@songsid/agend 2.2.0-beta.3 → 2.2.0-beta.4

package/dist/unrecognised-prompt.d.ts

@@ -0,0 +1,23 @@
+/**
+ * #1691: the shape of a prompt a CLI is waiting on, read from a pane — for prompts no backend table knows (a new CLI
+ * version's dialog, #1690's "Switch model?"). Pure: the daemon decides when a shape counts (no known dialog, no idle
+ * composer, unchanged for a minute) and never answers it.
+ *
+ * A shape is bottom-anchored: the prompt is the last thing on screen apart from a short footer, so an agent's reply
+ * that merely contains a numbered list (or "[y/n]") above the CLI's own prompt rows is not one.
+ */
+export interface PromptShape {
+    /** "numbered": a cursor glyph on a numbered option, with a neighbouring option; "yes-no": a [y/n]-style question. */
+    kind: "numbered" | "yes-no";
+    /** Numbered options seen (0 for yes-no). */
+    options: number;
+    /** The prompt's question/title line, sanitised and bounded (see questionLine); null when there is none. */
+    question: string | null;
+    /** The prompt's rows, from the question to the last option — its identity (the same block is the same prompt). */
+    block: string;
+}
+export declare const QUESTION_MAX = 80;
+/** One short line for a notice: escapes and control characters out, whitespace collapsed, at most QUESTION_MAX. */
+export declare function questionLine(raw: string): string;
+/** The prompt the pane is showing at its bottom, or null. */
+export declare function unrecognisedPromptShape(pane: string): PromptShape | null;

package/dist/unrecognised-prompt.js

@@ -0,0 +1,74 @@
+/**
+ * #1691: the shape of a prompt a CLI is waiting on, read from a pane — for prompts no backend table knows (a new CLI
+ * version's dialog, #1690's "Switch model?"). Pure: the daemon decides when a shape counts (no known dialog, no idle
+ * composer, unchanged for a minute) and never answers it.
+ *
+ * A shape is bottom-anchored: the prompt is the last thing on screen apart from a short footer, so an agent's reply
+ * that merely contains a numbered list (or "[y/n]") above the CLI's own prompt rows is not one.
+ */
+/** Rows looked at, counted from the bottom (non-empty rows only). */
+const BOTTOM_ROWS = 20;
+/** Rows a prompt may have below its last option or question (a hint footer: "Enter to confirm · Esc to cancel"). */
+const FOOTER_ROWS = 3;
+/** How far above the first option the question is looked for. */
+const QUESTION_ROWS = 8;
+export const QUESTION_MAX = 80;
+const CURSOR_OPTION = /^[ \t]*[❯›>][ \t]*(\d{1,2})[.)][ \t]+\S/;
+const OPTION = /^[ \t]*(?:[❯›>][ \t]*)?(\d{1,2})[.)][ \t]+\S/;
+const YES_NO = /[[(][ \t]*[yY][ \t]*\/[ \t]*[nN][ \t]*[\])][ \t]*[:?]?[ \t]*$/;
+/** A rule or border row (box drawing, block elements, dashes): the top of a dialog. */
+const RULE = /^[ \t]*[─━═╌┄▔▁_\-=]{8,}[ \t]*$/;
+const ANSI = /\x1b\[[0-9;?]*[ -/]*[@-~]|\x1b\][^\x07\x1b]*(?:\x07|\x1b\\)/g;
+/** One short line for a notice: escapes and control characters out, whitespace collapsed, at most QUESTION_MAX. */
+export function questionLine(raw) {
+    const text = raw.replace(ANSI, "").replace(/[\x00-\x1f\x7f]/g, " ").replace(/\s+/g, " ").trim();
+    return text.length > QUESTION_MAX ? `${text.slice(0, QUESTION_MAX - 1)}…` : text;
+}
+/** The prompt the pane is showing at its bottom, or null. */
+export function unrecognisedPromptShape(pane) {
+    const rows = pane.replace(ANSI, "").replace(/\r/g, "").split("\n").map(r => r.trimEnd());
+    const filled = [];
+    for (let i = rows.length - 1; i >= 0 && filled.length < BOTTOM_ROWS; i--)
+        if (rows[i].trim() !== "")
+            filled.unshift(i);
+    if (filled.length === 0)
+        return null;
+    const after = (row) => filled.filter(i => i > row).length;
+    // A cursor on a numbered option, with its neighbours: the contiguous run of option rows around it.
