turbollm 1.12.1 → 1.12.2

package/README.md

@@ -735,6 +735,23 @@ access your GPU directly for accelerated local LLM inference.
 > [GitHub repository](https://github.com/mohitsoni48/TurboLLM), not in the npm package —
 > clone the repo to use them.
 
+### Getting your API key
+
+The container publishes port 6996 on `0.0.0.0`, so TurboLLM's daemon requires an API key
+for every request the moment it starts — there is no browser inside the container to log
+in with. Both images launch with **`--print-token`**, which mints a fresh key and prints
+it on every container start (not just the first), so it's always one command away:
+
+```bash
+docker compose -f docker-compose-nvidia.yaml logs | grep 'Token:'   # or docker-compose-amd.yaml
+```
+
+Grab the value after `Token:` and either paste it into the web UI's login prompt, or send
+it yourself as `X-TurboLLM-Auth: <key>` (or `Authorization: Bearer <key>`). Each restart
+mints a new one, so re-run the command above after a restart rather than reusing an old
+value — old keys keep working too and can be revoked from Developer → API Keys once
+you're in.
+
 ---
 
 ### NVIDIA GPU (CUDA)

package/dist/cli.js

@@ -2713,6 +2713,49 @@ function buildEnv(toolchainDirs = []) {
   if (env[key] !== void 0 || dirs.length > 0) env[key] = segments.join(delimiter);
   return env;
 }
+var LINUX_PACKAGE_MANAGERS = ["apt-get", "dnf", "pacman", "zypper"];
+var PACKAGES = {
+  "apt-get": { git: ["git"], cmake: ["cmake"], gcc: ["build-essential"], cuda: ["nvidia-cuda-toolkit"] },
+  dnf: { git: ["git"], cmake: ["cmake"], gcc: ["gcc-c++", "make"] },
+  pacman: { git: ["git"], cmake: ["cmake"], gcc: ["base-devel"], cuda: ["cuda"] },
+  zypper: { git: ["git"], cmake: ["cmake"], gcc: ["gcc-c++", "make"] },
+  // macOS: the compiler is the Xcode Command Line Tools (`xcode-select --install` opens a GUI
+  // prompt, so it isn't something to run for the user headlessly) and there is no CUDA at all.
+  brew: { git: ["git"], cmake: ["cmake"] }
+};
+function privilegePrefix(asRoot) {
+  return asRoot ? [] : ["sudo", "-n"];
+}
+function prereqInstallCommands(pm, id, asRoot) {
+  const pkgs = PACKAGES[pm][id];
+  if (!pkgs || pkgs.length === 0) return void 0;
+  if (pm === "brew") return [["brew", "install", ...pkgs]];
+  const sudo = privilegePrefix(asRoot);
+  switch (pm) {
+    case "apt-get":
+      return [[...sudo, "apt-get", "update"], [...sudo, "apt-get", "install", "-y", ...pkgs]];
+    case "dnf":
+      return [[...sudo, "dnf", "install", "-y", ...pkgs]];
+    case "pacman":
+      return [[...sudo, "pacman", "-Sy", "--noconfirm", ...pkgs]];
+    case "zypper":
+      return [[...sudo, "zypper", "--non-interactive", "install", ...pkgs]];
+  }
+}
+function runningAsRoot() {
+  return typeof process.getuid === "function" && process.getuid() === 0;
+}
+async function detectPackageManager(env) {
+  const candidates = process.platform === "linux" ? LINUX_PACKAGE_MANAGERS : process.platform === "darwin" ? ["brew"] : [];
+  for (const pm of candidates) {
+    try {
+      await runVersion(pm, ["--version"], env);
+      return pm;
+    } catch {
+    }
+  }
+  return null;
+}
 var INSTALL_URLS = {
   git: "https://git-scm.com/downloads",
   cmake: "https://cmake.org/download/",
@@ -2826,15 +2869,28 @@ async function checkGcc(env) {
 async function checkBuildPrereqs(toolchainDirs = []) {
   const platform = process.platform;
   if (platform !== "win32" && platform !== "linux" && platform !== "darwin") {
-    return { supported: false, os: "other", tools: [] };
+    return { supported: false, os: "other", tools: [], packageManager: null };
   }
   const env = buildEnv(toolchainDirs);
-  if (platform === "darwin") {
-    const tools2 = await Promise.all([checkGit(env), checkCmake(env), checkGcc(env)]);
-    return { supported: true, os: "macos", tools: tools2 };
-  }
-  const tools = platform === "win32" ? await Promise.all([checkGit(env), checkCmake(env), checkCuda(env), checkMsvc(env)]) : await Promise.all([checkGit(env), checkCmake(env), checkCuda(env), checkGcc(env)]);
-  return { supported: true, os: platform === "win32" ? "windows" : "linux", tools };
+  const [tools, packageManager] = await Promise.all([
+    platform === "darwin" ? Promise.all([checkGit(env), checkCmake(env), checkGcc(env)]) : platform === "win32" ? Promise.all([checkGit(env), checkCmake(env), checkCuda(env), checkMsvc(env)]) : Promise.all([checkGit(env), checkCmake(env), checkCuda(env), checkGcc(env)]),
+    detectPackageManager(env)
+  ]);
+  return {
+    supported: true,
+    os: platform === "win32" ? "windows" : platform === "darwin" ? "macos" : "linux",
+    tools: withInstallCommands(tools, packageManager),
+    packageManager
+  };
+}
+function withInstallCommands(tools, pm) {
+  if (!pm) return tools;
+  const asRoot = runningAsRoot();
+  return tools.map((t) => {
+    if (t.found) return t;
+    const installCommands = prereqInstallCommands(pm, t.id, asRoot);
+    return installCommands ? { ...t, installCommands } : t;
+  });
 }
 var CMAKE_CONFIGURE_ARGS = ["-DGGML_CUDA=ON", "-DCMAKE_BUILD_TYPE=Release", "-DCMAKE_CUDA_FLAGS=-allow-unsupported-compiler"];
 var CMAKE_CONFIGURE_ARGS_MACOS = ["-DGGML_METAL=ON", "-DCMAKE_BUILD_TYPE=Release"];
@@ -2903,6 +2959,20 @@ function suggestEngineName(binPath, version2) {
 
 // src/engines/build-runner.ts
 var execFileP8 = promisify8(execFile10);
+async function findLibcudaDir(signal) {
+  try {
+    const { stdout } = await execFileP8("ldconfig", ["-p"], {
+      timeout: 5e3,
+      maxBuffer: 4 * 1024 * 1024,
+      signal
