@agent-team-foundation/first-tree-hub 0.3.3 → 0.3.5

package/dist/{core-Bl6djdPd.mjs → core-CHL_dgzu.mjs}

@@ -1,18 +1,18 @@
-import { a as getGitHubUsername, b as serverConfigSchema, c as DEFAULT_CONFIG_DIR, d as clientConfigSchema, f as collectMissingPrompts, h as loadAgents, m as initConfig, r as checkBootstrapStatus, s as resolveServerUrl, t as bootstrapToken$1, u as agentConfigSchema, x as setConfigValue, y as resolveConfigReadonly } from "./bootstrap-waEJYq3g.mjs";
-import { ZodError, z } from "zod";
+import { S as setConfigValue, a as getGitHubUsername, b as resolveConfigReadonly, c as DEFAULT_CONFIG_DIR, d as agentConfigSchema, f as clientConfigSchema, g as loadAgents, h as initConfig, p as collectMissingPrompts, r as checkBootstrapStatus, s as resolveServerUrl, t as bootstrapToken$1, u as DEFAULT_HOME_DIR$1, x as serverConfigSchema } from "./bootstrap-mhkpeOEc.mjs";
 import { copyFileSync, existsSync, mkdirSync, readFileSync, readdirSync, renameSync, rmSync, statSync, writeFileSync } from "node:fs";
 import { dirname, join, resolve } from "node:path";
-import { parse } from "yaml";
+import { EventEmitter } from "node:events";
+import WebSocket from "ws";
 import { createCipheriv, createDecipheriv, createHash, createHmac, randomBytes, randomUUID, timingSafeEqual } from "node:crypto";
+import { query } from "@anthropic-ai/claude-agent-sdk";
+import { execFileSync, execSync } from "node:child_process";
+import { ZodError, z } from "zod";
+import "yaml";
 import { homedir } from "node:os";
 import bcrypt from "bcrypt";
 import { and, desc, eq, gt, inArray, isNotNull, isNull, lt, ne, sql } from "drizzle-orm";
 import { drizzle } from "drizzle-orm/postgres-js";
 import postgres from "postgres";
-import { execFileSync, execSync } from "node:child_process";
-import { EventEmitter } from "node:events";
-import WebSocket from "ws";
-import { query } from "@anthropic-ai/claude-agent-sdk";
 import { fileURLToPath } from "node:url";
 import { migrate } from "drizzle-orm/postgres-js/migrator";
 import { input, password, select } from "@inquirer/prompts";
@@ -24,40 +24,6 @@ import Fastify from "fastify";
 import { bigserial, index, integer, jsonb, pgTable, primaryKey, serial, text, timestamp, unique } from "drizzle-orm/pg-core";
 import { SignJWT, jwtVerify } from "jose";
 import { Client, EventDispatcher, LoggerLevel, WSClient } from "@larksuiteoapi/node-sdk";
-//#region src/core/admin.ts
-/**
-* Check if any admin user exists.
-*/
-async function hasAdminUser(databaseUrl) {
-	const client = postgres(databaseUrl, { max: 1 });
-	try {
-		return (await client`SELECT count(*)::int AS count FROM admin_users`)[0].count > 0;
-	} finally {
-		await client.end();
-	}
-}
-/**
-* Create an admin user. Returns the generated password.
-*/
-async function createAdminUser$1(databaseUrl, username, password) {
-	const pw = password ?? randomBytes(12).toString("base64url");
-	const hash = await bcrypt.hash(pw, 12);
-	const client = postgres(databaseUrl, { max: 1 });
-	const db = drizzle(client);
-	try {
-		await db.execute(sql`
-      INSERT INTO admin_users (id, username, password_hash, role)
-      VALUES (${randomUUID()}, ${username}, ${hash}, 'super_admin')
-    `);
-	} finally {
-		await client.end();
-	}
-	return {
-		username,
-		password: pw
-	};
-}
-//#endregion
 //#region ../client/dist/index.mjs
 const FETCH_TIMEOUT_MS = 15e3;
 var FirstTreeHubSDK = class {
@@ -429,7 +395,7 @@ defineConfig({
 		"error"
 	]).default("info"), { env: "FIRST_TREE_HUB_LOG_LEVEL" })
 });
-const DEFAULT_HOME_DIR = join(homedir(), ".first-tree-hub");
+const DEFAULT_HOME_DIR = process.env.FIRST_TREE_HUB_HOME ?? join(homedir(), ".first-tree-hub");
 join(DEFAULT_HOME_DIR, "config");
 const DEFAULT_DATA_DIR = join(DEFAULT_HOME_DIR, "data");
 defineConfig({
@@ -494,111 +460,17 @@ defineConfig({
 		max: field(z.number().default(100), { env: "FIRST_TREE_HUB_RATE_LIMIT_MAX" }),
 		loginMax: field(z.number().default(5), { env: "FIRST_TREE_HUB_RATE_LIMIT_LOGIN_MAX" }),
 		webhookMax: field(z.number().default(60), { env: "FIRST_TREE_HUB_RATE_LIMIT_WEBHOOK_MAX" })
+	}),
+	kael: optional({
+		endpoint: field(z.string(), { env: "KAEL_ENDPOINT" }),
+		apiKey: field(z.string(), {
+			env: "KAEL_API_KEY",
+			secret: true
+		}),
+		hubPublicUrl: field(z.string(), { env: "FIRST_TREE_HUB_PUBLIC_URL" })
 	})
 });
-const CONTEXT_TREE_DIR$1 = join(DEFAULT_DATA_DIR, "context-tree");
-/**
-* Sync the shared Context Tree git clone.
