@xopcai/xopc 0.0.149 → 0.0.151

package/dist/src/agent/reply/post-compaction-context.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"post-compaction-context.js","names":[],"sources":["../../../../src/agent/reply/post-compaction-context.ts"],"sourcesContent":["import { readFileSync } from 'node:fs';\nimport { join, resolve } from 'node:path';\n\nimport type { Config } from '../../config/schema.js';\nimport { resolveEffectiveAgentProfileForSession } from '../../config/agent-profile.js';\nimport { resolveAgentProfileDir } from '../agent-scope.js';\n\nconst MAX_CONTEXT_CHARS = 1800;\nconst DEFAULT_POST_COMPACTION_SECTIONS = ['Session Startup', 'Red Lines'];\n\nfunction normalizeHeading(value: string): string {\n  return value.trim().toLowerCase();\n}\n\nexport function extractSections(\n  content: string,\n  sectionNames: string[],\n  foundNames?: string[],\n): string[] {\n  const results: string[] = [];\n  const lines = content.split('\\n');\n\n  for (const name of sectionNames) {\n    let sectionLines: string[] = [];\n    let inSection = false;\n    let sectionLevel = 0;\n    let inCodeBlock = false;\n\n    for (const line of lines) {\n      if (line.trimStart().startsWith('```')) {\n        inCodeBlock = !inCodeBlock;\n        if (inSection) {\n          sectionLines.push(line);\n        }\n        continue;\n      }\n      if (inCodeBlock) {\n        if (inSection) {\n          sectionLines.push(line);\n        }\n        continue;\n      }\n\n      const headingMatch = line.match(/^(#{2,3})\\s+(.+?)\\s*$/);\n      if (headingMatch) {\n        const level = headingMatch[1].length;\n        const headingText = headingMatch[2];\n        if (!inSection) {\n          if (normalizeHeading(headingText) === normalizeHeading(name)) {\n            inSection = true;\n            sectionLevel = level;\n            sectionLines = [line];\n          }\n          continue;\n        }\n        if (level <= sectionLevel) {\n          break;\n        }\n        sectionLines.push(line);\n        continue;\n      }\n\n      if (inSection) {\n        sectionLines.push(line);\n      }\n    }\n\n    if (sectionLines.length > 0) {\n      results.push(sectionLines.join('\\n').trim());\n      foundNames?.push(name);\n    }\n  }\n\n  return results;\n}\n\nexport type PostCompactionContextOptions = {\n  cfg?: Config;\n  agentId?: string;\n  nowMs?: number;\n  userTimezone?: string;\n};\n\nexport function readPostCompactionContextFromAgentsMd(\n  agentsMdContent: string,\n  options?: PostCompactionContextOptions,\n): string | null {\n  void options;\n  const sectionNames = DEFAULT_POST_COMPACTION_SECTIONS;\n\n  if (sectionNames.length === 0) {\n    return null;\n  }\n\n  const foundSectionNames: string[] = [];\n  const sections = extractSections(agentsMdContent, sectionNames, foundSectionNames);\n  if (sections.length === 0) {\n    return null;\n  }\n\n  const displayNames = foundSectionNames.length > 0 ? foundSectionNames : sectionNames;\n  const timezone =\n    options?.userTimezone?.trim() ||\n    Intl.DateTimeFormat().resolvedOptions().timeZone ||\n    'UTC';\n  const nowMs = options?.nowMs ?? Date.now();\n  const dateStamp = new Intl.DateTimeFormat('en-CA', { timeZone: timezone }).format(new Date(nowMs));\n  const maxContextChars = MAX_CONTEXT_CHARS;\n\n  const combined = sections.join('\\n\\n').replaceAll('YYYY-MM-DD', dateStamp);\n  const safeContent =\n    combined.length > maxContextChars\n      ? `${combined.slice(0, maxContextChars)}\\n...[truncated]...`\n      : combined;\n\n  const isDefaultSections =\n    sectionNames.length === DEFAULT_POST_COMPACTION_SECTIONS.length &&\n      sectionNames.every(\n        (name, index) =>\n          normalizeHeading(name) === normalizeHeading(DEFAULT_POST_COMPACTION_SECTIONS[index] ?? ''),\n      );\n\n  const prose = isDefaultSections\n    ? 'Session was just compacted. The conversation summary above is a hint, NOT a substitute for your startup sequence. ' +\n      'Run your Session Startup sequence — required files are already in Project Context; follow Session Startup and Red Lines before responding.'\n    : `Session was just compacted. Re-read the sections injected below (${displayNames.join(', ')}) and follow your configured startup procedure before responding.`;\n\n  const sectionLabel = isDefaultSections\n    ? 'Critical rules from AGENTS.md:'\n    : `Injected sections from AGENTS.md (${displayNames.join(', ')}):`;\n\n  return (\n    `[Post-compaction context refresh]\\n\\n${prose}\\n\\n${sectionLabel}\\n\\n${safeContent}`\n  );\n}\n\nexport function readPostCompactionContext(params: {\n  cfg?: Config;\n  sessionKey?: string;\n  agentId?: string;\n  nowMs?: number;\n  userTimezone?: string;\n}): string | null {\n  const cfg = params.cfg;\n  if (!cfg) {\n    return null;\n  }\n  let agentId = params.agentId;\n  if (!agentId && params.sessionKey) {\n    try {\n      agentId = resolveEffectiveAgentProfileForSession(cfg, params.sessionKey).agentId;\n    } catch {\n      return null;\n    }\n  }\n  if (!agentId) {\n    return null;\n  }\n  const agentsPath = join(resolveAgentProfileDir(cfg, agentId), 'AGENTS.md');\n  const resolved = resolve(agentsPath);\n  try {\n    const content = readFileSync(resolved, 'utf-8');\n    return readPostCompactionContextFromAgentsMd(content, {\n      cfg,\n      agentId,\n      nowMs: params.nowMs,\n      userTimezone: params.userTimezone,\n    });\n  } catch {\n    return null;\n  }\n}\n"],"mappings":";;;;;kBAK2D;AAE3D,MAAM,oBAAoB;AAC1B,MAAM,mCAAmC,CAAC,mBAAmB,YAAY;AAEzE,SAAS,iBAAiB,OAAuB;AAC/C,QAAO,MAAM,MAAM,CAAC,aAAa;;AAGnC,SAAgB,gBACd,SACA,cACA,YACU;CACV,MAAM,UAAoB,EAAE;CAC5B,MAAM,QAAQ,QAAQ,MAAM,KAAK;AAEjC,MAAK,MAAM,QAAQ,cAAc;EAC/B,IAAI,eAAyB,EAAE;EAC/B,IAAI,YAAY;EAChB,IAAI,eAAe;EACnB,IAAI,cAAc;AAElB,OAAK,MAAM,QAAQ,OAAO;AACxB,OAAI,KAAK,WAAW,CAAC,WAAW,MAAM,EAAE;AACtC,kBAAc,CAAC;AACf,QAAI,UACF,cAAa,KAAK,KAAK;AAEzB;;AAEF,OAAI,aAAa;AACf,QAAI,UACF,cAAa,KAAK,KAAK;AAEzB;;GAGF,MAAM,eAAe,KAAK,MAAM,wBAAwB;AACxD,OAAI,cAAc;IAChB,MAAM,QAAQ,aAAa,GAAG;IAC9B,MAAM,cAAc,aAAa;AACjC,QAAI,CAAC,WAAW;AACd,SAAI,iBAAiB,YAAY,KAAK,iBAAiB,KAAK,EAAE;AAC5D,kBAAY;AACZ,qBAAe;AACf,qBAAe,CAAC,KAAK;;AAEvB;;AAEF,QAAI,SAAS,aACX;AAEF,iBAAa,KAAK,KAAK;AACvB;;AAGF,OAAI,UACF,cAAa,KAAK,KAAK;;AAI3B,MAAI,aAAa,SAAS,GAAG;AAC3B,WAAQ,KAAK,aAAa,KAAK,KAAK,CAAC,MAAM,CAAC;AAC5C,eAAY,KAAK,KAAK;;;AAI1B,QAAO;;AAUT,SAAgB,sCACd,iBACA,SACe;CAEf,MAAM,eAAe;AAErB,KAAI,aAAa,WAAW,EAC1B,QAAO;CAGT,MAAM,oBAA8B,EAAE;CACtC,MAAM,WAAW,gBAAgB,iBAAiB,cAAc,kBAAkB;AAClF,KAAI,SAAS,WAAW,EACtB,QAAO;CAGT,MAAM,eAAe,kBAAkB,SAAS,IAAI,oBAAoB;CACxE,MAAM,WACJ,SAAS,cAAc,MAAM,IAC7B,KAAK,gBAAgB,CAAC,iBAAiB,CAAC,YACxC;CACF,MAAM,QAAQ,SAAS,SAAS,KAAK,KAAK;CAC1C,MAAM,YAAY,IAAI,KAAK,eAAe,SAAS,EAAE,UAAU,UAAU,CAAC,CAAC,OAAO,IAAI,KAAK,MAAM,CAAC;CAClG,MAAM,kBAAkB;CAExB,MAAM,WAAW,SAAS,KAAK,OAAO,CAAC,WAAW,cAAc,UAAU;CAC1E,MAAM,cACJ,SAAS,SAAS,kBACd,GAAG,SAAS,MAAM,GAAG,gBAAgB,CAAC,uBACtC;CAEN,MAAM,oBACJ,aAAa,WAAW,iCAAiC,UACvD,aAAa,OACV,MAAM,UACL,iBAAiB,KAAK,KAAK,iBAAiB,iCAAiC,UAAU,GAAG,CAC7F;AAWL,QACE,wCAVY,oBACV,iQAEA,oEAAoE,aAAa,KAAK,KAAK,CAAC,mEAOhD,MAL3B,oBACjB,mCACA,qCAAqC,aAAa,KAAK,KAAK,CAAC,IAGE,MAAM;;AAI3E,SAAgB,0BAA0B,QAMxB;CAChB,MAAM,MAAM,OAAO;AACnB,KAAI,CAAC,IACH,QAAO;CAET,IAAI,UAAU,OAAO;AACrB,KAAI,CAAC,WAAW,OAAO,WACrB,KAAI;AACF,YAAU,uCAAuC,KAAK,OAAO,WAAW,CAAC;SACnE;AACN,SAAO;;AAGX,KAAI,CAAC,QACH,QAAO;CAGT,MAAM,WAAW,QADE,KAAK,uBAAuB,KAAK,QAAQ,EAAE,YAC3B,CAAC;AACpC,KAAI;AAEF,SAAO,sCADS,aAAa,UAAU,QACa,EAAE;GACpD;GACA;GACA,OAAO,OAAO;GACd,cAAc,OAAO;GACtB,CAAC;SACI;AACN,SAAO"}

package/dist/src/agent/reply/startup-context.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"startup-context.js","names":[],"sources":["../../../../src/agent/reply/startup-context.ts"],"sourcesContent":["import type { Config } from '../../config/schema.js';\n\nexport const STARTUP_CONTEXT_MARKER = '[Startup context loaded by runtime]';\nconst STARTUP_CONTEXT_TRUNCATED = '...[additional startup memory truncated]...';\nconst STARTUP_QUOTED_CONTEXT_END = 'END_QUOTED_NOTES';\n\nexport function shouldApplyStartupContext(params: {\n  cfg?: Config;\n  action: 'new' | 'reset';\n}): boolean {\n  void params;\n  return false;\n}\n\nexport function buildSessionStartupContextPrelude(params: {\n  workspaceDir: string;\n  cfg?: Config;\n  nowMs?: number;\n  userTimezone?: string;\n}): string | null {\n  void params;\n  return null;\n}\n\n/** Strip runtime startup prelude from persisted user text (titles, previews). */\nexport function stripSessionStartupContextFromUserText(text: string): string {\n  if (!text.includes(STARTUP_CONTEXT_MARKER)) {\n    return text;\n  }\n  const trimmed = text.replace(/^\\uFEFF/, '');\n  if (!trimmed.startsWith(STARTUP_CONTEXT_MARKER)) {\n    return text;\n  }\n\n  let cutIndex = -1;\n  const lastEndNotes = trimmed.lastIndexOf(STARTUP_QUOTED_CONTEXT_END);\n  if (lastEndNotes >= 0) {\n    cutIndex = lastEndNotes + STARTUP_QUOTED_CONTEXT_END.length;\n  } else {\n    const truncIdx = trimmed.indexOf(STARTUP_CONTEXT_TRUNCATED);\n    if (truncIdx >= 0) {\n      cutIndex = truncIdx + STARTUP_CONTEXT_TRUNCATED.length;\n    }\n  }\n\n  if (cutIndex < 0) {\n    const afterMarker = trimmed.slice(STARTUP_CONTEXT_MARKER.length);\n    const doubleNewline = afterMarker.indexOf('\\n\\n');\n    if (doubleNewline >= 0) {\n      return afterMarker.slice(doubleNewline + 2).replace(/^\\s+/, '');\n    }\n    return text;\n  }\n\n  return trimmed.slice(cutIndex).replace(/^\\s+/, '');\n}\n"],"mappings":";AAEA,MAAa,yBAAyB;AACtC,MAAM,4BAA4B;AAClC,MAAM,6BAA6B;AAEnC,SAAgB,0BAA0B,QAG9B;AAEV,QAAO;;AAGT,SAAgB,kCAAkC,QAKhC;AAEhB,QAAO;;;AAIT,SAAgB,uCAAuC,MAAsB;AAC3E,KAAI,CAAC,KAAK,SAAA,sCAAgC,CACxC,QAAO;CAET,MAAM,UAAU,KAAK,QAAQ,WAAW,GAAG;AAC3C,KAAI,CAAC,QAAQ,WAAA,sCAAkC,CAC7C,QAAO;CAGT,IAAI,WAAW;CACf,MAAM,eAAe,QAAQ,YAAY,2BAA2B;AACpE,KAAI,gBAAgB,EAClB,YAAW,eAAe;MACrB;EACL,MAAM,WAAW,QAAQ,QAAQ,0BAA0B;AAC3D,MAAI,YAAY,EACd,YAAW,WAAW;;AAI1B,KAAI,WAAW,GAAG;EAChB,MAAM,cAAc,QAAQ,MAAM,GAA8B;EAChE,MAAM,gBAAgB,YAAY,QAAQ,OAAO;AACjD,MAAI,iBAAiB,EACnB,QAAO,YAAY,MAAM,gBAAgB,EAAE,CAAC,QAAQ,QAAQ,GAAG;AAEjE,SAAO;;AAGT,QAAO,QAAQ,MAAM,SAAS,CAAC,QAAQ,QAAQ,GAAG"}

package/dist/src/agent/reply/workspace-boundary-read.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"workspace-boundary-read.js","names":[],"sources":["../../../../src/agent/reply/workspace-boundary-read.ts"],"sourcesContent":["import { readFileSync } from 'node:fs';\nimport { resolve } from 'node:path';\n\nexport type BoundaryReadResult =\n  | { ok: true; content: string }\n  | { ok: false; reason: 'outside-root' | 'missing' | 'too-large' | 'read-error' };\n\n/**\n * Read a file relative to workspace root with path traversal guard and byte cap.\n */\nexport function readWorkspaceRelativeFile(params: {\n  workspaceDir: string;\n  relativePath: string;\n  maxBytes: number;\n}): BoundaryReadResult {\n  const root = resolve(params.workspaceDir);\n  const absolutePath = resolve(root, params.relativePath);\n  if (!absolutePath.startsWith(root)) {\n    return { ok: false, reason: 'outside-root' };\n  }\n  try {\n    const buf = readFileSync(absolutePath);\n    if (buf.length > params.maxBytes) {\n      return { ok: false, reason: 'too-large' };\n    }\n    return { ok: true, content: buf.toString('utf-8') };\n  } catch (err) {\n    const code = (err as NodeJS.ErrnoException)?.code;\n    if (code === 'ENOENT') {\n      return { ok: false, reason: 'missing' };\n    }\n    return { ok: false, reason: 'read-error' };\n  }\n}\n"],"mappings":";;;;;;AAUA,SAAgB,0BAA0B,QAInB;CACrB,MAAM,OAAO,QAAQ,OAAO,aAAa;CACzC,MAAM,eAAe,QAAQ,MAAM,OAAO,aAAa;AACvD,KAAI,CAAC,aAAa,WAAW,KAAK,CAChC,QAAO;EAAE,IAAI;EAAO,QAAQ;EAAgB;AAE9C,KAAI;EACF,MAAM,MAAM,aAAa,aAAa;AACtC,MAAI,IAAI,SAAS,OAAO,SACtB,QAAO;GAAE,IAAI;GAAO,QAAQ;GAAa;AAE3C,SAAO;GAAE,IAAI;GAAM,SAAS,IAAI,SAAS,QAAQ;GAAE;UAC5C,KAAK;AAEZ,MADc,KAA+B,SAChC,SACX,QAAO;GAAE,IAAI;GAAO,QAAQ;GAAW;AAEzC,SAAO;GAAE,IAAI;GAAO,QAAQ;GAAc"}

package/dist/src/agent/sandbox/command-validator.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"command-validator.js","names":[],"sources":["../../../../src/agent/sandbox/command-validator.ts"],"sourcesContent":["/**\n * Command injection detection and dangerous command blocking.\n *\n * Enhances the basic checkShellSafety in prompt/safety.ts with deeper analysis:\n * - Shell metacharacter injection in arguments\n * - Dangerous command prefixes (destructive ops, credential exfiltration)\n * - Pipe-to-interpreter patterns (curl|bash, wget|sh, etc.)\n * - Credential / secret harvesting attempts\n */\n\nimport type { CommandValidationResult } from './types.js';\n\n// ---------------------------------------------------------------------------\n// Critical — always block, no override\n// ---------------------------------------------------------------------------\n\nconst CRITICAL_PATTERNS: { pattern: RegExp; reason: string }[] = [\n  // Destructive filesystem ops\n  { pattern: /\\brm\\s+(-[a-zA-Z]*[rR][a-zA-Z]*\\s+|--recursive\\s+)\\/(\\s|$)/, reason: 'Recursive delete from root' },\n  { pattern: /\\brm\\s+(-[a-zA-Z]*[rR][a-zA-Z]*\\s+|--recursive\\s+)~\\//, reason: 'Recursive delete from home directory' },\n  { pattern: /\\bmkfs\\b/, reason: 'Filesystem format command' },\n  { pattern: /\\bdd\\s+.*\\bof=\\/dev\\//, reason: 'Raw device write via dd' },\n  { pattern: />\\s*\\/dev\\/[hs]d/, reason: 'Redirect to block device' },\n\n  // Pipe to interpreter — remote code execution\n  { pattern: /\\bcurl\\b[^|]*\\|\\s*(ba)?sh\\b/, reason: 'Pipe curl output to shell' },\n  { pattern: /\\bwget\\b[^|]*\\|\\s*(ba)?sh\\b/, reason: 'Pipe wget output to shell' },\n  { pattern: /\\bcurl\\b[^|]*\\|\\s*python/, reason: 'Pipe curl output to python' },\n  { pattern: /\\bwget\\b[^|]*\\|\\s*python/, reason: 'Pipe wget output to python' },\n  { pattern: /\\bcurl\\b[^|]*\\|\\s*node\\b/, reason: 'Pipe curl output to node' },\n  { pattern: /\\bcurl\\b[^|]*\\|\\s*perl\\b/, reason: 'Pipe curl output to perl' },\n\n  // Credential harvesting\n  { pattern: /\\bcat\\s+.*\\/\\.ssh\\/id_/, reason: 'Read SSH private key' },\n  { pattern: /\\bcat\\s+.*\\/\\.aws\\/credentials/, reason: 'Read AWS credentials' },\n  { pattern: /\\bcat\\s+.*\\/\\.gnupg\\//, reason: 'Read GPG keyring' },\n  { pattern: /\\bcat\\s+.*\\/\\.netrc/, reason: 'Read netrc credentials' },\n  { pattern: /\\bcat\\s+.*\\/etc\\/shadow/, reason: 'Read shadow password file' },\n\n  // Docker socket access\n  { pattern: /\\/var\\/run\\/docker\\.sock/, reason: 'Docker socket access' },\n  { pattern: /\\bdocker\\s+run\\b.*--privileged/, reason: 'Privileged Docker container' },\n];\n\n// ---------------------------------------------------------------------------\n// High — block by default, can be overridden in advanced mode\n// ---------------------------------------------------------------------------\n\nconst HIGH_PATTERNS: { pattern: RegExp; reason: string }[] = [\n  // Dangerous flags\n  { pattern: /\\bchmod\\s+[0-7]*7[0-7]{2}\\b/, reason: 'World-writable chmod' },\n  { pattern: /\\bchmod\\s+.*[+]s\\b/, reason: 'Set SUID/SGID bit' },\n  { pattern: /\\bchown\\s+root\\b/, reason: 'Change ownership to root' },\n\n  // Network exfiltration patterns\n  { pattern: /\\bcurl\\b.*--upload-file/, reason: 'File upload via curl' },\n  { pattern: /\\bcurl\\b.*-T\\s/, reason: 'File upload via curl -T' },\n  { pattern: /\\bnc\\s+-[a-zA-Z]*l/, reason: 'Netcat listener (reverse shell)' },\n  { pattern: /\\bsocat\\b.*\\bexec\\b/i, reason: 'Socat exec (reverse shell)' },\n\n  // Process manipulation\n  { pattern: /\\bkill\\s+-9\\s+1\\b/, reason: 'Kill init process' },\n  { pattern: /\\bkillall\\b/, reason: 'Kill all processes by name' },\n\n  // Crontab modification\n  { pattern: /\\bcrontab\\s+-[erl]/, reason: 'Crontab modification' },\n\n  // System service manipulation\n  { pattern: /\\bsystemctl\\s+(start|stop|restart|enable|disable)\\b/, reason: 'Systemd service manipulation' },\n  { pattern: /\\blaunchctl\\s+(load|unload|start|stop)\\b/, reason: 'macOS launchctl manipulation' },\n\n  // Git operations that mutate repository state or publish externally. Read-only\n  // inspection such as status/log/diff/show remains allowed through exec_command.\n  { pattern: /\\bgit\\s+(?:-[^\\s]+\\s+)*(?!push\\s+--force\\b)(commit|push|checkout|switch|restore|reset|rebase|merge|cherry-pick|clean|apply|am|stash)\\b/, reason: 'Git command may mutate repository state or publish changes' },\n  { pattern: /\\bgit\\s+(?:-[^\\s]+\\s+)*branch\\s+(-[dD]|--delete|--move|-m|-M|--set-upstream-to)\\b/, reason: 'Git branch mutation' },\n  { pattern: /\\bgit\\s+(?:-[^\\s]+\\s+)*tag\\s+(-[adfs]|--delete|--annotate|--force|--sign)\\b/, reason: 'Git tag mutation' },\n\n  // Package manager with elevated privileges\n  { pattern: /\\bsudo\\s+/, reason: 'Sudo command execution' },\n  { pattern: /\\bsu\\s+-\\s/, reason: 'Switch to root user' },\n  { pattern: /\\bdoas\\s+/, reason: 'Doas command execution' },\n];\n\n// ---------------------------------------------------------------------------\n// Medium — warn but allow\n// ---------------------------------------------------------------------------\n\nconst MEDIUM_PATTERNS: { pattern: RegExp; reason: string }[] = [\n  { pattern: /\\brm\\s+-[a-zA-Z]*[rR]/, reason: 'Recursive delete (non-root)' },\n  { pattern: /\\bmv\\s+.*\\s+\\//, reason: 'Move file to root directory' },\n  // Exclude common safe patterns like `chmod +x`, only warn on octal or broad ops\n  { pattern: /\\bchmod\\s+(?!\\+x\\b)[0-7]{3,4}\\b/, reason: 'Octal permission change' },\n  { pattern: /\\bgit\\s+push\\s+--force/, reason: 'Force push to git remote' },\n  { pattern: /\\bgit\\s+reset\\s+--hard/, reason: 'Hard git reset' },\n];\n\n// ---------------------------------------------------------------------------\n// Shell metacharacter injection in command arguments\n// ---------------------------------------------------------------------------\n\n/**\n * Detect obvious shell injection patterns that might be embedded in\n * model-generated arguments (e.g. a filename containing \"; rm -rf /\").\n *\n * This is intentionally conservative — we only flag patterns that are\n * extremely unlikely in legitimate commands.\n */\nconst INJECTION_PATTERNS: { pattern: RegExp; reason: string }[] = [\n  // Backtick containing dangerous commands (not benign subshells like `date` or `mktemp`)\n  { pattern: /`[^`]*(curl|wget|nc|rm\\s+-rf|dd\\s+|mkfs)[^`]*`/, reason: 'Dangerous command inside backtick substitution' },\n  // $() containing dangerous commands (allow benign like $(date), $(pwd), $(nproc))\n  { pattern: /\\$\\([^)]*(curl|wget|nc|rm\\s+-rf|dd\\s+|mkfs)[^)]*\\)/, reason: 'Dangerous command inside $() substitution' },\n  // Semicolon-separated second command that is destructive\n  { pattern: /;\\s*(rm|dd|mkfs|curl|wget|nc)\\b/, reason: 'Injected destructive command after semicolon' },\n  // Newline injection\n  { pattern: /\\n\\s*(rm|dd|mkfs|curl|wget|nc)\\b/, reason: 'Newline-injected destructive command' },\n];\n\n// ---------------------------------------------------------------------------\n// Public API\n// ---------------------------------------------------------------------------\n\n/**\n * Validate a shell command against injection and dangerous-command patterns.\n *\n * Returns `{ allowed: false }` for critical/high severity issues.\n * Returns `{ allowed: true }` with a reason for medium severity (warning).\n */\nexport function validateCommand(command: string): CommandValidationResult {\n  const trimmed = command.trim();\n\n  if (!trimmed) {\n    return { allowed: false, reason: 'Empty command', severity: 'medium' };\n  }\n\n  // --- Critical checks ---\n  for (const { pattern, reason } of CRITICAL_PATTERNS) {\n    if (pattern.test(trimmed)) {\n      return { allowed: false, reason: `Critical: ${reason}`, severity: 'critical' };\n    }\n  }\n\n  // --- Injection checks ---\n  for (const { pattern, reason } of INJECTION_PATTERNS) {\n    if (pattern.test(trimmed)) {\n      return { allowed: false, reason: `Injection: ${reason}`, severity: 'critical' };\n    }\n  }\n\n  // --- High severity checks ---\n  for (const { pattern, reason } of HIGH_PATTERNS) {\n    if (pattern.test(trimmed)) {\n      return { allowed: false, reason: `Blocked: ${reason}`, severity: 'high' };\n    }\n  }\n\n  // --- Medium severity checks (allow but flag) ---\n  for (const { pattern, reason } of MEDIUM_PATTERNS) {\n    if (pattern.test(trimmed)) {\n      return { allowed: true, reason: `Warning: ${reason}`, severity: 'medium' };\n    }\n  }\n\n  return { allowed: true };\n}\n\n/**\n * Extract a list of all matched warning/block reasons for audit logging.\n * Unlike `validateCommand`, this does not short-circuit on the first match.\n */\nexport function auditCommand(command: string): { severity: 'critical' | 'high' | 'medium'; reason: string }[] {\n  const trimmed = command.trim();\n  const findings: { severity: 'critical' | 'high' | 'medium'; reason: string }[] = [];\n\n  for (const { pattern, reason } of CRITICAL_PATTERNS) {\n    if (pattern.test(trimmed)) findings.push({ severity: 'critical', reason });\n  }\n  for (const { pattern, reason } of INJECTION_PATTERNS) {\n    if (pattern.test(trimmed)) findings.push({ severity: 'critical', reason });\n  }\n  for (const { pattern, reason } of HIGH_PATTERNS) {\n    if (pattern.test(trimmed)) findings.push({ severity: 'high', reason });\n  }\n  for (const { pattern, reason } of MEDIUM_PATTERNS) {\n    if (pattern.test(trimmed)) findings.push({ severity: 'medium', reason });\n  }\n\n  return findings;\n}\n"],"mappings":";AAgBA,MAAM,oBAA2D;CAE/D;EAAE,SAAS;EAA8D,QAAQ;EAA8B;CAC/G;EAAE,SAAS;EAAyD,QAAQ;EAAwC;CACpH;EAAE,SAAS;EAAY,QAAQ;EAA6B;CAC5D;EAAE,SAAS;EAAyB,QAAQ;EAA2B;CACvE;EAAE,SAAS;EAAoB,QAAQ;EAA4B;CAGnE;EAAE,SAAS;EAA+B,QAAQ;EAA6B;CAC/E;EAAE,SAAS;EAA+B,QAAQ;EAA6B;CAC/E;EAAE,SAAS;EAA4B,QAAQ;EAA8B;CAC7E;EAAE,SAAS;EAA4B,QAAQ;EAA8B;CAC7E;EAAE,SAAS;EAA4B,QAAQ;EAA4B;CAC3E;EAAE,SAAS;EAA4B,QAAQ;EAA4B;CAG3E;EAAE,SAAS;EAA0B,QAAQ;EAAwB;CACrE;EAAE,SAAS;EAAkC,QAAQ;EAAwB;CAC7E;EAAE,SAAS;EAAyB,QAAQ;EAAoB;CAChE;EAAE,SAAS;EAAuB,QAAQ;EAA0B;CACpE;EAAE,SAAS;EAA2B,QAAQ;EAA6B;CAG3E;EAAE,SAAS;EAA4B,QAAQ;EAAwB;CACvE;EAAE,SAAS;EAAkC,QAAQ;EAA+B;CACrF;AAMD,MAAM,gBAAuD;CAE3D;EAAE,SAAS;EAA+B,QAAQ;EAAwB;CAC1E;EAAE,SAAS;EAAsB,QAAQ;EAAqB;CAC9D;EAAE,SAAS;EAAoB,QAAQ;EAA4B;CAGnE;EAAE,SAAS;EAA2B,QAAQ;EAAwB;CACtE;EAAE,SAAS;EAAkB,QAAQ;EAA2B;CAChE;EAAE,SAAS;EAAsB,QAAQ;EAAmC;CAC5E;EAAE,SAAS;EAAwB,QAAQ;EAA8B;CAGzE;EAAE,SAAS;EAAqB,QAAQ;EAAqB;CAC7D;EAAE,SAAS;EAAe,QAAQ;EAA8B;CAGhE;EAAE,SAAS;EAAsB,QAAQ;EAAwB;CAGjE;EAAE,SAAS;EAAuD,QAAQ;EAAgC;CAC1G;EAAE,SAAS;EAA4C,QAAQ;EAAgC;CAI/F;EAAE,SAAS;EAA0I,QAAQ;EAA8D;CAC3N;EAAE,SAAS;EAAqF,QAAQ;EAAuB;CAC/H;EAAE,SAAS;EAA+E,QAAQ;EAAoB;CAGtH;EAAE,SAAS;EAAa,QAAQ;EAA0B;CAC1D;EAAE,SAAS;EAAc,QAAQ;EAAuB;CACxD;EAAE,SAAS;EAAa,QAAQ;EAA0B;CAC3D;AAMD,MAAM,kBAAyD;CAC7D;EAAE,SAAS;EAAyB,QAAQ;EAA+B;CAC3E;EAAE,SAAS;EAAkB,QAAQ;EAA+B;CAEpE;EAAE,SAAS;EAAmC,QAAQ;EAA2B;CACjF;EAAE,SAAS;EAA0B,QAAQ;EAA4B;CACzE;EAAE,SAAS;EAA0B,QAAQ;EAAkB;CAChE;;;;;;;;AAaD,MAAM,qBAA4D;CAEhE;EAAE,SAAS;EAAkD,QAAQ;EAAkD;CAEvH;EAAE,SAAS;EAAsD,QAAQ;EAA6C;CAEtH;EAAE,SAAS;EAAmC,QAAQ;EAAgD;CAEtG;EAAE,SAAS;EAAoC,QAAQ;EAAwC;CAChG;;;;;;;AAYD,SAAgB,gBAAgB,SAA0C;CACxE,MAAM,UAAU,QAAQ,MAAM;AAE9B,KAAI,CAAC,QACH,QAAO;EAAE,SAAS;EAAO,QAAQ;EAAiB,UAAU;EAAU;AAIxE,MAAK,MAAM,EAAE,SAAS,YAAY,kBAChC,KAAI,QAAQ,KAAK,QAAQ,CACvB,QAAO;EAAE,SAAS;EAAO,QAAQ,aAAa;EAAU,UAAU;EAAY;AAKlF,MAAK,MAAM,EAAE,SAAS,YAAY,mBAChC,KAAI,QAAQ,KAAK,QAAQ,CACvB,QAAO;EAAE,SAAS;EAAO,QAAQ,cAAc;EAAU,UAAU;EAAY;AAKnF,MAAK,MAAM,EAAE,SAAS,YAAY,cAChC,KAAI,QAAQ,KAAK,QAAQ,CACvB,QAAO;EAAE,SAAS;EAAO,QAAQ,YAAY;EAAU,UAAU;EAAQ;AAK7E,MAAK,MAAM,EAAE,SAAS,YAAY,gBAChC,KAAI,QAAQ,KAAK,QAAQ,CACvB,QAAO;EAAE,SAAS;EAAM,QAAQ,YAAY;EAAU,UAAU;EAAU;AAI9E,QAAO,EAAE,SAAS,MAAM;;;;;;AAO1B,SAAgB,aAAa,SAAiF;CAC5G,MAAM,UAAU,QAAQ,MAAM;CAC9B,MAAM,WAA2E,EAAE;AAEnF,MAAK,MAAM,EAAE,SAAS,YAAY,kBAChC,KAAI,QAAQ,KAAK,QAAQ,CAAE,UAAS,KAAK;EAAE,UAAU;EAAY;EAAQ,CAAC;AAE5E,MAAK,MAAM,EAAE,SAAS,YAAY,mBAChC,KAAI,QAAQ,KAAK,QAAQ,CAAE,UAAS,KAAK;EAAE,UAAU;EAAY;EAAQ,CAAC;AAE5E,MAAK,MAAM,EAAE,SAAS,YAAY,cAChC,KAAI,QAAQ,KAAK,QAAQ,CAAE,UAAS,KAAK;EAAE,UAAU;EAAQ;EAAQ,CAAC;AAExE,MAAK,MAAM,EAAE,SAAS,YAAY,gBAChC,KAAI,QAAQ,KAAK,QAAQ,CAAE,UAAS,KAAK;EAAE,UAAU;EAAU;EAAQ,CAAC;AAG1E,QAAO"}

