@promptbook/cli 0.114.0-0 → 0.114.0-10

package/apps/agents-server/src/components/UsersList/PasswordGeneratorDialog.tsx

@@ -0,0 +1,216 @@
+'use client';
+
+import { RefreshCw, X } from 'lucide-react';
+import { useState } from 'react';
+import type { ServerTranslationKey } from '../../languages/ServerTranslationKeys';
+import { Dialog } from '../Portal/Dialog';
+import { SecretInput } from '../SecretInput/SecretInput';
+import { useServerLanguage } from '../ServerLanguage/ServerLanguageProvider';
+import {
+    DEFAULT_PASSWORD_GENERATOR_OPTIONS,
+    generateSecurePassword,
+    PASSWORD_CHARACTER_OPTION_NAMES,
+    type PasswordCharacterOptionName,
+    type PasswordGeneratorOptions,
+} from './generateSecurePassword';
+import { USER_DIALOG_PRIMARY_BUTTON_CLASS_NAME, USER_DIALOG_SECONDARY_BUTTON_CLASS_NAME } from './userDialogClassNames';
+
+/**
+ * Minimum password length offered by the password generator.
+ */
+const MINIMUM_PASSWORD_LENGTH = 1;
+
+/**
+ * Maximum password length offered by the password generator.
+ */
+const MAXIMUM_PASSWORD_LENGTH = 128;
+
+/**
+ * Translation keys for each configurable character category.
+ */
+const PASSWORD_CHARACTER_OPTION_TRANSLATION_KEYS: Readonly<Record<PasswordCharacterOptionName, ServerTranslationKey>> = {
+    isUppercaseLettersIncluded: 'users.passwordGeneratorIncludeUppercaseLetters',
+    isLowercaseLettersIncluded: 'users.passwordGeneratorIncludeLowercaseLetters',
+    isNumbersIncluded: 'users.passwordGeneratorIncludeNumbers',
+    isSpecialCharactersIncluded: 'users.passwordGeneratorIncludeSpecialCharacters',
+};
+
+/**
+ * Props for the password generator dialog.
+ *
+ * @private component of <UsersList/>
+ */
+type PasswordGeneratorDialogProps = {
+    readonly onClose: () => void;
+    readonly onUsePassword: (password: string) => void;
+};
+
+/**
+ * Renders configurable, Web Crypto-backed password generation for new users.
+ *
+ * @private component of <UsersList/>
+ */
+export function PasswordGeneratorDialog({ onClose, onUsePassword }: PasswordGeneratorDialogProps) {
+    const { t } = useServerLanguage();
+    const [passwordGeneratorOptions, setPasswordGeneratorOptions] = useState<PasswordGeneratorOptions>(
+        DEFAULT_PASSWORD_GENERATOR_OPTIONS,
+    );
+    const [generatedPassword, setGeneratedPassword] = useState(() =>
+        generateSecurePassword(DEFAULT_PASSWORD_GENERATOR_OPTIONS),
+    );
+    const includedCharacterOptionCount = PASSWORD_CHARACTER_OPTION_NAMES.filter(
+        (optionName) => passwordGeneratorOptions[optionName],
+    ).length;
+
+    /**
+     * Stores an updated configuration and creates a password that exactly matches it.
+     */
+    function updatePasswordGeneratorOptions(updatedPasswordGeneratorOptions: PasswordGeneratorOptions) {
+        setPasswordGeneratorOptions(updatedPasswordGeneratorOptions);
+        setGeneratedPassword(generateSecurePassword(updatedPasswordGeneratorOptions));
+    }
+
+    /**
+     * Updates the requested length while preserving a valid count for the selected character categories.
+     */
+    function handlePasswordLengthChange(passwordLength: number) {
+        if (!Number.isSafeInteger(passwordLength)) {
+            return;
+        }
+
+        updatePasswordGeneratorOptions({
+            ...passwordGeneratorOptions,
+            length: Math.min(
+                MAXIMUM_PASSWORD_LENGTH,
+                Math.max(includedCharacterOptionCount, MINIMUM_PASSWORD_LENGTH, passwordLength),
+            ),
+        });
+    }
+
+    /**
+     * Enables or disables one character category without allowing an empty character set.
+     */
+    function handleCharacterOptionChange(optionName: PasswordCharacterOptionName, isIncluded: boolean) {
+        const updatedIncludedCharacterOptionCount = includedCharacterOptionCount +
+            (isIncluded === passwordGeneratorOptions[optionName] ? 0 : isIncluded ? 1 : -1);
+
+        if (updatedIncludedCharacterOptionCount === 0) {
+            return;
+        }
+
+        const updatedPasswordGeneratorOptions: PasswordGeneratorOptions = {
+            ...passwordGeneratorOptions,
+            [optionName]: isIncluded,
+        };
+
+        updatePasswordGeneratorOptions({
+            ...updatedPasswordGeneratorOptions,
+            length: Math.max(updatedPasswordGeneratorOptions.length, updatedIncludedCharacterOptionCount),
+        });
+    }
+
+    /**
+     * Passes the current generated password back to the create-user form.
+     */
+    function handleUsePassword() {
+        if (!generatedPassword) {
+            return;
+        }
+
+        onUsePassword(generatedPassword);
+    }
+
+    return (
+        <Dialog onClose={onClose} className="mx-4 w-full max-w-lg overflow-hidden" ariaLabelledBy="password-generator-title">
