@openpalm/ui 0.12.52 → 0.13.0-beta.1

package/build/server/chunks/_server.ts-BhuoSeRy.js

@@ -1,64 +0,0 @@
-import { T as dismissSecretStripNotice, ay as readSecretStripNotice, F as createLogger } from './src-DBYue8Tb.js';
-import { g as getState } from './state-Bpt5dC1X.js';
-import { d as getRequestId, r as requireAdmin, k as jsonResponse, e as errorResponse } from './helpers-GEmeDI6e.js';
-import './chunk-CLZ62Ad-.js';
-import 'node:module';
-import './provider-constants-DPrj3yBX.js';
-import './dist-DOFcG0Zp.js';
-import 'node:fs';
-import 'node:path';
-import 'node:child_process';
-import 'buffer';
-import 'node:url';
-import 'node:crypto';
-import 'events';
-import 'fs';
-import 'node:events';
-import 'node:stream';
-import 'node:string_decoder';
-import 'path';
-import 'assert';
-import 'zlib';
-import 'node:assert';
-import 'node:fs/promises';
-import 'node:os';
-import './endpoints-DUs5zmwI.js';
-
-//#region src/routes/admin/secret-notice/+server.ts
-var logger = createLogger("secret-notice");
-/**
-* #502 — one-time notice that secret-looking keys were removed from stack.env.
-* The strip itself is correct per the secret-boundary contract; this surfaces
-* it so the user knows where their value went and how to re-add it.
-*/
-var GET = async (event) => {
-	const requestId = getRequestId(event);
-	const authError = requireAdmin(event, requestId);
-	if (authError) return authError;
-	const state = getState();
-	try {
-		return jsonResponse(200, {
-			ok: true,
-			notice: readSecretStripNotice(state)
-		}, requestId);
-	} catch (e) {
-		return errorResponse(500, "secret_notice_failed", e instanceof Error ? e.message : String(e), {}, requestId);
-	}
-};
-/** Dismiss the one-time notice. */
-var DELETE = async (event) => {
-	const requestId = getRequestId(event);
-	const authError = requireAdmin(event, requestId);
-	if (authError) return authError;
-	const state = getState();
-	try {
-		dismissSecretStripNotice(state);
-		logger.info("secret-strip notice dismissed", { requestId });
-		return jsonResponse(200, { ok: true }, requestId);
-	} catch (e) {
-		return errorResponse(500, "secret_notice_dismiss_failed", e instanceof Error ? e.message : String(e), {}, requestId);
-	}
-};
-
-export { DELETE, GET };
-//# sourceMappingURL=_server.ts-BhuoSeRy.js.map

package/build/server/chunks/_server.ts-BhuoSeRy.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"_server.ts-BhuoSeRy.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/admin/secret-notice/_server.ts.js"],"sourcesContent":["import { Mt as readSecretStripNotice, jt as dismissSecretStripNotice, pn as createLogger } from \"../../../../chunks/src.js\";\nimport { t as getState } from \"../../../../chunks/state.js\";\nimport { a as getRequestId, c as jsonResponse, r as errorResponse, u as requireAdmin } from \"../../../../chunks/helpers.js\";\n//#region src/routes/admin/secret-notice/+server.ts\nvar logger = createLogger(\"secret-notice\");\n/**\n* #502 — one-time notice that secret-looking keys were removed from stack.env.\n* The strip itself is correct per the secret-boundary contract; this surfaces\n* it so the user knows where their value went and how to re-add it.\n*/\nvar GET = async (event) => {\n\tconst requestId = getRequestId(event);\n\tconst authError = requireAdmin(event, requestId);\n\tif (authError) return authError;\n\tconst state = getState();\n\ttry {\n\t\treturn jsonResponse(200, {\n\t\t\tok: true,\n\t\t\tnotice: readSecretStripNotice(state)\n\t\t}, requestId);\n\t} catch (e) {\n\t\treturn errorResponse(500, \"secret_notice_failed\", e instanceof Error ? e.message : String(e), {}, requestId);\n\t}\n};\n/** Dismiss the one-time notice. */\nvar DELETE = async (event) => {\n\tconst requestId = getRequestId(event);\n\tconst authError = requireAdmin(event, requestId);\n\tif (authError) return authError;\n\tconst state = getState();\n\ttry {\n\t\tdismissSecretStripNotice(state);\n\t\tlogger.info(\"secret-strip notice dismissed\", { requestId });\n\t\treturn jsonResponse(200, { ok: true }, requestId);\n\t} catch (e) {\n\t\treturn errorResponse(500, \"secret_notice_dismiss_failed\", e instanceof Error ? e.message : String(e), {}, requestId);\n\t}\n};\n//#endregion\nexport { DELETE, GET };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAGA;AACA,IAAI,MAAM,GAAG,YAAY,CAAC,eAAe,CAAC;AAC1C;AACA;AACA;AACA;AACA;AACG,IAAC,GAAG,GAAG,OAAO,KAAK,KAAK;AAC3B,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC;AACtC,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,EAAE,SAAS,CAAC;AACjD,CAAC,IAAI,SAAS,EAAE,OAAO,SAAS;AAChC,CAAC,MAAM,KAAK,GAAG,QAAQ,EAAE;AACzB,CAAC,IAAI;AACL,EAAE,OAAO,YAAY,CAAC,GAAG,EAAE;AAC3B,GAAG,EAAE,EAAE,IAAI;AACX,GAAG,MAAM,EAAE,qBAAqB,CAAC,KAAK;AACtC,GAAG,EAAE,SAAS,CAAC;AACf,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE;AACb,EAAE,OAAO,aAAa,CAAC,GAAG,EAAE,sBAAsB,EAAE,CAAC,YAAY,KAAK,GAAG,CAAC,CAAC,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,SAAS,CAAC;AAC9G,CAAC;AACD;AACA;AACG,IAAC,MAAM,GAAG,OAAO,KAAK,KAAK;AAC9B,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC;AACtC,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,EAAE,SAAS,CAAC;AACjD,CAAC,IAAI,SAAS,EAAE,OAAO,SAAS;AAChC,CAAC,MAAM,KAAK,GAAG,QAAQ,EAAE;AACzB,CAAC,IAAI;AACL,EAAE,wBAAwB,CAAC,KAAK,CAAC;AACjC,EAAE,MAAM,CAAC,IAAI,CAAC,+BAA+B,EAAE,EAAE,SAAS,EAAE,CAAC;AAC7D,EAAE,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,SAAS,CAAC;AACnD,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE;AACb,EAAE,OAAO,aAAa,CAAC,GAAG,EAAE,8BAA8B,EAAE,CAAC,YAAY,KAAK,GAAG,CAAC,CAAC,OAAO,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,SAAS,CAAC;AACtH,CAAC;AACD;;;;"}

