@agent-team-foundation/first-tree-hub 0.14.2 → 0.14.4

package/dist/{bootstrap-C15ZBOCC.mjs → bootstrap-CQQGgIx1.mjs}

@@ -570,13 +570,6 @@ const serverConfigSchema = defineConfig({
 		refreshTokenExpiry: field(z.string().default("30d"), { env: "FIRST_TREE_HUB_AUTH_REFRESH_TOKEN_EXPIRY" }),
 		connectTokenExpiry: field(z.string().default("10m"), { env: "FIRST_TREE_HUB_AUTH_CONNECT_TOKEN_EXPIRY" })
 	},
-	contextTreeSync: optional({
-		githubToken: field(z.string(), {
-			env: "FIRST_TREE_HUB_CONTEXT_TREE_GITHUB_TOKEN",
-			secret: true
-		}),
-		githubTokenRepos: field(z.string().optional(), { env: "FIRST_TREE_HUB_CONTEXT_TREE_GITHUB_TOKEN_REPOS" })
-	}),
 	oauth: optional({ githubApp: optional({
 		appId: field(z.string().min(1), { env: "FIRST_TREE_HUB_GITHUB_APP_ID" }),
 		clientId: field(z.string().min(1), { env: "FIRST_TREE_HUB_GITHUB_APP_CLIENT_ID" }),

