@kaitranntt/ccs 6.7.0 → 6.7.1

package/dist/web-server/routes.js

@@ -1,1891 +0,0 @@
-"use strict";
-/**
- * REST API Routes (Phase 03)
- *
- * Implements CRUD operations for profiles, cliproxy variants, and accounts.
- */
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || function (mod) {
-    if (mod && mod.__esModule) return mod;
-    var result = {};
-    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
-    __setModuleDefault(result, mod);
-    return result;
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.apiRoutes = void 0;
-const express_1 = require("express");
-const fs = __importStar(require("fs"));
-const path = __importStar(require("path"));
-const config_manager_1 = require("../utils/config-manager");
-const helpers_1 = require("../utils/helpers");
-const health_service_1 = require("./health-service");
-const auth_handler_1 = require("../cliproxy/auth-handler");
-const project_selection_handler_1 = require("../cliproxy/project-selection-handler");
-const stats_fetcher_1 = require("../cliproxy/stats-fetcher");
-const config_generator_1 = require("../cliproxy/config-generator");
-const openai_compat_manager_1 = require("../cliproxy/openai-compat-manager");
-const account_manager_1 = require("../cliproxy/account-manager");
-const config_generator_2 = require("../cliproxy/config-generator");
-const session_tracker_1 = require("../cliproxy/session-tracker");
-const service_manager_1 = require("../cliproxy/service-manager");
-const binary_manager_1 = require("../cliproxy/binary-manager");
-// Unified config imports
-const unified_config_loader_1 = require("../config/unified-config-loader");
-const migration_manager_1 = require("../config/migration-manager");
-const secrets_manager_1 = require("../config/secrets-manager");
-const unified_config_loader_2 = require("../config/unified-config-loader");
-const unified_config_types_1 = require("../config/unified-config-types");
-const sensitive_keys_1 = require("../utils/sensitive-keys");
-const reserved_names_1 = require("../config/reserved-names");
-const websearch_manager_1 = require("../utils/websearch-manager");
-exports.apiRoutes = (0, express_1.Router)();
-/**
- * Helper: Read config safely with fallback
- */
-function readConfigSafe() {
-    try {
-        return (0, config_manager_1.loadConfig)();
-    }
-    catch {
-        return { profiles: {} };
-    }
-}
-/**
- * Helper: Write config atomically
- */
-function writeConfig(config) {
-    const configPath = (0, config_manager_1.getConfigPath)();
-    const tempPath = configPath + '.tmp';
-    fs.writeFileSync(tempPath, JSON.stringify(config, null, 2) + '\n');
-    fs.renameSync(tempPath, configPath);
-}
-/**
- * Helper: Check if profile is configured (has valid settings file)
- */
-function isConfigured(profileName, config) {
-    const settingsPath = config.profiles[profileName];
-    if (!settingsPath)
-        return false;
-    try {
-        const expandedPath = (0, helpers_1.expandPath)(settingsPath);
-        if (!fs.existsSync(expandedPath))
-            return false;
-        const settings = (0, config_manager_1.loadSettings)(expandedPath);
-        return !!(settings.env?.ANTHROPIC_BASE_URL && settings.env?.ANTHROPIC_AUTH_TOKEN);
-    }
-    catch {
-        return false;
-    }
-}
-/**
- * Helper: Create settings file for profile
- */
-function createSettingsFile(name, baseUrl, apiKey, models = {}) {
-    const settingsPath = path.join((0, config_manager_1.getCcsDir)(), `${name}.settings.json`);
-    const { model, opusModel, sonnetModel, haikuModel } = models;
-    const settings = {
-        env: {
-            ANTHROPIC_BASE_URL: baseUrl,
-            ANTHROPIC_AUTH_TOKEN: apiKey,
-            ...(model && { ANTHROPIC_MODEL: model }),
-            ...(opusModel && { ANTHROPIC_DEFAULT_OPUS_MODEL: opusModel }),
-            ...(sonnetModel && { ANTHROPIC_DEFAULT_SONNET_MODEL: sonnetModel }),
-            ...(haikuModel && { ANTHROPIC_DEFAULT_HAIKU_MODEL: haikuModel }),
-        },
-    };
-    fs.writeFileSync(settingsPath, JSON.stringify(settings, null, 2) + '\n');
-    return `~/.ccs/${name}.settings.json`;
-}
-/**
- * Helper: Update settings file
- */
-function updateSettingsFile(name, updates) {
-    const settingsPath = path.join((0, config_manager_1.getCcsDir)(), `${name}.settings.json`);
-    if (!fs.existsSync(settingsPath)) {
-        throw new Error('Settings file not found');
-    }
-    const settings = (0, config_manager_1.loadSettings)(settingsPath);
-    if (updates.baseUrl) {
-        settings.env = settings.env || {};
-        settings.env.ANTHROPIC_BASE_URL = updates.baseUrl;
-    }
-    if (updates.apiKey) {
-        settings.env = settings.env || {};
-        settings.env.ANTHROPIC_AUTH_TOKEN = updates.apiKey;
-    }
-    if (updates.model !== undefined) {
-        settings.env = settings.env || {};
-        if (updates.model) {
-            settings.env.ANTHROPIC_MODEL = updates.model;
-        }
-        else {
-            delete settings.env.ANTHROPIC_MODEL;
-        }
-    }
-    // Handle model mapping fields
-    if (updates.opusModel !== undefined) {
-        settings.env = settings.env || {};
-        if (updates.opusModel) {
-            settings.env.ANTHROPIC_DEFAULT_OPUS_MODEL = updates.opusModel;
-        }
-        else {
-            delete settings.env.ANTHROPIC_DEFAULT_OPUS_MODEL;
-        }
-    }
-    if (updates.sonnetModel !== undefined) {
-        settings.env = settings.env || {};
-        if (updates.sonnetModel) {
-            settings.env.ANTHROPIC_DEFAULT_SONNET_MODEL = updates.sonnetModel;
-        }
-        else {
-            delete settings.env.ANTHROPIC_DEFAULT_SONNET_MODEL;
-        }
-    }
-    if (updates.haikuModel !== undefined) {
-        settings.env = settings.env || {};
-        if (updates.haikuModel) {
-            settings.env.ANTHROPIC_DEFAULT_HAIKU_MODEL = updates.haikuModel;
-        }
-        else {
-            delete settings.env.ANTHROPIC_DEFAULT_HAIKU_MODEL;
-        }
-    }
-    fs.writeFileSync(settingsPath, JSON.stringify(settings, null, 2) + '\n');
-}
-/**
- * Helper: Create cliproxy variant settings
- * Includes base URL and auth token for proper Claude CLI integration
- */
-function createCliproxySettings(name, provider, model) {
-    const settingsPath = path.join((0, config_manager_1.getCcsDir)(), `${name}.settings.json`);
-    // Get base env vars from provider config (includes BASE_URL, AUTH_TOKEN)
-    const baseEnv = (0, config_generator_2.getClaudeEnvVars)(provider);
-    const settings = {
-        env: {
-            ANTHROPIC_BASE_URL: baseEnv.ANTHROPIC_BASE_URL || '',
-            ANTHROPIC_AUTH_TOKEN: baseEnv.ANTHROPIC_AUTH_TOKEN || '',
-            ANTHROPIC_MODEL: model || baseEnv.ANTHROPIC_MODEL || '',
-            ANTHROPIC_DEFAULT_OPUS_MODEL: model || baseEnv.ANTHROPIC_DEFAULT_OPUS_MODEL || '',
-            ANTHROPIC_DEFAULT_SONNET_MODEL: model || baseEnv.ANTHROPIC_DEFAULT_SONNET_MODEL || '',
-            ANTHROPIC_DEFAULT_HAIKU_MODEL: baseEnv.ANTHROPIC_DEFAULT_HAIKU_MODEL || model || '',
-        },
-    };
-    fs.writeFileSync(settingsPath, JSON.stringify(settings, null, 2) + '\n');
-    return `~/.ccs/${name}.settings.json`;
-}
-// ==================== Profile CRUD ====================
-/**
- * GET /api/profiles - List all profiles
- */
-exports.apiRoutes.get('/profiles', (_req, res) => {
-    const config = readConfigSafe();
-    const profiles = Object.entries(config.profiles).map(([name, settingsPath]) => ({
-        name,
-        settingsPath,
-        configured: isConfigured(name, config),
-    }));
-    res.json({ profiles });
-});
-/**
- * POST /api/profiles - Create new profile
- */
-exports.apiRoutes.post('/profiles', (req, res) => {
-    const { name, baseUrl, apiKey, model, opusModel, sonnetModel, haikuModel } = req.body;
-    if (!name || !baseUrl || !apiKey) {
-        res.status(400).json({ error: 'Missing required fields: name, baseUrl, apiKey' });
-        return;
-    }
-    // Validate reserved names
-    if ((0, reserved_names_1.isReservedName)(name)) {
-        res.status(400).json({
-            error: `Profile name '${name}' is reserved`,
-            reserved: reserved_names_1.RESERVED_PROFILE_NAMES,
-        });
-        return;
-    }
-    const config = readConfigSafe();
-    if (config.profiles[name]) {
-        res.status(409).json({ error: 'Profile already exists' });
-        return;
-    }
-    // Ensure .ccs directory exists
-    if (!fs.existsSync((0, config_manager_1.getCcsDir)())) {
-        fs.mkdirSync((0, config_manager_1.getCcsDir)(), { recursive: true });
-    }
-    // Create settings file with model mapping
-    const settingsPath = createSettingsFile(name, baseUrl, apiKey, {
-        model,
-        opusModel,
-        sonnetModel,
-        haikuModel,
-    });
-    // Update config
-    config.profiles[name] = settingsPath;
-    writeConfig(config);
-    res.status(201).json({ name, settingsPath });
-});
-/**
- * PUT /api/profiles/:name - Update profile
- */
-exports.apiRoutes.put('/profiles/:name', (req, res) => {
