@michael-joseph-miller/ant-bot 0.4.1 → 0.4.3

package/CHANGELOG.md

@@ -4,6 +4,40 @@ All notable changes to ant-bot are recorded here. The format follows
 [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and versions follow
 [semantic versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.4.3] — 2026-08-24
+
+### Fixed
+
+- **A restarted daemon no longer leaves the page blank.** The event sequence restarts at 1 on
+  every boot, and the UI drops anything at or below the last sequence it saw — so a tab open
+  across a restart silently discarded every event while still showing "Connected". Bots ran,
+  replies were written, approvals were raised, and none of it appeared. `hello` now carries a
+  per-process epoch; a new one resets the filter and refetches the open thread, the roster and
+  the pending approvals.
+- **Attaching a file no longer stops the turn on an approval.** Attachments live in
+  `~/.ant-bot/attachments`, outside the workspace, so reading the image you just attached tripped
+  the local-execution boundary and blocked the turn for fifteen minutes waiting on a permission
+  question about your own file. That directory now counts as inside the boundary — containment is
+  still resolved, so nothing above it is reachable.
+- **"Pending approval" is now a way in.** The count in the top bar was a dead label; clicking it
+  opens the thread that is waiting on you. (Approvals are answered inline in the thread — the
+  Rules screen, the reasonable guess, is not where they appear.)
+- **A bot waiting on you no longer displays as "queued".** Sending a second message while a turn
+  was waiting for an approval overwrote the bot's state, so a question waiting for an answer
+  looked like a stalled queue.
+
+## [0.4.2] — 2026-08-24
+
+### Changed
+
+- **JSON stays out of the thread.** A tool that returns structured data — a mail search, a thread
+  fetch — now shows one line saying what came back (`Result — 50 threads · 82.1 KB`) with the JSON
+  behind it, instead of a page of it between you and the Bot's actual reply. Plain-text results
+  stay visible, because that is usually the thing you wanted to see.
+- **Tool arguments read as words.** `gmail: search_threads query: is:unread, maxResults: 50`
+  rather than a JSON object, in the thread and on every approval card. Lists are counted and
+  nested objects collapse to `{…}`.
+
 ## [0.4.1] — 2026-08-24
 
 ### Fixed

package/README.md

@@ -281,10 +281,10 @@ Current totals, as run against this checkout:
 | Package | Test files | Tests |
 |---|---|---|
 | `@antbot/contract` | 1 | 34 |
-| `@antbot/daemon` | 29 | 610 |
-| `@antbot/ui` | 10 | 99 |
+| `@antbot/daemon` | 29 | 619 |
+| `@antbot/ui` | 10 | 109 |
 | `@antbot/cli` | 8 | 142 |
-| **Total** | **48** | **885** |
+| **Total** | **48** | **904** |
 
 ## Status / not built
 

package/dist/{chunk-G4IIENWF.js → chunk-SOIV5YOZ.js}

@@ -262,8 +262,15 @@ var TurnOriginSchema = z.enum(["user", "bot", "routine", "system"]);
 import { z as z2 } from "zod";
 var base = { seq: z2.number(), threadId: z2.string().nullable(), botId: z2.string().nullable() };
 var ServerEventSchema = z2.discriminatedUnion("type", [
-  /** Connection handshake. Carries the current seq so a client can detect gaps. */
-  z2.object({ ...base, type: z2.literal("hello") }),
+  /**
+   * Connection handshake. Carries the current seq so a client can detect gaps, and `epoch` —
+   * an id generated once per daemon process.
+   *
+   * The seq counter restarts at 1 on every boot, so after a restart a client that filters on
+   * "seq greater than the last one I saw" silently drops everything the new process sends while
+   * its socket still reports Connected. A changed epoch is how it knows the numbering is new.
+   */
+  z2.object({ ...base, type: z2.literal("hello"), epoch: z2.string() }),
   z2.object({ ...base, type: z2.literal("message.created"), message: MessageSchema }),
   z2.object({ ...base, type: z2.literal("message.delta"), messageId: z2.string(), delta: z2.string() }),
   z2.object({ ...base, type: z2.literal("message.done"), messageId: z2.string(), contentMd: z2.string() }),
@@ -431,4 +438,4 @@ export {
   SettingsSchema,
   SettingsPatchSchema
 };
-//# sourceMappingURL=chunk-G4IIENWF.js.map
+//# sourceMappingURL=chunk-SOIV5YOZ.js.map

