bazilion 0.13.0 → 0.14.0

package/dist/web/server/assets/{router-D-6TzLRZ.js → router-pjH2t8Rl.js}

@@ -1,37 +1,37 @@
 import { a as getCookie, n as createServerFn } from "../server.js";
 import { t as DAEMON_BASE_URL } from "./daemon-client-CI5NHwNC.js";
 import { t as webOriginConfig } from "./public-origin-xV0lm0Ty.js";
-import { i as BaziuLogo, n as ThemeToggle, r as PawIcon, t as Route$4 } from "./login-CrFVVUaE.js";
+import { i as BaziuLogo, n as ThemeToggle, r as PawIcon, t as Route$5 } from "./login-Be8eP4Jp.js";
 import { t as createSsrRpc } from "./createSsrRpc-6LHNEsSK.js";
-import { t as Route$5 } from "./routes-D933ngZS.js";
-import { t as Route$6 } from "./teams-DqC4wZxu.js";
-import { t as Route$7 } from "./skills-D5DQL8bM.js";
-import { t as Route$8 } from "./config-wYtIhkRm.js";
-import { t as Route$9 } from "./attention-Bw_wiiqI.js";
-import { t as Route$10 } from "./approvals-BkUGmYU9.js";
-import { t as Route$11 } from "./agents-BpSeOA30.js";
-import { t as Route$12 } from "./tokens-DO5BzNOn.js";
-import { t as Route$13 } from "./services-OB4LAr2A.js";
-import { t as Route$14 } from "./mcp-BQtp2T87.js";
-import { t as Route$15 } from "./teams-Dz6ZEMRo.js";
-import { t as Route$16 } from "./agents-DY630p6x.js";
-import { t as Route$17 } from "./_id-xTD_6ApX.js";
-import { t as Route$18 } from "./_id-CvYqVJPU.js";
-import { t as Route$19 } from "./policy-D7kj3Cy7.js";
-import { t as Route$20 } from "./memory-Iq2M0-Yc.js";
-import { t as Route$21 } from "./members-DXu2oAS_.js";
-import { t as Route$22 } from "./context-BkDDwbby.js";
-import { t as Route$23 } from "./activity-BazZNfvf.js";
-import { t as Route$24 } from "./telegram-J4T0XhwQ.js";
-import { t as Route$25 } from "./triggers-BdBx-HwR.js";
-import { t as Route$26 } from "./learning-DpyLNVe8.js";
-import { t as Route$27 } from "./inbox-0iiSg-Y1.js";
-import { t as Route$28 } from "./_id-DkrNqqTw.js";
-import { t as Route$29 } from "./_id-BENqNBfK.js";
+import { t as Route$6 } from "./routes-DAU2g7Uz.js";
+import { t as Route$7 } from "./teams-DFnuc660.js";
+import { t as Route$8 } from "./skills-Dw3cI3si.js";
+import { t as Route$9 } from "./config-BlMkHStx.js";
+import { t as Route$10 } from "./attention-B35JvhOL.js";
+import { t as Route$11 } from "./approvals-7JOoBchn.js";
+import { t as Route$12 } from "./agents-BDFGrU3o.js";
+import { t as Route$13 } from "./tokens-_2hptHP6.js";
+import { t as Route$14 } from "./services-DgoU1udp.js";
+import { t as Route$15 } from "./mcp-B0goWO8Q.js";
+import { t as Route$16 } from "./teams-BJuoNOTB.js";
+import { t as Route$17 } from "./agents-CJk4pxKu.js";
+import { t as Route$18 } from "./_id-BAA9KJBU.js";
+import { t as Route$19 } from "./_id-sNu5aXZt.js";
+import { t as Route$20 } from "./policy-BddK4xom.js";
+import { t as Route$21 } from "./memory-DTFEmfF3.js";
+import { t as Route$22 } from "./members-DiYtr-zm.js";
+import { t as Route$23 } from "./activity-LjpblbDL.js";
+import { t as Route$24 } from "./telegram-DbOFpTFm.js";
+import { t as Route$25 } from "./triggers-BvjYNmmY.js";
+import { t as Route$26 } from "./learning-BaKM6qaw.js";
+import { t as Route$27 } from "./inbox-cu3jLzNP.js";
+import { t as Route$28 } from "./_id-BwvCtzlD.js";
+import { t as Route$29 } from "./_id-BYKpT2Tu.js";
 import { useEffect, useState } from "react";
 import { HeadContent, Link, Outlet, Scripts, createFileRoute, createRootRoute, createRouter, lazyRouteComponent, redirect, useRouterState } from "@tanstack/react-router";
-import { jsx, jsxs } from "react/jsx-runtime";
-import { BellRing, Bot, LayoutTemplate, LogOut, Settings2, ShieldCheck, Sparkles, UsersRound } from "lucide-react";
+import { Fragment, jsx, jsxs } from "react/jsx-runtime";
+import { BellRing, Bot, ChevronDown, LayoutTemplate, LogOut, MessageCircle, Settings2, ShieldCheck, Sparkles, UsersRound } from "lucide-react";
