@openpalm/ui 0.12.52 → 0.13.0-beta.1

package/build/server/chunks/_server.ts-BV6i7XBr.js

@@ -0,0 +1,92 @@
+import { aE as readStackEnv } from './src-CS2sSYOR.js';
+import { g as getState } from './state-BRh7vs9j.js';
+import { d as getRequestId, r as requireAdmin, e as errorResponse, k as jsonResponse } from './helpers-7BvhniSt.js';
+import './provider-constants-1s1k8kbj.js';
+import './chunk-CLZ62Ad-.js';
+import 'node:module';
+import 'node:fs';
+import 'node:child_process';
+import 'node:path';
+import 'buffer';
+import 'node:url';
+import 'node:os';
+import 'node:crypto';
+import 'events';
+import 'fs';
+import 'node:events';
+import 'node:stream';
+import 'node:string_decoder';
+import 'path';
+import 'assert';
+import 'zlib';
+import 'node:assert';
+import 'node:fs/promises';
+import './endpoints-CU3ehglV.js';
+import './features-DLGlNjZX.js';
+
+//#region src/routes/api/transcribe/+server.ts
+var DEFAULT_MODEL = "whisper-1";
+var UPSTREAM_TIMEOUT_MS = 6e4;
+function redactKey(s) {
+	return s.replace(/(sk-[A-Za-z0-9_-]{4,})/g, "sk-***").replace(/(hf_[A-Za-z0-9_-]{4,})/gi, "hf_***").replace(/(Bearer\s+)[A-Za-z0-9._-]+/gi, "$1***");
+}
+var POST = async (event) => {
+	const requestId = getRequestId(event);
+	const authError = requireAdmin(event, requestId);
+	if (authError) return authError;
+	const stackEnv = readStackEnv(getState().homeDir);
+	const sttBaseURL = (stackEnv.OP_STT_BASE_URL || process.env.OP_STT_BASE_URL || "").trim();
+	const sttModel = (stackEnv.OP_STT_MODEL || process.env.OP_STT_MODEL || "").trim() || DEFAULT_MODEL;
+	const sttLanguageEnv = (stackEnv.OP_STT_LANGUAGE || process.env.OP_STT_LANGUAGE || "").trim();
+	const sttApiKey = (process.env.OP_STT_API_KEY ?? "").trim();
+	if (!sttBaseURL) return errorResponse(503, "stt_not_configured", "Configure an STT engine in Admin → Voice settings.", {}, requestId);
+	let inboundForm;
+	try {
+		inboundForm = await event.request.formData();
+	} catch {
+		return errorResponse(400, "bad_request", "Body must be multipart/form-data", {}, requestId);
+	}
+	const audio = inboundForm.get("audio");
+	if (!(audio instanceof Blob)) return errorResponse(400, "bad_request", "Missing \"audio\" field (Blob)", {}, requestId);
+	const languageReq = inboundForm.get("language");
+	const promptReq = inboundForm.get("prompt");
+	const language = typeof languageReq === "string" && languageReq.trim() ? languageReq.trim() : sttLanguageEnv;
+	const outForm = new FormData();
+	const filename = audio.name || "recording.webm";
+	outForm.append("file", audio, filename);
+	outForm.append("model", sttModel);
+	outForm.append("response_format", "json");
+	if (language) outForm.append("language", language);
+	if (typeof promptReq === "string" && promptReq.trim()) outForm.append("prompt", promptReq.trim());
+	const upstreamUrl = `${sttBaseURL.replace(/\/+$/, "")}/v1/audio/transcriptions`;
+	const headers = {};
+	if (sttApiKey) headers.authorization = `Bearer ${sttApiKey}`;
+	let upstream;
+	try {
+		upstream = await fetch(upstreamUrl, {
+			method: "POST",
+			headers,
+			body: outForm,
+			signal: AbortSignal.timeout(UPSTREAM_TIMEOUT_MS)
+		});
+	} catch (err) {
+		return errorResponse(502, "upstream_error", `Could not reach STT endpoint: ${redactKey(err instanceof Error ? err.message : String(err))}`, { upstream: upstreamUrl }, requestId);
+	}
+	if (!upstream.ok) {
+		const snippet = redactKey(await upstream.text().catch(() => "")).slice(0, 500);
+		return errorResponse(502, "upstream_error", `STT endpoint returned ${upstream.status}`, {
+			upstreamStatus: upstream.status,
+			body: snippet
+		}, requestId);
+	}
+	let payload;
+	try {
+		payload = await upstream.json();
+	} catch {
+		return errorResponse(502, "upstream_error", "STT endpoint returned a non-JSON response", { upstreamStatus: upstream.status }, requestId);
+	}
+	return jsonResponse(200, { text: typeof payload?.text === "string" ? payload.text : "" }, requestId);
+};
+
+export { POST };
+//# sourceMappingURL=_server.ts-BV6i7XBr.js.map

package/build/server/chunks/_server.ts-BV6i7XBr.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-BV6i7XBr.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/transcribe/_server.ts.js"],"sourcesContent":["import { X as readStackEnv } from \"../../../../chunks/compose-args.js\";\nimport \"../../../../chunks/src.js\";\nimport { t as getState } from \"../../../../chunks/state.js\";\nimport { a as getRequestId, c as jsonResponse, r as errorResponse, u as requireAdmin } from \"../../../../chunks/helpers.js\";\n//#region src/routes/api/transcribe/+server.ts\nvar DEFAULT_MODEL = \"whisper-1\";\nvar UPSTREAM_TIMEOUT_MS = 6e4;\nfunction redactKey(s) {\n\treturn s.replace(/(sk-[A-Za-z0-9_-]{4,})/g, \"sk-***\").replace(/(hf_[A-Za-z0-9_-]{4,})/gi, \"hf_***\").replace(/(Bearer\\s+)[A-Za-z0-9._-]+/gi, \"$1***\");\n}\nvar POST = async (event) => {\n\tconst requestId = getRequestId(event);\n\tconst authError = requireAdmin(event, requestId);\n\tif (authError) return authError;\n\tconst stackEnv = readStackEnv(getState().homeDir);\n\tconst sttBaseURL = (stackEnv.OP_STT_BASE_URL || process.env.OP_STT_BASE_URL || \"\").trim();\n\tconst sttModel = (stackEnv.OP_STT_MODEL || process.env.OP_STT_MODEL || \"\").trim() || DEFAULT_MODEL;\n\tconst sttLanguageEnv = (stackEnv.OP_STT_LANGUAGE || process.env.OP_STT_LANGUAGE || \"\").trim();\n\tconst sttApiKey = (process.env.OP_STT_API_KEY ?? \"\").trim();\n\tif (!sttBaseURL) return errorResponse(503, \"stt_not_configured\", \"Configure an STT engine in Admin → Voice settings.\", {}, requestId);\n\tlet inboundForm;\n\ttry {\n\t\tinboundForm = await event.request.formData();\n\t} catch {\n\t\treturn errorResponse(400, \"bad_request\", \"Body must be multipart/form-data\", {}, requestId);\n\t}\n\tconst audio = inboundForm.get(\"audio\");\n\tif (!