@0xmaxma/claude-gateway 1.8.14 → 2.0.1

package/dist/orchestration/file-delivery.js

@@ -0,0 +1,139 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveChannelFile = resolveChannelFile;
+exports.sendChannelFile = sendChannelFile;
+const line_request_order_1 = require("../shared/line-request-order");
+const fs_1 = require("fs");
+const path_1 = require("path");
+const os_1 = require("os");
+const media_store_1 = require("../history/media-store");
+const share_store_1 = require("../share/share-store");
+function resolveChannelFile(agent, file) {
+    const agentsRoot = (0, path_1.join)(agent.workspace, '../..');
+    let path, bytes;
+    try {
+        path = (0, fs_1.realpathSync)(media_store_1.MediaStore.resolvePath(agentsRoot, agent.id, file.path));
+        const ref = (0, path_1.relative)((0, fs_1.realpathSync)((0, path_1.join)(agentsRoot, agent.id, 'media')), path);
+        if (!ref || ref.startsWith('..') || (0, path_1.isAbsolute)(ref) || (0, fs_1.statSync)(path).size > 50 * 1024 * 1024)
+            throw new Error();
+        bytes = (0, fs_1.readFileSync)(path);
+        if (bytes.length > 50 * 1024 * 1024)
+            throw new Error();
+    }
+    catch {
+        throw new Error('ATTACHMENT_UNAVAILABLE');
+    }
+    return { path, bytes };
+}
+async function sendChannelFile(agent, binding, file, id, request, enabled = () => true) {
+    if (!enabled())
+        return { state: 'failed', code: 'VOICE_REPLY_DISABLED' };
+    const agentsRoot = (0, path_1.join)(agent.workspace, '../..');
+    const source = String(binding.channel), chat = String(binding.chat_id), thread = String(binding.thread_key);
+    let path, bytes;
+    try {
+        ({ path, bytes } = resolveChannelFile(agent, file));
+    }
+    catch {
+        return { state: 'failed', code: 'ATTACHMENT_UNAVAILABLE' };
+    }
+    const mime = file.kind === 'audio' ? (0, share_store_1.detectAudioMime)(bytes.subarray(0, 12)) ?? 'application/octet-stream' : (0, share_store_1.detectShareMime)(bytes.subarray(0, 12)) ?? 'application/octet-stream';
+    const image = file.kind === 'image' && mime.startsWith('image/');
+    const call = (url, init) => {
+        const send = () => request(url, { ...init, signal: AbortSignal.timeout(30000) });
+        return source === 'line' ? (0, line_request_order_1.orderLineRequest)(agent.id, chat, send) : send();
+    };
+    let response;
+    try {
+        if (source === 'telegram' && agent.telegram?.botToken) {
+            const form = new FormData(), photo = image && bytes.length <= 10 * 1024 * 1024;
+            form.set('chat_id', chat);
+            if (thread)
+                form.set('message_thread_id', thread);
+            if (file.caption)
+                form.set('caption', file.caption);
+            form.set(photo ? 'photo' : 'document', new Blob([new Uint8Array(bytes)], { type: mime }), file.name);
+            response = await call(`https://api.telegram.org/bot${agent.telegram.botToken}/${photo ? 'sendPhoto' : 'sendDocument'}`, { method: 'POST', body: form });
+        }
+        else if (source === 'whatsapp_cloud' && agent.whatsapp_cloud?.accessToken && agent.whatsapp_cloud.phoneNumberId) {
+            const url = `https://graph.facebook.com/v20.0/${encodeURIComponent(agent.whatsapp_cloud.phoneNumberId)}`;
+            const headers = { Authorization: `Bearer ${agent.whatsapp_cloud.accessToken}` };
+            const form = new FormData();
+            form.set('messaging_product', 'whatsapp');
+            form.set('type', mime);
+            form.set('file', new Blob([new Uint8Array(bytes)], { type: mime }), file.name);
+            const upload = await call(`${url}/media`, { method: 'POST', headers, body: form });
+            if (!upload.ok)
+                return { state: upload.status >= 500 ? 'unknown' : 'failed', code: `PROVIDER_HTTP_${upload.status}` };
+            const media = await upload.json();
+            if (!media.id || media.error)
+                return { state: 'failed', code: 'UPLOAD_REJECTED' };
+            if (!enabled())
+                return { state: 'failed', code: 'VOICE_REPLY_DISABLED' };
+            const type = image ? 'image' : file.kind === 'audio' ? 'audio' : 'document';
+            response = await call(`${url}/messages`, { method: 'POST', headers: { ...headers, 'Content-Type': 'application/json' },
+                body: JSON.stringify({ messaging_product: 'whatsapp', to: chat, type,
+                    [type]: { id: media.id, ...(type === 'document' ? { filename: file.name } : {}), ...(type !== 'audio' && file.caption ? { caption: file.caption } : {}) } }) });
+        }
+        else if (source === 'discord' && agent.discord?.botToken) {
+            const form = new FormData();
+            form.set('payload_json', JSON.stringify({ content: file.caption, attachments: [{ id: 0, filename: file.name }], nonce: id.replace(/-/g, '').slice(0, 25), enforce_nonce: true, allowed_mentions: { parse: [] } }));
+            form.set('files[0]', new Blob([new Uint8Array(bytes)], { type: mime }), file.name);
+            response = await call(`https://discord.com/api/v10/channels/${encodeURIComponent(chat)}/messages`, { method: 'POST', headers: { Authorization: `Bot ${agent.discord.botToken}` }, body: form });
+        }
+        else if (source === 'slack' && agent.slack?.botToken) {
+            const authorization = { Authorization: `Bearer ${agent.slack.botToken}` };
+            const reserve = await call('https://slack.com/api/files.getUploadURLExternal', { method: 'POST', headers: authorization, body: new URLSearchParams({ filename: file.name, length: String(bytes.length) }) });
+            if (!reserve.ok)
+                return { state: reserve.status >= 500 ? 'unknown' : 'failed', code: `PROVIDER_HTTP_${reserve.status}` };
+            const slot = await reserve.json();
+            if (!slot.ok || !slot.file_id || !slot.upload_url?.startsWith('https://'))
+                return { state: 'failed', code: 'UPLOAD_SLOT_REJECTED' };
+            const form = new FormData();
+            form.set('file', new Blob([new Uint8Array(bytes)], { type: mime }), file.name);
+            const upload = await call(slot.upload_url, { method: 'POST', body: form });
+            if (!upload.ok)
+                return { state: 'unknown', code: 'UPLOAD_RECEIPT_UNKNOWN' };
+            if (!enabled())
+                return { state: 'failed', code: 'VOICE_REPLY_DISABLED' };
+            response = await call('https://slack.com/api/files.completeUploadExternal', { method: 'POST', headers: { ...authorization, 'Content-Type': 'application/json' },
+                body: JSON.stringify({ files: [{ id: slot.file_id, title: file.name }], channel_id: chat, ...(thread ? { thread_ts: thread } : {}), ...(file.caption ? { initial_comment: file.caption } : {}) }) });
+        }
+        else if (source === 'line' && agent.line?.channelAccessToken) {
+            const base = (0, fs_1.readFileSync)((0, path_1.join)(agent.workspace, '../.public-base'), 'utf8').trim().replace(/\/+$/, '');
+            if (!base.startsWith('https://'))
+                return { state: 'failed', code: 'PUBLIC_MEDIA_URL_REQUIRED' };
+            const validated = (0, share_store_1.validateShareFile)(agentsRoot, agent.id, path, 20 * 1024 * 1024, image ? 'image' : file.kind === 'audio' ? 'audio' : 'any');
+            const shares = new share_store_1.ShareStore((0, share_store_1.shareEnv)('DB_PATH') || (0, path_1.join)((0, os_1.homedir)(), '.claude-gateway', 'shares.db'));
+            let url;
+            try {
+                const share = shares.mintShare({ agentId: agent.id, sessionId: String(binding.conversation_id), relativePath: validated.relativePath,
+                    dedupeRef: file.path, purpose: 'channel_delivery', ttlSeconds: 1800, allowKind: image ? 'image' : file.kind === 'audio' ? 'audio' : 'any' });
+                url = `${base}/shared/${share.token}${file.kind === 'audio' ? (mime === 'audio/mp4' ? '/audio.m4a' : '/audio.mp3') : ''}`;
+            }
+            finally {
+                shares.close();
+            }
+            const message = file.kind === 'audio' ? { type: 'audio', originalContentUrl: url, duration: file.durationMs } : image ? { type: 'image', originalContentUrl: url, previewImageUrl: url } : { type: 'text', text: `${file.name}\n${url}` };
+            if (!enabled())
+                return { state: 'failed', code: 'VOICE_REPLY_DISABLED' };
+            response = await call('https://api.line.me/v2/bot/message/push', { method: 'POST', headers: { 'Content-Type': 'application/json', Authorization: `Bearer ${agent.line.channelAccessToken}`, 'X-Line-Retry-Key': id }, body: JSON.stringify({ to: chat, messages: [message] }) });
+            if (response.status === 409 && response.headers.get('x-line-accepted-request-id'))
+                return { state: 'delivered', providerId: response.headers.get('x-line-accepted-request-id') };
+        }
+        else
+            return { state: 'failed', code: 'DELIVERY_NOT_CONFIGURED' };
+        if (!response.ok)
+            return { state: response.status >= 500 ? 'unknown' : 'failed', code: `PROVIDER_HTTP_${response.status}` };
+        const result = await response.json();
+        if (result.ok === false || result.error)
+            return { state: 'failed', code: 'PROVIDER_REJECTED' };
+        if (source === 'whatsapp_cloud' && !result.messages?.[0]?.id)
+            return { state: 'unknown', code: 'PROVIDER_RECEIPT_UNKNOWN' };
+        return { state: 'delivered', providerId: result.messages?.[0]?.id ?? result.id ?? result.files?.[0]?.id ?? result.sentMessages?.[0]?.id ?? (result.result?.message_id === undefined ? undefined : String(result.result.message_id)) };
+    }
+    catch {
+        return { state: 'unknown', code: 'PROVIDER_RECEIPT_UNKNOWN' };
+    }
+}
+//# sourceMappingURL=file-delivery.js.map