+import { DropdownMenu } from "radix-ui";
 //#region src/components/Footer.tsx
 function Footer() {
 	return /* @__PURE__ */ jsxs("footer", {
@@ -54,112 +54,236 @@ function Footer() {
 }
 //#endregion
 //#region src/components/TopNav.tsx
-var NAV_LINKS = [
+var PRIMARY_LINKS = [
 	{
-		to: "/templates",
-		label: "templates",
-		icon: LayoutTemplate
+		to: "/",
+		label: "Chat",
+		icon: MessageCircle
 	},
 	{
 		to: "/agents",
-		label: "agents",
+		label: "Agents",
 		icon: Bot
 	},
 	{
 		to: "/teams",
-		label: "teams",
+		label: "Teams",
 		icon: UsersRound
-	},
-	{
-		to: "/approvals",
-		label: "approvals",
-		icon: ShieldCheck
-	},
+	}
+];
+var OPERATIONS_LINKS = [{
+	href: "/approvals",
+	label: "Approvals",
+	description: "Decide whether one captured action may proceed.",
+	icon: ShieldCheck
+}, {
+	href: "/attention",
+	label: "Attention",
+	description: "Inspect failures, warnings, lessons, and open signals.",
+	icon: BellRing
+}];
+var MANAGE_LINKS = [
 	{
-		to: "/attention",
-		label: "attention",
-		icon: BellRing
+		href: "/templates",
+		label: "Templates",
+		description: "Reusable Agent behavior and Team rosters.",
+		icon: LayoutTemplate
 	},
 	{
-		to: "/skills",
-		label: "skills",
+		href: "/skills",
+		label: "Skills",
+		description: "Prompt skills available to your agents.",
 		icon: Sparkles
 	},
 	{
-		to: "/config",
-		label: "config",
+		href: "/config",
+		label: "Setup",
+		description: "Providers, integrations, access, and services.",
 		icon: Settings2
 	}
 ];
 function TopNav() {
 	const pathname = useRouterState({ select: (state) => state.location.pathname });
-	const [attentionCount, setAttentionCount] = useState(0);
+	const [attention, setAttention] = useState(null);
+	const [logoutError, setLogoutError] = useState(null);
 	useEffect(() => {
 		if (pathname === "/login" || pathname === "/welcome") return;
-		fetch("/api/attention/summary").then((response) => response.ok ? response.json() : null).then((body) => setAttentionCount(body?.openTotal ?? 0)).catch(() => {});
+		const controller = new AbortController();
+		fetch("/api/attention/summary", { signal: controller.signal }).then((response) => response.ok ? response.json() : null).then((body) => setAttention(body)).catch((error) => {
+			if (error instanceof DOMException && error.name === "AbortError") return;
+		});
+		return () => controller.abort();
 	}, [pathname]);
 	async function logout() {
-		if ((await fetch("/api/logout", { method: "POST" })).ok) window.location.assign("/login");
+		setLogoutError(null);
+		try {
+			const response = await fetch("/api/logout", { method: "POST" });
+			if (!response.ok) throw new Error(`Log out failed (${response.status})`);
+			window.location.assign("/login");
+		} catch (error) {
+			setLogoutError(error instanceof Error ? error.message : String(error));
+		}
 	}
 	return /* @__PURE__ */ jsxs("nav", {
 		"aria-label": "Primary navigation",
-		className: "mx-auto grid w-full max-w-[1500px] shrink-0 grid-cols-[minmax(0,1fr)_auto] items-center gap-x-3 gap-y-2 border-b border-frost py-3 md:flex md:gap-2 md:py-4",
+		className: "relative mx-auto grid w-full max-w-[1500px] shrink-0 grid-cols-[minmax(0,1fr)_auto] items-center gap-x-3 gap-y-2 border-b border-frost py-3 md:flex md:gap-2 md:py-4",
 		children: [
 			/* @__PURE__ */ jsxs(Link, {
 				to: "/",
-				"aria-current": pathname === "/" ? "page" : void 0,
+				"aria-label": "Bazilion home",
 				className: "logo team flex min-w-0 items-center gap-2 rounded-lg text-charcoal transition-opacity hover:text-charcoal hover:opacity-80",
 				children: [/* @__PURE__ */ jsx(BaziuLogo, { className: "logo-paw h-8 w-8 shrink-0 transition-transform duration-300 team-hover:rotate-[-8deg] team-hover:scale-[1.08]" }), /* @__PURE__ */ jsx("span", {
