@agent-team-foundation/first-tree-hub 0.12.10 → 0.14.0

package/dist/{client-BViGcaUC-CZb2Svgh.mjs → client-RM_03B_l-DiEIa9xe.mjs}

@@ -1,10 +1,10 @@
 import { O as withSpan, f as messageAttrs, s as createLogger } from "./observability-BAScT_5S-BcW9HgkG.mjs";
-import { F as extractMentions, b as clientCapabilitiesSchema, i as AGENT_STATUSES, it as questionMessageContentSchema, j as defaultParticipantMode, lt as scanMentionTokens, o as AGENT_VISIBILITY, rt as questionAnswerMessageContentSchema, s as CHAT_ENGAGEMENT_STATUSES, v as agentTypeSchema } from "./dist-B1GHzMLc.mjs";
-import { a as ConflictError, i as ClientUserMismatchError, l as organizations, n as BadRequestError, o as ForbiddenError, s as NotFoundError, u as users } from "./errors-CF5evtJt-B0NTIVPt.mjs";
+import { L as extractMentions, N as defaultParticipantMode, S as clientCapabilitiesSchema, b as agentTypeSchema, ct as questionAnswerMessageContentSchema, i as AGENT_STATUSES, lt as questionMessageContentSchema, mt as scanMentionTokens, o as AGENT_VISIBILITY, s as CHAT_ENGAGEMENT_STATUSES } from "./dist-1XGLJMOq.mjs";
+import { a as ConflictError, i as ClientUserMismatchError, l as organizations, n as BadRequestError, o as ForbiddenError, s as NotFoundError, u as users } from "./errors-LPcARA4K-Dbrptiyz.mjs";
 import { randomUUID } from "node:crypto";
 import { and, desc, eq, inArray, isNotNull, lt, ne, or, sql } from "drizzle-orm";
-import { bigserial, boolean, index, integer, jsonb, pgTable, primaryKey, text, timestamp, unique } from "drizzle-orm/pg-core";
-//#region ../server/dist/client-BViGcaUC.mjs
+import { bigserial, boolean, customType, index, integer, jsonb, pgTable, primaryKey, text, timestamp, unique } from "drizzle-orm/pg-core";
+//#region ../server/dist/client-RM_03B_l.mjs
 /**
 * Client connections. A client is a single SDK process (AgentRuntime) that may
 * host multiple agents. From the unified-user-token milestone on, a client is
@@ -33,6 +33,13 @@ const clients = pgTable("clients", {
 	lastSeenAt: timestamp("last_seen_at", { withTimezone: true }).notNull().defaultNow(),
 	metadata: jsonb("metadata").$type()
 }, (table) => [index("idx_clients_user").on(table.userId), index("idx_clients_org").on(table.organizationId)]);
+/**
+* `bytea` column type — Drizzle ships pg primitives but not bytea out of the
+* box. Reads come back as Node `Buffer` (postgres-js); writes accept any
+* `Uint8Array`. Used for the small inline avatar image blob; no streaming
+* needed at this size (≤ ~50 KB after client-side resize).
+*/
+const bytea = customType({ dataType: () => "bytea" });
 /** Agent registration. Each agent owns a unique inboxId for message delivery. */
 const agents = pgTable("agents", {
 	uuid: text("uuid").primaryKey(),
@@ -49,6 +56,10 @@ const agents = pgTable("agents", {
 	managerId: text("manager_id").notNull(),
 	clientId: text("client_id").references(() => clients.id, { onDelete: "restrict" }),
 	runtimeProvider: text("runtime_provider").notNull().default("claude-code"),
+	avatarColorToken: text("avatar_color_token"),
+	avatarImageData: bytea("avatar_image_data"),
+	avatarImageMime: text("avatar_image_mime"),
+	avatarImageUpdatedAt: timestamp("avatar_image_updated_at", { withTimezone: true }),
 	createdAt: timestamp("created_at", { withTimezone: true }).notNull().defaultNow(),
 	updatedAt: timestamp("updated_at", { withTimezone: true }).notNull().defaultNow()
 }, (table) => [
@@ -1306,6 +1317,7 @@ const pendingQuestions = pgTable("pending_questions", {
 const INBOX_CHANNEL = "inbox_notifications";
 const CONFIG_CHANNEL = "config_changes";
 const SESSION_STATE_CHANNEL = "session_state_changes";
+const SESSION_EVENT_CHANNEL = "session_event_changes";
 const RUNTIME_STATE_CHANNEL = "runtime_state_changes";
 /**
 * Chat-first workspace cross-process kick. Carries `<chatId>:<messageId>`.
@@ -1326,12 +1338,14 @@ function createNotifier(listenClient) {
 	const subscriptions = /* @__PURE__ */ new Map();
 	const configChangeHandlers = [];
 	const sessionStateChangeHandlers = [];
+	const sessionEventHandlers = [];
 	const runtimeStateChangeHandlers = [];
 	const chatMessageHandlers = [];
 	const adminBroadcastHandlers = [];
 	let unlistenInboxFn = null;
 	let unlistenConfigFn = null;
 	let unlistenSessionStateFn = null;
+	let unlistenSessionEventFn = null;
 	let unlistenRuntimeStateFn = null;
 	let unlistenChatMessageFn = null;
 	let unlistenAdminBroadcastFn = null;
@@ -1384,6 +1398,11 @@ function createNotifier(listenClient) {