(audio instanceof Blob)) return errorResponse(400, \"bad_request\", \"Missing \\\"audio\\\" field (Blob)\", {}, requestId);\n\tconst languageReq = inboundForm.get(\"language\");\n\tconst promptReq = inboundForm.get(\"prompt\");\n\tconst language = typeof languageReq === \"string\" && languageReq.trim() ? languageReq.trim() : sttLanguageEnv;\n\tconst outForm = new FormData();\n\tconst filename = audio.name || \"recording.webm\";\n\toutForm.append(\"file\", audio, filename);\n\toutForm.append(\"model\", sttModel);\n\toutForm.append(\"response_format\", \"json\");\n\tif (language) outForm.append(\"language\", language);\n\tif (typeof promptReq === \"string\" && promptReq.trim()) outForm.append(\"prompt\", promptReq.trim());\n\tconst upstreamUrl = `${sttBaseURL.replace(/\\/+$/, \"\")}/v1/audio/transcriptions`;\n\tconst headers = {};\n\tif (sttApiKey) headers.authorization = `Bearer ${sttApiKey}`;\n\tlet upstream;\n\ttry {\n\t\tupstream = await fetch(upstreamUrl, {\n\t\t\tmethod: \"POST\",\n\t\t\theaders,\n\t\t\tbody: outForm,\n\t\t\tsignal: AbortSignal.timeout(UPSTREAM_TIMEOUT_MS)\n\t\t});\n\t} catch (err) {\n\t\treturn errorResponse(502, \"upstream_error\", `Could not reach STT endpoint: ${redactKey(err instanceof Error ? err.message : String(err))}`, { upstream: upstreamUrl }, requestId);\n\t}\n\tif (!upstream.ok) {\n\t\tconst snippet = redactKey(await upstream.text().catch(() => \"\")).slice(0, 500);\n\t\treturn errorResponse(502, \"upstream_error\", `STT endpoint returned ${upstream.status}`, {\n\t\t\tupstreamStatus: upstream.status,\n\t\t\tbody: snippet\n\t\t}, requestId);\n\t}\n\tlet payload;\n\ttry {\n\t\tpayload = await upstream.json();\n\t} catch {\n\t\treturn errorResponse(502, \"upstream_error\", \"STT endpoint returned a non-JSON response\", { upstreamStatus: upstream.status }, requestId);\n\t}\n\treturn jsonResponse(200, { text: typeof payload?.text === \"string\" ? payload.text : \"\" }, requestId);\n};\n//#endregion\nexport { POST };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAIA;AACA,IAAI,aAAa,GAAG,WAAW;AAC/B,IAAI,mBAAmB,GAAG,GAAG;AAC7B,SAAS,SAAS,CAAC,CAAC,EAAE;AACtB,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,yBAAyB,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,0BAA0B,EAAE,QAAQ,CAAC,CAAC,OAAO,CAAC,8BAA8B,EAAE,OAAO,CAAC;AACrJ;AACG,IAAC,IAAI,GAAG,OAAO,KAAK,KAAK;AAC5B,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC;AACtC,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,EAAE,SAAS,CAAC;AACjD,CAAC,IAAI,SAAS,EAAE,OAAO,SAAS;AAChC,CAAC,MAAM,QAAQ,GAAG,YAAY,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC;AAClD,CAAC,MAAM,UAAU,GAAG,CAAC,QAAQ,CAAC,eAAe,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,EAAE,IAAI,EAAE;AAC1F,CAAC,MAAM,QAAQ,GAAG,CAAC,QAAQ,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,EAAE,EAAE,IAAI,EAAE,IAAI,aAAa;AACnG,CAAC,MAAM,cAAc,GAAG,CAAC,QAAQ,CAAC,eAAe,IAAI,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,EAAE,IAAI,EAAE;AAC9F,CAAC,MAAM,SAAS,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE,EAAE,IAAI,EAAE;AAC5D,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,aAAa,CAAC,GAAG,EAAE,oBAAoB,EAAE,oDAAoD,EAAE,EAAE,EAAE,SAAS,CAAC;AACtI,CAAC,IAAI,WAAW;AAChB,CAAC,IAAI;AACL,EAAE,WAAW,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE;AAC9C,CAAC,CAAC,CAAC,MAAM;AACT,EAAE,OAAO,aAAa,CAAC,GAAG,EAAE,aAAa,EAAE,kCAAkC,EAAE,EAAE,EAAE,SAAS,CAAC;AAC7F,CAAC;AACD,CAAC,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC;AACvC,CAAC,IAAI,EAAE,KAAK,YAAY,IAAI,CAAC,EAAE,OAAO,aAAa,CAAC,GAAG,EAAE,aAAa,EAAE,gCAAgC,EAAE,EAAE,EAAE,SAAS,CAAC;AACxH,CAAC,MAAM,WAAW,GAAG,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC;AAChD,CAAC,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC;AAC5C,CAAC,MAAM,QAAQ,GAAG,OAAO,WAAW,KAAK,QAAQ,IAAI,WAAW,CAAC,IAAI,EAAE,GAAG,WAAW,CAAC,IAAI,EAAE,GAAG,cAAc;AAC7G,CAAC,MAAM,OAAO,GAAG,IAAI,QAAQ,EAAE;AAC/B,CAAC,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,IAAI,gBAAgB;AAChD,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC;AACxC,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,CAAC;AAClC,CAAC,OAAO,CAAC,MAAM,CAAC,iBAAiB,EAAE,MAAM,CAAC;AAC1C,CAAC,IAAI,QAAQ,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,QAAQ,CAAC;AACnD,CAAC,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,EAAE,EAAE,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,IAAI,EAAE,CAAC;AAClG,CAAC,MAAM,WAAW,GAAG,CAAC,EAAE,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,wBAAwB,CAAC;AAChF,CAAC,MAAM,OAAO,GAAG,EAAE;AACnB,CAAC,IAAI,SAAS,EAAE,OAAO,CAAC,aAAa,GAAG,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;AAC7D,CAAC,IAAI,QAAQ;AACb,CAAC,IAAI;AACL,EAAE,QAAQ,GAAG,MAAM,KAAK,CAAC,WAAW,EAAE;AACtC,GAAG,MAAM,EAAE,MAAM;AACjB,GAAG,OAAO;AACV,GAAG,IAAI,EAAE,OAAO;AAChB,GAAG,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,mBAAmB;AAClD,GAAG,CAAC;AACJ,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,OAAO,aAAa,CAAC,GAAG,EAAE,gBAAgB,EAAE,CAAC,8BAA8B,EAAE,SAAS,CAAC,GAAG,YAAY,KAAK,GAAG,GAAG,CAAC,OAAO,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,EAAE,SAAS,CAAC;AACnL,CAAC;AACD,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE;AACnB,EAAE,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;AAChF,EAAE,OAAO,aAAa,CAAC,GAAG,EAAE,gBAAgB,EAAE,CAAC,sBAAsB,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE;AAC1F,GAAG,cAAc,EAAE,QAAQ,CAAC,MAAM;AAClC,GAAG,IAAI,EAAE;AACT,GAAG,EAAE,SAAS,CAAC;AACf,CAAC;AACD,CAAC,IAAI,OAAO;AACZ,CAAC,IAAI;AACL,EAAE,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE;AACjC,CAAC,CAAC,CAAC,MAAM;AACT,EAAE,OAAO,aAAa,CAAC,GAAG,EAAE,gBAAgB,EAAE,2CAA2C,EAAE,EAAE,cAAc,EAAE,QAAQ,CAAC,MAAM,EAAE,EAAE,SAAS,CAAC;AAC1I,CAAC;AACD,CAAC,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,OAAO,OAAO,EAAE,IAAI,KAAK,QAAQ,GAAG,OAAO,CAAC,IAAI,GAAG,EAAE,EAAE,EAAE,SAAS,CAAC;AACrG;;;;"}

package/build/server/chunks/_server.ts-BYUzlpfe.js

@@ -0,0 +1,172 @@
+import { G as createLogger } from './src-CS2sSYOR.js';