package/build/server/chunks/_server.ts-BnL_ReBS.js

@@ -1,50 +0,0 @@
-import { j as json } from './exports-D1quPX8S.js';
-import { ab as isSetupComplete, aL as resolveOpenPalmHome, o as checkDocker } from './src-DBYue8Tb.js';
-import { g as getState } from './state-Bpt5dC1X.js';
-import { g as getDeployState, s as startDeploy } from './setup-deploy-DhMA_slP.js';
-import './utils-BSRjJDrZ.js';
-import './chunk-CLZ62Ad-.js';
-import 'node:module';
-import './provider-constants-DPrj3yBX.js';
-import './dist-DOFcG0Zp.js';
-import 'node:fs';
-import 'node:path';
-import 'node:child_process';
-import 'buffer';
-import 'node:url';
-import 'node:crypto';
-import 'events';
-import 'fs';
-import 'node:events';
-import 'node:stream';
-import 'node:string_decoder';
-import 'path';
-import 'assert';
-import 'zlib';
-import 'node:assert';
-import 'node:fs/promises';
-import 'node:os';
-
-//#region src/routes/api/setup/retry-deploy/+server.ts
-var POST = async () => {
-	if (isSetupComplete(resolveOpenPalmHome())) return json({
-		ok: false,
-		error: "setup_complete",
-		message: "Setup is already complete."
-	}, { status: 409 });
-	if (!(await checkDocker()).ok) return json({
-		ok: false,
-		error: "docker_unavailable",
-		message: "Docker isn't running. Start Docker, then retry deploy."
-	}, { status: 503 });
-	if (getDeployState(getState()).deploying) return json({
-		ok: false,
-		error: "install_in_progress",
-		message: "A deploy is already running."
-	}, { status: 409 });
-	startDeploy(getState());
-	return json({ ok: true });
-};
-
-export { POST };
-//# sourceMappingURL=_server.ts-BnL_ReBS.js.map

package/build/server/chunks/_server.ts-BnL_ReBS.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"_server.ts-BnL_ReBS.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/setup/retry-deploy/_server.ts.js"],"sourcesContent":["import { r as json } from \"../../../../../chunks/exports.js\";\nimport { Y as checkDocker, cn as resolveOpenPalmHome, ft as isSetupComplete } from \"../../../../../chunks/src.js\";\nimport { t as getState } from \"../../../../../chunks/state.js\";\nimport { i as startDeploy, t as getDeployState } from \"../../../../../chunks/setup-deploy.js\";\n//#region src/routes/api/setup/retry-deploy/+server.ts\nvar POST = async () => {\n\tif (isSetupComplete(resolveOpenPalmHome())) return json({\n\t\tok: false,\n\t\terror: \"setup_complete\",\n\t\tmessage: \"Setup is already complete.\"\n\t}, { status: 409 });\n\tif (!(await checkDocker()).ok) return json({\n\t\tok: false,\n\t\terror: \"docker_unavailable\",\n\t\tmessage: \"Docker isn't running. Start Docker, then retry deploy.\"\n\t}, { status: 503 });\n\tif (getDeployState(getState()).deploying) return json({\n\t\tok: false,\n\t\terror: \"install_in_progress\",\n\t\tmessage: \"A deploy is already running.\"\n\t}, { status: 409 });\n\tstartDeploy(getState());\n\treturn json({ ok: true });\n};\n//#endregion\nexport { POST };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AAIA;AACG,IAAC,IAAI,GAAG,YAAY;AACvB,CAAC,IAAI,eAAe,CAAC,mBAAmB,EAAE,CAAC,EAAE,OAAO,IAAI,CAAC;AACzD,EAAE,EAAE,EAAE,KAAK;AACX,EAAE,KAAK,EAAE,gBAAgB;AACzB,EAAE,OAAO,EAAE;AACX,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACpB,CAAC,IAAI,CAAC,CAAC,MAAM,WAAW,EAAE,EAAE,EAAE,EAAE,OAAO,IAAI,CAAC;AAC5C,EAAE,EAAE,EAAE,KAAK;AACX,EAAE,KAAK,EAAE,oBAAoB;AAC7B,EAAE,OAAO,EAAE;AACX,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACpB,CAAC,IAAI,cAAc,CAAC,QAAQ,EAAE,CAAC,CAAC,SAAS,EAAE,OAAO,IAAI,CAAC;AACvD,EAAE,EAAE,EAAE,KAAK;AACX,EAAE,KAAK,EAAE,qBAAqB;AAC9B,EAAE,OAAO,EAAE;AACX,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;AACpB,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC;AACxB,CAAC,OAAO,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AAC1B;;;;"}

package/build/server/chunks/_server.ts-BoOQ7F2z.js

@@ -1,40 +0,0 @@
-import { d as getRequestId, r as requireAdmin, k as jsonResponse } from './helpers-GEmeDI6e.js';
-import { l as loadProviderPage } from './catalog-B_9Qf_Tj.js';
-import './src-DBYue8Tb.js';
-import './chunk-CLZ62Ad-.js';
-import 'node:module';
-import './provider-constants-DPrj3yBX.js';
-import './dist-DOFcG0Zp.js';
-import 'node:fs';
-import 'node:path';
-import 'node:child_process';
-import 'buffer';
-import 'node:url';
-import 'node:crypto';
-import 'events';
-import 'fs';
-import 'node:events';
-import 'node:stream';
-import 'node:string_decoder';
-import 'path';
-import 'assert';
-import 'zlib';
-import 'node:assert';
-import 'node:fs/promises';
-import 'node:os';
-import './endpoints-DUs5zmwI.js';
-import './state-Bpt5dC1X.js';
-import './coercion-TNFJisCC.js';
-import './http-BzGcbSMh.js';
-import './config-VJ5wAdKd.js';
-
-//#region src/routes/admin/providers/+server.ts
-var GET = async (event) => {
-	const requestId = getRequestId(event);
-	const authError = requireAdmin(event, requestId);
-	if (authError) return authError;
-	return jsonResponse(200, await loadProviderPage(), requestId);
-};
-
-export { GET };
-//# sourceMappingURL=_server.ts-BoOQ7F2z.js.map

package/build/server/chunks/_server.ts-BoOQ7F2z.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"_server.ts-BoOQ7F2z.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/admin/providers/_server.ts.js"],"sourcesContent":["import { a as getRequestId, c as jsonResponse, u as requireAdmin } from \"../../../../chunks/helpers.js\";\nimport { t as loadProviderPage } from \"../../../../chunks/catalog.js\";\n//#region src/routes/admin/providers/+server.ts\nvar GET = async (event) => {\n\tconst requestId = getRequestId(event);\n\tconst authError = requireAdmin(event, requestId);\n\tif (authError) return authError;\n\treturn jsonResponse(200, await loadProviderPage(), requestId);\n};\n//#endregion\nexport { GET };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEA;AACG,IAAC,GAAG,GAAG,OAAO,KAAK,KAAK;AAC3B,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC;AACtC,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,EAAE,SAAS,CAAC;AACjD,CAAC,IAAI,SAAS,EAAE,OAAO,SAAS;AAChC,CAAC,OAAO,YAAY,CAAC,GAAG,EAAE,MAAM,gBAAgB,EAAE,EAAE,SAAS,CAAC;AAC9D;;;;"}

