@sulala/agent-os 0.1.0 → 0.1.1

package/dist/index.js

@@ -80,6 +80,7 @@ async function readConfig() {
       const signal_default_agent_id = o.signal_default_agent_id;
       const viber_auth_token = o.viber_auth_token;
       const viber_default_agent_id = o.viber_default_agent_id;
+      const onboarding_completed = o.onboarding_completed;
       return {
         provider: provider === "openrouter" || provider === "openai" ? provider : undefined,
         api_key: typeof api_key === "string" ? api_key : undefined,
@@ -98,7 +99,8 @@ async function readConfig() {
         signal_bridge_url: typeof signal_bridge_url === "string" ? signal_bridge_url.trim() || undefined : undefined,
         signal_default_agent_id: typeof signal_default_agent_id === "string" ? signal_default_agent_id : undefined,
         viber_auth_token: typeof viber_auth_token === "string" ? viber_auth_token : undefined,
-        viber_default_agent_id: typeof viber_default_agent_id === "string" ? viber_default_agent_id : undefined
+        viber_default_agent_id: typeof viber_default_agent_id === "string" ? viber_default_agent_id : undefined,
+        onboarding_completed: onboarding_completed === true ? true : undefined
       };
     }
   } catch (err) {
@@ -128,7 +130,8 @@ async function writeConfig(updates) {
     signal_bridge_url: updates.signal_bridge_url !== undefined ? updates.signal_bridge_url : current.signal_bridge_url,
     signal_default_agent_id: updates.signal_default_agent_id !== undefined ? updates.signal_default_agent_id : current.signal_default_agent_id,
     viber_auth_token: updates.viber_auth_token !== undefined ? updates.viber_auth_token : current.viber_auth_token,
-    viber_default_agent_id: updates.viber_default_agent_id !== undefined ? updates.viber_default_agent_id : current.viber_default_agent_id
+    viber_default_agent_id: updates.viber_default_agent_id !== undefined ? updates.viber_default_agent_id : current.viber_default_agent_id,
+    onboarding_completed: updates.onboarding_completed !== undefined ? updates.onboarding_completed : current.onboarding_completed
   };
   const home = getAgentOsHome();
   const path = getConfigPath();
@@ -151,7 +154,8 @@ async function writeConfig(updates) {
     signal_bridge_url: merged.signal_bridge_url ?? null,
     signal_default_agent_id: merged.signal_default_agent_id ?? null,
     viber_auth_token: merged.viber_auth_token ?? null,
-    viber_default_agent_id: merged.viber_default_agent_id ?? null
+    viber_default_agent_id: merged.viber_default_agent_id ?? null,
+    onboarding_completed: merged.onboarding_completed ?? null
   }, null, 2), "utf-8");
 }
 function getConfigsDir() {
@@ -11049,6 +11053,14 @@ function jsonResponse(data, status = 200) {
     headers: CORS_HEADERS
   });
 }
+async function parseJsonBody(req) {
+  try {
+    const body = await req.json();
+    return { ok: true, body };
+  } catch {
+    return { ok: false, response: jsonResponse({ error: "Invalid JSON body" }, 400) };
+  }
+}
 function getConversationHistoryForRun(memoryStore, conversationId, limit = 40) {
   const rows = memoryStore.getHistoryForConversation(conversationId, limit);
   return rows.map((row) => {
@@ -11132,12 +11144,10 @@ async function handleMemoryWrite(req, store) {
   if (req.method !== "POST") {
     return jsonResponse({ error: "Method not allowed" }, 405);
   }
-  let body;
-  try {
-    body = await req.json();
-  } catch {
-    return jsonResponse({ error: "Invalid JSON body" }, 400);
-  }
+  const parsed = await parseJsonBody(req);
+  if (!parsed.ok)
+    return parsed.response;
+  const body = parsed.body;
   const agent_id = typeof body.agent_id === "string" ? body.agent_id.trim() : "";
   const text = typeof body.text === "string" ? body.text.trim() : "";
   const user_id = typeof body.user_id === "string" ? body.user_id.trim() : null;
@@ -11598,8 +11608,8 @@ async function deleteAgent(id) {
 }
 
 // src/core/runtime.ts
-import { readFile as readFile4 } from "fs/promises";
-import { join as join6 } from "path";
+import { readFile as readFile6 } from "fs/promises";
+import { join as join8 } from "path";
 
 // src/core/llm.ts
 init_config();
@@ -12091,11 +12101,14 @@ registerTool({
 
 // src/skills/loader.ts
 init_config();
-var import_yaml = __toESM(require_dist(), 1);
-import { readFile as readFile3, readdir as readdir2, cp, mkdir as mkdir3, writeFile as writeFile3, rm } from "fs/promises";
-import { join as join4, resolve as resolve3, basename as basename2 } from "path";
+import { readFile as readFile5, readdir as readdir3, cp, mkdir as mkdir3, writeFile as writeFile3, rm } from "fs/promises";
+import { join as join6, resolve as resolve3, basename as basename2 } from "path";
 import { tmpdir } from "os";
-init_config();
+
+// src/skills/skill-doc.ts
+var import_yaml = __toESM(require_dist(), 1);
+import { readFile as readFile3 } from "fs/promises";
+import { join as join4 } from "path";
 function getRequiredEnvFromDoc(doc) {
   const creds = Array.isArray(doc.credentials) ? doc.credentials : typeof doc.credentials === "string" ? [doc.credentials] : [];
   const baseEnv = doc.base_url_env?.trim() ? [doc.base_url_env.trim()] : [];
@@ -12116,18 +12129,6 @@ async function getRequiredEnvForSkill(skillDir, subEntries, doc) {
   }
   return env;
 }
-async function loadSkillYamlFromFile(path) {
-  try {
-    const raw = await readFile3(path, "utf-8");
-    const parsed = import_yaml.default.parse(raw);
-    return parsed;
-  } catch (err) {
-    if (err.code === "ENOENT")
-      return null;
-    console.error(`[skills] Failed to read YAML from ${path}:`, err);
-    return null;
-  }
-}
 function extractYamlBlockFromMarkdown(md) {
   const lines = md.split(`
 `);
@@ -12141,15 +12142,12 @@ function extractYamlBlockFromMarkdown(md) {
       }
       continue;
     }
-    if (trimmed.startsWith("```")) {
+    if (trimmed.startsWith("```"))
       break;
-    }
     buf.push(line);
   }
-  if (buf.length === 0)
-    return null;
-  return buf.join(`
-`);
+  return buf.length > 0 ? buf.join(`
+`) : null;
 }
 function extractFrontmatterFromMarkdown(md) {
   const lines = md.split(`
@@ -12162,16 +12160,51 @@ function extractFrontmatterFromMarkdown(md) {
       break;
     buf.push(lines[i]);
   }
-  if (buf.length === 0)
+  return buf.length > 0 ? buf.join(`
+`) : null;
+}
+function extractMarkdownBody(md) {
+  const trimmed = md.replace(/\r\n/g, `
+`).trim();
+  if (!trimmed.startsWith("---"))
+    return trimmed;
+  const afterFirst = trimmed.slice(3);
+  const closeIdx = afterFirst.indexOf(`
+---`);
+  if (closeIdx === -1)
+    return trimmed;
+  return afterFirst.slice(closeIdx + 4).trim();
+}
+async function loadSkillDocument(dir, entries) {
+  if (!entries.includes("SKILL.md"))
     return null;
-  return buf.join(`
-`);
+  try {
+    const raw = await readFile3(join4(dir, "SKILL.md"), "utf-8");
+    const yamlBlock = extractFrontmatterFromMarkdown(raw) || extractYamlBlockFromMarkdown(raw);
+    if (!yamlBlock) {
+      console.warn(`[skills] No YAML frontmatter or block in SKILL.md for ${dir}, skipping.`);
+      return null;
+    }
+    return import_yaml.default.parse(yamlBlock);
+  } catch (err) {
+    console.error(`[skills] Failed to read SKILL.md in ${dir}:`, err);
+    return null;
+  }
+}
+
+// src/skills/skill-extract.ts
+var import_yaml2 = __toESM(require_dist(), 1);
+import { readFile as readFile4, readdir as readdir2 } from "fs/promises";
+import { join as join5 } from "path";
+var JUNK_DIR_NAMES = new Set(["__macosx"]);
+function isJunkDir(name) {
+  return JUNK_DIR_NAMES.has(name.toLowerCase()) || name.startsWith(".");
 }
