openpalm 0.10.2 → 0.11.0-beta.10

package/README.md

@@ -1,16 +1,14 @@
 # @openpalm/cli
 
-Bun CLI for bootstrapping and managing an OpenPalm installation. The CLI is the primary orchestrator -- all commands work without the admin container. When admin is running, commands optionally delegate to the admin API.
+Bun CLI for bootstrapping and managing an OpenPalm installation. The CLI is the primary orchestrator — all commands operate directly against Docker Compose. Use `openpalm` to start the UI host process.
 
 ## Self-Sufficient Mode
 
-The CLI operates directly against Docker Compose without requiring an admin container:
+The CLI operates directly against Docker Compose:
 
-- **Install** -- creates the `~/.openpalm/` home layout, downloads assets, serves the setup wizard locally via `Bun.serve()`, writes files to their final locations, and starts core services
+- **Install** -- creates the `~/.openpalm/` home layout, downloads assets, spawns the setup wizard via the admin UI, writes files to their final locations, and starts core services
 - **All lifecycle commands** -- refresh files in `~/.openpalm/` when needed, then run Docker Compose directly
-- **Admin delegation** -- the `install` command checks for a running admin and delegates if reachable. Other commands operate directly via Docker Compose.
-
-The admin container is optional. Use `--with-admin` to enable the admin addon overlay in the compose file set.
+- **Admin UI** -- start the host admin server with `openpalm` (no container required)
 
 ## Commands
 
@@ -19,12 +17,10 @@ The admin container is optional. Use `--with-admin` to enable the admin addon ov
 | `openpalm install` | Bootstrap `~/.openpalm/`, download assets, run setup wizard, start core services |
 | `openpalm uninstall` | Stop and remove the stack (preserves config and data) |
 | `openpalm update` | Pull latest images and recreate containers |
-| `openpalm upgrade` | Alias for `update` |
 | `openpalm self-update` | Replace the installed CLI binary with the latest release build |
 | `openpalm addon <enable|disable|list>` | Manage registry addons directly from the CLI |
-| `openpalm admin <enable|disable|status>` | Manage the admin addon directly from the CLI |
 | `openpalm start [svc...]` | Start all or named services |
-| `openpalm start --with-admin` | Start all services including admin UI and docker-socket-proxy |
+| `openpalm` | Start the UI host process server |
 | `openpalm stop [svc...]` | Stop all or named services |
 | `openpalm restart [svc...]` | Restart all or named services |
 | `openpalm logs [svc...]` | Tail last 100 log lines |
@@ -37,14 +33,10 @@ The admin container is optional. Use `--with-admin` to enable the admin addon ov
 
 `--force` skip "already installed" check and create a backup of the current `OP_HOME`, `--version TAG` install a specific ref (default: current CLI version), `--no-start` prepare files only, `--no-open` skip browser launch.
 
