@agent-native/core 0.77.24 → 0.78.1

package/dist/file-upload/actions/upload-image.d.ts

@@ -3,18 +3,18 @@ declare const _default: import("../../action.js").ActionDefinition<{
     url?: string;
     filename?: string;
 }, {
-    id?: undefined;
     error: string;
     configured?: undefined;
     connectPath?: undefined;
     url?: undefined;
+    id?: undefined;
     provider?: undefined;
 } | {
-    id?: undefined;
     error: string;
     configured: boolean;
     connectPath: string;
     url?: undefined;
+    id?: undefined;
     provider?: undefined;
 } | {
     error?: undefined;

package/dist/notifications/routes.d.ts

@@ -13,13 +13,13 @@
 export declare function createNotificationsHandler(): import("h3").EventHandlerWithFetch<import("h3").EventHandlerRequest, Promise<"" | import("./types.js").Notification[] | {
     count: number;
     updated?: undefined;
-    error?: undefined;
     ok?: undefined;
+    error?: undefined;
 } | {
     count?: undefined;
     updated: number;
-    error?: undefined;
     ok?: undefined;
+    error?: undefined;
 } | {
     count?: undefined;
     updated?: undefined;
@@ -28,7 +28,7 @@ export declare function createNotificationsHandler(): import("h3").EventHandlerW
 } | {
     count?: undefined;
     updated?: undefined;
-    error?: undefined;
     ok: boolean;
+    error?: undefined;
 }>>;
 //# sourceMappingURL=routes.d.ts.map

package/dist/observability/routes.d.ts

@@ -41,28 +41,28 @@ export declare function createObservabilityHandler(): import("h3").EventHandlerW
     thumbsUpRate: number;
     avgEvalScore: number;
 } | {
-    error?: undefined;
-    ok?: undefined;
     summary: import("./types.js").TraceSummary;
     spans: import("./types.js").TraceSpan[];
+    ok?: undefined;
+    error?: undefined;
     id?: undefined;
 } | {
-    error?: undefined;
-    ok?: undefined;
     summary?: undefined;
     spans?: undefined;
     id: string;
-} | {
     ok?: undefined;
+    error?: undefined;
+} | {
     summary?: undefined;
     spans?: undefined;
-    id?: undefined;
     error: any;
+    ok?: undefined;
+    id?: undefined;
 } | {
-    error?: undefined;
     summary?: undefined;
     spans?: undefined;
-    id?: undefined;
     ok: boolean;
+    error?: undefined;
+    id?: undefined;
 }>>;
 //# sourceMappingURL=routes.d.ts.map

package/dist/private-blob/index.d.ts

@@ -0,0 +1,3 @@
+export type { PrivateBlobDeleteResult, PrivateBlobHandle, PrivateBlobMetadata, PrivateBlobProvider, PrivateBlobPutInput, PrivateBlobReadResult, } from "./types.js";
+export { deletePrivateBlob, getActivePrivateBlobProvider, listPrivateBlobProviders, putPrivateBlob, readPrivateBlob, registerPrivateBlobProvider, setPrivateBlobPublicUploadFallbackEnabled, unregisterPrivateBlobProvider, } from "./registry.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/private-blob/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/private-blob/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,uBAAuB,EACvB,iBAAiB,EACjB,mBAAmB,EACnB,mBAAmB,EACnB,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,iBAAiB,EACjB,4BAA4B,EAC5B,wBAAwB,EACxB,cAAc,EACd,eAAe,EACf,2BAA2B,EAC3B,yCAAyC,EACzC,6BAA6B,GAC9B,MAAM,eAAe,CAAC"}

package/dist/private-blob/index.js

@@ -0,0 +1,2 @@
+export { deletePrivateBlob, getActivePrivateBlobProvider, listPrivateBlobProviders, putPrivateBlob, readPrivateBlob, registerPrivateBlobProvider, setPrivateBlobPublicUploadFallbackEnabled, unregisterPrivateBlobProvider, } from "./registry.js";
+//# sourceMappingURL=index.js.map

package/dist/private-blob/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/private-blob/index.ts"],"names":[],"mappings":"AAQA,OAAO,EACL,iBAAiB,EACjB,4BAA4B,EAC5B,wBAAwB,EACxB,cAAc,EACd,eAAe,EACf,2BAA2B,EAC3B,yCAAyC,EACzC,6BAA6B,GAC9B,MAAM,eAAe,CAAC","sourcesContent":["export type {\n  PrivateBlobDeleteResult,\n  PrivateBlobHandle,\n  PrivateBlobMetadata,\n  PrivateBlobProvider,\n  PrivateBlobPutInput,\n  PrivateBlobReadResult,\n} from \"./types.js\";\nexport {\n  deletePrivateBlob,\n  getActivePrivateBlobProvider,\n  listPrivateBlobProviders,\n  putPrivateBlob,\n  readPrivateBlob,\n  registerPrivateBlobProvider,\n  setPrivateBlobPublicUploadFallbackEnabled,\n  unregisterPrivateBlobProvider,\n} from \"./registry.js\";\n"]}

package/dist/private-blob/registry.d.ts

@@ -0,0 +1,10 @@
+import type { PrivateBlobDeleteResult, PrivateBlobHandle, PrivateBlobProvider, PrivateBlobPutInput, PrivateBlobReadResult } from "./types.js";
+export declare function registerPrivateBlobProvider(provider: PrivateBlobProvider): void;
+export declare function unregisterPrivateBlobProvider(id: string): void;
+export declare function listPrivateBlobProviders(): PrivateBlobProvider[];
+export declare function getActivePrivateBlobProvider(): PrivateBlobProvider | null;
+export declare function setPrivateBlobPublicUploadFallbackEnabled(enabled: boolean): void;
+export declare function putPrivateBlob(input: PrivateBlobPutInput): Promise<PrivateBlobHandle | null>;
+export declare function readPrivateBlob(handle: PrivateBlobHandle): Promise<PrivateBlobReadResult>;
+export declare function deletePrivateBlob(handle: PrivateBlobHandle): Promise<PrivateBlobDeleteResult>;
+//# sourceMappingURL=registry.d.ts.map

package/dist/private-blob/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../src/private-blob/registry.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EACV,uBAAuB,EACvB,iBAAiB,EACjB,mBAAmB,EACnB,mBAAmB,EACnB,qBAAqB,EACtB,MAAM,YAAY,CAAC;AAkKpB,wBAAgB,2BAA2B,CACzC,QAAQ,EAAE,mBAAmB,GAC5B,IAAI,CAEN;AAED,wBAAgB,6BAA6B,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI,CAE9D;AAED,wBAAgB,wBAAwB,IAAI,mBAAmB,EAAE,CAEhE;AAED,wBAAgB,4BAA4B,IAAI,mBAAmB,GAAG,IAAI,CAKzE;AAED,wBAAgB,yCAAyC,CACvD,OAAO,EAAE,OAAO,GACf,IAAI,CAEN;AAED,wBAAsB,cAAc,CAClC,KAAK,EAAE,mBAAmB,GACzB,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAQnC;AAED,wBAAsB,eAAe,CACnC,MAAM,EAAE,iBAAiB,GACxB,OAAO,CAAC,qBAAqB,CAAC,CAOhC;AAED,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,iBAAiB,GACxB,OAAO,CAAC,uBAAuB,CAAC,CAYlC"}

