@konglx/rotom 2.21.0

package/dist/master/dashboard/assets/useMonaco-ILb4vyPh.js

@@ -0,0 +1,12 @@
+const __vite__mapDeps=(i,m=__vite__mapDeps,d=(m.f||(m.f=["assets/monaco-core-DyX1CsEw.css"])))=>i.map(i=>d[i]);
+import{r as a,W as T}from"./react-vendor-C8IxlyCR.js";import{_ as ye}from"./vite-preload-CxJPbCTl.js";function oe(e,t){(t==null||t>e.length)&&(t=e.length);for(var r=0,n=Array(t);r<t;r++)n[r]=e[r];return n}function we(e){if(Array.isArray(e))return e}function Oe(e,t,r){return(t=Ie(t))in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function je(e,t){var r=e==null?null:typeof Symbol<"u"&&e[Symbol.iterator]||e["@@iterator"];if(r!=null){var n,o,i,s,p=[],g=!0,v=!1;try{if(i=(r=r.call(e)).next,t!==0)for(;!(g=(n=i.call(r)).done)&&(p.push(n.value),p.length!==t);g=!0);}catch(E){v=!0,o=E}finally{try{if(!g&&r.return!=null&&(s=r.return(),Object(s)!==s))return}finally{if(v)throw o}}return p}}function Me(){throw new TypeError(`Invalid attempt to destructure non-iterable instance.
+In order to be iterable, non-array objects must have a [Symbol.iterator]() method.`)}function ie(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter(function(o){return Object.getOwnPropertyDescriptor(e,o).enumerable})),r.push.apply(r,n)}return r}function ue(e){for(var t=1;t<arguments.length;t++){var r=arguments[t]!=null?arguments[t]:{};t%2?ie(Object(r),!0).forEach(function(n){Oe(e,n,r[n])}):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):ie(Object(r)).forEach(function(n){Object.defineProperty(e,n,Object.getOwnPropertyDescriptor(r,n))})}return e}function Ee(e,t){if(e==null)return{};var r,n,o=Pe(e,t);if(Object.getOwnPropertySymbols){var i=Object.getOwnPropertySymbols(e);for(n=0;n<i.length;n++)r=i[n],t.indexOf(r)===-1&&{}.propertyIsEnumerable.call(e,r)&&(o[r]=e[r])}return o}function Pe(e,t){if(e==null)return{};var r={};for(var n in e)if({}.hasOwnProperty.call(e,n)){if(t.indexOf(n)!==-1)continue;r[n]=e[n]}return r}function Se(e,t){return we(e)||je(e,t)||Ce(e,t)||Me()}function Re(e,t){if(typeof e!="object"||!e)return e;var r=e[Symbol.toPrimitive];if(r!==void 0){var n=r.call(e,t);if(typeof n!="object")return n;throw new TypeError("@@toPrimitive must return a primitive value.")}return(t==="string"?String:Number)(e)}function Ie(e){var t=Re(e,"string");return typeof t=="symbol"?t:t+""}function Ce(e,t){if(e){if(typeof e=="string")return oe(e,t);var r={}.toString.call(e).slice(8,-1);return r==="Object"&&e.constructor&&(r=e.constructor.name),r==="Map"||r==="Set"?Array.from(e):r==="Arguments"||/^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(r)?oe(e,t):void 0}}function Le(e,t,r){return t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function ae(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter(function(o){return Object.getOwnPropertyDescriptor(e,o).enumerable})),r.push.apply(r,n)}return r}function ce(e){for(var t=1;t<arguments.length;t++){var r=arguments[t]!=null?arguments[t]:{};t%2?ae(Object(r),!0).forEach(function(n){Le(e,n,r[n])}):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):ae(Object(r)).forEach(function(n){Object.defineProperty(e,n,Object.getOwnPropertyDescriptor(r,n))})}return e}function Ae(){for(var e=arguments.length,t=new Array(e),r=0;r<e;r++)t[r]=arguments[r];return function(n){return t.reduceRight(function(o,i){return i(o)},n)}}function N(e){return function t(){for(var r=this,n=arguments.length,o=new Array(n),i=0;i<n;i++)o[i]=arguments[i];return o.length>=e.length?e.apply(this,o):function(){for(var s=arguments.length,p=new Array(s),g=0;g<s;g++)p[g]=arguments[g];return t.apply(r,[].concat(o,p))}}}function K(e){return{}.toString.call(e).includes("Object")}function Te(e){return!Object.keys(e).length}function z(e){return typeof e=="function"}function $e(e,t){return Object.prototype.hasOwnProperty.call(e,t)}function De(e,t){return K(t)||S("changeType"),Object.keys(t).some(function(r){return!$e(e,r)})&&S("changeField"),t}function Ve(e){z(e)||S("selectorType")}function xe(e){z(e)||K(e)||S("handlerType"),K(e)&&Object.values(e).some(function(t){return!z(t)})&&S("handlersType")}function _e(e){e||S("initialIsRequired"),K(e)||S("initialType"),Te(e)&&S("initialContent")}function Ne(e,t){throw new Error(e[t]||e.default)}var qe={initialIsRequired:"initial state is required",initialType:"initial state should be an object",initialContent:"initial state shouldn't be an empty object",handlerType:"handler should be an object or a function",handlersType:"all handlers should be a functions",selectorType:"selector should be a function",changeType:"provided value of changes should be an object",changeField:'it seams you want to change a field in the state which is not specified in the "initial" state',default:"an unknown error accured in `state-local` package"},S=N(Ne)(qe),H={changes:De,selector:Ve,handler:xe,initial:_e};function ze(e){var t=arguments.length>1&&arguments[1]!