bazilion 0.7.0 → 0.8.0

package/dist/web/server/assets/{_id-D0ytyXGY.js → _id-BdRiQb2H.js}

@@ -1,4 +1,4 @@
-import { t as Route } from "./_id-81NrHA5d.js";
+import { t as Route } from "./_id-DUIrFV3G.js";
 import { t as AgentTabs } from "./AgentTabs-BOjTN7QF.js";
 import { t as AgentAvatar } from "./AgentAvatar-8gTAy_tP.js";
 import { t as ChatPane } from "./ChatPane-BvpswYvF.js";
@@ -419,14 +419,19 @@ function SkillsTable({ agentId, attached, all }) {
 	const router = useRouter();
 	const [pending, setPending] = useState(null);
 	const [err, setErr] = useState(null);
-	async function attach(name) {
-		setPending(name);
+	async function attach(skill) {
+		const findings = skill.scanFindings ?? [];
+		if (!(findings.length === 0 || confirm(`Skill "${skill.name}" has ${findings.length} scan finding${findings.length === 1 ? "" : "s"}. Attach it anyway?`))) return;
+		setPending(skill.name);
 		setErr(null);
 		try {
 			const res = await fetch(`/api/agents/${encodeURIComponent(agentId)}/skills`, {
 				method: "POST",
 				headers: { "content-type": "application/json" },
-				body: JSON.stringify({ skill: name })
+				body: JSON.stringify({
+					skill: skill.name,
+					allowFindings: findings.length > 0
+				})
 			});
 			if (!res.ok) {
 				const body = await res.json().catch(() => null);
@@ -465,6 +470,7 @@ function SkillsTable({ agentId, attached, all }) {
 	}), /* @__PURE__ */ jsxs("table", { children: [/* @__PURE__ */ jsx("thead", { children: /* @__PURE__ */ jsxs("tr", { children: [
 		/* @__PURE__ */ jsx("th", { children: "name" }),
 		/* @__PURE__ */ jsx("th", { children: "description" }),
+		/* @__PURE__ */ jsx("th", { children: "scan" }),
 		/* @__PURE__ */ jsx("th", {})
 	] }) }), /* @__PURE__ */ jsx("tbody", { children: all.map((s) => {
 		const isAttached = attached.has(s.name);
@@ -475,6 +481,7 @@ function SkillsTable({ agentId, attached, all }) {
 				className: "text-mocha-light",
 				children: "—"
 			}) }),
+			/* @__PURE__ */ jsx("td", { children: /* @__PURE__ */ jsx(SkillFindingSummary, { findings: s.scanFindings ?? [] }) }),
 			/* @__PURE__ */ jsx("td", { children: isAttached ? /* @__PURE__ */ jsx("button", {
 				type: "button",
 				className: "ghost-btn",
@@ -485,12 +492,42 @@ function SkillsTable({ agentId, attached, all }) {
 				type: "button",
 				className: "ghost-btn",
 				disabled: busy,
-				onClick: () => attach(s.name),
+				onClick: () => attach(s),
 				children: busy ? "…" : "attach"
 			}) })
 		] }, s.name);
 	}) })] })] });
 }
+function SkillFindingSummary({ findings }) {
+	if (findings.length === 0) return /* @__PURE__ */ jsx("span", {
+		className: "text-mocha-light",
+		children: "clean"
+	});
+	return /* @__PURE__ */ jsxs("details", {
+		className: "text-[0.82em]",
+		children: [/* @__PURE__ */ jsxs("summary", {
+			className: findings.some((f) => f.severity === "danger") ? "cursor-pointer text-[#9B3D3D]" : "cursor-pointer text-mocha",
+			children: [
+				findings.length,
+				" finding",
+				findings.length === 1 ? "" : "s"
+			]
+		}), /* @__PURE__ */ jsx("ul", {
+			className: "m-0 list-disc pl-4",
+			children: findings.map((f, i) => /* @__PURE__ */ jsxs("li", { children: [
+				/* @__PURE__ */ jsx("span", {
+					className: "font-mono",
+					children: f.severity
+				}),
+				": ",
+				f.code,
+				f.line ? ` line ${f.line}` : "",
+				" - ",
+				f.message
+			] }, `${f.code}-${f.line ?? 0}-${i}`))
+		})]
+	});
+}
 function TelegramSection({ agent }) {
 	const router = useRouter();
 	const [busy, setBusy] = useState(false);

