@camstack/addon-ai 0.4.6 → 0.4.8

package/dist/addon.mjs

@@ -1,6 +1,6 @@
 import { createRequire } from "node:module";
 import * as path$1 from "node:path";
-import { createHash } from "node:crypto";
+import { createHash, randomUUID } from "node:crypto";
 import { connect, createServer } from "node:net";
 import * as fs from "node:fs";
 import { createReadStream, existsSync, statSync } from "node:fs";
@@ -41,7 +41,7 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 }) : target, mod));
 var __require = /* @__PURE__ */ createRequire(import.meta.url);
 //#endregion
-//#region ../types/dist/event-category-Bxo5yJjt.mjs
+//#region ../types/dist/event-category-C0lyLd5U.mjs
 var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	EventCategory["SystemBoot"] = "system.boot";
 	EventCategory["SystemAddonsReady"] = "system.addons-ready";
@@ -58,9 +58,10 @@ var EventCategory = /* @__PURE__ */ function(EventCategory) {
 	EventCategory["SystemRestartCompleted"] = "system.restart-completed";
 	/**
 	* A newer addon or server-root package version was found by the
-	* authoritative registry check. Emitted once per
-	* `(target, packageName, currentVersion, latestVersion)` transition; repeated
-	* polling of the same result is deduplicated by the checker.
+	* authoritative registry check. Emitted once when any observed
+	* `latestVersion` changes (or a package/node first appears behind);
+	* the payload carries the full currently-available list. Repeated
+	* polling of the same latests is silent.
 	*/
 	EventCategory["UpdateAvailable"] = "update.available";
 	/**
@@ -7780,6 +7781,10 @@ var RecordingBandSchema = object({
 	preBufferSec: number$1().min(0).optional(),
 	postBufferSec: number$1().min(0).optional()
 });
+({
+	preBufferSec: 10,
+	postBufferSec: 30
+}).postBufferSec * 1e3;
 /**
 * Per-device retention overrides. Every field is optional; an unset or `0`
 * value inherits the node-wide recorder default. Only footage-lifetime limits
@@ -14558,6 +14563,9 @@ var NcSystemEventKindSchema = _enum([
 	"alarm-disarmed",
 	"alarm-arming",
 	"alarm-arm-refused",
+	"addon-updated",
+	"server-updated",
+	"export-completed",
 	"camera-online",
 	"camera-offline",
 	"camera-disabled",
@@ -16451,13 +16459,19 @@ var RetrainStatusSchema = _enum([
 * "never marked" from "already trained" must read `retrainStatus`.
 *
 * `debug` does NOT pin; it is attention, not durability.
+*
+* `favourited` IS a BOOLEAN pin (durability bit), not a retrain lifecycle.
+* A favourited track is skipped by retention the same way `staging` is, but
+* it does not enter `none|staging|trained` and has no staging budget.
 */
 var TrackFlagFields = {
 	/** Operator marked this track as training material — i.e. `retrainStatus` is
 	*  `'staging'`. */
 	markForTrain: boolean().optional(),
 	/** Operator marked this track for diagnostic attention. */
-	debug: boolean().optional()
+	debug: boolean().optional(),
+	/** Operator favourited this track. Pins it against pruning. */
+	favourited: boolean().optional()
 };
 /**
 * The lifecycle field itself, on the READ surfaces only (`Track`, `KeyEvent`).
@@ -16482,6 +16496,7 @@ var TrackFlagsSchema = object({
 	trackId: string(),
 	markForTrain: boolean(),
 	debug: boolean(),
+	favourited: boolean(),
 	/** The lifecycle state the boolean was derived from. Required here (unlike on
 	*  a track row) because this shape is only ever produced by the write body,
 	*  which always knows it — and a surface that has just written needs to render
@@ -19436,7 +19451,14 @@ targets: array(object({
 		"sleeping",
 		"unreachable",
 		"waking"
-	]).nullable()
+	]).nullable(),
+	/** A battery camera (whatever its current state). An AWAKE battery
+	*  camera is deliberately NOT recaptured on the poll cadence — every
+	*  capture is a camera hit that would keep it out of sleep — so its
+	*  cached frame legitimately ages past the currency ceiling while
+	*  nothing is streaming. A surface must keep painting it (a fresh
+	*  frame is captured at each wake), not blank to "unavailable". */
+	battery: boolean()
 })));
 /**
 * `sso-bridge` — internal hub-only cap that lets SSO-style auth
@@ -20127,8 +20149,28 @@ var ClipSchema = object({
 		startMs: number$1(),
 		endMs: number$1()
 	}),
-	/** Thumbnail URL (lazy; e.g. analytics `getEventMedia`). Never inlined. */
-	thumbnail: string().optional()
+	/**
+	* Lazy thumbnail URL, never inlined.
+	*
+	* Recording-derived clips (events-mode keep-window, and the prepared
+	* continuous event+fragment visit) MUST use the snapshot of the **main
+	* event of the interval** — `getEventMedia({ eventId, kind: 'snapshot' })`
+	* of the event that owns `kind` (object > motion > audio). Do not extract
+	* a keyframe from the recorded segments. Other providers (onboard, HKSV)
+	* mint their own stills.