package/dist/private-blob/registry.js

@@ -0,0 +1,152 @@
+import { createCipheriv, createDecipheriv, randomBytes } from "node:crypto";
+import { uploadFile } from "../file-upload/index.js";
+import { decryptSecretValue, encryptSecretValue, getSecretEncryptionKey, } from "../secrets/crypto.js";
+const PUBLIC_UPLOAD_HANDLE_PREFIX = "public-upload:v1:";
+const globals = globalThis;
+const providers = (globals.__agentNativePrivateBlobProviders ??= new Map());
+const publicUploadFallbackRef = (globals.__agentNativePrivateBlobPublicUploadFallback ??= {
+    enabled: true,
+});
+function toBytes(data) {
+    return data instanceof Uint8Array ? data : new Uint8Array(data);
+}
+function encryptBytes(data) {
+    const iv = randomBytes(12);
+    const cipher = createCipheriv("aes-256-gcm", getSecretEncryptionKey(), iv);
+    const ciphertext = Buffer.concat([
+        cipher.update(Buffer.from(data)),
+        cipher.final(),
+    ]);
+    return {
+        iv: iv.toString("base64url"),
+        ciphertext: new Uint8Array(ciphertext),
+        tag: cipher.getAuthTag().toString("base64url"),
+    };
+}
+function decryptBytes(params, ciphertext) {
+    const decipher = createDecipheriv("aes-256-gcm", getSecretEncryptionKey(), Buffer.from(params.iv, "base64url"));
+    decipher.setAuthTag(Buffer.from(params.tag, "base64url"));
+    return new Uint8Array(Buffer.concat([decipher.update(Buffer.from(ciphertext)), decipher.final()]));
+}
+function encodePublicUploadDescriptor(descriptor) {
+    return `${PUBLIC_UPLOAD_HANDLE_PREFIX}${encryptSecretValue(JSON.stringify(descriptor))}`;
+}
+function decodePublicUploadDescriptor(id) {
+    if (!id.startsWith(PUBLIC_UPLOAD_HANDLE_PREFIX)) {
+        throw new Error("Private blob handle is not a public-upload fallback handle");
+    }
+    const raw = decryptSecretValue(id.slice(PUBLIC_UPLOAD_HANDLE_PREFIX.length));
+    const descriptor = JSON.parse(raw);
+    if (descriptor?.kind !== "agent-native.private-blob.public-upload" ||
+        descriptor.version !== 1 ||
+        typeof descriptor.url !== "string") {
+        throw new Error("Private blob handle descriptor is invalid");
+    }
+    return descriptor;
+}
+function isPublicUploadFallbackHandle(handle) {
+    return handle.id.startsWith(PUBLIC_UPLOAD_HANDLE_PREFIX);
+}
+async function putViaEncryptedPublicUpload(input) {
+    const bytes = toBytes(input.data);
+    const encrypted = encryptBytes(bytes);
+    const uploaded = await uploadFile({
+        data: Buffer.from(encrypted.ciphertext),
+        filename: input.filename ?? input.key ?? "private-blob.bin",
+        mimeType: "application/octet-stream",
+        ownerEmail: input.ownerEmail,
+    });
+    if (!uploaded)
+        return null;
+    const descriptor = {
+        kind: "agent-native.private-blob.public-upload",
+        version: 1,
+        url: uploaded.url,
+        uploadProvider: uploaded.provider,
+        uploadId: uploaded.id,
+        encryption: { iv: encrypted.iv, tag: encrypted.tag },
+        mimeType: input.mimeType,
+        metadata: input.metadata,
+        size: bytes.byteLength,
+        createdAt: new Date().toISOString(),
+    };
+    return {
+        id: encodePublicUploadDescriptor(descriptor),
+        provider: `public-upload:${uploaded.provider}`,
+        opaque: true,
+        encrypted: true,
+        mimeType: input.mimeType,
+        size: bytes.byteLength,
+        createdAt: descriptor.createdAt,
+        metadata: input.metadata,
+    };
+}
+async function readViaEncryptedPublicUpload(handle) {
+    const descriptor = decodePublicUploadDescriptor(handle.id);
+    const response = await fetch(descriptor.url);
+    if (!response.ok) {
+        throw new Error(`Private blob public-upload read failed (${response.status}): ${response.statusText}`);
+    }
+    // The uploaded ciphertext is intentionally opaque; the descriptor carries
+    // auth tag + IV separately so the backing public URL is useless by itself.
+    const ciphertext = new Uint8Array(await response.arrayBuffer());
+    return {
+        data: decryptBytes(descriptor.encryption, ciphertext),
+        mimeType: descriptor.mimeType,
+        metadata: descriptor.metadata,
+        handle,
+    };
+}
+export function registerPrivateBlobProvider(provider) {
+    providers.set(provider.id, provider);
+}
+export function unregisterPrivateBlobProvider(id) {
+    providers.delete(id);
+}
+export function listPrivateBlobProviders() {
+    return [...providers.values()];
+}
+export function getActivePrivateBlobProvider() {
+    for (const provider of providers.values()) {
+        if (provider.isConfigured())
+            return provider;
+    }
+    return null;
+}
+export function setPrivateBlobPublicUploadFallbackEnabled(enabled) {
+    publicUploadFallbackRef.enabled = enabled;
+}
+export async function putPrivateBlob(input) {
+    const provider = getActivePrivateBlobProvider();
+    if (provider)
+        return provider.put(input);
+    if (!publicUploadFallbackRef.enabled)
+        return null;
+    if (process.env.AGENT_NATIVE_PRIVATE_BLOB_PUBLIC_UPLOAD_FALLBACK === "0") {
+        return null;
+    }
+    return putViaEncryptedPublicUpload(input);
+}
+export async function readPrivateBlob(handle) {
+    const provider = providers.get(handle.provider);
+    if (provider)
+        return provider.read(handle);
+    if (isPublicUploadFallbackHandle(handle)) {
+        return readViaEncryptedPublicUpload(handle);
+    }
+    throw new Error(`No private blob provider registered for ${handle.provider}`);
+}
+export async function deletePrivateBlob(handle) {
+    const provider = providers.get(handle.provider);
+    if (provider)
+        return provider.delete(handle);
+    if (isPublicUploadFallbackHandle(handle)) {
+        return {
+            deleted: false,
+            provider: handle.provider,
+            reason: "delete is not supported by the encrypted public-upload fallback provider",
+        };
+    }
+    throw new Error(`No private blob provider registered for ${handle.provider}`);
+}
+//# sourceMappingURL=registry.js.map

