@seele00/seele 0.1.63 → 0.1.64

package/server/dist/server.js

@@ -1,4605 +0,0 @@
-import { createServer } from "node:http";
-import { execFile, spawn } from "node:child_process";
-import { constants as fsConstants, createReadStream, mkdirSync, writeFileSync, } from "node:fs";
-import { createHash, randomUUID } from "node:crypto";
-import fs from "node:fs/promises";
-import path from "node:path";
-import { promisify } from "node:util";
-import { loadConfig } from "./config/config.js";
-import { clearSessionCookie, readSessionPayload, setSessionCookie, } from "./auth/session.js";
-import { UserStore } from "./auth/users.js";
-import { buildRuntimeAdditionalContext } from "./contracts/index.js";
-import { openSse, sendSse } from "./realtime/sse.js";
-import { RuntimeWorkerClient } from "./runtime-worker/client.js";
-import { appendEvent, appendMessage, cancelWorkspaceWakeup, countConversationUnreadTurns, createConversation, createConversationTurn, createWorkspaceWakeup, createWorkspaceGroup, deleteConversation, deleteConversationEnvironmentVariable, deleteGlobalEnvironmentVariable, deleteWorkspaceGroup, getConversation, getConversationEnvironmentDescriptions, getConversationEnvironmentMap, getConversationHistoryPage, getLatestConversationNotification, getConversationRevision, getConversationTurn, getConversationWorkspaceSettings, getConversationStoreDiagnostics, getAppSettingValue, formatMemoryItems, getGlobalEnvironmentDescriptions, getGlobalEnvironmentMap, getNextScheduledWorkspaceWakeup, hasWorkspaceGroup, initializeConversationStore, isConversationSandbox, listGlobalEnvironmentVariables, listDueWorkspaceWakeups, listConversationEventsByType, listConversationTurnEvents, listAllConversationVisibleMessages, listConversationTranscriptMessagesBefore, listConversationTranscriptMessageRange, listRuntimeResets, listTranscriptRangeSummaries, listConversationEnvironmentVariables, listWorkspaceWakeups, listConversations, listWorkspaceGroups, markConversationRead, recoverInterruptedWakeupsOnStartup, recoverInterruptedTurnsOnStartup, recordRuntimeReset, revealGlobalEnvironmentVariable, revealConversationEnvironmentVariable, appendConversationContextVersion, setConversationGroup, setConversationMemory, setConversationMemoryItems, setConversationResponsibility, setConversationWorkspaceSetting, deleteConversationWorkspaceSetting, setConversationSandbox, setConversationStatus, setConversationThread, setConversationTitle, updateWorkspaceWakeup, setWorkspaceGroupTitle, upsertTranscriptRangeSummary, upsertAppSetting, upsertConversationEnvironmentVariable, upsertGlobalEnvironmentVariable, updateConversationTurn, normalizeMemoryItems, parseMemoryItems, } from "./conversations/store.js";
-import { createWorkspaceKnowledge, deleteWorkspaceKnowledge, listWorkspaceKnowledge, summarizeWorkspaceKnowledge, updateWorkspaceKnowledge, } from "./conversations/knowledge.js";
-const config = loadConfig();
-const userStore = new UserStore(config.centerDbPath, {
-    username: config.authUsername,
-    password: config.authPassword,
-});
-if (!isLoopbackHost(config.host) && !userStore.enabled) {
-    throw new Error("SEELE_AUTH_PASSWORD is required to create the first admin user when Seele is exposed");
-}
-let cachedAppMeta = null;
-const PROFUSE_PLATFORM = "seele";
-const PROFUSE_NOTIFY_URL = "https://profuse.antgroup-inc.cn/api/shao-meta/agent/notify";
-const PROFUSE_AGENT_TOKEN = "shao-kb-7f9e2a3d4b5c";
-const PROFUSE_NOTIFY_TIMEOUT_MS = 5000;
-const CODEX_NPM_REGISTRY = "https://registry.npmmirror.com/";
-const CODEX_UPDATE_TIMEOUT_MS = 120_000;
-const CODEX_LATEST_LOOKUP_TIMEOUT_MS = 15_000;
-const CODEX_VERSION_READ_TIMEOUT_MS = 30_000;
-const CODEX_VERSION_VERIFY_TIMEOUT_MS = 60_000;
-const RUNTIME_MODEL_CATALOG_CACHE_KEY = "runtime.model_catalog";
-const RUNTIME_RATE_LIMITS_CACHE_KEY = "runtime.rate_limits";
-const WAKEUP_POLL_INTERVAL_MS = 5_000;
-const RUNTIME_WATCHDOG_INTERVAL_MS = 10_000;
-const TURN_LONG_RUNNING_AFTER_MS = 15 * 60 * 1000;
-const TURN_PHASE_BOUNDARY_OPERATION_COUNT = 20;
-const LOGIN_MAX_FAILURES = 5;
-const LOGIN_USER_MAX_FAILURES = 10;
-const LOGIN_SOURCE_MAX_FAILURES = 30;
-const LOGIN_MAX_CONCURRENT_VERIFICATIONS = 4;
-const LOGIN_FAILURE_WINDOW_MS = 15 * 60 * 1000;
-const LOGIN_LOCKOUT_MS = 15 * 60 * 1000;
-const RESPONSIBILITY_UPDATE_GUIDE_RELATIVE_PATH = ".seele/skills/responsibility-update.md";
-const KNOWLEDGE_SOURCE_GUIDE_RELATIVE_PATH = ".seele/skills/knowledge-source.md";
-let codexUpdateJob = null;
-let codexLatestVersion = null;
-let runtimeModelCatalogRefresh = null;
-let runtimeRateLimitsRefresh = null;
-let activeLoginVerifications = 0;
-const RESPONSIBILITY_UPDATE_GUIDE = `# Seele 职责总结与更新指南
-
-仅当你需要总结或更新 workspace 的长期职责时再阅读本文件。它不是每轮默认注入内容。
-
-## 职责是什么
-
-职责是用户批准的长期角色定位和岗位说明。它会被注入到后续 turn 中，用来锚定计划、假设、沟通风格、边界判断、上下文保护和长任务拆分方式。
-
-职责不是当前任务内容本身，也不是详细技能库。
-
-## 什么时候提交职责建议
-
-- 当前职责为空。
-- 当前职责明显过期、过泛，或不再匹配 workspace 的长期角色。
-- 用户要求你总结、更新或校准这个 workspace 的职责。
-
-不要因为单个任务不同就修改职责。长期角色不清楚时，优先询问用户。
-
-## 职责正文怎么写
-
-职责正文建议用简洁 Markdown。它应该描述：
-
-- 角色定位：这个 workspace 长期扮演什么角色。
-- 工作范围：哪些工作属于这里，哪些不属于这里。
-- 关键维度：判断优先级、质量、风险、取舍和何时询问用户的稳定标准。
-- 工作方式：沟通、验证、上下文保护、长任务拆分等角色层面的协作方式。
-
-职责应使用稳定、可长期维护、用户可审阅的中文表达。技术名词、API 名、文件名、产品名可保留原文。
-
-## 不应该写进职责的内容
-
-不要把详细技能、SOP、实现细节、API 字段、脚本、命令配方、日志、临时结论、任务进度、项目文件地图或经常变化的资料写进职责。
-
-这些内容应放在技能、文档、Memory、普通文件或未来更合适的知识机制里。职责可以提示应该参考某类来源，但不应复制细节。
-
-## 提交格式
-
-不要静默修改职责。提交完整替换建议时，只使用下面这个格式：
-
-\`\`\`seele-responsibility-proposal
-{
-  "responsibility": "职责全文"
-}
-\`\`\`
-
-Seele 会隐藏该控制块，并向用户展示审批卡片。用户可以在保存前自行微调。
-`;
-const KNOWLEDGE_SOURCE_GUIDE = `# Seele Knowledge Source Guide
-
-Use this guide when the user gives durable external material, asks you to turn
-material into a skill, or you think a source should be preserved for long-lived
-workspace work.
-
-## What belongs here
-
-Workspace knowledge is for reusable, source-backed material:
-
-- external documents, platform pages, APIs, git repositories, manuals, protocol specs
-- durable working guides, domain skills, checklists, source-backed summaries
-- material this workspace may need to re-read in future turns
-
-Do not use knowledge for one-off temporary context that is only useful for the
-current answer. Do not store secrets here.
-
-Knowledge must be a meaningful reusable asset, not a pile of tiny notes. Do not
-create one-line or few-line knowledge entries, and do not add a new entry for
-every individual chat message. Aggregate related teaching, source clues, and
-working rules into one topic-level knowledge item. Update an existing item when
-the durable topic is the same.
-
-Chat is only a source clue, not knowledge by itself. Do not preserve raw chat
-snippets, temporary facts, recent task status, concrete one-off examples, or a
-few lines the user just said as Knowledge. If the source is chat, cite only a
-\`chat_range\` message id range, then abstract it into a stable reusable
-principle, workflow, quality standard, or source-backed skill, and explain why
-it should survive beyond the current task.
-
-If a proposed item only has chat clues and no durable abstraction, stable
-purpose, or reusable future use, do not submit a knowledge proposal. Keep it in
-the current turn, ask whether the user wants it preserved, or propose Memory
-only when it is short always-injected context.
-
-## Classification
-
-When the user provides material, classify it first:
-
-- Temporary reference: useful only now; use it in the current task and do not register it.
-- Knowledge source: durable source material; preserve source clues, local copy, digest, and acquisition method.
-- Workspace skill: reusable guidance derived from source material; keep the source relationship visible.
-
-If unsure whether something should be tracked long term, ask the user to confirm.
-
-## Reliability maintenance
-
-Knowledge is not only storage; it is a reliability-maintained working asset.
-When using knowledge, actively check whether it is trustworthy, current,
-consistent with observed facts, and traceable to a clear source.
-
-If a problem is in source-backed material or the acquisition path, tell the user
-which source appears wrong, missing, stale, inaccessible, or contradictory. Do
-not silently rewrite the source of truth.
-
-If a problem is in a local digest, summary, skill, or other derived knowledge
-that Seele maintains, submit an update proposal for approval. Do not keep
-working around the same outdated or misleading summary in repeated tasks.
-
-## Approval requirement
-
-Never silently create or update workspace knowledge. The user must approve a
-proposal before it becomes persistent workspace Knowledge.
-
-When a task may depend on durable workspace knowledge, first scan the injected
-STATE KNOWLEDGE index using id, name, and purpose. If an item's purpose matches
-the task, fetch that item's body through the Knowledge body API and use content
-before answering or acting.
-
-Create proposals with exactly this shape:
-
-\`\`\`seele-knowledge-proposal
-{
-  "action": "create",
-  "name": "短标题",
-  "purpose": "短索引触发说明，用于判断何时需要读取正文",
-  "content": "正文：未来取到后可以直接应用的规则、标准、流程、资料摘要或操作原则"
-}
-\`\`\`
-
-Update proposals must use exactly this shape:
-
-\`\`\`seele-knowledge-proposal
-{
-  "action": "update",
-  "knowledgeId": "kn_xxxxxx",
-  "name": "短标题",
-  "purpose": "短索引触发说明，用于判断何时需要读取正文",
-  "content": "更新后的正文"
-}
-\`\`\`
-
-Do not add fields other than action, knowledgeId, name, purpose, and content. Do
-not use arrays, comments, Markdown inside the JSON, multiple JSON objects, or
-prose inside the fenced block.
-
-- name: short stable title in the Knowledge index.
-- purpose: short index trigger. It is shown in the always-injected index and is
-  used to decide whether to fetch content. Do not put the full rule here.
-- content: durable working body. Write the reusable rule, standard, source
-  summary, or operating principle in concise Chinese so a future turn can apply
-  it directly after fetching it.
-
-Example after approval:
-
-\`\`\`text
-STATE KNOWLEDGE: kn_xxxxxx | name=用餐工具基本规则 | purpose=处理吃饭工具、餐具选择、用餐礼仪或相关判断时先应用此规则...
-\`\`\`
-
-When this purpose matches the current task, fetch kn_xxxxxx through the Knowledge
-body API and use its content.
-
-This follows Seele's managed-assets rule. Do not bypass this workflow by
-directly editing \`.seele/knowledge\`, \`.seele/skills/knowledge-source.md\`,
-\`item.json\`, \`digest.md\`, \`skill.md\`, \`fetch.sh\`, \`raw/\`, or other local
-knowledge files. Treat those paths as Seele-managed state. You may read
-documented readable projections when needed, but durable knowledge changes must
-go through an approval proposal.
-
-Use this proposal only for durable source-backed or reusable guidance. If the
-content is short and should be injected every turn, propose Memory instead. If
-the content defines the workspace's role, propose Responsibility instead. If it
-is just temporary task context, do not register it.
-
-## Source and reliability notes
-
-If source handling, credentials, refresh, or acquisition scripts matter, explain
-that in the normal answer and ask the user what to do next. Do not encode those
-operational details into the Knowledge proposal JSON.
-
-Use Knowledge content for the durable working memory that future turns should
-apply. Keep changing implementation details, raw source copies, and temporary
-task status out of the Knowledge content unless they are part of a stable rule
-or reusable source summary.
-`;
-const GLOBAL_MEMORY_ITEMS_SETTING_KEY = "memory.global.items";
-const RUNTIME_MODEL_SETTING_KEY = "runtime.model";
-const RUNTIME_REASONING_EFFORT_SETTING_KEY = "runtime.reasoningEffort";
-const RUNTIME_FAST_MODE_SETTING_KEY = "runtime.fastMode";
-const RUNTIME_SANDBOX_SETTING_KEY = "runtime.sandbox";
-const RUNTIME_NOTIFY_ENABLED_SETTING_KEY = "runtime.notifyEnabled";
-const activeConversationTurns = new Map();
-const turnConversations = new Map();
-const turnWakeups = new Map();
-const turnEventBacklog = new Map();
-const turnSubscribers = new Map();
-const turnTerminalEvents = new Map();
-const locallyStoppedTurns = new Set();
-const wakeupsInFlight = new Set();
-const workspaceTurnQueues = new Map();
-const staleRuntimeTurns = new Set();
-const longRunningAdvisedTurns = new Set();
-const phaseBoundaryAdvisedTurns = new Set();
-const turnOperationCounts = new Map();
-const latestTurnContextUsage = new Map();
-const activeContextCompactions = new Map();
-const completedContextCompactionsAwaitingUsage = new Map();
-const execFileAsync = promisify(execFile);
-initializeConversationStore({
-    centerDbPath: config.centerDbPath,
-    workspaceRoot: config.workspaceRoot,
-    defaultSandbox: config.defaultSandbox,
-    defaultOwnerId: userStore.listUsers().find((user) => user.role === "admin")?.id ?? "local-admin",
-});
-const startupRecovery = recoverInterruptedTurnsOnStartup();
-const wakeupStartupRecovery = recoverInterruptedWakeupsOnStartup();
-const runtime = new RuntimeWorkerClient({
-    onEvent: ({ turnId, event, data }) => recordTurnEvent(turnId, event, data),
-    onCompleted: ({ turnId, result }) => completeTurn(turnId, result),
-    onFailed: ({ turnId, message }) => failTurn(turnId, message),
-});
-const server = createServer(async (request, response) => {
-    setCorsHeaders(response);
-    const url = new URL(request.url ?? "/", `http://${request.headers.host ?? "localhost"}`);
-    if (request.method === "OPTIONS") {
-        response.writeHead(204);
-        response.end();
-        return;
-    }
-    if (request.method === "GET" && url.pathname === "/api/auth/session") {
-        response.setHeader("Cache-Control", "no-store");
-        const user = readAuthenticatedUser(request);
-        sendJson(response, 200, {
-            enabled: userStore.enabled,
-            authenticated: Boolean(user),
-            user: user ? publicUser(user) : null,
-        });
-        return;
-    }
-    if (request.method === "POST" && url.pathname === "/api/auth/login") {
-        response.setHeader("Cache-Control", "no-store");
-        const body = await readJsonBody(request);
-        const username = typeof body.username === "string" ? body.username : "";
-        const password = typeof body.password === "string" ? body.password : "";
-        const loginBuckets = loginAttemptBuckets(request, username);
-        const blockedUntil = userStore.loginBlockedUntil(loginBuckets.map((bucket) => bucket.key));
-        if (blockedUntil > Date.now()) {
-            response.setHeader("Retry-After", String(Math.max(1, Math.ceil((blockedUntil - Date.now()) / 1000))));
-            sendJson(response, 429, { error: "login_rate_limited" });
-            return;
-        }
-        if (activeLoginVerifications >= LOGIN_MAX_CONCURRENT_VERIFICATIONS) {
-            response.setHeader("Retry-After", "1");
-            sendJson(response, 429, { error: "login_rate_limited" });
-            return;
-        }
-        activeLoginVerifications += 1;
-        let user;
-        try {
-            user = await userStore.authenticate(username, password);
-        }
-        finally {
-            activeLoginVerifications -= 1;
-        }
-        if (!user) {
-            userStore.recordLoginFailure(loginBuckets, LOGIN_FAILURE_WINDOW_MS, LOGIN_LOCKOUT_MS);
-            sendJson(response, 401, { error: "invalid_credentials" });
-            return;
-        }
-        userStore.clearLoginFailures(loginBuckets.slice(0, 2).map((bucket) => bucket.key));
-        setSessionCookie(response, request, {
-            userId: user.id,
-            sessionVersion: user.sessionVersion,
-            ttlSeconds: config.authSessionTtlSeconds,
-            secret: userStore.sessionSecret,
-            path: config.publicBasePath,
-        });
-        sendJson(response, 200, { ok: true, user: publicUser(user) });
-        return;
-    }
-    if (request.method === "POST" && url.pathname === "/api/auth/logout") {
-        response.setHeader("Cache-Control", "no-store");
-        clearSessionCookie(response, request, config.publicBasePath);
-        sendJson(response, 200, { ok: true });
-        return;
-    }
-    if (request.method === "GET" && url.pathname === "/healthz") {
-        const health = await buildHealthSnapshot();
-        sendJson(response, health.ok ? 200 : 503, health);
-        return;
-    }
-    const isProfuseCallback = request.method === "POST" && url.pathname === "/callback/profuse/message";
-    const isProtectedRequest = url.pathname.startsWith("/api/") || url.pathname.startsWith("/agent/");
-    const authenticatedUser = readAuthenticatedUser(request);
-    if (isProtectedRequest &&
-        !isProfuseCallback &&
-        !authenticatedUser) {
-        sendJson(response, 401, { error: "authentication_required" });
-        return;
-    }
-    const requestedWorkspaceId = workspaceIdFromApiPath(url.pathname) ?? workspaceIdFromAgentPath(url.pathname);
-    if (authenticatedUser &&
-        requestedWorkspaceId &&
-        !canAccessWorkspace(authenticatedUser, requestedWorkspaceId)) {
-        sendJson(response, 404, { error: "conversation_not_found" });
-        return;
-    }
-    const requestedGroupId = workspaceGroupIdFromApiPath(url.pathname);
-    if (authenticatedUser &&
-        requestedGroupId &&
-        !canManageWorkspaceGroup(authenticatedUser, requestedGroupId)) {
-        sendJson(response, 404, { error: "workspace_group_not_found" });
-        return;
-    }
-    if (authenticatedUser &&
-        requiresAdminAccess(request.method ?? "GET", url.pathname) &&
-        authenticatedUser.role !== "admin") {
-        sendJson(response, 403, { error: "admin_required" });
-        return;
-    }
-    if (request.method === "GET" && url.pathname === "/api/diagnostics") {
-        sendJson(response, 200, await buildDiagnosticsSnapshot());
-        return;
-    }
-    if (request.method === "GET" && url.pathname === "/api/admin/users") {
-        sendJson(response, 200, { users: userStore.listUsers().map(publicUser) });
-        return;
-    }
-    if (request.method === "POST" && url.pathname === "/api/admin/users") {
-        const body = await readJsonBody(request);
-        try {
-            const user = userStore.createUser({
-                username: typeof body.username === "string" ? body.username : "",
-                password: typeof body.password === "string" ? body.password : "",
-                role: normalizeUserRole(body.role),
-            });
-            sendJson(response, 201, { user: publicUser(user) });
-        }
-        catch (error) {
-            sendJson(response, 400, {
-                error: userMutationError(error),
-            });
-        }
-        return;
-    }
-    const adminUserMatch = url.pathname.match(/^\/api\/admin\/users\/([^/]+)$/);
-    if (request.method === "PATCH" && adminUserMatch) {
-        const userId = decodeURIComponent(adminUserMatch[1]);
-        const current = userStore.getUser(userId);
-        if (!current) {
-            sendJson(response, 404, { error: "user_not_found" });
-            return;
-        }
-        const body = await readJsonBody(request);
-        const role = body.role === undefined ? undefined : normalizeUserRole(body.role);
-        const active = body.active === undefined ? undefined : body.active === true;
-        if (userId === authenticatedUser.id &&
-            ((role !== undefined && role !== "admin") || active === false)) {
-            sendJson(response, 409, { error: "cannot_remove_own_admin_access" });
-            return;
-        }
-        if (current.role === "admin" &&
-            current.active &&
-            ((role !== undefined && role !== "admin") || active === false) &&
-            activeAdminCount() <= 1) {
-            sendJson(response, 409, { error: "last_admin_required" });
-            return;
-        }
-        try {
-            const user = userStore.updateUser(userId, {
-                username: typeof body.username === "string" ? body.username : undefined,
-                password: typeof body.password === "string" ? body.password : undefined,
-                role,
-                active,
-            });
-            if (userId === authenticatedUser.id &&
-                typeof body.password === "string" &&
-                body.password.length > 0) {
-                setSessionCookie(response, request, {
-                    userId: user.id,
-                    sessionVersion: user.sessionVersion,
-                    ttlSeconds: config.authSessionTtlSeconds,
-                    secret: userStore.sessionSecret,
-                    path: config.publicBasePath,
-                });
-            }
-            sendJson(response, 200, { user: publicUser(user) });
-        }
-        catch (error) {
-            sendJson(response, 400, { error: userMutationError(error) });
-        }
-        return;
-    }
-    if (request.method === "DELETE" && adminUserMatch) {
-        const userId = decodeURIComponent(adminUserMatch[1]);
-        const current = userStore.getUser(userId);
-        if (!current) {
-            sendJson(response, 404, { error: "user_not_found" });
-            return;
-        }
-        if (userId === authenticatedUser.id) {
-            sendJson(response, 409, { error: "cannot_delete_current_user" });
-            return;
-        }
-        if (listConversations().some((conversation) => conversation.ownerId === userId)) {
-            sendJson(response, 409, { error: "user_owns_workspaces" });
-            return;
-        }
-        if (listWorkspaceGroups().some((group) => group.ownerId === userId)) {
-            sendJson(response, 409, { error: "user_owns_workspace_groups" });
-            return;
-        }
-        if (current.role === "admin" && current.active && activeAdminCount() <= 1) {
-            sendJson(response, 409, { error: "last_admin_required" });
-            return;
-        }
-        userStore.deleteUser(userId);
-        sendJson(response, 200, { ok: true });
-        return;
-    }
-    if (request.method === "GET" && url.pathname === "/api/meta") {
-        sendJson(response, 200, await getAppMeta());
-        return;
-    }
-    const agentTranscriptMatch = url.pathname.match(/^\/agent\/workspaces\/([^/]+)\/transcript$/);
-    if (request.method === "GET" && agentTranscriptMatch) {
-        const conversation = getConversation(decodeURIComponent(agentTranscriptMatch[1]));
-        if (!conversation) {
-            sendJson(response, 404, { error: "workspace_not_found" });
-            return;
-        }
-        const limit = readPositiveInteger(url.searchParams.get("limit")) ?? 100;
-        const before = url.searchParams.get("before");
-        const messages = listConversationTranscriptMessagesBefore(conversation, before, limit);
-        sendJson(response, 200, {
-            workspace: {
-                id: conversation.id,
-                name: conversation.title,
-            },
-            order: "chronological",
-            messages,
-            page: {
-                limit: Math.max(1, Math.min(500, Math.trunc(limit))),
-                oldestMessageId: messages[0]?.id ?? null,
-                nextOlderUrl: messages[0]
-                    ? `${getAgentTranscriptApiBase(conversation)}?limit=${Math.max(1, Math.min(500, Math.trunc(limit)))}&before=${encodeURIComponent(messages[0].id)}`
-                    : null,
-            },
-        });
-        return;
-    }
-    const agentTranscriptRangeMatch = url.pathname.match(/^\/agent\/workspaces\/([^/]+)\/transcript\/range$/);
-    if (request.method === "GET" && agentTranscriptRangeMatch) {
-        const conversation = getConversation(decodeURIComponent(agentTranscriptRangeMatch[1]));
-        if (!conversation) {
-            sendJson(response, 404, { error: "workspace_not_found" });
-            return;
-        }
-        const startMessageId = url.searchParams.get("startMessageId") ?? "";
-        const endMessageId = url.searchParams.get("endMessageId") ?? "";
-        if (!isTranscriptMessageId(startMessageId) || !isTranscriptMessageId(endMessageId)) {
