@xopcai/xopc 0.0.86 → 0.0.88

package/dist/src/gateway/agents-admin.js.map

@@ -1 +1 @@
-{"version":3,"file":"agents-admin.js","names":["pathResolve"],"sources":["../../../src/gateway/agents-admin.ts"],"sourcesContent":["/**\n * Gateway REST helpers for multi-agent management.\n */\n\nimport { mkdir, readFile, realpath, stat, unlink, writeFile } from 'node:fs/promises';\nimport { join, resolve as pathResolve } from 'node:path';\n\nimport {\n  DEFAULT_AGENT_ID,\n  listAgentEntries,\n  normalizeAgentId,\n  resolveAgentDir,\n  resolveAgentProfileDir,\n  resolveAgentWorkspaceDir,\n  resolveDefaultAgentId,\n  resolveUserPath,\n  validateAgentIdForNewAgent,\n} from '../agent/agent-scope.js';\nimport { AGENT_PROFILE_MARKDOWN_SYSTEM_FILES } from '../agent/context/workspace.js';\nimport { seedAgentProfileMarkdownFiles } from '../agent/context/workspace-seed.js';\nimport {\n  applyAgentConfig,\n  findAgentEntryIndex,\n  pruneAgentConfig,\n  removeAgentDirsFromDisk,\n} from '../commands/agents.config.js';\nimport type { Config } from '../config/schema.js';\nimport { WORKSPACE_FILES } from '../config/paths.js';\nimport { resolveEffectiveAgentProfile } from '../config/agent-profile.js';\nimport { GATEWAY_BUILTIN_TOOL_IDS } from './agent-builtin-tools.js';\nimport { isPathUnderWorkspace, resolveWorkspaceSafePath } from './workspace-editor-path.js';\n\nconst EDITABLE_PROFILE_MARKDOWN_NAMES = new Set<string>([\n  ...AGENT_PROFILE_MARKDOWN_SYSTEM_FILES,\n  WORKSPACE_FILES.BOOTSTRAP,\n]);\n\nexport type GatewayAgentRow = {\n  id: string;\n  name?: string;\n  description?: string;\n  /** Value from `IDENTITY.md` **Avatar:** line when present (may be URL, `xopc:…`, etc.). */\n  avatar?: string;\n  workspace: string;\n  /** Absolute directory for profile Markdown (`SOUL.md`, …) and gateway avatars: `agents/<id>/profile/`. */\n  profileDir: string;\n  model?: { primary?: string; fallbacks?: string[] };\n  isDefault: boolean;\n  skills: {\n    defaults: string[];\n    entry?: string[];\n    effectiveAllowlist?: string[];\n  };\n  tools: {\n    defaultsDisable: string[];\n    entryDisable: string[];\n    effectiveDisable: string[];\n  };\n};\n\nexport type GatewayAgentsListResponse = {\n  defaultId: string;\n  agents: GatewayAgentRow[];\n  builtinToolIds: string[];\n};\n\nfunction collectAgentIdsForList(cfg: Config): string[] {\n  const entries = listAgentEntries(cfg).filter((e) => e.enabled !== false);\n  const defaultId = resolveDefaultAgentId(cfg);\n  if (entries.length === 0) {\n    return [defaultId];\n  }\n  const ids = new Set<string>();\n  for (const e of entries) {\n    ids.add(normalizeAgentId(e.id));\n  }\n  ids.add(defaultId);\n  return [...ids];\n}\n\n/** Extract `**Avatar:**` value from profile IDENTITY.md (same line shape as the gateway console parser). */\nexport function extractAvatarFromIdentityMarkdown(content: string): string | undefined {\n  for (const line of content.split('\\n')) {\n    const match = line.match(/^[-*]\\s+\\*\\*Avatar:\\*\\*\\s*(.*)/i);\n    if (match) {\n      const v = match[1]?.trim() ?? '';\n      return v.length > 0 ? v : undefined;\n    }\n  }\n  return undefined;\n}\n\nexport async function listGatewayAgents(cfg: Config): Promise<GatewayAgentsListResponse> {\n  const defaultId = resolveDefaultAgentId(cfg);\n  const agents: GatewayAgentRow[] = [];\n  const defaultsSkills = cfg.agents?.defaults?.skills;\n  const defaultsDisable = cfg.agents?.defaults?.tools?.disable ?? [];\n  for (const id of collectAgentIdsForList(cfg)) {\n    const profile = resolveEffectiveAgentProfile(cfg, id);\n    const entry = listAgentEntries(cfg).find((e) => normalizeAgentId(e.id) === id);\n    const model =\n      profile.primaryModelRef || profile.fallbacks.length > 0\n        ? {\n            ...(profile.primaryModelRef ? { primary: profile.primaryModelRef } : {}),\n            ...(profile.fallbacks.length > 0 ? { fallbacks: profile.fallbacks } : {}),\n          }\n        : undefined;\n    const entrySkills = entry?.skills;\n    const entryDisable = entry?.tools?.disable ?? [];\n    let avatar: string | undefined;\n    try {\n      const identityPath = join(resolveAgentProfileDir(cfg, id), WORKSPACE_FILES.IDENTITY);\n      const content = await readFile(identityPath, 'utf-8');\n      avatar = extractAvatarFromIdentityMarkdown(content);\n    } catch {\n      /* missing IDENTITY.md or unreadable */\n    }\n    agents.push({\n      id,\n      ...(entry?.name?.trim() ? { name: entry.name.trim() } : {}),\n      ...(entry?.description?.trim() ? { description: entry.description.trim() } : {}),\n      ...(avatar ? { avatar } : {}),\n      workspace: profile.resolvedWorkspacePath,\n      profileDir: resolveAgentProfileDir(cfg, id),\n      ...(model ? { model } : {}),\n      isDefault: id === defaultId,\n      skills: {\n        defaults: defaultsSkills ? [...defaultsSkills] : [],\n        ...(entrySkills !== undefined ? { entry: [...entrySkills] } : {}),\n        ...(profile.skillsAllowlist !== undefined\n          ? { effectiveAllowlist: [...profile.skillsAllowlist] }\n          : {}),\n      },\n      tools: {\n        defaultsDisable: [...defaultsDisable],\n        entryDisable: [...entryDisable],\n        effectiveDisable: [...profile.tools.disable].sort((a, b) => a.localeCompare(b)),\n      },\n    });\n  }\n  agents.sort((a, b) => a.id.localeCompare(b.id));\n  return { defaultId, agents, builtinToolIds: [...GATEWAY_BUILTIN_TOOL_IDS] };\n}\n\nexport type CreateAgentBody = {\n  /** Display name stored on the agent entry. */\n  name: string;\n  /** Optional id seed; normalized agent id defaults from `name` when omitted. */\n  id?: string;\n  workspace: string;\n  model?: string;\n  agentDir?: string;\n  description?: string;\n  /** Initial `agents.list[].tools.disable` for the new entry. */\n  toolsDisable?: string[];\n  /** Profile markdown files to write after seeding (e.g. `IDENTITY.md`, `SOUL.md`). */\n  profileFiles?: Record<string, string>;\n};\n\nexport type AgentAdminHttpStatus = 400 | 404 | 409;\n\nexport type AgentAdminResult<T> =\n  | { ok: true; data: T }\n  | { ok: false; error: string; status?: AgentAdminHttpStatus };\n\nfunction requireNonMain(id: string): AgentAdminResult<never> | null {\n  if (normalizeAgentId(id) === DEFAULT_AGENT_ID) {\n    return { ok: false, error: `\"${DEFAULT_AGENT_ID}\" is reserved`, status: 400 };\n  }\n  return null;\n}\n\nexport function prepareCreateAgent(\n  cfg: Config,\n  body: CreateAgentBody,\n): AgentAdminResult<{ nextConfig: Config; agentId: string; workspace: string }> {\n  const name = body.name?.trim() ?? '';\n  if (!name) {\n    return { ok: false, error: 'name is required', status: 400 };\n  }\n  const workspace = body.workspace?.trim() ?? '';\n  if (!workspace) {\n    return { ok: false, error: 'workspace is required', status: 400 };\n  }\n  const idRes = validateAgentIdForNewAgent(body.id, name);\n  if (idRes.ok === false) {\n    return { ok: false, error: idRes.error, status: 400 };\n  }\n  const agentId = idRes.agentId;\n  if (findAgentEntryIndex(listAgentEntries(cfg), agentId) >= 0) {\n    return { ok: false, error: `agent \"${agentId}\" already exists`, status: 409 };\n  }\n  if (body.profileFiles !== undefined) {\n    if (typeof body.profileFiles !== 'object' || body.profileFiles === null || Array.isArray(body.profileFiles)) {\n      return { ok: false, error: 'profileFiles must be an object', status: 400 };\n    }\n    for (const [name, content] of Object.entries(body.profileFiles)) {\n      const bad = assertAllowedFile(name);\n      if (bad) {\n        return bad;\n      }\n      if (typeof content !== 'string') {\n        return { ok: false, error: `profileFiles[\"${name}\"] must be a string`, status: 400 };\n      }\n    }\n  }\n\n  const wsAbs = resolveUserPath(workspace);\n  let next = applyAgentConfig(cfg, {\n    agentId,\n    name,\n    workspace: wsAbs,\n    ...(body.model?.trim() ? { model: body.model.trim() } : {}),\n    ...(body.agentDir?.trim() ? { agentDir: body.agentDir.trim() } : {}),\n    ...(body.description?.trim() ? { description: body.description.trim() } : {}),\n  });\n\n  if (body.toolsDisable !== undefined) {\n    const list = [...listAgentEntries(next)];\n    const idx = findAgentEntryIndex(list, agentId);\n    if (idx >= 0) {\n      type Entry = (typeof list)[number];\n      const entry: Entry = { ...list[idx] };\n      const disable = body.toolsDisable.map((s) => String(s).trim()).filter(Boolean);\n      entry.tools = { ...entry.tools, disable };\n      list[idx] = entry;\n      next = {\n        ...next,\n        agents: {\n          ...next.agents,\n          list,\n        },\n      };\n    }\n  }\n\n  return { ok: true, data: { nextConfig: next, agentId, workspace: wsAbs } };\n}\n\nexport type PreparedBatchCreateAgent = {\n  agentId: string;\n  profileFiles?: Record<string, string>;\n};\n\nexport function prepareCreateAgentsBatch(\n  cfg: Config,\n  bodies: CreateAgentBody[],\n): AgentAdminResult<{ nextConfig: Config; created: PreparedBatchCreateAgent[] }> {\n  if (!Array.isArray(bodies) || bodies.length === 0) {\n    return { ok: false, error: 'agents must be a non-empty array', status: 400 };\n  }\n  let next = cfg;\n  const created: PreparedBatchCreateAgent[] = [];\n  for (const body of bodies) {\n    const prep = prepareCreateAgent(next, body);\n    if (prep.ok === false) {\n      return prep;\n    }\n    next = prep.data.nextConfig;\n    created.push({\n      agentId: prep.data.agentId,\n      ...(body.profileFiles !== undefined ? { profileFiles: body.profileFiles } : {}),\n    });\n  }\n  return { ok: true, data: { nextConfig: next, created } };\n}\n\nexport async function finalizeCreateAgentDirs(\n  cfg: Config,\n  agentId: string,\n  opts?: { profileFiles?: Record<string, string> },\n): Promise<AgentAdminResult<void>> {\n  const wsPath = resolveAgentWorkspaceDir(cfg, agentId);\n  const profilePath = resolveAgentProfileDir(cfg, agentId);\n  const adPath = resolveAgentDir(cfg, agentId);\n  await mkdir(wsPath, { recursive: true });\n  await mkdir(profilePath, { recursive: true });\n  await mkdir(adPath, { recursive: true });\n  const id = normalizeAgentId(agentId);\n  const entry = listAgentEntries(cfg).find((e) => normalizeAgentId(e.id) === id);\n  const displayName = entry?.name?.trim() || id;\n  seedAgentProfileMarkdownFiles(profilePath, wsPath, { displayName });\n\n  const profileFiles = opts?.profileFiles;\n  if (profileFiles && Object.keys(profileFiles).length > 0) {\n    for (const [name, content] of Object.entries(profileFiles)) {\n      const written = await writeAgentProfileFile(cfg, agentId, name, content);\n      if (written.ok === false) {\n        return written;\n      }\n    }\n  }\n\n  return { ok: true, data: undefined };\n}\n\nexport type UpdateAgentBody = {\n  name?: string;\n  description?: string | null;\n  workspace?: string;\n  model?: string | null;\n  agentDir?: string | null;\n  setDefault?: boolean;\n  /** Replace `agents.list[].skills`; `null` removes the key (inherit defaults). */\n  skills?: string[] | null;\n  /** Replace `agents.list[].tools.disable`; `null` clears entry-level disables. */\n  toolsDisable?: string[] | null;\n};\n\nexport function prepareUpdateAgent(\n  cfg: Config,\n  agentIdRaw: string,\n  body: UpdateAgentBody,\n): AgentAdminResult<{ nextConfig: Config }> {\n  const agentId = normalizeAgentId(agentIdRaw);\n  let list = [...listAgentEntries(cfg)];\n  let idx = findAgentEntryIndex(list, agentId);\n  if (idx < 0 && agentId === resolveDefaultAgentId(cfg)) {\n    list = [...list, { id: agentId, enabled: true as const }];\n    idx = list.length - 1;\n  }\n  if (idx < 0) {\n    return { ok: false, error: `agent \"${agentId}\" not found`, status: 404 };\n  }\n\n  type Entry = (typeof list)[number];\n  const entry: Entry = { ...list[idx] };\n\n  if (body.name !== undefined) {\n    const n = body.name.trim();\n    if (n) {\n      entry.name = n;\n    }\n  }\n  if (body.description !== undefined) {\n    if (body.description === null || String(body.description).trim() === '') {\n      delete entry.description;\n    } else {\n      entry.description = String(body.description).trim();\n    }\n  }\n  if (body.workspace !== undefined) {\n    const w = body.workspace.trim();\n    if (w) {\n      entry.workspace = resolveUserPath(w);\n    }\n  }\n  if (body.model !== undefined) {\n    if (body.model === null || String(body.model).trim() === '') {\n      delete entry.model;\n    } else {\n      entry.model = String(body.model).trim() as Entry['model'];\n    }\n  }\n  if (body.agentDir !== undefined) {\n    if (body.agentDir === null || String(body.agentDir).trim() === '') {\n      delete entry.agentDir;\n    } else {\n      entry.agentDir = String(body.agentDir).trim();\n    }\n  }\n\n  if (body.skills !== undefined) {\n    if (body.skills === null) {\n      delete entry.skills;\n    } else {\n      const next = body.skills.map((s) => String(s).trim()).filter(Boolean);\n      if (next.length === 0) {\n        entry.skills = [];\n      } else {\n        entry.skills = next;\n      }\n    }\n  }\n\n  if (body.toolsDisable !== undefined) {\n    if (body.toolsDisable === null) {\n      if (entry.tools) {\n        delete entry.tools.disable;\n        if (Object.keys(entry.tools).length === 0) {\n          delete entry.tools;\n        }\n      }\n    } else {\n      const next = body.toolsDisable.map((s) => String(s).trim()).filter(Boolean);\n      entry.tools = { ...entry.tools, disable: next };\n    }\n  }\n\n  list[idx] = entry;\n  let next: Config = {\n    ...cfg,\n    agents: {\n      ...cfg.agents,\n      list,\n    },\n  };\n\n  if (body.setDefault === true) {\n    next = {\n      ...next,\n      agents: {\n        ...next.agents,\n        default: agentId,\n      },\n    };\n  }\n  return { ok: true, data: { nextConfig: next } };\n}\n\nexport function prepareDeleteAgent(\n  cfg: Config,\n  agentIdRaw: string,\n): AgentAdminResult<{ nextConfig: Config; agentId: string }> {\n  const agentId = normalizeAgentId(agentIdRaw);\n  const reserved = requireNonMain(agentId);\n  if (reserved) {\n    return reserved;\n  }\n  if (findAgentEntryIndex(listAgentEntries(cfg), agentId) < 0) {\n    return { ok: false, error: `agent \"${agentId}\" not found`, status: 404 };\n  }\n  const { config: pruned } = pruneAgentConfig(cfg, agentId);\n  return { ok: true, data: { nextConfig: pruned, agentId } };\n}\n\nexport async function runAfterDeletePurge(cfg: Config, agentId: string): Promise<void> {\n  await removeAgentDirsFromDisk(cfg, agentId);\n}\n\nexport type AgentFileEntry = {\n  name: string;\n  missing: boolean;\n  size?: number;\n  updatedAtMs?: number;\n};\n\nasync function profileMarkdownRootReal(cfg: Config, agentId: string): Promise<string> {\n  const dir = resolveAgentProfileDir(cfg, agentId);\n  await mkdir(dir, { recursive: true });\n  try {\n    return await realpath(dir);\n  } catch {\n    return pathResolve(dir);\n  }\n}\n\nfunction assertAllowedFile(name: string): AgentAdminResult<never> | null {\n  if (!name || name.includes('/') || name.includes('\\\\') || !EDITABLE_PROFILE_MARKDOWN_NAMES.has(name)) {\n    return { ok: false, error: `unsupported file \"${name}\"`, status: 400 };\n  }\n  return null;\n}\n\nexport async function listAgentProfileFiles(\n  cfg: Config,\n  agentId: string,\n): Promise<AgentAdminResult<{ agentId: string; profileDir: string; files: AgentFileEntry[] }>> {\n  const id = normalizeAgentId(agentId);\n  if (collectAgentIdsForList(cfg).every((x) => x !== id)) {\n    return { ok: false, error: `agent \"${id}\" not found`, status: 404 };\n  }\n  const root = await profileMarkdownRootReal(cfg, id);\n  const names = [...EDITABLE_PROFILE_MARKDOWN_NAMES];\n  const files: AgentFileEntry[] = [];\n  for (const name of names.sort((a, b) => a.localeCompare(b))) {\n    const abs = resolveWorkspaceSafePath(root, name);\n    if (!abs) {\n      continue;\n    }\n    try {\n      const st = await stat(abs);\n      if (!st.isFile()) {\n        continue;\n      }\n      files.push({\n        name,\n        missing: false,\n        size: st.size,\n        updatedAtMs: st.mtimeMs,\n      });\n    } catch {\n      files.push({ name, missing: true });\n    }\n  }\n  files.sort((a, b) => a.name.localeCompare(b.name));\n  return { ok: true, data: { agentId: id, profileDir: root, files } };\n}\n\nexport async function readAgentProfileFile(\n  cfg: Config,\n  agentId: string,\n  name: string,\n): Promise<AgentAdminResult<{ agentId: string; content: string; path: string }>> {\n  const bad = assertAllowedFile(name);\n  if (bad) {\n    return bad;\n  }\n  const id = normalizeAgentId(agentId);\n  if (collectAgentIdsForList(cfg).every((x) => x !== id)) {\n    return { ok: false, error: `agent \"${id}\" not found`, status: 404 };\n  }\n  const root = await profileMarkdownRootReal(cfg, id);\n  const abs = resolveWorkspaceSafePath(root, name);\n  if (!abs) {\n    return { ok: false, error: 'invalid path', status: 400 };\n  }\n  try {\n    const content = await readFile(abs, 'utf-8');\n    return { ok: true, data: { agentId: id, content, path: abs } };\n  } catch {\n    return { ok: false, error: 'file not found', status: 404 };\n  }\n}\n\nexport async function writeAgentProfileFile(\n  cfg: Config,\n  agentId: string,\n  name: string,\n  content: string,\n): Promise<AgentAdminResult<{ agentId: string; path: string }>> {\n  const bad = assertAllowedFile(name);\n  if (bad) {\n    return bad;\n  }\n  const id = normalizeAgentId(agentId);\n  if (collectAgentIdsForList(cfg).every((x) => x !