@circuitwall/jarela 0.14.0 → 1.0.0

package/.next/standalone/.next/server/chunks/239.js

@@ -1638,8 +1638,8 @@ var dist_messages = __webpack_require__(12016);
 var providers = __webpack_require__(68866);
 // EXTERNAL MODULE: ./lib/stores/model-config.ts
 var model_config = __webpack_require__(80937);
-// EXTERNAL MODULE: ./lib/tools/index.ts + 23 modules
-var lib_tools = __webpack_require__(64011);
+// EXTERNAL MODULE: ./lib/tools/index.ts + 27 modules
+var lib_tools = __webpack_require__(36141);
 // EXTERNAL MODULE: ./node_modules/@langchain/core/dist/language_models/chat_models.js + 1 modules
 var chat_models = __webpack_require__(87233);
 // EXTERNAL MODULE: ./node_modules/@langchain/core/dist/outputs.js
@@ -1832,15 +1832,26 @@ class JarelaChatModel extends chat_models/* BaseChatModel */.xV {
             } else if (event.type === "usage") {
                 // ADR-0041: surface real provider token counts on the final
                 // AIMessageChunk via LangChain's standard `usage_metadata` field so
-                // the agent loop can snapshot them into message_usage.
+                // the agent loop can snapshot them into message_usage. PR #181 added
+                // Anthropic prompt caching; carry the cache breakdown through
+                // `input_token_details` (LangChain's standard channel) so cost
+                // attribution downstream can apply the 1.25× / 0.1× rates.
                 emittedAny = true;
+                const cacheCreation = event.cache_creation_input_tokens ?? 0;
+                const cacheRead = event.cache_read_input_tokens ?? 0;
                 yield new outputs/* ChatGenerationChunk */.Cf({
                     message: new dist_messages/* AIMessageChunk */.H({
                         content: "",
                         usage_metadata: {
                             input_tokens: event.input_tokens ?? 0,
                             output_tokens: event.output_tokens ?? 0,
-                            total_tokens: event.total_tokens ?? (event.input_tokens ?? 0) + (event.output_tokens ?? 0)
+                            total_tokens: event.total_tokens ?? (event.input_tokens ?? 0) + (event.output_tokens ?? 0),
+                            ...cacheCreation > 0 || cacheRead > 0 ? {
+                                input_token_details: {
+                                    cache_creation: cacheCreation,
+                                    cache_read: cacheRead
+                                }
+                            } : {}
                         }
                     }),
                     text: ""
@@ -2215,6 +2226,12 @@ async function* streamWithConfig(threadId, messages, options, signal) {
     // JarelaChatModel; we sum them so the final figure covers the whole turn.
     let usageInputTokens = 0;
     let usageOutputTokens = 0;
+    // PR #181 + cache-fidelity follow-up: Anthropic prompt-cache reads/writes
+    // arrive as a separate breakdown via `input_token_details`. Sum them
+    // independently so the dashboard can report cost correctly (cache reads
+    // are 10× cheaper, cache writes 1.25× more expensive than fresh input).
+    let usageCacheCreationTokens = 0;
+    let usageCacheReadTokens = 0;
     let sawUsage = false;
     // Tracks whether the model hit max_tokens mid-stream. JarelaChatModel tags
     // the final chunk with additional_kwargs.stop_reason="length" when this
@@ -2277,6 +2294,11 @@ async function* streamWithConfig(threadId, messages, options, signal) {
                     if (usage && (usage.input_tokens > 0 || usage.output_tokens > 0)) {
                         usageInputTokens += usage.input_tokens ?? 0;
                         usageOutputTokens += usage.output_tokens ?? 0;
+                        const details = usage.input_token_details;
+                        if (details) {
+                            usageCacheCreationTokens += details.cache_creation ?? 0;
+                            usageCacheReadTokens += details.cache_read ?? 0;
+                        }
                         sawUsage = true;
                     }
                     if (typeof chunk.content === "string" && chunk.content) {
@@ -2376,6 +2398,8 @@ async function* streamWithConfig(threadId, messages, options, signal) {
                     usage: sawUsage ? {
                         input_tokens: usageInputTokens,
                         output_tokens: usageOutputTokens,
+                        cache_creation_input_tokens: usageCacheCreationTokens,
+                        cache_read_input_tokens: usageCacheReadTokens,
                         source: "provider"
                     } : {
                         input_tokens: 0,
@@ -2472,6 +2496,8 @@ async function* streamWithConfig(threadId, messages, options, signal) {
             usage: sawUsage ? {
                 input_tokens: usageInputTokens,
                 output_tokens: usageOutputTokens,
+                cache_creation_input_tokens: usageCacheCreationTokens,
+                cache_read_input_tokens: usageCacheReadTokens,
                 source: "provider"
             } : {
                 input_tokens: 0,
@@ -3909,13 +3935,31 @@ function inferRatesFromSignals(signals) {
         confidence: tokenRates.length >= 2 ? "medium" : "low"
     };
 }
-function estimateCostUsd(inputTokens, outputTokens, rates) {
+// Anthropic prompt-cache multipliers, applied against the standard input
+// rate. Cache writes are billed at 1.25× input ("cache create"); cache
+// reads are billed at 0.1× input ("cache hit"). Source:
+// https://docs.anthropic.com/en/docs/build-with-claude/prompt-caching#pricing
+// We apply the same multipliers to other providers that publish a
+// cache-token breakdown — OpenAI's prompt caching, for example, also
+// quotes a 0.5× read multiplier, but its API surfaces only `cached_tokens`
+// (no separate write count) and a future PR can split that out. For now
+// any provider that emits both fields will be priced as above.
+const CACHE_CREATION_INPUT_RATE_MULTIPLIER = 1.25;
+const CACHE_READ_INPUT_RATE_MULTIPLIER = 0.1;
+function estimateCostUsd(inputTokens, outputTokens, rates, cache) {
     const inputRate = rates.inputPer1M;
     const outputRate = rates.outputPer1M;
     if (inputRate == null && outputRate == null) return 0;
     const inCost = inputRate == null ? 0 : inputTokens / 1000000 * inputRate;
     const outCost = outputRate == null ? 0 : outputTokens / 1000000 * outputRate;
-    return inCost + outCost;
+    let cacheCost = 0;
+    if (cache && inputRate != null) {
+        const create = cache.cache_creation_input_tokens ?? 0;
+        const read = cache.cache_read_input_tokens ?? 0;
+        if (create > 0) cacheCost += create / 1000000 * inputRate * CACHE_CREATION_INPUT_RATE_MULTIPLIER;
+        if (read > 0) cacheCost += read / 1000000 * inputRate * CACHE_READ_INPUT_RATE_MULTIPLIER;
+    }
+    return inCost + outCost + cacheCost;
 }
 
 ;// ./lib/agents/hallucination-classifier.ts
@@ -4832,7 +4876,12 @@ function persistAssistantMessage(thread_id, content, usedTools, toolEvents, cate
                     inputPer1M: null,
                     outputPer1M: null
                 };
-                const cost = hasProviderUsage ? estimateCostUsd(usage.input_tokens, usage.output_tokens, rates) : 0;
+                const cacheCreation = hasProviderUsage ? usage.cache_creation_input_tokens ?? 0 : 0;
+                const cacheRead = hasProviderUsage ? usage.cache_read_input_tokens ?? 0 : 0;
+                const cost = hasProviderUsage ? estimateCostUsd(usage.input_tokens, usage.output_tokens, rates, {
+                    cache_creation_input_tokens: cacheCreation,
+                    cache_read_input_tokens: cacheRead
+                }) : 0;
                 (0,message_usage/* recordMessageUsage */.up)({
                     message_id: row.msg_id,
                     thread_id,
@@ -4846,6 +4895,8 @@ function persistAssistantMessage(thread_id, content, usedTools, toolEvents, cate
                     input_rate_usd_per_mtok: rates.inputPer1M,
                     output_rate_usd_per_mtok: rates.outputPer1M,
                     cost_usd: cost,
+                    cache_creation_input_tokens: cacheCreation > 0 ? cacheCreation : null,
+                    cache_read_input_tokens: cacheRead > 0 ? cacheRead : null,
                     tier_usage: contextSnapshot ? {
                         hot_tokens: contextSnapshot.hot_tokens,
                         warm_tokens: contextSnapshot.warm_tokens,
@@ -5564,6 +5615,8 @@ function loadExternalTools(builtinNames) {
                             result.usage = {
                                 input_tokens: d.usage.input_tokens ?? 0,
                                 output_tokens: d.usage.output_tokens ?? 0,
+                                cache_creation_input_tokens: d.usage.cache_creation_input_tokens ?? 0,
+                                cache_read_input_tokens: d.usage.cache_read_input_tokens ?? 0,
                                 provider: d.provider,
                                 model_id: d.model_id,
                                 model_config_name: d.model_config_name ?? null
@@ -5583,539 +5636,33 @@ function loadExternalTools(builtinNames) {
 
 /***/ }),
 
-/***/ 45552:
+/***/ 36141:
 /***/ ((__unused_webpack_module, __webpack_exports__, __webpack_require__) => {
 
-/* harmony export */ __webpack_require__.d(__webpack_exports__, {
-/* harmony export */   pN: () => (/* binding */ getKnownMaxOutputTokens),
-/* harmony export */   zJ: () => (/* binding */ getKnownContextLength)
-/* harmony export */ });
-/* unused harmony export getKnownModelLimits */
-// Web-sourced fallback context-window sizes per (provider, model_id).
-// Used when the live `/models` endpoint doesn't report `context_length`
-// (OpenAI's catalog and GitHub Copilot's catalog both omit it) AND the
-// user hasn't pinned `context_window_tokens` on the model config.
-//
-// Resolution order at runtime is:
-//   1. user-set `params.context_window_tokens` (explicit override)
-//   2. live API value via `listModels()` / catalog cache (when populated)
-//   3. this static fallback (this file)
-//   4. `DEFAULT_CONTEXT_WINDOW_TOKENS` in lib/agents/context-budget.ts
-//
-// Verified from each vendor's public docs as of 2026-06. Bump when vendors
-// publish new families.
-const ANTHROPIC = {
-    "claude-opus-4-7": {
-        context_length: 1000000,
-        max_output_tokens: 8192
-    },
-    "claude-opus-4": {
-        context_length: 200000,
-        max_output_tokens: 8192
-    },
-    "claude-sonnet-4-6": {
-        context_length: 200000,
-        max_output_tokens: 8192
-    },
-    "claude-sonnet-4": {
-        context_length: 200000,
-        max_output_tokens: 8192
-    },
-    "claude-3.7-sonnet": {
-        context_length: 200000,
-        max_output_tokens: 8192
-    },
-    "claude-3-7-sonnet": {
-        context_length: 200000,
-        max_output_tokens: 8192
-    },
-    "claude-3-5-sonnet": {
-        context_length: 200000,
-        max_output_tokens: 8192
-    },
-    "claude-3-5-haiku": {
-        context_length: 200000,
-        max_output_tokens: 8192
-    },
-    "claude-haiku-4-5": {
-        context_length: 200000,
-        max_output_tokens: 4096
-    },
-    "claude-haiku-4": {
-        context_length: 200000,
-        max_output_tokens: 4096
-    },
-    "claude-3-opus": {
-        context_length: 200000,
-        max_output_tokens: 4096
-    }
-};
-const GEMINI = {
-    "gemini-2.5-pro": {
-        context_length: 1048576,
-        max_output_tokens: 65536
-    },
-    "gemini-2.5-flash": {
-        context_length: 1048576,
-        max_output_tokens: 65536
-    },
-    "gemini-2.0-flash-lite": {
-        context_length: 1048576,
-        max_output_tokens: 8192
-    },
-    "gemini-2.0-flash": {
-        context_length: 1048576,
-        max_output_tokens: 8192
-    },
-    "gemini-1.5-pro": {
-        context_length: 2097152,
-        max_output_tokens: 8192
-    },
-    "gemini-1.5-flash": {
-        context_length: 1048576,
-        max_output_tokens: 8192
-    }
-};
-const OPENAI = {
-    "gpt-5-mini": {
-        context_length: 400000,
-        max_output_tokens: 128000
-    },
-    "gpt-5": {
-        context_length: 400000,
-        max_output_tokens: 128000
-    },
-    "gpt-4.1-mini": {
-        context_length: 1047576,
-        max_output_tokens: 32768
-    },
-    "gpt-4.1": {
-        context_length: 1047576,
-        max_output_tokens: 32768
-    },
-    "gpt-4o-mini": {
-        context_length: 128000,
-        max_output_tokens: 16384
-    },
-    "gpt-4o": {
-        context_length: 128000,
-        max_output_tokens: 16384
-    },
-    "gpt-4-turbo": {
-        context_length: 128000,
-        max_output_tokens: 4096
-    },
-    "gpt-4": {
-        context_length: 8192,
-        max_output_tokens: 4096
-    },
-    "gpt-3.5-turbo": {
-        context_length: 16385,
-        max_output_tokens: 4096
-    },
-    "chatgpt-4o": {
-        context_length: 128000,
-        max_output_tokens: 16384
-    },
-    "o4-mini": {
-        context_length: 200000,
-        max_output_tokens: 100000
-    },
-    "o3-mini": {
-        context_length: 200000,
-        max_output_tokens: 100000
-    },
-    "o3": {
-        context_length: 200000,
-        max_output_tokens: 100000
-    },
-    "o1-mini": {
-        context_length: 128000,
-        max_output_tokens: 65536
-    },
-    "o1": {
-        context_length: 200000,
-        max_output_tokens: 100000
-    }
-};
-const DEEPSEEK = {
-    "deepseek-v4-flash": {
-        context_length: 65536,
-        max_output_tokens: 8192
-    },
-    "deepseek-v4-pro": {
-        context_length: 65536,
-        max_output_tokens: 8192
-    },
-    "deepseek-chat": {
-        context_length: 65536,
-        max_output_tokens: 8192
-    },
-    "deepseek-reasoner": {
-        context_length: 65536,
-        max_output_tokens: 8192
-    }
-};
-// GitHub Copilot proxies vendor models — sometimes under a transformed id
-// (e.g. `Github-Opus4.6`, `copilot-claude-3.5-sonnet`). Strip the proxy
-// prefix and dispatch to the underlying vendor table.
-function resolveCopilot(model_id) {
-    const normalized = model_id.replace(/^(?:Github-|copilot-)/i, "").toLowerCase();
-    // Canonicalise a few proxy-specific spellings.
-    const canon = normalized.replace(/^opus4\.6/, "claude-opus-4-7").replace(/^opus4/, "claude-opus-4").replace(/^sonnet4\.6/, "claude-sonnet-4-6").replace(/^sonnet4/, "claude-sonnet-4").replace(/^haiku4\.5/, "claude-haiku-4-5");
-    if (canon.startsWith("claude")) return matchPrefix(ANTHROPIC, canon);
-    if (canon.startsWith("gemini")) return matchPrefix(GEMINI, canon);
-    if (canon.startsWith("gpt") || /^o[134](?:-|$)/.test(canon)) return matchPrefix(OPENAI, canon);
-    return null;
-}
-function matchPrefix(table, id) {
-    const lower = id.toLowerCase();
-    const exact = table[lower];
-    if (exact) return exact;
-    // Longest-prefix match so `gpt-4o-2024-08-06` resolves to `gpt-4o` and
-    // not `gpt-4` (which would also prefix-match).
-    let best = null;
-    for (const [k, v] of Object.entries(table)){
-        if (lower.startsWith(k) && (!best || k.length > best.key.length)) {
-            best = {
-                key: k,
-                v
-            };
-        }
-    }
-    return best?.v ?? null;
-}
-function getKnownModelLimits(provider, model_id) {
-    if (!provider || !model_id) return null;
-    switch(provider){
-        case "anthropic":
-            return matchPrefix(ANTHROPIC, model_id);
-        case "gemini":
-            return matchPrefix(GEMINI, model_id);
-        case "openai":
-            return matchPrefix(OPENAI, model_id);
-        case "deepseek":
-            return matchPrefix(DEEPSEEK, model_id);
-        case "github-copilot":
-            return resolveCopilot(model_id);
-        default:
-            return null;
-    }
-}
-function getKnownContextLength(provider, model_id) {
-    return getKnownModelLimits(provider, model_id)?.context_length ?? null;
-}
-function getKnownMaxOutputTokens(provider, model_id) {
-    return getKnownModelLimits(provider, model_id)?.max_output_tokens ?? null;
-}
 
+// EXPORTS
+__webpack_require__.d(__webpack_exports__, {
+  n0: () => (/* binding */ getAllToolsAsync),
+  sT: () => (/* binding */ getBuiltinToolNames),
+  Dk: () => (/* binding */ getToolCapability),
+  $Z: () => (/* binding */ getToolCategory),
+  y: () => (/* binding */ getToolGroup),
+  s7: () => (/* binding */ getToolSource)
+});
 
-/***/ }),
+// UNUSED EXPORTS: executeTool, getAllTools, getToolsDir, initTools, registerTools, toOpenAITools
 