-    const { name } = req.params;
-    const { baseUrl, apiKey, model, opusModel, sonnetModel, haikuModel } = req.body;
-    const config = readConfigSafe();
-    if (!config.profiles[name]) {
-        res.status(404).json({ error: 'Profile not found' });
-        return;
-    }
-    try {
-        updateSettingsFile(name, { baseUrl, apiKey, model, opusModel, sonnetModel, haikuModel });
-        res.json({ name, updated: true });
-    }
-    catch (error) {
-        res.status(500).json({ error: error.message });
-    }
-});
-/**
- * DELETE /api/profiles/:name - Delete profile
- */
-exports.apiRoutes.delete('/profiles/:name', (req, res) => {
-    const { name } = req.params;
-    const config = readConfigSafe();
-    if (!config.profiles[name]) {
-        res.status(404).json({ error: 'Profile not found' });
-        return;
-    }
-    // Delete settings file
-    const settingsPath = path.join((0, config_manager_1.getCcsDir)(), `${name}.settings.json`);
-    if (fs.existsSync(settingsPath)) {
-        fs.unlinkSync(settingsPath);
-    }
-    // Remove from config
-    delete config.profiles[name];
-    writeConfig(config);
-    res.json({ name, deleted: true });
-});
-// ==================== CLIProxy CRUD ====================
-/**
- * GET /api/cliproxy - List cliproxy variants
- */
-exports.apiRoutes.get('/cliproxy', (_req, res) => {
-    const config = readConfigSafe();
-    const variants = Object.entries(config.cliproxy || {}).map(([name, variant]) => ({
-        name,
-        provider: variant.provider,
-        settings: variant.settings,
-        account: variant.account || 'default', // Include account field
-    }));
-    res.json({ variants });
-});
-/**
- * POST /api/cliproxy - Create cliproxy variant
- */
-exports.apiRoutes.post('/cliproxy', (req, res) => {
-    const { name, provider, model, account } = req.body;
-    if (!name || !provider) {
-        res.status(400).json({ error: 'Missing required fields: name, provider' });
-        return;
-    }
-    // Reject reserved names as variant names (prevents collision with built-in providers)
-    if ((0, reserved_names_1.isReservedName)(name)) {
-        res.status(400).json({
-            error: `Cannot use reserved name '${name}' as variant name`,
-            reserved: reserved_names_1.RESERVED_PROFILE_NAMES,
-        });
-        return;
-    }
-    const config = readConfigSafe();
-    config.cliproxy = config.cliproxy || {};
-    if (config.cliproxy[name]) {
-        res.status(409).json({ error: 'Variant already exists' });
-        return;
-    }
-    // Ensure .ccs directory exists
-    if (!fs.existsSync((0, config_manager_1.getCcsDir)())) {
-        fs.mkdirSync((0, config_manager_1.getCcsDir)(), { recursive: true });
-    }
-    // Create settings file for variant
-    const settingsPath = createCliproxySettings(name, provider, model);
-    // Include account if specified (defaults to 'default' if not provided)
-    config.cliproxy[name] = {
-        provider,
-        settings: settingsPath,
-        ...(account && { account }),
-    };
-    writeConfig(config);
-    res.status(201).json({ name, provider, settings: settingsPath, account: account || 'default' });
-});
-/**
- * PUT /api/cliproxy/:name - Update cliproxy variant
- */
-exports.apiRoutes.put('/cliproxy/:name', (req, res) => {
-    const { name } = req.params;
-    const { provider, account, model } = req.body;
-    const config = readConfigSafe();
-    if (!config.cliproxy?.[name]) {
-        res.status(404).json({ error: 'Variant not found' });
-        return;
-    }
-    const variant = config.cliproxy[name];
-    // Update fields if provided
-    if (provider) {
-        variant.provider = provider;
-    }
-    if (account !== undefined) {
-        if (account) {
-            variant.account = account;
-        }
-        else {
-            delete variant.account; // Remove account to use default
-        }
-    }
-    // Update model in settings file if provided
-    if (model !== undefined) {
-        const settingsPath = path.join((0, config_manager_1.getCcsDir)(), `${name}.settings.json`);
-        if (fs.existsSync(settingsPath)) {
-            const settings = (0, config_manager_1.loadSettings)(settingsPath);
-            if (model) {
-                settings.env = settings.env || {};
-                settings.env.ANTHROPIC_MODEL = model;
-            }
-            else if (settings.env) {
-                delete settings.env.ANTHROPIC_MODEL;
-            }
-            fs.writeFileSync(settingsPath, JSON.stringify(settings, null, 2) + '\n');
-        }
-    }
-    writeConfig(config);
-    res.json({
-        name,
-        provider: variant.provider,
-        account: variant.account || 'default',
-        settings: variant.settings,
-        updated: true,
-    });
-});
-/**
- * DELETE /api/cliproxy/:name - Delete cliproxy variant
- */
-exports.apiRoutes.delete('/cliproxy/:name', (req, res) => {
-    const { name } = req.params;
-    const config = readConfigSafe();
-    if (!config.cliproxy?.[name]) {
-        res.status(404).json({ error: 'Variant not found' });
-        return;
-    }
-    // Never delete settings files for reserved provider names (safety guard)
-    if (!(0, reserved_names_1.isReservedName)(name)) {
-        // Only delete settings file for non-reserved variant names
-        const settingsPath = path.join((0, config_manager_1.getCcsDir)(), `${name}.settings.json`);
-        if (fs.existsSync(settingsPath)) {
-            fs.unlinkSync(settingsPath);
-        }
-    }
-    delete config.cliproxy[name];
-    writeConfig(config);
-    res.json({ name, deleted: true });
-});
-/**
- * GET /api/cliproxy/auth - Get auth status for built-in CLIProxy profiles
- * Also fetches CLIProxyAPI stats to update lastUsedAt for active providers
- */
-exports.apiRoutes.get('/cliproxy/auth', async (_req, res) => {
-    // Initialize accounts from existing tokens on first request
-    (0, auth_handler_1.initializeAccounts)();
-    // Fetch CLIProxyAPI usage stats to determine active providers
-    const stats = await (0, stats_fetcher_1.fetchCliproxyStats)();
-    // Map CLIProxyAPI provider names to our internal provider names
-    const statsProviderMap = {
-        gemini: 'gemini',
-        antigravity: 'agy',
-        codex: 'codex',
-        qwen: 'qwen',
-        iflow: 'iflow',
-    };
-    // Update lastUsedAt for providers with recent activity
-    if (stats?.requestsByProvider) {
-        for (const [statsProvider, requestCount] of Object.entries(stats.requestsByProvider)) {
-            if (requestCount > 0) {
-                const provider = statsProviderMap[statsProvider.toLowerCase()];
-                if (provider) {
-                    // Touch the default account for this provider (or all accounts)
-                    const accounts = (0, account_manager_1.getProviderAccounts)(provider);
-                    for (const account of accounts) {
-                        // Only touch if this is the default account (most likely being used)
-                        if (account.isDefault) {
-                            (0, account_manager_1.touchAccount)(provider, account.id);
-                        }
-                    }
-                }
-            }
-        }
-    }
-    const statuses = (0, auth_handler_1.getAllAuthStatus)();
-    const authStatus = statuses.map((status) => {
-        const oauthConfig = (0, auth_handler_1.getOAuthConfig)(status.provider);
-        return {
-            provider: status.provider,
-            displayName: oauthConfig.displayName,
-            authenticated: status.authenticated,
-            lastAuth: status.lastAuth?.toISOString() || null,
-            tokenFiles: status.tokenFiles.length,
-            accounts: status.accounts,
-            defaultAccount: status.defaultAccount,
-        };
-    });
-    res.json({ authStatus });
-});
-// ==================== Account Management (Multi-Account Support) ====================
-/**
- * GET /api/cliproxy/accounts - Get all accounts across all providers
- */
-exports.apiRoutes.get('/cliproxy/accounts', (_req, res) => {
-    // Initialize accounts from existing tokens
-    (0, auth_handler_1.initializeAccounts)();
-    const accounts = (0, account_manager_1.getAllAccountsSummary)();
-    res.json({ accounts });
-});
-/**
- * GET /api/cliproxy/accounts/:provider - Get accounts for a specific provider
- */
-exports.apiRoutes.get('/cliproxy/accounts/:provider', (req, res) => {
-    const { provider } = req.params;
-    // Validate provider
-    const validProviders = ['gemini', 'codex', 'agy', 'qwen', 'iflow'];
-    if (!validProviders.includes(provider)) {
-        res.status(400).json({ error: `Invalid provider: ${provider}` });
-        return;
-    }
-    const accounts = (0, account_manager_1.getProviderAccounts)(provider);
-    res.json({ provider, accounts });
-});
-/**
- * POST /api/cliproxy/accounts/:provider/default - Set default account for provider
- */