 				await listenClient`SELECT pg_notify(${SESSION_STATE_CHANNEL}, ${`${agentId}:${chatId}:${state}:${organizationId}`})`;
 			} catch {}
 		},
+		async notifySessionEvent(agentId, chatId, kind, organizationId) {
+			try {
+				await listenClient`SELECT pg_notify(${SESSION_EVENT_CHANNEL}, ${`${agentId}:${chatId}:${kind}:${organizationId}`})`;
+			} catch {}
+		},
 		async notifyRuntimeStateChange(agentId, state, organizationId) {
 			try {
 				await listenClient`SELECT pg_notify(${RUNTIME_STATE_CHANNEL}, ${`${agentId}:${state}:${organizationId}`})`;
@@ -1432,6 +1451,9 @@ function createNotifier(listenClient) {
 		onSessionStateChange(handler) {
 			sessionStateChangeHandlers.push(handler);
 		},
+		onSessionEvent(handler) {
+			sessionEventHandlers.push(handler);
+		},
 		onRuntimeStateChange(handler) {
 			runtimeStateChangeHandlers.push(handler);
 		},
@@ -1467,6 +1489,27 @@ function createNotifier(listenClient) {
 					}
 				}
 			})).unlisten;
+			unlistenSessionEventFn = (await listenClient.listen(SESSION_EVENT_CHANNEL, (payload) => {
+				if (payload) {
+					const firstSep = payload.indexOf(":");
+					const secondSep = payload.indexOf(":", firstSep + 1);
+					const thirdSep = payload.indexOf(":", secondSep + 1);
+					if (firstSep > 0 && secondSep > firstSep && thirdSep > secondSep) {
+						const agentId = payload.slice(0, firstSep);
+						const chatId = payload.slice(firstSep + 1, secondSep);
+						const kind = payload.slice(secondSep + 1, thirdSep);
+						const organizationId = payload.slice(thirdSep + 1);
+						for (const handler of sessionEventHandlers) try {
+							handler({
+								agentId,
+								chatId,
+								kind,
+								organizationId
+							});
+						} catch {}
+					}
+				}
+			})).unlisten;
 			unlistenRuntimeStateFn = (await listenClient.listen(RUNTIME_STATE_CHANNEL, (payload) => {
 				if (payload) {
 					const firstSep = payload.indexOf(":");
@@ -1524,6 +1567,10 @@ function createNotifier(listenClient) {
 				await unlistenSessionStateFn();
 				unlistenSessionStateFn = null;
 			}
+			if (unlistenSessionEventFn) {
+				await unlistenSessionEventFn();
+				unlistenSessionEventFn = null;
+			}
 			if (unlistenRuntimeStateFn) {
 				await unlistenRuntimeStateFn();
 				unlistenRuntimeStateFn = null;
@@ -1748,7 +1795,7 @@ async function sendMessageInner(db, chatId, senderId, data, options) {
 		} : incomingMeta;
 		const dmAutoProjection = chatType === "direct" ? [...new Set([...mergedMentions, ...participants.filter((p) => p.agentId !== senderId).map((p) => p.agentId)])] : mergedMentions;
 		if (options.enforceGroupMention && chatType === "group") {
-			if (mergedMentions.filter((id) => id !== senderId).length === 0) throw new BadRequestError("Sending to a group chat requires an explicit @mention. Use `agent send <name>` to message a single agent, or @<name> in the content to address one or more group members.");
+			if (mergedMentions.filter((id) => id !== senderId).length === 0) throw new BadRequestError("Sending to a group chat requires an explicit @mention. Use `first-tree-hub chat send <name>` to message a single agent, or @<name> in the content to address one or more group members.");
 		}
 		let outboundContent = data.content;
 		if (options.normalizeMentionsInContent && typeof outboundContent === "string") {
@@ -1933,7 +1980,7 @@ async function sendToAgent(db, senderUuid, targetName, data) {
 	}).from(agents).where(eq(agents.uuid, senderUuid)).limit(1);
 	if (!sender) throw new NotFoundError(`Agent "${senderUuid}" not found`);
 	const [target] = await db.select({ uuid: agents.uuid }).from(agents).where(and(eq(agents.organizationId, sender.organizationId), eq(agents.name, targetName), ne(agents.status, "deleted"))).limit(1);
-	if (!target) throw new NotFoundError(`Agent "${targetName}" not found${/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(targetName) ? " — `agent send` expects an agent NAME, not a uuid. Run `first-tree-hub agent list` to see available names." : ""}`);
+	if (!target) throw new NotFoundError(`Agent "${targetName}" not found${/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(targetName) ? " — `first-tree-hub chat send` expects an agent NAME, not a uuid. Run `first-tree-hub agent list` to see available names." : ""}`);
 	const incomingMeta = data.metadata ?? {};
 	const existingMentionsRaw = incomingMeta.mentions;
 	const existingMentions = Array.isArray(existingMentionsRaw) ? existingMentionsRaw.filter((m) => typeof m === "string") : [];

