@songsid/agend 2.2.0-alpha.1 → 2.2.0-alpha.2

package/dist/web-commands.d.ts

@@ -0,0 +1,77 @@
+/**
+ * #1269 (4): an instance's chat commands, run from the web chat. Only what the instance's own Discord/Telegram topic
+ * already accepts, through the same handlers (topic-commands.ts / FleetManager) and the same table (command-table.ts,
+ * #754/#1148): nothing here is a capability the platforms do not have.
+ *
+ * - Who: a signed-in web session holds the full-fleet credential, issued only to a fleet admin (/dashboard is
+ *   fleet-admin only), so the table's admin levels are met — exactly as a web click on a mirrored prompt is answered
+ *   "as a fleet admin on the platform". The table can still refuse a command in a kind of channel; that stands.
+ * - What: instance commands only. Fleet-level ones (/status, /restart, /update, /login, …) stay in General
+ *   (Discord-first), and /raw is not a command here (it bypasses the [user:] envelope).
+ * - The public link (a gateway request) is the outward-facing surface: /save is refused there — it makes the CLI
+ *   write a file under a name the caller picks, outside the agent's own judgement.
+ * - /clear asks first, as on the platforms: the first call answers a confirmation token; only the second, with that
+ *   token, clears — and only if the instance is still the one that was asked about.
+ */
+import { type CommandScope } from "./command-table.js";
+export declare const WEB_COMMANDS: readonly ["ctx", "compact", "clear", "model", "effort", "cancel", "btw", "steer", "pause", "wake", "save"];
+export type WebCommand = typeof WEB_COMMANDS[number];
+/** Refused on the public link (see the header). */
+export declare const PUBLIC_LINK_REFUSED: ReadonlySet<WebCommand>;
+export declare const MAX_COMMAND_ARGS = 4000;
+export interface WebChoices {
+    current: string | null;
+    options: Array<{
+        id: string;
+        label: string;
+    }>;
+}
+export interface WebCommandDeps {
+    /** The instance is one the web chat may command (a fleet instance or a ClassicBot room), and in which scope. */
+    scope(instance: string): CommandScope | null;
+    ctx(instance: string): Promise<string>;
+    compact(instance: string, instructions: string | undefined): Promise<string>;
+    applyModel(instance: string, name: string): Promise<string>;
+    /** The model menu from the cached catalog only (never a live probe on this path); null: no list to offer. */
+    modelChoices(instance: string): WebChoices | null;
+    applyEffort(instance: string, level: string): Promise<string>;
+    effortChoices(instance: string): WebChoices | null;
+    cancel(instance: string): boolean;
+    steer(instance: string, text: string): string;
+    btw(instance: string, text: string): string;
+    pauseWake(instance: string, action: "pause" | "wake"): Promise<string>;
+    save(instance: string, filename: string): Promise<string>;
+    /** Ask: a confirmation token (or why not). Confirm: clear, if the token is live and the instance unchanged. */
+    clearAsk(instance: string): {
+        token: string;
+        message: string;
+    } | {
+        refused: string;
+    };
+    clearConfirm(instance: string, token: string): Promise<{
+        status: number;
+        text: string;
+    }>;
+    t(key: string, ...args: string[]): string;
+}
+export interface WebCommandInput {
+    instance: string;
+    command: string;
+    args?: string;
+    confirm?: string;
+}
+export interface WebCommandResult {
+    status: number;
+    body: {
+        text?: string;
+        error?: string;
+        choices?: WebChoices;
+        confirm?: {
+            token: string;
+            message: string;
+        };
+    };
+}
+export declare function runWebCommand(deps: WebCommandDeps, input: WebCommandInput, opts: {
+    publicLink: boolean;
+}): Promise<WebCommandResult>;

