@0xmaxma/claude-gateway 1.7.9 → 1.8.0

package/dist/api/packages.js

@@ -5,24 +5,8 @@ exports._resetLock = _resetLock;
 exports._setLock = _setLock;
 exports.createPackagesRouter = createPackagesRouter;
 const express_1 = require("express");
-const child_process_1 = require("child_process");
-const fs_1 = require("fs");
-const path_1 = require("path");
 const auth_1 = require("./auth");
-const migrator_1 = require("../config/migrator");
-// URL param "name" → package config.
-// claude-gateway is a genuine npm global — keep npm detect/update.
-// claude-code ships via the native installer (no longer an npm global), so
-// detect from the `claude` binary and update via its native updater.
-const PACKAGES = {
-    'claude-gateway': { npm: '@0xmaxma/claude-gateway', detect: 'npm', update: 'npm' },
-    'claude-code': {
-        npm: '@anthropic-ai/claude-code',
-        detect: 'binary',
-        bin: 'claude',
-        update: 'native',
-    },
-};
+const registry_1 = require("../packages/registry");
 const CACHE_TTL_MS = 5 * 60 * 1000;
 let versionCache = null;
 let isUpdating = false;
@@ -35,123 +19,6 @@ function _resetLock() {
 function _setLock() {
     isUpdating = true;
 }
-function getNpmListVersion(packageName) {
-    try {
-        const output = (0, child_process_1.execSync)(`npm list -g ${packageName} --depth=0 --json`, {
-            encoding: 'utf-8',
-            stdio: ['pipe', 'pipe', 'pipe'],
-            timeout: 10000,
-        });
-        const parsed = JSON.parse(output);
-        return parsed.dependencies?.[packageName]?.version ?? null;
-    }
-    catch {
-        return null;
-    }
-}
-// Resolve the installed version by shelling out to the binary on PATH
-// (e.g. `claude --version` → "2.1.207 (Claude Code)"). Parses the leading
-// semver (with optional prerelease) and returns null on any failure —
-// binary missing, non-zero exit, or unparseable output. `bin` is always a
-// trusted constant from PACKAGES, never request-derived.
-function getBinaryVersion(bin) {
-    try {
-        const output = (0, child_process_1.execSync)(`${bin} --version`, {
-            encoding: 'utf-8',
-            stdio: ['pipe', 'pipe', 'pipe'],
-            timeout: 10000,
-        });
-        // `claude --version` prints the version first (e.g. "2.1.207 (Claude Code)").
-        // Anchor to the start of the trimmed output so a version-like token later in
-        // the line can never be mistaken for the installed version.
-        const match = output.trim().match(/^(\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?)/);
-        return match ? match[1] : null;
-    }
-    catch {
-        return null;
-    }
-}
-// Resolve the currently-installed version per the package's detect strategy.
-function resolveCurrent(config) {
-    if (config.detect === 'binary' && config.bin) {
-        return getBinaryVersion(config.bin);
-    }
-    return getNpmListVersion(config.npm);
-}
-// An update is available only when `latest` is strictly newer than `current`.
-// Using semver ordering (not `current !== latest`) avoids a false "update
-// available" when the installed version is *ahead* of the npm-registry latest
-// — e.g. a native-installer channel that leads the npm dist-tag.
-function updateAvailable(current, latest) {
-    return !!(current && latest && (0, migrator_1.compareSemver)(latest, current) > 0);
-}
-async function getLatestVersion(packageName) {
-    const encodedName = packageName.replace('/', '%2F');
-    const res = await fetch(`https://registry.npmjs.org/${encodedName}/latest`);
-    if (!res.ok)
-        return null;
-    const data = (await res.json());
-    return data.version ?? null;
-}
-async function fetchAllPackageVersions() {
-    const configs = Object.values(PACKAGES);
-    // Run all synchronous current-version lookups before entering async Promise.all
-    const currents = configs.map(resolveCurrent);
-    return Promise.all(configs.map(async (config, i) => {
-        const current = currents[i];
-        const latest = await getLatestVersion(config.npm);
-        return {
-            package: config.npm,
-            current,
-            latest,
-            hasUpdate: updateAvailable(current, latest),
-        };
-    }));
-}
-function getNpmGlobalRoot() {
-    return (0, child_process_1.execSync)('npm root -g', {
-        encoding: 'utf-8',
-        stdio: ['pipe', 'pipe', 'pipe'],
-        timeout: 10000,
-    }).trim();
-}
-function cleanStaleNpmTempDirs(npmRoot, packageName) {
-    const match = packageName.match(/^(@[^/]+)\/(.+)$/);
-    if (!match)
-        return;
-    const [, scope, basename] = match;
-    const scopeDir = (0, path_1.join)(npmRoot, scope);
-    let entries;
-    try {
-        entries = (0, fs_1.readdirSync)(scopeDir, { withFileTypes: false });
-    }
-    catch {
-        return;
-    }
-    const prefix = `.${basename}-`;
-    for (const entry of entries) {
-        if (entry.startsWith(prefix)) {
-            try {
-                (0, fs_1.rmSync)((0, path_1.join)(scopeDir, entry), { recursive: true, force: true });
-            }
-            catch {
-                // best-effort: ignore errors on individual temp dir removal
-            }
-        }
-    }
-}
-function removePackageDir(npmRoot, packageName) {
-    const match = packageName.match(/^(@[^/]+)\/(.+)$/);
-    if (!match)
-        return;
-    const [, scope, basename] = match;
-    try {
-        (0, fs_1.rmSync)((0, path_1.join)(npmRoot, scope, basename), { recursive: true, force: true });
-    }
-    catch {
-        // best-effort
-    }
-}
 function createPackagesRouter(apiKeys) {
     const router = (0, express_1.Router)();
     if (apiKeys?.length) {
@@ -172,7 +39,7 @@ function createPackagesRouter(apiKeys) {
         }
         let packages;
         try {
-            packages = await fetchAllPackageVersions();