+    for (let k = filled.length - 1; k >= 0; k--) {
+        const at = filled[k];
+        const cursor = CURSOR_OPTION.exec(rows[at]);
+        if (!cursor)
+            continue;
+        let first = at, last = at;
+        while (first - 1 >= 0 && OPTION.test(rows[first - 1]))
+            first--;
+        while (last + 1 < rows.length && OPTION.test(rows[last + 1]))
+            last++;
+        const numbers = rows.slice(first, last + 1).map(r => Number(OPTION.exec(r)[1]));
+        const consecutive = numbers.every((n, i) => i === 0 || n === numbers[i - 1] + 1);
+        if (numbers.length < 2 || !consecutive || after(last) > FOOTER_ROWS)
+            return null;
+        // The question: the top of the dialog — the first row under a rule/border, else the topmost filled row — within
+        // QUESTION_ROWS above the options.
+        let top = -1;
+        for (let i = first - 1; i >= 0 && first - i <= QUESTION_ROWS; i--) {
+            if (RULE.test(rows[i]))
+                break;
+            if (rows[i].trim() !== "")
+                top = i;
+        }
+        const question = top >= 0 ? questionLine(rows[top]) : null;
+        const block = rows.slice(top >= 0 ? top : first, last + 1).join("\n");
+        return { kind: "numbered", options: numbers.length, question: question || null, block };
+    }
+    // A [y/n] question at the bottom.
+    for (let k = filled.length - 1; k >= 0 && filled.length - 1 - k <= FOOTER_ROWS; k--) {
+        const at = filled[k];
+        if (!YES_NO.test(rows[at]))
+            continue;
+        return { kind: "yes-no", options: 0, question: questionLine(rows[at]) || null, block: rows[at].trim() };
+    }
+    return null;
+}
+//# sourceMappingURL=unrecognised-prompt.js.map

package/dist/unrecognised-prompt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"unrecognised-prompt.js","sourceRoot":"","sources":["../src/unrecognised-prompt.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAaH,qEAAqE;AACrE,MAAM,WAAW,GAAG,EAAE,CAAC;AACvB,oHAAoH;AACpH,MAAM,WAAW,GAAG,CAAC,CAAC;AACtB,iEAAiE;AACjE,MAAM,aAAa,GAAG,CAAC,CAAC;AACxB,MAAM,CAAC,MAAM,YAAY,GAAG,EAAE,CAAC;AAE/B,MAAM,aAAa,GAAG,yCAAyC,CAAC;AAChE,MAAM,MAAM,GAAG,8CAA8C,CAAC;AAC9D,MAAM,MAAM,GAAG,+DAA+D,CAAC;AAC/E,uFAAuF;AACvF,MAAM,IAAI,GAAG,iCAAiC,CAAC;AAC/C,MAAM,IAAI,GAAG,8DAA8D,CAAC;AAE5E,mHAAmH;AACnH,MAAM,UAAU,YAAY,CAAC,GAAW;IACtC,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAChG,OAAO,IAAI,CAAC,MAAM,GAAG,YAAY,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AACnF,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,uBAAuB,CAAC,IAAY;IAClD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IACzF,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,WAAW,EAAE,CAAC,EAAE;QAAE,IAAI,IAAI,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,KAAK,EAAE;YAAE,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IACxH,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACrC,MAAM,KAAK,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC;IAElE,mGAAmG;IACnG,KAAK,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC5C,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAE,CAAC;QACtB,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAE,CAAC,CAAC;QAC7C,IAAI,CAAC,MAAM;YAAE,SAAS;QACtB,IAAI,KAAK,GAAG,EAAE,EAAE,IAAI,GAAG,EAAE,CAAC;QAC1B,OAAO,KAAK,GAAG,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAE,CAAC;YAAE,KAAK,EAAE,CAAC;QAChE,OAAO,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAE,CAAC;YAAE,IAAI,EAAE,CAAC;QACtE,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACjF,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