-*
-* Clones on first run, pulls on subsequent runs.
-* Returns the clone path on success, null on failure (graceful degradation).
-*/
-async function syncContextTree(serverUrl, token, log) {
-	try {
-		execFileSync("git", ["--version"], { stdio: "ignore" });
-	} catch {
-		log("Context Tree sync skipped: git is not installed");
-		return null;
-	}
-	let repo;
-	let branch;
-	try {
-		const config = await new FirstTreeHubSDK({
-			serverUrl,
-			token
-		}).getContextTreeConfig();
-		repo = config.repo;
-		branch = config.branch;
-	} catch (err) {
-		log(`Context Tree sync skipped: failed to fetch config from server (${err instanceof Error ? err.message : String(err)})`);
-		return null;
-	}
-	try {
-		if (existsSync(join(CONTEXT_TREE_DIR$1, ".git"))) {
-			if (execFileSync("git", [
-				"rev-parse",
-				"--abbrev-ref",
-				"HEAD"
-			], {
-				cwd: CONTEXT_TREE_DIR$1,
-				encoding: "utf-8",
-				timeout: 5e3
-			}).trim() !== branch) {
-				execFileSync("git", ["checkout", branch], {
-					cwd: CONTEXT_TREE_DIR$1,
-					stdio: "pipe",
-					timeout: 1e4
-				});
-				log(`Context Tree switched to branch ${branch}`);
-			}
-			execFileSync("git", ["pull", "--ff-only"], {
-				cwd: CONTEXT_TREE_DIR$1,
-				stdio: "pipe",
-				timeout: 3e4
-			});
-			log(`Context Tree updated (pull)`);
-		} else {
-			mkdirSync(CONTEXT_TREE_DIR$1, { recursive: true });
-			execFileSync("git", [
-				"clone",
-				"--branch",
-				branch,
-				"--single-branch",
-				repo,
-				CONTEXT_TREE_DIR$1
-			], {
-				stdio: "pipe",
-				timeout: 6e4
-			});
-			log(`Context Tree cloned from ${repo} (branch: ${branch})`);
-		}
-		return CONTEXT_TREE_DIR$1;
-	} catch (err) {
-		const msg = err instanceof Error ? err.message : String(err);
-		log(`Context Tree sync failed: ${msg}`);
-		log("Check that git credentials (SSH key or credential helper) are configured for this repo");
-		if ((msg.includes("cannot fast-forward") || msg.includes("not possible to fast-forward") || msg.includes("CONFLICT")) && existsSync(join(CONTEXT_TREE_DIR$1, ".git"))) {
-			log("Diverged history detected, attempting fresh clone...");
-			try {
-				rmSync(CONTEXT_TREE_DIR$1, {
-					recursive: true,
-					force: true
-				});
-				mkdirSync(CONTEXT_TREE_DIR$1, { recursive: true });
-				execFileSync("git", [
-					"clone",
-					"--branch",
-					branch,
-					"--single-branch",
-					repo,
-					CONTEXT_TREE_DIR$1
-				], {
-					stdio: "pipe",
-					timeout: 6e4
-				});
-				log("Context Tree re-cloned successfully");
-				return CONTEXT_TREE_DIR$1;
-			} catch {
-				log("Context Tree re-clone also failed, continuing without context");
-			}
-		}
-		if (existsSync(join(CONTEXT_TREE_DIR$1, ".git"))) {
-			log("Using existing Context Tree clone despite sync failure");
-			return CONTEXT_TREE_DIR$1;
-		}
-		return null;
-	}
-}
+join(DEFAULT_DATA_DIR, "context-tree");
 /**
 * Bootstrap a workspace with .agent/ directory files.
 *
@@ -1454,92 +1326,44 @@ const agentSlotConfigSchema = z.object({
 	session: sessionConfigSchema.prefault({}),
 	concurrency: z.number().int().positive().default(5)
 });
-const runtimeConfigSchema = z.object({
+z.object({
 	server: z.url().default("http://localhost:8000"),
 	agents: z.record(z.string(), agentSlotConfigSchema).refine((agents) => Object.keys(agents).length > 0, "At least one agent must be defined")
 });
-function expandEnvVars(value) {
-	return value.replace(/\$\{([^}]+)\}/g, (_, name) => {
-		const envVal = process.env[name];
-		if (envVal === void 0) throw new Error(`Environment variable "${name}" is not set`);
-		return envVal;
-	});
-}
-function deepExpandEnv(obj) {
-	if (typeof obj === "string") return expandEnvVars(obj);
-	if (Array.isArray(obj)) return obj.map(deepExpandEnv);
-	if (obj !== null && typeof obj === "object") {
-		const result = {};
-		for (const [key, value] of Object.entries(obj)) result[key] = deepExpandEnv(value);
-		return result;
+//#endregion
+//#region src/core/admin.ts
+/**
+* Check if any admin user exists.
