@gaodefa/daocore 2026.5.30 → 2026.5.32

package/dist/exec-approvals-ArHHjoE-.js

@@ -1,149 +0,0 @@
-import { a as normalizeLowercaseStringOrEmpty, c as normalizeOptionalString } from "./string-coerce-DyL154ka.js";
-import { n as normalizeAccountId } from "./account-id-B32J-iNN.js";
-import "./string-coerce-runtime-DcopKqDR.js";
-import "./routing-AC-P99jg.js";
-import { t as resolveApprovalApprovers } from "./approval-approvers-BaAy3FfF.js";
-import { t as matchesApprovalRequestFilters } from "./approval-request-filters-3kgok8rL.js";
-import { n as isChannelExecApprovalClientEnabledFromConfig, r as isChannelExecApprovalTargetRecipient, t as createChannelExecApprovalProfile } from "./approval-client-helpers-CpUykViR.js";
-import "./approval-client-runtime-ntj1lyik.js";
-import { s as resolveApprovalRequestChannelAccountId } from "./exec-approval-session-target-BBoF1KZ0.js";
-import "./approval-native-runtime-UafzK2xu.js";
-import { o as resolveTelegramAccount, r as listTelegramAccountIds } from "./accounts-CuvH2tuN.js";
-import { a as resolveTelegramTargetChatType, n as normalizeTelegramChatId } from "./targets-D0gFWyUZ.js";
-import { n as resolveTelegramInlineButtonsConfigScope } from "./inline-buttons-B6zgQW3J.js";
-//#region extensions/telegram/src/exec-approvals.ts
-function normalizeApproverId(value) {
-	return normalizeOptionalString(String(value)) ?? "";
-}
-function normalizeTelegramDirectApproverId(value) {
-	const chatId = normalizeTelegramChatId(normalizeApproverId(value));
-	if (!chatId || chatId.startsWith("-")) return;
-	return chatId;
-}
-function resolveTelegramOwnerApprovers(cfg) {
-	const ownerAllowFrom = cfg.commands?.ownerAllowFrom;
-	return Array.isArray(ownerAllowFrom) ? ownerAllowFrom : [];
-}
-function resolveTelegramExecApprovalConfig(params) {
-	const account = resolveTelegramAccount(params);
-	const config = account.config.execApprovals;
-	const enabled = account.enabled && account.tokenSource !== "none" ? config?.enabled ?? "auto" : false;
-	return {
-		...config,
-		enabled
-	};
-}
-function getTelegramExecApprovalApprovers(params) {
-	return resolveApprovalApprovers({
-		explicit: resolveTelegramExecApprovalConfig(params)?.approvers,
-		allowFrom: resolveTelegramOwnerApprovers(params.cfg),
-		normalizeApprover: normalizeTelegramDirectApproverId
-	});
-}
-function isTelegramExecApprovalTargetRecipient(params) {
-	return isChannelExecApprovalTargetRecipient({
-		...params,
-		channel: "telegram",
-		matchTarget: ({ target, normalizedSenderId }) => {
-			const to = target.to ? normalizeTelegramChatId(target.to) : void 0;
-			if (!to || to.startsWith("-")) return false;
-			return to === normalizedSenderId;
-		}
-	});
-}
-function countTelegramExecApprovalEligibleAccounts(params) {
-	return listTelegramAccountIds(params.cfg).filter((accountId) => {
-		const account = resolveTelegramAccount({
-			cfg: params.cfg,
-			accountId
-		});
-		if (!account.enabled || account.tokenSource === "none") return false;
-		const config = resolveTelegramExecApprovalConfig({
-			cfg: params.cfg,
-			accountId
-		});
-		return isChannelExecApprovalClientEnabledFromConfig({
-			enabled: config?.enabled,
-			approverCount: getTelegramExecApprovalApprovers({
-				cfg: params.cfg,
-				accountId
-			}).length
-		}) && matchesApprovalRequestFilters({
-			request: params.request.request,
-			agentFilter: config?.agentFilter,
-			sessionFilter: config?.sessionFilter,
-			fallbackAgentIdFromSessionKey: true
-		});
-	}).length;
-}
-function isExecApprovalRequest(request) {
-	return "command" in request.request;
-}
-function isTargetForwardingMode(mode) {
-	return mode === "targets" || mode === "both";
-}
-function matchesExplicitTelegramForwardTargetAccount(params) {
