@openpalm/ui 0.11.0-rc.10

package/build/server/chunks/_server.ts-otJRaSSq.js

@@ -0,0 +1,139 @@
+import { j as json } from './exports-D1quPX8S.js';
+import { X as importHostOpenCode, E as detectHostOpenCode, i as authJsonPath, m as checkDocker, k as buildComposeOptions } from './src-BkvQ5Uuf.js';
+import { b as getState } from './endpoints-Drq_J-2Z.js';
+import { o as opencodeFetch } from './http-VqOG8hyj.js';
+import { c as composeRestart } from './docker-B23w4kr6.js';
+import { existsSync, readFileSync } from 'node:fs';
+import './utils-BSRjJDrZ.js';
+import './chunk-CLZ62Ad-.js';
+import 'node:module';
+import 'node:path';
+import 'node:child_process';
+import 'node:os';
+import 'buffer';
+import 'node:url';
+import 'node:crypto';
+import 'events';
+import 'fs';
+import 'node:events';
+import 'node:stream';
+import 'node:string_decoder';
+import 'path';
+import 'assert';
+import 'zlib';
+import 'node:assert';
+import 'node:fs/promises';
+
+//#region src/routes/api/setup/import-host/+server.ts
+/**
+* POST /api/setup/import-host
+*
+* Setup-phase equivalent of POST /admin/providers/import-host.
+* No admin auth required — the admin token hasn't been written yet during setup.
+*
+* Copies host OpenCode config + auth into OP_HOME and live-pushes credentials
+* to the running OpenCode subprocess so providers appear connected immediately.
+*/
+async function pushAuthToOpenCode(authPath) {
+	let raw;
+	try {
+		raw = JSON.parse(readFileSync(authPath, "utf-8"));
+	} catch (err) {
+		return {
+			pushed: [],
+			errors: [{
+				provider: "*",
+				error: `Could not read auth.json: ${err instanceof Error ? err.message : String(err)}`
+			}]
+		};
+	}
+	if (!raw || typeof raw !== "object" || Array.isArray(raw)) return {
+		pushed: [],
+		errors: [{
+			provider: "*",
+			error: "auth.json is not a JSON object"
+		}]
+	};
+	const pushed = [];
+	const errors = [];
+	for (const [providerId, value] of Object.entries(raw)) try {
+		await opencodeFetch(`/auth/${encodeURIComponent(providerId)}`, {
+			method: "PUT",
+			body: JSON.stringify(value)
+		});
+		pushed.push(providerId);
+	} catch (err) {
+		errors.push({
+			provider: providerId,
+			error: err instanceof Error ? err.message : String(err)
+		});
+	}
+	return {
+		pushed,
+		errors
+	};
+}
+/** Restart provider-consuming services so they re-read imported startup config. */
+async function restartProviderConsumers(state) {
+	const services = ["assistant"];
+	if (!(await checkDocker()).ok) return {
+		restarted: [],
+		failed: services.map((s) => ({
+			service: s,
+			error: "docker unavailable"
+		}))
+	};
+	const opts = buildComposeOptions(state);
+	const restarted = [];
+	const failed = [];
+	for (const service of services) try {
+		const r = await composeRestart([service], opts);
+		if (r.ok) restarted.push(service);
+		else failed.push({
+			service,
+			error: r.stderr || `exit ${r.code}`
+		});
+	} catch (err) {
+		failed.push({
+			service,
+			error: err instanceof Error ? err.message : String(err)
+		});
+	}
+	return {
+		restarted,
+		failed
+	};
+}
+var POST = async () => {
+	try {
+		const state = getState();
+		const result = importHostOpenCode(state, { overwriteConflicts: false });
+		const hostStatus = detectHostOpenCode();
+		let pushResult = {
+			pushed: [],
+			errors: []
+		};
+		const importedAuthPath = authJsonPath(state);
+		if (existsSync(importedAuthPath)) pushResult = await pushAuthToOpenCode(importedAuthPath);
+		else if (hostStatus.authPath) pushResult = await pushAuthToOpenCode(hostStatus.authPath);
+		const restart = await restartProviderConsumers(state);
+		return json({
+			ok: true,
+			imported: result.imported,
+			conflicts: result.conflicts.length,
+			livePushed: pushResult.pushed.length,
+			pushedProviders: pushResult.pushed,
+			errors: pushResult.errors,
+			restarted: restart.restarted,
+			restartFailed: restart.failed
+		});
+	} catch (err) {
+		return json({
+			ok: false,
+			error: err instanceof Error ? err.message : "Import failed"
+		}, { status: 500 });
+	}
+};
+
+export { POST };
+//# sourceMappingURL=_server.ts-otJRaSSq.js.map

