agentroam 0.2.0-preview.3 → 0.2.0-preview.4

package/runtime/.next/static/chunks/{webpack-d91bc49de770fd58.js → webpack-0c872a6ee48cbbdf.js}

@@ -1 +1 @@
-!function(){"use strict";var e,t,n,r,o,u,i,c,f,a,l,d,s={},p={};function h(e){var t=p[e];if(void 0!==t)return t.exports;var n=p[e]={exports:{}},r=!0;try{s[e](n,n.exports,h),r=!1}finally{r&&delete p[e]}return n.exports}h.m=s,e=[],h.O=function(t,n,r,o){if(n){o=o||0;for(var u=e.length;u>0&&e[u-1][2]>o;u--)e[u]=e[u-1];e[u]=[n,r,o];return}for(var i=1/0,u=0;u<e.length;u++){for(var n=e[u][0],r=e[u][1],o=e[u][2],c=!0,f=0;f<n.length;f++)i>=o&&Object.keys(h.O).every(function(e){return h.O[e](n[f])})?n.splice(f--,1):(c=!1,o<i&&(i=o));if(c){e.splice(u--,1);var a=r();void 0!==a&&(t=a)}}return t},h.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return h.d(t,{a:t}),t},n=Object.getPrototypeOf?function(e){return Object.getPrototypeOf(e)}:function(e){return e.__proto__},h.t=function(e,r){if(1&r&&(e=this(e)),8&r||"object"==typeof e&&e&&(4&r&&e.__esModule||16&r&&"function"==typeof e.then))return e;var o=Object.create(null);h.r(o);var u={};t=t||[null,n({}),n([]),n(n)];for(var i=2&r&&e;"object"==typeof i&&!~t.indexOf(i);i=n(i))Object.getOwnPropertyNames(i).forEach(function(t){u[t]=function(){return e[t]}});return u.default=function(){return e},h.d(o,u),o},h.d=function(e,t){for(var n in t)h.o(t,n)&&!h.o(e,n)&&Object.defineProperty(e,n,{enumerable:!0,get:t[n]})},h.f={},h.e=function(e){return Promise.all(Object.keys(h.f).reduce(function(t,n){return h.f[n](e,t),t},[]))},h.u=function(e){return"static/chunks/"+(658===e?"f3dd23f1":e)+"."+({118:"2a6035b13645ef2d",658:"b423f4328b6ce988",691:"a8277997da6aec2e",945:"029658916456ec41",982:"bf2e6e7fe55cd5ca"})[e]+".js"},h.miniCssF=function(e){return"static/css/ac3c182a4b5bc5f1.css"},h.g=function(){if("object"==typeof globalThis)return globalThis;try{return this||Function("return this")()}catch(e){if("object"==typeof window)return window}}(),h.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},r={},o="_N_E:",h.l=function(e,t,n,u){if(r[e]){r[e].push(t);return}if(void 0!==n)for(var i,c,f=document.getElementsByTagName("script"),a=0;a<f.length;a++){var l=f[a];if(l.getAttribute("src")==e||l.getAttribute("data-webpack")==o+n){i=l;break}}i||(c=!0,(i=document.createElement("script")).charset="utf-8",i.timeout=120,h.nc&&i.setAttribute("nonce",h.nc),i.setAttribute("data-webpack",o+n),i.src=h.tu(e)),r[e]=[t];var d=function(t,n){i.onerror=i.onload=null,clearTimeout(s);var o=r[e];if(delete r[e],i.parentNode&&i.parentNode.removeChild(i),o&&o.forEach(function(e){return e(n)}),t)return t(n)},s=setTimeout(d.bind(null,void 0,{type:"timeout",target:i}),12e4);i.onerror=d.bind(null,i.onerror),i.onload=d.bind(null,i.onload),c&&document.head.appendChild(i)},h.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},h.tt=function(){return void 0===u&&(u={createScriptURL:function(e){return e}},"undefined"!=typeof trustedTypes&&trustedTypes.createPolicy&&(u=trustedTypes.createPolicy("nextjs#bundler",u))),u},h.tu=function(e){return h.tt().createScriptURL(e)},h.p="/_next/",i=function(e,t,n,r){var o=document.createElement("link");return o.rel="stylesheet",o.type="text/css",o.onerror=o.onload=function(u){if(o.onerror=o.onload=null,"load"===u.type)n();else{var i=u&&("load"===u.type?"missing":u.type),c=u&&u.target&&u.target.href||t,f=Error("Loading CSS chunk "+e+" failed.