src/cli/mod.rs at eca5af92279b · andymccall/spectra

# eca5af92279b spectra / src / cli / mod.rs

15.7 KiB · Rust · last changed spectra connect: trust a server through the owner's delegation, pin it, claim it (#21) 1 day ago source blame history raw

//! The `spectra` command line (spec §19). Output follows `oxy`: colour and
//! glyphs on a UTF-8 terminal, plain when piped, with `--plain` or with
//! `NO_COLOR`; `--json` prints one document on stdout and nothing else.

pub mod admin;
pub mod agent;
pub mod connect;
pub mod format;
pub mod human;
pub mod identity;
pub mod json;
pub mod marks;
pub mod mcp;
pub mod open;
pub mod project;
pub mod serve;
pub mod ui;

use anyhow::{bail, Result};
use clap::{Parser, Subcommand};
use std::path::PathBuf;

#[derive(Parser)]
#[command(name = "spectra", version = env!("SPECTRA_VERSION_LONG"), about = "A control plane for AI coding agents")]
pub struct Cli {
    /// Plain output: no colour or glyphs (also NO_COLOR, or when not a terminal)
    #[arg(long, global = true)]
    pub plain: bool,
    /// The data directory (default: $XDG_DATA_HOME/spectra, else ~/.local/share/spectra)
    #[arg(long, global = true, env = "SPECTRA_DATA")]
    pub data: Option<PathBuf>,
    #[command(subcommand)]
    pub command: Command,
}

#[derive(Subcommand)]
pub enum Command {
    /// The version and build of this binary
    Version {
        /// Machine-readable output
        #[arg(long)]
        json: bool,
    },
    /// Make this machine's Spectra: record the owner's identity (read from
    /// their OXY_HOME and proven by signing) and make the instance key
    Init {
        /// The owner's OXY_HOME (default: $OXY_HOME, else ~/.config/oxy)
        #[arg(long)]
        owner_home: Option<PathBuf>,
        /// This instance's name (default: the host name)
        #[arg(long)]
        name: Option<String>,
        /// Set up a server without the owner's secret key: name the owner's
        /// KeyId, and they claim it from their machine with `spectra
        /// connect` (spec §8.6)
        #[arg(long, value_name = "KEYID", conflicts_with = "owner_home")]
        owner: Option<String>,
    },
    /// Use a Spectra on another machine: trust it through your delegation to
    /// its instance key, pin its certificate, and claim it if it is new
    Connect {
        /// The server, https://HOST[:PORT]
        url: String,
        /// The owner's OXY_HOME (default: $OXY_HOME, else ~/.config/oxy)
        #[arg(long)]
        owner_home: Option<PathBuf>,
    },
    /// The owner's and the instance's identities: show, refresh
    Identity {
        #[command(subcommand)]
        command: IdentityCmd,
    },
    /// Run the daemon: the ledger, Tuner on the Unix socket and a loopback port
    Serve {
        /// The address and port for browsers and HTTP clients (default:
        /// `[server] bind`, else 127.0.0.1:7350); beyond loopback, other
        /// machines connect over TLS (spec §8.6)
        #[arg(long)]
        bind: Option<String>,
        /// TLS on the TCP port: auto (beyond loopback only), on, or off
        /// (default: `[server] tls`, else auto)
        #[arg(long)]
        tls: Option<String>,
        /// Allow a non-loopback address in plain HTTP
        #[arg(long)]
        insecure: bool,
        /// Open Radar in the browser once serving (signs a link as the owner)
        #[arg(long)]
        open: bool,
    },
    /// Sign in to Radar: a one-time link signed with the owner's key
    Open {
        #[arg(long)]
        owner_home: Option<PathBuf>,
        /// Print the link without opening a browser
        #[arg(long)]
        no_browser: bool,
    },
    /// The stdio MCP server for one agent: signs with its key and forwards to the daemon
    Mcp {
        /// The agent it speaks for
        #[arg(long)]
        agent: String,
        /// The agent's home (default: the one recorded when it was added)
        #[arg(long)]
        home: Option<PathBuf>,
    },
    /// Post a message as yourself
    Say {
        /// What to say (Markdown; @name mentions)
        body: String,
        /// The channel (default: #general)
        #[arg(short, long)]
        channel: Option<String>,
        /// Reply in the thread of this message
        #[arg(long)]
        reply_to: Option<String>,
        #[arg(long)]
        json: bool,
        #[arg(long)]
        owner_home: Option<PathBuf>,
    },
    /// Your unread mentions and direct messages; --follow waits for more
    Inbox {
        #[arg(long)]
        follow: bool,
        #[arg(long)]
        json: bool,
        #[arg(long)]
        owner_home: Option<PathBuf>,
    },
    /// Search what was said: words, "phrases", prefix*, AND/OR/NOT
    Search {
        query: String,
        #[arg(long)]
        channel: Option<String>,
        #[arg(long)]
        author: Option<String>,
        /// 7d, 3h, 30m
        #[arg(long)]
        since: Option<String>,
        #[arg(long, default_value_t = 20)]
        limit: u32,
        #[arg(long)]
        json: bool,
    },
    /// Any API call, signed as the owner: JSON out
    Api {
        method: String,
        path: String,
        /// The request body (JSON)
        #[arg(short = 'd', long = "body")]
        body: Option<String>,
        #[arg(long)]
        owner_home: Option<PathBuf>,
    },
    /// The checkouts agents work in: add, list
    Project {
        #[command(subcommand)]
        command: ProjectCmd,
    },
    /// Agents, each its owner's delegate: add, list, disable
    Agent {
        #[command(subcommand)]
        command: AgentCmd,
    },
    /// The ledger's own checks: verify, check, rebuild
    Admin {
        #[command(subcommand)]
        command: Admin,
    },
}