+*/
+async function hasAdminUser(databaseUrl) {
+	const client = postgres(databaseUrl, { max: 1 });
+	try {
+		return (await client`SELECT count(*)::int AS count FROM admin_users`)[0].count > 0;
+	} finally {
+		await client.end();
 	}
-	return obj;
 }
-function loadRuntimeConfig(configPath) {
-	const expanded = deepExpandEnv(parse(readFileSync(configPath, "utf-8")));
-	return runtimeConfigSchema.parse(expanded);
-}
-const DEFAULT_SHUTDOWN_TIMEOUT = 3e4;
-var AgentRuntime = class {
-	slots = [];
-	config;
-	shutdownTimeout;
-	stopping = false;
-	constructor(options) {
-		this.config = options.config;
-		this.shutdownTimeout = options.shutdownTimeout ?? DEFAULT_SHUTDOWN_TIMEOUT;
-		for (const [name, agentConfig] of Object.entries(this.config.agents)) {
-			const handlerFactory = getHandlerFactory(agentConfig.type);
-			this.slots.push(new AgentSlot({
-				name,
-				serverUrl: this.config.server,
-				token: agentConfig.token,
-				type: agentConfig.type,
-				handlerFactory,
-				session: agentConfig.session,
-				concurrency: agentConfig.concurrency
-			}));
-		}
-	}
-	/** Start all agent slots and block until shutdown signal. */
-	async start() {
-		const log = (msg) => process.stderr.write(`[runtime] ${msg}\n`);
-		const firstToken = Object.values(this.config.agents)[0]?.token;
-		let contextTreePath = null;
-		if (firstToken) contextTreePath = await syncContextTree(this.config.server, firstToken, log);
-		if (!contextTreePath) log("WARNING: Context Tree sync failed — agents will start without organizational context");
-		log(`Starting ${this.slots.length} agent(s)...`);
-		const results = await Promise.allSettled(this.slots.map((slot) => slot.start(contextTreePath)));
-		let failed = 0;
-		for (const result of results) if (result.status === "rejected") {
-			log(`Failed to start agent: ${result.reason instanceof Error ? result.reason.message : result.reason}`);
-			failed++;
-		}
-		if (failed === this.slots.length) throw new Error("All agents failed to start");
-		log("Ready. Press Ctrl+C to stop.");
-		await new Promise((resolve) => {
-			const shutdown = async () => {
-				if (this.stopping) return;
-				this.stopping = true;
-				log("Shutting down...");
-				const timer = setTimeout(() => {
-					log("Shutdown timeout reached, forcing exit");
-					process.exit(1);
-				}, this.shutdownTimeout);
-				await this.stop();
-				clearTimeout(timer);
-				log("Stopped");
-				resolve();
-			};
-			process.on("SIGINT", shutdown);
-			process.on("SIGTERM", shutdown);
-		});
-	}
-	/** Stop all slots. */
-	async stop() {
-		await Promise.allSettled(this.slots.map((slot) => slot.stop()));
+/**
+* Create an admin user. Returns the generated password.
+*/
+async function createAdminUser$1(databaseUrl, username, password) {
+	const pw = password ?? randomBytes(12).toString("base64url");
+	const hash = await bcrypt.hash(pw, 12);
+	const client = postgres(databaseUrl, { max: 1 });
+	const db = drizzle(client);
+	try {
+		await db.execute(sql`
+      INSERT INTO admin_users (id, username, password_hash, role)
+      VALUES (${randomUUID()}, ${username}, ${hash}, 'super_admin')
+    `);
+	} finally {
+		await client.end();
 	}
-};
+	return {
+		username,
+		password: pw
+	};
+}
 //#endregion
 //#region src/core/client-runtime.ts
 /**
@@ -2187,10 +2011,10 @@ async function runMigrations(databaseUrl) {
 }
 //#endregion
 //#region src/core/onboard.ts
-const STATE_FILE = join(homedir(), ".first-tree-hub", ".onboard-state.json");
+const STATE_FILE = join(DEFAULT_HOME_DIR$1, ".onboard-state.json");
 /** Save current onboard args to state file for resume. */
 function saveOnboardState(args) {
-	mkdirSync(join(homedir(), ".first-tree-hub"), { recursive: true });
+	mkdirSync(DEFAULT_HOME_DIR$1, { recursive: true });
 	writeFileSync(STATE_FILE, JSON.stringify({ args }, null, 2));
 }
 /** Load saved onboard args from state file. */
@@ -2323,7 +2147,7 @@ async function onboardCheck(args) {
 		status: "missing_optional",
 		hint: `defaults to "${args.id ?? ""}"`
 	});
-	items.push(args.assistant ? {
+	if (args.type === "human") items.push(args.assistant ? {
 		key: "assistant",
 		label: "assistant",
 		status: "ok",
@@ -2334,7 +2158,7 @@ async function onboardCheck(args) {
 		status: "missing_optional",
 		hint: "Also create a personal_assistant"
 	});
-	items.push(args.feishuBotAppId ? {
+	if (args.type !== "human" || args.assistant) items.push(args.feishuBotAppId ? {
 		key: "feishu_bot",
 		label: "feishu-bot-app-id",
 		status: "ok",
@@ -2343,7 +2167,7 @@ async function onboardCheck(args) {
