@0xmaxma/claude-gateway 1.0.0

package/dist/api/workspace-router.js

@@ -0,0 +1,149 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createWorkspaceRouter = createWorkspaceRouter;
+const express_1 = require("express");
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const crypto_1 = require("crypto");
+const auth_1 = require("./auth");
+const MAX_FILE_SIZE = 1 * 1024 * 1024; // 1MB
+const ALLOWED_FILES = new Set([
+    'SOUL.md',
+    'USER.md',
+    'MEMORY.md',
+    'AGENTS.md',
+    'HEARTBEAT.md',
+    'IDENTITY.md',
+]);
+const FILENAME_RE = /^[A-Z][A-Z0-9_-]*\.md$/i;
+function validateFilename(filename) {
+    if (!FILENAME_RE.test(filename))
+        return 'Invalid filename format';
+    if (filename.includes('/') || filename.includes('\\') || filename.includes('..')) {
+        return 'Path traversal not allowed';
+    }
+    if (!ALLOWED_FILES.has(filename)) {
+        return `Filename not allowed. Allowed files: ${[...ALLOWED_FILES].join(', ')}`;
+    }
+    return null;
+}
+function createWorkspaceRouter(agentConfigs, apiKeys) {
+    const router = (0, express_1.Router)();
+    const auth = (0, auth_1.createApiAuthMiddleware)(apiKeys);
+    /**
+     * GET /api/v1/agents/:agentId/files/:filename
+     *
+     * Read a workspace file for an agent.
+     * Returns 200 with empty content if the file does not exist yet.
+     */
+    router.get('/v1/agents/:agentId/files/:filename', auth, (req, res) => {
+        const { agentId, filename } = req.params;
+        const apiKey = req.apiKey;
+        if (!(0, auth_1.canAccessAgent)(apiKey, agentId)) {
+            res.status(403).json({ error: `API key has no access to agent '${agentId}'` });
+            return;
+        }
+        const config = agentConfigs.get(agentId);
+        if (!config) {
+            res.status(404).json({ error: `Agent '${agentId}' not found` });
+            return;
+        }
+        const err = validateFilename(filename);
+        if (err) {
+            res.status(400).json({ error: err });
+            return;
+        }
+        const filePath = path.join(config.workspace, filename);
+        let content = '';
+        try {
+            content = fs.readFileSync(filePath, 'utf-8');
+        }
+        catch {
+            // File doesn't exist yet — return empty content (not an error)
+        }
+        res.json({ filename, content });
+    });
+    /**
+     * PUT /api/v1/agents/:agentId/files/:filename
+     *
+     * Write a workspace file for an agent. Requires write access.
+     * Gateway's file watcher will auto-reload CLAUDE.md after write.
+     */
+    router.put('/v1/agents/:agentId/files/:filename', auth, (req, res) => {
+        const { agentId, filename } = req.params;
+        const apiKey = req.apiKey;
+        if (!(0, auth_1.canWriteAgent)(apiKey, agentId)) {
+            res.status(403).json({ error: 'Write permission required' });
+            return;
+        }
+        const config = agentConfigs.get(agentId);
+        if (!config) {
+            res.status(404).json({ error: `Agent '${agentId}' not found` });
+            return;
+        }
+        const err = validateFilename(filename);
+        if (err) {
+            res.status(400).json({ error: err });
+            return;
+        }
+        const body = req.body;
+        if (typeof body.content !== 'string') {
+            res.status(400).json({ error: 'content must be a string' });
+            return;
+        }
+        if (body.content.length > MAX_FILE_SIZE) {
+            res.status(400).json({ error: 'Content exceeds 1MB limit' });
+            return;
+        }
+        const filePath = path.join(config.workspace, filename);
+        const tmpPath = filePath + '.tmp.' + (0, crypto_1.randomUUID)();
+        try {
+            fs.writeFileSync(tmpPath, body.content, 'utf-8');
+            fs.renameSync(tmpPath, filePath);
+        }
+        catch (writeErr) {
+            try {
+                fs.unlinkSync(tmpPath);
+            }
+            catch { /* ignore cleanup error */ }
+            res.status(500).json({ error: `Failed to write file: ${writeErr.message}` });
+            return;
+        }
+        res.json({ filename, message: 'File saved. CLAUDE.md will auto-reload.' });
+    });
+    return router;
+}