-exports.apiRoutes.post('/cliproxy/accounts/:provider/default', (req, res) => {
-    const { provider } = req.params;
-    const { accountId } = req.body;
-    if (!accountId) {
-        res.status(400).json({ error: 'Missing required field: accountId' });
-        return;
-    }
-    // Validate provider
-    const validProviders = ['gemini', 'codex', 'agy', 'qwen', 'iflow'];
-    if (!validProviders.includes(provider)) {
-        res.status(400).json({ error: `Invalid provider: ${provider}` });
-        return;
-    }
-    const success = (0, account_manager_1.setDefaultAccount)(provider, accountId);
-    if (success) {
-        res.json({ provider, defaultAccount: accountId });
-    }
-    else {
-        res.status(404).json({ error: 'Account not found' });
-    }
-});
-/**
- * DELETE /api/cliproxy/accounts/:provider/:accountId - Remove an account
- */
-exports.apiRoutes.delete('/cliproxy/accounts/:provider/:accountId', (req, res) => {
-    const { provider, accountId } = req.params;
-    // Validate provider
-    const validProviders = ['gemini', 'codex', 'agy', 'qwen', 'iflow'];
-    if (!validProviders.includes(provider)) {
-        res.status(400).json({ error: `Invalid provider: ${provider}` });
-        return;
-    }
-    const success = (0, account_manager_1.removeAccount)(provider, accountId);
-    if (success) {
-        res.json({ provider, accountId, deleted: true });
-    }
-    else {
-        res.status(404).json({ error: 'Account not found' });
-    }
-});
-/**
- * POST /api/cliproxy/auth/:provider/start - Start OAuth flow for a provider
- * Opens browser for authentication and returns account info when complete
- */
-exports.apiRoutes.post('/cliproxy/auth/:provider/start', async (req, res) => {
-    const { provider } = req.params;
-    const { nickname } = req.body;
-    // Validate provider
-    const validProviders = ['gemini', 'codex', 'agy', 'qwen', 'iflow'];
-    if (!validProviders.includes(provider)) {
-        res.status(400).json({ error: `Invalid provider: ${provider}` });
-        return;
-    }
-    try {
-        // Trigger OAuth flow - this opens browser and waits for completion
-        const account = await (0, auth_handler_1.triggerOAuth)(provider, {
-            add: true, // Always add mode from UI
-            headless: false, // Force interactive mode
-            nickname: nickname || undefined,
-            fromUI: true, // Enable project selection prompt in UI
-        });
-        if (account) {
-            res.json({
-                success: true,
-                account: {
-                    id: account.id,
-                    email: account.email,
-                    nickname: account.nickname,
-                    provider: account.provider,
-                    isDefault: account.isDefault,
-                },
-            });
-        }
-        else {
-            res.status(400).json({ error: 'Authentication failed or was cancelled' });
-        }
-    }
-    catch (error) {
-        res.status(500).json({ error: error.message });
-    }
-});
-/**
- * GET /api/cliproxy/auth/project-selection/:sessionId - Get pending project selection prompt
- * Returns project list for user to select from during OAuth flow
- */
-exports.apiRoutes.get('/cliproxy/auth/project-selection/:sessionId', (req, res) => {
-    const { sessionId } = req.params;
-    const pending = (0, project_selection_handler_1.getPendingSelection)(sessionId);
-    if (pending) {
-        res.json(pending);
-    }
-    else {
-        res.status(404).json({ error: 'No pending project selection for this session' });
-    }
-});
-/**
- * POST /api/cliproxy/auth/project-selection/:sessionId - Submit project selection
- * Submits user's project choice during OAuth flow
- */
-exports.apiRoutes.post('/cliproxy/auth/project-selection/:sessionId', (req, res) => {
-    const { sessionId } = req.params;
-    const { selectedId } = req.body;
-    if (!selectedId && selectedId !== '') {
-        res.status(400).json({ error: 'selectedId is required (use empty string for default)' });
-        return;
-    }
-    const success = (0, project_selection_handler_1.submitProjectSelection)({ sessionId, selectedId });
-    if (success) {
-        res.json({ success: true });
-    }
-    else {
-        res.status(404).json({ error: 'No pending project selection for this session' });
-    }
-});
-// ==================== Settings (Phase 05) ====================
-/**
- * Helper: Mask API keys in settings
- */
-function maskApiKeys(settings) {
-    if (!settings.env)
-        return settings;
-    const masked = { ...settings, env: { ...settings.env } };
-    for (const key of Object.keys(masked.env)) {
-        if ((0, sensitive_keys_1.isSensitiveKey)(key)) {
-            masked.env[key] = (0, sensitive_keys_1.maskSensitiveValue)(masked.env[key]);
-        }
-    }
-    return masked;
-}
-/**
- * GET /api/settings/:profile - Get settings with masked API keys
- */
-exports.apiRoutes.get('/settings/:profile', (req, res) => {
-    const { profile } = req.params;
-    const ccsDir = (0, config_manager_1.getCcsDir)();
-    const settingsPath = path.join(ccsDir, `${profile}.settings.json`);
-    if (!fs.existsSync(settingsPath)) {
-        res.status(404).json({ error: 'Settings not found' });
-        return;
-    }
-    const stat = fs.statSync(settingsPath);
-    const settings = (0, config_manager_1.loadSettings)(settingsPath);
-    // Mask API keys in response
-    const masked = maskApiKeys(settings);
-    res.json({
-        profile,
-        settings: masked,
-        mtime: stat.mtime.getTime(),
-        path: settingsPath,
-    });
-});
-/**
- * GET /api/settings/:profile/raw - Get full settings (for editing)
- */
-exports.apiRoutes.get('/settings/:profile/raw', (req, res) => {
-    const { profile } = req.params;
-    const ccsDir = (0, config_manager_1.getCcsDir)();
-    const settingsPath = path.join(ccsDir, `${profile}.settings.json`);
-    if (!fs.existsSync(settingsPath)) {
-        res.status(404).json({ error: 'Settings not found' });
-        return;
-    }
-    const stat = fs.statSync(settingsPath);
-    const settings = (0, config_manager_1.loadSettings)(settingsPath);
-    res.json({
-        profile,
-        settings,
-        mtime: stat.mtime.getTime(),
-        path: settingsPath,
-    });
-});
-/**
- * PUT /api/settings/:profile - Update settings with conflict detection and backup
- * Creates the settings file if it doesn't exist (upsert behavior)
- */
-exports.apiRoutes.put('/settings/:profile', (req, res) => {
-    const { profile } = req.params;
-    const { settings, expectedMtime } = req.body;
-    const ccsDir = (0, config_manager_1.getCcsDir)();
-    const settingsPath = path.join(ccsDir, `${profile}.settings.json`);
-    const fileExists = fs.existsSync(settingsPath);
-    // Only check conflict if file exists and expectedMtime was provided
-    if (fileExists && expectedMtime) {
-        const stat = fs.statSync(settingsPath);
-        if (stat.mtime.getTime() !== expectedMtime) {
-            res.status(409).json({
-                error: 'File modified externally',
-                currentMtime: stat.mtime.getTime(),
-            });
-            return;
-        }
-    }
-    // Create backup only if file exists
-    let backupPath;
-    if (fileExists) {
-        const backupDir = path.join(ccsDir, 'backups');
-        if (!fs.existsSync(backupDir)) {
-            fs.mkdirSync(backupDir, { recursive: true });
-        }
-        const timestamp = new Date().toISOString().replace(/[:.]/g, '-');
-        backupPath = path.join(backupDir, `${profile}.${timestamp}.settings.json`);
-        fs.copyFileSync(settingsPath, backupPath);
-    }
-    // Ensure directory exists for new files
-    if (!fileExists) {
-        fs.mkdirSync(path.dirname(settingsPath), { recursive: true });
-    }
-    // Write new settings atomically
-    const tempPath = settingsPath + '.tmp';
-    fs.writeFileSync(tempPath, JSON.stringify(settings, null, 2) + '\n');
-    fs.renameSync(tempPath, settingsPath);
-    const newStat = fs.statSync(settingsPath);
-    res.json({
-        profile,
-        mtime: newStat.mtime.getTime(),
-        backupPath,
-        created: !fileExists,
-    });
-});
-// ==================== Presets ====================
-/**
- * GET /api/settings/:profile/presets - Get saved presets for a provider
- */
-exports.apiRoutes.get('/settings/:profile/presets', (req, res) => {
-    const { profile } = req.params;
-    const ccsDir = (0, config_manager_1.getCcsDir)();
-    const settingsPath = path.join(ccsDir, `${profile}.settings.json`);
-    if (!fs.existsSync(settingsPath)) {
-        res.json({ presets: [] });
-        return;
-    }
-    const settings = (0, config_manager_1.loadSettings)(settingsPath);
-    res.json({ presets: settings.presets || [] });
-});
-/**
- * POST /api/settings/:profile/presets - Create a new preset
- */
-exports.apiRoutes.post('/settings/:profile/presets', (req, res) => {
-    const { profile } = req.params;
-    const { name, default: defaultModel, opus, sonnet, haiku } = req.body;