 async function deriveSkillIdFromFlatRoot(extractDir, archiveFilename) {
   const entries = await readdir2(extractDir);
   if (entries.includes("_meta.json")) {
     try {
-      const raw = await readFile3(join4(extractDir, "_meta.json"), "utf-8");
+      const raw = await readFile4(join5(extractDir, "_meta.json"), "utf-8");
       const meta = JSON.parse(raw);
       if (typeof meta.slug === "string" && meta.slug.length > 0) {
         return meta.slug.replace(/[^a-z0-9_-]/gi, "_").toLowerCase() || "skill";
@@ -12180,10 +12213,10 @@ async function deriveSkillIdFromFlatRoot(extractDir, archiveFilename) {
   }
   if (entries.includes("SKILL.md")) {
     try {
-      const raw = await readFile3(join4(extractDir, "SKILL.md"), "utf-8");
+      const raw = await readFile4(join5(extractDir, "SKILL.md"), "utf-8");
       const yamlBlock = extractFrontmatterFromMarkdown(raw) || extractYamlBlockFromMarkdown(raw);
       if (yamlBlock) {
-        const parsed = import_yaml.default.parse(yamlBlock);
+        const parsed = import_yaml2.default.parse(yamlBlock);
         if (typeof parsed.name === "string" && parsed.name.length > 0) {
           return parsed.name.replace(/[^a-z0-9_-]/gi, "_").toLowerCase() || "skill";
         }
@@ -12193,10 +12226,6 @@ async function deriveSkillIdFromFlatRoot(extractDir, archiveFilename) {
   const stem = archiveFilename.replace(/\.tar\.gz$/i, "").replace(/\.tgz$/i, "").replace(/\.zip$/i, "").replace(/\.tar$/i, "");
   return stem.replace(/[^a-z0-9_-]/gi, "_").toLowerCase() || "skill";
 }
-var JUNK_DIR_NAMES = new Set(["__macosx"]);
-function isJunkDir(name) {
-  return JUNK_DIR_NAMES.has(name.toLowerCase()) || name.startsWith(".");
-}
 async function chooseSkillRootFromExtract(tmpDir, archiveFilename) {
   const entries = await readdir2(tmpDir, { withFileTypes: true });
   const rootNames = new Set(entries.map((e) => e.name));
@@ -12204,7 +12233,7 @@ async function chooseSkillRootFromExtract(tmpDir, archiveFilename) {
   const dirs = entries.filter((e) => e.isDirectory() && !isJunkDir(e.name));
   const dirsWithSkillDoc = [];
   for (const d of dirs) {
-    const sub = await readdir2(join4(tmpDir, d.name)).catch(() => []);
+    const sub = await readdir2(join5(tmpDir, d.name)).catch(() => []);
     const hasSkillMd = sub.includes("SKILL.md");
     if (hasSkillMd || sub.includes("README.md"))
       dirsWithSkillDoc.push({ name: d.name, hasSkillMd });
@@ -12215,12 +12244,11 @@ async function chooseSkillRootFromExtract(tmpDir, archiveFilename) {
   }
   if (dirsWithSkillDoc.length >= 1) {
     const preferred = dirsWithSkillDoc.find((d) => d.hasSkillMd) ?? dirsWithSkillDoc[0];
-    const dirName = preferred.name;
-    return { id: dirName, sourcePath: join4(tmpDir, dirName) };
+    return { id: preferred.name, sourcePath: join5(tmpDir, preferred.name) };
   }
   if (dirs.length === 1) {
     const dirName = dirs[0].name;
-    return { id: dirName, sourcePath: join4(tmpDir, dirName) };
+    return { id: dirName, sourcePath: join5(tmpDir, dirName) };
   }
   if (hasSkillDocAtRoot) {
     const id2 = await deriveSkillIdFromFlatRoot(tmpDir, archiveFilename);
@@ -12228,33 +12256,32 @@ async function chooseSkillRootFromExtract(tmpDir, archiveFilename) {
   }
   const firstDir = dirs[0];
   if (firstDir) {
-    return { id: firstDir.name, sourcePath: join4(tmpDir, firstDir.name) };
+    return { id: firstDir.name, sourcePath: join5(tmpDir, firstDir.name) };
   }
   const id = await deriveSkillIdFromFlatRoot(tmpDir, archiveFilename);
   return { id, sourcePath: tmpDir };
 }
-async function loadSkillDocument(dir, entries) {
-  const mdName = "SKILL.md";
-  const yamlName = "skill.yaml";
-  if (entries.includes(mdName)) {
+function slugToSkillId(slug) {
+  return slug.trim().toLowerCase().replace(/[^a-z0-9_-]/g, "_").replace(/_+/g, "_").replace(/^_|_$/g, "") || "skill";
+}
+function deriveSkillIdFromSkillMdContent(md, filename) {
+  const yamlBlock = extractFrontmatterFromMarkdown(md) || extractYamlBlockFromMarkdown(md);
+  if (yamlBlock) {
     try {
-      const raw = await readFile3(join4(dir, mdName), "utf-8");
-      const yamlBlock = extractYamlBlockFromMarkdown(raw) || extractFrontmatterFromMarkdown(raw);
-      if (!yamlBlock) {
-        console.warn(`[skills] No YAML block or frontmatter in ${mdName} for ${dir}, skipping.`);
-        return null;
+      const parsed = import_yaml2.default.parse(yamlBlock);
+      if (typeof parsed.name === "string" && parsed.name.trim()) {
+        return parsed.name.trim().replace(/[^a-z0-9_-]/gi, "_").toLowerCase().replace(/^_+|_+$/g, "") || "skill";
       }
-      const parsed = import_yaml.default.parse(yamlBlock);
-      return parsed;
-    } catch (err) {
-      console.error(`[skills] Failed to read SKILL.md in ${dir}:`, err);
-    }
+    } catch {}
   }
-  if (entries.includes(yamlName)) {
-    return loadSkillYamlFromFile(join4(dir, yamlName));
+  const stem = filename.replace(/\.(md|markdown)$/i, "").trim();
+  if (stem && stem !== "SKILL") {
+    return stem.replace(/[^a-z0-9_-]/gi, "_").toLowerCase() || "uploaded_skill";
   }
-  return null;
+  return "uploaded_skill";
 }
+
+// src/skills/skill-tools.ts
 function getSkillBaseUrl() {
   const env = process.env.AGENT_OS_SKILL_BASE_URL?.trim();
   if (env)
@@ -12263,10 +12290,23 @@ function getSkillBaseUrl() {
   const port = process.env.PORT || "3010";
   return `http://${host}:${port}`;
 }
-function httpToolFromDescriptor(skill, dir, desc) {
+async function getAuthToken(skillId, credentials) {
+  if (!credentials?.length)
+    return null;
+  const { readSkillConfig: readSkillConfig2 } = await Promise.resolve().then(() => (init_config(), exports_config));
+  const stored = await readSkillConfig2(skillId);
+  for (const envVar of credentials) {
+    const v = stored[envVar]?.trim() ?? process.env[envVar]?.trim();
+    if (v)
+      return v;
+  }
+  return null;
+}
+function httpToolFromDescriptor(skill, _dir, desc) {
   const id = desc.id;
   const method = (desc.method || "GET").toUpperCase();
   const path = desc.path || "/";
+  const base = getSkillBaseUrl();
   return {
     id,
     name: `${skill}:${id}`,
@@ -12279,7 +12319,6 @@ function httpToolFromDescriptor(skill, dir, desc) {
       }
     },
     async execute(input) {
-      const base = getSkillBaseUrl();
       const url = `${base}${path}`;
       const query = input.query ?? {};
       let body = input.body;
@@ -12297,9 +12336,7 @@ function httpToolFromDescriptor(skill, dir, desc) {
       }
       const res = await fetch(urlObj.toString(), {
         method,
-        headers: {
-          "Content-Type": "application/json"
-        },
+        headers: { "Content-Type": "application/json" },
         body: method === "GET" || method === "HEAD" ? undefined : JSON.stringify(body ?? {})
       });
       const text = await res.text();
@@ -12309,26 +12346,10 @@ function httpToolFromDescriptor(skill, dir, desc) {
       } catch {
         json = text;
       }
-      return {
-        status: res.status,
-        ok: res.ok,
-        data: json
-      };
+      return { status: res.status, ok: res.ok, data: json };
     }
   };
 }
-async function getAuthToken(skillId, credentials) {
-  if (!credentials?.length)
-    return null;
-  const { readSkillConfig: readSkillConfig2 } = await Promise.resolve().then(() => (init_config(), exports_config));
-  const stored = await readSkillConfig2(skillId);
-  for (const envVar of credentials) {
-    const v = stored[envVar]?.trim() ?? process.env[envVar]?.trim();
-    if (v)
-      return v;
-  }
-  return null;
-}