package/dist/src/agent/sandbox/exec-policy.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"exec-policy.js","names":[],"sources":["../../../../src/agent/sandbox/exec-policy.ts"],"sourcesContent":["/**\n * Execution policy layer — unified entry point for sandbox enforcement.\n *\n * Integrates:\n * - Environment variable sanitization (sanitize-env-vars.ts)\n * - Path safety validation (path-policy.ts)\n * - Command injection detection (command-validator.ts)\n *\n * Tool implementations call `evaluateExecPolicy()` before spawning processes\n * and `evaluateFilePolicy()` before file read/write/edit operations.\n */\n\nimport { resolve } from 'node:path';\n\nimport { createLogger } from '../../utils/logger.js';\nimport { prepareSafeToolEnv } from './sanitize-env-vars.js';\nimport { validatePath, validateWritePath } from './path-policy.js';\nimport { validateCommand, auditCommand } from './command-validator.js';\nimport type { ExecPolicyResult, SandboxConfig, PathValidationResult } from './types.js';\nimport { DEFAULT_SANDBOX_CONFIG } from './types.js';\n\nconst log = createLogger('Sandbox:ExecPolicy');\n\n/**\n * Evaluate whether a shell command execution is allowed under the current sandbox policy.\n *\n * Checks (in order):\n * 1. Command injection / dangerous patterns\n * 2. Working directory path safety\n * 3. Environment variable sanitization\n */\nexport function evaluateExecPolicy(params: {\n  command: string;\n  cwd: string;\n  config?: Partial<SandboxConfig>;\n  allowedEnvVars?: string[];\n}): ExecPolicyResult {\n  const config = { ...DEFAULT_SANDBOX_CONFIG, ...params.config };\n\n  if (config.mode === 'off') {\n    return {\n      allowed: true,\n      sanitizedEnv: prepareSafeToolEnv(process.env, { allowedVars: params.allowedEnvVars }),\n      effectiveCwd: params.cwd,\n      timeoutMs: config.maxExecutionTimeMs,\n    };\n  }\n\n  // 1. Command validation\n  const commandResult = validateCommand(params.command);\n  if (!commandResult.allowed) {\n    log.warn(\n      { command: params.command.slice(0, 120), reason: commandResult.reason },\n      'Command blocked by sandbox policy',\n    );\n    return {\n      allowed: false,\n      reason: commandResult.reason,\n      sanitizedEnv: {},\n      effectiveCwd: params.cwd,\n      timeoutMs: config.maxExecutionTimeMs,\n    };\n  }\n\n  // Log warnings for medium-severity commands\n  if (commandResult.reason) {\n    log.info(\n      { command: params.command.slice(0, 120), warning: commandResult.reason },\n      'Command allowed with warning',\n    );\n  }\n\n  // 2. CWD path validation\n  const cwdResult = validatePath(params.cwd, {\n    allowedRoots: config.allowedRoots.length > 0 ? config.allowedRoots : undefined,\n    extraBlockedPaths: config.blockedPaths,\n  });\n  if (!cwdResult.allowed) {\n    log.warn({ cwd: params.cwd, reason: cwdResult.reason }, 'CWD blocked by path policy');\n    return {\n      allowed: false,\n      reason: `Working directory blocked: ${cwdResult.reason}`,\n      sanitizedEnv: {},\n      effectiveCwd: params.cwd,\n      timeoutMs: config.maxExecutionTimeMs,\n    };\n  }\n\n  // 3. Environment sanitization\n  const sanitizedEnv = prepareSafeToolEnv(process.env, {\n    allowedVars: params.allowedEnvVars ?? config.allowedEnvVars,\n  });\n\n  return {\n    allowed: true,\n    reason: commandResult.reason,\n    sanitizedEnv,\n    effectiveCwd: cwdResult.canonicalPath ?? params.cwd,\n    timeoutMs: config.maxExecutionTimeMs,\n  };\n}\n\n/**\n * Evaluate whether a file operation (read/write/edit/delete) is allowed.\n */\nexport function evaluateFilePolicy(params: {\n  operation: 'read' | 'write' | 'edit' | 'delete';\n  path: string;\n  workspaceRoot: string;\n  config?: Partial<SandboxConfig>;\n}): PathValidationResult {\n  const config = { ...DEFAULT_SANDBOX_CONFIG, ...params.config };\n\n  if (config.mode === 'off') {\n    return { allowed: true };\n  }\n\n  const isWriteOp = params.operation !== 'read';\n\n  const result = isWriteOp\n    ? validateWritePath(params.path, params.workspaceRoot, {\n        allowedRoots: config.allowedRoots.length > 0 ? config.allowedRoots : undefined,\n        extraBlockedPaths: config.blockedPaths,\n      })\n    : validatePath(\n        params.path.startsWith('/') ? params.path : resolve(params.workspaceRoot, params.path),\n        {\n          allowedRoots: config.allowedRoots.length > 0 ? config.allowedRoots : undefined,\n          extraBlockedPaths: config.blockedPaths,\n        },\n      );\n\n  if (!result.allowed) {\n    log.warn(\n      { operation: params.operation, path: params.path, reason: result.reason },\n      'File operation blocked by sandbox policy',\n    );\n  }\n\n  return result;\n}\n\n/**\n * Generate a full audit report for a command — useful for security logging.\n */\nexport function auditExecRequest(params: {\n  command: string;\n  cwd: string;\n}): { findings: { severity: 'critical' | 'high' | 'medium'; reason: string }[] } {\n  return { findings: auditCommand(params.command) };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;aAcqD;AAOrD,MAAM,MAAM,aAAa,qBAAqB;;;;;;;;;AAU9C,SAAgB,mBAAmB,QAKd;CACnB,MAAM,SAAS;EAAE,GAAG;EAAwB,GAAG,OAAO;EAAQ;AAE9D,KAAI,OAAO,SAAS,MAClB,QAAO;EACL,SAAS;EACT,cAAc,mBAAmB,QAAQ,KAAK,EAAE,aAAa,OAAO,gBAAgB,CAAC;EACrF,cAAc,OAAO;EACrB,WAAW,OAAO;EACnB;CAIH,MAAM,gBAAgB,gBAAgB,OAAO,QAAQ;AACrD,KAAI,CAAC,cAAc,SAAS;AAC1B,MAAI,KACF;GAAE,SAAS,OAAO,QAAQ,MAAM,GAAG,IAAI;GAAE,QAAQ,cAAc;GAAQ,EACvE,oCACD;AACD,SAAO;GACL,SAAS;GACT,QAAQ,cAAc;GACtB,cAAc,EAAE;GAChB,cAAc,OAAO;GACrB,WAAW,OAAO;GACnB;;AAIH,KAAI,cAAc,OAChB,KAAI,KACF;EAAE,SAAS,OAAO,QAAQ,MAAM,GAAG,IAAI;EAAE,SAAS,cAAc;EAAQ,EACxE,+BACD;CAIH,MAAM,YAAY,aAAa,OAAO,KAAK;EACzC,cAAc,OAAO,aAAa,SAAS,IAAI,OAAO,eAAe,KAAA;EACrE,mBAAmB,OAAO;EAC3B,CAAC;AACF,KAAI,CAAC,UAAU,SAAS;AACtB,MAAI,KAAK;GAAE,KAAK,OAAO;GAAK,QAAQ,UAAU;GAAQ,EAAE,6BAA6B;AACrF,SAAO;GACL,SAAS;GACT,QAAQ,8BAA8B,UAAU;GAChD,cAAc,EAAE;GAChB,cAAc,OAAO;GACrB,WAAW,OAAO;GACnB;;CAIH,MAAM,eAAe,mBAAmB,QAAQ,KAAK,EACnD,aAAa,OAAO,kBAAkB,OAAO,gBAC9C,CAAC;AAEF,QAAO;EACL,SAAS;EACT,QAAQ,cAAc;EACtB;EACA,cAAc,UAAU,iBAAiB,OAAO;EAChD,WAAW,OAAO;EACnB;;;;;AAMH,SAAgB,mBAAmB,QAKV;CACvB,MAAM,SAAS;EAAE,GAAG;EAAwB,GAAG,OAAO;EAAQ;AAE9D,KAAI,OAAO,SAAS,MAClB,QAAO,EAAE,SAAS,MAAM;CAK1B,MAAM,SAFY,OAAO,cAAc,SAGnC,kBAAkB,OAAO,MAAM,OAAO,eAAe;EACnD,cAAc,OAAO,aAAa,SAAS,IAAI,OAAO,eAAe,KAAA;EACrE,mBAAmB,OAAO;EAC3B,CAAC,GACF,aACE,OAAO,KAAK,WAAW,IAAI,GAAG,OAAO,OAAO,QAAQ,OAAO,eAAe,OAAO,KAAK,EACtF;EACE,cAAc,OAAO,aAAa,SAAS,IAAI,OAAO,eAAe,KAAA;EACrE,mBAAmB,OAAO;EAC3B,CACF;AAEL,KAAI,CAAC,OAAO,QACV,KAAI,KACF;EAAE,WAAW,OAAO;EAAW,MAAM,OAAO;EAAM,QAAQ,OAAO;EAAQ,EACzE,2CACD;AAGH,QAAO;;;;;AAMT,SAAgB,iBAAiB,QAGgD;AAC/E,QAAO,EAAE,UAAU,aAAa,OAAO,QAAQ,EAAE"}

package/dist/src/agent/sandbox/path-policy.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"path-policy.js","names":[],"sources":["../../../../src/agent/sandbox/path-policy.ts"],"sourcesContent":["/**\n * Path safety validation for sandbox isolation.\n *\n * Prevents path traversal to sensitive directories and detects symlink escape attempts.\n * Aligned with OpenClaw's validate-sandbox-security.ts blocked-path approach.\n */\n\nimport { realpathSync } from 'node:fs';\nimport { isAbsolute, normalize, posix, resolve, sep } from 'node:path';\nimport { homedir } from 'node:os';\n\nimport type { PathValidationResult } from './types.js';\n\n// ---------------------------------------------------------------------------\n// Blocked paths — system directories and credential stores\n// ---------------------------------------------------------------------------\n\nconst BLOCKED_ABSOLUTE_PATHS: readonly string[] = [\n  '/etc',\n  '/proc',\n  '/sys',\n  '/dev',\n  '/boot',\n  '/root',\n  '/run',\n  '/var/run',\n  // macOS equivalents\n  '/private/etc',\n  '/private/var/run',\n  // Docker socket\n  '/var/run/docker.sock',\n  '/private/var/run/docker.sock',\n  '/run/docker.sock',\n];\n\nconst BLOCKED_HOME_SUBPATHS: readonly string[] = [\n  '.ssh',\n  '.aws',\n  '.gnupg',\n  '.docker',\n  '.config',\n  '.netrc',\n  '.npmrc',\n  '.cargo/credentials',\n  '.kube',\n];\n\n// ---------------------------------------------------------------------------\n// Internal helpers\n// ---------------------------------------------------------------------------\n\nfunction normalizePosixPath(raw: string): string {\n  const slashPath = raw.replace(/\\\\/g, '/');\n  if (slashPath.startsWith('/')) {\n    return posix.normalize(slashPath);\n  }\n  return normalize(raw).replace(/\\\\/g, '/');\n}\n\nfunction resolvePolicyPath(raw: string): string {\n  const slashPath = raw.replace(/\\\\/g, '/');\n  if (slashPath.startsWith('/')) {\n    return posix.normalize(slashPath);\n  }\n  return resolve(raw);\n}\n\nfunction getBlockedPaths(): string[] {\n  const blocked = new Set(BLOCKED_ABSOLUTE_PATHS.map(normalizePosixPath));\n\n  const homes = new Set([\n    homedir(),\n    process.env.HOME,\n    process.env.USERPROFILE,\n  ].filter((home): home is string => Boolean(home && home !== '/')));\n  for (const home of homes) {\n    for (const sub of BLOCKED_HOME_SUBPATHS) {\n      blocked.add(normalizePosixPath(resolvePolicyPath(`${home}/${sub}`)));\n    }\n  }\n\n  return [...blocked];\n}\n\n/**\n * Check if `target` equals or is a descendant of `root`.\n */\nfunction isPathInsideOrEqual(root: string, target: string): boolean {\n  const normalizedRoot = normalizePosixPath(root);\n  const normalizedTarget = normalizePosixPath(target);\n  if (normalizedTarget === normalizedRoot) return true;\n  const prefix = normalizedRoot.endsWith('/') ? normalizedRoot : `${normalizedRoot}/`;\n  return normalizedTarget.startsWith(prefix);\n}\n\nfunction containsBlockedCredentialSegment(target: string): string | null {\n  const normalized = normalizePosixPath(target);\n  for (const sub of BLOCKED_HOME_SUBPATHS) {\n    const prefix = `/${sub.replace(/\\\\/g, '/')}`;\n    if (normalized.endsWith(prefix) || normalized.includes(`${prefix}/`)) {\n      return sub;\n    }\n  }\n  return null;\n}\n\n/**\n * Resolve symlinks by walking from the existing ancestor downward.\n * If the full path does not exist, resolve the deepest existing ancestor\n * and append the remaining segments — mirrors OpenClaw's approach.\n */\nfunction resolveCanonicalPath(targetPath: string): string {\n  try {\n    return realpathSync(targetPath);\n  } catch {\n    // Path does not exist yet — resolve the deepest existing ancestor.\n    const segments = targetPath.split(sep);\n    let resolved = segments[0] === '' ? '/' : segments[0];\n    let unresolved = '';\n\n    for (let i = 1; i < segments.length; i++) {\n      const candidate = resolve(resolved, segments[i]);\n      try {\n        resolved = realpathSync(candidate);\n      } catch {\n        unresolved = segments.slice(i).join('/');\n        break;\n      }\n    }\n\n    return unresolved ? `${resolved}/${unresolved}` : resolved;\n  }\n}\n\n// ---------------------------------------------------------------------------\n// Public API\n// ---------------------------------------------------------------------------\n\n/**\n * Validate that a path does not escape into blocked system/credential directories.\n *\n * The check runs in two passes:\n *  1. Lexical: normalize the path and check against blocked prefixes.\n *  2. Canonical: resolve symlinks (or deepest existing ancestor) and re-check.\n *\n * When `allowedRoots` are provided, the path must additionally be inside at\n * least one of them (after canonical resolution).\n */\nexport function validatePath(\n  rawPath: string,\n  options?: {\n    allowedRoots?: string[];\n    extraBlockedPaths?: string[];\n  },\n): PathValidationResult {\n  if (!rawPath || !rawPath.trim()) {\n    return { allowed: false, reason: 'Empty path' };\n  }\n\n  const target = normalizePosixPath(resolvePolicyPath(rawPath));\n  const blockedCredentialSegment = containsBlockedCredentialSegment(target);\n  if (blockedCredentialSegment) {\n    return { allowed: false, reason: `Path targets blocked directory: ${blockedCredentialSegment}` };\n  }\n\n  // Reject root mount\n  if (target === '/' || target === '\\\\') {\n    return { allowed: false, reason: 'Cannot operate on filesystem root' };\n  }\n\n  // --- Pass 1: lexical check ---\n  const blockedPaths = [\n    ...getBlockedPaths(),\n    ...(options?.extraBlockedPaths?.map(normalizePosixPath) ?? []),\n  ];\n\n  for (const blocked of blockedPaths) {\n    if (isPathInsideOrEqual(blocked, target)) {\n      return { allowed: false, reason: `Path targets blocked directory: ${blocked}` };\n    }\n    // Also block if the target *covers* a blocked path (e.g. mounting \"/\" covers \"/etc\")\n    if (isPathInsideOrEqual(target, blocked) && target !== blocked) {\n      // Only block covering for very sensitive roots\n      if (target === '/' || target === '/private') {\n        return { allowed: false, reason: `Path covers blocked directory: ${blocked}` };\n      }\n    }\n  }\n\n  // --- Pass 2: canonical (symlink-resolved) check ---\n  const canonical = resolveCanonicalPath(target);\n  const canonicalNormalized = normalizePosixPath(canonical);\n\n  if (canonicalNormalized !== target) {\n    for (const blocked of blockedPaths) {\n      if (isPathInsideOrEqual(blocked, canonicalNormalized)) {\n        return {\n          allowed: false,\n          reason: `Path resolves (via symlink) to blocked directory: ${blocked}`,\n        };\n      }\n    }\n  }\n\n  // --- Pass 3: allowed-roots enforcement ---\n  if (options?.allowedRoots && options.allowedRoots.length > 0) {\n    // Resolve roots the same way as the target so symlink prefixes (e.g. /home on macOS) match.\n    const normalizedRoots = options.allowedRoots.map((r) =>\n      normalizePosixPath(resolveCanonicalPath(resolvePolicyPath(r))),\n    );\n    const insideAllowedRoot = normalizedRoots.some((root) =>\n      isPathInsideOrEqual(root, canonicalNormalized),\n    );\n    if (!insideAllowedRoot) {\n      return {\n        allowed: false,\n        reason: `Path is outside allowed roots: ${normalizedRoots.join(', ')}`,\n      };\n    }\n  }\n\n  return { allowed: true, canonicalPath: canonicalNormalized };\n}\n\n/**\n * Validate a path specifically for file write/edit operations.\n * Adds protection for config files and profile system files.\n */\nexport function validateWritePath(\n  rawPath: string,\n  workspaceRoot: string,\n  options?: { allowedRoots?: string[]; extraBlockedPaths?: string[] },\n): PathValidationResult {\n  // Resolve relative paths under workspace\n  const resolvedPath = isAbsolute(rawPath) || rawPath.replace(/\\\\/g, '/').startsWith('/')\n    ? rawPath\n    : resolve(workspaceRoot, rawPath);\n\n  // Config file protection\n  const configProtectedPatterns = [\n    /\\/\\.xopc\\/xopc\\.json$/,\n    /\\/\\.env$/,\n    /\\/\\.env\\.local$/,\n    /\\/\\.env\\.production$/,\n  ];\n\n  const normalized = normalizePosixPath(resolvedPath);\n  for (const pattern of configProtectedPatterns) {\n    if (pattern.test(normalized)) {\n      return { allowed: false, reason: `Cannot write to protected config file: ${normalized}` };\n    }\n  }\n\n  return validatePath(resolvedPath, options);\n}\n"],"mappings":";;;;;;;;;;AAiBA,MAAM,yBAA4C;CAChD;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAEA;CACA;CAEA;CACA;CACA;CACD;AAED,MAAM,wBAA2C;CAC/C;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACD;AAMD,SAAS,mBAAmB,KAAqB;CAC/C,MAAM,YAAY,IAAI,QAAQ,OAAO,IAAI;AACzC,KAAI,UAAU,WAAW,IAAI,CAC3B,QAAO,MAAM,UAAU,UAAU;AAEnC,QAAO,UAAU,IAAI,CAAC,QAAQ,OAAO,IAAI;;AAG3C,SAAS,kBAAkB,KAAqB;CAC9C,MAAM,YAAY,IAAI,QAAQ,OAAO,IAAI;AACzC,KAAI,UAAU,WAAW,IAAI,CAC3B,QAAO,MAAM,UAAU,UAAU;AAEnC,QAAO,QAAQ,IAAI;;AAGrB,SAAS,kBAA4B;CACnC,MAAM,UAAU,IAAI,IAAI,uBAAuB,IAAI,mBAAmB,CAAC;CAEvE,MAAM,QAAQ,IAAI,IAAI;EACpB,SAAS;EACT,QAAQ,IAAI;EACZ,QAAQ,IAAI;EACb,CAAC,QAAQ,SAAyB,QAAQ,QAAQ,SAAS,IAAI,CAAC,CAAC;AAClE,MAAK,MAAM,QAAQ,MACjB,MAAK,MAAM,OAAO,sBAChB,SAAQ,IAAI,mBAAmB,kBAAkB,GAAG,KAAK,GAAG,MAAM,CAAC,CAAC;AAIxE,QAAO,CAAC,GAAG,QAAQ;;;;;AAMrB,SAAS,oBAAoB,MAAc,QAAyB;CAClE,MAAM,iBAAiB,mBAAmB,KAAK;CAC/C,MAAM,mBAAmB,mBAAmB,OAAO;AACnD,KAAI,qBAAqB,eAAgB,QAAO;CAChD,MAAM,SAAS,eAAe,SAAS,IAAI,GAAG,iBAAiB,GAAG,eAAe;AACjF,QAAO,iBAAiB,WAAW,OAAO;;AAG5C,SAAS,iCAAiC,QAA+B;CACvE,MAAM,aAAa,mBAAmB,OAAO;AAC7C,MAAK,MAAM,OAAO,uBAAuB;EACvC,MAAM,SAAS,IAAI,IAAI,QAAQ,OAAO,IAAI;AAC1C,MAAI,WAAW,SAAS,OAAO,IAAI,WAAW,SAAS,GAAG,OAAO,GAAG,CAClE,QAAO;;AAGX,QAAO;;;;;;;AAQT,SAAS,qBAAqB,YAA4B;AACxD,KAAI;AACF,SAAO,aAAa,WAAW;SACzB;EAEN,MAAM,WAAW,WAAW,MAAM,IAAI;EACtC,IAAI,WAAW,SAAS,OAAO,KAAK,MAAM,SAAS;EACnD,IAAI,aAAa;AAEjB,OAAK,IAAI,IAAI,GAAG,IAAI,SAAS,QAAQ,KAAK;GACxC,MAAM,YAAY,QAAQ,UAAU,SAAS,GAAG;AAChD,OAAI;AACF,eAAW,aAAa,UAAU;WAC5B;AACN,iBAAa,SAAS,MAAM,EAAE,CAAC,KAAK,IAAI;AACxC;;;AAIJ,SAAO,aAAa,GAAG,SAAS,GAAG,eAAe;;;;;;;;;;;;;AAkBtD,SAAgB,aACd,SACA,SAIsB;AACtB,KAAI,CAAC,WAAW,CAAC,QAAQ,MAAM,CAC7B,QAAO;EAAE,SAAS;EAAO,QAAQ;EAAc;CAGjD,MAAM,SAAS,mBAAmB,kBAAkB,QAAQ,CAAC;CAC7D,MAAM,2BAA2B,iCAAiC,OAAO;AACzE,KAAI,yBACF,QAAO;EAAE,SAAS;EAAO,QAAQ,mCAAmC;EAA4B;AAIlG,KAAI,WAAW,OAAO,WAAW,KAC/B,QAAO;EAAE,SAAS;EAAO,QAAQ;EAAqC;CAIxE,MAAM,eAAe,CACnB,GAAG,iBAAiB,EACpB,GAAI,SAAS,mBAAmB,IAAI,mBAAmB,IAAI,EAAE,CAC9D;AAED,MAAK,MAAM,WAAW,cAAc;AAClC,MAAI,oBAAoB,SAAS,OAAO,CACtC,QAAO;GAAE,SAAS;GAAO,QAAQ,mCAAmC;GAAW;AAGjF,MAAI,oBAAoB,QAAQ,QAAQ,IAAI,WAAW;OAEjD,WAAW,OAAO,WAAW,WAC/B,QAAO;IAAE,SAAS;IAAO,QAAQ,kCAAkC;IAAW;;;CAOpF,MAAM,sBAAsB,mBADV,qBAAqB,OACiB,CAAC;AAEzD,KAAI,wBAAwB;OACrB,MAAM,WAAW,aACpB,KAAI,oBAAoB,SAAS,oBAAoB,CACnD,QAAO;GACL,SAAS;GACT,QAAQ,qDAAqD;GAC9D;;AAMP,KAAI,SAAS,gBAAgB,QAAQ,aAAa,SAAS,GAAG;EAE5D,MAAM,kBAAkB,QAAQ,aAAa,KAAK,MAChD,mBAAmB,qBAAqB,kBAAkB,EAAE,CAAC,CAAC,CAC/D;AAID,MAAI,CAHsB,gBAAgB,MAAM,SAC9C,oBAAoB,MAAM,oBAAoB,CAE1B,CACpB,QAAO;GACL,SAAS;GACT,QAAQ,kCAAkC,gBAAgB,KAAK,KAAK;GACrE;;AAIL,QAAO;EAAE,SAAS;EAAM,eAAe;EAAqB;;;;;;AAO9D,SAAgB,kBACd,SACA,eACA,SACsB;CAEtB,MAAM,eAAe,WAAW,QAAQ,IAAI,QAAQ,QAAQ,OAAO,IAAI,CAAC,WAAW,IAAI,GACnF,UACA,QAAQ,eAAe,QAAQ;CAGnC,MAAM,0BAA0B;EAC9B;EACA;EACA;EACA;EACD;CAED,MAAM,aAAa,mBAAmB,aAAa;AACnD,MAAK,MAAM,WAAW,wBACpB,KAAI,QAAQ,KAAK,WAAW,CAC1B,QAAO;EAAE,SAAS;EAAO,QAAQ,0CAA0C;EAAc;AAI7F,QAAO,aAAa,cAAc,QAAQ"}

package/dist/src/agent/sandbox/sanitize-env-vars.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"sanitize-env-vars.js","names":[],"sources":["../../../../src/agent/sandbox/sanitize-env-vars.ts"],"sourcesContent":["/**\n * Filters process environment before passing it to child processes (e.g. exec_command)\n * to avoid leaking API keys and other credentials.\n */\n\nconst BLOCKED_ENV_VAR_PATTERNS: RegExp[] = [\n  /^ANTHROPIC_API_KEY$/i,\n  /^OPENAI_API_KEY$/i,\n  /^GEMINI_API_KEY$/i,\n  /^GOOGLE_API_KEY$/i,\n  /^TELEGRAM_BOT_TOKEN$/i,\n  /^DISCORD_BOT_TOKEN$/i,\n  /^XOPC_GATEWAY_TOKEN$/i,\n  /^XOPC_CONFIG$/i,\n  /^AWS_(SECRET_ACCESS_KEY|SECRET_KEY|SESSION_TOKEN)$/i,\n  /^AZURE_(CLIENT_SECRET|KEY)$/i,\n  /_?(API_KEY|TOKEN|PASSWORD|PASSWD|PRIVATE_KEY|SECRET)$/i,\n];\n\nconst MAX_ENV_VAR_LENGTH = 32768;\n\nexport interface SanitizedEnvVars {\n  safe: Record<string, string>;\n  blocked: string[];\n  warnings: string[];\n}\n\nfunction isDangerousEnvVar(key: string): boolean {\n  const upperKey = key.toUpperCase();\n  return BLOCKED_ENV_VAR_PATTERNS.some((pattern) => pattern.test(upperKey));\n}\n\nfunction validateEnvVarValue(key: string, value: string): string | null {\n  if (value.includes('\\0')) {\n    return `Environment variable ${key} contains null bytes`;\n  }\n  if (value.length > MAX_ENV_VAR_LENGTH) {\n    return `Environment variable ${key} exceeds maximum length (${MAX_ENV_VAR_LENGTH})`;\n  }\n  if (/^[A-Za-z0-9+/=]{80,}$/.test(value)) {\n    return `Environment variable ${key} looks like base64-encoded credential data`;\n  }\n  return null;\n}\n\nexport function sanitizeEnvVars(\n  env: Record<string, string | undefined>,\n  options?: {\n    allowedVars?: string[];\n    customBlocked?: RegExp[];\n  },\n): SanitizedEnvVars {\n  const safe: Record<string, string> = {};\n  const blocked: string[] = [];\n  const warnings: string[] = [];\n\n  const allowedVars = new Set(options?.allowedVars ?? []);\n  const customBlocked = options?.customBlocked ?? [];\n\n  for (const [key, value] of Object.entries(env)) {\n    if (value === undefined) continue;\n\n    if (allowedVars.has(key)) {\n      safe[key] = value;\n      continue;\n    }\n\n    const isBlocked =\n      isDangerousEnvVar(key) || customBlocked.some((pattern) => pattern.test(key));\n\n    if (isBlocked) {\n      blocked.push(key);\n      continue;\n    }\n\n    const warning = validateEnvVarValue(key, value);\n    if (warning) {\n      warnings.push(warning);\n      continue;\n    }\n\n    safe[key] = value;\n  }\n\n  return { safe, blocked, warnings };\n}\n\n/**\n * Environment for agent command execution: strips secrets, keeps normal tooling vars.\n */\nexport function prepareSafeToolEnv(\n  baseEnv: NodeJS.ProcessEnv | Record<string, string | undefined>,\n  options?: { allowedVars?: string[] },\n): Record<string, string> {\n  const { safe } = sanitizeEnvVars(baseEnv as Record<string, string | undefined>, options);\n  return {\n    ...safe,\n    HOME: typeof baseEnv.HOME === 'string' && baseEnv.HOME ? baseEnv.HOME : safe.HOME || '/tmp',\n  };\n}\n"],"mappings":";;;;;AAKA,MAAM,2BAAqC;CACzC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACD;AAED,MAAM,qBAAqB;AAQ3B,SAAS,kBAAkB,KAAsB;CAC/C,MAAM,WAAW,IAAI,aAAa;AAClC,QAAO,yBAAyB,MAAM,YAAY,QAAQ,KAAK,SAAS,CAAC;;AAG3E,SAAS,oBAAoB,KAAa,OAA8B;AACtE,KAAI,MAAM,SAAS,KAAK,CACtB,QAAO,wBAAwB,IAAI;AAErC,KAAI,MAAM,SAAS,mBACjB,QAAO,wBAAwB,IAAI,2BAA2B,mBAAmB;AAEnF,KAAI,wBAAwB,KAAK,MAAM,CACrC,QAAO,wBAAwB,IAAI;AAErC,QAAO;;AAGT,SAAgB,gBACd,KACA,SAIkB;CAClB,MAAM,OAA+B,EAAE;CACvC,MAAM,UAAoB,EAAE;CAC5B,MAAM,WAAqB,EAAE;CAE7B,MAAM,cAAc,IAAI,IAAI,SAAS,eAAe,EAAE,CAAC;CACvD,MAAM,gBAAgB,SAAS,iBAAiB,EAAE;AAElD,MAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,IAAI,EAAE;AAC9C,MAAI,UAAU,KAAA,EAAW;AAEzB,MAAI,YAAY,IAAI,IAAI,EAAE;AACxB,QAAK,OAAO;AACZ;;AAMF,MAFE,kBAAkB,IAAI,IAAI,cAAc,MAAM,YAAY,QAAQ,KAAK,IAAI,CAAC,EAE/D;AACb,WAAQ,KAAK,IAAI;AACjB;;EAGF,MAAM,UAAU,oBAAoB,KAAK,MAAM;AAC/C,MAAI,SAAS;AACX,YAAS,KAAK,QAAQ;AACtB;;AAGF,OAAK,OAAO;;AAGd,QAAO;EAAE;EAAM;EAAS;EAAU;;;;;AAMpC,SAAgB,mBACd,SACA,SACwB;CACxB,MAAM,EAAE,SAAS,gBAAgB,SAA+C,QAAQ;AACxF,QAAO;EACL,GAAG;EACH,MAAM,OAAO,QAAQ,SAAS,YAAY,QAAQ,OAAO,QAAQ,OAAO,KAAK,QAAQ;EACtF"}

package/dist/src/agent/sandbox/types.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.js","names":[],"sources":["../../../../src/agent/sandbox/types.ts"],"sourcesContent":["/**\n * Sandbox type definitions for Phase 1 process-level isolation.\n */\n\n/** Controls how strictly the sandbox enforces isolation. */\nexport type SandboxMode = 'off' | 'basic' | 'container';\n\n/** Result of path validation against the sandbox policy. */\nexport type PathValidationResult = {\n  allowed: boolean;\n  /** Canonical (symlink-resolved) path after validation. */\n  canonicalPath?: string;\n  reason?: string;\n};\n\n/** Result of command validation against injection patterns. */\nexport type CommandValidationResult = {\n  allowed: boolean;\n  reason?: string;\n  /** Risk severity when blocked. */\n  severity?: 'critical' | 'high' | 'medium';\n};\n\n/** Aggregated result from the exec policy layer. */\nexport type ExecPolicyResult = {\n  allowed: boolean;\n  reason?: string;\n  sanitizedEnv: Record<string, string>;\n  effectiveCwd: string;\n  timeoutMs: number;\n};\n\n/** Sandbox configuration for an agent or workspace. */\nexport type SandboxConfig = {\n  mode: SandboxMode;\n  /** Directories where file operations and command execution are allowed. */\n  allowedRoots: string[];\n  /** Maximum execution time for commands (ms). */\n  maxExecutionTimeMs: number;\n  /** Maximum output size from commands (bytes). */\n  maxOutputBytes: number;\n  /** Paths that are always blocked regardless of allowedRoots. */\n  blockedPaths?: string[];\n  /** Env var names to pass through even if they match secret heuristics. */\n  allowedEnvVars?: string[];\n};\n\n/** Default sandbox configuration. */\nexport const DEFAULT_SANDBOX_CONFIG: SandboxConfig = {\n  mode: 'basic',\n  allowedRoots: [],\n  maxExecutionTimeMs: 300_000,\n  maxOutputBytes: 50 * 1024,\n};\n"],"mappings":";;AAgDA,MAAa,yBAAwC;CACnD,MAAM;CACN,cAAc,EAAE;CAChB,oBAAoB;CACpB,gBAAgB,KAAK;CACtB"}