package/build/server/chunks/_server.ts-otJRaSSq.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-otJRaSSq.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/setup/import-host/_server.ts.js"],"sourcesContent":["import { r as json } from \"../../../../../chunks/exports.js\";\nimport { Et as authJsonPath, T as checkDocker, n as importHostOpenCode, t as detectHostOpenCode, w as buildComposeOptions } from \"../../../../../chunks/src.js\";\nimport { c as getState } from \"../../../../../chunks/endpoints.js\";\nimport { t as opencodeFetch } from \"../../../../../chunks/http.js\";\nimport { t as composeRestart } from \"../../../../../chunks/docker.js\";\nimport { existsSync, readFileSync } from \"node:fs\";\n//#region src/routes/api/setup/import-host/+server.ts\n/**\n* POST /api/setup/import-host\n*\n* Setup-phase equivalent of POST /admin/providers/import-host.\n* No admin auth required — the admin token hasn't been written yet during setup.\n*\n* Copies host OpenCode config + auth into OP_HOME and live-pushes credentials\n* to the running OpenCode subprocess so providers appear connected immediately.\n*/\nasync function pushAuthToOpenCode(authPath) {\n\tlet raw;\n\ttry {\n\t\traw = JSON.parse(readFileSync(authPath, \"utf-8\"));\n\t} catch (err) {\n\t\treturn {\n\t\t\tpushed: [],\n\t\t\terrors: [{\n\t\t\t\tprovider: \"*\",\n\t\t\t\terror: `Could not read auth.json: ${err instanceof Error ? err.message : String(err)}`\n\t\t\t}]\n\t\t};\n\t}\n\tif (!raw || typeof raw !== \"object\" || Array.isArray(raw)) return {\n\t\tpushed: [],\n\t\terrors: [{\n\t\t\tprovider: \"*\",\n\t\t\terror: \"auth.json is not a JSON object\"\n\t\t}]\n\t};\n\tconst pushed = [];\n\tconst errors = [];\n\tfor (const [providerId, value] of Object.entries(raw)) try {\n\t\tawait opencodeFetch(`/auth/${encodeURIComponent(providerId)}`, {\n\t\t\tmethod: \"PUT\",\n\t\t\tbody: JSON.stringify(value)\n\t\t});\n\t\tpushed.push(providerId);\n\t} catch (err) {\n\t\terrors.push({\n\t\t\tprovider: providerId,\n\t\t\terror: err instanceof Error ? err.message : String(err)\n\t\t});\n\t}\n\treturn {\n\t\tpushed,\n\t\terrors\n\t};\n}\n/** Restart provider-consuming services so they re-read imported startup config. */\nasync function restartProviderConsumers(state) {\n\tconst services = [\"assistant\"];\n\tif (!(await checkDocker()).ok) return {\n\t\trestarted: [],\n\t\tfailed: services.map((s) => ({\n\t\t\tservice: s,\n\t\t\terror: \"docker unavailable\"\n\t\t}))\n\t};\n\tconst opts = buildComposeOptions(state);\n\tconst restarted = [];\n\tconst failed = [];\n\tfor (const service of services) try {\n\t\tconst r = await composeRestart([service], opts);\n\t\tif (r.ok) restarted.push(service);\n\t\telse failed.push({\n\t\t\tservice,\n\t\t\terror: r.stderr || `exit ${r.code}`\n\t\t});\n\t} catch (err) {\n\t\tfailed.push({\n\t\t\tservice,\n\t\t\terror: err instanceof Error ? err.message : String(err)\n\t\t});\n\t}\n\treturn {\n\t\trestarted,\n\t\tfailed\n\t};\n}\nvar POST = async () => {\n\ttry {\n\t\tconst state = getState();\n\t\tconst result = importHostOpenCode(state, { overwriteConflicts: false });\n\t\tconst hostStatus = detectHostOpenCode();\n\t\tlet pushResult = {\n\t\t\tpushed: [],\n\t\t\terrors: []\n\t\t};\n\t\tconst importedAuthPath = authJsonPath(state);\n\t\tif (existsSync(importedAuthPath)) pushResult = await pushAuthToOpenCode(importedAuthPath);\n\t\telse if (hostStatus.authPath) pushResult = await pushAuthToOpenCode(hostStatus.authPath);\n\t\tconst restart = await restartProviderConsumers(state);\n\t\treturn json({\n\t\t\tok: true,\n\t\t\timported: result.imported,\n\t\t\tconflicts: result.conflicts.length,\n\t\t\tlivePushed: pushResult.pushed.length,\n\t\t\tpushedProviders: pushResult.pushed,\n\t\t\terrors: pushResult.errors,\n\t\t\trestarted: restart.restarted,\n\t\t\trestartFailed: restart.failed\n\t\t});\n\t} catch (err) {\n\t\treturn json({\n\t\t\tok: false,\n\t\t\terror: err instanceof Error ? err.message : \"Import failed\"\n\t\t}, { status: 500 });\n\t}\n};\n//#endregion\nexport { POST };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAMA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,eAAe,kBAAkB,CAAC,QAAQ,EAAE;AAC5C,CAAC,IAAI,GAAG;AACR,CAAC,IAAI;AACL,EAAE,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;AACnD,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,OAAO;AACT,GAAG,MAAM,EAAE,EAAE;AACb,GAAG,MAAM,EAAE,CAAC;AACZ,IAAI,QAAQ,EAAE,GAAG;AACjB,IAAI,KAAK,EAAE,CAAC,0BAA0B,EAAE,GAAG,YAAY,KAAK,GAAG,GAAG,CAAC,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;AACzF,IAAI;AACJ,GAAG;AACH,CAAC;AACD,CAAC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,OAAO;AACnE,EAAE,MAAM,EAAE,EAAE;AACZ,EAAE,MAAM,EAAE,CAAC;AACX,GAAG,QAAQ,EAAE,GAAG;AAChB,GAAG,KAAK,EAAE;AACV,GAAG;AACH,EAAE;AACF,CAAC,MAAM,MAAM,GAAG,EAAE;AAClB,CAAC,MAAM,MAAM,GAAG,EAAE;AAClB,CAAC,KAAK,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,IAAI;AAC5D,EAAE,MAAM,aAAa,CAAC,CAAC,MAAM,EAAE,kBAAkB,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE;AACjE,GAAG,MAAM,EAAE,KAAK;AAChB,GAAG,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK;AAC7B,GAAG,CAAC;AACJ,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;AACzB,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,MAAM,CAAC,IAAI,CAAC;AACd,GAAG,QAAQ,EAAE,UAAU;AACvB,GAAG,KAAK,EAAE,GAAG,YAAY,KAAK,GAAG,GAAG,CAAC,OAAO,GAAG,MAAM,CAAC,GAAG;AACzD,GAAG,CAAC;AACJ,CAAC;AACD,CAAC,OAAO;AACR,EAAE,MAAM;AACR,EAAE;AACF,EAAE;AACF;AACA;AACA,eAAe,wBAAwB,CAAC,KAAK,EAAE;AAC/C,CAAC,MAAM,QAAQ,GAAG,CAAC,WAAW,CAAC;AAC/B,CAAC,IAAI,CAAC,CAAC,MAAM,WAAW,EAAE,EAAE,EAAE,EAAE,OAAO;AACvC,EAAE,SAAS,EAAE,EAAE;AACf,EAAE,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM;AAC/B,GAAG,OAAO,EAAE,CAAC;AACb,GAAG,KAAK,EAAE;AACV,GAAG,CAAC;AACJ,EAAE;AACF,CAAC,MAAM,IAAI,GAAG,mBAAmB,CAAC,KAAK,CAAC;AACxC,CAAC,MAAM,SAAS,GAAG,EAAE;AACrB,CAAC,MAAM,MAAM,GAAG,EAAE;AAClB,CAAC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,IAAI;AACrC,EAAE,MAAM,CAAC,GAAG,MAAM,cAAc,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC;AACjD,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC;AACnC,OAAO,MAAM,CAAC,IAAI,CAAC;AACnB,GAAG,OAAO;AACV,GAAG,KAAK,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC;AACrC,GAAG,CAAC;AACJ,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,MAAM,CAAC,IAAI,CAAC;AACd,GAAG,OAAO;AACV,GAAG,KAAK,EAAE,GAAG,YAAY,KAAK,GAAG,GAAG,CAAC,OAAO,GAAG,MAAM,CAAC,GAAG;AACzD,GAAG,CAAC;AACJ,CAAC;AACD,CAAC,OAAO;AACR,EAAE,SAAS;AACX,EAAE;AACF,EAAE;AACF;AACG,IAAC,IAAI,GAAG,YAAY;AACvB,CAAC,IAAI;AACL,EAAE,MAAM,KAAK,GAAG,QAAQ,EAAE;AAC1B,EAAE,MAAM,MAAM,GAAG,kBAAkB,CAAC,KAAK,EAAE,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC;AACzE,EAAE,MAAM,UAAU,GAAG,kBAAkB,EAAE;AACzC,EAAE,IAAI,UAAU,GAAG;AACnB,GAAG,MAAM,EAAE,EAAE;AACb,GAAG,MAAM,EAAE;AACX,GAAG;AACH,EAAE,MAAM,gBAAgB,GAAG,YAAY,CAAC,KAAK,CAAC;AAC9C,EAAE,IAAI,UAAU,CAAC,gBAAgB,CAAC,EAAE,UAAU,GAAG,MAAM,kBAAkB,CAAC,gBAAgB,CAAC;AAC3F,OAAO,IAAI,UAAU,CAAC,QAAQ,EAAE,UAAU,GAAG,MAAM,kBAAkB,CAAC,UAAU,CAAC,QAAQ,CAAC;AAC1F,EAAE,MAAM,OAAO,GAAG,MAAM,wBAAwB,CAAC,KAAK,CAAC;AACvD,EAAE,OAAO,IAAI,CAAC;AACd,GAAG,EAAE,EAAE,IAAI;AACX,GAAG,QAAQ,EAAE,MAAM,CAAC,QAAQ;AAC5B,GAAG,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,MAAM;AACrC,GAAG,UAAU,EAAE,UAAU,CAAC,MAAM,CAAC,MAAM;AACvC,GAAG,eAAe,EAAE,UAAU,CAAC,MAAM;AACrC,GAAG,MAAM,EAAE,UAAU,CAAC,MAAM;AAC5B,GAAG,SAAS,EAAE,OAAO,CAAC,SAAS;AAC/B,GAAG,aAAa,EAAE,OAAO,CAAC;AAC1B,GAAG,CAAC;AACJ,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,OAAO,IAAI,CAAC;AACd,GAAG,EAAE,EAAE,KAAK;AACZ,GAAG,KAAK,EAAE,GAAG,YAAY,KAAK,GAAG,GAAG,CAAC,OAAO,GAAG;AAC/C,GAAG,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACrB,CAAC;AACD;;;;"}