package/dist/private-blob/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/private-blob/registry.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE5E,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EACL,kBAAkB,EAClB,kBAAkB,EAClB,sBAAsB,GACvB,MAAM,sBAAsB,CAAC;AAsC9B,MAAM,2BAA2B,GAAG,mBAAmB,CAAC;AACxD,MAAM,OAAO,GAAG,UAAoD,CAAC;AACrE,MAAM,SAAS,GACb,CAAC,OAAO,CAAC,iCAAiC,KAAK,IAAI,GAAG,EAAE,CAAC,CAAC;AAC5D,MAAM,uBAAuB,GAC3B,CAAC,OAAO,CAAC,4CAA4C,KAAK;IACxD,OAAO,EAAE,IAAI;CACd,CAAC,CAAC;AAEL,SAAS,OAAO,CAAC,IAAyB;IACxC,OAAO,IAAI,YAAY,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,YAAY,CAAC,IAAgB;IACpC,MAAM,EAAE,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC;IAC3B,MAAM,MAAM,GAAG,cAAc,CAAC,aAAa,EAAE,sBAAsB,EAAE,EAAE,EAAE,CAAC,CAAC;IAC3E,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC;QAC/B,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAChC,MAAM,CAAC,KAAK,EAAE;KACf,CAAC,CAAC;IACH,OAAO;QACL,EAAE,EAAE,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC5B,UAAU,EAAE,IAAI,UAAU,CAAC,UAAU,CAAC;QACtC,GAAG,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,QAAQ,CAAC,WAAW,CAAC;KAC/C,CAAC;AACJ,CAAC;AAED,SAAS,YAAY,CACnB,MAAwB,EACxB,UAAsB;IAEtB,MAAM,QAAQ,GAAG,gBAAgB,CAC/B,aAAa,EACb,sBAAsB,EAAE,EACxB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,WAAW,CAAC,CACpC,CAAC;IACF,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC,CAAC;IAC1D,OAAO,IAAI,UAAU,CACnB,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAC5E,CAAC;AACJ,CAAC;AAED,SAAS,4BAA4B,CACnC,UAAkC;IAElC,OAAO,GAAG,2BAA2B,GAAG,kBAAkB,CACxD,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,CAC3B,EAAE,CAAC;AACN,CAAC;AAED,SAAS,4BAA4B,CAAC,EAAU;IAC9C,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,2BAA2B,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CACb,4DAA4D,CAC7D,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,kBAAkB,CAAC,EAAE,CAAC,KAAK,CAAC,2BAA2B,CAAC,MAAM,CAAC,CAAC,CAAC;IAC7E,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA2B,CAAC;IAC7D,IACE,UAAU,EAAE,IAAI,KAAK,yCAAyC;QAC9D,UAAU,CAAC,OAAO,KAAK,CAAC;QACxB,OAAO,UAAU,CAAC,GAAG,KAAK,QAAQ,EAClC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,SAAS,4BAA4B,CAAC,MAAyB;IAC7D,OAAO,MAAM,CAAC,EAAE,CAAC,UAAU,CAAC,2BAA2B,CAAC,CAAC;AAC3D,CAAC;AAED,KAAK,UAAU,2BAA2B,CACxC,KAA0B;IAE1B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC,CAAC;IACtC,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC;QAChC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC;QACvC,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,GAAG,IAAI,kBAAkB;QAC3D,QAAQ,EAAE,0BAA0B;QACpC,UAAU,EAAE,KAAK,CAAC,UAAU;KAC7B,CAAC,CAAC;IACH,IAAI,CAAC,QAAQ;QAAE,OAAO,IAAI,CAAC;IAE3B,MAAM,UAAU,GAA2B;QACzC,IAAI,EAAE,yCAAyC;QAC/C,OAAO,EAAE,CAAC;QACV,GAAG,EAAE,QAAQ,CAAC,GAAG;QACjB,cAAc,EAAE,QAAQ,CAAC,QAAQ;QACjC,QAAQ,EAAE,QAAQ,CAAC,EAAE;QACrB,UAAU,EAAE,EAAE,EAAE,EAAE,SAAS,CAAC,EAAE,EAAE,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE;QACpD,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,IAAI,EAAE,KAAK,CAAC,UAAU;QACtB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;IAEF,OAAO;QACL,EAAE,EAAE,4BAA4B,CAAC,UAAU,CAAC;QAC5C,QAAQ,EAAE,iBAAiB,QAAQ,CAAC,QAAQ,EAAE;QAC9C,MAAM,EAAE,IAAI;QACZ,SAAS,EAAE,IAAI;QACf,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,IAAI,EAAE,KAAK,CAAC,UAAU;QACtB,SAAS,EAAE,UAAU,CAAC,SAAS;QAC/B,QAAQ,EAAE,KAAK,CAAC,QAAQ;KACzB,CAAC;AACJ,CAAC;AAED,KAAK,UAAU,4BAA4B,CACzC,MAAyB;IAEzB,MAAM,UAAU,GAAG,4BAA4B,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC3D,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IAC7C,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CACb,2CAA2C,QAAQ,CAAC,MAAM,MAAM,QAAQ,CAAC,UAAU,EAAE,CACtF,CAAC;IACJ,CAAC;IACD,0EAA0E;IAC1E,2EAA2E;IAC3E,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC;IAChE,OAAO;QACL,IAAI,EAAE,YAAY,CAAC,UAAU,CAAC,UAAU,EAAE,UAAU,CAAC;QACrD,QAAQ,EAAE,UAAU,CAAC,QAAQ;QAC7B,QAAQ,EAAE,UAAU,CAAC,QAAQ;QAC7B,MAAM;KACP,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,2BAA2B,CACzC,QAA6B;IAE7B,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,EAAU;IACtD,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,wBAAwB;IACtC,OAAO,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;AACjC,CAAC;AAED,MAAM,UAAU,4BAA4B;IAC1C,KAAK,MAAM,QAAQ,IAAI,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC;QAC1C,IAAI,QAAQ,CAAC,YAAY,EAAE;YAAE,OAAO,QAAQ,CAAC;IAC/C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,yCAAyC,CACvD,OAAgB;IAEhB,uBAAuB,CAAC,OAAO,GAAG,OAAO,CAAC;AAC5C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,KAA0B;IAE1B,MAAM,QAAQ,GAAG,4BAA4B,EAAE,CAAC;IAChD,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACzC,IAAI,CAAC,uBAAuB,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAClD,IAAI,OAAO,CAAC,GAAG,CAAC,gDAAgD,KAAK,GAAG,EAAE,CAAC;QACzE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,2BAA2B,CAAC,KAAK,CAAC,CAAC;AAC5C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAyB;IAEzB,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAChD,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC3C,IAAI,4BAA4B,CAAC,MAAM,CAAC,EAAE,CAAC;QACzC,OAAO,4BAA4B,CAAC,MAAM,CAAC,CAAC;IAC9C,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,2CAA2C,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;AAChF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAAyB;IAEzB,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAChD,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC7C,IAAI,4BAA4B,CAAC,MAAM,CAAC,EAAE,CAAC;QACzC,OAAO;YACL,OAAO,EAAE,KAAK;YACd,QAAQ,EAAE,MAAM,CAAC,QAAQ;YACzB,MAAM,EACJ,0EAA0E;SAC7E,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,2CAA2C,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;AAChF,CAAC","sourcesContent":["import { createCipheriv, createDecipheriv, randomBytes } from \"node:crypto\";\n\nimport { uploadFile } from \"../file-upload/index.js\";\nimport {\n  decryptSecretValue,\n  encryptSecretValue,\n  getSecretEncryptionKey,\n} from \"../secrets/crypto.js\";\nimport type {\n  PrivateBlobDeleteResult,\n  PrivateBlobHandle,\n  PrivateBlobProvider,\n  PrivateBlobPutInput,\n  PrivateBlobReadResult,\n} from \"./types.js\";\n\ninterface PrivateBlobGlobals {\n  __agentNativePrivateBlobProviders?: Map<string, PrivateBlobProvider>;\n  __agentNativePrivateBlobPublicUploadFallback?: { enabled: boolean };\n}\n\ninterface EncryptedPayload {\n  iv: string;\n  tag: string;\n  ciphertext: Uint8Array;\n}\n\ninterface EncryptionParams {\n  iv: string;\n  tag: string;\n}\n\ninterface PublicUploadDescriptor {\n  kind: \"agent-native.private-blob.public-upload\";\n  version: 1;\n  url: string;\n  uploadProvider: string;\n  uploadId?: string;\n  encryption: EncryptionParams;\n  mimeType?: string;\n  metadata?: PrivateBlobHandle[\"metadata\"];\n  size: number;\n  createdAt: string;\n}\n\nconst PUBLIC_UPLOAD_HANDLE_PREFIX = \"public-upload:v1:\";\nconst globals = globalThis as typeof globalThis & PrivateBlobGlobals;\nconst providers: Map<string, PrivateBlobProvider> =\n  (globals.__agentNativePrivateBlobProviders ??= new Map());\nconst publicUploadFallbackRef: { enabled: boolean } =\n  (globals.__agentNativePrivateBlobPublicUploadFallback ??= {\n    enabled: true,\n  });\n\nfunction toBytes(data: Uint8Array | Buffer): Uint8Array {\n  return data instanceof Uint8Array ? data : new Uint8Array(data);\n}\n\nfunction encryptBytes(data: Uint8Array): EncryptedPayload {\n  const iv = randomBytes(12);\n  const cipher = createCipheriv(\"aes-256-gcm\", getSecretEncryptionKey(), iv);\n  const ciphertext = Buffer.concat([\n    cipher.update(Buffer.from(data)),\n    cipher.final(),\n  ]);\n  return {\n    iv: iv.toString(\"base64url\"),\n    ciphertext: new Uint8Array(ciphertext),\n    tag: cipher.getAuthTag().toString(\"base64url\"),\n  };\n}\n\nfunction decryptBytes(\n  params: EncryptionParams,\n  ciphertext: Uint8Array,\n): Uint8Array {\n  const decipher = createDecipheriv(\n    \"aes-256-gcm\",\n    getSecretEncryptionKey(),\n    Buffer.from(params.iv, \"base64url\"),\n  );\n  decipher.setAuthTag(Buffer.from(params.tag, \"base64url\"));\n  return new Uint8Array(\n    Buffer.concat([decipher.update(Buffer.from(ciphertext)), decipher.final()]),\n  );\n}\n\nfunction encodePublicUploadDescriptor(\n  descriptor: PublicUploadDescriptor,\n): string {\n  return `${PUBLIC_UPLOAD_HANDLE_PREFIX}${encryptSecretValue(\n    JSON.stringify(descriptor),\n  )}`;\n}\n\nfunction decodePublicUploadDescriptor(id: string): PublicUploadDescriptor {\n  if (!id.startsWith(PUBLIC_UPLOAD_HANDLE_PREFIX)) {\n    throw new Error(\n      \"Private blob handle is not a public-upload fallback handle\",\n    );\n  }\n  const raw = decryptSecretValue(id.slice(PUBLIC_UPLOAD_HANDLE_PREFIX.length));\n  const descriptor = JSON.parse(raw) as PublicUploadDescriptor;\n  if (\n    descriptor?.kind !== \"agent-native.private-blob.public-upload\" ||\n    descriptor.version !== 1 ||\n    typeof descriptor.url !== \"string\"\n  ) {\n    throw new Error(\"Private blob handle descriptor is invalid\");\n  }\n  return descriptor;\n}\n\nfunction isPublicUploadFallbackHandle(handle: PrivateBlobHandle): boolean {\n  return handle.id.startsWith(PUBLIC_UPLOAD_HANDLE_PREFIX);\n}\n\nasync function putViaEncryptedPublicUpload(\n  input: PrivateBlobPutInput,\n): Promise<PrivateBlobHandle | null> {\n  const bytes = toBytes(input.data);\n  const encrypted = encryptBytes(bytes);\n  const uploaded = await uploadFile({\n    data: Buffer.from(encrypted.ciphertext),\n    filename: input.filename ?? input.key ?? \"private-blob.bin\",\n    mimeType: \"application/octet-stream\",\n    ownerEmail: input.ownerEmail,\n  });\n  if (!uploaded) return null;\n\n  const descriptor: PublicUploadDescriptor = {\n    kind: \"agent-native.private-blob.public-upload\",\n    version: 1,\n    url: uploaded.url,\n    uploadProvider: uploaded.provider,\n    uploadId: uploaded.id,\n    encryption: { iv: encrypted.iv, tag: encrypted.tag },\n    mimeType: input.mimeType,\n    metadata: input.metadata,\n    size: bytes.byteLength,\n    createdAt: new Date().toISOString(),\n  };\n\n  return {\n    id: encodePublicUploadDescriptor(descriptor),\n    provider: `public-upload:${uploaded.provider}`,\n    opaque: true,\n    encrypted: true,\n    mimeType: input.mimeType,\n    size: bytes.byteLength,\n    createdAt: descriptor.createdAt,\n    metadata: input.metadata,\n  };\n}\n\nasync function readViaEncryptedPublicUpload(\n  handle: PrivateBlobHandle,\n): Promise<PrivateBlobReadResult> {\n  const descriptor = decodePublicUploadDescriptor(handle.id);\n  const response = await fetch(descriptor.url);\n  if (!response.ok) {\n    throw new Error(\n      `Private blob public-upload read failed (${response.status}): ${response.statusText}`,\n    );\n  }\n  // The uploaded ciphertext is intentionally opaque; the descriptor carries\n  // auth tag + IV separately so the backing public URL is useless by itself.\n  const ciphertext = new Uint8Array(await response.arrayBuffer());\n  return {\n    data: decryptBytes(descriptor.encryption, ciphertext),\n    mimeType: descriptor.mimeType,\n    metadata: descriptor.metadata,\n    handle,\n  };\n}\n\nexport function registerPrivateBlobProvider(\n  provider: PrivateBlobProvider,\n): void {\n  providers.set(provider.id, provider);\n}\n\nexport function unregisterPrivateBlobProvider(id: string): void {\n  providers.delete(id);\n}\n\nexport function listPrivateBlobProviders(): PrivateBlobProvider[] {\n  return [...providers.values()];\n}\n\nexport function getActivePrivateBlobProvider(): PrivateBlobProvider | null {\n  for (const provider of providers.values()) {\n    if (provider.isConfigured()) return provider;\n  }\n  return null;\n}\n\nexport function setPrivateBlobPublicUploadFallbackEnabled(\n  enabled: boolean,\n): void {\n  publicUploadFallbackRef.enabled = enabled;\n}\n\nexport async function putPrivateBlob(\n  input: PrivateBlobPutInput,\n): Promise<PrivateBlobHandle | null> {\n  const provider = getActivePrivateBlobProvider();\n  if (provider) return provider.put(input);\n  if (!publicUploadFallbackRef.enabled) return null;\n  if (process.env.AGENT_NATIVE_PRIVATE_BLOB_PUBLIC_UPLOAD_FALLBACK === \"0\") {\n    return null;\n  }\n  return putViaEncryptedPublicUpload(input);\n}\n\nexport async function readPrivateBlob(\n  handle: PrivateBlobHandle,\n): Promise<PrivateBlobReadResult> {\n  const provider = providers.get(handle.provider);\n  if (provider) return provider.read(handle);\n  if (isPublicUploadFallbackHandle(handle)) {\n    return readViaEncryptedPublicUpload(handle);\n  }\n  throw new Error(`No private blob provider registered for ${handle.provider}`);\n}\n\nexport async function deletePrivateBlob(\n  handle: PrivateBlobHandle,\n): Promise<PrivateBlobDeleteResult> {\n  const provider = providers.get(handle.provider);\n  if (provider) return provider.delete(handle);\n  if (isPublicUploadFallbackHandle(handle)) {\n    return {\n      deleted: false,\n      provider: handle.provider,\n      reason:\n        \"delete is not supported by the encrypted public-upload fallback provider\",\n    };\n  }\n  throw new Error(`No private blob provider registered for ${handle.provider}`);\n}\n"]}