\n("+c+")");f.code="CSS_CHUNK_LOAD_FAILED",f.type=i,f.request=c,o.parentNode.removeChild(o),r(f)}},o.href=t,document.head.appendChild(o),o},c=function(e,t){for(var n=document.getElementsByTagName("link"),r=0;r<n.length;r++){var o=n[r],u=o.getAttribute("data-href")||o.getAttribute("href");if("stylesheet"===o.rel&&(u===e||u===t))return o}for(var i=document.getElementsByTagName("style"),r=0;r<i.length;r++){var o=i[r],u=o.getAttribute("data-href");if(u===e||u===t)return o}},f={272:0},h.f.miniCss=function(e,t){f[e]?t.push(f[e]):0!==f[e]&&({118:1})[e]&&t.push(f[e]=new Promise(function(t,n){var r=h.miniCssF(e),o=h.p+r;if(c(r,o))return t();i(e,o,t,n)}).then(function(){f[e]=0},function(t){throw delete f[e],t}))},a={272:0},h.f.j=function(e,t){var n=h.o(a,e)?a[e]:void 0;if(0!==n){if(n)t.push(n[2]);else if(/^(118|272)$/.test(e))a[e]=0;else{var r=new Promise(function(t,r){n=a[e]=[t,r]});t.push(n[2]=r);var o=h.p+h.u(e),u=Error();h.l(o,function(t){if(h.o(a,e)&&(0!==(n=a[e])&&(a[e]=void 0),n)){var r=t&&("load"===t.type?"missing":t.type),o=t&&t.target&&t.target.src;u.message="Loading chunk "+e+" failed.\n("+r+": "+o+")",u.name="ChunkLoadError",u.type=r,u.request=o,n[1](u)}},"chunk-"+e,e)}}},h.O.j=function(e){return 0===a[e]},l=function(e,t){var n,r,o=t[0],u=t[1],i=t[2],c=0;if(o.some(function(e){return 0!==a[e]})){for(n in u)h.o(u,n)&&(h.m[n]=u[n]);if(i)var f=i(h)}for(e&&e(t);c<o.length;c++)r=o[c],h.o(a,r)&&a[r]&&a[r][0](),a[r]=0;return h.O(f)},(d=self.webpackChunk_N_E=self.webpackChunk_N_E||[]).forEach(l.bind(null,0)),d.push=l.bind(null,d.push.bind(d))}();
+!function(){"use strict";var e,t,n,r,o,u,i,c,f,a,l,d,s={},p={};function h(e){var t=p[e];if(void 0!==t)return t.exports;var n=p[e]={exports:{}},r=!0;try{s[e](n,n.exports,h),r=!1}finally{r&&delete p[e]}return n.exports}h.m=s,e=[],h.O=function(t,n,r,o){if(n){o=o||0;for(var u=e.length;u>0&&e[u-1][2]>o;u--)e[u]=e[u-1];e[u]=[n,r,o];return}for(var i=1/0,u=0;u<e.length;u++){for(var n=e[u][0],r=e[u][1],o=e[u][2],c=!0,f=0;f<n.length;f++)i>=o&&Object.keys(h.O).every(function(e){return h.O[e](n[f])})?n.splice(f--,1):(c=!1,o<i&&(i=o));if(c){e.splice(u--,1);var a=r();void 0!==a&&(t=a)}}return t},h.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return h.d(t,{a:t}),t},n=Object.getPrototypeOf?function(e){return Object.getPrototypeOf(e)}:function(e){return e.__proto__},h.t=function(e,r){if(1&r&&(e=this(e)),8&r||"object"==typeof e&&e&&(4&r&&e.__esModule||16&r&&"function"==typeof e.then))return e;var o=Object.create(null);h.r(o);var u={};t=t||[null,n({}),n([]),n(n)];for(var i=2&r&&e;"object"==typeof i&&!~t.indexOf(i);i=n(i))Object.getOwnPropertyNames(i).forEach(function(t){u[t]=function(){return e[t]}});return u.default=function(){return e},h.d(o,u),o},h.d=function(e,t){for(var n in t)h.o(t,n)&&!h.o(e,n)&&Object.defineProperty(e,n,{enumerable:!0,get:t[n]})},h.f={},h.e=function(e){return Promise.all(Object.keys(h.f).reduce(function(t,n){return h.f[n](e,t),t},[]))},h.u=function(e){return"static/chunks/"+(658===e?"f3dd23f1":e)+"."