aims-workstation 0.1.13 → 0.1.15

package/package.json

@@ -13,7 +13,7 @@
     "@earendil-works/pi-ai": "^1.2.0"
   },
   "packageManager": "pnpm@11.21.0+sha512.521705bce689924eac72f5a3587122f362689ef6571e55ba80076fd637c11132ecffada26fad4ea79c485bfddbfd3d5a2a5b05805a77e893de71ec8a6cca3bb1",
-  "version": "0.1.13",
+  "version": "0.1.15",
   "description": "AIMS 工作站：本地智能体工作站——ARM 助手本地化（下载/离线/升级）、工作台对话式定制、多工作区隔离、分级自主与审计",
   "bin": {
     "aims-workstation": "bin/aims-workstation.js"

package/server.js

@@ -272,7 +272,21 @@ async function armListAgents(keyword = '') {
     out.push(...(d.agents || []));
     if (!out.length || out.length >= +(d.total || 0)) break;
   }
-  return out.map(a => ({ agent_id: a.id, name: a.name, version: vVer(a.version), skills: a.skillsCount || 0, knowledges: a.knowledgesCount || 0, description: String(a.description || '').slice(0, 120), status: a.status || 'active', created_by: a.creatorName || a.createdBy || '' }));
+  return out.map(a => ({ agent_id: a.id, name: a.name, version: vVer(a.version), skills: a.skillsCount || 0, knowledges: a.knowledgesCount || 0, description: String(a.description || '').slice(0, 120), status: a.status || 'active', created_by_id: a.createdBy || '', created_by: a.creatorName || a.createdBy || '' }));
+}
+
+// PAT 身份（带缓存）：身份只随 (ARM 源, 令牌) 变化——key 命中直接复用，避免目录高频刷新
+// （搜索防抖每 400ms 一次 /api/agents）时每次都打 /auth/me。失败不缓存：未配置令牌/不可达时
+// 返回 null，恢复后下次自动重试。设置页改源/换令牌 → key 变化 → 自动重新获取。
+const armMeCache = { key: '', me: null };
+async function armMe() {
+  const key = `${armApiBase()}|${armApiToken()}`;
+  if (armMeCache.key === key && armMeCache.me) return armMeCache.me;
+  try {
+    const u = await armRest('/api/v1/auth/me');
+    if (u && u.id) { armMeCache.key = key; armMeCache.me = { id: u.id, name: u.name || '', role: u.role || 'USER' }; return armMeCache.me; }
+  } catch { }
+  return null;
 }
 
 // 知识检索（全局经验库）：REST 混合检索（RAG 语义 ⊕ 关键词）；不可达由调用方降级（本地知识关键词命中）
@@ -382,6 +396,27 @@ async function downloadAgent(agentId) {
   return manifest;
 }
 
+// 本地档案写入（离线创建 / 未发布档案编辑）：与 downloadAgent 同构的物化结构，source 标记 local。
+// 发布到 ARM（同 id，见 /publish）后即转正为远端档案，本地结构不变——身份全程稳定。
+const bumpPatch = (v) => { const p = String(v || 'v1.0.0').replace(/^v/, '').split('.').map(n => +n || 0); p[2] = (p[2] || 0) + 1; return `v${p[0] || 1}.${p[1] || 0}.${p[2]}`; };
+function writeLocalAgent(agentId, { name, description, prompt }, { bump = false } = {}) {
+  const cur = bump ? (localManifest(agentId) || {}) : {};
+  const version = bump ? bumpPatch(cur.version) : 'v1.0.0';
+  const verDir = path.join(ARM_AGENTS_DIR, agentId, 'versions', version);
+  fs.mkdirSync(path.join(verDir, 'knowledges'), { recursive: true });
+  const manifest = {
+    agent_id: agentId, name, version, description: String(description || '').slice(0, 512),
+    downloaded_at: new Date().toISOString(), source: 'local',
+    prompt: String(prompt || ''),
+    skills: cur.skills || [], knowledges: cur.knowledges || [], ui_bindings: cur.ui_bindings || [], // 未发布档案无 ARM 绑定；编辑时保留既有
+  };
+  fs.writeFileSync(path.join(verDir, 'prompt.md'), manifest.prompt);
+  fs.writeFileSync(path.join(verDir, 'manifest.json'), JSON.stringify(manifest, null, 2));
+  commitDownload(manifest);
+  audit({ actor: 'user', agentId, action: bump ? 'update-local-agent' : 'create-local-agent', version });
+  return manifest;
+}
+
 // 同步：比对远端目录与本地库，产出 new/update/delisted 事件；顺带冲账离线经验 outbox
 async function armSync() {
   const remote = await armListAgents();
@@ -1664,6 +1699,8 @@ const server = http.createServer(async (req, res) => {