-            sendJson(response, 400, { error: "invalid_message_range" });
-            return;
-        }
-        const messages = listConversationTranscriptMessageRange(conversation, startMessageId, endMessageId, readPositiveInteger(url.searchParams.get("limit")) ?? 500);
-        sendJson(response, 200, {
-            workspace: {
-                id: conversation.id,
-                name: conversation.title,
-            },
-            order: "chronological",
-            range: {
-                startMessageId,
-                endMessageId,
-            },
-            messages,
-        });
-        return;
-    }
-    const agentTranscriptSummariesMatch = url.pathname.match(/^\/agent\/workspaces\/([^/]+)\/transcript\/summaries$/);
-    if (request.method === "GET" && agentTranscriptSummariesMatch) {
-        const conversation = getConversation(decodeURIComponent(agentTranscriptSummariesMatch[1]));
-        if (!conversation) {
-            sendJson(response, 404, { error: "workspace_not_found" });
-            return;
-        }
-        sendJson(response, 200, {
-            workspace: {
-                id: conversation.id,
-                name: conversation.title,
-            },
-            summaries: listTranscriptRangeSummaries(conversation),
-        });
-        return;
-    }
-    const agentKnowledgeMatch = url.pathname.match(/^\/agent\/workspaces\/([^/]+)\/knowledge$/);
-    if (request.method === "GET" && agentKnowledgeMatch) {
-        const conversation = getConversation(decodeURIComponent(agentKnowledgeMatch[1]));
-        if (!conversation) {
-            sendJson(response, 404, { error: "workspace_not_found" });
-            return;
-        }
-        sendJson(response, 200, {
-            workspace: {
-                id: conversation.id,
-                name: conversation.title,
-            },
-            items: listWorkspaceKnowledge(conversation).map((item) => ({
-                id: item.id,
-                name: item.name,
-                purpose: item.purpose,
-                updatedAt: item.updatedAt,
-                bodyUrl: `${getAgentKnowledgeApiBase(conversation)}/${encodeURIComponent(item.id)}`,
-            })),
-        });
-        return;
-    }
-    const agentKnowledgeBodyMatch = url.pathname.match(/^\/agent\/workspaces\/([^/]+)\/knowledge\/([^/]+)$/);
-    if (request.method === "GET" && agentKnowledgeBodyMatch) {
-        const conversation = getConversation(decodeURIComponent(agentKnowledgeBodyMatch[1]));
-        if (!conversation) {
-            sendJson(response, 404, { error: "workspace_not_found" });
-            return;
-        }
-        const knowledgeId = decodeURIComponent(agentKnowledgeBodyMatch[2]);
-        const item = listWorkspaceKnowledge(conversation).find((candidate) => candidate.id === knowledgeId);
-        if (!item) {
-            sendJson(response, 404, { error: "knowledge_not_found" });
-            return;
-        }
-        sendJson(response, 200, {
-            workspace: {
-                id: conversation.id,
-                name: conversation.title,
-            },
-            knowledge: {
-                id: item.id,
-                name: item.name,
-                purpose: item.purpose,
-                content: item.description,
-                updatedAt: item.updatedAt,
-            },
-        });
-        return;
-    }
-    if (request.method === "GET" && url.pathname === "/api/conversations") {
-        sendJson(response, 200, {
-            conversations: visibleConversations(authenticatedUser),
-        });
-        return;
-    }
-    if (request.method === "GET" && url.pathname === "/api/workspace-unread") {
-        sendJson(response, 200, {
-            workspaces: visibleConversations(authenticatedUser).map((conversation) => ({
-                id: conversation.id,
-                unreadTurnCount: conversation.unreadTurnCount,
-            })),
-        });
-        return;
-    }
-    if (request.method === "GET" && url.pathname === "/api/workspace-groups") {
-        sendJson(response, 200, {
-            groups: visibleWorkspaceGroups(authenticatedUser),
-        });
-        return;
-    }
-    if (request.method === "GET" && url.pathname === "/api/settings/environment") {
-        sendJson(response, 200, {
-            variables: listGlobalEnvironmentVariables().map((item) => ({
-                key: item.key,
-                description: item.description,
-                hasValue: item.value.length > 0,
-                createdAt: item.createdAt,
-                updatedAt: item.updatedAt,
-            })),
-        });
-        return;
-    }
-    if (request.method === "PUT" && url.pathname === "/api/settings/environment") {
-        const body = await readJsonBody(request);
-        const key = typeof body.key === "string" ? body.key.trim() : "";
-        const value = typeof body.value === "string" ? body.value : "";
-        const description = typeof body.description === "string" ? body.description.trim() : "";
-        if (!isValidEnvironmentVariableKey(key)) {
-            sendJson(response, 400, { error: "invalid_environment_key" });
-            return;
-        }
-        const variable = upsertGlobalEnvironmentVariable(key, value, description);
-        sendJson(response, 200, {
-            variable: {
-                key: variable.key,
-                description: variable.description,
-                hasValue: variable.value.length > 0,
-                createdAt: variable.createdAt,
-                updatedAt: variable.updatedAt,
-            },
-        });
-        return;
-    }
-    if (request.method === "GET" && url.pathname === "/api/settings/runtime") {
-        sendJson(response, 200, {
-            settings: getRuntimeSettings(),
-        });
-        return;
-    }
-    if (request.method === "GET" && url.pathname === "/api/settings/runtime/codex") {
-        const codexVersion = await readManagedCodexPackageVersion();
-        const codexReleasedAt = codexVersion
-            ? await getCodexReleaseTime(codexVersion)
-            : null;
-        sendJson(response, 200, {
-            codexVersion: codexVersion ? `codex-cli ${codexVersion}` : "unknown",
-            codexReleasedAt,
-        });
-        return;
-    }
-    if (request.method === "GET" && url.pathname === "/api/settings/runtime/models") {
-        try {
-            let cached = readRuntimeModelCatalogCache();
-            const shouldRefresh = url.searchParams.get("refresh") !== "0";
-            if (!cached) {
-                const catalog = await refreshRuntimeModelCatalog();
-                cached = {
-                    catalog,
-                    updatedAt: new Date().toISOString(),
-                };
-            }
-            else if (shouldRefresh) {
-                void refreshRuntimeModelCatalog().catch((error) => {
-                    console.error("runtime model catalog refresh failed", error);
-                });
-            }
-            const catalog = cached.catalog;
-            const codexReleasedAt = await getCodexReleaseTime(catalog.codexVersion);
-            sendJson(response, 200, {
-                ...catalog,
-                codexReleasedAt,
-                catalogUpdatedAt: cached.updatedAt,
-                refreshing: runtimeModelCatalogRefresh !== null,
-            });
-        }
-        catch (error) {
-            sendJson(response, 502, {
-                error: "runtime_model_catalog_unavailable",
-                detail: error instanceof Error ? error.message : String(error),
-            });
-        }
-        return;
-    }
-    if (request.method === "GET" && url.pathname === "/api/settings/runtime/rate-limits") {
-        const cached = readRuntimeRateLimitsCache();
-        if (url.searchParams.get("refresh") !== "1") {
-            sendJson(response, 200, { usage: cached });
-            return;
-        }
-        try {
-            const usage = await refreshRuntimeRateLimits();
-            sendJson(response, 200, { usage });
-        }
-        catch (error) {
-            if (cached) {
-                sendJson(response, 200, {
-                    usage: cached,
-                    refreshError: error instanceof Error ? error.message : String(error),
-                });
-            }
-            else {
-                sendJson(response, 502, {
-                    error: "runtime_rate_limits_unavailable",
-                    detail: error instanceof Error ? error.message : String(error),
-                });
-            }
-        }
-        return;
-    }
-    if (request.method === "GET" && url.pathname === "/api/settings/runtime/codex/update") {
-        if (url.searchParams.get("refreshLatest") === "1") {
-            codexLatestVersion = await fetchLatestCodexVersion();
-        }
-        sendJson(response, 200, {
-            job: codexUpdateJob,
-            latest: codexLatestVersion,
-        });
-        return;
-    }
-    if (request.method === "POST" && url.pathname === "/api/settings/runtime/codex/update") {
-        if (codexUpdateJob?.status === "running") {
-            sendJson(response, 409, {
-                error: "codex_update_in_progress",
-                job: codexUpdateJob,
-            });
-            return;
-        }
-        if (activeConversationTurns.size > 0) {
-            sendJson(response, 409, {
-                error: "runtime_busy",
-                detail: "Wait for running workspace turns to finish before updating Codex CLI.",
-            });
-            return;
-        }
-        codexUpdateJob = {
-            id: randomUUID(),
-            status: "running",
-            startedAt: new Date().toISOString(),
-            finishedAt: null,
-            previousVersion: null,
-            currentVersion: null,
-            codexReleasedAt: null,
-            logs: [],
-            error: null,
-        };
-        appendCodexUpdateLog(codexUpdateJob, "system", "Codex CLI update requested.");
-        sendJson(response, 202, { job: codexUpdateJob });
-        void runCodexUpdateJob(codexUpdateJob);
-        return;
-    }
-    if (request.method === "GET" && url.pathname === "/api/settings/memory") {
-        const items = getGlobalMemoryItems();
-        sendJson(response, 200, {
-            memory: formatMemoryItems(items),
-            items,
-        });
-        return;
-    }
-    if (request.method === "PUT" && url.pathname === "/api/settings/memory") {
-        const body = await readJsonBody(request);
-        if (!Array.isArray(body.items)) {
-            sendJson(response, 400, { error: "invalid_memory" });
-            return;
-        }
-        const validationError = validateMemoryRequestItems(body.items);
-        if (validationError) {
-            sendJson(response, 400, validationError);
-            return;
-        }
-        const items = normalizeMemoryRequestItems(body.items);
-        upsertAppSetting(GLOBAL_MEMORY_ITEMS_SETTING_KEY, JSON.stringify(items));
-        sendJson(response, 200, {
-            memory: formatMemoryItems(items),
-            items,
-        });
-        return;
-    }
-    if (request.method === "PUT" && url.pathname === "/api/settings/runtime") {
-        const body = await readJsonBody(request);
-        const model = typeof body.model === "string" ? body.model.trim() : "";
-        const reasoningEffort = normalizeRuntimeReasoningEffort(body.reasoningEffort);
-        const fastMode = body.fastMode === true;
-        const sandbox = isConversationSandbox(body.sandbox)
-            ? body.sandbox
-            : getGlobalRuntimeSettings().sandbox;
-        const notifyEnabled = body.notifyEnabled !== false;
-        upsertAppSetting(RUNTIME_MODEL_SETTING_KEY, model);
-        upsertAppSetting(RUNTIME_REASONING_EFFORT_SETTING_KEY, reasoningEffort);
-        upsertAppSetting(RUNTIME_FAST_MODE_SETTING_KEY, fastMode ? "true" : "false");
-        upsertAppSetting(RUNTIME_SANDBOX_SETTING_KEY, sandbox);
-        upsertAppSetting(RUNTIME_NOTIFY_ENABLED_SETTING_KEY, notifyEnabled ? "true" : "false");
-        sendJson(response, 200, {
-            settings: getRuntimeSettings(),
-        });
-        return;
-    }
-    const globalEnvironmentMatch = url.pathname.match(/^\/api\/settings\/environment\/([^/]+)$/);
-    const globalEnvironmentRevealMatch = url.pathname.match(/^\/api\/settings\/environment\/([^/]+)\/reveal$/);
-    if (request.method === "GET" && globalEnvironmentRevealMatch) {
-        const key = decodeURIComponent(globalEnvironmentRevealMatch[1]);
-        if (!isValidEnvironmentVariableKey(key)) {
-            sendJson(response, 400, { error: "invalid_environment_key" });
-            return;
-        }
-        const variable = revealGlobalEnvironmentVariable(key);
-        if (!variable) {
-            sendJson(response, 404, { error: "environment_variable_not_found" });
-            return;
-        }
-        sendJson(response, 200, {
-            variable: {
-                key: variable.key,
-                value: variable.value,
-            },
-        });
-        return;
-    }
-    if (request.method === "DELETE" && globalEnvironmentMatch) {
-        const key = decodeURIComponent(globalEnvironmentMatch[1]);
-        if (!isValidEnvironmentVariableKey(key)) {
-            sendJson(response, 400, { error: "invalid_environment_key" });
-            return;
-        }
-        if (!deleteGlobalEnvironmentVariable(key)) {
-            sendJson(response, 404, { error: "environment_variable_not_found" });
-            return;
-        }
-        sendJson(response, 200, { ok: true });
-        return;
-    }
-    if (request.method === "POST" && url.pathname === "/api/workspace-groups") {
-        const body = await readJsonBody(request);
-        if (typeof body.title !== "string" || !body.title.trim()) {
-            sendJson(response, 400, { error: "title_required" });
-            return;
-        }
-        const group = createWorkspaceGroup(body.title.trim(), authenticatedUser.id);
-        sendJson(response, 201, { group });
-        return;
-    }
-    const workspaceGroupMatch = url.pathname.match(/^\/api\/workspace-groups\/([^/]+)$/);
-    if (request.method === "PATCH" && workspaceGroupMatch) {
-        if (!hasWorkspaceGroup(workspaceGroupMatch[1])) {
-            sendJson(response, 404, { error: "workspace_group_not_found" });
-            return;
-        }
-        const body = await readJsonBody(request);
-        if (typeof body.title !== "string" || !body.title.trim()) {
-            sendJson(response, 400, { error: "title_required" });
-            return;
-        }
-        const group = setWorkspaceGroupTitle(workspaceGroupMatch[1], body.title.trim());
-        if (!group) {
-            sendJson(response, 404, { error: "workspace_group_not_found" });
-            return;
-        }
-        sendJson(response, 200, { group });
-        return;
-    }
-    if (request.method === "DELETE" && workspaceGroupMatch) {
-        if (!hasWorkspaceGroup(workspaceGroupMatch[1])) {
-            sendJson(response, 404, { error: "workspace_group_not_found" });
-            return;
-        }
-        if (!deleteWorkspaceGroup(workspaceGroupMatch[1])) {
-            sendJson(response, 409, { error: "workspace_group_not_deletable" });
-            return;
-        }
-        sendJson(response, 200, {
-            conversations: visibleConversations(authenticatedUser),
-            groups: visibleWorkspaceGroups(authenticatedUser),
-        });
-        return;
-    }
-    if (request.method === "POST" && url.pathname === "/api/conversations") {
-        const body = await readJsonBody(request);
-        if (typeof body.title !== "string" || !body.title.trim()) {
-            sendJson(response, 400, { error: "title_required" });
-            return;
-        }
-        const requestedGroupId = typeof body.groupId === "string" ? body.groupId : "default";
-        if (!canAccessWorkspaceGroup(authenticatedUser, requestedGroupId)) {
-            sendJson(response, 400, { error: "invalid_group" });
-            return;
-        }
-        const conversation = createConversation({
-            title: body.title.trim(),
-            groupId: typeof body.groupId === "string" ? body.groupId : undefined,
-            workspaceRoot: config.workspaceRoot,
-            sandbox: getGlobalRuntimeSettings().sandbox,
-            ownerId: authenticatedUser.id,
-        });
-        sendJson(response, 201, {
-            conversation: {
-                ...conversation,
-                nextWakeup: getNextScheduledWorkspaceWakeup(conversation.id),
-                unreadTurnCount: 0,
-            },
-        });
-        return;
-    }
-    const conversationReadMatch = url.pathname.match(/^\/api\/conversations\/([^/]+)\/read$/);
-    if (request.method === "POST" && conversationReadMatch) {
-        const conversation = getConversation(conversationReadMatch[1]);
-        if (!conversation) {
-            sendJson(response, 404, { error: "conversation_not_found" });
-            return;
-        }
-        markConversationRead(conversation, authenticatedUser.id);
-        sendJson(response, 200, { ok: true, unreadTurnCount: 0 });
-        return;
-    }
-    const conversationMatch = url.pathname.match(/^\/api\/conversations\/([^/]+)$/);
-    if (request.method === "GET" && conversationMatch) {
-        const conversation = getConversation(conversationMatch[1]);
-        if (!conversation) {
-            sendJson(response, 404, { error: "conversation_not_found" });
-            return;
-        }
-        const page = getConversationHistoryPage(conversation, {
-            before: url.searchParams.get("before"),
-            limit: readPositiveInteger(url.searchParams.get("limit")),
-        });
-        sendJson(response, 200, {
-            conversation: {
-                ...conversation,
-                messages: page.messages,
-                events: page.events,
-                history: page.history,
-                nextWakeup: getNextScheduledWorkspaceWakeup(conversation.id),
-                unreadTurnCount: countConversationUnreadTurns(conversation, authenticatedUser.id),
-            },
-        });
-        return;
-    }
-    if (request.method === "PATCH" && conversationMatch) {
-        const conversation = getConversation(conversationMatch[1]);
-        if (!conversation) {
-            sendJson(response, 404, { error: "conversation_not_found" });
-            return;
-        }
-        const body = await readJsonBody(request);
-        const hasTitle = Object.prototype.hasOwnProperty.call(body, "title");
-        const hasSandbox = Object.prototype.hasOwnProperty.call(body, "sandbox");
-        const hasGroup = Object.prototype.hasOwnProperty.call(body, "groupId");
-        const hasMemory = Object.prototype.hasOwnProperty.call(body, "memory");
-        const hasMemoryItems = Object.prototype.hasOwnProperty.call(body, "memoryItems");
-        const hasResponsibility = Object.prototype.hasOwnProperty.call(body, "responsibility");
-        if (!hasTitle &&
-            !hasSandbox &&
-            !hasGroup &&
-            !hasMemory &&
-            !hasMemoryItems &&
-            !hasResponsibility) {
-            sendJson(response, 400, { error: "patch_required" });
-            return;
-        }
-        if (hasTitle) {
-            if (typeof body.title !== "string" || !body.title.trim()) {
-                sendJson(response, 400, { error: "title_required" });
-                return;
-            }
-        }
-        if (hasSandbox) {
-            if (!isConversationSandbox(body.sandbox)) {
-                sendJson(response, 400, { error: "invalid_sandbox" });
-                return;
-            }
-            if (conversation.status === "running") {
-                sendJson(response, 409, { error: "conversation_running" });
-                return;
-            }
-        }
-        if (hasGroup) {
-            if (typeof body.groupId !== "string" ||
-                !canAccessWorkspaceGroup(authenticatedUser, body.groupId)) {
-                sendJson(response, 400, { error: "invalid_group" });
-                return;
-            }
-        }
-        if (hasMemory && typeof body.memory !== "string") {
-            sendJson(response, 400, { error: "invalid_memory" });
-            return;
-        }
-        if (hasMemoryItems && !Array.isArray(body.memoryItems)) {
-            sendJson(response, 400, { error: "invalid_memory_items" });
-            return;
-        }
-        if (hasMemoryItems) {
-            const validationError = validateMemoryRequestItems(body.memoryItems);
-            if (validationError) {
-                sendJson(response, 400, validationError);
-                return;
-            }
-        }
-        if (hasResponsibility && typeof body.responsibility !== "string") {
-            sendJson(response, 400, { error: "invalid_responsibility" });
-            return;
-        }
-        if (hasTitle) {
-            setConversationTitle(conversation, body.title.trim());
-        }
-        if (hasSandbox) {
-            setConversationSandbox(conversation, body.sandbox);
-        }
-        if (hasGroup) {
-            setConversationGroup(conversation, body.groupId);
-        }
-        if (hasMemory) {
-            setConversationMemory(conversation, body.memory);
-        }
-        if (hasMemoryItems) {
-            setConversationMemoryItems(conversation, normalizeMemoryRequestItems(body.memoryItems));
-        }
-        if (hasResponsibility) {
-            setConversationResponsibility(conversation, body.responsibility);
-        }
-        sendJson(response, 200, {
-            conversation: {
-                ...conversation,
-                nextWakeup: getNextScheduledWorkspaceWakeup(conversation.id),
-            },
-        });
-        return;
-    }
-    const conversationRuntimeThreadReadMatch = url.pathname.match(/^\/api\/conversations\/([^/]+)\/runtime\/thread-read$/);
-    if (request.method === "GET" && conversationRuntimeThreadReadMatch) {
-        const conversation = getConversation(conversationRuntimeThreadReadMatch[1]);
-        if (!conversation) {
-            sendJson(response, 404, { error: "conversation_not_found" });
-            return;
-        }
-        if (!conversation.codexThreadId) {
-            sendJson(response, 409, { error: "thread_not_started" });
-            return;
-        }
-        try {
-            const result = await runtime.readThread(config, {
-                cwd: conversation.workspacePath,
-                threadId: conversation.codexThreadId,
-            });
-            sendJson(response, 200, { result });
-        }
-        catch (error) {
-            sendJson(response, 500, {
-                error: "thread_read_failed",
-                message: error instanceof Error ? error.message : String(error),
-            });
-        }
-        return;
-    }
-    const conversationRuntimeTokenUsageMatch = url.pathname.match(/^\/api\/conversations\/([^/]+)\/runtime\/token-usage$/);
-    if (request.method === "GET" && conversationRuntimeTokenUsageMatch) {
-        const conversation = getConversation(conversationRuntimeTokenUsageMatch[1]);
-        if (!conversation) {
-            sendJson(response, 404, { error: "conversation_not_found" });
-            return;
-        }
-        sendJson(response, 200, {
-            event: getLatestConversationNotification(conversation, "thread/tokenUsage/updated"),
-        });
-        return;
-    }
-    const conversationRuntimeAdditionalContextMatch = url.pathname.match(/^\/api\/conversations\/([^/]+)\/runtime\/additional-context$/);
-    if (request.method === "GET" && conversationRuntimeAdditionalContextMatch) {
-        const conversation = getConversation(conversationRuntimeAdditionalContextMatch[1]);
-        if (!conversation) {
-            sendJson(response, 404, { error: "conversation_not_found" });
-            return;
-        }
-        const runtimeConfig = withWorkspaceRuntimeSettings(config, conversation);
