@circuitwall/jarela 2.3.0 → 2.5.0

package/.next/standalone/.next/server/chunks/9304.js

@@ -1227,12 +1227,13 @@ function drainQueuedBoundary(threadId) {
 function runBoundaryCompaction(threadId, boundarySeq, options) {
     const baseThread = (0,threads/* getThread */.fG)(threadId);
     const basePinSeq = baseThread?.hot_since_seq ?? null;
+    const baseLock = baseThread?.auto_boundary_locked_until_msg_count ?? 0;
     void (0,thread_compaction_state/* runTrackedCompaction */.PL)(threadId, "auto", boundarySeq, async (attempt)=>{
         await Promise.resolve();
-        await commitBoundaryCompaction(threadId, boundarySeq, basePinSeq, options, attempt);
+        await commitBoundaryCompaction(threadId, boundarySeq, basePinSeq, baseLock, options, attempt);
     }).catch((err)=>console.warn(`[context-boundary:auto] compaction failed thread=${threadId}: ${String(err)}`)).finally(()=>drainQueuedBoundary(threadId));
 }
-async function commitBoundaryCompaction(threadId, boundarySeq, basePinSeq, options, attempt) {
+async function commitBoundaryCompaction(threadId, boundarySeq, basePinSeq, baseLock, options, attempt) {
     const committed = await compactThreadWarmContext(threadId, boundarySeq, {
         expectedHotSinceSeq: basePinSeq,
         alignTopicBoundary: true,
@@ -1240,7 +1241,18 @@ async function commitBoundaryCompaction(threadId, boundarySeq, basePinSeq, optio
         ...options,
         attempt
     });
-    if (!committed) return;
+    if (!committed) {
+        // A pass that resolved to no change (the active topic still starts at the
+        // current pin) must not be retried on every following turn either. Skip
+        // it when the boundary or lock changed mid-pass (e.g. the user cleared or
+        // moved the boundary): that newer state wins over this stale pass.
+        const lockUntil = options.autoBoundaryLockedUntilMessageCount;
+        const current = (0,threads/* getThread */.fG)(threadId);
+        if (lockUntil !== undefined && current && (current.hot_since_seq ?? null) === basePinSeq && (current.auto_boundary_locked_until_msg_count ?? 0) === baseLock && lockUntil > baseLock) {
+            (0,threads/* setAutoBoundaryLock */.NU)(threadId, lockUntil);
+        }
+        return;
+    }
     console.info(`[context-boundary:auto] thread=${threadId} committed boundary_seq=${committed.boundarySeq} warm_msgs=${committed.sourceMessages}`);
 }
 async function findTopicBoundary(threadId, boundarySeq) {
@@ -2342,12 +2354,17 @@ function upsertAgentConfigTransaction(input) {
     const db = (0,_lib_db__WEBPACK_IMPORTED_MODULE_0__/* .getDb */ .Lf)();
     const existing = getAgentConfig(input.id);
     const created_at = existing?.created_at ?? t;
-    const mbti = input.adaptive_mbti ?? toMbti(existing?.adaptive_mbti) ?? "INTJ";
+    const existingMbti = toMbti(existing?.adaptive_mbti);
+    const mbti = input.adaptive_mbti ?? existingMbti ?? "INTJ";
     const preset = _lib_agents_adaptive_persona_presets__WEBPACK_IMPORTED_MODULE_2__/* .MBTI_PRESETS */ .e[mbti];
-    const strength = input.adaptive_persona_strength ?? preset.strength;
-    const empathy = input.adaptive_empathy ?? preset.empathy;
-    const expressiveness = input.adaptive_expressiveness ?? preset.expressiveness;
-    const verbosity = input.adaptive_verbosity ?? preset.verbosity;