 function createDocOnlyRequestTool(skillId, apiBase, credentials, authScheme, authLocation, authParam, skillDescription) {
   const base = apiBase.replace(/\/$/, "");
   const desc = skillDescription?.trim() ? `${skillDescription.trim()} Use this tool with method, path, and optional query and body. See skill doc for paths and examples.` : `Call the API for the "${skillId}" skill. Provide method (GET, POST, etc.), path, and optional query (object) and body (object). Use the skill documentation in your context to know which paths and params to use.`;
@@ -12453,11 +12474,16 @@ function createTokenRequestTool(skillId, toolId, baseUrl, description) {
     }
   };
 }
+
+// src/skills/loader.ts
+init_config();
+var SYSTEM_SKILL_IDS = new Set(["memory"]);
+var DEFAULT_SYSTEM_SKILL_IDS = ["memory", "date", "fetch", "jq", "file-search"];
 async function loadSkill(name) {
-  const dir = join4(getSkillsDir(), name);
+  const dir = join6(getSkillsDir(), name);
   let entries;
   try {
-    entries = await readdir2(dir);
+    entries = await readdir3(dir);
   } catch (err) {
     if (err.code === "ENOENT")
       return;
@@ -12471,8 +12497,7 @@ async function loadSkill(name) {
     for (const t of skill.tools) {
       if (!t.id)
         continue;
-      const tool = httpToolFromDescriptor(name, dir, t);
-      registerTool(tool);
+      registerTool(httpToolFromDescriptor(name, dir, t));
     }
     return;
   }
@@ -12491,7 +12516,7 @@ async function loadSkill(name) {
   }
   if (!apiBase && entries.includes("skill.json")) {
     try {
-      const raw = await readFile3(join4(dir, "skill.json"), "utf-8");
+      const raw = await readFile5(join6(dir, "skill.json"), "utf-8");
       const meta = JSON.parse(raw);
       if (meta.base_url_env && process.env[meta.base_url_env]?.trim()) {
         apiBase = process.env[meta.base_url_env].trim().replace(/\/$/, "");
@@ -12504,7 +12529,7 @@ async function loadSkill(name) {
   }
   if (!apiBase && entries.includes("SKILL.md")) {
     try {
-      const raw = await readFile3(join4(dir, "SKILL.md"), "utf-8");
+      const raw = await readFile5(join6(dir, "SKILL.md"), "utf-8");
       const match = raw.match(/Base\s+URL:\s*[`"]?(\s*https?:\/\/[^\s`"]+)/i) || raw.match(/api_base:\s*["']?([^"'\s]+)/i);
       if (match?.[1])
         apiBase = match[1].trim().replace(/[`"]/g, "");
@@ -12512,8 +12537,7 @@ async function loadSkill(name) {
   }
   if (apiBase) {
     const authScheme = skill.auth_scheme === "Apikey" ? "Apikey" : "Bearer";
-    const tool = createDocOnlyRequestTool(name, apiBase, credentials, authScheme, skill.auth_location, skill.auth_param, skill.description);
-    registerTool(tool);
+    registerTool(createDocOnlyRequestTool(name, apiBase, credentials, authScheme, skill.auth_location, skill.auth_param, skill.description));
   } else if (baseUrlEnv) {
     console.warn(`[skills] ${name} skill loaded but request tool not registered: set ${baseUrlEnv} so the agent can call the API.`);
   }
@@ -12532,28 +12556,16 @@ async function loadSkillsForAgent(agent) {
   }
   await Promise.all(skills.map((name) => loadSkill(name)));
 }
-function extractMarkdownBody(md) {
-  const trimmed = md.replace(/\r\n/g, `
-`).trim();
-  if (!trimmed.startsWith("---"))
-    return trimmed;
-  const afterFirst = trimmed.slice(3);
-  const closeIdx = afterFirst.indexOf(`
----`);
-  if (closeIdx === -1)
-    return trimmed;
-  return afterFirst.slice(closeIdx + 4).trim();
-}
 async function getSkillDocContext(skillNames) {
   const dir = getSkillsDir();
   const parts = [];
   for (const name of skillNames) {
     if (!name?.trim())
       continue;
-    const skillDir = join4(dir, name);
-    const mdPath = join4(skillDir, "SKILL.md");
+    const skillDir = join6(dir, name);
+    const mdPath = join6(skillDir, "SKILL.md");
     try {
-      const raw = await readFile3(mdPath, "utf-8");
+      const raw = await readFile5(mdPath, "utf-8");
       const body = extractMarkdownBody(raw);
       if (body)
         parts.push(`## Skill: ${name}
@@ -12567,13 +12579,10 @@ ${body}`);
 
 `);
 }
-var SYSTEM_SKILL_IDS = new Set(["memory"]);
-var DEFAULT_SYSTEM_SKILL_IDS = ["memory", "date", "fetch", "jq", "file-search"];
 async function getSkillConfigSchema(skillId) {
-  const dir = join4(getSkillsDir(), skillId);
-  const path = join4(dir, "config.schema.json");
+  const path = join6(getSkillsDir(), skillId, "config.schema.json");
   try {
-    const raw = await readFile3(path, "utf-8");
+    const raw = await readFile5(path, "utf-8");
     const parsed = JSON.parse(raw);
     if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
       return parsed;
@@ -12586,10 +12595,9 @@ async function getSkillConfigSchema(skillId) {
   return null;
 }
 async function getSkillSetupMarkdown(skillId) {
-  const dir = join4(getSkillsDir(), skillId);
-  const mdPath = join4(dir, "SKILL.md");
+  const mdPath = join6(getSkillsDir(), skillId, "SKILL.md");
   try {
-    const raw = await readFile3(mdPath, "utf-8");
+    const raw = await readFile5(mdPath, "utf-8");
     const lines = raw.split(`
 `);
     let inSetup = false;
@@ -12620,22 +12628,19 @@ async function getSkillSetupMarkdown(skillId) {
 }
 async function getStoreRegistry() {
   const registryUrl = process.env.SKILLS_REGISTRY_URL?.trim() ?? null;
-  if (!registryUrl) {
+  if (!registryUrl)
     return { skills: [], storeBase: null, registryUrl: null };
-  }
   let storeBase = null;
   try {
     storeBase = new URL(registryUrl).origin;
   } catch {}
   try {
     const res = await fetch(registryUrl, { redirect: "follow" });
-    if (!res.ok) {
+    if (!res.ok)
       return { skills: [], storeBase, registryUrl };
-    }
     const contentType = (res.headers.get("content-type") ?? "").toLowerCase();
-    if (!contentType.includes("application/json")) {
+    if (!contentType.includes("application/json"))
       return { skills: [], storeBase, registryUrl };
-    }
     const data = await res.json();
     const raw = Array.isArray(data) ? data : Array.isArray(data?.skills) ? data.skills : [];
     const skills = raw.filter((e) => e != null && typeof e === "object").filter((e) => typeof e.slug === "string").map((e) => {
@@ -12662,13 +12667,10 @@ async function getStoreRegistry() {
 }
 async function getSkillMarketplace() {
   const home = getAgentOsHome();
-  const paths = [
-    join4(home, "skill-marketplace.json"),
-    join4(process.cwd(), "data", "skill-marketplace.json")
-  ];
+  const paths = [join6(home, "skill-marketplace.json"), join6(process.cwd(), "data", "skill-marketplace.json")];
   for (const path of paths) {
     try {
-      const raw = await readFile3(path, "utf-8");
+      const raw = await readFile5(path, "utf-8");
       const parsed = JSON.parse(raw);
       if (Array.isArray(parsed)) {
         return parsed.filter((e) => e && typeof e === "object" && typeof e.id === "string" && typeof e.name === "string");
@@ -12688,15 +12690,13 @@ async function uninstallSkill(skillId) {
   if (SYSTEM_SKILL_IDS.has(skillId)) {
     throw new Error("Cannot uninstall system skill");
   }
-  const dir = getSkillsDir();
-  const skillDir = join4(dir, skillId);
-  await rm(skillDir, { recursive: true, force: true });
+  await rm(join6(getSkillsDir(), skillId), { recursive: true, force: true });
 }
 async function listSkills() {
   const dir = getSkillsDir();
   let entries;
   try {
-    entries = await readdir2(dir, { withFileTypes: true });
+    entries = await readdir3(dir, { withFileTypes: true });
   } catch (err) {
     if (err.code === "ENOENT")
       return [];
@@ -12709,10 +12709,10 @@ async function listSkills() {
     const name = e.name;
     if (!name || name.startsWith("."))
