crewswarm 0.9.2 → 0.9.3

package/lib/engines/rt-envelope.mjs

@@ -1612,6 +1612,7 @@ export async function handleRealtimeEnvelope(envelope, client, bridge) {
       payload: {
         source: CREWSWARM_RT_AGENT,
         error: message,
+        engineUsed: typeof engineUsed !== "undefined" ? engineUsed : null,
         idempotencyKey: dispatchKey,
         attempt: dispatchAttempt,
       },

package/lib/engines/runners.mjs

@@ -1181,6 +1181,7 @@ export async function runClaudeCodeTask(prompt, payload = {}) {
     const agentPrefix = agentId ? `[${agentId}]` : "";
     const titledPrompt = agentPrefix ? `${agentPrefix} ${String(prompt)}` : String(prompt);
 
+    const emptyMcpCfg = path.join(os.homedir(), ".crewswarm", "config", "empty-mcp.json");
     const args = [
       "-p",
       "--dangerously-skip-permissions",
@@ -1205,8 +1206,10 @@ export async function runClaudeCodeTask(prompt, payload = {}) {
       }
     }
     
-    // CRITICAL: Claude Code expects the prompt as a command-line argument, NOT via stdin
-    args.push(titledPrompt);
+    // Skip user MCP servers to avoid 30s+ init hangs
+    args.push("--strict-mcp-config", "--mcp-config", emptyMcpCfg);
+    // -- separates flags from prompt (--mcp-config is variadic and eats positional args)
+    args.push("--", titledPrompt);
 
     if (!which(CLAUDE_CODE_BIN)) {
       throw new Error(`Claude Code CLI not found: "${CLAUDE_CODE_BIN}". Install with: npm i -g @anthropic-ai/claude-code`);