+            <div className="flex items-start justify-between gap-4 border-b border-gray-200 px-6 py-5">
+                <div>
+                    <h2 id="password-generator-title" className="text-xl font-semibold text-gray-900">
+                        {t('users.passwordGeneratorTitle')}
+                    </h2>
+                    <p className="mt-1 text-sm text-gray-500">{t('users.passwordGeneratorDescription')}</p>
+                </div>
+                <button
+                    type="button"
+                    onClick={onClose}
+                    className="rounded-md p-2 text-gray-400 hover:bg-gray-100 hover:text-gray-700"
+                    aria-label={t('users.closePasswordGeneratorDialog')}
+                >
+                    <X className="h-5 w-5" />
+                </button>
+            </div>
+
+            <div className="space-y-5 px-6 py-6">
+                <div>
+                    <label htmlFor="password-generator-length" className="mb-1 block text-sm font-medium text-gray-700">
+                        {t('users.passwordGeneratorLength')}
+                    </label>
+                    <input
+                        id="password-generator-length"
+                        type="number"
+                        min={Math.max(includedCharacterOptionCount, MINIMUM_PASSWORD_LENGTH)}
+                        max={MAXIMUM_PASSWORD_LENGTH}
+                        step="1"
+                        value={passwordGeneratorOptions.length}
+                        onChange={(event) => handlePasswordLengthChange(event.target.valueAsNumber)}
+                        className="w-full rounded-md border border-gray-300 px-3 py-2 text-sm text-gray-900 shadow-sm focus:border-blue-500 focus:outline-none focus:ring-2 focus:ring-blue-200"
+                    />
+                </div>
+
+                <fieldset>
+                    <legend className="mb-2 text-sm font-medium text-gray-700">
+                        {t('users.passwordGeneratorCharacters')}
+                    </legend>
+                    <div className="space-y-2">
+                        {PASSWORD_CHARACTER_OPTION_NAMES.map((optionName) => {
+                            const isIncluded = passwordGeneratorOptions[optionName];
+                            const isOnlyIncludedCharacterOption = isIncluded && includedCharacterOptionCount === 1;
+
+                            return (
+                                <label key={optionName} className="flex items-center gap-3 text-sm text-gray-700">
+                                    <input
+                                        type="checkbox"
+                                        checked={isIncluded}
+                                        onChange={(event) => handleCharacterOptionChange(optionName, event.target.checked)}
+                                        disabled={isOnlyIncludedCharacterOption}
+                                        className="h-4 w-4 rounded border-gray-300 text-blue-600 focus:ring-blue-500 disabled:cursor-not-allowed disabled:opacity-60"
+                                    />
+                                    {t(PASSWORD_CHARACTER_OPTION_TRANSLATION_KEYS[optionName])}
+                                </label>
+                            );
+                        })}
+                    </div>
+                </fieldset>
+
+                <SecretInput
+                    id="password-generator-value"
+                    label={t('users.generatedPassword')}
+                    value={generatedPassword}
+                    readOnly
+                    autoComplete="new-password"
+                />
+                <button
+                    type="button"
+                    onClick={() => setGeneratedPassword(generateSecurePassword(passwordGeneratorOptions))}
+                    className="text-sm font-medium text-blue-600 hover:text-blue-800"
+                >
+                    <RefreshCw className="mr-1 inline h-3.5 w-3.5" />
+                    {t('users.regeneratePassword')}
+                </button>
+            </div>
+
+            <div className="flex flex-col-reverse gap-3 border-t border-gray-100 px-6 py-5 sm:flex-row sm:justify-end">
+                <button type="button" onClick={onClose} className={USER_DIALOG_SECONDARY_BUTTON_CLASS_NAME}>
+                    {t('users.deleteConfirmCancel')}
+                </button>
+                <button
+                    type="button"
+                    onClick={handleUsePassword}
+                    disabled={!generatedPassword}
+                    className={USER_DIALOG_PRIMARY_BUTTON_CLASS_NAME}
+                >
+                    {t('users.useGeneratedPassword')}
+                </button>
+            </div>
+        </Dialog>
+    );
+}

