patchwork-os 0.2.0-alpha.0 → 0.2.0-alpha.10

package/dist/recipesHttp.js

@@ -16,7 +16,12 @@ export function saveRecipe(recipesDir, draft) {
             name: safeName,
             description: draft.description,
             trigger: draft.trigger,
-            steps: draft.steps,
+            steps: draft.steps.map((s) => ({
+                id: s.id,
+                agent: s.agent,
+                prompt: s.prompt,
+            })),
+            ...(draft.vars && draft.vars.length > 0 ? { vars: draft.vars } : {}),
             createdAt: Date.now(),
         };
         writeFileSync(candidate, JSON.stringify(payload, null, 2), "utf-8");
@@ -76,6 +81,9 @@ export function listInstalledRecipes(recipesDir) {
                 installedAt: stat.mtimeMs,
                 hasPermissions,
                 source,
+                ...(Array.isArray(parsed.vars) && parsed.vars.length > 0
+                    ? { vars: parsed.vars }
+                    : {}),
             });
         }
         catch {

package/dist/recipesHttp.js.map

@@ -1 +1 @@
-{"version":3,"file":"recipesHttp.js","sourceRoot":"","sources":["../src/recipesHttp.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,EACT,WAAW,EACX,YAAY,EACZ,QAAQ,EACR,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,IAAI,MAAM,WAAW,CAAC;AAmB7B,MAAM,UAAU,UAAU,CACxB,UAAkB,EAClB,KAAkB;IAElB,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC/D,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC;IACrD,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,QAAQ,OAAO,CAAC,CAAC;IAC/D,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACtC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;IAC9C,CAAC;IACD,IAAI,CAAC;QACH,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,MAAM,OAAO,GAAG;YACd,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC;QACF,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QACpE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IACvC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SACxD,CAAC;IACJ,CAAC;AACH,CAAC;AAkBD,MAAM,UAAU,oBAAoB,CAAC,UAAkB;IACrD,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACrC,CAAC;IAED,MAAM,OAAO,GAAoB,EAAE,CAAC;IACpC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,mBAAmB,CAAC;YAAE,SAAS;QACtE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;QAC1C,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAK5B,CAAC;YACF,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAChC,MAAM,SAAS,GAAG,GAAG,QAAQ,mBAAmB,CAAC;YACjD,IAAI,cAAc,GAAG,KAAK,CAAC;YAC3B,IAAI,CAAC;gBACH,QAAQ,CAAC,SAAS,CAAC,CAAC;gBACpB,cAAc,GAAG,IAAI,CAAC;YACxB,CAAC;YAAC,MAAM,CAAC;gBACP,yBAAyB;YAC3B,CAAC;YACD,MAAM,kBAAkB,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YACpD,IAAI,MAA+B,CAAC;YACpC,IACE,QAAQ,CAAC,UAAU,CAAC,kBAAkB,GAAG,IAAI,CAAC,GAAG,CAAC;gBAClD,QAAQ,KAAK,kBAAkB,EAC/B,CAAC;gBACD,MAAM,GAAG,MAAM,CAAC;YAClB,CAAC;iBAAM,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,GAAG,aAAa,IAAI,CAAC,GAAG,SAAS,CAAC,EAAE,CAAC;gBACxE,MAAM,GAAG,SAAS,CAAC;YACrB,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,SAAS,CAAC;YACrB,CAAC;YACD,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC;gBAC9C,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,IAAI;gBAC7B,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBAChE,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,IAAI,CAAC,OAAO;gBACzB,cAAc;gBACd,MAAM;aACP,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,6BAA6B;QAC/B,CAAC;IACH,CAAC;IAED,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACrD,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;AACjC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAC/B,UAAkB,EAClB,WAAmB;IAEnB,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,mBAAmB,CAAC;YAAE,SAAS;QACtE,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;YAC5D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAG5B,CAAC;YACF,IAAI,MAAM,CAAC,OAAO,EAAE,IAAI,KAAK,SAAS;gBAAE,SAAS;YACjD,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;gBACxC,OAAO;oBACL,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC;oBAC9C,IAAI,EAAE,WAAW;iBAClB,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,iBAAiB;QACnB,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAC9B,UAAkB,EAClB,IAAY;IAEZ,