+    });
+    const line = stdout.split("\n").find((l) => /\blibcuda\.so\b/.test(l));
+    const m = line ? line.match(/=>\s*(\S+)/) : null;
+    return m ? dirname5(m[1]) : null;
+  } catch {
+    return null;
+  }
+}
 function chooseEngineName(name, priorName) {
   return name ?? priorName ?? "";
 }
@@ -3194,6 +3264,36 @@ function neutralizeGratuitousAsm(srcDir, log) {
     );
   }
 }
+function noInstallCommandError(tool, packageManager) {
+  if ((tool.installCommands?.length ?? 0) > 0) return null;
+  return (packageManager ? `TurboLLM doesn't have a one-command ${packageManager} install for ${tool.name} on this system. ` : `No supported package manager (apt-get, dnf, pacman, zypper, or Homebrew) was found on this system. `) + `Install ${tool.name} yourself \u2014 see ${tool.installUrl} \u2014 then re-check.`;
+}
+async function runPrereqInstall(req, hooks, signal) {
+  hooks.phase("provisioning");
+  const prereqs = await checkBuildPrereqs(req.toolchainDirs);
+  if (!prereqs.supported) throw new Error("Installing build prerequisites is currently Linux and macOS only.");
+  const tool = prereqs.tools.find((t) => t.id === req.tool);
+  if (!tool) throw new Error(`"${req.tool}" isn't a build prerequisite on this system.`);
+  if (tool.found) {
+    hooks.log(`${tool.name} is already installed${tool.version ? ` (${tool.version})` : ""} \u2014 nothing to do.`);
+    return;
+  }
+  const noCommand = noInstallCommandError(tool, prereqs.packageManager);
+  if (noCommand) throw new Error(noCommand);
+  const env = { ...buildEnv(req.toolchainDirs), DEBIAN_FRONTEND: "noninteractive" };
+  for (const [cmd, ...args] of tool.installCommands) {
+    hooks.log(`$ ${[cmd, ...args].join(" ")}`);
+    await runStep(cmd, args, { env, signal, onLine: hooks.log });
+  }
+  const after = await checkBuildPrereqs(req.toolchainDirs);
+  const now = after.tools.find((t) => t.id === req.tool);
+  if (!now?.found) {
+    throw new Error(
+      `The install commands ran, but ${tool.name} still isn't detected. Install it yourself \u2014 see ${tool.installUrl} \u2014 or, if it landed somewhere off PATH, add that folder under Build environment and re-check.`
+    );
+  }
+  hooks.log(`${now.name}${now.version ? ` ${now.version}` : ""} installed \u2713`);
+}
 async function runBuild(req, hooks, signal) {
   const isWindows = process.platform === "win32";
   const isMac = process.platform === "darwin";
@@ -3300,9 +3400,17 @@ async function runBuild(req, hooks, signal) {
       await runStep("cmake", compileArgs, { cwd: buildRoot, env, signal, onLine: captureLog });
     }
   };
+  let linuxCudaArgs = CMAKE_CONFIGURE_ARGS;
+  if (!isWindows && !isMac) {
+    const libcudaDir = await findLibcudaDir(signal);
+    if (libcudaDir) {
+      hooks.log(`libcuda.so found outside the CUDA Toolkit path \u2014 adding CMAKE_LIBRARY_PATH=${libcudaDir}`);
+      linuxCudaArgs = [...CMAKE_CONFIGURE_ARGS, `-DCMAKE_LIBRARY_PATH=${libcudaDir}`];
+    }
+  }
   const buildLog = [];
   try {
-    await configureAndCompile(isMac ? CMAKE_CONFIGURE_ARGS_MACOS : CMAKE_CONFIGURE_ARGS, buildLog);
+    await configureAndCompile(isMac ? CMAKE_CONFIGURE_ARGS_MACOS : linuxCudaArgs, buildLog);
   } catch (e) {
     if (!isMac || !isIncompleteMetalBackendError(buildLog)) throw e;
     hooks.log(
@@ -4650,6 +4758,27 @@ function getLanIp() {
   const real = candidates.find((c) => !VIRTUAL_ADAPTER_NAME.test(c.name));
   return (real ?? candidates[0])?.address ?? null;
 }
+function getAdvertisedHost() {
+  const raw = process.env.TURBOLLM_ADVERTISED_HOST?.trim();
+  if (!raw) return null;
+  let v = raw.replace(/^[a-z][a-z0-9+.-]*:\/\//i, "");
+  const slash = v.indexOf("/");
+  if (slash >= 0) v = v.slice(0, slash);
+  v = v.trim();
+  if (!v) return null;
+  const bracketed = /^(\[[^\]]+\])(?::(\d{1,5}))?$/.exec(v);
+  if (bracketed) {
+    const port2 = bracketed[2] ? Number(bracketed[2]) : null;
+    return { host: bracketed[1], port: port2 && port2 > 0 && port2 <= 65535 ? port2 : null };
+  }
+  if (v.indexOf(":") !== v.lastIndexOf(":")) return { host: `[${v}]`, port: null };
+  const withPort = /^(.+):(\d{1,5})$/.exec(v);
+  if (withPort) {
+    const port2 = Number(withPort[2]);
+    if (port2 > 0 && port2 <= 65535) return { host: withPort[1], port: port2 };
+  }
+  return { host: v, port: null };
+}
 
 // src/chat/parser.ts
 var THINK_OPEN = "<think>";
@@ -5303,6 +5432,7 @@ function buildUpstream(remote, path) {
   return `${base2}${FACADE_PREFIX}${suffix}`;
 }
 var FORWARDED = ["content-type", "accept"];
+var LINK_AUTH_HEADER = "X-TurboLLM-Auth";
 function linkHeaders(remote, incoming) {
   const out = new Headers();
   if (incoming) {
@@ -5311,7 +5441,7 @@ function linkHeaders(remote, incoming) {
       if (v) out.set(name, v);
     }
   }
-  out.set("X-TurboLLM-Auth", remote.token);
+  out.set(LINK_AUTH_HEADER, remote.token);
   return out;
 }
 async function proxyStream(remote, path, init, signal, fetchImpl = fetch) {
@@ -5496,11 +5626,11 @@ function generateApiKey() {
   const hash = createHash3("sha256").update(full).digest("hex");
   return { full, hash, prefix: full.slice(0, 12) };
 }
-function provisionTunnelApiKey(d) {
+function provisionTunnelApiKey(d, label = "tunnel") {
   const { full, hash, prefix } = generateApiKey();
   const key = {
     id: randomUUID3(),
-    name: `tunnel-${(/* @__PURE__ */ new Date()).toISOString()}`,
+    name: `${label}-${(/* @__PURE__ */ new Date()).toISOString()}`,
     hash,
     prefix,
     createdAt: (/* @__PURE__ */ new Date()).toISOString(),
@@ -5509,6 +5639,28 @@ function provisionTunnelApiKey(d) {