==void 0?arguments[1]:{};H.initial(e),H.handler(t);var r={current:e},n=N(We)(r,t),o=N(Ue)(r),i=N(H.changes)(e),s=N(Fe)(r);function p(){var v=arguments.length>0&&arguments[0]!==void 0?arguments[0]:function(E){return E};return H.selector(v),v(r.current)}function g(v){Ae(n,o,i,s)(v)}return[p,g]}function Fe(e,t){return z(t)?t(e.current):t}function Ue(e,t){return e.current=ce(ce({},e.current),t),t}function We(e,t,r){return z(t)?t(e.current):Object.keys(r).forEach(function(n){var o;return(o=t[n])===null||o===void 0?void 0:o.call(t,e.current[n])}),r}var He={create:ze},Be={paths:{vs:"https://cdn.jsdelivr.net/npm/monaco-editor@0.55.1/min/vs"}};function Ke(e){return function t(){for(var r=this,n=arguments.length,o=new Array(n),i=0;i<n;i++)o[i]=arguments[i];return o.length>=e.length?e.apply(this,o):function(){for(var s=arguments.length,p=new Array(s),g=0;g<s;g++)p[g]=arguments[g];return t.apply(r,[].concat(o,p))}}}function Ge(e){return{}.toString.call(e).includes("Object")}function Ye(e){return e||le("configIsRequired"),Ge(e)||le("configType"),e.urls?(Je(),{paths:{vs:e.urls.monacoBase}}):e}function Je(){console.warn(se.deprecation)}function Qe(e,t){throw new Error(e[t]||e.default)}var se={configIsRequired:"the configuration object is required",configType:"the configuration object should be an object",default:"an unknown error accured in `@monaco-editor/loader` package",deprecation:`Deprecation warning!
+    You are using deprecated way of configuration.
+
+    Instead of using
+      monaco.config({ urls: { monacoBase: '...' } })
+    use
+      monaco.config({ paths: { vs: '...' } })
+
+    For more please check the link https://github.com/suren-atoyan/monaco-loader#config
+  `},le=Ke(Qe)(se),Xe={config:Ye},Ze=function(){for(var t=arguments.length,r=new Array(t),n=0;n<t;n++)r[n]=arguments[n];return function(o){return r.reduceRight(function(i,s){return s(i)},o)}};function fe(e,t){return Object.keys(t).forEach(function(r){t[r]instanceof Object&&e[r]&&Object.assign(t[r],fe(e[r],t[r]))}),ue(ue({},e),t)}var ke={type:"cancelation",msg:"operation is manually canceled"};function ee(e){var t=!1,r=new Promise(function(n,o){e.then(function(i){return t?o(ke):n(i)}),e.catch(o)});return r.cancel=function(){return t=!0},r}var et=["monaco"],tt=He.create({config:Be,isInitialized:!1,resolve:null,reject:null,monaco:null}),de=Se(tt,2),F=de[0],G=de[1];function rt(e){var t=Xe.config(e),r=t.monaco,n=Ee(t,et);G(function(o){return{config:fe(o.config,n),monaco:r}})}function nt(){var e=F(function(t){var r=t.monaco,n=t.isInitialized,o=t.resolve;return{monaco:r,isInitialized:n,resolve:o}});if(!e.isInitialized){if(G({isInitialized:!0}),e.monaco)return e.resolve(e.monaco),ee(te);if(window.monaco&&window.monaco.editor)return pe(window.monaco),e.resolve(window.monaco),ee(te);Ze(ot,ut)(at)}return ee(te)}function ot(e){return document.body.appendChild(e)}function it(e){var t=document.createElement("script");return e&&(t.src=e),t}function ut(e){var t=F(function(n){var o=n.config,i=n.reject;return{config:o,reject:i}}),r=it("".concat(t.config.paths.vs,"/loader.js"));return r.onload=function(){return e()},r.onerror=t.reject,r}function at(){var e=F(function(r){var n=r.config,o=r.resolve,i=r.reject;return{config:n,resolve:o,reject:i}}),t=window.require;t.config(e.config),t(["vs/editor/editor.main"],function(r){var n=r.m||r;pe(n),e.resolve(n)},function(r){e.reject(r)})}function pe(e){F().monaco||G({monaco:e})}function ct(){return F(function(e){var t=e.monaco;return t})}var te=new Promise(function(e,t){return G({resolve:e,reject:t})}),ge={config:rt,init:nt,__getMonacoInstance:ct},lt={wrapper:{display:"flex",position:"relative",textAlign:"initial"},fullWidth:{width:"100%"},hide:{display:"none"}},re=lt,st={container:{display:"flex",height:"100%",width:"100%",justifyContent:"center",alignItems:"center"}},ft=st;function dt({children:e}){return T.createElement("div",{style:ft.container},e)}var pt=dt,gt=pt;function ht({width:e,height:t,isEditorReady:r,loading:n,_ref:o,className:i,wrapperProps:s}){return T.createElement("section",{style:{...re.wrapper,width:e,height:t},...s},!r&&T.createElement(gt,null,n),T.createElement("div",{ref:o,style:{...re.fullWidth,...!r&&re.hide},className:i}))}var vt=ht,he=a.memo(vt);function mt(e){a.useEffect(e,[])}var ve=mt;function bt(e,t,r=!0){let n=a.useRef(!0);a.useEffect(n.current||!r?