-/***/ 49899:
-/***/ ((__unused_webpack_module, __webpack_exports__, __webpack_require__) => {
-
-/* harmony export */ __webpack_require__.d(__webpack_exports__, {
-/* harmony export */   FR: () => (/* binding */ defaultToolStats),
-/* harmony export */   W7: () => (/* binding */ getToolStatsMap),
-/* harmony export */   _r: () => (/* binding */ listToolStats),
-/* harmony export */   hA: () => (/* binding */ recordToolUsage),
-/* harmony export */   jg: () => (/* binding */ toStats)
-/* harmony export */ });
-/* unused harmony export summarizeToolUsage */
-/* harmony import */ var _lib_db__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(46);
-
-const now = ()=>new Date().toISOString();
-const UPSERT_SQL = `
-  INSERT INTO tool_stats
-    (tool_name, call_count, success_count, error_count, used_count, last_called_at, updated_at)
-  VALUES
-    (?, ?, ?, ?, ?, ?, ?)
-  ON CONFLICT(tool_name) DO UPDATE SET
-    call_count = tool_stats.call_count + excluded.call_count,
-    success_count = tool_stats.success_count + excluded.success_count,
-    error_count = tool_stats.error_count + excluded.error_count,
-    used_count = tool_stats.used_count + excluded.used_count,
-    last_called_at = COALESCE(excluded.last_called_at, tool_stats.last_called_at),
-    updated_at = excluded.updated_at
-`;
-function recordToolUsage(toolEvents, assistantContent) {
-    const deltas = summarizeToolUsage(toolEvents, assistantContent);
-    if (deltas.length === 0) return;
-    const db = (0,_lib_db__WEBPACK_IMPORTED_MODULE_0__/* .getDb */ .Lf)();
-    const stamp = now();
-    const stmt = db.prepare(UPSERT_SQL);
-    db.exec("BEGIN");
-    try {
-        for (const row of deltas){
-            stmt.run(row.name, row.calls, row.successes, row.errors, row.used, row.calls > 0 ? stamp : null, stamp);
-        }
-        db.exec("COMMIT");
-    } catch (err) {
-        try {
-            db.exec("ROLLBACK");
-        } catch  {}
-        throw err;
-    }
-}
-function listToolStats() {
-    return (0,_lib_db__WEBPACK_IMPORTED_MODULE_0__/* .getDb */ .Lf)().prepare(`SELECT tool_name, call_count, success_count, error_count, used_count, last_called_at, updated_at
-         FROM tool_stats`).all();
-}
-function getToolStatsMap(names) {
-    const rows = names && names.length > 0 ? (0,_lib_db__WEBPACK_IMPORTED_MODULE_0__/* .getDb */ .Lf)().prepare(`SELECT tool_name, call_count, success_count, error_count, used_count, last_called_at, updated_at
-           FROM tool_stats
-          WHERE tool_name IN (${names.map(()=>"?").join(",")})`).all(...names) : listToolStats();
-    const out = new Map();
-    for (const row of rows)out.set(row.tool_name, toStats(row));
-    return out;
-}
-function defaultToolStats() {
-    return {
-        call_count: 0,
-        success_count: 0,
-        error_count: 0,
-        used_count: 0,
-        success_rate: 1,
-        usefulness_rate: 1,
-        score: 1,
-        never_used: true,
-        last_called_at: null
-    };
-}
-function toStats(row) {
-    const calls = Math.max(0, row.call_count);
-    if (calls === 0) return defaultToolStats();
-    const successRate = clamp01(row.success_count / calls);
-    const usefulnessRate = clamp01(row.used_count / calls);
-    const score = clamp01(successRate * 0.65 + usefulnessRate * 0.35);
-    return {
-        call_count: calls,
-        success_count: row.success_count,
-        error_count: row.error_count,
-        used_count: row.used_count,
-        success_rate: successRate,
-        usefulness_rate: usefulnessRate,
-        score,
-        never_used: false,
-        last_called_at: row.last_called_at
-    };
-}
-function summarizeToolUsage(toolEvents, assistantContent) {
-    const byId = new Map();
-    const assistantTerms = normalizeText(assistantContent);
-    for (const ev of toolEvents){
-        if (!ev.name) continue;
-        const key = ev.id || `${ev.phase}:${ev.name}`;
-        const existing = byId.get(key) ?? {
-            name: ev.name,
-            successful: false,
-            used: false
-        };
-        if (ev.phase === "call") {
-            existing.name = ev.name;
-        } else if (ev.phase === "result") {
-            const successful = !isErrorPayload(ev.payload);
-            existing.successful = successful;
-            existing.used = successful && payloadLooksUsed(ev.payload, assistantTerms);
-        }
-        byId.set(key, existing);
-    }
-    const totals = new Map();
-    for (const ev of toolEvents){
-        if (ev.phase !== "call" || !ev.name) continue;
-        const key = ev.id || `${ev.phase}:${ev.name}`;
-        const outcome = byId.get(key);
-        const next = totals.get(ev.name) ?? {
-            name: ev.name,
-            calls: 0,
-            successes: 0,
-            errors: 0,
-            used: 0
-        };
-        next.calls += 1;
-        if (outcome?.successful) next.successes += 1;
-        else next.errors += 1;
-        if (outcome?.used) next.used += 1;
-        totals.set(ev.name, next);
-    }
-    return [
-        ...totals.values()
-    ];
-}
-function payloadLooksUsed(payload, assistantTerms) {
-    if (assistantTerms.size === 0) return false;
-    const candidates = extractPayloadTerms(payload);
-    if (candidates.length === 0) return false;
-    let matched = 0;
-    for (const term of candidates){
-        if (assistantTerms.has(term)) matched += 1;
-        if (matched >= 2) return true;
-    }
-    return false;
-}
-function extractPayloadTerms(payload) {
-    const raw = stringifyPayload(payload);
-    if (!raw) return [];
-    const unique = new Set();
-    for (const token of raw.toLowerCase().split(/[^a-z0-9_./:-]+/)){
-        if (token.length < 4) continue;
-        if (/^\d+$/.test(token) && token.length < 6) continue;
-        unique.add(token);
-        if (unique.size >= 24) break;
-    }
-    return [
-        ...unique
-    ];
-}
-function stringifyPayload(payload) {
-    if (typeof payload === "string") return payload;
-    try {
-        return JSON.stringify(payload);
-    } catch  {
-        return "";
-    }
-}
-function normalizeText(text) {
-    const out = new Set();
-    for (const token of text.toLowerCase().split(/[^a-z0-9_./:-]+/)){
-        if (token.length < 4) continue;
-        out.add(token);
-    }
-    return out;
-}
-function isErrorPayload(payload) {
-    if (typeof payload === "string") return /\berror\b|\bfailed\b|\bexception\b/i.test(payload);
-    if (!payload || typeof payload !== "object") return false;
-    if ("error" in payload || "errors" in payload) return true;
-    const status = "status" in payload ? payload.status : undefined;
-    if (typeof status === "string" && /error|failed/i.test(status)) return true;
-    return false;
-}
-function clamp01(value) {
-    return Math.max(0, Math.min(1, value));
-}
-
-
-/***/ }),
-
-/***/ 52907:
-/***/ ((__unused_webpack_module, __webpack_exports__, __webpack_require__) => {
-
-/* harmony export */ __webpack_require__.d(__webpack_exports__, {
-/* harmony export */   LK: () => (/* binding */ writeBinaryFile),
-/* harmony export */   Uc: () => (/* binding */ fileAbsPath)
-/* harmony export */ });
-/* unused harmony exports FILES_DIR, isSafeFileName */
-/* harmony import */ var node_fs__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(73024);
-/* harmony import */ var node_fs__WEBPACK_IMPORTED_MODULE_0___default = /*#__PURE__*/__webpack_require__.n(node_fs__WEBPACK_IMPORTED_MODULE_0__);
-/* harmony import */ var node_path__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(76760);
-/* harmony import */ var node_path__WEBPACK_IMPORTED_MODULE_1___default = /*#__PURE__*/__webpack_require__.n(node_path__WEBPACK_IMPORTED_MODULE_1__);
-/* harmony import */ var _lib_db_data_dir__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(57477);
-// Local file store for binary artifacts produced by tools (generated images,
-// downloads, etc.). Files live under ~/.jarela/files/ and are served by
-// GET /api/v1/files/[name]. The tool returns a relative URL the chat
-// renderer can embed as <img src="/api/v1/files/...">.
-
-
-
-const FILES_DIR = (0,node_path__WEBPACK_IMPORTED_MODULE_1__.join)((0,_lib_db_data_dir__WEBPACK_IMPORTED_MODULE_2__/* .getDataDir */ .o)(), "files");
-(0,node_fs__WEBPACK_IMPORTED_MODULE_0__.mkdirSync)(FILES_DIR, {
-    recursive: true
-});
-// Name must be a single path segment with no separators or "..". Callers
-// generate names from randomUUID() so this is mostly defense-in-depth.
-const SAFE_NAME = /^[A-Za-z0-9._-]+$/;
-function isSafeFileName(name) {
-    return SAFE_NAME.test(name) && !name.includes("..");
-}
-function fileAbsPath(name) {
-    if (!isSafeFileName(name)) return null;
-    return (0,node_path__WEBPACK_IMPORTED_MODULE_1__.join)(FILES_DIR, name);
-}
-function writeBinaryFile(name, data) {
-    if (!isSafeFileName(name)) throw new Error(`unsafe file name: ${name}`);
-    const p = (0,node_path__WEBPACK_IMPORTED_MODULE_1__.join)(FILES_DIR, name);
-    (0,node_fs__WEBPACK_IMPORTED_MODULE_0__.writeFileSync)(p, data);
-    return p;
-}
-
-
-/***/ }),
-
-/***/ 56718:
-/***/ ((__unused_webpack_module, __webpack_exports__, __webpack_require__) => {
-
-/* harmony export */ __webpack_require__.d(__webpack_exports__, {
-/* harmony export */   HP: () => (/* binding */ disabledCategories),
-/* harmony export */   MD: () => (/* binding */ setCategoryEnabled)
-/* harmony export */ });
-/* unused harmony exports isCategoryEnabled, listCategoryStates */
-/* harmony import */ var _lib_db__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(46);
-// Built-in tool category toggles.
-//
-// A category is "enabled" unless an explicit row in `builtin_tool_categories`
-// says otherwise. Default-enabled semantics mean upgrading installs keep
-// every category working with zero migration work.
-//
-// Disabled categories are filtered at three layers:
-//   - GET /api/v1/tools (so the agent editor never offers them as permissions)
-//   - getAllTools / getAllToolsAsync (so the agent runtime can't see them)
-//   - executeTool (defense in depth, blocks stale agent configs)
-
-const now = ()=>new Date().toISOString();
-function isCategoryEnabled(category) {
-    const row = getDb().prepare("SELECT enabled FROM builtin_tool_categories WHERE category=?").get(category);
-    return row ? row.enabled === 1 : true;
-}
-function disabledCategories() {
-    const rows = (0,_lib_db__WEBPACK_IMPORTED_MODULE_0__/* .getDb */ .Lf)().prepare("SELECT category FROM builtin_tool_categories WHERE enabled=0").all();
-    return new Set(rows.map((r)=>r.category));
-}
-function listCategoryStates() {
-    const rows = getDb().prepare("SELECT category, enabled, updated_at FROM builtin_tool_categories").all();
-    return rows.map((r)=>({
-            category: r.category,
-            enabled: r.enabled === 1,
-            updated_at: r.updated_at
-        }));
-}
-function setCategoryEnabled(category, enabled) {
-    (0,_lib_db__WEBPACK_IMPORTED_MODULE_0__/* .getDb */ .Lf)().prepare(`INSERT INTO builtin_tool_categories (category, enabled, updated_at)
-       VALUES (?, ?, ?)
-       ON CONFLICT(category) DO UPDATE SET enabled=excluded.enabled, updated_at=excluded.updated_at`).run(category, enabled ? 1 : 0, now());
-}
-
-
-/***/ }),
-
-/***/ 64011:
-/***/ ((__unused_webpack_module, __webpack_exports__, __webpack_require__) => {
-
-
-// EXPORTS
-__webpack_require__.d(__webpack_exports__, {
-  Wi: () => (/* binding */ BUILTIN_TOOL_NAMES),
-  n0: () => (/* binding */ getAllToolsAsync),
-  Dk: () => (/* binding */ getToolCapability),
-  $Z: () => (/* binding */ getToolCategory),
-  y: () => (/* binding */ getToolGroup),
-  s7: () => (/* binding */ getToolSource)
-});
-
-// UNUSED EXPORTS: executeTool, getAllTools, getToolsDir, initTools, registerTools, toOpenAITools
-
-// EXTERNAL MODULE: ./node_modules/@langchain/core/dist/utils/function_calling.js
-var function_calling = __webpack_require__(46329);
-// EXTERNAL MODULE: ./node_modules/@langchain/core/dist/tools/index.js
-var tools = __webpack_require__(71890);
-// EXTERNAL MODULE: ./node_modules/zod/v4/classic/schemas.js + 3 modules
-var schemas = __webpack_require__(49883);
-// EXTERNAL MODULE: ./lib/stores/memory.ts
-var memory = __webpack_require__(80956);
-// EXTERNAL MODULE: ./lib/tools/registry.ts + 1 modules
-var registry = __webpack_require__(18995);
-;// ./lib/tools/memory.ts
+// EXTERNAL MODULE: ./node_modules/@langchain/core/dist/utils/function_calling.js
+var function_calling = __webpack_require__(46329);
+// EXTERNAL MODULE: ./node_modules/@langchain/core/dist/tools/index.js
+var tools = __webpack_require__(71890);
+// EXTERNAL MODULE: ./node_modules/zod/v4/classic/schemas.js + 3 modules
+var schemas = __webpack_require__(49883);
+// EXTERNAL MODULE: ./lib/stores/memory.ts
+var memory = __webpack_require__(80956);
+// EXTERNAL MODULE: ./lib/tools/registry.ts + 1 modules
+var registry = __webpack_require__(18995);
+;// ./lib/tools/memory.ts
 
 
 