,OAAO,CAAC,CAAC,GAAG,CAAC,CAAE,GAAG,CAAC,CAAC,CAAC;QAClF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,WAAW;YAAE,OAAO,IAAI,CAAC;QACjF,gHAAgH;QAChH,mCAAmC;QACnC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC;QACb,KAAK,IAAI,CAAC,GAAG,KAAK,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,aAAa,EAAE,CAAC,EAAE,EAAE,CAAC;YAClE,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC;gBAAE,MAAM;YAC/B,IAAI,IAAI,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,KAAK,EAAE;gBAAE,GAAG,GAAG,CAAC,CAAC;QACtC,CAAC;QACD,MAAM,QAAQ,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC5D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,IAAI,IAAI,EAAE,KAAK,EAAE,CAAC;IAC1F,CAAC;IAED,kCAAkC;IAClC,KAAK,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,IAAI,WAAW,EAAE,CAAC,EAAE,EAAE,CAAC;QACpF,MAAM,EAAE,GAAG,MAAM,CAAC,CAAC,CAAE,CAAC;QACtB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAE,CAAC;YAAE,SAAS;QACtC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,CAAE,CAAC,IAAI,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,EAAE,CAAE,CAAC,IAAI,EAAE,EAAE,CAAC;IAC5G,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/web-api.d.ts

@@ -9,6 +9,7 @@ import { type WebChatHistory } from "./web-chat-history.js";
 import { type WebFileLedger } from "./web-upload.js";
 import type { WebSessionStore } from "./web-session.js";
 import { type WebPrefsStore } from "./web-prefs.js";
+import { type MentionNames, type MentionQuery } from "./web-mentions.js";
 import type { ExplicitInstanceRemoval } from "./instance-removal.js";
 /**
  * Push a single SSE frame to every client. If a client throws (closed socket
@@ -121,6 +122,8 @@ export interface WebApiContext {
     webImage?(kind: "bot" | "avatar", key: string): CachedImage | null;
     /** #1630: one Discord server emoji of the fleet's bots, from the host cache (fetched once); null for any other id. */
     webEmoji?(id: string): Promise<CachedImage | null>;
+    /** #1682: names for mention ids (only those asked; from memory, never a request); absent: no names. */
+    webMentionNames?(query: MentionQuery): MentionNames;
     /** #1630: the custom emoji of the servers the fleet's Discord bots are in. */
     webEmojiList?(): Promise<Array<{
         id: string;

package/dist/web-api.js

@@ -1,3 +1,4 @@
+import { withSpawnHoldReply } from "./spawn-hold-reply.js";
 import { binaryProbe } from "./binary-probe.js";
 import { settingsRequestExecution, settingsWrite, isSettingsReplay } from "./settings-request-capability.js";
 import { readBoundedWebBody } from "./web-body.js";
@@ -25,6 +26,8 @@ import { newWebMessageId, parseLastEventId } from "./web-chat-history.js";
 import { attachmentDelivery, displayName, INLINE_MIME, isFileId, MEDIA_RANGE_MAX, publicAttachment, sniffUpload, UPLOAD_LIMITS, wellFormed } from "./web-upload.js";
 import { getAgendHome } from "./paths.js";
 import { OPERATOR } from "./web-prefs.js";
+import { commitTeamCreate, commitTeamUpdate } from "./outbound-handlers.js";
+import { parseMentionQuery } from "./web-mentions.js";
 import { authorizeExplicitInstanceRemoval } from "./instance-removal.js";
 import { measureSyncWork } from "./sync-work-attribution.js";
 // ── Strict public-facing schemas ────────────────────────────────────────────
@@ -58,6 +61,12 @@ const TeamCreateSchema = z.object({
     members: z.array(z.string().min(1).max(256)).min(1).max(256),
     description: z.string().max(MAX_TEXT).optional(),
 }).strict();
+// #1689: an edit of a team — its members as they should be, and its description ("" clears it). No name: a team is
+// not renamed.