#[derive(Subcommand)]
pub enum IdentityCmd {
    /// The owner and the instance as the ledger knows them
    Show {
        #[arg(long)]
        json: bool,
    },
    /// Record the owner's current identity after `oxy identity delegate add|remove`
    Refresh {
        #[arg(long)]
        owner_home: Option<PathBuf>,
    },
}

#[derive(Subcommand)]
pub enum ProjectCmd {
    /// Register a checkout: its repository id, remote and pinned subrepos
    Add {
        path: PathBuf,
        /// Its name (default: the directory's)
        #[arg(long)]
        name: Option<String>,
        /// Its remote URL (default: the checkout's origin)
        #[arg(long)]
        remote: Option<String>,
        #[arg(long)]
        owner_home: Option<PathBuf>,
    },
    /// Every project with what it pins, what pins it, and its agents
    List {
        #[arg(long)]
        json: bool,
    },
}

#[derive(Subcommand)]
pub enum AgentCmd {
    /// Make an agent's key in its own home and record it once you delegate to it
    Add {
        /// Lower-case letters, digits and dashes
        name: String,
        /// claude-code, antigravity, kimi-code, codex or other
        #[arg(long)]
        kind: String,
        /// The project it works in
        #[arg(long)]
        project: String,
        /// The agent's own OXY_HOME, where its key is made and kept
        #[arg(long)]
        home: PathBuf,
        /// Bind the key to this Unix user: a request from another is refused
        #[arg(long)]
        uid: Option<u32>,
        /// Bind the key to the Unix user of its first signed connection
        #[arg(long, conflicts_with = "uid")]
        learn_uid: bool,
        /// How long to wait for your delegation, in seconds
        #[arg(long, default_value_t = 600)]
        wait: u64,
        /// The owner's OXY_HOME
        #[arg(long)]
        owner_home: Option<PathBuf>,
    },
    /// Every agent with its owner, key, delegation and state
    List {
        #[arg(long)]
        json: bool,
    },
    /// Refuse an agent's key from now on
    Disable {
        name: String,
        #[arg(long)]
        owner_home: Option<PathBuf>,
    },
}

#[derive(Subcommand)]
pub enum Admin {
    /// Recompute the hash chain and check every checkpoint and proof (exit 1 on any finding)
    Verify {
        /// Machine-readable output
        #[arg(long)]
        json: bool,
    },
    /// Whether the projections equal a rebuild from the ledger
    Check,
    /// Replay the ledger into every projection
    Rebuild,
}

/// What every command needs: where the data lives.
pub struct Ctx {
    pub data: PathBuf,
}

impl Ctx {
    /// The ledger's database, which must exist.
    pub fn db(&self) -> Result<PathBuf> {
        let db = self.data.join("spectra.db");
        if !db.exists() {
            bail!("no Spectra in {} (run `spectra init`, or pass --data)", self.data.display());
        }
        Ok(db)
    }