-    if (!name || !defaultModel) {
-        res.status(400).json({ error: 'Missing required fields: name, default' });
-        return;
-    }
-    const ccsDir = (0, config_manager_1.getCcsDir)();
-    const settingsPath = path.join(ccsDir, `${profile}.settings.json`);
-    // Create settings file if it doesn't exist
-    if (!fs.existsSync(settingsPath)) {
-        fs.writeFileSync(settingsPath, JSON.stringify({ env: {}, presets: [] }, null, 2) + '\n');
-    }
-    const settings = (0, config_manager_1.loadSettings)(settingsPath);
-    settings.presets = settings.presets || [];
-    // Check for duplicate name
-    if (settings.presets.some((p) => p.name === name)) {
-        res.status(409).json({ error: 'Preset with this name already exists' });
-        return;
-    }
-    const preset = {
-        name,
-        default: defaultModel,
-        opus: opus || defaultModel,
-        sonnet: sonnet || defaultModel,
-        haiku: haiku || defaultModel,
-    };
-    settings.presets.push(preset);
-    fs.writeFileSync(settingsPath, JSON.stringify(settings, null, 2) + '\n');
-    res.status(201).json({ preset });
-});
-/**
- * DELETE /api/settings/:profile/presets/:name - Delete a preset
- */
-exports.apiRoutes.delete('/settings/:profile/presets/:name', (req, res) => {
-    const { profile, name } = req.params;
-    const ccsDir = (0, config_manager_1.getCcsDir)();
-    const settingsPath = path.join(ccsDir, `${profile}.settings.json`);
-    if (!fs.existsSync(settingsPath)) {
-        res.status(404).json({ error: 'Settings not found' });
-        return;
-    }
-    const settings = (0, config_manager_1.loadSettings)(settingsPath);
-    if (!settings.presets || !settings.presets.some((p) => p.name === name)) {
-        res.status(404).json({ error: 'Preset not found' });
-        return;
-    }
-    settings.presets = settings.presets.filter((p) => p.name !== name);
-    fs.writeFileSync(settingsPath, JSON.stringify(settings, null, 2) + '\n');
-    res.json({ success: true });
-});
-// ==================== Accounts ====================
-/**
- * GET /api/accounts - List accounts from profiles.json
- */
-exports.apiRoutes.get('/accounts', (_req, res) => {
-    const profilesPath = path.join((0, config_manager_1.getCcsDir)(), 'profiles.json');
-    if (!fs.existsSync(profilesPath)) {
-        res.json({ accounts: [], default: null });
-        return;
-    }
-    const data = JSON.parse(fs.readFileSync(profilesPath, 'utf8'));
-    const accounts = Object.entries(data.profiles || {}).map(([name, meta]) => {
-        // Type-safe handling of metadata
-        const metadata = meta;
-        return {
-            name,
-            ...metadata,
-        };
-    });
-    res.json({ accounts, default: data.default || null });
-});
-/**
- * POST /api/accounts/default - Set default account
- */
-exports.apiRoutes.post('/accounts/default', (req, res) => {
-    const { name } = req.body;
-    if (!name) {
-        res.status(400).json({ error: 'Missing required field: name' });
-        return;
-    }
-    const profilesPath = path.join((0, config_manager_1.getCcsDir)(), 'profiles.json');
-    const data = fs.existsSync(profilesPath)
-        ? JSON.parse(fs.readFileSync(profilesPath, 'utf8'))
-        : { profiles: {} };
-    data.default = name;
-    fs.writeFileSync(profilesPath, JSON.stringify(data, null, 2) + '\n');
-    res.json({ default: name });
-});
-// ==================== Health (Phase 06) ====================
-/**
- * GET /api/health - Run health checks
- */
-exports.apiRoutes.get('/health', async (_req, res) => {
-    const report = await (0, health_service_1.runHealthChecks)();
-    res.json(report);
-});
-/**
- * POST /api/health/fix/:checkId - Fix a health issue
- */
-exports.apiRoutes.post('/health/fix/:checkId', (req, res) => {
-    const { checkId } = req.params;
-    const result = (0, health_service_1.fixHealthIssue)(checkId);
-    if (result.success) {
-        res.json({ success: true, message: result.message });
-    }
-    else {
-        res.status(400).json({ success: false, message: result.message });
-    }
-});
-// ==================== Unified Config (Phase 5) ====================
-/**
- * GET /api/config/format - Return current config format and migration status
- */
-exports.apiRoutes.get('/config/format', (_req, res) => {
-    res.json({
-        format: (0, unified_config_loader_1.getConfigFormat)(),
-        migrationNeeded: (0, migration_manager_1.needsMigration)(),
-        backups: (0, migration_manager_1.getBackupDirectories)(),
-    });
-});
-/**
- * GET /api/config - Return unified config (excludes secrets)
- */
-exports.apiRoutes.get('/config', (_req, res) => {
-    if (!(0, unified_config_loader_1.hasUnifiedConfig)()) {
-        res.status(400).json({ error: 'Unified config not enabled' });
-        return;
-    }
-    const config = (0, unified_config_loader_1.loadUnifiedConfig)();
-    if (!config) {
-        res.status(500).json({ error: 'Failed to load config' });
-        return;
-    }
-    res.json(config);
-});
-/**
- * GET /api/config/raw - Return raw YAML content for display
- */
-exports.apiRoutes.get('/config/raw', (_req, res) => {
-    const yamlPath = (0, unified_config_loader_1.getConfigYamlPath)();
-    if (!fs.existsSync(yamlPath)) {
-        res.status(404).json({ error: 'Config file not found' });
-        return;
-    }
-    try {
-        const content = fs.readFileSync(yamlPath, 'utf8');
-        res.type('text/plain').send(content);
-    }
-    catch (err) {
-        res.status(500).json({ error: err.message });
-    }
-});
-/**
- * PUT /api/config - Update unified config
- */
-exports.apiRoutes.put('/config', (req, res) => {
-    const config = req.body;
-    if (!(0, unified_config_types_1.isUnifiedConfig)(config)) {
-        res.status(400).json({ error: 'Invalid config format' });
-        return;
-    }
-    try {
-        (0, unified_config_loader_1.saveUnifiedConfig)(config);
-        res.json({ success: true });
-    }
-    catch (err) {
-        res.status(500).json({ error: err.message });
-    }
-});
-/**
- * POST /api/config/migrate - Trigger migration from JSON to YAML
- */
-exports.apiRoutes.post('/config/migrate', async (req, res) => {
-    const dryRun = req.query.dryRun === 'true';
-    const result = await (0, migration_manager_1.migrate)(dryRun);
-    res.json(result);
-});
-/**
- * POST /api/config/rollback - Rollback migration to JSON format
- */
-exports.apiRoutes.post('/config/rollback', async (req, res) => {
-    const { backupPath } = req.body;
-    if (!backupPath || typeof backupPath !== 'string') {
-        res.status(400).json({ error: 'Missing required field: backupPath' });
-        return;
-    }
-    const success = await (0, migration_manager_1.rollback)(backupPath);
-    res.json({ success });
-});
-/**
- * PUT /api/secrets/:profile - Update profile secrets (write-only)
- */
-exports.apiRoutes.put('/secrets/:profile', (req, res) => {
-    const { profile } = req.params;
-    const secrets = req.body;
-    if (!secrets || typeof secrets !== 'object') {
-        res.status(400).json({ error: 'Invalid secrets format' });
-        return;
-    }
-    try {
-        (0, secrets_manager_1.setProfileSecrets)(profile, secrets);
-        res.json({ success: true });
-    }
-    catch (err) {
-        res.status(500).json({ error: err.message });
-    }
-});
-/**
- * GET /api/secrets/:profile/exists - Check if secrets exist (no values returned)
- */
-exports.apiRoutes.get('/secrets/:profile/exists', (req, res) => {
-    const { profile } = req.params;
-    const secrets = (0, secrets_manager_1.getProfileSecrets)(profile);
-    res.json({
-        exists: Object.keys(secrets).length > 0,
-        keys: Object.keys(secrets), // Only key names, not values
-    });
-});
-// ==================== Generic File API (Issue #73) ====================
-/**
- * Security: Validate file path is within allowed directories
- * - ~/.ccs/ directory: read/write allowed
- * - ~/.claude/settings.json: read-only
- */
-function validateFilePath(filePath) {
-    const expandedPath = (0, helpers_1.expandPath)(filePath);
-    const normalizedPath = path.normalize(expandedPath);
-    const ccsDir = (0, config_manager_1.getCcsDir)();
-    const claudeSettingsPath = (0, helpers_1.expandPath)('~/.claude/settings.json');
-    // Check if path is within ~/.ccs/
-    if (normalizedPath.startsWith(ccsDir)) {
-        // Block access to sensitive subdirectories
-        const relativePath = normalizedPath.slice(ccsDir.length);
-        if (relativePath.includes('/.git/') || relativePath.includes('/node_modules/')) {
-            return { valid: false, readonly: false, error: 'Access to this path is not allowed' };
-        }
-        return { valid: true, readonly: false };
-    }
-    // Allow read-only access to ~/.claude/settings.json
-    if (normalizedPath === claudeSettingsPath) {
-        return { valid: true, readonly: true };
-    }
-    return { valid: false, readonly: false, error: 'Access to this path is not allowed' };
