negotium 0.1.11 → 0.1.13

package/dist/chunk-bftftsgq.js

@@ -1,1637 +0,0 @@
-// @bun
-import {
-  McpHost,
-  McpManifest
-} from "./chunk-edb07sjp.js";
-import {
-  TopicServiceError,
-  TopicValidationError,
-  acquireRuntimeProcessLease,
-  createSelfConfigToolDefinitions,
-  deleteVaultEntry,
-  executeVaultCommand,
-  listBackgroundSessionsForUser,
-  listVaultEntries,
-  nodeRequestHandlerNames,
-  onShutdown,
-  registerTopic,
-  restartTopicSession,
-  runNodeRequestHandlers,
-  runShutdown,
-  saveVaultEntry,
-  startNegotiumNodeModules,
-  startSessionInboxWorker,
-  submitUserMessage,
-  switchTopicEffort,
-  switchTopicModel,
-  topicService,
-  visualToolDefinitions
-} from "./chunk-93krf6ng.js";
-import"./chunk-fswhzdf5.js";
-import {
-  TopicArchiveRequiredError,
-  deleteTopicCascade,
-  sessionInboxPath
-} from "./chunk-cxa7yghg.js";
-import"./chunk-59d0shyj.js";
-import"./chunk-rbvctv1n.js";
-import"./chunk-1k7t7bnx.js";
-import {
-  createAskUserToolDefinition,
-  dispatchPeerRuntimeAskUser,
-  dispatchPeerRuntimeFile,
-  dispatchPeerRuntimeSelfConfig,
-  dispatchPeerRuntimeSpawn,
-  startDurableTurnRequestWorker
-} from "./chunk-g144wdrs.js";
-import {
-  TopicDeriveBusyError,
-  TopicTitleConflictError,
-  getTopics,
-  getVisibleTopics,
-  isParticipant
-} from "./chunk-91ckrvk8.js";
-import {
-  createSpawnSubagentToolDefinition,
-  createSubagentManagementToolDefinitions,
-  errorResult,
-  killAllBgBash,
-  setFileHooks,
-  storeLocalFileAsUpload,
-  sweepStaleSubagentCards,
-  textResult
-} from "./chunk-66y0hr8c.js";
-import {
-  WsHub,
-  appendApiMessage,
-  ensurePersonalGeneral,
-  killAllPlaywright,
-  latestRuntimeEventSeq,
-  listApiMessages,
-  listRecentRuntimeEventsForTopic,
-  listRuntimeEventsAfter,
-  runtimeBus
-} from "./chunk-h9vbhhgr.js";
-import {
-  FROM_AUTO_CONTINUE,
-  getTopic,
-  getTopicByNameForUser
-} from "./chunk-f361dwba.js";
-import"./chunk-8cahx7xc.js";
-import"./chunk-6d4fmea5.js";
-import"./chunk-61px0717.js";
-import"./chunk-tsstrcfc.js";
-import {
-  getApiTopicConfig
-} from "./chunk-6ah5farg.js";
-import {
-  NEGOTIUM_VERSION,
-  RUNTIME_MCP_BASE_PATH,
-  RUNTIME_MCP_KEY,
-  errMsg,
-  isSensitivePath,
-  killOwnedCodexTreesForShutdown,
-  resolveRuntimeMcpToken,
-  setNodeMcpServers,
-  setRuntimeMcpPort
-} from "./chunk-41ygvg5k.js";
-import"./chunk-m9e3tbr8.js";
-import {
-  appendJsonlEntry
-} from "./chunk-mh5mexsf.js";
-import {
-  DATA_DIR,
-  EFFORT_VALUES,
-  NEGOTIUM_PORT,
-  NODE_CONTROL_TOKEN,
-  RUN_DIR,
-  STATE_DIR,
-  WORKSPACE_DIR
-} from "./chunk-qwy57177.js";
-import"./chunk-j0kjscb7.js";
-import {
-  abortAllRooms,
-  abortRoom,
-  getRoomQuery,
-  listRunningTopicQueries
-} from "./chunk-h980hb2n.js";
-import {
-  logger
-} from "./chunk-ffefbd3r.js";
-import"./chunk-pg1azh6n.js";
-import"./chunk-1a6kv9vt.js";
-import"./chunk-f5xgprg1.js";
-import {
-  __require,
-  __toESM
-} from "./chunk-hwy3n31w.js";
-
-// ../../packages/node/src/index.ts
-import { createServer } from "net";
-// ../../packages/mcp/src/node-tools.ts
-import { z } from "zod";
-function resolveTopicForUser(ctx, ref) {
-  const trimmed = ref.trim();
-  if (!trimmed)
-    return { error: "Error: topic is required." };
-  const notFound = `Error: topic '${trimmed}' not found (or not uniquely named). Use list_topics to see available topics.`;
-  const byId = getTopic(trimmed);
-  if (byId) {
-    if (!isParticipant(byId, ctx.userId))
-      return { error: notFound };
-    return { topic: byId };
-  }
-  const byTitle = getTopicByNameForUser(trimmed, ctx.userId);
-  if (byTitle)
-    return { topic: byTitle };
-  return { error: notFound };
-}
-function describeTopic(topic) {
-  const running = getRoomQuery(topic.id) ? "turn running" : "idle";
-  const agent = topic.agent ? `agent: ${topic.agent}` : "no agent";
-  return `- "${topic.title}" (id: ${topic.id}, kind: ${topic.kind ?? "agent"}, ${agent}, ${running})`;
-}
-function registerNodeTools(server, ctx) {
-  server.tool("register_topic", "Create a new topic (agent room) on this negotium node, owned by the calling user. " + "Returns the new topic's id, title, agent, and model. Use the session-comm tell_session " + "tool to hand the new topic work.", {
-    title: z.string().describe("Unique title for the new topic."),
-    agent: z.enum(["claude", "codex", "maestro"]).optional().describe("AI backend for the room. Defaults to maestro."),
-    model: z.string().optional().describe("Model override, must be valid for the agent."),
-    effort: z.enum(EFFORT_VALUES).optional().describe("Reasoning effort override for the room."),
-    description: z.string().optional().describe("Short description of the topic's purpose.")
-  }, async ({ title, agent, model, effort, description }) => {
-    try {
-      const topic = registerTopic({
-        title,
-        userId: ctx.userId,
-        agent,
-        model,
-        effort,
-        description
-      });
-      return textResult([
-        `Topic registered.`,
-        `id: ${topic.id}`,
-        `title: ${topic.title}`,
-        `agent: ${topic.agent ?? "none"}`,
-        `model: ${topic.defaultModel}`
-      ].join(`
-`));
-    } catch (err) {
-      if (err instanceof TopicValidationError)
-        return errorResult(`Error: ${err.message}`);
-      logger.error({ err, title }, "negotium MCP: register_topic failed");
-      return errorResult(`Error: failed to register topic: ${errMsg(err)}`);
-    }
-  });
-  server.tool("list_topics", "List the calling user's topics on this negotium node: title, id, kind, agent, and whether a turn is currently running.", {}, async () => {
-    const topics = getTopics().filter((topic) => isParticipant(topic, ctx.userId));
-    if (topics.length === 0) {
-      return textResult("No topics found. Use register_topic to create one.");
-    }
-    return textResult(topics.map(describeTopic).join(`
-`));
-  });
-  server.tool("abort_topic", "Abort the running turn in another topic on this node. Fire-and-forget: also queues an abort " + "signal in the topic's inbox so a turn that has not started yet is cancelled too. Returns whether an active turn was aborted.", {
-    topic: z.string().describe("Target topic title or id.")