package/dist/src/agent/service/async-queue.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"async-queue.js","names":[],"sources":["../../../../src/agent/service/async-queue.ts"],"sourcesContent":["/**\n * Async FIFO queue with `for await` support.\n *\n * Replaces the ad-hoc `eventQueue + resolveWaiting` single-slot pattern that\n * the streaming direct turn used to manage SSE events. The previous pattern was\n * lossy if two pushes landed before the single waiter resumed; this queue keeps\n * the buffer growing until consumed, and closes cleanly so the iterator drains.\n */\nexport class AsyncQueue<T> implements AsyncIterable<T> {\n  private readonly buffer: T[] = [];\n  private readonly waiters: Array<(value: T | typeof CLOSE_SENTINEL) => void> = [];\n  private closed = false;\n\n  /** Push a value to the queue. No-op when the queue is closed. */\n  push(value: T): void {\n    if (this.closed) {\n      return;\n    }\n    const waiter = this.waiters.shift();\n    if (waiter) {\n      waiter(value);\n      return;\n    }\n    this.buffer.push(value);\n  }\n\n  /** Close the queue. Pending iterators drain any buffered values and then complete. */\n  close(): void {\n    if (this.closed) return;\n    this.closed = true;\n    while (this.waiters.length > 0) {\n      this.waiters.shift()!(CLOSE_SENTINEL);\n    }\n  }\n\n  /** True if the queue is closed and the internal buffer is drained. */\n  get isDrained(): boolean {\n    return this.closed && this.buffer.length === 0;\n  }\n\n  async *[Symbol.asyncIterator](): AsyncIterator<T> {\n    while (true) {\n      if (this.buffer.length > 0) {\n        yield this.buffer.shift()!;\n        continue;\n      }\n      if (this.closed) {\n        return;\n      }\n      const next = await new Promise<T | typeof CLOSE_SENTINEL>((resolve) => {\n        this.waiters.push(resolve);\n      });\n      if (next === CLOSE_SENTINEL) {\n        return;\n      }\n      yield next;\n    }\n  }\n}\n\nconst CLOSE_SENTINEL = Symbol('AsyncQueue.close');\n"],"mappings":";;;;;;;;;AAQA,IAAa,aAAb,MAAuD;CACrD,SAA+B,EAAE;CACjC,UAA8E,EAAE;CAChF,SAAiB;;CAGjB,KAAK,OAAgB;AACnB,MAAI,KAAK,OACP;EAEF,MAAM,SAAS,KAAK,QAAQ,OAAO;AACnC,MAAI,QAAQ;AACV,UAAO,MAAM;AACb;;AAEF,OAAK,OAAO,KAAK,MAAM;;;CAIzB,QAAc;AACZ,MAAI,KAAK,OAAQ;AACjB,OAAK,SAAS;AACd,SAAO,KAAK,QAAQ,SAAS,EAC3B,MAAK,QAAQ,OAAO,CAAE,eAAe;;;CAKzC,IAAI,YAAqB;AACvB,SAAO,KAAK,UAAU,KAAK,OAAO,WAAW;;CAG/C,QAAQ,OAAO,iBAAmC;AAChD,SAAO,MAAM;AACX,OAAI,KAAK,OAAO,SAAS,GAAG;AAC1B,UAAM,KAAK,OAAO,OAAO;AACzB;;AAEF,OAAI,KAAK,OACP;GAEF,MAAM,OAAO,MAAM,IAAI,SAAoC,YAAY;AACrE,SAAK,QAAQ,KAAK,QAAQ;KAC1B;AACF,OAAI,SAAS,eACX;AAEF,SAAM;;;;AAKZ,MAAM,iBAAiB,OAAO,mBAAmB"}

package/dist/src/agent/service/btw-query.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"btw-query.js","names":[],"sources":["../../../../src/agent/service/btw-query.ts"],"sourcesContent":["import type { AgentMessage } from '@earendil-works/pi-agent-core';\nimport { type UserMessage } from '@earendil-works/pi-ai/compat';\n\nimport { readAgentMessageContent } from '../memory/agent-message-access.js';\nimport type { SessionStore } from '../../session/index.js';\nimport type { CredentialResolverOptions } from '../../auth/credentials.js';\nimport { resolveModel } from '../../providers/index.js';\nimport {\n  completeWithResolvedCredentials,\n  createResolvedModelStream,\n  resolveModelCallApiKey,\n} from '../../providers/model-call.js';\n\ntype BtwLog = { warn: (obj: Record<string, unknown>, msg: string) => void };\n\nfunction textFromCompleteContent(content: unknown): string {\n  if (typeof content === 'string') {\n    return content;\n  }\n  if (!Array.isArray(content)) {\n    return '';\n  }\n  return content\n    .filter(\n      (c): c is { type: 'text'; text: string } =>\n        c?.type === 'text' && typeof (c as { text?: unknown }).text === 'string',\n    )\n    .map((c) => c.text || '')\n    .join('');\n}\n\nfunction formatMessagesForBtw(messages: AgentMessage[]): string {\n  return messages\n    .map((m) => {\n      const role = m.role;\n      let body = '';\n      const raw = readAgentMessageContent(m);\n      if (typeof raw === 'string') {\n        body = raw;\n      } else if (Array.isArray(raw)) {\n        body = raw\n          .filter((c): c is { type: 'text'; text: string } => c.type === 'text')\n          .map((c) => c.text || '')\n          .join('\\n');\n      }\n      const line = `[${role}]: ${body}`;\n      return line.length > 4000 ? `${line.slice(0, 4000)}…` : line;\n    })\n    .join('\\n\\n');\n}\n\n/** One-shot LLM answer for /btw: transcript as background only; does not persist. */\nexport async function runBtwQuery(opts: {\n  sessionKey: string;\n  question: string;\n  sessionStore: SessionStore;\n  modelForSession: string;\n  log: BtwLog;\n  maxTokens?: number;\n  temperature?: number;\n  includeSessionContext?: boolean;\n  onTextDelta?: (delta: string) => void | Promise<void>;\n  credentialOptions?: CredentialResolverOptions;\n}): Promise<{ text: string; error?: string }> {\n  const q = opts.question.trim();\n  if (!q) {\n    return { text: '', error: 'Empty question.' };\n  }\n  const modelRef = opts.modelForSession;\n  let model;\n  try {\n    model = resolveModel(modelRef);\n  } catch (err) {\n    const em = err instanceof Error ? err.message : String(err);\n    opts.log.warn({ err, modelRef, errorMessage: em }, 'btwQuery: model resolve failed');\n    return { text: '', error: `Could not resolve model: ${modelRef}` };\n  }\n\n  let apiKey: string | undefined;\n  try {\n    apiKey = await resolveModelCallApiKey(model, opts.credentialOptions);\n  } catch (err) {\n    const em = err instanceof Error ? err.message : String(err);\n    opts.log.warn({ err, modelRef, provider: model.provider, errorMessage: em }, 'btwQuery: credential lookup failed');\n    return { text: '', error: `Could not load credentials for provider: ${model.provider}` };\n  }\n  if (!apiKey) {\n    opts.log.warn({ modelRef, provider: model.provider }, 'btwQuery: provider credentials are not configured');\n    return { text: '', error: `No API key for provider: ${model.provider}` };\n  }\n\n  const includeSessionContext = opts.includeSessionContext ?? true;\n  let userPrompt = q;\n  if (includeSessionContext) {\n    const messages = await opts.sessionStore.load(opts.sessionKey);\n    const background = formatMessagesForBtw(messages.slice(-40));\n    const systemBlock = [\n      'You are answering an ephemeral /btw side question about the current conversation.',\n      'Use the conversation only as background context.',\n      'Answer only the side question. Do not continue or complete any unfinished task from the conversation.',\n      'Do not use tools, commands, or file writes unless the question explicitly requires a tiny code snippet.',\n      'If the question can be answered briefly, answer briefly.',\n    ].join('\\n');\n    userPrompt = [\n      systemBlock,\n      '',\n      '---',\n      'Conversation background (read-only):',\n      background || '(empty)',\n      '',\n      '---',\n      'Side question:',\n      q,\n    ].join('\\n');\n  }\n\n  const userMessage: UserMessage = { role: 'user', content: userPrompt, timestamp: Date.now() };\n  const controller = new AbortController();\n  const timeoutId = setTimeout(() => controller.abort(), 90_000);\n  try {\n    const requestedMaxTokens = Math.max(1, Math.trunc(opts.maxTokens ?? 2048));\n    const modelMaxTokens = typeof model.maxTokens === 'number' && Number.isFinite(model.maxTokens)\n      ? Math.max(1, Math.trunc(model.maxTokens))\n      : undefined;\n    const modelCallOptions = {\n      maxTokens: modelMaxTokens ? Math.min(requestedMaxTokens, modelMaxTokens) : requestedMaxTokens,\n      signal: controller.signal as AbortSignal,\n      apiKey,\n      ...(opts.temperature !== undefined ? { temperature: opts.temperature } : {}),\n    };\n    let streamedText = '';\n    const out = opts.onTextDelta\n      ? await (async () => {\n          const stream = await createResolvedModelStream(\n            model,\n            { messages: [userMessage] },\n            modelCallOptions,\n            opts.credentialOptions,\n          );\n          for await (const event of stream) {\n            const streamEvent = event as { type?: unknown; delta?: unknown; error?: unknown };\n            if (streamEvent.type === 'text_delta' && typeof streamEvent.delta === 'string') {\n              streamedText += streamEvent.delta;\n              await opts.onTextDelta?.(streamEvent.delta);\n              continue;\n            }\n            if (streamEvent.type === 'error') {\n              const error = streamEvent.error;\n              const message = error && typeof error === 'object' && 'errorMessage' in error\n                ? (error as { errorMessage?: unknown }).errorMessage\n                : undefined;\n              throw new Error(typeof message === 'string' && message ? message : 'Model stream failed');\n            }\n          }\n          return await stream.result();\n        })()\n      : await completeWithResolvedCredentials(model, { messages: [userMessage] }, modelCallOptions, opts.credentialOptions);\n    const response = out as {\n      content?: unknown;\n      stopReason?: unknown;\n      errorMessage?: unknown;\n      usage?: { output?: unknown; reasoning?: unknown };\n    };\n    const text = (streamedText || textFromCompleteContent(response.content)).trim();\n    if (text) return { text };\n\n    const stopReason = typeof response.stopReason === 'string' ? response.stopReason : undefined;\n    const errorMessage = typeof response.errorMessage === 'string' ? response.errorMessage.trim() : '';\n    if (stopReason === 'error' && errorMessage) {\n      opts.log.warn({ sessionKey: opts.sessionKey, modelRef, stopReason, errorMessage }, 'btwQuery model call failed');\n      return { text: '', error: errorMessage };\n    }\n    const contentTypes = Array.isArray(response.content)\n      ? response.content\n        .map((block) => block && typeof block === 'object' && 'type' in block\n          ? String((block as { type?: unknown }).type)\n          : 'unknown')\n        .join(', ')\n      : undefined;\n    const reasoningTokens = typeof response.usage?.reasoning === 'number' ? response.usage.reasoning : undefined;\n    const detail = [\n      stopReason ? `stop reason: ${stopReason}` : '',\n      contentTypes ? `content: ${contentTypes}` : '',\n      reasoningTokens != null ? `reasoning tokens: ${reasoningTokens}` : '',\n    ].filter(Boolean).join('; ');\n    const error = `No text returned from model${detail ? ` (${detail})` : ''}.`;\n    opts.log.warn({\n      sessionKey: opts.sessionKey,\n      modelRef,\n      stopReason,\n      errorMessage: errorMessage || undefined,\n      contentTypes,\n      reasoningTokens,\n    }, 'btwQuery returned no text');\n    return { text: '', error };\n  } catch (err) {\n    const em = err instanceof Error ? err.message : String(err);\n    opts.log.warn({ err, sessionKey: opts.sessionKey, errorMessage: em }, 'btwQuery failed');\n    return { text: '', error: em };\n  } finally {\n    clearTimeout(timeoutId);\n  }\n}\n"],"mappings":";;;;gBAMwD;AASxD,SAAS,wBAAwB,SAA0B;AACzD,KAAI,OAAO,YAAY,SACrB,QAAO;AAET,KAAI,CAAC,MAAM,QAAQ,QAAQ,CACzB,QAAO;AAET,QAAO,QACJ,QACE,MACC,GAAG,SAAS,UAAU,OAAQ,EAAyB,SAAS,SACnE,CACA,KAAK,MAAM,EAAE,QAAQ,GAAG,CACxB,KAAK,GAAG;;AAGb,SAAS,qBAAqB,UAAkC;AAC9D,QAAO,SACJ,KAAK,MAAM;EACV,MAAM,OAAO,EAAE;EACf,IAAI,OAAO;EACX,MAAM,MAAM,wBAAwB,EAAE;AACtC,MAAI,OAAO,QAAQ,SACjB,QAAO;WACE,MAAM,QAAQ,IAAI,CAC3B,QAAO,IACJ,QAAQ,MAA2C,EAAE,SAAS,OAAO,CACrE,KAAK,MAAM,EAAE,QAAQ,GAAG,CACxB,KAAK,KAAK;EAEf,MAAM,OAAO,IAAI,KAAK,KAAK;AAC3B,SAAO,KAAK,SAAS,MAAO,GAAG,KAAK,MAAM,GAAG,IAAK,CAAC,KAAK;GACxD,CACD,KAAK,OAAO;;;AAIjB,eAAsB,YAAY,MAWY;CAC5C,MAAM,IAAI,KAAK,SAAS,MAAM;AAC9B,KAAI,CAAC,EACH,QAAO;EAAE,MAAM;EAAI,OAAO;EAAmB;CAE/C,MAAM,WAAW,KAAK;CACtB,IAAI;AACJ,KAAI;AACF,UAAQ,aAAa,SAAS;UACvB,KAAK;EACZ,MAAM,KAAK,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAC3D,OAAK,IAAI,KAAK;GAAE;GAAK;GAAU,cAAc;GAAI,EAAE,iCAAiC;AACpF,SAAO;GAAE,MAAM;GAAI,OAAO,4BAA4B;GAAY;;CAGpE,IAAI;AACJ,KAAI;AACF,WAAS,MAAM,uBAAuB,OAAO,KAAK,kBAAkB;UAC7D,KAAK;EACZ,MAAM,KAAK,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAC3D,OAAK,IAAI,KAAK;GAAE;GAAK;GAAU,UAAU,MAAM;GAAU,cAAc;GAAI,EAAE,qCAAqC;AAClH,SAAO;GAAE,MAAM;GAAI,OAAO,4CAA4C,MAAM;GAAY;;AAE1F,KAAI,CAAC,QAAQ;AACX,OAAK,IAAI,KAAK;GAAE;GAAU,UAAU,MAAM;GAAU,EAAE,oDAAoD;AAC1G,SAAO;GAAE,MAAM;GAAI,OAAO,4BAA4B,MAAM;GAAY;;CAG1E,MAAM,wBAAwB,KAAK,yBAAyB;CAC5D,IAAI,aAAa;AACjB,KAAI,uBAAuB;EAEzB,MAAM,aAAa,sBAAqB,MADjB,KAAK,aAAa,KAAK,KAAK,WAAW,EACb,MAAM,IAAI,CAAC;AAQ5D,eAAa;GAPO;IAClB;IACA;IACA;IACA;IACA;IACD,CAAC,KAAK,KAEM;GACX;GACA;GACA;GACA,cAAc;GACd;GACA;GACA;GACA;GACD,CAAC,KAAK,KAAK;;CAGd,MAAM,cAA2B;EAAE,MAAM;EAAQ,SAAS;EAAY,WAAW,KAAK,KAAK;EAAE;CAC7F,MAAM,aAAa,IAAI,iBAAiB;CACxC,MAAM,YAAY,iBAAiB,WAAW,OAAO,EAAE,IAAO;AAC9D,KAAI;EACF,MAAM,qBAAqB,KAAK,IAAI,GAAG,KAAK,MAAM,KAAK,aAAa,KAAK,CAAC;EAC1E,MAAM,iBAAiB,OAAO,MAAM,cAAc,YAAY,OAAO,SAAS,MAAM,UAAU,GAC1F,KAAK,IAAI,GAAG,KAAK,MAAM,MAAM,UAAU,CAAC,GACxC,KAAA;EACJ,MAAM,mBAAmB;GACvB,WAAW,iBAAiB,KAAK,IAAI,oBAAoB,eAAe,GAAG;GAC3E,QAAQ,WAAW;GACnB;GACA,GAAI,KAAK,gBAAgB,KAAA,IAAY,EAAE,aAAa,KAAK,aAAa,GAAG,EAAE;GAC5E;EACD,IAAI,eAAe;EA2BnB,MAAM,WA1BM,KAAK,cACb,OAAO,YAAY;GACjB,MAAM,SAAS,MAAM,0BACnB,OACA,EAAE,UAAU,CAAC,YAAY,EAAE,EAC3B,kBACA,KAAK,kBACN;AACD,cAAW,MAAM,SAAS,QAAQ;IAChC,MAAM,cAAc;AACpB,QAAI,YAAY,SAAS,gBAAgB,OAAO,YAAY,UAAU,UAAU;AAC9E,qBAAgB,YAAY;AAC5B,WAAM,KAAK,cAAc,YAAY,MAAM;AAC3C;;AAEF,QAAI,YAAY,SAAS,SAAS;KAChC,MAAM,QAAQ,YAAY;KAC1B,MAAM,UAAU,SAAS,OAAO,UAAU,YAAY,kBAAkB,QACnE,MAAqC,eACtC,KAAA;AACJ,WAAM,IAAI,MAAM,OAAO,YAAY,YAAY,UAAU,UAAU,sBAAsB;;;AAG7F,UAAO,MAAM,OAAO,QAAQ;MAC1B,GACJ,MAAM,gCAAgC,OAAO,EAAE,UAAU,CAAC,YAAY,EAAE,EAAE,kBAAkB,KAAK,kBAAkB;EAOvH,MAAM,QAAQ,gBAAgB,wBAAwB,SAAS,QAAQ,EAAE,MAAM;AAC/E,MAAI,KAAM,QAAO,EAAE,MAAM;EAEzB,MAAM,aAAa,OAAO,SAAS,eAAe,WAAW,SAAS,aAAa,KAAA;EACnF,MAAM,eAAe,OAAO,SAAS,iBAAiB,WAAW,SAAS,aAAa,MAAM,GAAG;AAChG,MAAI,eAAe,WAAW,cAAc;AAC1C,QAAK,IAAI,KAAK;IAAE,YAAY,KAAK;IAAY;IAAU;IAAY;IAAc,EAAE,6BAA6B;AAChH,UAAO;IAAE,MAAM;IAAI,OAAO;IAAc;;EAE1C,MAAM,eAAe,MAAM,QAAQ,SAAS,QAAQ,GAChD,SAAS,QACR,KAAK,UAAU,SAAS,OAAO,UAAU,YAAY,UAAU,QAC5D,OAAQ,MAA6B,KAAK,GAC1C,UAAU,CACb,KAAK,KAAK,GACX,KAAA;EACJ,MAAM,kBAAkB,OAAO,SAAS,OAAO,cAAc,WAAW,SAAS,MAAM,YAAY,KAAA;EACnG,MAAM,SAAS;GACb,aAAa,gBAAgB,eAAe;GAC5C,eAAe,YAAY,iBAAiB;GAC5C,mBAAmB,OAAO,qBAAqB,oBAAoB;GACpE,CAAC,OAAO,QAAQ,CAAC,KAAK,KAAK;EAC5B,MAAM,QAAQ,8BAA8B,SAAS,KAAK,OAAO,KAAK,GAAG;AACzE,OAAK,IAAI,KAAK;GACZ,YAAY,KAAK;GACjB;GACA;GACA,cAAc,gBAAgB,KAAA;GAC9B;GACA;GACD,EAAE,4BAA4B;AAC/B,SAAO;GAAE,MAAM;GAAI;GAAO;UACnB,KAAK;EACZ,MAAM,KAAK,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAC3D,OAAK,IAAI,KAAK;GAAE;GAAK,YAAY,KAAK;GAAY,cAAc;GAAI,EAAE,kBAAkB;AACxF,SAAO;GAAE,MAAM;GAAI,OAAO;GAAI;WACtB;AACR,eAAa,UAAU"}

package/dist/src/agent/service/build-direct-message-content.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"build-direct-message-content.js","names":[],"sources":["../../../../src/agent/service/build-direct-message-content.ts"],"sourcesContent":["import type { Config } from '../../config/schema.js';\nimport { getAgentDefaultModelRef } from '../../config/schema.js';\nimport { getDefaultModelSync } from '../../providers/index.js';\nimport type { MediaRef } from '../../channels/attachments/inbound-persist.js';\nimport { buildTranscriptUserMessage } from '../inbound/attachment-pipeline.js';\nimport type { AgentInstanceGateway } from '../agent-instance-gateway.js';\nimport type { ModelManager } from '../models/index.js';\n\nexport type { InboundAttachmentInput as DirectInboundWireAttachment } from '../../channels/attachments/inbound-persist.js';\nexport type { MediaRef as DirectInboundAttachment } from '../../channels/attachments/inbound-persist.js';\n\nexport async function buildDirectUserMessageContent(opts: {\n  content: string;\n  attachments?: MediaRef[];\n  sessionKey?: string;\n  config: Config;\n  agentManager: AgentInstanceGateway;\n  modelManager: ModelManager;\n}) {\n  const sk = opts.sessionKey ?? '';\n  const modelRef =\n    sk !== ''\n      ? opts.modelManager.getModelForSession(sk)\n      : getAgentDefaultModelRef(opts.config) ?? getDefaultModelSync(opts.config);\n\n  return buildTranscriptUserMessage({\n    text: opts.content,\n    prepared: opts.attachments,\n    sessionKey: sk,\n    modelRef: modelRef || getDefaultModelSync(opts.config),\n    config: opts.config,\n    agentManager: opts.agentManager,\n  });\n}\n"],"mappings":";;;;aACiE;gBACF;AAS/D,eAAsB,8BAA8B,MAOjD;CACD,MAAM,KAAK,KAAK,cAAc;CAC9B,MAAM,WACJ,OAAO,KACH,KAAK,aAAa,mBAAmB,GAAG,GACxC,wBAAwB,KAAK,OAAO,IAAI,oBAAoB,KAAK,OAAO;AAE9E,QAAO,2BAA2B;EAChC,MAAM,KAAK;EACX,UAAU,KAAK;EACf,YAAY;EACZ,UAAU,YAAY,oBAAoB,KAAK,OAAO;EACtD,QAAQ,KAAK;EACb,cAAc,KAAK;EACpB,CAAC"}

package/dist/src/agent/service/direct-turn-helpers.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"direct-turn-helpers.js","names":[],"sources":["../../../../src/agent/service/direct-turn-helpers.ts"],"sourcesContent":["/**\n * Shared building blocks for the two direct-turn entry points (streaming\n * webchat SSE and one-shot CLI). Both flows do the same hydrate → maybe-slash\n * → run-embedded-turn → after-turn dance; this module captures that core so\n * the entry points only manage their I/O specifics (event sink, voice STT,\n * TTS, transcript persistence).\n */\n\nimport crypto from 'node:crypto';\n\nimport type { AgentMessage } from '@earendil-works/pi-agent-core';\nimport type { ImageContent } from '@earendil-works/pi-ai';\n\nimport { commandRegistry } from '../../chat-commands/index.js';\nimport { parseSlashCommand } from '../../chat-commands/command-parse.js';\nimport { shouldSkipResetOverlapCommand } from '../../session/reset-triggers.js';\nimport { hydrateUserTurnForLlm, type TranscriptUserMessage } from '../inbound/attachment-pipeline.js';\nimport type { CommandHandler } from '../messaging/command-handler.js';\nimport type { CommandStreamEvent } from '../../chat-commands/types.js';\nimport type { SessionStore } from '../../session/index.js';\nimport type { Config } from '../../config/schema.js';\nimport type { AgentInstanceGateway } from '../agent-instance-gateway.js';\nimport type { ModelManager } from '../models/index.js';\nimport { extractAgentUserPlainText } from '../memory/user-message-text.js';\nimport { runEmbeddedTurnForSession } from '../embedded/run-for-session.js';\nimport type { EmbeddedStreamEvent } from '../embedded/types.js';\nimport { resolveImageHandlingStrategy } from '../image/vision-detection.js';\n\nexport interface HydratePerTurnStateDeps {\n  hydrateSessionWorkspaceFromStore: (sessionKey: string) => Promise<void>;\n  hydrateSessionModelFromStore: (sessionKey: string) => Promise<void>;\n  applyResolvedThinkingLevel: (sessionKey: string, thinking?: string | null) => Promise<void>;\n}\n\n/** Workspace + model + thinking level — common prep before any direct turn. */\nexport async function hydratePerTurnState(\n  deps: HydratePerTurnStateDeps,\n  sessionKey: string,\n  thinking?: string,\n): Promise<void> {\n  await deps.hydrateSessionWorkspaceFromStore(sessionKey);\n  await deps.hydrateSessionModelFromStore(sessionKey);\n  await deps.applyResolvedThinkingLevel(sessionKey, thinking);\n}\n\nexport interface SlashCommandOutcome {\n  /** True if the input parsed as a registered slash command (handled or not). */\n  matched: boolean;\n  /** Aggregated user-visible reply text (assistant view). */\n  aggregatedText: string;\n  /** The parsed command name when matched. */\n  command?: string;\n  /** Structured command result metadata for webchat and other rich clients. */\n  metadata?: Record<string, unknown>;\n}\n\nexport interface TryRunSlashCommandDeps {\n  commandHandler: Pick<CommandHandler, 'executeCommandAndAggregateReply'>;\n  log: { warn: (obj: Record<string, unknown>, msg: string) => void };\n}\n\n/**\n * Detect a slash command and, if registered, execute it and aggregate the reply\n * text. Errors thrown inside the command surface as `aggregatedText` so callers\n * can persist the receipt or stream it as a token.\n */\nexport async function tryRunSlashCommand(\n  deps: TryRunSlashCommandDeps,\n  ctx: {\n    sessionKey: string;\n    channel: string;\n    chatId: string;\n    senderId?: string;\n    isGroup?: boolean;\n    inboundMetadata?: Record<string, unknown>;\n  },\n  content: string,\n  options?: {\n    skipResetCommands?: boolean;\n    emitEvent?: (event: CommandStreamEvent) => void | Promise<void>;\n  },\n): Promise<SlashCommandOutcome> {\n  const parsed = parseSlashCommand(content);\n  if (!parsed) {\n    return { matched: false, aggregatedText: '' };\n  }\n  if (options?.skipResetCommands && shouldSkipResetOverlapCommand(parsed.command, true)) {\n    return { matched: false, aggregatedText: '' };\n  }\n  if (!commandRegistry.has(parsed.command)) {\n    return { matched: false, aggregatedText: '' };\n  }\n  try {\n    const { aggregatedText, metadata } = await deps.commandHandler.executeCommandAndAggregateReply(\n      parsed.command,\n      parsed.args,\n      {\n        sessionKey: ctx.sessionKey,\n        channel: ctx.channel,\n        chatId: ctx.chatId,\n        senderId: ctx.senderId ?? '',\n        isGroup: ctx.isGroup ?? false,\n        inboundMetadata: ctx.inboundMetadata ?? {},\n      },\n      { emitEvent: options?.emitEvent },\n    );\n    return { matched: true, aggregatedText: aggregatedText ?? '', command: parsed.command, metadata };\n  } catch (err) {\n    const em = err instanceof Error ? err.message : String(err);\n    deps.log.warn(\n      { err, sessionKey: ctx.sessionKey, command: parsed.command },\n      `Slash command failed: ${em}`,\n    );\n    return { matched: true, aggregatedText: `Command error: ${em}`, command: parsed.command };\n  }\n}\n\nexport interface RunDirectAgentTurnDeps {\n  sessionStore: SessionStore;\n  agentManager: AgentInstanceGateway;\n  modelManager: ModelManager;\n  config: Config | undefined;\n}\n\nexport interface RunDirectAgentTurnInput {\n  sessionKey: string;\n  runId?: string;\n  userMessage: AgentMessage;\n  abortSignal?: AbortSignal;\n  sourceImages?: ImageContent[];\n  onEvent?: (event: EmbeddedStreamEvent) => void;\n}\n\nexport interface RunDirectAgentTurnResult {\n  ok: boolean;\n  errorMessage?: string;\n  lastAssistantText?: string;\n}\n\n/**\n * Convert a user message into an embedded turn, including the standard memory\n * prefetch + background-review nudge wiring used by every direct entry point.\n */\nexport async function runDirectAgentTurn(\n  deps: RunDirectAgentTurnDeps,\n  input: RunDirectAgentTurnInput,\n): Promise<RunDirectAgentTurnResult> {\n  const userPlain = extractAgentUserPlainText(input.userMessage);\n  const userContext = await deps.agentManager.prepareUserTurnContext(\n    input.userMessage,\n    input.sessionKey,\n  );\n  const userMessageForModel = userContext.modelMessage;\n  if (userContext.consentRequests.length > 0) {\n    input.onEvent?.({\n      type: 'memory_consent_required',\n      runId: input.runId,\n      requests: userContext.consentRequests,\n    });\n  }\n\n  const modelRef = deps.modelManager.getModelForSession(input.sessionKey);\n  const llmTurn = await hydrateUserTurnForLlm({\n    message: input.userMessage as TranscriptUserMessage,\n    modelRef,\n  });\n  const sourceImages = resolveImageHandlingStrategy(modelRef) === 'native' ? (input.sourceImages ?? []) : [];\n  const llmImages = [...llmTurn.images, ...sourceImages];\n\n  const result = await runEmbeddedTurnForSession({\n    sessionKey: input.sessionKey,\n    runId: input.runId ?? crypto.randomUUID(),\n    userMessage: userMessageForModel,\n    llmImages,\n    sessionStore: deps.sessionStore,\n    agentManager: deps.agentManager,\n    modelManager: deps.modelManager,\n    getConfig: () => deps.config,\n    abortSignal: input.abortSignal,\n    beforeTurn: () => deps.agentManager.beginBackgroundReviewUserTurn(input.sessionKey),\n    onEvent: input.onEvent,\n  });\n\n  const understandingReview = await deps.agentManager.afterAgentTurn(input.sessionKey, userPlain);\n  if (understandingReview?.createdRecords.length) {\n    input.onEvent?.({ type: 'memory_captured', runId: input.runId, records: understandingReview.createdRecords });\n  }\n  deps.agentManager.scheduleBackgroundReviewAfterUserTurn(input.sessionKey);\n\n  return result;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAmCA,eAAsB,oBACpB,MACA,YACA,UACe;AACf,OAAM,KAAK,iCAAiC,WAAW;AACvD,OAAM,KAAK,6BAA6B,WAAW;AACnD,OAAM,KAAK,2BAA2B,YAAY,SAAS;;;;;;;AAwB7D,eAAsB,mBACpB,MACA,KAQA,SACA,SAI8B;CAC9B,MAAM,SAAS,kBAAkB,QAAQ;AACzC,KAAI,CAAC,OACH,QAAO;EAAE,SAAS;EAAO,gBAAgB;EAAI;AAE/C,KAAI,SAAS,qBAAqB,8BAA8B,OAAO,SAAS,KAAK,CACnF,QAAO;EAAE,SAAS;EAAO,gBAAgB;EAAI;AAE/C,KAAI,CAAC,gBAAgB,IAAI,OAAO,QAAQ,CACtC,QAAO;EAAE,SAAS;EAAO,gBAAgB;EAAI;AAE/C,KAAI;EACF,MAAM,EAAE,gBAAgB,aAAa,MAAM,KAAK,eAAe,gCAC7D,OAAO,SACP,OAAO,MACP;GACE,YAAY,IAAI;GAChB,SAAS,IAAI;GACb,QAAQ,IAAI;GACZ,UAAU,IAAI,YAAY;GAC1B,SAAS,IAAI,WAAW;GACxB,iBAAiB,IAAI,mBAAmB,EAAE;GAC3C,EACD,EAAE,WAAW,SAAS,WAAW,CAClC;AACD,SAAO;GAAE,SAAS;GAAM,gBAAgB,kBAAkB;GAAI,SAAS,OAAO;GAAS;GAAU;UAC1F,KAAK;EACZ,MAAM,KAAK,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAC3D,OAAK,IAAI,KACP;GAAE;GAAK,YAAY,IAAI;GAAY,SAAS,OAAO;GAAS,EAC5D,yBAAyB,KAC1B;AACD,SAAO;GAAE,SAAS;GAAM,gBAAgB,kBAAkB;GAAM,SAAS,OAAO;GAAS;;;;;;;AA8B7F,eAAsB,mBACpB,MACA,OACmC;CACnC,MAAM,YAAY,0BAA0B,MAAM,YAAY;CAC9D,MAAM,cAAc,MAAM,KAAK,aAAa,uBAC1C,MAAM,aACN,MAAM,WACP;CACD,MAAM,sBAAsB,YAAY;AACxC,KAAI,YAAY,gBAAgB,SAAS,EACvC,OAAM,UAAU;EACd,MAAM;EACN,OAAO,MAAM;EACb,UAAU,YAAY;EACvB,CAAC;CAGJ,MAAM,WAAW,KAAK,aAAa,mBAAmB,MAAM,WAAW;CACvE,MAAM,UAAU,MAAM,sBAAsB;EAC1C,SAAS,MAAM;EACf;EACD,CAAC;CACF,MAAM,eAAe,6BAA6B,SAAS,KAAK,WAAY,MAAM,gBAAgB,EAAE,GAAI,EAAE;CAC1G,MAAM,YAAY,CAAC,GAAG,QAAQ,QAAQ,GAAG,aAAa;CAEtD,MAAM,SAAS,MAAM,0BAA0B;EAC7C,YAAY,MAAM;EAClB,OAAO,MAAM,SAAS,OAAO,YAAY;EACzC,aAAa;EACb;EACA,cAAc,KAAK;EACnB,cAAc,KAAK;EACnB,cAAc,KAAK;EACnB,iBAAiB,KAAK;EACtB,aAAa,MAAM;EACnB,kBAAkB,KAAK,aAAa,8BAA8B,MAAM,WAAW;EACnF,SAAS,MAAM;EAChB,CAAC;CAEF,MAAM,sBAAsB,MAAM,KAAK,aAAa,eAAe,MAAM,YAAY,UAAU;AAC/F,KAAI,qBAAqB,eAAe,OACtC,OAAM,UAAU;EAAE,MAAM;EAAmB,OAAO,MAAM;EAAO,SAAS,oBAAoB;EAAgB,CAAC;AAE/G,MAAK,aAAa,sCAAsC,MAAM,WAAW;AAEzE,QAAO"}