-}
-/**
- * GET /api/file - Read a file with path validation
- * Query params: path (required)
- * Returns: { content: string, mtime: number, readonly: boolean, path: string }
- */
-exports.apiRoutes.get('/file', (req, res) => {
-    const filePath = req.query.path;
-    if (!filePath) {
-        res.status(400).json({ error: 'Missing required query parameter: path' });
-        return;
-    }
-    const validation = validateFilePath(filePath);
-    if (!validation.valid) {
-        res.status(403).json({ error: validation.error });
-        return;
-    }
-    const expandedPath = (0, helpers_1.expandPath)(filePath);
-    if (!fs.existsSync(expandedPath)) {
-        res.status(404).json({ error: 'File not found' });
-        return;
-    }
-    try {
-        const stat = fs.statSync(expandedPath);
-        const content = fs.readFileSync(expandedPath, 'utf8');
-        res.json({
-            content,
-            mtime: stat.mtime.getTime(),
-            readonly: validation.readonly,
-            path: expandedPath,
-        });
-    }
-    catch (error) {
-        res.status(500).json({ error: error.message });
-    }
-});
-/**
- * PUT /api/file - Write a file with conflict detection and backup
- * Query params: path (required)
- * Body: { content: string, expectedMtime?: number }
- * Returns: { success: true, mtime: number, backupPath?: string }
- */
-exports.apiRoutes.put('/file', (req, res) => {
-    const filePath = req.query.path;
-    const { content, expectedMtime } = req.body;
-    if (!filePath) {
-        res.status(400).json({ error: 'Missing required query parameter: path' });
-        return;
-    }
-    if (typeof content !== 'string') {
-        res.status(400).json({ error: 'Missing required field: content' });
-        return;
-    }
-    const validation = validateFilePath(filePath);
-    if (!validation.valid) {
-        res.status(403).json({ error: validation.error });
-        return;
-    }
-    if (validation.readonly) {
-        res.status(403).json({ error: 'File is read-only' });
-        return;
-    }
-    const expandedPath = (0, helpers_1.expandPath)(filePath);
-    const ccsDir = (0, config_manager_1.getCcsDir)();
-    // Conflict detection (if file exists and expectedMtime provided)
-    if (fs.existsSync(expandedPath) && expectedMtime !== undefined) {
-        const stat = fs.statSync(expandedPath);
-        if (stat.mtime.getTime() !== expectedMtime) {
-            res.status(409).json({
-                error: 'File modified externally',
-                currentMtime: stat.mtime.getTime(),
-            });
-            return;
-        }
-    }
-    try {
-        // Create backup if file exists
-        let backupPath;
-        if (fs.existsSync(expandedPath)) {
-            const backupDir = path.join(ccsDir, 'backups');
-            if (!fs.existsSync(backupDir)) {
-                fs.mkdirSync(backupDir, { recursive: true });
-            }
-            const filename = path.basename(expandedPath);
-            const timestamp = new Date().toISOString().replace(/[:.]/g, '-');
-            backupPath = path.join(backupDir, `${filename}.${timestamp}.bak`);
-            fs.copyFileSync(expandedPath, backupPath);
-        }
-        // Ensure parent directory exists
-        const parentDir = path.dirname(expandedPath);
-        if (!fs.existsSync(parentDir)) {
-            fs.mkdirSync(parentDir, { recursive: true });
-        }
-        // Write atomically
-        const tempPath = expandedPath + '.tmp';
-        fs.writeFileSync(tempPath, content);
-        fs.renameSync(tempPath, expandedPath);
-        const newStat = fs.statSync(expandedPath);
-        res.json({
-            success: true,
-            mtime: newStat.mtime.getTime(),
-            backupPath,
-        });
-    }
-    catch (error) {
-        res.status(500).json({ error: error.message });
-    }
-});
-/**
- * GET /api/files - List editable files in ~/.ccs/
- * Returns: { files: Array<{ name: string, path: string, mtime: number }> }
- */
-exports.apiRoutes.get('/files', (_req, res) => {
-    const ccsDir = (0, config_manager_1.getCcsDir)();
-    if (!fs.existsSync(ccsDir)) {
-        res.json({ files: [] });
-        return;
-    }
-    try {
-        const entries = fs.readdirSync(ccsDir, { withFileTypes: true });
-        const files = entries
-            .filter((entry) => entry.isFile() && entry.name.endsWith('.json'))
-            .map((entry) => {
-            const filePath = path.join(ccsDir, entry.name);
-            const stat = fs.statSync(filePath);
-            return {
-                name: entry.name,
-                path: `~/.ccs/${entry.name}`,
-                mtime: stat.mtime.getTime(),
-            };
-        })
-            .sort((a, b) => a.name.localeCompare(b.name));
-        res.json({ files });
-    }
-    catch (error) {
-        res.status(500).json({ error: error.message });
-    }
-});
-/**
- * GET /api/cliproxy/stats - Get CLIProxyAPI usage statistics
- * Returns: CliproxyStats or error if proxy not running
- */
-exports.apiRoutes.get('/cliproxy/stats', async (_req, res) => {
-    try {
-        // Check if proxy is running first
-        const running = await (0, stats_fetcher_1.isCliproxyRunning)();
-        if (!running) {
-            res.status(503).json({
-                error: 'CLIProxyAPI not running',
-                message: 'Start a CLIProxy session (gemini, codex, agy) to collect stats',
-            });
-            return;
-        }
-        // Fetch stats from management API
-        const stats = await (0, stats_fetcher_1.fetchCliproxyStats)();
-        if (!stats) {
-            res.status(503).json({
-                error: 'Stats unavailable',
-                message: 'CLIProxyAPI is running but stats endpoint not responding',
-            });
-            return;
-        }
-        res.json(stats);
-    }
-    catch (error) {
-        res.status(500).json({ error: error.message });
-    }
-});
-/**
- * GET /api/cliproxy/status - Check CLIProxyAPI running status
- * Returns: { running: boolean }
- */
-exports.apiRoutes.get('/cliproxy/status', async (_req, res) => {
-    try {
-        const running = await (0, stats_fetcher_1.isCliproxyRunning)();
-        res.json({ running });
-    }
-    catch (error) {
-        res.status(500).json({ error: error.message });
-    }
-});
-/**
- * GET /api/cliproxy/proxy-status - Get detailed proxy process status
- * Returns: { running, port?, pid?, sessionCount?, startedAt? }
- * Combines session tracker data with actual port check for accuracy
- */
-exports.apiRoutes.get('/cliproxy/proxy-status', async (_req, res) => {
-    try {
-        // First check session tracker for detailed info
-        const sessionStatus = (0, session_tracker_1.getProxyStatus)();
-        // If session tracker says running, trust it
-        if (sessionStatus.running) {
-            res.json(sessionStatus);
-            return;
-        }
-        // Session tracker says not running, but proxy might be running without session tracking
-        // (e.g., started before session persistence was implemented)
-        const actuallyRunning = await (0, stats_fetcher_1.isCliproxyRunning)();
-        if (actuallyRunning) {
-            // Proxy running but no session lock - legacy/untracked instance
-            res.json({
-                running: true,
-                port: 8317, // Default port
-                sessionCount: 0, // Unknown sessions
-                // No pid/startedAt since we don't have session lock
-            });
-        }
-        else {
-            res.json(sessionStatus);
-        }
-    }
-    catch (error) {
-        res.status(500).json({ error: error.message });
-    }
-});
-/**
- * POST /api/cliproxy/proxy-start - Start the CLIProxy service
- * Returns: { started, alreadyRunning, port, error? }
- * Starts proxy in background if not already running
- */
-exports.apiRoutes.post('/cliproxy/proxy-start', async (_req, res) => {
-    try {
-        const result = await (0, service_manager_1.ensureCliproxyService)();
-        res.json(result);
-    }
-    catch (error) {
-        res.status(500).json({ error: error.message });
-    }
-});
-/**
- * POST /api/cliproxy/proxy-stop - Stop the CLIProxy service
- * Returns: { stopped, pid?, sessionCount?, error? }
- */
-exports.apiRoutes.post('/cliproxy/proxy-stop', async (_req, res) => {
-    try {
-        const result = await (0, session_tracker_1.stopProxy)();
-        res.json(result);
-    }
-    catch (error) {
-        res.status(500).json({ error: error.message });
-    }
-});
-/**
- * GET /api/cliproxy/update-check - Check for CLIProxyAPI binary updates
- * Returns: { hasUpdate, currentVersion, latestVersion, fromCache }
- */
-exports.apiRoutes.get('/cliproxy/update-check', async (_req, res) => {
-    try {
-        const result = await (0, binary_manager_1.checkCliproxyUpdate)();
-        res.json(result);
-    }
-    catch (error) {
-        res.status(500).json({ error: error.message });
-    }
-});
-/**
