@abot-ai/runtime 1.5.0 → 1.7.0

package/src/runtime/README.md

@@ -154,14 +154,21 @@ isolation boundaries.
   `reviewer_verdict_v1` receipt to its exact caller. The receipt is passive
   canonical evidence; it does not choose remediation or finalization.
 - **Auditor** receives typed criteria and a complete canonical work inventory
-  in the direct policy. It independently selects whole original evidence,
+  in the direct policy. It independently selects evidence by execution ID,
   then returns a passive pass/gaps/needs_evidence advisory. A request for more
   evidence identifies the complete next bundle; the next root invocation of
   the same criteria binds those exact records without rerunning tools. Pass
-  requires full inventory classification and all needed originals in the
-  current bundle. Previews and prior advisory summaries are not proof.
-  Exact evidence is never compacted or truncated to fit. The configured model
-  context budget controls admission, with no separate fixed evidence-count or
+  requires full inventory classification and sufficient facts from all needed
+  entries in the current bundle. Previews and prior advisory summaries are not
+  proof. A verified existing EA source digest replaces the corresponding raw
+  adapter result, using the same source identity check as payload authoring;
+  new or uncompacted results retain their original representation. The audit
+  retains its own criteria and receives no EA continuation or decisions.
+  Summary omissions do not prove absence: missing material detail returns as
+  `gaps` for the EA to collect focused fresh evidence. `needs_evidence` selects
+  other existing representations, not hidden originals behind summaries.
+  Selected representations are never compacted again or truncated to fit. The
+  configured model context budget controls admission, with no separate fixed evidence-count or
   character ceiling. Exact duplicate receipt supplements use explicit paths
   into the same unchanged original adapter result. Capacity failures return a
   failed advisory instead of requesting repair of a valid evidence selection;
@@ -226,8 +233,11 @@ overall completion, or write the final response.
 Worker-owned and root-owned capabilities use the same `tool_payload.raw`
 payload author. The author validates the active principal against the frozen
 policy authority. The delegated Worker keeps its established assignment
-capsule; a direct root payload binds the exact request source, ordered steering,
-and immutable controls. Capability `intent` is bounded client-facing
+capsule; a direct root payload carries its selected bounded `operationObjective`
+through the same `authoringObjective` channel, bound to the exact request source,
+ordered steering and immutable controls. Fully selected controls need no extra
+model round. Controls-only objectives do not enter payload authoring.
+Capability `intent` is bounded client-facing
 presentation metadata and is never projected as payload authority or execution
 evidence. Before Worker payload or result authoring, dependency results are
 narrowed to their existing result fields and optional `semanticCheckpoints`;
@@ -235,6 +245,22 @@ work receipts and derived lineage do not cross either raw authoring boundary.
 There is no second payload or adapter pipeline for
 `execution-agent-v1`.
 
+When an Execution Agent operation has remaining controls, its decision selects
+`controlsEvidenceExecutionIds` from the settled executions of that same root
+call. The decision state exposes eligible IDs even after root compaction. An
+empty selection supplies no prior tool-result bodies to Controls. Selected
+results use the canonical evidence projection once per batch; each slot retains
+its own evidence bindings and bounded operation objective. Results already
+covered by the same EA call's verified checkpoint use their source digests;
+fresh or uncovered results retain their original representation. Reuse uses
+the shared source identity check and transfers neither the EA continuation nor
+unselected sources. The canonical ledger and selected-result binding stay exact;
+only the model-visible bodies change. Controls compaction
+is bound to that frozen assignment and steering version. The selection field
+ends at refinement and never enters adapter controls or prepared approvals.
+The delegated Supervisor workflow retains its shared Worker evidence scope and
+staged decision, Controls, payload, result and review contracts.
+
 When direct capability controls refinement exhausts structured-output
 validation, the kernel commits the canonical
 `reconsider_capability_selection` RoleCall transition. It records the exact
@@ -393,22 +419,95 @@ output-token limit.
 