+import { d as getRequestId, l as requireCapability, r as requireAdmin, e as errorResponse, g as getOpenCodeClient, k as jsonResponse, p as parseJsonBody, j as jsonBodyError } from './helpers-7BvhniSt.js';
+import './provider-constants-1s1k8kbj.js';
+import './chunk-CLZ62Ad-.js';
+import 'node:module';
+import 'node:fs';
+import 'node:child_process';
+import 'node:path';
+import 'buffer';
+import 'node:url';
+import 'node:os';
+import 'node:crypto';
+import 'events';
+import 'fs';
+import 'node:events';
+import 'node:stream';
+import 'node:string_decoder';
+import 'path';
+import 'assert';
+import 'zlib';
+import 'node:assert';
+import 'node:fs/promises';
+import './endpoints-CU3ehglV.js';
+import './state-BRh7vs9j.js';
+import './features-DLGlNjZX.js';
+
+//#region src/routes/api/host/opencode/providers/[id]/auth/+server.ts
+var logger = createLogger("opencode.auth");
+var MAX_API_KEY_LENGTH = 512;
+var API_KEY_PATTERN = /^[\x20-\x7E]+$/;
+var OAUTH_SESSION_TTL_MS = 6e5;
+var MAX_PROVIDER_ID_LENGTH = 128;
+var PROVIDER_ID_PATTERN = /^[a-zA-Z0-9_.-]+$/;
+function validateApiKey(key) {
+	if (key.length > MAX_API_KEY_LENGTH) return "API key exceeds maximum length";
+	if (!API_KEY_PATTERN.test(key)) return "API key contains invalid characters";
+	return null;
+}
+var oauthSessions = /* @__PURE__ */ new Map();
+function purgeExpiredSessions() {
+	const now = Date.now();
+	for (const [token, session] of oauthSessions) if (now - session.createdAt > OAUTH_SESSION_TTL_MS) oauthSessions.delete(token);
+}
+var GET = async (event) => {
+	const requestId = getRequestId(event);
+	const capabilityError = requireCapability(event, "host:secrets", requestId);
+	if (capabilityError) return capabilityError;
+	const authError = requireAdmin(event, requestId);
+	if (authError) return authError;
+	const pollToken = event.url.searchParams.get("pollToken");
+	if (!pollToken) return errorResponse(400, "bad_request", "pollToken query parameter is required", {}, requestId);
+	purgeExpiredSessions();
+	const session = oauthSessions.get(pollToken);
+	if (!session) return errorResponse(404, "not_found", "Poll session not found or expired", {}, requestId);
+	if (event.params.id !== session.providerId) return errorResponse(400, "bad_request", "Provider ID does not match poll session", {}, requestId);
+	if ((await getOpenCodeClient().completeProviderOAuth(session.providerId, session.methodIndex)).ok) {
+		oauthSessions.delete(pollToken);
+		logger.info("oauth authorization completed", {
+			providerId: session.providerId,
+			requestId
+		});
+		return jsonResponse(200, {
+			status: "complete",
+			message: "Authorization successful"
+		}, requestId);
+	}
+	if (Date.now() - session.createdAt > OAUTH_SESSION_TTL_MS) {
+		oauthSessions.delete(pollToken);
+		return jsonResponse(200, {
+			status: "error",
+			message: "Authorization session expired"
+		}, requestId);
+	}
+	return jsonResponse(200, {
+		status: "pending",
+		message: "Waiting for authorization..."
+	}, requestId);
+};
+var POST = async (event) => {
+	const requestId = getRequestId(event);
+	const capabilityError = requireCapability(event, "host:secrets", requestId);
+	if (capabilityError) return capabilityError;
+	const authError = requireAdmin(event, requestId);
+	if (authError) return authError;
+	const result = await parseJsonBody(event.request);
+	if ("error" in result) return jsonBodyError(result, requestId);
+	const body = result.data;
+	const providerId = event.params.id;
+	const mode = typeof body.mode === "string" ? body.mode : "";
+	if (!providerId || providerId.length > MAX_PROVIDER_ID_LENGTH || !PROVIDER_ID_PATTERN.test(providerId)) return errorResponse(400, "bad_request", "Invalid provider ID", {}, requestId);
+	purgeExpiredSessions();
+	if (mode === "api_key") {
+		const apiKey = typeof body.apiKey === "string" ? body.apiKey.trim() : "";
+		if (!apiKey) return errorResponse(400, "bad_request", "apiKey is required for api_key mode", {}, requestId);
+		const keyError = validateApiKey(apiKey);
+		if (keyError) return errorResponse(400, "bad_request", keyError, {}, requestId);
+		const result = await getOpenCodeClient().setProviderApiKey(providerId, apiKey);
+		if (!result.ok) {
+			logger.warn("provider api key save failed", {
+				providerId,
+				requestId,
+				error: result.code
+			});
+			return errorResponse(result.status, result.code, result.message, {}, requestId);
+		}
+		logger.info("provider API key saved to OpenCode auth.json", {
+			providerId,
+			requestId
+		});
+		return jsonResponse(200, {
+			ok: true,
+			mode: "api_key"
+		}, requestId);
+	}
+	if (mode === "oauth") {
+		if (typeof body.methodIndex !== "undefined" && (typeof body.methodIndex !== "number" || !Number.isInteger(body.methodIndex) || body.methodIndex < 0)) return errorResponse(400, "bad_request", "methodIndex must be a non-negative integer", {}, requestId);
+		const methodIndex = typeof body.methodIndex === "number" ? body.methodIndex : 0;
+		const result = await getOpenCodeClient().startProviderOAuth(providerId, methodIndex);
+		if (!result.ok) return errorResponse(result.status, result.code, result.message, {}, requestId);
+		const data = result.data;
+		const pollToken = crypto.randomUUID();
+		oauthSessions.set(pollToken, {
+			providerId,
+			methodIndex,
+			createdAt: Date.now()
+		});
+		logger.info("oauth authorization started", {
+			providerId,
+			methodIndex,
+			requestId
+		});
+		return jsonResponse(200, {
+			ok: true,
+			mode: "oauth",
+			pollToken,
+			url: data.url,
+			method: data.method,
+			instructions: data.instructions
+		}, requestId);
+	}
+	return errorResponse(400, "bad_request", "mode must be api_key or oauth", {}, requestId);
+};
+/**
+* DELETE /api/host/opencode/providers/:id/auth — Disconnect a provider by
+* removing its credential from OpenCode's auth.json.
