@zhixuan92/multi-model-agent 4.9.0 → 5.0.0

package/dist/http/auth.d.ts

@@ -1,20 +0,0 @@
-/**
- * Load or generate the bearer token from a file path.
- * Respects the MMAGENT_AUTH_TOKEN env override via coreLoadAuthToken when the
- * file already exists. Falls back to generating a new token if the file does not exist.
- */
-export declare function loadToken(tokenPath: string): string;
-/**
- * Validate an Authorization header value (including "Bearer " prefix).
- * Uses crypto.timingSafeEqual to prevent timing attacks.
- *
- * Returns { ok: true } on success.
- * Returns { ok: false, reason } on failure without leaking which check failed.
- */
-export declare function validateAuthHeader(header: string | undefined, expected: string): {
-    ok: true;
-} | {
-    ok: false;
-    reason: 'missing' | 'malformed' | 'mismatch';
-};
-//# sourceMappingURL=auth.d.ts.map

package/dist/http/auth.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/http/auth.ts"],"names":[],"mappings":"AAWA;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAkBnD;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,QAAQ,EAAE,MAAM,GACf;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,SAAS,GAAG,WAAW,GAAG,UAAU,CAAA;CAAE,CAU5E"}

package/dist/http/auth.js

@@ -1,56 +0,0 @@
-import * as fs from 'node:fs';
-import * as path from 'node:path';
-import * as os from 'node:os';
-import { randomBytes, timingSafeEqual } from 'node:crypto';
-import { loadAuthToken as coreLoadAuthToken } from '@zhixuan92/multi-model-agent-core';
-function expandHome(p) {
-    if (p.startsWith('~/'))
-        return path.join(os.homedir(), p.slice(2));
-    return p;
-}
-/**
- * Load or generate the bearer token from a file path.
- * Respects the MMAGENT_AUTH_TOKEN env override via coreLoadAuthToken when the
- * file already exists. Falls back to generating a new token if the file does not exist.
- */
-export function loadToken(tokenPath) {
-    const resolved = expandHome(tokenPath);
-    if (fs.existsSync(resolved)) {
-        const stat = fs.statSync(resolved);
-        // Warn (do not fail) if the existing file has group/other read/write bits set.
-        if ((stat.mode & 0o077) !== 0) {
-            process.stderr.write(`[multi-model-agent] warning: token file ${resolved} has insecure permissions (mode ${(stat.mode & 0o777).toString(8)}); recommend 'chmod 0600 ${resolved}'\n`);
-        }
-        // Use core's loadAuthToken so the MMAGENT_AUTH_TOKEN env override is respected.
-        return coreLoadAuthToken({ tokenFile: resolved });
-    }
-    const dir = path.dirname(resolved);
-    fs.mkdirSync(dir, { recursive: true, mode: 0o700 });
-    const token = randomBytes(32).toString('base64url');
-    fs.writeFileSync(resolved, token + '\n', { mode: 0o600 });
-    return token;
-}
-/**
- * Validate an Authorization header value (including "Bearer " prefix).
- * Uses crypto.timingSafeEqual to prevent timing attacks.
- *
- * Returns { ok: true } on success.
- * Returns { ok: false, reason } on failure without leaking which check failed.
- */
-export function validateAuthHeader(header, expected) {
-    if (!header)
-        return { ok: false, reason: 'missing' };
-    const parts = header.split(/\s+/);
-    if (parts.length !== 2)
-        return { ok: false, reason: 'malformed' };
-    if (parts[0].toLowerCase() !== 'bearer')
-        return { ok: false, reason: 'malformed' };
-    const presented = Buffer.from(parts[1]);
-    const expectedBuf = Buffer.from(expected);
-    if (presented.length !== expectedBuf.length)
-        return { ok: false, reason: 'mismatch' };
-    if (!timingSafeEqual(presented, expectedBuf))
-        return { ok: false, reason: 'mismatch' };
-    return { ok: true };
-}
-//# sourceMappingURL=auth.js.map

package/dist/http/auth.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/http/auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAE,aAAa,IAAI,iBAAiB,EAAE,MAAM,mCAAmC,CAAC;AAEvF,SAAS,UAAU,CAAC,CAAS;IAC3B,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACnE,OAAO,CAAC,CAAC;AACX,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,SAAS,CAAC,SAAiB;IACzC,MAAM,QAAQ,GAAG,UAAU,CAAC,SAAS,CAAC,CAAC;IACvC,IAAI,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACnC,+EAA+E;QAC/E,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,2CAA2C,QAAQ,mCAAmC,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,4BAA4B,QAAQ,KAAK,CAC/J,CAAC;QACJ,CAAC;QACD,gFAAgF;QAChF,OAAO,iBAAiB,CAAC,EAAE,SAAS,EAAE,QAAQ,EAAE,CAAC,CAAC;IACpD,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACnC,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACpD,MAAM,KAAK,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACpD,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,KAAK,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1D,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAA0B,EAC1B,QAAgB;IAEhB,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IACrD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAClC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAClE,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,QAAQ;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACnF,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACxC,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC1C,IAAI,SAAS,CAAC,MAAM,KAAK,WAAW,CAAC,MAAM;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IACtF,IAAI,CAAC,eAAe,CAAC,SAAS,EAAE,WAAW,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IACvF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AACtB,CAAC"}

