create-windy 0.5.2 → 0.6.1

package/template/packages/database/drizzle/meta/_journal.json

@@ -337,6 +337,55 @@
       "when": 1785438653330,
       "tag": "0047_oval_luke_cage",
       "breakpoints": true
+    },
+    {
+      "idx": 48,
+      "version": "7",
+      "when": 1785473121596,
+      "tag": "0048_illegal_magneto",
+      "breakpoints": true
+    },
+    {
+      "idx": 49,
+      "version": "7",
+      "when": 1785479857495,
+      "tag": "0049_right_lenny_balinger",
+      "breakpoints": true
+    },
+    {
+      "idx": 50,
+      "version": "7",
+      "when": 1785571876206,
+      "tag": "0050_greedy_sister_grimm",
+      "breakpoints": true
+    },
+    {
+      "idx": 51,
+      "version": "7",
+      "when": 1785951207943,
+      "tag": "0051_lame_shockwave",
+      "breakpoints": true
+    },
+    {
+      "idx": 52,
+      "version": "7",
+      "when": 1785956671967,
+      "tag": "0052_tiresome_komodo",
+      "breakpoints": true
+    },
+    {
+      "idx": 53,
+      "version": "7",
+      "when": 1785959552416,
+      "tag": "0053_calm_victor_mancha",
+      "breakpoints": true
+    },
+    {
+      "idx": 54,
+      "version": "7",
+      "when": 1785963705804,
+      "tag": "0054_tough_thanos",
+      "breakpoints": true
     }
   ]
 }

package/template/packages/database/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@southwind-ai/database",
-  "version": "0.3.0",
+  "version": "0.3.1",
   "license": "UNLICENSED",
   "type": "module",
   "engines": {
@@ -15,7 +15,7 @@
     "typecheck": "tsc --noEmit --project tsconfig.json"
   },
   "dependencies": {
-    "@southwind-ai/shared": "workspace:^",
+    "@southwind-ai/shared": "workspace:^0.2.5",
     "drizzle-orm": "^0.45.2"
   },
   "exports": {

package/template/packages/database/src/agent-runtime-schema.test.ts

@@ -4,6 +4,7 @@ import {
   agentEvaluationResults,
   agentOperationReleases,
   agentRunBindings,
+  agentScreenshotIntakes,
   agentRuntimeReportAttempts,
   agentRuntimeReportRuns,
   agentRuntimeEvents,
@@ -35,6 +36,11 @@ test("Agent Run 固定不可变 Release 并持久化恢复租约", async () => {
   expect(agentRunBindings.inputDigestCommitment.notNull).toBe(true);
   expect(agentRunBindings.scopeSnapshot.notNull).toBe(true);
   expect(agentRunBindings.authorizationSnapshot.notNull).toBe(true);
+  expect(getTableConfig(agentScreenshotIntakes).name).toBe(
+    "agent_screenshot_intakes",
+  );
+  expect(agentScreenshotIntakes.contextDigest.notNull).toBe(true);
+  expect(agentScreenshotIntakes.runId.notNull).toBe(false);
   expect(getTableConfig(agentRuntimeReportRuns).name).toBe(
     "agent_runtime_report_runs",
   );
@@ -105,4 +111,13 @@ test("Agent Run 固定不可变 Release 并持久化恢复租约", async () => {
   expect(attemptLifecycleMigration).toContain(
     "'running', 'completed', 'failed', 'cancelled', 'blocked', 'abandoned'",
   );
+  const screenshotMigration = await Bun.file(
+    new URL("../drizzle/0054_tough_thanos.sql", import.meta.url),
+  ).text();
+  expect(screenshotMigration).toContain(
+    'CREATE TABLE "agent_screenshot_intakes"',
+  );
+  expect(screenshotMigration).toContain(
+    'CREATE UNIQUE INDEX "uk_agent_screenshot_intakes_run"',
+  );
 });