+*/
+var DELETE = async (event) => {
+	const requestId = getRequestId(event);
+	const capabilityError = requireCapability(event, "host:secrets", requestId);
+	if (capabilityError) return capabilityError;
+	const authError = requireAdmin(event, requestId);
+	if (authError) return authError;
+	const providerId = event.params.id ?? "";
+	if (!providerId || providerId.length > MAX_PROVIDER_ID_LENGTH || !PROVIDER_ID_PATTERN.test(providerId)) return errorResponse(400, "bad_request", "Invalid provider ID", {}, requestId);
+	const result = await getOpenCodeClient().proxy(`/auth/${encodeURIComponent(providerId)}`, { method: "DELETE" });
+	if (!result.ok) {
+		logger.warn("provider disconnect failed", {
+			providerId,
+			requestId,
+			error: result.code
+		});
+		return errorResponse(result.status, result.code, result.message, {}, requestId);
+	}
+	logger.info("provider credential removed via OpenCode /auth DELETE", {
+		providerId,
+		requestId
+	});
+	return jsonResponse(200, { ok: true }, requestId);
+};
+
+export { DELETE, GET, POST };
+//# sourceMappingURL=_server.ts-BYUzlpfe.js.map

package/build/server/chunks/_server.ts-BYUzlpfe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-BYUzlpfe.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/host/opencode/providers/_id_/auth/_server.ts.js"],"sourcesContent":["import { Nt as createLogger } from \"../../../../../../../../chunks/compose-args.js\";\nimport \"../../../../../../../../chunks/src.js\";\nimport { a as getRequestId, c as jsonResponse, d as requireCapability, i as getOpenCodeClient, l as parseJsonBody, r as errorResponse, s as jsonBodyError, u as requireAdmin } from \"../../../../../../../../chunks/helpers.js\";\n//#region src/routes/api/host/opencode/providers/[id]/auth/+server.ts\nvar logger = createLogger(\"opencode.auth\");\nvar MAX_API_KEY_LENGTH = 512;\nvar API_KEY_PATTERN = /^[\\x20-\\x7E]+$/;\nvar OAUTH_SESSION_TTL_MS = 6e5;\nvar MAX_PROVIDER_ID_LENGTH = 128;\nvar PROVIDER_ID_PATTERN = /^[a-zA-Z0-9_.-]+$/;\nfunction validateApiKey(key) {\n\tif (key.length > MAX_API_KEY_LENGTH) return \"API key exceeds maximum length\";\n\tif (!API_KEY_PATTERN.test(key)) return \"API key contains invalid characters\";\n\treturn null;\n}\nvar oauthSessions = /* @__PURE__ */ new Map();\nfunction purgeExpiredSessions() {\n\tconst now = Date.now();\n\tfor (const [token, session] of oauthSessions) if (now - session.createdAt > OAUTH_SESSION_TTL_MS) oauthSessions.delete(token);\n}\nvar GET = async (event) => {\n\tconst requestId = getRequestId(event);\n\tconst capabilityError = requireCapability(event, \"host:secrets\", requestId);\n\tif (capabilityError) return capabilityError;\n\tconst authError = requireAdmin(event, requestId);\n\tif (authError) return authError;\n\tconst pollToken = event.url.searchParams.get(\"pollToken\");\n\tif (!pollToken) return errorResponse(400, \"bad_request\", \"pollToken query parameter is required\", {}, requestId);\n\tpurgeExpiredSessions();\n\tconst session = oauthSessions.get(pollToken);\n\tif (!session) return errorResponse(404, \"not_found\", \"Poll session not found or expired\", {}, requestId);\n\tif (event.params.id !== session.providerId) return errorResponse(400, \"bad_request\", \"Provider ID does not match poll session\", {}, requestId);\n\tif ((await getOpenCodeClient().completeProviderOAuth(session.providerId, session.methodIndex)).ok) {\n\t\toauthSessions.delete(pollToken);\n\t\tlogger.info(\"oauth authorization completed\", {\n\t\t\tproviderId: session.providerId,\n\t\t\trequestId\n\t\t});\n\t\treturn jsonResponse(200, {\n\t\t\tstatus: \"complete\",\n\t\t\tmessage: \"Authorization successful\"\n\t\t}, requestId);\n\t}\n\tif (Date.now() - session.createdAt > OAUTH_SESSION_TTL_MS) {\n\t\toauthSessions.delete(pollToken);\n\t\treturn jsonResponse(200, {\n\t\t\tstatus: \"error\",\n\t\t\tmessage: \"Authorization session expired\"\n\t\t}, requestId);\n\t}\n\treturn jsonResponse(200, {\n\t\tstatus: \"pending\",\n\t\tmessage: \"Waiting for authorization...\"\n\t}, requestId);\n};\nvar POST = async (event) => {\n\tconst requestId = getRequestId(event);\n\tconst capabilityError = requireCapability(event, \"host:secrets\", requestId);\n\tif (capabilityError) return capabilityError;\n\tconst authError = requireAdmin(event, requestId);\n\tif (authError) return authError;\n\tconst result = await parseJsonBody(event.request);\n\tif (\"error\" in result) return jsonBodyError(result, requestId);\n\tconst body = result.data;\n\tconst providerId = event.params.id;\n\tconst mode = typeof body.mode === \"string\" ? body.mode : \"\";\n\tif (!providerId || providerId.length > MAX_PROVIDER_ID_LENGTH || !PROVIDER_ID_PATTERN.test(providerId)) return errorResponse(400, \"bad_request\", \"Invalid provider ID\", {}, requestId);\n\tpurgeExpiredSessions();\n\tif (mode === \"api_key\") {\n\t\tconst apiKey = typeof body.apiKey === \"string\" ? body.apiKey.trim() : \"\";\n\t\tif (!apiKey) return errorResponse(400, \"bad_request\", \"apiKey is required for api_key mode\", {}, requestId);\n\t\tconst keyError = validateApiKey(apiKey);\n\t\tif (keyError) return errorResponse(400, \"bad_request\", keyError, {}, requestId);\n\t\tconst result = await getOpenCodeClient().setProviderApiKey(providerId, apiKey);\n\t\tif (!result.ok) {\n\t\t\tlogger.warn(\"provider api key save failed\", {\n\t\t\t\tproviderId,\n\t\t\t\trequestId,\n\t\t\t\terror: result.code\n\t\t\t});\n\t\t\treturn errorResponse(result.status, result.code, result.message, {}, requestId);\n\t\t}\n\t\tlogger.info(\"provider API key saved to OpenCode auth.json\", {\n\t\t\tproviderId,\n\t\t\trequestId\n\t\t});\n\t\treturn jsonResponse(200, {\n\t\t\tok: true,\n\t\t\tmode: \"api_key\"\n\t\t}, requestId);\n\t}\n\tif (mode === \"oauth\") {\n\t\tif (typeof body.methodIndex !