-        const injectionContext = buildRuntimeInjectionContext(conversation);
-        const context = buildRuntimeAdditionalContext({
-            ...injectionContext,
-            workspacePath: conversation.workspacePath,
-            globalEnvironment: describeRuntimeEnvironment(runtimeConfig),
-        });
-        sendJson(response, 200, {
-            context,
-            generatedAt: new Date().toISOString(),
-        });
-        return;
-    }
-    const conversationRuntimeCompactionsMatch = url.pathname.match(/^\/api\/conversations\/([^/]+)\/runtime\/compactions$/);
-    if (request.method === "GET" && conversationRuntimeCompactionsMatch) {
-        const conversation = getConversation(conversationRuntimeCompactionsMatch[1]);
-        if (!conversation) {
-            sendJson(response, 404, { error: "conversation_not_found" });
-            return;
-        }
-        const events = listConversationEventsByType(conversation, [
-            "runtime.compaction.started",
-            "runtime.compaction.completed",
-            "runtime.compaction.usage_observed",
-        ], 300);
-        sendJson(response, 200, {
-            compactions: summarizeRuntimeCompactions(events),
-        });
-        return;
-    }
-    const conversationRuntimeResetMatch = url.pathname.match(/^\/api\/conversations\/([^/]+)\/runtime\/reset$/);
-    const conversationRuntimeResetPreviewMatch = url.pathname.match(/^\/api\/conversations\/([^/]+)\/runtime\/reset-preview$/);
-    if (request.method === "GET" && conversationRuntimeResetPreviewMatch) {
-        const conversation = getConversation(conversationRuntimeResetPreviewMatch[1]);
-        if (!conversation) {
-            sendJson(response, 404, { error: "conversation_not_found" });
-            return;
-        }
-        const plan = buildRuntimeResetPlan(conversation);
-        sendJson(response, 200, {
-            conversationId: conversation.id,
-            currentThreadId: conversation.codexThreadId,
-            generatedAt: new Date().toISOString(),
-            fingerprint: plan.fingerprint,
-            injectedItemCount: plan.visibleMessages.length,
-            injectedUserMessageCount: plan.injectedUserMessageCount,
-            injectedAssistantMessageCount: plan.injectedAssistantMessageCount,
-            items: plan.injectedItems,
-        });
-        return;
-    }
-    if (request.method === "POST" && conversationRuntimeResetMatch) {
-        const conversation = getConversation(conversationRuntimeResetMatch[1]);
-        if (!conversation) {
-            sendJson(response, 404, { error: "conversation_not_found" });
-            return;
-        }
-        if (conversation.status === "running") {
-            sendJson(response, 409, { error: "conversation_running" });
-            return;
-        }
-        const body = await readJsonBody(request);
-        if (typeof body.previewFingerprint !== "string") {
-            sendJson(response, 400, { error: "reset_preview_required" });
-            return;
-        }
-        const plan = buildRuntimeResetPlan(conversation);
-        if (body.previewFingerprint !== plan.fingerprint) {
-            sendJson(response, 409, {
-                error: "reset_preview_changed",
-                message: "Visible history changed after the reset preview was generated.",
-            });
-            return;
-        }
-        try {
-            const result = await resetConversationRuntimeThread(conversation, {
-                warmup: body.warmup !== false,
-            }, plan);
-            sendJson(response, 200, {
-                ok: true,
-                ...result,
-            });
-        }
-        catch (error) {
-            sendJson(response, 500, {
-                ok: false,
-                error: "runtime_reset_failed",
-                message: error instanceof Error ? error.message : String(error),
-            });
-        }
-        return;
-    }
-    const conversationRuntimeResetsMatch = url.pathname.match(/^\/api\/conversations\/([^/]+)\/runtime\/resets$/);
-    if (request.method === "GET" && conversationRuntimeResetsMatch) {
-        const conversation = getConversation(conversationRuntimeResetsMatch[1]);
-        if (!conversation) {
-            sendJson(response, 404, { error: "conversation_not_found" });
-            return;
-        }
-        const limit = Number(url.searchParams.get("limit") ?? "10");
-        sendJson(response, 200, {
-            resets: listRuntimeResets(conversation, Number.isFinite(limit) ? limit : 10),
-        });
-        return;
-    }
-    const conversationRevisionMatch = url.pathname.match(/^\/api\/conversations\/([^/]+)\/revision$/);
-    if (request.method === "GET" && conversationRevisionMatch) {
-        const conversation = getConversation(conversationRevisionMatch[1]);
-        if (!conversation) {
-            sendJson(response, 404, { error: "conversation_not_found" });
-            return;
-        }
-        sendJson(response, 200, {
-            revision: getConversationRevision(conversation),
-        });
-        return;
-    }
-    const conversationRuntimeSettingsMatch = url.pathname.match(/^\/api\/conversations\/([^/]+)\/settings\/runtime$/);
-    if (request.method === "GET" && conversationRuntimeSettingsMatch) {
-        const conversation = getConversation(conversationRuntimeSettingsMatch[1]);
-        if (!conversation) {
-            sendJson(response, 404, { error: "conversation_not_found" });
-            return;
-        }
-        sendJson(response, 200, {
-            settings: getWorkspaceRuntimeSettings(conversation),
-        });
-        return;
-    }
-    if (request.method === "PUT" && conversationRuntimeSettingsMatch) {
-        const conversation = getConversation(conversationRuntimeSettingsMatch[1]);
-        if (!conversation) {
-            sendJson(response, 404, { error: "conversation_not_found" });
-            return;
-        }
-        if (conversation.status === "running") {
-            sendJson(response, 409, { error: "conversation_running" });
-            return;
-        }
-        const body = await readJsonBody(request);
-        try {
-            applyWorkspaceRuntimeSettingUpdate(conversation, body);
-        }
-        catch (error) {
-            sendJson(response, 400, {
-                error: "invalid_runtime_settings",
-                message: error instanceof Error ? error.message : String(error),
-            });
-            return;
-        }
-        sendJson(response, 200, {
-            settings: getWorkspaceRuntimeSettings(conversation),
-            conversation: {
-                ...conversation,
-                nextWakeup: getNextScheduledWorkspaceWakeup(conversation.id),
-            },
-        });
-        return;
-    }
-    const conversationEnvironmentMatch = url.pathname.match(/^\/api\/conversations\/([^/]+)\/settings\/environment$/);
-    if (request.method === "GET" && conversationEnvironmentMatch) {
-        const conversation = getConversation(conversationEnvironmentMatch[1]);
-        if (!conversation) {
-            sendJson(response, 404, { error: "conversation_not_found" });
-            return;
-        }
-        sendJson(response, 200, {
-            variables: listConversationEnvironmentVariables(conversation).map((item) => ({
-                key: item.key,
-                description: item.description,
-                hasValue: item.value.length > 0,
-                createdAt: item.createdAt,
-                updatedAt: item.updatedAt,
-            })),
-        });
-        return;
-    }
-    if (request.method === "PUT" && conversationEnvironmentMatch) {
-        const conversation = getConversation(conversationEnvironmentMatch[1]);
-        if (!conversation) {
-            sendJson(response, 404, { error: "conversation_not_found" });
-            return;
-        }
-        const body = await readJsonBody(request);
-        const key = typeof body.key === "string" ? body.key.trim() : "";
-        const value = typeof body.value === "string" ? body.value : "";
-        const description = typeof body.description === "string" ? body.description.trim() : "";
-        if (!isValidEnvironmentVariableKey(key)) {
-            sendJson(response, 400, { error: "invalid_environment_key" });
-            return;
-        }
-        const variable = upsertConversationEnvironmentVariable(conversation, key, value, description);
-        sendJson(response, 200, {
-            variable: {
-                key: variable.key,
-                description: variable.description,
-                hasValue: variable.value.length > 0,
-                createdAt: variable.createdAt,
-                updatedAt: variable.updatedAt,
-            },
-            conversation: {
-                ...conversation,
-                nextWakeup: getNextScheduledWorkspaceWakeup(conversation.id),
-            },
-        });
-        return;
-    }
-    const conversationEnvironmentKeyMatch = url.pathname.match(/^\/api\/conversations\/([^/]+)\/settings\/environment\/([^/]+)$/);
-    const conversationEnvironmentRevealMatch = url.pathname.match(/^\/api\/conversations\/([^/]+)\/settings\/environment\/([^/]+)\/reveal$/);
-    if (request.method === "GET" && conversationEnvironmentRevealMatch) {
-        const conversation = getConversation(conversationEnvironmentRevealMatch[1]);
-        const key = decodeURIComponent(conversationEnvironmentRevealMatch[2]);
-        if (!conversation) {
-            sendJson(response, 404, { error: "conversation_not_found" });
-            return;
-        }
-        if (!isValidEnvironmentVariableKey(key)) {
-            sendJson(response, 400, { error: "invalid_environment_key" });
-            return;
-        }
-        const variable = revealConversationEnvironmentVariable(conversation, key);
-        if (!variable) {
-            sendJson(response, 404, { error: "environment_variable_not_found" });
-            return;
-        }
-        sendJson(response, 200, {
-            variable: {
-                key: variable.key,
-                value: variable.value,
-            },
-        });
-        return;
-    }
-    if (request.method === "DELETE" && conversationEnvironmentKeyMatch) {
-        const conversation = getConversation(conversationEnvironmentKeyMatch[1]);
-        const key = decodeURIComponent(conversationEnvironmentKeyMatch[2]);
-        if (!conversation) {
-            sendJson(response, 404, { error: "conversation_not_found" });
-            return;
-        }
-        if (!isValidEnvironmentVariableKey(key)) {
-            sendJson(response, 400, { error: "invalid_environment_key" });
-            return;
-        }
-        if (!deleteConversationEnvironmentVariable(conversation, key)) {
-            sendJson(response, 404, { error: "environment_variable_not_found" });
-            return;
-        }
-        sendJson(response, 200, {
-            ok: true,
-            conversation: {
-                ...conversation,
-                nextWakeup: getNextScheduledWorkspaceWakeup(conversation.id),
-            },
-        });
-        return;
-    }
-    const conversationKnowledgeMatch = url.pathname.match(/^\/api\/conversations\/([^/]+)\/knowledge$/);
-    if (conversationKnowledgeMatch) {
-        const conversation = getConversation(conversationKnowledgeMatch[1]);
-        if (!conversation) {
-            sendJson(response, 404, { error: "conversation_not_found" });
-            return;
-        }
-        if (request.method === "GET") {
-            sendJson(response, 200, {
-                items: listWorkspaceKnowledge(conversation),
-            });
-            return;
-        }
-        if (request.method === "POST") {
-            const body = await readJsonBody(request);
-            const item = createWorkspaceKnowledge(conversation, body);
-            sendJson(response, 201, { item });
-            return;
-        }
-    }
-    const conversationKnowledgeItemMatch = url.pathname.match(/^\/api\/conversations\/([^/]+)\/knowledge\/([^/]+)$/);
-    if (conversationKnowledgeItemMatch) {
-        const conversation = getConversation(conversationKnowledgeItemMatch[1]);
-        if (!conversation) {
-            sendJson(response, 404, { error: "conversation_not_found" });
-            return;
-        }
-        const knowledgeId = decodeURIComponent(conversationKnowledgeItemMatch[2]);
-        if (request.method === "PATCH") {
-            const body = await readJsonBody(request);
-            const item = updateWorkspaceKnowledge(conversation, knowledgeId, body);
-            if (!item) {
-                sendJson(response, 404, { error: "knowledge_not_found" });
-                return;
-            }
-            sendJson(response, 200, { item });
-            return;
-        }
-        if (request.method === "DELETE") {
-            if (!deleteWorkspaceKnowledge(conversation, knowledgeId)) {
-                sendJson(response, 404, { error: "knowledge_not_found" });
-                return;
-            }
-            sendJson(response, 200, { ok: true });
-            return;
-        }
-    }
-    if (request.method === "POST" &&
-        url.pathname === "/callback/profuse/message") {
-        if (!isAuthorizedProfuseRequest(request)) {
-            sendJson(response, 401, { error: "unauthorized" });
-            return;
-        }
-        const body = await readJsonBody(request);
-        const conversationId = typeof body.instance_id === "string" ? body.instance_id.trim() : "";
-        const content = typeof body.content === "string"
-            ? body.content
-            : typeof body.message === "string"
-                ? body.message
-                : "";
-        if (!conversationId) {
-            sendJson(response, 400, { error: "instance_id_required" });
-            return;
-        }
-        if (!content.trim()) {
-            sendJson(response, 400, { error: "content_required" });
-            return;
-        }
-        const conversation = getConversation(conversationId);
-        if (!conversation) {
-            sendJson(response, 404, { error: "conversation_not_found" });
-            return;
-        }
-        try {
-            const result = enqueueConversationTurn(conversation, {
-                message: content,
-                source: "profuse",
-            });
-            sendJson(response, 202, {
-                success: true,
-                mode: result.mode,
-                turnId: result.turnId,
-            });
-        }
-        catch (error) {
-            setConversationStatus(conversation, "error");
-            sendJson(response, 500, {
-                error: "turn_start_failed",
-                message: error instanceof Error ? error.message : String(error),
-            });
-        }
-        return;
-    }
-    const conversationFileMatch = url.pathname.match(/^\/api\/conversations\/([^/]+)\/files$/);
-    if (request.method === "GET" && conversationFileMatch) {
-        const conversation = getConversation(conversationFileMatch[1]);
-        if (!conversation) {
-            sendJson(response, 404, { error: "conversation_not_found" });
-            return;
-        }
-        const requestedFilePath = url.searchParams.get("path");
-        if (!requestedFilePath) {
-            sendJson(response, 400, { error: "path_required" });
-            return;
-        }
-        await serveConversationFile(request, response, conversation.workspacePath, requestedFilePath);
-        return;
-    }
-    if (request.method === "DELETE" && conversationMatch) {
-        const conversation = getConversation(conversationMatch[1]);
-        if (!conversation) {
-            sendJson(response, 404, { error: "conversation_not_found" });
-            return;
-        }
-        deleteConversation(conversation.id);
-        sendJson(response, 200, { conversation });
-        return;
-    }
-    const conversationContextResetMatch = url.pathname.match(/^\/api\/conversations\/([^/]+)\/context\/reset$/);
-    if (request.method === "POST" && conversationContextResetMatch) {
-        const conversation = getConversation(conversationContextResetMatch[1]);
-        if (!conversation) {
-            sendJson(response, 404, { error: "conversation_not_found" });
-            return;
-        }
-        const body = await readJsonBody(request);
-        const summary = typeof body.summary === "string" && body.summary.trim()
-            ? body.summary.trim()
-            : null;
-        const contextVersion = appendConversationContextVersion(conversation, {
-            codexThreadId: conversation.codexThreadId,
-            source: "context-reset",
-            summary,
-        });
-        sendJson(response, 200, { conversation, contextVersion });
-        return;
-    }
-    const conversationWakeupsMatch = url.pathname.match(/^\/api\/conversations\/([^/]+)\/wakeups$/);
-    if (conversationWakeupsMatch) {
-        const conversation = getConversation(conversationWakeupsMatch[1]);
-        if (!conversation) {
-            sendJson(response, 404, { error: "conversation_not_found" });
-            return;
-        }
-        if (request.method === "GET") {
-            sendJson(response, 200, {
-                wakeups: listWorkspaceWakeups(conversation.id),
-            });
-            return;
-        }
-        if (request.method === "POST") {
-            const body = await readJsonBody(request);
-            const instruction = typeof body.instruction === "string" ? body.instruction.trim() : "";
-            const wakeAt = resolveWakeAt(body);
-            if (!instruction) {
-                sendJson(response, 400, { error: "instruction_required" });
-                return;
-            }
-            if (!wakeAt) {
-                sendJson(response, 400, { error: "wake_at_required" });
-                return;
-            }
-            const wakeup = createWorkspaceWakeup({
-                workspaceId: conversation.id,
-                wakeAt,
-                instruction,
-                createdBy: "user",
-            });
-            appendEvent(conversation, "server.wakeup.scheduled", {
-                wakeupId: wakeup.id,
-                wakeAt: wakeup.wakeAt,
-                instruction: wakeup.instruction,
-            });
-            sendJson(response, 201, { wakeup });
-            return;
-        }
-    }
-    const conversationWakeupCancelMatch = url.pathname.match(/^\/api\/conversations\/([^/]+)\/wakeups\/([^/]+)\/cancel$/);
-    if (request.method === "POST" && conversationWakeupCancelMatch) {
-        const conversation = getConversation(conversationWakeupCancelMatch[1]);
-        if (!conversation) {
-            sendJson(response, 404, { error: "conversation_not_found" });
-            return;
-        }
-        const wakeupId = conversationWakeupCancelMatch[2];
-        const wakeup = cancelWorkspaceWakeup(wakeupId, {
-            workspaceId: conversation.id,
-        });
-        if (!wakeup) {
-            sendJson(response, 404, { error: "scheduled_wakeup_not_found" });
-            return;
-        }
-        appendEvent(conversation, "server.wakeup.cancelled", {
-            wakeupId: wakeup.id,
-            reason: wakeup.error,
-        });
-        sendJson(response, 200, { wakeup });
-        return;
-    }
-    const conversationInterruptMatch = url.pathname.match(/^\/api\/conversations\/([^/]+)\/turns\/interrupt$/);
-    if (request.method === "POST" && conversationInterruptMatch) {
-        const conversation = getConversation(conversationInterruptMatch[1]);
-        if (!conversation) {
-            sendJson(response, 404, { error: "conversation_not_found" });
-            return;
-        }
-        const activeTurnId = activeConversationTurns.get(conversation.id);
-        if (!activeTurnId || conversation.status !== "running") {
-            sendJson(response, 409, { error: "turn_not_running" });
-            return;
-        }
-        try {
-            stopTurnLocally(activeTurnId, conversation);
-            sendJson(response, 202, { ok: true });
-        }
-        catch (error) {
-            appendEvent(conversation, "server.stop.error", {
-                message: error instanceof Error ? error.message : String(error),
-            });
-            sendJson(response, 500, {
-                error: "stop_failed",
-                message: error instanceof Error ? error.message : String(error),
-            });
-        }
-        return;
-    }
-    const conversationSteerMatch = url.pathname.match(/^\/api\/conversations\/([^/]+)\/turns\/steer$/);
-    if (request.method === "POST" && conversationSteerMatch) {
-        const conversation = getConversation(conversationSteerMatch[1]);
-        if (!conversation) {
-            sendJson(response, 404, { error: "conversation_not_found" });
-            return;
-        }
-        const body = await readJsonBody(request);
-        if (!body.message || typeof body.message !== "string") {
-            sendJson(response, 400, { error: "message_required" });
-            return;
-        }
-        const activeTurnId = activeConversationTurns.get(conversation.id);
-        if (!activeTurnId || conversation.status !== "running") {
-            sendJson(response, 409, { error: "turn_not_running" });
-            return;
-        }
-        try {
-            const message = steerConversationTurn(conversation, activeTurnId, body.message, body);
-            sendJson(response, 202, { ok: true, message });
-        }
-        catch (error) {
-            appendEvent(conversation, "server.steer.error", {
-                message: error instanceof Error ? error.message : String(error),
-            });
-            sendJson(response, 500, {
-                error: "steer_failed",
-                message: error instanceof Error ? error.message : String(error),
-            });
-        }
-        return;
-    }
-    const conversationCurrentTurnEventsMatch = url.pathname.match(/^\/api\/conversations\/([^/]+)\/turns\/current\/events$/);
-    if (request.method === "GET" && conversationCurrentTurnEventsMatch) {
-        const conversation = getConversation(conversationCurrentTurnEventsMatch[1]);
-        if (!conversation) {
-            sendJson(response, 404, { error: "conversation_not_found" });
-            return;
-        }
-        const activeTurnId = activeConversationTurns.get(conversation.id);
-        if (!activeTurnId || conversation.status !== "running") {
-            if (!activeTurnId && conversation.status === "running") {
-                setConversationStatus(conversation, "done");
-            }
-            sendJson(response, 409, { error: "turn_not_running" });
-            return;
-        }
-        openSse(response);
-        subscribeTurnEvents(activeTurnId, response);
-        return;
-    }
-    const conversationTurnEventsMatch = url.pathname.match(/^\/api\/conversations\/([^/]+)\/turns\/([^/]+)\/events$/);
-    if (request.method === "GET" && conversationTurnEventsMatch) {
-        const conversation = getConversation(conversationTurnEventsMatch[1]);
-        if (!conversation) {
-            sendJson(response, 404, { error: "conversation_not_found" });
-            return;
-        }
-        const turnId = conversationTurnEventsMatch[2];
-        const storedTurn = getConversationTurn(conversation, turnId);
-        if (!storedTurn) {
-            sendJson(response, 404, { error: "turn_not_found" });
-            return;
-        }
-        const activeTurnId = activeConversationTurns.get(conversation.id);
-        if (turnConversations.get(turnId) !== conversation.id ||
-            activeTurnId !== turnId ||
-            conversation.status !== "running") {
-            if (!activeTurnId && conversation.status === "running") {
-                setConversationStatus(conversation, storedTurn.status === "failed" ? "error" : "done");
-            }
-            sendJson(response, 410, {
-                error: "turn_not_active",
-                turnId,
-                turnStatus: storedTurn.status,
-            });