package/build/server/chunks/_server.ts-Bry3Z40C.js

@@ -1,160 +0,0 @@
-import { a7 as importHostOpenCode, N as detectHostOpenCode, i as authJsonPath, o as checkDocker, m as buildComposeOptions } from './src-DBYue8Tb.js';
-import { g as getState } from './state-Bpt5dC1X.js';
-import { d as getRequestId, r as requireAdmin, p as parseJsonBody, e as errorResponse, k as jsonResponse } from './helpers-GEmeDI6e.js';
-import { w as withSerialQueue } from './serial-queue-D9FEpYVv.js';
-import { o as opencodeFetch } from './http-BzGcbSMh.js';
-import { c as composeRestart } from './docker-7rKo0FDm.js';
-import { existsSync, readFileSync } from 'node:fs';
-import './chunk-CLZ62Ad-.js';
-import 'node:module';
-import './provider-constants-DPrj3yBX.js';
-import './dist-DOFcG0Zp.js';
-import 'node:path';
-import 'node:child_process';
-import 'buffer';
-import 'node:url';
-import 'node:crypto';
-import 'events';
-import 'fs';
-import 'node:events';
-import 'node:stream';
-import 'node:string_decoder';
-import 'path';
-import 'assert';
-import 'zlib';
-import 'node:assert';
-import 'node:fs/promises';
-import 'node:os';
-import './endpoints-DUs5zmwI.js';
-
-//#region src/routes/admin/providers/import-host/+server.ts
-/**
-* POST /admin/providers/import-host
-*
-* Copies host OpenCode config + auth into OP_HOME, then pushes each
-* imported credential to the running OpenCode server so the providers
-* appear connected immediately (no restart required).
-*
-* - opencode.json: stripped of plugin/mcp/permission keys, merged with
-*   existing OP_HOME config. Provider conflicts preserved by default.
-* - auth.json: byte-copied and chmodded 0o600. Never logged.
-* - Live push: best-effort PUT to OpenCode /auth/{id} per credential.
-*   If OpenCode is unreachable, the file copy still applies and OpenCode
-*   will pick up the credentials on next restart.
-* - Service restart: assistant is restarted after the import so opencode.json
-*   provider blocks are re-read (live push only updates the auth store, not
-*   config).
-*
-* Body (optional JSON):
-*   { overwriteConflicts?: boolean }   — default false
-*
-* Auth: admin token required.
-*/
-/**
-* Restart services that hold provider state in startup config.
-* Best-effort: the file-level import is the durable part; this is the polish
-* that makes the change visible without the user having to bounce things by hand.
-* OpenCode caches opencode.json provider blocks at startup, so imported
-* provider config needs a fresh assistant process.
-*/
-async function restartProviderConsumers() {
-	const services = ["assistant"];
-	if (!(await checkDocker()).ok) return {
-		restarted: [],
-		failed: services.map((s) => ({
-			service: s,
-			error: "docker unavailable"
-		}))
-	};
-	const opts = buildComposeOptions(getState());
-	const restarted = [];
-	const failed = [];
-	for (const service of services) try {
-		const r = await composeRestart([service], opts);
-		if (r.ok) restarted.push(service);
-		else failed.push({
-			service,
-			error: r.stderr || `exit ${r.code}`
-		});
-	} catch (err) {
-		failed.push({
-			service,
-			error: err instanceof Error ? err.message : String(err)
-		});
-	}
-	return {
-		restarted,
-		failed
-	};
-}
-/** Push each auth.json entry to OpenCode's /auth/{id} so the running process sees them. */
-async function pushAuthToOpenCode(authPath) {
-	let raw;
-	try {
-		raw = JSON.parse(readFileSync(authPath, "utf-8"));
-	} catch {
-		return {
-			pushed: 0,
-			failed: []
-		};
-	}
-	if (!raw || typeof raw !== "object" || Array.isArray(raw)) return {
-		pushed: 0,
-		failed: []
-	};
-	let pushed = 0;
-	const failed = [];
-	for (const [providerId, value] of Object.entries(raw)) try {
-		await opencodeFetch(`/auth/${encodeURIComponent(providerId)}`, {
-			method: "PUT",
-			body: JSON.stringify(value)
-		});
-		pushed++;
-	} catch {
-		failed.push(providerId);
-	}
-	return {
-		pushed,
-		failed
-	};
-}
-var POST = async (event) => {
-	const requestId = getRequestId(event);
-	const authError = requireAdmin(event, requestId);
-	if (authError) return authError;
-	return withSerialQueue("admin:providers:import-host", async () => {
-		const state = getState();
-		let overwriteConflicts = false;
-		if ((event.request.headers.get("content-type") ?? "").includes("application/json")) {
-			const parsed = await parseJsonBody(event.request);
-			if (!("error" in parsed)) overwriteConflicts = parsed.data.overwriteConflicts === true;
-		}
-		let result;
-		try {
-			result = importHostOpenCode(state, { overwriteConflicts });
-		} catch (err) {
-			return errorResponse(500, "import_failed", err instanceof Error ? err.message : "Import failed", {}, requestId);
-		}
-		const hostStatus = detectHostOpenCode();
-		let livePush = {
-			pushed: 0,
-			failed: []
-		};
-		const importedAuthPath = authJsonPath(state);
-		if (existsSync(importedAuthPath)) livePush = await pushAuthToOpenCode(importedAuthPath);
-		else if (hostStatus.authPath) livePush = await pushAuthToOpenCode(hostStatus.authPath);
-		const restart = await restartProviderConsumers();
-		return jsonResponse(200, {
-			ok: true,
-			imported: result.imported,
-			conflicts: result.conflicts,
-			livePushed: livePush.pushed,
-			livePushFailed: livePush.failed,
-			restarted: restart.restarted,
-			restartFailed: restart.failed
-		}, requestId);
-	});
-};
-
-export { POST };
-//# sourceMappingURL=_server.ts-Bry3Z40C.js.map