()=>{n.current=!1}:e,t)}var j=bt;function q(){}function A(e,t,r,n){return yt(e,n)||wt(e,t,r,n)}function yt(e,t){return e.editor.getModel(me(e,t))}function wt(e,t,r,n){return e.editor.createModel(t,r,n?me(e,n):void 0)}function me(e,t){return e.Uri.parse(t)}function Ot({original:e,modified:t,language:r,originalLanguage:n,modifiedLanguage:o,originalModelPath:i,modifiedModelPath:s,keepCurrentOriginalModel:p=!1,keepCurrentModifiedModel:g=!1,theme:v="light",loading:E="Loading...",options:M={},height:Y="100%",width:J="100%",className:Q,wrapperProps:X={},beforeMount:Z=q,onMount:k=q}){let[w,$]=a.useState(!1),[R,m]=a.useState(!0),b=a.useRef(null),h=a.useRef(null),D=a.useRef(null),y=a.useRef(k),l=a.useRef(Z),I=a.useRef(!1);ve(()=>{let u=ge.init();return u.then(f=>(h.current=f)&&m(!1)).catch(f=>(f==null?void 0:f.type)!=="cancelation"&&console.error("Monaco initialization: error:",f)),()=>b.current?V():u.cancel()}),j(()=>{if(b.current&&h.current){let u=b.current.getOriginalEditor(),f=A(h.current,e||"",n||r||"text",i||"");f!==u.getModel()&&u.setModel(f)}},[i],w),j(()=>{if(b.current&&h.current){let u=b.current.getModifiedEditor(),f=A(h.current,t||"",o||r||"text",s||"");f!==u.getModel()&&u.setModel(f)}},[s],w),j(()=>{let u=b.current.getModifiedEditor();u.getOption(h.current.editor.EditorOption.readOnly)?u.setValue(t||""):t!==u.getValue()&&(u.executeEdits("",[{range:u.getModel().getFullModelRange(),text:t||"",forceMoveMarkers:!0}]),u.pushUndoStop())},[t],w),j(()=>{var u,f;(f=(u=b.current)==null?void 0:u.getModel())==null||f.original.setValue(e||"")},[e],w),j(()=>{let{original:u,modified:f}=b.current.getModel();h.current.editor.setModelLanguage(u,n||r||"text"),h.current.editor.setModelLanguage(f,o||r||"text")},[r,n,o],w),j(()=>{var u;(u=h.current)==null||u.editor.setTheme(v)},[v],w),j(()=>{var u;(u=b.current)==null||u.updateOptions(M)},[M],w);let U=a.useCallback(()=>{var P;if(!h.current)return;l.current(h.current);let u=A(h.current,e||"",n||r||"text",i||""),f=A(h.current,t||"",o||r||"text",s||"");(P=b.current)==null||P.setModel({original:u,modified:f})},[r,t,o,e,n,i,s]),W=a.useCallback(()=>{var u;!I.current&&D.current&&(b.current=h.current.editor.createDiffEditor(D.current,{automaticLayout:!0,...M}),U(),(u=h.current)==null||u.editor.setTheme(v),$(!0),I.current=!0)},[M,v,U]);a.useEffect(()=>{w&&y.current(b.current,h.current)},[w]),a.useEffect(()=>{!R&&!w&&W()},[R,w,W]);function V(){var f,P,C,x;let u=(f=b.current)==null?void 0:f.getModel();p||((P=u==null?void 0:u.original)==null||P.dispose()),g||((C=u==null?void 0:u.modified)==null||C.dispose()),(x=b.current)==null||x.dispose()}return T.createElement(he,{width:J,height:Y,isEditorReady:w,loading:E,_ref:D,className:Q,wrapperProps:X})}var jt=Ot,At=a.memo(jt);function Mt(e){let t=a.useRef();return a.useEffect(()=>{t.current=e},[e]),t.current}var Et=Mt,B=new Map;function Pt({defaultValue:e,defaultLanguage:t,defaultPath:r,value:n,language:o,path:i,theme:s="light",line:p,loading:g="Loading...",options:v={},overrideServices:E={},saveViewState:M=!0,keepCurrentModel:Y=!1,width:J="100%",height:Q="100%",className:X,wrapperProps:Z={},beforeMount:k=q,onMount:w=q,onChange:$,onValidate:R=q}){let[m,b]=a.useState(!1),[h,D]=a.useState(!0),y=a.useRef(null),l=a.useRef(null),I=a.useRef(null),U=a.useRef(w),W=a.useRef(k),V=a.useRef(),u=a.useRef(n),f=Et(i),P=a.useRef(!1),C=a.useRef(!1);ve(()=>{let c=ge.init();return c.then(d=>(y.current=d)&&D(!1)).catch(d=>(d==null?void 0:d.type)!=="cancelation"&&console.error("Monaco initialization: error:",d)),()=>l.current?be():c.cancel()}),j(()=>{var d,O,_,L;let c=A(y.current,e||n||"",t||o||"",i||r||"");c!==((d=l.current)==null?void 0:d.getModel())&&(M&&B.set(f,(O=l.current)==null?void 0:O.saveViewState()),(_=l.current)==null||_.setModel(c),M&&((L=l.current)==null||L.restoreViewState(B.get(i))))},[i],m),j(()=>{var c;(c=l.current)==null||c.updateOptions(v)},[v],m),j(()=>{!l.current||n===void 0||(l.current.getOption(y.current.editor.EditorOption.readOnly)?l.current.setValue(n):n!==l.current.getValue()&&(C.current=!0,l.current.executeEdits("",[{range:l.current.getModel().getFullModelRange(),text:n,forceMoveMarkers:!0}]),l.current.pushUndoStop(),C.current=!1))},[n],m),j(()=>{var d,O;let c=(d=l.current)==null?void 0:d.getModel();c&&o&&((O=y.current)==null||O.editor.setModelLanguage(c,o))},[o],m),j(()=>{var c;p!==void 0&&((c=l.current)==null||c.revealLine(p))},[p],m),j(()=>{var c;(c=y.current)==null||c.editor.setTheme(s)},[s],m);let x=a.useCallback(()=>{var c;if(!(!I.current||!y.current)&&!P.current){W.current(y.current);let d=i||r,O=A(y.current,n||e||"",t||o||"",d||"");l.current=(c=y.current)==null?void 0:c.editor.create(I.current,{model:O,automaticLayout:!0,...v},E),M&&l.current.restoreViewState(B.get(d)),y.current.editor.setTheme(s),p!