- * GET /api/cliproxy/models - Get available models from CLIProxyAPI
- * Returns: { models: CliproxyModel[], byCategory: Record<string, CliproxyModel[]>, totalCount: number }
- */
-exports.apiRoutes.get('/cliproxy/models', async (_req, res) => {
-    try {
-        // Check if proxy is running first
-        const running = await (0, stats_fetcher_1.isCliproxyRunning)();
-        if (!running) {
-            res.status(503).json({
-                error: 'CLIProxyAPI not running',
-                message: 'Start a CLIProxy session (gemini, codex, agy) to fetch available models',
-            });
-            return;
-        }
-        // Fetch models from /v1/models endpoint
-        const modelsResponse = await (0, stats_fetcher_1.fetchCliproxyModels)();
-        if (!modelsResponse) {
-            res.status(503).json({
-                error: 'Models unavailable',
-                message: 'CLIProxyAPI is running but /v1/models endpoint not responding',
-            });
-            return;
-        }
-        res.json(modelsResponse);
-    }
-    catch (error) {
-        res.status(500).json({ error: error.message });
-    }
-});
-// ==================== Error Logs ====================
-/**
- * GET /api/cliproxy/error-logs - Get list of error log files
- * Returns: { files: CliproxyErrorLog[] } or error if proxy not running
- */
-exports.apiRoutes.get('/cliproxy/error-logs', async (_req, res) => {
-    try {
-        const running = await (0, stats_fetcher_1.isCliproxyRunning)();
-        if (!running) {
-            res.status(503).json({
-                error: 'CLIProxyAPI not running',
-                message: 'Start a CLIProxy session to view error logs',
-            });
-            return;
-        }
-        const files = await (0, stats_fetcher_1.fetchCliproxyErrorLogs)();
-        if (files === null) {
-            res.status(503).json({
-                error: 'Error logs unavailable',
-                message: 'CLIProxyAPI is running but error logs endpoint not responding',
-            });
-            return;
-        }
-        // Inject absolute paths into each file entry
-        const logsDir = path.join((0, config_generator_1.getCliproxyWritablePath)(), 'logs');
-        const filesWithPaths = files.map((file) => ({
-            ...file,
-            absolutePath: path.join(logsDir, file.name),
-        }));
-        res.json({ files: filesWithPaths });
-    }
-    catch (error) {
-        res.status(500).json({ error: error.message });
-    }
-});
-/**
- * GET /api/cliproxy/error-logs/:name - Get content of a specific error log
- * Returns: plain text log content
- */
-exports.apiRoutes.get('/cliproxy/error-logs/:name', async (req, res) => {
-    const { name } = req.params;
-    // Validate filename format and prevent path traversal
-    if (!name ||
-        !name.startsWith('error-') ||
-        !name.endsWith('.log') ||
-        name.includes('..') ||
-        name.includes('/') ||
-        name.includes('\\')) {
-        res.status(400).json({ error: 'Invalid error log filename' });
-        return;
-    }
-    try {
-        const running = await (0, stats_fetcher_1.isCliproxyRunning)();
-        if (!running) {
-            res.status(503).json({ error: 'CLIProxyAPI not running' });
-            return;
-        }
-        const content = await (0, stats_fetcher_1.fetchCliproxyErrorLogContent)(name);
-        if (content === null) {
-            res.status(404).json({ error: 'Error log not found' });
-            return;
-        }
-        res.type('text/plain').send(content);
-    }
-    catch (error) {
-        res.status(500).json({ error: error.message });
-    }
-});
-// ============================================
-// OpenAI Compatibility Layer Routes
-// ============================================
-/**
- * GET /api/cliproxy/openai-compat - List all OpenAI-compatible providers
- */
-exports.apiRoutes.get('/cliproxy/openai-compat', (_req, res) => {
-    try {
-        const providers = (0, openai_compat_manager_1.listOpenAICompatProviders)();
-        // Mask API keys for security
-        const masked = providers.map((p) => ({
-            ...p,
-            apiKey: p.apiKey ? `...${p.apiKey.slice(-4)}` : '',
-        }));
-        res.json({ providers: masked });
-    }
-    catch (error) {
-        res.status(500).json({ error: error.message });
-    }
-});
-/**
- * GET /api/cliproxy/openai-compat/templates - Get pre-configured provider templates
- */
-exports.apiRoutes.get('/cliproxy/openai-compat/templates', (_req, res) => {
-    res.json({
-        templates: [
-            { ...openai_compat_manager_1.OPENROUTER_TEMPLATE, description: 'OpenRouter - Access multiple AI models' },
-            { ...openai_compat_manager_1.TOGETHER_TEMPLATE, description: 'Together AI - Open source models' },
-        ],
-    });
-});
-/**
- * GET /api/cliproxy/openai-compat/:name - Get a specific provider
- */
-exports.apiRoutes.get('/cliproxy/openai-compat/:name', (req, res) => {
-    try {
-        const provider = (0, openai_compat_manager_1.getOpenAICompatProvider)(req.params.name);
-        if (!provider) {
-            res.status(404).json({ error: `Provider '${req.params.name}' not found` });
-            return;
-        }
-        // Mask API key
-        res.json({
-            ...provider,
-            apiKey: provider.apiKey ? `...${provider.apiKey.slice(-4)}` : '',
-        });
-    }
-    catch (error) {
-        res.status(500).json({ error: error.message });
-    }
-});
-/**
- * POST /api/cliproxy/openai-compat - Add a new provider
- * Body: { name, baseUrl, apiKey, models: [{ name, alias }] }
- */
-exports.apiRoutes.post('/cliproxy/openai-compat', (req, res) => {
-    try {
-        const { name, baseUrl, apiKey, models } = req.body;
-        // Validation
-        if (!name || typeof name !== 'string') {
-            res.status(400).json({ error: 'name is required' });
-            return;
-        }
-        // Validate reserved names
-        if ((0, reserved_names_1.isReservedName)(name)) {
-            res.status(400).json({
-                error: `Provider name '${name}' is reserved`,
-                reserved: reserved_names_1.RESERVED_PROFILE_NAMES,
-            });
-            return;
-        }
-        if (!baseUrl || typeof baseUrl !== 'string') {
-            res.status(400).json({ error: 'baseUrl is required' });
-            return;
-        }
-        if (!apiKey || typeof apiKey !== 'string') {
-            res.status(400).json({ error: 'apiKey is required' });
-            return;
-        }
-        (0, openai_compat_manager_1.addOpenAICompatProvider)({
-            name,
-            baseUrl,
-            apiKey,
-            models: models || [],
-        });
-        res.status(201).json({ success: true, name });
-    }
-    catch (error) {
-        const message = error.message;
-        if (message.includes('already exists')) {
-            res.status(409).json({ error: message });
-        }
-        else {
-            res.status(500).json({ error: message });
-        }
-    }
-});
-/**
- * PUT /api/cliproxy/openai-compat/:name - Update a provider
- * Body: { baseUrl?, apiKey?, models?, name? (for rename) }
- */
-exports.apiRoutes.put('/cliproxy/openai-compat/:name', (req, res) => {
-    try {
-        const { baseUrl, apiKey, models, name: newName } = req.body;
-        (0, openai_compat_manager_1.updateOpenAICompatProvider)(req.params.name, {
-            baseUrl,
-            apiKey,
-            models,
-            name: newName,
-        });
-        res.json({ success: true });
-    }
-    catch (error) {
-        const message = error.message;
-        if (message.includes('not found')) {
-            res.status(404).json({ error: message });
-        }
-        else {
-            res.status(500).json({ error: message });
-        }
-    }
-});
-/**
- * DELETE /api/cliproxy/openai-compat/:name - Remove a provider
- */
-exports.apiRoutes.delete('/cliproxy/openai-compat/:name', (req, res) => {
-    try {
-        const removed = (0, openai_compat_manager_1.removeOpenAICompatProvider)(req.params.name);
-        if (!removed) {
-            res.status(404).json({ error: `Provider '${req.params.name}' not found` });
-            return;
-        }
-        res.json({ success: true });
-    }
-    catch (error) {
-        res.status(500).json({ error: error.message });
-    }
-});
-// ==================== WebSearch Configuration ====================
-/**
- * GET /api/websearch - Get WebSearch configuration
- * Returns: WebSearchConfig with enabled, provider, fallback
- */
-exports.apiRoutes.get('/websearch', (_req, res) => {
-    try {
-        const config = (0, unified_config_loader_2.getWebSearchConfig)();
-        res.json(config);
-    }
-    catch (error) {
-        res.status(500).json({ error: error.message });
-    }
-});
-/**
- * PUT /api/websearch - Update WebSearch configuration
- * Body: WebSearchConfig fields (enabled, providers)
- * Dashboard is the source of truth for provider selection.