 		key: "feishu_bot",
 		label: "feishu-bot-app-id",
 		status: "missing_optional",
-		hint: "Feishu bot App ID for assistant"
+		hint: "Feishu bot App ID"
 	});
 	if (args.id && repoPath) if (existsSync(join(repoPath, "members", args.id))) try {
 		execSync(`git ls-files --error-unmatch members/${args.id}/NODE.md`, {
@@ -2385,6 +2209,7 @@ function formatCheckReport(items) {
 async function onboardCreate(args) {
 	const repoPath = await resolveContextTreeRepo(args.server);
 	if (!repoPath) throw new Error("Context Tree repo not available. Ensure --server is configured and the server is running.");
+	if (args.assistant && args.type !== "human") throw new Error(`--assistant is only valid for human agents, not ${args.type}`);
 	const ghUsername = getGitHubUsername();
 	const githubField = args.type === "human" ? ghUsername : null;
 	const humanNodePath = join(repoPath, "members", args.id, "NODE.md");
@@ -2507,7 +2332,7 @@ async function onboardCreate(args) {
 		branch,
 		prUrl: prOutput
 	};
-	mkdirSync(join(homedir(), ".first-tree-hub"), { recursive: true });
+	mkdirSync(DEFAULT_HOME_DIR$1, { recursive: true });
 	writeFileSync(STATE_FILE, JSON.stringify(state, null, 2));
 	return { prUrl: prOutput };
 }
@@ -2550,7 +2375,7 @@ async function onboardContinue(args) {
   first-tree-hub onboard --continue`);
 		throw err;
 	}
-	process.stderr.write(`Token saved to ~/.first-tree-hub/agents/${agentToBootstrap}/agent.yaml\n`);
+	process.stderr.write(`Token saved to ${DEFAULT_HOME_DIR$1}/config/agents/${agentToBootstrap}/agent.yaml\n`);
 	if (mergedArgs.feishuBotAppId && mergedArgs.feishuBotAppSecret) {
 		const { bindFeishuBot } = await import("./feishu-Y4m2zFc3.mjs").then((n) => n.r);
 		process.stderr.write("Binding Feishu bot...\n");
@@ -2561,16 +2386,20 @@ async function onboardContinue(args) {
 		const { unlinkSync } = await import("node:fs");
 		unlinkSync(STATE_FILE);
 	} catch {}
+	const typeLabel = mergedArgs.type === "human" ? "Human" : mergedArgs.type === "autonomous_agent" ? "Agent" : "Assistant";
 	process.stderr.write("\n✅ Onboard complete!\n\n");
-	process.stderr.write(`  Human:     ${mergedArgs.id}\n`);
+	process.stderr.write(`  ${typeLabel}:${" ".repeat(Math.max(1, 10 - typeLabel.length))}${mergedArgs.id}\n`);
 	if (mergedArgs.assistant) process.stderr.write(`  Assistant: ${mergedArgs.assistant}\n`);
-	process.stderr.write(`  Token:     ~/.first-tree-hub/agents/${agentToBootstrap}/agent.yaml\n`);
+	process.stderr.write(`  Token:     ${DEFAULT_HOME_DIR$1}/config/agents/${agentToBootstrap}/agent.yaml\n`);
 	if (mergedArgs.feishuBotAppId) process.stderr.write(`  Feishu:    bot bound (${mergedArgs.feishuBotAppId})\n`);
+	setConfigValue(join(DEFAULT_CONFIG_DIR, "client.yaml"), "server.url", serverUrl);
 	if (mergedArgs.type === "human") {
 		process.stderr.write("\n  Next step — bind your Feishu account:\n");
 		process.stderr.write(`    Send this message to the bot in Feishu:  /bind ${mergedArgs.id}\n`);
 		if (!mergedArgs.feishuBotAppId) process.stderr.write("    (requires a Feishu bot to be configured in the system)\n");
 	}
+	process.stderr.write("\n  Start the agent:\n");
+	process.stderr.write("    first-tree-hub client start\n");
 	process.stderr.write("\n");
 }
 function createMemberNodeMd(repoPath, data) {
@@ -2578,7 +2407,16 @@ function createMemberNodeMd(repoPath, data) {
 	mkdirSync(memberDir, { recursive: true });
 	const domainsList = data.domains.map((d) => `  - "${d}"`).join("\n");
 	const githubLine = data.github ? `\ngithub: ${data.github}` : "";
-	const delegateLine = data.delegateMention ? `\ndelegate_mention: ${data.delegateMention}` : "";
+	const delegateLine = data.delegateMention && data.type === "human" ? `\ndelegate_mention: ${data.delegateMention}` : "";
+	const bodySections = data.type === "autonomous_agent" ? `## About
+
+## Capabilities
+
+## Current Focus
+` : `## About
+
+## Current Focus
+`;
 	const content = `---
 title: "${data.displayName}"
 owners: [${data.owner}]
@@ -2590,10 +2428,7 @@ ${domainsList}${githubLine}${delegateLine}
 
 # ${data.displayName}
 
-## About
-
-## Current Focus
-`;
+${bodySections}`;
 	writeFileSync(join(memberDir, "NODE.md"), content);
 }
 function isTrackedByGit(repoPath, filePath) {
@@ -2607,9 +2442,9 @@ function isTrackedByGit(repoPath, filePath) {
 		return false;
 	}
 }
-const CONTEXT_TREE_DIR = join(homedir(), ".first-tree-hub", "context-tree");
+const CONTEXT_TREE_DIR = join(DEFAULT_HOME_DIR$1, "context-tree");
 /**
-* Resolve Context Tree to a **local path** at ~/.first-tree-hub/context-tree/.