-            return;
-        }
-        openSse(response);
-        subscribeTurnEvents(turnId, response);
-        return;
-    }
-    const conversationTurnHistoryEventsMatch = url.pathname.match(/^\/api\/conversations\/([^/]+)\/turns\/([^/]+)\/history-events$/);
-    if (request.method === "GET" && conversationTurnHistoryEventsMatch) {
-        const conversation = getConversation(conversationTurnHistoryEventsMatch[1]);
-        if (!conversation) {
-            sendJson(response, 404, { error: "conversation_not_found" });
-            return;
-        }
-        const turnId = conversationTurnHistoryEventsMatch[2];
-        sendJson(response, 200, {
-            events: listConversationTurnEvents(conversation, turnId),
-        });
-        return;
-    }
-    const conversationTurnControlMatch = url.pathname.match(/^\/api\/conversations\/([^/]+)\/turns\/([^/]+)\/(stop|steer)$/);
-    if (request.method === "POST" && conversationTurnControlMatch) {
-        const conversation = getConversation(conversationTurnControlMatch[1]);
-        if (!conversation) {
-            sendJson(response, 404, { error: "conversation_not_found" });
-            return;
-        }
-        const turnId = conversationTurnControlMatch[2];
-        const action = conversationTurnControlMatch[3];
-        if (turnConversations.get(turnId) !== conversation.id) {
-            sendJson(response, 404, { error: "turn_not_found" });
-            return;
-        }
-        if (activeConversationTurns.get(conversation.id) !== turnId || conversation.status !== "running") {
-            sendJson(response, 409, { error: "turn_not_running" });
-            return;
-        }
-        if (action === "stop") {
-            stopTurnLocally(turnId, conversation);
-            sendJson(response, 202, { ok: true });
-            return;
-        }
-        const body = await readJsonBody(request);
-        if (!body.message || typeof body.message !== "string") {
-            sendJson(response, 400, { error: "message_required" });
-            return;
-        }
-        const message = steerConversationTurn(conversation, turnId, body.message, body);
-        sendJson(response, 202, { ok: true, message });
-        return;
-    }
-    const conversationTurnApprovalMatch = url.pathname.match(/^\/api\/conversations\/([^/]+)\/turns\/([^/]+)\/approvals\/([^/]+)$/);
-    if (request.method === "POST" && conversationTurnApprovalMatch) {
-        const conversation = getConversation(conversationTurnApprovalMatch[1]);
-        if (!conversation) {
-            sendJson(response, 404, { error: "conversation_not_found" });
-            return;
-        }
-        const turnId = conversationTurnApprovalMatch[2];
-        const requestId = decodeURIComponent(conversationTurnApprovalMatch[3]);
-        if (turnConversations.get(turnId) !== conversation.id) {
-            sendJson(response, 404, { error: "turn_not_found" });
-            return;
-        }
-        const body = await readJsonBody(request);
-        if (!isCommandApprovalDecision(body.decision)) {
-            sendJson(response, 400, { error: "invalid_decision" });
-            return;
-        }
-        runtime.respondApproval(turnId, requestId, body.decision);
-        recordTurnEvent(turnId, "server.approval.decision", {
-            turnId,
-            requestId,
-            decision: body.decision,
-        });
-        updateConversationTurn(conversation, turnId, {
-            status: "running",
-        });
-        sendJson(response, 202, { ok: true });
-        return;
-    }
-    const responsibilityProposalMatch = url.pathname.match(/^\/api\/conversations\/([^/]+)\/responsibility-proposals\/([^/]+)$/);
-    if (request.method === "POST" && responsibilityProposalMatch) {
-        const conversation = getConversation(responsibilityProposalMatch[1]);
-        if (!conversation) {
-            sendJson(response, 404, { error: "conversation_not_found" });
-            return;
-        }
-        const proposalId = decodeURIComponent(responsibilityProposalMatch[2]);
-        const proposalEvent = conversation.events.find((event) => event.id === proposalId &&
-            event.event === "server.responsibility.proposed");
-        if (!proposalEvent) {
-            sendJson(response, 404, { error: "proposal_not_found" });
-            return;
-        }
-        const body = await readJsonBody(request);
-        if (body.decision !== "accept" && body.decision !== "decline") {
-            sendJson(response, 400, { error: "invalid_decision" });
-            return;
-        }
-        const proposal = readRecord(proposalEvent.data);
-        const proposedResponsibility = typeof proposal.responsibility === "string" ? proposal.responsibility : "";
-        const responsibility = typeof body.responsibility === "string"
-            ? body.responsibility
-            : proposedResponsibility;
-        if (body.decision === "accept" && !responsibility.trim()) {
-            sendJson(response, 400, { error: "responsibility_required" });
-            return;
-        }
-        if (body.decision === "accept") {
-            setConversationResponsibility(conversation, responsibility);
-        }
-        appendEvent(conversation, "server.responsibility.decision", {
-            proposalId,
-            decision: body.decision,
-            responsibility: body.decision === "accept" ? responsibility : null,
-            edited: body.decision === "accept" && responsibility !== proposedResponsibility,
-        }, { turnId: proposalEvent.turnId });
-        sendJson(response, 200, {
-            ok: true,
-            conversation: {
-                ...conversation,
-                nextWakeup: getNextScheduledWorkspaceWakeup(conversation.id),
-            },
-        });
-        return;
-    }
-    const knowledgeProposalMatch = url.pathname.match(/^\/api\/conversations\/([^/]+)\/knowledge-proposals\/([^/]+)$/);
-    if (request.method === "POST" && knowledgeProposalMatch) {
-        const conversation = getConversation(knowledgeProposalMatch[1]);
-        if (!conversation) {
-            sendJson(response, 404, { error: "conversation_not_found" });
-            return;
-        }
-        const proposalId = decodeURIComponent(knowledgeProposalMatch[2]);
-        const proposalEvent = conversation.events.find((event) => event.id === proposalId && event.event === "server.knowledge.proposed");
-        if (!proposalEvent) {
-            sendJson(response, 404, { error: "proposal_not_found" });
-            return;
-        }
-        const body = await readJsonBody(request);
-        if (body.decision !== "accept" && body.decision !== "decline") {
-            sendJson(response, 400, { error: "invalid_decision" });
-            return;
-        }
-        const proposal = readRecord(proposalEvent.data);
-        const proposedKnowledge = readRecord(proposal.knowledge);
-        const submittedKnowledge = readRecord(body.knowledge);
-        const knowledge = Object.keys(submittedKnowledge).length > 0
-            ? submittedKnowledge
-            : proposedKnowledge;
-        const action = typeof knowledge.action === "string" ? knowledge.action : proposal.action;
-        const knowledgeId = typeof knowledge.knowledgeId === "string"
-            ? knowledge.knowledgeId
-            : typeof proposal.knowledgeId === "string"
-                ? proposal.knowledgeId
-                : undefined;
-        let item = null;
-        if (body.decision === "accept") {
-            const validationError = validateKnowledgeProposalForPersistence(knowledge);
-            if (validationError) {
-                sendJson(response, 400, { error: validationError });
-                return;
-            }
-            const input = knowledgeProposalToInput(knowledge);
-            if (action === "update" && knowledgeId) {
-                item = updateWorkspaceKnowledge(conversation, knowledgeId, input);
-                if (!item) {
-                    sendJson(response, 404, { error: "knowledge_not_found" });
-                    return;
-                }
-            }
-            else {
-                item = createWorkspaceKnowledge(conversation, input);
-            }
-        }
-        appendEvent(conversation, "server.knowledge.decision", {
-            proposalId,
-            action,
-            decision: body.decision,
-            knowledgeId: item?.id ?? knowledgeId ?? null,
-            knowledge: body.decision === "accept" ? item : null,
-            edited: body.decision === "accept" &&
-                JSON.stringify(knowledge) !== JSON.stringify(proposedKnowledge),
-        }, { turnId: proposalEvent.turnId });
-        sendJson(response, 200, {
-            ok: true,
-            item,
-            items: listWorkspaceKnowledge(conversation),
-        });
-        return;
-    }
-    const conversationTurnMatch = url.pathname.match(/^\/api\/conversations\/([^/]+)\/turns$/);
-    if (request.method === "POST" && conversationTurnMatch) {
-        const conversation = getConversation(conversationTurnMatch[1]);
-        if (!conversation) {
-            sendJson(response, 404, { error: "conversation_not_found" });
-            return;
-        }
-        try {
-            const body = await readJsonBody(request);
-            if (!body.message || typeof body.message !== "string") {
-                sendJson(response, 400, { error: "message_required" });
-                return;
-            }
-            const result = enqueueConversationTurn(conversation, body);
-            sendJson(response, 202, result);
-        }
-        catch (error) {
-            setConversationStatus(conversation, "error");
-            sendJson(response, 500, {
-                error: "turn_start_failed",
-                message: error instanceof Error ? error.message : String(error),
-            });
-        }
-        return;
-    }
-    const legacyConversationTurnMatch = url.pathname.match(/^\/api\/conversations\/([^/]+)\/turns\/stream$/);
-    if (request.method === "POST" && legacyConversationTurnMatch) {
-        sendJson(response, 410, {
-            error: "stream_endpoint_replaced",
-            message: "Use POST /turns and GET /turns/:turnId/events.",
-        });
-        return;
-    }
-    if (request.method === "POST" && url.pathname === "/api/turns/stream") {
-        const conversation = createConversation({
-            workspaceRoot: config.workspaceRoot,
-            sandbox: getGlobalRuntimeSettings().sandbox,
-            ownerId: authenticatedUser.id,
-        });
-        response.statusCode = 307;
-        response.setHeader("Location", `/api/conversations/${conversation.id}/turns/stream`);
-        response.end();
-        return;
-    }
-    if (request.method === "GET" || request.method === "HEAD") {
-        const served = await serveWebAsset(request, response, url.pathname);
-        if (served) {
-            return;
-        }
-    }
-    response.writeHead(404, { "Content-Type": "application/json" });
-    response.end(JSON.stringify({ error: "not_found" }));
-});
-server.listen(config.port, config.host, () => {
-    console.log(`seele-codex server listening on http://${config.host}:${config.port}`);
-});
-startWakeupScheduler();
-startRuntimeWatchdog();
-function enqueueConversationTurn(conversation, body) {
-    const userMessage = String(body.message ?? "");
-    const activeTurnId = activeConversationTurns.get(conversation.id);
-    if (activeTurnId) {
-        if (body.mode === "queue") {
-            const { turnId, message } = createQueuedConversationTurn(conversation, body, userMessage);
-            const queue = workspaceTurnQueues.get(conversation.id) ?? [];
-            queue.push({ turnId, body, userMessage });
-            workspaceTurnQueues.set(conversation.id, queue);
-            appendEvent(conversation, "server.turn.queued", {
-                turnId,
-                activeTurnId,
-                queuePosition: queue.length,
-            }, { turnId });
-            return {
-                turnId,
-                mode: "queued",
-                queuePosition: queue.length,
-                message,
-            };
-        }
-        const message = steerConversationTurn(conversation, activeTurnId, userMessage, body);
-        return {
-            turnId: activeTurnId,
-            mode: "steered",
-            queuePosition: 0,
-            message,
-        };
-    }
-    const { turnId, message } = createQueuedConversationTurn(conversation, body, userMessage);
-    startQueuedConversationTurn(conversation, { turnId, body, userMessage });
-    return {
-        turnId,
-        mode: "running",
-        queuePosition: 0,
-        message,
-    };
-}
-function readRuntimeModelCatalogCache() {
-    const value = getAppSettingValue(RUNTIME_MODEL_CATALOG_CACHE_KEY);
-    if (!value) {
-        return null;
-    }
-    try {
-        const parsed = JSON.parse(value);
-        if (!parsed.catalog ||
-            !Array.isArray(parsed.catalog.models) ||
-            typeof parsed.catalog.codexVersion !== "string" ||
-            typeof parsed.updatedAt !== "string") {
-            return null;
-        }
-        return { catalog: parsed.catalog, updatedAt: parsed.updatedAt };
-    }
-    catch {
-        return null;
-    }
-}
-function writeRuntimeModelCatalogCache(catalog) {
-    upsertAppSetting(RUNTIME_MODEL_CATALOG_CACHE_KEY, JSON.stringify({ catalog, updatedAt: new Date().toISOString() }));
-}
-function refreshRuntimeModelCatalog() {
-    if (runtimeModelCatalogRefresh) {
-        return runtimeModelCatalogRefresh;
-    }
-    runtimeModelCatalogRefresh = runtime
-        .listModels(config)
-        .then((catalog) => {
-        writeRuntimeModelCatalogCache(catalog);
-        return catalog;
-    })
-        .finally(() => {
-        runtimeModelCatalogRefresh = null;
-    });
-    return runtimeModelCatalogRefresh;
-}
-function readRuntimeRateLimitsCache() {
-    const value = getAppSettingValue(RUNTIME_RATE_LIMITS_CACHE_KEY);
-    if (!value) {
-        return null;
-    }
-    try {
-        return normalizeCachedRateLimitUsage(JSON.parse(value));
-    }
-    catch {
-        return null;
-    }
-}
-function writeRuntimeRateLimitsCache(usage) {
-    upsertAppSetting(RUNTIME_RATE_LIMITS_CACHE_KEY, JSON.stringify(usage));
-}
-function refreshRuntimeRateLimits() {
-    if (runtimeRateLimitsRefresh) {
-        return runtimeRateLimitsRefresh;
-    }
-    runtimeRateLimitsRefresh = runtime
-        .readRateLimits(config)
-        .then((result) => {
-        const usage = normalizeRuntimeRateLimits(result, new Date().toISOString());
-        if (!usage) {
-            throw new Error("Codex returned no usable rate-limit windows");
-        }
-        writeRuntimeRateLimitsCache(usage);
-        return usage;
-    })
-        .finally(() => {
-        runtimeRateLimitsRefresh = null;
-    });
-    return runtimeRateLimitsRefresh;
-}
-function persistRateLimitsFromEvent(event, data, updatedAt) {
-    if (event !== "codex.notification") {
-        return;
-    }
-    const notification = readRecord(data);
-    if (notification.method !== "account/rateLimits/updated") {
-        return;
-    }
-    const params = readRecord(notification.params);
-    const usage = normalizeRateLimitSnapshot(params.rateLimits, updatedAt);
-    if (usage) {
-        writeRuntimeRateLimitsCache(usage);
-    }
-}
-function normalizeRuntimeRateLimits(result, updatedAt) {
-    return normalizeRateLimitSnapshot(result.rateLimits, updatedAt);
-}
-function normalizeRateLimitSnapshot(value, updatedAt) {
-    const snapshot = readRecord(value);
-    const windows = Array.isArray(snapshot.windows)
-        ? snapshot.windows
-            .map((window) => normalizeRateLimitWindow(window))
-            .filter((window) => window !== null)
-        : [snapshot.primary, snapshot.secondary]
-            .map((window) => normalizeRateLimitWindow(window))
-            .filter((window) => window !== null);
-    return windows.length > 0 ? { windows, updatedAt } : null;
-}
-function normalizeRateLimitWindow(value) {
-    const window = readRecord(value);
-    return typeof window.usedPercent === "number" &&
-        typeof window.resetsAt === "number" &&
-        typeof window.windowDurationMins === "number"
-        ? {
-            usedPercent: window.usedPercent,
-            resetsAt: window.resetsAt,
-            windowDurationMins: window.windowDurationMins,
-        }
-        : null;
-}
-function normalizeCachedRateLimitUsage(value) {
-    const cached = readRecord(value);
-    return typeof cached.updatedAt === "string"
-        ? normalizeRateLimitSnapshot(cached, cached.updatedAt)
-        : null;
-}
-async function getCodexReleaseTime(versionOutput) {
-    const version = normalizeCodexVersion(versionOutput);
-    if (!version) {
-        return null;
-    }
-    const cacheKey = `codex.release_time.${version}`;
-    const cached = getAppSettingValue(cacheKey);
-    if (cached) {
-        return cached;
-    }
-    try {
-        const { stdout } = await execFileAsync("npm", [
-            "view",
-            `@openai/codex@${version}`,
-            "time",
-            "--json",
-            `--registry=${CODEX_NPM_REGISTRY}`,
-            "--fetch-retries=0",
-            `--fetch-timeout=${CODEX_LATEST_LOOKUP_TIMEOUT_MS}`,
-        ], {
-            env: codexNpmEnvironment(),
-            maxBuffer: 4 * 1024 * 1024,
-            timeout: CODEX_LATEST_LOOKUP_TIMEOUT_MS,
-        });
-        const times = JSON.parse(stdout);
-        const releasedAt = typeof times[version] === "string" ? times[version] : null;
-        if (releasedAt) {
-            upsertAppSetting(cacheKey, releasedAt);
-        }
-        return releasedAt;
-    }
-    catch {
-        return null;
-    }
-}
-async function readManagedCodexPackageVersion() {
-    const runtimeDir = process.env.SEELE_RUNTIME_DIR ?? path.join(config.seeleRoot, ".runtime");
-    for (const prefix of [path.join(runtimeDir, "codex", "current"), runtimeDir]) {
-        const version = await readCodexPackageVersion(prefix);
-        if (version) {
-            return version;
-        }
-    }
-    const versionOutput = await readCodexVersion(path.join(runtimeDir, "bin", "codex"));
-    return versionOutput ? normalizeCodexVersion(versionOutput) : null;
-}
-function normalizeCodexVersion(versionOutput) {
-    const version = versionOutput.replace(/^codex-cli\s+/i, "").trim();
-    return /^[0-9A-Za-z.-]+$/.test(version) ? version : null;
-}
-async function fetchLatestCodexVersion() {
-    const checkedAt = new Date().toISOString();
-    try {
-        const { stdout } = await execFileAsync("npm", [
-            "view",
-            "@openai/codex@latest",
-            "version",
-            "--json",
-            `--registry=${CODEX_NPM_REGISTRY}`,
-            "--fetch-retries=0",
-            `--fetch-timeout=${CODEX_LATEST_LOOKUP_TIMEOUT_MS}`,
-        ], {
-            env: codexNpmEnvironment(),
-            maxBuffer: 1024 * 1024,
-            timeout: CODEX_LATEST_LOOKUP_TIMEOUT_MS,
-        });
-        const parsed = JSON.parse(stdout);
-        const version = typeof parsed === "string" ? parsed.trim() : "";
-        if (!version) {
-            throw new Error("npm returned an empty latest version");
-        }
-        const releasedAt = await getCodexReleaseTime(version);
-        return { version, releasedAt, checkedAt, error: null };
-    }
-    catch (error) {
-        return {
-            version: null,
-            releasedAt: null,
-            checkedAt,
-            error: formatCodexUpdateError(error),
-        };
-    }
-}
-async function runCodexUpdateJob(job) {
-    try {
-        job.previousVersion = await readCodexVersion(config.codexBin ?? "codex");
-        appendCodexUpdateLog(job, "system", `Current version: ${job.previousVersion ?? "unavailable"}`);
-        const catalog = await updateManagedCodexCli(job);
-        writeRuntimeModelCatalogCache(catalog);
-        job.currentVersion = catalog.codexVersion;
-        job.codexReleasedAt = await getCodexReleaseTime(catalog.codexVersion);
-        job.status = "succeeded";
-        appendCodexUpdateLog(job, "system", `Update completed: ${catalog.codexVersion}`);
-    }
-    catch (error) {
-        job.status = "failed";
-        job.error = formatCodexUpdateError(error);
-        appendCodexUpdateLog(job, "stderr", job.error);
-    }
-    finally {
-        job.finishedAt = new Date().toISOString();
-    }
-}
-async function updateManagedCodexCli(job) {
-    const runtimeDir = process.env.SEELE_RUNTIME_DIR ?? path.join(config.seeleRoot, ".runtime");
-    const codexHome = process.env.CODEX_HOME ?? path.join(runtimeDir, "codex-home");
-    const codexRoot = path.join(runtimeDir, "codex");
-    const versionsDir = path.join(codexRoot, "versions");
-    const currentLink = path.join(codexRoot, "current");
-    const managedCodexBin = path.join(runtimeDir, "bin", "codex");
-    const stagingDir = path.join(codexRoot, `.staging-${job.id}`);
-    const npmEnvironment = codexNpmEnvironment();
-    await fs.mkdir(path.join(runtimeDir, "bin"), { recursive: true });
-    await fs.mkdir(codexHome, { recursive: true });
-    await fs.mkdir(versionsDir, { recursive: true });
-    await fs.rm(stagingDir, { recursive: true, force: true });
-    let installedDir = null;
-    try {
-        appendCodexUpdateLog(job, "system", `Staging prefix: ${stagingDir}`);
-        appendCodexUpdateLog(job, "system", `Registry: ${CODEX_NPM_REGISTRY}`);
-        await runLoggedProcess(job, "npm", [
-            "install",
-            "--global",
-            "--prefix",
-            stagingDir,
-            "--no-audit",
-            "--no-fund",
-            `--registry=${CODEX_NPM_REGISTRY}`,
-            "--fetch-retries=1",
-            "--fetch-timeout=30000",
-            "@openai/codex@latest",
-        ], {
-            env: {
-                ...npmEnvironment,
-                CODEX_HOME: codexHome,
-                PATH: `${path.join(stagingDir, "bin")}${path.delimiter}${process.env.PATH ?? ""}`,
-            },
-        });
-        const installedVersion = await readCodexPackageVersion(stagingDir);
-        if (!installedVersion) {
-            throw new Error("Installed Codex package version could not be read from staging");
-        }
-        const stagingBin = path.join(stagingDir, "bin", "codex");
-        const stagingVersionOutput = await executeCodexVersion(stagingBin, CODEX_VERSION_VERIFY_TIMEOUT_MS);
-        if (normalizeCodexVersion(stagingVersionOutput ?? "") !== installedVersion) {
-            throw new Error(`Staged Codex CLI verification failed: expected ${installedVersion}, got ${stagingVersionOutput ?? "unavailable"}`);
-        }
-        appendCodexUpdateLog(job, "system", `Staged version verified: ${installedVersion}`);
-        appendCodexUpdateLog(job, "system", "Validating staged Codex app-server.");
-        const stagedCatalog = await runtime.listModels({ ...config, codexBin: stagingBin });
-        if (normalizeCodexVersion(stagedCatalog.codexVersion) !== installedVersion) {
-            throw new Error(`Staged Codex app-server reported ${stagedCatalog.codexVersion}; expected ${installedVersion}`);
-        }
-        appendCodexUpdateLog(job, "system", "Staged Codex app-server validation passed.");
-        const versionName = codexVersionDirectoryName(installedVersion);
-        const versionDir = path.join(versionsDir, versionName);
-        try {
-            await fs.rename(stagingDir, versionDir);
-            installedDir = versionDir;
-        }
-        catch (error) {
-            if (!isExistingPathError(error)) {
-                throw error;
-            }
-            const existingVersion = await readCodexPackageVersion(versionDir);
-            const existingVersionOutput = await readCodexVersion(path.join(versionDir, "bin", "codex"));
-            if (existingVersion !== installedVersion ||
-                normalizeCodexVersion(existingVersionOutput ?? "") !== installedVersion) {