package/lib/runtime/paths.mjs

@@ -21,14 +21,16 @@ let _stateDir = null;
  */
 export function getConfigDir() {
   if (_configDir) return _configDir;
-  
-  if (process.env.CREWSWARM_TEST_MODE === "true") {
+
+  if (process.env.CREWSWARM_CONFIG_DIR) {
+    _configDir = process.env.CREWSWARM_CONFIG_DIR;
+  } else if (process.env.CREWSWARM_TEST_MODE === "true") {
     // Use a consistent temp dir for the entire test process (not per-call)
     _configDir = path.join(os.tmpdir(), `crewswarm-test-${process.pid}`);
   } else {
-    _configDir = process.env.CREWSWARM_CONFIG_DIR || path.join(os.homedir(), ".crewswarm");
+    _configDir = path.join(os.homedir(), ".crewswarm");
   }
-  
+
   fs.mkdirSync(_configDir, { recursive: true });
   return _configDir;
 }
@@ -39,14 +41,16 @@ export function getConfigDir() {
  */
 export function getStateDir() {
   if (_stateDir) return _stateDir;
-  
-  if (process.env.CREWSWARM_TEST_MODE === "true") {
+
+  if (process.env.CREWSWARM_STATE_DIR) {
+    _stateDir = process.env.CREWSWARM_STATE_DIR;
+  } else if (process.env.CREWSWARM_TEST_MODE === "true") {
     // Use a consistent temp dir for the entire test process (not per-call)
     _stateDir = path.join(os.tmpdir(), `crewswarm-test-${process.pid}`);
   } else {
-    _stateDir = process.env.CREWSWARM_STATE_DIR || path.join(os.homedir(), ".crewswarm");
+    _stateDir = path.join(os.homedir(), ".crewswarm");
   }
-  
+
   fs.mkdirSync(_stateDir, { recursive: true });
   return _stateDir;
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "crewswarm",
-  "version": "0.9.2",
-  "description": "Local-first multi-agent orchestration platform — coordinate AI coding agents, LLMs, and tools from a single dashboard",
+  "version": "0.9.3",
+  "description": "Local-first multi-agent orchestration platform \u2014 coordinate AI coding agents, LLMs, and tools from a single dashboard",
   "type": "module",
   "license": "MIT",
   "repository": {
@@ -29,10 +29,11 @@
     "engines/",
     "prompts/",
     "apps/dashboard/dist/",
-    "apps/dashboard/src/",
-    "apps/dashboard/index.html",
-    "apps/dashboard/package.json",
-    "apps/vibe/",
+    "apps/vibe/dist/",
+    "apps/vibe/package.json",
+    "apps/vibe/public/",
+    "apps/vibe/server.mjs",
+    "apps/vibe/watch-server.mjs",
     "contrib/openclaw-plugin/",
     "crew-lead.mjs",
     "gateway-bridge.mjs",
@@ -61,14 +62,25 @@
     "@whiskeysockets/baileys": "^7.0.0-rc.9"
   },
   "scripts": {
-    "postinstall": "node -e \"try{require('child_process').execSync('git --version',{stdio:'pipe'})}catch{console.log('\\n⚠️  git not found. Install git for full functionality (WhatsApp bridge, crew-cli git tools).\\n   macOS: xcode-select --install\\n   Ubuntu: sudo apt install git\\n   Alpine: apk add git\\n')}\"",
+    "postinstall": "node -e \"try{require('child_process').execSync('git --version',{stdio:'pipe'})}catch{console.log('\\n\u26a0\ufe0f  git not found. Install git for full functionality (WhatsApp bridge, crew-cli git tools).\\n   macOS: xcode-select --install\\n   Ubuntu: sudo apt install git\\n   Alpine: apk add git\\n')}\"",
     "start": "node scripts/start.mjs",
-    "test": "node --test test/unit/*.test.mjs test/mention-participants.test.mjs test/project-messages-chat-protocol.test.mjs && npm --prefix crew-cli test",
-    "test:unit": "node --test test/unit/*.test.mjs",
-    "test:integration": "PM_LOOP_TEST_MODE=1 node --test test/integration/*.test.mjs",