package/dist/web/server/assets/{_id-81NrHA5d.js → _id-DUIrFV3G.js}

@@ -2,7 +2,7 @@ import { t as createServerFn } from "../server.js";
 import { t as createSsrRpc } from "./createSsrRpc-ZBGxhl8t.js";
 import { createFileRoute, lazyRouteComponent, redirect } from "@tanstack/react-router";
 //#region src/routes/agents/$id/index.tsx
-var $$splitComponentImporter = () => import("./_id-D0ytyXGY.js");
+var $$splitComponentImporter = () => import("./_id-BdRiQb2H.js");
 var fetchAgent = createServerFn({ method: "POST" }).inputValidator((d) => d).handler(createSsrRpc("846c9081aed17057351730985f133b0aab67a5dabfca9562552829a90ff30849"));
 var Route = createFileRoute("/agents/$id/")({
 	loader: async ({ params }) => {

package/dist/web/server/assets/{_tanstack-start-manifest_v-DBlFH2gg.js → _tanstack-start-manifest_v-D9FLKShQ.js}

@@ -26,21 +26,21 @@ var tsrStartManifest = () => ({ routes: {
 			"/groups/$id/"
 		],
 		preloads: [
-			"/assets/index-iayCEuU2.js",
+			"/assets/index-MAJuXnie.js",
 			"/assets/jsx-runtime-DGeXAQPT.js",
 			"/assets/preload-helper-CvnapA2_.js"
 		],
 		scripts: [{ attrs: {
 			type: "module",
 			async: !0,
-			src: "/assets/index-iayCEuU2.js"
+			src: "/assets/index-MAJuXnie.js"
 		} }]
 	},
 	"/": {
 		filePath: "/home/runner/work/bazilion/bazilion/apps/web/src/routes/index.tsx",
 		children: void 0,
 		preloads: [
-			"/assets/routes-DSHQLA7K.js",
+			"/assets/routes-D2COHy7v.js",
 			"/assets/ChatPane-DzEgOEqS.js",
 			"/assets/SpawnTeamModal-BEkNCKXm.js",
 			"/assets/wire-constants-BkT5-597.js"
@@ -49,7 +49,7 @@ var tsrStartManifest = () => ({ routes: {
 	"/login": {
 		filePath: "/home/runner/work/bazilion/bazilion/apps/web/src/routes/login.tsx",
 		children: void 0,
-		preloads: ["/assets/login-D8lNr2SX.js"]
+		preloads: ["/assets/login-CawJX16E.js"]
 	},
 	"/welcome": {
 		filePath: "/home/runner/work/bazilion/bazilion/apps/web/src/routes/welcome.tsx",
@@ -59,13 +59,13 @@ var tsrStartManifest = () => ({ routes: {
 	"/config/mcp": {
 		filePath: "/home/runner/work/bazilion/bazilion/apps/web/src/routes/config/mcp.tsx",
 		children: void 0,
-		preloads: ["/assets/mcp-BLnngDsj.js", "/assets/ConfigTabs-pY-V0Rie.js"]
+		preloads: ["/assets/mcp-DIrh9-v_.js", "/assets/ConfigTabs-pY-V0Rie.js"]
 	},
 	"/config/services": {
 		filePath: "/home/runner/work/bazilion/bazilion/apps/web/src/routes/config/services.tsx",
 		children: void 0,
 		preloads: [
-			"/assets/services-BbCJe1Du.js",
+			"/assets/services-D212jSK_.js",
 			"/assets/ConfigTabs-pY-V0Rie.js",
 			"/assets/FieldRow-CNKma5LE.js"
 		]
@@ -73,13 +73,13 @@ var tsrStartManifest = () => ({ routes: {
 	"/config/tokens": {
 		filePath: "/home/runner/work/bazilion/bazilion/apps/web/src/routes/config/tokens.tsx",
 		children: void 0,
-		preloads: ["/assets/tokens-D2_O9ARe.js", "/assets/ConfigTabs-pY-V0Rie.js"]
+		preloads: ["/assets/tokens-E_JvO5JN.js", "/assets/ConfigTabs-pY-V0Rie.js"]
 	},
 	"/profile-groups/$id": {
 		filePath: "/home/runner/work/bazilion/bazilion/apps/web/src/routes/profile-groups/$id.tsx",
 		children: void 0,
 		preloads: [
-			"/assets/_id-_6jIt0_-.js",
+			"/assets/_id-CjGoV8Mr.js",
 			"/assets/Button-ByiV6fpd.js",
 			"/assets/MembersEditor-C6UpqDdV.js"
 		]
@@ -87,18 +87,18 @@ var tsrStartManifest = () => ({ routes: {
 	"/profiles/$id": {
 		filePath: "/home/runner/work/bazilion/bazilion/apps/web/src/routes/profiles/$id.tsx",
 		children: void 0,
-		preloads: ["/assets/_id-LT6Ejjr0.js"]
+		preloads: ["/assets/_id-BNJapCT4.js"]
 	},
 	"/agents/": {
 		filePath: "/home/runner/work/bazilion/bazilion/apps/web/src/routes/agents/index.tsx",
 		children: void 0,