package/dist/orchestration/file-delivery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-delivery.js","sourceRoot":"","sources":["../../src/orchestration/file-delivery.ts"],"names":[],"mappings":";;AAWA,gDAWC;AACD,0CA2EC;AAlGD,qEAAgE;AAChE,2BAA0D;AAC1D,+BAAkD;AAClD,2BAA6B;AAI7B,wDAAoD;AACpD,sDAAiH;AAGjH,SAAgB,kBAAkB,CAAC,KAAkB,EAAE,IAAiB;IACtE,MAAM,UAAU,GAAG,IAAA,WAAI,EAAC,KAAK,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAClD,IAAI,IAAY,EAAE,KAAa,CAAC;IAChC,IAAI,CAAC;QACH,IAAI,GAAG,IAAA,iBAAY,EAAC,wBAAU,CAAC,WAAW,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7E,MAAM,GAAG,GAAG,IAAA,eAAQ,EAAC,IAAA,iBAAY,EAAC,IAAA,WAAI,EAAC,UAAU,EAAE,KAAK,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QAC9E,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAA,iBAAU,EAAC,GAAG,CAAC,IAAI,IAAA,aAAQ,EAAC,IAAI,CAAC,CAAC,IAAI,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI;YAAE,MAAM,IAAI,KAAK,EAAE,CAAC;QACjH,KAAK,GAAG,IAAA,iBAAY,EAAC,IAAI,CAAC,CAAC;QAC3B,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI;YAAE,MAAM,IAAI,KAAK,EAAE,CAAC;IACzD,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAAC,CAAC;IACtD,OAAO,EAAC,IAAI,EAAE,KAAK,EAAC,CAAC;AACvB,CAAC;AACM,KAAK,UAAU,eAAe,CAAC,KAAkB,EAAE,OAAY,EAAE,IAAiB,EAAE,EAAU,EAAE,OAAqB,EAAE,UAAyB,GAAG,EAAE,CAAC,IAAI;IAC/J,IAAG,CAAC,OAAO,EAAE;QAAC,OAAO,EAAC,KAAK,EAAC,QAAQ,EAAC,IAAI,EAAC,sBAAsB,EAAC,CAAC;IAClE,MAAM,UAAU,GAAG,IAAA,WAAI,EAAC,KAAK,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAC5G,IAAI,IAAY,EAAE,KAAa,CAAC;IAChC,IAAI,CAAC;QAAC,CAAC,EAAC,IAAI,EAAE,KAAK,EAAC,GAAG,kBAAkB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;IAAC,CAAC;IAC1D,MAAM,CAAC;QAAC,OAAO,EAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,wBAAwB,EAAC,CAAC;IAAC,CAAC;IACnE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,KAAG,OAAO,CAAC,CAAC,CAAC,IAAA,6BAAe,EAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAC,EAAE,CAAC,CAAC,IAAI,0BAA0B,CAAC,CAAC,CAAC,IAAA,6BAAe,EAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,0BAA0B,CAAC;IAC9K,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IACjE,MAAM,IAAI,GAAG,CAAC,GAAW,EAAE,IAAiB,EAAE,EAAE;QAC9C,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACjF,OAAO,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,IAAA,qCAAgB,EAAC,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC7E,CAAC,CAAC;IACF,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,IAAI,MAAM,KAAK,UAAU,IAAI,KAAK,CAAC,QAAQ,EAAE,QAAQ,EAAE,CAAC;YACtD,MAAM,IAAI,GAAG,IAAI,QAAQ,EAAE,EAAE,KAAK,GAAG,KAAK,IAAI,KAAK,CAAC,MAAM,IAAI,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;YAC/E,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;YAAC,IAAI,MAAM;gBAAE,IAAI,CAAC,GAAG,CAAC,mBAAmB,EAAE,MAAM,CAAC,CAAC;YAC7E,IAAI,IAAI,CAAC,OAAO;gBAAE,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;YACpD,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,EAAE,IAAI,IAAI,CAAC,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YACrG,QAAQ,GAAG,MAAM,IAAI,CAAC,+BAA+B,KAAK,CAAC,QAAQ,CAAC,QAAQ,IAAI,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,cAAc,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1J,CAAC;aAAM,IAAI,MAAM,KAAK,gBAAgB,IAAI,KAAK,CAAC,cAAc,EAAE,WAAW,IAAI,KAAK,CAAC,cAAc,CAAC,aAAa,EAAE,CAAC;YAClH,MAAM,GAAG,GAAG,oCAAoC,kBAAkB,CAAC,KAAK,CAAC,cAAc,CAAC,aAAa,CAAC,EAAE,CAAC;YACzG,MAAM,OAAO,GAAG,EAAC,aAAa,EAAE,UAAU,KAAK,CAAC,cAAc,CAAC,WAAW,EAAE,EAAC,CAAC;YAC9E,MAAM,IAAI,GAAG,IAAI,QAAQ,EAAE,CAAC;YAC5B,IAAI,CAAC,GAAG,CAAC,mBAAmB,EAAE,UAAU,CAAC,CAAC;YAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAClE,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAC,IAAI,EAAE,IAAI,EAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YAC7E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,GAAG,GAAG,QAAQ,EAAE,EAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAC,CAAC,CAAC;YACjF,IAAI,CAAC,MAAM,CAAC,EAAE;gBAAE,OAAO,EAAC,KAAK,EAAE,MAAM,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,iBAAiB,MAAM,CAAC,MAAM,EAAE,EAAC,CAAC;YACpH,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,IAAI,EAAoC,CAAC;YACpE,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,KAAK,CAAC,KAAK;gBAAE,OAAO,EAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,iBAAiB,EAAC,CAAC;YAChF,IAAI,CAAC,OAAO,EAAE;gBAAE,OAAO,EAAC,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,sBAAsB,EAAC,CAAC;YACvE,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC;YAC5E,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,GAAG,WAAW,EAAE,EAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAC,GAAG,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAC;gBACjH,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAC,iBAAiB,EAAE,UAAU,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI;oBACjE,CAAC,IAAI,CAAC,EAAE,EAAC,EAAE,EAAE,KAAK,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,EAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAC,EAAC,CAAC,EAAC,CAAC,CAAC;QAC9J,CAAC;aAAM,IAAI,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,EAAE,QAAQ,EAAE,CAAC;YAC3D,MAAM,IAAI,GAAG,IAAI,QAAQ,EAAE,CAAC;YAC5B,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,WAAW,EAAE,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAC,EAAE,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;YAClN,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,IAAI,CAAC,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YACnF,QAAQ,GAAG,MAAM,IAAI,CAAC,wCAAwC,kBAAkB,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,OAAO,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAClM,CAAC;aAAM,IAAI,MAAM,KAAK,OAAO,IAAI,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,CAAC;YACvD,MAAM,aAAa,GAAG,EAAE,aAAa,EAAE,UAAU,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,CAAC;YAC1E,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,kDAAkD,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,IAAI,EAAE,IAAI,eAAe,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YAC7M,IAAI,CAAC,OAAO,CAAC,EAAE;gBAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,iBAAiB,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YACzH,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAA0D,CAAC;YAC1F,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,UAAU,CAAC;gBAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,sBAAsB,EAAE,CAAC;YACpI,MAAM,IAAI,GAAG,IAAI,QAAQ,EAAE,CAAC;YAAC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,EAAC,EAAC,IAAI,EAAC,IAAI,EAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC;YACxG,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAC3E,IAAI,CAAC,MAAM,CAAC,EAAE;gBAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,wBAAwB,EAAE,CAAC;YAC5E,IAAG,CAAC,OAAO,EAAE;gBAAC,OAAO,EAAC,KAAK,EAAC,QAAQ,EAAC,IAAI,EAAC,sBAAsB,EAAC,CAAC;YAClE,QAAQ,GAAG,MAAM,IAAI,CAAC,oDAAoD,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,GAAG,aAAa,EAAE,cAAc,EAAE,kBAAkB,EAAE;gBAC7J,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QACzM,CAAC;aAAM,IAAI,MAAM,KAAK,MAAM,IAAI,KAAK,CAAC,IAAI,EAAE,kBAAkB,EAAE,CAAC;YAC/D,MAAM,IAAI,GAAG,IAAA,iBAAY,EAAC,IAAA,WAAI,EAAC,KAAK,CAAC,SAAS,EAAE,iBAAiB,CAAC,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YACvG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;gBAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,2BAA2B,EAAE,CAAC;YAChG,MAAM,SAAS,GAAG,IAAA,+BAAiB,EAAC,UAAU,EAAE,KAAK,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAG,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YAC3I,MAAM,MAAM,GAAG,IAAI,wBAAU,CAAC,IAAA,sBAAQ,EAAC,SAAS,CAAC,IAAI,IAAA,WAAI,EAAC,IAAA,YAAO,GAAE,EAAE,iBAAiB,EAAE,WAAW,CAAC,CAAC,CAAC;YACtG,IAAI,GAAW,CAAC;YAChB,IAAI,CAAC;gBACH,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,EAAE,YAAY,EAAE,SAAS,CAAC,YAAY;oBAClI,SAAS,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,kBAAkB,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,KAAG,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;gBAC7I,GAAG,GAAG,GAAG,IAAI,WAAW,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,KAAG,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,KAAG,WAAW,CAAA,CAAC,CAAA,YAAY,CAAA,CAAC,CAAA,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YACpH,CAAC;oBAAS,CAAC;gBAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YAAC,CAAC;YAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,KAAG,OAAO,CAAC,CAAC,CAAC,EAAC,IAAI,EAAC,OAAO,EAAC,kBAAkB,EAAC,GAAG,EAAC,QAAQ,EAAC,IAAI,CAAC,UAAU,EAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,kBAAkB,EAAE,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,IAAI,KAAK,GAAG,EAAE,EAAE,CAAC;YACjO,IAAG,CAAC,OAAO,EAAE;gBAAC,OAAO,EAAC,KAAK,EAAC,QAAQ,EAAC,IAAI,EAAC,sBAAsB,EAAC,CAAC;YAClE,QAAQ,GAAG,MAAM,IAAI,CAAC,yCAAyC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,aAAa,EAAE,UAAU,KAAK,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAE,kBAAkB,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YACjR,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAC;gBAAE,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,4BAA4B,CAAE,EAAE,CAAC;QACpL,CAAC;;YAAM,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,yBAAyB,EAAE,CAAC;QACnE,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,iBAAiB,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;QAC5H,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAA2L,CAAC;QAC9N,IAAI,MAAM,CAAC,EAAE,KAAK,KAAK,IAAI,MAAM,CAAC,KAAK;YAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC;QAC/F,IAAI,MAAM,KAAK,gBAAgB,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE;YAAE,OAAO,EAAC,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,0BAA0B,EAAC,CAAC;QAC1H,OAAO,EAAE,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,MAAM,CAAC,EAAE,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;IACxO,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,0BAA0B,EAAE,CAAC;IAAC,CAAC;AAC5E,CAAC"}

