@openpalm/ui 0.12.52 → 0.13.0-beta.2

package/build/server/chunks/_server.ts-CcoaYeM8.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-CcoaYeM8.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/host/automations/_name_/run/_server.ts.js"],"sourcesContent":["import { _ as buildAkmEnv, m as loadAutomations, p as executeAutomation } from \"../../../../../../../chunks/src.js\";\nimport { t as getState } from \"../../../../../../../chunks/state.js\";\nimport { a as getRequestId, c as jsonResponse, d as requireCapability, r as errorResponse, u as requireAdmin } from \"../../../../../../../chunks/helpers.js\";\n//#region src/routes/api/host/automations/[name]/run/+server.ts\nvar SAFE_NAME_RE = /^[a-zA-Z0-9._-]+(?:\\.ya?ml)?$/;\nvar POST = async (event) => {\n\tconst requestId = getRequestId(event);\n\tconst capabilityError = requireCapability(event, \"host:stack:write\", requestId);\n\tif (capabilityError) return capabilityError;\n\tconst authErr = requireAdmin(event, requestId);\n\tif (authErr) return authErr;\n\tconst state = getState();\n\tconst rawName = event.params.name ?? \"\";\n\tconst taskId = rawName.replace(/\\.ya?ml$/, \"\");\n\tif (!SAFE_NAME_RE.test(rawName) || rawName.includes(\"..\") || rawName.includes(\"/\")) return errorResponse(400, \"invalid_input\", \"name must match /^[a-zA-Z0-9._-]+$/\", {}, requestId);\n\tif (!loadAutomations(state.stashDir).some((c) => c.name === taskId)) return errorResponse(404, \"not_found\", `Automation '${taskId}' is not installed.`, {}, requestId);\n\tconst result = await executeAutomation(taskId, buildAkmEnv(state));\n\treturn jsonResponse(202, {\n\t\tok: result.ok,\n\t\tname: taskId,\n\t\tstatus: result.status,\n\t\terror: result.error ?? null\n\t}, requestId);\n};\n//#endregion\nexport { POST };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAGA;AACA,IAAI,YAAY,GAAG,+BAA+B;AAC/C,IAAC,IAAI,GAAG,OAAO,KAAK,KAAK;AAC5B,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC;AACtC,CAAC,MAAM,eAAe,GAAG,iBAAiB,CAAC,KAAK,EAAE,kBAAkB,EAAE,SAAS,CAAC;AAChF,CAAC,IAAI,eAAe,EAAE,OAAO,eAAe;AAC5C,CAAC,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,EAAE,SAAS,CAAC;AAC/C,CAAC,IAAI,OAAO,EAAE,OAAO,OAAO;AAC5B,CAAC,MAAM,KAAK,GAAG,QAAQ,EAAE;AACzB,CAAC,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE;AACxC,CAAC,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;AAC/C,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,OAAO,aAAa,CAAC,GAAG,EAAE,eAAe,EAAE,qCAAqC,EAAE,EAAE,EAAE,SAAS,CAAC;AACrL,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,EAAE,OAAO,aAAa,CAAC,GAAG,EAAE,WAAW,EAAE,CAAC,YAAY,EAAE,MAAM,CAAC,mBAAmB,CAAC,EAAE,EAAE,EAAE,SAAS,CAAC;AACvK,CAAC,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,MAAM,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC;AACnE,CAAC,OAAO,YAAY,CAAC,GAAG,EAAE;AAC1B,EAAE,EAAE,EAAE,MAAM,CAAC,EAAE;AACf,EAAE,IAAI,EAAE,MAAM;AACd,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM;AACvB,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI;AACzB,EAAE,EAAE,SAAS,CAAC;AACd;;;;"}

package/build/server/chunks/_server.ts-CfuLncMW.js

@@ -0,0 +1,134 @@
+import { j as json } from './exports-CcmcYU0M.js';
+import { E as ELECTRON_ASSET_PATTERN } from './src-BwQUi60U.js';
+import { d as getRequestId, l as requireCapability, r as requireAdmin } from './helpers-q4Ng8QTq.js';
+import './utils-OXHIhUb5.js';
+import './provider-constants-1s1k8kbj.js';
+import './chunk-CLZ62Ad-.js';
+import 'node:module';
+import 'node:fs';
+import 'node:child_process';
+import 'node:path';
+import 'buffer';
+import 'node:url';
+import 'node:os';
+import 'node:crypto';
+import 'events';
+import 'fs';
+import 'node:events';
+import 'node:stream';
+import 'node:string_decoder';
+import 'path';
+import 'assert';
+import 'zlib';
+import 'node:assert';
+import 'node:fs/promises';
+import './endpoints-B9ePqrMw.js';
+import './state-Dm7U51xT.js';
+import './features-0lgyQreD.js';
+
+//#region src/lib/server/release-units.ts
+/**
+* Parse GitHub release tags into platform + per-unit release lists.
+*
+* With independently versioned units, git tags are unit-prefixed
+* (platform-X.Y.Z, assistant-X.Y.Z, guardian-X.Y.Z, portals-X.Y.Z). Docker
+* images always use the v-prefixed form, so the prefix is stripped here and the
+* UI re-adds the `v` only when talking to Docker. Legacy `vX.Y.Z` tags are kept
+* under the platform list for backward compat with pre-unit releases.
+*
+* Pure + side-effect free so it can be unit-tested without mocking the GitHub
+* API. The `/api/host/versions/releases` route calls {@link groupReleasesByUnit}
+* after fetching the raw release list.
+*/
+var PLATFORM_TAG_PATTERN = /^platform-(\d+\.\d+\.\d+(?:[-+][0-9A-Za-z.-]*)?)$/;
+var LEGACY_V_TAG_PATTERN = /^v(\d+\.\d+\.\d+(?:[-+][0-9A-Za-z.-]*)?)$/;
+/**
+* Select only platform releases that carry installable app assets (Electron
+* installer or skeleton/deploy bundle), skipping per-unit container-image
+* releases.
+*
+* Per-unit version pickers now read from Docker Hub tags (not GitHub releases),
+* so the releases endpoint only needs app-level releases — the ones with
+* downloadable installer/bundle assets. This dramatically reduces the data the
+* UI holds and keeps the GitHub API call to its existing single request (the
+* filtering is client-side of the fetch, not a second fetch).
+*
+* Deduplicates by semver so `{#each r.tag}` keys stay unique when a platform
+* release created both a `platform-X.Y.Z` and a legacy `vX.Y.Z` tag. