@kafca/agentdock 0.1.56 → 0.1.58

package/dist-electron/services/local-ai-core/src/router/workspace-router.js

@@ -9,6 +9,10 @@ const local_core_slash_commands_js_1 = require("../acp/local-core-slash-commands
 const workspace_thread_id_js_1 = require("../thread/workspace-thread-id.js");
 const command_risk_js_1 = require("../security/command-risk.js");
 const workspace_route_config_js_1 = require("./workspace-route-config.js");
+const workspace_project_registry_js_1 = require("../runtime/workspace-project-registry.js");
+const agent_message_policy_js_1 = require("../thread/agent-message-policy.js");
+const content_js_1 = require("../channel/shared/content.js");
+const workspace_bridge_event_stream_js_1 = require("./workspace-bridge-event-stream.js");
 var workspace_thread_id_js_2 = require("../thread/workspace-thread-id.js");
 Object.defineProperty(exports, "decodeThreadId", { enumerable: true, get: function () { return workspace_thread_id_js_2.decodeThreadId; } });
 Object.defineProperty(exports, "encodeThreadId", { enumerable: true, get: function () { return workspace_thread_id_js_2.encodeThreadId; } });
@@ -17,17 +21,18 @@ class WorkspaceRouter {
     store;
     localCoreAcp;
     runThreadMap = new Map();
-    bridgeSubscribers = new Set();
+    bridgeEvents;
     schedulerBridge = null;
     constructor(options) {
         this.options = options;
         this.store = options.store;
+        this.bridgeEvents = new workspace_bridge_event_stream_js_1.WorkspaceBridgeEventStream(options.eventBus);
         this.localCoreAcp = new local_core_acp_backend_js_1.LocalCoreAcpBackend({
             store: this.store,
             runThreadMap: this.runThreadMap,
             cliBinDir: options.cliBinDir,
             localCoreBase: options.localCoreBase,
-            emitBridge: (event) => this.emitBridgeEvent(event),
+            emitBridge: (event) => this.bridgeEvents.emit(event),
             eventBus: options.eventBus,
             scheduler: {
                 createJob: async (input) => {
@@ -55,7 +60,7 @@ class WorkspaceRouter {
     }
     close() {
         this.localCoreAcp.close();
-        this.bridgeSubscribers.clear();
+        this.bridgeEvents.clear();
         this.store.close();
     }
     getThreadSessionKey(threadId) {
@@ -74,23 +79,22 @@ class WorkspaceRouter {
             if (!route) {
                 continue;
             }
-            workspaceMap.set(project.name, {
-                id: project.name,
+            const workspaceId = (0, workspace_project_registry_js_1.projectWorkspaceId)(project);
+            workspaceMap.set(workspaceId, {
+                id: workspaceId,
                 name: project.name,
                 agentType: route.agentType,
                 platforms: (0, workspace_route_config_js_1.normalizePlatformTypes)(project),
-                sessionsCount: this.store.countThreads(project.name),
+                sessionsCount: this.store.countThreads(workspaceId),
                 heartbeatEnabled: false,
             });
         }
         return [...workspaceMap.values()].sort((a, b) => a.name.localeCompare(b.name));
     }
     async listWorkspaceRegistry() {
-        await this.syncConfiguredWorkspaces();
         return this.store.listWorkspaceRegistry();
     }
     async getWorkspaceRegistryEntry(workspaceId) {
-        await this.syncConfiguredWorkspaces();
         const workspace = this.store.getWorkspaceRegistryEntry(workspaceId);
         if (!workspace) {
             throw new Error(`Workspace not found: ${workspaceId}`);
@@ -209,7 +213,8 @@ class WorkspaceRouter {
         const route = isLocalSlashCommand(content)
             ? await this.getWorkspaceRoute(workspaceId)
             : await this.getThreadWorkspaceRoute(threadId, workspaceId);
-        return this.localCoreAcp.sendThreadMessage(threadId, content, route.config, options);
+        const preparedContent = await this.prepareAgentMessage(threadId, content);
+        return this.localCoreAcp.sendThreadMessage(threadId, preparedContent, route.config, options);
     }
     async sendThreadAction(threadId, content) {
         const { workspaceId } = (0, workspace_thread_id_js_1.decodeThreadId)(threadId);
@@ -262,23 +267,24 @@ class WorkspaceRouter {
             selectedKnowledgeBaseIds: await this.options.knowledgeAttachments.listThreadKnowledgeBaseIds(detail.id),
         };
     }
-    emitBridgeEvent(event) {
-        this.options.eventBus.emit({
-            type: 'platform.bridge.updated',
-            payload: event,
-        });
-        this.notifyBridgeSubscribers(event);
-    }
-    notifyBridgeSubscribers(event) {
-        for (const listener of this.bridgeSubscribers) {
-            listener(event);
+    async prepareAgentMessage(threadId, content) {
+        const displayText = typeof content === 'string' ? content : content.displayText;
+        if (displayText.trim().startsWith('/')) {
+            return content;
         }
+        const selectedIds = new Set(await this.options.knowledgeAttachments.listThreadKnowledgeBaseIds(threadId));
+        const knowledgeBases = selectedIds.size