+//# sourceMappingURL=workspace-router.js.map

package/dist/api/workspace-router.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"workspace-router.js","sourceRoot":"","sources":["../../src/api/workspace-router.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiCA,sDAkGC;AAnID,qCAAoD;AACpD,uCAAyB;AACzB,2CAA6B;AAC7B,mCAAoC;AAEpC,iCAAgF;AAEhF,MAAM,aAAa,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,MAAM;AAE7C,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC;IAC5B,SAAS;IACT,SAAS;IACT,WAAW;IACX,WAAW;IACX,cAAc;IACd,aAAa;CACd,CAAC,CAAC;AAEH,MAAM,WAAW,GAAG,yBAAyB,CAAC;AAI9C,SAAS,gBAAgB,CAAC,QAAgB;IACxC,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,OAAO,yBAAyB,CAAC;IAClE,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACjF,OAAO,4BAA4B,CAAC;IACtC,CAAC;IACD,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjC,OAAO,wCAAwC,CAAC,GAAG,aAAa,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IACjF,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAgB,qBAAqB,CACnC,YAAsC,EACtC,OAAiB;IAEjB,MAAM,MAAM,GAAG,IAAA,gBAAM,GAAE,CAAC;IACxB,MAAM,IAAI,GAAG,IAAA,8BAAuB,EAAC,OAAO,CAAC,CAAC;IAE9C;;;;;OAKG;IACH,MAAM,CAAC,GAAG,CAAC,qCAAqC,EAAE,IAAI,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QACtF,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,MAA+C,CAAC;QAClF,MAAM,MAAM,GAAI,GAAqB,CAAC,MAAM,CAAC;QAE7C,IAAI,CAAC,IAAA,qBAAc,EAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;YACrC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mCAAmC,OAAO,GAAG,EAAE,CAAC,CAAC;YAC/E,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACzC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,UAAU,OAAO,aAAa,EAAE,CAAC,CAAC;YAChE,OAAO;QACT,CAAC;QAED,MAAM,GAAG,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QACvC,IAAI,GAAG,EAAE,CAAC;YACR,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;YACrC,OAAO;QACT,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QACvD,IAAI,OAAO,GAAG,EAAE,CAAC;QACjB,IAAI,CAAC;YACH,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC;YACP,+DAA+D;QACjE,CAAC;QAED,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH;;;;;OAKG;IACH,MAAM,CAAC,GAAG,CAAC,qCAAqC,EAAE,IAAI,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QACtF,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,GAAG,CAAC,MAA+C,CAAC;QAClF,MAAM,MAAM,GAAI,GAAqB,CAAC,MAAM,CAAC;QAE7C,IAAI,CAAC,IAAA,oBAAa,EAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;YACpC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC,CAAC;YAC7D,OAAO;QACT,CAAC;QAED,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACzC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,UAAU,OAAO,aAAa,EAAE,CAAC,CAAC;YAChE,OAAO;QACT,CAAC;QAED,MAAM,GAAG,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QACvC,IAAI,GAAG,EAAE,CAAC;YACR,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;YACrC,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GAAG,GAAG,CAAC,IAA6B,CAAC;QAC/C,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YACrC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC,CAAC;YAC5D,OAAO;QACT,CAAC;QAED,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,GAAG,aAAa,EAAE,CAAC;YACxC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC,CAAC;YAC7D,OAAO;QACT,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;QACvD,MAAM,OAAO,GAAG,QAAQ,GAAG,OAAO,GAAG,IAAA,mBAAU,GAAE,CAAC;QAClD,IAAI,CAAC;YACH,EAAE,CAAC,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACjD,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACnC,CAAC;QAAC,OAAO,QAAQ,EAAE,CAAC;YAClB,IAAI,CAAC;gBAAC,EAAE,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,0BAA0B,CAAC,CAAC;YACpE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,yBAA0B,QAAkB,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;YACxF,OAAO;QACT,CAAC;QAED,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,yCAAyC,EAAE,CAAC,CAAC;IAC7E,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/config/loader.d.ts

@@ -0,0 +1,16 @@
+import { GatewayConfig } from '../types';
+export declare class ConfigValidationError extends Error {
+    constructor(message: string);
+}
+export declare class DuplicateAgentIdError extends Error {
+    constructor(id: string);
+}
+export declare class MissingEnvVarError extends Error {
+    constructor(varName: string);
+}
+/**
+ * Load and validate config.json from the given path.
