agentix-cli 0.16.0 → 0.18.0

package/dist/chunk-ASSJ4Z6Z.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/daemon/setup-wizard.ts","../src/daemon/config-mutate.ts","../src/daemon/ui/pages/setup.ts","../src/daemon/token-store.ts"],"sourcesContent":["import { existsSync, readFileSync, writeFileSync, appendFileSync, mkdirSync } from \"fs\"\nimport { resolve } from \"path\"\nimport { hostname } from \"os\"\nimport type { IncomingMessage, ServerResponse } from \"http\"\nimport { mutateAgentxConfig, writeAgentxConfig } from \"./config-mutate\"\nimport { renderSetupPage } from \"./ui/pages/setup\"\n\n/** Shape of the pre-render state snapshot — exported so the page file can\n *  type its props without re-importing this whole module. */\nexport interface WizardState {\n  configExists: boolean\n  agentCount: number\n  channelCount: number\n  nodeName?: string\n}\n\n// --- /setup wizard: form-driven first-run experience for non-technical operators ---\n//\n// This is the web equivalent of `agentx init` + `agentx agent add` + `agentx\n// channel add`, collapsed into one page. It writes agentx.json and scaffolds\n// the first agent's workspace so a business operator can go from a blank\n// machine to a working AgentX install without editing JSON.\n//\n// The route lives on the board-dashboard server (port 4202) because that's the\n// surface operators actually open. It talks to the loopback daemon for the\n// post-install restart; the wizard itself never requires a running daemon.\n\nexport interface WizardPayload {\n  nodeName: string\n  agent: {\n    id: string\n    name: string\n    triggerWords: string   // comma/space separated; we normalise on the server\n    tier: \"claude-code\" | \"sdk\"\n    model?: string\n    personality?: string   // short free text → CLAUDE.md\n  }\n  telegram?: {\n    accountId: string\n    botToken: string\n    botUsername?: string\n  }\n  anthropicApiKey?: string\n}\n\n/**\n * Return the current state of the working directory so the wizard can choose\n * between \"fresh install\" and \"add another\" flows.\n */\nexport function wizardState(baseDir: string = process.cwd()): WizardState {\n  const file = resolve(baseDir, \"agentx.json\")\n  if (!existsSync(file)) return { configExists: false, agentCount: 0, channelCount: 0 }\n  try {\n    const cfg = JSON.parse(readFileSync(file, \"utf-8\"))\n    const agents = cfg.agents ? Object.keys(cfg.agents).length : 0\n    const channels = cfg.channels\n      ? Object.values(cfg.channels).filter((c: any) => c && c.enabled).length\n      : 0\n    return { configExists: true, agentCount: agents, channelCount: channels, nodeName: cfg.node?.name }\n  } catch {\n    return { configExists: false, agentCount: 0, channelCount: 0 }\n  }\n}\n\n/**\n * Execute the wizard submission. Returns a short human-readable summary of\n * what was written. Throws on validation error — the caller surfaces the\n * message to the user.\n */\nexport function runWizard(payload: WizardPayload, baseDir: string = process.cwd()): {\n  summary: string\n  nextSteps: string[]\n  backupPath?: string\n} {\n  // --- validate ---\n  if (!payload.nodeName?.trim()) throw new Error(\"Team name is required.\")\n  if (!payload.agent?.id?.trim()) throw new Error(\"Agent id is required.\")\n  if (!/^[a-z0-9][a-z0-9_-]*$/.test(payload.agent.id)) {\n    throw new Error(\"Agent id must be lowercase (letters, digits, -, _) and start with a letter or digit.\")\n  }\n  if (!payload.agent.name?.trim()) throw new Error(\"Agent name is required.\")\n  const mentions = splitMentions(payload.agent.triggerWords)\n  if (mentions.length === 0) throw new Error(\"At least one trigger word is required.\")\n  if (payload.agent.tier !== \"claude-code\" && payload.agent.tier !== \"sdk\") {\n    throw new Error(\"AI engine must be claude-code or sdk.\")\n  }\n\n  const configPath = resolve(baseDir, \"agentx.json\")\n  const envPath = resolve(baseDir, \".env\")\n  const workspaceDir = resolve(baseDir, \"agents\", payload.agent.id)\n  const state = wizardState(baseDir)\n\n  // --- scaffold workspace ---\n  mkdirSync(workspaceDir, { recursive: true })\n  const claudeMd = resolve(workspaceDir, \"CLAUDE.md\")\n  if (!existsSync(claudeMd)) {\n    const personality = payload.agent.personality?.trim() || `You are ${payload.agent.name}, an assistant on the ${payload.nodeName} team.`\n    writeFileSync(claudeMd, `# ${payload.agent.name}\\n\\n${personality}\\n`)\n  }\n\n  // --- build / mutate agentx.json ---\n  const telegramTokenRef = payload.telegram\n    ? `TG_${payload.agent.id.toUpperCase()}_BOT_TOKEN`\n    : undefined\n\n  let backupPath: string | undefined\n  if (!state.configExists) {\n    const cfg = buildFreshConfig(payload, workspaceDir, mentions, telegramTokenRef)\n    writeAgentxConfig(cfg, { configPath })\n  } else {\n    const result = mutateAgentxConfig((cfg) => {\n      cfg.node = cfg.node || {}\n      if (!cfg.node.name) cfg.node.name = payload.nodeName\n      if (!cfg.node.id) cfg.node.id = slugify(payload.nodeName) || \"team\"\n      if (!cfg.node.bind) cfg.node.bind = \"127.0.0.1:18800\"\n      cfg.node.defaultAgent = cfg.node.defaultAgent || payload.agent.id\n\n      cfg.providers = cfg.providers || {}\n      if (!cfg.providers.claude) cfg.providers.claude = { apiKey: \"${ANTHROPIC_API_KEY}\" }\n\n      cfg.agents = cfg.agents || {}\n      if (cfg.agents[payload.agent.id]) throw new Error(`Agent \"${payload.agent.id}\" already exists.`)\n      cfg.agents[payload.agent.id] = agentBlock(payload, workspaceDir, mentions)\n\n      if (payload.telegram) {\n        cfg.channels = cfg.channels || {}\n        cfg.channels.telegram = cfg.channels.telegram || { enabled: true, accounts: {}, policy: { dm: \"pair\", group: \"mention-required\" } }\n        cfg.channels.telegram.enabled = true\n        cfg.channels.telegram.accounts = cfg.channels.telegram.accounts || {}\n        cfg.channels.telegram.accounts[payload.telegram.accountId] = telegramAccountBlock(payload, telegramTokenRef!)