@tickernelz/paperclip-pro-shared 2026.925.0

package/dist/.paperclip-build-complete

@@ -0,0 +1 @@
+{"sources":"966b0c1e0c1f256c52a0cdda8ac23a6194a52bc0f1c1dcef0b94d04ab8436960","outputs":"f276ed8c61da4ab17179e140f31fb00dd2aa72370680ec701178e1902b90430d"}

package/dist/account-handle.d.ts

@@ -0,0 +1,26 @@
+/** The longest accepted account handle. The secret key limit is 120
+ *  characters, and the longest name prefix a caller adds is `CODEX_HOME_` at
+ *  11 characters, so 100 leaves headroom. */
+export declare const ACCOUNT_HANDLE_MAX_LENGTH = 100;
+/**
+ * Converts a raw account identifier into a safe account handle. Returns
+ * `null` when the value cannot become one instead of throwing, so a caller
+ * decides how to fail the operation.
+ *
+ * The identifier is the account's identity key: it names one directory and
+ * one secret, so two distinct identifiers must never resolve to the same
+ * handle. A caller must never normalize the value before this check (for
+ * example, by trimming it) — normalizing first can alias a distinct
+ * identifier onto an already-claimed handle and let a login accept a
+ * different account's credential home as its own.
+ *
+ * An input becomes a handle only when every rule below is true:
+ *
+ * - It carries no leading or trailing whitespace.
+ * - It matches `/^[a-zA-Z0-9_.-]+$/`.
+ * - It is {@link ACCOUNT_HANDLE_MAX_LENGTH} characters or shorter.
+ * - It is neither `.` nor `..`.
+ * - It does not start with `-` (a leading `-` reads as a command-line option).
+ */
+export declare function toAccountHandle(rawAccountId: string): string | null;
+//# sourceMappingURL=account-handle.d.ts.map

package/dist/account-handle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-handle.d.ts","sourceRoot":"","sources":["../src/account-handle.ts"],"names":[],"mappings":"AAOA;;6CAE6C;AAC7C,eAAO,MAAM,yBAAyB,MAAM,CAAC;AAK7C;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,eAAe,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAQnE"}

package/dist/account-handle.js

@@ -0,0 +1,48 @@
+// A canonical account handle names one login account inside one company. Two
+// downstream sinks each guard the raw account identifier with a different
+// validator: a directory-segment denylist, and the secret-key allowlist
+// (`packages/shared/src/validators/secret.ts`). `toAccountHandle` accepts a
+// value only when it satisfies both, so one handle can safely name both a
+// directory and a secret.
+/** The longest accepted account handle. The secret key limit is 120
+ *  characters, and the longest name prefix a caller adds is `CODEX_HOME_` at
+ *  11 characters, so 100 leaves headroom. */
+export const ACCOUNT_HANDLE_MAX_LENGTH = 100;
+// The same character class the secret key schema uses.
+const ACCOUNT_HANDLE_PATTERN = /^[a-zA-Z0-9_.-]+$/;
+/**
+ * Converts a raw account identifier into a safe account handle. Returns
+ * `null` when the value cannot become one instead of throwing, so a caller
+ * decides how to fail the operation.
+ *
+ * The identifier is the account's identity key: it names one directory and
+ * one secret, so two distinct identifiers must never resolve to the same
+ * handle. A caller must never normalize the value before this check (for
+ * example, by trimming it) — normalizing first can alias a distinct
+ * identifier onto an already-claimed handle and let a login accept a
+ * different account's credential home as its own.
+ *
+ * An input becomes a handle only when every rule below is true:
+ *
+ * - It carries no leading or trailing whitespace.
+ * - It matches `/^[a-zA-Z0-9_.-]+$/`.
+ * - It is {@link ACCOUNT_HANDLE_MAX_LENGTH} characters or shorter.
+ * - It is neither `.` nor `..`.
+ * - It does not start with `-` (a leading `-` reads as a command-line option).
+ */
+export function toAccountHandle(rawAccountId) {
+    if (typeof rawAccountId !== "string" || rawAccountId.length === 0)
+        return null;
+    if (rawAccountId.trim() !== rawAccountId)
+        return null;
+    if (!ACCOUNT_HANDLE_PATTERN.test(rawAccountId))
+        return null;
+    if (rawAccountId.length > ACCOUNT_HANDLE_MAX_LENGTH)
+        return null;
+    if (rawAccountId === "." || rawAccountId === "..")
+        return null;
+    if (rawAccountId.startsWith("-"))
+        return null;
+    return rawAccountId;
+}
+//# sourceMappingURL=account-handle.js.map

package/dist/account-handle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-handle.js","sourceRoot":"","sources":["../src/account-handle.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,0EAA0E;AAC1E,wEAAwE;AACxE,4EAA4E;AAC5E,0EAA0E;AAC1E,0BAA0B;AAE1B;;6CAE6C;AAC7C,MAAM,CAAC,MAAM,yBAAyB,GAAG,GAAG,CAAC;AAE7C,uDAAuD;AACvD,MAAM,sBAAsB,GAAG,mBAAmB,CAAC;AAEnD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,eAAe,CAAC,YAAoB;IAClD,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC/E,IAAI,YAAY,CAAC,IAAI,EAAE,KAAK,YAAY;QAAE,OAAO,IAAI,CAAC;IACtD,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC,YAAY,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5D,IAAI,YAAY,CAAC,MAAM,GAAG,yBAAyB;QAAE,OAAO,IAAI,CAAC;IACjE,IAAI,YAAY,KAAK,GAAG,IAAI,YAAY,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC/D,IAAI,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAC9C,OAAO,YAAY,CAAC;AACtB,CAAC"}

package/dist/account-handle.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=account-handle.test.d.ts.map

package/dist/account-handle.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-handle.test.d.ts","sourceRoot":"","sources":["../src/account-handle.test.ts"],"names":[],"mappings":""}

