@nodetool-ai/agents 0.7.0-rc.23 → 0.8.1

package/dist/capabilities/assets.js

@@ -0,0 +1,952 @@
+/**
+ * The `assets` capability module — everything an agent does with stored media.
+ *
+ * Eight capabilities that used to be eight `Tool` subclasses spread over four
+ * files: `list_assets` / `get_asset`, `save_asset` / `read_asset`,
+ * `asset_search` / `asset_list`, and `list_images` / `view_image`. The
+ * design's mapping table folds the library and image tools in here rather
+ * than leaving them beside the file tools.
+ *
+ * Wire names, descriptions and schemas are unchanged. `view_image` keeps its
+ * result shape to the byte: the executors strip `image_content` out of the
+ * result and forward the pixels as provider image blocks (`image-injection.ts`),
+ * so anything that reshapes it silently blinds the model.
+ *
+ * `list_images` and `view_image` are the two capabilities whose identity is a
+ * Zod schema rather than a hand-written JSON one. Their `inputSchema` is
+ * derived with `zodToJsonSchema` from the `zodSchema` their spec carries, and
+ * the argument check runs once per entrance in `validateCapabilityArgs`
+ * (`./args.ts`) — never here.
+ */
+import { Buffer } from "node:buffer";
+import { extractImageRegion } from "@nodetool-ai/runtime";
+import { SVG_MIME, detectImageMime as sniffImageMime, isSafePublicHttpsUrl, isSvgBytes, loadMediaRefBytes, rasterizeSvg, safeFetch } from "@nodetool-ai/runtime";
+import { mimeForPath } from "../sandbox-media-ref.js";
+import { MIME_TO_EXT } from "../tools/asset-persist.js";
+import { userIdOf } from "../tools/mcp-tool-support.js";
+import { listAssetsSpec, getAssetSpec, saveAssetSpec, readAssetSpec, assetSearchSpec, assetListSpec, listImagesSpec, viewImageSpec, updateAssetSpec, DEFAULT_LIMIT, MAX_LIMIT } from "./assets.specs.js";
+import { isNumber, isObjectLike, isString } from "../utils/type-guards.js";
+import { resolveProjectId } from "./project-scope.js";
+import { hasTemporaryImageHandle } from "../tools/image-injection.js";
+// ---------------------------------------------------------------------------
+// Shared projections
+// ---------------------------------------------------------------------------
+/**
+ * An asset row as `list_assets` / `get_asset` report it. Deliberately metadata
+ * only: the signed download URLs on the HTTP response come from the server's
+ * storage adapter, and an agent that wants the bytes calls `read_asset`.
+ */
+function assetRecord(asset) {
+    const ext = asset.fileExtension;
+    return {
+        id: asset.id,
+        user_id: asset.user_id,
+        workflow_id: asset.workflow_id ?? null,
+        parent_id: asset.parent_id ?? null,
+        name: asset.name,
+        content_type: asset.content_type,
+        // The canonical reference an agent can paste into a workflow property or
+        // pass to media tools.
+        uri: ext ? `asset://${asset.id}.${ext}` : `asset://${asset.id}`,
+        size: asset.size ?? null,
+        duration: asset.duration ?? null,
+        created_at: asset.created_at,
+        metadata: asset.metadata ?? null
+    };
+}
+/** Build the canonical `asset://<id>.<ext>` uri for an asset. */
+function assetUri(asset) {
+    const ext = asset.fileExtension;
+    return ext ? `asset://${asset.id}.${ext}` : `asset://${asset.id}`;
+}
+/** The lightweight handle the library capabilities return — no bytes. */
+function toHandle(asset) {
+    const metadata = asset.metadata ?? {};
+    return {
+        asset_id: asset.id,
+        name: asset.name,
+        content_type: asset.content_type,
+        uri: assetUri(asset),
+        size: asset.size ?? null,
+        duration: asset.duration ?? null,
+        width: isNumber(metadata.width) ? metadata.width : null,
+        height: isNumber(metadata.height) ? metadata.height : null,
+        created_at: asset.created_at
+    };
+}
+function resolveLimit(raw) {
+    const n = Number(raw);
+    return Number.isFinite(n) && n > 0
+        ? Math.min(Math.floor(n), MAX_LIMIT)
+        : DEFAULT_LIMIT;
+}
+async function findRunAsset(run, assetId) {
+    const { Asset } = await import("@nodetool-ai/models");
+    const asset = await Asset.find(userIdOf(run.context), assetId);
+    return asset?.project_id === resolveProjectId(run, {}) ? asset : null;
+}
+function assetIdFromReference(value) {
+    let path;
+    if (value.startsWith("asset://")) {
+        path = value.slice("asset://".length);
+    }
+    else if (value.startsWith("/api/storage/")) {
+        path = value.slice("/api/storage/".length);
+    }
+    else if (/^(?:memory|file|s3|supabase):\/\//.test(value)) {
+        path = value.slice(value.indexOf("://") + 3);
+    }
+    else if (!value.includes("://") && !value.startsWith("/api/")) {
+        path = value;