\n      }\n\n      return { summary: `added agent \"${payload.agent.id}\"` + (payload.telegram ? \" + telegram account\" : \"\") }\n    }, { configPath })\n    backupPath = result.backupPath\n  }\n\n  // --- write / append .env ---\n  ensureEnvEntries(envPath, payload, telegramTokenRef)\n\n  const nextSteps: string[] = []\n  if (payload.anthropicApiKey || !existsSync(resolve(baseDir, \".env\"))) {\n    nextSteps.push(\"Double-check the API keys in .env\")\n  }\n  if (payload.agent.tier === \"claude-code\") {\n    nextSteps.push(\"Run  claude --version  to confirm Claude Code is installed (needed for the claude-code engine)\")\n  }\n  nextSteps.push(\"Start the daemon:  agentx daemon start\")\n  nextSteps.push(\"Open the dashboard:  http://127.0.0.1:4202\")\n\n  return {\n    summary: state.configExists\n      ? `Added agent \"${payload.agent.id}\" to your team.`\n      : `Initialized your team with first agent \"${payload.agent.id}\".`,\n    nextSteps,\n    backupPath,\n  }\n}\n\nfunction splitMentions(s: string): string[] {\n  return (s || \"\")\n    .split(/[,\\s]+/)\n    .map((m) => m.trim())\n    .filter(Boolean)\n    // Normalise: ensure @-prefix entries stay, plain ones are kept as-is.\n    .filter((m, i, a) => a.indexOf(m) === i)\n}\n\nfunction slugify(s: string): string {\n  return (s || \"\").toLowerCase().replace(/[^a-z0-9-]+/g, \"-\").replace(/^-+|-+$/g, \"\")\n}\n\nfunction buildFreshConfig(payload: WizardPayload, workspaceDir: string, mentions: string[], telegramTokenRef?: string) {\n  const id = slugify(payload.nodeName) || \"team\"\n  const cfg: any = {\n    node: { id, name: payload.nodeName, bind: \"127.0.0.1:18800\", defaultAgent: payload.agent.id },\n    providers: { claude: { apiKey: \"${ANTHROPIC_API_KEY}\" } },\n    agents: { [payload.agent.id]: agentBlock(payload, workspaceDir, mentions) },\n    channels: {},\n    crons: {},\n    mesh: { enabled: false, peers: [], discovery: \"static\", healthCheck: { interval: 60, timeout: 10 } },\n    dashboard: { enabled: true, port: 4202, bind: \"127.0.0.1\", daemonUrl: \"http://localhost:18800\" },\n    boards: [],\n  }\n  if (payload.telegram && telegramTokenRef) {\n    cfg.channels.telegram = {\n      enabled: true,\n      accounts: { [payload.telegram.accountId]: telegramAccountBlock(payload, telegramTokenRef) },\n      policy: { dm: \"pair\", group: \"mention-required\" },\n    }\n  } else {\n    cfg.channels.telegram = { enabled: false, accounts: {}, policy: { dm: \"pair\", group: \"mention-required\" } }\n  }\n  return cfg\n}\n\nfunction agentBlock(payload: WizardPayload, workspaceDir: string, mentions: string[]) {\n  const block: any = {\n    name: payload.agent.name,\n    workspace: workspaceDir,\n    tier: payload.agent.tier,\n    mentions,\n    maxConcurrent: 2,\n    permissionMode: \"default\",\n  }\n  if (payload.agent.model) block.model = payload.agent.model\n  if (payload.agent.personality?.trim()) block.systemPrompt = payload.agent.personality.trim().slice(0, 400)\n  return block\n}\n\nfunction telegramAccountBlock(payload: WizardPayload, tokenRef: string) {\n  return {\n    botToken: \"${\" + tokenRef + \"}\",\n    botUsername: payload.telegram?.botUsername || \"\",\n    agentBinding: payload.agent.id,\n  }\n}\n\nfunction ensureEnvEntries(envPath: string, payload: WizardPayload, telegramTokenRef?: string): void {\n  const existing = existsSync(envPath) ? readFileSync(envPath, \"utf-8\") : \"\"\n  const lines: string[] = []\n\n  if (payload.anthropicApiKey && !existing.includes(\"ANTHROPIC_API_KEY=\")) {\n    lines.push(`ANTHROPIC_API_KEY=${payload.anthropicApiKey}`)\n  }\n  if (payload.telegram && telegramTokenRef && !existing.includes(`${telegramTokenRef}=`)) {\n    lines.push(`${telegramTokenRef}=${payload.telegram.botToken}`)\n  }\n\n  if (!existsSync(envPath)) {\n    const header = [\n      \"# AgentX environment variables\",\n      \"# (Never commit this file — it contains secrets.)\",\n      \"\",\n    ]\n    writeFileSync(envPath, [...header, ...lines, \"\"].join(\"\\n\"))\n    return\n  }\n  if (lines.length > 0) {\n    const sep = existing.endsWith(\"\\n\") ? \"\" : \"\\n\"\n    appendFileSync(envPath, sep + lines.join(\"\\n\") + \"\\n\")\n  }\n}\n\n// --- HTTP handlers used by board-dashboard.ts ---\n\nexport function handleWizardGet(_req: IncomingMessage, res: ServerResponse): void {\n  const state = wizardState()\n  const defaultNode = state.nodeName || hostname().replace(/\\.local$/, \"\")\n  const html = renderSetupPage(state, defaultNode)\n  res.writeHead(200, { \"Content-Type\": \"text/html; charset=utf-8\" })\n  res.end(html)\n}\n\nexport async function handleWizardPost(req: IncomingMessage, res: ServerResponse): Promise<void> {\n  let raw = \"\"\n  await new Promise<void>((ok) => { req.on(\"data\", (c) => { raw += c }); req.on(\"end\", () => ok()) })\n  let payload: WizardPayload\n  try { payload = JSON.parse(raw) }\n  catch { res.writeHead(400, { \"Content-Type\": \"application/json\" }); res.end(JSON.stringify({ error: \"Invalid JSON\" })); return }\n  try {\n    const result = runWizard(payload)\n    res.writeHead(200, { \"Content-Type\": \"application/json\" })\n    res.end(JSON.stringify(result))\n  } catch (e: any) {\n    res.writeHead(400, { \"Content-Type\": \"application/json\" })\n    res.end(JSON.stringify({ error: e.message || \"wizard failed\" }))\n  }\n}\n\n","import { existsSync, readFileSync, writeFileSync, copyFileSync } from \"fs\"\nimport { resolve } from \"path\"\nimport { loadDaemonConfig } from \"./config\"\n\n// --- Shared helpers for safe agentx.json mutation ---\n//\n// Multiple CLI commands and the dashboard admin UI all need to read → tweak →\n// write agentx.json without corrupting it on failure. This module owns the\n// atomic-write + backup + best-effort-reload pattern so every caller gets the\n// same guarantees.