-	const forwardingConfig = isExecApprovalRequest(params.request) ? params.cfg.approvals?.exec : params.cfg.approvals?.plugin;
-	if (!forwardingConfig?.enabled || !isTargetForwardingMode(forwardingConfig.mode)) return;
-	const telegramTargets = (forwardingConfig.targets ?? []).filter((target) => normalizeLowercaseStringOrEmpty(target.channel) === "telegram");
-	if (telegramTargets.some((target) => !normalizeOptionalString(target.accountId))) return;
-	const scopedTelegramAccountIds = telegramTargets.map((target) => normalizeOptionalString(target.accountId)).filter((accountId) => Boolean(accountId));
-	if (scopedTelegramAccountIds.length === 0) return;
-	const normalizedAccountId = params.accountId ? normalizeAccountId(params.accountId) : "";
-	return Boolean(normalizedAccountId) && scopedTelegramAccountIds.some((accountId) => normalizeAccountId(accountId) === normalizedAccountId);
-}
-function matchesTelegramRequestAccount(params) {
-	const explicitTargetMatch = matchesExplicitTelegramForwardTargetAccount(params);
-	if (explicitTargetMatch !== void 0) return explicitTargetMatch;
-	const turnSourceChannel = normalizeLowercaseStringOrEmpty(params.request.request.turnSourceChannel);
-	const boundAccountId = resolveApprovalRequestChannelAccountId({
-		cfg: params.cfg,
-		request: params.request,
-		channel: "telegram"
-	});
-	if (turnSourceChannel && turnSourceChannel !== "telegram" && !boundAccountId) return countTelegramExecApprovalEligibleAccounts({
-		cfg: params.cfg,
-		request: params.request
-	}) <= 1;
-	return !boundAccountId || !params.accountId || normalizeAccountId(boundAccountId) === normalizeAccountId(params.accountId);
-}
-const telegramExecApprovalProfile = createChannelExecApprovalProfile({
-	resolveConfig: resolveTelegramExecApprovalConfig,
-	resolveApprovers: getTelegramExecApprovalApprovers,
-	isTargetRecipient: isTelegramExecApprovalTargetRecipient,
-	matchesRequestAccount: matchesTelegramRequestAccount,
-	fallbackAgentIdFromSessionKey: true,
-	requireClientEnabledForLocalPromptSuppression: false
-});
-const isTelegramExecApprovalClientEnabled = telegramExecApprovalProfile.isClientEnabled;
-const isTelegramExecApprovalApprover = telegramExecApprovalProfile.isApprover;
-const isTelegramExecApprovalAuthorizedSender = telegramExecApprovalProfile.isAuthorizedSender;
-const resolveTelegramExecApprovalTarget = telegramExecApprovalProfile.resolveTarget;
-const shouldHandleTelegramExecApprovalRequest = telegramExecApprovalProfile.shouldHandleRequest;
-function shouldInjectTelegramExecApprovalButtons(params) {
-	if (!isTelegramExecApprovalClientEnabled(params)) return false;
-	const target = resolveTelegramExecApprovalTarget(params);
-	const chatType = resolveTelegramTargetChatType(params.to);
-	if (chatType === "direct") return target === "dm" || target === "both";
-	if (chatType === "group") return target === "channel" || target === "both";
-	return target === "both";
-}
-function resolveExecApprovalButtonsExplicitlyDisabled(params) {
-	const capabilities = resolveTelegramAccount(params).config.capabilities;
-	return resolveTelegramInlineButtonsConfigScope(capabilities) === "off";
-}
-function shouldEnableTelegramExecApprovalButtons(params) {
-	if (!shouldInjectTelegramExecApprovalButtons(params)) return false;
-	return !resolveExecApprovalButtonsExplicitlyDisabled(params);
-}
-function shouldSuppressLocalTelegramExecApprovalPrompt(params) {
-	return telegramExecApprovalProfile.shouldSuppressLocalPrompt(params);
-}
-function isTelegramExecApprovalHandlerConfigured(params) {
-	return isChannelExecApprovalClientEnabledFromConfig({
-		enabled: resolveTelegramExecApprovalConfig(params)?.enabled,
-		approverCount: getTelegramExecApprovalApprovers(params).length
-	});
-}