package/dist/{client-DNiLcPEq-db3YS57z.mjs → client-gSnsRu5W-v_mC1sRY.mjs}

@@ -1,7 +1,7 @@
 import "./observability-BAScT_5S-BcW9HgkG.mjs";
 import "./logger-core-BTmvdflj-DjW8FM4T.mjs";
-import "./dist-B1GHzMLc.mjs";
-import "./errors-CF5evtJt-B0NTIVPt.mjs";
+import "./dist-1XGLJMOq.mjs";
+import "./errors-LPcARA4K-Dbrptiyz.mjs";
 import "./src-DNBS5Yjj.mjs";
-import { J as listMyPinnedAgents } from "./client-BViGcaUC-CZb2Svgh.mjs";
+import { J as listMyPinnedAgents } from "./client-RM_03B_l-DiEIa9xe.mjs";
 export { listMyPinnedAgents };

package/dist/{dist-B1GHzMLc.mjs → dist-1XGLJMOq.mjs}

@@ -185,6 +185,7 @@ z.object({
 const PROMPT_APPEND_MAX_LENGTH = 32e3;
 const MCP_NAME_PATTERN = /^[a-z0-9][a-z0-9_-]{0,63}$/i;
 const ENV_KEY_PATTERN = /^[A-Z][A-Z0-9_]*$/;
+const WINDOWS_DRIVE_PATH_PATTERN = /^[A-Za-z]:/;
 const promptConfigSchema = z.object({ append: z.string().max(PROMPT_APPEND_MAX_LENGTH).default("") });
 const mcpStdioServerSchema = z.object({
 	name: z.string().regex(MCP_NAME_PATTERN, "MCP name must match /^[a-z0-9][a-z0-9_-]{0,63}$/i"),
@@ -214,10 +215,38 @@ const envEntrySchema = z.object({
 	value: z.string(),
 	sensitive: z.boolean().default(false)
 });
+function hasControlCharacters(value) {
+	for (let idx = 0; idx < value.length; idx++) {
+		const code = value.charCodeAt(idx);
+		if (code <= 31 || code === 127) return true;
+	}
+	return false;
+}
+function getRepoLocalPathSafetyError(localPath) {
+	if (localPath.length === 0) return "Git repo local path must not be empty";
+	if (localPath.trim() !== localPath) return "Git repo local path must not have leading or trailing whitespace";
+	if (hasControlCharacters(localPath)) return "Git repo local path must not contain control characters";
+	if (localPath.includes("\\")) return "Git repo local path must use forward slashes";
+	if (localPath.startsWith("/") || WINDOWS_DRIVE_PATH_PATTERN.test(localPath)) return "Git repo local path must be relative";
+	const segments = localPath.split("/");
+	for (const segment of segments) {
+		if (!segment) return "Git repo local path must not contain empty path segments";
+		if (segment === "." || segment === "..") return "Git repo local path must not contain dot segments";
+		if (segment.trim() !== segment) return "Git repo local path segments must not have leading or trailing whitespace";
+	}
+	return null;
+}
 const gitRepoSchema = z.object({
 	url: z.string().min(1),
 	ref: z.string().min(1).optional(),
-	localPath: z.string().min(1).optional()
+	localPath: z.string().min(1).superRefine((localPath, ctx) => {
+		const safetyError = getRepoLocalPathSafetyError(localPath);
+		if (!safetyError) return;
+		ctx.addIssue({
+			code: z.ZodIssueCode.custom,
+			message: safetyError
+		});
+	}).optional()
 });
 /**
 * Untagged base shape — 5 user-tunable fields, no `kind` discriminator.
@@ -491,6 +520,16 @@ const AGENT_VISIBILITY = {
 	ORGANIZATION: "organization"
 };
 const agentVisibilitySchema = z.enum(["private", "organization"]);
+const avatarColorTokenSchema = z.enum([
+	"hue-0",
+	"hue-1",
+	"hue-2",
+	"hue-3",
+	"hue-4",
+	"hue-5",
+	"hue-6",
+	"hue-7"
+]);
 const AGENT_STATUSES = {
 	ACTIVE: "active",
 	SUSPENDED: "suspended",
@@ -542,7 +581,8 @@ const updateAgentSchema = z.object({
 	visibility: agentVisibilitySchema.optional(),
 	metadata: z.record(z.string(), z.unknown()).optional(),
 	managerId: z.string().nullable().optional(),
-	clientId: z.string().min(1).max(100).nullable().optional()
+	clientId: z.string().min(1).max(100).nullable().optional(),
+	avatarColorToken: avatarColorTokenSchema.nullable().optional()
 });
 /**
 * Service-level rebind input. Admin / owner re-binds an agent to a new
@@ -571,6 +611,8 @@ z.object({
 	managerId: z.string().nullable(),
 	clientId: z.string().nullable(),
 	runtimeProvider: runtimeProviderSchema,
+	avatarColorToken: z.string().nullable(),
+	avatarImageUrl: z.string().nullable(),
 	presenceStatus: presenceStatusSchema.optional(),
 	createdAt: z.string(),
 	updatedAt: z.string()
@@ -608,12 +650,30 @@ z.object({
 	expiresIn: z.number(),
 	command: z.string()
 });
-const githubEntityTypeSchema = z.enum([
+/**
+* `chats.metadata` is `jsonb` at the DB layer. Without a typed contract every
+* writer was free to invent their own keys, so a GitHub webhook writing
+* `{ source: "github", entityKey: "..." }` and a Feishu adapter writing
+* `{ source: "feishu", externalChannelId: "..." }` could collide on shared
+* keys (`source`, `title`). The discriminated union below pins both writers
+* to a single shape and lets TypeScript narrow on `metadata.source`.
+*
+* Add new variants here; do not extend with free-form `Record<string, unknown>`.
+*/
+/**
+* Source of truth for which github entities get their own tag in the
+* conversation list. Adding a new entry here extends `ChatSource`
+* (`github_${entityType}`) and the SQL CASE/IN-list in
+* `server/services/me-chat.ts` without touching them — both derive from
+* this constant.
+*/
+const GITHUB_ENTITY_TYPES = [
 	"issue",
 	"pull_request",
 	"discussion",
 	"commit"
-]);
+];
+const githubEntityTypeSchema = z.enum(GITHUB_ENTITY_TYPES);
 const githubChatMetadataSchema = z.object({
 	source: z.literal("github"),
 	entityType: githubEntityTypeSchema,
@@ -632,6 +692,14 @@ const chatMetadataSchema = z.discriminatedUnion("source", [githubChatMetadataSch
 * sneak through `{ source: "github" }` without the required fields.
 */
 const optionalChatMetadataSchema = z.union([z.object({}).strict(), chatMetadataSchema]);
+const chatSourceSchema = z.enum([
+	"manual",
+	"github_issue",