 Current-session conversation continuity is core-owned. The raw transcript stays
 canonical, while root decision and response steps receive one passive session
-checkpoint plus every uncovered complete turn. At the shared 70 percent
-context threshold, the runtime summarizes only the old settled prefix and
-keeps the latest ten complete user-agent turns raw. The checkpoint is persisted
-with exact message fingerprints and an optimistic source revision; it is not
+checkpoint plus every uncovered settled turn. A standalone assistant initiative
+is a settled turn with no user message; it stays in ordinary chronological history
+and follows the same retention policy. At the shared 70 percent context threshold,
+the runtime summarizes only the old settled prefix and keeps the latest ten turns
+raw. The checkpoint is persisted with exact message fingerprints and an optimistic
+source revision; it is not
 projected to Planner, Worker, Reviewer, Auditor, payload authors, or tools.
 Profiles cannot cap conversation messages independently. Client lifecycle uses
 the existing `context.compaction.*` events, with `session_history` retained as
 diagnostic scope metadata.
 
+Active-request semantic checkpoints retain their separate source scope. The
+compactor receives invocation-local source keys, and each returned digest is
+bound to that key before the runtime stores the existing v2 checkpoint. Every
+checkpoint projection identifies its contents as passive evidence from the
+listed sources; an omitted fact does not establish absence or change the active
+assignment, tool authority, approval state, or completion status.
+
+The complete active-request checkpoint (source digests, continuation, and its
+reference envelope) has a shared token budget of 30 percent of the consuming
+model's configured context window. Generation validates the projected checkpoint
+using provider input counting when available, otherwise the configured estimator.
+There is no aggregate 8,000-character quota. Structural identity and per-field
+continuation constraints remain enforced; full-message admission separately
+accounts for instructions, other retained input, and response headroom. Oversized
+checkpoint output uses the existing repair path with measured usage and allowance.
+
+Immediate operation-supervision evidence is bound to the current request, call,
+activation and ledger revision. After checkpoint projection, EA decision/response
+and SUPER Worker decision/result inputs retain an exact action/result reference
+when that lane remains present. If the same owner's verified checkpoint covers
+the canonical result, the notice keeps its accepted action and outcome receipt
+and refers to that checkpoint's partial source digest instead of restoring the
+raw result. The binding uses registered source bytes and fingerprints, never
+model-authored envelope labels. Uncovered and cross-call evidence keeps its
+canonical original. The final input, including this evidence, passes ordinary
+context admission before a new checkpoint is committed. Controls and payload
+authors do not receive this current supervision capsule.
+
 Every tool and skill binding is declared once by a package under root
-`plugins/`. Runtime config only applies `plugins.enabled`, `plugins.allow`, and
-`plugins.deny`. The request-scoped capability provider projects the effective
+`plugins/`. Runtime config applies `plugins.enabled`, `plugins.allow`,
+`plugins.deny`, and the exact-ID `plugins.disabledPluginIds` block list.
+Exact disabled plugin IDs do not match capability names or qualified selectors. The request-scoped capability provider projects the effective
 registered operations generically for an authorized Worker or root. Adding,
 removing, or renaming a tool must not require a request-runner or role prompt
 branch.
 
+
+A model profile may further narrow this catalog through `plugins.deny`.
+The request captures these selectors from its effective primary profile in the
+existing execution selection, including the saved approval continuation.
+The shared request Tool Registry applies them alongside permission-mode
+restrictions to discovery and execution for both root policies. Per-step model
+overrides cannot change the captured restriction; other requests retain their
+own profile selection. The metadata is not projected to the model gateway.
+
+ABot Studio draft authoring uses the same capability engine. The
+`automation_builder` capability creates a draft from optional `settings` and
+ordered `steps`. Each step has a local `key`; explicit `$key` result bindings
+connect steps, and parallel steps contain arrays of branch steps. A focused
+compiler generates the canonical mutation envelopes, parent references and
+positions, with the same defaults as individual edits. Updating an existing
+draft still uses the canonical mutation batch and expected revision; legacy
+batch creation remains supported. Both routes commit in one transaction.
+The draft manager owns generated node IDs,
+local-reference resolution, graph validation, revision checks, and the single
+commit. A rejected group persists none of its changes. The model-facing
+authoring surface offers connected writes, discovery, reads,
+validation and saved-agent reuse. Granular editing actions remain supported by
+the direct adapter API but are not offered as competing model capabilities. Neither
+authoring capability can grant permission, publish, activate, or run a draft,
+and neither is selectable as a step within an automation.
+
+Model-facing `browse_catalog` reads the compact global index without requiring
+a draft. `prepare_draft` resolves a bounded set of exact operation references
+from that canonical catalog and returns their schemas plus the complete
+authoring reference. That passive reference includes structured agent results,
+bindings, settings and their limits; it grants no authority to execute future
+steps. Discovery controls are selected completely so no extra controls-model
+round is required. Legacy direct catalog and granular-edit contracts remain
+available for compatibility.
+The builder declares one structured payload stage through the existing generic
+tool metadata. Its bounded generation schema reaches both root and Worker
+payload models and is projected by each provider adapter. Canonical parsers
+still enforce field limits, references and graph semantics before persistence;
+the generation format neither repairs invalid output nor retries it.
+Authoring changes do not alter context-window capacity, compaction, role
+authority, or the shared request loop.
+
 Environment profiles under `environment.profiles` isolate generated runtime
 data roots. Model profiles under `models.profiles` select providers,
 calibration, and optionally one registered `execution.policy`. Omission uses