+    }
+    else {
+        return null;
+    }
+    const withoutQuery = path.split(/[?#]/)[0] ?? "";
+    const base = withoutQuery.slice(withoutQuery.lastIndexOf("/") + 1);
+    return base.replace(/_thumb(?=\.[^.]+$)/, "").replace(/\.[^.]+$/, "") || null;
+}
+const scopedAssetStorageKey = (run, name) => `projects/${resolveProjectId(run, {})}/assets/${name}`;
+const requiresStoredAssetOwnership = (value) => value.startsWith("asset://") ||
+    value.startsWith("/api/storage/") ||
+    /^(?:memory|file|s3|supabase):\/\//.test(value);
+const isRunProjectStorageReference = (run, value) => value.includes(`projects/${resolveProjectId(run, {})}/`);
+const listAssets = {
+    spec: listAssetsSpec,
+    impl: async (run, params) => {
+        const source = String(params["source"] ?? "user");
+        const query = params["query"];
+        const contentType = params["content_type"];
+        const limit = Number(params["limit"] ?? 100);
+        const userId = userIdOf(run.context);
+        const projectId = resolveProjectId(run, {});
+        // Package assets are files shipped with a node package, not database rows;
+        // they stay on the REST route that serves them.
+        if (source === "package") {
+            // Package assets are files inside the installed node packages, served
+            // by the server from its own install — there is no row to read.
+            return run.listPackageAssets
+                ? { assets: await run.listPackageAssets({ limit }), next: null }
+                : {
+                    error: "Package assets are not available in this process — they are " +
+                        "read from the installed node packages by the server."
+                };
+        }
+        const { Asset } = await import("@nodetool-ai/models");
+        if (query) {
+            const search = { limit, projectId };
+            if (contentType)
+                search.contentType = contentType;
+            const [assets, next] = await Asset.searchAssetsGlobal(userId, query, search);
+            return { assets: assets.map(assetRecord), next: next || null };
+        }
+        const page = { limit, projectId };
+        if (contentType)
+            page.contentType = contentType;
+        const [assets, next] = await Asset.paginate(userId, page);
+        return { assets: assets.map(assetRecord), next: next || null };
+    }
+};
+// ---------------------------------------------------------------------------
+// get_asset
+// ---------------------------------------------------------------------------
+const getAsset = {
+    spec: getAssetSpec,
+    impl: async (run, params) => {
+        const assetId = String(params["asset_id"]);
+        const asset = await findRunAsset(run, assetId);
+        return asset
+            ? assetRecord(asset)
+            : { error: `Asset ${assetId} was not found.` };
+    }
+};
+/** Largest file `save_asset` copies from a `source`, in bytes. */
+const MAX_SOURCE_BYTES = 100 * 1024 * 1024;
+/**
+ * Read the bytes behind a `save_asset` source. An http(s) URL goes through
+ * `safeFetch` (SSRF-screened, capped); everything else — a `/api/storage/`
+ * key, an `asset://` URI, a data URI — is what `loadMediaRefBytes` already
+ * resolves for `read_asset`, so the two agree on what a ref means.
+ */
+async function readSourceBytes(context, source) {
+    if (source.startsWith("http://") || source.startsWith("https://")) {
+        const response = await safeFetch(source);
+        if (!response.ok) {
+            return {
+                error: `Fetching ${source} failed with HTTP ${response.status}.`
+            };
+        }
+        const declared = Number(response.headers.get("content-length") ?? "");
+        if (Number.isFinite(declared) && declared > MAX_SOURCE_BYTES) {
+            return {
+                error: `${source} is ${declared} bytes, past the ${MAX_SOURCE_BYTES}-byte limit.`
+            };
+        }
+        const bytes = new Uint8Array(await response.arrayBuffer());
+        if (bytes.byteLength === 0) {
+            return { error: `${source} returned an empty body — nothing to save.` };
+        }
+        if (bytes.byteLength > MAX_SOURCE_BYTES) {
+            return {
+                error: `${source} is ${bytes.byteLength} bytes, past the ${MAX_SOURCE_BYTES}-byte limit.`
+            };
+        }
+        const header = response.headers.get("content-type");
+        const contentType = header?.split(";")[0]?.trim();
+        return contentType ? { bytes, contentType } : { bytes };
+    }
+    let bytes = null;
+    try {
+        bytes = await loadMediaRefBytes({ uri: source }, context);
+    }
+    catch {
+        // Reported below as not found; the message names the forms that work.