   d.store.update((cfg2) => cfg2.apiKeys.push(key));
   return full;
 }
+function isLoopbackBindHost(host2) {
+  const h = host2.trim().toLowerCase().replace(/^\[|\]$/g, "");
+  if (h === "localhost" || h === "::1" || h === "::ffff:127.0.0.1") return true;
+  return /^127\.\d{1,3}\.\d{1,3}\.\d{1,3}$/.test(h);
+}
+function provisionBootstrapApiKey(d, bindHost) {
+  if (isLoopbackBindHost(bindHost)) return null;
+  const cfg2 = d.store.snapshot();
+  if (cfg2.daemon.requireApiKey !== true) return null;
+  if (cfg2.apiKeys.length > 0) return null;
+  const { full, hash, prefix } = generateApiKey();
+  const key = {
+    id: randomUUID3(),
+    name: `bootstrap-${(/* @__PURE__ */ new Date()).toISOString()}`,
+    hash,
+    prefix,
+    createdAt: (/* @__PURE__ */ new Date()).toISOString(),
+    lastUsedAt: null
+  };
+  d.store.update((mut) => mut.apiKeys.push(key));
+  return full;
+}
 function presentedKey(c) {
   const direct = c.req.header("X-TurboLLM-Auth") ?? c.req.header("x-api-key");
   if (direct && direct.trim()) return direct.trim();
@@ -10099,10 +10251,9 @@ ${m.content}` : m.content;
     const conv = db2.getConversation(convId);
     if (!conv) return err3(c, 404, "not_found", "Conversation not found.");
     const cfg2 = d.store.snapshot();
-    const lanIp = getLanIpForShare();
-    const url = `http://${lanIp}:${cfg2.daemon.port}/chat/${convId}`;
-    const onlyLocal = lanIp === "127.0.0.1";
-    return c.json({ url, onlyLocal });
+    const share = getShareTarget(cfg2.daemon.port);
+    const url = `http://${share.host}:${share.port}/chat/${convId}`;
+    return c.json({ url, onlyLocal: share.onlyLocal });
   });
   app2.post("/api/v1/conversations/import", async (c) => {
     let raw;
@@ -10188,8 +10339,11 @@ function importOpenAiMessages(c, db2, messages, titleField, modelField) {
   }
   return c.json({ id: newConv.id }, 201);
 }
-function getLanIpForShare() {
-  return getLanIp() ?? "127.0.0.1";
+function getShareTarget(defaultPort) {
+  const advertised = getAdvertisedHost();
+  if (advertised) return { host: advertised.host, port: advertised.port ?? defaultPort, onlyLocal: false };
+  const host2 = getLanIp() ?? "127.0.0.1";
+  return { host: host2, port: defaultPort, onlyLocal: host2 === "127.0.0.1" };
 }
 function reportChatBenchResult(d, ms, stats) {
   try {
@@ -11073,6 +11227,7 @@ Cannot execute bash commands.`);
 
 // src/code/code-upstream.ts
 var FALLBACK_CTX = 8192;
+var LINK_PLACEHOLDER_KEY = "turbo-link";
 function resolveCodeUpstream(d, requestedModel) {
   const res = resolveChatUpstream(d, requestedModel);
   if (!res.ok) throw new Error(res.code === "model_not_loaded" ? "model_not_loaded" : res.message);
@@ -11086,14 +11241,34 @@ function resolveCodeUpstream(d, requestedModel) {
       remote: u.remote,
       target: "",
       provider: {
-        baseUrl: `${u.remote.baseUrl}/v1`,
-        apiKey: u.remote.token,
+        // THE FAÇADE, not the host's public `/v1` mount. pi's openai client appends
+        // `/chat/completions` to this, so `<base>/v1` addressed `<host>/v1/chat/completions`
+        // — the public gateway — where a link token is refused outright: it carries a
+        // `grant`, `isFacadeOnlyKey` makes `verifyKeyValue` treat it as no match at all, and
+        // lanAuth 401s in the LAN-open/key-required configuration every Turbo Link host runs
+        // in (pinned by link-auth.test.ts, "a GRANTED link token is refused by lanAuth on the
+        // public /v1/* gateway"). That is precisely why chat over a link worked while Code
+        // did not: chat's transport is `proxyStream`, which derives the URL from
+        // `buildUpstream`; Code was the one caller that spelled a link URL by hand.
+        //
+        // Built with `buildUpstream` rather than a second literal so there stays exactly ONE
+        // place that knows how a link URL is spelled — which also normalises the trailing
+        // slash a tunnel URL pasted from a browser address bar routinely carries (`https://h/`
+        // → `https://h//v1/...`, a 404 on some proxies).
+        //
+        // Reaching the façade is not merely cosmetic: the public mount would bypass
+        // `requireCapability('models:use')`, the model allowlist, the wake gate and the
+        // link-chaining refusal — so on a host running LAN-open WITHOUT a required key, the
+        // old URL would have silently *worked* while ignoring the entire capability grant.
+        baseUrl: buildUpstream(u.remote, "/v1"),
+        apiKey: LINK_PLACEHOLDER_KEY,
         // The link token travels as X-TurboLLM-Auth (linkHeaders, link-proxy.ts) and NOT as
         // a bearer: `Authorization` on the host is its own API-key credential, a different
         // secret with different scope, and presenting a link token there would either be
-        // rejected or — worse — accepted as something it is not.
+        // rejected or — worse — accepted as something it is not. `authHeader: false` stops
+        // pi adding one; `LINK_PLACEHOLDER_KEY` stops the openai SDK adding one from apiKey.
         authHeader: false,
-        headers: { "X-TurboLLM-Auth": u.remote.token }
+        headers: { [LINK_AUTH_HEADER]: u.remote.token }
       }
     };
   }
@@ -18178,6 +18353,9 @@ var UI_ACTIONS = [
   "dismiss_build_success",
   "cancel_engine_build",
   "download_cuda_toolkit",
+  // Install a missing build prereq with the host's own package manager (the headless fix:
+  // the install LINK opens a page in the operator's browser, not on the daemon machine).