@@ -9831,371 +9378,672 @@ const proposeConfigChangeTool = (0,tools/* tool */.z6)(async ({ kind, payload, r
         ts: Date.now()
     });
     return JSON.stringify({
-        proposal_id: row.id,
-        status: "pending",
-        message: "Proposal queued for the user's approval. Tell the user briefly what you proposed and that " + "they need to approve it in the chat. Do not retry; check status later with check_proposal."
+        proposal_id: row.id,
+        status: "pending",
+        message: "Proposal queued for the user's approval. Tell the user briefly what you proposed and that " + "they need to approve it in the chat. Do not retry; check status later with check_proposal."
+    });
+}, {
+    name: "propose_config_change",
+    description: "Propose a configuration change that requires user approval. Use this when you'd benefit from " + "installing/toggling an MCP server, or modifying agent settings (tool allowlist, identity, instructions, history window). " + "The proposal is queued and shown to the user; they explicitly approve or deny. " + "Don't propose changes the user didn't ask for — only when the current task clearly needs it.",
+    schema: schemas/* object */.Ik({
+        kind: schemas/* enum */.k5([
+            "install_mcp",
+            "toggle_mcp",
+            "update_agent_tools",
+            "update_agent",
+            "start_oauth",
+            "set_provider_key",
+            "enable_integration",
+            "upsert_harness"
+        ]).describe("Type of change being proposed"),
+        payload: schemas/* record */.g1(schemas/* string */.Yj(), schemas/* unknown */.L5()).describe("Parameters for the change. NEVER put secrets, API keys, OAuth tokens, " + "or passwords in this object — those are collected by the approval UI " + "directly. Examples by kind:\n" + "- install_mcp: { registry_id: 'github', variables: { GITHUB_TOKEN: 'asks-user-for-it' } } " + "  OR { name, transport, spec }\n" + "- toggle_mcp: { name: 'github', enabled: true }\n" + "- update_agent_tools: { agent_id: '<this-agent>', tools: ['web_search', 'memory_*'] }\n" + "- update_agent: { agent_id, identity?, instructions?, history_limit?, history_window_hours?, harness_id? } " + "  — harness_id accepts an existing harness id ('builtin:default' or 'custom:<uuid>'), or null to inherit the global default\n" + "- start_oauth: { integration_id: 'gmail' } — only after enable_integration saved client_id/secret\n" + "- set_provider_key: { name: 'anthropic-default', provider: 'anthropic', model_id: 'claude-opus-4-7', is_default?: true } " + "  — the user pastes the API key into the approval modal; do NOT include it here\n" + "- enable_integration: { id: 'gmail' } — the user fills credentials in the approval modal\n" + "- upsert_harness: { id?: 'custom:<uuid>', name, description?, sections: { capabilities?: {enabled,body}, plan_first?: {enabled,body}, presentation?: {enabled,body}, citation?: {enabled,body}, self_config?: {enabled,body} } } " + "  — omit `id` to create; pass an existing custom:* id to edit. Built-in harnesses ('builtin:*') are read-only and rejected."),
+        reason: schemas/* string */.Yj().describe("Short human-readable reason shown to the user (≤100 chars)")
+    })
+});
+const checkProposalTool = (0,tools/* tool */.z6)(async ({ proposal_id })=>{
+    const row = (0,pending_actions/* getPendingAction */.wv)(proposal_id);
+    if (!row) return JSON.stringify({
+        error: `proposal ${proposal_id} not found`
+    });
+    return JSON.stringify({
+        id: row.id,
+        kind: row.kind,
+        status: row.status,
+        result: row.result ? propose_safeParse(row.result) : null,
+        created_at: row.created_at,
+        decided_at: row.decided_at
+    });
+}, {
+    name: "check_proposal",
+    description: "Check the status of a previously-submitted config-change proposal by its id.",
+    schema: schemas/* object */.Ik({
+        proposal_id: schemas/* string */.Yj()
+    })
+});
+function propose_safeParse(s) {
+    try {
+        return JSON.parse(s);
+    } catch  {
+        return s;
+    }
+}
+(0,registry/* registerTools */.Fd)("Config", "read", [
+    checkProposalTool
+]);
+(0,registry/* registerTools */.Fd)("Config", "write", [
+    proposeConfigChangeTool
+]);
+
+// EXTERNAL MODULE: ./lib/integrations/registry.ts + 6 modules
+var integrations_registry = __webpack_require__(91384);
+// EXTERNAL MODULE: ./lib/stores/integrations.ts
+var integrations = __webpack_require__(78228);
+;// ./lib/tools/integrations.ts
+// Read-only tools that expose integration manifests to the agent. See
+// ADR-0010 — these power the "user asks how to connect X → agent narrates
+// the steps and proposes actions" loop without giving the agent any new
+// privileges.
+
+
+
+
+
+function manifestStatus(id) {
+    if (!(0,integrations/* isKnownIntegration */.GV)(id)) return "no_credentials_schema";
+    return (0,integrations/* getIntegrationStatus */.v9)(id)?.configured ? "configured" : "not_configured";
+}
+const listIntegrationsTool = (0,tools/* tool */.z6)(async ()=>{
+    const summary = (0,integrations_registry/* listManifests */.po)().map((m)=>({
+            id: m.id,
+            name: m.name,
+            category: m.category,
+            summary: m.summary,
+            status: manifestStatus(m.id)
+        }));
+    return JSON.stringify({
+        integrations: summary
+    });
+}, {
+    name: "list_integrations",
+    description: "List every integration Jarela knows how to set up, with a one-line summary and " + "current configuration status. Read-only. Use this when the user asks 'what can I connect?' " + "or before proposing enable_integration, so you know what's available and whether it's " + "already configured.",
+    schema: schemas/* object */.Ik({})
+});
+const getIntegrationSetupTool = (0,tools/* tool */.z6)(async ({ id })=>{
+    const manifest = (0,integrations_registry/* getManifest */.c2)(id);
+    if (!manifest) {
+        return JSON.stringify({
+            error: `unknown integration "${id}". Call list_integrations to see available ids.`
+        });
+    }
+    return JSON.stringify({
+        id: manifest.id,
+        name: manifest.name,
+        summary: manifest.summary,
+        category: manifest.category,
+        status: manifestStatus(manifest.id),
+        prerequisites: manifest.prerequisites,
+        steps: manifest.steps,
+        troubleshooting: manifest.troubleshooting,
+        notes: [
+            "Walk the user through `prerequisites` first; some require browser actions outside Jarela.",
+            "For each step that has a `proposes` field, call propose_config_change with that kind when ready.",
+            "When a step has a `verify.tool`, call that tool after applying the step to confirm success."
+        ]
+    });
+}, {
+    name: "get_integration_setup",
+    description: "Return the full setup manifest for one integration — prerequisites, ordered steps, and " + "troubleshooting hints. Read-only. Use this before walking the user through a setup, or " + "when a tool fails and you need the integration-specific recovery hint.",
+    schema: schemas/* object */.Ik({
+        id: schemas/* string */.Yj().describe("Integration id from list_integrations (e.g. 'gmail', 'atlassian')")
+    })
+});
+(0,registry/* registerTools */.Fd)("Config", "read", [
+    listIntegrationsTool,
+    getIntegrationSetupTool
+]);
+
+// EXTERNAL MODULE: ./lib/tools/atlassian.ts
+var atlassian = __webpack_require__(65856);
+// EXTERNAL MODULE: ./lib/tools/jira-align.ts
+var jira_align = __webpack_require__(55738);
+// EXTERNAL MODULE: ./lib/tools/github.ts
+var github = __webpack_require__(70729);
+// EXTERNAL MODULE: ./lib/tools/gmail.ts
+var gmail = __webpack_require__(77414);
+// EXTERNAL MODULE: ./lib/integrations/gmail-oauth.ts
+var gmail_oauth = __webpack_require__(87246);
+;// ./lib/tools/calendar.ts
+/**
+ * Native Google Calendar tools — direct REST calls to
+ * calendar.googleapis.com, sharing the Gmail OAuth client (one Google
+ * account, one refresh token, one access-token cache; see
+ * lib/integrations/gmail-oauth.ts).
+ *
+ * Scope-wise this surface is **events on existing calendars**:
+ *   - list / get / create / update / delete events
+ *   - list the user's calendars (read-only)
+ * There is deliberately no calendar-list create/delete and no ACL
+ * editing. To enable a wider surface, add the broader scope to
+ * GMAIL_SCOPES and (force users to) reconnect.
+ *
+ * v1 design notes:
+ *   - calendarId defaults to "primary" everywhere so the agent can
+ *     create a quick event without first calling list_calendars.
+ *   - All datetimes are RFC3339 strings (e.g. "2026-05-19T16:00:00-07:00").
+ *     When the caller omits a timezone offset, Google falls back to the
+ *     calendar's default TZ. The tools surface a `time_zone` field that
+ *     forwards an IANA name in case the caller wants to be explicit.
+ *   - `calendar_create_event` can provision a Google Meet link via the
+ *     conferenceData createRequest dance — gated behind `add_meet_link`
+ *     so unused calls don't trip Google's quota.
+ */ 
+
+
+
+const CALENDAR_BASE = "https://www.googleapis.com/calendar/v3";
+const calendarFetch = (auth, path, init)=>(0,gmail_oauth/* googleFetch */.sI)(auth, "Calendar", CALENDAR_BASE, path, init);
+// Slim down a full event to the fields the agent actually needs in a
+// thread response. Keeps tool outputs small enough not to blow context.
+function slimEvent(e) {
+    return {
+        id: e.id,
+        status: e.status,
+        summary: e.summary ?? null,
+        description: e.description ?? null,
+        location: e.location ?? null,
+        start: e.start?.dateTime ?? e.start?.date ?? null,
+        end: e.end?.dateTime ?? e.end?.date ?? null,
+        time_zone: e.start?.timeZone ?? e.end?.timeZone ?? null,
+        attendees: (e.attendees ?? []).map((a)=>({
+                email: a.email,
+                name: a.displayName ?? null,
+                response: a.responseStatus ?? null
+            })),
+        meet_link: e.hangoutLink ?? null,
+        html_link: e.htmlLink ?? null
+    };
+}
+// ── Tools ───────────────────────────────────────────────────────────────────
+const calendarListCalendarsTool = (0,tools/* tool */.z6)(async ()=>{
+    const auth = (0,gmail_oauth/* resolveGoogleAuth */.wq)();
+    if ("error" in auth) return JSON.stringify({
+        error: auth.error
+    });
+    const data = await calendarFetch(auth, "/users/me/calendarList");
+    if ("error" in data && data.error) return JSON.stringify(data);
+    return JSON.stringify({
+        calendars: (data.items ?? []).map((c)=>({
+                id: c.id,
+                summary: c.summary ?? null,
+                primary: c.primary === true,
+                time_zone: c.timeZone ?? null,
+                access_role: c.accessRole ?? null
+            }))
+    });
+}, {
+    name: "calendar_list_calendars",
+    description: "List the user's Google calendars (primary + any they've subscribed to). " + "Returns id, summary, primary flag, time zone, access role per entry. The " + "`id` is what other calendar_* tools expect as `calendar_id`. Use this when " + "the user mentions a non-primary calendar by name (e.g. 'put it on my Work " + "calendar') — match against `summary` to find the right id.",
+    schema: schemas/* object */.Ik({})
+});
+const calendarListEventsTool = (0,tools/* tool */.z6)(async ({ calendar_id, time_min, time_max, query, max_results })=>{
+    const auth = (0,gmail_oauth/* resolveGoogleAuth */.wq)();
+    if ("error" in auth) return JSON.stringify({
+        error: auth.error
+    });
+    const cal = encodeURIComponent(calendar_id ?? "primary");
+    const params = new URLSearchParams({
+        singleEvents: "true",
+        orderBy: "startTime",
+        maxResults: String(Math.min(Math.max(max_results ?? 25, 1), 100))
+    });
+    // Default window: now → +7 days. Keeps "what's on my schedule" cheap.
+    const now = new Date();
+    const inAWeek = new Date(now.getTime() + 7 * 24 * 60 * 60 * 1000);
+    params.set("timeMin", time_min ?? now.toISOString());
+    params.set("timeMax", time_max ?? inAWeek.toISOString());
+    if (query) params.set("q", query);
+    const data = await calendarFetch(auth, `/calendars/${cal}/events?${params.toString()}`);
+    if ("error" in data && data.error) return JSON.stringify(data);
+    return JSON.stringify({
+        events: (data.items ?? []).map(slimEvent)
     });
 }, {
-    name: "propose_config_change",
-    description: "Propose a configuration change that requires user approval. Use this when you'd benefit from " + "installing/toggling an MCP server, or modifying agent settings (tool allowlist, identity, instructions, history window). " + "The proposal is queued and shown to the user; they explicitly approve or deny. " + "Don't propose changes the user didn't ask for — only when the current task clearly needs it.",
+    name: "calendar_list_events",
+    description: "List events on a calendar within a time window. Defaults: primary calendar, " + "now → +7 days, ordered by start, recurring events expanded into single " + "instances. **Use this before creating an event** to avoid double-booking, " + "and to look up existing event ids before updating/deleting. " + "Datetimes are RFC3339 (e.g. '2026-05-19T16:00:00-07:00').",
     schema: schemas/* object */.Ik({
-        kind: schemas/* enum */.k5([
-            "install_mcp",
-            "toggle_mcp",
-            "update_agent_tools",
-            "update_agent",
-            "start_oauth",
-            "set_provider_key",
-            "enable_integration",
-            "upsert_harness"
-        ]).describe("Type of change being proposed"),
-        payload: schemas/* record */.g1(schemas/* string */.Yj(), schemas/* unknown */.L5()).describe("Parameters for the change. NEVER put secrets, API keys, OAuth tokens, " + "or passwords in this object — those are collected by the approval UI " + "directly. Examples by kind:\n" + "- install_mcp: { registry_id: 'github', variables: { GITHUB_TOKEN: 'asks-user-for-it' } } " + "  OR { name, transport, spec }\n" + "- toggle_mcp: { name: 'github', enabled: true }\n" + "- update_agent_tools: { agent_id: '<this-agent>', tools: ['web_search', 'memory_*'] }\n" + "- update_agent: { agent_id, identity?, instructions?, history_limit?, history_window_hours?, harness_id? } " + "  — harness_id accepts an existing harness id ('builtin:default' or 'custom:<uuid>'), or null to inherit the global default\n" + "- start_oauth: { integration_id: 'gmail' } — only after enable_integration saved client_id/secret\n" + "- set_provider_key: { name: 'anthropic-default', provider: 'anthropic', model_id: 'claude-opus-4-7', is_default?: true } " + "  — the user pastes the API key into the approval modal; do NOT include it here\n" + "- enable_integration: { id: 'gmail' } — the user fills credentials in the approval modal\n" + "- upsert_harness: { id?: 'custom:<uuid>', name, description?, sections: { capabilities?: {enabled,body}, plan_first?: {enabled,body}, presentation?: {enabled,body}, citation?: {enabled,body}, self_config?: {enabled,body} } } " + "  — omit `id` to create; pass an existing custom:* id to edit. Built-in harnesses ('builtin:*') are read-only and rejected."),
-        reason: schemas/* string */.Yj().describe("Short human-readable reason shown to the user (≤100 chars)")
+        calendar_id: schemas/* string */.Yj().optional().describe("Calendar id (default: 'primary')"),
+        time_min: schemas/* string */.Yj().optional().describe("RFC3339 lower bound (default: now)"),
+        time_max: schemas/* string */.Yj().optional().describe("RFC3339 upper bound (default: now + 7 days)"),
+        query: schemas/* string */.Yj().optional().describe("Free-text search across event fields"),
+        max_results: schemas/* number */.ai().int().optional().describe("Max events (default 25, max 100)")
     })
 });
-const checkProposalTool = (0,tools/* tool */.z6)(async ({ proposal_id })=>{
-    const row = (0,pending_actions/* getPendingAction */.wv)(proposal_id);
-    if (!row) return JSON.stringify({
-        error: `proposal ${proposal_id} not found`
+const calendarGetEventTool = (0,tools/* tool */.z6)(async ({ calendar_id, event_id })=>{
+    const auth = (0,gmail_oauth/* resolveGoogleAuth */.wq)();
+    if ("error" in auth) return JSON.stringify({
+        error: auth.error
     });
-    return JSON.stringify({
-        id: row.id,
-        kind: row.kind,
-        status: row.status,
-        result: row.result ? propose_safeParse(row.result) : null,
-        created_at: row.created_at,
-        decided_at: row.decided_at
+    const cal = encodeURIComponent(calendar_id ?? "primary");
+    const eid = encodeURIComponent(event_id);
+    const data = await calendarFetch(auth, `/calendars/${cal}/events/${eid}`);
+    if (data.error) return JSON.stringify({
+        error: data.error
     });
+    return JSON.stringify(slimEvent(data));
 }, {
-    name: "check_proposal",
-    description: "Check the status of a previously-submitted config-change proposal by its id.",
+    name: "calendar_get_event",
+    description: "Fetch one Google Calendar event by id. Returns the same slim shape as " + "calendar_list_events but for a single event.",
     schema: schemas/* object */.Ik({
-        proposal_id: schemas/* string */.Yj()
+        calendar_id: schemas/* string */.Yj().optional().describe("Calendar id (default: 'primary')"),
+        event_id: schemas/* string */.Yj().describe("Event id (from calendar_list_events results)")
     })
 });
-function propose_safeParse(s) {
-    try {
-        return JSON.parse(s);
-    } catch  {
-        return s;
+const calendarCreateEventTool = (0,tools/* tool */.z6)(async ({ calendar_id, summary, subject, start_iso, end_iso, description, location, attendees, time_zone, add_meet_link })=>{
+    const auth = (0,gmail_oauth/* resolveGoogleAuth */.wq)();
+    if ("error" in auth) return JSON.stringify({
+        error: auth.error
+    });
+    const cal = encodeURIComponent(calendar_id ?? "primary");
+    // `subject` is accepted as an alias for `summary` so agents trained on
+    // Outlook vocabulary don't fail the schema on first try.
+    const eventSummary = summary ?? subject;
+    if (!eventSummary) {
+        return JSON.stringify({
+            error: "summary (or subject) is required"
+        });
     }
-}
-(0,registry/* registerTools */.Fd)("Config", "read", [
-    checkProposalTool
-]);
-(0,registry/* registerTools */.Fd)("Config", "write", [
-    proposeConfigChangeTool
-]);
-
-// EXTERNAL MODULE: ./lib/integrations/registry.ts + 6 modules
-var integrations_registry = __webpack_require__(91384);
-// EXTERNAL MODULE: ./lib/stores/integrations.ts
-var integrations = __webpack_require__(78228);
-;// ./lib/tools/integrations.ts
-// Read-only tools that expose integration manifests to the agent. See
-// ADR-0010 — these power the "user asks how to connect X → agent narrates
-// the steps and proposes actions" loop without giving the agent any new
-// privileges.
-
-
-
-
-
-function manifestStatus(id) {
-    if (!(0,integrations/* isKnownIntegration */.GV)(id)) return "no_credentials_schema";
-    return (0,integrations/* getIntegrationStatus */.v9)(id)?.configured ? "configured" : "not_configured";
-}
-const listIntegrationsTool = (0,tools/* tool */.z6)(async ()=>{
-    const summary = (0,integrations_registry/* listManifests */.po)().map((m)=>({
-            id: m.id,
-            name: m.name,
-            category: m.category,
-            summary: m.summary,
-            status: manifestStatus(m.id)
-        }));
-    return JSON.stringify({
-        integrations: summary
+    const body = {
+        summary: eventSummary,
+        start: {
+            dateTime: start_iso,
+            ...time_zone ? {
+                timeZone: time_zone
+            } : {}
+        },
+        end: {
+            dateTime: end_iso,
+            ...time_zone ? {
+                timeZone: time_zone
+            } : {}
+        }
+    };
+    if (description) body.description = description;
+    if (location) body.location = location;
+    if (attendees && attendees.length > 0) {
+        body.attendees = attendees.map((email)=>({
+                email
+            }));
+    }
+    if (add_meet_link) {
+        body.conferenceData = {
+            createRequest: {
+                // requestId must be unique per createRequest; Google echoes it back.
+                requestId: `jarela-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`,
+                conferenceSolutionKey: {
+                    type: "hangoutsMeet"
+                }
+            }
+        };
+    }
+    // conferenceDataVersion=1 is required for Google to honor the
+    // createRequest and provision a Meet URL. Harmless to set without it.
+    const params = add_meet_link ? "?conferenceDataVersion=1" : "";
+    const data = await calendarFetch(auth, `/calendars/${cal}/events${params}`, {
+        method: "POST",
+        body: JSON.stringify(body)
+    });
+    if (data.error) return JSON.stringify({
+        error: data.error
     });
+    return JSON.stringify(slimEvent(data));
 }, {
-    name: "list_integrations",
-    description: "List every integration Jarela knows how to set up, with a one-line summary and " + "current configuration status. Read-only. Use this when the user asks 'what can I connect?' " + "or before proposing enable_integration, so you know what's available and whether it's " + "already configured.",
-    schema: schemas/* object */.Ik({})
+    name: "calendar_create_event",
+    description: "Create a Google Calendar event on a calendar (default: 'primary'). " + "Datetimes are RFC3339 strings — include a timezone offset (e.g. " + "'2026-05-19T16:00:00-07:00') or set `time_zone` to an IANA name (e.g. " + "'America/Los_Angeles') so the user's calendar interprets the time " + "correctly. Attendees are emailed an invite automatically. Set " + "`add_meet_link: true` to provision a Google Meet URL on the event.",
+    schema: schemas/* object */.Ik({
+        calendar_id: schemas/* string */.Yj().optional().describe("Calendar id (default: 'primary')"),
+        summary: schemas/* string */.Yj().min(1).optional().describe("Event title shown on the calendar (alias: subject)"),
+        subject: schemas/* string */.Yj().min(1).optional().describe("Alias for summary (Outlook vocabulary)"),
+        start_iso: schemas/* string */.Yj().describe("Start datetime, RFC3339"),
+        end_iso: schemas/* string */.Yj().describe("End datetime, RFC3339 (must be after start)"),
+        description: schemas/* string */.Yj().optional().describe("Long-form event body (markdown not rendered)"),
+        location: schemas/* string */.Yj().optional().describe("Free-text location string"),
+        attendees: schemas/* array */.YO(schemas/* string */.Yj().email()).optional().describe("Invitee email addresses"),
+        time_zone: schemas/* string */.Yj().optional().describe("IANA timezone, e.g. 'America/Los_Angeles'"),
+        add_meet_link: schemas/* boolean */.zM().optional().describe("Provision a Google Meet URL on this event")
+    })
 });
-const getIntegrationSetupTool = (0,tools/* tool */.z6)(async ({ id })=>{
-    const manifest = (0,integrations_registry/* getManifest */.c2)(id);
-    if (!manifest) {
+const calendarUpdateEventTool = (0,tools/* tool */.z6)(async ({ calendar_id, event_id, summary, subject, start_iso, end_iso, description, location, attendees, time_zone })=>{
+    const auth = (0,gmail_oauth/* resolveGoogleAuth */.wq)();
+    if ("error" in auth) return JSON.stringify({
+        error: auth.error
+    });
+    const cal = encodeURIComponent(calendar_id ?? "primary");
+    const eid = encodeURIComponent(event_id);
+    const patch = {};
+    const eventSummary = summary ?? subject;
+    if (eventSummary !== undefined) patch.summary = eventSummary;
+    if (description !== undefined) patch.description = description;
+    if (location !== undefined) patch.location = location;
+    if (start_iso !== undefined) {
+        patch.start = {
+            dateTime: start_iso,
+            ...time_zone ? {
+                timeZone: time_zone
+            } : {}
+        };
+    }
+    if (end_iso !== undefined) {
+        patch.end = {
+            dateTime: end_iso,
+            ...time_zone ? {
+                timeZone: time_zone
+            } : {}
+        };
+    }
+    if (attendees !== undefined) {
+        patch.attendees = attendees.map((email)=>({
+                email
+            }));
+    }
+    if (Object.keys(patch).length === 0) {
         return JSON.stringify({
-            error: `unknown integration "${id}". Call list_integrations to see available ids.`
+            error: "Provide at least one field to update"
         });
     }
-    return JSON.stringify({
-        id: manifest.id,
-        name: manifest.name,
-        summary: manifest.summary,
-        category: manifest.category,
-        status: manifestStatus(manifest.id),
-        prerequisites: manifest.prerequisites,
-        steps: manifest.steps,
-        troubleshooting: manifest.troubleshooting,
-        notes: [
-            "Walk the user through `prerequisites` first; some require browser actions outside Jarela.",
-            "For each step that has a `proposes` field, call propose_config_change with that kind when ready.",
-            "When a step has a `verify.tool`, call that tool after applying the step to confirm success."
-        ]
+    const data = await calendarFetch(auth, `/calendars/${cal}/events/${eid}`, {
+        method: "PATCH",
+        body: JSON.stringify(patch)
+    });
+    if (data.error) return JSON.stringify({
+        error: data.error
+    });
+    return JSON.stringify(slimEvent(data));
+}, {
+    name: "calendar_update_event",
+    description: "Patch a Google Calendar event. Only the fields you supply are changed; " + "omit fields to leave them alone. Use this to reschedule (`start_iso`/`end_iso`), " + "rename (`summary`), or adjust the invitee list (`attendees` — note this " + "**replaces** the full list, so include everyone who should remain).",
+    schema: schemas/* object */.Ik({
+        calendar_id: schemas/* string */.Yj().optional().describe("Calendar id (default: 'primary')"),
+        event_id: schemas/* string */.Yj().describe("Event id"),
+        summary: schemas/* string */.Yj().optional().describe("New event title (alias: subject)"),
+        subject: schemas/* string */.Yj().optional().describe("Alias for summary (Outlook vocabulary)"),
+        start_iso: schemas/* string */.Yj().optional().describe("New start datetime, RFC3339"),
+        end_iso: schemas/* string */.Yj().optional().describe("New end datetime, RFC3339"),
+        description: schemas/* string */.Yj().optional().describe("New event body"),
+        location: schemas/* string */.Yj().optional().describe("New location string"),
+        attendees: schemas/* array */.YO(schemas/* string */.Yj().email()).optional().describe("Replacement attendee list"),
+        time_zone: schemas/* string */.Yj().optional().describe("IANA timezone applied to start/end")
+    })
+});
+const calendarDeleteEventTool = (0,tools/* tool */.z6)(async ({ calendar_id, event_id })=>{
+    const auth = (0,gmail_oauth/* resolveGoogleAuth */.wq)();
+    if ("error" in auth) return JSON.stringify({
+        error: auth.error
+    });
+    const cal = encodeURIComponent(calendar_id ?? "primary");
+    const eid = encodeURIComponent(event_id);
+    const data = await calendarFetch(auth, `/calendars/${cal}/events/${eid}`, {
+        method: "DELETE"
+    });
+    if (data.error) return JSON.stringify({
+        error: data.error
+    });
+    return JSON.stringify({
+        ok: true,
+        id: event_id
     });
 }, {
-    name: "get_integration_setup",
-    description: "Return the full setup manifest for one integration — prerequisites, ordered steps, and " + "troubleshooting hints. Read-only. Use this before walking the user through a setup, or " + "when a tool fails and you need the integration-specific recovery hint.",
+    name: "calendar_delete_event",
+    description: "Delete a Google Calendar event by id. Attendees are notified by default. " + "Returns `{ ok: true, id }` on success. Use `calendar_list_events` to find " + "the event id first if you only know the title/time.",
     schema: schemas/* object */.Ik({
-        id: schemas/* string */.Yj().describe("Integration id from list_integrations (e.g. 'gmail', 'atlassian')")
+        calendar_id: schemas/* string */.Yj().optional().describe("Calendar id (default: 'primary')"),
+        event_id: schemas/* string */.Yj().describe("Event id to delete")
     })
 });
-(0,registry/* registerTools */.Fd)("Config", "read", [
-    listIntegrationsTool,
-    getIntegrationSetupTool
+(0,registry/* registerTools */.Fd)("Calendar", "read", [
+    calendarListCalendarsTool,
+    calendarListEventsTool,
+    calendarGetEventTool
+]);
+(0,registry/* registerTools */.Fd)("Calendar", "execute", [
+    calendarCreateEventTool,
+    calendarUpdateEventTool,
+    calendarDeleteEventTool
 ]);
 
-// EXTERNAL MODULE: ./lib/tools/atlassian.ts
-var atlassian = __webpack_require__(65856);
-// EXTERNAL MODULE: ./lib/tools/jira-align.ts
-var jira_align = __webpack_require__(55738);
-// EXTERNAL MODULE: ./lib/tools/github.ts
-var github = __webpack_require__(70729);
-// EXTERNAL MODULE: ./lib/tools/gmail.ts
-var gmail = __webpack_require__(77414);
-// EXTERNAL MODULE: ./lib/integrations/gmail-oauth.ts
-var gmail_oauth = __webpack_require__(87246);
-;// ./lib/tools/calendar.ts
+// EXTERNAL MODULE: ./lib/tools/outlook.ts
+var outlook = __webpack_require__(77467);
+// EXTERNAL MODULE: ./lib/integrations/microsoft-oauth.ts
+var microsoft_oauth = __webpack_require__(89080);
+;// ./lib/tools/outlook-calendar.ts
 /**
- * Native Google Calendar tools — direct REST calls to
- * calendar.googleapis.com, sharing the Gmail OAuth client (one Google
- * account, one refresh token, one access-token cache; see
- * lib/integrations/gmail-oauth.ts).
- *
- * Scope-wise this surface is **events on existing calendars**:
- *   - list / get / create / update / delete events
- *   - list the user's calendars (read-only)
- * There is deliberately no calendar-list create/delete and no ACL
- * editing. To enable a wider surface, add the broader scope to
- * GMAIL_SCOPES and (force users to) reconnect.
+ * Outlook Calendar tools via Microsoft Graph. Mirrors lib/tools/calendar.ts
+ * (the Google Calendar set) one-for-one so the agent's mental model
+ * carries over between providers.
  *
- * v1 design notes:
- *   - calendarId defaults to "primary" everywhere so the agent can
- *     create a quick event without first calling list_calendars.
- *   - All datetimes are RFC3339 strings (e.g. "2026-05-19T16:00:00-07:00").
- *     When the caller omits a timezone offset, Google falls back to the
- *     calendar's default TZ. The tools surface a `time_zone` field that
- *     forwards an IANA name in case the caller wants to be explicit.
- *   - `calendar_create_event` can provision a Google Meet link via the
- *     conferenceData createRequest dance — gated behind `add_meet_link`
- *     so unused calls don't trip Google's quota.
+ * Graph differences vs Google Calendar worth knowing:
+ *   - Each event's start/end is { dateTime, timeZone } where timeZone is
+ *     a Windows-time-zone string by default ("Pacific Standard Time"),
+ *     not IANA. We pass an explicit `Prefer: outlook.timezone="UTC"`
+ *     header so reads come back in UTC and the agent doesn't have to
+ *     navigate two TZ namespaces.
+ *   - Listing events in a window uses /calendarView (auto-expands
+ *     recurring series), parallel to Google's `singleEvents=true`.
+ *   - Online meetings use `isOnlineMeeting:true` +
+ *     `onlineMeetingProvider:"teamsForBusiness"`. Provisioning a Teams
+ *     link is gated behind `add_teams_link` to keep create_event cheap
+ *     when the agent just wants a plain event.
  */ 
 
 
 