package/dist/http/canonicalize-file-paths.d.ts

@@ -1,8 +0,0 @@
-export type CanonicalizeResult = string[] | {
-    error: 'invalid_request';
-    fieldErrors: {
-        filePaths: string[];
-    };
-};
-export declare function canonicalizeFilePaths(rawPaths: string[], cwd: string): CanonicalizeResult;
-//# sourceMappingURL=canonicalize-file-paths.d.ts.map

package/dist/http/canonicalize-file-paths.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"canonicalize-file-paths.d.ts","sourceRoot":"","sources":["../../src/http/canonicalize-file-paths.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,kBAAkB,GAC1B,MAAM,EAAE,GACR;IAAE,KAAK,EAAE,iBAAiB,CAAC;IAAC,WAAW,EAAE;QAAE,SAAS,EAAE,MAAM,EAAE,CAAA;KAAE,CAAA;CAAE,CAAC;AAEvE,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,GAAG,kBAAkB,CAoCzF"}

package/dist/http/canonicalize-file-paths.js

@@ -1,43 +0,0 @@
-import { realpathSync, existsSync } from 'node:fs';
-import * as path from 'node:path';
-export function canonicalizeFilePaths(rawPaths, cwd) {
-    const realCwd = realpathSync(cwd);
-    const accepted = [];
-    const offenders = [];
-    for (const raw of rawPaths) {
-        const resolved = path.isAbsolute(raw) ? path.normalize(raw) : path.resolve(realCwd, raw);
-        let cursor = resolved;
-        while (!existsSync(cursor) && path.dirname(cursor) !== cursor) {
-            cursor = path.dirname(cursor);
-        }
-        let realAncestor;
-        try {
-            realAncestor = realpathSync(cursor);
-        }
-        catch {
-            offenders.push(raw);
-            continue;
-        }
-        const suffix = path.relative(cursor, resolved);
-        const candidate = suffix ? path.normalize(path.join(realAncestor, suffix)) : realAncestor;
-        const rel = path.relative(realCwd, candidate);
-        const inside = rel === '' || (!rel.startsWith('..' + path.sep) && rel !== '..' && !path.isAbsolute(rel));
-        if (!inside) {
-            offenders.push(raw);
-            continue;
-        }
-        accepted.push(candidate);
-    }
-    if (offenders.length > 0) {
-        return { error: 'invalid_request', fieldErrors: { filePaths: offenders } };
-    }
-    const seen = new Set();
-    const dedup = [];
-    for (const p of accepted)
-        if (!seen.has(p)) {
-            seen.add(p);
-            dedup.push(p);
-        }
-    return dedup;
-}
-//# sourceMappingURL=canonicalize-file-paths.js.map

package/dist/http/canonicalize-file-paths.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"canonicalize-file-paths.js","sourceRoot":"","sources":["../../src/http/canonicalize-file-paths.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAMlC,MAAM,UAAU,qBAAqB,CAAC,QAAkB,EAAE,GAAW;IACnE,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,SAAS,GAAa,EAAE,CAAC;IAE/B,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;QACzF,IAAI,MAAM,GAAG,QAAQ,CAAC;QACtB,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,MAAM,EAAE,CAAC;YAC9D,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QAChC,CAAC;QACD,IAAI,YAAoB,CAAC;QACzB,IAAI,CAAC;YACH,YAAY,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;QACtC,CAAC;QAAC,MAAM,CAAC;YACP,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACpB,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;QAC/C,MAAM,SAAS,GAAG,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC;QAC1F,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAC9C,MAAM,MAAM,GAAG,GAAG,KAAK,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,GAAG,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;QACzG,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YACpB,SAAS;QACX,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IAC3B,CAAC;IAED,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,KAAK,EAAE,iBAAiB,EAAE,WAAW,EAAE,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,CAAC;IAC7E,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,CAAC,IAAI,QAAQ;QAAE,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;IAC3E,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/http/cwd-validator.d.ts