+	*/
+	thumbnail: string().optional(),
+	/** Analytics event ids that overlap this visit. Empty on footage-only clips.
+	*  The default provider's visit grain puts many motion heartbeats on one clip
+	*  instead of minting one clip per marker. */
+	eventIds: array(string()).optional(),
+	/** Intra-visit footage holes (GOP rolls, discarded segments) still shorter
+	*  than `VISIT_MERGE_GAP_MS`. Playback concatenates around them; the timeline
+	*  bar keeps showing them via `recording.getAvailability`. */
+	holes: array(object({
+		startMs: number$1(),
+		endMs: number$1()
+	})).optional()
 });
 var ClipPlaybackSchema = object({
 	/** HLS master URL through the hub data-plane (Range + token in path). */
@@ -24726,7 +24768,9 @@ var ExportOptionsSchema = object({
 	includeAudio: boolean(),
 	maxLifeMs: number$1().int().positive(),
 	deleteAfterDownload: boolean(),
-	title: string().max(200).optional()
+	title: string().max(200).optional(),
+	/** Notification-output target ids to ping when this export becomes ready. */
+	notifyTargetIds: array(string().min(1)).max(20).optional()
 }).superRefine((v, ctx) => {
 	if (v.speed !== void 0 && v.timelapse !== void 0) ctx.addIssue({
 		code: ZodIssueCode.custom,
@@ -24785,10 +24829,18 @@ var ExportBytesSchema = object({
 });
 method(object({
 	deviceId: number$1(),
-	profile: string(),
+	/** @deprecated Prefer `profiles`. Kept so timelapse/notifiers keep working. */
+	profile: string().optional(),
+	profiles: array(string()).min(1).optional(),
 	fromMs: number$1(),
 	toMs: number$1(),
 	options: ExportOptionsSchema
+}).superRefine((v, ctx) => {
+	if ((v.profiles !== void 0 && v.profiles.length > 0 ? v.profiles : v.profile !== void 0 ? [v.profile] : []).length < 1) ctx.addIssue({
+		code: ZodIssueCode.custom,
+		message: "pass profiles[] (min 1) or legacy profile",
+		path: ["profiles"]
+	});
 }), ExportRecordSchema, {
 	kind: "mutation",
 	auth: "protected"
@@ -58975,7 +59027,7 @@ var require_get_vercel_oidc_token = /* @__PURE__ */ __commonJSMin(((exports, mod
 			err = error;
 		}
 		try {
-			const [{ getTokenPayload, isExpired }, { refreshToken }] = await Promise.all([await Promise.resolve().then(() => /* @__PURE__ */ __toESM(require_token_util())), await import("./token-BDEeGrwn.mjs").then((m) => /* @__PURE__ */ __toESM(m.default))]);
+			const [{ getTokenPayload, isExpired }, { refreshToken }] = await Promise.all([await Promise.resolve().then(() => /* @__PURE__ */ __toESM(require_token_util())), await import("./token-rOc1oWJ0.mjs").then((m) => /* @__PURE__ */ __toESM(m.default))]);
 			if (!token || isExpired(getTokenPayload(token), options?.expirationBufferMs)) {
 				await refreshToken(options);
 				token = getVercelOidcTokenSync();
@@ -69716,7 +69768,7 @@ async function* chunksFrom(stream) {
 var DEFAULTS_COLLECTION = "ai:llm-defaults";
 /** KV JSON-blob shape — a single `data` column routes through the settings
 *  backend's canonical key/value path (id TEXT PK, data TEXT). */
-var KV_BLOB_COLUMNS$1 = [{
+var KV_BLOB_COLUMNS$2 = [{
 	name: "data",
 	type: "TEXT",
 	notNull: true
@@ -69732,7 +69784,7 @@ var DefaultsStore = class {
 	/** Declare the backing collection before any read/write — the SQLite
 	*  settings backend rejects undeclared collections (fail-fast). */
 	async init() {
-		await this.store.declareCollection(DEFAULTS_COLLECTION, KV_BLOB_COLUMNS$1);
+		await this.store.declareCollection(DEFAULTS_COLLECTION, KV_BLOB_COLUMNS$2);
 	}
 	async list() {
 		const rows = await this.store.query(DEFAULTS_COLLECTION);
@@ -69784,7 +69836,7 @@ var SEED_PROFILE_ID = "seed-ollama-lan";
 var SEED_MARKER_ID = "seededDefaults";
 /** KV JSON-blob shape — a single `data` column routes the row through the
 *  settings backend's canonical key/value path (id TEXT PK, data TEXT). */
-var KV_BLOB_COLUMNS = [{
+var KV_BLOB_COLUMNS$1 = [{
 	name: "data",
 	type: "TEXT",
 	notNull: true
@@ -69809,8 +69861,8 @@ var ProfileStore = class {
 	*  settings backend rejects undeclared collections (fail-fast), so this
 	*  MUST run before `ensureSeeded`/`list`/`upsert` — mirrors UsageStore.init. */
 	async init() {
-		await this.store.declareCollection(PROFILES_COLLECTION, KV_BLOB_COLUMNS);
-		await this.store.declareCollection(META_COLLECTION, KV_BLOB_COLUMNS);
+		await this.store.declareCollection(PROFILES_COLLECTION, KV_BLOB_COLUMNS$1);
+		await this.store.declareCollection(META_COLLECTION, KV_BLOB_COLUMNS$1);
 	}
 	/** RAW rows (apiKey present); invalid rows dropped. */
 	async list() {
@@ -72371,6 +72423,178 @@ function createRuntimeClient(api) {
 	};
 }
 //#endregion
+//#region src/test-chat/chat-store.ts
+/**
+* Per-user persistent AI chats, over the same settings-store port as
+* profiles/usage.