-                throw new Error(`Existing Codex version directory is invalid: ${versionDir}`);
-            }
-            installedDir = versionDir;
-            appendCodexUpdateLog(job, "system", `Reusing verified version directory: ${versionDir}`);
-        }
-        const previousTarget = await prepareVersionedCodexLauncher({
-            runtimeDir,
-            codexRoot,
-            versionsDir,
-            currentLink,
-            managedCodexBin,
-            job,
-        });
-        const nextTarget = path.relative(codexRoot, installedDir);
-        appendCodexUpdateLog(job, "system", `Activating Codex CLI ${installedVersion}`);
-        await replaceSymlinkAtomically(currentLink, nextTarget);
-        await replaceManagedCodexLauncher(managedCodexBin);
-        let activeVersionOutput;
-        try {
-            activeVersionOutput = await executeCodexVersion(managedCodexBin, CODEX_VERSION_VERIFY_TIMEOUT_MS);
-        }
-        catch (error) {
-            if (previousTarget) {
-                await replaceSymlinkAtomically(currentLink, previousTarget);
-            }
-            throw error;
-        }
-        if (normalizeCodexVersion(activeVersionOutput ?? "") !== installedVersion) {
-            if (previousTarget) {
-                await replaceSymlinkAtomically(currentLink, previousTarget);
-            }
-            throw new Error(`Activated Codex CLI verification failed: expected ${installedVersion}, got ${activeVersionOutput ?? "unavailable"}`);
-        }
-        appendCodexUpdateLog(job, "system", `Active launcher: ${managedCodexBin}`);
-        config.codexBin = managedCodexBin;
-        return stagedCatalog;
-    }
-    finally {
-        await fs.rm(stagingDir, { recursive: true, force: true });
-    }
-}
-async function readCodexPackageVersion(prefix) {
-    const packageJsonPath = path.join(prefix, "lib", "node_modules", "@openai", "codex", "package.json");
-    try {
-        const packageJson = JSON.parse(await fs.readFile(packageJsonPath, "utf8"));
-        return typeof packageJson.version === "string" ? packageJson.version : null;
-    }
-    catch {
-        return null;
-    }
-}
-function sanitizeCodexVersionDirectory(version) {
-    return version.replace(/[^0-9A-Za-z._-]/g, "_");
-}
-function codexVersionDirectoryName(version) {
-    return [
-        sanitizeCodexVersionDirectory(version),
-        process.platform,
-        process.arch,
-    ].join("-");
-}
-function isExistingPathError(error) {
-    const code = error?.code;
-    return code === "EEXIST" || code === "ENOTEMPTY";
-}
-async function prepareVersionedCodexLauncher({ runtimeDir, codexRoot, versionsDir, currentLink, managedCodexBin, job, }) {
-    const currentTarget = await readSymlink(currentLink);
-    if (await isManagedCodexLauncher(managedCodexBin)) {
-        return currentTarget;
-    }
-    try {
-        await fs.access(managedCodexBin, fsConstants.X_OK);
-    }
-    catch {
-        return currentTarget;
-    }
-    const legacyVersionOutput = await readCodexVersion(managedCodexBin);
-    const legacyVersion = normalizeCodexVersion(legacyVersionOutput ?? "") ?? "unknown";
-    const legacyName = `legacy-${sanitizeCodexVersionDirectory(legacyVersion)}-${job.id.slice(0, 8)}`;
-    const legacyDir = path.join(versionsDir, legacyName);
-    const legacyBinDir = path.join(legacyDir, "bin");
-    await fs.mkdir(legacyBinDir, { recursive: true });
-    const oldNpmLib = path.join(runtimeDir, "lib");
-    const oldNpmVersion = await readCodexPackageVersion(runtimeDir);
-    if (oldNpmVersion) {
-        await fs.cp(oldNpmLib, path.join(legacyDir, "lib"), {
-            recursive: true,
-            verbatimSymlinks: true,
-        });
-        const oldLinkTarget = await readSymlink(managedCodexBin);
-        if (oldLinkTarget) {
-            await fs.symlink(oldLinkTarget, path.join(legacyBinDir, "codex"));
-        }
-        else {
-            await fs.copyFile(managedCodexBin, path.join(legacyBinDir, "codex"));
-        }
-    }
-    else {
-        await fs.copyFile(managedCodexBin, path.join(legacyBinDir, "codex"));
-    }
-    await fs.chmod(path.join(legacyBinDir, "codex"), 0o755).catch(() => undefined);
-    const legacyTarget = path.relative(codexRoot, legacyDir);
-    await replaceSymlinkAtomically(currentLink, legacyTarget);
-    appendCodexUpdateLog(job, "system", `Preserved previous Codex CLI as ${legacyTarget}`);
-    return legacyTarget;
-}
-async function replaceManagedCodexLauncher(managedCodexBin) {
-    if (await isManagedCodexLauncher(managedCodexBin)) {
-        return;
-    }
-    await replaceSymlinkAtomically(managedCodexBin, "../codex/current/bin/codex");
-}
-async function isManagedCodexLauncher(managedCodexBin) {
-    return (await readSymlink(managedCodexBin)) === "../codex/current/bin/codex";
-}
-async function readSymlink(linkPath) {
-    try {
-        return await fs.readlink(linkPath);
-    }
-    catch {
-        return null;
-    }
-}
-async function replaceSymlinkAtomically(linkPath, target) {
-    const temporaryLink = `${linkPath}.next-${randomUUID()}`;
-    await fs.mkdir(path.dirname(linkPath), { recursive: true });
-    try {
-        await fs.symlink(target, temporaryLink);
-        await fs.rename(temporaryLink, linkPath);
-    }
-    finally {
-        await fs.rm(temporaryLink, { force: true });
-    }
-}
-function runLoggedProcess(job, command, args, options) {
-    appendCodexUpdateLog(job, "system", `$ ${command} ${args.join(" ")}`);
-    return new Promise((resolve, reject) => {
-        const child = spawn(command, args, {
-            env: options.env,
-            stdio: ["ignore", "pipe", "pipe"],
-        });
-        const timeout = setTimeout(() => {
-            child.kill("SIGTERM");
-            reject(new Error(`Codex CLI update timed out after ${CODEX_UPDATE_TIMEOUT_MS}ms`));
-        }, CODEX_UPDATE_TIMEOUT_MS);
-        child.stdout.on("data", (chunk) => {
-            appendCodexUpdateLog(job, "stdout", chunk.toString("utf8"));
-        });
-        child.stderr.on("data", (chunk) => {
-            appendCodexUpdateLog(job, "stderr", chunk.toString("utf8"));
-        });
-        child.once("error", (error) => {
-            clearTimeout(timeout);
-            reject(error);
-        });
-        child.once("close", (code, signal) => {
-            clearTimeout(timeout);
-            if (code === 0) {
-                resolve();
-                return;
-            }
-            reject(new Error(`Codex CLI installer exited with ${code ?? "no code"}${signal ? ` (${signal})` : ""}`));
-        });
-    });
-}
-function appendCodexUpdateLog(job, stream, value) {
-    const lines = value
-        .split(/\r?\n/)
-        .map((line) => line.trimEnd())
-        .filter(Boolean);
-    for (const text of lines) {
-        const effectiveStream = stream === "stderr" && /^npm\s+warn\b/i.test(text) ? "warning" : stream;
-        job.logs.push({ at: new Date().toISOString(), stream: effectiveStream, text });
-    }
-    if (job.logs.length > 500) {
-        job.logs.splice(0, job.logs.length - 500);
-    }
-}
-async function readCodexVersion(codexBin) {
-    try {
-        return await executeCodexVersion(codexBin, CODEX_VERSION_READ_TIMEOUT_MS);
-    }
-    catch {
-        return null;
-    }
-}
-async function executeCodexVersion(codexBin, timeout) {
-    const { stdout, stderr } = await execFileAsync(codexBin, ["--version"], {
-        env: process.env,
-        timeout,
-    });
-    const output = stdout.trim() || stderr.trim();
-    if (!output) {
-        throw new Error(`Codex CLI returned no version output: ${codexBin}`);
-    }
-    return output;
-}
-function formatCodexUpdateError(error) {
-    if (!(error instanceof Error)) {
-        return String(error);
-    }
-    const processError = error;
-    const output = processError.stderr?.trim() || processError.stdout?.trim();
-    return output ? `${error.message}\n${output}` : error.message;
-}
-function codexNetworkEnvironment() {
-    if (!config.proxy) {
-        return process.env;
-    }
-    return {
-        ...process.env,
-        ALL_PROXY: config.proxy,
-        HTTP_PROXY: config.proxy,
-        HTTPS_PROXY: config.proxy,
-        all_proxy: config.proxy,
-        http_proxy: config.proxy,
-        https_proxy: config.proxy,
-    };
-}
-function codexNpmEnvironment() {
-    const environment = { ...process.env };
-    for (const key of [
-        "ALL_PROXY",
-        "HTTP_PROXY",
-        "HTTPS_PROXY",
-        "all_proxy",
-        "http_proxy",
-        "https_proxy",
-        "npm_config_proxy",
-        "npm_config_https_proxy",
-        "npm_config_recursive",
-        "npm_config_store_dir",
-    ]) {
-        delete environment[key];
-    }
-    const registryHost = new URL(CODEX_NPM_REGISTRY).hostname;
-    const noProxy = [environment.NO_PROXY, environment.no_proxy, registryHost]
-        .filter(Boolean)
-        .join(",");
-    return {
-        ...environment,
-        NO_PROXY: noProxy,
-        no_proxy: noProxy,
-    };
-}
-function steerConversationTurn(conversation, turnId, message, body = {}) {
-    runtime.steerTurn(turnId, message);
-    const persistUserMessage = body.persistUserMessage !== false;
-    const userMessageRecord = persistUserMessage
-        ? appendMessage(conversation, "user", message, turnId)
-        : null;
-    appendAndBroadcastTurnEvent(turnId, "server.steer", {
-        message,
-        messageId: userMessageRecord?.id ?? null,
-        source: typeof body.source === "string" ? body.source : "web",
-        persistedUserMessage: persistUserMessage,
-    });
-    return userMessageRecord;
-}
-function createQueuedConversationTurn(conversation, body, userMessage) {
-    const turnId = randomUUID();
-    const persistUserMessage = body.persistUserMessage !== false;
-    const userMessageRecord = persistUserMessage
-        ? appendMessage(conversation, "user", userMessage, turnId)
-        : null;
-    createConversationTurn(conversation, {
-        id: turnId,
-        userMessageId: userMessageRecord?.id ?? null,
-        status: "queued",
-    });
-    turnConversations.set(turnId, conversation.id);
-    turnEventBacklog.set(turnId, []);
-    appendEvent(conversation, "server.turn", {
-        source: typeof body.source === "string" ? body.source : "web",
-        turnId,
-        userMessageId: userMessageRecord?.id ?? null,
-        wakeupId: typeof body.wakeupId === "string" ? body.wakeupId : null,
-        persistedUserMessage: persistUserMessage,
-    }, { turnId });
-    if (typeof body.wakeupId === "string") {
-        turnWakeups.set(turnId, body.wakeupId);
-    }
-    return { turnId, message: userMessageRecord };
-}
-function startConversationTurn(conversation, body) {
-    const userMessage = String(body.message ?? "");
-    const { turnId } = createQueuedConversationTurn(conversation, body, userMessage);
-    startQueuedConversationTurn(conversation, { turnId, body, userMessage });
-    return turnId;
-}
-function startQueuedConversationTurn(conversation, queuedTurn) {
-    void startQueuedConversationTurnAsync(conversation, queuedTurn);
-}
-async function startQueuedConversationTurnAsync(conversation, queuedTurn) {
-    const { turnId, body, userMessage } = queuedTurn;
-    setConversationStatus(conversation, "running");
-    activeConversationTurns.set(conversation.id, turnId);
-    updateConversationTurn(conversation, turnId, { status: "running" });
-    appendEvent(conversation, "server.turn.started", {
-        turnId,
-        source: typeof body.source === "string" ? body.source : "web",
-    }, { turnId });
-    try {
-        ensureWorkspaceSkillGuides(conversation.workspacePath);
-        const runtimeConfig = withWorkspaceRuntimeSettings(config, conversation);
-        const injectionContext = buildRuntimeInjectionContext(conversation);
-        runtime.startTurn(turnId, runtimeConfig, {
-            ...body,
-            message: userMessage,
-            threadId: conversation.codexThreadId,
-            cwd: conversation.workspacePath,
-            ...injectionContext,
-            sandbox: runtimeConfig.defaultSandbox,
-        });
-    }
-    catch (error) {
-        const message = error instanceof Error ? error.message : String(error);
-        failTurn(turnId, message);
-    }
-}
-function buildRuntimeInjectionContext(conversation) {
-    return {
-        workspaceId: conversation.id,
-        workspaceTitle: conversation.title,
-        workspaceTranscriptApiBase: getAgentTranscriptApiBase(conversation),
-        workspaceKnowledgeApiBase: getAgentKnowledgeApiBase(conversation),
-        workspaceResponsibility: conversation.responsibility,
-        workspaceKnowledge: summarizeWorkspaceKnowledge(conversation),
-        globalMemory: getGlobalMemory(),
-        workspaceMemory: conversation.memory,
-        globalMemoryItems: getGlobalMemoryItems(),
-        workspaceMemoryItems: conversation.memoryItems,
-    };
-}
-async function resetConversationRuntimeThread(conversation, options, plan = buildRuntimeResetPlan(conversation)) {
-    if (activeConversationTurns.has(conversation.id)) {
-        throw new Error("workspace has an active turn");
-    }
-    const queuedTurns = workspaceTurnQueues.get(conversation.id);
-    if (queuedTurns && queuedTurns.length > 0) {
-        throw new Error("workspace has queued turns");
-    }
-    const resetStartedAt = new Date().toISOString();
-    const oldThreadId = conversation.codexThreadId;
-    const { visibleMessages, injectedItems, injectedUserMessageCount, injectedAssistantMessageCount, } = plan;
-    let newThreadId = null;
-    appendEvent(conversation, "server.runtime_reset.started", {
-        oldThreadId,
-        mode: "lossless-visible-history",
-        visibleMessageCount: visibleMessages.length,
-    });
-    try {
-        ensureWorkspaceSkillGuides(conversation.workspacePath);
-        const runtimeConfig = withWorkspaceRuntimeSettings(config, conversation);
-        const injectionContext = buildRuntimeInjectionContext(conversation);
-        const result = await runtime.rebuildThread(runtimeConfig, {
-            cwd: conversation.workspacePath,
-            ...injectionContext,
-            sandbox: runtimeConfig.defaultSandbox,
-        }, injectedItems);
-        newThreadId = result.threadId;
-        setConversationThread(conversation, newThreadId);
-        recordRuntimeReset(conversation, {
-            oldCodexThreadId: oldThreadId,
-            newCodexThreadId: newThreadId,
-            status: "completed",
-            injectedMessageCount: visibleMessages.length,
-            injectedUserMessageCount,
-            injectedAssistantMessageCount,
-            injectedMessages: visibleMessages,
-            createdAt: resetStartedAt,
-        });
-        appendEvent(conversation, "server.runtime_reset.completed", {
-            oldThreadId,
-            newThreadId,
-            mode: "lossless-visible-history",
-            injectedMessageCount: visibleMessages.length,
-            injectedUserMessageCount,
-            injectedAssistantMessageCount,
-        });
-        const warmupTurnId = options.warmup
-            ? startConversationTurn(conversation, {
-                source: "runtime-reset",
-                persistUserMessage: false,
-                message: buildRuntimeResetWarmupMessage({
-                    workspaceId: conversation.id,
-                    workspaceTitle: conversation.title,
-                    oldThreadId,
-                    newThreadId,
-                    injectedMessageCount: visibleMessages.length,
-                    injectedUserMessageCount,
-                    injectedAssistantMessageCount,
-                }),
-            })
-            : null;
-        return {
-            oldThreadId,
-            newThreadId,
-            injectedMessageCount: visibleMessages.length,
-            injectedUserMessageCount,
-            injectedAssistantMessageCount,
-            warmupTurnId,
-        };
-    }
-    catch (error) {
-        const message = error instanceof Error ? error.message : String(error);
-        recordRuntimeReset(conversation, {
-            oldCodexThreadId: oldThreadId,
-            newCodexThreadId: newThreadId,
-            status: "failed",
-            injectedMessageCount: visibleMessages.length,
-            injectedUserMessageCount,
-            injectedAssistantMessageCount,
-            injectedMessages: visibleMessages,
-            error: message,
-            createdAt: resetStartedAt,
-        });
-        appendEvent(conversation, "server.runtime_reset.failed", {
-            oldThreadId,
-            newThreadId,
-            mode: "lossless-visible-history",
-            injectedMessageCount: visibleMessages.length,
-            error: message,
-        });
-        throw error;
-    }
-}
-function buildRuntimeResetPlan(conversation) {
-    const visibleMessages = listAllConversationVisibleMessages(conversation);
-    const injectedItems = visibleMessages.map(toResponseHistoryItem);
-    return {
-        visibleMessages,
-        injectedItems,
-        injectedUserMessageCount: visibleMessages.filter((message) => message.role === "user").length,
-        injectedAssistantMessageCount: visibleMessages.filter((message) => message.role === "assistant").length,
-        fingerprint: createHash("sha256")
-            .update(JSON.stringify(injectedItems))
-            .digest("hex"),
-    };
-}
-function toResponseHistoryItem(message) {
-    if (message.role === "assistant") {
-        return {
-            type: "message",
-            role: "assistant",
-            content: [
-                {
-                    type: "output_text",
-                    text: message.content,
-                },
-            ],
-        };
-    }
-    return {
-        type: "message",
-        role: "user",
-        content: [
-            {
-                type: "input_text",
-                text: message.content,
-            },
-        ],
-    };
-}
-function buildRuntimeResetWarmupMessage(input) {
-    return [
-        "这是 Seele 系统触发的 runtime reset warmup，不是用户的新需求。",
-        "",
-        "当前 workspace 的 Codex runtime thread 已经完成无损可见历史重建：",
-        `- workspace: ${input.workspaceTitle} (${input.workspaceId})`,
-        `- old thread: ${input.oldThreadId ?? "none"}`,
-        `- new thread: ${input.newThreadId}`,
-        `- injected visible messages: ${input.injectedMessageCount}`,
-        `- injected user messages: ${input.injectedUserMessageCount}`,
-        `- injected assistant messages: ${input.injectedAssistantMessageCount}`,
-        "",
-        "请做一次轻量恢复：",
-        "1. 基于已经注入的新 thread 可见历史，恢复你对当前 workspace 的状态感知。",
-        "2. 必要时只通过 Seele Transcript / Knowledge API 定向回看，不要执行重操作。",
-        "3. 用简短中文输出：我是谁、当前职责、最近上下文、接下来等待用户什么或建议继续什么。",
-    ].join("\n");
-}
-function ensureWorkspaceSkillGuides(workspacePath) {
-    const guidePath = path.join(workspacePath, RESPONSIBILITY_UPDATE_GUIDE_RELATIVE_PATH);
-    mkdirSync(path.dirname(guidePath), { recursive: true });
-    writeFileSync(guidePath, RESPONSIBILITY_UPDATE_GUIDE, "utf8");
-    const knowledgeGuidePath = path.join(workspacePath, KNOWLEDGE_SOURCE_GUIDE_RELATIVE_PATH);
-    mkdirSync(path.dirname(knowledgeGuidePath), { recursive: true });
-    writeFileSync(knowledgeGuidePath, KNOWLEDGE_SOURCE_GUIDE, "utf8");
-}
-function startWakeupScheduler() {
-    void processDueWakeups();
-    const timer = setInterval(() => {
-        void processDueWakeups();
-    }, WAKEUP_POLL_INTERVAL_MS);
-    timer.unref?.();
-}
-function startRuntimeWatchdog() {
-    const timer = setInterval(() => {
-        checkRuntimeWorkerHealth();
-    }, RUNTIME_WATCHDOG_INTERVAL_MS);
-    timer.unref?.();
-}
-function checkRuntimeWorkerHealth() {
-    const diagnostics = runtime.getDiagnostics();
-    const activeWorkerTurnIds = new Set(diagnostics.workers.map((worker) => worker.turnId));
-    for (const worker of diagnostics.workers) {
-        if (worker.uptimeMs >= TURN_LONG_RUNNING_AFTER_MS &&
-            !longRunningAdvisedTurns.has(worker.turnId)) {
-            longRunningAdvisedTurns.add(worker.turnId);
-            recordTurnEvent(worker.turnId, "server.turn.long_running", {
-                uptimeMs: worker.uptimeMs,
-                thresholdMs: TURN_LONG_RUNNING_AFTER_MS,
-                recommendation: "Consider finishing the current phase and scheduling a wakeup for the next phase if the remaining work can resume from a self-contained instruction.",
-            });
-        }
-        if (worker.stale && !staleRuntimeTurns.has(worker.turnId)) {
-            staleRuntimeTurns.add(worker.turnId);
-            recordTurnEvent(worker.turnId, "runtime.worker_stale", {
-                pid: worker.pid,
-                state: worker.state,
-                uptimeMs: worker.uptimeMs,
-                lastMessageAt: worker.lastMessageAt,
-                lastEventAt: worker.lastEventAt,
-                lastHeartbeatAt: worker.lastHeartbeatAt,
-            });
-            continue;
-        }
-        if (!worker.stale && staleRuntimeTurns.delete(worker.turnId)) {
-            recordTurnEvent(worker.turnId, "runtime.worker_recovered", {
-                pid: worker.pid,
-                state: worker.state,
-                uptimeMs: worker.uptimeMs,
-                lastMessageAt: worker.lastMessageAt,
-                lastEventAt: worker.lastEventAt,
-                lastHeartbeatAt: worker.lastHeartbeatAt,
-            });
-        }
-    }
-    for (const turnId of [...staleRuntimeTurns]) {
-        if (!activeWorkerTurnIds.has(turnId)) {
-            staleRuntimeTurns.delete(turnId);
-        }
-    }
-}
-async function processDueWakeups() {
-    const wakeups = listDueWorkspaceWakeups(new Date().toISOString());
-    for (const wakeup of wakeups) {
-        if (wakeupsInFlight.has(wakeup.id)) {
-            continue;
-        }
-        const conversation = getConversation(wakeup.workspaceId);
-        if (!conversation) {
-            updateWorkspaceWakeup(wakeup.id, {
-                status: "failed",
-                error: "workspace_not_found",
-            });
-            continue;
-        }
-        if (activeConversationTurns.has(conversation.id) || conversation.status === "running") {
-            continue;
-        }
-        if (wakeup.attemptCount >= wakeup.maxAttempts) {
-            updateWorkspaceWakeup(wakeup.id, {
-                status: "failed",
-                error: "max_attempts_exceeded",
-            });
-            appendEvent(conversation, "server.wakeup.failed", {
-                wakeupId: wakeup.id,
-                reason: "max_attempts_exceeded",
-                attemptCount: wakeup.attemptCount,
-                maxAttempts: wakeup.maxAttempts,
-            });
-            continue;
-        }
-        wakeupsInFlight.add(wakeup.id);
-        try {
-            runWorkspaceWakeup(conversation, wakeup);
-        }
-        finally {
-            wakeupsInFlight.delete(wakeup.id);
-        }
-    }
-}
-function runWorkspaceWakeup(conversation, wakeup) {
-    const message = [
-        "定时唤醒：请继续处理之前设置的延后检查任务。",
-        "",
-        `Wakeup ID: ${wakeup.id}`,
-        `Scheduled at: ${wakeup.wakeAt}`,
-        "",
-        wakeup.instruction,
-        "",
-        "如果外部状态还没有变化，请简短说明当前仍需等待；如果已经变化，请继续推进并说明结果。",
-    ].join("\n");
-    try {
-        const attemptCount = wakeup.attemptCount + 1;
-        updateWorkspaceWakeup(wakeup.id, {
-            status: "running",
-            attemptCount,
-            error: null,
-        });
-        const turnId = startConversationTurn(conversation, {
-            message,
-            persistUserMessage: false,
-            source: "wakeup",
-            wakeupId: wakeup.id,
-        });
-        appendEvent(conversation, "server.wakeup.started", {
-            wakeupId: wakeup.id,
-            wakeAt: wakeup.wakeAt,
-            instruction: wakeup.instruction,
-            attemptCount,
-            maxAttempts: wakeup.maxAttempts,
-            turnId,