package/dist/private-blob/types.d.ts

@@ -0,0 +1,51 @@
+export interface PrivateBlobMetadata {
+    [key: string]: string | number | boolean | null | undefined;
+}
+export interface PrivateBlobPutInput {
+    /** Private blob contents. */
+    data: Uint8Array | Buffer;
+    /** Optional caller-owned key for providers that support deterministic paths. */
+    key?: string;
+    /** Original filename or logical blob name. */
+    filename?: string;
+    /** MIME type, e.g. "application/json". */
+    mimeType?: string;
+    /** Optional owner email for provider-specific scoping. */
+    ownerEmail?: string;
+    /** Low-cardinality metadata safe to store beside the blob. */
+    metadata?: PrivateBlobMetadata;
+}
+export interface PrivateBlobHandle {
+    /** Opaque provider handle. Consumers must not interpret this as a URL. */
+    id: string;
+    /** Provider that owns the handle. */
+    provider: string;
+    /** True for handles that intentionally do not expose fetchable URLs. */
+    opaque: true;
+    /** True when bytes are encrypted before reaching the backing store. */
+    encrypted: boolean;
+    mimeType?: string;
+    size?: number;
+    createdAt?: string;
+    metadata?: PrivateBlobMetadata;
+}
+export interface PrivateBlobReadResult {
+    data: Uint8Array;
+    mimeType?: string;
+    metadata?: PrivateBlobMetadata;
+    handle: PrivateBlobHandle;
+}
+export interface PrivateBlobDeleteResult {
+    deleted: boolean;
+    provider: string;
+    reason?: string;
+}
+export interface PrivateBlobProvider {
+    id: string;
+    name: string;
+    isConfigured: () => boolean;
+    put: (input: PrivateBlobPutInput) => Promise<PrivateBlobHandle>;
+    read: (handle: PrivateBlobHandle) => Promise<PrivateBlobReadResult>;
+    delete: (handle: PrivateBlobHandle) => Promise<PrivateBlobDeleteResult>;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/private-blob/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/private-blob/types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,mBAAmB;IAClC,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,GAAG,SAAS,CAAC;CAC7D;AAED,MAAM,WAAW,mBAAmB;IAClC,6BAA6B;IAC7B,IAAI,EAAE,UAAU,GAAG,MAAM,CAAC;IAC1B,gFAAgF;IAChF,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,8CAA8C;IAC9C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,0CAA0C;IAC1C,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,0DAA0D;IAC1D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,8DAA8D;IAC9D,QAAQ,CAAC,EAAE,mBAAmB,CAAC;CAChC;AAED,MAAM,WAAW,iBAAiB;IAChC,0EAA0E;IAC1E,EAAE,EAAE,MAAM,CAAC;IACX,qCAAqC;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,wEAAwE;IACxE,MAAM,EAAE,IAAI,CAAC;IACb,uEAAuE;IACvE,SAAS,EAAE,OAAO,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,mBAAmB,CAAC;CAChC;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,UAAU,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,QAAQ,CAAC,EAAE,mBAAmB,CAAC;IAC/B,MAAM,EAAE,iBAAiB,CAAC;CAC3B;AAED,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,OAAO,CAAC;IAC5B,GAAG,EAAE,CAAC,KAAK,EAAE,mBAAmB,KAAK,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAChE,IAAI,EAAE,CAAC,MAAM,EAAE,iBAAiB,KAAK,OAAO,CAAC,qBAAqB,CAAC,CAAC;IACpE,MAAM,EAAE,CAAC,MAAM,EAAE,iBAAiB,KAAK,OAAO,CAAC,uBAAuB,CAAC,CAAC;CACzE"}

package/dist/private-blob/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/private-blob/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/private-blob/types.ts"],"names":[],"mappings":"","sourcesContent":["export interface PrivateBlobMetadata {\n  [key: string]: string | number | boolean | null | undefined;\n}\n\nexport interface PrivateBlobPutInput {\n  /** Private blob contents. */\n  data: Uint8Array | Buffer;\n  /** Optional caller-owned key for providers that support deterministic paths. */\n  key?: string;\n  /** Original filename or logical blob name. */\n  filename?: string;\n  /** MIME type, e.g. \"application/json\". */\n  mimeType?: string;\n  /** Optional owner email for provider-specific scoping. */\n  ownerEmail?: string;\n  /** Low-cardinality metadata safe to store beside the blob. */\n  metadata?: PrivateBlobMetadata;\n}\n\nexport interface PrivateBlobHandle {\n  /** Opaque provider handle. Consumers must not interpret this as a URL. */\n  id: string;\n  /** Provider that owns the handle. */\n  provider: string;\n  /** True for handles that intentionally do not expose fetchable URLs. */\n  opaque: true;\n  /** True when bytes are encrypted before reaching the backing store. */\n  encrypted: boolean;\n  mimeType?: string;\n  size?: number;\n  createdAt?: string;\n  metadata?: PrivateBlobMetadata;\n}\n\nexport interface PrivateBlobReadResult {\n  data: Uint8Array;\n  mimeType?: string;\n  metadata?: PrivateBlobMetadata;\n  handle: PrivateBlobHandle;\n}\n\nexport interface PrivateBlobDeleteResult {\n  deleted: boolean;\n  provider: string;\n  reason?: string;\n}\n\nexport interface PrivateBlobProvider {\n  id: string;\n  name: string;\n  isConfigured: () => boolean;\n  put: (input: PrivateBlobPutInput) => Promise<PrivateBlobHandle>;\n  read: (handle: PrivateBlobHandle) => Promise<PrivateBlobReadResult>;\n  delete: (handle: PrivateBlobHandle) => Promise<PrivateBlobDeleteResult>;\n}\n"]}

package/dist/resources/handlers.d.ts

@@ -49,11 +49,11 @@ export declare function handleUpdateResource(event: any): Promise<import("./stor
 }>;
 /** DELETE /_agent-native/resources/:id — delete a resource */
 export declare function handleDeleteResource(event: any): Promise<{
-    ok?: undefined;
     error: string;
+    ok?: undefined;
 } | {
-    error?: undefined;
     ok: boolean;
+    error?: undefined;
 }>;
 /** POST /_agent-native/resources/upload — upload a file as a resource */
 export declare function handleUploadResource(event: any): Promise<import("./store.js").Resource | {
@@ -73,9 +73,9 @@ export declare function handleUploadResource(event: any): Promise<import("./stor
     runId: string | null;
     expiresAt: number | null;
     metadata: string | null;
-    error?: undefined;
     url: string;
     provider: string;
+    error?: undefined;
 }>;
 export {};
 //# sourceMappingURL=handlers.d.ts.map

