@xopcai/xopc 0.0.117 → 0.0.119

package/dist/src/extensions/types/core.d.ts

@@ -13,9 +13,10 @@ import type { TypedEventBus } from './events.js';
 import type { ExtensionHookEvent, ExtensionHookHandler, HookOptions, HookHandlerMap } from './hooks.js';
 import type { ChannelPlugin } from '../../channels/plugin-types.js';
 import type { SessionMetadata } from '../../session/types.js';
-import type { FlagConfig, FlagValue, ShortcutConfig } from './phase4.js';
+import type { FlagConfig, FlagValue, ShortcutConfig } from './registration.js';
 import type { ProviderPlugin } from './providers.js';
 import type { TuiExtensionRegistrar } from './tui.js';
+import type { Migration } from '../../migrations/types.js';
 export interface ExtensionDefinition {
     /** Unique extension identifier */
     id: string;
@@ -120,6 +121,8 @@ export interface ExtensionApi {
      * Register a reload handler when config paths matching this extension change during hot reload.
      */
     registerReload(handler: ExtensionReloadHandler): void;
+    /** Register a migration contributed by this extension. */
+    registerMigration(migration: Migration): void;
     registerService(service: ExtensionService): void;
     registerGatewayMethod(method: string, handler: GatewayMethodHandler): void;
     /**
@@ -199,6 +202,10 @@ export interface ExtensionReloadRegistration {
     /** Config path prefixes this handler cares about. Empty = any extension-related change passed to matcher. */
     configPrefixes: string[];
 }
+export interface ExtensionMigrationRegistration {
+    extensionId: string;
+    migration: Migration;
+}
 /**
  * Chat command registered by an extension (bridged into CommandRegistry with category `extension`).
  */
@@ -237,4 +244,6 @@ export interface ExtensionRegistry {
     getCommand(name: string): ExtensionCommand | undefined;
     addCliRegistration(reg: ExtensionCliRegistration): void;
     getCliRegistrations(): readonly ExtensionCliRegistration[];
+    addMigrationRegistration?(reg: ExtensionMigrationRegistration): void;
+    getMigrationRegistrations?(): readonly ExtensionMigrationRegistration[];
 }

package/dist/src/extensions/types/index.d.ts

@@ -9,6 +9,6 @@ export * from './tools.js';
 export * from './hooks.js';
 export * from './events.js';
 export * from './loader.js';
-export type { ProviderConfig, ProviderApiType, ModelConfig, OAuthConfig, OAuthCallbacks, OAuthCredentials, FlagConfig, FlagValue, ShortcutConfig, ShortcutHandler } from './phase4.js';
+export type { ProviderConfig, ProviderApiType, ModelConfig, OAuthConfig, OAuthCallbacks, OAuthCredentials, FlagConfig, FlagValue, ShortcutConfig, ShortcutHandler } from './registration.js';
 export * from './providers.js';
 export * from './tui.js';

package/dist/src/extensions/types/{phase4.d.ts → registration.d.ts}

@@ -1,7 +1,7 @@
 /**
- * Extension System  Types
+ * Extension registration types.
  *
- * Advanced features: Provider, Flag, Shortcut registration.
+ * Provider, flag, and shortcut registration contracts.
  */
 export interface ProviderConfig {
     name: string;

package/dist/src/gateway/agent-builtin-tools.d.ts

@@ -2,5 +2,5 @@
  * Built-in agent tool `name` values for gateway admin UI (disable toggles).
  * Extension tools are not listed; users can still add arbitrary strings in config.
  */
-export declare const GATEWAY_BUILTIN_TOOL_IDS: readonly ["read_file", "write_file", "edit_file", "list_dir", "grep", "find", "shell", "session_status", "dreaming", "tool_manual", "clarify", "todo", "skills_list", "skill_view", "skill_manage", "web_search", "web_fetch", "web_extract", "send_message", "send_media", "read_media", "create_share", "text_to_speech", "memory_search", "memory_get", "curated_memory", "session_search", "cronjob", "workflow", "delegate_task", "execute_code", "image", "image_generate", "browser_use", "extensions", "bundle-mcp"];
+export declare const GATEWAY_BUILTIN_TOOL_IDS: readonly ["read_file", "write_file", "edit_file", "list_dir", "grep", "find", "shell", "session_status", "dreaming", "tool_manual", "clarify", "todo", "skills_list", "skill_view", "skill_manage", "web_search", "web_fetch", "web_extract", "send_message", "send_media", "read_media", "create_share", "text_to_speech", "memory_search", "memory_get", "curated_memory", "session_search", "automation", "workflow", "delegate_task", "execute_code", "image", "image_generate", "browser_use", "extensions", "bundle-mcp"];
 export type GatewayBuiltinToolId = (typeof GATEWAY_BUILTIN_TOOL_IDS)[number];

package/dist/src/gateway/agent-builtin-tools.js

@@ -31,7 +31,7 @@ const GATEWAY_BUILTIN_TOOL_IDS = [
 	"memory_get",
 	"curated_memory",
 	"session_search",
-	"cronjob",
+	"automation",
 	"workflow",
 	"delegate_task",
 	"execute_code",

package/dist/src/gateway/agent-builtin-tools.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent-builtin-tools.js","names":[],"sources":["../../../src/gateway/agent-builtin-tools.ts"],"sourcesContent":["/**\n * Built-in agent tool `name` values for gateway admin UI (disable toggles).\n * Extension tools are not listed; users can still add arbitrary strings in config.\n */\nexport const GATEWAY_BUILTIN_TOOL_IDS = [\n  'read_file',\n  'write_file',\n  'edit_file',\n  'list_dir',\n  'grep',\n  'find',\n  'shell',\n  'session_status',\n  'dreaming',\n  'tool_manual',\n  'clarify',\n  'todo',\n  'skills_list',\n  'skill_view',\n  'skill_manage',\n  'web_search',\n  'web_fetch',\n  'web_extract',\n  'send_message',\n  'send_media',\n  'read_media',\n  'create_share',\n  'text_to_speech',\n  'memory_search',\n  'memory_get',\n  'curated_memory',\n  'session_search',\n  'cronjob',\n  'workflow',\n  'delegate_task',\n  'execute_code',\n  'image',\n  'image_generate',\n  'browser_use',\n  'extensions',\n  'bundle-mcp',\n] as const;\n\nexport type GatewayBuiltinToolId = (typeof GATEWAY_BUILTIN_TOOL_IDS)[number];\n"],"mappings":";;;;;AAIA,MAAa,2BAA2B;CACtC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACD"}
+{"version":3,"file":"agent-builtin-tools.js","names":[],"sources":["../../../src/gateway/agent-builtin-tools.ts"],"sourcesContent":["/**\n * Built-in agent tool `name` values for gateway admin UI (disable toggles).\n * Extension tools are not listed; users can still add arbitrary strings in config.\n */\nexport const GATEWAY_BUILTIN_TOOL_IDS = [\n  'read_file',\n  'write_file',\n  'edit_file',\n  'list_dir',\n  'grep',\n  'find',\n  'shell',\n  'session_status',\n  'dreaming',\n  'tool_manual',\n  'clarify',\n  'todo',\n  'skills_list',\n  'skill_view',\n  'skill_manage',\n  'web_search',\n  'web_fetch',\n  'web_extract',\n  'send_message',\n  'send_media',\n  'read_media',\n  'create_share',\n  'text_to_speech',\n  'memory_search',\n  'memory_get',\n  'curated_memory',\n  'session_search',\n  'automation',\n  'workflow',\n  'delegate_task',\n  'execute_code',\n  'image',\n  'image_generate',\n  'browser_use',\n  'extensions',\n  'bundle-mcp',\n] as const;\n\nexport type GatewayBuiltinToolId = (typeof GATEWAY_BUILTIN_TOOL_IDS)[number];\n"],"mappings":";;;;;AAIA,MAAa,2BAA2B;CACtC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACD"}

package/dist/src/gateway/agents-admin.d.ts

@@ -95,6 +95,7 @@ export type UpdateAgentBody = {
         defaultRole?: string | null;
         roles?: Record<string, {
             model: string;
+            fallbacks?: string[];
             description?: string;
         }>;
     } | null;
@@ -134,6 +135,13 @@ export declare function writeAgentProfileFile(cfg: Config, agentId: string, name
     agentId: string;
     path: string;
 }>>;
+export declare function readUserProfileFile(): Promise<AgentAdminResult<{
+    content: string;
+    path: string;
+}>>;
+export declare function writeUserProfileFile(content: string): Promise<AgentAdminResult<{
+    path: string;
+}>>;
 export declare function readAgentAvatarFile(cfg: Config, agentId: string): Promise<AgentAdminResult<{
     agentId: string;
     buffer: Buffer;

package/dist/src/gateway/agents-admin.js

@@ -1,14 +1,14 @@
 import { resolveEffectiveAgentManifest } from "../agent-manifest/resolver.js";
-import { DEFAULT_AGENT_ID, init_agent_scope, listAgentEntries, normalizeAgentId, resolveAgentDir, resolveAgentProfileDir, resolveAgentWorkspaceDir, resolveDefaultAgentId, resolveUserPath, validateAgentIdForNewAgent } from "../agent/agent-scope.js";
+import { init_agent_scope, listAgentEntries, normalizeAgentId, resolveAgentDir, resolveAgentProfileDir, resolveAgentWorkspaceDir, resolveDefaultAgentId, resolveUserPath, validateAgentIdForNewAgent } from "../agent/agent-scope.js";
 import { resolveEffectiveAgentProfile } from "../config/agent-profile.js";
-import { WORKSPACE_FILES, init_paths } from "../config/paths.js";
-import { AGENT_PROFILE_MARKDOWN_SYSTEM_FILES } from "../agent/context/workspace.js";
+import { WORKSPACE_FILES, init_paths, resolveUserProfilePath } from "../config/paths.js";
+import { AGENT_PROFILE_MARKDOWN_SYSTEM_FILES, REQUIRED_AGENT_PROFILE_MARKDOWN_FILE_SET } from "../agent/context/workspace.js";
 import { isPathUnderWorkspace, resolveWorkspaceSafePath } from "./workspace-editor-path.js";
-import { applyAgentConfig, findAgentEntryIndex, pruneAgentConfig, removeAgentDirsFromDisk } from "../commands/agents.config.js";
+import { applyAgentConfig, findAgentEntryIndex, getAgentDeleteBlocker, pruneAgentConfig, removeAgentDirsFromDisk } from "../commands/agents.config.js";
 import { resolveEffectiveTypedModels } from "../config/agent-typed-models.js";
 import { GATEWAY_BUILTIN_TOOL_IDS } from "./agent-builtin-tools.js";
 import { seedAgentProfileMarkdownFiles } from "../agent/context/workspace-seed.js";
-import { join, resolve } from "node:path";
+import { dirname, join, resolve } from "node:path";
 import { cp, mkdir, readFile, readdir, realpath, stat, unlink, writeFile } from "node:fs/promises";
 //#region src/gateway/agents-admin.ts
 /**
@@ -121,7 +121,8 @@ function getGatewayAgentEffectiveManifest(cfg, agentIdRaw) {
 			ok: true,
 			data: resolveEffectiveAgentManifest({
 				agent: entry,
-				presets: cfg.agents.capabilityPresets
+				presets: cfg.agents.capabilityPresets,
+				defaultPresetId: cfg.agents.defaultPreset
 			})
 		};
 	} catch (err) {
@@ -132,14 +133,6 @@ function getGatewayAgentEffectiveManifest(cfg, agentIdRaw) {
 		};
 	}
 }
-function requireNonMain(id) {
-	if (normalizeAgentId(id) === "main") return {
-		ok: false,
-		error: `"${DEFAULT_AGENT_ID}" is reserved`,
-		status: 400
-	};
-	return null;
-}
 function prepareCreateAgent(cfg, body) {
 	const workspace = body.workspace?.trim() ?? "";
 	if (!workspace) return {
@@ -269,10 +262,6 @@ function prepareUpdateAgent(cfg, agentIdRaw, body) {
 			},
 			responsibilities: { primary: ["Help the user complete tasks"] },
 			workspace: { root: `~/.xopc/workspace/${agentId}` },
-			models: {
-				defaultRole: "deep",
-				roles: { deep: { model: "openai/gpt-4.1" } }
-			},
 			tools: { builtin: {} },
 			skills: { mode: "all" },
 			memory: {
@@ -309,11 +298,7 @@ function prepareUpdateAgent(cfg, agentIdRaw, body) {
 		if (nextExtends.length > 0) entry.extends = nextExtends;
 		else delete entry.extends;
 	}
-	if (body.models !== void 0) if (body.models === null) return {
-		ok: false,
-		error: "models cannot be null; every agent manifest needs model roles",
-		status: 400
-	};
+	if (body.models !== void 0) if (body.models === null) delete entry.models;
 	else {
 		if (body.models.defaultRole !== void 0) {
 			if (body.models.defaultRole === null || !body.models.defaultRole.trim()) return {
@@ -322,8 +307,9 @@ function prepareUpdateAgent(cfg, agentIdRaw, body) {
 				status: 400
 			};
 			entry.models = {
-				...entry.models,
-				defaultRole: body.models.defaultRole.trim()
+				defaultRole: body.models.defaultRole.trim(),
+				roles: entry.models?.roles ?? {},
+				...entry.models?.policy ? { policy: entry.models.policy } : {}
 			};
 		}
 		if (Object.hasOwn(body.models, "roles")) {
@@ -331,22 +317,31 @@ function prepareUpdateAgent(cfg, agentIdRaw, body) {
 				const roles = Object.fromEntries(Object.entries(body.models.roles).map(([id, row]) => ({
 					id: id.trim(),
 					model: row.model.trim(),
+					fallbacks: (row.fallbacks ?? []).map((ref) => ref.trim()).filter(Boolean),
 					description: row.description?.trim()
-				})).filter((row) => row.id && row.model).map((row) => [row.id, row.description ? {
+				})).filter((row) => row.id && row.model).map((row) => [row.id, {
 					model: row.model,
-					description: row.description
-				} : { model: row.model }]));
+					...row.fallbacks.length > 0 ? { fallbacks: row.fallbacks } : {},
+					...row.description ? { description: row.description } : {}
+				}]));
 				entry.models = {
-					...entry.models,
-					roles
+					defaultRole: entry.models?.defaultRole ?? Object.keys(roles)[0] ?? "deep",
+					roles,
+					...entry.models?.policy ? { policy: entry.models.policy } : {}
 				};
 			}
 		}
-		if (!entry.models.roles[entry.models.defaultRole]) return {
+		const roles = entry.models?.roles ?? {};
+		const defaultRole = entry.models?.defaultRole ?? Object.keys(roles)[0];
+		if (!defaultRole || !roles[defaultRole]) return {
 			ok: false,
 			error: "models.defaultRole must reference models.roles",
 			status: 400
 		};
+		entry.models = {
+			...entry.models,
+			defaultRole
+		};
 	}
 	if (body.skills !== void 0) if (body.skills === null) entry.skills = { mode: "all" };
 	else {
@@ -385,8 +380,12 @@ function prepareUpdateAgent(cfg, agentIdRaw, body) {
 }
 function prepareDeleteAgent(cfg, agentIdRaw) {
 	const agentId = normalizeAgentId(agentIdRaw);
-	const reserved = requireNonMain(agentId);
-	if (reserved) return reserved;
+	const blocker = getAgentDeleteBlocker(cfg, agentId);
+	if (blocker) return {
+		ok: false,
+		error: blocker,
+		status: 400
+	};
 	if (findAgentEntryIndex(listAgentEntries(cfg), agentId) < 0) return {
 		ok: false,
 		error: `agent "${agentId}" not found`,
@@ -444,6 +443,7 @@ async function listAgentProfileFiles(cfg, agentId) {
 				updatedAtMs: st.mtimeMs
 			});
 		} catch {
+			if (!REQUIRED_AGENT_PROFILE_MARKDOWN_FILE_SET.has(name)) continue;
 			files.push({
 				name,
 				missing: true
@@ -521,6 +521,35 @@ async function writeAgentProfileFile(cfg, agentId, name, content) {
 		}
 	};
 }
+async function readUserProfileFile() {
+	const path = resolveUserProfilePath();
+	try {
+		return {
+			ok: true,
+			data: {
+				content: await readFile(path, "utf-8"),
+				path
+			}
+		};
+	} catch {
+		return {
+			ok: true,
+			data: {
+				content: "",
+				path
+			}
+		};
+	}
+}
+async function writeUserProfileFile(content) {
+	const path = resolveUserProfilePath();
+	await mkdir(dirname(path), { recursive: true });
+	await writeFile(path, content, "utf-8");
+	return {
+		ok: true,
+		data: { path }
+	};
+}
 const AGENT_AVATAR_MAX_BYTES = 512 * 1024;
 const AGENT_AVATAR_BASENAME = "agent-avatar";
 const AGENT_AVATAR_EXTENSIONS = [
@@ -668,6 +697,6 @@ async function deleteAgentAvatarFile(cfg, agentId) {
 	};
 }
 //#endregion
-export { deleteAgentAvatarFile, extractAvatarFromIdentityMarkdown, finalizeCreateAgentDirs, getGatewayAgentEffectiveManifest, listAgentProfileFiles, listGatewayAgents, parseIdentityMarkdown, prepareCreateAgent, prepareDeleteAgent, prepareUpdateAgent, readAgentAvatarFile, readAgentProfileFile, runAfterDeletePurge, writeAgentAvatarFromBase64, writeAgentProfileFile };
+export { deleteAgentAvatarFile, extractAvatarFromIdentityMarkdown, finalizeCreateAgentDirs, getGatewayAgentEffectiveManifest, listAgentProfileFiles, listGatewayAgents, parseIdentityMarkdown, prepareCreateAgent, prepareDeleteAgent, prepareUpdateAgent, readAgentAvatarFile, readAgentProfileFile, readUserProfileFile, runAfterDeletePurge, writeAgentAvatarFromBase64, writeAgentProfileFile, writeUserProfileFile };
 