+  "install_build_prereq",
   "toggle_agent_tool_group",
   "back_to_agents",
   "reset_agent_to_default",
@@ -24653,8 +24831,8 @@ function registerApi(app2, d) {
     async (c) => c.json(await checkBuildPrereqs(d.store.snapshot().build.toolchainDirs))
   );
   app2.post("/api/v1/build/run", async (c) => {
-    if (!isLocalRequest(c, d))
-      return err5(c, 403, "forbidden", "Building an engine is only available on the machine running TurboLLM.");
+    if (!isLocalOrAuthenticated(c, d))
+      return err5(c, 403, "forbidden", "Building an engine requires a valid API key from a non-host device.");
     if (process.platform !== "win32" && process.platform !== "linux" && process.platform !== "darwin")
       return err5(c, 409, "unsupported_platform", "In-app build is currently Windows, Linux, or macOS only.");
     const b = await body4(c);
@@ -24748,9 +24926,42 @@ function registerApi(app2, d) {
     }
     return c.json({ ok: false });
   });
+  app2.post("/api/v1/build/install-prereq", async (c) => {
+    if (!isLocalOrAuthenticated(c, d))
+      return err5(c, 403, "forbidden", "Installing build prerequisites requires a valid API key from a non-host device.");
+    if (process.platform !== "linux" && process.platform !== "darwin")
+      return err5(c, 409, "unsupported_platform", "Installing build prerequisites is currently Linux and macOS only \u2014 on Windows these tools need their own installers.");
+    const b = await body4(c);
+    const tool = (b.tool ?? "").trim();
+    if (tool !== "git" && tool !== "cmake" && tool !== "cuda" && tool !== "gcc")
+      return err5(c, 400, "invalid_config_value", "tool must be one of: git, cmake, cuda, gcc.");
+    const busy = engineWorkBusy(d);
+    if (busy) return err5(c, 409, "engine_already_running", busy);
+    const toolchainDirs = d.store.snapshot().build.toolchainDirs;
+    const ac = new AbortController();
+    buildAbort = ac;
+    d.build.start(tool);
+    d.build.phase("provisioning");
+    void (async () => {
+      try {
+        await runPrereqInstall({ tool, toolchainDirs }, { phase: (p) => d.build.phase(p), log: (line) => d.build.log(line) }, ac.signal);
+        d.build.done();
+      } catch (e) {
+        if (e?.name === "AbortError") {
+          d.build.log("Install cancelled.");
+          d.build.cancel("Install cancelled.");
+        } else {
+          d.build.fail(`Could not install ${tool}: ${e instanceof Error ? e.message : String(e)}`);
+        }
+      } finally {
+        if (buildAbort === ac) buildAbort = null;
+      }
+    })();
+    return c.json({ accepted: true }, 202);
+  });
   app2.post("/api/v1/build/cuda", async (c) => {
-    if (!isLocalRequest(c, d))
-      return err5(c, 403, "forbidden", "Downloading CUDA is only available on the machine running TurboLLM.");
+    if (!isLocalOrAuthenticated(c, d))
+      return err5(c, 403, "forbidden", "Downloading CUDA requires a valid API key from a non-host device.");
     if (process.platform !== "win32")
       return err5(c, 409, "unsupported_platform", "Automatic CUDA download is currently Windows x86_64 only.");
     const busy = engineWorkBusy(d);
@@ -24922,8 +25133,8 @@ function registerApi(app2, d) {
     return c.json({ accepted: true, engine: "llamafile" }, 202);
   });
   app2.post("/api/v1/engines", async (c) => {
-    if (!isLocalRequest(c, d))
-      return err5(c, 403, "forbidden", "Engines can only be added from the machine running TurboLLM.");
+    if (!isLocalOrAuthenticated(c, d))
+      return err5(c, 403, "forbidden", "Adding an engine requires a valid API key from a non-host device.");
     const b = await body4(c);
     if (!b.binPath || !b.binPath.trim()) return err5(c, 400, "invalid_config_value", "binPath is required.");
     try {
@@ -24943,8 +25154,8 @@ function registerApi(app2, d) {
     }
   });
   app2.post("/api/v1/engines/scan", async (c) => {
-    if (!isLocalRequest(c, d))
-      return err5(c, 403, "forbidden", "Engine scanning is only available on the machine running TurboLLM.");
+    if (!isLocalOrAuthenticated(c, d))
+      return err5(c, 403, "forbidden", "Engine scanning requires a valid API key from a non-host device.");
     const b = await body4(c);
     const path = (b.path ?? "").trim();
     if (!path) return err5(c, 400, "invalid_config_value", "path is required.");
@@ -26905,7 +27116,7 @@ function registerLinkAdminRoutes(app2, d, opts) {
     const cfg2 = d.store.snapshot();
     const port2 = cfg2.daemon.port ?? 6996;
     const tunnelUrl = d.tunnel?.url() ?? null;
-    const baseUrl = tunnelUrl ?? `http://${lanHost()}:${port2}`;
+    const baseUrl = tunnelUrl ?? lanBaseUrl(port2);
     if (d.telemetry) {
       const preset = typeof body10?.preset === "string" && Object.prototype.hasOwnProperty.call(LINK_PRESETS, body10.preset) ? body10.preset : void 0;
       emit(d.telemetry, linkMinted, { capabilityCount: caps.length, ...preset ? { preset } : {} });
@@ -27239,8 +27450,10 @@ function remoteFailure(c, rec, probe2) {
     status
   );
 }
-function lanHost() {
-  return getLanIp() ?? "localhost";
+function lanBaseUrl(port2) {
+  const advertised = getAdvertisedHost();
+  if (advertised) return `http://${advertised.host}:${advertised.port ?? port2}`;
+  return `http://${getLanIp() ?? "localhost"}:${port2}`;
 }
 
 // src/chat/chat-agent-routes.ts
@@ -33830,10 +34043,18 @@ Commands:
 Options:
   --port <n>     Port to listen on / connect to (default: 6996)
   --addr <h:p>   Full host:port override (e.g. 0.0.0.0:6996)
+                 Binding a non-loopback address turns on API-key enforcement;
+                 if no key exists yet, one is generated and printed on startup.
   --no-open      Do not open a browser window on startup
   --tunnel       Expose this daemon on the internet via a cloudflared quick
                  tunnel (Cloud Launch) \u2014 prints the public URL + a required
                  access token. For running TurboLLM on a rented cloud GPU box.
+  --print-token  Mint a fresh API key and print it as a stable 'Token:   <key>'
+                 line on every startup, whether or not one already existed \u2014
+                 unlike the automatic non-loopback bootstrap key (which only
+                 ever mints once, on the very first boot), this always gives
+                 you a freshly known-good token to grep out of 'docker logs'
+                 after any restart. Default in the official Docker images.
   --config <f>   Path to a custom config file
   --no-telemetry Disable telemetry entirely, whatever this install's saved
                  setting says (same as TURBOLLM_TELEMETRY=off). For CI,
@@ -33847,11 +34068,22 @@ Examples:
   turbollm --no-open               # start without opening a browser
   turbollm --addr 0.0.0.0:6996    # bind to all interfaces (LAN sharing)
   turbollm --tunnel --no-open      # run on a rented GPU box, reachable via a public URL
+  turbollm --addr 0.0.0.0:6996 --print-token   # LAN/Docker: always print a usable token
   turbollm --stop                  # stop the running daemon
   turbollm launch claude           # open Claude Code on your loaded model
   turbollm launch claude --model qwen3-8b   # load qwen3-8b, then launch
   turbollm launch opencode         # wire opencode to TurboLLM, then launch it
 
+Environment:
+  TURBOLLM_ADVERTISED_HOST
+                 Host (or host:port) to put in the URLs TurboLLM hands out \u2014
+                 Turbo Link strings and chat-share links. Set this when the
+                 address others must use isn't one this machine can see, e.g.
+                 inside a Docker container, where the only interface found is
+                 the container-internal bridge IP (172.17.0.2) and the real
+                 address is the published host:port outside.