 					className: "truncate font-display text-[1.35rem] tracking-[-0.02em]",
 					children: "bazilion"
 				})]
 			}),
-			/* @__PURE__ */ jsx("div", {
-				className: "col-span-2 row-start-2 flex min-w-0 items-center justify-between gap-1 md:col-auto md:row-auto md:ml-4 md:flex-1 md:justify-start",
-				children: NAV_LINKS.map((link) => {
-					const active = pathname === link.to || pathname.startsWith(`${link.to}/`);
-					const Icon = link.icon;
-					return /* @__PURE__ */ jsxs(Link, {
-						to: link.to,
-						"aria-current": active ? "page" : void 0,
-						"aria-label": link.label,
-						title: link.label,
-						className: `inline-flex h-9 min-w-9 items-center justify-center gap-2 rounded-lg border px-2.5 text-sm font-medium transition-all md:min-w-10 lg:px-3 ${active ? "border-sapphire-light bg-sapphire-glow text-sapphire shadow-baziu-sm" : "border-transparent text-mocha hover:border-frost hover:bg-ivory hover:text-sapphire"}`,
-						children: [
-							/* @__PURE__ */ jsx(Icon, {
-								className: "h-[1.05rem] w-[1.05rem] shrink-0",
+			/* @__PURE__ */ jsxs("div", {
+				className: "col-span-2 row-start-2 flex min-w-0 items-center gap-1 overflow-x-auto pb-0.5 md:col-auto md:row-auto md:ml-4 md:flex-1 md:overflow-visible md:pb-0",
+				children: [
+					PRIMARY_LINKS.map((link) => {
+						const active = link.to === "/" ? pathname === "/" : pathname === link.to || pathname.startsWith(`${link.to}/`);
+						const Icon = link.icon;
+						return /* @__PURE__ */ jsxs(Link, {
+							to: link.to,
+							"aria-current": active ? "page" : void 0,
+							className: navButtonClass(active),
+							children: [/* @__PURE__ */ jsx(Icon, {
+								className: "hidden size-4 shrink-0 sm:block",
 								"aria-hidden": "true"
-							}),
-							/* @__PURE__ */ jsx("span", {
-								className: "hidden lg:inline",
-								children: link.label
-							}),
-							link.to === "/attention" && attentionCount > 0 && /* @__PURE__ */ jsx("span", {
-								className: "min-w-5 rounded-full bg-coral px-1.5 text-center text-xs text-white",
-								"aria-label": `${attentionCount} open attention items`,
-								children: attentionCount > 99 ? "99+" : attentionCount
-							})
-						]
-					}, link.to);
-				})
+							}), /* @__PURE__ */ jsx("span", { children: link.label })]
+						}, link.to);
+					}),
+					/* @__PURE__ */ jsx(NavMenu, {
+						label: "Operations",
+						compactLabel: "Ops",
+						icon: BellRing,
+						links: OPERATIONS_LINKS,
+						pathname,
+						badge: attention?.openTotal ?? 0,
+						itemBadges: {
+							"/approvals": attention?.byKind.communication_approval ?? 0,
+							"/attention": attention?.openTotal ?? 0
+						}
+					}),
+					/* @__PURE__ */ jsx(NavMenu, {
+						label: "Manage",
+						icon: Settings2,
+						links: MANAGE_LINKS,
+						pathname,
+						align: "end"
+					})
+				]
 			}),
 			/* @__PURE__ */ jsxs("div", {
 				className: "col-start-2 row-start-1 flex items-center gap-1 md:col-auto md:row-auto md:ml-auto",
 				children: [/* @__PURE__ */ jsx(ThemeToggle, {}), /* @__PURE__ */ jsx("button", {
 					type: "button",
-					onClick: logout,
+					onClick: () => void logout(),
 					"aria-label": "Log out",
 					title: "Log out",
-					className: "inline-flex h-9 w-9 items-center justify-center rounded-lg text-mocha hover:bg-ivory hover:text-sapphire",
+					className: "unstyled inline-flex h-9 w-9 items-center justify-center rounded-lg text-mocha hover:bg-ivory hover:text-sapphire",
 					children: /* @__PURE__ */ jsx(LogOut, {
 						className: "h-4 w-4",
 						"aria-hidden": "true"
 					})
 				})]
+			}),
+			logoutError && /* @__PURE__ */ jsx("p", {
+				role: "alert",
+				className: "col-span-2 m-0 rounded-lg bg-danger/10 px-3 py-2 text-sm text-danger md:absolute md:right-0 md:top-[calc(100%+0.35rem)] md:z-50 md:shadow-baziu-md",