+* Resolve Context Tree to a **local path** at $FIRST_TREE_HUB_HOME/context-tree/.
 *
 * Repo URL is obtained from the Hub server. The local clone is always
 * managed in the standard location — no custom paths allowed.
@@ -2656,13 +2491,13 @@ async function resolveContextTreeRepo(serverUrl) {
 				return CONTEXT_TREE_DIR;
 			}
 		} catch {}
-		const safePrefix = join(homedir(), ".first-tree-hub");
+		const safePrefix = DEFAULT_HOME_DIR$1;
 		if (!CONTEXT_TREE_DIR.startsWith(safePrefix) || CONTEXT_TREE_DIR === safePrefix) throw new Error(`Refusing to delete unsafe path: ${CONTEXT_TREE_DIR}`);
 		execSync(`rm -rf ${CONTEXT_TREE_DIR}`);
 	}
 	try {
 		process.stderr.write(`Cloning Context Tree to ${CONTEXT_TREE_DIR}...\n`);
-		mkdirSync(join(homedir(), ".first-tree-hub"), { recursive: true });
+		mkdirSync(DEFAULT_HOME_DIR$1, { recursive: true });
 		execSync(`git ${gitConfigArgs} clone ${repoUrl} ${CONTEXT_TREE_DIR}`, {
 			stdio: "pipe",
 			env: gitEnv
@@ -2727,8 +2562,7 @@ async function promptMissingFields(options) {
 			const envStr = envHint ? `  (env: ${envHint})` : "";
 			return `  ${m.dotPath}${envStr}`;
 		});
-		throw new Error(`Missing required configuration:\n${lines.join("\n")}\n\nProvide values via environment variables, config file (~/.first-tree-hub/server.yaml),
-or run without --no-interactive to use the interactive setup wizard.`);
+		throw new Error(`Missing required configuration:\n${lines.join("\n")}\n\nProvide values via environment variables, config file (${DEFAULT_HOME_DIR$1}/server.yaml),\nor run without --no-interactive to use the interactive setup wizard.`);
 	}
 	const configPath = join(options.configDir ?? DEFAULT_CONFIG_DIR, `${options.role}.yaml`);
 	const results = {};
@@ -2808,7 +2642,11 @@ function setNestedByDot(obj, dotPath, value) {
 }
 //#endregion
 //#region ../shared/dist/index.mjs
-const adapterPlatformSchema = z.enum(["feishu", "slack"]);
+const adapterPlatformSchema = z.enum([
+	"feishu",
+	"slack",
+	"kael"
+]);
 const adapterStatusSchema = z.enum(["active", "inactive"]);
 const createAdapterConfigSchema = z.object({
 	platform: adapterPlatformSchema,
@@ -3081,7 +2919,7 @@ const SYSTEM_CONFIG_DEFAULTS = {
 	[SYSTEM_CONFIG_KEYS.PRESENCE_CLEANUP_SECONDS]: 60
 };
 //#endregion
-//#region ../server/dist/app-BVTDWxJE.mjs
+//#region ../server/dist/app-CurdzcN2.mjs
 var __defProp = Object.defineProperty;
 var __exportAll = (all, no_symbols) => {
 	let target = {};
@@ -5013,7 +4851,7 @@ async function pollInbox(db, inboxId, limit) {
 		});
 	});
 }
-async function ackEntry$1(db, entryId, inboxId) {
+async function ackEntry$2(db, entryId, inboxId) {
 	const [entry] = await db.update(inboxEntries).set({
 		status: "acked",
 		ackedAt: /* @__PURE__ */ new Date()
@@ -5055,7 +4893,7 @@ async function agentInboxRoutes(app) {
 	app.post("/:entryId/ack", async (request, reply) => {
 		const identity = requireAgent(request);
 		const entryId = Number(request.params.entryId);
-		await ackEntry$1(app.db, entryId, identity.inboxId);
+		await ackEntry$2(app.db, entryId, identity.inboxId);
 		return reply.status(204).send();
 	});
 	app.post("/:entryId/renew", async (request, reply) => {
@@ -5828,7 +5666,7 @@ async function withoutProxy(fn) {
 		for (const [key, val] of Object.entries(saved)) process.env[key] = val;
 	}
 }
-const OUTBOUND_BATCH_SIZE = 10;
+const OUTBOUND_BATCH_SIZE$1 = 10;
 /** Wrap an SDK API call with proxy bypass if needed. */
 function botApiCall(bot, fn) {
 	return bot.bypassProxy ? withoutProxy(fn) : fn();
@@ -6003,6 +5841,8 @@ function parseEventData(appId, data) {
 	const sender = data.sender;
 	const message = data.message;
 	if (!sender?.sender_id?.open_id || !message) return null;
+	if (!sender.sender_id.union_id) process.stderr.write(`[warn] Feishu event missing union_id for sender ${sender.sender_id.open_id}, falling back to open_id\n`);
+	const resolvedSenderId = sender.sender_id.union_id ?? sender.sender_id.open_id;
 	const eventId = data.event_id ?? `ws_${Date.now()}_${Math.random().toString(36).slice(2, 8)}`;
 	let parsedContent;
 	try {
@@ -6019,7 +5859,8 @@ function parseEventData(appId, data) {
 		eventId,
 		platform: "feishu",
 		appId,
-		senderId: sender.sender_id.open_id,
+		senderId: resolvedSenderId,
+		senderOpenId: sender.sender_id.open_id,
 		senderType: sender.sender_type ?? "user",
 		externalChannelId: message.chat_id ?? "",