package/dist/scripts/utils.d.ts

@@ -1,10 +1,10 @@
 export { parseArgs, camelCaseArgs } from "./parse-args.js";
 /**
  * Load .env files. In an enterprise workspace (detected via
- * `agent-native.workspaceCore` in a parent package.json) this also loads
- * the workspace root's .env first, so shared keys like ANTHROPIC_API_KEY
- * flow to every app without duplication. Per-app .env values win on
- * conflict (dotenv doesn't overwrite existing process.env values).
+ * `agent-native.workspaceCore` in a parent package.json) this also loads the
+ * workspace root's .env as a fallback, so shared keys like ANTHROPIC_API_KEY
+ * flow to every app without duplication. Shell values win, then app
+ * .env.local, app .env, workspace .env.local, and workspace .env.
  */
 export declare function loadEnv(envPath?: string): void;
 /**

package/dist/scripts/utils.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../src/scripts/utils.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAE3D;;;;;;GAMG;AACH,wBAAgB,OAAO,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAgB9C;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAoBjE;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAO9C;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAQ3D;AAED;;GAEG;AACH,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAI3C;AAED;;;;;GAKG;AACH,wBAAgB,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,KAAK,CAE3C"}
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../src/scripts/utils.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAE3D;;;;;;GAMG;AACH,wBAAgB,OAAO,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAoB9C;AA0BD;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAoBjE;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAO9C;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAQ3D;AAED;;GAEG;AACH,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAI3C;AAED;;;;;GAKG;AACH,wBAAgB,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,KAAK,CAE3C"}

package/dist/scripts/utils.js

@@ -5,27 +5,51 @@ import dotenv from "dotenv";
 export { parseArgs, camelCaseArgs } from "./parse-args.js";
 /**
  * Load .env files. In an enterprise workspace (detected via
- * `agent-native.workspaceCore` in a parent package.json) this also loads
- * the workspace root's .env first, so shared keys like ANTHROPIC_API_KEY
- * flow to every app without duplication. Per-app .env values win on
- * conflict (dotenv doesn't overwrite existing process.env values).
+ * `agent-native.workspaceCore` in a parent package.json) this also loads the
+ * workspace root's .env as a fallback, so shared keys like ANTHROPIC_API_KEY
+ * flow to every app without duplication. Shell values win, then app
+ * .env.local, app .env, workspace .env.local, and workspace .env.
  */
 export function loadEnv(envPath) {
     const appEnv = envPath ?? path.join(process.cwd(), ".env");
+    const shellKeys = new Set(Object.keys(process.env));
     // App-level .env first. Dotenv won't clobber already-set process.env, so
     // values that are already present (e.g. set by the shell) still win.
     // `quiet: true` suppresses the dotenv tip line on every load (v17+).
-    dotenv.config({ path: appEnv, quiet: true });
+    loadEnvFile(appEnv);
+    loadEnvLocalOverrides(localEnvPathFor(appEnv), shellKeys);
     // Then workspace root, if any — but only fill in keys the app didn't
     // define. Setting `override: false` is dotenv's default.
     const workspaceRoot = findWorkspaceRoot(path.dirname(appEnv));
     if (workspaceRoot) {
+        const beforeWorkspaceKeys = new Set(Object.keys(process.env));
         const wsEnv = path.join(workspaceRoot, ".env");
         if (fs.existsSync(wsEnv) && wsEnv !== appEnv) {
-            dotenv.config({ path: wsEnv, quiet: true });
+            loadEnvFile(wsEnv);
+            loadEnvLocalOverrides(localEnvPathFor(wsEnv), beforeWorkspaceKeys);
         }
     }
 }
+function loadEnvFile(filePath) {
+    if (fs.existsSync(filePath)) {
+        dotenv.config({ path: filePath, quiet: true });
+    }
+}
+function localEnvPathFor(envPath) {
+    return path.basename(envPath) === ".env"
+        ? path.join(path.dirname(envPath), ".env.local")
+        : `${envPath}.local`;
+}
+function loadEnvLocalOverrides(filePath, protectedKeys) {
+    if (!fs.existsSync(filePath))
+        return;
+    const values = dotenv.parse(fs.readFileSync(filePath));
+    for (const [key, value] of Object.entries(values)) {
+        if (protectedKeys.has(key))
+            continue;
+        process.env[key] = value;
+    }
+}
 /**
  * Locate the nearest enterprise workspace root above `startDir`, identified
  * by the `agent-native.workspaceCore` field in its package.json.

