@pellux/goodvibes-daemon-sdk 0.30.2 → 0.33.0

package/README.md

@@ -1,8 +1,8 @@
 # @pellux/goodvibes-daemon-sdk
 
-Internal workspace package backing `@pellux/goodvibes-sdk/daemon`.
+Public GoodVibes daemon package for embeddable route contracts, dispatchers, handler builders, and daemon-side helpers.
 
-Consumers should install `@pellux/goodvibes-sdk` and import this surface from the umbrella package.
+Most applications should install `@pellux/goodvibes-sdk` and import `@pellux/goodvibes-sdk/daemon`. Install this package directly when you only need the daemon embedding subset.
 
 Consumer import:
 

package/dist/api-router.d.ts

@@ -2,8 +2,10 @@ import type { DaemonApiRouteHandlers } from './context.js';
 /**
  * Optional extension dispatchers injected alongside the standard route set.
  * Each dispatcher is tried in order after the built-in routes; the first
- * non-null result wins. Use this to wire companion-chat, provider, or other
- * feature routes into the standalone daemon without modifying core route files.
+ * non-null result wins. Exceptions thrown by an extension propagate to the
+ * caller, matching built-in route behavior. Use this to wire companion-chat,
+ * provider, or other feature routes into the standalone daemon without
+ * modifying core route files.
  */
 export type DaemonApiRouteExtension = (req: Request) => Promise<Response | null> | Response | null;
 export declare function dispatchDaemonApiRoutes(req: Request, handlers: DaemonApiRouteHandlers, extensions?: readonly DaemonApiRouteExtension[]): Promise<Response | null>;

package/dist/api-router.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"api-router.d.ts","sourceRoot":"","sources":["../src/api-router.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AAE3D;;;;;GAKG;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,QAAQ,GAAG,IAAI,CAAC;AAEnG,wBAAsB,uBAAuB,CAC3C,GAAG,EAAE,OAAO,EACZ,QAAQ,EAAE,sBAAsB,EAChC,UAAU,CAAC,EAAE,SAAS,uBAAuB,EAAE,GAC9C,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAgB1B"}
+{"version":3,"file":"api-router.d.ts","sourceRoot":"","sources":["../src/api-router.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AAE3D;;;;;;;GAOG;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,QAAQ,GAAG,IAAI,CAAC;AAEnG,wBAAsB,uBAAuB,CAC3C,GAAG,EAAE,OAAO,EACZ,QAAQ,EAAE,sBAAsB,EAChC,UAAU,CAAC,EAAE,SAAS,uBAAuB,EAAE,GAC9C,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAkB1B"}

package/dist/api-router.js

@@ -4,18 +4,26 @@ import { dispatchRemoteRoutes } from './remote.js';
 import { dispatchSessionRoutes } from './sessions.js';
 import { dispatchTaskRoutes } from './tasks.js';
 export async function dispatchDaemonApiRoutes(req, handlers, extensions) {
-    const coreResult = (await dispatchRemoteRoutes(req, handlers)
-        ?? await dispatchOperatorRoutes(req, handlers)
-        ?? await dispatchAutomationRoutes(req, handlers)
-        ?? await dispatchSessionRoutes(req, handlers)
-        ?? await dispatchTaskRoutes(req, handlers));
-    if (coreResult !== null)
-        return coreResult;
+    let result = await dispatchRemoteRoutes(req, handlers);
+    if (result !== null)
+        return result;
+    result = await dispatchOperatorRoutes(req, handlers);
+    if (result !== null)
+        return result;
+    result = await dispatchAutomationRoutes(req, handlers);
+    if (result !== null)
+        return result;
+    result = await dispatchSessionRoutes(req, handlers);
+    if (result !== null)
+        return result;
+    result = await dispatchTaskRoutes(req, handlers);
+    if (result !== null)
+        return result;
     if (extensions) {
         for (const extension of extensions) {
-            const result = await extension(req);
-            if (result !== null)
-                return result;
+            const extResult = await extension(req);
+            if (extResult !== null)
+                return extResult;
         }
     }
     return null;

package/dist/artifact-upload.d.ts

@@ -4,15 +4,15 @@ export interface ArtifactStoreUploadLike {
     getMaxBytes?(): number;
     createFromStream?(input: {
         readonly stream: ReadableStream<Uint8Array> | AsyncIterable<Uint8Array | Buffer | string> | Iterable<Uint8Array | Buffer | string>;
-        readonly kind?: string;
-        readonly mimeType?: string;
-        readonly filename?: string;
-        readonly sourceUri?: string;
-        readonly sizeBytes?: number;
-        readonly retentionMs?: number;
-        readonly acquisitionMode?: string;
-        readonly fetchMode?: string;
-        readonly metadata?: Record<string, unknown>;
+        readonly kind?: string | undefined;
+        readonly mimeType?: string | undefined;
+        readonly filename?: string | undefined;
+        readonly sourceUri?: string | undefined;
+        readonly sizeBytes?: number | undefined;
+        readonly retentionMs?: number | undefined;
+        readonly acquisitionMode?: string | undefined;
+        readonly fetchMode?: string | undefined;
+        readonly metadata?: Record<string, unknown> | undefined;
     }): Promise<unknown>;
 }
 export interface ArtifactUploadResult {