package/apps/agents-server/src/components/UsersList/UsersList.tsx

@@ -8,8 +8,8 @@ import { Section } from '../Homepage/Section';
 import { useServerLanguage } from '../ServerLanguage/ServerLanguageProvider';
 import { isAnonymousUsername } from '../../utils/anonymousUser';
 import { formatServerLanguageHumanReadableDate } from '@/src/utils/localization/formatServerLanguageHumanReadableDate';
-import { generateSecurePassword } from './generateSecurePassword';
 import { CreateUserDialog } from './CreateUserDialog';
+import { PasswordGeneratorDialog } from './PasswordGeneratorDialog';
 import { useUsersAdmin } from './useUsersAdmin';
 
 /**
@@ -33,6 +33,7 @@ export function UsersList({ allowCreate = true }: UsersListProps) {
     const { language, t } = useServerLanguage();
 
     const [isCreateDialogOpen, setIsCreateDialogOpen] = useState(false);
+    const [isPasswordGeneratorOpen, setIsPasswordGeneratorOpen] = useState(false);
     const [isCreatingUser, setIsCreatingUser] = useState(false);
     const [newUsername, setNewUsername] = useState('');
     const [newPassword, setNewPassword] = useState('');
@@ -65,10 +66,6 @@ export function UsersList({ allowCreate = true }: UsersListProps) {
 
     const handleOpenCreateDialog = () => {
         resetCreateUserForm();
-        const generatedPassword = generateSecurePassword();
-        if (generatedPassword) {
-            setNewPassword(generatedPassword);
-        }
         setIsCreateDialogOpen(true);
     };
 
@@ -78,6 +75,7 @@ export function UsersList({ allowCreate = true }: UsersListProps) {
         }
 
         setIsCreateDialogOpen(false);
+        setIsPasswordGeneratorOpen(false);
         resetCreateUserForm();
     };
 
