Build the current workspace snapshot on native CI runners

This branch snapshots the in-progress desktop workspace so GitHub-hosted Windows and Linux runners can package the same source tree that already passes local verification on macOS.

Constraint: Local Apple Silicon Docker/Wine packaging crashes before Windows artifacts are produced
Rejected: Publish from the incomplete base repo state | remote typecheck failed because current source additions were missing
Confidence: medium
Scope-risk: broad
Directive: Treat this branch as a build snapshot only; do not merge it without reviewing the unrelated workspace changes it contains
Tested: local typecheck, lint, workspace typecheck, unit tests, integration tests, e2e smoke, macOS signed release upload
Not-tested: Native Windows/Linux artifacts before this CI run

src/main/api-server/routes-agent-control.ts

@@ -0,0 +1,136 @@
+import { z } from "zod";
+import { canControlAgent } from "../agent-permissions";
+import type { AgentApiServer } from "./server-core";
+
+export function registerAgentControlRoutes(server: AgentApiServer) {
+  const db = server.db_;
+  const onDomainChanged = server.onDomainChanged_;
+  const onWakeAgent = server.onWakeAgent_;
+
+  server.addRoute("POST", "/api/agents/:agentId/wake", (_req, res, params, token, body) => {
+    const targetAgentId = params.agentId!;
+    const targetAgent = (() => {
+      try {
+        return db.getAgent(targetAgentId);
+      } catch {
+        return null;
+      }
+    })();
+    if (!targetAgent || targetAgent.companyId !== token.companyId) {
+      server.json(res, 404, { error: "Agent not found" });
+      return;
+    }
+    if (!canControlAgent(db, token.companyId, token.agentId, targetAgentId)) {
+      server.json(res, 403, { error: "Current agent is not allowed to wake this agent" });
+      return;
+    }
+    const wakeSchema = z.object({
+      reason: z.string().min(1).max(200).default("peer_request"),
+    });
+    const parsed = wakeSchema.safeParse(body);
+    const reason = parsed.success ? parsed.data.reason : "peer_request";
+    const alreadyActive = db.hasActiveRun({ companyId: token.companyId, agentId: targetAgentId });
+    const runId = onWakeAgent(targetAgentId, token.companyId, reason);
+    if (runId) {
+      server.json(res, 200, { ok: true, runId, message: `Wake started for agent ${targetAgentId}` });
+      return;
+    }
+    if (alreadyActive) {
+      server.json(res, 202, {
+        ok: true,
+        queued: true,
+        message: `Agent ${targetAgentId} is already running. Wake will be retried after the active run completes.`,
+      });
+      return;
+    }
+    server.json(res, 409, { ok: false, error: "Agent could not be woken right now" });
+  });
+
+  server.addRoute("PATCH", "/api/agents/:agentId/heartbeat", (_req, res, params, token) => {
+    const targetAgentId = params.agentId!;
+    const snapshot = db.listSnapshot();
+    const targetAgent = snapshot.agents.find(
+      (a) => a.id === targetAgentId && a.companyId === token.companyId,
+    );
+    if (!targetAgent) {
+      server.json(res, 404, { error: "Agent not found or not in the same company" });
+      return;
+    }
+    if (!canControlAgent(db, token.companyId, token.agentId, targetAgentId)) {
+      server.json(res, 403, { error: "Current agent is not allowed to trigger heartbeat for this agent" });
+      return;
+    }
+    const alreadyActive = db.hasActiveRun({ companyId: token.companyId, agentId: targetAgentId });
+    const runId = onWakeAgent(targetAgentId, token.companyId, "peer_request");
+    if (runId) {
+      server.json(res, 200, { ok: true, runId, message: `Heartbeat triggered for agent ${targetAgentId}` });
+      return;
+    }
+    if (alreadyActive) {
+      server.json(res, 202, {
+        ok: true,
+        queued: true,
+        message: `Agent ${targetAgentId} is already running. Heartbeat will retry after the current run.`,
+      });
+      return;
+    }
+    server.json(res, 409, { ok: false, error: "Heartbeat could not be started for this agent" });
+  });
+
+  server.addRoute("GET", "/api/agents/:agentId/skills", (_req, res, params, token) => {
+    const agentId = params.agentId!;
+    const snapshot = db.listSnapshot();
+    const agent = snapshot.agents.find((a) => a.id === agentId && a.companyId === token.companyId);
+    if (!agent) {
+      server.json(res, 404, { error: "Agent not found in your company" });
+      return;
+    }
+    const skillIds = db.listAgentSkillAssignments(agentId);
+    const skills = skillIds.map((sid) => db.getCompanySkill(token.companyId, sid)).filter(Boolean);
+    server.json(res, 200, skills.map((s) => ({
+      id: s!.id,
+      name: s!.name,
+      slug: s!.slug,
+      description: s!.description,
+      sourceType: s!.sourceType,
+      trustLevel: s!.trustLevel,
+    })));
+  });
+
+  server.addRoute("POST", "/api/agents/:agentId/skills", (_req, res, params, token, body) => {
+    const agentId = params.agentId!;
+    const parsed = z.object({ skillId: z.string().uuid() }).safeParse(body);
+    if (!parsed.success) {
+      server.json(res, 400, { error: "Invalid body: skillId (uuid) required" });
+      return;
+    }
+    const snapshot = db.listSnapshot();
+    const agent = snapshot.agents.find((a) => a.id === agentId && a.companyId === token.companyId);
+    if (!agent) {
+      server.json(res, 404, { error: "Agent not found in your company" });
+      return;
+    }
+    const skill = db.getCompanySkill(token.companyId, parsed.data.skillId);
+    if (!skill) {
+      server.json(res, 404, { error: "Skill not found in your company" });
+      return;
+    }
+    db.assignSkillToAgent(agentId, parsed.data.skillId);
+    onDomainChanged();
+    server.json(res, 200, { ok: true, message: `Skill "${skill.name}" assigned to agent ${agent.name}` });
+  });
+
+  server.addRoute("DELETE", "/api/agents/:agentId/skills/:skillId", (_req, res, params, token) => {
+    const agentId = params.agentId!;
+    const skillId = params.skillId!;
+    const snapshot = db.listSnapshot();
+    const agent = snapshot.agents.find((a) => a.id === agentId && a.companyId === token.companyId);
+    if (!agent) {
+      server.json(res, 404, { error: "Agent not found in your company" });
+      return;
+    }
+    db.removeSkillFromAgent(agentId, skillId);
+    onDomainChanged();
+    server.json(res, 200, { ok: true, message: `Skill removed from agent ${agent.name}` });
+  });
+}