@congzhen/changewayguard 6.8.12

package/dashboard-dist/api/573.index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"573.index.js","mappings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pQA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA","sources":[".././dist/routes/discovery.js",".././dist/services/discovery.js"],"sourcesContent":["import { Router } from \"express\";\nimport { existsSync, readFileSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport { scanAgents, getAgentProfile } from \"../services/discovery.js\";\nimport { db, agentQueries } from \"@og/db\";\nconst agentsDb = agentQueries(db);\nexport const discoveryRouter = Router();\nfunction fallbackAgentName(agentId) {\n    return agentId ? `Agent ${agentId.slice(0, 6)}` : \"Agent\";\n}\nfunction sanitizeAgentName(name, fallback) {\n    const raw = name.replace(/\\s+/g, \" \").trim();\n    if (!raw)\n        return fallback;\n    const cleaned = raw\n        .replace(/^[-*]\\s+/, \"\")\n        .replace(/^[`*_~\\s]+/, \"\")\n        .replace(/[`*_~\\s]+$/, \"\")\n        .replace(/^\\((.*)\\)$/, \"$1\")\n        .trim();\n    if (!cleaned)\n        return fallback;\n    const lower = cleaned.toLowerCase();\n    const looksLikeTemplate = /(pick something|your signature|fill this in|make it yours|workspace-relative|something weirder|ghost in the machine|how do you come across)/i.test(lower);\n    return looksLikeTemplate ? fallback : cleaned;\n}\nfunction registeredToDiscovered(a) {\n    const m = (a.metadata ?? {});\n    const discoveredId = m.openclawId ?? a.id;\n    return {\n        id: discoveredId,\n        name: sanitizeAgentName(a.name, fallbackAgentName(discoveredId)),\n        emoji: m.emoji ?? \"🤖\",\n        creature: m.creature ?? \"\",\n        vibe: m.vibe ?? \"\",\n        model: m.model ?? \"\",\n        provider: m.provider ?? a.provider,\n        workspacePath: \"\",\n        ownerName: m.ownerName ?? \"\",\n        avatarUrl: null,\n        skills: m.skills ?? [],\n        connectedSystems: m.connectedSystems ?? [],\n        channels: m.channels ?? [],\n        plugins: m.plugins ?? [],\n        hooks: m.hooks ?? [],\n        sessionCount: m.sessionCount ?? 0,\n        lastActive: m.lastActive ?? a.lastSeenAt,\n    };\n}\nfunction registeredToProfile(a) {\n    const m = (a.metadata ?? {});\n    const wf = m.workspaceFiles ?? {};\n    return {\n        ...registeredToDiscovered(a),\n        workspaceFiles: {\n            soul: wf.soul ?? \"\",\n            identity: wf.identity ?? \"\",\n            user: wf.user ?? \"\",\n            agents: wf.agents ?? \"\",\n            tools: wf.tools ?? \"\",\n            heartbeat: wf.heartbeat ?? \"\",\n        },\n        bootstrapExists: m.bootstrapExists ?? false,\n        cronJobs: m.cronJobs ?? [],\n        allSkills: (m.skills ?? []).map((s) => ({ ...s, source: \"workspace\" })),\n        bundledExtensions: [],\n    };\n}\n// ── Routes ───────────────────────────────────────────────────────────────────\n// GET /api/discovery/agents — list all agents (DB primary, filesystem fallback)\ndiscoveryRouter.get(\"/agents\", async (_req, res, next) => {\n    try {\n        const tenantId = res.locals.tenantId;\n        const registered = await agentsDb.findAll(tenantId);\n        if (registered.length > 0) {\n            res.json({ success: true, data: registered.map(registeredToDiscovered) });\n            return;\n        }\n        // Fallback: local filesystem scan (self-hosted, same machine)\n        const discovered = scanAgents();\n        res.json({ success: true, data: discovered });\n    }\n    catch (err) {\n        next(err);\n    }\n});\n// GET /api/discovery/agents/:id — single agent (DB primary, filesystem fallback)\ndiscoveryRouter.get(\"/agents/:id\", async (req, res, next) => {\n    try {\n        const tenantId = res.locals.tenantId;\n        const id = req.params.id;\n        const registered = await agentsDb.findAll(tenantId);\n        // Match by openclawId (from plugin) or DB id\n        const match = registered.find((a) => {\n            const meta = (a.metadata ?? {});\n            return meta.openclawId === id || a.id === id;\n        });\n        if (match) {\n            res.json({ success: true, data: registeredToDiscovered(match) });\n            return;\n        }\n        // Fallback: filesystem\n        const { getAgent } = await import(\"../services/discovery.js\");\n        const agent = getAgent(id);\n        if (!agent) {\n            res.status(404).json({ success: false, error: \"Agent not found\" });\n            return;\n        }\n        res.json({ success: true, data: agent });\n    }\n    catch (err) {\n        next(err);\n    }\n});\n// GET /api/discovery/agents/:id/avatar — serve agent avatar image (filesystem only)\ndiscoveryRouter.get(\"/agents/:id/avatar\", (req, res, next) => {\n    try {\n        const { getAgent } = require(\"../services/discovery.js\");\n        const agent = getAgent(req.params.id);\n        if (!agent || !agent.workspacePath) {\n            res.status(404).json({ success: false, error: \"No avatar found\" });\n            return;\n        }\n        const mimeTypes = {\n            png: \"image/png\",\n            jpg: \"image/jpeg\",\n            jpeg: \"image/jpeg\",\n            svg: \"image/svg+xml\",\n            webp: \"image/webp\",\n        };\n        for (const ext of Object.keys(mimeTypes)) {\n            const avatarPath = join(agent.workspacePath, `avatar.