ndomo 0.1.0 → 0.2.1

package/docs/configuration.md

@@ -63,7 +63,7 @@ All agents use `opencode-go/deepseek-v4-flash` at their respective temperatures.
 
 ## Provider Override at Install Time
 
-The `install.sh` script includes a provider override that modifies agent models before registration. This is not a runtime setting — it applies once during installation and is baked into each agent's frontmatter.
+The installer includes a provider override that modifies agent models before registration. This is not a runtime setting — it applies once during installation and is baked into each agent's frontmatter.
 
 The preset (not the provider) defines the model ID. `--provider=ID` only changes the `provider/` prefix in each agent's `model:` field, so the literal `default` model ID is never used.
 
@@ -97,11 +97,11 @@ The install also wires the plugin into the OpenCode config directory (`~/.config
 - `agents/*.md` — the `model:` field in each agent's frontmatter is modified during Step 5.5 of the install script.
 - `~/.cache/ndomo/models-catalog.json` — cached catalog (re-fetched weekly or on cache miss).
 
-The provider override is a one-time install operation. To change providers after installation, either re-run `install.sh` with a different `--provider` flag, or manually edit the `model:` fields in `agents/*.md`.
+The provider override is a one-time install operation. To change providers after installation, either re-run `bunx ndomo install` with a different `--provider` flag, or manually edit the `model:` fields in `agents/*.md`.
 
 ## Hot-swap: editing models without re-running install
 
-`ndomo.json::presets[preset][agent].model` is the **runtime source of truth** for agent models. The plugin's `syncAgentFrontmatter()` runs at every OpenCode session startup, compares each agent's `model:` and `temperature:` in `~/.config/opencode/agent/<agent>.md` against the active preset in `ndomo.json`, and rewrites the file when the values differ. This means you can edit `ndomo.json` directly and have the changes take effect on the next session — no need to re-run `install.sh`.
+`ndomo.json::presets[preset][agent].model` is the **runtime source of truth** for agent models. The plugin's `syncAgentFrontmatter()` runs at every OpenCode session startup, compares each agent's `model:` and `temperature:` in `~/.config/opencode/agent/<agent>.md` against the active preset in `ndomo.json`, and rewrites the file when the values differ. This means you can edit `ndomo.json` directly and have the changes take effect on the next session — no need to re-run the installer.
 
 **Workflow:**
 
@@ -243,7 +243,7 @@ Tools listed in `protectedTools` cannot be disabled, overridden, or pruned from
 
 The ndomo package is not in `~/.config/opencode/node_modules/ndomo/`. OpenCode's plugin loader silently skips plugins it cannot resolve, so no tools, DB, or agents will appear.
 
-**Fix:** Re-run `./scripts/install.sh` or symlink it manually:
+**Fix:** Re-run `bunx ndomo install` or symlink it manually:
 
 ```bash
 ln -sfn $(pwd) ~/.config/opencode/node_modules/ndomo

package/docs/installation.md

@@ -14,28 +14,22 @@ opencode --version
 opencode config list providers  # should show at least one authenticated provider
 ```
 
-## Install via curl/wget
+## Install via bunx
 
-The install script supports being piped directly from a URL, useful for quick setups, CI/CD pipelines, and ephemeral environments. When piped, the script detects it is running from stdin, clones the repository to `/tmp`, and re-executes itself.
+The TS installer is distributed as a `bunx ndomo` one-shot. It applies the active preset from `config/ndomo.config.json`, copies agents/skills/config to OpenCode's user config dir, and prompts interactively for HTTP server enablement.
 
 ```bash
-# Quick install (interactive, will prompt for provider)
-curl -fsSL https://raw.githubusercontent.com/darrenhinde/OpenAgentsControl/main/install.sh | bash
+# Quick install (interactive, will prompt for HTTP)
+bunx ndomo install
 
-# Non-interactive with provider preset
-curl -fsSL https://raw.githubusercontent.com/darrenhinde/OpenAgentsControl/main/install.sh | bash -s -- --provider=opencode --no-provider-prompt
+# Non-interactive with provider preset + HTTP enabled
+bunx ndomo install --provider=opencode --no-provider-prompt --enable-http
 
 # With budget preset + DCP
-curl -fsSL https://raw.githubusercontent.com/darrenhinde/OpenAgentsControl/main/install.sh | bash -s -- --preset=budget --with-dcp
-
-# Install from a fork or dev branch
-curl -fsSL https://raw.githubusercontent.com/darrenhinde/OpenAgentsControl/main/install.sh | bash -s -- \
-  --repo=https://github.com/myorg/ndomo-fork \
-  --branch=dev \
-  --provider=opencode
+bunx ndomo install --preset=budget --with-dcp
 ```
 
