@nocobase/app-plugin-agents 1.0.0-beta.21 → 1.0.0-beta.23

package/CHANGELOG.md

@@ -1,5 +1,48 @@
 # @nocobase/app-plugin-agents
 
+## 1.0.0-beta.23
+
+### Patch Changes
+
+- 58531da: Support plain HTTP origins when creating session and upload identifiers or copying text. Provide shared browser UUID and clipboard helpers so draft, submission and invitation actions work without secure-context APIs.
+
+  Document capability checks and user-facing explanations for secure-context browser features, require HTTP-compatible UUID and copy actions, and return an explicit copy result for localized recovery UI.
+
+- Updated dependencies [58531da]
+  - @nocobase/app-client@4.0.0-beta.3
+  - @nocobase/app-cli@1.0.0-beta.27
+  - @nocobase/app-server@3.0.0-beta.3
+  - @nocobase/authorization@1.0.0-beta.15
+  - @nocobase/db@1.0.0-beta.22
+  - @nocobase/i18n@2.0.0-beta.1
+  - @nocobase/markdown-mermaid@0.1.0-beta.2
+  - @nocobase/service-provider@0.0.2-beta.2
+  - @nocobase/app-plugin-authentication@2.0.0-beta.13
+  - @nocobase/app-plugin-authorization@1.0.0-beta.31
+  - @nocobase/app-plugin-file@1.0.0-beta.26
+
+## 1.0.0-beta.22
+
+### Minor Changes
+
+- d490379: Prepare Native OnlineAgent document attachments in detached user-level model replay copies while preserving original messages, attachment authorization, public history and search text. Reuse the same preparation pipeline for realtime and background execution, history, approvals and message editing or regeneration.
+
+  Apply Provider forwarding defaults with exact service/model/Provider/protocol/base URL overrides, bounded file and text budgets, and an instance-owned TTL/LRU cache that reauthorizes and reads current source bytes before every reuse. Unsupported user inputs become honest parsing-limitation descriptions without hiding permission, validation, budget, cancellation or genuine extraction failures.
+
+  Support connection-pinned Kimi Files extraction for Moonshot documents by default and explicitly configured compatible services. Bound upload and content responses, attempt independent best-effort remote deletion, reuse remote results only within an execution, and keep credentials and remote identifiers out of messages. Preserve canonical tool evidence during approval and finalization recovery, and omit embedded DOCX images from extracted model text.
+
+### Patch Changes
+
+- d490379: Show safe, actionable, localized attachment preparation failures in live chat and saved history, including unconfigured image input, unreadable documents, extraction timeouts, and file or text limits. Keep Provider messages and document contents private, preserve cancellation and model capability checks, and use a generic localized explanation for historical failures without a saved reason.
+- d490379: Declare official DeepSeek Flash JPEG, PNG, GIF, and WebP capability in the shared model capability catalog, and derive native file routing from it regardless of service name. Remove the duplicated Examples profile while preserving exact model and endpoint admission, explicit deployment-policy overrides, local document extraction, and existing file limits.
+- d490379: Restore legacy PDF and image routing defaults for native agent providers while preserving DeepSeek behavior and exact model overrides. Moonshot now uploads supported documents to its selected Kimi Files service by default; an exact local profile disables remote extraction. Extract Ollama PDF text locally by default and describe explicit PDF-original overrides as unavailable when its SDK would silently omit them. Preserve authorization, budgets, cancellation and user-level document replay.
+- d490379: Keep native agent conversations usable when a user attaches an unsupported file type. Describe the filename, MIME type and parsing limitation in user-level model replay instead of failing the execution, including historical follow-up and unsupported image inputs. Preserve original attachments, authorization, input budgets and genuine parsing or Provider failures; update the Examples regression coverage without granting additional image capabilities.
+- d490379: Omit empty or whitespace-only system instructions from native agent model requests instead of sending an empty system message rejected by Moonshot/Kimi and other strict providers. Preserve nonempty instructions verbatim and keep extracted attachment content in user messages.
+- 4c98f67: Clarify personal and shared runtime usage, offer agent prompts and manual installation for macOS, Linux and Windows through WSL, and explain how to recover missing coding tools with the service PATH. New runtimes default to three concurrent runs. Expand installation prompts in full and require Windows agents to verify WSL Ubuntu before continuing.
+- 01e03b7: Keep runner agents visible according to their status, derive their model entry from their tool and model, and repair stale markers or missing model entries in existing installations.
+- Updated dependencies [d490379]
+  - @nocobase/document-extractor@0.1.0-beta.0
+
 ## 1.0.0-beta.21
 
 ### Minor Changes

package/README.md

@@ -1,6 +1,6 @@
 # @nocobase/app-plugin-agents
 
-Applications may restrict personal runner use for comment-origin work by supplying `EnqueueRequest.comment` only at their authenticated comment entry point and binding `SubjectBinding.commentOwnerKey` and `responsibleUserId`. Runs share their first comment run as `commentRootRunId`; independent events carry no comment fields. Unconfirmed external comment work remains queued for team runners. When no compatible team runner exists, a `personalRunner` run request releases the existing chain on confirmation instead of creating another run. The original requester can use the existing `runAsMe` endpoint from a pending or rejected personal runner request; rejection remains recorded. Claims, decisions and input merging enforce this boundary on the server without changing the runner protocol.
+Applications may restrict personal runner use for comment-origin work by supplying `EnqueueRequest.comment` only at their authenticated comment entry point and binding `SubjectBinding.commentOwnerKey` and `responsibleUserId`. Runs share their first comment run as `commentRootRunId`; independent events carry no comment fields. Unconfirmed external comment work remains queued for shared runners. When no compatible shared runner exists, a `personalRunner` run request releases the existing chain on confirmation instead of creating another run. The original requester can use the existing `runAsMe` endpoint from a pending or rejected personal runner request; rejection remains recorded. Claims, decisions and input merging enforce this boundary on the server without changing the runner protocol.
 
 Agents for NocoBase applications: the agents discovered from the runners people connect, their runs, and people's conversations with agents. Agents run on runners (each a runtime: a runner on a server, a VM or someone's own device), which this plugin registers, hands work to and serves the runner and CLI tarballs for; the wire protocol runners and the application's CLI speak is `@nocobase/agent-protocol`, and the runner is `@nocobase/agent-runner` (`nocobase-runner`).
 
@@ -16,22 +16,22 @@ The plugin knows no domain of its own beyond conversations: what agents work on
 
 Registering the same runner name and hostname again revokes every active prior registration and its keys for the token's owner, leaving other owners' runners untouched. Registration uses the existing transaction without a dedicated lock or additional table. Simultaneous registrations may leave multiple active records until the next registration cleans them up. Existing tasks continue through the usual sweep and retry rules.
 
-Applications forward the `notice` event of type `run_secrets_not_allowed` to the run's actor and owner: a personal runner left the run because some of its variables are for team runners only. Its subject is the run, its parameters are `runId`, `agentId` and `variables` (in words), and its key is stable per run. `notice.cleared` settles it once a runner takes the run.
+Applications forward the `notice` event of type `run_secrets_not_allowed` to the run's actor and owner: a personal runner left the run because some of its variables are for shared runners only. Its subject is the run, its parameters are `runId`, `agentId` and `variables` (in words), and its key is stable per run. `notice.cleared` settles it once a runner takes the run.
 
 Repository access providers that mint credentials in `prepare` implement the idempotent `discard(run, prepared)` hook to revoke them when the claim is skipped or rolled back. It runs outside the transaction and receives the same prepared value as `forRun`. The application owns code host credentials and their revocation API; providers without this hook cannot revoke externally issued credentials.
 
 - **Agents** (`agAgents`): one for each coding tool and model the runners report (`source` `runner`, its id `runnerAgentId(tool, model)`), and the application's own (`source` `system`). An agent has a name (the catalog's, or the model's id), what it is good at (`description`: the project manager hands it work by this; required to enable it), its `status` (`pending` until someone enables it, `enabled` or `disabled`), its tool and normalized model, one model entry (`modelEntries`: the tool, the model and the default reasoning effort, `medium` when the tool takes it), and when a runner last reported it (`lastReportedAt`, refreshed at most every ten minutes). Its instructions and business actions are the application's, the same for every discovered agent (`agents.setDefaults(provider)`, written to each that differs by `applyDefaults()`; actions marked `defaultOn` otherwise), and it keeps its skills, its variables and its tool policy (of which runners use only the idle timeout and the turn limit: they run agents with full access, see the agent-runner README); it may have as many runs at once as runners' slots allow. An agent no runner reported for 14 days (`AGENT_UNREPORTED_AFTER_MS`) is listed as unreported and left out of the roster until a runner reports it again. Changing an agent (`PATCH /api/agents/:agentId`, `agents.agents` manage) writes only what it is good at, its effort (one its tool takes, else 400 `EFFORT_UNSUPPORTED`) and whether it is enabled (400 `GOOD_AT_REQUIRED` without a description); an application's own agent is changed through the application (400 `AGENT_MANAGED`). Every change raises its `revision`: a patch names the revision it was made against (`expectedRevision`) and is refused with 409 `REVISION_CONFLICT` (`metadata.revision` the current one) when someone changed the agent since, and a patch that changes nothing raises nothing. Every change is kept in its history (`agAgentChanges`, `GET /api/agents/:agentId/history`, with `afterRevision` for what came after a revision): who, when, and the fields that changed with their values before and after, except its variables, which are named with whether they were added, changed or removed, never valued. Disabling an agent withdraws its queued runs at once and announces `agent.removed` (`reason` `disabled`); work for an agent that is not enabled is refused (`AGENT_NOT_ENABLED`). Nobody deletes an agent: the agents an earlier version kept were removed by the `202610240020_ag_runner_agents` migration, their rows kept with `deletedAt` for the names their runs, comments and conversations show (`GET /api/agents/agentNames` answers every agent's name, those included), their queued runs cancelled and their pending run requests withdrawn.
-- **Runners** (`agRunners`), shown as runtimes: registered with a one-time token (`POST /api/agents/runners/registrationTokens`, or `pnpm nocobase agents runner-token`). Anyone may add a personal runner (`ownerOnly`: it runs only work its owner started) and later share it with the team; adding a team runner needs `agents.runners` manage. A runner reports its system, its features, its coding tools with versions and whether each is signed in, and what its owner's local policy lets it take (`policy`); it authenticates with its key (`agRunnerCredentials`), sends heartbeats and long-polls for work. Which of its coding tools it is offered work for is chosen on the web (`enabledTools`, null for every tool), carried from "Add runtime" on the registration token (`agRegistrationTokens`). A runner speaking a protocol this application does not serve is kept connected as `upgrade_required`: it gets no work, has what it holds released, and its owner is told once per protocol through the `notice` event (`runner_upgrade_required`; `notice.cleared` once it no longer holds). Only its owner changes a runner (its name, slots, coding tools and trust), because it is their machine with their tools' sign-ins and credentials; a manager of runners changes only a runner whose owner can no longer act (none recorded, or disabled or deleted in the application's directory, `people.provide({ inactive })`). A manager of runners may still revoke anyone's runner in an emergency, and delete it once revoked: its owner is told (`runner_revoked`) and the application's `security` log records who did it. A runner whose owner can no longer act (`people.provide({ inactive })`) is refused with `RUNNER_OWNER_DISABLED`. A runner fits an agent's run only when its owner's local policy lets it take that agent's runs, on that subject, with those repositories; `availability` and the agents list count only such runners. Every heartbeat answer announces workspace reports (`workspaces`): a runner reports the working directories it keeps for this application (`POST /api/agents/runners/workspaces`, each with the last run that worked there and whether it holds unpushed work, with the free space on the disk holding them) and is told which of those runs belong to subjects whose work is over (`remove`) or goes on (`keep`), as each subject kind's `workspaces.settled` says; a kind without it never counts as over, and only the runner's own runs are answered for. The last report is kept on the runner (`agRunners.workspaceUsage`, `Runner.workspaceUsage`) with each directory's subject and what was decided, for the Runtimes page.
+- **Runners** (`agRunners`), shown as runtimes: registered with a one-time token (`POST /api/agents/runners/registrationTokens`, or `pnpm nocobase agents runner-token`). Anyone may add a personal runner (`ownerOnly`: it runs only work its owner started) and later share it with the team; adding a shared runner needs `agents.runners` manage. A runner reports its system, its features, its coding tools with versions and whether each is signed in, and what its owner's local policy lets it take (`policy`); it authenticates with its key (`agRunnerCredentials`), sends heartbeats and long-polls for work. Which of its coding tools it is offered work for is chosen on the web (`enabledTools`, null for every tool), carried from "Add runtime" on the registration token (`agRegistrationTokens`). A runner speaking a protocol this application does not serve is kept connected as `upgrade_required`: it gets no work, has what it holds released, and its owner is told once per protocol through the `notice` event (`runner_upgrade_required`; `notice.cleared` once it no longer holds). Only its owner changes a runner (its name, slots, coding tools and trust), because it is their machine with their tools' sign-ins and credentials; a manager of runners changes only a runner whose owner can no longer act (none recorded, or disabled or deleted in the application's directory, `people.provide({ inactive })`). A manager of runners may still revoke anyone's runner in an emergency, and delete it once revoked: its owner is told (`runner_revoked`) and the application's `security` log records who did it. A runner whose owner can no longer act (`people.provide({ inactive })`) is refused with `RUNNER_OWNER_DISABLED`. A runner fits an agent's run only when its owner's local policy lets it take that agent's runs, on that subject, with those repositories; `availability` and the agents list count only such runners. Every heartbeat answer announces workspace reports (`workspaces`): a runner reports the working directories it keeps for this application (`POST /api/agents/runners/workspaces`, each with the last run that worked there and whether it holds unpushed work, with the free space on the disk holding them) and is told which of those runs belong to subjects whose work is over (`remove`) or goes on (`keep`), as each subject kind's `workspaces.settled` says; a kind without it never counts as over, and only the runner's own runs are answered for. The last report is kept on the runner (`agRunners.workspaceUsage`, `Runner.workspaceUsage`) with each directory's subject and what was decided, for the Runtimes page.
 - **The claim**: one long-poll (`POST /api/agents/runners/claim?wait=true`) answers `jobs` and `runs` together, at most `free` items, from the runner's slots, which jobs and runs share (`slots`): jobs first. A heartbeat reconciles both, releasing what the server no longer thinks the runner holds and asking it to stop what was cancelled.
 - **Jobs** (`agJobs`, `agJobEvents`): only for the off-by-default runner build method (such as an application's `acme.builds.method: runner`): a `build` (check out a commit, run an administrator's command, upload its outputs), of kinds the application registers (`jobs.register(kind, { validate, prepare, onEvent, onDone })`, then `jobs.enqueue`, `get` and `watch`). A runner takes a job only when it reports `jobs.build`, someone turned on "Takes build jobs" (`acceptJobs`), it is shared or belongs to who started the job, and its policy lets it check out the job's repository. Jobs retry `runnerOffline`, `leaseExpired`, `startTimeout`, `checkoutFailed` and `policyRefused` while attempts remain, and open the stored variables they name through this plugin's variables at claim, audited as delivered.
 - **Distribution**: the application serves two products as standalone tarballs that bundle Node, one per platform, or as one universal tarball (`cli build --universal`) that runs on the machine's Node.js 24 or newer and is served to every platform without one of its own, answered with `universal: true` (`server/distribution`): its CLI (`agents.cli.name`, such as `acme`) and the runner, `nocobase-runner` (`RUNNER_PRODUCT`). `pnpm nocobase cli build` of `@nocobase/app-cli` packs the CLI the application's `package.json` declares under `nocobase.cli`, and `cli build --runner` the runner, each into a directory of its own, `storage/runners/dist/<channel>/<product>/`, with a `manifest.json` of every file's SHA-256 and size, so CI builds them as separate artifacts mounted into storage, or an application builds them into its own build output and points `agents.dist.dir` there, as NocoBase Studio does. The install script installs the CLI under `~/.local/share/<cli>`: by default the CLI alone, with a download token any signed-in person mints (`POST /api/agents/dist/downloadTokens`, `agDownloadTokens`: the CLI for one platform, three downloads within 30 minutes), as `curl -fsSL <server>/api/agents/dist/installScript | sh -s -- --token <token>`; "Add runtime" shows the same line with `--runner --server <server>` and a registration token, which also installs `nocobase-runner` under `~/.local/share/nocobase-runner`, runs `nocobase-runner register` and `nocobase-runner service install` (an application that serves no CLI still gets its runtime). A token of the other kind fails before anything is installed. A runner reports the product it runs as on registration and every heartbeat (`agRunners.product`), and the heartbeat answer carries an `upgrade` notice when the channel serves a newer version of that product for the runner's platform; a runner that reports none (one from before) is offered no update, and the Runtimes page says to install it again. A product the directory has no current version of may be named on npm instead (`agents.dist.npm`: its package and exact version, which a machine installs with the Node.js 24 or later it already has): the resolve route answers `{ kind: 'npm', product, version, package, channel }` to a caller that sends `accept=npm`, and a heartbeat answer carries `npmUpgrade` to a runner with the `npm` feature when it runs an older version. Everyone else is answered as before (404, no update), and a product the directory has is always served from it. The install script, `<cli> update` and the runner's self-update all ask with `accept=npm` (the runner declares `npm`) and install an npm answer with the machine's npm into the same layout as a tarball: `npm install --prefix <prefix>/versions/<version> --no-save --no-audit --no-fund --omit=optional <package>@<version>`, then a launcher at `versions/<version>/bin/<command>` that starts `node_modules/.bin/<command>` on `<prefix>/node` (`npmLauncherScript` of `@nocobase/app-cli-client/install`).
 