package/dist/{chunk-G4IIENWF.js.map → chunk-SOIV5YOZ.js.map}

@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../../contract/src/limits.ts", "../../contract/src/entities.ts", "../../contract/src/events.ts", "../../contract/src/api.ts"],
-  "sourcesContent": ["/** Operational limits \u2014 mirrors grok-bot-system-outline.md \u00A713. */\nexport const LIMITS = {\n  MAX_BOTS_AND_GROUPS: 50,\n  MIN_GROUP_MEMBERS: 2,\n  MAX_GROUP_MEMBERS: 6,\n  MAX_ROUTINES_PER_BOT: 50,\n  ROUTINE_RUNS_RETAINED: 20,\n  MAX_ATTACHMENTS_PER_MESSAGE: 6,\n  MAX_ATTACHMENT_BYTES: 25 * 1024 * 1024,\n  MAX_VIDEO_ATTACHMENT_BYTES: 200 * 1024 * 1024,\n  MAX_BOT_TO_BOT_HOPS: 5,\n  DEFAULT_MAX_CONCURRENT_SESSIONS: 2,\n  APPROVAL_TIMEOUT_MS: 15 * 60 * 1000,\n  TEACH_RECORDING_MAX_MS: 10 * 60 * 1000,\n} as const;\n\n/** Error codes returned by the service layer when a limit is violated. */\nexport const LIMIT_ERROR = {\n  TOO_MANY_BOTS: 'TOO_MANY_BOTS',\n  GROUP_SIZE: 'GROUP_SIZE',\n  TOO_MANY_ROUTINES: 'TOO_MANY_ROUTINES',\n  TOO_MANY_ATTACHMENTS: 'TOO_MANY_ATTACHMENTS',\n  ATTACHMENT_TOO_LARGE: 'ATTACHMENT_TOO_LARGE',\n  HOP_LIMIT: 'HOP_LIMIT',\n} as const;\nexport type LimitErrorCode = (typeof LIMIT_ERROR)[keyof typeof LIMIT_ERROR];\n\nexport class LimitError extends Error {\n  constructor(\n    public code: LimitErrorCode,\n    message: string,\n  ) {\n    super(message);\n    this.name = 'LimitError';\n  }\n}\n", "import { z } from 'zod';\n\nexport const BotStateSchema = z.enum([\n  'idle',\n  'queued',\n  'running',\n  'waiting_approval',\n  'waiting_input',\n  'interrupted',\n]);\nexport type BotState = z.infer<typeof BotStateSchema>;\n\nexport const AttentionSchema = z.enum(['none', 'unread', 'needs_attention']);\nexport type Attention = z.infer<typeof AttentionSchema>;\n\n/**\n * Model tiers a Bot can run on, ordered most to least capable \u2014 this is also the order the UI\n * renders them in, so both pickers stay consistent without repeating the list.\n *\n * Each value is a `claude` CLI model alias, passed through verbatim by `resolveModel()`. Adding a\n * tier here means adding an alias the CLI accepts (`claude --model`), not an API model ID.\n */\nexport const MODEL_TIERS = ['fable', 'opus', 'sonnet', 'haiku'] as const;\nexport const ModelTierSchema = z.enum(MODEL_TIERS);\nexport type ModelTier = z.infer<typeof ModelTierSchema>;\n\nexport const BotSchema = z.object({\n  id: z.string(),\n  slug: z.string().regex(/^[a-z0-9][a-z0-9-]*$/),\n  name: z.string().min(1).max(60),\n  title: z.string().max(120).default(''),\n  description: z.string().max(8000).default(''),\n  avatarEmoji: z.string().max(8).default('\uD83E\uDD16'),\n  modelTier: ModelTierSchema.default('sonnet'),\n  pinned: z.boolean().default(false),\n  hidden: z.boolean().default(false),\n  notifications: z.boolean().default(true),\n  sessionId: z.string().nullable().default(null),\n  state: BotStateSchema.default('idle'),\n  attention: AttentionSchema.default('none'),\n  threadId: z.string().nullable().default(null),\n  createdAt: z.number(),\n  deletedAt: z.number().nullable().default(null),\n});\nexport type Bot = z.infer<typeof BotSchema>;\n\nexport const ThreadKindSchema = z.enum(['dm', 'group']);\nexport type ThreadKind = z.infer<typeof ThreadKindSchema>;\n\nexport const ThreadSchema = z.object({\n  id: z.string(),\n  kind: ThreadKindSchema,\n  title: z.string().default(''),\n  memberBotIds: z.array(z.string()).default([]),\n  pinned: z.boolean().default(false),\n  hidden: z.boolean().default(false),\n  lastReadAt: z.number().default(0),\n  createdAt: z.number(),\n});\nexport type Thread = z.infer<typeof ThreadSchema>;\n\n/** Cards render structured, non-prose content inside a message. */\nexport const CardSchema = z.discriminatedUnion('type', [\n  z.object({\n    type: z.literal('tool'),\n    toolName: z.string(),\n    summary: z.string(),\n    input: z.unknown().optional(),\n    result: z.string().optional(),\n    status: z.enum(['running', 'ok', 'error', 'denied']),\n  }),\n  z.object({\n    type: z.literal('file'),\n    path: z.string(),\n    name: z.string(),\n    mime: z.string(),\n    bytes: z.number(),\n    action: z.enum(['created', 'modified']).default('created'),\n  }),\n  z.object({ type: z.literal('approval'), approvalId: z.string() }),\n  z.object({ type: z.literal('handoff'), fromBotId: z.string(), toBotId: z.string(), note: z.string() }),\n  z.object({ type: z.literal('error'), message: z.string() }),\n  /** A connector asked for a sign-in mid-turn. The link is the provider's; the bot never sees it. */\n  z.object({ type: z.literal('signin'), serverName: z.string(), url: z.string() }),\n]);\nexport type Card = z.infer<typeof CardSchema>;\n\nexport const AuthorKindSchema = z.enum(['user', 'bot', 'system']);\nexport type AuthorKind = z.infer<typeof AuthorKindSchema>;\n\nexport const MessageSchema = z.object({\n  id: z.string(),\n  threadId: z.string(),\n  authorKind: AuthorKindSchema,\n  authorBotId: z.string().nullable().default(null),\n  replyToId: z.string().nullable().default(null),\n  contentMd: z.string().default(''),\n  cards: z.array(CardSchema).default([]),\n  streaming: z.boolean().default(false),\n  createdAt: z.number(),\n});\nexport type Message = z.infer<typeof MessageSchema>;\n\nexport const AttachmentSchema = z.object({\n  id: z.string(),\n  messageId: z.string().nullable(),\n  path: z.string(),\n  name: z.string(),\n  mime: z.string(),\n  bytes: z.number(),\n  createdAt: z.number(),\n});\nexport type Attachment = z.infer<typeof AttachmentSchema>;\n\nexport const ApprovalStatusSchema = z.enum(['pending', 'allowed', 'denied', 'expired']);\nexport type ApprovalStatus = z.infer<typeof ApprovalStatusSchema>;\n\nexport const ApprovalSchema = z.object({\n  id: z.string(),\n  botId: z.string(),\n  threadId: z.string(),\n  toolName: z.string(),\n  inputSummary: z.string(),\n  rawInput: z.unknown(),\n  status: ApprovalStatusSchema.default('pending'),\n  decidedBy: z.enum(['user', 'rule', 'auto_review']).nullable().default(null),\n  reason: z.string().default(''),\n  ruleId: z.string().nullable().default(null),\n  createdAt: z.number(),\n  decidedAt: z.number().nullable().default(null),\n});\nexport type Approval = z.infer<typeof ApprovalSchema>;\n\nexport const RuleKindSchema = z.enum(['require', 'allow']);\nexport type RuleKind = z.infer<typeof RuleKindSchema>;\n\nexport const RuleSchema = z.object({\n  id: z.string(),\n  kind: RuleKindSchema,\n  /** Glob over tool name, e.g. \"Bash\", \"browser_*\", \"*\" */\n  toolPattern: z.string().default('*'),\n  /** Optional regex tested against the serialized tool input. */\n  inputPattern: z.string().default(''),\n  scopeNote: z.string().default(''),\n  builtin: z.boolean().default(false),\n  enabled: z.boolean().default(true),\n  createdAt: z.number(),\n});\nexport type Rule = z.infer<typeof RuleSchema>;\n\nexport const SkillSchema = z.object({\n  id: z.string(),\n  slug: z.string(),\n  name: z.string(),\n  description: z.string().default(''),\n  path: z.string(),\n  source: z.enum(['user', 'taught', 'imported']).default('user'),\n  createdAt: z.number(),\n});\nexport type Skill = z.infer<typeof SkillSchema>;\n\n/* ------------------------------ MCP connectors ------------------------------ */\n\n/**\n * Connector names become the middle segment of every tool name the model sees:\n * `mcp__<name>__<tool>`. Underscores are banned outright because `toolNameAliases()`\n * splits on the first `__` pair \u2014 a name containing one would make a connector's tools\n * unmatchable by the rules that are supposed to gate them.\n */\nexport const CONNECTOR_NAME_RE = /^[a-z0-9][a-z0-9-]{0,31}$/;\n\n/** Taken by the built-in servers; a connector using one would overwrite it in the turn's server map. */\nexport const RESERVED_CONNECTOR_NAMES = ['antbot', 'browser'] as const;\n\n/**\n * How to reach an MCP server. Mirrors the Agent SDK's own `McpServerConfig` minus the\n * in-process `sdk` variant, which only the built-in servers use.\n *\n * Secret values are never stored here. An env value or header may embed `{{secret:NAME}}`,\n * resolved against the keychain at mount time \u2014 see `daemon/src/bots/connectors.ts`.\n */\nexport const ConnectorConfigSchema = z.discriminatedUnion('transport', [\n  z.object({\n    transport: z.literal('stdio'),\n    command: z.string().min(1),\n    args: z.array(z.string()).default([]),\n    env: z.record(z.string(), z.string()).default({}),\n  }),\n  z.object({\n    transport: z.literal('http'),\n    url: z.string().url(),\n    headers: z.record(z.string(), z.string()).default({}),\n    /** Optional allowlist passed through to the SDK. Omit to expose every tool the server offers. */\n    tools: z.array(z.string()).optional(),\n  }),\n  z.object({\n    transport: z.literal('sse'),\n    url: z.string().url(),\n    headers: z.record(z.string(), z.string()).default({}),\n    tools: z.array(z.string()).optional(),\n  }),\n]);\nexport type ConnectorConfig = z.infer<typeof ConnectorConfigSchema>;\n\nexport const ConnectorSchema = z.object({\n  id: z.string(),\n  name: z\n    .string()\n    .regex(CONNECTOR_NAME_RE, 'lowercase letters, digits and hyphens only, max 32 characters')\n    .refine((n) => !(RESERVED_CONNECTOR_NAMES as readonly string[]).includes(n), {\n      message: `\"antbot\" and \"browser\" are reserved for the built-in servers`,\n    }),\n  description: z.string().default(''),\n  /** Account-wide switch. A disabled connector mounts for nobody, whatever the assignments say. */\n  enabled: z.boolean().default(true),\n  /**\n   * `builtin` \u2014 served by the daemon itself (Gmail\u2026), credentials held by the daemon, config\n   * points at the daemon's own `/mcp/<name>`. `custom` \u2014 a command or URL the user added.\n   */\n  kind: z.enum(['custom', 'builtin']).default('custom'),\n  config: ConnectorConfigSchema,\n  /** Last verdict from a check or a turn: ready | needs-sign-in | needs-credential | unreachable | connected | failed\u2026 */\n  lastStatus: z.string().nullable().default(null),\n  lastError: z.string().nullable().default(null),\n  checkedAt: z.number().nullable().default(null),\n  createdAt: z.number(),\n});\nexport type Connector = z.infer<typeof ConnectorSchema>;\n\n/** The verdict `POST /api/connectors/:id/check` returns, and what `add` prints. */\nexport const ConnectorCheckSchema = z.object({\n  status: z.enum(['ready', 'needs-sign-in', 'needs-credential', 'unreachable']),\n  /** For needs-sign-in: whether the provider lets ant-bot register itself (no client ID needed). */\n  selfRegistration: z.boolean().optional(),\n  /** Who is asking for the sign-in, when known \u2014 \"Google\", \"accounts.example.com\". */\n  provider: z.string().optional(),\n  tools: z.array(z.object({ name: z.string(), description: z.string() })).default([]),\n  detail: z.string().optional(),\n  /**\n   * A built-in that does the same job, when the URL is a provider's own MCP endpoint that admits\n   * only clients the provider allowlisted (Google). Sign-in there can succeed and every call\n   * still be refused, so the honest verdict names the way that works.