package/dist/artifact-upload.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"artifact-upload.d.ts","sourceRoot":"","sources":["../src/artifact-upload.ts"],"names":[],"mappings":"AAMA,MAAM,MAAM,sBAAsB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAE7D,MAAM,WAAW,uBAAuB;IACtC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACzD,WAAW,CAAC,IAAI,MAAM,CAAC;IACvB,gBAAgB,CAAC,CAAC,KAAK,EAAE;QACvB,QAAQ,CAAC,MAAM,EACX,cAAc,CAAC,UAAU,CAAC,GAC1B,aAAa,CAAC,UAAU,GAAG,MAAM,GAAG,MAAM,CAAC,GAC3C,QAAQ,CAAC,UAAU,GAAG,MAAM,GAAG,MAAM,CAAC,CAAC;QAC3C,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAC5B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAC5B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAC9B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;QAClC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;QAC5B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAC7C,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACtB;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,sBAAsB,CAAC;CACzC;AA+BD,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAGrE;AAED,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAE7D;AAED,wBAAsB,+BAA+B,CACnD,aAAa,EAAE,uBAAuB,EACtC,GAAG,EAAE,OAAO,GACX,OAAO,CAAC,oBAAoB,GAAG,QAAQ,CAAC,CAM1C"}
+{"version":3,"file":"artifact-upload.d.ts","sourceRoot":"","sources":["../src/artifact-upload.ts"],"names":[],"mappings":"AAOA,MAAM,MAAM,sBAAsB,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAE7D,MAAM,WAAW,uBAAuB;IACtC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACzD,WAAW,CAAC,IAAI,MAAM,CAAC;IACvB,gBAAgB,CAAC,CAAC,KAAK,EAAE;QACvB,QAAQ,CAAC,MAAM,EACX,cAAc,CAAC,UAAU,CAAC,GAC1B,aAAa,CAAC,UAAU,GAAG,MAAM,GAAG,MAAM,CAAC,GAC3C,QAAQ,CAAC,UAAU,GAAG,MAAM,GAAG,MAAM,CAAC,CAAC;QAC3C,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACnC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACvC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACvC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACxC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACxC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC1C,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QAC9C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;QACxC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;KACzD,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACtB;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,sBAAsB,CAAC;CACzC;AA+BD,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAGrE;AAED,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAE7D;AAED,wBAAsB,+BAA+B,CACnD,aAAa,EAAE,uBAAuB,EACtC,GAAG,EAAE,OAAO,GACX,OAAO,CAAC,oBAAoB,GAAG,QAAQ,CAAC,CAM1C"}