+*
+* Collection `ai:chats`; row id `ai:chats/<userId>/<conversationId>` is
+* spelled as `${userId}/${conversationId}` (the collection already carries
+* the `ai:chats` prefix). Isolation is structural: every read/write takes
+* `userId` and refuses a row that belongs to someone else.
+*
+* @durable class=audit owner=ai
+*   write="an operator sends a persistent test-chat turn — one row per conversation, messages[] replayed into the model each turn"
+*   retention="operator knob: max-age days and/or max-count per user (addon global settings). Pruned on write and on the addon's existing 24h usage sweep."
+*/
+var CHATS_COLLECTION = "ai:chats";
+var TITLE_MAX_CHARS = 80;
+var KV_BLOB_COLUMNS = [{
+	name: "data",
+	type: "TEXT",
+	notNull: true
+}];
+function chatsRowId(userId, conversationId) {
+	return `${userId}/${conversationId}`;
+}
+function titleFromFirstUserMessage(content) {
+	const collapsed = content.trim().replace(/\s+/g, " ");
+	if (collapsed.length <= TITLE_MAX_CHARS) return collapsed;
+	return collapsed.slice(0, TITLE_MAX_CHARS).trimEnd();
+}
+var AttachmentRefSchema = discriminatedUnion("kind", [object({
+	kind: literal("snapshot"),
+	deviceId: number$1().int().positive()
+}), object({
+	kind: literal("track"),
+	trackId: string().min(1),
+	deviceId: number$1().int().positive()
+})]);
+var MediaSentSchema = object({
+	kind: _enum(["snapshot", "track"]),
+	mimeType: string(),
+	sizeBytes: number$1().int().nonnegative(),
+	mediaKind: string().optional(),
+	capturedAt: number$1().optional(),
+	thumbnailBase64: string().optional()
+});
+var StoredChatMessageSchema = object({
+	role: _enum(["user", "assistant"]),
+	content: string(),
+	mediaSent: MediaSentSchema.nullable().optional(),
+	thumbnailBase64: string().optional(),
+	attachment: AttachmentRefSchema.optional()
+});
+var StoredConversationSchema = object({
+	id: string(),
+	userId: string(),
+	title: string(),
+	createdAt: number$1(),
+	updatedAt: number$1(),
+	messages: array(StoredChatMessageSchema)
+});
+function withoutNulls(data) {
+	const out = {};
+	for (const [key, value] of Object.entries(data)) if (value !== null) out[key] = value;
+	return out;
+}
+function parseConversation(id, data) {
+	const parsed = StoredConversationSchema.safeParse({
+		...withoutNulls(data),
+		id
+	});
+	return parsed.success ? parsed.data : null;
+}
+var ChatStore = class {
+	store;
+	now;
+	constructor(store, now = Date.now) {
+		this.store = store;
+		this.now = now;
+	}
+	async init() {
+		await this.store.declareCollection(CHATS_COLLECTION, KV_BLOB_COLUMNS);
+	}
+	async create(userId, messages, at = this.now()) {
+		const id = randomUUID();
+		const title = titleFromFirstUserMessage(messages.find((m) => m.role === "user")?.content ?? "");
+		const conversation = {
+			id,
+			userId,
+			title: title.length > 0 ? title : "New chat",
+			createdAt: at,
+			updatedAt: at,
+			messages: [...messages]
+		};
+		await this.store.insert(CHATS_COLLECTION, {
+			id: chatsRowId(userId, id),
+			data: conversation
+		});
+		return conversation;
+	}
+	async list(userId) {
+		return (await this.owned(userId)).map((c) => ({
+			id: c.id,
+			title: c.title,
+			createdAt: c.createdAt,
+			updatedAt: c.updatedAt
+		})).sort((a, b) => b.updatedAt - a.updatedAt);
+	}
+	async get(userId, conversationId) {
+		const match = (await this.store.query(CHATS_COLLECTION)).find((r) => r.id === chatsRowId(userId, conversationId));
+		if (match === void 0) return null;
+		const parsed = parseConversation(conversationId, match.data);
+		if (parsed === null || parsed.userId !== userId) return null;
+		return parsed;
+	}
+	async append(userId, conversationId, messages, at = this.now()) {
+		const current = await this.get(userId, conversationId);
+		if (current === null) return null;
+		const next = {
+			...current,
+			updatedAt: at,
+			messages: [...current.messages, ...messages]
+		};
+		await this.store.update(CHATS_COLLECTION, chatsRowId(userId, conversationId), next);
+		return next;
+	}
+	async prune(userId, retention, now = this.now()) {
+		const owned = await this.owned(userId);