+                 e.g. TURBOLLM_ADVERTISED_HOST=192.168.1.50:6996
+
 `
   );
   process.exit(0);
@@ -34065,6 +34297,8 @@ if (portFlag) {
 var lastColon = addr.lastIndexOf(":");
 var host = addr.slice(0, lastColon) || "127.0.0.1";
 var port = Number(addr.slice(lastColon + 1)) || 6996;
+var bootstrapKey = provisionBootstrapApiKey(deps, host);
+var advertisedHost = getAdvertisedHost();
 function openBrowser(url) {
   let cmd;
   let args;
@@ -34085,6 +34319,7 @@ function openBrowser(url) {
   });
 }
 var noOpen = hasFlag("--no-open");
+var printTokenRequested = hasFlag("--print-token");
 var tunnelToken = null;
 var server;
 var rebinding = false;
@@ -34105,10 +34340,37 @@ function listen(attempt = 0) {
       if (host === "0.0.0.0") {
         console.log(`  Network: http://<your-ip>:${info.port}  (LAN)`);
       }
+      if (advertisedHost) {
+        console.log(`  Advertised: http://${advertisedHost.host}:${advertisedHost.port ?? info.port}  (TURBOLLM_ADVERTISED_HOST)`);
+      }
       console.log(``);
       console.log(`  API:     ${uiUrl}/api/v1/status`);
       console.log(`  Stop:    Ctrl+C`);
       console.log(``);
+      if (bootstrapKey) {
+        console.log(`  ============================================================`);
+        console.log(`  This daemon is reachable from other machines, so the API`);
+        console.log(`  requires a key. One was generated for you just now:`);
+        console.log(``);
+        console.log(`      ${bootstrapKey}`);
+        console.log(``);
+        console.log(`  SAVE IT NOW \u2014 it is shown once and cannot be recovered.`);
+        console.log(`  Send it as 'X-TurboLLM-Auth: <key>' (or 'Authorization:`);
+        console.log(`  Bearer <key>'), or paste it into the web UI. Manage or`);
+        console.log(`  revoke it later under Developer -> API Keys.`);
+        console.log(`  ============================================================`);
+        console.log(``);
+      }
+      if (printTokenRequested) {
+        const printToken = bootstrapKey ?? provisionTunnelApiKey(deps, "print-token");
+        if (!bootstrapKey) {
+          console.log(`  --print-token: a fresh API key was generated for you just now.`);
+          console.log(`  SAVE IT NOW \u2014 it is shown once and cannot be recovered.`);
+          console.log(``);
+        }
+        console.log(`  Token:   ${printToken}`);
+        console.log(``);
+      }
       if (!noOpen) {
         openBrowser(uiUrl);
       }

package/dist/webdist/assets/{AgentEditPage-B9mKK6Ob.js → AgentEditPage-DC5b8GLz.js}

@@ -1 +1 @@
-import{j as e}from"./radix-B0YBjihE.js";import{b as W,u as $,r as b}from"./vendor-C1I6euDx.js";import{u as G,d as H,e as Y,f as J,g as U,a as z,B as C,t as j,c as q,b as h,A as _}from"./index-C9ZXfFYo.js";import{f as V}from"./chat-api-Bgrb0rnf.js";import{f as X,a as Z}from"./agent-api-BAMDY8-v.js";import{P as B}from"./personas-Dkq9JD72.js";import{C as ee}from"./chevron-left-CxvUI3ck.js";import{R as te}from"./rotate-ccw-kHM_pFpt.js";import{T as se}from"./trash-2-BXZkODa0.js";import{C as ne}from"./chevron-right-CpdnK5S2.js";import"./dropdown-menu-CaecUWTU.js";const ae=()=>({name:"",description:"",systemPrompt:"",skillIds:[],tools:[]});function oe(s){const d=[],x=new Map;for(const n of s){const a=/^mcp__([^_]+(?:_[^_]+)*)__/.exec(n.name);if(!a){d.push(n);continue}const i=a[1],p=/^\[([^\]]+)\]/.exec(n.description),c=p?p[1]:i.replace(/_/g," ");x.has(i)||x.set(i,{key:i,label:c,tools:[]}),x.get(i).tools.push(n)}return{builtin:d,groups:[...x.values()].sort((n,a)=>n.label.localeCompare(a.label))}}function le(s){return s.replace(/^mcp__[^_]+(?:_[^_]+)*__/,"")}function re(s){return s.replace(/^\[[^\]]+\]\s*/,"")}function D({tool:s,checked:d,onToggle:x}){return e.jsxs("label",{className:"flex cursor-pointer items-start gap-2 text-[12px]",children:[e.jsx("input",{type:"checkbox",className:"mt-0.5",checked:d,onChange:x}),e.jsxs("span",{className:"flex flex-col",children:[e.jsx("span",{className:"font-mono text-ink",children:le(s.name)}),s.description&&e.jsx("span",{className:"text-faint",children:re(s.description)})]})]})}function ie({group:s,selected:d,onToggleAll:x,onToggleOne:n}){const[a,i]=b.useState(!1),p=s.tools.map(l=>l.name),c=p.filter(l=>d.has(l)).length,o=c===p.length,g=c>0&&!o,u=b.useRef(null);return b.useEffect(()=>{u.current&&(u.current.indeterminate=g)},[g]),e.jsxs("div",{className:"rounded-md border border-border",children:[e.jsxs("div",{className:"flex items-center gap-2 px-2.5 py-2",children:[e.jsx("input",{ref:u,type:"checkbox",checked:o,onChange:()=>x(p,!o)}),e.jsxs("button",{type:"button",onClick:()=>{j("agents","toggle_agent_tool_group"),i(l=>!l)},className:"flex flex-1 items-center gap-1.5 text-left text-[13px] text-ink",children:[e.jsx(ne,{size:12,className:q("shrink-0 text-faint transition-transform",a&&"rotate-90")}),s.label,e.jsxs("span",{className:"text-[11px] text-faint",children:["(",c,"/",p.length,")"]})]})]}),a&&e.jsx("div",{className:"flex flex-col gap-1.5 border-t border-border px-3 py-2 pl-9",children:s.tools.map(l=>e.jsx(D,{tool:l,checked:d.has(l.name),onToggle:()=>n(l.name)},l.name))})]})}function ce({tools:s,selected:d,onChange:x}){const n=new Set(d),{builtin:a,groups:i}=oe(s),p=o=>x(n.has(o)?d.filter(g=>g!==o):[...d,o]),c=(o,g)=>{const u=d.filter(l=>!o.includes(l));x(g?[...u,...o]:u)};return s.length===0?e.jsx("p",{className:"text-[12px] text-faint",children:"No tools available yet."}):e.jsxs("div",{className:"flex flex-col gap-2",children:[a.length>0&&e.jsx("div",{className:"flex flex-col gap-2 rounded-md border border-border bg-panel-2 p-3",children:a.map(o=>e.jsx(D,{tool:o,checked:n.has(o.name),onToggle:()=>p(o.name)},o.name))}),i.map(o=>e.jsx(ie,{group:o,selected:n,onToggleAll:c,onToggleOne:p},o.key))]})}function je(){const{agentId:s="new"}=W(),d=$(),x=G(),n=s==="new",a=!n&&B.some(t=>t.id===s),i=a?B.find(t=>t.id===s):void 0,p=H(),c=!n&&!a?