@@ -93,6 +91,7 @@ export function UsersList({ allowCreate = true }: UsersListProps) {
             });
 
             setIsCreateDialogOpen(false);
+            setIsPasswordGeneratorOpen(false);
             resetCreateUserForm();
         } catch {
             // Error is already handled and exposed via `error` state from the hook
@@ -271,15 +270,11 @@ export function UsersList({ allowCreate = true }: UsersListProps) {
             {allowCreate ? (
                 <CreateUserDialog
                     isAdmin={newIsAdmin}
+                    isDismissible={!isPasswordGeneratorOpen}
                     isOpen={isCreateDialogOpen}
                     isSubmitting={isCreatingUser}
                     onClose={handleCloseCreateDialog}
-                    onGeneratePassword={() => {
-                        const generatedPassword = generateSecurePassword();
-                        if (generatedPassword) {
-                            setNewPassword(generatedPassword);
-                        }
-                    }}
+                    onOpenPasswordGenerator={() => setIsPasswordGeneratorOpen(true)}
                     onSubmit={handleCreateUser}
                     password={newPassword}
                     setIsAdmin={setNewIsAdmin}
@@ -288,6 +283,16 @@ export function UsersList({ allowCreate = true }: UsersListProps) {
                     username={newUsername}
                 />
             ) : null}
+
+            {isPasswordGeneratorOpen ? (
+                <PasswordGeneratorDialog
+                    onClose={() => setIsPasswordGeneratorOpen(false)}
+                    onUsePassword={(password) => {
+                        setNewPassword(password);
+                        setIsPasswordGeneratorOpen(false);
+                    }}
+                />
+            ) : null}
         </div>
     );
 }

package/apps/agents-server/src/components/UsersList/generateSecurePassword.ts

@@ -1,50 +1,138 @@
 /**
- * Default length of passwords generated for new admin users.
+ * Configuration for a generated password.
+ *
+ * @private utility of <PasswordGeneratorDialog/>
+ */
+export type PasswordGeneratorOptions = {
+    readonly length: number;
+    readonly isUppercaseLettersIncluded: boolean;
+    readonly isLowercaseLettersIncluded: boolean;
+    readonly isNumbersIncluded: boolean;
+    readonly isSpecialCharactersIncluded: boolean;
+};
+
+/**
+ * Names of the configurable character categories.
+ *
+ * @private utility of <PasswordGeneratorDialog/>
  */
-const GENERATED_PASSWORD_LENGTH = 20;
+export type PasswordCharacterOptionName = Exclude<keyof PasswordGeneratorOptions, 'length'>;
 
 /**
- * Characters used by generated passwords.
+ * Default configuration for securely generated passwords.
+ *
+ * @private utility of <PasswordGeneratorDialog/>
  */
-const GENERATED_PASSWORD_CHARACTERS = 'ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz23456789!@#$%^&*+-_=~';
+export const DEFAULT_PASSWORD_GENERATOR_OPTIONS: PasswordGeneratorOptions = {
+    length: 16,
+    isUppercaseLettersIncluded: true,
+    isLowercaseLettersIncluded: true,
+    isNumbersIncluded: true,
+    isSpecialCharactersIncluded: true,
+};
+
+/**
+ * Character categories that can be included in a generated password.
+ *
+ * @private utility of <PasswordGeneratorDialog/>
+ */
+export const PASSWORD_CHARACTER_OPTION_NAMES: ReadonlyArray<PasswordCharacterOptionName> = [
+    'isUppercaseLettersIncluded',
+    'isLowercaseLettersIncluded',
+    'isNumbersIncluded',
+    'isSpecialCharactersIncluded',
+];
+
+/**
+ * Character sets used for the configurable password categories.
+ */
+const PASSWORD_CHARACTERS_BY_OPTION_NAME: Readonly<Record<PasswordCharacterOptionName, string>> = {
+    isUppercaseLettersIncluded: 'ABCDEFGHJKLMNPQRSTUVWXYZ',
+    isLowercaseLettersIncluded: 'abcdefghijkmnopqrstuvwxyz',
+    isNumbersIncluded: '23456789',
+    isSpecialCharactersIncluded: '!@#$%^&*+-_=~',
+};
+
+/**
+ * Obtains one unbiased random index from a character set using the browser Web Crypto API.
+ *
+ * @private utility of generateSecurePassword
+ */
+function getSecureRandomIndex(secureRandomSource: Crypto, characterCount: number): number {
+    const largestAcceptableRandomValue = Math.floor(0x1_0000_0000 / characterCount) * characterCount;
+    const randomValues = new Uint32Array(1);
+
+    let randomValue: number | undefined;
+
+    do {
+        secureRandomSource.getRandomValues(randomValues);
+        randomValue = randomValues[0];
+    } while (randomValue === undefined || randomValue >= largestAcceptableRandomValue);
+
+    return randomValue % characterCount;
+}
+
+/**
+ * Randomly reorders password characters with the Fisher-Yates algorithm.
+ *
+ * @private utility of generateSecurePassword
+ */
+function shufflePasswordCharacters(passwordCharacters: Array<string>, secureRandomSource: Crypto): void {
+    for (let index = passwordCharacters.length - 1; index > 0; index--) {
+        const randomIndex = getSecureRandomIndex(secureRandomSource, index + 1);
+        const currentPasswordCharacter = passwordCharacters[index];
+        const randomPasswordCharacter = passwordCharacters[randomIndex];
+
+        if (currentPasswordCharacter === undefined || randomPasswordCharacter === undefined) {
+            continue;
+        }
+
+        passwordCharacters[index] = randomPasswordCharacter;
+        passwordCharacters[randomIndex] = currentPasswordCharacter;
+    }
+}
 