+ * Interpolates ${VAR} env vars throughout the config.
+ */
+export declare function loadConfig(configPath: string): GatewayConfig;
+//# sourceMappingURL=loader.d.ts.map

package/dist/config/loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.d.ts","sourceRoot":"","sources":["../../src/config/loader.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAe,MAAM,UAAU,CAAC;AAEtD,qBAAa,qBAAsB,SAAQ,KAAK;gBAClC,OAAO,EAAE,MAAM;CAI5B;AAED,qBAAa,qBAAsB,SAAQ,KAAK;gBAClC,EAAE,EAAE,MAAM;CAIvB;AAED,qBAAa,kBAAmB,SAAQ,KAAK;gBAC/B,OAAO,EAAE,MAAM;CAI5B;AAuED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG,aAAa,CAuH5D"}

package/dist/config/loader.js

@@ -0,0 +1,235 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MissingEnvVarError = exports.DuplicateAgentIdError = exports.ConfigValidationError = void 0;
+exports.loadConfig = loadConfig;
+const fs = __importStar(require("fs"));
+class ConfigValidationError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'ConfigValidationError';
+    }
+}
+exports.ConfigValidationError = ConfigValidationError;
+class DuplicateAgentIdError extends Error {
+    constructor(id) {
+        super(`Duplicate agent id: "${id}"`);
+        this.name = 'DuplicateAgentIdError';
+    }
+}
+exports.DuplicateAgentIdError = DuplicateAgentIdError;
+class MissingEnvVarError extends Error {
+    constructor(varName) {
+        super(`Missing environment variable: ${varName}`);
+        this.name = 'MissingEnvVarError';
+    }
+}
+exports.MissingEnvVarError = MissingEnvVarError;
+/**
+ * Interpolate ${VAR} placeholders in a string value using process.env.
+ * Throws MissingEnvVarError if any referenced variable is not set.
+ */
+function interpolateEnvVars(value) {
+    return value.replace(/\$\{([^}]+)\}/g, (_, varName) => {
+        const envValue = process.env[varName];
+        if (envValue === undefined) {
+            throw new MissingEnvVarError(varName);
+        }
+        return envValue;
+    });
+}
+/**
+ * Recursively walk an object and interpolate all string values.
+ */
+function interpolateObject(obj) {
+    if (typeof obj === 'string') {
+        return interpolateEnvVars(obj);
+    }
+    if (Array.isArray(obj)) {
+        return obj.map(interpolateObject);
+    }
+    if (obj !== null && typeof obj === 'object') {
+        const result = {};
+        for (const [key, val] of Object.entries(obj)) {
+            result[key] = interpolateObject(val);
+        }
+        return result;
+    }
+    return obj;
+}
+/**
+ * Validate an agent config. Returns an error message if invalid, or null if valid.
