om-memory-system 3.2.0-next.9 → 3.3.0-next.17

package/dist/services/web-server.js

@@ -5,7 +5,7 @@ import { join, dirname, extname, normalize, sep } from "node:path";
 import { fileURLToPath } from "node:url";
 import { log } from "./logger.js";
 import { corsPreflightResponse, disallowedCorsResponse, isAllowedBrowserOrigin } from "./cors.js";
-import { assertWebServerNetworkAuth, authorizeApiRequest } from "./web-api-auth.js";
+import { assertWebServerNetworkAuth, authorizeApiRequest, isLoopbackHost } from "./web-api-auth.js";
 import { getOrCreateAuthToken, isAuthorizedApiRequest } from "./auth-token.js";
 import { WebAuth } from "./web-auth.js";
 import { NODE_HTTP_IDLE_TIMEOUT_MS } from "./request-timeouts.js";
@@ -145,6 +145,21 @@ export class WebServer {
     portsExhaustedNotified = false;
     takeoverFailures = 0;
     maxFallbackPort;
+    settingsImportJobs;
+    /** Run an import-page action; errors carry their own status and never file contents. */
+    async importResponse(action, status = 200) {
+        try {
+            return this.jsonResponse(await action(), status);
+        }
+        catch (error) {
+            const code = error.status;
+            return this.jsonResponse({ error: error instanceof Error ? error.message : "Import request failed" }, typeof code === "number" ? code : 400);
+        }
+    }
+    async importJobs() {
+        const { SettingsImportJobs } = await import("../importer/web-import-jobs.js");
+        return (this.settingsImportJobs ??= new SettingsImportJobs());
+    }
     constructor(config) {
         this.config = config;
         this.maxFallbackPort = config.port + 10;
@@ -166,6 +181,10 @@ export class WebServer {
         if (!this.config.enabled) {
             return;
         }
+        // Remove OpenCode snapshot copies left by processes that quit mid-import.
+        void import("../importer/web-import-api.js")
+            .then(({ sweepOrphanSnapshots }) => sweepOrphanSnapshots())
+            .catch(() => { });
         assertWebServerNetworkAuth(this.config.host, this.config.apiToken, this.config.auth?.isEnabled() ?? false);
         try {
             this.server = serveFetch({
@@ -288,6 +307,8 @@ export class WebServer {
         this.server.stop();
         this.server = null;
         this.isOwner = false;
+        const { opencodeSnapshots } = await import("../importer/web-import-api.js");
+        await opencodeSnapshots.closeAll();
     }
     isRunning() {
         return this.server !== null;
@@ -343,7 +364,10 @@ export class WebServer {
             if (!authCheck.ok && authCheck.response)
                 return authCheck.response;
         }
-        if (path.startsWith("/api/") && path !== "/api/health" && !isAuthorizedApiRequest(req)) {
+        if (path.startsWith("/api/") &&
+            path !== "/api/health" &&
+            !(path.startsWith("/api/settings") && auth?.isEnabled()) &&
+            !isAuthorizedApiRequest(req)) {
             const configuredTokenFailure = this.config.apiToken
                 ? authorizeApiRequest(req, this.config.apiToken)
                 : null;
@@ -352,6 +376,17 @@ export class WebServer {
                     this.jsonResponse({ success: false, error: "Unauthorized" }, 401));
             }
         }
+        if (path.startsWith("/api/settings") && !["GET", "HEAD"].includes(method)) {
+            if (!/^application\/json(?:\s*;|$)/i.test(req.headers.get("content-type") ?? "")) {
+                return this.jsonResponse({ error: "JSON content type required" }, 415);
+            }
+            if (!isLoopbackHost(this.config.host) && !auth?.isEnabled()) {
+                const denied = authorizeApiRequest(req, this.config.apiToken);
+                if (!this.config.apiToken || denied) {
+                    return denied ?? this.jsonResponse({ error: "Unauthorized" }, 401);
+                }
+            }
+        }
         try {
             if (path === "/api/health" && method === "GET") {
                 return this.jsonResponse({
@@ -360,7 +395,7 @@ export class WebServer {
                     authEnabled: auth?.isEnabled() ?? false,
                 });
             }
-            if (path === "/" || path === "/index.html") {
+            if (path === "/" || path === "/index.html" || path === "/settings") {
                 return this.serveStaticFile("index.html", "text/html");
             }
             if (path === "/favicon.ico") {
@@ -376,6 +411,144 @@ export class WebServer {
                     }
                 }
             }
+            if (path === "/api/settings" && method === "GET") {
+                const { getSettingsSnapshot } = await import("./settings-snapshot.js");
+                return this.jsonResponse(getSettingsSnapshot(this.config.directory ?? process.cwd()));
+            }
+            if (path === "/api/settings" && method === "PATCH") {
+                const body = (await req.json());
+                if (!body ||
+                    typeof body.edits !== "object" ||
+                    !body.edits ||
+                    Array.isArray(body.edits) ||
+                    typeof body.revision !== "string") {
+                    return this.jsonResponse({ error: "Edits and revision required" }, 400);
+                }
+                if (body.edits.captureTrace === true &&
+                    !isLoopbackHost(this.config.host) &&
+                    !auth?.isEnabled()) {
+                    return this.jsonResponse({ error: "Tracing requires Basic Auth on network hosts" }, 403);
+                }
+                const { writeGlobalConfigKeys, ConfigConflictError } = await import("./global-config-writer.js");
+                let result;
+                try {
+                    result = await writeGlobalConfigKeys(body.edits, body.revision);
+                }
+                catch (error) {
+                    return this.jsonResponse({ error: error instanceof Error ? error.message : "Invalid settings" }, error instanceof ConfigConflictError ? 409 : 400);
+                }
+                // The file is already saved; a reload problem must not report the save as failed.
