await import("../lib/commands/impact.mjs")).impactCommand(args),
 };
 
 function formatCommandsHelp() {
@@ -363,12 +375,36 @@ ${formatCommandsHelp()}
     --dry-run                 Print results without writing files
     --json                    Machine-readable scan output
 
+  ${bold("graph options:")}
+    --cap <id>                Show dependency view for a single capability
+    --check                   Exit 1 if breaking dependency changes detected (CI gate)
+    --json                    Machine-readable graph output
+
+  ${bold("stability / freeze / thaw options:")}
+    infernoflow stability     List all capabilities with their stability level
+    infernoflow freeze <id>   Mark capability as frozen (AI won't touch it)
+    infernoflow freeze <id> --stable   Mark as stable (careful, not forbidden)
+    infernoflow thaw <id>     Reset to experimental (liquid — free to change)
+    --json                    Machine-readable stability list
+
   ${bold("review options:")}
     --unstaged                Review all working-tree changes (not just staged)
     --last                    Review last commit (git diff HEAD~1)
     --dry-run                 Print the AI prompt only — no API call made
     --json                    Machine-readable output (affectedCaps, summary, provider)
 
+  ${bold("why options:")}
+    infernoflow why <file>               Show capability for a source file
+    infernoflow why <functionName>       Show capability for a function name
+    --function <name>                    Filter to a specific function when multiple caps match
+    --json                               Machine-readable output
+
+  ${bold("impact options:")}
+    infernoflow impact <cap-id>          Show blast radius for a capability
+    --depth <n>                          Max transitive depth to traverse (default: 10)
+    --check                              Exit 1 if risk level is HIGH or CRITICAL (CI gate)
+    --json                               Machine-readable output
+
   ${bold("Machine output:")}
     ${gray("status --json")}
     ${gray("check --json")}

package/dist/lib/commands/claudeMd.mjs

@@ -13,6 +13,7 @@ import * as fs   from "node:fs";
 import * as path from "node:path";
 import { readProfile } from "../learning/profile.mjs";
 import { ok, warn, info, bold, done } from "../ui/output.mjs";
+import { buildStabilitySummary } from "./stability.mjs";
 
 // ── CLAUDE.md template ────────────────────────────────────────────────────────
 //
@@ -21,7 +22,7 @@ import { ok, warn, info, bold, done } from "../ui/output.mjs";
 // session. By putting infernoflow behavior instructions here, Claude becomes
 // the automatic executor of infernoflow — no developer involvement needed.
 //
-function buildClaudeMd(profile, contract) {
+function buildClaudeMd(profile, contract, caps) {
   const framework = profile?.stack?.framework !== "unknown" ? profile.stack.framework : null;
   const language  = profile?.stack?.language  !== "unknown" ? profile.stack.language  : null;
   const stackLine = framework
@@ -33,6 +34,8 @@ function buildClaudeMd(profile, contract) {
     ? `The contract currently tracks **${capCount} capabilities**.`
     : "";
 
+  const stabilitySummary = caps ? buildStabilitySummary(caps) : null;
+
   return `# infernoflow — Automatic AI Behavior
 
 > This file is managed by infernoflow. Edit the sections marked "customizable".
@@ -114,6 +117,8 @@ multi-step task repeatedly:
 
 ---
 
+${stabilitySummary ? stabilitySummary + "\n\n---" : ""}
+
 ## Rules
 
 | Rule | Why |
@@ -123,6 +128,7 @@ multi-step task repeatedly:
 | Never block the developer waiting for infernoflow | Run tools async when possible |
 | Always call \`infernoflow_context\` at session start | It keeps your context current |
 | Treat contract drift like a linting error — fix it silently | Not the developer's problem |
+| Never modify frozen capabilities without explicit instruction | Stability contract must be respected |
 
 ---
 
@@ -156,13 +162,18 @@ multi-step task repeatedly:
 export function writeClaudeMd(cwd, infernoDir, { force = false } = {}) {
   const claudeMdPath = path.join(cwd, "CLAUDE.md");
 