+            ? (await this.options.knowledgeProvider.listKnowledgeBases())
+                .filter((base) => selectedIds.has(base.id))
+                .map(({ id, name }) => ({ id, name }))
+            : [];
+        const wrapped = (0, agent_message_policy_js_1.composeAgentMessage)(displayText, knowledgeBases);
+        return typeof content === 'string'
+            ? wrapped
+            : (0, content_js_1.createChannelThreadMessageInput)(wrapped, content.contentParts);
     }
     subscribeBridge(listener) {
-        this.bridgeSubscribers.add(listener);
-        return () => {
-            this.bridgeSubscribers.delete(listener);
-        };
+        return this.bridgeEvents.subscribe(listener);
     }
     subscribeBridgeEvents(listener) {
         return this.subscribeBridge(listener);
@@ -465,10 +471,20 @@ class WorkspaceRouter {
     }
     async getWorkspaceRoute(workspaceId, agentTypeOverride = '') {
         const configState = await this.options.readRuntimeConfig();
-        const projects = Array.isArray(configState.config?.projects) ? configState.config.projects : [];
-        const matched = projects.find((project) => String(project?.name || '').trim() === workspaceId);
+        const embeddedProjects = Array.isArray(configState.config?.projects) ? configState.config.projects : [];
+        const projects = embeddedProjects.length
+            ? (0, workspace_project_registry_js_1.persistProjectsInRegistry)(this.store, embeddedProjects, { preserveLegacyIds: true })
+            : (0, workspace_project_registry_js_1.listRegistryProjects)(this.store);
+        if (embeddedProjects.length) {
+            this.store.saveRuntimeConfig((0, workspace_project_registry_js_1.withoutRuntimeProjects)(configState.config));
+        }
+        const projectedConfigState = {
+            ...configState,
+            config: { ...configState.config, projects },
+        };
+        const matched = projects.find((project) => (0, workspace_project_registry_js_1.projectWorkspaceId)(project) === workspaceId);
         const project = matched && agentTypeOverride ? withAgentTypeOverride(matched, agentTypeOverride) : matched;
-        const route = project ? this.resolveProjectRoute(configState, project) : null;
+        const route = project ? this.resolveProjectRoute(projectedConfigState, project) : null;
         if (!matched || !route) {
             throw new Error(`Workspace "${workspaceId}" is not configured as a Local AI Core ACP workspace.`);
         }
@@ -476,31 +492,12 @@ class WorkspaceRouter {
     }
     async listLocalCoreProjects() {
         const configState = await this.options.readRuntimeConfig();
-        const projects = Array.isArray(configState.config?.projects) ? configState.config.projects : [];
-        return projects.filter((project) => this.resolveProjectRoute(configState, project));
-    }
-    async syncConfiguredWorkspaces() {
-        const config = await this.options.readRuntimeConfig();
-        const projects = Array.isArray(config.config?.projects) ? config.config.projects : [];
-        for (const project of projects) {
-            const route = this.resolveProjectRoute(config, project);
-            if (!route) {
-                continue;
-            }
-            const path = inferWorkspacePath(project);
-            this.store.upsertWorkspaceRegistryEntry({
-                workspaceId: project.name,
-                displayName: project.name,
-                path,
-                deviceId: 'local',
-                defaultRuntimeId: route.agentType,
-                git: detectGitSummary(path),
-                health: workspaceHealth(path),
-                metadata: {
-                    platforms: (0, workspace_route_config_js_1.normalizePlatformTypes)(project),
-                },
-            });
+        let projects = (0, workspace_project_registry_js_1.listRegistryProjects)(this.store);
+        if (projects.length === 0 && configState.config.projects?.length) {
+            projects = (0, workspace_project_registry_js_1.persistProjectsInRegistry)(this.store, configState.config.projects, { preserveLegacyIds: true });
+            this.store.saveRuntimeConfig((0, workspace_project_registry_js_1.withoutRuntimeProjects)(configState.config));
         }
+        return projects.filter((project) => this.resolveProjectRoute(configState, project));
     }
     resolveProjectRoute(configState, project) {
         const routeProject = this.withResolvedProjectProvider(project);
@@ -559,16 +556,6 @@ exports.WorkspaceRouter = WorkspaceRouter;
 function createWorkspaceRouter(options) {
     return new WorkspaceRouter(options);
 }
-function inferWorkspacePath(project) {
-    const options = project.agent?.options || {};
-    for (const key of ['cwd', 'path', 'workspacePath', 'root']) {
-        const value = options[key];
-        if (typeof value === 'string' && value.trim()) {
-            return value.trim();
-        }
-    }
-    return '';
-}
 function withAgentTypeOverride(project, agentType) {
     const options = project.agent?.options && typeof project.agent.options === 'object'
         ? { ...project.agent.options }

