@lobu/gateway 2.8.0

package/dist/auth/settings/template-utils.js

@@ -0,0 +1,43 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.buildDefaultSettingsFromSource = buildDefaultSettingsFromSource;
+function cloneSettingValue(value) {
+    return JSON.parse(JSON.stringify(value));
+}
+function buildDefaultSettingsFromSource(source) {
+    if (!source)
+        return {};
+    const defaults = {};
+    if (source.model !== undefined)
+        defaults.model = source.model;
+    if (source.modelSelection)
+        defaults.modelSelection = cloneSettingValue(source.modelSelection);
+    if (source.providerModelPreferences)
+        defaults.providerModelPreferences = cloneSettingValue(source.providerModelPreferences);
+    if (source.networkConfig)
+        defaults.networkConfig = cloneSettingValue(source.networkConfig);
+    if (source.nixConfig)
+        defaults.nixConfig = cloneSettingValue(source.nixConfig);
+    if (source.mcpServers)
+        defaults.mcpServers = cloneSettingValue(source.mcpServers);
+    if (source.soulMd !== undefined)
+        defaults.soulMd = source.soulMd;
+    if (source.userMd !== undefined)
+        defaults.userMd = source.userMd;
+    if (source.identityMd !== undefined)
+        defaults.identityMd = source.identityMd;
+    if (source.skillsConfig)
+        defaults.skillsConfig = cloneSettingValue(source.skillsConfig);
+    if (source.toolsConfig)
+        defaults.toolsConfig = cloneSettingValue(source.toolsConfig);
+    if (source.pluginsConfig)
+        defaults.pluginsConfig = cloneSettingValue(source.pluginsConfig);
+    if (source.installedProviders) {
+        defaults.installedProviders = cloneSettingValue(source.installedProviders);
+    }
+    if (source.verboseLogging !== undefined) {
+        defaults.verboseLogging = source.verboseLogging;
+    }
+    return defaults;
+}
+//# sourceMappingURL=template-utils.js.map

package/dist/auth/settings/template-utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"template-utils.js","sourceRoot":"","sources":["../../../src/auth/settings/template-utils.ts"],"names":[],"mappings":";;AAMA,wEAqCC;AAzCD,SAAS,iBAAiB,CAAI,KAAQ;IACpC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAM,CAAC;AAChD,CAAC;AAED,SAAgB,8BAA8B,CAC5C,MAA4B;IAE5B,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,CAAC;IAEvB,MAAM,QAAQ,GAAqC,EAAE,CAAC;IAEtD,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS;QAAE,QAAQ,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;IAC9D,IAAI,MAAM,CAAC,cAAc;QACvB,QAAQ,CAAC,cAAc,GAAG,iBAAiB,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;IACrE,IAAI,MAAM,CAAC,wBAAwB;QACjC,QAAQ,CAAC,wBAAwB,GAAG,iBAAiB,CACnD,MAAM,CAAC,wBAAwB,CAChC,CAAC;IACJ,IAAI,MAAM,CAAC,aAAa;QACtB,QAAQ,CAAC,aAAa,GAAG,iBAAiB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IACnE,IAAI,MAAM,CAAC,SAAS;QAClB,QAAQ,CAAC,SAAS,GAAG,iBAAiB,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC3D,IAAI,MAAM,CAAC,UAAU;QACnB,QAAQ,CAAC,UAAU,GAAG,iBAAiB,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAC7D,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;QAAE,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IACjE,IAAI,MAAM,CAAC,MAAM,KAAK,SAAS;QAAE,QAAQ,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IACjE,IAAI,MAAM,CAAC,UAAU,KAAK,SAAS;QAAE,QAAQ,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;IAC7E,IAAI,MAAM,CAAC,YAAY;QACrB,QAAQ,CAAC,YAAY,GAAG,iBAAiB,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IACjE,IAAI,MAAM,CAAC,WAAW;QACpB,QAAQ,CAAC,WAAW,GAAG,iBAAiB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IAC/D,IAAI,MAAM,CAAC,aAAa;QACtB,QAAQ,CAAC,aAAa,GAAG,iBAAiB,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;IACnE,IAAI,MAAM,CAAC,kBAAkB,EAAE,CAAC;QAC9B,QAAQ,CAAC,kBAAkB,GAAG,iBAAiB,CAAC,MAAM,CAAC,kBAAkB,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,MAAM,CAAC,cAAc,KAAK,SAAS,EAAE,CAAC;QACxC,QAAQ,CAAC,cAAc,GAAG,MAAM,CAAC,cAAc,CAAC;IAClD,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC"}