package/dist/src/agent/service/parse-outbound-session-key.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"parse-outbound-session-key.js","names":[],"sources":["../../../../src/agent/service/parse-outbound-session-key.ts"],"sourcesContent":["import type { Config } from '../../config/schema.js';\nimport { INTERNAL_OUTBOUND_DROP_CHANNEL } from '../../channels/internal-outbound.js';\nimport { getSessionMetadata } from '../../storage/sqlite/index.js';\n\n/**\n * Map a session key to outbound channel routing (heartbeat/cron/virtual keys included).\n */\nexport function parseOutboundSessionKey(\n  sessionKey: string,\n  config: Config | undefined,\n): { channel: string; chatId: string } {\n  const parts = sessionKey.split(':').filter(Boolean);\n  const first = parts[0] || 'cli';\n\n  if (first === 'heartbeat') {\n    const hb = config?.gateway?.heartbeat;\n    const target = hb?.target?.trim();\n    const targetChatId = hb?.targetChatId?.trim();\n    if (target && targetChatId) {\n      return { channel: target, chatId: targetChatId };\n    }\n    return { channel: INTERNAL_OUTBOUND_DROP_CHANNEL, chatId: parts.slice(1).join(':') || 'heartbeat' };\n  }\n\n  const metadata = getSessionMetadata(sessionKey);\n  const routing = metadata?.routing;\n  if (routing?.source && routing.peerId) {\n    return { channel: routing.source, chatId: routing.peerId };\n  }\n  if (metadata?.sourceChannel && metadata.sourceChatId) {\n    return { channel: metadata.sourceChannel, chatId: metadata.sourceChatId };\n  }\n\n  if (first === 'cron') {\n    return { channel: INTERNAL_OUTBOUND_DROP_CHANNEL, chatId: parts.slice(1).join(':') || 'cron' };\n  }\n\n  return { channel: 'cli', chatId: 'main' };\n}\n"],"mappings":";;;;;;;AAOA,SAAgB,wBACd,YACA,QACqC;CACrC,MAAM,QAAQ,WAAW,MAAM,IAAI,CAAC,OAAO,QAAQ;CACnD,MAAM,QAAQ,MAAM,MAAM;AAE1B,KAAI,UAAU,aAAa;EACzB,MAAM,KAAK,QAAQ,SAAS;EAC5B,MAAM,SAAS,IAAI,QAAQ,MAAM;EACjC,MAAM,eAAe,IAAI,cAAc,MAAM;AAC7C,MAAI,UAAU,aACZ,QAAO;GAAE,SAAS;GAAQ,QAAQ;GAAc;AAElD,SAAO;GAAE,SAAS;GAAgC,QAAQ,MAAM,MAAM,EAAE,CAAC,KAAK,IAAI,IAAI;GAAa;;CAGrG,MAAM,WAAW,mBAAmB,WAAW;CAC/C,MAAM,UAAU,UAAU;AAC1B,KAAI,SAAS,UAAU,QAAQ,OAC7B,QAAO;EAAE,SAAS,QAAQ;EAAQ,QAAQ,QAAQ;EAAQ;AAE5D,KAAI,UAAU,iBAAiB,SAAS,aACtC,QAAO;EAAE,SAAS,SAAS;EAAe,QAAQ,SAAS;EAAc;AAG3E,KAAI,UAAU,OACZ,QAAO;EAAE,SAAS;EAAgC,QAAQ,MAAM,MAAM,EAAE,CAAC,KAAK,IAAI,IAAI;EAAQ;AAGhG,QAAO;EAAE,SAAS;EAAO,QAAQ;EAAQ"}

package/dist/src/agent/service/process-direct-one-shot.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"process-direct-one-shot.js","names":[],"sources":["../../../../src/agent/service/process-direct-one-shot.ts"],"sourcesContent":["import type { AgentMessage } from '@earendil-works/pi-agent-core';\n\nimport type { CommandHandler } from '../messaging/command-handler.js';\nimport type { AgentInstanceGateway } from '../agent-instance-gateway.js';\nimport type { ModelManager } from '../models/index.js';\nimport type { SessionStore } from '../../session/index.js';\nimport type { Config } from '../../config/schema.js';\nimport { initSessionTurn } from '../../session/index.js';\nimport {\n  buildDirectUserMessageContent,\n} from './build-direct-message-content.js';\nimport type { ProcessDirectStreamLog } from './process-direct-streaming.js';\nimport type {\n  InboundAttachmentInput,\n  MediaRef,\n} from '../../channels/attachments/inbound-persist.js';\nimport {\n  hydratePerTurnState,\n  runDirectAgentTurn,\n  tryRunSlashCommand,\n} from './direct-turn-helpers.js';\nimport {\n  clearPendingTranscriptUserMessage,\n  setPendingTranscriptUserMessage,\n  type TranscriptUserMessage,\n} from '../inbound/attachment-pipeline.js';\nimport type { ReviewOutput } from '../../review/review-types.js';\n\nexport type RunProcessDirectDeps = {\n  log: ProcessDirectStreamLog;\n  config: Config;\n  resolveSessionEndpoint: (sessionKey: string) => Promise<{ channel: string; chatId: string }>;\n  initSessionContext: (sessionKey: string, channel: string, chatId: string) => void;\n  hydrateSessionWorkspaceFromStore: (sessionKey: string) => Promise<void>;\n  hydrateSessionModelFromStore: (sessionKey: string) => Promise<void>;\n  agentManager: AgentInstanceGateway;\n  sessionStore: SessionStore;\n  modelManager: ModelManager;\n  applyResolvedThinkingLevel: (sessionKey: string, thinking?: string | null) => Promise<void>;\n  prepareInboundAttachments: (\n    sessionKey: string,\n    attachments?: InboundAttachmentInput[],\n  ) => Promise<MediaRef[] | undefined>;\n  commandHandler: Pick<CommandHandler, 'executeCommandAndAggregateReply'>;\n  onTurnComplete?: (sessionKey: string, lastAssistantText?: string) => void;\n  endDirectRequestContext: () => void;\n  resetSession: (sessionKey: string) => Promise<{ sessionId: string; previousSessionId: string } | null>;\n};\n\nfunction isReviewOutput(value: unknown): value is ReviewOutput {\n  return !!value && typeof value === 'object' && !Array.isArray(value)\n    && (value as { type?: unknown }).type === 'review';\n}\n\nexport async function runProcessDirect(\n  deps: RunProcessDirectDeps,\n  input: {\n    content: string;\n    sessionKey: string;\n    attachments?: InboundAttachmentInput[];\n    thinking?: string;\n  },\n): Promise<string> {\n  const { channel, chatId } = await deps.resolveSessionEndpoint(input.sessionKey);\n  deps.initSessionContext(input.sessionKey, channel, chatId);\n\n  try {\n    let turnBody = input.content;\n    let resetTriggeredAtInit = false;\n    const turn = await initSessionTurn({\n      cfg: deps.config,\n      sessionKey: input.sessionKey,\n      body: input.content,\n      resetSession: deps.resetSession,\n    });\n    resetTriggeredAtInit = turn.resetTriggered;\n    if (turn.bareReset && turn.ackMessage) {\n      return turn.ackMessage;\n    }\n    turnBody = turn.bodyStripped;\n\n    await hydratePerTurnState(deps, input.sessionKey, input.thinking);\n    const prepared = await deps.prepareInboundAttachments(input.sessionKey, input.attachments);\n\n    const slash = await tryRunSlashCommand(\n      deps,\n      { sessionKey: input.sessionKey, channel, chatId },\n      turnBody,\n      { skipResetCommands: resetTriggeredAtInit },\n    );\n    if (slash.matched) {\n      const trimmed = slash.aggregatedText.trim();\n      if (trimmed) {\n        await deps.sessionStore.appendTranscriptMessage(input.sessionKey, {\n          role: 'assistant',\n          content: isReviewOutput(slash.metadata?.review)\n            ? [slash.metadata.review]\n            : [{ type: 'text', text: trimmed }],\n          timestamp: Date.now(),\n          ...(slash.metadata && Object.keys(slash.metadata).length > 0\n            ? { metadata: slash.metadata }\n            : {}),\n        } as AgentMessage);\n      }\n      return slash.aggregatedText ?? '';\n    }\n\n    const skillTurn = deps.agentManager.prepareSkillTurn(input.sessionKey, turnBody);\n    const textForDirect = skillTurn.text;\n    const userMessage = await buildDirectUserMessageContent({\n      content: textForDirect,\n      attachments: prepared,\n      sessionKey: input.sessionKey,\n      config: deps.config,\n      agentManager: deps.agentManager,\n      modelManager: deps.modelManager,\n    });\n\n    const pendingUserMessage = userMessage as TranscriptUserMessage;\n    setPendingTranscriptUserMessage(input.sessionKey, pendingUserMessage);\n\n    const result = await (async () => {\n      try {\n        return await deps.agentManager.withSkillCapabilities(\n          input.sessionKey,\n          skillTurn.activatedCapabilityNames,\n          () =>\n            runDirectAgentTurn(\n              { ...deps, config: deps.config },\n              {\n                sessionKey: input.sessionKey,\n                userMessage,\n              },\n            ),\n        );\n      } finally {\n        clearPendingTranscriptUserMessage(input.sessionKey, pendingUserMessage);\n      }\n    })();\n\n    if (result.lastAssistantText) {\n      deps.onTurnComplete?.(input.sessionKey, result.lastAssistantText);\n    }\n\n    return result.lastAssistantText ?? '';\n  } finally {\n    deps.endDirectRequestContext();\n  }\n}\n"],"mappings":";;;;;;AAiDA,SAAS,eAAe,OAAuC;AAC7D,QAAO,CAAC,CAAC,SAAS,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,MAAM,IAC9D,MAA6B,SAAS;;AAG9C,eAAsB,iBACpB,MACA,OAMiB;CACjB,MAAM,EAAE,SAAS,WAAW,MAAM,KAAK,uBAAuB,MAAM,WAAW;AAC/E,MAAK,mBAAmB,MAAM,YAAY,SAAS,OAAO;AAE1D,KAAI;EACF,IAAI,WAAW,MAAM;EACrB,IAAI,uBAAuB;EAC3B,MAAM,OAAO,MAAM,gBAAgB;GACjC,KAAK,KAAK;GACV,YAAY,MAAM;GAClB,MAAM,MAAM;GACZ,cAAc,KAAK;GACpB,CAAC;AACF,yBAAuB,KAAK;AAC5B,MAAI,KAAK,aAAa,KAAK,WACzB,QAAO,KAAK;AAEd,aAAW,KAAK;AAEhB,QAAM,oBAAoB,MAAM,MAAM,YAAY,MAAM,SAAS;EACjE,MAAM,WAAW,MAAM,KAAK,0BAA0B,MAAM,YAAY,MAAM,YAAY;EAE1F,MAAM,QAAQ,MAAM,mBAClB,MACA;GAAE,YAAY,MAAM;GAAY;GAAS;GAAQ,EACjD,UACA,EAAE,mBAAmB,sBAAsB,CAC5C;AACD,MAAI,MAAM,SAAS;GACjB,MAAM,UAAU,MAAM,eAAe,MAAM;AAC3C,OAAI,QACF,OAAM,KAAK,aAAa,wBAAwB,MAAM,YAAY;IAChE,MAAM;IACN,SAAS,eAAe,MAAM,UAAU,OAAO,GAC3C,CAAC,MAAM,SAAS,OAAO,GACvB,CAAC;KAAE,MAAM;KAAQ,MAAM;KAAS,CAAC;IACrC,WAAW,KAAK,KAAK;IACrB,GAAI,MAAM,YAAY,OAAO,KAAK,MAAM,SAAS,CAAC,SAAS,IACvD,EAAE,UAAU,MAAM,UAAU,GAC5B,EAAE;IACP,CAAiB;AAEpB,UAAO,MAAM,kBAAkB;;EAGjC,MAAM,YAAY,KAAK,aAAa,iBAAiB,MAAM,YAAY,SAAS;EAChF,MAAM,gBAAgB,UAAU;EAChC,MAAM,cAAc,MAAM,8BAA8B;GACtD,SAAS;GACT,aAAa;GACb,YAAY,MAAM;GAClB,QAAQ,KAAK;GACb,cAAc,KAAK;GACnB,cAAc,KAAK;GACpB,CAAC;EAEF,MAAM,qBAAqB;AAC3B,kCAAgC,MAAM,YAAY,mBAAmB;EAErE,MAAM,SAAS,OAAO,YAAY;AAChC,OAAI;AACF,WAAO,MAAM,KAAK,aAAa,sBAC7B,MAAM,YACN,UAAU,gCAER,mBACE;KAAE,GAAG;KAAM,QAAQ,KAAK;KAAQ,EAChC;KACE,YAAY,MAAM;KAClB;KACD,CACF,CACJ;aACO;AACR,sCAAkC,MAAM,YAAY,mBAAmB;;MAEvE;AAEJ,MAAI,OAAO,kBACT,MAAK,iBAAiB,MAAM,YAAY,OAAO,kBAAkB;AAGnE,SAAO,OAAO,qBAAqB;WAC3B;AACR,OAAK,yBAAyB"}

package/dist/src/agent/service/process-direct-streaming.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"process-direct-streaming.js","names":[],"sources":["../../../../src/agent/service/process-direct-streaming.ts"],"sourcesContent":["import type { AgentMessage } from '@earendil-works/pi-agent-core';\nimport type { ImageContent } from '@earendil-works/pi-ai';\n\nimport type { Config } from '../../config/schema.js';\nimport type { InboundAttachmentInput, MediaRef } from '../../channels/attachments/inbound-persist.js';\nimport { readAgentMessageContent } from '../memory/agent-message-access.js';\nimport {\n  isVoiceLikeAttachment,\n  mergeVoiceTranscriptsIntoUserText,\n  mergeSttConfigFromAppConfig,\n} from '../../channels/attachments/voice-stt-webchat.js';\nimport {\n  resolveEffectiveReasoningLevel,\n  initSessionTurn,\n  type SessionConfigStore,\n  type SessionStore,\n} from '../../session/index.js';\nimport type { SessionContext } from '../session/index.js';\nimport { applyReasoningVisibilityToSseEvent } from '../streaming/reasoning-visibility-sse.js';\nimport type { ReasoningLevel } from '../transcript/thinking-types.js';\nimport { formatAgentRunErrorForClient } from '../client-error-format.js';\nimport { abortEmbeddedRun } from '../embedded/runs.js';\nimport type { AgentInstanceGateway } from '../agent-instance-gateway.js';\nimport type { CommandHandler } from '../messaging/command-handler.js';\nimport type { ModelManager } from '../models/index.js';\nimport { injectSourceContextIntoUserMessage } from '../source-context/injector.js';\nimport { isSessionSourceBinding, type AgentSourceContextResolver } from '../source-context/types.js';\nimport type { ReviewOutput } from '../../review/review-types.js';\n\nimport { AsyncQueue } from './async-queue.js';\nimport {\n  hydratePerTurnState,\n  runDirectAgentTurn,\n  tryRunSlashCommand,\n} from './direct-turn-helpers.js';\nimport {\n  clearPendingTranscriptUserMessage,\n  setPendingTranscriptUserMessage,\n  type TranscriptUserMessage,\n} from '../inbound/attachment-pipeline.js';\n\nexport type DirectStreamInboundAttachment = InboundAttachmentInput;\n\nexport type ProcessDirectStreamLog = {\n  info: (obj: Record<string, unknown>, msg: string) => void;\n  warn: (obj: Record<string, unknown>, msg: string) => void;\n  debug?: (obj: Record<string, unknown>, msg: string) => void;\n};\n\nexport interface ProcessDirectStreamingDeps {\n  log: ProcessDirectStreamLog;\n  resolveSessionEndpoint: (sessionKey: string) => Promise<{ channel: string; chatId: string }>;\n  initDirectStreamingSession: (\n    sessionKey: string,\n    channel: string,\n    chatId: string,\n  ) => SessionContext;\n  registerWebchatSsePublisher: (\n    sessionKey: string,\n    publisher: (event: { type: string; [key: string]: unknown }) => void,\n  ) => void;\n  unregisterWebchatSsePublisher: (sessionKey: string) => void;\n  agentManager: AgentInstanceGateway;\n  hydrateSessionWorkspaceFromStore: (sessionKey: string) => Promise<void>;\n  hydrateSessionModelFromStore: (sessionKey: string) => Promise<void>;\n  sessionStore: SessionStore;\n  modelManager: ModelManager;\n  applyResolvedThinkingLevel: (sessionKey: string, thinking?: string | null) => Promise<void>;\n  getConfig: () => Config | undefined;\n  sessionConfigStore: SessionConfigStore;\n  commandHandler: Pick<CommandHandler, 'executeCommandAndAggregateReply'>;\n  prepareInboundAttachments: (\n    sessionKey: string,\n    attachments?: DirectStreamInboundAttachment[],\n  ) => Promise<MediaRef[] | undefined>;\n  buildTranscriptUserMessage: (\n    content: string,\n    prepared: MediaRef[] | undefined,\n    sessionKey: string,\n  ) => Promise<TranscriptUserMessage>;\n  recordPersistentGoalStreamOutcome?: (\n    sessionKey: string,\n    outcome: { skipPersistentGoalPostTurn: boolean },\n  ) => void;\n  onTurnComplete?: (sessionKey: string, lastAssistantText?: string) => void;\n  enqueueProvisionalSessionTitle?: (sessionKey: string, userText: string) => void;\n  /** Disk-only transcript sync (slash receipt already streamed as tokens). */\n  reloadWebchatTranscript?: (sessionKey: string) => void;\n  maybeEmitWebchatTts: (\n    sessionKey: string,\n    hadInboundVoice: boolean,\n  ) => Promise<{ type: 'tts_audio'; uri: string; mimeType: string; name: string } | null>;\n  endDirectRequestContext: () => void;\n  resetSession: (sessionKey: string) => Promise<{ sessionId: string; previousSessionId: string } | null>;\n  sourceContextResolver?: AgentSourceContextResolver;\n}\n\nexport interface ProcessDirectStreamingInput {\n  content: string;\n  sessionKey?: string;\n  attachments?: DirectStreamInboundAttachment[];\n  thinking?: string;\n  signal?: AbortSignal;\n  runId?: string;\n}\n\nexport type ProcessDirectStreamingSseEvent = { type: string; [key: string]: unknown };\n\nfunction isReviewOutput(value: unknown): value is ReviewOutput {\n  return !!value && typeof value === 'object' && !Array.isArray(value)\n    && (value as { type?: unknown }).type === 'review';\n}\n\nconst REVIEW_TRACE_PREVIEW_MAX = 2_000;\n\ntype ReviewTraceContextEntry = {\n  id: string;\n  text: string;\n  data: Record<string, unknown>;\n  createdAt: string;\n};\n\nfunction boundedPreview(text: string): string {\n  return text.length > REVIEW_TRACE_PREVIEW_MAX\n    ? `${text.slice(0, REVIEW_TRACE_PREVIEW_MAX)}\\n[trace preview truncated]`\n    : text;\n}\n\nfunction extractTraceResultText(result: unknown): string {\n  if (typeof result === 'string') return result;\n  if (!result || typeof result !== 'object' || Array.isArray(result)) {\n    return result == null ? '' : String(result);\n  }\n  const rec = result as Record<string, unknown>;\n  if (typeof rec.text === 'string') return rec.text;\n  if (Array.isArray(rec.content)) {\n    return rec.content\n      .map((block) => {\n        if (!block || typeof block !== 'object') return '';\n        const b = block as Record<string, unknown>;\n        return b.type === 'text' && typeof b.text === 'string' ? b.text : '';\n      })\n      .join('');\n  }\n  return '';\n}\n\nfunction reviewTraceContextEntryFromCommandEvent(\n  event: { type: string; [key: string]: unknown },\n  runId: string | undefined,\n): ReviewTraceContextEntry | null {\n  if (event.type === 'review_start' || event.type === 'review_end') {\n    const reviewId = typeof event.reviewId === 'string' && event.reviewId\n      ? event.reviewId\n      : `review_trace_${Date.now()}`;\n    const ended = event.type === 'review_end';\n    const isError = ended && event.status === 'error';\n    return {\n      id: `review-trace:${reviewId}:${ended ? 'end' : 'start'}`,\n      text: ended\n        ? `Review trace: ${isError ? 'failed' : 'completed'}`\n        : 'Review trace: started',\n      createdAt: new Date().toISOString(),\n      data: {\n        type: 'review_trace',\n        scope: 'review',\n        event: ended ? 'review_end' : 'review_start',\n        llmInput: false,\n        ...(runId ? { runId } : {}),\n        reviewId,\n        status: ended ? (isError ? 'error' : 'done') : 'running',\n        ...(typeof event.target === 'string' ? { target: event.target } : {}),\n        ...(typeof event.message === 'string' ? { message: event.message } : {}),\n        ...(isError ? { isError: true } : {}),\n      },\n    };\n  }\n  if (event.type !== 'tool_execution_start' && event.type !== 'tool_execution_end') {\n    return null;\n  }\n  const toolName = typeof event.toolName === 'string' ? event.toolName : '';\n  if (!toolName.startsWith('review.')) {\n    return null;\n  }\n  const toolCallId = typeof event.toolCallId === 'string' && event.toolCallId\n    ? event.toolCallId\n    : `review_trace_${Date.now()}`;\n  const ended = event.type === 'tool_execution_end';\n  const isError = ended && event.isError === true;\n  const resultPreview = ended ? boundedPreview(extractTraceResultText(event.result).trim()) : undefined;\n  const details = ended && event.result && typeof event.result === 'object' && !Array.isArray(event.result)\n    ? (event.result as Record<string, unknown>).details\n    : undefined;\n\n  return {\n    id: `review-trace:${toolCallId}:${ended ? 'end' : 'start'}`,\n    text: ended\n      ? `Review trace: ${toolName} ${isError ? 'failed' : 'completed'}`\n      : `Review trace: ${toolName} started`,\n    createdAt: new Date().toISOString(),\n    data: {\n      type: 'review_trace',\n      scope: 'review',\n      event: ended ? 'tool_end' : 'tool_start',\n      llmInput: false,\n      ...(runId ? { runId } : {}),\n      toolCallId,\n      toolName,\n      status: ended ? (isError ? 'error' : 'done') : 'running',\n      ...(event.args !== undefined ? { input: event.args } : {}),\n      ...(resultPreview ? { resultPreview } : {}),\n      ...(details !== undefined ? { details } : {}),\n      ...(isError ? { isError: true } : {}),\n    },\n  };\n}\n\nfunction makeAssistantReceiptMessage(text: string, metadata?: Record<string, unknown>): AgentMessage {\n  const review = isReviewOutput(metadata?.review) ? metadata.review : undefined;\n  return {\n    role: 'assistant',\n    content: review ? [review] : [{ type: 'text', text }],\n    timestamp: Date.now(),\n    ...(metadata && Object.keys(metadata).length > 0 ? { metadata } : {}),\n  } as AgentMessage;\n}\n\nfunction pushAssistantReceipt(\n  queue: AsyncQueue<ProcessDirectStreamingSseEvent>,\n  text: string,\n  runId?: string,\n  metadata?: Record<string, unknown>,\n): void {\n  const message = makeAssistantReceiptMessage(text, metadata);\n  queue.push({ type: 'message_start', runId, message });\n  queue.push({ type: 'message_update', runId, message });\n  queue.push({ type: 'message_end', runId, message });\n}\n\nexport async function* runProcessDirectStreaming(\n  deps: ProcessDirectStreamingDeps,\n  input: ProcessDirectStreamingInput,\n): AsyncGenerator<ProcessDirectStreamingSseEvent, void, unknown> {\n  const sessionKey = input.sessionKey ?? 'agent:main:main';\n  const { channel, chatId } = await deps.resolveSessionEndpoint(sessionKey);\n  const context = deps.initDirectStreamingSession(sessionKey, channel, chatId);\n\n  const queue = new AsyncQueue<ProcessDirectStreamingSseEvent>();\n  let reasoningLevel: ReasoningLevel = 'stream';\n\n  const pushVisible = (event: ProcessDirectStreamingSseEvent) => {\n    const visible = applyReasoningVisibilityToSseEvent(event, reasoningLevel);\n    if (visible !== null) {\n      queue.push(visible);\n    }\n  };\n\n  const formatStreamError = (raw: string): string => {\n    let provider: string | undefined;\n    let modelRef: string | undefined;\n    try {\n      const resolved = deps.modelManager.getResolvedModelForSession(sessionKey);\n      provider = resolved.provider;\n      modelRef = deps.modelManager.getModelForSession(sessionKey);\n    } catch {\n      /* ignore — format without provider context */\n    }\n    return formatAgentRunErrorForClient(raw, { provider, modelRef });\n  };\n\n  if (channel === 'webchat') {\n    deps.registerWebchatSsePublisher(sessionKey, pushVisible);\n  }\n\n  const signal = input.signal;\n  let userAborted = false;\n  let abortHandled = false;\n  let inboundVoice = false;\n  let ranSlashCommand = false;\n  let mergedUserText = input.content;\n  let webchatSlashReceipt: string | undefined;\n  let slashCommandMetadata: Record<string, unknown> | undefined;\n  const slashTraceRows: ReviewTraceContextEntry[] = [];\n\n  const taskPromise = (async () => {\n    try {\n      const cfg = deps.getConfig();\n      let turnBody = input.content;\n      let resetTriggeredAtInit = false;\n      if (cfg) {\n        const turn = await initSessionTurn({\n          cfg,\n          sessionKey,\n          body: input.content,\n          resetSession: deps.resetSession,\n        });\n        resetTriggeredAtInit = turn.resetTriggered;\n        if (turn.bareReset && turn.ackMessage) {\n          ranSlashCommand = true;\n          webchatSlashReceipt = turn.ackMessage;\n          pushAssistantReceipt(queue, turn.ackMessage, input.runId);\n          return;\n        }\n        turnBody = turn.bodyStripped;\n        if (turn.isNewSession) {\n          deps.log.debug(\n            {\n              sessionKey,\n              sessionId: turn.sessionId,\n              previousSessionId: turn.previousSessionId,\n              resetTriggered: turn.resetTriggered,\n              staleRollover: turn.staleRollover,\n            },\n            'Session reset boundary at direct turn start',\n          );\n        }\n      }\n\n      await hydratePerTurnState(deps, sessionKey, input.thinking);\n      {\n        const defReason = 'stream' as ReasoningLevel;\n        reasoningLevel = await resolveEffectiveReasoningLevel(deps.sessionConfigStore, sessionKey, defReason);\n      }\n\n      const prepared = await deps.prepareInboundAttachments(sessionKey, input.attachments);\n\n      const sttCfg = mergeSttConfigFromAppConfig(deps.getConfig()?.tools?.media?.audio, deps.getConfig()?.tools?.media);\n      const voiceMerge = await mergeVoiceTranscriptsIntoUserText(prepared, turnBody, sttCfg);\n      mergedUserText = voiceMerge.text;\n      inboundVoice = voiceMerge.inboundVoice;\n\n      if (inboundVoice) {\n        const transcriptParts = [\n          voiceMerge.voiceTranscripts.filter(Boolean).join('\\n'),\n          turnBody.trim(),\n        ].filter(Boolean);\n        const voiceMedia = (prepared ?? []).filter(isVoiceLikeAttachment).map((att) => ({\n          uri: att.uri,\n          mimeType: att.mimeType,\n          name: att.name,\n        }));\n        pushVisible({\n          type: 'user_transcript',\n          text: transcriptParts.join('\\n\\n'),\n          media: voiceMedia,\n        });\n      }\n\n      const armAbort = () => {\n        if (abortHandled) {\n          return;\n        }\n        abortHandled = true;\n        userAborted = true;\n        void abortEmbeddedRun(sessionKey);\n        queue.close();\n      };\n      if (signal) {\n        if (signal.aborted) {\n          armAbort();\n          return;\n        }\n        signal.addEventListener('abort', armAbort, { once: true });\n      }\n\n      const slash = await tryRunSlashCommand(\n        deps,\n        {\n          sessionKey,\n          channel,\n          chatId,\n          senderId: context.senderId,\n          isGroup: context.isGroup,\n          inboundMetadata: context.metadata,\n        },\n        mergedUserText,\n        {\n          skipResetCommands: resetTriggeredAtInit,\n          emitEvent: (event) => {\n            pushVisible({ ...event, runId: input.runId });\n            const traceRow = reviewTraceContextEntryFromCommandEvent(event, input.runId);\n            if (traceRow) {\n              slashTraceRows.push(traceRow);\n            }\n          },\n        },\n      );\n      if (slash.matched) {\n        ranSlashCommand = true;\n        slashCommandMetadata = slash.metadata;\n        const text = slash.aggregatedText.trim();\n        if (text) {\n          webchatSlashReceipt = text;\n          pushAssistantReceipt(queue, text, input.runId, slashCommandMetadata);\n        } else if (channel === 'webchat') {\n          webchatSlashReceipt =\n            'Command finished with no assistant text. If you used `/goal`, a follow-up turn may still be scheduled automatically.';\n          pushAssistantReceipt(queue, webchatSlashReceipt, input.runId);\n        }\n        const workflowRun = slash.metadata?.workflowRun;\n        if (workflowRun && typeof workflowRun === 'object') {\n          queue.push({\n            type: 'workflow_run_started',\n            runId: input.runId,\n            payload: { workflowRun },\n          });\n        }\n        return;\n      }\n\n      const skillTurn = deps.agentManager.prepareSkillTurn(sessionKey, mergedUserText);\n      const textForAgent = skillTurn.text;\n      const userMessage = await deps.buildTranscriptUserMessage(textForAgent, prepared, sessionKey);\n      let sourceEnrichedUserMessage: AgentMessage = userMessage;\n      let sourceImages: ImageContent[] | undefined;\n      if (deps.sourceContextResolver) {\n        const metadata = await deps.sessionStore.getMetadata(sessionKey).catch(() => null);\n        const sourceBinding = metadata?.customData && typeof metadata.customData === 'object'\n          ? (metadata.customData as Record<string, unknown>).sourceBinding\n          : undefined;\n        if (isSessionSourceBinding(sourceBinding)) {\n          const sourceContext = await deps.sourceContextResolver(sourceBinding, sessionKey);\n          sourceEnrichedUserMessage = injectSourceContextIntoUserMessage(userMessage, sourceContext);\n          sourceImages = sourceContext?.images;\n        }\n      }\n\n      if (channel === 'webchat') {\n        pushVisible({\n          type: 'user_message',\n          timestamp: userMessage.timestamp ?? Date.now(),\n          content: readAgentMessageContent(userMessage),\n          media: userMessage.media,\n        });\n        if (textForAgent.trim()) {\n          deps.enqueueProvisionalSessionTitle?.(sessionKey, textForAgent);\n        }\n      }\n\n      const pendingUserMessage = userMessage as TranscriptUserMessage;\n      setPendingTranscriptUserMessage(sessionKey, pendingUserMessage);\n\n      try {\n        const result = await deps.agentManager.withSkillCapabilities(\n          sessionKey,\n          skillTurn.activatedCapabilityNames,\n          () =>\n            runDirectAgentTurn(\n              {\n                sessionStore: deps.sessionStore,\n                agentManager: deps.agentManager,\n                modelManager: deps.modelManager,\n                config: deps.getConfig(),\n              },\n              {\n                sessionKey,\n                userMessage: sourceEnrichedUserMessage,\n                abortSignal: signal,\n                sourceImages,\n                runId: input.runId,\n                onEvent: (embeddedEvent) => {\n                  const event = { ...embeddedEvent };\n                  if (event.type === 'error' && typeof event.content === 'string') {\n                    event.content = formatStreamError(event.content);\n                  }\n                  pushVisible(event);\n                },\n              },\n            ),\n        );\n\n        if (result.lastAssistantText) {\n          deps.onTurnComplete?.(sessionKey, result.lastAssistantText);\n        }\n        if (!result.ok && result.errorMessage && !abortHandled) {\n          pushVisible({ type: 'error', content: formatStreamError(result.errorMessage) });\n        }\n      } finally {\n        clearPendingTranscriptUserMessage(sessionKey, pendingUserMessage);\n      }\n    } catch (err) {\n      if (!abortHandled) {\n        const em = err instanceof Error ? err.message : String(err);\n        pushVisible({ type: 'error', content: formatStreamError(em) });\n      }\n    } finally {\n      if (!userAborted && channel === 'webchat') {\n        try {\n          const ttsAudioEvent = await deps.maybeEmitWebchatTts(sessionKey, inboundVoice);\n          if (ttsAudioEvent) {\n            queue.push(ttsAudioEvent);\n          }\n        } catch (ttsErr) {\n          deps.log.warn({ err: ttsErr, sessionKey }, 'Failed to emit TTS audio before stream close');\n        }\n      }\n      queue.close();\n    }\n  })();\n\n  try {\n    for await (const event of queue) {\n      yield event;\n    }\n    await taskPromise;\n\n    if (channel === 'webchat' && ranSlashCommand) {\n      try {\n        const userMsg = {\n          role: 'user' as const,\n          content: [{ type: 'text' as const, text: mergedUserText }],\n          timestamp: Date.now(),\n        } as AgentMessage;\n        await deps.sessionStore.appendTranscriptMessage(sessionKey, userMsg);\n        for (const traceRow of slashTraceRows) {\n          await deps.sessionStore.appendTranscriptContextEntry(sessionKey, traceRow);\n        }\n        if (webchatSlashReceipt?.trim()) {\n          const assistantMsg = {\n            role: 'assistant' as const,\n            content: isReviewOutput(slashCommandMetadata?.review)\n              ? [slashCommandMetadata.review]\n              : [{ type: 'text' as const, text: webchatSlashReceipt.trim() }],\n            timestamp: Date.now(),\n            ...(slashCommandMetadata && Object.keys(slashCommandMetadata).length > 0\n              ? { metadata: slashCommandMetadata }\n              : {}),\n          } as AgentMessage;\n          await deps.sessionStore.appendTranscriptMessage(sessionKey, assistantMsg);\n        }\n        deps.reloadWebchatTranscript?.(sessionKey);\n      } catch (err) {\n        deps.log.warn({ err, sessionKey }, 'Failed to persist webchat slash command receipt');\n      }\n    }\n\n    deps.recordPersistentGoalStreamOutcome?.(sessionKey, { skipPersistentGoalPostTurn: ranSlashCommand });\n  } finally {\n    if (channel === 'webchat') {\n      deps.unregisterWebchatSsePublisher(sessionKey);\n    }\n    deps.endDirectRequestContext();\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;AA4GA,SAAS,eAAe,OAAuC;AAC7D,QAAO,CAAC,CAAC,SAAS,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,MAAM,IAC9D,MAA6B,SAAS;;AAG9C,MAAM,2BAA2B;AASjC,SAAS,eAAe,MAAsB;AAC5C,QAAO,KAAK,SAAS,2BACjB,GAAG,KAAK,MAAM,GAAG,yBAAyB,CAAC,+BAC3C;;AAGN,SAAS,uBAAuB,QAAyB;AACvD,KAAI,OAAO,WAAW,SAAU,QAAO;AACvC,KAAI,CAAC,UAAU,OAAO,WAAW,YAAY,MAAM,QAAQ,OAAO,CAChE,QAAO,UAAU,OAAO,KAAK,OAAO,OAAO;CAE7C,MAAM,MAAM;AACZ,KAAI,OAAO,IAAI,SAAS,SAAU,QAAO,IAAI;AAC7C,KAAI,MAAM,QAAQ,IAAI,QAAQ,CAC5B,QAAO,IAAI,QACR,KAAK,UAAU;AACd,MAAI,CAAC,SAAS,OAAO,UAAU,SAAU,QAAO;EAChD,MAAM,IAAI;AACV,SAAO,EAAE,SAAS,UAAU,OAAO,EAAE,SAAS,WAAW,EAAE,OAAO;GAClE,CACD,KAAK,GAAG;AAEb,QAAO;;AAGT,SAAS,wCACP,OACA,OACgC;AAChC,KAAI,MAAM,SAAS,kBAAkB,MAAM,SAAS,cAAc;EAChE,MAAM,WAAW,OAAO,MAAM,aAAa,YAAY,MAAM,WACzD,MAAM,WACN,gBAAgB,KAAK,KAAK;EAC9B,MAAM,QAAQ,MAAM,SAAS;EAC7B,MAAM,UAAU,SAAS,MAAM,WAAW;AAC1C,SAAO;GACL,IAAI,gBAAgB,SAAS,GAAG,QAAQ,QAAQ;GAChD,MAAM,QACF,iBAAiB,UAAU,WAAW,gBACtC;GACJ,4BAAW,IAAI,MAAM,EAAC,aAAa;GACnC,MAAM;IACJ,MAAM;IACN,OAAO;IACP,OAAO,QAAQ,eAAe;IAC9B,UAAU;IACV,GAAI,QAAQ,EAAE,OAAO,GAAG,EAAE;IAC1B;IACA,QAAQ,QAAS,UAAU,UAAU,SAAU;IAC/C,GAAI,OAAO,MAAM,WAAW,WAAW,EAAE,QAAQ,MAAM,QAAQ,GAAG,EAAE;IACpE,GAAI,OAAO,MAAM,YAAY,WAAW,EAAE,SAAS,MAAM,SAAS,GAAG,EAAE;IACvE,GAAI,UAAU,EAAE,SAAS,MAAM,GAAG,EAAE;IACrC;GACF;;AAEH,KAAI,MAAM,SAAS,0BAA0B,MAAM,SAAS,qBAC1D,QAAO;CAET,MAAM,WAAW,OAAO,MAAM,aAAa,WAAW,MAAM,WAAW;AACvE,KAAI,CAAC,SAAS,WAAW,UAAU,CACjC,QAAO;CAET,MAAM,aAAa,OAAO,MAAM,eAAe,YAAY,MAAM,aAC7D,MAAM,aACN,gBAAgB,KAAK,KAAK;CAC9B,MAAM,QAAQ,MAAM,SAAS;CAC7B,MAAM,UAAU,SAAS,MAAM,YAAY;CAC3C,MAAM,gBAAgB,QAAQ,eAAe,uBAAuB,MAAM,OAAO,CAAC,MAAM,CAAC,GAAG,KAAA;CAC5F,MAAM,UAAU,SAAS,MAAM,UAAU,OAAO,MAAM,WAAW,YAAY,CAAC,MAAM,QAAQ,MAAM,OAAO,GACpG,MAAM,OAAmC,UAC1C,KAAA;AAEJ,QAAO;EACL,IAAI,gBAAgB,WAAW,GAAG,QAAQ,QAAQ;EAClD,MAAM,QACF,iBAAiB,SAAS,GAAG,UAAU,WAAW,gBAClD,iBAAiB,SAAS;EAC9B,4BAAW,IAAI,MAAM,EAAC,aAAa;EACnC,MAAM;GACJ,MAAM;GACN,OAAO;GACP,OAAO,QAAQ,aAAa;GAC5B,UAAU;GACV,GAAI,QAAQ,EAAE,OAAO,GAAG,EAAE;GAC1B;GACA;GACA,QAAQ,QAAS,UAAU,UAAU,SAAU;GAC/C,GAAI,MAAM,SAAS,KAAA,IAAY,EAAE,OAAO,MAAM,MAAM,GAAG,EAAE;GACzD,GAAI,gBAAgB,EAAE,eAAe,GAAG,EAAE;GAC1C,GAAI,YAAY,KAAA,IAAY,EAAE,SAAS,GAAG,EAAE;GAC5C,GAAI,UAAU,EAAE,SAAS,MAAM,GAAG,EAAE;GACrC;EACF;;AAGH,SAAS,4BAA4B,MAAc,UAAkD;CACnG,MAAM,SAAS,eAAe,UAAU,OAAO,GAAG,SAAS,SAAS,KAAA;AACpE,QAAO;EACL,MAAM;EACN,SAAS,SAAS,CAAC,OAAO,GAAG,CAAC;GAAE,MAAM;GAAQ;GAAM,CAAC;EACrD,WAAW,KAAK,KAAK;EACrB,GAAI,YAAY,OAAO,KAAK,SAAS,CAAC,SAAS,IAAI,EAAE,UAAU,GAAG,EAAE;EACrE;;AAGH,SAAS,qBACP,OACA,MACA,OACA,UACM;CACN,MAAM,UAAU,4BAA4B,MAAM,SAAS;AAC3D,OAAM,KAAK;EAAE,MAAM;EAAiB;EAAO;EAAS,CAAC;AACrD,OAAM,KAAK;EAAE,MAAM;EAAkB;EAAO;EAAS,CAAC;AACtD,OAAM,KAAK;EAAE,MAAM;EAAe;EAAO;EAAS,CAAC;;AAGrD,gBAAuB,0BACrB,MACA,OAC+D;CAC/D,MAAM,aAAa,MAAM,cAAc;CACvC,MAAM,EAAE,SAAS,WAAW,MAAM,KAAK,uBAAuB,WAAW;CACzE,MAAM,UAAU,KAAK,2BAA2B,YAAY,SAAS,OAAO;CAE5E,MAAM,QAAQ,IAAI,YAA4C;CAC9D,IAAI,iBAAiC;CAErC,MAAM,eAAe,UAA0C;EAC7D,MAAM,UAAU,mCAAmC,OAAO,eAAe;AACzE,MAAI,YAAY,KACd,OAAM,KAAK,QAAQ;;CAIvB,MAAM,qBAAqB,QAAwB;EACjD,IAAI;EACJ,IAAI;AACJ,MAAI;AAEF,cADiB,KAAK,aAAa,2BAA2B,WAC3C,CAAC;AACpB,cAAW,KAAK,aAAa,mBAAmB,WAAW;UACrD;AAGR,SAAO,6BAA6B,KAAK;GAAE;GAAU;GAAU,CAAC;;AAGlE,KAAI,YAAY,UACd,MAAK,4BAA4B,YAAY,YAAY;CAG3D,MAAM,SAAS,MAAM;CACrB,IAAI,cAAc;CAClB,IAAI,eAAe;CACnB,IAAI,eAAe;CACnB,IAAI,kBAAkB;CACtB,IAAI,iBAAiB,MAAM;CAC3B,IAAI;CACJ,IAAI;CACJ,MAAM,iBAA4C,EAAE;CAEpD,MAAM,eAAe,YAAY;AAC/B,MAAI;GACF,MAAM,MAAM,KAAK,WAAW;GAC5B,IAAI,WAAW,MAAM;GACrB,IAAI,uBAAuB;AAC3B,OAAI,KAAK;IACP,MAAM,OAAO,MAAM,gBAAgB;KACjC;KACA;KACA,MAAM,MAAM;KACZ,cAAc,KAAK;KACpB,CAAC;AACF,2BAAuB,KAAK;AAC5B,QAAI,KAAK,aAAa,KAAK,YAAY;AACrC,uBAAkB;AAClB,2BAAsB,KAAK;AAC3B,0BAAqB,OAAO,KAAK,YAAY,MAAM,MAAM;AACzD;;AAEF,eAAW,KAAK;AAChB,QAAI,KAAK,aACP,MAAK,IAAI,MACP;KACE;KACA,WAAW,KAAK;KAChB,mBAAmB,KAAK;KACxB,gBAAgB,KAAK;KACrB,eAAe,KAAK;KACrB,EACD,8CACD;;AAIL,SAAM,oBAAoB,MAAM,YAAY,MAAM,SAAS;AAGzD,oBAAiB,MAAM,+BAA+B,KAAK,oBAAoB,YAAY,SAAU;GAGvG,MAAM,WAAW,MAAM,KAAK,0BAA0B,YAAY,MAAM,YAAY;GAEpF,MAAM,SAAS,4BAA4B,KAAK,WAAW,EAAE,OAAO,OAAO,OAAO,KAAK,WAAW,EAAE,OAAO,MAAM;GACjH,MAAM,aAAa,MAAM,kCAAkC,UAAU,UAAU,OAAO;AACtF,oBAAiB,WAAW;AAC5B,kBAAe,WAAW;AAE1B,OAAI,cAAc;IAChB,MAAM,kBAAkB,CACtB,WAAW,iBAAiB,OAAO,QAAQ,CAAC,KAAK,KAAK,EACtD,SAAS,MAAM,CAChB,CAAC,OAAO,QAAQ;IACjB,MAAM,cAAc,YAAY,EAAE,EAAE,OAAO,sBAAsB,CAAC,KAAK,SAAS;KAC9E,KAAK,IAAI;KACT,UAAU,IAAI;KACd,MAAM,IAAI;KACX,EAAE;AACH,gBAAY;KACV,MAAM;KACN,MAAM,gBAAgB,KAAK,OAAO;KAClC,OAAO;KACR,CAAC;;GAGJ,MAAM,iBAAiB;AACrB,QAAI,aACF;AAEF,mBAAe;AACf,kBAAc;AACT,qBAAiB,WAAW;AACjC,UAAM,OAAO;;AAEf,OAAI,QAAQ;AACV,QAAI,OAAO,SAAS;AAClB,eAAU;AACV;;AAEF,WAAO,iBAAiB,SAAS,UAAU,EAAE,MAAM,MAAM,CAAC;;GAG5D,MAAM,QAAQ,MAAM,mBAClB,MACA;IACE;IACA;IACA;IACA,UAAU,QAAQ;IAClB,SAAS,QAAQ;IACjB,iBAAiB,QAAQ;IAC1B,EACD,gBACA;IACE,mBAAmB;IACnB,YAAY,UAAU;AACpB,iBAAY;MAAE,GAAG;MAAO,OAAO,MAAM;MAAO,CAAC;KAC7C,MAAM,WAAW,wCAAwC,OAAO,MAAM,MAAM;AAC5E,SAAI,SACF,gBAAe,KAAK,SAAS;;IAGlC,CACF;AACD,OAAI,MAAM,SAAS;AACjB,sBAAkB;AAClB,2BAAuB,MAAM;IAC7B,MAAM,OAAO,MAAM,eAAe,MAAM;AACxC,QAAI,MAAM;AACR,2BAAsB;AACtB,0BAAqB,OAAO,MAAM,MAAM,OAAO,qBAAqB;eAC3D,YAAY,WAAW;AAChC,2BACE;AACF,0BAAqB,OAAO,qBAAqB,MAAM,MAAM;;IAE/D,MAAM,cAAc,MAAM,UAAU;AACpC,QAAI,eAAe,OAAO,gBAAgB,SACxC,OAAM,KAAK;KACT,MAAM;KACN,OAAO,MAAM;KACb,SAAS,EAAE,aAAa;KACzB,CAAC;AAEJ;;GAGF,MAAM,YAAY,KAAK,aAAa,iBAAiB,YAAY,eAAe;GAChF,MAAM,eAAe,UAAU;GAC/B,MAAM,cAAc,MAAM,KAAK,2BAA2B,cAAc,UAAU,WAAW;GAC7F,IAAI,4BAA0C;GAC9C,IAAI;AACJ,OAAI,KAAK,uBAAuB;IAC9B,MAAM,WAAW,MAAM,KAAK,aAAa,YAAY,WAAW,CAAC,YAAY,KAAK;IAClF,MAAM,gBAAgB,UAAU,cAAc,OAAO,SAAS,eAAe,WACxE,SAAS,WAAuC,gBACjD,KAAA;AACJ,QAAI,uBAAuB,cAAc,EAAE;KACzC,MAAM,gBAAgB,MAAM,KAAK,sBAAsB,eAAe,WAAW;AACjF,iCAA4B,mCAAmC,aAAa,cAAc;AAC1F,oBAAe,eAAe;;;AAIlC,OAAI,YAAY,WAAW;AACzB,gBAAY;KACV,MAAM;KACN,WAAW,YAAY,aAAa,KAAK,KAAK;KAC9C,SAAS,wBAAwB,YAAY;KAC7C,OAAO,YAAY;KACpB,CAAC;AACF,QAAI,aAAa,MAAM,CACrB,MAAK,iCAAiC,YAAY,aAAa;;GAInE,MAAM,qBAAqB;AAC3B,mCAAgC,YAAY,mBAAmB;AAE/D,OAAI;IACF,MAAM,SAAS,MAAM,KAAK,aAAa,sBACrC,YACA,UAAU,gCAER,mBACE;KACE,cAAc,KAAK;KACnB,cAAc,KAAK;KACnB,cAAc,KAAK;KACnB,QAAQ,KAAK,WAAW;KACzB,EACD;KACE;KACA,aAAa;KACb,aAAa;KACb;KACA,OAAO,MAAM;KACb,UAAU,kBAAkB;MAC1B,MAAM,QAAQ,EAAE,GAAG,eAAe;AAClC,UAAI,MAAM,SAAS,WAAW,OAAO,MAAM,YAAY,SACrD,OAAM,UAAU,kBAAkB,MAAM,QAAQ;AAElD,kBAAY,MAAM;;KAErB,CACF,CACJ;AAED,QAAI,OAAO,kBACT,MAAK,iBAAiB,YAAY,OAAO,kBAAkB;AAE7D,QAAI,CAAC,OAAO,MAAM,OAAO,gBAAgB,CAAC,aACxC,aAAY;KAAE,MAAM;KAAS,SAAS,kBAAkB,OAAO,aAAa;KAAE,CAAC;aAEzE;AACR,sCAAkC,YAAY,mBAAmB;;WAE5D,KAAK;AACZ,OAAI,CAAC,aAEH,aAAY;IAAE,MAAM;IAAS,SAAS,kBAD3B,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,CACA;IAAE,CAAC;YAExD;AACR,OAAI,CAAC,eAAe,YAAY,UAC9B,KAAI;IACF,MAAM,gBAAgB,MAAM,KAAK,oBAAoB,YAAY,aAAa;AAC9E,QAAI,cACF,OAAM,KAAK,cAAc;YAEpB,QAAQ;AACf,SAAK,IAAI,KAAK;KAAE,KAAK;KAAQ;KAAY,EAAE,+CAA+C;;AAG9F,SAAM,OAAO;;KAEb;AAEJ,KAAI;AACF,aAAW,MAAM,SAAS,MACxB,OAAM;AAER,QAAM;AAEN,MAAI,YAAY,aAAa,gBAC3B,KAAI;GACF,MAAM,UAAU;IACd,MAAM;IACN,SAAS,CAAC;KAAE,MAAM;KAAiB,MAAM;KAAgB,CAAC;IAC1D,WAAW,KAAK,KAAK;IACtB;AACD,SAAM,KAAK,aAAa,wBAAwB,YAAY,QAAQ;AACpE,QAAK,MAAM,YAAY,eACrB,OAAM,KAAK,aAAa,6BAA6B,YAAY,SAAS;AAE5E,OAAI,qBAAqB,MAAM,EAAE;IAC/B,MAAM,eAAe;KACnB,MAAM;KACN,SAAS,eAAe,sBAAsB,OAAO,GACjD,CAAC,qBAAqB,OAAO,GAC7B,CAAC;MAAE,MAAM;MAAiB,MAAM,oBAAoB,MAAM;MAAE,CAAC;KACjE,WAAW,KAAK,KAAK;KACrB,GAAI,wBAAwB,OAAO,KAAK,qBAAqB,CAAC,SAAS,IACnE,EAAE,UAAU,sBAAsB,GAClC,EAAE;KACP;AACD,UAAM,KAAK,aAAa,wBAAwB,YAAY,aAAa;;AAE3E,QAAK,0BAA0B,WAAW;WACnC,KAAK;AACZ,QAAK,IAAI,KAAK;IAAE;IAAK;IAAY,EAAE,kDAAkD;;AAIzF,OAAK,oCAAoC,YAAY,EAAE,4BAA4B,iBAAiB,CAAC;WAC7F;AACR,MAAI,YAAY,UACd,MAAK,8BAA8B,WAAW;AAEhD,OAAK,yBAAyB"}