==void 0&&l.current.revealLine(p),b(!0),P.current=!0}},[e,t,r,n,o,i,v,E,M,s,p]);a.useEffect(()=>{m&&U.current(l.current,y.current)},[m]),a.useEffect(()=>{!h&&!m&&x()},[h,m,x]),u.current=n,a.useEffect(()=>{var c,d;m&&$&&((c=V.current)==null||c.dispose(),V.current=(d=l.current)==null?void 0:d.onDidChangeModelContent(O=>{C.current||$(l.current.getValue(),O)}))},[m,$]),a.useEffect(()=>{if(m){let c=y.current.editor.onDidChangeMarkers(d=>{var _;let O=(_=l.current.getModel())==null?void 0:_.uri;if(O&&d.find(L=>L.path===O.path)){let L=y.current.editor.getModelMarkers({resource:O});R==null||R(L)}});return()=>{c==null||c.dispose()}}return()=>{}},[m,R]);function be(){var c,d;(c=V.current)==null||c.dispose(),Y?M&&B.set(i,l.current.saveViewState()):(d=l.current.getModel())==null||d.dispose(),l.current.dispose()}return T.createElement(he,{width:J,height:Q,isEditorReady:m,loading:g,_ref:I,className:X,wrapperProps:Z})}var St=Pt,Rt=a.memo(St),Tt=Rt;let ne=null;function It(){return ne||(ne=ye(()=>import("./monaco-setup-CiOPQdmo.js"),__vite__mapDeps([0])).then(e=>e.default)),ne}function $t(){const[e,t]=a.useState(!1),[r,n]=a.useState(null);return a.useEffect(()=>{let o=!1;return It().then(()=>{o||t(!0)},i=>{o||n(i instanceof Error?i:new Error(String(i)))}),()=>{o=!0}},[]),{ready:e,error:r}}export{Tt as F,ge as l,$t as u,At as w};

package/dist/master/dashboard/assets/vite-preload-CxJPbCTl.js

@@ -0,0 +1 @@
+const p=(function(){const s=typeof document<"u"&&document.createElement("link").relList;return s&&s.supports&&s.supports("modulepreload")?"modulepreload":"preload"})(),E=function(i){return"/dashboard/"+i},f={},y=function(s,c,v){let u=Promise.resolve();if(c&&c.length>0){let n=function(t){return Promise.all(t.map(o=>Promise.resolve(o).then(l=>({status:"fulfilled",value:l}),l=>({status:"rejected",reason:l}))))};document.getElementsByTagName("link");const e=document.querySelector("meta[property=csp-nonce]"),d=(e==null?void 0:e.nonce)||(e==null?void 0:e.getAttribute("nonce"));u=n(c.map(t=>{if(t=E(t),t in f)return;f[t]=!0;const o=t.endsWith(".css"),l=o?'[rel="stylesheet"]':"";if(document.querySelector(`link[href="${t}"]${l}`))return;const r=document.createElement("link");if(r.rel=o?"stylesheet":p,o||(r.as="script"),r.crossOrigin="",r.href=t,d&&r.setAttribute("nonce",d),document.head.appendChild(r),o)return new Promise((m,h)=>{r.addEventListener("load",m),r.addEventListener("error",()=>h(new Error(`Unable to preload CSS for ${t}`)))})}))}function a(n){const e=new Event("vite:preloadError",{cancelable:!0});if(e.payload=n,window.dispatchEvent(e),!e.defaultPrevented)throw n}return u.then(n=>{for(const e of n||[])e.status==="rejected"&&a(e.reason);return s().catch(a)})};export{y as _};

package/dist/master/dashboard/debug-auth.html

@@ -0,0 +1,197 @@
+<!DOCTYPE html>
+<html>
+<head>
+    <title>Auth Debug - A2A WORKSPACE</title>
+    <style>
+        body {
+            font-family: monospace;
+            padding: 20px;
+            background: #1e1e1e;
+            color: #d4d4d4;
+        }
+        .section {
+            margin: 20px 0;
+            padding: 15px;
+            border: 1px solid #444;
+            border-radius: 5px;
+        }
+        .success { color: #4ec9b0; }
+        .error { color: #f48771; }
+        .info { color: #569cd6; }
+        button {
+            background: #0e639c;
+            color: white;
+            border: none;
+            padding: 10px 20px;
+            margin: 5px;
+            border-radius: 3px;
+            cursor: pointer;
+        }
+        button:hover { background: #1177bb; }
+        pre {
+            background: #2d2d2d;
+            padding: 10px;
+            border-radius: 3px;
+            overflow-x: auto;
+        }
+    </style>
+</head>
+<body>
+    <h1>🔍 Dashboard Authentication Debug</h1>
+
+    <div class="section">
+        <h2>1. Check LocalStorage</h2>
+        <button onclick="checkStorage()">Check Storage</button>
+        <pre id="storage-result">Click to check...</pre>
+    </div>
+
+    <div class="section">
+        <h2>2. Test Login</h2>
+        <button onclick="testLogin()">Test Login (admin/admin123)</button>
+        <pre id="login-result">Click to test...</pre>
+    </div>
+
+    <div class="section">
+        <h2>3. Test Authenticated Request</h2>
+        <button onclick="testAuthRequest()">Test /api/agents</button>
+        <pre id="auth-result">Click to test...</pre>
+    </div>
+
+    <div class="section">
+        <h2>4. Manual Token Test</h2>
+        <input type="text" id="manual-token" placeholder="Paste token here" style="width: 80%; padding: 5px;">
+        <button onclick="testManualToken()">Test Token</button>
+        <pre id="manual-result">Paste token and click test...</pre>
+    </div>
+
+    <script>
+        function checkStorage() {
+            const result = document.getElementById('storage-result');
+            const token = localStorage.getItem('auth_token');