\n   */\n  alternative: z.string().optional(),\n});\nexport type ConnectorCheck = z.infer<typeof ConnectorCheckSchema>;\n\nexport const RoutineSchema = z.object({\n  id: z.string(),\n  botId: z.string(),\n  name: z.string().min(1),\n  cronExpr: z.string(),\n  timezone: z.string().default('UTC'),\n  instructionMd: z.string(),\n  enabled: z.boolean().default(true),\n  lastRunAt: z.number().nullable().default(null),\n  nextRunAt: z.number().nullable().default(null),\n  createdAt: z.number(),\n});\nexport type Routine = z.infer<typeof RoutineSchema>;\n\nexport const RoutineRunSchema = z.object({\n  id: z.string(),\n  routineId: z.string(),\n  startedAt: z.number(),\n  finishedAt: z.number().nullable().default(null),\n  status: z.enum(['running', 'ok', 'failed', 'interrupted']),\n  summary: z.string().default(''),\n  threadId: z.string().nullable().default(null),\n  isTest: z.boolean().default(false),\n});\nexport type RoutineRun = z.infer<typeof RoutineRunSchema>;\n\nexport const MailboxEntrySchema = z.object({\n  id: z.string(),\n  fromBotId: z.string(),\n  toBotId: z.string(),\n  contentMd: z.string(),\n  hops: z.number().default(1),\n  delivered: z.boolean().default(false),\n  createdAt: z.number(),\n});\nexport type MailboxEntry = z.infer<typeof MailboxEntrySchema>;\n\nexport const UsageRowSchema = z.object({\n  id: z.string(),\n  botId: z.string(),\n  turnId: z.string(),\n  model: z.string(),\n  inputTokens: z.number().default(0),\n  outputTokens: z.number().default(0),\n  cacheReadTokens: z.number().default(0),\n  costEstimate: z.number().default(0),\n  createdAt: z.number(),\n});\nexport type UsageRow = z.infer<typeof UsageRowSchema>;\n\nexport const TurnOriginSchema = z.enum(['user', 'bot', 'routine', 'system']);\nexport type TurnOrigin = z.infer<typeof TurnOriginSchema>;\n", "import { z } from 'zod';\nimport { BotStateSchema, AttentionSchema, CardSchema, MessageSchema, ApprovalSchema, RoutineRunSchema } from './entities.js';\n\n/** Every server\u2192client event carries {threadId, botId, seq} for ordering/reconciliation. */\nconst base = { seq: z.number(), threadId: z.string().nullable(), botId: z.string().nullable() };\n\nexport const ServerEventSchema = z.discriminatedUnion('type', [\n  /** Connection handshake. Carries the current seq so a client can detect gaps. */\n  z.object({ ...base, type: z.literal('hello') }),\n  z.object({ ...base, type: z.literal('message.created'), message: MessageSchema }),\n  z.object({ ...base, type: z.literal('message.delta'), messageId: z.string(), delta: z.string() }),\n  z.object({ ...base, type: z.literal('message.done'), messageId: z.string(), contentMd: z.string() }),\n  z.object({ ...base, type: z.literal('message.card'), messageId: z.string(), card: CardSchema, cardIndex: z.number() }),\n  z.object({ ...base, type: z.literal('bot.state'), state: BotStateSchema, attention: AttentionSchema }),\n  z.object({ ...base, type: z.literal('approval.pending'), approval: ApprovalSchema }),\n  z.object({ ...base, type: z.literal('approval.resolved'), approval: ApprovalSchema }),\n  z.object({ ...base, type: z.literal('routine.run'), run: RoutineRunSchema }),\n  z.object({ ...base, type: z.literal('usage.tick'), inputTokens: z.number(), outputTokens: z.number(), model: z.string() }),\n  z.object({ ...base, type: z.literal('notify'), title: z.string(), body: z.string(), level: z.enum(['info', 'warn', 'error']) }),\n  z.object({ ...base, type: z.literal('secret.request'), requestId: z.string(), name: z.string(), reason: z.string() }),\n  z.object({ ...base, type: z.literal('thread.updated'), threadId2: z.string() }),\n]);\nexport type ServerEvent = z.infer<typeof ServerEventSchema>;\nexport type ServerEventType = ServerEvent['type'];\n\n/* ------------------------- screencast input (client \u2192 server) ------------------------- */\n\n/**\n * Human input forwarded over the screencast websocket while a screen is taken over.\n *\n * Coordinates are **normalised** (0\u20131, fractions of the rendered frame) rather than pixels: the\n * screencast is capped at 1280px wide and the browser then scales the image to fit the pane, so\n * the client cannot know the page's real viewport and the server cannot know the client's. Each\n * side converts against what it does know.\n *\n * The daemon dispatches these only while `takeOver()` is active for that bot \u2014 see\n * `docs/SECURITY.md`. Input is a human acting as themselves, so it does not pass the Permission\n * Gateway; the gateway governs what *bots* do.\n */\nexport const ScreencastInputSchema = z.discriminatedUnion('kind', [\n  z.object({\n    kind: z.literal('mouse'),\n    action: z.enum(['move', 'down', 'up', 'wheel']),\n    x: z.number().min(0).max(1),\n    y: z.number().min(0).max(1),\n    button: z.enum(['left', 'middle', 'right']).default('left'),\n    clickCount: z.number().int().min(0).max(3).default(1),\n    /** Wheel deltas, in CSS pixels. Only read for `action: 'wheel'`. */\n    deltaX: z.number().default(0),\n    deltaY: z.number().default(0),\n  }),\n  z.object({\n    kind: z.literal('key'),\n    action: z.enum(['down', 'up']),\n    /** A KeyboardEvent.key value \u2014 Playwright's keyboard maps these to the right key codes. */\n    key: z.string().min(1).max(32),\n  }),\n  z.object({\n    kind: z.literal('text'),\n    /** Committed text (IME, paste, or a printable keypress), inserted verbatim. */\n    text: z.string().min(1).max(4096),\n  }),\n]);\nexport type ScreencastInput = z.infer<typeof ScreencastInputSchema>;\n\n/** Frames the client may send on the screencast socket. */\nexport const ScreencastClientFrameSchema = z.discriminatedUnion('type', [\n  z.object({ type: z.literal('input'), input: ScreencastInputSchema }),\n  /**\n   * Asks for the remote page's current text selection, so the human can copy out of it.\n   *\n   * A round trip is needed because the two clipboards are different: pressing Ctrl+C in the\n   * viewer copies whatever is selected in *your* browser (nothing \u2014 the page is a JPEG), and\n   * forwarding Ctrl+C to the page would write to the headless browser's clipboard, which you\n   * have no way to read. So the daemon reads the selection and hands the text back for the\n   * viewer to put on your clipboard.\n   */\n  z.object({ type: z.literal('selection-request') }),\n]);\nexport type ScreencastClientFrame = z.infer<typeof ScreencastClientFrameSchema>;\n", "import { z } from 'zod';\nimport {\n  BotSchema, ThreadSchema, MessageSchema, ApprovalSchema, RuleSchema,\n  SkillSchema, RoutineSchema, RoutineRunSchema, UsageRowSchema, ModelTierSchema,\n  ConnectorSchema, ConnectorConfigSchema, type Connector,\n} from './entities.js';\n\nexport const CreateBotRequest = z.object({\n  name: z.string().min(1).max(60),\n  title: z.string().max(120).optional(),\n  description: z.string().max(8000).optional(),\n  avatarEmoji: z.string().max(8).optional(),\n  modelTier: ModelTierSchema.optional(),\n});\nexport type CreateBotRequest = z.infer<typeof CreateBotRequest>;\n\nexport const UpdateBotRequest = CreateBotRequest.partial().extend({\n  pinned: z.boolean().optional(),\n  hidden: z.boolean().optional(),\n  notifications: z.boolean().optional(),\n});\nexport type UpdateBotRequest = z.infer<typeof UpdateBotRequest>;\n\nexport const CreateThreadRequest = z.object({\n  kind: z.enum(['dm', 'group']),\n  title: z.string().optional(),\n  memberBotIds: z.array(z.string()),\n});\nexport type CreateThreadRequest = z.infer<typeof CreateThreadRequest>;\n\nexport const PostMessageRequest = z.object({\n  contentMd: z.string(),\n  attachmentIds: z.array(z.string()).optional(),\n  replyToId: z.string().nullable().optional(),\n  /** explicit @-mention targets resolved by the client */\n  mentionBotIds: z.array(z.string()).optional(),\n  mentionEveryone: z.boolean().optional(),\n});\nexport type PostMessageRequest = z.infer<typeof PostMessageRequest>;\n\nexport const ApprovalDecisionRequest = z.object({\n  decision: z.enum(['allow', 'deny']),\n  alwaysRule: z\n    .object({ toolPattern: z.string(), inputPattern: z.string().default(''), scopeNote: z.string().default('') })\n    .optional(),\n});\nexport type ApprovalDecisionRequest = z.infer<typeof ApprovalDecisionRequest>;\n\nexport const CreateRuleRequest = z.object({\n  kind: z.enum(['require', 'allow']),\n  toolPattern: z.string().min(1),\n  inputPattern: z.string().default(''),\n  scopeNote: z.string().default(''),\n});\nexport type CreateRuleRequest = z.infer<typeof CreateRuleRequest>;\n\nexport const CreateRoutineRequest = z.object({\n  botId: z.string(),\n  name: z.string().min(1),\n  cronExpr: z.string().min(1),\n  timezone: z.string().optional(),\n  instructionMd: z.string().min(1),\n  enabled: z.boolean().optional(),\n});\nexport type CreateRoutineRequest = z.infer<typeof CreateRoutineRequest>;\n\nexport const CreateSkillRequest = z.object({\n  name: z.string().min(1),\n  description: z.string().default(''),\n  bodyMd: z.string().min(1),\n  source: z.enum(['user', 'taught', 'imported']).optional(),\n});\nexport type CreateSkillRequest = z.infer<typeof CreateSkillRequest>;\n\n/**\n * Either a custom server (`config`) or a built-in one (`builtin`, a catalog name \u2014 the daemon\n * fills in the config). `botIds` assigns it in the same call so adding is one step.\n */\nexport const CreateConnectorRequest = z\n  .object({\n    name: ConnectorSchema.shape.name,\n    description: z.string().default(''),\n    config: ConnectorConfigSchema.optional(),\n    builtin: z.string().optional(),\n    enabled: z.boolean().optional(),\n    botIds: z.array(z.string()).optional(),\n  })\n  .refine((v) => Boolean(v.config) !== Boolean(v.builtin), { message: 'Give either config or builtin, not both' });\nexport type CreateConnectorRequest = z.infer<typeof CreateConnectorRequest>;\n\n/**\n * No `name`: renaming a connector renames every tool the model and the rules see\n * (`mcp__<name>__<tool>`), silently orphaning any rule written against the old one.\n * Delete and re-add instead.\n */\nexport const UpdateConnectorRequest = z.object({\n  description: z.string().optional(),\n  config: ConnectorConfigSchema.optional(),\n  enabled: z.boolean().optional(),\n});\nexport type UpdateConnectorRequest = z.infer<typeof UpdateConnectorRequest>;\n\n/**\n * A connector as the API returns it. `missingSecrets` names the `{{secret:\u2026}}` references\n * that have nothing behind them \u2014 surfaced so a connector that will silently fail to mount\n * says so in the UI before a turn runs, rather than going quiet at turn time.\n */\nexport type ApiConnector = Connector & {\n  missingSecrets: string[];\n  /** Whether an interactive sign-in has been completed and stored for this connector. */\n  signedIn: boolean;\n};\n\n/** A catalog entry as the API describes it: what it is and what setting it up will involve. */\nexport interface ApiCatalogEntry {\n  name: string;\n  displayName: string;\n  description: string;\n  provider: string;\n  /** Whether the provider needs a client ID/secret the user creates (Google) or self-registers. */\n  needsClientCredentials: boolean;\n  setupSteps: string[];\n}\n\n/**\n * A raw probe: did the server answer, and what did it list. Tool names and descriptions only \u2014\n * never config. Reachable is not usable; `ConnectorCheck` is the verdict a person should read.\n */\nexport interface ConnectorProbeResult {\n  ok: boolean;\n  tools: { name: string; description: string }[];\n  error?: string;\n}\n\n/**\n * Field types, declared once and without defaults. `SettingsSchema` layers the\n * defaults on for reads; `SettingsPatchSchema` deliberately leaves them off.\n */\nconst settingsFields = {\n  timezone: z.string(),\n  maxConcurrentSessions: z.number().min(1).max(8),\n  autoReviewEnabled: z.boolean(),\n  theme: z.enum(['system', 'light', 'dark']),\n  localExecution: z.enum(['ask', 'always', 'never']),\n  dailyTokenBudget: z.number(),\n  notificationsEnabled: z.boolean(),\n  billingMode: z.enum(['subscription', 'api']),\n  computerMode: z.enum(['host', 'container']),\n};\n\nexport const SettingsSchema = z.object({\n  timezone: settingsFields.timezone.default('UTC'),\n  maxConcurrentSessions: settingsFields.maxConcurrentSessions.default(2),\n  autoReviewEnabled: settingsFields.autoReviewEnabled.default(true),\n  theme: settingsFields.theme.default('system'),\n  localExecution: settingsFields.localExecution.default('ask'),\n  dailyTokenBudget: settingsFields.dailyTokenBudget.default(0),\n  notificationsEnabled: settingsFields.notificationsEnabled.default(true),\n  billingMode: settingsFields.billingMode.default('subscription'),\n  computerMode: settingsFields.computerMode.default('host'),\n});\nexport type Settings = z.infer<typeof SettingsSchema>;\n\n/**\n * Body schema for `PATCH /api/settings`. It must NOT carry defaults: parsing a\n * one-field patch through a defaulted schema yields a complete object, and\n * persisting that would reset every setting the client didn't mention \u2014 including\n * `localExecution`, which is a security control (see docs/SECURITY.md).\n */\nexport const SettingsPatchSchema = z.object(settingsFields).partial();\nexport type SettingsPatch = z.infer<typeof SettingsPatchSchema>;\n\nexport const SearchResultSchema = z.object({\n  kind: z.enum(['message', 'file', 'routine', 'bot']),\n  id: z.string(),\n  threadId: z.string().nullable(),\n  botId: z.string().nullable(),\n  title: z.string(),\n  snippet: z.string(),\n  createdAt: z.number(),\n});\nexport type SearchResult = z.infer<typeof SearchResultSchema>;\n\nexport type ApiBot = z.infer<typeof BotSchema>;\nexport type ApiThread = z.infer<typeof ThreadSchema>;\nexport type ApiMessage = z.infer<typeof MessageSchema>;\nexport type ApiApproval = z.infer<typeof ApprovalSchema>;\nexport type ApiRule = z.infer<typeof RuleSchema>;\nexport type ApiSkill = z.infer<typeof SkillSchema>;\nexport type ApiRoutine = z.infer<typeof RoutineSchema>;\nexport type ApiRoutineRun = z.infer<typeof RoutineRunSchema>;\nexport type ApiUsageRow = z.infer<typeof UsageRowSchema>;\n\nexport interface RosterEntry { bot: ApiBot; thread: ApiThread | null; lastMessageAt: number }\nexport interface ThreadWithMessages { thread: ApiThread; messages: ApiMessage[] }\nexport interface UsageSummary {\n  totals: { inputTokens: number; outputTokens: number; cacheReadTokens: number };\n  byBot: Array<{ botId: string; botName: string; inputTokens: number; outputTokens: number }>;\n  byDay: Array<{ day: string; inputTokens: number; outputTokens: number }>;\n  byModel: Array<{ model: string; inputTokens: number; outputTokens: number }>;\n}\n"],