 /**
  * Generates a password using the browser Web Crypto API.
  *
- * Rejection sampling keeps every character equally likely even though the
- * alphabet length is not a power of two.
+ * Rejection sampling keeps every selected character equally likely even when
+ * the character-set length is not a power of two. Every selected character
+ * category is guaranteed to occur at least once.
  *
- * @returns A cryptographically random password, or an empty string when a secure random source is unavailable.
+ * @param options - Length and character categories to use for the password.
+ * @returns A cryptographically random password, or an empty string when the configuration is invalid or a secure random source is unavailable.
  *
- * @private utility of <CreateUserDialog/>
+ * @private utility of <PasswordGeneratorDialog/>
  */
-export function generateSecurePassword(): string {
+export function generateSecurePassword(options: PasswordGeneratorOptions = DEFAULT_PASSWORD_GENERATOR_OPTIONS): string {
     const secureRandomSource = globalThis.crypto;
 
     if (!secureRandomSource?.getRandomValues) {
         return '';
     }
 
-    const characterCount = GENERATED_PASSWORD_CHARACTERS.length;
-    const largestAcceptableRandomValue = Math.floor(0x1_0000_0000 / characterCount) * characterCount;
-    const passwordCharacters: Array<string> = [];
-    const randomValues = new Uint32Array(64);
+    const characterSets = PASSWORD_CHARACTER_OPTION_NAMES.filter((optionName) => options[optionName]).map(
+        (optionName) => PASSWORD_CHARACTERS_BY_OPTION_NAME[optionName],
+    );
 
-    while (passwordCharacters.length < GENERATED_PASSWORD_LENGTH) {
-        secureRandomSource.getRandomValues(randomValues);
+    if (!Number.isSafeInteger(options.length) || options.length < characterSets.length || characterSets.length === 0) {
+        return '';
+    }
 
-        for (const randomValue of randomValues) {
-            if (randomValue >= largestAcceptableRandomValue) {
-                continue;
-            }
+    const allPasswordCharacters = characterSets.join('');
+    const passwordCharacters: Array<string> = [];
 
-            passwordCharacters.push(GENERATED_PASSWORD_CHARACTERS.charAt(randomValue % characterCount));
+    for (const characterSet of characterSets) {
+        passwordCharacters.push(characterSet.charAt(getSecureRandomIndex(secureRandomSource, characterSet.length)));
+    }
 