+ */
+function validateAgent(agent, index) {
+    if (!agent.id || typeof agent.id !== 'string') {
+        return `Agent at index ${index} is missing required field "id"`;
+    }
+    const hasTelegram = agent.telegram && typeof agent.telegram === 'object';
+    const hasDiscord = agent.discord && typeof agent.discord === 'object';
+    // Agents without channels are allowed (API-only agents accessed via HTTP API key)
+    if (hasTelegram) {
+        const telegram = agent.telegram;
+        if (!telegram.botToken || typeof telegram.botToken !== 'string') {
+            return `Agent "${agent.id}" is missing "telegram.botToken"`;
+        }
+    }
+    if (hasDiscord) {
+        const discord = agent.discord;
+        if (!discord.botToken || typeof discord.botToken !== 'string') {
+            return `Agent "${agent.id}" is missing "discord.botToken"`;
+        }
+    }
+    if (agent.session !== undefined && typeof agent.session === 'object') {
+        const session = agent.session;
+        if (session.idleTimeoutMinutes !== undefined && (typeof session.idleTimeoutMinutes !== 'number' || session.idleTimeoutMinutes <= 0)) {
+            return `agent '${agent.id}': session.idleTimeoutMinutes must be > 0`;
+        }
+        if (session.maxConcurrent !== undefined && (typeof session.maxConcurrent !== 'number' || session.maxConcurrent <= 0)) {
+            return `agent '${agent.id}': session.maxConcurrent must be > 0`;
+        }
+    }
+    return null;
+}
+/**
+ * Load and validate config.json from the given path.
+ * Interpolates ${VAR} env vars throughout the config.
+ */
+function loadConfig(configPath) {
+    let raw;
+    try {
+        raw = fs.readFileSync(configPath, 'utf-8');
+    }
+    catch (err) {
+        throw new ConfigValidationError(`Cannot read config file at "${configPath}": ${err.message}`);
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch (err) {
+        throw new ConfigValidationError(`Config file is not valid JSON: ${err.message}`);
+    }
+    if (typeof parsed !== 'object' || parsed === null) {
+        throw new ConfigValidationError('Config must be a JSON object');
+    }
+    const config = parsed;
+    if (!Array.isArray(config.agents)) {
+        throw new ConfigValidationError('Config is missing required "agents" array');
+    }
+    if (!config.gateway || typeof config.gateway !== 'object') {
+        throw new ConfigValidationError('Config is missing required "gateway" object');
+    }
+    // Validate each agent before interpolation — skip invalid agents with a warning
+    const validAgents = [];
+    const skippedAgents = [];
+    for (let i = 0; i < config.agents.length; i++) {
+        const agent = config.agents[i];
+        if (typeof agent !== 'object' || agent === null) {
+            console.warn(`[gateway] Skipping agent at index ${i}: must be an object`);
+            skippedAgents.push(`index ${i}`);
+            continue;
+        }
+        const error = validateAgent(agent, i);
+        if (error) {
+            const agentId = agent.id || `index ${i}`;
+            console.warn(`[gateway] Skipping agent "${agentId}": ${error}`);
+            skippedAgents.push(String(agentId));
+            continue;
+        }
+        validAgents.push(agent);
+    }
+    // Check for duplicate IDs among valid agents
+    const ids = new Set();