+		return this.pruneRows(owned, retention, now);
+	}
+	async pruneAll(retention, now = this.now()) {
+		const all = await this.allValid();
+		return this.pruneRows(all, retention, now);
+	}
+	async pruneRows(rows, retention, now) {
+		const doomed = /* @__PURE__ */ new Set();
+		const maxAgeMs = retention.maxAgeMs;
+		if (maxAgeMs !== void 0 && maxAgeMs > 0) {
+			const cutoff = now - maxAgeMs;
+			for (const row of rows) if (row.updatedAt < cutoff) doomed.add(chatsRowId(row.userId, row.id));
+		}
+		const maxCount = retention.maxCount;
+		if (maxCount !== void 0 && maxCount > 0) {
+			const byUser = /* @__PURE__ */ new Map();
+			for (const row of rows) {
+				if (doomed.has(chatsRowId(row.userId, row.id))) continue;
+				const list = byUser.get(row.userId) ?? [];
+				list.push(row);
+				byUser.set(row.userId, list);
+			}
+			for (const group of byUser.values()) {
+				const sorted = [...group].sort((a, b) => b.updatedAt - a.updatedAt);
+				for (const extra of sorted.slice(maxCount)) doomed.add(chatsRowId(extra.userId, extra.id));
+			}
+		}
+		for (const id of doomed) await this.store.remove(CHATS_COLLECTION, id);
+		return doomed.size;
+	}
+	async owned(userId) {
+		return (await this.allValid()).filter((c) => c.userId === userId);
+	}
+	async allValid() {
+		const rows = await this.store.query(CHATS_COLLECTION);
+		const out = [];
+		for (const row of rows) {
+			const slash = row.id.indexOf("/");
+			const parsed = parseConversation(slash >= 0 ? row.id.slice(slash + 1) : row.id, row.data);
+			if (parsed !== null) out.push(parsed);
+		}
+		return out;
+	}
+};
+//#endregion
 //#region src/assembly.ts
 /**
 * Registration assembly (the hub/agent split, spec §1). Every node running
@@ -72398,13 +72622,15 @@ async function assembleAi(deps) {
 		registrations,
 		runtimeProvider
 	};
-	const { UsageStore } = await import("./usage-store-RiVXP_ma.mjs").then((n) => n.i);
+	const { UsageStore } = await import("./usage-store-D_bmdGGd.mjs").then((n) => n.i);
 	const store = new ProfileStore(deps.settingsPort);
 	const defaults = new DefaultsStore(deps.settingsPort);
 	const usage = new UsageStore(deps.settingsPort, Date.now, deps.logger.child("llm-usage"));
+	const chats = new ChatStore(deps.settingsPort, Date.now);
 	await store.init();
 	await defaults.init();
 	await usage.init();
+	await chats.init();
 	await store.ensureSeeded();
 	const llmProvider = createLlmProvider({
 		store,
@@ -72427,6 +72653,7 @@ async function assembleAi(deps) {
 		llmProvider,
 		store,
 		usage,
+		chats,
 		prune: (retentionDays) => usage.prune(retentionDays)
 	};
 }
@@ -72567,7 +72794,14 @@ var TestChatRequestSchema = object({
 	/** See the timeout block above. Applies to a VISION turn identically —
 	*  vision inference is the slower one, so a bound tuned on text is a bound
 	*  that only fails on the interesting case. */
-	firstTokenTimeoutMs: number$1().int().positive().max(TEST_CHAT_MAX_FIRST_TOKEN_TIMEOUT_MS).default(TEST_CHAT_DEFAULT_FIRST_TOKEN_TIMEOUT_MS)
+	firstTokenTimeoutMs: number$1().int().positive().max(TEST_CHAT_MAX_FIRST_TOKEN_TIMEOUT_MS).default(TEST_CHAT_DEFAULT_FIRST_TOKEN_TIMEOUT_MS),
+	/**
+	* Persist this turn into the caller's private chat history. Omitted or
+	* false is throwaway — today's behaviour, nothing written.
+	*/
+	persist: boolean().optional(),
+	/** Resume this conversation. Ignored unless `persist` is true. */
+	conversationId: string().min(1).optional()
 }).strict();
 /**
 * Below this, a turn that CARRIED an image almost certainly did not deliver it.
@@ -72598,7 +72832,9 @@ var TestChatAttachmentSchema = object({
 	/** Track attachments only: the `MediaFileKind` that won `TRACK_MEDIA_PREFERENCE`. */
 	mediaKind: string().optional(),
 	/** Epoch ms of the frame, when the source knows it. */
-	capturedAt: number$1().optional()
+	capturedAt: number$1().optional(),
+	/** JPEG of what was actually sent — present when reopening history. */
+	thumbnailBase64: string().optional()
 });
 /**
 * What the run is doing right now — so a wait reads as progress, not as a hang.