- */
-exports.apiRoutes.put('/websearch', (req, res) => {
-    const { enabled, providers } = req.body;
-    // Validate enabled
-    if (enabled !== undefined && typeof enabled !== 'boolean') {
-        res.status(400).json({ error: 'Invalid value for enabled. Must be a boolean.' });
-        return;
-    }
-    // Validate providers if specified
-    if (providers !== undefined && typeof providers !== 'object') {
-        res.status(400).json({ error: 'Invalid value for providers. Must be an object.' });
-        return;
-    }
-    try {
-        // Load existing config and update websearch section
-        const existingConfig = (0, unified_config_loader_1.loadUnifiedConfig)();
-        if (!existingConfig) {
-            res.status(500).json({ error: 'Failed to load config' });
-            return;
-        }
-        // Merge updates - supports Gemini CLI and Grok CLI
-        existingConfig.websearch = {
-            enabled: enabled ?? existingConfig.websearch?.enabled ?? true,
-            providers: providers
-                ? {
-                    gemini: {
-                        enabled: providers.gemini?.enabled ??
-                            existingConfig.websearch?.providers?.gemini?.enabled ??
-                            true,
-                        model: providers.gemini?.model ??
-                            existingConfig.websearch?.providers?.gemini?.model ??
-                            'gemini-2.5-flash',
-                        timeout: providers.gemini?.timeout ??
-                            existingConfig.websearch?.providers?.gemini?.timeout ??
-                            55,
-                    },
-                    grok: {
-                        enabled: providers.grok?.enabled ??
-                            existingConfig.websearch?.providers?.grok?.enabled ??
-                            false,
-                        timeout: providers.grok?.timeout ?? existingConfig.websearch?.providers?.grok?.timeout ?? 55,
-                    },
-                    opencode: {
-                        enabled: providers.opencode?.enabled ??
-                            existingConfig.websearch?.providers?.opencode?.enabled ??
-                            false,
-                        model: providers.opencode?.model ??
-                            existingConfig.websearch?.providers?.opencode?.model ??
-                            'opencode/grok-code',
-                        timeout: providers.opencode?.timeout ??
-                            existingConfig.websearch?.providers?.opencode?.timeout ??
-                            60,
-                    },
-                }
-                : existingConfig.websearch?.providers,
-        };
-        (0, unified_config_loader_1.saveUnifiedConfig)(existingConfig);
-        res.json({
-            success: true,
-            websearch: existingConfig.websearch,
-        });
-    }
-    catch (error) {
-        res.status(500).json({ error: error.message });
-    }
-});
-/**
- * GET /api/websearch/status - Get WebSearch status
- * Returns: { geminiCli, grokCli, opencodeCli, readiness }
- */
-exports.apiRoutes.get('/websearch/status', (_req, res) => {
-    try {
-        const geminiCli = (0, websearch_manager_1.getGeminiCliStatus)();
-        const grokCli = (0, websearch_manager_1.getGrokCliStatus)();
-        const opencodeCli = (0, websearch_manager_1.getOpenCodeCliStatus)();
-        const readiness = (0, websearch_manager_1.getWebSearchReadiness)();
-        res.json({
-            geminiCli: {
-                installed: geminiCli.installed,
-                path: geminiCli.path,
-                version: geminiCli.version,
-            },
-            grokCli: {
-                installed: grokCli.installed,
-                path: grokCli.path,
-                version: grokCli.version,
-            },
-            opencodeCli: {
-                installed: opencodeCli.installed,
-                path: opencodeCli.path,
-                version: opencodeCli.version,
-            },
-            readiness: {
-                status: readiness.readiness,
-                message: readiness.message,
-            },
-        });
-    }
-    catch (error) {
-        res.status(500).json({ error: error.message });
-    }
-});
-// ============================================================================
-// COPILOT API ROUTES
-// GitHub Copilot integration via copilot-api proxy
-// ============================================================================
-const copilot_1 = require("../copilot");
-const unified_config_types_2 = require("../config/unified-config-types");
-const unified_config_loader_3 = require("../config/unified-config-loader");
-/**
- * GET /api/copilot/status - Get Copilot status (auth + daemon + install info)
- */
-exports.apiRoutes.get('/copilot/status', async (_req, res) => {
-    try {
-        const config = (0, unified_config_loader_3.loadOrCreateUnifiedConfig)();
-        const copilotConfig = config.copilot ?? unified_config_types_2.DEFAULT_COPILOT_CONFIG;
-        const status = await (0, copilot_1.getCopilotStatus)(copilotConfig);
-        const installed = (0, copilot_1.isCopilotApiInstalled)();
-        const version = (0, copilot_1.getInstalledVersion)();
-        res.json({
-            enabled: copilotConfig.enabled,
-            installed,
-            version,
-            authenticated: status.auth.authenticated,
-            daemon_running: status.daemon.running,
-            port: copilotConfig.port,
-            model: copilotConfig.model,
-            account_type: copilotConfig.account_type,
-            auto_start: copilotConfig.auto_start,
-            rate_limit: copilotConfig.rate_limit,
-            wait_on_limit: copilotConfig.wait_on_limit,
-        });
-    }
-    catch (error) {
-        res.status(500).json({ error: error.message });
-    }
-});
-/**
- * GET /api/copilot/config - Get Copilot configuration
- */
-exports.apiRoutes.get('/copilot/config', (_req, res) => {
-    try {
-        const config = (0, unified_config_loader_3.loadOrCreateUnifiedConfig)();
-        const copilotConfig = config.copilot ?? unified_config_types_2.DEFAULT_COPILOT_CONFIG;
-        res.json(copilotConfig);
-    }
-    catch (error) {
-        res.status(500).json({ error: error.message });
-    }
-});
-/**
- * PUT /api/copilot/config - Update Copilot configuration
- */
-exports.apiRoutes.put('/copilot/config', (req, res) => {
-    try {
-        const updates = req.body;
-        const config = (0, unified_config_loader_3.loadOrCreateUnifiedConfig)();
-        // Merge updates with existing config
-        config.copilot = {
-            enabled: updates.enabled ?? config.copilot?.enabled ?? unified_config_types_2.DEFAULT_COPILOT_CONFIG.enabled,
-            auto_start: updates.auto_start ?? config.copilot?.auto_start ?? unified_config_types_2.DEFAULT_COPILOT_CONFIG.auto_start,
-            port: updates.port ?? config.copilot?.port ?? unified_config_types_2.DEFAULT_COPILOT_CONFIG.port,
-            account_type: updates.account_type ?? config.copilot?.account_type ?? unified_config_types_2.DEFAULT_COPILOT_CONFIG.account_type,
-            rate_limit: updates.rate_limit !== undefined
-                ? updates.rate_limit
-                : (config.copilot?.rate_limit ?? unified_config_types_2.DEFAULT_COPILOT_CONFIG.rate_limit),
-            wait_on_limit: updates.wait_on_limit ??
-                config.copilot?.wait_on_limit ??