     // ── 静态前端（web/dist 生产构建）──
     if (req.method === 'GET' && !pathname.startsWith('/api')) {
       let p = path.join(ROOT, 'web/dist', pathname === '/' ? 'index.html' : pathname);
+      // 目录路径解析为其 index.html（否则 readFileSync 读目录返回空响应体）
+      if (fs.existsSync(p) && fs.statSync(p).isDirectory()) p = path.join(p, 'index.html');
       if (!p.startsWith(path.join(ROOT, 'web/dist')) || !fs.existsSync(p)) p = path.join(ROOT, 'web/dist/index.html');
       if (fs.existsSync(p)) {
         const mime = { '.html': 'text/html; charset=utf-8', '.js': 'text/javascript', '.css': 'text/css', '.svg': 'image/svg+xml', '.png': 'image/png', '.ico': 'image/x-icon' }[path.extname(p)] || 'application/octet-stream';
@@ -1825,6 +1862,8 @@ const server = http.createServer(async (req, res) => {
           installed_version: e.installed_version, remote_version: e.remote_version || null,
           update_available: !!(e.remote_version && cmpVersion(e.remote_version, e.installed_version) > 0),
           delisted: !!e.delisted, downloaded_at: e.downloaded_at || null,
+          created_by_id: null, created_by: null, // 属主身份以远端目录为准（离线/已下架不可编辑，无需属主）
+          local_only: !!e.local_only, // 本地未发布档案（离线创建）：大厅显示「未发布」徽章 + 发布入口
         });
       }
       if (online) { // 静默刷新远端版本与下架标记（显式事件统计走 /api/arm/sync）——仅在完整拉取时；
@@ -1837,6 +1876,7 @@ const server = http.createServer(async (req, res) => {
             description: c.description || cur.description, remote_version: c.version,
             deployed: !!loadDeployment(c.agent_id),
             update_available: cur.installed ? cmpVersion(c.version, cur.installed_version) > 0 : false,
+            created_by_id: c.created_by_id || null, created_by: c.created_by || null,
           });
         }
         if (!kw) {
@@ -1848,7 +1888,10 @@ const server = http.createServer(async (req, res) => {
           saveRegistry(reg);
         }
       }
-      return json(res, 200, { online, auth_error: authError, last_sync_at: reg.last_sync_at || null, agents: [...byId.values()] });
+      // PAT 身份（编辑/删除门控依据：me.id vs 卡片 created_by_id，或 ADMIN）：armMe 有缓存——
+      // 身份只随 (ARM 源, 令牌) 变化，搜索防抖高频刷新目录时不重复打 /auth/me；失败降级 null 不阻断目录
+      const me = online ? await armMe() : null;
+      return json(res, 200, { online, auth_error: authError, me, last_sync_at: reg.last_sync_at || null, agents: [...byId.values()] });
     }
     // ── 新建助手：本地起草（AI 生成 prompt）→ ARM JSON 创建（创建即发布）→ 可选知识绑定（幂等）→ 下载物化 ──
     if (req.method === 'POST' && pathname === '/api/agents/draft-prompt') {
@@ -1887,24 +1930,36 @@ const server = http.createServer(async (req, res) => {
       const { name, description, prompt, knowledge_ids } = await body(req);
       const nm = String(name || '').trim(), pr = String(prompt || '').trim();
       if (!nm || !pr) return json(res, 400, { error: '名称与 System Prompt 必填' });
+      // 身份本地生成并随创建上行（新版 ARM 保持同 id；旧版忽略后以其返回 id 为准，行为不变）
+      const localId = crypto.randomUUID();
+      let newId, bound = 0, local = false;
       try {
-        const created = await armRest('/api/v1/agents', { method: 'POST', body: JSON.stringify({ name: nm, description: String(description || '').trim().slice(0, 512), prompt: pr, status: 'active' }) });
-        const newId = created?.id || created?.agent?.id;
+        const created = await armRest('/api/v1/agents', { method: 'POST', body: JSON.stringify({ id: localId, name: nm, description: String(description || '').trim().slice(0, 512), prompt: pr, status: 'active' }) });
+        newId = created?.id || created?.agent?.id;
         if (!newId) throw new Error('ARM 未返回新助手 id');