-  }, async ({ topic }) => {
-    const resolved = resolveTopicForUser(ctx, topic);
-    if ("error" in resolved)
-      return errorResult(resolved.error);
-    const target = resolved.topic;
-    if (target.id === ctx.topicId) {
-      return errorResult("Error: cannot abort the current topic from within its own turn.");
-    }
-    const aborted = abortRoom(target.id);
-    try {
-      appendJsonlEntry(sessionInboxPath(ctx.userId, target.id), {
-        type: "abort",
-        timestamp: new Date().toISOString()
-      });
-    } catch (err) {
-      logger.warn({ err, topicId: target.id }, "negotium MCP: abort inbox write failed");
-    }
-    return textResult(aborted ? `Aborted the active turn in "${target.title}".` : `No active turn in "${target.title}"; abort signal queued in its inbox.`);
-  });
-  server.tool("restart_topic", "Reset another topic's AI context while preserving the topic and its visible message history. " + "The next message starts a fresh provider session. Only the topic owner can restart it.", {
-    topic: z.string().describe("Target topic title or id.")
-  }, async ({ topic }) => {
-    const resolved = resolveTopicForUser(ctx, topic);
-    if ("error" in resolved)
-      return errorResult(resolved.error);
-    const target = resolved.topic;
-    if (target.id === ctx.topicId) {
-      return errorResult("Error: cannot restart the current topic from within its own turn.");
-    }
-    if (target.kind === "manager") {
-      return errorResult("Error: manager rooms are system-managed and cannot be restarted.");
-    }
-    const result = await restartTopicSession(target.id, ctx.userId, "runtime-mcp-session-reset");
-    return result.isError ? errorResult(`Error: ${result.text}`) : textResult(result.text);
-  });
-  server.tool("delete_topic", "Delete a topic owned by the calling user after archiving its conversation history. Deletion is blocked " + "when the archive cannot be written; pass force: true only as an explicit escape hatch that accepts losing history.", {
-    topic: z.string().describe("Target topic title or id."),
-    force: z.boolean().optional().describe("Delete even if archiving the conversation history fails. Default false.")
-  }, async ({ topic, force }) => {
-    const resolved = resolveTopicForUser(ctx, topic);
-    if ("error" in resolved)
-      return errorResult(resolved.error);
-    const target = resolved.topic;
-    if (target.id === ctx.topicId) {
-      return errorResult("Error: cannot delete the current topic from within its own turn.");
-    }
-    if (target.kind === "manager") {
-      return errorResult("Error: manager rooms are system-managed and cannot be deleted.");
-    }
-    const isOwner = target.participants.some((participant) => participant.userId === ctx.userId && participant.role === "owner");
-    if (!isOwner) {
-      return errorResult("Error: only the topic owner can delete it.");
-    }
-    try {
-      await deleteTopicCascade(target, ctx.userId, { force: force === true });
-    } catch (err) {
-      if (err instanceof TopicArchiveRequiredError) {
-        return errorResult([
-          `Error: deleting "${target.title}" was blocked because its conversation history could not be archived.`,
-          "Topics are archived before deletion so no history is lost. Fix the archive failure and retry, or pass force: true to delete anyway and accept losing the history."
-        ].join(`
-`));
-      }
-      logger.error({ err, topicId: target.id }, "negotium MCP: delete_topic failed");
-      return errorResult(`Error: failed to delete "${target.title}": ${errMsg(err)}`);
-    }
-    return textResult(`Topic "${target.title}" (id: ${target.id}) deleted.`);
-  });
-}
-// ../../packages/mcp/src/server.ts
-import { randomUUID as randomUUID2 } from "crypto";
-import { realpathSync, statSync } from "fs";
-import { basename, extname, resolve } from "path";
-import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
-import { WebStandardStreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/webStandardStreamableHttp.js";
-import { z as z2 } from "zod";
-
-// ../../packages/mcp/src/sse-transport.ts
-import { randomUUID } from "crypto";
-import {
-  JSONRPCMessageSchema
-} from "@modelcontextprotocol/sdk/types.js";
-
-class SseTransport {
-  endpoint;
-  keepAliveMs;
-  sessionId = randomUUID();
-  onclose;
-  onerror;
-  onmessage;
-  encoder = new TextEncoder;
-  controller;
-  closed = false;
-  stream;
-  keepAliveTimer;
-  constructor(endpoint, req, keepAliveMs = 20000) {
-    this.endpoint = endpoint;
-    this.keepAliveMs = keepAliveMs;
-    this.stream = new ReadableStream({
-      start: (controller) => {
-        this.controller = controller;
-      },
-      cancel: () => {
-        this.close();
-      }
-    });
-    req?.signal.addEventListener("abort", () => {
-      this.close();
-    });
-  }
-  response() {
-    return new Response(this.stream, {
-      status: 200,
-      headers: {
-        "Content-Type": "text/event-stream",
-        "Cache-Control": "no-cache, no-transform",
-        Connection: "keep-alive"
-      }
-    });
-  }
-  async start() {
-    if (this.closed)
-      return;
-    const url = new URL(this.endpoint, "http://localhost");
-    url.searchParams.set("sessionId", this.sessionId);
-    this.enqueue(`event: endpoint
-data: ${url.pathname}${url.search}${url.hash}
-
-`);
-    this.startKeepAlive();
-  }
-  async send(message, _options) {
-    this.enqueue(`event: message
-data: ${JSON.stringify(message)}
-
-`);
-  }
-  async handleMessage(raw, req) {
-    const parsed = JSONRPCMessageSchema.parse(raw);
-    this.onmessage?.(parsed, {
-      requestInfo: {
-        headers: Object.fromEntries(req.headers.entries()),
-        url: new URL(req.url)
-      }
-    });
-  }
-  async close() {
-    if (this.closed)
-      return;
-    this.closed = true;
-    try {
-      this.controller?.close();
-    } catch {}
-    if (this.keepAliveTimer) {
-      clearInterval(this.keepAliveTimer);
-      this.keepAliveTimer = undefined;
-    }
-    this.onclose?.();
-  }
-  startKeepAlive() {
-    if (this.closed || this.keepAliveTimer || this.keepAliveMs <= 0)
-      return;
-    this.keepAliveTimer = setInterval(() => {
-      this.enqueue(`: ping
-
-`);
-    }, this.keepAliveMs);
-  }
-  enqueue(payload) {
-    if (this.closed)
-      return;
-    try {
-      this.controller?.enqueue(this.encoder.encode(payload));
-    } catch (err) {
-      const error = err instanceof Error ? err : new Error(String(err));
-      this.onerror?.(error);
-      this.close();
-    }
-  }
-}
-
-// ../../packages/mcp/src/server.ts
-var SSE_PATH = `${RUNTIME_MCP_BASE_PATH}/sse`;
-var SSE_MESSAGE_PATH = `${RUNTIME_MCP_BASE_PATH}/message`;
-var STREAMABLE_PATH = `${RUNTIME_MCP_BASE_PATH}/mcp`;
-var sseSessions = new Map;
-var streamableSessions = new Map;
-function requireTopicAccess(ctx) {
-  const topic = getTopic(ctx.topicId);
-  if (!topic)
-    return { error: `Error: topic '${ctx.topicId}' not found.` };
-  if (!topic.participants.some((p) => p.userId === ctx.userId)) {
-    return { error: "Error: user is not a member of this topic." };
-  }
-  return { topic };
-}
-function isPathInside(baseDir, filePath) {
-  const cwd = resolve(baseDir);
-  const normalized = resolve(filePath);
-  try {
-    const realCwd = realpathSync(cwd);
-    const real = realpathSync(normalized);
-    return real === realCwd || real.startsWith(`${realCwd}/`);
-  } catch (err) {
-    if (err.code === "ENOENT") {
-      return normalized === cwd || normalized.startsWith(`${cwd}/`);