package/dist/orchestration/gateway-config.d.ts

@@ -0,0 +1,17 @@
+import type { AgentConfig, GatewayConfig } from '../types';
+import { OrchestrationConfig } from './config';
+export type GatewayOrchestration = boolean | Omit<OrchestrationConfig, 'channels'>;
+export declare const ORCHESTRATION_CHANNELS: string[];
+export declare function gatewayOrchestrationEnabled(value: GatewayOrchestration | undefined): boolean;
+export declare function validateGatewayOrchestration(value: unknown): void;
+/** Derived mode is non-enumerable: serializing settings never writes per-Agent switches back to config.json. */
+export declare function effectiveOrchestration(settings: OrchestrationConfig | undefined, global: GatewayOrchestration | undefined): OrchestrationConfig;
+export declare function applyGatewayOrchestration(agent: AgentConfig, gateway: GatewayConfig): AgentConfig;
+/** One-time structural migration. New documents have no inherited voice settings.
+ * Merge raw values, never environment-expanded credentials, and preserve explicit
+ * per-agent overrides (including false). Calling this again is a no-op. */
+export declare function migrateAgentVoiceConfig(document: {
+    gateway?: any;
+    agents?: any[];
+}): boolean;
+//# sourceMappingURL=gateway-config.d.ts.map

package/dist/orchestration/gateway-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway-config.d.ts","sourceRoot":"","sources":["../../src/orchestration/gateway-config.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAC,WAAW,EAAC,aAAa,EAAC,MAAM,UAAU,CAAC;AACxD,OAAO,EAAC,mBAAmB,EAAgE,MAAM,UAAU,CAAC;AAE5G,MAAM,MAAM,oBAAoB,GAAG,OAAO,GAAG,IAAI,CAAC,mBAAmB,EAAC,UAAU,CAAC,CAAC;AAElF,eAAO,MAAM,sBAAsB,UAAyB,CAAC;AAC7D,wBAAgB,2BAA2B,CAAC,KAAK,EAAC,oBAAoB,GAAC,SAAS,GAAE,OAAO,CAAkE;AAC3J,wBAAgB,4BAA4B,CAAC,KAAK,EAAC,OAAO,GAAE,IAAI,CAI/D;AAMD,gHAAgH;AAChH,wBAAgB,sBAAsB,CAAC,QAAQ,EAAC,mBAAmB,GAAC,SAAS,EAAC,MAAM,EAAC,oBAAoB,GAAC,SAAS,GAAE,mBAAmB,CAevI;AACD,wBAAgB,yBAAyB,CAAC,KAAK,EAAC,WAAW,EAAC,OAAO,EAAC,aAAa,GAAE,WAAW,CAO7F;AAED;;2EAE2E;AAC3E,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE;IAAE,OAAO,CAAC,EAAE,GAAG,CAAC;IAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAA;CAAE,GAAG,OAAO,CAsD5F"}