package/dist/src/agent/service/session-context-report.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"session-context-report.js","names":[],"sources":["../../../../src/agent/service/session-context-report.ts"],"sourcesContent":["/** Assembled snapshot for `/context` (list, detail markdown, or JSON). */\nexport type SessionContextReportInput = {\n  sessionKey: string;\n  mode: 'list' | 'detail' | 'json';\n  model: string;\n  workspacePath: string;\n  agentId: string;\n  messageCount: number;\n  contextWindowNominal: number;\n  estimatedTranscriptTokens: number;\n  thinkingDefault?: string;\n  reasoningDefault?: string;\n  verboseDefault?: string;\n  compaction: unknown;\n  toolsFlagsSummary: string;\n  windowStats: unknown;\n  compactionRunStats: unknown;\n};\n\nexport function formatSessionContextReport(input: SessionContextReportInput): string {\n  const {\n    sessionKey,\n    mode,\n    model,\n    workspacePath,\n    agentId,\n    messageCount,\n    contextWindowNominal: cw,\n    estimatedTranscriptTokens: estTokens,\n    thinkingDefault,\n    reasoningDefault,\n    verboseDefault,\n    compaction,\n    toolsFlagsSummary,\n    windowStats,\n    compactionRunStats,\n  } = input;\n\n  const payload: Record<string, unknown> = {\n    sessionKey,\n    model,\n    workspacePath,\n    agentId,\n    messageCount,\n    contextWindowNominal: cw,\n    estimatedTranscriptTokens: estTokens,\n    approxWindowUsage: cw > 0 ? estTokens / cw : null,\n    thinkingDefault,\n    reasoningDefault,\n    verboseDefault,\n    compaction,\n    toolsFlagsOn: toolsFlagsSummary,\n    windowStats,\n    compactionRunStats: compactionRunStats,\n  };\n\n  if (mode === 'json') {\n    return JSON.stringify(payload, null, 2);\n  }\n\n  const lines: string[] = [\n    '📎 *Context overview*',\n    '',\n    `• Session: \\`${sessionKey}\\``,\n    `• Model: \\`${model}\\``,\n    `• Agent profile: \\`${agentId}\\``,\n    `• Workspace: \\`${workspacePath}\\``,\n    `• Messages: ${messageCount}`,\n    `• Est. transcript tokens (rough): ${estTokens}`,\n    `• Nominal context budget (4× maxTokens): ${cw}`,\n  ];\n  if (cw > 0) {\n    lines.push(`• Approx. usage vs budget: ${((estTokens / cw) * 100).toFixed(1)}%`);\n  }\n  lines.push(\n    `• Thinking / reasoning / verbose defaults: ${thinkingDefault ?? '—'} / ${reasoningDefault ?? '—'} / ${verboseDefault ?? '—'}`,\n    `• Tools (true flags): ${toolsFlagsSummary}`,\n    '',\n    '_Full system prompt, skills, and memory blocks are assembled at agent runtime; use Web settings or logs for deep inspection._',\n  );\n\n  if (mode === 'detail') {\n    lines.push('', '*Compaction config:*', '```json');\n    lines.push(JSON.stringify(compaction ?? {}, null, 2));\n    lines.push('```', '', '*Window stats:*', '```json');\n    lines.push(JSON.stringify(windowStats ?? {}, null, 2));\n    lines.push('```');\n  }\n\n  return lines.join('\\n');\n}\n"],"mappings":";AAmBA,SAAgB,2BAA2B,OAA0C;CACnF,MAAM,EACJ,YACA,MACA,OACA,eACA,SACA,cACA,sBAAsB,IACtB,2BAA2B,WAC3B,iBACA,kBACA,gBACA,YACA,mBACA,aACA,uBACE;CAEJ,MAAM,UAAmC;EACvC;EACA;EACA;EACA;EACA;EACA,sBAAsB;EACtB,2BAA2B;EAC3B,mBAAmB,KAAK,IAAI,YAAY,KAAK;EAC7C;EACA;EACA;EACA;EACA,cAAc;EACd;EACoB;EACrB;AAED,KAAI,SAAS,OACX,QAAO,KAAK,UAAU,SAAS,MAAM,EAAE;CAGzC,MAAM,QAAkB;EACtB;EACA;EACA,gBAAgB,WAAW;EAC3B,cAAc,MAAM;EACpB,sBAAsB,QAAQ;EAC9B,kBAAkB,cAAc;EAChC,eAAe;EACf,qCAAqC;EACrC,4CAA4C;EAC7C;AACD,KAAI,KAAK,EACP,OAAM,KAAK,+BAAgC,YAAY,KAAM,KAAK,QAAQ,EAAE,CAAC,GAAG;AAElF,OAAM,KACJ,8CAA8C,mBAAmB,IAAI,KAAK,oBAAoB,IAAI,KAAK,kBAAkB,OACzH,yBAAyB,qBACzB,IACA,gIACD;AAED,KAAI,SAAS,UAAU;AACrB,QAAM,KAAK,IAAI,wBAAwB,UAAU;AACjD,QAAM,KAAK,KAAK,UAAU,cAAc,EAAE,EAAE,MAAM,EAAE,CAAC;AACrD,QAAM,KAAK,OAAO,IAAI,mBAAmB,UAAU;AACnD,QAAM,KAAK,KAAK,UAAU,eAAe,EAAE,EAAE,MAAM,EAAE,CAAC;AACtD,QAAM,KAAK,MAAM;;AAGnB,QAAO,MAAM,KAAK,KAAK"}

package/dist/src/agent/service/webchat-tts.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"webchat-tts.js","names":[],"sources":["../../../../src/agent/service/webchat-tts.ts"],"sourcesContent":["import type { Config } from '../../config/schema.js';\nimport { persistOutboundTtsAudio } from '../../channels/attachments/outbound-tts-persist.js';\nimport type { MediaRef } from '../../media/types.js';\nimport { compressAudio } from '../../voice/tts/audio.js';\nimport { speak } from '../../voice/tts/index.js';\nimport { mergeTtsConfigFromAppConfig } from '../../voice/tts/merge-config.js';\nimport { shouldUseTTS, getChannelOutputFormat } from '../../voice/tts/service.js';\nimport { isTTSAvailable } from '../../voice/tts/factory.js';\nimport type { SessionStore } from '../../session/index.js';\nimport type { AgentMessage } from '@earendil-works/pi-agent-core';\n\nexport type WebchatTtsResult = {\n  type: 'tts_audio';\n  uri: string;\n  mimeType: string;\n  name: string;\n};\n\nexport type WebchatTtsDeps = {\n  config: Config | undefined;\n  sessionStore: SessionStore;\n  getLastAssistantPlainText: (sessionKey: string) => string;\n  log: { warn: (obj: Record<string, unknown>, msg: string) => void };\n};\n\n/**\n * Generate TTS for webchat when config allows; persist under `{stateDir}/media/tts/`.\n */\nexport async function maybeEmitWebchatTts(\n  deps: WebchatTtsDeps,\n  sessionKey: string,\n  hadInboundVoice: boolean,\n): Promise<WebchatTtsResult | null> {\n  const ttsConfig = mergeTtsConfigFromAppConfig(deps.config?.messages?.tts);\n  if (!isTTSAvailable(ttsConfig)) {\n    return null;\n  }\n  const decision = shouldUseTTS(ttsConfig, hadInboundVoice);\n  if (!decision.useTTS) {\n    return null;\n  }\n  const text = deps.getLastAssistantPlainText(sessionKey).trim();\n  if (!text) {\n    return null;\n  }\n  try {\n    const webOut = getChannelOutputFormat('webchat');\n    const fmt = webOut.format as 'opus' | 'mp3' | 'wav';\n    const ttsResult = await speak(text, ttsConfig, {\n      appConfig: deps.config,\n      tts: { format: fmt },\n    });\n    const { buffer, format } = await compressAudio(\n      Buffer.from(ttsResult.audio),\n      ttsResult.format,\n      webOut.format === 'mp3' ? 'mp3' : 'opus',\n    );\n    const normalizedMime =\n      format === 'opus' || format === 'ogg'\n        ? 'audio/ogg'\n        : format === 'mp3' || format === 'mpeg'\n          ? 'audio/mpeg'\n          : format === 'wav'\n            ? 'audio/wav'\n            : `audio/${format}`;\n    const persisted = await persistOutboundTtsAudio(buffer, format);\n    await appendMediaToLastAssistant(deps.sessionStore, sessionKey, persisted);\n    return {\n      type: 'tts_audio',\n      uri: persisted.uri,\n      mimeType: normalizedMime,\n      name: persisted.name,\n    };\n  } catch (err) {\n    deps.log.warn({ err, sessionKey }, 'Webchat TTS failed');\n    return null;\n  }\n}\n\nexport async function appendMediaToLastAssistant(\n  sessionStore: SessionStore,\n  sessionKey: string,\n  ref: MediaRef,\n): Promise<void> {\n  const loaded = await sessionStore.load(sessionKey);\n  for (let i = loaded.length - 1; i >= 0; i--) {\n    const m = loaded[i] as { role?: string; media?: MediaRef[] };\n    if (m.role === 'assistant') {\n      const prev = m.media ?? [];\n      if (prev.some((x) => x.uri === ref.uri)) {\n        return;\n      }\n      loaded[i] = { ...m, media: [...prev, ref] } as unknown as AgentMessage;\n      await sessionStore.saveMessages(sessionKey, loaded);\n      return;\n    }\n  }\n}\n"],"mappings":";;;;;;;;;;;AA4BA,eAAsB,oBACpB,MACA,YACA,iBACkC;CAClC,MAAM,YAAY,4BAA4B,KAAK,QAAQ,UAAU,IAAI;AACzE,KAAI,CAAC,eAAe,UAAU,CAC5B,QAAO;AAGT,KAAI,CADa,aAAa,WAAW,gBAC5B,CAAC,OACZ,QAAO;CAET,MAAM,OAAO,KAAK,0BAA0B,WAAW,CAAC,MAAM;AAC9D,KAAI,CAAC,KACH,QAAO;AAET,KAAI;EACF,MAAM,SAAS,uBAAuB,UAAU;EAChD,MAAM,MAAM,OAAO;EACnB,MAAM,YAAY,MAAM,MAAM,MAAM,WAAW;GAC7C,WAAW,KAAK;GAChB,KAAK,EAAE,QAAQ,KAAK;GACrB,CAAC;EACF,MAAM,EAAE,QAAQ,WAAW,MAAM,cAC/B,OAAO,KAAK,UAAU,MAAM,EAC5B,UAAU,QACV,OAAO,WAAW,QAAQ,QAAQ,OACnC;EACD,MAAM,iBACJ,WAAW,UAAU,WAAW,QAC5B,cACA,WAAW,SAAS,WAAW,SAC7B,eACA,WAAW,QACT,cACA,SAAS;EACnB,MAAM,YAAY,MAAM,wBAAwB,QAAQ,OAAO;AAC/D,QAAM,2BAA2B,KAAK,cAAc,YAAY,UAAU;AAC1E,SAAO;GACL,MAAM;GACN,KAAK,UAAU;GACf,UAAU;GACV,MAAM,UAAU;GACjB;UACM,KAAK;AACZ,OAAK,IAAI,KAAK;GAAE;GAAK;GAAY,EAAE,qBAAqB;AACxD,SAAO;;;AAIX,eAAsB,2BACpB,cACA,YACA,KACe;CACf,MAAM,SAAS,MAAM,aAAa,KAAK,WAAW;AAClD,MAAK,IAAI,IAAI,OAAO,SAAS,GAAG,KAAK,GAAG,KAAK;EAC3C,MAAM,IAAI,OAAO;AACjB,MAAI,EAAE,SAAS,aAAa;GAC1B,MAAM,OAAO,EAAE,SAAS,EAAE;AAC1B,OAAI,KAAK,MAAM,MAAM,EAAE,QAAQ,IAAI,IAAI,CACrC;AAEF,UAAO,KAAK;IAAE,GAAG;IAAG,OAAO,CAAC,GAAG,MAAM,IAAI;IAAE;AAC3C,SAAM,aAAa,aAAa,YAAY,OAAO;AACnD"}

package/dist/src/agent/service-inbound-utils.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"service-inbound-utils.js","names":[],"sources":["../../../src/agent/service-inbound-utils.ts"],"sourcesContent":["import { randomUUID } from 'node:crypto';\n\nimport type { InboundMessage } from '../infra/bus/index.js';\n\nexport function inboundMessageLogRequestId(msg: InboundMessage): string {\n  const raw = msg.metadata?.requestId;\n  if (typeof raw === 'string' && raw.trim().length > 0) {\n    return raw.trim();\n  }\n  return randomUUID();\n}\n"],"mappings":";;AAIA,SAAgB,2BAA2B,KAA6B;CACtE,MAAM,MAAM,IAAI,UAAU;AAC1B,KAAI,OAAO,QAAQ,YAAY,IAAI,MAAM,CAAC,SAAS,EACjD,QAAO,IAAI,MAAM;AAEnB,QAAO,YAAY"}