       continue;
-    const skillDir = join4(dir, name);
+    const skillDir = join6(dir, name);
     let subEntries;
     try {
-      subEntries = await readdir2(skillDir);
+      subEntries = await readdir3(skillDir);
     } catch {
       continue;
     }
@@ -12741,16 +12741,13 @@ function getAllowedPathBase() {
 async function installSkillFromPath(sourcePath) {
   const base = getAllowedPathBase();
   const resolved = resolve3(sourcePath);
-  if (!resolved.startsWith(base)) {
+  if (!resolved.startsWith(base))
     throw new Error(`Path must be under ${base}`);
-  }
   const id = basename2(resolved);
-  if (!id || id.startsWith(".")) {
+  if (!id || id.startsWith("."))
     throw new Error("Invalid skill folder name");
-  }
-  const destDir = join4(getSkillsDir(), id);
   await mkdir3(getSkillsDir(), { recursive: true });
-  await cp(resolved, destDir, { recursive: true });
+  await cp(resolved, join6(getSkillsDir(), id), { recursive: true });
   return { id };
 }
 async function installSystemSkills() {
@@ -12764,16 +12761,15 @@ async function installSystemSkills() {
   } catch {
     seedExists = false;
   }
-  if (!seedExists) {
+  if (!seedExists)
     throw new Error(`Seed skills directory not found: ${seedDir}`);
-  }
   let installed = 0;
   for (const id of DEFAULT_SYSTEM_SKILL_IDS) {
-    const sourcePath = join4(seedDir, id);
-    const destPath = join4(skillsDir, id);
+    const sourcePath = join6(seedDir, id);
+    const destPath = join6(skillsDir, id);
     let hasSkillMd;
     try {
-      await access(join4(sourcePath, "SKILL.md"));
+      await access(join6(sourcePath, "SKILL.md"));
       hasSkillMd = true;
     } catch {
       hasSkillMd = false;
@@ -12782,8 +12778,7 @@ async function installSystemSkills() {
       continue;
     let alreadyInstalled;
     try {
-      const st = await stat(destPath);
-      alreadyInstalled = st.isDirectory();
+      alreadyInstalled = (await stat(destPath)).isDirectory();
     } catch {
       alreadyInstalled = false;
     }
@@ -12798,35 +12793,25 @@ async function installSystemSkills() {
   }
   return { installed };
 }
-function slugToSkillId(slug) {
-  return slug.trim().toLowerCase().replace(/[^a-z0-9_-]/g, "_").replace(/_+/g, "_").replace(/^_|_$/g, "") || "skill";
-}
 async function installSkillFromUrl(url, explicitId) {
   const urlLower = url.toLowerCase();
   const isStoreSkillContentUrl = urlLower.includes("/api/sulalahub/skills/") && !urlLower.includes("/download") && !urlLower.endsWith(".zip");
   const headers = isStoreSkillContentUrl ? { Accept: "application/zip" } : {};
   const res = await fetch(url, { redirect: "follow", headers });
-  if (!res.ok) {
+  if (!res.ok)
     throw new Error(`Fetch failed: ${res.status}`);
-  }
   const buf = await res.arrayBuffer();
   const contentType = (res.headers.get("content-type") ?? "").toLowerCase();
-  const isZipByType = contentType.includes("application/zip");
-  const isZipByUrl = urlLower.endsWith(".zip") || urlLower.includes("/download");
-  const isZip = isZipByType || isZipByUrl;
+  const isZip = contentType.includes("application/zip") || urlLower.endsWith(".zip") || urlLower.includes("/download");
   const skillsDir = getSkillsDir();
   await mkdir3(skillsDir, { recursive: true });
-  const tmpDir = join4(tmpdir(), `agent-os-skill-${Date.now()}`);
+  const tmpDir = join6(tmpdir(), `agent-os-skill-${Date.now()}`);
   await mkdir3(tmpDir, { recursive: true });
   try {
     if (isZip) {
-      const zipPath = join4(tmpDir, "archive.zip");
+      const zipPath = join6(tmpDir, "archive.zip");
       await writeFile3(zipPath, new Uint8Array(buf));
-      const proc2 = Bun.spawn({
-        cmd: ["unzip", "-q", "-o", zipPath, "-d", tmpDir],
-        stdout: "ignore",
-        stderr: "pipe"
-      });
+      const proc2 = Bun.spawn({ cmd: ["unzip", "-q", "-o", zipPath, "-d", tmpDir], stdout: "ignore", stderr: "pipe" });
       const exit2 = await proc2.exited;
       if (exit2 !== 0) {
         const err = await new Response(proc2.stderr).text();
@@ -12834,17 +12819,12 @@ async function installSkillFromUrl(url, explicitId) {
       }
       const { id: id2, sourcePath: sourcePath2 } = await chooseSkillRootFromExtract(tmpDir, "archive.zip");
       const destId2 = explicitId != null && explicitId.trim() !== "" ? slugToSkillId(explicitId) : id2;
-      const destDir2 = join4(skillsDir, destId2);
-      await cp(sourcePath2, destDir2, { recursive: true });
+      await cp(sourcePath2, join6(skillsDir, destId2), { recursive: true });
       return { id: destId2 };
     }
-    const tarPath = join4(tmpDir, "archive.tar.gz");
+    const tarPath = join6(tmpDir, "archive.tar.gz");
     await writeFile3(tarPath, new Uint8Array(buf));
-    const proc = Bun.spawn({
-      cmd: ["tar", "-xzf", tarPath, "-C", tmpDir],
-      stdout: "ignore",
-      stderr: "pipe"
-    });
+    const proc = Bun.spawn({ cmd: ["tar", "-xzf", tarPath, "-C", tmpDir], stdout: "ignore", stderr: "pipe" });
     const exit = await proc.exited;
     if (exit !== 0) {
       const err = await new Response(proc.stderr).text();
@@ -12852,8 +12832,7 @@ async function installSkillFromUrl(url, explicitId) {
     }
     const { id, sourcePath } = await chooseSkillRootFromExtract(tmpDir, "archive.tar.gz");
     const destId = explicitId != null && explicitId.trim() !== "" ? slugToSkillId(explicitId) : id;
-    const destDir = join4(skillsDir, destId);
-    await cp(sourcePath, destDir, { recursive: true });
+    await cp(sourcePath, join6(skillsDir, destId), { recursive: true });
     return { id: destId };
   } finally {
     await rm(tmpDir, { recursive: true, force: true });
@@ -12862,25 +12841,20 @@ async function installSkillFromUrl(url, explicitId) {
 async function installSkillFromUpload(buffer, filename) {
   const skillsDir = getSkillsDir();
   await mkdir3(skillsDir, { recursive: true });
-  const tmpDir = join4(tmpdir(), `agent-os-skill-upload-${Date.now()}`);
+  const tmpDir = join6(tmpdir(), `agent-os-skill-upload-${Date.now()}`);
   await mkdir3(tmpDir, { recursive: true });
   const lower = filename.toLowerCase();
   const isZip = lower.endsWith(".zip");
   const isTarGz = lower.endsWith(".tar.gz") || lower.endsWith(".tgz");
   const isTar = lower.endsWith(".tar");
-  if (!isZip && !isTarGz && !isTar) {
+  if (!isZip && !isTarGz && !isTar)
     throw new Error("Upload must be a .tar.gz, .tar, or .zip archive");
-  }
   try {
     const ext = isZip ? "archive.zip" : isTar && !isTarGz ? "archive.tar" : "archive.tar.gz";
-    const archivePath = join4(tmpDir, ext);
+    const archivePath = join6(tmpDir, ext);
     await writeFile3(archivePath, new Uint8Array(buffer));
     if (isZip) {
-      const proc = Bun.spawn({
-        cmd: ["unzip", "-q", "-o", archivePath, "-d", tmpDir],
-        stdout: "ignore",
-        stderr: "pipe"
-      });
+      const proc = Bun.spawn({ cmd: ["unzip", "-q", "-o", archivePath, "-d", tmpDir], stdout: "ignore", stderr: "pipe" });
       const exit = await proc.exited;
       if (exit !== 0) {
         const err = await new Response(proc.stderr).text();
@@ -12899,29 +12873,12 @@ async function installSkillFromUpload(buffer, filename) {
       }
     }
     const { id, sourcePath } = await chooseSkillRootFromExtract(tmpDir, filename);
-    const destDir = join4(skillsDir, id);
-    await cp(sourcePath, destDir, { recursive: true });
+    await cp(sourcePath, join6(skillsDir, id), { recursive: true });
     return { id };
   } finally {
     await rm(tmpDir, { recursive: true, force: true });
   }
 }