\n\nexport interface MutateOptions {\n  /** Absolute path to the target agentx.json. Defaults to ./agentx.json. */\n  configPath?: string\n  /** When true, don't write a timestamped backup. Use for operations that are\n   *  intrinsically reversible (or when the caller already took a snapshot). */\n  skipBackup?: boolean\n  /** When true, don't POST /reload after writing. Handy in tests. */\n  skipReload?: boolean\n}\n\nexport interface MutateResult<T = void> {\n  summary: string\n  payload?: T\n}\n\n/**\n * Read agentx.json, let the mutator tweak it in-place, then atomically write\n * the result back to disk. The mutator returns a short human-readable summary\n * of what changed and may optionally return a payload for the caller to relay.\n *\n * If the mutator throws, nothing is written. If writing succeeds but the file\n * doesn't round-trip as JSON, we restore from backup and rethrow.\n */\nexport function mutateAgentxConfig<T = void>(\n  mutator: (cfg: any) => MutateResult<T> | string,\n  opts: MutateOptions = {},\n): { summary: string; payload?: T; backupPath?: string } {\n  const file = opts.configPath || resolve(process.cwd(), \"agentx.json\")\n  if (!existsSync(file)) throw new Error(`agentx.json not found at ${file}`)\n\n  const cfg = JSON.parse(readFileSync(file, \"utf-8\"))\n  const raw = mutator(cfg)\n  const result: MutateResult<T> = typeof raw === \"string\" ? { summary: raw } : raw\n\n  const json = JSON.stringify(cfg, null, 2) + \"\\n\"\n  const tmp = file + \".tmp\"\n  writeFileSync(tmp, json, \"utf-8\")\n  try {\n    JSON.parse(readFileSync(tmp, \"utf-8\"))\n  } catch (e: any) {\n    throw new Error(`config did not round-trip cleanly: ${e.message}`)\n  }\n\n  let backupPath: string | undefined\n  if (!opts.skipBackup) {\n    backupPath = `${file}.bak.${Date.now()}`\n    copyFileSync(file, backupPath)\n  }\n  writeFileSync(file, json, \"utf-8\")\n\n  if (!opts.skipReload) triggerLocalReload().catch(() => { /* daemon may be off */ })\n\n  return { summary: result.summary, payload: result.payload, backupPath }\n}\n\n/**\n * Write a fresh agentx.json from scratch. Used by the setup wizard on a truly\n * empty working directory. Fails if a file already exists (callers must pass\n * the overwrite flag explicitly — we don't want to silently clobber an\n * operator's hand-written config).\n */\nexport function writeAgentxConfig(\n  cfg: unknown,\n  opts: { configPath?: string; overwrite?: boolean } = {},\n): { file: string } {\n  const file = opts.configPath || resolve(process.cwd(), \"agentx.json\")\n  if (existsSync(file) && !opts.overwrite) {\n    throw new Error(`agentx.json already exists at ${file}. Pass overwrite=true to replace it.`)\n  }\n  writeFileSync(file, JSON.stringify(cfg, null, 2) + \"\\n\", \"utf-8\")\n  return { file }\n}\n\n/**\n * POST to the primary daemon's /reload endpoint so it picks up config changes\n * without a full restart. Silently no-ops if the daemon isn't running.\n */\nasync function triggerLocalReload(): Promise<void> {\n  try {\n    const cfg = loadDaemonConfig()\n    const url = cfg.dashboard.daemonUrl?.replace(/\\/+$/, \"\") || \"http://127.0.0.1:18800\"\n    await fetch(`${url}/reload`, { method: \"POST\" }).catch(() => null)\n  } catch { /* config didn't load — leave it */ }\n}\n","// --- Setup wizard page ---\n//\n// First-run flow for non-technical operators: team name, first agent,\n// optional Telegram, optional Anthropic key. Writes agentx.json, scaffolds\n// the agent's workspace, writes .env, and points the operator at the next\n// step.\n//\n// The server-side state machine + form handler live in ../../setup-wizard.ts\n// — this file owns ONLY the HTML. That keeps the data flow inspectable\n// (one place) and the visual surface hot-reloadable (edit → rebuild → view).\n\nimport { renderShell, esc, stepCard, field, row, btn } from \"..\"\nimport type { WizardState } from \"../../setup-wizard\"\n\nexport function renderSetupPage(state: WizardState, defaultNode: string): string {\n  const heading = state.configExists\n    ? (state.agentCount === 0 ? \"Add your first agent\" : \"Add another agent\")\n    : \"Set up your team\"\n\n  // Custom topbar: /setup is pre-dashboard, we skip the tab nav and show\n  // just brand + subtitle + theme switcher + \"Skip to dashboard\" pill.\n  const customHeader = `<header class=\"ax-topbar\">\n  <div class=\"ax-topbar__left\">\n    <div class=\"ax-brand\">\n      <span class=\"ax-brand__mark\">AX</span>\n      <span class=\"ax-brand__name\">AgentX</span>\n      <span class=\"ax-brand__subtitle\">Setup</span>\n    </div>\n  </div>\n  <div class=\"ax-topbar__right\">\n    <a href=\"/glossary\" class=\"ax-skip\">? Glossary</a>\n    <a href=\"/live\" class=\"ax-skip\">Skip — open dashboard</a>\n    <div class=\"ax-theme-switch\" role=\"tablist\" aria-label=\"Theme\">\n      <button data-theme-opt=\"dark\">Dark</button>\n      <button data-theme-opt=\"light\">Light</button>\n      <button data-theme-opt=\"crt\">CRT</button>\n    </div>\n  </div>\n</header>`\n\n  const step1 = stepCard(1, \"Team basics\",\n    field({\n      name: \"nodeName\",\n      label: \"Team name\",\n      hint: \"(what you'd call this AgentX install)\",\n      value: defaultNode,\n      placeholder: \"My Team\",\n      required: true,\n    })\n  )\n\n  const step2 = stepCard(2, \"First agent\",\n    row([\n      