+    for (const agent of validAgents) {
+        const id = agent.id;
+        if (ids.has(id)) {
+            throw new DuplicateAgentIdError(id);
+        }
+        ids.add(id);
+    }
+    // Validate gateway.api.keys if present
+    const gateway = config.gateway;
+    if (gateway.api !== undefined) {
+        const api = gateway.api;
+        if (!Array.isArray(api.keys)) {
+            throw new ConfigValidationError('gateway.api.keys must be an array');
+        }
+        const seenKeys = new Set();
+        for (const k of api.keys) {
+            if (typeof k !== 'object' || k === null) {
+                throw new ConfigValidationError('Each entry in gateway.api.keys must be an object');
+            }
+            const entry = k;
+            if (!entry.key || typeof entry.key !== 'string') {
+                throw new ConfigValidationError('Each API key must have a non-empty "key" string');
+            }
+            if (seenKeys.has(entry.key)) {
+                throw new ConfigValidationError(`Duplicate API key value detected`);
+            }
+            seenKeys.add(entry.key);
+            if (entry.agents !== '*' && !Array.isArray(entry.agents)) {
+                throw new ConfigValidationError(`API key "${entry.key}": "agents" must be an array of agent IDs or the string "*"`);
+            }
+        }
+    }
+    // Interpolate gateway config (fatal if env vars missing here)
+    const interpolatedGateway = interpolateObject(config.gateway);
+    // Interpolate each agent individually — skip agents with missing env vars
+    const interpolatedAgents = [];
+    for (const agent of validAgents) {
+        try {
+            interpolatedAgents.push(interpolateObject(agent));
+        }
+        catch (err) {
+            if (err instanceof MissingEnvVarError) {
+                console.warn(`[gateway] Skipping agent "${agent.id}": ${err.message}`);
+                skippedAgents.push(String(agent.id));
+                continue;
+            }
+            throw err;
+        }
+    }
+    if (interpolatedAgents.length === 0) {
+        throw new ConfigValidationError('No valid agents found in config. All agents were skipped due to configuration errors.');
+    }
+    if (skippedAgents.length > 0) {
+        console.warn(`[gateway] ${skippedAgents.length} agent(s) skipped: ${skippedAgents.join(', ')}`);
+    }
+    return {
+        agents: interpolatedAgents,
+        gateway: interpolatedGateway,
+    };
+}
+//# sourceMappingURL=loader.js.map

package/dist/config/loader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loader.js","sourceRoot":"","sources":["../../src/config/loader.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiGA,gCAuHC;AAxND,uCAAyB;AAGzB,MAAa,qBAAsB,SAAQ,KAAK;IAC9C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AALD,sDAKC;AAED,MAAa,qBAAsB,SAAQ,KAAK;IAC9C,YAAY,EAAU;QACpB,KAAK,CAAC,wBAAwB,EAAE,GAAG,CAAC,CAAC;QACrC,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACtC,CAAC;CACF;AALD,sDAKC;AAED,MAAa,kBAAmB,SAAQ,KAAK;IAC3C,YAAY,OAAe;QACzB,KAAK,CAAC,iCAAiC,OAAO,EAAE,CAAC,CAAC;QAClD,IAAI,CAAC,IAAI,GAAG,oBAAoB,CAAC;IACnC,CAAC;CACF;AALD,gDAKC;AAED;;;GAGG;AACH,SAAS,kBAAkB,CAAC,KAAa;IACvC,OAAO,KAAK,CAAC,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC,EAAE,OAAe,EAAE,EAAE;QAC5D,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACtC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