+    }
+    if (!bytes) {
+        return {
+            error: `Source not found: ${source}. Pass the asset_url or /api/storage/ ` +
+                `key a tool returned, an asset:// URI, or an http(s) URL.`
+        };
+    }
+    // A resolver that finds the key but reads nothing back — a bucket the
+    // adapter is not configured for, an object still being written — hands back
+    // an empty buffer rather than null. Saving it produced a 0-byte asset the
+    // caller was told was fine, and a chat that answered with a video nobody
+    // could play. Zero bytes is never a successful copy.
+    if (bytes.byteLength === 0) {
+        return {
+            error: `${source} resolved to 0 bytes — nothing was copied. Check that the ` +
+                `source still exists and that this server can read its storage.`
+        };
+    }
+    return { bytes };
+}
+/**
+ * The `.<ext>` an `asset://` URI carries, from the saved name or its MIME
+ * type. Empty when neither names one — a suffix guessed wrong is worse than
+ * none, since it is what a renderer types the media by.
+ */
+function assetUriSuffix(name, mime) {
+    const fromName = /\.([A-Za-z0-9]{1,8})$/.exec(name);
+    if (fromName)
+        return `.${fromName[1].toLowerCase()}`;
+    const ext = MIME_TO_EXT[mime];
+    return ext ? `.${ext}` : "";
+}
+const saveAsset = {
+    spec: saveAssetSpec,
+    impl: async (run, params) => {
+        const context = run.context;
+        try {
+            const name = params.name;
+            const content = params.content;
+            const contentBase64 = params.content_base64;
+            const contentTypeArg = params.content_type;
+            if (!isString(name) || !name) {
+                return {
+                    success: false,
+                    error: "name is required and must be a string"
+                };
+            }
+            const source = params.source;
+            const hasText = isString(content);
+            const hasBinary = isString(contentBase64) && contentBase64;
+            const hasSource = isString(source) && source.trim() !== "";
+            const supplied = [hasText, hasBinary, hasSource].filter(Boolean).length;
+            if (supplied === 0) {
+                return {
+                    success: false,
+                    error: "One of `content` (text), `content_base64` (binary) or `source` " +
+                        "(an asset_url, /api/storage/ key, asset:// URI or http(s) URL " +
+                        "to copy) is required"
+                };
+            }
+            if (supplied > 1) {
+                return {
+                    success: false,
+                    error: "`content`, `content_base64` and `source` are mutually exclusive"
+                };
+            }
+            let data;
+            let mime;
+            if (hasSource) {
+                // The bytes already exist somewhere the host can read — copy them
+                // here instead of having the caller read them to base64 and pass
+                // them back, which is what a model does when this path is missing.
+                const sourceRef = source.trim();
+                if (requiresStoredAssetOwnership(sourceRef) &&
+                    !isRunProjectStorageReference(run, sourceRef)) {
+                    const sourceAssetId = assetIdFromReference(sourceRef);
+                    if (!sourceAssetId || !(await findRunAsset(run, sourceAssetId))) {
+                        return {
+                            success: false,
+                            error: "Source not found in this project."
+                        };
+                    }
+                }
+                const fetched = await readSourceBytes(context, sourceRef);
+                if ("error" in fetched) {
+                    return { success: false, error: fetched.error };
+                }
+                data = fetched.bytes;
+                mime =
+                    isString(contentTypeArg) && contentTypeArg
+                        ? contentTypeArg
+                        : (fetched.contentType ??
+                            mimeForPath(source) ??
+                            "application/octet-stream");
+            }
+            else {
+                data = hasBinary
+                    ? new Uint8Array(Buffer.from(contentBase64, "base64"))
+                    : new TextEncoder().encode(content);
+                if (hasBinary && data.byteLength === 0) {
+                    return {
+                        success: false,
+                        error: "`content_base64` decoded to 0 bytes — nothing to save."
+                    };
+                }
+                // The filename before the generic fallback: an agent that writes
+                // `save_asset({name: "logo.svg", content: "<svg…"})` means an SVG, and
+                // storing it as text/plain is what made it a file nothing would render.
+                // The `source` branch above already infers this way.
+                mime =
+                    (isString(contentTypeArg) && contentTypeArg
+                        ? contentTypeArg
+                        : mimeForPath(name)) ??
+                        (hasBinary ? "application/octet-stream" : "text/plain");
+            }
+            // Prefer the model interface (DB + storage). This is what the chat
+            // UI surfaces in the asset browser and what other tools can reference
+            // by `asset://<id>.<ext>` URIs.
+            // The interface, not the method — see `persistOutput`. Without this
+            // the storage-adapter fallback below was dead code and a run with no
+            // asset persistence answered with an error instead of using it.