@@ -72644,7 +72880,9 @@ var TestChatEventSchema = discriminatedUnion("kind", [
 		*  arrives at once. Said out loud rather than faked. */
 		streamed: boolean(),
 		/** Echoed so the page states the bound it is really working under. */
-		firstTokenTimeoutMs: number$1()
+		firstTokenTimeoutMs: number$1(),
+		/** Set when this turn was (or will be) persisted — so the page can resume. */
+		conversationId: string().optional()
 	}),
 	object({
 		kind: literal("token"),
@@ -72655,7 +72893,8 @@ var TestChatEventSchema = discriminatedUnion("kind", [
 		inputTokens: number$1(),
 		outputTokens: number$1(),
 		latencyMs: number$1(),
-		truncated: boolean()
+		truncated: boolean(),
+		conversationId: string().optional()
 	}),
 	object({
 		kind: literal("error"),
@@ -72668,6 +72907,59 @@ function encodeEvent(event) {
 	return `${JSON.stringify(event)}\n`;
 }
 //#endregion
+//#region src/test-chat/persist.ts
+/**
+* The messages SOURCE for a test-chat turn: in-page transcript (throwaway)
+* versus stored history (persistent). The NDJSON transport is unchanged.
+*/
+function asWireMessages(messages) {
+	return messages.map((m) => ({
+		role: m.role,
+		content: m.content
+	}));
+}
+function isPersistent(request) {
+	return request.persist === true;
+}
+async function resolveStreamMessages(store, userId, request) {
+	if (!isPersistent(request) || request.conversationId === void 0) return {
+		ok: true,
+		conversationId: request.conversationId ?? null,
+		messages: request.messages
+	};
+	const existing = await store.get(userId, request.conversationId);
+	if (existing === null) return {
+		ok: false,
+		status: 404,
+		error: "conversation not found"
+	};
+	const combined = [...asWireMessages(existing.messages), ...request.messages];
+	const messages = combined.length > 40 ? combined.slice(-40) : combined;
+	return {
+		ok: true,
+		conversationId: existing.id,
+		messages
+	};
+}
+function userTurnsToStore(request, commit) {
+	return [{
+		role: "user",
+		content: [...request.messages].reverse().find((m) => m.role === "user")?.content ?? "",
+		...commit.mediaSent !== null ? { mediaSent: commit.mediaSent } : {},
+		...commit.thumbnailBase64 !== void 0 ? { thumbnailBase64: commit.thumbnailBase64 } : {},
+		...request.attachment !== void 0 ? { attachment: request.attachment } : {}
+	}, {
+		role: "assistant",
+		content: commit.assistantContent
+	}];
+}
+async function commitPersistentTurn(store, userId, request, commit) {
+	if (!isPersistent(request)) return null;
+	const turns = userTurnsToStore(request, commit);
+	if (request.conversationId !== void 0) return store.append(userId, request.conversationId, turns);
+	return store.create(userId, turns);
+}
+//#endregion
 //#region src/test-chat/media.ts
 /**
 * Which stored media a track attachment is allowed to be, best first.
@@ -72920,7 +73212,10 @@ async function runTestChatStream(deps, request, emit, signal) {
 			await fail(outcome.failure, "ai test chat: attachment could not be resolved — vision turn refused", { attachmentKind: request.attachment.kind });
 			return;
 		}
-		attachment = outcome.resolved.attachment;
+		attachment = {
+			...outcome.resolved.attachment,
+			thumbnailBase64: Buffer.from(outcome.resolved.image.bytes).toString("base64")
+		};
 		images = [outcome.resolved.image];
 		imageCount = 1;
 	}
@@ -73137,6 +73432,49 @@ async function runTestChatStream(deps, request, emit, signal) {
 	});
 }
 //#endregion
+//#region src/test-chat/user-from-request.ts
+var SESSION_COOKIE = "camstack_session";
+function cookieValue(header, name) {
+	if (header === void 0 || header.length === 0) return null;
+	for (const pair of header.split(";")) {
+		const eq = pair.indexOf("=");
+		if (eq === -1) continue;
+		if (pair.slice(0, eq).trim() !== name) continue;
+		const raw = pair.slice(eq + 1).trim();
+		if (raw.length === 0) return null;
+		try {
+			return decodeURIComponent(raw);
+		} catch {
+			return raw;
+		}
+	}
+	return null;
+}
+function userIdFromJwt(token) {
+	const parts = token.split(".");
+	if (parts.length < 2 || parts[1] === void 0) return null;
+	try {
+		const json = Buffer.from(parts[1], "base64url").toString("utf8");
+		const payload = JSON.parse(json);
+		return typeof payload.userId === "string" && payload.userId.length > 0 ? payload.userId : null;
+	} catch {
+		return null;
+	}