+                try {
+                    const { refreshConfigIfChanged } = await import("../config.js");
+                    refreshConfigIfChanged(this.config.directory ?? process.cwd());
+                }
+                catch (error) {
+                    log("Settings saved, but reloading them failed", {
+                        error: error instanceof Error ? error.message : String(error),
+                    });
+                }
+                return this.jsonResponse(result);
+            }
+            if (path === "/api/settings/models" && method === "GET") {
+                const { listOpencodeSettingsModels, listPiSettingsModels } = await import("./settings-models.js");
+                const host = url.searchParams.get("host");
+                if (host === "pi")
+                    return this.jsonResponse(await listPiSettingsModels());
+                if (host === "opencode")
+                    return this.jsonResponse(await listOpencodeSettingsModels());
+                return this.jsonResponse({ error: "Invalid host" }, 400);
+            }
+            if (path === "/api/settings/diagnostics" && method === "GET") {
+                const { queryCaptureAttempts } = await import("./capture-attempt-store.js");
+                const days = Math.max(1, Math.min(90, Number(url.searchParams.get("days")) || 7));
+                return this.jsonResponse(await queryCaptureAttempts(Date.now() - days * 86400000, Date.now()));
+            }
+            if (path === "/api/settings/traces" && method === "GET") {
+                const { listSettingsTraces } = await import("./settings-traces.js");
+                return this.jsonResponse({ traces: await listSettingsTraces() });
+            }
+            if (path.startsWith("/api/settings/traces/") && (method === "GET" || method === "DELETE")) {
+                const file = decodeURIComponent(path.slice("/api/settings/traces/".length));
+                if (!/^capture-\d{4}-\d{2}-\d{2}\.jsonl$/.test(file)) {
+                    return this.jsonResponse({ error: "Invalid trace file name" }, 400);
+                }
+                const { readSettingsTrace, deleteSettingsTrace } = await import("./settings-traces.js");
+                if (method === "DELETE") {
+                    await deleteSettingsTrace(file);
+                    return this.jsonResponse({ deleted: true });
+                }
+                return this.jsonResponse({ file, content: await readSettingsTrace(file) });
+            }
+            if (path === "/api/settings/health" && method === "POST") {
+                const body = (await req.json());
+                if (!body ||
+                    typeof body !== "object" ||
+                    (body.testModels !== undefined && typeof body.testModels !== "boolean")) {
+                    return this.jsonResponse({ error: "Invalid health options" }, 400);
+                }
+                const { runSettingsHealth } = await import("../importer/settings-health.js");
+                return this.jsonResponse(await runSettingsHealth({
+                    directory: this.config.directory ?? process.cwd(),
+                    host: this.config.host,
+                    authEnabled: auth?.isEnabled() ?? false,
+                    apiTokenSet: Boolean(this.config.apiToken),
+                    testModels: body.testModels === true,
+                }));
+            }
+            if (path === "/api/settings/imports/readiness" && method === "GET") {
+                const { importReadiness } = await import("../importer/web-import-api.js");
+                return this.jsonResponse(await importReadiness());
+            }
+            if (path === "/api/settings/imports/sources/browse" && method === "POST") {
+                // Listing folders would expose the machine's layout to remote users.