== \"undefined\" && (typeof body.methodIndex !== \"number\" || !Number.isInteger(body.methodIndex) || body.methodIndex < 0)) return errorResponse(400, \"bad_request\", \"methodIndex must be a non-negative integer\", {}, requestId);\n\t\tconst methodIndex = typeof body.methodIndex === \"number\" ? body.methodIndex : 0;\n\t\tconst result = await getOpenCodeClient().startProviderOAuth(providerId, methodIndex);\n\t\tif (!result.ok) return errorResponse(result.status, result.code, result.message, {}, requestId);\n\t\tconst data = result.data;\n\t\tconst pollToken = crypto.randomUUID();\n\t\toauthSessions.set(pollToken, {\n\t\t\tproviderId,\n\t\t\tmethodIndex,\n\t\t\tcreatedAt: Date.now()\n\t\t});\n\t\tlogger.info(\"oauth authorization started\", {\n\t\t\tproviderId,\n\t\t\tmethodIndex,\n\t\t\trequestId\n\t\t});\n\t\treturn jsonResponse(200, {\n\t\t\tok: true,\n\t\t\tmode: \"oauth\",\n\t\t\tpollToken,\n\t\t\turl: data.url,\n\t\t\tmethod: data.method,\n\t\t\tinstructions: data.instructions\n\t\t}, requestId);\n\t}\n\treturn errorResponse(400, \"bad_request\", \"mode must be api_key or oauth\", {}, requestId);\n};\n/**\n* DELETE /api/host/opencode/providers/:id/auth — Disconnect a provider by\n* removing its credential from OpenCode's auth.json.\n*/\nvar DELETE = async (event) => {\n\tconst requestId = getRequestId(event);\n\tconst capabilityError = requireCapability(event, \"host:secrets\", requestId);\n\tif (capabilityError) return capabilityError;\n\tconst authError = requireAdmin(event, requestId);\n\tif (authError) return authError;\n\tconst providerId = event.params.id ?? \"\";\n\tif (!providerId || providerId.length > MAX_PROVIDER_ID_LENGTH || !PROVIDER_ID_PATTERN.test(providerId)) return errorResponse(400, \"bad_request\", \"Invalid provider ID\", {}, requestId);\n\tconst result = await getOpenCodeClient().proxy(`/auth/${encodeURIComponent(providerId)}`, { method: \"DELETE\" });\n\tif (!result.ok) {\n\t\tlogger.warn(\"provider disconnect failed\", {\n\t\t\tproviderId,\n\t\t\trequestId,\n\t\t\terror: result.code\n\t\t});\n\t\treturn errorResponse(result.status, result.code, result.message, {}, requestId);\n\t}\n\tlogger.info(\"provider credential removed via OpenCode /auth DELETE\", {\n\t\tproviderId,\n\t\trequestId\n\t});\n\treturn jsonResponse(200, { ok: true }, requestId);\n};\n//#endregion\nexport { DELETE, GET, POST };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAGA;AACA,IAAI,MAAM,GAAG,YAAY,CAAC,eAAe,CAAC;AAC1C,IAAI,kBAAkB,GAAG,GAAG;AAC5B,IAAI,eAAe,GAAG,gBAAgB;AACtC,IAAI,oBAAoB,GAAG,GAAG;AAC9B,IAAI,sBAAsB,GAAG,GAAG;AAChC,IAAI,mBAAmB,GAAG,mBAAmB;AAC7C,SAAS,cAAc,CAAC,GAAG,EAAE;AAC7B,CAAC,IAAI,GAAG,CAAC,MAAM,GAAG,kBAAkB,EAAE,OAAO,gCAAgC;AAC7E,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,OAAO,qCAAqC;AAC7E,CAAC,OAAO,IAAI;AACZ;AACA,IAAI,aAAa,mBAAmB,IAAI,GAAG,EAAE;AAC7C,SAAS,oBAAoB,GAAG;AAChC,CAAC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;AACvB,CAAC,KAAK,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,aAAa,EAAE,IAAI,GAAG,GAAG,OAAO,CAAC,SAAS,GAAG,oBAAoB,EAAE,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC;AAC9H;AACG,IAAC,GAAG,GAAG,OAAO,KAAK,KAAK;AAC3B,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC;AACtC,CAAC,MAAM,eAAe,GAAG,iBAAiB,CAAC,KAAK,EAAE,cAAc,EAAE,SAAS,CAAC;AAC5E,CAAC,IAAI,eAAe,EAAE,OAAO,eAAe;AAC5C,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,EAAE,SAAS,CAAC;AACjD,CAAC,IAAI,SAAS,EAAE,OAAO,SAAS;AAChC,CAAC,MAAM,SAAS,GAAG,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC;AAC1D,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,aAAa,CAAC,GAAG,EAAE,aAAa,EAAE,uCAAuC,EAAE,EAAE,EAAE,SAAS,CAAC;AACjH,CAAC,oBAAoB,EAAE;AACvB,CAAC,MAAM,OAAO,GAAG,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC;AAC7C,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,aAAa,CAAC,GAAG,EAAE,WAAW,EAAE,mCAAmC,EAAE,EAAE,EAAE,SAAS,CAAC;AACzG,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,OAAO,CAAC,UAAU,EAAE,OAAO,aAAa,CAAC,GAAG,EAAE,aAAa,EAAE,yCAAyC,EAAE,EAAE,EAAE,SAAS,CAAC;AAC/I,CAAC,IAAI,CAAC,MAAM,iBAAiB,EAAE,CAAC,qBAAqB,CAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,WAAW,CAAC,EAAE,EAAE,EAAE;AACpG,EAAE,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC;AACjC,EAAE,MAAM,CAAC,IAAI,CAAC,+BAA+B,EAAE;AAC/C,GAAG,UAAU,EAAE,OAAO,CAAC,UAAU;AACjC,GAAG;AACH,GAAG,CAAC;AACJ,EAAE,OAAO,YAAY,CAAC,GAAG,EAAE;AAC3B,GAAG,MAAM,EAAE,UAAU;AACrB,GAAG,OAAO,EAAE;AACZ,GAAG,EAAE,SAAS,CAAC;AACf,CAAC;AACD,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,CAAC,SAAS,GAAG,oBAAoB,EAAE;AAC5D,EAAE,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC;AACjC,EAAE,OAAO,YAAY,CAAC,GAAG,EAAE;AAC3B,GAAG,MAAM,EAAE,OAAO;AAClB,GAAG,OAAO,EAAE;AACZ,GAAG,EAAE,SAAS,CAAC;AACf,CAAC;AACD,CAAC,OAAO,YAAY,CAAC,GAAG,EAAE;AAC1B,EAAE,MAAM,EAAE,SAAS;AACnB,EAAE,OAAO,EAAE;AACX,EAAE,EAAE,SAAS,CAAC;AACd;AACG,IAAC,IAAI,GAAG,OAAO,KAAK,KAAK;AAC5B,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC;AACtC,CAAC,MAAM,eAAe,GAAG,iBAAiB,CAAC,KAAK,EAAE,cAAc,EAAE,SAAS,CAAC;AAC5E,CAAC,IAAI,eAAe,EAAE,OAAO,eAAe;AAC5C,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,EAAE,SAAS,CAAC;AACjD,CAAC,IAAI,SAAS,EAAE,OAAO,SAAS;AAChC,CAAC,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC;AAClD,CAAC,IAAI,OAAO,IAAI,MAAM,EAAE,OAAO,aAAa,CAAC,MAAM,EAAE,SAAS,CAAC;AAC/D,CAAC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI;AACzB,CAAC,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,EAAE;AACnC,CAAC,