+const TeamEditSchema = z.object({
+    members: z.array(z.string().min(1).max(256)).min(1).max(256),
+    description: z.string().max(MAX_TEXT).optional(),
+}).strict();
 const ConfigUpdateSchema = z.object({
     channel: z.object({
         group_id: z.union([z.number(), z.string()]).optional(),
@@ -420,6 +429,24 @@ export function handleWebRequest(req, res, url, ctx) {
         (ctx.webEmojiList ? ctx.webEmojiList() : Promise.resolve([])).then(answer, () => answer([]));
         return true;
     }
+    // #1682: the names of the mention ids a page found in what it rendered (at most MAX_MENTION_IDS, digits only) — only
+    // those, so no page (the public link included) ever gets a directory; from memory, never a request.
+    if (method === "GET" && path === "/ui/mentions") {
+        const parsed = parseMentionQuery(url.searchParams);
+        if (!parsed.ok) {
+            json(res, 400, { error: parsed.error });
+            return true;
+        }
+        let names = { u: {}, r: {}, c: {} };
+        try {
+            names = ctx.webMentionNames?.(parsed.query) ?? names;
+        }
+        catch (err) {
+            ctx.logger.debug({ err: err.message }, "mention names unavailable");
+        }
+        json(res, 200, names);
+        return true;
+    }
     // ── Fleet prompts (C4): the hang / exit / interactive-prompt buttons, answerable here too ──
     if (method === "GET" && path === "/ui/prompts") {
         json(res, 200, { prompts: ctx.listWebPrompts?.() ?? [] });
@@ -720,13 +747,18 @@ export function handleWebRequest(req, res, url, ctx) {
         }
         const topicMode = ctx.fleetConfig?.channel?.mode === "topic";
         (async () => {
+            let held = false;
             try {
-                await ctx.startInstance(name, config, topicMode ?? false);
+                await withSpawnHoldReply(async (message) => { held = true; json(res, 202, { held: true, message, instance: name }); }, () => ctx.startInstance(name, config, topicMode ?? false));
                 ctx.emitSseEvent("status", ctx.getUiStatus());
-                json(res, 200, { started: name });
+                if (!held)
+                    json(res, 200, { started: name });
             }
             catch (err) {
-                json(res, 500, { error: err.message });
+                if (!held)
+                    json(res, 500, { error: err.message });
+                else
+                    ctx.logger.error({ err, name }, "Held instance action failed");
             }
         })();
         return true;
@@ -839,14 +871,19 @@ export function handleWebRequest(req, res, url, ctx) {
     if (method === "POST" && restartMatch) {
         const name = decodeURIComponent(restartMatch[1]);
         (async () => {
+            let held = false;
             try {
-                await ctx.restartSingleInstance(name, { explicit: true });
+                await withSpawnHoldReply(async (message) => { held = true; json(res, 202, { held: true, message, instance: name }); }, () => ctx.restartSingleInstance(name, { explicit: true }));
                 ctx.emitSseEvent("status", ctx.getUiStatus());
-                json(res, 200, { restarted: name });
+                if (!held)
+                    json(res, 200, { restarted: name });
             }
             catch (err) {
                 const status = err.message.includes("not found") ? 404 : 500;
-                json(res, status, { error: err.message });
+                if (!held)
+                    json(res, status, { error: err.message });
+                else
+                    ctx.logger.error({ err, name }, "Held instance action failed");
             }
         })();
         return true;
@@ -1027,26 +1064,82 @@ export function handleWebRequest(req, res, url, ctx) {
         return true;
     }
     if (method === "POST" && path === "/ui/teams") {
+        // #1689: not over the public link (absent from its manifest too), like editing and deleting a team.
+        if (gatewayRequestContext(req)) {
+            json(res, 403, { error: "teams_not_over_public_link" });
+            return true;
+        }
         (async () => {
             try {
                 const body = await parseBody(req);
                 if (!permitWebContinuation(req, res, ctx))
                     return;
+                // #1692: who may write, asked again once the body is in (as the edit does).