package/dist/account-handle.test.js

@@ -0,0 +1,62 @@
+import { describe, expect, it } from "vitest";
+import { ACCOUNT_HANDLE_MAX_LENGTH, toAccountHandle } from "./account-handle.js";
+import { createUserSecretDefinitionSchema } from "./validators/secret.js";
+describe("toAccountHandle", () => {
+    it("returns the value for a plain identifier", () => {
+        expect(toAccountHandle("acct-42")).toBe("acct-42");
+    });
+    it("returns null for a value that holds a space, such as \"a b\"", () => {
+        expect(toAccountHandle("a b")).toBeNull();
+    });
+    it("returns null for a value with surrounding whitespace instead of trimming it", () => {
+        // Trimming a value before validation would let " acct-42" and "acct-42"
+        // resolve to the same handle. Two distinct identifiers must never share
+        // one handle, so surrounding whitespace is a rejection, not something to
+        // strip.
+        expect(toAccountHandle(" acct-42")).toBeNull();
+        expect(toAccountHandle("acct-42 ")).toBeNull();
+        expect(toAccountHandle(" acct-42 ")).toBeNull();
+        expect(toAccountHandle("\tacct-42\n")).toBeNull();
+        // The plain identifier with no surrounding whitespace still passes.
+        expect(toAccountHandle("acct-42")).toBe("acct-42");
+    });
+    it("returns null for an empty string", () => {
+        expect(toAccountHandle("")).toBeNull();
+    });
+    it("returns null for a value that holds a plus sign, such as \"a+b\"", () => {
+        expect(toAccountHandle("a+b")).toBeNull();
+    });
+    it("returns null for a value that holds a colon, such as \"a:b\"", () => {
+        expect(toAccountHandle("a:b")).toBeNull();
+    });
+    it("returns null for a value longer than 100 characters", () => {
+        const tooLong = "a".repeat(ACCOUNT_HANDLE_MAX_LENGTH + 1);
+        expect(toAccountHandle(tooLong)).toBeNull();
+        const atLimit = "a".repeat(ACCOUNT_HANDLE_MAX_LENGTH);
+        expect(toAccountHandle(atLimit)).toBe(atLimit);
+    });
+    it("returns null for \".\" and for \"..\"", () => {
+        expect(toAccountHandle(".")).toBeNull();
+        expect(toAccountHandle("..")).toBeNull();
+    });
+    it("returns null for a value that starts with a hyphen, such as \"-rf\"", () => {
+        expect(toAccountHandle("-rf")).toBeNull();
+    });
+    it("returns null for a value that holds a shell metacharacter, such as \"$(id)\"", () => {
+        expect(toAccountHandle("$(id)")).toBeNull();
+    });
+    it("returns null for a value that holds a path separator or a NUL byte", () => {
+        expect(toAccountHandle("a/b")).toBeNull();
+        expect(toAccountHandle("a\\b")).toBeNull();
+        expect(toAccountHandle("a\0b")).toBeNull();
+    });
+    it("every accepted handle also passes the secret key schema", () => {
+        const candidates = ["acct-42", "acct_42", "ACCT.42", "a".repeat(ACCOUNT_HANDLE_MAX_LENGTH)];
+        for (const candidate of candidates) {
+            const handle = toAccountHandle(candidate);
+            expect(handle).not.toBeNull();
+            expect(createUserSecretDefinitionSchema.shape.key.safeParse(handle).success).toBe(true);
+        }
+    });
+});
+//# sourceMappingURL=account-handle.test.js.map

package/dist/account-handle.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-handle.test.js","sourceRoot":"","sources":["../src/account-handle.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,yBAAyB,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACjF,OAAO,EAAE,gCAAgC,EAAE,MAAM,wBAAwB,CAAC;AAE1E,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACtE,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6EAA6E,EAAE,GAAG,EAAE;QACrF,wEAAwE;QACxE,wEAAwE;QACxE,yEAAyE;QACzE,SAAS;QACT,MAAM,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC/C,MAAM,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC/C,MAAM,CAAC,eAAe,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QAChD,MAAM,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QAClD,oEAAoE;QACpE,MAAM,CAAC,eAAe,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACrD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAC1C,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kEAAkE,EAAE,GAAG,EAAE;QAC1E,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8DAA8D,EAAE,GAAG,EAAE;QACtE,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,yBAAyB,GAAG,CAAC,CAAC,CAAC;QAC1D,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC5C,MAAM,OAAO,GAAG,GAAG,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC;QACtD,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACjD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QACxC,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qEAAqE,EAAE,GAAG,EAAE;QAC7E,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8EAA8E,EAAE,GAAG,EAAE;QACtF,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oEAAoE,EAAE,GAAG,EAAE;QAC5E,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC1C,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC3C,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;IAC7C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yDAAyD,EAAE,GAAG,EAAE;QACjE,MAAM,UAAU,GAAG,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,yBAAyB,CAAC,CAAC,CAAC;QAC5F,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,CAAC;YAC1C,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;YAC9B,MAAM,CAAC,gCAAgC,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC1F,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/adapter-agnostic-keys.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=adapter-agnostic-keys.test.d.ts.map

package/dist/adapter-agnostic-keys.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter-agnostic-keys.test.d.ts","sourceRoot":"","sources":["../src/adapter-agnostic-keys.test.ts"],"names":[],"mappings":""}