-The `--repo` and `--branch` flags are only relevant in piped mode; they are ignored when running from a local clone.
+See [docs/installer.md](installer.md) for the full flag reference.
 
 ## Install from Git Clone
 
@@ -48,7 +42,7 @@ cd ndomo
 bun install
 
 # 3. Run the install script
-./scripts/install.sh
+bunx ndomo install
 ```
 
 The install script:
@@ -68,7 +62,7 @@ When developing ndomo (editing agents, skills, config, or source files), use the
 
 | Command | When to use | What it does |
 |---|---|---|
-| `./scripts/install.sh` | First install, after cloning, or after changing agents/skills/config | Copies agents, skills, and config to `~/.config/opencode/`. Installs ndomo package. Always preferred for structural changes. |
+| `./scripts/install.sh` or `bunx ndomo install` | First install, after cloning, or after changing agents/skills/config | Copies agents, skills, and config to `~/.config/opencode/`. Installs ndomo package. Always preferred for structural changes. |
 | `bun run dev:bust` | After editing only `src/*.ts` source files (no agent/skill/config changes) | Quick cache bust: removes stale Bun transpiler cache entries referencing ndomo, bumps mtime on all `src/*.ts` files. Does not kill opencode. |
 | `bun run dev:reset` | Same as `dev:bust` but when opencode is running and you need a clean restart | `dev:bust` + kills running opencode processes. Run this after editing source to ensure the next `opencode` picks up fresh code. |
 
@@ -83,7 +77,7 @@ When developing ndomo (editing agents, skills, config, or source files), use the
 
 Bun caches transpiled TypeScript modules in `~/.bun/install/cache/` keyed by the **resolved path** of the module. When ndomo is installed via a symlink (e.g., `~/.config/opencode/node_modules/ndomo → /home/nico/ndomo`), the cache key uses the symlink path. Editing source files on the target filesystem does **not** change the symlink path, so Bun serves stale code from cache.
 
-The `file:` dep strategy in `install_ndomo_package()` avoids this by creating a real copy in `node_modules` (no symlink → no stale cache). If you ever end up with a symlink install (from an older `install.sh` version or a manual `ln -s`), re-run `./scripts/install.sh` — it detects the symlink, removes it, and reinstalls as a real copy (`scripts/install.sh` lines 247–254).
+The `file:` dep strategy in `install_ndomo_package()` avoids this by creating a real copy in `node_modules` (no symlink → no stale cache). If you ever end up with a symlink install (from an older `install.sh` version or a manual `ln -s`), re-run `bunx ndomo install` — the installer detects the symlink, removes it, and reinstalls as a real copy.
 
 ### Manual cache busting (advanced)
 
@@ -116,32 +110,31 @@ It is **idempotent** — safe to run multiple times. No-op if the cache is alrea
 | `--no-provider-prompt` | Skip the interactive provider prompt. The preset is still applied; no provider prefix override is performed. |
 | `--with-dcp` | Install and configure the DCP plugin (opencode-dynamic-context-pruning) as an optional peer dependency |
 | `--preset=NAME` | Select preset from `config/ndomo.config.json::presets[NAME]`. The preset is the source of truth for agent models at install time. (default: `default`, options: `default`, `budget`) |
-| `--repo=URL` | Override the repository URL (for piped installs from a fork or mirror). Ignored in local clones. |
-| `--branch=NAME` | Override the repository branch (for piped installs from `dev`/`feature/*` branches). Ignored in local clones. |
+| `--dry-run` | Print planned changes without writing files. |
+| `--skip-deps` | Skip the dependency installation step (`bun install`). |
+| `--enable-http` | Automatically enable the HTTP server (writes http block to `ndomo.config.json`). |
+| `--disable-http` | Skip the automatic HTTP prompt entirely (default in non-TTY / CI). |
+| `--port=N` | HTTP server port (default: `4097`). |
+| `--cors-origins=CSV` | HTTP CORS origins, comma-separated (default: `*`). |
+| `--auth-required=BOOL` | HTTP auth requirement (default: `true`). |
+| `--uninstall` | Uninstall ndomo (remove config, plugin registration, skill symlinks). |
 
 **Environment variable:** `NDOMO_SKIP_PACKAGE_INSTALL=1` — skip the package installation step (`bun install` in `~/.config/opencode/`). Useful if you manage the OpenCode plugin directory manually or if the install step is causing conflicts.
 
 Example with all flags:
 