-  "mappings": ";;;;AACO,IAAM,SAAS;EACpB,qBAAqB;EACrB,mBAAmB;EACnB,mBAAmB;EACnB,sBAAsB;EACtB,uBAAuB;EACvB,6BAA6B;EAC7B,sBAAsB,KAAK,OAAO;EAClC,4BAA4B,MAAM,OAAO;EACzC,qBAAqB;EACrB,iCAAiC;EACjC,qBAAqB,KAAK,KAAK;EAC/B,wBAAwB,KAAK,KAAK;;AAI7B,IAAM,cAAc;EACzB,eAAe;EACf,YAAY;EACZ,mBAAmB;EACnB,sBAAsB;EACtB,sBAAsB;EACtB,WAAW;;AAIP,IAAO,aAAP,cAA0B,MAAK;EAE1B;EADT,YACS,MACP,SAAe;AAEf,UAAM,OAAO;AAHN,SAAA,OAAA;AAIP,SAAK,OAAO;EACd;;;;AClCF,SAAS,SAAS;AAEX,IAAM,iBAAiB,EAAE,KAAK;EACnC;EACA;EACA;EACA;EACA;EACA;CACD;AAGM,IAAM,kBAAkB,EAAE,KAAK,CAAC,QAAQ,UAAU,iBAAiB,CAAC;AAUpE,IAAM,cAAc,CAAC,SAAS,QAAQ,UAAU,OAAO;AACvD,IAAM,kBAAkB,EAAE,KAAK,WAAW;AAG1C,IAAM,YAAY,EAAE,OAAO;EAChC,IAAI,EAAE,OAAM;EACZ,MAAM,EAAE,OAAM,EAAG,MAAM,sBAAsB;EAC7C,MAAM,EAAE,OAAM,EAAG,IAAI,CAAC,EAAE,IAAI,EAAE;EAC9B,OAAO,EAAE,OAAM,EAAG,IAAI,GAAG,EAAE,QAAQ,EAAE;EACrC,aAAa,EAAE,OAAM,EAAG,IAAI,GAAI,EAAE,QAAQ,EAAE;EAC5C,aAAa,EAAE,OAAM,EAAG,IAAI,CAAC,EAAE,QAAQ,WAAI;EAC3C,WAAW,gBAAgB,QAAQ,QAAQ;EAC3C,QAAQ,EAAE,QAAO,EAAG,QAAQ,KAAK;EACjC,QAAQ,EAAE,QAAO,EAAG,QAAQ,KAAK;EACjC,eAAe,EAAE,QAAO,EAAG,QAAQ,IAAI;EACvC,WAAW,EAAE,OAAM,EAAG,SAAQ,EAAG,QAAQ,IAAI;EAC7C,OAAO,eAAe,QAAQ,MAAM;EACpC,WAAW,gBAAgB,QAAQ,MAAM;EACzC,UAAU,EAAE,OAAM,EAAG,SAAQ,EAAG,QAAQ,IAAI;EAC5C,WAAW,EAAE,OAAM;EACnB,WAAW,EAAE,OAAM,EAAG,SAAQ,EAAG,QAAQ,IAAI;CAC9C;AAGM,IAAM,mBAAmB,EAAE,KAAK,CAAC,MAAM,OAAO,CAAC;AAG/C,IAAM,eAAe,EAAE,OAAO;EACnC,IAAI,EAAE,OAAM;EACZ,MAAM;EACN,OAAO,EAAE,OAAM,EAAG,QAAQ,EAAE;EAC5B,cAAc,EAAE,MAAM,EAAE,OAAM,CAAE,EAAE,QAAQ,CAAA,CAAE;EAC5C,QAAQ,EAAE,QAAO,EAAG,QAAQ,KAAK;EACjC,QAAQ,EAAE,QAAO,EAAG,QAAQ,KAAK;EACjC,YAAY,EAAE,OAAM,EAAG,QAAQ,CAAC;EAChC,WAAW,EAAE,OAAM;CACpB;AAIM,IAAM,aAAa,EAAE,mBAAmB,QAAQ;EACrD,EAAE,OAAO;IACP,MAAM,EAAE,QAAQ,MAAM;IACtB,UAAU,EAAE,OAAM;IAClB,SAAS,EAAE,OAAM;IACjB,OAAO,EAAE,QAAO,EAAG,SAAQ;IAC3B,QAAQ,EAAE,OAAM,EAAG,SAAQ;IAC3B,QAAQ,EAAE,KAAK,CAAC,WAAW,MAAM,SAAS,QAAQ,CAAC;GACpD;EACD,EAAE,OAAO;IACP,MAAM,EAAE,QAAQ,MAAM;IACtB,MAAM,EAAE,OAAM;IACd,MAAM,EAAE,OAAM;IACd,MAAM,EAAE,OAAM;IACd,OAAO,EAAE,OAAM;IACf,QAAQ,EAAE,KAAK,CAAC,WAAW,UAAU,CAAC,EAAE,QAAQ,SAAS;GAC1D;EACD,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,UAAU,GAAG,YAAY,EAAE,OAAM,EAAE,CAAE;EAChE,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,SAAS,GAAG,WAAW,EAAE,OAAM,GAAI,SAAS,EAAE,OAAM,GAAI,MAAM,EAAE,OAAM,EAAE,CAAE;EACrG,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,OAAO,GAAG,SAAS,EAAE,OAAM,EAAE,CAAE;;EAE1D,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,QAAQ,GAAG,YAAY,EAAE,OAAM,GAAI,KAAK,EAAE,OAAM,EAAE,CAAE;CAChF;AAGM,IAAM,mBAAmB,EAAE,KAAK,CAAC,QAAQ,OAAO,QAAQ,CAAC;AAGzD,IAAM,gBAAgB,EAAE,OAAO;EACpC,IAAI,EAAE,OAAM;EACZ,UAAU,EAAE,OAAM;EAClB,YAAY;EACZ,aAAa,EAAE,OAAM,EAAG,SAAQ,EAAG,QAAQ,IAAI;EAC/C,WAAW,EAAE,OAAM,EAAG,SAAQ,EAAG,QAAQ,IAAI;EAC7C,WAAW,EAAE,OAAM,EAAG,QAAQ,EAAE;EAChC,OAAO,EAAE,MAAM,UAAU,EAAE,QAAQ,CAAA,CAAE;EACrC,WAAW,EAAE,QAAO,EAAG,QAAQ,KAAK;EACpC,WAAW,EAAE,OAAM;CACpB;AAGM,IAAM,mBAAmB,EAAE,OAAO;EACvC,IAAI,EAAE,OAAM;EACZ,WAAW,EAAE,OAAM,EAAG,SAAQ;EAC9B,MAAM,EAAE,OAAM;EACd,MAAM,EAAE,OAAM;EACd,MAAM,EAAE,OAAM;EACd,OAAO,EAAE,OAAM;EACf,WAAW,EAAE,OAAM;CACpB;AAGM,IAAM,uBAAuB,EAAE,KAAK,CAAC,WAAW,WAAW,UAAU,SAAS,CAAC;AAG/E,IAAM,iBAAiB,EAAE,OAAO;EACrC,IAAI,EAAE,OAAM;EACZ,OAAO,EAAE,OAAM;EACf,UAAU,EAAE,OAAM;EAClB,UAAU,EAAE,OAAM;EAClB,cAAc,EAAE,OAAM;EACtB,UAAU,EAAE,QAAO;EACnB,QAAQ,qBAAqB,QAAQ,SAAS;EAC9C,WAAW,EAAE,KAAK,CAAC,QAAQ,QAAQ,aAAa,CAAC,EAAE,SAAQ,EAAG,QAAQ,IAAI;EAC1E,QAAQ,EAAE,OAAM,EAAG,QAAQ,EAAE;EAC7B,QAAQ,EAAE,OAAM,EAAG,SAAQ,EAAG,QAAQ,IAAI;EAC1C,WAAW,EAAE,OAAM;EACnB,WAAW,EAAE,OAAM,EAAG,SAAQ,EAAG,QAAQ,IAAI;CAC9C;AAGM,IAAM,iBAAiB,EAAE,KAAK,CAAC,WAAW,OAAO,CAAC;AAGlD,IAAM,aAAa,EAAE,OAAO;EACjC,IAAI,EAAE,OAAM;EACZ,MAAM;;EAEN,aAAa,EAAE,OAAM,EAAG,QAAQ,GAAG;;EAEnC,cAAc,EAAE,OAAM,EAAG,QAAQ,EAAE;EACnC,WAAW,EAAE,OAAM,EAAG,QAAQ,EAAE;EAChC,SAAS,EAAE,QAAO,EAAG,QAAQ,KAAK;EAClC,SAAS,EAAE,QAAO,EAAG,QAAQ,IAAI;EACjC,WAAW,EAAE,OAAM;CACpB;AAGM,IAAM,cAAc,EAAE,OAAO;EAClC,IAAI,EAAE,OAAM;EACZ,MAAM,EAAE,OAAM;EACd,MAAM,EAAE,OAAM;EACd,aAAa,EAAE,OAAM,EAAG,QAAQ,EAAE;EAClC,MAAM,EAAE,OAAM;EACd,QAAQ,EAAE,KAAK,CAAC,QAAQ,UAAU,UAAU,CAAC,EAAE,QAAQ,MAAM;EAC7D,WAAW,EAAE,OAAM;CACpB;AAWM,IAAM,oBAAoB;AAG1B,IAAM,2BAA2B,CAAC,UAAU,SAAS;AASrD,IAAM,wBAAwB,EAAE,mBAAmB,aAAa;EACrE,EAAE,OAAO;IACP,WAAW,EAAE,QAAQ,OAAO;IAC5B,SAAS,EAAE,OAAM,EAAG,IAAI,CAAC;IACzB,MAAM,EAAE,MAAM,EAAE,OAAM,CAAE,EAAE,QAAQ,CAAA,CAAE;IACpC,KAAK,EAAE,OAAO,EAAE,OAAM,GAAI,EAAE,OAAM,CAAE,EAAE,QAAQ,CAAA,CAAE;GACjD;EACD,EAAE,OAAO;IACP,WAAW,EAAE,QAAQ,MAAM;IAC3B,KAAK,EAAE,OAAM,EAAG,IAAG;IACnB,SAAS,EAAE,OAAO,EAAE,OAAM,GAAI,EAAE,OAAM,CAAE,EAAE,QAAQ,CAAA,CAAE;;IAEpD,OAAO,EAAE,MAAM,EAAE,OAAM,CAAE,EAAE,SAAQ;GACpC;EACD,EAAE,OAAO;IACP,WAAW,EAAE,QAAQ,KAAK;IAC1B,KAAK,EAAE,OAAM,EAAG,IAAG;IACnB,SAAS,EAAE,OAAO,EAAE,OAAM,GAAI,EAAE,OAAM,CAAE,EAAE,QAAQ,CAAA,CAAE;IACpD,OAAO,EAAE,MAAM,EAAE,OAAM,CAAE,EAAE,SAAQ;GACpC;CACF;AAGM,IAAM,kBAAkB,EAAE,OAAO;EACtC,IAAI,EAAE,OAAM;EACZ,MAAM,EACH,OAAM,EACN,MAAM,mBAAmB,+DAA+D,EACxF,OAAO,CAAC,MAAM,CAAE,yBAA+C,SAAS,CAAC,GAAG;IAC3E,SAAS;GACV;EACH,aAAa,EAAE,OAAM,EAAG,QAAQ,EAAE;;EAElC,SAAS,EAAE,QAAO,EAAG,QAAQ,IAAI;;;;;EAKjC,MAAM,EAAE,KAAK,CAAC,UAAU,SAAS,CAAC,EAAE,QAAQ,QAAQ;EACpD,QAAQ;;EAER,YAAY,EAAE,OAAM,EAAG,SAAQ,EAAG,QAAQ,IAAI;EAC9C,WAAW,EAAE,OAAM,EAAG,SAAQ,EAAG,QAAQ,IAAI;EAC7C,WAAW,EAAE,OAAM,EAAG,SAAQ,EAAG,QAAQ,IAAI;EAC7C,WAAW,EAAE,OAAM;CACpB;AAIM,IAAM,uBAAuB,EAAE,OAAO;EAC3C,QAAQ,EAAE,KAAK,CAAC,SAAS,iBAAiB,oBAAoB,aAAa,CAAC;;EAE5E,kBAAkB,EAAE,QAAO,EAAG,SAAQ;;EAEtC,UAAU,EAAE,OAAM,EAAG,SAAQ;EAC7B,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAM,GAAI,aAAa,EAAE,OAAM,EAAE,CAAE,CAAC,EAAE,QAAQ,CAAA,CAAE;EAClF,QAAQ,EAAE,OAAM,EAAG,SAAQ;;;;;;EAM3B,aAAa,EAAE,OAAM,EAAG,SAAQ;CACjC;AAGM,IAAM,gBAAgB,EAAE,OAAO;EACpC,IAAI,EAAE,OAAM;EACZ,OAAO,EAAE,OAAM;EACf,MAAM,EAAE,OAAM,EAAG,IAAI,CAAC;EACtB,UAAU,EAAE,OAAM;EAClB,UAAU,EAAE,OAAM,EAAG,QAAQ,KAAK;EAClC,eAAe,EAAE,OAAM;EACvB,SAAS,EAAE,QAAO,EAAG,QAAQ,IAAI;EACjC,WAAW,EAAE,OAAM,EAAG,SAAQ,EAAG,QAAQ,IAAI;EAC7C,WAAW,EAAE,OAAM,EAAG,SAAQ,EAAG,QAAQ,IAAI;EAC7C,WAAW,EAAE,OAAM;CACpB;AAGM,IAAM,mBAAmB,EAAE,OAAO;EACvC,IAAI,EAAE,OAAM;EACZ,WAAW,EAAE,OAAM;EACnB,WAAW,EAAE,OAAM;EACnB,YAAY,EAAE,OAAM,EAAG,SAAQ,EAAG,QAAQ,IAAI;EAC9C,QAAQ,EAAE,KAAK,CAAC,WAAW,MAAM,UAAU,aAAa,CAAC;EACzD,SAAS,EAAE,OAAM,EAAG,QAAQ,EAAE;EAC9B,UAAU,EAAE,OAAM,EAAG,SAAQ,EAAG,QAAQ,IAAI;EAC5C,QAAQ,EAAE,QAAO,EAAG,QAAQ,KAAK;CAClC;AAGM,IAAM,qBAAqB,EAAE,OAAO;EACzC,IAAI,EAAE,OAAM;EACZ,WAAW,EAAE,OAAM;EACnB,SAAS,EAAE,OAAM;EACjB,WAAW,EAAE,OAAM;EACnB,MAAM,EAAE,OAAM,EAAG,QAAQ,CAAC;EAC1B,WAAW,EAAE,QAAO,EAAG,QAAQ,KAAK;EACpC,WAAW,EAAE,OAAM;CACpB;AAGM,IAAM,iBAAiB,EAAE,OAAO;EACrC,IAAI,EAAE,OAAM;EACZ,OAAO,EAAE,OAAM;EACf,QAAQ,EAAE,OAAM;EAChB,OAAO,EAAE,OAAM;EACf,aAAa,EAAE,OAAM,EAAG,QAAQ,CAAC;EACjC,cAAc,EAAE,OAAM,EAAG,QAAQ,CAAC;EAClC,iBAAiB,EAAE,OAAM,EAAG,QAAQ,CAAC;EACrC,cAAc,EAAE,OAAM,EAAG,QAAQ,CAAC;EAClC,WAAW,EAAE,OAAM;CACpB;AAGM,IAAM,mBAAmB,EAAE,KAAK,CAAC,QAAQ,OAAO,WAAW,QAAQ,CAAC;;;ACzS3E,SAAS,KAAAA,UAAS;AAIlB,IAAM,OAAO,EAAE,KAAKC,GAAE,OAAM,GAAI,UAAUA,GAAE,OAAM,EAAG,SAAQ,GAAI,OAAOA,GAAE,OAAM,EAAG,SAAQ,EAAE;AAEtF,IAAM,oBAAoBA,GAAE,mBAAmB,QAAQ;;EAE5DA,GAAE,OAAO,EAAE,GAAG,MAAM,MAAMA,GAAE,QAAQ,OAAO,EAAC,CAAE;EAC9CA,GAAE,OAAO,EAAE,GAAG,MAAM,MAAMA,GAAE,QAAQ,iBAAiB,GAAG,SAAS,cAAa,CAAE;EAChFA,GAAE,OAAO,EAAE,GAAG,MAAM,MAAMA,GAAE,QAAQ,eAAe,GAAG,WAAWA,GAAE,OAAM,GAAI,OAAOA,GAAE,OAAM,EAAE,CAAE;EAChGA,GAAE,OAAO,EAAE,GAAG,MAAM,MAAMA,GAAE,QAAQ,cAAc,GAAG,WAAWA,GAAE,OAAM,GAAI,WAAWA,GAAE,OAAM,EAAE,CAAE;EACnGA,GAAE,OAAO,EAAE,GAAG,MAAM,MAAMA,GAAE,QAAQ,cAAc,GAAG,WAAWA,GAAE,OAAM,GAAI,MAAM,YAAY,WAAWA,GAAE,OAAM,EAAE,CAAE;EACrHA,GAAE,OAAO,EAAE,GAAG,MAAM,MAAMA,GAAE,QAAQ,WAAW,GAAG,OAAO,gBAAgB,WAAW,gBAAe,CAAE;EACrGA,GAAE,OAAO,EAAE,GAAG,MAAM,MAAMA,GAAE,QAAQ,kBAAkB,GAAG,UAAU,eAAc,CAAE;EACnFA,GAAE,OAAO,EAAE,GAAG,MAAM,MAAMA,GAAE,QAAQ,mBAAmB,GAAG,UAAU,eAAc,CAAE;EACpFA,GAAE,OAAO,EAAE,GAAG,MAAM,MAAMA,GAAE,QAAQ,aAAa,GAAG,KAAK,iBAAgB,CAAE;EAC3EA,GAAE,OAAO,EAAE,GAAG,MAAM,MAAMA,GAAE,QAAQ,YAAY,GAAG,aAAaA,GAAE,OAAM,GAAI,cAAcA,GAAE,OAAM,GAAI,OAAOA,GAAE,OAAM,EAAE,CAAE;EACzHA,GAAE,OAAO,EAAE,GAAG,MAAM,MAAMA,GAAE,QAAQ,QAAQ,GAAG,OAAOA,GAAE,OAAM,GAAI,MAAMA,GAAE,OAAM,GAAI,OAAOA,GAAE,KAAK,CAAC,QAAQ,QAAQ,OAAO,CAAC,EAAC,CAAE;EAC9HA,GAAE,OAAO,EAAE,GAAG,MAAM,MAAMA,GAAE,QAAQ,gBAAgB,GAAG,WAAWA,GAAE,OAAM,GAAI,MAAMA,GAAE,OAAM,GAAI,QAAQA,GAAE,OAAM,EAAE,CAAE;EACpHA,GAAE,OAAO,EAAE,GAAG,MAAM,MAAMA,GAAE,QAAQ,gBAAgB,GAAG,WAAWA,GAAE,OAAM,EAAE,CAAE;CAC/E;AAkBM,IAAM,wBAAwBA,GAAE,mBAAmB,QAAQ;EAChEA,GAAE,OAAO;IACP,MAAMA,GAAE,QAAQ,OAAO;IACvB,QAAQA,GAAE,KAAK,CAAC,QAAQ,QAAQ,MAAM,OAAO,CAAC;IAC9C,GAAGA,GAAE,OAAM,EAAG,IAAI,CAAC,EAAE,IAAI,CAAC;IAC1B,GAAGA,GAAE,OAAM,EAAG,IAAI,CAAC,EAAE,IAAI,CAAC;IAC1B,QAAQA,GAAE,KAAK,CAAC,QAAQ,UAAU,OAAO,CAAC,EAAE,QAAQ,MAAM;IAC1D,YAAYA,GAAE,OAAM,EAAG,IAAG,EAAG,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC;;IAEpD,QAAQA,GAAE,OAAM,EAAG,QAAQ,CAAC;IAC5B,QAAQA,GAAE,OAAM,EAAG,QAAQ,CAAC;GAC7B;EACDA,GAAE,OAAO;IACP,MAAMA,GAAE,QAAQ,KAAK;IACrB,QAAQA,GAAE,KAAK,CAAC,QAAQ,IAAI,CAAC;;IAE7B,KAAKA,GAAE,OAAM,EAAG,IAAI,CAAC,EAAE,IAAI,EAAE;GAC9B;EACDA,GAAE,OAAO;IACP,MAAMA,GAAE,QAAQ,MAAM;;IAEtB,MAAMA,GAAE,OAAM,EAAG,IAAI,CAAC,EAAE,IAAI,IAAI;GACjC;CACF;AAIM,IAAM,8BAA8BA,GAAE,mBAAmB,QAAQ;EACtEA,GAAE,OAAO,EAAE,MAAMA,GAAE,QAAQ,OAAO,GAAG,OAAO,sBAAqB,CAAE;;;;;;;;;;EAUnEA,GAAE,OAAO,EAAE,MAAMA,GAAE,QAAQ,mBAAmB,EAAC,CAAE;CAClD;;;AC9ED,SAAS,KAAAC,UAAS;AAOX,IAAM,mBAAmBC,GAAE,OAAO;EACvC,MAAMA,GAAE,OAAM,EAAG,IAAI,CAAC,EAAE,IAAI,EAAE;EAC9B,OAAOA,GAAE,OAAM,EAAG,IAAI,GAAG,EAAE,SAAQ;EACnC,aAAaA,GAAE,OAAM,EAAG,IAAI,GAAI,EAAE,SAAQ;EAC1C,aAAaA,GAAE,OAAM,EAAG,IAAI,CAAC,EAAE,SAAQ;EACvC,WAAW,gBAAgB,SAAQ;CACpC;AAGM,IAAM,mBAAmB,iBAAiB,QAAO,EAAG,OAAO;EAChE,QAAQA,GAAE,QAAO,EAAG,SAAQ;EAC5B,QAAQA,GAAE,QAAO,EAAG,SAAQ;EAC5B,eAAeA,GAAE,QAAO,EAAG,SAAQ;CACpC;AAGM,IAAM,sBAAsBA,GAAE,OAAO;EAC1C,MAAMA,GAAE,KAAK,CAAC,MAAM,OAAO,CAAC;EAC5B,OAAOA,GAAE,OAAM,EAAG,SAAQ;EAC1B,cAAcA,GAAE,MAAMA,GAAE,OAAM,CAAE;CACjC;AAGM,IAAM,qBAAqBA,GAAE,OAAO;EACzC,WAAWA,GAAE,OAAM;EACnB,eAAeA,GAAE,MAAMA,GAAE,OAAM,CAAE,EAAE,SAAQ;EAC3C,WAAWA,GAAE,OAAM,EAAG,SAAQ,EAAG,SAAQ;;EAEzC,eAAeA,GAAE,MAAMA,GAAE,OAAM,CAAE,EAAE,SAAQ;EAC3C,iBAAiBA,GAAE,QAAO,EAAG,SAAQ;CACtC;AAGM,IAAM,0BAA0BA,GAAE,OAAO;EAC9C,UAAUA,GAAE,KAAK,CAAC,SAAS,MAAM,CAAC;EAClC,YAAYA,GACT,OAAO,EAAE,aAAaA,GAAE,OAAM,GAAI,cAAcA,GAAE,OAAM,EAAG,QAAQ,EAAE,GAAG,WAAWA,GAAE,OAAM,EAAG,QAAQ,EAAE,EAAC,CAAE,EAC3G,SAAQ;CACZ;AAGM,IAAM,oBAAoBA,GAAE,OAAO;EACxC,MAAMA,GAAE,KAAK,CAAC,WAAW,OAAO,CAAC;EACjC,aAAaA,GAAE,OAAM,EAAG,IAAI,CAAC;EAC7B,cAAcA,GAAE,OAAM,EAAG,QAAQ,EAAE;EACnC,WAAWA,GAAE,OAAM,EAAG,QAAQ,EAAE;CACjC;AAGM,IAAM,uBAAuBA,GAAE,OAAO;EAC3C,OAAOA,GAAE,OAAM;EACf,MAAMA,GAAE,OAAM,EAAG,IAAI,CAAC;EACtB,UAAUA,GAAE,OAAM,EAAG,IAAI,CAAC;EAC1B,UAAUA,GAAE,OAAM,EAAG,SAAQ;EAC7B,eAAeA,GAAE,OAAM,EAAG,IAAI,CAAC;EAC/B,SAASA,GAAE,QAAO,EAAG,SAAQ;CAC9B;AAGM,IAAM,qBAAqBA,GAAE,OAAO;EACzC,MAAMA,GAAE,OAAM,EAAG,IAAI,CAAC;EACtB,aAAaA,GAAE,OAAM,EAAG,QAAQ,EAAE;EAClC,QAAQA,GAAE,OAAM,EAAG,IAAI,CAAC;EACxB,QAAQA,GAAE,KAAK,CAAC,QAAQ,UAAU,UAAU,CAAC,EAAE,SAAQ;CACxD;AAOM,IAAM,yBAAyBA,GACnC,OAAO;EACN,MAAM,gBAAgB,MAAM;EAC5B,aAAaA,GAAE,OAAM,EAAG,QAAQ,EAAE;EAClC,QAAQ,sBAAsB,SAAQ;EACtC,SAASA,GAAE,OAAM,EAAG,SAAQ;EAC5B,SAASA,GAAE,QAAO,EAAG,SAAQ;EAC7B,QAAQA,GAAE,MAAMA,GAAE,OAAM,CAAE,EAAE,SAAQ;CACrC,EACA,OAAO,CAAC,MAAM,QAAQ,EAAE,MAAM,MAAM,QAAQ,EAAE,OAAO,GAAG,EAAE,SAAS,0CAAyC,CAAE;AAQ1G,IAAM,yBAAyBA,GAAE,OAAO;EAC7C,aAAaA,GAAE,OAAM,EAAG,SAAQ;EAChC,QAAQ,sBAAsB,SAAQ;EACtC,SAASA,GAAE,QAAO,EAAG,SAAQ;CAC9B;AAuCD,IAAM,iBAAiB;EACrB,UAAUA,GAAE,OAAM;EAClB,uBAAuBA,GAAE,OAAM,EAAG,IAAI,CAAC,EAAE,IAAI,CAAC;EAC9C,mBAAmBA,GAAE,QAAO;EAC5B,OAAOA,GAAE,KAAK,CAAC,UAAU,SAAS,MAAM,CAAC;EACzC,gBAAgBA,GAAE,KAAK,CAAC,OAAO,UAAU,OAAO,CAAC;EACjD,kBAAkBA,GAAE,OAAM;EAC1B,sBAAsBA,GAAE,QAAO;EAC/B,aAAaA,GAAE,KAAK,CAAC,gBAAgB,KAAK,CAAC;EAC3C,cAAcA,GAAE,KAAK,CAAC,QAAQ,WAAW,CAAC;;AAGrC,IAAM,iBAAiBA,GAAE,OAAO;EACrC,UAAU,eAAe,SAAS,QAAQ,KAAK;EAC/C,uBAAuB,eAAe,sBAAsB,QAAQ,CAAC;EACrE,mBAAmB,eAAe,kBAAkB,QAAQ,IAAI;EAChE,OAAO,eAAe,MAAM,QAAQ,QAAQ;EAC5C,gBAAgB,eAAe,eAAe,QAAQ,KAAK;EAC3D,kBAAkB,eAAe,iBAAiB,QAAQ,CAAC;EAC3D,sBAAsB,eAAe,qBAAqB,QAAQ,IAAI;EACtE,aAAa,eAAe,YAAY,QAAQ,cAAc;EAC9D,cAAc,eAAe,aAAa,QAAQ,MAAM;CACzD;AASM,IAAM,sBAAsBA,GAAE,OAAO,cAAc,EAAE,QAAO;AAG5D,IAAM,qBAAqBA,GAAE,OAAO;EACzC,MAAMA,GAAE,KAAK,CAAC,WAAW,QAAQ,WAAW,KAAK,CAAC;EAClD,IAAIA,GAAE,OAAM;EACZ,UAAUA,GAAE,OAAM,EAAG,SAAQ;EAC7B,OAAOA,GAAE,OAAM,EAAG,SAAQ;EAC1B,OAAOA,GAAE,OAAM;EACf,SAASA,GAAE,OAAM;EACjB,WAAWA,GAAE,OAAM;CACpB;",