package/dist/scripts/utils.js.map

@@ -1 +1 @@
-{"version":3,"file":"utils.js","sourceRoot":"","sources":["../../src/scripts/utils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AAExB,OAAO,MAAM,MAAM,QAAQ,CAAC;AAE5B,uEAAuE;AACvE,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAE3D;;;;;;GAMG;AACH,MAAM,UAAU,OAAO,CAAC,OAAgB;IACtC,MAAM,MAAM,GAAG,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,CAAC,CAAC;IAC3D,yEAAyE;IACzE,qEAAqE;IACrE,qEAAqE;IACrE,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAE7C,qEAAqE;IACrE,yDAAyD;IACzD,MAAM,aAAa,GAAG,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9D,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;QAC/C,IAAI,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;YAC7C,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAgB;IAChD,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QAC/C,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3B,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;gBAC1D,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,cAAc,CAAC,EAAE,aAAa,CAAC;gBACpD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACpD,OAAO,GAAG,CAAC;gBACb,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,yCAAyC;YAC3C,CAAC;QACH,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,MAAM,KAAK,GAAG;YAAE,MAAM;QAC1B,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,CAAS;IACnC,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACrC,OAAO,CACL,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC;QAC5B,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAC5B,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAClB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAChD,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACjD,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7E,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5C,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACvD,IAAI,CAAC,QAAQ,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACnC,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,SAAS,CAAC,GAAW;IACnC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,IAAI,CAAC,OAAe;IAClC,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;AAC3B,CAAC","sourcesContent":["import fs from \"fs\";\nimport path from \"path\";\n\nimport dotenv from \"dotenv\";\n\n// Re-export pure arg-parsing utilities (no Node.js deps, browser-safe)\nexport { parseArgs, camelCaseArgs } from \"./parse-args.js\";\n\n/**\n * Load .env files. In an enterprise workspace (detected via\n * `agent-native.workspaceCore` in a parent package.json) this also loads\n * the workspace root's .env first, so shared keys like ANTHROPIC_API_KEY\n * flow to every app without duplication. Per-app .env values win on\n * conflict (dotenv doesn't overwrite existing process.env values).\n */\nexport function loadEnv(envPath?: string): void {\n  const appEnv = envPath ?? path.join(process.cwd(), \".env\");\n  // App-level .env first. Dotenv won't clobber already-set process.env, so\n  // values that are already present (e.g. set by the shell) still win.\n  // `quiet: true` suppresses the dotenv tip line on every load (v17+).\n  dotenv.config({ path: appEnv, quiet: true });\n\n  // Then workspace root, if any — but only fill in keys the app didn't\n  // define. Setting `override: false` is dotenv's default.\n  const workspaceRoot = findWorkspaceRoot(path.dirname(appEnv));\n  if (workspaceRoot) {\n    const wsEnv = path.join(workspaceRoot, \".env\");\n    if (fs.existsSync(wsEnv) && wsEnv !== appEnv) {\n      dotenv.config({ path: wsEnv, quiet: true });\n    }\n  }\n}\n\n/**\n * Locate the nearest enterprise workspace root above `startDir`, identified\n * by the `agent-native.workspaceCore` field in its package.json.\n */\nexport function findWorkspaceRoot(startDir: string): string | null {\n  let dir = path.resolve(startDir);\n  for (let i = 0; i < 20; i++) {\n    const pkgPath = path.join(dir, \"package.json\");\n    if (fs.existsSync(pkgPath)) {\n      try {\n        const pkg = JSON.parse(fs.readFileSync(pkgPath, \"utf-8\"));\n        const wsCore = pkg?.[\"agent-native\"]?.workspaceCore;\n        if (typeof wsCore === \"string\" && wsCore.length > 0) {\n          return dir;\n        }\n      } catch {\n        // Keep walking on malformed package.json\n      }\n    }\n    const parent = path.dirname(dir);\n    if (parent === dir) break;\n    dir = parent;\n  }\n  return null;\n}\n\n/**\n * Validate a relative file path (no traversal, no absolute).\n */\nexport function isValidPath(p: string): boolean {\n  const normalized = path.normalize(p);\n  return (\n    !normalized.startsWith(\"..\") &&\n    !path.isAbsolute(normalized) &&\n    !p.includes(\"\\0\")\n  );\n}\n\n/**\n * Validate a project slug (e.g. \"my-project\" or \"group/my-project\").\n */\nexport function isValidProjectPath(project: string): boolean {\n  if (!project) return false;\n  const normalized = path.posix.normalize(project);\n  if (normalized.startsWith(\"..\") || path.isAbsolute(normalized)) return false;\n  if (normalized.includes(\"\\0\")) return false;\n  const segments = normalized.split(\"/\").filter(Boolean);\n  if (!segments.length) return false;\n  return segments.every((s) => /^[a-z0-9][a-z0-9-]*$/.test(s));\n}\n\n/**\n * mkdir -p helper.\n */\nexport function ensureDir(dir: string): void {\n  if (!fs.existsSync(dir)) {\n    fs.mkdirSync(dir, { recursive: true });\n  }\n}\n\n/**\n * Throw an error to abort a script. When running as a CLI (`pnpm script`),\n * the runner catches this and exits with code 1. When running in-server\n * (agent tools, A2A handlers), the error is caught by the wrapper and\n * returned as a tool result — no process.exit needed.\n */\nexport function fail(message: string): never {\n  throw new Error(message);\n}\n"]}
+{"version":3,"file":"utils.js","sourceRoot":"","sources":["../../src/scripts/utils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AAExB,OAAO,MAAM,MAAM,QAAQ,CAAC;AAE5B,uEAAuE;AACvE,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAE3D;;;;;;GAMG;AACH,MAAM,UAAU,OAAO,CAAC,OAAgB;IACtC,MAAM,MAAM,GAAG,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,MAAM,CAAC,CAAC;IAC3D,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;IACpD,yEAAyE;IACzE,qEAAqE;IACrE,qEAAqE;IACrE,WAAW,CAAC,MAAM,CAAC,CAAC;IACpB,qBAAqB,CAAC,eAAe,CAAC,MAAM,CAAC,EAAE,SAAS,CAAC,CAAC;IAE1D,qEAAqE;IACrE,yDAAyD;IACzD,MAAM,aAAa,GAAG,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9D,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;QAC9D,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;QAC/C,IAAI,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,KAAK,MAAM,EAAE,CAAC;YAC7C,WAAW,CAAC,KAAK,CAAC,CAAC;YACnB,qBAAqB,CAAC,eAAe,CAAC,KAAK,CAAC,EAAE,mBAAmB,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,QAAgB;IACnC,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACjD,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,OAAe;IACtC,OAAO,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,MAAM;QACtC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,YAAY,CAAC;QAChD,CAAC,CAAC,GAAG,OAAO,QAAQ,CAAC;AACzB,CAAC;AAED,SAAS,qBAAqB,CAC5B,QAAgB,EAChB,aAA0B;IAE1B,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO;IACrC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC,CAAC;IACvD,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,IAAI,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,SAAS;QACrC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IAC3B,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAgB;IAChD,IAAI,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,CAAC;QAC/C,IAAI,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3B,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC;gBAC1D,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,cAAc,CAAC,EAAE,aAAa,CAAC;gBACpD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACpD,OAAO,GAAG,CAAC;gBACb,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,yCAAyC;YAC3C,CAAC;QACH,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,MAAM,KAAK,GAAG;YAAE,MAAM;QAC1B,GAAG,GAAG,MAAM,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,WAAW,CAAC,CAAS;IACnC,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;IACrC,OAAO,CACL,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC;QAC5B,CAAC,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAC5B,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAClB,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAChD,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAC3B,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACjD,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7E,IAAI,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5C,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACvD,IAAI,CAAC,QAAQ,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACnC,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/D,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,SAAS,CAAC,GAAW;IACnC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,IAAI,CAAC,OAAe;IAClC,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;AAC3B,CAAC","sourcesContent":["import fs from \"fs\";\nimport path from \"path\";\n\nimport dotenv from \"dotenv\";\n\n// Re-export pure arg-parsing utilities (no Node.js deps, browser-safe)\nexport { parseArgs, camelCaseArgs } from \"./parse-args.js\";\n\n/**\n * Load .env files. In an enterprise workspace (detected via\n * `agent-native.workspaceCore` in a parent package.json) this also loads the\n * workspace root's .env as a fallback, so shared keys like ANTHROPIC_API_KEY\n * flow to every app without duplication. Shell values win, then app\n * .env.local, app .env, workspace .env.local, and workspace .env.\n */\nexport function loadEnv(envPath?: string): void {\n  const appEnv = envPath ?? path.join(process.cwd(), \".env\");\n  const shellKeys = new Set(Object.keys(process.env));\n  // App-level .env first. Dotenv won't clobber already-set process.env, so\n  // values that are already present (e.g. set by the shell) still win.\n  // `quiet: true` suppresses the dotenv tip line on every load (v17+).\n  loadEnvFile(appEnv);\n  loadEnvLocalOverrides(localEnvPathFor(appEnv), shellKeys);\n\n  // Then workspace root, if any — but only fill in keys the app didn't\n  // define. Setting `override: false` is dotenv's default.\n  const workspaceRoot = findWorkspaceRoot(path.dirname(appEnv));\n  if (workspaceRoot) {\n    const beforeWorkspaceKeys = new Set(Object.keys(process.env));\n    const wsEnv = path.join(workspaceRoot, \".env\");\n    if (fs.existsSync(wsEnv) && wsEnv !== appEnv) {\n      loadEnvFile(wsEnv);\n      loadEnvLocalOverrides(localEnvPathFor(wsEnv), beforeWorkspaceKeys);\n    }\n  }\n}\n\nfunction loadEnvFile(filePath: string): void {\n  if (fs.existsSync(filePath)) {\n    dotenv.config({ path: filePath, quiet: true });\n  }\n}\n\nfunction localEnvPathFor(envPath: string): string {\n  return path.basename(envPath) === \".env\"\n    ? path.join(path.dirname(envPath), \".env.local\")\n    : `${envPath}.local`;\n}\n\nfunction loadEnvLocalOverrides(\n  filePath: string,\n  protectedKeys: Set<string>,\n): void {\n  if (!fs.existsSync(filePath)) return;\n  const values = dotenv.parse(fs.readFileSync(filePath));\n  for (const [key, value] of Object.entries(values)) {\n    if (protectedKeys.has(key)) continue;\n    process.env[key] = value;\n  }\n}\n\n/**\n * Locate the nearest enterprise workspace root above `startDir`, identified\n * by the `agent-native.workspaceCore` field in its package.json.\n */\nexport function findWorkspaceRoot(startDir: string): string | null {\n  let dir = path.resolve(startDir);\n  for (let i = 0; i < 20; i++) {\n    const pkgPath = path.join(dir, \"package.json\");\n    if (fs.existsSync(pkgPath)) {\n      try {\n        const pkg = JSON.parse(fs.readFileSync(pkgPath, \"utf-8\"));\n        const wsCore = pkg?.[\"agent-native\"]?.workspaceCore;\n        if (typeof wsCore === \"string\" && wsCore.length > 0) {\n          return dir;\n        }\n      } catch {\n        // Keep walking on malformed package.json\n      }\n    }\n    const parent = path.dirname(dir);\n    if (parent === dir) break;\n    dir = parent;\n  }\n  return null;\n}\n\n/**\n * Validate a relative file path (no traversal, no absolute).\n */\nexport function isValidPath(p: string): boolean {\n  const normalized = path.normalize(p);\n  return (\n    !normalized.startsWith(\"..\") &&\n    !path.isAbsolute(normalized) &&\n    !p.includes(\"\\0\")\n  );\n}\n\n/**\n * Validate a project slug (e.g. \"my-project\" or \"group/my-project\").\n */\nexport function isValidProjectPath(project: string): boolean {\n  if (!project) return false;\n  const normalized = path.posix.normalize(project);\n  if (normalized.startsWith(\"..\") || path.isAbsolute(normalized)) return false;\n  if (normalized.includes(\"\\0\")) return false;\n  const segments = normalized.split(\"/\").filter(Boolean);\n  if (!segments.length) return false;\n  return segments.every((s) => /^[a-z0-9][a-z0-9-]*$/.test(s));\n}\n\n/**\n * mkdir -p helper.\n */\nexport function ensureDir(dir: string): void {\n  if (!fs.existsSync(dir)) {\n    fs.mkdirSync(dir, { recursive: true });\n  }\n}\n\n/**\n * Throw an error to abort a script. When running as a CLI (`pnpm script`),\n * the runner catches this and exits with code 1. When running in-server\n * (agent tools, A2A handlers), the error is caught by the wrapper and\n * returned as a tool result — no process.exit needed.\n */\nexport function fail(message: string): never {\n  throw new Error(message);\n}\n"]}