== id)) {\n    return { ok: false, error: `agent \"${id}\" not found`, status: 404 };\n  }\n  const root = await profileMarkdownRootReal(cfg, id);\n  const abs = resolveWorkspaceSafePath(root, name);\n  if (!abs) {\n    return { ok: false, error: 'invalid path', status: 400 };\n  }\n  const rootReal = await profileMarkdownRootReal(cfg, id);\n  if (!isPathUnderWorkspace(rootReal, abs)) {\n    return { ok: false, error: 'path escapes profile markdown root', status: 400 };\n  }\n  await writeFile(abs, content, 'utf-8');\n  return { ok: true, data: { agentId: id, path: abs } };\n}\n\n// ---------------------------------------------------------------------------\n// Binary agent avatar (profile markdown root dir, not a SOUL/IDENTITY markdown file)\n// ---------------------------------------------------------------------------\n\nconst AGENT_AVATAR_MAX_BYTES = 512 * 1024;\nconst AGENT_AVATAR_BASENAME = 'agent-avatar';\n\nconst AGENT_AVATAR_EXTENSIONS = ['.png', '.jpg', '.jpeg', '.webp'] as const;\n\nfunction agentAvatarFilenames(): string[] {\n  return AGENT_AVATAR_EXTENSIONS.map((ext) => `${AGENT_AVATAR_BASENAME}${ext}`);\n}\n\nfunction mimeToExt(mime: string): '.png' | '.jpg' | '.jpeg' | '.webp' | null {\n  const m = mime.toLowerCase().trim();\n  if (m === 'image/png') return '.png';\n  if (m === 'image/jpeg' || m === 'image/jpg') return '.jpg';\n  if (m === 'image/webp') return '.webp';\n  return null;\n}\n\nfunction detectImageMimeFromBytes(buf: Uint8Array): 'image/png' | 'image/jpeg' | 'image/webp' | null {\n  if (buf.length >= 8 && buf[0] === 0x89 && buf[1] === 0x50 && buf[2] === 0x4e && buf[3] === 0x47) {\n    return 'image/png';\n  }\n  if (buf.length >= 3 && buf[0] === 0xff && buf[1] === 0xd8 && buf[2] === 0xff) {\n    return 'image/jpeg';\n  }\n  if (\n    buf.length >= 12 &&\n    buf[0] === 0x52 &&\n    buf[1] === 0x49 &&\n    buf[2] === 0x46 &&\n    buf[3] === 0x46 &&\n    buf[8] === 0x57 &&\n    buf[9] === 0x45 &&\n    buf[10] === 0x42 &&\n    buf[11] === 0x50\n  ) {\n    return 'image/webp';\n  }\n  return null;\n}\n\nfunction assertAgentExistsForAvatar(cfg: Config, id: string): AgentAdminResult<never> | null {\n  if (collectAgentIdsForList(cfg).every((x) => x !== id)) {\n    return { ok: false, error: `agent \"${id}\" not found`, status: 404 };\n  }\n  return null;\n}\n\nexport async function readAgentAvatarFile(\n  cfg: Config,\n  agentId: string,\n): Promise<AgentAdminResult<{ agentId: string; buffer: Buffer; contentType: string; path: string }>> {\n  const missingAgent = assertAgentExistsForAvatar(cfg, agentId);\n  if (missingAgent) {\n    return missingAgent;\n  }\n  const id = normalizeAgentId(agentId);\n  const root = await profileMarkdownRootReal(cfg, id);\n  for (const name of agentAvatarFilenames()) {\n    const abs = resolveWorkspaceSafePath(root, name);\n    if (!abs) {\n      continue;\n    }\n    try {\n      const st = await stat(abs);\n      if (!st.isFile() || st.size <= 0 || st.size > AGENT_AVATAR_MAX_BYTES) {\n        continue;\n      }\n      const buffer = await readFile(abs);\n      const detected = detectImageMimeFromBytes(buffer);\n      if (!detected) {\n        continue;\n      }\n      return { ok: true, data: { agentId: id, buffer, contentType: detected, path: abs } };\n    } catch {\n      /* try next */\n    }\n  }\n  return { ok: false, error: 'avatar not found', status: 404 };\n}\n\nexport async function writeAgentAvatarFromBase64(\n  cfg: Config,\n  agentId: string,\n  base64: string,\n  mimeType: string,\n): Promise<AgentAdminResult<{ agentId: string; path: string }>> {\n  const missingAgent = assertAgentExistsForAvatar(cfg, agentId);\n  if (missingAgent) {\n    return missingAgent;\n  }\n  const id = normalizeAgentId(agentId);\n  const ext = mimeToExt(mimeType);\n  if (!ext) {\n    return { ok: false, error: 'unsupported mimeType (use image/png, image/jpeg, or image/webp)', status: 400 };\n  }\n  let raw: Buffer;\n  try {\n    raw = Buffer.from(base64, 'base64');\n  } catch {\n    return { ok: false, error: 'invalid base64', status: 400 };\n  }\n  if (raw.length === 0 || raw.length > AGENT_AVATAR_MAX_BYTES) {\n    return { ok: false, error: `avatar must be non-empty and at most ${AGENT_AVATAR_MAX_BYTES} bytes`, status: 400 };\n  }\n  const detected = detectImageMimeFromBytes(raw);\n  if (!detected || !extMatchesDetectedMime(ext, detected)) {\n    return { ok: false, error: 'file content does not match declared image type', status: 400 };\n  }\n\n  const root = await profileMarkdownRootReal(cfg, id);\n  const rootReal = await profileMarkdownRootReal(cfg, id);\n  const targetName = `${AGENT_AVATAR_BASENAME}${ext}`;\n  const abs = resolveWorkspaceSafePath(root, targetName);\n  if (!abs || !isPathUnderWorkspace(rootReal, abs)) {\n    return { ok: false, error: 'invalid path', status: 400 };\n  }\n  for (const name of agentAvatarFilenames()) {\n    if (name === targetName) {\n      continue;\n    }\n    const other = resolveWorkspaceSafePath(root, name);\n    if (other && isPathUnderWorkspace(rootReal, other)) {\n      try {\n        await unlink(other);\n      } catch {\n        /* absent */\n      }\n    }\n  }\n  await writeFile(abs, raw);\n  return { ok: true, data: { agentId: id, path: abs } };\n}\n\nfunction mimeToExtToMime(ext: '.png' | '.jpg' | '.jpeg' | '.webp'): 'image/png' | 'image/jpeg' | 'image/webp' {\n  if (ext === '.png') return 'image/png';\n  if (ext === '.webp') return 'image/webp';\n  return 'image/jpeg';\n}\n\nfunction extMatchesDetectedMime(\n  ext: '.png' | '.jpg' | '.jpeg' | '.webp',\n  detected: 'image/png' | 'image/jpeg' | 'image/webp',\n): boolean {\n  return detected === mimeToExtToMime(ext);\n}\n\n/** Remove any `agent-avatar.*` in the agent profile markdown root. Idempotent: ok even when no file existed. */\nexport async function deleteAgentAvatarFile(cfg: Config, agentId: string): Promise<AgentAdminResult<{ agentId: string }>> {\n  const missingAgent = assertAgentExistsForAvatar(cfg, agentId);\n  if (missingAgent) {\n    return missingAgent;\n  }\n  const id = normalizeAgentId(agentId);\n  const root = await profileMarkdownRootReal(cfg, id);\n  const rootReal = await profileMarkdownRootReal(cfg, id);\n  for (const name of agentAvatarFilenames()) {\n    const abs = resolveWorkspaceSafePath(root, name);\n    if (!abs || !isPathUnderWorkspace(rootReal, abs)) {\n      continue;\n    }\n    try {\n      await unlink(abs);\n    } catch {\n      /* absent */\n    }\n  }\n  return { ok: true, data: { agentId: id } };\n}\n"],"mappings":";;;;;;;;;;;;;;kBAiBiC;YAUoB;AAKrD,MAAM,kCAAkC,IAAI,IAAY,CACtD,GAAG,qCACH,gBAAgB,UACjB,CAAC;AA+BF,SAAS,uBAAuB,KAAuB;CACrD,MAAM,UAAU,iBAAiB,IAAI,CAAC,QAAQ,MAAM,EAAE,YAAY,MAAM;CACxE,MAAM,YAAY,sBAAsB,IAAI;AAC5C,KAAI,QAAQ,WAAW,EACrB,QAAO,CAAC,UAAU;CAEpB,MAAM,sBAAM,IAAI,KAAa;AAC7B,MAAK,MAAM,KAAK,QACd,KAAI,IAAI,iBAAiB,EAAE,GAAG,CAAC;AAEjC,KAAI,IAAI,UAAU;AAClB,QAAO,CAAC,GAAG,IAAI;;;AAIjB,SAAgB,kCAAkC,SAAqC;AACrF,MAAK,MAAM,QAAQ,QAAQ,MAAM,KAAK,EAAE;EACtC,MAAM,QAAQ,KAAK,MAAM,kCAAkC;AAC3D,MAAI,OAAO;GACT,MAAM,IAAI,MAAM,IAAI,MAAM,IAAI;AAC9B,UAAO,EAAE,SAAS,IAAI,IAAI,KAAA;;;;AAMhC,eAAsB,kBAAkB,KAAiD;CACvF,MAAM,YAAY,sBAAsB,IAAI;CAC5C,MAAM,SAA4B,EAAE;CACpC,MAAM,iBAAiB,IAAI,QAAQ,UAAU;CAC7C,MAAM,kBAAkB,IAAI,QAAQ,UAAU,OAAO,WAAW,EAAE;AAClE,MAAK,MAAM,MAAM,uBAAuB,IAAI,EAAE;EAC5C,MAAM,UAAU,6BAA6B,KAAK,GAAG;EACrD,MAAM,QAAQ,iBAAiB,IAAI,CAAC,MAAM,MAAM,iBAAiB,EAAE,GAAG,KAAK,GAAG;EAC9E,MAAM,QACJ,QAAQ,mBAAmB,QAAQ,UAAU,SAAS,IAClD;GACE,GAAI,QAAQ,kBAAkB,EAAE,SAAS,QAAQ,iBAAiB,GAAG,EAAE;GACvE,GAAI,QAAQ,UAAU,SAAS,IAAI,EAAE,WAAW,QAAQ,WAAW,GAAG,EAAE;GACzE,GACD,KAAA;EACN,MAAM,cAAc,OAAO;EAC3B,MAAM,eAAe,OAAO,OAAO,WAAW,EAAE;EAChD,IAAI;AACJ,MAAI;AAGF,YAAS,kCAAkC,MADrB,SADD,KAAK,uBAAuB,KAAK,GAAG,EAAE,gBAAgB,SAChC,EAAE,QAAQ,CACF;UAC7C;AAGR,SAAO,KAAK;GACV;GACA,GAAI,OAAO,MAAM,MAAM,GAAG,EAAE,MAAM,MAAM,KAAK,MAAM,EAAE,GAAG,EAAE;GAC1D,GAAI,OAAO,aAAa,MAAM,GAAG,EAAE,aAAa,MAAM,YAAY,MAAM,EAAE,GAAG,EAAE;GAC/E,GAAI,SAAS,EAAE,QAAQ,GAAG,EAAE;GAC5B,WAAW,QAAQ;GACnB,YAAY,uBAAuB,KAAK,GAAG;GAC3C,GAAI,QAAQ,EAAE,OAAO,GAAG,EAAE;GAC1B,WAAW,OAAO;GAClB,QAAQ;IACN,UAAU,iBAAiB,CAAC,GAAG,eAAe,GAAG,EAAE;IACnD,GAAI,gBAAgB,KAAA,IAAY,EAAE,OAAO,CAAC,GAAG,YAAY,EAAE,GAAG,EAAE;IAChE,GAAI,QAAQ,oBAAoB,KAAA,IAC5B,EAAE,oBAAoB,CAAC,GAAG,QAAQ,gBAAgB,EAAE,GACpD,EAAE;IACP;GACD,OAAO;IACL,iBAAiB,CAAC,GAAG,gBAAgB;IACrC,cAAc,CAAC,GAAG,aAAa;IAC/B,kBAAkB,CAAC,GAAG,QAAQ,MAAM,QAAQ,CAAC,MAAM,GAAG,MAAM,EAAE,cAAc,EAAE,CAAC;IAChF;GACF,CAAC;;AAEJ,QAAO,MAAM,GAAG,MAAM,EAAE,GAAG,cAAc,EAAE,GAAG,CAAC;AAC/C,QAAO;EAAE;EAAW;EAAQ,gBAAgB,CAAC,GAAG,yBAAyB;EAAE;;AAwB7E,SAAS,eAAe,IAA4C;AAClE,KAAI,iBAAiB,GAAG,KAAA,OACtB,QAAO;EAAE,IAAI;EAAO,OAAO,IAAI,iBAAiB;EAAgB,QAAQ;EAAK;AAE/E,QAAO;;AAGT,SAAgB,mBACd,KACA,MAC8E;CAC9E,MAAM,OAAO,KAAK,MAAM,MAAM,IAAI;AAClC,KAAI,CAAC,KACH,QAAO;EAAE,IAAI;EAAO,OAAO;EAAoB,QAAQ;EAAK;CAE9D,MAAM,YAAY,KAAK,WAAW,MAAM,IAAI;AAC5C,KAAI,CAAC,UACH,QAAO;EAAE,IAAI;EAAO,OAAO;EAAyB,QAAQ;EAAK;CAEnE,MAAM,QAAQ,2BAA2B,KAAK,IAAI,KAAK;AACvD,KAAI,MAAM,OAAO,MACf,QAAO;EAAE,IAAI;EAAO,OAAO,MAAM;EAAO,QAAQ;EAAK;CAEvD,MAAM,UAAU,MAAM;AACtB,KAAI,oBAAoB,iBAAiB,IAAI,EAAE,QAAQ,IAAI,EACzD,QAAO;EAAE,IAAI;EAAO,OAAO,UAAU,QAAQ;EAAmB,QAAQ;EAAK;AAE/E,KAAI,KAAK,iBAAiB,KAAA,GAAW;AACnC,MAAI,OAAO,KAAK,iBAAiB,YAAY,KAAK,iBAAiB,QAAQ,MAAM,QAAQ,KAAK,aAAa,CACzG,QAAO;GAAE,IAAI;GAAO,OAAO;GAAkC,QAAQ;GAAK;AAE5E,OAAK,MAAM,CAAC,MAAM,YAAY,OAAO,QAAQ,KAAK,aAAa,EAAE;GAC/D,MAAM,MAAM,kBAAkB,KAAK;AACnC,OAAI,IACF,QAAO;AAET,OAAI,OAAO,YAAY,SACrB,QAAO;IAAE,IAAI;IAAO,OAAO,iBAAiB,KAAK;IAAsB,QAAQ;IAAK;;;CAK1F,MAAM,QAAQ,gBAAgB,UAAU;CACxC,IAAI,OAAO,iBAAiB,KAAK;EAC/B;EACA;EACA,WAAW;EACX,GAAI,KAAK,OAAO,MAAM,GAAG,EAAE,OAAO,KAAK,MAAM,MAAM,EAAE,GAAG,EAAE;EAC1D,GAAI,KAAK,UAAU,MAAM,GAAG,EAAE,UAAU,KAAK,SAAS,MAAM,EAAE,GAAG,EAAE;EACnE,GAAI,KAAK,aAAa,MAAM,GAAG,EAAE,aAAa,KAAK,YAAY,MAAM,EAAE,GAAG,EAAE;EAC7E,CAAC;AAEF,KAAI,KAAK,iBAAiB,KAAA,GAAW;EACnC,MAAM,OAAO,CAAC,GAAG,iBAAiB,KAAK,CAAC;EACxC,MAAM,MAAM,oBAAoB,MAAM,QAAQ;AAC9C,MAAI,OAAO,GAAG;GAEZ,MAAM,QAAe,EAAE,GAAG,KAAK,MAAM;GACrC,MAAM,UAAU,KAAK,aAAa,KAAK,MAAM,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC,OAAO,QAAQ;AAC9E,SAAM,QAAQ;IAAE,GAAG,MAAM;IAAO;IAAS;AACzC,QAAK,OAAO;AACZ,UAAO;IACL,GAAG;IACH,QAAQ;KACN,GAAG,KAAK;KACR;KACD;IACF;;;AAIL,QAAO;EAAE,IAAI;EAAM,MAAM;GAAE,YAAY;GAAM;GAAS,WAAW;GAAO;EAAE;;AAQ5E,SAAgB,yBACd,KACA,QAC+E;AAC/E,KAAI,CAAC,MAAM,QAAQ,OAAO,IAAI,OAAO,WAAW,EAC9C,QAAO;EAAE,IAAI;EAAO,OAAO;EAAoC,QAAQ;EAAK;CAE9E,IAAI,OAAO;CACX,MAAM,UAAsC,EAAE;AAC9C,MAAK,MAAM,QAAQ,QAAQ;EACzB,MAAM,OAAO,mBAAmB,MAAM,KAAK;AAC3C,MAAI,KAAK,OAAO,MACd,QAAO;AAET,SAAO,KAAK,KAAK;AACjB,UAAQ,KAAK;GACX,SAAS,KAAK,KAAK;GACnB,GAAI,KAAK,iBAAiB,KAAA,IAAY,EAAE,cAAc,KAAK,cAAc,GAAG,EAAE;GAC/E,CAAC;;AAEJ,QAAO;EAAE,IAAI;EAAM,MAAM;GAAE,YAAY;GAAM;GAAS;EAAE;;AAG1D,eAAsB,wBACpB,KACA,SACA,MACiC;CACjC,MAAM,SAAS,yBAAyB,KAAK,QAAQ;CACrD,MAAM,cAAc,uBAAuB,KAAK,QAAQ;CACxD,MAAM,SAAS,gBAAgB,KAAK,QAAQ;AAC5C,OAAM,MAAM,QAAQ,EAAE,WAAW,MAAM,CAAC;AACxC,OAAM,MAAM,aAAa,EAAE,WAAW,MAAM,CAAC;AAC7C,OAAM,MAAM,QAAQ,EAAE,WAAW,MAAM,CAAC;CACxC,MAAM,KAAK,iBAAiB,QAAQ;AAGpC,+BAA8B,aAAa,QAAQ,EAAE,aAFvC,iBAAiB,IAAI,CAAC,MAAM,MAAM,iBAAiB,EAAE,GAAG,KAAK,GAClD,EAAE,MAAM,MAAM,IAAI,IACuB,CAAC;CAEnE,MAAM,eAAe,MAAM;AAC3B,KAAI,gBAAgB,OAAO,KAAK,aAAa,CAAC,SAAS,EACrD,MAAK,MAAM,CAAC,MAAM,YAAY,OAAO,QAAQ,aAAa,EAAE;EAC1D,MAAM,UAAU,MAAM,sBAAsB,KAAK,SAAS,MAAM,QAAQ;AACxE,MAAI,QAAQ,OAAO,MACjB,QAAO;;AAKb,QAAO;EAAE,IAAI;EAAM,MAAM,KAAA;EAAW;;AAgBtC,SAAgB,mBACd,KACA,YACA,MAC0C;CAC1C,MAAM,UAAU,iBAAiB,WAAW;CAC5C,IAAI,OAAO,CAAC,GAAG,iBAAiB,IAAI,CAAC;CACrC,IAAI,MAAM,oBAAoB,MAAM,QAAQ;AAC5C,KAAI,MAAM,KAAK,YAAY,sBAAsB,IAAI,EAAE;AACrD,SAAO,CAAC,GAAG,MAAM;GAAE,IAAI;GAAS,SAAS;GAAe,CAAC;AACzD,QAAM,KAAK,SAAS;;AAEtB,KAAI,MAAM,EACR,QAAO;EAAE,IAAI;EAAO,OAAO,UAAU,QAAQ;EAAc,QAAQ;EAAK;CAI1E,MAAM,QAAe,EAAE,GAAG,KAAK,MAAM;AAErC,KAAI,KAAK,SAAS,KAAA,GAAW;EAC3B,MAAM,IAAI,KAAK,KAAK,MAAM;AAC1B,MAAI,EACF,OAAM,OAAO;;AAGjB,KAAI,KAAK,gBAAgB,KAAA,EACvB,KAAI,KAAK,gBAAgB,QAAQ,OAAO,KAAK,YAAY,CAAC,MAAM,KAAK,GACnE,QAAO,MAAM;KAEb,OAAM,cAAc,OAAO,KAAK,YAAY,CAAC,MAAM;AAGvD,KAAI,KAAK,cAAc,KAAA,GAAW;EAChC,MAAM,IAAI,KAAK,UAAU,MAAM;AAC/B,MAAI,EACF,OAAM,YAAY,gBAAgB,EAAE;;AAGxC,KAAI,KAAK,UAAU,KAAA,EACjB,KAAI,KAAK,UAAU,QAAQ,OAAO,KAAK,MAAM,CAAC,MAAM,KAAK,GACvD,QAAO,MAAM;KAEb,OAAM,QAAQ,OAAO,KAAK,MAAM,CAAC,MAAM;AAG3C,KAAI,KAAK,aAAa,KAAA,EACpB,KAAI,KAAK,aAAa,QAAQ,OAAO,KAAK,SAAS,CAAC,MAAM,KAAK,GAC7D,QAAO,MAAM;KAEb,OAAM,WAAW,OAAO,KAAK,SAAS,CAAC,MAAM;AAIjD,KAAI,KAAK,WAAW,KAAA,EAClB,KAAI,KAAK,WAAW,KAClB,QAAO,MAAM;MACR;EACL,MAAM,OAAO,KAAK,OAAO,KAAK,MAAM,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC,OAAO,QAAQ;AACrE,MAAI,KAAK,WAAW,EAClB,OAAM,SAAS,EAAE;MAEjB,OAAM,SAAS;;AAKrB,KAAI,KAAK,iBAAiB,KAAA,EACxB,KAAI,KAAK,iBAAiB;MACpB,MAAM,OAAO;AACf,UAAO,MAAM,MAAM;AACnB,OAAI,OAAO,KAAK,MAAM,MAAM,CAAC,WAAW,EACtC,QAAO,MAAM;;QAGZ;EACL,MAAM,OAAO,KAAK,aAAa,KAAK,MAAM,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC,OAAO,QAAQ;AAC3E,QAAM,QAAQ;GAAE,GAAG,MAAM;GAAO,SAAS;GAAM;;AAInD,MAAK,OAAO;CACZ,IAAI,OAAe;EACjB,GAAG;EACH,QAAQ;GACN,GAAG,IAAI;GACP;GACD;EACF;AAED,KAAI,KAAK,eAAe,KACtB,QAAO;EACL,GAAG;EACH,QAAQ;GACN,GAAG,KAAK;GACR,SAAS;GACV;EACF;AAEH,QAAO;EAAE,IAAI;EAAM,MAAM,EAAE,YAAY,MAAM;EAAE;;AAGjD,SAAgB,mBACd,KACA,YAC2D;CAC3D,MAAM,UAAU,iBAAiB,WAAW;CAC5C,MAAM,WAAW,eAAe,QAAQ;AACxC,KAAI,SACF,QAAO;AAET,KAAI,oBAAoB,iBAAiB,IAAI,EAAE,QAAQ,GAAG,EACxD,QAAO;EAAE,IAAI;EAAO,OAAO,UAAU,QAAQ;EAAc,QAAQ;EAAK;CAE1E,MAAM,EAAE,QAAQ,WAAW,iBAAiB,KAAK,QAAQ;AACzD,QAAO;EAAE,IAAI;EAAM,MAAM;GAAE,YAAY;GAAQ;GAAS;EAAE;;AAG5D,eAAsB,oBAAoB,KAAa,SAAgC;AACrF,OAAM,wBAAwB,KAAK,QAAQ;;AAU7C,eAAe,wBAAwB,KAAa,SAAkC;CACpF,MAAM,MAAM,uBAAuB,KAAK,QAAQ;AAChD,OAAM,MAAM,KAAK,EAAE,WAAW,MAAM,CAAC;AACrC,KAAI;AACF,SAAO,MAAM,SAAS,IAAI;SACpB;AACN,SAAOA,QAAY,IAAI;;;AAI3B,SAAS,kBAAkB,MAA8C;AACvE,KAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS,KAAK,IAAI,CAAC,gCAAgC,IAAI,KAAK,CAClG,QAAO;EAAE,IAAI;EAAO,OAAO,qBAAqB,KAAK;EAAI,QAAQ;EAAK;AAExE,QAAO;;AAGT,eAAsB,sBACpB,KACA,SAC6F;CAC7F,MAAM,KAAK,iBAAiB,QAAQ;AACpC,KAAI,uBAAuB,IAAI,CAAC,OAAO,MAAM,MAAM,GAAG,CACpD,QAAO;EAAE,IAAI;EAAO,OAAO,UAAU,GAAG;EAAc,QAAQ;EAAK;CAErE,MAAM,OAAO,MAAM,wBAAwB,KAAK,GAAG;CACnD,MAAM,QAAQ,CAAC,GAAG,gCAAgC;CAClD,MAAM,QAA0B,EAAE;AAClC,MAAK,MAAM,QAAQ,MAAM,MAAM,GAAG,MAAM,EAAE,cAAc,EAAE,CAAC,EAAE;EAC3D,MAAM,MAAM,yBAAyB,MAAM,KAAK;AAChD,MAAI,CAAC,IACH;AAEF,MAAI;GACF,MAAM,KAAK,MAAM,KAAK,IAAI;AAC1B,OAAI,CAAC,GAAG,QAAQ,CACd;AAEF,SAAM,KAAK;IACT;IACA,SAAS;IACT,MAAM,GAAG;IACT,aAAa,GAAG;IACjB,CAAC;UACI;AACN,SAAM,KAAK;IAAE;IAAM,SAAS;IAAM,CAAC;;;AAGvC,OAAM,MAAM,GAAG,MAAM,EAAE,KAAK,cAAc,EAAE,KAAK,CAAC;AAClD,QAAO;EAAE,IAAI;EAAM,MAAM;GAAE,SAAS;GAAI,YAAY;GAAM;GAAO;EAAE;;AAGrE,eAAsB,qBACpB,KACA,SACA,MAC+E;CAC/E,MAAM,MAAM,kBAAkB,KAAK;AACnC,KAAI,IACF,QAAO;CAET,MAAM,KAAK,iBAAiB,QAAQ;AACpC,KAAI,uBAAuB,IAAI,CAAC,OAAO,MAAM,MAAM,GAAG,CACpD,QAAO;EAAE,IAAI;EAAO,OAAO,UAAU,GAAG;EAAc,QAAQ;EAAK;CAGrE,MAAM,MAAM,yBAAyB,MADlB,wBAAwB,KAAK,GAAG,EACR,KAAK;AAChD,KAAI,CAAC,IACH,QAAO;EAAE,IAAI;EAAO,OAAO;EAAgB,QAAQ;EAAK;AAE1D,KAAI;AAEF,SAAO;GAAE,IAAI;GAAM,MAAM;IAAE,SAAS;IAAI,SAAA,MADlB,SAAS,KAAK,QAAQ;IACK,MAAM;IAAK;GAAE;SACxD;AACN,SAAO;GAAE,IAAI;GAAO,OAAO;GAAkB,QAAQ;GAAK;;;AAI9D,eAAsB,sBACpB,KACA,SACA,MACA,SAC8D;CAC9D,MAAM,MAAM,kBAAkB,KAAK;AACnC,KAAI,IACF,QAAO;CAET,MAAM,KAAK,iBAAiB,QAAQ;AACpC,KAAI,uBAAuB,IAAI,CAAC,OAAO,MAAM,MAAM,GAAG,CACpD,QAAO;EAAE,IAAI;EAAO,OAAO,UAAU,GAAG;EAAc,QAAQ;EAAK;CAGrE,MAAM,MAAM,yBAAyB,MADlB,wBAAwB,KAAK,GAAG,EACR,KAAK;AAChD,KAAI,CAAC,IACH,QAAO;EAAE,IAAI;EAAO,OAAO;EAAgB,QAAQ;EAAK;AAG1D,KAAI,CAAC,qBAAqB,MADH,wBAAwB,KAAK,GAAG,EACnB,IAAI,CACtC,QAAO;EAAE,IAAI;EAAO,OAAO;EAAsC,QAAQ;EAAK;AAEhF,OAAM,UAAU,KAAK,SAAS,QAAQ;AACtC,QAAO;EAAE,IAAI;EAAM,MAAM;GAAE,SAAS;GAAI,MAAM;GAAK;EAAE;;AAOvD,MAAM,yBAAyB,MAAM;AACrC,MAAM,wBAAwB;AAE9B,MAAM,0BAA0B;CAAC;CAAQ;CAAQ;CAAS;CAAQ;AAElE,SAAS,uBAAiC;AACxC,QAAO,wBAAwB,KAAK,QAAQ,GAAG,wBAAwB,MAAM;;AAG/E,SAAS,UAAU,MAA0D;CAC3E,MAAM,IAAI,KAAK,aAAa,CAAC,MAAM;AACnC,KAAI,MAAM,YAAa,QAAO;AAC9B,KAAI,MAAM,gBAAgB,MAAM,YAAa,QAAO;AACpD,KAAI,MAAM,aAAc,QAAO;AAC/B,QAAO;;AAGT,SAAS,yBAAyB,KAAmE;AACnG,KAAI,IAAI,UAAU,KAAK,IAAI,OAAO,OAAQ,IAAI,OAAO,MAAQ,IAAI,OAAO,MAAQ,IAAI,OAAO,GACzF,QAAO;AAET,KAAI,IAAI,UAAU,KAAK,IAAI,OAAO,OAAQ,IAAI,OAAO,OAAQ,IAAI,OAAO,IACtE,QAAO;AAET,KACE,IAAI,UAAU,MACd,IAAI,OAAO,MACX,IAAI,OAAO,MACX,IAAI,OAAO,MACX,IAAI,OAAO,MACX,IAAI,OAAO,MACX,IAAI,OAAO,MACX,IAAI,QAAQ,MACZ,IAAI,QAAQ,GAEZ,QAAO;AAET,QAAO;;AAGT,SAAS,2BAA2B,KAAa,IAA4C;AAC3F,KAAI,uBAAuB,IAAI,CAAC,OAAO,MAAM,MAAM,GAAG,CACpD,QAAO;EAAE,IAAI;EAAO,OAAO,UAAU,GAAG;EAAc,QAAQ;EAAK;AAErE,QAAO;;AAGT,eAAsB,oBACpB,KACA,SACmG;CACnG,MAAM,eAAe,2BAA2B,KAAK,QAAQ;AAC7D,KAAI,aACF,QAAO;CAET,MAAM,KAAK,iBAAiB,QAAQ;CACpC,MAAM,OAAO,MAAM,wBAAwB,KAAK,GAAG;AACnD,MAAK,MAAM,QAAQ,sBAAsB,EAAE;EACzC,MAAM,MAAM,yBAAyB,MAAM,KAAK;AAChD,MAAI,CAAC,IACH;AAEF,MAAI;GACF,MAAM,KAAK,MAAM,KAAK,IAAI;AAC1B,OAAI,CAAC,GAAG,QAAQ,IAAI,GAAG,QAAQ,KAAK,GAAG,OAAO,uBAC5C;GAEF,MAAM,SAAS,MAAM,SAAS,IAAI;GAClC,MAAM,WAAW,yBAAyB,OAAO;AACjD,OAAI,CAAC,SACH;AAEF,UAAO;IAAE,IAAI;IAAM,MAAM;KAAE,SAAS;KAAI;KAAQ,aAAa;KAAU,MAAM;KAAK;IAAE;UAC9E;;AAIV,QAAO;EAAE,IAAI;EAAO,OAAO;EAAoB,QAAQ;EAAK;;AAG9D,eAAsB,2BACpB,KACA,SACA,QACA,UAC8D;CAC9D,MAAM,eAAe,2BAA2B,KAAK,QAAQ;AAC7D,KAAI,aACF,QAAO;CAET,MAAM,KAAK,iBAAiB,QAAQ;CACpC,MAAM,MAAM,UAAU,SAAS;AAC/B,KAAI,CAAC,IACH,QAAO;EAAE,IAAI;EAAO,OAAO;EAAmE,QAAQ;EAAK;CAE7G,IAAI;AACJ,KAAI;AACF,QAAM,OAAO,KAAK,QAAQ,SAAS;SAC7B;AACN,SAAO;GAAE,IAAI;GAAO,OAAO;GAAkB,QAAQ;GAAK;;AAE5D,KAAI,IAAI,WAAW,KAAK,IAAI,SAAS,uBACnC,QAAO;EAAE,IAAI;EAAO,OAAO,wCAAwC,uBAAuB;EAAS,QAAQ;EAAK;CAElH,MAAM,WAAW,yBAAyB,IAAI;AAC9C,KAAI,CAAC,YAAY,CAAC,uBAAuB,KAAK,SAAS,CACrD,QAAO;EAAE,IAAI;EAAO,OAAO;EAAmD,QAAQ;EAAK;CAG7F,MAAM,OAAO,MAAM,wBAAwB,KAAK,GAAG;CACnD,MAAM,WAAW,MAAM,wBAAwB,KAAK,GAAG;CACvD,MAAM,aAAa,GAAG,wBAAwB;CAC9C,MAAM,MAAM,yBAAyB,MAAM,WAAW;AACtD,KAAI,CAAC,OAAO,CAAC,qBAAqB,UAAU,IAAI,CAC9C,QAAO;EAAE,IAAI;EAAO,OAAO;EAAgB,QAAQ;EAAK;AAE1D,MAAK,MAAM,QAAQ,sBAAsB,EAAE;AACzC,MAAI,SAAS,WACX;EAEF,MAAM,QAAQ,yBAAyB,MAAM,KAAK;AAClD,MAAI,SAAS,qBAAqB,UAAU,MAAM,CAChD,KAAI;AACF,SAAM,OAAO,MAAM;UACb;;AAKZ,OAAM,UAAU,KAAK,IAAI;AACzB,QAAO;EAAE,IAAI;EAAM,MAAM;GAAE,SAAS;GAAI,MAAM;GAAK;EAAE;;AAGvD,SAAS,gBAAgB,KAAqF;AAC5G,KAAI,QAAQ,OAAQ,QAAO;AAC3B,KAAI,QAAQ,QAAS,QAAO;AAC5B,QAAO;;AAGT,SAAS,uBACP,KACA,UACS;AACT,QAAO,aAAa,gBAAgB,IAAI;;;AAI1C,eAAsB,sBAAsB,KAAa,SAAiE;CACxH,MAAM,eAAe,2BAA2B,KAAK,QAAQ;AAC7D,KAAI,aACF,QAAO;CAET,MAAM,KAAK,iBAAiB,QAAQ;CACpC,MAAM,OAAO,MAAM,wBAAwB,KAAK,GAAG;CACnD,MAAM,WAAW,MAAM,wBAAwB,KAAK,GAAG;AACvD,MAAK,MAAM,QAAQ,sBAAsB,EAAE;EACzC,MAAM,MAAM,yBAAyB,MAAM,KAAK;AAChD,MAAI,CAAC,OAAO,CAAC,qBAAqB,UAAU,IAAI,CAC9C;AAEF,MAAI;AACF,SAAM,OAAO,IAAI;UACX;;AAIV,QAAO;EAAE,IAAI;EAAM,MAAM,EAAE,SAAS,IAAI;EAAE"}