@@ -1,11 +0,0 @@
-export type CwdValidationError = 'missing_cwd' | 'invalid_cwd' | 'cwd_not_dir' | 'forbidden_cwd';
-export type CwdValidationResult = {
-    ok: true;
-    canonicalCwd: string;
-} | {
-    ok: false;
-    error: CwdValidationError;
-    message: string;
-};
-export declare function validateCwd(cwd: string | undefined): CwdValidationResult;
-//# sourceMappingURL=cwd-validator.d.ts.map

package/dist/http/cwd-validator.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"cwd-validator.d.ts","sourceRoot":"","sources":["../../src/http/cwd-validator.ts"],"names":[],"mappings":"AAMA,MAAM,MAAM,kBAAkB,GAAG,aAAa,GAAG,aAAa,GAAG,aAAa,GAAG,eAAe,CAAC;AAEjG,MAAM,MAAM,mBAAmB,GAC3B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GAClC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,kBAAkB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAiF9D,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,mBAAmB,CA8CxE"}

package/dist/http/cwd-validator.js

@@ -1,130 +0,0 @@
-// Request-time validator for the HTTP `cwd` query param: existence, absolute path,
-// directory check, symlink-escape detection. Distinct from `core/identity/cwd-validator.ts`,
-// which is the substrate-level path-confinement guard used inside tool calls.
-import * as fs from 'node:fs';
-import * as path from 'node:path';
-const SEP = path.sep;
-/**
- * Walk each path component and check if any symlink points outside its
- * containing parent directory (symlink escape). Returns true if a symlink
- * escape is detected.
- *
- * Algorithm: build the path incrementally. At each component that is a symlink,
- * canonicalize both the parent directory and the symlink's resolved target via
- * realpathSync, then verify that the resolved target is a descendant of the
- * canonical parent. This handles macOS-style double-indirection (e.g. /var →
- * /private/var) without false positives.
- */
-function hasSymlinkEscape(cwd) {
-    const parts = cwd.split(SEP).filter(Boolean); // ['a','b','c'] for /a/b/c
-    // We track the "logical" accumulated path (not yet canonicalized) so lstat
-    // finds the right inode even when earlier symlinks changed the real prefix.
-    // We will resolve it when we need to compare.
-    let logicalAccum = SEP;
-    for (const part of parts) {
-        const logicalCurrent = path.join(logicalAccum, part);
-        // Resolve logicalAccum to its canonical form so lstat finds the right path.
-        let canonAccum;
-        try {
-            canonAccum = fs.realpathSync(logicalAccum);
-        }
-        catch {
-            return false;
-        }
-        const canonCurrent = path.join(canonAccum, part);
-        let lstat;
-        try {
-            lstat = fs.lstatSync(canonCurrent);
-        }
-        catch {
-            // Path doesn't exist — validateCwd will catch this
-            return false;
-        }
-        if (lstat.isSymbolicLink()) {
-            let target;
-            try {
-                target = fs.readlinkSync(canonCurrent);
-            }
-            catch {
-                return false;
-            }
-            // Resolve target relative to the canonical parent directory of the symlink.
-            const resolvedTarget = path.isAbsolute(target)
-                ? target
-                : path.resolve(canonAccum, target);
-            // Canonicalize the resolved target and the parent dir for stable comparison.
-            let canonResolvedTarget;
-            try {
-                canonResolvedTarget = fs.realpathSync(resolvedTarget);
-            }
-            catch {
-                // Target doesn't exist — validateCwd will catch this
-                return false;
-            }
-            // The parent dir that should "contain" this symlink is canonAccum.
-            const parentWithSep = canonAccum.endsWith(SEP) ? canonAccum : canonAccum + SEP;
-            const resolvedWithSep = canonResolvedTarget.endsWith(SEP)
-                ? canonResolvedTarget
-                : canonResolvedTarget + SEP;
-            if (!resolvedWithSep.startsWith(parentWithSep)) {
-                // Symlink escapes its parent directory
-                return true;
-            }
-            logicalAccum = resolvedTarget;
-        }
-        else {
-            logicalAccum = logicalCurrent;
-        }
-    }
-    return false;
-}
-export function validateCwd(cwd) {
-    if (!cwd)
-        return { ok: false, error: 'missing_cwd', message: "required query param 'cwd' not provided" };
-    if (!path.isAbsolute(cwd))
-        return { ok: false, error: 'invalid_cwd', message: `cwd must be absolute: ${cwd}` };
-    // A4a.1 §3a step 2: reject the stale-sibling pattern. Prior Claude Code
-    // test runs leave directories under /tmp/claude/G--<project>-<slug>;
-    // routing tasks at them produces confused write attribution (worker
-    // memory: feedback_mma_worker_sandbox_topic_tracker). Prefix-match only
-    // — `/home/user/projects/G--my-app` is legitimate.
-    if (cwd.startsWith('/tmp/claude/G--') || cwd.startsWith('/private/tmp/claude/G--')) {
-        return {
-            ok: false,
-            error: 'forbidden_cwd',
-            message: `cwd matches the stale-sibling pattern '/tmp/claude/G--*' (likely contamination from prior Claude Code test runs). Run 'rm -rf /tmp/claude/G--*' to clean up, or pass a real project cwd.`,
-        };
-    }
-    let canonical;
-    try {
-        canonical = fs.realpathSync(cwd);
-    }
-    catch (err) {
-        const code = err.code;
-        if (code === 'ENOENT')
-            return { ok: false, error: 'cwd_not_dir', message: `cwd does not exist: ${cwd}` };
-        if (code === 'EACCES' || code === 'EPERM')
-            return { ok: false, error: 'cwd_not_dir', message: `cwd is not accessible (permission denied): ${cwd}` };
-        return { ok: false, error: 'cwd_not_dir', message: `cwd cannot be resolved (${code ?? 'unknown error'}): ${cwd}` };
-    }
-    let stat;
-    try {
-        stat = fs.statSync(canonical);
-    }
-    catch {
-        return { ok: false, error: 'cwd_not_dir', message: `cwd realpath is not accessible: ${cwd} → ${canonical}` };
-    }
-    if (!stat.isDirectory())
-        return { ok: false, error: 'cwd_not_dir', message: `cwd is not a directory: ${cwd}` };
-    // ── Symlink-escape check ──────────────────────────────────────────────────
-    // Detect symlinks whose target escapes the containing parent directory.
-    if (hasSymlinkEscape(cwd)) {
-        return {
-            ok: false,
-            error: 'forbidden_cwd',
-            message: `cwd contains a symlink that escapes its parent directory: ${cwd}`,
-        };
-    }
-    return { ok: true, canonicalCwd: canonical };
-}
-//# sourceMappingURL=cwd-validator.js.map