+  "sourcesContent": ["/** Operational limits \u2014 mirrors grok-bot-system-outline.md \u00A713. */\nexport const LIMITS = {\n  MAX_BOTS_AND_GROUPS: 50,\n  MIN_GROUP_MEMBERS: 2,\n  MAX_GROUP_MEMBERS: 6,\n  MAX_ROUTINES_PER_BOT: 50,\n  ROUTINE_RUNS_RETAINED: 20,\n  MAX_ATTACHMENTS_PER_MESSAGE: 6,\n  MAX_ATTACHMENT_BYTES: 25 * 1024 * 1024,\n  MAX_VIDEO_ATTACHMENT_BYTES: 200 * 1024 * 1024,\n  MAX_BOT_TO_BOT_HOPS: 5,\n  DEFAULT_MAX_CONCURRENT_SESSIONS: 2,\n  APPROVAL_TIMEOUT_MS: 15 * 60 * 1000,\n  TEACH_RECORDING_MAX_MS: 10 * 60 * 1000,\n} as const;\n\n/** Error codes returned by the service layer when a limit is violated. */\nexport const LIMIT_ERROR = {\n  TOO_MANY_BOTS: 'TOO_MANY_BOTS',\n  GROUP_SIZE: 'GROUP_SIZE',\n  TOO_MANY_ROUTINES: 'TOO_MANY_ROUTINES',\n  TOO_MANY_ATTACHMENTS: 'TOO_MANY_ATTACHMENTS',\n  ATTACHMENT_TOO_LARGE: 'ATTACHMENT_TOO_LARGE',\n  HOP_LIMIT: 'HOP_LIMIT',\n} as const;\nexport type LimitErrorCode = (typeof LIMIT_ERROR)[keyof typeof LIMIT_ERROR];\n\nexport class LimitError extends Error {\n  constructor(\n    public code: LimitErrorCode,\n    message: string,\n  ) {\n    super(message);\n    this.name = 'LimitError';\n  }\n}\n", "import { z } from 'zod';\n\nexport const BotStateSchema = z.enum([\n  'idle',\n  'queued',\n  'running',\n  'waiting_approval',\n  'waiting_input',\n  'interrupted',\n]);\nexport type BotState = z.infer<typeof BotStateSchema>;\n\nexport const AttentionSchema = z.enum(['none', 'unread', 'needs_attention']);\nexport type Attention = z.infer<typeof AttentionSchema>;\n\n/**\n * Model tiers a Bot can run on, ordered most to least capable \u2014 this is also the order the UI\n * renders them in, so both pickers stay consistent without repeating the list.\n *\n * Each value is a `claude` CLI model alias, passed through verbatim by `resolveModel()`. Adding a\n * tier here means adding an alias the CLI accepts (`claude --model`), not an API model ID.\n */\nexport const MODEL_TIERS = ['fable', 'opus', 'sonnet', 'haiku'] as const;\nexport const ModelTierSchema = z.enum(MODEL_TIERS);\nexport type ModelTier = z.infer<typeof ModelTierSchema>;\n\nexport const BotSchema = z.object({\n  id: z.string(),\n  slug: z.string().regex(/^[a-z0-9][a-z0-9-]*$/),\n  name: z.string().min(1).max(60),\n  title: z.string().max(120).default(''),\n  description: z.string().max(8000).default(''),\n  avatarEmoji: z.string().max(8).default('\uD83E\uDD16'),\n  modelTier: ModelTierSchema.default('sonnet'),\n  pinned: z.boolean().default(false),\n  hidden: z.boolean().default(false),\n  notifications: z.boolean().default(true),\n  sessionId: z.string().nullable().default(null),\n  state: BotStateSchema.default('idle'),\n  attention: AttentionSchema.default('none'),\n  threadId: z.string().nullable().default(null),\n  createdAt: z.number(),\n  deletedAt: z.number().nullable().default(null),\n});\nexport type Bot = z.infer<typeof BotSchema>;\n\nexport const ThreadKindSchema = z.enum(['dm', 'group']);\nexport type ThreadKind = z.infer<typeof ThreadKindSchema>;\n\nexport const ThreadSchema = z.object({\n  id: z.string(),\n  kind: ThreadKindSchema,\n  title: z.string().default(''),\n  memberBotIds: z.array(z.string()).default([]),\n  pinned: z.boolean().default(false),\n  hidden: z.boolean().default(false),\n  lastReadAt: z.number().default(0),\n  createdAt: z.number(),\n});\nexport type Thread = z.infer<typeof ThreadSchema>;\n\n/** Cards render structured, non-prose content inside a message. */\nexport const CardSchema = z.discriminatedUnion('type', [\n  z.object({\n    type: z.literal('tool'),\n    toolName: z.string(),\n    summary: z.string(),\n    input: z.unknown().optional(),\n    result: z.string().optional(),\n    status: z.enum(['running', 'ok', 'error', 'denied']),\n  }),\n  z.object({\n    type: z.literal('file'),\n    path: z.string(),\n    name: z.string(),\n    mime: z.string(),\n    bytes: z.number(),\n    action: z.enum(['created', 'modified']).default('created'),\n  }),\n  z.object({ type: z.literal('approval'), approvalId: z.string() }),\n  z.object({ type: z.literal('handoff'), fromBotId: z.string(), toBotId: z.string(), note: z.string() }),\n  z.object({ type: z.literal('error'), message: z.string() }),\n  /** A connector asked for a sign-in mid-turn. The link is the provider's; the bot never sees it. */\n  z.object({ type: z.literal('signin'), serverName: z.string(), url: z.string() }),\n]);\nexport type Card = z.infer<typeof CardSchema>;\n\nexport const AuthorKindSchema = z.enum(['user', 'bot', 'system']);\nexport type AuthorKind = z.infer<typeof AuthorKindSchema>;\n\nexport const MessageSchema = z.object({\n  id: z.string(),\n  threadId: z.string(),\n  authorKind: AuthorKindSchema,\n  authorBotId: z.string().nullable().default(null),\n  replyToId: z.string().nullable().default(null),\n  contentMd: z.string().default(''),\n  cards: z.array(CardSchema).default([]),\n  streaming: z.boolean().default(false),\n  createdAt: z.number(),\n});\nexport type Message = z.infer<typeof MessageSchema>;\n\nexport const AttachmentSchema = z.object({\n  id: z.string(),\n  messageId: z.string().nullable(),\n  path: z.string(),\n  name: z.string(),\n  mime: z.string(),\n  bytes: z.number(),\n  createdAt: z.number(),\n});\nexport type Attachment = z.infer<typeof AttachmentSchema>;\n\nexport const ApprovalStatusSchema = z.enum(['pending', 'allowed', 'denied', 'expired']);\nexport type ApprovalStatus = z.infer<typeof ApprovalStatusSchema>;\n\nexport const ApprovalSchema = z.object({\n  id: z.string(),\n  botId: z.string(),\n  threadId: z.string(),\n  toolName: z.string(),\n  inputSummary: z.string(),\n  rawInput: z.unknown(),\n  status: ApprovalStatusSchema.default('pending'),\n  decidedBy: z.enum(['user', 'rule', 'auto_review']).nullable().default(null),\n  reason: z.string().default(''),\n  ruleId: z.string().nullable().default(null),\n  createdAt: z.number(),\n  decidedAt: z.number().nullable().default(null),\n});\nexport type Approval = z.infer<typeof ApprovalSchema>;\n\nexport const RuleKindSchema = z.enum(['require', 'allow']);\nexport type RuleKind = z.infer<typeof RuleKindSchema>;\n\nexport const RuleSchema = z.object({\n  id: z.string(),\n  kind: RuleKindSchema,\n  /** Glob over tool name, e.g. \"Bash\", \"browser_*\", \"*\" */\n  toolPattern: z.string().default('*'),\n  /** Optional regex tested against the serialized tool input. */\n  inputPattern: z.string().default(''),\n  scopeNote: z.string().default(''),\n  builtin: z.boolean().default(false),\n  enabled: z.boolean().default(true),\n  createdAt: z.number(),\n});\nexport type Rule = z.infer<typeof RuleSchema>;\n\nexport const SkillSchema = z.object({\n  id: z.string(),\n  slug: z.string(),\n  name: z.string(),\n  description: z.string().default(''),\n  path: z.string(),\n  source: z.enum(['user', 'taught', 'imported']).default('user'),\n  createdAt: z.number(),\n});\nexport type Skill = z.infer<typeof SkillSchema>;\n\n/* ------------------------------ MCP connectors ------------------------------ */\n\n/**\n * Connector names become the middle segment of every tool name the model sees:\n * `mcp__<name>__<tool>`. Underscores are banned outright because `toolNameAliases()`\n * splits on the first `__` pair \u2014 a name containing one would make a connector's tools\n * unmatchable by the rules that are supposed to gate them.\n */\nexport const CONNECTOR_NAME_RE = /^[a-z0-9][a-z0-9-]{0,31}$/;\n\n/** Taken by the built-in servers; a connector using one would overwrite it in the turn's server map. */\nexport const RESERVED_CONNECTOR_NAMES = ['antbot', 'browser'] as const;\n\n/**\n * How to reach an MCP server. Mirrors the Agent SDK's own `McpServerConfig` minus the\n * in-process `sdk` variant, which only the built-in servers use.\n *\n * Secret values are never stored here. An env value or header may embed `{{secret:NAME}}`,\n * resolved against the keychain at mount time \u2014 see `daemon/src/bots/connectors.ts`.\n */\nexport const ConnectorConfigSchema = z.discriminatedUnion('transport', [\n  z.object({\n    transport: z.literal('stdio'),\n    command: z.string().min(1),\n    args: z.array(z.string()).default([]),\n    env: z.record(z.string(), z.string()).default({}),\n  }),\n  z.object({\n    transport: z.literal('http'),\n    url: z.string().url(),\n    headers: z.record(z.string(), z.string()).default({}),\n    /** Optional allowlist passed through to the SDK. Omit to expose every tool the server offers. */\n    tools: z.array(z.string()).optional(),\n  }),\n  z.object({\n    transport: z.literal('sse'),\n    url: z.string().url(),\n    headers: z.record(z.string(), z.string()).default({}),\n    tools: z.array(z.string()).optional(),\n  }),\n]);\nexport type ConnectorConfig = z.infer<typeof ConnectorConfigSchema>;\n\nexport const ConnectorSchema = z.object({\n  id: z.string(),\n  name: z\n    .string()\n    .regex(CONNECTOR_NAME_RE, 'lowercase letters, digits and hyphens only, max 32 characters')\n    .refine((n) => !(RESERVED_CONNECTOR_NAMES as readonly string[]).includes(n), {\n      message: `\"antbot\" and \"browser\" are reserved for the built-in servers`,\n    }),\n  description: z.string().default(''),\n  /** Account-wide switch. A disabled connector mounts for nobody, whatever the assignments say. */\n  enabled: z.boolean().default(true),\n  /**\n   * `builtin` \u2014 served by the daemon itself (Gmail\u2026), credentials held by the daemon, config\n   * points at the daemon's own `/mcp/<name>`. `custom` \u2014 a command or URL the user added.\n   */\n  kind: z.enum(['custom', 'builtin']).default('custom'),\n  config: ConnectorConfigSchema,\n  /** Last verdict from a check or a turn: ready | needs-sign-in | needs-credential | unreachable | connected | failed\u2026 */\n  lastStatus: z.string().nullable().default(null),\n  lastError: z.string().nullable().default(null),\n  checkedAt: z.number().nullable().default(null),\n  createdAt: z.number(),\n});\nexport type Connector = z.infer<typeof ConnectorSchema>;\n\n/** The verdict `POST /api/connectors/:id/check` returns, and what `add` prints. */\nexport const ConnectorCheckSchema = z.object({\n  status: z.enum(['ready', 'needs-sign-in', 'needs-credential', 'unreachable']),\n  /** For needs-sign-in: whether the provider lets ant-bot register itself (no client ID needed). */\n  selfRegistration: z.boolean().optional(),\n  /** Who is asking for the sign-in, when known \u2014 \"Google\", \"accounts.example.com\". */\n  provider: z.string().optional(),\n  tools: z.array(z.object({ name: z.string(), description: z.string() })).default([]),\n  detail: z.string().optional(),\n  /**\n   * A built-in that does the same job, when the URL is a provider's own MCP endpoint that admits\n   * only clients the provider allowlisted (Google). Sign-in there can succeed and every call\n   * still be refused, so the honest verdict names the way that works.\n   */\n  alternative: z.string().optional(),\n});\nexport type ConnectorCheck = z.infer<typeof ConnectorCheckSchema>;\n\nexport const RoutineSchema = z.object({\n  id: z.string(),\n  botId: z.string(),\n  name: z.string().min(1),\n  cronExpr: z.string(),\n  timezone: z.string().default('UTC'),\n  instructionMd: z.string(),\n  enabled: z.boolean().default(true),\n  lastRunAt: z.number().nullable().default(null),\n  nextRunAt: z.number().nullable().default(null),\n  createdAt: z.number(),\n});\nexport type Routine = z.infer<typeof RoutineSchema>;\n\nexport const RoutineRunSchema = z.object({\n  id: z.string(),\n  routineId: z.string(),\n  startedAt: z.number(),\n  finishedAt: z.number().nullable().default(null),\n  status: z.enum(['running', 'ok', 'failed', 'interrupted']),\n  summary: z.string().default(''),\n  threadId: z.string().nullable().default(null),\n  isTest: z.boolean().default(false),\n});\nexport type RoutineRun = z.infer<typeof RoutineRunSchema>;\n\nexport const MailboxEntrySchema = z.object({\n  id: z.string(),\n  fromBotId: z.string(),\n  toBotId: z.string(),\n  contentMd: z.string(),\n  hops: z.number().default(1),\n  delivered: z.boolean().default(false),\n  createdAt: z.number(),\n});\nexport type MailboxEntry = z.infer<typeof MailboxEntrySchema>;\n\nexport const UsageRowSchema = z.object({\n  id: z.string(),\n  botId: z.string(),\n  turnId: z.string(),\n  model: z.string(),\n  inputTokens: z.number().default(0),\n  outputTokens: z.number().default(0),\n  cacheReadTokens: z.number().default(0),\n  costEstimate: z.number().default(0),\n  createdAt: z.number(),\n});\nexport type UsageRow = z.infer<typeof UsageRowSchema>;\n\nexport const TurnOriginSchema = z.enum(['user', 'bot', 'routine', 'system']);\nexport type TurnOrigin = z.infer<typeof TurnOriginSchema>;\n", "import { z } from 'zod';\nimport { BotStateSchema, AttentionSchema, CardSchema, MessageSchema, ApprovalSchema, RoutineRunSchema } from './entities.js';\n\n/** Every server\u2192client event carries {threadId, botId, seq} for ordering/reconciliation. */\nconst base = { seq: z.number(), threadId: z.string().nullable(), botId: z.string().nullable() };\n\nexport const ServerEventSchema = z.discriminatedUnion('type', [\n  /**\n   * Connection handshake. Carries the current seq so a client can detect gaps, and `epoch` \u2014\n   * an id generated once per daemon process.