+{"version":3,"file":"agents-admin.js","names":["pathResolve"],"sources":["../../../src/gateway/agents-admin.ts"],"sourcesContent":["/**\n * Gateway REST helpers for multi-agent management.\n */\n\nimport { mkdir, readFile, realpath, stat, unlink, writeFile } from 'node:fs/promises';\nimport { join, resolve as pathResolve } from 'node:path';\n\nimport {\n  DEFAULT_AGENT_ID,\n  listAgentEntries,\n  normalizeAgentId,\n  resolveAgentDir,\n  resolveAgentProfileDir,\n  resolveAgentWorkspaceDir,\n  resolveDefaultAgentId,\n  resolveUserPath,\n  validateAgentIdForNewAgent,\n} from '../agent/agent-scope.js';\nimport { AGENT_PROFILE_MARKDOWN_SYSTEM_FILES } from '../agent/context/workspace.js';\nimport { seedAgentProfileMarkdownFiles } from '../agent/context/workspace-seed.js';\nimport {\n  applyAgentConfig,\n  findAgentEntryIndex,\n  pruneAgentConfig,\n  removeAgentDirsFromDisk,\n} from '../commands/agents.config.js';\nimport type { Config } from '../config/schema.js';\nimport { WORKSPACE_FILES } from '../config/paths.js';\nimport { resolveEffectiveAgentProfile } from '../config/agent-profile.js';\nimport { resolveEffectiveTypedModels } from '../config/agent-typed-models.js';\nimport type { AgentTypedModel } from '../config/schema.js';\nimport { normalizePatchTypedModels } from './hono/lib/agent-model.js';\nimport { GATEWAY_BUILTIN_TOOL_IDS } from './agent-builtin-tools.js';\nimport { isPathUnderWorkspace, resolveWorkspaceSafePath } from './workspace-editor-path.js';\n\nconst EDITABLE_PROFILE_MARKDOWN_NAMES = new Set<string>([\n  ...AGENT_PROFILE_MARKDOWN_SYSTEM_FILES,\n  WORKSPACE_FILES.BOOTSTRAP,\n]);\n\nexport type GatewayAgentTypedModelsInfo = {\n  defaults: AgentTypedModel[];\n  entry?: AgentTypedModel[];\n  effective: AgentTypedModel[];\n};\n\nexport type GatewayAgentRow = {\n  id: string;\n  name?: string;\n  description?: string;\n  /** Value from `IDENTITY.md` **Avatar:** line when present (may be URL, `xopc:…`, etc.). */\n  avatar?: string;\n  workspace: string;\n  /** Absolute directory for profile Markdown (`SOUL.md`, …) and gateway avatars: `agents/<id>/profile/`. */\n  profileDir: string;\n  model?: { primary?: string; fallbacks?: string[] };\n  typedModels: GatewayAgentTypedModelsInfo;\n  isDefault: boolean;\n  skills: {\n    defaults: string[];\n    entry?: string[];\n    effectiveAllowlist?: string[];\n  };\n  tools: {\n    defaultsDisable: string[];\n    entryDisable: string[];\n    effectiveDisable: string[];\n  };\n};\n\nexport type GatewayAgentsListResponse = {\n  defaultId: string;\n  agents: GatewayAgentRow[];\n  builtinToolIds: string[];\n};\n\nfunction collectAgentIdsForList(cfg: Config): string[] {\n  const entries = listAgentEntries(cfg).filter((e) => e.enabled !== false);\n  const defaultId = resolveDefaultAgentId(cfg);\n  if (entries.length === 0) {\n    return [defaultId];\n  }\n  const ids = new Set<string>();\n  for (const e of entries) {\n    ids.add(normalizeAgentId(e.id));\n  }\n  ids.add(defaultId);\n  return [...ids];\n}\n\n/** Extract `**Avatar:**` value from profile IDENTITY.md (same line shape as the gateway console parser). */\nexport function extractAvatarFromIdentityMarkdown(content: string): string | undefined {\n  for (const line of content.split('\\n')) {\n    const match = line.match(/^[-*]\\s+\\*\\*Avatar:\\*\\*\\s*(.*)/i);\n    if (match) {\n      const v = match[1]?.trim() ?? '';\n      return v.length > 0 ? v : undefined;\n    }\n  }\n  return undefined;\n}\n\nexport async function listGatewayAgents(cfg: Config): Promise<GatewayAgentsListResponse> {\n  const defaultId = resolveDefaultAgentId(cfg);\n  const agents: GatewayAgentRow[] = [];\n  const defaultsSkills = cfg.agents?.defaults?.skills;\n  const defaultsDisable = cfg.agents?.defaults?.tools?.disable ?? [];\n  const defaultsTypedModels = cfg.agents?.defaults?.models ?? [];\n  for (const id of collectAgentIdsForList(cfg)) {\n    const profile = resolveEffectiveAgentProfile(cfg, id);\n    const entry = listAgentEntries(cfg).find((e) => normalizeAgentId(e.id) === id);\n    const model =\n      profile.primaryModelRef || profile.fallbacks.length > 0\n        ? {\n            ...(profile.primaryModelRef ? { primary: profile.primaryModelRef } : {}),\n            ...(profile.fallbacks.length > 0 ? { fallbacks: profile.fallbacks } : {}),\n          }\n        : undefined;\n    const entrySkills = entry?.skills;\n    const entryDisable = entry?.tools?.disable ?? [];\n    const entryTypedModels = entry?.models;\n    const effectiveTypedMap = resolveEffectiveTypedModels(cfg, id);\n    const effectiveTypedModels = [...effectiveTypedMap.values()];\n    let avatar: string | undefined;\n    try {\n      const identityPath = join(resolveAgentProfileDir(cfg, id), WORKSPACE_FILES.IDENTITY);\n      const content = await readFile(identityPath, 'utf-8');\n      avatar = extractAvatarFromIdentityMarkdown(content);\n    } catch {\n      /* missing IDENTITY.md or unreadable */\n    }\n    agents.push({\n      id,\n      ...(entry?.name?.trim() ? { name: entry.name.trim() } : {}),\n      ...(entry?.description?.trim() ? { description: entry.description.trim() } : {}),\n      ...(avatar ? { avatar } : {}),\n      workspace: profile.resolvedWorkspacePath,\n      profileDir: resolveAgentProfileDir(cfg, id),\n      ...(model ? { model } : {}),\n      typedModels: {\n        defaults: [...defaultsTypedModels],\n        ...(entryTypedModels !== undefined ? { entry: [...entryTypedModels] } : {}),\n        effective: effectiveTypedModels,\n      },\n      isDefault: id === defaultId,\n      skills: {\n        defaults: defaultsSkills ? [...defaultsSkills] : [],\n        ...(entrySkills !== undefined ? { entry: [...entrySkills] } : {}),\n        ...(profile.skillsAllowlist !== undefined\n          ? { effectiveAllowlist: [...profile.skillsAllowlist] }\n          : {}),\n      },\n      tools: {\n        defaultsDisable: [...defaultsDisable],\n        entryDisable: [...entryDisable],\n        effectiveDisable: [...profile.tools.disable].sort((a, b) => a.localeCompare(b)),\n      },\n    });\n  }\n  agents.sort((a, b) => a.id.localeCompare(b.id));\n  return { defaultId, agents, builtinToolIds: [...GATEWAY_BUILTIN_TOOL_IDS] };\n}\n\nexport type CreateAgentBody = {\n  /** Display name stored on the agent entry. */\n  name: string;\n  /** Optional id seed; normalized agent id defaults from `name` when omitted. */\n  id?: string;\n  workspace: string;\n  model?: string;\n  agentDir?: string;\n  description?: string;\n  /** Initial `agents.list[].tools.disable` for the new entry. */\n  toolsDisable?: string[];\n  /** Profile markdown files to write after seeding (e.g. `IDENTITY.md`, `SOUL.md`). */\n  profileFiles?: Record<string, string>;\n};\n\nexport type AgentAdminHttpStatus = 400 | 404 | 409;\n\nexport type AgentAdminResult<T> =\n  | { ok: true; data: T }\n  | { ok: false; error: string; status?: AgentAdminHttpStatus };\n\nfunction requireNonMain(id: string): AgentAdminResult<never> | null {\n  if (normalizeAgentId(id) === DEFAULT_AGENT_ID) {\n    return { ok: false, error: `\"${DEFAULT_AGENT_ID}\" is reserved`, status: 400 };\n  }\n  return null;\n}\n\nexport function prepareCreateAgent(\n  cfg: Config,\n  body: CreateAgentBody,\n): AgentAdminResult<{ nextConfig: Config; agentId: string; workspace: string }> {\n  const name = body.name?.trim() ?? '';\n  if (!name) {\n    return { ok: false, error: 'name is required', status: 400 };\n  }\n  const workspace = body.workspace?.trim() ?? '';\n  if (!workspace) {\n    return { ok: false, error: 'workspace is required', status: 400 };\n  }\n  const idRes = validateAgentIdForNewAgent(body.id, name);\n  if (idRes.ok === false) {\n    return { ok: false, error: idRes.error, status: 400 };\n  }\n  const agentId = idRes.agentId;\n  if (findAgentEntryIndex(listAgentEntries(cfg), agentId) >= 0) {\n    return { ok: false, error: `agent \"${agentId}\" already exists`, status: 409 };\n  }\n  if (body.profileFiles !== undefined) {\n    if (typeof body.profileFiles !== 'object' || body.profileFiles === null || Array.isArray(body.profileFiles)) {\n      return { ok: false, error: 'profileFiles must be an object', status: 400 };\n    }\n    for (const [name, content] of Object.entries(body.profileFiles)) {\n      const bad = assertAllowedFile(name);\n      if (bad) {\n        return bad;\n      }\n      if (typeof content !== 'string') {\n        return { ok: false, error: `profileFiles[\"${name}\"] must be a string`, status: 400 };\n      }\n    }\n  }\n\n  const wsAbs = resolveUserPath(workspace);\n  let next = applyAgentConfig(cfg, {\n    agentId,\n    name,\n    workspace: wsAbs,\n    ...(body.model?.trim() ? { model: body.model.trim() } : {}),\n    ...(body.agentDir?.trim() ? { agentDir: body.agentDir.trim() } : {}),\n    ...(body.description?.trim() ? { description: body.description.trim() } : {}),\n  });\n\n  if (body.toolsDisable !== undefined) {\n    const list = [...listAgentEntries(next)];\n    const idx = findAgentEntryIndex(list, agentId);\n    if (idx >= 0) {\n      type Entry = (typeof list)[number];\n      const entry: Entry = { ...list[idx] };\n      const disable = body.toolsDisable.map((s) => String(s).trim()).filter(Boolean);\n      entry.tools = { ...entry.tools, disable };\n      list[idx] = entry;\n      next = {\n        ...next,\n        agents: {\n          ...next.agents,\n          list,\n        },\n      };\n    }\n  }\n\n  return { ok: true, data: { nextConfig: next, agentId, workspace: wsAbs } };\n}\n\nexport type PreparedBatchCreateAgent = {\n  agentId: string;\n  profileFiles?: Record<string, string>;\n};\n\nexport function prepareCreateAgentsBatch(\n  cfg: Config,\n  bodies: CreateAgentBody[],\n): AgentAdminResult<{ nextConfig: Config; created: PreparedBatchCreateAgent[] }> {\n  if (!Array.isArray(bodies) || bodies.length === 0) {\n    return { ok: false, error: 'agents must be a non-empty array', status: 400 };\n  }\n  let next = cfg;\n  const created: PreparedBatchCreateAgent[] = [];\n  for (const body of bodies) {\n    const prep = prepareCreateAgent(next, body);\n    if (prep.ok === false) {\n      return prep;\n    }\n    next = prep.data.nextConfig;\n    created.push({\n      agentId: prep.data.agentId,\n      ...(body.profileFiles !== undefined ? { profileFiles: body.profileFiles } : {}),\n    });\n  }\n  return { ok: true, data: { nextConfig: next, created } };\n}\n\nexport async function finalizeCreateAgentDirs(\n  cfg: Config,\n  agentId: string,\n  opts?: { profileFiles?: Record<string, string> },\n): Promise<AgentAdminResult<void>> {\n  const wsPath = resolveAgentWorkspaceDir(cfg, agentId);\n  const profilePath = resolveAgentProfileDir(cfg, agentId);\n  const adPath = resolveAgentDir(cfg, agentId);\n  await mkdir(wsPath, { recursive: true });\n  await mkdir(profilePath, { recursive: true });\n  await mkdir(adPath, { recursive: true });\n  const id = normalizeAgentId(agentId);\n  const entry = listAgentEntries(cfg).find((e) => normalizeAgentId(e.id) === id);\n  const displayName = entry?.name?.trim() || id;\n  seedAgentProfileMarkdownFiles(profilePath, wsPath, { displayName });\n\n  const profileFiles = opts?.profileFiles;\n  if (profileFiles && Object.keys(profileFiles).length > 0) {\n    for (const [name, content] of Object.entries(profileFiles)) {\n      const written = await writeAgentProfileFile(cfg, agentId, name, content);\n      if (written.ok === false) {\n        return written;\n      }\n    }\n  }\n\n  return { ok: true, data: undefined };\n}\n\nexport type UpdateAgentBody = {\n  name?: string;\n  description?: string | null;\n  workspace?: string;\n  model?: string | null;\n  agentDir?: string | null;\n  setDefault?: boolean;\n  /** Replace `agents.list[].skills`; `null` removes the key (inherit defaults). */\n  skills?: string[] | null;\n  /** Replace `agents.list[].tools.disable`; `null` clears entry-level disables. */\n  toolsDisable?: string[] | null;\n  /** Replace `agents.list[].models`; `null` removes entry overrides (inherit defaults). */\n  models?: AgentTypedModel[] | null;\n};\n\nexport function prepareUpdateAgent(\n  cfg: Config,\n  agentIdRaw: string,\n  body: UpdateAgentBody,\n): AgentAdminResult<{ nextConfig: Config }> {\n  const agentId = normalizeAgentId(agentIdRaw);\n  let list = [...listAgentEntries(cfg)];\n  let idx = findAgentEntryIndex(list, agentId);\n  if (idx < 0 && agentId === resolveDefaultAgentId(cfg)) {\n    list = [...list, { id: agentId, enabled: true as const }];\n    idx = list.length - 1;\n  }\n  if (idx < 0) {\n    return { ok: false, error: `agent \"${agentId}\" not found`, status: 404 };\n  }\n\n  type Entry = (typeof list)[number];\n  const entry: Entry = { ...list[idx] };\n\n  if (body.name !== undefined) {\n    const n = body.name.trim();\n    if (n) {\n      entry.name = n;\n    }\n  }\n  if (body.description !== undefined) {\n    if (body.description === null || String(body.description).trim() === '') {\n      delete entry.description;\n    } else {\n      entry.description = String(body.description).trim();\n    }\n  }\n  if (body.workspace !== undefined) {\n    const w = body.workspace.trim();\n    if (w) {\n      entry.workspace = resolveUserPath(w);\n    }\n  }\n  if (body.model !== undefined) {\n    if (body.model === null) {\n      delete entry.model;\n    } else {\n      const trimmed = String(body.model).trim();\n      if (!trimmed) {\n        return { ok: false, error: 'model must be a non-empty string or null', status: 400 };\n      }\n      entry.model = { primary: trimmed };\n    }\n  }\n  if (body.agentDir !== undefined) {\n    if (body.agentDir === null || String(body.agentDir).trim() === '') {\n      delete entry.agentDir;\n    } else {\n      entry.agentDir = String(body.agentDir).trim();\n    }\n  }\n\n  if (body.skills !== undefined) {\n    if (body.skills === null) {\n      delete entry.skills;\n    } else {\n      const next = body.skills.map((s) => String(s).trim()).filter(Boolean);\n      if (next.length === 0) {\n        entry.skills = [];\n      } else {\n        entry.skills = next;\n      }\n    }\n  }\n\n  if (body.toolsDisable !== undefined) {\n    if (body.toolsDisable === null) {\n      if (entry.tools) {\n        delete entry.tools.disable;\n        if (Object.keys(entry.tools).length === 0) {\n          delete entry.tools;\n        }\n      }\n    } else {\n      const next = body.toolsDisable.map((s) => String(s).trim()).filter(Boolean);\n      entry.tools = { ...entry.tools, disable: next };\n    }\n  }\n\n  if (body.models !== undefined) {\n    if (body.models === null) {\n      delete entry.models;\n    } else {\n      const normalized = normalizePatchTypedModels(body.models);\n      if (normalized === null || normalized === undefined) {\n        delete entry.models;\n      } else {\n        entry.models = normalized;\n      }\n    }\n  }\n\n  list[idx] = entry;\n  let next: Config = {\n    ...cfg,\n    agents: {\n      ...cfg.agents,\n      list,\n    },\n  };\n\n  if (body.setDefault === true) {\n    next = {\n      ...next,\n      agents: {\n        ...next.agents,\n        default: agentId,\n      },\n    };\n  }\n  return { ok: true, data: { nextConfig: next } };\n}\n\nexport function prepareDeleteAgent(\n  cfg: Config,\n  agentIdRaw: string,\n): AgentAdminResult<{ nextConfig: Config; agentId: string }> {\n  const agentId = normalizeAgentId(agentIdRaw);\n  const reserved = requireNonMain(agentId);\n  if (reserved) {\n    return reserved;\n  }\n  if (findAgentEntryIndex(listAgentEntries(cfg), agentId) < 0) {\n    return { ok: false, error: `agent \"${agentId}\" not found`, status: 404 };\n  }\n  const { config: pruned } = pruneAgentConfig(cfg, agentId);\n  return { ok: true, data: { nextConfig: pruned, agentId } };\n}\n\nexport async function runAfterDeletePurge(cfg: Config, agentId: string): Promise<void> {\n  await removeAgentDirsFromDisk(cfg, agentId);\n}\n\nexport type AgentFileEntry = {\n  name: string;\n  missing: boolean;\n  size?: number;\n  updatedAtMs?: number;\n};\n\nasync function profileMarkdownRootReal(cfg: Config, agentId: string): Promise<string> {\n  const dir = resolveAgentProfileDir(cfg, agentId);\n  await mkdir(dir, { recursive: true });\n  try {\n    return await realpath(dir);\n  } catch {\n    return pathResolve(dir);\n  }\n}\n\nfunction assertAllowedFile(name: string): AgentAdminResult<never> | null {\n  if (!name || name.includes('/') || name.includes('\\\\') || !EDITABLE_PROFILE_MARKDOWN_NAMES.has(name)) {\n    return { ok: false, error: `unsupported file \"${name}\"`, status: 400 };\n  }\n  return null;\n}\n\nexport async function listAgentProfileFiles(\n  cfg: Config,\n  agentId: string,\n): Promise<AgentAdminResult<{ agentId: string; profileDir: string; files: AgentFileEntry[] }>> {\n  const id = normalizeAgentId(agentId);\n  if (collectAgentIdsForList(cfg).every((x) => x !== id)) {\n    return { ok: false, error: `agent \"${id}\" not found`, status: 404 };\n  }\n  const root = await profileMarkdownRootReal(cfg, id);\n  const names = [...EDITABLE_PROFILE_MARKDOWN_NAMES];\n  const files: AgentFileEntry[] = [];\n  for (const name of names.sort((a, b) => a.localeCompare(b))) {\n    const abs = resolveWorkspaceSafePath(root, name);\n    if (!abs) {\n      continue;\n    }\n    try {\n      const st = await stat(abs);\n      if (!st.isFile()) {\n        continue;\n      }\n      files.push({\n        name,\n        missing: false,\n        size: st.size,\n        updatedAtMs: st.mtimeMs,\n      });\n    } catch {\n      files.push({ name, missing: true });\n    }\n  }\n  files.sort((a, b) => a.name.localeCompare(b.name));\n  return { ok: true, data: { agentId: id, profileDir: root, files } };\n}\n\nexport async function readAgentProfileFile(\n  cfg: Config,\n  agentId: string,\n  name: string,\n): Promise<AgentAdminResult<{ agentId: string; content: string; path: string }>> {\n  const bad = assertAllowedFile(name);\n  if (bad) {\n    return bad;\n  }\n  const id = normalizeAgentId(agentId);\n  if (collectAgentIdsForList(cfg).every((x) => x !== id)) {\n    return { ok: false, error: `agent \"${id}\" not found`, status: 404 };\n  }\n  const root = await profileMarkdownRootReal(cfg, id);\n  const abs = resolveWorkspaceSafePath(root, name);\n  if (!abs) {\n    return { ok: false, error: 'invalid path', status: 400 };\n  }\n  try {\n    const content = await readFile(abs, 'utf-8');\n    return { ok: true, data: { agentId: id, content, path: abs } };\n  } catch {\n    return { ok: false, error: 'file not found', status: 404 };\n  }\n}\n\nexport async function writeAgentProfileFile(\n  cfg: Config,\n  agentId: string,\n  name: string,\n  content: string,\n): Promise<AgentAdminResult<{ agentId: string; path: string }>> {\n  const bad = assertAllowedFile(name);\n  if (bad) {\n    return bad;\n  }\n  const id = normalizeAgentId(agentId);\n  if (collectAgentIdsForList(cfg).every((x) => x !