package/dist/auth/settings/token-service.d.ts

@@ -0,0 +1,86 @@
+/**
+ * Pre-filled skill configuration for an agent config session
+ */
+export interface PrefillSkill {
+    /** Skill repository (e.g., "anthropics/skills/pdf") */
+    repo: string;
+    /** Display name */
+    name?: string;
+    /** Description */
+    description?: string;
+}
+/**
+ * Pre-filled MCP server configuration for an agent config session
+ */
+export interface PrefillMcpServer {
+    /** MCP server ID (key in mcpServers record) */
+    id: string;
+    /** Display name/description */
+    name?: string;
+    /** Server URL (for SSE type) */
+    url?: string;
+    /** Server type */
+    type?: "sse" | "stdio";
+    /** Command (for stdio type) */
+    command?: string;
+    /** Args (for stdio type) */
+    args?: string[];
+    /** Environment variables needed (just the keys, user fills values) */
+    envVars?: string[];
+}
+/**
+ * Source message context where settings link was requested.
+ * Used to send follow-up notifications back to the same conversation.
+ */
+export interface SettingsSourceContext {
+    conversationId: string;
+    channelId: string;
+    teamId?: string;
+    platform?: string;
+}
+/**
+ * Unified session payload for config/auth sessions.
+ *
+ * OAuth sessions populate email/name/oauthUserId. Claimed chat sessions
+ * populate platform/channelId/userId directly.
+ */
+export interface SettingsTokenPayload {
+    /** Agent to configure. Optional when using channel-based entry (user picks agent on page). */
+    agentId?: string;
+    userId: string;
+    platform: string;
+    exp: number;
+    /** Channel that triggered the settings link. Used for agent switching and binding. */
+    channelId?: string;
+    /** Team/workspace ID for multi-tenant platforms (Slack). */
+    teamId?: string;
+    /** OAuth user email (set for OAuth sessions). */
+    email?: string;
+    /** OAuth user display name (set for OAuth sessions). */
+    name?: string;
+    /** OAuth provider user ID (set for OAuth sessions). */
+    oauthUserId?: string;
+    /** Optional message to display during config/auth flows */
+    message?: string;
+    /** Optional provider IDs to associate with the flow */
+    prefillProviders?: string[];
+    /** Optional skills to pre-fill (user confirms to enable) */
+    prefillSkills?: PrefillSkill[];
+    /** Optional MCP servers to pre-fill (user confirms to enable) */
+    prefillMcpServers?: PrefillMcpServer[];
+    /** Optional Nix packages to pre-fill */
+    prefillNixPackages?: string[];
+    /** Optional domain patterns to pre-fill as grants */
+    prefillGrants?: string[];
+    /** Optional source context for post-install notifications */
+    sourceContext?: SettingsSourceContext;
+    /** Settings mode: "admin" has full access, "user" is restricted by allowedScopes */
+    settingsMode?: "admin" | "user";
+    /** Scopes the user is allowed to configure (only relevant when settingsMode is "user") */
+    allowedScopes?: string[];
+    /** Connection ID that triggered this session */
+    connectionId?: string;
+    /** Whether this session has admin access */
+    isAdmin?: boolean;
+}
+//# sourceMappingURL=token-service.d.ts.map

package/dist/auth/settings/token-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-service.d.ts","sourceRoot":"","sources":["../../../src/auth/settings/token-service.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,uDAAuD;IACvD,IAAI,EAAE,MAAM,CAAC;IACb,mBAAmB;IACnB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,kBAAkB;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC/B,+CAA+C;IAC/C,EAAE,EAAE,MAAM,CAAC;IACX,+BAA+B;IAC/B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,gCAAgC;IAChC,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,kBAAkB;IAClB,IAAI,CAAC,EAAE,KAAK,GAAG,OAAO,CAAC;IACvB,+BAA+B;IAC/B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,4BAA4B;IAC5B,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC;IAChB,sEAAsE;IACtE,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;CACpB;AAED;;;GAGG;AACH,MAAM,WAAW,qBAAqB;IACpC,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED;;;;;GAKG;AACH,MAAM,WAAW,oBAAoB;IACnC,8FAA8F;IAC9F,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,sFAAsF;IACtF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,4DAA4D;IAC5D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,iDAAiD;IACjD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,wDAAwD;IACxD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,uDAAuD;IACvD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,2DAA2D;IAC3D,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,uDAAuD;IACvD,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,4DAA4D;IAC5D,aAAa,CAAC,EAAE,YAAY,EAAE,CAAC;IAC/B,iEAAiE;IACjE,iBAAiB,CAAC,EAAE,gBAAgB,EAAE,CAAC;IACvC,wCAAwC;IACxC,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC9B,qDAAqD;IACrD,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,6DAA6D;IAC7D,aAAa,CAAC,EAAE,qBAAqB,CAAC;IACtC,oFAAoF;IACpF,YAAY,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IAChC,0FAA0F;IAC1F,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;IACzB,gDAAgD;IAChD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,4CAA4C;IAC5C,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB"}

package/dist/auth/settings/token-service.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=token-service.js.map

package/dist/auth/settings/token-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-service.js","sourceRoot":"","sources":["../../../src/auth/settings/token-service.ts"],"names":[],"mappings":""}