package/dist/cli/index.mjs

@@ -1,14 +1,14 @@
 #!/usr/bin/env node
 import "../observability-BAScT_5S-BcW9HgkG.mjs";
-import { $ as formatStaleReason, A as checkDocker, B as isServiceSupported, C as createApiNameResolver, D as checkBackgroundService, E as checkAgentConfigs, F as checkWebSocket, H as restartClientService, I as printResults, J as stopPostgres, L as reconcileAgentConfigs, M as checkServerConfig, N as checkServerHealth, O as checkClientConfig, P as checkServerReachable, Q as findStaleAliases, R as getClientServiceStatus, S as runHomeMigration, T as runMigrations, U as startClientService, W as stopClientService, X as handleClientOrgMismatch, Y as ClientRuntime, _ as formatCheckReport, a as declineUpdate, at as fail, b as onboardCreate, c as detectInstallMode, ct as ClientUserMismatchError, d as startServer, dt as SessionRegistry, et as removeLocalAgent, f as reconcileLocalRuntimeProviders, ft as cleanWorkspaces, g as promptMissingFields, h as promptAddAgent, ht as configureClientLoggerForService, i as createExecuteUpdate, it as resolveSenderName, j as checkNodeVersion, k as checkDatabase, l as fetchLatestVersion, lt as FirstTreeHubSDK, m as isInteractive, mt as applyClientLoggerConfig, o as promptUpdate, ot as success, p as uploadClientCapabilities, pt as probeCapabilities, r as registerSaaSConnectCommand, rt as resolveReplyToFromEnv, s as PACKAGE_NAME, st as ClientOrgMismatchError, tt as createOwner, u as installGlobalLatest, ut as SdkError, v as loadOnboardState, w as migrateLocalAgentDirs, x as saveOnboardState, y as onboardCheck, z as installClientService } from "../saas-connect-DgCSZ8Yk.mjs";
+import { $ as formatStaleReason, A as checkDocker, B as isServiceSupported, C as createApiNameResolver, D as checkBackgroundService, E as checkAgentConfigs, F as checkWebSocket, H as restartClientService, I as printResults, J as stopPostgres, L as reconcileAgentConfigs, M as checkServerConfig, N as checkServerHealth, O as checkClientConfig, P as checkServerReachable, Q as findStaleAliases, R as getClientServiceStatus, S as runHomeMigration, T as runMigrations, U as startClientService, W as stopClientService, X as handleClientOrgMismatch, Y as ClientRuntime, _ as formatCheckReport, a as declineUpdate, at as fail, b as onboardCreate, c as detectInstallMode, ct as ClientUserMismatchError, d as startServer, dt as SessionRegistry, et as removeLocalAgent, f as reconcileLocalRuntimeProviders, ft as cleanWorkspaces, g as promptMissingFields, h as promptAddAgent, ht as configureClientLoggerForService, i as createExecuteUpdate, it as resolveSenderName, j as checkNodeVersion, k as checkDatabase, l as fetchLatestVersion, lt as FirstTreeHubSDK, m as isInteractive, mt as applyClientLoggerConfig, o as promptUpdate, ot as success, p as uploadClientCapabilities, pt as probeCapabilities, r as registerSaaSConnectCommand, rt as resolveReplyToFromEnv, s as PACKAGE_NAME, st as ClientOrgMismatchError, tt as createOwner, u as installGlobalLatest, ut as SdkError, v as loadOnboardState, w as migrateLocalAgentDirs, x as saveOnboardState, y as onboardCheck, z as installClientService } from "../saas-connect-Da55XxRX.mjs";
 import "../logger-core-BTmvdflj-DjW8FM4T.mjs";
-import { C as resetConfigMeta, E as setConfigValue, S as resetConfig, T as serverConfigSchema, _ as getConfigValue, a as ensureFreshAdminToken, c as resolveServerUrl, d as DEFAULT_CONFIG_DIR, f as DEFAULT_DATA_DIR, h as clientConfigSchema, i as ensureFreshAccessToken, l as saveAgentConfig, m as agentConfigSchema, o as loadCredentials, p as DEFAULT_HOME_DIR, v as initConfig, w as resolveConfigReadonly, x as readConfigFile, y as loadAgents } from "../bootstrap-C15ZBOCC.mjs";
+import { C as resetConfigMeta, E as setConfigValue, S as resetConfig, T as serverConfigSchema, _ as getConfigValue, a as ensureFreshAdminToken, c as resolveServerUrl, d as DEFAULT_CONFIG_DIR, f as DEFAULT_DATA_DIR, h as clientConfigSchema, i as ensureFreshAccessToken, l as saveAgentConfig, m as agentConfigSchema, o as loadCredentials, p as DEFAULT_HOME_DIR, v as initConfig, w as resolveConfigReadonly, x as readConfigFile, y as loadAgents } from "../bootstrap-CQQGgIx1.mjs";
 import { a as print, n as CLI_USER_AGENT, o as setJsonMode, r as COMMAND_VERSION, t as cliFetch } from "../cli-fetch--tiwKm5S.mjs";
-import "../dist-DmYxT5Kb.mjs";
-import { n as bindFeishuUser, t as bindFeishuBot } from "../feishu-CCWd-JE4.mjs";
+import "../dist-CrdnqZjv.mjs";
+import { n as bindFeishuUser, t as bindFeishuBot } from "../feishu-DNoBroKK.mjs";
 import "../uuid-DbS_4vFh-iFghv4zA.mjs";
 import "../src-DNBS5Yjj.mjs";
-import "../client-CZ_VnbEc-CBF46cJd.mjs";
+import "../client-BPRIfrOT-CoV_2o7e.mjs";
 import "../invitation-D_ENPHyj-5ETiae5r.mjs";
 import { join } from "node:path";
 import { existsSync, mkdirSync, readFileSync, readdirSync } from "node:fs";
@@ -255,11 +255,6 @@ function handleSdkError$1(error) {
 	if (error instanceof TypeError && "cause" in error) fail("CONNECTION_ERROR", `Cannot connect to server: ${error.message}`, 6);
 	fail("UNKNOWN_ERROR", error instanceof Error ? error.message : String(error), 1);
 }
-function parseLimit$1(value, max) {
-	const limit = Number.parseInt(value, 10);
-	if (Number.isNaN(limit) || limit < 1 || limit > max) fail("INVALID_LIMIT", `Limit must be between 1 and ${max}.`, 2);
-	return limit;
-}
 async function resolveAgent$1(serverUrl, adminToken, agentName) {
 	const res = await cliFetch(`${serverUrl}/api/v1/me/managed-agents`, {
 		headers: { Authorization: `Bearer ${adminToken}` },
@@ -693,25 +688,13 @@ function registerAgentCommands(program) {
 			fail("SESSION_CMD_ERROR", error instanceof Error ? error.message : String(error));
 		}
 	});
-	const debugCmd = agent.command("debug", { hidden: true }).description("Low-level SDK debug commands");
-	debugCmd.command("register").description("Register this agent and return identity info").option("--agent <name>", "Agent name on the Hub (default: first configured on this client)").action(async (options) => {
+	agent.command("debug", { hidden: true }).description("Low-level SDK debug commands").command("register").description("Register this agent and return identity info").option("--agent <name>", "Agent name on the Hub (default: first configured on this client)").action(async (options) => {
 		try {
 			success(await createSdk$1(options.agent).register());
 		} catch (error) {
 			handleSdkError$1(error);
 		}
 	});
-	debugCmd.command("pull").description("Pull pending messages from inbox").option("-l, --limit <number>", "Maximum entries to return", "10").option("-a, --ack", "Automatically ACK entries after pulling").option("--agent <name>", "Agent name on the Hub (default: first configured on this client)").action(async (options) => {
-		try {
-			const sdk = createSdk$1(options.agent);
-			const limit = parseLimit$1(options.limit, 50);
-			const result = await sdk.pull(limit);
-			if (options.ack && result.entries.length > 0) await Promise.all(result.entries.map((entry) => sdk.ack(entry.id)));
-			success(result);
-		} catch (error) {
-			handleSdkError$1(error);
-		}
-	});
 }
 //#endregion
 //#region src/commands/chat.ts
@@ -1487,13 +1470,13 @@ function decodeJwtExpSeconds(token) {
 //#region src/commands/onboard.ts
 async function promptMissing(args) {
 	if (!args.server) try {
-		const { resolveServerUrl } = await import("../bootstrap-C15ZBOCC.mjs").then((n) => n.r);
+		const { resolveServerUrl } = await import("../bootstrap-CQQGgIx1.mjs").then((n) => n.r);
 		resolveServerUrl();
 	} catch {
 		args.server = await input({ message: "Hub server URL:" });
 		saveOnboardState(args);
 	}
-	const { loadCredentials } = await import("../bootstrap-C15ZBOCC.mjs").then((n) => n.r);
+	const { loadCredentials } = await import("../bootstrap-CQQGgIx1.mjs").then((n) => n.r);
 	if (!loadCredentials()) throw new Error("No saved credentials. Run `first-tree-hub connect <token>` before onboarding.");
 	if (!args.id) {
 		args.id = await input({ message: "Agent ID:" });