+    "test": "node --test --test-reporter=./scripts/test-reporter.mjs test/unit/*.test.mjs test/mention-participants.test.mjs test/project-messages-chat-protocol.test.mjs && npm --prefix crew-cli test",
+    "test:unit": "node --test --test-reporter=./scripts/test-reporter.mjs test/unit/*.test.mjs",
+    "test:integration": "PM_LOOP_TEST_MODE=1 node --test --test-reporter=./scripts/test-reporter.mjs test/integration/*.test.mjs",
     "test:integration:bounded": "node scripts/run-integration-bounded.mjs",
-    "test:e2e": "node --test test/e2e/*.test.mjs",
-    "test:all": "PM_LOOP_TEST_MODE=1 node --test test/unit/*.test.mjs test/integration/*.test.mjs test/e2e/*.test.mjs",
+    "test:e2e": "node --test --test-reporter=./scripts/test-reporter.mjs test/e2e/*.test.mjs",
+    "test:all": "PM_LOOP_TEST_MODE=1 node --test --test-reporter=./scripts/test-reporter.mjs test/unit/*.test.mjs test/integration/*.test.mjs test/e2e/*.test.mjs",
+    "test:coverage:root": "node --test --experimental-test-coverage test/unit/*.test.mjs",
+    "test:coverage": "node scripts/coverage-report.mjs",
+    "test:coverage:summary": "node scripts/coverage-summary.mjs",
+    "test:live:providers": "node scripts/live-provider-failover-matrix.mjs",
+    "test:live:providers:matrix": "node scripts/live-provider-matrix.mjs",
+    "test:live:providers:smoke": "node scripts/live-provider-matrix.mjs --smoke",
+    "test:live:clis": "node scripts/live-cli-matrix.mjs",
+    "test:live:clis:smoke": "node scripts/live-cli-matrix.mjs --smoke",
+    "test:live:bridges": "node scripts/live-bridge-matrix.mjs",
+    "test:live:crewchat": "node scripts/live-crewchat-check.mjs",
+    "test:live": "node scripts/live-provider-failover-matrix.mjs && node scripts/live-bridge-matrix.mjs && node scripts/live-crewchat-check.mjs",
     "docs:api": "node scripts/generate-api-docs.mjs",
     "changelog:generate": "node scripts/generate-changelog.mjs",
     "changelog:release": "node scripts/generate-changelog.mjs --release",
@@ -86,7 +98,12 @@
     "stop-crew": "node scripts/start-crew.mjs --stop",
     "dashboard": "node scripts/dashboard.mjs",
     "vibe": "node apps/vibe/server.mjs",
-    "vibe:watch": "node apps/vibe/watch-server.mjs",
+    "vibe:build": "cd apps/vibe && npm run build",
+    "vibe:start": "cd apps/vibe && NODE_DISABLE_COMPILE_CACHE=1 npm start",
+    "vibe:watch": "NODE_DISABLE_COMPILE_CACHE=1 node apps/vibe/watch-server.mjs",
+    "vibe:full": "bash scripts/start-studio-full.sh",
+    "test:e2e:vibe": "node node_modules/playwright/cli.js test --config=playwright.config.js",
+    "test:e2e:vibe:headed": "node node_modules/playwright/cli.js test --config=playwright.config.js --headed",
     "crew-lead": "node crew-lead.mjs",
     "mcp": "node scripts/mcp-server.mjs",
     "studio": "cd apps/vibe && npm run dev",
@@ -100,10 +117,13 @@
     "smoke:static": "bash scripts/smoke.sh",
     "health": "node scripts/health-check.mjs",
     "doctor": "node scripts/doctor.mjs",
-    "release:check": "bash scripts/release-check.sh"
+    "release:check": "bash scripts/release-check.sh",
+    "test:report": "node scripts/test-report-summary.mjs",
+    "test:rerun": "node scripts/test-rerun.mjs",
+    "test:stale": "node scripts/test-rerun.mjs --stale"
   },
   "devDependencies": {
     "@playwright/test": "^1.58.2",
     "puppeteer-core": "^24.40.0"
   }
-}
+}