    /// The ledger, for writing: the instance key signs its checkpoints, and
    /// the lock keeps any other writer out.
    pub async fn writer(&self) -> Result<spectra_core::ledger::Ledger> {
        let db = self.db()?;
        let instance = spectra_core::keys::KeyPair::instance(&self.data, "spectra")?;
        spectra_core::ledger::Ledger::open(&db, Some(instance)).await
    }

    /// The daemon's Unix socket.
    pub fn socket(&self) -> PathBuf {
        self.data.join("spectra.sock")
    }

    /// The Spectra on another machine this one uses, if any (spec §8.6).
    pub fn remote(&self) -> Result<Option<connect::ClientCfg>> {
        connect::load()
    }

    /// Where the daemon is: the configured server, else the local socket.
    pub fn endpoint(&self) -> Result<spectra_mcp::client::Endpoint> {
        Ok(match self.remote()? {
            Some(c) => c.endpoint()?,
            None => spectra_mcp::client::Endpoint::Unix(self.socket()),
        })
    }

    /// Somewhere to append the owner's signed events: straight to the
    /// ledger, or through the daemon when it is serving (spec §8.5).
    pub async fn owner_writer(&self, owner_home: &std::path::Path) -> Result<Writer> {
        let db = self.db()?;
        if spectra_mcp::client::Client::alive(&self.socket()).await {
            let ledger = spectra_core::ledger::Ledger::open_read_only(&db).await?;
            let transport = identity::recorded_owner(&ledger, owner_home).await?;
            return Ok(Writer::Daemon { ledger, client: Box::new(spectra_mcp::client::Client::new(&self.socket(), Some(transport))) });
        }
        Ok(Writer::Direct(self.writer().await?))
    }

    /// `[owner] home` from spectra.toml.
    pub fn config_owner_home(&self) -> Option<PathBuf> {
        let text = std::fs::read_to_string(self.data.join("spectra.toml")).ok()?;
        let t: toml::Table = text.parse().ok()?;
        t.get("owner")?.get("home")?.as_str().map(PathBuf::from)
    }
}

/// Where the owner's events go.
pub enum Writer {
    Direct(spectra_core::ledger::Ledger),
    Daemon { ledger: spectra_core::ledger::Ledger, client: Box<spectra_mcp::client::Client> },
}

impl Writer {
    /// The ledger, for reading.
    pub fn ledger(&self) -> &spectra_core::ledger::Ledger {
        match self {
            Writer::Direct(l) | Writer::Daemon { ledger: l, .. } => l,
        }
    }

    /// Append events signed over their payload, then checkpoint.
    pub async fn append(&self, events: Vec<spectra_core::event::NewEvent>) -> Result<()> {
        match self {
            Writer::Direct(l) => {
                l.append(events).await?;
                l.checkpoint().await?;
            }
            Writer::Daemon { client, .. } => {
                let wire: Vec<_> = events.iter().map(spectra_core::daemon::WireEvent::from_new).collect();
                let r = client.send("POST", "/api/v1/ledger/events", &[], serde_json::to_vec(&wire)?).await?;
                if r.status != 200 {
                    let why = r
                        .json()
                        .ok()
                        .and_then(|v| v.get("title").and_then(|t| t.as_str()).map(String::from))
                        .unwrap_or_else(|| String::from_utf8_lossy(&r.body).into());
                    bail!("the daemon refused: {why}");
                }
            }
        }
        Ok(())
    }
}

fn init_logging() {
    let filter = tracing_subscriber::EnvFilter::try_from_env("SPECTRA_LOG").unwrap_or_else(|_| tracing_subscriber::EnvFilter::new("warn"));
    tracing_subscriber::fmt().with_env_filter(filter).with_writer(std::io::stderr).init();
}

fn default_data() -> PathBuf {
    if let Ok(x) = std::env::var("XDG_DATA_HOME") {
        return PathBuf::from(x).join("spectra");
    }
    let home = std::env::var("HOME").unwrap_or_else(|_| ".".into());
    PathBuf::from(home).join(".local").join("share").join("spectra")
}

fn runtime() -> Result<tokio::runtime::Runtime> {
    Ok(tokio::runtime::Builder::new_multi_thread().enable_all().build()?)
}