package/dist/orchestration/gateway-config.js

@@ -0,0 +1,128 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ORCHESTRATION_CHANNELS = void 0;
+exports.gatewayOrchestrationEnabled = gatewayOrchestrationEnabled;
+exports.validateGatewayOrchestration = validateGatewayOrchestration;
+exports.effectiveOrchestration = effectiveOrchestration;
+exports.applyGatewayOrchestration = applyGatewayOrchestration;
+exports.migrateAgentVoiceConfig = migrateAgentVoiceConfig;
+const model_ref_1 = require("../voice/providers/model-ref");
+const config_1 = require("./config");
+const types_1 = require("../history/types");
+const overrides = Symbol('agent-orchestration-overrides');
+exports.ORCHESTRATION_CHANNELS = ['api', ...types_1.CHAT_CHANNELS];
+function gatewayOrchestrationEnabled(value) { return typeof value === 'boolean' ? value : value?.enabled !== false; }
+function validateGatewayOrchestration(value) {
+    if (value === undefined || typeof value === 'boolean')
+        return;
+    (0, config_1.validateTree)(value, config_1.ORCHESTRATION_DEFAULTS, 'gateway.orchestration');
+    if (Object.prototype.hasOwnProperty.call(value, 'channels'))
+        throw Error('gateway.orchestration applies to every channel; channels is not configurable');
+}
+function merge(base, override) {
+    const result = { ...base };
+    for (const [key, value] of Object.entries(override ?? {}))
+        result[key] = value && typeof value === 'object' && !Array.isArray(value) ? merge(base?.[key] ?? {}, value) : value;
+    return result;
+}
+/** Derived mode is non-enumerable: serializing settings never writes per-Agent switches back to config.json. */
+function effectiveOrchestration(settings, global) {
+    var _a;
+    validateGatewayOrchestration(global);
+    if (settings !== undefined)
+        (0, config_1.validateTree)(settings, config_1.ORCHESTRATION_DEFAULTS, 'agents[].orchestration');
+    const raw = { ...(settings?.[overrides] ?? settings) };
+    delete raw.enabled;
+    delete raw.channels;
+    const defaults = typeof global === 'object' ? { ...global } : {};
+    delete defaults.enabled;
+    const result = merge(defaults, raw);
+    // Reply permission belongs to the Agent. Accept old gateway keys for config
+    // compatibility, but never inherit their value into an Agent's policy.
+    if (result.voice) {
+        (_a = result.voice).notes ?? (_a.notes = {});
+        result.voice.notes.replyWithVoice = raw.voice?.notes?.replyWithVoice ?? true;
+    }
+    Object.defineProperties(result, { enabled: { value: gatewayOrchestrationEnabled(global) }, channels: { value: exports.ORCHESTRATION_CHANNELS }, [overrides]: { value: raw }, toJSON: { value: () => raw } });
+    (0, config_1.resolveOrchestrationConfig)(result);
+    return result;
+}
+function applyGatewayOrchestration(agent, gateway) {
+    // Normalize legacy in-memory callers too; loaded config is already migrated.
+    const document = { gateway: { orchestration: gateway.gateway.orchestration }, agents: [agent] };
+    migrateAgentVoiceConfig(document);
+    agent.orchestration = effectiveOrchestration(agent.orchestration, document.gateway.orchestration);
+    (0, config_1.resolveOrchestrationConfig)(agent.orchestration, agent.voice ?? { enabled: false });
+    return agent;
+}
+/** One-time structural migration. New documents have no inherited voice settings.
+ * Merge raw values, never environment-expanded credentials, and preserve explicit
+ * per-agent overrides (including false). Calling this again is a no-op. */
+function migrateAgentVoiceConfig(document) {
+    const global = document.gateway?.orchestration;
+    validateGatewayOrchestration(global);
+    const legacyGlobal = global && typeof global === 'object' ? global : undefined;
+    let changed = false;
+    for (const agent of document.agents ?? []) {
+        if (!agent || typeof agent !== 'object' || Array.isArray(agent))
+            continue;
+        for (const role of ['tts', 'stt', 'notes']) {
+            const item = agent.voice?.[role];
+            if (typeof item?.provider === 'string' && (0, model_ref_1.canonicalVoiceProvider)(item.provider) !== item.provider) {
+                item.provider = (0, model_ref_1.canonicalVoiceProvider)(item.provider);
+                changed = true;
+            }
+        }
+        const legacy = agent.orchestration;
+        if (!legacyGlobal && !legacy?.voice)
+            continue;
+        // Reuse the old precedence rules before removing the inherited layer.
+        let effective;
+        try {
+            effective = effectiveOrchestration(legacy, global);
+        }
+        catch {
+            continue;
+        } // The loader reports/skips malformed agents individually.
+        const settings = JSON.parse(JSON.stringify(effective));
+        if (legacyGlobal) {
+            for (const field of ['conversation', 'tasks', 'events']) {
+                if (legacyGlobal[field] || legacy?.[field])
+                    settings[field] = merge(legacyGlobal[field], legacy?.[field]);
+            }
+        }
+        if (legacyGlobal?.voice || legacy?.voice) {
+            const rawVoice = merge(merge(legacyGlobal?.voice, legacy?.voice), agent.voice);
+            const resolvedVoice = (0, config_1.resolveOrchestrationConfig)(effective).voice;
+            // Disabled, never-configured voice must not acquire fictional ElevenLabs
+            // selections merely because the previous runtime supplied defaults.
+            const hasSelection = ['tts', 'stt', 'notes'].some(field => ['provider', 'model', 'voiceId'].some(key => Boolean(rawVoice[field]?.[key])));
+            const voice = rawVoice.enabled !== true && !resolvedVoice.enabled && !hasSelection
+                ? rawVoice
+                : merge(resolvedVoice, agent.voice);
+            delete voice.allowedOrigins;
+            for (const role of ['tts', 'stt', 'notes'])
+                if (typeof voice[role]?.provider === 'string')
+                    voice[role].provider = (0, model_ref_1.canonicalVoiceProvider)(voice[role].provider);
+            agent.voice = voice;
+        }
+        delete settings.voice;
+        if (Object.keys(settings).length)
+            agent.orchestration = settings;
+        else
+            delete agent.orchestration;
+        changed = true;
+    }
+    if (legacyGlobal) {
+        document.gateway.orchestration = gatewayOrchestrationEnabled(global);
+        changed = true;
+    }
+    // Materialize the default for older configs as well as fresh installs.
+    // Explicit false remains an opt-out; voice is still independently disabled.
+    if (document.gateway && document.gateway.orchestration === undefined) {
+        document.gateway.orchestration = true;
+        changed = true;
+    }
+    return changed;
+}
+//# sourceMappingURL=gateway-config.js.map