-        }, { turnId });
-        updateWorkspaceWakeup(wakeup.id, {
-            status: "running",
-            resultTurnId: turnId,
-            error: null,
-        });
-    }
-    catch (error) {
-        const messageText = error instanceof Error ? error.message : String(error);
-        updateWorkspaceWakeup(wakeup.id, {
-            status: "failed",
-            error: messageText,
-        });
-        appendEvent(conversation, "server.wakeup.failed", {
-            wakeupId: wakeup.id,
-            message: messageText,
-        });
-    }
-}
-function subscribeTurnEvents(turnId, response) {
-    const subscribers = turnSubscribers.get(turnId) ?? new Set();
-    subscribers.add(response);
-    turnSubscribers.set(turnId, subscribers);
-    for (const event of getTurnReplayEvents(turnId)) {
-        sendBufferedTurnEvent(response, event);
-    }
-    if (turnTerminalEvents.has(turnId) && !response.writableEnded) {
-        response.end();
-        return;
-    }
-    response.on("close", () => {
-        subscribers.delete(response);
-        if (subscribers.size === 0) {
-            turnSubscribers.delete(turnId);
-        }
-    });
-}
-function getTurnReplayEvents(turnId) {
-    const conversation = getConversationForTurn(turnId);
-    const persistedEvents = conversation
-        ? listConversationTurnEvents(conversation, turnId)
-        : [];
-    const replayEvents = persistedEvents.map((event, index) => ({
-        id: event.id,
-        turnId,
-        event: event.event,
-        data: event.data,
-        createdAt: event.createdAt,
-        seq: index + 1,
-    }));
-    const seenEventIds = new Set(replayEvents.map((event) => event.id));
-    const backlogOnlyEvents = (turnEventBacklog.get(turnId) ?? []).filter((event) => !seenEventIds.has(event.id));
-    const combined = [...replayEvents, ...backlogOnlyEvents].sort((left, right) => {
-        const leftTime = Date.parse(left.createdAt);
-        const rightTime = Date.parse(right.createdAt);
-        if (!Number.isNaN(leftTime) && !Number.isNaN(rightTime) && leftTime !== rightTime) {
-            return leftTime - rightTime;
-        }
-        return String(left.id).localeCompare(String(right.id));
-    });
-    return combined.map((event, index) => ({
-        ...event,
-        seq: index + 1,
-    }));
-}
-function recordTurnEvent(turnId, event, data) {
-    if (isTurnTerminal(turnId)) {
-        return;
-    }
-    maybePersistRuntimeThread(turnId, event, data);
-    appendAndBroadcastTurnEvent(turnId, event, data);
-    for (const derived of deriveTurnEvents(turnId, event, data)) {
-        appendAndBroadcastTurnEvent(turnId, derived.event, derived.data);
-    }
-}
-function maybePersistRuntimeThread(turnId, event, data) {
-    if (event !== "server.thread") {
-        return;
-    }
-    const conversation = getConversationForTurn(turnId);
-    if (!conversation || conversation.codexThreadId) {
-        return;
-    }
-    const threadId = readRuntimeThreadId(data);
-    if (!threadId) {
-        return;
-    }
-    setConversationThread(conversation, threadId);
-    appendEvent(conversation, "server.thread.created", { threadId }, { turnId });
-}
-function readRuntimeThreadId(data) {
-    const record = readRecord(data);
-    return typeof record.id === "string" ? record.id : null;
-}
-function appendAndBroadcastTurnEvent(turnId, event, data) {
-    const backlog = turnEventBacklog.get(turnId) ?? [];
-    const buffered = {
-        id: `${turnId}:${backlog.length + 1}`,
-        turnId,
-        event,
-        data,
-        createdAt: new Date().toISOString(),
-        seq: backlog.length + 1,
-    };
-    const conversation = getConversationForTurn(turnId);
-    if (conversation) {
-        const record = appendEvent(conversation, event, data, { turnId, createdAt: buffered.createdAt });
-        buffered.id = record.id;
-        updateTurnStatusFromEvent(conversation, turnId, event, data);
-    }
-    persistRateLimitsFromEvent(event, data, buffered.createdAt);
-    backlog.push(buffered);
-    turnEventBacklog.set(turnId, backlog);
-    broadcastTurnEvent(turnId, buffered);
-    maybeRecordPhaseBoundaryAdvisory(turnId, event, data);
-}
-function maybeRecordPhaseBoundaryAdvisory(turnId, event, data) {
-    if (phaseBoundaryAdvisedTurns.has(turnId) ||
-        isTurnTerminal(turnId) ||
-        !isToolOperationStartEvent(event, data)) {
-        return;
-    }
-    const nextCount = (turnOperationCounts.get(turnId) ?? 0) + 1;
-    turnOperationCounts.set(turnId, nextCount);
-    if (nextCount < TURN_PHASE_BOUNDARY_OPERATION_COUNT) {
-        return;
-    }
-    phaseBoundaryAdvisedTurns.add(turnId);
-    appendAndBroadcastTurnEvent(turnId, "server.turn.phase_boundary_recommended", {
-        operationCount: nextCount,
-        threshold: TURN_PHASE_BOUNDARY_OPERATION_COUNT,
-        recommendation: "This turn has accumulated many tool operations. At the next coherent boundary, summarize the current phase and schedule a wakeup so the following phase starts in a fresh turn bubble.",
-    });
-}
-function isToolOperationStartEvent(event, data) {
-    if (event !== "codex.notification") {
-        return false;
-    }
-    const notification = readRecord(data);
-    if (notification.method !== "item/started") {
-        return false;
-    }
-    const item = readRecord(readRecord(notification.params).item);
-    return item.type !== "agentMessage";
-}
-function deriveTurnEvents(turnId, event, data) {
-    if (event === "codex.server_request") {
-        const request = readRecord(data);
-        if (request.method === "item/commandExecution/requestApproval") {
-            const params = readRecord(request.params);
-            return [
-                {
-                    event: "runtime.command.approval_requested",
-                    data: {
-                        requestId: typeof request.requestId === "number" ? request.requestId : null,
-                        itemId: typeof params.itemId === "string" ? params.itemId : null,
-                        command: typeof params.command === "string" ? params.command : null,
-                        reason: typeof params.reason === "string" ? params.reason : null,
-                    },
-                },
-            ];
-        }
-        return [];
-    }
-    if (event !== "codex.notification") {
-        return [];
-    }
-    const notification = readRecord(data);
-    const method = notification.method;
-    const params = readRecord(notification.params);
-    if (method === "thread/tokenUsage/updated") {
-        const usage = readContextUsage(params.tokenUsage);
-        if (!usage) {
-            return [];
-        }
-        latestTurnContextUsage.set(turnId, usage);
-        const observed = [];
-        for (const [key, completed] of completedContextCompactionsAwaitingUsage) {
-            if (!key.startsWith(`${turnId}:`)) {
-                continue;
-            }
-            completedContextCompactionsAwaitingUsage.delete(key);
-            observed.push({
-                event: "runtime.compaction.usage_observed",
-                data: {
-                    itemId: completed.itemId,
-                    type: "contextCompaction",
-                    trigger: "codex",
-                    status: "completed",
-                    durationMs: completed.durationMs,
-                    before: completed.before,
-                    after: usage,
-                },
-            });
-        }
-        return observed;
-    }
-    if (method === "item/started") {
-        const item = readRecord(params.item);
-        if (item.type === "commandExecution") {
-            return [
-                {
-                    event: "runtime.command.started",
-                    data: normalizeCommandItem(item),
-                },
-            ];
-        }
-        if (item.type === "contextCompaction") {
-            const itemId = typeof item.id === "string" ? item.id : null;
-            activeContextCompactions.set(contextCompactionKey(turnId, itemId), {
-                startedAt: Date.now(),
-                before: latestTurnContextUsage.get(turnId) ?? null,
-            });
-            return [
-                {
-                    event: "runtime.compaction.started",
-                    data: {
-                        itemId,
-                        type: item.type,
-                        trigger: "codex",
-                        before: latestTurnContextUsage.get(turnId) ?? null,
-                    },
-                },
-            ];
-        }
-        return [];
-    }
-    if (method === "item/completed") {
-        const item = readRecord(params.item);
-        if (item.type === "commandExecution") {
-            return [
-                {
-                    event: "runtime.command.completed",
-                    data: normalizeCommandItem(item),
-                },
-            ];
-        }
-        if (item.type === "contextCompaction") {
-            const itemId = typeof item.id === "string" ? item.id : null;
-            const key = contextCompactionKey(turnId, itemId);
-            const active = activeContextCompactions.get(key);
-            const before = active?.before ?? null;
-            const latestUsage = latestTurnContextUsage.get(turnId) ?? null;
-            const after = hasContextUsageChanged(before, latestUsage) ? latestUsage : null;
-            const durationMs = active ? Math.max(0, Date.now() - active.startedAt) : null;
-            activeContextCompactions.delete(key);
-            if (!after) {
-                completedContextCompactionsAwaitingUsage.set(key, {
-                    itemId,
-                    startedAt: active?.startedAt ?? Date.now(),
-                    durationMs,
-                    before,
-                });
-            }
-            return [
-                {
-                    event: "runtime.compaction.completed",
-                    data: {
-                        itemId,
-                        type: item.type,
-                        trigger: "codex",
-                        status: "completed",
-                        durationMs,
-                        before,
-                        after,
-                    },
-                },
-            ];
-        }
-        return [];
-    }
-    return [];
-}
-function contextCompactionKey(turnId, itemId) {
-    return `${turnId}:${itemId ?? "active"}`;
-}
-function hasContextUsageChanged(before, after) {
-    if (!after) {
-        return false;
-    }
-    return (!before ||
-        before.totalTokens !== after.totalTokens ||
-        before.modelContextWindow !== after.modelContextWindow);
-}
-function readContextUsage(value) {
-    const tokenUsage = readRecord(value);
-    const last = readRecord(tokenUsage.last);
-    const total = readRecord(tokenUsage.total);
-    const usage = typeof last.totalTokens === "number" ? last : total;
-    return typeof usage.totalTokens === "number"
-        ? {
-            totalTokens: usage.totalTokens,
-            modelContextWindow: typeof tokenUsage.modelContextWindow === "number"
-                ? tokenUsage.modelContextWindow
-                : null,
-        }
-        : null;
-}
-function normalizeCommandItem(item) {
-    return {
-        itemId: typeof item.id === "string" ? item.id : null,
-        command: item.command,
-        status: typeof item.status === "string" ? item.status : null,
-        processId: typeof item.processId === "number" || typeof item.processId === "string"
-            ? item.processId
-            : null,
-        exitCode: typeof item.exitCode === "number" ? item.exitCode : null,
-        output: typeof item.aggregatedOutput === "string" ? item.aggregatedOutput : null,
-    };
-}
-function updateTurnStatusFromEvent(conversation, turnId, event, data) {
-    if (event === "server.done") {
-        updateConversationTurn(conversation, turnId, {
-            status: "completed",
-            finishedAt: new Date().toISOString(),
-            error: null,
-        });
-        return;
-    }
-    if (event === "server.error") {
-        const message = readRecord(data).message;
-        updateConversationTurn(conversation, turnId, {
-            status: "failed",
-            finishedAt: new Date().toISOString(),
-            error: typeof message === "string" ? message : "turn_failed",
-        });
-        return;
-    }
-    if (event === "server.stopped") {
-        updateConversationTurn(conversation, turnId, {
-            status: "cancelled",
-            finishedAt: new Date().toISOString(),
-            error: null,
-        });
-        return;
-    }
-    if (event === "codex.server_request") {
-        const request = readRecord(data);
-        if (request.method === "item/commandExecution/requestApproval") {
-            updateConversationTurn(conversation, turnId, {
-                status: "waiting_approval",
-            });
-        }
-        return;
-    }
-    if (event === "server.approval.resolved") {
-        updateConversationTurn(conversation, turnId, {
-            status: "running",
-        });
-        return;
-    }
-    if (event !== "codex.notification") {
-        return;
-    }
-    const notification = readRecord(data);
-    if (notification.method === "turn/started") {
-        const params = readRecord(notification.params);
-        const turn = readRecord(params.turn);
-        updateConversationTurn(conversation, turnId, {
-            codexTurnId: typeof turn.id === "string" ? turn.id : null,
-            status: "running",
-        });
-        return;
-    }
-    if (notification.method === "turn/completed") {
-        const params = readRecord(notification.params);
-        const turn = readRecord(params.turn);
-        updateConversationTurn(conversation, turnId, {
-            codexTurnId: typeof turn.id === "string" ? turn.id : null,
-            status: turn.error ? "failed" : "completed",
-            finishedAt: new Date().toISOString(),
-            error: turn.error ? JSON.stringify(turn.error) : null,
-        });
-        return;
-    }
-    if (notification.method === "thread/status/changed") {
-        const params = readRecord(notification.params);
-        const status = readRecord(params.status);
-        const flags = Array.isArray(status.activeFlags) ? status.activeFlags : [];
-        if (flags.includes("waitingOnApproval")) {
-            updateConversationTurn(conversation, turnId, {
-                status: "waiting_approval",
-            });
-        }
-    }
-}
-function completeTurn(turnId, result) {
-    if (isTurnTerminal(turnId)) {
-        cleanupTurn(turnId);
-        return;
-    }
-    if (locallyStoppedTurns.delete(turnId)) {
-        cleanupTurn(turnId);
-        return;
-    }
-    const conversation = getConversationForTurn(turnId);
-    if (conversation) {
-        const assistantOutput = extractAgentRequests(getTurnAssistantText(turnId, result));
-        if (assistantOutput.visibleText) {
-            appendMessage(conversation, "assistant", assistantOutput.visibleText, turnId);
-        }
-        scheduleAgentWakeups(conversation, turnId, assistantOutput.wakeups);
-        recordResponsibilityProposals(turnId, assistantOutput.responsibilityProposals);
-        recordKnowledgeProposals(turnId, assistantOutput.knowledgeProposals);
-        recordTranscriptSummaries(conversation, turnId, assistantOutput.transcriptSummaries);
-        updateConversationTurn(conversation, turnId, {
-            status: "completed",
-            finishedAt: new Date().toISOString(),
-            error: null,
-        });
-        completeWakeupForTurn(turnId, "completed", null);
-        setConversationStatus(conversation, "done");
-        if (assistantOutput.visibleText &&
-            getWorkspaceRuntimeSettings(conversation).effective.notifyEnabled) {
-            void notifyProfuse(turnId, conversation, assistantOutput.visibleText);
-        }
-    }
-    finishTurn(turnId, "server.done", { ok: true });
-}
-function failTurn(turnId, message) {
-    if (isTurnTerminal(turnId)) {
-        cleanupTurn(turnId);
-        return;
-    }
-    if (locallyStoppedTurns.delete(turnId)) {
-        cleanupTurn(turnId);
-        return;
-    }
-    const conversation = getConversationForTurn(turnId);
-    if (conversation) {
-        updateConversationTurn(conversation, turnId, {
-            status: "failed",
-            finishedAt: new Date().toISOString(),
-            error: message,
-        });
-        completeWakeupForTurn(turnId, "failed", message);
-        setConversationStatus(conversation, "error");
-        if (getWorkspaceRuntimeSettings(conversation).effective.notifyEnabled) {
-            void notifyProfuse(turnId, conversation, ["**任务失败**", "", message].join("\n"));
-        }
-        finishTurn(turnId, "server.error", { message });
-        return;
-    }
-    finishTurn(turnId, "server.error", { message });
-}
-function stopTurnLocally(turnId, conversation) {
-    if (isTurnTerminal(turnId)) {
-        cleanupTurn(turnId);
-        return;
-    }
-    locallyStoppedTurns.add(turnId);
-    try {
-        runtime.stopTurn(turnId);
-    }
-    catch (error) {
-        appendEvent(conversation, "runtime.stop.error", { message: error instanceof Error ? error.message : String(error) }, { turnId });
-    }
-    appendEvent(conversation, "server.stop", {}, { turnId });
-    appendEvent(conversation, "server.stopped", {}, { turnId });
-    updateConversationTurn(conversation, turnId, {
-        status: "cancelled",
-        finishedAt: new Date().toISOString(),
-        error: null,
-    });
-    completeWakeupForTurn(turnId, "cancelled", null);
-    setConversationStatus(conversation, "done");
-    finishTurn(turnId, "server.stopped", { ok: true });
-}
-function completeWakeupForTurn(turnId, status, error) {
-    const wakeupId = turnWakeups.get(turnId);
-    if (!wakeupId) {
-        return;
-    }
-    updateWorkspaceWakeup(wakeupId, {
-        status,
-        resultTurnId: turnId,
-        error,
-    });
-}
-function finishTurn(turnId, event, data) {
-    if (isTurnTerminal(turnId)) {
-        cleanupTurn(turnId);
-        return;
-    }
-    const backlog = turnEventBacklog.get(turnId) ?? [];
-    const lastEvent = backlog[backlog.length - 1];
-    if (lastEvent?.event === event && isSameEventData(lastEvent.data, data)) {
-        turnTerminalEvents.set(turnId, { event, data });
-        cleanupTurn(turnId);
-        return;
-    }
-    appendAndBroadcastTurnEvent(turnId, event, data);
-    turnTerminalEvents.set(turnId, { event, data });
-    cleanupTurn(turnId);
-}
-function isTurnTerminal(turnId) {
-    return turnTerminalEvents.has(turnId);
-}
-function isSameEventData(left, right) {
-    return JSON.stringify(left) === JSON.stringify(right);
-}
-function summarizeRuntimeCompactions(events) {
-    const records = new Map();
-    for (const event of [...events].reverse()) {
-        const data = readRecord(event.data);
-        const recordId = typeof data.itemId === "string"
-            ? data.itemId
-            : `${event.turnId ?? "unknown"}:contextCompaction`;
-        const existing = records.get(recordId) ?? {
-            id: recordId,
-            turnId: event.turnId,
-            status: "running",
-            startedAt: null,
-            completedAt: null,
-            usageObservedAt: null,
-            durationMs: null,
-            trigger: null,
-            before: null,
-            after: null,
-        };
-        if (event.event === "runtime.compaction.started") {
-            existing.startedAt = event.createdAt;
-            existing.trigger = typeof data.trigger === "string" ? data.trigger : null;
-            existing.before = data.before ?? null;
-        }
-        else if (event.event === "runtime.compaction.completed") {
-            existing.status = "completed";
-            existing.completedAt = event.createdAt;
-            existing.durationMs = typeof data.durationMs === "number" ? data.durationMs : null;
-            existing.before = data.before ?? existing.before;
-            existing.after = data.after ?? existing.after;
-        }
-        else {
-            existing.status = "completed";
-            existing.usageObservedAt = event.createdAt;
-            existing.durationMs =
-                typeof data.durationMs === "number" ? data.durationMs : existing.durationMs;
-            existing.before = data.before ?? existing.before;
-            existing.after = data.after ?? existing.after;
-        }
-        records.set(recordId, existing);
-    }
-    return [...records.values()].sort((left, right) => {
-        const leftAt = left.completedAt ?? left.usageObservedAt ?? left.startedAt ?? "";
-        const rightAt = right.completedAt ?? right.usageObservedAt ?? right.startedAt ?? "";
-        return rightAt.localeCompare(leftAt);
-    });
-}
-function getTurnAssistantText(turnId, result) {
-    const resultText = result.assistantText.trim();
-    if (resultText) {
-        return resultText;
-    }
-    return extractAssistantTextFromEvents(turnEventBacklog.get(turnId) ?? []);
-}
-function extractAssistantTextFromEvents(events) {
-    const phases = new Map();
-    const texts = new Map();
-    let anonymousFinalText = "";
-    let anonymousAssistantText = "";
-    let lastAssistantItemId = null;
-    for (const event of events) {
-        if (event.event !== "codex.notification") {
-            continue;
-        }
-        const notification = readRecord(event.data);
-        const method = notification.method;
-        const params = readRecord(notification.params);
-        if (method === "item/started") {
-            const item = readRecord(params.item);
-            if (item.type === "agentMessage" && typeof item.id === "string") {
-                phases.set(item.id, readAgentMessagePhase(item.phase));
-                texts.set(item.id, "");
-                lastAssistantItemId = item.id;
-            }
-            continue;
-        }
-        if (method === "item/agentMessage/delta") {
-            const delta = params.delta;
-            if (typeof delta === "string") {
-                const itemId = typeof params.itemId === "string" ? params.itemId : lastAssistantItemId;
-                if (itemId) {
-                    texts.set(itemId, `${texts.get(itemId) ?? ""}${delta}`);
-                }
-                else if (readAgentMessagePhase(params.phase) === "final_answer") {
-                    anonymousFinalText += delta;
-                }
-                else {
-                    anonymousAssistantText += delta;
-                }
-            }
-            continue;
-        }
-        if (method === "item/completed") {
-            const item = readRecord(params.item);
-            if (item.type === "agentMessage" && typeof item.id === "string") {
-                phases.set(item.id, readAgentMessagePhase(item.phase));
-                if (typeof item.text === "string") {
-                    texts.set(item.id, item.text);
-                }
-            }
-        }
-    }
-    const finalTexts = [...texts.entries()]
-        .filter(([itemId]) => phases.get(itemId) === "final_answer")
-        .map(([, value]) => value)
-        .join("")
-        .trim();
-    if (finalTexts) {
-        return finalTexts;
-    }
-    const latestNonCommentary = [...texts.entries()]
-        .filter(([itemId]) => phases.get(itemId) !== "commentary")
-        .map(([, value]) => value.trim())
-        .filter(Boolean)
-        .at(-1);
-    if (latestNonCommentary) {
-        return latestNonCommentary;
-    }
-    return (anonymousFinalText || anonymousAssistantText).trim();
-}
-function readAgentMessagePhase(value) {
-    return value === "commentary" || value === "final_answer" ? value : "unknown";
-}
-function extractAgentRequests(content) {
-    const wakeups = [];
-    const responsibilityProposals = [];
-    const knowledgeProposals = [];
-    const transcriptSummaries = [];
