Single server runtime: daemon architecture, legacy removal, thin extensions, install lifecycle, Zustand config

.github/workflows/release.yml

@@ -34,7 +34,7 @@ jobs:
       - name: Install dependencies
         run: bun install
 
-      - name: Generate Pi extension shared copies
+      - name: Generate Pi extension shared helpers
         run: bash apps/pi-extension/vendor.sh
 
       - name: Type check
@@ -68,7 +68,6 @@ jobs:
 
       - name: Build UI
         run: |
-          bun run build:review
           bun run build:hook
 
       - name: Compile binaries (cross-compile all targets)
@@ -168,24 +167,41 @@ jobs:
             PLANNOTATOR_PORT="$port" "$@" &
             local pid=$!
             local ok=0
+            # Daemon control routes (/daemon/*) require the daemon auth token,
+            # which is written to the daemon state file. Read it and send it as
+            # a bearer token on the smoke's requests, or every call 401s.
+            local state_file="${PLANNOTATOR_DATA_DIR:-$HOME/.plannotator}/daemon.json"
 
             for _ in $(seq 1 60); do
-              if curl -sf "http://127.0.0.1:${port}${endpoint}" -o /dev/null 2>/dev/null; then
-                ok=1
-                break
+              local token=""
+              if [ -f "$state_file" ]; then
+                token="$(python3 -c "import json,sys; print(json.load(open(sys.argv[1])).get('authToken',''))" "$state_file" 2>/dev/null || true)"
+              fi
+              if [ -n "$token" ]; then
+                local sessions
+                sessions="$(curl -sf -H "Authorization: Bearer ${token}" "http://127.0.0.1:${port}/daemon/sessions" 2>/dev/null || true)"
+                if [ -n "$sessions" ]; then
+                  local session_url
+                  session_url="$(python3 -c 'import json,sys; data=json.load(sys.stdin); sessions=data.get("sessions") or []; print(sessions[0].get("url","") if sessions else "")' <<< "$sessions")"
+                  if [ -n "$session_url" ] && curl -sf -H "Authorization: Bearer ${token}" "${session_url}${endpoint}" -o /dev/null 2>/dev/null; then
+                    ok=1
+                    break
+                  fi
+                fi
               fi
               sleep 0.5
             done
 
             kill "$pid" 2>/dev/null || true
             wait "$pid" 2>/dev/null || true
+            PLANNOTATOR_PORT="$port" "$BINARY" daemon stop >/dev/null 2>&1 || true
 
             if [ "$ok" = "0" ]; then
-              echo "FAIL: ${label} did not respond on :${port}${endpoint}"
+              echo "FAIL: ${label} did not expose a daemon-scoped ${endpoint}"
               exit 1
             fi
 
-            echo "OK: ${label} responded on :${port}${endpoint}"
+            echo "OK: ${label} exposed daemon-scoped ${endpoint}"
           }
 
           # 2. review: exercises server startup, bundled HTML, git diff, and HTTP.
@@ -229,36 +245,67 @@ jobs:
               -RedirectStandardError $stderr
             $ok = $false
 
+            # Daemon control routes (/daemon/*) require the daemon auth token
+            # from the state file; send it as a bearer token or requests 401.
+            $dataDir = if ($env:PLANNOTATOR_DATA_DIR) { $env:PLANNOTATOR_DATA_DIR } else { Join-Path $env:USERPROFILE ".plannotator" }
+            $stateFile = Join-Path $dataDir "daemon.json"
+            $diagToken = $false
+            $diagSessions = "(none)"
+            $diagSessionUrl = "(none)"
+            $diagApi = "(not reached)"
             try {
               for ($i = 0; $i -lt 60; $i++) {
                 try {
-                  Invoke-WebRequest -Uri "http://127.0.0.1:$Port$Endpoint" -UseBasicParsing -TimeoutSec 1 | Out-Null
-                  $ok = $true
-                  break
+                  $token = ""
+                  if (Test-Path $stateFile) {
+                    $token = (Get-Content $stateFile -Raw | ConvertFrom-Json).authToken
+                  }
+                  if ($token) {
+                    $diagToken = $true
+                    $headers = @{ Authorization = "Bearer $token" }
+                    $sessionsResponse = Invoke-WebRequest -Uri "http://127.0.0.1:$Port/daemon/sessions" -Headers $headers -UseBasicParsing -TimeoutSec 2
+                    $diagSessions = "HTTP $($sessionsResponse.StatusCode)"
+                    $sessionsBody = $sessionsResponse.Content | ConvertFrom-Json
+                    if ($sessionsBody.sessions.Count -gt 0) {
+                      # The daemon binds IPv4 127.0.0.1, but the session url uses
+                      # "localhost", which Invoke-WebRequest resolves to IPv6 ::1
+                      # first on Windows and then fails to connect. Force IPv4.
+                      $sessionUrl = ($sessionsBody.sessions[0].url) -replace '://localhost:', '://127.0.0.1:'
+                      $diagSessionUrl = $sessionUrl
+                      $apiResponse = Invoke-WebRequest -Uri "$sessionUrl$Endpoint" -Headers $headers -UseBasicParsing -TimeoutSec 2
+                      $diagApi = "HTTP $($apiResponse.StatusCode)"
+                      $ok = $true
+                      break
+                    }
+                  }
                 } catch {
+                  $diagApi = "exception: $($_.Exception.Message)"
                   if ($process.HasExited) {
                     break
                   }
-                  Start-Sleep -Milliseconds 500
                 }
+                Start-Sleep -Milliseconds 500
               }
             } finally {
               if (-not $process.HasExited) {
                 Stop-Process -Id $process.Id -Force
                 Wait-Process -Id $process.Id -ErrorAction SilentlyContinue
               }
+              & $binary daemon stop *> $null
               Remove-Item Env:\PLANNOTATOR_PORT -ErrorAction SilentlyContinue
             }
 