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IACpC,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAE9D,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,QAAQ,OAAO,CAAC,CAAC;IAC/D,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACtC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAExD,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAU5B,CAAC;IACF,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,yCAAyC,MAAM,CAAC,IAAI,IAAI,IAAI,IAAI,CAAC,CAAC;IAC7E,IAAI,MAAM,CAAC,WAAW;QACpB,KAAK,CAAC,IAAI,CAAC,yBAAyB,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;IAC5D,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3D,KAAK,CAAC,IAAI,CACR,wEAAwE,CACzE,CAAC;QACF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7C,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC1B,IAAI,CAAC,CAAC;gBAAE,SAAS;YACjB,MAAM,KAAK,GAAG,CAAC,CAAC,EAAE,IAAI,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,GACR,CAAC,CAAC,MAAM;gBACR,CAAC,CAAC,WAAW;gBACb,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC;YACxD,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,EAAE,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IACD,KAAK,CAAC,IAAI,CACR,yEAAyE,CAC1E,CAAC;IACF,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;AACvD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CACjC,UAAkB,EAClB,OAAgB;IAEhB,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,UAAU,CAAC;IAC7C,MAAM,GAAG,GAAG,KAAK,CAAC;IAClB,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IACzB,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG;QAAE,IAAI,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,gBAAgB,CAAC;IACpE,OAAO,GAAG,UAAU,qCAAqC,IAAI,UAAU,CAAC;AAC1E,CAAC"}
+{"version":3,"file":"recipesHttp.js","sourceRoot":"","sources":["../src/recipesHttp.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,SAAS,EACT,WAAW,EACX,YAAY,EACZ,QAAQ,EACR,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,IAAI,MAAM,WAAW,CAAC;AAyB7B,MAAM,UAAU,UAAU,CACxB,UAAkB,EAClB,KAAkB;IAElB,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC/D,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,qBAAqB,EAAE,CAAC;IACrD,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,QAAQ,OAAO,CAAC,CAAC;IAC/D,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACtC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;IAC9C,CAAC;IACD,IAAI,CAAC;QACH,SAAS,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,MAAM,OAAO,GAAG;YACd,IAAI,EAAE,QAAQ;YACd,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC7B,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,KAAK,EAAE,CAAC,CAAC,KAAK;gBACd,MAAM,EAAE,CAAC,CAAC,MAAM;aACjB,CAAC,CAAC;YACH,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACpE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC;QACF,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QACpE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IACvC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SACxD,CAAC;IACJ,CAAC;AACH,CAAC;AAwBD,MAAM,UAAU,oBAAoB,CAAC,UAAkB;IACrD,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACrC,CAAC;IAED,MAAM,OAAO,GAAoB,EAAE,CAAC;IACpC,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,mBAAmB,CAAC;YAAE,SAAS;QACtE,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;QAC1C,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAW5B,CAAC;YACF,MAAM,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAChC,MAAM,SAAS,GAAG,GAAG,QAAQ,mBAAmB,CAAC;YACjD,IAAI,cAAc,GAAG,KAAK,CAAC;YAC3B,IAAI,CAAC;gBACH,QAAQ,CAAC,SAAS,CAAC,CAAC;gBACpB,cAAc,GAAG,IAAI,CAAC;YACxB,CAAC;YAAC,MAAM,CAAC;gBACP,yBAAyB;YAC3B,CAAC;YACD,MAAM,kBAAkB,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;YACpD,IAAI,MAA+B,CAAC;YACpC,IACE,QAAQ,CAAC,UAAU,CAAC,kBAAkB,GAAG,IAAI,CAAC,GAAG,CAAC;gBAClD,QAAQ,KAAK,kBAAkB,EAC/B,CAAC;gBACD,MAAM,GAAG,MAAM,CAAC;YAClB,CAAC;iBAAM,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,GAAG,aAAa,IAAI,CAAC,GAAG,SAAS,CAAC,EAAE,CAAC;gBACxE,MAAM,GAAG,SAAS,CAAC;YACrB,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,SAAS,CAAC;YACrB,CAAC;YACD,OAAO,CAAC,IAAI,CAAC;gBACX,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC;gBAC9C,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,IAAI;gBAC7B,SAAS,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;gBAChE,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