pub fn run() -> Result<i32> {
    let cli = Cli::parse();
    ui::init(cli.plain);
    let ctx = Ctx { data: cli.data.unwrap_or_else(default_data) };
    match cli.command {
        Command::Version { json } => version(json),
        Command::Connect { url, owner_home } => runtime()?.block_on(connect::connect(&ctx, &url, owner_home)),
        Command::Init { owner_home, name, owner: Some(key) } => {
            let _ = owner_home;
            runtime()?.block_on(identity::init_for(&ctx, &key, name))
        }
        Command::Init { owner_home, name, owner: None } => runtime()?.block_on(identity::init(&ctx, owner_home, name)),
        Command::Identity { command } => runtime()?.block_on(async {
            match command {
                IdentityCmd::Show { json } => identity::show(&ctx, json).await,
                IdentityCmd::Refresh { owner_home } => identity::refresh(&ctx, owner_home).await,
            }
        }),
        Command::Serve { bind, tls, insecure, open } => {
            init_logging();
            runtime()?.block_on(serve::serve(&ctx, bind, tls, insecure, open))
        }
        Command::Open { owner_home, no_browser } => runtime()?.block_on(open::open(&ctx, owner_home, !no_browser)),
        Command::Mcp { agent, home } => runtime()?.block_on(mcp::run(&ctx, &agent, home)),
        Command::Say { body, channel, reply_to, json, owner_home } => {
            runtime()?.block_on(human::say(&ctx, channel, reply_to, body, owner_home, json))
        }
        Command::Inbox { follow, json, owner_home } => runtime()?.block_on(human::inbox(&ctx, follow, owner_home, json)),
        Command::Search { query, channel, author, since, limit, json } => {
            runtime()?.block_on(human::search(&ctx, &query, channel, author, since, limit, json))
        }
        Command::Api { method, path, body, owner_home } => runtime()?.block_on(human::raw(&ctx, &method, &path, body, owner_home)),
        Command::Project { command } => runtime()?.block_on(async {
            match command {
                ProjectCmd::Add { path, name, remote, owner_home } => project::add(&ctx, &path, name, remote, owner_home).await,
                ProjectCmd::List { json } => project::list(&ctx, json).await,
            }
        }),
        Command::Agent { command } => runtime()?.block_on(async {
            match command {
                AgentCmd::Add { name, kind, project, home, uid, learn_uid, wait, owner_home } => {
                    agent::add(&ctx, agent::Add { name, kind, project, home, uid, learn_uid, wait_secs: wait, owner_home }).await
                }
                AgentCmd::List { json } => agent::list(&ctx, json).await,
                AgentCmd::Disable { name, owner_home } => agent::disable(&ctx, &name, owner_home).await,
            }
        }),
        Command::Admin { command } => runtime()?.block_on(async {
            match command {
                Admin::Verify { json } => admin::verify(&ctx, json).await,
                Admin::Check => admin::check(&ctx).await,
                Admin::Rebuild => admin::rebuild(&ctx).await,
            }
        }),
    }
}

fn version(as_json: bool) -> Result<i32> {
    if as_json {
        println!(
            "{}",
            serde_json::json!({
                "version": env!("CARGO_PKG_VERSION"),
                "build": env!("SPECTRA_BUILD_ID"),
                "mcp_protocol_versions": spectra_mcp::PROTOCOL_VERSIONS,
                "ledger_format": spectra_core::LEDGER_FORMAT,
            })
        );
    } else {
        println!("spectra {}", env!("SPECTRA_VERSION_LONG"));
    }
    Ok(0)
}

`/`	Search
`g` `c`	Code
`g` `h`	History
`g` `b`	Bookmarks
`g` `t`	Trust
`y`	Permalink to this state (files and trees)
`?`	This sheet