package/src/runtime/scheduler/README.md

@@ -21,6 +21,19 @@ settling into a restarted generation. Startup marks previously running requests
 Jobs to their next future occurrence. It never retries an interrupted or failed
 request or backfills missed occurrences.
 
+Automation session reconciliation runs after startup recovery under the same
+exclusive ownership, before dispatch is enabled; lazy service startup uses this
+boundary too. The file adapter retires only complete persisted `automationOrigin`
+records whose exact session ID has no issued active handle. Each pass scans at
+most 256 regular JSON records and retires at most 64 internal sessions, advancing
+a cursor through ordinary records and failed candidates. Attachments are removed
+before the transcript so failed cleanup keeps its durable ownership marker.
+Attempt deletion first installs its existing tombstone, blocking late transcript
+writes while attachment cleanup waits. Cleanup failures are reported without
+disabling scheduled work, and existing five-minute maintenance can try later.
+Ordinary conversations, canonical run results and source snapshots are untouched;
+injected adapters participate only through the optional trusted recovery hook.
+
 A session deletion reserves its start barrier synchronously, including while
 startup is queued. Passing the running-state check confirms deletion; a rejected
 lifecycle call releases only its own reservation. A storage failure after
@@ -45,6 +58,9 @@ is uncertain. The owned store rejects further cached reads, writes and cleanup
 until explicitly released and reacquired; it does not retry a mutation or dispatch
 an unconfirmed claim. Both old and new files remain available. Reacquisition validates
 and syncs the visible head and its directory dependencies before cleanup.
+Automation result files follow the same boundary: uncertain publication preserves
+their bytes, and existing retention maintenance reclaims unreferenced owned files
+only after reading a durable journal head. In-flight publications remain protected.
 These barriers rely on the filesystem and device honoring fsync; they are not a
 backup or repair mechanism for pre-existing corruption.
 
@@ -112,6 +128,17 @@ interval cannot block another Job or startup recovery. The Web editor retains
 the exact saved interval anchor when its displayed field is unchanged, including
 seconds, milliseconds and the selected occurrence of a repeated local time.
 
+Automation draft readiness uses the same next-occurrence and interval-range
+checks as scheduler admission, including the publication clock and time zone.
+New or changed elapsed one-shot dates produce a normal validation issue before
+publication; unchanged authored timing keeps its published timer deadline or
+implicit interval/folder polling anchor across title and graph edits. Actual
+duration, anchor or trigger-kind edits establish new timing. Time-zone metadata
+changes reschedule calendar forms only. The exact retained publication identifies
+unchanged timing, and a concurrent Job revision change rejects publication atomically.
+Manually replaying a frozen run validates its schedule shape without requiring
+a new future scheduled occurrence.
+
 Calendar conversion uses `Intl.DateTimeFormat` from the host's IANA time-zone data.
 Missing wall times/days are skipped; repeated local times select their first
 occurrence once. Intervals preserve elapsed-time cadence across DST.
@@ -170,3 +197,39 @@ admission and reject a deleted session before executing its request.
 