 		chatType: message.chat_type ?? "group",
@@ -6192,7 +6033,7 @@ async function processFeishuOutbound(db, findBotByAgentId, log) {
       JOIN adapter_agent_mappings aam ON a.id = aam.agent_id
       WHERE aam.platform = 'feishu' AND ie.status = 'pending'
       ORDER BY ie.created_at
-      LIMIT ${OUTBOUND_BATCH_SIZE}
+      LIMIT ${OUTBOUND_BATCH_SIZE$1}
       FOR UPDATE SKIP LOCKED
     )
     RETURNING id, inbox_id, message_id, chat_id
@@ -6201,21 +6042,21 @@ async function processFeishuOutbound(db, findBotByAgentId, log) {
 	for (const entry of claimed) try {
 		const [msg] = await db.select().from(messages).where(eq(messages.id, entry.message_id)).limit(1);
 		if (!msg) {
-			await ackEntry(db, entry.id);
+			await ackEntry$1(db, entry.id);
 			continue;
 		}
 		if (msg.metadata?.source === "feishu") {
-			await ackEntry(db, entry.id);
+			await ackEntry$1(db, entry.id);
 			continue;
 		}
 		const channelMapping = await findExternalChannelByChat(db, "feishu", entry.chat_id ?? msg.chatId);
 		if (!channelMapping) {
-			await ackEntry(db, entry.id);
+			await ackEntry$1(db, entry.id);
 			continue;
 		}
 		const dedupKey = `${msg.id}:${channelMapping.externalChannelId}`;
 		if (sentMessages.has(dedupKey)) {
-			await ackEntry(db, entry.id);
+			await ackEntry$1(db, entry.id);
 			continue;
 		}
 		const bot = findBotByAgentId(msg.senderId);
@@ -6224,7 +6065,7 @@ async function processFeishuOutbound(db, findBotByAgentId, log) {
 				messageId: msg.id,
 				senderId: msg.senderId
 			}, "Outbound skip: sender has no feishu bot binding");
-			await ackEntry(db, entry.id);
+			await ackEntry$1(db, entry.id);
 			continue;
 		}
 		const { msgType, content } = formatForFeishu(msg.format, msg.content);
@@ -6244,7 +6085,7 @@ async function processFeishuOutbound(db, findBotByAgentId, log) {
 			externalMessageId: externalMsgId,
 			externalChannelId: channelMapping.externalChannelId
 		});
-		await ackEntry(db, entry.id);
+		await ackEntry$1(db, entry.id);
 		bot.lastActiveAt = /* @__PURE__ */ new Date();
 		sent++;
 	} catch (err) {
@@ -6259,7 +6100,7 @@ async function processFeishuOutbound(db, findBotByAgentId, log) {
 		errors: errorCount
 	};
 }
-async function ackEntry(db, entryId) {
+async function ackEntry$1(db, entryId) {
 	await db.update(inboxEntries).set({
 		status: "acked",
 		ackedAt: /* @__PURE__ */ new Date()
@@ -6297,10 +6138,11 @@ function formatForFeishu(format, content) {
 		content: JSON.stringify({ text })
 	};
 }
-function createBackgroundTasks(app, instanceId, adapterManager) {
+function createBackgroundTasks(app, instanceId, adapterManager, kaelRuntime) {
 	let inboxTimer = null;
 	let heartbeatTimer = null;
 	let adapterOutboundTimer = null;
+	let kaelOutboundTimer = null;
 	return {
 		start() {
 			inboxTimer = setInterval(async () => {
@@ -6329,6 +6171,13 @@ function createBackgroundTasks(app, instanceId, adapterManager) {
 					app.log.error(err, "Adapter outbound processing failed");
 				}
 			}, 5e3);
+			if (kaelRuntime) kaelOutboundTimer = setInterval(async () => {
+				try {
+					await kaelRuntime.processOutbound();
+				} catch (err) {
+					app.log.error(err, "Kael outbound processing failed");
+				}
+			}, 5e3);
 			heartbeatInstance(app.db, instanceId).catch((err) => {
 				app.log.error(err, "Failed initial heartbeat");
 			});
@@ -6346,9 +6195,195 @@ function createBackgroundTasks(app, instanceId, adapterManager) {
 				clearInterval(adapterOutboundTimer);
 				adapterOutboundTimer = null;
 			}
+			if (kaelOutboundTimer) {
+				clearInterval(kaelOutboundTimer);
+				kaelOutboundTimer = null;
+			}
+		}
+	};
+}
+const OUTBOUND_BATCH_SIZE = 10;
+function createKaelRuntime(db, encryptionKey, kaelEndpoint, kaelApiKey, serverUrl, log) {
+	const agentConfigs = /* @__PURE__ */ new Map();
+	const inboxToConfig = /* @__PURE__ */ new Map();
+	let aborted = false;
+	return {
+		async reload() {
+			if (!encryptionKey) {
+				log.warn("Encryption key not set — Kael runtime disabled");
+				return;
+			}
+			if (!kaelEndpoint) {
+				log.debug("KAEL_ENDPOINT not configured — Kael runtime idle");
+				agentConfigs.clear();
+				inboxToConfig.clear();
+				return;
+			}
+			const configs = await db.select().from(adapterConfigs).where(and(eq(adapterConfigs.platform, "kael"), eq(adapterConfigs.status, "active")));
