@kaitranntt/ccs 8.4.0 → 8.5.0

package/dist/web-server/routes/cliproxy-stats-routes.js

@@ -1,932 +1,31 @@
 "use strict";
 /**
  * CLIProxy Stats Routes - Stats, status, models, error logs for CLIProxyAPI
- */
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || function (mod) {
-    if (mod && mod.__esModule) return mod;
-    var result = {};
-    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
-    __setModuleDefault(result, mod);
-    return result;
+ *
+ * THIN BARREL. The implementation has been decomposed into focused submodules
+ * under `./cliproxy-stats-routes/`. This file preserves the original public
+ * surface so consumers can keep importing from 'cliproxy-stats-routes' with
+ * identical signatures.
+ *
+ * Public surface (verified by tests + callers):
+ *   - default export               : Express Router  (routes/index.ts)
+ *   - shouldCacheQuotaResult       : quota cache predicate (quota-caching test)
+ *   - registerCliproxyRestartRoute : restart route registrar (restart test)
+ *   - resolveCliproxyUpdateCheckPayload : update-check resolver (version-fallback test)
+ *   - resolveCliproxyVersionsPayload    : versions resolver (version-fallback test)
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.registerCliproxyRestartRoute = exports.resolveCliproxyVersionsPayload = exports.resolveCliproxyUpdateCheckPayload = exports.shouldCacheQuotaResult = void 0;
-const express_1 = require("express");
-const fs = __importStar(require("fs"));
-const path = __importStar(require("path"));
-const stats_fetcher_1 = require("../../cliproxy/services/stats-fetcher");
-const quota_fetcher_1 = require("../../cliproxy/quota/quota-fetcher");
-const quota_fetcher_codex_1 = require("../../cliproxy/quota/quota-fetcher-codex");
-const quota_fetcher_claude_1 = require("../../cliproxy/quota/quota-fetcher-claude");
-const quota_fetcher_gemini_cli_1 = require("../../cliproxy/quota/quota-fetcher-gemini-cli");
-const quota_fetcher_ghcp_1 = require("../../cliproxy/quota/quota-fetcher-ghcp");
-const quota_response_cache_1 = require("../../cliproxy/quota/quota-response-cache");
-const profile_detector_1 = require("../../auth/profile-detector");
-const config_generator_1 = require("../../cliproxy/config/config-generator");
-const session_tracker_1 = require("../../cliproxy/session-tracker");
-const service_manager_1 = require("../../cliproxy/service-manager");
-const binary_manager_1 = require("../../cliproxy/binary-manager");
-const version_checker_1 = require("../../cliproxy/binary/version-checker");
-const platform_detector_1 = require("../../cliproxy/binary/platform-detector");
-const port_manager_1 = require("../../cliproxy/config/port-manager");
-const model_id_normalizer_1 = require("../../cliproxy/ai-providers/model-id-normalizer");
-const cliproxy_dashboard_install_service_1 = require("../services/cliproxy-dashboard-install-service");
-const cliproxy_dashboard_restart_service_1 = require("../services/cliproxy-dashboard-restart-service");
-const auth_middleware_1 = require("../middleware/auth-middleware");
-const router = (0, express_1.Router)();
-const QUOTA_RATE_LIMIT_WINDOW_MS = 60000;
-const QUOTA_RATE_LIMIT_MAX_REQUESTS = 120;
-const quotaRateLimits = new Map();
-router.use((req, res, next) => {
-    if ((0, auth_middleware_1.requireLocalAccessWhenAuthDisabled)(req, res, 'CLIProxy management endpoints require localhost access when dashboard auth is disabled.')) {
-        next();
-    }
-});
-function buildQuotaRateLimitKey(req, provider) {
-    const clientIp = req.ip || req.socket.remoteAddress || 'unknown';
-    return `${clientIp}:${provider}`;
-}
-function isQuotaRouteRateLimited(req, provider) {
-    const key = buildQuotaRateLimitKey(req, provider);
-    const now = Date.now();
-    // Evict stale entries to prevent unbounded memory growth
-    if (quotaRateLimits.size > 1000) {
-        for (const [k, v] of quotaRateLimits) {
-            if (now - v.windowStart >= QUOTA_RATE_LIMIT_WINDOW_MS * 2) {
-                quotaRateLimits.delete(k);
-            }
-        }
-    }
-    const current = quotaRateLimits.get(key);
-    if (!current || now - current.windowStart >= QUOTA_RATE_LIMIT_WINDOW_MS) {
-        quotaRateLimits.set(key, { windowStart: now, count: 1 });
-        return false;
-    }
-    current.count += 1;
-    quotaRateLimits.set(key, current);
-    return current.count > QUOTA_RATE_LIMIT_MAX_REQUESTS;
-}
-/**
- * Cache only stable failures; skip transient network errors (timeouts, 429s, 5xx).
- * Generic across all quota result types.