 //# sourceMappingURL=agents-admin.js.map

package/dist/src/gateway/agents-admin.js.map

@@ -1 +1 @@
-{"version":3,"file":"agents-admin.js","names":["pathResolve"],"sources":["../../../src/gateway/agents-admin.ts"],"sourcesContent":["/**\n * Gateway REST helpers for multi-agent management.\n */\n\nimport { cp, mkdir, readdir, readFile, realpath, stat, unlink, writeFile } from 'node:fs/promises';\nimport { join, resolve as pathResolve } from 'node:path';\n\nimport {\n  DEFAULT_AGENT_ID,\n  listAgentEntries,\n  normalizeAgentId,\n  resolveAgentDir,\n  resolveAgentProfileDir,\n  resolveAgentWorkspaceDir,\n  resolveDefaultAgentId,\n  resolveUserPath,\n  validateAgentIdForNewAgent,\n} from '../agent/agent-scope.js';\nimport { AGENT_PROFILE_MARKDOWN_SYSTEM_FILES } from '../agent/context/workspace.js';\nimport { seedAgentProfileMarkdownFiles } from '../agent/context/workspace-seed.js';\nimport {\n  resolveEffectiveAgentManifest,\n  type ResolveManifestResult,\n} from '../agent-manifest/resolver.js';\nimport {\n  applyAgentConfig,\n  findAgentEntryIndex,\n  pruneAgentConfig,\n  removeAgentDirsFromDisk,\n} from '../commands/agents.config.js';\nimport type { AgentModelsConfig, Config } from '../config/schema.js';\nimport { WORKSPACE_FILES } from '../config/paths.js';\nimport { resolveEffectiveAgentProfile } from '../config/agent-profile.js';\nimport type { AgentTypedModel } from '../config/schema.js';\nimport { resolveEffectiveTypedModels } from '../config/agent-typed-models.js';\nimport { GATEWAY_BUILTIN_TOOL_IDS } from './agent-builtin-tools.js';\nimport { isPathUnderWorkspace, resolveWorkspaceSafePath } from './workspace-editor-path.js';\n\nconst EDITABLE_PROFILE_MARKDOWN_NAMES = new Set<string>([...AGENT_PROFILE_MARKDOWN_SYSTEM_FILES]);\n\nexport type GatewayAgentTypedModelsInfo = {\n  defaultRole: string;\n  preset: AgentTypedModel[];\n  entry?: AgentTypedModel[];\n  effective: AgentTypedModel[];\n};\n\nexport type GatewayAgentRow = {\n  id: string;\n  name?: string;\n  description?: string;\n  language?: string;\n  /** Value from `IDENTITY.md` **Avatar:** line when present (may be URL, `xopc:…`, etc.). */\n  avatar?: string;\n  workspace: string;\n  /** Absolute directory for profile Markdown (`SOUL.md`, …) and gateway avatars: `agents/<id>/profile/`. */\n  profileDir: string;\n  model?: { primary?: string; fallbacks?: string[] };\n  typedModels: GatewayAgentTypedModelsInfo;\n  extends: string[];\n  isDefault: boolean;\n  skills: {\n    preset: string[];\n    entry?: string[];\n    effectiveAllowlist?: string[];\n  };\n  tools: {\n    presetDenied: string[];\n    entryDisable: string[];\n    effectiveDisable: string[];\n  };\n};\n\nexport type GatewayAgentsListResponse = {\n  defaultId: string;\n  agents: GatewayAgentRow[];\n  builtinToolIds: string[];\n};\n\nexport type GatewayAgentEffectiveManifestResponse = ResolveManifestResult;\n\nfunction collectAgentIdsForList(cfg: Config): string[] {\n  const entries = listAgentEntries(cfg).filter((e) => e.enabled !== false);\n  const defaultId = resolveDefaultAgentId(cfg);\n  if (entries.length === 0) {\n    return [defaultId];\n  }\n  const ids = new Set<string>();\n  for (const e of entries) {\n    ids.add(normalizeAgentId(e.id));\n  }\n  ids.add(defaultId);\n  return [...ids];\n}\n\nfunction rolesToTypedModels(\n  roles: Record<string, { model: string; description?: string }> | undefined,\n): AgentTypedModel[] {\n  return Object.entries(roles ?? {})\n    .map(([id, role]) => ({ id, ...role }))\n    .sort((a, b) => a.id.localeCompare(b.id));\n}\n\n/** Extract `**Avatar:**` value from profile IDENTITY.md (same line shape as the gateway console parser). */\nexport function extractAvatarFromIdentityMarkdown(content: string): string | undefined {\n  return parseIdentityMarkdown(content).avatar || undefined;\n}\n\nexport function parseIdentityMarkdown(content: string): {\n  name?: string;\n  description?: string;\n  language?: string;\n  avatar?: string;\n} {\n  const out: { name?: string; description?: string; language?: string; avatar?: string } = {};\n  for (const line of content.split('\\n')) {\n    const match = line.match(/^[-*]\\s+\\*\\*(Name|Description|Language|Avatar):\\*\\*\\s*(.*)/i);\n    if (match) {\n      const key = match[1]?.toLowerCase();\n      const v = match[2]?.trim() ?? '';\n      if (!v || /^_\\(.*\\)_$/.test(v)) continue;\n      if (key === 'name') out.name = v;\n      if (key === 'description') out.description = v;\n      if (key === 'language') out.language = v;\n      if (key === 'avatar') out.avatar = v;\n    }\n  }\n  return out;\n}\n\nexport async function listGatewayAgents(\n  cfg: Config,\n  _options: { locale?: string } = {},\n): Promise<GatewayAgentsListResponse> {\n  const defaultId = resolveDefaultAgentId(cfg);\n  const agents: GatewayAgentRow[] = [];\n  const presetSkills: string[] | undefined = undefined;\n  const presetDenied: string[] = [];\n  const presetTypedModels: ReturnType<typeof rolesToTypedModels> = [];\n  for (const id of collectAgentIdsForList(cfg)) {\n    const profile = resolveEffectiveAgentProfile(cfg, id);\n    const entry = listAgentEntries(cfg).find((e) => normalizeAgentId(e.id) === id);\n    const model =\n      profile.primaryModelRef || profile.fallbacks.length > 0\n        ? {\n            ...(profile.primaryModelRef ? { primary: profile.primaryModelRef } : {}),\n            ...(profile.fallbacks.length > 0 ? { fallbacks: profile.fallbacks } : {}),\n          }\n        : undefined;\n    const entrySkills = entry?.skills.mode === 'allowlist' ? entry.skills.allow ?? [] : undefined;\n    const entryDisable = Object.entries(entry?.tools.builtin ?? {})\n      .filter(([, policy]) => policy.mode === 'deny')\n      .map(([name]) => name);\n    const entryTypedModels = rolesToTypedModels(entry?.models?.roles);\n    const effectiveTypedModels = [...resolveEffectiveTypedModels(cfg, id).values()].sort((a, b) =>\n      a.id.localeCompare(b.id),\n    );\n    let identity: ReturnType<typeof parseIdentityMarkdown> = {};\n    try {\n      const identityPath = join(resolveAgentProfileDir(cfg, id), WORKSPACE_FILES.IDENTITY);\n      const content = await readFile(identityPath, 'utf-8');\n      identity = parseIdentityMarkdown(content);\n    } catch {\n      /* missing IDENTITY.md or unreadable */\n    }\n    agents.push({\n      id,\n      ...(identity.name ? { name: identity.name } : {}),\n      ...(identity.description ? { description: identity.description } : {}),\n      ...(identity.language ? { language: identity.language } : {}),\n      ...(identity.avatar ? { avatar: identity.avatar } : {}),\n      workspace: profile.resolvedWorkspacePath,\n      profileDir: resolveAgentProfileDir(cfg, id),\n      ...(model ? { model } : {}),\n      typedModels: {\n        defaultRole: profile.manifest.models.defaultRole,\n        preset: [...presetTypedModels],\n        ...(entryTypedModels.length > 0 ? { entry: entryTypedModels } : {}),\n        effective: effectiveTypedModels,\n      },\n      extends: [...(entry?.extends ?? [])],\n      isDefault: id === defaultId,\n      skills: {\n        preset: presetSkills ? [...presetSkills] : [],\n        ...(entrySkills !== undefined ? { entry: [...entrySkills] } : {}),\n        ...(profile.skillsAllowlist !== undefined\n          ? { effectiveAllowlist: [...profile.skillsAllowlist] }\n          : {}),\n      },\n      tools: {\n        presetDenied: [...presetDenied],\n        entryDisable: [...entryDisable],\n        effectiveDisable: [...profile.tools.denied].sort((a, b) => a.localeCompare(b)),\n      },\n    });\n  }\n  agents.sort((a, b) => a.id.localeCompare(b.id));\n  return { defaultId, agents, builtinToolIds: [...GATEWAY_BUILTIN_TOOL_IDS] };\n}\n\nexport function getGatewayAgentEffectiveManifest(\n  cfg: Config,\n  agentIdRaw: string,\n): AgentAdminResult<GatewayAgentEffectiveManifestResponse> {\n  const agentId = normalizeAgentId(agentIdRaw);\n  const entry = listAgentEntries(cfg).find((e) => normalizeAgentId(e.id) === agentId);\n  if (!entry) {\n    return { ok: false, error: `agent \"${agentId}\" not found`, status: 404 };\n  }\n  try {\n    return {\n      ok: true,\n      data: resolveEffectiveAgentManifest({\n        agent: entry,\n        presets: cfg.agents.capabilityPresets,\n      }),\n    };\n  } catch (err) {\n    return {\n      ok: false,\n      error: err instanceof Error ? err.message : String(err),\n      status: 400,\n    };\n  }\n}\n\nexport type CreateAgentBody = {\n  /** Optional id seed; normalized agent id defaults from `profileFiles[\"IDENTITY.md\"]` name when omitted. */\n  id?: string;\n  workspace: string;\n  models?: AgentModelsConfig;\n  /** Initial `agents.list[].skills` for the new entry. */\n  skills?: string[];\n  /** Initial `agents.list[].tools` for the new entry. */\n  tools?: NonNullable<Config['agents']['list']>[number]['tools'];\n  /** Profile markdown files to write after seeding (e.g. `IDENTITY.md`, `SOUL.md`). */\n  profileFiles?: Record<string, string>;\n  /** Clone from an existing agent id — copies config entry fields and profile directory. */\n  cloneFrom?: string;\n};\n\nexport type AgentAdminHttpStatus = 400 | 404 | 409;\n\nexport type AgentAdminResult<T> =\n  | { ok: true; data: T }\n  | { ok: false; error: string; status?: AgentAdminHttpStatus };\n\nfunction requireNonMain(id: string): AgentAdminResult<never> | null {\n  if (normalizeAgentId(id) === DEFAULT_AGENT_ID) {\n    return { ok: false, error: `\"${DEFAULT_AGENT_ID}\" is reserved`, status: 400 };\n  }\n  return null;\n}\n\nexport function prepareCreateAgent(\n  cfg: Config,\n  body: CreateAgentBody,\n): AgentAdminResult<{ nextConfig: Config; agentId: string; workspace: string }> {\n  const workspace = body.workspace?.trim() ?? '';\n  if (!workspace) {\n    return { ok: false, error: 'workspace is required', status: 400 };\n  }\n  if (body.profileFiles !== undefined) {\n    if (typeof body.profileFiles !== 'object' || body.profileFiles === null || Array.isArray(body.profileFiles)) {\n      return { ok: false, error: 'profileFiles must be an object', status: 400 };\n    }\n    for (const [name, content] of Object.entries(body.profileFiles)) {\n      const bad = assertAllowedFile(name);\n      if (bad) {\n        return bad;\n      }\n      if (typeof content !== 'string') {\n        return { ok: false, error: `profileFiles[\"${name}\"] must be a string`, status: 400 };\n      }\n    }\n  }\n  if (!body.cloneFrom && typeof body.profileFiles?.[WORKSPACE_FILES.IDENTITY] !== 'string') {\n    return { ok: false, error: `profileFiles[\"${WORKSPACE_FILES.IDENTITY}\"] is required`, status: 400 };\n  }\n\n  const identity = body.profileFiles?.[WORKSPACE_FILES.IDENTITY]\n    ? parseIdentityMarkdown(body.profileFiles[WORKSPACE_FILES.IDENTITY])\n    : {};\n  const nameSeed = identity.name ?? body.id ?? '';\n  const idRes = validateAgentIdForNewAgent(body.id, nameSeed);\n  if (idRes.ok === false) {\n    return { ok: false, error: idRes.error, status: 400 };\n  }\n  const agentId = idRes.agentId;\n  if (findAgentEntryIndex(listAgentEntries(cfg), agentId) >= 0) {\n    return { ok: false, error: `agent \"${agentId}\" already exists`, status: 409 };\n  }\n\n  // Resolve fields from cloneFrom source when present\n  let cloneSourceEntry: ReturnType<typeof listAgentEntries>[number] | undefined;\n  if (body.cloneFrom) {\n    const srcId = normalizeAgentId(body.cloneFrom);\n    cloneSourceEntry = listAgentEntries(cfg).find((e) => normalizeAgentId(e.id) === srcId);\n    if (!cloneSourceEntry && srcId !== resolveDefaultAgentId(cfg)) {\n      return { ok: false, error: `source agent \"${srcId}\" not found`, status: 404 };\n    }\n  }\n\n  const wsAbs = resolveUserPath(workspace);\n\n  const rawModels = body.models ?? cloneSourceEntry?.models;\n  const effectiveModels =\n    rawModels?.roles\n      ? {\n          defaultRole: rawModels.defaultRole ?? Object.keys(rawModels.roles)[0] ?? 'deep',\n          roles: rawModels.roles,\n        }\n      : undefined;\n  if (effectiveModels && !effectiveModels.roles[effectiveModels.defaultRole]) {\n    return { ok: false, error: 'models.defaultRole must reference models.roles', status: 400 };\n  }\n\n  let next = applyAgentConfig(cfg, {\n    agentId,\n    workspace: wsAbs,\n    ...(effectiveModels ? { models: effectiveModels } : {}),\n    ...(body.skills !== undefined\n      ? { skills: body.skills.map((s) => String(s).trim()).filter(Boolean) }\n      : cloneSourceEntry?.skills.mode === 'allowlist' && body.cloneFrom\n        ? { skills: [...(cloneSourceEntry.skills.allow ?? [])] }\n        : {}),\n    ...(body.tools !== undefined ? { tools: body.tools } : cloneSourceEntry?.tools && body.cloneFrom ? { tools: cloneSourceEntry.tools } : {}),\n  });\n\n  return { ok: true, data: { nextConfig: next, agentId, workspace: wsAbs } };\n}\n\nexport async function finalizeCreateAgentDirs(\n  cfg: Config,\n  agentId: string,\n  opts?: { profileFiles?: Record<string, string>; cloneFrom?: string },\n): Promise<AgentAdminResult<void>> {\n  const wsPath = resolveAgentWorkspaceDir(cfg, agentId);\n  const profilePath = resolveAgentProfileDir(cfg, agentId);\n  const adPath = resolveAgentDir(cfg, agentId);\n  await mkdir(wsPath, { recursive: true });\n  await mkdir(profilePath, { recursive: true });\n  await mkdir(adPath, { recursive: true });\n  const id = normalizeAgentId(agentId);\n  const displayName = opts?.profileFiles?.