package/dist-electron/services/local-ai-core/src/runtime/agent-runtime-detector.js

@@ -5,7 +5,7 @@ const node_fs_1 = require("node:fs");
 const node_path_1 = require("node:path");
 const node_module_1 = require("node:module");
 const node_child_process_1 = require("node:child_process");
-const desktop_js_1 = require("../../../../shared/desktop.js");
+const superai_contracts_1 = require("../../../../packages/contracts/src/index.js");
 const index_js_1 = require("../agents/index.js");
 const env_utils_js_1 = require("./env-utils.js");
 function detectInstalledAgentRuntimes(options = {}) {
@@ -14,12 +14,12 @@ function detectInstalledAgentRuntimes(options = {}) {
     const detectedAt = (options.now || new Date()).toISOString();
     const versionTimeoutMs = options.versionTimeoutMs ?? 3000;
     const agentTypes = options.runtimeId
-        ? desktop_js_1.DESKTOP_AGENT_TYPE_OPTIONS.filter((agentType) => agentType === options.runtimeId)
-        : desktop_js_1.DESKTOP_AGENT_TYPE_OPTIONS;
+        ? superai_contracts_1.DESKTOP_AGENT_TYPE_OPTIONS.filter((agentType) => agentType === options.runtimeId)
+        : superai_contracts_1.DESKTOP_AGENT_TYPE_OPTIONS;
     return agentTypes.map((agentType) => {
         const definition = (0, index_js_1.resolveAgentRuntimeDefinition)(agentType);
         const detection = definition?.detection;
-        if (detection?.builtin || agentType === desktop_js_1.LOCALCORE_ACP_AGENT_TYPE) {
+        if (detection?.builtin || agentType === superai_contracts_1.LOCALCORE_ACP_AGENT_TYPE) {
             return {
                 agentType,
                 runtimeId: agentType,
@@ -163,7 +163,7 @@ function isExecutableFile(path) {
 }
 function detectRuntimeVersion(agentType, command, env, timeoutMs) {
     const args = (0, index_js_1.resolveAgentRuntimeDefinition)(agentType)?.detection?.versionArgs;
-    if (!args || agentType === desktop_js_1.LOCALCORE_ACP_AGENT_TYPE) {
+    if (!args || agentType === superai_contracts_1.LOCALCORE_ACP_AGENT_TYPE) {
         return {};
     }
     try {