package/dist/auth/system-env-store.d.ts

@@ -0,0 +1,26 @@
+import type Redis from "ioredis";
+/**
+ * Redis-backed store for system environment variables.
+ * Maintains an in-memory cache for synchronous resolution
+ * (required by the string-substitution system).
+ */
+export declare class SystemEnvStore {
+    private redis;
+    private cache;
+    constructor(redis: Redis);
+    get(key: string): Promise<string | null>;
+    set(key: string, value: string): Promise<void>;
+    delete(key: string): Promise<void>;
+    listAll(): Promise<Record<string, string>>;
+    /**
+     * Synchronous lookup: cache first, then process.env.
+     * Used by the string-substitution env resolver.
+     */
+    resolve(key: string): string | undefined;
+    /**
+     * Load all system:env:* keys from Redis into the in-memory cache.
+     * Call on startup before registering the resolver.
+     */
+    refreshCache(): Promise<void>;
+}
+//# sourceMappingURL=system-env-store.d.ts.map

package/dist/auth/system-env-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"system-env-store.d.ts","sourceRoot":"","sources":["../../src/auth/system-env-store.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,KAAK,MAAM,SAAS,CAAC;AAKjC;;;;GAIG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,KAAK,CAAQ;IACrB,OAAO,CAAC,KAAK,CAAkC;gBAEnC,KAAK,EAAE,KAAK;IAIlB,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAWxC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAW9C,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAUlC,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IA0BhD;;;OAGG;IACH,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAIxC;;;OAGG;IACG,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;CAQpC"}

package/dist/auth/system-env-store.js

@@ -0,0 +1,92 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SystemEnvStore = void 0;
+const core_1 = require("@lobu/core");
+const logger = (0, core_1.createLogger)("system-env-store");
+const KEY_PREFIX = "system:env:";
+/**
+ * Redis-backed store for system environment variables.
+ * Maintains an in-memory cache for synchronous resolution
+ * (required by the string-substitution system).
+ */
+class SystemEnvStore {
+    constructor(redis) {
+        this.cache = new Map();
+        this.redis = redis;
+    }
+    async get(key) {
+        try {
+            const raw = await this.redis.get(`${KEY_PREFIX}${key}`);
+            if (raw === null)
+                return null;
+            return (0, core_1.decrypt)(raw);
+        }
+        catch (error) {
+            logger.error("Failed to get env var", { key, error });
+            return null;
+        }
+    }
+    async set(key, value) {
+        try {
+            await this.redis.set(`${KEY_PREFIX}${key}`, (0, core_1.encrypt)(value));
+            this.cache.set(key, value);
+            logger.info(`Set system env var: ${key}`);
+        }
+        catch (error) {
+            logger.error("Failed to set env var", { key, error });
+            throw error;
+        }
+    }
+    async delete(key) {
+        try {
+            await this.redis.del(`${KEY_PREFIX}${key}`);
+            this.cache.delete(key);
+            logger.info(`Deleted system env var: ${key}`);
+        }
+        catch (error) {
+            logger.error("Failed to delete env var", { key, error });
+        }
+    }
+    async listAll() {
+        const result = {};
+        let cursor = "0";
+        try {
+            do {
+                const [nextCursor, keys] = await this.redis.scan(cursor, "MATCH", `${KEY_PREFIX}*`, "COUNT", 100);
+                cursor = nextCursor;
+                for (const key of keys) {
+                    const raw = await this.redis.get(key);
+                    if (raw !== null) {
+                        result[key.slice(KEY_PREFIX.length)] = (0, core_1.decrypt)(raw);
+                    }
+                }
+            } while (cursor !== "0");
+        }
+        catch (error) {
+            logger.error("Failed to list env vars", { error });
+        }
+        return result;
+    }
+    /**
+     * Synchronous lookup: cache first, then process.env.
+     * Used by the string-substitution env resolver.
+     */
+    resolve(key) {
+        var _a, _b;
+        return (_b = (_a = this.cache.get(key)) !== null && _a !== void 0 ? _a : process.env[key]) !== null && _b !== void 0 ? _b : undefined;
+    }
+    /**
+     * Load all system:env:* keys from Redis into the in-memory cache.
+     * Call on startup before registering the resolver.
+     */
+    async refreshCache() {
+        const all = await this.listAll();
+        this.cache.clear();
+        for (const [key, value] of Object.entries(all)) {
+            this.cache.set(key, value);
+        }
+        logger.debug(`Loaded ${this.cache.size} system env vars into cache`);
+    }
+}
+exports.SystemEnvStore = SystemEnvStore;
+//# sourceMappingURL=system-env-store.js.map