package/build/server/chunks/_server.ts-Bry3Z40C.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"_server.ts-Bry3Z40C.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/admin/providers/import-host/_server.ts.js"],"sourcesContent":["import { $t as authJsonPath, P as buildComposeOptions, Y as checkDocker, a as detectHostOpenCode, o as importHostOpenCode } from \"../../../../../chunks/src.js\";\nimport { t as getState } from \"../../../../../chunks/state.js\";\nimport { a as getRequestId, c as jsonResponse, l as parseJsonBody, r as errorResponse, u as requireAdmin } from \"../../../../../chunks/helpers.js\";\nimport { t as withSerialQueue } from \"../../../../../chunks/serial-queue.js\";\nimport { t as opencodeFetch } from \"../../../../../chunks/http.js\";\nimport { t as composeRestart } from \"../../../../../chunks/docker.js\";\nimport { existsSync, readFileSync } from \"node:fs\";\n//#region src/routes/admin/providers/import-host/+server.ts\n/**\n* POST /admin/providers/import-host\n*\n* Copies host OpenCode config + auth into OP_HOME, then pushes each\n* imported credential to the running OpenCode server so the providers\n* appear connected immediately (no restart required).\n*\n* - opencode.json: stripped of plugin/mcp/permission keys, merged with\n*   existing OP_HOME config. Provider conflicts preserved by default.\n* - auth.json: byte-copied and chmodded 0o600. Never logged.\n* - Live push: best-effort PUT to OpenCode /auth/{id} per credential.\n*   If OpenCode is unreachable, the file copy still applies and OpenCode\n*   will pick up the credentials on next restart.\n* - Service restart: assistant is restarted after the import so opencode.json\n*   provider blocks are re-read (live push only updates the auth store, not\n*   config).\n*\n* Body (optional JSON):\n*   { overwriteConflicts?: boolean }   — default false\n*\n* Auth: admin token required.\n*/\n/**\n* Restart services that hold provider state in startup config.\n* Best-effort: the file-level import is the durable part; this is the polish\n* that makes the change visible without the user having to bounce things by hand.\n* OpenCode caches opencode.json provider blocks at startup, so imported\n* provider config needs a fresh assistant process.\n*/\nasync function restartProviderConsumers() {\n\tconst services = [\"assistant\"];\n\tif (!(await checkDocker()).ok) return {\n\t\trestarted: [],\n\t\tfailed: services.map((s) => ({\n\t\t\tservice: s,\n\t\t\terror: \"docker unavailable\"\n\t\t}))\n\t};\n\tconst opts = buildComposeOptions(getState());\n\tconst restarted = [];\n\tconst failed = [];\n\tfor (const service of services) try {\n\t\tconst r = await composeRestart([service], opts);\n\t\tif (r.ok) restarted.push(service);\n\t\telse failed.push({\n\t\t\tservice,\n\t\t\terror: r.stderr || `exit ${r.code}`\n\t\t});\n\t} catch (err) {\n\t\tfailed.push({\n\t\t\tservice,\n\t\t\terror: err instanceof Error ? err.message : String(err)\n\t\t});\n\t}\n\treturn {\n\t\trestarted,\n\t\tfailed\n\t};\n}\n/** Push each auth.json entry to OpenCode's /auth/{id} so the running process sees them. */\nasync function pushAuthToOpenCode(authPath) {\n\tlet raw;\n\ttry {\n\t\traw = JSON.parse(readFileSync(authPath, \"utf-8\"));\n\t} catch {\n\t\treturn {\n\t\t\tpushed: 0,\n\t\t\tfailed: []\n\t\t};\n\t}\n\tif (!raw || typeof raw !== \"object\" || Array.isArray(raw)) return {\n\t\tpushed: 0,\n\t\tfailed: []\n\t};\n\tlet pushed = 0;\n\tconst failed = [];\n\tfor (const [providerId, value] of Object.entries(raw)) try {\n\t\tawait opencodeFetch(`/auth/${encodeURIComponent(providerId)}`, {\n\t\t\tmethod: \"PUT\",\n\t\t\tbody: JSON.stringify(value)\n\t\t});\n\t\tpushed++;\n\t} catch {\n\t\tfailed.push(providerId);\n\t}\n\treturn {\n\t\tpushed,\n\t\tfailed\n\t};\n}\nvar POST = async (event) => {\n\tconst requestId = getRequestId(event);\n\tconst authError = requireAdmin(event, requestId);\n\tif (authError) return authError;\n\treturn withSerialQueue(\"admin:providers:import-host\", async () => {\n\t\tconst state = getState();\n\t\tlet overwriteConflicts = false;\n\t\tif ((event.request.headers.get(\"content-type\") ?? \"\").includes(\"application/json\")) {\n\t\t\tconst parsed = await parseJsonBody(event.request);\n\t\t\tif (!(\"error\" in parsed)) overwriteConflicts = parsed.data.overwriteConflicts === true;\n\t\t}\n\t\tlet result;\n\t\ttry {\n\t\t\tresult = importHostOpenCode(state, { overwriteConflicts });\n\t\t} catch (err) {\n\t\t\treturn errorResponse(500, \"import_failed\", err instanceof Error ? err.message : \"Import failed\", {}, requestId);\n\t\t}\n\t\tconst hostStatus = detectHostOpenCode();\n\t\tlet livePush = {\n\t\t\tpushed: 0,\n\t\t\tfailed: []\n\t\t};\n\t\tconst importedAuthPath = authJsonPath(state);\n\t\tif (existsSync(importedAuthPath)) livePush = await pushAuthToOpenCode(importedAuthPath);\n\t\telse if (hostStatus.authPath) livePush = await pushAuthToOpenCode(hostStatus.authPath);\n\t\tconst restart = await restartProviderConsumers();\n\t\treturn jsonResponse(200, {\n\t\t\tok: true,\n\t\t\timported: result.imported,\n\t\t\tconflicts: result.conflicts,\n\t\t\tlivePushed: livePush.pushed,\n\t\t\tlivePushFailed: livePush.failed,\n\t\t\trestarted: restart.restarted,\n\t\t\trestartFailed: restart.failed\n\t\t}, requestId);\n\t});\n};\n//#endregion\nexport { POST };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAOA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,eAAe,wBAAwB,GAAG;AAC1C,CAAC,MAAM,QAAQ,GAAG,CAAC,WAAW,CAAC;AAC/B,CAAC,IAAI,CAAC,CAAC,MAAM,WAAW,EAAE,EAAE,EAAE,EAAE,OAAO;AACvC,EAAE,SAAS,EAAE,EAAE;AACf,EAAE,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM;AAC/B,GAAG,OAAO,EAAE,CAAC;AACb,GAAG,KAAK,EAAE;AACV,GAAG,CAAC;AACJ,EAAE;AACF,CAAC,MAAM,IAAI,GAAG,mBAAmB,CAAC,QAAQ,EAAE,CAAC;AAC7C,CAAC,MAAM,SAAS,GAAG,EAAE;AACrB,CAAC,MAAM,MAAM,GAAG,EAAE;AAClB,CAAC,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,IAAI;AACrC,EAAE,MAAM,CAAC,GAAG,MAAM,cAAc,CAAC,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC;AACjD,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC;AACnC,OAAO,MAAM,CAAC,IAAI,CAAC;AACnB,GAAG,OAAO;AACV,GAAG,KAAK,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC;AACrC,GAAG,CAAC;AACJ,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE;AACf,EAAE,MAAM,CAAC,IAAI,CAAC;AACd,GAAG,OAAO;AACV,GAAG,KAAK,EAAE,GAAG,YAAY,KAAK,GAAG,GAAG,CAAC,OAAO,GAAG,MAAM,CAAC,GAAG;AACzD,GAAG,CAAC;AACJ,CAAC;AACD,CAAC,OAAO;AACR,EAAE,SAAS;AACX,EAAE;AACF,EAAE;AACF;AACA;AACA,eAAe,kBAAkB,CAAC,QAAQ,EAAE;AAC5C,CAAC,IAAI,GAAG;AACR,CAAC,IAAI;AACL,EAAE,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;AACnD,CAAC,CAAC,CAAC,MAAM;AACT,EAAE,OAAO;AACT,GAAG,MAAM,EAAE,CAAC;AACZ,GAAG,MAAM,EAAE;AACX,GAAG;AACH,CAAC;AACD,CAAC,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,OAAO;AACnE,EAAE,MAAM,EAAE,CAAC;AACX,EAAE,MAAM,EAAE;AACV,EAAE;AACF,CAAC,IAAI,MAAM,GAAG,CAAC;AACf,CAAC,MAAM,MAAM,GAAG,EAAE;AAClB,CAAC,KAAK,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,IAAI;AAC5D,EAAE,MAAM,aAAa,CAAC,CAAC,MAAM,EAAE,kBAAkB,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE;AACjE,GAAG,MAAM,EAAE,KAAK;AAChB,GAAG,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK;AAC7B,GAAG,CAAC;AACJ,EAAE,MAAM,EAAE;AACV,CAAC,CAAC,CAAC,MAAM;AACT,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC;AACzB,CAAC;AACD,CAAC,OAAO;AACR,EAAE,MAAM;AACR,EAAE;AACF,EAAE;AACF;AACG,IAAC,IAAI,GAAG,OAAO,KAAK,KAAK;AAC5B,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC;AACtC,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,EAAE,SAAS,CAAC;AACjD,CAAC,IAAI,SAAS,EAAE,OAAO,SAAS;AAChC,CAAC,OAAO,eAAe,CAAC,6BAA6B,EAAE,YAAY;AACnE,EAAE,MAAM,KAAK,GAAG,QAAQ,EAAE;AAC1B,EAAE,IAAI,kBAAkB,GAAG,KAAK;AAChC,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,QAAQ,CAAC,kBAAkB,CAAC,EAAE;AACtF,GAAG,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC;AACpD,GAAG,IAAI,EAAE,OAAO,IAAI,MAAM,CAAC,EAAE,kBAAkB,GAAG,MAAM,CAAC,IAAI,CAAC,kBAAkB,KAAK,IAAI;AACzF,EAAE;AACF,EAAE,IAAI,MAAM;AACZ,EAAE,IAAI;AACN,GAAG,MAAM,GAAG,kBAAkB,CAAC,KAAK,EAAE,EAAE,kBAAkB,EAAE,CAAC;AAC7D,EAAE,CAAC,CAAC,OAAO,GAAG,EAAE;AAChB,GAAG,OAAO,aAAa,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,YAAY,KAAK,GAAG,GAAG,CAAC,OAAO,GAAG,eAAe,EAAE,EAAE,EAAE,SAAS,CAAC;AAClH,EAAE;AACF,EAAE,MAAM,UAAU,GAAG,kBAAkB,EAAE;AACzC,EAAE,IAAI,QAAQ,GAAG;AACjB,GAAG,MAAM,EAAE,CAAC;AACZ,GAAG,MAAM,EAAE;AACX,GAAG;AACH,EAAE,MAAM,gBAAgB,GAAG,YAAY,CAAC,KAAK,CAAC;AAC9C,EAAE,IAAI,UAAU,CAAC,gBAAgB,CAAC,EAAE,QAAQ,GAAG,MAAM,kBAAkB,CAAC,gBAAgB,CAAC;AACzF,OAAO,IAAI,UAAU,CAAC,QAAQ,EAAE,QAAQ,GAAG,MAAM,kBAAkB,CAAC,UAAU,CAAC,QAAQ,CAAC;AACxF,EAAE,MAAM,OAAO,GAAG,MAAM,wBAAwB,EAAE;AAClD,EAAE,OAAO,YAAY,CAAC,GAAG,EAAE;AAC3B,GAAG,EAAE,EAAE,IAAI;AACX,GAAG,QAAQ,EAAE,MAAM,CAAC,QAAQ;AAC5B,GAAG,SAAS,EAAE,MAAM,CAAC,SAAS;AAC9B,GAAG,UAAU,EAAE,QAAQ,CAAC,MAAM;AAC9B,GAAG,cAAc,EAAE,QAAQ,CAAC,MAAM;AAClC,GAAG,SAAS,EAAE,OAAO,CAAC,SAAS;AAC/B,GAAG,aAAa,EAAE,OAAO,CAAC;AAC1B,GAAG,EAAE,SAAS,CAAC;AACf,CAAC,CAAC,CAAC;AACH;;;;"}