+    // Omitted sliders keep their tuned values; they only fall back to the
+    // preset when the type changes or the agent is new. Otherwise every
+    // partial update (approved proposals, tool edits) reset them.
+    const keepTuned = existing !== null && existing !== undefined && mbti === existingMbti;
+    const strength = input.adaptive_persona_strength ?? (keepTuned ? existing.adaptive_persona_strength : preset.strength);
+    const empathy = input.adaptive_empathy ?? (keepTuned ? existing.adaptive_empathy : preset.empathy);
+    const expressiveness = input.adaptive_expressiveness ?? (keepTuned ? existing.adaptive_expressiveness : preset.expressiveness);
+    const verbosity = input.adaptive_verbosity ?? (keepTuned ? existing.adaptive_verbosity : preset.verbosity);
     if (input.is_default) db.prepare("UPDATE agent_configs SET is_default=0").run();
     // harness_id: explicit `undefined` means "keep existing"; explicit `null`
     // means "use the global default". Empty string is normalised to null too,
@@ -2833,8 +2850,21 @@ const MEMORY_WRITE_NAMESPACES = new Set([
 function rowsInRange(rows, topic) {
     return rows.filter((row)=>row.seq >= (topic.start_seq ?? Infinity) && row.seq <= (topic.end_seq ?? -Infinity));
 }
+// Unicode-aware so non-Latin subjects get distinct keys; an ASCII-only slug
+// collapsed them all to "" and the uplift skipped them. Subjects with no
+// letters or digits fall back to a stable hash.
 function slugifyForMemoryKey(subject) {
-    return subject.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 80);
+    const slug = subject.normalize("NFC").toLowerCase().replace(/[^\p{L}\p{M}\p{N}]+/gu, "-").replace(/^-+|-+$/g, "");
+    const capped = Array.from(slug).slice(0, 80).join("").replace(/-+$/, "");
+    return capped || `fact-${fnv1a(subject)}`;
+}
+function fnv1a(text) {
+    let hash = 0x811c9dc5;
+    for(let i = 0; i < text.length; i++){
+        hash ^= text.charCodeAt(i);
+        hash = Math.imul(hash, 0x01000193);
+    }
+    return (hash >>> 0).toString(16).padStart(8, "0");
 }
 /**
  * Merge facts by subject (case-insensitive) and memory key. Later entries win,
@@ -2846,9 +2876,18 @@ function slugifyForMemoryKey(subject) {
     for (const list of lists){
         for (const fact of list){
             const subjectId = fact.subject.trim().toLowerCase();
-            const existingSubject = fact.key ? keyToSubject.get(fact.key) : undefined;
-            if (existingSubject && existingSubject !== subjectId) merged.delete(existingSubject);
-            merged.delete(subjectId);
+            const sameKeySubject = fact.key ? keyToSubject.get(fact.key) : undefined;
+            for (const replaced of [
+                sameKeySubject,
+                subjectId
+            ]){
+                if (replaced === undefined) continue;
+                // Drop the replaced fact's key mapping too, so a later fact reusing
+                // that key cannot delete whatever now lives under this subject.
+                const previousKey = merged.get(replaced)?.key;
+                if (previousKey) keyToSubject.delete(previousKey);
+                merged.delete(replaced);
+            }
             merged.set(subjectId, fact);
             if (fact.key) keyToSubject.set(fact.key, subjectId);
         }