-- **Runs** (`agRuns`): one agent working on one subject, keyed by (agent, subject, thread) (`agentType` is `runner`; `online` only on runs earlier versions kept). New work joins the run already on it as the same person (`actorUserId`) while that run can still be told, else that person's queued one, else starts a new run: work woken by different people never shares a run, so it neither borrows another's identity nor waits for a runner that will not take it. Runs of one key are still claimed one at a time, whoever they work as. Queued runs are claimed by `priority` (lower first; 0 by default), then oldest first; a run given a `fireAt` is not claimed before that moment. Work merged into a queued run raises it to the more urgent priority and the earlier moment of the two. A claim hands a run to a runner that fits in one transaction: the agent's tool enabled, installed and signed in there with its model among those the runner reports for the tool and not marked unavailable there (`runsEntry` in `shared/runners.ts`; recorded on the run as `tool` and `model` and passed to the tool; a model the tool's account cannot use fails the run `modelUnavailable` and marks that tool and model unavailable on the runner, `Runner.unavailableModels`, until it reports the tool's models differently), the runner shared with the team or owned by the person who woke the agent, its features covering what the run needs (worked out from the payload: checkouts, directories, skills, secrets), a team runner when one of the variables the run gets is for team runners only (`teamRunnersOnly`), and a free slot within the agent's concurrency. The variables are checked and opened in the claim's transaction, so the runner receives what was checked; a personal runner left out for them notes on the run which variables asked for a team runner (`teamOnlyVariables`, cleared when the run is taken, requeued or given new input), and its wait is `secretsNotAllowed` with those variables. Before a run exists, `eligibility` (`runnersFor`, `canClaim`, `mayQueue`, `teamOnly`) answers by the same rules whether a runner would take an agent's work done as a person, with the scopes and features the caller names; `availability` and `GET /api/agents/available` use it for the caller. A working directory that is a directory on one runner pins the run to that runner, one run at a time per directory. The claim renders the brief (kept per run, `agRunBriefs`), mints a run token, and hands over the working directories, the merged variables, the skills and the CLI to install. Events, usage and branches are recorded as the runner reports them; completing requires every input to be handled. A failed attempt is tried again after 30 seconds (`agents.runs.retryBaseDelayMs`), doubling up to ten minutes, except when the runner went away or lost its lease, which retries at once. A runner that finds the subject's working directory held by another live run reports `workspaceBusy`: the run goes back to the queue, freeing its slot, and is tried again after 30 seconds, doubling up to two minutes; these waits do not count against the agent's attempts, and the run fails `workspaceBusy` only once it has waited six hours (`WORKSPACE_WAIT_LIMIT_MS`).
+- **Runs** (`agRuns`): one agent working on one subject, keyed by (agent, subject, thread) (`agentType` is `runner`; `online` only on runs earlier versions kept). New work joins the run already on it as the same person (`actorUserId`) while that run can still be told, else that person's queued one, else starts a new run: work woken by different people never shares a run, so it neither borrows another's identity nor waits for a runner that will not take it. Runs of one key are still claimed one at a time, whoever they work as. Queued runs are claimed by `priority` (lower first; 0 by default), then oldest first; a run given a `fireAt` is not claimed before that moment. Work merged into a queued run raises it to the more urgent priority and the earlier moment of the two. A claim hands a run to a runner that fits in one transaction: the agent's tool enabled, installed and signed in there with its model among those the runner reports for the tool and not marked unavailable there (`runsEntry` in `shared/runners.ts`; recorded on the run as `tool` and `model` and passed to the tool; a model the tool's account cannot use fails the run `modelUnavailable` and marks that tool and model unavailable on the runner, `Runner.unavailableModels`, until it reports the tool's models differently), the runner shared with all users or owned by the person who woke the agent, its features covering what the run needs (worked out from the payload: checkouts, directories, skills, secrets), a shared runner when one of the variables the run gets is for shared runners only (`teamRunnersOnly`), and a free slot within the agent's concurrency. The variables are checked and opened in the claim's transaction, so the runner receives what was checked; a personal runner left out for them notes on the run which variables asked for a shared runner (`teamOnlyVariables`, cleared when the run is taken, requeued or given new input), and its wait is `secretsNotAllowed` with those variables. Before a run exists, `eligibility` (`runnersFor`, `canClaim`, `mayQueue`, `teamOnly`) answers by the same rules whether a runner would take an agent's work done as a person, with the scopes and features the caller names; `availability` and `GET /api/agents/available` use it for the caller. A working directory that is a directory on one runner pins the run to that runner, one run at a time per directory. The claim renders the brief (kept per run, `agRunBriefs`), mints a run token, and hands over the working directories, the merged variables, the skills and the CLI to install. Events, usage and branches are recorded as the runner reports them; completing requires every input to be handled. A failed attempt is tried again after 30 seconds (`agents.runs.retryBaseDelayMs`), doubling up to ten minutes, except when the runner went away or lost its lease, which retries at once. A runner that finds the subject's working directory held by another live run reports `workspaceBusy`: the run goes back to the queue, freeing its slot, and is tried again after 30 seconds, doubling up to two minutes; these waits do not count against the agent's attempts, and the run fails `workspaceBusy` only once it has waited six hours (`WORKSPACE_WAIT_LIMIT_MS`).
 - **Run requests** (`agRunRequests`): work someone asked of an agent on a subject another person answers for, waiting for that person to confirm it (see "Work someone else causes" below).
 - **Workload** (`runs.workload({ subjectKind, limit? })`, `shared/runs.ts`): the open runs on one kind of subject for a board of work, without claiming anything. Held runs come with their runner, the newest input's trigger and their newest text, tool call, status or error (`lastActivity`); queued runs with their place in the claim order (among the runs claimable now, and among the agent's) and why they wait, by the claim's own rules in its order (`RUN_WAIT_REASONS`: the agent not enabled, `agentArchived`, delayed until a moment, no runner online, the agent's named runners offline, its tool not signed in anywhere, only other people's personal runners, missing features, only personal runners whose owner may not receive the run's variables, the same work already held, the agent's concurrency full, every fitting runner busy, preparation retrying, or next). A wait is a code and the values its words need (`params`), never text: the client words it with `formatRunWait(t, wait)` from `client/runs.ts`, in this plugin's namespace (`runWait.reasons.<reason>`), which an application may override in its locale file or replace with its own formatter. It also answers each agent's load (held, queued, its limit, whether a runner could take its work) and the runners' (online, holding work, slots and slots used). It reads a bounded number of tables, never one query per subject; the caller decides what of it a person may see.
 - **Redaction**: what runners report is stored redacted. The runner redacts first; the server redacts every run event (content, output, input and meta), summary and failure detail, and every job event and failure detail again before storing them, with the protocol's redactor (`createRedactor` of `@nocobase/agent-protocol`): the secrets the claim handed out (a run's variables and token, a job's opened variables, repository token and upload headers, remembered in memory for recent claims) and the common secret patterns, each replaced with `[REDACTED]` (`server/kernel/redaction.ts`). After a restart, or on another instance, the patterns and the runner's own redaction still apply.
 - **The sweep** (`server/runners/sweeper.ts`, the `RunnersSweep` schedule every 30 seconds, or `agents.runners.sweepIntervalMs`, on the application's jobs service, or an in-process timer without one) marks runners not heard from for 150 s offline, takes jobs back from silent runners and fails jobs far past their timeout, and takes runs back from runners that went away, lost their lease or never started, fails runs idle for twice their idle timeout, records unacknowledged cancellations, cancels queued runs of archived agents, and fails a queued run that waited longer than its subject allows (`queuedExpiryMs` on the subject's binding, counted from the run's last change or from its `fireAt`) as `queuedExpired`.
-- **Variables** (`agSecrets`): environment variables for the agent's process, every one a secret sealed with the application's secrets service (`secrets.keys`) and bound to its scope and name, set on an agent, a working directory (`workdir`) or a scope the application registers, merged for a run in the order the subject names its scopes < its working directories < the agent, delivered only to runners with the `secrets` feature: to whichever runner takes the run, a personal runner of anyone who may use the agent included, since sharing an agent shares the tokens it works with. A variable marked `teamRunnersOnly` (off by default; `PUT /api/agents/variables/...` with `teamRunnersOnly`, and without `value` to change only that) keeps runs and jobs that get it on team runners. Jobs check the exact variables referenced by their prepared spec, including repository credentials, before opening any value in the claim transaction; a personal runner skips such a job without counting a preparation failure, leaving it queued for a team runner and continuing to other jobs. Values are write-only; reading them back and every delivery are audited (`agSecretAudits`).
+- **Variables** (`agSecrets`): environment variables for the agent's process, every one a secret sealed with the application's secrets service (`secrets.keys`) and bound to its scope and name, set on an agent, a working directory (`workdir`) or a scope the application registers, merged for a run in the order the subject names its scopes < its working directories < the agent, delivered only to runners with the `secrets` feature: to whichever runner takes the run, a personal runner of anyone who may use the agent included, since sharing an agent shares the tokens it works with. A variable marked `teamRunnersOnly` (off by default; `PUT /api/agents/variables/...` with `teamRunnersOnly`, and without `value` to change only that) keeps runs and jobs that get it on shared runners. Jobs check the exact variables referenced by their prepared spec, including repository credentials, before opening any value in the claim transaction; a personal runner skips such a job without counting a preparation failure, leaving it queued for a shared runner and continuing to other jobs. Values are write-only; reading them back and every delivery are audited (`agSecretAudits`).
 - **Skills** (`agSkills`, `agSkillVersions`, `agSkillAttachments`): a library of skills in the open Agent Skills format (https://agentskills.io/specification): a directory of `SKILL.md` and supporting files, conventionally under `scripts/`, `references/` and `assets/`. Only the front matter of `SKILL.md` names and describes a skill: `name` (1–64 lower-case letters, digits and single hyphens) is its slug and directory, so a save that changes it renames the skill, and `description` (1–1024 characters) is required; `license`, `compatibility` (at most 500 characters), `metadata` (string values) and `allowed-tools` are checked when present, and other keys are kept. Every create, save, restore and import is checked against these rules in the browser as it is typed and on the server (`shared/skill-markdown.ts`), which answers 400 with each problem's `field` and `reason` in `metadata.problems` (`taken` for a name another skill has; `mismatch` for an archive whose folder is named otherwise). Files under `scripts/` or marked executable are scripts (`Skill.scripts`): runners may run them. Every save is a new version that runs get at once, with older versions to compare and restore. Skills are attached globally, or as defaults to a working directory or a registered scope. A skill's revision is its current version: a save or a restore names the version it was made against (`expectedRevision`) and is refused with 409 `REVISION_CONFLICT` when another save came first. A runner fetches a run's skills from `GET /api/agents/runners/runs/:runId/skills/:slug` and places them where the run's coding tool finds them.
 - **Conversations** (`agConversations`, `agConversationMessages`): owner-only chats through the OnlineAgent service, with native model execution or a callable Runner binding. Existing bindings are immutable. Historical unbound conversations retain readable history and owner-authorized Stop for unfinished runs, but cannot continue chatting through HTTP. Ordinary conversations default to visible; new background sessions are hidden from lists before pagination. The [OnlineAgent reference](skills/nocobase-app-plugin-agents/references/online-agent.md) documents execution, result observation, browser configuration, notification transactions and migration from removed start/fallback/restore endpoints and CLI commands.
 - **Chat defaults**: the system default chat agent (`agSettings`, `PATCH /api/agents/chatSettings` by who manages `agents.agents`, or the application), each person's default chat agent (`agChatPreferences`), and each agent's "confirm before changing data" (`confirmChanges`: `always` or only `larger` changes).
@@ -41,6 +41,62 @@ Repository access providers that mint credentials in `prepare` implement the ide
 
 Runner affinity uses the same ordered-model admission decision as actual claims, without loading the full waiting diagnostic. Queue traversal evaluates only candidates it reaches before a successful claim. Capacity comes from the existing batch, while resource metadata is cached by scope within the poll and loaded in batches across relevant machines; known agent scopes share the first metadata read. Preferred-model admission needs a compatible or unknown first choice, even when busy, so it does not read per-machine slot counts. The broader machine inventory is read at most once for this affinity pass. Full diagnostics remain available through the waiting projection. Application context assembly and policy providers may issue their own reads; visiting new subject scopes adds metadata batches, and returned-row budgets do not bound the database's internal scans.
 