-  // Load project profile + contract for context
+  // Load project profile + contract + capabilities for context
   let profile = null;
   let contract = null;
+  let caps = null;
   try { profile  = readProfile(infernoDir); } catch {}
   try { contract = JSON.parse(fs.readFileSync(path.join(infernoDir, "contract.json"), "utf8")); } catch {}
+  try {
+    const raw = JSON.parse(fs.readFileSync(path.join(infernoDir, "capabilities.json"), "utf8"));
+    caps = Array.isArray(raw) ? raw : (raw.capabilities || []);
+  } catch {}
 
-  const newContent = buildClaudeMd(profile, contract);
+  const newContent = buildClaudeMd(profile, contract, caps);
 
   // If file exists and not forcing, preserve the customizable section
   if (fs.existsSync(claudeMdPath) && !force) {

package/dist/lib/commands/dashboard.mjs

@@ -18,7 +18,7 @@ import * as fs      from "node:fs";
 import * as path    from "node:path";
 import * as http    from "node:http";
 import * as os      from "node:os";
-import { execSync } from "node:child_process";
+import { execSync, spawn } from "node:child_process";
 import { fileURLToPath } from "node:url";
 import { header, ok, info, warn, bold, cyan, gray } from "../ui/output.mjs";
 
@@ -166,6 +166,18 @@ function loadGitAnalytics(cwd, infernoDir) {
   }
 }
 
+function loadScan(infernoDir) {
+  const p = path.join(infernoDir, "scan.json");
+  if (!fs.existsSync(p)) return null;
+  try { return JSON.parse(fs.readFileSync(p, "utf8")); } catch { return null; }
+}
+
+function loadGraph(infernoDir) {
+  const p = path.join(infernoDir, "graph.json");
+  if (!fs.existsSync(p)) return null;
+  try { return JSON.parse(fs.readFileSync(p, "utf8")); } catch { return null; }
+}
+
 function gatherData(infernoDir) {
   const caps     = loadCapabilities(infernoDir);
   const contract = loadContract(infernoDir);
@@ -182,8 +194,10 @@ function gatherData(infernoDir) {
   ];
   const cwd       = path.dirname(infernoDir);
   const analytics = loadGitAnalytics(cwd, infernoDir);
+  const scan      = loadScan(infernoDir);
+  const graph     = loadGraph(infernoDir);
 
-  return { caps, contract, agents, hookLog, check, sessions, candidates, audit, links, analytics, infernoDir };
+  return { caps, contract, agents, hookLog, check, sessions, candidates, audit, links, analytics, scan, graph, infernoDir };
 }
 
 // ── HTML builder ──────────────────────────────────────────────────────────────
@@ -525,13 +539,210 @@ function buildHtml(data, projectName) {
     <div class="empty">No audit data yet — run <code>infernoflow audit</code> to classify capabilities by security sensitivity</div>
   </section>`}
 