(p.data??[]).find(t=>t.id===s):void 0,o=Y(),g=J(),u=U(),l=a?g.data?.[s]:void 0,I=z({queryKey:Z.list(),queryFn:X,staleTime:0}),k=I.data??[],w=z({queryKey:["available-tools"],queryFn:V}),N=w.data??[],[m,f]=b.useState(ae()),[S,T]=b.useState(!1),[A,P]=b.useState(!1),[L,R]=b.useState(!1),[E,Q]=b.useState("skills");n&&!S&&(k.length||N.length)&&(f(t=>({...t,skillIds:k.map(r=>r.id),tools:N.map(r=>r.name)})),T(!0)),!n&&!a&&!S&&c&&(f({name:c.name,description:c.description,systemPrompt:c.systemPrompt,skillIds:c.skillIds,tools:c.tools}),T(!0)),a&&!S&&i&&g.isSuccess&&(k.length||N.length)&&(f({name:l?.name??i.name,description:l?.description??i.description,systemPrompt:l?.systemPrompt??i.systemPrompt,skillIds:l?.skillIds??k.map(t=>t.id),tools:l?.tools??N.map(t=>t.name)}),T(!0));const y=()=>{j("agents","back_to_agents"),d("/customize")},O=t=>f(r=>({...r,skillIds:r.skillIds.includes(t)?r.skillIds.filter(v=>v!==t):[...r.skillIds,t]})),F=()=>{if(!m.name.trim()){h.error("Name is required.");return}P(!0);const t={name:m.name.trim(),description:m.description.trim(),systemPrompt:m.systemPrompt,skillIds:m.skillIds,tools:m.tools};if(a){u.save.mutate({id:s,override:t},{onSuccess:()=>{h.success("Agent saved."),y()},onError:v=>{h.error(v instanceof _?v.message:"Could not save agent."),P(!1)}});return}const r={onSuccess:()=>{x.invalidateQueries({queryKey:["chat-agents"]}),h.success(n?"Agent created.":"Agent saved."),y()},onError:v=>{h.error(v instanceof _?v.message:"Could not save agent."),P(!1)}};n?o.add.mutate(t,r):o.update.mutate({id:s,patch:t},r)},K=()=>{u.reset.mutate(s,{onSuccess:()=>{h.success("Reset to default."),i&&f({name:i.name,description:i.description,systemPrompt:i.systemPrompt,skillIds:k.map(t=>t.id),tools:N.map(t=>t.name)})},onError:t=>h.error(t instanceof _?t.message:"Could not reset agent.")})},M=()=>{o.remove.mutate(s,{onSuccess:()=>{h.success("Agent deleted."),y()},onError:t=>h.error(t instanceof _?t.message:"Could not delete agent.")})};return!n&&!a&&p.isSuccess&&!c?e.jsxs("div",{className:"flex w-full flex-col items-center gap-3 px-8 py-16",children:[e.jsx("p",{className:"text-[14px] text-muted",children:"That agent no longer exists."}),e.jsx(C,{size:"sm",variant:"outline",onClick:y,children:"Back to agents"})]}):e.jsxs("div",{className:"flex w-full max-w-4xl flex-col gap-5 px-4 py-6 md:px-8",children:[e.jsxs("div",{className:"flex flex-wrap items-center gap-2",children:[e.jsx("button",{type:"button",onClick:y,className:"text-faint hover:text-ink",title:"Back to agents",children:e.jsx(ee,{size:18})}),e.jsx("span",{className:"text-[15px] font-medium text-ink",children:n?"New agent":a?l?"Edit agent (modified built-in)":"Edit agent (built-in)":"Edit agent"}),e.jsxs("div",{className:"ml-auto flex items-center gap-2",children:[a&&e.jsxs(C,{size:"sm",variant:"outline",onClick:()=>{j("agents","reset_agent_to_default"),K()},disabled:u.reset.isPending,children:[e.jsx(te,{size:13})," Reset to default"]}),e.jsx(C,{size:"sm",variant:"outline",onClick:y,children:"Cancel"}),e.jsx(C,{size:"sm",onClick:()=>{j("agents","save_agent"),F()},disabled:A||!m.name.trim(),children:A?"Saving…":"Save"})]})]}),a&&e.jsx("p",{className:"rounded-md border border-border bg-panel px-3 py-2 text-[12px] text-muted",children:"Built-in agents can be edited in place — Reset to default discards your changes and restores TurboLLM's original prompt and access."}),e.jsxs("div",{className:"flex flex-col gap-1.5",children:[e.jsx("label",{className:"text-[12px] font-medium text-muted",children:"Name"}),e.jsx("input",{className:"rounded-md border border-border bg-bg px-3 py-1.5 text-[13px] text-ink outline-none focus:border-accent placeholder:text-faint",placeholder:"Release Notes Writer",value:m.name,onChange:t=>f(r=>({...r,name:t.target.value}))})]}),e.jsxs("div",{className:"flex flex-col gap-1.5",children:[e.jsx("label",{className:"text-[12px] font-medium text-muted",children:"Description"}),e.jsx("input",{className:"rounded-md border border-border bg-bg px-3 py-1.5 text-[13px] text-ink outline-none focus:border-accent placeholder:text-faint",placeholder:"What this agent is for, in one line",value:m.description,onChange:t=>f(r=>({...r,description:t.target.value}))})]}),e.jsxs("div",{className:"flex flex-col gap-1.5",children:[e.jsx("label",{className:"text-[12px] font-medium text-muted",children:"System prompt"}),e.jsx("textarea",{className:"min-h-[160px] resize-y rounded-md border border-border bg-bg px-3 py-2 font-mono text-[12px] leading-relaxed text-ink outline-none focus:border-accent placeholder:text-faint",placeholder:"You are…",value:m.systemPrompt,onChange:t=>f(r=>({...r,systemPrompt:t.target.value}))})]}),e.jsxs("div",{className:"flex flex-col gap-2.5",children:[e.jsx("div",{className:"inline-flex w-fit rounded-md border border-border p-0.5",children:["skills","tools"].map(t=>e.jsx("button",{type:"button",onClick:()=>{j("agents","switch_agent_form_tab"),Q(t)},className:q("rounded px-3 py-1.5 text-[13px] font-medium transition-colors",E===t?"bg-accent/12 text-accent":"text-muted hover:text-ink"),children:t==="skills"?`Skills (${m.skillIds.length})`:`Tools (${m.tools.length})`},t))}),E==="skills"?I.isLoading?e.jsx("p",{className:"text-[12px] text-faint",children:"Loading…"}):k.length===0?e.jsx("p",{className:"text-[12px] text-faint",children:"No skills yet — create one under Customize → Skills."