-const CALENDAR_BASE = "https://www.googleapis.com/calendar/v3";
-const calendarFetch = (auth, path, init)=>(0,gmail_oauth/* googleFetch */.sI)(auth, "Calendar", CALENDAR_BASE, path, init);
-// Slim down a full event to the fields the agent actually needs in a
-// thread response. Keeps tool outputs small enough not to blow context.
-function slimEvent(e) {
+function outlook_calendar_slimEvent(e) {
     return {
         id: e.id,
-        status: e.status,
-        summary: e.summary ?? null,
-        description: e.description ?? null,
-        location: e.location ?? null,
-        start: e.start?.dateTime ?? e.start?.date ?? null,
-        end: e.end?.dateTime ?? e.end?.date ?? null,
+        subject: e.subject ?? null,
+        description: e.bodyPreview ?? null,
+        location: e.location?.displayName ?? null,
+        start: e.start?.dateTime ?? null,
+        end: e.end?.dateTime ?? null,
         time_zone: e.start?.timeZone ?? e.end?.timeZone ?? null,
         attendees: (e.attendees ?? []).map((a)=>({
-                email: a.email,
-                name: a.displayName ?? null,
-                response: a.responseStatus ?? null
+                email: a.emailAddress?.address ?? null,
+                name: a.emailAddress?.name ?? null,
+                response: a.status?.response ?? null
             })),
-        meet_link: e.hangoutLink ?? null,
-        html_link: e.htmlLink ?? null
+        is_all_day: e.isAllDay === true,
+        is_cancelled: e.isCancelled === true,
+        show_as: e.showAs ?? null,
+        teams_link: e.onlineMeeting?.joinUrl ?? null,
+        web_link: e.webLink ?? null
     };
 }
 // ── Tools ───────────────────────────────────────────────────────────────────
-const calendarListCalendarsTool = (0,tools/* tool */.z6)(async ()=>{
-    const auth = (0,gmail_oauth/* resolveGoogleAuth */.wq)();
+const outlookCalendarListCalendarsTool = (0,tools/* tool */.z6)(async ()=>{
+    const auth = (0,microsoft_oauth/* resolveMicrosoftAuth */.jG)();
     if ("error" in auth) return JSON.stringify({
         error: auth.error
     });
-    const data = await calendarFetch(auth, "/users/me/calendarList");
+    const data = await (0,microsoft_oauth/* graphFetch */.z$)(auth, "/me/calendars");
     if ("error" in data && data.error) return JSON.stringify(data);
     return JSON.stringify({
-        calendars: (data.items ?? []).map((c)=>({
+        calendars: (data.value ?? []).map((c)=>({
                 id: c.id,
-                summary: c.summary ?? null,
-                primary: c.primary === true,
-                time_zone: c.timeZone ?? null,
-                access_role: c.accessRole ?? null
+                name: c.name ?? null,
+                is_default: c.isDefaultCalendar === true,
+                can_edit: c.canEdit === true,
+                owner: c.owner?.address ?? null
             }))
     });
 }, {
-    name: "calendar_list_calendars",
-    description: "List the user's Google calendars (primary + any they've subscribed to). " + "Returns id, summary, primary flag, time zone, access role per entry. The " + "`id` is what other calendar_* tools expect as `calendar_id`. Use this when " + "the user mentions a non-primary calendar by name (e.g. 'put it on my Work " + "calendar') — match against `summary` to find the right id.",
+    name: "outlook_calendar_list_calendars",
+    description: "List the user's Outlook calendars (primary + shared). Returns id, name, " + "is_default flag, edit permission, owner. The `id` is what other " + "outlook_calendar_* tools expect as `calendar_id`. Omit `calendar_id` " + "in those tools to use the user's default calendar.",
     schema: schemas/* object */.Ik({})
 });
-const calendarListEventsTool = (0,tools/* tool */.z6)(async ({ calendar_id, time_min, time_max, query, max_results })=>{
-    const auth = (0,gmail_oauth/* resolveGoogleAuth */.wq)();
+const outlookCalendarListEventsTool = (0,tools/* tool */.z6)(async ({ calendar_id, time_min, time_max, max_results })=>{
+    const auth = (0,microsoft_oauth/* resolveMicrosoftAuth */.jG)();
     if ("error" in auth) return JSON.stringify({
         error: auth.error
     });
-    const cal = encodeURIComponent(calendar_id ?? "primary");
-    const params = new URLSearchParams({
-        singleEvents: "true",
-        orderBy: "startTime",
-        maxResults: String(Math.min(Math.max(max_results ?? 25, 1), 100))
-    });
-    // Default window: now → +7 days. Keeps "what's on my schedule" cheap.
     const now = new Date();
     const inAWeek = new Date(now.getTime() + 7 * 24 * 60 * 60 * 1000);
-    params.set("timeMin", time_min ?? now.toISOString());
-    params.set("timeMax", time_max ?? inAWeek.toISOString());
-    if (query) params.set("q", query);
-    const data = await calendarFetch(auth, `/calendars/${cal}/events?${params.toString()}`);
+    const startISO = time_min ?? now.toISOString();
+    const endISO = time_max ?? inAWeek.toISOString();
+    const top = Math.min(Math.max(max_results ?? 25, 1), 100);
+    // /calendarView expands recurring series into individual instances —
+    // the closest parallel to Google's singleEvents=true.
+    const base = calendar_id ? `/me/calendars/${encodeURIComponent(calendar_id)}/calendarView` : "/me/calendarView";
+    const params = new URLSearchParams({
+        startDateTime: startISO,
+        endDateTime: endISO,
+        $top: String(top),
+        $orderby: "start/dateTime"
+    });
+    const data = await (0,microsoft_oauth/* graphFetch */.z$)(auth, `${base}?${params.toString()}`, {
+        // Force UTC in responses so the agent doesn't juggle Windows-TZ names.
+        headers: {
+            Prefer: 'outlook.timezone="UTC"'
+        }
+    });
     if ("error" in data && data.error) return JSON.stringify(data);
     return JSON.stringify({
-        events: (data.items ?? []).map(slimEvent)
+        events: (data.value ?? []).map(outlook_calendar_slimEvent)
     });
 }, {
-    name: "calendar_list_events",
-    description: "List events on a calendar within a time window. Defaults: primary calendar, " + "now → +7 days, ordered by start, recurring events expanded into single " + "instances. **Use this before creating an event** to avoid double-booking, " + "and to look up existing event ids before updating/deleting. " + "Datetimes are RFC3339 (e.g. '2026-05-19T16:00:00-07:00').",
+    name: "outlook_calendar_list_events",
+    description: "List Outlook calendar events within a time window. Defaults: default " + "calendar, now → +7 days, ordered by start, recurring series expanded. " + "**Use this before creating an event** to avoid double-booking, and to " + "look up event ids before updating/deleting. All datetimes returned in " + "UTC (RFC3339 'Z'-suffixed).",
     schema: schemas/* object */.Ik({
-        calendar_id: schemas/* string */.Yj().optional().describe("Calendar id (default: 'primary')"),
+        calendar_id: schemas/* string */.Yj().optional().describe("Calendar id (default: user's default calendar)"),
         time_min: schemas/* string */.Yj().optional().describe("RFC3339 lower bound (default: now)"),
         time_max: schemas/* string */.Yj().optional().describe("RFC3339 upper bound (default: now + 7 days)"),
-        query: schemas/* string */.Yj().optional().describe("Free-text search across event fields"),
         max_results: schemas/* number */.ai().int().optional().describe("Max events (default 25, max 100)")
     })
 });
-const calendarGetEventTool = (0,tools/* tool */.z6)(async ({ calendar_id, event_id })=>{
-    const auth = (0,gmail_oauth/* resolveGoogleAuth */.wq)();
+const outlookCalendarGetEventTool = (0,tools/* tool */.z6)(async ({ event_id })=>{
+    const auth = (0,microsoft_oauth/* resolveMicrosoftAuth */.jG)();
     if ("error" in auth) return JSON.stringify({
         error: auth.error
     });
-    const cal = encodeURIComponent(calendar_id ?? "primary");
-    const eid = encodeURIComponent(event_id);
-    const data = await calendarFetch(auth, `/calendars/${cal}/events/${eid}`);
-    if (data.error) return JSON.stringify({
-        error: data.error
+    const e = await (0,microsoft_oauth/* graphFetch */.z$)(auth, `/me/events/${encodeURIComponent(event_id)}`, {
+        headers: {
+            Prefer: 'outlook.timezone="UTC"'
+        }
     });
-    return JSON.stringify(slimEvent(data));
+    if (e.error) return JSON.stringify({
+        error: e.error
+    });
+    return JSON.stringify(outlook_calendar_slimEvent(e));
 }, {
-    name: "calendar_get_event",
-    description: "Fetch one Google Calendar event by id. Returns the same slim shape as " + "calendar_list_events but for a single event.",
+    name: "outlook_calendar_get_event",
+    description: "Fetch one Outlook calendar event by id. Returns the same slim shape as " + "outlook_calendar_list_events but for a single event.",
     schema: schemas/* object */.Ik({
-        calendar_id: schemas/* string */.Yj().optional().describe("Calendar id (default: 'primary')"),
-        event_id: schemas/* string */.Yj().describe("Event id (from calendar_list_events results)")
+        event_id: schemas/* string */.Yj().describe("Event id (from outlook_calendar_list_events)")
     })
 });
-const calendarCreateEventTool = (0,tools/* tool */.z6)(async ({ calendar_id, summary, subject, start_iso, end_iso, description, location, attendees, time_zone, add_meet_link })=>{
-    const auth = (0,gmail_oauth/* resolveGoogleAuth */.wq)();
+const outlookCalendarCreateEventTool = (0,tools/* tool */.z6)(async ({ calendar_id, subject, summary, start_iso, end_iso, description, location, attendees, time_zone, add_teams_link })=>{
+    const auth = (0,microsoft_oauth/* resolveMicrosoftAuth */.jG)();
     if ("error" in auth) return JSON.stringify({
         error: auth.error
     });
-    const cal = encodeURIComponent(calendar_id ?? "primary");
-    // `subject` is accepted as an alias for `summary` so agents trained on
-    // Outlook vocabulary don't fail the schema on first try.
-    const eventSummary = summary ?? subject;
-    if (!eventSummary) {
+    // `summary` is accepted as an alias for `subject` so agents trained on
+    // Google Calendar's vocabulary don't fail the schema on first try.
+    const eventSubject = subject ?? summary;
+    if (!eventSubject) {
         return JSON.stringify({
-            error: "summary (or subject) is required"
+            error: "subject (or summary) is required"
         });
     }
+    // Graph uses Windows TZ names by default but also accepts IANA names
+    // when the body specifies them per-field. Default to UTC if the
+    // caller omits time_zone (matches the list endpoint's behavior).
+    const tz = time_zone ?? "UTC";
     const body = {
-        summary: eventSummary,
+        subject: eventSubject,
         start: {
             dateTime: start_iso,
-            ...time_zone ? {
-                timeZone: time_zone
-            } : {}
+            timeZone: tz
         },
         end: {
             dateTime: end_iso,
-            ...time_zone ? {
-                timeZone: time_zone
-            } : {}
+            timeZone: tz
         }
     };
-    if (description) body.description = description;
-    if (location) body.location = location;
+    if (description) body.body = {
+        contentType: "text",
+        content: description
+    };
+    if (location) body.location = {
+        displayName: location
+    };
     if (attendees && attendees.length > 0) {
-        body.attendees = attendees.map((email)=>({
-                email
+        body.attendees = attendees.map((address)=>({
+                emailAddress: {
+                    address
+                },
+                type: "required"
             }));
     }
-    if (add_meet_link) {
-        body.conferenceData = {
-            createRequest: {
-                // requestId must be unique per createRequest; Google echoes it back.
-                requestId: `jarela-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`,
-                conferenceSolutionKey: {
-                    type: "hangoutsMeet"
-                }
-            }
-        };
+    if (add_teams_link) {
+        body.isOnlineMeeting = true;
+        body.onlineMeetingProvider = "teamsForBusiness";
     }
-    // conferenceDataVersion=1 is required for Google to honor the
-    // createRequest and provision a Meet URL. Harmless to set without it.
-    const params = add_meet_link ? "?conferenceDataVersion=1" : "";
-    const data = await calendarFetch(auth, `/calendars/${cal}/events${params}`, {
+    const path = calendar_id ? `/me/calendars/${encodeURIComponent(calendar_id)}/events` : "/me/events";
+    const r = await (0,microsoft_oauth/* graphFetch */.z$)(auth, path, {
         method: "POST",
-        body: JSON.stringify(body)
+        body: JSON.stringify(body),
+        headers: {
+            Prefer: 'outlook.timezone="UTC"'
+        }
     });
-    if (data.error) return JSON.stringify({
-        error: data.error
+    if (r.error) return JSON.stringify({
+        error: r.error
     });
-    return JSON.stringify(slimEvent(data));
+    return JSON.stringify(outlook_calendar_slimEvent(r));
 }, {
-    name: "calendar_create_event",
-    description: "Create a Google Calendar event on a calendar (default: 'primary'). " + "Datetimes are RFC3339 strings — include a timezone offset (e.g. " + "'2026-05-19T16:00:00-07:00') or set `time_zone` to an IANA name (e.g. " + "'America/Los_Angeles') so the user's calendar interprets the time " + "correctly. Attendees are emailed an invite automatically. Set " + "`add_meet_link: true` to provision a Google Meet URL on the event.",
+    name: "outlook_calendar_create_event",
+    description: "Create an Outlook calendar event. Datetimes are RFC3339 strings; pair " + "with `time_zone` (IANA like 'America/Los_Angeles' or Windows TZ like " + "'Pacific Standard Time') so Outlook interprets them correctly. Defaults " + "to UTC if omitted. Attendees are automatically sent invites. Set " + "`add_teams_link: true` to provision a Teams meeting URL (requires a " + "work/school M365 account; personal Microsoft accounts cannot create " + "Teams meetings via Graph).",
     schema: schemas/* object */.Ik({
-        calendar_id: schemas/* string */.Yj().optional().describe("Calendar id (default: 'primary')"),
-        summary: schemas/* string */.Yj().min(1).optional().describe("Event title shown on the calendar (alias: subject)"),
-        subject: schemas/* string */.Yj().min(1).optional().describe("Alias for summary (Outlook vocabulary)"),
+        calendar_id: schemas/* string */.Yj().optional().describe("Calendar id (default: user's default calendar)"),
+        subject: schemas/* string */.Yj().min(1).optional().describe("Event title shown on the calendar (alias: summary)"),
+        summary: schemas/* string */.Yj().min(1).optional().describe("Alias for subject (Google Calendar vocabulary)"),
         start_iso: schemas/* string */.Yj().describe("Start datetime, RFC3339"),
         end_iso: schemas/* string */.Yj().describe("End datetime, RFC3339 (must be after start)"),
-        description: schemas/* string */.Yj().optional().describe("Long-form event body (markdown not rendered)"),
+        description: schemas/* string */.Yj().optional().describe("Long-form event body (plain text)"),
         location: schemas/* string */.Yj().optional().describe("Free-text location string"),
         attendees: schemas/* array */.YO(schemas/* string */.Yj().email()).optional().describe("Invitee email addresses"),
-        time_zone: schemas/* string */.Yj().optional().describe("IANA timezone, e.g. 'America/Los_Angeles'"),
-        add_meet_link: schemas/* boolean */.zM().optional().describe("Provision a Google Meet URL on this event")
+        time_zone: schemas/* string */.Yj().optional().describe("IANA or Windows timezone (default 'UTC')"),
+        add_teams_link: schemas/* boolean */.zM().optional().describe("Provision a Teams meeting URL on this event")
     })
 });
-const calendarUpdateEventTool = (0,tools/* tool */.z6)(async ({ calendar_id, event_id, summary, subject, start_iso, end_iso, description, location, attendees, time_zone })=>{
-    const auth = (0,gmail_oauth/* resolveGoogleAuth */.wq)();
+const outlookCalendarUpdateEventTool = (0,tools/* tool */.z6)(async ({ event_id, subject, summary, start_iso, end_iso, description, location, attendees, time_zone })=>{
+    const auth = (0,microsoft_oauth/* resolveMicrosoftAuth */.jG)();
     if ("error" in auth) return JSON.stringify({
         error: auth.error
     });
-    const cal = encodeURIComponent(calendar_id ?? "primary");
-    const eid = encodeURIComponent(event_id);
+    const tz = time_zone ?? "UTC";
     const patch = {};
-    const eventSummary = summary ?? subject;
-    if (eventSummary !== undefined) patch.summary = eventSummary;
-    if (description !== undefined) patch.description = description;
-    if (location !== undefined) patch.location = location;
-    if (start_iso !== undefined) {
-        patch.start = {
-            dateTime: start_iso,
-            ...time_zone ? {
-                timeZone: time_zone
-            } : {}
-        };
-    }
-    if (end_iso !== undefined) {
-        patch.end = {
-            dateTime: end_iso,
-            ...time_zone ? {
-                timeZone: time_zone
-            } : {}
-        };
-    }
+    const eventSubject = subject ?? summary;
+    if (eventSubject !== undefined) patch.subject = eventSubject;
+    if (description !== undefined) patch.body = {
+        contentType: "text",
+        content: description
+    };
+    if (location !== undefined) patch.location = {
+        displayName: location
+    };
+    if (start_iso !== undefined) patch.start = {
+        dateTime: start_iso,
+        timeZone: tz
+    };
+    if (end_iso !== undefined) patch.end = {
+        dateTime: end_iso,
+        timeZone: tz
+    };
     if (attendees !== undefined) {
-        patch.attendees = attendees.map((email)=>({
-                email
+        patch.attendees = attendees.map((address)=>({
+                emailAddress: {
+                    address
+                },
+                type: "required"
             }));
     }
     if (Object.keys(patch).length === 0) {
@@ -10203,373 +10051,678 @@ const calendarUpdateEventTool = (0,tools/* tool */.z6)(async ({ calendar_id, eve
             error: "Provide at least one field to update"
         });
     }
-    const data = await calendarFetch(auth, `/calendars/${cal}/events/${eid}`, {
+    const r = await (0,microsoft_oauth/* graphFetch */.z$)(auth, `/me/events/${encodeURIComponent(event_id)}`, {
         method: "PATCH",
-        body: JSON.stringify(patch)
+        body: JSON.stringify(patch),
+        headers: {
+            Prefer: 'outlook.timezone="UTC"'
+        }
     });
-    if (data.error) return JSON.stringify({
-        error: data.error
+    if (r.error) return JSON.stringify({
+        error: r.error
     });
-    return JSON.stringify(slimEvent(data));
+    return JSON.stringify(outlook_calendar_slimEvent(r));
 }, {
-    name: "calendar_update_event",
-    description: "Patch a Google Calendar event. Only the fields you supply are changed; " + "omit fields to leave them alone. Use this to reschedule (`start_iso`/`end_iso`), " + "rename (`summary`), or adjust the invitee list (`attendees` — note this " + "**replaces** the full list, so include everyone who should remain).",
+    name: "outlook_calendar_update_event",
+    description: "Patch an Outlook calendar event. Only supplied fields are changed; omit " + "fields to leave them alone. Note `attendees` REPLACES the full invitee " + "list, so include everyone who should remain.",
     schema: schemas/* object */.Ik({
-        calendar_id: schemas/* string */.Yj().optional().describe("Calendar id (default: 'primary')"),
         event_id: schemas/* string */.Yj().describe("Event id"),
-        summary: schemas/* string */.Yj().optional().describe("New event title (alias: subject)"),
-        subject: schemas/* string */.Yj().optional().describe("Alias for summary (Outlook vocabulary)"),
+        subject: schemas/* string */.Yj().optional().describe("New event title (alias: summary)"),
+        summary: schemas/* string */.Yj().optional().describe("Alias for subject (Google Calendar vocabulary)"),
         start_iso: schemas/* string */.Yj().optional().describe("New start datetime, RFC3339"),
         end_iso: schemas/* string */.Yj().optional().describe("New end datetime, RFC3339"),
-        description: schemas/* string */.Yj().optional().describe("New event body"),
+        description: schemas/* string */.Yj().optional().describe("New event body (plain text)"),
         location: schemas/* string */.Yj().optional().describe("New location string"),
         attendees: schemas/* array */.YO(schemas/* string */.Yj().email()).optional().describe("Replacement attendee list"),
-        time_zone: schemas/* string */.Yj().optional().describe("IANA timezone applied to start/end")
+        time_zone: schemas/* string */.Yj().optional().describe("IANA or Windows TZ applied to start/end (default 'UTC')")
     })
 });
-const calendarDeleteEventTool = (0,tools/* tool */.z6)(async ({ calendar_id, event_id })=>{
-    const auth = (0,gmail_oauth/* resolveGoogleAuth */.wq)();
+const outlookCalendarDeleteEventTool = (0,tools/* tool */.z6)(async ({ event_id })=>{
+    const auth = (0,microsoft_oauth/* resolveMicrosoftAuth */.jG)();
     if ("error" in auth) return JSON.stringify({
         error: auth.error
     });
-    const cal = encodeURIComponent(calendar_id ?? "primary");
-    const eid = encodeURIComponent(event_id);
-    const data = await calendarFetch(auth, `/calendars/${cal}/events/${eid}`, {
+    const r = await (0,microsoft_oauth/* graphFetch */.z$)(auth, `/me/events/${encodeURIComponent(event_id)}`, {
         method: "DELETE"
     });
-    if (data.error) return JSON.stringify({
-        error: data.error
+    if (r.error) return JSON.stringify({
+        error: r.error
     });
     return JSON.stringify({
         ok: true,
         id: event_id
     });
 }, {
-    name: "calendar_delete_event",
-    description: "Delete a Google Calendar event by id. Attendees are notified by default. " + "Returns `{ ok: true, id }` on success. Use `calendar_list_events` to find " + "the event id first if you only know the title/time.",
+    name: "outlook_calendar_delete_event",
+    description: "Delete an Outlook calendar event by id. Attendees are notified. Returns " + "`{ ok: true, id }` on success. Use outlook_calendar_list_events to find " + "the event id first if you only know the title/time.",
+    schema: schemas/* object */.Ik({
+        event_id: schemas/* string */.Yj().describe("Event id to delete")
+    })
+});
+(0,registry/* registerTools */.Fd)("Calendar", "read", [
+    outlookCalendarListCalendarsTool,
+    outlookCalendarListEventsTool,
+    outlookCalendarGetEventTool
+]);
+(0,registry/* registerTools */.Fd)("Calendar", "execute", [
+    outlookCalendarCreateEventTool,
+    outlookCalendarUpdateEventTool,
+    outlookCalendarDeleteEventTool
+]);
+
+// EXTERNAL MODULE: ./lib/agents/run-thread.ts + 17 modules
+var run_thread = __webpack_require__(8459);
+// EXTERNAL MODULE: ./lib/agents/stream-collector.ts
+var stream_collector = __webpack_require__(30685);
+// EXTERNAL MODULE: ./lib/agents/run-queue.ts
+var run_queue = __webpack_require__(3944);
+;// ./lib/tools/delegate.ts
+
+
+
+
+
+
+
+
+function readDelegateContext(config) {
+    const threadId = config?.configurable?.thread_id;
+    if (!threadId) return null;
+    const thread = (0,threads/* getThread */.fG)(threadId);
+    if (!thread) return null;
+    const depth = config?.configurable?.delegation_depth ?? 0;
+    const ancestorsRaw = config?.configurable?.delegation_ancestors;
+    const ancestors = Array.isArray(ancestorsRaw) ? ancestorsRaw : [];
+    return {
+        parentAgentId: thread.agent_id,
+        depth,
+        ancestors
+    };
+}
+function fail(code, message, extra = {}) {
+    return JSON.stringify({
+        ok: false,
+        error_code: code,
+        message,
+        ...extra
+    });
+}
+const delegateToAgentTool = (0,tools/* tool */.z6)(async ({ agent_id, task }, config)=>{
+    const ctx = readDelegateContext(config);
+    if (!ctx) return fail("no_context", "No agent context (missing thread_id)");
+    const parent = (0,agent_configs/* getAgentConfig */.mJ)(ctx.parentAgentId);
+    if (!parent) return fail("agent_not_found", `Parent agent "${ctx.parentAgentId}" not found`);
+    if (agent_id === ctx.parentAgentId) {
+        return fail("cycle_detected", "Cannot delegate to self");
+    }
+    if (ctx.ancestors.includes(agent_id)) {
+        return fail("cycle_detected", `Delegation cycle: ${agent_id} is already in the chain [${ctx.ancestors.join(" -> ")}]`);
+    }
+    if (ctx.depth >= run_thread/* MAX_DELEGATION_DEPTH */.Ye) {
+        return fail("depth_exceeded", `Maximum delegation depth (${run_thread/* MAX_DELEGATION_DEPTH */.Ye}) reached. Chain: [${[
+            ...ctx.ancestors,
+            ctx.parentAgentId
+        ].join(" -> ")}]`);
+    }
+    const roster = (0,agent_configs/* parseDelegateTargets */.bg)(parent.delegate_targets);
+    if (!roster.includes(agent_id)) {
+        return fail("not_in_roster", `Agent "${agent_id}" is not in the delegate roster for "${parent.id}". Available: [${roster.join(", ") || "none"}]`);
+    }
+    const child = (0,agent_configs/* getAgentConfig */.mJ)(agent_id);
+    if (!child) return fail("agent_not_found", `Delegate agent "${agent_id}" not found`);
+    const childThread = (0,threads/* getOrCreateAgentThread */.xH)(agent_id);
+    const startedAt = Date.now();
+    try {
+        // Serialise on the child thread_id with every other entry point
+        // (HTTP POST, scheduler, watcher, bridge, sibling delegations) —
+        // see lib/agents/run-queue.ts. A delegate fired while the child is
+        // already running waits in the child's queue instead of racing the
+        // checkpoint store.
+        const queued = await (0,run_queue/* enqueueThreadRun */.M6)(childThread.thread_id, "delegate", async ()=>{
+            const prepared = await (0,run_thread/* prepareThreadRun */.fn)({
+                thread_id: childThread.thread_id,
+                message: task,
+                user_category: "delegation",
+                _delegation_depth: ctx.depth + 1,
+                _delegation_ancestors: [
+                    ...ctx.ancestors,
+                    ctx.parentAgentId
+                ]
+            });
+            const collected = await (0,stream_collector/* collectStream */.V)(prepared.stream);
+            if (collected.terminal !== "error") {
+                (0,run_thread/* persistAssistantMessage */._w)(childThread.thread_id, collected.assistantContent, collected.usedTools, collected.toolEvents, "delegation", collected.usage ?? null, prepared.context_snapshot ?? null, prepared.source_manifest ?? null);
+            }
+            return collected;
+        }).result;
+        const elapsed_ms = Date.now() - startedAt;
+        if (queued.terminal === "error") {
+            return fail("child_error", queued.errorMessage ?? "Child agent run failed", {
+                agent_id,
+                agent_name: child.name,
+                thread_id: childThread.thread_id
+            });
+        }
+        return JSON.stringify({
+            ok: true,
+            agent_id: child.id,
+            agent_name: child.name,
+            thread_id: childThread.thread_id,
+            depth: ctx.depth + 1,
+            result: queued.assistantContent.trim(),
+            used_tools: Array.from(new Set(queued.usedTools)),
+            elapsed_ms
+        });
+    } catch (err) {
+        return fail("child_error", err instanceof Error ? err.message : String(err), {
+            agent_id,
+            agent_name: child.name,
+            thread_id: childThread.thread_id
+        });
+    }
+}, {
+    name: "delegate_to_agent",
+    description: "Hand a subtask to another agent that has specialized knowledge or tools you lack. " + "The delegate runs in its own thread; the user sees a tool card with the delegate's name, " + "the task you sent, and the delegate's final answer (plus a link to open the delegate's thread). " + "Only delegate when the target agent is genuinely better-suited — do NOT delegate trivial subtasks " + "you can handle yourself. Before calling this tool, tell the user in one sentence which agent you " + "are handing to and why. Available delegate ids are listed in the 'Available delegates' system " + "section; calling with an id outside that list will be refused.",
     schema: schemas/* object */.Ik({
-        calendar_id: schemas/* string */.Yj().optional().describe("Calendar id (default: 'primary')"),
-        event_id: schemas/* string */.Yj().describe("Event id to delete")
+        agent_id: schemas/* string */.Yj().describe("The id of the delegate agent. Must appear in the 'Available delegates' list in your system prompt."),
+        task: schemas/* string */.Yj().min(1).describe("A self-contained task description for the delegate. Include all context the delegate needs — " + "the delegate does NOT see your conversation history with the user, only this task string.")
     })
 });
-(0,registry/* registerTools */.Fd)("Calendar", "read", [
-    calendarListCalendarsTool,
-    calendarListEventsTool,
-    calendarGetEventTool
-]);
-(0,registry/* registerTools */.Fd)("Calendar", "execute", [
-    calendarCreateEventTool,
-    calendarUpdateEventTool,
-    calendarDeleteEventTool
+(0,registry/* registerTools */.Fd)("Agent", "execute", [
+    delegateToAgentTool
 ]);
 