package/.next/standalone/.next/server/chunks/{423.js → 9590.js}

@@ -1,6 +1,6 @@
 "use strict";
-exports.id = 423;
-exports.ids = [423];
+exports.id = 9590;
+exports.ids = [9590];
 exports.modules = {
 
 /***/ 423:
@@ -527,9 +527,11 @@ function claimMessageEmbeddingJobs(limit = 16, leaseMs = 5 * 60000, nowMs = Date
     });
 }
 function nextMessageEmbeddingDelayMs(nowMs = Date.now()) {
-    const row = (0,_lib_db__WEBPACK_IMPORTED_MODULE_2__/* .getDb */ .L)().prepare(`SELECT MIN(CASE WHEN state='pending' THEN available_at_ms ELSE lease_until_ms END) AS next_at_ms
-     FROM message_embedding_jobs
-     WHERE state IN ('pending','processing')`).get();
+    const row = (0,_lib_db__WEBPACK_IMPORTED_MODULE_2__/* .getDb */ .L)().prepare(`SELECT MIN(next_at_ms) AS next_at_ms FROM (
+       SELECT MIN(available_at_ms) AS next_at_ms FROM message_embedding_jobs WHERE state='pending'
+       UNION ALL
+       SELECT MIN(lease_until_ms) AS next_at_ms FROM message_embedding_jobs WHERE state='processing'
+     )`).get();
     return typeof row?.next_at_ms === "number" ? Math.max(0, row.next_at_ms - nowMs) : null;
 }
 function completeMessageEmbeddingJob(job, embedding, modelSignature) {
@@ -3928,6 +3930,9 @@ function runMigrations(db) {
     -- (getMessages, getRecentMessagesWindow, getMessagesPage, clear).
     -- Without this every read full-scans the messages table.
     CREATE INDEX IF NOT EXISTS idx_messages_thread_id ON messages(thread_id, created_at);
+    CREATE INDEX IF NOT EXISTS idx_messages_thread_seq ON messages(thread_id);
+    CREATE INDEX IF NOT EXISTS idx_messages_created_at ON messages(created_at);
+    CREATE INDEX IF NOT EXISTS idx_threads_updated ON threads(updated_at DESC);
     CREATE TABLE IF NOT EXISTS runtime_operations (
       id TEXT PRIMARY KEY,
       kind TEXT NOT NULL,
@@ -3951,6 +3956,9 @@ function runMigrations(db) {
       created_at INTEGER NOT NULL,
       UNIQUE(kind,operation_id,agent_id,thread_id)
     );
+    CREATE INDEX IF NOT EXISTS idx_runtime_operations_thread_state ON runtime_operations(thread_id,state);
+    CREATE INDEX IF NOT EXISTS idx_signal_events_thread ON signal_events(thread_id);
+    CREATE INDEX IF NOT EXISTS idx_signal_events_operation ON signal_events(operation_id);
     CREATE TABLE IF NOT EXISTS signal_deliveries (
       event_id TEXT PRIMARY KEY REFERENCES signal_events(id) ON DELETE CASCADE,
       wake_eligible INTEGER NOT NULL DEFAULT 0,
@@ -3965,6 +3973,7 @@ function runMigrations(db) {
     );
     CREATE INDEX IF NOT EXISTS idx_signal_events_target ON signal_events(agent_id,thread_id,seq);
     CREATE INDEX IF NOT EXISTS idx_signal_deliveries_due ON signal_deliveries(state,available_at);