+}
+function bearerToken(header) {
+	const raw = Array.isArray(header) ? header[0] : header;
+	if (raw === void 0 || !raw.startsWith("Bearer ")) return null;
+	const token = raw.slice(7).trim();
+	return token.length > 0 ? token : null;
+}
+function readUserIdFromRequest(req) {
+	const fromAuth = bearerToken(req.headers.authorization);
+	if (fromAuth !== null) return userIdFromJwt(fromAuth);
+	const fromCookie = cookieValue(Array.isArray(req.headers.cookie) ? req.headers.cookie[0] : req.headers.cookie, SESSION_COOKIE);
+	if (fromCookie === null) return null;
+	return userIdFromJwt(fromCookie);
+}
+//#endregion
 //#region src/test-chat/plane.ts
 /** Bounded so a malformed or hostile body cannot buy memory. */
 var MAX_BODY_BYTES = 256 * 1024;
@@ -73160,61 +73498,164 @@ function sendJson(res, status, body) {
 	});
 	res.end(text);
 }
-function createTestChatPlaneHandler(deps) {
-	return async (req, res) => {
-		if ((req.method ?? "GET").toUpperCase() !== "POST") {
-			sendJson(res, 405, { error: "POST only" });
+function pathParts(url) {
+	return ((url ?? "/").split("?")[0] ?? "/").split("/").filter((p) => p.length > 0);
+}
+function requireUser(req, res) {
+	const userId = readUserIdFromRequest(req);
+	if (userId === null) {
+		sendJson(res, 401, { error: "unauthenticated" });
+		return null;
+	}
+	return userId;
+}
+async function handleList(deps, req, res) {
+	if (deps.chats === void 0) {
+		sendJson(res, 503, { error: "chat store unavailable" });
+		return;
+	}
+	const userId = requireUser(req, res);
+	if (userId === null) return;
+	sendJson(res, 200, { chats: await deps.chats.list(userId) });
+}
+async function handleGet(deps, req, res, conversationId) {
+	if (deps.chats === void 0) {
+		sendJson(res, 503, { error: "chat store unavailable" });
+		return;
+	}
+	const userId = requireUser(req, res);
+	if (userId === null) return;
+	const conversation = await deps.chats.get(userId, conversationId);
+	if (conversation === null) {
+		sendJson(res, 404, { error: "conversation not found" });
+		return;
+	}
+	sendJson(res, 200, conversation);
+}
+async function handleStream(deps, req, res) {
+	const raw = await readBody(req);
+	if (raw === null) {
+		sendJson(res, 413, { error: "request body too large" });
+		return;
+	}
+	let parsedJson;
+	try {
+		parsedJson = JSON.parse(raw);
+	} catch {
+		sendJson(res, 400, { error: "invalid JSON body" });
+		return;
+	}
+	const parsed = TestChatRequestSchema.safeParse(parsedJson);
+	if (!parsed.success) {
+		const detail = parsed.error.issues.map((i) => `${i.path.join(".") || "(root)"}: ${i.message}`).join("; ");
+		deps.logger.warn("ai test chat: request rejected — turn never ran", { meta: { detail } });
+		sendJson(res, 400, {
+			error: "invalid request",
+			detail
+		});
+		return;
+	}
+	let request = parsed.data;
+	if (request.persist === true) {
+		if (deps.chats === void 0) {
+			sendJson(res, 503, { error: "chat store unavailable" });
 			return;
 		}
-		const raw = await readBody(req);
-		if (raw === null) {
-			sendJson(res, 413, { error: "request body too large" });
+		const userId = requireUser(req, res);
+		if (userId === null) return;
+		const resolved = await resolveStreamMessages(deps.chats, userId, request);
+		if (!resolved.ok) {
+			sendJson(res, resolved.status, { error: resolved.error });
 			return;
 		}
-		let parsedJson;
-		try {
-			parsedJson = JSON.parse(raw);
-		} catch {
-			sendJson(res, 400, { error: "invalid JSON body" });
+		request = {
+			...request,
+			messages: resolved.messages
+		};
+	}
+	const controller = new AbortController();
+	res.on("close", () => controller.abort());
+	res.writeHead(200, {
+		"content-type": "application/x-ndjson; charset=utf-8",
+		"cache-control": "no-store, no-transform",
+		"content-encoding": "identity",
+		"x-no-compression": "1",
+		connection: "keep-alive"
+	});
+	res.flushHeaders();
+	let assistantText = "";
+	let mediaSent = null;
+	let sawDone = false;
+	let pendingDone = null;
+	const emit = (event) => {
+		if (res.writableEnded) return;
+		if (event.kind === "token") assistantText += event.text;
+		if (event.kind === "meta") mediaSent = event.mediaSent;
+		if (event.kind === "done") {
+			sawDone = true;
+			pendingDone = event;
 			return;
 		}
-		const parsed = TestChatRequestSchema.safeParse(parsedJson);
-		if (!parsed.success) {