+({118:"2a6035b13645ef2d",658:"b423f4328b6ce988",691:"a8277997da6aec2e",945:"029658916456ec41",982:"9e87a5cc0e6b13cf"})[e]+".js"},h.miniCssF=function(e){return"static/css/ac3c182a4b5bc5f1.css"},h.g=function(){if("object"==typeof globalThis)return globalThis;try{return this||Function("return this")()}catch(e){if("object"==typeof window)return window}}(),h.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},r={},o="_N_E:",h.l=function(e,t,n,u){if(r[e]){r[e].push(t);return}if(void 0!==n)for(var i,c,f=document.getElementsByTagName("script"),a=0;a<f.length;a++){var l=f[a];if(l.getAttribute("src")==e||l.getAttribute("data-webpack")==o+n){i=l;break}}i||(c=!0,(i=document.createElement("script")).charset="utf-8",i.timeout=120,h.nc&&i.setAttribute("nonce",h.nc),i.setAttribute("data-webpack",o+n),i.src=h.tu(e)),r[e]=[t];var d=function(t,n){i.onerror=i.onload=null,clearTimeout(s);var o=r[e];if(delete r[e],i.parentNode&&i.parentNode.removeChild(i),o&&o.forEach(function(e){return e(n)}),t)return t(n)},s=setTimeout(d.bind(null,void 0,{type:"timeout",target:i}),12e4);i.onerror=d.bind(null,i.onerror),i.onload=d.bind(null,i.onload),c&&document.head.appendChild(i)},h.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},h.tt=function(){return void 0===u&&(u={createScriptURL:function(e){return e}},"undefined"!=typeof trustedTypes&&trustedTypes.createPolicy&&(u=trustedTypes.createPolicy("nextjs#bundler",u))),u},h.tu=function(e){return h.tt().createScriptURL(e)},h.p="/_next/",i=function(e,t,n,r){var o=document.createElement("link");return o.rel="stylesheet",o.type="text/css",o.onerror=o.onload=function(u){if(o.onerror=o.onload=null,"load"===u.type)n();else{var i=u&&("load"===u.type?"missing":u.type),c=u&&u.target&&u.target.href||t,f=Error("Loading CSS chunk "+e+" failed.\n("+c+")");f.code="CSS_CHUNK_LOAD_FAILED",f.type=i,f.request=c,o.parentNode.removeChild(o),r(f)}},o.href=t,document.head.appendChild(o),o},c=function(e,t){for(var n=document.getElementsByTagName("link"),r=0;r<n.length;r++){var o=n[r],u=o.getAttribute("data-href")||o.getAttribute("href");if("stylesheet"===o.rel&&(u===e||u===t))return o}for(var i=document.getElementsByTagName("style"),r=0;r<i.length;r++){var o=i[r],u=o.getAttribute("data-href");if(u===e||u===t)return o}},f={272:0},h.f.miniCss=function(e,t){f[e]?t.push(f[e]):0!==f[e]&&({118:1})[e]&&t.push(f[e]=new Promise(function(t,n){var r=h.miniCssF(e),o=h.p+r;if(c(r,o))return t();i(e,o,t,n)}).then(function(){f[e]=0},function(t){throw delete f[e],t}))},a={272:0},h.f.j=function(e,t){var n=h.o(a,e)?a[e]:void 0;if(0!==n){if(n)t.push(n[2]);else if(/^(118|272)$/.test(e))a[e]=0;else{var r=new Promise(function(t,r){n=a[e]=[t,r]});t.push(n[2]=r);var o=h.p+h.u(e),u=Error();h.l(o,function(t){if(h.o(a,e)&&(0!==(n=a[e])&&(a[e]=void 0),n)){var r=t&&("load"===t.type?"missing":t.type),o=t&&t.target&&t.target.src;u.message="Loading chunk "+e+" failed.\n("+r+": "+o+")",u.name="ChunkLoadError",u.type=r,u.request=o,n[1](u)}},"chunk-"+e,e)}}},h.O.j=function(e){return 0===a[e]},l=function(e,t){var n,r,o=t[0],u=t[1],i=t[2],c=0;if(o.some(function(e){return 0!==a[e]})){for(n in u)h.o(u,n)&&(h.m[n]=u[n]);if(i)var f=i(h)}for(e&&e(t);c<o.length;c++)r=o[c],h.o(a,r)&&a[r]&&a[r][0](),a[r]=0;return h.O(f)},(d=self.webpackChunk_N_E=self.webpackChunk_N_E||[]).forEach(l.bind(null,0)),d.push=l.bind(null,d.push.bind(d))}();