package/dist/adapter-agnostic-keys.test.js

@@ -0,0 +1,33 @@
+import { readFileSync } from "node:fs";
+import { fileURLToPath } from "node:url";
+import { describe, expect, it } from "vitest";
+import { ADAPTER_AGNOSTIC_KEYS } from "./constants.js";
+const EXPECTED_ADAPTER_AGNOSTIC_KEYS = [
+    "env",
+    "promptTemplate",
+    "instructionsFilePath",
+    "cwd",
+    "timeoutSec",
+    "graceSec",
+    "bootstrapPromptTemplate",
+    "paperclipSkillSync",
+];
+function readRepoFile(pathFromRoot) {
+    return readFileSync(fileURLToPath(new URL(`../../../${pathFromRoot}`, import.meta.url)), "utf8");
+}
+describe("adapter-agnostic config keys", () => {
+    it("keeps the preserved adapter config keys explicit", () => {
+        expect(ADAPTER_AGNOSTIC_KEYS).toEqual(EXPECTED_ADAPTER_AGNOSTIC_KEYS);
+    });
+    it("is imported by the server and UI instead of being re-declared", () => {
+        const serverSource = readRepoFile("server/src/routes/agents.ts");
+        const uiSource = readRepoFile("ui/src/lib/agent-config-patch.ts");
+        expect(serverSource).toContain("ADAPTER_AGNOSTIC_KEYS");
+        expect(serverSource).toContain("from \"@tickernelz/paperclip-pro-shared\"");
+        expect(serverSource).not.toMatch(/const\s+ADAPTER_AGNOSTIC_KEYS\s*=/);
+        expect(uiSource).toContain("ADAPTER_AGNOSTIC_KEYS");
+        expect(uiSource).toContain("from \"@tickernelz/paperclip-pro-shared\"");
+        expect(uiSource).not.toMatch(/const\s+ADAPTER_AGNOSTIC_KEYS\s*=/);
+    });
+});
+//# sourceMappingURL=adapter-agnostic-keys.test.js.map

package/dist/adapter-agnostic-keys.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter-agnostic-keys.test.js","sourceRoot":"","sources":["../src/adapter-agnostic-keys.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAEvD,MAAM,8BAA8B,GAAG;IACrC,KAAK;IACL,gBAAgB;IAChB,sBAAsB;IACtB,KAAK;IACL,YAAY;IACZ,UAAU;IACV,yBAAyB;IACzB,oBAAoB;CACZ,CAAC;AAEX,SAAS,YAAY,CAAC,YAAoB;IACxC,OAAO,YAAY,CACjB,aAAa,CAAC,IAAI,GAAG,CAAC,YAAY,YAAY,EAAE,EAAE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EACnE,MAAM,CACP,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE;IAC5C,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,CAAC,qBAAqB,CAAC,CAAC,OAAO,CAAC,8BAA8B,CAAC,CAAC;IACxE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,MAAM,YAAY,GAAG,YAAY,CAAC,6BAA6B,CAAC,CAAC;QACjE,MAAM,QAAQ,GAAG,YAAY,CAAC,kCAAkC,CAAC,CAAC;QAElE,MAAM,CAAC,YAAY,CAAC,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC;QACxD,MAAM,CAAC,YAAY,CAAC,CAAC,SAAS,CAAC,2CAA2C,CAAC,CAAC;QAC5E,MAAM,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,mCAAmC,CAAC,CAAC;QAEtE,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,uBAAuB,CAAC,CAAC;QACpD,MAAM,CAAC,QAAQ,CAAC,CAAC,SAAS,CAAC,2CAA2C,CAAC,CAAC;QACxE,MAAM,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,mCAAmC,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/adapter-auth-check-code.d.ts

@@ -0,0 +1,13 @@
+/**
+ * The canonical check code an adapter Test engine emits when a sandbox target
+ * has no ready authentication. The user interface reads this stable code to
+ * decide login eligibility. The user interface does not read the message text
+ * or the top-level status.
+ *
+ * The name is neutral. It carries no vendor name and no login-flow word, because
+ * a Test result can sync to public packages. The adapters and the user interface
+ * import this one constant, so the user interface can gate login from one code
+ * across adapters.
+ */
+export declare const ADAPTER_AUTH_MISSING_CHECK_CODE = "adapter_auth_missing";
+//# sourceMappingURL=adapter-auth-check-code.d.ts.map

package/dist/adapter-auth-check-code.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter-auth-check-code.d.ts","sourceRoot":"","sources":["../src/adapter-auth-check-code.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,eAAO,MAAM,+BAA+B,yBAAyB,CAAC"}

package/dist/adapter-auth-check-code.js

@@ -0,0 +1,13 @@
+/**
+ * The canonical check code an adapter Test engine emits when a sandbox target
+ * has no ready authentication. The user interface reads this stable code to
+ * decide login eligibility. The user interface does not read the message text
+ * or the top-level status.
+ *
+ * The name is neutral. It carries no vendor name and no login-flow word, because
+ * a Test result can sync to public packages. The adapters and the user interface
+ * import this one constant, so the user interface can gate login from one code
+ * across adapters.
+ */
+export const ADAPTER_AUTH_MISSING_CHECK_CODE = "adapter_auth_missing";
+//# sourceMappingURL=adapter-auth-check-code.js.map

package/dist/adapter-auth-check-code.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter-auth-check-code.js","sourceRoot":"","sources":["../src/adapter-auth-check-code.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,+BAA+B,GAAG,sBAAsB,CAAC"}

package/dist/adapter-auth-check-code.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=adapter-auth-check-code.test.d.ts.map

package/dist/adapter-auth-check-code.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter-auth-check-code.test.d.ts","sourceRoot":"","sources":["../src/adapter-auth-check-code.test.ts"],"names":[],"mappings":""}

package/dist/adapter-auth-check-code.test.js

@@ -0,0 +1,8 @@
+import { describe, it, expect } from "vitest";
+import { ADAPTER_AUTH_MISSING_CHECK_CODE } from "./adapter-auth-check-code.js";
+describe("ADAPTER_AUTH_MISSING_CHECK_CODE", () => {
+    it("keeps the canonical missing-auth check code stable", () => {
+        expect(ADAPTER_AUTH_MISSING_CHECK_CODE).toBe("adapter_auth_missing");
+    });
+});
+//# sourceMappingURL=adapter-auth-check-code.test.js.map

package/dist/adapter-auth-check-code.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter-auth-check-code.test.js","sourceRoot":"","sources":["../src/adapter-auth-check-code.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAE9C,OAAO,EAAE,+BAA+B,EAAE,MAAM,8BAA8B,CAAC;AAE/E,QAAQ,CAAC,iCAAiC,EAAE,GAAG,EAAE;IAC/C,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,CAAC,+BAA+B,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/adapter-auth-session.d.ts