package/dist/orchestration/gateway-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway-config.js","sourceRoot":"","sources":["../../src/orchestration/gateway-config.ts"],"names":[],"mappings":";;;AAOA,kEAA2J;AAC3J,oEAIC;AAOD,wDAeC;AACD,8DAOC;AAKD,0DAsDC;AArGD,4DAAsE;AAEtE,qCAA4G;AAC5G,4CAA+C;AAE/C,MAAM,SAAS,GAAC,MAAM,CAAC,+BAA+B,CAAC,CAAC;AAC3C,QAAA,sBAAsB,GAAC,CAAC,KAAK,EAAC,GAAG,qBAAa,CAAC,CAAC;AAC7D,SAAgB,2BAA2B,CAAC,KAAoC,IAAW,OAAO,OAAO,KAAK,KAAG,SAAS,CAAA,CAAC,CAAA,KAAK,CAAA,CAAC,CAAA,KAAK,EAAE,OAAO,KAAK,KAAK,CAAC,CAAA,CAAC;AAC3J,SAAgB,4BAA4B,CAAC,KAAa;IACxD,IAAG,KAAK,KAAG,SAAS,IAAE,OAAO,KAAK,KAAG,SAAS;QAAC,OAAO;IACtD,IAAA,qBAAY,EAAC,KAAK,EAAC,+BAAsB,EAAC,uBAAuB,CAAC,CAAC;IACnE,IAAG,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAC,UAAU,CAAC;QAAC,MAAM,KAAK,CAAC,8EAA8E,CAAC,CAAC;AACxJ,CAAC;AACD,SAAS,KAAK,CAAC,IAAQ,EAAC,QAAY;IAClC,MAAM,MAAM,GAAC,EAAC,GAAG,IAAI,EAAC,CAAC;IACvB,KAAI,MAAM,CAAC,GAAG,EAAC,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,IAAE,EAAE,CAAC;QAAC,MAAM,CAAC,GAAG,CAAC,GAAC,KAAK,IAAE,OAAO,KAAK,KAAG,QAAQ,IAAE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA,CAAC,CAAA,KAAK,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,IAAE,EAAE,EAAC,KAAK,CAAC,CAAA,CAAC,CAAA,KAAK,CAAC;IAC3J,OAAO,MAAM,CAAC;AAChB,CAAC;AACD,gHAAgH;AAChH,SAAgB,sBAAsB,CAAC,QAAsC,EAAC,MAAqC;;IACjH,4BAA4B,CAAC,MAAM,CAAC,CAAC;IACrC,IAAG,QAAQ,KAAG,SAAS;QAAC,IAAA,qBAAY,EAAC,QAAQ,EAAC,+BAAsB,EAAC,wBAAwB,CAAC,CAAC;IAC/F,MAAM,GAAG,GAAC,EAAC,GAAG,CAAE,QAAgB,EAAE,CAAC,SAAS,CAAC,IAAE,QAAQ,CAAC,EAAC,CAAC;IAAA,OAAO,GAAG,CAAC,OAAO,CAAC;IAAA,OAAO,GAAG,CAAC,QAAQ,CAAC;IACjG,MAAM,QAAQ,GAAC,OAAO,MAAM,KAAG,QAAQ,CAAA,CAAC,CAAA,EAAC,GAAG,MAAM,EAAC,CAAA,CAAC,CAAA,EAAE,CAAC;IAAA,OAAO,QAAQ,CAAC,OAAO,CAAC;IAC/E,MAAM,MAAM,GAAC,KAAK,CAAC,QAAQ,EAAC,GAAG,CAAC,CAAC;IACjC,4EAA4E;IAC5E,uEAAuE;IACvE,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACjB,MAAA,MAAM,CAAC,KAAK,EAAC,KAAK,QAAL,KAAK,GAAK,EAAE,EAAC;QAC1B,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,GAAG,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,cAAc,IAAI,IAAI,CAAC;IAC/E,CAAC;IACD,MAAM,CAAC,gBAAgB,CAAC,MAAM,EAAC,EAAC,OAAO,EAAC,EAAC,KAAK,EAAC,2BAA2B,CAAC,MAAM,CAAC,EAAC,EAAC,QAAQ,EAAC,EAAC,KAAK,EAAC,8BAAsB,EAAC,EAAC,CAAC,SAAS,CAAC,EAAC,EAAC,KAAK,EAAC,GAAG,EAAC,EAAC,MAAM,EAAC,EAAC,KAAK,EAAC,GAAE,EAAE,CAAA,GAAG,EAAC,EAAC,CAAC,CAAC;IAC7K,IAAA,mCAA0B,EAAC,MAAM,CAAC,CAAC;IACnC,OAAO,MAAM,CAAC;AAChB,CAAC;AACD,SAAgB,yBAAyB,CAAC,KAAiB,EAAC,OAAqB;IAC/E,6EAA6E;IAC7E,MAAM,QAAQ,GAAG,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,OAAO,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC;IAChG,uBAAuB,CAAC,QAAQ,CAAC,CAAC;IAClC,KAAK,CAAC,aAAa,GAAC,sBAAsB,CAAC,KAAK,CAAC,aAAa,EAAC,QAAQ,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAC/F,IAAA,mCAA0B,EAAC,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,KAAK,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;IACnF,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;2EAE2E;AAC3E,SAAgB,uBAAuB,CAAC,QAA2C;IACjF,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAC/C,4BAA4B,CAAC,MAAM,CAAC,CAAC;IACrC,MAAM,YAAY,GAAG,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/E,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;QAC1C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,SAAS;QAC1E,KAAK,MAAM,IAAI,IAAI,CAAC,KAAK,EAAC,KAAK,EAAC,OAAO,CAAC,EAAE,CAAC;YACzC,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,CAAC;YACjC,IAAI,OAAO,IAAI,EAAE,QAAQ,KAAK,QAAQ,IAAI,IAAA,kCAAsB,EAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAAC,IAAI,CAAC,QAAQ,GAAG,IAAA,kCAAsB,EAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAAC,OAAO,GAAG,IAAI,CAAC;YAAC,CAAC;QAC/K,CAAC;QACD,MAAM,MAAM,GAAG,KAAK,CAAC,aAAa,CAAC;QACnC,IAAI,CAAC,YAAY,IAAI,CAAC,MAAM,EAAE,KAAK;YAAE,SAAS;QAC9C,sEAAsE;QACtE,IAAI,SAA8B,CAAC;QACnC,IAAI,CAAC;YAAC,SAAS,GAAG,sBAAsB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAAC,CAAC;QAC3D,MAAM,CAAC;YAAC,SAAS;QAAC,CAAC,CAAC,0DAA0D;QAE9E,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC;QACvD,IAAI,YAAY,EAAE,CAAC;YACjB,KAAK,MAAM,KAAK,IAAI,CAAC,cAAc,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC;gBACxD,IAAI,YAAY,CAAC,KAAK,CAAC,IAAI,MAAM,EAAE,CAAC,KAAK,CAAC;oBAAE,QAAQ,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,YAAY,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;YAC5G,CAAC;QACH,CAAC;QACD,IAAI,YAAY,EAAE,KAAK,IAAI,MAAM,EAAE,KAAK,EAAE,CAAC;YACzC,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;YAC/E,MAAM,aAAa,GAAG,IAAA,mCAA0B,EAAC,SAAS,CAAC,CAAC,KAAK,CAAC;YAClE,yEAAyE;YACzE,oEAAoE;YACpE,MAAM,YAAY,GAAG,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CACxD,CAAC,UAAU,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;YACjF,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,KAAK,IAAI,IAAI,CAAC,aAAa,CAAC,OAAO,IAAI,CAAC,YAAY;gBAChF,CAAC,CAAC,QAAQ;gBACV,CAAC,CAAC,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;YACtC,OAAO,KAAK,CAAC,cAAc,CAAC;YAC5B,KAAK,MAAM,IAAI,IAAI,CAAC,KAAK,EAAC,KAAK,EAAC,OAAO,CAAC;gBAAE,IAAI,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,QAAQ,KAAK,QAAQ;oBAAE,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,GAAG,IAAA,kCAAsB,EAAC,KAAK,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,CAAC;YAC7J,KAAK,CAAC,KAAK,GAAG,KAAK,CAAC;QACtB,CAAC;QACD,OAAO,QAAQ,CAAC,KAAK,CAAC;QACtB,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,MAAM;YAAE,KAAK,CAAC,aAAa,GAAG,QAAQ,CAAC;;YAC5D,OAAO,KAAK,CAAC,aAAa,CAAC;QAChC,OAAO,GAAG,IAAI,CAAC;IACjB,CAAC;IACD,IAAI,YAAY,EAAE,CAAC;QACjB,QAAQ,CAAC,OAAO,CAAC,aAAa,GAAG,2BAA2B,CAAC,MAAM,CAAC,CAAC;QACrE,OAAO,GAAG,IAAI,CAAC;IACjB,CAAC;IACD,uEAAuE;IACvE,4EAA4E;IAC5E,IAAI,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QACrE,QAAQ,CAAC,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;QACtC,OAAO,GAAG,IAAI,CAAC;IACjB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/orchestration/history.d.ts

