@georgedong32/ccs 7.66.0

package/dist/web-server/routes/proxy-routes.js

@@ -0,0 +1,163 @@
+"use strict";
+/**
+ * CLIProxy Server Routes - API endpoints for proxy configuration
+ *
+ * Provides REST endpoints for managing CLIProxyAPI connection settings:
+ * - GET /api/cliproxy-server - Get proxy configuration
+ * - PUT /api/cliproxy-server - Update proxy configuration
+ * - POST /api/cliproxy-server/test - Test remote connection
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+const express_1 = require("express");
+const unified_config_loader_1 = require("../../config/unified-config-loader");
+const remote_proxy_client_1 = require("../../cliproxy/remote-proxy-client");
+const proxy_lifecycle_service_1 = require("../../cliproxy/services/proxy-lifecycle-service");
+const platform_detector_1 = require("../../cliproxy/platform-detector");
+const unified_config_types_1 = require("../../config/unified-config-types");
+const provider_capabilities_1 = require("../../cliproxy/provider-capabilities");
+const auth_middleware_1 = require("../middleware/auth-middleware");
+const router = (0, express_1.Router)();
+router.use((req, res, next) => {
+    if ((0, auth_middleware_1.requireLocalAccessWhenAuthDisabled)(req, res, 'CLIProxy server endpoints require localhost access when dashboard auth is disabled.')) {
+        next();
+    }
+});
+/**
+ * GET /api/cliproxy-server - Get proxy configuration
+ */
+router.get('/', async (_req, res) => {
+    try {
+        const config = await (0, unified_config_loader_1.loadOrCreateUnifiedConfig)();
+        res.json(config.cliproxy_server || unified_config_types_1.DEFAULT_CLIPROXY_SERVER_CONFIG);
+    }
+    catch (error) {
+        console.error('[cliproxy-server-routes] Failed to load proxy config:', error);
+        res.status(500).json({ error: 'Failed to load proxy config' });
+    }
+});
+/**
+ * PUT /api/cliproxy-server - Update proxy configuration
+ */
+router.put('/', (req, res) => {
+    try {
+        const updates = req.body;
+        // Atomic read-modify-write — avoids race between load and save
+        const updated = (0, unified_config_loader_1.mutateUnifiedConfig)((config) => {
+            config.cliproxy_server = {
+                remote: {
+                    ...unified_config_types_1.DEFAULT_CLIPROXY_SERVER_CONFIG.remote,
+                    ...config.cliproxy_server?.remote,
+                    ...updates.remote,
+                },
+                fallback: {
+                    ...unified_config_types_1.DEFAULT_CLIPROXY_SERVER_CONFIG.fallback,
+                    ...config.cliproxy_server?.fallback,
+                    ...updates.fallback,
+                },
+                local: {
+                    ...unified_config_types_1.DEFAULT_CLIPROXY_SERVER_CONFIG.local,
+                    ...config.cliproxy_server?.local,
+                    ...updates.local,
+                },
+            };
+        });
+        res.json(updated.cliproxy_server);
+    }
+    catch (error) {
+        console.error('[cliproxy-server-routes] Failed to save proxy config:', error);
+        res.status(500).json({ error: 'Failed to save proxy config' });
+    }
+});
+/**
+ * GET /api/cliproxy-server/backend - Get CLIProxy backend setting
+ * @returns {{ backend: 'original' | 'plus' }} Current backend configuration
+ */
+router.get('/backend', async (_req, res) => {
+    try {
+        const config = await (0, unified_config_loader_1.loadOrCreateUnifiedConfig)();
+        res.json({ backend: config.cliproxy?.backend ?? platform_detector_1.DEFAULT_BACKEND });
+    }
+    catch (error) {
+        console.error('[cliproxy-server-routes] Failed to load backend config:', error);
+        res.status(500).json({ error: 'Failed to load backend config' });
+    }
+});
+/**
+ * PUT /api/cliproxy-server/backend - Update CLIProxy backend setting
+ * @param {Object} req.body - Request body
+ * @param {'original' | 'plus'} req.body.backend - Backend to switch to
+ * @param {boolean} [req.body.force=false] - Force change even if proxy is running
+ * @returns {{ backend: 'original' | 'plus' }} Updated backend configuration