- */
-function shouldCacheQuotaResult(result) {
-    if (result.success)
-        return true;
-    if (result.needsReauth || result.isForbidden)
-        return true;
-    if (result.retryable === true)
-        return false;
-    if (result.retryable === false)
-        return true;
-    if (typeof result.httpStatus === 'number') {
-        if (result.httpStatus === 429 || result.httpStatus === 408 || result.httpStatus >= 500) {
-            return false;
-        }
-        if (result.httpStatus >= 400 && result.httpStatus < 500) {
-            return true;
-        }
-    }
-    const msg = (result.error || '').toLowerCase();
-    if (!msg)
-        return false;
-    const transientPatterns = ['timeout', 'rate limited', 'api error: 5', 'fetch failed'];
-    return !transientPatterns.some((p) => msg.includes(p));
-}
-exports.shouldCacheQuotaResult = shouldCacheQuotaResult;
-function buildUpdateCheckFallback(backend, getInstalledVersionFn = binary_manager_1.getInstalledCliproxyVersion) {
-    const currentVersion = getInstalledVersionFn(backend);
-    const isStable = !(0, version_checker_1.isNewerVersion)(currentVersion, platform_detector_1.CLIPROXY_MAX_STABLE_VERSION);
-    const backendLabel = backend === 'plus' ? 'CLIProxy Plus' : 'CLIProxy';
-    return {
-        hasUpdate: false,
-        currentVersion,
-        latestVersion: currentVersion,
-        fromCache: true,
-        checkedAt: Date.now(),
-        backend,
-        backendLabel,
-        isStable,
-        maxStableVersion: platform_detector_1.CLIPROXY_MAX_STABLE_VERSION,
-        stabilityMessage: isStable
-            ? undefined
-            : `v${currentVersion} has known stability issues. Max stable: v${platform_detector_1.CLIPROXY_MAX_STABLE_VERSION}`,
-    };
-}
-function buildVersionsFallback(backend, getInstalledVersionFn = binary_manager_1.getInstalledCliproxyVersion) {
-    const currentVersion = getInstalledVersionFn(backend);
-    return {
-        versions: currentVersion ? [currentVersion] : [],
-        latestStable: currentVersion || platform_detector_1.CLIPROXY_MAX_STABLE_VERSION,
-        latest: currentVersion || platform_detector_1.CLIPROXY_MAX_STABLE_VERSION,
-        fromCache: true,
-        checkedAt: Date.now(),
-        currentVersion,
-        maxStableVersion: platform_detector_1.CLIPROXY_MAX_STABLE_VERSION,
-        faultyRange: platform_detector_1.CLIPROXY_FAULTY_RANGE,
-    };
-}
-async function resolveCliproxyUpdateCheckPayload(backend, deps = {}) {
-    const checkCliproxyUpdateFn = deps.checkCliproxyUpdateFn ?? binary_manager_1.checkCliproxyUpdate;
-    const getInstalledVersionFn = deps.getInstalledVersionFn ?? binary_manager_1.getInstalledCliproxyVersion;
-    return checkCliproxyUpdateFn(backend).catch(() => buildUpdateCheckFallback(backend, getInstalledVersionFn));
-}
-exports.resolveCliproxyUpdateCheckPayload = resolveCliproxyUpdateCheckPayload;
-async function resolveCliproxyVersionsPayload(backend, deps = {}) {
-    const fetchAllVersionsFn = deps.fetchAllVersionsFn ?? version_checker_1.fetchAllVersions;
-    const getInstalledVersionFn = deps.getInstalledVersionFn ?? binary_manager_1.getInstalledCliproxyVersion;
-    const result = await fetchAllVersionsFn(false, backend).catch(() => null);
-    if (!result) {
-        return buildVersionsFallback(backend, getInstalledVersionFn);
-    }
-    return {
-        ...result,
-        currentVersion: getInstalledVersionFn(backend),
-        maxStableVersion: platform_detector_1.CLIPROXY_MAX_STABLE_VERSION,
-        faultyRange: platform_detector_1.CLIPROXY_FAULTY_RANGE,
-    };
-}
-exports.resolveCliproxyVersionsPayload = resolveCliproxyVersionsPayload;
-/**
- * Extract status code and model from error log file (lightweight parsing).
- * Reads first 4KB for model, last 2KB for status code. Async to avoid blocking event loop.