 ```bash
-# Local clone with all flags
-./scripts/install.sh --with-dcp --preset=budget
-
-# Piped install with provider, fork, and custom branch
-curl -fsSL https://raw.githubusercontent.com/darrenhinde/OpenAgentsControl/main/install.sh | bash -s -- \
-  --repo=https://github.com/myorg/ndomo-fork \
-  --branch=dev \
-  --provider=opencode \
-  --no-provider-prompt
+# Local clone with HTTP + DCP + budget preset
+bunx ndomo install --with-dcp --preset=budget --enable-http --port=4097
 ```
 
 ## Provider Override
 
-When `install.sh` runs without `--provider` and without `--no-provider-prompt`, it shows the active preset and asks for confirmation. The active preset is the single source of truth for agent models; `--provider=ID` only changes the provider prefix.
+When the installer runs without `--provider` and without `--no-provider-prompt`, it shows the active preset and asks for confirmation. The active preset is the single source of truth for agent models; `--provider=ID` only changes the provider prefix.
 
 TTY flow:
 
-1. The script prints a table of `(agent, preset model, current provider prefix)` derived from `config/ndomo.config.json`.
+1. The installer prints a table of `(agent, preset model, current provider prefix)` derived from `config/ndomo.config.json`.
 2. It asks: `Apply preset '$PRESET' as configured? [Y/n/override]`
 3. `Y` (or Enter) applies the preset, no prefix override.
 4. `n` skips preset application (warn).
@@ -150,13 +143,13 @@ TTY flow:
 To skip the prompt and apply the preset silently:
 
 ```bash
-./scripts/install.sh --no-provider-prompt
+bunx ndomo install --no-provider-prompt
 ```
 
 To override the provider prefix non-interactively (e.g., use `opencode` instead of `opencode-go` for all agents):
 
 ```bash
-./scripts/install.sh --provider=opencode
+bunx ndomo install --provider=opencode
 ```
 
 The provider override works in piped mode:
@@ -165,6 +158,26 @@ The provider override works in piped mode:
 curl -fsSL https://raw.githubusercontent.com/darrenhinde/OpenAgentsControl/main/install.sh | bash -s -- --provider=opencode --no-provider-prompt
 ```
 
+> **Note:** The piped curl|bash method is deprecated. Use `bunx ndomo install --provider=opencode` instead.
+
+## Migration from curl|bash
+
+If you previously installed ndomo via piped curl|bash, migrate with:
+
+```bash
+# Old (deprecated, prints warning)
+curl -fsSL https://raw.githubusercontent.com/darrenhinde/OpenAgentsControl/main/install.sh | bash
+
+# New (recommended)
+bunx ndomo install
+```
+
+The TS installer covers all flows that the bash script did — local clone, piped install, provider override, preset selection, DCP plugin, plus new HTTP auto-prompt. See [docs/installer.md](installer.md).
+
+## Legacy bash installer (deprecated)
+
+`scripts/install.sh` is preserved as a compat shim with a deprecation warning header. It still works for one major version but new installs should use `bunx ndomo install`. The shim re-execs the TS installer after printing the warning.
+
 ## Verify Installation
 