-		preloads: ["/assets/agents-0arKbVYG.js", "/assets/AgentAvatar-JYijLvZ2.js"]
+		preloads: ["/assets/agents-M6omAXcZ.js", "/assets/AgentAvatar-JYijLvZ2.js"]
 	},
 	"/config/": {
 		filePath: "/home/runner/work/bazilion/bazilion/apps/web/src/routes/config/index.tsx",
 		children: void 0,
 		preloads: [
-			"/assets/config-BSAVT-17.js",
+			"/assets/config-DIuEc5bm.js",
 			"/assets/ConfigTabs-pY-V0Rie.js",
 			"/assets/FieldRow-CNKma5LE.js"
 		]
@@ -106,48 +106,48 @@ var tsrStartManifest = () => ({ routes: {
 	"/groups/": {
 		filePath: "/home/runner/work/bazilion/bazilion/apps/web/src/routes/groups/index.tsx",
 		children: void 0,
-		preloads: ["/assets/groups-BqTkhHes.js"]
+		preloads: ["/assets/groups-DpE2d2zZ.js"]
 	},
 	"/profile-groups/": {
 		filePath: "/home/runner/work/bazilion/bazilion/apps/web/src/routes/profile-groups/index.tsx",
 		children: void 0,
 		preloads: [
-			"/assets/profile-groups-C2yJPTaE.js",
+			"/assets/profile-groups-ByoKak0c.js",
 			"/assets/Button-ByiV6fpd.js",
 			"/assets/MembersEditor-C6UpqDdV.js",
 			"/assets/SpawnTeamModal-BEkNCKXm.js",
-			"/assets/TemplatesTabs-Da7mg9FI.js"
+			"/assets/TemplatesTabs-UM04RMO9.js"
 		]
 	},
 	"/profiles/": {
 		filePath: "/home/runner/work/bazilion/bazilion/apps/web/src/routes/profiles/index.tsx",
 		children: void 0,
 		preloads: [
-			"/assets/profiles-BV7AAZjj.js",
+			"/assets/profiles-BEjv8LGo.js",
 			"/assets/Button-ByiV6fpd.js",
-			"/assets/TemplatesTabs-Da7mg9FI.js"
+			"/assets/TemplatesTabs-UM04RMO9.js"
 		]
 	},
 	"/skills/": {
 		filePath: "/home/runner/work/bazilion/bazilion/apps/web/src/routes/skills/index.tsx",
 		children: void 0,
-		preloads: ["/assets/skills-C6czKR5I.js"]
+		preloads: ["/assets/skills-Da0MURjY.js"]
 	},
 	"/agents/$id/inbox": {
 		filePath: "/home/runner/work/bazilion/bazilion/apps/web/src/routes/agents/$id/inbox.tsx",
 		children: void 0,
-		preloads: ["/assets/inbox-ozoCXzr5.js", "/assets/AgentTabs-DioGqUVR.js"]
+		preloads: ["/assets/inbox-BPnLsRNf.js", "/assets/AgentTabs-DioGqUVR.js"]
 	},
 	"/agents/$id/triggers": {
 		filePath: "/home/runner/work/bazilion/bazilion/apps/web/src/routes/agents/$id/triggers.tsx",
 		children: void 0,
-		preloads: ["/assets/triggers-WljnfEfJ.js", "/assets/AgentTabs-DioGqUVR.js"]
+		preloads: ["/assets/triggers-BBRZQOm7.js", "/assets/AgentTabs-DioGqUVR.js"]
 	},
 	"/config/integrations/telegram": {
 		filePath: "/home/runner/work/bazilion/bazilion/apps/web/src/routes/config/integrations/telegram.tsx",
 		children: void 0,
 		preloads: [
-			"/assets/telegram-gE4j8gte.js",
+			"/assets/telegram-Czh2MdVm.js",
 			"/assets/Button-ByiV6fpd.js",
 			"/assets/ConfigTabs-pY-V0Rie.js"
 		]
@@ -155,13 +155,13 @@ var tsrStartManifest = () => ({ routes: {
 	"/groups/$id/memory": {
 		filePath: "/home/runner/work/bazilion/bazilion/apps/web/src/routes/groups/$id/memory.tsx",
 		children: void 0,
-		preloads: ["/assets/memory-D1GQjEvN.js"]
+		preloads: ["/assets/memory-BpHbdKsd.js"]
 	},
 	"/agents/$id/": {
 		filePath: "/home/runner/work/bazilion/bazilion/apps/web/src/routes/agents/$id/index.tsx",
 		children: void 0,
 		preloads: [
-			"/assets/_id-BdKmo0gb.js",
+			"/assets/_id-DehuCHUw.js",
 			"/assets/AgentAvatar-JYijLvZ2.js",
 			"/assets/AgentTabs-DioGqUVR.js",
 			"/assets/ChatPane-DzEgOEqS.js",
@@ -171,7 +171,7 @@ var tsrStartManifest = () => ({ routes: {
 	"/groups/$id/": {
 		filePath: "/home/runner/work/bazilion/bazilion/apps/web/src/routes/groups/$id/index.tsx",
 		children: void 0,
-		preloads: ["/assets/_id-MR2XjWh0.js", "/assets/Button-ByiV6fpd.js"]
+		preloads: ["/assets/_id-Dz9fjcCM.js", "/assets/Button-ByiV6fpd.js"]
 	}
 } });
 //#endregion