${ext}`);\n            if (existsSync(avatarPath)) {\n                const data = readFileSync(avatarPath);\n                res.setHeader(\"Content-Type\", mimeTypes[ext]);\n                res.setHeader(\"Cache-Control\", \"public, max-age=3600\");\n                res.send(data);\n                return;\n            }\n        }\n        res.status(404).json({ success: false, error: \"No avatar found\" });\n    }\n    catch (err) {\n        next(err);\n    }\n});\n// GET /api/discovery/agents/:id/profile — enriched profile (DB primary, filesystem fallback)\ndiscoveryRouter.get(\"/agents/:id/profile\", async (req, res, next) => {\n    try {\n        const tenantId = res.locals.tenantId;\n        const id = req.params.id;\n        const registered = await agentsDb.findAll(tenantId);\n        const match = registered.find((a) => {\n            const meta = (a.metadata ?? {});\n            return meta.openclawId === id || a.id === id;\n        });\n        if (match) {\n            const profile = registeredToProfile(match);\n            res.json({ success: true, data: { ...profile, registeredAgentId: match.id } });\n            return;\n        }\n        // Fallback: filesystem\n        const profile = getAgentProfile(id);\n        if (!profile) {\n            res.status(404).json({ success: false, error: \"Agent not found\" });\n            return;\n        }\n        // Also try to find registeredAgentId from DB by name\n        const byName = registered.find((a) => a.name === profile.name);\n        res.json({ success: true, data: { ...profile, registeredAgentId: byName?.id ?? null } });\n    }\n    catch (err) {\n        next(err);\n    }\n});\n// POST /api/discovery/scan — trigger fresh scan (filesystem only, for local installs)\ndiscoveryRouter.post(\"/scan\", (_req, res, next) => {\n    try {\n        const agents = scanAgents();\n        res.json({ success: true, data: agents });\n    }\n    catch (err) {\n        next(err);\n    }\n});\n// GET /api/discovery/agents/:id/summary — LLM-generated summary\ndiscoveryRouter.get(\"/agents/:id/summary\", async (req, res, next) => {\n    try {\n        const tenantId = res.locals.tenantId;\n        const id = req.params.id;\n        const registered = await agentsDb.findAll(tenantId);\n        const match = registered.find((a) => {\n            const meta = (a.metadata ?? {});\n            return meta.openclawId === id || a.id === id;\n        });\n        const agent = match\n            ? registeredToDiscovered(match)\n            : (() => { const { getAgent } = require(\"../services/discovery.js\"); return getAgent(id) ?? null; })();\n        if (!agent) {\n            res.status(404).json({ success: false, error: \"Agent not found\" });\n            return;\n        }\n        const prompt = `Summarize this AI agent in 2-3 concise paragraphs for a security dashboard:\n\nName: ${agent.name} ${agent.emoji}\nCreature: ${agent.creature}\nVibe: ${agent.vibe}\nModel: ${agent.provider}/${agent.model}\nSkills: ${agent.skills.map((s) => s.name).join(\", \") || \"none\"}\nConnected Systems: ${agent.connectedSystems.join(\", \") || \"none\"}\nChannels: ${agent.channels.join(\", \") || \"none\"}\nPlugins: ${agent.plugins.map((p) => `${p.name}${p.enabled ? \"\" : \" (disabled)\"}`).join(\", \") || \"none\"}\nHooks: ${agent.hooks.map((h) => `${h.name}${h.enabled ? \"\" : \" (disabled)\"}`).join(\", \") || \"none\"}\nSessions: ${agent.sessionCount}\nLast Active: ${agent.lastActive || \"unknown\"}\n\nFocus on: what this agent does, its capabilities, connected systems and potential security surface area. Keep it factual and useful for a security team.`;\n        const { getEnvGatewayPort, getEnvAnthropicApiKey } = await import(\"../services/runtime-config.js\");\n        const gatewayPort = getEnvGatewayPort();\n        try {\n            const apiKey = getEnvAnthropicApiKey();\n            const response = await fetch(`http://localhost:${gatewayPort}/v1/messages`, {\n                method: \"POST\",\n                headers: {\n                    \"Content-Type\": \"application/json\",\n                    \"x-api-key\": apiKey,\n                    \"anthropic-version\": \"2023-06-01\",\n                },\n                body: JSON.stringify({\n                    model: \"claude-sonnet-4-5-20250929\",\n                    max_tokens: 500,\n                    messages: [{ role: \"user\", content: prompt }],\n                }),\n                signal: AbortSignal.timeout(30000),\n            });\n            if (response.ok) {\n                const data = await response.json();\n                const text = data.content?.find((c) => c.type === \"text\")?.text;\n                if (text) {\n                    res.json({ success: true, data: { summary: text } });\n                    return;\n                }\n            }\n        }\n        catch {\n            // Gateway not available, fall through to static summary\n        }\n        const skillList = agent.skills.map((s) => s.name).join(\", \");\n        const systemList = agent.connectedSystems.join(\", \");\n        const summary = `${agent.name} is an AI agent running on ${agent.provider}/${agent.model}. ` +\n            (skillList ? `It has ${agent.skills.length} skill(s): ${skillList}. ` : \"It has no registered skills. \") +\n            (systemList ? `Connected systems: ${systemList}. ` : \"\") +\n            `It has ${agent.sessionCount} recorded session(s)` +\n            (agent.lastActive ? `, last active ${new Date(agent.lastActive).toLocaleDateString()}.` : \".\");\n        res.json({ success: true, data: { summary } });\n    }\n    catch (err) {\n        next(err);\n    }\n});\n//# sourceMappingURL=discovery.js.map","import { readFileSync, readdirSync, existsSync } from \"node:fs\";\nimport { execSync } from \"node:child_process\";\nimport { join, basename, dirname } from \"node:path\";\nimport { homedir } from \"node:os\";\nimport { getEnv } from \"./runtime-config.js\";\nconst OPENCLAW_DIR = join(homedir(), \".openclaw\");\nfunction readJsonSafe(path) {\n    try {\n        return JSON.parse(readFileSync(path, \"utf-8\"));\n    }\n    catch {\n        return null;\n    }\n}\nfunction readFileSafe(path) {\n    try {\n        return readFileSync(path, \"utf-8\");\n    }\n    catch {\n        return \"\";\n    }\n}\nfunction parseOwnerName(workspacePath) {\n    const content = readFileSafe(join(workspacePath, \"USER.md\"));\n    if (!content)\n        return \"\";\n    for (const line of content.split(\"\\n\")) {\n        const trimmed = line.trim();\n        // Handle \"- **Name:** value\" (bullet + bold markdown)\n        const bulletBold = trimmed.match(/^[-*]\\s+\\*\\*name:\\*\\*\\s*(.*)/i);\n        if (bulletBold) {\n            const val = bulletBold[1].trim();\n            if (val)\n                return val;\n            continue;\n        }\n        // Handle \"**Name:** value\" or \"Name: value\"\n        const plain = trimmed.match(/^\\*?