+            packages = await (0, registry_1.fetchAllPackageVersions)();
         }
         catch {
             res.status(503).json({ error: 'registry unavailable' });
@@ -191,16 +58,16 @@ function createPackagesRouter(apiKeys) {
             }
         }
         const { name } = req.params;
-        const config = PACKAGES[name];
+        const config = registry_1.PACKAGES[name];
         if (!config) {
             res.status(404).json({ error: `unknown package: ${name}` });
             return;
         }
         const packageName = config.npm;
-        const from = resolveCurrent(config);
+        const from = (0, registry_1.resolveCurrent)(config);
         let latest;
         try {
-            latest = await getLatestVersion(packageName);
+            latest = await (0, registry_1.getLatestVersion)(packageName);
         }
         catch {
             res.status(503).json({ error: 'registry unavailable' });
@@ -211,7 +78,7 @@ function createPackagesRouter(apiKeys) {
             return;
         }
         // Already on latest (or ahead of it) — no install needed
-        if (from && !updateAvailable(from, latest)) {
+        if (from && !(0, registry_1.updateAvailable)(from, latest)) {
             res.json({ package: packageName, from, to: from, updated: false, warning: null });
             return;
         }
@@ -226,82 +93,35 @@ function createPackagesRouter(apiKeys) {
             // via their own updater. npm install -g would write a separate npm copy
             // that isn't the running binary, so it must not be used here.
             if (config.update === 'native' && config.bin) {
-                let updateErr = null;
-                try {
-                    (0, child_process_1.execSync)(`${config.bin} update`, {
-                        stdio: ['pipe', 'pipe', 'pipe'],
-                        timeout: 300000,
-                    });
-                }
-                catch (err) {
-                    updateErr = err;
-                }
+                const updateErr = (0, registry_1.runNativeUpdate)(config);
                 if (updateErr !== null) {
-                    const stderr = updateErr.stderr?.toString() ??
-                        updateErr.message ??
-                        'update failed';
-                    res.status(500).json({ error: stderr });
+                    res.status(500).json({ error: updateErr });
                     return;
                 }
                 // Invalidate version cache and re-read the actual binary version.
                 // The native updater may legitimately be a no-op (already newest on its
                 // own channel), so report `updated` from whether the version changed.
                 versionCache = null;
-                const to = resolveCurrent(config);
+                const to = (0, registry_1.resolveCurrent)(config);
                 res.json({ package: packageName, from, to, updated: to !== from, warning: null });
                 return;
             }
             // npm-global packages (e.g. claude-gateway) update via npm install -g.
-            // Resolve npm global root for temp dir cleanup
-            let npmRoot = '';
-            try {
-                npmRoot = getNpmGlobalRoot();
-            }
-            catch {
-                // non-fatal: skip pre-clean if npm root unavailable
-            }
-            // Pre-clean any stale npm temp dirs left by previous interrupted installs
-            if (npmRoot) {
-                cleanStaleNpmTempDirs(npmRoot, packageName);
-            }
-            let installErr = null;
-            try {
-                (0, child_process_1.execSync)(`npm install -g ${packageName}@latest`, {
-                    stdio: ['pipe', 'pipe', 'pipe'],
-                    timeout: 300000,
-                });
-            }
-            catch (err) {
-                const stderr = err.stderr?.toString() ?? '';
-                if (npmRoot && (stderr.includes('ENOTEMPTY') || stderr.includes('ENOTDIR'))) {
-                    // Remove stale temp dirs and the partially-installed package dir, then retry once
-                    cleanStaleNpmTempDirs(npmRoot, packageName);
-                    removePackageDir(npmRoot, packageName);
-                    try {
-                        (0, child_process_1.execSync)(`npm install -g ${packageName}@latest`, {
-                            stdio: ['pipe', 'pipe', 'pipe'],
-                            timeout: 300000,
-                        });
-                    }
-                    catch (retryErr) {
-                        installErr = retryErr;
-                    }
-                }
-                else {
-                    installErr = err;
-                }
-            }
+            const installErr = (0, registry_1.installNpmLatest)(packageName);
             if (installErr !== null) {
-                const stderr = installErr.stderr?.toString() ?? 'install failed';
-                res.status(500).json({ error: stderr });
+                res.status(500).json({ error: installErr });
                 return;
             }
             // Invalidate version cache after successful install
             versionCache = null;
-            const to = getNpmListVersion(packageName);
+            const to = (0, registry_1.getNpmListVersion)(packageName);
             if (name === 'claude-gateway') {
-                const isSystemd = !!process.env.INVOCATION_ID;
-                const isPm2 = !!process.env.PM2_HOME || process.env.pm_id !== undefined;
+                // `claimSupervisorEnv()` scrubs the inherited markers at boot and records
+                // the supervisor in their place; the raw markers are still honoured for
+                // a server embedded without going through that entry point.