== id)) {\n    return { ok: false, error: `agent \"${id}\" not found`, status: 404 };\n  }\n  const root = await profileMarkdownRootReal(cfg, id);\n  const abs = resolveWorkspaceSafePath(root, name);\n  if (!abs) {\n    return { ok: false, error: 'invalid path', status: 400 };\n  }\n  const rootReal = await profileMarkdownRootReal(cfg, id);\n  if (!isPathUnderWorkspace(rootReal, abs)) {\n    return { ok: false, error: 'path escapes profile markdown root', status: 400 };\n  }\n  await writeFile(abs, content, 'utf-8');\n  return { ok: true, data: { agentId: id, path: abs } };\n}\n\n// ---------------------------------------------------------------------------\n// Binary agent avatar (profile markdown root dir, not a SOUL/IDENTITY markdown file)\n// ---------------------------------------------------------------------------\n\nconst AGENT_AVATAR_MAX_BYTES = 512 * 1024;\nconst AGENT_AVATAR_BASENAME = 'agent-avatar';\n\nconst AGENT_AVATAR_EXTENSIONS = ['.png', '.jpg', '.jpeg', '.webp'] as const;\n\nfunction agentAvatarFilenames(): string[] {\n  return AGENT_AVATAR_EXTENSIONS.map((ext) => `${AGENT_AVATAR_BASENAME}${ext}`);\n}\n\nfunction mimeToExt(mime: string): '.png' | '.jpg' | '.jpeg' | '.webp' | null {\n  const m = mime.toLowerCase().trim();\n  if (m === 'image/png') return '.png';\n  if (m === 'image/jpeg' || m === 'image/jpg') return '.jpg';\n  if (m === 'image/webp') return '.webp';\n  return null;\n}\n\nfunction detectImageMimeFromBytes(buf: Uint8Array): 'image/png' | 'image/jpeg' | 'image/webp' | null {\n  if (buf.length >= 8 && buf[0] === 0x89 && buf[1] === 0x50 && buf[2] === 0x4e && buf[3] === 0x47) {\n    return 'image/png';\n  }\n  if (buf.length >= 3 && buf[0] === 0xff && buf[1] === 0xd8 && buf[2] === 0xff) {\n    return 'image/jpeg';\n  }\n  if (\n    buf.length >= 12 &&\n    buf[0] === 0x52 &&\n    buf[1] === 0x49 &&\n    buf[2] === 0x46 &&\n    buf[3] === 0x46 &&\n    buf[8] === 0x57 &&\n    buf[9] === 0x45 &&\n    buf[10] === 0x42 &&\n    buf[11] === 0x50\n  ) {\n    return 'image/webp';\n  }\n  return null;\n}\n\nfunction assertAgentExistsForAvatar(cfg: Config, id: string): AgentAdminResult<never> | null {\n  if (collectAgentIdsForList(cfg).every((x) => x !== id)) {\n    return { ok: false, error: `agent \"${id}\" not found`, status: 404 };\n  }\n  return null;\n}\n\nexport async function readAgentAvatarFile(\n  cfg: Config,\n  agentId: string,\n): Promise<AgentAdminResult<{ agentId: string; buffer: Buffer; contentType: string; path: string }>> {\n  const missingAgent = assertAgentExistsForAvatar(cfg, agentId);\n  if (missingAgent) {\n    return missingAgent;\n  }\n  const id = normalizeAgentId(agentId);\n  const root = await profileMarkdownRootReal(cfg, id);\n  for (const name of agentAvatarFilenames()) {\n    const abs = resolveWorkspaceSafePath(root, name);\n    if (!abs) {\n      continue;\n    }\n    try {\n      const st = await stat(abs);\n      if (!st.isFile() || st.size <= 0 || st.size > AGENT_AVATAR_MAX_BYTES) {\n        continue;\n      }\n      const buffer = await readFile(abs);\n      const detected = detectImageMimeFromBytes(buffer);\n      if (!detected) {\n        continue;\n      }\n      return { ok: true, data: { agentId: id, buffer, contentType: detected, path: abs } };\n    } catch {\n      /* try next */\n    }\n  }\n  return { ok: false, error: 'avatar not found', status: 404 };\n}\n\nexport async function writeAgentAvatarFromBase64(\n  cfg: Config,\n  agentId: string,\n  base64: string,\n  mimeType: string,\n): Promise<AgentAdminResult<{ agentId: string; path: string }>> {\n  const missingAgent = assertAgentExistsForAvatar(cfg, agentId);\n  if (missingAgent) {\n    return missingAgent;\n  }\n  const id = normalizeAgentId(agentId);\n  const ext = mimeToExt(mimeType);\n  if (!ext) {\n    return { ok: false, error: 'unsupported mimeType (use image/png, image/jpeg, or image/webp)', status: 400 };\n  }\n  let raw: Buffer;\n  try {\n    raw = Buffer.from(base64, 'base64');\n  } catch {\n    return { ok: false, error: 'invalid base64', status: 400 };\n  }\n  if (raw.length === 0 || raw.length > AGENT_AVATAR_MAX_BYTES) {\n    return { ok: false, error: `avatar must be non-empty and at most ${AGENT_AVATAR_MAX_BYTES} bytes`, status: 400 };\n  }\n  const detected = detectImageMimeFromBytes(raw);\n  if (!detected || !extMatchesDetectedMime(ext, detected)) {\n    return { ok: false, error: 'file content does not match declared image type', status: 400 };\n  }\n\n  const root = await profileMarkdownRootReal(cfg, id);\n  const rootReal = await profileMarkdownRootReal(cfg, id);\n  const targetName = `${AGENT_AVATAR_BASENAME}${ext}`;\n  const abs = resolveWorkspaceSafePath(root, targetName);\n  if (!abs || !isPathUnderWorkspace(rootReal, abs)) {\n    return { ok: false, error: 'invalid path', status: 400 };\n  }\n  for (const name of agentAvatarFilenames()) {\n    if (name === targetName) {\n      continue;\n    }\n    const other = resolveWorkspaceSafePath(root, name);\n    if (other && isPathUnderWorkspace(rootReal, other)) {\n      try {\n        await unlink(other);\n      } catch {\n        /* absent */\n      }\n    }\n  }\n  await writeFile(abs, raw);\n  return { ok: true, data: { agentId: id, path: abs } };\n}\n\nfunction mimeToExtToMime(ext: '.png' | '.jpg' | '.jpeg' | '.webp'): 'image/png' | 'image/jpeg' | 'image/webp' {\n  if (ext === '.png') return 'image/png';\n  if (ext === '.webp') return 'image/webp';\n  return 'image/jpeg';\n}\n\nfunction extMatchesDetectedMime(\n  ext: '.png' | '.jpg' | '.jpeg' | '.webp',\n  detected: 'image/png' | 'image/jpeg' | 'image/webp',\n): boolean {\n  return detected === mimeToExtToMime(ext);\n}\n\n/** Remove any `agent-avatar.*` in the agent profile markdown root. Idempotent: ok even when no file existed. */\nexport async function deleteAgentAvatarFile(cfg: Config, agentId: string): Promise<AgentAdminResult<{ agentId: string }>> {\n  const missingAgent = assertAgentExistsForAvatar(cfg, agentId);\n  if (missingAgent) {\n    return missingAgent;\n  }\n  const id = normalizeAgentId(agentId);\n  const root = await profileMarkdownRootReal(cfg, id);\n  const rootReal = await profileMarkdownRootReal(cfg, id);\n  for (const name of agentAvatarFilenames()) {\n    const abs = resolveWorkspaceSafePath(root, name);\n    if (!abs || !isPathUnderWorkspace(rootReal, abs)) {\n      continue;\n    }\n    try {\n      await unlink(abs);\n    } catch {\n      /* absent */\n    }\n  }\n  return { ok: true, data: { agentId: id } };\n}\n"],"mappings":";;;;;;;;;;;;;;;;kBAiBiC;YAUoB;AAQrD,MAAM,kCAAkC,IAAI,IAAY,CACtD,GAAG,qCACH,gBAAgB,UACjB,CAAC;AAsCF,SAAS,uBAAuB,KAAuB;CACrD,MAAM,UAAU,iBAAiB,IAAI,CAAC,QAAQ,MAAM,EAAE,YAAY,MAAM;CACxE,MAAM,YAAY,sBAAsB,IAAI;AAC5C,KAAI,QAAQ,WAAW,EACrB,QAAO,CAAC,UAAU;CAEpB,MAAM,sBAAM,IAAI,KAAa;AAC7B,MAAK,MAAM,KAAK,QACd,KAAI,IAAI,iBAAiB,EAAE,GAAG,CAAC;AAEjC,KAAI,IAAI,UAAU;AAClB,QAAO,CAAC,GAAG,IAAI;;;AAIjB,SAAgB,kCAAkC,SAAqC;AACrF,MAAK,MAAM,QAAQ,QAAQ,MAAM,KAAK,EAAE;EACtC,MAAM,QAAQ,KAAK,MAAM,kCAAkC;AAC3D,MAAI,OAAO;GACT,MAAM,IAAI,MAAM,IAAI,MAAM,IAAI;AAC9B,UAAO,EAAE,SAAS,IAAI,IAAI,KAAA;;;;AAMhC,eAAsB,kBAAkB,KAAiD;CACvF,MAAM,YAAY,sBAAsB,IAAI;CAC5C,MAAM,SAA4B,EAAE;CACpC,MAAM,iBAAiB,IAAI,QAAQ,UAAU;CAC7C,MAAM,kBAAkB,IAAI,QAAQ,UAAU,OAAO,WAAW,EAAE;CAClE,MAAM,sBAAsB,IAAI,QAAQ,UAAU,UAAU,EAAE;AAC9D,MAAK,MAAM,MAAM,uBAAuB,IAAI,EAAE;EAC5C,MAAM,UAAU,6BAA6B,KAAK,GAAG;EACrD,MAAM,QAAQ,iBAAiB,IAAI,CAAC,MAAM,MAAM,iBAAiB,EAAE,GAAG,KAAK,GAAG;EAC9E,MAAM,QACJ,QAAQ,mBAAmB,QAAQ,UAAU,SAAS,IAClD;GACE,GAAI,QAAQ,kBAAkB,EAAE,SAAS,QAAQ,iBAAiB,GAAG,EAAE;GACvE,GAAI,QAAQ,UAAU,SAAS,IAAI,EAAE,WAAW,QAAQ,WAAW,GAAG,EAAE;GACzE,GACD,KAAA;EACN,MAAM,cAAc,OAAO;EAC3B,MAAM,eAAe,OAAO,OAAO,WAAW,EAAE;EAChD,MAAM,mBAAmB,OAAO;EAEhC,MAAM,uBAAuB,CAAC,GADJ,4BAA4B,KAAK,GACT,CAAC,QAAQ,CAAC;EAC5D,IAAI;AACJ,MAAI;AAGF,YAAS,kCAAkC,MADrB,SADD,KAAK,uBAAuB,KAAK,GAAG,EAAE,gBAAgB,SAChC,EAAE,QAAQ,CACF;UAC7C;AAGR,SAAO,KAAK;GACV;GACA,GAAI,OAAO,MAAM,MAAM,GAAG,EAAE,MAAM,MAAM,KAAK,MAAM,EAAE,GAAG,EAAE;GAC1D,GAAI,OAAO,aAAa,MAAM,GAAG,EAAE,aAAa,MAAM,YAAY,MAAM,EAAE,GAAG,EAAE;GAC/E,GAAI,SAAS,EAAE,QAAQ,GAAG,EAAE;GAC5B,WAAW,QAAQ;GACnB,YAAY,uBAAuB,KAAK,GAAG;GAC3C,GAAI,QAAQ,EAAE,OAAO,GAAG,EAAE;GAC1B,aAAa;IACX,UAAU,CAAC,GAAG,oBAAoB;IAClC,GAAI,qBAAqB,KAAA,IAAY,EAAE,OAAO,CAAC,GAAG,iBAAiB,EAAE,GAAG,EAAE;IAC1E,WAAW;IACZ;GACD,WAAW,OAAO;GAClB,QAAQ;IACN,UAAU,iBAAiB,CAAC,GAAG,eAAe,GAAG,EAAE;IACnD,GAAI,gBAAgB,KAAA,IAAY,EAAE,OAAO,CAAC,GAAG,YAAY,EAAE,GAAG,EAAE;IAChE,GAAI,QAAQ,oBAAoB,KAAA,IAC5B,EAAE,oBAAoB,CAAC,GAAG,QAAQ,gBAAgB,EAAE,GACpD,EAAE;IACP;GACD,OAAO;IACL,iBAAiB,CAAC,GAAG,gBAAgB;IACrC,cAAc,CAAC,GAAG,aAAa;IAC/B,kBAAkB,CAAC,GAAG,QAAQ,MAAM,QAAQ,CAAC,MAAM,GAAG,MAAM,EAAE,cAAc,EAAE,CAAC;IAChF;GACF,CAAC;;AAEJ,QAAO,MAAM,GAAG,MAAM,EAAE,GAAG,cAAc,EAAE,GAAG,CAAC;AAC/C,QAAO;EAAE;EAAW;EAAQ,gBAAgB,CAAC,GAAG,yBAAyB;EAAE;;AAwB7E,SAAS,eAAe,IAA4C;AAClE,KAAI,iBAAiB,GAAG,KAAA,OACtB,QAAO;EAAE,IAAI;EAAO,OAAO,IAAI,iBAAiB;EAAgB,QAAQ;EAAK;AAE/E,QAAO;;AAGT,SAAgB,mBACd,KACA,MAC8E;CAC9E,MAAM,OAAO,KAAK,MAAM,MAAM,IAAI;AAClC,KAAI,CAAC,KACH,QAAO;EAAE,IAAI;EAAO,OAAO;EAAoB,QAAQ;EAAK;CAE9D,MAAM,YAAY,KAAK,WAAW,MAAM,IAAI;AAC5C,KAAI,CAAC,UACH,QAAO;EAAE,IAAI;EAAO,OAAO;EAAyB,QAAQ;EAAK;CAEnE,MAAM,QAAQ,2BAA2B,KAAK,IAAI,KAAK;AACvD,KAAI,MAAM,OAAO,MACf,QAAO;EAAE,IAAI;EAAO,OAAO,MAAM;EAAO,QAAQ;EAAK;CAEvD,MAAM,UAAU,MAAM;AACtB,KAAI,oBAAoB,iBAAiB,IAAI,EAAE,QAAQ,IAAI,EACzD,QAAO;EAAE,IAAI;EAAO,OAAO,UAAU,QAAQ;EAAmB,QAAQ;EAAK;AAE/E,KAAI,KAAK,iBAAiB,KAAA,GAAW;AACnC,MAAI,OAAO,KAAK,iBAAiB,YAAY,KAAK,iBAAiB,QAAQ,MAAM,QAAQ,KAAK,aAAa,CACzG,QAAO;GAAE,IAAI;GAAO,OAAO;GAAkC,QAAQ;GAAK;AAE5E,OAAK,MAAM,CAAC,MAAM,YAAY,OAAO,QAAQ,KAAK,aAAa,EAAE;GAC/D,MAAM,MAAM,kBAAkB,KAAK;AACnC,OAAI,IACF,QAAO;AAET,OAAI,OAAO,YAAY,SACrB,QAAO;IAAE,IAAI;IAAO,OAAO,iBAAiB,KAAK;IAAsB,QAAQ;IAAK;;;CAK1F,MAAM,QAAQ,gBAAgB,UAAU;CACxC,IAAI,OAAO,iBAAiB,KAAK;EAC/B;EACA;EACA,WAAW;EACX,GAAI,KAAK,OAAO,MAAM,GAAG,EAAE,OAAO,KAAK,MAAM,MAAM,EAAE,GAAG,EAAE;EAC1D,GAAI,KAAK,UAAU,MAAM,GAAG,EAAE,UAAU,KAAK,SAAS,MAAM,EAAE,GAAG,EAAE;EACnE,GAAI,KAAK,aAAa,MAAM,GAAG,EAAE,aAAa,KAAK,YAAY,MAAM,EAAE,GAAG,EAAE;EAC7E,CAAC;AAEF,KAAI,KAAK,iBAAiB,KAAA,GAAW;EACnC,MAAM,OAAO,CAAC,GAAG,iBAAiB,KAAK,CAAC;EACxC,MAAM,MAAM,oBAAoB,MAAM,QAAQ;AAC9C,MAAI,OAAO,GAAG;GAEZ,MAAM,QAAe,EAAE,GAAG,KAAK,MAAM;GACrC,MAAM,UAAU,KAAK,aAAa,KAAK,MAAM,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC,OAAO,QAAQ;AAC9E,SAAM,QAAQ;IAAE,GAAG,MAAM;IAAO;IAAS;AACzC,QAAK,OAAO;AACZ,UAAO;IACL,GAAG;IACH,QAAQ;KACN,GAAG,KAAK;KACR;KACD;IACF;;;AAIL,QAAO;EAAE,IAAI;EAAM,MAAM;GAAE,YAAY;GAAM;GAAS,WAAW;GAAO;EAAE;;AAQ5E,SAAgB,yBACd,KACA,QAC+E;AAC/E,KAAI,CAAC,MAAM,QAAQ,OAAO,IAAI,OAAO,WAAW,EAC9C,QAAO;EAAE,IAAI;EAAO,OAAO;EAAoC,QAAQ;EAAK;CAE9E,IAAI,OAAO;CACX,MAAM,UAAsC,EAAE;AAC9C,MAAK,MAAM,QAAQ,QAAQ;EACzB,MAAM,OAAO,mBAAmB,MAAM,KAAK;AAC3C,MAAI,KAAK,OAAO,MACd,QAAO;AAET,SAAO,KAAK,KAAK;AACjB,UAAQ,KAAK;GACX,SAAS,KAAK,KAAK;GACnB,GAAI,KAAK,iBAAiB,KAAA,IAAY,EAAE,cAAc,KAAK,cAAc,GAAG,EAAE;GAC/E,CAAC;;AAEJ,QAAO;EAAE,IAAI;EAAM,MAAM;GAAE,YAAY;GAAM;GAAS;EAAE;;AAG1D,eAAsB,wBACpB,KACA,SACA,MACiC;CACjC,MAAM,SAAS,yBAAyB,KAAK,QAAQ;CACrD,MAAM,cAAc,uBAAuB,KAAK,QAAQ;CACxD,MAAM,SAAS,gBAAgB,KAAK,QAAQ;AAC5C,OAAM,MAAM,QAAQ,EAAE,WAAW,MAAM,CAAC;AACxC,OAAM,MAAM,aAAa,EAAE,WAAW,MAAM,CAAC;AAC7C,OAAM,MAAM,QAAQ,EAAE,WAAW,MAAM,CAAC;CACxC,MAAM,KAAK,iBAAiB,QAAQ;AAGpC,+BAA8B,aAAa,QAAQ,EAAE,aAFvC,iBAAiB,IAAI,CAAC,MAAM,MAAM,iBAAiB,EAAE,GAAG,KAAK,GAClD,EAAE,MAAM,MAAM,IAAI,IACuB,CAAC;CAEnE,MAAM,eAAe,MAAM;AAC3B,KAAI,gBAAgB,OAAO,KAAK,aAAa,CAAC,SAAS,EACrD,MAAK,MAAM,CAAC,MAAM,YAAY,OAAO,QAAQ,aAAa,EAAE;EAC1D,MAAM,UAAU,MAAM,sBAAsB,KAAK,SAAS,MAAM,QAAQ;AACxE,MAAI,QAAQ,OAAO,MACjB,QAAO;;AAKb,QAAO;EAAE,IAAI;EAAM,MAAM,KAAA;EAAW;;AAkBtC,SAAgB,mBACd,KACA,YACA,MAC0C;CAC1C,MAAM,UAAU,iBAAiB,WAAW;CAC5C,IAAI,OAAO,CAAC,GAAG,iBAAiB,IAAI,CAAC;CACrC,IAAI,MAAM,oBAAoB,MAAM,QAAQ;AAC5C,KAAI,MAAM,KAAK,YAAY,sBAAsB,IAAI,EAAE;AACrD,SAAO,CAAC,GAAG,MAAM;GAAE,IAAI;GAAS,SAAS;GAAe,CAAC;AACzD,QAAM,KAAK,SAAS;;AAEtB,KAAI,MAAM,EACR,QAAO;EAAE,IAAI;EAAO,OAAO,UAAU,QAAQ;EAAc,QAAQ;EAAK;CAI1E,MAAM,QAAe,EAAE,GAAG,KAAK,MAAM;AAErC,KAAI,KAAK,SAAS,KAAA,GAAW;EAC3B,MAAM,IAAI,KAAK,KAAK,MAAM;AAC1B,MAAI,EACF,OAAM,OAAO;;AAGjB,KAAI,KAAK,gBAAgB,KAAA,EACvB,KAAI,KAAK,gBAAgB,QAAQ,OAAO,KAAK,YAAY,CAAC,MAAM,KAAK,GACnE,QAAO,MAAM;KAEb,OAAM,cAAc,OAAO,KAAK,YAAY,CAAC,MAAM;AAGvD,KAAI,KAAK,cAAc,KAAA,GAAW;EAChC,MAAM,IAAI,KAAK,UAAU,MAAM;AAC/B,MAAI,EACF,OAAM,YAAY,gBAAgB,EAAE;;AAGxC,KAAI,KAAK,UAAU,KAAA,EACjB,KAAI,KAAK,UAAU,KACjB,QAAO,MAAM;MACR;EACL,MAAM,UAAU,OAAO,KAAK,MAAM,CAAC,MAAM;AACzC,MAAI,CAAC,QACH,QAAO;GAAE,IAAI;GAAO,OAAO;GAA4C,QAAQ;GAAK;AAEtF,QAAM,QAAQ,EAAE,SAAS,SAAS;;AAGtC,KAAI,KAAK,aAAa,KAAA,EACpB,KAAI,KAAK,aAAa,QAAQ,OAAO,KAAK,SAAS,CAAC,MAAM,KAAK,GAC7D,QAAO,MAAM;KAEb,OAAM,WAAW,OAAO,KAAK,SAAS,CAAC,MAAM;AAIjD,KAAI,KAAK,WAAW,KAAA,EAClB,KAAI,KAAK,WAAW,KAClB,QAAO,MAAM;MACR;EACL,MAAM,OAAO,KAAK,OAAO,KAAK,MAAM,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC,OAAO,QAAQ;AACrE,MAAI,KAAK,WAAW,EAClB,OAAM,SAAS,EAAE;MAEjB,OAAM,SAAS;;AAKrB,KAAI,KAAK,iBAAiB,KAAA,EACxB,KAAI,KAAK,iBAAiB;MACpB,MAAM,OAAO;AACf,UAAO,MAAM,MAAM;AACnB,OAAI,OAAO,KAAK,MAAM,MAAM,CAAC,WAAW,EACtC,QAAO,MAAM;;QAGZ;EACL,MAAM,OAAO,KAAK,aAAa,KAAK,MAAM,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC,OAAO,QAAQ;AAC3E,QAAM,QAAQ;GAAE,GAAG,MAAM;GAAO,SAAS;GAAM;;AAInD,KAAI,KAAK,WAAW,KAAA,EAClB,KAAI,KAAK,WAAW,KAClB,QAAO,MAAM;MACR;EACL,MAAM,aAAa,0BAA0B,KAAK,OAAO;AACzD,MAAI,eAAe,QAAQ,eAAe,KAAA,EACxC,QAAO,MAAM;MAEb,OAAM,SAAS;;AAKrB,MAAK,OAAO;CACZ,IAAI,OAAe;EACjB,GAAG;EACH,QAAQ;GACN,GAAG,IAAI;GACP;GACD;EACF;AAED,KAAI,KAAK,eAAe,KACtB,QAAO;EACL,GAAG;EACH,QAAQ;GACN,GAAG,KAAK;GACR,SAAS;GACV;EACF;AAEH,QAAO;EAAE,IAAI;EAAM,MAAM,EAAE,YAAY,MAAM;EAAE;;AAGjD,SAAgB,mBACd,KACA,YAC2D;CAC3D,MAAM,UAAU,iBAAiB,WAAW;CAC5C,MAAM,WAAW,eAAe,QAAQ;AACxC,KAAI,SACF,QAAO;AAET,KAAI,oBAAoB,iBAAiB,IAAI,EAAE,QAAQ,GAAG,EACxD,QAAO;EAAE,IAAI;EAAO,OAAO,UAAU,QAAQ;EAAc,QAAQ;EAAK;CAE1E,MAAM,EAAE,QAAQ,WAAW,iBAAiB,KAAK,QAAQ;AACzD,QAAO;EAAE,IAAI;EAAM,MAAM;GAAE,YAAY;GAAQ;GAAS;EAAE;;AAG5D,eAAsB,oBAAoB,KAAa,SAAgC;AACrF,OAAM,wBAAwB,KAAK,QAAQ;;AAU7C,eAAe,wBAAwB,KAAa,SAAkC;CACpF,MAAM,MAAM,uBAAuB,KAAK,QAAQ;AAChD,OAAM,MAAM,KAAK,EAAE,WAAW,MAAM,CAAC;AACrC,KAAI;AACF,SAAO,MAAM,SAAS,IAAI;SACpB;AACN,SAAOA,QAAY,IAAI;;;AAI3B,SAAS,kBAAkB,MAA8C;AACvE,KAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS,KAAK,IAAI,CAAC,gCAAgC,IAAI,KAAK,CAClG,QAAO;EAAE,IAAI;EAAO,OAAO,qBAAqB,KAAK;EAAI,QAAQ;EAAK;AAExE,QAAO;;AAGT,eAAsB,sBACpB,KACA,SAC6F;CAC7F,MAAM,KAAK,iBAAiB,QAAQ;AACpC,KAAI,uBAAuB,IAAI,CAAC,OAAO,MAAM,MAAM,GAAG,CACpD,QAAO;EAAE,IAAI;EAAO,OAAO,UAAU,GAAG;EAAc,QAAQ;EAAK;CAErE,MAAM,OAAO,MAAM,wBAAwB,KAAK,GAAG;CACnD,MAAM,QAAQ,CAAC,GAAG,gCAAgC;CAClD,MAAM,QAA0B,EAAE;AAClC,MAAK,MAAM,QAAQ,MAAM,MAAM,GAAG,MAAM,EAAE,cAAc,EAAE,CAAC,EAAE;EAC3D,MAAM,MAAM,yBAAyB,MAAM,KAAK;AAChD,MAAI,CAAC,IACH;AAEF,MAAI;GACF,MAAM,KAAK,MAAM,KAAK,IAAI;AAC1B,OAAI,CAAC,GAAG,QAAQ,CACd;AAEF,SAAM,KAAK;IACT;IACA,SAAS;IACT,MAAM,GAAG;IACT,aAAa,GAAG;IACjB,CAAC;UACI;AACN,SAAM,KAAK;IAAE;IAAM,SAAS;IAAM,CAAC;;;AAGvC,OAAM,MAAM,GAAG,MAAM,EAAE,KAAK,cAAc,EAAE,KAAK,CAAC;AAClD,QAAO;EAAE,IAAI;EAAM,MAAM;GAAE,SAAS;GAAI,YAAY;GAAM;GAAO;EAAE;;AAGrE,eAAsB,qBACpB,KACA,SACA,MAC+E;CAC/E,MAAM,MAAM,kBAAkB,KAAK;AACnC,KAAI,IACF,QAAO;CAET,MAAM,KAAK,iBAAiB,QAAQ;AACpC,KAAI,uBAAuB,IAAI,CAAC,OAAO,MAAM,MAAM,GAAG,CACpD,QAAO;EAAE,IAAI;EAAO,OAAO,UAAU,GAAG;EAAc,QAAQ;EAAK;CAGrE,MAAM,MAAM,yBAAyB,MADlB,wBAAwB,KAAK,GAAG,EACR,KAAK;AAChD,KAAI,CAAC,IACH,QAAO;EAAE,IAAI;EAAO,OAAO;EAAgB,QAAQ;EAAK;AAE1D,KAAI;AAEF,SAAO;GAAE,IAAI;GAAM,MAAM;IAAE,SAAS;IAAI,SAAA,MADlB,SAAS,KAAK,QAAQ;IACK,MAAM;IAAK;GAAE;SACxD;AACN,SAAO;GAAE,IAAI;GAAO,OAAO;GAAkB,QAAQ;GAAK;;;AAI9D,eAAsB,sBACpB,KACA,SACA,MACA,SAC8D;CAC9D,MAAM,MAAM,kBAAkB,KAAK;AACnC,KAAI,IACF,QAAO;CAET,MAAM,KAAK,iBAAiB,QAAQ;AACpC,KAAI,uBAAuB,IAAI,CAAC,OAAO,MAAM,MAAM,GAAG,CACpD,QAAO;EAAE,IAAI;EAAO,OAAO,UAAU,GAAG;EAAc,QAAQ;EAAK;CAGrE,MAAM,MAAM,yBAAyB,MADlB,wBAAwB,KAAK,GAAG,EACR,KAAK;AAChD,KAAI,CAAC,IACH,QAAO;EAAE,IAAI;EAAO,OAAO;EAAgB,QAAQ;EAAK;AAG1D,KAAI,CAAC,qBAAqB,MADH,wBAAwB,KAAK,GAAG,EACnB,IAAI,CACtC,QAAO;EAAE,IAAI;EAAO,OAAO;EAAsC,QAAQ;EAAK;AAEhF,OAAM,UAAU,KAAK,SAAS,QAAQ;AACtC,QAAO;EAAE,IAAI;EAAM,MAAM;GAAE,SAAS;GAAI,MAAM;GAAK;EAAE;;AAOvD,MAAM,yBAAyB,MAAM;AACrC,MAAM,wBAAwB;AAE9B,MAAM,0BAA0B;CAAC;CAAQ;CAAQ;CAAS;CAAQ;AAElE,SAAS,uBAAiC;AACxC,QAAO,wBAAwB,KAAK,QAAQ,GAAG,wBAAwB,MAAM;;AAG/E,SAAS,UAAU,MAA0D;CAC3E,MAAM,IAAI,KAAK,aAAa,CAAC,MAAM;AACnC,KAAI,MAAM,YAAa,QAAO;AAC9B,KAAI,MAAM,gBAAgB,MAAM,YAAa,QAAO;AACpD,KAAI,MAAM,aAAc,QAAO;AAC/B,QAAO;;AAGT,SAAS,yBAAyB,KAAmE;AACnG,KAAI,IAAI,UAAU,KAAK,IAAI,OAAO,OAAQ,IAAI,OAAO,MAAQ,IAAI,OAAO,MAAQ,IAAI,OAAO,GACzF,QAAO;AAET,KAAI,IAAI,UAAU,KAAK,IAAI,OAAO,OAAQ,IAAI,OAAO,OAAQ,IAAI,OAAO,IACtE,QAAO;AAET,KACE,IAAI,UAAU,MACd,IAAI,OAAO,MACX,IAAI,OAAO,MACX,IAAI,OAAO,MACX,IAAI,OAAO,MACX,IAAI,OAAO,MACX,IAAI,OAAO,MACX,IAAI,QAAQ,MACZ,IAAI,QAAQ,GAEZ,QAAO;AAET,QAAO;;AAGT,SAAS,2BAA2B,KAAa,IAA4C;AAC3F,KAAI,uBAAuB,IAAI,CAAC,OAAO,MAAM,MAAM,GAAG,CACpD,QAAO;EAAE,IAAI;EAAO,OAAO,UAAU,GAAG;EAAc,QAAQ;EAAK;AAErE,QAAO;;AAGT,eAAsB,oBACpB,KACA,SACmG;CACnG,MAAM,eAAe,2BAA2B,KAAK,QAAQ;AAC7D,KAAI,aACF,QAAO;CAET,MAAM,KAAK,iBAAiB,QAAQ;CACpC,MAAM,OAAO,MAAM,wBAAwB,KAAK,GAAG;AACnD,MAAK,MAAM,QAAQ,sBAAsB,EAAE;EACzC,MAAM,MAAM,yBAAyB,MAAM,KAAK;AAChD,MAAI,CAAC,IACH;AAEF,MAAI;GACF,MAAM,KAAK,MAAM,KAAK,IAAI;AAC1B,OAAI,CAAC,GAAG,QAAQ,IAAI,GAAG,QAAQ,KAAK,GAAG,OAAO,uBAC5C;GAEF,MAAM,SAAS,MAAM,SAAS,IAAI;GAClC,MAAM,WAAW,yBAAyB,OAAO;AACjD,OAAI,CAAC,SACH;AAEF,UAAO;IAAE,IAAI;IAAM,MAAM;KAAE,SAAS;KAAI;KAAQ,aAAa;KAAU,MAAM;KAAK;IAAE;UAC9E;;AAIV,QAAO;EAAE,IAAI;EAAO,OAAO;EAAoB,QAAQ;EAAK;;AAG9D,eAAsB,2BACpB,KACA,SACA,QACA,UAC8D;CAC9D,MAAM,eAAe,2BAA2B,KAAK,QAAQ;AAC7D,KAAI,aACF,QAAO;CAET,MAAM,KAAK,iBAAiB,QAAQ;CACpC,MAAM,MAAM,UAAU,SAAS;AAC/B,KAAI,CAAC,IACH,QAAO;EAAE,IAAI;EAAO,OAAO;EAAmE,QAAQ;EAAK;CAE7G,IAAI;AACJ,KAAI;AACF,QAAM,OAAO,KAAK,QAAQ,SAAS;SAC7B;AACN,SAAO;GAAE,IAAI;GAAO,OAAO;GAAkB,QAAQ;GAAK;;AAE5D,KAAI,IAAI,WAAW,KAAK,IAAI,SAAS,uBACnC,QAAO;EAAE,IAAI;EAAO,OAAO,wCAAwC,uBAAuB;EAAS,QAAQ;EAAK;CAElH,MAAM,WAAW,yBAAyB,IAAI;AAC9C,KAAI,CAAC,YAAY,CAAC,uBAAuB,KAAK,SAAS,CACrD,QAAO;EAAE,IAAI;EAAO,OAAO;EAAmD,QAAQ;EAAK;CAG7F,MAAM,OAAO,MAAM,wBAAwB,KAAK,GAAG;CACnD,MAAM,WAAW,MAAM,wBAAwB,KAAK,GAAG;CACvD,MAAM,aAAa,GAAG,wBAAwB;CAC9C,MAAM,MAAM,yBAAyB,MAAM,WAAW;AACtD,KAAI,CAAC,OAAO,CAAC,qBAAqB,UAAU,IAAI,CAC9C,QAAO;EAAE,IAAI;EAAO,OAAO;EAAgB,QAAQ;EAAK;AAE1D,MAAK,MAAM,QAAQ,sBAAsB,EAAE;AACzC,MAAI,SAAS,WACX;EAEF,MAAM,QAAQ,yBAAyB,MAAM,KAAK;AAClD,MAAI,SAAS,qBAAqB,UAAU,MAAM,CAChD,KAAI;AACF,SAAM,OAAO,MAAM;UACb;;AAKZ,OAAM,UAAU,KAAK,IAAI;AACzB,QAAO;EAAE,IAAI;EAAM,MAAM;GAAE,SAAS;GAAI,MAAM;GAAK;EAAE;;AAGvD,SAAS,gBAAgB,KAAqF;AAC5G,KAAI,QAAQ,OAAQ,QAAO;AAC3B,KAAI,QAAQ,QAAS,QAAO;AAC5B,QAAO;;AAGT,SAAS,uBACP,KACA,UACS;AACT,QAAO,aAAa,gBAAgB,IAAI;;;AAI1C,eAAsB,sBAAsB,KAAa,SAAiE;CACxH,MAAM,eAAe,2BAA2B,KAAK,QAAQ;AAC7D,KAAI,aACF,QAAO;CAET,MAAM,KAAK,iBAAiB,QAAQ;CACpC,MAAM,OAAO,MAAM,wBAAwB,KAAK,GAAG;CACnD,MAAM,WAAW,MAAM,wBAAwB,KAAK,GAAG;AACvD,MAAK,MAAM,QAAQ,sBAAsB,EAAE;EACzC,MAAM,MAAM,yBAAyB,MAAM,KAAK;AAChD,MAAI,CAAC,OAAO,CAAC,qBAAqB,UAAU,IAAI,CAC9C;AAEF,MAAI;AACF,SAAM,OAAO,IAAI;UACX;;AAIV,QAAO;EAAE,IAAI;EAAM,MAAM,EAAE,SAAS,IAAI;EAAE"}