package/scripts/capture-build-flow.mjs

@@ -0,0 +1,118 @@
+#!/usr/bin/env node
+/**
+ * capture-build-flow.mjs — Puppeteer script that captures dashboard
+ * screenshots during a build flow for documentation / demo purposes.
+ *
+ * Usage:  node scripts/capture-build-flow.mjs
+ * Requires: dashboard running at http://127.0.0.1:4319
+ */
+
+import { mkdir } from "node:fs/promises";
+import { fileURLToPath } from "node:url";
+import { dirname, resolve } from "node:path";
+import puppeteer from "puppeteer-core";
+
+const __dirname = dirname(fileURLToPath(import.meta.url));
+const ROOT = resolve(__dirname, "..");
+const OUT_DIR = resolve(ROOT, "website/screenshots/flow");
+const BASE_URL = "http://127.0.0.1:4319";
+
+const STEPS = [
+  { name: "step1-build-tab",    hash: "build",  waitMs: 2000  },
+  { name: "step2-requirement",  action: "type"                 },
+  { name: "step3-plan",         action: "plan",  waitMs: 20000 },
+  { name: "step4-chat",         hash: "chat",   waitMs: 3000  },
+  { name: "step5-agents",       hash: "swarm",  waitMs: 2000  },
+  { name: "step6-rt-messages",  hash: "rt",     waitMs: 2000  },
+];
+
+async function screenshot(page, name) {
+  const path = resolve(OUT_DIR, `${name}.webp`);
+  await page.screenshot({ path, type: "webp", quality: 85 });
+}
+
+async function sleep(ms) {
+  return new Promise((r) => setTimeout(r, ms));
+}
+
+async function main() {
+  await mkdir(OUT_DIR, { recursive: true });
+
+  const browser = await puppeteer.launch({
+    headless: true,
+    executablePath:
+      "/Applications/Google Chrome.app/Contents/MacOS/Google Chrome",
+    args: ["--no-sandbox"],
+    defaultViewport: { width: 1440, height: 960 },
+  });
+
+  const page = await browser.newPage();
+
+  // Step 1 — navigate to #build
+  await page.goto(`${BASE_URL}/#build`, { waitUntil: "domcontentloaded" });
+  await sleep(2000);
+  await screenshot(page, "step1-build-tab");
+
+  // Step 2 — type requirement
+  const REQUIREMENT = "Create a simple hello world HTML page";
+  // Try a few selectors for the requirement input
+  const textareaSelector = await page
+    .waitForSelector("textarea, #requirement, .requirement-input", {
+      timeout: 5000,
+    })
+    .catch(() => null);
+
+  if (textareaSelector) {
+    await textareaSelector.click();
+    await textareaSelector.type(REQUIREMENT, { delay: 30 });
+  }
+  await screenshot(page, "step2-requirement");
+
+  // Step 3 — click Plan and wait for result
+  await page.evaluate(() => {
+    const buttons = [...document.querySelectorAll("button")];
+    const planBtn = buttons.find((b) => /plan/i.test(b.textContent));
+    if (planBtn) planBtn.click();
+  });
+  await sleep(20000);
+  await screenshot(page, "step3-plan");
+
+  // Step 4 — Chat tab
+  await page.goto(`${BASE_URL}/#chat`, { waitUntil: "domcontentloaded" });
+  await sleep(3000);
+  await screenshot(page, "step4-chat");
+
+  // Step 5 — Swarm / agents tab
+  await page.goto(`${BASE_URL}/#swarm`, { waitUntil: "domcontentloaded" });
+  await sleep(2000);
+  await screenshot(page, "step5-agents");
+
+  // Step 6 — RT messages tab
+  await page.goto(`${BASE_URL}/#rt`, { waitUntil: "domcontentloaded" });
+  await sleep(2000);
+  await screenshot(page, "step6-rt-messages");
+
+  await browser.close();
+
+  const files = [
+    "step1-build-tab.webp",
+    "step2-requirement.webp",
+    "step3-plan.webp",
+    "step4-chat.webp",
+    "step5-agents.webp",
+    "step6-rt-messages.webp",
+  ];
+
+  console.log(`\nCaptured ${files.length} build flow frames:`);
+  for (const f of files) {
+    console.log(`  website/screenshots/flow/${f}`);
+  }
+  console.log(
+    `\nTo create animated webp: convert -delay 200 website/screenshots/flow/*.webp website/screenshots/build-flow.webp`,
+  );
+}
+
+main().catch((err) => {
+  console.error("Build flow capture failed:", err.message);
+  process.exit(1);
+});