,IAAI,CAAC,OAAO;gBACzB,cAAc;gBACd,MAAM;gBACN,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;oBACtD,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE;oBACvB,CAAC,CAAC,EAAE,CAAC;aACR,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,6BAA6B;QAC/B,CAAC;IACH,CAAC;IAED,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACrD,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;AACjC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAC/B,UAAkB,EAClB,WAAmB;IAEnB,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,WAAW,CAAC,UAAU,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,mBAAmB,CAAC;YAAE,SAAS;QACtE,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;YAC5D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAG5B,CAAC;YACF,IAAI,MAAM,CAAC,OAAO,EAAE,IAAI,KAAK,SAAS;gBAAE,SAAS;YACjD,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;gBACxC,OAAO;oBACL,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,OAAO,CAAC;oBAC9C,IAAI,EAAE,WAAW;iBAClB,CAAC;YACJ,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,iBAAiB;QACnB,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAC9B,UAAkB,EAClB,IAAY;IAEZ,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IACpC,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAE9D,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,QAAQ,OAAO,CAAC,CAAC;IAC/D,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IACtC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAExD,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAU5B,CAAC;IACF,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,CAAC,IAAI,CAAC,yCAAyC,MAAM,CAAC,IAAI,IAAI,IAAI,IAAI,CAAC,CAAC;IAC7E,IAAI,MAAM,CAAC,WAAW;QACpB,KAAK,CAAC,IAAI,CAAC,yBAAyB,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC;IAC5D,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3D,KAAK,CAAC,IAAI,CACR,wEAAwE,CACzE,CAAC;QACF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC7C,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YAC1B,IAAI,CAAC,CAAC;gBAAE,SAAS;YACjB,MAAM,KAAK,GAAG,CAAC,CAAC,EAAE,IAAI,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACtC,MAAM,IAAI,GACR,CAAC,CAAC,MAAM;gBACR,CAAC,CAAC,WAAW;gBACb,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC;YACxD,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,EAAE,CAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IACD,KAAK,CAAC,IAAI,CACR,yEAAyE,CAC1E,CAAC;IACF,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;AACvD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CACjC,UAAkB,EAClB,OAAgB;IAEhB,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,UAAU,CAAC;IAC7C,MAAM,GAAG,GAAG,KAAK,CAAC;IAClB,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IAC1C,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC;IACzB,CAAC;IACD,IAAI,IAAI,CAAC,MAAM,GAAG,GAAG;QAAE,IAAI,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,gBAAgB,CAAC;IACpE,OAAO,GAAG,UAAU,qCAAqC,IAAI,UAAU,CAAC;AAC1E,CAAC"}

package/dist/server.d.ts

@@ -20,6 +20,8 @@ export interface SessionSummary {
     connectedAt: string;
     openedFileCount: number;
     pendingApprovals: number;
+    firstTool?: string;
+    remoteAddr?: string;
 }
 export declare class Server extends EventEmitter<ServerEvents> {
     private authToken;
@@ -72,7 +74,7 @@ export declare class Server extends EventEmitter<ServerEvents> {
         after?: number;
     }) => Record<string, unknown>[]) | null;
     /** Patchwork: set by bridge to launch a named recipe via the orchestrator. */
-    runRecipeFn: ((name: string) => Promise<{
+    runRecipeFn: ((name: string, vars?: Record<string, string>) => Promise<{
         ok: boolean;
         taskId?: string;
         error?: string;

package/dist/server.js

@@ -1,5 +1,7 @@
 import { EventEmitter } from "node:events";
 import http from "node:http";
+import os from "node:os";
+import path from "node:path";
 import { WebSocket, WebSocketServer as WsServer } from "ws";
 import { routeApprovalRequest } from "./approvalHttp.js";
 import { getApprovalQueue } from "./approvalQueue.js";
@@ -353,6 +355,80 @@ export class Server extends EventEmitter {
                 res.end(JSON.stringify({ ok: true, v: PACKAGE_VERSION }));
                 return;
             }