[WORKSPACE_FILES.IDENTITY]\n    ? (parseIdentityMarkdown(opts.profileFiles[WORKSPACE_FILES.IDENTITY]).name ?? id)\n    : id;\n\n  // When cloning, copy the entire source profile directory instead of seeding\n  if (opts?.cloneFrom) {\n    const srcProfilePath = resolveAgentProfileDir(cfg, normalizeAgentId(opts.cloneFrom));\n    try {\n      const srcStat = await stat(srcProfilePath);\n      if (srcStat.isDirectory()) {\n        const srcFiles = await readdir(srcProfilePath);\n        for (const fileName of srcFiles) {\n          const srcFile = join(srcProfilePath, fileName);\n          const dstFile = join(profilePath, fileName);\n          try {\n            const fileStat = await stat(srcFile);\n            if (fileStat.isFile()) {\n              await cp(srcFile, dstFile);\n            }\n          } catch {\n            /* skip unreadable files */\n          }\n        }\n      }\n    } catch {\n      // Source profile dir doesn't exist — fall through to normal seed\n      seedAgentProfileMarkdownFiles(profilePath, wsPath, { displayName });\n    }\n  } else {\n    seedAgentProfileMarkdownFiles(profilePath, wsPath, { displayName });\n  }\n\n  const profileFiles = opts?.profileFiles;\n  if (profileFiles && Object.keys(profileFiles).length > 0) {\n    for (const [name, content] of Object.entries(profileFiles)) {\n      const written = await writeAgentProfileFile(cfg, agentId, name, content);\n      if (written.ok === false) {\n        return written;\n      }\n    }\n  }\n\n  return { ok: true, data: undefined };\n}\n\nexport type UpdateAgentBody = {\n  workspace?: string;\n  extends?: string[];\n  models?: {\n    defaultRole?: string | null;\n    roles?: Record<string, { model: string; description?: string }>;\n  } | null;\n  setDefault?: boolean;\n  /** Replace `agents.list[].skills`; `null` resets to all skills. */\n  skills?: string[] | null;\n  /** Replace `agents.list[].tools`; `null` resets to no explicit policies. */\n  tools?: NonNullable<Config['agents']['list']>[number]['tools'] | null;\n  /** Replace `agents.list[].memory`; every agent manifest owns its memory policy. */\n  memory?: NonNullable<Config['agents']['list']>[number]['memory'];\n};\n\nexport function prepareUpdateAgent(\n  cfg: Config,\n  agentIdRaw: string,\n  body: UpdateAgentBody,\n): AgentAdminResult<{ nextConfig: Config }> {\n  const agentId = normalizeAgentId(agentIdRaw);\n  let list = [...listAgentEntries(cfg)];\n  let idx = findAgentEntryIndex(list, agentId);\n  if (idx < 0 && agentId === resolveDefaultAgentId(cfg)) {\n    list = [...list, {\n      id: agentId,\n      enabled: true as const,\n      identity: { name: agentId, role: 'Agent', language: 'en', tone: 'direct' },\n      responsibilities: { primary: ['Help the user complete tasks'] },\n      workspace: { root: `~/.xopc/workspace/${agentId}` },\n      models: { defaultRole: 'deep', roles: { deep: { model: 'openai/gpt-4.1' } } },\n      tools: { builtin: {} },\n      skills: { mode: 'all' },\n      memory: { mode: 'confirmWrite', sources: ['session', 'curated'], writePolicy: { curated: 'confirm' } },\n      workflows: {},\n      boundaries: { requiresConfirmation: [], forbidden: [], escalation: [] },\n    }];\n    idx = list.length - 1;\n  }\n  if (idx < 0) {\n    return { ok: false, error: `agent \"${agentId}\" not found`, status: 404 };\n  }\n\n  type Entry = (typeof list)[number];\n  const entry: Entry = { ...list[idx] };\n\n  if (body.workspace !== undefined) {\n    const w = body.workspace.trim();\n    if (w) {\n      entry.workspace = { root: resolveUserPath(w) };\n    }\n  }\n  if (body.extends !== undefined) {\n    const nextExtends = Array.from(new Set(body.extends.map((id) => normalizeAgentId(id)).filter(Boolean)));\n    for (const presetId of nextExtends) {\n      if (!cfg.agents.capabilityPresets[presetId]) {\n        return { ok: false, error: `capability preset \"${presetId}\" not found`, status: 400 };\n      }\n    }\n    if (nextExtends.length > 0) {\n      entry.extends = nextExtends;\n    } else {\n      delete entry.extends;\n    }\n  }\n  if (body.models !== undefined) {\n    if (body.models === null) {\n      return { ok: false, error: 'models cannot be null; every agent manifest needs model roles', status: 400 };\n    } else {\n      if (body.models.defaultRole !== undefined) {\n        if (body.models.defaultRole === null || !body.models.defaultRole.trim()) {\n          return { ok: false, error: 'models.defaultRole must be a non-empty string', status: 400 };\n        }\n        entry.models = { ...entry.models, defaultRole: body.models.defaultRole.trim() };\n      }\n      if (Object.hasOwn(body.models, 'roles')) {\n        if (body.models.roles !== undefined) {\n          const roles = Object.fromEntries(\n            Object.entries(body.models.roles)\n              .map(([id, row]) => ({\n                id: id.trim(),\n                model: row.model.trim(),\n                description: row.description?.trim(),\n              }))\n              .filter((row) => row.id && row.model)\n              .map((row) => [\n                row.id,\n                row.description ? { model: row.model, description: row.description } : { model: row.model },\n              ]),\n          );\n          entry.models = { ...entry.models, roles };\n        }\n      }\n      if (!entry.models.roles[entry.models.defaultRole]) {\n        return { ok: false, error: 'models.defaultRole must reference models.roles', status: 400 };\n      }\n    }\n  }\n\n  if (body.skills !== undefined) {\n    if (body.skills === null) {\n      entry.skills = { mode: 'all' };\n    } else {\n      const next = body.skills.map((s) => String(s).trim()).filter(Boolean);\n      if (next.length === 0) {\n        entry.skills = { mode: 'allowlist', allow: [] };\n      } else {\n        entry.skills = { mode: 'allowlist', allow: next };\n      }\n    }\n  }\n\n  if (body.tools !== undefined) {\n    if (body.tools === null) {\n      entry.tools = { builtin: {} };\n    } else {\n      entry.tools = body.tools;\n    }\n  }\n\n  if (body.memory !== undefined) {\n    entry.memory = body.memory;\n  }\n\n  list[idx] = entry;\n  let next: Config = {\n    ...cfg,\n    agents: {\n      ...cfg.agents,\n      list,\n    },\n  };\n\n  if (body.setDefault === true) {\n    next = {\n      ...next,\n      agents: {\n        ...next.agents,\n        default: agentId,\n      },\n    };\n  }\n  return { ok: true, data: { nextConfig: next } };\n}\n\nexport function prepareDeleteAgent(\n  cfg: Config,\n  agentIdRaw: string,\n): AgentAdminResult<{ nextConfig: Config; agentId: string }> {\n  const agentId = normalizeAgentId(agentIdRaw);\n  const reserved = requireNonMain(agentId);\n  if (reserved) {\n    return reserved;\n  }\n  if (findAgentEntryIndex(listAgentEntries(cfg), agentId) < 0) {\n    return { ok: false, error: `agent \"${agentId}\" not found`, status: 404 };\n  }\n  const { config: pruned } = pruneAgentConfig(cfg, agentId);\n  return { ok: true, data: { nextConfig: pruned, agentId } };\n}\n\nexport async function runAfterDeletePurge(cfg: Config, agentId: string): Promise<void> {\n  await removeAgentDirsFromDisk(cfg, agentId);\n}\n\nexport type AgentFileEntry = {\n  name: string;\n  missing: boolean;\n  size?: number;\n  updatedAtMs?: number;\n};\n\nasync function profileMarkdownRootReal(cfg: Config, agentId: string): Promise<string> {\n  const dir = resolveAgentProfileDir(cfg, agentId);\n  await mkdir(dir, { recursive: true });\n  try {\n    return await realpath(dir);\n  } catch {\n    return pathResolve(dir);\n  }\n}\n\nfunction assertAllowedFile(name: string): AgentAdminResult<never> | null {\n  if (!name || name.includes('/') || name.includes('\\\\') || !EDITABLE_PROFILE_MARKDOWN_NAMES.has(name)) {\n    return { ok: false, error: `unsupported file \"${name}\"`, status: 400 };\n  }\n  return null;\n}\n\nexport async function listAgentProfileFiles(\n  cfg: Config,\n  agentId: string,\n): Promise<AgentAdminResult<{ agentId: string; profileDir: string; files: AgentFileEntry[] }>> {\n  const id = normalizeAgentId(agentId);\n  if (collectAgentIdsForList(cfg).every((x) => x !== id)) {\n    return { ok: false, error: `agent \"${id}\" not found`, status: 404 };\n  }\n  const root = await profileMarkdownRootReal(cfg, id);\n  const names = [...EDITABLE_PROFILE_MARKDOWN_NAMES];\n  const files: AgentFileEntry[] = [];\n  for (const name of names.sort((a, b) => a.localeCompare(b))) {\n    const abs = resolveWorkspaceSafePath(root, name);\n    if (!abs) {\n      continue;\n    }\n    try {\n      const st = await stat(abs);\n      if (!st.isFile()) {\n        continue;\n      }\n      files.push({\n        name,\n        missing: false,\n        size: st.size,\n        updatedAtMs: st.mtimeMs,\n      });\n    } catch {\n      files.push({ name, missing: true });\n    }\n  }\n  files.sort((a, b) => a.name.localeCompare(b.name));\n  return { ok: true, data: { agentId: id, profileDir: root, files } };\n}\n\nexport async function readAgentProfileFile(\n  cfg: Config,\n  agentId: string,\n  name: string,\n): Promise<AgentAdminResult<{ agentId: string; content: string; path: string }>> {\n  const bad = assertAllowedFile(name);\n  if (bad) {\n    return bad;\n  }\n  const id = normalizeAgentId(agentId);\n  if (collectAgentIdsForList(cfg).every((x) => x !== id)) {\n    return { ok: false, error: `agent \"${id}\" not found`, status: 404 };\n  }\n  const root = await profileMarkdownRootReal(cfg, id);\n  const abs = resolveWorkspaceSafePath(root, name);\n  if (!abs) {\n    return { ok: false, error: 'invalid path', status: 400 };\n  }\n  try {\n    const content = await readFile(abs, 'utf-8');\n    return { ok: true, data: { agentId: id, content, path: abs } };\n  } catch {\n    return { ok: false, error: 'file not found', status: 404 };\n  }\n}\n\nexport async function writeAgentProfileFile(\n  cfg: Config,\n  agentId: string,\n  name: string,\n  content: string,\n): Promise<AgentAdminResult<{ agentId: string; path: string }>> {\n  const bad = assertAllowedFile(name);\n  if (bad) {\n    return bad;\n  }\n  const id = normalizeAgentId(agentId);\n  if (collectAgentIdsForList(cfg).every((x) => x !== id)) {\n    return { ok: false, error: `agent \"${id}\" not found`, status: 404 };\n  }\n  const root = await profileMarkdownRootReal(cfg, id);\n  const abs = resolveWorkspaceSafePath(root, name);\n  if (!abs) {\n    return { ok: false, error: 'invalid path', status: 400 };\n  }\n  const rootReal = await profileMarkdownRootReal(cfg, id);\n  if (!isPathUnderWorkspace(rootReal, abs)) {\n    return { ok: false, error: 'path escapes profile markdown root', status: 400 };\n  }\n  await writeFile(abs, content, 'utf-8');\n  return { ok: true, data: { agentId: id, path: abs } };\n}\n\n// ---------------------------------------------------------------------------\n// Binary agent avatar (profile markdown root dir, not a SOUL/IDENTITY markdown file)\n// ---------------------------------------------------------------------------\n\nconst AGENT_AVATAR_MAX_BYTES = 512 * 1024;\nconst AGENT_AVATAR_BASENAME = 'agent-avatar';\n\nconst AGENT_AVATAR_EXTENSIONS = ['.png', '.jpg', '.jpeg', '.webp'] as const;\n\nfunction agentAvatarFilenames(): string[] {\n  return AGENT_AVATAR_EXTENSIONS.map((ext) => `${AGENT_AVATAR_BASENAME}${ext}`);\n}\n\nfunction mimeToExt(mime: string): '.png' | '.jpg' | '.jpeg' | '.webp' | null {\n  const m = mime.toLowerCase().trim();\n  if (m === 'image/png') return '.png';\n  if (m === 'image/jpeg' || m === 'image/jpg') return '.jpg';\n  if (m === 'image/webp') return '.webp';\n  return null;\n}\n\nfunction detectImageMimeFromBytes(buf: Uint8Array): 'image/png' | 'image/jpeg' | 'image/webp' | null {\n  if (buf.length >= 8 && buf[0] === 0x89 && buf[1] === 0x50 && buf[2] === 0x4e && buf[3] === 0x47) {\n    return 'image/png';\n  }\n  if (buf.length >= 3 && buf[0] === 0xff && buf[1] === 0xd8 && buf[2] === 0xff) {\n    return 'image/jpeg';\n  }\n  if (\n    buf.length >= 12 &&\n    buf[0] === 0x52 &&\n    buf[1] === 0x49 &&\n    buf[2] === 0x46 &&\n    buf[3] === 0x46 &&\n    buf[8] === 0x57 &&\n    buf[9] === 0x45 &&\n    buf[10] === 0x42 &&\n    buf[11] === 0x50\n  ) {\n    return 'image/webp';\n  }\n  return null;\n}\n\nfunction assertAgentExistsForAvatar(cfg: Config, id: string): AgentAdminResult<never> | null {\n  if (collectAgentIdsForList(cfg).every((x) => x !== id)) {\n    return { ok: false, error: `agent \"${id}\" not found`, status: 404 };\n  }\n  return null;\n}\n\nexport async function readAgentAvatarFile(\n  cfg: Config,\n  agentId: string,\n): Promise<AgentAdminResult<{ agentId: string; buffer: Buffer; contentType: string; path: string }>> {\n  const missingAgent = assertAgentExistsForAvatar(cfg, agentId);\n  if (missingAgent) {\n    return missingAgent;\n  }\n  const id = normalizeAgentId(agentId);\n  const root = await profileMarkdownRootReal(cfg, id);\n  for (const name of agentAvatarFilenames()) {\n    const abs = resolveWorkspaceSafePath(root, name);\n    if (!abs) {\n      continue;\n    }\n    try {\n      const st = await stat(abs);\n      if (!st.isFile() || st.size <= 0 || st.size > AGENT_AVATAR_MAX_BYTES) {\n        continue;\n      }\n      const buffer = await readFile(abs);\n      const detected = detectImageMimeFromBytes(buffer);\n      if (!detected) {\n        continue;\n      }\n      return { ok: true, data: { agentId: id, buffer, contentType: detected, path: abs } };\n    } catch {\n      /* try next */\n    }\n  }\n  return { ok: false, error: 'avatar not found', status: 404 };\n}\n\nexport async function writeAgentAvatarFromBase64(\n  cfg: Config,\n  agentId: string,\n  base64: string,\n  mimeType: string,\n): Promise<AgentAdminResult<{ agentId: string; path: string }>> {\n  const missingAgent = assertAgentExistsForAvatar(cfg, agentId);\n  if (missingAgent) {\n    return missingAgent;\n  }\n  const id = normalizeAgentId(agentId);\n  const ext = mimeToExt(mimeType);\n  if (!ext) {\n    return { ok: false, error: 'unsupported mimeType (use image/png, image/jpeg, or image/webp)', status: 400 };\n  }\n  let raw: Buffer;\n  try {\n    raw = Buffer.from(base64, 'base64');\n  } catch {\n    return { ok: false, error: 'invalid base64', status: 400 };\n  }\n  if (raw.length === 0 || raw.length > AGENT_AVATAR_MAX_BYTES) {\n    return { ok: false, error: `avatar must be non-empty and at most ${AGENT_AVATAR_MAX_BYTES} bytes`, status: 400 };\n  }\n  const detected = detectImageMimeFromBytes(raw);\n  if (!detected || !extMatchesDetectedMime(ext, detected)) {\n    return { ok: false, error: 'file content does not match declared image type', status: 400 };\n  }\n\n  const root = await profileMarkdownRootReal(cfg, id);\n  const rootReal = await profileMarkdownRootReal(cfg, id);\n  const targetName = `${AGENT_AVATAR_BASENAME}${ext}`;\n  const abs = resolveWorkspaceSafePath(root, targetName);\n  if (!abs || !isPathUnderWorkspace(rootReal, abs)) {\n    return { ok: false, error: 'invalid path', status: 400 };\n  }\n  for (const name of agentAvatarFilenames()) {\n    if (name === targetName) {\n      continue;\n    }\n    const other = resolveWorkspaceSafePath(root, name);\n    if (other && isPathUnderWorkspace(rootReal, other)) {\n      try {\n        await unlink(other);\n      } catch {\n        /* absent */\n      }\n    }\n  }\n  await writeFile(abs, raw);\n  return { ok: true, data: { agentId: id, path: abs } };\n}\n\nfunction mimeToExtToMime(ext: '.png' | '.jpg' | '.jpeg' | '.webp'): 'image/png' | 'image/jpeg' | 'image/webp' {\n  if (ext === '.png') return 'image/png';\n  if (ext === '.webp') return 'image/webp';\n  return 'image/jpeg';\n}\n\nfunction extMatchesDetectedMime(\n  ext: '.png' | '.jpg' | '.jpeg' | '.webp',\n  detected: 'image/png' | 'image/jpeg' | 'image/webp',\n): boolean {\n  return detected === mimeToExtToMime(ext);\n}\n\n/** Remove any `agent-avatar.