+				children: logoutError
 			})
 		]
 	});
 }
+function NavMenu({ label, compactLabel, icon: Icon, links, pathname, badge = 0, itemBadges = {}, align = "start" }) {
+	const active = links.some((link) => pathname === link.href || pathname.startsWith(`${link.href}/`));
+	return /* @__PURE__ */ jsxs(DropdownMenu.Root, { children: [/* @__PURE__ */ jsx(DropdownMenu.Trigger, {
+		asChild: true,
+		children: /* @__PURE__ */ jsxs("button", {
+			type: "button",
+			className: navButtonClass(active),
+			"aria-label": `${label} menu`,
+			children: [
+				/* @__PURE__ */ jsx(Icon, {
+					className: "hidden size-4 shrink-0 sm:block",
+					"aria-hidden": "true"
+				}),
+				/* @__PURE__ */ jsx("span", {
+					className: compactLabel ? "sm:hidden" : void 0,
+					children: compactLabel ?? label
+				}),
+				compactLabel && /* @__PURE__ */ jsx("span", {
+					className: "hidden sm:inline",
+					children: label
+				}),
+				badge > 0 && /* @__PURE__ */ jsxs(Fragment, { children: [/* @__PURE__ */ jsx("span", {
+					className: "size-2 shrink-0 rounded-full bg-danger sm:hidden",
+					"aria-label": `${badge} open items`
+				}), /* @__PURE__ */ jsx("span", {
+					className: "hidden sm:inline-flex",
+					children: /* @__PURE__ */ jsx(CountBadge, {
+						value: badge,
+						label: `${badge} open items`
+					})
+				})] }),
+				/* @__PURE__ */ jsx(ChevronDown, {
+					className: "size-3 shrink-0 text-muted-foreground",
+					"aria-hidden": "true"
+				})
+			]
+		})
+	}), /* @__PURE__ */ jsx(DropdownMenu.Portal, { children: /* @__PURE__ */ jsxs(DropdownMenu.Content, {
+		align,
+		sideOffset: 8,
+		collisionPadding: 12,
+		className: "z-50 w-[min(21rem,calc(100vw-1.5rem))] rounded-xl border border-border bg-popover p-1.5 text-popover-foreground shadow-baziu-lg outline-none data-[state=open]:animate-in data-[state=open]:fade-in-0 data-[state=open]:zoom-in-95",
+		children: [/* @__PURE__ */ jsx(DropdownMenu.Label, {
+			className: "px-2.5 pb-1 pt-1 text-xs font-semibold uppercase tracking-[0.1em] text-muted-foreground",
+			children: label
+		}), links.map((link) => {
+			const ItemIcon = link.icon;
+			const itemActive = pathname === link.href || pathname.startsWith(`${link.href}/`);
+			return /* @__PURE__ */ jsx(DropdownMenu.Item, {
+				asChild: true,
+				children: /* @__PURE__ */ jsxs("a", {
+					href: link.href,
+					"aria-current": itemActive ? "page" : void 0,
+					className: `flex cursor-pointer items-start gap-3 rounded-lg px-2.5 py-2.5 outline-none transition-colors focus:bg-accent focus:text-accent-foreground ${itemActive ? "bg-accent/70 text-accent-foreground" : "text-foreground"}`,
+					children: [/* @__PURE__ */ jsx("span", {
+						className: "mt-0.5 flex size-7 shrink-0 items-center justify-center rounded-lg bg-muted text-muted-foreground",
+						children: /* @__PURE__ */ jsx(ItemIcon, {
+							className: "size-3.5",
+							"aria-hidden": "true"
+						})
+					}), /* @__PURE__ */ jsxs("span", {
+						className: "min-w-0 flex-1",
+						children: [/* @__PURE__ */ jsxs("span", {
+							className: "flex items-center gap-2 text-sm font-semibold",
+							children: [link.label, (itemBadges[link.href] ?? 0) > 0 && /* @__PURE__ */ jsx(CountBadge, {
+								value: itemBadges[link.href] ?? 0,
+								label: `${itemBadges[link.href]} open ${link.label.toLowerCase()} items`
+							})]
+						}), /* @__PURE__ */ jsx("span", {
+							className: "mt-0.5 block text-xs leading-5 text-muted-foreground",
+							children: link.description
+						})]
+					})]
+				})
+			}, link.href);
+		})]
+	}) })] });
+}
+function CountBadge({ value, label }) {
+	return /* @__PURE__ */ jsx("span", {