package/dist/web/server/assets/{router-BpBZgRwn.js → router-BrDascdO.js}

@@ -3,7 +3,7 @@ import { t as DAEMON_BASE_URL } from "./daemon-client-2NRMzlTr.js";
 import { n as BaziuLogo, r as PawIcon, t as Route$3 } from "./login-CNznncgA.js";
 import { t as createSsrRpc } from "./createSsrRpc-ZBGxhl8t.js";
 import { t as Route$4 } from "./routes-V9URcp1v.js";
-import { t as Route$5 } from "./skills-CpsyR_WA.js";
+import { t as Route$5 } from "./skills-l2cyQ3zS.js";
 import { t as Route$6 } from "./profiles-CZ5NkmVw.js";
 import { t as Route$7 } from "./profile-groups-aoJleXHP.js";
 import { t as Route$8 } from "./groups-CbSwND2r.js";
@@ -15,7 +15,7 @@ import { t as Route$13 } from "./tokens-DdpnfV_Y.js";
 import { t as Route$14 } from "./services-Ccc5s2bS.js";
 import { t as Route$15 } from "./mcp-CKqwG4mt.js";
 import { t as Route$16 } from "./_id-CnQflrRv.js";
-import { t as Route$17 } from "./_id-81NrHA5d.js";
+import { t as Route$17 } from "./_id-DUIrFV3G.js";
 import { t as Route$18 } from "./memory-Ns2-Z31p.js";
 import { t as Route$19 } from "./telegram-T3l9KtiE.js";
 import { t as Route$20 } from "./triggers-BcTTwMfy.js";
@@ -142,7 +142,7 @@ function isSetupOpen(path) {
 }
 //#endregion
 //#region src/styles.css?url
-var styles_default = "/assets/styles-C06axZZk.css";
+var styles_default = "/assets/styles-BgE5bCHA.css";
 //#endregion
 //#region src/routes/__root.tsx
 var THEME_INIT_SCRIPT = `(function(){try{var t=localStorage.getItem('baziu-theme');var sd=window.matchMedia&&window.matchMedia('(prefers-color-scheme: dark)').matches;var d=t==='dark'||((t===null||t==='system')&&sd);document.documentElement.classList.toggle('dark',d);}catch(e){}})();`;