-    const controlBlockPattern = /```seele-(wakeup|responsibility-proposal|knowledge-proposal|transcript-summary)\s*([\s\S]*?)```/gi;
-    let cursor = 0;
-    let rawVisibleText = "";
-    for (const match of content.matchAll(controlBlockPattern)) {
-        const index = match.index ?? 0;
-        rawVisibleText += content.slice(cursor, index);
-        const kind = match[1];
-        const rawJson = match[2] ?? "";
-        if (kind === "wakeup") {
-            for (const request of parseWakeupRequestBlock(rawJson)) {
-                wakeups.push(request);
-            }
-        }
-        else if (kind === "responsibility-proposal") {
-            const proposal = parseResponsibilityProposalBlock(rawJson);
-            if (proposal) {
-                responsibilityProposals.push({
-                    ...proposal,
-                    anchorOffset: rawVisibleText.length,
-                });
-            }
-        }
-        else if (kind === "knowledge-proposal") {
-            const proposal = parseKnowledgeProposalBlock(rawJson);
-            if (proposal) {
-                knowledgeProposals.push({
-                    ...proposal,
-                    anchorOffset: rawVisibleText.length,
-                });
-            }
-        }
-        else {
-            const summary = parseTranscriptSummaryBlock(rawJson);
-            if (summary) {
-                transcriptSummaries.push(summary);
-            }
-        }
-        cursor = index + match[0].length;
-    }
-    rawVisibleText += content.slice(cursor);
-    const leadingWhitespaceLength = rawVisibleText.match(/^\s*/)?.[0].length ?? 0;
-    const visibleText = rawVisibleText.trim();
-    for (const proposal of responsibilityProposals) {
-        proposal.anchorOffset = Math.max(0, Math.min(visibleText.length, proposal.anchorOffset - leadingWhitespaceLength));
-    }
-    for (const proposal of knowledgeProposals) {
-        proposal.anchorOffset = Math.max(0, Math.min(visibleText.length, proposal.anchorOffset - leadingWhitespaceLength));
-    }
-    return {
-        visibleText,
-        wakeups,
-        responsibilityProposals,
-        knowledgeProposals,
-        transcriptSummaries,
-    };
-}
-function parseWakeupRequestBlock(rawJson) {
-    try {
-        const parsed = JSON.parse(rawJson.trim());
-        const items = Array.isArray(parsed) ? parsed : [parsed];
-        return items
-            .filter((item) => Boolean(item && typeof item === "object"))
-            .map((item) => ({
-            delaySeconds: typeof item.delaySeconds === "number" ? item.delaySeconds : undefined,
-            instruction: typeof item.instruction === "string" ? item.instruction : undefined,
-        }));
-    }
-    catch {
-        return [
-            {
-                instruction: "",
-            },
-        ];
-    }
-}
-function parseResponsibilityProposalBlock(rawJson) {
-    try {
-        const parsed = JSON.parse(rawJson.trim());
-        if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
-            return null;
-        }
-        const record = parsed;
-        const responsibility = typeof record.responsibility === "string"
-            ? record.responsibility.trim()
-            : "";
-        if (!responsibility) {
-            return null;
-        }
-        return {
-            responsibility,
-            reason: typeof record.reason === "string" && record.reason.trim()
-                ? record.reason.trim()
-                : undefined,
-        };
-    }
-    catch {
-        return null;
-    }
-}
-function recordResponsibilityProposals(turnId, proposals) {
-    for (const proposal of proposals) {
-        appendAndBroadcastTurnEvent(turnId, "server.responsibility.proposed", {
-            responsibility: proposal.responsibility,
-            reason: proposal.reason ?? null,
-            anchorOffset: proposal.anchorOffset,
-            status: "pending",
-        });
-    }
-}
-function parseKnowledgeProposalBlock(rawJson) {
-    try {
-        const parsed = JSON.parse(rawJson.trim());
-        if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
-            return null;
-        }
-        const record = parsed;
-        const name = typeof record.name === "string" ? record.name.trim() : "";
-        const content = typeof record.content === "string" ? record.content.trim() : "";
-        const purpose = typeof record.purpose === "string" ? record.purpose.trim() : "";
-        const action = record.action === "update" ? "update" : "create";
-        const knowledgeId = typeof record.knowledgeId === "string" && record.knowledgeId.trim()
-            ? record.knowledgeId.trim()
-            : undefined;
-        if (!name || !content || !purpose || (action === "update" && !knowledgeId)) {
-            return null;
-        }
-        const knowledge = {
-            action,
-            name,
-            purpose,
-            content,
-        };
-        if (action === "update") {
-            knowledge.knowledgeId = knowledgeId;
-        }
-        return {
-            action,
-            knowledgeId,
-            knowledge,
-        };
-    }
-    catch {
-        return null;
-    }
-}
-function recordKnowledgeProposals(turnId, proposals) {
-    for (const proposal of proposals) {
-        appendAndBroadcastTurnEvent(turnId, "server.knowledge.proposed", {
-            action: proposal.action,
-            knowledgeId: proposal.knowledgeId ?? null,
-            knowledge: proposal.knowledge,
-            anchorOffset: proposal.anchorOffset,
-            status: "pending",
-        });
-    }
-}
-function parseTranscriptSummaryBlock(rawJson) {
-    try {
-        const parsed = JSON.parse(rawJson.trim());
-        if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
-            return null;
-        }
-        const record = parsed;
-        const startMessageId = typeof record.startMessageId === "string"
-            ? record.startMessageId.trim()
-            : "";
-        const endMessageId = typeof record.endMessageId === "string" ? record.endMessageId.trim() : "";
-        const title = typeof record.title === "string" ? record.title.trim() : "";
-        const summary = typeof record.summary === "string" ? record.summary.trim() : "";
-        if (!isTranscriptMessageId(startMessageId) ||
-            !isTranscriptMessageId(endMessageId) ||
-            !title ||
-            summary.length < 24) {
-            return null;
-        }
-        return {
-            startMessageId,
-            endMessageId,
-            title: title.slice(0, 120),
-            summary,
-        };
-    }
-    catch {
-        return null;
-    }
-}
-function isTranscriptMessageId(value) {
-    return (/^msg_\d{8}_\d{6}_[0-9a-f]{6}$/.test(value) ||
-        /^[0-9a-fA-F-]{8,}$/.test(value));
-}
-function recordTranscriptSummaries(conversation, turnId, summaries) {
-    for (const summary of summaries) {
-        const saved = upsertTranscriptRangeSummary(conversation, summary);
-        appendAndBroadcastTurnEvent(turnId, "server.transcript_summary.saved", {
-            id: saved.id,
-            startMessageId: saved.startMessageId,
-            endMessageId: saved.endMessageId,
-            title: saved.title,
-        });
-    }
-}
-function knowledgeProposalToInput(knowledge) {
-    const content = typeof knowledge.content === "string" ? knowledge.content : knowledge.description;
-    return {
-        name: knowledge.name,
-        description: content,
-        purpose: knowledge.purpose,
-    };
-}
-function validateKnowledgeProposalForPersistence(knowledge) {
-    const clues = normalizeKnowledgeProposalSourceClues(knowledge.sourceClues);
-    const hasClues = clues.length > 0;
-    const chatOnly = hasClues &&
-        clues.every((clue) => clue.type.trim().toLowerCase() === "chat_range");
-    if (!chatOnly) {
-        return null;
-    }
-    const description = typeof knowledge.content === "string"
-        ? knowledge.content.trim()
-        : typeof knowledge.description === "string"
-            ? knowledge.description.trim()
-            : "";
-    const purpose = typeof knowledge.purpose === "string"
-        ? knowledge.purpose.trim()
-        : "";
-    const durableText = `${description}\n${purpose}`.trim();
-    if (description.length < 24 || purpose.length < 16 || durableText.length < 80) {
-        return "knowledge_chat_source_too_ephemeral";
-    }
-    return null;
-}
-function normalizeKnowledgeProposalSourceClues(sourceClues) {
-    if (!Array.isArray(sourceClues)) {
-        return [];
-    }
-    return sourceClues
-        .map((item) => readRecord(item))
-        .map((item) => normalizeKnowledgeProposalSourceClue(item))
-        .filter((item) => item.value.trim());
-}
-function normalizeKnowledgeProposalSourceClue(item) {
-    const type = typeof item.type === "string" ? item.type.trim().toLowerCase() : "other";
-    const value = typeof item.value === "string" ? item.value.trim() : "";
-    if (type === "chat" || type === "chat_range") {
-        return {
-            type: "chat_range",
-            value: normalizeChatRangeSourceValue(value),
-            providedBy: "agent",
-        };
-    }
-    return {
-        type: type || "other",
-        value,
-        providedBy: "agent",
-    };
-}
-function normalizeChatRangeSourceValue(value) {
-    const compact = value.trim();
-    const messageIdPattern = "msg_\\d{8}_\\d{6}_[0-9a-f]{6}|[0-9a-fA-F-]{8,}";
-    const rangeMatch = compact.match(new RegExp(`^message:(${messageIdPattern})\\.\\.message:(${messageIdPattern})$`));
-    if (rangeMatch) {
-        return `message:${rangeMatch[1]}..message:${rangeMatch[2]}`;
-    }
-    const singleMatch = compact.match(new RegExp(`^message:(${messageIdPattern})$`));
-    if (singleMatch) {
-        return `message:${singleMatch[1]}..message:${singleMatch[1]}`;
-    }
-    return "chat_range_unspecified";
-}
-function scheduleAgentWakeups(conversation, turnId, wakeups) {
-    for (const wakeupRequest of wakeups) {
-        const instruction = typeof wakeupRequest.instruction === "string"
-            ? wakeupRequest.instruction.trim()
-            : "";
-        const wakeAt = resolveWakeAt(wakeupRequest);
-        if (!instruction || !wakeAt) {
-            appendEvent(conversation, "server.wakeup.request_failed", {
-                turnId,
-                reason: !instruction ? "instruction_required" : "wake_at_required",
-            }, { turnId });
-            continue;
-        }
-        const wakeup = createWorkspaceWakeup({
-            workspaceId: conversation.id,
-            wakeAt,
-            instruction,
-            createdBy: "agent",
-            createdTurnId: turnId,
-        });
-        appendEvent(conversation, "server.wakeup.scheduled", {
-            wakeupId: wakeup.id,
-            wakeAt: wakeup.wakeAt,
-            instruction: wakeup.instruction,
-            createdBy: "agent",
-        }, { turnId });
-    }
-}
-async function notifyProfuse(turnId, conversation, content) {
-    const controller = new AbortController();
-    const timeout = setTimeout(() => controller.abort(), PROFUSE_NOTIFY_TIMEOUT_MS);
-    try {
-        const response = await fetch(PROFUSE_NOTIFY_URL, {
-            method: "POST",
-            headers: {
-                Authorization: `Bearer ${PROFUSE_AGENT_TOKEN}`,
-                "Content-Type": "application/json",
-            },
-            body: JSON.stringify({
-                platform: PROFUSE_PLATFORM,
-                instance_id: conversation.id,
-                name: conversation.title,
-                content,
-            }),
-            signal: controller.signal,
-        });
-        if (!response.ok) {
-            throw new Error(`Profuse notify failed with HTTP ${response.status}`);
-        }
-        recordNotificationEvent(turnId, conversation, "server.notification.sent", {
-            platform: "profuse",
-        });
-    }
-    catch (error) {
-        recordNotificationEvent(turnId, conversation, "server.notification.failed", {
-            platform: "profuse",
-            message: error instanceof Error ? error.message : String(error),
-        });
-    }
-    finally {
-        clearTimeout(timeout);
-    }
-}
-function recordNotificationEvent(turnId, conversation, event, data) {
-    if (isTurnTerminal(turnId)) {
-        appendEvent(conversation, event, data, { turnId });
-        return;
-    }
-    recordTurnEvent(turnId, event, data);
-}
-function broadcastTurnEvent(turnId, event) {
-    for (const subscriber of turnSubscribers.get(turnId) ?? []) {
-        sendBufferedTurnEvent(subscriber, event);
-    }
-}
-function sendBufferedTurnEvent(response, event) {
-    sendSse(response, event.event, {
-        __seq: event.seq,
-        __eventId: event.id,
-        __createdAt: event.createdAt,
-        __turnId: event.turnId,
-        payload: event.data,
-    });
-}
-function cleanupTurn(turnId) {
-    locallyStoppedTurns.delete(turnId);
-    staleRuntimeTurns.delete(turnId);
-    longRunningAdvisedTurns.delete(turnId);
-    phaseBoundaryAdvisedTurns.delete(turnId);
-    turnOperationCounts.delete(turnId);
-    latestTurnContextUsage.delete(turnId);
-    for (const key of activeContextCompactions.keys()) {
-        if (key.startsWith(`${turnId}:`)) {
-            activeContextCompactions.delete(key);
-        }
-    }
-    for (const key of completedContextCompactionsAwaitingUsage.keys()) {
-        if (key.startsWith(`${turnId}:`)) {
-            completedContextCompactionsAwaitingUsage.delete(key);
-        }
-    }
-    const conversationId = turnConversations.get(turnId);
-    if (conversationId && activeConversationTurns.get(conversationId) === turnId) {
-        activeConversationTurns.delete(conversationId);
-        queueMicrotask(() => startNextQueuedTurn(conversationId));
-    }
-    const subscribers = turnSubscribers.get(turnId);
-    if (subscribers) {
-        for (const subscriber of subscribers) {
-            if (!subscriber.writableEnded) {
-                subscriber.end();
-            }
-        }
-        turnSubscribers.delete(turnId);
-    }
-    setTimeout(() => {
-        turnEventBacklog.delete(turnId);
-        turnTerminalEvents.delete(turnId);
-        turnConversations.delete(turnId);
-        turnWakeups.delete(turnId);
-    }, 60_000).unref?.();
-}
-function startNextQueuedTurn(conversationId) {
-    if (activeConversationTurns.has(conversationId)) {
-        return;
-    }
-    const conversation = getConversation(conversationId);
-    if (!conversation) {
-        workspaceTurnQueues.delete(conversationId);
-        return;
-    }
-    const queue = workspaceTurnQueues.get(conversationId) ?? [];
-    const next = queue.shift();
-    if (!next) {
-        workspaceTurnQueues.delete(conversationId);
-        return;
-    }
-    if (queue.length > 0) {
-        workspaceTurnQueues.set(conversationId, queue);
-    }
-    else {
-        workspaceTurnQueues.delete(conversationId);
-    }
-    try {
-        startQueuedConversationTurn(conversation, next);
-    }
-    catch (error) {
-        appendEvent(conversation, "server.turn.queue_start_failed", {
-            turnId: next.turnId,
-            message: error instanceof Error ? error.message : String(error),
-        }, { turnId: next.turnId });
-        queueMicrotask(() => startNextQueuedTurn(conversationId));
-    }
-}
-function getConversationForTurn(turnId) {
-    const conversationId = turnConversations.get(turnId);
-    return conversationId ? getConversation(conversationId) : null;
-}
-function withRuntimeSettings(input) {
-    const globalRuntime = getGlobalRuntimeSettings();
-    return {
-        ...input,
-        defaultModel: globalRuntime.model || input.defaultModel,
-        defaultReasoningEffort: globalRuntime.reasoningEffort,
-        defaultFastMode: globalRuntime.fastMode,
-        defaultSandbox: globalRuntime.sandbox,
-        globalEnvironment: getGlobalEnvironmentMap(),
-        globalEnvironmentDescriptions: getGlobalEnvironmentDescriptions(),
-        globalMemory: getGlobalMemory(),
-    };
-}
-function withWorkspaceRuntimeSettings(input, conversation) {
-    const effective = getWorkspaceRuntimeSettings(conversation).effective;
-    const globalEnvironment = getGlobalEnvironmentMap();
-    const workspaceEnvironment = getConversationEnvironmentMap(conversation);
-    const globalEnvironmentDescriptions = getGlobalEnvironmentDescriptions();
-    const workspaceEnvironmentDescriptions = getConversationEnvironmentDescriptions(conversation);
-    return {
-        ...withRuntimeSettings(input),
-        defaultModel: effective.model || input.defaultModel,
-        defaultReasoningEffort: effective.reasoningEffort,
-        defaultFastMode: effective.fastMode,
-        defaultSandbox: effective.sandbox,
-        globalEnvironment: {
-            ...globalEnvironment,
-            ...workspaceEnvironment,
-        },
-        globalEnvironmentDescriptions: {
-            ...globalEnvironmentDescriptions,
-            ...workspaceEnvironmentDescriptions,
-        },
-    };
-}
-function getGlobalMemory() {
-    return formatMemoryItems(getGlobalMemoryItems());
-}
-function getGlobalMemoryItems() {
-    return parseMemoryItems(getAppSettingValue(GLOBAL_MEMORY_ITEMS_SETTING_KEY));
-}
-function describeRuntimeEnvironment(runtimeConfig) {
-    const descriptions = runtimeConfig.globalEnvironmentDescriptions ?? {};
-    return Object.keys(runtimeConfig.globalEnvironment ?? {}).map((key) => ({
-        key,
-        description: descriptions[key] ?? "",
-    }));
-}
-function normalizeMemoryRequestItems(value) {
-    if (!Array.isArray(value)) {
-        return [];
-    }
-    const now = new Date().toISOString();
-    return normalizeMemoryItems(value.map((item) => {
-        const record = item && typeof item === "object" ? item : {};
-        return {
-            key: "key" in record && typeof record.key === "string"
-                ? record.key
-                : "",
-            value: "value" in record && typeof record.value === "string"
-                ? record.value
-                : "",
-            updatedAt: "updatedAt" in record && typeof record.updatedAt === "string"
-                ? record.updatedAt
-                : now,
-        };
-    }));
-}
-function validateMemoryRequestItems(value) {
-    const keys = new Set();
-    for (const [index, item] of value.entries()) {
-        const record = item && typeof item === "object" ? item : {};
-        const key = "key" in record && typeof record.key === "string" ? record.key.trim() : "";
-        const itemValue = "value" in record && typeof record.value === "string" ? record.value : "";
-        if (!isValidMemoryRequestKey(key)) {
-            return {
-                error: "invalid_memory_key",
-                detail: `Memory item ${index + 1} has an invalid key. ` +
-                    "Use lowercase letters, numbers, dots, underscores, and hyphens; start with a lowercase letter or underscore.",
-            };
-        }
-        if (!itemValue.trim()) {
-            return {
-                error: "invalid_memory_value",
-                detail: `Memory item ${index + 1} has an empty value.`,
-            };
-        }
-        if (keys.has(key)) {
-            return {
-                error: "duplicate_memory_key",
-                detail: `Memory key "${key}" is duplicated.`,
-            };
-        }
-        keys.add(key);
-    }
-    return null;
-}
-function isValidMemoryRequestKey(key) {
-    return /^[a-z_][a-z0-9_.-]*$/.test(key);
-}
-function getRuntimeSettings() {
-    return getGlobalRuntimeSettings();
-}
-function getGlobalRuntimeSettings() {
-    return {
-        model: getRuntimeModel(config) ?? "",
-        reasoningEffort: getRuntimeReasoningEffort(config),
-        fastMode: getRuntimeFastMode(config),
-        sandbox: getRuntimeSandbox(config),
-        notifyEnabled: getRuntimeNotifyEnabled(),
-    };
-}
-function getWorkspaceRuntimeSettings(conversation) {
-    const global = getGlobalRuntimeSettings();
-    const settings = getConversationWorkspaceSettings(conversation);
-    const overrides = {};
-    const sources = {
-        model: "global",
-        reasoningEffort: "global",
-        fastMode: "global",
-        sandbox: "global",
-        notifyEnabled: "global",
-    };
-    if (Object.prototype.hasOwnProperty.call(settings, RUNTIME_MODEL_SETTING_KEY)) {
-        overrides.model = settings[RUNTIME_MODEL_SETTING_KEY] ?? "";
-        sources.model = "workspace";
-    }
-    if (Object.prototype.hasOwnProperty.call(settings, RUNTIME_REASONING_EFFORT_SETTING_KEY)) {
-        overrides.reasoningEffort = normalizeRuntimeReasoningEffort(settings[RUNTIME_REASONING_EFFORT_SETTING_KEY]);
-        sources.reasoningEffort = "workspace";
-    }
-    if (Object.prototype.hasOwnProperty.call(settings, RUNTIME_FAST_MODE_SETTING_KEY)) {
-        overrides.fastMode = settings[RUNTIME_FAST_MODE_SETTING_KEY] === "true";
-        sources.fastMode = "workspace";
-    }
-    if (Object.prototype.hasOwnProperty.call(settings, RUNTIME_SANDBOX_SETTING_KEY)) {
-        const sandbox = settings[RUNTIME_SANDBOX_SETTING_KEY];
-        if (isConversationSandbox(sandbox)) {
-            overrides.sandbox = sandbox;
-            sources.sandbox = "workspace";
-        }
-    }
-    if (Object.prototype.hasOwnProperty.call(settings, RUNTIME_NOTIFY_ENABLED_SETTING_KEY)) {
-        overrides.notifyEnabled =
-            settings[RUNTIME_NOTIFY_ENABLED_SETTING_KEY] !== "false";
-        sources.notifyEnabled = "workspace";
-    }
-    return {
-        global,
-        overrides,
-        effective: {
-            ...global,
-            ...overrides,
-        },
-        sources,
-    };
-}
-function applyWorkspaceRuntimeSettingUpdate(conversation, body) {
-    const updateStringOverride = (property, key, normalize) => {
-        if (!Object.prototype.hasOwnProperty.call(body, property)) {
-            return;
-        }
-        if (body[property] === null) {
-            deleteConversationWorkspaceSetting(conversation, key);
-            return;
-        }
-        setConversationWorkspaceSetting(conversation, key, normalize(body[property]));
-    };
-    updateStringOverride("model", RUNTIME_MODEL_SETTING_KEY, (value) => typeof value === "string" ? value.trim() : "");
-    updateStringOverride("reasoningEffort", RUNTIME_REASONING_EFFORT_SETTING_KEY, normalizeRuntimeReasoningEffort);
-    if (Object.prototype.hasOwnProperty.call(body, "fastMode")) {
-        if (body.fastMode === null) {
-            deleteConversationWorkspaceSetting(conversation, RUNTIME_FAST_MODE_SETTING_KEY);
-        }
-        else {
-            setConversationWorkspaceSetting(conversation, RUNTIME_FAST_MODE_SETTING_KEY, body.fastMode === true ? "true" : "false");
-        }
-    }
-    if (Object.prototype.hasOwnProperty.call(body, "sandbox")) {
-        if (body.sandbox === null) {
-            deleteConversationWorkspaceSetting(conversation, RUNTIME_SANDBOX_SETTING_KEY);
-            setConversationSandbox(conversation, getGlobalRuntimeSettings().sandbox);
-        }
-        else if (isConversationSandbox(body.sandbox)) {
-            setConversationWorkspaceSetting(conversation, RUNTIME_SANDBOX_SETTING_KEY, body.sandbox);
-            setConversationSandbox(conversation, body.sandbox);
-        }
-        else {
-            throw new Error("invalid sandbox");
-        }
-    }
-    if (Object.prototype.hasOwnProperty.call(body, "notifyEnabled")) {
-        if (body.notifyEnabled === null) {
-            deleteConversationWorkspaceSetting(conversation, RUNTIME_NOTIFY_ENABLED_SETTING_KEY);
-        }
-        else {
-            setConversationWorkspaceSetting(conversation, RUNTIME_NOTIFY_ENABLED_SETTING_KEY, body.notifyEnabled === false ? "false" : "true");
-        }
-    }
-}
-function getRuntimeModel(input) {
-    return getAppSettingValue(RUNTIME_MODEL_SETTING_KEY)?.trim() || input.defaultModel;
-}
-function getRuntimeReasoningEffort(input) {
-    return normalizeRuntimeReasoningEffort(getAppSettingValue(RUNTIME_REASONING_EFFORT_SETTING_KEY) ??