-//#endregion
-export { isTelegramExecApprovalHandlerConfigured as a, resolveTelegramExecApprovalTarget as c, shouldInjectTelegramExecApprovalButtons as d, shouldSuppressLocalTelegramExecApprovalPrompt as f, isTelegramExecApprovalClientEnabled as i, shouldEnableTelegramExecApprovalButtons as l, isTelegramExecApprovalApprover as n, isTelegramExecApprovalTargetRecipient as o, isTelegramExecApprovalAuthorizedSender as r, resolveTelegramExecApprovalConfig as s, getTelegramExecApprovalApprovers as t, shouldHandleTelegramExecApprovalRequest as u };

package/dist/file-fetch-tool-DQpAtjX4.js

@@ -1,124 +0,0 @@
-import { t as callGatewayTool } from "./gateway-Dyc7qEu3.js";
-import { u as saveMediaBuffer } from "./store-53qCOCD8.js";
-import { i as resolveNodeIdFromList, t as listNodes } from "./nodes-utils-CIusEv3-.js";
-import "./media-store-OUXlIgle.js";
-import "./agent-harness-runtime-Dq1fCBOM.js";
-import { c as FILE_FETCH_TOOL_DESCRIPTOR, l as FILE_TRANSFER_SUBDIR, o as FILE_FETCH_DEFAULT_MAX_BYTES, s as FILE_FETCH_HARD_MAX_BYTES } from "./descriptors-DuJgViRb.js";
-import { r as TEXT_INLINE_MIME_SET, t as IMAGE_MIME_INLINE_SET } from "./mime-CfMm5H5N.js";
-import { t as appendFileTransferAudit } from "./audit-1F6TbN6E.js";
-import { a as readTrimmedString, i as readGatewayCallOptions, o as throwFromNodePayload, t as humanSize } from "./params-Dxls3_Dh.js";
-import crypto from "node:crypto";
-//#region extensions/file-transfer/src/tools/file-fetch-tool.ts
-function createFileFetchTool() {
-	return {
-		...FILE_FETCH_TOOL_DESCRIPTOR,
-		execute: async (_toolCallId, args) => {
-			const params = args;
-			const node = readTrimmedString(params, "node");
-			const filePath = readTrimmedString(params, "path");
-			if (!node) throw new Error("node required");
-			if (!filePath) throw new Error("path required");
-			const requestedMax = typeof params.maxBytes === "number" && Number.isFinite(params.maxBytes) ? Math.floor(params.maxBytes) : FILE_FETCH_DEFAULT_MAX_BYTES;
-			const maxBytes = Math.max(1, Math.min(requestedMax, FILE_FETCH_HARD_MAX_BYTES));
-			const gatewayOpts = readGatewayCallOptions(params);
-			const nodes = await listNodes(gatewayOpts);
-			const nodeId = resolveNodeIdFromList(nodes, node, false);
-			const nodeDisplayName = nodes.find((n) => n.nodeId === nodeId)?.displayName ?? node;
-			const startedAt = Date.now();
-			const raw = await callGatewayTool("node.invoke", gatewayOpts, {
-				nodeId,
-				command: "file.fetch",
-				params: {
-					path: filePath,
-					maxBytes
-				},
-				idempotencyKey: crypto.randomUUID()
-			});
-			const payload = raw?.payload && typeof raw.payload === "object" && !Array.isArray(raw.payload) ? raw.payload : null;
-			if (!payload) {
-				await appendFileTransferAudit({
-					op: "file.fetch",
-					nodeId,
-					nodeDisplayName,
-					requestedPath: filePath,
-					decision: "error",
-					errorMessage: "invalid payload",
-					durationMs: Date.now() - startedAt
-				});
-				throw new Error("invalid file.fetch payload");
-			}
-			if (payload.ok === false) {
-				await appendFileTransferAudit({
-					op: "file.fetch",
-					nodeId,
-					nodeDisplayName,
-					requestedPath: filePath,
-					canonicalPath: typeof payload.canonicalPath === "string" ? payload.canonicalPath : void 0,
-					decision: "error",
-					errorCode: typeof payload.code === "string" ? payload.code : void 0,
-					errorMessage: typeof payload.message === "string" ? payload.message : void 0,
-					durationMs: Date.now() - startedAt
-				});
-				throwFromNodePayload("file.fetch", payload);
-			}
-			const canonicalPath = typeof payload.path === "string" ? payload.path : "";
-			const size = typeof payload.size === "number" ? payload.size : -1;