+ * @throws {400} Invalid backend value
+ * @throws {409} Proxy is running (unless force=true)
+ */
+router.put('/backend', (req, res) => {
+    try {
+        const { backend, force } = req.body;
+        if (backend !== 'original' && backend !== 'plus') {
+            res.status(400).json({ error: 'Invalid backend. Must be "original" or "plus"' });
+            return;
+        }
+        // Pre-flight read: check running state before acquiring write lock
+        const currentConfig = (0, unified_config_loader_1.loadOrCreateUnifiedConfig)();
+        const currentBackend = currentConfig.cliproxy?.backend ?? platform_detector_1.DEFAULT_BACKEND;
+        if (currentBackend !== backend && (0, proxy_lifecycle_service_1.isProxyRunning)() && !force) {
+            res.status(409).json({
+                error: 'Proxy is running. Stop proxy first or use force=true to change backend.',
+                proxyRunning: true,
+                currentBackend,
+            });
+            return;
+        }
+        // Atomic write — avoids race between load and save
+        (0, unified_config_loader_1.mutateUnifiedConfig)((config) => {
+            if (!config.cliproxy) {
+                config.cliproxy = {
+                    backend,
+                    oauth_accounts: {},
+                    providers: [...provider_capabilities_1.CLIPROXY_PROVIDER_IDS],
+                    variants: {},
+                };
+            }
+            else {
+                config.cliproxy.backend = backend;
+            }
+        });
+        res.json({ backend });
+    }
+    catch (error) {
+        console.error('[cliproxy-server-routes] Failed to save backend config:', error);
+        res.status(500).json({ error: 'Failed to save backend config' });
+    }
+});
+/**
+ * POST /api/cliproxy-server/test - Test remote proxy connection
+ */
+router.post('/test', async (req, res) => {
+    try {
+        const { host, port, protocol, authToken, allowSelfSigned } = req.body;
+        // Host is required, port is optional (uses protocol defaults)
+        if (!host) {
+            res.status(400).json({ error: 'Host is required' });
+            return;
+        }
+        // Parse port - treat empty string, 0, null as "use default"
+        const parsedPort = port && port !== '' ? parseInt(String(port), 10) : undefined;
+        const effectivePort = parsedPort && !isNaN(parsedPort) && parsedPort > 0 ? parsedPort : undefined;
+        const status = await (0, remote_proxy_client_1.testConnection)({
+            host,
+            port: effectivePort,
+            protocol: protocol || 'http',
+            authToken,
+            allowSelfSigned: allowSelfSigned || false,
+            timeout: 5000,
+        });
+        res.json(status);
+    }
+    catch (error) {
+        console.error('[cliproxy-server-routes] Failed to test connection:', error);
+        res.status(500).json({ error: 'Failed to test connection' });
+    }
+});
+exports.default = router;
+//# sourceMappingURL=proxy-routes.js.map

package/dist/web-server/routes/proxy-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proxy-routes.js","sourceRoot":"","sources":["../../../src/web-server/routes/proxy-routes.ts"],"names":[],"mappings":";AAAA;;;;;;;GAOG;;AAEH,qCAAoD;AACpD,8EAAoG;AACpG,4EAAoE;AACpE,6FAAiF;AACjF,wEAAmE;AACnE,4EAG2C;AAC3C,gFAA6E;AAC7E,mEAAmF;AAEnF,MAAM,MAAM,GAAG,IAAA,gBAAM,GAAE,CAAC;AAExB,MAAM,CAAC,GAAG,CAAC,CAAC,GAAY,EAAE,GAAa,EAAE,IAAI,EAAE,EAAE;IAC/C,IACE,IAAA,oDAAkC,EAChC,GAAG,EACH,GAAG,EACH,qFAAqF,CACtF,EACD,CAAC;QACD,IAAI,EAAE,CAAC;IACT,CAAC;AACH,CAAC,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,EAAE,IAAa,EAAE,GAAa,EAAE,EAAE;IACrD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAA,iDAAyB,GAAE,CAAC;QACjD,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,IAAI,qDAA8B,CAAC,CAAC;IACrE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,uDAAuD,EAAE,KAAK,CAAC,CAAC;QAC9E,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC,CAAC;IACjE,CAAC;AACH,CAAC,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;IAC9C,