-                unified_config_types_2.DEFAULT_COPILOT_CONFIG.wait_on_limit,
-            model: updates.model ?? config.copilot?.model ?? unified_config_types_2.DEFAULT_COPILOT_CONFIG.model,
-            // Model mapping for opus/sonnet/haiku tiers
-            opus_model: updates.opus_model !== undefined ? updates.opus_model : config.copilot?.opus_model,
-            sonnet_model: updates.sonnet_model !== undefined ? updates.sonnet_model : config.copilot?.sonnet_model,
-            haiku_model: updates.haiku_model !== undefined ? updates.haiku_model : config.copilot?.haiku_model,
-        };
-        (0, unified_config_loader_1.saveUnifiedConfig)(config);
-        res.json({ success: true, copilot: config.copilot });
-    }
-    catch (error) {
-        res.status(500).json({ error: error.message });
-    }
-});
-/**
- * POST /api/copilot/auth/start - Start GitHub OAuth flow
- * Note: This is a long-running operation that opens browser
- */
-exports.apiRoutes.post('/copilot/auth/start', async (_req, res) => {
-    try {
-        const result = await (0, copilot_1.startAuthFlow)();
-        res.json(result);
-    }
-    catch (error) {
-        res.status(500).json({ error: error.message });
-    }
-});
-/**
- * GET /api/copilot/auth/status - Get auth status only
- */
-exports.apiRoutes.get('/copilot/auth/status', async (_req, res) => {
-    try {
-        const status = await (0, copilot_1.checkAuthStatus)();
-        res.json(status);
-    }
-    catch (error) {
-        res.status(500).json({ error: error.message });
-    }
-});
-/**
- * GET /api/copilot/models - Get available models
- */
-exports.apiRoutes.get('/copilot/models', async (_req, res) => {
-    try {
-        const config = (0, unified_config_loader_3.loadOrCreateUnifiedConfig)();
-        const port = config.copilot?.port ?? unified_config_types_2.DEFAULT_COPILOT_CONFIG.port;
-        const currentModel = config.copilot?.model ?? unified_config_types_2.DEFAULT_COPILOT_CONFIG.model;
-        const models = await (0, copilot_1.getAvailableModels)(port);
-        // Mark current model
-        const modelsWithCurrent = models.map((m) => ({
-            ...m,
-            isCurrent: m.id === currentModel,
-        }));
-        res.json({ models: modelsWithCurrent, current: currentModel });
-    }
-    catch (error) {
-        res.status(500).json({ error: error.message });
-    }
-});
-/**
- * POST /api/copilot/daemon/start - Start copilot-api daemon
- */
-exports.apiRoutes.post('/copilot/daemon/start', async (_req, res) => {
-    try {
-        const config = (0, unified_config_loader_3.loadOrCreateUnifiedConfig)();
-        const copilotConfig = config.copilot ?? unified_config_types_2.DEFAULT_COPILOT_CONFIG;
-        const result = await (0, copilot_1.startDaemon)(copilotConfig);
-        res.json(result);
-    }
-    catch (error) {
-        res.status(500).json({ error: error.message });
-    }
-});
-/**
- * POST /api/copilot/daemon/stop - Stop copilot-api daemon
- */
-exports.apiRoutes.post('/copilot/daemon/stop', async (_req, res) => {
-    try {
-        const result = await (0, copilot_1.stopDaemon)();
-        res.json(result);
-    }
-    catch (error) {
-        res.status(500).json({ error: error.message });
-    }
-});
-/**
- * POST /api/copilot/install - Install copilot-api
- * Auto-installs latest version or specific version if provided
- */
-exports.apiRoutes.post('/copilot/install', async (req, res) => {
-    try {
-        const { version } = req.body || {};
-        if (version) {
-            // Install specific version
-            await (0, copilot_1.installCopilotApiVersion)(version);
-        }
-        else {
-            // Install latest version
-            await (0, copilot_1.ensureCopilotApi)();
-        }
-        const info = (0, copilot_1.getCopilotApiInfo)();
-        res.json({
-            success: true,
-            installed: info.installed,
-            version: info.version,
-            path: info.path,
-        });
-    }
-    catch (error) {
-        res.status(500).json({ error: error.message });
-    }
-});
-/**
- * GET /api/copilot/info - Get copilot-api installation info
- */
-exports.apiRoutes.get('/copilot/info', (_req, res) => {
-    try {
-        const info = (0, copilot_1.getCopilotApiInfo)();
-        res.json(info);
-    }
-    catch (error) {
-        res.status(500).json({ error: error.message });
-    }
-});
-/**
- * GET /api/copilot/settings/raw - Get raw copilot.settings.json
- * Returns the raw JSON content for editing in the code editor
- */
-exports.apiRoutes.get('/copilot/settings/raw', (_req, res) => {
-    try {
-        const settingsPath = path.join((0, config_manager_1.getCcsDir)(), 'copilot.settings.json');
-        const config = (0, unified_config_loader_3.loadOrCreateUnifiedConfig)();
-        const copilotConfig = config.copilot ?? unified_config_types_2.DEFAULT_COPILOT_CONFIG;
-        // Default model for all tiers
-        const defaultModel = copilotConfig.model;
-        // If file doesn't exist, return default structure with all model mappings
-        if (!fs.existsSync(settingsPath)) {
-            // Create settings structure matching CLIProxy pattern - always include all model mappings
-            // Use 127.0.0.1 instead of localhost for more reliable local connections
-            const defaultSettings = {
-                env: {
-                    ANTHROPIC_BASE_URL: `http://127.0.0.1:${copilotConfig.port}`,
-                    ANTHROPIC_AUTH_TOKEN: 'copilot-managed',
-                    ANTHROPIC_MODEL: defaultModel,
-                    ANTHROPIC_DEFAULT_OPUS_MODEL: copilotConfig.opus_model || defaultModel,
-                    ANTHROPIC_DEFAULT_SONNET_MODEL: copilotConfig.sonnet_model || defaultModel,
-                    ANTHROPIC_DEFAULT_HAIKU_MODEL: copilotConfig.haiku_model || defaultModel,
-                },
-            };
-            res.json({
-                settings: defaultSettings,
-                mtime: Date.now(),
-                path: `~/.ccs/copilot.settings.json`,
-                exists: false,
-            });
-            return;
-        }
-        const content = fs.readFileSync(settingsPath, 'utf-8');
-        const settings = JSON.parse(content);
-        const stat = fs.statSync(settingsPath);
-        res.json({
-            settings,
-            mtime: stat.mtimeMs,
-            path: `~/.ccs/copilot.settings.json`,
-            exists: true,
-        });
-    }
-    catch (error) {
-        res.status(500).json({ error: error.message });
-    }
-});
-/**
- * PUT /api/copilot/settings/raw - Save raw copilot.settings.json
- * Saves the raw JSON content from the code editor
- */
-exports.apiRoutes.put('/copilot/settings/raw', (req, res) => {
-    try {
-        const { settings, expectedMtime } = req.body;
-        const settingsPath = path.join((0, config_manager_1.getCcsDir)(), 'copilot.settings.json');
-        // Check for conflict if file exists and expectedMtime provided
-        if (fs.existsSync(settingsPath) && expectedMtime) {
-            const stat = fs.statSync(settingsPath);
-            if (Math.abs(stat.mtimeMs - expectedMtime) > 1000) {
-                res.status(409).json({ error: 'File modified externally', mtime: stat.mtimeMs });
-                return;
-            }
-        }
-        // Write settings file atomically
-        const tempPath = settingsPath + '.tmp';
-        fs.writeFileSync(tempPath, JSON.stringify(settings, null, 2) + '\n');
-        fs.renameSync(tempPath, settingsPath);
-        // Also sync model mappings back to unified config
-        const config = (0, unified_config_loader_3.loadOrCreateUnifiedConfig)();
-        const env = settings.env || {};
-        config.copilot = {
-            ...(config.copilot ?? unified_config_types_2.DEFAULT_COPILOT_CONFIG),
-            model: env.ANTHROPIC_MODEL || config.copilot?.model || unified_config_types_2.DEFAULT_COPILOT_CONFIG.model,
-            opus_model: env.ANTHROPIC_DEFAULT_OPUS_MODEL || undefined,
-            sonnet_model: env.ANTHROPIC_DEFAULT_SONNET_MODEL || undefined,
-            haiku_model: env.ANTHROPIC_DEFAULT_HAIKU_MODEL || undefined,
-        };
-        (0, unified_config_loader_1.saveUnifiedConfig)(config);
-        const stat = fs.statSync(settingsPath);
-        res.json({ success: true, mtime: stat.mtimeMs });
-    }
-    catch (error) {
-        res.status(500).json({ error: error.message });
-    }
-});
-// ==================== Global Environment Variables ====================
-/**
- * GET /api/global-env - Get global environment variables configuration
- * Returns the global_env section from config.yaml
- */
-exports.apiRoutes.get('/global-env', (_req, res) => {
-    try {
-        const config = (0, unified_config_loader_3.getGlobalEnvConfig)();
-        res.json(config);
-    }
-    catch (error) {
-        res.status(500).json({ error: error.message });
-    }
-});
-/**
- * PUT /api/global-env - Update global environment variables configuration
- * Updates the global_env section in config.yaml
- */
-exports.apiRoutes.put('/global-env', (req, res) => {
-    try {
-        const { enabled, env } = req.body;
-        const config = (0, unified_config_loader_3.loadOrCreateUnifiedConfig)();
-        // Validate env is an object with string values
-        if (env !== undefined && typeof env === 'object' && env !== null) {
-            for (const [key, value] of Object.entries(env)) {
-                if (typeof value !== 'string') {
-                    res.status(400).json({ error: `Invalid value for ${key}: must be a string` });
-                    return;
-                }
-            }
-        }
-        // Update global_env section
-        config.global_env = {
-            enabled: enabled ?? config.global_env?.enabled ?? true,
-            env: env ?? config.global_env?.env ?? {},
-        };
-        (0, unified_config_loader_1.saveUnifiedConfig)(config);
-        res.json({ success: true, config: config.global_env });
-    }
-    catch (error) {
-        res.status(500).json({ error: error.message });
-    }
-});
-//# sourceMappingURL=routes.js.map