package/dist/artifact-upload.js

@@ -3,6 +3,7 @@ import { mkdtemp, open, rm } from 'node:fs/promises';
 import { tmpdir } from 'node:os';
 import { join } from 'node:path';
 import { GoodVibesSdkError } from '@pellux/goodvibes-errors';
+import { jsonErrorResponse } from './error-response.js';
 const JSON_FIELD_NAMES = new Set(['metadata', 'target', 'options']);
 const MAX_MULTIPART_FIELD_BYTES = 1024 * 1024;
 const MAX_MULTIPART_BODY_OVERHEAD_BYTES = MAX_MULTIPART_FIELD_BYTES;
@@ -61,8 +62,7 @@ function parseJsonField(value, fieldName) {
     try {
         return JSON.parse(value);
     }
-    catch (error) {
-        void error;
+    catch {
         throw artifactUploadError(`Invalid JSON in multipart field ${fieldName}.`);
     }
 }
@@ -86,7 +86,7 @@ function readArtifactId(artifact) {
         if (typeof id === 'string' && id.trim().length > 0)
             return id;
     }
-    return Response.json({ error: 'Artifact store returned an artifact without an id.' }, { status: 500 });
+    return jsonErrorResponse({ error: 'Artifact store returned an artifact without an id.' }, { status: 500 });
 }
 function isFileLike(value) {
     return typeof value === 'object'
@@ -101,21 +101,23 @@ async function createArtifactFromMultipart(artifactStore, req) {
     try {
         form = await req.formData();
     }
-    catch (error) {
-        void error;
-        return Response.json({ error: 'Invalid multipart upload.' }, { status: 400 });
+    catch {
+        return jsonErrorResponse({ error: 'Invalid multipart upload.' }, { status: 400 });
     }
     const fields = {};
     let file = null;
     for (const [name, value] of form.entries()) {
         if (typeof value === 'string') {
+            if (Buffer.byteLength(value, 'utf8') > MAX_MULTIPART_FIELD_BYTES) {
+                return jsonErrorResponse({ error: `Multipart field ${name} is too large.` }, { status: 413 });
+            }
             try {
                 const parsed = parseUploadField(name, value);
                 if (parsed !== undefined)
                     fields[name] = parsed;
             }
             catch (error) {
-                return Response.json({ error: error instanceof Error ? error.message : String(error) }, { status: 400 });
+                return jsonErrorResponse({ error: error instanceof Error ? error.message : String(error) }, { status: 400 });
             }
             continue;
         }
@@ -124,11 +126,13 @@ async function createArtifactFromMultipart(artifactStore, req) {
         }
     }
     if (!file)
-        return Response.json({ error: 'Multipart upload requires a file field.' }, { status: 400 });
+        return jsonErrorResponse({ error: 'Multipart upload requires a file field.' }, { status: 400 });
     const maxBytes = artifactStore.getMaxBytes?.();
     if (typeof maxBytes === 'number' && typeof file.size === 'number' && file.size > maxBytes) {
-        return Response.json({ error: `Artifact exceeds the ${maxBytes}-byte limit.` }, { status: 413 });
+        return jsonErrorResponse({ error: `Artifact exceeds the ${maxBytes}-byte limit.` }, { status: 413 });
     }
+    // Some FormData implementations omit `File.size`; createFromStream performs
+    // the authoritative streaming byte-count check for those uploads.
     const artifact = await createArtifactFromStream(artifactStore, {
         stream: file.stream(),
         fields,
@@ -156,7 +160,7 @@ async function createArtifactFromStreamingMultipart(artifactStore, req) {
         return artifactId instanceof Response ? artifactId : { artifact, artifactId, fields: spooled.fields };
     }
     catch (error) {
-        return Response.json({ error: error instanceof Error ? error.message : String(error) }, { status: 400 });
+        return jsonErrorResponse(error, { status: error instanceof GoodVibesSdkError && error.status ? error.status : 400 });
     }
     finally {
         await spooled?.cleanup();
@@ -164,14 +168,14 @@ async function createArtifactFromStreamingMultipart(artifactStore, req) {
 }
 async function createArtifactFromRawBody(artifactStore, req) {
     if (!req.body)
-        return Response.json({ error: 'Raw artifact upload requires a request body.' }, { status: 400 });
+        return jsonErrorResponse({ error: 'Raw artifact upload requires a request body.' }, { status: 400 });
     const url = new URL(req.url);
     const fields = readFieldsFromSearchParams(url.searchParams);
     const contentType = req.headers.get('content-type')?.split(';')[0]?.trim();
     const maxBytes = artifactStore.getMaxBytes?.();
     const sizeBytes = readContentLength(req);
     if (typeof maxBytes === 'number' && typeof sizeBytes === 'number' && sizeBytes > maxBytes) {
-        return Response.json({ error: `Artifact exceeds the ${maxBytes}-byte limit.` }, { status: 413 });
+        return jsonErrorResponse({ error: `Artifact exceeds the ${maxBytes}-byte limit.` }, { status: 413 });
     }
     const artifact = await createArtifactFromStream(artifactStore, {
         stream: req.body,
@@ -209,8 +213,7 @@ function readFieldsFromSearchParams(params) {
             if (parsed !== undefined)
                 fields[name] = parsed;
         }
-        catch (error) {
-            void error;
+        catch {
             fields[name] = value;
         }
     }
@@ -223,14 +226,16 @@ function readContentLength(req) {
 function filenameFromContentDisposition(header) {
     if (!header)
         return undefined;
+    // Minimal RFC 5987 support for filename*=UTF-8''... values. Complex
+    // parameter continuations are intentionally unsupported by this lightweight
+    // daemon helper; callers should prefer multipart filename metadata.
     const match = header.match(/filename\*?=(?:UTF-8''|")?([^";]+)/i);
     if (!match?.[1])
         return undefined;
     try {
         return decodeURIComponent(match[1].replace(/^"|"$/g, ''));
     }
-    catch (error) {
-        void error;
+    catch {
         return match[1].replace(/^"|"$/g, '');
     }
 }
@@ -244,8 +249,7 @@ function decodeHeaderValue(value) {
     try {
         return decodeURIComponent(unquoted.replace(/^UTF-8''/i, ''));
     }
-    catch (error) {
-        void error;
+    catch {
         return unquoted;
     }
 }
@@ -259,6 +263,10 @@ function parseMultipartPartHeaders(headerText) {
     }
     const disposition = headers.get('content-disposition') ?? '';
     const output = {};
+    // Lightweight multipart parser: supports ordinary parameters without
+    // embedded semicolons plus filename*=UTF-8''... values. RFC 5987
+    // continuations and semicolons inside quoted values are intentionally out of
+    // scope for this daemon helper.
     for (const segment of disposition.split(';').slice(1)) {
         const [rawKey, ...rawValue] = segment.split('=');
         const key = rawKey?.trim().toLowerCase();
@@ -272,7 +280,7 @@ function parseMultipartPartHeaders(headerText) {
     }
     const contentType = headers.get('content-type');
     if (contentType)
-        output.contentType = contentType.split(';')[0]?.trim();
+        output.contentType = contentType.split(';')[0]?.trim() ?? '';
     return output;
 }
 async function spoolMultipartUpload(req, maxFileBytes) {