+            // ── Connector OAuth callbacks (unauthenticated — browser redirect from vendor) ──
+            if (parsedUrl.pathname === "/connections/github/callback" &&
+                req.method === "GET") {
+                void (async () => {
+                    const { handleGithubCallback } = await import("./connectors/github.js");
+                    const code = parsedUrl.searchParams.get("code");
+                    const state = parsedUrl.searchParams.get("state");
+                    const error = parsedUrl.searchParams.get("error");
+                    const result = await handleGithubCallback(code, state, error);
+                    res.writeHead(result.status, {
+                        "Content-Type": result.contentType ?? "application/json",
+                    });
+                    res.end(result.body);
+                })();
+                return;
+            }
+            if (parsedUrl.pathname === "/connections/linear/callback" &&
+                req.method === "GET") {
+                void (async () => {
+                    const { handleLinearCallback } = await import("./connectors/linear.js");
+                    const code = parsedUrl.searchParams.get("code");
+                    const state = parsedUrl.searchParams.get("state");
+                    const error = parsedUrl.searchParams.get("error");
+                    const result = await handleLinearCallback(code, state, error);
+                    res.writeHead(result.status, {
+                        "Content-Type": result.contentType ?? "application/json",
+                    });
+                    res.end(result.body);
+                })();
+                return;
+            }
+            if (parsedUrl.pathname === "/connections/sentry/callback" &&
+                req.method === "GET") {
+                void (async () => {
+                    const { handleSentryCallback } = await import("./connectors/sentry.js");
+                    const code = parsedUrl.searchParams.get("code");
+                    const state = parsedUrl.searchParams.get("state");
+                    const error = parsedUrl.searchParams.get("error");
+                    const result = await handleSentryCallback(code, state, error);
+                    res.writeHead(result.status, {
+                        "Content-Type": result.contentType ?? "application/json",
+                    });
+                    res.end(result.body);
+                })();
+                return;
+            }
+            if (parsedUrl.pathname === "/connections/google-calendar/callback" &&
+                req.method === "GET") {
+                void (async () => {
+                    const { handleCalendarCallback } = await import("./connectors/googleCalendar.js");
+                    const code = parsedUrl.searchParams.get("code");
+                    const state = parsedUrl.searchParams.get("state");
+                    const error = parsedUrl.searchParams.get("error");
+                    const result = await handleCalendarCallback(code, state, error);
+                    res.writeHead(result.status, {
+                        "Content-Type": result.contentType ?? "application/json",
+                    });
+                    res.end(result.body);
+                })();
+                return;
+            }
+            if (parsedUrl.pathname === "/connections/slack/callback" &&
+                req.method === "GET") {
+                void (async () => {
+                    const { handleSlackCallback } = await import("./connectors/slack.js");
+                    const code = parsedUrl.searchParams.get("code");
+                    const state = parsedUrl.searchParams.get("state");
+                    const error = parsedUrl.searchParams.get("error");
+                    const result = await handleSlackCallback(code, state, error);
+                    res.writeHead(result.status, { "Content-Type": result.contentType ?? "application/json" });
+                    res.end(result.body);
+                })();
+                return;
+            }
             // ── Bearer token authentication ───────────────────────────────────────
             // All other HTTP endpoints require a valid Bearer token.