package/scripts/coverage-report.mjs

@@ -0,0 +1,209 @@
+#!/usr/bin/env node
+
+import fs from "node:fs";
+import path from "node:path";
+import { spawnSync } from "node:child_process";
+
+const ROOT = process.cwd();
+const OUT_DIR = path.join(ROOT, "coverage");
+fs.mkdirSync(OUT_DIR, { recursive: true });
+
+function runStep(name, command, cwd = ROOT, allowFailure = false) {
+  console.log(`\n== ${name} ==`);
+  const result = spawnSync(command, {
+    cwd,
+    shell: true,
+    encoding: "utf8",
+    env: process.env,
+    maxBuffer: 20 * 1024 * 1024,
+  });
+  const combined = `${result.stdout || ""}${result.stderr || ""}`;
+  fs.writeFileSync(path.join(OUT_DIR, `${name}.log`), combined);
+  if (combined.trim()) process.stdout.write(combined);
+  if (result.status !== 0 && !allowFailure) {
+    throw new Error(`${name} failed with exit code ${result.status}`);
+  }
+  return { output: combined, status: result.status ?? 0 };
+}
+
+function extractCoverageTail(output) {
+  const lines = output.split("\n");
+  const start = lines.findIndex((line) => /^\s*file\s*\|/i.test(line) || /^\s*all files\s*\|/i.test(line));
+  if (start === -1) return "Coverage summary not found in command output.";
+  return lines.slice(start).join("\n").trim();
+}
+
+/**
+ * Parse the "all files" summary line from Node's --experimental-test-coverage output.
+ * Format: `ℹ all files  | <line%> | <branch%> | <funcs%> |`
+ * Returns { lines, branches, functions } or null if not found.
+ */
+function parseCoverageSummary(output) {
+  const lines = output.split("\n");
+  for (const line of lines) {
+    const match = line.match(/all files\s*\|\s*([\d.]+)\s*\|\s*([\d.]+)\s*\|\s*([\d.]+)/);
+    if (match) {
+      return {
+        lines: parseFloat(match[1]),
+        branches: parseFloat(match[2]),
+        functions: parseFloat(match[3]),
+        // Node's built-in coverage reports line% (which is effectively statements)
+        statements: parseFloat(match[1]),
+      };
+    }
+  }
+  return null;
+}
+
+/**
+ * Compute a weighted average of two metric objects.
+ * Uses a simple average (equal weight) since we don't have file counts per suite.
+ */
+function averageMetrics(a, b) {
+  if (!a && !b) return { statements: 0, branches: 0, functions: 0, lines: 0 };
+  if (!a) return b;
+  if (!b) return a;
+  const round1 = (n) => Math.round(n * 10) / 10;
+  return {
+    statements: round1((a.statements + b.statements) / 2),
+    branches: round1((a.branches + b.branches) / 2),
+    functions: round1((a.functions + b.functions) / 2),
+    lines: round1((a.lines + b.lines) / 2),
+  };
+}
+
+try {
+  const rootCoverage = runStep(
+    "root-unit-coverage",
+    "node --test --experimental-test-coverage test/unit/*.test.mjs"
+  );
+  const rootIntegration = runStep(
+    "root-integration-bounded",
+    "node scripts/run-integration-bounded.mjs",
+    ROOT,
+    true
+  );
+  const crewCliCoverage = runStep(
+    "crew-cli-coverage",
+    "npm run test:coverage",
+    path.join(ROOT, "crew-cli")
+  );
+
+  // Parse metrics from each suite
+  const rootMetrics = parseCoverageSummary(rootCoverage.output);
+  const crewCliMetrics = parseCoverageSummary(crewCliCoverage.output);
+  const overallMetrics = averageMetrics(rootMetrics, crewCliMetrics);
+
+  // Build machine-readable summary JSON
+  const summaryJson = {
+    timestamp: new Date().toISOString(),
+    root: rootMetrics
+      ? { statements: rootMetrics.statements, branches: rootMetrics.branches, functions: rootMetrics.functions, lines: rootMetrics.lines }
+      : null,
+    crewCli: crewCliMetrics
+      ? { statements: crewCliMetrics.statements, branches: crewCliMetrics.branches, functions: crewCliMetrics.functions, lines: crewCliMetrics.lines }
+      : null,
+    overall: overallMetrics
+      ? { statements: overallMetrics.statements, branches: overallMetrics.branches, functions: overallMetrics.functions, lines: overallMetrics.lines }
+      : null,
+  };
+
+  const summaryPath = path.join(OUT_DIR, "coverage-summary.json");
+  fs.writeFileSync(summaryPath, JSON.stringify(summaryJson, null, 2) + "\n");
+
+  // Build markdown report
+  function metricsTable(metrics) {
+    if (!metrics) return "Coverage metrics could not be parsed.";
+    return `| Metric     | Value   |
+|------------|---------|
+| Statements | ${metrics.statements.toFixed(1)}%  |
+| Branches   | ${metrics.branches.toFixed(1)}%  |
+| Functions  | ${metrics.functions.toFixed(1)}%  |
+| Lines      | ${metrics.lines.toFixed(1)}%  |`;
+  }
+
+  const report = `# Repo Coverage Report
+
+Generated: ${summaryJson.timestamp}
+
+## Root unit coverage
+
+${metricsTable(rootMetrics)}
+
+<details><summary>Full file-by-file report</summary>
+
+\`\`\`
+${extractCoverageTail(rootCoverage.output)}
+\`\`\`
+
+</details>
+
+## Root integration verification
+
+Exit code: ${rootIntegration.status}
+
+<details><summary>Output</summary>
+
+\`\`\`
+${rootIntegration.output.trim() || "No output."}
+\`\`\`
+
+</details>
+
+## crew-cli coverage
+
+${metricsTable(crewCliMetrics)}
+
+<details><summary>Full file-by-file report</summary>
+
+\`\`\`
+${extractCoverageTail(crewCliCoverage.output)}
+\`\`\`
+
+</details>
+
+## Overall (average across suites)
+
+${metricsTable(overallMetrics)}
+
+## Notes
+
+- Root coverage currently reports hermetic unit coverage only.
+- Integration and E2E surfaces are reported separately because many depend on running services or external credentials.
+- Use \`docs/CANONICAL/COVERAGE-MATRIX.md\` for feature-by-feature status.
+- Machine-readable metrics: \`coverage/coverage-summary.json\`
+
+## Logs
+
+- coverage/root-unit-coverage.log
+- coverage/root-integration-bounded.log
+- coverage/crew-cli-coverage.log
+`;
+
+  const reportPath = path.join(OUT_DIR, "coverage-report.md");
+  fs.writeFileSync(reportPath, report);
+
+  // Print summary to stdout
+  console.log("\n========================================");
+  console.log("  Coverage Summary");
+  console.log("========================================");
+  if (rootMetrics) {
+    console.log(`  Root:     ${rootMetrics.lines.toFixed(1)}% lines | ${rootMetrics.branches.toFixed(1)}% branches | ${rootMetrics.functions.toFixed(1)}% funcs`);
+  } else {
+    console.log("  Root:     (metrics not available)");
+  }
+  if (crewCliMetrics) {
+    console.log(`  crew-cli: ${crewCliMetrics.lines.toFixed(1)}% lines | ${crewCliMetrics.branches.toFixed(1)}% branches | ${crewCliMetrics.functions.toFixed(1)}% funcs`);
+  } else {
+    console.log("  crew-cli: (metrics not available)");
+  }
+  if (overallMetrics) {
+    console.log(`  Overall:  ${overallMetrics.lines.toFixed(1)}% lines | ${overallMetrics.branches.toFixed(1)}% branches | ${overallMetrics.functions.toFixed(1)}% funcs`);
+  }
+  console.log("========================================");
+  console.log(`\nWrote ${path.relative(ROOT, reportPath)}`);
+  console.log(`Wrote ${path.relative(ROOT, summaryPath)}`);
+} catch (error) {
+  console.error(`\nCoverage report failed: ${error.message}`);
+  process.exit(1);
+}