package/dist/{client-CZ_VnbEc-CBF46cJd.mjs → client-BPRIfrOT-CoV_2o7e.mjs}

@@ -1,10 +1,10 @@
 import { A as FIRST_TREE_HUB_ATTR, O as withSpan, f as messageAttrs, s as createLogger } from "./observability-BAScT_5S-BcW9HgkG.mjs";
-import { L as extractMentions, N as defaultParticipantMode, P as defaultRuntimeConfigPayload, S as clientCapabilitiesSchema, St as stripCode, Z as isReservedAgentName, a as AGENT_TYPES, b as agentTypeSchema, ct as questionAnswerMessageContentSchema, d as MENTION_REGEX, i as AGENT_STATUSES, l as GITHUB_ENTITY_TYPES, lt as questionMessageContentSchema, mt as scanMentionTokens, n as AGENT_NAME_REGEX, nt as messageSourceSchema, o as AGENT_VISIBILITY, s as CHAT_ENGAGEMENT_STATUSES } from "./dist-DmYxT5Kb.mjs";
+import { L as extractMentions, N as defaultParticipantMode, P as defaultRuntimeConfigPayload, S as clientCapabilitiesSchema, St as stripCode, Z as isReservedAgentName, a as AGENT_TYPES, b as agentTypeSchema, ct as questionAnswerMessageContentSchema, d as MENTION_REGEX, i as AGENT_STATUSES, l as GITHUB_ENTITY_TYPES, lt as questionMessageContentSchema, mt as scanMentionTokens, n as AGENT_NAME_REGEX, nt as messageSourceSchema, o as AGENT_VISIBILITY, s as CHAT_ENGAGEMENT_STATUSES } from "./dist-CrdnqZjv.mjs";
 import { a as ClientUserMismatchError, c as NotFoundError, d as users, f as uuidv7, o as ConflictError, r as BadRequestError, s as ForbiddenError, t as AgentSendNonMemberError, u as organizations } from "./uuid-DbS_4vFh-iFghv4zA.mjs";
 import { randomUUID } from "node:crypto";
 import { and, asc, count, desc, eq, gt, gte, inArray, isNotNull, lt, ne, or, sql } from "drizzle-orm";
 import { bigserial, boolean, customType, index, integer, jsonb, pgTable, primaryKey, serial, text, timestamp, unique } from "drizzle-orm/pg-core";
-//#region ../server/dist/client-CZ_VnbEc.mjs
+//#region ../server/dist/client-BPRIfrOT.mjs
 /**
 * Client connections. A client is a single SDK process (AgentRuntime) that may
 * host multiple agents. From the unified-user-token milestone on, a client is
@@ -401,7 +401,7 @@ async function pollInboxInner(db, inboxId, limit) {
 /**
 * Shared payload assembler for already-claimed `inbox_entries` rows.
 *
-* Both the HTTP poll path (`pollInbox`) and the WS push path
+* Both the debug `GET /inbox` path (`pollInbox`) and the WS push path
 * (`claimAndBuildForPush`) call this with rows they have just `UPDATE`d to
 * `status='delivered'`. Keeping the silent-context bundling in one place is
 * the only way to keep the two paths from drifting (proposal
@@ -473,9 +473,9 @@ const PUSH_CLAIM_BATCH_LIMIT = 8;
 * WS-push path: atomically claim every pending entry the just-fired
 * `NOTIFY (inboxId:messageId)` references and assemble their wire payloads.
 *
-* Returns `[]` if no row matches — benign race with HTTP poll or another
-* server instance that already claimed the entry. NOTIFY is fire-and-forget
-* (proposal §3.2).
+* Returns `[]` if no row matches — benign race with another server instance
+* (or the debug `GET /inbox` endpoint) that already claimed the entry.
+* NOTIFY is fire-and-forget (proposal §3.2).
 *
 * Why an array, not a single row: `sendMessage` can write **two** rows for
 * the same `(inbox, messageId)` pair when the recipient is both a chat
@@ -500,9 +500,9 @@ async function claimAndBuildForPush(db, inboxId, messageId) {
 /**
 * WS-push backlog path: on agent rebind (or once an in-flight slot frees up
 * after an ack), drain up to `limit` pending `notify=true` entries oldest-
-* first and assemble wire payloads. Identical claim shape to the HTTP poll
-* path — they are intentionally interchangeable so a hot-path bug fixed in
-* one shows up in the other (proposal §3.3 / §3.5).
+* first and assemble wire payloads. Identical claim shape to `pollInbox` —
+* they are intentionally interchangeable so a hot-path bug fixed in one
+* shows up in the other (proposal §3.3 / §3.5).
 */
 async function claimBacklogForPush(db, inboxId, limit) {
 	return withSpan("inbox.deliver.backlog", {
@@ -563,28 +563,14 @@ async function collectPrecedingContext(tx, inboxId, triggers) {
 	}
 	return result;
 }
-async function ackEntry(db, entryId, inboxId) {
-	return withSpan("inbox.ack", {
-		[FIRST_TREE_HUB_ATTR.INBOX_ENTRY_ID]: String(entryId),
-		"inbox.id": inboxId
-	}, async () => {
-		const [entry] = await db.update(inboxEntries).set({
-			status: "acked",
-			ackedAt: /* @__PURE__ */ new Date()
-		}).where(and(eq(inboxEntries.id, entryId), eq(inboxEntries.inboxId, inboxId), eq(inboxEntries.status, "delivered"))).returning();