+                const verdict = evaluateWebRequest(req, url, ctx.webToken ?? null, ctx.webSessions, { touch: false });
+                if (verdict.kind !== "allow" || (verdict.via === "session" && verdict.session?.tier !== "admin")) {
+                    json(res, 401, { error: WEB_TOKEN_INVALID_MESSAGE });
+                    return;
+                }
                 const parsed = parseOrReject(TeamCreateSchema, body, res);
                 if (!parsed)
                     return;
-                if (!ctx.fleetConfig) {
-                    json(res, 500, { error: "No fleet config" });
+                // #1692: the create_team path — members checked, an existing team never overwritten, a failed save undone.
+                const r = commitTeamCreate(ctx.fleetConfig, parsed, () => ctx.saveFleetConfig());
+                if (!r.ok) {
+                    json(res, r.status, { error: r.error });
                     return;
                 }
-                if (!ctx.fleetConfig.teams)
-                    ctx.fleetConfig.teams = {};
-                ctx.fleetConfig.teams[parsed.name] = {
-                    members: parsed.members,
-                    description: parsed.description,
-                };
-                ctx.saveFleetConfig();
-                json(res, 200, { created: parsed.name });
+                json(res, 200, r.result);
+            }
+            catch (err) {
+                json(res, 400, { error: err.message });
+            }
+        })();
+        return true;
+    }
+    // #1689: edit a team — the same update as the update_team tool (applyTeamUpdate), from the members the page sends:
+    // what to add and remove is worked out against the team as it is now. Never over the public link.
+    const teamEditMatch = path.match(/^\/ui\/teams\/(.+)$/);
+    if ((method === "PATCH" || method === "PUT") && teamEditMatch) {
+        if (gatewayRequestContext(req)) {
+            json(res, 403, { error: "teams_not_over_public_link" });
+            return true;
+        }
+        const name = decodeURIComponent(teamEditMatch[1]);
+        // Who may write, asked again once the body is in (#1693 review): a session revoked or a token rotated meanwhile
+        // writes nothing.
+        const writerNow = () => {
+            const verdict = evaluateWebRequest(req, url, ctx.webToken ?? null, ctx.webSessions, { touch: false });
+            return verdict.kind === "allow" && !(verdict.via === "session" && verdict.session?.tier !== "admin");
+        };
+        (async () => {
+            try {
+                const body = await parseBody(req);
+                if (!permitWebContinuation(req, res, ctx))
+                    return;
+                if (!writerNow()) {
+                    json(res, 401, { error: WEB_TOKEN_INVALID_MESSAGE });
+                    return;
+                }
+                const parsed = parseOrReject(TeamEditSchema, body, res);
+                if (!parsed)
+                    return;
+                const teams = ctx.fleetConfig?.teams;
+                const current = teams && Object.hasOwn(teams, name) ? teams[name].members : null;
+                if (!current) {
+                    json(res, 404, { error: `Team not found: ${name}` });
+                    return;
+                }
+                const want = [...new Set(parsed.members)];
+                // The update and its save as one: a failed save leaves the team as it was (500).
+                const r = commitTeamUpdate(ctx.fleetConfig, {
+                    name, add: want.filter(m => !current.includes(m)), remove: current.filter(m => !want.includes(m)), description: parsed.description,
+                }, () => ctx.saveFleetConfig());
+                if (!r.ok) {
+                    json(res, r.status, { error: r.error });
+                    return;
+                }
+                json(res, 200, { updated: r.result });
             }
             catch (err) {
                 json(res, 400, { error: err.message });
@@ -1056,8 +1149,13 @@ export function handleWebRequest(req, res, url, ctx) {
     }
     const teamDelMatch = path.match(/^\/ui\/teams\/(.+)$/);
     if (method === "DELETE" && teamDelMatch) {
+        if (gatewayRequestContext(req)) {
+            json(res, 403, { error: "teams_not_over_public_link" });
+            return true;
+        }
         const name = decodeURIComponent(teamDelMatch[1]);
-        if (!ctx.fleetConfig?.teams?.[name]) {
+        // Own keys (#1689): a team is one fleet.yaml defines — "__proto__" or "constructor" is not found.
+        if (!ctx.fleetConfig?.teams || !Object.hasOwn(ctx.fleetConfig.teams, name)) {
             json(res, 404, { error: `Team not found: ${name}` });
             return true;
         }