+                const claimed = process.env.CLAUDE_GATEWAY_SUPERVISOR;
+                const isSystemd = claimed === 'systemd' || !!process.env.INVOCATION_ID;
+                const isPm2 = claimed === 'pm2' || !!process.env.PM2_HOME || process.env.pm_id !== undefined;
                 const isManaged = isSystemd || isPm2;
                 res.json({
                     package: packageName,

package/dist/api/packages.js.map

@@ -1 +1 @@
-{"version":3,"file":"packages.js","sourceRoot":"","sources":["../../src/api/packages.ts"],"names":[],"mappings":";;AA0DA,kCAEC;AAED,gCAEC;AAED,4BAEC;AA4HD,oDA0LC;AA1XD,qCAAoD;AACpD,iDAAyC;AACzC,2BAAyC;AACzC,+BAA4B;AAE5B,iCAA0D;AAC1D,iDAAmD;AAqBnD,qCAAqC;AACrC,mEAAmE;AACnE,2EAA2E;AAC3E,qEAAqE;AACrE,MAAM,QAAQ,GAAkC;IAC9C,gBAAgB,EAAE,EAAE,GAAG,EAAE,yBAAyB,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE;IAClF,aAAa,EAAE;QACb,GAAG,EAAE,2BAA2B;QAChC,MAAM,EAAE,QAAQ;QAChB,GAAG,EAAE,QAAQ;QACb,MAAM,EAAE,QAAQ;KACjB;CACF,CAAC;AAcF,MAAM,YAAY,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAEnC,IAAI,YAAY,GAAsB,IAAI,CAAC;AAC3C,IAAI,UAAU,GAAG,KAAK,CAAC;AAEvB,SAAgB,WAAW;IACzB,YAAY,GAAG,IAAI,CAAC;AACtB,CAAC;AAED,SAAgB,UAAU;IACxB,UAAU,GAAG,KAAK,CAAC;AACrB,CAAC;AAED,SAAgB,QAAQ;IACtB,UAAU,GAAG,IAAI,CAAC;AACpB,CAAC;AAED,SAAS,iBAAiB,CAAC,WAAmB;IAC5C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAA,wBAAQ,EAAC,eAAe,WAAW,mBAAmB,EAAE;YACrE,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;YAC/B,OAAO,EAAE,KAAM;SAChB,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAA2D,CAAC;QAC5F,OAAO,MAAM,CAAC,YAAY,EAAE,CAAC,WAAW,CAAC,EAAE,OAAO,IAAI,IAAI,CAAC;IAC7D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,sEAAsE;AACtE,0EAA0E;AAC1E,sEAAsE;AACtE,0EAA0E;AAC1E,yDAAyD;AACzD,SAAS,gBAAgB,CAAC,GAAW;IACnC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAA,wBAAQ,EAAC,GAAG,GAAG,YAAY,EAAE;YAC1C,QAAQ,EAAE,OAAO;YACjB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;YAC/B,OAAO,EAAE,KAAM;SAChB,CAAC,CAAC;QACH,8EAA8E;QAC9E,6EAA6E;QAC7E,4DAA4D;QAC5D,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC1E,OAAO,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,6EAA6E;AAC7E,SAAS,cAAc,CAAC,MAAqB;IAC3C,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;QAC7C,OAAO,gBAAgB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACtC,CAAC;IACD,OAAO,iBAAiB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AACvC,CAAC;AAED,8EAA8E;AAC9E,0EAA0E;AAC1E,8EAA8E;AAC9E,iEAAiE;AACjE,SAAS,eAAe,CAAC,OAAsB,EAAE,MAAqB;IACpE,OAAO,CAAC,CAAC,CAAC,OAAO,IAAI,MAAM,IAAI,IAAA,wBAAa,EAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;AACrE,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,WAAmB;IACjD,MAAM,WAAW,GAAG,WAAW,CAAC,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACpD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,8BAA8B,WAAW,SAAS,CAAC,CAAC;IAC5E,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,OAAO,IAAI,CAAC;IACzB,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAyB,CAAC;IACxD,OAAO,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC;AAC9B,CAAC;AAED,KAAK,UAAU,uBAAuB;IACpC,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACxC,gFAAgF;IAChF,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAC7C,OAAO,OAAO,CAAC,GAAG,CAChB,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE;QAC9B,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;QAC5B,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAClD,OAAO;YACL,OAAO,EAAE,MAAM,CAAC,GAAG;YACnB,OAAO;YACP,MAAM;YACN,SAAS,EAAE,eAAe,CAAC,OAAO,EAAE,MAAM,CAAC;SAC5C,CAAC;IACJ,CAAC,CAAC,CACH,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB;IACvB,OAAO,IAAA,wBAAQ,EAAC,aAAa,EAAE;QAC7B,QAAQ,EAAE,OAAO;QACjB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;QAC/B,OAAO,EAAE,KAAM;KAChB,CAAC,CAAC,IAAI,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,qBAAqB,CAAC,OAAe,EAAE,WAAmB;IACjE,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;IACpD,IAAI,CAAC,KAAK;QAAE,OAAO;IACnB,MAAM,