-		if (!entry) throw new NotFoundError("Inbox entry not found or not in delivered status");
-		return entry;
-	});
-}
 /**
 * Ack a delivered entry from the WS data plane, scoped to the inboxes the
 * connected socket has bound. Returns the acked row on success, `null` if no
 * row matches — a benign outcome the caller should ignore (the entry may
 * have already been acked, timed out, or never belonged to this socket).
 *
-* Distinct from {@link ackEntry} so the WS path can ack without trusting an
-* `inboxId` from the wire — only entries whose `inboxId` is in `inboxIds`
-* are eligible. Empty `inboxIds` short-circuits to `null`.
+* Trusts only the `inboxId` set the connected socket has bound (no `inboxId`
+* on the wire), and short-circuits on an empty `inboxIds`.
 */
 async function ackEntryByIdForBoundAgents(db, entryId, inboxIds) {
 	if (inboxIds.length === 0) return null;
@@ -596,11 +582,6 @@ async function ackEntryByIdForBoundAgents(db, entryId, inboxIds) {
 		return entry ?? null;
 	});
 }
-async function renewEntry(db, entryId, inboxId) {
-	const [entry] = await db.update(inboxEntries).set({ deliveredAt: /* @__PURE__ */ new Date() }).where(and(eq(inboxEntries.id, entryId), eq(inboxEntries.inboxId, inboxId), eq(inboxEntries.status, "delivered"))).returning();
-	if (!entry) throw new NotFoundError("Inbox entry not found or not in delivered status");
-	return entry;
-}
 async function resetTimedOutEntries(db, timeoutSeconds = DEFAULT_INBOX_TIMEOUT_SECONDS, maxRetries = DEFAULT_MAX_RETRY_COUNT) {
 	const reset = await db.update(inboxEntries).set({
 		status: "pending",
@@ -744,8 +725,10 @@ async function listAgentsManagedByUser(db, userId) {
 		inboxId: agents.inboxId,
 		visibility: agents.visibility,
 		runtimeProvider: agents.runtimeProvider,
-		clientId: agents.clientId
-	}).from(agents).innerJoin(members, eq(agents.managerId, members.id)).where(and(eq(members.userId, userId), eq(members.status, "active"), ne(agents.status, AGENT_STATUSES.DELETED)));
+		clientId: agents.clientId,
+		avatarImageUpdatedAt: agents.avatarImageUpdatedAt,
+		userAvatarUrl: users.avatarUrl
+	}).from(agents).innerJoin(members, eq(agents.managerId, members.id)).leftJoin(users, eq(users.id, members.userId)).where(and(eq(members.userId, userId), eq(members.status, "active"), ne(agents.status, AGENT_STATUSES.DELETED)));
 }
 /**
 * Resolve the UUID of the "default" organization. Internal use only —
@@ -1185,6 +1168,36 @@ function agentAvatarImageUrl(uuid, updatedAt) {
 	return `/api/v1/agents/${uuid}/avatar?v=${updatedAt.getTime()}`;
 }
 /**
+* Resolve the public avatar image URL for an agent, considering both the
+* manager-uploaded image and — for human agents — the user's external
+* avatar URL (e.g. GitHub `users.avatar_url` injected by OAuth). Returns
+* `null` when neither source is available; the renderer then falls back
+* to color + initial.
+*
+* Priority: uploaded image > human user's avatar > null. The "upload
+* wins" rule gives users explicit control: once they upload a custom
+* avatar for their human agent it always shows, regardless of any later
+* GitHub avatar change.
+*/
+function resolveAvatarImageUrl(args) {
+	const uploaded = agentAvatarImageUrl(args.uuid, args.avatarImageUpdatedAt);
+	if (uploaded) return uploaded;
+	if (args.type === AGENT_TYPES.HUMAN && args.userAvatarUrl) return args.userAvatarUrl;
+	return null;
+}
+/**
+* Look up the external user-avatar URL backing a human agent via the
+* `members.agent_id → members.user_id → users.avatar_url` path. Returns
+* `null` for non-human agents or when the user has no avatar URL
+* captured (e.g. signed in without GitHub OAuth). Used by single-agent
+* API responses; list endpoints inline the join in their SELECT.
+*/
+async function fetchUserAvatarForHumanAgent(db, agent) {
+	if (agent.type !== AGENT_TYPES.HUMAN) return null;
+	const [row] = await db.select({ avatarUrl: users.avatarUrl }).from(members).innerJoin(users, eq(members.userId, users.id)).where(eq(members.agentId, agent.uuid)).limit(1);
+	return row?.avatarUrl ?? null;
+}
+/**
 * True iff `clients.metadata.capabilities` is a non-empty object — i.e. the
 * client has reported at least one runtime probe result. Used to distinguish
 * "we don't know what's installed yet" (empty / never reported) from
@@ -1445,13 +1458,14 @@ async function listAgentsForAdmin(db, scope, limit, cursor) {
 		runtimeProvider: agents.runtimeProvider,
 		avatarColorToken: agents.avatarColorToken,
 		avatarImageUpdatedAt: agents.avatarImageUpdatedAt,
+		userAvatarUrl: users.avatarUrl,