+            if (context.hasModelInterface?.("createAsset")) {
+                const asset = (await context.createAsset({
+                    name,
+                    contentType: mime,
+                    content: data
+                }));
+                if (asset && isString(asset.id)) {
+                    // With the extension: a chat embed of `asset://<id>` alone has no
+                    // way to tell a video from an image and renders it as one, which
+                    // is how a saved mp4 came back as a broken image. `generate_*`
+                    // already returns the suffixed form.
+                    const savedUri = `asset://${asset.id}${assetUriSuffix(name, mime)}`;
+                    return {
+                        success: true,
+                        name,
+                        asset_id: asset.id,
+                        asset_uri: savedUri,
+                        url: savedUri,
+                        content_type: mime,
+                        size: data.byteLength
+                    };
+                }
+            }
+            // Fallback: write to the storage adapter directly.
+            if (!context.storage) {
+                return {
+                    success: false,
+                    error: "No storage adapter or createAsset interface available — cannot persist asset"
+                };
+            }
+            const key = scopedAssetStorageKey(run, name);
+            const uri = await context.storage.store(key, data, mime);
+            return {
+                success: true,
+                name,
+                uri,
+                content_type: mime,
+                size: data.byteLength
+            };
+        }
+        catch (e) {
+            return {
+                success: false,
+                error: e instanceof Error ? e.message : String(e)
+            };
+        }
+    }
+};
+// ---------------------------------------------------------------------------
+// read_asset
+// ---------------------------------------------------------------------------
+const readAsset = {
+    spec: readAssetSpec,
+    impl: async (run, params) => {
+        const context = run.context;
+        try {
+            const name = params.name;
+            if (!isString(name) || !name) {
+                return {
+                    success: false,
+                    error: "name is required and must be a string"
+                };
+            }
+            let data = null;
+            let matchedUri = null;
+            // Storage-only hosts keep their fallback files under the run's project,
+            // so a filename can never cross a project boundary.
+            const looksLikeUri = name.includes("://") || name.startsWith("/api/");
+            if (!looksLikeUri && context.storage) {
+                const key = scopedAssetStorageKey(run, name);
+                for (const uri of [`memory://${key}`, `file://${key}`, `s3://${key}`]) {
+                    const result = await context.storage.retrieve(uri);
+                    if (result) {
+                        data = result;
+                        matchedUri = uri;
+                        break;
+                    }
+                }
+            }
+            // Everything an agent actually holds: the `asset://<id>` URI a
+            // generation returns (with or without an extension), the bare id off
+            // `asset_id`, a `/api/storage/` key, a `package://` URI, a data URI.
+            // `loadMediaRefBytes` is the one resolver that knows all of them, so
+            // this tool and `read_media_bytes` cannot disagree about what a ref means.
+            if (!data) {
+                // A bare name is tried as an asset id in canonical form:
+                // `loadMediaRefBytes` reads `asset_id` only when there is no uri, so
+                // handing it both a raw name and the id would resolve neither.
+                const ref = looksLikeUri
+                    ? { uri: name }
+                    : { uri: `asset://${name}`, asset_id: name };
+                try {
+                    const assetId = assetIdFromReference(name);
+                    if (assetId &&
+                        !isRunProjectStorageReference(run, name) &&
+                        !(await findRunAsset(run, assetId))) {
+                        throw new Error(`Asset ${assetId} was not found`);
+                    }
+                    data = await loadMediaRefBytes(ref, context);
+                    if (data)
+                        matchedUri = name;
+                }
+                catch {
+                    // A context without an asset resolver or storage cannot answer this
+                    // form. That is "not found" for the caller, not a different failure
+                    // to report — the message below names the forms that do work.
+                }
+            }
+            if (!data) {
+                return {
+                    success: false,
+                    error: `Asset not found: ${name}. Pass the asset:// URI a generation ` +
+                        `returned (its asset_uri), the asset_id itself, or a ` +
+                        `/api/storage/ key — and use list_assets or asset_search to find ` +
+                        `one. For a workspace file use read_file instead.`
+                };
+            }
+            // Decode as UTF-8 only when the bytes actually are UTF-8. TextDecoder
+            // with fatal:false would silently turn binary (PNG, audio, msgpack) into
+            // U+FFFD garbage and still report success; for non-text bytes return
+            // base64 the caller can round-trip instead.