+## Native document inputs
+
+Native chats prepare attachments after the original user message commits. Supported local documents are extracted through `@nocobase/document-extractor` into user-level model replay copies only; the original user message, search index and public history retain file references. Knowledge is not an Agents dependency, and File remains responsible for authorized byte access.
+
+When neither the configured system prompt nor generated execution instructions contain non-whitespace text, Native execution omits the SDK system option rather than sending an empty system message. Nonempty instructions retain their original content, and attachments remain user-level data. This avoids Moonshot/Kimi HTTP 400 errors without adding a placeholder system prompt or changing file routing.
+
+**Upgrade note:** Native file routing follows legacy Provider defaults unless an exact profile overrides them. OpenAI, Anthropic, Google and OpenAI-compatible services forward PDF originals and images; Alibaba forwards images and extracts document text locally; Moonshot forwards images and uploads supported documents to its selected service's Kimi Files API by default. Ollama forwards images and extracts PDF and other supported document text locally, without attempting PDF-original delivery first. An explicit profile requesting PDF-original forwarding is described to the model as unavailable instead of letting the current SDK silently drop the file. DeepSeek and Cohere retain local document extraction. DeepSeek image capability is declared centrally in `server/online/search/capabilities.ts`: only the official endpoint's exact `deepseek-flash` model forwards JPEG, PNG, GIF and WebP, regardless of the service name; other DeepSeek models/endpoints and Cohere receive no default image grant. Existing exact file-input profiles still take precedence, including explicit opt-outs. `profiles: []` removes overrides, not code-owned capabilities. These are forwarding policies, not evidence that every model accepts every MIME type. No failure automatically changes the model, service or extraction route.
+
+```yaml
+agents:
+  fileInputs:
+    profiles:
+      - modelService: company-chat
+        model: verified-vision-model
+        provider: openai-compatible
+        protocol: chat-completions
+        baseUrl: https://gateway.example.invalid/v1
+        nativeMediaTypes: [image/png, image/jpeg]
+        maxNativeFiles: 10 # Example verified Provider limit; omit for the global ceiling.
+        extraction: local
+```
+
+Protocols follow the existing SDK construction path: OpenAI `responses`, Anthropic `messages`, Google `generate-content`, DeepSeek/Alibaba/Moonshot/OpenAI-compatible `chat-completions`, Ollama `ollama-chat`, and Cohere `cohere-chat`. A profile does not switch the Provider protocol. Exact overrides must match the complete service/model/Provider/protocol/effective base URL identity; a stale profile fails instead of falling back to defaults. Native MIME values must be exact, except for the restricted `image/*` wildcard. An explicit `nativeMediaTypes: []` and `extraction: local` override disables native forwarding and remote extraction for that model. An empty `profiles` array removes overrides, not Provider defaults. OCR and arbitrary URL downloading are not provided. Provider references use an allowed native route or become an unavailable-attachment description in model replay; their original private representation remains unchanged.
+
+Unsupported user attachment formats, unconfigured native images, unsupported file references and an extractor's explicit `unsupported` result do not fail the conversation. Model replay replaces only the affected user file part with an untrusted-metadata description containing its filename, MIME type and controlled limitation, stating that no contents were parsed and asking the model to explain honestly and continue with readable inputs. Historical files use the same rule on follow-up, including after an earlier failed turn. Descriptions count toward the existing context budget, are not cached as extracted text, and are not persisted into original user messages, search indexes or public history. Authorized stored bytes are still reread and bounded on every turn; permission failures, invalid inline data, mismatched formats, budgets, cancellation, timeouts and actual parser or Provider failures retain their existing behavior.
+
+Local DOCX preparation explicitly omits embedded image data before applying the text budget. The model receives extracted text, not base64 image payloads; its document wrapper warns that images and visual layout may be omitted. Image-only DOCX files fail as unreadable instead of being reported as read. This performs no OCR and leaves Knowledge's default Markdown output unchanged.
+Local extraction caches only completed successful text in this NativeFileInputs instance: 30-minute non-sliding TTL, 128-entry LRU and 32 MiB of UTF-8 text. Every use still authorizes and reads the current bounded bytes, checking their digest before a cache hit; no in-flight work is shared between executions. Limits include historical files and cache hits: 20 MiB per actual file, 64 MiB of distinct source bytes, 100,000 Unicode characters per extracted document and 200,000 characters of wrapped document context. An execution admits at most 100 file inputs, including native references; a profile can lower the native count with `maxNativeFiles` (0–100). These ceilings do not infer any Provider's actual capabilities or token context limits. A private file-only background input retains its original file parts and projects to empty public text, without indexing or exposing its bytes.
+
+Missing permission, unreadable nonempty documents and budget failures end the accepted execution without sending another user message or dropping attachments. Stop forwards the execution signal and waits for file-stream cancellation, Worker termination or bounded remote cleanup. Direct `OnlineAgentService` composition can omit file inputs for text-only use; file-enabled hosts must supply the grouped file-input capability and its model binding.
+
+Controlled file preparation failures persist an allowlisted `fileInputReason` in the existing execution-status notice's `params`, with a fixed English fallback title. Chat renders the reason in the viewer's language in both live responses and history; raw parser/Provider messages, file contents and credentials never become public failure text. An unknown preparation exception uses generic safe guidance, Stop remains cancellation, and old `Interrupted` notices without a saved reason get a generic explanation rather than a reason inferred from today's model configuration.
+
+### Kimi extraction and exact overrides
+
+Selecting the Moonshot Provider enables Kimi Files document uploads by default, using the selected service's saved API key (not an environment-key fallback) and execution-bound endpoint. Native images and text-only turns do not initialize or call the Files API adapter. No model-name heuristic enables remote extraction on another Provider, and the adapter never selects a second service. OpenAI-compatible services still require an exact `extraction: kimi-file-extract` profile to grant uploads. For Moonshot, an exact `extraction: local` profile opts out; configure `nativeMediaTypes: ['image/*']` to keep images native while parsing documents locally. The profile below illustrates an exact remote override, not real Provider acceptance evidence:
+
+```yaml
+agents:
+  fileInputs:
+    profiles:
+      - modelService: company-kimi
+        model: kimi-k2.5
+        provider: moonshotai
+        protocol: chat-completions
+        baseUrl: https://api.moonshot.ai/v1
+        nativeMediaTypes: []
+        extraction: kimi-file-extract
+```
+
+An explicitly supported native file still goes directly to the model without an extra upload. Otherwise the authorized bytes go to `POST <base>/files` with multipart `purpose=file-extract`, followed by `GET <base>/files/:id/content`. Proxy prefixes and API roots are preserved; requests do not follow redirects. Only `text/plain` and JSON with a string `content` field are accepted. Upload metadata is limited to 64 KiB; content response bytes are bounded by the character budget (4 bytes per character for text or 12 for JSON escapes, plus 64 KiB of envelope allowance), then the decoded text is checked without truncation. File IDs must be bounded alphanumeric/underscore/hyphen tokens; unknown response contracts fail safely rather than being guessed.
+
+Upload and content share one five-minute deadline and the execution signal. Once an ID is known, success, failure and cancellation all attempt DELETE with the same pinned connection and a separate cleanup signal lasting at most five seconds. Stop and shutdown await that cleanup. Deletion failure produces a sanitized diagnostic without replacing successful extraction; cleanup is best-effort, not proof of removal. A lost upload response without a usable ID cannot be reliably cleaned and emits an uncertainty diagnostic.
+
+Remote text is reused only within the current execution, never in the cross-execution local cache. History and approval continuations reauthorize and re-extract from originals; finalization retries do not re-upload. Credentials, remote IDs and raw upstream failure bodies are not written into user messages or public history. Real Provider testing and external file upload require separate authorization; loopback fixtures do not verify a live gateway's capabilities.
+
 ## Chat integration documentation
 
 - [OnlineAgent service and business tools](skills/nocobase-app-plugin-agents/references/online-agent.md): trusted server configuration, Native/Runner sessions, public browser transport and lifecycle boundaries.
@@ -104,7 +160,7 @@ Every route lives under the plugin's namespace, `/api/agents`, and names its own
 | `/api/agents/cli/*`                                                                                             | Run token header, or the application's authentication             | The CLI's custom commands (`CLI_ROUTES.command`); the manifest is the application's `GET /api/cli/manifest`                                     |
 | everything else under `/api/agents`                                                                             | Session and authorization context                                 | Agents and brief previews, variables, skills, runs, the vocabulary, usage, prices, conversations, the model services and their models           |
 
-Scoped API keys reach only the routes whose every operation is a settings check (skills, model services, prices and usage); elsewhere they are refused with `SCOPED_KEY_FORBIDDEN`. The API checks four settings items, which the plugin lists under an Agent team subsection of the permission workspace: `agents.agents` (manage changes agents and their variables; read sees agents' variables, skills and every run, and every runner; anyone signed in reads the agents themselves, `GET /api/agents`, with `canEdit` for a manager), `agents.runners` (read every runner; manage revokes and deletes any runner, changes a runner whose owner can no longer act and adds team runners; anyone signed in adds personal runners and changes, revokes and deletes their own, and only the owner changes a runner), `agents.prices` (the model prices) and `agents.services` (the model services the application calls: read lists them, manage adds, edits, tests and deletes them and sets their keys; a scoped key may only read them). It also declares one business action with three levels (`BUSINESS_ACTIONS` and `RELATIONS` in `shared/access.ts`), registered as the `agents` resource type under an Agent team subsection of business, one action per level (`edit.related`, `edit.all`), whose level the application tells it through `agentsAccessToken` (`scopeOf(identity, key)`; unbound, every level is `none`): `agents.agents/edit` edits skills (saving, restoring a version), every one at `all` and at `related` the skills the caller created; agents are changed only by who manages them. Managing agents reaches every skill whatever the level; creating and deleting skills still need it. A skill answers `canEdit` for the caller. Anyone signed in reads which model services and models are offered (`GET /api/agents/models`, names only, chat models unless `?kind=embedding` or `rerank` asks for another kind; `shared/models.ts`), and anyone who reads agents may test one (`POST /api/agents/checkModel`). Anyone signed in sees, cancels and retries the runs they started or own, and reads the vocabulary (labels only). A working directory's or a registered scope's variables and default skills follow the scope's kind: it decides who reads and who changes them.
+Scoped API keys reach only the routes whose every operation is a settings check (skills, model services, prices and usage); elsewhere they are refused with `SCOPED_KEY_FORBIDDEN`. The API checks four settings items, which the plugin lists under an Agent management subsection of the permission workspace: `agents.agents` (manage changes agents and their variables; read sees agents' variables, skills and every run, and every runner; anyone signed in reads the agents themselves, `GET /api/agents`, with `canEdit` for a manager), `agents.runners` (read every runner; manage revokes and deletes any runner, changes a runner whose owner can no longer act and adds shared runners; anyone signed in adds personal runners and changes, revokes and deletes their own, and only the owner changes a runner), `agents.prices` (the model prices) and `agents.services` (the model services the application calls: read lists them, manage adds, edits, tests and deletes them and sets their keys; a scoped key may only read them). It also declares one business action with three levels (`BUSINESS_ACTIONS` and `RELATIONS` in `shared/access.ts`), registered as the `agents` resource type under an Agent management subsection of business, one action per level (`edit.related`, `edit.all`), whose level the application tells it through `agentsAccessToken` (`scopeOf(identity, key)`; unbound, every level is `none`): `agents.agents/edit` edits skills (saving, restoring a version), every one at `all` and at `related` the skills the caller created; agents are changed only by who manages them. Managing agents reaches every skill whatever the level; creating and deleting skills still need it. A skill answers `canEdit` for the caller. Anyone signed in reads which model services and models are offered (`GET /api/agents/models`, names only, chat models unless `?kind=embedding` or `rerank` asks for another kind; `shared/models.ts`), and anyone who reads agents may test one (`POST /api/agents/checkModel`). Anyone signed in sees, cancels and retries the runs they started or own, and reads the vocabulary (labels only). A working directory's or a registered scope's variables and default skills follow the scope's kind: it decides who reads and who changes them.
 
