@songsid/agend 2.3.5-alpha.4 → 2.3.5-alpha.5

package/dist/hub-browser-certificate-policy.js

@@ -0,0 +1,25 @@
+function record(input) {
+    if (!input || typeof input !== "object" || Array.isArray(input))
+        throw Error("invalid_browser_certificate");
+    return input;
+}
+function revision(value) { return typeof value === "string" && /^[0-9a-f]{64}$/.test(value); }
+function file(value) { return typeof value === "string" && value.length > 0 && value.length <= 4096 && !value.includes("\0"); }
+export function parseHubBrowserCertificatePrepare(input) {
+    const p = record(input), keys = Object.keys(p).sort().join(",");
+    if (!revision(p.revision))
+        throw Error("invalid_browser_certificate");
+    if (p.mode === "generate" && keys === "mode,revision")
+        return { mode: "generate", revision: p.revision };
+    if (p.mode === "import" && keys === "certificateFile,keyFile,mode,revision" && file(p.certificateFile) && file(p.keyFile))
+        return { mode: "import", revision: p.revision, certificateFile: p.certificateFile, keyFile: p.keyFile };
+    throw Error("invalid_browser_certificate");
+}
+export function parseHubBrowserCertificateApply(input) {
+    const p = record(input);
+    if (Object.keys(p).sort().join(",") !== "reference,revision" || !revision(p.revision) || typeof p.reference !== "string"
+        || !/^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/.test(p.reference))
+        throw Error("invalid_browser_certificate");
+    return { reference: p.reference, revision: p.revision };
+}
+//# sourceMappingURL=hub-browser-certificate-policy.js.map

package/dist/hub-browser-certificate-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hub-browser-certificate-policy.js","sourceRoot":"","sources":["../src/hub-browser-certificate-policy.ts"],"names":[],"mappings":"AAkBA,SAAS,MAAM,CAAC,KAAc;IAC5B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAC5G,OAAO,KAAgC,CAAC;AAC1C,CAAC;AACD,SAAS,QAAQ,CAAC,KAAc,IAAqB,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACxH,SAAS,IAAI,CAAC,KAAc,IAAqB,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACzJ,MAAM,UAAU,iCAAiC,CAAC,KAAc;IAC9D,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChE,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC;QAAE,MAAM,KAAK,CAAC,6BAA6B,CAAC,CAAC;IACtE,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,IAAI,IAAI,KAAK,eAAe;QAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;IACzG,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,uCAAuC,IAAI,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC;QACvH,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,eAAe,EAAE,CAAC,CAAC,eAAe,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IAC1G,MAAM,KAAK,CAAC,6BAA6B,CAAC,CAAC;AAC7C,CAAC;AACD,MAAM,UAAU,+BAA+B,CAAC,KAAc;IAC5D,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IACxB,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,oBAAoB,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ;WACnH,CAAC,uEAAuE,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QAAE,MAAM,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAC5I,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC;AAC1D,CAAC"}

package/dist/hub-membership-settings.d.ts

@@ -0,0 +1,6 @@
+export declare function hubMembershipSettings(raw: unknown): {
+    enabled: boolean;
+};
+export declare function parseHubMembership(input: unknown): {
+    enabled: boolean;
+};

package/dist/hub-membership-settings.js

@@ -0,0 +1,21 @@
+/** Pure Settings policy: importing this while membership is off mounts no Hub code. */
+const object = (v) => !!v && typeof v === "object" && !Array.isArray(v);
+export function hubMembershipSettings(raw) {
+    if (!object(raw))
+        throw Error("invalid_hub_membership");
+    const member = Object.hasOwn(raw, "hub_member") ? raw.hub_member : undefined;
+    if (member === undefined)
+        return { enabled: false };
+    if (!object(member))
+        throw Error("invalid_hub_membership");
+    const enabled = Object.hasOwn(member, "enabled") ? member.enabled : undefined;
+    if (enabled !== undefined && typeof enabled !== "boolean")
+        throw Error("invalid_hub_membership");
+    return { enabled: enabled === true };
+}
+export function parseHubMembership(input) {
+    if (!object(input) || Object.keys(input).length !== 1 || !Object.hasOwn(input, "enabled") || typeof input.enabled !== "boolean")
+        throw Error("invalid_hub_membership");
+    return { enabled: input.enabled };
+}
+//# sourceMappingURL=hub-membership-settings.js.map

package/dist/hub-membership-settings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hub-membership-settings.js","sourceRoot":"","sources":["../src/hub-membership-settings.ts"],"names":[],"mappings":"AAAA,uFAAuF;AACvF,MAAM,MAAM,GAAG,CAAC,CAAU,EAAgC,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;AAC/G,MAAM,UAAU,qBAAqB,CAAC,GAAY;IAChD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC;QAAE,MAAM,KAAK,CAAC,wBAAwB,CAAC,CAAC;IACxD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7E,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACpD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC;QAAE,MAAM,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC3D,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAC9E,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,OAAO,KAAK,SAAS;QAAE,MAAM,KAAK,CAAC,wBAAwB,CAAC,CAAC;IACjG,OAAO,EAAE,OAAO,EAAE,OAAO,KAAK,IAAI,EAAE,CAAC;AACvC,CAAC;AACD,MAAM,UAAU,kBAAkB,CAAC,KAAc;IAC/C,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,SAAS;QAAE,MAAM,KAAK,CAAC,wBAAwB,CAAC,CAAC;IACvK,OAAO,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;AACpC,CAAC"}

package/dist/hub-mode.d.ts

@@ -0,0 +1,15 @@
+/**
+ * AgEnD Hub P1 (docs/design/hub.md §1; fleet decision 7e5b8a8f): what the fleet's web shows of the Hub. The member
+ * switch `hub_member.enabled` (off by default) marks this fleet's pages `data-hub="member"`; the Hub's own shell is served
+ * only by a Hub's separate listener and origin (slice 1), never derived here. Until slice 1's HubMode exists this reads
+ * the switch; slice 1 replaces the body with HubMode.memberEnabled() (which also requires a valid initialization).
+ */
+/** Longest Hub name shown in the brand. */
+export declare const HUB_NAME_MAX = 60;
+/** Any fleet config shape (or none): the switch is read defensively, true only when exactly `true`. */
+export type HubSwitches = unknown;
+export declare function hubModeOf(config: HubSwitches): {
+    member: boolean;
+};
+/** A Hub name as the brand shows it: one line, no control characters, at most HUB_NAME_MAX characters. */
+export declare function hubNameOf(raw: string): string;