package/runtime/node_modules/.package-lock.json

@@ -388,9 +388,9 @@
       }
     },
     "node_modules/node-abi": {
-      "version": "3.95.0",
-      "resolved": "http://nexus.17usoft.com/repository/npm-all/node-abi/-/node-abi-3.95.0.tgz",
-      "integrity": "sha512-T9iGctuocf0qIWFFOTxPzjT5q0SILqaBYXt272tlBHvTKC5+3JnkMirLxNJNkXHtFyBjU2Jx+NL4Zipr0B/c6Q==",
+      "version": "3.96.0",
+      "resolved": "http://nexus.17usoft.com/repository/npm-all/node-abi/-/node-abi-3.96.0.tgz",
+      "integrity": "sha512-rebQ/lz7i0EkoLzUVSrKRzA69zMkwLp95kKMWoMDkkM00Suxz0D7zEQPwRml5fQum24mj7bPvmlgLAmu2JCiYg==",
       "license": "MIT",
       "dependencies": {
         "semver": "^7.3.5"

package/runtime/node_modules/@agent/core/dist/domain/context/ContextLoader.d.ts

@@ -1,5 +1,7 @@
 import type { IContextLoader, ProjectFile } from './entities.js';
 export declare class ContextLoader implements IContextLoader {
+    private readonly homeDirectory;
+    constructor(homeDirectory?: string);
     loadProjectContext(rootDir: string): Promise<ProjectFile[]>;
     loadFile(filePath: string): Promise<ProjectFile>;
     private loadRecursiveFile;

package/runtime/node_modules/@agent/core/dist/domain/context/ContextLoader.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ContextLoader.d.ts","sourceRoot":"","sources":["../../../src/domain/context/ContextLoader.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AAiBjE,qBAAa,aAAc,YAAW,cAAc;IAC5C,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAuC3D,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;YAaxC,iBAAiB;IAoCzB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;CAyB5D"}
+{"version":3,"file":"ContextLoader.d.ts","sourceRoot":"","sources":["../../../src/domain/context/ContextLoader.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,eAAe,CAAC;AA8BjE,qBAAa,aAAc,YAAW,cAAc;IACtC,OAAO,CAAC,QAAQ,CAAC,aAAa;gBAAb,aAAa,SAAY;IAEhD,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAuC3D,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;YAaxC,iBAAiB;IAoCzB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;CAsC5D"}

package/runtime/node_modules/@agent/core/dist/index.js

@@ -7507,6 +7507,7 @@ ${prompt}`);
 
 // src/domain/context/ContextLoader.ts
 import { constants } from "node:fs";
+import { homedir as homedir2 } from "node:os";
 import { open, readFile as readFile6, readdir as readdir4, realpath, stat as stat4 } from "node:fs/promises";
 import { join as join6, basename as basename2, isAbsolute, relative as relative3, resolve as resolve8, sep } from "node:path";
 var ROOT_PROJECT_FILES = [
@@ -7519,9 +7520,25 @@ var ROOT_PROJECT_FILES = [
 ];
 var CUSTOMER_AGENT_FILES = ROOT_PROJECT_FILES.map((file) => join6(".customer-agent", file));
 var INSTRUCTION_FILES = new Set(["AGENTS.md", "CLAUDE.md"]);
-var EXCLUDED_DIRECTORIES = new Set(["node_modules", ".git", "dist"]);
+var EXCLUDED_DIRECTORIES = new Set([
+  "node_modules",
+  ".git",
+  "dist",
+  "build",
+  "out",
+  "coverage",
+  ".cache",
+  ".next",
+  ".next-dev",
+  ".output",
+  ".turbo"
+]);
 