field({ name: \"agentName\", label: \"Agent name\", value: \"Assistant\", placeholder: \"Support Bot\", required: true }),\n      field({ name: \"agentId\", label: \"Agent id\", hint: \"(lowercase, no spaces)\", value: \"assistant\", pattern: \"[a-z0-9][a-z0-9_-]*\", required: true }),\n    ]) +\n    field({\n      name: \"triggerWords\",\n      label: \"Trigger words\",\n      hint: `(comma or space separated — e.g. <code>@support, support</code>)`,\n      value: \"@assistant, assistant\",\n      required: true,\n    }) +\n    row([\n      field({\n        name: \"tier\",\n        label: \"AI engine\",\n        type: \"select\",\n        options: [\n          { value: \"claude-code\", label: \"Claude Code (recommended)\", selected: true },\n          { value: \"sdk\", label: \"Anthropic API (BYO key)\" },\n        ],\n      }),\n      field({\n        name: \"model\",\n        label: \"Model\",\n        hint: \"(optional)\",\n        value: \"claude-sonnet-4-6\",\n        placeholder: \"claude-sonnet-4-6\",\n      }),\n    ]) +\n    field({\n      name: \"personality\",\n      label: \"Personality / instructions\",\n      hint: \"(optional — what this agent does, in plain English)\",\n      type: \"textarea\",\n      placeholder: \"You are a support agent for Acme Co. Answer customer questions about our product, be friendly, keep replies short.\",\n    })\n  )\n\n  const step3 = stepCard(3, \"First channel\", `\n    <label class=\"ax-toggle\"><input type=\"checkbox\" id=\"enableTelegram\" /> Connect Telegram now</label>\n    <div class=\"ax-optional\" id=\"telegramFields\">\n      ${field({ name: \"telegramAccountId\", label: \"Account id\", hint: `(a label you choose — e.g. <code>support</code>)`, value: \"default\" })}\n      ${field({ name: \"telegramBotToken\", label: \"Bot token\", hint: `(from <a href=\"https://t.me/BotFather\" target=\"_blank\">@BotFather</a>)`, placeholder: \"123456:ABCdef...\" })}\n      ${field({ name: \"telegramBotUsername\", label: \"Bot username\", hint: `(optional — e.g. <code>my_support_bot</code>)`, placeholder: \"my_support_bot\" })}\n    </div>\n  `)\n\n  const step4 = stepCard(4, \"Anthropic API key\",\n    field({\n      name: \"anthropicApiKey\",\n      label: \"API key\",\n      hint: \"(optional — skip if you're using Claude Code)\",\n      type: \"password\",\n      placeholder: \"sk-ant-…\",\n      extraAttrs: `autocomplete=\"off\"`,\n    }) +\n    `<div class=\"ax-hint-block\">\n      The key is written to <code>.env</code> as <code>ANTHROPIC_API_KEY</code>. AgentX never transmits it — everything stays on this machine.\n    </div>`\n  )\n\n  const banner = state.configExists\n    ? `<div class=\"ax-banner\">Existing install: <b>${state.agentCount}</b> agent(s), <b>${state.channelCount}</b> channel(s) already configured. This wizard will add to it.</div>`\n    : \"\"\n\n  const body = `<div class=\"ax-wizard\">\n  <h1 class=\"ax-wizard__h1\">${esc(heading)}</h1>\n  <p class=\"ax-wizard__lead\">Fill in the basics below. We'll write <code>agentx.json</code>, set up a folder for your first agent, and point you at the next step.</p>\n\n  ${banner}\n\n  <div id=\"msg\" class=\"ax-msg\"></div>\n\n  <form id=\"wizard\" autocomplete=\"off\">\n    ${step1}\n    ${step2}\n    ${step3}\n    ${step4}\n    <footer class=\"ax-actions\">\n      ${btn(\"Save and continue\", { type: \"submit\", primary: true, id: \"submitBtn\" })}\n      ${btn(\"Skip, I'll do it later\", { onclick: \"window.location.href='/live'\" })}\n    </footer>\n  </form>\n</div>`\n\n  return renderShell({\n    title: \"AgentX — Setup\",\n    activeTab: \"custom\",\n    subtitle: \"Setup\",\n    customHeader,\n    noMain: true,\n    body,\n    css: SETUP_PAGE_CSS,\n    scripts: SETUP_SCRIPT,\n  })\n}\n\n/** CSS that's specific to the setup page — wizard layout + optional-fields\n *  toggle + result messaging. Everything reusable (form fields, step cards,\n *  buttons) comes from AX_COMPONENTS_CSS. */\nconst SETUP_PAGE_CSS = `\n/* Pre-dashboard topbar variant — no tab nav, the pills are the only chrome. */\n.ax-topbar__right a.ax-skip {\n  padding: 4px 10px; border: 1px solid var(--ax-border-2); border-radius: 4px;\n  color: var(--ax-text-2); font-size: var(--ax-fs-xs); text-decoration: none;\n}\n.ax-topbar__right a.ax-skip:hover { color: var(--ax-accent); border-color: var(--ax-accent); }\n\n/* Wizard frame */\n.ax-wizard { max-width: 680px; margin: 0 auto; padding: 36px 22px 80px; }\n.ax-wizard__h1 { font-size: 22px; font-weight: 600; margin: 0 0 4px; letter-spacing: -0.015em; }\n.ax-wizard__lead { color: var(--ax-muted); margin: 0 0 24px; font-size: var(--ax-fs); line-height: 1.55; }\n.ax-wizard__lead code { background: var(--ax-surface-2); padding: 1px 6px; border-radius: 3px; color: var(--ax-text); font-size: var(--ax-fs-sm); }\n\n/* Info banner (\"You already have N agents…\") */\n.ax-banner {\n  background: color-mix(in oklch, var(--ax-accent) 10%, var(--ax-bg-elev));\n  border: 1px solid color-mix(in oklch, var(--ax-accent) 30%, var(--ax-border-2));\n  border-radius: var(--ax-radius);\n  padding: 10px 14px; margin-bottom: 18px;\n  color: var(--ax-text-2); font-size: var(--ax-fs-sm);\n}\n.ax-banner b { color: var(--ax-text); font-weight: 600; }\n\n/* \"Connect Telegram now\" toggle + collapsible fields */\n.ax-toggle { display: flex; align-items: center; gap: 8px; margin: 4px 0 6px; font-size: var(--ax-fs); color: var(--ax-text); cursor: pointer; user-select: none; }\n.ax-toggle input { width: auto; accent-color: var(--ax-accent); }\n.ax-optional { border-left: 2px solid var(--ax-border-2); padding-left: 14px; margin-top: 10px; display: none; }\n.ax-optional.is-show { display: block; }\n.ax-hint-block { font-size: var(--ax-fs-xs); color: var(--ax-muted); margin-top: 8px; line-height: 1.55; }\n.ax-hint-block code { background: var(--ax-surface-2); padding: 1px 6px; border-radius: 3px; color: var(--ax-text); font-family: var(--ax-mono); font-size: var(--ax-fs-xs); }\n\n/* Form footer */\n.ax-actions {\n  display: flex; gap: 10px; padding: 20px 0 0; align-items: center;\n  border-top: 1px solid var(--ax-border); margin-top: 20px;\n}\n\n/* Server-response messaging (success / error blocks) */\n.ax-msg { margin: 14px 0; padding: 12px 16px; border-radius: var(--ax-radius); font-size: var(--ax-fs); display: none; }\n.ax-msg.is-ok {\n  display: block;\n  background: color-mix(in oklch, var(--ax-accent) 12%, transparent);\n  color: var(--ax-accent);\n  border: 1px solid color-mix(in oklch, var(--ax-accent) 40%, transparent);\n}\n.ax-msg.is-err {\n  display: block;\n  background: color-mix(in oklch, var(--ax-err) 12%, transparent);\n  color: var(--ax-err);\n  border: 1px solid color-mix(in oklch, var(--ax-err) 40%, transparent);\n}\n.ax-next-steps { margin-top: 12px; padding-left: 20px; color: var(--ax-text-2); }\n.ax-next-steps li { margin: 4px 0; }\n.ax-next-steps code { background: var(--ax-surface-2); padding: 1px 6px; border-radius: 3px; color: var(--ax-text); font-family: var(--ax-mono); font-size: var(--ax-fs-sm); }`\n\nconst SETUP_SCRIPT = `<script>\ndocument.getElementById('enableTelegram').addEventListener('change', (e) => {\n  document.getElementById('telegramFields').classList.toggle('is-show', e.target.checked);\n});\ndocument.getElementById('wizard').addEventListener('submit', async (e) => {\n  e.preventDefault();\n  const f = e.target;\n  const msg = document.getElementById('msg');\n  const btn = document.getElementById('submitBtn');\n  msg.className = 'ax-msg'; msg.style.display = 'none';\n  btn.disabled = true; btn.textContent = 'Saving…';\n  const telegramEnabled = document.getElementById('enableTelegram').checked;\n  const payload = {\n    nodeName: f.nodeName.value.trim(),\n    agent: {\n      id: f.agentId.value.trim(),\n      name: f.agentName.value.trim(),\n      triggerWords: f.triggerWords.value.trim(),\n      tier: f.tier.value,\n      model: f.model.value.trim() || undefined,\n      personality: f.personality.value.trim() || undefined,\n    },\n    anthropicApiKey: f.anthropicApiKey.value.trim() || undefined,\n  };\n  if (telegramEnabled) {\n    payload.telegram = {\n      accountId: f.telegramAccountId.value.trim() || 'default',\n      botToken: f.telegramBotToken.value.trim(),\n      botUsername: f.telegramBotUsername.value.trim() || undefined,\n    };\n    if (!payload.telegram.botToken) {\n      msg.className = 'ax-msg is-err'; msg.textContent = 'Bot token is required when Telegram is enabled.';\n      btn.disabled = false; btn.textContent = 'Save and continue'; return;\n    }\n  }\n  try {\n    const r = await fetch('/api/setup', {\n      method: 'POST',\n      headers: { 'Content-Type': 'application/json', 'X-Requested-With': 'agentx-wizard' },\n      body: JSON.stringify(payload),\n    });\n    const data = await r.json();\n    if (!r.ok) throw new Error(data.error || ('HTTP ' + r.status));\n    const steps = data.nextSteps.map((s) => '<li>' + s.replace(/\\\\\\`([^\\\\\\`]+)\\\\\\`/g, '<code>$1</code>') + '</li>').join('');\n    msg.className = 'ax-msg is-ok';\n    msg.innerHTML = '<b>' + data.summary + '</b><ol class=\"ax-next-steps\">' + steps + '</ol>';\n    btn.textContent = 'Done';\n    btn.disabled = true;\n  } catch (err) {\n    msg.className = 'ax-msg is-err'; msg.textContent = err.message;\n    btn.disabled = false; btn.textContent = 'Save and continue';\n  }\n});\n</script>`\n","import { createHash, randomBytes } from \"crypto\"\nimport { existsSync, mkdirSync, readFileSync, writeFileSync } from \"fs\"\nimport { resolve, dirname } from \"path\"\n\n// --- Scoped API tokens ---\n//\n// Tokens let external services (other agentx instances, webhook senders, custom\n// apps) talk to this daemon with explicit scopes instead of sharing a single\n// all-powerful dashboard token.\n//\n// We only ever store the sha256 of each token + its printable prefix. The full\n// token is shown exactly once, at creation time, and the operator copies it.\n// Format:  agx_live_<hex(32)>   — prefix lets secret-scanners catch leaks.\n//\n// Scopes (string equality; \"agent:*\" grants any agent):\n//   dashboard:read   — /api/live, /api/agents, /api/task/history\n//   dashboard:write  — /api/admin/*, config mutation endpoints\n//   agent:<id>       — /api/public/agents/<id>/messages\n//   agent:*          — any agent\n//   mesh:peer        — cross-node mesh (forward-compatible — not enforced yet)\n\nexport const TOKEN_PREFIX = \"agx_live_\"\nconst DEFAULT_FILE = \".agentx/tokens.json\"\n\nexport interface TokenRecord {\n  id: string                 // short public id (shown in lists)\n  name: string\n  prefix: string             // full printable prefix (TOKEN_PREFIX + first-4 chars of body)\n  hash: string               // sha256 of the full token\n  scopes: string[]\n  createdAt: string\n  expiresAt?: string\n  revokedAt?: string\n  lastUsedAt?: string\n}\n\nexport class TokenStore {\n  private file: string\n\n  constructor(baseDir: string = process.cwd(), fileRel: string = DEFAULT_FILE) {\n    this.file = resolve(baseDir, fileRel)\n  }\n\n  private load(): TokenRecord[] {\n    if (!existsSync(this.file)) return []\n    try { return JSON.parse(readFileSync(this.file, \"utf-8\")) as TokenRecord[] } catch { return [] }\n  }\n\n  private save(records: TokenRecord[]): void {\n    mkdirSync(dirname(this.file), { recursive: true })\n    writeFileSync(this.file, JSON.stringify(records, null, 2) + \"\\n\", \"utf-8\")\n  }\n\n  /**\n   * Mint a new token. Returns the full token string AND the record.