-        let bound = 0;
         for (const kid of (Array.isArray(knowledge_ids) ? knowledge_ids : [])) { // 绑定幂等（重复绑定返回已有版本）
           try { await armRest(`/api/v1/agents/${newId}/knowledges`, { method: 'POST', body: JSON.stringify({ knowledgeId: kid, kind: 'experience' }) }); bound++; }
           catch { /* 单条绑定失败不阻断创建 */ }
         }
-        const manifest = await downloadAgent(newId); // 创建即物化本地（沿用下载链路）
-        const reg = loadRegistry(); const entry = reg.agents.find((x) => x.agent_id === newId); if (entry) entry.created_via_workstation = true; saveRegistry(reg); // 大厅据此显示编辑/删除入口
-        audit({ actor: 'user', action: 'create-agent', agentId: newId, name: nm, knowledges: bound });
-        return json(res, 200, { agent_id: newId, manifest, knowledges_bound: bound });
-      } catch (e) { return json(res, 502, { error: `创建失败: ${e.message}` }); }
-    }
-    // 编辑档案（工作站创建的助手）：ARM PUT 后重新物化，本地 prompt 同步更新
+      } catch (e) {
+        // 离线降级：仅网络不可达（ARM 请求失败/超时）时本地创建（07 离线理念：出生不依赖 ARM）；
+        // 业务错误（如名称已存在）照常上抛——那种情况下静默转本地只会掩盖问题。
+        if (!/^ARM 请求失败/.test(String(e.message))) return json(res, 502, { error: `创建失败: ${e.message}` });
+        newId = localId; local = true;
+      }
+      const manifest = local
+        ? writeLocalAgent(newId, { name: nm, description: String(description || '').trim(), prompt: pr })
+        : await downloadAgent(newId); // 创建即物化本地（沿用下载链路）
+      const reg = loadRegistry(); const entry = reg.agents.find((x) => x.agent_id === newId);
+      if (entry) { entry.created_via_workstation = true; if (local) entry.local_only = true; } saveRegistry(reg);
+      audit({ actor: 'user', action: local ? 'create-agent-local' : 'create-agent', agentId: newId, name: nm, knowledges: bound });
+      return json(res, 200, { agent_id: newId, manifest, knowledges_bound: bound, local });
+    }
+    // 编辑档案（工作站创建的助手）：ARM PUT 后重新物化，本地 prompt 同步更新；未发布档案仅写本地（版本前进）
     if (req.method === 'GET' && pathname.match(/^\/api\/agents\/[0-9a-f-]{36}\/profile$/)) {
       const id = pathname.split('/')[3];
+      const le = loadRegistry().agents.find((x) => x.agent_id === id);
+      if (le && le.local_only) { const m = localManifest(id) || {}; return json(res, 200, { name: m.name || le.name, description: String(m.description || ''), prompt: m.prompt || '' }); }
       try {
         const d = await armRest(`/api/v1/agents/${id}`);
         return json(res, 200, { name: d.name, description: String(d.description || ''), prompt: d.prompt || '' });
@@ -1918,6 +1973,12 @@ const server = http.createServer(async (req, res) => {
       if (description !== undefined) patch.description = String(description || '').trim().slice(0, 512);
       if (String(prompt || '').trim()) patch.prompt = String(prompt).trim();
       if (!Object.keys(patch).length) return json(res, 400, { error: '没有可更新字段' });
+      const le = loadRegistry().agents.find((x) => x.agent_id === id);
+      if (le && le.local_only) { // 未发布档案：仅写本地（版本前进可回滚），发布后编辑将同步 ARM
+        const cur = localManifest(id) || {};
+        const manifest = writeLocalAgent(id, { name: patch.name || cur.name, description: patch.description ?? cur.description, prompt: patch.prompt || cur.prompt }, { bump: true });
+        return json(res, 200, { ok: true, manifest, local: true });
+      }
       try {
         await armRest(`/api/v1/agents/${id}`, { method: 'PUT', body: JSON.stringify(patch) });
         let manifest = null;
@@ -1926,18 +1987,114 @@ const server = http.createServer(async (req, res) => {
         return json(res, 200, { ok: true, manifest });