MAAM,IAAI,GAAG,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,GAAG,IAAI,CAAC,IAAI,GAAG,EAAE;AAC5D,CAAC,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,GAAG,sBAAsB,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,OAAO,aAAa,CAAC,GAAG,EAAE,aAAa,EAAE,qBAAqB,EAAE,EAAE,EAAE,SAAS,CAAC;AACvL,CAAC,oBAAoB,EAAE;AACvB,CAAC,IAAI,IAAI,KAAK,SAAS,EAAE;AACzB,EAAE,MAAM,MAAM,GAAG,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,EAAE;AAC1E,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO,aAAa,CAAC,GAAG,EAAE,aAAa,EAAE,qCAAqC,EAAE,EAAE,EAAE,SAAS,CAAC;AAC7G,EAAE,MAAM,QAAQ,GAAG,cAAc,CAAC,MAAM,CAAC;AACzC,EAAE,IAAI,QAAQ,EAAE,OAAO,aAAa,CAAC,GAAG,EAAE,aAAa,EAAE,QAAQ,EAAE,EAAE,EAAE,SAAS,CAAC;AACjF,EAAE,MAAM,MAAM,GAAG,MAAM,iBAAiB,EAAE,CAAC,iBAAiB,CAAC,UAAU,EAAE,MAAM,CAAC;AAChF,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE;AAClB,GAAG,MAAM,CAAC,IAAI,CAAC,8BAA8B,EAAE;AAC/C,IAAI,UAAU;AACd,IAAI,SAAS;AACb,IAAI,KAAK,EAAE,MAAM,CAAC;AAClB,IAAI,CAAC;AACL,GAAG,OAAO,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,EAAE,EAAE,SAAS,CAAC;AAClF,EAAE;AACF,EAAE,MAAM,CAAC,IAAI,CAAC,8CAA8C,EAAE;AAC9D,GAAG,UAAU;AACb,GAAG;AACH,GAAG,CAAC;AACJ,EAAE,OAAO,YAAY,CAAC,GAAG,EAAE;AAC3B,GAAG,EAAE,EAAE,IAAI;AACX,GAAG,IAAI,EAAE;AACT,GAAG,EAAE,SAAS,CAAC;AACf,CAAC;AACD,CAAC,IAAI,IAAI,KAAK,OAAO,EAAE;AACvB,EAAE,IAAI,OAAO,IAAI,CAAC,WAAW,KAAK,WAAW,KAAK,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC,EAAE,OAAO,aAAa,CAAC,GAAG,EAAE,aAAa,EAAE,4CAA4C,EAAE,EAAE,EAAE,SAAS,CAAC;AAC7P,EAAE,MAAM,WAAW,GAAG,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,GAAG,IAAI,CAAC,WAAW,GAAG,CAAC;AACjF,EAAE,MAAM,MAAM,GAAG,MAAM,iBAAiB,EAAE,CAAC,kBAAkB,CAAC,UAAU,EAAE,WAAW,CAAC;AACtF,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,EAAE,EAAE,SAAS,CAAC;AACjG,EAAE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI;AAC1B,EAAE,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,EAAE;AACvC,EAAE,aAAa,CAAC,GAAG,CAAC,SAAS,EAAE;AAC/B,GAAG,UAAU;AACb,GAAG,WAAW;AACd,GAAG,SAAS,EAAE,IAAI,CAAC,GAAG;AACtB,GAAG,CAAC;AACJ,EAAE,MAAM,CAAC,IAAI,CAAC,6BAA6B,EAAE;AAC7C,GAAG,UAAU;AACb,GAAG,WAAW;AACd,GAAG;AACH,GAAG,CAAC;AACJ,EAAE,OAAO,YAAY,CAAC,GAAG,EAAE;AAC3B,GAAG,EAAE,EAAE,IAAI;AACX,GAAG,IAAI,EAAE,OAAO;AAChB,GAAG,SAAS;AACZ,GAAG,GAAG,EAAE,IAAI,CAAC,GAAG;AAChB,GAAG,MAAM,EAAE,IAAI,CAAC,MAAM;AACtB,GAAG,YAAY,EAAE,IAAI,CAAC;AACtB,GAAG,EAAE,SAAS,CAAC;AACf,CAAC;AACD,CAAC,OAAO,aAAa,CAAC,GAAG,EAAE,aAAa,EAAE,+BAA+B,EAAE,EAAE,EAAE,SAAS,CAAC;AACzF;AACA;AACA;AACA;AACA;AACG,IAAC,MAAM,GAAG,OAAO,KAAK,KAAK;AAC9B,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC;AACtC,CAAC,MAAM,eAAe,GAAG,iBAAiB,CAAC,KAAK,EAAE,cAAc,EAAE,SAAS,CAAC;AAC5E,CAAC,IAAI,eAAe,EAAE,OAAO,eAAe;AAC5C,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,EAAE,SAAS,CAAC;AACjD,CAAC,IAAI,SAAS,EAAE,OAAO,SAAS;AAChC,CAAC,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE;AACzC,CAAC,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,GAAG,sBAAsB,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,OAAO,aAAa,CAAC,GAAG,EAAE,aAAa,EAAE,qBAAqB,EAAE,EAAE,EAAE,SAAS,CAAC;AACvL,CAAC,MAAM,MAAM,GAAG,MAAM,iBAAiB,EAAE,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,kBAAkB,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;AAChH,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE;AACjB,EAAE,MAAM,CAAC,IAAI,CAAC,4BAA4B,EAAE;AAC5C,GAAG,UAAU;AACb,GAAG,SAAS;AACZ,GAAG,KAAK,EAAE,MAAM,CAAC;AACjB,GAAG,CAAC;AACJ,EAAE,OAAO,aAAa,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,EAAE,EAAE,EAAE,SAAS,CAAC;AACjF,CAAC;AACD,CAAC,MAAM,CAAC,IAAI,CAAC,uDAAuD,EAAE;AACtE,EAAE,UAAU;AACZ,EAAE;AACF,EAAE,CAAC;AACH,CAAC,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,SAAS,CAAC;AAClD;;;;"}

package/build/server/chunks/_server.ts-B_R9VtOW.js

@@ -0,0 +1,152 @@
+import { j as json } from './exports-CcmcYU0M.js';
+import { spawn } from 'node:child_process';
+import './utils-OXHIhUb5.js';
+
+//#region src/routes/api/setup/opencode/ensure/+server.ts
+/**
+* POST /api/setup/opencode/ensure
+*
+* Ensures an OpenCode server is running for the setup wizard.
+* 1. Checks the configured OP_OPENCODE_URL / OP_ASSISTANT_PORT first.
+* 2. If unreachable, starts a dedicated `opencode serve` subprocess via the SDK.
+* 3. Returns { ok, url, started } — client updates its OP_OPENCODE_URL accordingly.
+*
+* No auth required — called during pre-setup wizard initialization.
+*/
+var _url = null;
+var _proc = null;
+var _inFlight = null;
+function killWizardOpencode() {
+	const proc = _proc;
+	if (proc && proc.exitCode === null && proc.pid) try {
+		proc.kill("SIGTERM");
+	} catch {}
+	_proc = null;
+	_url = null;
+}
+if (!globalThis.__opWizardOpencodeReaper) {
+	globalThis.__opWizardOpencodeReaper = true;
+	process.on("SIGTERM", killWizardOpencode);
+	process.on("SIGINT", killWizardOpencode);
+	process.on("exit", killWizardOpencode);
+}
+async function checkReachable(url) {
+	try {
+		return (await fetch(`${url}/provider`, { signal: AbortSignal.timeout(2e3) })).ok;
+	} catch {
+		return false;
+	}
+}
+async function stopWizardOpencode(proc) {
+	if (!proc || proc.exitCode !== null || !proc.pid) return;
+	try {
+		proc.kill("SIGTERM");
+	} catch {
+		return;
+	}
+	await Promise.race([new Promise((resolve) => proc.once("exit", () => resolve())), new Promise((resolve) => setTimeout(resolve, 2e3))]);
+}
+function spawnOpencodeServer() {
+	return new Promise((resolve, reject) => {
+		const proc = spawn("opencode", [
+			"serve",
+			"--hostname=127.0.0.1",
+			"--port=0"
+		], {
+			env: process.env,
+			stdio: [
+				"ignore",
+				"pipe",
+				"pipe"
+			]
+		});
+		_proc = proc;
+		let resolved = false;
+		const timer = setTimeout(() => {