package/dist/http/cwd-validator.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"cwd-validator.js","sourceRoot":"","sources":["../../src/http/cwd-validator.ts"],"names":[],"mappings":"AAAA,mFAAmF;AACnF,6FAA6F;AAC7F,8EAA8E;AAC9E,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAQlC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC;AAErB;;;;;;;;;;GAUG;AACH,SAAS,gBAAgB,CAAC,GAAW;IACnC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,2BAA2B;IACzE,2EAA2E;IAC3E,4EAA4E;IAC5E,8CAA8C;IAC9C,IAAI,YAAY,GAAW,GAAG,CAAC;IAE/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;QACrD,4EAA4E;QAC5E,IAAI,UAAkB,CAAC;QACvB,IAAI,CAAC;YACH,UAAU,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;QAEjD,IAAI,KAAe,CAAC;QACpB,IAAI,CAAC;YACH,KAAK,GAAG,EAAE,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;QACrC,CAAC;QAAC,MAAM,CAAC;YACP,mDAAmD;YACnD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,KAAK,CAAC,cAAc,EAAE,EAAE,CAAC;YAC3B,IAAI,MAAc,CAAC;YACnB,IAAI,CAAC;gBACH,MAAM,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC;YACzC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,KAAK,CAAC;YACf,CAAC;YAED,4EAA4E;YAC5E,MAAM,cAAc,GAAG,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;gBAC5C,CAAC,CAAC,MAAM;gBACR,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YAErC,6EAA6E;YAC7E,IAAI,mBAA2B,CAAC;YAChC,IAAI,CAAC;gBACH,mBAAmB,GAAG,EAAE,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC;YACxD,CAAC;YAAC,MAAM,CAAC;gBACP,qDAAqD;gBACrD,OAAO,KAAK,CAAC;YACf,CAAC;YAED,mEAAmE;YACnE,MAAM,aAAa,GAAG,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,GAAG,GAAG,CAAC;YAC/E,MAAM,eAAe,GAAG,mBAAmB,CAAC,QAAQ,CAAC,GAAG,CAAC;gBACvD,CAAC,CAAC,mBAAmB;gBACrB,CAAC,CAAC,mBAAmB,GAAG,GAAG,CAAC;YAE9B,IAAI,CAAC,eAAe,CAAC,UAAU,CAAC,aAAa,CAAC,EAAE,CAAC;gBAC/C,uCAAuC;gBACvC,OAAO,IAAI,CAAC;YACd,CAAC;YACD,YAAY,GAAG,cAAc,CAAC;QAChC,CAAC;aAAM,CAAC;YACN,YAAY,GAAG,cAAc,CAAC;QAChC,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,GAAuB;IACjD,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,yCAAyC,EAAE,CAAC;IACzG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,yBAAyB,GAAG,EAAE,EAAE,CAAC;IAE/G,wEAAwE;IACxE,qEAAqE;IACrE,oEAAoE;IACpE,wEAAwE;IACxE,mDAAmD;IACnD,IAAI,GAAG,CAAC,UAAU,CAAC,iBAAiB,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,yBAAyB,CAAC,EAAE,CAAC;QACnF,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,eAAe;YACtB,OAAO,EAAE,0LAA0L;SACpM,CAAC;IACJ,CAAC;IAED,IAAI,SAAiB,CAAC;IACtB,IAAI,CAAC;QACH,SAAS,GAAG,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IACnC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,GAAI,GAA6B,CAAC,IAAI,CAAC;QACjD,IAAI,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,uBAAuB,GAAG,EAAE,EAAE,CAAC;QACzG,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,OAAO;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,8CAA8C,GAAG,EAAE,EAAE,CAAC;QACpJ,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,2BAA2B,IAAI,IAAI,eAAe,MAAM,GAAG,EAAE,EAAE,CAAC;IACrH,CAAC;IAED,IAAI,IAAc,CAAC;IACnB,IAAI,CAAC;QACH,IAAI,GAAG,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,mCAAmC,GAAG,MAAM,SAAS,EAAE,EAAE,CAAC;IAC/G,CAAC;IACD,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,2BAA2B,GAAG,EAAE,EAAE,CAAC;IAE/G,6EAA6E;IAC7E,wEAAwE;IACxE,IAAI,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC;QAC1B,OAAO;YACL,EAAE,EAAE,KAAK;YACT,KAAK,EAAE,eAAe;YACtB,OAAO,EAAE,6DAA6D,GAAG,EAAE;SAC5E,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC;AAC/C,CAAC"}