*` in the agent profile markdown root. Idempotent: ok even when no file existed. */\nexport async function deleteAgentAvatarFile(cfg: Config, agentId: string): Promise<AgentAdminResult<{ agentId: string }>> {\n  const missingAgent = assertAgentExistsForAvatar(cfg, agentId);\n  if (missingAgent) {\n    return missingAgent;\n  }\n  const id = normalizeAgentId(agentId);\n  const root = await profileMarkdownRootReal(cfg, id);\n  const rootReal = await profileMarkdownRootReal(cfg, id);\n  for (const name of agentAvatarFilenames()) {\n    const abs = resolveWorkspaceSafePath(root, name);\n    if (!abs || !isPathUnderWorkspace(rootReal, abs)) {\n      continue;\n    }\n    try {\n      await unlink(abs);\n    } catch {\n      /* absent */\n    }\n  }\n  return { ok: true, data: { agentId: id } };\n}\n"],"mappings":";;;;;;;;;;;;;;;;kBAiBiC;YAcoB;AAOrD,MAAM,kCAAkC,IAAI,IAAY,CAAC,GAAG,oCAAoC,CAAC;AA2CjG,SAAS,uBAAuB,KAAuB;CACrD,MAAM,UAAU,iBAAiB,IAAI,CAAC,QAAQ,MAAM,EAAE,YAAY,MAAM;CACxE,MAAM,YAAY,sBAAsB,IAAI;AAC5C,KAAI,QAAQ,WAAW,EACrB,QAAO,CAAC,UAAU;CAEpB,MAAM,sBAAM,IAAI,KAAa;AAC7B,MAAK,MAAM,KAAK,QACd,KAAI,IAAI,iBAAiB,EAAE,GAAG,CAAC;AAEjC,KAAI,IAAI,UAAU;AAClB,QAAO,CAAC,GAAG,IAAI;;AAGjB,SAAS,mBACP,OACmB;AACnB,QAAO,OAAO,QAAQ,SAAS,EAAE,CAAC,CAC/B,KAAK,CAAC,IAAI,WAAW;EAAE;EAAI,GAAG;EAAM,EAAE,CACtC,MAAM,GAAG,MAAM,EAAE,GAAG,cAAc,EAAE,GAAG,CAAC;;;AAI7C,SAAgB,kCAAkC,SAAqC;AACrF,QAAO,sBAAsB,QAAQ,CAAC,UAAU,KAAA;;AAGlD,SAAgB,sBAAsB,SAKpC;CACA,MAAM,MAAmF,EAAE;AAC3F,MAAK,MAAM,QAAQ,QAAQ,MAAM,KAAK,EAAE;EACtC,MAAM,QAAQ,KAAK,MAAM,8DAA8D;AACvF,MAAI,OAAO;GACT,MAAM,MAAM,MAAM,IAAI,aAAa;GACnC,MAAM,IAAI,MAAM,IAAI,MAAM,IAAI;AAC9B,OAAI,CAAC,KAAK,aAAa,KAAK,EAAE,CAAE;AAChC,OAAI,QAAQ,OAAQ,KAAI,OAAO;AAC/B,OAAI,QAAQ,cAAe,KAAI,cAAc;AAC7C,OAAI,QAAQ,WAAY,KAAI,WAAW;AACvC,OAAI,QAAQ,SAAU,KAAI,SAAS;;;AAGvC,QAAO;;AAGT,eAAsB,kBACpB,KACA,WAAgC,EAAE,EACE;CACpC,MAAM,YAAY,sBAAsB,IAAI;CAC5C,MAAM,SAA4B,EAAE;CAEpC,MAAM,eAAyB,EAAE;CACjC,MAAM,oBAA2D,EAAE;AACnE,MAAK,MAAM,MAAM,uBAAuB,IAAI,EAAE;EAC5C,MAAM,UAAU,6BAA6B,KAAK,GAAG;EACrD,MAAM,QAAQ,iBAAiB,IAAI,CAAC,MAAM,MAAM,iBAAiB,EAAE,GAAG,KAAK,GAAG;EAC9E,MAAM,QACJ,QAAQ,mBAAmB,QAAQ,UAAU,SAAS,IAClD;GACE,GAAI,QAAQ,kBAAkB,EAAE,SAAS,QAAQ,iBAAiB,GAAG,EAAE;GACvE,GAAI,QAAQ,UAAU,SAAS,IAAI,EAAE,WAAW,QAAQ,WAAW,GAAG,EAAE;GACzE,GACD,KAAA;EACN,MAAM,cAAc,OAAO,OAAO,SAAS,cAAc,MAAM,OAAO,SAAS,EAAE,GAAG,KAAA;EACpF,MAAM,eAAe,OAAO,QAAQ,OAAO,MAAM,WAAW,EAAE,CAAC,CAC5D,QAAQ,GAAG,YAAY,OAAO,SAAS,OAAO,CAC9C,KAAK,CAAC,UAAU,KAAK;EACxB,MAAM,mBAAmB,mBAAmB,OAAO,QAAQ,MAAM;EACjE,MAAM,uBAAuB,CAAC,GAAG,4BAA4B,KAAK,GAAG,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,MACvF,EAAE,GAAG,cAAc,EAAE,GAAG,CACzB;EACD,IAAI,WAAqD,EAAE;AAC3D,MAAI;AAGF,cAAW,sBAAsB,MADX,SADD,KAAK,uBAAuB,KAAK,GAAG,EAAE,gBAAgB,SAChC,EAAE,QAAQ,CACZ;UACnC;AAGR,SAAO,KAAK;GACV;GACA,GAAI,SAAS,OAAO,EAAE,MAAM,SAAS,MAAM,GAAG,EAAE;GAChD,GAAI,SAAS,cAAc,EAAE,aAAa,SAAS,aAAa,GAAG,EAAE;GACrE,GAAI,SAAS,WAAW,EAAE,UAAU,SAAS,UAAU,GAAG,EAAE;GAC5D,GAAI,SAAS,SAAS,EAAE,QAAQ,SAAS,QAAQ,GAAG,EAAE;GACtD,WAAW,QAAQ;GACnB,YAAY,uBAAuB,KAAK,GAAG;GAC3C,GAAI,QAAQ,EAAE,OAAO,GAAG,EAAE;GAC1B,aAAa;IACX,aAAa,QAAQ,SAAS,OAAO;IACrC,QAAQ,CAAC,GAAG,kBAAkB;IAC9B,GAAI,iBAAiB,SAAS,IAAI,EAAE,OAAO,kBAAkB,GAAG,EAAE;IAClE,WAAW;IACZ;GACD,SAAS,CAAC,GAAI,OAAO,WAAW,EAAE,CAAE;GACpC,WAAW,OAAO;GAClB,QAAQ;IACN,QAA2C,EAAE;IAC7C,GAAI,gBAAgB,KAAA,IAAY,EAAE,OAAO,CAAC,GAAG,YAAY,EAAE,GAAG,EAAE;IAChE,GAAI,QAAQ,oBAAoB,KAAA,IAC5B,EAAE,oBAAoB,CAAC,GAAG,QAAQ,gBAAgB,EAAE,GACpD,EAAE;IACP;GACD,OAAO;IACL,cAAc,CAAC,GAAG,aAAa;IAC/B,cAAc,CAAC,GAAG,aAAa;IAC/B,kBAAkB,CAAC,GAAG,QAAQ,MAAM,OAAO,CAAC,MAAM,GAAG,MAAM,EAAE,cAAc,EAAE,CAAC;IAC/E;GACF,CAAC;;AAEJ,QAAO,MAAM,GAAG,MAAM,EAAE,GAAG,cAAc,EAAE,GAAG,CAAC;AAC/C,QAAO;EAAE;EAAW;EAAQ,gBAAgB,CAAC,GAAG,yBAAyB;EAAE;;AAG7E,SAAgB,iCACd,KACA,YACyD;CACzD,MAAM,UAAU,iBAAiB,WAAW;CAC5C,MAAM,QAAQ,iBAAiB,IAAI,CAAC,MAAM,MAAM,iBAAiB,EAAE,GAAG,KAAK,QAAQ;AACnF,KAAI,CAAC,MACH,QAAO;EAAE,IAAI;EAAO,OAAO,UAAU,QAAQ;EAAc,QAAQ;EAAK;AAE1E,KAAI;AACF,SAAO;GACL,IAAI;GACJ,MAAM,8BAA8B;IAClC,OAAO;IACP,SAAS,IAAI,OAAO;IACrB,CAAC;GACH;UACM,KAAK;AACZ,SAAO;GACL,IAAI;GACJ,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;GACvD,QAAQ;GACT;;;AAyBL,SAAS,eAAe,IAA4C;AAClE,KAAI,iBAAiB,GAAG,KAAA,OACtB,QAAO;EAAE,IAAI;EAAO,OAAO,IAAI,iBAAiB;EAAgB,QAAQ;EAAK;AAE/E,QAAO;;AAGT,SAAgB,mBACd,KACA,MAC8E;CAC9E,MAAM,YAAY,KAAK,WAAW,MAAM,IAAI;AAC5C,KAAI,CAAC,UACH,QAAO;EAAE,IAAI;EAAO,OAAO;EAAyB,QAAQ;EAAK;AAEnE,KAAI,KAAK,iBAAiB,KAAA,GAAW;AACnC,MAAI,OAAO,KAAK,iBAAiB,YAAY,KAAK,iBAAiB,QAAQ,MAAM,QAAQ,KAAK,aAAa,CACzG,QAAO;GAAE,IAAI;GAAO,OAAO;GAAkC,QAAQ;GAAK;AAE5E,OAAK,MAAM,CAAC,MAAM,YAAY,OAAO,QAAQ,KAAK,aAAa,EAAE;GAC/D,MAAM,MAAM,kBAAkB,KAAK;AACnC,OAAI,IACF,QAAO;AAET,OAAI,OAAO,YAAY,SACrB,QAAO;IAAE,IAAI;IAAO,OAAO,iBAAiB,KAAK;IAAsB,QAAQ;IAAK;;;AAI1F,KAAI,CAAC,KAAK,aAAa,OAAO,KAAK,eAAe,gBAAgB,cAAc,SAC9E,QAAO;EAAE,IAAI;EAAO,OAAO,iBAAiB,gBAAgB,SAAS;EAAiB,QAAQ;EAAK;CAMrG,MAAM,YAHW,KAAK,eAAe,gBAAgB,YACjD,sBAAsB,KAAK,aAAa,gBAAgB,UAAU,GAClE,EAAE,EACoB,QAAQ,KAAK,MAAM;CAC7C,MAAM,QAAQ,2BAA2B,KAAK,IAAI,SAAS;AAC3D,KAAI,MAAM,OAAO,MACf,QAAO;EAAE,IAAI;EAAO,OAAO,MAAM;EAAO,QAAQ;EAAK;CAEvD,MAAM,UAAU,MAAM;AACtB,KAAI,oBAAoB,iBAAiB,IAAI,EAAE,QAAQ,IAAI,EACzD,QAAO;EAAE,IAAI;EAAO,OAAO,UAAU,QAAQ;EAAmB,QAAQ;EAAK;CAI/E,IAAI;AACJ,KAAI,KAAK,WAAW;EAClB,MAAM,QAAQ,iBAAiB,KAAK,UAAU;AAC9C,qBAAmB,iBAAiB,IAAI,CAAC,MAAM,MAAM,iBAAiB,EAAE,GAAG,KAAK,MAAM;AACtF,MAAI,CAAC,oBAAoB,UAAU,sBAAsB,IAAI,CAC3D,QAAO;GAAE,IAAI;GAAO,OAAO,iBAAiB,MAAM;GAAc,QAAQ;GAAK;;CAIjF,MAAM,QAAQ,gBAAgB,UAAU;CAExC,MAAM,YAAY,KAAK,UAAU,kBAAkB;CACnD,MAAM,kBACJ,WAAW,QACP;EACE,aAAa,UAAU,eAAe,OAAO,KAAK,UAAU,MAAM,CAAC,MAAM;EACzE,OAAO,UAAU;EAClB,GACD,KAAA;AACN,KAAI,mBAAmB,CAAC,gBAAgB,MAAM,gBAAgB,aAC5D,QAAO;EAAE,IAAI;EAAO,OAAO;EAAkD,QAAQ;EAAK;AAe5F,QAAO;EAAE,IAAI;EAAM,MAAM;GAAE,YAZhB,iBAAiB,KAAK;IAC/B;IACA,WAAW;IACX,GAAI,kBAAkB,EAAE,QAAQ,iBAAiB,GAAG,EAAE;IACtD,GAAI,KAAK,WAAW,KAAA,IAChB,EAAE,QAAQ,KAAK,OAAO,KAAK,MAAM,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC,OAAO,QAAQ,EAAE,GACpE,kBAAkB,OAAO,SAAS,eAAe,KAAK,YACpD,EAAE,QAAQ,CAAC,GAAI,iBAAiB,OAAO,SAAS,EAAE,CAAE,EAAE,GACtD,EAAE;IACR,GAAI,KAAK,UAAU,KAAA,IAAY,EAAE,OAAO,KAAK,OAAO,GAAG,kBAAkB,SAAS,KAAK,YAAY,EAAE,OAAO,iBAAiB,OAAO,GAAG,EAAE;IAC1I,CAE0C;GAAE;GAAS,WAAW;GAAO;EAAE;;AAG5E,eAAsB,wBACpB,KACA,SACA,MACiC;CACjC,MAAM,SAAS,yBAAyB,KAAK,QAAQ;CACrD,MAAM,cAAc,uBAAuB,KAAK,QAAQ;CACxD,MAAM,SAAS,gBAAgB,KAAK,QAAQ;AAC5C,OAAM,MAAM,QAAQ,EAAE,WAAW,MAAM,CAAC;AACxC,OAAM,MAAM,aAAa,EAAE,WAAW,MAAM,CAAC;AAC7C,OAAM,MAAM,QAAQ,EAAE,WAAW,MAAM,CAAC;CACxC,MAAM,KAAK,iBAAiB,QAAQ;CACpC,MAAM,cAAc,MAAM,eAAe,gBAAgB,YACpD,sBAAsB,KAAK,aAAa,gBAAgB,UAAU,CAAC,QAAQ,KAC5E;AAGJ,KAAI,MAAM,WAAW;EACnB,MAAM,iBAAiB,uBAAuB,KAAK,iBAAiB,KAAK,UAAU,CAAC;AACpF,MAAI;AAEF,QAAI,MADkB,KAAK,eAAe,EAC9B,aAAa,EAAE;IACzB,MAAM,WAAW,MAAM,QAAQ,eAAe;AAC9C,SAAK,MAAM,YAAY,UAAU;KAC/B,MAAM,UAAU,KAAK,gBAAgB,SAAS;KAC9C,MAAM,UAAU,KAAK,aAAa,SAAS;AAC3C,SAAI;AAEF,WAAI,MADmB,KAAK,QAAQ,EACvB,QAAQ,CACnB,OAAM,GAAG,SAAS,QAAQ;aAEtB;;;UAKN;AAEN,iCAA8B,aAAa,QAAQ,EAAE,aAAa,CAAC;;OAGrE,+BAA8B,aAAa,QAAQ,EAAE,aAAa,CAAC;CAGrE,MAAM,eAAe,MAAM;AAC3B,KAAI,gBAAgB,OAAO,KAAK,aAAa,CAAC,SAAS,EACrD,MAAK,MAAM,CAAC,MAAM,YAAY,OAAO,QAAQ,aAAa,EAAE;EAC1D,MAAM,UAAU,MAAM,sBAAsB,KAAK,SAAS,MAAM,QAAQ;AACxE,MAAI,QAAQ,OAAO,MACjB,QAAO;;AAKb,QAAO;EAAE,IAAI;EAAM,MAAM,KAAA;EAAW;;AAmBtC,SAAgB,mBACd,KACA,YACA,MAC0C;CAC1C,MAAM,UAAU,iBAAiB,WAAW;CAC5C,IAAI,OAAO,CAAC,GAAG,iBAAiB,IAAI,CAAC;CACrC,IAAI,MAAM,oBAAoB,MAAM,QAAQ;AAC5C,KAAI,MAAM,KAAK,YAAY,sBAAsB,IAAI,EAAE;AACrD,SAAO,CAAC,GAAG,MAAM;GACf,IAAI;GACJ,SAAS;GACT,UAAU;IAAE,MAAM;IAAS,MAAM;IAAS,UAAU;IAAM,MAAM;IAAU;GAC1E,kBAAkB,EAAE,SAAS,CAAC,+BAA+B,EAAE;GAC/D,WAAW,EAAE,MAAM,qBAAqB,WAAW;GACnD,QAAQ;IAAE,aAAa;IAAQ,OAAO,EAAE,MAAM,EAAE,OAAO,kBAAkB,EAAE;IAAE;GAC7E,OAAO,EAAE,SAAS,EAAE,EAAE;GACtB,QAAQ,EAAE,MAAM,OAAO;GACvB,QAAQ;IAAE,MAAM;IAAgB,SAAS,CAAC,WAAW,UAAU;IAAE,aAAa,EAAE,SAAS,WAAW;IAAE;GACtG,WAAW,EAAE;GACb,YAAY;IAAE,sBAAsB,EAAE;IAAE,WAAW,EAAE;IAAE,YAAY,EAAE;IAAE;GACxE,CAAC;AACF,QAAM,KAAK,SAAS;;AAEtB,KAAI,MAAM,EACR,QAAO;EAAE,IAAI;EAAO,OAAO,UAAU,QAAQ;EAAc,QAAQ;EAAK;CAI1E,MAAM,QAAe,EAAE,GAAG,KAAK,MAAM;AAErC,KAAI,KAAK,cAAc,KAAA,GAAW;EAChC,MAAM,IAAI,KAAK,UAAU,MAAM;AAC/B,MAAI,EACF,OAAM,YAAY,EAAE,MAAM,gBAAgB,EAAE,EAAE;;AAGlD,KAAI,KAAK,YAAY,KAAA,GAAW;EAC9B,MAAM,cAAc,MAAM,KAAK,IAAI,IAAI,KAAK,QAAQ,KAAK,OAAO,iBAAiB,GAAG,CAAC,CAAC,OAAO,QAAQ,CAAC,CAAC;AACvG,OAAK,MAAM,YAAY,YACrB,KAAI,CAAC,IAAI,OAAO,kBAAkB,UAChC,QAAO;GAAE,IAAI;GAAO,OAAO,sBAAsB,SAAS;GAAc,QAAQ;GAAK;AAGzF,MAAI,YAAY,SAAS,EACvB,OAAM,UAAU;MAEhB,QAAO,MAAM;;AAGjB,KAAI,KAAK,WAAW,KAAA,EAClB,KAAI,KAAK,WAAW,KAClB,QAAO;EAAE,IAAI;EAAO,OAAO;EAAiE,QAAQ;EAAK;MACpG;AACL,MAAI,KAAK,OAAO,gBAAgB,KAAA,GAAW;AACzC,OAAI,KAAK,OAAO,gBAAgB,QAAQ,CAAC,KAAK,OAAO,YAAY,MAAM,CACrE,QAAO;IAAE,IAAI;IAAO,OAAO;IAAiD,QAAQ;IAAK;AAE3F,SAAM,SAAS;IAAE,GAAG,MAAM;IAAQ,aAAa,KAAK,OAAO,YAAY,MAAM;IAAE;;AAEjF,MAAI,OAAO,OAAO,KAAK,QAAQ,QAAQ;OACjC,KAAK,OAAO,UAAU,KAAA,GAAW;IACnC,MAAM,QAAQ,OAAO,YACnB,OAAO,QAAQ,KAAK,OAAO,MAAM,CAC9B,KAAK,CAAC,IAAI,UAAU;KACnB,IAAI,GAAG,MAAM;KACb,OAAO,IAAI,MAAM,MAAM;KACvB,aAAa,IAAI,aAAa,MAAM;KACrC,EAAE,CACF,QAAQ,QAAQ,IAAI,MAAM,IAAI,MAAM,CACpC,KAAK,QAAQ,CACZ,IAAI,IACJ,IAAI,cAAc;KAAE,OAAO,IAAI;KAAO,aAAa,IAAI;KAAa,GAAG,EAAE,OAAO,IAAI,OAAO,CAC5F,CAAC,CACL;AACD,UAAM,SAAS;KAAE,GAAG,MAAM;KAAQ;KAAO;;;AAG7C,MAAI,CAAC,MAAM,OAAO,MAAM,MAAM,OAAO,aACnC,QAAO;GAAE,IAAI;GAAO,OAAO;GAAkD,QAAQ;GAAK;;AAKhG,KAAI,KAAK,WAAW,KAAA,EAClB,KAAI,KAAK,WAAW,KAClB,OAAM,SAAS,EAAE,MAAM,OAAO;MACzB;EACL,MAAM,OAAO,KAAK,OAAO,KAAK,MAAM,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC,OAAO,QAAQ;AACrE,MAAI,KAAK,WAAW,EAClB,OAAM,SAAS;GAAE,MAAM;GAAa,OAAO,EAAE;GAAE;MAE/C,OAAM,SAAS;GAAE,MAAM;GAAa,OAAO;GAAM;;AAKvD,KAAI,KAAK,UAAU,KAAA,EACjB,KAAI,KAAK,UAAU,KACjB,OAAM,QAAQ,EAAE,SAAS,EAAE,EAAE;KAE7B,OAAM,QAAQ,KAAK;AAIvB,KAAI,KAAK,WAAW,KAAA,EAClB,OAAM,SAAS,KAAK;AAGtB,MAAK,OAAO;CACZ,IAAI,OAAe;EACjB,GAAG;EACH,QAAQ;GACN,GAAG,IAAI;GACP;GACD;EACF;AAED,KAAI,KAAK,eAAe,KACtB,QAAO;EACL,GAAG;EACH,QAAQ;GACN,GAAG,KAAK;GACR,SAAS;GACV;EACF;AAEH,QAAO;EAAE,IAAI;EAAM,MAAM,EAAE,YAAY,MAAM;EAAE;;AAGjD,SAAgB,mBACd,KACA,YAC2D;CAC3D,MAAM,UAAU,iBAAiB,WAAW;CAC5C,MAAM,WAAW,eAAe,QAAQ;AACxC,KAAI,SACF,QAAO;AAET,KAAI,oBAAoB,iBAAiB,IAAI,EAAE,QAAQ,GAAG,EACxD,QAAO;EAAE,IAAI;EAAO,OAAO,UAAU,QAAQ;EAAc,QAAQ;EAAK;CAE1E,MAAM,EAAE,QAAQ,WAAW,iBAAiB,KAAK,QAAQ;AACzD,QAAO;EAAE,IAAI;EAAM,MAAM;GAAE,YAAY;GAAQ;GAAS;EAAE;;AAG5D,eAAsB,oBAAoB,KAAa,SAAgC;AACrF,OAAM,wBAAwB,KAAK,QAAQ;;AAU7C,eAAe,wBAAwB,KAAa,SAAkC;CACpF,MAAM,MAAM,uBAAuB,KAAK,QAAQ;AAChD,OAAM,MAAM,KAAK,EAAE,WAAW,MAAM,CAAC;AACrC,KAAI;AACF,SAAO,MAAM,SAAS,IAAI;SACpB;AACN,SAAOA,QAAY,IAAI;;;AAI3B,SAAS,kBAAkB,MAA8C;AACvE,KAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS,KAAK,IAAI,CAAC,gCAAgC,IAAI,KAAK,CAClG,QAAO;EAAE,IAAI;EAAO,OAAO,qBAAqB,KAAK;EAAI,QAAQ;EAAK;AAExE,QAAO;;AAGT,eAAsB,sBACpB,KACA,SAC6F;CAC7F,MAAM,KAAK,iBAAiB,QAAQ;AACpC,KAAI,uBAAuB,IAAI,CAAC,OAAO,MAAM,MAAM,GAAG,CACpD,QAAO;EAAE,IAAI;EAAO,OAAO,UAAU,GAAG;EAAc,QAAQ;EAAK;CAErE,MAAM,OAAO,MAAM,wBAAwB,KAAK,GAAG;CACnD,MAAM,QAAQ,CAAC,GAAG,gCAAgC;CAClD,MAAM,QAA0B,EAAE;AAClC,MAAK,MAAM,QAAQ,MAAM,MAAM,GAAG,MAAM,EAAE,cAAc,EAAE,CAAC,EAAE;EAC3D,MAAM,MAAM,yBAAyB,MAAM,KAAK;AAChD,MAAI,CAAC,IACH;AAEF,MAAI;GACF,MAAM,KAAK,MAAM,KAAK,IAAI;AAC1B,OAAI,CAAC,GAAG,QAAQ,CACd;AAEF,SAAM,KAAK;IACT;IACA,SAAS;IACT,MAAM,GAAG;IACT,aAAa,GAAG;IACjB,CAAC;UACI;AACN,SAAM,KAAK;IAAE;IAAM,SAAS;IAAM,CAAC;;;AAGvC,OAAM,MAAM,GAAG,MAAM,EAAE,KAAK,cAAc,EAAE,KAAK,CAAC;AAClD,QAAO;EAAE,IAAI;EAAM,MAAM;GAAE,SAAS;GAAI,YAAY;GAAM;GAAO;EAAE;;AAGrE,eAAsB,qBACpB,KACA,SACA,MAC+E;CAC/E,MAAM,MAAM,kBAAkB,KAAK;AACnC,KAAI,IACF,QAAO;CAET,MAAM,KAAK,iBAAiB,QAAQ;AACpC,KAAI,uBAAuB,IAAI,CAAC,OAAO,MAAM,MAAM,GAAG,CACpD,QAAO;EAAE,IAAI;EAAO,OAAO,UAAU,GAAG;EAAc,QAAQ;EAAK;CAGrE,MAAM,MAAM,yBAAyB,MADlB,wBAAwB,KAAK,GAAG,EACR,KAAK;AAChD,KAAI,CAAC,IACH,QAAO;EAAE,IAAI;EAAO,OAAO;EAAgB,QAAQ;EAAK;AAE1D,KAAI;AAEF,SAAO;GAAE,IAAI;GAAM,MAAM;IAAE,SAAS;IAAI,SAAA,MADlB,SAAS,KAAK,QAAQ;IACK,MAAM;IAAK;GAAE;SACxD;AACN,SAAO;GAAE,IAAI;GAAO,OAAO;GAAkB,QAAQ;GAAK;;;AAI9D,eAAsB,sBACpB,KACA,SACA,MACA,SAC8D;CAC9D,MAAM,MAAM,kBAAkB,KAAK;AACnC,KAAI,IACF,QAAO;CAET,MAAM,KAAK,iBAAiB,QAAQ;AACpC,KAAI,uBAAuB,IAAI,CAAC,OAAO,MAAM,MAAM,GAAG,CACpD,QAAO;EAAE,IAAI;EAAO,OAAO,UAAU,GAAG;EAAc,QAAQ;EAAK;CAGrE,MAAM,MAAM,yBAAyB,MADlB,wBAAwB,KAAK,GAAG,EACR,KAAK;AAChD,KAAI,CAAC,IACH,QAAO;EAAE,IAAI;EAAO,OAAO;EAAgB,QAAQ;EAAK;AAG1D,KAAI,CAAC,qBAAqB,MADH,wBAAwB,KAAK,GAAG,EACnB,IAAI,CACtC,QAAO;EAAE,IAAI;EAAO,OAAO;EAAsC,QAAQ;EAAK;AAEhF,OAAM,UAAU,KAAK,SAAS,QAAQ;AACtC,QAAO;EAAE,IAAI;EAAM,MAAM;GAAE,SAAS;GAAI,MAAM;GAAK;EAAE;;AAOvD,MAAM,yBAAyB,MAAM;AACrC,MAAM,wBAAwB;AAE9B,MAAM,0BAA0B;CAAC;CAAQ;CAAQ;CAAS;CAAQ;AAElE,SAAS,uBAAiC;AACxC,QAAO,wBAAwB,KAAK,QAAQ,GAAG,wBAAwB,MAAM;;AAG/E,SAAS,UAAU,MAA0D;CAC3E,MAAM,IAAI,KAAK,aAAa,CAAC,MAAM;AACnC,KAAI,MAAM,YAAa,QAAO;AAC9B,KAAI,MAAM,gBAAgB,MAAM,YAAa,QAAO;AACpD,KAAI,MAAM,aAAc,QAAO;AAC/B,QAAO;;AAGT,SAAS,yBAAyB,KAAmE;AACnG,KAAI,IAAI,UAAU,KAAK,IAAI,OAAO,OAAQ,IAAI,OAAO,MAAQ,IAAI,OAAO,MAAQ,IAAI,OAAO,GACzF,QAAO;AAET,KAAI,IAAI,UAAU,KAAK,IAAI,OAAO,OAAQ,IAAI,OAAO,OAAQ,IAAI,OAAO,IACtE,QAAO;AAET,KACE,IAAI,UAAU,MACd,IAAI,OAAO,MACX,IAAI,OAAO,MACX,IAAI,OAAO,MACX,IAAI,OAAO,MACX,IAAI,OAAO,MACX,IAAI,OAAO,MACX,IAAI,QAAQ,MACZ,IAAI,QAAQ,GAEZ,QAAO;AAET,QAAO;;AAGT,SAAS,2BAA2B,KAAa,IAA4C;AAC3F,KAAI,uBAAuB,IAAI,CAAC,OAAO,MAAM,MAAM,GAAG,CACpD,QAAO;EAAE,IAAI;EAAO,OAAO,UAAU,GAAG;EAAc,QAAQ;EAAK;AAErE,QAAO;;AAGT,eAAsB,oBACpB,KACA,SACmG;CACnG,MAAM,eAAe,2BAA2B,KAAK,QAAQ;AAC7D,KAAI,aACF,QAAO;CAET,MAAM,KAAK,iBAAiB,QAAQ;CACpC,MAAM,OAAO,MAAM,wBAAwB,KAAK,GAAG;AACnD,MAAK,MAAM,QAAQ,sBAAsB,EAAE;EACzC,MAAM,MAAM,yBAAyB,MAAM,KAAK;AAChD,MAAI,CAAC,IACH;AAEF,MAAI;GACF,MAAM,KAAK,MAAM,KAAK,IAAI;AAC1B,OAAI,CAAC,GAAG,QAAQ,IAAI,GAAG,QAAQ,KAAK,GAAG,OAAO,uBAC5C;GAEF,MAAM,SAAS,MAAM,SAAS,IAAI;GAClC,MAAM,WAAW,yBAAyB,OAAO;AACjD,OAAI,CAAC,SACH;AAEF,UAAO;IAAE,IAAI;IAAM,MAAM;KAAE,SAAS;KAAI;KAAQ,aAAa;KAAU,MAAM;KAAK;IAAE;UAC9E;;AAIV,QAAO;EAAE,IAAI;EAAO,OAAO;EAAoB,QAAQ;EAAK;;AAG9D,eAAsB,2BACpB,KACA,SACA,QACA,UAC8D;CAC9D,MAAM,eAAe,2BAA2B,KAAK,QAAQ;AAC7D,KAAI,aACF,QAAO;CAET,MAAM,KAAK,iBAAiB,QAAQ;CACpC,MAAM,MAAM,UAAU,SAAS;AAC/B,KAAI,CAAC,IACH,QAAO;EAAE,IAAI;EAAO,OAAO;EAAmE,QAAQ;EAAK;CAE7G,IAAI;AACJ,KAAI;AACF,QAAM,OAAO,KAAK,QAAQ,SAAS;SAC7B;AACN,SAAO;GAAE,IAAI;GAAO,OAAO;GAAkB,QAAQ;GAAK;;AAE5D,KAAI,IAAI,WAAW,KAAK,IAAI,SAAS,uBACnC,QAAO;EAAE,IAAI;EAAO,OAAO,wCAAwC,uBAAuB;EAAS,QAAQ;EAAK;CAElH,MAAM,WAAW,yBAAyB,IAAI;AAC9C,KAAI,CAAC,YAAY,CAAC,uBAAuB,KAAK,SAAS,CACrD,QAAO;EAAE,IAAI;EAAO,OAAO;EAAmD,QAAQ;EAAK;CAG7F,MAAM,OAAO,MAAM,wBAAwB,KAAK,GAAG;CACnD,MAAM,WAAW,MAAM,wBAAwB,KAAK,GAAG;CACvD,MAAM,aAAa,GAAG,wBAAwB;CAC9C,MAAM,MAAM,yBAAyB,MAAM,WAAW;AACtD,KAAI,CAAC,OAAO,CAAC,qBAAqB,UAAU,IAAI,CAC9C,QAAO;EAAE,IAAI;EAAO,OAAO;EAAgB,QAAQ;EAAK;AAE1D,MAAK,MAAM,QAAQ,sBAAsB,EAAE;AACzC,MAAI,SAAS,WACX;EAEF,MAAM,QAAQ,yBAAyB,MAAM,KAAK;AAClD,MAAI,SAAS,qBAAqB,UAAU,MAAM,CAChD,KAAI;AACF,SAAM,OAAO,MAAM;UACb;;AAKZ,OAAM,UAAU,KAAK,IAAI;AACzB,QAAO;EAAE,IAAI;EAAM,MAAM;GAAE,SAAS;GAAI,MAAM;GAAK;EAAE;;AAGvD,SAAS,gBAAgB,KAAqF;AAC5G,KAAI,QAAQ,OAAQ,QAAO;AAC3B,KAAI,QAAQ,QAAS,QAAO;AAC5B,QAAO;;AAGT,SAAS,uBACP,KACA,UACS;AACT,QAAO,aAAa,gBAAgB,IAAI;;;AAI1C,eAAsB,sBAAsB,KAAa,SAAiE;CACxH,MAAM,eAAe,2BAA2B,KAAK,QAAQ;AAC7D,KAAI,aACF,QAAO;CAET,MAAM,KAAK,iBAAiB,QAAQ;CACpC,MAAM,OAAO,MAAM,wBAAwB,KAAK,GAAG;CACnD,MAAM,WAAW,MAAM,wBAAwB,KAAK,GAAG;AACvD,MAAK,MAAM,QAAQ,sBAAsB,EAAE;EACzC,MAAM,MAAM,yBAAyB,MAAM,KAAK;AAChD,MAAI,CAAC,OAAO,CAAC,qBAAqB,UAAU,IAAI,CAC9C;AAEF,MAAI;AACF,SAAM,OAAO,IAAI;UACX;;AAIV,QAAO;EAAE,IAAI;EAAM,MAAM,EAAE,SAAS,IAAI;EAAE"}