package/build/server/chunks/_server.ts-rXhjnBtw.js

@@ -0,0 +1,49 @@
+import { j as json } from './exports-D1quPX8S.js';
+import { g as getOpenCodeClient } from './helpers-CX6xRBmt.js';
+import './utils-BSRjJDrZ.js';
+import './src-BkvQ5Uuf.js';
+import './chunk-CLZ62Ad-.js';
+import 'node:module';
+import 'node:fs';
+import 'node:path';
+import 'node:child_process';
+import 'node:os';
+import 'buffer';
+import 'node:url';
+import 'node:crypto';
+import 'events';
+import 'fs';
+import 'node:events';
+import 'node:stream';
+import 'node:string_decoder';
+import 'path';
+import 'assert';
+import 'zlib';
+import 'node:assert';
+import 'node:fs/promises';
+import './endpoints-Drq_J-2Z.js';
+
+//#region src/routes/api/setup/opencode/auth/[provider]/+server.ts
+var PROVIDER_ID_RE = /^[a-zA-Z0-9_-]{1,64}$/;
+var PUT = async ({ params, request }) => {
+	if (!PROVIDER_ID_RE.test(params.provider)) return json({
+		ok: false,
+		message: "Invalid provider"
+	}, { status: 400 });
+	try {
+		const { key } = await request.json();
+		if (!(await getOpenCodeClient().setProviderApiKey(params.provider, typeof key === "string" ? key : "")).ok) return json({
+			ok: false,
+			message: "Failed to set provider credentials"
+		}, { status: 400 });
+		return json({ ok: true });
+	} catch {
+		return json({
+			ok: false,
+			message: "Failed to set provider credentials"
+		}, { status: 500 });
+	}
+};
+
+export { PUT };
+//# sourceMappingURL=_server.ts-rXhjnBtw.js.map

package/build/server/chunks/_server.ts-rXhjnBtw.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-rXhjnBtw.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/setup/opencode/auth/_provider_/_server.ts.js"],"sourcesContent":["import { r as json } from \"../../../../../../../chunks/exports.js\";\nimport { a as getOpenCodeClient } from \"../../../../../../../chunks/helpers.js\";\n//#region src/routes/api/setup/opencode/auth/[provider]/+server.ts\nvar PROVIDER_ID_RE = /^[a-zA-Z0-9_-]{1,64}$/;\nvar PUT = async ({ params, request }) => {\n\tif (!PROVIDER_ID_RE.test(params.provider)) return json({\n\t\tok: false,\n\t\tmessage: \"Invalid provider\"\n\t}, { status: 400 });\n\ttry {\n\t\tconst { key } = await request.json();\n\t\tif (!(await getOpenCodeClient().setProviderApiKey(params.provider, typeof key === \"string\" ? key : \"\")).ok) return json({\n\t\t\tok: false,\n\t\t\tmessage: \"Failed to set provider credentials\"\n\t\t}, { status: 400 });\n\t\treturn json({ ok: true });\n\t} catch {\n\t\treturn json({\n\t\t\tok: false,\n\t\t\tmessage: \"Failed to set provider credentials\"\n\t\t}, { status: 500 });\n\t}\n};\n//#endregion\nexport { PUT };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAEA;AACA,IAAI,cAAc,GAAG,uBAAuB;AACzC,IAAC,GAAG,GAAG,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK;AACzC,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,OAAO,IAAI,CAAC;AACxD,EAAE,EAAE,EAAE,KAAK;AACX,EAAE,OAAO,EAAE;AACX,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACpB,CAAC,IAAI;AACL,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,OAAO,CAAC,IAAI,EAAE;AACtC,EAAE,IAAI,CAAC,CAAC,MAAM,iBAAiB,EAAE,CAAC,iBAAiB,CAAC,MAAM,CAAC,QAAQ,EAAE,OAAO,GAAG,KAAK,QAAQ,GAAG,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,EAAE,OAAO,IAAI,CAAC;AAC1H,GAAG,EAAE,EAAE,KAAK;AACZ,GAAG,OAAO,EAAE;AACZ,GAAG,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACrB,EAAE,OAAO,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC,CAAC,CAAC,MAAM;AACT,EAAE,OAAO,IAAI,CAAC;AACd,GAAG,EAAE,EAAE,KAAK;AACZ,GAAG,OAAO,EAAE;AACZ,GAAG,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACrB,CAAC;AACD;;;;"}

package/build/server/chunks/_server.ts-wZ88P3nX.js

@@ -0,0 +1,157 @@
+import { X as importHostOpenCode, E as detectHostOpenCode, i as authJsonPath, m as checkDocker, k as buildComposeOptions } from './src-BkvQ5Uuf.js';
+import { b as getState } from './endpoints-Drq_J-2Z.js';
+import { d as getRequestId, r as requireAdmin, p as parseJsonBody, e as errorResponse, h as jsonResponse } from './helpers-CX6xRBmt.js';
+import { w as withSerialQueue } from './serial-queue-D9FEpYVv.js';
+import { o as opencodeFetch } from './http-VqOG8hyj.js';
+import { c as composeRestart } from './docker-B23w4kr6.js';
+import { existsSync, readFileSync } from 'node:fs';
+import './chunk-CLZ62Ad-.js';
+import 'node:module';
+import 'node:path';
+import 'node:child_process';
+import 'node:os';
+import 'buffer';
+import 'node:url';
+import 'node:crypto';
+import 'events';
+import 'fs';
+import 'node:events';
+import 'node:stream';
+import 'node:string_decoder';
+import 'path';
+import 'assert';
+import 'zlib';
+import 'node:assert';
+import 'node:fs/promises';
+
+//#region src/routes/admin/providers/import-host/+server.ts
+/**
+* POST /admin/providers/import-host
+*
+* Copies host OpenCode config + auth into OP_HOME, then pushes each
+* imported credential to the running OpenCode server so the providers
+* appear connected immediately (no restart required).
+*
+* - opencode.json: stripped of plugin/mcp/permission keys, merged with
+*   existing OP_HOME config. Provider conflicts preserved by default.
+* - auth.json: byte-copied and chmodded 0o600. Never logged.
+* - Live push: best-effort PUT to OpenCode /auth/{id} per credential.
+*   If OpenCode is unreachable, the file copy still applies and OpenCode
+*   will pick up the credentials on next restart.
+* - Service restart: assistant is restarted after the import so opencode.json
+*   provider blocks are re-read (live push only updates the auth store, not
+*   config).
+*
+* Body (optional JSON):
+*   { overwriteConflicts?: boolean }   — default false
+*
+* Auth: admin token required.
+*/
+/**
+* Restart services that hold provider state in startup config.
+* Best-effort: the file-level import is the durable part; this is the polish
+* that makes the change visible without the user having to bounce things by hand.
+* OpenCode caches opencode.json provider blocks at startup, so imported
+* provider config needs a fresh assistant process.
+*/
+async function restartProviderConsumers() {
+	const services = ["assistant"];
+	if (!(await checkDocker()).ok) return {
+		restarted: [],
+		failed: services.map((s) => ({
+			service: s,
+			error: "docker unavailable"
+		}))
+	};
+	const opts = buildComposeOptions(getState());
+	const restarted = [];
+	const failed = [];
+	for (const service of services) try {
+		const r = await composeRestart([service], opts);
+		if (r.ok) restarted.push(service);
+		else failed.push({
+			service,
+			error: r.stderr || `exit ${r.code}`
+		});
+	} catch (err) {
+		failed.push({
+			service,
+			error: err instanceof Error ? err.message : String(err)
+		});
+	}
+	return {
+		restarted,
+		failed
+	};
+}
+/** Push each auth.json entry to OpenCode's /auth/{id} so the running process sees them. */
+async function pushAuthToOpenCode(authPath) {
+	let raw;
+	try {
+		raw = JSON.parse(readFileSync(authPath, "utf-8"));
+	} catch {
+		return {
+			pushed: 0,
+			failed: []
+		};
+	}
+	if (!raw || typeof raw !== "object" || Array.isArray(raw)) return {
+		pushed: 0,
+		failed: []
+	};
+	let pushed = 0;
+	const failed = [];
+	for (const [providerId, value] of Object.entries(raw)) try {
+		await opencodeFetch(`/auth/${encodeURIComponent(providerId)}`, {
+			method: "PUT",
+			body: JSON.stringify(value)
+		});
+		pushed++;
+	} catch {
+		failed.push(providerId);
+	}
+	return {
+		pushed,
+		failed
+	};
+}
+var POST = async (event) => {
+	const requestId = getRequestId(event);
+	const authError = requireAdmin(event, requestId);
+	if (authError) return authError;
+	return withSerialQueue("admin:providers:import-host", async () => {
+		const state = getState();
+		let overwriteConflicts = false;
+		if ((event.request.headers.get("content-type") ?? "").includes("application/json")) {
+			const parsed = await parseJsonBody(event.request);
+			if (!("error" in parsed)) overwriteConflicts = parsed.data.overwriteConflicts === true;
+		}
+		let result;
+		try {
+			result = importHostOpenCode(state, { overwriteConflicts });
+		} catch (err) {
+			return errorResponse(500, "import_failed", err instanceof Error ? err.message : "Import failed", {}, requestId);
+		}
+		const hostStatus = detectHostOpenCode();
+		let livePush = {
+			pushed: 0,
+			failed: []
+		};
+		const importedAuthPath = authJsonPath(state);
+		if (existsSync(importedAuthPath)) livePush = await pushAuthToOpenCode(importedAuthPath);
+		else if (hostStatus.authPath) livePush = await pushAuthToOpenCode(hostStatus.authPath);
+		const restart = await restartProviderConsumers();
+		return jsonResponse(200, {
+			ok: true,
+			imported: result.imported,
+			conflicts: result.conflicts,
+			livePushed: livePush.pushed,
+			livePushFailed: livePush.failed,
+			restarted: restart.restarted,
+			restartFailed: restart.failed
+		}, requestId);
+	});
+};
+
+export { POST };
+//# sourceMappingURL=_server.ts-wZ88P3nX.js.map