package/dist/server/agent-chat-plugin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"agent-chat-plugin.d.ts","sourceRoot":"","sources":["../../src/server/agent-chat-plugin.ts"],"names":[],"mappings":"AAEA,OAAO,EAQL,KAAK,OAAO,EACb,MAAM,IAAI,CAAC;AAEZ,OAAO,EAGL,KAAK,0BAA0B,EAC/B,KAAK,oBAAoB,EAC1B,MAAM,6BAA6B,CAAC;AAkCrC,OAAO,EAML,KAAK,WAAW,EACjB,MAAM,8BAA8B,CAAC;AAGtC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAY7D,OAAO,KAAK,EACV,mBAAmB,EACnB,cAAc,EACd,kBAAkB,EAElB,eAAe,EAChB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAkBL,KAAK,UAAU,EAGhB,MAAM,0BAA0B,CAAC;AAOlC,OAAO,EACL,gBAAgB,EAcjB,MAAM,wBAAwB,CAAC;AAgBhC,OAAO,EAGL,KAAK,mBAAmB,EACzB,MAAM,4BAA4B,CAAC;AAwBpC,OAAO,EAKL,KAAK,cAAc,EACpB,MAAM,oBAAoB,CAAC;AA2E5B,MAAM,WAAW,6BAA6B;IAC5C,qBAAqB,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IACrE,iBAAiB,EAAE,CACjB,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,KACzB,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC;CACjC;AAsID,wBAAsB,yBAAyB,CAC7C,KAAK,EAAE,OAAO,EACd,IAAI,EAAE,6BAA6B;;;;YA/L/B,MAAM;eACH,MAAM;iBACJ,MAAM;sBACD,MAAM;mBACT,MAAM;mBACN,MAAM;eACV;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,KAAK,CAAC,EAAE,MAAM,CAAA;SAAE,GAAG,IAAI;kBACpC,KAAK,CAAC;YACd,EAAE,CAAC,EAAE,MAAM,CAAC;YACZ,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,QAAQ,CAAC;YACtC,IAAI,EAAE,MAAM,CAAC;YACb,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;SAC7B,CAAC;;;GAiNH;AA2ZD,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GACnC,KAAK,CAAC;IACP,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,WAAW,CAAC,aAAa,CAAC,CAAC;CACzC,CAAC,CASD;AAmBD,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,SAAS,cAAc,EAAE,EACjC,WAAW,EAAE,SAAS,oBAAoB,EAAE,EAC5C,OAAO,GAAE,0BAA0B,GAAG;IAAE,KAAK,CAAC,EAAE,GAAG,CAAA;CAAO,GACzD;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAO7C;AAoWD,iBAAS,6BAA6B,IAAI,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAyDpE;AAurCD,KAAK,cAAc,GAAG,CAAC,QAAQ,EAAE,GAAG,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAE9D,MAAM,WAAW,sBAAsB;IACrC,+DAA+D;IAC/D,OAAO,CAAC,EACJ,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GAC3B,CAAC,MACG,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GAC3B,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC;IAC9C,wCAAwC;IACxC,OAAO,CAAC,EACJ,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GAC3B,CAAC,MACG,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GAC3B,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC;IAC9C,mEAAmE;IACnE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,qDAAqD;IACrD,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,qEAAqE;IACrE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;sDAGkD;IAClD,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,iEAAiE;IACjE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,MAAM,CAAC,EACH,OAAO,0BAA0B,EAAE,WAAW,GAC9C,MAAM,GACN;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC;IACtD,qDAAqD;IACrD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,+DAA+D;IAC/D,gBAAgB,CAAC,EACb,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,GAC/B,CAAC,MACG,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,GAC/B,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC;IAClD,kFAAkF;IAClF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,6EAA6E;IAC7E,aAAa,CAAC,EAAE;QACd,mEAAmE;QACnE,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,uEAAuE;QACvE,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,gFAAgF;QAChF,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,gFAAgF;QAChF,KAAK,CAAC,EAAE,KAAK,CAAC;YACZ,GAAG,EAAE,MAAM,CAAC;YACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;YAClB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;YACjB,KAAK,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;SAC1B,CAAC,CAAC;KACJ,CAAC;IACF;;;;;;;;;OASG;IACH,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACtE;;;;;;OAMG;IACH,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACxE;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B;;;;;;;;;;;;;;OAcG;IACH,YAAY,CAAC,EAAE,CACb,KAAK,EAAE,GAAG,EACV,KAAK,EAAE,MAAM,KACV,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC5C;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,OAAO,8BAA8B,EAAE,2BAA2B,CAAC;IACxF;;;;OAIG;IACH,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE;QACzB,KAAK,EAAE,GAAG,CAAC;QACX,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,OAAO,EAAE,MAAM,CAAC;QAChB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,WAAW,EAAE,mBAAmB,EAAE,CAAC;QACnC,UAAU,EAAE,kBAAkB,EAAE,CAAC;QACjC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,oBAAoB,CAAC,EAAE,OAAO,CAAC;QAC/B,IAAI,EAAE,KAAK,GAAG,MAAM,CAAC;KACtB,KACG,IAAI,GACJ;QACE,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,WAAW,CAAC,EAAE,mBAAmB,EAAE,CAAC;KACrC,GACD,OAAO,CAAC,IAAI,GAAG;QACb,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,WAAW,CAAC,EAAE,mBAAmB,EAAE,CAAC;KACrC,CAAC,CAAC;IACP;;;;;;;;;;;;;;OAcG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;;;;;OAOG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B;;;;;;;;;;;;;OAaG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;;;;;;;;;;;;;;;OAkBG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B;;;;;;;;;OASG;IACH,aAAa,CAAC,EAAE,mBAAmB,CAAC;IACpC;;;;;;OAMG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,CAAC,OAAO,EAAE;QAC7B,OAAO,EAAE,OAAO,iBAAiB,EAAE,OAAO,CAAC;QAC3C,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,OAAO,iBAAiB,EAAE,iBAAiB,CAAC;QACrD,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;KAC/B,KACG,OAAO,iBAAiB,EAAE,OAAO,GACjC,MAAM,GACN,IAAI,GACJ,SAAS,GACT,OAAO,CAAC,OAAO,iBAAiB,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;IAC3E;;;;;;;;;;OAUG;IACH,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAE5B;;;;;;;OAOG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IAErB;;;;;;;;;;;;;;;;;;OAkBG;IACH,aAAa,CAAC,EAAE;QACd,UAAU,CAAC,EAAE,KAAK,GAAG,WAAW,GAAG,SAAS,CAAC;QAC7C;;;;WAIG;QACH,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;KACxB,CAAC;IAEF;;;OAGG;IACH,UAAU,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAC9D;AAyLD;;;;;;;;GAQG;AACH,iBAAS,qBAAqB,CAC5B,QAAQ,CAAC,EAAE,cAAc,EACzB,OAAO,CAAC,EAAE;IAAE,aAAa,CAAC,EAAE,mBAAmB,CAAC;IAAC,cAAc,CAAC,EAAE,OAAO,CAAA;CAAE,GAC1E;IACD,cAAc,EAAE,MAAM,CAAC;IACvB,sBAAsB,EAAE,MAAM,CAAC;IAC/B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,6BAA6B,EAAE,MAAM,CAAC;IACtC,4BAA4B,EAAE,MAAM,CAAC;CACtC,CAoKA;AAED,eAAO,MAAM,gCAAgC;;;;;;;CAczC,CAAC;AAEL;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAsB,sBAAsB,CAC1C,KAAK,EAAE,MAAM,EACb,OAAO,UAAQ,EACf,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,MAAM,CAAC,CAoLjB;AAsBD;;;;;;;;;;;GAWG;AACH,iBAAS,qBAAqB,CAC5B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,EACrC,IAAI,GAAE,KAAK,GAAG,MAAe,GAC5B,MAAM,CAoER;AA0KD,wBAAgB,sCAAsC,CAAC,KAAK,EAAE;IAC5D,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB,GAAG,OAAO,CA2BV;AAED,wBAAgB,qBAAqB,CACnC,OAAO,CAAC,EAAE,sBAAsB,GAC/B,cAAc,CA0yIhB;AAED;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,EAAE,cAAwC,CAAC;AAa9E,yEAAyE;AACzE,wBAAgB,mBAAmB,IAAI,gBAAgB,GAAG,IAAI,CAE7D;AAED,yFAAyF;AACzF,wBAAsB,uBAAuB,IAAI,OAAO,CAAC,OAAO,CAAC,CAKhE"}