+    CREATE INDEX IF NOT EXISTS idx_signal_deliveries_lease ON signal_deliveries(state,lease_until);
     CREATE TABLE IF NOT EXISTS background_tool_results (
       key TEXT PRIMARY KEY REFERENCES runtime_operations(id) ON DELETE CASCADE,
       thread_id TEXT NOT NULL REFERENCES threads(thread_id) ON DELETE CASCADE,
@@ -3976,6 +3985,7 @@ function runMigrations(db) {
       expires_at INTEGER NOT NULL
     );
     CREATE INDEX IF NOT EXISTS idx_background_results_owner ON background_tool_results(thread_id,expires_at);
+    CREATE INDEX IF NOT EXISTS idx_background_results_expiry ON background_tool_results(expires_at);
     CREATE TABLE IF NOT EXISTS memory_store (
       namespace  TEXT NOT NULL,
       key        TEXT NOT NULL,
@@ -3984,6 +3994,8 @@ function runMigrations(db) {
       updated_at TEXT NOT NULL,
       PRIMARY KEY (namespace, key)
     );
+    CREATE INDEX IF NOT EXISTS idx_memory_namespace_updated ON memory_store(namespace,updated_at DESC);
+    CREATE INDEX IF NOT EXISTS idx_memory_updated ON memory_store(updated_at DESC);
     CREATE TABLE IF NOT EXISTS model_configs (
       name       TEXT PRIMARY KEY,
       provider   TEXT NOT NULL,
@@ -4557,6 +4569,7 @@ function ensureMessageUsageTable(db) {
     );
     CREATE INDEX IF NOT EXISTS idx_message_usage_created_at ON message_usage(created_at);
     CREATE INDEX IF NOT EXISTS idx_message_usage_agent_id   ON message_usage(agent_id);
+    CREATE INDEX IF NOT EXISTS idx_message_usage_thread_created ON message_usage(thread_id,created_at DESC);
   `);
 }
 function ensureEmbeddingColumns(db) {
@@ -4596,6 +4609,8 @@ function ensureMessageEmbeddingJobsTable(db) {
     );
     CREATE INDEX IF NOT EXISTS idx_message_embedding_jobs_due
       ON message_embedding_jobs(state, available_at_ms, lease_until_ms);
+    CREATE INDEX IF NOT EXISTS idx_message_embedding_jobs_lease
+      ON message_embedding_jobs(state, lease_until_ms);
     INSERT OR IGNORE INTO message_embedding_jobs (message_id, created_at, updated_at)
       SELECT msg_id, created_at, created_at FROM messages WHERE embedding IS NULL;
   `);
@@ -5626,6 +5641,8 @@ var external_node_child_process_ = __webpack_require__(31421);
 var external_node_util_ = __webpack_require__(57975);
 // EXTERNAL MODULE: external "undici"
 var external_undici_ = __webpack_require__(9956);
+// EXTERNAL MODULE: external "node:net"
+var external_node_net_ = __webpack_require__(77030);
 // EXTERNAL MODULE: ./lib/stores/integrations.ts
 var integrations = __webpack_require__(38775);
 ;// ./lib/stores/proxy-config.ts
@@ -5648,6 +5665,7 @@ var integrations = __webpack_require__(38775);
 