 Realtime announcements carry no content: `agents:runs:<runId>` when a run's status, transcript or input changes and `agents:runners` when a runner changes. A page that hears one fetches through the API.
 
@@ -173,7 +229,7 @@ Work somebody causes on a subject another person answers for runs only with that
 
 - The source is the responsible, or nobody answers for the subject: the work is queued as before, run as the responsible (or as `actorUserId`).
 - The source is someone else and `execution` is `auto` (the default): nothing is queued. A run request (`agRunRequests`) keeps the input as it was asked and waits for the responsible; `enqueue` answers `outcome: 'pending'` with its `requestId`.
-- `execution: 'mine'`: the work is queued at once as the source, on a runner they may use (their own or a team runner, never the responsible's own). With none online it is refused with `NO_RUNNER_AVAILABLE` instead of waiting unseen.
+- `execution: 'mine'`: the work is queued at once as the source, on a runner they may use (their own or a shared runner, never the responsible's own). With none online it is refused with `NO_RUNNER_AVAILABLE` instead of waiting unseen.
 - `causedByRunId`: the source is that run's, who confirmed it or else who it was requested by, so a chain somebody else started never runs as the responsible unconfirmed. Runs record it as `requestedByUserId`, and the confirmer as `confirmedByUserId`.
 
 Only the request's responsible confirms it (queued as them with the input as it was asked, its actor the asker, joining only a run acting as them while it takes input) or rejects it; not an administrator, a manager of agents or a run acting for them. Confirming checks again that they may still wake the agent. A subject with mutable responsibility should bind `SubjectBinding.responsibleUserId(conn, subjectId)`, which reads the current responsible inside the confirmation or rejection transaction; a changed or null responsible prevents the old responsible from acting even before `reassign` is called. Without that resolver the request uses its recorded responsible, so the application must call `reassign` with the subject's responsibility change. The asker withdraws it, or runs it as themselves. People do this over `GET /api/agents/runRequests` (`role=responsible&status=pending` is an inbox), `GET /api/agents/runRequests/{requestId}`, and `POST …/{requestId}/confirm`, `reject`, `withdraw` and `runAsMe`, by session or unscoped API key only. Concurrent settlement returns 409.
@@ -241,11 +297,11 @@ Model services are not configured here: they are added on the application's page
 
 ## Web UI
 
-The plugin registers no routes of its own: an application mounts its pages and joins them to the pages of the runner agents do. The assembling application puts them under "Agent team" in its sidebar.
+The plugin registers no routes of its own: an application mounts its pages and joins them to the pages of the runner agents do. The assembling application puts them under "Agent management" in its sidebar.
 
 - `@nocobase/app-plugin-agents/client/routes` exports `agentsRoute` (`/agents`), `runtimesRoute` (`/runtimes`, with the `connect` dialog), `skillsRoute` (`/skills`, with `new` and `:skillId`) and `usageRoute` (`/usage`: what runs used and cost over a date range, filtered by group, agent and person and summed by one of the groupings (`?groupBy=`, agent by default), with a daily chart of tokens or cost above the table, stacked by the top five agents or models when grouped by those (the usage route's `series`), its group and subject named and linked by the vocabulary's `groupTitle`, `path` and `groupPath`; for who reads `agents.prices` a "Set prices" header button opens the prices sheet, `?prices=1`: models by service and model, coding tools by the models their runs report, each tool with its subscription switch and price rules, changed by who manages it; the note on missing prices links to it). Each page renders its own heading, and stands behind a page grant of the same id as its route name (`agents`, `runtimes`, `skills`, `usage`, exported as `PAGES` from `shared/access`); a page grant only opens the page, and what it shows is decided by the admin API on the settings items. It also exports `modelsRoute` (`/models`), which stands behind `agents.services` read instead: the model services (a page header with "Add service", then a table with one row per service: its name and host, provider type, status and a menu to edit it, turn it on or off or delete it; "Add service" and clicking a row open one dialog with a single form saved at once: provider type when adding, name, base URL, the write-only key as a `SecretInput` (`client/components/secret-input.tsx`: a password field whose empty value keeps the saved key), an OpenCode base URL's note on which provider type serves which of its model families (its session header is sent automatically), connection test, models fetched from the provider or added by id and checked, each with its kind, changeable before and after it is checked, and a Test that checks it as that kind, and an on/off switch), changeable by who manages `agents.services`.
-  - Runtimes (on `/api/agents/runners`): one overview row per runtime — its name with its system, its state with the slots in use ("Busy 1/1", "Offline · 3 hours ago"), its coding tools by sign-in, personal or team, its runner version (marked "Upgradable" when a newer version of the product it runs as is served, with `nocobase-runner update`, or `<cli> runner update` for a CLI that carries the runner; the runner also updates itself) and when it was last seen — with a "…" menu (Edit, then revoke or delete). A row opens the runtime's sheet: General (name, concurrent runs, personal or team after a warning, and "Allow build jobs" only when the application gives runners jobs, as an application's off-by-default runner build method does), Tools (a switch per supported tool with its detection state, version, sign-in and, when the API sent it, its path as small text), Local policy (read only: what its owner's policy on the machine lets it take) and Recent runs (`GET /agents/runners/:runnerId/runs`). Only its owner changes it (the managers of runners only a runner whose owner can no longer act); a manager of runners sees someone else's read only, with revoke or delete as the only menu items. Its owner, the managers of runners and anyone who may use an agent get its host name and its tools' paths from the API, everyone else neither. "Add runtime" asks who it works for (team only for managers of runners), which coding tools it detects and may run (Codex and Claude Code by default) and its max concurrent runs (4 by default, carried by the online registration token), then shows the one-line install and the `nocobase-runner register` command with a one-time token (copy buttons, expiry), and waits until the runtime connects, then shows the coding tools it reported.
-  - Agents (`client/pages/agents`, on `GET /api/agents`): one row per agent discovered from runners, filtered by All, Enabled, To enable and No runner: its name with its tool and model, what it is good at, where it can run now (the team and personal runners online with it, the caller's own counted, with a few of their names; "personal runners only", or when a runner last reported it), its default reasoning effort and its state. For who manages `agents.agents`, a pending agent offers "Fill in and enable" and the others "Edit": one dialog (`agent-dialog.tsx`) with what it is good at (started from the catalog's suggestion in the viewer's language), the effort among those its tool takes, and, when editing, whether it is enabled, saved against the revision it shows. Everyone else reads. Under the table, how to add an agent: connect a runner whose tool has the model. An application that keeps agents of its own composes `RunnerAgentsSection` (from `client/kit`) into its own page instead.
+  - Runtimes (on `/api/agents/runners`): one overview row per runtime — its name with its system, its state with the slots in use ("Busy 1/1", "Offline · 3 hours ago"), its coding tools by sign-in, personal or shared, its runner version (marked "Upgradable" when a newer version of the product it runs as is served, with `nocobase-runner update`, or `<cli> runner update` for a CLI that carries the runner; the runner also updates itself) and when it was last seen — with a "…" menu (Edit, then revoke or delete). A row opens the runtime's sheet: General (name, concurrent runs, personal or shared after a warning, and "Allow build jobs" only when the application gives runners jobs, as an application's off-by-default runner build method does), Tools (a switch per supported tool with its detection state, version, sign-in and, when the API sent it, its path as small text), Local policy (read only: what its owner's policy on the machine lets it take) and Recent runs (`GET /agents/runners/:runnerId/runs`). Only its owner changes it (the managers of runners only a runner whose owner can no longer act); a manager of runners sees someone else's read only, with revoke or delete as the only menu items. Its owner, the managers of runners and anyone who may use an agent get its host name and its tools' paths from the API, everyone else neither. "Add runtime" asks for its usage scope (shared only for managers of runners), which coding tools it detects and may run (Codex and Claude Code by default) and its max concurrent runs (3 by default, carried by the online registration token), then offers Prompt and Manual installation for macOS, Linux and Windows through WSL Ubuntu, using the same one-time registration command (copy buttons, expiry), and waits until the runtime connects, then shows the coding tools it reported.
+  - Agents (`client/pages/agents`, on `GET /api/agents`): one row per agent discovered from runners, filtered by All, Enabled, To enable and No runner: its name with its tool and model, what it is good at, where it can run now (the shared and personal runners online with it, the caller's own counted, with a few of their names; "personal runners only", or when a runner last reported it), its default reasoning effort and its state. For who manages `agents.agents`, a pending agent offers "Fill in and enable" and the others "Edit": one dialog (`agent-dialog.tsx`) with what it is good at (started from the catalog's suggestion in the viewer's language), the effort among those its tool takes, and, when editing, whether it is enabled, saved against the revision it shows. Everyone else reads. Under the table, how to add an agent: connect a runner whose tool has the model. An application that keeps agents of its own composes `RunnerAgentsSection` (from `client/kit`) into its own page instead.
   - Skills: the library (each skill's name, description, compatibility and whether it holds scripts), and a skill as a directory: its files in a tree beside the selected one (`client/pages/skills/workbench/`), SKILL.md rendered, other text shown, images and PDFs previewed. Editing uses the same workbench: files and folders are created (in a folder chosen from the skill's and the conventional `scripts/`, `references/`, `assets/`), uploaded (also by dropping files onto a folder), renamed and deleted from the tree, never by typing a path; SKILL.md and other Markdown are written beside their preview (in tabs on a narrow pane), with the front matter's problems listed above the source as it is typed. A new skill (`/skills/new`, a covering page) starts from a template of front matter and suggested sections. Versions can be compared with the current one and restored, and the page shows where the skill is attached. When someone saved a version while the editor was open, the draft stays and a banner offers to load the latest version. A scope's default skills list the scripts of the chosen skills, which online agents do not run (`SkillScriptsNotice`).
   - The new skill and variable dialogs ask "Discard unsaved changes?" before closing with input in them (NP-200), through `@nocobase/app-client`'s unsaved-changes guard.
 - `@nocobase/app-plugin-agents/client/kit` exports `RunnerAgentsSection` (the Agent page's list, for an application's own page), `VariablesSection` and `DefaultSkillsSection` for a scope's settings on the application's pages (`scope` `workdir` or a registered key, with an optional `description`), `useRunnerOptions` for picking the runner a directory is on (with how many runners are `online`), and `useAgentOptions` for picking an agent.
@@ -303,14 +359,18 @@ The supported tool identities are the native adapter registry plus the shared AC
 
 `enabledTools` is an explicit server selection. New tokens default to Codex and Claude Code; the install command carries only the registration token. Registration sends no tool inspection, receives the selection, and caches it for the connection. The daemon fetches the latest selection before inspecting after a restart, then detects only selected tools. Existing null selections are migrated to the original four native tools; existing explicit lists, including empty lists, stay intact. API null input is normalized to those four tools, never to future catalog additions. No local tool-selection command or runner-authenticated settings route is provided.
 
-An owner changes their own tools. A manager of `agents.runners` may change a team runtime's tools or request detection, without gaining access to its other settings. Personal tools remain owner-only. Disabled tools stop receiving work immediately; an active run finishes normally. Newly selected tools wait for a fresh report. The runtime page distinguishes waiting, not installed, login required, ready and detection failed, and offers Detect again for an online runtime. Quota data an ACP agent does not supply is shown as Not provided.
+An owner changes their own tools. A manager of `agents.runners` may change a shared runtime's tools or request detection, without gaining access to its other settings. Personal tools remain owner-only. Disabled tools stop receiving work immediately; an active run finishes normally. Newly selected tools wait for a fresh report. The runtime page distinguishes waiting, not installed, login required, ready and detection failed, and offers Detect again for an online runtime. Quota data an ACP agent does not supply is shown as Not provided.
 
 Protocol 13 adds catalog identities and selection delivery. Upgrade the server before the runner. Older runners remain usable for native tools and retain their previous detection behavior until upgraded; the server filters their reports by the explicit selection. A protocol-13 runner stays connected without claiming work on an older server's compatibility refusal. ACP agents without model listing generate a single agent named after the tool with a null model; execution omits the model. Explicit unavailable models fail instead of falling back. ACP model identifiers retain their spelling and release suffixes.
 
 Heartbeats never start a tool process. Background checks observe program paths, resolved targets, sizes and modification times every five minutes, and re-probe only changed programs. Startup, selection/environment changes, explicit detection and a real authentication failure also trigger inspection. No periodic ACP handshake is scheduled. At most two tools are inspected concurrently, with a thirty-second deadline and bounded process cleanup; detection sends no prompt and cancels permission requests. Manual/authentication refresh signals are best effort in process memory; a restart always fetches settings and inspects again. Session resume/load, prompt-boundary input, cancellation and the runner's prepared environment, git credential broker, CLI wrappers and hooks use the existing worker lifecycle.
 
+### Runtime usage scope and installation
+
+Personal runtimes execute only their owner’s tasks; shared runtimes execute any user’s tasks and receive their variables and secrets. Run either scope in a VM or isolated environment: agents have full access and the runner is not a sandbox. The wire values stay `ownerOnly` (personal) and `team` (shared). Installation prompts cover Node.js 24, coding-tool sign-in, service PATH, proxies, npm global permissions and avoiding snap tools. For Windows, the prompt first asks the agent to verify it is running inside WSL Ubuntu. Otherwise it must stop and ask the user to run `wsl --install` in PowerShell, restart Windows, then open the agent inside WSL Ubuntu and run the prompt again. Only then may it continue, with Node.js and coding tools installed inside WSL; enable mirrored networking if WSL cannot reach the internet. Finish with `nocobase-runner status`. If no coding tools are found, use a terminal where `which codex` / `which claude` works to rerun `nocobase-runner service install` and restart the service, or rerun `nocobase-runner start`, so the runner gets the correct PATH.
+
 ### Effective runner slots
 
 Capacity belongs to each application independently. Heartbeat replies include the complete capacity configuration; updated runners apply it without restarting and send one confirmation heartbeat when it changes. Their load report identifies the source and actual total and tool limits. The existing load JSON stores these values, and capacity changes emit runner.changed through the existing refresh mechanism; no schema migration is needed. Normal heartbeats and claims add no database operations, locks or transactions. A configuration change adds one confirmation heartbeat, with the same database cost as a normal heartbeat.
 