@@ -0,0 +1,13 @@
+import { SessionStore } from '../session/store';
+import { HistoryDB } from '../history/db';
+import { OrchestrationStore } from './store';
+/** Sidecar and canonical history cannot share a transaction. Each canonical
+ * writer deduplicates the same operation ID before the sidecar marks it done. */
+export declare class OrchestrationHistoryWriter {
+    private readonly orchestration;
+    private readonly sessions;
+    private readonly history;
+    constructor(orchestration: OrchestrationStore, sessions: SessionStore, history: HistoryDB);
+    write(operationId: string): Promise<void>;
+}
+//# sourceMappingURL=history.d.ts.map

package/dist/orchestration/history.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"history.d.ts","sourceRoot":"","sources":["../../src/orchestration/history.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAE1C,OAAO,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAG7C;iFACiF;AACjF,qBAAa,0BAA0B;IACzB,OAAO,CAAC,QAAQ,CAAC,aAAa;IAAsB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAAgB,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAApG,aAAa,EAAE,kBAAkB,EAAmB,QAAQ,EAAE,YAAY,EAAmB,OAAO,EAAE,SAAS;IACtI,KAAK,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CA0BhD"}

package/dist/orchestration/history.js

@@ -0,0 +1,48 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.OrchestrationHistoryWriter = void 0;
+const reply_context_1 = require("./reply-context");
+const types_1 = require("./types");
+/** Sidecar and canonical history cannot share a transaction. Each canonical
+ * writer deduplicates the same operation ID before the sidecar marks it done. */
+class OrchestrationHistoryWriter {
+    constructor(orchestration, sessions, history) {
+        this.orchestration = orchestration;
+        this.sessions = sessions;
+        this.history = history;
+    }
+    async write(operationId) {
+        const operation = this.orchestration.get('SELECT * FROM history_operations WHERE operation_id=?', operationId);
+        if (!operation)
+            throw new types_1.OrchestrationError('HISTORY_OPERATION_NOT_FOUND');
+        if (operation.state === 'completed')
+            return;
+        const conversation = this.orchestration.get('SELECT * FROM conversations WHERE id=?', operation.conversation_id);
+        const input = operation.input_id ? this.orchestration.get('SELECT * FROM conversation_inputs WHERE id=?', operation.input_id) : undefined;
+        const response = operation.response_id ? this.orchestration.get('SELECT * FROM assistant_responses WHERE id=?', operation.response_id) : undefined;
+        if (!input && !response)
+            throw new types_1.OrchestrationError('HISTORY_MESSAGE_NOT_FOUND');
+        if (input?.store_user_message === 0 || (response && !String(response.generated_text).trim())) {
+            this.orchestration.run("UPDATE history_operations SET state='completed',updated_at=? WHERE operation_id=?", Date.now(), operationId);
+            this.orchestration.run("UPDATE outbox SET state='completed' WHERE kind='history' AND dedup_key=?", operationId);
+            return;
+        }
+        const source = String(conversation.source);
+        const sessionId = String(conversation.agent_session_id), chatId = String(conversation.chat_id);
+        const message = { operationId, role: input ? 'user' : 'assistant',
+            content: String(input?.text ?? response?.generated_text), ts: Number(input?.created_at ?? response?.completed_at ?? response?.created_at) };
+        if (source === 'api')
+            await this.sessions.appendMessage(this.orchestration.agentId, sessionId, message);
+        else
+            await this.sessions.appendTelegramMessage(this.orchestration.agentId, chatId, sessionId, message, source);
+        const ingress = input ? JSON.parse(String(input.ingress_json ?? '{}')) : {};
+        if (input)
+            ingress.metadata = (0, reply_context_1.resolveStoredReply)(this.orchestration, { agentId: this.orchestration.agentId, agentSessionId: sessionId, source, accountId: String(conversation.account_id), chatId, threadKey: String(conversation.thread_key), principalId: String(input.principal_id) }, ingress.metadata);
+        const mediaFiles = input ? JSON.parse(String(input.attachment_refs_json)) : this.orchestration.all('SELECT path FROM task_files WHERE response_id=? ORDER BY created_at,id', response.id).map(row => String(row.path));
+        const ref = this.history.insertMessageOnce(operationId, { ...message, ...ingress.metadata, repliedToMessageId: ingress.metadata?.repliedMessageId, repliedToText: ingress.metadata?.repliedText, repliedToUser: ingress.metadata?.repliedSender, mediaFiles: mediaFiles.length ? mediaFiles : undefined, chatId: `${source}-${chatId}`, sessionId, source });
+        this.orchestration.run("UPDATE history_operations SET state='completed',canonical_message_ref=?,updated_at=? WHERE operation_id=?", String(ref), Date.now(), operationId);
+        this.orchestration.run("UPDATE outbox SET state='completed' WHERE kind='history' AND dedup_key=?", operationId);
+    }
+}
+exports.OrchestrationHistoryWriter = OrchestrationHistoryWriter;
+//# sourceMappingURL=history.js.map

package/dist/orchestration/history.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"history.js","sourceRoot":"","sources":["../../src/orchestration/history.ts"],"names":[],"mappings":";;;AAAA,mDAAqD;AAKrD,mCAA6C;AAE7C;iFACiF;AACjF,MAAa,0BAA0B;IACrC,YAA6B,aAAiC,EAAmB,QAAsB,EAAmB,OAAkB;QAA/G,kBAAa,GAAb,aAAa,CAAoB;QAAmB,aAAQ,GAAR,QAAQ,CAAc;QAAmB,YAAO,GAAP,OAAO,CAAW;IAAG,CAAC;IAChJ,KAAK,CAAC,KAAK,CAAC,WAAmB;QAC7B,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,uDAAuD,EAAE,WAAW,CAAC,CAAC;QAC/G,IAAI,CAAC,SAAS;YAAE,MAAM,IAAI,0BAAkB,CAAC,6BAA6B,CAAC,CAAC;QAC5E,IAAI,SAAS,CAAC,KAAK,KAAK,WAAW;YAAE,OAAO;QAC5C,MAAM,YAAY,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,wCAAwC,EAAE,SAAS,CAAC,eAAe,CAAE,CAAC;QAClH,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,8CAA8C,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1I,MAAM,QAAQ,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,8CAA8C,EAAE,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACnJ,IAAI,CAAC,KAAK,IAAI,CAAC,QAAQ;YAAE,MAAM,IAAI,0BAAkB,CAAC,2BAA2B,CAAC,CAAC;QACnF,IAAI,KAAK,EAAE,kBAAkB,KAAK,CAAC,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YAC7F,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,mFAAmF,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,WAAW,CAAC,CAAC;YACrI,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,0EAA0E,EAAE,WAAW,CAAC,CAAC;YAChH,OAAO;QACT,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,CAAqB,CAAC;QAC/D,MAAM,SAAS,GAAG,MAAM,CAAC,YAAY,CAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QAC/F,MAAM,OAAO,GAAG,EAAE,WAAW,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,MAAe,CAAC,CAAC,CAAC,WAAoB;YACjF,OAAO,EAAE,MAAM,CAAC,KAAK,EAAE,IAAI,IAAI,QAAQ,EAAE,cAAc,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,EAAE,UAAU,IAAI,QAAQ,EAAE,YAAY,IAAI,QAAQ,EAAE,UAAU,CAAC,EAAE,CAAC;QAC9I,IAAI,MAAM,KAAK,KAAK;YAAE,MAAM,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;;YACnG,MAAM,IAAI,CAAC,QAAQ,CAAC,qBAAqB,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QAC/G,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5E,IAAG,KAAK;YAAC,OAAO,CAAC,QAAQ,GAAC,IAAA,kCAAkB,EAAC,IAAI,CAAC,aAAa,EAAC,EAAC,OAAO,EAAC,IAAI,CAAC,aAAa,CAAC,OAAO,EAAC,cAAc,EAAC,SAAS,EAAC,MAAM,EAAC,SAAS,EAAC,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC,EAAC,MAAM,EAAC,SAAS,EAAC,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC,EAAC,WAAW,EAAC,MAAM,CAAC,KAAK,CAAC,YAAY,CAAC,EAAC,EAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACzR,MAAM,UAAU,GAAa,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,wEAAwE,EAAE,QAAS,CAAC,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QAClO,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,iBAAiB,CAAC,WAAW,EAAE,EAAE,GAAG,OAAO,EAAE,GAAG,OAAO,CAAC,QAAQ,EAAE,kBAAkB,EAAE,OAAO,CAAC,QAAQ,EAAE,gBAAgB,EAAE,aAAa,EAAE,OAAO,CAAC,QAAQ,EAAE,WAAW,EAAE,aAAa,EAAE,OAAO,CAAC,QAAQ,EAAE,aAAa,EAAE,UAAU,EAAE,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,MAAM,IAAI,MAAM,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;QAC7V,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,2GAA2G,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,WAAW,CAAC,CAAC;QAC1K,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,0EAA0E,EAAE,WAAW,CAAC,CAAC;IAClH,CAAC;CACF;AA5BD,gEA4BC"}