1	//! The `spectra` command line (spec §19). Output follows `oxy`: colour and
2	//! glyphs on a UTF-8 terminal, plain when piped, with `--plain` or with
3	//! `NO_COLOR`; `--json` prints one document on stdout and nothing else.
4
5	pub mod admin;
6	pub mod agent;
7	pub mod connect;
8	pub mod format;
9	pub mod human;
10	pub mod identity;
11	pub mod json;
12	pub mod marks;
13	pub mod mcp;
14	pub mod open;
15	pub mod project;
16	pub mod serve;
17	pub mod ui;
18
19	use anyhow::{bail, Result};
20	use clap::{Parser, Subcommand};
21	use std::path::PathBuf;
22
23	#[derive(Parser)]
24	#[command(name = "spectra", version = env!("SPECTRA_VERSION_LONG"), about = "A control plane for AI coding agents")]
25	pub struct Cli {
26	/// Plain output: no colour or glyphs (also NO_COLOR, or when not a terminal)
27	#[arg(long, global = true)]
28	pub plain: bool,
29	/// The data directory (default: $XDG_DATA_HOME/spectra, else ~/.local/share/spectra)
30	#[arg(long, global = true, env = "SPECTRA_DATA")]
31	pub data: Option<PathBuf>,
32	#[command(subcommand)]
33	pub command: Command,
34	}
35
36	#[derive(Subcommand)]
37	pub enum Command {
38	/// The version and build of this binary
39	Version {
40	/// Machine-readable output
41	#[arg(long)]
42	json: bool,
43	},
44	/// Make this machine's Spectra: record the owner's identity (read from
45	/// their OXY_HOME and proven by signing) and make the instance key
46	Init {
47	/// The owner's OXY_HOME (default: $OXY_HOME, else ~/.config/oxy)
48	#[arg(long)]
49	owner_home: Option<PathBuf>,
50	/// This instance's name (default: the host name)
51	#[arg(long)]
52	name: Option<String>,
53	/// Set up a server without the owner's secret key: name the owner's
54	/// KeyId, and they claim it from their machine with `spectra
55	/// connect` (spec §8.6)
56	#[arg(long, value_name = "KEYID", conflicts_with = "owner_home")]
57	owner: Option<String>,
58	},
59	/// Use a Spectra on another machine: trust it through your delegation to
60	/// its instance key, pin its certificate, and claim it if it is new
61	Connect {
62	/// The server, https://HOST[:PORT]
63	url: String,
64	/// The owner's OXY_HOME (default: $OXY_HOME, else ~/.config/oxy)
65	#[arg(long)]
66	owner_home: Option<PathBuf>,
67	},
68	/// The owner's and the instance's identities: show, refresh
69	Identity {
70	#[command(subcommand)]
71	command: IdentityCmd,
72	},
73	/// Run the daemon: the ledger, Tuner on the Unix socket and a loopback port
74	Serve {
75	/// The address and port for browsers and HTTP clients (default:
76	/// `[server] bind`, else 127.0.0.1:7350); beyond loopback, other
77	/// machines connect over TLS (spec §8.6)
78	#[arg(long)]
79	bind: Option<String>,
80	/// TLS on the TCP port: auto (beyond loopback only), on, or off
81	/// (default: `[server] tls`, else auto)
82	#[arg(long)]
83	tls: Option<String>,
84	/// Allow a non-loopback address in plain HTTP
85	#[arg(long)]
86	insecure: bool,
87	/// Open Radar in the browser once serving (signs a link as the owner)
88	#[arg(long)]
89	open: bool,
90	},
91	/// Sign in to Radar: a one-time link signed with the owner's key
92	Open {
93	#[arg(long)]
94	owner_home: Option<PathBuf>,
95	/// Print the link without opening a browser
96	#[arg(long)]
97	no_browser: bool,
98	},
99	/// The stdio MCP server for one agent: signs with its key and forwards to the daemon
100	Mcp {
101	/// The agent it speaks for
102	#[arg(long)]
103	agent: String,
104	/// The agent's home (default: the one recorded when it was added)
105	#[arg(long)]
106	home: Option<PathBuf>,
107	},
108	/// Post a message as yourself
109	Say {
110	/// What to say (Markdown; @name mentions)
111	body: String,
112	/// The channel (default: #general)
113	#[arg(short, long)]
114	channel: Option<String>,