+			const configAgentIds = configs.filter((c) => c.credentials).map((c) => c.agentId);
+			const agentRows = configAgentIds.length > 0 ? await db.execute(sql`SELECT id, inbox_id FROM agents WHERE id IN (${sql.join(configAgentIds.map((id) => sql`${id}`), sql`, `)}) AND status = 'active'`) : [];
+			const agentInboxMap = new Map(agentRows.map((a) => [a.id, a.inbox_id]));
+			const seen = /* @__PURE__ */ new Set();
+			for (const config of configs) {
+				if (!config.credentials) continue;
+				let creds;
+				try {
+					creds = decryptCredentials(config.credentials, encryptionKey);
+				} catch (err) {
+					log.error({
+						configId: config.id,
+						err
+					}, "Failed to decrypt Kael adapter credentials");
+					continue;
+				}
+				seen.add(config.agentId);
+				const inboxId = agentInboxMap.get(config.agentId);
+				if (!inboxId) {
+					log.warn({
+						configId: config.id,
+						agentId: config.agentId
+					}, "Kael config agent not found or inactive");
+					continue;
+				}
+				const entry = {
+					configId: config.id,
+					agentId: config.agentId,
+					inboxId,
+					kaelUserId: creds.kaelUserId,
+					kaelProjectId: creds.kaelProjectId,
+					agentToken: creds.agentToken
+				};
+				agentConfigs.set(config.agentId, entry);
+				inboxToConfig.set(inboxId, entry);
+				log.info({
+					configId: config.id,
+					agentId: config.agentId
+				}, "Loaded Kael adapter config");
+			}
+			for (const agentId of agentConfigs.keys()) if (!seen.has(agentId)) {
+				const old = agentConfigs.get(agentId);
+				if (old) inboxToConfig.delete(old.inboxId);
+				agentConfigs.delete(agentId);
+				log.info({ agentId }, "Removed inactive Kael adapter config");
+			}
+		},
+		async processOutbound() {
+			if (agentConfigs.size === 0 || !kaelEndpoint || aborted) return {
+				sent: 0,
+				errors: 0
+			};
+			let sent = 0;
+			let errorCount = 0;
+			try {
+				const agentIds = [...agentConfigs.keys()];
+				const claimed = await db.execute(sql`
+          UPDATE inbox_entries
+          SET status = 'delivered', delivered_at = NOW()
+          WHERE id IN (
+            SELECT ie.id FROM inbox_entries ie
+            JOIN agents a ON ie.inbox_id = a.inbox_id
+            JOIN adapter_configs ac ON a.id = ac.agent_id
+            WHERE ac.platform = 'kael' AND ac.status = 'active'
+              AND ie.status = 'pending'
+              AND a.id IN (${sql.join(agentIds.map((id) => sql`${id}`), sql`, `)})
+            ORDER BY ie.created_at
+            LIMIT ${OUTBOUND_BATCH_SIZE}
+            FOR UPDATE OF ie SKIP LOCKED
+          )
+          RETURNING id, inbox_id, message_id, chat_id
+        `);
+				for (const entry of claimed) try {
+					const [msg] = await db.select().from(messages).where(eq(messages.id, entry.message_id)).limit(1);
+					if (!msg) {
+						await ackEntry(db, entry.id);
+						continue;
+					}
+					const config = inboxToConfig.get(entry.inbox_id);
+					if (!config) {
+						await ackEntry(db, entry.id);
+						continue;
+					}
+					const messageContent = typeof msg.content === "string" ? msg.content : JSON.stringify(msg.content);
+					const payload = {
+						hub_chat_id: entry.chat_id ?? msg.chatId,
+						hub_agent_id: config.agentId,
+						hub_server_url: serverUrl,
+						hub_agent_token: config.agentToken,
+						user_id: config.kaelUserId,
+						project_id: config.kaelProjectId,
+						message: messageContent,
+						sender_id: msg.senderId,
+						format: msg.format
+					};
+					const response = await fetch(`${kaelEndpoint}/api/v1/hub/messages`, {
+						method: "POST",
+						headers: {
+							"Content-Type": "application/json",
+							...kaelApiKey ? { "X-Internal-API-Key": kaelApiKey } : {}
+						},
+						body: JSON.stringify(payload)
+					});
+					if (!response.ok) {
+						const body = await response.text().catch(() => "");
+						log.error({
+							entryId: entry.id,
+							status: response.status,
+							body
+						}, "Kael API rejected outbound message");
+						await nackEntry(db, entry.id);
+						errorCount++;
+						continue;
+					}
+					await ackEntry(db, entry.id);
+					sent++;
+				} catch (err) {
+					log.error({
+						entryId: entry.id,
+						err
+					}, "Failed to send outbound Kael message");
+					await nackEntry(db, entry.id).catch((nackErr) => {
+						log.error({
+							entryId: entry.id,
+							err: nackErr