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,GAAG,CAAC,IAAqC,CAAC;QAE1D,+DAA+D;QAC/D,MAAM,OAAO,GAAG,IAAA,2CAAmB,EAAC,CAAC,MAAM,EAAE,EAAE;YAC7C,MAAM,CAAC,eAAe,GAAG;gBACvB,MAAM,EAAE;oBACN,GAAG,qDAA8B,CAAC,MAAM;oBACxC,GAAG,MAAM,CAAC,eAAe,EAAE,MAAM;oBACjC,GAAG,OAAO,CAAC,MAAM;iBAClB;gBACD,QAAQ,EAAE;oBACR,GAAG,qDAA8B,CAAC,QAAQ;oBAC1C,GAAG,MAAM,CAAC,eAAe,EAAE,QAAQ;oBACnC,GAAG,OAAO,CAAC,QAAQ;iBACpB;gBACD,KAAK,EAAE;oBACL,GAAG,qDAA8B,CAAC,KAAK;oBACvC,GAAG,MAAM,CAAC,eAAe,EAAE,KAAK;oBAChC,GAAG,OAAO,CAAC,KAAK;iBACjB;aACF,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;IACpC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,uDAAuD,EAAE,KAAK,CAAC,CAAC;QAC9E,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC,CAAC;IACjE,CAAC;AACH,CAAC,CAAC,CAAC;AAEH;;;GAGG;AACH,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,EAAE,IAAa,EAAE,GAAa,EAAE,EAAE;IAC5D,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAA,iDAAyB,GAAE,CAAC;QACjD,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,QAAQ,EAAE,OAAO,IAAI,mCAAe,EAAE,CAAC,CAAC;IACrE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,yDAAyD,EAAE,KAAK,CAAC,CAAC;QAChF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAC,CAAC;IACnE,CAAC;AACH,CAAC,CAAC,CAAC;AAEH;;;;;;;;GAQG;AACH,MAAM,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;IACrD,IAAI,CAAC;QACH,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;QACpC,IAAI,OAAO,KAAK,UAAU,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;YACjD,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,+CAA+C,EAAE,CAAC,CAAC;YACjF,OAAO;QACT,CAAC;QAED,mEAAmE;QACnE,MAAM,aAAa,GAAG,IAAA,iDAAyB,GAAE,CAAC;QAClD,MAAM,cAAc,GAAG,aAAa,CAAC,QAAQ,EAAE,OAAO,IAAI,mCAAe,CAAC;QAC1E,IAAI,cAAc,KAAK,OAAO,IAAI,IAAA,wCAAc,GAAE,IAAI,CAAC,KAAK,EAAE,CAAC;YAC7D,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBACnB,KAAK,EAAE,yEAAyE;gBAChF,YAAY,EAAE,IAAI;gBAClB,cAAc;aACf,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,mDAAmD;QACnD,IAAA,2CAAmB,EAAC,CAAC,MAAM,EAAE,EAAE;YAC7B,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;gBACrB,MAAM,CAAC,QAAQ,GAAG;oBAChB,OAAO;oBACP,cAAc,EAAE,EAAE;oBAClB,SAAS,EAAE,CAAC,GAAG,6CAAqB,CAAC;oBACrC,QAAQ,EAAE,EAAE;iBACb,CAAC;YACJ,CAAC;iBAAM,CAAC;gBACN,MAAM,CAAC,QAAQ,CAAC,OAAO,GAAG,OAAO,CAAC;YACpC,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;IACxB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,yDAAyD,EAAE,KAAK,CAAC,CAAC;QAChF,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,+BAA+B,EAAE,CAAC,CAAC;IACnE,CAAC;AACH,CAAC,CAAC,CAAC;AAEH;;GAEG;AACH,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;IACzD,IAAI,CAAC;QACH,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,eAAe,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC;QAEtE,8DAA8D;QAC9D,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC;YACpD,OAAO;QACT,CAAC;QAED,4DAA4D;QAC5D,MAAM,UAAU,GAAG,IAAI,IAAI,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAChF,MAAM,aAAa,GACjB,UAAU,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;QAE9E,MAAM,MAAM,GAAG,MAAM,IAAA,oCAAc,EAAC;YAClC,IAAI;YACJ,IAAI,EAAE,aAAa;YACnB,QAAQ,EAAE,QAAQ,IAAI,MAAM;YAC5B,SAAS;YACT,eAAe,EAAE,eAAe,IAAI,KAAK;YACzC,OAAO,EAAE,IAAI;SACd,CAAC,CAAC;QAEH,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACnB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,CAAC,KAAK,CAAC,qDAAqD,EAAE,KAAK,CAAC,CAAC;QAC5E,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,2BAA2B,EAAE,CAAC,CAAC;IAC/D,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,kBAAe,MAAM,CAAC"}

package/dist/web-server/routes/route-helpers.d.ts

@@ -0,0 +1,62 @@
+/**
+ * Route Helpers - Shared utility functions for route handlers
+ */
+import type { Response } from 'express';
+import type { Config } from '../../types/config';
+import type { TargetType } from '../../targets/target-adapter';
+/** Model mapping for API profiles */
+export interface ModelMapping {
+    model?: string;
+    opusModel?: string;
+    sonnetModel?: string;
+    haikuModel?: string;
+}
+export declare function isAnthropicDirectProfile(baseUrl: string | undefined | null, apiKey: string | undefined | null): boolean;
+/**
+ * Read config safely with fallback.