-The runtime status cell displays reported capacity, a pending-sync notice when online settings differ, and unknown synchronization support for older runners. Offline runtimes display the last report time. Editing continues to change online configuration. New registrations default to four slots; legacy clients cannot override a token's online settings through registration. Applications with custom runner projections must forward reportedSlots, capacitySource, capacityReportedAt and toolLoad; installed UI component copies need an explicit merge. Update the application server before relying on dynamic slots; upgraded runners connected to an older server temporarily retain their legacy local allowance.
+The runtime status cell displays reported capacity, a pending-sync notice when online settings differ, and unknown synchronization support for older runners. Offline runtimes display the last report time. Editing continues to change online configuration. New registrations default to three slots; legacy clients cannot override a token's online settings through registration. Applications with custom runner projections must forward reportedSlots, capacitySource, capacityReportedAt and toolLoad; installed UI component copies need an explicit merge. Update the application server before relying on dynamic slots; upgraded runners connected to an older server temporarily retain their legacy local allowance.

package/dist/cli/runner-token.js

@@ -7,7 +7,7 @@ export default class RunnerToken extends AppCommand {
         trust: Flags.string({
             default: 'ownerOnly',
             options: ['team', 'ownerOnly'],
-            description: 'team runs anyone’s work; ownerOnly runs only work the owner started.',
+            description: 'Usage scope: team is shared (runs any user’s tasks with their variables and secrets); ownerOnly is personal (only its owner’s tasks).',
         }),
         owner: Flags.string({
             description: 'The user id that owns the runner (required for ownerOnly).',

package/dist/cli/runner-token.js.map

@@ -1 +1 @@
-{"version":3,"file":"runner-token.js","sourceRoot":"","sources":["../../cli/runner-token.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAkB,MAAM,0BAA0B,CAAC;AACvE,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAYpC,MAAM,CAAC,OAAO,OAAO,WAAY,SAAQ,UAAU;IACjD,MAAM,CAAU,OAAO,GACrB,yEAAyE,CAAC;IAC5E,MAAM,CAAU,KAAK,GAIjB;QACF,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC;YAClB,OAAO,EAAE,WAAW;YACpB,OAAO,EAAE,CAAC,MAAM,EAAE,WAAW,CAAC;YAC9B,WAAW,EACT,sEAAsE;SACzE,CAAC;QACF,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC;YAClB,WAAW,EAAE,4DAA4D;SAC1E,CAAC;QACF,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC;YAClB,WAAW,EAAE,yDAAyD,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,6EAA6E;SAC1K,CAAC;KACH,CAAC;IAEK,KAAK,CAAC,GAAG;QACd,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAChD,IAAI,KAAK,CAAC,KAAK,KAAK,WAAW,IAAI,CAAC,KAAK,CAAC,KAAK;YAC7C,IAAI,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAC7D,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK;YACvB,EAAE,KAAK,CAAC,GAAG,CAAC;aACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;aAC1B,MAAM,CAAC,OAAO,CAAC,CAAC;QACnB,MAAM,OAAO,GAAG,KAAK,EAAE,MAAM,CAC3B,CAAC,IAAI,EAAE,EAAE,CAAC,CAAE,WAAiC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAC7D,CAAC;QACF,IAAI,OAAO,EAAE,MAAM;YACjB,IAAI,CAAC,KAAK,CACR,wBAAwB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACrF,CAAC;QACJ,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAC7B,IAAI,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAC;QACxD,yGAAyG;QACzG,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;QAC5D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;YACnD,MAAM,GAAG,CAAC,iBAAiB,EAAE,CAAC;YAC9B,OAAO,GAAG,CAAC,SAAS;iBACjB,OAAO,CAAC,WAAW,CAAC;iBACpB,OAAO,CAAC,uBAAuB,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,EAAE;gBACpD,KAAK,EAAE,KAAK,CAAC,KAA6B;gBAC1C,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAoB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACzD,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACxB,OAAO;YACL,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,SAAS,EAAE,OAAO,CAAC,SAAS;SAC7B,CAAC;IACJ,CAAC"}
+{"version":3,"file":"runner-token.js","sourceRoot":"","sources":["../../cli/runner-token.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAkB,MAAM,0BAA0B,CAAC;AACvE,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/C,OAAO,EAAE,KAAK,EAAE,MAAM,aAAa,CAAC;AAYpC,MAAM,CAAC,OAAO,OAAO,WAAY,SAAQ,UAAU;IACjD,MAAM,CAAU,OAAO,GACrB,yEAAyE,CAAC;IAC5E,MAAM,CAAU,KAAK,GAIjB;QACF,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC;YAClB,OAAO,EAAE,WAAW;YACpB,OAAO,EAAE,CAAC,MAAM,EAAE,WAAW,CAAC;YAC9B,WAAW,EACT,uIAAuI;SAC1I,CAAC;QACF,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC;YAClB,WAAW,EAAE,4DAA4D;SAC1E,CAAC;QACF,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC;YAClB,WAAW,EAAE,yDAAyD,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,6EAA6E;SAC1K,CAAC;KACH,CAAC;IAEK,KAAK,CAAC,GAAG;QACd,MAAM,EAAE,KAAK,EAAE,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC;QAChD,IAAI,KAAK,CAAC,KAAK,KAAK,WAAW,IAAI,CAAC,KAAK,CAAC,KAAK;YAC7C,IAAI,CAAC,KAAK,CAAC,8CAA8C,CAAC,CAAC;QAC7D,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK;YACvB,EAAE,KAAK,CAAC,GAAG,CAAC;aACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;aAC1B,MAAM,CAAC,OAAO,CAAC,CAAC;QACnB,MAAM,OAAO,GAAG,KAAK,EAAE,MAAM,CAC3B,CAAC,IAAI,EAAE,EAAE,CAAC,CAAE,WAAiC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAC7D,CAAC;QACF,IAAI,OAAO,EAAE,MAAM;YACjB,IAAI,CAAC,KAAK,CACR,wBAAwB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACrF,CAAC;QACJ,IAAI,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAC7B,IAAI,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAC;QACxD,yGAAyG;QACzG,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;QAC5D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;YACnD,MAAM,GAAG,CAAC,iBAAiB,EAAE,CAAC;YAC9B,OAAO,GAAG,CAAC,SAAS;iBACjB,OAAO,CAAC,WAAW,CAAC;iBACpB,OAAO,CAAC,uBAAuB,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,EAAE;gBACpD,KAAK,EAAE,KAAK,CAAC,KAA6B;gBAC1C,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAoB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACzD,CAAC,CAAC;QACP,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACxB,OAAO;YACL,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,YAAY,EAAE,OAAO,CAAC,YAAY;YAClC,SAAS,EAAE,OAAO,CAAC,SAAS;SAC7B,CAAC;IACJ,CAAC"}

package/dist/client/chat/client-id.d.ts

@@ -1,3 +1,2 @@
-/** UUID v4 identifiers also work on LAN HTTP origins, where randomUUID is unavailable. */
-export declare function createClientId(): string;
+export { createUuid as createClientId } from '@nocobase/app-client';
 //# sourceMappingURL=client-id.d.ts.map

package/dist/client/chat/client-id.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client-id.d.ts","sourceRoot":"","sources":["../../../client/chat/client-id.ts"],"names":[],"mappings":"AAAA,0FAA0F;AAC1F,wBAAgB,cAAc,IAAI,MAAM,CAcvC"}
+{"version":3,"file":"client-id.d.ts","sourceRoot":"","sources":["../../../client/chat/client-id.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,IAAI,cAAc,EAAE,MAAM,sBAAsB,CAAC"}

package/dist/client/chat/client-id.js

@@ -1,17 +1,2 @@
-/** UUID v4 identifiers also work on LAN HTTP origins, where randomUUID is unavailable. */
-export function createClientId() {
-    const bytes = crypto.getRandomValues(new Uint8Array(16));
-    bytes[6] = (bytes[6] & 0x0f) | 0x40;
-    bytes[8] = (bytes[8] & 0x3f) | 0x80;
-    const hex = [...bytes]
-        .map((byte) => byte.toString(16).padStart(2, '0'))
-        .join('');
-    return [
-        hex.slice(0, 8),
-        hex.slice(8, 12),
-        hex.slice(12, 16),
-        hex.slice(16, 20),
-        hex.slice(20),
-    ].join('-');
-}
+export { createUuid as createClientId } from '@nocobase/app-client';
 //# sourceMappingURL=client-id.js.map

package/dist/client/chat/client-id.js.map

@@ -1 +1 @@
-{"version":3,"file":"client-id.js","sourceRoot":"","sources":["../../../client/chat/client-id.ts"],"names":[],"mappings":"AAAA,0FAA0F;AAC1F,MAAM,UAAU,cAAc;IAC5B,MAAM,KAAK,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;IACzD,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IACpC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC;IACpC,MAAM,GAAG,GAAG,CAAC,GAAG,KAAK,CAAC;SACnB,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;SACjD,IAAI,CAAC,EAAE,CAAC,CAAC;IACZ,OAAO;QACL,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;QACf,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;QAChB,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC;QACjB,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC;QACjB,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;KACd,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACd,CAAC"}
+{"version":3,"file":"client-id.js","sourceRoot":"","sources":["../../../client/chat/client-id.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,IAAI,cAAc,EAAE,MAAM,sBAAsB,CAAC"}

package/dist/client/chat/message-model.d.ts

@@ -1,4 +1,3 @@
-/** UIMessage reconciliation at the durable-history boundary. SDK Chat owns the active messages. */
 import type { ConsultationIdentity } from './consultation-identity.js';
 import type { RunEvent } from '@nocobase/agent-protocol';
 import type { ChatAgent, ConversationNotice, MessageAttachment, PageContext } from '../../shared/conversations.js';

package/dist/client/chat/message-model.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"message-model.d.ts","sourceRoot":"","sources":["../../../client/chat/message-model.ts"],"names":[],"mappings":"AAAA,mGAAmG;AACnG,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AACvE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,KAAK,EACV,SAAS,EACT,kBAAkB,EAClB,iBAAiB,EACjB,WAAW,EACZ,MAAM,+BAA+B,CAAC;AACvC,OAAO,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAG5E,gGAAgG;AAChG,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,WAAW,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,iBAAiB,EAAE,CAAC;IACpD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAC;CACnD;AACD,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,KAAK,EAAE,SAAS,YAAY,EAAE,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AACD,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,KAAK,EAAE,SAAS,YAAY,EAAE,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE,SAAS,cAAc,EAAE,CAAC;IAC5C,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;CAC1B;AACD,eAAO,MAAM,cAAc,EAAE,aAO5B,CAAC;AACF,MAAM,MAAM,cAAc,GACtB;IACE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAChC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAA;CAAE,GAC9D;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAA;CAAE,GAC9D;IACE,QAAQ,CAAC,IAAI,EAAE,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC;AAE/B,+GAA+G;AAC/G,wBAAgB,eAAe,CAC7B,OAAO,EAAE,SAAS,YAAY,EAAE,EAChC,KAAK,EAAE,SAAS,YAAY,EAAE,EAC9B,QAAQ,CAAC,EAAE,MAAM,GAChB,YAAY,EAAE,CA4ChB;AACD,wBAAgB,eAAe,CAC7B,KAAK,EAAE,aAAa,EACpB,MAAM,EAAE,cAAc,GACrB,aAAa,CAwEf;AACD,wBAAgB,aAAa,CAAC,KAAK,EAAE,aAAa,GAAG,MAAM,CAK1D;AACD,wBAAgB,WAAW,CAAC,KAAK,EAAE,aAAa,GAAG,MAAM,CAExD;AAED,8FAA8F;AAC9F,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;IAC/B,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;CACxB;AACD,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,SAAS,YAAY,EAAE,GAChC,kBAAkB,EAAE,CA2DtB;AAKD,MAAM,MAAM,QAAQ,GAChB;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;CAAE;AAC/B,0DAA0D;GACxD;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE;AACxD,kEAAkE;GAChE;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAE3D,MAAM,WAAW,aAAa;IAC5B,iGAAiG;IACjG,QAAQ,CAAC,KAAK,EAAE,SAAS,QAAQ,EAAE,CAAC;IACpC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;CACzB;AAkCD;;;GAGG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,SAAS,QAAQ,EAAE,GAAG,aAAa,CAiBxE;AAMD,MAAM,MAAM,SAAS,GAAG,CACtB,GAAG,EAAE,MAAM,EACX,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC9B,MAAM,CAAC;AAEZ,wFAAwF;AACxF,MAAM,MAAM,UAAU,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE7C;;;GAGG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,SAAS,SAAS,EAAE,GAAG,SAAS,EACxC,MAAM,EAAE,MAAM,GAAG,IAAI,EACrB,QAAQ,GAAE,MAAM,GAAG,IAAW,GAC7B,SAAS,GAAG,IAAI,CASlB;AAED,oGAAoG;AACpG,wBAAgB,aAAa,CAC3B,CAAC,SAAS;IACR,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;CACvB,EACD,OAAO,EAAE,SAAS,CAAC,EAAE,GAAG,CAAC,EAAE,CA0B5B;AAED,wBAAgB,YAAY,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,GAAG,MAAM,CAGjE;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CACxB,CAAC,EAAE,SAAS,EACZ,MAAM,EAAE,kBAAkB,GAAG,SAAS,EACtC,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,EACtC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,EAAE,SAAS,KAAK,MAAM,GAAG,IAAI,EAC9D,oBAAoB,CAAC,EAAE,oBAAoB,GAC1C,MAAM,CAqDR"}
+{"version":3,"file":"message-model.d.ts","sourceRoot":"","sources":["../../../client/chat/message-model.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,4BAA4B,CAAC;AACvE,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,0BAA0B,CAAC;AACzD,OAAO,KAAK,EACV,SAAS,EACT,kBAAkB,EAClB,iBAAiB,EACjB,WAAW,EACZ,MAAM,+BAA+B,CAAC;AACvC,OAAO,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,8BAA8B,CAAC;AAG5E,gGAAgG;AAChG,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,WAAW,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,iBAAiB,EAAE,CAAC;IACpD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAC;CACnD;AACD,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,KAAK,EAAE,SAAS,YAAY,EAAE,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AACD,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,KAAK,EAAE,SAAS,YAAY,EAAE,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE,SAAS,cAAc,EAAE,CAAC;IAC5C,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;CAC1B;AACD,eAAO,MAAM,cAAc,EAAE,aAO5B,CAAC;AACF,MAAM,MAAM,cAAc,GACtB;IACE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAChC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAA;CAAE,GAC9D;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAA;CAAE,GAC9D;IACE,QAAQ,CAAC,IAAI,EAAE,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;CAAE,CAAC;AAE/B,+GAA+G;AAC/G,wBAAgB,eAAe,CAC7B,OAAO,EAAE,SAAS,YAAY,EAAE,EAChC,KAAK,EAAE,SAAS,YAAY,EAAE,EAC9B,QAAQ,CAAC,EAAE,MAAM,GAChB,YAAY,EAAE,CA4ChB;AACD,wBAAgB,eAAe,CAC7B,KAAK,EAAE,aAAa,EACpB,MAAM,EAAE,cAAc,GACrB,aAAa,CAwEf;AACD,wBAAgB,aAAa,CAAC,KAAK,EAAE,aAAa,GAAG,MAAM,CAK1D;AACD,wBAAgB,WAAW,CAAC,KAAK,EAAE,aAAa,GAAG,MAAM,CAExD;AAED,8FAA8F;AAC9F,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;IAC/B,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;CACxB;AACD,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,SAAS,YAAY,EAAE,GAChC,kBAAkB,EAAE,CA2DtB;AAKD,MAAM,MAAM,QAAQ,GAChB;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;CAAE;AAC/B,0DAA0D;GACxD;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE;AACxD,kEAAkE;GAChE;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAE3D,MAAM,WAAW,aAAa;IAC5B,iGAAiG;IACjG,QAAQ,CAAC,KAAK,EAAE,SAAS,QAAQ,EAAE,CAAC;IACpC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;CACzB;AAkCD;;;GAGG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,SAAS,QAAQ,EAAE,GAAG,aAAa,CAiBxE;AAMD,MAAM,MAAM,SAAS,GAAG,CACtB,GAAG,EAAE,MAAM,EACX,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC9B,MAAM,CAAC;AAEZ,wFAAwF;AACxF,MAAM,MAAM,UAAU,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;AAE7C;;;GAGG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,SAAS,SAAS,EAAE,GAAG,SAAS,EACxC,MAAM,EAAE,MAAM,GAAG,IAAI,EACrB,QAAQ,GAAE,MAAM,GAAG,IAAW,GAC7B,SAAS,GAAG,IAAI,CASlB;AAED,oGAAoG;AACpG,wBAAgB,aAAa,CAC3B,CAAC,SAAS;IACR,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC;CACvB,EACD,OAAO,EAAE,SAAS,CAAC,EAAE,GAAG,CAAC,EAAE,CA0B5B;AAED,wBAAgB,YAAY,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,GAAG,MAAM,CAGjE;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CACxB,CAAC,EAAE,SAAS,EACZ,MAAM,EAAE,kBAAkB,GAAG,SAAS,EACtC,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,EACtC,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC,EAAE,SAAS,KAAK,MAAM,GAAG,IAAI,EAC9D,oBAAoB,CAAC,EAAE,oBAAoB,GAC1C,MAAM,CA+DR"}