+		className: "inline-flex min-w-5 items-center justify-center rounded-full bg-danger px-1.5 py-0.5 text-xs font-semibold leading-4 text-primary-foreground",
+		"aria-label": label,
+		children: value > 99 ? "99+" : value
+	});
+}
+function navButtonClass(active) {
+	return `unstyled inline-flex h-9 shrink-0 items-center justify-center gap-1.5 rounded-lg border px-2 text-sm font-semibold transition-colors sm:px-2.5 ${active ? "border-sapphire-light bg-sapphire-glow text-sapphire shadow-baziu-sm" : "border-transparent text-mocha hover:border-frost hover:bg-ivory hover:text-sapphire"}`;
+}
 //#endregion
 //#region src/lib/auth.ts
 var fetchAuthState = createServerFn({ method: "GET" }).handler(createSsrRpc("a5d3825fc69573bb55bab6df578c750ebb0240dd394c3acee3adea02918a5dc2"));
@@ -207,12 +331,12 @@ function installCsrfFetch() {
 }
 //#endregion
 //#region src/styles.css?url
-var styles_default = "/assets/styles-D6RPN7RK.css";
+var styles_default = "/assets/styles-B5vcgXln.css";
 //#endregion
 //#region src/routes/__root.tsx
 var THEME_INIT_SCRIPT = `(function(){try{var t=localStorage.getItem('baziu-theme');var sd=window.matchMedia&&window.matchMedia('(prefers-color-scheme: dark)').matches;var d=t==='dark'||((t===null||t==='system')&&sd);document.documentElement.classList.toggle('dark',d);}catch(e){}})();`;
 installCsrfFetch();
-var Route$3 = createRootRoute({
+var Route$4 = createRootRoute({
 	beforeLoad: async ({ location }) => {
 		const path = location.pathname;
 		if (PUBLIC_PATHS.has(path)) return;
@@ -279,39 +403,51 @@ function RootComponent() {
 		suppressHydrationWarning: true,
 		children: [/* @__PURE__ */ jsxs("head", { children: [/* @__PURE__ */ jsx("script", { dangerouslySetInnerHTML: { __html: THEME_INIT_SCRIPT } }), /* @__PURE__ */ jsx(HeadContent, {})] }), /* @__PURE__ */ jsxs("body", {
 			"data-layout": isWorkspace ? "workspace" : "page",
-			children: [isLogin ? /* @__PURE__ */ jsx(Outlet, {}) : isWorkspace ? /* @__PURE__ */ jsxs("div", {
-				className: "flex h-dvh flex-col",
-				children: [/* @__PURE__ */ jsx("div", {
-					className: "px-3 sm:px-5",
-					children: /* @__PURE__ */ jsx(TopNav, {})
-				}), /* @__PURE__ */ jsx("main", {
-					className: "mx-auto min-h-0 w-full max-w-[1600px] flex-1 overflow-hidden px-3 pb-3 sm:px-5 sm:pb-5",
-					children: /* @__PURE__ */ jsx(Outlet, {})
-				})]
-			}) : /* @__PURE__ */ jsxs("div", {
-				className: "flex min-h-dvh flex-col",
-				children: [
-					/* @__PURE__ */ jsx("div", {
+			children: [
+				!isLogin && /* @__PURE__ */ jsx("a", {
+					href: "#main-content",
+					className: "sr-only z-[100] rounded-lg bg-primary px-4 py-2 font-semibold text-primary-foreground focus:not-sr-only focus:fixed focus:left-3 focus:top-3",
+					children: "Skip to main content"
+				}),
+				isLogin ? /* @__PURE__ */ jsx(Outlet, {}) : isWorkspace ? /* @__PURE__ */ jsxs("div", {
+					className: "flex h-dvh flex-col",
+					children: [/* @__PURE__ */ jsx("div", {
 						className: "px-3 sm:px-5",
 						children: /* @__PURE__ */ jsx(TopNav, {})
-					}),
-					/* @__PURE__ */ jsx("main", {
-						className: "mx-auto w-full max-w-[1500px] flex-1 px-4 py-9 sm:px-6 sm:py-12",
+					}), /* @__PURE__ */ jsx("main", {
+						id: "main-content",
+						tabIndex: -1,
+						className: "mx-auto min-h-0 w-full max-w-[1600px] flex-1 overflow-hidden px-3 pb-3 sm:px-5 sm:pb-5",
 						children: /* @__PURE__ */ jsx(Outlet, {})
-					}),
-					/* @__PURE__ */ jsx("div", {
-						className: "px-4 sm:px-6",
-						children: /* @__PURE__ */ jsx(Footer, {})
-					})
-				]
-			}), /* @__PURE__ */ jsx(Scripts, {})]
+					})]
+				}) : /* @__PURE__ */ jsxs("div", {
+					className: "flex min-h-dvh flex-col",
+					children: [
+						/* @__PURE__ */ jsx("div", {
+							className: "px-3 sm:px-5",
+							children: /* @__PURE__ */ jsx(TopNav, {})
+						}),
+						/* @__PURE__ */ jsx("main", {