-function deriveSkillIdFromSkillMdContent(md, filename) {
-  const yamlBlock = extractFrontmatterFromMarkdown(md) || extractYamlBlockFromMarkdown(md);
-  if (yamlBlock) {
-    try {
-      const parsed = import_yaml.default.parse(yamlBlock);
-      if (typeof parsed.name === "string" && parsed.name.trim()) {
-        return parsed.name.trim().replace(/[^a-z0-9_-]/gi, "_").toLowerCase().replace(/^_+|_+$/g, "") || "skill";
-      }
-    } catch {}
-  }
-  const stem = filename.replace(/\.(md|markdown)$/i, "").trim();
-  if (stem && stem !== "SKILL") {
-    return stem.replace(/[^a-z0-9_-]/gi, "_").toLowerCase() || "uploaded_skill";
-  }
-  return "uploaded_skill";
-}
 async function installSkillFromSkillMd(buffer, filename, explicitId) {
   const skillsDir = getSkillsDir();
   await mkdir3(skillsDir, { recursive: true });
@@ -12929,15 +12886,15 @@ async function installSkillFromSkillMd(buffer, filename, explicitId) {
   const id = explicitId?.trim() ? explicitId.replace(/[^a-z0-9_-]/gi, "_").toLowerCase().replace(/^_+|_+$/g, "") || "uploaded_skill" : deriveSkillIdFromSkillMdContent(text, filename);
   if (!id)
     throw new Error("Invalid skill id");
-  const destDir = join4(skillsDir, id);
+  const destDir = join6(skillsDir, id);
   await mkdir3(destDir, { recursive: true });
-  await writeFile3(join4(destDir, "SKILL.md"), text, "utf-8");
+  await writeFile3(join6(destDir, "SKILL.md"), text, "utf-8");
   return { id };
 }
 
 // src/core/events.ts
 import { mkdir as mkdir4, appendFile } from "fs/promises";
-import { join as join5 } from "path";
+import { join as join7 } from "path";
 var subscribers = new Map;
 function registerEventHooks(hooks) {
   for (const [type, handler] of Object.entries(hooks)) {
@@ -12988,8 +12945,8 @@ function publishWithBuffer(type, data) {
 function getRecentEvents() {
   return [...recent];
 }
-var LOG_DIR = process.env.AGENT_OS_LOGS_DIR || join5(process.env.HOME || process.env.USERPROFILE || "~", ".agent-os", "logs");
-var LOG_FILE = join5(LOG_DIR, "agent-os.log");
+var LOG_DIR = process.env.AGENT_OS_LOGS_DIR || join7(process.env.HOME || process.env.USERPROFILE || "~", ".agent-os", "logs");
+var LOG_FILE = join7(LOG_DIR, "agent-os.log");
 var logInitPromise = null;
 async function ensureLogDir() {
   if (!logInitPromise) {
@@ -13454,7 +13411,7 @@ async function readWorkspacePromptContext(agentId) {
   const chunks = [];
   for (const name of WORKSPACE_PROMPT_FILES) {
     try {
-      const content = await readFile4(join6(workspaceDir, name), "utf-8");
+      const content = await readFile6(join8(workspaceDir, name), "utf-8");
       const trimmed = content.trim();
       if (trimmed)
         chunks.push(trimmed);
@@ -13521,12 +13478,10 @@ Use the following documentation to know how to call skill APIs. When you have a
 // src/http/conversations.ts
 async function handleConversations(req, url, store) {
   if (req.method === "POST") {
-    let body;
-    try {
-      body = await req.json();
-    } catch {
-      return jsonResponse({ error: "Invalid JSON body" }, 400);
-    }
+    const parsed = await parseJsonBody(req);
+    if (!parsed.ok)
+      return parsed.response;
+    const body = parsed.body;
     const graph_id = typeof body.graph_id === "string" ? body.graph_id.trim() : null;
     const agent_id = typeof body.agent_id === "string" ? body.agent_id.trim() : graph_id ?? "";
     const role = body.role;
@@ -13620,13 +13575,10 @@ async function handleConversations(req, url, store) {
 async function handleConversationUpdate(req, conversationId, store) {
   if (req.method !== "PUT")
     return jsonResponse({ error: "Method not allowed" }, 405);
-  let body;
-  try {
-    body = await req.json();
-  } catch {
-    return jsonResponse({ error: "Invalid JSON body" }, 400);
-  }
-  const title = typeof body.title === "string" ? body.title.trim().slice(0, 200) : "";
+  const parsed = await parseJsonBody(req);
+  if (!parsed.ok)
+    return parsed.response;
+  const title = typeof parsed.body.title === "string" ? parsed.body.title.trim().slice(0, 200) : "";
   try {
     store.updateConversationTitle(conversationId, title || null);
     return jsonResponse({ ok: true });
@@ -13638,13 +13590,10 @@ async function handleConversationUpdate(req, conversationId, store) {
 async function handleConversationSummarize(req, store) {
   if (req.method !== "POST")
     return jsonResponse({ error: "Method not allowed" }, 405);
-  let body;
-  try {
-    body = await req.json();
-  } catch {
-    return jsonResponse({ error: "Invalid JSON body" }, 400);
-  }
-  const conversation_id = body.conversation_id?.trim();
+  const parsed = await parseJsonBody(req);
+  if (!parsed.ok)
+    return parsed.response;
+  const conversation_id = parsed.body.conversation_id?.trim();
   if (!conversation_id) {
     return jsonResponse({ error: "conversation_id is required" }, 400);
   }
@@ -13662,9 +13611,9 @@ async function handleConversationSummarize(req, store) {
     let text = row.content;
     if (typeof text === "string" && text.startsWith("{")) {
       try {
-        const parsed = JSON.parse(text);
-        if (typeof parsed.text === "string")
-          text = parsed.text;
+        const parsed2 = JSON.parse(text);
+        if (typeof parsed2.text === "string")
+          text = parsed2.text;
       } catch {}
     }
     const prefix = row.role === "user" ? "User" : "Assistant";
@@ -13701,27 +13650,27 @@ ${transcript}`;
 }
 
 // src/http/handlers.ts
-import { readFile as readFile7, writeFile as writeFile5, stat } from "fs/promises";
-import { join as join9 } from "path";
+import { readFile as readFile9, writeFile as writeFile5, stat } from "fs/promises";
+import { join as join11 } from "path";
 
 // src/core/tasks.ts
 var import_node_cron = __toESM(require_node_cron(), 1);
 import { randomUUID } from "crypto";
 import os from "os";
-import { readFile as readFile6, appendFile as appendFile2, mkdir as mkdir6 } from "fs/promises";
-import { join as join8 } from "path";
+import { readFile as readFile8, appendFile as appendFile2, mkdir as mkdir6 } from "fs/promises";
+import { join as join10 } from "path";
 
 // src/core/graphs.ts
-import { readFile as readFile5, readdir as readdir3, writeFile as writeFile4, mkdir as mkdir5 } from "fs/promises";
-import { join as join7 } from "path";
-var DEFAULT_GRAPHS_DIR = join7(process.env.HOME || process.env.USERPROFILE || "~", ".agent-os", "graphs");
+import { readFile as readFile7, readdir as readdir4, writeFile as writeFile4, mkdir as mkdir5 } from "fs/promises";
+import { join as join9 } from "path";
+var DEFAULT_GRAPHS_DIR = join9(process.env.HOME || process.env.USERPROFILE || "~", ".agent-os", "graphs");
 function getGraphsDir() {
   return process.env.AGENT_OS_GRAPHS_DIR || DEFAULT_GRAPHS_DIR;
 }
 async function listGraphs() {
   const dir = getGraphsDir();
   try {
-    const entries = await readdir3(dir);
+    const entries = await readdir4(dir);
     const summaries = [];
     for (const name of entries) {
       if (name.endsWith(".json")) {
@@ -13740,11 +13689,11 @@ async function listGraphs() {
 async function loadGraph(id) {
   const dir = getGraphsDir();
   try {
-    const entries = await readdir3(dir);
+    const entries = await readdir4(dir);
     const file = entries.find((name) => name === `${id}.json` || name === `${id}.graph.json`);
     if (!file)
       return null;
-    const raw = await readFile5(join7(dir, file), "utf-8");
+    const raw = await readFile7(join9(dir, file), "utf-8");
     const parsed = JSON.parse(raw);
     validateGraph(parsed);