-    }
-    return false;
-  }
-}
-function localFileInfo(ctx, filePath) {
-  if (!isPathInside(ctx.cwd, filePath)) {
-    return { error: "Access denied. File must be within the topic workspace." };
-  }
-  const normalizedPath = resolve(filePath);
-  if (isSensitivePath(normalizedPath)) {
-    return { error: "Access denied. Path matches the sensitive-file blacklist." };
-  }
-  try {
-    const stats = statSync(normalizedPath);
-    if (!stats.isFile())
-      return { error: `${filePath} is not a file` };
-    return {
-      normalizedPath,
-      name: basename(filePath),
-      ext: extname(filePath).toLowerCase(),
-      sizeBytes: stats.size,
-      sizeMB: (stats.size / (1024 * 1024)).toFixed(2)
-    };
-  } catch {
-    return { error: `File not found at ${filePath}` };
-  }
-}
-async function deliverFile(ctx, filePath) {
-  const access = requireTopicAccess(ctx);
-  if ("error" in access)
-    return errorResult(access.error);
-  const info = localFileInfo(ctx, filePath);
-  if ("error" in info)
-    return errorResult(`Error: ${info.error}`);
-  if (ctx.peerBridge) {
-    const bridged = await dispatchPeerRuntimeFile({
-      bridge: ctx.peerBridge,
-      userId: ctx.userId,
-      agent: ctx.agent,
-      model: ctx.model,
-      path: info.normalizedPath,
-      source: "runtime.send_file"
-    });
-    if (!bridged)
-      return errorResult("Error: the peer file bridge is not available on this node.");
-    if (!bridged.ok)
-      return errorResult(`Error: Failed to send file on hub: ${bridged.error}`);
-    return textResult(`File sent to chat: ${info.name} (${info.ext || "no extension"}, ${info.sizeMB} MB)`);
-  }
-  const attachment = storeLocalFileAsUpload(info.normalizedPath, {
-    ownerUserId: ctx.userId,
-    topicId: ctx.topicId
-  });
-  if (!attachment)
-    return errorResult("Error: Failed to store file for delivery.");
-  const cfg = getApiTopicConfig(ctx.topicId);
-  const msg = {
-    id: randomUUID2(),
-    topicId: ctx.topicId,
-    authorId: "ai",
-    text: `\uD83D\uDCCE ${attachment.filename}`,
-    agentType: ctx.agent,
-    model: ctx.model ?? cfg?.model ?? "unknown",
-    attachments: [attachment],
-    createdAt: new Date().toISOString()
-  };
-  appendApiMessage(msg);
-  WsHub.get().broadcastMessage(ctx.topicId, msg);
-  return textResult([
-    `File sent to chat: ${info.name} (${info.ext || "no extension"}, ${info.sizeMB} MB)`,
-    `Path: ${info.normalizedPath}`
-  ].join(`
-`));
-}
-function appendAutoContinue(ctx, field) {
-  if (!ctx.autoContinue)
-    return;
-  appendJsonlEntry(sessionInboxPath(ctx.userId, ctx.topicId), {
-    type: "tell",
-    from: FROM_AUTO_CONTINUE,
-    message: `The topic ${field} setting changed. Continue the user's previous work with the new configuration.`,
-    depth: 0,
-    silent: false,
-    timestamp: new Date().toISOString()
-  });
-}
-function buildNegotiumMcpServer(ctx) {
-  const server = new McpServer({ name: RUNTIME_MCP_KEY, version: "1.0.0" });
-  if (ctx.visualTools === true) {
-    for (const def of visualToolDefinitions) {
-      const handler = ctx.peerBridge && (def.name === "show_html" || def.name === "show_mermaid") ? async () => textResult("Visual queued for ordered display on the canonical hub.") : def.handler;
-      server.tool(def.name, def.description, def.schema, handler);
-    }
-  }
-  const selfConfigCtx = {
-    topicId: ctx.topicId,
-    userId: ctx.userId,
-    cwd: ctx.cwd,
-    currentUserPrompt: ctx.currentUserPrompt,
-    onConfigChanged: (field) => appendAutoContinue(ctx, field)
-  };
-  for (const def of createSelfConfigToolDefinitions(selfConfigCtx)) {
-    const handler = ctx.peerBridge ? async (input) => {
-      const dispatched = dispatchPeerRuntimeSelfConfig({
-        bridge: ctx.peerBridge,
-        userId: ctx.userId,
-        tool: def.name,
-        input,
-        ...ctx.currentUserPrompt ? { currentUserPrompt: ctx.currentUserPrompt } : {}
-      });
-      if (!dispatched) {
-        return errorResult("Error: the peer self-config bridge is not available on this node.");
-      }
-      return dispatched;
-    } : def.handler;
-    server.tool(def.name, def.description, def.schema, handler);
-  }
-  const askUserTool = createAskUserToolDefinition({
-    userId: ctx.userId,
-    topicId: ctx.topicId,
-    queryId: ctx.queryId,
-    agent: ctx.agent,
-    model: ctx.model
-  });
-  const askHandler = ctx.peerBridge ? async (input) => {
-    const dispatched = dispatchPeerRuntimeAskUser({
-      bridge: ctx.peerBridge,
-      userId: ctx.userId,
-      agent: ctx.agent,
-      model: ctx.model,
-      input
-    });
-    if (!dispatched) {
-      return errorResult("Error: the peer ask-user bridge is not available on this node.");
-    }
-    return dispatched;
-  } : askUserTool.handler;
-  server.tool(askUserTool.name, askUserTool.description, askUserTool.schema, askHandler);
-  const topic = getTopic(ctx.topicId);
-  const peerBridge = ctx.peerBridge;
-  const canSpawnSubagents = peerBridge ? peerBridge.canSpawnSubagents : topic?.kind === "agent" && !topic.isSubagent;
-  if (canSpawnSubagents) {
-    const spawnTool = createSpawnSubagentToolDefinition({
-      userId: ctx.userId,
-      topicId: ctx.topicId,
-      queryId: ctx.queryId,
-      agent: ctx.agent,
-      model: ctx.model
-    });
-    const spawnHandler = peerBridge ? async (input) => {
-      const dispatched = dispatchPeerRuntimeSpawn({
-        bridge: peerBridge,
-        userId: ctx.userId,
-        agent: ctx.agent,
-        model: ctx.model,
-        input
-      });
-      if (!dispatched) {
-        return errorResult("Error: the peer runtime bridge is not available on this node.");
-      }
-      return dispatched;
-    } : spawnTool.handler;
-    server.tool(spawnTool.name, spawnTool.description, spawnTool.schema, spawnHandler);
-    if (!peerBridge) {
-      for (const def of createSubagentManagementToolDefinitions({
-        userId: ctx.userId,
-        topicId: ctx.topicId
-      })) {
-        server.tool(def.name, def.description, def.schema, def.handler);
-      }
-    }
-  }
-  server.tool("send_file", "Send a local file to the user in the chat. Use this when you want to share a file (image, document, PDF, code, etc.) with the user. The file will appear as a downloadable item in the chat.", { file_path: z2.string().describe("Absolute path to the file to send") }, async ({ file_path }) => deliverFile(ctx, file_path));
-  server.tool("send_files", "Send multiple local files to the user in the chat at once.", { file_paths: z2.array(z2.string()).describe("Array of absolute file paths to send") }, async ({ file_paths }) => {
-    const results = await Promise.all(file_paths.map((filePath) => deliverFile(ctx, filePath)));
-    const hasError = results.some((result) => ("isError" in result) && result.isError);
-    return {
-      content: [
-        {
-          type: "text",
-          text: results.map((result) => result.content.map((c) => c.text).join(`
-`)).join(`
-
-`)
-        }
-      ],
-      ...hasError ? { isError: true } : {}
-    };
-  });
-  registerNodeTools(server, ctx);
-  return server;
-}
-function jsonRpcError(status, code, message) {
-  return Response.json({ jsonrpc: "2.0", error: { code, message }, id: null }, { status });
-}
-function unauthorized() {
-  return jsonRpcError(401, -32001, "Unauthorized");
-}
-var closingServers = new WeakSet;
-async function closeServer(server) {
-  if (closingServers.has(server))
-    return;
-  closingServers.add(server);
-  try {