 
 
+
 const DEFAULT_STATUS = {
     mode: "off",
     scheme: "http",
@@ -5698,15 +5716,26 @@ function saveProxyConfig(input) {
     };
     const scheme = input.scheme === "https" ? "https" : "http";
     // Manual mode requires host + port. system / off don't.
+    let host = nullable(input.host);
     if (input.mode === "manual") {
-        if (!input.host || !input.host.trim()) return {
+        if (!host) return {
             error: "host is required in manual mode"
         };
-        if (input.port == null || !Number.isFinite(input.port) || input.port <= 0 || input.port > 65535) {
+        const normalisedHost = normaliseProxyHost(host);
+        if (!normalisedHost) {
             return {
-                error: "port must be between 1 and 65535"
+                error: "host must be a hostname or IP address, without scheme, port, path or credentials"
             };
         }
+        host = normalisedHost;
+        if (input.port == null) return {
+            error: "port must be between 1 and 65535"
+        };
+    }
+    if (input.port != null && (!Number.isInteger(input.port) || input.port <= 0 || input.port > 65535)) {
+        return {
+            error: "port must be between 1 and 65535"
+        };
     }
     // CA bundle: empty/null clears; non-empty must look like PEM.
     let storedCaBundle = null;
@@ -5741,7 +5770,7 @@ function saveProxyConfig(input) {
        password = excluded.password,
        no_proxy = excluded.no_proxy,
        ca_bundle = excluded.ca_bundle,
-       updated_at = excluded.updated_at`).run(input.mode, scheme, nullable(input.host), input.port ?? null, nullable(input.username), storedPassword, nullable(input.no_proxy), storedCaBundle, now);
+       updated_at = excluded.updated_at`).run(input.mode, scheme, host, input.port ?? null, nullable(input.username), storedPassword, nullable(input.no_proxy), storedCaBundle, now);
     return getProxyConfigStatus();
 }
 function deleteProxyConfig() {
@@ -5763,6 +5792,15 @@ function normaliseMode(m) {
 function normaliseScheme(s) {
     return s === "https" ? "https" : "http";
 }
+// The dispatcher builds `${scheme}://${auth}${host}:${port}`, so a pasted URL
+// or host:port would produce an unusable proxy URL. IPv6 is stored unbracketed;
+// the dispatcher adds the brackets.
+function normaliseProxyHost(host) {
+    const unbracketed = host.startsWith("[") && host.endsWith("]") ? host.slice(1, -1) : host;
+    if (/^[A-Za-z0-9](?:[A-Za-z0-9.-]*[A-Za-z0-9])?$/.test(unbracketed)) return unbracketed;
+    if (isIPv6(unbracketed)) return unbracketed;
+    return null;
+}
 function nullable(v) {
     if (v == null) return null;
     const trimmed = v.trim();
@@ -6053,7 +6091,25 @@ async function applyProxyConfigFromDb() {
 // ---------------------------------------------------------------------
 function buildProxyUrl(scheme, host, port, username, password) {
     const auth = username ? `${encodeURIComponent(username)}${password ? `:${encodeURIComponent(password)}` : ""}@` : "";
-    return `${scheme}://${auth}${host}:${port}`;