     return parsed;
@@ -13759,7 +13708,7 @@ async function saveGraph(graph) {
   validateGraph(graph);
   const dir = getGraphsDir();
   await mkdir5(dir, { recursive: true });
-  const path = join7(dir, `${graph.id}.json`);
+  const path = join9(dir, `${graph.id}.json`);
   await writeFile4(path, JSON.stringify(graph, null, 2), "utf-8");
 }
 function validateGraph(graph) {
@@ -13935,8 +13884,8 @@ async function runGraphStream(options, onEvent) {
 function nowIso() {
   return new Date().toISOString();
 }
-var TASKS_DIR = process.env.AGENT_OS_TASKS_DIR || join8(process.env.HOME || process.env.USERPROFILE || "~", ".agent-os", "tasks");
-var TASKS_FILE = join8(TASKS_DIR, "tasks.log");
+var TASKS_DIR = process.env.AGENT_OS_TASKS_DIR || join10(process.env.HOME || process.env.USERPROFILE || "~", ".agent-os", "tasks");
+var TASKS_FILE = join10(TASKS_DIR, "tasks.log");
 var tasksInitPromise = null;
 async function ensureTasksDir() {
   if (!tasksInitPromise) {
@@ -13996,7 +13945,7 @@ class MemoryTaskStore {
   }
   async loadFromDisk() {
     try {
-      const raw = await readFile6(TASKS_FILE, "utf-8");
+      const raw = await readFile8(TASKS_FILE, "utf-8");
       const lines = raw.split(`
 `);
       for (const line of lines) {
@@ -14179,13 +14128,10 @@ function startScheduler(store = memoryTaskStore) {
 // src/http/handlers.ts
 init_config();
 async function handleRun(req, memoryStore) {
-  let body;
-  try {
-    body = await req.json();
-  } catch {
-    return jsonResponse({ error: "Invalid JSON body" }, 400);
-  }
-  const { agent_id, task, conversation_id } = body;
+  const parsed = await parseJsonBody(req);
+  if (!parsed.ok)
+    return parsed.response;
+  const { agent_id, task, conversation_id } = parsed.body;
   if (!agent_id || typeof task !== "string") {
     return jsonResponse({ error: "Missing required fields: agent_id, task" }, 400);
   }
@@ -14215,13 +14161,10 @@ var SSE_HEADERS = {
   Connection: "keep-alive"
 };
 async function handleRunStream(req, memoryStore) {
-  let body;
-  try {
-    body = await req.json();
-  } catch {
-    return jsonResponse({ error: "Invalid JSON body" }, 400);
-  }
-  const { agent_id, task, conversation_id, attachment_paths } = body;
+  const parsed = await parseJsonBody(req);
+  if (!parsed.ok)
+    return parsed.response;
+  const { agent_id, task, conversation_id, attachment_paths } = parsed.body;
   if (!agent_id || typeof task !== "string") {
     return jsonResponse({ error: "Missing required fields: agent_id, task" }, 400);
   }
@@ -14308,13 +14251,10 @@ async function handleTasks(req, url) {
     return jsonResponse({ tasks });
   }
   if (req.method === "POST") {
-    let body;
-    try {
-      body = await req.json();
-    } catch {
-      return jsonResponse({ error: "Invalid JSON body" }, 400);
-    }
-    const { agent_id, graph_id, task } = body;
+    const parsed = await parseJsonBody(req);
+    if (!parsed.ok)
+      return parsed.response;
+    const { agent_id, graph_id, task } = parsed.body;
     if (typeof task !== "string") {
       return jsonResponse({ error: "Missing required field: task" }, 400);
     }
@@ -14338,12 +14278,10 @@ async function handleLogs(req) {
   return jsonResponse({ events });
 }
 async function handleSkillInstall(req) {
-  let body;
-  try {
-    body = await req.json();
-  } catch {
-    return jsonResponse({ error: "Invalid JSON body" }, 400);
-  }
+  const parsed = await parseJsonBody(req);
+  if (!parsed.ok)
+    return parsed.response;
+  const body = parsed.body;
   const hasPath = typeof body.path === "string" && body.path.trim().length > 0;
   const hasUrl = typeof body.url === "string" && body.url.trim().length > 0;
   if (hasPath && hasUrl) {
@@ -14435,16 +14373,16 @@ async function handleSettings(req) {
       signal_default_agent_id: config.signal_default_agent_id ?? null,
       signal_bridge_url: config.signal_bridge_url ?? null,
       viber_configured: Boolean(config.viber_auth_token?.trim()),
-      viber_default_agent_id: config.viber_default_agent_id ?? null
+      viber_default_agent_id: config.viber_default_agent_id ?? null,
+      onboarding_completed: config.onboarding_completed === true
     });
   }
   if (req.method === "PUT") {
     let body;
-    try {
-      body = await req.json();
-    } catch {
-      return jsonResponse({ error: "Invalid JSON body" }, 400);
-    }
+    const parsed = await parseJsonBody(req);
+    if (!parsed.ok)
+      return parsed.response;
+    body = parsed.body;
     const current = await readConfig();
     const provider = body.provider === "openrouter" || body.provider === "openai" ? body.provider : undefined;
     const rawKey = typeof body.api_key === "string" ? body.api_key.trim() : undefined;
@@ -14465,6 +14403,7 @@ async function handleSettings(req) {
     const signal_default_agent_id = body.signal_default_agent_id !== undefined ? typeof body.signal_default_agent_id === "string" ? body.signal_default_agent_id.trim() || undefined : undefined : current.signal_default_agent_id;
     const viber_auth_token = body.viber_auth_token !== undefined ? typeof body.viber_auth_token === "string" ? body.viber_auth_token.trim() || undefined : undefined : current.viber_auth_token;
     const viber_default_agent_id = body.viber_default_agent_id !== undefined ? typeof body.viber_default_agent_id === "string" ? body.viber_default_agent_id.trim() || undefined : undefined : current.viber_default_agent_id;
+    const onboarding_completed = body.onboarding_completed !== undefined ? body.onboarding_completed === true ? true : undefined : current.onboarding_completed;
     await writeConfig({
       provider: provider ?? current.provider,
       api_key: api_key || undefined,
@@ -14483,7 +14422,8 @@ async function handleSettings(req) {
       signal_bridge_url: signal_bridge_url || undefined,
       signal_default_agent_id: signal_default_agent_id || undefined,
       viber_auth_token: viber_auth_token || undefined,
-      viber_default_agent_id: viber_default_agent_id || undefined
+      viber_default_agent_id: viber_default_agent_id || undefined,
+      onboarding_completed: onboarding_completed ?? undefined
     });
     return jsonResponse({ ok: true });
   }
@@ -14493,13 +14433,10 @@ async function handleGraphRun(req) {
   if (req.method !== "POST") {
     return jsonResponse({ error: "Method not allowed" }, 405);
   }
-  let body;
-  try {
-    body = await req.json();
-  } catch {
-    return jsonResponse({ error: "Invalid JSON body" }, 400);
-  }
-  const { graph_id, input } = body;
+  const parsed = await parseJsonBody(req);
+  if (!parsed.ok)
+    return parsed.response;
+  const { graph_id, input } = parsed.body;
   if (!graph_id || typeof input !== "string") {
     return jsonResponse({ error: "Missing required fields: graph_id, input" }, 400);
   }
@@ -14516,13 +14453,10 @@ async function handleGraphRun(req) {
   }
 }
 async function handleGraphRunStream(req) {
-  let body;
-  try {
-    body = await req.json();
-  } catch {
-    return jsonResponse({ error: "Invalid JSON body" }, 400);
-  }
-  const { graph_id, input } = body;
+  const parsed = await parseJsonBody(req);
+  if (!parsed.ok)
+    return parsed.response;
+  const { graph_id, input } = parsed.body;
   if (!graph_id || typeof input !== "string") {
     return jsonResponse({ error: "Missing required fields: graph_id, input" }, 400);
   }
@@ -14577,13 +14511,10 @@ function extractJsonFromContent(content) {
   return trimmed;
 }
 async function handleAgentSuggest(req) {
-  let body;
-  try {
-    body = await req.json();