- */
-async function extractErrorLogMetadata(filePath) {
-    let fh = null;
-    try {
-        fh = await fs.promises.open(filePath, 'r');
-        const stat = await fh.stat();
-        const fileSize = stat.size;
-        // Read first 4KB for model (in request body)
-        const startBuffer = Buffer.alloc(Math.min(4096, fileSize));
-        await fh.read(startBuffer, 0, startBuffer.length, 0);
-        const startContent = startBuffer.toString('utf-8');
-        // Extract model from request body JSON: "model":"gemini-3-flash-preview"
-        const modelMatch = startContent.match(/"model"\s*:\s*"([^"]+)"/);
-        const model = modelMatch ? modelMatch[1] : undefined;
-        // Read last 2KB for status code (in response section at end)
-        let statusCode;
-        if (fileSize > 2048) {
-            const endBuffer = Buffer.alloc(2048);
-            await fh.read(endBuffer, 0, 2048, fileSize - 2048);
-            const endContent = endBuffer.toString('utf-8');
-            const statusMatch = endContent.match(/Status:\s*(\d{3})/);
-            statusCode = statusMatch ? parseInt(statusMatch[1], 10) : undefined;
-        }
-        else {
-            // Small file - check start content for status
-            const statusMatch = startContent.match(/Status:\s*(\d{3})/);
-            statusCode = statusMatch ? parseInt(statusMatch[1], 10) : undefined;
-        }
-        return { statusCode, model };
-    }
-    catch {
-        return {};
-    }
-    finally {
-        await fh?.close();
-    }
-}
-/**
- * Shared handler for stats/usage endpoint
- */
-const handleStatsRequest = async (_req, res) => {
-    try {
-        // Check if proxy is running first
-        const running = await (0, stats_fetcher_1.isCliproxyRunning)();
-        if (!running) {
-            res.status(503).json({
-                error: 'CLIProxy Plus not running',
-                message: 'Start a CLIProxy session (gemini, codex, claude, agy, ghcp) to collect stats',
-            });
-            return;
-        }
-        // Fetch stats from management API
-        const stats = await (0, stats_fetcher_1.fetchCliproxyStats)();
-        if (!stats) {
-            res.status(503).json({
-                error: 'Stats unavailable',
-                message: 'CLIProxy Plus is running but stats endpoint not responding',
-            });
-            return;
-        }
-        res.json(stats);
-    }
-    catch (error) {
-        console.error(`[cliproxy-stats] ${error.message}`);
-        res.status(500).json({ error: 'Internal server error' });
-    }
-};
-/**
- * GET /api/cliproxy/stats - Get CLIProxyAPI usage statistics
- * Returns: CliproxyStats or error if proxy not running
- */
-router.get('/stats', handleStatsRequest);
-/**
- * GET /api/cliproxy/usage - Alias for /stats (frontend compatibility)
- */
-router.get('/usage', handleStatsRequest);
-/**
- * GET /api/cliproxy/status - Check CLIProxyAPI running status
- * Returns: { running: boolean }
- */
-router.get('/status', async (_req, res) => {
-    try {
-        const running = await (0, stats_fetcher_1.isCliproxyRunning)((0, port_manager_1.resolveLifecyclePort)());
-        res.json({ running });
-    }
-    catch (error) {
-        console.error(`[cliproxy-stats] ${error.message}`);
-        res.status(500).json({ error: 'Internal server error' });
-    }
-});
-/**
- * GET /api/cliproxy/proxy-status - Get detailed proxy process status
- * Returns: { running, port?, pid?, sessionCount?, startedAt? }
- * Combines session tracker data with actual port check for accuracy
- */
-router.get('/proxy-status', async (_req, res) => {
-    try {
-        const port = (0, port_manager_1.resolveLifecyclePort)();
-        // First check session tracker for detailed info
-        const sessionStatus = (0, session_tracker_1.getProxyStatus)(port);
-        // If session tracker says running, trust it
-        if (sessionStatus.running) {
-            res.json(sessionStatus);
-            return;
-        }
-        // Session tracker says not running, but proxy might be running without session tracking
-        // (e.g., started before session persistence was implemented)
-        const actuallyRunning = await (0, stats_fetcher_1.isCliproxyRunning)(port);
-        if (actuallyRunning) {
-            // Proxy running but no session lock - legacy/untracked instance
-            res.json({
-                running: true,
-                port,
-                sessionCount: 0, // Unknown sessions
-                // No pid/startedAt since we don't have session lock
-            });
-        }
-        else {
-            res.json(sessionStatus);
-        }
-    }
-    catch (error) {
-        console.error(`[cliproxy-stats] ${error.message}`);
-        res.status(500).json({ error: 'Internal server error' });
-    }
-});
-/**
- * POST /api/cliproxy/proxy-start - Start the CLIProxy service
- * Returns: { started, alreadyRunning, port, error? }
- * Starts proxy in background if not already running
- */
-router.post('/proxy-start', async (_req, res) => {
-    try {
-        const result = await (0, service_manager_1.ensureCliproxyService)((0, port_manager_1.resolveLifecyclePort)());
-        res.json(result);
-    }
-    catch (error) {