+							id: "main-content",
+							tabIndex: -1,
+							className: "mx-auto w-full max-w-[1500px] flex-1 px-4 py-9 sm:px-6 sm:py-12",
+							children: /* @__PURE__ */ jsx(Outlet, {})
+						}),
+						/* @__PURE__ */ jsx("div", {
+							className: "px-4 sm:px-6",
+							children: /* @__PURE__ */ jsx(Footer, {})
+						})
+					]
+				}),
+				/* @__PURE__ */ jsx(Scripts, {})
+			]
 		})]
 	});
 }
 //#endregion
 //#region src/routes/welcome.tsx
-var $$splitComponentImporter = () => import("./welcome-DDB11L5j.js");
-var Route$2 = createFileRoute("/welcome")({
+var $$splitComponentImporter = () => import("./welcome-B8nchXdF.js");
+var Route$3 = createFileRoute("/welcome")({
 	beforeLoad: async () => {
 		if ((await fetchAuthState()).setupComplete) throw redirect({ to: "/" });
 	},
@@ -319,7 +455,7 @@ var Route$2 = createFileRoute("/welcome")({
 });
 //#endregion
 //#region src/routes/templates/index.tsx
-var Route$1 = createFileRoute("/templates/")({ beforeLoad: () => {
+var Route$2 = createFileRoute("/templates/")({ beforeLoad: () => {
 	throw redirect({ to: "/templates/agents" });
 } });
 //#endregion
@@ -355,17 +491,35 @@ function hasDuplicateCookie(header, name) {
 	if (!header) return false;
 	return header.split(";").map((part) => part.trim()).map((part) => part.slice(0, part.indexOf("="))).filter((cookieName) => cookieName === name).length > 1;
 }
-function boundedBody(body, limit) {
+async function readBoundedBody(body, limit) {
 	let seen = 0;
-	return body.pipeThrough(new TransformStream({ transform(chunk, controller) {
-		seen += chunk.byteLength;
-		if (seen > limit) throw new Error("request body exceeds gateway limit");
-		controller.enqueue(chunk);
-	} }));
+	const reader = body.getReader();
+	const chunks = [];
+	try {
+		while (true) {
+			const { done, value } = await reader.read();
+			if (done) break;
+			seen += value.byteLength;
+			if (seen > limit) {
+				await reader.cancel("request body exceeds gateway limit");
+				return null;
+			}
+			chunks.push(value);
+		}
+	} finally {
+		reader.releaseLock();
+	}
+	const result = new Uint8Array(new ArrayBuffer(seen));
+	let offset = 0;
+	for (const chunk of chunks) {
+		result.set(chunk, offset);
+		offset += chunk.byteLength;
+	}
+	return result.buffer;
 }
 function addSecurityHeaders(headers, production) {
 	headers.set("x-content-type-options", "nosniff");
-	headers.set("referrer-policy", "no-referrer");
+	headers.set("referrer-policy", "same-origin");
 	headers.set("permissions-policy", "camera=(), microphone=(), geolocation=()");
 	headers.set("x-frame-options", "DENY");
 	headers.set("content-security-policy", "default-src 'self'; base-uri 'self'; connect-src 'self'; font-src 'self'; frame-ancestors 'none'; img-src 'self' data:; object-src 'none'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'");
@@ -403,7 +557,15 @@ async function proxy(request) {
 	const session = getCookie(originConfig.sessionCookie);
 	const csrf = getCookie(originConfig.csrfCookie);
 	if (unsafe && (session || incoming.pathname === "/api/login")) {
-		if (request.headers.get("origin") !== expectedOrigin) return new Response("origin validation failed", { status: 403 });
+		if (request.headers.get("origin") !== expectedOrigin) {
+			const contentType = request.headers.get("content-type") ?? "";
+			const acceptsHtml = request.headers.get("accept")?.includes("text/html") ?? false;
+			if (incoming.pathname === "/api/login" && contentType.startsWith("application/x-www-form-urlencoded") && acceptsHtml) return new Response(null, {
+				status: 303,
+				headers: { location: "/login?error=origin" }
+			});
+			return new Response("origin validation failed", { status: 403 });
+		}
 		if (session && (!csrf || request.headers.get("x-bazilion-csrf") !== csrf)) return new Response("csrf validation failed", { status: 403 });