package/dist/http/errors.d.ts

@@ -1,4 +0,0 @@
-import type { ServerResponse } from 'node:http';
-export declare function sendError(res: ServerResponse, status: number, code: string, message: string, details?: unknown): void;
-export declare function sendJson(res: ServerResponse, status: number, body: unknown): void;
-//# sourceMappingURL=errors.d.ts.map

package/dist/http/errors.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../../src/http/errors.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAEhD,wBAAgB,SAAS,CACvB,GAAG,EAAE,cAAc,EACnB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,OAAO,GAChB,IAAI,CAGN;AAED,wBAAgB,QAAQ,CAAC,GAAG,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,IAAI,CAGjF"}

package/dist/http/errors.js

@@ -1,9 +0,0 @@
-export function sendError(res, status, code, message, details) {
-    res.writeHead(status, { 'content-type': 'application/json' });
-    res.end(JSON.stringify({ error: { code, message, ...(details !== undefined ? { details } : {}) } }));
-}
-export function sendJson(res, status, body) {
-    res.writeHead(status, { 'content-type': 'application/json' });
-    res.end(JSON.stringify(body));
-}
-//# sourceMappingURL=errors.js.map

package/dist/http/errors.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"errors.js","sourceRoot":"","sources":["../../src/http/errors.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,SAAS,CACvB,GAAmB,EACnB,MAAc,EACd,IAAY,EACZ,OAAe,EACf,OAAiB;IAEjB,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAC9D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AACvG,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,GAAmB,EAAE,MAAc,EAAE,IAAa;IACzE,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAC9D,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AAChC,CAAC"}

package/dist/http/execution-context.d.ts

@@ -1,18 +0,0 @@
-import type { ExecutionContext } from '@zhixuan92/multi-model-agent-core';
-import type { TaskEnvelopeStore } from '@zhixuan92/multi-model-agent-core/events/task-envelope';
-import type { HandlerDeps } from './handler-deps.js';
-import type { ProjectContext } from '@zhixuan92/multi-model-agent-core';
-/**
- * Builds a canonical ExecutionContext for the async-dispatch → executor path.
- *
- * The canonical type carries lifecycle-specific required fields (task, timing,
- * stall, etc.) that aren't applicable in the server→executor code path. We
- * cast through `as ExecutionContext` because the executors only access the
- * subset of fields populated here. Phase B/E will migrate executors into the
- * full lifecycle, after which this shim can be deleted.
- */
-export declare function buildExecutionContext(deps: HandlerDeps, pc: ProjectContext, batchId: string, envelope: TaskEnvelopeStore, route?: string, caller?: {
-    client: string;
-    mainModel?: string | null;
-}): ExecutionContext;
-//# sourceMappingURL=execution-context.d.ts.map