 class ContextLoader {
+  homeDirectory;
+  constructor(homeDirectory = homedir2()) {
+    this.homeDirectory = homeDirectory;
+  }
   async loadProjectContext(rootDir) {
     const files = [];
     const loadedPaths = new Set;
@@ -7593,12 +7610,20 @@ class ContextLoader {
   }
   async findClaudeMdFiles(rootDir) {
     const results = [];
+    try {
+      const [resolvedRoot, resolvedHome] = await Promise.all([
+        realpath(rootDir),
+        realpath(this.homeDirectory)
+      ]);
+      if (resolvedRoot === resolvedHome)
+        return results;
+    } catch {}
     const scan = async (dir) => {
       try {
         const entries = await readdir4(dir, { withFileTypes: true });
         entries.sort((left, right) => left.name.localeCompare(right.name));
         for (const entry of entries) {
-          if (EXCLUDED_DIRECTORIES.has(entry.name))
+          if (EXCLUDED_DIRECTORIES.has(entry.name) || basename2(dir) === ".claude" && entry.name === "worktrees")
             continue;
           const fullPath = join6(dir, entry.name);
           if (entry.isDirectory()) {
@@ -9777,7 +9802,22 @@ class SQLiteRemoteToolStore {
 // src/infrastructure/SQLiteDatabase.ts
 import Database from "better-sqlite3";
 import { join as join10 } from "node:path";
-import { mkdirSync as mkdirSync3 } from "node:fs";
+import { existsSync as existsSync3, mkdirSync as mkdirSync3, readdirSync as readdirSync3 } from "node:fs";
+import { homedir as homedir3 } from "node:os";
+function resolveNativeBinding() {
+  const kind = process.versions.electron ? `electron-${process.versions.electron}` : `node-${process.versions.modules}`;
+  try {
+    const root = process.platform === "darwin" ? join10(homedir3(), "Library", "Caches", "team-agent", "native") : join10(homedir3(), ".cache", "team-agent", "native");
+    for (const entry of readdirSync3(join10(root, kind))) {
+      if (!entry.startsWith("better-sqlite3-"))
+        continue;
+      const candidate = join10(root, kind, entry, "better_sqlite3.node");
+      if (existsSync3(candidate))
+        return candidate;
+    }
+  } catch {}
+  return;
+}
 
 class SQLiteDatabase {
   db;
@@ -9787,7 +9827,8 @@ class SQLiteDatabase {
       mkdirSync3(dataDir, { recursive: true });
     } catch {}
     const dbPath = join10(dataDir, "agent.db");
-    this.db = new Database(dbPath);
+    const binding = resolveNativeBinding();
+    this.db = new Database(dbPath, binding ? { nativeBinding: binding } : undefined);
     this.db.pragma("journal_mode = WAL");
     this.db.pragma("foreign_keys = ON");
     this.migrate();
@@ -9970,6 +10011,12 @@ class SQLiteDatabase {
         revoked_at TEXT
       );
 