-			const mimeType = typeof payload.mimeType === "string" ? payload.mimeType : "";
-			const hasBase64 = typeof payload.base64 === "string";
-			const base64 = hasBase64 ? payload.base64 : "";
-			const sha256 = typeof payload.sha256 === "string" ? payload.sha256 : "";
-			if (!canonicalPath || size < 0 || !mimeType || !hasBase64 || !sha256) throw new Error("invalid file.fetch payload (missing fields)");
-			const buffer = Buffer.from(base64, "base64");
-			if (buffer.byteLength !== size) throw new Error(`file.fetch size mismatch: payload says ${size} bytes, decoded ${buffer.byteLength}`);
-			if (crypto.createHash("sha256").update(buffer).digest("hex") !== sha256) throw new Error("file.fetch sha256 mismatch (integrity failure)");
-			const saved = await saveMediaBuffer(buffer, mimeType, FILE_TRANSFER_SUBDIR, FILE_FETCH_HARD_MAX_BYTES);
-			const localPath = saved.path;
-			const isInlineImage = IMAGE_MIME_INLINE_SET.has(mimeType);
-			const isInlineText = TEXT_INLINE_MIME_SET.has(mimeType) && size <= 8192;
-			const content = [];
-			if (isInlineImage) content.push({
-				type: "image",
-				data: base64,
-				mimeType
-			});
-			else if (isInlineText) {
-				const text = buffer.toString("utf-8");
-				content.push({
-					type: "text",
-					text: `Fetched ${canonicalPath} (${humanSize(size)}, ${mimeType}, sha256:${sha256.slice(0, 12)}) saved at ${localPath}\n\n--- contents ---\n${text}`
-				});
-			} else {
-				const shortHash = sha256.slice(0, 12);
-				content.push({
-					type: "text",
-					text: `Fetched ${canonicalPath} (${humanSize(size)}, ${mimeType}, sha256:${shortHash}) saved at ${localPath}`
-				});
-			}
-			await appendFileTransferAudit({
-				op: "file.fetch",
-				nodeId,
-				nodeDisplayName,
-				requestedPath: filePath,
-				canonicalPath,
-				decision: "allowed",
-				sizeBytes: size,
-				sha256,
-				durationMs: Date.now() - startedAt
-			});
-			return {
-				content,
-				details: {
-					path: canonicalPath,
-					size,
-					mimeType,
-					sha256,
-					localPath,
-					mediaId: saved.id,
-					media: { mediaUrls: [localPath] }
-				}
-			};
-		}
-	};
-}
-//#endregion
-export { createFileFetchTool };

package/dist/file-write-tool-CkB0oYwe.js

@@ -1,127 +0,0 @@
-import { t as callGatewayTool } from "./gateway-Dyc7qEu3.js";
-import { c as readMediaBuffer } from "./store-53qCOCD8.js";
-import { i as resolveNodeIdFromList, t as listNodes } from "./nodes-utils-CIusEv3-.js";
-import "./media-store-OUXlIgle.js";
-import "./agent-harness-runtime-Dq1fCBOM.js";
-import { d as FILE_WRITE_TOOL_DESCRIPTOR, l as FILE_TRANSFER_SUBDIR, u as FILE_WRITE_HARD_MAX_BYTES } from "./descriptors-DuJgViRb.js";
-import { t as appendFileTransferAudit } from "./audit-1F6TbN6E.js";
-import { a as readTrimmedString, i as readGatewayCallOptions, n as readBoolean, o as throwFromNodePayload, t as humanSize } from "./params-Dxls3_Dh.js";
-import crypto from "node:crypto";
-//#region extensions/file-transfer/src/tools/file-write-tool.ts
-function normalizeBase64ForCompare(value) {
-	return value.replace(/=+$/u, "").replace(/-/gu, "+").replace(/_/gu, "/");
-}
-function decodeStrictBase64(value) {
-	const buffer = Buffer.from(value, "base64");
-	if (normalizeBase64ForCompare(buffer.toString("base64")) !== normalizeBase64ForCompare(value)) throw new Error("contentBase64 is not valid base64");
-	return buffer;
-}
-async function readSourceBytes(input) {
-	const sourceMediaId = input.sourceMediaId?.trim();
-	if (sourceMediaId) {
-		const { buffer } = await readMediaBuffer(sourceMediaId, FILE_TRANSFER_SUBDIR, FILE_WRITE_HARD_MAX_BYTES);
-		return {
-			buffer,
-			contentBase64: buffer.toString("base64"),
-			source: "media"
-		};
-	}
-	if (input.contentBase64 === void 0) throw new Error("contentBase64 or sourceMediaId required");