,IAAI,kBAAkB,CAAC,OAAO,CAAC,CAAC;QACxC,CAAC;QACD,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,SAAS,iBAAiB,CAAC,GAAY;IACrC,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,OAAO,kBAAkB,CAAC,GAAG,CAAC,CAAC;IACjC,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,OAAO,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IACpC,CAAC;IACD,IAAI,GAAG,KAAK,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5C,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAA8B,CAAC,EAAE,CAAC;YACxE,MAAM,CAAC,GAAG,CAAC,GAAG,iBAAiB,CAAC,GAAG,CAAC,CAAC;QACvC,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;GAEG;AACH,SAAS,aAAa,CAAC,KAA8B,EAAE,KAAa;IAClE,IAAI,CAAC,KAAK,CAAC,EAAE,IAAI,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,EAAE,CAAC;QAC9C,OAAO,kBAAkB,KAAK,iCAAiC,CAAC;IAClE,CAAC;IACD,MAAM,WAAW,GAAG,KAAK,CAAC,QAAQ,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC;IACzE,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC;IACtE,kFAAkF;IAClF,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAmC,CAAC;QAC3D,IAAI,CAAC,QAAQ,CAAC,QAAQ,IAAI,OAAO,QAAQ,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAChE,OAAO,UAAU,KAAK,CAAC,EAAE,kCAAkC,CAAC;QAC9D,CAAC;IACH,CAAC;IACD,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,CAAC,OAAkC,CAAC;QACzD,IAAI,CAAC,OAAO,CAAC,QAAQ,IAAI,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC9D,OAAO,UAAU,KAAK,CAAC,EAAE,iCAAiC,CAAC;QAC7D,CAAC;IACH,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QACrE,MAAM,OAAO,GAAG,KAAK,CAAC,OAAkC,CAAC;QACzD,IAAI,OAAO,CAAC,kBAAkB,KAAK,SAAS,IAAI,CAAC,OAAO,OAAO,CAAC,kBAAkB,KAAK,QAAQ,IAAI,OAAO,CAAC,kBAAkB,IAAI,CAAC,CAAC,EAAE,CAAC;YACpI,OAAO,UAAU,KAAK,CAAC,EAAE,2CAA2C,CAAC;QACvE,CAAC;QACD,IAAI,OAAO,CAAC,aAAa,KAAK,SAAS,IAAI,CAAC,OAAO,OAAO,CAAC,aAAa,KAAK,QAAQ,IAAI,OAAO,CAAC,aAAa,IAAI,CAAC,CAAC,EAAE,CAAC;YACrH,OAAO,UAAU,KAAK,CAAC,EAAE,sCAAsC,CAAC;QAClE,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,SAAgB,UAAU,CAAC,UAAkB;IAC3C,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,qBAAqB,CAAC,+BAA+B,UAAU,MAAO,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IAC3G,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,qBAAqB,CAAC,kCAAmC,GAAa,CAAC,OAAO,EAAE,CAAC,CAAC;IAC9F,CAAC;IAED,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QAClD,MAAM,IAAI,qBAAqB,CAAC,8BAA8B,CAAC,CAAC;IAClE,CAAC;IAED,MAAM,MAAM,GAAG,MAAiC,CAAC;IAEjD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,qBAAqB,CAAC,2CAA2C,CAAC,CAAC;IAC/E,CAAC;IAED,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC1D,MAAM,IAAI,qBAAqB,CAAC,6CAA6C,CAAC,CAAC;IACjF,CAAC;IAED,gFAAgF;IAChF,MAAM,WAAW,GAA8B,EAAE,CAAC;IAClD,MAAM,aAAa,GAAa,EAAE,CAAC;IACnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAI,MAAM,CAAC,MAAoB,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7D,MAAM,KAAK,GAAI,MAAM,CAAC,MAAoB,CAAC,CAAC,CAAC,CAAC;QAC9C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;YAChD,OAAO,CAAC,IAAI,CAAC,qCAAqC,CAAC,qBAAqB,CAAC,CAAC;YAC1E,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;YACjC,SAAS;QACX,CAAC;QACD,MAAM,KAAK,GAAG,aAAa,CAAC,KAAgC,EAAE,CAAC,CAAC,CAAC;QACjE,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,OAAO,GAAI,KAAiC,CAAC,EAAE,IAAI,SAAS,CAAC,EAAE,CAAC;YACtE,OAAO,CAAC,IAAI,CAAC,6BAA6B,OAAO,MAAM,KAAK,EAAE,CAAC,CAAC;YAChE,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;YACpC,SAAS;QACX,CAAC;QACD,WAAW,CAAC,IAAI,CAAC,KAAgC,CAAC,