       } catch (e) { return json(res, 502, { error: `更新失败: ${e.message}` }); }
     }
-    // 从 ARM 删除（危险操作，前端二次确认）：可选同时卸载本地档案
+    // ── 绑定管理（编辑档案对话框）：skill/知识绑定增删代理 ARM，变更后重新物化本地（版本前进可回滚）──
+    if (req.method === 'GET' && pathname === '/api/agents/skills') { // 绑定选择器的技能检索（对应知识检索 /api/agents/knowledges）
+      const kwd = url.searchParams.get('keyword') || '';
+      try {
+        const d = await armRest(`/api/v1/skills?keyword=${encodeURIComponent(kwd)}&page=1&pageSize=20`);
+        return json(res, 200, { items: (d.skills || []).map((s) => ({ id: s.id, name: s.name, description: String(s.description || '').slice(0, 80) })) });
+      } catch (e) { return json(res, 200, { items: [], error: String(e.message).slice(0, 100) }); }
+    }
+    let mBind = pathname.match(/^\/api\/agents\/([0-9a-f-]{36})\/bindings$/);
+    if (mBind && req.method === 'GET') {
+      const le = loadRegistry().agents.find((x) => x.agent_id === mBind[1]);
+      if (le && le.local_only) return json(res, 200, { skills: [], knowledges: [], local_only: true }); // 未发布档案无 ARM 绑定
+      try {
+        const d = await armRest(`/api/v1/agents/${mBind[1]}`);
+        return json(res, 200, {
+          skills: (d.skills || []).map((b) => ({ binding_id: b.id, ref_id: b.skillId, name: b.skill?.name || b.skillId, description: String(b.skill?.description || '').slice(0, 80) })),
+          knowledges: (d.knowledges || []).map((b) => ({ binding_id: b.id, ref_id: b.knowledgeId, name: b.knowledge?.name || b.knowledgeId, description: String(b.knowledge?.description || '').slice(0, 80), kind: b.kind })),
+        });
+      } catch (e) { return json(res, 502, { error: `绑定读取失败: ${e.message}` }); }
+    }
+    if (mBind && req.method === 'POST') {
+      const { type, ref_id, kind } = await body(req);
+      if (!['skill', 'knowledge'].includes(type) || !ref_id) return json(res, 400, { error: 'type 须为 skill|knowledge，且提供 ref_id' });
+      const sub = type === 'skill' ? 'skills' : 'knowledges';
+      const payload = type === 'skill' ? { skillId: ref_id } : { knowledgeId: ref_id, kind: kind === 'experience' ? 'experience' : 'essential' };
+      try {
+        const r = await armRest(`/api/v1/agents/${mBind[1]}/${sub}`, { method: 'POST', body: JSON.stringify(payload) });
+        let manifest = null;
+        try { manifest = await downloadAgent(mBind[1]); } catch { /* 物化失败不回滚 ARM 变更，提示用户重新下载 */ }
+        audit({ actor: 'user', action: 'bind-agent-asset', agentId: mBind[1], type, ref_id, version: r?.version });
+        return json(res, 200, { ok: true, version: r?.version || null, manifest });
+      } catch (e) { return json(res, 502, { error: `绑定失败: ${e.message}` }); }
+    }
+    if (mBind && req.method === 'DELETE') {
+      const { type, binding_id } = await body(req);
+      if (!['skill', 'knowledge'].includes(type) || !binding_id) return json(res, 400, { error: 'type 须为 skill|knowledge，且提供 binding_id' });
+      try {
+        await armRest(`/api/v1/agents/${mBind[1]}/${type === 'skill' ? 'skills' : 'knowledges'}?bindingId=${encodeURIComponent(binding_id)}`, { method: 'DELETE' });
+        let manifest = null;
+        try { manifest = await downloadAgent(mBind[1]); } catch { }
+        audit({ actor: 'user', action: 'unbind-agent-asset', agentId: mBind[1], type, binding_id });
+        return json(res, 200, { ok: true, manifest });
+      } catch (e) { return json(res, 502, { error: `解绑失败: ${e.message}` }); }
+    }
+    // 克隆助手（fork）：复制档案 + 全部绑定，创建归当前 PAT 用户的新助手——非属主想改 / 想基于
+    // 已有快速调教的正路。无需对源助手的编辑权限（源详情是公开读）；新助手属主即当前用户，