package/dist/src/gateway/config-tools-web.js

@@ -1,13 +1,14 @@
+import { isMaskedSecretPatchValue, maskSecretLength } from "./hono/lib/mask-secret-length.js";
 //#region src/gateway/config-tools-web.ts
 function isMaskedApiKey(v) {
-	return v === "***" || v === "••••••••••••";
+	return typeof v === "string" && isMaskedSecretPatchValue(v);
 }
 function safeToolsWebForGet(config) {
 	const web = config.tools?.web;
 	const search = web?.search;
 	const providersOut = (search?.providers ?? []).map((p) => ({
 		type: p.type,
-		apiKey: p.apiKey && p.apiKey.trim().length > 0 ? "***" : "",
+		apiKey: p.apiKey && p.apiKey.trim().length > 0 ? maskSecretLength(p.apiKey) : "",
 		url: typeof p.url === "string" ? p.url : "",
 		disabled: Boolean(p.disabled)
 	}));

package/dist/src/gateway/config-tools-web.js.map

@@ -1 +1 @@
-{"version":3,"file":"config-tools-web.js","names":[],"sources":["../../../src/gateway/config-tools-web.ts"],"sourcesContent":["import type { Config, SearchProviderEntry } from '../config/schema.js';\n\nexport function isMaskedApiKey(v: unknown): boolean {\n  return v === '***' || v === '••••••••••••';\n}\n\nexport function safeToolsWebForGet(config: Config): {\n  web: {\n    region: 'cn' | 'global' | null;\n    search: {\n      maxResults: number;\n      providers: Array<{ type: string; apiKey: string; url: string; disabled: boolean }>;\n    };\n    blocklist: {\n      enabled: boolean;\n      domains: string[];\n    };\n  };\n} {\n  const web = config.tools?.web;\n  const search = web?.search;\n  const providers = search?.providers ?? [];\n  const providersOut = providers.map((p) => ({\n    type: p.type,\n    apiKey: p.apiKey && p.apiKey.trim().length > 0 ? '***' : '',\n    url: typeof p.url === 'string' ? p.url : '',\n    disabled: Boolean(p.disabled),\n  }));\n  const blocklist = web?.blocklist;\n  return {\n    web: {\n      region: web?.region ?? null,\n      search: {\n        maxResults: search?.maxResults ?? 5,\n        providers: providersOut,\n      },\n      blocklist: {\n        enabled: blocklist?.enabled === true,\n        domains: Array.isArray(blocklist?.domains)\n          ? blocklist.domains.filter((d): d is string => typeof d === 'string' && d.trim().length > 0)\n          : [],\n      },\n    },\n  };\n}\n\n/**\n * Merge `body.tools.web` into config. Returns an error message on validation failure.\n */\nexport function applyToolsWebPatch(config: Config, body: Record<string, unknown>): string | undefined {\n  const tools = body.tools;\n  if (!tools || typeof tools !== 'object') return undefined;\n  const tw = (tools as { web?: unknown }).web;\n  if (!tw || typeof tw !== 'object') return undefined;\n\n  const incoming = tw as Record<string, unknown>;\n\n  if (!config.tools) {\n    config.tools = { web: {} };\n  }\n  if (!config.tools.web) {\n    config.tools.web = {};\n  }\n  if (!config.tools.web.search) {\n    config.tools.web.search = { maxResults: 5, providers: [] };\n  }\n\n  const prevSearch = config.tools.web.search;\n  const prevProviders = prevSearch.providers;\n\n  if (incoming.region !== undefined) {\n    if (incoming.region === null || incoming.region === '' || incoming.region === 'auto') {\n      delete config.tools.web.region;\n    } else if (incoming.region === 'cn' || incoming.region === 'global') {\n      config.tools.web.region = incoming.region;\n    } else {\n      return 'Invalid tools.web.region';\n    }\n  }\n\n  if (incoming.blocklist !== undefined) {\n    if (incoming.blocklist === null) {\n      delete config.tools.web.blocklist;\n    } else if (typeof incoming.blocklist !== 'object') {\n      return 'Invalid tools.web.blocklist';\n    } else {\n      const bl = incoming.blocklist as Record<string, unknown>;\n      const next = {\n        ...(config.tools.web.blocklist ?? { enabled: false, domains: [] }),\n      };\n      if (bl.enabled !== undefined) {\n        next.enabled = Boolean(bl.enabled);\n      }\n      if (bl.domains !== undefined) {\n        if (!Array.isArray(bl.domains)) {\n          return 'tools.web.blocklist.domains must be an array';\n        }\n        next.domains = bl.domains\n          .filter((d): d is string => typeof d === 'string' && d.trim().length > 0)\n          .map((d) => d.trim());\n      }\n      config.tools.web.blocklist = next;\n    }\n  }\n\n  const sr = incoming.search;\n  if (sr === undefined) return undefined;\n  if (typeof sr !== 'object' || sr === null) {\n    return 'Invalid tools.web.search';\n  }\n  const s = sr as Record<string, unknown>;\n\n  if (s.maxResults !== undefined) {\n    const n = typeof s.maxResults === 'number' ? s.maxResults : Number(s.maxResults);\n    if (!Number.isFinite(n) || n < 1 || n > 50) {\n      return 'tools.web.search.maxResults must be between 1 and 50';\n    }\n    config.tools.web.search.maxResults = Math.floor(n);\n  }\n\n  if (!('providers' in s)) {\n    return undefined;\n  }\n\n  if (!Array.isArray(s.providers)) {\n    return 'tools.web.search.providers must be an array';\n  }\n\n  const merged: SearchProviderEntry[] = [];\n  for (let i = 0; i < s.providers.length; i++) {\n    const rawRow = s.providers[i];\n    if (!rawRow || typeof rawRow !== 'object') {\n      return 'Invalid search provider entry';\n    }\n    const row = rawRow as Record<string, unknown>;\n    const type = row.type;\n    if (type !== 'brave' && type !== 'tavily' && type !== 'bing' && type !== 'searxng') {\n      return `Invalid search provider type: ${String(type)}`;\n    }\n    const prev = prevProviders?.[i];\n    let apiKey = typeof row.apiKey === 'string' ? row.apiKey : '';\n    if (isMaskedApiKey(apiKey) && prev?.apiKey) {\n      apiKey = prev.apiKey;\n    }\n    const urlRaw = typeof row.url === 'string' ? row.url.trim().replace(/\\/+$/, '') : '';\n    const entry: SearchProviderEntry = { type };\n    if (type === 'searxng') {\n      if (urlRaw) entry.url = urlRaw;\n      if (apiKey) entry.apiKey = apiKey;\n    } else {\n      if (apiKey) entry.apiKey = apiKey;\n    }\n    if (row.disabled === true) {\n      entry.disabled = true;\n    }\n    merged.push(entry);\n  }\n  config.tools.web.search.providers = merged;\n  return undefined;\n}\n"],"mappings":";AAEA,SAAgB,eAAe,GAAqB;AAClD,QAAO,MAAM,SAAS,MAAM;;AAG9B,SAAgB,mBAAmB,QAYjC;CACA,MAAM,MAAM,OAAO,OAAO;CAC1B,MAAM,SAAS,KAAK;CAEpB,MAAM,gBADY,QAAQ,aAAa,EAAE,EACV,KAAK,OAAO;EACzC,MAAM,EAAE;EACR,QAAQ,EAAE,UAAU,EAAE,OAAO,MAAM,CAAC,SAAS,IAAI,QAAQ;EACzD,KAAK,OAAO,EAAE,QAAQ,WAAW,EAAE,MAAM;EACzC,UAAU,QAAQ,EAAE,SAAS;EAC9B,EAAE;CACH,MAAM,YAAY,KAAK;AACvB,QAAO,EACL,KAAK;EACH,QAAQ,KAAK,UAAU;EACvB,QAAQ;GACN,YAAY,QAAQ,cAAc;GAClC,WAAW;GACZ;EACD,WAAW;GACT,SAAS,WAAW,YAAY;GAChC,SAAS,MAAM,QAAQ,WAAW,QAAQ,GACtC,UAAU,QAAQ,QAAQ,MAAmB,OAAO,MAAM,YAAY,EAAE,MAAM,CAAC,SAAS,EAAE,GAC1F,EAAE;GACP;EACF,EACF;;;;;AAMH,SAAgB,mBAAmB,QAAgB,MAAmD;CACpG,MAAM,QAAQ,KAAK;AACnB,KAAI,CAAC,SAAS,OAAO,UAAU,SAAU,QAAO,KAAA;CAChD,MAAM,KAAM,MAA4B;AACxC,KAAI,CAAC,MAAM,OAAO,OAAO,SAAU,QAAO,KAAA;CAE1C,MAAM,WAAW;AAEjB,KAAI,CAAC,OAAO,MACV,QAAO,QAAQ,EAAE,KAAK,EAAE,EAAE;AAE5B,KAAI,CAAC,OAAO,MAAM,IAChB,QAAO,MAAM,MAAM,EAAE;AAEvB,KAAI,CAAC,OAAO,MAAM,IAAI,OACpB,QAAO,MAAM,IAAI,SAAS;EAAE,YAAY;EAAG,WAAW,EAAE;EAAE;CAI5D,MAAM,gBADa,OAAO,MAAM,IAAI,OACH;AAEjC,KAAI,SAAS,WAAW,KAAA,EACtB,KAAI,SAAS,WAAW,QAAQ,SAAS,WAAW,MAAM,SAAS,WAAW,OAC5E,QAAO,OAAO,MAAM,IAAI;UACf,SAAS,WAAW,QAAQ,SAAS,WAAW,SACzD,QAAO,MAAM,IAAI,SAAS,SAAS;KAEnC,QAAO;AAIX,KAAI,SAAS,cAAc,KAAA,EACzB,KAAI,SAAS,cAAc,KACzB,QAAO,OAAO,MAAM,IAAI;UACf,OAAO,SAAS,cAAc,SACvC,QAAO;MACF;EACL,MAAM,KAAK,SAAS;EACpB,MAAM,OAAO,EACX,GAAI,OAAO,MAAM,IAAI,aAAa;GAAE,SAAS;GAAO,SAAS,EAAE;GAAE,EAClE;AACD,MAAI,GAAG,YAAY,KAAA,EACjB,MAAK,UAAU,QAAQ,GAAG,QAAQ;AAEpC,MAAI,GAAG,YAAY,KAAA,GAAW;AAC5B,OAAI,CAAC,MAAM,QAAQ,GAAG,QAAQ,CAC5B,QAAO;AAET,QAAK,UAAU,GAAG,QACf,QAAQ,MAAmB,OAAO,MAAM,YAAY,EAAE,MAAM,CAAC,SAAS,EAAE,CACxE,KAAK,MAAM,EAAE,MAAM,CAAC;;AAEzB,SAAO,MAAM,IAAI,YAAY;;CAIjC,MAAM,KAAK,SAAS;AACpB,KAAI,OAAO,KAAA,EAAW,QAAO,KAAA;AAC7B,KAAI,OAAO,OAAO,YAAY,OAAO,KACnC,QAAO;CAET,MAAM,IAAI;AAEV,KAAI,EAAE,eAAe,KAAA,GAAW;EAC9B,MAAM,IAAI,OAAO,EAAE,eAAe,WAAW,EAAE,aAAa,OAAO,EAAE,WAAW;AAChF,MAAI,CAAC,OAAO,SAAS,EAAE,IAAI,IAAI,KAAK,IAAI,GACtC,QAAO;AAET,SAAO,MAAM,IAAI,OAAO,aAAa,KAAK,MAAM,EAAE;;AAGpD,KAAI,EAAE,eAAe,GACnB;AAGF,KAAI,CAAC,MAAM,QAAQ,EAAE,UAAU,CAC7B,QAAO;CAGT,MAAM,SAAgC,EAAE;AACxC,MAAK,IAAI,IAAI,GAAG,IAAI,EAAE,UAAU,QAAQ,KAAK;EAC3C,MAAM,SAAS,EAAE,UAAU;AAC3B,MAAI,CAAC,UAAU,OAAO,WAAW,SAC/B,QAAO;EAET,MAAM,MAAM;EACZ,MAAM,OAAO,IAAI;AACjB,MAAI,SAAS,WAAW,SAAS,YAAY,SAAS,UAAU,SAAS,UACvE,QAAO,iCAAiC,OAAO,KAAK;EAEtD,MAAM,OAAO,gBAAgB;EAC7B,IAAI,SAAS,OAAO,IAAI,WAAW,WAAW,IAAI,SAAS;AAC3D,MAAI,eAAe,OAAO,IAAI,MAAM,OAClC,UAAS,KAAK;EAEhB,MAAM,SAAS,OAAO,IAAI,QAAQ,WAAW,IAAI,IAAI,MAAM,CAAC,QAAQ,QAAQ,GAAG,GAAG;EAClF,MAAM,QAA6B,EAAE,MAAM;AAC3C,MAAI,SAAS,WAAW;AACtB,OAAI,OAAQ,OAAM,MAAM;AACxB,OAAI,OAAQ,OAAM,SAAS;aAEvB,OAAQ,OAAM,SAAS;AAE7B,MAAI,IAAI,aAAa,KACnB,OAAM,WAAW;AAEnB,SAAO,KAAK,MAAM;;AAEpB,QAAO,MAAM,IAAI,OAAO,YAAY"}
+{"version":3,"file":"config-tools-web.js","names":[],"sources":["../../../src/gateway/config-tools-web.ts"],"sourcesContent":["import type { Config, SearchProviderEntry } from '../config/schema.js';\nimport {\n  isMaskedSecretPatchValue,\n  maskSecretLength,\n} from './hono/lib/mask-secret-length.js';\n\nexport function isMaskedApiKey(v: unknown): boolean {\n  return typeof v === 'string' && isMaskedSecretPatchValue(v);\n}\n\nexport function safeToolsWebForGet(config: Config): {\n  web: {\n    region: 'cn' | 'global' | null;\n    search: {\n      maxResults: number;\n      providers: Array<{ type: string; apiKey: string; url: string; disabled: boolean }>;\n    };\n    blocklist: {\n      enabled: boolean;\n      domains: string[];\n    };\n  };\n} {\n  const web = config.tools?.web;\n  const search = web?.search;\n  const providers = search?.providers ?? [];\n  const providersOut = providers.map((p) => ({\n    type: p.type,\n    apiKey: p.apiKey && p.apiKey.trim().length > 0 ? maskSecretLength(p.apiKey) : '',\n    url: typeof p.url === 'string' ? p.url : '',\n    disabled: Boolean(p.disabled),\n  }));\n  const blocklist = web?.blocklist;\n  return {\n    web: {\n      region: web?.region ?? null,\n      search: {\n        maxResults: search?.maxResults ?? 5,\n        providers: providersOut,\n      },\n      blocklist: {\n        enabled: blocklist?.enabled === true,\n        domains: Array.isArray(blocklist?.domains)\n          ? blocklist.domains.filter((d): d is string => typeof d === 'string' && d.trim().length > 0)\n          : [],\n      },\n    },\n  };\n}\n\n/**\n * Merge `body.tools.web` into config. Returns an error message on validation failure.\n */\nexport function applyToolsWebPatch(config: Config, body: Record<string, unknown>): string | undefined {\n  const tools = body.tools;\n  if (!tools || typeof tools !== 'object') return undefined;\n  const tw = (tools as { web?: unknown }).web;\n  if (!tw || typeof tw !== 'object') return undefined;\n\n  const incoming = tw as Record<string, unknown>;\n\n  if (!config.tools) {\n    config.tools = { web: {} };\n  }\n  if (!config.tools.web) {\n    config.tools.web = {};\n  }\n  if (!config.tools.web.search) {\n    config.tools.web.search = { maxResults: 5, providers: [] };\n  }\n\n  const prevSearch = config.tools.web.search;\n  const prevProviders = prevSearch.providers;\n\n  if (incoming.region !== undefined) {\n    if (incoming.region === null || incoming.region === '' || incoming.region === 'auto') {\n      delete config.tools.web.region;\n    } else if (incoming.region === 'cn' || incoming.region === 'global') {\n      config.tools.web.region = incoming.region;\n    } else {\n      return 'Invalid tools.web.region';\n    }\n  }\n\n  if (incoming.blocklist !== undefined) {\n    if (incoming.blocklist === null) {\n      delete config.tools.web.blocklist;\n    } else if (typeof incoming.blocklist !== 'object') {\n      return 'Invalid tools.web.blocklist';\n    } else {\n      const bl = incoming.blocklist as Record<string, unknown>;\n      const next = {\n        ...(config.tools.web.blocklist ?? { enabled: false, domains: [] }),\n      };\n      if (bl.enabled !== undefined) {\n        next.enabled = Boolean(bl.enabled);\n      }\n      if (bl.domains !== undefined) {\n        if (!Array.isArray(bl.domains)) {\n          return 'tools.web.blocklist.domains must be an array';\n        }\n        next.domains = bl.domains\n          .filter((d): d is string => typeof d === 'string' && d.trim().length > 0)\n          .map((d) => d.trim());\n      }\n      config.tools.web.blocklist = next;\n    }\n  }\n\n  const sr = incoming.search;\n  if (sr === undefined) return undefined;\n  if (typeof sr !== 'object' || sr === null) {\n    return 'Invalid tools.web.search';\n  }\n  const s = sr as Record<string, unknown>;\n\n  if (s.maxResults !== undefined) {\n    const n = typeof s.maxResults === 'number' ? s.maxResults : Number(s.maxResults);\n    if (!Number.isFinite(n) || n < 1 || n > 50) {\n      return 'tools.web.search.maxResults must be between 1 and 50';\n    }\n    config.tools.web.search.maxResults = Math.floor(n);\n  }\n\n  if (!('providers' in s)) {\n    return undefined;\n  }\n\n  if (!Array.isArray(s.providers)) {\n    return 'tools.web.search.providers must be an array';\n  }\n\n  const merged: SearchProviderEntry[] = [];\n  for (let i = 0; i < s.providers.length; i++) {\n    const rawRow = s.providers[i];\n    if (!rawRow || typeof rawRow !== 'object') {\n      return 'Invalid search provider entry';\n    }\n    const row = rawRow as Record<string, unknown>;\n    const type = row.type;\n    if (type !== 'brave' && type !== 'tavily' && type !== 'bing' && type !== 'searxng') {\n      return `Invalid search provider type: ${String(type)}`;\n    }\n    const prev = prevProviders?.[i];\n    let apiKey = typeof row.apiKey === 'string' ? row.apiKey : '';\n    if (isMaskedApiKey(apiKey) && prev?.apiKey) {\n      apiKey = prev.apiKey;\n    }\n    const urlRaw = typeof row.url === 'string' ? row.url.trim().replace(/\\/+$/, '') : '';\n    const entry: SearchProviderEntry = { type };\n    if (type === 'searxng') {\n      if (urlRaw) entry.url = urlRaw;\n      if (apiKey) entry.apiKey = apiKey;\n    } else {\n      if (apiKey) entry.apiKey = apiKey;\n    }\n    if (row.disabled === true) {\n      entry.disabled = true;\n    }\n    merged.push(entry);\n  }\n  config.tools.web.search.providers = merged;\n  return undefined;\n}\n"],"mappings":";;AAMA,SAAgB,eAAe,GAAqB;AAClD,QAAO,OAAO,MAAM,YAAY,yBAAyB,EAAE;;AAG7D,SAAgB,mBAAmB,QAYjC;CACA,MAAM,MAAM,OAAO,OAAO;CAC1B,MAAM,SAAS,KAAK;CAEpB,MAAM,gBADY,QAAQ,aAAa,EAAE,EACV,KAAK,OAAO;EACzC,MAAM,EAAE;EACR,QAAQ,EAAE,UAAU,EAAE,OAAO,MAAM,CAAC,SAAS,IAAI,iBAAiB,EAAE,OAAO,GAAG;EAC9E,KAAK,OAAO,EAAE,QAAQ,WAAW,EAAE,MAAM;EACzC,UAAU,QAAQ,EAAE,SAAS;EAC9B,EAAE;CACH,MAAM,YAAY,KAAK;AACvB,QAAO,EACL,KAAK;EACH,QAAQ,KAAK,UAAU;EACvB,QAAQ;GACN,YAAY,QAAQ,cAAc;GAClC,WAAW;GACZ;EACD,WAAW;GACT,SAAS,WAAW,YAAY;GAChC,SAAS,MAAM,QAAQ,WAAW,QAAQ,GACtC,UAAU,QAAQ,QAAQ,MAAmB,OAAO,MAAM,YAAY,EAAE,MAAM,CAAC,SAAS,EAAE,GAC1F,EAAE;GACP;EACF,EACF;;;;;AAMH,SAAgB,mBAAmB,QAAgB,MAAmD;CACpG,MAAM,QAAQ,KAAK;AACnB,KAAI,CAAC,SAAS,OAAO,UAAU,SAAU,QAAO,KAAA;CAChD,MAAM,KAAM,MAA4B;AACxC,KAAI,CAAC,MAAM,OAAO,OAAO,SAAU,QAAO,KAAA;CAE1C,MAAM,WAAW;AAEjB,KAAI,CAAC,OAAO,MACV,QAAO,QAAQ,EAAE,KAAK,EAAE,EAAE;AAE5B,KAAI,CAAC,OAAO,MAAM,IAChB,QAAO,MAAM,MAAM,EAAE;AAEvB,KAAI,CAAC,OAAO,MAAM,IAAI,OACpB,QAAO,MAAM,IAAI,SAAS;EAAE,YAAY;EAAG,WAAW,EAAE;EAAE;CAI5D,MAAM,gBADa,OAAO,MAAM,IAAI,OACH;AAEjC,KAAI,SAAS,WAAW,KAAA,EACtB,KAAI,SAAS,WAAW,QAAQ,SAAS,WAAW,MAAM,SAAS,WAAW,OAC5E,QAAO,OAAO,MAAM,IAAI;UACf,SAAS,WAAW,QAAQ,SAAS,WAAW,SACzD,QAAO,MAAM,IAAI,SAAS,SAAS;KAEnC,QAAO;AAIX,KAAI,SAAS,cAAc,KAAA,EACzB,KAAI,SAAS,cAAc,KACzB,QAAO,OAAO,MAAM,IAAI;UACf,OAAO,SAAS,cAAc,SACvC,QAAO;MACF;EACL,MAAM,KAAK,SAAS;EACpB,MAAM,OAAO,EACX,GAAI,OAAO,MAAM,IAAI,aAAa;GAAE,SAAS;GAAO,SAAS,EAAE;GAAE,EAClE;AACD,MAAI,GAAG,YAAY,KAAA,EACjB,MAAK,UAAU,QAAQ,GAAG,QAAQ;AAEpC,MAAI,GAAG,YAAY,KAAA,GAAW;AAC5B,OAAI,CAAC,MAAM,QAAQ,GAAG,QAAQ,CAC5B,QAAO;AAET,QAAK,UAAU,GAAG,QACf,QAAQ,MAAmB,OAAO,MAAM,YAAY,EAAE,MAAM,CAAC,SAAS,EAAE,CACxE,KAAK,MAAM,EAAE,MAAM,CAAC;;AAEzB,SAAO,MAAM,IAAI,YAAY;;CAIjC,MAAM,KAAK,SAAS;AACpB,KAAI,OAAO,KAAA,EAAW,QAAO,KAAA;AAC7B,KAAI,OAAO,OAAO,YAAY,OAAO,KACnC,QAAO;CAET,MAAM,IAAI;AAEV,KAAI,EAAE,eAAe,KAAA,GAAW;EAC9B,MAAM,IAAI,OAAO,EAAE,eAAe,WAAW,EAAE,aAAa,OAAO,EAAE,WAAW;AAChF,MAAI,CAAC,OAAO,SAAS,EAAE,IAAI,IAAI,KAAK,IAAI,GACtC,QAAO;AAET,SAAO,MAAM,IAAI,OAAO,aAAa,KAAK,MAAM,EAAE;;AAGpD,KAAI,EAAE,eAAe,GACnB;AAGF,KAAI,CAAC,MAAM,QAAQ,EAAE,UAAU,CAC7B,QAAO;CAGT,MAAM,SAAgC,EAAE;AACxC,MAAK,IAAI,IAAI,GAAG,IAAI,EAAE,UAAU,QAAQ,KAAK;EAC3C,MAAM,SAAS,EAAE,UAAU;AAC3B,MAAI,CAAC,UAAU,OAAO,WAAW,SAC/B,QAAO;EAET,MAAM,MAAM;EACZ,MAAM,OAAO,IAAI;AACjB,MAAI,SAAS,WAAW,SAAS,YAAY,SAAS,UAAU,SAAS,UACvE,QAAO,iCAAiC,OAAO,KAAK;EAEtD,MAAM,OAAO,gBAAgB;EAC7B,IAAI,SAAS,OAAO,IAAI,WAAW,WAAW,IAAI,SAAS;AAC3D,MAAI,eAAe,OAAO,IAAI,MAAM,OAClC,UAAS,KAAK;EAEhB,MAAM,SAAS,OAAO,IAAI,QAAQ,WAAW,IAAI,IAAI,MAAM,CAAC,QAAQ,QAAQ,GAAG,GAAG;EAClF,MAAM,QAA6B,EAAE,MAAM;AAC3C,MAAI,SAAS,WAAW;AACtB,OAAI,OAAQ,OAAM,MAAM;AACxB,OAAI,OAAQ,OAAM,SAAS;aAEvB,OAAQ,OAAM,SAAS;AAE7B,MAAI,IAAI,aAAa,KACnB,OAAM,WAAW;AAEnB,SAAO,KAAK,MAAM;;AAEpB,QAAO,MAAM,IAAI,OAAO,YAAY"}