+ * Uses loadConfigSafe which supports both unified (config.yaml) and legacy (config.json).
+ */
+export declare function readConfigSafe(): Config;
+/**
+ * Write config atomically
+ */
+export declare function writeConfig(config: Config): void;
+/**
+ * Check if profile is configured (has valid settings file)
+ */
+export declare function isConfigured(profileName: string, config: Config): boolean;
+/**
+ * Create settings file for profile
+ */
+export declare function createSettingsFile(name: string, baseUrl: string, apiKey: string, models?: ModelMapping, provider?: string): string;
+/**
+ * Update settings file
+ */
+export declare function updateSettingsFile(name: string, updates: {
+    baseUrl?: string;
+    apiKey?: string;
+    model?: string;
+    opusModel?: string;
+    sonnetModel?: string;
+    haikuModel?: string;
+    provider?: string;
+}): void;
+export declare function validateFilePath(filePath: string): {
+    valid: boolean;
+    readonly: boolean;
+    error?: string;
+};
+/**
+ * Parse and validate a persisted target param. Returns null if invalid/absent.
+ * Shared by profile-routes and variant-routes.
+ */
+export declare function parseTarget(rawTarget: unknown): TargetType | null;
+/**
+ * Create route-specific error helpers with a log prefix.
+ * Eliminates duplicate logRouteError/respondInternalError in each route file.
+ */
+export declare function createRouteErrorHelpers(prefix: string): {
+    logRouteError: (context: string, error: unknown) => void;
+    respondInternalError: (res: Response, error: unknown, fallbackMessage: string, statusCode?: number) => void;
+};
+//# sourceMappingURL=route-helpers.d.ts.map

package/dist/web-server/routes/route-helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"route-helpers.d.ts","sourceRoot":"","sources":["../../../src/web-server/routes/route-helpers.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAYxC,OAAO,KAAK,EAAE,MAAM,EAAY,MAAM,oBAAoB,CAAC;AAC3D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAI/D,qCAAqC;AACrC,MAAM,WAAW,YAAY;IAC3B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AA4DD,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,EAClC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAChC,OAAO,CAIT;AAED;;;GAGG;AACH,wBAAgB,cAAc,IAAI,MAAM,CAMvC;AAED;;GAEG;AACH,wBAAgB,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAKhD;AAED;;GAEG;AACH,wBAAgB,YAAY,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAiBzE;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,MAAM,GAAE,YAAiB,EACzB,QAAQ,CAAC,EAAE,MAAM,GAChB,MAAM,CA0DR;AAED;;GAEG;AACH,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE;IACP,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GACA,IAAI,CAiIN;AA+CD,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG;IAClD,KAAK,EAAE,OAAO,CAAC;IACf,QAAQ,EAAE,OAAO,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,CAiCA;AAED;;;GAGG;AACH,wBAAgB,WAAW,CAAC,SAAS,EAAE,OAAO,GAAG,UAAU,GAAG,IAAI,CAejE;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,MAAM,GAAG;IACvD,aAAa,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;IACzD,oBAAoB,EAAE,CACpB,GAAG,EAAE,QAAQ,EACb,KAAK,EAAE,OAAO,EACd,eAAe,EAAE,MAAM,EACvB,UAAU,CAAC,EAAE,MAAM,KAChB,IAAI,CAAC;CACX,CAoBA"}

package/dist/web-server/routes/route-helpers.js

@@ -0,0 +1,413 @@
+"use strict";
+/**
+ * Route Helpers - Shared utility functions for route handlers
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createRouteErrorHelpers = exports.parseTarget = exports.validateFilePath = exports.updateSettingsFile = exports.createSettingsFile = exports.isConfigured = exports.writeConfig = exports.readConfigSafe = exports.isAnthropicDirectProfile = void 0;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const config_manager_1 = require("../../utils/config-manager");
+const helpers_1 = require("../../utils/helpers");
+const claude_config_path_1 = require("../../utils/claude-config-path");