-			const detail = parsed.error.issues.map((i) => `${i.path.join(".") || "(root)"}: ${i.message}`).join("; ");
-			deps.logger.warn("ai test chat: request rejected — turn never ran", { meta: { detail } });
-			sendJson(res, 400, {
-				error: "invalid request",
-				detail
-			});
+		res.write(encodeEvent(event));
+	};
+	try {
+		await runTestChatStream(deps.stream, request, emit, controller.signal);
+		let conversationId;
+		if (sawDone && request.persist === true && deps.chats !== void 0) {
+			const userId = readUserIdFromRequest(req);
+			if (userId !== null) try {
+				conversationId = (await commitPersistentTurn(deps.chats, userId, request, {
+					assistantContent: assistantText,
+					mediaSent,
+					thumbnailBase64: thumbnailFrom(mediaSent)
+				}))?.id;
+				const retention = deps.retention?.();
+				if (retention !== void 0) await deps.chats.prune(userId, retention).catch(() => void 0);
+			} catch (cause) {
+				const message = cause instanceof Error ? cause.message : String(cause);
+				deps.logger.warn("ai test chat: persist failed — turn was not saved", { meta: { error: message } });
+			}
+		}
+		if (pendingDone !== null) emitDone(res, pendingDone, conversationId);
+	} catch (cause) {
+		const message = cause instanceof Error ? cause.message : String(cause);
+		deps.logger.error("ai test chat: run threw — stream closed with an error event", { meta: { error: message } });
+		if (!res.writableEnded) res.write(encodeEvent({
+			kind: "error",
+			code: "adapter-error",
+			message
+		}));
+	} finally {
+		if (!res.writableEnded) res.end();
+	}
+}
+function thumbnailFrom(sent) {
+	return sent === null ? void 0 : sent.thumbnailBase64;
+}
+function emitDone(res, done, conversationId) {
+	if (res.writableEnded) return;
+	res.write(encodeEvent(conversationId !== void 0 ? {
+		...done,
+		conversationId
+	} : done));
+}
+function createTestChatPlaneHandler(deps) {
+	return async (req, res) => {
+		const method = (req.method ?? "GET").toUpperCase();
+		const parts = pathParts(req.url);
+		if (method === "GET" && parts[0] === "chats" && parts.length === 1) {
+			await handleList(deps, req, res);
 			return;
 		}
-		const controller = new AbortController();
-		res.on("close", () => controller.abort());
-		res.writeHead(200, {
-			"content-type": "application/x-ndjson; charset=utf-8",
-			"cache-control": "no-store, no-transform",
-			"content-encoding": "identity",
-			"x-no-compression": "1",
-			connection: "keep-alive"
-		});
-		res.flushHeaders();
-		const emit = (event) => {
-			if (res.writableEnded) return;
-			res.write(encodeEvent(event));
-		};
-		try {
-			await runTestChatStream(deps.stream, parsed.data, emit, controller.signal);
-		} catch (cause) {
-			const message = cause instanceof Error ? cause.message : String(cause);
-			deps.logger.error("ai test chat: run threw — stream closed with an error event", { meta: { error: message } });
-			emit({
-				kind: "error",
-				code: "adapter-error",
-				message
-			});
-		} finally {
-			if (!res.writableEnded) res.end();
+		if (method === "GET" && parts[0] === "chats" && parts.length === 2 && parts[1] !== void 0) {
+			await handleGet(deps, req, res, parts[1]);
+			return;
 		}
+		if (method !== "POST" || parts.length > 0) {
+			sendJson(res, 405, { error: "POST only" });
+			return;
+		}
+		await handleStream(deps, req, res);
 	};
 }
 //#endregion
@@ -73229,13 +73670,40 @@ function createTestChatPlaneHandler(deps) {
 var POST_BOOT_DELAY_MS = 15e3;
 var PRUNE_INTERVAL_MS = 1440 * 60 * 1e3;
 var USAGE_RETENTION_DAYS = 90;
+var DAY_MS = 1440 * 60 * 1e3;
 var AiAddon = class extends BaseAddon {
 	supervisor;
 	timers = [];
 	/** Hub only — see `serveTestChatPlane`. */
 	testChatPlane = null;
 	constructor() {
-		super({});
+		super({
+			chatRetentionMaxAgeDays: 30,
+			chatRetentionMaxCount: 50
+		});
+	}
+	globalSettingsSchema() {
+		return this.schema({ sections: [{
+			id: "chats",
+			title: "Persistent chats",
+			fields: [this.field({
+				type: "number",
+				key: "chatRetentionMaxAgeDays",
+				label: "Chat retention (days)",
+				description: "Drop persisted chats older than this. 0 keeps them forever.",
+				min: 0,
+				step: 1,
+				default: 30
+			}), this.field({
+				type: "number",
+				key: "chatRetentionMaxCount",
+				label: "Max chats per user",