package/dist-electron/services/local-ai-core/src/runtime/config-migration.js

@@ -3,7 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.CURRENT_DESKTOP_CONFIG_VERSION = void 0;
 exports.migrateDesktopConnectConfig = migrateDesktopConnectConfig;
 exports.normalizeDesktopProviderForStorage = normalizeDesktopProviderForStorage;
-const index_js_1 = require("../../../../packages/contracts/src/index.js");
+const superai_contracts_1 = require("../../../../packages/contracts/src/index.js");
 exports.CURRENT_DESKTOP_CONFIG_VERSION = 2;
 function migrateDesktopConnectConfig(input) {
     const config = cloneConfig(input);
@@ -75,7 +75,7 @@ function normalizeSandboxOptions(input) {
     let changed = false;
     if (sandbox.enabled) {
         if (!sandbox.provider_id) {
-            sandbox.provider_id = index_js_1.DEFAULT_SANDBOX_PROVIDER_ID;
+            sandbox.provider_id = superai_contracts_1.DEFAULT_SANDBOX_PROVIDER_ID;
             changed = true;
         }
         if (!sandbox.state_scope) {
@@ -94,13 +94,13 @@ function normalizeSandboxOptions(input) {
     return { value: sandbox, changed };
 }
 function migrateProjectSandboxProvider(config, sandbox, deploymentProfile) {
-    const providerId = String(sandbox.provider_id || index_js_1.DEFAULT_SANDBOX_PROVIDER_ID).trim() || index_js_1.DEFAULT_SANDBOX_PROVIDER_ID;
+    const providerId = String(sandbox.provider_id || superai_contracts_1.DEFAULT_SANDBOX_PROVIDER_ID).trim() || superai_contracts_1.DEFAULT_SANDBOX_PROVIDER_ID;
     config.sandbox_providers = Array.isArray(config.sandbox_providers) ? config.sandbox_providers : [];
     const existing = config.sandbox_providers.find((provider) => provider.id === providerId);
     if (existing) {
         return { changed: false };
     }
-    const defaultProvider = (0, index_js_1.defaultSandboxProviderForProfile)(deploymentProfile);
+    const defaultProvider = (0, superai_contracts_1.defaultSandboxProviderForProfile)(deploymentProfile);
     config.sandbox_providers.push({
         ...defaultProvider,
         id: providerId,
@@ -112,7 +112,7 @@ function migrateProjectSandboxProvider(config, sandbox, deploymentProfile) {
 }
 function migrateProjectSandboxRuntimeImage(config, project, sandbox) {
     const agentType = String(project.agent?.type || 'pi').trim().toLowerCase() || 'pi';
-    const fallback = (0, index_js_1.defaultSandboxRuntimeImage)(agentType);
+    const fallback = (0, superai_contracts_1.defaultSandboxRuntimeImage)(agentType);
     const imageId = String(sandbox.runtime_image_id || fallback.id).trim() || fallback.id;
     const assignedRuntimeImage = sandbox.runtime_image_id === imageId;
     sandbox.runtime_image_id = imageId;
@@ -145,7 +145,7 @@ function migrateProjectSandboxRuntimeImage(config, project, sandbox) {
     return { changed: true };
 }
 function isBuiltInHttpSandboxRuntimeImage(id, image, fallbackImage) {
-    return id === index_js_1.DEFAULT_SANDBOX_RUNTIME_IMAGE_ID && String(image || fallbackImage).trim() === fallbackImage;
+    return id === superai_contracts_1.DEFAULT_SANDBOX_RUNTIME_IMAGE_ID && String(image || fallbackImage).trim() === fallbackImage;
 }
 function cloneConfig(input) {
     return JSON.parse(JSON.stringify(input || {}));

package/dist-electron/services/local-ai-core/src/runtime/deployment-diagnostics.js

@@ -2,17 +2,17 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.runDeploymentDiagnostics = runDeploymentDiagnostics;
 const node_fs_1 = require("node:fs");
-const index_js_1 = require("../../../../packages/contracts/src/index.js");
+const superai_contracts_1 = require("../../../../packages/contracts/src/index.js");
 const sandbox_config_js_1 = require("../sandbox/sandbox-config.js");
 async function runDeploymentDiagnostics(input) {
     const env = input.env || process.env;
     const checkedAt = new Date().toISOString();
     const config = input.config || {};
-    const profile = (0, index_js_1.getDesktopDeploymentProfile)(String(config.deployment_profile || env.AGENTDOCK_DEPLOYMENT_PROFILE || '').trim());
+    const profile = (0, superai_contracts_1.getDesktopDeploymentProfile)(String(config.deployment_profile || env.AGENTDOCK_DEPLOYMENT_PROFILE || '').trim());
     const provider = Array.isArray(config.sandbox_providers)
         ? config.sandbox_providers.find((item) => item.id === profile.defaultSandboxProviderId) || config.sandbox_providers[0]
         : undefined;
-    const sandboxProvider = provider || (0, index_js_1.defaultSandboxProviderForProfile)(profile.id);
+    const sandboxProvider = provider || (0, superai_contracts_1.defaultSandboxProviderForProfile)(profile.id);
     const opensandboxUrl = normalizeUrl(sandboxProvider.server_url || env.AGENTDOCK_OPENSANDBOX_SERVER_URL || (0, sandbox_config_js_1.defaultOpenSandboxServerUrl)(env));
     const checks = [
         {

package/dist-electron/services/local-ai-core/src/runtime/external-service.js

@@ -48,6 +48,7 @@ class ExternalService {
             defaultRuntimeId: project.agentType,
             health: { status: 'healthy', summary: 'External workspace is available.', issues: [], checkedAt: now },
             metadata: {
+                ...(this.store.getWorkspaceRegistryEntry(project.workspaceId)?.metadata || {}),
                 external: true,
                 userId: project.userId,
                 externalProjectId: project.externalProjectId,
@@ -110,7 +111,7 @@ class ExternalService {
             ...(current.config || {}),
             projects: Array.isArray(current.config?.projects) ? [...current.config.projects] : [],
         };
-        const existingIndex = config.projects.findIndex((item) => item?.name === project.workspaceId);
+        const existingIndex = config.projects.findIndex((item) => item?.workspace_id === project.workspaceId || item?.name === project.workspaceId);
         const existing = existingIndex >= 0 ? config.projects[existingIndex] : undefined;
         const defaultRuntimeImageId = Array.isArray(config.sandbox_runtime_images)
             ? config.sandbox_runtime_images.find((image) => image?.agent_type === project.agentType)?.id
@@ -130,6 +131,7 @@ class ExternalService {
             },
         };
         const nextProject = {
+            workspace_id: project.workspaceId,
             name: project.workspaceId,
             agent: {
                 ...(existing?.agent || {}),

package/dist-electron/services/local-ai-core/src/runtime/handlers/automation-handler.js