-    await server.close();
-  } catch (err) {
-    logger.warn({ err }, "negotium MCP: server close failed");
-  }
-}
-async function handleSse(req, token, ctx) {
-  if (req.method !== "GET")
-    return new Response("Method Not Allowed", { status: 405 });
-  const endpoint = `${SSE_MESSAGE_PATH}?token=${encodeURIComponent(token)}`;
-  const server = buildNegotiumMcpServer(ctx);
-  const transport = new SseTransport(endpoint, req);
-  const response = transport.response();
-  sseSessions.set(transport.sessionId, { token, transport, server });
-  transport.onclose = () => {
-    sseSessions.delete(transport.sessionId);
-    closeServer(server);
-  };
-  transport.onerror = (err) => {
-    logger.warn({ err }, "negotium MCP: SSE transport error");
-  };
-  try {
-    await server.connect(transport);
-  } catch (err) {
-    sseSessions.delete(transport.sessionId);
-    await transport.close();
-    await closeServer(server);
-    throw err;
-  }
-  return response;
-}
-async function handleSseMessage(req, url, token) {
-  if (req.method !== "POST")
-    return new Response("Method Not Allowed", { status: 405 });
-  const sessionId = url.searchParams.get("sessionId");
-  if (!sessionId)
-    return new Response("Missing sessionId", { status: 400 });
-  const session = sseSessions.get(sessionId);
-  if (!session || session.token !== token)
-    return new Response("SSE session not found", { status: 404 });
-  let body;
-  try {
-    body = await req.json();
-  } catch {
-    return new Response("Invalid JSON", { status: 400 });
-  }
-  try {
-    await session.transport.handleMessage(body, req);
-  } catch (err) {
-    logger.warn({ err, sessionId }, "negotium MCP: invalid SSE message");
-    return new Response("Invalid JSON-RPC message", { status: 400 });
-  }
-  return new Response("Accepted", { status: 202 });
-}
-async function createStreamableSession(token, ctx) {
-  const server = buildNegotiumMcpServer(ctx);
-  let transport;
-  transport = new WebStandardStreamableHTTPServerTransport({
-    sessionIdGenerator: () => randomUUID2(),
-    onsessioninitialized: (sessionId) => {
-      streamableSessions.set(sessionId, { token, transport, server });
-    },
-    onsessionclosed: (sessionId) => {
-      streamableSessions.delete(sessionId);
-      closeServer(server);
-    }
-  });
-  transport.onclose = () => {
-    if (transport.sessionId)
-      streamableSessions.delete(transport.sessionId);
-    closeServer(server);
-  };
-  transport.onerror = (err) => {
-    logger.warn({ err }, "negotium MCP: streamable HTTP transport error");
-  };
-  await server.connect(transport);
-  return { token, transport, server };
-}
-async function handleStreamable(req, token, ctx) {
-  const sessionId = req.headers.get("mcp-session-id");
-  let session = sessionId ? streamableSessions.get(sessionId) : undefined;
-  if (session && session.token !== token)
-    return unauthorized();
-  if (!session) {
-    if (sessionId)
-      return jsonRpcError(404, -32001, "Session not found");
-    if (req.method !== "POST") {
-      return jsonRpcError(400, -32000, "Mcp-Session-Id header is required");
-    }
-    if (!ctx)
-      return unauthorized();
-    session = await createStreamableSession(token, ctx);
-  }
-  return session.transport.handleRequest(req);
-}
-async function handleNegotiumMcpRequest(req) {
-  const url = new URL(req.url);
-  if (url.pathname !== RUNTIME_MCP_BASE_PATH && !url.pathname.startsWith(`${RUNTIME_MCP_BASE_PATH}/`)) {
-    return null;
-  }
-  const token = url.searchParams.get("token") ?? "";
-  try {
-    if (url.pathname === SSE_PATH) {
-      const ctx = resolveRuntimeMcpToken(token);
-      if (!ctx)
-        return unauthorized();
-      return handleSse(req, token, ctx);
-    }
-    if (url.pathname === SSE_MESSAGE_PATH)
-      return handleSseMessage(req, url, token);
-    if (url.pathname === STREAMABLE_PATH) {
-      return handleStreamable(req, token, resolveRuntimeMcpToken(token));
-    }
-    return jsonRpcError(404, -32001, `${RUNTIME_MCP_KEY} endpoint not found`);
-  } catch (err) {
-    logger.error({ err, path: url.pathname }, "negotium MCP: request failed");
-    return jsonRpcError(500, -32603, "Internal MCP server error");
-  }
-}
-// ../../packages/node/src/control.ts
-import { randomUUID as randomUUID4, timingSafeEqual } from "crypto";
-import {
-  chmodSync,
-  existsSync as existsSync2,
-  mkdirSync as mkdirSync2,
-  readFileSync as readFileSync2,
-  renameSync,
-  unlinkSync,
-  writeFileSync as writeFileSync2
-} from "fs";
-import { dirname, resolve as resolve2 } from "path";
-
-// ../../packages/node/src/files.ts
-import { randomUUID as randomUUID3 } from "crypto";
-import {
-  copyFileSync,
-  existsSync,
-  mkdirSync,
-  readFileSync,
-  rmSync,
-  statSync as statSync2,
-  writeFileSync
-} from "fs";
-import { basename as basename2, extname as extname2, join } from "path";
-var MAX_UPLOAD_BYTES = 2 * 1024 * 1024 * 1024;
-var FILE_ID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
-var MIME_BY_EXT = {
-  ".csv": "text/csv",
-  ".gif": "image/gif",
-  ".html": "text/html",
-  ".jpeg": "image/jpeg",
-  ".jpg": "image/jpeg",
-  ".json": "application/json",
-  ".md": "text/markdown",
-  ".mov": "video/quicktime",
-  ".mp3": "audio/mpeg",
-  ".mp4": "video/mp4",
-  ".pdf": "application/pdf",
-  ".png": "image/png",
-  ".svg": "image/svg+xml",
-  ".txt": "text/plain",
-  ".wav": "audio/wav",
-  ".webm": "video/webm",
-  ".webp": "image/webp",
-  ".zip": "application/zip"
-};
-function safeExtension(filename) {
-  const extension = extname2(basename2(filename));
-  return /^\.[A-Za-z0-9]{1,16}$/.test(extension) ? extension.toLowerCase() : "";
-}
-function attachmentType(mimeType) {
-  if (mimeType.startsWith("image/"))
-    return "image";
-  if (mimeType.startsWith("audio/"))
-    return "audio";
-  return "file";
-}
-function contentDisposition(filename) {
-  return `attachment; filename*=UTF-8''${encodeURIComponent(filename)}`;
-}
-
-class NodeFileStore {
-  uploadDir;
-  constructor(uploadDir = join(DATA_DIR, "uploads")) {
-    this.uploadDir = uploadDir;
-  }
-  #ensureDir() {
-    mkdirSync(this.uploadDir, { recursive: true });
-  }
-  #metadataPath(fileId) {
-    return join(this.uploadDir, `${fileId}.meta.json`);
-  }
-  #metadata(fileId) {
-    if (!FILE_ID_RE.test(fileId))
-      return null;
-    try {
-      const parsed = JSON.parse(readFileSync(this.#metadataPath(fileId), "utf8"));
-      if (typeof parsed.filename !== "string" || typeof parsed.mimeType !== "string" || typeof parsed.sizeBytes !== "number" || typeof parsed.savedName !== "string") {
-        return null;
-      }
-      return parsed;
-    } catch {
-      return null;
-    }
-  }
-  #attachment(fileId, metadata) {
-    const userQuery = metadata.ownerUserId ? `?user=${encodeURIComponent(metadata.ownerUserId)}` : "";
-    return {
-      id: fileId,
-      type: attachmentType(metadata.mimeType),
-      filename: metadata.filename,
-      url: `/api/v1/control/files/${fileId}${userQuery}`,
-      mimeType: metadata.mimeType,
-      sizeBytes: metadata.sizeBytes
-    };
-  }
-  hooks = {
-    resolveAttachmentByFileId: (fileId) => {
-      const metadata = this.#metadata(fileId);
-      if (!metadata || !existsSync(join(this.uploadDir, metadata.savedName)))
-        return null;
-      return this.#attachment(fileId, metadata);
-    },
-    resolveUploadedFilePathByFileId: (fileId) => {
-      const metadata = this.#metadata(fileId);
-      if (!metadata)
-        return null;
-      const path = join(this.uploadDir, metadata.savedName);