@@ -0,0 +1,16 @@
+import { type AdapterAuthSessionInternalStatus, type AdapterAuthSessionStatus } from "./types/agent.js";
+export declare const ADAPTER_AUTH_SESSION_ACTIVE_STATUSES: readonly ["starting", "waiting_for_user", "promoting"];
+export type AdapterAuthSessionActiveStatus = (typeof ADAPTER_AUTH_SESSION_ACTIVE_STATUSES)[number];
+/** Returns true when the status holds the company credential slot. */
+export declare function isActiveAdapterAuthSessionStatus(status: AdapterAuthSessionInternalStatus): status is AdapterAuthSessionActiveStatus;
+/**
+ * Maps an internal status to the public status. The map hides the two internal
+ * states from a public response:
+ *
+ * - `promoting` maps to `waiting_for_user`.
+ * - `cleanup_pending` throws. It is a terminal-cleanup bookkeeping state. The
+ *   caller must resolve the terminal status from the row before it builds a
+ *   public response. The throw stops any accidental leak of the cleanup state.
+ */
+export declare function toPublicAdapterAuthSessionStatus(status: AdapterAuthSessionInternalStatus): AdapterAuthSessionStatus;
+//# sourceMappingURL=adapter-auth-session.d.ts.map

package/dist/adapter-auth-session.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter-auth-session.d.ts","sourceRoot":"","sources":["../src/adapter-auth-session.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,gCAAgC,EACrC,KAAK,wBAAwB,EAC9B,MAAM,kBAAkB,CAAC;AAU1B,eAAO,MAAM,oCAAoC,wDAIe,CAAC;AAEjE,MAAM,MAAM,8BAA8B,GACxC,CAAC,OAAO,oCAAoC,CAAC,CAAC,MAAM,CAAC,CAAC;AAMxD,sEAAsE;AACtE,wBAAgB,gCAAgC,CAC9C,MAAM,EAAE,gCAAgC,GACvC,MAAM,IAAI,8BAA8B,CAE1C;AAED;;;;;;;;GAQG;AACH,wBAAgB,gCAAgC,CAC9C,MAAM,EAAE,gCAAgC,GACvC,wBAAwB,CAW1B"}

package/dist/adapter-auth-session.js

@@ -0,0 +1,37 @@
+// The status helpers for an adapter login session. The server and the user
+// interface import these helpers, so both sides use one source. The helpers map
+// the internal status to the public status and name the active statuses.
+// The active internal statuses. The company credential slot allows one active
+// session at a time, so the concurrency index applies to exactly these three
+// statuses. The `promoting` state stays active because the slot still holds the
+// company credential until the promotion window ends.
+export const ADAPTER_AUTH_SESSION_ACTIVE_STATUSES = [
+    "starting",
+    "waiting_for_user",
+    "promoting",
+];
+const ACTIVE_STATUS_SET = new Set(ADAPTER_AUTH_SESSION_ACTIVE_STATUSES);
+/** Returns true when the status holds the company credential slot. */
+export function isActiveAdapterAuthSessionStatus(status) {
+    return ACTIVE_STATUS_SET.has(status);
+}
+/**
+ * Maps an internal status to the public status. The map hides the two internal
+ * states from a public response:
+ *
+ * - `promoting` maps to `waiting_for_user`.
+ * - `cleanup_pending` throws. It is a terminal-cleanup bookkeeping state. The
+ *   caller must resolve the terminal status from the row before it builds a
+ *   public response. The throw stops any accidental leak of the cleanup state.
+ */
+export function toPublicAdapterAuthSessionStatus(status) {
+    switch (status) {
+        case "promoting":
+            return "waiting_for_user";
+        case "cleanup_pending":
+            throw new Error("cleanup_pending is an internal cleanup state; resolve the terminal status before you build a public response");
+        default:
+            return status;
+    }
+}
+//# sourceMappingURL=adapter-auth-session.js.map

package/dist/adapter-auth-session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter-auth-session.js","sourceRoot":"","sources":["../src/adapter-auth-session.ts"],"names":[],"mappings":"AAKA,2EAA2E;AAC3E,gFAAgF;AAChF,yEAAyE;AAEzE,8EAA8E;AAC9E,6EAA6E;AAC7E,gFAAgF;AAChF,sDAAsD;AACtD,MAAM,CAAC,MAAM,oCAAoC,GAAG;IAClD,UAAU;IACV,kBAAkB;IAClB,WAAW;CACmD,CAAC;AAKjE,MAAM,iBAAiB,GAAkD,IAAI,GAAG,CAC9E,oCAAoC,CACrC,CAAC;AAEF,sEAAsE;AACtE,MAAM,UAAU,gCAAgC,CAC9C,MAAwC;IAExC,OAAO,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AACvC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,gCAAgC,CAC9C,MAAwC;IAExC,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,WAAW;YACd,OAAO,kBAAkB,CAAC;QAC5B,KAAK,iBAAiB;YACpB,MAAM,IAAI,KAAK,CACb,8GAA8G,CAC/G,CAAC;QACJ;YACE,OAAO,MAAM,CAAC;IAClB,CAAC;AACH,CAAC"}

package/dist/adapter-type.d.ts

@@ -0,0 +1,4 @@
+import { z } from "zod";
+export declare const agentAdapterTypeSchema: z.ZodDefault<z.ZodString>;
+export declare const optionalAgentAdapterTypeSchema: z.ZodOptional<z.ZodString>;
+//# sourceMappingURL=adapter-type.d.ts.map