 1. Start OpenCode:
@@ -201,6 +214,12 @@ Should show `foreman` as the active agent.
 
 ## Uninstall
 
+```bash
+bunx ndomo install --uninstall
+```
+
+Or using the legacy bash script:
+
 ```bash
 ./scripts/uninstall.sh
 ```
@@ -240,7 +259,7 @@ If `ping all agents` shows no response from one or more agents:
 
 1. Verify the config file exists: `ls ~/.config/opencode/ndomo.json`
 2. Validate the config against the schema: `cat ~/.config/opencode/ndomo.json`
-3. Re-run the install script: `./scripts/install.sh`
+3. Re-run the install script: `bunx ndomo install`
 4. Check OpenCode logs for model routing errors — the agent's `model` field in the config must match a model available through your authenticated provider.
 
 ### Permission denied on scripts
@@ -254,6 +273,6 @@ chmod +x scripts/install.sh scripts/uninstall.sh
 If OpenCode doesn't detect ndomo as a plugin:
 
 1. Ensure `ndomo` is listed in `config/ndomo.config.json` under `plugins`
-2. Check that the package is installed: `ls ~/.config/opencode/node_modules/ndomo/` — if missing, re-run `./scripts/install.sh` or symlink manually: `ln -sfn $(pwd) ~/.config/opencode/node_modules/ndomo`
+2. Check that the package is installed: `ls ~/.config/opencode/node_modules/ndomo/` — if missing, re-run `bunx ndomo install` or symlink manually: `ln -sfn $(pwd) ~/.config/opencode/node_modules/ndomo`
 3. Verify the plugin entry point (`src/index.ts`) compiles without errors: `bun run build`
 4. Check that the local node_modules were installed: `ls node_modules/ndomo` (or the symlink target)