package/dist/client/chat/message-model.js

@@ -1,3 +1,5 @@
+/** UIMessage reconciliation at the durable-history boundary. SDK Chat owns the active messages. */
+import { isFileInputFailureReason } from '../../shared/file-input-failures.js';
 import { toolSummary } from '../lib/tool-summary.js';
 export const EMPTY_MESSAGES = {
     items: [],
@@ -287,8 +289,17 @@ export function noticeText(t, notice, fallback, agentName, newsText, consultatio
         // The historical code names a cancellation request, not a terminal outcome.
         case 'runCancelled':
             return t('chat.notice.runCancelled');
-        case 'news':
-            return newsText?.(notice, t) ?? notice.title;
+        case 'news': {
+            const custom = newsText?.(notice, t);
+            if (custom !== undefined && custom !== null)
+                return custom;
+            const reason = notice.params?.fileInputReason;
+            if (notice.type === 'failed' && reason !== undefined)
+                return t(`chat.fileInputFailures.${isFileInputFailureReason(reason) ? reason : 'preparationFailed'}`);
+            if (notice.type === 'failed' && notice.title === 'Interrupted')
+                return t('chat.executionFailed');
+            return notice.title;
+        }
         case 'consultation':
             if (consultationIdentity?.state === 'unavailable')
                 return t('chat.consultation.unavailableTitle');