package/dist/src/gateway/file-path-classifier.js

@@ -1,11 +1,11 @@
 import { init_paths_state, resolveStateDir } from "../config/paths-state.js";
 import { init_agent_scope, resolveAgentProfileDir } from "../agent/agent-scope.js";
-import { extractProfileAgentId } from "../config/agent-profile.js";
 import { init_paths, resolveConfigPath, resolveSessionsDir, resolveSkillsDir } from "../config/paths.js";
+import { extractProfileAgentId } from "../config/agent-profile.js";
 import { isBareProfileMarkdownFileName, resolveProfileMarkdownPathIfBareName } from "../agent/tools/tool-paths.js";
 import { isPathUnderWorkspace, resolveWorkspaceSafePath } from "./workspace-editor-path.js";
-import { basename, isAbsolute, resolve } from "node:path";
 import { stat } from "node:fs/promises";
+import { basename, isAbsolute, resolve } from "node:path";
 //#region src/gateway/file-path-classifier.ts
 init_agent_scope();
 init_paths();

package/dist/src/gateway/heartbeat/service.js

@@ -1,9 +1,9 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
 import { shouldSilence, stripHeartbeatToken } from "../../heartbeat/tokens.js";
+import { appendCronEventLines } from "../../heartbeat/event-prompt.js";
 import { isWithinActiveHours } from "../../heartbeat/active-hours.js";
 import { isHeartbeatContentEmpty } from "../../heartbeat/content-check.js";
-import { appendCronEventLines } from "../../heartbeat/event-prompt.js";
 import { createHeartbeatWake } from "../../heartbeat/wake.js";
 import { resolveHeartbeatMdPath } from "../workspace-heartbeat-path.js";
 import { readFile } from "fs/promises";
@@ -124,7 +124,7 @@ var HeartbeatService = class {
 			reasons: reasonSummary
 		}, "Heartbeat: invoking agent");
 		if (sessionKey === "heartbeat:main") try {
-			await this.deps.sessionStore.save(sessionKey, []);
+			await this.deps.sessionStore.saveMessages(sessionKey, []);
 		} catch (err) {
 			log.warn({
 				err,