CAAC;IACrD,CAAC;IAED,6CAA6C;IAC7C,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,KAAK,IAAI,WAAW,EAAE,CAAC;QAChC,MAAM,EAAE,GAAG,KAAK,CAAC,EAAY,CAAC;QAC9B,IAAI,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YAChB,MAAM,IAAI,qBAAqB,CAAC,EAAE,CAAC,CAAC;QACtC,CAAC;QACD,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACd,CAAC;IAED,uCAAuC;IACvC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAkC,CAAC;IAC1D,IAAI,OAAO,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,OAAO,CAAC,GAA8B,CAAC;QACnD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,qBAAqB,CAAC,mCAAmC,CAAC,CAAC;QACvE,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;QACnC,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,IAAiB,EAAE,CAAC;YACtC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;gBACxC,MAAM,IAAI,qBAAqB,CAAC,kDAAkD,CAAC,CAAC;YACtF,CAAC;YACD,MAAM,KAAK,GAAG,CAA4B,CAAC;YAC3C,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,EAAE,CAAC;gBAChD,MAAM,IAAI,qBAAqB,CAAC,iDAAiD,CAAC,CAAC;YACrF,CAAC;YACD,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,GAAa,CAAC,EAAE,CAAC;gBACtC,MAAM,IAAI,qBAAqB,CAAC,kCAAkC,CAAC,CAAC;YACtE,CAAC;YACD,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,GAAa,CAAC,CAAC;YAClC,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;gBACzD,MAAM,IAAI,qBAAqB,CAC7B,YAAY,KAAK,CAAC,GAAG,6DAA6D,CACnF,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,8DAA8D;IAC9D,MAAM,mBAAmB,GAAG,iBAAiB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAE9D,0EAA0E;IAC1E,MAAM,kBAAkB,GAAc,EAAE,CAAC;IACzC,KAAK,MAAM,KAAK,IAAI,WAAW,EAAE,CAAC;QAChC,IAAI,CAAC;YACH,kBAAkB,CAAC,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,kBAAkB,EAAE,CAAC;gBACtC,OAAO,CAAC,IAAI,CAAC,6BAA6B,KAAK,CAAC,EAAE,MAAM,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;gBACvE,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC;gBACrC,SAAS;YACX,CAAC;YACD,MAAM,GAAG,CAAC;QACZ,CAAC;IACH,CAAC;IAED,IAAI,kBAAkB,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,qBAAqB,CAC7B,uFAAuF,CACxF,CAAC;IACJ,CAAC;IAED,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7B,OAAO,CAAC,IAAI,CAAC,aAAa,aAAa,CAAC,MAAM,sBAAsB,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAClG,CAAC;IAED,OAAO;QACL,MAAM,EAAE,kBAAkB;QAC1B,OAAO,EAAE,mBAAmB;KACZ,CAAC;AACrB,CAAC"}

package/dist/config/migrator.d.ts

@@ -0,0 +1,70 @@
+export interface MigrationResult {
+    migrated: boolean;
+    addedFields: string[];
+    removedFields: string[];
+}
+export interface DetectMigrationResult {
+    needed: boolean;
+    fromVersion: string;
+    toVersion: string;
+    addedFields: string[];
+    removedFields: string[];
+    config: Record<string, unknown>;
+    template: Record<string, unknown>;
+}
+export interface CleanTemplateResult {
+    template: Record<string, unknown>;
+    ignorePaths: Set<string>;
+    removePaths: string[];
+}
+/**
+ * Deep-merge template into target, adding missing keys only.
+ * Never overwrites existing values. Returns list of added field paths.
+ * Keys whose full path is in ignorePaths are skipped entirely.
+ */
+declare function deepMerge(target: Record<string, unknown>, template: Record<string, unknown>, prefix: string, added: string[], ignorePaths?: Set<string>): void;
+/**
+ * Remove dot-path keys from each agent entry. Returns paths actually removed.
+ * Paths are relative to each agent object (e.g. "telegram.allowedUsers").