-	return {
-		buffer: decodeStrictBase64(input.contentBase64),
-		contentBase64: input.contentBase64,
-		source: "inline"
-	};
-}
-function createFileWriteTool() {
-	return {
-		...FILE_WRITE_TOOL_DESCRIPTOR,
-		async execute(_toolCallId, params) {
-			const raw = params && typeof params === "object" && !Array.isArray(params) ? params : {};
-			const nodeQuery = readTrimmedString(raw, "node");
-			const filePath = readTrimmedString(raw, "path");
-			const contentBase64 = typeof raw.contentBase64 === "string" ? raw.contentBase64 : void 0;
-			const sourceMediaId = typeof raw.sourceMediaId === "string" ? raw.sourceMediaId : void 0;
-			const overwrite = readBoolean(raw, "overwrite", false);
-			const createParents = readBoolean(raw, "createParents", false);
-			if (!nodeQuery) throw new Error("node required");
-			if (!filePath) throw new Error("path required");
-			const sourceBytes = await readSourceBytes({
-				contentBase64,
-				sourceMediaId
-			});
-			const buffer = sourceBytes.buffer;
-			const expectedSha256 = crypto.createHash("sha256").update(buffer).digest("hex");
-			const gatewayOpts = readGatewayCallOptions(raw);
-			const nodes = await listNodes(gatewayOpts);
-			const nodeId = resolveNodeIdFromList(nodes, nodeQuery, false);
-			const nodeDisplayName = nodes.find((n) => n.nodeId === nodeId)?.displayName ?? nodeQuery;
-			const startedAt = Date.now();
-			const payload = (await callGatewayTool("node.invoke", gatewayOpts, {
-				nodeId,
-				command: "file.write",
-				params: {
-					path: filePath,
-					contentBase64: sourceBytes.contentBase64,
-					overwrite,
-					createParents,
-					expectedSha256
-				},
-				idempotencyKey: crypto.randomUUID()
-			}))?.payload;
-			if (!payload || typeof payload !== "object" || Array.isArray(payload)) {
-				await appendFileTransferAudit({
-					op: "file.write",
-					nodeId,
-					nodeDisplayName,
-					requestedPath: filePath,
-					decision: "error",
-					errorMessage: "unexpected response from node",
-					sizeBytes: buffer.byteLength,
-					durationMs: Date.now() - startedAt
-				});
-				throw new Error("unexpected file.write response from node");
-			}
-			const typed = payload;
-			if (!typed.ok) {
-				await appendFileTransferAudit({
-					op: "file.write",
-					nodeId,
-					nodeDisplayName,
-					requestedPath: filePath,
-					canonicalPath: typed.canonicalPath,
-					decision: "error",
-					errorCode: typed.code,
-					errorMessage: typed.message,
-					sizeBytes: buffer.byteLength,
-					durationMs: Date.now() - startedAt
-				});
-				throwFromNodePayload("file.write", typed);
-			}
-			await appendFileTransferAudit({
-				op: "file.write",
-				nodeId,
-				nodeDisplayName,
-				requestedPath: filePath,
-				canonicalPath: typed.path,
-				decision: "allowed",
-				sizeBytes: typed.size,
-				sha256: typed.sha256,
-				durationMs: Date.now() - startedAt
-			});
-			const overwriteNote = typed.overwritten ? " (overwrote existing file)" : "";
-			return {
-				content: [{
-					type: "text",
-					text: `Wrote ${typed.path} (${humanSize(typed.size)}, sha256:${typed.sha256.slice(0, 12)})${overwriteNote}`
-				}],
-				details: {
-					...typed,
-					source: sourceBytes.source
-				}
-			};
-		}
-	};
-}
-//#endregion
-export { createFileWriteTool };

package/dist/format-BUFz60TQ.js

@@ -1,250 +0,0 @@
-import { c as normalizeOptionalString } from "./string-coerce-DyL154ka.js";
-import { u as resolveGatewayPort } from "./paths-ZwPDM6zn.js";
-import { n as VERSION } from "./version-QmPt05QD.js";
-import "./config-CLrwLpl0.js";
-import { t as resolveControlUiLinks } from "./control-ui-links-EK8NjUoh.js";
-import { r as formatDurationPrecise } from "./format-duration-BrZ-AaEJ.js";