+			proc.kill();
+			reject(/* @__PURE__ */ new Error("Timed out waiting for OpenCode server to start (15s)"));
+		}, 15e3);
+		let out = "";
+		proc.stdout?.on("data", (chunk) => {
+			out += chunk.toString();
+			for (const line of out.split("\n")) if (line.includes("server listening")) {
+				const m = line.match(/on\s+(https?:\/\/[^\s]+)/);
+				if (m) {
+					resolved = true;
+					clearTimeout(timer);
+					resolve(m[1]);
+				}
+			}
+		});
+		proc.on("exit", (code) => {
+			clearTimeout(timer);
+			if (_proc === proc) {
+				_proc = null;
+				_url = null;
+			}
+			if (!resolved && code !== 0) reject(/* @__PURE__ */ new Error(`OpenCode exited (code ${code}). Output: ${out.slice(0, 300)}`));
+		});
+		proc.on("error", (err) => {
+			clearTimeout(timer);
+			if (_proc === proc) {
+				_proc = null;
+				_url = null;
+			}
+			reject(err);
+		});
+	});
+}
+var POST = async () => {
+	const configuredUrl = process.env.OP_OPENCODE_URL ?? process.env.OP_ASSISTANT_URL ?? `http://127.0.0.1:${process.env.OP_ASSISTANT_PORT ?? "3800"}`;
+	if (await checkReachable(configuredUrl)) return json({
+		ok: true,
+		url: configuredUrl,
+		started: false
+	});
+	if (_url && await checkReachable(_url)) return json({
+		ok: true,
+		url: _url,
+		started: false
+	});
+	if (_inFlight) try {
+		return json({
+			ok: true,
+			...await _inFlight
+		});
+	} catch (err) {
+		return json({
+			ok: false,
+			error: err instanceof Error ? err.message : "Failed to start OpenCode"
+		});
+	}
+	try {
+		_inFlight = (async () => {
+			await stopWizardOpencode(_proc);
+			const url = await spawnOpencodeServer();
+			_url = url;
+			return {
+				url,
+				started: true
+			};
+		})();
+		const { url, started } = await _inFlight;
+		_inFlight = null;
+		_url = url;
+		return json({
+			ok: true,
+			url,
+			started
+		});
+	} catch (err) {
+		_inFlight = null;
+		_proc = null;
+		_url = null;
+		return json({
+			ok: false,
+			error: err instanceof Error ? err.message : "Failed to start OpenCode"
+		});
+	}
+};
+
+export { POST };
+//# sourceMappingURL=_server.ts-B_R9VtOW.js.map

package/build/server/chunks/_server.ts-B_R9VtOW.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-B_R9VtOW.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/setup/opencode/ensure/_server.ts.js"],"sourcesContent":["import { r as json } from \"../../../../../../chunks/exports.js\";\nimport { spawn } from \"node:child_process\";\n//#region src/routes/api/setup/opencode/ensure/+server.ts\n/**\n* POST /api/setup/opencode/ensure\n*\n* Ensures an OpenCode server is running for the setup wizard.\n* 1. Checks the configured OP_OPENCODE_URL / OP_ASSISTANT_PORT first.\n* 2. If unreachable, starts a dedicated `opencode serve` subprocess via the SDK.\n* 3. Returns { ok, url, started } — client updates its OP_OPENCODE_URL accordingly.\n*\n* No auth required — called during pre-setup wizard initialization.\n*/\nvar _url = null;\nvar _proc = null;\nvar _inFlight = null;\nfunction killWizardOpencode() {\n\tconst proc = _proc;\n\tif (proc && proc.exitCode === null && proc.pid) try {\n\t\tproc.kill(\"SIGTERM\");\n\t} catch {}\n\t_proc = null;\n\t_url = null;\n}\nif (!globalThis.__opWizardOpencodeReaper) {\n\tglobalThis.__opWizardOpencodeReaper = true;\n\tprocess.on(\"SIGTERM\", killWizardOpencode);\n\tprocess.on(\"SIGINT\", killWizardOpencode);\n\tprocess.on(\"exit\", killWizardOpencode);\n}\nasync function checkReachable(url) {\n\ttry {\n\t\treturn (await fetch(`${url}/provider`, { signal: AbortSignal.timeout(2e3) })).ok;\n\t} catch {\n\t\treturn false;\n\t}\n}\nasync function stopWizardOpencode(proc) {\n\tif (!proc || proc.exitCode !== null || !proc.pid) return;\n\ttry {\n\t\tproc.kill(\"SIGTERM\");\n\t} catch {\n\t\treturn;\n\t}\n\tawait Promise.race([new Promise((resolve) => proc.once(\"exit\", () => resolve())), new Promise((resolve) => setTimeout(resolve, 2e3))]);\n}\nfunction spawnOpencodeServer() {\n\treturn new Promise((resolve, reject) => {\n\t\tconst proc = spawn(\"opencode\", [\n\t\t\t\"serve\",\n\t\t\t\"--hostname=127.0.0.1\",\n\t\t\t\"--port=0\"\n\t\t], {\n\t\t\tenv: process.env,\n\t\t\tstdio: [\n\t\t\t\t\"ignore\",\n\t\t\t\t\"pipe\",\n\t\t\t\t\"pipe\"\n\t\t\t]\n\t\t});\n\t\t_proc = proc;\n\t\tlet resolved = false;\n\t\tconst timer = setTimeout(() => {\n\t\t\tproc.kill();\n\t\t\treject(/* @__PURE__ */ new Error(\"Timed out waiting for OpenCode server to start (15s)\"));\n\t\t}, 15e3);\n\t\tlet out = \"\";\n\t\tproc.stdout?.on(\"data\", (chunk) => {\n\t\t\tout += chunk.toString();\n\t\t\tfor (const line of out.split(\"\\n\")) if (line.includes(\"server listening\")) {\n\t\t\t\tconst m = line.match(/on\\s+(https?:\\/\\/[^\\s]+)/);\n\t\t\t\tif (m) {\n\t\t\t\t\tresolved = true;\n\t\t\t\t\tclearTimeout(timer);\n\t\t\t\t\tresolve(m[1]);\n\t\t\t\t}\n\t\t\t}\n\t\t});\n\t\tproc.on(\"exit\", (code) => {\n\t\t\tclearTimeout(timer);\n\t\t\tif (_proc === proc) {\n\t\t\t\t_proc = null;\n\t\t\t\t_url = null;\n\t\t\t}\n\t\t\tif (!resolved && code !