 The model and Web layers share this service. Natural-language interpretation,
 model choice, conversation projection, and UI rendering do not belong here.
+
+## Automation folder retention and capacity
+
+Folder input history, including baseline exclusions and consumed-version dedup
+records, is bounded to 32 MiB of metadata per automation across all of its source
+IDs and roots. Reaching that bound stops intake for that automation; changing a
+source ID does not reset it, and unrelated automations can continue. History is
+preserved rather than silently making old file versions eligible again. This
+does not promise indefinite intake for one automation without a capacity stop.
+Retained input snapshots additionally share environment limits of 1,000 records,
+32 MiB of snapshot-record metadata and 256 MiB of file bytes.
+
+Snapshots, including held failed/interrupted inputs, can retire after every
+referencing report expires at 90 days and no unresolved effect remains. Fulfilled
+late settlements (`succeeded` or `failed`) resolve that retention blocker while
+the original uncertain outcome remains historical evidence. Missing or rejected
+late settlements continue protecting the affected payloads. A newer
+replay or active execution keeps its input snapshot. Root-specific baseline
+exclusions preserve the original snapshot and replay identity when a source
+changes to an overlapping directory. A batch searches for a feasible minimum
+file count within its 32 MiB byte limit; oversized candidates remain pending.
+
+New source snapshots are preceded by a durable preparation marker. Existing
+scheduler maintenance and source preparation reconcile these markers: a committed
+input/run preserves its snapshots, an active preparation is protected, and a
+marker abandoned by a crashed process authorizes removal of only that candidate's
+attachments. Unmarked attachment owners are never inferred to be automation
+orphans; ordinary conversation attachments remain outside this cleanup.
+
+Automation run reads add a transient output summary from the frozen graph's
+terminal producers, including separate parallel tails. At most four saved
+outputs are previewed with an explicit omitted count and the existing 4,000
+character limit per text/data part; full step evidence remains a separate read.
+These previews preserve step status and distinguish available, expired and
+unavailable output. They neither infer a business outcome from model text nor
+extend retention by copying output into the persisted compact report.

package/dist/src/web-ui/app/components/passive-learning/proposal-notifications.js

@@ -1,106 +0,0 @@
-const MAX_SEEN_DELIVERIES = 100;
-
-function isProposalDelivery(message, environmentId) {
-  if (message?.type !== "learning.changed") return false;
-  if (message.environmentId !== environmentId) return false;
-  if (message.event?.type !== "proposal_delivered") return false;
-  return [message.event.proposalId, message.event.sessionId].every(
-    (id) =>
-      typeof id === "string" &&
-      id.length > 0 &&
-      id.length <= 256 &&
-      !/[\u0000-\u001f\u007f]/u.test(id),
-  );
-}
-
-/** Live deliveries alone announce themselves. Restored snapshots never produce a toast. */
-export function createProposalNotifications({
-  getEnvironmentId,
-  openSession,
-  getDocument = () => document,
-}) {
-  const seen = new Set();
-  let root;
-  let current;
-  let ownerDocument;
-
-  function syncVisibility() {
-    if (!root) return;
-    root.hidden = !current || ownerDocument.visibilityState === "hidden";
-  }
-
-  function hide() {
-    current = undefined;
-    if (root) root.hidden = true;
-  }
-
-  async function handleClick(event) {
-    const button = event.target.closest("button");
-    if (!button || !root?.contains(button)) return;
-    if (button.matches("[data-proposal-notice-close]")) {
-      hide();
-      return;
-    }
-    if (!button.matches("[data-proposal-notice-open]")) return;
-    const proposal = current;
-    if (!proposal || proposal.environmentId !== getEnvironmentId()) {
-      hide();
-      return;
-    }
-    button.disabled = true;
-    try {
-      const opened = await openSession(
-        proposal.sessionId,
-        proposal.environmentId,
-      );
-      if (current === proposal && opened !== false) hide();
-    } catch {
-      if (current !== proposal) return;
-      root.querySelector("[data-proposal-notice-description]").textContent =
-        "The conversation could not be opened. You can also find it in Chats.";
-    } finally {
-      if (current === proposal) button.disabled = false;
-    }
-  }
-
-  function mount() {
-    if (root) return;
-    const doc = getDocument();
-    ownerDocument = doc;
-    root = doc.createElement("aside");
-    root.className = "co-worker-proposal-toast";
-    root.setAttribute("role", "status");
-    root.setAttribute("aria-live", "polite");
-    root.setAttribute("aria-atomic", "true");
-    root.addEventListener("click", handleClick);
-    doc.addEventListener?.("visibilitychange", syncVisibility);
-    doc.body.append(root);
-  }
-
-  return Object.freeze({
-    handleRealtime(message) {
-      const environmentId = getEnvironmentId();
-      if (!isProposalDelivery(message, environmentId)) return;
-      const key = JSON.stringify([environmentId, message.event.proposalId]);
-      if (seen.has(key)) return;
-      seen.add(key);
-      if (seen.size > MAX_SEEN_DELIVERIES)
-        seen.delete(seen.values().next().value);
-      mount();
-      current = { environmentId, sessionId: message.event.sessionId };
-      root.innerHTML = `<div class="co-worker-proposal-toast-copy"><p>ABot Spark has a suggestion</p>
-        <span data-proposal-notice-description>A new conversation is ready when you are.</span>
-        <button type="button" class="home-text-button" data-proposal-notice-open>Read suggestion ↗</button></div>
-        <button type="button" class="home-text-button" data-proposal-notice-close aria-label="Dismiss notification">×</button>`;
-      syncVisibility();
-    },
-    environmentChanged: hide,
-    dispose() {
-      hide();
-      root?.removeEventListener("click", handleClick);
-      ownerDocument?.removeEventListener?.("visibilitychange", syncVisibility);
-      root?.remove();
-      root = undefined;
-    },
-  });
-}