+	"github_pull_request",
+	"github_discussion",
+	"github_commit",
+	"feishu"
+]);
 const chatTypeSchema = z.enum(["direct", "group"]);
 /**
 * Per-(chat, user) engagement state. Stored on `chat_user_state` so each
@@ -868,6 +936,11 @@ const contextTreeSummarySchema = z.object({
 	removedCount: z.number().int().nonnegative(),
 	changedNodeCount: z.number().int().nonnegative()
 });
+const contextTreeUsageSummarySchema = z.object({
+	windowDays: z.number().int().positive(),
+	agentCount: z.number().int().nonnegative(),
+	usageCount: z.number().int().nonnegative()
+});
 const contextTreeSnapshotSchema = z.object({
 	repo: z.string().nullable(),
 	branch: z.string().nullable(),
@@ -876,6 +949,7 @@ const contextTreeSnapshotSchema = z.object({
 	snapshotStatus: contextTreeSnapshotStatusSchema,
 	contextStatus: contextTreeStatusSchema,
 	summary: contextTreeSummarySchema,
+	usage: contextTreeUsageSummarySchema,
 	updates: z.array(contextTreeUpdateSchema),
 	nodes: z.array(contextTreeNodeSchema),
 	edges: z.array(contextTreeEdgeSchema),
@@ -1161,13 +1235,38 @@ const listMeChatsQuerySchema = z.object({
 	cursor: z.string().optional(),
 	limit: z.coerce.number().int().min(1).max(200).default(50),
 	filter: meChatFilterSchema.default("all"),
-	engagement: chatEngagementViewSchema.default("active")
+	engagement: chatEngagementViewSchema.default("active"),
+	source: chatSourceSchema.optional()
 });
 const meChatParticipantSchema = z.object({
 	agentId: z.string(),
 	displayName: z.string(),
-	type: z.string()
+	type: z.string(),
+	avatarColorToken: z.string().nullable(),
+	avatarImageUrl: z.string().nullable()
 });
+/**
+* Live activity hint surfaced in the conversation row's time slot. Derived
+* server-side from the latest `session_events` row for the chat. See
+* `MeChatRow.liveActivity` for the lifecycle rules.
+*
+* `kind` is intentionally narrower than the full `sessionEventKind` enum:
+* `turn_end` / `error` produce `liveActivity: null` rather than a live
+* indicator.
+*/
+const liveActivityKindSchema = z.enum([
+	"tool_call",
+	"thinking",
+	"assistant_text"
+]);
+const liveActivitySchema = z.object({
+	agentId: z.string(),
+	kind: liveActivityKindSchema,
+	label: z.string(),
+	startedAt: z.string()
+});
+/** Stale threshold (ms) past which a `session_events` row stops driving liveActivity. */
+const LIVE_ACTIVITY_STALE_MS = 6e4;
 const meChatRowSchema = z.object({
 	chatId: z.string(),
 	type: z.string(),
@@ -1181,7 +1280,8 @@ const meChatRowSchema = z.object({
 	unreadMentionCount: z.number().int(),
 	canReply: z.boolean(),
 	engagementStatus: chatEngagementStatusSchema,
-	workingAgentIds: z.array(z.string())
+	engagedAgentIds: z.array(z.string()),
+	liveActivity: liveActivitySchema.nullable()
 });
 z.object({
 	rows: z.array(meChatRowSchema),
@@ -1205,6 +1305,47 @@ z.object({
 	type: z.literal("chat:message"),
 	chatId: z.string()
 });
+/**
+* Per-source aggregate for the conversation-list tag bar.
+*
+*   - `chatCount` — number of chats the caller is in for this source. Used
+*     to hide tags whose count is 0 ("don't render a PR tag if there are no
+*     PRs").
+*   - `unreadChatCount` — number of chats whose `unread_mention_count > 0`.
+*     This is "chats with unread mentions", NOT "total mention count", so
+*     the badge on each tag matches the semantics of the existing `unread`
+*     filter pill (`totalUnread` in `pages/workspace/conversations`) — a
+*     `2` on the PR tag means "2 PR chats have unread mentions", which is
+*     what a user expects to click into.
+*
+* The map ALWAYS contains the `manual` key (the default tab is always
+* available, even at zero counts); other keys are present only when the
+* caller has at least one chat for that source.
+*/
+const chatSourceCountSchema = z.object({
+	chatCount: z.number().int().nonnegative(),
+	unreadChatCount: z.number().int().nonnegative()
+});
+const listMeChatSourceCountsQuerySchema = z.object({ engagement: chatEngagementViewSchema.default("active") });
+z.object({ counts: z.partialRecord(chatSourceSchema, chatSourceCountSchema) });
+const workspaceDocRefSchema = z.object({
+	type: z.literal("workspace"),
+	chatId: z.string().trim().min(1),
+	agentId: z.string().trim().min(1),
+	basePath: z.string().trim().optional(),
+	path: z.string().trim().min(1)
+});
+z.object({ basePath: z.string().trim().min(1) });
+const getMeDocSchema = z.object({
+	agentId: z.string().trim().min(1),
+	basePath: z.string().trim().optional(),
+	path: z.string().trim().min(1)
+});
+const getMeDocResponseSchema = z.object({
+	ref: workspaceDocRefSchema,
+	path: z.string(),
+	content: z.string()
+});
 z.enum([
 	"connect",
 	"create_agent",
@@ -1263,7 +1404,8 @@ z.object({
 	organizationId: z.string(),
 	organizationName: z.string(),
 	role: z.enum(["admin", "member"]),
-	agentId: z.string()
+	agentId: z.string(),
+	orgHasOtherMembers: z.boolean()
 });
 const memberRoleSchema = z.enum(["admin", "member"]);
 const memberSchema = z.object({
@@ -1674,7 +1816,8 @@ const sessionEventKind = z.enum([
 	"error",
 	"assistant_text",
 	"thinking",
-	"turn_end"
+	"turn_end",
+	"context_tree_usage"
 ]);
 const toolCallEventPayload = z.object({
 	toolUseId: z.string(),
@@ -1716,6 +1859,10 @@ const thinkingEventPayload = z.object({});
 * completed turns to show only the final result message.
 */
 const turnEndEventPayload = z.object({ status: z.enum(["success", "error"]) });
+const contextTreeUsageEventPayload = z.object({
+	purpose: z.literal("design_decision"),
+	treeRepoUrl: z.string().nullable()
+});