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,GAAG,KAAK,CAAC;IAElC,MAAM,QAAQ,GAAG,IAAA,WAAI,EAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACtC,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACH,OAAO,GAAG,IAAA,gBAAW,EAAC,QAAQ,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,CAAa,CAAC;IACxE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;IACT,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,QAAQ,GAAG,CAAC;IAC/B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;YAC7B,IAAI,CAAC;gBACH,IAAA,WAAM,EAAC,IAAA,WAAI,EAAC,QAAQ,EAAE,KAAK,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YAClE,CAAC;YAAC,MAAM,CAAC;gBACP,4DAA4D;YAC9D,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAe,EAAE,WAAmB;IAC5D,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC;IACpD,IAAI,CAAC,KAAK;QAAE,OAAO;IACnB,MAAM,CAAC,EAAE,KAAK,EAAE,QAAQ,CAAC,GAAG,KAAK,CAAC;IAClC,IAAI,CAAC;QACH,IAAA,WAAM,EAAC,IAAA,WAAI,EAAC,OAAO,EAAE,KAAK,EAAE,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3E,CAAC;IAAC,MAAM,CAAC;QACP,cAAc;IAChB,CAAC;AACH,CAAC;AAED,SAAgB,oBAAoB,CAAC,OAAkB;IACrD,MAAM,MAAM,GAAG,IAAA,gBAAM,GAAE,CAAC;IAExB,IAAI,OAAO,EAAE,MAAM,EAAE,CAAC;QACpB,MAAM,CAAC,GAAG,CAAC,IAAA,8BAAuB,EAAC,OAAO,CAAC,CAAC,CAAC;IAC/C,CAAC;IAED,wEAAwE;IACxE,MAAM,CAAC,GAAG,CAAC,cAAc,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;QAC/D,IAAI,OAAO,EAAE,MAAM,EAAE,CAAC;YACpB,MAAM,MAAM,GAAI,GAAqB,CAAC,MAAM,CAAC;YAC7C,IAAI,CAAC,IAAA,cAAO,EAAC,MAAM,CAAC,EAAE,CAAC;gBACrB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,CAAC;gBAC1D,OAAO;YACT,CAAC;QACH,CAAC;QAED,IAAI,YAAY,IAAI,YAAY,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YACxD,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC;YAC1C,OAAO;QACT,CAAC;QAED,IAAI,QAAuB,CAAC;QAC5B,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,uBAAuB,EAAE,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC;YACxD,OAAO;QACT,CAAC;QAED,YAAY,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,YAAY,EAAE,CAAC;QACxE,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;IAEH,4EAA4E;IAC5E,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;QAC7E,IAAI,OAAO,EAAE,MAAM,EAAE,CAAC;YACpB,MAAM,MAAM,GAAI,GAAqB,CAAC,MAAM,CAAC;YAC7C,IAAI,CAAC,IAAA,cAAO,EAAC,MAAM,CAAC,EAAE,CAAC;gBACrB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,CAAC;gBAC1D,OAAO;YACT,CAAC;QACH,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC,MAA0B,CAAC;QAChD,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,IAAI,EAAE,EAAE,CAAC,CAAC;YAC5D,OAAO;QACT,CAAC;QACD,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC;QAE/B,MAAM,IAAI,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;QAEpC,IAAI,MAAqB,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,gBAAgB,CAAC,WAAW,CAAC,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC;YACxD,OAAO;QACT,CAAC;QAED,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC;YACxD,OAAO;QACT,CAAC;QAED,yDAAyD;QACzD,IAAI,IAAI,IAAI,CAAC,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;YAC3C,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YAClF,OAAO;QACT,CAAC;QAED,kDAAkD;QAClD,IAAI,UAAU,EAAE,CAAC;YACf,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC,CAAC;YAC9D,OAAO;QACT,CAAC;QAED,UAAU,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC;YACH,yEAAyE;YACzE,wEAAwE;YACxE,8DAA8D;YAC9D,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;gBAC7C,IAAI,SAAS,GAAY,IAAI,CAAC;gBAC9B,IAAI,CAAC;oBACH,IAAA,wBAAQ,EAAC,GAAG,MAAM,CAAC,GAAG,SAAS,EAAE;wBAC/B,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;wBAC/B,OAAO,EAAE,MAAO;qBACjB,CAAC,CAAC;gBACL,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,SAAS,GAAG,GAAG,CAAC;gBAClB,CAAC;gBAED,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;oBACvB,MAAM,MAAM,GACT,SAAiC,CAAC,MAAM,EAAE,QAAQ,EAAE;wBACpD,SAAkC,CAAC,OAAO;wBAC3C,eAAe,CAAC;oBAClB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;oBACxC,OAAO;gBACT,CAAC;gBAED,kEAAkE;gBAClE,wEAAwE;gBACxE,sEAAsE;gBACtE,YAAY,GAAG,IAAI,CAAC;gBACpB,MAAM,EAAE,GAAG,cAAc,CAAC,MAAM,CAAC,CAAC;gBAClC,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,KAAK,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;gBAClF,OAAO;YACT,CAAC;YAED,uEAAuE;YACvE,+CAA+C;YAC/C,IAAI,OAAO,GAAG,EAAE,CAAC;YACjB,IAAI,CAAC;gBACH,OAAO,GAAG,gBAAgB,EAAE,CAAC;YAC/B,CAAC;YAAC,MAAM,CAAC;gBACP,oDAAoD;YACtD,CAAC;YAED,0EAA0E;YAC1E,IAAI,OAAO,EAAE,CAAC;gBACZ,qBAAqB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;YAC9C,CAAC;YAED,IAAI,UAAU,GAAY,IAAI,CAAC;YAC/B,IAAI,CAAC;gBACH,IAAA,wBAAQ,EAAC,kBAAkB,WAAW,SAAS,EAAE;oBAC/C,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;oBAC/B,OAAO,EAAE,MAAO;iBACjB,CAAC,CAAC;YACL,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,MAAM,GAAI,GAA2B,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;gBACrE,IAAI,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;oBAC5E,kFAAkF;oBAClF,qBAAqB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;oBAC5C,gBAAgB,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;oBACvC,IAAI,CAAC;wBACH,IAAA,wBAAQ,EAAC,kBAAkB,WAAW,SAAS,EAAE;4BAC/C,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;4BAC/B,OAAO,EAAE,MAAO;yBACjB,CAAC,CAAC;oBACL,CAAC;oBAAC,OAAO,QAAQ,EAAE,CAAC;wBAClB,UAAU,GAAG,QAAQ,CAAC;oBACxB,CAAC;gBACH,CAAC;qBAAM,CAAC;oBACN,UAAU,GAAG,GAAG,CAAC;gBACnB,CAAC;YACH,CAAC;YAED,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;gBACxB,MAAM,MAAM,GAAI,UAAkC,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,gBAAgB,CAAC;gBAC1F,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;gBACxC,OAAO;YACT,CAAC;YAED,oDAAoD;YACpD,YAAY,GAAG,IAAI,CAAC;YAEpB,MAAM,EAAE,GAAG,iBAAiB,CAAC,WAAW,CAAC,CAAC;YAE1C,IAAI,IAAI,KAAK,gBAAgB,EAAE,CAAC;gBAC9B,MAAM,SAAS,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;gBAC9C,MAAM,KAAK,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC;gBACxE,MAAM,SAAS,GAAG,SAAS,IAAI,KAAK,CAAC;gBAErC,GAAG,CAAC,IAAI,CAAC;oBACP,OAAO,EAAE,WAAW;oBACpB,IAAI;oBACJ,EAAE;oBACF,OAAO,EAAE,IAAI;oBACb,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,sCAAsC;iBACrF,CAAC,CAAC;gBAEH,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,EAAE,GAAG,CAAC,CAAC;YAC9D,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YAC7E,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,UAAU,GAAG,KAAK,CAAC;QACrB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"packages.js","sourceRoot":"","sources":["../../src/api/packages.ts"],"names":[],"mappings":";;AAmCA,kCAEC;AAED,gCAEC;AAED,4BAEC;AAED,oDA2IC;AA1LD,qCAAoD;AAEpD,iCAA0D;AAC1D,mDAU8B;AAiB9B,MAAM,YAAY,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAEnC,IAAI,YAAY,GAAsB,IAAI,CAAC;AAC3C,IAAI,UAAU,GAAG,KAAK,CAAC;AAEvB,SAAgB,WAAW;IACzB,YAAY,GAAG,IAAI,CAAC;AACtB,CAAC;AAED,SAAgB,UAAU;IACxB,UAAU,GAAG,KAAK,CAAC;AACrB,CAAC;AAED,SAAgB,QAAQ;IACtB,UAAU,GAAG,IAAI,CAAC;AACpB,CAAC;AAED,SAAgB,oBAAoB,CAAC,OAAkB;IACrD,MAAM,MAAM,GAAG,IAAA,gBAAM,GAAE,CAAC;IAExB,IAAI,OAAO,EAAE,MAAM,EAAE,CAAC;QACpB,MAAM,CAAC,GAAG,CAAC,IAAA,8BAAuB,EAAC,OAAO,CAAC,CAAC,CAAC;IAC/C,CAAC;IAED,wEAAwE;IACxE,MAAM,CAAC,GAAG,CAAC,cAAc,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;QAC/D,IAAI,OAAO,EAAE,MAAM,EAAE,CAAC;YACpB,MAAM,MAAM,GAAI,GAAqB,CAAC,MAAM,CAAC;YAC7C,IAAI,CAAC,IAAA,cAAO,EAAC,MAAM,CAAC,EAAE,CAAC;gBACrB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,CAAC;gBAC1D,OAAO;YACT,CAAC;QACH,CAAC;QAED,IAAI,YAAY,IAAI,YAAY,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;YACxD,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC;YAC1C,OAAO;QACT,CAAC;QAED,IAAI,QAAuB,CAAC;QAC5B,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAA,kCAAuB,GAAE,CAAC;QAC7C,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC;YACxD,OAAO;QACT,CAAC;QAED,YAAY,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,YAAY,EAAE,CAAC;QACxE,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;IAEH,4EAA4E;IAC5E,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;QAC7E,IAAI,OAAO,EAAE,MAAM,EAAE,CAAC;YACpB,MAAM,MAAM,GAAI,GAAqB,CAAC,MAAM,CAAC;YAC7C,IAAI,CAAC,IAAA,cAAO,EAAC,MAAM,CAAC,EAAE,CAAC;gBACrB