package/dist/http/execution-context.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"execution-context.d.ts","sourceRoot":"","sources":["../../src/http/execution-context.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AAC1E,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wDAAwD,CAAC;AAChG,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mCAAmC,CAAC;AAGxE;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CACnC,IAAI,EAAE,WAAW,EACjB,EAAE,EAAE,cAAc,EAClB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,iBAAiB,EAC3B,KAAK,CAAC,EAAE,MAAM,EACd,MAAM,CAAC,EAAE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GACrD,gBAAgB,CAkDlB"}

package/dist/http/execution-context.js

@@ -1,61 +0,0 @@
-import { getRecorder } from '../telemetry/recorder.js';
-/**
- * Builds a canonical ExecutionContext for the async-dispatch → executor path.
- *
- * The canonical type carries lifecycle-specific required fields (task, timing,
- * stall, etc.) that aren't applicable in the server→executor code path. We
- * cast through `as ExecutionContext` because the executors only access the
- * subset of fields populated here. Phase B/E will migrate executors into the
- * full lifecycle, after which this shim can be deleted.
- */
-export function buildExecutionContext(deps, pc, batchId, envelope, route, caller) {
-    const recordHeartbeat = (tick) => {
-        const effectiveBatchId = tick.batchId || batchId;
-        const entry = deps.batchRegistry.get(effectiveBatchId);
-        if (!entry)
-            return;
-        entry.lastHeartbeatAt = Date.now();
-        entry.running = [{ worker: tick.provider, turn: Math.max(1, tick.stageIndex) }];
-        // Record heartbeat to envelope — this triggers snapshot push with recomputed headline
-        envelope.recordHeartbeat({ stallIdleMs: 0 });
-    };
-    let recorder;
-    try {
-        recorder = getRecorder();
-    }
-    catch {
-        // Recorder not initialized — telemetry disabled
-    }
-    const now = Date.now();
-    return {
-        config: deps.config,
-        bus: deps.bus,
-        // Per-request X-MMA-Main-Model header is the only source. Enforced at
-        // the request-pipeline boundary (4.0.3+); by the time we reach this
-        // builder, caller.mainModel is guaranteed non-null for tool routes.
-        mainModel: caller?.mainModel ?? null,
-        route: route ?? '',
-        client: caller?.client ?? 'other',
-        batchId,
-        recordHeartbeat,
-        recorder,
-        projectContext: pc,
-        contextBlockStore: pc.contextBlocks,
-        // Thread the BatchRegistry so task-runner can attach this ctx for
-        // shutdown-drain visibility into in-flight tasks.
-        batchRegistry: deps.batchRegistry,
-        task: { prompt: '' },
-        taskIndex: 0,
-        cwd: pc.cwd,
-        assignedTier: 'standard',
-        implementerProvider: undefined,
-        providers: {},
-        timing: { startMs: now, timeoutMs: 0, deadlineMs: 0, stallTimeoutMs: 0 },
-        stall: { controller: new AbortController(), lastEventAtMs: now, fired: false },
-        implementerToolMode: undefined,
-        heartbeat: undefined,
-        outputTargets: [],
-        envelope,
-    };
-}
-//# sourceMappingURL=execution-context.js.map

package/dist/http/execution-context.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"execution-context.js","sourceRoot":"","sources":["../../src/http/execution-context.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAC;AAEvD;;;;;;;;GAQG;AACH,MAAM,UAAU,qBAAqB,CACnC,IAAiB,EACjB,EAAkB,EAClB,OAAe,EACf,QAA2B,EAC3B,KAAc,EACd,MAAsD;IAEtD,MAAM,eAAe,GAAG,CAAC,IAAuB,EAAE,EAAE;QAClD,MAAM,gBAAgB,GAAG,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC;QACjD,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC;QACvD,IAAI,CAAC,KAAK;YAAE,OAAO;QACnB,KAAK,CAAC,eAAe,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACnC,KAAK,CAAC,OAAO,GAAG,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QAChF,sFAAsF;QACtF,QAAQ,CAAC,eAAe,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC,CAAC;IAC/C,CAAC,CAAC;IAEF,IAAI,QAAkD,CAAC;IACvD,IAAI,CAAC;QACH,QAAQ,GAAG,WAAW,EAA6C,CAAC;IACtE,CAAC;IAAC,MAAM,CAAC;QACP,gDAAgD;IAClD,CAAC;IAED,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAEvB,OAAO;QACL,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,sEAAsE;QACtE,oEAAoE;QACpE,oEAAoE;QACpE,SAAS,EAAE,MAAM,EAAE,SAAS,IAAI,IAAI;QACpC,KAAK,EAAE,KAAK,IAAI,EAAE;QAClB,MAAM,EAAE,MAAM,EAAE,MAAM,IAAI,OAAO;QACjC,OAAO;QACP,eAAe;QACf,QAAQ;QACR,cAAc,EAAE,EAAE;QAClB,iBAAiB,EAAE,EAAE,CAAC,aAAa;QACnC,kEAAkE;QAClE,kDAAkD;QAClD,aAAa,EAAE,IAAI,CAAC,aAAa;QACjC,IAAI,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE;QACpB,SAAS,EAAE,CAAC;QACZ,GAAG,EAAE,EAAE,CAAC,GAAG;QACX,YAAY,EAAE,UAAU;QACxB,mBAAmB,EAAE,SAAS;QAC9B,SAAS,EAAE,EAAE;QACb,MAAM,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,cAAc,EAAE,CAAC,EAAE;QACxE,KAAK,EAAE,EAAE,UAAU,EAAE,IAAI,eAAe,EAAE,EAAE,aAAa,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE;QAC9E,mBAAmB,EAAE,SAAS;QAC9B,SAAS,EAAE,SAAS;QACpB,aAAa,EAAE,EAAE;QACjB,QAAQ;KACsB,CAAC;AACnC,CAAC"}