-        console.error(`[cliproxy-stats] ${error.message}`);
-        res.status(500).json({ error: 'Internal server error' });
-    }
-});
-/**
- * POST /api/cliproxy/proxy-stop - Stop the CLIProxy service
- * Returns: { stopped, pid?, sessionCount?, error? }
- */
-router.post('/proxy-stop', async (_req, res) => {
-    try {
-        const result = await (0, session_tracker_1.stopProxy)((0, port_manager_1.resolveLifecyclePort)());
-        res.json(result);
-    }
-    catch (error) {
-        console.error(`[cliproxy-stats] ${error.message}`);
-        res.status(500).json({ error: 'Internal server error' });
-    }
-});
-/**
- * GET /api/cliproxy/update-check - Check for CLIProxyAPI binary updates
- * Returns: { hasUpdate, currentVersion, latestVersion, fromCache }
- */
-router.get('/update-check', async (_req, res) => {
-    try {
-        const backend = (0, binary_manager_1.getStoredConfiguredBackend)();
-        const result = await resolveCliproxyUpdateCheckPayload(backend);
-        res.json(result);
-    }
-    catch (error) {
-        console.error(`[cliproxy-stats] ${error.message}`);
-        res.status(500).json({ error: 'Internal server error' });
-    }
-});
-/**
- * GET /api/cliproxy/models - Get available models from CLIProxyAPI
- * Returns: { models: CliproxyModel[], byCategory: Record<string, CliproxyModel[]>, totalCount: number }
- */
-router.get('/models', async (_req, res) => {
-    try {
-        // Check if proxy is running first
-        const running = await (0, stats_fetcher_1.isCliproxyRunning)();
-        if (!running) {
-            res.status(503).json({
-                error: 'CLIProxy Plus not running',
-                message: 'Start a CLIProxy session (gemini, codex, claude, agy) to fetch available models',
-            });
-            return;
-        }
-        // Fetch models from /v1/models endpoint
-        const modelsResponse = await (0, stats_fetcher_1.fetchCliproxyModels)();
-        if (!modelsResponse) {
-            res.status(503).json({
-                error: 'Models unavailable',
-                message: 'CLIProxy Plus is running but /v1/models endpoint not responding',
-            });
-            return;
-        }
-        res.json(modelsResponse);
-    }
-    catch (error) {
-        console.error(`[cliproxy-stats] ${error.message}`);
-        res.status(500).json({ error: 'Internal server error' });
-    }
-});
-// ==================== Error Logs ====================
-/**
- * GET /api/cliproxy/error-logs - Get list of error log files
- * Returns: { files: CliproxyErrorLog[] } or error if proxy not running
- */
-router.get('/error-logs', async (_req, res) => {
-    try {
-        const running = await (0, stats_fetcher_1.isCliproxyRunning)();
-        if (!running) {
-            res.status(503).json({
-                error: 'CLIProxy Plus not running',
-                message: 'Start a CLIProxy session to view error logs',
-            });
-            return;
-        }
-        const files = await (0, stats_fetcher_1.fetchCliproxyErrorLogs)();
-        if (files === null) {
-            res.status(503).json({
-                error: 'Error logs unavailable',
-                message: 'CLIProxy Plus is running but error logs endpoint not responding',
-            });
-            return;
-        }
-        // Inject absolute paths and extract metadata from each file
-        const logsDir = path.join((0, config_generator_1.getCliproxyWritablePath)(), 'logs');
-        const filesWithMetadata = await Promise.all(files.map(async (file) => {
-            const absolutePath = path.join(logsDir, file.name);
-            const metadata = await extractErrorLogMetadata(absolutePath);
-            return {
-                ...file,
-                absolutePath,
-                statusCode: metadata.statusCode,
-                model: metadata.model,
-            };
-        }));
-        res.json({ files: filesWithMetadata });
-    }
-    catch (error) {
-        console.error(`[cliproxy-stats] ${error.message}`);
-        res.status(500).json({ error: 'Internal server error' });
-    }
-});
-/**
- * GET /api/cliproxy/error-logs/:name - Get content of a specific error log
- * Returns: plain text log content
- */
-router.get('/error-logs/:name', async (req, res) => {
-    const { name } = req.params;
-    // Validate filename format and prevent path traversal
-    if (!name ||
-        !name.startsWith('error-') ||
-        !name.endsWith('.log') ||
-        name.includes('..') ||
-        name.includes('/') ||
-        name.includes('\\')) {
-        res.status(400).json({ error: 'Invalid error log filename' });
-        return;
-    }
-    try {
-        const running = await (0, stats_fetcher_1.isCliproxyRunning)();
-        if (!running) {
-            res.status(503).json({ error: 'CLIProxy Plus not running' });
-            return;
-        }
-        const content = await (0, stats_fetcher_1.fetchCliproxyErrorLogContent)(name);
-        if (content === null) {
-            res.status(404).json({ error: 'Error log not found' });
-            return;
-        }
-        res.type('text/plain').send(content);
-    }
-    catch (error) {
-        console.error(`[cliproxy-stats] ${error.message}`);
-        res.status(500).json({ error: 'Internal server error' });