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,CAAC;gBAC1D,OAAO;YACT,CAAC;QACH,CAAC;QAED,MAAM,EAAE,IAAI,EAAE,GAAG,GAAG,CAAC,MAA0B,CAAC;QAChD,MAAM,MAAM,GAAG,mBAAQ,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,oBAAoB,IAAI,EAAE,EAAE,CAAC,CAAC;YAC5D,OAAO;QACT,CAAC;QACD,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC;QAE/B,MAAM,IAAI,GAAG,IAAA,yBAAc,EAAC,MAAM,CAAC,CAAC;QAEpC,IAAI,MAAqB,CAAC;QAC1B,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,IAAA,2BAAgB,EAAC,WAAW,CAAC,CAAC;QAC/C,CAAC;QAAC,MAAM,CAAC;YACP,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC;YACxD,OAAO;QACT,CAAC;QAED,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,sBAAsB,EAAE,CAAC,CAAC;YACxD,OAAO;QACT,CAAC;QAED,yDAAyD;QACzD,IAAI,IAAI,IAAI,CAAC,IAAA,0BAAe,EAAC,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;YAC3C,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YAClF,OAAO;QACT,CAAC;QAED,kDAAkD;QAClD,IAAI,UAAU,EAAE,CAAC;YACf,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC,CAAC;YAC9D,OAAO;QACT,CAAC;QAED,UAAU,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC;YACH,yEAAyE;YACzE,wEAAwE;YACxE,8DAA8D;YAC9D,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;gBAC7C,MAAM,SAAS,GAAG,IAAA,0BAAe,EAAC,MAAM,CAAC,CAAC;gBAC1C,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;oBACvB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;oBAC3C,OAAO;gBACT,CAAC;gBAED,kEAAkE;gBAClE,wEAAwE;gBACxE,sEAAsE;gBACtE,YAAY,GAAG,IAAI,CAAC;gBACpB,MAAM,EAAE,GAAG,IAAA,yBAAc,EAAC,MAAM,CAAC,CAAC;gBAClC,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,KAAK,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;gBAClF,OAAO;YACT,CAAC;YAED,uEAAuE;YACvE,MAAM,UAAU,GAAG,IAAA,2BAAgB,EAAC,WAAW,CAAC,CAAC;YACjD,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;gBACxB,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;gBAC5C,OAAO;YACT,CAAC;YAED,oDAAoD;YACpD,YAAY,GAAG,IAAI,CAAC;YAEpB,MAAM,EAAE,GAAG,IAAA,4BAAiB,EAAC,WAAW,CAAC,CAAC;YAE1C,IAAI,IAAI,KAAK,gBAAgB,EAAE,CAAC;gBAC9B,0EAA0E;gBAC1E,wEAAwE;gBACxE,4DAA4D;gBAC5D,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC;gBACtD,MAAM,SAAS,GAAG,OAAO,KAAK,SAAS,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;gBACvE,MAAM,KAAK,GAAG,OAAO,KAAK,KAAK,IAAI,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC;gBAC7F,MAAM,SAAS,GAAG,SAAS,IAAI,KAAK,CAAC;gBAErC,GAAG,CAAC,IAAI,CAAC;oBACP,OAAO,EAAE,WAAW;oBACpB,IAAI;oBACJ,EAAE;oBACF,OAAO,EAAE,IAAI;oBACb,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,CAAC,sCAAsC;iBACrF,CAAC,CAAC;gBAEH,UAAU,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,EAAE,GAAG,CAAC,CAAC;YAC9D,CAAC;iBAAM,CAAC;gBACN,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;YAC7E,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,UAAU,GAAG,KAAK,CAAC;QACrB,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/api/route-registry.d.ts

@@ -0,0 +1,81 @@
+import type { Router, RequestHandler } from 'express';
+/**
+ * Route registry — the single source of truth that ties an HTTP route to its
+ * friendly CLI command and its documentation entry.
+ *
+ * A converted router registers each route with {@link defineRoute}, which does
+ * two things in one call:
+ *   1. mounts the handler on the Express router exactly as `router.get(...)` would, and
+ *   2. records the route's metadata (method, path, auth, CLI mapping) into a
+ *      module-global manifest.
+ *
+ * Because the mount and the metadata come from the same call, they can never
+ * drift. The manifest feeds:
+ *   - `GET /api/v1/_meta/routes` at runtime (populated as routers are created), and
+ *   - `scripts/gen-cli.ts` at build time (which calls each converted router
+ *     factory with throwaway deps to populate the manifest WITHOUT booting the
+ *     server — handlers are mounted but never invoked, so no deps are needed).
+ *
+ * Adding a CLI-exposed endpoint is therefore a single edit: one `defineRoute`
+ * call yields the API route, the CLI command, and the doc entry together.
