feat(web): 7566 default port + "web" install extra/command (api aliases kept) + panel chrome-lane fix

README.md

@@ -123,13 +123,13 @@ Subscription-based providers that authenticate via OAuth device flow (e.g. `chat
 OpenKB ships a bundled web UI, served by the REST API at `/`. Install the API extra and start the server — no configuration needed:
 
 ```bash
-pip install "openkb[api]"
-openkb-api                       # serves the API + Workbench at http://127.0.0.1:8000/
+pip install "openkb[web]"
+openkb-web                       # serves the API + Workbench at http://127.0.0.1:7566/
 ```
 
-Open `http://127.0.0.1:8000/` for the Workbench. Auth is off by default (local-first); set `OPENKB_API_TOKEN` to require a bearer token before exposing the server. See the [full Web UI guide](examples/rest-api/README.md#knowledge-workbench-web-ui).
+Open `http://127.0.0.1:7566/` for the Workbench. Auth is off by default (local-first); set `OPENKB_API_TOKEN` to require a bearer token before exposing the server. See the [full Web UI guide](examples/rest-api/README.md#knowledge-workbench-web-ui).
 
-> Working on the UI itself? Run the Vite dev server with `cd frontend && npm install && npm run dev` (it proxies `/api` to a running `openkb-api`), or `npm run build` to regenerate the bundled `openkb/web/`.
+> Working on the UI itself? Run the Vite dev server with `cd frontend && npm install && npm run dev` (it proxies `/api` to a running `openkb-web`), or `npm run build` to regenerate the bundled `openkb/web/`.
 
 # 🧩 How OpenKB Works
 
@@ -341,7 +341,7 @@ The skill is read-only. It won't run `openkb add`, `remove`, or `lint --fix` wit
 
 # REST API
 
-OpenKB ships a FastAPI service for HTTP clients. Install with `pip install -e ".[api]"`, then start with `python -m openkb.api`. The interactive API reference is at [`/docs`](http://127.0.0.1:8000/docs) (importable into Postman).
+OpenKB ships a FastAPI service for HTTP clients. Install with `pip install -e ".[web]"`, then start with `python -m openkb.api`. The interactive API reference is at [`/docs`](http://127.0.0.1:7566/docs) (importable into Postman).
 
 See the [full REST API reference](examples/rest-api/README.md#rest-api) for endpoints, auth, and SSE streaming.
 

examples/rest-api/README.md

@@ -2,7 +2,7 @@
 
 This guide covers the OpenKB REST API (FastAPI) and the bundled Knowledge Workbench web UI.
 
-> The interactive API reference is served live at [`/docs`](http://127.0.0.1:8000/docs) (OpenAPI/Swagger) once the server is running — you can import `/openapi.json` directly into Postman.
+> The interactive API reference is served live at [`/docs`](http://127.0.0.1:7566/docs) (OpenAPI/Swagger) once the server is running — you can import `/openapi.json` directly into Postman.
 
 ## Knowledge Workbench (Web UI)
 
@@ -11,20 +11,20 @@ OpenKB ships a bundled web single-page app — the **Knowledge Workbench** — s
 
 ```bash
 # 1. Install with the API extra (the built UI ships inside the package)
-pip install "openkb[api]"
+pip install "openkb[web]"
 
 # 2. Start the server — no config needed for local use
-openkb-api --host 127.0.0.1 --port 8000   # serves the API + Workbench at http://127.0.0.1:8000/
+openkb-web --host 127.0.0.1 --port 7566   # serves the API + Workbench at http://127.0.0.1:7566/
 ```
 
 Optional environment variables:
 
 - `OPENKB_KB_ROOT` — where REST-created knowledge bases are stored (default `~/.config/openkb/kbs`).
 - `OPENKB_API_TOKEN` — set it to require bearer auth (see [Authentication](#authentication-and-common-behavior)); leave unset for open local use.
 