-// EXTERNAL MODULE: ./lib/tools/outlook.ts
-var outlook = __webpack_require__(77467);
-// EXTERNAL MODULE: ./lib/integrations/microsoft-oauth.ts
-var microsoft_oauth = __webpack_require__(89080);
-;// ./lib/tools/outlook-calendar.ts
-/**
- * Outlook Calendar tools via Microsoft Graph. Mirrors lib/tools/calendar.ts
- * (the Google Calendar set) one-for-one so the agent's mental model
- * carries over between providers.
- *
- * Graph differences vs Google Calendar worth knowing:
- *   - Each event's start/end is { dateTime, timeZone } where timeZone is
- *     a Windows-time-zone string by default ("Pacific Standard Time"),
- *     not IANA. We pass an explicit `Prefer: outlook.timezone="UTC"`
- *     header so reads come back in UTC and the agent doesn't have to
- *     navigate two TZ namespaces.
- *   - Listing events in a window uses /calendarView (auto-expands
- *     recurring series), parallel to Google's `singleEvents=true`.
- *   - Online meetings use `isOnlineMeeting:true` +
- *     `onlineMeetingProvider:"teamsForBusiness"`. Provisioning a Teams
- *     link is gated behind `add_teams_link` to keep create_event cheap
- *     when the agent just wants a plain event.
- */ 
+// EXTERNAL MODULE: ./lib/env/schema.ts
+var schema = __webpack_require__(69353);
+// EXTERNAL MODULE: ./lib/env/overrides.ts
+var overrides = __webpack_require__(86037);
+;// ./lib/tools/system_config.ts
+// Agent-callable knobs for the JARELA_* override store.
+//
+// Both tools are gated by the per-var schema flag `agentWritable` —
+// agents cannot write to anything not flagged true (defaults to false).
+// `restart_server` is only wired here; agents still need the tool to be
+// in their selected toolset to call it (default agents do not include
+// these).
+//
+// Use cases the user explicitly asked to support:
+//   - "agent, lower the run idle timeout to 30s and restart"
+//   - "agent, switch the log level to debug for the next hour"
+//
+// We surface the schema's tier/restart flags in the response so the
+// agent's reply can tell the user what changed and whether a restart
+// fired (or is needed but skipped).
 
 
 