package/dist/src/agent/service.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"service.js","names":[],"sources":["../../../src/agent/service.ts"],"sourcesContent":["import type { AgentEvent, AgentMessage, ThinkingLevel } from '@earendil-works/pi-agent-core';\nimport type { MessageBus } from '../infra/bus/index.js';\nimport { type Config, getAgentDefaultModelRef } from '../config/schema.js';\nimport {\n  maybeRefineSessionTitleWithLlm,\n  maybeSetProvisionalSessionTitle,\n} from '../session/session-title.js';\nimport type { ChannelManager } from '../channels/manager.js';\nimport { existsSync, readFileSync } from 'node:fs';\nimport { readFile } from 'node:fs/promises';\n\nimport {\n  SessionStore,\n  SessionConfigStore,\n  onSessionTranscriptUpdate,\n  effectiveWorkspacePathForSession,\n  type CompactionConfig,\n  type WindowConfig,\n} from '../session/index.js';\nimport { type ThinkLevel } from './transcript/thinking-types.js';\nimport { createLogger } from '../utils/logger.js';\nimport { ExtensionHookRunner } from '../extensions/index.js';\nimport { extractTextContent } from './context/workspace.js';\nimport { SessionTracker } from './session/tracker.js';\nimport { ModelManager } from './models/index.js';\nimport { initializeCommands } from '../chat-commands/index.js';\nimport { ProgressFeedbackManager } from './lifecycle/progress.js';\nimport { HookHandler } from './lifecycle/hook-handler.js';\nimport { ToolErrorTracker } from './tools/error-tracker.js';\nimport { RequestLimiter } from './models/request-limiter.js';\nimport { SystemReminder } from './prompt/system-reminder.js';\nimport { ToolUsageAnalyzer } from './tools/usage-analyzer.js';\nimport { ToolChainTracker } from './tools/chain-tracker.js';\nimport { ErrorPatternMatcher } from './tools/error-pattern-matcher.js';\nimport { ContextMiddleware, SelfVerifyMiddleware } from './middleware/index.js';\nimport { TurnDiffTracker } from './coding/index.js';\nimport { LifecycleManager } from './lifecycle/index.js';\nimport { CompactionLifecycleHandler } from './lifecycle/handlers/compaction.js';\n\nimport {\n  MessageRouter,\n  CommandHandler,\n  StreamManager,\n  OutboundCoordinator,\n} from './messaging/index.js';\nimport { InboundLoop } from './inbound/inbound-loop.js';\nimport { TurnDispatcher } from './inbound/turn-dispatcher.js';\nimport {\n  SessionContextManager,\n  SessionLifecycleManager,\n  SessionStateBag,\n  SessionConfigService,\n  SessionHydrator,\n  SessionInspector,\n  type SessionContext,\n} from './session/index.js';\nimport {\n  AgentOrchestrator,\n  AgentEventHandler,\n  readChangedPathsFromToolEnd,\n} from './orchestration/index.js';\nimport {\n  getWorkflowProgressBroker,\n  type BrokerListenerHandle,\n} from './workflow/index.js';\nimport { FeedbackCoordinator } from './feedback/index.js';\nimport {\n  AgentManager,\n  type AgentSkillAvailabilityPayload,\n  type SkillCatalogEntry,\n  type SkillCatalogSnapshot,\n} from './agent-manager.js';\nimport type { SkillMarkdownPreviewPayload } from './skills/types.js';\nimport type { AgentCapabilityCatalogEntry } from './capabilities/index.js';\nimport type { AgentServiceConfig, StreamHandle } from './service.types.js';\nimport { PersistentGoalService } from './goals/persistent-goal-service.js';\nimport { parseNoteAttachmentTarget } from '../notes/attachment-ref.js';\nimport { pullSkillFromSource } from './skills/hub-pull.js';\nimport {\n  resolveWorkspaceSkillsDir,\n  resolveWorkspaceSkillsLockPath,\n} from './skills/workspace-skills-dir.js';\nimport { normalizeSkillInstallTarget } from './skills/install-target.js';\nimport type {\n  SkillInstallToolOptions,\n  SkillInstallToolResult,\n} from './tools/skill-install-tool.js';\n\nimport {\n  resolveAgentHomeDir,\n  resolveDefaultAgentId,\n} from './agent-scope.js';\nimport {\n  extractProfileAgentId,\n} from '../config/agent-profile.js';\nimport { resolveUserProfilePath } from '../config/paths.js';\nimport { getProjectForSession } from '../projects/workspace.js';\nimport {\n  persistInboundAttachments,\n  type InboundAttachmentInput,\n  type MediaRef,\n} from '../channels/attachments/inbound-persist.js';\nimport { applyConfigOverrides } from '../config/runtime-overrides.js';\n\nexport type { AgentServiceConfig, AgentContext, StreamHandle } from './service.types.js';\n\nconst log = createLogger('AgentService');\n\nfunction assistantMessageText(message: AgentMessage): string {\n  const content = (message as { content?: unknown }).content;\n  if (typeof content === 'string') return content;\n  if (!Array.isArray(content)) return '';\n  return content\n    .map((block) => {\n      if (!block || typeof block !== 'object') return '';\n      const rec = block as { type?: unknown; text?: unknown };\n      return rec.type === 'text' && typeof rec.text === 'string' ? rec.text : '';\n    })\n    .join('');\n}\n\nexport class AgentService {\n  /**\n   * Persistent transcript + session-metadata store. Public so the gateway/TUI\n   * can read sessions, delete them, etc. without forcing every CRUD-style\n   * operation through a delegation method on `AgentService`.\n   */\n  readonly sessionStore: SessionStore;\n  private sessionConfigStore: SessionConfigStore;\n  private hookRunner?: ExtensionHookRunner;\n  private agentId: string;\n  private workspaceDir: string;\n  private config: AgentServiceConfig;\n  private sessionTracker: SessionTracker;\n  private modelManager: ModelManager;\n  private progressManager: ProgressFeedbackManager;\n  private hookHandler: HookHandler;\n  private lifecycleManager: LifecycleManager;\n  private errorTracker: ToolErrorTracker;\n  private requestLimiter: RequestLimiter;\n  private systemReminder: SystemReminder;\n  private toolUsageAnalyzer: ToolUsageAnalyzer;\n  private toolChainTracker: ToolChainTracker;\n  private errorPatternMatcher: ErrorPatternMatcher;\n  private selfVerifyMiddleware: SelfVerifyMiddleware;\n  private turnDiffTracker: TurnDiffTracker;\n  private contextMiddleware: ContextMiddleware;\n\n  private messageRouter: MessageRouter;\n  private commandHandler: CommandHandler;\n  private streamManager: StreamManager;\n  /**\n   * Outbound pipeline: typing controller, silence guard, final response publish,\n   * extension `message_sending`/`message_sent` hooks, post-turn `webchat_turn_complete`\n   * event. Public so the gateway / channels can drive it directly.\n   */\n  readonly outboundCoordinator: OutboundCoordinator;\n  private inboundLoop: InboundLoop;\n  /**\n   * Direct-turn entry points: `processDirect` (one-shot), `processDirectStreaming`\n   * (SSE generator), webchat steering and SSE injection. Public so the gateway,\n   * TUI, CLI, and automations do not need to thread every call through `AgentService`.\n   */\n  readonly turnDispatcher: TurnDispatcher;\n  /**\n   * `/goal` runtime: continuation scheduling, persistent-goal API factory,\n   * stream-outcome state, post-turn verdict. Public so the gateway can wire\n   * the webchat continuation scheduler and read stream outcomes directly.\n   */\n  readonly persistentGoals: PersistentGoalService;\n  /**\n   * Per-session config writes (model / thinking / reasoning / working directory).\n   * Public so REST endpoints and CLI flows can hit it without going through a\n   * monolithic patch entrypoint on `AgentService`.\n   */\n  readonly sessionConfig: SessionConfigService;\n  /**\n   * Hydration — read persisted per-session config and apply it to the runtime\n   * (AgentManager / ModelManager). The mirror image of `sessionConfig`: writes\n   * go through `sessionConfig`, reads-into-runtime go through `sessionHydrator`.\n   */\n  readonly sessionHydrator: SessionHydrator;\n  /**\n   * Read-only introspection (compaction, /context report, /btw, contextUsage,\n   * agentConfig view). Public so REST endpoints and CLI flows can query a\n   * session's view without going through delegating methods on `AgentService`.\n   */\n  readonly sessionInspector: SessionInspector;\n  private sessionContextManager: SessionContextManager;\n  private sessionLifecycleManager: SessionLifecycleManager;\n  private agentOrchestrator: AgentOrchestrator;\n  private agentEventHandler: AgentEventHandler;\n  private workflowProgressBrokerHandle: BrokerListenerHandle | null = null;\n  private feedbackCoordinator: FeedbackCoordinator;\n  private agentManager: AgentManager;\n\n  /**\n   * Unified per-session state container (replaces six ad-hoc Maps). Owns webchat\n   * publishers, last assistant text, embedded stream buffer, persistent-goal stream\n   * outcomes, concurrent-turn depth, and event-listener unsubscribers; runs a TTL\n   * sweep for slots that have no explicit owner.\n   */\n  private sessionState = new SessionStateBag();\n\n  /** Gateway: notify UI after direct `SessionStore.updateMetadata` (no SessionManager emit). */\n  private onSessionMetadataUpdated?: (sessionKey: string, patch?: { name?: string }) => void;\n  private onSessionTranscriptUpdated?: (sessionKey: string) => void;\n\n  private effectiveAppConfig(): Config | undefined {\n    const base = this.config.config;\n    return base ? applyConfigOverrides(base) : undefined;\n  }\n\n  constructor(bus: MessageBus, config: AgentServiceConfig) {\n    this.config = config;\n    this.onSessionMetadataUpdated = config.onSessionMetadataUpdated;\n    this.onSessionTranscriptUpdated = config.onSessionTranscriptUpdated;\n    this.agentId = `agent-${Date.now()}`;\n    this.workspaceDir = config.workspace;\n\n    this.sessionTracker = new SessionTracker();\n    this.modelManager = new ModelManager({\n      defaultModel: config.model,\n      config: config.config,\n    });\n\n    initializeCommands();\n    log.debug('Command system initialized');\n\n    this.sessionStore = config.sessionStore ?? this.createSessionStore();\n    onSessionTranscriptUpdate((update) => {\n      void this.sessionStore.syncEmbeddedTranscriptUpdate(update).catch((err) => {\n        log.warn(\n          { err, sessionKey: update.sessionKey },\n          'Transcript index sync failed',\n        );\n      });\n      const sk = update.sessionKey?.trim();\n      if (sk) {\n        this.onSessionTranscriptUpdated?.(sk);\n      }\n    });\n    const appCfgForPaths = this.config.config;\n    if (!appCfgForPaths) {\n      throw new Error('AgentService requires config.config for session paths');\n    }\n    const defaultAid = resolveDefaultAgentId(appCfgForPaths);\n    const defaultAgentHome = resolveAgentHomeDir(appCfgForPaths, defaultAid);\n    this.sessionConfigStore = new SessionConfigStore(defaultAgentHome);\n\n    this.hookRunner = this.createHookRunner();\n    this.hookHandler = new HookHandler({\n      hookRunner: this.hookRunner,\n      agentId: this.agentId,\n      get sessionKey() { return this.currentContext?.sessionKey; },\n    });\n\n    this.progressManager = this.createProgressManager();\n    this.initializeReliabilityModules();\n\n    this.lifecycleManager = new LifecycleManager();\n    this.initializeLifecycleHandlers();\n\n    this.streamManager = new StreamManager();\n    this.sessionContextManager = new SessionContextManager();\n    this.feedbackCoordinator = new FeedbackCoordinator({\n      progressManager: this.progressManager,\n      bus,\n    });\n\n    this.agentManager = new AgentManager({\n      workspace: config.workspace,\n      model: config.model,\n      config: config.config,\n      extensionRegistry: config.extensionRegistry,\n      hookRunner: this.hookRunner,\n      bus,\n      getCurrentContext: () => this.sessionContextManager.getContext(),\n      getSessionStore: () => this.sessionStore,\n      getModelManager: () => this.modelManager,\n      thinkingLevel: config.thinkingLevel,\n      reasoningLevel: config.reasoningLevel,\n      verboseLevel: config.verboseLevel,\n      gatewayClarify: config.gatewayClarify,\n      getAutomationService: config.getAutomationService,\n      getNotesService: config.getNotesService,\n      getProjectService: config.getProjectService,\n      getWorkItemService: config.getWorkItemService,\n      getWorkflowRunService: config.getWorkflowRunService,\n      onSkillsUpdated: config.onSkillsUpdated,\n      installSkillFromSource: (opts) => this.installSkillFromSource(opts),\n      isWorkspaceTrusted: config.isWorkspaceTrusted,\n      getSelfVerifyPromptContext: (sessionKey, agentId) => [\n        this.selfVerifyMiddleware.getPendingVerificationContext(sessionKey, agentId),\n        this.turnDiffTracker.buildFinalGuardContext(sessionKey),\n      ].filter(Boolean).join('\\n\\n'),\n    });\n\n    this.agentEventHandler = new AgentEventHandler({\n      progressManager: this.progressManager,\n      errorTracker: this.errorTracker,\n      requestLimiter: this.requestLimiter,\n      lifecycleManager: this.lifecycleManager,\n      toolChainTracker: this.toolChainTracker,\n      selfVerifyMiddleware: this.selfVerifyMiddleware,\n      systemReminder: this.systemReminder,\n      toolUsageAnalyzer: this.toolUsageAnalyzer,\n      errorPatternMatcher: this.errorPatternMatcher,\n      turnDiffTracker: this.turnDiffTracker,\n    });\n    this.agentEventHandler.registerListener('tool_execution_end', (event, context) => {\n      const e = event as Extract<AgentEvent, { type: 'tool_execution_end' }> & {\n        args?: unknown;\n        result: unknown;\n      };\n      if (e.isError) return;\n      const changedPaths = readChangedPathsFromToolEnd(e.toolName, e.args, e.result);\n      this.agentManager.markCodeIntelligenceDirty(context.sessionKey, changedPaths);\n    });\n\n    // Wire the workflow progress broker into the session event bus. Channel\n    // extensions self-register their capability against the singleton at\n    // boot; the broker only forwards updates to whatever has registered, so\n    // this is safe even when no channel is configured.\n    this.workflowProgressBrokerHandle = getWorkflowProgressBroker().attachTo(\n      this.agentEventHandler,\n    );\n\n    // sessionHydrator is constructed early because AgentOrchestrator + InboundLoop +\n    // TurnDispatcher all need it; the SessionConfigService instance below also\n    // shares the same constructor parameters.\n    this.sessionHydrator = new SessionHydrator({\n      sessionConfigStore: this.sessionConfigStore,\n      agentManager: this.agentManager,\n      modelManager: this.modelManager,\n      getConfig: () => this.effectiveAppConfig(),\n    });\n\n    this.agentOrchestrator = new AgentOrchestrator({\n      agentManager: this.agentManager,\n      sessionStore: this.sessionStore,\n      modelManager: this.modelManager,\n      eventHandler: this.agentEventHandler,\n      feedbackCoordinator: this.feedbackCoordinator,\n      sessionConfigStore: this.sessionConfigStore,\n      sessionHydrator: this.sessionHydrator,\n      getConfig: () => this.effectiveAppConfig(),\n      getThinkingDefault: () => undefined,\n      getThinkingDefaultForSession: (sessionKey: string) =>\n        this.agentManager.getThinkingDefaultForSession(sessionKey),\n      workspaceRoot: this.workspaceDir,\n      getWorkspaceRootForSession: (sessionKey: string) =>\n        this.agentManager.getResolvedWorkspaceForSession(sessionKey),\n      getAgentInternalStorageRootForSession: (sessionKey: string) =>\n        resolveAgentHomeDir(this.config.config!, extractProfileAgentId(sessionKey, this.config.config!)),\n      enqueueAutoTitle: (sessionKey: string) => this.enqueueMaybeAutoTitleAfterPersist(sessionKey),\n      onEmbeddedStreamEvent: (sessionKey, event) => {\n        const ctx = this.sessionContextManager.getContext();\n        if (!ctx || ctx.sessionKey !== sessionKey) {\n          return;\n        }\n        if (event.type === 'message_update' && event.message.role === 'assistant') {\n          const next = assistantMessageText(event.message);\n          this.streamManager.update(next);\n        }\n      },\n      onEmbeddedTurnComplete: (sessionKey, text) => {\n        if (text) {\n          this.sessionState.setLastAssistantText(sessionKey, text);\n        }\n        this.sessionState.clearEmbeddedStreamText(sessionKey);\n      },\n    });\n\n    this.messageRouter = new MessageRouter();\n    this.commandHandler = new CommandHandler({\n      config: config.config!,\n      bus,\n      sessionStore: this.sessionStore,\n      sessionConfigStore: this.sessionConfigStore,\n      getPersistentGoalApisForCommand: (routing) => this.persistentGoals.buildApisForRouting(routing),\n      getWorkflowRunService: config.getWorkflowRunService,\n      applySessionThinkingLevel: (sessionKey: string, level: ThinkLevel) => {\n        this.agentManager.setThinkingLevel(sessionKey, level as ThinkingLevel);\n      },\n      getCurrentModel: () => this.agentOrchestrator.getCurrentModel(),\n      switchModelForSession: (sessionKey: string, modelId: string) =>\n        this.switchModelForSession(sessionKey, modelId),\n      invalidateAgentSession: (sessionKey: string) => {\n        this.agentManager.removeAgent(sessionKey);\n      },\n      resetSession: (sessionKey: string) => this.resetSession(sessionKey),\n      abortSessionTurn: async (sessionKey: string) => {\n        await this.streamManager.abort();\n        this.agentOrchestrator.abort(sessionKey);\n      },\n      reloadSkills: () => this.refreshSkillsAfterDiskChange(),\n      installSkillFromSource: (opts) => this.installSkillFromSource(opts),\n      compactSession: (sessionKey, options) => this.sessionInspector.compact(sessionKey, options),\n      btwQuery: (sessionKey, question, options) => this.sessionInspector.btwQuery(sessionKey, question, options),\n      getSessionContextReport: (sessionKey, mode) => this.sessionInspector.report(sessionKey, mode),\n    });\n\n    this.sessionLifecycleManager = new SessionLifecycleManager(\n      this.sessionStore,\n      this.sessionTracker,\n      this.lifecycleManager\n    );\n\n    this.persistentGoals = new PersistentGoalService({\n      bus,\n      sessionStore: this.sessionStore,\n      modelManager: this.modelManager,\n      sessionState: this.sessionState,\n      getConfig: () => this.effectiveAppConfig(),\n      getResolvedWorkspaceForSession: (sk) => this.agentManager.getResolvedWorkspaceForSession(sk),\n      onSessionMetadataUpdated: this.onSessionMetadataUpdated,\n      onGoalStatusUpdated: config.onGoalStatusUpdated,\n      notifyWebchatTranscriptAppend: (sk, text) => this.turnDispatcher.notifyWebchatTranscriptAppend(sk, text),\n    });\n\n    this.sessionConfig = new SessionConfigService({\n      sessionStore: this.sessionStore,\n      sessionConfigStore: this.sessionConfigStore,\n      modelManager: this.modelManager,\n      agentManager: this.agentManager,\n      getConfig: () => this.effectiveAppConfig(),\n    });\n\n    this.sessionInspector = new SessionInspector({\n      sessionStore: this.sessionStore,\n      sessionConfigStore: this.sessionConfigStore,\n      modelManager: this.modelManager,\n      agentManager: this.agentManager,\n      sessionHydrator: this.sessionHydrator,\n      getConfig: () => this.effectiveAppConfig(),\n      getContextWindow: (sessionKey) => this.getContextWindowForSession(sessionKey),\n    });\n\n    this.outboundCoordinator = new OutboundCoordinator({\n      bus,\n      hookHandler: this.hookHandler,\n      streamManager: this.streamManager,\n      getConfig: () => this.effectiveAppConfig(),\n      getLastAssistantPlainText: (sk) => this.getLastAssistantPlainText(sk),\n      runPersistentGoalPostTurn: (payload) => this.persistentGoals.runPostTurn(payload),\n    });\n\n    this.turnDispatcher = new TurnDispatcher({\n      log,\n      agentManager: this.agentManager,\n      sessionStore: this.sessionStore,\n      modelManager: this.modelManager,\n      sessionConfigStore: this.sessionConfigStore,\n      sessionState: this.sessionState,\n      commandHandler: this.commandHandler,\n      getConfig: () => this.effectiveAppConfig(),\n      requireConfig: () => {\n        const c = this.config.config;\n        if (!c) throw new Error('AgentService requires config.config');\n        return c;\n      },\n      resolveSessionEndpoint: (sk) => this.resolveSessionEndpoint(sk),\n      initSessionContext: (sk, channel, chatId) => this.initSessionContext(sk, channel, chatId),\n      sessionHydrator: this.sessionHydrator,\n      prepareInboundAttachments: (sk, att) => this.prepareInboundAttachments(sk, att),\n      enqueueMaybeAutoTitleAfterPersist: (sk) => this.enqueueMaybeAutoTitleAfterPersist(sk),\n      enqueueProvisionalSessionTitle: (sk, text) => this.enqueueProvisionalSessionTitle(sk, text),\n      endDirectRequestContext: () => this.endDirectRequestContext(),\n      onSessionTranscriptUpdated: this.onSessionTranscriptUpdated,\n      resetSession: (sk) => this.resetSession(sk),\n      sourceContextResolver: config.sourceContextResolver,\n    });\n\n    this.inboundLoop = new InboundLoop({\n      log,\n      agentId: this.agentId,\n      bus,\n      hookHandler: this.hookHandler,\n      messageRouter: this.messageRouter,\n      commandHandler: this.commandHandler,\n      sessionContextManager: this.sessionContextManager,\n      feedbackCoordinator: this.feedbackCoordinator,\n      agentManager: this.agentManager,\n      sessionLifecycleManager: this.sessionLifecycleManager,\n      agentOrchestrator: this.agentOrchestrator,\n      outboundCoordinator: this.outboundCoordinator,\n      streamManager: this.streamManager,\n      sessionState: this.sessionState,\n      sessionStore: this.sessionStore,\n      modelManager: this.modelManager,\n      setupSessionEventHandling: (sk) => this.setupSessionEventHandling(sk),\n      sessionHydrator: this.sessionHydrator,\n      getLastAssistantPlainText: (sk) => this.getLastAssistantPlainText(sk),\n      checkAndCompact: (sk, msgs) => this.checkAndCompact(sk, msgs),\n      enqueueMaybeAutoTitleAfterPersist: (sk) => this.enqueueMaybeAutoTitleAfterPersist(sk),\n      getConfig: () => this.effectiveAppConfig(),\n      resetSession: (sk) => this.resetSession(sk),\n      setStreamHandle: (handle) => this.setStreamHandle(handle),\n    });\n\n    // Register signal handlers only if not running as an Electron subprocess.\n    // In Electron, the parent process manages the lifecycle and signals should not trigger disposal.\n    const isElectronSubprocess = !!process.env.ELECTRON_RUN_AS_NODE;\n    if (!isElectronSubprocess) {\n      process.on('SIGINT', () => this.dispose());\n      process.on('SIGTERM', () => this.dispose());\n    }\n\n    log.info('AgentService initialized');\n  }\n\n  private createSessionStore(): SessionStore {\n    const windowConfig: Partial<WindowConfig> = {\n      maxMessages: 100,\n      keepRecentMessages: 20,\n      preserveSystemMessages: true,\n    };\n    const compactionConfig: Partial<CompactionConfig> = {\n      enabled: true,\n      mode: 'abstractive',\n      reserveTokens: 8000,\n      triggerThreshold: 0.8,\n      minMessagesBeforeCompact: 10,\n      keepRecentMessages: 10,\n      evictionWindow: 0.2,\n      retentionWindow: 6,\n    };\n    const appCfg = this.config.config;\n    if (!appCfg) {\n      throw new Error('AgentService requires config.config for session store paths');\n    }\n    return new SessionStore(\n      {\n        config: appCfg,\n      },\n      windowConfig,\n      compactionConfig,\n    );\n  }\n\n  private createHookRunner(): ExtensionHookRunner | undefined {\n    if (!this.config.extensionRegistry) return undefined;\n\n    return new ExtensionHookRunner(this.config.extensionRegistry, {\n      catchErrors: true,\n      logger: {\n        info: (msg: string) => log.info({ hook: true }, msg),\n        warn: (msg: string) => log.warn({ hook: true }, msg),\n        error: (msg: string) => log.error({ hook: true }, msg),\n      },\n    });\n  }\n\n  private createProgressManager(): ProgressFeedbackManager {\n    return new ProgressFeedbackManager({\n      level: 'normal',\n      showThinking: true,\n      streamToolProgress: true,\n      heartbeatEnabled: true,\n      heartbeatIntervalMs: 20000,\n      longTaskThresholdMs: 30000,\n    });\n  }\n\n  private initializeReliabilityModules(): void {\n    this.errorTracker = new ToolErrorTracker({\n      maxFailuresPerTool: 3,\n      maxTotalFailures: 5,\n      resetOnTurnEnd: true,\n    });\n\n    this.selfVerifyMiddleware = new SelfVerifyMiddleware({\n      maxEditsPerFile: 5,\n      enablePreCompletionCheck: true,\n      minTurnsForVerification: 4,\n      resetOnVerification: true,\n    });\n    this.turnDiffTracker = new TurnDiffTracker();\n\n    this.requestLimiter = new RequestLimiter({\n      maxRequestsPerTurn: 50,\n      warnThreshold: 0.8,\n      softLimit: false,\n    });\n\n    this.systemReminder = new SystemReminder({\n      enabled: true,\n      appendToToolResults: true,\n      maxRemindersPerTurn: 3,\n    });\n\n    this.toolUsageAnalyzer = new ToolUsageAnalyzer({\n      enabled: true,\n      lowUsageThreshold: 5,\n      veryLowUsageThreshold: 1,\n      minCallsForAnalysis: 100,\n      reportIntervalMs: 60 * 60 * 1000,\n    });\n\n    this.toolChainTracker = new ToolChainTracker({\n      enabled: true,\n      maxChainsPerSession: 10,\n      maxNodesPerChain: 100,\n      trackParams: true,\n      trackResults: true,\n      autoPrune: true,\n    });\n\n    this.errorPatternMatcher = new ErrorPatternMatcher({\n      enabled: true,\n      defaultMaxRetries: 1,\n      logMatches: true,\n    });\n\n    // Initialize context middleware for automatic request tracking\n    this.contextMiddleware = new ContextMiddleware();\n  }\n\n  private initializeLifecycleHandlers(): void {\n    this.lifecycleManager.on('llm_response', new CompactionLifecycleHandler({\n      minMessages: 20,\n      maxTokens: 8000,\n      preserveReasoning: true,\n      accumulateUsage: true,\n    }));\n\n    log.debug(\n      { handlers: this.lifecycleManager.getRegisteredHandlers() },\n      'Lifecycle handlers initialized'\n    );\n  }\n\n  setChannelManager(channelManager: ChannelManager): void {\n    this.inboundLoop.setChannelManager(channelManager);\n  }\n\n  /**\n   * Apply config after save or hot reload so the default model updates without restarting the gateway.\n   */\n  applyAgentDefaultsFromConfig(config: Config): void {\n    this.config.config = config;\n    const ref = getAgentDefaultModelRef(config);\n    this.config.model = ref;\n    this.modelManager.updateFromConfig(config);\n    this.agentManager.updateAgentDefaults(config);\n    this.commandHandler.updateAgentConfig(config);\n  }\n\n  getSkillCatalog(): SkillCatalogEntry[] {\n    return this.agentManager.getSkillCatalog();\n  }\n\n  getSkillCatalogSnapshot(): SkillCatalogSnapshot {\n    return this.agentManager.getSkillCatalogSnapshot();\n  }\n\n  getAgentSkillAvailability(agentId: string): AgentSkillAvailabilityPayload {\n    return this.agentManager.getAgentSkillAvailability(agentId);\n  }\n\n  getCapabilityCatalog(sessionKey?: string): AgentCapabilityCatalogEntry[] {\n    return this.agentManager.getCapabilityCatalogForSession(sessionKey);\n  }\n\n  getSkillMarkdownSource(skillName: string): SkillMarkdownPreviewPayload | null {\n    return this.agentManager.getSkillMarkdownSource(skillName);\n  }\n\n  refreshSkillsAfterDiskChange(): void {\n    this.agentManager.refreshSkillsAfterDiskChange();\n  }\n\n  async installSkillFromSource(opts: SkillInstallToolOptions): Promise<SkillInstallToolResult> {\n    const target = normalizeSkillInstallTarget(opts.target);\n    const workspace =\n      opts.workspace?.trim() ||\n      (opts.sessionKey ? this.agentManager.getResolvedWorkspaceForSession(opts.sessionKey) : undefined) ||\n      this.workspaceDir;\n    const result = await pullSkillFromSource(opts.source, {\n      ref: opts.ref,\n      subpath: opts.path,\n      skillId: opts.skillId,\n      force: opts.force ?? false,\n      installRoot: target === 'workspace' ? resolveWorkspaceSkillsDir(workspace) : undefined,\n      lockPath: target === 'workspace' ? resolveWorkspaceSkillsLockPath(workspace) : undefined,\n      strictScan: opts.strictScan ?? false,\n    });\n    this.refreshSkillsAfterDiskChange();\n    return { ...result, target };\n  }\n\n  refreshSkillsAfterSkillConfigChange(): void {\n    this.agentManager.refreshSkillsAfterSkillConfigChange();\n  }\n\n  refreshActionTrustPolicy(): void {\n    this.agentManager.refreshActionTrustPolicy();\n  }\n\n  refreshUserProfileContext(): void {\n    this.agentManager.refreshUserProfileContext();\n  }\n\n  getModelForSession(sessionKey: string): string {\n    return this.modelManager.getModelForSession(sessionKey);\n  }\n\n  async switchModelForSession(sessionKey: string, modelId: string): Promise<boolean> {\n    const ok = await this.modelManager.switchModelForSession(sessionKey, modelId);\n    if (!ok) return false;\n    await this.sessionConfigStore.update(sessionKey, { modelOverride: modelId });\n    const result = this.agentManager.setModelForSession(sessionKey, modelId);\n    if (result) {\n      this.sessionTracker.touchSession(sessionKey);\n    }\n    return true;\n  }\n\n  /**\n   * Clears per-session model override so the next turn uses the configured agent default\n   * (e.g. cron isolated job with no explicit model).\n   */\n  async resetSessionModelToAgentDefault(sessionKey: string): Promise<void> {\n    await this.sessionConfig.clearModelOverride(sessionKey);\n  }\n\n  setStreamHandle(handle: StreamHandle): void {\n    this.streamManager.setHandle(handle);\n    this.feedbackCoordinator.setStreamHandle(handle);\n  }\n\n  clearStreamHandle(): void {\n    this.streamManager.clearHandle();\n    this.feedbackCoordinator.endTask();\n  }\n\n  /** Last assistant visible plain text for a session (e.g. after a webchat stream). */\n  getLastAssistantPlainText(sessionKey: string): string {\n    return (\n      this.sessionState.getLastAssistantText(sessionKey) ??\n      this.agentManager.getLastAssistantContent(sessionKey) ??\n      ''\n    );\n  }\n\n  beginInboundTurn(sessionKey: string): void {\n    this.sessionState.beginInboundTurn(sessionKey);\n  }\n\n  endInboundTurn(sessionKey: string): void {\n    this.sessionState.endInboundTurn(sessionKey);\n  }\n\n  getInboundTurnDepth(sessionKey: string): number {\n    return this.sessionState.getInboundTurnDepth(sessionKey);\n  }\n\n  async start(): Promise<void> {\n    await this.sessionConfigStore.initialize();\n    await this.hookHandler.trigger('gateway_start', { port: 0, host: 'cli' });\n    log.debug('Agent service started');\n    void this.inboundLoop.start().catch((err) => {\n      const em = err instanceof Error ? err.message : String(err);\n      log.error({ err, errorMessage: em }, `Inbound loop failed: ${em}`);\n    });\n  }\n\n  stop(): Promise<void> {\n    this.inboundLoop.stop();\n    this.agentManager.dispose();\n    this.dispose();\n\n    this.hookHandler.trigger('gateway_stop', { reason: 'stopped' });\n    log.debug('Agent service stopped');\n    return Promise.resolve();\n  }\n\n  async reconcileDreamingNow(): Promise<void> {\n    return Promise.resolve();\n  }\n\n  /**\n   * Persist agent messages with the same sanitizer + transcript hygiene as AgentOrchestrator.\n   * Uses persistence hygiene so `thinking` blocks remain on disk for the web UI (LLM load path still drops them).\n   */\n  private notifySessionTitleUpdated(sessionKey: string, name: string): void {\n    this.onSessionMetadataUpdated?.(sessionKey, { name });\n  }\n\n  /** Fire-and-forget provisional title from first user text (webchat sidebar). */\n  enqueueProvisionalSessionTitle(sessionKey: string, userText: string): void {\n    void (async () => {\n      try {\n        await maybeSetProvisionalSessionTitle(\n          this.sessionStore,\n          sessionKey,\n          userText,\n          (sk, name) => this.notifySessionTitleUpdated(sk, name),\n        );\n      } catch (err) {\n        log.warn({ err, sessionKey }, 'Provisional session title failed');\n      }\n    })();\n  }\n\n  /**\n   * Fire-and-forget LLM refine after turn persist; skips user-locked and finalized LLM titles.\n   */\n  private enqueueMaybeAutoTitleAfterPersist(sessionKey: string): void {\n    void (async () => {\n      try {\n        let modelRef =\n          getAgentDefaultModelRef(this.config.config ?? ({} as Config)) ?? this.config.model;\n        if (!modelRef?.trim()) {\n          try {\n            modelRef = this.modelManager.getModelForSession(sessionKey);\n          } catch {\n            modelRef = undefined;\n          }\n        }\n        await maybeRefineSessionTitleWithLlm(\n          this.sessionStore,\n          sessionKey,\n          modelRef?.trim() || undefined,\n          (sk, name) => this.notifySessionTitleUpdated(sk, name),\n        );\n      } catch (err) {\n        log.warn({ err, sessionKey }, 'Auto session title failed');\n      }\n    })();\n  }\n\n  private async resolveSessionEndpoint(sessionKey: string): Promise<{ channel: string; chatId: string }> {\n    const metadata = await this.sessionStore.getMetadata(sessionKey).catch(() => null);\n    const channel = metadata?.routing?.source?.trim() || metadata?.sourceChannel?.trim() || 'cli';\n    const chatId = metadata?.routing?.peerId?.trim() || metadata?.sourceChatId?.trim() || 'main';\n    return { channel, chatId };\n  }\n\n  private initSessionContext(\n    sessionKey: string,\n    channel: string,\n    chatId: string,\n    senderId = '',\n  ): SessionContext {\n    const context: SessionContext = {\n      sessionKey,\n      channel,\n      chatId,\n      senderId,\n      isGroup: false,\n    };\n\n    this.contextMiddleware.onRequest({\n      sessionKey,\n      userId: context.senderId,\n      channel,\n      chatId,\n    });\n\n    // Direct turn entry points (one-shot + streaming generator) cannot wrap their\n    // body in `sessionContextManager.runWith(ctx, fn)` cleanly — the streaming\n    // path is an async generator, and both flows already use a try/finally for\n    // side-effect cleanup. We use `enter` so the context is visible via ALS for\n    // every async resource launched after this call returns. The context is\n    // overwritten or cleared by the next direct turn (each direct turn calls\n    // `initSessionContext` first), so there is no cross-session leak in practice.\n    this.sessionContextManager.enter(context);\n    this.feedbackCoordinator.setContext(context);\n    this.agentManager.getOrCreateAgent(sessionKey);\n    this.setupSessionEventHandling(sessionKey);\n\n    return context;\n  }\n\n  /**\n   * Persist inbound file attachments to the global media store.\n   */\n  async prepareInboundAttachments(\n    _sessionKey: string,\n    attachments?: InboundAttachmentInput[],\n  ): Promise<MediaRef[] | undefined> {\n    return persistInboundAttachments(attachments, {\n      resolveUri: async (uri) => {\n        const target = parseNoteAttachmentTarget(uri);\n        if (!target) return null;\n        const notesService = (this as unknown as {\n          notesServiceInstance?: {\n            getAttachmentPath(noteId: string, attachmentId: string): Promise<{\n              filePath: string;\n              mimeType?: string;\n              fileName?: string;\n            } | null>;\n          };\n        }).notesServiceInstance;\n        if (!notesService) return null;\n        const located = await notesService.getAttachmentPath(target.noteId, target.attachmentId);\n        if (!located) return null;\n        const buffer = await readFile(located.filePath);\n        return {\n          buffer,\n          path: located.filePath,\n          mimeType: located.mimeType,\n          name: located.fileName,\n          size: buffer.byteLength,\n        };\n      },\n    });\n  }\n\n  private endDirectRequestContext(): void {\n    // `sessionContextManager` is ALS-backed: the context for the current async\n    // chain drops automatically when the chain unwinds. The feedback\n    // coordinator + context middleware still use singleton state, so clear\n    // them explicitly here.\n    this.feedbackCoordinator.clearContext();\n    this.contextMiddleware.onResponse();\n  }\n\n  /**\n   * Reset a session's transcript and drop the in-memory agent so the next turn\n   * reloads from disk. Combines two collaborators (sessionStore + agentManager)\n   * so it stays on `AgentService`; pure sessionStore reads should use\n   * `agentService.sessionStore.*` directly.\n   */\n  async clearSessionMessages(key: string): Promise<void> {\n    await this.sessionStore.saveMessages(key, []);\n    this.agentManager.removeAgent(key);\n  }\n\n  /**\n   * Reset session transcript (archive + new session id) and evict in-memory agent state.\n   * Preserves the session key and persisted per-session overrides.\n   */\n  async resetSession(\n    key: string,\n  ): Promise<{ sessionId: string; previousSessionId: string } | null> {\n    const { abortEmbeddedRun } = await import('./embedded/runs.js');\n    const { retireSessionMcpRuntimeForSessionKey } = await import('./mcp/bundle-mcp-tools.js');\n    await abortEmbeddedRun(key);\n    const outcome = await this.sessionStore.reset(key);\n    if (!outcome) {\n      return null;\n    }\n    this.agentManager.removeAgent(key);\n    await retireSessionMcpRuntimeForSessionKey({ sessionKey: key, reason: 'session-reset' });\n    return outcome;\n  }\n\n  /**\n   * Drop in-memory agent so the next turn reloads transcript from disk (e.g. after checkpoint restore).\n   */\n  evictSessionAgent(sessionKey: string): void {\n    this.agentManager.removeAgent(sessionKey);\n  }\n\n  /**\n   * Load session working directory override into AgentManager, ensure directory exists.\n   * Call before AgentManager.getOrCreateAgent for this session.\n   */\n  /** Workspace root for UI file tree / editor (same as agent tools after hydration). */\n  async getEffectiveWorkspacePathForSession(sessionKey: string): Promise<string> {\n    await this.sessionHydrator.workspace(sessionKey);\n    const cfg = this.config.config!;\n    const sc = await this.sessionConfigStore.get(sessionKey);\n    return effectiveWorkspacePathForSession(cfg, sessionKey, sc, getProjectForSession(sessionKey));\n  }\n\n   /**\n   * Best-effort timezone resolution for webchat envelope timestamps.\n   * Reads the global user profile and extracts a `Timezone:` line.\n   */\n  resolveUserTimezoneForSession(sessionKey: string): string | undefined {\n    void sessionKey;\n    try {\n      const cfg = this.effectiveAppConfig();\n      if (!cfg) return undefined;\n      const userPath = resolveUserProfilePath();\n      if (!existsSync(userPath)) return undefined;\n      const raw = readFileSync(userPath, 'utf-8');\n      const match = raw.match(/Timezone:\\s*(.+)/i);\n      const tz = match?.[1]?.trim();\n      return tz || undefined;\n    } catch {\n      return undefined;\n    }\n  }\n\n  /**\n   * Setup event handling for a specific session\n   */\n  private setupSessionEventHandling(sessionKey: string): void {\n    if (this.sessionState.hasSessionEventUnsubscriber(sessionKey)) {\n      return;\n    }\n\n    const unsubscribe = this.agentManager.subscribeToSession(sessionKey, (event) => {\n      this.handleSessionEvent(sessionKey, event);\n    });\n\n    if (unsubscribe) {\n      this.sessionState.setSessionEventUnsubscriber(sessionKey, unsubscribe);\n    }\n  }\n\n  /**\n   * Handle events from a specific session's agent\n   */\n  private handleSessionEvent(sessionKey: string, event: AgentEvent): void {\n    const currentContext = this.sessionContextManager.getContext();\n    if (!currentContext) {\n      // Inbound `finally` clears context before trailing agent `message_update` events finish — ignore (not a bug).\n      return;\n    }\n\n    if (currentContext.sessionKey !== sessionKey) {\n      // Event from a different session — still process with current context where applicable\n      this.agentEventHandler.handle(event, currentContext);\n      return;\n    }\n\n    // Handle streaming updates for the current session\n    if (event.type === 'message_update') {\n      const msgEvent = event as Extract<AgentEvent, { type: 'message_update' }>;\n      if (msgEvent.message?.role === 'assistant') {\n        const content = msgEvent.message.content;\n        const text = Array.isArray(content)\n          ? extractTextContent(content as Array<{ type: string; text?: string }>)\n          : String(content);\n\n        this.streamManager.update(text);\n      }\n    }\n\n    this.agentEventHandler.handle(event, currentContext);\n  }\n\n  private async checkAndCompact(sessionKey: string, messages: AgentMessage[]): Promise<void> {\n    const contextWindow = this.getContextWindowForSession(sessionKey);\n    const prep = this.sessionStore.prepareCompaction(sessionKey, messages, contextWindow);\n    if (!prep.needsCompaction) return;\n\n    log.info({ sessionKey, reason: prep.stats?.reason, usagePercent: prep.stats?.usagePercent }, 'Session needs compaction');\n\n    const result = await this.sessionStore.compact(sessionKey, messages, contextWindow, undefined, false);\n    await this.hookHandler.trigger('after_compaction', {\n      messageCount: messages.length,\n      tokenCount: result.tokensBefore,\n      compactedCount: messages.length - result.firstKeptIndex,\n    });\n    log.info({ sessionKey, tokensBefore: result.tokensBefore, tokensAfter: result.tokensAfter }, 'Session compacted');\n  }\n\n  private getContextWindowForSession(sessionKey: string): number {\n    try {\n      return this.modelManager.getResolvedModelForSession(sessionKey).contextWindow ?? 128000;\n    } catch (err) {\n      log.warn({ err, sessionKey }, 'Failed to resolve session context window; using default');\n      return 128000;\n    }\n  }\n\n  private dispose(): void {\n    this.sessionTracker.dispose();\n    this.sessionState.disposeAll();\n    this.agentManager.dispose();\n    this.workflowProgressBrokerHandle?.dispose();\n    this.workflowProgressBrokerHandle = null;\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;aAE2E;aAkBzB;kBAuExB;YAIkC;AAW5D,MAAM,MAAM,aAAa,eAAe;AAExC,SAAS,qBAAqB,SAA+B;CAC3D,MAAM,UAAW,QAAkC;AACnD,KAAI,OAAO,YAAY,SAAU,QAAO;AACxC,KAAI,CAAC,MAAM,QAAQ,QAAQ,CAAE,QAAO;AACpC,QAAO,QACJ,KAAK,UAAU;AACd,MAAI,CAAC,SAAS,OAAO,UAAU,SAAU,QAAO;EAChD,MAAM,MAAM;AACZ,SAAO,IAAI,SAAS,UAAU,OAAO,IAAI,SAAS,WAAW,IAAI,OAAO;GACxE,CACD,KAAK,GAAG;;AAGb,IAAa,eAAb,MAA0B;;;;;;CAMxB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAEA;CACA;CACA;;;;;;CAMA;CACA;;;;;;CAMA;;;;;;CAMA;;;;;;CAMA;;;;;;CAMA;;;;;;CAMA;CACA;CACA;CACA;CACA;CACA,+BAAoE;CACpE;CACA;;;;;;;CAQA,eAAuB,IAAI,iBAAiB;;CAG5C;CACA;CAEA,qBAAiD;EAC/C,MAAM,OAAO,KAAK,OAAO;AACzB,SAAO,OAAO,qBAAqB,KAAK,GAAG,KAAA;;CAG7C,YAAY,KAAiB,QAA4B;AACvD,OAAK,SAAS;AACd,OAAK,2BAA2B,OAAO;AACvC,OAAK,6BAA6B,OAAO;AACzC,OAAK,UAAU,SAAS,KAAK,KAAK;AAClC,OAAK,eAAe,OAAO;AAE3B,OAAK,iBAAiB,IAAI,gBAAgB;AAC1C,OAAK,eAAe,IAAI,aAAa;GACnC,cAAc,OAAO;GACrB,QAAQ,OAAO;GAChB,CAAC;AAEF,sBAAoB;AACpB,MAAI,MAAM,6BAA6B;AAEvC,OAAK,eAAe,OAAO,gBAAgB,KAAK,oBAAoB;AACpE,6BAA2B,WAAW;AAC/B,QAAK,aAAa,6BAA6B,OAAO,CAAC,OAAO,QAAQ;AACzE,QAAI,KACF;KAAE;KAAK,YAAY,OAAO;KAAY,EACtC,+BACD;KACD;GACF,MAAM,KAAK,OAAO,YAAY,MAAM;AACpC,OAAI,GACF,MAAK,6BAA6B,GAAG;IAEvC;EACF,MAAM,iBAAiB,KAAK,OAAO;AACnC,MAAI,CAAC,eACH,OAAM,IAAI,MAAM,wDAAwD;EAG1E,MAAM,mBAAmB,oBAAoB,gBAD1B,sBAAsB,eAC8B,CAAC;AACxE,OAAK,qBAAqB,IAAI,mBAAmB,iBAAiB;AAElE,OAAK,aAAa,KAAK,kBAAkB;AACzC,OAAK,cAAc,IAAI,YAAY;GACjC,YAAY,KAAK;GACjB,SAAS,KAAK;GACd,IAAI,aAAa;AAAE,WAAO,KAAK,gBAAgB;;GAChD,CAAC;AAEF,OAAK,kBAAkB,KAAK,uBAAuB;AACnD,OAAK,8BAA8B;AAEnC,OAAK,mBAAmB,IAAI,kBAAkB;AAC9C,OAAK,6BAA6B;AAElC,OAAK,gBAAgB,IAAI,eAAe;AACxC,OAAK,wBAAwB,IAAI,uBAAuB;AACxD,OAAK,sBAAsB,IAAI,oBAAoB;GACjD,iBAAiB,KAAK;GACtB;GACD,CAAC;AAEF,OAAK,eAAe,IAAI,aAAa;GACnC,WAAW,OAAO;GAClB,OAAO,OAAO;GACd,QAAQ,OAAO;GACf,mBAAmB,OAAO;GAC1B,YAAY,KAAK;GACjB;GACA,yBAAyB,KAAK,sBAAsB,YAAY;GAChE,uBAAuB,KAAK;GAC5B,uBAAuB,KAAK;GAC5B,eAAe,OAAO;GACtB,gBAAgB,OAAO;GACvB,cAAc,OAAO;GACrB,gBAAgB,OAAO;GACvB,sBAAsB,OAAO;GAC7B,iBAAiB,OAAO;GACxB,mBAAmB,OAAO;GAC1B,oBAAoB,OAAO;GAC3B,uBAAuB,OAAO;GAC9B,iBAAiB,OAAO;GACxB,yBAAyB,SAAS,KAAK,uBAAuB,KAAK;GACnE,oBAAoB,OAAO;GAC3B,6BAA6B,YAAY,YAAY,CACnD,KAAK,qBAAqB,8BAA8B,YAAY,QAAQ,EAC5E,KAAK,gBAAgB,uBAAuB,WAAW,CACxD,CAAC,OAAO,QAAQ,CAAC,KAAK,OAAO;GAC/B,CAAC;AAEF,OAAK,oBAAoB,IAAI,kBAAkB;GAC7C,iBAAiB,KAAK;GACtB,cAAc,KAAK;GACnB,gBAAgB,KAAK;GACrB,kBAAkB,KAAK;GACvB,kBAAkB,KAAK;GACvB,sBAAsB,KAAK;GAC3B,gBAAgB,KAAK;GACrB,mBAAmB,KAAK;GACxB,qBAAqB,KAAK;GAC1B,iBAAiB,KAAK;GACvB,CAAC;AACF,OAAK,kBAAkB,iBAAiB,uBAAuB,OAAO,YAAY;GAChF,MAAM,IAAI;AAIV,OAAI,EAAE,QAAS;GACf,MAAM,eAAe,4BAA4B,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO;AAC9E,QAAK,aAAa,0BAA0B,QAAQ,YAAY,aAAa;IAC7E;AAMF,OAAK,+BAA+B,2BAA2B,CAAC,SAC9D,KAAK,kBACN;AAKD,OAAK,kBAAkB,IAAI,gBAAgB;GACzC,oBAAoB,KAAK;GACzB,cAAc,KAAK;GACnB,cAAc,KAAK;GACnB,iBAAiB,KAAK,oBAAoB;GAC3C,CAAC;AAEF,OAAK,oBAAoB,IAAI,kBAAkB;GAC7C,cAAc,KAAK;GACnB,cAAc,KAAK;GACnB,cAAc,KAAK;GACnB,cAAc,KAAK;GACnB,qBAAqB,KAAK;GAC1B,oBAAoB,KAAK;GACzB,iBAAiB,KAAK;GACtB,iBAAiB,KAAK,oBAAoB;GAC1C,0BAA0B,KAAA;GAC1B,+BAA+B,eAC7B,KAAK,aAAa,6BAA6B,WAAW;GAC5D,eAAe,KAAK;GACpB,6BAA6B,eAC3B,KAAK,aAAa,+BAA+B,WAAW;GAC9D,wCAAwC,eACtC,oBAAoB,KAAK,OAAO,QAAS,sBAAsB,YAAY,KAAK,OAAO,OAAQ,CAAC;GAClG,mBAAmB,eAAuB,KAAK,kCAAkC,WAAW;GAC5F,wBAAwB,YAAY,UAAU;IAC5C,MAAM,MAAM,KAAK,sBAAsB,YAAY;AACnD,QAAI,CAAC,OAAO,IAAI,eAAe,WAC7B;AAEF,QAAI,MAAM,SAAS,oBAAoB,MAAM,QAAQ,SAAS,aAAa;KACzE,MAAM,OAAO,qBAAqB,MAAM,QAAQ;AAChD,UAAK,cAAc,OAAO,KAAK;;;GAGnC,yBAAyB,YAAY,SAAS;AAC5C,QAAI,KACF,MAAK,aAAa,qBAAqB,YAAY,KAAK;AAE1D,SAAK,aAAa,wBAAwB,WAAW;;GAExD,CAAC;AAEF,OAAK,gBAAgB,IAAI,eAAe;AACxC,OAAK,iBAAiB,IAAI,eAAe;GACvC,QAAQ,OAAO;GACf;GACA,cAAc,KAAK;GACnB,oBAAoB,KAAK;GACzB,kCAAkC,YAAY,KAAK,gBAAgB,oBAAoB,QAAQ;GAC/F,uBAAuB,OAAO;GAC9B,4BAA4B,YAAoB,UAAsB;AACpE,SAAK,aAAa,iBAAiB,YAAY,MAAuB;;GAExE,uBAAuB,KAAK,kBAAkB,iBAAiB;GAC/D,wBAAwB,YAAoB,YAC1C,KAAK,sBAAsB,YAAY,QAAQ;GACjD,yBAAyB,eAAuB;AAC9C,SAAK,aAAa,YAAY,WAAW;;GAE3C,eAAe,eAAuB,KAAK,aAAa,WAAW;GACnE,kBAAkB,OAAO,eAAuB;AAC9C,UAAM,KAAK,cAAc,OAAO;AAChC,SAAK,kBAAkB,MAAM,WAAW;;GAE1C,oBAAoB,KAAK,8BAA8B;GACvD,yBAAyB,SAAS,KAAK,uBAAuB,KAAK;GACnE,iBAAiB,YAAY,YAAY,KAAK,iBAAiB,QAAQ,YAAY,QAAQ;GAC3F,WAAW,YAAY,UAAU,YAAY,KAAK,iBAAiB,SAAS,YAAY,UAAU,QAAQ;GAC1G,0BAA0B,YAAY,SAAS,KAAK,iBAAiB,OAAO,YAAY,KAAK;GAC9F,CAAC;AAEF,OAAK,0BAA0B,IAAI,wBACjC,KAAK,cACL,KAAK,gBACL,KAAK,iBACN;AAED,OAAK,kBAAkB,IAAI,sBAAsB;GAC/C;GACA,cAAc,KAAK;GACnB,cAAc,KAAK;GACnB,cAAc,KAAK;GACnB,iBAAiB,KAAK,oBAAoB;GAC1C,iCAAiC,OAAO,KAAK,aAAa,+BAA+B,GAAG;GAC5F,0BAA0B,KAAK;GAC/B,qBAAqB,OAAO;GAC5B,gCAAgC,IAAI,SAAS,KAAK,eAAe,8BAA8B,IAAI,KAAK;GACzG,CAAC;AAEF,OAAK,gBAAgB,IAAI,qBAAqB;GAC5C,cAAc,KAAK;GACnB,oBAAoB,KAAK;GACzB,cAAc,KAAK;GACnB,cAAc,KAAK;GACnB,iBAAiB,KAAK,oBAAoB;GAC3C,CAAC;AAEF,OAAK,mBAAmB,IAAI,iBAAiB;GAC3C,cAAc,KAAK;GACnB,oBAAoB,KAAK;GACzB,cAAc,KAAK;GACnB,cAAc,KAAK;GACnB,iBAAiB,KAAK;GACtB,iBAAiB,KAAK,oBAAoB;GAC1C,mBAAmB,eAAe,KAAK,2BAA2B,WAAW;GAC9E,CAAC;AAEF,OAAK,sBAAsB,IAAI,oBAAoB;GACjD;GACA,aAAa,KAAK;GAClB,eAAe,KAAK;GACpB,iBAAiB,KAAK,oBAAoB;GAC1C,4BAA4B,OAAO,KAAK,0BAA0B,GAAG;GACrE,4BAA4B,YAAY,KAAK,gBAAgB,YAAY,QAAQ;GAClF,CAAC;AAEF,OAAK,iBAAiB,IAAI,eAAe;GACvC;GACA,cAAc,KAAK;GACnB,cAAc,KAAK;GACnB,cAAc,KAAK;GACnB,oBAAoB,KAAK;GACzB,cAAc,KAAK;GACnB,gBAAgB,KAAK;GACrB,iBAAiB,KAAK,oBAAoB;GAC1C,qBAAqB;IACnB,MAAM,IAAI,KAAK,OAAO;AACtB,QAAI,CAAC,EAAG,OAAM,IAAI,MAAM,sCAAsC;AAC9D,WAAO;;GAET,yBAAyB,OAAO,KAAK,uBAAuB,GAAG;GAC/D,qBAAqB,IAAI,SAAS,WAAW,KAAK,mBAAmB,IAAI,SAAS,OAAO;GACzF,iBAAiB,KAAK;GACtB,4BAA4B,IAAI,QAAQ,KAAK,0BAA0B,IAAI,IAAI;GAC/E,oCAAoC,OAAO,KAAK,kCAAkC,GAAG;GACrF,iCAAiC,IAAI,SAAS,KAAK,+BAA+B,IAAI,KAAK;GAC3F,+BAA+B,KAAK,yBAAyB;GAC7D,4BAA4B,KAAK;GACjC,eAAe,OAAO,KAAK,aAAa,GAAG;GAC3C,uBAAuB,OAAO;GAC/B,CAAC;AAEF,OAAK,cAAc,IAAI,YAAY;GACjC;GACA,SAAS,KAAK;GACd;GACA,aAAa,KAAK;GAClB,eAAe,KAAK;GACpB,gBAAgB,KAAK;GACrB,uBAAuB,KAAK;GAC5B,qBAAqB,KAAK;GAC1B,cAAc,KAAK;GACnB,yBAAyB,KAAK;GAC9B,mBAAmB,KAAK;GACxB,qBAAqB,KAAK;GAC1B,eAAe,KAAK;GACpB,cAAc,KAAK;GACnB,cAAc,KAAK;GACnB,cAAc,KAAK;GACnB,4BAA4B,OAAO,KAAK,0BAA0B,GAAG;GACrE,iBAAiB,KAAK;GACtB,4BAA4B,OAAO,KAAK,0BAA0B,GAAG;GACrE,kBAAkB,IAAI,SAAS,KAAK,gBAAgB,IAAI,KAAK;GAC7D,oCAAoC,OAAO,KAAK,kCAAkC,GAAG;GACrF,iBAAiB,KAAK,oBAAoB;GAC1C,eAAe,OAAO,KAAK,aAAa,GAAG;GAC3C,kBAAkB,WAAW,KAAK,gBAAgB,OAAO;GAC1D,CAAC;AAKF,MAAI,CAAC,CADyB,CAAC,QAAQ,IAAI,sBAChB;AACzB,WAAQ,GAAG,gBAAgB,KAAK,SAAS,CAAC;AAC1C,WAAQ,GAAG,iBAAiB,KAAK,SAAS,CAAC;;AAG7C,MAAI,KAAK,2BAA2B;;CAGtC,qBAA2C;EACzC,MAAM,eAAsC;GAC1C,aAAa;GACb,oBAAoB;GACpB,wBAAwB;GACzB;EACD,MAAM,mBAA8C;GAClD,SAAS;GACT,MAAM;GACN,eAAe;GACf,kBAAkB;GAClB,0BAA0B;GAC1B,oBAAoB;GACpB,gBAAgB;GAChB,iBAAiB;GAClB;EACD,MAAM,SAAS,KAAK,OAAO;AAC3B,MAAI,CAAC,OACH,OAAM,IAAI,MAAM,8DAA8D;AAEhF,SAAO,IAAI,aACT,EACE,QAAQ,QACT,EACD,cACA,iBACD;;CAGH,mBAA4D;AAC1D,MAAI,CAAC,KAAK,OAAO,kBAAmB,QAAO,KAAA;AAE3C,SAAO,IAAI,oBAAoB,KAAK,OAAO,mBAAmB;GAC5D,aAAa;GACb,QAAQ;IACN,OAAO,QAAgB,IAAI,KAAK,EAAE,MAAM,MAAM,EAAE,IAAI;IACpD,OAAO,QAAgB,IAAI,KAAK,EAAE,MAAM,MAAM,EAAE,IAAI;IACpD,QAAQ,QAAgB,IAAI,MAAM,EAAE,MAAM,MAAM,EAAE,IAAI;IACvD;GACF,CAAC;;CAGJ,wBAAyD;AACvD,SAAO,IAAI,wBAAwB;GACjC,OAAO;GACP,cAAc;GACd,oBAAoB;GACpB,kBAAkB;GAClB,qBAAqB;GACrB,qBAAqB;GACtB,CAAC;;CAGJ,+BAA6C;AAC3C,OAAK,eAAe,IAAI,iBAAiB;GACvC,oBAAoB;GACpB,kBAAkB;GAClB,gBAAgB;GACjB,CAAC;AAEF,OAAK,uBAAuB,IAAI,qBAAqB;GACnD,iBAAiB;GACjB,0BAA0B;GAC1B,yBAAyB;GACzB,qBAAqB;GACtB,CAAC;AACF,OAAK,kBAAkB,IAAI,iBAAiB;AAE5C,OAAK,iBAAiB,IAAI,eAAe;GACvC,oBAAoB;GACpB,eAAe;GACf,WAAW;GACZ,CAAC;AAEF,OAAK,iBAAiB,IAAI,eAAe;GACvC,SAAS;GACT,qBAAqB;GACrB,qBAAqB;GACtB,CAAC;AAEF,OAAK,oBAAoB,IAAI,kBAAkB;GAC7C,SAAS;GACT,mBAAmB;GACnB,uBAAuB;GACvB,qBAAqB;GACrB,kBAAkB,OAAU;GAC7B,CAAC;AAEF,OAAK,mBAAmB,IAAI,iBAAiB;GAC3C,SAAS;GACT,qBAAqB;GACrB,kBAAkB;GAClB,aAAa;GACb,cAAc;GACd,WAAW;GACZ,CAAC;AAEF,OAAK,sBAAsB,IAAI,oBAAoB;GACjD,SAAS;GACT,mBAAmB;GACnB,YAAY;GACb,CAAC;AAGF,OAAK,oBAAoB,IAAI,mBAAmB;;CAGlD,8BAA4C;AAC1C,OAAK,iBAAiB,GAAG,gBAAgB,IAAI,2BAA2B;GACtE,aAAa;GACb,WAAW;GACX,mBAAmB;GACnB,iBAAiB;GAClB,CAAC,CAAC;AAEH,MAAI,MACF,EAAE,UAAU,KAAK,iBAAiB,uBAAuB,EAAE,EAC3D,iCACD;;CAGH,kBAAkB,gBAAsC;AACtD,OAAK,YAAY,kBAAkB,eAAe;;;;;CAMpD,6BAA6B,QAAsB;AACjD,OAAK,OAAO,SAAS;EACrB,MAAM,MAAM,wBAAwB,OAAO;AAC3C,OAAK,OAAO,QAAQ;AACpB,OAAK,aAAa,iBAAiB,OAAO;AAC1C,OAAK,aAAa,oBAAoB,OAAO;AAC7C,OAAK,eAAe,kBAAkB,OAAO;;CAG/C,kBAAuC;AACrC,SAAO,KAAK,aAAa,iBAAiB;;CAG5C,0BAAgD;AAC9C,SAAO,KAAK,aAAa,yBAAyB;;CAGpD,0BAA0B,SAAgD;AACxE,SAAO,KAAK,aAAa,0BAA0B,QAAQ;;CAG7D,qBAAqB,YAAoD;AACvE,SAAO,KAAK,aAAa,+BAA+B,WAAW;;CAGrE,uBAAuB,WAAuD;AAC5E,SAAO,KAAK,aAAa,uBAAuB,UAAU;;CAG5D,+BAAqC;AACnC,OAAK,aAAa,8BAA8B;;CAGlD,MAAM,uBAAuB,MAAgE;EAC3F,MAAM,SAAS,4BAA4B,KAAK,OAAO;EACvD,MAAM,YACJ,KAAK,WAAW,MAAM,KACrB,KAAK,aAAa,KAAK,aAAa,+BAA+B,KAAK,WAAW,GAAG,KAAA,MACvF,KAAK;EACP,MAAM,SAAS,MAAM,oBAAoB,KAAK,QAAQ;GACpD,KAAK,KAAK;GACV,SAAS,KAAK;GACd,SAAS,KAAK;GACd,OAAO,KAAK,SAAS;GACrB,aAAa,WAAW,cAAc,0BAA0B,UAAU,GAAG,KAAA;GAC7E,UAAU,WAAW,cAAc,+BAA+B,UAAU,GAAG,KAAA;GAC/E,YAAY,KAAK,cAAc;GAChC,CAAC;AACF,OAAK,8BAA8B;AACnC,SAAO;GAAE,GAAG;GAAQ;GAAQ;;CAG9B,sCAA4C;AAC1C,OAAK,aAAa,qCAAqC;;CAGzD,2BAAiC;AAC/B,OAAK,aAAa,0BAA0B;;CAG9C,4BAAkC;AAChC,OAAK,aAAa,2BAA2B;;CAG/C,mBAAmB,YAA4B;AAC7C,SAAO,KAAK,aAAa,mBAAmB,WAAW;;CAGzD,MAAM,sBAAsB,YAAoB,SAAmC;AAEjF,MAAI,CAAC,MADY,KAAK,aAAa,sBAAsB,YAAY,QAAQ,CACpE,QAAO;AAChB,QAAM,KAAK,mBAAmB,OAAO,YAAY,EAAE,eAAe,SAAS,CAAC;AAE5E,MADe,KAAK,aAAa,mBAAmB,YAAY,QACtD,CACR,MAAK,eAAe,aAAa,WAAW;AAE9C,SAAO;;;;;;CAOT,MAAM,gCAAgC,YAAmC;AACvE,QAAM,KAAK,cAAc,mBAAmB,WAAW;;CAGzD,gBAAgB,QAA4B;AAC1C,OAAK,cAAc,UAAU,OAAO;AACpC,OAAK,oBAAoB,gBAAgB,OAAO;;CAGlD,oBAA0B;AACxB,OAAK,cAAc,aAAa;AAChC,OAAK,oBAAoB,SAAS;;;CAIpC,0BAA0B,YAA4B;AACpD,SACE,KAAK,aAAa,qBAAqB,WAAW,IAClD,KAAK,aAAa,wBAAwB,WAAW,IACrD;;CAIJ,iBAAiB,YAA0B;AACzC,OAAK,aAAa,iBAAiB,WAAW;;CAGhD,eAAe,YAA0B;AACvC,OAAK,aAAa,eAAe,WAAW;;CAG9C,oBAAoB,YAA4B;AAC9C,SAAO,KAAK,aAAa,oBAAoB,WAAW;;CAG1D,MAAM,QAAuB;AAC3B,QAAM,KAAK,mBAAmB,YAAY;AAC1C,QAAM,KAAK,YAAY,QAAQ,iBAAiB;GAAE,MAAM;GAAG,MAAM;GAAO,CAAC;AACzE,MAAI,MAAM,wBAAwB;AAC7B,OAAK,YAAY,OAAO,CAAC,OAAO,QAAQ;GAC3C,MAAM,KAAK,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAC3D,OAAI,MAAM;IAAE;IAAK,cAAc;IAAI,EAAE,wBAAwB,KAAK;IAClE;;CAGJ,OAAsB;AACpB,OAAK,YAAY,MAAM;AACvB,OAAK,aAAa,SAAS;AAC3B,OAAK,SAAS;AAEd,OAAK,YAAY,QAAQ,gBAAgB,EAAE,QAAQ,WAAW,CAAC;AAC/D,MAAI,MAAM,wBAAwB;AAClC,SAAO,QAAQ,SAAS;;CAG1B,MAAM,uBAAsC;AAC1C,SAAO,QAAQ,SAAS;;;;;;CAO1B,0BAAkC,YAAoB,MAAoB;AACxE,OAAK,2BAA2B,YAAY,EAAE,MAAM,CAAC;;;CAIvD,+BAA+B,YAAoB,UAAwB;AACzE,GAAM,YAAY;AAChB,OAAI;AACF,UAAM,gCACJ,KAAK,cACL,YACA,WACC,IAAI,SAAS,KAAK,0BAA0B,IAAI,KAAK,CACvD;YACM,KAAK;AACZ,QAAI,KAAK;KAAE;KAAK;KAAY,EAAE,mCAAmC;;MAEjE;;;;;CAMN,kCAA0C,YAA0B;AAClE,GAAM,YAAY;AAChB,OAAI;IACF,IAAI,WACF,wBAAwB,KAAK,OAAO,UAAW,EAAE,CAAY,IAAI,KAAK,OAAO;AAC/E,QAAI,CAAC,UAAU,MAAM,CACnB,KAAI;AACF,gBAAW,KAAK,aAAa,mBAAmB,WAAW;YACrD;AACN,gBAAW,KAAA;;AAGf,UAAM,+BACJ,KAAK,cACL,YACA,UAAU,MAAM,IAAI,KAAA,IACnB,IAAI,SAAS,KAAK,0BAA0B,IAAI,KAAK,CACvD;YACM,KAAK;AACZ,QAAI,KAAK;KAAE;KAAK;KAAY,EAAE,4BAA4B;;MAE1D;;CAGN,MAAc,uBAAuB,YAAkE;EACrG,MAAM,WAAW,MAAM,KAAK,aAAa,YAAY,WAAW,CAAC,YAAY,KAAK;AAGlF,SAAO;GAAE,SAFO,UAAU,SAAS,QAAQ,MAAM,IAAI,UAAU,eAAe,MAAM,IAAI;GAEtE,QADH,UAAU,SAAS,QAAQ,MAAM,IAAI,UAAU,cAAc,MAAM,IAAI;GAC5D;;CAG5B,mBACE,YACA,SACA,QACA,WAAW,IACK;EAChB,MAAM,UAA0B;GAC9B;GACA;GACA;GACA;GACA,SAAS;GACV;AAED,OAAK,kBAAkB,UAAU;GAC/B;GACA,QAAQ,QAAQ;GAChB;GACA;GACD,CAAC;AASF,OAAK,sBAAsB,MAAM,QAAQ;AACzC,OAAK,oBAAoB,WAAW,QAAQ;AAC5C,OAAK,aAAa,iBAAiB,WAAW;AAC9C,OAAK,0BAA0B,WAAW;AAE1C,SAAO;;;;;CAMT,MAAM,0BACJ,aACA,aACiC;AACjC,SAAO,0BAA0B,aAAa,EAC5C,YAAY,OAAO,QAAQ;GACzB,MAAM,SAAS,0BAA0B,IAAI;AAC7C,OAAI,CAAC,OAAQ,QAAO;GACpB,MAAM,eAAgB,KAQnB;AACH,OAAI,CAAC,aAAc,QAAO;GAC1B,MAAM,UAAU,MAAM,aAAa,kBAAkB,OAAO,QAAQ,OAAO,aAAa;AACxF,OAAI,CAAC,QAAS,QAAO;GACrB,MAAM,SAAS,MAAM,SAAS,QAAQ,SAAS;AAC/C,UAAO;IACL;IACA,MAAM,QAAQ;IACd,UAAU,QAAQ;IAClB,MAAM,QAAQ;IACd,MAAM,OAAO;IACd;KAEJ,CAAC;;CAGJ,0BAAwC;AAKtC,OAAK,oBAAoB,cAAc;AACvC,OAAK,kBAAkB,YAAY;;;;;;;;CASrC,MAAM,qBAAqB,KAA4B;AACrD,QAAM,KAAK,aAAa,aAAa,KAAK,EAAE,CAAC;AAC7C,OAAK,aAAa,YAAY,IAAI;;;;;;CAOpC,MAAM,aACJ,KACkE;EAClE,MAAM,EAAE,qBAAqB,MAAM,OAAO;EAC1C,MAAM,EAAE,yCAAyC,MAAM,OAAO;AAC9D,QAAM,iBAAiB,IAAI;EAC3B,MAAM,UAAU,MAAM,KAAK,aAAa,MAAM,IAAI;AAClD,MAAI,CAAC,QACH,QAAO;AAET,OAAK,aAAa,YAAY,IAAI;AAClC,QAAM,qCAAqC;GAAE,YAAY;GAAK,QAAQ;GAAiB,CAAC;AACxF,SAAO;;;;;CAMT,kBAAkB,YAA0B;AAC1C,OAAK,aAAa,YAAY,WAAW;;;;;;;CAQ3C,MAAM,oCAAoC,YAAqC;AAC7E,QAAM,KAAK,gBAAgB,UAAU,WAAW;EAChD,MAAM,MAAM,KAAK,OAAO;AAExB,SAAO,iCAAiC,KAAK,YAAY,MADxC,KAAK,mBAAmB,IAAI,WAAW,EACK,qBAAqB,WAAW,CAAC;;;;;;CAOhG,8BAA8B,YAAwC;AAEpE,MAAI;AAEF,OAAI,CADQ,KAAK,oBACT,CAAE,QAAO,KAAA;GACjB,MAAM,WAAW,wBAAwB;AACzC,OAAI,CAAC,WAAW,SAAS,CAAE,QAAO,KAAA;AAIlC,UAHY,aAAa,UAAU,QAClB,CAAC,MAAM,oBACR,GAAG,IAAI,MAAM,IAChB,KAAA;UACP;AACN;;;;;;CAOJ,0BAAkC,YAA0B;AAC1D,MAAI,KAAK,aAAa,4BAA4B,WAAW,CAC3D;EAGF,MAAM,cAAc,KAAK,aAAa,mBAAmB,aAAa,UAAU;AAC9E,QAAK,mBAAmB,YAAY,MAAM;IAC1C;AAEF,MAAI,YACF,MAAK,aAAa,4BAA4B,YAAY,YAAY;;;;;CAO1E,mBAA2B,YAAoB,OAAyB;EACtE,MAAM,iBAAiB,KAAK,sBAAsB,YAAY;AAC9D,MAAI,CAAC,eAEH;AAGF,MAAI,eAAe,eAAe,YAAY;AAE5C,QAAK,kBAAkB,OAAO,OAAO,eAAe;AACpD;;AAIF,MAAI,MAAM,SAAS,kBAAkB;GACnC,MAAM,WAAW;AACjB,OAAI,SAAS,SAAS,SAAS,aAAa;IAC1C,MAAM,UAAU,SAAS,QAAQ;IACjC,MAAM,OAAO,MAAM,QAAQ,QAAQ,GAC/B,mBAAmB,QAAkD,GACrE,OAAO,QAAQ;AAEnB,SAAK,cAAc,OAAO,KAAK;;;AAInC,OAAK,kBAAkB,OAAO,OAAO,eAAe;;CAGtD,MAAc,gBAAgB,YAAoB,UAAyC;EACzF,MAAM,gBAAgB,KAAK,2BAA2B,WAAW;EACjE,MAAM,OAAO,KAAK,aAAa,kBAAkB,YAAY,UAAU,cAAc;AACrF,MAAI,CAAC,KAAK,gBAAiB;AAE3B,MAAI,KAAK;GAAE;GAAY,QAAQ,KAAK,OAAO;GAAQ,cAAc,KAAK,OAAO;GAAc,EAAE,2BAA2B;EAExH,MAAM,SAAS,MAAM,KAAK,aAAa,QAAQ,YAAY,UAAU,eAAe,KAAA,GAAW,MAAM;AACrG,QAAM,KAAK,YAAY,QAAQ,oBAAoB;GACjD,cAAc,SAAS;GACvB,YAAY,OAAO;GACnB,gBAAgB,SAAS,SAAS,OAAO;GAC1C,CAAC;AACF,MAAI,KAAK;GAAE;GAAY,cAAc,OAAO;GAAc,aAAa,OAAO;GAAa,EAAE,oBAAoB;;CAGnH,2BAAmC,YAA4B;AAC7D,MAAI;AACF,UAAO,KAAK,aAAa,2BAA2B,WAAW,CAAC,iBAAiB;WAC1E,KAAK;AACZ,OAAI,KAAK;IAAE;IAAK;IAAY,EAAE,0DAA0D;AACxF,UAAO;;;CAIX,UAAwB;AACtB,OAAK,eAAe,SAAS;AAC7B,OAAK,aAAa,YAAY;AAC9B,OAAK,aAAa,SAAS;AAC3B,OAAK,8BAA8B,SAAS;AAC5C,OAAK,+BAA+B"}