+    // 后续绑定守卫天然放行。绑定逐条 best-effort（单条失败计数不阻断），UI 资产跟随最新版本。
+    if (req.method === 'POST' && pathname.match(/^\/api\/agents\/([0-9a-f-]{36})\/clone$/)) {
+      const id = pathname.match(/^\/api\/agents\/([0-9a-f-]{36})\/clone$/)[1];
+      const { name, description } = await body(req);
+      try {
+        const src = await armRest(`/api/v1/agents/${id}`);
+        const nm = String(name || `${src.name}-副本`).trim();
+        const created = await armRest('/api/v1/agents', { method: 'POST', body: JSON.stringify({ name: nm, description: String(description ?? src.description ?? '').slice(0, 512), prompt: src.prompt || '', status: 'active' }) });
+        const newId = created?.id || created?.agent?.id;
+        if (!newId) throw new Error('ARM 未返回新助手 id');
+        const copied = { skills: 0, knowledges: 0, ui_assets: 0, failed: 0 };
+        for (const b of (src.skills || [])) { try { await armRest(`/api/v1/agents/${newId}/skills`, { method: 'POST', body: JSON.stringify({ skillId: b.skillId }) }); copied.skills++; } catch { copied.failed++; } }
+        for (const b of (src.knowledges || [])) { try { await armRest(`/api/v1/agents/${newId}/knowledges`, { method: 'POST', body: JSON.stringify({ knowledgeId: b.knowledgeId, kind: b.kind || 'experience' }) }); copied.knowledges++; } catch { copied.failed++; } }
+        for (const b of (src.uiBindings || [])) { try { await armRest(`/api/v1/agents/${newId}/ui-assets`, { method: 'POST', body: JSON.stringify({ name: b.asset?.name || b.uiAssetId }) }); copied.ui_assets++; } catch { copied.failed++; } }
+        const manifest = await downloadAgent(newId); // 创建即物化（沿用新建链路）
+        const reg = loadRegistry(); const entry = reg.agents.find((x) => x.agent_id === newId); if (entry) entry.created_via_workstation = true; saveRegistry(reg);
+        audit({ actor: 'user', action: 'clone-agent', agentId: newId, source: id, name: nm, ...copied });
+        return json(res, 200, { agent_id: newId, name: nm, copied, manifest: { agent_id: manifest.agent_id, name: manifest.name, version: manifest.version } });
+      } catch (e) { return json(res, 502, { error: `克隆失败: ${e.message}` }); }
+    }
+    // 从 ARM 删除（危险操作，前端二次确认）：可选同时卸载本地档案；未发布档案只存在于本地，直接卸载
     if (req.method === 'POST' && pathname.match(/^\/api\/agents\/[0-9a-f-]{36}\/arm-delete$/)) {
       const id = pathname.split('/')[3];
       const { also_uninstall, purge_workspaces } = await body(req);
       try {
-        await armRest(`/api/v1/agents/${id}`, { method: 'DELETE' });
+        const le = loadRegistry().agents.find((x) => x.agent_id === id);
+        if (!(le && le.local_only)) await armRest(`/api/v1/agents/${id}`, { method: 'DELETE' });
         let uninstalled = false;
-        if (also_uninstall && loadRegistry().agents.some((a) => a.agent_id === id)) uninstalled = uninstallLocalAgent(id, !!purge_workspaces);
-        audit({ actor: 'user', action: 'arm-delete-agent', agentId: id, also_uninstalled: uninstalled });
+        if (also_uninstall && le) uninstalled = uninstallLocalAgent(id, !!purge_workspaces);
+        audit({ actor: 'user', action: le && le.local_only ? 'delete-local-agent' : 'arm-delete-agent', agentId: id, also_uninstalled: uninstalled });
         return json(res, 200, { ok: true, uninstalled });
       } catch (e) { return json(res, 502, { error: `ARM 删除失败: ${e.message}` }); }
     }
+    // 发布到 ARM（本地未发布档案转正）：同 id 上行（新版 ARM），身份不变、本地 deployment/工作台/数据零迁移。
+    // 幂等：同 id 已在 ARM（上次发布部分成功）→ 校验同名即续走转正；旧版 ARM 忽略 id 返回新 id → 明确报错提示升级。