115	/// Reply in the thread of this message
116	#[arg(long)]
117	reply_to: Option<String>,
118	#[arg(long)]
119	json: bool,
120	#[arg(long)]
121	owner_home: Option<PathBuf>,
122	},
123	/// Your unread mentions and direct messages; --follow waits for more
124	Inbox {
125	#[arg(long)]
126	follow: bool,
127	#[arg(long)]
128	json: bool,
129	#[arg(long)]
130	owner_home: Option<PathBuf>,
131	},
132	/// Search what was said: words, "phrases", prefix*, AND/OR/NOT
133	Search {
134	query: String,
135	#[arg(long)]
136	channel: Option<String>,
137	#[arg(long)]
138	author: Option<String>,
139	/// 7d, 3h, 30m
140	#[arg(long)]
141	since: Option<String>,
142	#[arg(long, default_value_t = 20)]
143	limit: u32,
144	#[arg(long)]
145	json: bool,
146	},
147	/// Any API call, signed as the owner: JSON out
148	Api {
149	method: String,
150	path: String,
151	/// The request body (JSON)
152	#[arg(short = 'd', long = "body")]
153	body: Option<String>,
154	#[arg(long)]
155	owner_home: Option<PathBuf>,
156	},
157	/// The checkouts agents work in: add, list
158	Project {
159	#[command(subcommand)]
160	command: ProjectCmd,
161	},
162	/// Agents, each its owner's delegate: add, list, disable
163	Agent {
164	#[command(subcommand)]
165	command: AgentCmd,
166	},
167	/// The ledger's own checks: verify, check, rebuild
168	Admin {
169	#[command(subcommand)]
170	command: Admin,
171	},
172	}
173
174	#[derive(Subcommand)]
175	pub enum IdentityCmd {
176	/// The owner and the instance as the ledger knows them
177	Show {
178	#[arg(long)]
179	json: bool,
180	},
181	/// Record the owner's current identity after `oxy identity delegate add\|remove`
182	Refresh {
183	#[arg(long)]
184	owner_home: Option<PathBuf>,
185	},
186	}
187
188	#[derive(Subcommand)]
189	pub enum ProjectCmd {
190	/// Register a checkout: its repository id, remote and pinned subrepos
191	Add {
192	path: PathBuf,
193	/// Its name (default: the directory's)
194	#[arg(long)]
195	name: Option<String>,
196	/// Its remote URL (default: the checkout's origin)
197	#[arg(long)]
198	remote: Option<String>,
199	#[arg(long)]
200	owner_home: Option<PathBuf>,
201	},
202	/// Every project with what it pins, what pins it, and its agents
203	List {
204	#[arg(long)]
205	json: bool,
206	},
207	}
208
209	#[derive(Subcommand)]
210	pub enum AgentCmd {
211	/// Make an agent's key in its own home and record it once you delegate to it
212	Add {
213	/// Lower-case letters, digits and dashes
214	name: String,
215	/// claude-code, antigravity, kimi-code, codex or other
216	#[arg(long)]
217	kind: String,
218	/// The project it works in
219	#[arg(long)]
220	project: String,
221	/// The agent's own OXY_HOME, where its key is made and kept
222	#[arg(long)]
223	home: PathBuf,
224	/// Bind the key to this Unix user: a request from another is refused
225	#[arg(long)]
226	uid: Option<u32>,
227	/// Bind the key to the Unix user of its first signed connection
228	#[arg(long, conflicts_with = "uid")]
229	learn_uid: bool,
230	/// How long to wait for your delegation, in seconds
231	#[arg(long, default_value_t = 600)]
232	wait: u64,
233	/// The owner's OXY_HOME
234	#[arg(long)]
235	owner_home: Option<PathBuf>,
236	},
237	/// Every agent with its owner, key, delegation and state
238	List {
239	#[arg(long)]
240	json: bool,
241	},
242	/// Refuse an agent's key from now on
243	Disable {
244	name: String,
245	#[arg(long)]
246	owner_home: Option<PathBuf>,
247	},
248	}
249
250	#[derive(Subcommand)]
251	pub enum Admin {
252	/// Recompute the hash chain and check every checkpoint and proof (exit 1 on any finding)
253	Verify {
254	/// Machine-readable output
255	#[arg(long)]
256	json: bool,
257	},
258	/// Whether the projections equal a rebuild from the ledger
259	Check,