package/dist/src/gateway/heartbeat/service.js.map

@@ -1 +1 @@
-{"version":3,"file":"service.js","names":[],"sources":["../../../../src/gateway/heartbeat/service.ts"],"sourcesContent":["import { readFile } from 'fs/promises';\n\nimport type { AgentService } from '../../agent/service.js';\nimport type { Config } from '../../config/schema.js';\nimport { CronService } from '../../cron/service.js';\nimport type { MessageBus } from '../../infra/bus/index.js';\nimport type { SessionStore } from '../../session/store.js';\nimport { appendCronEventLines } from '../../heartbeat/event-prompt.js';\nimport { isWithinActiveHours } from '../../heartbeat/active-hours.js';\nimport { isHeartbeatContentEmpty } from '../../heartbeat/content-check.js';\nimport {\n  DEFAULT_ACK_MAX_CHARS,\n  stripHeartbeatToken,\n  shouldSilence,\n} from '../../heartbeat/tokens.js';\nimport { createHeartbeatWake } from '../../heartbeat/wake.js';\nimport { createLogger } from '../../utils/logger.js';\nimport { resolveHeartbeatMdPath } from '../workspace-heartbeat-path.js';\n\nconst log = createLogger('HeartbeatService');\n\nconst DEFAULT_PROMPT =\n  'Read HEARTBEAT.md if it exists. Follow it strictly. If nothing needs attention, reply HEARTBEAT_OK.';\n\nexport interface HeartbeatRunnerConfig {\n  enabled: boolean;\n  intervalMs: number;\n  target?: string;\n  targetChatId?: string;\n  prompt?: string;\n  ackMaxChars?: number;\n  isolatedSession?: boolean;\n  activeHours?: {\n    start: string;\n    end: string;\n    timezone?: string;\n  };\n}\n\nfunction mapConfigToRunner(cfg: Config | undefined): HeartbeatRunnerConfig {\n  const h = cfg?.gateway?.heartbeat;\n  return {\n    enabled: h?.enabled ?? true,\n    intervalMs: h?.intervalMs ?? 1_800_000,\n    target: h?.target,\n    targetChatId: h?.targetChatId,\n    prompt: h?.prompt,\n    ackMaxChars: h?.ackMaxChars,\n    isolatedSession: h?.isolatedSession,\n    activeHours: h?.activeHours,\n  };\n}\n\n/** Map persisted gateway config to runner options (gateway start / reload). */\nexport function heartbeatRunnerConfigFromConfig(cfg: Config): HeartbeatRunnerConfig {\n  return mapConfigToRunner(cfg);\n}\n\nexport interface HeartbeatServiceDeps {\n  agentService: AgentService;\n  messageBus: MessageBus;\n  cronService: CronService;\n  sessionStore: SessionStore;\n  /** Current app config (for HEARTBEAT.md path under the default agent `profile/` directory). */\n  getConfig: () => Config;\n}\n\nexport class HeartbeatService {\n  private intervalId: ReturnType<typeof setInterval> | null = null;\n  private wake: ReturnType<typeof createHeartbeatWake>;\n  private lastHeartbeatText = '';\n  private lastHeartbeatAt = 0;\n  private runnerConfig: HeartbeatRunnerConfig | null = null;\n\n  constructor(private deps: HeartbeatServiceDeps) {\n    this.wake = createHeartbeatWake((reasons) => this.runHeartbeatOnce(reasons));\n  }\n\n  start(config: HeartbeatRunnerConfig): void {\n    if (!config.enabled) {\n      log.info('Heartbeat disabled');\n      this.runnerConfig = null;\n      return;\n    }\n\n    this.runnerConfig = config;\n    log.info({ intervalMs: config.intervalMs }, 'Heartbeat timer started (interval wake)');\n\n    this.intervalId = setInterval(() => {\n      this.wake.request({ reason: 'interval' });\n    }, config.intervalMs);\n    this.intervalId.unref?.();\n  }\n\n  /** Cron, exec completion, manual triggers, etc. */\n  requestNow(opts?: { reason?: string }): void {\n    this.wake.request({ reason: opts?.reason ?? 'manual' });\n  }\n\n  stop(): void {\n    if (this.intervalId) {\n      clearInterval(this.intervalId);\n      this.intervalId = null;\n    }\n    this.wake.stop();\n    this.runnerConfig = null;\n    log.info('Heartbeat stopped');\n  }\n\n  updateConfig(config: Config): void {\n    const mapped = mapConfigToRunner(config);\n    this.stop();\n    if (mapped.enabled) {\n      this.start(mapped);\n    }\n    log.info('Heartbeat config updated');\n  }\n\n  isRunning(): boolean {\n    return this.intervalId !== null;\n  }\n\n  private async runHeartbeatOnce(reasons: string[]): Promise<void> {\n    const reasonSummary = [...new Set(reasons)].join(', ') || 'unknown';\n\n    const cfg = this.runnerConfig;\n    if (!cfg?.enabled) {\n      log.debug({ reasons: reasonSummary }, 'Heartbeat: skip (disabled)');\n      return;\n    }\n\n    try {\n      const metrics = await this.deps.cronService.getMetrics();\n      log.trace(\n        { runningJobs: metrics.runningJobs, enabledJobs: metrics.enabledJobs },\n        'Heartbeat: cron metrics',\n      );\n    } catch {\n      /* optional */\n    }\n\n    if (cfg.activeHours && !isWithinActiveHours(cfg.activeHours)) {\n      log.debug({ reasons: reasonSummary }, 'Heartbeat: skip (outside active hours)');\n      return;\n    }\n\n    const heartbeatPath = resolveHeartbeatMdPath(this.deps.getConfig());\n    if (!heartbeatPath) {\n      log.debug({ reasons: reasonSummary }, 'Heartbeat: skip (no HEARTBEAT path)');\n      return;\n    }\n    let heartbeatContent: string | undefined;\n    try {\n      const raw = await readFile(heartbeatPath, 'utf-8');\n      if (isHeartbeatContentEmpty(raw)) {\n        log.debug({ path: heartbeatPath, reasons: reasonSummary }, 'Heartbeat: skip (HEARTBEAT.md empty)');\n        return;\n      }\n      heartbeatContent = raw.trim();\n    } catch {\n      log.debug({ path: heartbeatPath, reasons: reasonSummary }, 'Heartbeat: HEARTBEAT.md missing; continuing');\n    }\n\n    const sessionKey = cfg.isolatedSession\n      ? `heartbeat:isolated:${Date.now()}`\n      : 'heartbeat:main';\n\n    let basePrompt = (cfg.prompt?.trim() || DEFAULT_PROMPT).trim();\n    if (heartbeatContent) {\n      basePrompt = `${basePrompt}\\n\\n---\\nHEARTBEAT.md:\\n${heartbeatContent}\\n---`;\n    }\n    basePrompt = appendCronEventLines(basePrompt, reasons);\n    const prompt = `${basePrompt}\\n\\nCurrent time: ${new Date().toISOString()}`;\n\n    const ackMax = cfg.ackMaxChars ?? DEFAULT_ACK_MAX_CHARS;\n\n    log.debug({ sessionKey, reasons: reasonSummary }, 'Heartbeat: invoking agent');\n\n    // `heartbeat:main` reuses one session key; each run would otherwise append to the transcript\n    // until the model rejects the request (context window exceeded). Heartbeat prompts are\n    // self-contained (HEARTBEAT.md + this turn's text), so we start from an empty history.\n    if (sessionKey === 'heartbeat:main') {\n      try {\n        await this.deps.sessionStore.save(sessionKey, []);\n      } catch (err) {\n        log.warn({ err, sessionKey }, 'Heartbeat: failed to reset main session transcript');\n      }\n    }\n\n    let reply: string;\n    try {\n      reply = await this.deps.agentService.turnDispatcher.processDirect(prompt, sessionKey);\n    } catch (error) {\n      log.error({ err: error }, 'Heartbeat: agent call failed');\n      return;\n    }\n\n    if (!reply?.trim()) {\n      log.debug({ reasons: reasonSummary }, 'Heartbeat: skip (empty model reply)');\n      return;\n    }\n\n    if (shouldSilence(reply, ackMax)) {\n      log.info(\n        { ackMax, replyChars: reply.length, reasons: reasonSummary },\n        'Heartbeat: not sent — silent (HEARTBEAT_OK / short ack)',\n      );\n      return;\n    }\n\n    const { stripped } = stripHeartbeatToken(reply);\n    const finalText = stripped || reply.trim();\n\n    if (this.isDuplicate(finalText)) {\n      log.info(\n        { finalTextChars: finalText.length, reasons: reasonSummary },\n        'Heartbeat: not sent — duplicate within 24h',\n      );\n      return;\n    }\n\n    const target = cfg.target?.trim();\n    const targetChatId = cfg.targetChatId?.trim();\n    const hasDeliveryTarget = Boolean(target && targetChatId);\n\n    if (hasDeliveryTarget) {\n      await this.deps.messageBus.publishOutbound({\n        channel: target!,\n        chat_id: targetChatId!,\n        content: finalText,\n        type: 'message',\n      });\n      log.info(\n        {\n          reasons: reasonSummary,\n          channel: target,\n          chatId: targetChatId,\n          contentChars: finalText.length,\n        },\n        'Heartbeat: sent — outbound queued',\n      );\n    } else {\n      log.info(\n        { reasons: reasonSummary, finalTextChars: finalText.length },\n        'Heartbeat: not sent — no delivery target (set gateway.heartbeat.target + targetChatId)',\n      );\n    }\n\n    this.lastHeartbeatText = finalText;\n    this.lastHeartbeatAt = Date.now();\n  }\n\n  private isDuplicate(text: string): boolean {\n    const DEDUP_WINDOW_MS = 24 * 60 * 60 * 1000;\n    return (\n      text.trim() === this.lastHeartbeatText.trim() &&\n      Date.now() - this.lastHeartbeatAt < DEDUP_WINDOW_MS\n    );\n  }\n}\n"],"mappings":";;;;;;;;;;aAgBqD;AAGrD,MAAM,MAAM,aAAa,mBAAmB;AAE5C,MAAM,iBACJ;AAiBF,SAAS,kBAAkB,KAAgD;CACzE,MAAM,IAAI,KAAK,SAAS;AACxB,QAAO;EACL,SAAS,GAAG,WAAW;EACvB,YAAY,GAAG,cAAc;EAC7B,QAAQ,GAAG;EACX,cAAc,GAAG;EACjB,QAAQ,GAAG;EACX,aAAa,GAAG;EAChB,iBAAiB,GAAG;EACpB,aAAa,GAAG;EACjB;;;AAIH,SAAgB,gCAAgC,KAAoC;AAClF,QAAO,kBAAkB,IAAI;;AAY/B,IAAa,mBAAb,MAA8B;CAC5B,aAA4D;CAC5D;CACA,oBAA4B;CAC5B,kBAA0B;CAC1B,eAAqD;CAErD,YAAY,MAAoC;AAA5B,OAAA,OAAA;AAClB,OAAK,OAAO,qBAAqB,YAAY,KAAK,iBAAiB,QAAQ,CAAC;;CAG9E,MAAM,QAAqC;AACzC,MAAI,CAAC,OAAO,SAAS;AACnB,OAAI,KAAK,qBAAqB;AAC9B,QAAK,eAAe;AACpB;;AAGF,OAAK,eAAe;AACpB,MAAI,KAAK,EAAE,YAAY,OAAO,YAAY,EAAE,0CAA0C;AAEtF,OAAK,aAAa,kBAAkB;AAClC,QAAK,KAAK,QAAQ,EAAE,QAAQ,YAAY,CAAC;KACxC,OAAO,WAAW;AACrB,OAAK,WAAW,SAAS;;;CAI3B,WAAW,MAAkC;AAC3C,OAAK,KAAK,QAAQ,EAAE,QAAQ,MAAM,UAAU,UAAU,CAAC;;CAGzD,OAAa;AACX,MAAI,KAAK,YAAY;AACnB,iBAAc,KAAK,WAAW;AAC9B,QAAK,aAAa;;AAEpB,OAAK,KAAK,MAAM;AAChB,OAAK,eAAe;AACpB,MAAI,KAAK,oBAAoB;;CAG/B,aAAa,QAAsB;EACjC,MAAM,SAAS,kBAAkB,OAAO;AACxC,OAAK,MAAM;AACX,MAAI,OAAO,QACT,MAAK,MAAM,OAAO;AAEpB,MAAI,KAAK,2BAA2B;;CAGtC,YAAqB;AACnB,SAAO,KAAK,eAAe;;CAG7B,MAAc,iBAAiB,SAAkC;EAC/D,MAAM,gBAAgB,CAAC,GAAG,IAAI,IAAI,QAAQ,CAAC,CAAC,KAAK,KAAK,IAAI;EAE1D,MAAM,MAAM,KAAK;AACjB,MAAI,CAAC,KAAK,SAAS;AACjB,OAAI,MAAM,EAAE,SAAS,eAAe,EAAE,6BAA6B;AACnE;;AAGF,MAAI;GACF,MAAM,UAAU,MAAM,KAAK,KAAK,YAAY,YAAY;AACxD,OAAI,MACF;IAAE,aAAa,QAAQ;IAAa,aAAa,QAAQ;IAAa,EACtE,0BACD;UACK;AAIR,MAAI,IAAI,eAAe,CAAC,oBAAoB,IAAI,YAAY,EAAE;AAC5D,OAAI,MAAM,EAAE,SAAS,eAAe,EAAE,yCAAyC;AAC/E;;EAGF,MAAM,gBAAgB,uBAAuB,KAAK,KAAK,WAAW,CAAC;AACnE,MAAI,CAAC,eAAe;AAClB,OAAI,MAAM,EAAE,SAAS,eAAe,EAAE,sCAAsC;AAC5E;;EAEF,IAAI;AACJ,MAAI;GACF,MAAM,MAAM,MAAM,SAAS,eAAe,QAAQ;AAClD,OAAI,wBAAwB,IAAI,EAAE;AAChC,QAAI,MAAM;KAAE,MAAM;KAAe,SAAS;KAAe,EAAE,uCAAuC;AAClG;;AAEF,sBAAmB,IAAI,MAAM;UACvB;AACN,OAAI,MAAM;IAAE,MAAM;IAAe,SAAS;IAAe,EAAE,8CAA8C;;EAG3G,MAAM,aAAa,IAAI,kBACnB,sBAAsB,KAAK,KAAK,KAChC;EAEJ,IAAI,cAAc,IAAI,QAAQ,MAAM,IAAI,gBAAgB,MAAM;AAC9D,MAAI,iBACF,cAAa,GAAG,WAAW,0BAA0B,iBAAiB;AAExE,eAAa,qBAAqB,YAAY,QAAQ;EACtD,MAAM,SAAS,GAAG,WAAW,qCAAoB,IAAI,MAAM,EAAC,aAAa;EAEzE,MAAM,SAAS,IAAI,eAAA;AAEnB,MAAI,MAAM;GAAE;GAAY,SAAS;GAAe,EAAE,4BAA4B;AAK9E,MAAI,eAAe,iBACjB,KAAI;AACF,SAAM,KAAK,KAAK,aAAa,KAAK,YAAY,EAAE,CAAC;WAC1C,KAAK;AACZ,OAAI,KAAK;IAAE;IAAK;IAAY,EAAE,qDAAqD;;EAIvF,IAAI;AACJ,MAAI;AACF,WAAQ,MAAM,KAAK,KAAK,aAAa,eAAe,cAAc,QAAQ,WAAW;WAC9E,OAAO;AACd,OAAI,MAAM,EAAE,KAAK,OAAO,EAAE,+BAA+B;AACzD;;AAGF,MAAI,CAAC,OAAO,MAAM,EAAE;AAClB,OAAI,MAAM,EAAE,SAAS,eAAe,EAAE,sCAAsC;AAC5E;;AAGF,MAAI,cAAc,OAAO,OAAO,EAAE;AAChC,OAAI,KACF;IAAE;IAAQ,YAAY,MAAM;IAAQ,SAAS;IAAe,EAC5D,0DACD;AACD;;EAGF,MAAM,EAAE,aAAa,oBAAoB,MAAM;EAC/C,MAAM,YAAY,YAAY,MAAM,MAAM;AAE1C,MAAI,KAAK,YAAY,UAAU,EAAE;AAC/B,OAAI,KACF;IAAE,gBAAgB,UAAU;IAAQ,SAAS;IAAe,EAC5D,6CACD;AACD;;EAGF,MAAM,SAAS,IAAI,QAAQ,MAAM;EACjC,MAAM,eAAe,IAAI,cAAc,MAAM;AAG7C,MAF0B,QAAQ,UAAU,aAEvB,EAAE;AACrB,SAAM,KAAK,KAAK,WAAW,gBAAgB;IACzC,SAAS;IACT,SAAS;IACT,SAAS;IACT,MAAM;IACP,CAAC;AACF,OAAI,KACF;IACE,SAAS;IACT,SAAS;IACT,QAAQ;IACR,cAAc,UAAU;IACzB,EACD,oCACD;QAED,KAAI,KACF;GAAE,SAAS;GAAe,gBAAgB,UAAU;GAAQ,EAC5D,yFACD;AAGH,OAAK,oBAAoB;AACzB,OAAK,kBAAkB,KAAK,KAAK;;CAGnC,YAAoB,MAAuB;AAEzC,SACE,KAAK,MAAM,KAAK,KAAK,kBAAkB,MAAM,IAC7C,KAAK,KAAK,GAAG,KAAK,kBAHI,OAAU,KAAK"}
+{"version":3,"file":"service.js","names":[],"sources":["../../../../src/gateway/heartbeat/service.ts"],"sourcesContent":["import { readFile } from 'fs/promises';\n\nimport type { AgentService } from '../../agent/service.js';\nimport type { Config } from '../../config/schema.js';\nimport { CronService } from '../../cron/service.js';\nimport type { MessageBus } from '../../infra/bus/index.js';\nimport type { SessionStore } from '../../session/store.js';\nimport { appendCronEventLines } from '../../heartbeat/event-prompt.js';\nimport { isWithinActiveHours } from '../../heartbeat/active-hours.js';\nimport { isHeartbeatContentEmpty } from '../../heartbeat/content-check.js';\nimport {\n  DEFAULT_ACK_MAX_CHARS,\n  stripHeartbeatToken,\n  shouldSilence,\n} from '../../heartbeat/tokens.js';\nimport { createHeartbeatWake } from '../../heartbeat/wake.js';\nimport { createLogger } from '../../utils/logger.js';\nimport { resolveHeartbeatMdPath } from '../workspace-heartbeat-path.js';\n\nconst log = createLogger('HeartbeatService');\n\nconst DEFAULT_PROMPT =\n  'Read HEARTBEAT.md if it exists. Follow it strictly. If nothing needs attention, reply HEARTBEAT_OK.';\n\nexport interface HeartbeatRunnerConfig {\n  enabled: boolean;\n  intervalMs: number;\n  target?: string;\n  targetChatId?: string;\n  prompt?: string;\n  ackMaxChars?: number;\n  isolatedSession?: boolean;\n  activeHours?: {\n    start: string;\n    end: string;\n    timezone?: string;\n  };\n}\n\nfunction mapConfigToRunner(cfg: Config | undefined): HeartbeatRunnerConfig {\n  const h = cfg?.gateway?.heartbeat;\n  return {\n    enabled: h?.enabled ?? true,\n    intervalMs: h?.intervalMs ?? 1_800_000,\n    target: h?.target,\n    targetChatId: h?.targetChatId,\n    prompt: h?.prompt,\n    ackMaxChars: h?.ackMaxChars,\n    isolatedSession: h?.isolatedSession,\n    activeHours: h?.activeHours,\n  };\n}\n\n/** Map persisted gateway config to runner options (gateway start / reload). */\nexport function heartbeatRunnerConfigFromConfig(cfg: Config): HeartbeatRunnerConfig {\n  return mapConfigToRunner(cfg);\n}\n\nexport interface HeartbeatServiceDeps {\n  agentService: AgentService;\n  messageBus: MessageBus;\n  cronService: CronService;\n  sessionStore: SessionStore;\n  /** Current app config (for HEARTBEAT.md path under the default agent `profile/` directory). */\n  getConfig: () => Config;\n}\n\nexport class HeartbeatService {\n  private intervalId: ReturnType<typeof setInterval> | null = null;\n  private wake: ReturnType<typeof createHeartbeatWake>;\n  private lastHeartbeatText = '';\n  private lastHeartbeatAt = 0;\n  private runnerConfig: HeartbeatRunnerConfig | null = null;\n\n  constructor(private deps: HeartbeatServiceDeps) {\n    this.wake = createHeartbeatWake((reasons) => this.runHeartbeatOnce(reasons));\n  }\n\n  start(config: HeartbeatRunnerConfig): void {\n    if (!config.enabled) {\n      log.info('Heartbeat disabled');\n      this.runnerConfig = null;\n      return;\n    }\n\n    this.runnerConfig = config;\n    log.info({ intervalMs: config.intervalMs }, 'Heartbeat timer started (interval wake)');\n\n    this.intervalId = setInterval(() => {\n      this.wake.request({ reason: 'interval' });\n    }, config.intervalMs);\n    this.intervalId.unref?.();\n  }\n\n  /** Cron, exec completion, manual triggers, etc. */\n  requestNow(opts?: { reason?: string }): void {\n    this.wake.request({ reason: opts?.reason ?? 'manual' });\n  }\n\n  stop(): void {\n    if (this.intervalId) {\n      clearInterval(this.intervalId);\n      this.intervalId = null;\n    }\n    this.wake.stop();\n    this.runnerConfig = null;\n    log.info('Heartbeat stopped');\n  }\n\n  updateConfig(config: Config): void {\n    const mapped = mapConfigToRunner(config);\n    this.stop();\n    if (mapped.enabled) {\n      this.start(mapped);\n    }\n    log.info('Heartbeat config updated');\n  }\n\n  isRunning(): boolean {\n    return this.intervalId !== null;\n  }\n\n  private async runHeartbeatOnce(reasons: string[]): Promise<void> {\n    const reasonSummary = [...new Set(reasons)].join(', ') || 'unknown';\n\n    const cfg = this.runnerConfig;\n    if (!cfg?.enabled) {\n      log.debug({ reasons: reasonSummary }, 'Heartbeat: skip (disabled)');\n      return;\n    }\n\n    try {\n      const metrics = await this.deps.cronService.getMetrics();\n      log.trace(\n        { runningJobs: metrics.runningJobs, enabledJobs: metrics.enabledJobs },\n        'Heartbeat: cron metrics',\n      );\n    } catch {\n      /* optional */\n    }\n\n    if (cfg.activeHours && !isWithinActiveHours(cfg.activeHours)) {\n      log.debug({ reasons: reasonSummary }, 'Heartbeat: skip (outside active hours)');\n      return;\n    }\n\n    const heartbeatPath = resolveHeartbeatMdPath(this.deps.getConfig());\n    if (!heartbeatPath) {\n      log.debug({ reasons: reasonSummary }, 'Heartbeat: skip (no HEARTBEAT path)');\n      return;\n    }\n    let heartbeatContent: string | undefined;\n    try {\n      const raw = await readFile(heartbeatPath, 'utf-8');\n      if (isHeartbeatContentEmpty(raw)) {\n        log.debug({ path: heartbeatPath, reasons: reasonSummary }, 'Heartbeat: skip (HEARTBEAT.md empty)');\n        return;\n      }\n      heartbeatContent = raw.trim();\n    } catch {\n      log.debug({ path: heartbeatPath, reasons: reasonSummary }, 'Heartbeat: HEARTBEAT.md missing; continuing');\n    }\n\n    const sessionKey = cfg.isolatedSession\n      ? `heartbeat:isolated:${Date.now()}`\n      : 'heartbeat:main';\n\n    let basePrompt = (cfg.prompt?.trim() || DEFAULT_PROMPT).trim();\n    if (heartbeatContent) {\n      basePrompt = `${basePrompt}\\n\\n---\\nHEARTBEAT.md:\\n${heartbeatContent}\\n---`;\n    }\n    basePrompt = appendCronEventLines(basePrompt, reasons);\n    const prompt = `${basePrompt}\\n\\nCurrent time: ${new Date().toISOString()}`;\n\n    const ackMax = cfg.ackMaxChars ?? DEFAULT_ACK_MAX_CHARS;\n\n    log.debug({ sessionKey, reasons: reasonSummary }, 'Heartbeat: invoking agent');\n\n    // `heartbeat:main` reuses one session key; each run would otherwise append to the transcript\n    // until the model rejects the request (context window exceeded). Heartbeat prompts are\n    // self-contained (HEARTBEAT.md + this turn's text), so we start from an empty history.\n    if (sessionKey === 'heartbeat:main') {\n      try {\n        await this.deps.sessionStore.saveMessages(sessionKey, []);\n      } catch (err) {\n        log.warn({ err, sessionKey }, 'Heartbeat: failed to reset main session transcript');\n      }\n    }\n\n    let reply: string;\n    try {\n      reply = await this.deps.agentService.turnDispatcher.processDirect(prompt, sessionKey);\n    } catch (error) {\n      log.error({ err: error }, 'Heartbeat: agent call failed');\n      return;\n    }\n\n    if (!reply?.trim()) {\n      log.debug({ reasons: reasonSummary }, 'Heartbeat: skip (empty model reply)');\n      return;\n    }\n\n    if (shouldSilence(reply, ackMax)) {\n      log.info(\n        { ackMax, replyChars: reply.length, reasons: reasonSummary },\n        'Heartbeat: not sent — silent (HEARTBEAT_OK / short ack)',\n      );\n      return;\n    }\n\n    const { stripped } = stripHeartbeatToken(reply);\n    const finalText = stripped || reply.trim();\n\n    if (this.isDuplicate(finalText)) {\n      log.info(\n        { finalTextChars: finalText.length, reasons: reasonSummary },\n        'Heartbeat: not sent — duplicate within 24h',\n      );\n      return;\n    }\n\n    const target = cfg.target?.trim();\n    const targetChatId = cfg.targetChatId?.trim();\n    const hasDeliveryTarget = Boolean(target && targetChatId);\n\n    if (hasDeliveryTarget) {\n      await this.deps.messageBus.publishOutbound({\n        channel: target!,\n        chat_id: targetChatId!,\n        content: finalText,\n        type: 'message',\n      });\n      log.info(\n        {\n          reasons: reasonSummary,\n          channel: target,\n          chatId: targetChatId,\n          contentChars: finalText.length,\n        },\n        'Heartbeat: sent — outbound queued',\n      );\n    } else {\n      log.info(\n        { reasons: reasonSummary, finalTextChars: finalText.length },\n        'Heartbeat: not sent — no delivery target (set gateway.heartbeat.target + targetChatId)',\n      );\n    }\n\n    this.lastHeartbeatText = finalText;\n    this.lastHeartbeatAt = Date.now();\n  }\n\n  private isDuplicate(text: string): boolean {\n    const DEDUP_WINDOW_MS = 24 * 60 * 60 * 1000;\n    return (\n      text.trim() === this.lastHeartbeatText.trim() &&\n      Date.now() - this.lastHeartbeatAt < DEDUP_WINDOW_MS\n    );\n  }\n}\n"],"mappings":";;;;;;;;;;aAgBqD;AAGrD,MAAM,MAAM,aAAa,mBAAmB;AAE5C,MAAM,iBACJ;AAiBF,SAAS,kBAAkB,KAAgD;CACzE,MAAM,IAAI,KAAK,SAAS;AACxB,QAAO;EACL,SAAS,GAAG,WAAW;EACvB,YAAY,GAAG,cAAc;EAC7B,QAAQ,GAAG;EACX,cAAc,GAAG;EACjB,QAAQ,GAAG;EACX,aAAa,GAAG;EAChB,iBAAiB,GAAG;EACpB,aAAa,GAAG;EACjB;;;AAIH,SAAgB,gCAAgC,KAAoC;AAClF,QAAO,kBAAkB,IAAI;;AAY/B,IAAa,mBAAb,MAA8B;CAC5B,aAA4D;CAC5D;CACA,oBAA4B;CAC5B,kBAA0B;CAC1B,eAAqD;CAErD,YAAY,MAAoC;AAA5B,OAAA,OAAA;AAClB,OAAK,OAAO,qBAAqB,YAAY,KAAK,iBAAiB,QAAQ,CAAC;;CAG9E,MAAM,QAAqC;AACzC,MAAI,CAAC,OAAO,SAAS;AACnB,OAAI,KAAK,qBAAqB;AAC9B,QAAK,eAAe;AACpB;;AAGF,OAAK,eAAe;AACpB,MAAI,KAAK,EAAE,YAAY,OAAO,YAAY,EAAE,0CAA0C;AAEtF,OAAK,aAAa,kBAAkB;AAClC,QAAK,KAAK,QAAQ,EAAE,QAAQ,YAAY,CAAC;KACxC,OAAO,WAAW;AACrB,OAAK,WAAW,SAAS;;;CAI3B,WAAW,MAAkC;AAC3C,OAAK,KAAK,QAAQ,EAAE,QAAQ,MAAM,UAAU,UAAU,CAAC;;CAGzD,OAAa;AACX,MAAI,KAAK,YAAY;AACnB,iBAAc,KAAK,WAAW;AAC9B,QAAK,aAAa;;AAEpB,OAAK,KAAK,MAAM;AAChB,OAAK,eAAe;AACpB,MAAI,KAAK,oBAAoB;;CAG/B,aAAa,QAAsB;EACjC,MAAM,SAAS,kBAAkB,OAAO;AACxC,OAAK,MAAM;AACX,MAAI,OAAO,QACT,MAAK,MAAM,OAAO;AAEpB,MAAI,KAAK,2BAA2B;;CAGtC,YAAqB;AACnB,SAAO,KAAK,eAAe;;CAG7B,MAAc,iBAAiB,SAAkC;EAC/D,MAAM,gBAAgB,CAAC,GAAG,IAAI,IAAI,QAAQ,CAAC,CAAC,KAAK,KAAK,IAAI;EAE1D,MAAM,MAAM,KAAK;AACjB,MAAI,CAAC,KAAK,SAAS;AACjB,OAAI,MAAM,EAAE,SAAS,eAAe,EAAE,6BAA6B;AACnE;;AAGF,MAAI;GACF,MAAM,UAAU,MAAM,KAAK,KAAK,YAAY,YAAY;AACxD,OAAI,MACF;IAAE,aAAa,QAAQ;IAAa,aAAa,QAAQ;IAAa,EACtE,0BACD;UACK;AAIR,MAAI,IAAI,eAAe,CAAC,oBAAoB,IAAI,YAAY,EAAE;AAC5D,OAAI,MAAM,EAAE,SAAS,eAAe,EAAE,yCAAyC;AAC/E;;EAGF,MAAM,gBAAgB,uBAAuB,KAAK,KAAK,WAAW,CAAC;AACnE,MAAI,CAAC,eAAe;AAClB,OAAI,MAAM,EAAE,SAAS,eAAe,EAAE,sCAAsC;AAC5E;;EAEF,IAAI;AACJ,MAAI;GACF,MAAM,MAAM,MAAM,SAAS,eAAe,QAAQ;AAClD,OAAI,wBAAwB,IAAI,EAAE;AAChC,QAAI,MAAM;KAAE,MAAM;KAAe,SAAS;KAAe,EAAE,uCAAuC;AAClG;;AAEF,sBAAmB,IAAI,MAAM;UACvB;AACN,OAAI,MAAM;IAAE,MAAM;IAAe,SAAS;IAAe,EAAE,8CAA8C;;EAG3G,MAAM,aAAa,IAAI,kBACnB,sBAAsB,KAAK,KAAK,KAChC;EAEJ,IAAI,cAAc,IAAI,QAAQ,MAAM,IAAI,gBAAgB,MAAM;AAC9D,MAAI,iBACF,cAAa,GAAG,WAAW,0BAA0B,iBAAiB;AAExE,eAAa,qBAAqB,YAAY,QAAQ;EACtD,MAAM,SAAS,GAAG,WAAW,qCAAoB,IAAI,MAAM,EAAC,aAAa;EAEzE,MAAM,SAAS,IAAI,eAAA;AAEnB,MAAI,MAAM;GAAE;GAAY,SAAS;GAAe,EAAE,4BAA4B;AAK9E,MAAI,eAAe,iBACjB,KAAI;AACF,SAAM,KAAK,KAAK,aAAa,aAAa,YAAY,EAAE,CAAC;WAClD,KAAK;AACZ,OAAI,KAAK;IAAE;IAAK;IAAY,EAAE,qDAAqD;;EAIvF,IAAI;AACJ,MAAI;AACF,WAAQ,MAAM,KAAK,KAAK,aAAa,eAAe,cAAc,QAAQ,WAAW;WAC9E,OAAO;AACd,OAAI,MAAM,EAAE,KAAK,OAAO,EAAE,+BAA+B;AACzD;;AAGF,MAAI,CAAC,OAAO,MAAM,EAAE;AAClB,OAAI,MAAM,EAAE,SAAS,eAAe,EAAE,sCAAsC;AAC5E;;AAGF,MAAI,cAAc,OAAO,OAAO,EAAE;AAChC,OAAI,KACF;IAAE;IAAQ,YAAY,MAAM;IAAQ,SAAS;IAAe,EAC5D,0DACD;AACD;;EAGF,MAAM,EAAE,aAAa,oBAAoB,MAAM;EAC/C,MAAM,YAAY,YAAY,MAAM,MAAM;AAE1C,MAAI,KAAK,YAAY,UAAU,EAAE;AAC/B,OAAI,KACF;IAAE,gBAAgB,UAAU;IAAQ,SAAS;IAAe,EAC5D,6CACD;AACD;;EAGF,MAAM,SAAS,IAAI,QAAQ,MAAM;EACjC,MAAM,eAAe,IAAI,cAAc,MAAM;AAG7C,MAF0B,QAAQ,UAAU,aAEvB,EAAE;AACrB,SAAM,KAAK,KAAK,WAAW,gBAAgB;IACzC,SAAS;IACT,SAAS;IACT,SAAS;IACT,MAAM;IACP,CAAC;AACF,OAAI,KACF;IACE,SAAS;IACT,SAAS;IACT,QAAQ;IACR,cAAc,UAAU;IACzB,EACD,oCACD;QAED,KAAI,KACF;GAAE,SAAS;GAAe,gBAAgB,UAAU;GAAQ,EAC5D,yFACD;AAGH,OAAK,oBAAoB;AACzB,OAAK,kBAAkB,KAAK,KAAK;;CAGnC,YAAoB,MAAuB;AAEzC,SACE,KAAK,MAAM,KAAK,KAAK,kBAAkB,MAAM,IAC7C,KAAK,KAAK,GAAG,KAAK,kBAHI,OAAU,KAAK"}

package/dist/src/gateway/hono/app.js

@@ -3,11 +3,11 @@ import { init_logger } from "../../utils/logger.js";
 import { resolveAllowedBrowserOrigins, resolveGatewayServiceListenPort } from "../host.js";
 import { resolveGatewayEffectiveHost } from "../../config/gateway-bind.js";
 import { loadTunnelState } from "../../tunnel/tunnel-state.js";
+import { resolveReverseProxyPublicUrl } from "../public-url.js";
 import { maxWebchatAgentRequestBodyBytes } from "../chat-limits.js";
 import { isLoopbackIpAddress, isTrustedProxyAddress } from "../client-ip.js";
 import { buildGatewayConsoleCspHeader } from "../security/csp.js";
 import { checkBrowserOrigin } from "../security/origin-check.js";
-import { resolveReverseProxyPublicUrl } from "../public-url.js";
 import { auth } from "./middleware/auth.js";
 import { operatorScopes } from "./middleware/scopes.js";
 import { createStrictRateLimitMiddleware } from "./middleware/strict-rate-limit.js";

package/dist/src/gateway/hono/lib/agent-model.d.ts

@@ -1,20 +1,35 @@
-/** Normalize agent model ref (string | `{ primary }`) for API clients. */
+import type { AgentTypedModel } from '../../../config/schema.js';
+/**
+ * Coerce PATCH body `models[]` into validated typed model entries.
+ * Returns `null` to clear, `undefined` when input should be skipped, or cleaned array.
+ * Empty array after filtering → `null` (same as clear).
+ */
+export declare function normalizePatchTypedModels(v: unknown): AgentTypedModel[] | null | undefined;
+/** Read `primary` from an `AgentModelConfig` object. */
 export declare function agentModelRefToString(ref: unknown): string | undefined;
 export declare function agentModelFallbacksToArray(ref: unknown): string[];
 /**
- * Accept string or `{ primary, fallbacks? }` from PATCH body; coerce to schema-friendly shape.
+ * Coerce a PATCH body `model` value into the canonical `{ primary, fallbacks? }`
+ * object form. Returns `undefined` when the input has no usable primary so the
+ * caller can skip the assignment.
  */
-export declare function normalizePatchAgentModel(v: unknown): unknown;
+export declare function normalizePatchAgentModel(v: unknown): {
+    primary: string;
+    fallbacks?: string[];
+} | undefined;
 /** Read `timeoutMs` from an image-generation model ref (only set when ref is an object). */
 export declare function agentImageGenerationModelTimeoutMs(ref: unknown): number | null;
 /** Read `autoProviderFallback` from an image-generation model ref. Defaults to false. */
 export declare function agentImageGenerationModelAutoProviderFallback(ref: unknown): boolean;
 /**
- * PATCH body normalizer for `agents.defaults.imageGenerationModel`. Accepts:
- *
- *   - `string` → kept as plain string ref.
- *   - `{ primary, fallbacks?, timeoutMs?, autoProviderFallback? }` → object form.
- *
- * Drops empty/blank values so the persisted config stays clean.
+ * PATCH body normalizer for `agents.defaults.imageGenerationModel`. Always
+ * emits `{ primary, fallbacks?, timeoutMs?, autoProviderFallback? }`. Returns
+ * `undefined` when the input has no usable primary so the caller can skip the
+ * assignment.
  */
-export declare function normalizePatchAgentImageGenerationModel(v: unknown): unknown;
+export declare function normalizePatchAgentImageGenerationModel(v: unknown): {
+    primary: string;
+    fallbacks?: string[];
+    timeoutMs?: number;
+    autoProviderFallback?: true;
+} | undefined;