package/dist/adapter-type.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter-type.d.ts","sourceRoot":"","sources":["../src/adapter-type.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,eAAO,MAAM,sBAAsB,2BAKoH,CAAC;AAExJ,eAAO,MAAM,8BAA8B,4BAI9B,CAAC"}

package/dist/adapter-type.js

@@ -0,0 +1,14 @@
+import { z } from "zod";
+import { AGENT_ADAPTER_TYPES } from "./constants.js";
+export const agentAdapterTypeSchema = z
+    .string()
+    .trim()
+    .min(1)
+    .default("process")
+    .describe(`Known built-in adapters: ${AGENT_ADAPTER_TYPES.join(", ")}. External adapters may register additional non-empty string types at runtime.`);
+export const optionalAgentAdapterTypeSchema = z
+    .string()
+    .trim()
+    .min(1)
+    .optional();
+//# sourceMappingURL=adapter-type.js.map

package/dist/adapter-type.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter-type.js","sourceRoot":"","sources":["../src/adapter-type.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAErD,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC;KACpC,MAAM,EAAE;KACR,IAAI,EAAE;KACN,GAAG,CAAC,CAAC,CAAC;KACN,OAAO,CAAC,SAAS,CAAC;KAClB,QAAQ,CAAC,4BAA4B,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,gFAAgF,CAAC,CAAC;AAExJ,MAAM,CAAC,MAAM,8BAA8B,GAAG,CAAC;KAC5C,MAAM,EAAE;KACR,IAAI,EAAE;KACN,GAAG,CAAC,CAAC,CAAC;KACN,QAAQ,EAAE,CAAC"}

package/dist/adapter-types.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=adapter-types.test.d.ts.map

package/dist/adapter-types.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter-types.test.d.ts","sourceRoot":"","sources":["../src/adapter-types.test.ts"],"names":[],"mappings":""}

package/dist/adapter-types.test.js

@@ -0,0 +1,46 @@
+import { describe, expect, it } from "vitest";
+import { AGENT_ROLE_LABELS, acceptInviteSchema, createAgentSchema, updateAgentSchema } from "./index.js";
+describe("dynamic adapter type validation schemas", () => {
+    it("accepts external adapter types in create/update agent schemas", () => {
+        expect(createAgentSchema.parse({
+            name: "External Agent",
+            adapterType: "external_adapter",
+        }).adapterType).toBe("external_adapter");
+        expect(updateAgentSchema.parse({
+            adapterType: "external_adapter",
+        }).adapterType).toBe("external_adapter");
+    });
+    it("still rejects blank adapter types", () => {
+        expect(() => createAgentSchema.parse({
+            name: "Blank Adapter",
+            adapterType: "   ",
+        })).toThrow();
+    });
+    it("accepts an explicit managed instructions bundle for new agents", () => {
+        expect(createAgentSchema.parse({
+            name: "Bundle Agent",
+            adapterType: "codex_local",
+            instructionsBundle: {
+                files: {
+                    "AGENTS.md": "Use AGENTS.md.",
+                },
+            },
+        }).instructionsBundle?.files["AGENTS.md"]).toBe("Use AGENTS.md.");
+    });
+    it("accepts external adapter types in invite acceptance schema", () => {
+        expect(acceptInviteSchema.parse({
+            requestType: "agent",
+            agentName: "External Joiner",
+            adapterType: "external_adapter",
+        }).adapterType).toBe("external_adapter");
+    });
+    it("accepts the security agent role and exposes its UI label", () => {
+        expect(createAgentSchema.parse({
+            name: "Security Engineer",
+            role: "security",
+            adapterType: "codex_local",
+        }).role).toBe("security");
+        expect(AGENT_ROLE_LABELS.security).toBe("Security");
+    });
+});
+//# sourceMappingURL=adapter-types.test.js.map

package/dist/adapter-types.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter-types.test.js","sourceRoot":"","sources":["../src/adapter-types.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAEzG,QAAQ,CAAC,yCAAyC,EAAE,GAAG,EAAE;IACvD,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,MAAM,CACJ,iBAAiB,CAAC,KAAK,CAAC;YACtB,IAAI,EAAE,gBAAgB;YACtB,WAAW,EAAE,kBAAkB;SAChC,CAAC,CAAC,WAAW,CACf,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAE3B,MAAM,CACJ,iBAAiB,CAAC,KAAK,CAAC;YACtB,WAAW,EAAE,kBAAkB;SAChC,CAAC,CAAC,WAAW,CACf,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,CAAC,GAAG,EAAE,CACV,iBAAiB,CAAC,KAAK,CAAC;YACtB,IAAI,EAAE,eAAe;YACrB,WAAW,EAAE,KAAK;SACnB,CAAC,CACH,CAAC,OAAO,EAAE,CAAC;IACd,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gEAAgE,EAAE,GAAG,EAAE;QACxE,MAAM,CACJ,iBAAiB,CAAC,KAAK,CAAC;YACtB,IAAI,EAAE,cAAc;YACpB,WAAW,EAAE,aAAa;YAC1B,kBAAkB,EAAE;gBAClB,KAAK,EAAE;oBACL,WAAW,EAAE,gBAAgB;iBAC9B;aACF;SACF,CAAC,CAAC,kBAAkB,EAAE,KAAK,CAAC,WAAW,CAAC,CAC1C,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,CACJ,kBAAkB,CAAC,KAAK,CAAC;YACvB,WAAW,EAAE,OAAO;YACpB,SAAS,EAAE,iBAAiB;YAC5B,WAAW,EAAE,kBAAkB;SAChC,CAAC,CAAC,WAAW,CACf,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,CACJ,iBAAiB,CAAC,KAAK,CAAC;YACtB,IAAI,EAAE,mBAAmB;YACzB,IAAI,EAAE,UAAU;YAChB,WAAW,EAAE,aAAa;SAC3B,CAAC,CAAC,IAAI,CACR,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAEnB,MAAM,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/agent-appearance.d.ts