260	/// Replay the ledger into every projection
261	Rebuild,
262	}
263
264	/// What every command needs: where the data lives.
265	pub struct Ctx {
266	pub data: PathBuf,
267	}
268
269	impl Ctx {
270	/// The ledger's database, which must exist.
271	pub fn db(&self) -> Result<PathBuf> {
272	let db = self.data.join("spectra.db");
273	if !db.exists() {
274	bail!("no Spectra in {} (run `spectra init`, or pass --data)", self.data.display());
275	}
276	Ok(db)
277	}
278
279	/// The ledger, for writing: the instance key signs its checkpoints, and
280	/// the lock keeps any other writer out.
281	pub async fn writer(&self) -> Result<spectra_core::ledger::Ledger> {
282	let db = self.db()?;
283	let instance = spectra_core::keys::KeyPair::instance(&self.data, "spectra")?;
284	spectra_core::ledger::Ledger::open(&db, Some(instance)).await
285	}
286
287	/// The daemon's Unix socket.
288	pub fn socket(&self) -> PathBuf {
289	self.data.join("spectra.sock")
290	}
291
292	/// The Spectra on another machine this one uses, if any (spec §8.6).
293	pub fn remote(&self) -> Result<Option<connect::ClientCfg>> {
294	connect::load()
295	}
296
297	/// Where the daemon is: the configured server, else the local socket.
298	pub fn endpoint(&self) -> Result<spectra_mcp::client::Endpoint> {
299	Ok(match self.remote()? {
300	Some(c) => c.endpoint()?,
301	None => spectra_mcp::client::Endpoint::Unix(self.socket()),
302	})
303	}
304
305	/// Somewhere to append the owner's signed events: straight to the
306	/// ledger, or through the daemon when it is serving (spec §8.5).
307	pub async fn owner_writer(&self, owner_home: &std::path::Path) -> Result<Writer> {
308	let db = self.db()?;
309	if spectra_mcp::client::Client::alive(&self.socket()).await {
310	let ledger = spectra_core::ledger::Ledger::open_read_only(&db).await?;
311	let transport = identity::recorded_owner(&ledger, owner_home).await?;
312	return Ok(Writer::Daemon { ledger, client: Box::new(spectra_mcp::client::Client::new(&self.socket(), Some(transport))) });
313	}
314	Ok(Writer::Direct(self.writer().await?))
315	}
316
317	/// `[owner] home` from spectra.toml.
318	pub fn config_owner_home(&self) -> Option<PathBuf> {
319	let text = std::fs::read_to_string(self.data.join("spectra.toml")).ok()?;
320	let t: toml::Table = text.parse().ok()?;
321	t.get("owner")?.get("home")?.as_str().map(PathBuf::from)
322	}
323	}
324
325	/// Where the owner's events go.
326	pub enum Writer {
327	Direct(spectra_core::ledger::Ledger),
328	Daemon { ledger: spectra_core::ledger::Ledger, client: Box<spectra_mcp::client::Client> },
329	}
330
331	impl Writer {
332	/// The ledger, for reading.
333	pub fn ledger(&self) -> &spectra_core::ledger::Ledger {
334	match self {
335	Writer::Direct(l) \| Writer::Daemon { ledger: l, .. } => l,
336	}
337	}
338
339	/// Append events signed over their payload, then checkpoint.
340	pub async fn append(&self, events: Vec<spectra_core::event::NewEvent>) -> Result<()> {
341	match self {
342	Writer::Direct(l) => {
343	l.append(events).await?;
344	l.checkpoint().await?;
345	}
346	Writer::Daemon { client, .. } => {
347	let wire: Vec<_> = events.iter().map(spectra_core::daemon::WireEvent::from_new).collect();
348	let r = client.send("POST", "/api/v1/ledger/events", &[], serde_json::to_vec(&wire)?).await?;
349	if r.status != 200 {
350	let why = r
351	.json()
352	.ok()
353	.and_then(\|v\| v.get("title").and_then(\|t\| t.as_str()).map(String::from))
354	.unwrap_or_else(\|\| String::from_utf8_lossy(&r.body).into());
355	bail!("the daemon refused: {why}");
356	}
357	}
358	}
359	Ok(())
360	}
361	}
362
363	fn init_logging() {
364	let filter = tracing_subscriber::EnvFilter::try_from_env("SPECTRA_LOG").unwrap_or_else(\|_\| tracing_subscriber::EnvFilter::new("warn"));