-            if (passwordCharacters.length === GENERATED_PASSWORD_LENGTH) {
-                break;
-            }
-        }
+    while (passwordCharacters.length < options.length) {
+        passwordCharacters.push(
+            allPasswordCharacters.charAt(getSecureRandomIndex(secureRandomSource, allPasswordCharacters.length)),
+        );
     }
 
+    shufflePasswordCharacters(passwordCharacters, secureRandomSource);
+
     return passwordCharacters.join('');
 }

package/apps/agents-server/src/components/UsersList/userDialogClassNames.ts

@@ -0,0 +1,11 @@
+/**
+ * Shared secondary-button styling used by the user-management dialogs.
+ */
+export const USER_DIALOG_SECONDARY_BUTTON_CLASS_NAME =
+    'inline-flex items-center justify-center gap-2 rounded-md border border-gray-300 bg-white px-3 py-2 text-sm font-semibold text-gray-700 hover:bg-gray-50 disabled:cursor-not-allowed disabled:opacity-60';
+
+/**
+ * Shared primary-button styling used by the user-management dialogs.
+ */
+export const USER_DIALOG_PRIMARY_BUTTON_CLASS_NAME =
+    'inline-flex items-center justify-center gap-2 rounded-md bg-blue-600 px-3 py-2 text-sm font-semibold text-white hover:bg-blue-700 disabled:cursor-not-allowed disabled:opacity-60';

package/apps/agents-server/src/components/WalletRecordDialog/useWalletRecordDialogState.ts

@@ -174,7 +174,7 @@ function isUseCalendarWalletRequest(recordType: WalletRecordType, service: strin
 }
 
 /**
- * Returns true when dialog currently targets USE EMAIL SMTP access token.
+ * Returns true when dialog currently targets the agent email SMTP access token.
  *
  * @private function of WalletRecordDialog
  */

package/apps/agents-server/src/components/_utils/generateMetaTxt.ts

@@ -18,7 +18,7 @@ const AGENT_PROFILE_DISALLOWED_SUBPATHS = [
     '/agents/*/images',
     '/agents/*/integration',
     '/agents/*/system-message',
-    '/agents/*/timeouts',
+    '/agents/*/goal',
     '/agents/*/website-integration',
 ] as const;
 

package/apps/agents-server/src/database/migratePrefix.ts

@@ -1,3 +1,4 @@
+import { spaceTrim } from 'spacetrim';
 import type { Client } from 'pg';
 import { importRuntimeModule } from './importRuntimeModule';
 import type { DatabaseMigrationAppliedBy, DatabaseMigrationLogger } from './runDatabaseMigrations';
@@ -219,42 +220,42 @@ export async function migratePrefix(options: MigratePrefixOptions): Promise<numb
  * @private function of runDatabaseMigrations
  */
 async function ensureMigrationsTableSchema(options: EnsureMigrationsTableSchemaOptions): Promise<void> {
-    await options.client.query(`
+    await options.client.query(spaceTrim(`
         CREATE TABLE IF NOT EXISTS ${options.migrationsTableIdentifier} (
             "filename" TEXT PRIMARY KEY,
             "appliedAt" TIMESTAMP WITH TIME ZONE DEFAULT now(),
             "appliedBy" TEXT NOT NULL DEFAULT '${options.manualAppliedByDefault}'
         );
-    `);
+    `));
 
-    await options.client.query(`
+    await options.client.query(spaceTrim(`
         ALTER TABLE ${options.migrationsTableIdentifier}
         ADD COLUMN IF NOT EXISTS "appliedBy" TEXT;
-    `);
+    `));
 
     await options.client.query(
-        `
+        spaceTrim(`
         UPDATE ${options.migrationsTableIdentifier}
         SET "appliedBy" = $1
         WHERE "appliedBy" IS NULL;
-        `,
+        `),
         [options.manualAppliedByDefault],
     );
 
-    await options.client.query(`
+    await options.client.query(spaceTrim(`
         ALTER TABLE ${options.migrationsTableIdentifier}
         ALTER COLUMN "appliedBy" SET DEFAULT '${options.manualAppliedByDefault}';
-    `);
+    `));
 