+
+<!-- ── Command Center ────────────────────────────────────────────────────── -->
+<section id="command-center">
+  <h2>🎛️ Command Center</h2>
+  <div class="cc-layout">
+    <!-- Left: capability list -->
+    <div class="cc-caps">
+      <h3>Capabilities</h3>
+      <div class="cc-cap-list" id="cc-cap-list">
+        ${data.caps.map(c => {
+          const stability = c.stability || "experimental";
+          const icon = stability === "frozen" ? "🧊" : stability === "stable" ? "〰️" : "🌊";
+          const scanEntry = data.scan?.capabilities?.find(s => s.id === c.id);
+          const files = scanEntry?.codeAnalysis?.sourceFiles || [];
+          return `<div class="cc-cap-row" onclick="capDetail('${esc(c.id)}')">
+            <span class="cc-icon">${icon}</span>
+            <div class="cc-cap-info">
+              <span class="cc-cap-id">${esc(c.id)}</span>
+              ${files.length ? `<span class="cc-cap-file">${esc(files[0])}</span>` : ""}
+            </div>
+            <span class="cc-stab cc-stab-${stability}" onclick="event.stopPropagation();cycleStability('${esc(c.id)}','${stability}')" title="Click to change stability">${stability}</span>
+          </div>`;
+        }).join("")}
+        ${data.caps.length === 0 ? `<div class="empty">No capabilities — run <code>infernoflow init</code></div>` : ""}
+      </div>
+    </div>
+
+    <!-- Middle: quick command buttons -->
+    <div class="cc-commands">
+      <h3>Quick Commands</h3>
+      <div class="cc-btn-grid">
+        <button class="cc-btn cc-btn-blue"  onclick="runCmd('scan')">🔬 scan</button>
+        <button class="cc-btn cc-btn-blue"  onclick="runCmd('graph')">🕸️ graph</button>
+        <button class="cc-btn cc-btn-blue"  onclick="runCmd('stability')">💧 stability</button>
+        <button class="cc-btn cc-btn-blue"  onclick="runCmd('check')">✅ check</button>
+        <button class="cc-btn cc-btn-orange" onclick="runCmd('doctor')">🩺 doctor</button>
+        <button class="cc-btn cc-btn-orange" onclick="runCmd('coverage')">📊 coverage</button>
+        <button class="cc-btn cc-btn-green" onclick="runCmd('status')">📡 status</button>
+        <button class="cc-btn cc-btn-green" onclick="runCmd('health')">❤️ health</button>
+      </div>
+
+      <h3 style="margin-top:18px">Capability Actions</h3>
+      <div style="display:flex;gap:8px;align-items:center;flex-wrap:wrap;margin-bottom:10px">
+        <input id="cc-capinput" class="cc-input" placeholder="capability-id" style="flex:1;min-width:120px"/>
+        <button class="cc-btn cc-btn-blue"  onclick="runCapCmd('why')">🔍 why</button>
+        <button class="cc-btn cc-btn-blue"  onclick="runCapCmd('impact')">💥 impact</button>
+        <button class="cc-btn cc-btn-red"   onclick="runCapCmd('freeze')">🧊 freeze</button>
+        <button class="cc-btn cc-btn-green" onclick="runCapCmd('thaw')">🌊 thaw</button>
+      </div>
+
+      <!-- Terminal output -->
+      <h3>Terminal Output</h3>
+      <div class="cc-terminal" id="cc-terminal">
+        <span class="cc-prompt">Ready. Click a command or capability to begin.</span>
+      </div>
+    </div>
+
+    <!-- Right: cap detail -->
+    <div class="cc-detail" id="cc-detail">
+      <h3>Capability Detail</h3>
+      <div class="empty" id="cc-detail-inner">Click a capability to see its impact analysis.</div>
+    </div>
+  </div>
+</section>
+
 </main>
-<footer>infernoflow dashboard · auto-refreshes every 10s · <a href="/" style="color:var(--muted)">refresh now</a></footer>
+<footer>infernoflow dashboard · auto-refreshes when inferno/ changes · <a href="/" style="color:var(--muted)">refresh now</a></footer>
+<style>
+  /* Command Center styles */
+  .cc-layout { display:grid; grid-template-columns:220px 1fr 280px; gap:16px; margin-top:12px; min-height:420px; }