             // Accepts either:
@@ -643,6 +719,411 @@ export class Server extends EventEmitter {
                 });
                 return;
             }
+            // ── Gmail / Connections endpoints ───────────────────────────────────────
+            if (parsedUrl.pathname === "/connections" && req.method === "GET") {
+                void (async () => {
+                    const { handleConnectionsList } = await import("./connectors/gmail.js");
+                    const result = await handleConnectionsList();
+                    res.writeHead(result.status, {
+                        "Content-Type": result.contentType ?? "application/json",
+                    });
+                    res.end(result.body);
+                })();
+                return;
+            }
+            if (parsedUrl.pathname === "/connections/gmail/auth" &&
+                req.method === "GET") {
+                void (async () => {
+                    const { handleGmailAuthRedirect } = await import("./connectors/gmail.js");
+                    const result = handleGmailAuthRedirect();
+                    if (result.redirect) {
+                        res.writeHead(302, { Location: result.redirect });
+                        res.end();
+                    }
+                    else {
+                        res.writeHead(result.status, {
+                            "Content-Type": result.contentType ?? "application/json",
+                        });
+                        res.end(result.body);
+                    }
+                })();
+                return;
+            }
+            if (parsedUrl.pathname === "/connections/gmail/callback" &&
+                req.method === "GET") {
+                void (async () => {
+                    const { handleGmailCallback } = await import("./connectors/gmail.js");
+                    const code = parsedUrl.searchParams.get("code");
+                    const state = parsedUrl.searchParams.get("state");
+                    const error = parsedUrl.searchParams.get("error");
+                    const result = await handleGmailCallback(code, state, error);
+                    res.writeHead(result.status, {
+                        "Content-Type": result.contentType ?? "text/html",
+                    });
+                    res.end(result.body);
+                })();
+                return;
+            }
+            if (parsedUrl.pathname === "/connections/gmail" &&
+                req.method === "DELETE") {
+                void (async () => {
+                    const { handleGmailDisconnect } = await import("./connectors/gmail.js");
+                    const result = await handleGmailDisconnect();
+                    res.writeHead(result.status, {
+                        "Content-Type": result.contentType ?? "application/json",
+                    });
+                    res.end(result.body);
+                })();
+                return;
+            }
+            if (parsedUrl.pathname === "/connections/gmail/test" &&
+                req.method === "POST") {
+                void (async () => {
+                    const { handleGmailTest } = await import("./connectors/gmail.js");
+                    const result = await handleGmailTest();
+                    res.writeHead(result.status, {
+                        "Content-Type": result.contentType ?? "application/json",
+                    });
+                    res.end(result.body);
+                })();
+                return;
+            }
+            // ── GitHub MCP connector routes ─────────────────────────────────────
+            if (parsedUrl.pathname === "/connections/github/auth" &&
+                req.method === "GET") {
+                void (async () => {
+                    const { handleGithubAuthorize } = await import("./connectors/github.js");
+                    const result = await handleGithubAuthorize();
+                    if (result.redirect) {
+                        res.writeHead(302, { Location: result.redirect });
+                        res.end();
+                    }
+                    else {
+                        res.writeHead(result.status, {
+                            "Content-Type": result.contentType ?? "application/json",
+                        });
+                        res.end(result.body);
+                    }
+                })();
+                return;
+            }
+            if (parsedUrl.pathname === "/connections/github/test" &&
+                req.method === "POST") {
+                void (async () => {
+                    const { handleGithubTest } = await import("./connectors/github.js");
+                    const result = await handleGithubTest();
+                    res.writeHead(result.status, {
+                        "Content-Type": result.contentType ?? "application/json",
+                    });
+                    res.end(result.body);
+                })();
+                return;
+            }
+            if (parsedUrl.pathname === "/connections/github" &&
+                req.method === "DELETE") {
+                void (async () => {
+                    const { handleGithubDisconnect } = await import("./connectors/github.js");
+                    const result = await handleGithubDisconnect();
+                    res.writeHead(result.status, {
+                        "Content-Type": result.contentType ?? "application/json",
+                    });
+                    res.end(result.body);
+                })();
+                return;
+            }
+            // ── Sentry MCP connector routes ─────────────────────────────────────
+            if (parsedUrl.pathname === "/connections/sentry/auth" &&
+                req.method === "GET") {