package/dist/auth-helpers.d.ts

@@ -0,0 +1,9 @@
+import type { DaemonRuntimeRouteContext } from './runtime-route-types.js';
+/**
+ * Guard helper: returns the admin-denied response if the caller lacks admin
+ * privileges, otherwise calls `next()` and returns its result.
+ *
+ * Shared across all daemon runtime route files to avoid duplication.
+ */
+export declare function withAdmin(context: DaemonRuntimeRouteContext, req: Request, next: () => Response | Promise<Response>): Response | Promise<Response>;
+//# sourceMappingURL=auth-helpers.d.ts.map

package/dist/auth-helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth-helpers.d.ts","sourceRoot":"","sources":["../src/auth-helpers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AAE1E;;;;;GAKG;AACH,wBAAgB,SAAS,CACvB,OAAO,EAAE,yBAAyB,EAClC,GAAG,EAAE,OAAO,EACZ,IAAI,EAAE,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,GACvC,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,CAG9B"}

package/dist/auth-helpers.js

@@ -0,0 +1,10 @@
+/**
+ * Guard helper: returns the admin-denied response if the caller lacks admin
+ * privileges, otherwise calls `next()` and returns its result.
+ *
+ * Shared across all daemon runtime route files to avoid duplication.
+ */
+export function withAdmin(context, req, next) {
+    const denied = context.requireAdmin(req);
+    return denied ?? next();
+}

package/dist/automation.js

@@ -25,32 +25,32 @@ export async function dispatchAutomationRoutes(req, handlers) {
     if (automationJobMatch && method === 'PATCH')
         return handlers.patchAutomationJob(automationJobMatch[1], req);
     if (automationJobMatch && method === 'DELETE')
-        return handlers.deleteAutomationJob(automationJobMatch[1]);
+        return handlers.deleteAutomationJob(automationJobMatch[1], req);
     const automationJobActionMatch = pathname.match(/^\/api\/automation\/jobs\/([^/]+)\/(enable|disable|pause|resume|run)$/);
     if (automationJobActionMatch && method === 'POST') {
         const [, jobId, action] = automationJobActionMatch;
         if (action === 'run')
-            return handlers.runAutomationJobNow(jobId);
-        return handlers.setAutomationJobEnabled(jobId, action === 'enable' || action === 'resume');
+            return handlers.runAutomationJobNow(jobId, req);
+        return handlers.setAutomationJobEnabled(jobId, action === 'enable' || action === 'resume', req);
     }
     if (pathname === '/api/deliveries' && method === 'GET')
         return handlers.getDeliveries();
     const deliveryMatch = pathname.match(/^\/api\/deliveries\/([^/]+)$/);
     if (deliveryMatch && method === 'GET')
         return handlers.getDelivery(deliveryMatch[1]);
-    if (pathname === '/schedules' && method === 'GET')
+    if (pathname === '/api/automation/schedules' && method === 'GET')
         return handlers.getSchedules();
-    if (pathname === '/schedules' && method === 'POST')
+    if (pathname === '/api/automation/schedules' && method === 'POST')
         return handlers.postSchedule(req);
-    const scheduleIdMatch = pathname.match(/^\/schedules\/([^/]+)$/);
+    const scheduleIdMatch = pathname.match(/^\/api\/automation\/schedules\/([^/]+)$/);
     if (scheduleIdMatch && method === 'DELETE')
-        return handlers.deleteSchedule(scheduleIdMatch[1]);
-    const scheduleActionMatch = pathname.match(/^\/schedules\/([^/]+)\/(enable|disable|run)$/);
+        return handlers.deleteSchedule(scheduleIdMatch[1], req);
+    const scheduleActionMatch = pathname.match(/^\/api\/automation\/schedules\/([^/]+)\/(enable|disable|run)$/);
     if (scheduleActionMatch && method === 'POST') {
         const [, scheduleId, action] = scheduleActionMatch;
         if (action === 'run')
-            return handlers.runScheduleNow(scheduleId);
-        return handlers.setScheduleEnabled(scheduleId, action === 'enable');
+            return handlers.runScheduleNow(scheduleId, req);
+        return handlers.setScheduleEnabled(scheduleId, action === 'enable', req);
     }
     return null;
 }