+{"version":3,"file":"agents-admin.js","names":["pathResolve"],"sources":["../../../src/gateway/agents-admin.ts"],"sourcesContent":["/**\n * Gateway REST helpers for multi-agent management.\n */\n\nimport { cp, mkdir, readdir, readFile, realpath, stat, unlink, writeFile } from 'node:fs/promises';\nimport { dirname, join, resolve as pathResolve } from 'node:path';\n\nimport {\n  listAgentEntries,\n  normalizeAgentId,\n  resolveAgentDir,\n  resolveAgentProfileDir,\n  resolveAgentWorkspaceDir,\n  resolveDefaultAgentId,\n  resolveUserPath,\n  validateAgentIdForNewAgent,\n} from '../agent/agent-scope.js';\nimport {\n  AGENT_PROFILE_MARKDOWN_SYSTEM_FILES,\n  REQUIRED_AGENT_PROFILE_MARKDOWN_FILE_SET,\n} from '../agent/context/workspace.js';\nimport { seedAgentProfileMarkdownFiles } from '../agent/context/workspace-seed.js';\nimport {\n  resolveEffectiveAgentManifest,\n  type ResolveManifestResult,\n} from '../agent-manifest/resolver.js';\nimport {\n  applyAgentConfig,\n  findAgentEntryIndex,\n  getAgentDeleteBlocker,\n  pruneAgentConfig,\n  removeAgentDirsFromDisk,\n} from '../commands/agents.config.js';\nimport type { AgentModelsConfig, Config } from '../config/schema.js';\nimport { resolveUserProfilePath, WORKSPACE_FILES } from '../config/paths.js';\nimport { resolveEffectiveAgentProfile } from '../config/agent-profile.js';\nimport type { AgentTypedModel } from '../config/schema.js';\nimport { resolveEffectiveTypedModels } from '../config/agent-typed-models.js';\nimport { GATEWAY_BUILTIN_TOOL_IDS } from './agent-builtin-tools.js';\nimport { isPathUnderWorkspace, resolveWorkspaceSafePath } from './workspace-editor-path.js';\n\nconst EDITABLE_PROFILE_MARKDOWN_NAMES = new Set<string>([...AGENT_PROFILE_MARKDOWN_SYSTEM_FILES]);\n\nexport type GatewayAgentTypedModelsInfo = {\n  defaultRole: string;\n  preset: AgentTypedModel[];\n  entry?: AgentTypedModel[];\n  effective: AgentTypedModel[];\n};\n\nexport type GatewayAgentRow = {\n  id: string;\n  name?: string;\n  description?: string;\n  language?: string;\n  /** Value from `IDENTITY.md` **Avatar:** line when present (may be URL, `xopc:…`, etc.). */\n  avatar?: string;\n  workspace: string;\n  /** Absolute directory for profile Markdown (`SOUL.md`, …) and gateway avatars: `agents/<id>/profile/`. */\n  profileDir: string;\n  model?: { primary?: string; fallbacks?: string[] };\n  typedModels: GatewayAgentTypedModelsInfo;\n  extends: string[];\n  isDefault: boolean;\n  skills: {\n    preset: string[];\n    entry?: string[];\n    effectiveAllowlist?: string[];\n  };\n  tools: {\n    presetDenied: string[];\n    entryDisable: string[];\n    effectiveDisable: string[];\n  };\n};\n\nexport type GatewayAgentsListResponse = {\n  defaultId: string;\n  agents: GatewayAgentRow[];\n  builtinToolIds: string[];\n};\n\nexport type GatewayAgentEffectiveManifestResponse = ResolveManifestResult;\n\nfunction collectAgentIdsForList(cfg: Config): string[] {\n  const entries = listAgentEntries(cfg).filter((e) => e.enabled !== false);\n  const defaultId = resolveDefaultAgentId(cfg);\n  if (entries.length === 0) {\n    return [defaultId];\n  }\n  const ids = new Set<string>();\n  for (const e of entries) {\n    ids.add(normalizeAgentId(e.id));\n  }\n  ids.add(defaultId);\n  return [...ids];\n}\n\nfunction rolesToTypedModels(\n  roles: Record<string, { model: string; fallbacks?: string[]; description?: string }> | undefined,\n): AgentTypedModel[] {\n  return Object.entries(roles ?? {})\n    .map(([id, role]) => ({ id, ...role }))\n    .sort((a, b) => a.id.localeCompare(b.id));\n}\n\n/** Extract `**Avatar:**` value from profile IDENTITY.md (same line shape as the gateway console parser). */\nexport function extractAvatarFromIdentityMarkdown(content: string): string | undefined {\n  return parseIdentityMarkdown(content).avatar || undefined;\n}\n\nexport function parseIdentityMarkdown(content: string): {\n  name?: string;\n  description?: string;\n  language?: string;\n  avatar?: string;\n} {\n  const out: { name?: string; description?: string; language?: string; avatar?: string } = {};\n  for (const line of content.split('\\n')) {\n    const match = line.match(/^[-*]\\s+\\*\\*(Name|Description|Language|Avatar):\\*\\*\\s*(.*)/i);\n    if (match) {\n      const key = match[1]?.toLowerCase();\n      const v = match[2]?.trim() ?? '';\n      if (!v || /^_\\(.*\\)_$/.test(v)) continue;\n      if (key === 'name') out.name = v;\n      if (key === 'description') out.description = v;\n      if (key === 'language') out.language = v;\n      if (key === 'avatar') out.avatar = v;\n    }\n  }\n  return out;\n}\n\nexport async function listGatewayAgents(\n  cfg: Config,\n  _options: { locale?: string } = {},\n): Promise<GatewayAgentsListResponse> {\n  const defaultId = resolveDefaultAgentId(cfg);\n  const agents: GatewayAgentRow[] = [];\n  const presetSkills: string[] | undefined = undefined;\n  const presetDenied: string[] = [];\n  const presetTypedModels: ReturnType<typeof rolesToTypedModels> = [];\n  for (const id of collectAgentIdsForList(cfg)) {\n    const profile = resolveEffectiveAgentProfile(cfg, id);\n    const entry = listAgentEntries(cfg).find((e) => normalizeAgentId(e.id) === id);\n    const model =\n      profile.primaryModelRef || profile.fallbacks.length > 0\n        ? {\n            ...(profile.primaryModelRef ? { primary: profile.primaryModelRef } : {}),\n            ...(profile.fallbacks.length > 0 ? { fallbacks: profile.fallbacks } : {}),\n          }\n        : undefined;\n    const entrySkills = entry?.skills.mode === 'allowlist' ? entry.skills.allow ?? [] : undefined;\n    const entryDisable = Object.entries(entry?.tools.builtin ?? {})\n      .filter(([, policy]) => policy.mode === 'deny')\n      .map(([name]) => name);\n    const entryTypedModels = rolesToTypedModels(entry?.models?.roles);\n    const effectiveTypedModels = [...resolveEffectiveTypedModels(cfg, id).values()].sort((a, b) =>\n      a.id.localeCompare(b.id),\n    );\n    let identity: ReturnType<typeof parseIdentityMarkdown> = {};\n    try {\n      const identityPath = join(resolveAgentProfileDir(cfg, id), WORKSPACE_FILES.IDENTITY);\n      const content = await readFile(identityPath, 'utf-8');\n      identity = parseIdentityMarkdown(content);\n    } catch {\n      /* missing IDENTITY.md or unreadable */\n    }\n    agents.push({\n      id,\n      ...(identity.name ? { name: identity.name } : {}),\n      ...(identity.description ? { description: identity.description } : {}),\n      ...(identity.language ? { language: identity.language } : {}),\n      ...(identity.avatar ? { avatar: identity.avatar } : {}),\n      workspace: profile.resolvedWorkspacePath,\n      profileDir: resolveAgentProfileDir(cfg, id),\n      ...(model ? { model } : {}),\n      typedModels: {\n        defaultRole: profile.manifest.models.defaultRole,\n        preset: [...presetTypedModels],\n        ...(entryTypedModels.length > 0 ? { entry: entryTypedModels } : {}),\n        effective: effectiveTypedModels,\n      },\n      extends: [...(entry?.extends ?? [])],\n      isDefault: id === defaultId,\n      skills: {\n        preset: presetSkills ? [...presetSkills] : [],\n        ...(entrySkills !== undefined ? { entry: [...entrySkills] } : {}),\n        ...(profile.skillsAllowlist !== undefined\n          ? { effectiveAllowlist: [...profile.skillsAllowlist] }\n          : {}),\n      },\n      tools: {\n        presetDenied: [...presetDenied],\n        entryDisable: [...entryDisable],\n        effectiveDisable: [...profile.tools.denied].sort((a, b) => a.localeCompare(b)),\n      },\n    });\n  }\n  agents.sort((a, b) => a.id.localeCompare(b.id));\n  return { defaultId, agents, builtinToolIds: [...GATEWAY_BUILTIN_TOOL_IDS] };\n}\n\nexport function getGatewayAgentEffectiveManifest(\n  cfg: Config,\n  agentIdRaw: string,\n): AgentAdminResult<GatewayAgentEffectiveManifestResponse> {\n  const agentId = normalizeAgentId(agentIdRaw);\n  const entry = listAgentEntries(cfg).find((e) => normalizeAgentId(e.id) === agentId);\n  if (!entry) {\n    return { ok: false, error: `agent \"${agentId}\" not found`, status: 404 };\n  }\n  try {\n    return {\n      ok: true,\n      data: resolveEffectiveAgentManifest({\n        agent: entry,\n        presets: cfg.agents.capabilityPresets,\n        defaultPresetId: cfg.agents.defaultPreset,\n      }),\n    };\n  } catch (err) {\n    return {\n      ok: false,\n      error: err instanceof Error ? err.message : String(err),\n      status: 400,\n    };\n  }\n}\n\nexport type CreateAgentBody = {\n  /** Optional id seed; normalized agent id defaults from `profileFiles[\"IDENTITY.md\"]` name when omitted. */\n  id?: string;\n  workspace: string;\n  models?: AgentModelsConfig;\n  /** Initial `agents.list[].skills` for the new entry. */\n  skills?: string[];\n  /** Initial `agents.list[].tools` for the new entry. */\n  tools?: NonNullable<Config['agents']['list']>[number]['tools'];\n  /** Profile markdown files to write after seeding (e.g. `IDENTITY.md`, `SOUL.md`). */\n  profileFiles?: Record<string, string>;\n  /** Clone from an existing agent id — copies config entry fields and profile directory. */\n  cloneFrom?: string;\n};\n\nexport type AgentAdminHttpStatus = 400 | 404 | 409;\n\nexport type AgentAdminResult<T> =\n  | { ok: true; data: T }\n  | { ok: false; error: string; status?: AgentAdminHttpStatus };\n\nexport function prepareCreateAgent(\n  cfg: Config,\n  body: CreateAgentBody,\n): AgentAdminResult<{ nextConfig: Config; agentId: string; workspace: string }> {\n  const workspace = body.workspace?.trim() ?? '';\n  if (!workspace) {\n    return { ok: false, error: 'workspace is required', status: 400 };\n  }\n  if (body.profileFiles !== undefined) {\n    if (typeof body.profileFiles !== 'object' || body.profileFiles === null || Array.isArray(body.profileFiles)) {\n      return { ok: false, error: 'profileFiles must be an object', status: 400 };\n    }\n    for (const [name, content] of Object.entries(body.profileFiles)) {\n      const bad = assertAllowedFile(name);\n      if (bad) {\n        return bad;\n      }\n      if (typeof content !== 'string') {\n        return { ok: false, error: `profileFiles[\"${name}\"] must be a string`, status: 400 };\n      }\n    }\n  }\n  if (!body.cloneFrom && typeof body.profileFiles?.[WORKSPACE_FILES.IDENTITY] !== 'string') {\n    return { ok: false, error: `profileFiles[\"${WORKSPACE_FILES.IDENTITY}\"] is required`, status: 400 };\n  }\n\n  const identity = body.profileFiles?.[WORKSPACE_FILES.IDENTITY]\n    ? parseIdentityMarkdown(body.profileFiles[WORKSPACE_FILES.IDENTITY])\n    : {};\n  const nameSeed = identity.name ?? body.id ?? '';\n  const idRes = validateAgentIdForNewAgent(body.id, nameSeed);\n  if (idRes.ok === false) {\n    return { ok: false, error: idRes.error, status: 400 };\n  }\n  const agentId = idRes.agentId;\n  if (findAgentEntryIndex(listAgentEntries(cfg), agentId) >= 0) {\n    return { ok: false, error: `agent \"${agentId}\" already exists`, status: 409 };\n  }\n\n  // Resolve fields from cloneFrom source when present\n  let cloneSourceEntry: ReturnType<typeof listAgentEntries>[number] | undefined;\n  if (body.cloneFrom) {\n    const srcId = normalizeAgentId(body.cloneFrom);\n    cloneSourceEntry = listAgentEntries(cfg).find((e) => normalizeAgentId(e.id) === srcId);\n    if (!cloneSourceEntry && srcId !== resolveDefaultAgentId(cfg)) {\n      return { ok: false, error: `source agent \"${srcId}\" not found`, status: 404 };\n    }\n  }\n\n  const wsAbs = resolveUserPath(workspace);\n\n  const rawModels = body.models ?? cloneSourceEntry?.models;\n  const effectiveModels =\n    rawModels?.roles\n      ? {\n          defaultRole: rawModels.defaultRole ?? Object.keys(rawModels.roles)[0] ?? 'deep',\n          roles: rawModels.roles,\n        }\n      : undefined;\n  if (effectiveModels && !effectiveModels.roles[effectiveModels.defaultRole]) {\n    return { ok: false, error: 'models.defaultRole must reference models.roles', status: 400 };\n  }\n\n  let next = applyAgentConfig(cfg, {\n    agentId,\n    workspace: wsAbs,\n    ...(effectiveModels ? { models: effectiveModels } : {}),\n    ...(body.skills !== undefined\n      ? { skills: body.skills.map((s) => String(s).trim()).filter(Boolean) }\n      : cloneSourceEntry?.skills.mode === 'allowlist' && body.cloneFrom\n        ? { skills: [...(cloneSourceEntry.skills.allow ?? [])] }\n        : {}),\n    ...(body.tools !== undefined ? { tools: body.tools } : cloneSourceEntry?.tools && body.cloneFrom ? { tools: cloneSourceEntry.tools } : {}),\n  });\n\n  return { ok: true, data: { nextConfig: next, agentId, workspace: wsAbs } };\n}\n\nexport async function finalizeCreateAgentDirs(\n  cfg: Config,\n  agentId: string,\n  opts?: { profileFiles?: Record<string, string>; cloneFrom?: string },\n): Promise<AgentAdminResult<void>> {\n  const wsPath = resolveAgentWorkspaceDir(cfg, agentId);\n  const profilePath = resolveAgentProfileDir(cfg, agentId);\n  const adPath = resolveAgentDir(cfg, agentId);\n  await mkdir(wsPath, { recursive: true });\n  await mkdir(profilePath, { recursive: true });\n  await mkdir(adPath, { recursive: true });\n  const id = normalizeAgentId(agentId);\n  const displayName = opts?.profileFiles?.[WORKSPACE_FILES.IDENTITY]\n    ? (parseIdentityMarkdown(opts.profileFiles[WORKSPACE_FILES.IDENTITY]).name ?? id)\n    : id;\n\n  // When cloning, copy the entire source profile directory instead of seeding\n  if (opts?.cloneFrom) {\n    const srcProfilePath = resolveAgentProfileDir(cfg, normalizeAgentId(opts.cloneFrom));\n    try {\n      const srcStat = await stat(srcProfilePath);\n      if (srcStat.isDirectory()) {\n        const srcFiles = await readdir(srcProfilePath);\n        for (const fileName of srcFiles) {\n          const srcFile = join(srcProfilePath, fileName);\n          const dstFile = join(profilePath, fileName);\n          try {\n            const fileStat = await stat(srcFile);\n            if (fileStat.isFile()) {\n              await cp(srcFile, dstFile);\n            }\n          } catch {\n            /* skip unreadable files */\n          }\n        }\n      }\n    } catch {\n      // Source profile dir doesn't exist — fall through to normal seed\n      seedAgentProfileMarkdownFiles(profilePath, wsPath, { displayName });\n    }\n  } else {\n    seedAgentProfileMarkdownFiles(profilePath, wsPath, { displayName });\n  }\n\n  const profileFiles = opts?.profileFiles;\n  if (profileFiles && Object.keys(profileFiles).length > 0) {\n    for (const [name, content] of Object.entries(profileFiles)) {\n      const written = await writeAgentProfileFile(cfg, agentId, name, content);\n      if (written.ok === false) {\n        return written;\n      }\n    }\n  }\n\n  return { ok: true, data: undefined };\n}\n\nexport type UpdateAgentBody = {\n  workspace?: string;\n  extends?: string[];\n  models?: {\n    defaultRole?: string | null;\n    roles?: Record<string, { model: string; fallbacks?: string[]; description?: string }>;\n  } | null;\n  setDefault?: boolean;\n  /** Replace `agents.list[].skills`; `null` resets to all skills. */\n  skills?: string[] | null;\n  /** Replace `agents.list[].tools`; `null` resets to no explicit policies. */\n  tools?: NonNullable<Config['agents']['list']>[number]['tools'] | null;\n  /** Replace `agents.list[].memory`; every agent manifest owns its memory policy. */\n  memory?: NonNullable<Config['agents']['list']>[number]['memory'];\n};\n\nexport function prepareUpdateAgent(\n  cfg: Config,\n  agentIdRaw: string,\n  body: UpdateAgentBody,\n): AgentAdminResult<{ nextConfig: Config }> {\n  const agentId = normalizeAgentId(agentIdRaw);\n  let list = [...listAgentEntries(cfg)];\n  let idx = findAgentEntryIndex(list, agentId);\n  if (idx < 0 && agentId === resolveDefaultAgentId(cfg)) {\n    list = [...list, {\n      id: agentId,\n      enabled: true as const,\n      identity: { name: agentId, role: 'Agent', language: 'en', tone: 'direct' },\n      responsibilities: { primary: ['Help the user complete tasks'] },\n      workspace: { root: `~/.xopc/workspace/${agentId}` },\n      tools: { builtin: {} },\n      skills: { mode: 'all' },\n      memory: { mode: 'confirmWrite', sources: ['session', 'curated'], writePolicy: { curated: 'confirm' } },\n      workflows: {},\n      boundaries: { requiresConfirmation: [], forbidden: [], escalation: [] },\n    }];\n    idx = list.length - 1;\n  }\n  if (idx < 0) {\n    return { ok: false, error: `agent \"${agentId}\" not found`, status: 404 };\n  }\n\n  type Entry = (typeof list)[number];\n  const entry: Entry = { ...list[idx] };\n\n  if (body.workspace !