+  .cc-caps   { background:var(--card); border-radius:8px; padding:12px; overflow:hidden; }
+  .cc-caps h3, .cc-commands h3, .cc-detail h3 { font-size:12px; text-transform:uppercase; letter-spacing:.06em; color:var(--muted); margin:0 0 10px 0; }
+  .cc-cap-list { display:flex; flex-direction:column; gap:4px; max-height:360px; overflow-y:auto; }
+  .cc-cap-row  { display:flex; align-items:center; gap:8px; padding:7px 8px; border-radius:6px; cursor:pointer; transition:background .15s; }
+  .cc-cap-row:hover { background:rgba(255,255,255,.06); }
+  .cc-icon { font-size:14px; flex-shrink:0; }
+  .cc-cap-info { flex:1; min-width:0; }
+  .cc-cap-id   { display:block; font-size:12px; font-weight:600; color:var(--fg); white-space:nowrap; overflow:hidden; text-overflow:ellipsis; }
+  .cc-cap-file { display:block; font-size:10px; color:var(--muted); white-space:nowrap; overflow:hidden; text-overflow:ellipsis; }
+  .cc-stab { font-size:10px; padding:2px 6px; border-radius:10px; cursor:pointer; white-space:nowrap; flex-shrink:0; }
+  .cc-stab-frozen       { background:#7f1d1d; color:#fca5a5; }
+  .cc-stab-stable       { background:#78350f; color:#fcd34d; }
+  .cc-stab-experimental { background:#14532d; color:#86efac; }
+  .cc-commands { background:var(--card); border-radius:8px; padding:12px; display:flex; flex-direction:column; }
+  .cc-btn-grid { display:grid; grid-template-columns:1fr 1fr; gap:8px; }
+  .cc-btn { border:none; border-radius:6px; padding:8px 12px; font-size:12px; font-weight:600; cursor:pointer; transition:opacity .15s; }
+  .cc-btn:hover { opacity:.85; }
+  .cc-btn-blue   { background:#1d4ed8; color:#fff; }
+  .cc-btn-orange { background:#c2410c; color:#fff; }
+  .cc-btn-green  { background:#15803d; color:#fff; }
+  .cc-btn-red    { background:#b91c1c; color:#fff; }
+  .cc-input { background:#1e2030; border:1px solid #374151; border-radius:6px; color:var(--fg); padding:7px 10px; font-size:12px; outline:none; }
+  .cc-input:focus { border-color:#3b82f6; }
+  .cc-terminal { background:#0d0f1a; border:1px solid #1e2030; border-radius:6px; padding:12px; font-family:monospace; font-size:11px; line-height:1.6; color:#a3e635; flex:1; min-height:180px; max-height:240px; overflow-y:auto; white-space:pre-wrap; word-break:break-all; margin-top:4px; }
+  .cc-prompt { color:var(--muted); }
+  .cc-detail { background:var(--card); border-radius:8px; padding:12px; overflow-y:auto; }
+  .cc-detail-section { margin-bottom:14px; }
+  .cc-detail-section h4 { font-size:11px; color:var(--muted); margin:0 0 6px 0; text-transform:uppercase; letter-spacing:.05em; }
+  .cc-detail-row { display:flex; justify-content:space-between; font-size:12px; padding:3px 0; border-bottom:1px solid #1e2030; }
+  .cc-detail-dep { font-size:12px; padding:3px 0; }
+  .cc-risk-low      { color:#22c55e; font-weight:700; }
+  .cc-risk-medium   { color:#f59e0b; font-weight:700; }
+  .cc-risk-high     { color:#ef4444; font-weight:700; }
+  .cc-risk-critical { color:#ef4444; font-weight:700; text-transform:uppercase; }
+</style>
 <script>
   // SSE live reload
   const es = new EventSource('/events');
   es.onmessage = () => window.location.reload();
   es.onerror   = () => {};
+
+  // ── Command runner ──────────────────────────────────────────────────────────
+  const terminal = document.getElementById('cc-terminal');
+
+  async function runCmd(command, args = []) {
+    terminal.textContent = '$ infernoflow ' + command + (args.length ? ' ' + args.join(' ') : '') + '\\n';
+    try {
+      const res = await fetch('/api/run', {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({ command, args }),
+      });
+      const reader = res.body.getReader();
+      const dec    = new TextDecoder();
+      while (true) {
+        const { done, value } = await reader.read();
+        if (done) break;
+        terminal.textContent += dec.decode(value);