package/dist/auth/system-env-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"system-env-store.js","sourceRoot":"","sources":["../../src/auth/system-env-store.ts"],"names":[],"mappings":";;;AAAA,qCAA4D;AAG5D,MAAM,MAAM,GAAG,IAAA,mBAAY,EAAC,kBAAkB,CAAC,CAAC;AAChD,MAAM,UAAU,GAAG,aAAa,CAAC;AAEjC;;;;GAIG;AACH,MAAa,cAAc;IAIzB,YAAY,KAAY;QAFhB,UAAK,GAAwB,IAAI,GAAG,EAAE,CAAC;QAG7C,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAW;QACnB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,UAAU,GAAG,GAAG,EAAE,CAAC,CAAC;YACxD,IAAI,GAAG,KAAK,IAAI;gBAAE,OAAO,IAAI,CAAC;YAC9B,OAAO,IAAA,cAAO,EAAC,GAAG,CAAC,CAAC;QACtB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,uBAAuB,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;YACtD,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,GAAG,CAAC,GAAW,EAAE,KAAa;QAClC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,UAAU,GAAG,GAAG,EAAE,EAAE,IAAA,cAAO,EAAC,KAAK,CAAC,CAAC,CAAC;YAC5D,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC3B,MAAM,CAAC,IAAI,CAAC,uBAAuB,GAAG,EAAE,CAAC,CAAC;QAC5C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,uBAAuB,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;YACtD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,GAAW;QACtB,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,UAAU,GAAG,GAAG,EAAE,CAAC,CAAC;YAC5C,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACvB,MAAM,CAAC,IAAI,CAAC,2BAA2B,GAAG,EAAE,CAAC,CAAC;QAChD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,0BAA0B,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO;QACX,MAAM,MAAM,GAA2B,EAAE,CAAC;QAC1C,IAAI,MAAM,GAAG,GAAG,CAAC;QACjB,IAAI,CAAC;YACH,GAAG,CAAC;gBACF,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAC9C,MAAM,EACN,OAAO,EACP,GAAG,UAAU,GAAG,EAChB,OAAO,EACP,GAAG,CACJ,CAAC;gBACF,MAAM,GAAG,UAAU,CAAC;gBACpB,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;oBACvB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;oBACtC,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;wBACjB,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,GAAG,IAAA,cAAO,EAAC,GAAG,CAAC,CAAC;oBACtD,CAAC;gBACH,CAAC;YACH,CAAC,QAAQ,MAAM,KAAK,GAAG,EAAE;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;QACrD,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;OAGG;IACH,OAAO,CAAC,GAAW;;QACjB,OAAO,MAAA,MAAA,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,mCAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,mCAAI,SAAS,CAAC;IAC9D,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,YAAY;QAChB,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC;QACjC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACnB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/C,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC7B,CAAC;QACD,MAAM,CAAC,KAAK,CAAC,UAAU,IAAI,CAAC,KAAK,CAAC,IAAI,6BAA6B,CAAC,CAAC;IACvE,CAAC;CACF;AAtFD,wCAsFC"}

package/dist/auth/user-agents-store.d.ts

@@ -0,0 +1,31 @@
+import type Redis from "ioredis";
+/**
+ * Track which agents belong to which users.
+ * Uses Redis sets for fast membership checks and listing.
+ *
+ * Storage pattern:
+ * - user_agents:{platform}:{userId} -> Set of agentIds
+ */
+export declare class UserAgentsStore {
+    private redis;
+    private readonly KEY_PREFIX;
+    constructor(redis: Redis);
+    private buildKey;
+    /**
+     * Add an agent to a user's list
+     */
+    addAgent(platform: string, userId: string, agentId: string): Promise<void>;
+    /**
+     * Remove an agent from a user's list
+     */
+    removeAgent(platform: string, userId: string, agentId: string): Promise<void>;
+    /**
+     * List all agents owned by a user
+     */
+    listAgents(platform: string, userId: string): Promise<string[]>;
+    /**
+     * Check if a user owns a specific agent
+     */
+    ownsAgent(platform: string, userId: string, agentId: string): Promise<boolean>;
+}
+//# sourceMappingURL=user-agents-store.d.ts.map

package/dist/auth/user-agents-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-agents-store.d.ts","sourceRoot":"","sources":["../../src/auth/user-agents-store.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,KAAK,MAAM,SAAS,CAAC;AAIjC;;;;;;GAMG;AACH,qBAAa,eAAe;IAGd,OAAO,CAAC,KAAK;IAFzB,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAiB;gBAExB,KAAK,EAAE,KAAK;IAEhC,OAAO,CAAC,QAAQ;IAIhB;;OAEG;IACG,QAAQ,CACZ,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,IAAI,CAAC;IAMhB;;OAEG;IACG,WAAW,CACf,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,IAAI,CAAC;IAMhB;;OAEG;IACG,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAKrE;;OAEG;IACG,SAAS,CACb,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,OAAO,CAAC;CAKpB"}