package/docs/installer.md

@@ -0,0 +1,164 @@
+# ndomo Installer Reference
+
+TypeScript installer for ndomo. Replaces the legacy `scripts/install.sh` (now deprecated).
+
+## Overview
+
+`bunx ndomo install` installs agents, skills, config, and optional HTTP server support into `~/.config/opencode/`. It performs the same phases as the bash installer:
+
+1. Dependency installation (`bun install`)
+2. TypeScript build
+3. Agent `.md` files copy with timestamped backups
+4. Skill directories copy with timestamped backups
+5. Preset application (model, temperature, reasoningEffort per agent)
+6. Provider prefix override (optional)
+7. Config file copy (`ndomo.config.json` -> `ndomo.json`)
+8. Plugin registration in `opencode.json`
+9. Package install via 3-strategy cascade (file: dep -> bun link -> manual symlink)
+10. Tool files copy
+11. Preset injection into `ndomo.json`
+12. Optional DCP plugin install
+13. HTTP auto-prompt (interactive in TTY, skipped in CI)
+
+**Invocation:**
+
+```bash
+# Via npm distribution
+bunx ndomo install [OPTIONS]
+
+# From local clone
+bun run src/cli/install.ts [OPTIONS]
+```
+
+## Flags
+
+| Flag | Description | Default |
+|------|-------------|---------|
+| `--preset=NAME` | Preset from `config/ndomo.config.json::presets[NAME]` | `default` |
+| `--provider=ID` | Override provider prefix on preset models (e.g., `opencode`, `anthropic`) | (none) |
+| `--no-provider-prompt` | Skip interactive provider override prompt | `false` |
+| `--with-dcp` | Install `@tarquinen/opencode-dcp` (AGPL-3.0 peer) | `false` |
+| `--dry-run` | Print planned changes, do not write | `false` |
+| `--skip-deps` | Skip `bun install` step | `false` |
+| `--enable-http` | Auto-enable HTTP server (writes http block to `ndomo.config.json`) | (interactive prompt) |
+| `--disable-http` | Skip HTTP auto-prompt entirely | `false` |
+| `--port=N` | HTTP server port | `4097` |
+| `--cors-origins=CSV` | HTTP CORS origins (comma-separated) | `*` |
+| `--auth-required=BOOL` | HTTP auth requirement | `true` |
+| `--uninstall` | Run uninstaller (compat shim to `scripts/uninstall.sh`) | `false` |
+| `--help, -h` | Show help | `false` |
+
+**Environment variables:**
+
+| Variable | Description |
+|----------|-------------|
+| `NDOMO_SKIP_PACKAGE_INSTALL=1` | Skip ndomo package installation entirely |
+| `XDG_CONFIG_HOME` | Override config directory (default: `~/.config`) |
+
+## HTTP Auto-Prompt
+
+When invoked in a TTY without `--enable-http` or `--disable-http`, the installer prompts:
+
+```
+[?] Enable ndomo HTTP server? Allows programmatic plan/task control via API.
+    Recommended for users integrating ndomo with other tools (port 4097, auth required).
+    Enable now? [Y/n]:
+```
+
+**Behavior:**
+
+- `Y` / Enter -> writes http block to `config/ndomo.config.json`
+- `n` -> skips, no http block written
+- Non-TTY (CI, scripts) -> silently skips with info log
+- 30-second timeout -> auto-skips
+
+**Block written to `config/ndomo.config.json`:**
+
+```json
+{
+  "http": {
+    "enabled": true,
+    "port": 4097,
+    "cors": { "origins": ["*"] },
+    "auth": { "required": true }
+  }
+}
+```
+
+**Precedence:** `ndomo.config.json::http` block > env vars > defaults.
+
+Override via flags:
+
+```bash
+bunx ndomo install --enable-http --port=8080 --cors-origins=localhost:3000 --auth-required=false
+```
+
+## Package Install Strategies
+
+The installer attempts three strategies in order to register ndomo as a package in `~/.config/opencode/`:
+
+1. **file: dep + bun install** -- Adds `"ndomo": "file://<project>"` to the config dir's `package.json`, runs `bun install`. Produces a real copy (no symlink). Preferred.
+2. **bun link** -- Runs `bun link` in the project root, then `bun link ndomo` in the config dir. Produces a managed symlink. May cause Bun cache stale warnings.
+3. **Manual symlink** -- Last resort. Creates a raw symlink from `node_modules/ndomo` to the project root.
+
+Strategy 1 is preferred because it avoids symlink-related cache staleness. If you encounter stale cache warnings, run `bun run dev:bust` to clear the cache and force a real copy.
+
+Set `NDOMO_SKIP_PACKAGE_INSTALL=1` to skip package installation entirely.
+
+## Migration from Bash
+
+One-liner mapping from `scripts/install.sh` to the new TS installer:
+
+| Old (bash) | New (TS) |
+|------------|----------|
+| `curl -fsSL .../install.sh \| bash` | `bunx ndomo install` |
+| `./install.sh --preset=budget` | `bunx ndomo install --preset=budget` |
+| `./install.sh --provider=opencode` | `bunx ndomo install --provider=opencode` |
+| `./install.sh --with-dcp` | `bunx ndomo install --with-dcp` |
+| `./install.sh --no-provider-prompt` | `bunx ndomo install --no-provider-prompt` |
+| `./install.sh --uninstall` | `bunx ndomo install --uninstall` |
+
+The bash version is preserved for backward-compatibility (e.g., pipe-mode from raw GitHub URL) but is deprecated and will be removed in a future major version.
+
+## Troubleshooting
+
+### "bun is not installed"
+
+Install bun first:
+
+```bash
+curl -fsSL https://bun.sh/install | bash
+```
+
+### "No agents/ directory found"
+
+Run from a ndomo clone. The installer expects `agents/`, `skills/`, `config/`, and `tools/` directories at the project root.
+
+### HTTP not responding after --enable-http
+
+1. Check that `bun run src/cli/serve.ts` starts without errors.
+2. Ensure `OPENCODE_SERVER_PASSWORD` env var is set (HTTP auth requires it).
+3. Verify port 4097 is not in use: `lsof -i :4097`.
+
+### Symlink stale cache warning
+
+Run `bun run dev:bust` to clear the Bun cache and reinstall ndomo as a real copy via the file: dep strategy (strategy 1).
+
+### Package install strategy 2 (bun link) fails
+
+The installer automatically falls back to strategy 3 (manual symlink). If you want to skip package installation entirely, set:
+
+```bash
+export NDOMO_SKIP_PACKAGE_INSTALL=1
+bunx ndomo install
+```
+
+### Preset not found
+
+The installer validates the preset name against `config/ndomo.config.json::presets` before proceeding. Check available presets:
+
+```bash
+grep -o '"[a-z]*":' config/ndomo.config.json | head -20
+```
+
+Default presets: `default`, `budget`.