package/dist/client/chat/message-model.js.map

@@ -1 +1 @@
-{"version":3,"file":"message-model.js","sourceRoot":"","sources":["../../../client/chat/message-model.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AA0BrD,MAAM,CAAC,MAAM,cAAc,GAAkB;IAC3C,KAAK,EAAE,EAAE;IACT,OAAO,EAAE,EAAE;IACX,OAAO,EAAE,KAAK;IACd,UAAU,EAAE,IAAI;IAChB,OAAO,EAAE,CAAC;IACV,MAAM,EAAE,KAAK;CACd,CAAC;AAsBF,+GAA+G;AAC/G,MAAM,UAAU,eAAe,CAC7B,OAAgC,EAChC,KAA8B,EAC9B,QAAiB;IAEjB,MAAM,QAAQ,GAAG,IAAI,GAAG,CACtB,KAAK,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CACxB,OAAO,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,IAAI,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAC1E,CACF,CAAC;IACF,MAAM,IAAI,GAAG,IAAI,GAAG,CAClB,OAAO;SACJ,MAAM,CACL,CAAC,OAAO,EAAE,EAAE,CACV,CAAC,CACC,OAAO,CAAC,IAAI,KAAK,MAAM;QACvB,OAAO,CAAC,QAAQ,EAAE,GAAG,KAAK,SAAS;QACnC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QACxB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,OAAO,CAAC,EAAE,CAAC,CAC9C,CACJ;SACA,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAC3C,CAAC;IACF,KAAK,MAAM,OAAO,IAAI,KAAK,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACtC,IACE,QAAQ;YACR,CAAC,OAAO,CAAC,EAAE,KAAK,QAAQ;gBACtB,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,IAAI,CAAC,CAAC,CAAC;YAEzE,SAAS;QACX,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IAChC,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QAC/C,MAAM,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,GAAG,EAC1B,KAAK,GAAG,CAAC,CAAC,QAAQ,EAAE,GAAG,CAAC;QAC1B,IAAI,IAAI,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,IAAI,GAAG,KAAK,CAAC;QACnE,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,CAAC,CAAC,CAAC;QAClC,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,CAAC,CAAC;QAClC,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,aAAa,CAChD,CAAC,CAAC,QAAQ,EAAE,SAAS,IAAI,EAAE,CAC5B,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,yGAAyG;IACzG,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACzD,OAAO,MAAM;QACX,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,QAAQ,CAAC,EAAE,MAAM,CAAC;QACnE,CAAC,CAAC,OAAO,CAAC;AACd,CAAC;AACD,MAAM,UAAU,eAAe,CAC7B,KAAoB,EACpB,MAAsB;IAEtB,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,gBAAgB;YACnB,OAAO;gBACL,GAAG,KAAK;gBACR,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,CACvB,CAAC,OAAO,EAAE,EAAE,CACV,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,KAAK,SAAS;oBAClC,OAAO,CAAC,QAAQ,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,CAAC;oBACrC,CAAC,OAAO,CAAC,IAAI,KAAK,WAAW;wBAC3B,OAAO,CAAC,QAAQ,EAAE,WAAW,KAAK,MAAM,CAAC,WAAW,CAAC,CAC1D;gBACD,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC;aACjD,CAAC;QACJ,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC9D,OAAO;gBACL,GAAG,KAAK;gBACR,KAAK;gBACL,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAC3B,CAAC,OAAO,EAAE,EAAE,CACV,CAAC,KAAK,CAAC,IAAI,CACT,CAAC,OAAO,EAAE,EAAE,CACV,OAAO,CAAC,EAAE,KAAK,OAAO,CAAC,QAAQ;oBAC/B,OAAO,CAAC,QAAQ,EAAE,QAAQ,KAAK,OAAO,CAAC,QAAQ,CAClD,CACJ;gBACD,OAAO,EACL,MAAM,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO;gBACrE,UAAU,EACR,MAAM,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM;oBAC3B,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU;oBACxB,CAAC,CAAC,KAAK,CAAC,UAAU;gBACtB,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC;gBACrD,MAAM,EAAE,IAAI;aACb,CAAC;QACJ,CAAC;QACD,KAAK,WAAW;YACd,OAAO,eAAe,CAAC,KAAK,EAAE;gBAC5B,IAAI,EAAE,MAAM;gBACZ,IAAI,EAAE;oBACJ,KAAK,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC;oBACvB,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,IAAI,KAAK,CAAC,OAAO;oBACtD,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,UAAU,EAAE,KAAK,CAAC,UAAU;iBAC7B;aACF,CAAC,CAAC;QACL,KAAK,SAAS;YACZ,OAAO,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,CAAC,GAAG,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACnE,KAAK,SAAS,CAAC;QACf,KAAK,QAAQ;YACX,OAAO;gBACL,GAAG,KAAK;gBACR,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CACrC,OAAO,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ;oBAClC,CAAC,CAAC;wBACE,GAAG,OAAO;wBACV,MAAM,EAAE,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ;qBACzD;oBACH,CAAC,CAAC,OAAO,CACZ;aACF,CAAC;QACJ,KAAK,SAAS;YACZ,OAAO;gBACL,GAAG,KAAK;gBACR,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAC3B,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,CAClD;aACF,CAAC;QACJ,KAAK,OAAO;YACV,OAAO,cAAc,CAAC;IAC1B,CAAC;AACH,CAAC;AACD,MAAM,UAAU,aAAa,CAAC,KAAoB;IAChD,OAAO,IAAI,CAAC,GAAG,CACb,CAAC,EACD,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,CAAC,CAC5D,CAAC;AACJ,CAAC;AACD,MAAM,UAAU,WAAW,CAAC,KAAoB;IAC9C,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC;AAYD,MAAM,UAAU,mBAAmB,CACjC,QAAiC;IAEjC,OAAO,QAAQ;SACZ,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QACnB,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACxD,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAC3C,IAAI,CAAC,IAAI,KAAK,YAAY;YAC1B,CAAC,IAAI,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAChD,CAAC,IAAI,CAAC,IAAI,KAAK,aAAa;gBAC1B,IAAI,CAAC,EAAE,KAAK,kBAAkB;gBAC9B,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,WAAW,CAAC;YAC/B,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,CAAC,KAAK,CAAC,CACZ,CAAC;QACF,IAAI,CAAC,WAAW,CAAC,MAAM,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM;YAAE,OAAO,EAAE,CAAC;QAC9D,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,EAAE,aAAa,CAAC;QAChD,IAAI,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM;YACzC,OAAO;gBACL;oBACE,GAAG,EAAE,OAAO,CAAC,EAAE;oBACf,OAAO;oBACP,WAAW;oBACX,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,GAAG;oBAC1B,EAAE,EAAE,OAAO,CAAC,QAAQ,EAAE,SAAS,IAAI,EAAE;oBACrC,KAAK,EAAE,IAAI;oBACX,IAAI,EAAE,IAAI;iBACX;aACF,CAAC;QACJ,MAAM,MAAM,GAAG,IAAI,GAAG,EAGnB,CAAC;QACJ,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;QAC5C,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC;gBAAE,SAAS;YAC/C,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI;gBAC3C,OAAO,EAAE,EAAE;gBACX,GAAG,EAAE,MAAM,CAAC,GAAG;gBACf,EAAE,EAAE,MAAM,CAAC,SAAS,IAAI,OAAO,CAAC,QAAS,CAAC,SAAS;aACpD,CAAC;YACF,IAAI,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC;gBACtC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACvC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACrC,CAAC;QACD,MAAM,OAAO,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACxE,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;YAChD,GAAG,EAAE,GAAG,OAAO,CAAC,EAAE,IAAI,QAAQ,EAAE;YAChC,OAAO;YACP,WAAW,EAAE,KAAK,CAAC,OAAO;YAC1B,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,KAAK,EAAE,KAAK,KAAK,CAAC;YAClB,IAAI,EAAE,KAAK,KAAK,OAAO,CAAC,MAAM,GAAG,CAAC;SACnC,CAAC,CAAC,CAAC;IACN,CAAC,CAAC;SACD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACb,CAAC,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,CAAC,GAAG,KAAK,SAAS;QACxC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG;QACf,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAC7B,CAAC;AACN,CAAC;AAkBD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC;IACzB,MAAM;IACN,MAAM;IACN,MAAM;IACN,IAAI;IACJ,UAAU;IACV,WAAW;IACX,QAAQ;IACR,MAAM;CACP,CAAC,CAAC;AACH,MAAM,YAAY,GAChB,wFAAwF,CAAC;AAC3F,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC,CAAC;AAEhF,0FAA0F;AAC1F,SAAS,SAAS,CAAC,KAAe;IAChC,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,OAAO,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IACpE,OAAO,IAAI,IAAI,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;AAClC,CAAC;AAED,SAAS,MAAM,CAAC,KAA2B;IACzC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IACpE,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IAC1C,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC9C,oGAAoG;IACpG,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9D,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;AAC7E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,MAA2B;IACvD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAC9B,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE;YAAE,KAAK,GAAG,KAAK,GAAG,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,MAAM;SACjB,KAAK,CAAC,KAAK,CAAC;SACZ,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG,CAAC,GAAG,KAAK,CAAC;SACxB,OAAO,EAAE;SACT,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9B,OAAO;QACL,KAAK;QACL,IAAI,EACF,QAAQ,EAAE,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC;KAC1E,CAAC;AACJ,CAAC;AAcD;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAClC,MAAwC,EACxC,MAAqB,EACrB,WAA0B,IAAI;IAE9B,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,OAAO,CACL,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAClE,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACtE,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC;QACzC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC;QAC7C,IAAI,CACL,CAAC;AACJ,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,aAAa,CAM3B,OAAqB;IACrB,MAAM,KAAK,GAAG,CAAC,MAAoB,EAAE,EAAE,CACrC,MAAM;SACH,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;SACzC,IAAI,CACH,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACP,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;QACpC,CAAC,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI;QAC3B,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CACpB;SACA,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;IAC/B,MAAM,QAAQ,GAAG,OAAO;SACrB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC;SAC9D,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAI,GAAG,CAAC,CAAC,GAAI,CAAC,CAAC;IACnC,IAAI,CAAC,QAAQ,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,KAAK,CACrB,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,CACvE,CAAC;IACF,MAAM,MAAM,GAAQ,EAAE,CAAC;IACvB,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,OAAO,MAAM,GAAG,SAAS,CAAC,MAAM,IAAI,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,EAAE;YACnE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACnC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,CAAC,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,CAAY,EAAE,IAAc;IACvD,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU;QAAE,OAAO,CAAC,CAAC,qBAAqB,CAAC,CAAC;IAC9D,OAAO,CAAC,CAAC,cAAc,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;AACjE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CACxB,CAAY,EACZ,MAAsC,EACtC,QAAgB,EAChB,SAAsC,EACtC,QAA8D,EAC9D,oBAA2C;IAE3C,IAAI,CAAC,MAAM;QAAE,OAAO,QAAQ,CAAC;IAC7B,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,mBAAmB;YACtB,OAAO,CAAC,CAAC,+BAA+B,EAAE;gBACxC,IAAI,EAAE,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC;gBAC/B,GAAG,EAAE,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC;aACnC,CAAC,CAAC;QACL,KAAK,kBAAkB;YACrB,OAAO,CAAC,CAAC,8BAA8B,EAAE;gBACvC,IAAI,EAAE,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC;gBAC/B,GAAG,EAAE,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC;aACnC,CAAC,CAAC;QACL,KAAK,2BAA2B;YAC9B,OAAO,CAAC,CAAC,uCAAuC,EAAE;gBAChD,GAAG,EAAE,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC;gBAClC,MAAM,EAAE,CAAC,CAAC,qBAAqB,MAAM,CAAC,MAAM,EAAE,CAAC;aAChD,CAAC,CAAC;QACL,KAAK,cAAc;YACjB,OAAO,CAAC,CAAC,0BAA0B,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC5E,KAAK,WAAW;YACd,OAAO,MAAM,CAAC,MAAM;gBAClB,CAAC,CAAC,CAAC,CAAC,6BAA6B,EAAE;oBAC/B,MAAM,EAAE,CAAC,CAAC,YAAY,MAAM,CAAC,MAAM,EAAE,CAAC;iBACvC,CAAC;gBACJ,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC;QACjC,4EAA4E;QAC5E,KAAK,cAAc;YACjB,OAAO,CAAC,CAAC,0BAA0B,CAAC,CAAC;QACvC,KAAK,MAAM;YACT,OAAO,QAAQ,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC;QAC/C,KAAK,cAAc;YACjB,IAAI,oBAAoB,EAAE,KAAK,KAAK,aAAa;gBAC/C,OAAO,CAAC,CAAC,oCAAoC,CAAC,CAAC;YACjD,OAAO,CAAC,CACN,oBAAoB,EAAE,KAAK,KAAK,UAAU;gBACxC,CAAC,CAAC,oBAAoB;oBACpB,CAAC,MAAM,CAAC,gBAAgB,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBAC/C,CAAC,CAAC,iCAAiC;gBACnC,CAAC,CAAC,yBAAyB,EAC7B;gBACE,IAAI,EAAE,oBAAoB;oBACxB,CAAC,CAAC,oBAAoB,CAAC,KAAK,KAAK,SAAS;wBACxC,CAAC,CAAC,GAAG;wBACL,CAAC,CAAC,oBAAoB,CAAC,IAAI;oBAC7B,CAAC,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,gBAAgB;wBAC1C,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC;wBAC3B,CAAC,CAAC,MAAM,CAAC,SAAS;aACvB,CACF,CAAC;QACJ;YACE,OAAO,QAAQ,CAAC;IACpB,CAAC;AACH,CAAC"}
+{"version":3,"file":"message-model.js","sourceRoot":"","sources":["../../../client/chat/message-model.ts"],"names":[],"mappings":"AAAA,mGAAmG;AACnG,OAAO,EAAE,wBAAwB,EAAE,MAAM,qCAAqC,CAAC;AAU/E,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AA0BrD,MAAM,CAAC,MAAM,cAAc,GAAkB;IAC3C,KAAK,EAAE,EAAE;IACT,OAAO,EAAE,EAAE;IACX,OAAO,EAAE,KAAK;IACd,UAAU,EAAE,IAAI;IAChB,OAAO,EAAE,CAAC;IACV,MAAM,EAAE,KAAK;CACd,CAAC;AAsBF,+GAA+G;AAC/G,MAAM,UAAU,eAAe,CAC7B,OAAgC,EAChC,KAA8B,EAC9B,QAAiB;IAEjB,MAAM,QAAQ,GAAG,IAAI,GAAG,CACtB,KAAK,CAAC,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CACxB,OAAO,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,IAAI,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAC1E,CACF,CAAC;IACF,MAAM,IAAI,GAAG,IAAI,GAAG,CAClB,OAAO;SACJ,MAAM,CACL,CAAC,OAAO,EAAE,EAAE,CACV,CAAC,CACC,OAAO,CAAC,IAAI,KAAK,MAAM;QACvB,OAAO,CAAC,QAAQ,EAAE,GAAG,KAAK,SAAS;QACnC,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QACxB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,OAAO,CAAC,EAAE,CAAC,CAC9C,CACJ;SACA,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,CAC3C,CAAC;IACF,KAAK,MAAM,OAAO,IAAI,KAAK,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACtC,IACE,QAAQ;YACR,CAAC,OAAO,CAAC,EAAE,KAAK,QAAQ;gBACtB,CAAC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,IAAI,CAAC,CAAC,CAAC;YAEzE,SAAS;QACX,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IAChC,CAAC;IACD,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QAC/C,MAAM,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,GAAG,EAC1B,KAAK,GAAG,CAAC,CAAC,QAAQ,EAAE,GAAG,CAAC;QAC1B,IAAI,IAAI,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,IAAI,GAAG,KAAK,CAAC;QACnE,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,CAAC,CAAC,CAAC;QAClC,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,CAAC,CAAC;QAClC,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,aAAa,CAChD,CAAC,CAAC,QAAQ,EAAE,SAAS,IAAI,EAAE,CAC5B,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,yGAAyG;IACzG,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACzD,OAAO,MAAM;QACX,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,EAAE,KAAK,QAAQ,CAAC,EAAE,MAAM,CAAC;QACnE,CAAC,CAAC,OAAO,CAAC;AACd,CAAC;AACD,MAAM,UAAU,eAAe,CAC7B,KAAoB,EACpB,MAAsB;IAEtB,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,gBAAgB;YACnB,OAAO;gBACL,GAAG,KAAK;gBACR,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,MAAM,CACvB,CAAC,OAAO,EAAE,EAAE,CACV,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,KAAK,SAAS;oBAClC,OAAO,CAAC,QAAQ,CAAC,GAAG,IAAI,MAAM,CAAC,GAAG,CAAC;oBACrC,CAAC,OAAO,CAAC,IAAI,KAAK,WAAW;wBAC3B,OAAO,CAAC,QAAQ,EAAE,WAAW,KAAK,MAAM,CAAC,WAAW,CAAC,CAC1D;gBACD,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC;aACjD,CAAC;QACJ,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YAC9D,OAAO;gBACL,GAAG,KAAK;gBACR,KAAK;gBACL,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAC3B,CAAC,OAAO,EAAE,EAAE,CACV,CAAC,KAAK,CAAC,IAAI,CACT,CAAC,OAAO,EAAE,EAAE,CACV,OAAO,CAAC,EAAE,KAAK,OAAO,CAAC,QAAQ;oBAC/B,OAAO,CAAC,QAAQ,EAAE,QAAQ,KAAK,OAAO,CAAC,QAAQ,CAClD,CACJ;gBACD,OAAO,EACL,MAAM,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO;gBACrE,UAAU,EACR,MAAM,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM;oBAC3B,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU;oBACxB,CAAC,CAAC,KAAK,CAAC,UAAU;gBACtB,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC;gBACrD,MAAM,EAAE,IAAI;aACb,CAAC;QACJ,CAAC;QACD,KAAK,WAAW;YACd,OAAO,eAAe,CAAC,KAAK,EAAE;gBAC5B,IAAI,EAAE,MAAM;gBACZ,IAAI,EAAE;oBACJ,KAAK,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC;oBACvB,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,IAAI,KAAK,CAAC,OAAO;oBACtD,OAAO,EAAE,KAAK,CAAC,OAAO;oBACtB,UAAU,EAAE,KAAK,CAAC,UAAU;iBAC7B;aACF,CAAC,CAAC;QACL,KAAK,SAAS;YACZ,OAAO,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,CAAC,GAAG,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QACnE,KAAK,SAAS,CAAC;QACf,KAAK,QAAQ;YACX,OAAO;gBACL,GAAG,KAAK;gBACR,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CACrC,OAAO,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ;oBAClC,CAAC,CAAC;wBACE,GAAG,OAAO;wBACV,MAAM,EAAE,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ;qBACzD;oBACH,CAAC,CAAC,OAAO,CACZ;aACF,CAAC;QACJ,KAAK,SAAS;YACZ,OAAO;gBACL,GAAG,KAAK;gBACR,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAC3B,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,CAClD;aACF,CAAC;QACJ,KAAK,OAAO;YACV,OAAO,cAAc,CAAC;IAC1B,CAAC;AACH,CAAC;AACD,MAAM,UAAU,aAAa,CAAC,KAAoB;IAChD,OAAO,IAAI,CAAC,GAAG,CACb,CAAC,EACD,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,IAAI,CAAC,CAAC,CAC5D,CAAC;AACJ,CAAC;AACD,MAAM,UAAU,WAAW,CAAC,KAAoB;IAC9C,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC;AAC9B,CAAC;AAYD,MAAM,UAAU,mBAAmB,CACjC,QAAiC;IAEjC,OAAO,QAAQ;SACZ,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QACnB,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CACxD,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAC3C,IAAI,CAAC,IAAI,KAAK,YAAY;YAC1B,CAAC,IAAI,CAAC,IAAI,KAAK,WAAW,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAChD,CAAC,IAAI,CAAC,IAAI,KAAK,aAAa;gBAC1B,IAAI,CAAC,EAAE,KAAK,kBAAkB;gBAC9B,IAAI,CAAC,IAAI,CAAC,IAAI,KAAK,WAAW,CAAC;YAC/B,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,CAAC,KAAK,CAAC,CACZ,CAAC;QACF,IAAI,CAAC,WAAW,CAAC,MAAM,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM;YAAE,OAAO,EAAE,CAAC;QAC9D,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,EAAE,aAAa,CAAC;QAChD,IAAI,CAAC,OAAO,EAAE,MAAM,IAAI,CAAC,WAAW,CAAC,MAAM;YACzC,OAAO;gBACL;oBACE,GAAG,EAAE,OAAO,CAAC,EAAE;oBACf,OAAO;oBACP,WAAW;oBACX,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,GAAG;oBAC1B,EAAE,EAAE,OAAO,CAAC,QAAQ,EAAE,SAAS,IAAI,EAAE;oBACrC,KAAK,EAAE,IAAI;oBACX,IAAI,EAAE,IAAI;iBACX;aACF,CAAC;QACJ,MAAM,MAAM,GAAG,IAAI,GAAG,EAGnB,CAAC;QACJ,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC;QAC5C,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC;gBAAE,SAAS;YAC/C,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI;gBAC3C,OAAO,EAAE,EAAE;gBACX,GAAG,EAAE,MAAM,CAAC,GAAG;gBACf,EAAE,EAAE,MAAM,CAAC,SAAS,IAAI,OAAO,CAAC,QAAS,CAAC,SAAS;aACpD,CAAC;YACF,IAAI,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC;gBACtC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACvC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACrC,CAAC;QACD,MAAM,OAAO,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACxE,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;YAChD,GAAG,EAAE,GAAG,OAAO,CAAC,EAAE,IAAI,QAAQ,EAAE;YAChC,OAAO;YACP,WAAW,EAAE,KAAK,CAAC,OAAO;YAC1B,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,KAAK,EAAE,KAAK,KAAK,CAAC;YAClB,IAAI,EAAE,KAAK,KAAK,OAAO,CAAC,MAAM,GAAG,CAAC;SACnC,CAAC,CAAC,CAAC;IACN,CAAC,CAAC;SACD,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACb,CAAC,CAAC,GAAG,KAAK,SAAS,IAAI,CAAC,CAAC,GAAG,KAAK,SAAS;QACxC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG;QACf,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,CAC7B,CAAC;AACN,CAAC;AAkBD,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC;IACzB,MAAM;IACN,MAAM;IACN,MAAM;IACN,IAAI;IACJ,UAAU;IACV,WAAW;IACX,QAAQ;IACR,MAAM;CACP,CAAC,CAAC;AACH,MAAM,YAAY,GAChB,wFAAwF,CAAC;AAC3F,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,CAAC,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC,CAAC;AAEhF,0FAA0F;AAC1F,SAAS,SAAS,CAAC,KAAe;IAChC,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,OAAO,EAAE,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IACpE,OAAO,IAAI,IAAI,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;AAClC,CAAC;AAED,SAAS,MAAM,CAAC,KAA2B;IACzC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IACpE,MAAM,OAAO,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;IAC1C,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC9C,oGAAoG;IACpG,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACzD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9D,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC;AAC7E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,MAA2B;IACvD,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QAC9B,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE;YAAE,KAAK,GAAG,KAAK,GAAG,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,MAAM;SACjB,KAAK,CAAC,KAAK,CAAC;SACZ,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACjD,MAAM,QAAQ,GAAG,CAAC,GAAG,KAAK,CAAC;SACxB,OAAO,EAAE;SACT,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9B,OAAO;QACL,KAAK;QACL,IAAI,EACF,QAAQ,EAAE,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC;KAC1E,CAAC;AACJ,CAAC;AAcD;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAClC,MAAwC,EACxC,MAAqB,EACrB,WAA0B,IAAI;IAE9B,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,OAAO,CACL,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAClE,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QACtE,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC;QACzC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,eAAe,CAAC;QAC7C,IAAI,CACL,CAAC;AACJ,CAAC;AAED,oGAAoG;AACpG,MAAM,UAAU,aAAa,CAM3B,OAAqB;IACrB,MAAM,KAAK,GAAG,CAAC,MAAoB,EAAE,EAAE,CACrC,MAAM;SACH,GAAG,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;SACzC,IAAI,CACH,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACP,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC;QACpC,CAAC,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI;QAC3B,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CACpB;SACA,GAAG,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC;IAC/B,MAAM,QAAQ,GAAG,OAAO;SACrB,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC;SAC9D,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAI,GAAG,CAAC,CAAC,GAAI,CAAC,CAAC;IACnC,IAAI,CAAC,QAAQ,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,KAAK,CACrB,OAAO,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,CACvE,CAAC;IACF,MAAM,MAAM,GAAQ,EAAE,CAAC;IACvB,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,OAAO,MAAM,GAAG,SAAS,CAAC,MAAM,IAAI,SAAS,CAAC,MAAM,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,EAAE;YACnE,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACnC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,CAAC,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,CAAY,EAAE,IAAc;IACvD,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU;QAAE,OAAO,CAAC,CAAC,qBAAqB,CAAC,CAAC;IAC9D,OAAO,CAAC,CAAC,cAAc,IAAI,CAAC,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;AACjE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,UAAU,CACxB,CAAY,EACZ,MAAsC,EACtC,QAAgB,EAChB,SAAsC,EACtC,QAA8D,EAC9D,oBAA2C;IAE3C,IAAI,CAAC,MAAM;QAAE,OAAO,QAAQ,CAAC;IAC7B,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,mBAAmB;YACtB,OAAO,CAAC,CAAC,+BAA+B,EAAE;gBACxC,IAAI,EAAE,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC;gBAC/B,GAAG,EAAE,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC;aACnC,CAAC,CAAC;QACL,KAAK,kBAAkB;YACrB,OAAO,CAAC,CAAC,8BAA8B,EAAE;gBACvC,IAAI,EAAE,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC;gBAC/B,GAAG,EAAE,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC;aACnC,CAAC,CAAC;QACL,KAAK,2BAA2B;YAC9B,OAAO,CAAC,CAAC,uCAAuC,EAAE;gBAChD,GAAG,EAAE,SAAS,CAAC,MAAM,CAAC,WAAW,CAAC;gBAClC,MAAM,EAAE,CAAC,CAAC,qBAAqB,MAAM,CAAC,MAAM,EAAE,CAAC;aAChD,CAAC,CAAC;QACL,KAAK,cAAc;YACjB,OAAO,CAAC,CAAC,0BAA0B,EAAE,EAAE,IAAI,EAAE,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC5E,KAAK,WAAW;YACd,OAAO,MAAM,CAAC,MAAM;gBAClB,CAAC,CAAC,CAAC,CAAC,6BAA6B,EAAE;oBAC/B,MAAM,EAAE,CAAC,CAAC,YAAY,MAAM,CAAC,MAAM,EAAE,CAAC;iBACvC,CAAC;gBACJ,CAAC,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC;QACjC,4EAA4E;QAC5E,KAAK,cAAc;YACjB,OAAO,CAAC,CAAC,0BAA0B,CAAC,CAAC;QACvC,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,MAAM,MAAM,GAAG,QAAQ,EAAE,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;YACrC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,IAAI;gBAAE,OAAO,MAAM,CAAC;YAC3D,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,eAAe,CAAC;YAC9C,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,KAAK,SAAS;gBAClD,OAAO,CAAC,CACN,0BAA0B,wBAAwB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,mBAAmB,EAAE,CAC5F,CAAC;YACJ,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,KAAK,KAAK,aAAa;gBAC5D,OAAO,CAAC,CAAC,sBAAsB,CAAC,CAAC;YACnC,OAAO,MAAM,CAAC,KAAK,CAAC;QACtB,CAAC;QACD,KAAK,cAAc;YACjB,IAAI,oBAAoB,EAAE,KAAK,KAAK,aAAa;gBAC/C,OAAO,CAAC,CAAC,oCAAoC,CAAC,CAAC;YACjD,OAAO,CAAC,CACN,oBAAoB,EAAE,KAAK,KAAK,UAAU;gBACxC,CAAC,CAAC,oBAAoB;oBACpB,CAAC,MAAM,CAAC,gBAAgB,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;gBAC/C,CAAC,CAAC,iCAAiC;gBACnC,CAAC,CAAC,yBAAyB,EAC7B;gBACE,IAAI,EAAE,oBAAoB;oBACxB,CAAC,CAAC,oBAAoB,CAAC,KAAK,KAAK,SAAS;wBACxC,CAAC,CAAC,GAAG;wBACL,CAAC,CAAC,oBAAoB,CAAC,IAAI;oBAC7B,CAAC,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,MAAM,CAAC,gBAAgB;wBAC1C,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC;wBAC3B,CAAC,CAAC,MAAM,CAAC,SAAS;aACvB,CACF,CAAC;QACJ;YACE,OAAO,QAAQ,CAAC;IACpB,CAAC;AACH,CAAC"}