\\*?name\\*?\\*?:\\s*(.*)/i);\n        if (plain) {\n            const val = plain[1].replace(/^\\*?\\*?\\s*/, \"\").trim();\n            if (val)\n                return val;\n        }\n    }\n    return \"\";\n}\nconst AVATAR_EXTENSIONS = [\"png\", \"jpg\", \"jpeg\", \"svg\", \"webp\"];\nfunction discoverAvatar(workspacePath) {\n    for (const ext of AVATAR_EXTENSIONS) {\n        if (existsSync(join(workspacePath, `avatar.${ext}`))) {\n            return ext;\n        }\n    }\n    return null;\n}\nfunction parseIdentityMd(content) {\n    const result = { name: \"\", emoji: \"\", creature: \"\", vibe: \"\" };\n    const lines = content.split(\"\\n\");\n    let currentKey = \"\";\n    const normalize = (value) => value\n        .replace(/\\s+/g, \" \")\n        .trim()\n        .replace(/^[`*_~\\s]+/, \"\")\n        .replace(/[`*_~\\s]+$/, \"\")\n        .replace(/^\\((.*)\\)$/, \"$1\")\n        .trim();\n    const isTemplatePlaceholder = (value) => {\n        const lower = value.toLowerCase();\n        return /(pick something|your signature|fill this in|make it yours|workspace-relative|something weirder|ghost in the machine|how do you come across)/i.test(lower);\n    };\n    const useIfValid = (key, value) => {\n        const normalized = normalize(value);\n        if (!normalized || isTemplatePlaceholder(normalized))\n            return;\n        result[key] = normalized;\n    };\n    for (const line of lines) {\n        const trimmed = line.trim();\n        if (trimmed.startsWith(\"- **Name:**\")) {\n            currentKey = \"name\";\n            const inline = trimmed.replace(\"- **Name:**\", \"\").trim();\n            if (inline)\n                useIfValid(\"name\", inline);\n        }\n        else if (trimmed.startsWith(\"- **Creature:**\")) {\n            currentKey = \"creature\";\n            const inline = trimmed.replace(\"- **Creature:**\", \"\").trim();\n            if (inline)\n                useIfValid(\"creature\", inline);\n        }\n        else if (trimmed.startsWith(\"- **Vibe:**\")) {\n            currentKey = \"vibe\";\n            const inline = trimmed.replace(\"- **Vibe:**\", \"\").trim();\n            if (inline)\n                useIfValid(\"vibe\", inline);\n        }\n        else if (trimmed.startsWith(\"- **Emoji:**\")) {\n            currentKey = \"emoji\";\n            const inline = trimmed.replace(\"- **Emoji:**\", \"\").trim();\n            if (inline)\n                useIfValid(\"emoji\", inline);\n        }\n        else if (trimmed.startsWith(\"- **\") || trimmed.startsWith(\"---\") || trimmed.startsWith(\"#\")) {\n            currentKey = \"\";\n        }\n        else if (currentKey && trimmed) {\n            const key = currentKey;\n            if (!result[key])\n                useIfValid(key, trimmed);\n        }\n    }\n    return result;\n}\nfunction countSessions(agentDir) {\n    const sessionsDir = join(agentDir, \"sessions\");\n    if (!existsSync(sessionsDir))\n        return { count: 0, lastActive: null };\n    const sessionsFile = join(sessionsDir, \"sessions.json\");\n    const sessionsData = readJsonSafe(sessionsFile);\n    if (!sessionsData)\n        return { count: 0, lastActive: null };\n    let latestTs = 0;\n    let count = 0;\n    for (const value of Object.values(sessionsData)) {\n        count++;\n        if (typeof value === \"object\" && value && typeof value.updatedAt === \"number\") {\n            if (value.updatedAt > latestTs)\n                latestTs = value.updatedAt;\n        }\n    }\n    return {\n        count,\n        lastActive: latestTs ? new Date(latestTs).toISOString() : null,\n    };\n}\nfunction discoverSkills(workspacePath) {\n    const skillsDir = join(workspacePath, \"skills\");\n    if (!existsSync(skillsDir))\n        return [];\n    try {\n        return readdirSync(skillsDir, { withFileTypes: true })\n            .filter((d) => d.isDirectory())\n            .map((d) => {\n            const metaPath = join(skillsDir, d.name, \"_meta.json\");\n            const meta = readJsonSafe(metaPath);\n            return { name: d.name, description: meta?.description };\n        });\n    }\n    catch {\n        return [];\n    }\n}\nfunction discoverCredentials() {\n    const credsDir = join(OPENCLAW_DIR, \"credentials\");\n    if (!existsSync(credsDir))\n        return [];\n    try {\n        return readdirSync(credsDir)\n            .filter((f) => f.endsWith(\".json\"))\n            .map((f) => basename(f, \".json\"));\n    }\n    catch {\n        return [];\n    }\n}\nexport function scanAgents() {\n    if (!existsSync(OPENCLAW_DIR))\n        return [];\n    const config = readJsonSafe(join(OPENCLAW_DIR, \"openclaw.json\"));\n    if (!config)\n        return [];\n    const agentsConfig = config.agents;\n    const pluginsConfig = config.plugins;\n    const hooksConfig = config.hooks;\n    const gatewayConfig = config.gateway;\n    const defaultModel = agentsConfig?.defaults?.model?.primary || \"unknown\";\n    const workspacePath = agentsConfig?.defaults?.workspace || join(OPENCLAW_DIR, \"workspace\");\n    // Parse model string like \"openai-codex/gpt-5.3-codex\"\n    const [provider, model] = defaultModel.includes(\"/\")\n        ? defaultModel.split(\"/\", 2)\n        : [\"unknown\", defaultModel];\n    // Read identity\n    const identityContent = readFileSafe(join(workspacePath, \"IDENTITY.md\"));\n    const identity = parseIdentityMd(identityContent);\n    // Discover skills\n    const skills = discoverSkills(workspacePath);\n    // Connected systems (credentials)\n    const connectedSystems = discoverCredentials();\n    // Channels — derive from session data\n    const channels = [];\n    const agentsDir = join(OPENCLAW_DIR, \"agents\");\n    if (existsSync(agentsDir)) {\n        try {\n            const agentDirs = readdirSync(agentsDir, { withFileTypes: true }).filter((d) => d.isDirectory());\n            for (const agentDir of agentDirs) {\n                const sessionsFile = join(agentsDir, agentDir.name, \"sessions\", \"sessions.json\");\n                const sessionsData = readJsonSafe(sessionsFile);\n                if (sessionsData) {\n                    for (const value of Object.values(sessionsData)) {\n                        if (typeof value === \"object\" && value && typeof value.lastChannel === \"string\") {\n                            if (!channels.includes(value.lastChannel)) {\n                                channels.push(value.lastChannel);\n                            }\n                        }\n                    }\n                }\n            }\n        }\n        catch { /* ignore */ }\n    }\n    // Plugins\n    const plugins = [];\n    if (pluginsConfig?.entries) {\n        for (const [name, entry] of Object.entries(pluginsConfig.entries)) {\n            plugins.push({ name, enabled: entry?.enabled !