== undefined) {\n    const w = body.workspace.trim();\n    if (w) {\n      entry.workspace = { root: resolveUserPath(w) };\n    }\n  }\n  if (body.extends !== undefined) {\n    const nextExtends = Array.from(new Set(body.extends.map((id) => normalizeAgentId(id)).filter(Boolean)));\n    for (const presetId of nextExtends) {\n      if (!cfg.agents.capabilityPresets[presetId]) {\n        return { ok: false, error: `capability preset \"${presetId}\" not found`, status: 400 };\n      }\n    }\n    if (nextExtends.length > 0) {\n      entry.extends = nextExtends;\n    } else {\n      delete entry.extends;\n    }\n  }\n  if (body.models !== undefined) {\n    if (body.models === null) {\n      delete entry.models;\n    } else {\n      if (body.models.defaultRole !== undefined) {\n        if (body.models.defaultRole === null || !body.models.defaultRole.trim()) {\n          return { ok: false, error: 'models.defaultRole must be a non-empty string', status: 400 };\n        }\n        entry.models = {\n          defaultRole: body.models.defaultRole.trim(),\n          roles: entry.models?.roles ?? {},\n          ...(entry.models?.policy ? { policy: entry.models.policy } : {}),\n        };\n      }\n      if (Object.hasOwn(body.models, 'roles')) {\n        if (body.models.roles !== undefined) {\n          const roles = Object.fromEntries(\n            Object.entries(body.models.roles)\n              .map(([id, row]) => ({\n                id: id.trim(),\n                model: row.model.trim(),\n                fallbacks: (row.fallbacks ?? []).map((ref) => ref.trim()).filter(Boolean),\n                description: row.description?.trim(),\n              }))\n              .filter((row) => row.id && row.model)\n              .map((row) => [\n                row.id,\n                {\n                  model: row.model,\n                  ...(row.fallbacks.length > 0 ? { fallbacks: row.fallbacks } : {}),\n                  ...(row.description ? { description: row.description } : {}),\n                },\n              ]),\n          );\n          entry.models = {\n            defaultRole: entry.models?.defaultRole ?? Object.keys(roles)[0] ?? 'deep',\n            roles,\n            ...(entry.models?.policy ? { policy: entry.models.policy } : {}),\n          };\n        }\n      }\n      const roles = entry.models?.roles ?? {};\n      const defaultRole = entry.models?.defaultRole ?? Object.keys(roles)[0];\n      if (!defaultRole || !roles[defaultRole]) {\n        return { ok: false, error: 'models.defaultRole must reference models.roles', status: 400 };\n      }\n      entry.models = { ...entry.models, defaultRole };\n    }\n  }\n\n  if (body.skills !== undefined) {\n    if (body.skills === null) {\n      entry.skills = { mode: 'all' };\n    } else {\n      const next = body.skills.map((s) => String(s).trim()).filter(Boolean);\n      if (next.length === 0) {\n        entry.skills = { mode: 'allowlist', allow: [] };\n      } else {\n        entry.skills = { mode: 'allowlist', allow: next };\n      }\n    }\n  }\n\n  if (body.tools !== undefined) {\n    if (body.tools === null) {\n      entry.tools = { builtin: {} };\n    } else {\n      entry.tools = body.tools;\n    }\n  }\n\n  if (body.memory !== undefined) {\n    entry.memory = body.memory;\n  }\n\n  list[idx] = entry;\n  let next: Config = {\n    ...cfg,\n    agents: {\n      ...cfg.agents,\n      list,\n    },\n  };\n\n  if (body.setDefault === true) {\n    next = {\n      ...next,\n      agents: {\n        ...next.agents,\n        default: agentId,\n      },\n    };\n  }\n  return { ok: true, data: { nextConfig: next } };\n}\n\nexport function prepareDeleteAgent(\n  cfg: Config,\n  agentIdRaw: string,\n): AgentAdminResult<{ nextConfig: Config; agentId: string }> {\n  const agentId = normalizeAgentId(agentIdRaw);\n  const blocker = getAgentDeleteBlocker(cfg, agentId);\n  if (blocker) {\n    return { ok: false, error: blocker, status: 400 };\n  }\n  if (findAgentEntryIndex(listAgentEntries(cfg), agentId) < 0) {\n    return { ok: false, error: `agent \"${agentId}\" not found`, status: 404 };\n  }\n  const { config: pruned } = pruneAgentConfig(cfg, agentId);\n  return { ok: true, data: { nextConfig: pruned, agentId } };\n}\n\nexport async function runAfterDeletePurge(cfg: Config, agentId: string): Promise<void> {\n  await removeAgentDirsFromDisk(cfg, agentId);\n}\n\nexport type AgentFileEntry = {\n  name: string;\n  missing: boolean;\n  size?: number;\n  updatedAtMs?: number;\n};\n\nasync function profileMarkdownRootReal(cfg: Config, agentId: string): Promise<string> {\n  const dir = resolveAgentProfileDir(cfg, agentId);\n  await mkdir(dir, { recursive: true });\n  try {\n    return await realpath(dir);\n  } catch {\n    return pathResolve(dir);\n  }\n}\n\nfunction assertAllowedFile(name: string): AgentAdminResult<never> | null {\n  if (!name || name.includes('/') || name.includes('\\\\') || !EDITABLE_PROFILE_MARKDOWN_NAMES.has(name)) {\n    return { ok: false, error: `unsupported file \"${name}\"`, status: 400 };\n  }\n  return null;\n}\n\nexport async function listAgentProfileFiles(\n  cfg: Config,\n  agentId: string,\n): Promise<AgentAdminResult<{ agentId: string; profileDir: string; files: AgentFileEntry[] }>> {\n  const id = normalizeAgentId(agentId);\n  if (collectAgentIdsForList(cfg).every((x) => x !== id)) {\n    return { ok: false, error: `agent \"${id}\" not found`, status: 404 };\n  }\n  const root = await profileMarkdownRootReal(cfg, id);\n  const names = [...EDITABLE_PROFILE_MARKDOWN_NAMES];\n  const files: AgentFileEntry[] = [];\n  for (const name of names.sort((a, b) => a.localeCompare(b))) {\n    const abs = resolveWorkspaceSafePath(root, name);\n    if (!abs) {\n      continue;\n    }\n    try {\n      const st = await stat(abs);\n      if (!st.isFile()) {\n        continue;\n      }\n      files.push({\n        name,\n        missing: false,\n        size: st.size,\n        updatedAtMs: st.mtimeMs,\n      });\n    } catch {\n      if (!REQUIRED_AGENT_PROFILE_MARKDOWN_FILE_SET.has(name)) {\n        continue;\n      }\n      files.push({ name, missing: true });\n    }\n  }\n  files.sort((a, b) => a.name.localeCompare(b.name));\n  return { ok: true, data: { agentId: id, profileDir: root, files } };\n}\n\nexport async function readAgentProfileFile(\n  cfg: Config,\n  agentId: string,\n  name: string,\n): Promise<AgentAdminResult<{ agentId: string; content: string; path: string }>> {\n  const bad = assertAllowedFile(name);\n  if (bad) {\n    return bad;\n  }\n  const id = normalizeAgentId(agentId);\n  if (collectAgentIdsForList(cfg).every((x) => x !== id)) {\n    return { ok: false, error: `agent \"${id}\" not found`, status: 404 };\n  }\n  const root = await profileMarkdownRootReal(cfg, id);\n  const abs = resolveWorkspaceSafePath(root, name);\n  if (!abs) {\n    return { ok: false, error: 'invalid path', status: 400 };\n  }\n  try {\n    const content = await readFile(abs, 'utf-8');\n    return { ok: true, data: { agentId: id, content, path: abs } };\n  } catch {\n    return { ok: false, error: 'file not found', status: 404 };\n  }\n}\n\nexport async function writeAgentProfileFile(\n  cfg: Config,\n  agentId: string,\n  name: string,\n  content: string,\n): Promise<AgentAdminResult<{ agentId: string; path: string }>> {\n  const bad = assertAllowedFile(name);\n  if (bad) {\n    return bad;\n  }\n  const id = normalizeAgentId(agentId);\n  if (collectAgentIdsForList(cfg).every((x) => x !== id)) {\n    return { ok: false, error: `agent \"${id}\" not found`, status: 404 };\n  }\n  const root = await profileMarkdownRootReal(cfg, id);\n  const abs = resolveWorkspaceSafePath(root, name);\n  if (!abs) {\n    return { ok: false, error: 'invalid path', status: 400 };\n  }\n  const rootReal = await profileMarkdownRootReal(cfg, id);\n  if (!isPathUnderWorkspace(rootReal, abs)) {\n    return { ok: false, error: 'path escapes profile markdown root', status: 400 };\n  }\n  await writeFile(abs, content, 'utf-8');\n  return { ok: true, data: { agentId: id, path: abs } };\n}\n\nexport async function readUserProfileFile(): Promise<AgentAdminResult<{ content: string; path: string }>> {\n  const path = resolveUserProfilePath();\n  try {\n    const content = await readFile(path, 'utf-8');\n    return { ok: true, data: { content, path } };\n  } catch {\n    return { ok: true, data: { content: '', path } };\n  }\n}\n\nexport async function writeUserProfileFile(\n  content: string,\n): Promise<AgentAdminResult<{ path: string }>> {\n  const path = resolveUserProfilePath();\n  await mkdir(dirname(path), { recursive: true });\n  await writeFile(path, content, 'utf-8');\n  return { ok: true, data: { path } };\n}\n\n// ---------------------------------------------------------------------------\n// Binary agent avatar (profile markdown root dir, not a SOUL/IDENTITY markdown file)\n// ---------------------------------------------------------------------------\n\nconst AGENT_AVATAR_MAX_BYTES = 512 * 1024;\nconst AGENT_AVATAR_BASENAME = 'agent-avatar';\n\nconst AGENT_AVATAR_EXTENSIONS = ['.png', '.jpg', '.jpeg', '.webp'] as const;\n\nfunction agentAvatarFilenames(): string[] {\n  return AGENT_AVATAR_EXTENSIONS.map((ext) => `${AGENT_AVATAR_BASENAME}${ext}`);\n}\n\nfunction mimeToExt(mime: string): '.png' | '.jpg' | '.jpeg' | '.webp' | null {\n  const m = mime.toLowerCase().trim();\n  if (m === 'image/png') return '.png';\n  if (m === 'image/jpeg' || m === 'image/jpg') return '.jpg';\n  if (m === 'image/webp') return '.webp';\n  return null;\n}\n\nfunction detectImageMimeFromBytes(buf: Uint8Array): 'image/png' | 'image/jpeg' | 'image/webp' | null {\n  if (buf.length >= 8 && buf[0] === 0x89 && buf[1] === 0x50 && buf[2] === 0x4e && buf[3] === 0x47) {\n    return 'image/png';\n  }\n  if (buf.length >= 3 && buf[0] === 0xff && buf[1] === 0xd8 && buf[2] === 0xff) {\n    return 'image/jpeg';\n  }\n  if (\n    buf.length >= 12 &&\n    buf[0] === 0x52 &&\n    buf[1] === 0x49 &&\n    buf[2] === 0x46 &&\n    buf[3] === 0x46 &&\n    buf[8] === 0x57 &&\n    buf[9] === 0x45 &&\n    buf[10] === 0x42 &&\n    buf[11] === 0x50\n  ) {\n    return 'image/webp';\n  }\n  return null;\n}\n\nfunction assertAgentExistsForAvatar(cfg: Config, id: string): AgentAdminResult<never> | null {\n  if (collectAgentIdsForList(cfg).every((x) => x !== id)) {\n    return { ok: false, error: `agent \"${id}\" not found`, status: 404 };\n  }\n  return null;\n}\n\nexport async function readAgentAvatarFile(\n  cfg: Config,\n  agentId: string,\n): Promise<AgentAdminResult<{ agentId: string; buffer: Buffer; contentType: string; path: string }>> {\n  const missingAgent = assertAgentExistsForAvatar(cfg, agentId);\n  if (missingAgent) {\n    return missingAgent;\n  }\n  const id = normalizeAgentId(agentId);\n  const root = await profileMarkdownRootReal(cfg, id);\n  for (const name of agentAvatarFilenames()) {\n    const abs = resolveWorkspaceSafePath(root, name);\n    if (!abs) {\n      continue;\n    }\n    try {\n      const st = await stat(abs);\n      if (!st.isFile() || st.size <= 0 || st.size > AGENT_AVATAR_MAX_BYTES) {\n        continue;\n      }\n      const buffer = await readFile(abs);\n      const detected = detectImageMimeFromBytes(buffer);\n      if (!detected) {\n        continue;\n      }\n      return { ok: true, data: { agentId: id, buffer, contentType: detected, path: abs } };\n    } catch {\n      /* try next */\n    }\n  }\n  return { ok: false, error: 'avatar not found', status: 404 };\n}\n\nexport async function writeAgentAvatarFromBase64(\n  cfg: Config,\n  agentId: string,\n  base64: string,\n  mimeType: string,\n): Promise<AgentAdminResult<{ agentId: string; path: string }>> {\n  const missingAgent = assertAgentExistsForAvatar(cfg, agentId);\n  if (missingAgent) {\n    return missingAgent;\n  }\n  const id = normalizeAgentId(agentId);\n  const ext = mimeToExt(mimeType);\n  if (!ext) {\n    return { ok: false, error: 'unsupported mimeType (use image/png, image/jpeg, or image/webp)', status: 400 };\n  }\n  let raw: Buffer;\n  try {\n    raw = Buffer.from(base64, 'base64');\n  } catch {\n    return { ok: false, error: 'invalid base64', status: 400 };\n  }\n  if (raw.length === 0 || raw.length > AGENT_AVATAR_MAX_BYTES) {\n    return { ok: false, error: `avatar must be non-empty and at most ${AGENT_AVATAR_MAX_BYTES} bytes`, status: 400 };\n  }\n  const detected = detectImageMimeFromBytes(raw);\n  if (!detected || !extMatchesDetectedMime(ext, detected)) {\n    return { ok: false, error: 'file content does not match declared image type', status: 400 };\n  }\n\n  const root = await profileMarkdownRootReal(cfg, id);\n  const rootReal = await profileMarkdownRootReal(cfg, id);\n  const targetName = `${AGENT_AVATAR_BASENAME}${ext}`;\n  const abs = resolveWorkspaceSafePath(root, targetName);\n  if (!abs || !isPathUnderWorkspace(rootReal, abs)) {\n    return { ok: false, error: 'invalid path', status: 400 };\n  }\n  for (const name of agentAvatarFilenames()) {\n    if (name === targetName) {\n      continue;\n    }\n    const other = resolveWorkspaceSafePath(root, name);\n    if (other && isPathUnderWorkspace(rootReal, other)) {\n      try {\n        await unlink(other);\n      } catch {\n        /* absent */\n      }\n    }\n  }\n  await writeFile(abs, raw);\n  return { ok: true, data: { agentId: id, path: abs } };\n}\n\nfunction mimeToExtToMime(ext: '.png' | '.jpg' | '.jpeg' | '.webp'): 'image/png' | 'image/jpeg' | 'image/webp' {\n  if (ext === '.png') return 'image/png';\n  if (ext === '.webp') return 'image/webp';\n  return 'image/jpeg';\n}\n\nfunction extMatchesDetectedMime(\n  ext: '.png' | '.jpg' | '.jpeg' | '.webp',\n  detected: 'image/png' | 'image/jpeg' | 'image/webp',\n): boolean {\n  return detected === mimeToExtToMime(ext);\n}\n\n/** Remove any `agent-avatar.