\n   *\n   * The seq counter restarts at 1 on every boot, so after a restart a client that filters on\n   * \"seq greater than the last one I saw\" silently drops everything the new process sends while\n   * its socket still reports Connected. A changed epoch is how it knows the numbering is new.\n   */\n  z.object({ ...base, type: z.literal('hello'), epoch: z.string() }),\n  z.object({ ...base, type: z.literal('message.created'), message: MessageSchema }),\n  z.object({ ...base, type: z.literal('message.delta'), messageId: z.string(), delta: z.string() }),\n  z.object({ ...base, type: z.literal('message.done'), messageId: z.string(), contentMd: z.string() }),\n  z.object({ ...base, type: z.literal('message.card'), messageId: z.string(), card: CardSchema, cardIndex: z.number() }),\n  z.object({ ...base, type: z.literal('bot.state'), state: BotStateSchema, attention: AttentionSchema }),\n  z.object({ ...base, type: z.literal('approval.pending'), approval: ApprovalSchema }),\n  z.object({ ...base, type: z.literal('approval.resolved'), approval: ApprovalSchema }),\n  z.object({ ...base, type: z.literal('routine.run'), run: RoutineRunSchema }),\n  z.object({ ...base, type: z.literal('usage.tick'), inputTokens: z.number(), outputTokens: z.number(), model: z.string() }),\n  z.object({ ...base, type: z.literal('notify'), title: z.string(), body: z.string(), level: z.enum(['info', 'warn', 'error']) }),\n  z.object({ ...base, type: z.literal('secret.request'), requestId: z.string(), name: z.string(), reason: z.string() }),\n  z.object({ ...base, type: z.literal('thread.updated'), threadId2: z.string() }),\n]);\nexport type ServerEvent = z.infer<typeof ServerEventSchema>;\nexport type ServerEventType = ServerEvent['type'];\n\n/* ------------------------- screencast input (client \u2192 server) ------------------------- */\n\n/**\n * Human input forwarded over the screencast websocket while a screen is taken over.\n *\n * Coordinates are **normalised** (0\u20131, fractions of the rendered frame) rather than pixels: the\n * screencast is capped at 1280px wide and the browser then scales the image to fit the pane, so\n * the client cannot know the page's real viewport and the server cannot know the client's. Each\n * side converts against what it does know.\n *\n * The daemon dispatches these only while `takeOver()` is active for that bot \u2014 see\n * `docs/SECURITY.md`. Input is a human acting as themselves, so it does not pass the Permission\n * Gateway; the gateway governs what *bots* do.\n */\nexport const ScreencastInputSchema = z.discriminatedUnion('kind', [\n  z.object({\n    kind: z.literal('mouse'),\n    action: z.enum(['move', 'down', 'up', 'wheel']),\n    x: z.number().min(0).max(1),\n    y: z.number().min(0).max(1),\n    button: z.enum(['left', 'middle', 'right']).default('left'),\n    clickCount: z.number().int().min(0).max(3).default(1),\n    /** Wheel deltas, in CSS pixels. Only read for `action: 'wheel'`. */\n    deltaX: z.number().default(0),\n    deltaY: z.number().default(0),\n  }),\n  z.object({\n    kind: z.literal('key'),\n    action: z.enum(['down', 'up']),\n    /** A KeyboardEvent.key value \u2014 Playwright's keyboard maps these to the right key codes. */\n    key: z.string().min(1).max(32),\n  }),\n  z.object({\n    kind: z.literal('text'),\n    /** Committed text (IME, paste, or a printable keypress), inserted verbatim. */\n    text: z.string().min(1).max(4096),\n  }),\n]);\nexport type ScreencastInput = z.infer<typeof ScreencastInputSchema>;\n\n/** Frames the client may send on the screencast socket. */\nexport const ScreencastClientFrameSchema = z.discriminatedUnion('type', [\n  z.object({ type: z.literal('input'), input: ScreencastInputSchema }),\n  /**\n   * Asks for the remote page's current text selection, so the human can copy out of it.\n   *\n   * A round trip is needed because the two clipboards are different: pressing Ctrl+C in the\n   * viewer copies whatever is selected in *your* browser (nothing \u2014 the page is a JPEG), and\n   * forwarding Ctrl+C to the page would write to the headless browser's clipboard, which you\n   * have no way to read. So the daemon reads the selection and hands the text back for the\n   * viewer to put on your clipboard.\n   */\n  z.object({ type: z.literal('selection-request') }),\n]);\nexport type ScreencastClientFrame = z.infer<typeof ScreencastClientFrameSchema>;\n", "import { z } from 'zod';\nimport {\n  BotSchema, ThreadSchema, MessageSchema, ApprovalSchema, RuleSchema,\n  SkillSchema, RoutineSchema, RoutineRunSchema, UsageRowSchema, ModelTierSchema,\n  ConnectorSchema, ConnectorConfigSchema, type Connector,\n} from './entities.js';\n\nexport const CreateBotRequest = z.object({\n  name: z.string().min(1).max(60),\n  title: z.string().max(120).optional(),\n  description: z.string().max(8000).optional(),\n  avatarEmoji: z.string().max(8).optional(),\n  modelTier: ModelTierSchema.optional(),\n});\nexport type CreateBotRequest = z.infer<typeof CreateBotRequest>;\n\nexport const UpdateBotRequest = CreateBotRequest.partial().extend({\n  pinned: z.boolean().optional(),\n  hidden: z.boolean().optional(),\n  notifications: z.boolean().optional(),\n});\nexport type UpdateBotRequest = z.infer<typeof UpdateBotRequest>;\n\nexport const CreateThreadRequest = z.object({\n  kind: z.enum(['dm', 'group']),\n  title: z.string().optional(),\n  memberBotIds: z.array(z.string()),\n});\nexport type CreateThreadRequest = z.infer<typeof CreateThreadRequest>;\n\nexport const PostMessageRequest = z.object({\n  contentMd: z.string(),\n  attachmentIds: z.array(z.string()).optional(),\n  replyToId: z.string().nullable().optional(),\n  /** explicit @-mention targets resolved by the client */\n  mentionBotIds: z.array(z.string()).optional(),\n  mentionEveryone: z.boolean().optional(),\n});\nexport type PostMessageRequest = z.infer<typeof PostMessageRequest>;\n\nexport const ApprovalDecisionRequest = z.object({\n  decision: z.enum(['allow', 'deny']),\n  alwaysRule: z\n    .object({ toolPattern: z.string(), inputPattern: z.string().default(''), scopeNote: z.string().default('') })\n    .optional(),\n});\nexport type ApprovalDecisionRequest = z.infer<typeof ApprovalDecisionRequest>;\n\nexport const CreateRuleRequest = z.object({\n  kind: z.enum(['require', 'allow']),\n  toolPattern: z.string().min(1),\n  inputPattern: z.string().default(''),\n  scopeNote: z.string().default(''),\n});\nexport type CreateRuleRequest = z.infer<typeof CreateRuleRequest>;\n\nexport const CreateRoutineRequest = z.object({\n  botId: z.string(),\n  name: z.string().min(1),\n  cronExpr: z.string().min(1),\n  timezone: z.string().optional(),\n  instructionMd: z.string().min(1),\n  enabled: z.boolean().optional(),\n});\nexport type CreateRoutineRequest = z.infer<typeof CreateRoutineRequest>;\n\nexport const CreateSkillRequest = z.object({\n  name: z.string().min(1),\n  description: z.string().default(''),\n  bodyMd: z.string().min(1),\n  source: z.enum(['user', 'taught', 'imported']).optional(),\n});\nexport type CreateSkillRequest = z.infer<typeof CreateSkillRequest>;\n\n/**\n * Either a custom server (`config`) or a built-in one (`builtin`, a catalog name \u2014 the daemon\n * fills in the config). `botIds` assigns it in the same call so adding is one step.\n */\nexport const CreateConnectorRequest = z\n  .object({\n    name: ConnectorSchema.shape.name,\n    description: z.string().default(''),\n    config: ConnectorConfigSchema.optional(),\n    builtin: z.string().optional(),\n    enabled: z.boolean().optional(),\n    botIds: z.array(z.string()).optional(),\n  })\n  .refine((v) => Boolean(v.config) !== Boolean(v.builtin), { message: 'Give either config or builtin, not both' });\nexport type CreateConnectorRequest = z.infer<typeof CreateConnectorRequest>;\n\n/**\n * No `name`: renaming a connector renames every tool the model and the rules see\n * (`mcp__<name>__<tool>`), silently orphaning any rule written against the old one.\n * Delete and re-add instead.\n */\nexport const UpdateConnectorRequest = z.object({\n  description: z.string().optional(),\n  config: ConnectorConfigSchema.optional(),\n  enabled: z.boolean().optional(),\n});\nexport type UpdateConnectorRequest = z.infer<typeof UpdateConnectorRequest>;\n\n/**\n * A connector as the API returns it. `missingSecrets` names the `{{secret:\u2026}}` references\n * that have nothing behind them \u2014 surfaced so a connector that will silently fail to mount\n * says so in the UI before a turn runs, rather than going quiet at turn time.\n */\nexport type ApiConnector = Connector & {\n  missingSecrets: string[];\n  /** Whether an interactive sign-in has been completed and stored for this connector. */\n  signedIn: boolean;\n};\n\n/** A catalog entry as the API describes it: what it is and what setting it up will involve. */\nexport interface ApiCatalogEntry {\n  name: string;\n  displayName: string;\n  description: string;\n  provider: string;\n  /** Whether the provider needs a client ID/secret the user creates (Google) or self-registers. */\n  needsClientCredentials: boolean;\n  setupSteps: string[];\n}\n\n/**\n * A raw probe: did the server answer, and what did it list. Tool names and descriptions only \u2014\n * never config. Reachable is not usable; `ConnectorCheck` is the verdict a person should read.\n */\nexport interface ConnectorProbeResult {\n  ok: boolean;\n  tools: { name: string; description: string }[];\n  error?: string;\n}\n\n/**\n * Field types, declared once and without defaults. `SettingsSchema` layers the\n * defaults on for reads; `SettingsPatchSchema` deliberately leaves them off.\n */\nconst settingsFields = {\n  timezone: z.string(),\n  maxConcurrentSessions: z.number().min(1).max(8),\n  autoReviewEnabled: z.boolean(),\n  theme: z.enum(['system', 'light', 'dark']),\n  localExecution: z.enum(['ask', 'always', 'never']),\n  dailyTokenBudget: z.number(),\n  notificationsEnabled: z.boolean(),\n  billingMode: z.enum(['subscription', 'api']),\n  computerMode: z.enum(['host', 'container']),\n};\n\nexport const SettingsSchema = z.object({\n  timezone: settingsFields.timezone.default('UTC'),\n  maxConcurrentSessions: settingsFields.maxConcurrentSessions.default(2),\n  autoReviewEnabled: settingsFields.autoReviewEnabled.default(true),\n  theme: settingsFields.theme.default('system'),\n  localExecution: settingsFields.localExecution.default('ask'),\n  dailyTokenBudget: settingsFields.dailyTokenBudget.default(0),\n  notificationsEnabled: settingsFields.notificationsEnabled.default(true),\n  billingMode: settingsFields.billingMode.default('subscription'),\n  computerMode: settingsFields.computerMode.default('host'),\n});\nexport type Settings = z.infer<typeof SettingsSchema>;\n\n/**\n * Body schema for `PATCH /api/settings`. It must NOT carry defaults: parsing a\n * one-field patch through a defaulted schema yields a complete object, and\n * persisting that would reset every setting the client didn't mention \u2014 including\n * `localExecution`, which is a security control (see docs/SECURITY.md).\n */\nexport const SettingsPatchSchema = z.object(settingsFields).partial();\nexport type SettingsPatch = z.infer<typeof SettingsPatchSchema>;\n\nexport const SearchResultSchema = z.object({\n  kind: z.enum(['message', 'file', 'routine', 'bot']),\n  id: z.string(),\n  threadId: z.string().nullable(),\n  botId: z.string().nullable(),\n  title: z.string(),\n  snippet: z.string(),\n  createdAt: z.number(),\n});\nexport type SearchResult = z.infer<typeof SearchResultSchema>;\n\nexport type ApiBot = z.infer<typeof BotSchema>;\nexport type ApiThread = z.infer<typeof ThreadSchema>;\nexport type ApiMessage = z.infer<typeof MessageSchema>;\nexport type ApiApproval = z.infer<typeof ApprovalSchema>;\nexport type ApiRule = z.infer<typeof RuleSchema>;\nexport type ApiSkill = z.infer<typeof SkillSchema>;\nexport type ApiRoutine = z.infer<typeof RoutineSchema>;\nexport type ApiRoutineRun = z.infer<typeof RoutineRunSchema>;\nexport type ApiUsageRow = z.infer<typeof UsageRowSchema>;\n\nexport interface RosterEntry { bot: ApiBot; thread: ApiThread | null; lastMessageAt: number }\nexport interface ThreadWithMessages { thread: ApiThread; messages: ApiMessage[] }\nexport interface UsageSummary {\n  totals: { inputTokens: number; outputTokens: number; cacheReadTokens: number };\n  byBot: Array<{ botId: string; botName: string; inputTokens: number; outputTokens: number }>;\n  byDay: Array<{ day: string; inputTokens: number; outputTokens: number }>;\n  byModel: Array<{ model: string; inputTokens: number; outputTokens: number }>;\n}\n"],