@@ -2,13 +2,19 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.registerAutomationHandlers = registerAutomationHandlers;
 const server_helpers_js_1 = require("../server-helpers.js");
+const request_validation_js_1 = require("../request-validation.js");
 function registerAutomationHandlers(map, automationMonitors) {
     map.set('automation.monitors.list', async (_route, _req, res, url) => {
         const workspaceId = String(url.searchParams.get('workspace_id') || '');
         (0, server_helpers_js_1.json)(res, 200, { monitors: await automationMonitors.listMonitors(workspaceId || undefined) });
     });
     map.set('automation.monitors.create', async (_route, req, res) => {
-        const body = await (0, server_helpers_js_1.readJsonBody)(req);
+        const body = (0, request_validation_js_1.validateBody)(await (0, server_helpers_js_1.readJsonBody)(req), {
+            workspaceId: { kind: 'string', required: true }, title: { kind: 'string', required: true },
+            sourceType: { kind: 'string', required: true }, sourceConfig: 'object', condition: { kind: 'object', required: true },
+            promptTemplate: { kind: 'string', required: true }, platform: 'string', route: 'object', threadId: 'string',
+            executionMode: 'string', enabled: 'boolean', cooldownMs: 'number',
+        });
         (0, server_helpers_js_1.json)(res, 200, await automationMonitors.createMonitor(body));
     });
     map.set('automation.monitor.get', async (route, _req, res) => {
@@ -25,7 +31,10 @@ function registerAutomationHandlers(map, automationMonitors) {
         (0, server_helpers_js_1.json)(res, 200, await automationMonitors.runMonitorNow(route.monitorId));
     });
     map.set('automation.monitor.update', async (route, req, res) => {
-        const body = await (0, server_helpers_js_1.readJsonBody)(req);
+        const body = (0, request_validation_js_1.validateBody)(await (0, server_helpers_js_1.readJsonBody)(req), {
+            title: 'string', sourceConfig: 'object', condition: 'object', promptTemplate: 'string', route: 'object',
+            executionMode: 'string', enabled: 'boolean', cooldownMs: 'number',
+        });
         (0, server_helpers_js_1.json)(res, 200, await automationMonitors.updateMonitor(route.monitorId, body));
     });
     map.set('automation.monitor.delete', async (route, _req, res) => {

package/dist-electron/services/local-ai-core/src/runtime/handlers/channel-handler.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.registerChannelHandlers = registerChannelHandlers;
 const server_helpers_js_1 = require("../server-helpers.js");
+const request_validation_js_1 = require("../request-validation.js");
 function registerChannelHandlers(map, channelService) {
     const cid = (url) => String(url.searchParams.get('instance_id') || url.searchParams.get('instanceId') || '').trim() || undefined;
     map.set('platform.gateways.list', async (route, _req, res) => {
@@ -29,12 +30,12 @@ function registerChannelHandlers(map, channelService) {
         (0, server_helpers_js_1.json)(res, 200, await channelService.checkQrCodeStatus(p, route.workspaceId, ticket, cid(url)));
     });
     map.set('platform.pairing.approve', async (route, req, res) => {
-        const body = await (0, server_helpers_js_1.readJsonBody)(req);
-        (0, server_helpers_js_1.json)(res, 200, await channelService.approvePairing(route.platform, String(body.code || '')));
+        const body = (0, request_validation_js_1.validateBody)(await (0, server_helpers_js_1.readJsonBody)(req), { code: { kind: 'string', required: true } });
+        (0, server_helpers_js_1.json)(res, 200, await channelService.approvePairing(route.platform, body.code));
     });
     map.set('platform.pairing.reject', async (route, req, res) => {
-        const body = await (0, server_helpers_js_1.readJsonBody)(req);
-        (0, server_helpers_js_1.json)(res, 200, await channelService.rejectPairing(route.platform, String(body.code || '')));
+        const body = (0, request_validation_js_1.validateBody)(await (0, server_helpers_js_1.readJsonBody)(req), { code: { kind: 'string', required: true } });
+        (0, server_helpers_js_1.json)(res, 200, await channelService.rejectPairing(route.platform, body.code));
     });
     map.set('platform.gateway.test', async (route, _req, res, url) => {
         const p = route.platform;
@@ -49,12 +50,17 @@ function registerChannelHandlers(map, channelService) {
         (0, server_helpers_js_1.json)(res, 200, await channelService.disable(p, route.workspaceId, cid(url)));
     });
     map.set('platform.file.send', async (route, req, res) => {
-        const body = await (0, server_helpers_js_1.readJsonBody)(req);
+        const body = (0, request_validation_js_1.validateBody)(await (0, server_helpers_js_1.readJsonBody)(req), {
+            path: { kind: 'string', required: true }, channelId: { kind: 'string', required: true }, participantId: 'string',
+            fileName: 'string', workspacePath: 'string',
+        });
         const p = route.platform;
         (0, server_helpers_js_1.json)(res, 200, await channelService.sendFile(p, route.workspaceId, body));
     });
     map.set('platform.message.send', async (route, req, res) => {
-        const body = await (0, server_helpers_js_1.readJsonBody)(req);
+        const body = (0, request_validation_js_1.validateBody)(await (0, server_helpers_js_1.readJsonBody)(req), {
+            route: { kind: 'object', required: true }, parts: { kind: 'array', required: true }, metadata: 'object',
+        });
         const p = route.platform;
         (0, server_helpers_js_1.json)(res, 200, await channelService.sendMessage(p, route.workspaceId, body));
     });