*` in the agent profile markdown root. Idempotent: ok even when no file existed. */\nexport async function deleteAgentAvatarFile(cfg: Config, agentId: string): Promise<AgentAdminResult<{ agentId: string }>> {\n  const missingAgent = assertAgentExistsForAvatar(cfg, agentId);\n  if (missingAgent) {\n    return missingAgent;\n  }\n  const id = normalizeAgentId(agentId);\n  const root = await profileMarkdownRootReal(cfg, id);\n  const rootReal = await profileMarkdownRootReal(cfg, id);\n  for (const name of agentAvatarFilenames()) {\n    const abs = resolveWorkspaceSafePath(root, name);\n    if (!abs || !isPathUnderWorkspace(rootReal, abs)) {\n      continue;\n    }\n    try {\n      await unlink(abs);\n    } catch {\n      /* absent */\n    }\n  }\n  return { ok: true, data: { agentId: id } };\n}\n"],"mappings":";;;;;;;;;;;;;;;;kBAgBiC;YAkB4C;AAO7E,MAAM,kCAAkC,IAAI,IAAY,CAAC,GAAG,oCAAoC,CAAC;AA2CjG,SAAS,uBAAuB,KAAuB;CACrD,MAAM,UAAU,iBAAiB,IAAI,CAAC,QAAQ,MAAM,EAAE,YAAY,MAAM;CACxE,MAAM,YAAY,sBAAsB,IAAI;AAC5C,KAAI,QAAQ,WAAW,EACrB,QAAO,CAAC,UAAU;CAEpB,MAAM,sBAAM,IAAI,KAAa;AAC7B,MAAK,MAAM,KAAK,QACd,KAAI,IAAI,iBAAiB,EAAE,GAAG,CAAC;AAEjC,KAAI,IAAI,UAAU;AAClB,QAAO,CAAC,GAAG,IAAI;;AAGjB,SAAS,mBACP,OACmB;AACnB,QAAO,OAAO,QAAQ,SAAS,EAAE,CAAC,CAC/B,KAAK,CAAC,IAAI,WAAW;EAAE;EAAI,GAAG;EAAM,EAAE,CACtC,MAAM,GAAG,MAAM,EAAE,GAAG,cAAc,EAAE,GAAG,CAAC;;;AAI7C,SAAgB,kCAAkC,SAAqC;AACrF,QAAO,sBAAsB,QAAQ,CAAC,UAAU,KAAA;;AAGlD,SAAgB,sBAAsB,SAKpC;CACA,MAAM,MAAmF,EAAE;AAC3F,MAAK,MAAM,QAAQ,QAAQ,MAAM,KAAK,EAAE;EACtC,MAAM,QAAQ,KAAK,MAAM,8DAA8D;AACvF,MAAI,OAAO;GACT,MAAM,MAAM,MAAM,IAAI,aAAa;GACnC,MAAM,IAAI,MAAM,IAAI,MAAM,IAAI;AAC9B,OAAI,CAAC,KAAK,aAAa,KAAK,EAAE,CAAE;AAChC,OAAI,QAAQ,OAAQ,KAAI,OAAO;AAC/B,OAAI,QAAQ,cAAe,KAAI,cAAc;AAC7C,OAAI,QAAQ,WAAY,KAAI,WAAW;AACvC,OAAI,QAAQ,SAAU,KAAI,SAAS;;;AAGvC,QAAO;;AAGT,eAAsB,kBACpB,KACA,WAAgC,EAAE,EACE;CACpC,MAAM,YAAY,sBAAsB,IAAI;CAC5C,MAAM,SAA4B,EAAE;CAEpC,MAAM,eAAyB,EAAE;CACjC,MAAM,oBAA2D,EAAE;AACnE,MAAK,MAAM,MAAM,uBAAuB,IAAI,EAAE;EAC5C,MAAM,UAAU,6BAA6B,KAAK,GAAG;EACrD,MAAM,QAAQ,iBAAiB,IAAI,CAAC,MAAM,MAAM,iBAAiB,EAAE,GAAG,KAAK,GAAG;EAC9E,MAAM,QACJ,QAAQ,mBAAmB,QAAQ,UAAU,SAAS,IAClD;GACE,GAAI,QAAQ,kBAAkB,EAAE,SAAS,QAAQ,iBAAiB,GAAG,EAAE;GACvE,GAAI,QAAQ,UAAU,SAAS,IAAI,EAAE,WAAW,QAAQ,WAAW,GAAG,EAAE;GACzE,GACD,KAAA;EACN,MAAM,cAAc,OAAO,OAAO,SAAS,cAAc,MAAM,OAAO,SAAS,EAAE,GAAG,KAAA;EACpF,MAAM,eAAe,OAAO,QAAQ,OAAO,MAAM,WAAW,EAAE,CAAC,CAC5D,QAAQ,GAAG,YAAY,OAAO,SAAS,OAAO,CAC9C,KAAK,CAAC,UAAU,KAAK;EACxB,MAAM,mBAAmB,mBAAmB,OAAO,QAAQ,MAAM;EACjE,MAAM,uBAAuB,CAAC,GAAG,4BAA4B,KAAK,GAAG,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,MACvF,EAAE,GAAG,cAAc,EAAE,GAAG,CACzB;EACD,IAAI,WAAqD,EAAE;AAC3D,MAAI;AAGF,cAAW,sBAAsB,MADX,SADD,KAAK,uBAAuB,KAAK,GAAG,EAAE,gBAAgB,SAChC,EAAE,QAAQ,CACZ;UACnC;AAGR,SAAO,KAAK;GACV;GACA,GAAI,SAAS,OAAO,EAAE,MAAM,SAAS,MAAM,GAAG,EAAE;GAChD,GAAI,SAAS,cAAc,EAAE,aAAa,SAAS,aAAa,GAAG,EAAE;GACrE,GAAI,SAAS,WAAW,EAAE,UAAU,SAAS,UAAU,GAAG,EAAE;GAC5D,GAAI,SAAS,SAAS,EAAE,QAAQ,SAAS,QAAQ,GAAG,EAAE;GACtD,WAAW,QAAQ;GACnB,YAAY,uBAAuB,KAAK,GAAG;GAC3C,GAAI,QAAQ,EAAE,OAAO,GAAG,EAAE;GAC1B,aAAa;IACX,aAAa,QAAQ,SAAS,OAAO;IACrC,QAAQ,CAAC,GAAG,kBAAkB;IAC9B,GAAI,iBAAiB,SAAS,IAAI,EAAE,OAAO,kBAAkB,GAAG,EAAE;IAClE,WAAW;IACZ;GACD,SAAS,CAAC,GAAI,OAAO,WAAW,EAAE,CAAE;GACpC,WAAW,OAAO;GAClB,QAAQ;IACN,QAA2C,EAAE;IAC7C,GAAI,gBAAgB,KAAA,IAAY,EAAE,OAAO,CAAC,GAAG,YAAY,EAAE,GAAG,EAAE;IAChE,GAAI,QAAQ,oBAAoB,KAAA,IAC5B,EAAE,oBAAoB,CAAC,GAAG,QAAQ,gBAAgB,EAAE,GACpD,EAAE;IACP;GACD,OAAO;IACL,cAAc,CAAC,GAAG,aAAa;IAC/B,cAAc,CAAC,GAAG,aAAa;IAC/B,kBAAkB,CAAC,GAAG,QAAQ,MAAM,OAAO,CAAC,MAAM,GAAG,MAAM,EAAE,cAAc,EAAE,CAAC;IAC/E;GACF,CAAC;;AAEJ,QAAO,MAAM,GAAG,MAAM,EAAE,GAAG,cAAc,EAAE,GAAG,CAAC;AAC/C,QAAO;EAAE;EAAW;EAAQ,gBAAgB,CAAC,GAAG,yBAAyB;EAAE;;AAG7E,SAAgB,iCACd,KACA,YACyD;CACzD,MAAM,UAAU,iBAAiB,WAAW;CAC5C,MAAM,QAAQ,iBAAiB,IAAI,CAAC,MAAM,MAAM,iBAAiB,EAAE,GAAG,KAAK,QAAQ;AACnF,KAAI,CAAC,MACH,QAAO;EAAE,IAAI;EAAO,OAAO,UAAU,QAAQ;EAAc,QAAQ;EAAK;AAE1E,KAAI;AACF,SAAO;GACL,IAAI;GACJ,MAAM,8BAA8B;IAClC,OAAO;IACP,SAAS,IAAI,OAAO;IACpB,iBAAiB,IAAI,OAAO;IAC7B,CAAC;GACH;UACM,KAAK;AACZ,SAAO;GACL,IAAI;GACJ,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;GACvD,QAAQ;GACT;;;AAyBL,SAAgB,mBACd,KACA,MAC8E;CAC9E,MAAM,YAAY,KAAK,WAAW,MAAM,IAAI;AAC5C,KAAI,CAAC,UACH,QAAO;EAAE,IAAI;EAAO,OAAO;EAAyB,QAAQ;EAAK;AAEnE,KAAI,KAAK,iBAAiB,KAAA,GAAW;AACnC,MAAI,OAAO,KAAK,iBAAiB,YAAY,KAAK,iBAAiB,QAAQ,MAAM,QAAQ,KAAK,aAAa,CACzG,QAAO;GAAE,IAAI;GAAO,OAAO;GAAkC,QAAQ;GAAK;AAE5E,OAAK,MAAM,CAAC,MAAM,YAAY,OAAO,QAAQ,KAAK,aAAa,EAAE;GAC/D,MAAM,MAAM,kBAAkB,KAAK;AACnC,OAAI,IACF,QAAO;AAET,OAAI,OAAO,YAAY,SACrB,QAAO;IAAE,IAAI;IAAO,OAAO,iBAAiB,KAAK;IAAsB,QAAQ;IAAK;;;AAI1F,KAAI,CAAC,KAAK,aAAa,OAAO,KAAK,eAAe,gBAAgB,cAAc,SAC9E,QAAO;EAAE,IAAI;EAAO,OAAO,iBAAiB,gBAAgB,SAAS;EAAiB,QAAQ;EAAK;CAMrG,MAAM,YAHW,KAAK,eAAe,gBAAgB,YACjD,sBAAsB,KAAK,aAAa,gBAAgB,UAAU,GAClE,EAAE,EACoB,QAAQ,KAAK,MAAM;CAC7C,MAAM,QAAQ,2BAA2B,KAAK,IAAI,SAAS;AAC3D,KAAI,MAAM,OAAO,MACf,QAAO;EAAE,IAAI;EAAO,OAAO,MAAM;EAAO,QAAQ;EAAK;CAEvD,MAAM,UAAU,MAAM;AACtB,KAAI,oBAAoB,iBAAiB,IAAI,EAAE,QAAQ,IAAI,EACzD,QAAO;EAAE,IAAI;EAAO,OAAO,UAAU,QAAQ;EAAmB,QAAQ;EAAK;CAI/E,IAAI;AACJ,KAAI,KAAK,WAAW;EAClB,MAAM,QAAQ,iBAAiB,KAAK,UAAU;AAC9C,qBAAmB,iBAAiB,IAAI,CAAC,MAAM,MAAM,iBAAiB,EAAE,GAAG,KAAK,MAAM;AACtF,MAAI,CAAC,oBAAoB,UAAU,sBAAsB,IAAI,CAC3D,QAAO;GAAE,IAAI;GAAO,OAAO,iBAAiB,MAAM;GAAc,QAAQ;GAAK;;CAIjF,MAAM,QAAQ,gBAAgB,UAAU;CAExC,MAAM,YAAY,KAAK,UAAU,kBAAkB;CACnD,MAAM,kBACJ,WAAW,QACP;EACE,aAAa,UAAU,eAAe,OAAO,KAAK,UAAU,MAAM,CAAC,MAAM;EACzE,OAAO,UAAU;EAClB,GACD,KAAA;AACN,KAAI,mBAAmB,CAAC,gBAAgB,MAAM,gBAAgB,aAC5D,QAAO;EAAE,IAAI;EAAO,OAAO;EAAkD,QAAQ;EAAK;AAe5F,QAAO;EAAE,IAAI;EAAM,MAAM;GAAE,YAZhB,iBAAiB,KAAK;IAC/B;IACA,WAAW;IACX,GAAI,kBAAkB,EAAE,QAAQ,iBAAiB,GAAG,EAAE;IACtD,GAAI,KAAK,WAAW,KAAA,IAChB,EAAE,QAAQ,KAAK,OAAO,KAAK,MAAM,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC,OAAO,QAAQ,EAAE,GACpE,kBAAkB,OAAO,SAAS,eAAe,KAAK,YACpD,EAAE,QAAQ,CAAC,GAAI,iBAAiB,OAAO,SAAS,EAAE,CAAE,EAAE,GACtD,EAAE;IACR,GAAI,KAAK,UAAU,KAAA,IAAY,EAAE,OAAO,KAAK,OAAO,GAAG,kBAAkB,SAAS,KAAK,YAAY,EAAE,OAAO,iBAAiB,OAAO,GAAG,EAAE;IAC1I,CAE0C;GAAE;GAAS,WAAW;GAAO;EAAE;;AAG5E,eAAsB,wBACpB,KACA,SACA,MACiC;CACjC,MAAM,SAAS,yBAAyB,KAAK,QAAQ;CACrD,MAAM,cAAc,uBAAuB,KAAK,QAAQ;CACxD,MAAM,SAAS,gBAAgB,KAAK,QAAQ;AAC5C,OAAM,MAAM,QAAQ,EAAE,WAAW,MAAM,CAAC;AACxC,OAAM,MAAM,aAAa,EAAE,WAAW,MAAM,CAAC;AAC7C,OAAM,MAAM,QAAQ,EAAE,WAAW,MAAM,CAAC;CACxC,MAAM,KAAK,iBAAiB,QAAQ;CACpC,MAAM,cAAc,MAAM,eAAe,gBAAgB,YACpD,sBAAsB,KAAK,aAAa,gBAAgB,UAAU,CAAC,QAAQ,KAC5E;AAGJ,KAAI,MAAM,WAAW;EACnB,MAAM,iBAAiB,uBAAuB,KAAK,iBAAiB,KAAK,UAAU,CAAC;AACpF,MAAI;AAEF,QAAI,MADkB,KAAK,eAAe,EAC9B,aAAa,EAAE;IACzB,MAAM,WAAW,MAAM,QAAQ,eAAe;AAC9C,SAAK,MAAM,YAAY,UAAU;KAC/B,MAAM,UAAU,KAAK,gBAAgB,SAAS;KAC9C,MAAM,UAAU,KAAK,aAAa,SAAS;AAC3C,SAAI;AAEF,WAAI,MADmB,KAAK,QAAQ,EACvB,QAAQ,CACnB,OAAM,GAAG,SAAS,QAAQ;aAEtB;;;UAKN;AAEN,iCAA8B,aAAa,QAAQ,EAAE,aAAa,CAAC;;OAGrE,+BAA8B,aAAa,QAAQ,EAAE,aAAa,CAAC;CAGrE,MAAM,eAAe,MAAM;AAC3B,KAAI,gBAAgB,OAAO,KAAK,aAAa,CAAC,SAAS,EACrD,MAAK,MAAM,CAAC,MAAM,YAAY,OAAO,QAAQ,aAAa,EAAE;EAC1D,MAAM,UAAU,MAAM,sBAAsB,KAAK,SAAS,MAAM,QAAQ;AACxE,MAAI,QAAQ,OAAO,MACjB,QAAO;;AAKb,QAAO;EAAE,IAAI;EAAM,MAAM,KAAA;EAAW;;AAmBtC,SAAgB,mBACd,KACA,YACA,MAC0C;CAC1C,MAAM,UAAU,iBAAiB,WAAW;CAC5C,IAAI,OAAO,CAAC,GAAG,iBAAiB,IAAI,CAAC;CACrC,IAAI,MAAM,oBAAoB,MAAM,QAAQ;AAC5C,KAAI,MAAM,KAAK,YAAY,sBAAsB,IAAI,EAAE;AACrD,SAAO,CAAC,GAAG,MAAM;GACf,IAAI;GACJ,SAAS;GACT,UAAU;IAAE,MAAM;IAAS,MAAM;IAAS,UAAU;IAAM,MAAM;IAAU;GAC1E,kBAAkB,EAAE,SAAS,CAAC,+BAA+B,EAAE;GAC/D,WAAW,EAAE,MAAM,qBAAqB,WAAW;GACnD,OAAO,EAAE,SAAS,EAAE,EAAE;GACtB,QAAQ,EAAE,MAAM,OAAO;GACvB,QAAQ;IAAE,MAAM;IAAgB,SAAS,CAAC,WAAW,UAAU;IAAE,aAAa,EAAE,SAAS,WAAW;IAAE;GACtG,WAAW,EAAE;GACb,YAAY;IAAE,sBAAsB,EAAE;IAAE,WAAW,EAAE;IAAE,YAAY,EAAE;IAAE;GACxE,CAAC;AACF,QAAM,KAAK,SAAS;;AAEtB,KAAI,MAAM,EACR,QAAO;EAAE,IAAI;EAAO,OAAO,UAAU,QAAQ;EAAc,QAAQ;EAAK;CAI1E,MAAM,QAAe,EAAE,GAAG,KAAK,MAAM;AAErC,KAAI,KAAK,cAAc,KAAA,GAAW;EAChC,MAAM,IAAI,KAAK,UAAU,MAAM;AAC/B,MAAI,EACF,OAAM,YAAY,EAAE,MAAM,gBAAgB,EAAE,EAAE;;AAGlD,KAAI,KAAK,YAAY,KAAA,GAAW;EAC9B,MAAM,cAAc,MAAM,KAAK,IAAI,IAAI,KAAK,QAAQ,KAAK,OAAO,iBAAiB,GAAG,CAAC,CAAC,OAAO,QAAQ,CAAC,CAAC;AACvG,OAAK,MAAM,YAAY,YACrB,KAAI,CAAC,IAAI,OAAO,kBAAkB,UAChC,QAAO;GAAE,IAAI;GAAO,OAAO,sBAAsB,SAAS;GAAc,QAAQ;GAAK;AAGzF,MAAI,YAAY,SAAS,EACvB,OAAM,UAAU;MAEhB,QAAO,MAAM;;AAGjB,KAAI,KAAK,WAAW,KAAA,EAClB,KAAI,KAAK,WAAW,KAClB,QAAO,MAAM;MACR;AACL,MAAI,KAAK,OAAO,gBAAgB,KAAA,GAAW;AACzC,OAAI,KAAK,OAAO,gBAAgB,QAAQ,CAAC,KAAK,OAAO,YAAY,MAAM,CACrE,QAAO;IAAE,IAAI;IAAO,OAAO;IAAiD,QAAQ;IAAK;AAE3F,SAAM,SAAS;IACb,aAAa,KAAK,OAAO,YAAY,MAAM;IAC3C,OAAO,MAAM,QAAQ,SAAS,EAAE;IAChC,GAAI,MAAM,QAAQ,SAAS,EAAE,QAAQ,MAAM,OAAO,QAAQ,GAAG,EAAE;IAChE;;AAEH,MAAI,OAAO,OAAO,KAAK,QAAQ,QAAQ;OACjC,KAAK,OAAO,UAAU,KAAA,GAAW;IACnC,MAAM,QAAQ,OAAO,YACnB,OAAO,QAAQ,KAAK,OAAO,MAAM,CAC9B,KAAK,CAAC,IAAI,UAAU;KACnB,IAAI,GAAG,MAAM;KACb,OAAO,IAAI,MAAM,MAAM;KACvB,YAAY,IAAI,aAAa,EAAE,EAAE,KAAK,QAAQ,IAAI,MAAM,CAAC,CAAC,OAAO,QAAQ;KACzE,aAAa,IAAI,aAAa,MAAM;KACrC,EAAE,CACF,QAAQ,QAAQ,IAAI,MAAM,IAAI,MAAM,CACpC,KAAK,QAAQ,CACZ,IAAI,IACJ;KACE,OAAO,IAAI;KACX,GAAI,IAAI,UAAU,SAAS,IAAI,EAAE,WAAW,IAAI,WAAW,GAAG,EAAE;KAChE,GAAI,IAAI,cAAc,EAAE,aAAa,IAAI,aAAa,GAAG,EAAE;KAC5D,CACF,CAAC,CACL;AACD,UAAM,SAAS;KACb,aAAa,MAAM,QAAQ,eAAe,OAAO,KAAK,MAAM,CAAC,MAAM;KACnE;KACA,GAAI,MAAM,QAAQ,SAAS,EAAE,QAAQ,MAAM,OAAO,QAAQ,GAAG,EAAE;KAChE;;;EAGL,MAAM,QAAQ,MAAM,QAAQ,SAAS,EAAE;EACvC,MAAM,cAAc,MAAM,QAAQ,eAAe,OAAO,KAAK,MAAM,CAAC;AACpE,MAAI,CAAC,eAAe,CAAC,MAAM,aACzB,QAAO;GAAE,IAAI;GAAO,OAAO;GAAkD,QAAQ;GAAK;AAE5F,QAAM,SAAS;GAAE,GAAG,MAAM;GAAQ;GAAa;;AAInD,KAAI,KAAK,WAAW,KAAA,EAClB,KAAI,KAAK,WAAW,KAClB,OAAM,SAAS,EAAE,MAAM,OAAO;MACzB;EACL,MAAM,OAAO,KAAK,OAAO,KAAK,MAAM,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC,OAAO,QAAQ;AACrE,MAAI,KAAK,WAAW,EAClB,OAAM,SAAS;GAAE,MAAM;GAAa,OAAO,EAAE;GAAE;MAE/C,OAAM,SAAS;GAAE,MAAM;GAAa,OAAO;GAAM;;AAKvD,KAAI,KAAK,UAAU,KAAA,EACjB,KAAI,KAAK,UAAU,KACjB,OAAM,QAAQ,EAAE,SAAS,EAAE,EAAE;KAE7B,OAAM,QAAQ,KAAK;AAIvB,KAAI,KAAK,WAAW,KAAA,EAClB,OAAM,SAAS,KAAK;AAGtB,MAAK,OAAO;CACZ,IAAI,OAAe;EACjB,GAAG;EACH,QAAQ;GACN,GAAG,IAAI;GACP;GACD;EACF;AAED,KAAI,KAAK,eAAe,KACtB,QAAO;EACL,GAAG;EACH,QAAQ;GACN,GAAG,KAAK;GACR,SAAS;GACV;EACF;AAEH,QAAO;EAAE,IAAI;EAAM,MAAM,EAAE,YAAY,MAAM;EAAE;;AAGjD,SAAgB,mBACd,KACA,YAC2D;CAC3D,MAAM,UAAU,iBAAiB,WAAW;CAC5C,MAAM,UAAU,sBAAsB,KAAK,QAAQ;AACnD,KAAI,QACF,QAAO;EAAE,IAAI;EAAO,OAAO;EAAS,QAAQ;EAAK;AAEnD,KAAI,oBAAoB,iBAAiB,IAAI,EAAE,QAAQ,GAAG,EACxD,QAAO;EAAE,IAAI;EAAO,OAAO,UAAU,QAAQ;EAAc,QAAQ;EAAK;CAE1E,MAAM,EAAE,QAAQ,WAAW,iBAAiB,KAAK,QAAQ;AACzD,QAAO;EAAE,IAAI;EAAM,MAAM;GAAE,YAAY;GAAQ;GAAS;EAAE;;AAG5D,eAAsB,oBAAoB,KAAa,SAAgC;AACrF,OAAM,wBAAwB,KAAK,QAAQ;;AAU7C,eAAe,wBAAwB,KAAa,SAAkC;CACpF,MAAM,MAAM,uBAAuB,KAAK,QAAQ;AAChD,OAAM,MAAM,KAAK,EAAE,WAAW,MAAM,CAAC;AACrC,KAAI;AACF,SAAO,MAAM,SAAS,IAAI;SACpB;AACN,SAAOA,QAAY,IAAI;;;AAI3B,SAAS,kBAAkB,MAA8C;AACvE,KAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS,KAAK,IAAI,CAAC,gCAAgC,IAAI,KAAK,CAClG,QAAO;EAAE,IAAI;EAAO,OAAO,qBAAqB,KAAK;EAAI,QAAQ;EAAK;AAExE,QAAO;;AAGT,eAAsB,sBACpB,KACA,SAC6F;CAC7F,MAAM,KAAK,iBAAiB,QAAQ;AACpC,KAAI,uBAAuB,IAAI,CAAC,OAAO,MAAM,MAAM,GAAG,CACpD,QAAO;EAAE,IAAI;EAAO,OAAO,UAAU,GAAG;EAAc,QAAQ;EAAK;CAErE,MAAM,OAAO,MAAM,wBAAwB,KAAK,GAAG;CACnD,MAAM,QAAQ,CAAC,GAAG,gCAAgC;CAClD,MAAM,QAA0B,EAAE;AAClC,MAAK,MAAM,QAAQ,MAAM,MAAM,GAAG,MAAM,EAAE,cAAc,EAAE,CAAC,EAAE;EAC3D,MAAM,MAAM,yBAAyB,MAAM,KAAK;AAChD,MAAI,CAAC,IACH;AAEF,MAAI;GACF,MAAM,KAAK,MAAM,KAAK,IAAI;AAC1B,OAAI,CAAC,GAAG,QAAQ,CACd;AAEF,SAAM,KAAK;IACT;IACA,SAAS;IACT,MAAM,GAAG;IACT,aAAa,GAAG;IACjB,CAAC;UACI;AACN,OAAI,CAAC,yCAAyC,IAAI,KAAK,CACrD;AAEF,SAAM,KAAK;IAAE;IAAM,SAAS;IAAM,CAAC;;;AAGvC,OAAM,MAAM,GAAG,MAAM,EAAE,KAAK,cAAc,EAAE,KAAK,CAAC;AAClD,QAAO;EAAE,IAAI;EAAM,MAAM;GAAE,SAAS;GAAI,YAAY;GAAM;GAAO;EAAE;;AAGrE,eAAsB,qBACpB,KACA,SACA,MAC+E;CAC/E,MAAM,MAAM,kBAAkB,KAAK;AACnC,KAAI,IACF,QAAO;CAET,MAAM,KAAK,iBAAiB,QAAQ;AACpC,KAAI,uBAAuB,IAAI,CAAC,OAAO,MAAM,MAAM,GAAG,CACpD,QAAO;EAAE,IAAI;EAAO,OAAO,UAAU,GAAG;EAAc,QAAQ;EAAK;CAGrE,MAAM,MAAM,yBAAyB,MADlB,wBAAwB,KAAK,GAAG,EACR,KAAK;AAChD,KAAI,CAAC,IACH,QAAO;EAAE,IAAI;EAAO,OAAO;EAAgB,QAAQ;EAAK;AAE1D,KAAI;AAEF,SAAO;GAAE,IAAI;GAAM,MAAM;IAAE,SAAS;IAAI,SAAA,MADlB,SAAS,KAAK,QAAQ;IACK,MAAM;IAAK;GAAE;SACxD;AACN,SAAO;GAAE,IAAI;GAAO,OAAO;GAAkB,QAAQ;GAAK;;;AAI9D,eAAsB,sBACpB,KACA,SACA,MACA,SAC8D;CAC9D,MAAM,MAAM,kBAAkB,KAAK;AACnC,KAAI,IACF,QAAO;CAET,MAAM,KAAK,iBAAiB,QAAQ;AACpC,KAAI,uBAAuB,IAAI,CAAC,OAAO,MAAM,MAAM,GAAG,CACpD,QAAO;EAAE,IAAI;EAAO,OAAO,UAAU,GAAG;EAAc,QAAQ;EAAK;CAGrE,MAAM,MAAM,yBAAyB,MADlB,wBAAwB,KAAK,GAAG,EACR,KAAK;AAChD,KAAI,CAAC,IACH,QAAO;EAAE,IAAI;EAAO,OAAO;EAAgB,QAAQ;EAAK;AAG1D,KAAI,CAAC,qBAAqB,MADH,wBAAwB,KAAK,GAAG,EACnB,IAAI,CACtC,QAAO;EAAE,IAAI;EAAO,OAAO;EAAsC,QAAQ;EAAK;AAEhF,OAAM,UAAU,KAAK,SAAS,QAAQ;AACtC,QAAO;EAAE,IAAI;EAAM,MAAM;GAAE,SAAS;GAAI,MAAM;GAAK;EAAE;;AAGvD,eAAsB,sBAAoF;CACxG,MAAM,OAAO,wBAAwB;AACrC,KAAI;AAEF,SAAO;GAAE,IAAI;GAAM,MAAM;IAAE,SAAA,MADL,SAAS,MAAM,QAAQ;IACT;IAAM;GAAE;SACtC;AACN,SAAO;GAAE,IAAI;GAAM,MAAM;IAAE,SAAS;IAAI;IAAM;GAAE;;;AAIpD,eAAsB,qBACpB,SAC6C;CAC7C,MAAM,OAAO,wBAAwB;AACrC,OAAM,MAAM,QAAQ,KAAK,EAAE,EAAE,WAAW,MAAM,CAAC;AAC/C,OAAM,UAAU,MAAM,SAAS,QAAQ;AACvC,QAAO;EAAE,IAAI;EAAM,MAAM,EAAE,MAAM;EAAE;;AAOrC,MAAM,yBAAyB,MAAM;AACrC,MAAM,wBAAwB;AAE9B,MAAM,0BAA0B;CAAC;CAAQ;CAAQ;CAAS;CAAQ;AAElE,SAAS,uBAAiC;AACxC,QAAO,wBAAwB,KAAK,QAAQ,GAAG,wBAAwB,MAAM;;AAG/E,SAAS,UAAU,MAA0D;CAC3E,MAAM,IAAI,KAAK,aAAa,CAAC,MAAM;AACnC,KAAI,MAAM,YAAa,QAAO;AAC9B,KAAI,MAAM,gBAAgB,MAAM,YAAa,QAAO;AACpD,KAAI,MAAM,aAAc,QAAO;AAC/B,QAAO;;AAGT,SAAS,yBAAyB,KAAmE;AACnG,KAAI,IAAI,UAAU,KAAK,IAAI,OAAO,OAAQ,IAAI,OAAO,MAAQ,IAAI,OAAO,MAAQ,IAAI,OAAO,GACzF,QAAO;AAET,KAAI,IAAI,UAAU,KAAK,IAAI,OAAO,OAAQ,IAAI,OAAO,OAAQ,IAAI,OAAO,IACtE,QAAO;AAET,KACE,IAAI,UAAU,MACd,IAAI,OAAO,MACX,IAAI,OAAO,MACX,IAAI,OAAO,MACX,IAAI,OAAO,MACX,IAAI,OAAO,MACX,IAAI,OAAO,MACX,IAAI,QAAQ,MACZ,IAAI,QAAQ,GAEZ,QAAO;AAET,QAAO;;AAGT,SAAS,2BAA2B,KAAa,IAA4C;AAC3F,KAAI,uBAAuB,IAAI,CAAC,OAAO,MAAM,MAAM,GAAG,CACpD,QAAO;EAAE,IAAI;EAAO,OAAO,UAAU,GAAG;EAAc,QAAQ;EAAK;AAErE,QAAO;;AAGT,eAAsB,oBACpB,KACA,SACmG;CACnG,MAAM,eAAe,2BAA2B,KAAK,QAAQ;AAC7D,KAAI,aACF,QAAO;CAET,MAAM,KAAK,iBAAiB,QAAQ;CACpC,MAAM,OAAO,MAAM,wBAAwB,KAAK,GAAG;AACnD,MAAK,MAAM,QAAQ,sBAAsB,EAAE;EACzC,MAAM,MAAM,yBAAyB,MAAM,KAAK;AAChD,MAAI,CAAC,IACH;AAEF,MAAI;GACF,MAAM,KAAK,MAAM,KAAK,IAAI;AAC1B,OAAI,CAAC,GAAG,QAAQ,IAAI,GAAG,QAAQ,KAAK,GAAG,OAAO,uBAC5C;GAEF,MAAM,SAAS,MAAM,SAAS,IAAI;GAClC,MAAM,WAAW,yBAAyB,OAAO;AACjD,OAAI,CAAC,SACH;AAEF,UAAO;IAAE,IAAI;IAAM,MAAM;KAAE,SAAS;KAAI;KAAQ,aAAa;KAAU,MAAM;KAAK;IAAE;UAC9E;;AAIV,QAAO;EAAE,IAAI;EAAO,OAAO;EAAoB,QAAQ;EAAK;;AAG9D,eAAsB,2BACpB,KACA,SACA,QACA,UAC8D;CAC9D,MAAM,eAAe,2BAA2B,KAAK,QAAQ;AAC7D,KAAI,aACF,QAAO;CAET,MAAM,KAAK,iBAAiB,QAAQ;CACpC,MAAM,MAAM,UAAU,SAAS;AAC/B,KAAI,CAAC,IACH,QAAO;EAAE,IAAI;EAAO,OAAO;EAAmE,QAAQ;EAAK;CAE7G,IAAI;AACJ,KAAI;AACF,QAAM,OAAO,KAAK,QAAQ,SAAS;SAC7B;AACN,SAAO;GAAE,IAAI;GAAO,OAAO;GAAkB,QAAQ;GAAK;;AAE5D,KAAI,IAAI,WAAW,KAAK,IAAI,SAAS,uBACnC,QAAO;EAAE,IAAI;EAAO,OAAO,wCAAwC,uBAAuB;EAAS,QAAQ;EAAK;CAElH,MAAM,WAAW,yBAAyB,IAAI;AAC9C,KAAI,CAAC,YAAY,CAAC,uBAAuB,KAAK,SAAS,CACrD,QAAO;EAAE,IAAI;EAAO,OAAO;EAAmD,QAAQ;EAAK;CAG7F,MAAM,OAAO,MAAM,wBAAwB,KAAK,GAAG;CACnD,MAAM,WAAW,MAAM,wBAAwB,KAAK,GAAG;CACvD,MAAM,aAAa,GAAG,wBAAwB;CAC9C,MAAM,MAAM,yBAAyB,MAAM,WAAW;AACtD,KAAI,CAAC,OAAO,CAAC,qBAAqB,UAAU,IAAI,CAC9C,QAAO;EAAE,IAAI;EAAO,OAAO;EAAgB,QAAQ;EAAK;AAE1D,MAAK,MAAM,QAAQ,sBAAsB,EAAE;AACzC,MAAI,SAAS,WACX;EAEF,MAAM,QAAQ,yBAAyB,MAAM,KAAK;AAClD,MAAI,SAAS,qBAAqB,UAAU,MAAM,CAChD,KAAI;AACF,SAAM,OAAO,MAAM;UACb;;AAKZ,OAAM,UAAU,KAAK,IAAI;AACzB,QAAO;EAAE,IAAI;EAAM,MAAM;GAAE,SAAS;GAAI,MAAM;GAAK;EAAE;;AAGvD,SAAS,gBAAgB,KAAqF;AAC5G,KAAI,QAAQ,OAAQ,QAAO;AAC3B,KAAI,QAAQ,QAAS,QAAO;AAC5B,QAAO;;AAGT,SAAS,uBACP,KACA,UACS;AACT,QAAO,aAAa,gBAAgB,IAAI;;;AAI1C,eAAsB,sBAAsB,KAAa,SAAiE;CACxH,MAAM,eAAe,2BAA2B,KAAK,QAAQ;AAC7D,KAAI,aACF,QAAO;CAET,MAAM,KAAK,iBAAiB,QAAQ;CACpC,MAAM,OAAO,MAAM,wBAAwB,KAAK,GAAG;CACnD,MAAM,WAAW,MAAM,wBAAwB,KAAK,GAAG;AACvD,MAAK,MAAM,QAAQ,sBAAsB,EAAE;EACzC,MAAM,MAAM,yBAAyB,MAAM,KAAK;AAChD,MAAI,CAAC,OAAO,CAAC,qBAAqB,UAAU,IAAI,CAC9C;AAEF,MAAI;AACF,SAAM,OAAO,IAAI;UACX;;AAIV,QAAO;EAAE,IAAI;EAAM,MAAM,EAAE,SAAS,IAAI;EAAE"}