 const sessionEventSchema = z.discriminatedUnion("kind", [
 	z.object({
 		kind: z.literal("tool_call"),
@@ -1736,6 +1883,10 @@ const sessionEventSchema = z.discriminatedUnion("kind", [
 	z.object({
 		kind: z.literal("turn_end"),
 		payload: turnEndEventPayload
+	}),
+	z.object({
+		kind: z.literal("context_tree_usage"),
+		payload: contextTreeUsageEventPayload
 	})
 ]);
 z.object({
@@ -1749,7 +1900,8 @@ z.object({
 		errorEventPayload,
 		assistantTextEventPayload,
 		thinkingEventPayload,
-		turnEndEventPayload
+		turnEndEventPayload,
+		contextTreeUsageEventPayload
 	]),
 	createdAt: z.string()
 });
@@ -1826,4 +1978,4 @@ z.object({
 	capabilities: serverCapabilitiesSchema.optional()
 }).passthrough();
 //#endregion
-export { onboardingEventSchema as $, createOrgFromMeSchema as A, githubStartQuerySchema as B, contextTreeSnapshotSchema as C, updateClientCapabilitiesSchema as Ct, createChatSchema as D, createAgentSchema as E, wsAuthFrameSchema as Et, extractMentions as F, isOrgSettingNamespace as G, inboxAckFrameSchema as H, githubAppInstallationClaimBodySchema as I, joinByInvitationSchema as J, isRedactedEnvValue as K, githubAppInstallationPermissionsSchema as L, defaultRuntimeConfigPayload as M, delegateFeishuUserSchema as N, createMeChatSchema as O, dryRunAgentRuntimeConfigSchema as P, notificationQuerySchema as Q, githubCallbackQuerySchema as R, connectTokenExchangeSchema as S, updateChatSchema as St, createAdapterMappingSchema as T, updateOrganizationSchema as Tt, inboxDeliverFrameSchema as U, imageInlineContentSchema as V, inboxPollQuerySchema as W, loginSchema as X, listMeChatsQuerySchema as Y, messageSourceSchema as Z, agentRuntimeConfigPayloadSchema as _, stripCode as _t, AGENT_TYPES as a, rebindAgentSchema as at, clientCapabilitiesSchema as b, updateAgentRuntimeConfigSchema as bt, DEFAULT_RUNTIME_PROVIDER as c, safeRedirectPath as ct, ORG_SETTINGS_NAMESPACES as d, sendMessageSchema as dt, paginationQuerySchema as et, WS_AUTH_FRAME_TIMEOUT_MS as f, sendToAgentSchema as ft, agentPinnedMessageSchema as g, sessionStateMessageSchema as gt, agentBindRequestSchema as h, sessionReconcileRequestSchema as ht, AGENT_STATUSES as i, questionMessageContentSchema as it, defaultParticipantMode as j, createMemberSchema as k, MENTION_REGEX as l, scanMentionTokens as lt, addParticipantSchema as m, sessionEventSchema as mt, AGENT_NAME_REGEX as n, patchOnboardingSchema as nt, AGENT_VISIBILITY as o, refreshTokenSchema as ot, addMeChatParticipantsSchema as p, sessionEventMessageSchema as pt, isReservedAgentName as q, AGENT_SELECTOR_HEADER as r, questionAnswerMessageContentSchema as rt, CHAT_ENGAGEMENT_STATUSES as s, runtimeStateMessageSchema as st, AGENT_BIND_REJECT_REASONS as t, patchChatEngagementSchema as tt, NOTIFICATION_TYPES as u, selfServiceFeishuBotSchema as ut, agentTypeSchema as v, submitQuestionAnswerSchema as vt, createAdapterConfigSchema as w, updateMemberSchema as wt, clientRegisterSchema as x, updateAgentSchema as xt, chatMetadataSchema as y, updateAdapterConfigSchema as yt, githubDevCallbackQuerySchema as z };
+export { listMeChatSourceCountsQuerySchema as $, createMeChatSchema as A, updateOrganizationSchema as At, githubAppInstallationClaimBodySchema as B, clientRegisterSchema as C, submitQuestionAnswerSchema as Ct, createAdapterMappingSchema as D, updateChatSchema as Dt, createAdapterConfigSchema as E, updateAgentSchema as Et, delegateFeishuUserSchema as F, imageInlineContentSchema as G, githubCallbackQuerySchema as H, dryRunAgentRuntimeConfigSchema as I, inboxPollQuerySchema as J, inboxAckFrameSchema as K, extractMentions as L, createOrgFromMeSchema as M, defaultParticipantMode as N, createAgentSchema as O, updateClientCapabilitiesSchema as Ot, defaultRuntimeConfigPayload as P, joinByInvitationSchema as Q, getMeDocResponseSchema as R, clientCapabilitiesSchema as S, stripCode as St, contextTreeSnapshotSchema as T, updateAgentRuntimeConfigSchema as Tt, githubDevCallbackQuerySchema as U, githubAppInstallationPermissionsSchema as V, githubStartQuerySchema as W, isRedactedEnvValue as X, isOrgSettingNamespace as Y, isReservedAgentName as Z, agentBindRequestSchema as _, sendToAgentSchema as _t, AGENT_TYPES as a, paginationQuerySchema as at, agentTypeSchema as b, sessionReconcileRequestSchema as bt, DEFAULT_RUNTIME_PROVIDER as c, questionAnswerMessageContentSchema as ct, MENTION_REGEX as d, refreshTokenSchema as dt, listMeChatsQuerySchema as et, NOTIFICATION_TYPES as f, runtimeStateMessageSchema as ft, addParticipantSchema as g, sendMessageSchema as gt, addMeChatParticipantsSchema as h, selfServiceFeishuBotSchema as ht, AGENT_STATUSES as i, onboardingEventSchema as it, createMemberSchema as j, wsAuthFrameSchema as jt, createChatSchema as k, updateMemberSchema as kt, GITHUB_ENTITY_TYPES as l, questionMessageContentSchema as lt, WS_AUTH_FRAME_TIMEOUT_MS as m, scanMentionTokens as mt, AGENT_NAME_REGEX as n, messageSourceSchema as nt, AGENT_VISIBILITY as o, patchChatEngagementSchema as ot, ORG_SETTINGS_NAMESPACES as p, safeRedirectPath as pt, inboxDeliverFrameSchema as q, AGENT_SELECTOR_HEADER as r, notificationQuerySchema as rt, CHAT_ENGAGEMENT_STATUSES as s, patchOnboardingSchema as st, AGENT_BIND_REJECT_REASONS as t, loginSchema as tt, LIVE_ACTIVITY_STALE_MS as u, rebindAgentSchema as ut, agentPinnedMessageSchema as v, sessionEventMessageSchema as vt, connectTokenExchangeSchema as w, updateAdapterConfigSchema as wt, chatMetadataSchema as x, sessionStateMessageSchema as xt, agentRuntimeConfigPayloadSchema as y, sessionEventSchema as yt, getMeDocSchema as z };