package/docs/integrations.md

@@ -48,7 +48,7 @@ DCP monitors context token usage and, on request or automatically, prunes low-va
 ### How to install
 
 ```bash
-./scripts/install.sh --with-dcp
+bunx ndomo install --with-dcp
 ```
 
 This installs `@tarquinen/opencode-dcp` as an optional peer dependency.

package/docs/web-ui.md

@@ -0,0 +1,124 @@
+# Web UI
+
+The ndomo HTTP server serves a Vue 3 single-page application (SPA) from the same port as the REST API. The UI provides read-only visibility into plans, tasks, and sessions.
+
+## Architecture (single-port topology)
+
+```
+Browser  ──HTTP──>  Elysia :4097  ──/api/*──>  JSON responses (auth required)
+                              └──/*──>  Vue SPA build artifacts from src/http/web/
+```
+
+- **One process**, one port. No CORS in production.
+- **SPA fallback**: any non-`/api` GET request that doesn't match a static asset returns `src/http/web/index.html` (Vue Router hash mode — routes live in the URL fragment, e.g. `/#/plans/123`).
+- **Auth**: Basic Auth via `OPENCODE_SERVER_PASSWORD`. Browser prompts on first visit, password stored in `sessionStorage`.
+- **Read-only MVP**: all current API endpoints are GET; no write UI yet.
+
+## Build pipeline
+
+```
+web/src/                 (Vue 3 SFCs, TS, CSS)
+   │
+   │ bun run web:build
+   ▼
+src/http/web/            (built artifacts — gitignored, regenerated)
+   ├── index.html
+   └── assets/
+       ├── index-*.js    (hashed JS bundles)
+       └── index-*.css   (hashed CSS bundles)
+```
+
+- `bun run web:dev` — Vite dev server on `:5173` with `/api` proxy to `:4097` Elysia. Use for SPA development (HMR).
+- `bun run web:build` — production build to `src/http/web/`. Required before starting Elysia for production.
+- `bun run web:typecheck` — vue-tsc strict mode check.
+- `bun run web:test` — Vitest unit tests (api client, composables, components).
+
+## Running locally
+
+1. Build the SPA: `bun run web:build`
+2. Start the server: `NDOMO_HTTP_ENABLED=true OPENCODE_SERVER_PASSWORD=secret bun run src/cli/serve.ts`
+3. Open `http://localhost:4097/` in your browser.
+4. Enter the password when prompted.
+
+Vite dev mode (HMR):
+
+1. Terminal 1: `NDOMO_HTTP_ENABLED=true OPENCODE_SERVER_PASSWORD=secret bun run src/cli/serve.ts`
+2. Terminal 2: `bun run web:dev`
+3. Open `http://localhost:5173/` — Vite proxies `/api/*` to Elysia.
+
+## Deployment
+
+Single binary / single process. No reverse proxy required for MVP. For production behind nginx/Caddy:
+
+- Proxy `/api/*` and all other paths to Elysia on `:4097`.
+- The SPA serves static assets with relative paths (`base: './'` in `vite.config.ts`), so it works under any sub-path.
+
+## Security
+
+- **Basic Auth** on `/api/*` (handled by Elysia middleware). `/health` and `/` are public.
+- **Browser stores password in sessionStorage** (cleared on tab close). NOT localStorage. NOT cookies.
+- **Same-origin only**: the SPA assumes it lives behind the same origin as the API. Cross-origin deployments require explicit CORS configuration.
+- **SSE limitation**: `EventSource` cannot send custom headers in browsers. The MVP stubs the SSE composable and uses polling. A future iteration will switch to `fetch` + `ReadableStream` for SSE with auth.
+
+## Extension guide (adding new panels)
+
+To add a new view (e.g., Sessions browser):
+
+1. Create `web/src/views/SessionsView.vue`.
+2. Register the route in `web/src/router/index.ts`:
+   ```ts
+   { path: "/sessions", name: "sessions", component: () => import("@/views/SessionsView.vue") }
+   ```
+3. Add a nav link in `web/src/components/AppShell.vue` sidebar.
+4. Add API client functions in `web/src/api/sessions.ts` (or new file).
+5. Add types in `web/src/types/api.ts`.
+6. Add a Vitest test in `web/__tests__/`.
+
+No backend changes needed if the API already exists. Elysia auto-serves the new SPA build on next `bun run web:build`.
+
+## Tests
+
+- **Unit (Vitest)**: `bun run web:test` — api client, composables, components.
+- **Integration**: `src/http/__tests__/spa.test.ts` — boots Elysia with fake SPA dist, tests static serving, SPA fallback, 503 when unbuilt.
+
+## File map
+
+```
+web/
+├── index.html
+├── vite.config.ts
+├── vitest.config.ts
+├── tsconfig.json
+├── src/
+│   ├── main.ts
+│   ├── App.vue
+│   ├── api/             # fetch wrappers (plans, tasks, sessions, client)
+│   ├── components/      # AppShell, AuthPrompt, StatusBadge, etc.
+│   ├── composables/     # useApi, useAuth, useEvents (stubbed)
+│   ├── router/          # vue-router config (hash mode)
+│   ├── styles/          # tokens.css + globals.css
+│   ├── types/           # api.ts (Plan, Task, Session, etc.)
+│   └── views/           # Dashboard, PlanList, PlanDetail, TaskDetail, NotFound
+└── __tests__/           # Vitest specs
+```
+
+## Environment variables
+
+| var | purpose | default |
+|---|---|---|
+| `VITE_API_BASE` | Override API base URL (Vite build-time) | empty (same-origin) |
+| `OPENCODE_SERVER_PASSWORD` | HTTP Basic Auth password | required when `http.auth.required=true` |
+| `NDOMO_HTTP_ENABLED` | Enable HTTP server | `false` |
+| `NDOMO_HTTP_PORT` | HTTP server port | `4097` |
+
+## Known limitations
+
+- SSE deferred (auth limitation in `EventSource`). MVP polls.
+- No write UI yet (all API endpoints are GET-only).
+- Hash mode routing: URLs include `#` (e.g., `localhost:4097/#/plans`). Clean URLs require switching to `createWebHistory` + server-side history fallback.
+
+## See also
+
+- [`docs/http-server.md`](http-server.md) — REST API reference, CLI flags, CORS, security headers
+- [`.env.example`](../.env.example) — annotated env reference
+- [`README.md`](../README.md) — quickstart + features

