菜单
Start swooshd and verify the iPhone pairing path is live. Use when starting the daemon, debugging "iOS can't reach Mac", verifying the bearer token, or checking that ActantDB came up correctly. Encodes the token-resolution order, the deny-all fallback, and the smoke-test curl.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Multi-file checklist for adding a new SwooshPermission case. Use when adding a permission, exposing a new capability that needs firewall gating, or wiring a new Scout source / tool family / API surface that requires its own grant. Encodes the enum + profile grants + docs + tool wiring + test path so nothing is forgotten.
Interact with Jupiter Lend Protocol. Read-only SDK (@jup-ag/lend-read) for querying liquidity pools, lending markets (jlTokens), and vaults. Write SDK (@jup-ag/lend) for lending (deposit/withdraw) and vault operations (deposit collateral, borrow, repay, manage positions).
Migration guide from Jupiter Metis (v1) or Ultra to Swap API v2. Use when migrating existing Jupiter swap integrations, updating base URLs, or transitioning from quote+swap-instructions to the unified build endpoint.
Use when a user mentions Jupiter token verification, VRFD eligibility, paying 1000 JUP to verify a token, submitting a verification request, or updating metadata via the Jupiter express verification flow.
Use Bags for Solana token launch planning, agent authentication, launch intent creation, and launch transaction creation through the official Bags API.
Use Flap for BNB Chain token trading, wallet and bot integrations, token-launcher flows, VaultPortal launches, deployed contract references, and Blink-style surfaces.
| name | daemon-up |
| description | Start swooshd and verify the iPhone pairing path is live. Use when starting the daemon, debugging "iOS can't reach Mac", verifying the bearer token, or checking that ActantDB came up correctly. Encodes the token-resolution order, the deny-all fallback, and the smoke-test curl. |
swift run swooshd
The daemon resolves a bearer token in this order at startup:
SWOOSH_API_TOKEN env var (if set)~/.swoosh/api_token (auto-persisted across runs)SecRandomCopyBytes (printed to log, persisted to ~/.swoosh/api_token)If none resolves, the entire /api/* tree is mounted under DenyAllMiddleware. That's defense-in-depth — even an accidentally-public daemon refuses to act.
In another terminal:
# Read the persisted token
TOKEN=$(cat ~/.swoosh/api_token)
echo "$TOKEN" | head -c 8; echo "…"
# Hit the chat endpoint
curl -sS http://127.0.0.1:7777/api/agent/chat \
-H "Authorization: Bearer $TOKEN" \
-H "Content-Type: application/json" \
-d '{"messages":[{"role":"user","content":"ping"}]}' \
| head -50
(Port is 7777 by default; check the startup banner if it's been overridden.)
swooshd startup involves these steps in order — if any fails, the daemon won't fully serve:
ActantDBSupervisor spawns actantdb serve as a child process. Sets ACTANT_BASE_URL env var.Swoosh.configure { _ in } builds the default kernel against ActantDB.BundledSkillLoader loads Skills/Bundled/*.md into the FileSkillStore with deterministic IDs (bundled.<filename>).AppUsageRecorder starts the NSWorkspace observer writing to ~/.swoosh/app-usage.jsonl.SwooshAPIServer(port:hostname:token:kernel:) mounts routes.swooshd is running. lsof -i :7777 to find the PID, then decide whether to kill or pair with the existing instance./api/* returns 401 even with the token — token mismatch. Verify with launchctl getenv SWOOSH_API_TOKEN (if set there) vs cat ~/.swoosh/api_token. The constant-time compare doesn't tell you which side is wrong./api/* returns 404 across the board — DenyAllMiddleware is mounted (token didn't resolve at startup). Restart with SWOOSH_API_TOKEN=$(openssl rand -hex 32) to force a token in.~/.swoosh/logs/ for the supervisor's child output. The child crashes leave a backoff loop in ActantDBSupervisor; killing the parent daemon is the cleanest reset.NSLocalNetworkUsageDescription permission was granted (Settings → Privacy → Local Network → SwooshiOS). The first launch prompts; if denied, the path is unrecoverable without revoking-and-relaunching.SWOOSH_HOST)Default is 127.0.0.1 (loopback only). LAN exposure requires SWOOSH_HOST=0.0.0.0 — bearer auth is still required, but only opt in deliberately. Never bind to 0.0.0.0 on an untrusted network.