}):e.jsx("div",{className:"flex flex-col gap-2 rounded-md border border-border bg-panel-2 p-3",children:k.map(t=>e.jsxs("label",{className:"flex cursor-pointer items-start gap-2 text-[13px]",children:[e.jsx("input",{type:"checkbox",className:"mt-0.5",checked:m.skillIds.includes(t.id),onChange:()=>O(t.id)}),e.jsxs("span",{className:"flex flex-col",children:[e.jsx("span",{className:"text-ink",children:t.name}),t.description&&e.jsx("span",{className:"text-[12px] text-muted",children:t.description})]})]},t.id))}):w.isLoading?e.jsx("p",{className:"text-[12px] text-faint",children:"Loading…"}):e.jsx(ce,{tools:N,selected:m.tools,onChange:t=>f(r=>({...r,tools:t}))})]}),!n&&!a&&(L?e.jsxs("div",{className:"flex items-center gap-2 self-start rounded-md border border-border bg-panel p-2 text-[12px]",children:[e.jsx("span",{className:"flex-1 text-muted",children:"Delete this agent?"}),e.jsx("button",{type:"button",onClick:()=>{j("agents","delete_agent"),M()},className:"rounded px-2 py-1 text-[color:var(--err)] hover:bg-[color:color-mix(in_srgb,var(--err)_12%,transparent)]",children:"Delete"}),e.jsx("button",{type:"button",onClick:()=>{j("agents","cancel_delete_agent"),R(!1)},className:"rounded px-2 py-1 text-faint hover:text-ink",children:"Cancel"})]}):e.jsxs("button",{type:"button",onClick:()=>R(!0),className:"flex items-center gap-1.5 self-start text-[12px] text-faint hover:text-[color:var(--err)]",children:[e.jsx(se,{size:13})," Delete agent"]}))]})}export{je as AgentEditPage};
+import{j as e}from"./radix-B0YBjihE.js";import{b as W,u as $,r as b}from"./vendor-C1I6euDx.js";import{u as G,d as H,e as Y,f as J,g as U,a as z,B as C,t as j,c as q,b as h,A as _}from"./index-CSavhRGL.js";import{f as V}from"./chat-api-B_SlDoXA.js";import{f as X,a as Z}from"./agent-api-BXUf3UuJ.js";import{P as B}from"./personas-CKCwxU6o.js";import{C as ee}from"./chevron-left-DHH-nnSd.js";import{R as te}from"./rotate-ccw-g_DuozeG.js";import{T as se}from"./trash-2-B__gvkzD.js";import{C as ne}from"./chevron-right-DnT71PVy.js";import"./dropdown-menu-BOUsiJco.js";const ae=()=>({name:"",description:"",systemPrompt:"",skillIds:[],tools:[]});function oe(s){const d=[],x=new Map;for(const n of s){const a=/^mcp__([^_]+(?:_[^_]+)*)__/.exec(n.name);if(!a){d.push(n);continue}const i=a[1],p=/^\[([^\]]+)\]/.exec(n.description),c=p?p[1]:i.replace(/_/g," ");x.has(i)||x.set(i,{key:i,label:c,tools:[]}),x.get(i).tools.push(n)}return{builtin:d,groups:[...x.values()].sort((n,a)=>n.label.localeCompare(a.label))}}function le(s){return s.replace(/^mcp__[^_]+(?:_[^_]+)*__/,"")}function re(s){return s.replace(/^\[[^\]]+\]\s*/,"")}function D({tool:s,checked:d,onToggle:x}){return e.jsxs("label",{className:"flex cursor-pointer items-start gap-2 text-[12px]",children:[e.jsx("input",{type:"checkbox",className:"mt-0.5",checked:d,onChange:x}),e.jsxs("span",{className:"flex flex-col",children:[e.jsx("span",{className:"font-mono text-ink",children:le(s.name)}),s.description&&e.jsx("span",{className:"text-faint",children:re(s.description)})]})]})}function ie({group:s,selected:d,onToggleAll:x,onToggleOne:n}){const[a,i]=b.useState(!1),p=s.tools.map(l=>l.name),c=p.filter(l=>d.has(l)).length,o=c===p.length,g=c>0&&!o,u=b.useRef(null);return b.useEffect(()=>{u.current&&(u.current.indeterminate=g)},[g]),e.jsxs("div",{className:"rounded-md border border-border",children:[e.jsxs("div",{className:"flex items-center gap-2 px-2.5 py-2",children:[e.jsx("input",{ref:u,type:"checkbox",checked:o,onChange:()=>x(p,!o)}),e.jsxs("button",{type:"button",onClick:()=>{j("agents","toggle_agent_tool_group"),i(l=>!l)},className:"flex flex-1 items-center gap-1.5 text-left text-[13px] text-ink",children:[e.jsx(ne,{size:12,className:q("shrink-0 text-faint transition-transform",a&&"rotate-90")}),s.label,e.jsxs("span",{className:"text-[11px] text-faint",children:["(",c,"/",p.length,")"]})]})]}),a&&e.jsx("div",{className:"flex flex-col gap-1.5 border-t border-border px-3 py-2 pl-9",children:s.tools.map(l=>e.jsx(D,{tool:l,checked:d.has(l.name),onToggle:()=>n(l.name)},l.name))})]})}function ce({tools:s,selected:d,onChange:x}){const n=new Set(d),{builtin:a,groups:i}=oe(s),p=o=>x(n.has(o)?d.filter(g=>g!==o):[...d,o]),c=(o,g)=>{const u=d.filter(l=>!o.includes(l));x(g?[...u,...o]:u)};return s.length===0?e.jsx("p",{className:"text-[12px] text-faint",children:"No tools available yet."}):e.jsxs("div",{className:"flex flex-col gap-2",children:[a.length>0&&e.jsx("div",{className:"flex flex-col gap-2 rounded-md border border-border bg-panel-2 p-3",children:a.map(o=>e.jsx(D,{tool:o,checked:n.has(o.name),onToggle:()=>p(o.name)},o.name))}),i.map(o=>e.jsx(ie,{group:o,selected:n,onToggleAll:c,onToggleOne:p},o.key))]})}function je(){const{agentId:s="new"}=W(),d=$(),x=G(),n=s==="new",a=!n&&B.some(t=>t.id===s),i=a?B.find(t=>t.id===s):void 0,p=H(),c=!n&&!a?(p.data??[]).find(t=>t.id===s):void 0,o=Y(),g=J(),u=U(),l=a?g.data?.[s]:void 0,I=z({queryKey:Z.list(),queryFn:X,staleTime:0}),k=I.data??[],w=z({queryKey:["available-tools"],queryFn:V}),N=w.data??[],[m,f]=b.useState(ae()),[S,T]=b.useState(!1),[A,P]=b.useState(!1),[L,R]=b.useState(!1),[E,Q]=b.useState("skills");n&&!S&&(k.length||N.length)&&(f(t=>({...t,skillIds:k.map(r=>r.id),tools:N.map(r=>r.name)})),T(!0)),!n&&!a&&!S&&c&&(f({name:c.name,description:c.description,systemPrompt:c.systemPrompt,skillIds:c.skillIds,tools:c.tools}),T(!0)),a&&!S&&i&&g.isSuccess&&(k.length||N.length)&&(f({name:l?.name??i.name,description:l?.description??i.description,systemPrompt:l?.systemPrompt??i.systemPrompt,skillIds:l?.skillIds??k.map(t=>t.id),tools:l?.tools??N.map(t=>t.name)}),T(!0));const y=()=>{j("agents","back_to_agents"),d("/customize")},O=t=>f(r=>({...r,skillIds:r.skillIds.includes(t)?r.skillIds.filter(v=>v!