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ndomo",
-  "version": "0.1.0",
+  "version": "0.2.1",
   "description": "OpenCode multi-agent plugin. Taller de artesanos: foreman + 3 peer primaries (craftsman, warden, ranger) + specialists (scout, scribe, painter, smith, sage, guild, inspector, chronicler) + stack-smiths + ops (ci-smith, deploy-smith, release-smith, ops-scout). Caveman-native. opencode-mem integrated. DCP peer optional.",
   "type": "module",
   "license": "MIT",
@@ -10,7 +10,33 @@
     "./plugin": "./src/plugin.ts",
     "./db": "./src/db/index.ts"
   },
-  "private": false,
+  "bin": {
+    "ndomo": "./src/cli/index.ts"
+  },
+  "files": [
+    ".env.example",
+    "agents",
+    "bun.lock",
+    "config",
+    "docs",
+    "README.md",
+    "scripts/install.sh",
+    "scripts/smoke-http.sh",
+    "scripts/smoke-install.sh",
+    "scripts/smoke-web.sh",
+    "scripts/smoke.sh",
+    "skills",
+    "src/cli",
+    "src/config",
+    "src/db",
+    "src/http",
+    "src/sdk",
+    "tools"
+  ],
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
+  },
   "engines": {
     "bun": ">=1.1.0"
   },
@@ -22,12 +48,16 @@
     "lint:fix": "biome check --write .",
     "format": "biome format --write .",
     "test": "bun test",
+    "test:web": "vitest run --config web/vitest.config.ts",
     "test:smoke": "bash scripts/smoke.sh",
     "dev:bust": "bash scripts/dev-bust-cache.sh --apply",
     "dev:reset": "bash scripts/dev-bust-cache.sh --apply --kill",
     "status:plans": "bun run src/cli/status.ts --plans",
     "clean": "rm -rf dist .slim/worktrees",
-    "prepare": "husky"
+    "web:dev": "vite --config web/vite.config.ts",
+    "web:build": "vite build --config web/vite.config.ts",
+    "web:typecheck": "vue-tsc --noEmit -p web/tsconfig.json",
+    "web:test": "vitest run --config web/vitest.config.ts"
   },
   "dependencies": {
     "@opencode-ai/sdk": "1.17.7",
@@ -47,8 +77,17 @@
     "@commitlint/cli": "^19.0.0",
     "@commitlint/config-conventional": "^19.0.0",
     "@types/bun": "latest",
+    "@vitejs/plugin-vue": "^5.1.0",
+    "@vue/test-utils": "^2.4.6",
+    "@vueuse/core": "^11.0.0",
+    "happy-dom": "^15.0.0",
     "husky": "^9.0.0",
-    "typescript": "^6.0.0"
+    "typescript": "^6.0.0",
+    "vite": "^6.0.0",
+    "vitest": "^2.1.0",
+    "vue": "^3.5.0",
+    "vue-router": "^4.4.0",
+    "vue-tsc": "^2.1.0"
   },
   "keywords": [
     "opencode",