-  } catch {
-    return jsonResponse({ error: "Invalid JSON body" }, 400);
-  }
-  const prompt = typeof body.prompt === "string" ? body.prompt.trim() : "";
+  const parsed = await parseJsonBody(req);
+  if (!parsed.ok)
+    return parsed.response;
+  const prompt = typeof parsed.body.prompt === "string" ? parsed.body.prompt.trim() : "";
   if (!prompt)
     return jsonResponse({ error: "Missing prompt" }, 400);
   const skills = await listSkills();
@@ -14624,13 +14555,13 @@ Rules:
     if (!content)
       return jsonResponse({ error: "No suggestion from model" }, 502);
     const raw = extractJsonFromContent(content);
-    const parsed = JSON.parse(raw);
-    const name = typeof parsed.name === "string" ? parsed.name.trim() : "Agent";
-    const id = typeof parsed.id === "string" ? parsed.id.trim().toLowerCase().replace(/[^a-z0-9_.-]/g, "_").replace(/\s+/g, "_") || "agent" : "agent";
-    const description = typeof parsed.description === "string" ? parsed.description.trim() : "";
-    const skillsOut = Array.isArray(parsed.skills) ? parsed.skills.filter((s) => typeof s === "string" && skillIds.includes(s)) : [];
-    const schedule = typeof parsed.schedule === "string" ? parsed.schedule.trim() : "";
-    const schedule_input = typeof parsed.schedule_input === "string" ? parsed.schedule_input.trim() : "";
+    const parsed2 = JSON.parse(raw);
+    const name = typeof parsed2.name === "string" ? parsed2.name.trim() : "Agent";
+    const id = typeof parsed2.id === "string" ? parsed2.id.trim().toLowerCase().replace(/[^a-z0-9_.-]/g, "_").replace(/\s+/g, "_") || "agent" : "agent";
+    const description = typeof parsed2.description === "string" ? parsed2.description.trim() : "";
+    const skillsOut = Array.isArray(parsed2.skills) ? parsed2.skills.filter((s) => typeof s === "string" && skillIds.includes(s)) : [];
+    const schedule = typeof parsed2.schedule === "string" ? parsed2.schedule.trim() : "";
+    const schedule_input = typeof parsed2.schedule_input === "string" ? parsed2.schedule_input.trim() : "";
     const suggestion = {
       name,
       id,
@@ -14665,10 +14596,10 @@ async function handleAgentUpload(req, agentId) {
   const unique = `${Date.now()}-${Math.random().toString(36).slice(2, 10)}`;
   const filename = `${unique}_${basename3}`;
   await ensureWorkspace(agentId);
-  const uploadsDir = join9(getWorkspaceDir(agentId), "uploads");
+  const uploadsDir = join11(getWorkspaceDir(agentId), "uploads");
   const { mkdir: mkdir7 } = await import("fs/promises");
   await mkdir7(uploadsDir, { recursive: true });
-  const absolutePath = join9(uploadsDir, filename);
+  const absolutePath = join11(uploadsDir, filename);
   const buffer = Buffer.from(await file.arrayBuffer());
   await writeFile5(absolutePath, buffer);
   return jsonResponse({ path: absolutePath });
@@ -14709,7 +14640,7 @@ async function handleGetAgentWorkspaceFile(agentId, filename) {
     const msg = errorMessage(err);
     return jsonResponse({ error: msg }, 500);
   }
-  const buf = await readFile7(absolutePath);
+  const buf = await readFile9(absolutePath);
   const ext = basename3.replace(/^.*\./, "").toLowerCase();
   const mime = {
     png: "image/png",
@@ -14786,8 +14717,8 @@ async function handleGetDoc(name) {
     return jsonResponse({ error: "Unknown doc" }, 404);
   }
   try {
-    const path = join9(process.cwd(), "doc", filename);
-    const content = await readFile7(path, "utf-8");
+    const path = join11(process.cwd(), "doc", filename);
+    const content = await readFile9(path, "utf-8");
     return jsonResponse({ content });
   } catch (err) {
     const code = err?.code;
@@ -14802,6 +14733,15 @@ async function handleGetDoc(name) {
 init_config();
 
 // src/http/channel-run.ts
+async function getDefaultAgent(config, defaultAgentIdKey) {
+  const agents = await loadAgents();
+  const id = config[defaultAgentIdKey];
+  const defaultAgentId = typeof id === "string" ? id.trim() : "";
+  if (defaultAgentId) {
+    return agents.find((a) => a.id === defaultAgentId) ?? null;
+  }
+  return agents[0] ?? null;
+}
 async function runAgentWithConversation(memoryStore, agent, conversationId, userId, task, sendReply) {
   memoryStore.ensureConversation(conversationId, agent.id, userId);
   const conversationHistory = getConversationHistoryForRun(memoryStore, conversationId);
@@ -14829,13 +14769,10 @@ async function handleTelegramSetWebhook(req) {
   if (req.method !== "POST") {
     return jsonResponse({ error: "Method not allowed" }, 405);
   }
-  let body;
-  try {
-    body = await req.json();
-  } catch {
-    return jsonResponse({ error: "Invalid JSON body" }, 400);
-  }
-  const baseUrl = typeof body.base_url === "string" ? body.base_url.trim() : "";
+  const parsed = await parseJsonBody(req);
+  if (!parsed.ok)
+    return parsed.response;
+  const baseUrl = typeof parsed.body.base_url === "string" ? parsed.body.base_url.trim() : "";
   if (!baseUrl) {
     return jsonResponse({ error: "base_url is required" }, 400);
   }
@@ -14911,11 +14848,9 @@ async function processTelegramUpdate(memoryStore, body) {
   const botToken = config.telegram_bot_token?.trim();
   if (!botToken)
     return;
-  const agents = await loadAgents();
-  const defaultAgentId = config.telegram_default_agent_id?.trim();
-  const agent = defaultAgentId ? agents.find((a) => a.id === defaultAgentId) : agents[0];
+  const agent = await getDefaultAgent(config, "telegram_default_agent_id");
   if (!agent) {
-    await sendTelegramMessage(botToken, chatId, "No agent configured. Add an agent and set Telegram default agent in Settings.");
+    await sendTelegramMessage(botToken, chatId, "No agent configured. Set default agent in Settings.");
     return;
   }
   if (!text) {
@@ -14929,12 +14864,10 @@ async function handleTelegramWebhook(req, memoryStore) {
   if (req.method !== "POST") {
     return jsonResponse({ error: "Method not allowed" }, 405);
   }
-  let body;
-  try {
-    body = await req.json();
-  } catch {
-    return jsonResponse({ error: "Invalid JSON body" }, 400);
-  }
+  const parsed = await parseJsonBody(req);
+  if (!parsed.ok)
+    return parsed.response;
+  const body = parsed.body;
   const message = body.message;
   if (!message?.chat?.id) {
     return jsonResponse({ ok: true });
@@ -15057,11 +14990,9 @@ async function processSlackEvent(memoryStore, payload) {
   const botToken = config.slack_bot_token?.trim();
   if (!botToken)
     return;
-  const agents = await loadAgents();
-  const defaultAgentId = config.slack_default_agent_id?.trim();
-  const agent = defaultAgentId ? agents.find((a) => a.id === defaultAgentId) : agents[0];
+  const agent = await getDefaultAgent(config, "slack_default_agent_id");
   if (!agent) {
-    await sendSlackMessage(botToken, event.channel, "No agent configured. Set Slack default agent in Settings.");
+    await sendSlackMessage(botToken, event.channel, "No agent configured. Set default agent in Settings.");
     return;
   }
   const userId = event.user ?? "unknown";
@@ -15172,11 +15103,9 @@ async function processDiscordInteraction(memoryStore, interaction) {
   const botToken = config.discord_bot_token?.trim();
   if (!botToken)
     return;
-  const agents = await loadAgents();
-  const defaultAgentId = config.discord_default_agent_id?.trim();
-  const agent = defaultAgentId ? agents.find((a) => a.id === defaultAgentId) : agents[0];
+  const agent = await getDefaultAgent(config, "discord_default_agent_id");
   if (!agent) {
-    await sendDiscordFollowup(appId, token, botToken, "No agent configured. Set Discord default agent in Settings.");