package/template/packages/database/src/ai-output-artifacts.test.ts

@@ -0,0 +1,57 @@
+import { describe, expect, test } from "bun:test";
+import { getTableConfig } from "drizzle-orm/pg-core";
+import { aiOutputArtifacts, aiOutputArtifactScopes } from "./schema/index.js";
+
+describe("AI Output Artifact schema", () => {
+  test("scope 与 artifact 保留授权、TTL、CAS 和清理约束", async () => {
+    const scope = getTableConfig(aiOutputArtifactScopes);
+    const artifact = getTableConfig(aiOutputArtifacts);
+
+    expect(scope.name).toBe("ai_output_artifact_scopes");
+    expect(scope.indexes.map(({ config }) => config.name)).toContain(
+      "idx_ai_output_scopes_cleanup",
+    );
+    expect(scope.checks.map(({ name }) => name)).toContain(
+      "ck_ai_output_scopes_grant",
+    );
+    expect(aiOutputArtifactScopes.grantHash.notNull).toBe(false);
+    expect(aiOutputArtifactScopes.revision.notNull).toBe(true);
+    expect(aiOutputArtifactScopes.grantSequence.notNull).toBe(true);
+    expect(aiOutputArtifactScopes.activeGrantGeneration.notNull).toBe(false);
+    expect(aiOutputArtifactScopes.pendingGrantHash.notNull).toBe(false);
+    expect(aiOutputArtifactScopes.pendingGrantGeneration.notNull).toBe(false);
+    expect(aiOutputArtifactScopes.pendingGrantExpiresAt.notNull).toBe(false);
+    expect(aiOutputArtifactScopes.requestId.notNull).toBe(true);
+    expect(aiOutputArtifactScopes.scopeExpiresAt.notNull).toBe(true);
+    expect(aiOutputArtifactScopes.fileExpiresAt.notNull).toBe(true);
+    expect(aiOutputArtifactScopes.refExpiresAt.notNull).toBe(true);
+
+    expect(artifact.name).toBe("ai_output_artifacts");
+    expect(artifact.foreignKeys[0]?.onDelete).toBe("restrict");
+    expect(artifact.indexes.map(({ config }) => config.name)).toContain(
+      "uk_ai_output_artifacts_key",
+    );
+    expect(artifact.checks.map(({ name }) => name)).toContain(
+      "ck_ai_output_artifacts_completed",
+    );
+
+    const migration = await Bun.file(
+      new URL("../drizzle/0049_right_lenny_balinger.sql", import.meta.url),
+    ).text();
+    expect(migration).toContain('CREATE TABLE "ai_output_artifact_scopes"');
+    expect(migration).toContain('CREATE TABLE "ai_output_artifacts"');
+    expect(migration).toContain('"request_id" varchar(128) NOT NULL');
+    expect(migration).toContain('"revision" integer DEFAULT 1 NOT NULL');
+    expect(migration).toContain('"grant_sequence" integer DEFAULT 1 NOT NULL');
+    expect(migration).toContain(
+      `"pending_grant_generation" = "ai_output_artifact_scopes"."grant_sequence"`,
+    );
+    expect(migration).toContain(
+      `"pending_grant_generation" > "ai_output_artifact_scopes"."active_grant_generation"`,
+    );
+    expect(migration).toContain(
+      `"pending_grant_expires_at" <= "ai_output_artifact_scopes"."scope_expires_at"`,
+    );
+    expect(migration).not.toContain('"grant"');
+  });
+});