package/build/server/chunks/_server.ts-BtVLVJf0.js

@@ -1,80 +0,0 @@
-import { w as withAdminBody, k as jsonResponse } from './helpers-GEmeDI6e.js';
-import { o as opencodeFetch } from './http-BzGcbSMh.js';
-import { a as asStringOrEmpty, e as extractInputs } from './_helpers-B_lb4-jB.js';
-import './src-DBYue8Tb.js';
-import './chunk-CLZ62Ad-.js';
-import 'node:module';
-import './provider-constants-DPrj3yBX.js';
-import './dist-DOFcG0Zp.js';
-import 'node:fs';
-import 'node:path';
-import 'node:child_process';
-import 'buffer';
-import 'node:url';
-import 'node:crypto';
-import 'events';
-import 'fs';
-import 'node:events';
-import 'node:stream';
-import 'node:string_decoder';
-import 'path';
-import 'assert';
-import 'zlib';
-import 'node:assert';
-import 'node:fs/promises';
-import 'node:os';
-import './endpoints-DUs5zmwI.js';
-import './state-Bpt5dC1X.js';
-import './coercion-TNFJisCC.js';
-
-//#region src/routes/admin/providers/oauth/start/+server.ts
-/**
-* POST /admin/providers/oauth/start — Begin an OpenCode-mediated OAuth
-* sign-in for a provider. Returns the authorization URL and any extra
-* inputs the operator needs to confirm in the UI.
-*
-* Forwards directly to the running assistant's OpenCode at
-* OP_OPENCODE_URL, which holds the OAuth methods map needed to issue
-* the authorize request.
-*/
-var POST = (event) => withAdminBody(event, async ({ requestId, body }) => {
-	try {
-		const providerId = asStringOrEmpty(body.providerId);
-		const methodIndex = Number(asStringOrEmpty(body.methodIndex));
-		if (!providerId || Number.isNaN(methodIndex)) return jsonResponse(200, {
-			ok: false,
-			message: "Choose a provider sign-in method first.",
-			selectedProviderId: void 0
-		}, requestId);
-		const inputs = extractInputs(body);
-		const oauth = await opencodeFetch(`/provider/${encodeURIComponent(providerId)}/oauth/authorize`, {
-			method: "POST",
-			body: JSON.stringify({
-				method: methodIndex,
-				...inputs ? { inputs } : {}
-			})
-		});
-		return jsonResponse(200, {
-			ok: true,
-			message: "OAuth flow prepared. Open the link below to continue.",
-			selectedProviderId: providerId,
-			oauth: {
-				providerId,
-				methodIndex,
-				url: oauth.url,
-				mode: oauth.method,
-				instructions: oauth.instructions,
-				inputs
-			}
-		}, requestId);
-	} catch (error) {
-		return jsonResponse(200, {
-			ok: false,
-			message: error instanceof Error ? error.message : "Internal error",
-			selectedProviderId: void 0
-		}, requestId);
-	}
-});
-
-export { POST };
-//# sourceMappingURL=_server.ts-BtVLVJf0.js.map