package/dist/web-commands.js

@@ -0,0 +1,81 @@
+/**
+ * #1269 (4): an instance's chat commands, run from the web chat. Only what the instance's own Discord/Telegram topic
+ * already accepts, through the same handlers (topic-commands.ts / FleetManager) and the same table (command-table.ts,
+ * #754/#1148): nothing here is a capability the platforms do not have.
+ *
+ * - Who: a signed-in web session holds the full-fleet credential, issued only to a fleet admin (/dashboard is
+ *   fleet-admin only), so the table's admin levels are met — exactly as a web click on a mirrored prompt is answered
+ *   "as a fleet admin on the platform". The table can still refuse a command in a kind of channel; that stands.
+ * - What: instance commands only. Fleet-level ones (/status, /restart, /update, /login, …) stay in General
+ *   (Discord-first), and /raw is not a command here (it bypasses the [user:] envelope).
+ * - The public link (a gateway request) is the outward-facing surface: /save is refused there — it makes the CLI
+ *   write a file under a name the caller picks, outside the agent's own judgement.
+ * - /clear asks first, as on the platforms: the first call answers a confirmation token; only the second, with that
+ *   token, clears — and only if the instance is still the one that was asked about.
+ */
+import { commandSpec, decideCommand } from "./command-table.js";
+import { SAVE_FILENAME_RE } from "./topic-commands.js";
+export const WEB_COMMANDS = ["ctx", "compact", "clear", "model", "effort", "cancel", "btw", "steer", "pause", "wake", "save"];
+/** Refused on the public link (see the header). */
+export const PUBLIC_LINK_REFUSED = new Set(["save"]);
+export const MAX_COMMAND_ARGS = 4000;
+const isWebCommand = (c) => WEB_COMMANDS.includes(c);
+export async function runWebCommand(deps, input, opts) {
+    const { instance } = input;
+    const command = input.command.replace(/^\//, "");
+    if (!isWebCommand(command))
+        return { status: 400, body: { error: deps.t("web.command_unknown", `/${command}`) } };
+    if (opts.publicLink && PUBLIC_LINK_REFUSED.has(command))
+        return { status: 403, body: { error: deps.t("web.command_public_refused", `/${command}`) } };
+    const scope = deps.scope(instance);
+    if (!scope)
+        return { status: 404, body: { error: deps.t("instance.not_found", instance) } };
+    // The same table the platforms use; the session is fleet-admin level, so only a scope refusal can stand.
+    const spec = commandSpec(command);
+    if (!spec)
+        return { status: 400, body: { error: deps.t("web.command_unknown", `/${command}`) } };
+    const decision = decideCommand(spec, scope, { fleetAdmin: () => "ok", channelAdmin: () => true, classicAdmin: () => true });
+    if (!decision.allow)
+        return { status: 403, body: { error: deps.t(...decision.reply) } };
+    const args = (input.args ?? "").trim();
+    const ok = (text) => ({ status: 200, body: { text } });
+    switch (command) {
+        case "ctx": return ok(await deps.ctx(instance));
+        case "compact": return ok(await deps.compact(instance, args || undefined));
+        case "model": {
+            if (args)
+                return ok(await deps.applyModel(instance, args));
+            const choices = deps.modelChoices(instance);
+            return choices ? { status: 200, body: { choices } } : ok(deps.t("model.list_unavailable", instance));
+        }
+        case "effort": {
+            if (args)
+                return ok(await deps.applyEffort(instance, args));
+            const choices = deps.effortChoices(instance);
+            return choices ? { status: 200, body: { choices } } : { status: 400, body: { error: deps.t("web.command_no_choices", "/effort") } };
+        }
+        case "cancel": return ok(deps.cancel(instance) ? deps.t("cancel.sent", instance) : deps.t("cancel.not_running", instance));
+        case "steer":
+        case "btw":
+            if (!args)
+                return { status: 400, body: { error: deps.t(`${command}.usage`) } };
+            return ok(command === "steer" ? deps.steer(instance, args) : deps.btw(instance, args));
+        case "pause":
+        case "wake": return ok(await deps.pauseWake(instance, command));
+        case "save":
+            if (!args)
+                return { status: 400, body: { error: deps.t("save.usage") } };