-    }
-});
-// ==================== Config File ====================
-/**
- * GET /api/cliproxy/config.yaml - Get CLIProxy YAML config content
- * Returns: plain text YAML content
- */
-router.get('/config.yaml', async (_req, res) => {
-    try {
-        const configPath = (0, config_generator_1.getCliproxyConfigPath)();
-        if (!fs.existsSync(configPath)) {
-            res.status(404).json({ error: 'Config file not found' });
-            return;
-        }
-        const content = fs.readFileSync(configPath, 'utf8');
-        res.type('text/yaml').send(content);
-    }
-    catch (error) {
-        console.error(`[cliproxy-stats] ${error.message}`);
-        res.status(500).json({ error: 'Internal server error' });
-    }
-});
-/**
- * PUT /api/cliproxy/config.yaml - Save CLIProxy YAML config content
- * Body: { content: string }
- * Returns: { success: true, path: string }
- */
-router.put('/config.yaml', async (req, res) => {
-    try {
-        const { content } = req.body;
-        if (typeof content !== 'string') {
-            res.status(400).json({ error: 'Missing required field: content' });
-            return;
-        }
-        const configPath = (0, config_generator_1.getCliproxyConfigPath)();
-        // Ensure parent directory exists
-        const configDir = path.dirname(configPath);
-        if (!fs.existsSync(configDir)) {
-            fs.mkdirSync(configDir, { recursive: true });
-        }
-        // Write atomically
-        const tempPath = configPath + '.tmp';
-        fs.writeFileSync(tempPath, content);
-        fs.renameSync(tempPath, configPath);
-        res.json({ success: true, path: configPath });
-    }
-    catch (error) {
-        console.error(`[cliproxy-stats] ${error.message}`);
-        res.status(500).json({ error: 'Internal server error' });
-    }
-});
-// ==================== Auth Files ====================
-/**
- * GET /api/cliproxy/auth-files - List auth files in auth directory
- * Returns: { files: Array<{ name, size, mtime }> }
- */
-router.get('/auth-files', async (_req, res) => {
-    try {
-        const authDir = (0, config_generator_1.getAuthDir)();
-        if (!fs.existsSync(authDir)) {
-            res.json({ files: [] });
-            return;
-        }
-        const entries = fs.readdirSync(authDir, { withFileTypes: true });
-        const files = entries
-            .filter((entry) => entry.isFile())
-            .map((entry) => {
-            const filePath = path.join(authDir, entry.name);
-            const stat = fs.statSync(filePath);
-            return {
-                name: entry.name,
-                size: stat.size,
-                mtime: stat.mtime.getTime(),
-            };
-        });
-        res.json({ files, directory: authDir });
-    }
-    catch (error) {
-        console.error(`[cliproxy-stats] ${error.message}`);
-        res.status(500).json({ error: 'Internal server error' });
-    }
-});
-/**
- * GET /api/cliproxy/auth-files/download - Download auth file content
- * Query: ?name=filename
- * Returns: file content as octet-stream
- */
-router.get('/auth-files/download', async (req, res) => {
-    try {
-        const { name } = req.query;
-        if (!name || typeof name !== 'string') {
-            res.status(400).json({ error: 'Missing required query parameter: name' });
-            return;
-        }
-        // Validate filename - prevent path traversal
-        if (name.includes('..') || name.includes('/') || name.includes('\\')) {
-            res.status(400).json({ error: 'Invalid filename' });
-            return;
-        }
-        const authDir = (0, config_generator_1.getAuthDir)();
-        const filePath = path.join(authDir, name);
-        if (!fs.existsSync(filePath)) {
-            res.status(404).json({ error: 'Auth file not found' });
-            return;
-        }
-        const content = fs.readFileSync(filePath);
-        res.setHeader('Content-Disposition', `attachment; filename="${name}"`);
-        res.type('application/octet-stream').send(content);
-    }
-    catch (error) {
-        console.error(`[cliproxy-stats] ${error.message}`);
-        res.status(500).json({ error: 'Internal server error' });
-    }
-});
-// ==================== Model Updates ====================
-/**
- * PUT /api/cliproxy/models/:provider - Update model for a provider
- * Body: { model: string }
- * Returns: { success: true, provider, model }
- */
-router.put('/models/:provider', async (req, res) => {
-    try {
-        const { provider } = req.params;
-        // Validate provider name to prevent path traversal via crafted provider param
-        if (!provider || provider.length > 64 || !/^[a-zA-Z0-9_-]+$/.test(provider)) {
-            res.status(400).json({ error: 'Invalid provider name' });
-            return;
-        }
-        const { model } = req.body;
-        if (!model || typeof model !== 'string') {
-            res.status(400).json({ error: 'Missing required field: model' });
-            return;
-        }
-        if (model.length > 256) {
-            res.status(400).json({ error: 'Model ID exceeds maximum length (256 characters)' });
-            return;
-        }
-        const deniedReason = (0, model_id_normalizer_1.getDeniedModelIdReasonForProvider)(model, provider);