\n   * The full token is the only place the secret is ever exposed — the caller\n   * must surface it to the operator immediately; after this call the store only\n   * knows the hash.\n   */\n  create(input: {\n    name: string\n    scopes: string[]\n    expiresInDays?: number\n  }): { token: string; record: TokenRecord } {\n    if (!input.name?.trim()) throw new Error(\"Token name is required.\")\n    if (!Array.isArray(input.scopes) || input.scopes.length === 0) {\n      throw new Error(\"At least one scope is required.\")\n    }\n    for (const s of input.scopes) {\n      if (!isValidScope(s)) throw new Error(`Invalid scope: ${s}`)\n    }\n    const body = randomBytes(32).toString(\"hex\")\n    const token = TOKEN_PREFIX + body\n    const record: TokenRecord = {\n      id: \"tok_\" + randomBytes(4).toString(\"hex\"),\n      name: input.name.trim(),\n      prefix: TOKEN_PREFIX + body.slice(0, 4),\n      hash: hashToken(token),\n      scopes: [...input.scopes],\n      createdAt: new Date().toISOString(),\n      expiresAt: input.expiresInDays\n        ? new Date(Date.now() + input.expiresInDays * 86400 * 1000).toISOString()\n        : undefined,\n    }\n    const records = this.load()\n    records.push(record)\n    this.save(records)\n    return { token, record }\n  }\n\n  list(): TokenRecord[] {\n    return this.load()\n  }\n\n  revoke(id: string): TokenRecord | null {\n    const records = this.load()\n    const rec = records.find((r) => r.id === id)\n    if (!rec) return null\n    rec.revokedAt = new Date().toISOString()\n    this.save(records)\n    return rec\n  }\n\n  /**\n   * Look up a token string. Returns the record on success, null on unknown /\n   * revoked / expired. Updates lastUsedAt opportunistically (write-on-success).\n   */\n  verify(token: string): TokenRecord | null {\n    if (!token || !token.startsWith(TOKEN_PREFIX)) return null\n    const hash = hashToken(token)\n    const records = this.load()\n    const rec = records.find((r) => r.hash === hash)\n    if (!rec) return null\n    if (rec.revokedAt) return null\n    if (rec.expiresAt && Date.parse(rec.expiresAt) < Date.now()) return null\n    // Throttle lastUsedAt updates to at most once per minute to avoid disk churn.\n    const now = Date.now()\n    const last = rec.lastUsedAt ? Date.parse(rec.lastUsedAt) : 0\n    if (now - last > 60_000) {\n      rec.lastUsedAt = new Date(now).toISOString()\n      try { this.save(records) } catch { /* best-effort */ }\n    }\n    return rec\n  }\n}\n\n/**\n * Check whether a record has a given required scope. \"agent:<id>\" required\n * matches either itself or \"agent:*\". \"dashboard:write\" implicitly grants\n * \"dashboard:read\" for convenience.\n */\nexport function recordHasScope(record: TokenRecord, required: string): boolean {\n  if (record.scopes.includes(required)) return true\n  if (required.startsWith(\"agent:\") && record.scopes.includes(\"agent:*\")) return true\n  if (required === \"dashboard:read\" && record.scopes.includes(\"dashboard:write\")) return true\n  return false\n}\n\nfunction isValidScope(s: string): boolean {\n  return (\n    s === \"dashboard:read\" ||\n    s === \"dashboard:write\" ||\n    s === \"agent:*\" ||\n    /^agent:[a-z0-9][a-z0-9_-]*$/.test(s) ||\n    s === \"mesh:peer\"\n  )\n}\n\nexport function hashToken(token: string): string {\n  return \"sha256:\" + createHash(\"sha256\").update(token).digest(\"hex\")\n}\n\n/**\n * Extract a bearer token from the request headers. Falls back to the\n * `?token=` query param so EventSource (which can't set headers in most\n * browsers) can still authenticate.\n */\nexport function extractToken(req: { headers: Record<string, string | string[] | undefined>; url?: string }): string | null {\n  const auth = req.headers[\"authorization\"]\n  const authHeader = Array.isArray(auth) ? auth[0] : auth\n  if (authHeader && authHeader.toLowerCase().startsWith(\"bearer \")) {\n    return authHeader.slice(7).trim()\n  }\n  if (req.url) {\n    try {\n      const u = new URL(req.url, \"http://localhost\")\n      const tok = u.searchParams.get(\"token\")\n      if (tok) return tok\n    } catch { /* */ }\n  }\n  return null\n}\n"],"mappings":"8GAAA,OAAS,cAAAA,EAAY,gBAAAC,EAAc,iBAAAC,EAAe,kBAAAC,EAAgB,aAAAC,MAAiB,KACnF,OAAS,WAAAC,MAAe,OACxB,OAAS,YAAAC,MAAgB,KCFzB,OAAS,cAAAC,EAAY,gBAAAC,EAAc,iBAAAC,EAAe,gBAAAC,MAAoB,KACtE,OAAS,WAAAC,MAAe,OAiCjB,SAASC,EACdC,EACAC,EAAsB,CAAC,EACgC,CACvD,IAAMC,EAAOD,EAAK,YAAcE,EAAQ,QAAQ,IAAI,EAAG,aAAa,EACpE,GAAI,CAACC,EAAWF,CAAI,EAAG,MAAM,IAAI,MAAM,4BAA4BA,GAAM,EAEzE,IAAMG,EAAM,KAAK,MAAMC,EAAaJ,EAAM,OAAO,CAAC,EAC5CK,EAAMP,EAAQK,CAAG,EACjBG,EAA0B,OAAOD,GAAQ,SAAW,CAAE,QAASA,CAAI,EAAIA,EAEvEE,EAAO,KAAK,UAAUJ,EAAK,KAAM,CAAC,EAAI;AAAA,EACtCK,EAAMR,EAAO,OACnBS,EAAcD,EAAKD,EAAM,OAAO,EAChC,GAAI,CACF,KAAK,MAAMH,EAAaI,EAAK,OAAO,CAAC,CACvC,OAASE,EAAP,CACA,MAAM,IAAI,MAAM,sCAAsCA,EAAE,SAAS,CACnE,CAEA,IAAIC,EACJ,OAAKZ,EAAK,aACRY,EAAa,GAAGX,SAAY,KAAK,IAAI,IACrCY,EAAaZ,EAAMW,CAAU,GAE/BF,EAAcT,EAAMO,EAAM,OAAO,EAE5BR,EAAK,YAAYc,EAAmB,EAAE,MAAM,IAAM,CAA0B,CAAC,EAE3E,CAAE,QAASP,EAAO,QAAS,QAASA,EAAO,QAAS,WAAAK,CAAW,CACxE,CAQO,SAASG,EACdX,EACAJ,EAAqD,CAAC,EACpC,CAClB,IAAMC,EAAOD,EAAK,YAAcE,EAAQ,QAAQ,IAAI,EAAG,aAAa,EACpE,GAAIC,EAAWF,CAAI,GAAK,CAACD,EAAK,UAC5B,MAAM,IAAI,MAAM,iCAAiCC,uCAA0C,EAE7F,OAAAS,EAAcT,EAAM,KAAK,UAAUG,EAAK,KAAM,CAAC,EAAI;AAAA,EAAM,OAAO,EACzD,CAAE,KAAAH,CAAK,CAChB,CAMA,eAAea,GAAoC,CACjD,GAAI,CAEF,IAAME,EADMC,EAAiB,EACb,UAAU,WAAW,QAAQ,OAAQ,EAAE,GAAK,yBAC5D,MAAM,MAAM,GAAGD,WAAc,CAAE,OAAQ,MAAO,CAAC,EAAE,MAAM,IAAM,IAAI,CACnE,MAAE,CAA4C,CAChD,CChFO,SAASE,EAAgBC,EAAoBC,EAA6B,CAC/E,IAAMC,EAAUF,EAAM,aACjBA,EAAM,aAAe,EAAI,uBAAyB,oBACnD,mBAIEG,EAAe;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,WAmBfC,EAAQC,EAAS,EAAG,cACxBC,EAAM,CACJ,KAAM,WACN,MAAO,YACP,KAAM,wCACN,MAAOL,EACP,YAAa,UACb,SAAU,EACZ,CAAC,CACH,EAEMM,EAAQF,EAAS,EAAG,cACxBG,EAAI,CACFF,EAAM,CAAE,KAAM,YAAa,MAAO,aAAc,MAAO,YAAa,YAAa,cAAe,SAAU,EAAK,CAAC,EAChHA,EAAM,CAAE,KAAM,UAAW,MAAO,WAAY,KAAM,yBAA0B,MAAO,YAAa,QAAS,sBAAuB,SAAU,EAAK,CAAC,CAClJ,CAAC,EACDA,EAAM,CACJ,KAAM,eACN,MAAO,gBACP,KAAM,wEACN,MAAO,wBACP,SAAU,EACZ,CAAC,EACDE,EAAI,CACFF,EAAM,CACJ,KAAM,OACN,MAAO,YACP,KAAM,SACN,QAAS,CACP,CAAE,MAAO,cAAe,MAAO,4BAA6B,SAAU,EAAK,EAC3E,CAAE,MAAO,MAAO,MAAO,yBAA0B,CACnD,CACF,CAAC,EACDA,EAAM,CACJ,KAAM,QACN,MAAO,QACP,KAAM,aACN,MAAO,oBACP,YAAa,mBACf,CAAC,CACH,CAAC,EACDA,EAAM,CACJ,KAAM,cACN,MAAO,6BACP,KAAM,2DACN,KAAM,WACN,YAAa,oHACf,CAAC,CACH,EAEMG,EAAQJ,EAAS,EAAG,gBAAiB;AAAA;AAAA;AAAA,QAGrCC,EAAM,CAAE,KAAM,oBAAqB,MAAO,aAAc,KAAM,wDAAoD,MAAO,SAAU,CAAC;AAAA,QACpIA,EAAM,CAAE,KAAM,mBAAoB,MAAO,YAAa,KAAM,yEAA0E,YAAa,kBAAmB,CAAC;AAAA,QACvKA,EAAM,CAAE,KAAM,sBAAuB,MAAO,eAAgB,KAAM,qDAAiD,YAAa,gBAAiB,CAAC;AAAA;AAAA,GAEvJ,EAEKI,EAAQL,EAAS,EAAG,oBACxBC,EAAM,CACJ,KAAM,kBACN,MAAO,UACP,KAAM,qDACN,KAAM,WACN,YAAa,gBACb,WAAY,oBACd,CAAC,EACD;AAAA;AAAA,WAGF,EAEMK,EAASX,EAAM,aACjB,+CAA+CA,EAAM,+BAA+BA,EAAM,oFAC1F,GAEEY,EAAO;AAAA,8BACeC,EAAIX,CAAO;AAAA;AAAA;AAAA,IAGrCS;AAAA;AAAA;AAAA;AAAA;AAAA,MAKEP;AAAA,MACAG;AAAA,MACAE;AAAA,MACAC;AAAA;AAAA,QAEEI,EAAI,oBAAqB,CAAE,KAAM,SAAU,QAAS,GAAM,GAAI,WAAY,CAAC;AAAA,QAC3EA,EAAI,yBAA0B,CAAE,QAAS,8BAA+B,CAAC;AAAA;AAAA;AAAA,QAK/E,OAAOC,EAAY,CACjB,MAAO,sBACP,UAAW,SACX,SAAU,QACV,aAAAZ,EACA,OAAQ,GACR,KAAAS,EACA,IAAKI,EACL,QAASC,CACX,CAAC,CACH,CAKA,IAAMD,EAAiB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,gLAwDjBC,EAAe;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;WF/Jd,SAASC,EAAYC,EAAkB,QAAQ,IAAI,EAAgB,CACxE,IAAMC,EAAOC,EAAQF,EAAS,aAAa,EAC3C,GAAI,CAACG,EAAWF,CAAI,EAAG,MAAO,CAAE,aAAc,GAAO,WAAY,EAAG,aAAc,CAAE,EACpF,GAAI,CACF,IAAMG,EAAM,KAAK,MAAMC,EAAaJ,EAAM,OAAO,CAAC,EAC5CK,EAASF,EAAI,OAAS,OAAO,KAAKA,EAAI,MAAM,EAAE,OAAS,EACvDG,EAAWH,EAAI,SACjB,OAAO,OAAOA,EAAI,QAAQ,EAAE,OAAQI,GAAWA,GAAKA,EAAE,OAAO,EAAE,OAC/D,EACJ,MAAO,CAAE,aAAc,GAAM,WAAYF,EAAQ,aAAcC,EAAU,SAAUH,EAAI,MAAM,IAAK,CACpG,MAAE,CACA,MAAO,CAAE,aAAc,GAAO,WAAY,EAAG,aAAc,CAAE,CAC/D,CACF,CAOO,SAASK,EAAUC,EAAwBV,EAAkB,QAAQ,IAAI,EAI9E,CAEA,GAAI,CAACU,EAAQ,UAAU,KAAK,EAAG,MAAM,IAAI,MAAM,wBAAwB,EACvE,GAAI,CAACA,EAAQ,OAAO,IAAI,KAAK,EAAG,MAAM,IAAI,MAAM,uBAAuB,EACvE,GAAI,CAAC,wBAAwB,KAAKA,EAAQ,MAAM,EAAE,EAChD,MAAM,IAAI,MAAM,sFAAsF,EAExG,GAAI,CAACA,EAAQ,MAAM,MAAM,KAAK,EAAG,MAAM,IAAI,MAAM,yBAAyB,EAC1E,IAAMC,EAAWC,EAAcF,EAAQ,MAAM,YAAY,EACzD,GAAIC,EAAS,SAAW,EAAG,MAAM,IAAI,MAAM,wCAAwC,EACnF,GAAID,EAAQ,MAAM,OAAS,eAAiBA,EAAQ,MAAM,OAAS,MACjE,MAAM,IAAI,MAAM,uCAAuC,EAGzD,IAAMG,EAAaX,EAAQF,EAAS,aAAa,EAC3Cc,EAAUZ,EAAQF,EAAS,MAAM,EACjCe,EAAeb,EAAQF,EAAS,SAAUU,EAAQ,MAAM,EAAE,EAC1DM,EAAQjB,EAAYC,CAAO,EAGjCiB,EAAUF,EAAc,CAAE,UAAW,EAAK,CAAC,EAC3C,IAAMG,EAAWhB,EAAQa,EAAc,WAAW,EAClD,GAAI,CAACZ,EAAWe,CAAQ,EAAG,CACzB,IAAMC,EAAcT,EAAQ,MAAM,aAAa,KAAK,GAAK,WAAWA,EAAQ,MAAM,6BAA6BA,EAAQ,iBACvHU,EAAcF,EAAU,KAAKR,EAAQ,MAAM;AAAA;AAAA,EAAWS;AAAA,CAAe,EAIvE,IAAME,EAAmBX,EAAQ,SAC7B,MAAMA,EAAQ,MAAM,GAAG,YAAY,cACnC,OAEAY,EACJ,GAAKN,EAAM,aA4BTM,EAxBeC,EAAoBnB,GAAQ,CAWzC,GAVAA,EAAI,KAAOA,EAAI,MAAQ,CAAC,EACnBA,EAAI,KAAK,OAAMA,EAAI,KAAK,KAAOM,EAAQ,UACvCN,EAAI,KAAK,KAAIA,EAAI,KAAK,GAAKoB,EAAQd,EAAQ,QAAQ,GAAK,QACxDN,EAAI,KAAK,OAAMA,EAAI,KAAK,KAAO,mBACpCA,EAAI,KAAK,aAAeA,EAAI,KAAK,cAAgBM,EAAQ,MAAM,GAE/DN,EAAI,UAAYA,EAAI,WAAa,CAAC,EAC7BA,EAAI,UAAU,SAAQA,EAAI,UAAU,OAAS,CAAE,OAAQ,sBAAuB,GAEnFA,EAAI,OAASA,EAAI,QAAU,CAAC,EACxBA,EAAI,OAAOM,EAAQ,MAAM,EAAE,EAAG,MAAM,IAAI,MAAM,UAAUA,EAAQ,MAAM,qBAAqB,EAC/F,OAAAN,EAAI,OAAOM,EAAQ,MAAM,EAAE,EAAIe,EAAWf,EAASK,EAAcJ,CAAQ,EAErED,EAAQ,WACVN,EAAI,SAAWA,EAAI,UAAY,CAAC,EAChCA,EAAI,SAAS,SAAWA,EAAI,SAAS,UAAY,CAAE,QAAS,GAAM,SAAU,CAAC,EAAG,OAAQ,CAAE,GAAI,OAAQ,MAAO,kBAAmB,CAAE,EAClIA,EAAI,SAAS,SAAS,QAAU,GAChCA,EAAI,SAAS,SAAS,SAAWA,EAAI,SAAS,SAAS,UAAY,CAAC,EACpEA,EAAI,SAAS,SAAS,SAASM,EAAQ,SAAS,SAAS,EAAIgB,EAAqBhB,EAASW,CAAiB,GAGvG,CAAE,QAAS,gBAAgBX,EAAQ,MAAM,OAASA,EAAQ,SAAW,sBAAwB,GAAI,CAC1G,EAAG,CAAE,WAAAG,CAAW,CAAC,EACG,eA5BG,CACvB,IAAMT,EAAMuB,EAAiBjB,EAASK,EAAcJ,EAAUU,CAAgB,EAC9EO,EAAkBxB,EAAK,CAAE,WAAAS,CAAW,CAAC,EA8BvCgB,EAAiBf,EAASJ,EAASW,CAAgB,EAEnD,IAAMS,EAAsB,CAAC,EAC7B,OAAIpB,EAAQ,iBAAmB,CAACP,EAAWD,EAAQF,EAAS,MAAM,CAAC,IACjE8B,EAAU,KAAK,mCAAmC,EAEhDpB,EAAQ,MAAM,OAAS,eACzBoB,EAAU,KAAK,gGAAgG,EAEjHA,EAAU,KAAK,wCAAwC,EACvDA,EAAU,KAAK,4CAA4C,EAEpD,CACL,QAASd,EAAM,aACX,gBAAgBN,EAAQ,MAAM,oBAC9B,2CAA2CA,EAAQ,MAAM,OAC7D,UAAAoB,EACA,WAAAR,CACF,CACF,CAEA,SAASV,EAAcmB,EAAqB,CAC1C,OAAQA,GAAK,IACV,MAAM,QAAQ,EACd,IAAKC,GAAMA,EAAE,KAAK,CAAC,EACnB,OAAO,OAAO,EAEd,OAAO,CAACA,EAAGC,EAAG,IAAM,EAAE,QAAQD,CAAC,IAAMC,CAAC,CAC3C,CAEA,SAAST,EAAQO,EAAmB,CAClC,OAAQA,GAAK,IAAI,YAAY,EAAE,QAAQ,eAAgB,GAAG,EAAE,QAAQ,WAAY,EAAE,CACpF,CAEA,SAASJ,EAAiBjB,EAAwBK,EAAsBJ,EAAoBU,EAA2B,CAErH,IAAMjB,EAAW,CACf,KAAM,CAAE,GAFCoB,EAAQd,EAAQ,QAAQ,GAAK,OAE1B,KAAMA,EAAQ,SAAU,KAAM,kBAAmB,aAAcA,EAAQ,MAAM,EAAG,EAC5F,UAAW,CAAE,OAAQ,CAAE,OAAQ,sBAAuB,CAAE,EACxD,OAAQ,CAAE,CAACA,EAAQ,MAAM,EAAE,EAAGe,EAAWf,EAASK,EAAcJ,CAAQ,CAAE,EAC1E,SAAU,CAAC,EACX,MAAO,CAAC,EACR,KAAM,CAAE,QAAS,GAAO,MAAO,CAAC,EAAG,UAAW,SAAU,YAAa,CAAE,SAAU,GAAI,QAAS,EAAG,CAAE,EACnG,UAAW,CAAE,QAAS,GAAM,KAAM,KAAM,KAAM,YAAa,UAAW,wBAAyB,EAC/F,OAAQ,CAAC,CACX,EACA,OAAID,EAAQ,UAAYW,EACtBjB,EAAI,SAAS,SAAW,CACtB,QAAS,GACT,SAAU,CAAE,CAACM,EAAQ,SAAS,SAAS,EAAGgB,EAAqBhB,EAASW,CAAgB,CAAE,EAC1F,OAAQ,CAAE,GAAI,OAAQ,MAAO,kBAAmB,CAClD,EAEAjB,EAAI,SAAS,SAAW,CAAE,QAAS,GAAO,SAAU,CAAC,EAAG,OAAQ,CAAE,GAAI,OAAQ,MAAO,kBAAmB,CAAE,EAErGA,CACT,CAEA,SAASqB,EAAWf,EAAwBK,EAAsBJ,EAAoB,CACpF,IAAMuB,EAAa,CACjB,KAAMxB,EAAQ,MAAM,KACpB,UAAWK,EACX,KAAML,EAAQ,MAAM,KACpB,SAAAC,EACA,cAAe,EACf,eAAgB,SAClB,EACA,OAAID,EAAQ,MAAM,QAAOwB,EAAM,MAAQxB,EAAQ,MAAM,OACjDA,EAAQ,MAAM,aAAa,KAAK,IAAGwB,EAAM,aAAexB,EAAQ,MAAM,YAAY,KAAK,EAAE,MAAM,EAAG,GAAG,GAClGwB,CACT