+            if (!SAVE_FILENAME_RE.test(args))
+                return { status: 400, body: { error: deps.t("filename.invalid") } };
+            return ok(await deps.save(instance, args));
+        case "clear": {
+            if (input.confirm) {
+                const r = await deps.clearConfirm(instance, input.confirm);
+                return { status: r.status, body: r.status === 200 ? { text: r.text } : { error: r.text } };
+            }
+            const asked = deps.clearAsk(instance);
+            return "token" in asked ? { status: 200, body: { confirm: asked } } : { status: 409, body: { error: asked.refused } };
+        }
+    }
+}
+//# sourceMappingURL=web-commands.js.map

package/dist/web-commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-commands.js","sourceRoot":"","sources":["../src/web-commands.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,WAAW,EAAE,aAAa,EAAqB,MAAM,oBAAoB,CAAC;AACnF,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAEvD,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAU,CAAC;AAEvI,mDAAmD;AACnD,MAAM,CAAC,MAAM,mBAAmB,GAA4B,IAAI,GAAG,CAAa,CAAC,MAAM,CAAC,CAAC,CAAC;AAC1F,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AA+BrC,MAAM,YAAY,GAAG,CAAC,CAAS,EAAmB,EAAE,CAAE,YAAkC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;AAErG,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAoB,EAAE,KAAsB,EAAE,IAA6B;IAC7G,MAAM,EAAE,QAAQ,EAAE,GAAG,KAAK,CAAC;IAC3B,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACjD,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,qBAAqB,EAAE,IAAI,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC;IAClH,IAAI,IAAI,CAAC,UAAU,IAAI,mBAAmB,CAAC,GAAG,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,4BAA4B,EAAE,IAAI,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC;IACtJ,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACnC,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,oBAAoB,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC;IAC5F,yGAAyG;IACzG,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;IAClC,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,qBAAqB,EAAE,IAAI,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC;IACjG,MAAM,QAAQ,GAAG,aAAa,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5H,IAAI,CAAC,QAAQ,CAAC,KAAK;QAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC;IACxF,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACvC,MAAM,EAAE,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IAC/D,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC;QAChD,KAAK,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,IAAI,IAAI,SAAS,CAAC,CAAC,CAAC;QAC3E,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,IAAI,IAAI;gBAAE,OAAO,EAAE,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;YAC3D,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;YAC5C,OAAO,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,wBAAwB,EAAE,QAAQ,CAAC,CAAC,CAAC;QACvG,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,IAAI,IAAI;gBAAE,OAAO,EAAE,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;YAC5D,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAC;YAC7C,OAAO,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,wBAAwB,EAAE,SAAS,CAAC,EAAE,EAAE,CAAC;QACtI,CAAC;QACD,KAAK,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,oBAAoB,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC3H,KAAK,OAAO,CAAC;QACb,KAAK,KAAK;YACR,IAAI,CAAC,IAAI;gBAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,OAAO,QAAQ,CAAC,EAAE,EAAE,CAAC;YAC/E,OAAO,EAAE,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;QACzF,KAAK,OAAO,CAAC;QACb,KAAK,MAAM,CAAC,CAAC,OAAO,EAAE,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;QAChE,KAAK,MAAM;YACT,IAAI,CAAC,IAAI;gBAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,EAAE,EAAE,CAAC;YACzE,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;gBAAE,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC,EAAE,EAAE,CAAC;YACtG,OAAO,EAAE,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC;QAC7C,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;gBAAC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC;gBAAC,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;YAAC,CAAC;YAC9K,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YACtC,OAAO,OAAO,IAAI,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QACxH,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/web-shell-routes.d.ts