package/scripts/install.sh

@@ -3,6 +3,34 @@
 # Usage: ./install.sh [OPTIONS]
 #        curl -fsSL https://raw.githubusercontent.com/darrenhinde/OpenAgentsControl/main/install.sh | bash
 
+# ─────────────────────────────────────────────────────────────────────────────
+# ⚠️  DEPRECATED: scripts/install.sh is the legacy bash installer.
+# ─────────────────────────────────────────────────────────────────────────────
+# This script is preserved for backward-compat (e.g., pipe-mode installs from
+# raw GitHub URL). It will be removed in a future major version.
+#
+# ✅  USE THE NEW TS INSTALLER INSTEAD:
+#
+#     bunx ndomo install [OPTIONS]
+#
+# New features vs. this bash version:
+#   • Full parity with install.sh (same flags, same phases, same package install
+#     strategies, same preset application, same opencode.json plugin registration)
+#   • NEW: HTTP auto-prompt — interactively enables HTTP server (writes http
+#     block to ndomo.config.json) — closes the gap left by phase-1
+#   • NEW: --dry-run, --skip-deps, --port, --cors-origins, --auth-required flags
+#   • Honors XDG_CONFIG_HOME per XDG Base Directory spec
+#   • Cross-platform (no BSD/GNU sed differences)
+#   • Tested via bun:test (src/cli/__tests__/install.test.ts)
+#
+# Migration (one-liner):
+#   curl ... | bash                    →  bunx ndomo install
+#   ./install.sh --preset=budget       →  bunx ndomo install --preset=budget
+#   ./install.sh --with-dcp            →  bunx ndomo install --with-dcp
+#
+# See docs/installer.md for full flag reference.
+# ─────────────────────────────────────────────────────────────────────────────
+
 # ── Pipe detection (must be first, before set -e) ──────────────────────────────
 # When invoked via pipe/stdin, clone repo to temp dir and re-exec from disk.
 if [[ -z "${BASH_SOURCE[0]:-}" || "${BASH_SOURCE[0]}" == "bash" || "${BASH_SOURCE[0]}" == "/dev/stdin" ]]; then