@@ -0,0 +1,53 @@
+import { z } from "zod";
+export declare const AGENT_PALETTE_IDS: readonly ["bubblegum-sky", "pink-lemonade", "orchid-peach", "coral-mint", "lime-lagoon", "arctic-blue", "solar-flare", "violet-ember", "deep-tide", "coral-current", "golden-hour", "tangerine-cobalt", "electric-grove", "flamingo-jade", "cherry-pop", "turquoise-cherry", "ultraviolet-tide"];
+export type AgentPaletteId = typeof AGENT_PALETTE_IDS[number];
+export type CharacterPaletteId = AgentPaletteId | "muted-dream";
+export declare const AGENT_AVATAR_SIZES: readonly [16, 20, 24, 32, 40, 48, 64, 96, 128, 256, 512];
+export type AgentAvatarSize = typeof AGENT_AVATAR_SIZES[number];
+export declare const CHARACTER_STATES: readonly ["rest", "idle", "listening", "thinking", "working", "success", "confused", "sleepy", "loading"];
+export type CharacterState = typeof CHARACTER_STATES[number];
+export declare const agentAppearanceSchema: z.ZodObject<{
+    schemaVersion: z.ZodLiteral<1>;
+    characterVersion: z.ZodLiteral<"cap-v1">;
+    paletteId: z.ZodEnum<{
+        "arctic-blue": "arctic-blue";
+        "bubblegum-sky": "bubblegum-sky";
+        "cherry-pop": "cherry-pop";
+        "coral-current": "coral-current";
+        "coral-mint": "coral-mint";
+        "deep-tide": "deep-tide";
+        "electric-grove": "electric-grove";
+        "flamingo-jade": "flamingo-jade";
+        "golden-hour": "golden-hour";
+        "lime-lagoon": "lime-lagoon";
+        "orchid-peach": "orchid-peach";
+        "pink-lemonade": "pink-lemonade";
+        "solar-flare": "solar-flare";
+        "tangerine-cobalt": "tangerine-cobalt";
+        "turquoise-cherry": "turquoise-cherry";
+        "ultraviolet-tide": "ultraviolet-tide";
+        "violet-ember": "violet-ember";
+    }>;
+}, z.core.$strict>;
+export type AgentAppearance = z.infer<typeof agentAppearanceSchema>;
+export declare function appearanceForPalette(paletteId: AgentPaletteId): AgentAppearance;
+/** A persisted choice, never randomize while rendering. */
+export declare function randomAgentAppearance(): AgentAppearance;
+/** Must match the migration: rolling base-31 hash, modulo 17 at every step. */
+export declare function legacyAgentAppearance(id: string): AgentAppearance;
+export declare function resolveAgentAppearance(appearance: unknown, id?: string): AgentAppearance;
+export declare function agentAvatarUrl(appearance: AgentAppearance, size?: AgentAvatarSize, scale?: 1 | 2, pose?: CharacterState, muted?: boolean): string;
+export declare function characterStateForAgent(status: string): CharacterState;
+/** Hydrate compact agent projections without an additional per-agent request. */
+export declare function withAgentAppearance<T extends {
+    id: string;
+    appearance?: AgentAppearance | null;
+}>(agent: T): T & {
+    appearance: {
+        schemaVersion: 1;
+        characterVersion: "cap-v1";
+        paletteId: "arctic-blue" | "bubblegum-sky" | "cherry-pop" | "coral-current" | "coral-mint" | "deep-tide" | "electric-grove" | "flamingo-jade" | "golden-hour" | "lime-lagoon" | "orchid-peach" | "pink-lemonade" | "solar-flare" | "tangerine-cobalt" | "turquoise-cherry" | "ultraviolet-tide" | "violet-ember";
+    };
+    avatarUrl: string;
+};
+//# sourceMappingURL=agent-appearance.d.ts.map

package/dist/agent-appearance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-appearance.d.ts","sourceRoot":"","sources":["../src/agent-appearance.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,eAAO,MAAM,iBAAiB,YAAI,eAAe,EAAE,eAAe,EAAE,cAAc,EAAE,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,aAAa,EAAE,cAAc,EAAE,WAAW,EAAE,eAAe,EAAE,aAAa,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,eAAe,EAAE,YAAY,EAAE,kBAAkB,EAAE,kBAAkB,CAAU,CAAC;AAClU,MAAM,MAAM,cAAc,GAAG,OAAO,iBAAiB,CAAC,MAAM,CAAC,CAAC;AAC9D,MAAM,MAAM,kBAAkB,GAAG,cAAc,GAAG,aAAa,CAAC;AAChE,eAAO,MAAM,kBAAkB,YAAI,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAU,CAAC;AAC3F,MAAM,MAAM,eAAe,GAAG,OAAO,kBAAkB,CAAC,MAAM,CAAC,CAAC;AAChE,eAAO,MAAM,gBAAgB,YAAI,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,CAAU,CAAC;AAC1I,MAAM,MAAM,cAAc,GAAG,OAAO,gBAAgB,CAAC,MAAM,CAAC,CAAC;AAC7D,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;kBAIvB,CAAC;AACZ,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAEpE,wBAAgB,oBAAoB,CAAC,SAAS,EAAE,cAAc,GAAG,eAAe,CAE/E;AACD,2DAA2D;AAC3D,wBAAgB,qBAAqB,IAAI,eAAe,CAMvD;AACD,+EAA+E;AAC/E,wBAAgB,qBAAqB,CAAC,EAAE,EAAE,MAAM,GAAG,eAAe,CAIjE;AACD,wBAAgB,sBAAsB,CAAC,UAAU,EAAE,OAAO,EAAE,EAAE,SAAU,GAAG,eAAe,CAGzF;AACD,wBAAgB,cAAc,CAAC,UAAU,EAAE,eAAe,EAAE,IAAI,GAAE,eAAqB,EAAE,KAAK,GAAE,CAAC,GAAG,CAAK,EAAE,IAAI,GAAE,cAAuB,EAAE,KAAK,UAAQ,GAAG,MAAM,CAE/J;AACD,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,GAAG,cAAc,CAKrE;AAED,iFAAiF;AACjF,wBAAgB,mBAAmB,CAAC,CAAC,SAAS;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,UAAU,CAAC,EAAE,eAAe,GAAG,IAAI,CAAA;CAAE,EAAE,KAAK,EAAE,CAAC;;;;;;;EAG1G"}