+                void (async () => {
+                    const { handleSentryAuthorize } = await import("./connectors/sentry.js");
+                    const result = await handleSentryAuthorize();
+                    if (result.redirect) {
+                        res.writeHead(302, { Location: result.redirect });
+                        res.end();
+                    }
+                    else {
+                        res.writeHead(result.status, {
+                            "Content-Type": result.contentType ?? "application/json",
+                        });
+                        res.end(result.body);
+                    }
+                })();
+                return;
+            }
+            if (parsedUrl.pathname === "/connections/sentry/callback" &&
+                req.method === "GET") {
+                void (async () => {
+                    const { handleSentryCallback } = await import("./connectors/sentry.js");
+                    const code = parsedUrl.searchParams.get("code");
+                    const state = parsedUrl.searchParams.get("state");
+                    const error = parsedUrl.searchParams.get("error");
+                    const result = await handleSentryCallback(code, state, error);
+                    res.writeHead(result.status, {
+                        "Content-Type": result.contentType ?? "application/json",
+                    });
+                    res.end(result.body);
+                })();
+                return;
+            }
+            if (parsedUrl.pathname === "/connections/sentry/test" &&
+                req.method === "POST") {
+                void (async () => {
+                    const { handleSentryTest } = await import("./connectors/sentry.js");
+                    const result = await handleSentryTest();
+                    res.writeHead(result.status, {
+                        "Content-Type": result.contentType ?? "application/json",
+                    });
+                    res.end(result.body);
+                })();
+                return;
+            }
+            if (parsedUrl.pathname === "/connections/sentry" &&
+                req.method === "DELETE") {
+                void (async () => {
+                    const { handleSentryDisconnect } = await import("./connectors/sentry.js");
+                    const result = await handleSentryDisconnect();
+                    res.writeHead(result.status, {
+                        "Content-Type": result.contentType ?? "application/json",
+                    });
+                    res.end(result.body);
+                })();
+                return;
+            }
+            // ── Linear MCP connector routes ─────────────────────────────────────
+            if (parsedUrl.pathname === "/connections/linear/auth" &&
+                req.method === "GET") {
+                void (async () => {
+                    const { handleLinearAuthorize } = await import("./connectors/linear.js");
+                    const result = await handleLinearAuthorize();
+                    if (result.redirect) {
+                        res.writeHead(302, { Location: result.redirect });
+                        res.end();
+                    }
+                    else {
+                        res.writeHead(result.status, {
+                            "Content-Type": result.contentType ?? "application/json",
+                        });
+                        res.end(result.body);
+                    }
+                })();
+                return;
+            }
+            if (parsedUrl.pathname === "/connections/linear/callback" &&
+                req.method === "GET") {
+                void (async () => {
+                    const { handleLinearCallback } = await import("./connectors/linear.js");
+                    const code = parsedUrl.searchParams.get("code");
+                    const state = parsedUrl.searchParams.get("state");
+                    const error = parsedUrl.searchParams.get("error");
+                    const result = await handleLinearCallback(code, state, error);
+                    res.writeHead(result.status, {
+                        "Content-Type": result.contentType ?? "application/json",
+                    });
+                    res.end(result.body);
+                })();
+                return;
+            }
+            if (parsedUrl.pathname === "/connections/linear/test" &&
+                req.method === "POST") {
+                void (async () => {
+                    const { handleLinearTest } = await import("./connectors/linear.js");
+                    const result = await handleLinearTest();
+                    res.writeHead(result.status, {
+                        "Content-Type": result.contentType ?? "application/json",
+                    });
+                    res.end(result.body);
+                })();
+                return;
+            }
+            if (parsedUrl.pathname === "/connections/linear" &&
+                req.method === "DELETE") {
+                void (async () => {
+                    const { handleLinearDisconnect } = await import("./connectors/linear.js");
+                    const result = await handleLinearDisconnect();
+                    res.writeHead(result.status, {
+                        "Content-Type": result.contentType ?? "application/json",
+                    });
+                    res.end(result.body);
+                })();
+                return;
+            }
+            // ── Slack connector routes ──────────────────────────────────────
+            if ((parsedUrl.pathname === "/connections/slack/auth" || parsedUrl.pathname === "/connections/slack/authorize") &&
+                req.method === "GET") {