+                if (!isLoopbackHost(this.config.host)) {
+                    return this.jsonResponse({ error: "Browsing is available only on a loopback bind; enter a path instead" }, 403);
+                }
+                const body = (await req.json());
+                if (body?.host !== "pi" && body?.host !== "opencode") {
+                    return this.jsonResponse({ error: "Choose Pi or OpenCode" }, 400);
+                }
+                const { browseImportSources } = await import("../importer/web-import-api.js");
+                return this.importResponse(() => browseImportSources(body.host, body.path));
+            }
+            if (path === "/api/settings/imports/sources/validate" && method === "POST") {
+                const body = (await req.json());
+                if (body?.host !== "pi" && body?.host !== "opencode") {
+                    return this.jsonResponse({ error: "Choose Pi or OpenCode" }, 400);
+                }
+                const { validateImportSource } = await import("../importer/web-import-api.js");
+                return this.importResponse(() => validateImportSource(body.host, body.path));
+            }
+            if (path === "/api/settings/imports/sessions" && method === "POST") {
+                const body = (await req.json());
+                const { listImportSessions, validateSessionListRequest } = await import("../importer/web-import-api.js");
+                return this.importResponse(async () => {
+                    const request = validateSessionListRequest(body);
+                    return listImportSessions(request, {
+                        ...request.match,
+                        cwd: this.config.directory ?? process.cwd(),
+                    });
+                });
+            }
+            if (path === "/api/settings/imports" && method === "POST") {
+                const jobs = await this.importJobs();
+                return this.importResponse(async () => jobs.start(await req.json(), this.config.directory ?? process.cwd()), 202);
+            }
+            if (path === "/api/settings/imports/current" && method === "GET") {
+                return this.jsonResponse({ job: (await this.importJobs()).current() });
+            }
+            if (path === "/api/settings/imports/current/cancel" && method === "POST") {
+                try {
+                    return this.jsonResponse({ job: (await this.importJobs()).cancel() });
+                }
+                catch (error) {
+                    return this.jsonResponse({ error: error instanceof Error ? error.message : "No running import" }, 409);
+                }
+            }
+            if (path === "/api/settings/log" && method === "GET") {
+                const { readSettingsLog } = await import("./settings-log.js");
+                return this.jsonResponse(await readSettingsLog(Number(url.searchParams.get("lines") ?? 200), url.searchParams.get("filter") === "capture"));
+            }
             if (path === "/api/tags" && method === "GET") {
                 const result = await handleListTags();
                 return this.jsonResponse(result);

package/dist/v2/legacy-client.js

@@ -112,7 +112,15 @@ export function createLegacyClient(ctx) {
                 const connected = [
                     ...new Set(models.data.map((model) => model.providerID).filter(Boolean)),
                 ];
-                return { data: { connected } };
+                // The Settings page lists each connected provider's models from `all`, as
+                // the V1 SDK's provider list returns them.
+                const all = connected.map((id) => ({
+                    id,
+                    models: Object.fromEntries(models.data
+                        .filter((model) => model.providerID === id)
+                        .map((model) => [model.id, { name: model.name || model.id }])),
+                }));
+                return { data: { connected, all } };
             },
         },
         tui: {
@@ -222,8 +230,17 @@ export function toLegacyEvent(raw) {
     const envelope = raw?.payload ?? raw;
     const source = envelope?.type === "sync" && envelope.syncEvent ? envelope.syncEvent : envelope;
     const rawType = typeof source?.type === "string" ? source.type.replace(/\.1$/, "") : source?.type;
-    const type = rawType === "session.compaction.ended" ? "session.compacted" : rawType;
     const data = source?.data ?? {};
+    // OpenCode 2.0.14 ends a turn with `session.execution.succeeded` and emits no
+    // `session.idle`; some builds report idleness through `session.status`. The
+    // V1 capture path listens for `session.idle`, so both map onto it.
+    // Subscribed events carry their payload in `data`; bus-style ones in `properties`.
+    const payload = source?.data ?? source?.properties ?? {};
+    if (rawType === "session.execution.succeeded" ||
+        (rawType === "session.status" && payload?.status?.type === "idle")) {
+        return { type: "session.idle", properties: { sessionID: payload.sessionID } };
+    }
+    const type = rawType === "session.compaction.ended" ? "session.compacted" : rawType;
     if (source && typeof source === "object" && "properties" in source) {
         return { type, properties: source.properties };
     }