-    await options.client.query(`
+    await options.client.query(spaceTrim(`
         ALTER TABLE ${options.migrationsTableIdentifier}
         ALTER COLUMN "appliedBy" SET NOT NULL;
-    `);
+    `));
 
-    await options.client.query(`
+    await options.client.query(spaceTrim(`
         ALTER TABLE ${options.migrationsTableIdentifier}
         ENABLE ROW LEVEL SECURITY;
-    `);
+    `));
 }
 
 /**

package/apps/agents-server/src/database/migrations/2026-08-0100-agent-goal-chat-source.sql

@@ -0,0 +1,10 @@
+ALTER TABLE "prefix_UserChat"
+DROP CONSTRAINT IF EXISTS "prefix_UserChat_source_check";
+
+ALTER TABLE "prefix_UserChat"
+ADD CONSTRAINT "prefix_UserChat_source_check"
+CHECK ("source" IN ('WEB_UI', 'OPENAI_API', 'TEAM_MEMBER', 'EMAIL', 'AGENT_GOAL'));
+
+CREATE INDEX IF NOT EXISTS "prefix_UserChat_agentPermanentId_goalSource_idx"
+    ON "prefix_UserChat" ("agentPermanentId")
+    WHERE "source" = 'AGENT_GOAL';

package/apps/agents-server/src/generated/reservedPaths.ts

@@ -1,43 +1,43 @@
 /**
- * Reserved paths that should not be treated as agent names.
- * This file is auto-generated by scripts/generate-reserved-paths.js
- *
- * ⚠️ WARNING: This code has been generated so that any manual changes will be overwritten
- *
- * @see /apps/agents-server/src/app - source directory for routes
- * @see /apps/agents-server/public - source directory for static files
- * @see /apps/agents-server/src/middleware.ts - where this is used
- */
-export const RESERVED_PATHS: readonly string[] = [
-    "_data",
-    "_next",
-    "admin",
-    "agents",
-    "api",
-    "dashboard",
-    "docs",
-    "embed",
-    "experiments",
-    "favicon.ico",
-    "fonts",
-    "humans.txt",
-    "logo-blue-white-256.png",
-    "manifest.webmanifest",
-    "openapi.json",
-    "promptbook-logo-blue.png",
-    "promptbook-logo-white.png",
-    "recycle-bin",
-    "restricted",
-    "robots.txt",
-    "s3",
-    "search",
-    "security.txt",
-    "sitemap.xml",
-    "sounds",
-    "story",
-    "superadmin",
-    "sw.js",
-    "swagger",
-    "system",
-    "test"
-] as const;
+     * Reserved paths that should not be treated as agent names.
+     * This file is auto-generated by scripts/generate-reserved-paths.js
+     *
+     * ⚠️ WARNING: This code has been generated so that any manual changes will be overwritten
+     *
+     * @see /apps/agents-server/src/app - source directory for routes
+     * @see /apps/agents-server/public - source directory for static files
+     * @see /apps/agents-server/src/middleware.ts - where this is used
+     */
+    export const RESERVED_PATHS: readonly string[] = [
+        "_data",
+        "_next",
+        "admin",
+        "agents",
+        "api",
+        "dashboard",
+        "docs",
+        "embed",
+        "experiments",
+        "favicon.ico",
+        "fonts",
+        "humans.txt",
+        "logo-blue-white-256.png",
+        "manifest.webmanifest",
+        "openapi.json",
+        "promptbook-logo-blue.png",
+        "promptbook-logo-white.png",
+        "recycle-bin",
+        "restricted",
+        "robots.txt",
+        "s3",
+        "search",
+        "security.txt",
+        "sitemap.xml",
+        "sounds",
+        "story",
+        "superadmin",
+        "sw.js",
+        "swagger",
+        "system",
+        "test"
+    ] as const;