package/dist/src/gateway/hono/lib/agent-model.js

@@ -1,36 +1,66 @@
 //#region src/gateway/hono/lib/agent-model.ts
-/** Normalize agent model ref (string | `{ primary }`) for API clients. */
-function agentModelRefToString(ref) {
-	if (ref === void 0 || ref === null) return void 0;
-	if (typeof ref === "string") return ref;
-	if (typeof ref === "object" && ref !== null && "primary" in ref) {
-		const p = ref.primary;
-		return typeof p === "string" ? p : void 0;
+const TYPED_MODEL_ID_RE = /^[a-z][a-z0-9_-]{0,63}$/;
+function isValidProviderModelRef(ref) {
+	const trimmed = ref.trim();
+	const idx = trimmed.indexOf("/");
+	return idx > 0 && idx < trimmed.length - 1;
+}
+/**
+* Coerce PATCH body `models[]` into validated typed model entries.
+* Returns `null` to clear, `undefined` when input should be skipped, or cleaned array.
+* Empty array after filtering → `null` (same as clear).
+*/
+function normalizePatchTypedModels(v) {
+	if (v === void 0) return void 0;
+	if (v === null) return null;
+	if (!Array.isArray(v)) return void 0;
+	const byId = /* @__PURE__ */ new Map();
+	for (const raw of v) {
+		if (!raw || typeof raw !== "object" || Array.isArray(raw)) continue;
+		const o = raw;
+		const id = typeof o.id === "string" ? o.id.trim() : "";
+		const model = typeof o.model === "string" ? o.model.trim() : "";
+		if (!id || !TYPED_MODEL_ID_RE.test(id) || !model || !isValidProviderModelRef(model)) continue;
+		const description = typeof o.description === "string" && o.description.trim() ? o.description.trim().slice(0, 500) : void 0;
+		byId.set(id, description ? {
+			id,
+			description,
+			model
+		} : {
+			id,
+			model
+		});
 	}
+	if (byId.size === 0) return null;
+	return [...byId.values()];
+}
+/** Read `primary` from an `AgentModelConfig` object. */
+function agentModelRefToString(ref) {
+	if (!ref || typeof ref !== "object" || Array.isArray(ref)) return void 0;
+	const p = ref.primary;
+	return typeof p === "string" && p.trim() ? p : void 0;
 }
 function agentModelFallbacksToArray(ref) {
-	if (typeof ref !== "object" || ref === null || !("fallbacks" in ref)) return [];
+	if (!ref || typeof ref !== "object" || Array.isArray(ref)) return [];
 	const f = ref.fallbacks;
 	if (!Array.isArray(f)) return [];
 	return f.filter((x) => typeof x === "string" && x.trim().length > 0);
 }
 /**
-* Accept string or `{ primary, fallbacks? }` from PATCH body; coerce to schema-friendly shape.
+* Coerce a PATCH body `model` value into the canonical `{ primary, fallbacks? }`
+* object form. Returns `undefined` when the input has no usable primary so the
+* caller can skip the assignment.
 */
 function normalizePatchAgentModel(v) {
-	if (v === void 0) return void 0;
-	if (typeof v === "string") return v;
-	if (typeof v === "object" && v !== null && !Array.isArray(v)) {
-		const o = v;
-		const primary = typeof o.primary === "string" ? o.primary.trim() : "";
-		const fallbacks = Array.isArray(o.fallbacks) ? o.fallbacks.filter((x) => typeof x === "string" && x.trim().length > 0) : [];
-		if (primary && fallbacks.length > 0) return {
-			primary,
-			fallbacks
-		};
-		if (primary) return primary;
-	}
-	return v;
+	if (!v || typeof v !== "object" || Array.isArray(v)) return void 0;
+	const o = v;
+	const primary = typeof o.primary === "string" ? o.primary.trim() : "";
+	if (!primary) return void 0;
+	const fallbacks = Array.isArray(o.fallbacks) ? o.fallbacks.filter((x) => typeof x === "string" && x.trim().length > 0) : [];
+	return fallbacks.length > 0 ? {
+		primary,
+		fallbacks
+	} : { primary };
 }
 /** Read `timeoutMs` from an image-generation model ref (only set when ref is an object). */
 function agentImageGenerationModelTimeoutMs(ref) {
@@ -44,30 +74,24 @@ function agentImageGenerationModelAutoProviderFallback(ref) {
 	return ref.autoProviderFallback === true;
 }
 /**
-* PATCH body normalizer for `agents.defaults.imageGenerationModel`. Accepts:
-*
-*   - `string` → kept as plain string ref.
-*   - `{ primary, fallbacks?, timeoutMs?, autoProviderFallback? }` → object form.
-*
-* Drops empty/blank values so the persisted config stays clean.
+* PATCH body normalizer for `agents.defaults.imageGenerationModel`. Always
+* emits `{ primary, fallbacks?, timeoutMs?, autoProviderFallback? }`. Returns
+* `undefined` when the input has no usable primary so the caller can skip the
+* assignment.
 */
 function normalizePatchAgentImageGenerationModel(v) {
-	if (v === void 0) return void 0;
-	if (typeof v === "string") return v;
-	if (typeof v !== "object" || v === null || Array.isArray(v)) return v;
+	if (!v || typeof v !== "object" || Array.isArray(v)) return void 0;
 	const o = v;
 	const primary = typeof o.primary === "string" ? o.primary.trim() : "";
+	if (!primary) return void 0;
+	const out = { primary };
 	const fallbacks = Array.isArray(o.fallbacks) ? o.fallbacks.filter((x) => typeof x === "string" && x.trim().length > 0).map((x) => x.trim()) : [];
-	const out = {};
-	if (primary) out.primary = primary;
 	if (fallbacks.length > 0) out.fallbacks = fallbacks;
 	if (typeof o.timeoutMs === "number" && Number.isFinite(o.timeoutMs) && o.timeoutMs > 0) out.timeoutMs = Math.floor(o.timeoutMs);
 	if (o.autoProviderFallback === true) out.autoProviderFallback = true;
-	if (Object.keys(out).length === 0) return void 0;
-	if (Object.keys(out).length === 1 && typeof out.primary === "string") return out.primary;
 	return out;
 }
 //#endregion
-export { agentImageGenerationModelAutoProviderFallback, agentImageGenerationModelTimeoutMs, agentModelFallbacksToArray, agentModelRefToString, normalizePatchAgentImageGenerationModel, normalizePatchAgentModel };
+export { agentImageGenerationModelAutoProviderFallback, agentImageGenerationModelTimeoutMs, agentModelFallbacksToArray, agentModelRefToString, normalizePatchAgentImageGenerationModel, normalizePatchAgentModel, normalizePatchTypedModels };
 
 //# sourceMappingURL=agent-model.js.map

package/dist/src/gateway/hono/lib/agent-model.js.map

@@ -1 +1 @@
-{"version":3,"file":"agent-model.js","names":[],"sources":["../../../../../src/gateway/hono/lib/agent-model.ts"],"sourcesContent":["/** Normalize agent model ref (string | `{ primary }`) for API clients. */\nexport function agentModelRefToString(ref: unknown): string | undefined {\n  if (ref === undefined || ref === null) return undefined;\n  if (typeof ref === 'string') return ref;\n  if (typeof ref === 'object' && ref !== null && 'primary' in ref) {\n    const p = (ref as { primary?: string }).primary;\n    return typeof p === 'string' ? p : undefined;\n  }\n  return undefined;\n}\n\nexport function agentModelFallbacksToArray(ref: unknown): string[] {\n  if (typeof ref !== 'object' || ref === null || !('fallbacks' in ref)) {\n    return [];\n  }\n  const f = (ref as { fallbacks?: unknown }).fallbacks;\n  if (!Array.isArray(f)) {\n    return [];\n  }\n  return f.filter((x): x is string => typeof x === 'string' && x.trim().length > 0);\n}\n\n/**\n * Accept string or `{ primary, fallbacks? }` from PATCH body; coerce to schema-friendly shape.\n */\nexport function normalizePatchAgentModel(v: unknown): unknown {\n  if (v === undefined) return undefined;\n  if (typeof v === 'string') {\n    return v;\n  }\n  if (typeof v === 'object' && v !== null && !Array.isArray(v)) {\n    const o = v as Record<string, unknown>;\n    const primary = typeof o.primary === 'string' ? o.primary.trim() : '';\n    const fallbacks = Array.isArray(o.fallbacks)\n      ? o.fallbacks.filter((x): x is string => typeof x === 'string' && x.trim().length > 0)\n      : [];\n    if (primary && fallbacks.length > 0) {\n      return { primary, fallbacks };\n    }\n    if (primary) {\n      return primary;\n    }\n  }\n  return v;\n}\n\n/** Read `timeoutMs` from an image-generation model ref (only set when ref is an object). */\nexport function agentImageGenerationModelTimeoutMs(ref: unknown): number | null {\n  if (!ref || typeof ref !== 'object' || Array.isArray(ref)) return null;\n  const v = (ref as { timeoutMs?: unknown }).timeoutMs;\n  return typeof v === 'number' && Number.isFinite(v) && v > 0 ? v : null;\n}\n\n/** Read `autoProviderFallback` from an image-generation model ref. Defaults to false. */\nexport function agentImageGenerationModelAutoProviderFallback(ref: unknown): boolean {\n  if (!ref || typeof ref !== 'object' || Array.isArray(ref)) return false;\n  return (ref as { autoProviderFallback?: unknown }).autoProviderFallback === true;\n}\n\n/**\n * PATCH body normalizer for `agents.defaults.imageGenerationModel`. Accepts:\n *\n *   - `string` → kept as plain string ref.\n *   - `{ primary, fallbacks?, timeoutMs?, autoProviderFallback? }` → object form.\n *\n * Drops empty/blank values so the persisted config stays clean.\n */\nexport function normalizePatchAgentImageGenerationModel(v: unknown): unknown {\n  if (v === undefined) return undefined;\n  if (typeof v === 'string') return v;\n  if (typeof v !== 'object' || v === null || Array.isArray(v)) return v;\n  const o = v as Record<string, unknown>;\n  const primary = typeof o.primary === 'string' ? o.primary.trim() : '';\n  const fallbacks = Array.isArray(o.fallbacks)\n    ? o.fallbacks\n        .filter((x): x is string => typeof x === 'string' && x.trim().length > 0)\n        .map((x) => x.trim())\n    : [];\n  const out: Record<string, unknown> = {};\n  if (primary) out.primary = primary;\n  if (fallbacks.length > 0) out.fallbacks = fallbacks;\n  if (typeof o.timeoutMs === 'number' && Number.isFinite(o.timeoutMs) && o.timeoutMs > 0) {\n    out.timeoutMs = Math.floor(o.timeoutMs);\n  }\n  if (o.autoProviderFallback === true) out.autoProviderFallback = true;\n  // Drop to plain string when no extra knobs are set (matches legacy shape).\n  if (Object.keys(out).length === 0) return undefined;\n  if (Object.keys(out).length === 1 && typeof out.primary === 'string') return out.primary;\n  return out;\n}\n"],"mappings":";;AACA,SAAgB,sBAAsB,KAAkC;AACtE,KAAI,QAAQ,KAAA,KAAa,QAAQ,KAAM,QAAO,KAAA;AAC9C,KAAI,OAAO,QAAQ,SAAU,QAAO;AACpC,KAAI,OAAO,QAAQ,YAAY,QAAQ,QAAQ,aAAa,KAAK;EAC/D,MAAM,IAAK,IAA6B;AACxC,SAAO,OAAO,MAAM,WAAW,IAAI,KAAA;;;AAKvC,SAAgB,2BAA2B,KAAwB;AACjE,KAAI,OAAO,QAAQ,YAAY,QAAQ,QAAQ,EAAE,eAAe,KAC9D,QAAO,EAAE;CAEX,MAAM,IAAK,IAAgC;AAC3C,KAAI,CAAC,MAAM,QAAQ,EAAE,CACnB,QAAO,EAAE;AAEX,QAAO,EAAE,QAAQ,MAAmB,OAAO,MAAM,YAAY,EAAE,MAAM,CAAC,SAAS,EAAE;;;;;AAMnF,SAAgB,yBAAyB,GAAqB;AAC5D,KAAI,MAAM,KAAA,EAAW,QAAO,KAAA;AAC5B,KAAI,OAAO,MAAM,SACf,QAAO;AAET,KAAI,OAAO,MAAM,YAAY,MAAM,QAAQ,CAAC,MAAM,QAAQ,EAAE,EAAE;EAC5D,MAAM,IAAI;EACV,MAAM,UAAU,OAAO,EAAE,YAAY,WAAW,EAAE,QAAQ,MAAM,GAAG;EACnE,MAAM,YAAY,MAAM,QAAQ,EAAE,UAAU,GACxC,EAAE,UAAU,QAAQ,MAAmB,OAAO,MAAM,YAAY,EAAE,MAAM,CAAC,SAAS,EAAE,GACpF,EAAE;AACN,MAAI,WAAW,UAAU,SAAS,EAChC,QAAO;GAAE;GAAS;GAAW;AAE/B,MAAI,QACF,QAAO;;AAGX,QAAO;;;AAIT,SAAgB,mCAAmC,KAA6B;AAC9E,KAAI,CAAC,OAAO,OAAO,QAAQ,YAAY,MAAM,QAAQ,IAAI,CAAE,QAAO;CAClE,MAAM,IAAK,IAAgC;AAC3C,QAAO,OAAO,MAAM,YAAY,OAAO,SAAS,EAAE,IAAI,IAAI,IAAI,IAAI;;;AAIpE,SAAgB,8CAA8C,KAAuB;AACnF,KAAI,CAAC,OAAO,OAAO,QAAQ,YAAY,MAAM,QAAQ,IAAI,CAAE,QAAO;AAClE,QAAQ,IAA2C,yBAAyB;;;;;;;;;;AAW9E,SAAgB,wCAAwC,GAAqB;AAC3E,KAAI,MAAM,KAAA,EAAW,QAAO,KAAA;AAC5B,KAAI,OAAO,MAAM,SAAU,QAAO;AAClC,KAAI,OAAO,MAAM,YAAY,MAAM,QAAQ,MAAM,QAAQ,EAAE,CAAE,QAAO;CACpE,MAAM,IAAI;CACV,MAAM,UAAU,OAAO,EAAE,YAAY,WAAW,EAAE,QAAQ,MAAM,GAAG;CACnE,MAAM,YAAY,MAAM,QAAQ,EAAE,UAAU,GACxC,EAAE,UACC,QAAQ,MAAmB,OAAO,MAAM,YAAY,EAAE,MAAM,CAAC,SAAS,EAAE,CACxE,KAAK,MAAM,EAAE,MAAM,CAAC,GACvB,EAAE;CACN,MAAM,MAA+B,EAAE;AACvC,KAAI,QAAS,KAAI,UAAU;AAC3B,KAAI,UAAU,SAAS,EAAG,KAAI,YAAY;AAC1C,KAAI,OAAO,EAAE,cAAc,YAAY,OAAO,SAAS,EAAE,UAAU,IAAI,EAAE,YAAY,EACnF,KAAI,YAAY,KAAK,MAAM,EAAE,UAAU;AAEzC,KAAI,EAAE,yBAAyB,KAAM,KAAI,uBAAuB;AAEhE,KAAI,OAAO,KAAK,IAAI,CAAC,WAAW,EAAG,QAAO,KAAA;AAC1C,KAAI,OAAO,KAAK,IAAI,CAAC,WAAW,KAAK,OAAO,IAAI,YAAY,SAAU,QAAO,IAAI;AACjF,QAAO"}
+{"version":3,"file":"agent-model.js","names":[],"sources":["../../../../../src/gateway/hono/lib/agent-model.ts"],"sourcesContent":["import type { AgentTypedModel } from '../../../config/schema.js';\n\nconst TYPED_MODEL_ID_RE = /^[a-z][a-z0-9_-]{0,63}$/;\n\nfunction isValidProviderModelRef(ref: string): boolean {\n  const trimmed = ref.trim();\n  const idx = trimmed.indexOf('/');\n  return idx > 0 && idx < trimmed.length - 1;\n}\n\n/**\n * Coerce PATCH body `models[]` into validated typed model entries.\n * Returns `null` to clear, `undefined` when input should be skipped, or cleaned array.\n * Empty array after filtering → `null` (same as clear).\n */\nexport function normalizePatchTypedModels(v: unknown): AgentTypedModel[] | null | undefined {\n  if (v === undefined) return undefined;\n  if (v === null) return null;\n  if (!Array.isArray(v)) return undefined;\n\n  const byId = new Map<string, AgentTypedModel>();\n  for (const raw of v) {\n    if (!raw || typeof raw !== 'object' || Array.isArray(raw)) continue;\n    const o = raw as Record<string, unknown>;\n    const id = typeof o.id === 'string' ? o.id.trim() : '';\n    const model = typeof o.model === 'string' ? o.model.trim() : '';\n    if (!id || !TYPED_MODEL_ID_RE.test(id) || !model || !isValidProviderModelRef(model)) continue;\n    const description =\n      typeof o.description === 'string' && o.description.trim()\n        ? o.description.trim().slice(0, 500)\n        : undefined;\n    byId.set(id, description ? { id, description, model } : { id, model });\n  }\n\n  if (byId.size === 0) return null;\n  return [...byId.values()];\n}\n\n/** Read `primary` from an `AgentModelConfig` object. */\nexport function agentModelRefToString(ref: unknown): string | undefined {\n  if (!ref || typeof ref !== 'object' || Array.isArray(ref)) return undefined;\n  const p = (ref as { primary?: string }).primary;\n  return typeof p === 'string' && p.trim() ? p : undefined;\n}\n\nexport function agentModelFallbacksToArray(ref: unknown): string[] {\n  if (!ref || typeof ref !== 'object' || Array.isArray(ref)) return [];\n  const f = (ref as { fallbacks?: unknown }).fallbacks;\n  if (!Array.isArray(f)) return [];\n  return f.filter((x): x is string => typeof x === 'string' && x.trim().length > 0);\n}\n\n/**\n * Coerce a PATCH body `model` value into the canonical `{ primary, fallbacks? }`\n * object form. Returns `undefined` when the input has no usable primary so the\n * caller can skip the assignment.\n */\nexport function normalizePatchAgentModel(v: unknown): { primary: string; fallbacks?: string[] } | undefined {\n  if (!v || typeof v !== 'object' || Array.isArray(v)) return undefined;\n  const o = v as Record<string, unknown>;\n  const primary = typeof o.primary === 'string' ? o.primary.trim() : '';\n  if (!primary) return undefined;\n  const fallbacks = Array.isArray(o.fallbacks)\n    ? o.fallbacks.filter((x): x is string => typeof x === 'string' && x.trim().length > 0)\n    : [];\n  return fallbacks.length > 0 ? { primary, fallbacks } : { primary };\n}\n\n/** Read `timeoutMs` from an image-generation model ref (only set when ref is an object). */\nexport function agentImageGenerationModelTimeoutMs(ref: unknown): number | null {\n  if (!ref || typeof ref !== 'object' || Array.isArray(ref)) return null;\n  const v = (ref as { timeoutMs?: unknown }).timeoutMs;\n  return typeof v === 'number' && Number.isFinite(v) && v > 0 ? v : null;\n}\n\n/** Read `autoProviderFallback` from an image-generation model ref. Defaults to false. */\nexport function agentImageGenerationModelAutoProviderFallback(ref: unknown): boolean {\n  if (!ref || typeof ref !== 'object' || Array.isArray(ref)) return false;\n  return (ref as { autoProviderFallback?: unknown }).autoProviderFallback === true;\n}\n\n/**\n * PATCH body normalizer for `agents.defaults.imageGenerationModel`. Always\n * emits `{ primary, fallbacks?, timeoutMs?, autoProviderFallback? }`. Returns\n * `undefined` when the input has no usable primary so the caller can skip the\n * assignment.\n */\nexport function normalizePatchAgentImageGenerationModel(\n  v: unknown,\n): { primary: string; fallbacks?: string[]; timeoutMs?: number; autoProviderFallback?: true } | undefined {\n  if (!v || typeof v !== 'object' || Array.isArray(v)) return undefined;\n  const o = v as Record<string, unknown>;\n  const primary = typeof o.primary === 'string' ? o.primary.trim() : '';\n  if (!primary) return undefined;\n  const out: { primary: string; fallbacks?: string[]; timeoutMs?: number; autoProviderFallback?: true } = { primary };\n  const fallbacks = Array.isArray(o.fallbacks)\n    ? o.fallbacks\n        .filter((x): x is string => typeof x === 'string' && x.trim().length > 0)\n        .map((x) => x.trim())\n    : [];\n  if (fallbacks.length > 0) out.fallbacks = fallbacks;\n  if (typeof o.timeoutMs === 'number' && Number.isFinite(o.timeoutMs) && o.timeoutMs > 0) {\n    out.timeoutMs = Math.floor(o.timeoutMs);\n  }\n  if (o.autoProviderFallback === true) out.autoProviderFallback = true;\n  return out;\n}\n"],"mappings":";AAEA,MAAM,oBAAoB;AAE1B,SAAS,wBAAwB,KAAsB;CACrD,MAAM,UAAU,IAAI,MAAM;CAC1B,MAAM,MAAM,QAAQ,QAAQ,IAAI;AAChC,QAAO,MAAM,KAAK,MAAM,QAAQ,SAAS;;;;;;;AAQ3C,SAAgB,0BAA0B,GAAkD;AAC1F,KAAI,MAAM,KAAA,EAAW,QAAO,KAAA;AAC5B,KAAI,MAAM,KAAM,QAAO;AACvB,KAAI,CAAC,MAAM,QAAQ,EAAE,CAAE,QAAO,KAAA;CAE9B,MAAM,uBAAO,IAAI,KAA8B;AAC/C,MAAK,MAAM,OAAO,GAAG;AACnB,MAAI,CAAC,OAAO,OAAO,QAAQ,YAAY,MAAM,QAAQ,IAAI,CAAE;EAC3D,MAAM,IAAI;EACV,MAAM,KAAK,OAAO,EAAE,OAAO,WAAW,EAAE,GAAG,MAAM,GAAG;EACpD,MAAM,QAAQ,OAAO,EAAE,UAAU,WAAW,EAAE,MAAM,MAAM,GAAG;AAC7D,MAAI,CAAC,MAAM,CAAC,kBAAkB,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,wBAAwB,MAAM,CAAE;EACrF,MAAM,cACJ,OAAO,EAAE,gBAAgB,YAAY,EAAE,YAAY,MAAM,GACrD,EAAE,YAAY,MAAM,CAAC,MAAM,GAAG,IAAI,GAClC,KAAA;AACN,OAAK,IAAI,IAAI,cAAc;GAAE;GAAI;GAAa;GAAO,GAAG;GAAE;GAAI;GAAO,CAAC;;AAGxE,KAAI,KAAK,SAAS,EAAG,QAAO;AAC5B,QAAO,CAAC,GAAG,KAAK,QAAQ,CAAC;;;AAI3B,SAAgB,sBAAsB,KAAkC;AACtE,KAAI,CAAC,OAAO,OAAO,QAAQ,YAAY,MAAM,QAAQ,IAAI,CAAE,QAAO,KAAA;CAClE,MAAM,IAAK,IAA6B;AACxC,QAAO,OAAO,MAAM,YAAY,EAAE,MAAM,GAAG,IAAI,KAAA;;AAGjD,SAAgB,2BAA2B,KAAwB;AACjE,KAAI,CAAC,OAAO,OAAO,QAAQ,YAAY,MAAM,QAAQ,IAAI,CAAE,QAAO,EAAE;CACpE,MAAM,IAAK,IAAgC;AAC3C,KAAI,CAAC,MAAM,QAAQ,EAAE,CAAE,QAAO,EAAE;AAChC,QAAO,EAAE,QAAQ,MAAmB,OAAO,MAAM,YAAY,EAAE,MAAM,CAAC,SAAS,EAAE;;;;;;;AAQnF,SAAgB,yBAAyB,GAAmE;AAC1G,KAAI,CAAC,KAAK,OAAO,MAAM,YAAY,MAAM,QAAQ,EAAE,CAAE,QAAO,KAAA;CAC5D,MAAM,IAAI;CACV,MAAM,UAAU,OAAO,EAAE,YAAY,WAAW,EAAE,QAAQ,MAAM,GAAG;AACnE,KAAI,CAAC,QAAS,QAAO,KAAA;CACrB,MAAM,YAAY,MAAM,QAAQ,EAAE,UAAU,GACxC,EAAE,UAAU,QAAQ,MAAmB,OAAO,MAAM,YAAY,EAAE,MAAM,CAAC,SAAS,EAAE,GACpF,EAAE;AACN,QAAO,UAAU,SAAS,IAAI;EAAE;EAAS;EAAW,GAAG,EAAE,SAAS;;;AAIpE,SAAgB,mCAAmC,KAA6B;AAC9E,KAAI,CAAC,OAAO,OAAO,QAAQ,YAAY,MAAM,QAAQ,IAAI,CAAE,QAAO;CAClE,MAAM,IAAK,IAAgC;AAC3C,QAAO,OAAO,MAAM,YAAY,OAAO,SAAS,EAAE,IAAI,IAAI,IAAI,IAAI;;;AAIpE,SAAgB,8CAA8C,KAAuB;AACnF,KAAI,CAAC,OAAO,OAAO,QAAQ,YAAY,MAAM,QAAQ,IAAI,CAAE,QAAO;AAClE,QAAQ,IAA2C,yBAAyB;;;;;;;;AAS9E,SAAgB,wCACd,GACwG;AACxG,KAAI,CAAC,KAAK,OAAO,MAAM,YAAY,MAAM,QAAQ,EAAE,CAAE,QAAO,KAAA;CAC5D,MAAM,IAAI;CACV,MAAM,UAAU,OAAO,EAAE,YAAY,WAAW,EAAE,QAAQ,MAAM,GAAG;AACnE,KAAI,CAAC,QAAS,QAAO,KAAA;CACrB,MAAM,MAAkG,EAAE,SAAS;CACnH,MAAM,YAAY,MAAM,QAAQ,EAAE,UAAU,GACxC,EAAE,UACC,QAAQ,MAAmB,OAAO,MAAM,YAAY,EAAE,MAAM,CAAC,SAAS,EAAE,CACxE,KAAK,MAAM,EAAE,MAAM,CAAC,GACvB,EAAE;AACN,KAAI,UAAU,SAAS,EAAG,KAAI,YAAY;AAC1C,KAAI,OAAO,EAAE,cAAc,YAAY,OAAO,SAAS,EAAE,UAAU,IAAI,EAAE,YAAY,EACnF,KAAI,YAAY,KAAK,MAAM,EAAE,UAAU;AAEzC,KAAI,EAAE,yBAAyB,KAAM,KAAI,uBAAuB;AAChE,QAAO"}