package/dist/drizzle/0043_onboarding_completed_at.sql

@@ -0,0 +1,32 @@
+-- Onboarding terminal-state stamp. Distinct from `onboarding_dismissed_at`:
+--
+--   * `onboarding_dismissed_at` means "the user clicked ✕ on the stepper" —
+--     a UI hide, not a setup-complete signal. The user can resume the
+--     wizard from Settings → Onboarding to land back on whichever step is
+--     still incomplete.
+--
+--   * `onboarding_completed_at` means "the user actually walked Step 3 to
+--     success" (admin Continue, invitee Confirm/Continue). Once set, the
+--     Settings → Onboarding entry point and Resume button disappear
+--     permanently. Subsequent tree / source-repo edits go through Settings
+--     → Team and /agents/:uuid.
+--
+-- The two stamps are intentionally orthogonal: `inferOnboardingStep()`
+-- keeps its existing "infer from current resources" semantics and never
+-- consults this column. This field is UI-gate only.
+--
+-- Backfill: every already-dismissed user is treated as completed. The pre-
+-- column population (mid-2025) had no terminal-state concept, so the only
+-- signal we have is "they hid the stepper" — and the alternative (showing
+-- the Onboarding sidebar entry to every legacy user forever) is worse than
+-- the off-by-one risk that a few users dismissed-without-finishing and
+-- will lose their Resume affordance.
+
+ALTER TABLE "users"
+  ADD COLUMN IF NOT EXISTS "onboarding_completed_at" timestamp with time zone;
+
+--> statement-breakpoint
+UPDATE "users"
+   SET "onboarding_completed_at" = "onboarding_dismissed_at"
+ WHERE "onboarding_dismissed_at" IS NOT NULL
+   AND "onboarding_completed_at" IS NULL;