+				description: "Keep only the newest N conversations per user. 0 means no cap.",
+				min: 0,
+				step: 1,
+				default: 50
+			})]
+		}] });
 	}
 	async onInitialize() {
 		const ctx = this.ctx;
@@ -73250,7 +73718,7 @@ var AiAddon = class extends BaseAddon {
 		const settingsPort = api !== void 0 ? createApiSettingsStorePort(api) : createMemorySettingsStorePort();
 		if (api === void 0) logger.warn("addon-ai: no ctx.api — profiles are in-memory only");
 		const binDir = path$1.join(ctx.nodeDataDir, "bin");
-		const { ensureLlamaServer } = await import("./ensure-llama-server-COC6iveo.mjs").then((n) => n.r);
+		const { ensureLlamaServer } = await import("./ensure-llama-server-D_uzfSep.mjs").then((n) => n.r);
 		const assembly = await assembleAi({
 			nodeId: ownNodeId,
 			isHub,
@@ -73372,7 +73840,11 @@ var AiAddon = class extends BaseAddon {
 			access: "authenticated",
 			handler: createTestChatPlaneHandler({
 				stream,
-				logger
+				logger,
+				...assembly.chats !== void 0 ? {
+					chats: assembly.chats,
+					retention: () => this.chatRetention()
+				} : {}
 			})
 		}) ?? null;
 		this.ctx.logger.info("ai test-chat data-plane served", { meta: {
@@ -73380,11 +73852,21 @@ var AiAddon = class extends BaseAddon {
 			path: `/addon/${this.ctx.id}/${TEST_CHAT_PREFIX}`
 		} });
 	}
+	chatRetention() {
+		const days = this.config.chatRetentionMaxAgeDays;
+		const count = this.config.chatRetentionMaxCount;
+		return {
+			...days > 0 ? { maxAgeMs: days * DAY_MS } : {},
+			...count > 0 ? { maxCount: count } : {}
+		};
+	}
 	schedulePostBoot(assembly) {
 		const kick = setTimeout(() => {
 			assembly.prune?.(USAGE_RETENTION_DAYS).catch(() => void 0);
+			assembly.chats?.pruneAll(this.chatRetention()).catch(() => void 0);
 			setInterval(() => {
 				assembly.prune?.(USAGE_RETENTION_DAYS).catch(() => void 0);
+				assembly.chats?.pruneAll(this.chatRetention()).catch(() => void 0);
 			}, PRUNE_INTERVAL_MS).unref?.();
 			this.autoStartRuntimes(assembly);
 		}, POST_BOOT_DELAY_MS);
@@ -73412,4 +73894,4 @@ var AiAddon = class extends BaseAddon {
 	}
 };
 //#endregion
-export { resolveRetryPolicy as A, AiAddon, AiAddon as default, __commonJSMin as B, createDefaultModelOps as C, AI_ADDON_ID as D, entryForRef as E, LlmProfileKindSchema as F, boolean as I, number$1 as L, require_token_util as M, require_token_error as N, createLlmProvider as O, LlmErrorCodeSchema as P, object as R, LlamaSupervisor as S, catalogById as T, __exportAll as V, createApiSettingsStorePort as _, renderTranscript as a, createLlmRuntimeProvider as b, TEST_CHAT_CONSUMER as c, TEST_CHAT_MAX_FIRST_TOKEN_TIMEOUT_MS as d, TEST_CHAT_MIN_VISION_INPUT_TOKENS as f, encodeEvent as g, TestChatRequestSchema as h, pickTrackMedia as i, createLlmClient as j, CONSUMER_RETRY_POLICY as k, TEST_CHAT_DEFAULT_FIRST_TOKEN_TIMEOUT_MS as l, TestChatEventSchema as m, runTestChatStream as n, resolveImage as o, TEST_CHAT_PREFIX as p, TRACK_MEDIA_PREFERENCE as r, TEST_CHAT_CONNECT_TIMEOUT_MS as s, createTestChatPlaneHandler as t, TEST_CHAT_IDLE_TIMEOUT_MS as u, createMemorySettingsStorePort as v, LLM_MODEL_CATALOG as w, fileSha256 as x, createRuntimeClient as y, string as z };
+export { entryForRef as A, AiAddon, AiAddon as default, boolean as B, createRuntimeClient as C, createDefaultModelOps as D, LlamaSupervisor as E, createLlmClient as F, __exportAll as G, object as H, require_token_util as I, require_token_error as L, createLlmProvider as M, CONSUMER_RETRY_POLICY as N, LLM_MODEL_CATALOG as O, resolveRetryPolicy as P, LlmErrorCodeSchema as R, titleFromFirstUserMessage as S, fileSha256 as T, string as U, number$1 as V, __commonJSMin as W, createApiSettingsStorePort as _, renderTranscript as a, ChatStore as b, TEST_CHAT_CONSUMER as c, TEST_CHAT_MAX_FIRST_TOKEN_TIMEOUT_MS as d, TEST_CHAT_MIN_VISION_INPUT_TOKENS as f, encodeEvent as g, TestChatRequestSchema as h, pickTrackMedia as i, AI_ADDON_ID as j, catalogById as k, TEST_CHAT_DEFAULT_FIRST_TOKEN_TIMEOUT_MS as l, TestChatEventSchema as m, runTestChatStream as n, resolveImage as o, TEST_CHAT_PREFIX as p, TRACK_MEDIA_PREFERENCE as r, TEST_CHAT_CONNECT_TIMEOUT_MS as s, createTestChatPlaneHandler as t, TEST_CHAT_IDLE_TIMEOUT_MS as u, createMemorySettingsStorePort as v, createLlmRuntimeProvider as w, chatsRowId as x, CHATS_COLLECTION as y, LlmProfileKindSchema as z };