package/dist/channel-route-types.d.ts

@@ -6,36 +6,36 @@ export interface ChannelAgentToolDefinitionLike {
 }
 export interface ChannelTargetResolutionInput {
     readonly input: string;
-    readonly accountId?: string;
-    readonly preferredKind?: ChannelConversationKind;
-    readonly threadId?: string;
-    readonly sessionId?: string;
-    readonly createIfMissing?: boolean;
-    readonly live?: boolean;
-    readonly metadata?: Record<string, unknown>;
+    readonly accountId?: string | undefined;
+    readonly preferredKind?: ChannelConversationKind | undefined;
+    readonly threadId?: string | undefined;
+    readonly sessionId?: string | undefined;
+    readonly createIfMissing?: boolean | undefined;
+    readonly live?: boolean | undefined;
+    readonly metadata?: Record<string, unknown> | undefined;
 }
 export interface ChannelAuthorizeActionInput {
     readonly actionId: string;
-    readonly actorId?: string;
-    readonly accountId?: string;
-    readonly target?: unknown;
-    readonly metadata?: Record<string, unknown>;
+    readonly actorId?: string | undefined;
+    readonly accountId?: string | undefined;
+    readonly target?: unknown | undefined;
+    readonly metadata?: Record<string, unknown> | undefined;
 }
 export interface ChannelAllowlistInput {
-    readonly add?: readonly string[];
-    readonly remove?: readonly string[];
-    readonly groupId?: string;
-    readonly channelId?: string;
-    readonly workspaceId?: string;
-    readonly kind?: 'user' | 'channel' | 'group';
-    readonly metadata?: Record<string, unknown>;
+    readonly add?: readonly string[] | undefined;
+    readonly remove?: readonly string[] | undefined;
+    readonly groupId?: string | undefined;
+    readonly channelId?: string | undefined;
+    readonly workspaceId?: string | undefined;
+    readonly kind?: 'user' | 'channel' | 'group' | undefined;
+    readonly metadata?: Record<string, unknown> | undefined;
 }
 export interface ChannelDirectoryQuery {
     readonly query: string;
-    readonly scope?: ChannelDirectoryScope;
-    readonly groupId?: string;
-    readonly limit?: number;
-    readonly live?: boolean;
+    readonly scope?: ChannelDirectoryScope | undefined;
+    readonly groupId?: string | undefined;
+    readonly limit?: number | undefined;
+    readonly live?: boolean | undefined;
 }
 export interface ChannelPluginServiceLike {
     listAccounts(surface?: ChannelSurface): Promise<readonly unknown[]>;
@@ -44,7 +44,6 @@ export interface ChannelPluginServiceLike {
     doctor(surface: ChannelSurface, accountId?: string): Promise<unknown | null>;
     listRepairActions(surface: ChannelSurface, accountId?: string): Promise<readonly unknown[]>;
     getLifecycleState(surface: ChannelSurface, accountId?: string): Promise<unknown | null>;
-    migrateLifecycle(surface: ChannelSurface, accountId?: string, input?: JsonRecord | null): Promise<unknown | null>;
     runAccountAction(surface: ChannelSurface, action: ChannelLifecycleAction, accountId: string | undefined, input?: JsonRecord): Promise<unknown | null>;
     listCapabilities(surface?: ChannelSurface): Promise<readonly unknown[]>;
     listTools(surface?: ChannelSurface): Promise<readonly unknown[]>;