package/build/server/chunks/_server.ts-BtVLVJf0.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"_server.ts-BtVLVJf0.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/admin/providers/oauth/start/_server.ts.js"],"sourcesContent":["import { c as jsonResponse, f as withAdminBody } from \"../../../../../../chunks/helpers.js\";\nimport { t as opencodeFetch } from \"../../../../../../chunks/http.js\";\nimport { r as extractInputs, t as asStringOrEmpty } from \"../../../../../../chunks/_helpers.js\";\n//#region src/routes/admin/providers/oauth/start/+server.ts\n/**\n* POST /admin/providers/oauth/start — Begin an OpenCode-mediated OAuth\n* sign-in for a provider. Returns the authorization URL and any extra\n* inputs the operator needs to confirm in the UI.\n*\n* Forwards directly to the running assistant's OpenCode at\n* OP_OPENCODE_URL, which holds the OAuth methods map needed to issue\n* the authorize request.\n*/\nvar POST = (event) => withAdminBody(event, async ({ requestId, body }) => {\n\ttry {\n\t\tconst providerId = asStringOrEmpty(body.providerId);\n\t\tconst methodIndex = Number(asStringOrEmpty(body.methodIndex));\n\t\tif (!providerId || Number.isNaN(methodIndex)) return jsonResponse(200, {\n\t\t\tok: false,\n\t\t\tmessage: \"Choose a provider sign-in method first.\",\n\t\t\tselectedProviderId: void 0\n\t\t}, requestId);\n\t\tconst inputs = extractInputs(body);\n\t\tconst oauth = await opencodeFetch(`/provider/${encodeURIComponent(providerId)}/oauth/authorize`, {\n\t\t\tmethod: \"POST\",\n\t\t\tbody: JSON.stringify({\n\t\t\t\tmethod: methodIndex,\n\t\t\t\t...inputs ? { inputs } : {}\n\t\t\t})\n\t\t});\n\t\treturn jsonResponse(200, {\n\t\t\tok: true,\n\t\t\tmessage: \"OAuth flow prepared. Open the link below to continue.\",\n\t\t\tselectedProviderId: providerId,\n\t\t\toauth: {\n\t\t\t\tproviderId,\n\t\t\t\tmethodIndex,\n\t\t\t\turl: oauth.url,\n\t\t\t\tmode: oauth.method,\n\t\t\t\tinstructions: oauth.instructions,\n\t\t\t\tinputs\n\t\t\t}\n\t\t}, requestId);\n\t} catch (error) {\n\t\treturn jsonResponse(200, {\n\t\t\tok: false,\n\t\t\tmessage: error instanceof Error ? error.message : \"Internal error\",\n\t\t\tselectedProviderId: void 0\n\t\t}, requestId);\n\t}\n});\n//#endregion\nexport { POST };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAGA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACG,IAAC,IAAI,GAAG,CAAC,KAAK,KAAK,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK;AAC1E,CAAC,IAAI;AACL,EAAE,MAAM,UAAU,GAAG,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC;AACrD,EAAE,MAAM,WAAW,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;AAC/D,EAAE,IAAI,CAAC,UAAU,IAAI,MAAM,CAAC,KAAK,CAAC,WAAW,CAAC,EAAE,OAAO,YAAY,CAAC,GAAG,EAAE;AACzE,GAAG,EAAE,EAAE,KAAK;AACZ,GAAG,OAAO,EAAE,yCAAyC;AACrD,GAAG,kBAAkB,EAAE,KAAK;AAC5B,GAAG,EAAE,SAAS,CAAC;AACf,EAAE,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC;AACpC,EAAE,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,CAAC,UAAU,EAAE,kBAAkB,CAAC,UAAU,CAAC,CAAC,gBAAgB,CAAC,EAAE;AACnG,GAAG,MAAM,EAAE,MAAM;AACjB,GAAG,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;AACxB,IAAI,MAAM,EAAE,WAAW;AACvB,IAAI,GAAG,MAAM,GAAG,EAAE,MAAM,EAAE,GAAG;AAC7B,IAAI;AACJ,GAAG,CAAC;AACJ,EAAE,OAAO,YAAY,CAAC,GAAG,EAAE;AAC3B,GAAG,EAAE,EAAE,IAAI;AACX,GAAG,OAAO,EAAE,uDAAuD;AACnE,GAAG,kBAAkB,EAAE,UAAU;AACjC,GAAG,KAAK,EAAE;AACV,IAAI,UAAU;AACd,IAAI,WAAW;AACf,IAAI,GAAG,EAAE,KAAK,CAAC,GAAG;AAClB,IAAI,IAAI,EAAE,KAAK,CAAC,MAAM;AACtB,IAAI,YAAY,EAAE,KAAK,CAAC,YAAY;AACpC,IAAI;AACJ;AACA,GAAG,EAAE,SAAS,CAAC;AACf,CAAC,CAAC,CAAC,OAAO,KAAK,EAAE;AACjB,EAAE,OAAO,YAAY,CAAC,GAAG,EAAE;AAC3B,GAAG,EAAE,EAAE,KAAK;AACZ,GAAG,OAAO,EAAE,KAAK,YAAY,KAAK,GAAG,KAAK,CAAC,OAAO,GAAG,gBAAgB;AACrE,GAAG,kBAAkB,EAAE;AACvB,GAAG,EAAE,SAAS,CAAC;AACf,CAAC;AACD,CAAC;;;;"}

package/build/server/chunks/_server.ts-BzISiSHa.js

@@ -1,57 +0,0 @@
-import { a9 as isAllowedService, o as checkDocker, z as composeStart, m as buildComposeOptions, F as createLogger } from './src-DBYue8Tb.js';
-import { g as getState } from './state-Bpt5dC1X.js';
-import { d as getRequestId, r as requireAdmin, p as parseJsonBody, j as jsonBodyError, e as errorResponse, k as jsonResponse } from './helpers-GEmeDI6e.js';
-import './chunk-CLZ62Ad-.js';
-import 'node:module';
-import './provider-constants-DPrj3yBX.js';
-import './dist-DOFcG0Zp.js';
-import 'node:fs';
-import 'node:path';
-import 'node:child_process';
-import 'buffer';
-import 'node:url';
-import 'node:crypto';
-import 'events';
-import 'fs';
-import 'node:events';
-import 'node:stream';
-import 'node:string_decoder';
-import 'path';
-import 'assert';
-import 'zlib';
-import 'node:assert';
-import 'node:fs/promises';
-import 'node:os';
-import './endpoints-DUs5zmwI.js';
-
-//#region src/routes/admin/containers/up/+server.ts
-var logger = createLogger("containers-up");
-var POST = async (event) => {
-	const requestId = getRequestId(event);
-	logger.info("container start request received", { requestId });
-	const authError = requireAdmin(event, requestId);
-	if (authError) return authError;
-	const state = getState();
-	const result = await parseJsonBody(event.request);
-	if ("error" in result) return jsonBodyError(result, requestId);
-	const body = result.data;
-	const service = typeof body.service === "string" ? body.service : "";
-	logger.info("starting service", {
-		requestId,
-		service
-	});
-	if (!isAllowedService(service, state.configDir)) return errorResponse(400, "invalid_service", "Service is not in allowlist", { service }, requestId);
-	if ((await checkDocker()).ok) {
-		const result = await composeStart([service], buildComposeOptions(state));
-		if (result.ok) state.services[service] = "running";
-		else return errorResponse(500, "docker_error", `Failed to start service: ${result.stderr}`, { service }, requestId);
-	} else state.services[service] = "running";
-	return jsonResponse(200, {
-		ok: true,
-		service,
-		status: state.services[service]
-	}, requestId);
-};
-
-export { POST };
-//# sourceMappingURL=_server.ts-BzISiSHa.js.map

package/build/server/chunks/_server.ts-BzISiSHa.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"_server.ts-BzISiSHa.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/admin/containers/up/_server.ts.js"],"sourcesContent":["import { O as isAllowedService, P as buildComposeOptions, Y as checkDocker, pn as createLogger, rt as composeStart } from \"../../../../../chunks/src.js\";\nimport { t as getState } from \"../../../../../chunks/state.js\";\nimport { a as getRequestId, c as jsonResponse, l as parseJsonBody, r as errorResponse, s as jsonBodyError, u as requireAdmin } from \"../../../../../chunks/helpers.js\";\n//#region src/routes/admin/containers/up/+server.ts\nvar logger = createLogger(\"containers-up\");\nvar POST = async (event) => {\n\tconst requestId = getRequestId(event);\n\tlogger.info(\"container start request received\", { requestId });\n\tconst authError = requireAdmin(event, requestId);\n\tif (authError) return authError;\n\tconst state = getState();\n\tconst result = await parseJsonBody(event.request);\n\tif (\"error\" in result) return jsonBodyError(result, requestId);\n\tconst body = result.data;\n\tconst service = typeof body.service === \"string\" ? body.service : \"\";\n\tlogger.info(\"starting service\", {\n\t\trequestId,\n\t\tservice\n\t});\n\tif (!isAllowedService(service, state.configDir)) return errorResponse(400, \"invalid_service\", \"Service is not in allowlist\", { service }, requestId);\n\tif ((await checkDocker()).ok) {\n\t\tconst result = await composeStart([service], buildComposeOptions(state));\n\t\tif (result.ok) state.services[service] = \"running\";\n\t\telse return errorResponse(500, \"docker_error\", `Failed to start service: ${result.stderr}`, { service }, requestId);\n\t} else state.services[service] = \"running\";\n\treturn jsonResponse(200, {\n\t\tok: true,\n\t\tservice,\n\t\tstatus: state.services[service]\n\t}, requestId);\n};\n//#endregion\nexport { POST };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAGA;AACA,IAAI,MAAM,GAAG,YAAY,CAAC,eAAe,CAAC;AACvC,IAAC,IAAI,GAAG,OAAO,KAAK,KAAK;AAC5B,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC;AACtC,CAAC,MAAM,CAAC,IAAI,CAAC,kCAAkC,EAAE,EAAE,SAAS,EAAE,CAAC;AAC/D,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,EAAE,SAAS,CAAC;AACjD,CAAC,IAAI,SAAS,EAAE,OAAO,SAAS;AAChC,CAAC,MAAM,KAAK,GAAG,QAAQ,EAAE;AACzB,CAAC,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC;AAClD,CAAC,IAAI,OAAO,IAAI,MAAM,EAAE,OAAO,aAAa,CAAC,MAAM,EAAE,SAAS,CAAC;AAC/D,CAAC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI;AACzB,CAAC,MAAM,OAAO,GAAG,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,GAAG,IAAI,CAAC,OAAO,GAAG,EAAE;AACrE,CAAC,MAAM,CAAC,IAAI,CAAC,kBAAkB,EAAE;AACjC,EAAE,SAAS;AACX,EAAE;AACF,EAAE,CAAC;AACH,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,EAAE,OAAO,aAAa,CAAC,GAAG,EAAE,iBAAiB,EAAE,6BAA6B,EAAE,EAAE,OAAO,EAAE,EAAE,SAAS,CAAC;AACrJ,CAAC,IAAI,CAAC,MAAM,WAAW,EAAE,EAAE,EAAE,EAAE;AAC/B,EAAE,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,CAAC,OAAO,CAAC,EAAE,mBAAmB,CAAC,KAAK,CAAC,CAAC;AAC1E,EAAE,IAAI,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,SAAS;AACpD,OAAO,OAAO,aAAa,CAAC,GAAG,EAAE,cAAc,EAAE,CAAC,yBAAyB,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE,SAAS,CAAC;AACrH,CAAC,CAAC,MAAM,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,SAAS;AAC3C,CAAC,OAAO,YAAY,CAAC,GAAG,EAAE;AAC1B,EAAE,EAAE,EAAE,IAAI;AACV,EAAE,OAAO;AACT,EAAE,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,OAAO;AAChC,EAAE,EAAE,SAAS,CAAC;AACd;;;;"}