package/scripts/coverage-summary.mjs

@@ -0,0 +1,47 @@
+#!/usr/bin/env node
+
+/**
+ * Prints the most recent coverage summary from coverage/coverage-summary.json
+ * without re-running any tests.
+ *
+ * Usage: node scripts/coverage-summary.mjs
+ *   or:  npm run test:coverage:summary
+ */
+
+import fs from "node:fs";
+import path from "node:path";
+
+const ROOT = process.cwd();
+const summaryPath = path.join(ROOT, "coverage", "coverage-summary.json");
+
+if (!fs.existsSync(summaryPath)) {
+  console.error(
+    `No coverage summary found at ${summaryPath}\n` +
+    `Run "npm run test:coverage" first to generate coverage data.`
+  );
+  process.exit(1);
+}
+
+let data;
+try {
+  data = JSON.parse(fs.readFileSync(summaryPath, "utf8"));
+} catch (err) {
+  console.error(`Failed to parse ${summaryPath}: ${err.message}`);
+  process.exit(1);
+}
+
+function fmtRow(label, metrics) {
+  if (!metrics) return `  ${label.padEnd(12)} (no data)`;
+  return `  ${label.padEnd(12)} ${String(metrics.lines.toFixed(1) + "%").padStart(7)} lines | ${String(metrics.branches.toFixed(1) + "%").padStart(7)} branches | ${String(metrics.functions.toFixed(1) + "%").padStart(7)} funcs`;
+}
+
+console.log("========================================");
+console.log("  Coverage Summary");
+console.log(`  Generated: ${data.timestamp}`);
+console.log("========================================");
+console.log(fmtRow("Root", data.root));
+console.log(fmtRow("crew-cli", data.crewCli));
+console.log(fmtRow("Overall", data.overall));
+console.log("========================================");
+console.log(`\nFull report: coverage/coverage-report.md`);
+console.log(`JSON data:   coverage/coverage-summary.json`);