package/dist/channel-route-types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"channel-route-types.d.ts","sourceRoot":"","sources":["../src/channel-route-types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEtG,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC;AACpC,MAAM,MAAM,qBAAqB,GAAG,MAAM,CAAC;AAE3C,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;CAC9B;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,aAAa,CAAC,EAAE,uBAAuB,CAAC;IACjD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC;IACnC,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IACxB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC7C;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC7C;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,GAAG,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC;IAC7C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC7C;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,CAAC,EAAE,qBAAqB,CAAC;IACvC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,wBAAwB;IACvC,YAAY,CAAC,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,SAAS,OAAO,EAAE,CAAC,CAAC;IACpE,UAAU,CAAC,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IAChF,cAAc,CAAC,OAAO,EAAE,cAAc,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IACrF,MAAM,CAAC,OAAO,EAAE,cAAc,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IAC7E,iBAAiB,CAAC,OAAO,EAAE,cAAc,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,OAAO,EAAE,CAAC,CAAC;IAC5F,iBAAiB,CAAC,OAAO,EAAE,cAAc,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IACxF,gBAAgB,CACd,OAAO,EAAE,cAAc,EACvB,SAAS,CAAC,EAAE,MAAM,EAClB,KAAK,CAAC,EAAE,UAAU,GAAG,IAAI,GACxB,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IAC3B,gBAAgB,CACd,OAAO,EAAE,cAAc,EACvB,MAAM,EAAE,sBAAsB,EAC9B,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,KAAK,CAAC,EAAE,UAAU,GACjB,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IAC3B,gBAAgB,CAAC,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,SAAS,OAAO,EAAE,CAAC,CAAC;IACxE,SAAS,CAAC,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,SAAS,OAAO,EAAE,CAAC,CAAC;IACjE,cAAc,CAAC,OAAO,CAAC,EAAE,cAAc,GAAG,SAAS,8BAA8B,EAAE,CAAC;IACpF,OAAO,CAAC,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IAC9F,mBAAmB,CAAC,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,SAAS,OAAO,EAAE,CAAC,CAAC;IAC3E,iBAAiB,CAAC,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IAC1G,aAAa,CAAC,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,4BAA4B,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IACrG,oBAAoB,CAAC,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,2BAA2B,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IAC3G,gBAAgB,CAAC,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IACjG,aAAa,CAAC,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IAC9F,UAAU,IAAI,OAAO,CAAC,SAAS,OAAO,EAAE,CAAC,CAAC;IAC1C,cAAc,CAAC,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,SAAS,OAAO,EAAE,CAAC,CAAC;CACpG;AAED,MAAM,WAAW,wBAAwB;IACvC,YAAY,IAAI,SAAS,OAAO,EAAE,CAAC;IACnC,YAAY,CAAC,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACxF,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,OAAO,EAAE,CAAC;CAC9C;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,IAAI,SAAS,OAAO,EAAE,CAAC;CAC5B;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,cAAc,EAAE,wBAAwB,CAAC;IAClD,QAAQ,CAAC,aAAa,EAAE,wBAAwB,CAAC;IACjD,QAAQ,CAAC,aAAa,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,UAAU,GAAG,QAAQ,CAAC,CAAC;IACzE,QAAQ,CAAC,qBAAqB,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,UAAU,GAAG,IAAI,GAAG,QAAQ,CAAC,CAAC;IACxF,QAAQ,CAAC,YAAY,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,QAAQ,GAAG,IAAI,CAAC;IACzD,QAAQ,CAAC,eAAe,EAAE,mBAAmB,CAAC;CAC/C"}
+{"version":3,"file":"channel-route-types.d.ts","sourceRoot":"","sources":["../src/channel-route-types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,uBAAuB,EAAE,sBAAsB,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAEtG,MAAM,MAAM,cAAc,GAAG,MAAM,CAAC;AACpC,MAAM,MAAM,qBAAqB,GAAG,MAAM,CAAC;AAE3C,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;CAC9B;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,aAAa,CAAC,EAAE,uBAAuB,GAAG,SAAS,CAAC;IAC7D,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC/C,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;CACzD;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;CACzD;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,GAAG,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAC7C,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,GAAG,SAAS,CAAC;IACzD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,CAAC;CACzD;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,KAAK,CAAC,EAAE,qBAAqB,GAAG,SAAS,CAAC;IACnD,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;CACrC;AAED,MAAM,WAAW,wBAAwB;IACvC,YAAY,CAAC,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,SAAS,OAAO,EAAE,CAAC,CAAC;IACpE,UAAU,CAAC,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IAChF,cAAc,CAAC,OAAO,EAAE,cAAc,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IACrF,MAAM,CAAC,OAAO,EAAE,cAAc,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IAC7E,iBAAiB,CAAC,OAAO,EAAE,cAAc,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,OAAO,EAAE,CAAC,CAAC;IAC5F,iBAAiB,CAAC,OAAO,EAAE,cAAc,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IACxF,gBAAgB,CACd,OAAO,EAAE,cAAc,EACvB,MAAM,EAAE,sBAAsB,EAC9B,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,KAAK,CAAC,EAAE,UAAU,GACjB,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IAC3B,gBAAgB,CAAC,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,SAAS,OAAO,EAAE,CAAC,CAAC;IACxE,SAAS,CAAC,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,SAAS,OAAO,EAAE,CAAC,CAAC;IACjE,cAAc,CAAC,OAAO,CAAC,EAAE,cAAc,GAAG,SAAS,8BAA8B,EAAE,CAAC;IACpF,OAAO,CAAC,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IAC9F,mBAAmB,CAAC,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,SAAS,OAAO,EAAE,CAAC,CAAC;IAC3E,iBAAiB,CAAC,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IAC1G,aAAa,CAAC,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,4BAA4B,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IACrG,oBAAoB,CAAC,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,2BAA2B,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IAC3G,gBAAgB,CAAC,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IACjG,aAAa,CAAC,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC;IAC9F,UAAU,IAAI,OAAO,CAAC,SAAS,OAAO,EAAE,CAAC,CAAC;IAC1C,cAAc,CAAC,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,qBAAqB,GAAG,OAAO,CAAC,SAAS,OAAO,EAAE,CAAC,CAAC;CACpG;AAED,MAAM,WAAW,wBAAwB;IACvC,YAAY,IAAI,SAAS,OAAO,EAAE,CAAC;IACnC,YAAY,CAAC,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACxF,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,OAAO,EAAE,CAAC;CAC9C;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,IAAI,SAAS,OAAO,EAAE,CAAC;CAC5B;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,cAAc,EAAE,wBAAwB,CAAC;IAClD,QAAQ,CAAC,aAAa,EAAE,wBAAwB,CAAC;IACjD,QAAQ,CAAC,aAAa,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,UAAU,GAAG,QAAQ,CAAC,CAAC;IACzE,QAAQ,CAAC,qBAAqB,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,UAAU,GAAG,IAAI,GAAG,QAAQ,CAAC,CAAC;IACxF,QAAQ,CAAC,YAAY,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,QAAQ,GAAG,IAAI,CAAC;IACzD,QAAQ,CAAC,eAAe,EAAE,mBAAmB,CAAC;CAC/C"}

package/dist/channel-routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"channel-routes.d.ts","sourceRoot":"","sources":["../src/channel-routes.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,cAAc,CAAC;AAE/D,OAAO,KAAK,EAAyC,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AAEjH,wBAAgB,gCAAgC,CAC9C,OAAO,EAAE,yBAAyB,GACjC,0BAA0B,CA+T5B"}
+{"version":3,"file":"channel-routes.d.ts","sourceRoot":"","sources":["../src/channel-routes.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,cAAc,CAAC;AAU/D,OAAO,KAAK,EAAyC,yBAAyB,EAAE,MAAM,0BAA0B,CAAC;AAkBjH,wBAAgB,gCAAgC,CAC9C,OAAO,EAAE,yBAAyB,GACjC,0BAA0B,CAyS5B"}