package/build/server/chunks/_server.ts-C7PeR-ll.js

@@ -1,112 +0,0 @@
-import { g as getActiveEndpoint } from './endpoints-DUs5zmwI.js';
-import { d as getRequestId, r as requireAdmin } from './helpers-GEmeDI6e.js';
-import './state-Bpt5dC1X.js';
-import './src-DBYue8Tb.js';
-import './chunk-CLZ62Ad-.js';
-import 'node:module';
-import './provider-constants-DPrj3yBX.js';
-import './dist-DOFcG0Zp.js';
-import 'node:fs';
-import 'node:path';
-import 'node:child_process';
-import 'buffer';
-import 'node:url';
-import 'node:crypto';
-import 'events';
-import 'fs';
-import 'node:events';
-import 'node:stream';
-import 'node:string_decoder';
-import 'path';
-import 'assert';
-import 'zlib';
-import 'node:assert';
-import 'node:fs/promises';
-import 'node:os';
-
-//#region src/routes/proxy/assistant/[...path]/+server.ts
-/**
-* Proxy route: forward /proxy/assistant/[...path] → assistant OpenCode server.
-*
-* Auth: requires the operator's `op_session` cookie (cookie-only since
-* Phase 2 of the auth/proxy refactor — the `x-admin-token` header fallback
-* was removed).
-* Forwards the full request body and method unchanged.
-* The target URL and per-endpoint Basic-auth password are resolved per-request
-* from the active endpoint store, so switching endpoints in the UI takes
-* effect immediately without restarting the server.
-*
-* Streaming: the upstream response body is forwarded as-is (no buffering) so
-* SSE responses (text/event-stream) pass through chunk-by-chunk. We do not
-* impose a fixed timeout on the upstream fetch — OpenCode SSE streams can run
-* for minutes. Instead the per-request AbortController is wired to the client
-* disconnect signal (`event.request.signal`); when the browser aborts (tab
-* close, navigation away), we propagate the abort to upstream.
-*/
-function buildForwardHeaders(incomingContentType, username, password) {
-	const headers = {};
-	if (incomingContentType) headers["content-type"] = incomingContentType;
-	if (password) headers["authorization"] = `Basic ${btoa(`${username || "openpalm"}:${password}`)}`;
-	return headers;
-}
-function buildResponseHeaders(upstream, requestId, endpointId, endpointLabel) {
-	const headers = new Headers();
-	headers.set("content-type", upstream.headers.get("content-type") ?? "application/json");
-	const cacheControl = upstream.headers.get("cache-control");
-	if (cacheControl) headers.set("cache-control", cacheControl);
-	const transferEncoding = upstream.headers.get("transfer-encoding");
-	if (transferEncoding) headers.set("transfer-encoding", transferEncoding);
-	headers.set("x-request-id", requestId);
-	headers.set("x-endpoint-id", endpointId);
-	headers.set("x-endpoint-label", encodeURIComponent(endpointLabel));
-	return headers;
-}
-var handler = async (event) => {
-	const requestId = getRequestId(event);
-	const authError = requireAdmin(event, requestId);
-	if (authError) return authError;
-	const endpoint = getActiveEndpoint();
-	const { path } = event.params;
-	const targetUrl = `${endpoint.url}/${path}${event.url.search}`;
-	const method = event.request.method;
-	const contentType = event.request.headers.get("content-type");
-	const body = method !== "GET" && method !== "HEAD" ? await event.request.arrayBuffer() : void 0;
-	const controller = new AbortController();
-	const onClientAbort = () => controller.abort();
-	event.request.signal.addEventListener("abort", onClientAbort, { once: true });
-	try {
-		const upstream = await fetch(targetUrl, {
-			method,
-			headers: buildForwardHeaders(contentType, endpoint.username, endpoint.password),
-			body,
-			signal: controller.signal
-		});
-		return new Response(upstream.body, {
-			status: upstream.status,
-			headers: buildResponseHeaders(upstream, requestId, endpoint.id, endpoint.label)
-		});
-	} catch (e) {
-		event.request.signal.removeEventListener("abort", onClientAbort);
-		console.warn("[proxy/assistant] Upstream request failed:", e);
-		return new Response(JSON.stringify({
-			error: "endpoint_unreachable",
-			message: `Assistant endpoint "${endpoint.label}" is not reachable`,
-			endpointId: endpoint.id,
-			endpointLabel: endpoint.label,
-			url: endpoint.url
-		}), {
-			status: 503,
-			headers: {
-				"content-type": "application/json",
-				"x-request-id": requestId
-			}
-		});
-	}
-};
-var GET = handler;
-var POST = handler;
-var PUT = handler;
-var DELETE = handler;
-
-export { DELETE, GET, POST, PUT };
-//# sourceMappingURL=_server.ts-C7PeR-ll.js.map