+
+            if (token) {
+                // Decode JWT to see payload
+                try {
+                    const payload = JSON.parse(atob(token.split('.')[1]));
+                    result.innerHTML = `<span class="success">✓ Token found in localStorage</span>\n\n` +
+                        `Token: ${token.substring(0, 50)}...\n\n` +
+                        `Decoded payload:\n${JSON.stringify(payload, null, 2)}`;
+                } catch (e) {
+                    result.innerHTML = `<span class="error">✗ Invalid token format</span>\n\n` +
+                        `Token: ${token}`;
+                }
+            } else {
+                result.innerHTML = '<span class="error">✗ No token found in localStorage</span>';
+            }
+        }
+
+        async function testLogin() {
+            const result = document.getElementById('login-result');
+            result.innerHTML = '<span class="info">Testing login...</span>';
+
+            try {
+                const response = await fetch('/api/login', {
+                    method: 'POST',
+                    headers: {'Content-Type': 'application/json'},
+                    body: JSON.stringify({username: 'admin', password: 'admin123'})
+                });
+
+                const data = await response.json();
+
+                if (response.ok) {
+                    // Store token
+                    localStorage.setItem('auth_token', data.token);
+
+                    const payload = JSON.parse(atob(data.token.split('.')[1]));
+                    result.innerHTML = `<span class="success">✓ Login successful!</span>\n\n` +
+                        `Token: ${data.token.substring(0, 50)}...\n\n` +
+                        `Decoded payload:\n${JSON.stringify(payload, null, 2)}\n\n` +
+                        `Token stored to localStorage`;
+                } else {
+                    result.innerHTML = `<span class="error">✗ Login failed</span>\n\n` +
+                        `Status: ${response.status}\n` +
+                        `Error: ${data.error || 'Unknown error'}`;
+                }
+            } catch (error) {
+                result.innerHTML = `<span class="error">✗ Network error</span>\n\n${error.message}`;
+            }
+        }
+
+        async function testAuthRequest() {
+            const result = document.getElementById('auth-result');
+            const token = localStorage.getItem('auth_token');
+
+            if (!token) {
+                result.innerHTML = '<span class="error">✗ No token in localStorage. Please login first.</span>';
+                return;
+            }
+
+            result.innerHTML = `<span class="info">Testing /api/agents with token...</span>\n\n` +
+                `Authorization header: Bearer ${token.substring(0, 30)}...`;
+
+            try {
+                const response = await fetch('/api/agents', {
+                    method: 'GET',
+                    headers: {
+                        'Authorization': `Bearer ${token}`,
+                        'Content-Type': 'application/json'
+                    }
+                });
+
+                const text = await response.text();
+
+                if (response.ok) {
+                    const data = JSON.parse(text);
+                    result.innerHTML = `<span class="success">✓ Authenticated request successful!</span>\n\n` +
+                        `Status: ${response.status}\n\n` +
+                        `Response:\n${JSON.stringify(data, null, 2).substring(0, 500)}...`;
+                } else {
+                    result.innerHTML = `<span class="error">✗ Authenticated request failed</span>\n\n` +
+                        `Status: ${response.status}\n` +
+                        `Response: ${text}`;
+                }
+            } catch (error) {
+                result.innerHTML = `<span class="error">✗ Network error</span>\n\n${error.message}`;
+            }
+        }
+
+        async function testManualToken() {
+            const result = document.getElementById('manual-result');
+            const token = document.getElementById('manual-token').value.trim();
+
+            if (!token) {
+                result.innerHTML = '<span class="error">✗ Please enter a token</span>';
+                return;
+            }
+
+            result.innerHTML = `<span class="info">Testing token...</span>`;
+
+            try {
+                const response = await fetch('/api/agents', {
+                    method: 'GET',
+                    headers: {
+                        'Authorization': `Bearer ${token}`,
+                        'Content-Type': 'application/json'
+                    }
+                });
+