== 0) reject(/* @__PURE__ */ new Error(`OpenCode exited (code ${code}). Output: ${out.slice(0, 300)}`));\n\t\t});\n\t\tproc.on(\"error\", (err) => {\n\t\t\tclearTimeout(timer);\n\t\t\tif (_proc === proc) {\n\t\t\t\t_proc = null;\n\t\t\t\t_url = null;\n\t\t\t}\n\t\t\treject(err);\n\t\t});\n\t});\n}\nvar POST = async () => {\n\tconst configuredUrl = process.env.OP_OPENCODE_URL ?? process.env.OP_ASSISTANT_URL ?? `http://127.0.0.1:${process.env.OP_ASSISTANT_PORT ?? \"3800\"}`;\n\tif (await checkReachable(configuredUrl)) return json({\n\t\tok: true,\n\t\turl: configuredUrl,\n\t\tstarted: false\n\t});\n\tif (_url && await checkReachable(_url)) return json({\n\t\tok: true,\n\t\turl: _url,\n\t\tstarted: false\n\t});\n\tif (_inFlight) try {\n\t\treturn json({\n\t\t\tok: true,\n\t\t\t...await _inFlight\n\t\t});\n\t} catch (err) {\n\t\treturn json({\n\t\t\tok: false,\n\t\t\terror: err instanceof Error ? err.message : \"Failed to start OpenCode\"\n\t\t});\n\t}\n\ttry {\n\t\t_inFlight = (async () => {\n\t\t\tawait stopWizardOpencode(_proc);\n\t\t\tconst url = await spawnOpencodeServer();\n\t\t\t_url = url;\n\t\t\treturn {\n\t\t\t\turl,\n\t\t\t\tstarted: true\n\t\t\t};\n\t\t})();\n\t\tconst { url, started } = await _inFlight;\n\t\t_inFlight = null;\n\t\t_url = url;\n\t\treturn json({\n\t\t\tok: true,\n\t\t\turl,\n\t\t\tstarted\n\t\t});\n\t} catch (err) {\n\t\t_inFlight = null;\n\t\t_proc = null;\n\t\t_url = null;\n\t\treturn json({\n\t\t\tok: false,\n\t\t\terror: err instanceof Error ? err.message : \"Failed to start OpenCode\"\n\t\t});\n\t}\n};\n//#endregion\nexport { POST };\n"],"names":[],"mappings":";;;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,IAAI,IAAI,GAAG,IAAI;AACf,IAAI,KAAK,GAAG,IAAI;AAChB,IAAI,SAAS,GAAG,IAAI;AACpB,SAAS,kBAAkB,GAAG;AAC9B,CAAC,MAAM,IAAI,GAAG,KAAK;AACnB,CAAC,IAAI,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI;AACrD,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;AACtB,CAAC,CAAC,CAAC,MAAM,CAAC;AACV,CAAC,KAAK,GAAG,IAAI;AACb,CAAC,IAAI,GAAG,IAAI;AACZ;AACA,IAAI,CAAC,UAAU,CAAC,wBAAwB,EAAE;AAC1C,CAAC,UAAU,CAAC,wBAAwB,GAAG,IAAI;AAC3C,CAAC,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,kBAAkB,CAAC;AAC1C,CAAC,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,kBAAkB,CAAC;AACzC,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,EAAE,kBAAkB,CAAC;AACvC;AACA,eAAe,cAAc,CAAC,GAAG,EAAE;AACnC,CAAC,IAAI;AACL,EAAE,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,SAAS,CAAC,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,EAAE;AAClF,CAAC,CAAC,CAAC,MAAM;AACT,EAAE,OAAO,KAAK;AACd,CAAC;AACD;AACA,eAAe,kBAAkB,CAAC,IAAI,EAAE;AACxC,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;AACnD,CAAC,IAAI;AACL,EAAE,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC;AACtB,CAAC,CAAC,CAAC,MAAM;AACT,EAAE;AACF,CAAC;AACD,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,OAAO,EAAE,CAAC,CAAC,EAAE,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,UAAU,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;AACvI;AACA,SAAS,mBAAmB,GAAG;AAC/B,CAAC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,KAAK;AACzC,EAAE,MAAM,IAAI,GAAG,KAAK,CAAC,UAAU,EAAE;AACjC,GAAG,OAAO;AACV,GAAG,sBAAsB;AACzB,GAAG;AACH,GAAG,EAAE;AACL,GAAG,GAAG,EAAE,OAAO,CAAC,GAAG;AACnB,GAAG,KAAK,EAAE;AACV,IAAI,QAAQ;AACZ,IAAI,MAAM;AACV,IAAI;AACJ;AACA,GAAG,CAAC;AACJ,EAAE,KAAK,GAAG,IAAI;AACd,EAAE,IAAI,QAAQ,GAAG,KAAK;AACtB,EAAE,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM;AACjC,GAAG,IAAI,CAAC,IAAI,EAAE;AACd,GAAG,MAAM,iBAAiB,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;AAC5F,EAAE,CAAC,EAAE,IAAI,CAAC;AACV,EAAE,IAAI,GAAG,GAAG,EAAE;AACd,EAAE,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,KAAK;AACrC,GAAG,GAAG,IAAI,KAAK,CAAC,QAAQ,EAAE;AAC1B,GAAG,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE;AAC9E,IAAI,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,0BAA0B,CAAC;AACpD,IAAI,IAAI,CAAC,EAAE;AACX,KAAK,QAAQ,GAAG,IAAI;AACpB,KAAK,YAAY,CAAC,KAAK,CAAC;AACxB,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAClB,IAAI;AACJ,GAAG;AACH,EAAE,CAAC,CAAC;AACJ,EAAE,IAAI,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAI,KAAK;AAC5B,GAAG,YAAY,CAAC,KAAK,CAAC;AACtB,GAAG,IAAI,KAAK,KAAK,IAAI,EAAE;AACvB,IAAI,KAAK,GAAG,IAAI;AAChB,IAAI,IAAI,GAAG,IAAI;AACf,GAAG;AACH,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,KAAK,CAAC,EAAE,MAAM,iBAAiB,IAAI,KAAK,CAAC,CAAC,sBAAsB,EAAE,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AACjI,EAAE,CAAC,CAAC;AACJ,EAAE,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,KAAK;AAC5B,GAAG,YAAY,CAAC,KAAK,CAAC;AACtB,GAAG,IAAI,KAAK,KAAK,IAAI,EAAE;AACvB,IAAI,KAAK,GAAG,IAAI;AAChB,IAAI,IAAI,GAAG,IAAI;AACf,GAAG;AACH,GAAG,MAAM,CAAC,GAAG,CAAC;AACd,EAAE,CAAC,CAAC;AACJ,CAAC,CAAC,CAAC;AACH;AACG,IAAC,IAAI,GAAG,YAAY;AACvB,CAAC,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,CAAC,iBAAiB,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,MAAM,CAAC,CAAC;AACnJ,CAAC,IAAI,MAAM,cAAc,CAAC,aAAa,CAAC,EAAE,OAAO,IAAI,CAAC;AACtD,EAAE,EAAE,EAAE,IAAI;AACV,EAAE,GAAG,EAAE,aAAa;AACpB,EAAE,OAAO,EAAE;AACX,EAAE,CAAC;AACH,CAAC,IAAI,IAAI,IAAI,MAAM,cAAc,CAAC,IAAI,CAAC,EAAE,OAAO,IAAI,CAAC;AACrD,EAAE,EAAE,EAAE,IAAI;AACV,EAAE,GAAG,EAAE,IAAI;AACX,EAAE,OAAO,EAAE;AACX,EAAE,CAAC;AACH,CAAC,IAAI,SAAS,EAAE,IAAI;AACpB,EAAE,OAAO,IAAI,CAAC;AACd,GAAG,EAAE,EAAE,IAAI;AACX,GAAG,GAAG,MAAM;AACZ,GAAG,CAAC;AACJ,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,OAAO,IAAI,CAAC;AACd,GAAG,EAAE,EAAE,KAAK;AACZ,GAAG,KAAK,EAAE,GAAG,YAAY,KAAK,GAAG,GAAG,CAAC,OAAO,GAAG;AAC/C,GAAG,CAAC;AACJ,CAAC;AACD,CAAC,IAAI;AACL,EAAE,SAAS,GAAG,CAAC,YAAY;AAC3B,GAAG,MAAM,kBAAkB,CAAC,KAAK,CAAC;AAClC,GAAG,MAAM,GAAG,GAAG,MAAM,mBAAmB,EAAE;AAC1C,GAAG,IAAI,GAAG,GAAG;AACb,GAAG,OAAO;AACV,IAAI,GAAG;AACP,IAAI,OAAO,EAAE;AACb,IAAI;AACJ,EAAE,CAAC,GAAG;AACN,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS;AAC1C,EAAE,SAAS,GAAG,IAAI;AAClB,EAAE,IAAI,GAAG,GAAG;AACZ,EAAE,OAAO,IAAI,CAAC;AACd,GAAG,EAAE,EAAE,IAAI;AACX,GAAG,GAAG;AACN,GAAG;AACH,GAAG,CAAC;AACJ,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,SAAS,GAAG,IAAI;AAClB,EAAE,KAAK,GAAG,IAAI;AACd,EAAE,IAAI,GAAG,IAAI;AACb,EAAE,OAAO,IAAI,CAAC;AACd,GAAG,EAAE,EAAE,KAAK;AACZ,GAAG,KAAK,EAAE,GAAG,YAAY,KAAK,GAAG,GAAG,CAAC,OAAO,GAAG;AAC/C,GAAG,CAAC;AACJ,CAAC;AACD;;;;"}