+    const urlHost = host.includes(":") && !host.startsWith("[") ? `[${host}]` : host;
+    return `${scheme}://${auth}${urlHost}:${port}`;
+}
+// undici's EnvHttpProxyAgent has no implicit loopback exemption, so without
+// these a configured proxy would also receive local traffic (Ollama, the
+// WhatsApp bridge sidecar, the app's own loopback API).
+const LOOPBACK_NO_PROXY = [
+    "localhost",
+    "127.0.0.1",
+    "::1"
+];
+function mergeNoProxy(noProxy) {
+    const entries = (noProxy ?? "").split(/[,\s]+/).map((entry)=>entry.trim()).filter(Boolean);
+    return [
+        ...new Set([
+            ...entries,
+            ...LOOPBACK_NO_PROXY
+        ])
+    ].join(",");
 }
 function installProxy(url, noProxy, caBundle) {
     // Set process.env so EnvHttpProxyAgent honors NO_PROXY semantics
@@ -6061,27 +6117,31 @@ function installProxy(url, noProxy, caBundle) {
     // We still treat the boot-time env snapshot as authoritative for the
     // "env beats DB" rule — this mutation only happens after we've
     // confirmed the user did NOT set HTTP_PROXY at launch.
+    const merged = mergeNoProxy(noProxy);
     process.env.HTTP_PROXY = url;
     process.env.HTTPS_PROXY = url;
-    if (noProxy && noProxy.trim().length > 0) {
-        process.env.NO_PROXY = noProxy.trim();
-    } else {
-        delete process.env.NO_PROXY;
-    }
+    process.env.NO_PROXY = merged;
     // ADR-0012: when the user pasted a corporate root CA, inject it on
     // both TLS legs — the proxy hop (proxyTls) for https-scheme proxies
     // signed by the corporate root, and the upstream tunnel (requestTls)
     // for proxies that MITM outbound HTTPS with the same internal CA.
     // Same blob is correct: the corporate trust chain typically signs
     // both ends.
-    const opts = caBundle ? {
-        requestTls: {
-            ca: caBundle
-        },
-        proxyTls: {
-            ca: caBundle
-        }
-    } : {};
+    // Pass the values explicitly too: undici prefers lowercase http_proxy /
+    // no_proxy from the environment over the uppercase ones set above.
+    const opts = {
+        httpProxy: url,
+        httpsProxy: url,
+        noProxy: merged,
+        ...caBundle ? {
+            requestTls: {
+                ca: caBundle
+            },
+            proxyTls: {
+                ca: caBundle
+            }
+        } : {}
+    };
     (0,external_undici_.setGlobalDispatcher)(new external_undici_.EnvHttpProxyAgent(opts));
 }
 function resetToBaseline() {
@@ -10807,4 +10867,4 @@ function getAuthStatus() {
 
 };
 ;
-//# sourceMappingURL=423.js.map
+//# sourceMappingURL=9590.js.map

package/.next/standalone/.next/server/middleware-build-manifest.js

@@ -4,8 +4,8 @@ globalThis.__BUILD_MANIFEST = {
   ],
   "devFiles": [],
   "lowPriorityFiles": [
-    "static/bMRK5y3ruT7c3WtBfCQOG/_buildManifest.js",
-    "static/bMRK5y3ruT7c3WtBfCQOG/_ssgManifest.js"
+    "static/544OFJV-q0RC6Gjgje4LT/_buildManifest.js",
+    "static/544OFJV-q0RC6Gjgje4LT/_ssgManifest.js"
   ],
   "rootMainFiles": [
     "static/chunks/webpack-22f2423f357dd0a1.js",