,CAEA,SAASR,EAAqBhB,EAAwByB,EAAkB,CACtE,MAAO,CACL,SAAU,KAAOA,EAAW,IAC5B,YAAazB,EAAQ,UAAU,aAAe,GAC9C,aAAcA,EAAQ,MAAM,EAC9B,CACF,CAEA,SAASmB,EAAiBf,EAAiBJ,EAAwBW,EAAiC,CAClG,IAAMe,EAAWjC,EAAWW,CAAO,EAAIT,EAAaS,EAAS,OAAO,EAAI,GAClEuB,EAAkB,CAAC,EASzB,GAPI3B,EAAQ,iBAAmB,CAAC0B,EAAS,SAAS,oBAAoB,GACpEC,EAAM,KAAK,qBAAqB3B,EAAQ,iBAAiB,EAEvDA,EAAQ,UAAYW,GAAoB,CAACe,EAAS,SAAS,GAAGf,IAAmB,GACnFgB,EAAM,KAAK,GAAGhB,KAAoBX,EAAQ,SAAS,UAAU,EAG3D,CAACP,EAAWW,CAAO,EAAG,CAMxBM,EAAcN,EAAS,CAAC,GALT,CACb,iCACA,yDACA,EACF,EACmC,GAAGuB,EAAO,EAAE,EAAE,KAAK;AAAA,CAAI,CAAC,EAC3D,OAEF,GAAIA,EAAM,OAAS,EAAG,CACpB,IAAMC,EAAMF,EAAS,SAAS;AAAA,CAAI,EAAI,GAAK;AAAA,EAC3CG,EAAezB,EAASwB,EAAMD,EAAM,KAAK;AAAA,CAAI,EAAI;AAAA,CAAI,EAEzD,CAIO,SAASG,GAAgBC,EAAuBC,EAA2B,CAChF,IAAM1B,EAAQjB,EAAY,EACpB4C,EAAc3B,EAAM,UAAY4B,EAAS,EAAE,QAAQ,WAAY,EAAE,EACjEC,EAAOC,EAAgB9B,EAAO2B,CAAW,EAC/CD,EAAI,UAAU,IAAK,CAAE,eAAgB,0BAA2B,CAAC,EACjEA,EAAI,IAAIG,CAAI,CACd,CAEA,eAAsBE,GAAiBC,EAAsBN,EAAoC,CAC/F,IAAIO,EAAM,GACV,MAAM,IAAI,QAAeC,GAAO,CAAEF,EAAI,GAAG,OAASxC,GAAM,CAAEyC,GAAOzC,CAAE,CAAC,EAAGwC,EAAI,GAAG,MAAO,IAAME,EAAG,CAAC,CAAE,CAAC,EAClG,IAAIxC,EACJ,GAAI,CAAEA,EAAU,KAAK,MAAMuC,CAAG,CAAE,MAChC,CAAQP,EAAI,UAAU,IAAK,CAAE,eAAgB,kBAAmB,CAAC,EAAGA,EAAI,IAAI,KAAK,UAAU,CAAE,MAAO,cAAe,CAAC,CAAC,EAAG,MAAO,CAC/H,GAAI,CACF,IAAMS,EAAS1C,EAAUC,CAAO,EAChCgC,EAAI,UAAU,IAAK,CAAE,eAAgB,kBAAmB,CAAC,EACzDA,EAAI,IAAI,KAAK,UAAUS,CAAM,CAAC,CAChC,OAASC,EAAP,CACAV,EAAI,UAAU,IAAK,CAAE,eAAgB,kBAAmB,CAAC,EACzDA,EAAI,IAAI,KAAK,UAAU,CAAE,MAAOU,EAAE,SAAW,eAAgB,CAAC,CAAC,CACjE,CACF,CG5QA,OAAS,cAAAC,EAAY,eAAAC,MAAmB,SACxC,OAAS,cAAAC,EAAY,aAAAC,EAAW,gBAAAC,EAAc,iBAAAC,OAAqB,KACnE,OAAS,WAAAC,GAAS,WAAAC,OAAe,OAmB1B,IAAMC,EAAe,YACtBC,GAAe,sBAcRC,EAAN,KAAiB,CACd,KAER,YAAYC,EAAkB,QAAQ,IAAI,EAAGC,EAAkBH,GAAc,CAC3E,KAAK,KAAOH,GAAQK,EAASC,CAAO,CACtC,CAEQ,MAAsB,CAC5B,GAAI,CAACV,EAAW,KAAK,IAAI,EAAG,MAAO,CAAC,EACpC,GAAI,CAAE,OAAO,KAAK,MAAME,EAAa,KAAK,KAAM,OAAO,CAAC,CAAmB,MAAE,CAAQ,MAAO,CAAC,CAAE,CACjG,CAEQ,KAAKS,EAA8B,CACzCV,EAAUI,GAAQ,KAAK,IAAI,EAAG,CAAE,UAAW,EAAK,CAAC,EACjDF,GAAc,KAAK,KAAM,KAAK,UAAUQ,EAAS,KAAM,CAAC,EAAI;AAAA,EAAM,OAAO,CAC3E,CAQA,OAAOC,EAIoC,CACzC,GAAI,CAACA,EAAM,MAAM,KAAK,EAAG,MAAM,IAAI,MAAM,yBAAyB,EAClE,GAAI,CAAC,MAAM,QAAQA,EAAM,MAAM,GAAKA,EAAM,OAAO,SAAW,EAC1D,MAAM,IAAI,MAAM,iCAAiC,EAEnD,QAAWC,KAAKD,EAAM,OACpB,GAAI,CAACE,GAAaD,CAAC,EAAG,MAAM,IAAI,MAAM,kBAAkBA,GAAG,EAE7D,IAAME,EAAOhB,EAAY,EAAE,EAAE,SAAS,KAAK,EACrCiB,EAAQV,EAAeS,EACvBE,EAAsB,CAC1B,GAAI,OAASlB,EAAY,CAAC,EAAE,SAAS,KAAK,EAC1C,KAAMa,EAAM,KAAK,KAAK,EACtB,OAAQN,EAAeS,EAAK,MAAM,EAAG,CAAC,EACtC,KAAMG,EAAUF,CAAK,EACrB,OAAQ,CAAC,GAAGJ,EAAM,MAAM,EACxB,UAAW,IAAI,KAAK,EAAE,YAAY,EAClC,UAAWA,EAAM,cACb,IAAI,KAAK,KAAK,IAAI,EAAIA,EAAM,cAAgB,MAAQ,GAAI,EAAE,YAAY,EACtE,MACN,EACMD,EAAU,KAAK,KAAK,EAC1B,OAAAA,EAAQ,KAAKM,CAAM,EACnB,KAAK,KAAKN,CAAO,EACV,CAAE,MAAAK,EAAO,OAAAC,CAAO,CACzB,CAEA,MAAsB,CACpB,OAAO,KAAK,KAAK,CACnB,CAEA,OAAOE,EAAgC,CACrC,IAAMR,EAAU,KAAK,KAAK,EACpBS,EAAMT,EAAQ,KAAM,GAAM,EAAE,KAAOQ,CAAE,EAC3C,OAAKC,GACLA,EAAI,UAAY,IAAI,KAAK,EAAE,YAAY,EACvC,KAAK,KAAKT,CAAO,EACVS,GAHU,IAInB,CAMA,OAAOJ,EAAmC,CACxC,GAAI,CAACA,GAAS,CAACA,EAAM,WAAWV,CAAY,EAAG,OAAO,KACtD,IAAMe,EAAOH,EAAUF,CAAK,EACtBL,EAAU,KAAK,KAAK,EACpBS,EAAMT,EAAQ,KAAMW,GAAMA,EAAE,OAASD,CAAI,EAG/C,GAFI,CAACD,GACDA,EAAI,WACJA,EAAI,WAAa,KAAK,MAAMA,EAAI,SAAS,EAAI,KAAK,IAAI,EAAG,OAAO,KAEpE,IAAMG,EAAM,KAAK,IAAI,EACfC,EAAOJ,EAAI,WAAa,KAAK,MAAMA,EAAI,UAAU,EAAI,EAC3D,GAAIG,EAAMC,EAAO,IAAQ,CACvBJ,EAAI,WAAa,IAAI,KAAKG,CAAG,EAAE,YAAY,EAC3C,GAAI,CAAE,KAAK,KAAKZ,CAAO,CAAE,MAAE,CAA0B,EAEvD,OAAOS,CACT,CACF,EAOO,SAASK,GAAeR,EAAqBS,EAA2B,CAG7E,MAFI,GAAAT,EAAO,OAAO,SAASS,CAAQ,GAC/BA,EAAS,WAAW,QAAQ,GAAKT,EAAO,OAAO,SAAS,SAAS,GACjES,IAAa,kBAAoBT,EAAO,OAAO,SAAS,iBAAiB,EAE/E,CAEA,SAASH,GAAaD,EAAoB,CACxC,OACEA,IAAM,kBACNA,IAAM,mBACNA,IAAM,WACN,8BAA8B,KAAKA,CAAC,GACpCA,IAAM,WAEV,CAEO,SAASK,EAAUF,EAAuB,CAC/C,MAAO,UAAYlB,EAAW,QAAQ,EAAE,OAAOkB,CAAK,EAAE,OAAO,KAAK,CACpE,CAOO,SAASW,GAAaC,EAA8F,CACzH,IAAMC,EAAOD,EAAI,QAAQ,cACnBE,EAAa,MAAM,QAAQD,CAAI,EAAIA,EAAK,CAAC,EAAIA,EACnD,GAAIC,GAAcA,EAAW,YAAY,EAAE,WAAW,SAAS,EAC7D,OAAOA,EAAW,MAAM,CAAC,EAAE,KAAK,EAElC,GAAIF,EAAI,IACN,GAAI,CAEF,IAAMG,EADI,IAAI,IAAIH,EAAI,IAAK,kBAAkB,EAC/B,aAAa,IAAI,OAAO,EACtC,GAAIG,EAAK,OAAOA,CAClB,MAAE,CAAc,CAElB,OAAO,IACT","names":["existsSync","readFileSync","writeFileSync","appendFileSync","mkdirSync","resolve","hostname","existsSync","readFileSync","writeFileSync","copyFileSync","resolve","mutateAgentxConfig","mutator","opts","file","resolve","existsSync","cfg","readFileSync","raw","result","json","tmp","writeFileSync","e","backupPath","copyFileSync","triggerLocalReload","writeAgentxConfig","url","loadDaemonConfig","renderSetupPage","state","defaultNode","heading","customHeader","step1","stepCard","field","step2","row","step3","step4","banner","body","esc","btn","renderShell","SETUP_PAGE_CSS","SETUP_SCRIPT","wizardState","baseDir","file","resolve","existsSync","cfg","readFileSync","agents","channels","c","runWizard","payload","mentions","splitMentions","configPath","envPath","workspaceDir","state","mkdirSync","claudeMd","personality","writeFileSync","telegramTokenRef","backupPath","mutateAgentxConfig","slugify","agentBlock","telegramAccountBlock","buildFreshConfig","writeAgentxConfig","ensureEnvEntries","nextSteps","s","m","i","block","tokenRef","existing","lines","sep","appendFileSync","handleWizardGet","_req","res","defaultNode","hostname","html","renderSetupPage","handleWizardPost","req","raw","ok","result","e","createHash","randomBytes","existsSync","mkdirSync","readFileSync","writeFileSync","resolve","dirname","TOKEN_PREFIX","DEFAULT_FILE","TokenStore","baseDir","fileRel","records","input","s","isValidScope","body","token","record","hashToken","id","rec","hash","r","now","last","recordHasScope","required","extractToken","req","auth","authHeader","tok"]}