-import { s as normalizeUpdateChannel, u as resolveUpdateChannelDisplay } from "./update-channels-f-ieRme5.js";
-import { a as formatGitInstallLabel } from "./update-check-Cv1EQVBi.js";
-import { i as resolveUpdateAvailability, n as formatUpdateOneLiner } from "./status.update-BQyHDWCY.js";
-//#region src/commands/status-all/format.ts
-function resolveStatusUpdateChannelInfo(params) {
-	return resolveUpdateChannelDisplay({
-		configChannel: normalizeUpdateChannel(params.updateConfigChannel),
-		currentVersion: VERSION,
-		installKind: params.update.installKind ?? "unknown",
-		gitTag: params.update.git?.tag ?? null,
-		gitBranch: params.update.git?.branch ?? null
-	});
-}
-function buildStatusUpdateSurface(params) {
-	const channelInfo = resolveStatusUpdateChannelInfo({
-		updateConfigChannel: params.updateConfigChannel,
-		update: params.update
-	});
-	return {
-		channelInfo,
-		channelLabel: channelInfo.label,
-		gitLabel: formatGitInstallLabel(params.update),
-		updateLine: formatUpdateOneLiner(params.update).replace(/^Update:\s*/i, ""),
-		updateAvailable: resolveUpdateAvailability(params.update).available
-	};
-}
-function formatStatusDashboardValue(value) {
-	const trimmed = normalizeOptionalString(value);
-	return trimmed && trimmed.length > 0 ? trimmed : "disabled";
-}
-function formatStatusTailscaleValue(params) {
-	const decorateOff = params.decorateOff ?? ((value) => value);
-	const decorateWarn = params.decorateWarn ?? ((value) => value);
-	if (params.tailscaleMode === "off") {
-		const suffix = [params.includeBackendStateWhenOff && params.backendState ? `daemon ${params.backendState}` : null, params.includeDnsNameWhenOff && params.dnsName ? params.dnsName : null].filter(Boolean).join(" · ");
-		return decorateOff(suffix ? `off · ${suffix}` : "off");
-	}
-	if (params.dnsName && params.httpsUrl) return [
-		params.tailscaleMode,
-		params.includeBackendStateWhenOn ? params.backendState ?? "unknown" : null,
-		params.dnsName,
-		params.httpsUrl
-	].filter(Boolean).join(" · ");
-	return decorateWarn([
-		params.tailscaleMode,
-		params.includeBackendStateWhenOn ? params.backendState ?? "unknown" : null,
-		"magicdns unknown"
-	].filter(Boolean).join(" · "));
-}
-function formatStatusServiceValue(params) {
-	if (!params.installed) return `${params.label} not installed`;
-	const installedPrefix = params.managedByDaoCore ? "installed · " : "";
-	const runtimeSuffix = params.runtimeShort ? ` · ${params.runtimeShort}` : [params.runtimeStatus ? ` · ${params.runtimeStatus}` : "", params.runtimePid ? ` (pid ${params.runtimePid})` : ""].join("");
-	return `${params.label} ${installedPrefix}${params.loadedText}${runtimeSuffix}`;
-}
-function resolveStatusDashboardUrl(params) {
-	if (!(params.cfg.gateway?.controlUi?.enabled ?? true)) return null;
-	return resolveControlUiLinks({
-		port: resolveGatewayPort(params.cfg),
-		bind: params.cfg.gateway?.bind,
-		customBindHost: params.cfg.gateway?.customBindHost,
-		basePath: params.cfg.gateway?.controlUi?.basePath,
-		tlsEnabled: params.cfg.gateway?.tls?.enabled === true
-	}).httpUrl;
-}
-function buildStatusOverviewRows(params) {
-	const rows = [...params.prefixRows ?? []];
-	rows.push({
-		Item: "Dashboard",
-		Value: params.dashboardValue
-	}, {
-		Item: "Tailscale exposure",
-		Value: params.tailscaleValue
-	}, {
-		Item: "Channel",
-		Value: params.channelLabel
-	});
-	if (params.gitLabel) rows.push({
-		Item: "Git",
-		Value: params.gitLabel
-	});
-	rows.push({
-		Item: "Update",
-		Value: params.updateValue
-	}, {
-		Item: "Gateway",
-		Value: params.gatewayValue
-	});
-	if (params.gatewayAuthWarning) rows.push({
-		Item: "Gateway auth warning",
-		Value: params.gatewayAuthWarning
-	});