-      return existsSync(path) ? path : null;
-    },
-    storeLocalFileAsUpload: (absPath, access = {}) => this.store(absPath, access),
-    deleteFilesForTopic: (topicId) => this.deleteForTopic(topicId)
-  };
-  store(absPath, access = {}) {
-    this.#ensureDir();
-    const fileId = randomUUID3();
-    const extension = safeExtension(absPath);
-    const savedName = `${fileId}${extension}`;
-    const savedPath = join(this.uploadDir, savedName);
-    try {
-      const stats = statSync2(absPath);
-      if (!stats.isFile() || stats.size > MAX_UPLOAD_BYTES)
-        return null;
-      const metadata = {
-        filename: basename2(absPath),
-        mimeType: MIME_BY_EXT[extension] ?? "application/octet-stream",
-        sizeBytes: stats.size,
-        savedName,
-        ...access.ownerUserId ? { ownerUserId: access.ownerUserId } : {},
-        ...access.topicId ? { topicId: access.topicId } : {},
-        ...access.visibility ? { visibility: access.visibility } : {}
-      };
-      copyFileSync(absPath, savedPath);
-      writeFileSync(this.#metadataPath(fileId), JSON.stringify(metadata), { mode: 384 });
-      return this.#attachment(fileId, metadata);
-    } catch (error) {
-      rmSync(savedPath, { force: true });
-      rmSync(this.#metadataPath(fileId), { force: true });
-      logger.warn({ err: error, absPath }, "node files: failed to store local upload");
-      return null;
-    }
-  }
-  response(fileId, userId) {
-    const metadata = this.#metadata(fileId);
-    if (!metadata)
-      return null;
-    const topic = metadata.topicId ? getTopic(metadata.topicId) : null;
-    const allowed = metadata.visibility === "workspace" || metadata.ownerUserId === userId || Boolean(topic && isParticipant(topic, userId));
-    if (!allowed)
-      return null;
-    const path = join(this.uploadDir, metadata.savedName);
-    if (!existsSync(path))
-      return null;
-    return new Response(Bun.file(path), {
-      headers: {
-        "content-disposition": contentDisposition(metadata.filename),
-        "content-length": String(metadata.sizeBytes),
-        "content-type": metadata.mimeType,
-        "x-content-type-options": "nosniff"
-      }
-    });
-  }
-  deleteForTopic(topicId) {
-    this.#ensureDir();
-    for (const name of new Bun.Glob("*.meta.json").scanSync({ cwd: this.uploadDir })) {
-      const fileId = name.slice(0, -".meta.json".length);
-      const metadata = this.#metadata(fileId);
-      if (metadata?.topicId !== topicId)
-        continue;
-      rmSync(join(this.uploadDir, metadata.savedName), { force: true });
-      rmSync(this.#metadataPath(fileId), { force: true });
-    }
-  }
-}
-var nodeFileStore = new NodeFileStore;
-
-// ../../packages/node/src/control.ts
-var NODE_CONTROL_PROTOCOL_VERSION = 1;
-var NODE_CONTROL_BASE_PATH = "/api/v1/control";
-var NODE_DAEMON_ROLE = "node-daemon";
-var NODE_DAEMON_INFO_PATH = resolve2(RUN_DIR, "node-daemon.json");
-var NODE_VERSION = NEGOTIUM_VERSION;
-function jsonError(status, error) {
-  return Response.json({ ok: false, error }, { status });
-}
-function topicServiceError(error) {
-  const status = error.code === "TOPIC_NOT_FOUND" ? 404 : error.code === "TOPIC_FORBIDDEN" ? 403 : 400;
-  return jsonError(status, error.message);
-}
-function safeEqual(left, right) {
-  const a = Buffer.from(left);
-  const b = Buffer.from(right);
-  return a.length === b.length && timingSafeEqual(a, b);
-}
-function authorized(req) {
-  const header = req.headers.get("authorization") ?? "";
-  const token = header.startsWith("Bearer ") ? header.slice(7) : "";
-  return Boolean(token) && safeEqual(token, NODE_CONTROL_TOKEN);
-}
-async function bodyRecord(req) {
-  try {
-    const value = await req.json();
-    return value && typeof value === "object" && !Array.isArray(value) ? value : {};
-  } catch {
-    return {};
-  }
-}
-function requiredText(value, name) {
-  if (typeof value !== "string" || !value.trim())
-    throw new Error(`${name} is required`);
-  return value.trim();
-}
-function topicsForUser(userId) {
-  const runningTopics = listRunningTopicQueries();
-  return getVisibleTopics().filter((topic) => isParticipant(topic, userId)).map((topic) => {
-    const runningQueryId = runningTopics.get(topic.id);
-    return { ...topic, running: Boolean(runningQueryId), runningQueryId };
-  });
-}
-function topicForUser(topicId, userId) {
-  const topic = getTopic(topicId);
-  return topic && isParticipant(topic, userId) ? topic : null;
-}
-function runtimeEvent(event) {
-  return {
-    type: event.type,
-    topicId: event.topicId,
-    payload: event.payload,
-    seq: event.seq,
-    createdAt: event.createdAt
-  };
-}
-function createEventStream(req, userId, after) {
-  const encoder = new TextEncoder;
-  const allowedTopics = new Set(topicsForUser(userId).map((topic) => topic.id));
-  let cursor = Math.max(0, after);
-  let closed = false;
-  let pumping = false;
-  let pollTimer;
-  let heartbeatTimer;
-  const stream = new ReadableStream({
-    start(controller) {
-      const send = (event, data, id) => {
-        if (closed)
-          return;
-        const lines = [
-          id === undefined ? "" : `id: ${id}`,
-          `event: ${event}`,
-          `data: ${JSON.stringify(data)}`
-        ].filter(Boolean).join(`
-`);
-        controller.enqueue(encoder.encode(`${lines}
-
-`));
-      };
-      const close = () => {
-        if (closed)
-          return;
-        closed = true;
-        if (pollTimer)
-          clearInterval(pollTimer);
-        if (heartbeatTimer)
-          clearInterval(heartbeatTimer);
-        try {
-          controller.close();
-        } catch {}
-      };
-      const pump = () => {
-        if (closed || pumping)
-          return;
-        pumping = true;
-        try {
-          while (!closed) {
-            const events = listRuntimeEventsAfter(cursor, 500);
-            if (events.length === 0)
-              break;
-            for (const event of events) {
-              cursor = event.seq;
-              if (event.type === "topic-created" || event.type === "topic-updated") {
-                const topic = getTopic(event.topicId);
-                if (topic && isParticipant(topic, userId))
-                  allowedTopics.add(event.topicId);
-                else
-                  allowedTopics.delete(event.topicId);
-              }
-              const visible = allowedTopics.has(event.topicId);
-              if (visible)
-                send("runtime", runtimeEvent(event), event.seq);
-              if (event.type === "topic-deleted")
-                allowedTopics.delete(event.topicId);
-            }
-            send("cursor", { cursor }, cursor);
-            if (events.length < 500)
-              break;
-          }
-        } finally {
-          pumping = false;
-        }
-      };
-      send("ready", { protocolVersion: NODE_CONTROL_PROTOCOL_VERSION, cursor });
-      pump();
-      pollTimer = setInterval(pump, 100);
-      heartbeatTimer = setInterval(() => {
-        if (!closed)
-          controller.enqueue(encoder.encode(`: heartbeat ${Date.now()}
-
-`));
-      }, 15000);
-      req.signal.addEventListener("abort", close, { once: true });
-    },
-    cancel() {
-      closed = true;
-      if (pollTimer)
-        clearInterval(pollTimer);
-      if (heartbeatTimer)
-        clearInterval(heartbeatTimer);
-    }
-  });
-  return new Response(stream, {
-    headers: {
-      "cache-control": "no-cache, no-transform",
-      connection: "keep-alive",