             if (-not $ok) {
+              Write-Host "diag: stateFile=$stateFile exists=$(Test-Path $stateFile) tokenSeen=$diagToken"
+              Write-Host "diag: sessions=$diagSessions sessionUrl=$diagSessionUrl api=$diagApi"
               Write-Host "stdout:"
               Get-Content $stdout -ErrorAction SilentlyContinue
               Write-Host "stderr:"
               Get-Content $stderr -ErrorAction SilentlyContinue
-              throw "FAIL: $Label did not respond on :$Port$Endpoint"
+              throw "FAIL: $Label did not expose a daemon-scoped $Endpoint"
             }
 
-            Write-Host "OK: $Label responded on :$Port$Endpoint"
+            Write-Host "OK: $Label exposed daemon-scoped $Endpoint"
           }
 
           # 2. review: exercises server startup, bundled HTML, git diff, and HTTP.
@@ -267,37 +314,6 @@ jobs:
           # 3. annotate: exercises annotate server startup with a real file.
           Test-PlannotatorServer "plannotator annotate" "19501" "/api/plan" @("annotate", "README.md")
 
-  pi-extension-ai-runtime-windows:
-    needs: test
-    # Exercises the Pi extension's Node/jiti server mirror on Windows with an
-    # npm-style `pi` shim pair. The binary smoke above covers the compiled Bun
-    # CLI, but the published Pi extension uses this separate Node path.
-    name: Pi extension AI runtime (Windows)
-    runs-on: windows-latest
-    steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-
-      - uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2.2.0
-        with:
-          bun-version: 1.3.11
-
-      - uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
-        with:
-          node-version: 24
-
-      - name: Install dependencies
-        run: bun install
-
-      - name: Generate Pi extension shared copies
-        shell: bash
-        run: bash apps/pi-extension/vendor.sh
-
-      - name: Build Pi AI runtime smoke
-        run: bun build scripts/smoke-pi-extension-ai-runtime.ts --target=node --outfile "$env:RUNNER_TEMP/pi-ai-runtime-smoke.mjs"
-
-      - name: Run Pi AI runtime smoke
-        run: node "$env:RUNNER_TEMP/pi-ai-runtime-smoke.mjs"
-
   install-script-smoke:
     needs: build
     runs-on: ${{ matrix.os }}
@@ -454,7 +470,6 @@ jobs:
     needs:
       - build
       - smoke-binaries
-      - pi-extension-ai-runtime-windows
       - install-script-smoke
     if: startsWith(github.ref, 'refs/tags/')
     runs-on: ubuntu-latest
@@ -521,7 +536,6 @@ jobs:
     needs:
       - build
       - smoke-binaries
-      - pi-extension-ai-runtime-windows
       - install-script-smoke
     runs-on: ubuntu-latest
     permissions:
@@ -544,7 +558,6 @@ jobs:
 
       - name: Build packages
         run: |
-          bun run build:review
           bun run build:hook
           bun run build:opencode
           bun run build:pi

.github/workflows/test.yml

@@ -22,7 +22,7 @@ jobs:
       - name: Install dependencies
         run: bun install
 
-      - name: Generate Pi extension shared copies
+      - name: Generate Pi extension shared helpers
         run: bash apps/pi-extension/vendor.sh
 
       - name: Type check
@@ -31,37 +31,6 @@ jobs:
       - name: Run tests
         run: bun test
 
-  pi-extension-ai-runtime-windows:
-    # Exercises the Pi extension's Node/jiti server mirror on Windows with an
-    # npm-style `pi` shim pair. This catches regressions where `where pi`
-    # resolves the extensionless shim before pi.cmd and the Ask AI provider
-    # crashes before the plan review UI opens.
-    name: Pi extension AI runtime (Windows)
-    runs-on: windows-latest
-    steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-
-      - uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2.2.0
-        with:
-          bun-version: latest
-
-      - uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
-        with:
-          node-version: 24
-
-      - name: Install dependencies
-        run: bun install
-
-      - name: Generate Pi extension shared copies
-        shell: bash
-        run: bash apps/pi-extension/vendor.sh
-
-      - name: Build Pi AI runtime smoke
-        run: bun build scripts/smoke-pi-extension-ai-runtime.ts --target=node --outfile "$env:RUNNER_TEMP/pi-ai-runtime-smoke.mjs"
-
-      - name: Run Pi AI runtime smoke
-        run: node "$env:RUNNER_TEMP/pi-ai-runtime-smoke.mjs"
-
   install-cmd-windows:
     # End-to-end integration test for scripts/install.cmd on real cmd.exe.
     # The unit tests in scripts/install.test.ts are file-content string checks

.gitignore

@@ -53,6 +53,4 @@ plannotator-local
 # Local research/reference docs (not for repo)
 /reference/
 /Plannotator Waitlist Signup/
-# Local goal setup packages generated by the setup-goal skill.
-/goals/
 *.bun-build