package/dist/src/web-ui/app/components/passive-learning/proposal-read-state.js

@@ -1,23 +0,0 @@
-import { isSessionReadStateUnavailable } from "../../lib/session-read-state.js";
-
-function hasReadProposalConversation(proposal, sessions) {
-  const session = sessions.find((item) => item.id === proposal.sessionId);
-  if (!session || isSessionReadStateUnavailable(session)) return false;
-  // Each proposal starts its own conversation. Any confirmed assistant read
-  // boundary in that conversation includes the opening proposal.
-  return Boolean(session.lastReadMessageId ?? session.readState?.lastReadMessageId);
-}
-
-/** Invitations reflect confirmed reads without changing the stored proposal history. */
-export function visibleProposalSnapshot(snapshot, sessionSnapshot) {
-  if (!snapshot.status?.proactive) return snapshot;
-  if (!sessionSnapshot) return snapshot;
-  if (sessionSnapshot.environmentId !== snapshot.environmentId) return snapshot;
-  const proposals = (snapshot.status.proactive.proposals ?? []).filter(
-    (proposal) => !hasReadProposalConversation(proposal, sessionSnapshot.sessions),
-  );
-  return {
-    ...snapshot,
-    status: { ...snapshot.status, proactive: { ...snapshot.status.proactive, proposals } },
-  };
-}

package/dist/src/web-ui/app/components/passive-learning/proposal-view.js

@@ -1,23 +0,0 @@
-import { escapeAttribute, escapeHtml } from "../../lib/text-format.js";
-const renderKeys = new WeakMap();
-
-export function renderLearningProposals(root, snapshot, { limit = 3 } = {}) {
-  const container = root.querySelector("[data-learning-proposals]");
-  if (!container) return;
-  const proposals = [...(snapshot.status?.proactive?.proposals ?? [])].reverse().filter((item) => item.status === "delivered").slice(0, limit);
-  const key = JSON.stringify([snapshot.environmentId, proposals, snapshot.dismissingProposalId, snapshot.proposalError]);
-  if (renderKeys.get(container) === key) return;
-  renderKeys.set(container, key);
-  container.innerHTML = proposals.map((item) => `<article class="co-worker-proposal"><div class="co-worker-proposal-icon" aria-hidden="true">✦</div><div><span class="co-worker-eyebrow">ABot Spark · conversation ready</span><h4 dir="auto">${escapeHtml(item.title)}</h4><p dir="auto">${escapeHtml(item.message)}</p><div class="co-worker-proposal-actions"><button type="button" data-learning-proposal-open="${escapeAttribute(item.id)}">Open conversation ↗</button><button type="button" data-learning-proposal-dismiss="${escapeAttribute(item.id)}"${snapshot.dismissingProposalId ? " disabled" : ""}>Not now</button></div></div></article>`).join("") + (snapshot.proposalError ? `<p role="status">${escapeHtml(snapshot.proposalError)}</p>` : "");
-}
-
-export function handleProposalClick(root, event, actions = {}) {
-  const open = event.target.closest("[data-learning-proposal-open]");
-  if (open && root.contains(open)) { void actions.openProposal?.(open.dataset.learningProposalOpen); return true; }
-  const dismiss = event.target.closest("[data-learning-proposal-dismiss]");
-  if (dismiss && root.contains(dismiss)) {
-    if (!dismiss.disabled) void actions.dismissProposal?.(dismiss.dataset.learningProposalDismiss);
-    return true;
-  }
-  return false;
-}