package/dist/hub-mode.js

@@ -0,0 +1,17 @@
+/**
+ * AgEnD Hub P1 (docs/design/hub.md §1; fleet decision 7e5b8a8f): what the fleet's web shows of the Hub. The member
+ * switch `hub_member.enabled` (off by default) marks this fleet's pages `data-hub="member"`; the Hub's own shell is served
+ * only by a Hub's separate listener and origin (slice 1), never derived here. Until slice 1's HubMode exists this reads
+ * the switch; slice 1 replaces the body with HubMode.memberEnabled() (which also requires a valid initialization).
+ */
+/** Longest Hub name shown in the brand. */
+export const HUB_NAME_MAX = 60;
+export function hubModeOf(config) {
+    const c = (config && typeof config === "object" ? config : {});
+    return { member: c.hub_member?.enabled === true };
+}
+/** A Hub name as the brand shows it: one line, no control characters, at most HUB_NAME_MAX characters. */
+export function hubNameOf(raw) {
+    return [...raw.replace(/[\u0000-\u001f\u007f]/g, " ").replace(/\s+/g, " ").trim()].slice(0, HUB_NAME_MAX).join("");
+}
+//# sourceMappingURL=hub-mode.js.map

package/dist/hub-mode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hub-mode.js","sourceRoot":"","sources":["../src/hub-mode.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,2CAA2C;AAC3C,MAAM,CAAC,MAAM,YAAY,GAAG,EAAE,CAAC;AAK/B,MAAM,UAAU,SAAS,CAAC,MAAmB;IAC3C,MAAM,CAAC,GAAG,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAA2C,CAAC;IACzG,OAAO,EAAE,MAAM,EAAE,CAAC,CAAC,UAAU,EAAE,OAAO,KAAK,IAAI,EAAE,CAAC;AACpD,CAAC;AAED,0GAA0G;AAC1G,MAAM,UAAU,SAAS,CAAC,GAAW;IACnC,OAAO,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC,wBAAwB,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACrH,CAAC"}

package/dist/hub-pairing-summary.d.ts

@@ -0,0 +1,48 @@
+/**
+ * S3c PR B: the pairing projection's types and the confirmation summary — no I/O and no S1 import, so the fleet can
+ * name a pairing step's summary without loading the Hub's pairing client (which loads only with hub_member on).
+ */
+export type HubPairingHold = "unknown_outcome" | "expired" | "unsaved" | "refused" | "revoked" | "disconnected";
+export type HubPairingView = {
+    state: "unpaired";
+} | {
+    state: "pending";
+    memberOrigin: string;
+    fingerprint: {
+        kind: "pairing";
+        digest: string;
+    };
+    expiresAt: number;
+    ownerConfirmed: null;
+    adminApproved: null;
+    localConfirmed: boolean;
+} | {
+    state: "paired";
+    hub: {
+        hubId: string;
+        name: null;
+        memberOrigin: string;
+        webOrigin: string;
+        fingerprint: {
+            kind: "hub-key";
+            digest: string;
+        };
+    };
+    link: "online" | "offline";
+    binding?: string;
+} | {
+    state: "held";
+    hold: HubPairingHold;
+    memberOrigin?: string;
+    hubId?: string;
+    binding?: string;
+};
+export type HubConnectError = "address" | "code" | "busy" | "unreachable" | "refused";
+export declare function httpsOrigin(address: string): string | null;
+/** What the owner is asked to confirm for a pairing step (Settings confirmation's summary); a refused input throws. */
+export declare function pairingSummary(action: "connect" | "confirm" | "disconnect", input: unknown, view: HubPairingView, bound?: {
+    hubId: string;
+    binding: string | null;
+} | null): {
+    summary: string[];
+};

package/dist/hub-pairing-summary.js

@@ -0,0 +1,36 @@
+export function httpsOrigin(address) {
+    try {
+        const u = new URL(address.trim());
+        return u.protocol === "https:" && !u.username && !u.password && (u.pathname === "/" || u.pathname === "") && !u.search && !u.hash ? u.origin : null;
+    }
+    catch {
+        return null;
+    }
+}
+/** What the owner is asked to confirm for a pairing step (Settings confirmation's summary); a refused input throws. */
+export function pairingSummary(action, input, view, bound = null) {
+    const body = (input && typeof input === "object" && !Array.isArray(input) ? input : {});
+    const refuse = (code) => { throw Object.assign(new Error(code), { code }); };
+    const groups = (d) => d.toLowerCase().slice(0, 32).replace(/(.{4})(?=.)/g, "$1 ");
+    if (action === "connect") {
+        const origin = typeof body.address === "string" ? httpsOrigin(body.address) : null;
+        if (!origin)
+            refuse("address");
+        if (view.state !== "unpaired")
+            refuse("busy");
+        return { summary: [`Connect this fleet to the Hub at ${origin}`, "It asks the Hub's owner and administrator to approve it"] };
+    }
+    if (action === "confirm") {
+        if (view.state !== "pending" || body.digest !== view.fingerprint.digest)
+            refuse("conflict");
+        return { summary: [`Confirm the pairing fingerprint for ${view.memberOrigin}`, groups(String(body.digest))] };
+    }
+    if (view.state !== "paired" && !(view.state === "held" && view.hold !== "disconnected" && view.memberOrigin))
+        refuse("conflict");
+    // #3115 r1 P2: the confirmation names the exact Hub (its id, in the body the owner confirms); apply rechecks it.
+    if (!bound || body.hubId !== bound.hubId || !bound.binding || body.binding !== bound.binding)
+        refuse("conflict");
+    const origin = view.state === "paired" ? view.hub.memberOrigin : view.memberOrigin;
+    return { summary: [`Disconnect this fleet from the Hub at ${origin} (${bound.hubId}, pairing ${bound.binding.slice(0, 12)})`, "Every agent shared there is withdrawn; the Hub's administrator revokes the fleet there"] };
+}
+//# sourceMappingURL=hub-pairing-summary.js.map