 		createdAt: agents.createdAt,
 		updatedAt: agents.updatedAt,
 		presenceStatus: agentPresence.status,
 		runtimeType: agentPresence.runtimeType,
 		runtimeState: agentPresence.runtimeState,
 		activeSessions: agentPresence.activeSessions
-	}).from(agents).leftJoin(agentPresence, eq(agents.uuid, agentPresence.agentId)).where(where).orderBy(desc(agents.createdAt)).limit(limit + 1);
+	}).from(agents).leftJoin(agentPresence, eq(agents.uuid, agentPresence.agentId)).leftJoin(members, eq(members.agentId, agents.uuid)).leftJoin(users, eq(users.id, members.userId)).where(where).orderBy(desc(agents.createdAt)).limit(limit + 1);
 	const hasMore = rows.length > limit;
 	const items = hasMore ? rows.slice(0, limit) : rows;
 	const last = items[items.length - 1];
@@ -1485,13 +1499,14 @@ async function listAgentsForMember(db, scope, limit, cursor, type) {
 		runtimeProvider: agents.runtimeProvider,
 		avatarColorToken: agents.avatarColorToken,
 		avatarImageUpdatedAt: agents.avatarImageUpdatedAt,
+		userAvatarUrl: users.avatarUrl,
 		createdAt: agents.createdAt,
 		updatedAt: agents.updatedAt,
 		presenceStatus: agentPresence.status,
 		runtimeType: agentPresence.runtimeType,
 		runtimeState: agentPresence.runtimeState,
 		activeSessions: agentPresence.activeSessions
-	}).from(agents).leftJoin(agentPresence, eq(agents.uuid, agentPresence.agentId)).where(where).orderBy(desc(agents.createdAt)).limit(limit + 1);
+	}).from(agents).leftJoin(agentPresence, eq(agents.uuid, agentPresence.agentId)).leftJoin(members, eq(members.agentId, agents.uuid)).leftJoin(users, eq(users.id, members.userId)).where(where).orderBy(desc(agents.createdAt)).limit(limit + 1);
 	const hasMore = rows.length > limit;
 	const items = hasMore ? rows.slice(0, limit) : rows;
 	const last = items[items.length - 1];
@@ -2298,15 +2313,9 @@ function createNotifier(listenClient) {
 		const messageId = payload.slice(sepIdx + 1);
 		const sockets = subscriptions.get(inboxId);
 		if (!sockets) return;
-		const doorbellFrame = JSON.stringify({
-			type: "new_message",
-			inboxId,
-			messageId
-		});
 		for (const [ws, pushHandler] of sockets) {
 			if (ws.readyState !== ws.OPEN) continue;
-			if (pushHandler) Promise.resolve(pushHandler(messageId)).catch(() => {});
-			else ws.send(doorbellFrame);
+			Promise.resolve(pushHandler(messageId)).catch(() => {});
 		}
 	}
 	return {
@@ -2316,7 +2325,7 @@ function createNotifier(listenClient) {
 				map = /* @__PURE__ */ new Map();
 				subscriptions.set(inboxId, map);
 			}
-			map.set(ws, pushHandler ?? null);
+			map.set(ws, pushHandler);
 		},
 		unsubscribe(inboxId, ws) {
 			const map = subscriptions.get(inboxId);
@@ -3516,13 +3525,21 @@ async function getChatDetail(db, chatId, selfAgentId = null) {
 		displayName: p.displayName,
 		type: p.type
 	}));
+	const viewerMembershipKind = await resolveViewerMembershipKind(db, chatId, selfAgentId);
 	return {
 		...chat,
 		participants,
 		title,
-		firstMessagePreview
+		firstMessagePreview,
+		viewerMembershipKind
 	};
 }
+async function resolveViewerMembershipKind(db, chatId, viewerAgentId) {
+	if (!viewerAgentId) return null;
+	const [row] = await db.select({ accessMode: chatMembership.accessMode }).from(chatMembership).where(and(eq(chatMembership.chatId, chatId), eq(chatMembership.agentId, viewerAgentId))).limit(1);
+	if (!row) return null;
+	return row.accessMode === "speaker" ? "participant" : "watching";
+}
 async function listChats(db, agentId, limit, cursor) {
 	const chatIds = (await db.select({ chatId: chatMembership.chatId }).from(chatMembership).where(and(eq(chatMembership.agentId, agentId), eq(chatMembership.accessMode, "speaker")))).map((r) => r.chatId);
 	if (chatIds.length === 0) return {
@@ -4210,4 +4227,4 @@ async function cleanupStaleClients(db, staleSeconds = 60) {
 	return result.length;
 }
 //#endregion
-export { getSession as $, suspendSession as $t, createAgent as A, pollInbox as At, extractSummary as B, resetTimedOutEntries as Bt, claimAndBuildForPush as C, markMeChatRead as Ct, cleanupStalePresence as D, messages as Dt, cleanupStaleClients as E, members as Et, deriveAuthState as F, registerChatMessageDispatcher as Ft, getAgentAvatarImage as G, sendToAgent as Gt, findOrCreateDirectChat as H, resolveDefaultOrgId as Ht, disconnectClient as I, registerClient as It, getChatDetail as J, setChatEngagement as Jt, getCachedAudience as K, serverInstances as Kt, editMessage as L, removeParticipant as Lt, createMeChat as M, reactivateAgent as Mt, createNotifier as N, rebindAgent as Nt, clearAgentAvatarImage as O, notifyRecipients