== false });\n        }\n    }\n    // Hooks\n    const hooks = [];\n    if (hooksConfig?.internal?.entries) {\n        for (const [name, entry] of Object.entries(hooksConfig.internal.entries)) {\n            hooks.push({ name, enabled: entry?.enabled !== false });\n        }\n    }\n    // Count sessions across all agent dirs\n    let totalSessions = 0;\n    let lastActive = null;\n    if (existsSync(agentsDir)) {\n        try {\n            for (const dir of readdirSync(agentsDir, { withFileTypes: true })) {\n                if (!dir.isDirectory())\n                    continue;\n                const result = countSessions(join(agentsDir, dir.name));\n                totalSessions += result.count;\n                if (result.lastActive && (!lastActive || result.lastActive > lastActive)) {\n                    lastActive = result.lastActive;\n                }\n            }\n        }\n        catch { /* ignore */ }\n    }\n    const ownerName = parseOwnerName(workspacePath);\n    const avatarExt = discoverAvatar(workspacePath);\n    const agent = {\n        id: \"main\",\n        name: identity.name || \"Agent\",\n        emoji: identity.emoji || \"🤖\",\n        creature: identity.creature || \"\",\n        vibe: identity.vibe || \"\",\n        model,\n        provider,\n        workspacePath,\n        ownerName,\n        avatarUrl: avatarExt ? `/api/discovery/agents/main/avatar` : null,\n        skills,\n        connectedSystems,\n        channels,\n        plugins,\n        hooks,\n        sessionCount: totalSessions,\n        lastActive,\n    };\n    // Check for additional agent directories\n    const agents = [agent];\n    if (existsSync(agentsDir)) {\n        try {\n            for (const dir of readdirSync(agentsDir, { withFileTypes: true })) {\n                if (!dir.isDirectory() || dir.name === \"main\")\n                    continue;\n                const agentPath = join(agentsDir, dir.name);\n                const sessionInfo = countSessions(agentPath);\n                agents.push({\n                    id: dir.name,\n                    name: dir.name,\n                    emoji: \"🤖\",\n                    creature: \"\",\n                    vibe: \"\",\n                    model,\n                    provider,\n                    workspacePath: agentPath,\n                    ownerName: \"\",\n                    avatarUrl: null,\n                    skills: [],\n                    connectedSystems: [],\n                    channels: [],\n                    plugins: [],\n                    hooks: [],\n                    sessionCount: sessionInfo.count,\n                    lastActive: sessionInfo.lastActive,\n                });\n            }\n        }\n        catch { /* ignore */ }\n    }\n    return agents;\n}\nexport function getAgent(id) {\n    const agents = scanAgents();\n    return agents.find((a) => a.id === id);\n}\n// ---- Profile enrichment ----\nfunction parseFrontmatter(content) {\n    const result = {};\n    if (!content.startsWith(\"---\"))\n        return result;\n    const end = content.indexOf(\"---\", 3);\n    if (end === -1)\n        return result;\n    const block = content.slice(3, end);\n    for (const line of block.split(\"\\n\")) {\n        const match = line.match(/^(\\w[\\w\\s]*):\\s*(.+)/);\n        if (match) {\n            const key = match[1].trim().toLowerCase();\n            let val = match[2].trim();\n            // Strip surrounding quotes\n            if ((val.startsWith('\"') && val.endsWith('\"')) || (val.startsWith(\"'\") && val.endsWith(\"'\"))) {\n                val = val.slice(1, -1);\n            }\n            result[key] = val;\n        }\n    }\n    // Try to extract nested emoji from metadata block\n    const emojiMatch = block.match(/emoji:\\s*[\"']?([^\\n\"']+)[\"']?/);\n    if (emojiMatch)\n        result[\"emoji\"] = emojiMatch[1].trim();\n    return result;\n}\nlet _openclawRoot = undefined;\nfunction resolveOpenclawRoot() {\n    if (_openclawRoot !== undefined)\n        return _openclawRoot;\n    // Try env var first\n    const skillsPath = getEnv(\"OPENCLAW_SKILLS_PATH\");\n    if (skillsPath) {\n        _openclawRoot = skillsPath;\n        return _openclawRoot;\n    }\n    try {\n        const bin = execSync(\"which openclaw\", { encoding: \"utf-8\", timeout: 5000 }).trim();\n        if (bin) {\n            // Binary is at <prefix>/bin/openclaw\n            const binDir = dirname(bin);\n            // Standard global install: <prefix>/bin/openclaw → <prefix>/lib/node_modules/openclaw\n            // Covers nvm, volta, fnm, homebrew node, system node\n            const globalPkg = join(binDir, \"..\", \"lib\", \"node_modules\", \"openclaw\");\n            if (existsSync(join(globalPkg, \"skills\"))) {\n                _openclawRoot = globalPkg;\n                return _openclawRoot;\n            }\n            // Sibling layout: <pkg>/bin/openclaw → <pkg>/skills\n            if (existsSync(join(binDir, \"..\", \"skills\"))) {\n                _openclawRoot = join(binDir, \"..