package/dist/hub-pairing-summary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hub-pairing-summary.js","sourceRoot":"","sources":["../src/hub-pairing-summary.ts"],"names":[],"mappings":"AAWA,MAAM,UAAU,WAAW,CAAC,OAAe;IACzC,IAAI,CAAC;QAAC,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;QAAC,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,QAAQ,KAAK,GAAG,IAAI,CAAC,CAAC,QAAQ,KAAK,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AACxN,CAAC;AAED,uHAAuH;AACvH,MAAM,UAAU,cAAc,CAAC,MAA4C,EAAE,KAAc,EAAE,IAAoB,EAAE,KAAK,GAAqD,IAAI;IAC/K,MAAM,IAAI,GAAG,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAA4B,CAAC;IACnH,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,EAAE,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACrF,MAAM,MAAM,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;IAC1F,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACnF,IAAI,CAAC,MAAM;YAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QAC/B,IAAI,IAAI,CAAC,KAAK,KAAK,UAAU;YAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QAC9C,OAAO,EAAE,OAAO,EAAE,CAAC,oCAAoC,MAAM,EAAE,EAAE,yDAAyD,CAAC,EAAE,CAAC;IAChI,CAAC;IACD,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,CAAC,WAAW,CAAC,MAAM;YAAE,MAAM,CAAC,UAAU,CAAC,CAAC;QAC5F,OAAO,EAAE,OAAO,EAAE,CAAC,uCAAwC,IAAiC,CAAC,YAAY,EAAE,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9I,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI,KAAK,cAAc,IAAI,IAAI,CAAC,YAAY,CAAC;QAAE,MAAM,CAAC,UAAU,CAAC,CAAC;IACjI,iHAAiH;IACjH,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,KAAK,KAAK,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO;QAAE,MAAM,CAAC,UAAU,CAAC,CAAC;IACjH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAE,IAAiC,CAAC,YAAY,CAAC;IACjH,OAAO,EAAE,OAAO,EAAE,CAAC,yCAAyC,MAAM,KAAK,KAAM,CAAC,KAAK,aAAa,KAAM,CAAC,OAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,EAAE,wFAAwF,CAAC,EAAE,CAAC;AAC/N,CAAC"}

package/dist/hub-report-target.d.ts

@@ -0,0 +1,32 @@
+export declare const HUB_REPORT_TARGET = "agend-hub";
+export type HubReportOutcome = {
+    ok: true;
+    message: string;
+} | {
+    ok: false;
+    message: string;
+};
+/**
+ * report_result's Hub-only fields (#3226 seams §3; D owns the schema, F fills buttons/poll). `files` are the agent's
+ * paths, checked again when the answer is released (state-dir rule, size, type). Other targets must not carry any.
+ */
+export interface HubReportExtras {
+    files?: readonly string[];
+    /** F: the parsed reply buttons and poll, in the fleet's reply-buttons / reply-polls shapes. */
+    buttons?: readonly import("./reply-buttons.js").ReplyButton[];
+    poll?: import("./reply-polls.js").PollConfig;
+}
+export type HubReportExtrasResult = {
+    ok: true;
+    extras: HubReportExtras;
+} | {
+    ok: false;
+    message: string;
+};
+/** Validate report_result's Hub-only fields for `target`. Another target carrying any of them is refused, never ignored. */
+export declare function parseHubReportExtras(target: string, args: {
+    summary?: unknown;
+    files?: unknown;
+    buttons?: unknown;
+    poll?: unknown;
+}): HubReportExtrasResult;

package/dist/hub-report-target.js

@@ -0,0 +1,33 @@
+/**
+ * The reserved report_result target for Hub representative answers (docs/design/hub-representative-agent.md). Kept
+ * on the shared reply models so outbound handlers never need to load the Hub runtime to validate a report.
+ */
+import { parseReplyButtons } from "./reply-buttons.js";
+import { parsePoll } from "./reply-polls.js";
+export const HUB_REPORT_TARGET = "agend-hub";
+const HUB_ONLY = ["files", "buttons", "poll"];
+/** Validate report_result's Hub-only fields for `target`. Another target carrying any of them is refused, never ignored. */
+export function parseHubReportExtras(target, args) {
+    const present = HUB_ONLY.filter(key => args[key] !== undefined);
+    if (target !== HUB_REPORT_TARGET) {
+        return present.length ? { ok: false, message: `report_result ${present.join("/")} are only for target_instance "${HUB_REPORT_TARGET}" (a Hub answer). Use the reply tool for files or buttons in a chat.` } : { ok: true, extras: {} };
+    }
+    const extras = {};
+    if (args.files !== undefined) {
+        if (!Array.isArray(args.files) || args.files.length < 1 || args.files.length > 10 || args.files.some(f => typeof f !== "string" || !f))
+            return { ok: false, message: "files: 1–10 file paths" };
+        extras.files = [...args.files];
+    }
+    const buttons = parseReplyButtons(args.buttons, { text: args.summary });
+    if (buttons && "error" in buttons)
+        return { ok: false, message: buttons.error };
+    const poll = parsePoll(args.poll, buttons?.buttons ?? null, args.summary);
+    if (poll && "error" in poll)
+        return { ok: false, message: poll.error };
+    if (buttons)
+        extras.buttons = buttons.buttons;
+    if (poll)
+        extras.poll = poll.poll;
+    return { ok: true, extras };
+}
+//# sourceMappingURL=hub-report-target.js.map

package/dist/hub-report-target.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hub-report-target.js","sourceRoot":"","sources":["../src/hub-report-target.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAE7C,MAAM,CAAC,MAAM,iBAAiB,GAAG,WAAW,CAAC;AAc7C,MAAM,QAAQ,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,CAAU,CAAC;AACvD,4HAA4H;AAC5H,MAAM,UAAU,oBAAoB,CAAC,MAAc,EAAE,IAA+E;IAClI,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,SAAS,CAAC,CAAC;IAChE,IAAI,MAAM,KAAK,iBAAiB,EAAE,CAAC;QACjC,OAAO,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,iBAAiB,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,kCAAkC,iBAAiB,sEAAsE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACzO,CAAC;IACD,MAAM,MAAM,GAAoB,EAAE,CAAC;IACnC,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC7B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC;QAChM,MAAM,CAAC,KAAK,GAAG,CAAC,GAAG,IAAI,CAAC,KAAiB,CAAC,CAAC;IAC7C,CAAC;IACD,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IACxE,IAAI,OAAO,IAAI,OAAO,IAAI,OAAO;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC;IAChF,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,OAAO,IAAI,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IAC1E,IAAI,IAAI,IAAI,OAAO,IAAI,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;IACvE,IAAI,OAAO;QAAE,MAAM,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;IAC9C,IAAI,IAAI;QAAE,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;IAClC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC9B,CAAC"}