package/build/server/chunks/_server.ts-wZ88P3nX.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-wZ88P3nX.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/admin/providers/import-host/_server.ts.js"],"sourcesContent":["import { Et as authJsonPath, T as checkDocker, n as importHostOpenCode, t as detectHostOpenCode, w as buildComposeOptions } from \"../../../../../chunks/src.js\";\nimport { c as getState } from \"../../../../../chunks/endpoints.js\";\nimport { d as requireAdmin, i as errorResponse, l as jsonResponse, o as getRequestId, u as parseJsonBody } from \"../../../../../chunks/helpers.js\";\nimport { t as withSerialQueue } from \"../../../../../chunks/serial-queue.js\";\nimport { t as opencodeFetch } from \"../../../../../chunks/http.js\";\nimport { t as composeRestart } from \"../../../../../chunks/docker.js\";\nimport { existsSync, readFileSync } from \"node:fs\";\n//#region src/routes/admin/providers/import-host/+server.ts\n/**\n* POST /admin/providers/import-host\n*\n* Copies host OpenCode config + auth into OP_HOME, then pushes each\n* imported credential to the running OpenCode server so the providers\n* appear connected immediately (no restart required).\n*\n* - opencode.json: stripped of plugin/mcp/permission keys, merged with\n*   existing OP_HOME config. Provider conflicts preserved by default.\n* - auth.json: byte-copied and chmodded 0o600. Never logged.\n* - Live push: best-effort PUT to OpenCode /auth/{id} per credential.\n*   If OpenCode is unreachable, the file copy still applies and OpenCode\n*   will pick up the credentials on next restart.\n* - Service restart: assistant is restarted after the import so opencode.json\n*   provider blocks are re-read (live push only updates the auth store, not\n*   config).\n*\n* Body (optional JSON):\n*   { overwriteConflicts?: boolean }   — default false\n*\n* Auth: admin token required.\n*/\n/**\n* Restart services that hold provider state in startup config.\n* Best-effort: the file-level import is the durable part; this is the polish\n* that makes the change visible without the user having to bounce things by hand.\n* OpenCode caches opencode.json provider blocks at startup, so imported\n* provider config needs a fresh assistant process.\n*/\nasync function restartProviderConsumers() {\n\tconst services = [\"assistant\"];\n\tif (!(await checkDocker()).ok) return {\n\t\trestarted: [],\n\t\tfailed: services.map((s) => ({\n\t\t\tservice: s,\n\t\t\terror: \"docker unavailable\"\n\t\t}))\n\t};\n\tconst opts = buildComposeOptions(getState());\n\tconst restarted = [];\n\tconst failed = [];\n\tfor (const service of services) try {\n\t\tconst r = await composeRestart([service], opts);\n\t\tif (r.ok) restarted.push(service);\n\t\telse failed.push({\n\t\t\tservice,\n\t\t\terror: r.stderr || `exit ${r.code}`\n\t\t});\n\t} catch (err) {\n\t\tfailed.push({\n\t\t\tservice,\n\t\t\terror: err instanceof Error ? err.message : String(err)\n\t\t});\n\t}\n\treturn {\n\t\trestarted,\n\t\tfailed\n\t};\n}\n/** Push each auth.json entry to OpenCode's /auth/{id} so the running process sees them. */\nasync function pushAuthToOpenCode(authPath) {\n\tlet raw;\n\ttry {\n\t\traw = JSON.parse(readFileSync(authPath, \"utf-8\"));\n\t} catch {\n\t\treturn {\n\t\t\tpushed: 0,\n\t\t\tfailed: []\n\t\t};\n\t}\n\tif (!raw || typeof raw !== \"object\" || Array.isArray(raw)) return {\n\t\tpushed: 0,\n\t\tfailed: []\n\t};\n\tlet pushed = 0;\n\tconst failed = [];\n\tfor (const [providerId, value] of Object.entries(raw)) try {\n\t\tawait opencodeFetch(`/auth/${encodeURIComponent(providerId)}`, {\n\t\t\tmethod: \"PUT\",\n\t\t\tbody: JSON.stringify(value)\n\t\t});\n\t\tpushed++;\n\t} catch {\n\t\tfailed.push(providerId);\n\t}\n\treturn {\n\t\tpushed,\n\t\tfailed\n\t};\n}\nvar POST = async (event) => {\n\tconst requestId = getRequestId(event);\n\tconst authError = requireAdmin(event, requestId);\n\tif (authError) return authError;\n\treturn withSerialQueue(\"admin:providers:import-host\", async () => {\n\t\tconst state = getState();\n\t\tlet overwriteConflicts = false;\n\t\tif ((event.request.headers.get(\"content-type\") ?? \"\").includes(\"application/json\")) {\n\t\t\tconst parsed = await parseJsonBody(event.request);\n\t\t\tif (!(\"error\" in parsed)) overwriteConflicts = parsed.data.overwriteConflicts === true;\n\t\t}\n\t\tlet result;\n\t\ttry {\n\t\t\tresult = importHostOpenCode(state, { overwriteConflicts });\n\t\t} catch (err) {\n\t\t\treturn errorResponse(500, \"import_failed\", err instanceof Error ? err.message : \"Import failed\", {}, requestId);\n\t\t}\n\t\tconst hostStatus = detectHostOpenCode();\n\t\tlet livePush = {\n\t\t\tpushed: 0,\n\t\t\tfailed: []\n\t\t};\n\t\tconst importedAuthPath = authJsonPath(state);\n\t\tif (existsSync(importedAuthPath)) livePush = await pushAuthToOpenCode(importedAuthPath);\n\t\telse if (hostStatus.authPath) livePush = await pushAuthToOpenCode(hostStatus.authPath);\n\t\tconst restart = await restartProviderConsumers();\n\t\treturn jsonResponse(200, {\n\t\t\tok: true,\n\t\t\timported: result.imported,\n\t\t\tconflicts: result.conflicts,\n\t\t\tlivePushed: livePush.pushed,\n\t\t\tlivePushFailed: livePush.failed,\n\t\t\trestarted: restart.restarted,\n\t\t\trestartFailed: restart.failed\n\t\t}, requestId);\n\t});\n};\n//#endregion\nexport { POST };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAOA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,eAAe,wBAAwB,GAAG;AAC1C,CAAC,MAAM,QAAQ,GAAG,CAAC,WAAW,CAAC;AAC/B,CAAC,IAAI,CAAC,CAAC,MAAM,WAAW,EAAE,EAAE,EAAE,EAAE,OAAO;AACvC,EAAE,SAAS,EAAE,EAAE;AACf,EAAE,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM;AAC/B,GAAG,OAAO,EAAE,CAAC;AACb,GAAG,KAAK,EAAE;AACV,GAAG,CAAC;AACJ,EAAE;AACF,CAAC,MAAM,IAAI,GAAG,mBAAmB,CAAC,QAAQ,EAAE,CAAC;AAC7C,CAAC,MAAM,SAAS,GAAG,EAAE;AACrB,CAAC,MAAM,MAAM,GAAG,EAAE;AAClB,CAAC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,IAAI;AACrC,EAAE,MAAM,CAAC,GAAG,MAAM,cAAc,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC;AACjD,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC;AACnC,OAAO,MAAM,CAAC,IAAI,CAAC;AACnB,GAAG,OAAO;AACV,GAAG,KAAK,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC;AACrC,GAAG,CAAC;AACJ,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,MAAM,CAAC,IAAI,CAAC;AACd,GAAG,OAAO;AACV,GAAG,KAAK,EAAE,GAAG,YAAY,KAAK,GAAG,GAAG,CAAC,OAAO,GAAG,MAAM,CAAC,GAAG;AACzD,GAAG,CAAC;AACJ,CAAC;AACD,CAAC,OAAO;AACR,EAAE,SAAS;AACX,EAAE;AACF,EAAE;AACF;AACA;AACA,eAAe,kBAAkB,CAAC,QAAQ,EAAE;AAC5C,CAAC,IAAI,GAAG;AACR,CAAC,IAAI;AACL,EAAE,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;AACnD,CAAC,CAAC,CAAC,MAAM;AACT,EAAE,OAAO;AACT,GAAG,MAAM,EAAE,CAAC;AACZ,GAAG,MAAM,EAAE;AACX,GAAG;AACH,CAAC;AACD,CAAC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,OAAO;AACnE,EAAE,MAAM,EAAE,CAAC;AACX,EAAE,MAAM,EAAE;AACV,EAAE;AACF,CAAC,IAAI,MAAM,GAAG,CAAC;AACf,CAAC,MAAM,MAAM,GAAG,EAAE;AAClB,CAAC,KAAK,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,IAAI;AAC5D,EAAE,MAAM,aAAa,CAAC,CAAC,MAAM,EAAE,kBAAkB,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE;AACjE,GAAG,MAAM,EAAE,KAAK;AAChB,GAAG,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK;AAC7B,GAAG,CAAC;AACJ,EAAE,MAAM,EAAE;AACV,CAAC,CAAC,CAAC,MAAM;AACT,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;AACzB,CAAC;AACD,CAAC,OAAO;AACR,EAAE,MAAM;AACR,EAAE;AACF,EAAE;AACF;AACG,IAAC,IAAI,GAAG,OAAO,KAAK,KAAK;AAC5B,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC;AACtC,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,EAAE,SAAS,CAAC;AACjD,CAAC,IAAI,SAAS,EAAE,OAAO,SAAS;AAChC,CAAC,OAAO,eAAe,CAAC,6BAA6B,EAAE,YAAY;AACnE,EAAE,MAAM,KAAK,GAAG,QAAQ,EAAE;AAC1B,EAAE,IAAI,kBAAkB,GAAG,KAAK;AAChC,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,QAAQ,CAAC,kBAAkB,CAAC,EAAE;AACtF,GAAG,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC;AACpD,GAAG,IAAI,EAAE,OAAO,IAAI,MAAM,CAAC,EAAE,kBAAkB,GAAG,MAAM,CAAC,IAAI,CAAC,kBAAkB,KAAK,IAAI;AACzF,EAAE;AACF,EAAE,IAAI,MAAM;AACZ,EAAE,IAAI;AACN,GAAG,MAAM,GAAG,kBAAkB,CAAC,KAAK,EAAE,EAAE,kBAAkB,EAAE,CAAC;AAC7D,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,GAAG,OAAO,aAAa,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,YAAY,KAAK,GAAG,GAAG,CAAC,OAAO,GAAG,eAAe,EAAE,EAAE,EAAE,SAAS,CAAC;AAClH,EAAE;AACF,EAAE,MAAM,UAAU,GAAG,kBAAkB,EAAE;AACzC,EAAE,IAAI,QAAQ,GAAG;AACjB,GAAG,MAAM,EAAE,CAAC;AACZ,GAAG,MAAM,EAAE;AACX,GAAG;AACH,EAAE,MAAM,gBAAgB,GAAG,YAAY,CAAC,KAAK,CAAC;AAC9C,EAAE,IAAI,UAAU,CAAC,gBAAgB,CAAC,EAAE,QAAQ,GAAG,MAAM,kBAAkB,CAAC,gBAAgB,CAAC;AACzF,OAAO,IAAI,UAAU,CAAC,QAAQ,EAAE,QAAQ,GAAG,MAAM,kBAAkB,CAAC,UAAU,CAAC,QAAQ,CAAC;AACxF,EAAE,MAAM,OAAO,GAAG,MAAM,wBAAwB,EAAE;AAClD,EAAE,OAAO,YAAY,CAAC,GAAG,EAAE;AAC3B,GAAG,EAAE,EAAE,IAAI;AACX,GAAG,QAAQ,EAAE,MAAM,CAAC,QAAQ;AAC5B,GAAG,SAAS,EAAE,MAAM,CAAC,SAAS;AAC9B,GAAG,UAAU,EAAE,QAAQ,CAAC,MAAM;AAC9B,GAAG,cAAc,EAAE,QAAQ,CAAC,MAAM;AAClC,GAAG,SAAS,EAAE,OAAO,CAAC,SAAS;AAC/B,GAAG,aAAa,EAAE,OAAO,CAAC;AAC1B,GAAG,EAAE,SAAS,CAAC;AACf,CAAC,CAAC,CAAC;AACH;;;;"}