package/dist/auth/user-agents-store.js

@@ -0,0 +1,54 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UserAgentsStore = void 0;
+const core_1 = require("@lobu/core");
+const logger = (0, core_1.createLogger)("user-agents-store");
+/**
+ * Track which agents belong to which users.
+ * Uses Redis sets for fast membership checks and listing.
+ *
+ * Storage pattern:
+ * - user_agents:{platform}:{userId} -> Set of agentIds
+ */
+class UserAgentsStore {
+    constructor(redis) {
+        this.redis = redis;
+        this.KEY_PREFIX = "user_agents";
+    }
+    buildKey(platform, userId) {
+        return `${this.KEY_PREFIX}:${platform}:${userId}`;
+    }
+    /**
+     * Add an agent to a user's list
+     */
+    async addAgent(platform, userId, agentId) {
+        const key = this.buildKey(platform, userId);
+        await this.redis.sadd(key, agentId);
+        logger.info(`Added agent ${agentId} to user ${platform}/${userId}`);
+    }
+    /**
+     * Remove an agent from a user's list
+     */
+    async removeAgent(platform, userId, agentId) {
+        const key = this.buildKey(platform, userId);
+        await this.redis.srem(key, agentId);
+        logger.info(`Removed agent ${agentId} from user ${platform}/${userId}`);
+    }
+    /**
+     * List all agents owned by a user
+     */
+    async listAgents(platform, userId) {
+        const key = this.buildKey(platform, userId);
+        return this.redis.smembers(key);
+    }
+    /**
+     * Check if a user owns a specific agent
+     */
+    async ownsAgent(platform, userId, agentId) {
+        const key = this.buildKey(platform, userId);
+        const result = await this.redis.sismember(key, agentId);
+        return result === 1;
+    }
+}
+exports.UserAgentsStore = UserAgentsStore;
+//# sourceMappingURL=user-agents-store.js.map

package/dist/auth/user-agents-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"user-agents-store.js","sourceRoot":"","sources":["../../src/auth/user-agents-store.ts"],"names":[],"mappings":";;;AAAA,qCAA0C;AAG1C,MAAM,MAAM,GAAG,IAAA,mBAAY,EAAC,mBAAmB,CAAC,CAAC;AAEjD;;;;;;GAMG;AACH,MAAa,eAAe;IAG1B,YAAoB,KAAY;QAAZ,UAAK,GAAL,KAAK,CAAO;QAFf,eAAU,GAAG,aAAa,CAAC;IAET,CAAC;IAE5B,QAAQ,CAAC,QAAgB,EAAE,MAAc;QAC/C,OAAO,GAAG,IAAI,CAAC,UAAU,IAAI,QAAQ,IAAI,MAAM,EAAE,CAAC;IACpD,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,QAAQ,CACZ,QAAgB,EAChB,MAAc,EACd,OAAe;QAEf,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC5C,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACpC,MAAM,CAAC,IAAI,CAAC,eAAe,OAAO,YAAY,QAAQ,IAAI,MAAM,EAAE,CAAC,CAAC;IACtE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,WAAW,CACf,QAAgB,EAChB,MAAc,EACd,OAAe;QAEf,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC5C,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACpC,MAAM,CAAC,IAAI,CAAC,iBAAiB,OAAO,cAAc,QAAQ,IAAI,MAAM,EAAE,CAAC,CAAC;IAC1E,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,UAAU,CAAC,QAAgB,EAAE,MAAc;QAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC5C,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,SAAS,CACb,QAAgB,EAChB,MAAc,EACd,OAAe;QAEf,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC5C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACxD,OAAO,MAAM,KAAK,CAAC,CAAC;IACtB,CAAC;CACF;AAvDD,0CAuDC"}

package/dist/channels/binding-service.d.ts

@@ -0,0 +1,69 @@
+import { BaseRedisStore } from "@lobu/core";
+import type Redis from "ioredis";
+/**
+ * Channel binding - links a platform channel to a specific agent
+ */
+export interface ChannelBinding {
+    platform: string;
+    channelId: string;
+    agentId: string;
+    teamId?: string;
+    configuredBy?: string;
+    configuredAt?: number;
+    wasAdmin?: boolean;
+    createdAt: number;
+}
+/**
+ * Internal storage format includes reverse lookup info
+ */
+interface StoredBinding extends ChannelBinding {
+}
+/**
+ * Service for managing channel-to-agent bindings
+ *
+ * Storage patterns:
+ * - Forward lookup: channel_binding:{platform}:{channelId} → binding data
+ * - Forward lookup (Slack): channel_binding:{platform}:{teamId}:{channelId} → binding data
+ * - Reverse index: channel_binding_index:{agentId} → Set of binding keys
+ */
+export declare class ChannelBindingService extends BaseRedisStore<StoredBinding> {
+    private readonly INDEX_PREFIX;
+    constructor(redis: Redis);
+    /**
+     * Build the binding key for a channel
+     * Includes teamId for multi-tenant platforms (e.g., Slack workspaces)
+     */
+    private buildBindingKey;
+    /**
+     * Build the index key for an agent's bindings
+     */
+    private buildIndexKey;
+    /**
+     * Get binding for a channel
+     * Returns null if channel is not bound to any agent
+     */
+    getBinding(platform: string, channelId: string, teamId?: string): Promise<ChannelBinding | null>;
+    /**
+     * Create a binding from a channel to an agent
+     * If the channel was already bound, the old binding is removed
+     */
+    createBinding(agentId: string, platform: string, channelId: string, teamId?: string, options?: {
+        configuredBy?: string;
+        wasAdmin?: boolean;
+    }): Promise<void>;
+    /**
+     * Delete a binding for a channel
+     */
+    deleteBinding(agentId: string, platform: string, channelId: string, teamId?: string): Promise<boolean>;
+    /**
+     * List all bindings for an agent
+     */
+    listBindings(agentId: string): Promise<ChannelBinding[]>;
+    /**
+     * Delete all bindings for an agent
+     * Used when deleting an agent
+     */
+    deleteAllBindings(agentId: string): Promise<number>;
+}
+export {};
+//# sourceMappingURL=binding-service.d.ts.map