package/.next/standalone/.next/server/middleware.js

@@ -48715,6 +48715,9 @@ function runMigrations(db) {
     -- (getMessages, getRecentMessagesWindow, getMessagesPage, clear).
     -- Without this every read full-scans the messages table.
     CREATE INDEX IF NOT EXISTS idx_messages_thread_id ON messages(thread_id, created_at);
+    CREATE INDEX IF NOT EXISTS idx_messages_thread_seq ON messages(thread_id);
+    CREATE INDEX IF NOT EXISTS idx_messages_created_at ON messages(created_at);
+    CREATE INDEX IF NOT EXISTS idx_threads_updated ON threads(updated_at DESC);
     CREATE TABLE IF NOT EXISTS runtime_operations (
       id TEXT PRIMARY KEY,
       kind TEXT NOT NULL,
@@ -48738,6 +48741,9 @@ function runMigrations(db) {
       created_at INTEGER NOT NULL,
       UNIQUE(kind,operation_id,agent_id,thread_id)
     );
+    CREATE INDEX IF NOT EXISTS idx_runtime_operations_thread_state ON runtime_operations(thread_id,state);
+    CREATE INDEX IF NOT EXISTS idx_signal_events_thread ON signal_events(thread_id);
+    CREATE INDEX IF NOT EXISTS idx_signal_events_operation ON signal_events(operation_id);
     CREATE TABLE IF NOT EXISTS signal_deliveries (
       event_id TEXT PRIMARY KEY REFERENCES signal_events(id) ON DELETE CASCADE,
       wake_eligible INTEGER NOT NULL DEFAULT 0,
@@ -48752,6 +48758,7 @@ function runMigrations(db) {
     );
     CREATE INDEX IF NOT EXISTS idx_signal_events_target ON signal_events(agent_id,thread_id,seq);
     CREATE INDEX IF NOT EXISTS idx_signal_deliveries_due ON signal_deliveries(state,available_at);
+    CREATE INDEX IF NOT EXISTS idx_signal_deliveries_lease ON signal_deliveries(state,lease_until);
     CREATE TABLE IF NOT EXISTS background_tool_results (
       key TEXT PRIMARY KEY REFERENCES runtime_operations(id) ON DELETE CASCADE,
       thread_id TEXT NOT NULL REFERENCES threads(thread_id) ON DELETE CASCADE,
@@ -48763,6 +48770,7 @@ function runMigrations(db) {
       expires_at INTEGER NOT NULL
     );
     CREATE INDEX IF NOT EXISTS idx_background_results_owner ON background_tool_results(thread_id,expires_at);
+    CREATE INDEX IF NOT EXISTS idx_background_results_expiry ON background_tool_results(expires_at);
     CREATE TABLE IF NOT EXISTS memory_store (
       namespace  TEXT NOT NULL,
       key        TEXT NOT NULL,
@@ -48771,6 +48779,8 @@ function runMigrations(db) {
       updated_at TEXT NOT NULL,
       PRIMARY KEY (namespace, key)
     );
+    CREATE INDEX IF NOT EXISTS idx_memory_namespace_updated ON memory_store(namespace,updated_at DESC);
+    CREATE INDEX IF NOT EXISTS idx_memory_updated ON memory_store(updated_at DESC);
     CREATE TABLE IF NOT EXISTS model_configs (
       name       TEXT PRIMARY KEY,
       provider   TEXT NOT NULL,
@@ -49344,6 +49354,7 @@ function ensureMessageUsageTable(db) {
     );
     CREATE INDEX IF NOT EXISTS idx_message_usage_created_at ON message_usage(created_at);
     CREATE INDEX IF NOT EXISTS idx_message_usage_agent_id   ON message_usage(agent_id);
+    CREATE INDEX IF NOT EXISTS idx_message_usage_thread_created ON message_usage(thread_id,created_at DESC);
   `);
 }
 function ensureEmbeddingColumns(db) {
@@ -49383,6 +49394,8 @@ function ensureMessageEmbeddingJobsTable(db) {
     );
     CREATE INDEX IF NOT EXISTS idx_message_embedding_jobs_due
       ON message_embedding_jobs(state, available_at_ms, lease_until_ms);
+    CREATE INDEX IF NOT EXISTS idx_message_embedding_jobs_lease
+      ON message_embedding_jobs(state, lease_until_ms);
     INSERT OR IGNORE INTO message_embedding_jobs (message_id, created_at, updated_at)
       SELECT msg_id, created_at, created_at FROM messages WHERE embedding IS NULL;
   `);
@@ -50419,6 +50432,8 @@ function runCryptoMigration(db) {
 var external_node_util_ = __webpack_require__(57975);
 // EXTERNAL MODULE: external "undici"
 var external_undici_ = __webpack_require__(9956);
+// EXTERNAL MODULE: external "node:net"
+var external_node_net_ = __webpack_require__(77030);
 // EXTERNAL MODULE: ./node_modules/@anthropic-ai/sdk/internal/tslib.mjs
 var tslib = __webpack_require__(74300);
 // EXTERNAL MODULE: ./node_modules/@anthropic-ai/sdk/internal/utils/values.mjs
@@ -103232,9 +103247,11 @@ function message_embedding_jobs_claimMessageEmbeddingJobs(limit = 16, leaseMs =
     });
 }
 function message_embedding_jobs_nextMessageEmbeddingDelayMs(nowMs = Date.now()) {
-    const row = getDb().prepare(`SELECT MIN(CASE WHEN state='pending' THEN available_at_ms ELSE lease_until_ms END) AS next_at_ms
-     FROM message_embedding_jobs
-     WHERE state IN ('pending','processing')`).get();
+    const row = getDb().prepare(`SELECT MIN(next_at_ms) AS next_at_ms FROM (
+       SELECT MIN(available_at_ms) AS next_at_ms FROM message_embedding_jobs WHERE state='pending'
+       UNION ALL
+       SELECT MIN(lease_until_ms) AS next_at_ms FROM message_embedding_jobs WHERE state='processing'
+     )`).get();
     return typeof row?.next_at_ms === "number" ? Math.max(0, row.next_at_ms - nowMs) : null;
 }
 function message_embedding_jobs_completeMessageEmbeddingJob(job, embedding, modelSignature) {
@@ -105606,6 +105623,7 @@ function maskSecrets(name, values) {
 