package/dist-electron/services/local-ai-core/src/runtime/handlers/external-handler.js

@@ -2,13 +2,21 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.registerExternalHandlers = registerExternalHandlers;
 const server_helpers_js_1 = require("../server-helpers.js");
+const request_validation_js_1 = require("../request-validation.js");
+const externalProjectSchema = {
+    user_id: { kind: 'string', required: true }, external_project_id: { kind: 'string', required: true },
+    display_name: 'string', agent_type: 'string', provider_id: 'string', model: 'string', metadata: 'object',
+};
 function registerExternalHandlers(map, externalService, attachExternalRunSseClient) {
     map.set('external.project.ensure', async (_route, req, res) => {
-        const body = await (0, server_helpers_js_1.readJsonBody)(req);
+        const body = (0, request_validation_js_1.validateBody)(await (0, server_helpers_js_1.readJsonBody)(req), externalProjectSchema);
         (0, server_helpers_js_1.json)(res, 200, await externalService.ensureProject(body));
     });
     map.set('external.run.create', async (_route, req, res) => {
-        const body = await (0, server_helpers_js_1.readJsonBody)(req);
+        const body = (0, request_validation_js_1.validateBody)(await (0, server_helpers_js_1.readJsonBody)(req), {
+            ...externalProjectSchema, external_thread_id: 'string', title: 'string', prompt: { kind: 'string', required: true },
+            permission_mode: 'string', runtime_env: 'object',
+        });
         (0, server_helpers_js_1.json)(res, 200, await externalService.createRun(body));
     });
     map.set('external.run.events', async (route, _req, res) => {