package/dist/hub-retention-policy.d.ts

@@ -0,0 +1,14 @@
+/** Suggested values are presented for owner confirmation, never applied to an existing Hub. No I/O on import. */
+export declare const HUB_RETENTION_DEFAULTS: Readonly<{
+    contentDays: 7;
+    eventDays: 30;
+}>;
+export interface HubRetentionPolicy {
+    contentDays: number;
+    eventDays: number;
+}
+export interface HubRetentionView extends HubRetentionPolicy {
+    revision: number;
+}
+export declare function retentionDays(value: unknown): value is number;
+export declare function parseHubRetention(input: unknown): HubRetentionView;

package/dist/hub-retention-policy.js

@@ -0,0 +1,15 @@
+/** Suggested values are presented for owner confirmation, never applied to an existing Hub. No I/O on import. */
+export const HUB_RETENTION_DEFAULTS = Object.freeze({ contentDays: 7, eventDays: 30 });
+export function retentionDays(value) {
+    return Number.isSafeInteger(value) && value >= 1 && value <= 3650;
+}
+export function parseHubRetention(input) {
+    if (!input || typeof input !== "object" || Array.isArray(input))
+        throw Error("invalid_retention");
+    const p = input;
+    if (Object.keys(p).sort().join(",") !== "contentDays,eventDays,revision" || !retentionDays(p.contentDays) || !retentionDays(p.eventDays)
+        || !Number.isSafeInteger(p.revision) || p.revision < 1)
+        throw Error("invalid_retention");
+    return { contentDays: p.contentDays, eventDays: p.eventDays, revision: p.revision };
+}
+//# sourceMappingURL=hub-retention-policy.js.map

package/dist/hub-retention-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hub-retention-policy.js","sourceRoot":"","sources":["../src/hub-retention-policy.ts"],"names":[],"mappings":"AAAA,iHAAiH;AACjH,MAAM,CAAC,MAAM,sBAAsB,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC,CAAC;AAGvF,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,OAAO,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAK,KAAgB,IAAI,CAAC,IAAK,KAAgB,IAAI,IAAI,CAAC;AAC5F,CAAC;AACD,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,KAAK,CAAC,mBAAmB,CAAC,CAAC;IAClG,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,gCAAgC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;WACnI,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAK,CAAC,CAAC,QAAmB,GAAG,CAAC;QAAE,MAAM,KAAK,CAAC,mBAAmB,CAAC,CAAC;IACvG,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAkB,EAAE,CAAC;AAChG,CAAC"}

package/dist/instance-config-impact.js

@@ -76,6 +76,8 @@ const INSTANCE_FIELDS = [
     "board_cards_at_once",
     // Read by the fleet at each tool call (dashboard-permissions.ts).
     "dashboard", "office_access", "office_pack_access",
+    // M-2446: the agent dialog's Codex speed (backend_options.codex.speed) — read at launch, so an agent restart.
+    "backend_options",
 ];
 /** ClassicBot channel fields the settings page renders. */
 const CLASSIC_FIELDS = [
@@ -102,6 +104,7 @@ const FLEET_FIELD_IMPACTS = {
     "web.usage_report_on_public_link": "now",
     "web.office_levels": "now",
     "web.preview_cdn": "now",
+    "web.login_qr": "now",
     "web.public_link.allow_public": "now",
     "web.public_link.ttl_minutes": "now",
     "web.public_link.protocol": "now",