-> **From a source checkout?** The built bundle (`openkb/web/`) is git-ignored, so an editable install (`pip install -e ".[api]"`) has no UI until you build it once: `cd frontend && npm install && npm run build` (outputs to `openkb/web/`). Or run the Vite dev server with `npm run dev` (it proxies `/api` to a running `openkb-api`). Without the bundle, `openkb-api` serves only the REST API under `/api/v1` and `/` returns a 404.
+> **From a source checkout?** The built bundle (`openkb/web/`) is git-ignored, so an editable install (`pip install -e ".[web]"`) has no UI until you build it once: `cd frontend && npm install && npm run build` (outputs to `openkb/web/`). Or run the Vite dev server with `npm run dev` (it proxies `/api` to a running `openkb-web`). Without the bundle, `openkb-web` serves only the REST API under `/api/v1` and `/` returns a 404.
 
-Open `http://127.0.0.1:8000/` in your browser. With no `OPENKB_API_TOKEN` set it connects to the local API immediately — no prompt. (If a token is configured, a **Connection** dialog asks for it once and caches it in the browser; you can also open it manually to point the UI at a remote API base.) The Workbench then provides:
+Open `http://127.0.0.1:7566/` in your browser. With no `OPENKB_API_TOKEN` set it connects to the local API immediately — no prompt. (If a token is configured, a **Connection** dialog asks for it once and caches it in the browser; you can also open it manually to point the UI at a remote API base.) The Workbench then provides:
 
 - **Overview** — index/concept/summary/report stat cards, clickable concept chips, recent documents, and last-compile/lint activity.
 - **Documents** — drag-and-drop multi-file upload with per-file SSE progress, hash table, and delete with confirmation.
@@ -44,15 +44,15 @@ frontends, or other HTTP clients.
 Install the API dependencies if needed:
 
 ```bash
-pip install -e ".[api]"
+pip install -e ".[web]"
 ```
 
 Start the API server:
 
 ```powershell
 $env:OPENKB_API_TOKEN="test-token"
 $env:OPENKB_KB_ROOT="D:\project\OpenKB\kbs"
-.\.venv\Scripts\python.exe -m openkb.api --host 127.0.0.1 --port 8000
+.\.venv\Scripts\python.exe -m openkb.api --host 127.0.0.1 --port 7566
 ```
 
 ### Authentication and common behavior
@@ -61,7 +61,7 @@ Auth is **opt-in**, controlled by the `OPENKB_API_TOKEN` server environment
 variable:
 
 - **Unset (default)** — the API is unauthenticated. This is the local-first
-  default, so `openkb-api` and the Workbench work with no configuration.
+  default, so `openkb-web` and the Workbench work with no configuration.
 - **Set** — every request must carry the token, and the Workbench prompts for
   it once (cached in the browser):
 
@@ -73,7 +73,7 @@ variable:
 
 > **Exposing the server?** Always set `OPENKB_API_TOKEN` when binding to a
 > non-loopback host (e.g. `--host 0.0.0.0`) — otherwise the API, and every KB
-> it can reach, is world-open. `openkb-api` prints a warning in that case.
+> it can reach, is world-open. `openkb-web` prints a warning in that case.
 
 `OPENKB_KB_ROOT` is optional. It controls where REST-created knowledge bases
 are stored. If unset, OpenKB uses `~/.config/openkb/kbs`.
@@ -419,4 +419,4 @@ no watcher is active for that KB.
 stop after this many seconds). Stream events: `start`, the watcher's own events
 (e.g. `added`, `updated`, `failed`, `final`), `error`, `done`.
 