+      CREATE TABLE IF NOT EXISTS anonymous_ws_nonces (
+        nonce_hash BLOB PRIMARY KEY,
+        user_id TEXT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+        expires_at INTEGER NOT NULL
+      );
+
       CREATE TABLE IF NOT EXISTS login_attempts (
         id INTEGER PRIMARY KEY AUTOINCREMENT,
         username_normalized TEXT NOT NULL,
@@ -10032,6 +10079,7 @@ class SQLiteDatabase {
       CREATE INDEX IF NOT EXISTS idx_remote_tools_project ON remote_tools(project_id);
       CREATE INDEX IF NOT EXISTS idx_remote_jobs_project ON remote_tool_jobs(project_id);
       CREATE INDEX IF NOT EXISTS idx_auth_sessions_user ON auth_sessions(user_id);
+      CREATE INDEX IF NOT EXISTS idx_anonymous_ws_nonces_expiry ON anonymous_ws_nonces(expires_at);
       CREATE INDEX IF NOT EXISTS idx_login_attempts_lookup
         ON login_attempts(username_normalized, ip, attempted_at);
       CREATE INDEX IF NOT EXISTS idx_terminal_tabs_user_order ON terminal_tabs(user_id, sort_order);
@@ -10346,13 +10394,18 @@ class SQLiteSessionStore {
       parentSessionId: row.parent_id ?? undefined,
       title: row.title,
       status: row.status,
-      messages: msgRows.map((m) => ({
-        role: m.role,
-        content: m.content,
-        toolCalls: JSON.parse(m.tool_calls),
-        toolCallId: m.tool_call_id,
-        name: m.name
-      })),
+      messages: msgRows.map((m) => {
+        const toolCalls = JSON.parse(m.tool_calls);
+        const toolCallId = m.tool_call_id ?? undefined;
+        const name = m.name ?? undefined;
+        return {
+          role: m.role,
+          content: m.content,
+          ...toolCalls?.length ? { toolCalls } : {},
+          ...toolCallId !== undefined ? { toolCallId } : {},
+          ...name !== undefined ? { name } : {}
+        };
+      }),
       events: evtRows.map((e) => JSON.parse(e.data)),
       created: row.created,
       updated: row.updated,
@@ -10885,6 +10938,54 @@ class SQLiteAuthStore {
     return { id: row.id, userId: row.user_id, tokenHash: row.token_hash, csrfHash: row.csrf_hash, wsNonceHash: row.ws_nonce_hash, wsNonceExpiresAt: row.ws_nonce_expires_at, deviceId: row.device_id, deviceName: row.device_name ?? "", userAgent: row.user_agent ?? "", createdAt: row.created_at, lastSeenAt: row.last_seen_at, expiresAt: row.expires_at, revokedAt: row.revoked_at };
   }
 }
+// src/infrastructure/SQLiteAnonymousWebStore.ts
+import { createHash as createHash2, randomBytes as randomBytes3 } from "node:crypto";
+var LOCAL_USER_ID = "local-web";
+var LOCAL_USERNAME = "local";
+function hashNonce(nonce) {
+  return createHash2("sha256").update(nonce).digest();
+}
+
+class SQLiteAnonymousWebStore {
+  db;
+  constructor(baseDir) {
+    this.db = getDatabase(baseDir).db;
+  }
+  getOrCreatePrincipal() {
+    const existing = this.findPrincipal();
+    if (existing)
+      return { userId: existing.id, username: LOCAL_USERNAME };
+    const now2 = new Date().toISOString();
+    this.db.prepare(`
+      INSERT OR IGNORE INTO users (
+        id, username_normalized, username_display, password_hash, password_salt,
+        password_version, created_at, password_changed_at
+      ) VALUES (?, ?, ?, ?, ?, ?, ?, ?)
+    `).run(LOCAL_USER_ID, LOCAL_USERNAME, LOCAL_USERNAME, randomBytes3(32), randomBytes3(16), 1, now2, now2);
+    const created = this.findPrincipal();
+    if (!created)
+      throw new Error("failed to initialize anonymous web principal");
+    return { userId: created.id, username: LOCAL_USERNAME };
+  }
+  issueWsNonce(nonce, userId, expiresAt, now2 = Date.now()) {
+    const nonceHash = hashNonce(nonce);
+    this.db.transaction(() => {
+      this.db.prepare("DELETE FROM anonymous_ws_nonces WHERE expires_at <= ?").run(now2);
+      this.db.prepare("INSERT INTO anonymous_ws_nonces (nonce_hash, user_id, expires_at) VALUES (?, ?, ?)").run(nonceHash, userId, expiresAt);
+    })();
+  }
+  consumeWsNonce(nonce, now2 = Date.now()) {
+    const row = this.db.prepare(`
+      DELETE FROM anonymous_ws_nonces
+      WHERE nonce_hash = ? AND expires_at > ?
+      RETURNING user_id
+    `).get(hashNonce(nonce), now2);
+    return row?.user_id ?? null;
+  }
+  findPrincipal() {
+    return this.db.prepare("SELECT id, username_display FROM users ORDER BY created_at, id LIMIT 1").get();
+  }
+}
 // src/infrastructure/SQLiteWebConsoleStore.ts
 class SQLiteWebConsoleStore {
   db;
@@ -10999,6 +11100,7 @@ export {
   SQLiteLSPServerStore,
   SQLiteDatabase,
   SQLiteAuthStore,
+  SQLiteAnonymousWebStore,
   SQLiteAgentStore,
   RemoteProjectActionTool,
   ReadFileTool,
@@ -11037,4 +11139,4 @@ export {
   AgentBuilder
 };
 
-//# debugId=05A3BC3FF39651A264756E2164756E21
+//# debugId=C6BE36C988D639E764756E2164756E21