+const droid_provider_1 = require("../../targets/droid-provider");
+const provider_capabilities_1 = require("../../cliproxy/provider-capabilities");
+const model_id_normalizer_1 = require("../../cliproxy/model-id-normalizer");
+const target_metadata_1 = require("../../targets/target-metadata");
+const error_types_1 = require("../../errors/error-types");
+function resolveProviderFromBaseUrl(baseUrl) {
+    if (typeof baseUrl !== 'string' || baseUrl.trim().length === 0) {
+        return null;
+    }
+    try {
+        const parsed = new URL(baseUrl);
+        const extracted = (0, model_id_normalizer_1.extractProviderFromPathname)(parsed.pathname);
+        return extracted ? (0, provider_capabilities_1.mapExternalProviderName)(extracted) : null;
+    }
+    catch {
+        const extracted = (0, model_id_normalizer_1.extractProviderFromPathname)(baseUrl);
+        return extracted ? (0, provider_capabilities_1.mapExternalProviderName)(extracted) : null;
+    }
+}
+function resolveProviderForModelCanonicalization(baseUrl, providerHint) {
+    const fromBaseUrl = resolveProviderFromBaseUrl(baseUrl);
+    if (fromBaseUrl) {
+        return fromBaseUrl;
+    }
+    if (typeof providerHint === 'string' && providerHint.trim().length > 0) {
+        const fromProviderHint = (0, provider_capabilities_1.mapExternalProviderName)(providerHint);
+        if (fromProviderHint) {
+            return fromProviderHint;
+        }
+    }
+    return null;
+}
+function getDeniedModelReasonForProvider(provider, values) {
+    if (!provider)
+        return null;
+    for (const value of values) {
+        if (typeof value !== 'string' || value.trim().length === 0)
+            continue;
+        const deniedReason = (0, model_id_normalizer_1.getDeniedModelIdReasonForProvider)(value, provider);
+        if (deniedReason)
+            return deniedReason;
+    }
+    return null;
+}
+function canonicalizeModelForProvider(provider, value) {
+    if (typeof value !== 'string')
+        return value;
+    if (!provider || value.trim().length === 0)
+        return value;
+    return (0, model_id_normalizer_1.canonicalizeModelIdForProvider)(value, provider);
+}
+function isOpenRouterUrl(baseUrl) {
+    return baseUrl.toLowerCase().includes('openrouter.ai');
+}
+function isAnthropicDirectProfile(baseUrl, apiKey) {
+    const normalizedBaseUrl = baseUrl?.trim().toLowerCase() || '';
+    const normalizedApiKey = apiKey?.trim() || '';
+    return normalizedApiKey.startsWith('sk-ant-') || normalizedBaseUrl.includes('api.anthropic.com');
+}
+exports.isAnthropicDirectProfile = isAnthropicDirectProfile;
+/**
+ * Read config safely with fallback.
+ * Uses loadConfigSafe which supports both unified (config.yaml) and legacy (config.json).
+ */
+function readConfigSafe() {
+    try {
+        return (0, config_manager_1.loadConfigSafe)();
+    }
+    catch {
+        return { profiles: {} };
+    }
+}
+exports.readConfigSafe = readConfigSafe;
+/**
+ * Write config atomically
+ */
+function writeConfig(config) {
+    const configPath = (0, config_manager_1.getConfigPath)();
+    const tempPath = configPath + '.tmp';
+    fs.writeFileSync(tempPath, JSON.stringify(config, null, 2) + '\n');
+    fs.renameSync(tempPath, configPath);
+}
+exports.writeConfig = writeConfig;
+/**
+ * Check if profile is configured (has valid settings file)
+ */
+function isConfigured(profileName, config) {
+    const settingsPath = config.profiles[profileName];
+    if (!settingsPath)
+        return false;
+    try {
+        const expandedPath = (0, helpers_1.expandPath)(settingsPath);
+        if (!fs.existsSync(expandedPath))
+            return false;
+        const settings = (0, config_manager_1.loadSettings)(expandedPath);
+        // Proxy mode: BASE_URL + AUTH_TOKEN; Native mode: ANTHROPIC_API_KEY only
+        return !!((settings.env?.ANTHROPIC_BASE_URL && settings.env?.ANTHROPIC_AUTH_TOKEN) ||