package/build/server/chunks/_server.ts-xO4nhxDx.js

@@ -0,0 +1,60 @@
+import { d as getRequestId, e as errorResponse, f as getUiLoginPassword, s as safeTokenCompare, b as createSession } from './helpers-CX6xRBmt.js';
+import './src-BkvQ5Uuf.js';
+import './chunk-CLZ62Ad-.js';
+import 'node:module';
+import 'node:fs';
+import 'node:path';
+import 'node:child_process';
+import 'node:os';
+import 'buffer';
+import 'node:url';
+import 'node:crypto';
+import 'events';
+import 'fs';
+import 'node:events';
+import 'node:stream';
+import 'node:string_decoder';
+import 'path';
+import 'assert';
+import 'zlib';
+import 'node:assert';
+import 'node:fs/promises';
+import './endpoints-Drq_J-2Z.js';
+
+//#region src/routes/admin/auth/session/+server.ts
+/**
+* POST /admin/auth/session
+*
+* Issues an `op_session` cookie after verifying the operator-supplied password
+* against `process.env.OP_UI_LOGIN_PASSWORD`.
+*
+* The cookie value is a random UUID session token — NOT the plaintext password.
+* Kept alongside `/admin/auth/login` as an alias; both verify the same
+* `password` body field and issue the `op_session` cookie.
+*/
+var POST = async (event) => {
+	const requestId = getRequestId(event);
+	let body;
+	try {
+		body = await event.request.json();
+	} catch {
+		return errorResponse(400, "bad_request", "Invalid JSON body", {}, requestId);
+	}
+	const password = typeof body.password === "string" ? body.password : "";
+	if (!password) return errorResponse(400, "bad_request", "password is required", {}, requestId);
+	const configured = getUiLoginPassword();
+	if (!configured) return errorResponse(503, "admin_not_configured", "OP_UI_LOGIN_PASSWORD has not been set. Complete setup first.", {}, requestId);
+	if (!safeTokenCompare(password, configured)) return errorResponse(401, "unauthorized", "Invalid password", {}, requestId);
+	const sessionToken = createSession();
+	return new Response(JSON.stringify({ ok: true }), {
+		status: 200,
+		headers: {
+			"content-type": "application/json",
+			"set-cookie": `op_session=${sessionToken}; HttpOnly; SameSite=Strict; Path=/; Max-Age=86400`,
+			"x-request-id": requestId
+		}
+	});
+};
+
+export { POST };
+//# sourceMappingURL=_server.ts-xO4nhxDx.js.map