as Ot, deleteAgent as P, recomputeWatchersForMember as Pt, getPresence as Q, suspendAgent as Qt, ensureDefaultOrganization as R, renewEntry as Rt, checkAgentNameAvailability as S, listMyPinnedAgents as St, claimClient as T, markStaleAgents as Tt, getActivityOverview as U, retireClient as Ut, filterSessionsByParticipant as V, resolveChatTitle as Vt, getAgent as W, sendMessage as Wt, getOnlineCount as X, setRuntimeState as Xt, getClient as Y, setOffline as Yt, getOrganization as Z, submitAnswer as Zt, assertParticipant as _, listClients as _t, adapterAgentMappings as a, upsertSessionState as an, leaveChat as at, chatUserState as b, listMeChats as bt, addMeChatParticipants as c, listAgentSessions as ct, agentChatSessions as d, listAgentsManagedByUser as dt, touchAgent as en, heartbeatClient as et, agentConfigs as f, listAgentsWithRuntime as ft, assertClientOwner as g, listChatsForMember as gt, archiveSession as h, listChats as ht, ackEntryByIdForBoundAgents as i, updateOrganization as in, joinMeChat as it, createChat as j, pruneStaleSilentEntries as jt, clients as k, pendingQuestions as kt, addParticipant as l, listAgentsForAdmin as lt, agents as m, listChatParticipantsWithNames as mt, SUPPORTED_AVATAR_IMAGE_MIMES as n, updateAgent as nn, inboxEntries as nt, adapterConfigs as o, leaveMeChat as ot, agentPresence as p, listAllSessions as pt, getCallerEngagement as q, setAgentAvatarImage as qt, ackEntry as r, updateClientCapabilities as rn, joinChat as rt, addChatParticipants as s, listActiveAgentsPinnedToClient as st, MAX_AVATAR_IMAGE_BYTES as t, unbindAgent as tn, heartbeatInstance as tt, agentAvatarImageUrl as u, listAgentsForMember as ut, bindAgent as v, listClientsForOrgAdmin as vt, claimBacklogForPush as w, markMeChatUnread as wt, chats as x, listMessages as xt, chatMembership as y, listMeChatSourceCounts as yt, ensureParticipant as z, resetActivity as zt };
+export { getSession as $, suspendSession as $t, createChat as A, pollInbox as At, fetchUserAvatarForHumanAgent as B, resolveAvatarImageUrl as Bt, claimBacklogForPush as C, markMeChatRead as Ct, clearAgentAvatarImage as D, messages as Dt, cleanupStalePresence as E, members as Et, disconnectClient as F, registerChatMessageDispatcher as Ft, getAgentAvatarImage as G, sendToAgent as Gt, findOrCreateDirectChat as H, resolveDefaultOrgId as Ht, editMessage as I, registerClient as It, getChatDetail as J, setChatEngagement as Jt, getCachedAudience as K, serverInstances as Kt, ensureDefaultOrganization as L, removeParticipant as Lt, createNotifier as M, reactivateAgent as Mt, deleteAgent as N, rebindAgent as Nt, clients as O, notifyRecipients as Ot, deriveAuthState as P, recomputeWatchersForMember as Pt, getPresence as Q, suspendAgent as Qt, ensureParticipant as R, resetActivity as Rt, claimAndBuildForPush as S, listMyPinnedAgents as St, cleanupStaleClients as T, markStaleAgents as Tt, getActivityOverview as U, retireClient as Ut, filterSessionsByParticipant as V, resolveChatTitle as Vt, getAgent as W, sendMessage as Wt, getOnlineCount as X, setRuntimeState as Xt, getClient as Y, setOffline as Yt, getOrganization as Z, submitAnswer as Zt, bindAgent as _, listClients as _t, adapterConfigs as a, upsertSessionState as an, leaveChat as at, chats as b, listMeChats as bt, addParticipant as c, listAgentSessions as ct, agentConfigs as d, listAgentsManagedByUser as dt, touchAgent as en, heartbeatClient as et, agentPresence as f, listAgentsWithRuntime as ft, assertParticipant as g, listChatsForMember as gt, assertClientOwner as h, listChats as ht, adapterAgentMappings as i, updateOrganization as in, joinMeChat as it, createMeChat as j, pruneStaleSilentEntries as jt, createAgent as k, pendingQuestions as kt, agentAvatarImageUrl as l, listAgentsForAdmin as lt, archiveSession as m, listChatParticipantsWithNames as mt, SUPPORTED_AVATAR_IMAGE_MIMES as n, updateAgent as nn, inboxEntries as nt, addChatParticipants as o, leaveMeChat as ot, agents as p, listAllSessions as pt, getCallerEngagement as q, setAgentAvatarImage as qt, ackEntryByIdForBoundAgents as r, updateClientCapabilities as rn, joinChat as rt, addMeChatParticipants as s, listActiveAgentsPinnedToClient as st, MAX_AVATAR_IMAGE_BYTES as t, unbindAgent as tn, heartbeatInstance as tt, agentChatSessions as u, listAgentsForMember as ut, chatMembership as v, listClientsForOrgAdmin as vt, claimClient as w, markMeChatUnread as wt, checkAgentNameAvailability as x, listMessages as xt, chatUserState as y, listMeChatSourceCounts as yt, extractSummary as z, resetTimedOutEntries as zt };