package/dist/src/gateway/capability-presets-admin.d.ts

@@ -16,6 +16,7 @@ export type CapabilityPresetRow = CapabilityPreset & {
     usage: CapabilityPresetAgentUsage[];
 };
 export type CapabilityPresetsListResponse = {
+    defaultPresetId: string;
     presets: CapabilityPresetRow[];
     agents: Array<{
         id: string;

package/dist/src/gateway/capability-presets-admin.js

@@ -9,7 +9,8 @@ function normalizePresetId(id) {
 	return id.trim().toLowerCase();
 }
 function agentUsage(cfg, presetId) {
-	return cfg.agents.list.filter((agent) => (agent.extends ?? []).includes(presetId)).map((agent) => ({
+	const defaultPresetId = cfg.agents.defaultPreset || "default";
+	return cfg.agents.list.filter((agent) => presetId === defaultPresetId || (agent.extends ?? []).includes(presetId)).map((agent) => ({
 		agentId: agent.id,
 		...agent.identity.name ? { agentName: agent.identity.name } : {}
 	})).sort((a, b) => a.agentId.localeCompare(b.agentId));
@@ -91,16 +92,19 @@ function nextConfigWithPresets(cfg, presets) {
 	};
 }
 function listCapabilityPresets(cfg) {
+	const presets = Object.values(presetMap(cfg)).map((preset) => ({
+		...preset,
+		usage: agentUsage(cfg, preset.id)
+	})).sort((a, b) => a.id.localeCompare(b.id));
+	const agents = cfg.agents.list.map((agent) => ({
+		id: agent.id,
+		...agent.identity.name ? { name: agent.identity.name } : {},
+		extends: [...agent.extends ?? []]
+	})).sort((a, b) => a.id.localeCompare(b.id));
 	return {
-		presets: Object.values(presetMap(cfg)).map((preset) => ({
-			...preset,
-			usage: agentUsage(cfg, preset.id)
-		})).sort((a, b) => a.id.localeCompare(b.id)),
-		agents: cfg.agents.list.map((agent) => ({
-			id: agent.id,
-			...agent.identity.name ? { name: agent.identity.name } : {},
-			extends: [...agent.extends ?? []]
-		})).sort((a, b) => a.id.localeCompare(b.id)),
+		defaultPresetId: cfg.agents.defaultPreset,
+		presets,
+		agents,
 		builtinToolIds: [...GATEWAY_BUILTIN_TOOL_IDS]
 	};
 }
@@ -198,6 +202,11 @@ function prepareDeleteCapabilityPreset(cfg, presetIdRaw) {
 		error: `capability preset "${presetId}" not found`,
 		status: 404
 	};
+	if (presetId === cfg.agents.defaultPreset) return {
+		ok: false,
+		error: `capability preset "${presetId}" is the global default and cannot be deleted`,
+		status: 409
+	};
 	const usage = agentUsage(cfg, presetId);
 	if (usage.length > 0) return {
 		ok: false,