 	}
 	const target = `${DAEMON_BASE_URL}${incoming.pathname}${incoming.search}`;
@@ -424,8 +586,11 @@ async function proxy(request) {
 		const limit = (request.headers.get("content-type") ?? "").startsWith("multipart/form-data") ? MAX_UPLOAD_BODY : MAX_JSON_BODY;
 		const contentLength = Number(request.headers.get("content-length") ?? 0);
 		if (Number.isFinite(contentLength) && contentLength > limit) return new Response("request body too large", { status: 413 });
-		if (request.body) init.body = boundedBody(request.body, limit);
-		init.duplex = "half";
+		if (request.body) {
+			const body = await readBoundedBody(request.body, limit);
+			if (!body) return new Response("request body too large", { status: 413 });
+			init.body = body;
+		}
 	}
 	const upstream = await fetch(target, init);
 	const respHeaders = new Headers();
@@ -442,7 +607,7 @@ async function proxy(request) {
 		headers: respHeaders
 	});
 }
-var Route = createFileRoute("/api/$")({ server: { handlers: {
+var Route$1 = createFileRoute("/api/$")({ server: { handlers: {
 	GET: ({ request }) => proxy(request),
 	POST: ({ request }) => proxy(request),
 	PUT: ({ request }) => proxy(request),
@@ -450,146 +615,154 @@ var Route = createFileRoute("/api/$")({ server: { handlers: {
 	DELETE: ({ request }) => proxy(request)
 } } });
 //#endregion
+//#region src/routes/teams/$id/context.tsx
+var Route = createFileRoute("/teams/$id/context")({ beforeLoad: ({ params }) => {
+	throw redirect({
+		to: "/teams/$id",
+		params: { id: params.id }
+	});
+} });
+//#endregion
 //#region src/routeTree.gen.ts
-var WelcomeRoute = Route$2.update({
+var WelcomeRoute = Route$3.update({
 	id: "/welcome",
 	path: "/welcome",
-	getParentRoute: () => Route$3
+	getParentRoute: () => Route$4
 });
-var LoginRoute = Route$4.update({
+var LoginRoute = Route$5.update({
 	id: "/login",
 	path: "/login",
-	getParentRoute: () => Route$3
+	getParentRoute: () => Route$4
 });
-var IndexRoute = Route$5.update({
+var IndexRoute = Route$6.update({
 	id: "/",
 	path: "/",
-	getParentRoute: () => Route$3
+	getParentRoute: () => Route$4
 });
-var TemplatesIndexRoute = Route$1.update({
+var TemplatesIndexRoute = Route$2.update({
 	id: "/templates/",
 	path: "/templates/",
-	getParentRoute: () => Route$3
+	getParentRoute: () => Route$4
 });
-var TeamsIndexRoute = Route$6.update({
+var TeamsIndexRoute = Route$7.update({
 	id: "/teams/",
 	path: "/teams/",
-	getParentRoute: () => Route$3
+	getParentRoute: () => Route$4
 });
-var SkillsIndexRoute = Route$7.update({
+var SkillsIndexRoute = Route$8.update({
 	id: "/skills/",
 	path: "/skills/",
-	getParentRoute: () => Route$3
+	getParentRoute: () => Route$4
 });
-var ConfigIndexRoute = Route$8.update({
+var ConfigIndexRoute = Route$9.update({
 	id: "/config/",
 	path: "/config/",
-	getParentRoute: () => Route$3
+	getParentRoute: () => Route$4
 });
-var AttentionIndexRoute = Route$9.update({
+var AttentionIndexRoute = Route$10.update({
 	id: "/attention/",
 	path: "/attention/",
-	getParentRoute: () => Route$3
+	getParentRoute: () => Route$4
 });
-var ApprovalsIndexRoute = Route$10.update({
+var ApprovalsIndexRoute = Route$11.update({
 	id: "/approvals/",
 	path: "/approvals/",
-	getParentRoute: () => Route$3
+	getParentRoute: () => Route$4
 });
-var AgentsIndexRoute = Route$11.update({
+var AgentsIndexRoute = Route$12.update({
 	id: "/agents/",
 	path: "/agents/",
-	getParentRoute: () => Route$3
+	getParentRoute: () => Route$4
 });
-var ConfigTokensRoute = Route$12.update({
+var ConfigTokensRoute = Route$13.update({
 	id: "/config/tokens",
 	path: "/config/tokens",
-	getParentRoute: () => Route$3
+	getParentRoute: () => Route$4
 });
-var ConfigServicesRoute = Route$13.update({
+var ConfigServicesRoute = Route$14.update({
 	id: "/config/services",