-### Admin addon
-
-Admin and docker-socket-proxy start only when explicitly requested:
+### Admin commands
 
 ```bash
-openpalm admin enable           # Enable the admin addon and start its services
-openpalm admin disable          # Stop and disable the admin addon
-openpalm admin status           # Show whether the admin addon is enabled
+openpalm            # Start the UI host process (binds to 127.0.0.1:3880)
 openpalm addon enable chat      # Enable a registry addon and start its services
 openpalm addon disable chat     # Stop and disable a registry addon
 openpalm addon list             # Show available addons and whether they are enabled
@@ -52,7 +44,7 @@ openpalm addon list             # Show available addons and whether they are ena
 
 ## Setup Wizard
 
-On first install, the CLI serves a setup wizard on port `8100` via `Bun.serve()`. That temporary setup port is separate from the admin container, which defaults to `http://localhost:3880` once installed. The wizard runs entirely in the browser (vanilla HTML/JS) and calls `performSetup()` from `@openpalm/lib` to write secrets, connection profiles, memory config, and other files to their final locations. No admin container is involved.
+On first install, the CLI spawns `openpalm` which serves the setup wizard via the SvelteKit admin UI at `http://localhost:3880/setup`. The wizard runs entirely in the browser and calls `performSetup()` from `@openpalm/lib` to write secrets, connection profiles, memory config, and other files to their final locations.
 
 ## Environment Variables
 
@@ -60,12 +52,12 @@ On first install, the CLI serves a setup wizard on port `8100` via `Bun.serve()`
 |---|---|---|
 | `OP_HOME` | `~/.openpalm` | Root of all OpenPalm state |
 | `OP_WORK_DIR` | `~/openpalm` | Assistant working directory |
-| `OP_ADMIN_API_URL` | `http://localhost:3880` | Admin API endpoint (for optional delegation) |
-| `OP_ADMIN_TOKEN` | (from `vault/stack/stack.env`) | Admin API auth token |
+| `OP_HOST_UI_PORT` | `3880` | Port for the host admin server (`openpalm`) |
+| `OP_UI_TOKEN` | (from `state/admin/token`) | Admin API auth token |
 
 ## How It Works
 
-1. **Bootstrap** (first install) -- creates the `~/.openpalm/` tree, downloads core assets from GitHub, seeds `vault/user/user.env` and `vault/stack/stack.env`, materializes the runtime registry catalog under `registry/`, serves the setup wizard, writes `stack/core.compose.yml`, enables requested addons under `stack/addons/`, and starts core services via `docker compose up`
+1. **Bootstrap** (first install) -- creates the `~/.openpalm/` tree, downloads core assets from GitHub, seeds `stash/vaults/user.env` and `config/stack/stack.env`, materializes the runtime registry catalog under `state/registry/`, serves the setup wizard, writes `stack/core.compose.yml`, enables requested addons under `stack/addons/`, and starts core services via `docker compose up`
 2. **Running stack** -- commands refresh files in `~/.openpalm/` when needed, then execute Docker Compose directly.
 3. **Admin absent** -- all commands work identically. Admin is never required for any operation.
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "openpalm",
-  "version": "0.10.2",
+  "version": "0.11.0-beta.10",
   "type": "module",
   "license": "MPL-2.0",
   "description": "OpenPalm CLI — install and manage a self-hosted OpenPalm stack",
@@ -12,11 +12,18 @@
   "bin": {
     "openpalm": "./bin/openpalm.js"
   },
+  "files": [
+    "bin",
+    "dist",
+    "README.md"
+  ],
   "scripts": {
     "start": "bun run src/main.ts",
     "test": "bun test",
     "test:e2e": "npx playwright test",
-    "wizard:dev": "bun run src/main.ts install --no-start --force",
+    "wizard:local": "bun run src/main.ts install --no-start --force",
+    "_build_note": "CI runs 'bun run ui:build:tar' from repo root before any build:* target. The prebuild hook below is npm-only; Bun does not run lifecycle hooks.",
+    "prebuild": "cd ../ui && npm run build && npm run build:tar",
     "build": "bun build src/main.ts --compile --outfile dist/openpalm-cli",
     "build:linux-x64": "bun build src/main.ts --compile --target=bun-linux-x64 --outfile dist/openpalm-cli-linux-x64",
     "build:linux-arm64": "bun build src/main.ts --compile --target=bun-linux-arm64 --outfile dist/openpalm-cli-linux-arm64",
@@ -25,8 +32,11 @@
     "build:windows-x64": "bun build src/main.ts --compile --target=bun-windows-x64 --outfile dist/openpalm-cli-windows-x64.exe",
     "build:windows-arm64": "bun build src/main.ts --compile --target=bun-windows-arm64 --outfile dist/openpalm-cli-windows-arm64.exe"
   },
+  "engines": {
+    "bun": ">=1.0.0"
+  },
   "dependencies": {
-    "@openpalm/lib": ">=0.10.1 <1.0.0",
+    "@openpalm/lib": ">=0.11.0-beta.9 <1.0.0",
     "citty": "^0.2.1",
     "yaml": "^2.8.0"
   }

package/e2e/start-wizard-server.ts

@@ -1,59 +0,0 @@
-/**