+ */
+export type HttpMethod = 'GET' | 'POST' | 'PUT' | 'DELETE' | 'PATCH';
+/** Auth requirement for a route, for docs/help only (the actual enforcement is
+ *  the router's own middleware — this is descriptive metadata). */
+export type AuthLevel = 'none' | 'key' | 'admin';
+/** A CLI flag derived from a query or body parameter. */
+export interface CliFlag {
+    /** Flag name as typed on the CLI, e.g. `agent` → `--agent`. */
+    name: string;
+    /** Where the value is sent: query string or request body. */
+    in: 'query' | 'body';
+    /** A boolean flag (`--force`) takes no value. */
+    boolean?: boolean;
+    required?: boolean;
+    description?: string;
+}
+/** Maps a route to a friendly `<noun> <verb>` CLI command. */
+export interface CliMapping {
+    /** Resource group, plural for resources (`crons`, `agents`, `sessions`). */
+    noun: string;
+    /** Action within the noun (`list`, `create`, `run`, `restart`). */
+    verb: string;
+    /** Path params in order → positional CLI args (`:id` → `['id']`). */
+    args?: string[];
+    /** Query/body params exposed as `--flags`. Body-heavy routes may also accept a
+     *  generic `--data <json>`; declared body flags are merged over it. */
+    flags?: CliFlag[];
+}
+/** One route's metadata. `cli: null` marks a route intentionally NOT exposed as
+ *  a friendly command (still reachable via the `api` passthrough). */
+export interface RouteDef {
+    method: HttpMethod;
+    path: string;
+    auth: AuthLevel;
+    summary: string;
+    cli?: CliMapping | null;
+}
+/**
+ * Clear the manifest. Call before repopulating (codegen, tests).
+ *
+ * Not called anywhere on the live server boot path today — `defineRoute`'s own
+ * dedup keeps re-mounting the same routes from piling up duplicates, but if a
+ * `GatewayRouter` is ever re-instantiated in-process with a *different* route
+ * set (e.g. a future hot-reload path), stale entries from the first
+ * instantiation would linger here and leak into `GET /_meta/routes`. Call this
+ * before any such re-instantiation.
+ */
+export declare function resetRegisteredRoutes(): void;
+/** Snapshot of the manifest (deep-copied so callers can't mutate it). */
+export declare function getRegisteredRoutes(): RouteDef[];
+/**
+ * Mount `handlers` on `router` for `def.method`/`def.path` (identical to
+ * `router[method](path, ...handlers)`) AND record `def` in the manifest.
+ *
+ * The metadata is deduped by `method + path` so that calling a router factory
+ * more than once (as tests do per-app, and codegen does across a run) does not
+ * pile up duplicate entries. The mount always happens so each router instance
+ * gets its own routes.
+ */
+export declare function defineRoute(router: Router, def: RouteDef, ...handlers: RequestHandler[]): void;
+//# sourceMappingURL=route-registry.d.ts.map

package/dist/api/route-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"route-registry.d.ts","sourceRoot":"","sources":["../../src/api/route-registry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAEtD;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,MAAM,MAAM,UAAU,GAAG,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,QAAQ,GAAG,OAAO,CAAC;AAErE;mEACmE;AACnE,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,KAAK,GAAG,OAAO,CAAC;AAEjD,yDAAyD;AACzD,MAAM,WAAW,OAAO;IACtB,+DAA+D;IAC/D,IAAI,EAAE,MAAM,CAAC;IACb,6DAA6D;IAC7D,EAAE,EAAE,OAAO,GAAG,MAAM,CAAC;IACrB,iDAAiD;IACjD,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,8DAA8D;AAC9D,MAAM,WAAW,UAAU;IACzB,4EAA4E;IAC5E,IAAI,EAAE,MAAM,CAAC;IACb,mEAAmE;IACnE,IAAI,EAAE,MAAM,CAAC;IACb,qEAAqE;IACrE,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB;2EACuE;IACvE,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC;CACnB;AAED;sEACsE;AACtE,MAAM,WAAW,QAAQ;IACvB,MAAM,EAAE,UAAU,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,SAAS,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,UAAU,GAAG,IAAI,CAAC;CACzB;AAID;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,IAAI,IAAI,CAE5C;AAED,yEAAyE;AACzE,wBAAgB,mBAAmB,IAAI,QAAQ,EAAE,CAEhD;AAMD;;;;;;;;GAQG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,QAAQ,EAAE,cAAc,EAAE,GAAG,IAAI,CAO9F"}

package/dist/api/route-registry.js

@@ -0,0 +1,44 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resetRegisteredRoutes = resetRegisteredRoutes;
+exports.getRegisteredRoutes = getRegisteredRoutes;
+exports.defineRoute = defineRoute;
+const registered = [];
+/**
+ * Clear the manifest. Call before repopulating (codegen, tests).
+ *
+ * Not called anywhere on the live server boot path today — `defineRoute`'s own
+ * dedup keeps re-mounting the same routes from piling up duplicates, but if a
+ * `GatewayRouter` is ever re-instantiated in-process with a *different* route
+ * set (e.g. a future hot-reload path), stale entries from the first
+ * instantiation would linger here and leak into `GET /_meta/routes`. Call this
+ * before any such re-instantiation.
+ */
+function resetRegisteredRoutes() {
+    registered.length = 0;
+}
+/** Snapshot of the manifest (deep-copied so callers can't mutate it). */
+function getRegisteredRoutes() {
+    return registered.map((r) => ({ ...r, cli: r.cli ? { ...r.cli } : r.cli }));
+}
+function metaKey(method, path) {
+    return `${method} ${path}`;
+}
+/**
+ * Mount `handlers` on `router` for `def.method`/`def.path` (identical to
+ * `router[method](path, ...handlers)`) AND record `def` in the manifest.
+ *
+ * The metadata is deduped by `method + path` so that calling a router factory
+ * more than once (as tests do per-app, and codegen does across a run) does not
+ * pile up duplicate entries. The mount always happens so each router instance
+ * gets its own routes.