-	rows.push(...params.middleRows ?? []);
-	if (params.gatewaySelfValue != null) rows.push({
-		Item: "Gateway self",
-		Value: params.gatewaySelfValue
-	});
-	rows.push({
-		Item: "Gateway service",
-		Value: params.gatewayServiceValue
-	}, {
-		Item: "Node service",
-		Value: params.nodeServiceValue
-	}, {
-		Item: "Agents",
-		Value: params.agentsValue
-	});
-	rows.push(...params.suffixRows ?? []);
-	return rows;
-}
-function buildStatusOverviewSurfaceRows(params) {
-	const updateSurface = buildStatusUpdateSurface({
-		updateConfigChannel: params.cfg.update?.channel,
-		update: params.update
-	});
-	const { dashboardUrl, gatewayValue, gatewaySelfValue, gatewayServiceValue, nodeServiceValue } = buildStatusGatewaySurfaceValues({
-		cfg: params.cfg,
-		gatewayMode: params.gatewayMode,
-		remoteUrlMissing: params.remoteUrlMissing,
-		gatewayConnection: params.gatewayConnection,
-		gatewayReachable: params.gatewayReachable,
-		gatewayProbe: params.gatewayProbe,
-		gatewayProbeAuth: params.gatewayProbeAuth,
-		gatewaySelf: params.gatewaySelf,
-		gatewayService: params.gatewayService,
-		nodeService: params.nodeService,
-		nodeOnlyGateway: params.nodeOnlyGateway,
-		decorateOk: params.decorateOk,
-		decorateWarn: params.decorateWarn
-	});
-	return buildStatusOverviewRows({
-		prefixRows: params.prefixRows,
-		dashboardValue: formatStatusDashboardValue(dashboardUrl),
-		tailscaleValue: formatStatusTailscaleValue({
-			tailscaleMode: params.tailscaleMode,
-			dnsName: params.tailscaleDns,
-			httpsUrl: params.tailscaleHttpsUrl,
-			backendState: params.tailscaleBackendState,
-			includeBackendStateWhenOff: params.includeBackendStateWhenOff,
-			includeBackendStateWhenOn: params.includeBackendStateWhenOn,
-			includeDnsNameWhenOff: params.includeDnsNameWhenOff,
-			decorateOff: params.decorateTailscaleOff,
-			decorateWarn: params.decorateTailscaleWarn
-		}),
-		channelLabel: updateSurface.channelLabel,
-		gitLabel: updateSurface.gitLabel,
-		updateValue: params.updateValue ?? updateSurface.updateLine,
-		gatewayValue,
-		gatewayAuthWarning: params.gatewayAuthWarningValue !== void 0 ? params.gatewayAuthWarningValue : params.gatewayProbeAuthWarning,
-		middleRows: params.middleRows,
-		gatewaySelfValue: params.gatewaySelfFallbackValue ?? gatewaySelfValue,
-		gatewayServiceValue,
-		nodeServiceValue,
-		agentsValue: params.agentsValue,
-		suffixRows: params.suffixRows
-	});
-}
-function formatGatewayAuthUsed(auth) {
-	const hasToken = Boolean(auth?.token?.trim());
-	const hasPassword = Boolean(auth?.password?.trim());
-	if (hasToken && hasPassword) return "token+password";
-	if (hasToken) return "token";
-	if (hasPassword) return "password";
-	return "none";
-}
-function formatGatewaySelfSummary(gatewaySelf) {
-	return gatewaySelf?.host || gatewaySelf?.ip || gatewaySelf?.version || gatewaySelf?.platform ? [
-		gatewaySelf.host ? gatewaySelf.host : null,
-		gatewaySelf.ip ? `(${gatewaySelf.ip})` : null,
-		gatewaySelf.version ? `app ${gatewaySelf.version}` : null,
-		gatewaySelf.platform ? gatewaySelf.platform : null
-	].filter(Boolean).join(" ") : null;
-}
-function buildGatewayStatusSummaryParts(params) {
-	const targetText = params.remoteUrlMissing ? `fallback ${params.gatewayConnection.url}` : params.gatewayConnection.url;
-	return {
-		targetText,
-		targetTextWithSource: params.gatewayConnection.urlSource ? `${targetText} (${params.gatewayConnection.urlSource})` : targetText,
-		reachText: params.remoteUrlMissing ? "misconfigured (remote.url missing)" : params.gatewayReachable ? `reachable ${formatDurationPrecise(params.gatewayProbe?.connectLatencyMs ?? 0)}` : params.gatewayProbe?.error ? `unreachable (${params.gatewayProbe.error})` : "unreachable",