package/build/server/chunks/_server.ts-C7PeR-ll.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"_server.ts-C7PeR-ll.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/proxy/assistant/_...path_/_server.ts.js"],"sourcesContent":["import { r as getActiveEndpoint } from \"../../../../../chunks/endpoints.js\";\nimport { a as getRequestId, u as requireAdmin } from \"../../../../../chunks/helpers.js\";\n//#region src/routes/proxy/assistant/[...path]/+server.ts\n/**\n* Proxy route: forward /proxy/assistant/[...path] → assistant OpenCode server.\n*\n* Auth: requires the operator's `op_session` cookie (cookie-only since\n* Phase 2 of the auth/proxy refactor — the `x-admin-token` header fallback\n* was removed).\n* Forwards the full request body and method unchanged.\n* The target URL and per-endpoint Basic-auth password are resolved per-request\n* from the active endpoint store, so switching endpoints in the UI takes\n* effect immediately without restarting the server.\n*\n* Streaming: the upstream response body is forwarded as-is (no buffering) so\n* SSE responses (text/event-stream) pass through chunk-by-chunk. We do not\n* impose a fixed timeout on the upstream fetch — OpenCode SSE streams can run\n* for minutes. Instead the per-request AbortController is wired to the client\n* disconnect signal (`event.request.signal`); when the browser aborts (tab\n* close, navigation away), we propagate the abort to upstream.\n*/\nfunction buildForwardHeaders(incomingContentType, username, password) {\n\tconst headers = {};\n\tif (incomingContentType) headers[\"content-type\"] = incomingContentType;\n\tif (password) headers[\"authorization\"] = `Basic ${btoa(`${username || \"openpalm\"}:${password}`)}`;\n\treturn headers;\n}\nfunction buildResponseHeaders(upstream, requestId, endpointId, endpointLabel) {\n\tconst headers = new Headers();\n\theaders.set(\"content-type\", upstream.headers.get(\"content-type\") ?? \"application/json\");\n\tconst cacheControl = upstream.headers.get(\"cache-control\");\n\tif (cacheControl) headers.set(\"cache-control\", cacheControl);\n\tconst transferEncoding = upstream.headers.get(\"transfer-encoding\");\n\tif (transferEncoding) headers.set(\"transfer-encoding\", transferEncoding);\n\theaders.set(\"x-request-id\", requestId);\n\theaders.set(\"x-endpoint-id\", endpointId);\n\theaders.set(\"x-endpoint-label\", encodeURIComponent(endpointLabel));\n\treturn headers;\n}\nvar handler = async (event) => {\n\tconst requestId = getRequestId(event);\n\tconst authError = requireAdmin(event, requestId);\n\tif (authError) return authError;\n\tconst endpoint = getActiveEndpoint();\n\tconst { path } = event.params;\n\tconst targetUrl = `${endpoint.url}/${path}${event.url.search}`;\n\tconst method = event.request.method;\n\tconst contentType = event.request.headers.get(\"content-type\");\n\tconst body = method !== \"GET\" && method !== \"HEAD\" ? await event.request.arrayBuffer() : void 0;\n\tconst controller = new AbortController();\n\tconst onClientAbort = () => controller.abort();\n\tevent.request.signal.addEventListener(\"abort\", onClientAbort, { once: true });\n\ttry {\n\t\tconst upstream = await fetch(targetUrl, {\n\t\t\tmethod,\n\t\t\theaders: buildForwardHeaders(contentType, endpoint.username, endpoint.password),\n\t\t\tbody,\n\t\t\tsignal: controller.signal\n\t\t});\n\t\treturn new Response(upstream.body, {\n\t\t\tstatus: upstream.status,\n\t\t\theaders: buildResponseHeaders(upstream, requestId, endpoint.id, endpoint.label)\n\t\t});\n\t} catch (e) {\n\t\tevent.request.signal.removeEventListener(\"abort\", onClientAbort);\n\t\tconsole.warn(\"[proxy/assistant] Upstream request failed:\", e);\n\t\treturn new Response(JSON.stringify({\n\t\t\terror: \"endpoint_unreachable\",\n\t\t\tmessage: `Assistant endpoint \"${endpoint.label}\" is not reachable`,\n\t\t\tendpointId: endpoint.id,\n\t\t\tendpointLabel: endpoint.label,\n\t\t\turl: endpoint.url\n\t\t}), {\n\t\t\tstatus: 503,\n\t\t\theaders: {\n\t\t\t\t\"content-type\": \"application/json\",\n\t\t\t\t\"x-request-id\": requestId\n\t\t\t}\n\t\t});\n\t}\n};\nvar GET = handler;\nvar POST = handler;\nvar PUT = handler;\nvar DELETE = handler;\n//#endregion\nexport { DELETE, GET, POST, PUT };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,mBAAmB,CAAC,mBAAmB,EAAE,QAAQ,EAAE,QAAQ,EAAE;AACtE,CAAC,MAAM,OAAO,GAAG,EAAE;AACnB,CAAC,IAAI,mBAAmB,EAAE,OAAO,CAAC,cAAc,CAAC,GAAG,mBAAmB;AACvE,CAAC,IAAI,QAAQ,EAAE,OAAO,CAAC,eAAe,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,EAAE,QAAQ,IAAI,UAAU,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;AAClG,CAAC,OAAO,OAAO;AACf;AACA,SAAS,oBAAoB,CAAC,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,aAAa,EAAE;AAC9E,CAAC,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE;AAC9B,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,kBAAkB,CAAC;AACxF,CAAC,MAAM,YAAY,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;AAC3D,CAAC,IAAI,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,YAAY,CAAC;AAC7D,CAAC,MAAM,gBAAgB,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;AACnE,CAAC,IAAI,gBAAgB,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,gBAAgB,CAAC;AACzE,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,SAAS,CAAC;AACvC,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,CAAC;AACzC,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,kBAAkB,CAAC,aAAa,CAAC,CAAC;AACnE,CAAC,OAAO,OAAO;AACf;AACA,IAAI,OAAO,GAAG,OAAO,KAAK,KAAK;AAC/B,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC;AACtC,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,EAAE,SAAS,CAAC;AACjD,CAAC,IAAI,SAAS,EAAE,OAAO,SAAS;AAChC,CAAC,MAAM,QAAQ,GAAG,iBAAiB,EAAE;AACrC,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,MAAM;AAC9B,CAAC,MAAM,SAAS,GAAG,CAAC,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AAC/D,CAAC,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM;AACpC,CAAC,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;AAC9D,CAAC,MAAM,IAAI,GAAG,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,MAAM;AAChG,CAAC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE;AACzC,CAAC,MAAM,aAAa,GAAG,MAAM,UAAU,CAAC,KAAK,EAAE;AAC/C,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,aAAa,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAC9E,CAAC,IAAI;AACL,EAAE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE;AAC1C,GAAG,MAAM;AACT,GAAG,OAAO,EAAE,mBAAmB,CAAC,WAAW,EAAE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC;AAClF,GAAG,IAAI;AACP,GAAG,MAAM,EAAE,UAAU,CAAC;AACtB,GAAG,CAAC;AACJ,EAAE,OAAO,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE;AACrC,GAAG,MAAM,EAAE,QAAQ,CAAC,MAAM;AAC1B,GAAG,OAAO,EAAE,oBAAoB,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,KAAK;AACjF,GAAG,CAAC;AACJ,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE;AACb,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,aAAa,CAAC;AAClE,EAAE,OAAO,CAAC,IAAI,CAAC,4CAA4C,EAAE,CAAC,CAAC;AAC/D,EAAE,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC;AACrC,GAAG,KAAK,EAAE,sBAAsB;AAChC,GAAG,OAAO,EAAE,CAAC,oBAAoB,EAAE,QAAQ,CAAC,KAAK,CAAC,kBAAkB,CAAC;AACrE,GAAG,UAAU,EAAE,QAAQ,CAAC,EAAE;AAC1B,GAAG,aAAa,EAAE,QAAQ,CAAC,KAAK;AAChC,GAAG,GAAG,EAAE,QAAQ,CAAC;AACjB,GAAG,CAAC,EAAE;AACN,GAAG,MAAM,EAAE,GAAG;AACd,GAAG,OAAO,EAAE;AACZ,IAAI,cAAc,EAAE,kBAAkB;AACtC,IAAI,cAAc,EAAE;AACpB;AACA,GAAG,CAAC;AACJ,CAAC;AACD,CAAC;AACE,IAAC,GAAG,GAAG;AACP,IAAC,IAAI,GAAG;AACR,IAAC,GAAG,GAAG;AACP,IAAC,MAAM,GAAG;;;;"}