-        input.defaultReasoningEffort);
-}
-function getRuntimeFastMode(input) {
-    const stored = getAppSettingValue(RUNTIME_FAST_MODE_SETTING_KEY);
-    if (stored === "true") {
-        return true;
-    }
-    if (stored === "false") {
-        return false;
-    }
-    return input.defaultFastMode === true;
-}
-function getRuntimeSandbox(input) {
-    const stored = getAppSettingValue(RUNTIME_SANDBOX_SETTING_KEY);
-    return isConversationSandbox(stored) ? stored : input.defaultSandbox;
-}
-function getRuntimeNotifyEnabled() {
-    return getAppSettingValue(RUNTIME_NOTIFY_ENABLED_SETTING_KEY) !== "false";
-}
-function normalizeRuntimeReasoningEffort(value) {
-    if (value === "minimal" ||
-        value === "low" ||
-        value === "medium" ||
-        value === "high" ||
-        value === "xhigh") {
-        return value;
-    }
-    return "medium";
-}
-function isValidEnvironmentVariableKey(key) {
-    return /^[A-Za-z_][A-Za-z0-9_]*$/.test(key);
-}
-async function readJsonBody(request) {
-    const chunks = [];
-    for await (const chunk of request) {
-        chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk));
-    }
-    if (chunks.length === 0) {
-        return {};
-    }
-    return JSON.parse(Buffer.concat(chunks).toString("utf8"));
-}
-function setCorsHeaders(response) {
-    response.setHeader("Access-Control-Allow-Methods", "GET,POST,PUT,PATCH,DELETE,OPTIONS");
-    response.setHeader("Access-Control-Allow-Headers", "Content-Type,Authorization");
-}
-function sendJson(response, statusCode, data) {
-    response.writeHead(statusCode, { "Content-Type": "application/json" });
-    response.end(JSON.stringify(data));
-}
-function getAgentTranscriptApiBase(conversation) {
-    const host = config.host === "0.0.0.0" || config.host === "::"
-        ? "127.0.0.1"
-        : config.host;
-    return `http://${host}:${config.port}/agent/workspaces/${encodeURIComponent(conversation.id)}/transcript`;
-}
-function getAgentKnowledgeApiBase(conversation) {
-    const host = config.host === "0.0.0.0" || config.host === "::"
-        ? "127.0.0.1"
-        : config.host;
-    return `http://${host}:${config.port}/agent/workspaces/${encodeURIComponent(conversation.id)}/knowledge`;
-}
-function readPositiveInteger(value) {
-    if (typeof value !== "string" && typeof value !== "number") {
-        return undefined;
-    }
-    const parsed = typeof value === "number" ? value : Number.parseInt(value, 10);
-    return Number.isFinite(parsed) && parsed > 0 ? parsed : undefined;
-}
-function resolveWakeAt(body) {
-    if (typeof body.delaySeconds === "number" &&
-        Number.isFinite(body.delaySeconds)) {
-        const delaySeconds = Math.max(1, Math.floor(body.delaySeconds));
-        return new Date(Date.now() + delaySeconds * 1000).toISOString();
-    }
-    return null;
-}
-async function getAppMeta() {
-    if (cachedAppMeta) {
-        return cachedAppMeta;
-    }
-    const packageJsonPath = path.join(config.defaultCwd ?? process.cwd(), "package.json");
-    try {
-        const raw = await fs.readFile(packageJsonPath, "utf8");
-        const data = JSON.parse(raw);
-        cachedAppMeta = {
-            version: typeof data.version === "string" ? data.version : "0.0.0",
-        };
-    }
-    catch {
-        cachedAppMeta = { version: "0.0.0" };
-    }
-    return cachedAppMeta;
-}
-async function buildHealthSnapshot() {
-    const diagnostics = await buildDiagnosticsSnapshot();
-    const store = diagnostics.store;
-    const checks = {
-        centerDb: {
-            ok: store.centerSchemaVersion === store.expectedCenterSchemaVersion,
-            detail: {
-                schemaVersion: store.centerSchemaVersion,
-                expected: store.expectedCenterSchemaVersion,
-            },
-        },
-        workspaceSchemas: {
-            ok: store.workspaceDatabases.every((workspace) => workspace.schemaVersion === store.expectedWorkspaceSchemaVersion),
-            detail: {
-                expected: store.expectedWorkspaceSchemaVersion,
-                workspaces: store.workspaceDatabases.map((workspace) => ({
-                    id: workspace.id,
-                    schemaVersion: workspace.schemaVersion,
-                })),
-            },
-        },
-        workspaceRoot: diagnostics.paths.workspaceRoot,
-        seeleRoot: diagnostics.paths.seeleRoot,
-        runtimeWorkers: {
-            ok: diagnostics.runtime.staleWorkerCount === 0 &&
-                diagnostics.runtime.orphanedActiveTurnCount === 0,
-            detail: {
-                workerCount: diagnostics.runtime.workerCount,
-                staleWorkerCount: diagnostics.runtime.staleWorkerCount,
-                activeTurnCount: diagnostics.runtime.activeTurnCount,
-                orphanedActiveTurnCount: diagnostics.runtime.orphanedActiveTurnCount,
-            },
-        },
-    };
-    return {
-        ok: Object.values(checks).every((check) => check.ok),
-        checks,
-    };
-}
-async function buildDiagnosticsSnapshot() {
-    const runtimeDiagnostics = runtime.getDiagnostics();
-    const effectiveRuntimeConfig = withRuntimeSettings(config);
-    const activeTurns = [...activeConversationTurns.entries()]
-        .map(([conversationId, turnId]) => {
-        const worker = runtimeDiagnostics.workers.find((candidate) => candidate.turnId === turnId);
-        return {
-            conversationId,
-            turnId,
-            backlogSize: turnEventBacklog.get(turnId)?.length ?? 0,
-            subscriberCount: turnSubscribers.get(turnId)?.size ?? 0,
-            terminal: turnTerminalEvents.has(turnId),
-            worker: worker
-                ? {
-                    state: worker.state,
-                    pid: worker.pid,
-                    uptimeMs: worker.uptimeMs,
-                    lastEventAt: worker.lastEventAt,
-                    lastHeartbeatAt: worker.lastHeartbeatAt,
-                    stale: worker.stale,
-                }
-                : null,
-        };
-    })
-        .sort((left, right) => left.conversationId.localeCompare(right.conversationId));
-    const queuedTurns = [...workspaceTurnQueues.entries()]
-        .map(([conversationId, queue]) => ({
-        conversationId,
-        turnIds: queue.map((item) => item.turnId),
-        queueLength: queue.length,
-    }))
-        .sort((left, right) => left.conversationId.localeCompare(right.conversationId));
-    return {
-        app: await getAppMeta(),
-        config: {
-            host: config.host,
-            port: config.port,
-            defaultSandbox: config.defaultSandbox,
-            defaultModel: effectiveRuntimeConfig.defaultModel ?? null,
-            defaultReasoningEffort: effectiveRuntimeConfig.defaultReasoningEffort ?? "medium",
-            fastMode: effectiveRuntimeConfig.defaultFastMode === true,
-            codexBin: config.codexBin ?? null,
-        },
-        paths: {
-            seeleRoot: await checkPathHealth(config.seeleRoot),
-            workspaceRoot: await checkPathHealth(config.workspaceRoot),
-            centerDbPath: config.centerDbPath,
-            webDistPath: await checkPathHealth(config.webDistPath, { requireWrite: false }),
-        },
-        store: getConversationStoreDiagnostics(),
-        runtime: {
-            ...runtimeDiagnostics,
-            activeTurnCount: activeConversationTurns.size,
-            activeConversationIds: [...activeConversationTurns.keys()].sort(),
-            activeTurns,
-            queuedTurns,
-            queuedTurnCount: queuedTurns.reduce((total, item) => total + item.queueLength, 0),
-            orphanedActiveTurnCount: activeTurns.filter((turn) => !turn.worker).length,
-            backloggedTurnCount: turnEventBacklog.size,
-            subscriberTurnCount: turnSubscribers.size,
-            terminalTurnCount: turnTerminalEvents.size,
-            locallyStoppedTurnCount: locallyStoppedTurns.size,
-            staleNotifiedTurnCount: staleRuntimeTurns.size,
-        },
-        startupRecovery: {
-            turns: startupRecovery,
-            wakeups: wakeupStartupRecovery,
-        },
-    };
-}
-async function checkPathHealth(targetPath, options = {}) {
-    const requireWrite = options.requireWrite ?? true;
-    let readable = false;
-    let writable = requireWrite ? false : null;
-    let error = null;
-    try {
-        await fs.access(targetPath, fsConstants.R_OK);
-        readable = true;
-    }
-    catch (accessError) {
-        error = accessError instanceof Error ? accessError.message : String(accessError);
-    }
-    if (requireWrite) {
-        try {
-            await fs.access(targetPath, fsConstants.W_OK);
-            writable = true;
-        }
-        catch (accessError) {
-            error = accessError instanceof Error ? accessError.message : String(accessError);
-        }
-    }
-    return {
-        ok: readable && (writable ?? true),
-        path: targetPath,
-        readable,
-        writable,
-        error,
-    };
-}
-async function serveWebAsset(request, response, pathname) {
-    if (pathname.startsWith("/api/")) {
-        return false;
-    }
-    const requestedPath = pathname === "/" ? "/index.html" : pathname;
-    const relativePath = decodeURIComponent(requestedPath).replace(/^\/+/, "");
-    const webRoot = path.resolve(config.webDistPath);
-    const assetPath = path.resolve(webRoot, relativePath);
-    if (!assetPath.startsWith(`${webRoot}${path.sep}`) && assetPath !== webRoot) {
-        sendJson(response, 403, { error: "forbidden" });
-        return true;
-    }
-    const filePath = await resolveStaticFile(assetPath, webRoot);
-    if (!filePath) {
-        return false;
-    }
-    const stat = await fs.stat(filePath);
-    if (path.basename(filePath) === "index.html") {
-        const html = injectRuntimeWebConfig(await fs.readFile(filePath, "utf8"));
-        response.writeHead(200, {
-            "Cache-Control": "no-store",
-            "Content-Length": Buffer.byteLength(html),
-            "Content-Type": "text/html; charset=utf-8",
-        });
-        response.end(request.method === "HEAD" ? undefined : html);
-        return true;
-    }
-    response.writeHead(200, {
-        "Content-Length": stat.size,
-        "Content-Type": contentTypeFor(filePath),
-    });
-    if (request.method === "HEAD") {
-        response.end();
-        return true;
-    }
-    createReadStream(filePath).pipe(response);
-    return true;
-}
-function injectRuntimeWebConfig(html) {
-    const basePath = escapeHtmlAttribute(config.publicBasePath);
-    const runtimeHead = [
-        `<base href="${basePath}" />`,
-        `<meta name="seele-public-base-path" content="${basePath}" />`,
-    ].join("\n    ");
-    return html.includes("<head>")
-        ? html.replace("<head>", `<head>\n    ${runtimeHead}`)
-        : `${runtimeHead}\n${html}`;
-}
-function escapeHtmlAttribute(value) {
-    return value
-        .replaceAll("&", "&amp;")
-        .replaceAll('"', "&quot;")
-        .replaceAll("<", "&lt;")
-        .replaceAll(">", "&gt;");
-}
-async function serveConversationFile(request, response, workspacePath, requestedFilePath) {
-    const workspaceRoot = path.resolve(workspacePath);
-    const filePath = path.isAbsolute(requestedFilePath)
-        ? path.resolve(requestedFilePath)
-        : path.resolve(workspaceRoot, requestedFilePath);
-    if (!isInsidePath(filePath, workspaceRoot)) {
-        sendJson(response, 403, { error: "forbidden" });
-        return;
-    }
-    const contentType = contentTypeFor(filePath);
-    if (!isServableConversationFileContentType(contentType)) {
-        sendJson(response, 415, { error: "unsupported_file_type" });
-        return;
-    }
-    let stat;
-    try {
-        stat = await fs.stat(filePath);
-    }
-    catch {
-        sendJson(response, 404, { error: "file_not_found" });
-        return;
-    }
-    if (!stat.isFile()) {
-        sendJson(response, 404, { error: "file_not_found" });
-        return;
-    }
-    response.writeHead(200, {
-        "Cache-Control": "no-store",
-        "Content-Length": stat.size,
-        "Content-Type": contentType,
-    });
-    if (request.method === "HEAD") {
-        response.end();
-        return;
-    }
-    createReadStream(filePath).pipe(response);
-}
-async function resolveStaticFile(assetPath, webRoot) {
-    try {
-        const stat = await fs.stat(assetPath);
-        if (stat.isFile()) {
-            return assetPath;
-        }
-    }
-    catch {
-        // Fall back to the SPA entrypoint below.
-    }
-    const indexPath = path.join(webRoot, "index.html");
-    try {
-        const stat = await fs.stat(indexPath);
-        return stat.isFile() ? indexPath : null;
-    }
-    catch {
-        return null;
-    }
-}
-function isInsidePath(value, root) {
-    const relative = path.relative(root, value);
-    return relative === "" || (!relative.startsWith("..") && !path.isAbsolute(relative));
-}
-function isCommandApprovalDecision(value) {
-    return (value === "accept" ||
-        value === "acceptForSession" ||
-        value === "decline" ||
-        value === "cancel");
-}
-function readRecord(value) {
-    return value && typeof value === "object" ? value : {};
-}
-function isAuthorizedProfuseRequest(request) {
-    return request.headers.authorization === `Bearer ${PROFUSE_AGENT_TOKEN}`;
-}
-function readAuthenticatedUser(request) {
-    if (!userStore.enabled) {
-        return {
-            id: "local-admin",
-            username: config.authUsername,
-            role: "admin",
-            active: true,
-            sessionVersion: 1,
-            createdAt: "",
-            updatedAt: "",
-        };
-    }
-    const payload = readSessionPayload(request, userStore.sessionSecret);
-    if (!payload) {
-        return null;
-    }
-    const user = userStore.getUser(payload.userId);
-    if (!user ||
-        !user.active ||
-        user.sessionVersion !== payload.sessionVersion) {
-        return null;
-    }
-    return user;
-}
-function publicUser(user) {
-    const { sessionVersion: _sessionVersion, ...result } = user;
-    return result;
-}
-function isLoopbackHost(host) {
-    return host === "127.0.0.1" || host === "localhost" || host === "::1";
-}
-function workspaceIdFromApiPath(pathname) {
-    const match = pathname.match(/^\/api\/conversations\/([^/]+)/);
-    return match ? decodeURIComponent(match[1]) : null;
-}
-function workspaceIdFromAgentPath(pathname) {
-    const match = pathname.match(/^\/agent\/workspaces\/([^/]+)/);
-    return match ? decodeURIComponent(match[1]) : null;
-}
-function workspaceGroupIdFromApiPath(pathname) {
-    const match = pathname.match(/^\/api\/workspace-groups\/([^/]+)/);
-    return match ? decodeURIComponent(match[1]) : null;
-}
-function canAccessWorkspace(user, workspaceId) {
-    const conversation = getConversation(workspaceId);
-    return Boolean(conversation && (user.role === "admin" || conversation.ownerId === user.id));
-}
-function canAccessWorkspaceGroup(user, groupId) {
-    const group = listWorkspaceGroups().find((item) => item.id === groupId);
-    return Boolean(group &&
-        (group.ownerId === null || user.role === "admin" || group.ownerId === user.id));
-}
-function canManageWorkspaceGroup(user, groupId) {
-    const group = listWorkspaceGroups().find((item) => item.id === groupId);
-    return Boolean(group && (user.role === "admin" || group.ownerId === user.id));
-}
-function visibleConversations(user) {
-    const items = listConversations();
-    const visible = user.role === "admin"
-        ? items
-        : items.filter((conversation) => conversation.ownerId === user.id);
-    return visible.map((conversation) => ({
-        ...conversation,
-        unreadTurnCount: countConversationUnreadTurns(conversation, user.id),
-    }));
-}
-function visibleWorkspaceGroups(user) {
-    const groups = listWorkspaceGroups();
-    return user.role === "admin"
-        ? groups
-        : groups.filter((group) => group.ownerId === null || group.ownerId === user.id);
-}
-function requiresAdminAccess(method, pathname) {
-    if (pathname.startsWith("/api/admin/") || pathname === "/api/diagnostics") {
-        return true;
-    }
-    if (!pathname.startsWith("/api/settings/")) {
-        return false;
-    }
-    if (method !== "GET") {
-        return true;
-    }
-    return pathname.endsWith("/reveal");
-}
-function normalizeUserRole(value) {
-    return value === "admin" ? "admin" : "user";
-}
-function activeAdminCount() {
-    return userStore
-        .listUsers()
-        .filter((user) => user.role === "admin" && user.active).length;
-}
-function userMutationError(error) {
-    const message = error instanceof Error ? error.message : String(error);
-    if (message.includes("UNIQUE constraint failed")) {
-        return "username_exists";
-    }
-    return message === "invalid_username" || message === "invalid_password"
-        ? message
-        : "user_update_failed";
-}
-function loginAttemptBuckets(request, username) {
-    const source = request.socket.remoteAddress ?? "unknown";
-    const usernameDigest = createHash("sha256")
-        .update(username.trim().toLowerCase())
-        .digest("hex");
-    const sourceDigest = createHash("sha256").update(source).digest("hex");
-    return [
-        {
-            key: `pair:${sourceDigest}:${usernameDigest}`,
-            maxFailures: LOGIN_MAX_FAILURES,
-        },
-        { key: `user:${usernameDigest}`, maxFailures: LOGIN_USER_MAX_FAILURES },
-        { key: `source:${sourceDigest}`, maxFailures: LOGIN_SOURCE_MAX_FAILURES },
-    ];
-}
-function isServableConversationFileContentType(value) {
-    return (value.startsWith("image/") ||
-        value.startsWith("text/") ||
-        value.startsWith("application/json"));
-}
-function contentTypeFor(filePath) {
-    switch (path.extname(filePath)) {
-        case ".csv":
-            return "text/csv; charset=utf-8";
-        case ".css":
-            return "text/css; charset=utf-8";
-        case ".html":
-            return "text/html; charset=utf-8";
-        case ".js":
-            return "text/javascript; charset=utf-8";
-        case ".json":
-            return "application/json; charset=utf-8";
-        case ".map":
-            return "application/json; charset=utf-8";
-        case ".md":
-        case ".markdown":
-            return "text/markdown; charset=utf-8";
-        case ".svg":
-            return "image/svg+xml";
-        case ".txt":
-        case ".log":
-            return "text/plain; charset=utf-8";
-        case ".png":
-            return "image/png";
-        case ".jpg":
-        case ".jpeg":
-            return "image/jpeg";
-        case ".webp":
-            return "image/webp";
-        default:
-            return "application/octet-stream";
-    }
-}