\");\n                return _openclawRoot;\n            }\n            // node_modules/.bin symlink: node_modules/.bin/openclaw → node_modules/openclaw\n            const parentDir = dirname(binDir);\n            if (existsSync(join(parentDir, \"openclaw\", \"skills\"))) {\n                _openclawRoot = join(parentDir, \"openclaw\");\n                return _openclawRoot;\n            }\n        }\n    }\n    catch {\n        // which not found or timeout\n    }\n    // Fallback: common locations\n    const candidates = [\n        join(homedir(), \".openclaw\", \"node_modules\", \"openclaw\"),\n        \"/usr/local/lib/node_modules/openclaw\",\n    ];\n    for (const c of candidates) {\n        if (existsSync(join(c, \"skills\"))) {\n            _openclawRoot = c;\n            return _openclawRoot;\n        }\n    }\n    _openclawRoot = null;\n    return null;\n}\nfunction discoverSystemSkills() {\n    const root = resolveOpenclawRoot();\n    if (!root)\n        return [];\n    const skillsDir = join(root, \"skills\");\n    if (!existsSync(skillsDir))\n        return [];\n    try {\n        return readdirSync(skillsDir, { withFileTypes: true })\n            .filter((d) => d.isDirectory())\n            .map((d) => {\n            const skillMd = readFileSafe(join(skillsDir, d.name, \"SKILL.md\"));\n            const fm = parseFrontmatter(skillMd);\n            return {\n                name: fm[\"name\"] || d.name,\n                description: fm[\"description\"],\n                emoji: fm[\"emoji\"],\n                source: \"system\",\n            };\n        });\n    }\n    catch {\n        return [];\n    }\n}\nfunction discoverWorkspaceSkillsEnriched(workspacePath) {\n    const skillsDir = join(workspacePath, \"skills\");\n    if (!existsSync(skillsDir))\n        return [];\n    try {\n        return readdirSync(skillsDir, { withFileTypes: true })\n            .filter((d) => d.isDirectory())\n            .map((d) => {\n            // Try SKILL.md frontmatter first, fall back to _meta.json\n            const skillMd = readFileSafe(join(skillsDir, d.name, \"SKILL.md\"));\n            const fm = parseFrontmatter(skillMd);\n            const meta = readJsonSafe(join(skillsDir, d.name, \"_meta.json\"));\n            return {\n                name: fm[\"name\"] || d.name,\n                description: fm[\"description\"] || meta?.description,\n                emoji: fm[\"emoji\"],\n                source: \"workspace\",\n            };\n        });\n    }\n    catch {\n        return [];\n    }\n}\nfunction discoverSystemExtensions() {\n    const root = resolveOpenclawRoot();\n    if (!root)\n        return [];\n    const extDir = join(root, \"extensions\");\n    if (!existsSync(extDir))\n        return [];\n    try {\n        return readdirSync(extDir, { withFileTypes: true })\n            .filter((d) => d.isDirectory())\n            .map((d) => {\n            const pluginJson = readJsonSafe(join(extDir, d.name, \"openclaw.plugin.json\"));\n            const pkgJson = readJsonSafe(join(extDir, d.name, \"package.json\"));\n            return {\n                name: pluginJson?.id || d.name,\n                description: pkgJson?.description || \"\",\n                channels: pluginJson?.channels || [],\n            };\n        });\n    }\n    catch {\n        return [];\n    }\n}\nexport function getAgentProfile(id) {\n    const agent = getAgent(id);\n    if (!agent)\n        return undefined;\n    const wp = agent.workspacePath;\n    // Read workspace MD files\n    const workspaceFiles = {\n        soul: readFileSafe(join(wp, \"SOUL.md\")),\n        identity: readFileSafe(join(wp, \"IDENTITY.md\")),\n        user: readFileSafe(join(wp, \"USER.md\")),\n        agents: readFileSafe(join(wp, \"AGENTS.md\")),\n        tools: readFileSafe(join(wp, \"TOOLS.md\")),\n        heartbeat: readFileSafe(join(wp, \"HEARTBEAT.md\")),\n    };\n    // Bootstrap existence\n    const bootstrapExists = existsSync(join(wp, \"BOOTSTRAP.md\"));\n    // Cron jobs\n    let cronJobs = [];\n    const cronPath = join(OPENCLAW_DIR, \"cron\", \"jobs.json\");\n    try {\n        const raw = readFileSafe(cronPath);\n        if (raw) {\n            const parsed = JSON.parse(raw);\n            if (Array.isArray(parsed)) {\n                cronJobs = parsed;\n            }\n            else if (typeof parsed === \"object\" && parsed !== null) {\n                // Handle { jobs: [...] } shape\n                cronJobs = parsed.jobs || Object.values(parsed);\n            }\n        }\n    }\n    catch {\n        // ignore\n    }\n    // Combine system + workspace skills\n    const systemSkills = discoverSystemSkills();\n    const workspaceSkills = discoverWorkspaceSkillsEnriched(wp);\n    const allSkills = [...systemSkills, ...workspaceSkills];\n    // Bundled extensions\n    const bundledExtensions = discoverSystemExtensions();\n    return {\n        ...agent,\n        workspaceFiles,\n        bootstrapExists,\n        cronJobs,\n        allSkills,\n        bundledExtensions,\n    };\n}\n//# sourceMappingURL=discovery.js.map"],"names":[],"sourceRoot":""}

package/dashboard-dist/api/598.index.js

@@ -0,0 +1,328 @@
+export const id = 598;
+export const ids = [598];
+export const modules = {
+
+/***/ 9217:
+/***/ ((__webpack_module__, __webpack_exports__, __webpack_require__) => {
+
+__webpack_require__.a(__webpack_module__, async (__webpack_handle_async_dependencies__, __webpack_async_result__) => { try {
+/* harmony export */ __webpack_require__.d(__webpack_exports__, {
+/* harmony export */   gatewayRouter: () => (/* binding */ router)
+/* harmony export */ });
+/* harmony import */ var express__WEBPACK_IMPORTED_MODULE_0__ = __webpack_require__(316);
+/* harmony import */ var node_fs__WEBPACK_IMPORTED_MODULE_1__ = __webpack_require__(3024);
+/* harmony import */ var node_path__WEBPACK_IMPORTED_MODULE_2__ = __webpack_require__(6760);
+/* harmony import */ var node_os__WEBPACK_IMPORTED_MODULE_3__ = __webpack_require__(8161);
+/* harmony import */ var _og_db__WEBPACK_IMPORTED_MODULE_4__ = __webpack_require__(6020);
+var __webpack_async_dependencies__ = __webpack_handle_async_dependencies__([_og_db__WEBPACK_IMPORTED_MODULE_4__]);
+_og_db__WEBPACK_IMPORTED_MODULE_4__ = (__webpack_async_dependencies__.then ? (await __webpack_async_dependencies__)() : __webpack_async_dependencies__)[0];
+/**
+ * Gateway API routes
+ *
+ * Provides status and management endpoints for the AI Security Gateway.