package/dist/src/web-ui/app/components/spark-conversation-actions.js

@@ -1,62 +0,0 @@
-export function createSparkConversationActions({
-  getScope,
-  getMessages,
-  getActiveRequestId = () => "",
-  preferences,
-  archiveSession,
-  onArchived = () => {},
-  notify = () => {},
-  documentRoot = document,
-}) {
-  function canReview(message, scope) {
-    if (!scope.environmentId || !scope.sessionId || !preferences) return false;
-    if (getActiveRequestId() || message.streaming || !message.sparkProposalId) return false;
-    const messages = getMessages();
-    if (messages.some((item) => item.role === "user")) return false;
-    if (messages.find((item) => item.role === "assistant") !== message) return false;
-    if (preferences.loadSessionSidebar(scope.environmentId).archivedSessionIds.includes(scope.sessionId)) return false;
-    return !preferences.hasKeptSparkConversation(scope.environmentId, scope.sessionId);
-  }
-
-  function createNode(message, { onKept = () => {} } = {}) {
-    const scope = getScope();
-    if (!canReview(message, scope)) return null;
-    const row = documentRoot.createElement("div");
-    row.className = "spark-conversation-actions";
-    row.setAttribute("role", "group");
-    row.setAttribute("aria-label", "ABot Spark conversation");
-
-    function choose(action) {
-      const current = getScope();
-      if (current.environmentId !== scope.environmentId || current.sessionId !== scope.sessionId) return;
-      if (!canReview(message, scope)) return;
-      try {
-        if (action === "keep") {
-          preferences.keepSparkConversation(scope.environmentId, scope.sessionId);
-          row.hidden = true;
-          onKept();
-          notify("Conversation kept", "success");
-          return;
-        }
-        if (archiveSession?.(scope.sessionId) !== true) return;
-        row.hidden = true;
-        onArchived();
-      } catch {
-        notify("Could not save your choice in this browser. Please try again.", "failed");
-      }
-    }
-
-    for (const [action, label] of [["keep", "Keep"], ["archive", "Not interested"]]) {
-      const button = documentRoot.createElement("button");
-      button.type = "button";
-      button.textContent = label;
-      button.className = "spark-conversation-choice";
-      if (action === "archive") button.title = "Archive this conversation in this browser";
-      button.addEventListener("click", () => choose(action));
-      row.appendChild(button);
-    }
-    return row;
-  }
-
-  return { createNode };
-}

package/dist/src/web-ui/app/services/spark-conversation-preferences.js

@@ -1,27 +0,0 @@
-const storageKey = "abot-web.keptSparkConversations";
-const receiptLimit = 500;
-
-export function createSparkConversationPreferences(storage) {
-  function receipts() {
-    try {
-      const value = JSON.parse(storage.getItem(storageKey) || "[]");
-      return Array.isArray(value)
-        ? value.filter((key) => typeof key === "string").slice(-receiptLimit)
-        : [];
-    } catch {
-      return [];
-    }
-  }
-
-  const keyFor = (environmentId, sessionId) => JSON.stringify([environmentId, sessionId]);
-  return {
-    hasKeptSparkConversation(environmentId, sessionId) {
-      return receipts().includes(keyFor(environmentId, sessionId));
-    },
-    keepSparkConversation(environmentId, sessionId) {
-      const key = keyFor(environmentId, sessionId);
-      const kept = receipts().filter((value) => value !== key);
-      storage.setItem(storageKey, JSON.stringify([...kept, key].slice(-receiptLimit)));
-    },
-  };
-}

package/dist/src/web-ui/app/styles/29-spark-conversation.css

@@ -1,19 +0,0 @@
-.spark-conversation-actions {
-  display: flex;
-  flex-wrap: wrap;
-  gap: 8px;
-  margin-top: 14px;
-}
-
-.spark-conversation-actions[hidden] { display: none; }
-
-.spark-conversation-choice {
-  min-height: 32px;
-  padding: 5px 11px;
-  border-color: var(--line);
-  background: var(--panel-soft);
-  color: var(--text);
-  font-size: var(--font-size-sm);
-  font-weight: 400;
-  box-shadow: none;
-}

