+
Terminal Actions
${terminalBusy?'RUNNING':'READY'}
+
+
+
+
+
+
${terminalOutput.replace(/[&<>]/g,c=>({'&':'&','<':'<','>':'>'}[c])).replace(/\n/g,'
')}
+
${t('panels.crossSourceSignals','Cross-Source Signals')}
${t('badges.worldview','WORLDVIEW')}
${signals}
@@ -1839,10 +1897,10 @@ document.addEventListener('DOMContentLoaded', () => {
const hasInlineData = !!(D && D.meta);
const canProbeApi = location.protocol !== 'file:';
- if (canProbeApi && !hasInlineData) {
+ if (canProbeApi) {
// Server mode: always fetch live data from API (ignore any stale inline D)
fetch('/api/data')
- .then(r => r.json())
+ .then(r => { if(!r.ok) throw new Error(`HTTP ${r.status}`); return r.json(); })
.then(data => { D = data; init(); connectSSE(); })
.catch(() => {
// Should not reach here — server routes to loading.html when no data
diff --git a/server.mjs b/server.mjs
index 8f46df8..95949f0 100644
--- a/server.mjs
+++ b/server.mjs
@@ -289,14 +289,28 @@ app.get('/api/metrics', (req, res) => {
});
app.post('/api/sweep', express.json(), (req, res) => {
- const remote = req.ip || '';
- const local = remote.includes('127.0.0.1') || remote === '::1' || remote === '::ffff:127.0.0.1';
- const token = req.get('x-crucix-token') || req.query.token || req.body?.token;
- if (config.sweepToken && token !== config.sweepToken) return res.status(401).json({ error: 'Invalid sweep token' });
- if (!config.sweepToken && !local) return res.status(403).json({ error: 'Manual sweep is local-only unless SWEEP_TOKEN is set' });
- if (sweepInProgress) return res.status(409).json({ status: 'already_running', sweepStartedAt });
- runSweepCycle().catch(err => console.error('[Crucix] API-triggered sweep failed:', err.message));
- res.status(202).json({ status: 'accepted' });
+ if (!canRunTerminalAction(req)) return res.status(403).json({ error: 'Terminal actions disabled or unauthorized' });
+ triggerSweep(res);
+});
+
+app.post('/api/action', express.json(), async (req, res) => {
+ if (!canRunTerminalAction(req)) return res.status(403).json({ error: 'Terminal actions disabled or unauthorized' });
+ const action = String(req.body?.action || req.query.action || '').toLowerCase();
+
+ if (action === 'status') {
+ return res.json({ ok: true, action, health: buildHealth() });
+ }
+
+ if (action === 'brief') {
+ if (!currentData) return res.status(503).json({ ok: false, action, error: 'No data yet — first sweep in progress' });
+ return res.json({ ok: true, action, text: buildBrief(currentData) });
+ }
+
+ if (action === 'sweep') {
+ return triggerSweep(res);
+ }
+
+ res.status(400).json({ ok: false, error: 'Unknown action', actions: ['status', 'brief', 'sweep'] });
});
// API: available locales
@@ -333,6 +347,20 @@ function dataAgeMs() {
return Number.isFinite(ms) ? ms : null;
}
+function canRunTerminalAction(req) {
+ const remote = req.ip || '';
+ const local = remote.includes('127.0.0.1') || remote === '::1' || remote === '::ffff:127.0.0.1';
+ const token = req.get('x-crucix-token') || req.query.token || req.body?.token;
+ if (config.sweepToken) return token === config.sweepToken;
+ return Boolean(config.terminalActionsEnabled || local);
+}
+
+function triggerSweep(res) {
+ if (sweepInProgress) return res.status(409).json({ ok: true, status: 'already_running', sweepStartedAt });
+ runSweepCycle().catch(err => console.error('[Crucix] API-triggered sweep failed:', err.message));
+ return res.status(202).json({ ok: true, status: 'accepted' });
+}
+
function getLLMStatus() {
if (!config.llm.provider) return { state: 'disabled' };
if (!llmProvider) return { state: 'misconfigured', provider: config.llm.provider };
@@ -376,6 +404,7 @@ function buildHealth() {
llm: getLLMStatus(),
telegramEnabled: !!(config.telegram.botToken && config.telegram.chatId),
discordEnabled: !!(config.discord?.botToken || config.discord?.webhookUrl),
+ terminalActionsEnabled: Boolean(config.terminalActionsEnabled || config.sweepToken),
refreshIntervalMinutes: config.refreshIntervalMinutes,
language: currentLanguage,
memory: intelligenceStore.status(),