test: virt monitor e2e on sbm_virt's contracts

.github/workflows/analysis.yml

@@ -126,7 +126,7 @@ jobs:
           # `store/` because `test/unit/theme_store_tree_test.dart` reads the
           # official theme repository the way the store does.
           emit dart "$shared|^lib/|^test/|^integration_test/|^crates/|^macos/|^Cargo\.(toml|lock)$|^analysis_options\.yaml$|^docs/schemas/|^store/"
-          emit frontend "$shared|^monitor/frontend/|^packages/webui/"
+          emit frontend "$shared|^monitor/frontend/|^monitor/sdk/|^packages/webui/"
           # `store/` (and fl_lib, under `$shared`) for the theme manifests the
           # docs job validates against that same schema; `assets/catalog/` for
           # the catalog the docs describe.
@@ -224,6 +224,19 @@ jobs:
         if: matrix.os == 'ubuntu-latest'
         run: cargo test --workspace --no-fail-fast
 
+      # fl_lib's Rust (`fl_theme`, which the agent depends on by path, and its
+      # bridge to Dart) is a workspace of its own, so `--workspace` above does
+      # not reach it.
+      - name: Test fl_lib's Rust
+        if: matrix.os == 'ubuntu-latest'
+        run: cargo test --manifest-path packages/fl_lib/rust/Cargo.toml --workspace --no-fail-fast
+
+      # The agent runs pi through fl_pi_llm's Rust host, a crate outside this
+      # workspace (it is its own), so `--workspace` does not reach it either.
+      - name: Test fl_pi_llm's Rust host
+        if: matrix.os == 'ubuntu-latest'
+        run: cargo test --manifest-path packages/fl_pi_llm/rust/Cargo.toml --no-default-features --features reqwest --no-fail-fast
+
       # Only the crates with code of their own for Windows: the native sampler,
       # the agent (ConPTY, paths, services) and the script's PowerShell side.
       # The rest is platform-neutral and tested above; that `sbm_ffi` builds
@@ -234,7 +247,9 @@ jobs:
 
       - name: Clippy
         if: matrix.os == 'ubuntu-latest'
-        run: cargo clippy --workspace --all-targets --all-features -- -D warnings
+        run: |
+          cargo clippy --workspace --all-targets --all-features -- -D warnings
+          cargo clippy --manifest-path packages/fl_lib/rust/Cargo.toml --workspace --all-targets -- -D warnings
 
   monitorFrontend:
     name: Monitor frontend
@@ -627,13 +642,21 @@ jobs:
       - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.9.2
         with:
           shared-key: flutter-tests-ffi
+          workspaces: |
+            . -> target
+            packages/fl_lib/rust -> target
           save-if: ${{ github.ref == 'refs/heads/main' && matrix.shard == 0 }}
 
       # FFI-dependent suites (frb_parser/windows/server_status_update_req...)
       # load the dylib from target/debug via test/helpers/rust_lib_helper.dart
       - name: Build native FFI library
         run: cargo build -p sbm_ffi
 
+      # Every test loads fl_lib's Rust (theme packages) from its own target/
+      # (`test/flutter_test_config.dart`): a workspace of its own.
+      - name: Build fl_lib's Rust
+        run: cargo build --manifest-path packages/fl_lib/rust/Cargo.toml -p fl_lib_ffi
+
       # `flutter test` builds sbm_ffi again through the build hook, for a
       # library no unit test loads (they take the one built above).
       - uses: ./.github/actions/build-hook-cache

.github/workflows/monitor-release.yml

@@ -140,6 +140,16 @@ jobs:
       - name: Check out IronRDP
         run: git submodule update --init --depth 1 third_party/ironrdp
 
+      # The agent reads theme packages with fl_lib's `fl_theme`
+      # (`packages/fl_lib/rust/theme`), a path dependency into this submodule.
+      - name: Check out fl_lib
+        run: git submodule update --init --depth 1 packages/fl_lib
+
+      # Agent mode runs pi through `fl_pi_llm`'s Rust host
+      # (`packages/fl_pi_llm/rust`), a path dependency into this submodule.
+      - name: Check out fl_pi_llm
+        run: git submodule update --init --depth 1 packages/fl_pi_llm
+
       - name: Install musl toolchain
         if: matrix.platform == 'linux'
         run: |