@@ -10,7 +10,7 @@
  * view-api.ts serves them, open to anyone when `web.view_access` is open). /settings and /settings/<section> are the
  * Settings panel (step 3; settings-api.ts serves them, signed in only).
  */
-export declare const FLEET_TABS: readonly ["tasks", "schedules", "teams", "org", "config"];
+export declare const FLEET_TABS: readonly ["tasks", "schedules", "teams", "org", "cache", "config"];
 export type FleetTab = typeof FLEET_TABS[number];
 export declare const SETTINGS_SECTIONS: readonly ["agents", "bots", "classic", "general", "advanced"];
 export type SettingsSection = typeof SETTINGS_SECTIONS[number];

package/dist/web-shell-routes.js

@@ -10,7 +10,7 @@
  * view-api.ts serves them, open to anyone when `web.view_access` is open). /settings and /settings/<section> are the
  * Settings panel (step 3; settings-api.ts serves them, signed in only).
  */
-export const FLEET_TABS = ["tasks", "schedules", "teams", "org", "config"];
+export const FLEET_TABS = ["tasks", "schedules", "teams", "org", "cache", "config"];
 export const SETTINGS_SECTIONS = ["agents", "bots", "classic", "general", "advanced"];
 const PATH_SEPARATOR_OR_CONTROL = /[/\\\u0000-\u001f\u007f]/;
 /** Longest instance name a path may carry; real names are far shorter. */

package/dist/web-shell-routes.js.map

@@ -1 +1 @@
-{"version":3,"file":"web-shell-routes.js","sourceRoot":"","sources":["../src/web-shell-routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAU,CAAC;AAEpF,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,CAAU,CAAC;AAa/F,MAAM,yBAAyB,GAAG,0BAA0B,CAAC;AAC7D,0EAA0E;AAC1E,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAErC;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,IAAI,iBAAiB,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC;WAC9F,IAAI,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAC5C,CAAC;AAED,2EAA2E;AAC3E,SAAS,aAAa,CAAC,OAAe;IACpC,IAAI,CAAC;QAAC,OAAO,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AACpE,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,UAAU,CAAC,MAAc,EAAE,IAAY;IACrD,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IACvD,IAAI,IAAI,KAAK,KAAK;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC;IACvF,IAAI,IAAI,KAAK,WAAW;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC;IAC5F,8GAA8G;IAC9G,wCAAwC;IACxC,IAAI,IAAI,KAAK,WAAW;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC;IAC9E,MAAM,KAAK,GAAG,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClD,IAAI,KAAK;QAAE,OAAQ,UAAgC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,CAAa,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACzJ,MAAM,IAAI,GAAG,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChD,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC;QACrC,OAAO,IAAI,KAAK,IAAI,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IACzI,CAAC;IACD,IAAI,IAAI,KAAK,OAAO;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC;IACzF,MAAM,IAAI,GAAG,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC;QACrC,OAAO,IAAI,KAAK,IAAI,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IACzI,CAAC;IACD,IAAI,IAAI,KAAK,WAAW;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,CAAC;IACpG,MAAM,QAAQ,GAAG,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpD,IAAI,QAAQ,EAAE,CAAC;QACb,OAAQ,iBAAuC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC;YACpE,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAoB,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACtG,CAAC;IACD,sGAAsG;IACtG,OAAO,IAAI,CAAC;AACd,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,MAAM,CAAC,GAAG,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAClC,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,KAAK,UAAU,CAAC;AAC1E,CAAC;AAED,0GAA0G;AAC1G,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,MAAM,CAAC,GAAG,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAClC,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC;AACvG,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,OAAO,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,CAAC;AAC1C,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,QAAQ,CAAC,QAAgB;IACvC,OAAO,YAAY,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;AACpD,CAAC;AACD,MAAM,UAAU,QAAQ,CAAC,QAAgB;IACvC,OAAO,SAAS,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;AACjD,CAAC"}
+{"version":3,"file":"web-shell-routes.js","sourceRoot":"","sources":["../src/web-shell-routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,CAAU,CAAC;AAE7F,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,CAAU,CAAC;AAa/F,MAAM,yBAAyB,GAAG,0BAA0B,CAAC;AAC7D,0EAA0E;AAC1E,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAErC;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,IAAI,iBAAiB,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC;WAC9F,IAAI,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;AAC5C,CAAC;AAED,2EAA2E;AAC3E,SAAS,aAAa,CAAC,OAAe;IACpC,IAAI,CAAC;QAAC,OAAO,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AACpE,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,UAAU,CAAC,MAAc,EAAE,IAAY;IACrD,IAAI,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IACvD,IAAI,IAAI,KAAK,KAAK;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC;IACvF,IAAI,IAAI,KAAK,WAAW;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,CAAC;IAC5F,8GAA8G;IAC9G,wCAAwC;IACxC,IAAI,IAAI,KAAK,WAAW;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC;IAC9E,MAAM,KAAK,GAAG,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClD,IAAI,KAAK;QAAE,OAAQ,UAAgC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC,CAAa,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACzJ,MAAM,IAAI,GAAG,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAChD,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC;QACrC,OAAO,IAAI,KAAK,IAAI,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IACzI,CAAC;IACD,IAAI,IAAI,KAAK,OAAO;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC;IACzF,MAAM,IAAI,GAAG,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC;QACrC,OAAO,IAAI,KAAK,IAAI,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IACzI,CAAC;IACD,IAAI,IAAI,KAAK,WAAW;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,CAAC;IACpG,MAAM,QAAQ,GAAG,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpD,IAAI,QAAQ,EAAE,CAAC;QACb,OAAQ,iBAAuC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAE,CAAC;YACpE,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,KAAK,EAAE,UAAU,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAoB,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IACtG,CAAC;IACD,sGAAsG;IACtG,OAAO,IAAI,CAAC;AACd,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,cAAc,CAAC,IAAY;IACzC,MAAM,CAAC,GAAG,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAClC,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,CAAC,KAAK,CAAC,KAAK,KAAK,UAAU,CAAC;AAC1E,CAAC;AAED,0GAA0G;AAC1G,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,MAAM,CAAC,GAAG,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAClC,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC;AACvG,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,OAAO,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,IAAI,CAAC;AAC1C,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,QAAQ,CAAC,QAAgB;IACvC,OAAO,YAAY,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;AACpD,CAAC;AACD,MAAM,UAAU,QAAQ,CAAC,QAAgB;IACvC,OAAO,SAAS,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;AACjD,CAAC"}