+						}, "Failed to NACK entry");
+					});
+					errorCount++;
+				}
+			} catch (err) {
+				log.error({ err }, "Kael outbound processing error");
+				return {
+					sent: 0,
+					errors: 1
+				};
+			}
+			return {
+				sent,
+				errors: errorCount
+			};
+		},
+		shutdown() {
+			aborted = true;
+			agentConfigs.clear();
+			inboxToConfig.clear();
 		}
 	};
 }
+async function ackEntry(db, entryId) {
+	await db.update(inboxEntries).set({
+		status: "acked",
+		ackedAt: /* @__PURE__ */ new Date()
+	}).where(eq(inboxEntries.id, entryId));
+}
+const MAX_RETRY_COUNT = 3;
+async function nackEntry(db, entryId) {
+	await db.execute(sql`
+    UPDATE inbox_entries
+    SET
+      status = CASE WHEN retry_count >= ${MAX_RETRY_COUNT} THEN 'failed' ELSE 'pending' END,
+      retry_count = retry_count + 1
+    WHERE id = ${entryId}
+  `);
+}
 async function buildApp(config) {
 	const app = Fastify({ logger: config.logger ?? true });
 	const db = connectDatabase(config.database.url);
@@ -6455,14 +6490,19 @@ async function buildApp(config) {
 	app.decorate("notifier", notifier);
 	const adapterManager = createAdapterManager(db, config.secrets.encryptionKey, app.log, notifier);
 	app.decorate("adapterManager", adapterManager);
-	const backgroundTasks = createBackgroundTasks(app, config.instanceId, adapterManager);
+	const kaelRuntime = config.kael?.endpoint ? createKaelRuntime(db, config.secrets.encryptionKey, config.kael.endpoint, config.kael.apiKey, config.kael.hubPublicUrl, app.log) : void 0;
+	const backgroundTasks = createBackgroundTasks(app, config.instanceId, adapterManager, kaelRuntime);
 	notifier.onConfigChange((configType) => {
-		if (configType === "adapter_configs") adapterManager.reload().catch((err) => app.log.error(err, "Adapter hot-reload failed (PG NOTIFY)"));
+		if (configType === "adapter_configs") {
+			adapterManager.reload().catch((err) => app.log.error(err, "Adapter hot-reload failed (PG NOTIFY)"));
+			kaelRuntime?.reload().catch((err) => app.log.error(err, "Kael hot-reload failed (PG NOTIFY)"));
+		}
 	});
 	app.addHook("onReady", async () => {
 		await notifier.start();
 		backgroundTasks.start();
 		await adapterManager.reload();
+		await kaelRuntime?.reload();
 		const { repo: ctRepo, branch: ctBranch, syncInterval } = config.contextTree;
 		const { token: ghToken } = config.github;
 		try {
@@ -6480,6 +6520,7 @@ async function buildApp(config) {
 	app.addHook("onClose", async () => {
 		backgroundTasks.stop();
 		adapterManager.shutdown();
+		kaelRuntime?.shutdown();
 		await notifier.stop();
 		await listenClient.end();
 	});
@@ -6594,4 +6635,4 @@ function resolveWebDist() {
 	} catch {}
 }
 //#endregion
-export { ClientRuntime as A, registerBuiltinHandlers as B, checkWebSocket as C, ensurePostgres as D, status as E, SdkError as F, hasAdminUser as H, SessionRegistry as I, cleanWorkspaces as L, AgentSlot as M, DEFAULT_WORKSPACE_TTL_MS as N, isDockerAvailable as O, FirstTreeHubSDK as P, getHandlerFactory as R, checkServerReachable as S, blank as T, createAdminUser$1 as V, checkDocker as _, formatCheckReport as a, checkServerConfig as b, onboardContinue as c, runMigrations as d, checkAgentConfigs as f, checkDatabase as g, checkContextTreeRepo as h, promptMissingFields as i, AgentRuntime as j, stopPostgres as k, onboardCreate as l, checkClientConfig as m, isInteractive as n, loadOnboardState as o, checkAgentTokens as p, promptAddAgent as r, onboardCheck as s, startServer as t, saveOnboardState as u, checkGitHubToken as v, printResults as w, checkServerHealth as x, checkNodeVersion as y, loadRuntimeConfig as z };
+export { ClientRuntime as A, checkWebSocket as C, ensurePostgres as D, status as E, SessionRegistry as F, cleanWorkspaces as I, hasAdminUser as M, FirstTreeHubSDK as N, isDockerAvailable as O, SdkError as P, checkServerReachable as S, blank as T, checkDocker as _, formatCheckReport as a, checkServerConfig as b, onboardContinue as c, runMigrations as d, checkAgentConfigs as f, checkDatabase as g, checkContextTreeRepo as h, promptMissingFields as i, createAdminUser$1 as j, stopPostgres as k, onboardCreate as l, checkClientConfig as m, isInteractive as n, loadOnboardState as o, checkAgentTokens as p, promptAddAgent as r, onboardCheck as s, startServer as t, saveOnboardState as u, checkGitHubToken as v, printResults as w, checkServerHealth as x, checkNodeVersion as y };