365	tracing_subscriber::fmt().with_env_filter(filter).with_writer(std::io::stderr).init();
366	}
367
368	fn default_data() -> PathBuf {
369	if let Ok(x) = std::env::var("XDG_DATA_HOME") {
370	return PathBuf::from(x).join("spectra");
371	}
372	let home = std::env::var("HOME").unwrap_or_else(\|_\| ".".into());
373	PathBuf::from(home).join(".local").join("share").join("spectra")
374	}
375
376	fn runtime() -> Result<tokio::runtime::Runtime> {
377	Ok(tokio::runtime::Builder::new_multi_thread().enable_all().build()?)
378	}
379
380	pub fn run() -> Result<i32> {
381	let cli = Cli::parse();
382	ui::init(cli.plain);
383	let ctx = Ctx { data: cli.data.unwrap_or_else(default_data) };
384	match cli.command {
385	Command::Version { json } => version(json),
386	Command::Connect { url, owner_home } => runtime()?.block_on(connect::connect(&ctx, &url, owner_home)),
387	Command::Init { owner_home, name, owner: Some(key) } => {
388	let _ = owner_home;
389	runtime()?.block_on(identity::init_for(&ctx, &key, name))
390	}
391	Command::Init { owner_home, name, owner: None } => runtime()?.block_on(identity::init(&ctx, owner_home, name)),
392	Command::Identity { command } => runtime()?.block_on(async {
393	match command {
394	IdentityCmd::Show { json } => identity::show(&ctx, json).await,
395	IdentityCmd::Refresh { owner_home } => identity::refresh(&ctx, owner_home).await,
396	}
397	}),
398	Command::Serve { bind, tls, insecure, open } => {
399	init_logging();
400	runtime()?.block_on(serve::serve(&ctx, bind, tls, insecure, open))
401	}
402	Command::Open { owner_home, no_browser } => runtime()?.block_on(open::open(&ctx, owner_home, !no_browser)),
403	Command::Mcp { agent, home } => runtime()?.block_on(mcp::run(&ctx, &agent, home)),
404	Command::Say { body, channel, reply_to, json, owner_home } => {
405	runtime()?.block_on(human::say(&ctx, channel, reply_to, body, owner_home, json))
406	}
407	Command::Inbox { follow, json, owner_home } => runtime()?.block_on(human::inbox(&ctx, follow, owner_home, json)),
408	Command::Search { query, channel, author, since, limit, json } => {
409	runtime()?.block_on(human::search(&ctx, &query, channel, author, since, limit, json))
410	}
411	Command::Api { method, path, body, owner_home } => runtime()?.block_on(human::raw(&ctx, &method, &path, body, owner_home)),
412	Command::Project { command } => runtime()?.block_on(async {
413	match command {
414	ProjectCmd::Add { path, name, remote, owner_home } => project::add(&ctx, &path, name, remote, owner_home).await,
415	ProjectCmd::List { json } => project::list(&ctx, json).await,
416	}
417	}),
418	Command::Agent { command } => runtime()?.block_on(async {
419	match command {
420	AgentCmd::Add { name, kind, project, home, uid, learn_uid, wait, owner_home } => {
421	agent::add(&ctx, agent::Add { name, kind, project, home, uid, learn_uid, wait_secs: wait, owner_home }).await
422	}
423	AgentCmd::List { json } => agent::list(&ctx, json).await,
424	AgentCmd::Disable { name, owner_home } => agent::disable(&ctx, &name, owner_home).await,
425	}
426	}),
427	Command::Admin { command } => runtime()?.block_on(async {
428	match command {
429	Admin::Verify { json } => admin::verify(&ctx, json).await,
430	Admin::Check => admin::check(&ctx).await,
431	Admin::Rebuild => admin::rebuild(&ctx).await,
432	}
433	}),
434	}
435	}
436
437	fn version(as_json: bool) -> Result<i32> {
438	if as_json {
439	println!(
440	"{}",
441	serde_json::json!({
442	"version": env!("CARGO_PKG_VERSION"),
443	"build": env!("SPECTRA_BUILD_ID"),
444	"mcp_protocol_versions": spectra_mcp::PROTOCOL_VERSIONS,
445	"ledger_format": spectra_core::LEDGER_FORMAT,
446	})
447	);
448	} else {
449	println!("spectra {}", env!("SPECTRA_VERSION_LONG"));
450	}
451	Ok(0)
452	}

Keyboard