+            let content;
+            let contentBase64;
+            try {
+                content = new TextDecoder("utf-8", { fatal: true }).decode(data);
+            }
+            catch {
+                contentBase64 = Buffer.from(data).toString("base64");
+                content = "";
+            }
+            const result = {
+                success: true,
+                name,
+                content,
+                binary: contentBase64 !== undefined,
+                uri: matchedUri,
+                size: data.byteLength
+            };
+            if (contentBase64 !== undefined)
+                result.content_base64 = contentBase64;
+            return result;
+        }
+        catch (e) {
+            return {
+                success: false,
+                error: e instanceof Error ? e.message : String(e)
+            };
+        }
+    }
+};
+const assetSearch = {
+    spec: assetSearchSpec,
+    impl: async (run, params) => {
+        const userId = run.context.userId;
+        if (!userId) {
+            return {
+                success: false,
+                error: "No user context; cannot search assets."
+            };
+        }
+        const query = isString(params.query) ? params.query.trim() : "";
+        const contentType = isString(params.content_type) && params.content_type.trim()
+            ? params.content_type.trim()
+            : undefined;
+        const limit = resolveLimit(params.limit);
+        try {
+            const { Asset } = await import("@nodetool-ai/models");
+            const search = {
+                limit,
+                projectId: resolveProjectId(run, {})
+            };
+            if (contentType)
+                search.contentType = contentType;
+            const [rows] = await Asset.searchAssetsGlobal(userId, query, search);
+            const assets = rows
+                .filter((a) => a.content_type !== "folder")
+                .map((a) => toHandle(a));
+            return { success: true, count: assets.length, assets };
+        }
+        catch (e) {
+            return {
+                success: false,
+                error: e instanceof Error ? e.message : String(e)
+            };
+        }
+    }
+};
+const assetList = {
+    spec: assetListSpec,
+    impl: async (run, params) => {
+        const userId = run.context.userId;
+        if (!userId) {
+            return { success: false, error: "No user context; cannot list assets." };
+        }
+        const contentType = isString(params.content_type) && params.content_type.trim()
+            ? params.content_type.trim()
+            : undefined;
+        const limit = resolveLimit(params.limit);
+        try {
+            // `searchAssetsGlobal` with an empty query orders by created_at DESC and
+            // supports a content_type prefix — exactly a "recent assets" listing.
+            const { Asset } = await import("@nodetool-ai/models");
+            const recent = {
+                limit,
+                projectId: resolveProjectId(run, {})
+            };
+            if (contentType)
+                recent.contentType = contentType;
+            const [rows] = await Asset.searchAssetsGlobal(userId, "", recent);
+            const assets = rows
+                .filter((a) => a.content_type !== "folder")
+                .map((a) => toHandle(a));
+            return { success: true, count: assets.length, assets };
+        }
+        catch (e) {
+            return {
+                success: false,
+                error: e instanceof Error ? e.message : String(e)
+            };
+        }
+    }
+};
+const DEFAULT_LIST_LIMIT = 25;
+const listImagesImpl = async (run, params) => {
+    const userId = run.context.userId;
+    if (!userId) {
+        return { error: "No user context; cannot list assets." };
+    }
+    const limitParam = Number(params["limit"]);
+    const limit = Number.isFinite(limitParam) && limitParam > 0
+        ? Math.min(Math.floor(limitParam), 100)
+        : DEFAULT_LIST_LIMIT;
+    const query = isString(params["query"]) ? params["query"].trim() : "";
+    try {
+        // searchAssetsGlobal does a content_type prefix match, so "image/"
+        // returns the whole image family; an empty query matches all names.
+        const { Asset } = await import("@nodetool-ai/models");
+        const [rows] = await Asset.searchAssetsGlobal(userId, query, {
+            contentType: "image/",
+            projectId: resolveProjectId(run, {}),
+            limit
+        });
+        const images = rows
+            .filter((a) => isString(a.content_type) && a.content_type.startsWith("image/"))
+            .slice(0, limit)
+            .map((a) => {
+            const metadata = a.metadata ?? {};
+            return {
+                image_id: a.id,
+                name: a.name,
+                content_type: a.content_type,
+                size: a.size ?? null,
+                width: isNumber(metadata["width"]) ? metadata["width"] : null,
+                height: isNumber(metadata["height"]) ? metadata["height"] : null
+            };
+        });
+        return {
+            images,
+            count: images.length,
+            hint: "Call view_image({ image_id }) to load the pixels of one."
+        };
+    }
+    catch (e) {
+        return {
+            error: `Could not list image assets: ${e instanceof Error ? e.message : String(e)}`
+        };
+    }
+};
+const listImages = {
+    spec: listImagesSpec,
+    impl: listImagesImpl
+};
+// ---------------------------------------------------------------------------
+// view_image
+// ---------------------------------------------------------------------------
+/** Parse a `data:<mime>;base64,<payload>` URI into bytes + mime. */
+function parseDataUri(uri) {
+    const match = /^data:([^;,]+)?(;base64)?,([\s\S]*)$/.exec(uri);
+    if (!match)
+        return null;
+    const mimeType = match[1] || "image/png";
+    const isBase64 = Boolean(match[2]);
+    const payload = match[3] ?? "";
+    const bytes = isBase64
+        ? new Uint8Array(Buffer.from(payload, "base64"))
+        : new TextEncoder().encode(decodeURIComponent(payload));
+    return { bytes, mimeType };
+}
+const LOW_DETAIL_MAX_SIDE = 768;
+/**
+ * Longest side an SVG is rendered at before any crop or downscale. A vector
+ * declares whatever size it likes — a 24px icon renders to 24 pixels, which is
+ * not something a model can read — so the render is sized for reading, not for
+ * the markup's own units.