+  "mappings": ";;;;AACO,IAAM,SAAS;EACpB,qBAAqB;EACrB,mBAAmB;EACnB,mBAAmB;EACnB,sBAAsB;EACtB,uBAAuB;EACvB,6BAA6B;EAC7B,sBAAsB,KAAK,OAAO;EAClC,4BAA4B,MAAM,OAAO;EACzC,qBAAqB;EACrB,iCAAiC;EACjC,qBAAqB,KAAK,KAAK;EAC/B,wBAAwB,KAAK,KAAK;;AAI7B,IAAM,cAAc;EACzB,eAAe;EACf,YAAY;EACZ,mBAAmB;EACnB,sBAAsB;EACtB,sBAAsB;EACtB,WAAW;;AAIP,IAAO,aAAP,cAA0B,MAAK;EAE1B;EADT,YACS,MACP,SAAe;AAEf,UAAM,OAAO;AAHN,SAAA,OAAA;AAIP,SAAK,OAAO;EACd;;;;AClCF,SAAS,SAAS;AAEX,IAAM,iBAAiB,EAAE,KAAK;EACnC;EACA;EACA;EACA;EACA;EACA;CACD;AAGM,IAAM,kBAAkB,EAAE,KAAK,CAAC,QAAQ,UAAU,iBAAiB,CAAC;AAUpE,IAAM,cAAc,CAAC,SAAS,QAAQ,UAAU,OAAO;AACvD,IAAM,kBAAkB,EAAE,KAAK,WAAW;AAG1C,IAAM,YAAY,EAAE,OAAO;EAChC,IAAI,EAAE,OAAM;EACZ,MAAM,EAAE,OAAM,EAAG,MAAM,sBAAsB;EAC7C,MAAM,EAAE,OAAM,EAAG,IAAI,CAAC,EAAE,IAAI,EAAE;EAC9B,OAAO,EAAE,OAAM,EAAG,IAAI,GAAG,EAAE,QAAQ,EAAE;EACrC,aAAa,EAAE,OAAM,EAAG,IAAI,GAAI,EAAE,QAAQ,EAAE;EAC5C,aAAa,EAAE,OAAM,EAAG,IAAI,CAAC,EAAE,QAAQ,WAAI;EAC3C,WAAW,gBAAgB,QAAQ,QAAQ;EAC3C,QAAQ,EAAE,QAAO,EAAG,QAAQ,KAAK;EACjC,QAAQ,EAAE,QAAO,EAAG,QAAQ,KAAK;EACjC,eAAe,EAAE,QAAO,EAAG,QAAQ,IAAI;EACvC,WAAW,EAAE,OAAM,EAAG,SAAQ,EAAG,QAAQ,IAAI;EAC7C,OAAO,eAAe,QAAQ,MAAM;EACpC,WAAW,gBAAgB,QAAQ,MAAM;EACzC,UAAU,EAAE,OAAM,EAAG,SAAQ,EAAG,QAAQ,IAAI;EAC5C,WAAW,EAAE,OAAM;EACnB,WAAW,EAAE,OAAM,EAAG,SAAQ,EAAG,QAAQ,IAAI;CAC9C;AAGM,IAAM,mBAAmB,EAAE,KAAK,CAAC,MAAM,OAAO,CAAC;AAG/C,IAAM,eAAe,EAAE,OAAO;EACnC,IAAI,EAAE,OAAM;EACZ,MAAM;EACN,OAAO,EAAE,OAAM,EAAG,QAAQ,EAAE;EAC5B,cAAc,EAAE,MAAM,EAAE,OAAM,CAAE,EAAE,QAAQ,CAAA,CAAE;EAC5C,QAAQ,EAAE,QAAO,EAAG,QAAQ,KAAK;EACjC,QAAQ,EAAE,QAAO,EAAG,QAAQ,KAAK;EACjC,YAAY,EAAE,OAAM,EAAG,QAAQ,CAAC;EAChC,WAAW,EAAE,OAAM;CACpB;AAIM,IAAM,aAAa,EAAE,mBAAmB,QAAQ;EACrD,EAAE,OAAO;IACP,MAAM,EAAE,QAAQ,MAAM;IACtB,UAAU,EAAE,OAAM;IAClB,SAAS,EAAE,OAAM;IACjB,OAAO,EAAE,QAAO,EAAG,SAAQ;IAC3B,QAAQ,EAAE,OAAM,EAAG,SAAQ;IAC3B,QAAQ,EAAE,KAAK,CAAC,WAAW,MAAM,SAAS,QAAQ,CAAC;GACpD;EACD,EAAE,OAAO;IACP,MAAM,EAAE,QAAQ,MAAM;IACtB,MAAM,EAAE,OAAM;IACd,MAAM,EAAE,OAAM;IACd,MAAM,EAAE,OAAM;IACd,OAAO,EAAE,OAAM;IACf,QAAQ,EAAE,KAAK,CAAC,WAAW,UAAU,CAAC,EAAE,QAAQ,SAAS;GAC1D;EACD,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,UAAU,GAAG,YAAY,EAAE,OAAM,EAAE,CAAE;EAChE,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,SAAS,GAAG,WAAW,EAAE,OAAM,GAAI,SAAS,EAAE,OAAM,GAAI,MAAM,EAAE,OAAM,EAAE,CAAE;EACrG,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,OAAO,GAAG,SAAS,EAAE,OAAM,EAAE,CAAE;;EAE1D,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,QAAQ,GAAG,YAAY,EAAE,OAAM,GAAI,KAAK,EAAE,OAAM,EAAE,CAAE;CAChF;AAGM,IAAM,mBAAmB,EAAE,KAAK,CAAC,QAAQ,OAAO,QAAQ,CAAC;AAGzD,IAAM,gBAAgB,EAAE,OAAO;EACpC,IAAI,EAAE,OAAM;EACZ,UAAU,EAAE,OAAM;EAClB,YAAY;EACZ,aAAa,EAAE,OAAM,EAAG,SAAQ,EAAG,QAAQ,IAAI;EAC/C,WAAW,EAAE,OAAM,EAAG,SAAQ,EAAG,QAAQ,IAAI;EAC7C,WAAW,EAAE,OAAM,EAAG,QAAQ,EAAE;EAChC,OAAO,EAAE,MAAM,UAAU,EAAE,QAAQ,CAAA,CAAE;EACrC,WAAW,EAAE,QAAO,EAAG,QAAQ,KAAK;EACpC,WAAW,EAAE,OAAM;CACpB;AAGM,IAAM,mBAAmB,EAAE,OAAO;EACvC,IAAI,EAAE,OAAM;EACZ,WAAW,EAAE,OAAM,EAAG,SAAQ;EAC9B,MAAM,EAAE,OAAM;EACd,MAAM,EAAE,OAAM;EACd,MAAM,EAAE,OAAM;EACd,OAAO,EAAE,OAAM;EACf,WAAW,EAAE,OAAM;CACpB;AAGM,IAAM,uBAAuB,EAAE,KAAK,CAAC,WAAW,WAAW,UAAU,SAAS,CAAC;AAG/E,IAAM,iBAAiB,EAAE,OAAO;EACrC,IAAI,EAAE,OAAM;EACZ,OAAO,EAAE,OAAM;EACf,UAAU,EAAE,OAAM;EAClB,UAAU,EAAE,OAAM;EAClB,cAAc,EAAE,OAAM;EACtB,UAAU,EAAE,QAAO;EACnB,QAAQ,qBAAqB,QAAQ,SAAS;EAC9C,WAAW,EAAE,KAAK,CAAC,QAAQ,QAAQ,aAAa,CAAC,EAAE,SAAQ,EAAG,QAAQ,IAAI;EAC1E,QAAQ,EAAE,OAAM,EAAG,QAAQ,EAAE;EAC7B,QAAQ,EAAE,OAAM,EAAG,SAAQ,EAAG,QAAQ,IAAI;EAC1C,WAAW,EAAE,OAAM;EACnB,WAAW,EAAE,OAAM,EAAG,SAAQ,EAAG,QAAQ,IAAI;CAC9C;AAGM,IAAM,iBAAiB,EAAE,KAAK,CAAC,WAAW,OAAO,CAAC;AAGlD,IAAM,aAAa,EAAE,OAAO;EACjC,IAAI,EAAE,OAAM;EACZ,MAAM;;EAEN,aAAa,EAAE,OAAM,EAAG,QAAQ,GAAG;;EAEnC,cAAc,EAAE,OAAM,EAAG,QAAQ,EAAE;EACnC,WAAW,EAAE,OAAM,EAAG,QAAQ,EAAE;EAChC,SAAS,EAAE,QAAO,EAAG,QAAQ,KAAK;EAClC,SAAS,EAAE,QAAO,EAAG,QAAQ,IAAI;EACjC,WAAW,EAAE,OAAM;CACpB;AAGM,IAAM,cAAc,EAAE,OAAO;EAClC,IAAI,EAAE,OAAM;EACZ,MAAM,EAAE,OAAM;EACd,MAAM,EAAE,OAAM;EACd,aAAa,EAAE,OAAM,EAAG,QAAQ,EAAE;EAClC,MAAM,EAAE,OAAM;EACd,QAAQ,EAAE,KAAK,CAAC,QAAQ,UAAU,UAAU,CAAC,EAAE,QAAQ,MAAM;EAC7D,WAAW,EAAE,OAAM;CACpB;AAWM,IAAM,oBAAoB;AAG1B,IAAM,2BAA2B,CAAC,UAAU,SAAS;AASrD,IAAM,wBAAwB,EAAE,mBAAmB,aAAa;EACrE,EAAE,OAAO;IACP,WAAW,EAAE,QAAQ,OAAO;IAC5B,SAAS,EAAE,OAAM,EAAG,IAAI,CAAC;IACzB,MAAM,EAAE,MAAM,EAAE,OAAM,CAAE,EAAE,QAAQ,CAAA,CAAE;IACpC,KAAK,EAAE,OAAO,EAAE,OAAM,GAAI,EAAE,OAAM,CAAE,EAAE,QAAQ,CAAA,CAAE;GACjD;EACD,EAAE,OAAO;IACP,WAAW,EAAE,QAAQ,MAAM;IAC3B,KAAK,EAAE,OAAM,EAAG,IAAG;IACnB,SAAS,EAAE,OAAO,EAAE,OAAM,GAAI,EAAE,OAAM,CAAE,EAAE,QAAQ,CAAA,CAAE;;IAEpD,OAAO,EAAE,MAAM,EAAE,OAAM,CAAE,EAAE,SAAQ;GACpC;EACD,EAAE,OAAO;IACP,WAAW,EAAE,QAAQ,KAAK;IAC1B,KAAK,EAAE,OAAM,EAAG,IAAG;IACnB,SAAS,EAAE,OAAO,EAAE,OAAM,GAAI,EAAE,OAAM,CAAE,EAAE,QAAQ,CAAA,CAAE;IACpD,OAAO,EAAE,MAAM,EAAE,OAAM,CAAE,EAAE,SAAQ;GACpC;CACF;AAGM,IAAM,kBAAkB,EAAE,OAAO;EACtC,IAAI,EAAE,OAAM;EACZ,MAAM,EACH,OAAM,EACN,MAAM,mBAAmB,+DAA+D,EACxF,OAAO,CAAC,MAAM,CAAE,yBAA+C,SAAS,CAAC,GAAG;IAC3E,SAAS;GACV;EACH,aAAa,EAAE,OAAM,EAAG,QAAQ,EAAE;;EAElC,SAAS,EAAE,QAAO,EAAG,QAAQ,IAAI;;;;;EAKjC,MAAM,EAAE,KAAK,CAAC,UAAU,SAAS,CAAC,EAAE,QAAQ,QAAQ;EACpD,QAAQ;;EAER,YAAY,EAAE,OAAM,EAAG,SAAQ,EAAG,QAAQ,IAAI;EAC9C,WAAW,EAAE,OAAM,EAAG,SAAQ,EAAG,QAAQ,IAAI;EAC7C,WAAW,EAAE,OAAM,EAAG,SAAQ,EAAG,QAAQ,IAAI;EAC7C,WAAW,EAAE,OAAM;CACpB;AAIM,IAAM,uBAAuB,EAAE,OAAO;EAC3C,QAAQ,EAAE,KAAK,CAAC,SAAS,iBAAiB,oBAAoB,aAAa,CAAC;;EAE5E,kBAAkB,EAAE,QAAO,EAAG,SAAQ;;EAEtC,UAAU,EAAE,OAAM,EAAG,SAAQ;EAC7B,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,OAAM,GAAI,aAAa,EAAE,OAAM,EAAE,CAAE,CAAC,EAAE,QAAQ,CAAA,CAAE;EAClF,QAAQ,EAAE,OAAM,EAAG,SAAQ;;;;;;EAM3B,aAAa,EAAE,OAAM,EAAG,SAAQ;CACjC;AAGM,IAAM,gBAAgB,EAAE,OAAO;EACpC,IAAI,EAAE,OAAM;EACZ,OAAO,EAAE,OAAM;EACf,MAAM,EAAE,OAAM,EAAG,IAAI,CAAC;EACtB,UAAU,EAAE,OAAM;EAClB,UAAU,EAAE,OAAM,EAAG,QAAQ,KAAK;EAClC,eAAe,EAAE,OAAM;EACvB,SAAS,EAAE,QAAO,EAAG,QAAQ,IAAI;EACjC,WAAW,EAAE,OAAM,EAAG,SAAQ,EAAG,QAAQ,IAAI;EAC7C,WAAW,EAAE,OAAM,EAAG,SAAQ,EAAG,QAAQ,IAAI;EAC7C,WAAW,EAAE,OAAM;CACpB;AAGM,IAAM,mBAAmB,EAAE,OAAO;EACvC,IAAI,EAAE,OAAM;EACZ,WAAW,EAAE,OAAM;EACnB,WAAW,EAAE,OAAM;EACnB,YAAY,EAAE,OAAM,EAAG,SAAQ,EAAG,QAAQ,IAAI;EAC9C,QAAQ,EAAE,KAAK,CAAC,WAAW,MAAM,UAAU,aAAa,CAAC;EACzD,SAAS,EAAE,OAAM,EAAG,QAAQ,EAAE;EAC9B,UAAU,EAAE,OAAM,EAAG,SAAQ,EAAG,QAAQ,IAAI;EAC5C,QAAQ,EAAE,QAAO,EAAG,QAAQ,KAAK;CAClC;AAGM,IAAM,qBAAqB,EAAE,OAAO;EACzC,IAAI,EAAE,OAAM;EACZ,WAAW,EAAE,OAAM;EACnB,SAAS,EAAE,OAAM;EACjB,WAAW,EAAE,OAAM;EACnB,MAAM,EAAE,OAAM,EAAG,QAAQ,CAAC;EAC1B,WAAW,EAAE,QAAO,EAAG,QAAQ,KAAK;EACpC,WAAW,EAAE,OAAM;CACpB;AAGM,IAAM,iBAAiB,EAAE,OAAO;EACrC,IAAI,EAAE,OAAM;EACZ,OAAO,EAAE,OAAM;EACf,QAAQ,EAAE,OAAM;EAChB,OAAO,EAAE,OAAM;EACf,aAAa,EAAE,OAAM,EAAG,QAAQ,CAAC;EACjC,cAAc,EAAE,OAAM,EAAG,QAAQ,CAAC;EAClC,iBAAiB,EAAE,OAAM,EAAG,QAAQ,CAAC;EACrC,cAAc,EAAE,OAAM,EAAG,QAAQ,CAAC;EAClC,WAAW,EAAE,OAAM;CACpB;AAGM,IAAM,mBAAmB,EAAE,KAAK,CAAC,QAAQ,OAAO,WAAW,QAAQ,CAAC;;;ACzS3E,SAAS,KAAAA,UAAS;AAIlB,IAAM,OAAO,EAAE,KAAKC,GAAE,OAAM,GAAI,UAAUA,GAAE,OAAM,EAAG,SAAQ,GAAI,OAAOA,GAAE,OAAM,EAAG,SAAQ,EAAE;AAEtF,IAAM,oBAAoBA,GAAE,mBAAmB,QAAQ;;;;;;;;;EAS5DA,GAAE,OAAO,EAAE,GAAG,MAAM,MAAMA,GAAE,QAAQ,OAAO,GAAG,OAAOA,GAAE,OAAM,EAAE,CAAE;EACjEA,GAAE,OAAO,EAAE,GAAG,MAAM,MAAMA,GAAE,QAAQ,iBAAiB,GAAG,SAAS,cAAa,CAAE;EAChFA,GAAE,OAAO,EAAE,GAAG,MAAM,MAAMA,GAAE,QAAQ,eAAe,GAAG,WAAWA,GAAE,OAAM,GAAI,OAAOA,GAAE,OAAM,EAAE,CAAE;EAChGA,GAAE,OAAO,EAAE,GAAG,MAAM,MAAMA,GAAE,QAAQ,cAAc,GAAG,WAAWA,GAAE,OAAM,GAAI,WAAWA,GAAE,OAAM,EAAE,CAAE;EACnGA,GAAE,OAAO,EAAE,GAAG,MAAM,MAAMA,GAAE,QAAQ,cAAc,GAAG,WAAWA,GAAE,OAAM,GAAI,MAAM,YAAY,WAAWA,GAAE,OAAM,EAAE,CAAE;EACrHA,GAAE,OAAO,EAAE,GAAG,MAAM,MAAMA,GAAE,QAAQ,WAAW,GAAG,OAAO,gBAAgB,WAAW,gBAAe,CAAE;EACrGA,GAAE,OAAO,EAAE,GAAG,MAAM,MAAMA,GAAE,QAAQ,kBAAkB,GAAG,UAAU,eAAc,CAAE;EACnFA,GAAE,OAAO,EAAE,GAAG,MAAM,MAAMA,GAAE,QAAQ,mBAAmB,GAAG,UAAU,eAAc,CAAE;EACpFA,GAAE,OAAO,EAAE,GAAG,MAAM,MAAMA,GAAE,QAAQ,aAAa,GAAG,KAAK,iBAAgB,CAAE;EAC3EA,GAAE,OAAO,EAAE,GAAG,MAAM,MAAMA,GAAE,QAAQ,YAAY,GAAG,aAAaA,GAAE,OAAM,GAAI,cAAcA,GAAE,OAAM,GAAI,OAAOA,GAAE,OAAM,EAAE,CAAE;EACzHA,GAAE,OAAO,EAAE,GAAG,MAAM,MAAMA,GAAE,QAAQ,QAAQ,GAAG,OAAOA,GAAE,OAAM,GAAI,MAAMA,GAAE,OAAM,GAAI,OAAOA,GAAE,KAAK,CAAC,QAAQ,QAAQ,OAAO,CAAC,EAAC,CAAE;EAC9HA,GAAE,OAAO,EAAE,GAAG,MAAM,MAAMA,GAAE,QAAQ,gBAAgB,GAAG,WAAWA,GAAE,OAAM,GAAI,MAAMA,GAAE,OAAM,GAAI,QAAQA,GAAE,OAAM,EAAE,CAAE;EACpHA,GAAE,OAAO,EAAE,GAAG,MAAM,MAAMA,GAAE,QAAQ,gBAAgB,GAAG,WAAWA,GAAE,OAAM,EAAE,CAAE;CAC/E;AAkBM,IAAM,wBAAwBA,GAAE,mBAAmB,QAAQ;EAChEA,GAAE,OAAO;IACP,MAAMA,GAAE,QAAQ,OAAO;IACvB,QAAQA,GAAE,KAAK,CAAC,QAAQ,QAAQ,MAAM,OAAO,CAAC;IAC9C,GAAGA,GAAE,OAAM,EAAG,IAAI,CAAC,EAAE,IAAI,CAAC;IAC1B,GAAGA,GAAE,OAAM,EAAG,IAAI,CAAC,EAAE,IAAI,CAAC;IAC1B,QAAQA,GAAE,KAAK,CAAC,QAAQ,UAAU,OAAO,CAAC,EAAE,QAAQ,MAAM;IAC1D,YAAYA,GAAE,OAAM,EAAG,IAAG,EAAG,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,QAAQ,CAAC;;IAEpD,QAAQA,GAAE,OAAM,EAAG,QAAQ,CAAC;IAC5B,QAAQA,GAAE,OAAM,EAAG,QAAQ,CAAC;GAC7B;EACDA,GAAE,OAAO;IACP,MAAMA,GAAE,QAAQ,KAAK;IACrB,QAAQA,GAAE,KAAK,CAAC,QAAQ,IAAI,CAAC;;IAE7B,KAAKA,GAAE,OAAM,EAAG,IAAI,CAAC,EAAE,IAAI,EAAE;GAC9B;EACDA,GAAE,OAAO;IACP,MAAMA,GAAE,QAAQ,MAAM;;IAEtB,MAAMA,GAAE,OAAM,EAAG,IAAI,CAAC,EAAE,IAAI,IAAI;GACjC;CACF;AAIM,IAAM,8BAA8BA,GAAE,mBAAmB,QAAQ;EACtEA,GAAE,OAAO,EAAE,MAAMA,GAAE,QAAQ,OAAO,GAAG,OAAO,sBAAqB,CAAE;;;;;;;;;;EAUnEA,GAAE,OAAO,EAAE,MAAMA,GAAE,QAAQ,mBAAmB,EAAC,CAAE;CAClD;;;ACrFD,SAAS,KAAAC,UAAS;AAOX,IAAM,mBAAmBC,GAAE,OAAO;EACvC,MAAMA,GAAE,OAAM,EAAG,IAAI,CAAC,EAAE,IAAI,EAAE;EAC9B,OAAOA,GAAE,OAAM,EAAG,IAAI,GAAG,EAAE,SAAQ;EACnC,aAAaA,GAAE,OAAM,EAAG,IAAI,GAAI,EAAE,SAAQ;EAC1C,aAAaA,GAAE,OAAM,EAAG,IAAI,CAAC,EAAE,SAAQ;EACvC,WAAW,gBAAgB,SAAQ;CACpC;AAGM,IAAM,mBAAmB,iBAAiB,QAAO,EAAG,OAAO;EAChE,QAAQA,GAAE,QAAO,EAAG,SAAQ;EAC5B,QAAQA,GAAE,QAAO,EAAG,SAAQ;EAC5B,eAAeA,GAAE,QAAO,EAAG,SAAQ;CACpC;AAGM,IAAM,sBAAsBA,GAAE,OAAO;EAC1C,MAAMA,GAAE,KAAK,CAAC,MAAM,OAAO,CAAC;EAC5B,OAAOA,GAAE,OAAM,EAAG,SAAQ;EAC1B,cAAcA,GAAE,MAAMA,GAAE,OAAM,CAAE;CACjC;AAGM,IAAM,qBAAqBA,GAAE,OAAO;EACzC,WAAWA,GAAE,OAAM;EACnB,eAAeA,GAAE,MAAMA,GAAE,OAAM,CAAE,EAAE,SAAQ;EAC3C,WAAWA,GAAE,OAAM,EAAG,SAAQ,EAAG,SAAQ;;EAEzC,eAAeA,GAAE,MAAMA,GAAE,OAAM,CAAE,EAAE,SAAQ;EAC3C,iBAAiBA,GAAE,QAAO,EAAG,SAAQ;CACtC;AAGM,IAAM,0BAA0BA,GAAE,OAAO;EAC9C,UAAUA,GAAE,KAAK,CAAC,SAAS,MAAM,CAAC;EAClC,YAAYA,GACT,OAAO,EAAE,aAAaA,GAAE,OAAM,GAAI,cAAcA,GAAE,OAAM,EAAG,QAAQ,EAAE,GAAG,WAAWA,GAAE,OAAM,EAAG,QAAQ,EAAE,EAAC,CAAE,EAC3G,SAAQ;CACZ;AAGM,IAAM,oBAAoBA,GAAE,OAAO;EACxC,MAAMA,GAAE,KAAK,CAAC,WAAW,OAAO,CAAC;EACjC,aAAaA,GAAE,OAAM,EAAG,IAAI,CAAC;EAC7B,cAAcA,GAAE,OAAM,EAAG,QAAQ,EAAE;EACnC,WAAWA,GAAE,OAAM,EAAG,QAAQ,EAAE;CACjC;AAGM,IAAM,uBAAuBA,GAAE,OAAO;EAC3C,OAAOA,GAAE,OAAM;EACf,MAAMA,GAAE,OAAM,EAAG,IAAI,CAAC;EACtB,UAAUA,GAAE,OAAM,EAAG,IAAI,CAAC;EAC1B,UAAUA,GAAE,OAAM,EAAG,SAAQ;EAC7B,eAAeA,GAAE,OAAM,EAAG,IAAI,CAAC;EAC/B,SAASA,GAAE,QAAO,EAAG,SAAQ;CAC9B;AAGM,IAAM,qBAAqBA,GAAE,OAAO;EACzC,MAAMA,GAAE,OAAM,EAAG,IAAI,CAAC;EACtB,aAAaA,GAAE,OAAM,EAAG,QAAQ,EAAE;EAClC,QAAQA,GAAE,OAAM,EAAG,IAAI,CAAC;EACxB,QAAQA,GAAE,KAAK,CAAC,QAAQ,UAAU,UAAU,CAAC,EAAE,SAAQ;CACxD;AAOM,IAAM,yBAAyBA,GACnC,OAAO;EACN,MAAM,gBAAgB,MAAM;EAC5B,aAAaA,GAAE,OAAM,EAAG,QAAQ,EAAE;EAClC,QAAQ,sBAAsB,SAAQ;EACtC,SAASA,GAAE,OAAM,EAAG,SAAQ;EAC5B,SAASA,GAAE,QAAO,EAAG,SAAQ;EAC7B,QAAQA,GAAE,MAAMA,GAAE,OAAM,CAAE,EAAE,SAAQ;CACrC,EACA,OAAO,CAAC,MAAM,QAAQ,EAAE,MAAM,MAAM,QAAQ,EAAE,OAAO,GAAG,EAAE,SAAS,0CAAyC,CAAE;AAQ1G,IAAM,yBAAyBA,GAAE,OAAO;EAC7C,aAAaA,GAAE,OAAM,EAAG,SAAQ;EAChC,QAAQ,sBAAsB,SAAQ;EACtC,SAASA,GAAE,QAAO,EAAG,SAAQ;CAC9B;AAuCD,IAAM,iBAAiB;EACrB,UAAUA,GAAE,OAAM;EAClB,uBAAuBA,GAAE,OAAM,EAAG,IAAI,CAAC,EAAE,IAAI,CAAC;EAC9C,mBAAmBA,GAAE,QAAO;EAC5B,OAAOA,GAAE,KAAK,CAAC,UAAU,SAAS,MAAM,CAAC;EACzC,gBAAgBA,GAAE,KAAK,CAAC,OAAO,UAAU,OAAO,CAAC;EACjD,kBAAkBA,GAAE,OAAM;EAC1B,sBAAsBA,GAAE,QAAO;EAC/B,aAAaA,GAAE,KAAK,CAAC,gBAAgB,KAAK,CAAC;EAC3C,cAAcA,GAAE,KAAK,CAAC,QAAQ,WAAW,CAAC;;AAGrC,IAAM,iBAAiBA,GAAE,OAAO;EACrC,UAAU,eAAe,SAAS,QAAQ,KAAK;EAC/C,uBAAuB,eAAe,sBAAsB,QAAQ,CAAC;EACrE,mBAAmB,eAAe,kBAAkB,QAAQ,IAAI;EAChE,OAAO,eAAe,MAAM,QAAQ,QAAQ;EAC5C,gBAAgB,eAAe,eAAe,QAAQ,KAAK;EAC3D,kBAAkB,eAAe,iBAAiB,QAAQ,CAAC;EAC3D,sBAAsB,eAAe,qBAAqB,QAAQ,IAAI;EACtE,aAAa,eAAe,YAAY,QAAQ,cAAc;EAC9D,cAAc,eAAe,aAAa,QAAQ,MAAM;CACzD;AASM,IAAM,sBAAsBA,GAAE,OAAO,cAAc,EAAE,QAAO;AAG5D,IAAM,qBAAqBA,GAAE,OAAO;EACzC,MAAMA,GAAE,KAAK,CAAC,WAAW,QAAQ,WAAW,KAAK,CAAC;EAClD,IAAIA,GAAE,OAAM;EACZ,UAAUA,GAAE,OAAM,EAAG,SAAQ;EAC7B,OAAOA,GAAE,OAAM,EAAG,SAAQ;EAC1B,OAAOA,GAAE,OAAM;EACf,SAASA,GAAE,OAAM;EACjB,WAAWA,GAAE,OAAM;CACpB;",
   "names": ["z", "z", "z", "z"]
 }