+            settings.env?.ANTHROPIC_API_KEY);
+    }
+    catch {
+        return false;
+    }
+}
+exports.isConfigured = isConfigured;
+/**
+ * Create settings file for profile
+ */
+function createSettingsFile(name, baseUrl, apiKey, models = {}, provider) {
+    const settingsPath = path.join((0, config_manager_1.getCcsDir)(), `${name}.settings.json`);
+    const { model, opusModel, sonnetModel, haikuModel } = models;
+    const providerForModelCanonicalization = resolveProviderForModelCanonicalization(baseUrl, provider);
+    const canonicalModel = canonicalizeModelForProvider(providerForModelCanonicalization, model);
+    const canonicalOpusModel = canonicalizeModelForProvider(providerForModelCanonicalization, opusModel);
+    const canonicalSonnetModel = canonicalizeModelForProvider(providerForModelCanonicalization, sonnetModel);
+    const canonicalHaikuModel = canonicalizeModelForProvider(providerForModelCanonicalization, haikuModel);
+    const deniedReason = getDeniedModelReasonForProvider(providerForModelCanonicalization, [
+        canonicalModel,
+        canonicalOpusModel,
+        canonicalSonnetModel,
+        canonicalHaikuModel,
+    ]);
+    if (deniedReason) {
+        throw new error_types_1.ValidationError(deniedReason, 'model');
+    }
+    const droidProvider = (0, droid_provider_1.resolveDroidProvider)({
+        provider,
+        baseUrl,
+        model: canonicalModel,
+    });
+    const normalizedBaseUrl = baseUrl.trim();
+    const normalizedApiKey = apiKey.trim();
+    const isNative = isAnthropicDirectProfile(normalizedBaseUrl, normalizedApiKey);
+    const settings = {
+        env: {
+            ...(isNative
+                ? { ANTHROPIC_API_KEY: normalizedApiKey }
+                : {
+                    ANTHROPIC_BASE_URL: normalizedBaseUrl,
+                    ANTHROPIC_AUTH_TOKEN: normalizedApiKey,
+                    ...(isOpenRouterUrl(normalizedBaseUrl) && { ANTHROPIC_API_KEY: '' }),
+                }),
+            ...(canonicalModel && { ANTHROPIC_MODEL: canonicalModel }),
+            ...(canonicalOpusModel && { ANTHROPIC_DEFAULT_OPUS_MODEL: canonicalOpusModel }),
+            ...(canonicalSonnetModel && { ANTHROPIC_DEFAULT_SONNET_MODEL: canonicalSonnetModel }),
+            ...(canonicalHaikuModel && { ANTHROPIC_DEFAULT_HAIKU_MODEL: canonicalHaikuModel }),
+            CCS_DROID_PROVIDER: droidProvider,
+        },
+    };
+    fs.mkdirSync(path.dirname(settingsPath), { recursive: true });
+    fs.writeFileSync(settingsPath, JSON.stringify(settings, null, 2) + '\n');
+    return `~/.ccs/${name}.settings.json`;
+}
+exports.createSettingsFile = createSettingsFile;
+/**
+ * Update settings file
+ */
+function updateSettingsFile(name, updates) {
+    const settingsPath = path.join((0, config_manager_1.getCcsDir)(), `${name}.settings.json`);
+    if (!fs.existsSync(settingsPath)) {
+        throw new Error('Settings file not found');
+    }
+    const settings = (0, config_manager_1.loadSettings)(settingsPath);
+    const currentBaseUrl = settings.env?.ANTHROPIC_BASE_URL?.trim() || '';
+    const currentApiKey = settings.env?.ANTHROPIC_API_KEY?.trim() || settings.env?.ANTHROPIC_AUTH_TOKEN?.trim() || '';
+    const nextBaseUrl = updates.baseUrl !== undefined ? updates.baseUrl.trim() : currentBaseUrl;
+    const nextApiKey = updates.apiKey !== undefined ? updates.apiKey.trim() : currentApiKey;
+    const isNative = isAnthropicDirectProfile(nextBaseUrl, nextApiKey);
+    if (!nextApiKey) {
+        throw new error_types_1.ValidationError('apiKey cannot be empty', 'apiKey');
+    }
+    if (!isNative && nextBaseUrl.length === 0) {
+        throw new error_types_1.ValidationError('baseUrl cannot be empty', 'baseUrl');
+    }
+    const providerForValidation = resolveProviderForModelCanonicalization(nextBaseUrl, updates.provider) ??