-        if (deniedReason) {
-            res.status(400).json({ error: deniedReason });
-            return;
-        }
-        // Get the settings file for this provider
-        const ccsDir = (0, config_generator_1.getCliproxyWritablePath)();
-        const settingsPath = path.join(ccsDir, `${provider}.settings.json`);
-        if (!fs.existsSync(settingsPath)) {
-            res.status(404).json({ error: `Settings file not found for provider: ${provider}` });
-            return;
-        }
-        // Read and update settings
-        const settings = JSON.parse(fs.readFileSync(settingsPath, 'utf8'));
-        const canonicalModel = (0, model_id_normalizer_1.canonicalizeModelIdForProvider)(model, provider);
-        const env = settings.env && typeof settings.env === 'object' && !Array.isArray(settings.env)
-            ? settings.env
-            : {};
-        const previousDefault = typeof env.ANTHROPIC_MODEL === 'string' ? env.ANTHROPIC_MODEL : canonicalModel;
-        const previousCanonicalDefault = (0, model_id_normalizer_1.canonicalizeModelIdForProvider)(previousDefault, provider);
-        for (const key of model_id_normalizer_1.MODEL_ENV_VAR_KEYS) {
-            if (key === 'ANTHROPIC_MODEL') {
-                env[key] = canonicalModel;
-                continue;
-            }
-            const current = env[key];
-            if (typeof current !== 'string') {
-                env[key] = canonicalModel;
-                continue;
-            }
-            const canonicalCurrent = (0, model_id_normalizer_1.canonicalizeModelIdForProvider)(current, provider);
-            env[key] = canonicalCurrent === previousCanonicalDefault ? canonicalModel : canonicalCurrent;
-        }
-        settings.env = env;
-        // Write atomically
-        const tempPath = settingsPath + '.tmp';
-        fs.writeFileSync(tempPath, JSON.stringify(settings, null, 2) + '\n');
-        fs.renameSync(tempPath, settingsPath);
-        res.json({ success: true, provider, model: canonicalModel });
-    }
-    catch (error) {
-        console.error(`[cliproxy-stats] ${error.message}`);
-        res.status(500).json({ error: 'Internal server error' });
-    }
-});
-// ==================== Account Quota ====================
-// NOTE: Specific routes MUST be defined BEFORE generic routes for Express routing to work correctly
-// NOTE: All quota endpoints use in-memory caching (2 min TTL) to reduce external API calls
-/**
- * GET /api/cliproxy/quota/codex/:accountId - Get Codex quota for a specific account
- * Returns: CodexQuotaResult with rate limit windows
- * Caching: 2 minute TTL to reduce ChatGPT API calls
- */
-router.get('/quota/codex/:accountId', async (req, res) => {
-    const { accountId } = req.params;
-    if (isQuotaRouteRateLimited(req, 'codex')) {
-        res
-            .status(429)
-            .json({ error: 'Too many quota requests', message: 'Retry after a short delay' });
-        return;
-    }
-    // Validate accountId - prevent path traversal
-    if (!accountId ||
-        accountId.includes('..') ||
-        accountId.includes('/') ||
-        accountId.includes('\\')) {
-        res.status(400).json({ error: 'Invalid account ID' });
-        return;
-    }
-    try {
-        // Check cache first
-        const cached = (0, quota_response_cache_1.getCachedQuota)('codex', accountId);
-        if (cached) {
-            res.json({ ...cached, cached: true });
-            return;
-        }
-        // Fetch from external API
-        const result = await (0, quota_fetcher_codex_1.fetchCodexQuota)(accountId);
-        // Cache successful and stable failure states; skip transient network failures.
-        if (shouldCacheQuotaResult(result)) {
-            (0, quota_response_cache_1.setCachedQuota)('codex', accountId, result);
-        }
-        res.json(result);
-    }
-    catch (error) {
-        console.error(`[cliproxy-stats] ${error.message}`);
-        res.status(500).json({ error: 'Internal server error' });
-    }
-});
-/**
- * GET /api/cliproxy/quota/claude/:accountId - Get Claude quota for a specific account
- * Returns: ClaudeQuotaResult with policy windows (5h + weekly)
- * Caching: 2 minute TTL to reduce Anthropic API calls
- */
-router.get('/quota/claude/:accountId', async (req, res) => {
-    const { accountId } = req.params;
-    if (isQuotaRouteRateLimited(req, 'claude')) {
-        res
-            .status(429)
-            .json({ error: 'Too many quota requests', message: 'Retry after a short delay' });
-        return;
-    }
-    // Validate accountId - prevent path traversal
-    if (!accountId ||
-        accountId.includes('..') ||
-        accountId.includes('/') ||
-        accountId.includes('\\')) {
-        res.status(400).json({ error: 'Invalid account ID' });
-        return;
-    }
-    try {
-        // Check cache first
-        const cached = (0, quota_response_cache_1.getCachedQuota)('claude', accountId);
-        if (cached) {
-            res.json({ ...cached, cached: true });
-            return;
-        }
-        // Fetch from external API
-        const result = await (0, quota_fetcher_claude_1.fetchClaudeQuota)(accountId);
-        // Cache successful and stable failure states; skip transient network failures.