 	path: "/config/services",
-	getParentRoute: () => Route$3
+	getParentRoute: () => Route$4
 });
-var ConfigMcpRoute = Route$14.update({
+var ConfigMcpRoute = Route$15.update({
 	id: "/config/mcp",
 	path: "/config/mcp",
-	getParentRoute: () => Route$3
+	getParentRoute: () => Route$4
 });
-var ApiSplatRoute = Route.update({
+var ApiSplatRoute = Route$1.update({
 	id: "/api/$",
 	path: "/api/$",
-	getParentRoute: () => Route$3
+	getParentRoute: () => Route$4
 });
-var TemplatesTeamsIndexRoute = Route$15.update({
+var TemplatesTeamsIndexRoute = Route$16.update({
 	id: "/templates/teams/",
 	path: "/templates/teams/",
-	getParentRoute: () => Route$3
+	getParentRoute: () => Route$4
 });
-var TemplatesAgentsIndexRoute = Route$16.update({
+var TemplatesAgentsIndexRoute = Route$17.update({
 	id: "/templates/agents/",
 	path: "/templates/agents/",
-	getParentRoute: () => Route$3
+	getParentRoute: () => Route$4
 });
-var TeamsIdIndexRoute = Route$17.update({
+var TeamsIdIndexRoute = Route$18.update({
 	id: "/teams/$id/",
 	path: "/teams/$id/",
-	getParentRoute: () => Route$3
+	getParentRoute: () => Route$4
 });
-var AgentsIdIndexRoute = Route$18.update({
+var AgentsIdIndexRoute = Route$19.update({
 	id: "/agents/$id/",
 	path: "/agents/$id/",
-	getParentRoute: () => Route$3
+	getParentRoute: () => Route$4
 });
-var TeamsIdPolicyRoute = Route$19.update({
+var TeamsIdPolicyRoute = Route$20.update({
 	id: "/teams/$id/policy",
 	path: "/teams/$id/policy",
-	getParentRoute: () => Route$3
+	getParentRoute: () => Route$4
 });
-var TeamsIdMemoryRoute = Route$20.update({
+var TeamsIdMemoryRoute = Route$21.update({
 	id: "/teams/$id/memory",
 	path: "/teams/$id/memory",
-	getParentRoute: () => Route$3
+	getParentRoute: () => Route$4
 });
-var TeamsIdMembersRoute = Route$21.update({
+var TeamsIdMembersRoute = Route$22.update({
 	id: "/teams/$id/members",
 	path: "/teams/$id/members",
-	getParentRoute: () => Route$3
+	getParentRoute: () => Route$4
 });
-var TeamsIdContextRoute = Route$22.update({
+var TeamsIdContextRoute = Route.update({
 	id: "/teams/$id/context",
 	path: "/teams/$id/context",
-	getParentRoute: () => Route$3
+	getParentRoute: () => Route$4
 });
 var TeamsIdActivityRoute = Route$23.update({
 	id: "/teams/$id/activity",
 	path: "/teams/$id/activity",
-	getParentRoute: () => Route$3
+	getParentRoute: () => Route$4
 });
 var ConfigIntegrationsTelegramRoute = Route$24.update({
 	id: "/config/integrations/telegram",
 	path: "/config/integrations/telegram",
-	getParentRoute: () => Route$3
+	getParentRoute: () => Route$4
 });
 var AgentsIdTriggersRoute = Route$25.update({
 	id: "/agents/$id/triggers",
 	path: "/agents/$id/triggers",
-	getParentRoute: () => Route$3
+	getParentRoute: () => Route$4
 });
 var AgentsIdLearningRoute = Route$26.update({
 	id: "/agents/$id/learning",
 	path: "/agents/$id/learning",
-	getParentRoute: () => Route$3
+	getParentRoute: () => Route$4
 });
 var AgentsIdInboxRoute = Route$27.update({
 	id: "/agents/$id/inbox",
 	path: "/agents/$id/inbox",
-	getParentRoute: () => Route$3
+	getParentRoute: () => Route$4
 });
 var TemplatesTeamsIdIndexRoute = Route$28.update({
 	id: "/templates/teams/$id/",
 	path: "/templates/teams/$id/",
-	getParentRoute: () => Route$3
+	getParentRoute: () => Route$4
 });
 var rootRouteChildren = {
 	IndexRoute,
@@ -622,11 +795,11 @@ var rootRouteChildren = {
 	TemplatesAgentsIdIndexRoute: Route$29.update({
 		id: "/templates/agents/$id/",
 		path: "/templates/agents/$id/",
-		getParentRoute: () => Route$3
+		getParentRoute: () => Route$4
 	}),
 	TemplatesTeamsIdIndexRoute
 };
-var routeTree = Route$3._addFileChildren(rootRouteChildren)._addFileTypes();
+var routeTree = Route$4._addFileChildren(rootRouteChildren)._addFileTypes();
 //#endregion
 //#region src/router.tsx
 function getRouter() {