+ */
+const SVG_RENDER_MIN_SIDE = 1536;
+function parseRegion(value) {
+    if (!isObjectLike(value))
+        return undefined;
+    const r = value;
+    const x = Number(r["x"]);
+    const y = Number(r["y"]);
+    const width = Number(r["width"]);
+    const height = Number(r["height"]);
+    if (![x, y, width, height].every((n) => Number.isFinite(n)) ||
+        width <= 0 ||
+        height <= 0) {
+        return undefined;
+    }
+    return { x, y, width, height };
+}
+/**
+ * Put pixels in the temp store and answer the reference that goes in the
+ * message.
+ *
+ * `view_image` answers with a reference, never with base64. The bytes of one
+ * screenshot serialize to ~270k characters, and the message they ride in is
+ * re-sent on every following round of the tool loop — which is how a three-look
+ * turn reached 439k estimated prompt tokens and was refused by the budget. The
+ * provider boundary inlines the bytes for the one request that needs them
+ * (`generateLoop`'s `resolveMedia`), so the conversation carries a URI.
+ *
+ * Answers null when this run has no temp store; the caller then falls back to a
+ * data URI, because a run with nowhere to put the bytes must still be able to
+ * look at the image.
+ */
+async function storeViewedImage(run, context, bytes, mimeType) {
+    if (!context.storage)
+        return null;
+    const ext = MIME_TO_EXT[mimeType] ?? "png";
+    const key = scopedAssetStorageKey(run, `view-${crypto.randomUUID()}.${ext}`);
+    try {
+        await context.storage.store(key, bytes, mimeType);
+        return `/api/storage/${key}`;
+    }
+    catch {
+        // Storing is an optimization over shipping base64; a failure is not one the
+        // caller has to handle, and the data-URI fallback still shows the image.
+        return null;
+    }
+}
+const viewImageImpl = async (run, params) => {
+    const context = run.context;
+    const imageId = String(params["image_id"] ?? "").trim();
+    if (!imageId) {
+        return { error: "image_id is required" };
+    }
+    const region = parseRegion(params["region"]);
+    const detail = params["detail"] === "low" ? "low" : "high";
+    const maxSide = detail === "low" ? LOW_DETAIL_MAX_SIDE : undefined;
+    // Resolve the source to bytes when we can (so region/detail actually apply);
+    // fall back to letting the provider fetch a remote URL.
+    let sourceBytes = null;
+    let sourceMime = "image/png";
+    let passthroughUri;
+    let resolveError;
+    // The stored reference to hand back when nothing re-encodes the bytes: the
+    // asset is already in storage, so the message can name it instead of
+    // carrying it.
+    let sourceRef;
+    let storedAssetId;
+    if (requiresStoredAssetOwnership(imageId) &&
+        !isRunProjectStorageReference(run, imageId)) {
+        const assetId = assetIdFromReference(imageId);
+        const asset = assetId ? await findRunAsset(run, assetId) : null;
+        if (!asset) {
+            return { error: `Asset ${assetId ?? imageId} was not found.` };
+        }
+        storedAssetId = asset.id;
+    }
+    if (imageId.startsWith("data:")) {
+        const parsed = parseDataUri(imageId);
+        if (!parsed)
+            return { error: "Malformed data: URI for image_id" };
+        sourceBytes = parsed.bytes;
+        sourceMime = parsed.mimeType;
+    }
+    else if (/^https?:\/\//i.test(imageId)) {
+        // Screen it. This uri goes out as `image_content.uri` for the *provider* to
+        // fetch, so an unscreened one is not an SSRF against this host — the reach
+        // it buys is the provider's network, not ours. It was still the only
+        // model-supplied URL in this module that skipped the guard every other one
+        // meets: `save_asset` refuses exactly these through `safeFetch`, and a
+        // model that cannot tell which of two image tools screens its input is
+        // being taught that the boundary is arbitrary.