-      "content-type": "text/event-stream; charset=utf-8",
-      "x-accel-buffering": "no"
-    }
-  });
-}
-function createNodeControlHandler(options) {
-  return async (req) => {
-    const url = new URL(req.url);
-    if (!url.pathname.startsWith(NODE_CONTROL_BASE_PATH))
-      return null;
-    if (!authorized(req))
-      return jsonError(401, "Unauthorized");
-    const path = url.pathname.slice(NODE_CONTROL_BASE_PATH.length) || "/";
-    try {
-      if (req.method === "GET" && path === "/status") {
-        return Response.json({
-          ok: true,
-          protocolVersion: NODE_CONTROL_PROTOCOL_VERSION,
-          nodeVersion: NODE_VERSION,
-          pid: process.pid,
-          port: options.port(),
-          stateDir: STATE_DIR,
-          startedAt: options.startedAt
-        });
-      }
-      if (req.method === "POST" && path === "/shutdown") {
-        setTimeout(options.requestShutdown, 10);
-        return Response.json({ ok: true });
-      }
-      if (req.method === "GET" && path === "/session") {
-        const userId = requiredText(url.searchParams.get("user"), "user");
-        ensurePersonalGeneral(userId);
-        return Response.json({
-          ok: true,
-          protocolVersion: NODE_CONTROL_PROTOCOL_VERSION,
-          nodeVersion: NODE_VERSION,
-          topics: topicsForUser(userId),
-          cursor: latestRuntimeEventSeq()
-        });
-      }
-      if (req.method === "GET" && path === "/topics") {
-        const userId = requiredText(url.searchParams.get("user"), "user");
-        return Response.json({ ok: true, topics: topicsForUser(userId) });
-      }
-      if (req.method === "GET" && path === "/background-sessions") {
-        const userId = requiredText(url.searchParams.get("user"), "user");
-        return Response.json({ ok: true, sessions: listBackgroundSessionsForUser(userId) });
-      }
-      const fileMatch = path.match(/^\/files\/([0-9a-f-]+)$/i);
-      if (fileMatch && req.method === "GET") {
-        const userId = requiredText(url.searchParams.get("user"), "user");
-        return nodeFileStore.response(fileMatch[1], userId) ?? jsonError(404, "File not found");
-      }
-      if (req.method === "POST" && path === "/vault/command") {
-        const body = await bodyRecord(req);
-        const userId = requiredText(body.userId, "userId");
-        const commandLine = requiredText(body.commandLine, "commandLine");
-        const result = executeVaultCommand(userId, commandLine);
-        if (result === null)
-          return jsonError(400, "Invalid Vault command");
-        return Response.json({ ok: true, result });
-      }
-      if (req.method === "GET" && path === "/vault") {
-        const userId = requiredText(url.searchParams.get("user"), "user");
-        return Response.json({ ok: true, entries: listVaultEntries(userId) });
-      }
-      if (req.method === "POST" && path === "/vault") {
-        const body = await bodyRecord(req);
-        const userId = requiredText(body.userId, "userId");
-        const key = requiredText(body.key, "key");
-        if (typeof body.value !== "string")
-          throw new Error("value is required");
-        const description = body.description === undefined ? "" : String(body.description);
-        return Response.json({
-          ok: true,
-          result: saveVaultEntry(userId, key, body.value, description)
-        });
-      }
-      if (req.method === "DELETE" && path === "/vault") {
-        const userId = requiredText(url.searchParams.get("user"), "user");
-        const key = requiredText(url.searchParams.get("key"), "key");
-        return Response.json({ ok: true, deleted: deleteVaultEntry(userId, key) });
-      }
-      if (req.method === "POST" && path === "/topics") {
-        const body = await bodyRecord(req);
-        const userId = requiredText(body.userId, "userId");
-        const title = requiredText(body.title, "title");
-        const agent = body.agent;
-        if (agent !== undefined && !["claude", "codex", "maestro"].includes(String(agent))) {
-          return jsonError(400, "Invalid agent");
-        }
-        const topic = topicService.create({
-          title,
-          userId,
-          kind: "agent",
-          ...agent ? { agent } : {}
-        });
-        return Response.json({ ok: true, topic }, { status: 201 });
-      }
-      if (req.method === "GET" && path === "/events") {
-        const userId = requiredText(url.searchParams.get("user"), "user");
-        const parsed = Number.parseInt(url.searchParams.get("after") ?? "0", 10);
-        return createEventStream(req, userId, Number.isFinite(parsed) ? parsed : 0);
-      }
-      const messagesMatch = path.match(/^\/topics\/([^/]+)\/messages$/);
-      if (messagesMatch && req.method === "GET") {
-        const topicId = decodeURIComponent(messagesMatch[1]);
-        const userId = requiredText(url.searchParams.get("user"), "user");
-        if (!topicForUser(topicId, userId))
-          return jsonError(404, "Topic not found");
-        const cursor = url.searchParams.get("cursor");
-        const parsedLimit = Number.parseInt(url.searchParams.get("limit") ?? "50", 10);
-        const result = listApiMessages(topicId, {
-          cursor,
-          limit: Number.isFinite(parsedLimit) ? parsedLimit : 50
-        });
-        return Response.json({
-          ok: true,
-          messages: result.page,
-          cursor: result.cursor,
-          hasMore: result.hasMore
-        });
-      }
-      if (messagesMatch && req.method === "POST") {
-        const topicId = decodeURIComponent(messagesMatch[1]);
-        const body = await bodyRecord(req);
-        const userId = requiredText(body.userId, "userId");
-        const text = requiredText(body.text, "text");
-        const topic = topicForUser(topicId, userId);
-        if (!topic)
-          return jsonError(404, "Topic not found");
-        const { message } = submitUserMessage({
-          topic,
-          userId,
-          text,
-          sourceAdapter: "terminal",
-          startTurn: options.startTurn
-        });
-        return Response.json({ ok: true, message }, { status: 201 });
-      }
-      const recentMatch = path.match(/^\/topics\/([^/]+)\/recent-events$/);
-      if (recentMatch && req.method === "GET") {
-        const topicId = decodeURIComponent(recentMatch[1]);
-        const userId = requiredText(url.searchParams.get("user"), "user");
-        if (!topicForUser(topicId, userId))
-          return jsonError(404, "Topic not found");
-        const events = listRecentRuntimeEventsForTopic(topicId).map(runtimeEvent);
-        return Response.json({ ok: true, events });
-      }
-      const modelMatch = path.match(/^\/topics\/([^/]+)\/model$/);
-      if (modelMatch && req.method === "POST") {
-        const topicId = decodeURIComponent(modelMatch[1]);
-        const body = await bodyRecord(req);
-        const userId = requiredText(body.userId, "userId");
-        const model = requiredText(body.model, "model");
-        if (!topicForUser(topicId, userId))
-          return jsonError(404, "Topic not found");
-        const result = switchTopicModel({ topicId, userId, model });
-        if (!result.ok)
-          return jsonError(400, result.error);
-        return Response.json({ ok: true, model: result.model, result: result.text });
-      }
-      const effortMatch = path.match(/^\/topics\/([^/]+)\/effort$/);
-      if (effortMatch && req.method === "POST") {
-        const topicId = decodeURIComponent(effortMatch[1]);