+                const text = await response.text();
+
+                if (response.ok) {
+                    result.innerHTML = `<span class="success">✓ Token is valid!</span>\n\n` +
+                        `Status: ${response.status}`;
+                } else {
+                    result.innerHTML = `<span class="error">✗ Token is invalid or expired</span>\n\n` +
+                        `Status: ${response.status}\n` +
+                        `Response: ${text}`;
+                }
+            } catch (error) {
+                result.innerHTML = `<span class="error">✗ Network error</span>\n\n${error.message}`;
+            }
+        }
+
+        // Auto-check storage on load
+        window.onload = () => checkStorage();
+    </script>
+</body>
+</html>

package/dist/master/dashboard/index.html

@@ -0,0 +1,20 @@
+<!doctype html>
+<html lang="zh-CN">
+  <head>
+    <meta charset="UTF-8" />
+    <link rel="icon" type="image/x-icon" href="/dashboard/favicon.ico" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+    <title>Rotom · A2A WORKSPACE</title>
+    <link rel="preconnect" href="https://fonts.googleapis.com" />
+    <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin />
+    <link
+      rel="stylesheet"
+      href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800;900&family=JetBrains+Mono:wght@400;500;600&display=swap"
+    />
+    <script type="module" crossorigin src="/dashboard/assets/index-Dhu4SN1z.js"></script>
+    <link rel="stylesheet" crossorigin href="/dashboard/assets/index-CChrTn81.css">
+  </head>
+  <body>
+    <div id="root"></div>
+  </body>
+</html>

package/dist/master/db/agent-sessions.js

@@ -0,0 +1,60 @@
+import { nowBeijing } from "../../shared/time.js";
+export const agentSessionMethods = {
+    /** 插入或更新一行。usage/model/cumulative 等字段全量覆盖;created_at
+     *  首次插入时写入,后续 upsert 不动;last_used_at 每次 upsert 刷新。 */
+    upsertAgentSession(s) {
+        const now = nowBeijing();
+        const u = s.usage;
+        this.db.prepare(`
+      INSERT INTO agent_sessions (
+        group_id, agent_name, cli_tool, session_id,
+        created_at, last_used_at,
+        input_tokens, output_tokens, cache_read_tokens, cache_creation_tokens,
+        total_cost_usd, model,
+        cumulative_cost_usd,
+        cumulative_input_tokens, cumulative_output_tokens,
+        cumulative_cache_read_tokens, cumulative_cache_creation_tokens,
+        invalidated_at
+      ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, NULL)
+      ON CONFLICT(cli_tool, group_id, session_id) DO UPDATE SET
+        agent_name                    = excluded.agent_name,
+        last_used_at                  = excluded.last_used_at,
+        input_tokens                  = COALESCE(excluded.input_tokens, agent_sessions.input_tokens),
+        output_tokens                 = COALESCE(excluded.output_tokens, agent_sessions.output_tokens),
+        cache_read_tokens             = COALESCE(excluded.cache_read_tokens, agent_sessions.cache_read_tokens),
+        cache_creation_tokens         = COALESCE(excluded.cache_creation_tokens, agent_sessions.cache_creation_tokens),
+        total_cost_usd                = COALESCE(excluded.total_cost_usd, agent_sessions.total_cost_usd),
+        model                         = COALESCE(excluded.model, agent_sessions.model),
+        cumulative_cost_usd           = COALESCE(excluded.cumulative_cost_usd, agent_sessions.cumulative_cost_usd),
+        cumulative_input_tokens       = COALESCE(excluded.cumulative_input_tokens, agent_sessions.cumulative_input_tokens),
+        cumulative_output_tokens      = COALESCE(excluded.cumulative_output_tokens, agent_sessions.cumulative_output_tokens),
+        cumulative_cache_read_tokens  = COALESCE(excluded.cumulative_cache_read_tokens, agent_sessions.cumulative_cache_read_tokens),
+        cumulative_cache_creation_tokens = COALESCE(excluded.cumulative_cache_creation_tokens, agent_sessions.cumulative_cache_creation_tokens),
+        invalidated_at                = NULL
+    `).run(s.groupId, s.agentName, s.cliTool, s.sessionId, now, now, u?.inputTokens ?? null, u?.outputTokens ?? null, u?.cacheReadTokens ?? null, u?.cacheCreationTokens ?? null, u?.totalCostUsd ?? null, s.model ?? null, s.cumulativeCostUsd ?? 0, s.cumulativeInputTokens ?? 0, s.cumulativeOutputTokens ?? 0, s.cumulativeCacheReadTokens ?? 0, s.cumulativeCacheCreationTokens ?? 0);
+    },
+    /** 列出该群所有 session(包括已失效的),按最近使用倒序。Dashboard 用。 */
+    listAgentSessionsByGroup(groupId) {
+        return this.db.prepare("SELECT * FROM agent_sessions WHERE group_id = ? ORDER BY invalidated_at IS NOT NULL, last_used_at DESC").all(groupId);
+    },
+    /** 列出某 agent + cliTool 的所有 active session(未失效)。worker 启动时