package/dist/{client-CDw0f-kN-BPzOVd8L.mjs → client-CEdYVnoj-BGiGcJbH.mjs}

@@ -1,7 +1,7 @@
 import "./observability-BAScT_5S-BcW9HgkG.mjs";
 import "./logger-core-BTmvdflj-DjW8FM4T.mjs";
-import "./dist-DmYxT5Kb.mjs";
+import "./dist-CrdnqZjv.mjs";
 import "./uuid-DbS_4vFh-iFghv4zA.mjs";
 import "./src-DNBS5Yjj.mjs";
-import { St as listMyPinnedAgents } from "./client-CZ_VnbEc-CBF46cJd.mjs";
+import { St as listMyPinnedAgents } from "./client-BPRIfrOT-CoV_2o7e.mjs";
 export { listMyPinnedAgents };

package/dist/{dist-DmYxT5Kb.mjs → dist-CrdnqZjv.mjs}

@@ -756,7 +756,8 @@ z.object({
 	participants: z.array(chatParticipantDetailSchema),
 	title: z.string(),
 	firstMessagePreview: z.string().nullable(),
-	engagementStatus: chatEngagementStatusSchema
+	engagementStatus: chatEngagementStatusSchema,
+	viewerMembershipKind: z.enum(["participant", "watching"]).nullable()
 });
 const updateChatSchema = z.object({ topic: z.string().trim().max(500).nullable() });
 /**
@@ -803,9 +804,13 @@ z.object({
 * Optional opt-in flags the client carries on `client:register` to advertise
 * which negotiable wire-protocol features it implements. Distinct from
 * `clientCapabilitiesSchema` (per-runtime-provider availability — different
-* concept). Older clients omit the field; the server treats every unset flag
-* as `false` and falls back to the legacy path. See proposal
-* hub-inbox-ws-data-plane §3.6.
+* concept).
+*
+* 0.10.4 ~ 0.14.2 clients still send this block (with `wsInboxDeliver: true`
+* hard-coded). The 0.14.3+ runtime omits it. The schema is retained so that
+* middle-version `client:register` frames still parse, even though the
+* server no longer reads any of these fields — the WS inbox data plane is
+* mandatory on this server build.
 */
 const clientWireCapabilitiesSchema = z.object({ wsInboxDeliver: z.boolean().default(false) }).partial();
 const clientRegisterSchema = z.object({
@@ -1196,14 +1201,11 @@ z.object({
 }).extend({ message: clientMessageSchema });
 const inboxPollQuerySchema = z.object({ limit: z.coerce.number().int().min(1).max(50).default(10) });
 /**
-* server → client: a single inbox entry pushed over the active WS connection,
-* replacing the legacy `new_message` doorbell + HTTP `/inbox` poll round-trip.
+* server → client: a single inbox entry pushed over the active WS connection.
 *
 * `entryId` is the server-side `inbox_entries.id` the client must echo back
-* in `inbox:ack`. `message` is exactly what the legacy poll path returned —
-* `clientMessageSchema` already carries `precedingMessages`, so the client-
-* side dispatch logic is reused verbatim (see proposal
-* hub-inbox-ws-data-plane §3.1).
+* in `inbox:ack`. `clientMessageSchema` carries `precedingMessages`, so the
+* client-side dispatch logic handles the silent-context bundle uniformly.
 *
 * `.passthrough()` so a forward-rolling server may extend the frame without
 * breaking older clients that validate strictly. Older clients drop unknown
@@ -1217,8 +1219,7 @@ const inboxDeliverFrameSchema = z.object({
 	message: clientMessageSchema
 }).passthrough();
 /**
-* client → server: ack for an `inbox:deliver` frame. Replaces the legacy
-* `POST /inbox/:id/ack` HTTP endpoint when the WS data plane is active.
+* client → server: ack for an `inbox:deliver` frame.
 */
 const inboxAckFrameSchema = z.object({
 	type: z.literal("inbox:ack"),
@@ -1994,8 +1995,13 @@ const WS_AUTH_FRAME_TIMEOUT_MS = 5e3;
 /**
 * Negotiable wire-protocol features the server advertises in its `welcome`
 * frame. Older clients drop the `capabilities` field silently because the
-* frame is `.passthrough()`. New clients gate optional code paths on it —
-* absent ⇒ feature off, never assumed.
+* frame is `.passthrough()`.
+*
+* Required by clients in the 0.10.4 ~ 0.14.2 range: those builds read
+* `wsInboxDeliver` here to decide whether to skip the local HTTP poll loop
+* and rely on `inbox:deliver` push frames. The 0.14.3+ runtime ignores the
+* field (push is the only path) but the server still emits it so middle-
+* version clients keep working.
 */
 const serverCapabilitiesSchema = z.object({ wsInboxDeliver: z.boolean().default(false) }).partial();
 z.object({

package/dist/{feishu-CCWd-JE4.mjs → feishu-DNoBroKK.mjs}

@@ -1,6 +1,6 @@
 import { r as __exportAll } from "./chunk-BSw8zbkd.mjs";
 import { t as cliFetch } from "./cli-fetch--tiwKm5S.mjs";
-import { r as AGENT_SELECTOR_HEADER } from "./dist-DmYxT5Kb.mjs";
+import { r as AGENT_SELECTOR_HEADER } from "./dist-CrdnqZjv.mjs";
 //#region src/core/feishu.ts
 var feishu_exports = /* @__PURE__ */ __exportAll({
 	bindFeishuBot: () => bindFeishuBot,