package/dist/instance-config-impact.js.map

@@ -1 +1 @@
-{"version":3,"file":"instance-config-impact.js","sourceRoot":"","sources":["../src/instance-config-impact.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAM9C,0EAA0E;AAC1E,MAAM,CAAC,MAAM,YAAY,GAA4B,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;AAElF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAsC,IAAI,GAAG,CAAuB;IACvG,eAAe;IACf,wBAAwB;IACxB,gBAAgB;IAChB,iBAAiB;IACjB,yBAAyB;IACzB,kBAAkB;IAClB,UAAU;IACV,cAAc;IACd,aAAa;IACb,MAAM;IACN,WAAW;IACX,sFAAsF;IACtF,2BAA2B;IAC3B,wFAAwF;IACxF,qBAAqB;IACrB,oGAAoG;IACpG,WAAW,EAAE,eAAe,EAAE,oBAAoB;CACnD,CAAC,CAAC;AAEH;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAwB,IAAI,GAAG,CAChE,CAAC,eAAe,EAAE,wBAAwB,EAAE,gBAAgB,CAAW;KACrE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,wBAAwB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CACpD,CAAC;AAEF;;;GAGG;AACH,MAAM,0BAA0B,GAAwB,IAAI,GAAG,CAAC;IAC9D,UAAU;IACV,YAAY;IACZ,eAAe;CAChB,CAAC,CAAC;AAEH,wDAAwD;AACxD,MAAM,eAAe,GAAG;IACtB,cAAc,EAAE,aAAa,EAAE,SAAS,EAAE,OAAO,EAAE,mBAAmB;IACtE,yBAAyB,EAAE,kBAAkB,EAAE,UAAU,EAAE,UAAU,EAAE,YAAY,EAAE,eAAe;IACpG,eAAe,EAAE,wBAAwB,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,WAAW;IAC3F,cAAc,EAAE,MAAM,EAAE,eAAe,EAAE,YAAY,EAAE,UAAU;IACjE,aAAa,EAAE,gBAAgB,EAAE,QAAQ,EAAE,kBAAkB;IAC7D,0EAA0E;IAC1E,kEAAkE;IAClE,eAAe;IACf,2BAA2B;IAC3B,qDAAqD;IACrD,qBAAqB;IACrB,kEAAkE;IAClE,WAAW,EAAE,eAAe,EAAE,oBAAoB;CAC1C,CAAC;AAEX,2DAA2D;AAC3D,MAAM,cAAc,GAAG;IACrB,SAAS,EAAE,OAAO,EAAE,kBAAkB,EAAE,eAAe;IACvD,wBAAwB,EAAE,gBAAgB,EAAE,QAAQ,EAAE,eAAe,EAAE,kBAAkB;IACzF,UAAU;CACF,CAAC;AAEX;;;GAGG;AACH,MAAM,mBAAmB,GAA2C;IAClE,eAAe,EAAE,KAAK;IACtB,kBAAkB,EAAE,KAAK;IACzB,qBAAqB,EAAE,KAAK;IAC5B,yBAAyB,EAAE,KAAK;IAChC,gCAAgC,EAAE,KAAK;IACvC,qBAAqB,EAAE,KAAK;IAC5B,aAAa,EAAE,KAAK;IACpB,+EAA+E;IAC/E,sBAAsB,EAAE,KAAK;IAC7B,yBAAyB,EAAE,KAAK;IAChC,iCAAiC,EAAE,KAAK;IACxC,iCAAiC,EAAE,KAAK;IACxC,mBAAmB,EAAE,KAAK;IAC1B,iBAAiB,EAAE,KAAK;IACxB,8BAA8B,EAAE,KAAK;IACrC,6BAA6B,EAAE,KAAK;IACpC,0BAA0B,EAAE,KAAK;IACjC,0BAA0B,EAAE,KAAK;IACjC,kCAAkC,EAAE,KAAK;IACzC,6BAA6B,EAAE,KAAK;IACpC,sDAAsD;IACtD,2BAA2B,EAAE,OAAO;IACpC,+EAA+E;IAC/E,kCAAkC,EAAE,KAAK;IACzC,8BAA8B,EAAE,KAAK;IACrC,oGAAoG;IACpG,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,oBAAoB,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,gBAAgB;QAC/I,sBAAsB,EAAE,oBAAoB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,kBAAkB,CAAC,EAAE,EAAE,KAAc,CAAC,CAAC,CAAC;IACpG,sBAAsB,EAAE,KAAK;IAC7B,0BAA0B,EAAE,KAAK;IACjC,mHAAmH;IACnH,qDAAqD;IACrD,YAAY,EAAE,KAAK;IACnB,wBAAwB,EAAE,KAAK;IAC/B,+GAA+G;IAC/G,iBAAiB,EAAE,OAAO;IAC1B,gBAAgB,EAAE,OAAO;IACzB,2BAA2B,EAAE,OAAO;IACpC,oCAAoC,EAAE,OAAO;IAC7C,gHAAgH;IAChH,2GAA2G;IAC3G,qCAAqC,EAAE,KAAK;IAC5C,sHAAsH;IACtH,yBAAyB,EAAE,KAAK;IAChC,wBAAwB,EAAE,KAAK;IAC/B,kHAAkH;IAClH,qBAAqB,EAAE,KAAK;IAC5B,qBAAqB,EAAE,OAAO;IAC9B,wBAAwB,EAAE,OAAO;IACjC,qGAAqG;IACrG,iBAAiB,EAAE,KAAK;CACzB,CAAC;AAEF,gFAAgF;AAChF,MAAM,UAAU,kBAAkB,CAAC,MAAsB;IAIvD,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,MAAM,IAAI,GAA4B,EAAE,CAAC;IACzC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAwE,EAAE,CAAC;QACzH,CAAC,wBAAwB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,GAAG,KAAc,CAAC;IACzE,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;AACvB,CAAC;AAED;mEACmE;AACnE,MAAM,UAAU,eAAe,CAAC,MAAsB;IACpD,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,KAAK,MAAM,GAAG,IAAI,wBAAwB;QAAE,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;IAC9E,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CACpC,OAAuB,EACvB,IAAoB;IAEpB,MAAM,MAAM,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACvC,gEAAgE;IAChE,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAClE,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5D,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC7C,IAAI,0BAA0B,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,OAAO,CAAC;IACxD,OAAO,wBAAwB,CAAC,GAAG,CAAC,GAA2B,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC;AACxF,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,GAAW;IAC5C,OAAO,uBAAuB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC;AAC/D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,IAAuB,EAAE,QAAuC;IAC1F,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,GAAG,IAAI,IAAI;QAAE,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,YAAY,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACrF,OAAO,YAAY,CAAC,KAAK,CAAE,CAAC;AAC9B,CAAC;AASD,qDAAqD;AACrD,MAAM,UAAU,yBAAyB;IACvC,MAAM,OAAO,GAAiC,EAAE,GAAG,mBAAmB,EAAE,CAAC;IACzE,KAAK,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QAClC,OAAO,CAAC,YAAY,GAAG,EAAE,CAAC,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;QACtD,wEAAwE;QACxE,sEAAsE;QACtE,IAAI,CAAC,0BAA0B,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,CAAC,YAAY,GAAG,EAAE,CAAC,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;IAClG,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,cAAc,EAAE,CAAC;QACjC,OAAO,CAAC,WAAW,GAAG,EAAE,CAAC,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;QACpD,OAAO,CAAC,oBAAoB,GAAG,EAAE,CAAC,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;AAC1C,CAAC"}