package/dist/channel-routes.js

@@ -1,5 +1,17 @@
 import { randomUUID } from 'node:crypto';
-import { readBoundedPositiveInteger, readChannelConversationKind, readChannelLifecycleAction } from './route-helpers.js';
+import { jsonErrorResponse } from './error-response.js';
+import { createRouteBodySchema, createRouteBodySchemaRegistry, readBoundedPositiveInteger, readChannelConversationKind, readChannelLifecycleAction, } from './route-helpers.js';
+const channelBodySchemas = createRouteBodySchemaRegistry({
+    optional: createRouteBodySchema('POST /api/channels/* optional body', (body) => body),
+});
+async function readOptionalChannelBody(context, req) {
+    const body = await context.parseOptionalJsonBody(req);
+    if (body instanceof Response)
+        return body;
+    if (body === null)
+        return undefined;
+    return channelBodySchemas.optional.parse(body);
+}
 export function createDaemonChannelRouteHandlers(context) {
     return {
         getSurfaces: () => Response.json({ surfaces: context.surfaceRegistry.list() }),
@@ -11,19 +23,19 @@ export function createDaemonChannelRouteHandlers(context) {
             const account = await context.channelPlugins.getAccount(surface, accountId);
             return account
                 ? Response.json(account)
-                : Response.json({ error: 'Unknown channel account' }, { status: 404 });
+                : jsonErrorResponse({ error: 'Unknown channel account' }, { status: 404 });
         },
         getChannelSetupSchema: async (surface, url) => {
             const schema = await context.channelPlugins.getSetupSchema(surface, url.searchParams.get('accountId') ?? undefined);
             return schema
                 ? Response.json(schema)
-                : Response.json({ error: 'Unknown channel setup schema' }, { status: 404 });
+                : jsonErrorResponse({ error: 'Unknown channel setup schema' }, { status: 404 });
         },
         getChannelDoctor: async (surface, url) => {
             const report = await context.channelPlugins.doctor(surface, url.searchParams.get('accountId') ?? undefined);
             return report
                 ? Response.json(report)
-                : Response.json({ error: 'Unknown channel doctor surface' }, { status: 404 });
+                : jsonErrorResponse({ error: 'Unknown channel doctor surface' }, { status: 404 });
         },
         getChannelRepairActions: async (surface, url) => Response.json({
             actions: await context.channelPlugins.listRepairActions(surface, url.searchParams.get('accountId') ?? undefined),
@@ -32,37 +44,23 @@ export function createDaemonChannelRouteHandlers(context) {
             const state = await context.channelPlugins.getLifecycleState(surface, url.searchParams.get('accountId') ?? undefined);
             return state
                 ? Response.json(state)
-                : Response.json({ error: 'Unknown channel lifecycle surface' }, { status: 404 });
-        },
-        postChannelLifecycleMigrate: async (surface, req) => {
-            const admin = context.requireAdmin(req);
-            if (admin)
-                return admin;
-            const body = await context.parseOptionalJsonBody(req);
-            if (body instanceof Response)
-                return body;
-            const state = await context.channelPlugins.migrateLifecycle(surface, typeof body?.accountId === 'string' ? body.accountId : undefined, body ?? undefined);
-            return state
-                ? Response.json(state)
-                : Response.json({ error: 'Unknown channel lifecycle surface' }, { status: 404 });
+                : jsonErrorResponse({ error: 'Unknown channel lifecycle surface' }, { status: 404 });
         },
         postChannelAccountAction: async (surface, accountId, action, req) => {
             const admin = context.requireAdmin(req);
             if (admin)
                 return admin;
-            const body = await context.parseJsonBody(req);
-            const input = body instanceof Response ? undefined : body;
-            if (body instanceof Response && req.headers.get('content-length') && req.headers.get('content-length') !== '0') {
-                return body;
-            }
+            const input = await readOptionalChannelBody(context, req);
+            if (input instanceof Response)
+                return input;
             const lifecycleAction = readChannelLifecycleAction(action);
             if (!lifecycleAction) {
-                return Response.json({ error: 'Unknown channel account action' }, { status: 400 });
+                return jsonErrorResponse({ error: 'Unknown channel account action' }, { status: 400 });
             }
             const result = await context.channelPlugins.runAccountAction(surface, lifecycleAction, accountId ?? (typeof input?.accountId === 'string' ? input.accountId : undefined), input);
             return result !== null
                 ? Response.json({ surface, accountId, action: lifecycleAction, result })
-                : Response.json({ error: 'Unknown channel account action' }, { status: 404 });
+                : jsonErrorResponse({ error: 'Unknown channel account action' }, { status: 404 });
         },
         getChannelCapabilities: () => context.channelPlugins.listCapabilities().then((capabilities) => Response.json({ capabilities })),
         getChannelSurfaceCapabilities: (surface) => context.channelPlugins
@@ -82,15 +80,13 @@ export function createDaemonChannelRouteHandlers(context) {
             const admin = context.requireAdmin(req);
             if (admin)
                 return admin;
-            const body = await context.parseJsonBody(req);