-        const body = await bodyRecord(req);
-        const userId = requiredText(body.userId, "userId");
-        const effort = requiredText(body.effort, "effort");
-        if (!topicForUser(topicId, userId))
-          return jsonError(404, "Topic not found");
-        const result = switchTopicEffort({ topicId, userId, effort });
-        if (!result.ok)
-          return jsonError(400, result.error);
-        return Response.json({ ok: true, effort: result.effort, result: result.text });
-      }
-      const deleteMatch = path.match(/^\/topics\/([^/]+)$/);
-      if (deleteMatch && req.method === "DELETE") {
-        const topicId = decodeURIComponent(deleteMatch[1]);
-        const userId = requiredText(url.searchParams.get("user"), "user");
-        await topicService.delete({ topicId, userId });
-        return Response.json({ ok: true });
-      }
-      const abortMatch = path.match(/^\/topics\/([^/]+)\/abort$/);
-      if (abortMatch && req.method === "POST") {
-        const topicId = decodeURIComponent(abortMatch[1]);
-        const body = await bodyRecord(req);
-        const userId = requiredText(body.userId, "userId");
-        return Response.json({ ok: true, aborted: topicService.abortTurn(topicId, userId) });
-      }
-      const resetMatch = path.match(/^\/topics\/([^/]+)\/session\/reset$/);
-      if (resetMatch && req.method === "POST") {
-        const topicId = decodeURIComponent(resetMatch[1]);
-        const body = await bodyRecord(req);
-        const userId = requiredText(body.userId, "userId");
-        const result = await topicService.reset({
-          topicId,
-          userId,
-          reason: "node-control-session-reset"
-        });
-        if (result.isError)
-          return jsonError(409, result.text);
-        return Response.json({ ok: true, result: result.text });
-      }
-      const compactMatch = path.match(/^\/topics\/([^/]+)\/session\/compact$/);
-      if (compactMatch && req.method === "POST") {
-        const topicId = decodeURIComponent(compactMatch[1]);
-        const body = await bodyRecord(req);
-        const userId = requiredText(body.userId, "userId");
-        const result = await topicService.compact({
-          topicId,
-          userId,
-          reason: "node-control-session-compact",
-          compactSession: options.compactSession
-        });
-        if (result.isError)
-          return jsonError(409, result.text);
-        return Response.json({ ok: true, result: result.text });
-      }
-      const deriveMatch = path.match(/^\/topics\/([^/]+)\/derive$/);
-      if (deriveMatch && req.method === "POST") {
-        const topicId = decodeURIComponent(deriveMatch[1]);
-        const body = await bodyRecord(req);
-        const userId = requiredText(body.userId, "userId");
-        if (typeof body.copyHistory !== "boolean") {
-          return jsonError(400, "copyHistory must be a boolean");
-        }
-        const copyHistory = body.copyHistory;
-        const source = topicForUser(topicId, userId);
-        if (!source || source.kind === "manager")
-          return jsonError(404, "Topic not found");
-        if (body.name !== undefined && typeof body.name !== "string") {
-          return jsonError(400, "name must be a string");
-        }
-        const name = typeof body.name === "string" && body.name.trim() ? body.name.trim() : undefined;
-        const derived = await topicService.derive({
-          sourceTopicId: topicId,
-          userId,
-          copyHistory,
-          ...name ? { name } : {}
-        });
-        if (!derived)
-          return jsonError(500, "Failed to derive topic");
-        return Response.json({ ok: true, topic: derived }, { status: 201 });
-      }
-      const answerMatch = path.match(/^\/questions\/([^/]+)\/answer$/);
-      if (answerMatch && req.method === "POST") {
-        const messageId = decodeURIComponent(answerMatch[1]);
-        const body = await bodyRecord(req);
-        const topicId = requiredText(body.topicId, "topicId");
-        const userId = requiredText(body.userId, "userId");
-        const label = requiredText(body.label, "label");
-        const result = topicService.answerQuestion(topicId, messageId, label, userId);
-        return Response.json(result, { status: result.ok ? 200 : 409 });
-      }
-      return jsonError(404, "Control route not found");
-    } catch (error) {
-      if (error instanceof TopicServiceError)
-        return topicServiceError(error);
-      if (error instanceof TopicDeriveBusyError)
-        return jsonError(409, error.message);
-      if (error instanceof TopicTitleConflictError)
-        return jsonError(409, error.message);
-      return jsonError(400, error instanceof Error ? error.message : String(error));
-    }
-  };
-}
-function writeNodeDaemonInfo(port, startedAt) {
-  const info = {
-    schemaVersion: 1,
-    protocolVersion: NODE_CONTROL_PROTOCOL_VERSION,
-    nodeVersion: NODE_VERSION,
-    pid: process.pid,
-    port,
-    stateDir: STATE_DIR,
-    startedAt
-  };
-  mkdirSync2(dirname(NODE_DAEMON_INFO_PATH), { recursive: true });
-  const temporary = `${NODE_DAEMON_INFO_PATH}.${process.pid}.${randomUUID4()}.tmp`;
-  writeFileSync2(temporary, `${JSON.stringify(info, null, 2)}
-`, { mode: 384 });
-  chmodSync(temporary, 384);
-  renameSync(temporary, NODE_DAEMON_INFO_PATH);
-  chmodSync(NODE_DAEMON_INFO_PATH, 384);
-  return info;
-}
-function readNodeDaemonInfo() {
-  if (!existsSync2(NODE_DAEMON_INFO_PATH))
-    return null;
-  try {
-    const value = JSON.parse(readFileSync2(NODE_DAEMON_INFO_PATH, "utf8"));
-    if (value?.schemaVersion !== 1 || value.stateDir !== STATE_DIR || !Number.isInteger(value.protocolVersion) || !Number.isInteger(value.pid) || !Number.isInteger(value.port) || value.port <= 0) {
-      return null;
-    }
-    return value;
-  } catch {
-    return null;
-  }
-}
-function removeNodeDaemonInfo(expected) {
-  const current = readNodeDaemonInfo();
-  if (!current || current.pid !== expected.pid || current.port !== expected.port)
-    return;
-  try {
-    unlinkSync(NODE_DAEMON_INFO_PATH);
-  } catch {}
-}
-async function fetchWithTimeout(url, init, timeoutMs) {
-  const controller = new AbortController;
-  const timer = setTimeout(() => controller.abort(), timeoutMs);
-  try {
-    return await fetch(url, { ...init, signal: controller.signal });
-  } finally {
-    clearTimeout(timer);
-  }
-}
-async function inspectNodeDaemon(timeoutMs = 750) {
-  const info = readNodeDaemonInfo();
-  if (!info)
-    return { running: false };
-  try {
-    const response = await fetchWithTimeout(`http://127.0.0.1:${info.port}${NODE_CONTROL_BASE_PATH}/status`, { headers: { authorization: `Bearer ${NODE_CONTROL_TOKEN}` } }, timeoutMs);
-    if (!response.ok)
-      throw new Error(`status returned HTTP ${response.status}`);
-    const status = await response.json();
-    if (status.protocolVersion !== NODE_CONTROL_PROTOCOL_VERSION || status.stateDir !== STATE_DIR || status.pid !== info.pid) {
-      throw new Error("node identity does not match the local state directory");
-    }
-    return { running: true, info };
-  } catch (error) {
-    return {
-      running: false,
-      info,
-      error: error instanceof Error ? error.message : String(error)
-    };
-  }
-}
-async function waitForNodeDaemon(timeoutMs = 1e4) {
-  const deadline = Date.now() + timeoutMs;
-  let lastError = "node did not publish connection information";
-  while (Date.now() < deadline) {
-    const status = await inspectNodeDaemon();