+{"version":3,"file":"agent-chat-plugin.d.ts","sourceRoot":"","sources":["../../src/server/agent-chat-plugin.ts"],"names":[],"mappings":"AAEA,OAAO,EAQL,KAAK,OAAO,EACb,MAAM,IAAI,CAAC;AAEZ,OAAO,EAGL,KAAK,0BAA0B,EAC/B,KAAK,oBAAoB,EAC1B,MAAM,6BAA6B,CAAC;AAkCrC,OAAO,EAML,KAAK,WAAW,EACjB,MAAM,8BAA8B,CAAC;AAGtC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAY7D,OAAO,KAAK,EACV,mBAAmB,EACnB,cAAc,EACd,kBAAkB,EAElB,eAAe,EAChB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAkBL,KAAK,UAAU,EAGhB,MAAM,0BAA0B,CAAC;AAOlC,OAAO,EACL,gBAAgB,EAcjB,MAAM,wBAAwB,CAAC;AAgBhC,OAAO,EAGL,KAAK,mBAAmB,EACzB,MAAM,4BAA4B,CAAC;AAwBpC,OAAO,EAKL,KAAK,cAAc,EACpB,MAAM,oBAAoB,CAAC;AA2E5B,MAAM,WAAW,6BAA6B;IAC5C,qBAAqB,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC;IACrE,iBAAiB,EAAE,CACjB,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,KACzB,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC;CACjC;AAsID,wBAAsB,yBAAyB,CAC7C,KAAK,EAAE,OAAO,EACd,IAAI,EAAE,6BAA6B;;;;YA/L/B,MAAM;eACH,MAAM;iBACJ,MAAM;sBACD,MAAM;mBACT,MAAM;mBACN,MAAM;eACV;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,KAAK,CAAC,EAAE,MAAM,CAAA;SAAE,GAAG,IAAI;kBACpC,KAAK,CAAC;YACd,EAAE,CAAC,EAAE,MAAM,CAAC;YACZ,IAAI,EAAE,MAAM,GAAG,WAAW,GAAG,QAAQ,CAAC;YACtC,IAAI,EAAE,MAAM,CAAC;YACb,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;SAC7B,CAAC;;;GAiNH;AA2ZD,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GACnC,KAAK,CAAC;IACP,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,WAAW,CAAC,aAAa,CAAC,CAAC;CACzC,CAAC,CASD;AAmBD,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,SAAS,cAAc,EAAE,EACjC,WAAW,EAAE,SAAS,oBAAoB,EAAE,EAC5C,OAAO,GAAE,0BAA0B,GAAG;IAAE,KAAK,CAAC,EAAE,GAAG,CAAA;CAAO,GACzD;IAAE,YAAY,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAO7C;AAoWD,iBAAS,6BAA6B,IAAI,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAyDpE;AAurCD,KAAK,cAAc,GAAG,CAAC,QAAQ,EAAE,GAAG,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;AAE9D,MAAM,WAAW,sBAAsB;IACrC,+DAA+D;IAC/D,OAAO,CAAC,EACJ,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GAC3B,CAAC,MACG,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GAC3B,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC;IAC9C,wCAAwC;IACxC,OAAO,CAAC,EACJ,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GAC3B,CAAC,MACG,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,GAC3B,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC;IAC9C,mEAAmE;IACnE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,qDAAqD;IACrD,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,qEAAqE;IACrE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;sDAGkD;IAClD,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,iEAAiE;IACjE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,MAAM,CAAC,EACH,OAAO,0BAA0B,EAAE,WAAW,GAC9C,MAAM,GACN;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC;IACtD,qDAAqD;IACrD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,+DAA+D;IAC/D,gBAAgB,CAAC,EACb,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,GAC/B,CAAC,MACG,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,GAC/B,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC,CAAC;IAClD,kFAAkF;IAClF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,6EAA6E;IAC7E,aAAa,CAAC,EAAE;QACd,mEAAmE;QACnE,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,uEAAuE;QACvE,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,gFAAgF;QAChF,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,gFAAgF;QAChF,KAAK,CAAC,EAAE,KAAK,CAAC;YACZ,GAAG,EAAE,MAAM,CAAC;YACZ,QAAQ,CAAC,EAAE,MAAM,CAAC;YAClB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;YACjB,KAAK,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;SAC1B,CAAC,CAAC;KACJ,CAAC;IACF;;;;;;;;;OASG;IACH,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACtE;;;;;;OAMG;IACH,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,KAAK,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IACxE;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAC5B;;;;;;;;;;;;;;OAcG;IACH,YAAY,CAAC,EAAE,CACb,KAAK,EAAE,GAAG,EACV,KAAK,EAAE,MAAM,KACV,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC5C;;;;OAIG;IACH,kBAAkB,CAAC,EAAE,OAAO,8BAA8B,EAAE,2BAA2B,CAAC;IACxF;;;;OAIG;IACH,cAAc,CAAC,EAAE,CAAC,OAAO,EAAE;QACzB,KAAK,EAAE,GAAG,CAAC;QACX,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;QAC1B,OAAO,EAAE,MAAM,CAAC;QAChB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,WAAW,EAAE,mBAAmB,EAAE,CAAC;QACnC,UAAU,EAAE,kBAAkB,EAAE,CAAC;QACjC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,oBAAoB,CAAC,EAAE,OAAO,CAAC;QAC/B,IAAI,EAAE,KAAK,GAAG,MAAM,CAAC;KACtB,KACG,IAAI,GACJ;QACE,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,WAAW,CAAC,EAAE,mBAAmB,EAAE,CAAC;KACrC,GACD,OAAO,CAAC,IAAI,GAAG;QACb,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,cAAc,CAAC,EAAE,MAAM,CAAC;QACxB,WAAW,CAAC,EAAE,mBAAmB,EAAE,CAAC;KACrC,CAAC,CAAC;IACP;;;;;;;;;;;;;;OAcG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;;;;;OAOG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B;;;;;;;;;;;;;OAaG;IACH,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB;;;;;;;;;;;;;;;;;;OAkBG;IACH,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B;;;;;;;;;OASG;IACH,aAAa,CAAC,EAAE,mBAAmB,CAAC;IACpC;;;;;;OAMG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB;;;;;OAKG;IACH,kBAAkB,CAAC,EAAE,CAAC,OAAO,EAAE;QAC7B,OAAO,EAAE,OAAO,iBAAiB,EAAE,OAAO,CAAC;QAC3C,IAAI,EAAE,MAAM,CAAC;QACb,OAAO,EAAE,OAAO,iBAAiB,EAAE,iBAAiB,CAAC;QACrD,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;KAC/B,KACG,OAAO,iBAAiB,EAAE,OAAO,GACjC,MAAM,GACN,IAAI,GACJ,SAAS,GACT,OAAO,CAAC,OAAO,iBAAiB,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;IAC3E;;;;;;;;;;OAUG;IACH,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC;;;;;;;;;;;;;;;;;;;;;OAqBG;IACH,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAE5B;;;;;;;OAOG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IAErB;;;;;;;;;;;;;;;;;;OAkBG;IACH,aAAa,CAAC,EAAE;QACd,UAAU,CAAC,EAAE,KAAK,GAAG,WAAW,GAAG,SAAS,CAAC;QAC7C;;;;WAIG;QACH,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;KACxB,CAAC;IAEF;;;OAGG;IACH,UAAU,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAC9D;AAyLD;;;;;;;;GAQG;AACH,iBAAS,qBAAqB,CAC5B,QAAQ,CAAC,EAAE,cAAc,EACzB,OAAO,CAAC,EAAE;IAAE,aAAa,CAAC,EAAE,mBAAmB,CAAC;IAAC,cAAc,CAAC,EAAE,OAAO,CAAA;CAAE,GAC1E;IACD,cAAc,EAAE,MAAM,CAAC;IACvB,sBAAsB,EAAE,MAAM,CAAC;IAC/B,qBAAqB,EAAE,MAAM,CAAC;IAC9B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,6BAA6B,EAAE,MAAM,CAAC;IACtC,4BAA4B,EAAE,MAAM,CAAC;CACtC,CAoKA;AAED,eAAO,MAAM,gCAAgC;;;;;;;CAczC,CAAC;AAEL;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,wBAAsB,sBAAsB,CAC1C,KAAK,EAAE,MAAM,EACb,OAAO,UAAQ,EACf,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,MAAM,CAAC,CAoLjB;AAsBD;;;;;;;;;;;GAWG;AACH,iBAAS,qBAAqB,CAC5B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,EACrC,IAAI,GAAE,KAAK,GAAG,MAAe,GAC5B,MAAM,CAoER;AA0KD,wBAAgB,sCAAsC,CAAC,KAAK,EAAE;IAC5D,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACtB,GAAG,OAAO,CA2BV;AAED,wBAAgB,qBAAqB,CACnC,OAAO,CAAC,EAAE,sBAAsB,GAC/B,cAAc,CAozIhB;AAED;;;;GAIG;AACH,eAAO,MAAM,sBAAsB,EAAE,cAAwC,CAAC;AAa9E,yEAAyE;AACzE,wBAAgB,mBAAmB,IAAI,gBAAgB,GAAG,IAAI,CAE7D;AAED,yFAAyF;AACzF,wBAAsB,uBAAuB,IAAI,OAAO,CAAC,OAAO,CAAC,CAKhE"}

package/dist/server/agent-chat-plugin.js

@@ -5271,6 +5271,11 @@ Non-code requests are still fine on this surface: read data, navigate the UI, su
                                     refPath: item.refPath,
                                     refId: item.refId,
                                     section: provider.label,
+                                    slotKey: item.slotKey,
+                                    slotLabel: item.slotLabel,
+                                    metadata: item.metadata,
+                                    clearsSlots: item.clearsSlots,
+                                    relatedReferences: item.relatedReferences,
                                 })));
                             }
                             catch (e) {