-        if (shouldCacheQuotaResult(result)) {
-            (0, quota_response_cache_1.setCachedQuota)('claude', accountId, result);
-        }
-        res.json(result);
-    }
-    catch (error) {
-        console.error(`[cliproxy-stats] ${error.message}`);
-        res.status(500).json({ error: 'Internal server error' });
-    }
-});
-/**
- * GET /api/cliproxy/quota/gemini/:accountId - Get Gemini quota for a specific account
- * Returns: GeminiCliQuotaResult with quota buckets
- * Caching: 2 minute TTL to reduce Google Cloud API calls
- */
-router.get('/quota/gemini/:accountId', async (req, res) => {
-    const { accountId } = req.params;
-    if (isQuotaRouteRateLimited(req, 'gemini')) {
-        res
-            .status(429)
-            .json({ error: 'Too many quota requests', message: 'Retry after a short delay' });
-        return;
-    }
-    // Validate accountId - prevent path traversal
-    if (!accountId ||
-        accountId.includes('..') ||
-        accountId.includes('/') ||
-        accountId.includes('\\')) {
-        res.status(400).json({ error: 'Invalid account ID' });
-        return;
-    }
-    try {
-        // Check cache first
-        const cached = (0, quota_response_cache_1.getCachedQuota)('gemini', accountId);
-        if (cached) {
-            res.json({ ...cached, cached: true });
-            return;
-        }
-        // Fetch from external API
-        const result = await (0, quota_fetcher_gemini_cli_1.fetchGeminiCliQuota)(accountId);
-        // Cache successful and stable failure states; skip transient network failures.
-        if (shouldCacheQuotaResult(result)) {
-            (0, quota_response_cache_1.setCachedQuota)('gemini', accountId, result);
-        }
-        res.json(result);
-    }
-    catch (error) {
-        console.error(`[cliproxy-stats] ${error.message}`);
-        res.status(500).json({ error: 'Internal server error' });
-    }
-});
-/**
- * GET /api/cliproxy/quota/ghcp/:accountId - Get GitHub Copilot (ghcp) quota for a specific account
- * Returns: GhcpQuotaResult with premium/chat/completions quota snapshots
- * Caching: 2 minute TTL to reduce GitHub API calls
- */
-router.get('/quota/ghcp/:accountId', async (req, res) => {
-    const { accountId } = req.params;
-    if (isQuotaRouteRateLimited(req, 'ghcp')) {
-        res
-            .status(429)
-            .json({ error: 'Too many quota requests', message: 'Retry after a short delay' });
-        return;
-    }
-    // Validate accountId - prevent path traversal
-    if (!accountId ||
-        accountId.includes('..') ||
-        accountId.includes('/') ||
-        accountId.includes('\\')) {
-        res.status(400).json({ error: 'Invalid account ID' });
-        return;
-    }
-    try {
-        // Check cache first
-        const cached = (0, quota_response_cache_1.getCachedQuota)('ghcp', accountId);
-        if (cached) {
-            res.json({ ...cached, cached: true });
-            return;
-        }
-        // Fetch from GitHub API
-        const result = await (0, quota_fetcher_ghcp_1.fetchGhcpQuota)(accountId);
-        // Cache successful and stable failure states; skip transient network failures.
-        if (shouldCacheQuotaResult(result)) {
-            (0, quota_response_cache_1.setCachedQuota)('ghcp', accountId, result);
-        }
-        res.json(result);
-    }
-    catch (error) {
-        console.error(`[cliproxy-stats] ${error.message}`);
-        res.status(500).json({ error: 'Internal server error' });
-    }
-});
-/**
- * GET /api/cliproxy/quota/:provider/:accountId - Get quota for a specific account (generic)
- * Returns: QuotaResult with model quotas and reset times
- * NOTE: This generic route MUST come after specific routes (codex, claude, gemini, ghcp)
- * Caching: 2 minute TTL to reduce external API calls
- */
-router.get('/quota/:provider/:accountId', async (req, res) => {
-    const { provider, accountId } = req.params;
-    if (isQuotaRouteRateLimited(req, provider)) {
-        res
-            .status(429)
-            .json({ error: 'Too many quota requests', message: 'Retry after a short delay' });
-        return;
-    }
-    // Validate provider - use canonical CLIPROXY_PROFILES
-    const validProviders = [...profile_detector_1.CLIPROXY_PROFILES];
-    if (!validProviders.includes(provider)) {
-        res.status(400).json({
-            error: 'Invalid provider',
-            message: `Provider must be one of: ${validProviders.join(', ')}`,
-        });
-        return;
-    }
-    // Validate accountId - prevent path traversal
-    if (!accountId ||
-        accountId.includes('..') ||
-        accountId.includes('/') ||
-        accountId.includes('\\')) {
-        res.status(400).json({ error: 'Invalid account ID' });
-        return;
-    }
-    try {
-        // Check cache first
-        const cached = (0, quota_response_cache_1.getCachedQuota)(provider, accountId);
-        if (cached) {
-            res.json({ ...cached, cached: true });
-            return;
-        }
-        // Fetch from external API
-        const result = await (0, quota_fetcher_1.fetchAccountQuota)(provider, accountId);
-        // Cache successful results
-        if (result.success) {
-            (0, quota_response_cache_1.setCachedQuota)(provider, accountId, result);