package/dist/drizzle/0044_agent_avatar_color.sql

@@ -0,0 +1,11 @@
+-- Add avatar_color_token to agents.
+--
+-- Manager-selected avatar fill color override for the web client. One of
+-- "hue-0".."hue-7", matching the `--avatar-hue-*` CSS tokens in
+-- `packages/web/src/index.css`. NULL means "auto" — the renderer falls
+-- back to the deterministic djb2 hash of `uuid` (the previous default).
+--
+-- Nullable, no default, no backfill: existing rows continue to render the
+-- hashed color until their manager picks something explicit. This is a
+-- pure additive change; no NOT NULL constraint, no enum, no FK.
+ALTER TABLE "agents" ADD COLUMN "avatar_color_token" text;

package/dist/drizzle/0045_agent_avatar_image.sql

@@ -0,0 +1,17 @@
+-- Add inline avatar image storage to agents.
+--
+-- The PRD chose PG bytea over object storage for the first cut: clients
+-- always pre-resize to 256×256 WEBP (typically < 50 KB), and a few KB ×
+-- N agents per org sits well within row-size budgets. Switching to S3/R2
+-- later is a follow-up migration; the column shape stays the same except
+-- avatar_image_data flips to NULL and avatar_image_url moves to a real
+-- external URL.
+--
+-- All three columns are nullable and move together — either all three
+-- carry an image (data + mime + updated_at) or all are NULL. The service
+-- layer enforces that invariant on writes; SQL keeps it loose so a partial
+-- backfill / restore doesn't break inserts.
+ALTER TABLE "agents"
+  ADD COLUMN "avatar_image_data" bytea,
+  ADD COLUMN "avatar_image_mime" text,
+  ADD COLUMN "avatar_image_updated_at" timestamp with time zone;

package/dist/drizzle/meta/_journal.json

@@ -302,6 +302,27 @@
       "when": 1779408000000,
       "tag": "0042_notifications_drop_legacy_types",
       "breakpoints": true
+    },
+    {
+      "idx": 43,
+      "version": "7",
+      "when": 1779494400000,
+      "tag": "0043_onboarding_completed_at",
+      "breakpoints": true
+    },
+    {
+      "idx": 44,
+      "version": "7",
+      "when": 1779580800000,
+      "tag": "0044_agent_avatar_color",
+      "breakpoints": true
+    },
+    {
+      "idx": 45,
+      "version": "7",
+      "when": 1779667200000,
+      "tag": "0045_agent_avatar_image",
+      "breakpoints": true
     }
   ]
 }

package/dist/{errors-CF5evtJt-B0NTIVPt.mjs → errors-LPcARA4K-Dbrptiyz.mjs}

@@ -1,5 +1,5 @@
 import { integer, jsonb, pgTable, text, timestamp } from "drizzle-orm/pg-core";
-//#region ../server/dist/errors-CF5evtJt.mjs
+//#region ../server/dist/errors-LPcARA4K.mjs
 /** Organization entity. Agents and chats belong to exactly one organization. */
 const organizations = pgTable("organizations", {
 	id: text("id").primaryKey(),
@@ -20,6 +20,7 @@ const users = pgTable("users", {
 	avatarUrl: text("avatar_url"),
 	status: text("status").notNull().default("active"),
 	onboardingDismissedAt: timestamp("onboarding_dismissed_at", { withTimezone: true }),
+	onboardingCompletedAt: timestamp("onboarding_completed_at", { withTimezone: true }),
 	createdAt: timestamp("created_at", { withTimezone: true }).notNull().defaultNow(),
 	updatedAt: timestamp("updated_at", { withTimezone: true }).notNull().defaultNow()
 });

package/dist/{feishu-30vUx69l.mjs → feishu-BGx71p5s.mjs}

@@ -1,6 +1,6 @@
 import { r as __exportAll } from "./chunk-BSw8zbkd.mjs";
 import { t as cliFetch } from "./cli-fetch--tiwKm5S.mjs";
-import { r as AGENT_SELECTOR_HEADER } from "./dist-B1GHzMLc.mjs";
+import { r as AGENT_SELECTOR_HEADER } from "./dist-1XGLJMOq.mjs";
 //#region src/core/feishu.ts
 var feishu_exports = /* @__PURE__ */ __exportAll({
 	bindFeishuBot: () => bindFeishuBot,