package/launcher/agend

@@ -0,0 +1,110 @@
+#!/bin/sh
+# #1450: the `agend` and `agend-agent` npm bins (this file and launcher/agend-agent are identical). POSIX sh, so AgEnD
+# starts with no Node on PATH at all: it execs this release's bundled Node on the JS launcher, which is the one place
+# that decides and verifies the interpreter (launcher/runtime-select.cjs). A `node` on PATH is used only when the
+# bundled Node is not installed; the JS launcher then decides whether that Node qualifies. Native Windows is not
+# supported (WSL is), as with tmux.
+
+# This file's real location: npm's global bin is a symlink, possibly relative, possibly to another link. A readlink
+# loop, not `readlink -f` (older macOS lacks it; GNU is not assumed).
+self=$0
+while [ -L "$self" ]; do
+  link=$(readlink "$self") || break
+  case $link in
+    /*) self=$link ;;
+    *) self=$(dirname "$self")/$link ;;
+  esac
+done
+dir=$(cd "$(dirname "$self")" && pwd -P) || exit 1
+pkg=$(dirname "$dir")
+launcher=$dir/$(basename "$self").cjs
+
+sys=$(uname -s) || sys=unknown
+mach=$(uname -m) || mach=unknown
+case $sys in
+  Linux) os=linux ;;
+  Darwin) os=darwin ;;
+  *) os=unsupported ;;
+esac
+case $mach in
+  x86_64 | amd64) cpu=x64 ;;
+  aarch64 | arm64) cpu=arm64 ;;
+  *) cpu=unsupported ;;
+esac
+node_pkg=$pkg/node_modules/@songsid/agend-node-$os-$cpu
+node=$node_pkg/bin/node
+receipt=$pkg/.agend-runtime.json
+repair="npm install -g @songsid/agend"
+refuse() { echo "AgEnD cannot start: $1." >&2; echo "To repair: $2" >&2; exit "${3:-1}"; }
+
+# 1. AGEND_NODE, the operator's explicit choice: absolute and executable, then it runs the JS launcher, whose probe
+#    refuses one that does not qualify. Never a silent fallback to another Node.
+if [ -n "${AGEND_NODE:-}" ]; then
+  case $AGEND_NODE in
+    /*) ;;
+    *) refuse "AGEND_NODE must be an absolute path (got $AGEND_NODE)" "unset AGEND_NODE, or point it at a Node 22.14+" ;;
+  esac
+  [ -f "$AGEND_NODE" ] && [ -x "$AGEND_NODE" ] || refuse "AGEND_NODE ($AGEND_NODE) is not an executable file" "unset AGEND_NODE, or point it at a Node 22.14+"
+  exec "$AGEND_NODE" "$launcher" "$@"
+fi
+
+# 2. The bundled Node, only when its ADMISSION KEY (launcher/runtime-select.cjs, "THE ADMISSION KEY") is exactly what
+#    this shell measures now — nothing parsed, the bytes rebuilt and compared: the host's os and cpu (never its
+#    version: an OS update must not lock AgEnD out), the Node's realpath, size and mtime, and the POSIX cksum of both
+#    manifests and of the receipt. The JS selection requires the same key, so a
+#    change to any bound file keeps BOTH from running the candidate.
+# Every measurement must itself complete: a value printed by a command that then fails is no measurement (#1460 r4).
+admissible() {
+  [ -f "$pkg/.agend-runtime.key" ] && [ -f "$node" ] && [ ! -L "$node" ] && [ -x "$node" ] || return 1
+  case $os in linux | darwin) ;; *) return 1 ;; esac
+  real=$(cd "${node%/*}" 2>/dev/null && pwd -P) || return 1
+  real=$real/node
+  size=$(wc -c < "$node") || return 1
+  set -- $size
+  size=${1:-}
+  case $size in '' | *[!0-9]*) return 1 ;; esac
+  if mtime=$(stat -c %Y "$node" 2>/dev/null); then :; elif mtime=$(stat -f %m "$node" 2>/dev/null); then :; else return 1; fi
+  case $mtime in '' | *[!0-9]*) return 1 ;; esac
+  sum_package=$(cksum < "$pkg/package.json") || return 1
+  sum_runtime=$(cksum < "$node_pkg/package.json") || return 1
+  sum_receipt=$(cksum < "$receipt") || return 1
+  printf 'agend-runtime-key 2\nos %s\ncpu %s\nnode %s\nsize %s\nmtime %s\npackage %s\nruntime %s\nreceipt %s\n' \
+    "$os" "$cpu" "$real" "$size" "$mtime" "$sum_package" "$sum_runtime" "$sum_receipt" | cmp -s - "$pkg/.agend-runtime.key"
+}
+# This host, measured fresh, must still be one the bundled Node supports (launcher/runtime-platform.cjs
+# runtimeSupport: glibc >= 2.28 on Linux, Darwin kernel >= 20) — minimums, never a pinned version. A stored or copied
+# runtime on a host that no longer qualifies never runs; the JS launcher then picks a system Node or refuses.
+supported() {
+  case $os in
+    linux)
+      v=$(getconf GNU_LIBC_VERSION 2>/dev/null) || return 1
+      case $v in "glibc "*) v=${v#glibc } ;; *) return 1 ;; esac
+      major=${v%%.*}
+      minor=${v#*.}
+      minor=${minor%%.*}
+      case $major in '' | *[!0-9]*) return 1 ;; esac
+      case $minor in '' | *[!0-9]*) return 1 ;; esac
+      [ "$major" -gt 2 ] || { [ "$major" -eq 2 ] && [ "$minor" -ge 28 ]; }
+      ;;
+    darwin)
+      r=$(uname -r) || return 1
+      kernel=${r%%.*}
+      case $kernel in '' | *[!0-9]*) return 1 ;; esac
+      [ "$kernel" -ge 20 ]
+      ;;
+    *) return 1 ;;
+  esac
+}
+if supported && admissible; then
+  exec "$node" "$launcher" "$@"
+fi
+
+# 3. Not admitted here, so that candidate never runs. A node on PATH runs the JS launcher: it explains a refusal, or
+#    is itself the choice when the runtime was skipped altogether (and it qualifies).
+if command -v node >/dev/null 2>&1; then
+  exec node "$launcher" "$@"
+fi
+if [ -e "$receipt" ] || [ -e "$node" ] || [ -L "$node" ]; then
+  refuse "its bundled Node ($node) is missing, incomplete or changed since it was verified, and there is no node on PATH" "$repair"
+fi
+refuse "its bundled Node is not installed and there is no node on PATH" "$repair" 127