+        resolveProviderForModelCanonicalization(settings.env?.ANTHROPIC_BASE_URL, updates.provider ?? settings.env?.CCS_DROID_PROVIDER);
+    const canonicalModel = updates.model !== undefined
+        ? canonicalizeModelForProvider(providerForValidation, updates.model)
+        : undefined;
+    const canonicalOpusModel = updates.opusModel !== undefined
+        ? canonicalizeModelForProvider(providerForValidation, updates.opusModel)
+        : undefined;
+    const canonicalSonnetModel = updates.sonnetModel !== undefined
+        ? canonicalizeModelForProvider(providerForValidation, updates.sonnetModel)
+        : undefined;
+    const canonicalHaikuModel = updates.haikuModel !== undefined
+        ? canonicalizeModelForProvider(providerForValidation, updates.haikuModel)
+        : undefined;
+    const deniedReason = getDeniedModelReasonForProvider(providerForValidation, [
+        canonicalModel !== undefined ? canonicalModel : settings.env?.ANTHROPIC_MODEL,
+        canonicalOpusModel !== undefined
+            ? canonicalOpusModel
+            : settings.env?.ANTHROPIC_DEFAULT_OPUS_MODEL,
+        canonicalSonnetModel !== undefined
+            ? canonicalSonnetModel
+            : settings.env?.ANTHROPIC_DEFAULT_SONNET_MODEL,
+        canonicalHaikuModel !== undefined
+            ? canonicalHaikuModel
+            : settings.env?.ANTHROPIC_DEFAULT_HAIKU_MODEL,
+    ]);
+    if (deniedReason) {
+        throw new error_types_1.ValidationError(deniedReason, 'model');
+    }
+    settings.env = settings.env || {};
+    if (isNative) {
+        delete settings.env.ANTHROPIC_BASE_URL;
+        delete settings.env.ANTHROPIC_AUTH_TOKEN;
+        settings.env.ANTHROPIC_API_KEY = nextApiKey;
+    }
+    else {
+        settings.env.ANTHROPIC_BASE_URL = nextBaseUrl;
+        settings.env.ANTHROPIC_AUTH_TOKEN = nextApiKey;
+        if (isOpenRouterUrl(nextBaseUrl)) {
+            settings.env.ANTHROPIC_API_KEY = '';
+        }
+        else {
+            delete settings.env.ANTHROPIC_API_KEY;
+        }
+    }
+    if (updates.model !== undefined) {
+        settings.env = settings.env || {};
+        if (canonicalModel) {
+            settings.env.ANTHROPIC_MODEL = canonicalModel;
+        }
+        else {
+            delete settings.env.ANTHROPIC_MODEL;
+        }
+    }
+    // Handle model mapping fields
+    if (updates.opusModel !== undefined) {
+        settings.env = settings.env || {};
+        if (canonicalOpusModel) {
+            settings.env.ANTHROPIC_DEFAULT_OPUS_MODEL = canonicalOpusModel;
+        }
+        else {
+            delete settings.env.ANTHROPIC_DEFAULT_OPUS_MODEL;
+        }
+    }
+    if (updates.sonnetModel !== undefined) {
+        settings.env = settings.env || {};
+        if (canonicalSonnetModel) {
+            settings.env.ANTHROPIC_DEFAULT_SONNET_MODEL = canonicalSonnetModel;
+        }
+        else {
+            delete settings.env.ANTHROPIC_DEFAULT_SONNET_MODEL;
+        }
+    }
+    if (updates.haikuModel !== undefined) {
+        settings.env = settings.env || {};
+        if (canonicalHaikuModel) {
+            settings.env.ANTHROPIC_DEFAULT_HAIKU_MODEL = canonicalHaikuModel;
+        }
+        else {
+            delete settings.env.ANTHROPIC_DEFAULT_HAIKU_MODEL;
+        }
+    }
+    if (updates.provider !== undefined ||
+        updates.baseUrl !== undefined ||
+        updates.model !== undefined ||
+        settings.env?.CCS_DROID_PROVIDER) {
+        settings.env = settings.env || {};
+        const resolvedProvider = (0, droid_provider_1.resolveDroidProvider)({
+            provider: updates.provider ?? settings.env.CCS_DROID_PROVIDER,
+            baseUrl: nextBaseUrl,
+            model: canonicalModel ?? settings.env.ANTHROPIC_MODEL,
+        });
+        settings.env.CCS_DROID_PROVIDER = resolvedProvider;
+    }
+    fs.writeFileSync(settingsPath, JSON.stringify(settings, null, 2) + '\n');
+}
+exports.updateSettingsFile = updateSettingsFile;
+/**
+ * Security: Validate file path is within allowed directories
+ * - ~/.ccs/ directory: read/write allowed
+ * - ~/.claude/settings.json: read-only
+ */
+function normalizePathForComparison(filePath) {
+    const normalized = path.resolve(path.normalize(filePath));