CLAUDE.md

@@ -42,11 +42,12 @@ Flutter app for managing servers, in a Rust workspace monorepo. Feature notes li
 - `crates/sbm_parser/` — status command manifest, scripts, parsers (pure, raw counters; rates stay with the caller), locked by `tests/dart_compat.rs` / `script_compat.rs`. Porting: move a module's Dart tests to Rust first, delete the Dart side only once the FFI result matches. `ProcKill` checks a PID against the process table's `START_ID`.
 - `crates/sbm_virt/` — one virtualization model for libvirt (pure command layer) and the PVE API client (session, TOTP, tickets, pinning, console; over a stream the caller dials: `TcpDial` agent, `LoopbackDial` app).
 - `crates/sbm_redfish/` — the BMC client; app via `sbm_ffi::api::bmc`. Also decides PVE certificate pins (`certPinAccepts`); pins are SHA-256 lowercase hex.
+- Theme packages (`.fsbt`) and the theme store are read and checked in Rust, in fl_lib: `packages/fl_lib/rust/theme` (`fl_theme`, its own Cargo workspace), which the agent depends on by path and the app reaches through fl_lib's build hook. Flutter tests load `packages/fl_lib/rust/target/debug/libfl_lib_ffi.*` (`test/flutter_test_config.dart`): `cargo build --manifest-path packages/fl_lib/rust/Cargo.toml -p fl_lib_ffi` first.
 - `crates/sbm_ffi/` — FRB bindings. `crates/sbm_native/` — native sampler, monitor only.
-- `monitor/` — the agent (Rust + Svelte panel), see `monitor/CLAUDE.md`. Machine pages are listed as `features` in `/capabilities`.
+- `monitor/` — the agent (Rust + Svelte panel), see `monitor/CLAUDE.md`. `monitor/sdk/`: what installed desk apps use: `lkui` (the bridge client, on npm; Apache-2.0 for closed third-party apps; it also puts the desk's design system, served by the agent, on the app's page) and a template. Machine pages are listed as `features` in `/capabilities`.
 - `lib/core/` utilities, `lib/view/` UI, `lib/data/{model,provider,store}/`, `lib/src/rust/` generated, `lib/hive/` legacy adapters for `HiveImport` only (TODO: remove).
 - `packages/` — Dart forks as submodules (dartssh2, xterm, fl_lib, fl_build, flutter_pty, …) and the in-repo `webui`. `third_party/` — `ish-arm64`, `ironrdp`. `website/` — Svelte + bun.
-- **The Agent is `packages/fl_pi_llm`** (submodule shared with GPT Box, its own Cargo workspace; PR changes there). This app hooks in at `lib/core/llm/` (`LlmHost`, `AgentTools`, `AgentScope`/`TerminalHosts`/`AgentChats`). `.claude/skills/serverbox-help` ships as assets: a new file needs its directory in `pubspec.yaml`, and its docs links must exist (`builtin_skill_test.dart`). Tests load `build/native_assets/<os>/libfl_pi_llm.*`.
+- **The Agent is `packages/fl_pi_llm`** (submodule shared with GPT Box, its own Cargo workspace; PR changes there). Its memory (`/memories`, `memory_*` tools) is Rust (`rust/src/memory.rs`, `LlmMemory` in Dart, shared with the monitor); `ui`'s `MemoryStore` only keeps the files. This app hooks in at `lib/core/llm/` (`LlmHost`, `AgentTools`, `AgentScope`/`TerminalHosts`/`AgentChats`). `.claude/skills/serverbox-help` ships as assets: a new file needs its directory in `pubspec.yaml`, and its docs links must exist (`builtin_skill_test.dart`). Tests load `build/native_assets/<os>/libfl_pi_llm.*`.
 - Themes are fl_lib's (`package:fl_lib/theme.dart`); this app describes itself in `lib/core/service/theme_host.dart`. `SettingStore` keys are fixed — renaming one loses it. `store/` is the official theme repository (details: `docs/src/content/docs/development/themes.md`, the `serverbox-theme` skill); **editing a theme bundled as `assets/store_themes/<id>.fsbt` means repacking it** (`theme_bundled_test.dart`).
 - `lollipopkit/shellbox-rootfs` is not a submodule: the app reads its signed manifest (`assets/rootfs_manifest.json` offline, key `RootfsManifestTrust.publicKey`).
 - `ScriptConstants.version` and the `v<N>` in `ScriptConstants.scriptFile` must stay equal.
@@ -89,4 +90,4 @@ A server is reached over SSH, a monitor agent, both, or is this device (`Spi.loc
 
 ## Feature notes
 
-`crates/sbm_ffi/CLAUDE.md` (SSH crypto) · `ios/CLAUDE.md` · `macos/CLAUDE.md` · `android/CLAUDE.md` · `lib/data/store/CLAUDE.md` · `lib/data/model/file/CLAUDE.md` (SFTP/SCP) · `lib/data/model/server/benchmark/CLAUDE.md` · `lib/core/service/CLAUDE.md` (watch, home widgets) · `lib/view/page/server/monitor_settings/CLAUDE.md` · `docs/dev/virt.md` · `monitor/CLAUDE.md`.
+`crates/sbm_ffi/CLAUDE.md` (SSH crypto) · `ios/CLAUDE.md` · `macos/CLAUDE.md` · `android/CLAUDE.md` · `lib/data/store/CLAUDE.md` · `lib/data/model/file/CLAUDE.md` (SFTP/SCP) · `lib/data/model/server/benchmark/CLAUDE.md` · `lib/core/service/CLAUDE.md` (watch, home widgets) · `lib/view/page/server/monitor_settings/CLAUDE.md` · `docs/dev/virt.md` · `monitor/CLAUDE.md` · `monitor/frontend/src/desk/CLAUDE.md` (the panel's desk).