-function outlook_calendar_slimEvent(e) {
-    return {
-        id: e.id,
-        subject: e.subject ?? null,
-        description: e.bodyPreview ?? null,
-        location: e.location?.displayName ?? null,
-        start: e.start?.dateTime ?? null,
-        end: e.end?.dateTime ?? null,
-        time_zone: e.start?.timeZone ?? e.end?.timeZone ?? null,
-        attendees: (e.attendees ?? []).map((a)=>({
-                email: a.emailAddress?.address ?? null,
-                name: a.emailAddress?.name ?? null,
-                response: a.status?.response ?? null
-            })),
-        is_all_day: e.isAllDay === true,
-        is_cancelled: e.isCancelled === true,
-        show_as: e.showAs ?? null,
-        teams_link: e.onlineMeeting?.joinUrl ?? null,
-        web_link: e.webLink ?? null
-    };
-}
-// ── Tools ───────────────────────────────────────────────────────────────────
-const outlookCalendarListCalendarsTool = (0,tools/* tool */.z6)(async ()=>{
-    const auth = (0,microsoft_oauth/* resolveMicrosoftAuth */.jG)();
-    if ("error" in auth) return JSON.stringify({
-        error: auth.error
-    });
-    const data = await (0,microsoft_oauth/* graphFetch */.z$)(auth, "/me/calendars");
-    if ("error" in data && data.error) return JSON.stringify(data);
-    return JSON.stringify({
-        calendars: (data.value ?? []).map((c)=>({
-                id: c.id,
-                name: c.name ?? null,
-                is_default: c.isDefaultCalendar === true,
-                can_edit: c.canEdit === true,
-                owner: c.owner?.address ?? null
-            }))
-    });
-}, {
-    name: "outlook_calendar_list_calendars",
-    description: "List the user's Outlook calendars (primary + shared). Returns id, name, " + "is_default flag, edit permission, owner. The `id` is what other " + "outlook_calendar_* tools expect as `calendar_id`. Omit `calendar_id` " + "in those tools to use the user's default calendar.",
-    schema: schemas/* object */.Ik({})
+
+
+
+const setEnvSchema = schemas/* object */.Ik({
+    name: schemas/* string */.Yj().describe("Env var name. Must be a JARELA_* knob the schema flags as agent-writable; otherwise the call returns code=forbidden."),
+    value: schemas/* string */.Yj().nullable().describe("New value as a string (numbers/bools come as their string form: '5000' / 'true'). Pass null to clear the override and revert to the default."),
+    reason: schemas/* string */.Yj().optional().describe("Short note explaining the change — logged for postmortems.")
 });
-const outlookCalendarListEventsTool = (0,tools/* tool */.z6)(async ({ calendar_id, time_min, time_max, max_results })=>{
-    const auth = (0,microsoft_oauth/* resolveMicrosoftAuth */.jG)();
-    if ("error" in auth) return JSON.stringify({
-        error: auth.error
-    });
-    const now = new Date();
-    const inAWeek = new Date(now.getTime() + 7 * 24 * 60 * 60 * 1000);
-    const startISO = time_min ?? now.toISOString();
-    const endISO = time_max ?? inAWeek.toISOString();
-    const top = Math.min(Math.max(max_results ?? 25, 1), 100);
-    // /calendarView expands recurring series into individual instances —
-    // the closest parallel to Google's singleEvents=true.
-    const base = calendar_id ? `/me/calendars/${encodeURIComponent(calendar_id)}/calendarView` : "/me/calendarView";
-    const params = new URLSearchParams({
-        startDateTime: startISO,
-        endDateTime: endISO,
-        $top: String(top),
-        $orderby: "start/dateTime"
-    });
-    const data = await (0,microsoft_oauth/* graphFetch */.z$)(auth, `${base}?${params.toString()}`, {
-        // Force UTC in responses so the agent doesn't juggle Windows-TZ names.
-        headers: {
-            Prefer: 'outlook.timezone="UTC"'
+const setEnvVar = (0,tools/* tool */.z6)(async ({ name, value, reason })=>{
+    const def = (0,schema/* envSchemaByName */.Db)().get(name);
+    if (!def) {
+        return JSON.stringify({
+            ok: false,
+            code: "unknown_var",
+            error: `unknown env var: ${name}`,
+            hint: "List the schema with /api/v1/env (GET) before guessing names. Only JARELA_* keys defined in lib/env/schema.ts are accepted."
+        });
+    }
+    if (!def.agentWritable) {
+        return JSON.stringify({
+            ok: false,
+            code: "forbidden",
+            error: `${name} is not flagged agentWritable in the schema`,
+            hint: "Agents cannot edit infra knobs (port, hostname, dataDir, …). Tell the user to change this from the Environment panel themselves."
+        });
+    }
+    if (value !== null) {
+        const verr = (0,overrides/* validateForSchema */.xg)(def, value);
+        if (verr) {
+            return JSON.stringify({
+                ok: false,
+                code: "invalid_value",
+                error: `${name}: ${verr}`,
+                hint: "Re-issue the call with a value that matches the schema's type/min/max/enum."
+            });
         }
-    });
-    if ("error" in data && data.error) return JSON.stringify(data);
+    }
+    await (0,overrides/* patchOverride */.PJ)(name, value);
+    if (value === null) delete process.env[name];
+    else process.env[name] = value;
+    (0,config/* resetConfigCache */.y)();
     return JSON.stringify({
-        events: (data.value ?? []).map(outlook_calendar_slimEvent)
+        ok: true,
+        name,
+        value,
+        requiresRestart: def.requiresRestart,
+        reason: reason ?? null,
+        hint: def.requiresRestart ? "Override persisted. The change requires a server restart — call restart_server to apply, OR tell the user to click Restart in the Environment panel." : "Override persisted and is in effect immediately. No restart needed."
     });
 }, {
-    name: "outlook_calendar_list_events",
-    description: "List Outlook calendar events within a time window. Defaults: default " + "calendar, now → +7 days, ordered by start, recurring series expanded. " + "**Use this before creating an event** to avoid double-booking, and to " + "look up event ids before updating/deleting. All datetimes returned in " + "UTC (RFC3339 'Z'-suffixed).",
-    schema: schemas/* object */.Ik({
-        calendar_id: schemas/* string */.Yj().optional().describe("Calendar id (default: user's default calendar)"),
-        time_min: schemas/* string */.Yj().optional().describe("RFC3339 lower bound (default: now)"),
-        time_max: schemas/* string */.Yj().optional().describe("RFC3339 upper bound (default: now + 7 days)"),
-        max_results: schemas/* number */.ai().int().optional().describe("Max events (default 25, max 100)")
-    })
+    name: "set_env_var",
+    description: "Set or unset a JARELA_* runtime override. Only schema-flagged agent-writable knobs are accepted; everything else returns code=forbidden. Use this when the user explicitly asks to change a runtime setting (e.g. log level, retry budget). Pair with restart_server when the result reports requiresRestart=true.",
+    schema: setEnvSchema
 });
-const outlookCalendarGetEventTool = (0,tools/* tool */.z6)(async ({ event_id })=>{
-    const auth = (0,microsoft_oauth/* resolveMicrosoftAuth */.jG)();
-    if ("error" in auth) return JSON.stringify({
-        error: auth.error
-    });
-    const e = await (0,microsoft_oauth/* graphFetch */.z$)(auth, `/me/events/${encodeURIComponent(event_id)}`, {
-        headers: {
-            Prefer: 'outlook.timezone="UTC"'
-        }
-    });
-    if (e.error) return JSON.stringify({
-        error: e.error
-    });
-    return JSON.stringify(outlook_calendar_slimEvent(e));
-}, {
-    name: "outlook_calendar_get_event",
-    description: "Fetch one Outlook calendar event by id. Returns the same slim shape as " + "outlook_calendar_list_events but for a single event.",
-    schema: schemas/* object */.Ik({
-        event_id: schemas/* string */.Yj().describe("Event id (from outlook_calendar_list_events)")
-    })
+const restartSchema = schemas/* object */.Ik({
+    reason: schemas/* string */.Yj().min(1).describe("Why the restart is needed (logged + included in /api/v1/system/restart payload). Required.")
 });
-const outlookCalendarCreateEventTool = (0,tools/* tool */.z6)(async ({ calendar_id, subject, summary, start_iso, end_iso, description, location, attendees, time_zone, add_teams_link })=>{
-    const auth = (0,microsoft_oauth/* resolveMicrosoftAuth */.jG)();
-    if ("error" in auth) return JSON.stringify({
-        error: auth.error
-    });
-    // `summary` is accepted as an alias for `subject` so agents trained on
-    // Google Calendar's vocabulary don't fail the schema on first try.
-    const eventSubject = subject ?? summary;
-    if (!eventSubject) {
+const restartServer = (0,tools/* tool */.z6)(async ({ reason })=>{
+    // Use the same endpoint the UI hits. Doing it via fetch instead of
+    // calling process.exit() directly here means the request response
+    // flushes back to the agent (and through it, the user) before the
+    // process tears down.
+    try {
+        const port = Number(process.env.JARELA_PORT ?? process.env.PORT ?? 4312);
+        const host = process.env.JARELA_HOSTNAME ?? process.env.HOSTNAME ?? "127.0.0.1";
+        const r = await fetch(`http://${host}:${port}/api/v1/system/restart`, {
+            method: "POST",
+            headers: {
+                "Content-Type": "application/json"
+            },
+            body: JSON.stringify({
+                reason: `[agent] ${reason}`
+            })
+        });
+        const body = await r.json().catch(()=>({}));
         return JSON.stringify({
-            error: "subject (or summary) is required"
+            ok: r.ok,
+            status: r.status,
+            reason,
+            hint: body.hint ?? "Restart request sent. The supervisor will relaunch the process; the user's UI will reconnect automatically."
+        });
+    } catch (e) {
+        return JSON.stringify({
+            ok: false,
+            code: "restart_failed",
+            error: e.message,
+            hint: "Could not reach /api/v1/system/restart from inside the same process. Tell the user they need to restart manually."
         });
     }
-    // Graph uses Windows TZ names by default but also accepts IANA names
-    // when the body specifies them per-field. Default to UTC if the
-    // caller omits time_zone (matches the list endpoint's behavior).
-    const tz = time_zone ?? "UTC";
-    const body = {
-        subject: eventSubject,
-        start: {
-            dateTime: start_iso,
-            timeZone: tz
+}, {
+    name: "restart_server",
+    description: "Restart the Jarela server. Only call this when the user explicitly asks for a restart, OR when set_env_var returned requiresRestart=true and the user agreed. The UI reconnects automatically once the supervisor (launchd/systemd/Task Scheduler) relaunches.",
+    schema: restartSchema
+});
+(0,registry/* registerTools */.Fd)("Config", "execute", [
+    setEnvVar,
+    restartServer
+]);
+
+;// ./lib/tools/list-tools.ts
+// Read-only introspection tool — lets the agent enumerate every tool it has
+// access to right now (built-in + external + MCP), so it can answer
+// "what's in my toolbox / is X available" without the user having to
+// describe the project's tool surface in the prompt.
+
+
+
+
+const listToolsTool = (0,tools/* tool */.z6)(async ({ category, capability, source })=>{
+    const all = await getAllToolsAsync();
+    const summaries = all.map((t)=>({
+            name: t.name,
+            description: typeof t.description === "string" ? t.description : "",
+            category: getToolCategory(t.name),
+            capability: getToolCapability(t.name),
+            source: getToolSource(t.name),
+            group: getToolGroup(t.name)
+        }));
+    const filtered = summaries.filter((s)=>(!category || s.category === category) && (!capability || s.capability === capability) && (!source || s.source === source));
+    const counts = {
+        total: filtered.length,
+        by_source: {
+            builtin: 0,
+            external: 0,
+            mcp: 0
         },
-        end: {
-            dateTime: end_iso,
-            timeZone: tz
+        by_capability: {
+            read: 0,
+            write: 0,
+            execute: 0
         }
     };
-    if (description) body.body = {
-        contentType: "text",
-        content: description
-    };
-    if (location) body.location = {
-        displayName: location
-    };
-    if (attendees && attendees.length > 0) {
-        body.attendees = attendees.map((address)=>({
-                emailAddress: {
-                    address
-                },
-                type: "required"
-            }));
-    }
-    if (add_teams_link) {
-        body.isOnlineMeeting = true;
-        body.onlineMeetingProvider = "teamsForBusiness";
+    for (const s of filtered){
+        counts.by_source[s.source]++;
+        counts.by_capability[s.capability]++;
     }
-    const path = calendar_id ? `/me/calendars/${encodeURIComponent(calendar_id)}/events` : "/me/events";
-    const r = await (0,microsoft_oauth/* graphFetch */.z$)(auth, path, {
-        method: "POST",
-        body: JSON.stringify(body),
-        headers: {
-            Prefer: 'outlook.timezone="UTC"'
-        }
-    });
-    if (r.error) return JSON.stringify({
-        error: r.error
+    return JSON.stringify({
+        tools: filtered,
+        counts
     });
-    return JSON.stringify(outlook_calendar_slimEvent(r));
 }, {
-    name: "outlook_calendar_create_event",
-    description: "Create an Outlook calendar event. Datetimes are RFC3339 strings; pair " + "with `time_zone` (IANA like 'America/Los_Angeles' or Windows TZ like " + "'Pacific Standard Time') so Outlook interprets them correctly. Defaults " + "to UTC if omitted. Attendees are automatically sent invites. Set " + "`add_teams_link: true` to provision a Teams meeting URL (requires a " + "work/school M365 account; personal Microsoft accounts cannot create " + "Teams meetings via Graph).",
+    name: "list_tools",
+    description: "List every tool currently available to this agent — built-in tools, " + "external (~/.jarela/providers JS plugins), and MCP server tools — with " + "category, capability (read/write/execute), and source. Read-only. " + "Use this when the user asks 'what can you do?', when picking between " + "tools for a task, or when troubleshooting whether a specific tool is " + "registered. Optional filters narrow by category, capability, or source.",
     schema: schemas/* object */.Ik({
-        calendar_id: schemas/* string */.Yj().optional().describe("Calendar id (default: user's default calendar)"),
-        subject: schemas/* string */.Yj().min(1).optional().describe("Event title shown on the calendar (alias: summary)"),
-        summary: schemas/* string */.Yj().min(1).optional().describe("Alias for subject (Google Calendar vocabulary)"),
-        start_iso: schemas/* string */.Yj().describe("Start datetime, RFC3339"),
-        end_iso: schemas/* string */.Yj().describe("End datetime, RFC3339 (must be after start)"),
-        description: schemas/* string */.Yj().optional().describe("Long-form event body (plain text)"),
-        location: schemas/* string */.Yj().optional().describe("Free-text location string"),
-        attendees: schemas/* array */.YO(schemas/* string */.Yj().email()).optional().describe("Invitee email addresses"),
-        time_zone: schemas/* string */.Yj().optional().describe("IANA or Windows timezone (default 'UTC')"),
-        add_teams_link: schemas/* boolean */.zM().optional().describe("Provision a Teams meeting URL on this event")
+        category: schemas/* string */.Yj().optional().describe("Optional category filter (e.g. 'Files', 'Mail', 'GitHub', 'MCP')"),
+        capability: schemas/* enum */.k5([
+            "read",
+            "write",
+            "execute"
+        ]).optional().describe("Optional capability filter — the safety class of the tool"),
+        source: schemas/* enum */.k5([
+            "builtin",
+            "external",
+            "mcp"
+        ]).optional().describe("Optional source filter — where the tool came from")
     })
 });
-const outlookCalendarUpdateEventTool = (0,tools/* tool */.z6)(async ({ event_id, subject, summary, start_iso, end_iso, description, location, attendees, time_zone })=>{
-    const auth = (0,microsoft_oauth/* resolveMicrosoftAuth */.jG)();
-    if ("error" in auth) return JSON.stringify({
-        error: auth.error
+(0,registry/* registerTools */.Fd)("Config", "read", [
+    listToolsTool
+]);
+
+// EXTERNAL MODULE: ./lib/providers/index.ts + 8 modules
+var lib_providers = __webpack_require__(68866);
+// EXTERNAL MODULE: ./lib/providers/known-context-windows.ts
+var known_context_windows = __webpack_require__(45552);
+;// ./lib/tools/providers-info.ts
+// Read-only introspection for LLM provider adapters. Two paired tools:
+//   - list_providers: enumerate every adapter (built-in + external).
+//   - describe_provider: capability map + known model context windows for one.
+// Together they let the agent answer "what can we route to" or pick a model
+// by capability without hand-coded knowledge of the provider catalog.
+
+
+
+
+
+function sourceOf(name) {
+    return lib_providers/* BUILTIN_PROVIDER_NAMES */.X4.has(name) ? "builtin" : "external";
+}
+const listProvidersTool = (0,tools/* tool */.z6)(async ()=>{
+    const names = (0,lib_providers/* listProviderNames */.Yb)();
+    const providers = names.map((name)=>({
+            name,
+            source: sourceOf(name)
+        }));
+    return JSON.stringify({
+        providers,
+        count: providers.length,
+        builtin_count: providers.filter((p)=>p.source === "builtin").length,
+        external_count: providers.filter((p)=>p.source === "external").length
     });
-    const tz = time_zone ?? "UTC";
-    const patch = {};
-    const eventSubject = subject ?? summary;
-    if (eventSubject !== undefined) patch.subject = eventSubject;
-    if (description !== undefined) patch.body = {
-        contentType: "text",
-        content: description
-    };
-    if (location !== undefined) patch.location = {
-        displayName: location
-    };
-    if (start_iso !== undefined) patch.start = {
-        dateTime: start_iso,
-        timeZone: tz
-    };
-    if (end_iso !== undefined) patch.end = {
-        dateTime: end_iso,
-        timeZone: tz
-    };
-    if (attendees !== undefined) {
-        patch.attendees = attendees.map((address)=>({
-                emailAddress: {
-                    address
-                },
-                type: "required"
-            }));
-    }
-    if (Object.keys(patch).length === 0) {
+}, {
+    name: "list_providers",
+    description: "List every LLM provider adapter registered in this app (built-in like " + "anthropic / openai / gemini / deepseek / github-copilot / langchain, plus " + "any external `.cjs` plugins under ~/.jarela/providers/). Read-only. " + "Use this before suggesting a model swap, or when answering 'what can " + "we route to.' Call describe_provider afterwards for capability details.",
+    schema: schemas/* object */.Ik({})
+});
+const describeProviderTool = (0,tools/* tool */.z6)(async ({ name })=>{
+    let provider;
+    try {
+        provider = (0,lib_providers/* getProvider */.sO)(name);
+    } catch (err) {
         return JSON.stringify({
-            error: "Provide at least one field to update"
+            error: err instanceof Error ? err.message : String(err),
+            hint: "Call list_providers to see registered names."
         });
     }
-    const r = await (0,microsoft_oauth/* graphFetch */.z$)(auth, `/me/events/${encodeURIComponent(event_id)}`, {
-        method: "PATCH",
-        body: JSON.stringify(patch),
-        headers: {
-            Prefer: 'outlook.timezone="UTC"'
-        }
-    });
-    if (r.error) return JSON.stringify({
-        error: r.error
+    // Capability inferred from which methods the adapter implements. We
+    // intentionally don't call listModels() here — that would hit the
+    // network and require valid credentials, which makes this a "read"-class
+    // tool that sometimes fails for credential reasons. Static introspection
+    // only.
+    const capabilities = {
+        chat: typeof provider.chat === "function",
+        invoke: typeof provider.invoke === "function",
+        stream_invoke: typeof provider.streamInvoke === "function",
+        embed: typeof provider.embed === "function",
+        list_models: typeof provider.listModels === "function"
+    };
+    const models = (0,known_context_windows/* listKnownModels */.YY)(name);
+    return JSON.stringify({
+        name,
+        source: sourceOf(name),
+        capabilities,
+        known_models: models,
+        notes: [
+            models.length === 0 ? "No static model catalog for this provider — call /api/v1/models?provider=" + name + " for live discovery if the adapter implements list_models." : "Static catalog only. Live `list_models` (when supported) may include " + "newer models not listed here."
+        ]
     });
-    return JSON.stringify(outlook_calendar_slimEvent(r));
 }, {
-    name: "outlook_calendar_update_event",
-    description: "Patch an Outlook calendar event. Only supplied fields are changed; omit " + "fields to leave them alone. Note `attendees` REPLACES the full invitee " + "list, so include everyone who should remain.",
+    name: "describe_provider",
+    description: "Return capability flags (chat / invoke / stream / embed / list_models) " + "and the static known-models catalog (with context windows) for one " + "registered provider. Read-only. Use this to choose a model by capability, " + "or to explain provider differences to the user. Call list_providers first " + "if you don't know the provider name.",
     schema: schemas/* object */.Ik({
-        event_id: schemas/* string */.Yj().describe("Event id"),
-        subject: schemas/* string */.Yj().optional().describe("New event title (alias: summary)"),
-        summary: schemas/* string */.Yj().optional().describe("Alias for subject (Google Calendar vocabulary)"),
-        start_iso: schemas/* string */.Yj().optional().describe("New start datetime, RFC3339"),
-        end_iso: schemas/* string */.Yj().optional().describe("New end datetime, RFC3339"),
-        description: schemas/* string */.Yj().optional().describe("New event body (plain text)"),
-        location: schemas/* string */.Yj().optional().describe("New location string"),
-        attendees: schemas/* array */.YO(schemas/* string */.Yj().email()).optional().describe("Replacement attendee list"),
-        time_zone: schemas/* string */.Yj().optional().describe("IANA or Windows TZ applied to start/end (default 'UTC')")
+        name: schemas/* string */.Yj().describe("Provider name from list_providers, e.g. 'anthropic', 'openai', 'gemini'")
     })
 });
-const outlookCalendarDeleteEventTool = (0,tools/* tool */.z6)(async ({ event_id })=>{
-    const auth = (0,microsoft_oauth/* resolveMicrosoftAuth */.jG)();
-    if ("error" in auth) return JSON.stringify({
-        error: auth.error
-    });
-    const r = await (0,microsoft_oauth/* graphFetch */.z$)(auth, `/me/events/${encodeURIComponent(event_id)}`, {
-        method: "DELETE"
-    });
-    if (r.error) return JSON.stringify({
-        error: r.error
-    });
+(0,registry/* registerTools */.Fd)("Config", "read", [
+    listProvidersTool,
+    describeProviderTool
+]);
+
+// EXTERNAL MODULE: ./lib/stores/mcp-servers.ts
+var mcp_servers = __webpack_require__(42666);
+;// ./lib/tools/mcp-servers-info.ts
+// Read-only introspection of configured MCP servers — names, transports,
+// enabled/disabled state, last connection error, and the count of tools each
+// server contributes to the live tool pool. Lets the agent answer "why is
+// my Jira tool unavailable?" without bouncing the user through the UI.
+
+
+
+
+
+
+const listMcpServersTool = (0,tools/* tool */.z6)(async ()=>{
+    const rows = (0,mcp_servers/* listMcpServers */.n7)();
+    const allTools = await getAllToolsAsync();
+    // MCP tools don't carry their server name as a structured field — for
+    // the per-server count we count every tool whose source is "mcp", and
+    // we surface the total separately. Per-server attribution would require
+    // a deeper hook into MultiServerMCPClient's tool-namespace metadata,
+    // which is a bigger change than this introspection step warrants today.
+    const totalMcp = allTools.filter((t)=>getToolSource(t.name) === "mcp").length;
+    const servers = rows.map((r)=>({
+            name: r.name,
+            transport: r.transport,
+            enabled: r.enabled === 1,
+            last_error: r.last_error,
+            // Per-server tool count not yet attributable; surface total on every
+            // row for now and document the limitation in `notes` below.
+            tool_count: r.enabled === 1 ? totalMcp : 0,
+            created_at: r.created_at,
+            updated_at: r.updated_at
+        }));
     return JSON.stringify({
-        ok: true,
-        id: event_id
+        servers,
+        count: servers.length,
+        enabled_count: servers.filter((s)=>s.enabled).length,
+        total_mcp_tool_count: totalMcp,
+        notes: [
+            "tool_count is an aggregate across all enabled MCP servers — per-server " + "attribution requires deeper namespace tracking that's not implemented yet.",
+            "last_error shows the most recent connection error if any; null means " + "the server has never failed since last config change."
+        ]
     });
 }, {
-    name: "outlook_calendar_delete_event",
-    description: "Delete an Outlook calendar event by id. Attendees are notified. Returns " + "`{ ok: true, id }` on success. Use outlook_calendar_list_events to find " + "the event id first if you only know the title/time.",
-    schema: schemas/* object */.Ik({
-        event_id: schemas/* string */.Yj().describe("Event id to delete")
-    })
+    name: "list_mcp_servers",
+    description: "List every configured MCP server (stdio or http transport) with its " + "enabled state, last connection error, and the aggregate count of MCP " + "tools currently in the agent's pool. Read-only. Use this when " + "diagnosing 'my <X> tool isn't working' — check enabled and last_error " + "before assuming the tool itself is broken.",
+    schema: schemas/* object */.Ik({})
 });
-(0,registry/* registerTools */.Fd)("Calendar", "read", [
-    outlookCalendarListCalendarsTool,
-    outlookCalendarListEventsTool,
-    outlookCalendarGetEventTool
+(0,registry/* registerTools */.Fd)("Config", "read", [
+    listMcpServersTool
 ]);
-(0,registry/* registerTools */.Fd)("Calendar", "execute", [
-    outlookCalendarCreateEventTool,
-    outlookCalendarUpdateEventTool,
-    outlookCalendarDeleteEventTool
+
+;// ./lib/tools/extension-surfaces.ts
+// Meta-introspection: a hand-curated catalog of every place a third party
+// (or the agent itself, on behalf of the user) can extend or customize the
+// app. Read-only. The tool returns a structured map that points to the
+// registration entrypoint, the integration guide section, and an example
+// file for each surface — so the agent can answer "how do I add an X?"
+// or "what can be customized" without needing the docs in its context.
+//
+// SOURCE OF TRUTH: this file. When a new extension surface lands, add an
+// entry below — it's a single source for both the agent runtime and the
+// `docs/EXTENDING.md` table-of-contents anchor.
+
+
+
+const SURFACES = [
+    {
+        id: "llm_provider_builtin",
+        name: "Built-in LLM provider",
+        summary: "Add a new in-tree adapter (Anthropic, OpenAI, Gemini, … pattern). " + "Implements the ModelProvider interface and is registered via the static " + "BUILTINS map in lib/providers/index.ts.",
+        registration_entrypoint: "lib/providers/index.ts (BUILTINS map)",
+        doc_section: "docs/EXTENDING.md#adding-an-llm-provider-built-in",
+        example_path: "lib/providers/anthropic.ts",
+        introspection_tool: "list_providers",
+        related_adrs: [
+            "ADR-0013"
+        ]
+    },
+    {
+        id: "llm_provider_external",
+        name: "External LLM provider plugin",
+        summary: "Drop a `.cjs` plugin into ~/.jarela/providers/ that exports an object " + "matching ModelProvider. Hot-loaded per call (no rebuild).",
+        registration_entrypoint: "~/.jarela/providers/<name>.cjs",
+        doc_section: "docs/EXTENDING.md#adding-an-llm-provider-external",
+        example_path: "lib/providers/template-external.cjs.example",
+        introspection_tool: "list_providers",
+        related_adrs: [
+            "ADR-0013"
+        ]
+    },
+    {
+        id: "builtin_tool",
+        name: "Built-in tool",
+        summary: "Add a tool callable by the agent. Implement with @langchain/core/tools, " + "register with `registerTools(category, capability, [tool])`, and add a " + "side-effect import in lib/tools/builtins.ts. Capability gating is " + "read | write | execute.",
+        registration_entrypoint: "lib/tools/<name>.ts (registerTools call) + lib/tools/builtins.ts",
+        doc_section: "docs/EXTENDING.md#adding-a-built-in-tool",
+        example_path: "lib/tools/template.ts",
+        introspection_tool: "list_tools",
+        related_adrs: [
+            "ADR-0038"
+        ]
+    },
+    {
+        id: "mcp_server",
+        name: "MCP server",
+        summary: "Connect a Model Context Protocol server (stdio or http transport). " + "Configured via the UI (mcp_servers DB table) or programmatically through " + "lib/stores/mcp-servers.ts. Tools auto-merge into the same pool as " + "built-ins. Online discovery via the MCP registry is also supported.",
+        registration_entrypoint: "lib/stores/mcp-servers.ts (upsertMcpServer)",
+        doc_section: "docs/EXTENDING.md#adding-an-mcp-server",
+        introspection_tool: "list_mcp_servers",
+        related_adrs: [
+            "ADR-0014"
+        ]
+    },
+    {
+        id: "agent_harness",
+        name: "Agent harness",
+        summary: "Compose system-prompt sections that shape an agent's behaviour " + "(plan-first, self-config, capability-listing, etc.). Built-in presets " + "live in lib/agents/harness/presets.ts; custom harnesses are stored in " + "the memory_store under the `app-settings` namespace.",
+        registration_entrypoint: "lib/agents/harness/presets.ts (built-in) or memory_store (custom)",
+        doc_section: "docs/EXTENDING.md#adding-a-custom-harness",
+        related_adrs: [
+            "ADR-0036"
+        ]
+    },
+    {
+        id: "integration_manifest",
+        name: "Integration manifest",
+        summary: "Add a new agent-led setup recipe — prerequisites, ordered steps, " + "troubleshooting hints. The agent narrates the recipe and proposes " + "the corresponding config changes through propose_config_change.",
+        registration_entrypoint: "lib/integrations/registry.ts",
+        doc_section: "docs/EXTENDING.md#adding-an-integration-manifest",
+        introspection_tool: "list_integrations",
+        related_adrs: [
+            "ADR-0010"
+        ]
+    },
+    {
+        id: "brand_overlay",
+        name: "Brand / app identity",
+        summary: "Customize the app's name, description, and issue URL via environment " + "variables. No code change required. Used by downstream packages that " + "consume @circuitwall/jarela as an npm dep (e.g. brand overlays).",
+        registration_entrypoint: "NEXT_PUBLIC_APP_NAME, NEXT_PUBLIC_APP_DESCRIPTION, NEXT_PUBLIC_APP_ISSUE_URL",
+        doc_section: "docs/EXTENDING.md#branding-the-app",
+        related_adrs: [
+            "ADR-0005"
+        ]
+    }
+];
+const describeExtensionSurfacesTool = (0,tools/* tool */.z6)(async ()=>{
+    return JSON.stringify({
+        surfaces: SURFACES,
+        count: SURFACES.length,
+        guide_path: "docs/EXTENDING.md",
+        contract_paths: [
+            "lib/providers/types.ts (ModelProvider interface)",
+            "lib/tools/types.ts (OpenAITool, ToolContext, InvokeMessage)",
+            "lib/tools/registry.ts (registerTools, ToolCategory, Capability)",
+            "lib/mcp/registry.ts (RegistryEntry, applyVariables)"
+        ],
+        notes: [
+            "Each surface's introspection_tool, when set, lets you enumerate what's " + "currently registered. Call those when the user asks 'what's available' " + "rather than describing the type from memory.",
+            "A surface can have either a static example_path (for external plugins) or " + "no example (for surfaces wired entirely through the UI / DB). When in " + "doubt, the doc_section under EXTENDING.md is the canonical walk-through."
+        ]
+    });
+}, {
+    name: "describe_extension_surfaces",
+    description: "Return the curated catalog of every extension surface in this app — " + "providers, tools, MCP servers, harnesses, integration manifests, brand " + "overlay. Each entry has a registration entrypoint, an EXTENDING.md " + "section anchor, and (when applicable) the introspection tool that lists " + "what's currently registered. Read-only. Call this when the user asks " + "'how do I add an X?' or 'what can be customized?' so you can guide " + "them with the right files and docs.",
+    schema: schemas/* object */.Ik({})
+});
+(0,registry/* registerTools */.Fd)("Config", "read", [
+    describeExtensionSurfacesTool
 ]);
 
-// EXTERNAL MODULE: ./lib/agents/run-thread.ts + 17 modules
-var run_thread = __webpack_require__(8459);
-// EXTERNAL MODULE: ./lib/agents/stream-collector.ts
-var stream_collector = __webpack_require__(30685);
-// EXTERNAL MODULE: ./lib/agents/run-queue.ts
-var run_queue = __webpack_require__(3944);
-;// ./lib/tools/delegate.ts
+;// ./lib/tools/builtins.ts
+// Barrel of built-in tool modules. Each side-effect import triggers the
+// module's `registerTools(...)` call (see ./registry.ts). Adding a new
+// built-in tool: add the file under lib/tools/ and append a line here.
+//
+// Order matters only for deterministic logging / UI ordering — registry
+// preserves insertion order.
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+// EXTERNAL MODULE: ./lib/mcp/client.ts
+var client = __webpack_require__(30572);
+// EXTERNAL MODULE: ./lib/tools/external.ts
+var external = __webpack_require__(18689);
+// EXTERNAL MODULE: ./lib/stores/builtin-tools.ts
+var builtin_tools = __webpack_require__(56718);
+;// ./lib/tools/index.ts
+// Public tool surface for the agent runtime.
+//
+// Built-in tools register themselves at module load (see ./registry.ts and
+// ./builtins.ts). External tools live under JARELA_TOOLS_DIR and are
+// loaded per-call (hot-reload). MCP tools come from lib/mcp/client.ts.
+//
+// To add a new built-in tool:
+//   1. Copy lib/tools/template.ts to lib/tools/<name>.ts and implement it.
+//   2. Call `registerTools("<Category>", "<read|write|execute>", [yourTool, ...])` at the bottom.
+//   3. Add `import "./<name>";` to lib/tools/builtins.ts.
+//
+// That's it — no central array to update, no parallel category map.
+
+// Side-effect import: triggers registerTools() in every built-in module.
 