+    return process.platform === 'win32' ? normalized.toLowerCase() : normalized;
+}
+function isPathWithin(basePath, targetPath) {
+    const relative = path.relative(basePath, targetPath);
+    return relative === '' || (!relative.startsWith('..') && !path.isAbsolute(relative));
+}
+function isSymlinkPath(filePath) {
+    try {
+        return fs.lstatSync(filePath).isSymbolicLink();
+    }
+    catch (error) {
+        const nodeError = error;
+        if (nodeError.code === 'ENOENT' || nodeError.code === 'ENOTDIR') {
+            return false;
+        }
+        return true;
+    }
+}
+function hasSymlinkSegment(basePath, targetPath) {
+    const relative = path.relative(basePath, targetPath);
+    if (relative === '' || relative.startsWith('..') || path.isAbsolute(relative)) {
+        return false;
+    }
+    let currentPath = basePath;
+    const segments = relative.split(path.sep).filter(Boolean);
+    for (const segment of segments) {
+        currentPath = path.join(currentPath, segment);
+        if (isSymlinkPath(currentPath)) {
+            return true;
+        }
+    }
+    return false;
+}
+function validateFilePath(filePath) {
+    const expandedPath = (0, helpers_1.expandPath)(filePath);
+    const resolvedPath = path.resolve(path.normalize(expandedPath));
+    const resolvedCcsDir = path.resolve(path.normalize((0, config_manager_1.getCcsDir)()));
+    const resolvedClaudeSettingsPath = path.resolve(path.normalize((0, claude_config_path_1.getClaudeSettingsPath)()));
+    const normalizedPath = normalizePathForComparison(resolvedPath);
+    const ccsDir = normalizePathForComparison(resolvedCcsDir);
+    const claudeSettingsPath = normalizePathForComparison(resolvedClaudeSettingsPath);
+    // Check if path is within ~/.ccs/
+    if (isPathWithin(ccsDir, normalizedPath)) {
+        if (hasSymlinkSegment(resolvedCcsDir, resolvedPath)) {
+            return { valid: false, readonly: false, error: 'Access to this path is not allowed' };
+        }
+        // Block access to sensitive subdirectories
+        const relativePath = path.relative(ccsDir, normalizedPath);
+        const pathSegments = relativePath.split(path.sep).filter(Boolean);
+        if (pathSegments.includes('.git') || pathSegments.includes('node_modules')) {
+            return { valid: false, readonly: false, error: 'Access to this path is not allowed' };
+        }
+        return { valid: true, readonly: false };
+    }
+    // Allow read-only access to ~/.claude/settings.json
+    if (normalizedPath === claudeSettingsPath) {
+        if (isSymlinkPath(resolvedClaudeSettingsPath)) {
+            return { valid: false, readonly: false, error: 'Access to this path is not allowed' };
+        }
+        return { valid: true, readonly: true };
+    }
+    return { valid: false, readonly: false, error: 'Access to this path is not allowed' };
+}
+exports.validateFilePath = validateFilePath;
+/**
+ * Parse and validate a persisted target param. Returns null if invalid/absent.
+ * Shared by profile-routes and variant-routes.
+ */
+function parseTarget(rawTarget) {
+    if (rawTarget === undefined || rawTarget === null || rawTarget === '') {
+        return null;
+    }
+    if (typeof rawTarget !== 'string') {
+        return null;
+    }
+    const normalized = rawTarget.trim().toLowerCase();
+    if ((0, target_metadata_1.isPersistedTargetType)(normalized)) {
+        return normalized;
+    }
+    return null;
+}
+exports.parseTarget = parseTarget;
+/**
+ * Create route-specific error helpers with a log prefix.
+ * Eliminates duplicate logRouteError/respondInternalError in each route file.
+ */
+function createRouteErrorHelpers(prefix) {
+    function logRouteError(context, error) {
+        if (error instanceof Error) {
+            console.error(`[${prefix}] ${context}: ${error.message}`);
+            return;
+        }
+        console.error(`[${prefix}] ${context}: unknown error`);
+    }
+    function respondInternalError(res, error, fallbackMessage, statusCode = 500) {
+        logRouteError(fallbackMessage, error);
+        res.status(statusCode).json({ error: fallbackMessage });
+    }
+    return { logRouteError, respondInternalError };
+}
+exports.createRouteErrorHelpers = createRouteErrorHelpers;
+//# sourceMappingURL=route-helpers.js.map