+     *  master 推 session_sync_push 用。 */
+    listActiveAgentSessions(agentName, cliTool) {
+        return this.db.prepare("SELECT * FROM agent_sessions WHERE agent_name = ? AND cli_tool = ? AND invalidated_at IS NULL ORDER BY last_used_at DESC").all(agentName, cliTool);
+    },
+    /** 标记失效:不删除行,只打 invalidated_at 戳。保留历史。 */
+    invalidateAgentSession(cliTool, groupId, sessionId) {
+        const now = nowBeijing();
+        const r = this.db.prepare("UPDATE agent_sessions SET invalidated_at = ? WHERE cli_tool = ? AND group_id = ? AND session_id = ?").run(now, cliTool, groupId, sessionId);
+        return r.changes > 0;
+    },
+    /** 硬删除:Dashboard 用户主动删 session 时调用。 */
+    deleteAgentSession(cliTool, groupId, sessionId) {
+        const r = this.db.prepare("DELETE FROM agent_sessions WHERE cli_tool = ? AND group_id = ? AND session_id = ?").run(cliTool, groupId, sessionId);
+        return r.changes > 0;
+    },
+    /** 反查单条(按 sessionId)。GET /sessions/:.../usage 用。 */
+    findAgentSession(sessionId) {
+        return this.db.prepare("SELECT * FROM agent_sessions WHERE session_id = ? ORDER BY invalidated_at IS NOT NULL, last_used_at DESC LIMIT 1").get(sessionId);
+    },
+};

package/dist/master/db/agent-visibility.js

@@ -0,0 +1,64 @@
+/**
+ * agent_visibility CRUD —— 跨 master 可见的 agent 发布记录。
+ *
+ * 协调侧权威:member 通过 FedAgentPublish 上报,协调侧 upsert。
+ * Member 侧缓存:从 FedDirectorySync 同步,只读;Routing 在本机找不到时查这里。
+ *
+ * PK 是 (team_id, master_id, agent_name),不用 hostname(hostname 只是 display,可改)。
+ * 历史命名:Phase 2 叫 department_id,migration 058 改名 team_id。
+ */
+export const agentVisibilityMethods = {
+    listVisibleAgents(teamId) {
+        return this.db.prepare("SELECT * FROM agent_visibility WHERE team_id = ? ORDER BY hostname, agent_name").all(teamId);
+    },
+    /**
+     * UPSERT 协调侧权威记录(member 上报时调用)。
+     * 若 hostname 改了,只更新 display 列,master_id+name 主键不变。
+     */
+    upsertVisibleAgent(input) {
+        this.db.prepare(`
+      INSERT INTO agent_visibility
+        (team_id, master_id, agent_name, hostname, display_name, is_human, online, last_heartbeat)
+      VALUES (?, ?, ?, ?, ?, ?, ?, datetime('now'))
+      ON CONFLICT(team_id, master_id, agent_name) DO UPDATE SET
+        hostname = excluded.hostname,
+        display_name = COALESCE(excluded.display_name, agent_visibility.display_name),
+        is_human = excluded.is_human,
+        online = excluded.online,
+        last_heartbeat = datetime('now')
+    `).run(input.team_id, input.master_id, input.agent_name, input.hostname, input.display_name ?? null, input.is_human ? 1 : 0, input.online ? 1 : 0);
+    },
+    setVisibleOnline(teamId, masterId, agentName, online) {
+        this.db.prepare(`
+      UPDATE agent_visibility SET
+        online = ?,
+        last_heartbeat = datetime('now')
+      WHERE team_id = ? AND master_id = ? AND agent_name = ?
+    `).run(online ? 1 : 0, teamId, masterId, agentName);
+    },
+    removeVisibleAgent(teamId, masterId, agentName) {
+        const r = this.db.prepare("DELETE FROM agent_visibility WHERE team_id = ? AND master_id = ? AND agent_name = ?").run(teamId, masterId, agentName);
+        return r.changes > 0;
+    },
+    /** member 离开团队 / 协调 master 下线时:清掉该 master 在团队里的所有可见 agent */
+    clearVisibleAgentsForMaster(teamId, masterId) {
+        const r = this.db.prepare("DELETE FROM agent_visibility WHERE team_id = ? AND master_id = ?").run(teamId, masterId);
+        return r.changes;
+    },
+    /** 清掉整个团队的所有可见 agent(member 离开时) */
+    clearVisibleAgents(teamId) {
+        const r = this.db.prepare("DELETE FROM agent_visibility WHERE team_id = ?").run(teamId);
+        return r.changes;
+    },
+    /** 按 (hostname, name) 反查 —— Router 解析 "alice@hostB" 时用 */
+    findVisibleAgentByHostAndName(teamId, hostname, agentName) {
+        return this.db.prepare("SELECT * FROM agent_visibility WHERE team_id = ? AND hostname = ? AND agent_name = ?").get(teamId, hostname, agentName);
+    },
+    /**
+     * 按 name 反查(不带 hostname) —— Router 解析裸 "alice" 时用。
+     * 若团队内 name 唯一,返回单条;否则返回多条(调用方报歧义错误)。
+     */
+    findVisibleAgentsByName(teamId, agentName) {
+        return this.db.prepare("SELECT * FROM agent_visibility WHERE team_id = ? AND agent_name = ?").all(teamId, agentName);
+    },
+};

package/dist/master/db/agents.js

@@ -0,0 +1,119 @@
+import { nowBeijing } from "../../shared/time.js";
+import { buildUpdate } from "./build-update.js";
+export const agentMethods = {
+    getAgentByName(name) {
+        return this.db.prepare("SELECT * FROM agents WHERE name = ?").get(name);
+    },
+    /**
+     * 跨 hostname 维度查询(本机内仍按 hostname 复合键,但本机内 name 已 UNIQUE,
+     * 等价于 getAgentByName;留给 Phase 2 federation 使用)。
+     */