package/build/server/chunks/_server.ts-xO4nhxDx.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-xO4nhxDx.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/admin/auth/session/_server.ts.js"],"sourcesContent":["import { f as safeTokenCompare, i as errorResponse, m as createSession, o as getRequestId, s as getUiLoginPassword } from \"../../../../../chunks/helpers.js\";\n//#region src/routes/admin/auth/session/+server.ts\n/**\n* POST /admin/auth/session\n*\n* Issues an `op_session` cookie after verifying the operator-supplied password\n* against `process.env.OP_UI_LOGIN_PASSWORD`.\n*\n* The cookie value is a random UUID session token — NOT the plaintext password.\n* Kept alongside `/admin/auth/login` as an alias; both verify the same\n* `password` body field and issue the `op_session` cookie.\n*/\nvar POST = async (event) => {\n\tconst requestId = getRequestId(event);\n\tlet body;\n\ttry {\n\t\tbody = await event.request.json();\n\t} catch {\n\t\treturn errorResponse(400, \"bad_request\", \"Invalid JSON body\", {}, requestId);\n\t}\n\tconst password = typeof body.password === \"string\" ? body.password : \"\";\n\tif (!password) return errorResponse(400, \"bad_request\", \"password is required\", {}, requestId);\n\tconst configured = getUiLoginPassword();\n\tif (!configured) return errorResponse(503, \"admin_not_configured\", \"OP_UI_LOGIN_PASSWORD has not been set. Complete setup first.\", {}, requestId);\n\tif (!safeTokenCompare(password, configured)) return errorResponse(401, \"unauthorized\", \"Invalid password\", {}, requestId);\n\tconst sessionToken = createSession();\n\treturn new Response(JSON.stringify({ ok: true }), {\n\t\tstatus: 200,\n\t\theaders: {\n\t\t\t\"content-type\": \"application/json\",\n\t\t\t\"set-cookie\": `op_session=${sessionToken}; HttpOnly; SameSite=Strict; Path=/; Max-Age=86400`,\n\t\t\t\"x-request-id\": requestId\n\t\t}\n\t});\n};\n//#endregion\nexport { POST };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACG,IAAC,IAAI,GAAG,OAAO,KAAK,KAAK;AAC5B,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC;AACtC,CAAC,IAAI,IAAI;AACT,CAAC,IAAI;AACL,EAAE,IAAI,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE;AACnC,CAAC,CAAC,CAAC,MAAM;AACT,EAAE,OAAO,aAAa,CAAC,GAAG,EAAE,aAAa,EAAE,mBAAmB,EAAE,EAAE,EAAE,SAAS,CAAC;AAC9E,CAAC;AACD,CAAC,MAAM,QAAQ,GAAG,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,GAAG,IAAI,CAAC,QAAQ,GAAG,EAAE;AACxE,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,aAAa,CAAC,GAAG,EAAE,aAAa,EAAE,sBAAsB,EAAE,EAAE,EAAE,SAAS,CAAC;AAC/F,CAAC,MAAM,UAAU,GAAG,kBAAkB,EAAE;AACxC,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,aAAa,CAAC,GAAG,EAAE,sBAAsB,EAAE,8DAA8D,EAAE,EAAE,EAAE,SAAS,CAAC;AAClJ,CAAC,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,UAAU,CAAC,EAAE,OAAO,aAAa,CAAC,GAAG,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,EAAE,SAAS,CAAC;AAC1H,CAAC,MAAM,YAAY,GAAG,aAAa,EAAE;AACrC,CAAC,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE;AACnD,EAAE,MAAM,EAAE,GAAG;AACb,EAAE,OAAO,EAAE;AACX,GAAG,cAAc,EAAE,kBAAkB;AACrC,GAAG,YAAY,EAAE,CAAC,WAAW,EAAE,YAAY,CAAC,kDAAkD,CAAC;AAC/F,GAAG,cAAc,EAAE;AACnB;AACA,EAAE,CAAC;AACH;;;;"}

package/build/server/chunks/_server.ts-yimewsjO.js

@@ -0,0 +1,57 @@
+import { m as checkDocker, r as composePs, k as buildComposeOptions } from './src-BkvQ5Uuf.js';
+import { b as getState } from './endpoints-Drq_J-2Z.js';
+import { d as getRequestId, r as requireAdmin, h as jsonResponse } from './helpers-CX6xRBmt.js';
+import './chunk-CLZ62Ad-.js';
+import 'node:module';
+import 'node:fs';
+import 'node:path';
+import 'node:child_process';
+import 'node:os';
+import 'buffer';
+import 'node:url';
+import 'node:crypto';
+import 'events';
+import 'fs';
+import 'node:events';
+import 'node:stream';
+import 'node:string_decoder';
+import 'path';
+import 'assert';
+import 'zlib';
+import 'node:assert';
+import 'node:fs/promises';
+
+//#region src/routes/admin/containers/list/+server.ts
+var GET = async (event) => {
+	const requestId = getRequestId(event);
+	const authError = requireAdmin(event, requestId);
+	if (authError) return authError;
+	const state = getState();
+	const dockerCheck = await checkDocker();
+	let dockerContainers = null;
+	if (dockerCheck.ok) {
+		const ps = await composePs(buildComposeOptions(state));
+		if (ps.ok && ps.stdout.trim()) try {
+			dockerContainers = ps.stdout.trim().split("\n").filter((l) => l.startsWith("{")).map((l) => JSON.parse(l));
+		} catch (e) {
+			console.warn("[containers.list] Failed to parse docker compose ps output", e);
+			dockerContainers = null;
+		}
+	}
+	if (dockerContainers) {
+		const dockerStateByService = /* @__PURE__ */ new Map();
+		for (const c of dockerContainers) if (c.Service && c.State) dockerStateByService.set(c.Service, c.State);
+		for (const service of Object.keys(state.services)) {
+			const dockerState = dockerStateByService.get(service);
+			if (dockerState) state.services[service] = dockerState === "running" ? "running" : "stopped";
+		}
+	}
+	return jsonResponse(200, {
+		containers: state.services,
+		dockerContainers,
+		dockerAvailable: dockerCheck.ok
+	}, requestId);
+};
+
+export { GET };
+//# sourceMappingURL=_server.ts-yimewsjO.js.map

package/build/server/chunks/_server.ts-yimewsjO.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-yimewsjO.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/admin/containers/list/_server.ts.js"],"sourcesContent":["import { A as composePs, T as checkDocker, w as buildComposeOptions } from \"../../../../../chunks/src.js\";\nimport { c as getState } from \"../../../../../chunks/endpoints.js\";\nimport { d as requireAdmin, l as jsonResponse, o as getRequestId } from \"../../../../../chunks/helpers.js\";\n//#region src/routes/admin/containers/list/+server.ts\nvar GET = async (event) => {\n\tconst requestId = getRequestId(event);\n\tconst authError = requireAdmin(event, requestId);\n\tif (authError) return authError;\n\tconst state = getState();\n\tconst dockerCheck = await checkDocker();\n\tlet dockerContainers = null;\n\tif (dockerCheck.ok) {\n\t\tconst ps = await composePs(buildComposeOptions(state));\n\t\tif (ps.ok && ps.stdout.trim()) try {\n\t\t\tdockerContainers = ps.stdout.trim().split(\"\\n\").filter((l) => l.startsWith(\"{\")).map((l) => JSON.parse(l));\n\t\t} catch (e) {\n\t\t\tconsole.warn(\"[containers.list] Failed to parse docker compose ps output\", e);\n\t\t\tdockerContainers = null;\n\t\t}\n\t}\n\tif (dockerContainers) {\n\t\tconst dockerStateByService = /* @__PURE__ */ new Map();\n\t\tfor (const c of dockerContainers) if (c.Service && c.State) dockerStateByService.set(c.Service, c.State);\n\t\tfor (const service of Object.keys(state.services)) {\n\t\t\tconst dockerState = dockerStateByService.get(service);\n\t\t\tif (dockerState) state.services[service] = dockerState === \"running\" ? \"running\" : \"stopped\";\n\t\t}\n\t}\n\treturn jsonResponse(200, {\n\t\tcontainers: state.services,\n\t\tdockerContainers,\n\t\tdockerAvailable: dockerCheck.ok\n\t}, requestId);\n};\n//#endregion\nexport { GET };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAGA;AACG,IAAC,GAAG,GAAG,OAAO,KAAK,KAAK;AAC3B,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC;AACtC,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,EAAE,SAAS,CAAC;AACjD,CAAC,IAAI,SAAS,EAAE,OAAO,SAAS;AAChC,CAAC,MAAM,KAAK,GAAG,QAAQ,EAAE;AACzB,CAAC,MAAM,WAAW,GAAG,MAAM,WAAW,EAAE;AACxC,CAAC,IAAI,gBAAgB,GAAG,IAAI;AAC5B,CAAC,IAAI,WAAW,CAAC,EAAE,EAAE;AACrB,EAAE,MAAM,EAAE,GAAG,MAAM,SAAS,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC;AACxD,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,IAAI;AACrC,GAAG,gBAAgB,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAC7G,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE;AACd,GAAG,OAAO,CAAC,IAAI,CAAC,4DAA4D,EAAE,CAAC,CAAC;AAChF,GAAG,gBAAgB,GAAG,IAAI;AAC1B,EAAE;AACF,CAAC;AACD,CAAC,IAAI,gBAAgB,EAAE;AACvB,EAAE,MAAM,oBAAoB,mBAAmB,IAAI,GAAG,EAAE;AACxD,EAAE,KAAK,MAAM,CAAC,IAAI,gBAAgB,EAAE,IAAI,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,KAAK,EAAE,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC;AAC1G,EAAE,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE;AACrD,GAAG,MAAM,WAAW,GAAG,oBAAoB,CAAC,GAAG,CAAC,OAAO,CAAC;AACxD,GAAG,IAAI,WAAW,EAAE,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,WAAW,KAAK,SAAS,GAAG,SAAS,GAAG,SAAS;AAC/F,EAAE;AACF,CAAC;AACD,CAAC,OAAO,YAAY,CAAC,GAAG,EAAE;AAC1B,EAAE,UAAU,EAAE,KAAK,CAAC,QAAQ;AAC5B,EAAE,gBAAgB;AAClB,EAAE,eAAe,EAAE,WAAW,CAAC;AAC/B,EAAE,EAAE,SAAS,CAAC;AACd;;;;"}