package/dist/index.mjs

@@ -1,12 +1,12 @@
 import "./observability-BAScT_5S-BcW9HgkG.mjs";
-import { A as checkDocker, B as isServiceSupported, E as checkAgentConfigs, F as checkWebSocket, G as uninstallClientService, H as restartClientService, I as printResults, J as stopPostgres, K as ensurePostgres, M as checkServerConfig, N as checkServerHealth, O as checkClientConfig, P as checkServerReachable, R as getClientServiceStatus, S as runHomeMigration, T as runMigrations, U as startClientService, V as resolveCliInvocation, W as stopClientService, X as handleClientOrgMismatch, Y as ClientRuntime, Z as rotateClientIdWithBackup, _ as formatCheckReport, b as onboardCreate, d as startServer, g as promptMissingFields, h as promptAddAgent, j as checkNodeVersion, k as checkDatabase, lt as FirstTreeHubSDK, m as isInteractive, n as deriveHubUrlFromToken, nt as hasUser, q as isDockerAvailable, t as HubUrlDerivationError, tt as createOwner, ut as SdkError, y as onboardCheck, z as installClientService } from "./saas-connect-Fgnnnola.mjs";
+import { A as checkDocker, B as isServiceSupported, E as checkAgentConfigs, F as checkWebSocket, G as uninstallClientService, H as restartClientService, I as printResults, J as stopPostgres, K as ensurePostgres, M as checkServerConfig, N as checkServerHealth, O as checkClientConfig, P as checkServerReachable, R as getClientServiceStatus, S as runHomeMigration, T as runMigrations, U as startClientService, V as resolveCliInvocation, W as stopClientService, X as handleClientOrgMismatch, Y as ClientRuntime, Z as rotateClientIdWithBackup, _ as formatCheckReport, b as onboardCreate, d as startServer, g as promptMissingFields, h as promptAddAgent, j as checkNodeVersion, k as checkDatabase, lt as FirstTreeHubSDK, m as isInteractive, n as deriveHubUrlFromToken, nt as hasUser, q as isDockerAvailable, t as HubUrlDerivationError, tt as createOwner, ut as SdkError, y as onboardCheck, z as installClientService } from "./saas-connect-DX3-nDs9.mjs";
 import "./logger-core-BTmvdflj-DjW8FM4T.mjs";
-import { a as ensureFreshAdminToken, c as resolveServerUrl, i as ensureFreshAccessToken, n as AuthRefreshRateLimitedError, s as resolveAccessToken, t as AuthRefreshFailedError } from "./bootstrap-CW73oEYn.mjs";
+import { a as ensureFreshAdminToken, c as resolveServerUrl, i as ensureFreshAccessToken, n as AuthRefreshRateLimitedError, s as resolveAccessToken, t as AuthRefreshFailedError } from "./bootstrap-C15ZBOCC.mjs";
 import { i as blank, s as status } from "./cli-fetch--tiwKm5S.mjs";
-import "./dist-B1GHzMLc.mjs";
-import { n as bindFeishuUser, t as bindFeishuBot } from "./feishu-30vUx69l.mjs";
-import "./errors-CF5evtJt-B0NTIVPt.mjs";
+import "./dist-1XGLJMOq.mjs";
+import { n as bindFeishuUser, t as bindFeishuBot } from "./feishu-BGx71p5s.mjs";
+import "./errors-LPcARA4K-Dbrptiyz.mjs";
 import "./src-DNBS5Yjj.mjs";
-import "./client-BViGcaUC-CZb2Svgh.mjs";
-import "./invitation-Bg0TRiyx-BsZH4GCS.mjs";
+import "./client-RM_03B_l-DiEIa9xe.mjs";
+import "./invitation-DZO4NX3P-BPxTeHf-.mjs";
 export { AuthRefreshFailedError, AuthRefreshRateLimitedError, ClientRuntime, FirstTreeHubSDK, HubUrlDerivationError, SdkError, bindFeishuBot, bindFeishuUser, blank, checkAgentConfigs, checkClientConfig, checkDatabase, checkDocker, checkNodeVersion, checkServerConfig, checkServerHealth, checkServerReachable, checkWebSocket, createOwner, deriveHubUrlFromToken, ensureFreshAccessToken, ensureFreshAdminToken, ensurePostgres, formatCheckReport, getClientServiceStatus, handleClientOrgMismatch, hasUser, installClientService, isDockerAvailable, isInteractive, isServiceSupported, onboardCheck, onboardCreate, printResults, promptAddAgent, promptMissingFields, resolveAccessToken, resolveCliInvocation, resolveServerUrl, restartClientService, rotateClientIdWithBackup, runHomeMigration, runMigrations, startClientService, startServer, status, stopClientService, stopPostgres, uninstallClientService };

package/dist/invitation-CNv7gfFF-DOFZ75wb.mjs

@@ -0,0 +1,4 @@
+import "./dist-1XGLJMOq.mjs";
+import "./errors-LPcARA4K-Dbrptiyz.mjs";
+import { s as previewInvitation } from "./invitation-DZO4NX3P-BPxTeHf-.mjs";
+export { previewInvitation };

package/dist/{invitation-Bg0TRiyx-BsZH4GCS.mjs → invitation-DZO4NX3P-BPxTeHf-.mjs}

@@ -1,8 +1,8 @@
-import { l as organizations, s as NotFoundError, u as users } from "./errors-CF5evtJt-B0NTIVPt.mjs";
+import { l as organizations, s as NotFoundError, u as users } from "./errors-LPcARA4K-Dbrptiyz.mjs";
 import { randomBytes } from "node:crypto";
 import { and, desc, eq, gt, isNull, or } from "drizzle-orm";
 import { index, pgTable, text, timestamp } from "drizzle-orm/pg-core";
-//#region ../server/dist/invitation-Bg0TRiyx.mjs
+//#region ../server/dist/invitation-DZO4NX3P.mjs
 /** Generate a UUID v7 (time-ordered). No external dependency. */
 function uuidv7() {
 	const now = BigInt(Date.now());