package/dist/orchestration/identity.d.ts

@@ -0,0 +1,6 @@
+import type { AgentConfig, ApiKey } from '../types';
+import type { ExecutionCapabilities } from './types';
+/** Config IDs survive key rotation; legacy keys have a non-reversible stable fallback. */
+export declare function apiPrincipal(key: ApiKey): string;
+export declare function apiExecutionCapabilities(agent: AgentConfig, key: ApiKey): ExecutionCapabilities;
+//# sourceMappingURL=identity.d.ts.map

package/dist/orchestration/identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.d.ts","sourceRoot":"","sources":["../../src/orchestration/identity.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AACpD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,SAAS,CAAC;AAErD,0FAA0F;AAC1F,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEhD;AACD,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,WAAW,EAAE,GAAG,EAAE,MAAM,GAAG,qBAAqB,CAE/F"}

package/dist/orchestration/identity.js

@@ -0,0 +1,13 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.apiPrincipal = apiPrincipal;
+exports.apiExecutionCapabilities = apiExecutionCapabilities;
+const crypto_1 = require("crypto");
+/** Config IDs survive key rotation; legacy keys have a non-reversible stable fallback. */
+function apiPrincipal(key) {
+    return key.id ? `api:${key.id}` : `api-sha256:${(0, crypto_1.createHash)('sha256').update(key.key).digest('hex')}`;
+}
+function apiExecutionCapabilities(agent, key) {
+    return { execute: agent.allow_tools ?? Boolean(key.allow_tools), writeMemory: false };
+}
+//# sourceMappingURL=identity.js.map

package/dist/orchestration/identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"identity.js","sourceRoot":"","sources":["../../src/orchestration/identity.ts"],"names":[],"mappings":";;AAKA,oCAEC;AACD,4DAEC;AAVD,mCAAoC;AAIpC,0FAA0F;AAC1F,SAAgB,YAAY,CAAC,GAAW;IACtC,OAAO,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,cAAc,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AACvG,CAAC;AACD,SAAgB,wBAAwB,CAAC,KAAkB,EAAE,GAAW;IACtE,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC;AACxF,CAAC"}

package/dist/orchestration/inference-errors.d.ts

@@ -0,0 +1,3 @@
+/** User-facing provider failures, without credentials or internal stack traces. */
+export declare function inferenceFailureMessage(error: unknown): string | undefined;
+//# sourceMappingURL=inference-errors.d.ts.map

package/dist/orchestration/inference-errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inference-errors.d.ts","sourceRoot":"","sources":["../../src/orchestration/inference-errors.ts"],"names":[],"mappings":"AAAA,mFAAmF;AACnF,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAQ1E"}

package/dist/orchestration/inference-errors.js

@@ -0,0 +1,16 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.inferenceFailureMessage = inferenceFailureMessage;
+/** User-facing provider failures, without credentials or internal stack traces. */
+function inferenceFailureMessage(error) {
+    const failure = error;
+    if (failure?.code === 'PROVIDER_CAPACITY')
+        return '503: Provider capacity is fully in use right now. Please try again later.';
+    if (failure?.code === 'PROVIDER_UNAVAILABLE')
+        return '503: The model provider is temporarily unavailable. Please try again shortly.';
+    if (failure?.code === 'INFERENCE_FAILED' && typeof failure.message === 'string' && /^API Error:/i.test(failure.message)) {
+        return failure.message.replace(/^API Error:\s*/i, '').replace(/Bearer\s+[^\s"']+/gi, 'Bearer [redacted]').replace(/sk-[A-Za-z0-9_-]+/g, '[redacted]').slice(0, 1000);
+    }
+    return undefined;
+}
+//# sourceMappingURL=inference-errors.js.map

package/dist/orchestration/inference-errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inference-errors.js","sourceRoot":"","sources":["../../src/orchestration/inference-errors.ts"],"names":[],"mappings":";;AACA,0DAQC;AATD,mFAAmF;AACnF,SAAgB,uBAAuB,CAAC,KAAc;IACpD,MAAM,OAAO,GAAG,KAAmD,CAAC;IACpE,IAAI,OAAO,EAAE,IAAI,KAAK,mBAAmB;QAAE,OAAO,2EAA2E,CAAC;IAC9H,IAAI,OAAO,EAAE,IAAI,KAAK,sBAAsB;QAAE,OAAO,+EAA+E,CAAC;IACrI,IAAI,OAAO,EAAE,IAAI,KAAK,kBAAkB,IAAI,OAAO,OAAO,CAAC,OAAO,KAAK,QAAQ,IAAI,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACxH,OAAO,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,iBAAiB,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,qBAAqB,EAAE,mBAAmB,CAAC,CAAC,OAAO,CAAC,oBAAoB,EAAE,YAAY,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IACvK,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/orchestration/input-images.d.ts

@@ -0,0 +1,12 @@
+import type { InputImage } from '../session/input-image';
+/** Load only scoped ingress media. Keep original refs in storage and worker context;
+ * base64 lives only in the transient inference request. Do not silently omit images. */
+export declare function loadInputImages(agentsRoot: string, agentId: string, refs?: string[]): Promise<{
+    images: InputImage[];
+    refs: string[];
+    unavailable: Array<{
+        ref: string;
+        reason: string;
+    }>;
+}>;
+//# sourceMappingURL=input-images.d.ts.map

package/dist/orchestration/input-images.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"input-images.d.ts","sourceRoot":"","sources":["../../src/orchestration/input-images.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AAWzD;wFACwF;AACxF,wBAAsB,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,GAAE,MAAM,EAAO,GAAG,OAAO,CAAC;IACvG,MAAM,EAAE,UAAU,EAAE,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAC;IAAC,WAAW,EAAE,KAAK,CAAC;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC3F,CAAC,CAmCD"}