+ */
+declare function pruneAgentPaths(agents: Array<Record<string, unknown>>, removePaths: string[]): string[];
+/**
+ * Compare two semver strings. Returns:
+ *  -1 if a < b, 0 if equal, 1 if a > b
+ */
+declare function compareSemver(a: string, b: string): number;
+/**
+ * Load a template file, extract the _migration metadata, strip it,
+ * and return the clean template along with the ignorePaths set.
+ */
+export declare function loadCleanTemplate(templatePath: string): CleanTemplateResult;
+/**
+ * Recursively delete keys from obj whose full dotted path matches any entry
+ * in ignorePaths. The prefix parameter tracks the current path during recursion.
+ */
+export declare function stripIgnoredPaths(obj: Record<string, unknown>, ignorePaths: Set<string>, prefix?: string): void;
+/**
+ * Detect whether a config migration is needed (dry-run, no writes).
+ * Returns migration metadata including the fields that would be added.
+ */
+export declare function detectMigration(configPath: string, templatePath: string, templateVersion: string): DetectMigrationResult;
+/**
+ * Apply a config migration: deep-merge missing fields, update version,
+ * create backup, and write the updated config.
+ */
+export declare function applyMigration(configPath: string, config: Record<string, unknown>, template: Record<string, unknown>, templateVersion: string, ignorePaths?: Set<string>, removePaths?: string[]): MigrationResult;
+/**
+ * Migrate config.json by adding missing fields from the template.
+ * - Never overwrites existing values
+ * - Creates a .bak backup before writing
+ * - Skips migration if config file does not exist (first run)
+ */
+export declare function migrateConfig(configPath: string, templatePath: string, templateVersion: string): MigrationResult;
+/**
+ * Merge models from template into user config by ID.
+ * Adds new models, updates alias/label/contextWindow of existing ones.
+ * Preserves user models not in template.
+ */
+declare function migrateModels(config: Record<string, unknown>, template: Record<string, unknown>, added: string[]): void;
+export { compareSemver, deepMerge, migrateModels, pruneAgentPaths };
+//# sourceMappingURL=migrator.d.ts.map

package/dist/config/migrator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"migrator.d.ts","sourceRoot":"","sources":["../../src/config/migrator.ts"],"names":[],"mappings":"AAGA,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,OAAO,CAAC;IAClB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,aAAa,EAAE,MAAM,EAAE,CAAC;CACzB;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,OAAO,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACnC;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IACzB,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED;;;;GAIG;AACH,iBAAS,SAAS,CAChB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,EAAE,EACf,WAAW,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,GACxB,IAAI,CA6BN;AAmBD;;;GAGG;AACH,iBAAS,eAAe,CACtB,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,EACtC,WAAW,EAAE,MAAM,EAAE,GACpB,MAAM,EAAE,CAwBV;AAED;;;GAGG;AACH,iBAAS,aAAa,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAUnD;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,YAAY,EAAE,MAAM,GAAG,mBAAmB,CAmC3E;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC5B,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,EACxB,MAAM,SAAK,GACV,IAAI,CAcN;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAC7B,UAAU,EAAE,MAAM,EAClB,YAAY,EAAE,MAAM,EACpB,eAAe,EAAE,MAAM,GACtB,qBAAqB,CAwFvB;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAC5B,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,eAAe,EAAE,MAAM,EACvB,WAAW,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,EACzB,WAAW,CAAC,EAAE,MAAM,EAAE,GACrB,eAAe,CA6CjB;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAC3B,UAAU,EAAE,MAAM,EAClB,YAAY,EAAE,MAAM,EACpB,eAAe,EAAE,MAAM,GACtB,eAAe,CA0BjB;AAED;;;;GAIG;AACH,iBAAS,aAAa,CACpB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACjC,KAAK,EAAE,MAAM,EAAE,GACd,IAAI,CAgCN;AAGD,OAAO,EAAE,aAAa,EAAE,SAAS,EAAE,aAAa,EAAE,eAAe,EAAE,CAAC"}