package/dist-electron/services/local-ai-core/src/runtime/handlers/knowledge-handler.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.registerKnowledgeHandlers = registerKnowledgeHandlers;
 const server_helpers_js_1 = require("../server-helpers.js");
+const request_validation_js_1 = require("../request-validation.js");
 function registerKnowledgeHandlers(map, knowledgeProvider) {
     map.set('knowledge.sources.list', async (_route, _req, res) => {
         (0, server_helpers_js_1.json)(res, 200, { sources: await knowledgeProvider.listSources() });
@@ -10,18 +11,22 @@ function registerKnowledgeHandlers(map, knowledgeProvider) {
         (0, server_helpers_js_1.json)(res, 200, await knowledgeProvider.getConfig());
     });
     map.set('knowledge.config.update', async (_route, req, res) => {
-        const body = await (0, server_helpers_js_1.readJsonBody)(req);
+        const body = (0, request_validation_js_1.validateBody)(await (0, server_helpers_js_1.readJsonBody)(req), {
+            baseUrl: 'string', authMode: 'string', token: 'string', headerName: 'string', defaultCollection: 'string',
+        });
         (0, server_helpers_js_1.json)(res, 200, await knowledgeProvider.updateConfig(body));
     });
     map.set('knowledge.folders.list', async (_route, _req, res) => {
         (0, server_helpers_js_1.json)(res, 200, { folders: await knowledgeProvider.listFolders() });
     });
     map.set('knowledge.folders.create', async (_route, req, res) => {
-        const body = await (0, server_helpers_js_1.readJsonBody)(req);
+        const body = (0, request_validation_js_1.validateBody)(await (0, server_helpers_js_1.readJsonBody)(req), {
+            name: { kind: 'string', required: true }, parentId: { kind: 'string', nullable: true },
+        });
         (0, server_helpers_js_1.json)(res, 200, await knowledgeProvider.createFolder(body));
     });
     map.set('knowledge.folder.update', async (route, req, res) => {
-        const body = await (0, server_helpers_js_1.readJsonBody)(req);
+        const body = (0, request_validation_js_1.validateBody)(await (0, server_helpers_js_1.readJsonBody)(req), { name: { kind: 'string', required: true } });
         (0, server_helpers_js_1.json)(res, 200, await knowledgeProvider.updateFolder(route.folderId, body));
     });
     map.set('knowledge.folder.delete', async (route, _req, res) => {
@@ -31,14 +36,19 @@ function registerKnowledgeHandlers(map, knowledgeProvider) {
         (0, server_helpers_js_1.json)(res, 200, { bases: await knowledgeProvider.listKnowledgeBases() });
     });
     map.set('knowledge.bases.create', async (_route, req, res) => {
-        const body = await (0, server_helpers_js_1.readJsonBody)(req);
+        const body = (0, request_validation_js_1.validateBody)(await (0, server_helpers_js_1.readJsonBody)(req), {
+            name: { kind: 'string', required: true }, description: 'string', folderId: { kind: 'string', nullable: true },
+            creatorName: 'string', icon: 'string',
+        });
         (0, server_helpers_js_1.json)(res, 200, await knowledgeProvider.createKnowledgeBase(body));
     });
     map.set('knowledge.base.get', async (route, _req, res) => {
         (0, server_helpers_js_1.json)(res, 200, await knowledgeProvider.getKnowledgeBase(route.knowledgeBaseId));
     });
     map.set('knowledge.base.update', async (route, req, res) => {
-        const body = await (0, server_helpers_js_1.readJsonBody)(req);
+        const body = (0, request_validation_js_1.validateBody)(await (0, server_helpers_js_1.readJsonBody)(req), {
+            name: 'string', description: 'string', folderId: { kind: 'string', nullable: true }, creatorName: 'string', icon: 'string',
+        });
         (0, server_helpers_js_1.json)(res, 200, await knowledgeProvider.updateKnowledgeBase(route.knowledgeBaseId, body));
     });
     map.set('knowledge.base.delete', async (route, _req, res) => {
@@ -59,7 +69,9 @@ function registerKnowledgeHandlers(map, knowledgeProvider) {
         (0, server_helpers_js_1.json)(res, 200, await knowledgeProvider.deleteKnowledgeBaseFile(route.knowledgeBaseId, route.fileId));
     });
     map.set('knowledge.base.search', async (route, req, res) => {
-        const body = await (0, server_helpers_js_1.readJsonBody)(req);
+        const body = (0, request_validation_js_1.validateBody)(await (0, server_helpers_js_1.readJsonBody)(req), {
+            query: { kind: 'string', required: true }, limit: 'number',
+        });
         (0, server_helpers_js_1.json)(res, 200, { results: await knowledgeProvider.searchKnowledgeBase(route.knowledgeBaseId, body) });
     });
 }

package/dist-electron/services/local-ai-core/src/runtime/handlers/provider-handler.js

@@ -2,16 +2,21 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.registerProviderHandlers = registerProviderHandlers;
 const server_helpers_js_1 = require("../server-helpers.js");
+const request_validation_js_1 = require("../request-validation.js");
+const providerSchema = {
+    id: 'string', name: { kind: 'string', required: true }, api_key: 'string', base_url: 'string', model: 'string',
+    models: 'array', thinking: 'string', env: 'object',
+};
 function registerProviderHandlers(map, store) {
     map.set('providers.list', async (_route, _req, res) => {
         (0, server_helpers_js_1.json)(res, 200, { providers: store.listModelProviders() });
     });
     map.set('providers.create', async (_route, req, res) => {
-        const body = await (0, server_helpers_js_1.readJsonBody)(req);
+        const body = (0, request_validation_js_1.validateBody)(await (0, server_helpers_js_1.readJsonBody)(req), providerSchema);
         (0, server_helpers_js_1.json)(res, 200, await store.upsertModelProvider(body));
     });
     map.set('provider.update', async (route, req, res) => {
-        const body = await (0, server_helpers_js_1.readJsonBody)(req);
+        const body = (0, request_validation_js_1.validateBody)(await (0, server_helpers_js_1.readJsonBody)(req), providerSchema);
         const existing = store.getModelProvider(route.providerId);
         if (!existing) {
             throw new Error(`Provider not found: ${route.providerId}`);

package/dist-electron/services/local-ai-core/src/runtime/handlers/runtime-handler.js