+{"version":3,"file":"instance-config-impact.js","sourceRoot":"","sources":["../src/instance-config-impact.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAM9C,0EAA0E;AAC1E,MAAM,CAAC,MAAM,YAAY,GAA4B,CAAC,KAAK,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC;AAElF;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAsC,IAAI,GAAG,CAAuB;IACvG,eAAe;IACf,wBAAwB;IACxB,gBAAgB;IAChB,iBAAiB;IACjB,yBAAyB;IACzB,kBAAkB;IAClB,UAAU;IACV,cAAc;IACd,aAAa;IACb,MAAM;IACN,WAAW;IACX,sFAAsF;IACtF,2BAA2B;IAC3B,wFAAwF;IACxF,qBAAqB;IACrB,oGAAoG;IACpG,WAAW,EAAE,eAAe,EAAE,oBAAoB;CACnD,CAAC,CAAC;AAEH;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAwB,IAAI,GAAG,CAChE,CAAC,eAAe,EAAE,wBAAwB,EAAE,gBAAgB,CAAW;KACrE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,wBAAwB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CACpD,CAAC;AAEF;;;GAGG;AACH,MAAM,0BAA0B,GAAwB,IAAI,GAAG,CAAC;IAC9D,UAAU;IACV,YAAY;IACZ,eAAe;CAChB,CAAC,CAAC;AAEH,wDAAwD;AACxD,MAAM,eAAe,GAAG;IACtB,cAAc,EAAE,aAAa,EAAE,SAAS,EAAE,OAAO,EAAE,mBAAmB;IACtE,yBAAyB,EAAE,kBAAkB,EAAE,UAAU,EAAE,UAAU,EAAE,YAAY,EAAE,eAAe;IACpG,eAAe,EAAE,wBAAwB,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,WAAW;IAC3F,cAAc,EAAE,MAAM,EAAE,eAAe,EAAE,YAAY,EAAE,UAAU;IACjE,aAAa,EAAE,gBAAgB,EAAE,QAAQ,EAAE,kBAAkB;IAC7D,0EAA0E;IAC1E,kEAAkE;IAClE,eAAe;IACf,2BAA2B;IAC3B,qDAAqD;IACrD,qBAAqB;IACrB,kEAAkE;IAClE,WAAW,EAAE,eAAe,EAAE,oBAAoB;IAClD,8GAA8G;IAC9G,iBAAiB;CACT,CAAC;AAEX,2DAA2D;AAC3D,MAAM,cAAc,GAAG;IACrB,SAAS,EAAE,OAAO,EAAE,kBAAkB,EAAE,eAAe;IACvD,wBAAwB,EAAE,gBAAgB,EAAE,QAAQ,EAAE,eAAe,EAAE,kBAAkB;IACzF,UAAU;CACF,CAAC;AAEX;;;GAGG;AACH,MAAM,mBAAmB,GAA2C;IAClE,eAAe,EAAE,KAAK;IACtB,kBAAkB,EAAE,KAAK;IACzB,qBAAqB,EAAE,KAAK;IAC5B,yBAAyB,EAAE,KAAK;IAChC,gCAAgC,EAAE,KAAK;IACvC,qBAAqB,EAAE,KAAK;IAC5B,aAAa,EAAE,KAAK;IACpB,+EAA+E;IAC/E,sBAAsB,EAAE,KAAK;IAC7B,yBAAyB,EAAE,KAAK;IAChC,iCAAiC,EAAE,KAAK;IACxC,iCAAiC,EAAE,KAAK;IACxC,mBAAmB,EAAE,KAAK;IAC1B,iBAAiB,EAAE,KAAK;IACxB,cAAc,EAAE,KAAK;IACrB,8BAA8B,EAAE,KAAK;IACrC,6BAA6B,EAAE,KAAK;IACpC,0BAA0B,EAAE,KAAK;IACjC,0BAA0B,EAAE,KAAK;IACjC,kCAAkC,EAAE,KAAK;IACzC,6BAA6B,EAAE,KAAK;IACpC,sDAAsD;IACtD,2BAA2B,EAAE,OAAO;IACpC,+EAA+E;IAC/E,kCAAkC,EAAE,KAAK;IACzC,8BAA8B,EAAE,KAAK;IACrC,oGAAoG;IACpG,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,oBAAoB,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,gBAAgB;QAC/I,sBAAsB,EAAE,oBAAoB,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,kBAAkB,CAAC,EAAE,EAAE,KAAc,CAAC,CAAC,CAAC;IACpG,sBAAsB,EAAE,KAAK;IAC7B,0BAA0B,EAAE,KAAK;IACjC,mHAAmH;IACnH,qDAAqD;IACrD,YAAY,EAAE,KAAK;IACnB,wBAAwB,EAAE,KAAK;IAC/B,+GAA+G;IAC/G,iBAAiB,EAAE,OAAO;IAC1B,gBAAgB,EAAE,OAAO;IACzB,2BAA2B,EAAE,OAAO;IACpC,oCAAoC,EAAE,OAAO;IAC7C,gHAAgH;IAChH,2GAA2G;IAC3G,qCAAqC,EAAE,KAAK;IAC5C,sHAAsH;IACtH,yBAAyB,EAAE,KAAK;IAChC,wBAAwB,EAAE,KAAK;IAC/B,kHAAkH;IAClH,qBAAqB,EAAE,KAAK;IAC5B,qBAAqB,EAAE,OAAO;IAC9B,wBAAwB,EAAE,OAAO;IACjC,qGAAqG;IACrG,iBAAiB,EAAE,KAAK;CACzB,CAAC;AAEF,gFAAgF;AAChF,MAAM,UAAU,kBAAkB,CAAC,MAAsB;IAIvD,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,MAAM,IAAI,GAA4B,EAAE,CAAC;IACzC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAwE,EAAE,CAAC;QACzH,CAAC,wBAAwB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,GAAG,KAAc,CAAC;IACzE,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;AACvB,CAAC;AAED;mEACmE;AACnE,MAAM,UAAU,eAAe,CAAC,MAAsB;IACpD,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,KAAK,MAAM,GAAG,IAAI,wBAAwB;QAAE,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC;IAC9E,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,sBAAsB,CACpC,OAAuB,EACvB,IAAoB;IAEpB,MAAM,MAAM,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC;IACvC,gEAAgE;IAChE,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAClE,IAAI,CAAC,iBAAiB,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5D,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,GAAW;IAC7C,IAAI,0BAA0B,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,OAAO,CAAC;IACxD,OAAO,wBAAwB,CAAC,GAAG,CAAC,GAA2B,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC;AACxF,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,GAAW;IAC5C,OAAO,uBAAuB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC;AAC/D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,IAAuB,EAAE,QAAuC;IAC1F,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,GAAG,IAAI,IAAI;QAAE,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,YAAY,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACrF,OAAO,YAAY,CAAC,KAAK,CAAE,CAAC;AAC9B,CAAC;AASD,qDAAqD;AACrD,MAAM,UAAU,yBAAyB;IACvC,MAAM,OAAO,GAAiC,EAAE,GAAG,mBAAmB,EAAE,CAAC;IACzE,KAAK,MAAM,GAAG,IAAI,eAAe,EAAE,CAAC;QAClC,OAAO,CAAC,YAAY,GAAG,EAAE,CAAC,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;QACtD,wEAAwE;QACxE,sEAAsE;QACtE,IAAI,CAAC,0BAA0B,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO,CAAC,YAAY,GAAG,EAAE,CAAC,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;IAClG,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,cAAc,EAAE,CAAC;QACjC,OAAO,CAAC,WAAW,GAAG,EAAE,CAAC,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;QACpD,OAAO,CAAC,oBAAoB,GAAG,EAAE,CAAC,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,YAAY,EAAE,CAAC;AAC1C,CAAC"}