package/dist/web/server/assets/{skills-dLyBZb3B.js → skills-D89ND2kR.js}

@@ -1,4 +1,4 @@
-import { t as Route } from "./skills-CpsyR_WA.js";
+import { t as Route } from "./skills-l2cyQ3zS.js";
 import { useRef, useState } from "react";
 import { useRouter } from "@tanstack/react-router";
 import { Fragment, jsx, jsxs } from "react/jsx-runtime";
@@ -21,10 +21,11 @@ function SkillsPage() {
 		/* @__PURE__ */ jsxs("table", { children: [/* @__PURE__ */ jsx("thead", { children: /* @__PURE__ */ jsxs("tr", { children: [
 			/* @__PURE__ */ jsx("th", { children: "name" }),
 			/* @__PURE__ */ jsx("th", { children: "description" }),
+			/* @__PURE__ */ jsx("th", { children: "scan" }),
 			/* @__PURE__ */ jsx("th", { children: "source" }),
 			/* @__PURE__ */ jsx("th", {})
 		] }) }), /* @__PURE__ */ jsxs("tbody", { children: [skills.length === 0 && /* @__PURE__ */ jsx("tr", { children: /* @__PURE__ */ jsx("td", {
-			colSpan: 4,
+			colSpan: 5,
 			className: "muted",
 			children: "no skills installed yet"
 		}) }), skills.map((s) => /* @__PURE__ */ jsxs("tr", { children: [
@@ -33,6 +34,7 @@ function SkillsPage() {
 				className: "text-[#9B3D3D]",
 				children: ["parse error: ", s.parseError]
 			}) : s.description }),
+			/* @__PURE__ */ jsx("td", { children: /* @__PURE__ */ jsx(FindingSummary, { findings: s.scanFindings ?? [] }) }),
 			/* @__PURE__ */ jsxs("td", {
 				className: "text-[0.78em] text-mocha-light",
 				children: [/* @__PURE__ */ jsx("span", {
@@ -59,11 +61,13 @@ function ImportCard({ onImported }) {
 	const [zipFile, setZipFile] = useState(null);
 	const [dragOver, setDragOver] = useState(false);
 	const [err, setErr] = useState(null);
+	const [findings, setFindings] = useState([]);
 	const [submitting, setSubmitting] = useState(false);
 	const fileInput = useRef(null);
 	async function submit(e) {
 		e.preventDefault();
 		setErr(null);
+		setFindings([]);
 		setSubmitting(true);
 		try {
 			let res;
@@ -102,8 +106,10 @@ function ImportCard({ onImported }) {
 			}
 			if (!res.ok) {
 				const e2 = await res.json().catch(() => null);
+				setFindings(e2?.findings ?? []);
 				throw new Error(e2?.error ?? `${res.status} ${res.statusText}`);
 			}
+			setFindings(flattenImportFindings((await res.json().catch(() => null))?.findings));
 			setPath("");
 			setZipFile(null);
 			onImported();
@@ -181,6 +187,13 @@ function ImportCard({ onImported }) {
 				className: "err",
 				children: err
 			}),
+			findings.length > 0 && /* @__PURE__ */ jsxs("div", {
+				className: "mb-3 rounded-md border border-[#D7A3A3] bg-[#FFF7F5] p-3 text-[0.86em] text-[#7C2D2D]",
+				children: [/* @__PURE__ */ jsx("div", {
+					className: "mb-1 font-semibold",
+					children: "scan findings"
+				}), /* @__PURE__ */ jsx(FindingList, { findings })]
+			}),
 			/* @__PURE__ */ jsxs("form", {
 				onSubmit: submit,
 				children: [
@@ -245,11 +258,18 @@ function ImportCard({ onImported }) {
 							children: submitting ? "importing…" : tab === "zip" ? "upload & import" : tab === "openclaw" ? "import from OpenClaw" : "import"
 						}), /* @__PURE__ */ jsxs("label", {
 							className: "m-0 inline-flex cursor-pointer items-center text-[0.88em] text-mocha",
-							children: [/* @__PURE__ */ jsx("input", {
-								type: "checkbox",
-								checked: force,
-								onChange: (e) => setForce(e.target.checked)
-							}), "overwrite existing"]
+							children: [
+								/* @__PURE__ */ jsx("input", {
+									type: "checkbox",
+									checked: force,
+									onChange: (e) => setForce(e.target.checked)
+								}),
+								"overwrite existing",
+								/* @__PURE__ */ jsx("span", {
+									className: "ml-1 text-mocha-light",
+									children: "/ confirm scan findings"
+								})
+							]
 						})]
 					})
 				]
@@ -257,5 +277,45 @@ function ImportCard({ onImported }) {
 		]
 	});
 }
+function FindingSummary({ findings }) {
+	if (findings.length === 0) return /* @__PURE__ */ jsx("span", {
+		className: "text-mocha-light",
+		children: "clean"
+	});
+	return /* @__PURE__ */ jsxs("details", {
+		className: "text-[0.82em]",
+		children: [/* @__PURE__ */ jsxs("summary", {
+			className: findings.some((f) => f.severity === "danger") ? "cursor-pointer text-[#9B3D3D]" : "cursor-pointer text-mocha",
+			children: [
+				findings.length,
+				" finding",
+				findings.length === 1 ? "" : "s"
+			]
+		}), /* @__PURE__ */ jsx(FindingList, { findings })]
+	});
+}
+function FindingList({ findings }) {
+	return /* @__PURE__ */ jsx("ul", {
+		className: "m-0 list-disc pl-4",
+		children: findings.map((f, i) => /* @__PURE__ */ jsxs("li", { children: [
+			/* @__PURE__ */ jsx("span", {
+				className: "font-mono",
+				children: f.severity
+			}),
+			": ",
+			f.code,
+			f.line ? ` line ${f.line}` : "",
+			" - ",
+			f.message
+		] }, `${f.code}-${f.line ?? 0}-${i}`))
+	});
+}
+function flattenImportFindings(findings) {
+	if (!findings) return [];
+	return Object.entries(findings).flatMap(([name, items]) => items.map((item) => ({
+		...item,
+		message: `${name}: ${item.message}`
+	})));
+}
 //#endregion
 export { SkillsPage as component };