+        if (!isSafePublicHttpsUrl(imageId)) {
+            return {
+                error: `Refused to load image from "${imageId}". ` +
+                    `Only public https:// URLs are handed to the vision provider — ` +
+                    `plain http, localhost, and private or link-local addresses are refused. ` +
+                    `Pass an asset id, an asset:// URI, or a data: URI instead.`
+            };
+        }
+        passthroughUri = imageId;
+    }
+    else {
+        try {
+            const temporary = hasTemporaryImageHandle(context, imageId);
+            const assetId = assetIdFromReference(imageId);
+            if (assetId && !requiresStoredAssetOwnership(imageId) && !temporary) {
+                const asset = await findRunAsset(run, assetId);
+                if (!asset)
+                    return { error: `Asset ${assetId} was not found.` };
+                storedAssetId = asset.id;
+            }
+            const suffix = imageId.startsWith("asset://")
+                ? imageId.match(/\.[A-Za-z0-9]{1,8}$/)?.[0] ?? ""
+                : "";
+            const bytes = temporary
+                ? await context.storage?.retrieve(context.storage.uriForKey(imageId))
+                : (await context.resolveAssetBytes(storedAssetId ? `asset://${storedAssetId}${suffix}` : imageId)).bytes;
+            if (bytes && bytes.length > 0) {
+                sourceBytes = bytes;
+                // `sniffImageMime` falls back to PNG for anything it does not
+                // recognize, and SVG has no magic number — so an SVG asset arrived
+                // labeled `image/png`, passed the provider-safe check below, and was
+                // shipped to the model as markup wearing a PNG label.
+                sourceMime = isSvgBytes(bytes) ? SVG_MIME : sniffImageMime(bytes);
+                sourceRef = storedAssetId
+                    ? `asset://${storedAssetId}${suffix}`
+                    : temporary
+                        ? `/api/storage/${imageId}`
+                        : imageId.startsWith("asset://")
+                            ? imageId
+                            : imageId.startsWith("/api/storage/")
+                                ? imageId
+                                : `asset://${imageId}`;
+            }
+        }
+        catch (e) {
+            // Keep why. A caller that passed a perfectly good asset id — one
+            // `save_asset` just minted — gets this same branch when the row exists
+            // but its bytes do not resolve (no configured storage, an unreachable
+            // bucket, a revoked credential). Told only "pass an asset id", an agent
+            // re-passes the id it already has, then guesses URL shapes; the reason
+            // is the one thing that stops that loop.
+            resolveError = e instanceof Error ? e.message : String(e);
+        }
+    }
+    if (!sourceBytes && !passthroughUri) {
+        return {
+            error: `Could not load image "${imageId}". ` +
+                (resolveError
+                    ? `Resolving it failed: ${resolveError}. `
+                    : "Nothing resolved for it. ") +
+                `Accepted: an asset id, an asset:// URI, a public https:// URL, or a ` +
+                `data: URI. A localhost or private-address URL is refused, so guessing ` +
+                `a local server URL will not work — if you already hold the bytes, ` +
+                `pass them as a data: URI.`
+        };
+    }
+    let outUri = passthroughUri;
+    let outMime = sourceMime;
+    let width = 0;
+    let height = 0;
+    const notes = [];
+    if (sourceBytes && sourceMime === SVG_MIME) {
+        // A vector has no pixels until something renders it, and no vision provider
+        // renders one. Rasterize here so an agent can look at the SVG it just
+        // wrote; a crop or a downscale then applies to the render, exactly as for
+        // any other source.
+        try {
+            const raster = await rasterizeSvg(sourceBytes, {
+                minSide: maxSide ?? SVG_RENDER_MIN_SIDE
+            });
+            sourceBytes = raster.data;
+            sourceMime = "image/png";
+            // The stored asset is the markup; what the model looks at is this render.
+            sourceRef = undefined;
+            // Carry the render's size into the result even when nothing downstream
+            // re-encodes: "how big is what I am looking at" is the SVG's own answer
+            // only until it is rasterized.
+            width = raster.width;
+            height = raster.height;
+            notes.push(`Rendered SVG at ${raster.width}×${raster.height}.`);
+        }
+        catch (e) {
+            return {
+                error: `Could not render the SVG "${imageId}": ` +
+                    `${e instanceof Error ? e.message : String(e)}`
+            };
+        }
+    }
+    if (sourceBytes) {
+        // Vision providers only accept these formats; anything else must be
+        // re-encoded to PNG before it can be shown to the model.
+        const PROVIDER_SAFE_MIMES = new Set([
+            "image/png",
+            "image/jpeg",
+            "image/gif",
+            "image/webp"
+        ]);
+        const needsTransform = Boolean(region) ||
+            maxSide !== undefined ||
+            !PROVIDER_SAFE_MIMES.has(sourceMime);
+        if (!needsTransform) {
+            // No crop or downscale requested and the source is a provider-safe
+            // format: show the original bytes unchanged. Re-encoding a
+            // well-compressed source through the codec can bloat it many-fold (a
+            // 44KB screenshot PNG re-encoded to >1MB) for no gain.