+                const { handleSlackAuthorize } = await import("./connectors/slack.js");
+                const result = handleSlackAuthorize();
+                if (result.redirect) {
+                    res.writeHead(302, { Location: result.redirect });
+                    res.end();
+                }
+                else {
+                    res.writeHead(result.status, { "Content-Type": result.contentType ?? "application/json" });
+                    res.end(result.body);
+                }
+                return;
+            }
+            if (parsedUrl.pathname === "/connections/slack/test" &&
+                req.method === "POST") {
+                void (async () => {
+                    const { handleSlackTest } = await import("./connectors/slack.js");
+                    const result = await handleSlackTest();
+                    res.writeHead(result.status, { "Content-Type": result.contentType ?? "application/json" });
+                    res.end(result.body);
+                })();
+                return;
+            }
+            if (parsedUrl.pathname === "/connections/slack" &&
+                req.method === "DELETE") {
+                const { handleSlackDisconnect } = await import("./connectors/slack.js");
+                const result = handleSlackDisconnect();
+                res.writeHead(result.status, { "Content-Type": result.contentType ?? "application/json" });
+                res.end(result.body);
+                return;
+            }
+            // ── Google Calendar routes ──────────────────────────────────────
+            if (parsedUrl.pathname === "/connections/google-calendar/auth" &&
+                req.method === "GET") {
+                void (async () => {
+                    const { handleCalendarAuthRedirect } = await import("./connectors/googleCalendar.js");
+                    const result = handleCalendarAuthRedirect();
+                    if (result.redirect) {
+                        res.writeHead(302, { Location: result.redirect });
+                        res.end();
+                    }
+                    else {
+                        res.writeHead(result.status, {
+                            "Content-Type": result.contentType ?? "application/json",
+                        });
+                        res.end(result.body);
+                    }
+                })();
+                return;
+            }
+            if (parsedUrl.pathname === "/connections/google-calendar/callback" &&
+                req.method === "GET") {
+                void (async () => {
+                    const { handleCalendarCallback } = await import("./connectors/googleCalendar.js");
+                    const code = parsedUrl.searchParams.get("code");
+                    const state = parsedUrl.searchParams.get("state");
+                    const error = parsedUrl.searchParams.get("error");
+                    const result = await handleCalendarCallback(code, state, error);
+                    res.writeHead(result.status, {
+                        "Content-Type": result.contentType ?? "application/json",
+                    });
+                    res.end(result.body);
+                })();
+                return;
+            }
+            if (parsedUrl.pathname === "/connections/google-calendar/test" &&
+                req.method === "POST") {
+                void (async () => {
+                    const { handleCalendarTest } = await import("./connectors/googleCalendar.js");
+                    const result = await handleCalendarTest();
+                    res.writeHead(result.status, {
+                        "Content-Type": result.contentType ?? "application/json",
+                    });
+                    res.end(result.body);
+                })();
+                return;
+            }
+            if (parsedUrl.pathname === "/connections/google-calendar" &&
+                req.method === "DELETE") {
+                void (async () => {
+                    const { handleCalendarDisconnect } = await import("./connectors/googleCalendar.js");
+                    const result = await handleCalendarDisconnect();
+                    res.writeHead(result.status, {
+                        "Content-Type": result.contentType ?? "application/json",
+                    });
+                    res.end(result.body);
+                })();
+                return;
+            }
+            // ── Inbox routes ────────────────────────────────────────────────────
+            if (parsedUrl.pathname === "/inbox" && req.method === "GET") {
+                void (async () => {
+                    try {
+                        const { readdir, readFile, stat } = await import("node:fs/promises");
+                        const { existsSync } = await import("node:fs");
+                        const inboxDir = path.join(os.homedir(), ".patchwork", "inbox");
+                        if (!existsSync(inboxDir)) {
+                            res.writeHead(200, { "Content-Type": "application/json" });
+                            res.end(JSON.stringify({ items: [] }));
+                            return;
+                        }
+                        const files = (await readdir(inboxDir)).filter((f) => f.endsWith(".md"));
+                        const items = await Promise.all(files.map(async (name) => {
+                            const filePath = path.join(inboxDir, name);
+                            const [content, stats] = await Promise.all([
+                                readFile(filePath, "utf8"),
+                                stat(filePath),
+                            ]);
+                            const stripped = content