 
 
@@ -10578,438 +10731,700 @@ var run_queue = __webpack_require__(3944);
 
 
 
-function readDelegateContext(config) {
-    const threadId = config?.configurable?.thread_id;
-    if (!threadId) return null;
-    const thread = (0,threads/* getThread */.fG)(threadId);
-    if (!thread) return null;
-    const depth = config?.configurable?.delegation_depth ?? 0;
-    const ancestorsRaw = config?.configurable?.delegation_ancestors;
-    const ancestors = Array.isArray(ancestorsRaw) ? ancestorsRaw : [];
-    return {
-        parentAgentId: thread.agent_id,
-        depth,
-        ancestors
-    };
+// Live accessors — DO NOT snapshot at module-load time. Some tool modules
+// import back from this file (for `getAllToolsAsync` etc.) and would create
+// a circular import cycle: their `registerTools(...)` call runs AFTER this
+// module finishes evaluating, so any captured snapshot here would miss them
+// and they'd silently disappear from the agent's tool pool. Live calls dodge
+// the problem — by the time anyone INVOKES `getAllTools()` / etc., every
+// builtin has registered.
+function allBuiltins() {
+    return (0,registry/* registeredTools */.gN)();
 }
-function fail(code, message, extra = {}) {
-    return JSON.stringify({
-        ok: false,
-        error_code: code,
-        message,
-        ...extra
+function builtinNames() {
+    return (0,registry/* registeredNames */.nE)();
+}
+// Backwards-compatible export. Callers that import this Set get its current
+// contents at the moment they read it (a fresh Set each access). Internal
+// code prefers `builtinNames()` directly; this stays for external consumers
+// like the extensions API route.
+function getBuiltinToolNames() {
+    return builtinNames();
+}
+// Per-call recompute so files dropped in $JARELA_TOOLS_DIR are picked up
+// without restart. loadExternalTools cache-busts require() per file.
+function loadExternal() {
+    return (0,external/* loadExternalTools */.H)(builtinNames());
+}
+// Resolve a tool's origin from its name. Used to label rows in the tools
+// API and to route metadata lookups. Returns "mcp" for any name that is
+// neither a registered built-in nor an external (JARELA_TOOLS_DIR) tool —
+// matches today's behavior where MCP tools are everything else.
+function getToolSource(name) {
+    if (builtinNames().has(name)) return "builtin";
+    if (loadExternal().tools.some((t)=>t.name === name)) return "external";
+    return "mcp";
+}
+// Look up a tool's safety class. Built-in tools have a declared capability;
+// external (JARELA_TOOLS_DIR) and MCP tools default to "execute" — the
+// conservative choice until manifest-level overrides land (ADR-0038).
+// Source is derived internally so callers can't mis-tag external tools as
+// MCP (or vice versa).
+function getToolCapability(name) {
+    return (0,registry/* registeredCapability */.RL)(name) ?? "execute";
+}
+function getToolCategory(name) {
+    const builtin = (0,registry/* registeredCategory */.RY)(name);
+    if (builtin) return builtin;
+    const ext = loadExternal().categories.get(name);
+    if (ext) return ext;
+    return getToolSource(name) === "mcp" ? "MCP" : "Config";
+}
+function getToolGroup(name) {
+    const cat = getToolCategory(name);
+    if (cat === "MCP") return null;
+    return (0,registry/* registeredGroup */.Oi)(name) ?? null;
+}
+function applyPolicy(tools, policy) {
+    const allowSet = policy?.allow?.length ? new Set(policy.allow) : null;
+    const denySet = policy?.deny?.length ? new Set(policy.deny) : null;
+    return tools.filter((t)=>{
+        if (allowSet && !allowSet.has(t.name)) return false;
+        if (denySet && denySet.has(t.name)) return false;
+        return true;
     });
 }
-const delegateToAgentTool = (0,tools/* tool */.z6)(async ({ agent_id, task }, config)=>{
-    const ctx = readDelegateContext(config);
-    if (!ctx) return fail("no_context", "No agent context (missing thread_id)");
-    const parent = (0,agent_configs/* getAgentConfig */.mJ)(ctx.parentAgentId);
-    if (!parent) return fail("agent_not_found", `Parent agent "${ctx.parentAgentId}" not found`);
-    if (agent_id === ctx.parentAgentId) {
-        return fail("cycle_detected", "Cannot delegate to self");
-    }
-    if (ctx.ancestors.includes(agent_id)) {
-        return fail("cycle_detected", `Delegation cycle: ${agent_id} is already in the chain [${ctx.ancestors.join(" -> ")}]`);
+// Filter built-in tools whose category is disabled in the toggle store.
+// External + MCP tools are untouched (they have their own enable surfaces).
+function applyCategoryToggles(tools) {
+    const disabled = (0,builtin_tools/* disabledCategories */.HP)();
+    if (disabled.size === 0) return tools;
+    return tools.filter((t)=>{
+        const cat = (0,registry/* registeredCategory */.RY)(t.name);
+        if (!cat) return true; // not a built-in (or unregistered) → leave it
+        return !disabled.has(cat);
+    });
+}
+// Synchronous: built-in + external tools (no MCP). Used by GET /api/v1/tools
+// and any code path that can't await.
+function getAllTools(policy) {
+    return applyPolicy([
+        ...applyCategoryToggles(allBuiltins()),
+        ...loadExternal().tools
+    ], policy);
+}
+// Async: built-in + external + MCP tools.
+// Use this anywhere the agent might invoke tools (createReactAgent input).
+// External tools are loaded per-call (hot-reload). MCP tools are cached by
+// lib/mcp/client.ts and only re-resolved when the mcp_servers table changes.
+async function getAllToolsAsync(policy) {
+    let mcpTools = [];
+    try {
+        mcpTools = await (0,client/* getMcpTools */.a)();
+    } catch (err) {
+        console.error("[tools] MCP load failed, continuing with built-ins only:", err);
     }
-    if (ctx.depth >= run_thread/* MAX_DELEGATION_DEPTH */.Ye) {
-        return fail("depth_exceeded", `Maximum delegation depth (${run_thread/* MAX_DELEGATION_DEPTH */.Ye}) reached. Chain: [${[
-            ...ctx.ancestors,
-            ctx.parentAgentId
-        ].join(" -> ")}]`);
+    return applyPolicy([
+        ...applyCategoryToggles(allBuiltins()),
+        ...loadExternal().tools,
+        ...mcpTools
+    ], policy);
+}
+function toOpenAITools(tools) {
+    return tools.map((t)=>{
+        const oai = convertToOpenAITool(t);
+        return {
+            type: "function",
+            function: {
+                name: oai.function.name,
+                description: oai.function.description ?? "",
+                parameters: oai.function.parameters
+            }
+        };
+    });
+}
+async function executeTool(name, args, context = {}) {
+    let t = allBuiltins().find((x)=>x.name === name);
+    if (t) {
+        const cat = registeredCategory(name);
+        if (cat && disabledCategories().has(cat)) {
+            throw new Error(`Tool "${name}" is disabled (category ${cat} is turned off)`);
+        }
     }
-    const roster = (0,agent_configs/* parseDelegateTargets */.bg)(parent.delegate_targets);
-    if (!roster.includes(agent_id)) {
-        return fail("not_in_roster", `Agent "${agent_id}" is not in the delegate roster for "${parent.id}". Available: [${roster.join(", ") || "none"}]`);
+    if (!t) {
+        t = loadExternal().tools.find((x)=>x.name === name);
     }
-    const child = (0,agent_configs/* getAgentConfig */.mJ)(agent_id);
-    if (!child) return fail("agent_not_found", `Delegate agent "${agent_id}" not found`);
-    const childThread = (0,threads/* getOrCreateAgentThread */.xH)(agent_id);
-    const startedAt = Date.now();
-    try {
-        // Serialise on the child thread_id with every other entry point
-        // (HTTP POST, scheduler, watcher, bridge, sibling delegations) —
-        // see lib/agents/run-queue.ts. A delegate fired while the child is
-        // already running waits in the child's queue instead of racing the
-        // checkpoint store.
-        const queued = await (0,run_queue/* enqueueThreadRun */.M6)(childThread.thread_id, "delegate", async ()=>{
-            const prepared = await (0,run_thread/* prepareThreadRun */.fn)({
-                thread_id: childThread.thread_id,
-                message: task,
-                user_category: "delegation",
-                _delegation_depth: ctx.depth + 1,
-                _delegation_ancestors: [
-                    ...ctx.ancestors,
-                    ctx.parentAgentId
-                ]
-            });
-            const collected = await (0,stream_collector/* collectStream */.V)(prepared.stream);
-            if (collected.terminal !== "error") {
-                (0,run_thread/* persistAssistantMessage */._w)(childThread.thread_id, collected.assistantContent, collected.usedTools, collected.toolEvents, "delegation", collected.usage ?? null, prepared.context_snapshot ?? null, prepared.source_manifest ?? null);
-            }
-            return collected;
-        }).result;
-        const elapsed_ms = Date.now() - startedAt;
-        if (queued.terminal === "error") {
-            return fail("child_error", queued.errorMessage ?? "Child agent run failed", {
-                agent_id,
-                agent_name: child.name,
-                thread_id: childThread.thread_id
-            });
+    if (!t) throw new Error(`Unknown tool: ${name}`);
+    const config = context.thread_id ? {
+        configurable: {
+            thread_id: context.thread_id
+        }
+    } : {};
+    const result = await t.invoke(args, config);
+    // Tools return JSON strings per LangChain convention; parse back for downstream use.
+    if (typeof result === "string") {
+        try {
+            return JSON.parse(result);
+        } catch  {
+            return result;
         }
-        return JSON.stringify({
-            ok: true,
-            agent_id: child.id,
-            agent_name: child.name,
-            thread_id: childThread.thread_id,
-            depth: ctx.depth + 1,
-            result: queued.assistantContent.trim(),
-            used_tools: Array.from(new Set(queued.usedTools)),
-            elapsed_ms
-        });
-    } catch (err) {
-        return fail("child_error", err instanceof Error ? err.message : String(err), {
-            agent_id,
-            agent_name: child.name,
-            thread_id: childThread.thread_id
-        });
     }
-}, {
-    name: "delegate_to_agent",
-    description: "Hand a subtask to another agent that has specialized knowledge or tools you lack. " + "The delegate runs in its own thread; the user sees a tool card with the delegate's name, " + "the task you sent, and the delegate's final answer (plus a link to open the delegate's thread). " + "Only delegate when the target agent is genuinely better-suited — do NOT delegate trivial subtasks " + "you can handle yourself. Before calling this tool, tell the user in one sentence which agent you " + "are handing to and why. Available delegate ids are listed in the 'Available delegates' system " + "section; calling with an id outside that list will be refused.",
-    schema: schemas/* object */.Ik({
-        agent_id: schemas/* string */.Yj().describe("The id of the delegate agent. Must appear in the 'Available delegates' list in your system prompt."),
-        task: schemas/* string */.Yj().min(1).describe("A self-contained task description for the delegate. Include all context the delegate needs — " + "the delegate does NOT see your conversation history with the user, only this task string.")
-    })
-});
-(0,registry/* registerTools */.Fd)("Agent", "execute", [
-    delegateToAgentTool
-]);
-
-// EXTERNAL MODULE: ./lib/env/schema.ts
-var schema = __webpack_require__(69353);
-// EXTERNAL MODULE: ./lib/env/overrides.ts
-var overrides = __webpack_require__(86037);
-;// ./lib/tools/system_config.ts
-// Agent-callable knobs for the JARELA_* override store.
-//
-// Both tools are gated by the per-var schema flag `agentWritable` —
-// agents cannot write to anything not flagged true (defaults to false).
-// `restart_server` is only wired here; agents still need the tool to be
-// in their selected toolset to call it (default agents do not include
-// these).
-//
-// Use cases the user explicitly asked to support:
-//   - "agent, lower the run idle timeout to 30s and restart"
-//   - "agent, switch the log level to debug for the next hour"
-//
-// We surface the schema's tier/restart flags in the response so the
-// agent's reply can tell the user what changed and whether a restart
-// fired (or is needed but skipped).
-
-
+    return result;
+}
+// One-shot startup loader. Call from instrumentation.ts so external tools
+// load + log their status at boot rather than lazily on first agent turn.
+let _initialized = false;
+function initTools() {
+    const toolsDir = getToolsDir();
+    const result = loadExternal();
+    const summary = {
+        builtinCount: allBuiltins().length,
+        externalCount: result.tools.length,
+        errors: result.errors,
+        toolsDir
+    };
+    if (!_initialized) {
+        console.info(`[tools] ${summary.builtinCount} built-in tool(s) registered; ` + `${summary.externalCount} external tool(s) loaded from ${toolsDir}`);
+        for (const err of summary.errors){
+            console.error(`[tools] external ${err.file}: ${err.error}`);
+        }
+        _initialized = true;
+    }
+    return summary;
+}
 
 
+/***/ }),
 
+/***/ 45552:
+/***/ ((__unused_webpack_module, __webpack_exports__, __webpack_require__) => {
 
-const setEnvSchema = schemas/* object */.Ik({
-    name: schemas/* string */.Yj().describe("Env var name. Must be a JARELA_* knob the schema flags as agent-writable; otherwise the call returns code=forbidden."),
-    value: schemas/* string */.Yj().nullable().describe("New value as a string (numbers/bools come as their string form: '5000' / 'true'). Pass null to clear the override and revert to the default."),
-    reason: schemas/* string */.Yj().optional().describe("Short note explaining the change — logged for postmortems.")
-});
-const setEnvVar = (0,tools/* tool */.z6)(async ({ name, value, reason })=>{
-    const def = (0,schema/* envSchemaByName */.Db)().get(name);
-    if (!def) {
-        return JSON.stringify({
-            ok: false,
-            code: "unknown_var",
-            error: `unknown env var: ${name}`,
-            hint: "List the schema with /api/v1/env (GET) before guessing names. Only JARELA_* keys defined in lib/env/schema.ts are accepted."
-        });
+/* harmony export */ __webpack_require__.d(__webpack_exports__, {
+/* harmony export */   YY: () => (/* binding */ listKnownModels),
+/* harmony export */   pN: () => (/* binding */ getKnownMaxOutputTokens),
+/* harmony export */   zJ: () => (/* binding */ getKnownContextLength)
+/* harmony export */ });
+/* unused harmony export getKnownModelLimits */
+// Web-sourced fallback context-window sizes per (provider, model_id).
+// Used when the live `/models` endpoint doesn't report `context_length`
+// (OpenAI's catalog and GitHub Copilot's catalog both omit it) AND the
+// user hasn't pinned `context_window_tokens` on the model config.
+//
+// Resolution order at runtime is:
+//   1. user-set `params.context_window_tokens` (explicit override)
+//   2. live API value via `listModels()` / catalog cache (when populated)
+//   3. this static fallback (this file)
+//   4. `DEFAULT_CONTEXT_WINDOW_TOKENS` in lib/agents/context-budget.ts
+//
+// Verified from each vendor's public docs as of 2026-06. Bump when vendors
+// publish new families.
+const ANTHROPIC = {
+    "claude-opus-4-7": {
+        context_length: 1000000,
+        max_output_tokens: 8192
+    },
+    "claude-opus-4": {
+        context_length: 200000,
+        max_output_tokens: 8192
+    },
+    "claude-sonnet-4-6": {
+        context_length: 200000,
+        max_output_tokens: 8192
+    },
+    "claude-sonnet-4": {
+        context_length: 200000,
+        max_output_tokens: 8192
+    },
+    "claude-3.7-sonnet": {
+        context_length: 200000,
+        max_output_tokens: 8192
+    },
+    "claude-3-7-sonnet": {
+        context_length: 200000,
+        max_output_tokens: 8192
+    },
+    "claude-3-5-sonnet": {
+        context_length: 200000,
+        max_output_tokens: 8192
+    },
+    "claude-3-5-haiku": {
+        context_length: 200000,
+        max_output_tokens: 8192
+    },
+    "claude-haiku-4-5": {
+        context_length: 200000,
+        max_output_tokens: 4096
+    },
+    "claude-haiku-4": {
+        context_length: 200000,
+        max_output_tokens: 4096
+    },
+    "claude-3-opus": {
+        context_length: 200000,
+        max_output_tokens: 4096
     }
-    if (!def.agentWritable) {
-        return JSON.stringify({
-            ok: false,
-            code: "forbidden",
-            error: `${name} is not flagged agentWritable in the schema`,
-            hint: "Agents cannot edit infra knobs (port, hostname, dataDir, …). Tell the user to change this from the Environment panel themselves."
-        });
+};
+const GEMINI = {
+    "gemini-2.5-pro": {
+        context_length: 1048576,
+        max_output_tokens: 65536
+    },
+    "gemini-2.5-flash": {
+        context_length: 1048576,
+        max_output_tokens: 65536
+    },
+    "gemini-2.0-flash-lite": {
+        context_length: 1048576,
+        max_output_tokens: 8192
+    },
+    "gemini-2.0-flash": {
+        context_length: 1048576,
+        max_output_tokens: 8192
+    },
+    "gemini-1.5-pro": {
+        context_length: 2097152,
+        max_output_tokens: 8192
+    },
+    "gemini-1.5-flash": {
+        context_length: 1048576,
+        max_output_tokens: 8192
     }
-    if (value !== null) {
-        const verr = (0,overrides/* validateForSchema */.xg)(def, value);
-        if (verr) {
-            return JSON.stringify({
-                ok: false,
-                code: "invalid_value",
-                error: `${name}: ${verr}`,
-                hint: "Re-issue the call with a value that matches the schema's type/min/max/enum."
-            });
+};
+const OPENAI = {
+    "gpt-5-mini": {
+        context_length: 400000,
+        max_output_tokens: 128000
+    },
+    "gpt-5": {
+        context_length: 400000,
+        max_output_tokens: 128000
+    },
+    "gpt-4.1-mini": {
+        context_length: 1047576,
+        max_output_tokens: 32768
+    },
+    "gpt-4.1": {
+        context_length: 1047576,
+        max_output_tokens: 32768
+    },
+    "gpt-4o-mini": {
+        context_length: 128000,
+        max_output_tokens: 16384
+    },
+    "gpt-4o": {
+        context_length: 128000,
+        max_output_tokens: 16384
+    },
+    "gpt-4-turbo": {
+        context_length: 128000,
+        max_output_tokens: 4096
+    },
+    "gpt-4": {
+        context_length: 8192,
+        max_output_tokens: 4096
+    },
+    "gpt-3.5-turbo": {
+        context_length: 16385,
+        max_output_tokens: 4096
+    },
+    "chatgpt-4o": {
+        context_length: 128000,
+        max_output_tokens: 16384
+    },
+    "o4-mini": {
+        context_length: 200000,
+        max_output_tokens: 100000
+    },
+    "o3-mini": {
+        context_length: 200000,
+        max_output_tokens: 100000
+    },
+    "o3": {
+        context_length: 200000,
+        max_output_tokens: 100000
+    },
+    "o1-mini": {
+        context_length: 128000,
+        max_output_tokens: 65536
+    },
+    "o1": {
+        context_length: 200000,
+        max_output_tokens: 100000
+    }
+};
+const DEEPSEEK = {
+    "deepseek-v4-flash": {
+        context_length: 65536,
+        max_output_tokens: 8192
+    },
+    "deepseek-v4-pro": {
+        context_length: 65536,
+        max_output_tokens: 8192
+    },
+    "deepseek-chat": {
+        context_length: 65536,
+        max_output_tokens: 8192
+    },
+    "deepseek-reasoner": {
+        context_length: 65536,
+        max_output_tokens: 8192
+    }
+};
+// GitHub Copilot proxies vendor models — sometimes under a transformed id
+// (e.g. `Github-Opus4.6`, `copilot-claude-3.5-sonnet`). Strip the proxy
+// prefix and dispatch to the underlying vendor table.
+function resolveCopilot(model_id) {
+    const normalized = model_id.replace(/^(?:Github-|copilot-)/i, "").toLowerCase();
+    // Canonicalise a few proxy-specific spellings.
+    const canon = normalized.replace(/^opus4\.6/, "claude-opus-4-7").replace(/^opus4/, "claude-opus-4").replace(/^sonnet4\.6/, "claude-sonnet-4-6").replace(/^sonnet4/, "claude-sonnet-4").replace(/^haiku4\.5/, "claude-haiku-4-5");
+    if (canon.startsWith("claude")) return matchPrefix(ANTHROPIC, canon);
+    if (canon.startsWith("gemini")) return matchPrefix(GEMINI, canon);
+    if (canon.startsWith("gpt") || /^o[134](?:-|$)/.test(canon)) return matchPrefix(OPENAI, canon);
+    return null;
+}
+function matchPrefix(table, id) {
+    const lower = id.toLowerCase();
+    const exact = table[lower];
+    if (exact) return exact;
+    // Longest-prefix match so `gpt-4o-2024-08-06` resolves to `gpt-4o` and
+    // not `gpt-4` (which would also prefix-match).
+    let best = null;
+    for (const [k, v] of Object.entries(table)){
+        if (lower.startsWith(k) && (!best || k.length > best.key.length)) {
+            best = {
+                key: k,
+                v
+            };
         }
     }
-    await (0,overrides/* patchOverride */.PJ)(name, value);
-    if (value === null) delete process.env[name];
-    else process.env[name] = value;
-    (0,config/* resetConfigCache */.y)();
-    return JSON.stringify({
-        ok: true,
-        name,
-        value,
-        requiresRestart: def.requiresRestart,
-        reason: reason ?? null,
-        hint: def.requiresRestart ? "Override persisted. The change requires a server restart — call restart_server to apply, OR tell the user to click Restart in the Environment panel." : "Override persisted and is in effect immediately. No restart needed."
-    });
-}, {
-    name: "set_env_var",
-    description: "Set or unset a JARELA_* runtime override. Only schema-flagged agent-writable knobs are accepted; everything else returns code=forbidden. Use this when the user explicitly asks to change a runtime setting (e.g. log level, retry budget). Pair with restart_server when the result reports requiresRestart=true.",
-    schema: setEnvSchema
-});
-const restartSchema = schemas/* object */.Ik({
-    reason: schemas/* string */.Yj().min(1).describe("Why the restart is needed (logged + included in /api/v1/system/restart payload). Required.")
-});
-const restartServer = (0,tools/* tool */.z6)(async ({ reason })=>{
-    // Use the same endpoint the UI hits. Doing it via fetch instead of
-    // calling process.exit() directly here means the request response
-    // flushes back to the agent (and through it, the user) before the
-    // process tears down.
-    try {
-        const port = Number(process.env.JARELA_PORT ?? process.env.PORT ?? 4312);
-        const host = process.env.JARELA_HOSTNAME ?? process.env.HOSTNAME ?? "127.0.0.1";
-        const r = await fetch(`http://${host}:${port}/api/v1/system/restart`, {
-            method: "POST",
-            headers: {
-                "Content-Type": "application/json"
-            },
-            body: JSON.stringify({
-                reason: `[agent] ${reason}`
-            })
-        });
-        const body = await r.json().catch(()=>({}));
-        return JSON.stringify({
-            ok: r.ok,
-            status: r.status,
-            reason,
-            hint: body.hint ?? "Restart request sent. The supervisor will relaunch the process; the user's UI will reconnect automatically."
-        });
-    } catch (e) {
-        return JSON.stringify({
-            ok: false,
-            code: "restart_failed",
-            error: e.message,
-            hint: "Could not reach /api/v1/system/restart from inside the same process. Tell the user they need to restart manually."
-        });
+    return best?.v ?? null;
+}
+function getKnownModelLimits(provider, model_id) {
+    if (!provider || !model_id) return null;
+    switch(provider){
+        case "anthropic":
+            return matchPrefix(ANTHROPIC, model_id);
+        case "gemini":
+            return matchPrefix(GEMINI, model_id);
+        case "openai":
+            return matchPrefix(OPENAI, model_id);
+        case "deepseek":
+            return matchPrefix(DEEPSEEK, model_id);
+        case "github-copilot":
+            return resolveCopilot(model_id);
+        default:
+            return null;
+    }
+}
+function getKnownContextLength(provider, model_id) {
+    return getKnownModelLimits(provider, model_id)?.context_length ?? null;
+}
+function getKnownMaxOutputTokens(provider, model_id) {
+    return getKnownModelLimits(provider, model_id)?.max_output_tokens ?? null;
+}
+// Flat catalog snapshot for one provider — used by introspection tools so
+// the agent can enumerate what's known statically. Returns [] for providers
+// without a static table (e.g. `langchain`, `mock`, externals).
+function listKnownModels(provider) {
+    let table = null;
+    switch(provider){
+        case "anthropic":
+            table = ANTHROPIC;
+            break;
+        case "gemini":
+            table = GEMINI;
+            break;
+        case "openai":
+            table = OPENAI;
+            break;
+        case "deepseek":
+            table = DEEPSEEK;
+            break;
+        default:
+            return [];
     }
-}, {
-    name: "restart_server",
-    description: "Restart the Jarela server. Only call this when the user explicitly asks for a restart, OR when set_env_var returned requiresRestart=true and the user agreed. The UI reconnects automatically once the supervisor (launchd/systemd/Task Scheduler) relaunches.",
-    schema: restartSchema
-});
-(0,registry/* registerTools */.Fd)("Config", "execute", [
-    setEnvVar,
-    restartServer
-]);
-
-;// ./lib/tools/builtins.ts
-// Barrel of built-in tool modules. Each side-effect import triggers the
-// module's `registerTools(...)` call (see ./registry.ts). Adding a new
-// built-in tool: add the file under lib/tools/ and append a line here.
-//
-// Order matters only for deterministic logging / UI ordering — registry
-// preserves insertion order.
-
-
-
-
-
-
-
-
-
+    return Object.entries(table).map(([model_id, l])=>({
+            model_id,
+            context_length: l.context_length,
+            max_output_tokens: l.max_output_tokens ?? null
+        }));
+}
 