-        }
-        res.json(result);
-    }
-    catch (error) {
-        console.error(`[cliproxy-stats] ${error.message}`);
-        res.status(500).json({ error: 'Internal server error' });
-    }
-});
-// ==================== Version Management ====================
-/**
- * GET /api/cliproxy/versions - Get all available CLIProxyAPI versions
- * Returns: { versions, latestStable, latest, currentVersion, maxStableVersion }
- */
-router.get('/versions', async (_req, res) => {
-    try {
-        const backend = (0, binary_manager_1.getStoredConfiguredBackend)();
-        res.json(await resolveCliproxyVersionsPayload(backend));
-    }
-    catch (error) {
-        console.error(`[cliproxy-stats] ${error.message}`);
-        res.status(500).json({ error: 'Internal server error' });
-    }
-});
-/**
- * POST /api/cliproxy/install - Install specific CLIProxyAPI version
- * Body: { version: string, force?: boolean }
- * Returns: { success, restarted?, port?, requiresConfirmation?, message? }
- */
-router.post('/install', async (req, res) => {
-    try {
-        const { version, force } = req.body;
-        if (!version || typeof version !== 'string') {
-            res.status(400).json({ error: 'Missing required field: version' });
-            return;
-        }
-        // Validate version format
-        if (!/^\d+\.\d+\.\d+(-\d+)?$/.test(version)) {
-            res.status(400).json({ error: 'Invalid version format. Expected: X.Y.Z or X.Y.Z-N' });
-            return;
-        }
-        // Check if version is faulty (v81-85) or experimental (above max stable)
-        const isFaulty = (0, version_checker_1.isVersionFaulty)(version);
-        const isExperimental = (0, version_checker_1.isNewerVersion)(version, platform_detector_1.CLIPROXY_MAX_STABLE_VERSION);
-        if (isFaulty && !force) {
-            res.json({
-                success: false,
-                isFaulty,
-                isExperimental,
-                requiresConfirmation: true,
-                message: `Version ${version} has known bugs (v${platform_detector_1.CLIPROXY_FAULTY_RANGE.min.replace(/-\d+$/, '')}-${platform_detector_1.CLIPROXY_FAULTY_RANGE.max.replace(/-\d+$/, '')}). Set force=true to proceed.`,
-            });
-            return;
-        }
-        if (isExperimental && !force) {
-            res.json({
-                success: false,
-                isFaulty,
-                isExperimental,
-                requiresConfirmation: true,
-                message: `Version ${version} is experimental (above stable ${platform_detector_1.CLIPROXY_MAX_STABLE_VERSION.replace(/-\d+$/, '')}). Set force=true to proceed.`,
-            });
-            return;
-        }
-        const backend = (0, binary_manager_1.getStoredConfiguredBackend)();
-        const installResult = await (0, cliproxy_dashboard_install_service_1.installDashboardCliproxyVersion)(version, backend);
-        res.json({
-            version,
-            isFaulty,
-            isExperimental,
-            ...installResult,
-        });
-    }
-    catch (error) {
-        console.error(`[cliproxy-stats] ${error.message}`);
-        res.status(500).json({ error: 'Internal server error' });
-    }
-});
-/**
- * POST /api/cliproxy/restart - Restart CLIProxy without version change
- * Returns: { success, port?, error? }
- */
-function registerCliproxyRestartRoute(targetRouter, restartHandler = cliproxy_dashboard_restart_service_1.restartDashboardCliproxy) {
-    targetRouter.post('/restart', async (_req, res) => {
-        try {
-            const result = await restartHandler();
-            res.json(result);
-        }
-        catch (error) {
-            console.error(`[cliproxy-stats] ${error.message}`);
-            res.status(500).json({ error: 'Internal server error' });
-        }
-    });
-}
-exports.registerCliproxyRestartRoute = registerCliproxyRestartRoute;
-registerCliproxyRestartRoute(router);
-exports.default = router;
+exports.resolveCliproxyVersionsPayload = exports.resolveCliproxyUpdateCheckPayload = exports.registerCliproxyRestartRoute = exports.shouldCacheQuotaResult = exports.default = void 0;
+var router_1 = require("./cliproxy-stats-routes/router");
+Object.defineProperty(exports, "default", { enumerable: true, get: function () { return __importDefault(router_1).default; } });
+var quota_helpers_1 = require("./cliproxy-stats-routes/quota-helpers");
+Object.defineProperty(exports, "shouldCacheQuotaResult", { enumerable: true, get: function () { return quota_helpers_1.shouldCacheQuotaResult; } });
+var restart_route_1 = require("./cliproxy-stats-routes/restart-route");
+Object.defineProperty(exports, "registerCliproxyRestartRoute", { enumerable: true, get: function () { return restart_route_1.registerCliproxyRestartRoute; } });
+var version_helpers_1 = require("./cliproxy-stats-routes/version-helpers");
+Object.defineProperty(exports, "resolveCliproxyUpdateCheckPayload", { enumerable: true, get: function () { return version_helpers_1.resolveCliproxyUpdateCheckPayload; } });
+Object.defineProperty(exports, "resolveCliproxyVersionsPayload", { enumerable: true, get: function () { return version_helpers_1.resolveCliproxyVersionsPayload; } });
 //# sourceMappingURL=cliproxy-stats-routes.js.map