package/dist/index.mjs

@@ -1,12 +1,12 @@
 import "./observability-BAScT_5S-BcW9HgkG.mjs";
-import { A as checkDocker, B as isServiceSupported, E as checkAgentConfigs, F as checkWebSocket, G as uninstallClientService, H as restartClientService, I as printResults, J as stopPostgres, K as ensurePostgres, M as checkServerConfig, N as checkServerHealth, O as checkClientConfig, P as checkServerReachable, R as getClientServiceStatus, S as runHomeMigration, T as runMigrations, U as startClientService, V as resolveCliInvocation, W as stopClientService, X as handleClientOrgMismatch, Y as ClientRuntime, Z as rotateClientIdWithBackup, _ as formatCheckReport, b as onboardCreate, d as startServer, g as promptMissingFields, h as promptAddAgent, j as checkNodeVersion, k as checkDatabase, lt as FirstTreeHubSDK, m as isInteractive, n as deriveHubUrlFromToken, nt as hasUser, q as isDockerAvailable, t as HubUrlDerivationError, tt as createOwner, ut as SdkError, y as onboardCheck, z as installClientService } from "./saas-connect-DgCSZ8Yk.mjs";
+import { A as checkDocker, B as isServiceSupported, E as checkAgentConfigs, F as checkWebSocket, G as uninstallClientService, H as restartClientService, I as printResults, J as stopPostgres, K as ensurePostgres, M as checkServerConfig, N as checkServerHealth, O as checkClientConfig, P as checkServerReachable, R as getClientServiceStatus, S as runHomeMigration, T as runMigrations, U as startClientService, V as resolveCliInvocation, W as stopClientService, X as handleClientOrgMismatch, Y as ClientRuntime, Z as rotateClientIdWithBackup, _ as formatCheckReport, b as onboardCreate, d as startServer, g as promptMissingFields, h as promptAddAgent, j as checkNodeVersion, k as checkDatabase, lt as FirstTreeHubSDK, m as isInteractive, n as deriveHubUrlFromToken, nt as hasUser, q as isDockerAvailable, t as HubUrlDerivationError, tt as createOwner, ut as SdkError, y as onboardCheck, z as installClientService } from "./saas-connect-Da55XxRX.mjs";
 import "./logger-core-BTmvdflj-DjW8FM4T.mjs";
-import { a as ensureFreshAdminToken, c as resolveServerUrl, i as ensureFreshAccessToken, n as AuthRefreshRateLimitedError, s as resolveAccessToken, t as AuthRefreshFailedError } from "./bootstrap-C15ZBOCC.mjs";
+import { a as ensureFreshAdminToken, c as resolveServerUrl, i as ensureFreshAccessToken, n as AuthRefreshRateLimitedError, s as resolveAccessToken, t as AuthRefreshFailedError } from "./bootstrap-CQQGgIx1.mjs";
 import { i as blank, s as status } from "./cli-fetch--tiwKm5S.mjs";
-import "./dist-DmYxT5Kb.mjs";
-import { n as bindFeishuUser, t as bindFeishuBot } from "./feishu-CCWd-JE4.mjs";
+import "./dist-CrdnqZjv.mjs";
+import { n as bindFeishuUser, t as bindFeishuBot } from "./feishu-DNoBroKK.mjs";
 import "./uuid-DbS_4vFh-iFghv4zA.mjs";
 import "./src-DNBS5Yjj.mjs";
-import "./client-CZ_VnbEc-CBF46cJd.mjs";
+import "./client-BPRIfrOT-CoV_2o7e.mjs";
 import "./invitation-D_ENPHyj-5ETiae5r.mjs";
 export { AuthRefreshFailedError, AuthRefreshRateLimitedError, ClientRuntime, FirstTreeHubSDK, HubUrlDerivationError, SdkError, bindFeishuBot, bindFeishuUser, blank, checkAgentConfigs, checkClientConfig, checkDatabase, checkDocker, checkNodeVersion, checkServerConfig, checkServerHealth, checkServerReachable, checkWebSocket, createOwner, deriveHubUrlFromToken, ensureFreshAccessToken, ensureFreshAdminToken, ensurePostgres, formatCheckReport, getClientServiceStatus, handleClientOrgMismatch, hasUser, installClientService, isDockerAvailable, isInteractive, isServiceSupported, onboardCheck, onboardCreate, printResults, promptAddAgent, promptMissingFields, resolveAccessToken, resolveCliInvocation, resolveServerUrl, restartClientService, rotateClientIdWithBackup, runHomeMigration, runMigrations, startClientService, startServer, status, stopClientService, stopPostgres, uninstallClientService };

package/dist/{invitation-C9m2gQx4-CkwWteA3.mjs → invitation-C9m2gQx4-C_4f5VTs.mjs}

@@ -1,4 +1,4 @@
-import "./dist-DmYxT5Kb.mjs";
+import "./dist-CrdnqZjv.mjs";
 import "./uuid-DbS_4vFh-iFghv4zA.mjs";
 import { s as previewInvitation } from "./invitation-D_ENPHyj-5ETiae5r.mjs";
 export { previewInvitation };