+    if (req.method === 'POST' && pathname.match(/^\/api\/agents\/[0-9a-f-]{36}\/publish$/)) {
+      const id = pathname.match(/^\/api\/agents\/([0-9a-f-]{36})\/publish$/)[1];
+      const reg = loadRegistry();
+      const le = reg.agents.find((x) => x.agent_id === id);
+      if (!le || !le.local_only) return json(res, 400, { error: '该助手不是本地未发布档案（可能已发布）' });
+      const m = localManifest(id);
+      if (!m) return json(res, 400, { error: '本地档案缺失，请先重新创建' });
+      try {
+        let created;
+        try {
+          created = await armRest('/api/v1/agents', { method: 'POST', body: JSON.stringify({ id, name: m.name, description: String(m.description || '').slice(0, 512), prompt: m.prompt || '', status: 'active' }) });
+        } catch (e) {
+          if (/该 id 已存在/.test(String(e.message))) { // 幂等续走：确认同 id 同名即视为已创建
+            const d = await armRest(`/api/v1/agents/${id}`);
+            if (!d || d.name !== m.name) throw e;
+            created = d;
+          } else throw e;
+        }
+        const finalId = created?.id || created?.agent?.id;
+        if (finalId && finalId !== id) return json(res, 502, { error: '当前 ARM 版本不支持保持助手身份（忽略客户端 id）——请升级 ARM 后再发布' });
+        const manifest = await downloadAgent(id); // 重新物化：source 转正、版本对齐 ARM
+        const reg2 = loadRegistry(); const en = reg2.agents.find((x) => x.agent_id === id);
+        if (en) { en.local_only = false; en.remote_version = manifest.version; } saveRegistry(reg2);
+        audit({ actor: 'user', action: 'publish-agent', agentId: id, name: m.name, version: manifest.version });
+        return json(res, 200, { ok: true, manifest });
+      } catch (e) { return json(res, 502, { error: `发布失败: ${e.message}` }); }
+    }
     // ── 本地助手库：下载 / 升级 / 版本历史 / 回滚 / 卸载 ──
     let mAgt = pathname.match(/^\/api\/agents\/([0-9a-f-]{36})\/(download|upgrade|versions|rollback)$/);
     if (mAgt && req.method === 'POST' && (mAgt[2] === 'download' || mAgt[2] === 'upgrade')) {
@@ -2379,14 +2536,16 @@ const server = http.createServer(async (req, res) => {
           dsl.arm_ref = armRef;
           fs.writeFileSync(target, JSON.stringify(dsl, null, 2));
         }
-        let bound = null;
-        if (bind_agent) { // 发布后顺手绑定到当前助手（三资产组合：员工自带工位）
-          const r = await armRest(`/api/v1/agents/${bind_agent}/ui-assets`, { method: 'POST', body: JSON.stringify({ name: bundle.name }) });
-          bound = r && r.version;
+        let bound = null, bind_error = null;
+        if (bind_agent) { // 发布后顺手绑定到当前助手（三资产组合：员工自带工位）；失败不回滚发布（如非属主 403：仅助手创建者或管理员可绑定）
+          try {
+            const r = await armRest(`/api/v1/agents/${bind_agent}/ui-assets`, { method: 'POST', body: JSON.stringify({ name: bundle.name }) });
+            bound = r && r.version;
+          } catch (e) { bind_error = String(e.message).slice(0, 200); }
         }
         metric({ kind: 'asset_share', type, name: bundle.name, version: uploaded.version });
-        audit({ actor: 'asset-share', target: 'ARM', type, name: bundle.name, version: uploaded.version, bound });
-        return json(res, 200, { name: bundle.name, version: uploaded.version, requires: bundle.manifest.requires, bound });
+        audit({ actor: 'asset-share', target: 'ARM', type, name: bundle.name, version: uploaded.version, bound, bind_error });
+        return json(res, 200, { name: bundle.name, version: uploaded.version, requires: bundle.manifest.requires, bound, bind_error });
       } catch (e) { return json(res, 400, { error: String(e.message).slice(0, 400) }); }
     }
     if (req.method === 'GET' && pathname === '/api/assets/arm-library') {