+    await sendDiscordFollowup(appId, token, botToken, "No agent configured. Set default agent in Settings.");
     return;
   }
   const conversationId = `discord:${channelId}:${userId}`;
@@ -15258,11 +15187,9 @@ async function processSignalWebhook(memoryStore, body) {
   const bridgeUrl = config.signal_bridge_url?.trim();
   if (!bridgeUrl)
     return;
-  const agents = await loadAgents();
-  const defaultAgentId = config.signal_default_agent_id?.trim();
-  const agent = defaultAgentId ? agents.find((a) => a.id === defaultAgentId) : agents[0];
+  const agent = await getDefaultAgent(config, "signal_default_agent_id");
   if (!agent) {
-    await sendSignalMessage(bridgeUrl, from, "No agent configured. Set Signal default agent in Settings.");
+    await sendSignalMessage(bridgeUrl, from, "No agent configured. Set default agent in Settings.");
     return;
   }
   if (!text) {
@@ -15281,12 +15208,10 @@ async function handleSignalWebhook(req, memoryStore) {
   if (req.method !== "POST") {
     return jsonResponse({ error: "Method not allowed" }, 405);
   }
-  let body;
-  try {
-    body = await req.json();
-  } catch {
-    return jsonResponse({ error: "Invalid JSON body" }, 400);
-  }
+  const parsed = await parseJsonBody(req);
+  if (!parsed.ok)
+    return parsed.response;
+  const body = parsed.body;
   const config = await readConfig();
   if (!config.signal_bridge_url?.trim()) {
     console.warn("[signal] Webhook received but signal_bridge_url not configured");
@@ -15324,13 +15249,10 @@ async function handleViberSetWebhook(req) {
   if (req.method !== "POST") {
     return jsonResponse({ error: "Method not allowed" }, 405);
   }
-  let body;
-  try {
-    body = await req.json();
-  } catch {
-    return jsonResponse({ error: "Invalid JSON body" }, 400);
-  }
-  const baseUrl = typeof body.base_url === "string" ? body.base_url.trim() : "";
+  const parsed = await parseJsonBody(req);
+  if (!parsed.ok)
+    return parsed.response;
+  const baseUrl = typeof parsed.body.base_url === "string" ? parsed.body.base_url.trim() : "";
   if (!baseUrl) {
     return jsonResponse({ error: "base_url is required" }, 400);
   }
@@ -15431,11 +15353,9 @@ async function processViberCallback(memoryStore, payload) {
   const authToken = config.viber_auth_token?.trim();
   if (!authToken)
     return;
-  const agents = await loadAgents();
-  const defaultAgentId = config.viber_default_agent_id?.trim();
-  const agent = defaultAgentId ? agents.find((a) => a.id === defaultAgentId) : agents[0];
+  const agent = await getDefaultAgent(config, "viber_default_agent_id");
   if (!agent) {
-    await sendViberMessage(authToken, senderId, "No agent configured. Set Viber default agent in Settings.");
+    await sendViberMessage(authToken, senderId, "No agent configured. Set default agent in Settings.");
     return;
   }
   const conversationId = `viber:${senderId}`;
@@ -15484,10 +15404,10 @@ async function handleViberWebhook(req, memoryStore) {
 init_config();
 
 // src/core/plugins.ts
-import { readdir as readdir4, stat as stat2 } from "fs/promises";
-import { join as join10 } from "path";
+import { readdir as readdir5, stat as stat2 } from "fs/promises";
+import { join as join12 } from "path";
 init_config();
-var DEFAULT_PLUGINS_DIR = join10(process.env.HOME || process.env.USERPROFILE || "~", ".agent-os", "plugins");
+var DEFAULT_PLUGINS_DIR = join12(process.env.HOME || process.env.USERPROFILE || "~", ".agent-os", "plugins");
 function getPluginsDir() {
   return process.env.AGENT_OS_PLUGINS_DIR || DEFAULT_PLUGINS_DIR;
 }
@@ -15501,7 +15421,7 @@ async function loadPlugins() {
   const dir = getPluginsDir();
   let entries = [];
   try {
-    entries = await readdir4(dir);
+    entries = await readdir5(dir);
   } catch (err) {
     if (err?.code === "ENOENT")
       return;
@@ -15512,12 +15432,12 @@ async function loadPlugins() {
   for (const name of entries) {
     if (name.startsWith("."))
       continue;
-    const pluginPath = join10(dir, name);
+    const pluginPath = join12(dir, name);
     let modulePath;
     try {
       const st = await stat2(pluginPath);
       if (st.isDirectory()) {
-        modulePath = join10(pluginPath, "index.js");
+        modulePath = join12(pluginPath, "index.js");
       } else if (name.endsWith(".js") || name.endsWith(".ts")) {
         modulePath = pluginPath;
       } else {
@@ -15539,9 +15459,10 @@ async function loadPlugins() {
 
 // src/server.ts
 init_config();
-import { join as join11, dirname } from "path";
-import { mkdirSync } from "fs";
+import { join as join13, dirname, resolve as resolve4 } from "path";
+import { mkdirSync, existsSync } from "fs";
 var PORT = parseInt(process.env.PORT ?? "3010", 10);
+var DASHBOARD_DIST = resolve4(join13(import.meta.dir, "..", "dashboard", "dist"));
 var HOST = process.env.HOST ?? "127.0.0.1";
 var EVENT_TYPES = [
   "task.created",
@@ -15554,7 +15475,7 @@ var EVENT_TYPES = [
   "tool.completed"
 ];
 var wsClients = new Set;
-var MEMORY_DB_PATH = process.env.AGENT_MEMORY_DB_PATH ?? join11(getAgentOsHome(), "database.db");
+var MEMORY_DB_PATH = process.env.AGENT_MEMORY_DB_PATH ?? join13(getAgentOsHome(), "database.db");
 mkdirSync(dirname(MEMORY_DB_PATH), { recursive: true });
 var memoryStore = new MemoryStore(MEMORY_DB_PATH);
 setAgentStore(memoryStore);
@@ -15566,6 +15487,44 @@ function broadcastEvent(event) {
     } catch {}
   }
 }
+function serveDashboard(pathname) {
+  if (!existsSync(DASHBOARD_DIST) || !existsSync(join13(DASHBOARD_DIST, "index.html"))) {
+    return null;
+  }
+  const decoded = decodeURIComponent(pathname);
+  if (decoded.includes("..")) {
+    return Response.json({ error: "Not found" }, { status: 404, headers: CORS_HEADERS });
+  }
+  const subpath = decoded === "/" ? "index.html" : decoded.slice(1);
+  const filePath = join13(DASHBOARD_DIST, subpath);
+  if (existsSync(filePath)) {
+    const file = Bun.file(filePath);
+    const ext = subpath.split(".").pop() ?? "";
+    const mime = {
+      html: "text/html",
+      js: "application/javascript",
+      css: "text/css",
+      json: "application/json",
+      png: "image/png",
+      jpg: "image/jpeg",
+      jpeg: "image/jpeg",
+      ico: "image/x-icon",
+      svg: "image/svg+xml",
+      woff: "font/woff",
+      woff2: "font/woff2"
+    };
+    return new Response(file, {
+      headers: { "Content-Type": mime[ext] ?? "application/octet-stream" }
+    });
+  }
+  const indexPath = join13(DASHBOARD_DIST, "index.html");
+  if (existsSync(indexPath)) {
+    return new Response(Bun.file(indexPath), {
+      headers: { "Content-Type": "text/html" }
+    });
+  }
+  return null;
+}
 for (const type of EVENT_TYPES) {
   subscribe(type, broadcastEvent);
 }
@@ -15941,6 +15900,17 @@ async function startServer() {
           return;
         return Response.json({ error: "Upgrade failed" }, { status: 500, headers: CORS_HEADERS });
       }
+      if (req.method === "GET" && !url.pathname.startsWith("/api/")) {
+        const dashboardResponse = serveDashboard(url.pathname);
+        if (dashboardResponse)
+          return dashboardResponse;
+        if (url.pathname === "/" || url.pathname === "") {
+          return Response.json({
+            error: "Dashboard not built",
+            hint: "From the sulala package root run: cd dashboard && npm run build"
+          }, { status: 404, headers: CORS_HEADERS });
+        }
+      }
       return Response.json({ error: "Not found" }, { status: 404, headers: CORS_HEADERS });
     },
     error(error) {