package/dist/src/agent/session/session-config-service.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"session-config-service.js","names":[],"sources":["../../../../src/agent/session/session-config-service.ts"],"sourcesContent":["/**\n * SessionConfigService — owns the \"write side\" of per-session agent settings\n * (model override, thinking level, reasoning level, working directory).\n *\n * Previously these lived as four sibling methods on `AgentService`:\n *   - `patchSessionAgentConfig` (96 lines of validation + persistence)\n *   - `applyAutomationWorkingDirectory` (automation working dir update)\n *   - `applyAutomationModelOverride` (automation model update before session creation)\n *   - `clearAutomationWorkingDirectoryOverride` (private helper)\n *   - `clearSessionModelOverride` (private helper)\n *\n * Extracted so `AgentService` no longer mixes \"session bag\" concerns with\n * \"session config write\" concerns, and so future additions to the patch API\n * (e.g. new per-session overrides) only touch this file.\n */\n\nimport { mkdir } from 'node:fs/promises';\nimport type { ThinkingLevel } from '@earendil-works/pi-agent-core';\n\nimport type { Config } from '../../config/schema.js';\nimport { normalizeWorkingDirectoryInput } from '../../session/index.js';\nimport type { SessionConfigStore, SessionStore } from '../../session/index.js';\nimport {\n  normalizeThinkLevel,\n  normalizeReasoningLevel,\n  normalizeVerboseLevel,\n} from '../transcript/thinking-types.js';\nimport type { AgentInstanceGateway } from '../agent-instance-gateway.js';\nimport type { ModelManager } from '../models/index.js';\nimport { createLogger } from '../../utils/logger.js';\nimport { getProjectWorkspacePathForSession } from '../../projects/workspace.js';\n\nconst log = createLogger('SessionConfigService');\n\nexport interface SessionConfigServiceOptions {\n  sessionStore: SessionStore;\n  sessionConfigStore: SessionConfigStore;\n  modelManager: ModelManager;\n  agentManager: AgentInstanceGateway;\n  /** Effective config snapshot accessor. */\n  getConfig: () => Config | undefined;\n}\n\nexport interface PatchSessionAgentConfigInput {\n  thinkingLevel?: string;\n  model?: string | null;\n  reasoningLevel?: string;\n  verboseLevel?: string;\n  workingDirectory?: string;\n}\n\nexport interface PatchSessionAgentConfigResult {\n  ok: boolean;\n  error?: string;\n}\n\nexport class SessionConfigService {\n  private readonly opts: SessionConfigServiceOptions;\n\n  constructor(opts: SessionConfigServiceOptions) {\n    this.opts = opts;\n  }\n\n  /**\n   * Apply a partial patch (model / thinking / reasoning / working directory) to\n   * a session's persisted config. Returns `{ ok: false, error }` on the first\n   * invalid field — earlier fields that succeeded are NOT rolled back, matching\n   * the previous behaviour.\n   */\n  async patch(\n    sessionKey: string,\n    partial: PatchSessionAgentConfigInput,\n  ): Promise<PatchSessionAgentConfigResult> {\n    if (partial.model !== undefined) {\n      if (partial.model === null || partial.model === '') {\n        await this.clearModelOverride(sessionKey);\n      } else {\n        const ok = await this.opts.modelManager.switchModelForSession(sessionKey, partial.model);\n        if (!ok) {\n          return { ok: false, error: 'Invalid model' };\n        }\n        await this.opts.sessionConfigStore.update(sessionKey, { modelOverride: partial.model });\n        this.opts.agentManager.setModelForSession(sessionKey, partial.model);\n      }\n    }\n\n    if (partial.thinkingLevel !== undefined) {\n      const normalized = normalizeThinkLevel(partial.thinkingLevel);\n      if (!normalized) {\n        return { ok: false, error: 'Invalid thinking level' };\n      }\n      await this.opts.sessionConfigStore.update(sessionKey, { thinkingLevel: normalized });\n      this.opts.agentManager.setThinkingLevel(sessionKey, normalized as ThinkingLevel);\n    }\n\n    if (partial.reasoningLevel !== undefined) {\n      const normalized = normalizeReasoningLevel(partial.reasoningLevel);\n      if (!normalized) {\n        return { ok: false, error: 'Invalid reasoning level' };\n      }\n      await this.opts.sessionConfigStore.update(sessionKey, { reasoningLevel: normalized });\n    }\n\n    if (partial.verboseLevel !== undefined) {\n      const normalized = normalizeVerboseLevel(partial.verboseLevel);\n      if (!normalized) {\n        return { ok: false, error: 'Invalid verbose level' };\n      }\n      await this.opts.sessionConfigStore.update(sessionKey, { verboseLevel: normalized });\n    }\n\n    if (partial.workingDirectory !== undefined) {\n      const cfg = this.opts.getConfig();\n      if (!cfg) {\n        return { ok: false, error: 'Config not loaded' };\n      }\n      if (getProjectWorkspacePathForSession(sessionKey)) {\n        return {\n          ok: false,\n          error: 'Project sessions use the project workspace and cannot change working directory',\n        };\n      }\n      const result = await this.patchWorkingDirectory(sessionKey, partial.workingDirectory);\n      if (!result.ok) return result;\n    }\n\n    return { ok: true };\n  }\n\n  /**\n   * Sync persisted session working directory for an automation run. Runs may\n   * change when the automation is edited; an empty/missing input clears the\n   * override so the session uses the effective agent default.\n   */\n  async applyAutomationWorkingDirectory(\n    sessionKey: string,\n    workingDirectory: string | undefined,\n  ): Promise<void> {\n    const raw = workingDirectory?.trim();\n    if (raw) {\n      const wdNorm = normalizeWorkingDirectoryInput(raw);\n      if (wdNorm.ok === false) {\n        log.warn(\n          { sessionKey, error: wdNorm.error },\n          'Automation working directory invalid; using agent default',\n        );\n        await this.clearAutomationWorkingDirectoryOverride(sessionKey);\n        return;\n      }\n      await mkdir(wdNorm.path, { recursive: true });\n      await this.opts.sessionConfigStore.update(sessionKey, { workingDirectoryOverride: wdNorm.path });\n      this.opts.agentManager.setSessionWorkspaceOverride(sessionKey, wdNorm.path);\n      return;\n    }\n    await this.clearAutomationWorkingDirectoryOverride(sessionKey);\n  }\n\n  /**\n   * Persist an automation model override before the direct turn creates/hydrates\n   * the AgentSession. Unlike the user-facing patch path, this must not call\n   * `agentManager.setModelForSession`, because the automation session usually\n   * does not exist yet.\n   */\n  async applyAutomationModelOverride(\n    sessionKey: string,\n    model: string | undefined,\n  ): Promise<boolean> {\n    const raw = model?.trim();\n    if (!raw) {\n      await this.clearModelOverride(sessionKey);\n      return true;\n    }\n    const ok = await this.opts.modelManager.switchModelForSession(sessionKey, raw);\n    if (!ok) {\n      await this.clearModelOverride(sessionKey);\n      return false;\n    }\n    await this.opts.sessionConfigStore.update(sessionKey, { modelOverride: raw });\n    return true;\n  }\n\n  /**\n   * Clear the session's model override (back to agent default). Used both by\n   * {@link patch} and by `AgentService.resetSessionModelToAgentDefault`.\n   */\n  async clearModelOverride(sessionKey: string): Promise<void> {\n    this.opts.modelManager.clearSessionModelOverride(sessionKey);\n    await this.opts.sessionConfigStore.update(sessionKey, { modelOverride: undefined });\n    const agent = this.opts.agentManager.getAgent(sessionKey);\n    if (agent) {\n      await this.opts.modelManager.applyModelForSession(agent, sessionKey);\n    }\n  }\n\n  // ── Internal helpers ───────────────────────────────────────────────────\n\n  private async clearAutomationWorkingDirectoryOverride(sessionKey: string): Promise<void> {\n    const existing = await this.opts.sessionConfigStore.get(sessionKey);\n    if (existing?.workingDirectoryOverride) {\n      const { workingDirectoryOverride: _removed, ...rest } = existing;\n      await this.opts.sessionConfigStore.set(sessionKey, rest);\n    }\n    this.opts.agentManager.setSessionWorkspaceOverride(sessionKey, null);\n  }\n\n  /**\n   * Apply the workingDirectory branch of `patch`. Returns the next-step result\n   * (`ok: true` to keep going, `ok: false, error` to short-circuit the patch).\n   *\n   * Working directory has the strictest semantics: once a session has any\n   * messages, it cannot move to a different directory — only re-setting the\n   * same path is idempotent.\n   */\n  private async patchWorkingDirectory(\n    sessionKey: string,\n    workingDirectory: string,\n  ): Promise<PatchSessionAgentConfigResult> {\n    const existing = await this.opts.sessionConfigStore.get(sessionKey);\n    const existingRaw = existing?.workingDirectoryOverride?.trim();\n    const incoming = workingDirectory.trim();\n\n    const priorMessages = await this.opts.sessionStore.load(sessionKey);\n\n    if (priorMessages.length > 0) {\n      if (!incoming) {\n        return { ok: false, error: 'workingDirectory is empty' };\n      }\n      if (!existingRaw) {\n        return {\n          ok: false,\n          error: 'Working directory can only be set before the first message in this conversation',\n        };\n      }\n      const prev = normalizeWorkingDirectoryInput(existingRaw);\n      const next = normalizeWorkingDirectoryInput(incoming);\n      if (prev.ok && next.ok && prev.path === next.path) {\n        // idempotent\n        return { ok: true };\n      }\n      return { ok: false, error: 'Working directory is already set for this session' };\n    }\n\n    if (!incoming) {\n      return { ok: false, error: 'workingDirectory is empty' };\n    }\n    const wdNorm = normalizeWorkingDirectoryInput(incoming);\n    switch (wdNorm.ok) {\n      case true: {\n        if (existingRaw) {\n          const prev = normalizeWorkingDirectoryInput(existingRaw);\n          if (prev.ok && prev.path === wdNorm.path) {\n            return { ok: true };\n          }\n        }\n        await mkdir(wdNorm.path, { recursive: true });\n        await this.opts.sessionConfigStore.update(sessionKey, {\n          workingDirectoryOverride: wdNorm.path,\n        });\n        this.opts.agentManager.setSessionWorkspaceOverride(sessionKey, wdNorm.path);\n        this.opts.agentManager.removeAgent(sessionKey);\n        return { ok: true };\n      }\n      case false:\n        return { ok: false, error: wdNorm.error };\n      default:\n        return { ok: false, error: 'Invalid working directory' };\n    }\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;aA6BqD;AAGrD,MAAM,MAAM,aAAa,uBAAuB;AAwBhD,IAAa,uBAAb,MAAkC;CAChC;CAEA,YAAY,MAAmC;AAC7C,OAAK,OAAO;;;;;;;;CASd,MAAM,MACJ,YACA,SACwC;AACxC,MAAI,QAAQ,UAAU,KAAA,EACpB,KAAI,QAAQ,UAAU,QAAQ,QAAQ,UAAU,GAC9C,OAAM,KAAK,mBAAmB,WAAW;OACpC;AAEL,OAAI,CAAC,MADY,KAAK,KAAK,aAAa,sBAAsB,YAAY,QAAQ,MAAM,CAEtF,QAAO;IAAE,IAAI;IAAO,OAAO;IAAiB;AAE9C,SAAM,KAAK,KAAK,mBAAmB,OAAO,YAAY,EAAE,eAAe,QAAQ,OAAO,CAAC;AACvF,QAAK,KAAK,aAAa,mBAAmB,YAAY,QAAQ,MAAM;;AAIxE,MAAI,QAAQ,kBAAkB,KAAA,GAAW;GACvC,MAAM,aAAa,oBAAoB,QAAQ,cAAc;AAC7D,OAAI,CAAC,WACH,QAAO;IAAE,IAAI;IAAO,OAAO;IAA0B;AAEvD,SAAM,KAAK,KAAK,mBAAmB,OAAO,YAAY,EAAE,eAAe,YAAY,CAAC;AACpF,QAAK,KAAK,aAAa,iBAAiB,YAAY,WAA4B;;AAGlF,MAAI,QAAQ,mBAAmB,KAAA,GAAW;GACxC,MAAM,aAAa,wBAAwB,QAAQ,eAAe;AAClE,OAAI,CAAC,WACH,QAAO;IAAE,IAAI;IAAO,OAAO;IAA2B;AAExD,SAAM,KAAK,KAAK,mBAAmB,OAAO,YAAY,EAAE,gBAAgB,YAAY,CAAC;;AAGvF,MAAI,QAAQ,iBAAiB,KAAA,GAAW;GACtC,MAAM,aAAa,sBAAsB,QAAQ,aAAa;AAC9D,OAAI,CAAC,WACH,QAAO;IAAE,IAAI;IAAO,OAAO;IAAyB;AAEtD,SAAM,KAAK,KAAK,mBAAmB,OAAO,YAAY,EAAE,cAAc,YAAY,CAAC;;AAGrF,MAAI,QAAQ,qBAAqB,KAAA,GAAW;AAE1C,OAAI,CADQ,KAAK,KAAK,WACd,CACN,QAAO;IAAE,IAAI;IAAO,OAAO;IAAqB;AAElD,OAAI,kCAAkC,WAAW,CAC/C,QAAO;IACL,IAAI;IACJ,OAAO;IACR;GAEH,MAAM,SAAS,MAAM,KAAK,sBAAsB,YAAY,QAAQ,iBAAiB;AACrF,OAAI,CAAC,OAAO,GAAI,QAAO;;AAGzB,SAAO,EAAE,IAAI,MAAM;;;;;;;CAQrB,MAAM,gCACJ,YACA,kBACe;EACf,MAAM,MAAM,kBAAkB,MAAM;AACpC,MAAI,KAAK;GACP,MAAM,SAAS,+BAA+B,IAAI;AAClD,OAAI,OAAO,OAAO,OAAO;AACvB,QAAI,KACF;KAAE;KAAY,OAAO,OAAO;KAAO,EACnC,4DACD;AACD,UAAM,KAAK,wCAAwC,WAAW;AAC9D;;AAEF,SAAM,MAAM,OAAO,MAAM,EAAE,WAAW,MAAM,CAAC;AAC7C,SAAM,KAAK,KAAK,mBAAmB,OAAO,YAAY,EAAE,0BAA0B,OAAO,MAAM,CAAC;AAChG,QAAK,KAAK,aAAa,4BAA4B,YAAY,OAAO,KAAK;AAC3E;;AAEF,QAAM,KAAK,wCAAwC,WAAW;;;;;;;;CAShE,MAAM,6BACJ,YACA,OACkB;EAClB,MAAM,MAAM,OAAO,MAAM;AACzB,MAAI,CAAC,KAAK;AACR,SAAM,KAAK,mBAAmB,WAAW;AACzC,UAAO;;AAGT,MAAI,CAAC,MADY,KAAK,KAAK,aAAa,sBAAsB,YAAY,IAAI,EACrE;AACP,SAAM,KAAK,mBAAmB,WAAW;AACzC,UAAO;;AAET,QAAM,KAAK,KAAK,mBAAmB,OAAO,YAAY,EAAE,eAAe,KAAK,CAAC;AAC7E,SAAO;;;;;;CAOT,MAAM,mBAAmB,YAAmC;AAC1D,OAAK,KAAK,aAAa,0BAA0B,WAAW;AAC5D,QAAM,KAAK,KAAK,mBAAmB,OAAO,YAAY,EAAE,eAAe,KAAA,GAAW,CAAC;EACnF,MAAM,QAAQ,KAAK,KAAK,aAAa,SAAS,WAAW;AACzD,MAAI,MACF,OAAM,KAAK,KAAK,aAAa,qBAAqB,OAAO,WAAW;;CAMxE,MAAc,wCAAwC,YAAmC;EACvF,MAAM,WAAW,MAAM,KAAK,KAAK,mBAAmB,IAAI,WAAW;AACnE,MAAI,UAAU,0BAA0B;GACtC,MAAM,EAAE,0BAA0B,UAAU,GAAG,SAAS;AACxD,SAAM,KAAK,KAAK,mBAAmB,IAAI,YAAY,KAAK;;AAE1D,OAAK,KAAK,aAAa,4BAA4B,YAAY,KAAK;;;;;;;;;;CAWtE,MAAc,sBACZ,YACA,kBACwC;EAExC,MAAM,eAAc,MADG,KAAK,KAAK,mBAAmB,IAAI,WAAW,GACrC,0BAA0B,MAAM;EAC9D,MAAM,WAAW,iBAAiB,MAAM;AAIxC,OAAI,MAFwB,KAAK,KAAK,aAAa,KAAK,WAAW,EAEjD,SAAS,GAAG;AAC5B,OAAI,CAAC,SACH,QAAO;IAAE,IAAI;IAAO,OAAO;IAA6B;AAE1D,OAAI,CAAC,YACH,QAAO;IACL,IAAI;IACJ,OAAO;IACR;GAEH,MAAM,OAAO,+BAA+B,YAAY;GACxD,MAAM,OAAO,+BAA+B,SAAS;AACrD,OAAI,KAAK,MAAM,KAAK,MAAM,KAAK,SAAS,KAAK,KAE3C,QAAO,EAAE,IAAI,MAAM;AAErB,UAAO;IAAE,IAAI;IAAO,OAAO;IAAqD;;AAGlF,MAAI,CAAC,SACH,QAAO;GAAE,IAAI;GAAO,OAAO;GAA6B;EAE1D,MAAM,SAAS,+BAA+B,SAAS;AACvD,UAAQ,OAAO,IAAf;GACE,KAAK;AACH,QAAI,aAAa;KACf,MAAM,OAAO,+BAA+B,YAAY;AACxD,SAAI,KAAK,MAAM,KAAK,SAAS,OAAO,KAClC,QAAO,EAAE,IAAI,MAAM;;AAGvB,UAAM,MAAM,OAAO,MAAM,EAAE,WAAW,MAAM,CAAC;AAC7C,UAAM,KAAK,KAAK,mBAAmB,OAAO,YAAY,EACpD,0BAA0B,OAAO,MAClC,CAAC;AACF,SAAK,KAAK,aAAa,4BAA4B,YAAY,OAAO,KAAK;AAC3E,SAAK,KAAK,aAAa,YAAY,WAAW;AAC9C,WAAO,EAAE,IAAI,MAAM;GAErB,KAAK,MACH,QAAO;IAAE,IAAI;IAAO,OAAO,OAAO;IAAO;GAC3C,QACE,QAAO;IAAE,IAAI;IAAO,OAAO;IAA6B"}