package/dist/web/server/assets/{skills-CpsyR_WA.js → skills-l2cyQ3zS.js}

@@ -2,7 +2,7 @@ import { t as createServerFn } from "../server.js";
 import { t as createSsrRpc } from "./createSsrRpc-ZBGxhl8t.js";
 import { createFileRoute, lazyRouteComponent } from "@tanstack/react-router";
 //#region src/routes/skills/index.tsx
-var $$splitComponentImporter = () => import("./skills-dLyBZb3B.js");
+var $$splitComponentImporter = () => import("./skills-D89ND2kR.js");
 var fetchSkills = createServerFn({ method: "GET" }).handler(createSsrRpc("ae1d30575b229c1e2622fbaf2252800a9a7acc84afdd68cba025ca890b8d52c5"));
 var Route = createFileRoute("/skills/")({
 	loader: () => fetchSkills(),

package/dist/web/server/server.js

@@ -3547,7 +3547,7 @@ var defaultSerovalPlugins = [
 * the dev styles URL for route-scoped CSS collection.
 */
 async function getStartManifest(matchedRoutes) {
-	const { tsrStartManifest } = await import("./assets/_tanstack-start-manifest_v-DBlFH2gg.js");
+	const { tsrStartManifest } = await import("./assets/_tanstack-start-manifest_v-D9FLKShQ.js");
 	const startManifest = tsrStartManifest();
 	let routes = startManifest.routes;
 	routes[rootRouteId];
@@ -5521,7 +5521,7 @@ var getBaseManifest = getProdBaseManifest;
 var createEarlyHintsForRequest = createEarlyHintsCollector;
 async function loadEntries() {
 	const [routerEntry, startEntry, pluginAdapters] = await Promise.all([
-		import("./assets/router-BpBZgRwn.js"),
+		import("./assets/router-BrDascdO.js"),
 		import("./assets/start-CYDpZ6cb.js"),
 		import("./assets/empty-plugin-adapters-DKUlnwwl.js")
 	]);