package/dist/http/handler-deps.d.ts

@@ -1,19 +0,0 @@
-import type { MultiModelConfig } from '@zhixuan92/multi-model-agent-core';
-import type { EnvelopeBus } from '@zhixuan92/multi-model-agent-core/events/envelope-bus';
-import type { LogWriter } from '@zhixuan92/multi-model-agent-core/events/log-writer';
-import type { ProjectRegistry } from './project-registry.js';
-import type { BatchRegistry } from '@zhixuan92/multi-model-agent-core';
-/**
- * Dependencies injected into every handler factory at server startup.
- * Built once; passed to buildDelegateHandler, buildAuditHandler, etc.
- */
-export interface HandlerDeps {
-    /** Full multi-model config (agents + defaults). May be undefined in unit tests. */
-    config: MultiModelConfig;
-    logWriter: LogWriter;
-    /** EnvelopeBus for structured observability — emits envelope snapshots and plain log entries. */
-    bus: EnvelopeBus;
-    projectRegistry: ProjectRegistry;
-    batchRegistry: BatchRegistry;
-}
-//# sourceMappingURL=handler-deps.d.ts.map

package/dist/http/handler-deps.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"handler-deps.d.ts","sourceRoot":"","sources":["../../src/http/handler-deps.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mCAAmC,CAAC;AAC1E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uDAAuD,CAAC;AACzF,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qDAAqD,CAAC;AACrF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAC7D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAEvE;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC1B,mFAAmF;IACnF,MAAM,EAAE,gBAAgB,CAAC;IACzB,SAAS,EAAE,SAAS,CAAC;IACrB,iGAAiG;IACjG,GAAG,EAAE,WAAW,CAAC;IACjB,eAAe,EAAE,eAAe,CAAC;IACjC,aAAa,EAAE,aAAa,CAAC;CAC9B"}

package/dist/http/handler-deps.js

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=handler-deps.js.map

package/dist/http/handler-deps.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"handler-deps.js","sourceRoot":"","sources":["../../src/http/handler-deps.ts"],"names":[],"mappings":""}

package/dist/http/handlers/control/batch-slice.d.ts

@@ -1,4 +0,0 @@
-import type { HandlerDeps } from '../../handler-deps.js';
-import type { RawHandler } from '../../types.js';
-export declare function buildBatchSliceHandler(deps: HandlerDeps): RawHandler;
-//# sourceMappingURL=batch-slice.d.ts.map

package/dist/http/handlers/control/batch-slice.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"batch-slice.d.ts","sourceRoot":"","sources":["../../../../src/http/handlers/control/batch-slice.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACzD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AAOjD,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,WAAW,GAAG,UAAU,CAyCpE"}