package/scripts/dashboard-validation.mjs

@@ -88,6 +88,13 @@ export const StartBuildSchema = z.object({
   projectId: ProjectIdSchema.optional(),
 });
 
+export const EnhancePromptSchema = z.object({
+  text: z.string().min(1).max(10000),
+  projectId: ProjectIdSchema.optional(),
+  engine: z.enum(['claude', 'codex', 'cursor', 'gemini', 'gemini-cli', 'opencode', 'crew-cli']).optional(),
+  model: z.string().max(200).optional(),
+});
+
 export const StopBuildSchema = z.object({
   projectId: ProjectIdSchema.optional(),
 });
@@ -187,6 +194,73 @@ export const UpdateConfigSchema = z.object({
   geminiCliModel: z.string().optional(),
 });
 
+// ── Agent Config (create / delete / reset) ───────────────────────────────
+export const AgentConfigCreateSchema = z.object({
+  id: z.string().min(1).max(50),
+  model: ModelNameSchema.optional(),
+  name: z.string().max(100).optional(),
+  emoji: z.string().max(10).optional(),
+  theme: z.string().max(200).optional(),
+  systemPrompt: z.string().max(50000).optional(),
+  alsoAllow: z.array(z.string()).optional(),
+});
+
+export const AgentConfigDeleteSchema = z.object({
+  agentId: z.string().min(1).max(50),
+});
+
+export const AgentResetSessionSchema = z.object({
+  agentId: z.string().min(1).max(50),
+});
+
+// ── Providers ────────────────────────────────────────────────────────────
+export const ProviderAddSchema = z.object({
+  id: z.string().min(1).max(100),
+  baseUrl: z.string().min(1).max(1000),
+  apiKey: z.string().optional(),
+  api: z.string().max(100).optional(),
+});
+
+export const ProviderSaveSchema = z.object({
+  providerId: z.string().min(1).max(100),
+  apiKey: z.string().min(1),
+});
+
+export const ProviderTestSchema = z.object({
+  providerId: z.string().min(1).max(100),
+});
+
+export const ProviderBuiltinTestSchema = z.object({
+  providerId: z.string().min(1).max(100),
+});
+
+// ── Continuous Build ─────────────────────────────────────────────────────
+export const ContinuousBuildSchema = z.object({
+  requirement: z.string().min(1).max(10000),
+  projectId: ProjectIdSchema.optional(),
+});
+
+// ── Roadmap ──────────────────────────────────────────────────────────────
+export const RoadmapWriteSchema = z.object({
+  roadmapFile: z.string().min(1).max(500),
+  content: z.string(),
+});
+
+export const RoadmapRetryFailedSchema = z.object({
+  roadmapFile: z.string().min(1).max(500),
+});
+
+// ── Contacts ─────────────────────────────────────────────────────────────
+export const ContactDeleteSchema = z.object({
+  contactId: z.string().min(1).max(200),
+});
+
+export const ContactSendSchema = z.object({
+  contactId: z.string().min(1).max(200),
+  message: z.string().min(1).max(10000),
+  platform: z.string().max(50).optional(),
+});
+
 // ── Validation Helper ─────────────────────────────────────────────────────
 export function validate(schema, data) {
   try {