-		authText: params.gatewayReachable ? `auth ${formatGatewayAuthUsed(params.gatewayProbeAuth)}` : "",
-		modeLabel: `${params.gatewayMode}${params.remoteUrlMissing ? " (remote.url missing)" : ""}`
-	};
-}
-function buildStatusGatewaySurfaceValues(params) {
-	const decorateOk = params.decorateOk ?? ((value) => value);
-	const decorateWarn = params.decorateWarn ?? ((value) => value);
-	const gatewaySummary = buildGatewayStatusSummaryParts({
-		gatewayMode: params.gatewayMode,
-		remoteUrlMissing: params.remoteUrlMissing,
-		gatewayConnection: params.gatewayConnection,
-		gatewayReachable: params.gatewayReachable,
-		gatewayProbe: params.gatewayProbe,
-		gatewayProbeAuth: params.gatewayProbeAuth
-	});
-	const gatewaySelfValue = formatGatewaySelfSummary(params.gatewaySelf);
-	const gatewayValue = params.nodeOnlyGateway?.gatewayValue ?? `${gatewaySummary.modeLabel} · ${gatewaySummary.targetTextWithSource} · ${params.remoteUrlMissing ? decorateWarn(gatewaySummary.reachText) : params.gatewayReachable ? decorateOk(gatewaySummary.reachText) : decorateWarn(gatewaySummary.reachText)}${params.gatewayReachable && !params.remoteUrlMissing && gatewaySummary.authText && gatewaySummary.authText.length > 0 ? ` · ${gatewaySummary.authText}` : ""}${gatewaySelfValue ? ` · ${gatewaySelfValue}` : ""}`;
-	return {
-		dashboardUrl: resolveStatusDashboardUrl({ cfg: params.cfg }),
-		gatewayValue,
-		gatewaySelfValue,
-		gatewayServiceValue: formatStatusServiceValue({
-			label: params.gatewayService.label,
-			installed: params.gatewayService.installed !== false,
-			managedByDaoCore: params.gatewayService.managedByDaoCore,
-			loadedText: params.gatewayService.loadedText,
-			runtimeShort: params.gatewayService.runtimeShort,
-			runtimeStatus: params.gatewayService.runtime?.status,
-			runtimePid: params.gatewayService.runtime?.pid
-		}),
-		nodeServiceValue: formatStatusServiceValue({
-			label: params.nodeService.label,
-			installed: params.nodeService.installed !== false,
-			managedByDaoCore: params.nodeService.managedByDaoCore,
-			loadedText: params.nodeService.loadedText,
-			runtimeShort: params.nodeService.runtimeShort,
-			runtimeStatus: params.nodeService.runtime?.status,
-			runtimePid: params.nodeService.runtime?.pid
-		})
-	};
-}
-function buildGatewayStatusJsonPayload(params) {
-	return {
-		mode: params.gatewayMode,
-		url: params.gatewayConnection.url,
-		urlSource: params.gatewayConnection.urlSource,
-		misconfigured: params.remoteUrlMissing,
-		reachable: params.gatewayReachable,
-		connectLatencyMs: params.gatewayProbe?.connectLatencyMs ?? null,
-		self: params.gatewaySelf ?? null,
-		error: params.gatewayProbe?.error ?? null,
-		authWarning: params.gatewayProbeAuthWarning ?? null,
-		...params.gatewayProbe?.health && typeof params.gatewayProbe.health === "object" && "modelPricing" in params.gatewayProbe.health ? { modelPricing: params.gatewayProbe.health.modelPricing } : {}
-	};
-}
-function redactSecrets(text) {
-	if (!text) return text;
-	let out = text;
-	out = out.replace(/(\b(?:access[_-]?token|refresh[_-]?token|token|password|secret|api[_-]?key)\b\s*[:=]\s*)("?)([^"\\s]+)("?)/gi, "$1$2***$4");
-	out = out.replace(/\bBearer\s+[A-Za-z0-9._-]+\b/g, "Bearer ***");
-	out = out.replace(/\bsk-[A-Za-z0-9]{10,}\b/g, "sk-***");
-	return out;
-}
-//#endregion
-export { buildStatusOverviewSurfaceRows as a, formatGatewaySelfSummary as c, formatStatusTailscaleValue as d, redactSecrets as f, buildStatusOverviewRows as i, formatStatusDashboardValue as l, resolveStatusUpdateChannelInfo as m, buildGatewayStatusSummaryParts as n, buildStatusUpdateSurface as o, resolveStatusDashboardUrl as p, buildStatusGatewaySurfaceValues as r, formatGatewayAuthUsed as s, buildGatewayStatusJsonPayload as t, formatStatusServiceValue as u };