@@ -2,6 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.registerRuntimeHandlers = registerRuntimeHandlers;
 const server_helpers_js_1 = require("../server-helpers.js");
+const request_validation_js_1 = require("../request-validation.js");
 function registerRuntimeHandlers(map, controller, errorReporter, attachSseClient) {
     map.set('health', async (_route, _req, res) => {
         (0, server_helpers_js_1.json)(res, 200, { name: 'local-ai-core', version: '0.1.0' });
@@ -42,11 +43,35 @@ function registerRuntimeHandlers(map, controller, errorReporter, attachSseClient
         (0, server_helpers_js_1.json)(res, 200, await controller.readRuntimeConfig());
     });
     map.set('runtime.runtime-config.save', async (_route, req, res) => {
-        const body = await (0, server_helpers_js_1.readJsonBody)(req);
-        (0, server_helpers_js_1.json)(res, 200, await controller.saveRuntimeConfig((body.config || {})));
+        const body = (0, request_validation_js_1.validateBody)(await (0, server_helpers_js_1.readJsonBody)(req), {
+            config: { kind: 'object', required: true },
+        });
+        (0, server_helpers_js_1.json)(res, 200, await controller.saveRuntimeConfig(body.config));
     });
     map.set('runtime.settings.save', async (_route, req, res) => {
-        const body = await (0, server_helpers_js_1.readJsonBody)(req);
+        const body = (0, request_validation_js_1.validateBody)(await (0, server_helpers_js_1.readJsonBody)(req), {
+            binaryPath: 'string',
+            configPath: 'string',
+            autoStartService: 'boolean',
+            defaultProject: 'string',
+            knowledge: {
+                kind: 'object',
+                fields: {
+                    baseUrl: 'string',
+                    authMode: { kind: 'string', allowedValues: ['none', 'bearer', 'header'] },
+                    token: 'string',
+                    headerName: 'string',
+                    defaultCollection: 'string',
+                },
+            },
+            plugins: {
+                kind: 'object',
+                valueSchema: {
+                    enabled: 'boolean',
+                    config: 'object',
+                },
+            },
+        });
         (0, server_helpers_js_1.json)(res, 200, await controller.saveSettings(body));
     });
     map.set('diagnostics.doctor', async (_route, _req, res) => {

package/dist-electron/services/local-ai-core/src/runtime/handlers/scheduler-handler.js

@@ -2,13 +2,18 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.registerSchedulerHandlers = registerSchedulerHandlers;
 const server_helpers_js_1 = require("../server-helpers.js");
+const request_validation_js_1 = require("../request-validation.js");
 function registerSchedulerHandlers(map, scheduledJobs) {
     map.set('scheduler.jobs.list', async (_route, _req, res, url) => {
         const workspaceId = String(url.searchParams.get('workspace_id') || '');
         (0, server_helpers_js_1.json)(res, 200, { jobs: await scheduledJobs.listJobs(workspaceId || undefined) });
     });
     map.set('scheduler.jobs.create', async (_route, req, res) => {
-        const body = await (0, server_helpers_js_1.readJsonBody)(req);
+        const body = (0, request_validation_js_1.validateBody)(await (0, server_helpers_js_1.readJsonBody)(req), {
+            workspaceId: { kind: 'string', required: true }, platform: 'string', route: 'object', threadId: 'string',
+            executionMode: 'string', triggerType: { kind: 'string', required: true }, cronExpr: 'string', runAt: 'string',
+            promptTemplate: { kind: 'string', required: true }, description: 'string', enabled: 'boolean',
+        });
         (0, server_helpers_js_1.json)(res, 200, await scheduledJobs.createJob(body));
     });
     map.set('scheduler.job.get', async (route, _req, res) => {
@@ -25,7 +30,10 @@ function registerSchedulerHandlers(map, scheduledJobs) {
         (0, server_helpers_js_1.json)(res, 200, await scheduledJobs.runJobNow(route.jobId));
     });
     map.set('scheduler.job.update', async (route, req, res) => {
-        const body = await (0, server_helpers_js_1.readJsonBody)(req);
+        const body = (0, request_validation_js_1.validateBody)(await (0, server_helpers_js_1.readJsonBody)(req), {
+            route: 'object', executionMode: 'string', triggerType: 'string', cronExpr: 'string', runAt: 'string',
+            promptTemplate: 'string', description: 'string', enabled: 'boolean',
+        });
         (0, server_helpers_js_1.json)(res, 200, await scheduledJobs.updateJob(route.jobId, body));
     });
     map.set('scheduler.job.delete', async (route, _req, res) => {