package/template/packages/database/src/schema/agent-runtime.ts

@@ -261,3 +261,46 @@ export const agentRunBindings = pgTable(
     index("idx_agent_run_bindings_expiry").on(table.expiresAt),
   ],
 );
+
+/** Host-owned, short-lived browser screenshot intake. No bytes or locators live here. */
+export const agentScreenshotIntakes = pgTable(
+  "agent_screenshot_intakes",
+  {
+    intakeId: varchar("intake_id", { length: 80 }).primaryKey(),
+    tokenHash: varchar("token_hash", { length: 64 }).notNull(),
+    actorId: varchar("actor_id", { length: 64 }).notNull(),
+    actorType: varchar("actor_type", { length: 32 }).notNull(),
+    scopeHash: varchar("scope_hash", { length: 64 }).notNull(),
+    moduleName: varchar("module_name", { length: 160 }).notNull(),
+    operationKey: varchar("operation_key", { length: 200 }).notNull(),
+    purpose: varchar("purpose", { length: 260 }).notNull(),
+    pageId: varchar("page_id", { length: 256 }).notNull(),
+    contextDigest: varchar("context_digest", { length: 72 }).notNull(),
+    deploymentPin: jsonb("deployment_pin")
+      .$type<Record<string, string>>()
+      .notNull(),
+    mediaType: varchar("media_type", { length: 80 }).notNull(),
+    byteSize: integer("byte_size").notNull(),
+    pixels: integer("pixels").notNull(),
+    status: varchar("status", { length: 24 }).notNull(),
+    uploadId: varchar("upload_id", { length: 80 }),
+    fileId: varchar("file_id", { length: 80 }),
+    runId: varchar("run_id", { length: 80 }),
+    createdAt: doublePrecision("created_at").notNull(),
+    expiresAt: doublePrecision("expires_at").notNull(),
+  },
+  (table) => [
+    uniqueIndex("uk_agent_screenshot_intakes_token").on(table.tokenHash),
+    uniqueIndex("uk_agent_screenshot_intakes_run").on(table.runId),
+    index("idx_agent_screenshot_intakes_expiry").on(
+      table.status,
+      table.expiresAt,
+    ),
+    check(
+      "ck_agent_screenshot_intakes_status",
+      sql`${table.status} in ('created', 'uploading', 'uploaded', 'reserving', 'bound', 'cancelled')`,
+    ),
+    check("ck_agent_screenshot_intakes_bytes", sql`${table.byteSize} > 0`),
+    check("ck_agent_screenshot_intakes_pixels", sql`${table.pixels} > 0`),
+  ],
+);