package/dist/channels/binding-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"binding-service.d.ts","sourceRoot":"","sources":["../../src/channels/binding-service.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAgB,MAAM,YAAY,CAAC;AAC1D,OAAO,KAAK,KAAK,MAAM,SAAS,CAAC;AAIjC;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;GAEG;AACH,UAAU,aAAc,SAAQ,cAAc;CAE7C;AAED;;;;;;;GAOG;AACH,qBAAa,qBAAsB,SAAQ,cAAc,CAAC,aAAa,CAAC;IACtE,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA2B;gBAE5C,KAAK,EAAE,KAAK;IAQxB;;;OAGG;IACH,OAAO,CAAC,eAAe;IAWvB;;OAEG;IACH,OAAO,CAAC,aAAa;IAIrB;;;OAGG;IACG,UAAU,CACd,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,cAAc,GAAG,IAAI,CAAC;IAWjC;;;OAGG;IACG,aAAa,CACjB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,MAAM,CAAC,EAAE,MAAM,EACf,OAAO,CAAC,EAAE;QAAE,YAAY,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,GACtD,OAAO,CAAC,IAAI,CAAC;IAkChB;;OAEG;IACG,aAAa,CACjB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,MAAM,CAAC,EAAE,MAAM,GACd,OAAO,CAAC,OAAO,CAAC;IA2BnB;;OAEG;IACG,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,cAAc,EAAE,CAAC;IAsB9D;;;OAGG;IACG,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;CAmB1D"}

package/dist/channels/binding-service.js

@@ -0,0 +1,144 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ChannelBindingService = void 0;
+const core_1 = require("@lobu/core");
+const logger = (0, core_1.createLogger)("channel-binding-service");
+/**
+ * Service for managing channel-to-agent bindings
+ *
+ * Storage patterns:
+ * - Forward lookup: channel_binding:{platform}:{channelId} → binding data
+ * - Forward lookup (Slack): channel_binding:{platform}:{teamId}:{channelId} → binding data
+ * - Reverse index: channel_binding_index:{agentId} → Set of binding keys
+ */
+class ChannelBindingService extends core_1.BaseRedisStore {
+    constructor(redis) {
+        super({
+            redis,
+            keyPrefix: "channel_binding",
+            loggerName: "channel-binding-service",
+        });
+        this.INDEX_PREFIX = "channel_binding_index";
+    }
+    /**
+     * Build the binding key for a channel
+     * Includes teamId for multi-tenant platforms (e.g., Slack workspaces)
+     */
+    buildBindingKey(platform, channelId, teamId) {
+        if (teamId) {
+            return this.buildKey(platform, teamId, channelId);
+        }
+        return this.buildKey(platform, channelId);
+    }
+    /**
+     * Build the index key for an agent's bindings
+     */
+    buildIndexKey(agentId) {
+        return `${this.INDEX_PREFIX}:${agentId}`;
+    }
+    /**
+     * Get binding for a channel
+     * Returns null if channel is not bound to any agent
+     */
+    async getBinding(platform, channelId, teamId) {
+        const key = this.buildBindingKey(platform, channelId, teamId);
+        const binding = await this.get(key);
+        if (binding) {
+            logger.debug(`Found binding for ${platform}/${channelId}: ${binding.agentId}`);
+        }
+        return binding;
+    }
+    /**
+     * Create a binding from a channel to an agent
+     * If the channel was already bound, the old binding is removed
+     */
+    async createBinding(agentId, platform, channelId, teamId, options) {
+        const key = this.buildBindingKey(platform, channelId, teamId);
+        // Check if already bound to a different agent
+        const existing = await this.get(key);
+        if (existing && existing.agentId !== agentId) {
+            // Remove from old agent's index
+            const oldIndexKey = this.buildIndexKey(existing.agentId);
+            await this.redis.srem(oldIndexKey, key);
+            logger.info(`Removed binding from agent ${existing.agentId} for ${platform}/${channelId}`);
+        }
+        // Create the binding
+        const binding = {
+            platform,
+            channelId,
+            agentId,
+            teamId,
+            configuredBy: options === null || options === void 0 ? void 0 : options.configuredBy,
+            configuredAt: Date.now(),
+            wasAdmin: options === null || options === void 0 ? void 0 : options.wasAdmin,
+            createdAt: Date.now(),
+        };
+        await this.set(key, binding);
+        // Add to agent's index
+        const indexKey = this.buildIndexKey(agentId);
+        await this.redis.sadd(indexKey, key);
+        logger.info(`Created binding: ${platform}/${channelId} → ${agentId}`);
+    }
+    /**
+     * Delete a binding for a channel
+     */
+    async deleteBinding(agentId, platform, channelId, teamId) {
+        const key = this.buildBindingKey(platform, channelId, teamId);
+        const existing = await this.get(key);
+        if (!existing) {
+            logger.warn(`No binding found for ${platform}/${channelId}`);
+            return false;
+        }
+        if (existing.agentId !== agentId) {
+            logger.warn(`Binding for ${platform}/${channelId} belongs to ${existing.agentId}, not ${agentId}`);
+            return false;
+        }
+        // Delete the binding
+        await this.delete(key);
+        // Remove from agent's index
+        const indexKey = this.buildIndexKey(agentId);
+        await this.redis.srem(indexKey, key);
+        logger.info(`Deleted binding: ${platform}/${channelId} from ${agentId}`);
+        return true;
+    }
+    /**
+     * List all bindings for an agent
+     */
+    async listBindings(agentId) {
+        const indexKey = this.buildIndexKey(agentId);
+        const bindingKeys = await this.redis.smembers(indexKey);
+        if (bindingKeys.length === 0) {
+            return [];
+        }
+        const bindings = [];
+        for (const key of bindingKeys) {
+            const binding = await this.get(key);
+            if (binding) {
+                bindings.push(binding);
+            }
+            else {
+                // Clean up stale index entry
+                await this.redis.srem(indexKey, key);
+            }
+        }
+        return bindings;
+    }
+    /**
+     * Delete all bindings for an agent
+     * Used when deleting an agent
+     */
+    async deleteAllBindings(agentId) {
+        const bindings = await this.listBindings(agentId);
+        for (const binding of bindings) {
+            const key = this.buildBindingKey(binding.platform, binding.channelId, binding.teamId);
+            await this.delete(key);
+        }
+        // Delete the index
+        const indexKey = this.buildIndexKey(agentId);
+        await this.redis.del(indexKey);
+        logger.info(`Deleted ${bindings.length} bindings for agent ${agentId}`);
+        return bindings.length;
+    }
+}
+exports.ChannelBindingService = ChannelBindingService;
+//# sourceMappingURL=binding-service.js.map