- * Bun-only launcher for the CLI setup wizard server.
- *
- * Called from Playwright tests as a child process:
- *   bun run packages/cli/e2e/start-wizard-server.ts <port>
- *
- * Starts the wizard server on the given port with a temp config directory
- * so tests do not affect real dev state. Prints "WIZARD_READY:<port>" to
- * stdout when listening, which the Playwright test waits for.
- */
-import { createSetupServer } from "../src/setup-wizard/server.ts";
-import { mkdirSync, writeFileSync } from "node:fs";
-
-const port = parseInt(Bun.argv[2] || "18100", 10);
-const tmpBase = `/tmp/openpalm-wizard-test-${port}`;
-
-// Create minimal directory structure so the server can start.
-// API endpoints that need real files are mocked at the browser level
-// by Playwright's page.route(), so these dirs just prevent crashes.
-mkdirSync(`${tmpBase}/config`, { recursive: true });
-mkdirSync(`${tmpBase}/config/automations`, { recursive: true });
-mkdirSync(`${tmpBase}/data`, { recursive: true });
-mkdirSync(`${tmpBase}/data/assistant`, { recursive: true });
-mkdirSync(`${tmpBase}/registry/automations`, { recursive: true });
-mkdirSync(`${tmpBase}/stack`, { recursive: true });
-mkdirSync(`${tmpBase}/vault/stack`, { recursive: true });
-mkdirSync(`${tmpBase}/vault/user`, { recursive: true });
-
-writeFileSync(`${tmpBase}/vault/stack/stack.env`, "OP_SETUP_COMPLETE=false\n");
-writeFileSync(`${tmpBase}/vault/user/user.env`, "# test\n");
-
-// Seed minimal asset files so performSetup() can read them if invoked
-writeFileSync(`${tmpBase}/stack/core.compose.yml`, "services:\n  admin:\n    image: admin:latest\n");
-writeFileSync(`${tmpBase}/data/assistant/opencode.jsonc`, '{"$schema":"https://opencode.ai/config.json"}\n');
-writeFileSync(`${tmpBase}/data/assistant/AGENTS.md`, "# Agents\n");
-writeFileSync(`${tmpBase}/vault/user/user.env.schema`, "OP_ADMIN_TOKEN=string\n");
-writeFileSync(`${tmpBase}/vault/stack/stack.env.schema`, "OP_IMAGE_TAG=string\n");
-writeFileSync(`${tmpBase}/registry/automations/cleanup-logs.yml`, "name: cleanup-logs\nschedule: daily\n");
-writeFileSync(`${tmpBase}/registry/automations/cleanup-data.yml`, "name: cleanup-data\nschedule: weekly\n");
-writeFileSync(`${tmpBase}/registry/automations/validate-config.yml`, "name: validate-config\nschedule: hourly\n");
-
-// Override state/config home so the server doesn't touch real dirs.
-process.env.OP_HOME = tmpBase;
-
-const { server } = createSetupServer(port, {
-	configDir: `${tmpBase}/config`,
-});
-
-console.log(`WIZARD_READY:${port}`);
-
-// Keep alive until killed
-process.on("SIGTERM", () => {
-	server.stop();
-	process.exit(0);
-});
-process.on("SIGINT", () => {
-	server.stop();
-	process.exit(0);
-});

package/playwright.config.ts

@@ -1,16 +0,0 @@
-import { defineConfig } from '@playwright/test';
-
-const WIZARD_PORT = 18200;
-
-export default defineConfig({
-	testDir: 'e2e',
-	webServer: {
-		command: `bun run e2e/start-wizard-server.ts ${WIZARD_PORT}`,
-		port: WIZARD_PORT,
-		stdout: 'pipe',
-		reuseExistingServer: !process.env.CI,
-	},
-	use: {
-		baseURL: `http://localhost:${WIZARD_PORT}`,
-	},
-});

package/src/commands/addon.ts

@@ -1,130 +0,0 @@
-import { defineCommand } from 'citty';
-import {
-  getAddonServiceNames,
-  listAvailableAddonIds,
-  listEnabledAddonIds,
-  setAddonEnabled,
-} from '@openpalm/lib';
-import { ensureValidState } from '../lib/cli-state.ts';
-import { fullComposeArgs, runComposeWithPreflight } from '../lib/cli-compose.ts';
-import { runDockerCompose } from '../lib/docker.ts';
-
-function requireKnownAddon(name: string): void {
-  const available = listAvailableAddonIds();
-  const hint = available.length > 0 ? ` Run \`openpalm addon list\` to see the available addons.` : '';
-  if (!available.includes(name)) {
-    throw new Error(`Addon "${name}" is not available. Known addons: ${available.join(', ') || '(none)'}.${hint}`);
-  }
-}
-
-export async function runAddonListAction(): Promise<void> {
-  const state = ensureValidState();
-  const enabled = new Set(listEnabledAddonIds(state.homeDir));
-  const available = listAvailableAddonIds();
-
-  if (available.length === 0) {
-    console.log('No registry addons are available.');
-    return;
-  }
-
-  for (const name of available) {
-    console.log(`${enabled.has(name) ? '[enabled]' : '[disabled]'} ${name}`);
-  }
-}
-
-export async function runAddonEnableAction(name: string): Promise<void> {
-  requireKnownAddon(name);
-  const state = ensureValidState();
-  const mutation = setAddonEnabled(state.homeDir, state.vaultDir, name, true);
-  if (!mutation.ok) throw new Error(mutation.error);
-
-  if (!mutation.changed) {
-    console.log(`Addon "${name}" is already enabled.`);
-    return;
-  }
-
-  console.log(`Enabled addon "${name}".`);
-
-  if (mutation.services.length === 0) return;
-
-  try {
-    const nextState = ensureValidState();