package/template/packages/database/src/schema/ai-output-artifacts.ts

@@ -0,0 +1,182 @@
+import { sql } from "drizzle-orm";
+import {
+  bigint,
+  check,
+  index,
+  integer,
+  jsonb,
+  pgTable,
+  timestamp,
+  uniqueIndex,
+  varchar,
+} from "drizzle-orm/pg-core";
+import type { AuthorizationScopeSnapshot } from "@southwind-ai/shared";
+
+export const aiOutputArtifactScopes = pgTable(
+  "ai_output_artifact_scopes",
+  {
+    scopeId: varchar("scope_id", { length: 80 }).primaryKey(),
+    runId: varchar("run_id", { length: 80 }).notNull(),
+    requestId: varchar("request_id", { length: 128 }).notNull(),
+    actorId: varchar("actor_id", { length: 64 }).notNull(),
+    tenantId: varchar("tenant_id", { length: 64 }).notNull(),
+    moduleName: varchar("module_name", { length: 80 }).notNull(),
+    operationKey: varchar("operation_key", { length: 200 }).notNull(),
+    runtimeKind: varchar("runtime_kind", { length: 24 }).notNull(),
+    outputKind: varchar("output_kind", { length: 80 }).notNull(),
+    purpose: varchar("purpose", { length: 80 }).notNull(),
+    dataClassification: varchar("data_classification", {
+      length: 16,
+    }).notNull(),
+    idempotencyHash: varchar("idempotency_hash", { length: 64 }).notNull(),
+    fingerprint: varchar("fingerprint", { length: 64 }).notNull(),
+    scopeHash: varchar("scope_hash", { length: 64 }).notNull(),
+    scopeSnapshot: jsonb("scope_snapshot")
+      .$type<AuthorizationScopeSnapshot>()
+      .notNull(),
+    deploymentIdentity: varchar("deployment_identity", {
+      length: 96,
+    }).notNull(),
+    releaseDigest: varchar("release_digest", { length: 71 }).notNull(),
+    offersDigest: varchar("offers_digest", { length: 71 }).notNull(),
+    policyDigest: varchar("policy_digest", { length: 64 }).notNull(),
+    revision: integer("revision").notNull().default(1),
+    grantSequence: integer("grant_sequence").notNull().default(1),
+    grantHash: varchar("grant_hash", { length: 64 }),
+    activeGrantGeneration: integer("active_grant_generation"),
+    pendingGrantHash: varchar("pending_grant_hash", { length: 64 }),
+    pendingGrantGeneration: integer("pending_grant_generation"),
+    pendingGrantExpiresAt: timestamp("pending_grant_expires_at", {
+      withTimezone: true,
+    }),
+    status: varchar("status", { length: 24 }).notNull(),
+    allowedMediaTypes: jsonb("allowed_media_types")
+      .$type<readonly string[]>()
+      .notNull(),
+    maxArtifactBytes: bigint("max_artifact_bytes", {
+      mode: "number",
+    }).notNull(),
+    maxArtifacts: integer("max_artifacts").notNull(),
+    maxTotalBytes: bigint("max_total_bytes", { mode: "number" }).notNull(),
+    artifactCount: integer("artifact_count").notNull().default(0),
+    completedByteSize: bigint("completed_byte_size", { mode: "number" })
+      .notNull()
+      .default(0),
+    scopeExpiresAt: timestamp("scope_expires_at", {
+      withTimezone: true,
+    }).notNull(),
+    fileExpiresAt: timestamp("file_expires_at", {
+      withTimezone: true,
+    }).notNull(),
+    refExpiresAt: timestamp("ref_expires_at", {
+      withTimezone: true,
+    }).notNull(),
+    createdAt: timestamp("created_at", { withTimezone: true })
+      .notNull()
+      .defaultNow(),
+    updatedAt: timestamp("updated_at", { withTimezone: true })
+      .notNull()
+      .defaultNow(),
+  },
+  (table) => [
+    uniqueIndex("uk_ai_output_scopes_run_kind").on(
+      table.runId,
+      table.outputKind,
+    ),
+    uniqueIndex("uk_ai_output_scopes_idempotency").on(table.idempotencyHash),
+    index("idx_ai_output_scopes_cleanup").on(
+      table.status,
+      table.updatedAt,
+      table.scopeExpiresAt,
+      table.fileExpiresAt,
+    ),
+    check(
+      "ck_ai_output_scopes_status",
+      sql`${table.status} in ('open', 'sealed', 'aborting', 'cleanup-pending', 'aborted', 'cleaned')`,
+    ),
+    check(
+      "ck_ai_output_scopes_runtime",
+      sql`${table.runtimeKind} in ('agent', 'document', 'speech', 'embedding')`,
+    ),
+    check(
+      "ck_ai_output_scopes_classification",
+      sql`${table.dataClassification} in ('public', 'internal', 'sensitive')`,
+    ),
+    check(
+      "ck_ai_output_scopes_limits",