package/dist/channels/binding-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"binding-service.js","sourceRoot":"","sources":["../../src/channels/binding-service.ts"],"names":[],"mappings":";;;AAAA,qCAA0D;AAG1D,MAAM,MAAM,GAAG,IAAA,mBAAY,EAAC,yBAAyB,CAAC,CAAC;AAuBvD;;;;;;;GAOG;AACH,MAAa,qBAAsB,SAAQ,qBAA6B;IAGtE,YAAY,KAAY;QACtB,KAAK,CAAC;YACJ,KAAK;YACL,SAAS,EAAE,iBAAiB;YAC5B,UAAU,EAAE,yBAAyB;SACtC,CAAC,CAAC;QAPY,iBAAY,GAAG,uBAAuB,CAAC;IAQxD,CAAC;IAED;;;OAGG;IACK,eAAe,CACrB,QAAgB,EAChB,SAAiB,EACjB,MAAe;QAEf,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;QACpD,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IAC5C,CAAC;IAED;;OAEG;IACK,aAAa,CAAC,OAAe;QACnC,OAAO,GAAG,IAAI,CAAC,YAAY,IAAI,OAAO,EAAE,CAAC;IAC3C,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,UAAU,CACd,QAAgB,EAChB,SAAiB,EACjB,MAAe;QAEf,MAAM,GAAG,GAAG,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QAC9D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACpC,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,CAAC,KAAK,CACV,qBAAqB,QAAQ,IAAI,SAAS,KAAK,OAAO,CAAC,OAAO,EAAE,CACjE,CAAC;QACJ,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,aAAa,CACjB,OAAe,EACf,QAAgB,EAChB,SAAiB,EACjB,MAAe,EACf,OAAuD;QAEvD,MAAM,GAAG,GAAG,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QAE9D,8CAA8C;QAC9C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACrC,IAAI,QAAQ,IAAI,QAAQ,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;YAC7C,gCAAgC;YAChC,MAAM,WAAW,GAAG,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACzD,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;YACxC,MAAM,CAAC,IAAI,CACT,8BAA8B,QAAQ,CAAC,OAAO,QAAQ,QAAQ,IAAI,SAAS,EAAE,CAC9E,CAAC;QACJ,CAAC;QAED,qBAAqB;QACrB,MAAM,OAAO,GAAkB;YAC7B,QAAQ;YACR,SAAS;YACT,OAAO;YACP,MAAM;YACN,YAAY,EAAE,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,YAAY;YACnC,YAAY,EAAE,IAAI,CAAC,GAAG,EAAE;YACxB,QAAQ,EAAE,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,QAAQ;YAC3B,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC;QACF,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAE7B,uBAAuB;QACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAC7C,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QAErC,MAAM,CAAC,IAAI,CAAC,oBAAoB,QAAQ,IAAI,SAAS,MAAM,OAAO,EAAE,CAAC,CAAC;IACxE,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,aAAa,CACjB,OAAe,EACf,QAAgB,EAChB,SAAiB,EACjB,MAAe;QAEf,MAAM,GAAG,GAAG,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QAC9D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAErC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,CAAC,IAAI,CAAC,wBAAwB,QAAQ,IAAI,SAAS,EAAE,CAAC,CAAC;YAC7D,OAAO,KAAK,CAAC;QACf,CAAC;QAED,IAAI,QAAQ,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;YACjC,MAAM,CAAC,IAAI,CACT,eAAe,QAAQ,IAAI,SAAS,eAAe,QAAQ,CAAC,OAAO,SAAS,OAAO,EAAE,CACtF,CAAC;YACF,OAAO,KAAK,CAAC;QACf,CAAC;QAED,qBAAqB;QACrB,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAEvB,4BAA4B;QAC5B,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAC7C,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QAErC,MAAM,CAAC,IAAI,CAAC,oBAAoB,QAAQ,IAAI,SAAS,SAAS,OAAO,EAAE,CAAC,CAAC;QACzE,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,YAAY,CAAC,OAAe;QAChC,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAC7C,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAExD,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC7B,OAAO,EAAE,CAAC;QACZ,CAAC;QAED,MAAM,QAAQ,GAAqB,EAAE,CAAC;QACtC,KAAK,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC;YAC9B,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACpC,IAAI,OAAO,EAAE,CAAC;gBACZ,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACzB,CAAC;iBAAM,CAAC;gBACN,6BAA6B;gBAC7B,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;YACvC,CAAC;QACH,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,iBAAiB,CAAC,OAAe;QACrC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC;QAElD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,MAAM,GAAG,GAAG,IAAI,CAAC,eAAe,CAC9B,OAAO,CAAC,QAAQ,EAChB,OAAO,CAAC,SAAS,EACjB,OAAO,CAAC,MAAM,CACf,CAAC;YACF,MAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC;QAED,mBAAmB;QACnB,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;QAC7C,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAE/B,MAAM,CAAC,IAAI,CAAC,WAAW,QAAQ,CAAC,MAAM,uBAAuB,OAAO,EAAE,CAAC,CAAC;QACxE,OAAO,QAAQ,CAAC,MAAM,CAAC;IACzB,CAAC;CACF;AAnLD,sDAmLC"}