 
+/***/ }),
 
+/***/ 49899:
+/***/ ((__unused_webpack_module, __webpack_exports__, __webpack_require__) => {
 
+/* harmony export */ __webpack_require__.d(__webpack_exports__, {
+/* harmony export */   FR: () => (/* binding */ defaultToolStats),
+/* harmony export */   W7: () => (/* binding */ getToolStatsMap),
+/* harmony export */   _r: () => (/* binding */ listToolStats),
+/* harmony export */   hA: () => (/* binding */ recordToolUsage),
+/* harmony export */   jg: () => (/* binding */ toStats)
+/* harmony export */ });
+/* unused harmony export summarizeToolUsage */
+/* harmony import */ var _lib_db__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(46);
 
+const now = ()=>new Date().toISOString();
+const UPSERT_SQL = `
+  INSERT INTO tool_stats
+    (tool_name, call_count, success_count, error_count, used_count, last_called_at, updated_at)
+  VALUES
+    (?, ?, ?, ?, ?, ?, ?)
+  ON CONFLICT(tool_name) DO UPDATE SET
+    call_count = tool_stats.call_count + excluded.call_count,
+    success_count = tool_stats.success_count + excluded.success_count,
+    error_count = tool_stats.error_count + excluded.error_count,
+    used_count = tool_stats.used_count + excluded.used_count,
+    last_called_at = COALESCE(excluded.last_called_at, tool_stats.last_called_at),
+    updated_at = excluded.updated_at
+`;
+function recordToolUsage(toolEvents, assistantContent) {
+    const deltas = summarizeToolUsage(toolEvents, assistantContent);
+    if (deltas.length === 0) return;
+    const db = (0,_lib_db__WEBPACK_IMPORTED_MODULE_0__/* .getDb */ .Lf)();
+    const stamp = now();
+    const stmt = db.prepare(UPSERT_SQL);
+    db.exec("BEGIN");
+    try {
+        for (const row of deltas){
+            stmt.run(row.name, row.calls, row.successes, row.errors, row.used, row.calls > 0 ? stamp : null, stamp);
+        }
+        db.exec("COMMIT");
+    } catch (err) {
+        try {
+            db.exec("ROLLBACK");
+        } catch  {}
+        throw err;
+    }
+}
+function listToolStats() {
+    return (0,_lib_db__WEBPACK_IMPORTED_MODULE_0__/* .getDb */ .Lf)().prepare(`SELECT tool_name, call_count, success_count, error_count, used_count, last_called_at, updated_at
+         FROM tool_stats`).all();
+}
+function getToolStatsMap(names) {
+    const rows = names && names.length > 0 ? (0,_lib_db__WEBPACK_IMPORTED_MODULE_0__/* .getDb */ .Lf)().prepare(`SELECT tool_name, call_count, success_count, error_count, used_count, last_called_at, updated_at
+           FROM tool_stats
+          WHERE tool_name IN (${names.map(()=>"?").join(",")})`).all(...names) : listToolStats();
+    const out = new Map();
+    for (const row of rows)out.set(row.tool_name, toStats(row));
+    return out;
+}
+function defaultToolStats() {
+    return {
+        call_count: 0,
+        success_count: 0,
+        error_count: 0,
+        used_count: 0,
+        success_rate: 1,
+        usefulness_rate: 1,
+        score: 1,
+        never_used: true,
+        last_called_at: null
+    };
+}
+function toStats(row) {
+    const calls = Math.max(0, row.call_count);
+    if (calls === 0) return defaultToolStats();
+    const successRate = clamp01(row.success_count / calls);
+    const usefulnessRate = clamp01(row.used_count / calls);
+    const score = clamp01(successRate * 0.65 + usefulnessRate * 0.35);
+    return {
+        call_count: calls,
+        success_count: row.success_count,
+        error_count: row.error_count,
+        used_count: row.used_count,
+        success_rate: successRate,
+        usefulness_rate: usefulnessRate,
+        score,
+        never_used: false,
+        last_called_at: row.last_called_at
+    };
+}
+function summarizeToolUsage(toolEvents, assistantContent) {
+    const byId = new Map();
+    const assistantTerms = normalizeText(assistantContent);
+    for (const ev of toolEvents){
+        if (!ev.name) continue;
+        const key = ev.id || `${ev.phase}:${ev.name}`;
+        const existing = byId.get(key) ?? {
+            name: ev.name,
+            successful: false,
+            used: false
+        };
+        if (ev.phase === "call") {
+            existing.name = ev.name;
+        } else if (ev.phase === "result") {
+            const successful = !isErrorPayload(ev.payload);
+            existing.successful = successful;
+            existing.used = successful && payloadLooksUsed(ev.payload, assistantTerms);
+        }
+        byId.set(key, existing);
+    }
+    const totals = new Map();
+    for (const ev of toolEvents){
+        if (ev.phase !== "call" || !ev.name) continue;
+        const key = ev.id || `${ev.phase}:${ev.name}`;
+        const outcome = byId.get(key);
+        const next = totals.get(ev.name) ?? {
+            name: ev.name,
+            calls: 0,
+            successes: 0,
+            errors: 0,
+            used: 0
+        };
+        next.calls += 1;
+        if (outcome?.successful) next.successes += 1;
+        else next.errors += 1;
+        if (outcome?.used) next.used += 1;
+        totals.set(ev.name, next);
+    }
+    return [
+        ...totals.values()
+    ];
+}
+function payloadLooksUsed(payload, assistantTerms) {
+    if (assistantTerms.size === 0) return false;
+    const candidates = extractPayloadTerms(payload);
+    if (candidates.length === 0) return false;
+    let matched = 0;
+    for (const term of candidates){
+        if (assistantTerms.has(term)) matched += 1;
+        if (matched >= 2) return true;
+    }
+    return false;
+}
+function extractPayloadTerms(payload) {
+    const raw = stringifyPayload(payload);
+    if (!raw) return [];
+    const unique = new Set();
+    for (const token of raw.toLowerCase().split(/[^a-z0-9_./:-]+/)){
+        if (token.length < 4) continue;
+        if (/^\d+$/.test(token) && token.length < 6) continue;
+        unique.add(token);
+        if (unique.size >= 24) break;
+    }
+    return [
+        ...unique
+    ];
+}
+function stringifyPayload(payload) {
+    if (typeof payload === "string") return payload;
+    try {
+        return JSON.stringify(payload);
+    } catch  {
+        return "";
+    }
+}
+function normalizeText(text) {
+    const out = new Set();
+    for (const token of text.toLowerCase().split(/[^a-z0-9_./:-]+/)){
+        if (token.length < 4) continue;
+        out.add(token);
+    }
+    return out;
+}
+function isErrorPayload(payload) {
+    if (typeof payload === "string") return /\berror\b|\bfailed\b|\bexception\b/i.test(payload);
+    if (!payload || typeof payload !== "object") return false;
+    if ("error" in payload || "errors" in payload) return true;
+    const status = "status" in payload ? payload.status : undefined;
+    if (typeof status === "string" && /error|failed/i.test(status)) return true;
+    return false;
+}
+function clamp01(value) {
+    return Math.max(0, Math.min(1, value));
+}
 
 
+/***/ }),
 
+/***/ 52907:
+/***/ ((__unused_webpack_module, __webpack_exports__, __webpack_require__) => {
 
+/* harmony export */ __webpack_require__.d(__webpack_exports__, {
+/* harmony export */   LK: () => (/* binding */ writeBinaryFile),
+/* harmony export */   Uc: () => (/* binding */ fileAbsPath)
+/* harmony export */ });
+/* unused harmony exports FILES_DIR, isSafeFileName */
+/* harmony import */ var node_fs__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(73024);
+/* harmony import */ var node_fs__WEBPACK_IMPORTED_MODULE_0___default = /*#__PURE__*/__webpack_require__.n(node_fs__WEBPACK_IMPORTED_MODULE_0__);
+/* harmony import */ var node_path__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(76760);
+/* harmony import */ var node_path__WEBPACK_IMPORTED_MODULE_1___default = /*#__PURE__*/__webpack_require__.n(node_path__WEBPACK_IMPORTED_MODULE_1__);
+/* harmony import */ var _lib_db_data_dir__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(57477);
+// Local file store for binary artifacts produced by tools (generated images,
+// downloads, etc.). Files live under ~/.jarela/files/ and are served by
+// GET /api/v1/files/[name]. The tool returns a relative URL the chat
+// renderer can embed as <img src="/api/v1/files/...">.
 
 
 
+const FILES_DIR = (0,node_path__WEBPACK_IMPORTED_MODULE_1__.join)((0,_lib_db_data_dir__WEBPACK_IMPORTED_MODULE_2__/* .getDataDir */ .o)(), "files");
+(0,node_fs__WEBPACK_IMPORTED_MODULE_0__.mkdirSync)(FILES_DIR, {
+    recursive: true
+});
+// Name must be a single path segment with no separators or "..". Callers
+// generate names from randomUUID() so this is mostly defense-in-depth.
+const SAFE_NAME = /^[A-Za-z0-9._-]+$/;
+function isSafeFileName(name) {
+    return SAFE_NAME.test(name) && !name.includes("..");
+}
+function fileAbsPath(name) {
+    if (!isSafeFileName(name)) return null;
+    return (0,node_path__WEBPACK_IMPORTED_MODULE_1__.join)(FILES_DIR, name);
+}
+function writeBinaryFile(name, data) {
+    if (!isSafeFileName(name)) throw new Error(`unsafe file name: ${name}`);
+    const p = (0,node_path__WEBPACK_IMPORTED_MODULE_1__.join)(FILES_DIR, name);
+    (0,node_fs__WEBPACK_IMPORTED_MODULE_0__.writeFileSync)(p, data);
+    return p;
+}
 
 
+/***/ }),
 
+/***/ 56718:
+/***/ ((__unused_webpack_module, __webpack_exports__, __webpack_require__) => {
 
-// EXTERNAL MODULE: ./lib/mcp/client.ts
-var client = __webpack_require__(30572);
-// EXTERNAL MODULE: ./lib/tools/external.ts
-var external = __webpack_require__(18689);
-// EXTERNAL MODULE: ./lib/stores/builtin-tools.ts
-var builtin_tools = __webpack_require__(56718);
-;// ./lib/tools/index.ts
-// Public tool surface for the agent runtime.
-//
-// Built-in tools register themselves at module load (see ./registry.ts and
-// ./builtins.ts). External tools live under JARELA_TOOLS_DIR and are
-// loaded per-call (hot-reload). MCP tools come from lib/mcp/client.ts.
+/* harmony export */ __webpack_require__.d(__webpack_exports__, {
+/* harmony export */   HP: () => (/* binding */ disabledCategories),
+/* harmony export */   MD: () => (/* binding */ setCategoryEnabled)
+/* harmony export */ });
+/* unused harmony exports isCategoryEnabled, listCategoryStates */
+/* harmony import */ var _lib_db__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(46);
+// Built-in tool category toggles.
 //
-// To add a new built-in tool:
-//   1. Copy lib/tools/template.ts to lib/tools/<name>.ts and implement it.
-//   2. Call `registerTools("<Category>", "<read|write|execute>", [yourTool, ...])` at the bottom.
-//   3. Add `import "./<name>";` to lib/tools/builtins.ts.
+// A category is "enabled" unless an explicit row in `builtin_tool_categories`
+// says otherwise. Default-enabled semantics mean upgrading installs keep
+// every category working with zero migration work.
 //
-// That's it — no central array to update, no parallel category map.
-
-// Side-effect import: triggers registerTools() in every built-in module.
-
-
-
-
-
-
-
+// Disabled categories are filtered at three layers:
+//   - GET /api/v1/tools (so the agent editor never offers them as permissions)
+//   - getAllTools / getAllToolsAsync (so the agent runtime can't see them)
+//   - executeTool (defense in depth, blocks stale agent configs)
 
-const ALL_BUILTINS = (0,registry/* registeredTools */.gN)();
-const BUILTIN_TOOL_NAMES = (0,registry/* registeredNames */.nE)();
-// Per-call recompute so files dropped in $JARELA_TOOLS_DIR are picked up
-// without restart. loadExternalTools cache-busts require() per file.
-function loadExternal() {
-    return (0,external/* loadExternalTools */.H)(BUILTIN_TOOL_NAMES);
-}
-// Resolve a tool's origin from its name. Used to label rows in the tools
-// API and to route metadata lookups. Returns "mcp" for any name that is
-// neither a registered built-in nor an external (JARELA_TOOLS_DIR) tool —
-// matches today's behavior where MCP tools are everything else.
-function getToolSource(name) {
-    if (BUILTIN_TOOL_NAMES.has(name)) return "builtin";
-    if (loadExternal().tools.some((t)=>t.name === name)) return "external";
-    return "mcp";
-}
-// Look up a tool's safety class. Built-in tools have a declared capability;
-// external (JARELA_TOOLS_DIR) and MCP tools default to "execute" — the
-// conservative choice until manifest-level overrides land (ADR-0038).
-// Source is derived internally so callers can't mis-tag external tools as
-// MCP (or vice versa).
-function getToolCapability(name) {
-    return (0,registry/* registeredCapability */.RL)(name) ?? "execute";
-}
-function getToolCategory(name) {
-    const builtin = (0,registry/* registeredCategory */.RY)(name);
-    if (builtin) return builtin;
-    const ext = loadExternal().categories.get(name);
-    if (ext) return ext;
-    return getToolSource(name) === "mcp" ? "MCP" : "Config";
-}
-function getToolGroup(name) {
-    const cat = getToolCategory(name);
-    if (cat === "MCP") return null;
-    return (0,registry/* registeredGroup */.Oi)(name) ?? null;
-}
-function applyPolicy(tools, policy) {
-    const allowSet = policy?.allow?.length ? new Set(policy.allow) : null;
-    const denySet = policy?.deny?.length ? new Set(policy.deny) : null;
-    return tools.filter((t)=>{
-        if (allowSet && !allowSet.has(t.name)) return false;
-        if (denySet && denySet.has(t.name)) return false;
-        return true;
-    });
-}
-// Filter built-in tools whose category is disabled in the toggle store.
-// External + MCP tools are untouched (they have their own enable surfaces).
-function applyCategoryToggles(tools) {
-    const disabled = (0,builtin_tools/* disabledCategories */.HP)();
-    if (disabled.size === 0) return tools;
-    return tools.filter((t)=>{
-        const cat = (0,registry/* registeredCategory */.RY)(t.name);
-        if (!cat) return true; // not a built-in (or unregistered) → leave it
-        return !disabled.has(cat);
-    });
-}
-// Synchronous: built-in + external tools (no MCP). Used by GET /api/v1/tools
-// and any code path that can't await.
-function getAllTools(policy) {
-    return applyPolicy([
-        ...applyCategoryToggles(ALL_BUILTINS),
-        ...loadExternal().tools
-    ], policy);
-}
-// Async: built-in + external + MCP tools.
-// Use this anywhere the agent might invoke tools (createReactAgent input).
-// External tools are loaded per-call (hot-reload). MCP tools are cached by
-// lib/mcp/client.ts and only re-resolved when the mcp_servers table changes.
-async function getAllToolsAsync(policy) {
-    let mcpTools = [];
-    try {
-        mcpTools = await (0,client/* getMcpTools */.a)();
-    } catch (err) {
-        console.error("[tools] MCP load failed, continuing with built-ins only:", err);
-    }
-    return applyPolicy([
-        ...applyCategoryToggles(ALL_BUILTINS),
-        ...loadExternal().tools,
-        ...mcpTools
-    ], policy);
+const now = ()=>new Date().toISOString();
+function isCategoryEnabled(category) {
+    const row = getDb().prepare("SELECT enabled FROM builtin_tool_categories WHERE category=?").get(category);
+    return row ? row.enabled === 1 : true;
 }
-function toOpenAITools(tools) {
-    return tools.map((t)=>{
-        const oai = convertToOpenAITool(t);
-        return {
-            type: "function",
-            function: {
-                name: oai.function.name,
-                description: oai.function.description ?? "",
-                parameters: oai.function.parameters
-            }
-        };
-    });
+function disabledCategories() {
+    const rows = (0,_lib_db__WEBPACK_IMPORTED_MODULE_0__/* .getDb */ .Lf)().prepare("SELECT category FROM builtin_tool_categories WHERE enabled=0").all();
+    return new Set(rows.map((r)=>r.category));
 }
-async function executeTool(name, args, context = {}) {
-    let t = ALL_BUILTINS.find((x)=>x.name === name);
-    if (t) {
-        const cat = registeredCategory(name);
-        if (cat && disabledCategories().has(cat)) {
-            throw new Error(`Tool "${name}" is disabled (category ${cat} is turned off)`);
-        }
-    }
-    if (!t) {
-        t = loadExternal().tools.find((x)=>x.name === name);
-    }
-    if (!t) throw new Error(`Unknown tool: ${name}`);
-    const config = context.thread_id ? {
-        configurable: {
-            thread_id: context.thread_id
-        }
-    } : {};
-    const result = await t.invoke(args, config);
-    // Tools return JSON strings per LangChain convention; parse back for downstream use.
-    if (typeof result === "string") {
-        try {
-            return JSON.parse(result);
-        } catch  {
-            return result;
-        }
-    }
-    return result;
+function listCategoryStates() {
+    const rows = getDb().prepare("SELECT category, enabled, updated_at FROM builtin_tool_categories").all();
+    return rows.map((r)=>({
+            category: r.category,
+            enabled: r.enabled === 1,
+            updated_at: r.updated_at
+        }));
 }
-// One-shot startup loader. Call from instrumentation.ts so external tools
-// load + log their status at boot rather than lazily on first agent turn.
-let _initialized = false;
-function initTools() {
-    const toolsDir = getToolsDir();
-    const result = loadExternal();
-    const summary = {
-        builtinCount: ALL_BUILTINS.length,
-        externalCount: result.tools.length,
-        errors: result.errors,
-        toolsDir
-    };
-    if (!_initialized) {
-        console.info(`[tools] ${summary.builtinCount} built-in tool(s) registered; ` + `${summary.externalCount} external tool(s) loaded from ${toolsDir}`);
-        for (const err of summary.errors){
-            console.error(`[tools] external ${err.file}: ${err.error}`);
-        }
-        _initialized = true;
-    }
-    return summary;
+function setCategoryEnabled(category, enabled) {
+    (0,_lib_db__WEBPACK_IMPORTED_MODULE_0__/* .getDb */ .Lf)().prepare(`INSERT INTO builtin_tool_categories (category, enabled, updated_at)
+       VALUES (?, ?, ?)
+       ON CONFLICT(category) DO UPDATE SET enabled=excluded.enabled, updated_at=excluded.updated_at`).run(category, enabled ? 1 : 0, now());
 }