-    await runComposeWithPreflight(nextState, ['up', '-d', ...mutation.services]);
-    console.log(`Started services: ${mutation.services.join(', ')}`);
-  } catch (err) {
-    console.warn(
-      `Warning: addon "${name}" was enabled but its services were not started automatically: ${err instanceof Error ? err.message : String(err)}`,
-    );
-  }
-}
-
-export async function runAddonDisableAction(name: string): Promise<void> {
-  requireKnownAddon(name);
-  const state = ensureValidState();
-  const services = getAddonServiceNames(state.homeDir, name);
-  const wasEnabled = listEnabledAddonIds(state.homeDir).includes(name);
-
-  if (wasEnabled && services.length > 0) {
-    try {
-      await runDockerCompose([...fullComposeArgs(state), 'stop', ...services]);
-      console.log(`Stopped services: ${services.join(', ')}`);
-    } catch (err) {
-      console.warn(
-        `Warning: failed to stop services for addon "${name}" before disabling it: ${err instanceof Error ? err.message : String(err)}`,
-      );
-    }
-  }
-
-  const mutation = setAddonEnabled(state.homeDir, state.vaultDir, name, false);
-  if (!mutation.ok) throw new Error(mutation.error);
-
-  if (!mutation.changed) {
-    console.log(`Addon "${name}" is already disabled.`);
-    return;
-  }
-
-  console.log(`Disabled addon "${name}".`);
-}
-
-const enableCmd = defineCommand({
-  meta: { name: 'enable', description: 'Enable a registry addon' },
-  args: {
-    name: { type: 'positional', description: 'Addon name', required: true },
-  },
-  async run({ args }) {
-    const name = String(args._?.[0] ?? '').trim();
-    if (!name) throw new Error('Addon name is required. Run `openpalm addon list` to see the available addons.');
-    await runAddonEnableAction(name);
-  },
-});
-
-const disableCmd = defineCommand({
-  meta: { name: 'disable', description: 'Disable a registry addon' },
-  args: {
-    name: { type: 'positional', description: 'Addon name', required: true },
-  },
-  async run({ args }) {
-    const name = String(args._?.[0] ?? '').trim();
-    if (!name) throw new Error('Addon name is required. Run `openpalm addon list` to see the available addons.');
-    await runAddonDisableAction(name);
-  },
-});
-
-const listCmd = defineCommand({
-  meta: { name: 'list', description: 'List registry addons and whether they are enabled' },
-  async run() {
-    await runAddonListAction();
-  },
-});
-
-export default defineCommand({
-  meta: {
-    name: 'addon',
-    description: 'Enable, disable, or list registry addons',
-  },
-  subCommands: {
-    list: listCmd,
-    enable: enableCmd,
-    disable: disableCmd,
-  },
-});

package/src/commands/admin.ts

@@ -1,43 +0,0 @@
-import { defineCommand } from 'citty';
-import { listEnabledAddonIds } from '@openpalm/lib';
-import { ensureValidState } from '../lib/cli-state.ts';
-import { runAddonDisableAction, runAddonEnableAction } from './addon.ts';
-
-async function runAdminStatusAction(): Promise<void> {
-  const state = ensureValidState();
-  const enabled = listEnabledAddonIds(state.homeDir).includes('admin');
-  console.log(enabled ? 'Admin addon is enabled.' : 'Admin addon is disabled.');
-}
-
-const enableCmd = defineCommand({
-  meta: { name: 'enable', description: 'Enable the admin addon' },
-  async run() {
-    await runAddonEnableAction('admin');
-  },
-});
-
-const disableCmd = defineCommand({
-  meta: { name: 'disable', description: 'Disable the admin addon' },
-  async run() {
-    await runAddonDisableAction('admin');
-  },
-});
-
-const statusCmd = defineCommand({
-  meta: { name: 'status', description: 'Show whether the admin addon is enabled' },
-  async run() {
-    await runAdminStatusAction();
-  },
-});
-
-export default defineCommand({
-  meta: {
-    name: 'admin',
-    description: 'Enable, disable, or inspect the admin addon',
-  },
-  subCommands: {
-    enable: enableCmd,
-    disable: disableCmd,
-    status: statusCmd,
-  },
-});

package/src/commands/install-services.test.ts

@@ -1,13 +0,0 @@
-import { describe, expect, it } from 'bun:test';
-import { buildDeployStatusEntries } from './install-services.ts';
-
-describe('install service helpers', () => {
-  it('builds deploy status entries for the install service list', () => {
-    const services = ['memory', 'assistant'];
-
-    expect(buildDeployStatusEntries(services, 'pending', 'Waiting...')).toEqual([
-      { service: 'memory', status: 'pending', label: 'Waiting...' },
-      { service: 'assistant', status: 'pending', label: 'Waiting...' },
-    ]);
-  });
-});

package/src/commands/install-services.ts

@@ -1,9 +0,0 @@
-export type DeployStatusState = 'pending' | 'pulling' | 'error';
-
-export function buildDeployStatusEntries(
-  services: string[],
-  status: DeployStatusState,
-  label: string,
-): Array<{ service: string; status: DeployStatusState; label: string }> {
-  return services.map(service => ({ service, status, label }));
-}