+ */
+
+
+
+
+
+const gatewayActivityDb = (0,_og_db__WEBPACK_IMPORTED_MODULE_4__/* .gatewayActivityQueries */ .y)(_og_db__WEBPACK_IMPORTED_MODULE_4__.db);
+const DEFAULT_TENANT_ID = "default";
+const router = (0,express__WEBPACK_IMPORTED_MODULE_0__.Router)();
+// File paths - unified to moltguard data directory
+const OPENCLAW_DIR = (0,node_path__WEBPACK_IMPORTED_MODULE_2__.join)((0,node_os__WEBPACK_IMPORTED_MODULE_3__.homedir)(), ".openclaw");
+const MOLTGUARD_DATA_DIR = (0,node_path__WEBPACK_IMPORTED_MODULE_2__.join)(OPENCLAW_DIR, "extensions", "moltguard", "data");
+const GATEWAY_CONFIG = (0,node_path__WEBPACK_IMPORTED_MODULE_2__.join)(MOLTGUARD_DATA_DIR, "gateway.json");
+const GATEWAY_PID_FILE = (0,node_path__WEBPACK_IMPORTED_MODULE_2__.join)(MOLTGUARD_DATA_DIR, "gateway.pid");
+const GATEWAY_BACKUP = (0,node_path__WEBPACK_IMPORTED_MODULE_2__.join)(MOLTGUARD_DATA_DIR, "gateway-backup.json");
+/**
+ * Check if gateway process is running by checking PID file
+ * Note: In-process gateway (embedded in moltguard) won't have a PID file
+ */
+function checkPidFile() {
+    if (!(0,node_fs__WEBPACK_IMPORTED_MODULE_1__.existsSync)(GATEWAY_PID_FILE)) {
+        return { hasPid: false };
+    }
+    try {
+        const pid = parseInt((0,node_fs__WEBPACK_IMPORTED_MODULE_1__["read"+"FileSync"])(GATEWAY_PID_FILE, "utf-8").trim(), 10);
+        // Signal 0 doesn't kill, just checks if process exists
+        process.kill(pid, 0);
+        return { hasPid: true, pid };
+    }
+    catch {
+        return { hasPid: false };
+    }
+}
+/**
+ * Check if gateway is actually responding by calling health endpoint
+ */
+async function checkGatewayHealth(port) {
+    const controller = new AbortController();
+    const timeoutId = setTimeout(() => controller.abort(), 2000);
+    try {
+        const response = await fetch(`http://127.0.0.1:${port}/health`, {
+            signal: controller.signal,
+        });
+        clearTimeout(timeoutId);
+        if (response.ok) {
+            return { healthy: true };
+        }
+        else {
+            return { healthy: false, error: `Status ${response.status}` };
+        }
+    }
+    catch (err) {
+        clearTimeout(timeoutId);
+        return { healthy: false, error: err instanceof Error ? err.message : "Connection failed" };
+    }
+}
+/**
+ * Read gateway configuration
+ */
+function readGatewayConfig() {
+    if (!(0,node_fs__WEBPACK_IMPORTED_MODULE_1__.existsSync)(GATEWAY_CONFIG)) {
+        return null;
+    }
+    try {
+        return JSON.parse((0,node_fs__WEBPACK_IMPORTED_MODULE_1__["read"+"FileSync"])(GATEWAY_CONFIG, "utf-8"));
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Read gateway backup (enabled state)
+ */
+function readGatewayBackup() {
+    if (!(0,node_fs__WEBPACK_IMPORTED_MODULE_1__.existsSync)(GATEWAY_BACKUP)) {
+        return { enabled: false, agents: [], providers: [] };
+    }
+    try {
+        const backup = JSON.parse((0,node_fs__WEBPACK_IMPORTED_MODULE_1__["read"+"FileSync"])(GATEWAY_BACKUP, "utf-8"));
+        const agents = backup.entries?.map((e) => e.agentName) || [];
+        const providerSet = new Set();
+        for (const entry of backup.entries || []) {
+            for (const providerName of Object.keys(entry.providers || {})) {
+                providerSet.add(providerName);
+            }
+        }
+        return {
+            enabled: true,
+            agents,
+            providers: Array.from(providerSet),
+            timestamp: backup.timestamp,
+        };
+    }
+    catch {
+        return { enabled: false, agents: [], providers: [] };
+    }
+}
+/**
+ * GET /api/gateway/status
+ * Get current gateway status
+ */
+router.get("/status", async (_req, res) => {
+    try {
+        const { hasPid, pid } = checkPidFile();
+        const backup = readGatewayBackup();
+        const config = readGatewayConfig();
+        const port = config?.port || 53669;
+        // Check if gateway is actually running by calling health endpoint
+        // This works for both standalone and in-process (embedded) gateway
+        const { healthy } = await checkGatewayHealth(port);
+        const status = {
+            enabled: backup.enabled,
+            running: healthy, // Use health check instead of PID file
+            pid: hasPid ? pid : undefined,
+            port,
+            url: `http://127.0.0.1:${port}`,
+            agents: backup.agents,
+            providers: backup.providers,
+            enabledAt: backup.timestamp || null,
+            backends: config ? Object.keys(config.backends || {}) : [],
+        };
+        res.json({ success: true, data: status });
+    }
+    catch (error) {
+        res.status(500).json({
+            success: false,
+            error: error instanceof Error ? error.message : "Failed to get gateway status",
+        });
+    }
+});
+/**
+ * GET /api/gateway/config
+ * Get gateway configuration (without sensitive data)
+ */
+router.get("/config", (_req, res) => {
+    try {
+        const config = readGatewayConfig();
+        if (!config) {
+            res.json({
+                success: true,
+                data: {
+                    configured: false,
+                    port: 53669,
+                    backends: [],
+                },
+            });
+            return;
+        }
+        // Return config without API keys
+        const backends = config.backends || {};
+        const sanitizedBackends = {};
+        for (const [name, backend] of Object.entries(backends)) {
+            sanitizedBackends[name] = {
+                baseUrl: backend.baseUrl || "",
+                hasApiKey: true, // We know it exists, just don't expose it
+            };
+        }
+        res.json({
+            success: true,
+            data: {
+                configured: true,
+                port: config.port || 53669,
+                backends: sanitizedBackends,
+                routing: config.routing || {},
+            },
+        });
+    }
+    catch (error) {
+        res.status(500).json({
+            success: false,
+            error: error instanceof Error ? error.message : "Failed to get gateway config",
+        });
+    }
+});
+/**
+ * GET /api/gateway/health
+ * Check if gateway is responding
+ */
+router.get("/health", async (_req, res) => {
+    try {
+        const config = readGatewayConfig();
+        const port = config?.port || 53669;
+        const { healthy, error } = await checkGatewayHealth(port);
+        res.json({
+            success: true,
+            data: {
+                healthy,
+                ...(error ? { error } : {}),
+            },
+        });
+    }
+    catch (error) {
+        res.status(500).json({
+            success: false,
+            error: error instanceof Error ? error.message : "Failed to check gateway health",