==t):[...r.skillIds,t]})),F=()=>{if(!m.name.trim()){h.error("Name is required.");return}P(!0);const t={name:m.name.trim(),description:m.description.trim(),systemPrompt:m.systemPrompt,skillIds:m.skillIds,tools:m.tools};if(a){u.save.mutate({id:s,override:t},{onSuccess:()=>{h.success("Agent saved."),y()},onError:v=>{h.error(v instanceof _?v.message:"Could not save agent."),P(!1)}});return}const r={onSuccess:()=>{x.invalidateQueries({queryKey:["chat-agents"]}),h.success(n?"Agent created.":"Agent saved."),y()},onError:v=>{h.error(v instanceof _?v.message:"Could not save agent."),P(!1)}};n?o.add.mutate(t,r):o.update.mutate({id:s,patch:t},r)},K=()=>{u.reset.mutate(s,{onSuccess:()=>{h.success("Reset to default."),i&&f({name:i.name,description:i.description,systemPrompt:i.systemPrompt,skillIds:k.map(t=>t.id),tools:N.map(t=>t.name)})},onError:t=>h.error(t instanceof _?t.message:"Could not reset agent.")})},M=()=>{o.remove.mutate(s,{onSuccess:()=>{h.success("Agent deleted."),y()},onError:t=>h.error(t instanceof _?t.message:"Could not delete agent.")})};return!n&&!a&&p.isSuccess&&!c?e.jsxs("div",{className:"flex w-full flex-col items-center gap-3 px-8 py-16",children:[e.jsx("p",{className:"text-[14px] text-muted",children:"That agent no longer exists."}),e.jsx(C,{size:"sm",variant:"outline",onClick:y,children:"Back to agents"})]}):e.jsxs("div",{className:"flex w-full max-w-4xl flex-col gap-5 px-4 py-6 md:px-8",children:[e.jsxs("div",{className:"flex flex-wrap items-center gap-2",children:[e.jsx("button",{type:"button",onClick:y,className:"text-faint hover:text-ink",title:"Back to agents",children:e.jsx(ee,{size:18})}),e.jsx("span",{className:"text-[15px] font-medium text-ink",children:n?"New agent":a?l?"Edit agent (modified built-in)":"Edit agent (built-in)":"Edit agent"}),e.jsxs("div",{className:"ml-auto flex items-center gap-2",children:[a&&e.jsxs(C,{size:"sm",variant:"outline",onClick:()=>{j("agents","reset_agent_to_default"),K()},disabled:u.reset.isPending,children:[e.jsx(te,{size:13})," Reset to default"]}),e.jsx(C,{size:"sm",variant:"outline",onClick:y,children:"Cancel"}),e.jsx(C,{size:"sm",onClick:()=>{j("agents","save_agent"),F()},disabled:A||!m.name.trim(),children:A?"Saving…":"Save"})]})]}),a&&e.jsx("p",{className:"rounded-md border border-border bg-panel px-3 py-2 text-[12px] text-muted",children:"Built-in agents can be edited in place — Reset to default discards your changes and restores TurboLLM's original prompt and access."}),e.jsxs("div",{className:"flex flex-col gap-1.5",children:[e.jsx("label",{className:"text-[12px] font-medium text-muted",children:"Name"}),e.jsx("input",{className:"rounded-md border border-border bg-bg px-3 py-1.5 text-[13px] text-ink outline-none focus:border-accent placeholder:text-faint",placeholder:"Release Notes Writer",value:m.name,onChange:t=>f(r=>({...r,name:t.target.value}))})]}),e.jsxs("div",{className:"flex flex-col gap-1.5",children:[e.jsx("label",{className:"text-[12px] font-medium text-muted",children:"Description"}),e.jsx("input",{className:"rounded-md border border-border bg-bg px-3 py-1.5 text-[13px] text-ink outline-none focus:border-accent placeholder:text-faint",placeholder:"What this agent is for, in one line",value:m.description,onChange:t=>f(r=>({...r,description:t.target.value}))})]}),e.jsxs("div",{className:"flex flex-col gap-1.5",children:[e.jsx("label",{className:"text-[12px] font-medium text-muted",children:"System prompt"}),e.jsx("textarea",{className:"min-h-[160px] resize-y rounded-md border border-border bg-bg px-3 py-2 font-mono text-[12px] leading-relaxed text-ink outline-none focus:border-accent placeholder:text-faint",placeholder:"You are…",value:m.systemPrompt,onChange:t=>f(r=>({...r,systemPrompt:t.target.value}))})]}),e.jsxs("div",{className:"flex flex-col gap-2.5",children:[e.jsx("div",{className:"inline-flex w-fit rounded-md border border-border p-0.5",children:["skills","tools"].map(t=>e.jsx("button",{type:"button",onClick:()=>{j("agents","switch_agent_form_tab"),Q(t)},className:q("rounded px-3 py-1.5 text-[13px] font-medium transition-colors",E===t?"bg-accent/12 text-accent":"text-muted hover:text-ink"),children:t==="skills"?`Skills (${m.skillIds.length})`:`Tools (${m.tools.length})`},t))}),E==="skills"?I.isLoading?e.jsx("p",{className:"text-[12px] text-faint",children:"Loading…"}):k.length===0?e.jsx("p",{className:"text-[12px] text-faint",children:"No skills yet — create one under Customize → Skills."}):e.jsx("div",{className:"flex flex-col gap-2 rounded-md border border-border bg-panel-2 p-3",children:k.map(t=>e.jsxs("label",{className:"flex cursor-pointer items-start gap-2 text-[13px]",children:[e.jsx("input",{type:"checkbox",className:"mt-0.5",checked:m.skillIds.includes(t.id),onChange:()=>O(t.id)}),e.jsxs("span",{className:"flex flex-col",children:[e.jsx("span",{className:"text-ink",children:t.name}),t.description&&e.jsx("span",{className:"text-[12px] text-muted",children:t.description})]})]},t.id))}):w.isLoading?e.jsx("p",{className:"text-[12px] text-faint",children:"Loading…"}):e.jsx(ce,{tools:N,selected:m.tools,onChange:t=>f(r=>({...r,tools:t}))})]}),!n&&!a&&(L?e.jsxs("div",{className:"flex items-center gap-2 self-start rounded-md border border-border bg-panel p-2 text-[12px]",children:[e.jsx("span",{className:"flex-1 text-muted",children:"Delete this agent?"}),e.jsx("button",{type:"button",onClick:()=>{j("agents","delete_agent"),M()},className:"rounded px-2 py-1 text-[color:var(--err)] hover:bg-[color:color-mix(in_srgb,var(--err)_12%,transparent)]",children:"Delete"}),e.jsx("button",{type:"button",onClick:()=>{j("agents","cancel_delete_agent"),R(!1)},className:"rounded px-2 py-1 text-faint hover:text-ink",children:"Cancel"})]}):e.jsxs("button",{type:"button",onClick:()=>R(!0),className:"flex items-center gap-1.5 self-start text-[12px] text-faint hover:text-[color:var(--err)]",children:[e.jsx(se,{size:13})," Delete agent"]}))]})}export{je as AgentEditPage};