package/dist/src/web-ui/system-host-setup/companion-windows.d.ts

@@ -1,2 +0,0 @@
-import { type CompanionInstallerInput } from "./installer-contract.js";
-export declare function renderWindowsCompanionScript(input: CompanionInstallerInput): string;

package/dist/src/web-ui/system-host-setup/companion-windows.js

@@ -1,108 +0,0 @@
-import { installerMetadataBase64, } from "./installer-contract.js";
-import { COMPANION_NODE_DISTRIBUTIONS, COMPANION_NODE_VERSION, } from "./node-distribution.js";
-import { wrapWindowsSetupScript } from "./windows-script-wrapper.js";
-export function renderWindowsCompanionScript(input) {
-    const metadata = installerMetadataBase64({
-        ...input,
-        nodeVersion: COMPANION_NODE_VERSION,
-        distributions: COMPANION_NODE_DISTRIBUTIONS,
-    });
-    return wrapWindowsSetupScript(String.raw `
-$ErrorActionPreference = 'Stop'
-$ProgressPreference = 'SilentlyContinue'
-$OutputEncoding = New-Object System.Text.UTF8Encoding($false)
-$Metadata = [Text.Encoding]::UTF8.GetString([Convert]::FromBase64String('${metadata}')) | ConvertFrom-Json
-$Temporary = $null
-function Assert-CompanionDirectory {
-  if ((Get-Item -LiteralPath $Base).Attributes -band [IO.FileAttributes]::ReparsePoint) { throw 'The companion installation directory must not be a link.' }
-}
-function Invoke-VerifiedCompanionSetup {
-  if (-not (Test-Path -LiteralPath $Node -PathType Leaf)) { throw 'The cached Node.js runtime is missing. Restore this installation before resuming setup.' }
-  if (-not (Test-Path -LiteralPath $Bundle -PathType Leaf)) { throw 'The cached companion bundle is missing. Restore this installation before resuming setup.' }
-  Assert-CompanionDirectory
-  if ((& $Node --version) -ne $Metadata.nodeVersion -or $LASTEXITCODE -ne 0) { throw 'The dedicated Node.js runtime could not be verified.' }
-  if ((Get-FileHash -LiteralPath $Bundle -Algorithm SHA256).Hash -ne $Metadata.bundleSha256) { throw 'The existing companion bundle does not match its recorded checksum.' }
-  Write-Host 'Connecting this computer and enabling startup at sign-in...'
-  $Setup = @{ url = $Metadata.url; code = $Metadata.code }
-  if ($Metadata.upgradeHostId) { $Setup.upgradeHostId = $Metadata.upgradeHostId }
-  $Payload = $Setup | ConvertTo-Json -Compress
-  $Payload | & $Node $Bundle setup
-  if ($LASTEXITCODE -ne 0) { throw 'Companion setup did not complete. Check the message above before resuming setup.' }
-  Write-Host 'Companion setup completed. Return to ABot to check the computer connection.'
-}
-function Get-VerifiedDownload([string]$Url, [string]$Destination, [string]$ExpectedHash, [string]$Bearer = '') {
-  $Original = [Uri]$Url
-  $Address = $Original
-  if ($Original.Host -eq 'localhost' -or $Original.Host.EndsWith('.localhost')) {
-    $Builder = New-Object UriBuilder($Original)
-    $Builder.Host = '127.0.0.1'
-    $Address = $Builder.Uri
-  }
-  $Request = [Net.HttpWebRequest]::Create($Address)
-  $Request.Host = $Original.Authority
-  $Request.AllowAutoRedirect = $false
-  $Request.Timeout = 300000
-  $Request.ReadWriteTimeout = 300000
-  $Request.Proxy = $null
-  if ($Bearer) { $Request.Headers['Authorization'] = 'Bearer ' + $Bearer }
-  $Response = $null
-  $File = $null
-  try {
-    $Response = $Request.GetResponse()
-    if ([int]$Response.StatusCode -ne 200) { throw 'The download endpoint did not return a file.' }