package/launcher/agend-agent

@@ -0,0 +1,110 @@
+#!/bin/sh
+# #1450: the `agend` and `agend-agent` npm bins (this file and launcher/agend-agent are identical). POSIX sh, so AgEnD
+# starts with no Node on PATH at all: it execs this release's bundled Node on the JS launcher, which is the one place
+# that decides and verifies the interpreter (launcher/runtime-select.cjs). A `node` on PATH is used only when the
+# bundled Node is not installed; the JS launcher then decides whether that Node qualifies. Native Windows is not
+# supported (WSL is), as with tmux.
+
+# This file's real location: npm's global bin is a symlink, possibly relative, possibly to another link. A readlink
+# loop, not `readlink -f` (older macOS lacks it; GNU is not assumed).
+self=$0
+while [ -L "$self" ]; do
+  link=$(readlink "$self") || break
+  case $link in
+    /*) self=$link ;;
+    *) self=$(dirname "$self")/$link ;;
+  esac
+done
+dir=$(cd "$(dirname "$self")" && pwd -P) || exit 1
+pkg=$(dirname "$dir")
+launcher=$dir/$(basename "$self").cjs
+
+sys=$(uname -s) || sys=unknown
+mach=$(uname -m) || mach=unknown
+case $sys in
+  Linux) os=linux ;;
+  Darwin) os=darwin ;;
+  *) os=unsupported ;;
+esac
+case $mach in
+  x86_64 | amd64) cpu=x64 ;;
+  aarch64 | arm64) cpu=arm64 ;;
+  *) cpu=unsupported ;;
+esac
+node_pkg=$pkg/node_modules/@songsid/agend-node-$os-$cpu
+node=$node_pkg/bin/node
+receipt=$pkg/.agend-runtime.json
+repair="npm install -g @songsid/agend"
+refuse() { echo "AgEnD cannot start: $1." >&2; echo "To repair: $2" >&2; exit "${3:-1}"; }
+
+# 1. AGEND_NODE, the operator's explicit choice: absolute and executable, then it runs the JS launcher, whose probe
+#    refuses one that does not qualify. Never a silent fallback to another Node.
+if [ -n "${AGEND_NODE:-}" ]; then
+  case $AGEND_NODE in
+    /*) ;;
+    *) refuse "AGEND_NODE must be an absolute path (got $AGEND_NODE)" "unset AGEND_NODE, or point it at a Node 22.14+" ;;
+  esac
+  [ -f "$AGEND_NODE" ] && [ -x "$AGEND_NODE" ] || refuse "AGEND_NODE ($AGEND_NODE) is not an executable file" "unset AGEND_NODE, or point it at a Node 22.14+"
+  exec "$AGEND_NODE" "$launcher" "$@"
+fi
+
+# 2. The bundled Node, only when its ADMISSION KEY (launcher/runtime-select.cjs, "THE ADMISSION KEY") is exactly what
+#    this shell measures now — nothing parsed, the bytes rebuilt and compared: the host's os and cpu (never its
+#    version: an OS update must not lock AgEnD out), the Node's realpath, size and mtime, and the POSIX cksum of both
+#    manifests and of the receipt. The JS selection requires the same key, so a
+#    change to any bound file keeps BOTH from running the candidate.
+# Every measurement must itself complete: a value printed by a command that then fails is no measurement (#1460 r4).
+admissible() {
+  [ -f "$pkg/.agend-runtime.key" ] && [ -f "$node" ] && [ ! -L "$node" ] && [ -x "$node" ] || return 1
+  case $os in linux | darwin) ;; *) return 1 ;; esac
+  real=$(cd "${node%/*}" 2>/dev/null && pwd -P) || return 1
+  real=$real/node
+  size=$(wc -c < "$node") || return 1
+  set -- $size
+  size=${1:-}
+  case $size in '' | *[!0-9]*) return 1 ;; esac
+  if mtime=$(stat -c %Y "$node" 2>/dev/null); then :; elif mtime=$(stat -f %m "$node" 2>/dev/null); then :; else return 1; fi
+  case $mtime in '' | *[!0-9]*) return 1 ;; esac
+  sum_package=$(cksum < "$pkg/package.json") || return 1
+  sum_runtime=$(cksum < "$node_pkg/package.json") || return 1
+  sum_receipt=$(cksum < "$receipt") || return 1
+  printf 'agend-runtime-key 2\nos %s\ncpu %s\nnode %s\nsize %s\nmtime %s\npackage %s\nruntime %s\nreceipt %s\n' \
+    "$os" "$cpu" "$real" "$size" "$mtime" "$sum_package" "$sum_runtime" "$sum_receipt" | cmp -s - "$pkg/.agend-runtime.key"
+}
+# This host, measured fresh, must still be one the bundled Node supports (launcher/runtime-platform.cjs
+# runtimeSupport: glibc >= 2.28 on Linux, Darwin kernel >= 20) — minimums, never a pinned version. A stored or copied
+# runtime on a host that no longer qualifies never runs; the JS launcher then picks a system Node or refuses.
+supported() {
+  case $os in
+    linux)
+      v=$(getconf GNU_LIBC_VERSION 2>/dev/null) || return 1
+      case $v in "glibc "*) v=${v#glibc } ;; *) return 1 ;; esac
+      major=${v%%.*}
+      minor=${v#*.}
+      minor=${minor%%.*}
+      case $major in '' | *[!0-9]*) return 1 ;; esac
+      case $minor in '' | *[!0-9]*) return 1 ;; esac
+      [ "$major" -gt 2 ] || { [ "$major" -eq 2 ] && [ "$minor" -ge 28 ]; }
+      ;;
+    darwin)
+      r=$(uname -r) || return 1
+      kernel=${r%%.*}
+      case $kernel in '' | *[!0-9]*) return 1 ;; esac
+      [ "$kernel" -ge 20 ]
+      ;;
+    *) return 1 ;;
+  esac
+}
+if supported && admissible; then
+  exec "$node" "$launcher" "$@"
+fi
+
+# 3. Not admitted here, so that candidate never runs. A node on PATH runs the JS launcher: it explains a refusal, or
+#    is itself the choice when the runtime was skipped altogether (and it qualifies).
+if command -v node >/dev/null 2>&1; then
+  exec node "$launcher" "$@"
+fi
+if [ -e "$receipt" ] || [ -e "$node" ] || [ -L "$node" ]; then
+  refuse "its bundled Node ($node) is missing, incomplete or changed since it was verified, and there is no node on PATH" "$repair"
+fi
+refuse "its bundled Node is not installed and there is no node on PATH" "$repair" 127