+      sql`${table.maxArtifactBytes} > 0 and ${table.maxArtifactBytes} <= ${table.maxTotalBytes} and ${table.maxArtifacts} > 0 and ${table.maxTotalBytes} > 0 and ${table.artifactCount} >= 0 and ${table.completedByteSize} >= 0 and ${table.artifactCount} <= ${table.maxArtifacts} and ${table.completedByteSize} <= ${table.maxTotalBytes}`,
+    ),
+    check(
+      "ck_ai_output_scopes_digests",
+      sql`${table.idempotencyHash} ~ '^[0-9a-f]{64}$' and ${table.fingerprint} ~ '^[0-9a-f]{64}$' and ${table.scopeHash} ~ '^[0-9a-f]{64}$' and ${table.releaseDigest} ~ '^sha256:[0-9a-f]{64}$' and ${table.offersDigest} ~ '^sha256:[0-9a-f]{64}$' and ${table.policyDigest} ~ '^[0-9a-f]{64}$' and (${table.grantHash} is null or ${table.grantHash} ~ '^[0-9a-f]{64}$') and (${table.pendingGrantHash} is null or ${table.pendingGrantHash} ~ '^[0-9a-f]{64}$')`,
+    ),
+    check(
+      "ck_ai_output_scopes_grant",
+      sql`${table.revision} > 0 and ${table.grantSequence} > 0 and ((${table.grantHash} is null and ${table.activeGrantGeneration} is null) or (${table.grantHash} is not null and ${table.activeGrantGeneration} > 0 and ${table.activeGrantGeneration} <= ${table.grantSequence})) and ((${table.pendingGrantHash} is null and ${table.pendingGrantGeneration} is null and ${table.pendingGrantExpiresAt} is null) or (${table.status} = 'open' and ${table.pendingGrantHash} is not null and ${table.pendingGrantGeneration} = ${table.grantSequence} and (${table.activeGrantGeneration} is null or ${table.pendingGrantGeneration} > ${table.activeGrantGeneration}) and ${table.pendingGrantExpiresAt} <= ${table.scopeExpiresAt})) and (${table.status} <> 'cleaned' or (${table.grantHash} is null and ${table.activeGrantGeneration} is null and ${table.pendingGrantHash} is null))`,
+    ),
+    check(
+      "ck_ai_output_scopes_ttl",
+      sql`${table.createdAt} < ${table.scopeExpiresAt} and ${table.scopeExpiresAt} < ${table.refExpiresAt} and ${table.refExpiresAt} <= ${table.fileExpiresAt}`,
+    ),
+  ],
+);
+
+export const aiOutputArtifacts = pgTable(
+  "ai_output_artifacts",
+  {
+    artifactId: varchar("artifact_id", { length: 80 }).primaryKey(),
+    scopeId: varchar("scope_id", { length: 80 })
+      .notNull()
+      .references(() => aiOutputArtifactScopes.scopeId, {
+        onDelete: "restrict",
+      }),
+    outputKey: varchar("output_key", { length: 80 }).notNull(),
+    fingerprint: varchar("fingerprint", { length: 64 }).notNull(),
+    generation: integer("generation").notNull().default(1),
+    status: varchar("status", { length: 24 }).notNull(),
+    uploadSessionId: varchar("upload_session_id", { length: 40 }),
+    fileId: varchar("file_id", { length: 40 }),
+    filename: varchar("filename", { length: 240 }).notNull(),
+    mimeType: varchar("mime_type", { length: 120 }).notNull(),
+    expectedByteSize: bigint("expected_byte_size", {
+      mode: "number",
+    }).notNull(),
+    expectedSha256: varchar("expected_sha256", { length: 64 }).notNull(),
+    byteSize: bigint("byte_size", { mode: "number" }),
+    sha256: varchar("sha256", { length: 64 }),
+    createdAt: timestamp("created_at", { withTimezone: true })
+      .notNull()
+      .defaultNow(),
+    updatedAt: timestamp("updated_at", { withTimezone: true })
+      .notNull()
+      .defaultNow(),
+  },
+  (table) => [
+    uniqueIndex("uk_ai_output_artifacts_key").on(
+      table.scopeId,
+      table.outputKey,
+    ),
+    uniqueIndex("uk_ai_output_artifacts_session").on(table.uploadSessionId),
+    uniqueIndex("uk_ai_output_artifacts_file").on(table.fileId),
+    index("idx_ai_output_artifacts_scope_status").on(
+      table.scopeId,
+      table.status,
+    ),
+    check(
+      "ck_ai_output_artifacts_status",
+      sql`${table.status} in ('creating', 'uploading', 'completed', 'aborting', 'cleanup-pending', 'aborted')`,
+    ),
+    check(
+      "ck_ai_output_artifacts_expected",
+      sql`${table.expectedByteSize} >= 0 and ${table.expectedSha256} ~ '^[0-9a-f]{64}$' and ${table.fingerprint} ~ '^[0-9a-f]{64}$'`,
+    ),
+    check(
+      "ck_ai_output_artifacts_actual",
+      sql`(${table.byteSize} is null and ${table.sha256} is null) or (${table.byteSize} >= 0 and ${table.sha256} ~ '^[0-9a-f]{64}$')`,
+    ),
+    check(
+      "ck_ai_output_artifacts_completed",
+      sql`${table.status} <> 'completed' or (${table.uploadSessionId} is not null and ${table.fileId} is not null and ${table.byteSize} is not null and ${table.sha256} is not null)`,
+    ),
+  ],
+);