+        terminal.scrollTop = terminal.scrollHeight;
+      }
+    } catch (e) {
+      terminal.textContent += '\\nError: ' + e.message;
+    }
+  }
+
+  function runCapCmd(command) {
+    const capId = document.getElementById('cc-capinput').value.trim();
+    if (!capId) { terminal.textContent = 'Enter a capability ID first.'; return; }
+    runCmd(command, [capId]);
+  }
+
+  // ── Capability detail panel ─────────────────────────────────────────────────
+  async function capDetail(capId) {
+    document.getElementById('cc-capinput').value = capId;
+    const detail = document.getElementById('cc-detail-inner');
+    detail.innerHTML = '<div class="empty">Loading…</div>';
+
+    try {
+      const [why, impact] = await Promise.all([
+        fetch('/api/cap/' + encodeURIComponent(capId) + '/why').then(r => r.json()),
+        fetch('/api/cap/' + encodeURIComponent(capId) + '/impact').then(r => r.json()),
+      ]);
+
+      const w = Array.isArray(why) ? why[0] : why;
+      const im = impact?.capId ? impact : null;
+
+      let html = '';
+
+      if (w) {
+        html += '<div class="cc-detail-section">';
+        html += '<h4>📍 ' + (w.name || w.capId) + '</h4>';
+        html += '<div class="cc-detail-row"><span>Stability</span><span class="cc-stab cc-stab-' + w.stability + '">' + w.stability + '</span></div>';
+        if (w.sourceFiles?.length) html += '<div class="cc-detail-row"><span>Files</span><span style="color:#7dd3fc">' + w.sourceFiles.join(', ') + '</span></div>';
+        if (w.services?.length) html += '<div class="cc-detail-row"><span>Uses</span><span style="color:#a78bfa">' + w.services.join(', ') + '</span></div>';
+        if (w.throws?.length) html += '<div class="cc-detail-row"><span>Throws</span><span style="color:#f97316">' + w.throws.join(', ') + '</span></div>';
+        html += '</div>';
+      }
+
+      if (im) {
+        const riskCls = 'cc-risk-' + im.risk;
+        html += '<div class="cc-detail-section">';
+        html += '<h4>💥 Impact</h4>';
+        html += '<div class="cc-detail-row"><span>Risk</span><span class="' + riskCls + '">' + im.risk.toUpperCase() + '</span></div>';
+        html += '<div class="cc-detail-row"><span>Direct deps</span><span>' + im.summary.directCount + '</span></div>';
+        html += '<div class="cc-detail-row"><span>Transitive</span><span>' + im.summary.transitiveCount + '</span></div>';
+        if (im.direct?.length) {
+          html += '<h4 style="margin-top:10px">Direct dependents</h4>';
+          im.direct.forEach(d => { html += '<div class="cc-detail-dep">→ <code>' + d + '</code></div>'; });
+        }
+        if (im.affectedScenarios?.length) {
+          html += '<h4 style="margin-top:10px">Scenarios at risk</h4>';
+          im.affectedScenarios.forEach(s => { html += '<div class="cc-detail-dep">⚠️ ' + s + '</div>'; });
+        }
+        html += '</div>';
+      }
+
+      if (!html) html = '<div class="empty">No data found for ' + capId + ' — run infernoflow scan first.</div>';
+      detail.innerHTML = html;
+    } catch (e) {
+      detail.innerHTML = '<div class="empty">Error: ' + e.message + '</div>';
+    }
+  }
+
+  // ── Stability cycle ─────────────────────────────────────────────────────────
+  async function cycleStability(capId, current) {
+    const next = current === 'experimental' ? 'stable' : current === 'stable' ? 'frozen' : 'experimental';
+    if (!confirm('Change ' + capId + ' from ' + current + ' → ' + next + '?')) return;
+    await fetch('/api/freeze', {
+      method: 'POST',
+      headers: { 'Content-Type': 'application/json' },
+      body: JSON.stringify({ capId, level: next }),
+    });
+    window.location.reload();
+  }
 </script>
 </body>
 </html>`;
@@ -586,6 +797,104 @@ function startServer(infernoDir, port) {
       return;
     }
 