+                                .split("\n")
+                                .filter((l) => !l.startsWith("#"))
+                                .join("\n")
+                                .trim();
+                            return {
+                                name,
+                                path: filePath,
+                                modifiedAt: stats.mtime.toISOString(),
+                                preview: stripped.slice(0, 200),
+                            };
+                        }));
+                        items.sort((a, b) => new Date(b.modifiedAt).getTime() -
+                            new Date(a.modifiedAt).getTime());
+                        res.writeHead(200, { "Content-Type": "application/json" });
+                        res.end(JSON.stringify({ items }));
+                    }
+                    catch (err) {
+                        res.writeHead(500, { "Content-Type": "application/json" });
+                        res.end(JSON.stringify({
+                            error: err instanceof Error ? err.message : String(err),
+                        }));
+                    }
+                })();
+                return;
+            }
+            const inboxFileMatch = parsedUrl.pathname?.match(/^\/inbox\/([^/]+\.md)$/);
+            if (inboxFileMatch && req.method === "GET") {
+                void (async () => {
+                    try {
+                        const { readFile, stat } = await import("node:fs/promises");
+                        const filename = decodeURIComponent(inboxFileMatch[1] ?? "");
+                        // Prevent path traversal — filename must not contain directory separators
+                        if (filename.includes("/") || filename.includes("\\")) {
+                            res.writeHead(400, { "Content-Type": "application/json" });
+                            res.end(JSON.stringify({ error: "Invalid filename" }));
+                            return;
+                        }
+                        const filePath = path.join(os.homedir(), ".patchwork", "inbox", filename);
+                        const [content, stats] = await Promise.all([
+                            readFile(filePath, "utf8"),
+                            stat(filePath),
+                        ]);
+                        res.writeHead(200, { "Content-Type": "application/json" });
+                        res.end(JSON.stringify({
+                            name: filename,
+                            content,
+                            modifiedAt: stats.mtime.toISOString(),
+                        }));
+                    }
+                    catch (err) {
+                        const code = err.code;
+                        if (code === "ENOENT") {
+                            res.writeHead(404, { "Content-Type": "application/json" });
+                            res.end(JSON.stringify({ error: "Not found" }));
+                        }
+                        else {
+                            res.writeHead(500, { "Content-Type": "application/json" });
+                            res.end(JSON.stringify({
+                                error: err instanceof Error ? err.message : String(err),
+                            }));
+                        }
+                    }
+                })();
+                return;
+            }
+            // ── End inbox routes ─────────────────────────────────────────────────
             if (parsedUrl.pathname === "/recipes/run" && req.method === "POST") {
                 const chunks = [];
                 req.on("data", (c) => chunks.push(c));
@@ -652,6 +1133,11 @@ export class Server extends EventEmitter {
                             const body = Buffer.concat(chunks).toString("utf-8");
                             const parsed = JSON.parse(body || "{}");
                             const name = parsed.name;
+                            const vars = parsed.vars &&
+                                typeof parsed.vars === "object" &&
+                                !Array.isArray(parsed.vars)
+                                ? parsed.vars
+                                : undefined;
                             if (typeof name !== "string" || !name) {
                                 res.writeHead(400, { "Content-Type": "application/json" });
                                 res.end(JSON.stringify({ ok: false, error: "name required" }));
@@ -665,7 +1151,7 @@ export class Server extends EventEmitter {
                                 }));
                                 return;
                             }
-                            const result = await this.runRecipeFn(name);
+                            const result = await this.runRecipeFn(name, vars);
                             res.writeHead(result.ok ? 200 : 400, {
                                 "Content-Type": "application/json",
                             });
@@ -759,7 +1245,7 @@ export class Server extends EventEmitter {
                 const id = sessionDetailMatch[1];
                 try {
                     const data = this.sessionDetailFn?.(id);
-                    if (!data || !data.summary) {
+                    if (!data?.summary) {
                         res.writeHead(404, { "Content-Type": "application/json" });
                         res.end(JSON.stringify({ error: "unknown sessionId" }));
                         return;
@@ -1126,6 +1612,8 @@ export class Server extends EventEmitter {
             ws.on("error", (err) => {
                 this.logger.error(`WebSocket client error: ${err.message}`);
             });
+            ws.remoteAddr =
+                req.socket.remoteAddress;
             this.emit("connection", ws);
         });
     }