package/template/packages/database/src/schema/embedding-runtime.ts

@@ -0,0 +1,62 @@
+import { sql } from "drizzle-orm";
+import {
+  check,
+  doublePrecision,
+  index,
+  jsonb,
+  pgTable,
+  uniqueIndex,
+  varchar,
+} from "drizzle-orm/pg-core";
+import type { AuthorizationScopeSnapshot } from "@southwind-ai/shared";
+
+export interface EmbeddingRunArtifact {
+  readonly itemId: string;
+  readonly value: string;
+  readonly mediaType: string;
+  readonly byteSize: number;
+  readonly sha256: string;
+}
+
+/** Server-owned authorization coordinate; Runtime never receives Actor/scope facts. */
+export const embeddingRunBindings = pgTable(
+  "embedding_run_bindings",
+  {
+    bindingId: varchar("binding_id", { length: 80 }).primaryKey(),
+    runId: varchar("run_id", { length: 80 }),
+    operationKey: varchar("operation_key", { length: 200 }).notNull(),
+    moduleName: varchar("module_name", { length: 80 }).notNull(),
+    actorId: varchar("actor_id", { length: 64 }).notNull(),
+    idempotencyHash: varchar("idempotency_hash", { length: 64 }).notNull(),
+    fingerprint: varchar("fingerprint", { length: 64 }).notNull(),
+    scopeHash: varchar("scope_hash", { length: 64 }).notNull(),
+    scopeSnapshot: jsonb("scope_snapshot")
+      .$type<AuthorizationScopeSnapshot>()
+      .notNull(),
+    deploymentPin:
+      jsonb("deployment_pin").$type<
+        Record<string, string | number | boolean>
+      >(),
+    artifactRefs: jsonb("artifact_refs")
+      .$type<readonly EmbeddingRunArtifact[]>()
+      .notNull()
+      .default(sql`'[]'::jsonb`),
+    terminalAuditAt: doublePrecision("terminal_audit_at"),
+    createdAt: doublePrecision("created_at").notNull(),
+    expiresAt: doublePrecision("expires_at").notNull(),
+  },
+  (table) => [
+    uniqueIndex("uk_embedding_run_bindings_run").on(table.runId),
+    uniqueIndex("uk_embedding_run_bindings_idempotency").on(
+      table.idempotencyHash,
+    ),
+    index("idx_embedding_run_bindings_actor").on(
+      table.actorId,
+      table.expiresAt,
+    ),
+    check(
+      "ck_embedding_run_binding_hashes",
+      sql`${table.idempotencyHash} ~ '^[0-9a-f]{64}$' and ${table.fingerprint} ~ '^[0-9a-f]{64}$' and ${table.scopeHash} ~ '^[0-9a-f]{64}$'`,
+    ),
+  ],
+);

package/template/packages/database/src/schema/file-storage.ts

@@ -1,5 +1,6 @@
 import {
   bigint,
+  check,
   index,
   integer,
   pgTable,
@@ -7,6 +8,7 @@ import {
   uniqueIndex,
   varchar,
 } from "drizzle-orm/pg-core";
+import { sql } from "drizzle-orm";
 
 export const fileUploadSessions = pgTable(
   "file_upload_sessions",
@@ -14,6 +16,10 @@ export const fileUploadSessions = pgTable(
     id: varchar("id", { length: 40 }).primaryKey(),
     ownerId: varchar("owner_id", { length: 64 }).notNull(),
     purpose: varchar("purpose", { length: 80 }).notNull(),
+    moduleName: varchar("module_name", { length: 80 }),
+    authorizationScopeHash: varchar("authorization_scope_hash", {
+      length: 64,
+    }),
     filename: varchar("filename", { length: 240 }).notNull(),
     extension: varchar("extension", { length: 24 }).notNull(),
     mimeType: varchar("mime_type", { length: 120 }).notNull(),
@@ -42,6 +48,18 @@ export const fileUploadSessions = pgTable(
       table.createdAt,
     ),
     index("idx_file_upload_sessions_expiry").on(table.status, table.expiresAt),
+    check(
+      "ck_file_upload_sessions_authorization_binding",
+      sql`(
+        (${table.moduleName} is null and ${table.authorizationScopeHash} is null)
+        or (
+          ${table.moduleName} is not null
+          and ${table.authorizationScopeHash} is not null
+          and ${table.moduleName} ~ '^[a-z0-9][a-z0-9._-]{0,79}$'
+          and ${table.authorizationScopeHash} ~ '^[0-9a-f]{64}$'
+        )
+      )`,
+    ),
   ],
 );
 

package/template/packages/database/src/schema/index.ts

@@ -6,6 +6,7 @@ export * from "./durable-jobs.js";
 // @windy-module system.scheduler end
 // @windy-module system.storage begin
 export * from "./file-storage.js";
+export * from "./report-staging.js";
 // @windy-module system.storage end
 export * from "./governance.js";
 export type { GovernedExportScopeSnapshot } from "./common.js";
@@ -30,4 +31,6 @@ export * from "./workflow.js";
 // @windy-module system.workflow end
 // @windy-module system.agent begin
 export * from "./agent-runtime.js";
+export * from "./embedding-runtime.js";
+export * from "./ai-output-artifacts.js";
 // @windy-module system.agent end