package/launcher/agend-agent.cjs

@@ -0,0 +1,4 @@
+#!/usr/bin/env node
+"use strict";
+// The `agend-agent` bin (#1450): selects AgEnD's Node, then runs dist/agent-cli.js on it.
+require("./launch.cjs")("dist/agent-cli.js", __dirname);

package/launcher/agend.cjs

@@ -0,0 +1,4 @@
+#!/usr/bin/env node
+"use strict";
+// The `agend` bin (#1450): selects AgEnD's Node, then runs dist/cli.js on it.
+require("./launch.cjs")("dist/cli.js", __dirname);

package/launcher/install-admission.cjs

@@ -0,0 +1,105 @@
+"use strict";
+// #1450 C1: may this install of @songsid/agend proceed? Called by the postinstall, inside npm's transaction (a refusal
+// makes npm roll the install back). The lock is the updater's (src/install-lock.ts): `<prefix>/.agend-install.lock`,
+// next to the package it guards. The prefix comes from WHERE this package is — never from the environment.
+//   - no lock, no token            → a plain external install: proceed (the documented restriction covers the rest);
+//   - a live lock, its own token   → the updater's own npm child: proceed;
+//   - a live lock, other/no token  → a foreign install while AgEnD owns the prefix: refuse;
+//   - a token, but no live lock    → late or stale (it cannot authorise a successor): refuse;
+//   - a lock that cannot be read   → refuse, naming the file (unknown ownership blocks).
+// Same syntax constraints as runtime-platform.cjs: this may run on an old Node.
+var fs = require("fs");
+var path = require("path");
+var childProcess = require("child_process");
+
+var LOCK = ".agend-install.lock";
+var TOKEN_ENV = "AGEND_INSTALL_TOKEN";
+
+/** `<prefix>/lib/node_modules/@songsid/agend` → `<prefix>`; null for any other layout (a local install, a checkout). */
+function globalPrefix(pkgDir) {
+  var scope = path.dirname(pkgDir);
+  var nodeModules = path.dirname(scope);
+  var lib = path.dirname(nodeModules);
+  if (path.basename(pkgDir) !== "agend" || path.basename(scope) !== "@songsid" || path.basename(nodeModules) !== "node_modules" || path.basename(lib) !== "lib") return null;
+  return path.dirname(lib);
+}
+
+/** ps by absolute path when it is where the OS keeps it: a service's or a test's PATH may not reach it. */
+var PS = ["/bin/ps", "/usr/bin/ps"].filter(function (p) { try { fs.accessSync(p, fs.constants.X_OK); return true; } catch (e) { return false; } })[0] || "ps";
+
+/**
+ * A process's start time as one canonical text: `ps -o lstart=` under LC_ALL=C and TZ=UTC, so every caller — whatever
+ * its own locale or time zone — reads the same text for the same process. null: it could not be read.
+ */
+function processStart(pid) {
+  try {
+    var env = {};
+    Object.keys(process.env).forEach(function (k) { env[k] = process.env[k]; });
+    env.LC_ALL = "C";
+    env.TZ = "UTC";
+    var r = childProcess.spawnSync(PS, ["-o", "lstart=", "-p", String(pid)], { encoding: "utf8", timeout: 5000, env: env, stdio: ["ignore", "pipe", "ignore"] });
+    var text = String(r.stdout || "").trim();
+    return r.status === 0 && text ? text : null;
+  } catch (e) {
+    return null;
+  }
+}
+
+/** The record, exactly as the updater validates it (src/install-lock.ts parseInstallLock), or null. */
+/** Does `pid` exist? Only a definite "no such process" is no. */
+function exists(pid) {
+  try { process.kill(pid, 0); return true; } catch (e) { return e.code !== "ESRCH"; }
+}
+
+/**
+ * The lock holder's state: "live" (that very process), "stale" (PROVEN gone: no such pid, or the pid is now a process
+ * that started at another time), or "unknown" (it exists but its start time cannot be read) — which blocks, never
+ * counts as stale. deps (tests): exists, processStart.
+ */
+function holderState(lock, deps) {
+  var d = deps || {};
+  if (!(d.exists || exists)(lock.pid)) return "stale";
+  var seen = (d.processStart || processStart)(lock.pid);
+  if (seen === null || seen === undefined) return "unknown";
+  return seen === lock.processStart ? "live" : "stale";
+}
+
+function parse(text) {
+  var r;
+  try { r = JSON.parse(text); } catch (e) { return null; }
+  return r && typeof r === "object" && Number.isSafeInteger(r.pid) && r.pid > 0 && typeof r.processStart === "string" && r.processStart
+    && typeof r.prefix === "string" && typeof r.token === "string" && /^[0-9a-f]{32,}$/.test(r.token)
+    && typeof r.targetSpec === "string" && typeof r.agendHome === "string" && typeof r.createdAt === "string" ? r : null;
+}
+
+/** { ok: true, why } or { ok: false, reason }. deps (tests): env, processStart. */
+function admit(pkgDir, deps) {
+  var d = deps || {};
+  var env = d.env || process.env;
+  var token = env[TOKEN_ENV] || "";
+  var real;
+  try { real = fs.realpathSync(pkgDir); } catch (e) { real = pkgDir; }
+  var prefix = globalPrefix(real);
+  if (!prefix) return token ? { ok: false, reason: "an AgEnD install token was presented, but this is not a global install it could belong to" } : { ok: true, why: "not a global install" };
+  try { prefix = fs.realpathSync(prefix); } catch (e) { /* as derived */ }
+  var lockPath = path.join(prefix, LOCK);
+  var text = null;
+  try { text = fs.readFileSync(lockPath, "utf8"); } catch (e) {
+    if (e.code !== "ENOENT") return { ok: false, reason: "the install lock " + lockPath + " cannot be read (" + e.code + ")" };
+  }
+  if (text === null) {
+    return token ? { ok: false, reason: "an AgEnD install token was presented, but no update holds " + lockPath + " (a late or stale token)" } : { ok: true, why: "no lock: an external install" };
+  }
+  var lock = parse(text);
+  if (!lock) return { ok: false, reason: "the install lock " + lockPath + " cannot be read as a lock; if no `agend update` is running, remove it and retry" };
+  var state = holderState(lock, d);
+  if (state === "unknown") return { ok: false, reason: "whether the AgEnD update that holds " + lockPath + " (pid " + lock.pid + ") is still running cannot be told; retry" };
+  if (state === "stale") {
+    return token ? { ok: false, reason: "the AgEnD update that held " + lockPath + " is gone, so its token cannot authorise this install" } : { ok: true, why: "a stale lock and no token: an external install" };
+  }
+  if (lock.prefix !== prefix) return { ok: false, reason: "the install lock " + lockPath + " names another prefix (" + lock.prefix + ")" };
+  if (token && token === lock.token) return { ok: true, why: "the updater's own install" };
+  return { ok: false, reason: "an `agend update` (pid " + lock.pid + ") is installing into " + prefix + " right now; wait for it, then retry" };
+}
+
+module.exports = { LOCK: LOCK, TOKEN_ENV: TOKEN_ENV, admit: admit, globalPrefix: globalPrefix, processStart: processStart, exists: exists, holderState: holderState, parse: parse };