package/dist/agent-appearance.js

@@ -0,0 +1,51 @@
+import { z } from "zod";
+export const AGENT_PALETTE_IDS = ["bubblegum-sky", "pink-lemonade", "orchid-peach", "coral-mint", "lime-lagoon", "arctic-blue", "solar-flare", "violet-ember", "deep-tide", "coral-current", "golden-hour", "tangerine-cobalt", "electric-grove", "flamingo-jade", "cherry-pop", "turquoise-cherry", "ultraviolet-tide"];
+export const AGENT_AVATAR_SIZES = [16, 20, 24, 32, 40, 48, 64, 96, 128, 256, 512];
+export const CHARACTER_STATES = ["rest", "idle", "listening", "thinking", "working", "success", "confused", "sleepy", "loading"];
+export const agentAppearanceSchema = z.object({
+    schemaVersion: z.literal(1),
+    characterVersion: z.literal("cap-v1"),
+    paletteId: z.enum(AGENT_PALETTE_IDS),
+}).strict();
+export function appearanceForPalette(paletteId) {
+    return { schemaVersion: 1, characterVersion: "cap-v1", paletteId };
+}
+/** A persisted choice, never randomize while rendering. */
+export function randomAgentAppearance() {
+    const bytes = new Uint32Array(1);
+    // Rejection sampling avoids modulo bias.
+    const limit = Math.floor(0x100000000 / AGENT_PALETTE_IDS.length) * AGENT_PALETTE_IDS.length;
+    do {
+        globalThis.crypto.getRandomValues(bytes);
+    } while (bytes[0] >= limit);
+    return appearanceForPalette(AGENT_PALETTE_IDS[bytes[0] % AGENT_PALETTE_IDS.length]);
+}
+/** Must match the migration: rolling base-31 hash, modulo 17 at every step. */
+export function legacyAgentAppearance(id) {
+    let hash = 0;
+    for (const char of id)
+        hash = (hash * 31 + char.charCodeAt(0)) % AGENT_PALETTE_IDS.length;
+    return appearanceForPalette(AGENT_PALETTE_IDS[hash]);
+}
+export function resolveAgentAppearance(appearance, id = "agent") {
+    const parsed = agentAppearanceSchema.safeParse(appearance);
+    return parsed.success ? parsed.data : legacyAgentAppearance(id);
+}
+export function agentAvatarUrl(appearance, size = 512, scale = 1, pose = "rest", muted = false) {
+    return `/api/agent-avatars/${appearance.characterVersion}/${muted ? "muted-dream" : appearance.paletteId}/${pose}.png?size=${size}&scale=${scale}`;
+}
+export function characterStateForAgent(status) {
+    if (status === "running")
+        return "working";
+    if (status === "error")
+        return "confused";
+    if (status === "paused" || status === "terminated" || status === "pending_approval")
+        return "rest";
+    return "idle";
+}
+/** Hydrate compact agent projections without an additional per-agent request. */
+export function withAgentAppearance(agent) {
+    const appearance = resolveAgentAppearance(agent.appearance, agent.id);
+    return { ...agent, appearance, avatarUrl: agentAvatarUrl(appearance) };
+}
+//# sourceMappingURL=agent-appearance.js.map

package/dist/agent-appearance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-appearance.js","sourceRoot":"","sources":["../src/agent-appearance.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,eAAe,EAAE,eAAe,EAAE,cAAc,EAAE,YAAY,EAAE,aAAa,EAAE,aAAa,EAAE,aAAa,EAAE,cAAc,EAAE,WAAW,EAAE,eAAe,EAAE,aAAa,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,eAAe,EAAE,YAAY,EAAE,kBAAkB,EAAE,kBAAkB,CAAU,CAAC;AAGlU,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAU,CAAC;AAE3F,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,CAAU,CAAC;AAE1I,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC5C,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3B,gBAAgB,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IACrC,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC;CACrC,CAAC,CAAC,MAAM,EAAE,CAAC;AAGZ,MAAM,UAAU,oBAAoB,CAAC,SAAyB;IAC5D,OAAO,EAAE,aAAa,EAAE,CAAC,EAAE,gBAAgB,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC;AACrE,CAAC;AACD,2DAA2D;AAC3D,MAAM,UAAU,qBAAqB;IACnC,MAAM,KAAK,GAAG,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC;IACjC,yCAAyC;IACzC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,GAAG,iBAAiB,CAAC,MAAM,CAAC,GAAG,iBAAiB,CAAC,MAAM,CAAC;IAC5F,GAAG,CAAC;QAAC,UAAU,CAAC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;IAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE;IAC3E,OAAO,oBAAoB,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC;AACtF,CAAC;AACD,+EAA+E;AAC/E,MAAM,UAAU,qBAAqB,CAAC,EAAU;IAC9C,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,MAAM,IAAI,IAAI,EAAE;QAAE,IAAI,GAAG,CAAC,IAAI,GAAG,EAAE,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,iBAAiB,CAAC,MAAM,CAAC;IAC1F,OAAO,oBAAoB,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC;AACvD,CAAC;AACD,MAAM,UAAU,sBAAsB,CAAC,UAAmB,EAAE,EAAE,GAAG,OAAO;IACtE,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;IAC3D,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC;AAClE,CAAC;AACD,MAAM,UAAU,cAAc,CAAC,UAA2B,EAAE,IAAI,GAAoB,GAAG,EAAE,KAAK,GAAU,CAAC,EAAE,IAAI,GAAmB,MAAM,EAAE,KAAK,GAAG,KAAK;IACrJ,OAAO,sBAAsB,UAAU,CAAC,gBAAgB,IAAI,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,IAAI,IAAI,aAAa,IAAI,UAAU,KAAK,EAAE,CAAC;AACrJ,CAAC;AACD,MAAM,UAAU,sBAAsB,CAAC,MAAc;IACnD,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC3C,IAAI,MAAM,KAAK,OAAO;QAAE,OAAO,UAAU,CAAC;IAC1C,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,YAAY,IAAI,MAAM,KAAK,kBAAkB;QAAE,OAAO,MAAM,CAAC;IACnG,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,mBAAmB,CAAgE,KAAQ;IACzG,MAAM,UAAU,GAAG,sBAAsB,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC;IACtE,OAAO,EAAE,GAAG,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,cAAc,CAAC,UAAU,CAAC,EAAE,CAAC;AACzE,CAAC"}