+    getAgentByHostAndName(hostname, name) {
+        return this.db.prepare("SELECT * FROM agents WHERE hostname = ? AND name = ?").get(hostname, name);
+    },
+    /**
+     * 本机 agent 查询:隐式注入本机 hostname(从 master_node 读)。
+     * Phase 1 的高频路径 —— 本机 executor / dashboard 调用都走这里。
+     * 如果 master_node 还没身份行(早期启动阶段),fallback 按 name 查(向后兼容)。
+     */
+    getLocalAgentByName(name) {
+        const localHostname = this.getLocalHostname();
+        if (localHostname) {
+            return this.db.prepare("SELECT * FROM agents WHERE hostname = ? AND name = ?").get(localHostname, name);
+        }
+        return this.db.prepare("SELECT * FROM agents WHERE name = ?").get(name);
+    },
+    getAgentById(id) {
+        return this.db.prepare("SELECT * FROM agents WHERE id = ?").get(id);
+    },
+    /** Lookup agent by token hash — used as fallback when name changes but token stays the same. */
+    getAgentByTokenHash(tokenHash) {
+        return this.db.prepare("SELECT * FROM agents WHERE token_hash = ?").get(tokenHash);
+    },
+    /** Update agent name (used when agent reconnects with a new name but same token). */
+    updateAgentName(id, name) {
+        this.db.prepare("UPDATE agents SET name = ?, updated_at = datetime('now') WHERE id = ?").run(name, id);
+    },
+    listAgents(filter) {
+        let sql = "SELECT * FROM agents WHERE 1=1";
+        const params = [];
+        if (filter?.status) {
+            sql += " AND status = ?";
+            params.push(filter.status);
+        }
+        if (filter?.domain) {
+            sql += " AND domain = ?";
+            params.push(filter.domain);
+        }
+        if (filter?.enabled !== undefined) {
+            sql += " AND enabled = ?";
+            params.push(filter.enabled ? 1 : 0);
+        }
+        sql += " ORDER BY name";
+        return this.db.prepare(sql).all(...params);
+    },
+    insertAgent(agent) {
+        this.db.prepare(`
+      INSERT INTO agents (id, name, description, domain, hostname, token_hash, token, profile)
+      VALUES (?, ?, ?, ?, ?, ?, ?, ?)
+    `).run(agent.id, agent.name, agent.description || null, agent.domain || null, agent.hostname ?? null, agent.tokenHash, agent.token, agent.profile || null);
+    },
+    updateAgentMeta(id, meta) {
+        const built = buildUpdate({
+            table: "agents",
+            sets: {
+                description: meta.description,
+                domain: meta.domain,
+                profile: meta.profile,
+                avatar_url: meta.avatar_url,
+            },
+            where: "id = ?",
+            whereParams: [id],
+            updatedAt: "datetime-now",
+        });
+        if (built)
+            this.db.prepare(built.sql).run(...built.params);
+    },
+    updateAgentEnabled(id, enabled) {
+        this.db.prepare("UPDATE agents SET enabled = ?, updated_at = datetime('now') WHERE id = ?").run(enabled ? 1 : 0, id);
+    },
+    setAgentOnline(id, instance) {
+        this.db.prepare(`
+      UPDATE agents SET
+        status = 'online',
+        instance_id = ?,
+        hostname = ?,
+        platform = ?,
+        endpoint = ?,
+        version = ?,
+        connected_at = datetime('now'),
+        last_heartbeat = datetime('now'),
+        updated_at = datetime('now')
+      WHERE id = ?
+    `).run(instance?.instanceId || null, instance?.hostname || null, instance?.platform || null, instance?.endpoint || null, instance?.version || null, id);
+    },
+    setAgentOffline(id) {
+        this.db.prepare("UPDATE agents SET status = 'offline', updated_at = datetime('now') WHERE id = ?").run(id);
+    },
+    /** Reset all agents to offline — called on Master startup to clear stale state. */
+    resetAllOnline() {
+        const result = this.db.prepare("UPDATE agents SET status = 'offline', updated_at = datetime('now') WHERE status = 'online'").run();
+        return result.changes;
+    },
+    updateAgentToken(id, tokenHash, token) {
+        this.db.prepare("UPDATE agents SET token_hash = ?, token = ?, updated_at = datetime('now') WHERE id = ?").run(tokenHash, token, id);
+        // Record token refresh timestamp for JWT iat validation.
+        this.setConfig(`token_refreshed_at:${id}`, nowBeijing());
+    },
+    /** Get the timestamp when an agent's token was last refreshed. */
+    getTokenRefreshedAt(id) {
+        return this.getConfig(`token_refreshed_at:${id}`);
+    },
+    updateHeartbeat(id) {
+        this.db.prepare("UPDATE agents SET last_heartbeat = datetime('now') WHERE id = ?").run(id);
+    },
+    deleteAgent(id) {
+        this.db.prepare("DELETE FROM offline_messages WHERE target_agent = ?").run(id);
+        this.db.prepare("DELETE FROM agents WHERE id = ?").run(id);
+    },
+};