package/dist/orchestration/input-images.js

@@ -0,0 +1,66 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.loadInputImages = loadInputImages;
+const fs_1 = require("fs");
+const promises_1 = require("fs/promises");
+const media_store_1 = require("../history/media-store");
+const MAX_IMAGE_BYTES = 5 * 1024 * 1024;
+const MAX_TURN_BYTES = 20 * 1024 * 1024;
+const MAX_IMAGES = 20;
+function imageMime(bytes) {
+    if (bytes.subarray(0, 8).equals(Buffer.from([137, 80, 78, 71, 13, 10, 26, 10])))
+        return 'image/png';
+    if (bytes[0] === 255 && bytes[1] === 216 && bytes[2] === 255)
+        return 'image/jpeg';
+    if (/^GIF8[79]a$/.test(bytes.subarray(0, 6).toString('ascii')))
+        return 'image/gif';
+    if (bytes.subarray(0, 4).toString() === 'RIFF' && bytes.subarray(8, 12).toString() === 'WEBP')
+        return 'image/webp';
+}
+/** Load only scoped ingress media. Keep original refs in storage and worker context;
+ * base64 lives only in the transient inference request. Do not silently omit images. */
+async function loadInputImages(agentsRoot, agentId, refs = []) {
+    const result = { images: [], refs: [], unavailable: [] };
+    let total = 0;
+    for (const ref of [...new Set(refs)]) {
+        let file;
+        try {
+            file = await (0, promises_1.open)(media_store_1.MediaStore.resolvePath(agentsRoot, agentId, ref), fs_1.constants.O_RDONLY | fs_1.constants.O_NOFOLLOW | fs_1.constants.O_NONBLOCK);
+            const stat = await file.stat();
+            if (!stat.isFile())
+                throw new Error('not a regular file');
+            const header = Buffer.alloc(12);
+            await file.read(header, 0, header.length, 0);
+            const mime = imageMime(header);
+            if (!mime) {
+                if (/\.(png|jpe?g|gif|webp|heic|heif|avif|svg|bmp|tiff?)$/i.test(ref))
+                    result.unavailable.push({ ref, reason: 'Unsupported or invalid image; resend as PNG, JPEG, GIF or WebP.' });
+                continue;
+            }
+            if (stat.size > MAX_IMAGE_BYTES || total + stat.size > MAX_TURN_BYTES || result.images.length >= MAX_IMAGES) {
+                result.unavailable.push({ ref, reason: 'Image input limit: 5 MiB per image, 20 MiB and 20 images per turn. Resize or send fewer images.' });
+                continue;
+            }
+            // Bounded positional read even if the source file grows concurrently.
+            const bytes = Buffer.alloc(stat.size);
+            let offset = 0;
+            while (offset < bytes.length) {
+                const { bytesRead } = await file.read(bytes, offset, bytes.length - offset, offset);
+                if (!bytesRead)
+                    throw new Error('incomplete image');
+                offset += bytesRead;
+            }
+            result.images.push({ type: 'image', source: { type: 'base64', media_type: mime, data: bytes.toString('base64') } });
+            result.refs.push(ref);
+            total += bytes.length;
+        }
+        catch {
+            result.unavailable.push({ ref, reason: 'Attachment unavailable. Do not claim to have inspected it; ask the user to resend if needed.' });
+        }
+        finally {
+            await file?.close();
+        }
+    }
+    return result;
+}
+//# sourceMappingURL=input-images.js.map

package/dist/orchestration/input-images.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"input-images.js","sourceRoot":"","sources":["../../src/orchestration/input-images.ts"],"names":[],"mappings":";;AAgBA,0CAqCC;AArDD,2BAA+B;AAC/B,0CAAmC;AACnC,wDAAoD;AAGpD,MAAM,eAAe,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AACxC,MAAM,cAAc,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AACxC,MAAM,UAAU,GAAG,EAAE,CAAC;AACtB,SAAS,SAAS,CAAC,KAAa;IAC9B,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QAAE,OAAO,WAAW,CAAC;IACpG,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG;QAAE,OAAO,YAAY,CAAC;IAClF,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAAE,OAAO,WAAW,CAAC;IACnF,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,MAAM,IAAI,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,EAAE,KAAK,MAAM;QAAE,OAAO,YAAY,CAAC;AACrH,CAAC;AACD;wFACwF;AACjF,KAAK,UAAU,eAAe,CAAC,UAAkB,EAAE,OAAe,EAAE,OAAiB,EAAE;IAG5F,MAAM,MAAM,GAAgD,EAAE,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC;IACtG,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QACrC,IAAI,IAAkD,CAAC;QACvD,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,IAAA,eAAI,EAAC,wBAAU,CAAC,WAAW,CAAC,UAAU,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,cAAS,CAAC,QAAQ,GAAG,cAAS,CAAC,UAAU,GAAG,cAAS,CAAC,UAAU,CAAC,CAAC;YACtI,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;YAC/B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;YAC1D,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YAChC,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YAC7C,MAAM,IAAI,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC;YAC/B,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,IAAI,uDAAuD,CAAC,IAAI,CAAC,GAAG,CAAC;oBAAE,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,iEAAiE,EAAE,CAAC,CAAC;gBACnL,SAAS;YACX,CAAC;YACD,IAAI,IAAI,CAAC,IAAI,GAAG,eAAe,IAAI,KAAK,GAAG,IAAI,CAAC,IAAI,GAAG,cAAc,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,IAAI,UAAU,EAAE,CAAC;gBAC5G,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,iGAAiG,EAAE,CAAC,CAAC;gBAC5I,SAAS;YACX,CAAC;YACD,sEAAsE;YACtE,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACtC,IAAI,MAAM,GAAG,CAAC,CAAC;YACf,OAAO,MAAM,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;gBAC7B,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,GAAG,MAAM,EAAE,MAAM,CAAC,CAAC;gBACpF,IAAI,CAAC,SAAS;oBAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;gBACpD,MAAM,IAAI,SAAS,CAAC;YACtB,CAAC;YACD,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;YACpH,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAAC,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,8FAA8F,EAAE,CAAC,CAAC;QAC3I,CAAC;gBAAS,CAAC;YAAC,MAAM,IAAI,EAAE,KAAK,EAAE,CAAC;QAAC,CAAC;IACpC,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/orchestration/instance-lock.d.ts

@@ -0,0 +1,5 @@
+/** A separate SQLite file holds an OS-released instance lock. This connection
+ * contains no application data and never shares task/history transactions.
+ * Unlike PID files it survives crashes without stale-file deletion races. */
+export declare function acquireInstanceLock(filename: string): () => void;
+//# sourceMappingURL=instance-lock.d.ts.map

package/dist/orchestration/instance-lock.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"instance-lock.d.ts","sourceRoot":"","sources":["../../src/orchestration/instance-lock.ts"],"names":[],"mappings":"AAIA;;6EAE6E;AAC7E,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,IAAI,CAehE"}

package/dist/orchestration/instance-lock.js

@@ -0,0 +1,33 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.acquireInstanceLock = acquireInstanceLock;
+const node_sqlite_1 = require("node:sqlite");
+const fs_1 = require("fs");
+const types_1 = require("./types");
+/** A separate SQLite file holds an OS-released instance lock. This connection
+ * contains no application data and never shares task/history transactions.
+ * Unlike PID files it survives crashes without stale-file deletion races. */
+function acquireInstanceLock(filename) {
+    const lock = new node_sqlite_1.DatabaseSync(filename);
+    try {
+        (0, fs_1.chmodSync)(filename, 0o600);
+        lock.exec('PRAGMA busy_timeout=0; BEGIN EXCLUSIVE;');
+    }
+    catch {
+        lock.close();
+        throw new types_1.OrchestrationError('ORCHESTRATION_ALREADY_RUNNING');
+    }
+    let released = false;
+    return () => {
+        if (released)
+            return;
+        released = true;
+        try {
+            lock.exec('ROLLBACK');
+        }
+        finally {
+            lock.close();
+        }
+    };
+}
+//# sourceMappingURL=instance-lock.js.map

package/dist/orchestration/instance-lock.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"instance-lock.js","sourceRoot":"","sources":["../../src/orchestration/instance-lock.ts"],"names":[],"mappings":";;AAOA,kDAeC;AAtBD,6CAA2C;AAC3C,2BAA+B;AAC/B,mCAA6C;AAE7C;;6EAE6E;AAC7E,SAAgB,mBAAmB,CAAC,QAAgB;IAClD,MAAM,IAAI,GAAG,IAAI,0BAAY,CAAC,QAAQ,CAAC,CAAC;IACxC,IAAI,CAAC;QACH,IAAA,cAAS,EAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC3B,IAAI,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;IACvD,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,CAAC,KAAK,EAAE,CAAC;QACb,MAAM,IAAI,0BAAkB,CAAC,+BAA+B,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,OAAO,GAAG,EAAE;QACV,IAAI,QAAQ;YAAE,OAAO;QACrB,QAAQ,GAAG,IAAI,CAAC;QAChB,IAAI,CAAC;YAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAAC,CAAC;gBAAS,CAAC;YAAC,IAAI,CAAC,KAAK,EAAE,CAAC;QAAC,CAAC;IAC1D,CAAC,CAAC;AACJ,CAAC"}