package/dist/channels/index.d.ts

@@ -0,0 +1,2 @@
+export { type ChannelBinding, ChannelBindingService, } from "./binding-service";
+//# sourceMappingURL=index.d.ts.map

package/dist/channels/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/channels/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,cAAc,EACnB,qBAAqB,GACtB,MAAM,mBAAmB,CAAC"}

package/dist/channels/index.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ChannelBindingService = void 0;
+var binding_service_1 = require("./binding-service");
+Object.defineProperty(exports, "ChannelBindingService", { enumerable: true, get: function () { return binding_service_1.ChannelBindingService; } });
+//# sourceMappingURL=index.js.map

package/dist/channels/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/channels/index.ts"],"names":[],"mappings":";;;AAAA,qDAG2B;AADzB,wHAAA,qBAAqB,OAAA"}

package/dist/cli/gateway.d.ts

@@ -0,0 +1,31 @@
+#!/usr/bin/env bun
+import type { Server } from "node:http";
+import { OpenAPIHono } from "@hono/zod-openapi";
+import type { GatewayConfig } from "../config";
+export interface CreateGatewayAppOptions {
+    secretProxy: any;
+    workerGateway: any;
+    mcpProxy: any;
+    interactionService?: any;
+    platformRegistry?: any;
+    coreServices?: any;
+    chatInstanceManager?: import("../connections").ChatInstanceManager | null;
+    /** Custom auth provider for embedded mode. When set, gateway delegates auth to this function instead of using cookie-based sessions. */
+    authProvider?: import("../routes/public/settings-auth").AuthProvider;
+}
+/**
+ * Create the Hono app with all gateway routes.
+ * Returns the app without starting an HTTP server — the caller can mount it
+ * on their own server (embedded mode) or pass it to `startGatewayServer()`.
+ */
+export declare function createGatewayApp(options: CreateGatewayAppOptions): OpenAPIHono;
+/**
+ * Start an HTTP server for the gateway Hono app.
+ * Used in standalone mode. In embedded mode, the host creates its own server.
+ */
+export declare function startGatewayServer(app: OpenAPIHono, port?: number): Server;
+/**
+ * Start the gateway with the provided configuration
+ */
+export declare function startGateway(config: GatewayConfig): Promise<void>;
+//# sourceMappingURL=gateway.d.ts.map