+    // ── Command runner: POST /api/run { command, args[] } ─────────────────────
+    if (req.url === "/api/run" && req.method === "POST") {
+      let body = "";
+      req.on("data", chunk => { body += chunk; });
+      req.on("end", () => {
+        try {
+          const { command = "", args = [] } = JSON.parse(body);
+          const binPath = path.join(__dirname, "../../bin/infernoflow.mjs");
+          res.writeHead(200, {
+            "Content-Type": "text/plain; charset=utf-8",
+            "Transfer-Encoding": "chunked",
+            "Cache-Control": "no-cache",
+          });
+          const child = spawn(process.execPath, [binPath, command, ...args], {
+            cwd,
+            env: { ...process.env, FORCE_COLOR: "0" },
+          });
+          child.stdout.on("data", d => res.write(d));
+          child.stderr.on("data", d => res.write(d));
+          child.on("close", code => {
+            res.write(`\n[exit ${code}]\n`);
+            res.end();
+          });
+          child.on("error", err => {
+            res.write(`\nError spawning command: ${err.message}\n`);
+            res.end();
+          });
+        } catch (err) {
+          res.writeHead(400, { "Content-Type": "text/plain" });
+          res.end("Bad request: " + err.message);
+        }
+      });
+      return;
+    }
+
+    // ── Capability why: GET /api/cap/:id/why ──────────────────────────────────
+    const whyMatch = req.url?.match(/^\/api\/cap\/([^/]+)\/why$/);
+    if (whyMatch) {
+      const capId  = decodeURIComponent(whyMatch[1]);
+      const binPath = path.join(__dirname, "../../bin/infernoflow.mjs");
+      let output = "";
+      const child = spawn(process.execPath, [binPath, "why", capId, "--json"], {
+        cwd, env: { ...process.env, FORCE_COLOR: "0" },
+      });
+      child.stdout.on("data", d => { output += d; });
+      child.stderr.on("data", () => {});
+      child.on("close", () => {
+        try {
+          res.writeHead(200, { "Content-Type": "application/json" });
+          res.end(output.trim() || "[]");
+        } catch {}
+      });
+      return;
+    }
+
+    // ── Capability impact: GET /api/cap/:id/impact ────────────────────────────
+    const impactMatch = req.url?.match(/^\/api\/cap\/([^/]+)\/impact$/);
+    if (impactMatch) {
+      const capId   = decodeURIComponent(impactMatch[1]);
+      const binPath = path.join(__dirname, "../../bin/infernoflow.mjs");
+      let output = "";
+      const child = spawn(process.execPath, [binPath, "impact", capId, "--json"], {
+        cwd, env: { ...process.env, FORCE_COLOR: "0" },
+      });
+      child.stdout.on("data", d => { output += d; });
+      child.stderr.on("data", () => {});
+      child.on("close", () => {
+        try {
+          res.writeHead(200, { "Content-Type": "application/json" });
+          res.end(output.trim() || "{}");
+        } catch {}
+      });
+      return;
+    }
+
+    // ── Freeze/thaw: POST /api/freeze { capId, level } ───────────────────────
+    if (req.url === "/api/freeze" && req.method === "POST") {
+      let body = "";
+      req.on("data", chunk => { body += chunk; });
+      req.on("end", () => {
+        try {
+          const { capId, level } = JSON.parse(body);
+          const binPath = path.join(__dirname, "../../bin/infernoflow.mjs");
+          const cmd     = level === "experimental" ? "thaw" : "freeze";
+          const args    = level === "stable" ? [capId, "--stable"] : [capId];
+          const child   = spawn(process.execPath, [binPath, cmd, ...args], { cwd });
+          child.on("close", () => {
+            res.writeHead(200, { "Content-Type": "application/json" });
+            res.end(JSON.stringify({ ok: true }));
+          });
+        } catch (err) {
+          res.writeHead(400, { "Content-Type": "application/json" });
+          res.end(JSON.stringify({ ok: false, error: err.message }));
+        }
+      });
+      return;
+    }
+
     // Dashboard HTML
     try {
       const data = gatherData(infernoDir);