+        });
+    }
+});
+/**
+ * POST /api/gateway/activity
+ * Receive gateway activity events from MoltGuard
+ */
+router.post("/activity", async (req, res) => {
+    try {
+        const event = req.body;
+        if (!event || !event.id || !event.type) {
+            res.status(400).json({
+                success: false,
+                error: "Invalid activity event: missing id or type",
+            });
+            return;
+        }
+        await gatewayActivityDb.create({
+            eventId: event.id,
+            requestId: event.requestId,
+            timestamp: event.timestamp,
+            type: event.type,
+            direction: event.direction,
+            backend: event.backend,
+            endpoint: event.endpoint,
+            model: event.model || null,
+            redactionCount: event.redactionCount || 0,
+            categories: event.categories || {},
+            durationMs: event.durationMs || null,
+            tenantId: DEFAULT_TENANT_ID,
+        });
+        res.json({ success: true });
+    }
+    catch (error) {
+        console.error("[gateway] Failed to save activity:", error);
+        res.status(500).json({
+            success: false,
+            error: error instanceof Error ? error.message : "Failed to save activity",
+        });
+    }
+});
+/**
+ * GET /api/gateway/activity
+ * List recent gateway activity events
+ */
+router.get("/activity", async (req, res) => {
+    try {
+        const limit = Math.min(parseInt(req.query.limit || "100", 10), 1000);
+        const type = req.query.type;
+        const events = await gatewayActivityDb.findRecent({
+            tenantId: DEFAULT_TENANT_ID,
+            limit,
+            type: type === "sanitize" || type === "restore" ? type : undefined,
+        });
+        // Transform events for API response
+        const data = [];
+        for (const e of events) {
+            data.push({
+                id: e.eventId,
+                requestId: e.requestId,
+                timestamp: e.timestamp,
+                type: e.type,
+                direction: e.direction,
+                backend: e.backend,
+                endpoint: e.endpoint,
+                model: e.model,
+                redactionCount: e.redactionCount,
+                categories: e.categories,
+                durationMs: e.durationMs,
+            });
+        }
+        res.json({ success: true, data });
+    }
+    catch (error) {
+        console.error("[gateway] Failed to get activity:", error);
+        res.status(500).json({
+            success: false,
+            error: error instanceof Error ? error.message : "Failed to get activity",
+        });
+    }
+});
+/**
+ * GET /api/gateway/activity/stats
+ * Get aggregated gateway activity statistics
+ */
+router.get("/activity/stats", async (_req, res) => {
+    try {
+        const stats = await gatewayActivityDb.stats(DEFAULT_TENANT_ID);
+        res.json({
+            success: true,
+            data: stats,
+        });
+    }
+    catch (error) {
+        console.error("[gateway] Failed to get activity stats:", error);
+        res.status(500).json({
+            success: false,
+            error: error instanceof Error ? error.message : "Failed to get activity stats",
+        });
+    }
+});
+
+//# sourceMappingURL=gateway.js.map
+__webpack_async_result__();
+} catch(e) { __webpack_async_result__(e); } });
+
+/***/ })
+
+};
+
+//# sourceMappingURL=598.index.js.map

package/dashboard-dist/api/598.index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"598.index.js","mappings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sources":[".././dist/routes/gateway.js"],"sourcesContent":["/**\n * Gateway API routes\n *\n * Provides status and management endpoints for the AI Security Gateway.\n */\nimport { Router } from \"express\";\nimport { existsSync, readFileSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport { homedir } from \"node:os\";\nimport { db, gatewayActivityQueries } from \"@og/db\";\nconst gatewayActivityDb = gatewayActivityQueries(db);\nconst DEFAULT_TENANT_ID = \"default\";\nconst router = Router();\n// File paths - unified to moltguard data directory\nconst OPENCLAW_DIR = join(homedir(), \".openclaw\");\nconst MOLTGUARD_DATA_DIR = join(OPENCLAW_DIR, \"extensions\", \"moltguard\", \"data\");\nconst GATEWAY_CONFIG = join(MOLTGUARD_DATA_DIR, \"gateway.json\");\nconst GATEWAY_PID_FILE = join(MOLTGUARD_DATA_DIR, \"gateway.pid\");\nconst GATEWAY_BACKUP = join(MOLTGUARD_DATA_DIR, \"gateway-backup.json\");\n/**\n * Check if gateway process is running by checking PID file\n * Note: In-process gateway (embedded in moltguard) won't have a PID file\n */\nfunction checkPidFile() {\n    if (!existsSync(GATEWAY_PID_FILE)) {\n        return { hasPid: false };\n    }\n    try {\n        const pid = parseInt(readFileSync(GATEWAY_PID_FILE, \"utf-8\").trim(), 10);\n        // Signal 0 doesn't kill, just checks if process exists\n        process.kill(pid, 0);\n        return { hasPid: true, pid };\n    }\n    catch {\n        return { hasPid: false };\n    }\n}\n/**\n * Check if gateway is actually responding by calling health endpoint\n */\nasync function checkGatewayHealth(port) {\n    const controller = new AbortController();\n    const timeoutId = setTimeout(() => controller.abort(), 2000);\n    try {\n        const response = await fetch(`http://127.0.0.1:${port}/health`, {\n            signal: controller.signal,\n        });\n        clearTimeout(timeoutId);\n        if (response.ok) {\n            return { healthy: true };\n        }\n        else {\n            return { healthy: false, error: `Status ${response.status}` };\n        }\n    }\n    catch (err) {\n        clearTimeout(timeoutId);\n        return { healthy: false, error: err instanceof Error ? err.message : \"Connection failed\" };\n    }\n}\n/**\n * Read gateway configuration\n */\nfunction readGatewayConfig() {\n    if (!existsSync(GATEWAY_CONFIG)) {\n        return null;\n    }\n    try {\n        return JSON.parse(readFileSync(GATEWAY_CONFIG, \"utf-8\"));\n    }\n    catch {\n        return null;\n    }\n}\n/**\n * Read gateway backup (enabled state)\n */\nfunction readGatewayBackup() {\n    if (!existsSync(GATEWAY_BACKUP)) {\n        return { enabled: false, agents: [], providers: [] };\n    }\n    try {\n        const backup = JSON.parse(readFileSync(GATEWAY_BACKUP, \"utf-8\"));\n        const agents = backup.entries?.map((e) => e.agentName) || [];\n        const providerSet = new Set();\n        for (const entry of backup.entries || []) {\n            for (const providerName of Object.keys(entry.providers || {})) {\n                providerSet.add(providerName);\n            }\n        }\n        return {\n            enabled: true,\n            agents,\n            providers: Array.from(providerSet),\n            timestamp: backup.timestamp,\n        };\n    }\n    catch {\n        return { enabled: false, agents: [], providers: [] };\n    }\n}\n/**\n * GET /api/gateway/status\n * Get current gateway status\n */\nrouter.get(\"/status\", async (_req, res) => {\n    try {\n        const { hasPid, pid } = checkPidFile();\n        const backup = readGatewayBackup();\n        const config = readGatewayConfig();\n        const port = config?.port || 53669;\n        // Check if gateway is actually running by calling health endpoint\n        // This works for both standalone and in-process (embedded) gateway\n        const { healthy } = await checkGatewayHealth(port);\n        const status = {\n            enabled: backup.enabled,\n            running: healthy, // Use health check instead of PID file\n            pid: hasPid ? pid : undefined,\n            port,\n            url: `http://127.0.0.1:${port}`,\n            agents: backup.agents,\n            providers: backup.providers,\n            enabledAt: backup.timestamp || null,\n            backends: config ? Object.keys(config.backends || {}) : [],\n        };\n        res.json({ success: true, data: status });\n    }\n    catch (error) {\n        res.status(500).json({\n            success: false,\n            error: error instanceof Error ? error.message : \"Failed to get gateway status\",\n        });\n    }\n});\n/**\n * GET /api/gateway/config\n * Get gateway configuration (without sensitive data)\n */\nrouter.get(\"/config\", (_req, res) => {\n    try {\n        const config = readGatewayConfig();\n        if (!config) {\n            res.json({\n                success: true,\n                data: {\n                    configured: false,\n                    port: 53669,\n                    backends: [],\n                },\n            });\n            return;\n        }\n        // Return config without API keys\n        const backends = config.backends || {};\n        const sanitizedBackends = {};\n        for (const [name, backend] of Object.entries(backends)) {\n            sanitizedBackends[name] = {\n                baseUrl: backend.baseUrl || \"\",\n                hasApiKey: true, // We know it exists, just don't expose it\n            };\n        }\n        res.json({\n            success: true,\n            data: {\n                configured: true,\n                port: config.port || 53669,\n                backends: sanitizedBackends,\n                routing: config.routing || {},\n            },\n        });\n    }\n    catch (error) {\n        res.status(500).json({\n            success: false,\n            error: error instanceof Error ? error.message : \"Failed to get gateway config\",\n        });\n    }\n});\n/**\n * GET /api/gateway/health\n * Check if gateway is responding\n */\nrouter.get(\"/health\", async (_req, res) => {\n    try {\n        const config = readGatewayConfig();\n        const port = config?.port || 53669;\n        const { healthy, error } = await checkGatewayHealth(port);\n        res.json({\n            success: true,\n            data: {\n                healthy,\n                ...(error ? { error } : {}),\n            },\n        });\n    }\n    catch (error) {\n        res.status(500).json({\n            success: false,\n            error: error instanceof Error ? error.message : \"Failed to check gateway health\",\n        });\n    }\n});\n/**\n * POST /api/gateway/activity\n * Receive gateway activity events from MoltGuard\n */\nrouter.post(\"/activity\", async (req, res) => {\n    try {\n        const event = req.body;\n        if (!event || !event.id || !event.type) {\n            res.status(400).json({\n                success: false,\n                error: \"Invalid activity event: missing id or type\",\n            });\n            return;\n        }\n        await gatewayActivityDb.create({\n            eventId: event.id,\n            requestId: event.requestId,\n            timestamp: event.timestamp,\n            type: event.type,\n            direction: event.direction,\n            backend: event.backend,\n            endpoint: event.endpoint,\n            model: event.model || null,\n            redactionCount: event.redactionCount || 0,\n            categories: event.categories || {},\n            durationMs: event.durationMs || null,\n            tenantId: DEFAULT_TENANT_ID,\n        });\n        res.json({ success: true });\n    }\n    catch (error) {\n        console.error(\"[gateway] Failed to save activity:\", error);\n        res.status(500).json({\n            success: false,\n            error: error instanceof Error ? error.message : \"Failed to save activity\",\n        });\n    }\n});\n/**\n * GET /api/gateway/activity\n * List recent gateway activity events\n */\nrouter.get(\"/activity\", async (req, res) => {\n    try {\n        const limit = Math.min(parseInt(req.query.limit || \"100\", 10), 1000);\n        const type = req.query.type;\n        const events = await gatewayActivityDb.findRecent({\n            tenantId: DEFAULT_TENANT_ID,\n            limit,\n            type: type === \"sanitize\" || type === \"restore\" ? type : undefined,\n        });\n        // Transform events for API response\n        const data = [];\n        for (const e of events) {\n            data.push({\n                id: e.eventId,\n                requestId: e.requestId,\n                timestamp: e.timestamp,\n                type: e.type,\n                direction: e.direction,\n                backend: e.backend,\n                endpoint: e.endpoint,\n                model: e.model,\n                redactionCount: e.redactionCount,\n                categories: e.categories,\n                durationMs: e.durationMs,\n            });\n        }\n        res.json({ success: true, data });\n    }\n    catch (error) {\n        console.error(\"[gateway] Failed to get activity:\", error);\n        res.status(500).json({\n            success: false,\n            error: error instanceof Error ? error.message : \"Failed to get activity\",\n        });\n    }\n});\n/**\n * GET /api/gateway/activity/stats\n * Get aggregated gateway activity statistics\n */\nrouter.get(\"/activity/stats\", async (_req, res) => {\n    try {\n        const stats = await gatewayActivityDb.stats(DEFAULT_TENANT_ID);\n        res.json({\n            success: true,\n            data: stats,\n        });\n    }\n    catch (error) {\n        console.error(\"[gateway] Failed to get activity stats:\", error);\n        res.status(500).json({\n            success: false,\n            error: error instanceof Error ? error.message : \"Failed to get activity stats\",\n        });\n    }\n});\nexport { router as gatewayRouter };\n//# sourceMappingURL=gateway.js.map"],"names":[],"sourceRoot":""}