 
 
+
 const DEFAULT_STATUS = {
     mode: "off",
     scheme: "http",
@@ -105656,15 +105674,26 @@ function saveProxyConfig(input) {
     };
     const scheme = input.scheme === "https" ? "https" : "http";
     // Manual mode requires host + port. system / off don't.
+    let host = proxy_config_nullable(input.host);
     if (input.mode === "manual") {
-        if (!input.host || !input.host.trim()) return {
+        if (!host) return {
             error: "host is required in manual mode"
         };
-        if (input.port == null || !Number.isFinite(input.port) || input.port <= 0 || input.port > 65535) {
+        const normalisedHost = normaliseProxyHost(host);
+        if (!normalisedHost) {
             return {
-                error: "port must be between 1 and 65535"
+                error: "host must be a hostname or IP address, without scheme, port, path or credentials"
             };
         }
+        host = normalisedHost;
+        if (input.port == null) return {
+            error: "port must be between 1 and 65535"
+        };
+    }
+    if (input.port != null && (!Number.isInteger(input.port) || input.port <= 0 || input.port > 65535)) {
+        return {
+            error: "port must be between 1 and 65535"
+        };
     }
     // CA bundle: empty/null clears; non-empty must look like PEM.
     let storedCaBundle = null;
@@ -105699,7 +105728,7 @@ function saveProxyConfig(input) {
        password = excluded.password,
        no_proxy = excluded.no_proxy,
        ca_bundle = excluded.ca_bundle,
-       updated_at = excluded.updated_at`).run(input.mode, scheme, proxy_config_nullable(input.host), input.port ?? null, proxy_config_nullable(input.username), storedPassword, proxy_config_nullable(input.no_proxy), storedCaBundle, now);
+       updated_at = excluded.updated_at`).run(input.mode, scheme, host, input.port ?? null, proxy_config_nullable(input.username), storedPassword, proxy_config_nullable(input.no_proxy), storedCaBundle, now);
     return getProxyConfigStatus();
 }
 function deleteProxyConfig() {
@@ -105721,6 +105750,15 @@ function normaliseMode(m) {
 function normaliseScheme(s) {
     return s === "https" ? "https" : "http";
 }
+// The dispatcher builds `${scheme}://${auth}${host}:${port}`, so a pasted URL
+// or host:port would produce an unusable proxy URL. IPv6 is stored unbracketed;
+// the dispatcher adds the brackets.
+function normaliseProxyHost(host) {
+    const unbracketed = host.startsWith("[") && host.endsWith("]") ? host.slice(1, -1) : host;
+    if (/^[A-Za-z0-9](?:[A-Za-z0-9.-]*[A-Za-z0-9])?$/.test(unbracketed)) return unbracketed;
+    if (isIPv6(unbracketed)) return unbracketed;
+    return null;
+}
 function proxy_config_nullable(v) {
     if (v == null) return null;
     const trimmed = v.trim();
@@ -106009,7 +106047,25 @@ async function applyProxyConfigFromDb() {
 // ---------------------------------------------------------------------
 function buildProxyUrl(scheme, host, port, username, password) {
     const auth = username ? `${encodeURIComponent(username)}${password ? `:${encodeURIComponent(password)}` : ""}@` : "";
-    return `${scheme}://${auth}${host}:${port}`;
+    const urlHost = host.includes(":") && !host.startsWith("[") ? `[${host}]` : host;
+    return `${scheme}://${auth}${urlHost}:${port}`;
+}
+// undici's EnvHttpProxyAgent has no implicit loopback exemption, so without
+// these a configured proxy would also receive local traffic (Ollama, the
+// WhatsApp bridge sidecar, the app's own loopback API).
+const LOOPBACK_NO_PROXY = [
+    "localhost",
+    "127.0.0.1",
+    "::1"
+];
+function mergeNoProxy(noProxy) {
+    const entries = (noProxy ?? "").split(/[,\s]+/).map((entry)=>entry.trim()).filter(Boolean);
+    return [
+        ...new Set([
+            ...entries,
+            ...LOOPBACK_NO_PROXY
+        ])
+    ].join(",");
 }
 function installProxy(url, noProxy, caBundle) {
     // Set process.env so EnvHttpProxyAgent honors NO_PROXY semantics
@@ -106017,27 +106073,31 @@ function installProxy(url, noProxy, caBundle) {
     // We still treat the boot-time env snapshot as authoritative for the
     // "env beats DB" rule — this mutation only happens after we've
     // confirmed the user did NOT set HTTP_PROXY at launch.
+    const merged = mergeNoProxy(noProxy);
     process.env.HTTP_PROXY = url;
     process.env.HTTPS_PROXY = url;
-    if (noProxy && noProxy.trim().length > 0) {
-        process.env.NO_PROXY = noProxy.trim();
-    } else {
-        delete process.env.NO_PROXY;
-    }
+    process.env.NO_PROXY = merged;
     // ADR-0012: when the user pasted a corporate root CA, inject it on
     // both TLS legs — the proxy hop (proxyTls) for https-scheme proxies
     // signed by the corporate root, and the upstream tunnel (requestTls)
     // for proxies that MITM outbound HTTPS with the same internal CA.
     // Same blob is correct: the corporate trust chain typically signs
     // both ends.
-    const opts = caBundle ? {
-        requestTls: {
-            ca: caBundle
-        },
-        proxyTls: {
-            ca: caBundle
-        }
-    } : {};
+    // Pass the values explicitly too: undici prefers lowercase http_proxy /
+    // no_proxy from the environment over the uppercase ones set above.
+    const opts = {
+        httpProxy: url,
+        httpsProxy: url,
+        noProxy: merged,
+        ...caBundle ? {
+            requestTls: {
+                ca: caBundle
+            },
+            proxyTls: {
+                ca: caBundle
+            }
+        } : {}
+    };
     (0,external_undici_.setGlobalDispatcher)(new external_undici_.EnvHttpProxyAgent(opts));
 }
 function resetToBaseline() {
@@ -115293,6 +115353,14 @@ module.exports = require("node:path");
 
 /***/ }),
 
+/***/ 77030:
+/***/ ((module) => {
+
+"use strict";
+module.exports = require("node:net");
+
+/***/ }),
+
 /***/ 77150:
 /***/ ((__unused_webpack_module, exports) => {