package/dist/client/components/command-line.d.ts

@@ -1,6 +1,7 @@
 import { type ReactElement } from 'react';
 /** A shell command with a copy button (the add-runner dialog, the upgrade popover). */
-export declare function CommandLine({ command, }: {
+export declare function CommandLine({ command, expanded, }: {
     readonly command: string;
+    readonly expanded?: boolean;
 }): ReactElement;
 //# sourceMappingURL=command-line.d.ts.map

package/dist/client/components/command-line.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"command-line.d.ts","sourceRoot":"","sources":["../../../client/components/command-line.tsx"],"names":[],"mappings":"AAEA,OAAO,EAAY,KAAK,YAAY,EAAE,MAAM,OAAO,CAAC;AAKpD,uFAAuF;AACvF,wBAAgB,WAAW,CAAC,EAC1B,OAAO,GACR,EAAE;IACD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B,GAAG,YAAY,CA8Bf"}
+{"version":3,"file":"command-line.d.ts","sourceRoot":"","sources":["../../../client/components/command-line.tsx"],"names":[],"mappings":"AAGA,OAAO,EAAY,KAAK,YAAY,EAAE,MAAM,OAAO,CAAC;AAKpD,uFAAuF;AACvF,wBAAgB,WAAW,CAAC,EAC1B,OAAO,EACP,QAAgB,GACjB,EAAE;IACD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;CAC7B,GAAG,YAAY,CA6Bf"}

package/dist/client/components/command-line.js

@@ -1,24 +1,23 @@
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+import { copyText } from '@nocobase/app-client';
 import { useTranslation } from '@nocobase/i18n/client';
 import { CheckIcon, CopyIcon } from 'lucide-react';
 import { useState } from 'react';
 import { useNotify } from '../hooks/use-notify.js';
 import { Button } from './ui/button.js';
 /** A shell command with a copy button (the add-runner dialog, the upgrade popover). */
-export function CommandLine({ command, }) {
+export function CommandLine({ command, expanded = false, }) {
     const { t } = useTranslation();
     const notify = useNotify();
     const [copied, setCopied] = useState(false);
     async function copy() {
-        try {
-            await navigator.clipboard.writeText(command);
-            setCopied(true);
+        const copied = await copyText(command);
+        setCopied(copied);
+        if (copied)
             window.setTimeout(() => setCopied(false), 2000);
-        }
-        catch (error) {
-            notify.error(error, t('command.copyFailed'));
-        }
+        else
+            notify.error(null, t('command.copyFailed'));
     }
-    return (_jsxs("div", { className: 'flex items-start gap-2 rounded-lg border bg-muted p-2 pl-3', children: [_jsx("code", { className: 'min-w-0 flex-1 py-1 font-mono text-xs break-all select-all', children: command }), _jsx(Button, { variant: 'ghost', size: 'icon-sm', "aria-label": copied ? t('command.copied') : t('command.copy'), onClick: () => void copy(), children: copied ? _jsx(CheckIcon, {}) : _jsx(CopyIcon, {}) })] }));
+    return (_jsxs("div", { className: 'flex items-start gap-2 rounded-lg border bg-muted p-2 pl-3', children: [_jsx("code", { className: `min-w-0 flex-1 py-1 font-mono text-xs break-all whitespace-pre-wrap select-all ${expanded ? '' : 'max-h-64 overflow-y-auto'}`, children: command }), _jsx(Button, { variant: 'ghost', size: 'icon-sm', "aria-label": copied ? t('command.copied') : t('command.copy'), onClick: () => void copy(), children: copied ? _jsx(CheckIcon, {}) : _jsx(CopyIcon, {}) })] }));
 }
 //# sourceMappingURL=command-line.js.map

package/dist/client/components/command-line.js.map

@@ -1 +1 @@
-{"version":3,"file":"command-line.js","sourceRoot":"","sources":["../../../client/components/command-line.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAqB,MAAM,OAAO,CAAC;AAEpD,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAExC,uFAAuF;AACvF,MAAM,UAAU,WAAW,CAAC,EAC1B,OAAO,GAGR;IACC,MAAM,EAAE,CAAC,EAAE,GAAG,cAAc,EAAE,CAAC;IAC/B,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAE5C,KAAK,UAAU,IAAI;QACjB,IAAI,CAAC;YACH,MAAM,SAAS,CAAC,SAAS,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;YAC7C,SAAS,CAAC,IAAI,CAAC,CAAC;YAChB,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,CAAC;QAClD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC;QAC/C,CAAC;IACH,CAAC;IAED,OAAO,CACL,eAAK,SAAS,EAAC,4DAA4D,aACzE,eAAM,SAAS,EAAC,4DAA4D,YACzE,OAAO,GACH,EACP,KAAC,MAAM,IACL,OAAO,EAAC,OAAO,EACf,IAAI,EAAC,SAAS,gBACF,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,EAC5D,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,IAAI,EAAE,YAEzB,MAAM,CAAC,CAAC,CAAC,KAAC,SAAS,KAAG,CAAC,CAAC,CAAC,KAAC,QAAQ,KAAG,GAC/B,IACL,CACP,CAAC;AACJ,CAAC"}
+{"version":3,"file":"command-line.js","sourceRoot":"","sources":["../../../client/components/command-line.tsx"],"names":[],"mappings":";AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,QAAQ,EAAqB,MAAM,OAAO,CAAC;AAEpD,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAExC,uFAAuF;AACvF,MAAM,UAAU,WAAW,CAAC,EAC1B,OAAO,EACP,QAAQ,GAAG,KAAK,GAIjB;IACC,MAAM,EAAE,CAAC,EAAE,GAAG,cAAc,EAAE,CAAC;IAC/B,MAAM,MAAM,GAAG,SAAS,EAAE,CAAC;IAC3B,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;IAE5C,KAAK,UAAU,IAAI;QACjB,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC;QACvC,SAAS,CAAC,MAAM,CAAC,CAAC;QAClB,IAAI,MAAM;YAAE,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,CAAC;;YACvD,MAAM,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC;IACnD,CAAC;IAED,OAAO,CACL,eAAK,SAAS,EAAC,4DAA4D,aACzE,eACE,SAAS,EAAE,kFAAkF,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,0BAA0B,EAAE,YAExI,OAAO,GACH,EACP,KAAC,MAAM,IACL,OAAO,EAAC,OAAO,EACf,IAAI,EAAC,SAAS,gBACF,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,EAC5D,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,IAAI,EAAE,YAEzB,MAAM,CAAC,CAAC,CAAC,KAAC,SAAS,KAAG,CAAC,CAAC,CAAC,KAAC,QAAQ,KAAG,GAC/B,IACL,CACP,CAAC;AACJ,CAAC"}

package/dist/client/components/variables/variable-dialogs.js

@@ -1,7 +1,7 @@
 import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 /**
  * Adding a variable (`target.name === null`), in the scope chosen in the dialog when the panel lists several, or
- * replacing one's value or whether only team runtimes receive it, and showing revealed values. The value field starts
+ * replacing one's value or whether only shared runtimes receive it, and showing revealed values. The value field starts
  * empty: stored values never reach the browser except through the audited reveal, and an empty value when replacing
  * keeps the stored one. "Take from the runtime" keeps a name only: the runtime that takes a run provides the value.
  *
@@ -77,7 +77,7 @@ function VariableForm({ scopes, initialAt, fixedScope, fixedName, initialTeamRun
             return;
         setSaving(true);
         try {
-            // Replacing with an empty value keeps the stored one: only whether team runtimes alone receive it changes.
+            // Replacing with an empty value keeps the stored one: only whether shared runtimes alone receive it changes.
             await api.setVariable(scope.scope, scope.scopeId, trimmed, fromRunner || (fixedName !== null && value === '') ? undefined : value, fromRunner ? { fromRunner: true } : { teamRunnersOnly });
             notify.success(t('envVars.saved', { name: trimmed }));
             markSaved();