package/launcher/launch.cjs

@@ -0,0 +1,64 @@
+"use strict";
+// #1450 C2: the launcher body shared by the `agend` and `agend-agent` bins. It picks the interpreter BEFORE any module
+// of the CLI's import graph loads, never downloads, and never changes PATH. Syntax old Nodes still parse.
+var fs = require("fs");
+var path = require("path");
+var childProcess = require("child_process");
+var select = require("./runtime-select.cjs");
+
+var FORWARDED = ["SIGTERM", "SIGHUP", "SIGUSR1", "SIGUSR2"];
+
+function realpath(file) {
+  try { return fs.realpathSync(file); } catch (e) { return null; }
+}
+
+/** `entryRelative`: the CLI inside the package, e.g. "dist/cli.js". */
+module.exports = function launch(entryRelative, launcherDir) {
+  var args = process.argv.slice(2);
+  var chosen = select.selectRuntime(launcherDir);
+
+  // For the updater (C4): which Node and package would this install run on? Printed, nothing started.
+  if (args[0] === "--agend-select-json") {
+    process.stdout.write(JSON.stringify(chosen.ok
+      ? { node: chosen.node, source: chosen.source, pkgDir: chosen.pkgDir, entry: path.join(chosen.pkgDir, entryRelative), warning: chosen.warning || null }
+      : { error: chosen.reason, recovery: chosen.recovery }) + "\n");
+    process.exit(chosen.ok ? 0 : 1);
+  }
+  if (!chosen.ok) {
+    process.stderr.write("\n  AgEnD cannot start: " + chosen.reason + ".\n  To repair: " + chosen.recovery + "\n\n");
+    process.exit(1);
+  }
+  if (chosen.warning) process.stderr.write("  ⚠ AgEnD: " + chosen.warning + "\n");
+
+  var entry = path.join(chosen.pkgDir, entryRelative);
+  if (chosen.node === realpath(process.execPath)) {
+    require("./run-in-process.cjs")(entry);
+    return;
+  }
+
+  var env = {};
+  Object.keys(process.env).forEach(function (key) { env[key] = process.env[key]; });
+  env.AGEND_NODE_SELECTED = "1";
+  // The handlers are in place BEFORE the spawn: a signal delivered between spawn() and their registration would kill
+  // this launcher by default and orphan the CLI. (JS handlers cannot run during this synchronous block, so `child` is
+  // always set by the time one does.)
+  var child = null;
+  FORWARDED.forEach(function (signal) {
+    process.on(signal, function () { try { child.kill(signal); } catch (e) { /* gone */ } });
+  });
+  // A terminal's Ctrl+C reaches the whole process group, the child included: the child decides, this waits.
+  process.on("SIGINT", function () {});
+  child = childProcess.spawn(chosen.node, [entry].concat(args), { stdio: "inherit", env: env });
+  child.on("error", function (err) {
+    process.stderr.write("\n  AgEnD cannot start " + chosen.node + ": " + err.message + "\n\n");
+    process.exit(1);
+  });
+  child.on("exit", function (code, signal) {
+    if (signal) {
+      process.removeAllListeners(signal);
+      process.kill(process.pid, signal);
+      return;
+    }
+    process.exit(code === null ? 1 : code);
+  });
+};