-            const input = body instanceof Response ? undefined : body;
-            if (body instanceof Response && req.headers.get('content-length') && req.headers.get('content-length') !== '0') {
-                return body;
-            }
+            const input = await readOptionalChannelBody(context, req);
+            if (input instanceof Response)
+                return input;
             const result = await context.channelPlugins.runTool(surface, toolId, input);
             return result !== null
                 ? Response.json({ toolId, surface, result })
-                : Response.json({ error: 'Unknown channel tool' }, { status: 404 });
+                : jsonErrorResponse({ error: 'Unknown channel tool' }, { status: 404 });
         },
         getChannelActions: () => context.channelPlugins.listOperatorActions().then((actions) => Response.json({ actions })),
         getChannelSurfaceActions: (surface) => context.channelPlugins
@@ -100,15 +96,13 @@ export function createDaemonChannelRouteHandlers(context) {
             const admin = context.requireAdmin(req);
             if (admin)
                 return admin;
-            const body = await context.parseJsonBody(req);
-            const input = body instanceof Response ? undefined : body;
-            if (body instanceof Response && req.headers.get('content-length') && req.headers.get('content-length') !== '0') {
-                return body;
-            }
+            const input = await readOptionalChannelBody(context, req);
+            if (input instanceof Response)
+                return input;
             const result = await context.channelPlugins.runOperatorAction(surface, actionId, input);
             return result !== null
                 ? Response.json({ actionId, surface, result })
-                : Response.json({ error: 'Unknown channel action' }, { status: 404 });
+                : jsonErrorResponse({ error: 'Unknown channel action' }, { status: 404 });
         },
         postChannelResolveTarget: async (surface, req) => {
             const admin = context.requireAdmin(req);
@@ -125,7 +119,7 @@ export function createDaemonChannelRouteHandlers(context) {
                         ? body.query
                         : '';
             if (!targetInput.trim()) {
-                return Response.json({ error: 'Target resolution requires target, input, or query.' }, { status: 400 });
+                return jsonErrorResponse({ error: 'Target resolution requires target, input, or query.' }, { status: 400 });
             }
             const preferredKind = readChannelConversationKind(body.preferredKind);
             const target = await context.channelPlugins.resolveTarget(surface, {
@@ -140,7 +134,7 @@ export function createDaemonChannelRouteHandlers(context) {
             });
             return target
                 ? Response.json({ surface, target })
-                : Response.json({ error: 'Unable to resolve channel target' }, { status: 404 });
+                : jsonErrorResponse({ error: 'Unable to resolve channel target' }, { status: 404 });
         },
         postChannelAuthorize: async (surface, req) => {
             const admin = context.requireAdmin(req);
@@ -165,7 +159,7 @@ export function createDaemonChannelRouteHandlers(context) {
             });
             return result
                 ? Response.json({ surface, result })
-                : Response.json({ error: 'Unable to authorize channel action' }, { status: 404 });
+                : jsonErrorResponse({ error: 'Unable to authorize channel action' }, { status: 404 });
         },
         postChannelAllowlistResolve: async (surface, req) => {
             const admin = context.requireAdmin(req);
@@ -185,7 +179,7 @@ export function createDaemonChannelRouteHandlers(context) {
             });
             return result
                 ? Response.json(result)
-                : Response.json({ error: 'Unknown channel allowlist surface' }, { status: 404 });
+                : jsonErrorResponse({ error: 'Unknown channel allowlist surface' }, { status: 404 });
         },
         postChannelAllowlistEdit: async (surface, req) => {
             const admin = context.requireAdmin(req);
@@ -205,7 +199,7 @@ export function createDaemonChannelRouteHandlers(context) {
             });
             return result
                 ? Response.json(result)
-                : Response.json({ error: 'Unknown channel allowlist surface' }, { status: 404 });
+                : jsonErrorResponse({ error: 'Unknown channel allowlist surface' }, { status: 404 });
         },
         getChannelPolicies: () => Response.json({ policies: context.channelPolicy.listPolicies() }),
         patchChannelPolicy: async (surface, req) => {
@@ -256,7 +250,8 @@ export function createDaemonChannelRouteHandlers(context) {
                     groupPolicies: body.groupPolicies
                         .filter((value) => typeof value === 'object' && value !== null)
                         .map((value) => ({
-                        id: typeof value.id === 'string' ? value.id : `group-policy-${randomUUID().slice(0, 8)}`,
+                        // use the full UUID to avoid birthday-paradox collisions at scale.
+                        id: typeof value.id === 'string' ? value.id : `group-policy-${randomUUID()}`,
                         ...(typeof value.label === 'string' ? { label: value.label } : {}),
                         ...(typeof value.groupId === 'string' ? { groupId: value.groupId } : {}),
                         ...(typeof value.channelId === 'string' ? { channelId: value.channelId } : {}),