-The full OpenAPI schema is at [`/openapi.json`](http://127.0.0.1:8000/openapi.json) — importable into Postman or any OpenAPI-compatible client.
+The full OpenAPI schema is at [`/openapi.json`](http://127.0.0.1:7566/openapi.json) — importable into Postman or any OpenAPI-compatible client.

frontend/src/App.tsx

@@ -107,7 +107,7 @@ function ConnectionDialog({
             <input
               value={base}
               onChange={(e) => setBase(e.target.value)}
-              placeholder="http://127.0.0.1:8000"
+              placeholder="http://127.0.0.1:7566"
               className={inputCls}
             />
           </div>

frontend/src/components/ArtifactPanel.tsx

@@ -222,8 +222,11 @@ export default function ArtifactPanel({
         className="absolute left-0 top-0 z-10 h-full w-1.5 -translate-x-1/2 cursor-col-resize hover:bg-accent-brand/30"
       />
 
-      {/* header */}
-      <div className="shrink-0 h-12 flex items-center gap-2 px-3 border-b border-[hsl(var(--glass-border))]">
+      {/* header — pr-28 reserves the global top-right chrome lane (theme + i18n
+          pills in App.tsx, absolute right-3 z-40) so the panel's action buttons
+          (open / download / close) never sit UNDER it. Same reserve convention
+          as KbList's header row and KbDetail's gear row. */}
+      <div className="shrink-0 h-12 flex items-center gap-2 pl-3 pr-28 border-b border-[hsl(var(--glass-border))]">
         <HeaderIcon className="w-4 h-4 text-accent-brand shrink-0" />
         <span className="min-w-0 truncate text-[13px] font-semibold text-foreground">
           {artifactLabel(active, t)}

frontend/vite.config.ts

@@ -2,7 +2,7 @@ import path from "path"
 import react from "@vitejs/plugin-react"
 import { defineConfig } from "vite"
 
-// Dev server proxies /api to the OpenKB REST API on :8000; production
+// Dev server proxies /api to the OpenKB REST API on :7566; production
 // serves the built bundle from the same origin via FastAPI StaticFiles.
 // outDir MUST stay ../openkb/web — the wheel packages it from there
 // (see pyproject.toml [tool.hatch.build] artifacts).
@@ -22,7 +22,7 @@ export default defineConfig({
     port: 5173,
     proxy: {
       "/api": {
-        target: "http://127.0.0.1:8000",
+        target: "http://127.0.0.1:7566",
         changeOrigin: true,
       },
     },

openkb/api.py

@@ -776,7 +776,7 @@ async def api_not_found(path: str) -> Any:
 def main() -> None:
     parser = argparse.ArgumentParser(description="Run the OpenKB REST API.")
     parser.add_argument("--host", default="127.0.0.1")
-    parser.add_argument("--port", type=int, default=8000)
+    parser.add_argument("--port", type=int, default=7566)
     parser.add_argument("--reload", action="store_true")
     args = parser.parse_args()
 

openkb/api_helpers.py

@@ -69,8 +69,8 @@ def _configure_cors(app: FastAPI) -> None:
         origins = [o.strip() for o in raw.split(",") if o.strip()] or [
             "http://localhost:5173",
             "http://127.0.0.1:5173",
-            "http://localhost:8000",
-            "http://127.0.0.1:8000",
+            "http://localhost:7566",
+            "http://127.0.0.1:7566",
         ]
     # A wildcard origin with credentials is insecure: any site can issue
     # credentialed cross-origin requests. Reject this combination by forcing

pyproject.toml

@@ -59,6 +59,8 @@ Issues = "https://github.com/VectifyAI/OpenKB/issues"
 
 [project.scripts]
 openkb = "openkb.cli:cli"
+openkb-web = "openkb.api:main"
+# Backwards-compatible alias for the historical name; same entry point.
 openkb-api = "openkb.api:main"
 
 [tool.pytest.ini_options]
@@ -73,7 +75,11 @@ dev = [
     "mypy==1.15.0",
     "types-PyYAML==6.0.12.20260518",
 ]
-api = ["fastapi", "uvicorn", "python-multipart"]
+# The Knowledge Workbench Web UI is served by this FastAPI server. `web` is the
+# canonical extra; `api` is a backwards-compatible alias so an existing
+# `pip install "openkb[api]"` keeps working.
+web = ["fastapi", "uvicorn", "python-multipart"]
+api = ["openkb[web]"]
 
 [tool.hatch.version]
 source = "vcs"