-    if (status.running && status.info) {
-      return {
-        baseUrl: `http://127.0.0.1:${status.info.port}`,
-        token: NODE_CONTROL_TOKEN,
-        info: status.info
-      };
-    }
-    if (status.error)
-      lastError = status.error;
-    await new Promise((resolvePromise) => setTimeout(resolvePromise, 100));
-  }
-  throw new Error(`Negotium node failed to start: ${lastError}`);
-}
-async function stopNodeDaemon(timeoutMs = 3000) {
-  const status = await inspectNodeDaemon();
-  if (!status.running || !status.info)
-    return false;
-  const response = await fetchWithTimeout(`http://127.0.0.1:${status.info.port}${NODE_CONTROL_BASE_PATH}/shutdown`, {
-    method: "POST",
-    headers: { authorization: `Bearer ${NODE_CONTROL_TOKEN}` }
-  }, timeoutMs);
-  if (!response.ok)
-    throw new Error(`node shutdown returned HTTP ${response.status}`);
-  return true;
-}
-
-// ../../packages/node/src/index.ts
-async function availableLoopbackPort() {
-  return new Promise((resolve3, reject) => {
-    const probe = createServer();
-    probe.unref();
-    probe.once("error", reject);
-    probe.listen(0, "127.0.0.1", () => {
-      const address = probe.address();
-      const port = address && typeof address === "object" ? address.port : 0;
-      probe.close((error) => {
-        if (error)
-          reject(error);
-        else if (port > 0)
-          resolve3(port);
-        else
-          reject(new Error("failed to allocate a loopback port"));
-      });
-    });
-  });
-}
-async function wireNodeMcps(host, manifest) {
-  const entries = [];
-  for (const spec of manifest.list()) {
-    if (!manifest.isEnabled(spec.key))
-      continue;
-    try {
-      if (spec.transport === "http") {
-        const instance = await host.ensure(spec.key);
-        if (!instance.port)
-          throw new Error("no port allocated");
-        entries.push({ key: spec.key, kind: "http", port: instance.port });
-      } else {
-        entries.push({
-          key: spec.key,
-          kind: "stdio",
-          command: spec.command,
-          args: spec.args,
-          ...spec.env ? { env: spec.env } : {}
-        });
-      }
-    } catch (err) {
-      logger.warn({ err, key: spec.key }, "node mcp: failed to bring up manifest server");
-    }
-  }
-  setNodeMcpServers(entries);
-  if (entries.length > 0) {
-    logger.info({ keys: entries.map((e) => e.key) }, "node mcp: manifest servers installed");
-  }
-}
-function startNode(opts = {}) {
-  sweepStaleSubagentCards();
-  setFileHooks(nodeFileStore.hooks);
-  const startedAt = new Date().toISOString();
-  const processLease = opts.singleton ? acquireRuntimeProcessLease(NODE_DAEMON_ROLE, {
-    onLost: () => {
-      logger.error("node daemon: singleton lease lost; shutting down");
-      runShutdown("test");
-    }
-  }) : null;
-  if (opts.singleton && !processLease) {
-    throw new Error(`a Negotium node is already running for ${STATE_DIR}`);
-  }
-  let requestStop = () => {
-    runShutdown("test");
-  };
-  let server;
-  const control = createNodeControlHandler({
-    port: () => server?.port ?? 0,
-    startedAt,
-    requestShutdown: () => requestStop()
-  });
-  try {
-    server = Bun.serve({
-      port: opts.port ?? NEGOTIUM_PORT,
-      hostname: "127.0.0.1",
-      idleTimeout: 240,
-      ...opts.maxRequestBodySize ? { maxRequestBodySize: opts.maxRequestBodySize } : {},
-      async fetch(req) {
-        const controlResponse = await control(req);
-        if (controlResponse)
-          return controlResponse;
-        const plugin = await runNodeRequestHandlers(req);
-        if (plugin)
-          return plugin;
-        const mcp = await handleNegotiumMcpRequest(req);
-        if (mcp)
-          return mcp;
-        const url = new URL(req.url);
-        if (url.pathname === "/health") {
-          return Response.json({
-            ok: true,
-            name: "negotium",
-            pid: process.pid,
-            protocolVersion: NODE_CONTROL_PROTOCOL_VERSION,
-            stateDir: STATE_DIR
-          });
-        }
-        return new Response("negotium node", { status: 404 });
-      }
-    });
-  } catch (error) {
-    processLease?.stop();
-    throw error;
-  }
-  const port = server.port;
-  if (!port) {
-    processLease?.stop();
-    throw new Error("negotium node failed to bind a port");
-  }
-  setRuntimeMcpPort(port);
-  const stopTurnRequests = startDurableTurnRequestWorker();
-  const stopInbox = startSessionInboxWorker();
-  let modules;
-  try {
-    modules = startNegotiumNodeModules(opts.modules ?? [], {
-      port,
-      stateDir: STATE_DIR,
-      dataDir: DATA_DIR,
-      runDir: RUN_DIR,
-      workspaceDir: WORKSPACE_DIR,
-      bus: runtimeBus()
-    });
-  } catch (error) {
-    stopTurnRequests();
-    stopInbox();
-    server.stop(true);
-    processLease?.stop();
-    throw error;
-  }
-  const mcpHost = new McpHost;
-  const manifest = new McpManifest;
-  const stopSweeper = mcpHost.startSweeper();
-  let resolveCompleted;
-  const completed = new Promise((resolve3) => {
-    resolveCompleted = resolve3;
-  });
-  let advertised = null;
-  try {
-    advertised = opts.advertise ? writeNodeDaemonInfo(port, startedAt) : null;
-  } catch (error) {
-    stopSweeper();
-    stopTurnRequests();
-    stopInbox();
-    server.stop(true);
-    processLease?.stop();
-    modules.stop();
-    mcpHost.stopAll();
-    throw error;
-  }
-  wireNodeMcps(mcpHost, manifest);
-  onShutdown("node-server", 130, () => {
-    stopTurnRequests();
-    stopInbox();
-    server.stop(true);
-  });
-  if (advertised) {
-    onShutdown("node-daemon-advertisement", 129, () => {
-      removeNodeDaemonInfo({ pid: advertised.pid, port: advertised.port });
-    });
-  }
-  if (processLease)
-    onShutdown("node-daemon-lease", 128, () => processLease.stop());
-  onShutdown("active-agent-turns", 120, async () => {
-    abortAllRooms();
-    await killOwnedCodexTreesForShutdown();
-  });
-  onShutdown("node-modules", 110, () => modules.stop());
-  onShutdown("node-mcp-host", 50, async () => {
-    stopSweeper();
-    await mcpHost.stopAll();
-  });
-  onShutdown("playwright", 50, () => killAllPlaywright());
-  onShutdown("background-bash", 50, () => killAllBgBash());
-  onShutdown("node-completed", -100, resolveCompleted);
-  logger.info({
-    port,
-    stateDir: STATE_DIR,
-    plugins: nodeRequestHandlerNames(),
-    modules: modules.names,
-    capabilities: modules.capabilities
-  }, "negotium node started");
-  const stop = () => runShutdown("test");
-  requestStop = () => {
-    stop();
-  };
-  return {
-    port,
-    completed,
-    stop
-  };
-}
-async function startDefaultNode(opts = {}) {
-  const modules = [];
-  if (process.env.NEGOTIUM_CRON !== "0") {
-    const { createCronModule } = await import("./chunk-51rcsavw.js");
-    modules.push(createCronModule());
-  }
-  const port = opts.port === 0 ? await availableLoopbackPort() : opts.port;
-  return startNode({ ...opts, port, modules });
-}
-async function runNodeDaemon(opts = {}) {
-  const node = await startDefaultNode({
-    port: opts.port ?? 0,
-    advertise: true,
-    singleton: true
-  });
-  await node.completed;
-}
-export {
-  waitForNodeDaemon,
-  stopNodeDaemon,
-  startNode,
-  startDefaultNode,
-  runNodeDaemon,
-  readNodeDaemonInfo,
-  inspectNodeDaemon,
-  NODE_DAEMON_INFO_PATH,
-  NODE_CONTROL_PROTOCOL_VERSION,
-  NODE_CONTROL_BASE_PATH
-};
-
-export { NODE_CONTROL_PROTOCOL_VERSION, NODE_CONTROL_BASE_PATH, startDefaultNode };
-
-//# debugId=47FD99100B6F70D764756E2164756E21