package/dist/agent-appearance.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=agent-appearance.test.d.ts.map

package/dist/agent-appearance.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-appearance.test.d.ts","sourceRoot":"","sources":["../src/agent-appearance.test.ts"],"names":[],"mappings":""}

package/dist/agent-appearance.test.js

@@ -0,0 +1,32 @@
+import { describe, expect, it } from "vitest";
+import { AGENT_PALETTE_IDS, agentAppearanceSchema, appearanceForPalette, legacyAgentAppearance, randomAgentAppearance, resolveAgentAppearance, agentAvatarUrl } from "./agent-appearance.js";
+import { renderAgentSvg } from "./cliplab/static.js";
+describe("agent appearance", () => {
+    it("assigns only the 17 permanent cap palettes", () => {
+        for (let i = 0; i < 100; i++)
+            expect(AGENT_PALETTE_IDS).toContain(randomAgentAppearance().paletteId);
+        expect(agentAppearanceSchema.safeParse({ schemaVersion: 1, characterVersion: "cap-v1", paletteId: "muted-dream" }).success).toBe(false);
+    });
+    it("preserves a saved appearance and resolves legacy IDs deterministically", () => {
+        const appearance = appearanceForPalette("deep-tide");
+        expect(resolveAgentAppearance(appearance, "different-id")).toEqual(appearance);
+        expect(resolveAgentAppearance(null, "agent-1")).toEqual(legacyAgentAppearance("agent-1"));
+        expect(legacyAgentAppearance("agent-1")).toEqual(legacyAgentAppearance("agent-1"));
+        expect(agentAvatarUrl(appearance, 24, 2)).toBe("/api/agent-avatars/cap-v1/deep-tide/rest.png?size=24&scale=2");
+    });
+    it("renders without a browser and preserves logical-size detail at high density", () => {
+        const appearance = appearanceForPalette("bubblegum-sky");
+        // ClipLab v0.2.0 draws an enlarged compact face from 16px; only 12px and
+        // below (not a logical size) is body-only.
+        const small = renderAgentSvg(appearance, 16, 2);
+        expect(small).toContain('width="32"');
+        expect(small).toContain('id="agent-face-visible"');
+        const eyes = renderAgentSvg(appearance, 24, 2);
+        expect(eyes).toContain('width="48"');
+        expect(eyes).toContain('id="agent-face-visible"');
+        expect(eyes).not.toContain('id="agent-candle-light"');
+        expect(renderAgentSvg(appearance, 48, 1)).toContain('id="agent-candle-light"');
+        expect(renderAgentSvg(appearance, 24, 2)).toBe(eyes);
+    });
+});
+//# sourceMappingURL=agent-appearance.test.js.map

package/dist/agent-appearance.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agent-appearance.test.js","sourceRoot":"","sources":["../src/agent-appearance.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,qBAAqB,EAAE,qBAAqB,EAAE,sBAAsB,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC7L,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAErD,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE;YAAE,MAAM,CAAC,iBAAiB,CAAC,CAAC,SAAS,CAAC,qBAAqB,EAAE,CAAC,SAAS,CAAC,CAAC;QACrG,MAAM,CAAC,qBAAqB,CAAC,SAAS,CAAC,EAAE,aAAa,EAAE,CAAC,EAAE,gBAAgB,EAAE,QAAQ,EAAE,SAAS,EAAE,aAAa,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1I,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,wEAAwE,EAAE,GAAG,EAAE;QAChF,MAAM,UAAU,GAAG,oBAAoB,CAAC,WAAW,CAAC,CAAC;QACrD,MAAM,CAAC,sBAAsB,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QAC/E,MAAM,CAAC,sBAAsB,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC,SAAS,CAAC,CAAC,CAAC;QAC1F,MAAM,CAAC,qBAAqB,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC,SAAS,CAAC,CAAC,CAAC;QACnF,MAAM,CAAC,cAAc,CAAC,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,8DAA8D,CAAC,CAAC;IACjH,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,6EAA6E,EAAE,GAAG,EAAE;QACrF,MAAM,UAAU,GAAG,oBAAoB,CAAC,eAAe,CAAC,CAAC;QACzD,yEAAyE;QACzE,2CAA2C;QAC3C,MAAM,KAAK,GAAG,cAAc,CAAC,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QAChD,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QACtC,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,yBAAyB,CAAC,CAAC;QACnD,MAAM,IAAI,GAAG,cAAc,CAAC,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC;QAC/C,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QACrC,MAAM,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,yBAAyB,CAAC,CAAC;QAClD,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,yBAAyB,CAAC,CAAC;QACtD,MAAM,CAAC,cAAc,CAAC,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,yBAAyB,CAAC,CAAC;QAC/E,MAAM,CAAC,cAAc,CAAC,UAAU,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}