-    $File = [IO.File]::Open($Destination, [IO.FileMode]::CreateNew)
-    $Response.GetResponseStream().CopyTo($File)
-  } finally {
-    if ($File) { $File.Dispose() }
-    if ($Response) { $Response.Dispose() }
-  }
-  if ((Get-FileHash -LiteralPath $Destination -Algorithm SHA256).Hash -ne $ExpectedHash) {
-    throw 'Checksum verification failed. The downloaded file will not be executed.'
-  }
-}
-try {
-  $Base = Join-Path ([Environment]::GetFolderPath('LocalApplicationData')) 'ABot\HostCompanion'
-  $Architecture = $env:PROCESSOR_ARCHITECTURE
-  if ($env:PROCESSOR_ARCHITEW6432) { $Architecture = $env:PROCESSOR_ARCHITEW6432 }
-  $Key = switch ($Architecture.ToUpperInvariant()) { 'AMD64' { 'win-x64' }; 'ARM64' { 'win-arm64' }; default { throw 'This Windows architecture is not supported by companion setup.' } }
-  $Distribution = $Metadata.distributions.$Key
-  $NodeDirectory = Join-Path $Base ([IO.Path]::GetFileNameWithoutExtension($Distribution.archive))
-  $Node = Join-Path $NodeDirectory 'node.exe'
-  $Bundle = Join-Path $Base ('companion-' + $Metadata.bundleSha256 + '.mjs')
-  $ExistingConnection = Join-Path ([Environment]::GetFolderPath('UserProfile')) '.abot\host-companion\connection.json'
-  $CanResumeCached = (Test-Path -LiteralPath $ExistingConnection -PathType Leaf) -and (Test-Path -LiteralPath $Node -PathType Leaf) -and (Test-Path -LiteralPath $Bundle -PathType Leaf)
-  if ($CanResumeCached) {
-    Invoke-VerifiedCompanionSetup
-    exit 0
-  }
-  if ([DateTimeOffset]::UtcNow -ge [DateTimeOffset]::Parse($Metadata.expiresAt)) { throw 'This setup invitation expired. Download a fresh setup file in ABot.' }
-  [Net.ServicePointManager]::SecurityProtocol = [Net.ServicePointManager]::SecurityProtocol -bor [Net.SecurityProtocolType]::Tls12
-  [IO.Directory]::CreateDirectory($Base) | Out-Null
-  Assert-CompanionDirectory
-  $Temporary = Join-Path $Base ('setup-' + [Guid]::NewGuid().ToString('N'))
-  [IO.Directory]::CreateDirectory($Temporary) | Out-Null
-  if (-not (Test-Path -LiteralPath $Node -PathType Leaf)) {
-    Write-Host 'Downloading the verified per-user Node.js runtime...'
-    $Archive = Join-Path $Temporary 'node.zip'
-    Get-VerifiedDownload ('https://nodejs.org/dist/' + $Metadata.nodeVersion + '/' + $Distribution.archive) $Archive $Distribution.sha256
-    $Extracted = Join-Path $Temporary 'node'
-    Expand-Archive -LiteralPath $Archive -DestinationPath $Extracted
-    Move-Item -LiteralPath (Join-Path $Extracted ([IO.Path]::GetFileNameWithoutExtension($Distribution.archive))) -Destination $NodeDirectory
-  }
-  Write-Host 'Downloading and verifying the ABot companion...'
-  $Candidate = Join-Path $Temporary 'companion.mjs'
-  Get-VerifiedDownload ($Metadata.url + '/web-api/runtime/system-host/bundle') $Candidate $Metadata.bundleSha256 $Metadata.code
-  if (-not (Test-Path -LiteralPath $Bundle)) { Move-Item -LiteralPath $Candidate -Destination $Bundle }
-  Invoke-VerifiedCompanionSetup
-} catch {
-  Write-Host ('Setup failed: ' + $_.Exception.Message) -ForegroundColor Red
-  exit 1
-} finally {
-  if ($Temporary -and (Test-Path -LiteralPath $Temporary)) {
-    $ResolvedBase = [IO.Path]::GetFullPath($Base).TrimEnd('\') + '\'
-    $ResolvedTemporary = [IO.Path]::GetFullPath($Temporary)
-    if ($ResolvedTemporary.StartsWith($ResolvedBase, [StringComparison]::OrdinalIgnoreCase)) { Remove-Item -LiteralPath $ResolvedTemporary -Recurse -Force }
-  }
-}
-`);
-}