+ */
+function defineRoute(router, def, ...handlers) {
+    const key = metaKey(def.method, def.path);
+    if (!registered.some((r) => metaKey(r.method, r.path) === key)) {
+        registered.push({ ...def, cli: def.cli ? { ...def.cli } : def.cli });
+    }
+    const m = def.method.toLowerCase();
+    router[m](def.path, ...handlers);
+}
+//# sourceMappingURL=route-registry.js.map

package/dist/api/route-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"route-registry.js","sourceRoot":"","sources":["../../src/api/route-registry.ts"],"names":[],"mappings":";;AA4EA,sDAEC;AAGD,kDAEC;AAeD,kCAOC;AAzCD,MAAM,UAAU,GAAe,EAAE,CAAC;AAElC;;;;;;;;;GASG;AACH,SAAgB,qBAAqB;IACnC,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC;AACxB,CAAC;AAED,yEAAyE;AACzE,SAAgB,mBAAmB;IACjC,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,OAAO,CAAC,MAAc,EAAE,IAAY;IAC3C,OAAO,GAAG,MAAM,IAAI,IAAI,EAAE,CAAC;AAC7B,CAAC;AAED;;;;;;;;GAQG;AACH,SAAgB,WAAW,CAAC,MAAc,EAAE,GAAa,EAAE,GAAG,QAA0B;IACtF,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC;IAC1C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC;QAC/D,UAAU,CAAC,IAAI,CAAC,EAAE,GAAG,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC,WAAW,EAA2B,CAAC;IAC5D,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,QAAQ,CAAC,CAAC;AACnC,CAAC"}

package/dist/api/router.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"router.d.ts","sourceRoot":"","sources":["../../src/api/router.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAqB,MAAM,SAAS,CAAC;AAOpD,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,EAAe,WAAW,EAAE,MAAM,UAAU,CAAC;AA8CzE,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,MAAM,CAExD;AAMD,wBAAgB,cAAc,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,MAAM,CAEtD;AAoID,wBAAgB,eAAe,CAC7B,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,EACtC,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,EACtC,OAAO,EAAE,MAAM,EAAE,EACjB,UAAU,CAAC,EAAE,MAAM,EACnB,MAAM,CAAC,EAAE,WAAW,EAAE,GACrB,MAAM,CAwiGR"}
+{"version":3,"file":"router.d.ts","sourceRoot":"","sources":["../../src/api/router.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAqB,MAAM,SAAS,CAAC;AAOpD,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,EAAe,WAAW,EAAE,MAAM,UAAU,CAAC;AAgDzE,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,MAAM,CAExD;AAMD,wBAAgB,cAAc,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,MAAM,CAEtD;AAoID,wBAAgB,eAAe,CAC7B,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,EACtC,YAAY,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,EACtC,OAAO,EAAE,MAAM,EAAE,EACjB,UAAU,CAAC,EAAE,MAAM,EACnB,MAAM,CAAC,EAAE,WAAW,EAAE,GACrB,MAAM,CAwjGR"}

package/dist/api/router.js

@@ -51,6 +51,8 @@ const types_1 = require("../history/types");
 const wizard_state_1 = require("./wizard-state");
 const pending_senders_1 = require("./pending-senders");
 const create_agent_prompts_1 = require("../agent/create-agent-prompts");
+const model_catalog_1 = require("../agent/model-catalog");
+const runner_2 = require("../agent/runner");
 const MAX_MESSAGE_LENGTH = 10000;
 const DEFAULT_TIMEOUT_MS = 60000;
 /**
@@ -546,10 +548,26 @@ function createApiRouter(agentRunners, agentConfigs, apiKeys, configPath, models
     /**
      * GET /api/v1/models
      *
-     * List all supported Claude models from gateway config (falls back to defaults).
+     * List the models this gateway offers. Fetches the live catalog when a base
+     * URL is configured and falls back to the gateway's configured/static list —
+     * without the fetch this endpoint could only ever report what was written
+     * into config.json at provisioning time (issue #409).
      */
-    router.get('/v1/models', auth, (_req, res) => {
-        res.json({ models: (models ?? []).map((m) => ({ id: m.id, name: m.label, alias: m.alias, contextWindow: m.contextWindow, multiplier: m.multiplier ?? 1 })) });
+    router.get('/v1/models', auth, async (_req, res) => {
+        // `?? DEFAULT_MODELS`, not `?? []`, and that is load-bearing rather than
+        // cosmetic. fetchModelCatalog caches one parsed catalog per process, and
+        // the alias/contextWindow/multiplier on it are inherited from whichever
+        // caller's list populated the cache first. AgentRunner passes
+        // `gateway.models ?? DEFAULT_MODELS`; if this route passed `[]` on a
+        // gateway whose config has no `gateway.models`, one request here would
+        // cache a catalog with every alias set to its id and every context window
+        // at the 200k default — and the picker and all six contextWindowFor()
+        // callers would read that degraded list for the next 60 seconds. It also
+        // makes this endpoint agree with the picker on an unconfigured gateway
+        // instead of reporting no models at all.
+        const staticModels = models ?? runner_2.DEFAULT_MODELS;
+        const available = (await (0, model_catalog_1.fetchModelCatalog)(staticModels)) ?? staticModels;
+        res.json({ models: available.map((m) => ({ id: m.id, name: m.label, alias: m.alias, contextWindow: m.contextWindow, multiplier: m.multiplier ?? 1 })) });
     });
     /**
      * GET /api/v1/agents