package/dist/instance-lifecycle.d.ts

@@ -1,5 +1,6 @@
 import { SettingsExecution } from "./settings-transaction.js";
 import type { InstanceConfig, FleetConfig } from "./types.js";
+import type { TopicDeleteOutcome } from "./instance-topic-delete.js";
 import { RoutingEngine } from "./routing-engine.js";
 import type { Logger } from "./logger.js";
 import type { InstanceClient } from "./channel/ipc-bridge.js";
@@ -66,6 +67,8 @@ export interface LifecycleContext {
     onNativePaneRecoverySettled?(name: string): void;
     holdNativePaneRecovery?(name: string, error: unknown): boolean;
     setNativePanePaused?(name: string, paused: boolean): void;
+    invalidateNativeMcp?(name: string): void;
+    readonly agentCredentials?: Pick<import("./agent-credentials.js").AgentCredentials, "issue" | "invalidate">;
     readonly fleetConfig: FleetConfig | null;
     readonly logger: Logger;
     readonly dataDir: string;
@@ -102,8 +105,10 @@ export interface LifecycleContext {
     createForumTopic(topicName: string, adapterId?: string): Promise<number | string>;
     /** #2910: no Discord or Telegram connection at all — a new agent gets no topic (it is reached from the dashboard). */
     isWebOnlyFleet?(): boolean;
-    /** adapterId selects the world, mirroring createForumTopic (rollback must delete where it created). */
-    deleteForumTopic(topicId: number | string, adapterId?: string): Promise<void>;
+    /** delete_instance: the removal, then (unless `deleteTopic` is false) the agent's own topic, through its own bot. */
+    removeInstanceAndTopic(name: string, authorization: ExplicitInstanceRemoval, opts: {
+        deleteTopic: boolean;
+    }): Promise<TopicDeleteOutcome>;
     /**
      * A bound delete for the world `adapterId` selects, captured by the caller
      * BEFORE awaiting createForumTopic. Rollback must use exactly this — never
@@ -144,6 +149,8 @@ export interface LifecycleContext {
     /** Notify a clean CLI exit and offer an admin-only restart action in General. */
     notifyNormalExit(name: string): Promise<void>;
     notifySessionOomStop?(name: string, unclear?: boolean): Promise<void>;
+    /** A pre-launch refusal is still a visible wait when no daemon was published. */
+    setKiroCompatibilityHold?(name: string, message: string | null): void;
     /** Tell every General, as an agent, that kiro-cli can no longer run this instance as configured. */
     queueKiroIncompatNotice?(name: string, reason: string): void;
     /** True for a dynamic ClassicBot channel instance (not a fleet topic). */
@@ -228,6 +235,8 @@ export interface IncidentEventSource {
     }): void;
     /** Re-checks that a Codex pane is live after an async quota probe. */
     isCodexLivePane?(): Promise<boolean>;
+    /** #3186 review: a usage-pause notice the second opinion dropped was not told — its repeats must reach it again. */
+    clearUsagePauseNotice?(): void;
     /** Existing occurrence count used to preserve Codex capacity history on restart. */
     getErrorPatternOccurrenceCount?(type: "model_error", pattern: RegExp): number;
     /** #2648: kiro only — what a model error on its current launch should do (restart once, say once, or nothing). */
@@ -573,6 +582,12 @@ export declare class InstanceLifecycle {
     stop(name: string, transition?: TransitionHandle): Promise<void>;
     private stopInTransition;
     remove(name: string, authorization: ExplicitInstanceRemoval, execution?: SettingsExecution, transition?: TransitionHandle): Promise<void>;
+    /**
+     * Whether a new instance made in `adapterId`'s world records it as channel_id: in a fleet with more than one
+     * connection, or when that world is not the first one (where a missing channel_id would route). A single-connection
+     * fleet's fleet.yaml stays as it was.
+     */
+    private bindsAdapter;
     /** Handle create_instance tool call from a daemon. */
     handleCreate(args: LifecycleCreateArgs, respond: (result: unknown, error?: string) => void, adapterId?: string, execution?: SettingsExecution): Promise<void>;
     /** Handle delete_instance tool call from a daemon. */