package/dist/http/handlers/control/batch-slice.js

@@ -1,40 +0,0 @@
-import { z } from 'zod';
-import { sendError, sendJson } from '../../errors.js';
-const inputSchema = z.object({
-    batchId: z.string(),
-    taskIndex: z.number().int().nonnegative(),
-});
-export function buildBatchSliceHandler(deps) {
-    return async (_req, res, _params, ctx) => {
-        const parsed = inputSchema.safeParse(ctx.body);
-        if (!parsed.success) {
-            sendError(res, 400, 'invalid_request', 'Request body validation failed', {
-                fieldErrors: parsed.error.flatten(),
-            });
-            return;
-        }
-        const input = parsed.data;
-        const cwd = ctx.cwd;
-        const reserveResult = deps.projectRegistry.reserveProject(cwd);
-        if (!reserveResult.ok) {
-            sendError(res, 503, reserveResult.error, reserveResult.message);
-            return;
-        }
-        const pc = reserveResult.projectContext;
-        pc.lastActivityAt = Date.now();
-        deps.projectRegistry.cancelReservation(cwd);
-        // T4: use the registry/delegate batchId directly as the cache key.
-        const entry = pc.batchCache.get(input.batchId);
-        if (!entry) {
-            sendError(res, 404, 'not_found', `Batch ${input.batchId} not found`);
-            return;
-        }
-        const results = entry.results;
-        if (!Array.isArray(results) || input.taskIndex >= results.length) {
-            sendError(res, 404, 'unknown_task_index', `taskIndex ${input.taskIndex} is out of range (batch has ${Array.isArray(results) ? results.length : 0} result(s))`);
-            return;
-        }
-        sendJson(res, 200, { batchId: input.batchId, result: results[input.taskIndex] });
-    };
-}
-//# sourceMappingURL=batch-slice.js.map

package/dist/http/handlers/control/batch-slice.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"batch-slice.js","sourceRoot":"","sources":["../../../../src/http/handlers/control/batch-slice.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAItD,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE;IACnB,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;CAC1C,CAAC,CAAC;AAEH,MAAM,UAAU,sBAAsB,CAAC,IAAiB;IACtD,OAAO,KAAK,EAAE,IAAqB,EAAE,GAAmB,EAAE,OAA+B,EAAE,GAAG,EAAE,EAAE;QAChG,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,iBAAiB,EAAE,gCAAgC,EAAE;gBACvE,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE;aACpC,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC;QAC1B,MAAM,GAAG,GAAG,GAAG,CAAC,GAAI,CAAC;QACrB,MAAM,aAAa,GAAG,IAAI,CAAC,eAAe,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC;QAC/D,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC;YACtB,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,aAAa,CAAC,KAAK,EAAE,aAAa,CAAC,OAAO,CAAC,CAAC;YAChE,OAAO;QACT,CAAC;QACD,MAAM,EAAE,GAAG,aAAa,CAAC,cAAc,CAAC;QACxC,EAAE,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC/B,IAAI,CAAC,eAAe,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC;QAE5C,mEAAmE;QACnE,MAAM,KAAK,GAAG,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC/C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,WAAW,EAAE,SAAS,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;YACrE,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;QAC9B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,KAAK,CAAC,SAAS,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACjE,SAAS,CACP,GAAG,EACH,GAAG,EACH,oBAAoB,EACpB,aAAa,KAAK,CAAC,SAAS,+BAA+B,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,aAAa,CACpH,CAAC;YACF,OAAO;QACT,CAAC;QAED,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IACnF,CAAC,CAAC;AACJ,CAAC"}

package/dist/http/handlers/control/batch.d.ts

@@ -1,23 +0,0 @@
-import type { RawHandler } from '../../types.js';
-import { type BatchRegistry } from '@zhixuan92/multi-model-agent-core';
-import type { TaskEnvelope } from '@zhixuan92/multi-model-agent-core/events/task-envelope';
-export interface BatchHandlerDeps {
-    batchRegistry: BatchRegistry;
-}
-export declare function envelopeToPublicResult(env: TaskEnvelope): any;
-/**
- * GET /batch/:batchId — poll a batch.
- *
- * Status split (Theme 7):
- *  - pending                → 202 text/plain — body is the runningHeadline
- *  - complete/failed/expired → 200 JSON uniform 7-field envelope
- *
- * Optional ?taskIndex=N slices `results` on a complete envelope.
- *
- * Errors:
- *  unknown batchId         → 404 not_found
- *  non-numeric taskIndex   → 400 invalid_task_index
- *  taskIndex ≥ results.len → 404 unknown_task_index
- */
-export declare function buildBatchHandler(deps: BatchHandlerDeps): RawHandler;
-//# sourceMappingURL=batch.d.ts.map

package/dist/http/handlers/control/batch.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"batch.d.ts","sourceRoot":"","sources":["../../../../src/http/handlers/control/batch.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAC;AACjD,OAAO,EAAiB,KAAK,aAAa,EAAiB,MAAM,mCAAmC,CAAC;AACrG,OAAO,KAAK,EAAE,YAAY,EAAqB,MAAM,wDAAwD,CAAC;AAE9G,MAAM,WAAW,gBAAgB;IAC/B,aAAa,EAAE,aAAa,CAAC;CAC9B;AAGD,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,YAAY,OAgEvD;AAqBD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,gBAAgB,GAAG,UAAU,CAwQpE"}