package/build/server/chunks/addon-helpers-BpnH-GEc.js

@@ -0,0 +1,49 @@
+import { a0 as listEnabledAddonIds, S as getAddonServiceNames, m as checkDocker, w as composeStop, k as buildComposeOptions, am as setAddonEnabled, y as createLogger } from './src-BkvQ5Uuf.js';
+
+//#region src/lib/server/addon-helpers.ts
+/**
+* Shared addon enable/disable logic for admin route handlers.
+*
+* Both /admin/addons and /admin/addons/:name share the same POST flow:
+* validate → stop running services if disabling → mutate state → audit.
+* This module houses the shared mutation step so neither route duplicates it.
+*/
+var logger = createLogger("addon-helpers");
+/**
+* Stop running services if disabling, then call setAddonEnabled.
+* Returns the mutation result with the final enabled state.
+*/
+async function performAddonToggle(state, name, requestedEnabled, requestId) {
+	const wasEnabled = listEnabledAddonIds(state.homeDir).includes(name);
+	const nextEnabled = requestedEnabled !== void 0 ? requestedEnabled : wasEnabled;
+	if (!nextEnabled && wasEnabled) {
+		const serviceNames = getAddonServiceNames(state.homeDir, name);
+		if (serviceNames.length > 0) {
+			if ((await checkDocker()).ok) try {
+				await composeStop(serviceNames, buildComposeOptions(state));
+				logger.info("stopped addon services before disable", {
+					name,
+					services: serviceNames,
+					requestId
+				});
+			} catch (err) {
+				logger.warn("failed to stop addon services before disable", {
+					name,
+					services: serviceNames,
+					error: String(err),
+					requestId
+				});
+			}
+		}
+	}
+	const mutation = setAddonEnabled(state.homeDir, state.stackDir, name, nextEnabled);
+	if (!mutation.ok) return mutation;
+	return {
+		ok: true,
+		enabled: listEnabledAddonIds(state.homeDir).includes(name),
+		changed: mutation.changed
+	};
+}
+
+export { performAddonToggle as p };
+//# sourceMappingURL=addon-helpers-BpnH-GEc.js.map

package/build/server/chunks/addon-helpers-BpnH-GEc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"addon-helpers-BpnH-GEc.js","sources":["../../../.svelte-kit/adapter-node/chunks/addon-helpers.js"],"sourcesContent":["import { F as composeStop, Nt as createLogger, T as checkDocker, ct as setAddonEnabled, it as getAddonServiceNames, st as listEnabledAddonIds, w as buildComposeOptions } from \"./src.js\";\n//#region src/lib/server/addon-helpers.ts\n/**\n* Shared addon enable/disable logic for admin route handlers.\n*\n* Both /admin/addons and /admin/addons/:name share the same POST flow:\n* validate → stop running services if disabling → mutate state → audit.\n* This module houses the shared mutation step so neither route duplicates it.\n*/\nvar logger = createLogger(\"addon-helpers\");\n/**\n* Stop running services if disabling, then call setAddonEnabled.\n* Returns the mutation result with the final enabled state.\n*/\nasync function performAddonToggle(state, name, requestedEnabled, requestId) {\n\tconst wasEnabled = listEnabledAddonIds(state.homeDir).includes(name);\n\tconst nextEnabled = requestedEnabled !== void 0 ? requestedEnabled : wasEnabled;\n\tif (!nextEnabled && wasEnabled) {\n\t\tconst serviceNames = getAddonServiceNames(state.homeDir, name);\n\t\tif (serviceNames.length > 0) {\n\t\t\tif ((await checkDocker()).ok) try {\n\t\t\t\tawait composeStop(serviceNames, buildComposeOptions(state));\n\t\t\t\tlogger.info(\"stopped addon services before disable\", {\n\t\t\t\t\tname,\n\t\t\t\t\tservices: serviceNames,\n\t\t\t\t\trequestId\n\t\t\t\t});\n\t\t\t} catch (err) {\n\t\t\t\tlogger.warn(\"failed to stop addon services before disable\", {\n\t\t\t\t\tname,\n\t\t\t\t\tservices: serviceNames,\n\t\t\t\t\terror: String(err),\n\t\t\t\t\trequestId\n\t\t\t\t});\n\t\t\t}\n\t\t}\n\t}\n\tconst mutation = setAddonEnabled(state.homeDir, state.stackDir, name, nextEnabled, state);\n\tif (!mutation.ok) return mutation;\n\treturn {\n\t\tok: true,\n\t\tenabled: listEnabledAddonIds(state.homeDir).includes(name),\n\t\tchanged: mutation.changed\n\t};\n}\n//#endregion\nexport { performAddonToggle as t };\n"],"names":[],"mappings":";;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,IAAI,MAAM,GAAG,YAAY,CAAC,eAAe,CAAC;AAC1C;AACA;AACA;AACA;AACA,eAAe,kBAAkB,CAAC,KAAK,EAAE,IAAI,EAAE,gBAAgB,EAAE,SAAS,EAAE;AAC5E,CAAC,MAAM,UAAU,GAAG,mBAAmB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;AACrE,CAAC,MAAM,WAAW,GAAG,gBAAgB,KAAK,MAAM,GAAG,gBAAgB,GAAG,UAAU;AAChF,CAAC,IAAI,CAAC,WAAW,IAAI,UAAU,EAAE;AACjC,EAAE,MAAM,YAAY,GAAG,oBAAoB,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC;AAChE,EAAE,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE;AAC/B,GAAG,IAAI,CAAC,MAAM,WAAW,EAAE,EAAE,EAAE,EAAE,IAAI;AACrC,IAAI,MAAM,WAAW,CAAC,YAAY,EAAE,mBAAmB,CAAC,KAAK,CAAC,CAAC;AAC/D,IAAI,MAAM,CAAC,IAAI,CAAC,uCAAuC,EAAE;AACzD,KAAK,IAAI;AACT,KAAK,QAAQ,EAAE,YAAY;AAC3B,KAAK;AACL,KAAK,CAAC;AACN,GAAG,CAAC,CAAC,OAAO,GAAG,EAAE;AACjB,IAAI,MAAM,CAAC,IAAI,CAAC,8CAA8C,EAAE;AAChE,KAAK,IAAI;AACT,KAAK,QAAQ,EAAE,YAAY;AAC3B,KAAK,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC;AACvB,KAAK;AACL,KAAK,CAAC;AACN,GAAG;AACH,EAAE;AACF,CAAC;AACD,CAAC,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,QAAQ,EAAE,IAAI,EAAE,WAAkB,CAAC;AAC1F,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,OAAO,QAAQ;AAClC,CAAC,OAAO;AACR,EAAE,EAAE,EAAE,IAAI;AACV,EAAE,OAAO,EAAE,mBAAmB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;AAC5D,EAAE,OAAO,EAAE,QAAQ,CAAC;AACpB,EAAE;AACF;;;;"}