package/dist/instance-lifecycle.js

@@ -687,6 +687,24 @@ export class InstanceLifecycle {
             }
             this.ctx.notifyInstanceTopic(name, t("delivery.cancelled_unsent", messages.length, name));
         }, this.ctx.logger, `daemon.human_messages_cancelled[${name}]`));
+        // #3030: messages handed to the busy CLI's own queue that it never took (it went idle without them), or that a
+        // restart left unverifiable (its transcript could not be read, so they were not sent again). Each is marked ❌ and
+        // the person is told once — never a silent ✅.
+        daemon.on("human_handoffs_unsettled", safeHandler((data) => {
+            const messages = Array.isArray(data?.messages) ? data.messages : [];
+            if (!messages.length)
+                return;
+            const reason = data.reason === "unverifiable" ? "unverifiable" : "not-taken";
+            this.ctx.eventLog?.insert(name, "handoffs_unsettled", { reason, count: messages.length });
+            this.ctx.logger.warn({ name, reason, count: messages.length }, "Queued messages not taken by the CLI — telling the person");
+            for (const m of messages) {
+                if (this.ctx.finishDeliveryStatus)
+                    this.ctx.finishDeliveryStatus(name, m.chatId, m.messageId, "failed", m.threadId);
+                else
+                    this.ctx.reactMessageStatus(name, m.chatId, m.messageId, "failed", m.threadId);
+            }
+            this.ctx.notifyInstanceTopic(name, t(reason === "unverifiable" ? "delivery.handoff_unverified_after_restart" : "delivery.handoff_not_taken", messages.length, name));
+        }, this.ctx.logger, `daemon.human_handoffs_unsettled[${name}]`));
     }
     nativeRecoveryPending(name) { return this.nativeExitOwners.has(name); }
     cancelNativeRecovery(name, owner) {
@@ -1151,7 +1169,7 @@ export class InstanceLifecycle {
                         daemon.requestPauseWhenIdle({ reconfirmAuth: true, reason: "auth" });
                     }
                     else
-                        daemon.requestPauseWhenIdle({ reason: "error" });
+                        daemon.requestPauseWhenIdle({ reason: data.type === "quota" ? "quota" : "error" });
                 }
                 return;
             }
@@ -1202,6 +1220,10 @@ export class InstanceLifecycle {
                 const verdict = await this.verifyClaudeQuota();
                 if (verdict === "available") {
                     this.ctx.logger.debug({ name, backend: "claude-code" }, "quota pattern ignored — live usage has capacity (stale pane history)");
+                    // Not told: the daemon's one-notice-per-pause mark must not hold back the next repeat (the usage API can lag
+                    // the CLI right as the limit hits; the next "reached again" is verified again).
+                    if (data.verifyQuota)
+                        daemon.clearUsagePauseNotice?.();
                     return;
                 }
                 if (verdict === "unknown") {
@@ -1389,7 +1411,7 @@ export class InstanceLifecycle {
                 else {
                     // The marker must say auth (2b never auto-wakes a login failure); any
                     // other pause-action error is an error pause, not an operator one.
-                    const reason = data.type === "auth_error" ? "auth" : "error";
+                    const reason = data.type === "auth_error" ? "auth" : data.type === "quota" ? "quota" : "error";
                     void this.pause(name, reason)
                         .catch(err => this.ctx.logger.warn({ err, name }, "auth-error pause failed"))
                         .finally(() => { if (!this.isPaused(name))
@@ -1492,6 +1514,8 @@ export class InstanceLifecycle {
     }
     /** Invalidate every start/wake already running for `name` (they will not publish). */
     invalidate(name, nativeOwner) {
+        this.ctx.invalidateNativeMcp?.(name);
+        this.ctx.agentCredentials?.invalidate(name);
         const native = this.nativeExitOwners.get(name);
         if (native && native.token !== nativeOwner)
             this.cancelNativeRecovery(name);
@@ -1629,6 +1653,18 @@ export class InstanceLifecycle {
                 daemon.setNativePaneLifecycle(native);
                 native.bindDaemon?.(daemon);
             }
+            // Register before start: a pre-launch refusal has no published daemon or later incident handlers.
+            daemon.on("kiro_compatibility_hold", (message) => {
+                const owner = this.daemons.get(name);
+                if (owner ? owner !== daemon : this.epochOf(name) !== epoch)
+                    return;
+                this.ctx.setKiroCompatibilityHold?.(name, message);
+            });
+            daemon.setAgentCredentialIssuer?.(token => {
+                if (this.epochOf(name) !== epoch)
+                    throw new SupersededStartError(name);
+                this.ctx.agentCredentials?.issue(name, token);
+            });
             daemon.setDeliveryOutboxPort(this.ctx.deliveryOutbox ?? undefined);
             daemon.setWorkLeaseCheck(() => this.hasWorkLease(name));
             if (seedNow)
@@ -1725,6 +1761,7 @@ export class InstanceLifecycle {
                 this.ctx.setTopicIcon(name, "green");
                 this.ctx.touchActivity(name);
             });
+            this.ctx.setKiroCompatibilityHold?.(name, null);
             this.attachIncidentHandlers(name, daemon);
             // #2897: a new daemon starts with no dialog held; a notice the last one left (a crash, a respawn) is out of date.
             this.ctx.resolveParkedNotice?.(name);
@@ -2169,6 +2206,17 @@ export class InstanceLifecycle {
         clearPausedMarker(this.ctx.getInstanceDir(name));
         this.ctx.logger.info({ name }, "Instance removed");
     }
+    /**
+     * Whether a new instance made in `adapterId`'s world records it as channel_id: in a fleet with more than one
+     * connection, or when that world is not the first one (where a missing channel_id would route). A single-connection
+     * fleet's fleet.yaml stays as it was.
+     */
+    bindsAdapter(adapterId) {
+        const fleet = this.ctx.fleetConfig;
+        const channels = fleet?.channels ?? (fleet?.channel ? [fleet.channel] : []);
+        const first = channels[0] ? (channels[0].id ?? channels[0].type) : undefined;
+        return channels.length > 1 || adapterId !== first;
+    }
     /** Handle create_instance tool call from a daemon. */
     async handleCreate(args, respond, adapterId, execution) {
         const check = () => execution?.assert();
@@ -2455,6 +2503,9 @@ export class InstanceLifecycle {
                 ...getEffectiveInstanceDefaults(this.ctx.fleetConfig.defaults ?? {}),
                 working_directory: workDir,
                 ...(createdTopicId != null ? { topic_id: createdTopicId } : {}),
+                // The topic was made in the caller's world (a Discord General in a fleet that lists Telegram first, or the
+                // inverse): the instance is bound to that adapter, so routing and replies use it — not the fleet's first one.
+                ...(createdTopicId != null && adapterId && this.bindsAdapter(adapterId) ? { channel_id: adapterId } : {}),
                 ...(description ? { description } : {}),
                 ...(systemPrompt ? { systemPrompt } : {}),
                 ...(args.model ? { model: args.model } : {}),
@@ -2557,7 +2608,8 @@ export class InstanceLifecycle {
     /** Handle delete_instance tool call from a daemon. */
     async handleDelete(args, respond) {
         const instanceName = args.name;
-        const deleteTopic = args.delete_topic ?? false;
+        // The user's decision (beta.9): deleting an agent deletes its topic, unless `delete_topic: false` keeps it.
+        const deleteTopic = args.delete_topic ?? true;
         const instanceConfig = this.ctx.fleetConfig?.instances[instanceName];
         if (!instanceConfig) {
             respond(null, `Instance not found: ${instanceName}`);
@@ -2567,11 +2619,9 @@ export class InstanceLifecycle {
             respond(null, "Cannot delete the General instance");
             return;
         }
-        if (deleteTopic && instanceConfig.topic_id) {
-            await this.ctx.deleteForumTopic(instanceConfig.topic_id);
-        }
-        await this.ctx.removeInstance(instanceName, authorizeExplicitInstanceRemoval("delete-instance-tool"));
-        respond({ success: true, name: instanceName, topic_deleted: deleteTopic });
+        // topic_deleted is the platform's answer, never the request; when the topic stays, topic_reason says why.
+        const topic = await this.ctx.removeInstanceAndTopic(instanceName, authorizeExplicitInstanceRemoval("delete-instance-tool"), { deleteTopic });
+        respond({ success: true, name: instanceName, topic_deleted: topic.deleted, ...(topic.deleted ? {} : { topic_reason: topic.reason }) });
     }
     has(name) {
         return this.daemons.has(name);