package/dist/index.js

@@ -3,7 +3,7 @@ import { createRequire as __antbotCreateRequire } from 'node:module';
 const require = __antbotCreateRequire(import.meta.url);
 import {
   SettingsSchema
-} from "./chunk-G4IIENWF.js";
+} from "./chunk-SOIV5YOZ.js";
 
 // cli/src/index.ts
 import fs10 from "node:fs";

package/dist/server.js

@@ -18,7 +18,7 @@ import {
   SettingsSchema,
   UpdateBotRequest,
   UpdateConnectorRequest
-} from "./chunk-G4IIENWF.js";
+} from "./chunk-SOIV5YOZ.js";
 import {
   findWebDist,
   nodeLocateDeps,
@@ -964,12 +964,19 @@ var Store = class {
 };
 
 // daemon/src/util/bus.ts
+import { randomUUID } from "node:crypto";
 import { EventEmitter } from "node:events";
 var EventBus = class {
   emitter = new EventEmitter();
   seq = 0;
   ring = [];
   ringMax = 500;
+  /**
+   * This process's identity, sent in `hello`. seq restarts at 1 on every boot, so without a way
+   * to say "the numbering is new" a client that survived the restart discards every event it is
+   * sent — connected, and permanently blank.
+   */
+  epoch = randomUUID();
   constructor() {
     this.emitter.setMaxListeners(200);
   }
@@ -1100,15 +1107,18 @@ function extractPaths(text) {
   }
   return out;
 }
-function assessLocalReach(toolName, input, workspace) {
+function assessLocalReach(toolName, input, workspace, allowedRoots = []) {
   const o = input ?? {};
   const str = (k) => typeof o[k] === "string" ? o[k] : "";
   const ws = path3.resolve(workspace);
+  const roots = [ws, ...allowedRoots.map((r) => path3.resolve(r))];
   const insideWorkspace = (p) => {
     if (p.startsWith("~")) return false;
     const abs = path3.isAbsolute(p) ? path3.resolve(p) : path3.resolve(ws, p);
-    const rel = path3.relative(ws, abs);
-    return rel === "" || !rel.startsWith("..") && !path3.isAbsolute(rel);
+    return roots.some((root) => {
+      const rel = path3.relative(root, abs);
+      return rel === "" || !rel.startsWith("..") && !path3.isAbsolute(rel);
+    });
   };
   if (toolName === "Read" || toolName === "Write" || toolName === "Edit" || toolName === "NotebookEdit") {
     const p = str("file_path") || str("notebook_path");
@@ -1193,7 +1203,10 @@ var PermissionGateway = class {
     const { toolName, input, settings } = args;
     const rules = this.store.listRules(true);
     const decision = evaluateRules(rules, toolName, input);
-    const local = localDecision(settings.localExecution, assessLocalReach(toolName, input, args.workspace));
+    const local = localDecision(
+      settings.localExecution,
+      assessLocalReach(toolName, input, args.workspace, args.allowedRoots ?? [])
+    );
     if (local.action === "deny") {
       return { behavior: "deny", message: local.reason, via: "rule" };
     }
@@ -1692,7 +1705,7 @@ var BotManager = class {
     };
     this.queue.push(full);
     this.queue.sort((a, b2) => a.priority - b2.priority);
-    this.setState(full.botId, "queued");
+    if (!this.running.has(full.botId)) this.setState(full.botId, "queued");
     void this.drain();
     return full;
   }
@@ -1914,6 +1927,9 @@ Pick the one you need and install just it, e.g. ${args.source.replace(/^https?:\
         modelTier: bot.modelTier,
         systemPrompt,
         cwd: workspace,
+        // The attachments directory sits outside cwd, so the SDK would refuse to open a file the
+        // human just attached even after the gateway allowed it.
+        additionalDirectories: this.deps.readableRoots ?? [],
         settings,
         abortController: abort,
         mcpServers,
@@ -1934,6 +1950,7 @@ Pick the one you need and install just it, e.g. ${args.source.replace(/^https?:\
             settings,
             signal: abort.signal,
             workspace,
+            allowedRoots: this.deps.readableRoots ?? [],
             // Render the approval inline in the transcript so the human can act on it
             // where the work is happening, not only in a global queue.
             onPending: (approval) => {
@@ -2101,6 +2118,20 @@ function describeMcpStatus(status) {
       return status;
   }
 }
+function summarizeArgs(input) {
+  if (input === null || typeof input !== "object" || Array.isArray(input)) return "";
+  const parts = [];
+  for (const [k, v] of Object.entries(input)) {
+    if (v === void 0 || v === null || v === "") continue;
+    let s;
+    if (typeof v === "string") s = v;
+    else if (typeof v === "number" || typeof v === "boolean") s = String(v);
+    else if (Array.isArray(v)) s = `${v.length} item${v.length === 1 ? "" : "s"}`;
+    else s = "{\u2026}";
+    parts.push(`${k}: ${s.length > 60 ? `${s.slice(0, 60)}\u2026` : s}`);
+  }
+  return parts.join(", ");
+}
 function summarizeTool(name, input) {
   const o = input ?? {};
   const s = (k) => typeof o[k] === "string" ? o[k] : "";
@@ -2114,9 +2145,12 @@ function summarizeTool(name, input) {
   if (name.includes("remember")) return `memory: ${s("title")}`;
   if (name.startsWith("browser_") || name.includes("browser")) return [s("url"), s("selector"), s("text")].filter(Boolean).join(" ").slice(0, 160);
   const mcp = /^mcp__([^_]+(?:_[^_]+)*)__(.+)$/.exec(name);
-  if (mcp) return `${mcp[1]}: ${mcp[2]} ${JSON.stringify(input ?? {})}`.slice(0, 160);
-  const j = JSON.stringify(input ?? {});
-  return j.length > 160 ? `${j.slice(0, 160)}\u2026` : j;
+  if (mcp) {
+    const args2 = summarizeArgs(input);
+    return `${mcp[1]}: ${mcp[2]}${args2 ? ` ${args2}` : ""}`.slice(0, 160);
+  }
+  const args = summarizeArgs(input);
+  return args.length > 160 ? `${args.slice(0, 160)}\u2026` : args;
 }
 
 // daemon/src/bots/connectors.ts
@@ -3435,6 +3469,9 @@ async function createApp(opts = {}) {
     bus,
     gateway,
     workspace: cfg.paths.workspace,
+    // The human attached these files deliberately; reading one is not "reaching outside the
+    // workspace" in the sense the boundary exists to catch.
+    readableRoots: [cfg.paths.attachments],
     getSettings,
     skillPluginPath: () => app.skillPluginPath,
     installSkill: async (source, opts2) => {
@@ -4363,7 +4400,7 @@ async function startServer(opts = {}) {
         }
       };
       const unsubscribe = app.bus.subscribe(send);
-      send({ type: "hello", seq: app.bus.currentSeq, threadId: null, botId: null });
+      send({ type: "hello", seq: app.bus.currentSeq, epoch: app.bus.epoch, threadId: null, botId: null });
       socket.on("message", (raw) => {
         try {
           const msg = JSON.parse(raw.toString());