package/build/server/chunks/chunk-CLZ62Ad-.js

@@ -0,0 +1,18 @@
+import { createRequire } from 'node:module';
+
+//#region \0rolldown/runtime.js
+var __defProp = Object.defineProperty;
+var __commonJSMin = (cb, mod) => () => (mod || (cb((mod = { exports: {} }).exports, mod), cb = null), mod.exports);
+var __exportAll = (all, no_symbols) => {
+	let target = {};
+	for (var name in all) __defProp(target, name, {
+		get: all[name],
+		enumerable: true
+	});
+	__defProp(target, Symbol.toStringTag, { value: "Module" });
+	return target;
+};
+var __require = /* @__PURE__ */ createRequire(import.meta.url);
+
+export { __commonJSMin as _, __exportAll as a, __require as b };
+//# sourceMappingURL=chunk-CLZ62Ad-.js.map

package/build/server/chunks/chunk-CLZ62Ad-.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"chunk-CLZ62Ad-.js","sources":["../../../.svelte-kit/adapter-node/chunks/chunk.js"],"sourcesContent":["import { createRequire } from \"node:module\";\n//#region \\0rolldown/runtime.js\nvar __defProp = Object.defineProperty;\nvar __commonJSMin = (cb, mod) => () => (mod || (cb((mod = { exports: {} }).exports, mod), cb = null), mod.exports);\nvar __exportAll = (all, no_symbols) => {\n\tlet target = {};\n\tfor (var name in all) __defProp(target, name, {\n\t\tget: all[name],\n\t\tenumerable: true\n\t});\n\tif (!no_symbols) __defProp(target, Symbol.toStringTag, { value: \"Module\" });\n\treturn target;\n};\nvar __require = /* @__PURE__ */ createRequire(import.meta.url);\n//#endregion\nexport { __exportAll as n, __require as r, __commonJSMin as t };\n"],"names":[],"mappings":";;AACA;AACA,IAAI,SAAS,GAAG,MAAM,CAAC,cAAc;AAClC,IAAC,aAAa,GAAG,CAAC,EAAE,EAAE,GAAG,KAAK,OAAO,GAAG,KAAK,EAAE,CAAC,CAAC,GAAG,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,EAAE,GAAG,CAAC,OAAO;AAC9G,IAAC,WAAW,GAAG,CAAC,GAAG,EAAE,UAAU,KAAK;AACvC,CAAC,IAAI,MAAM,GAAG,EAAE;AAChB,CAAC,KAAK,IAAI,IAAI,IAAI,GAAG,EAAE,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE;AAC/C,EAAE,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC;AAChB,EAAE,UAAU,EAAE;AACd,EAAE,CAAC;AACH,CAAkB,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AAC5E,CAAC,OAAO,MAAM;AACd;AACG,IAAC,SAAS,mBAAmB,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG;;;;"}

package/build/server/chunks/coercion-TNFJisCC.js

@@ -0,0 +1,34 @@
+//#region src/lib/server/coercion.ts
+/**
+* Shared `unknown` -> typed coercion helpers used by API routes and
+* server-side logic that consumes opaque JSON (e.g. OpenCode config blobs).
+*
+* Each helper returns `undefined` when the value does not match the expected
+* shape. Object helpers shallow-clone so callers can mutate without leaking
+* back into shared state.
+*/
+/** Narrow `unknown` to a plain-object record. Returns a shallow clone. */
+function asRecord(value) {
+	return value && typeof value === "object" && !Array.isArray(value) ? { ...value } : void 0;
+}
+/** Narrow `unknown` to a string. */
+function asString(value) {
+	return typeof value === "string" ? value : void 0;
+}
+/** Narrow `unknown` to a number. */
+function asNumber(value) {
+	return typeof value === "number" ? value : void 0;
+}
+/** Narrow `unknown` to an array of strings. Drops non-string entries. */
+function asStringArray(value) {
+	return Array.isArray(value) ? value.filter((e) => typeof e === "string") : void 0;
+}
+/** Narrow `unknown` to a `Record<string, string>`. Returns `undefined` when empty. */
+function asStringRecord(value) {
+	if (!value || typeof value !== "object" || Array.isArray(value)) return void 0;
+	const entries = Object.entries(value).filter((e) => typeof e[1] === "string");
+	return entries.length > 0 ? Object.fromEntries(entries) : void 0;
+}
+
+export { asNumber as a, asRecord as b, asString as c, asStringArray as d, asStringRecord as e };
+//# sourceMappingURL=coercion-TNFJisCC.js.map

package/build/server/chunks/coercion-TNFJisCC.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"coercion-TNFJisCC.js","sources":["../../../.svelte-kit/adapter-node/chunks/coercion.js"],"sourcesContent":["//#region src/lib/server/coercion.ts\n/**\n* Shared `unknown` -> typed coercion helpers used by API routes and\n* server-side logic that consumes opaque JSON (e.g. OpenCode config blobs).\n*\n* Each helper returns `undefined` when the value does not match the expected\n* shape. Object helpers shallow-clone so callers can mutate without leaking\n* back into shared state.\n*/\n/** Narrow `unknown` to a plain-object record. Returns a shallow clone. */\nfunction asRecord(value) {\n\treturn value && typeof value === \"object\" && !Array.isArray(value) ? { ...value } : void 0;\n}\n/** Narrow `unknown` to a string. */\nfunction asString(value) {\n\treturn typeof value === \"string\" ? value : void 0;\n}\n/** Narrow `unknown` to a number. */\nfunction asNumber(value) {\n\treturn typeof value === \"number\" ? value : void 0;\n}\n/** Narrow `unknown` to an array of strings. Drops non-string entries. */\nfunction asStringArray(value) {\n\treturn Array.isArray(value) ? value.filter((e) => typeof e === \"string\") : void 0;\n}\n/** Narrow `unknown` to a `Record<string, string>`. Returns `undefined` when empty. */\nfunction asStringRecord(value) {\n\tif (!value || typeof value !== \"object\" || Array.isArray(value)) return void 0;\n\tconst entries = Object.entries(value).filter((e) => typeof e[1] === \"string\");\n\treturn entries.length > 0 ? Object.fromEntries(entries) : void 0;\n}\n//#endregion\nexport { asStringRecord as a, asStringArray as i, asRecord as n, asString as r, asNumber as t };\n"],"names":[],"mappings":"AAAA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,QAAQ,CAAC,KAAK,EAAE;AACzB,CAAC,OAAO,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,KAAK,EAAE,GAAG,MAAM;AAC3F;AACA;AACA,SAAS,QAAQ,CAAC,KAAK,EAAE;AACzB,CAAC,OAAO,OAAO,KAAK,KAAK,QAAQ,GAAG,KAAK,GAAG,MAAM;AAClD;AACA;AACA,SAAS,QAAQ,CAAC,KAAK,EAAE;AACzB,CAAC,OAAO,OAAO,KAAK,KAAK,QAAQ,GAAG,KAAK,GAAG,MAAM;AAClD;AACA;AACA,SAAS,aAAa,CAAC,KAAK,EAAE;AAC9B,CAAC,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,KAAK,QAAQ,CAAC,GAAG,MAAM;AAClF;AACA;AACA,SAAS,cAAc,CAAC,KAAK,EAAE;AAC/B,CAAC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,OAAO,MAAM;AAC/E,CAAC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC;AAC9E,CAAC,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,GAAG,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,MAAM;AACjE;;;;"}