+            outUri =
+                sourceRef ??
+                    (await storeViewedImage(run, context, sourceBytes, sourceMime)) ??
+                    `data:${sourceMime};base64,${Buffer.from(sourceBytes).toString("base64")}`;
+            outMime = sourceMime;
+        }
+        else {
+            try {
+                const extract = { sourceMime };
+                if (region)
+                    extract.region = region;
+                if (maxSide)
+                    extract.maxSide = maxSide;
+                const prepared = await extractImageRegion(sourceBytes, extract);
+                // width/height 0 signals the no-sharp pass-through: the bytes were
+                // NOT re-encoded, so keep the true source mime rather than a
+                // fabricated one (mislabeling makes the provider reject the image).
+                outMime =
+                    prepared.width === 0 && prepared.height === 0
+                        ? sourceMime
+                        : prepared.mimeType;
+                outUri =
+                    (await storeViewedImage(run, context, prepared.data, outMime)) ??
+                        `data:${outMime};base64,${Buffer.from(prepared.data).toString("base64")}`;
+                width = prepared.width;
+                height = prepared.height;
+            }
+            catch (e) {
+                // Codec failed unexpectedly: ship the original bytes uncropped.
+                outUri =
+                    sourceRef ??
+                        (await storeViewedImage(run, context, sourceBytes, sourceMime)) ??
+                        `data:${sourceMime};base64,${Buffer.from(sourceBytes).toString("base64")}`;
+                notes.push(`Could not crop/resize (${e instanceof Error ? e.message : String(e)}); showing full image.`);
+            }
+        }
+    }
+    else if (region) {
+        notes.push("Region crop is not applied to remote URLs; showing the full image.");
+    }
+    const question = isString(params["question"])
+        ? params["question"].trim()
+        : "";
+    const dims = width && height ? ` (${width}×${height})` : "";
+    const regionNote = region
+        ? ` region ${region.x},${region.y} ${region.width}×${region.height}`
+        : "";
+    const note = question ||
+        `Image ${imageId}${regionNote}${dims}:` +
+            (notes.length ? ` ${notes.join(" ")}` : "");
+    const result = {
+        ok: true,
+        image_id: imageId,
+        mimeType: outMime,
+        detail,
+        note,
+        image_content: { uri: outUri, mimeType: outMime }
+    };
+    if (width)
+        result.width = width;
+    if (height)
+        result.height = height;
+    return result;
+};
+const viewImage = {
+    spec: viewImageSpec,
+    impl: viewImageImpl
+};
+/** Every asset capability, in the order `getAllMcpTools` offered them. */
+/**
+ * Rename or re-file one of the caller's own assets.
+ *
+ * Deliberately narrow. `Asset.find` is user-scoped, so another user's asset
+ * reads as missing; a move goes through `Asset.validateParent`, the same rule
+ * the tRPC route applies, so a run cannot detach a subtree by moving a folder
+ * under its own descendant. Content type is not settable: the stored file name
+ * is derived from it, so changing it without re-uploading the bytes would
+ * leave the asset pointing at a file nobody wrote.
+ */
+const updateAsset = {
+    spec: updateAssetSpec,
+    impl: async (run, params) => {
+        const userId = userIdOf(run.context);
+        const assetId = String(params["asset_id"]);
+        const asset = await findRunAsset(run, assetId);
+        if (!asset)
+            return { error: `Asset ${assetId} was not found.` };
+        let touched = false;
+        if (isString(params["name"]) && params["name"]) {
+            asset.name = params["name"];
+            touched = true;
+        }
+        if (isString(params["parent_id"]) && params["parent_id"]) {
+            if (params["parent_id"] !== userId &&
+                !(await findRunAsset(run, params["parent_id"]))) {
+                return { error: "Parent folder not found" };
+            }
+            const { Asset } = await import("@nodetool-ai/models");
+            const problem = await Asset.validateParent(userId, asset, params["parent_id"]);
+            if (problem)
+                return { error: problem };
+            asset.parent_id = params["parent_id"];
+            touched = true;
+        }
+        if (!touched) {
+            return { error: "Nothing to update — pass name or parent_id." };
+        }
+        await asset.save();
+        return assetRecord(asset);
+    }
+};
+export const ASSET_CAPABILITIES = [
+    listAssets,
+    getAsset,
+    saveAsset,
+    readAsset,
+    assetSearch,
+    assetList,
+    listImages,
+    viewImage,
+    updateAsset
+];
+export const module = {
+    module: "assets",
+    exports: ASSET_CAPABILITIES
+};
+export { listAssets, getAsset, saveAsset, readAsset, assetSearch, assetList, listImages, viewImage, updateAsset };
+//# sourceMappingURL=assets.js.map