package/dist/src/agent/session/session-context.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"session-context.js","names":[],"sources":["../../../../src/agent/session/session-context.ts"],"sourcesContent":["/**\n * Session Context — types + an `AsyncLocalStorage`-backed manager.\n *\n * The previous implementation kept the \"current\" session context in a single\n * mutable field on the class. That meant bus-inbound and direct-stream paths\n * concurrently handling different sessions could overwrite each other's view\n * of \"current session\", with tools reading the wrong sessionKey at execution\n * time (the only thing masking it was the inbound consumer being serial).\n *\n * The new manager uses `AsyncLocalStorage`, so each async chain sees its own\n * context. Callers establish a scope via {@link SessionContextManager.runWith}\n * (preferred for `async` functions) or {@link SessionContextManager.enter}\n * (used at the top of `async function*` generators where callback-wrapping is\n * awkward; the context leaks into the rest of the current async resource by\n * design).\n */\n\nimport { AsyncLocalStorage } from 'node:async_hooks';\n\nimport type { InboundMessage } from '../../infra/bus/index.js';\n\nexport interface SessionContext {\n  sessionKey: string;\n  channel: string;\n  chatId: string;\n  senderId: string;\n  isGroup: boolean;\n  model?: string;\n  metadata?: Record<string, unknown>;\n}\n\nexport class SessionContextManager {\n  private readonly als = new AsyncLocalStorage<SessionContext>();\n\n  /**\n   * Run `fn` with `ctx` exposed via {@link getContext} for every async branch\n   * it launches. The context is automatically dropped when `fn` resolves or\n   * throws — there is no manual `clearContext` needed.\n   */\n  async runWith<T>(ctx: SessionContext, fn: () => Promise<T>): Promise<T> {\n    return this.als.run(ctx, fn);\n  }\n\n  /**\n   * Establish a context for the current async resource and its descendants.\n   * Use this at the top of an `async function*` body where wrapping the whole\n   * generator in {@link runWith} is impractical. The context leaks into the\n   * rest of the current async tree by design — call from the start of an\n   * isolated generator so it does not bleed across requests.\n   */\n  enter(ctx: SessionContext): void {\n    this.als.enterWith(ctx);\n  }\n\n  /** Returns the session context for the current async chain, or null. */\n  getContext(): SessionContext | null {\n    return this.als.getStore() ?? null;\n  }\n\n  hasContext(): boolean {\n    return this.als.getStore() !== undefined;\n  }\n\n  /** Extract session context from an inbound bus message. */\n  static extractFromMessage(msg: InboundMessage): SessionContext {\n    const metadata = msg.metadata || {};\n    return {\n      sessionKey: (metadata.sessionKey as string) || `${msg.channel}:${msg.chat_id}`,\n      channel: msg.channel,\n      chatId: msg.chat_id,\n      senderId: (metadata.senderId as string) || '',\n      isGroup: (metadata.isGroup as boolean) || false,\n      model: metadata.model as string | undefined,\n      metadata,\n    };\n  }\n\n  /** Create a clone of the current context with optional overrides. */\n  cloneContext(overrides?: Partial<SessionContext>): SessionContext | null {\n    const current = this.getContext();\n    if (!current) return null;\n    return { ...current, ...overrides };\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AA+BA,IAAa,wBAAb,MAAmC;CACjC,MAAuB,IAAI,mBAAmC;;;;;;CAO9D,MAAM,QAAW,KAAqB,IAAkC;AACtE,SAAO,KAAK,IAAI,IAAI,KAAK,GAAG;;;;;;;;;CAU9B,MAAM,KAA2B;AAC/B,OAAK,IAAI,UAAU,IAAI;;;CAIzB,aAAoC;AAClC,SAAO,KAAK,IAAI,UAAU,IAAI;;CAGhC,aAAsB;AACpB,SAAO,KAAK,IAAI,UAAU,KAAK,KAAA;;;CAIjC,OAAO,mBAAmB,KAAqC;EAC7D,MAAM,WAAW,IAAI,YAAY,EAAE;AACnC,SAAO;GACL,YAAa,SAAS,cAAyB,GAAG,IAAI,QAAQ,GAAG,IAAI;GACrE,SAAS,IAAI;GACb,QAAQ,IAAI;GACZ,UAAW,SAAS,YAAuB;GAC3C,SAAU,SAAS,WAAuB;GAC1C,OAAO,SAAS;GAChB;GACD;;;CAIH,aAAa,WAA4D;EACvE,MAAM,UAAU,KAAK,YAAY;AACjC,MAAI,CAAC,QAAS,QAAO;AACrB,SAAO;GAAE,GAAG;GAAS,GAAG;GAAW"}

package/dist/src/agent/session/session-hydrator.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"session-hydrator.js","names":[],"sources":["../../../../src/agent/session/session-hydrator.ts"],"sourcesContent":["/**\n * SessionHydrator — read persisted per-session config and push it into the\n * in-memory runtime (AgentManager + ModelManager).\n *\n * These three operations were three sibling private methods on `AgentService`\n * with subtly different signatures. They are the mirror image of\n * {@link SessionConfigService} — the latter writes user choices into the\n * config store, this hydrator reads them back out before a turn runs.\n *\n *   - `workspace()`  — apply persisted `workingDirectoryOverride` to AgentManager\n *                       and ensure the directory exists on disk\n *   - `model()`      — apply persisted `modelOverride` via ModelManager\n *   - `thinking()`   — resolve effective thinking level (request override >\n *                       per-session override > agent default) and apply\n */\n\nimport { mkdir } from 'node:fs/promises';\n\nimport type { Config } from '../../config/schema.js';\nimport {\n  effectiveWorkspacePathForSession,\n  normalizeWorkingDirectoryInput,\n  projectWorkspacePath,\n  resolveEffectiveThinkingLevel,\n  type SessionConfigStore,\n} from '../../session/index.js';\nimport { getProjectForSession } from '../../projects/workspace.js';\nimport type { AgentInstanceGateway } from '../agent-instance-gateway.js';\nimport type { ModelManager } from '../models/index.js';\nimport { createLogger } from '../../utils/logger.js';\n\nconst log = createLogger('SessionHydrator');\n\nexport interface SessionHydratorOptions {\n  sessionConfigStore: SessionConfigStore;\n  agentManager: AgentInstanceGateway;\n  modelManager: ModelManager;\n  /** Effective config snapshot accessor (honours runtime overrides). */\n  getConfig: () => Config | undefined;\n}\n\nexport class SessionHydrator {\n  private readonly opts: SessionHydratorOptions;\n\n  constructor(opts: SessionHydratorOptions) {\n    this.opts = opts;\n  }\n\n  /**\n   * Load persisted workingDirectory override into AgentManager and `mkdir -p`\n   * the effective workspace path. Safe to call before `getOrCreateAgent`.\n   */\n  async workspace(sessionKey: string): Promise<void> {\n    const cfg = this.opts.getConfig();\n    if (!cfg) {\n      return;\n    }\n    const loaded = await this.opts.sessionConfigStore.get(sessionKey);\n    const project = getProjectForSession(sessionKey);\n    const projectWorkspace = projectWorkspacePath(project);\n    if (projectWorkspace) {\n      this.opts.agentManager.setSessionWorkspaceOverride(sessionKey, projectWorkspace);\n    } else if (loaded?.workingDirectoryOverride?.trim()) {\n      const wdStored = normalizeWorkingDirectoryInput(loaded.workingDirectoryOverride);\n      if (wdStored.ok) {\n        this.opts.agentManager.setSessionWorkspaceOverride(sessionKey, wdStored.path);\n      } else {\n        log.warn({ sessionKey }, 'Invalid stored workingDirectoryOverride; ignoring');\n        this.opts.agentManager.setSessionWorkspaceOverride(sessionKey, null);\n      }\n    } else {\n      this.opts.agentManager.setSessionWorkspaceOverride(sessionKey, null);\n    }\n    const effective = effectiveWorkspacePathForSession(cfg, sessionKey, loaded, project);\n    await mkdir(effective, { recursive: true });\n  }\n\n  /** Apply persisted `modelOverride` to ModelManager (no-op when none stored). */\n  async model(sessionKey: string): Promise<void> {\n    const cfg = await this.opts.sessionConfigStore.get(sessionKey);\n    if (cfg?.modelOverride) {\n      await this.opts.modelManager.switchModelForSession(sessionKey, cfg.modelOverride);\n    }\n  }\n\n  /**\n   * Resolve the effective thinking level (request override > per-session\n   * override > agent default) and apply it to the live agent instance.\n   */\n  async thinking(sessionKey: string, requestOverride?: string | null): Promise<void> {\n    const level = await resolveEffectiveThinkingLevel(\n      this.opts.sessionConfigStore,\n      sessionKey,\n      requestOverride,\n      undefined,\n    );\n    this.opts.agentManager.setThinkingLevel(sessionKey, level);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;aA6BqD;AAErD,MAAM,MAAM,aAAa,kBAAkB;AAU3C,IAAa,kBAAb,MAA6B;CAC3B;CAEA,YAAY,MAA8B;AACxC,OAAK,OAAO;;;;;;CAOd,MAAM,UAAU,YAAmC;EACjD,MAAM,MAAM,KAAK,KAAK,WAAW;AACjC,MAAI,CAAC,IACH;EAEF,MAAM,SAAS,MAAM,KAAK,KAAK,mBAAmB,IAAI,WAAW;EACjE,MAAM,UAAU,qBAAqB,WAAW;EAChD,MAAM,mBAAmB,qBAAqB,QAAQ;AACtD,MAAI,iBACF,MAAK,KAAK,aAAa,4BAA4B,YAAY,iBAAiB;WACvE,QAAQ,0BAA0B,MAAM,EAAE;GACnD,MAAM,WAAW,+BAA+B,OAAO,yBAAyB;AAChF,OAAI,SAAS,GACX,MAAK,KAAK,aAAa,4BAA4B,YAAY,SAAS,KAAK;QACxE;AACL,QAAI,KAAK,EAAE,YAAY,EAAE,oDAAoD;AAC7E,SAAK,KAAK,aAAa,4BAA4B,YAAY,KAAK;;QAGtE,MAAK,KAAK,aAAa,4BAA4B,YAAY,KAAK;AAGtE,QAAM,MADY,iCAAiC,KAAK,YAAY,QAAQ,QACvD,EAAE,EAAE,WAAW,MAAM,CAAC;;;CAI7C,MAAM,MAAM,YAAmC;EAC7C,MAAM,MAAM,MAAM,KAAK,KAAK,mBAAmB,IAAI,WAAW;AAC9D,MAAI,KAAK,cACP,OAAM,KAAK,KAAK,aAAa,sBAAsB,YAAY,IAAI,cAAc;;;;;;CAQrF,MAAM,SAAS,YAAoB,iBAAgD;EACjF,MAAM,QAAQ,MAAM,8BAClB,KAAK,KAAK,oBACV,YACA,iBACA,KAAA,EACD;AACD,OAAK,KAAK,aAAa,iBAAiB,YAAY,MAAM"}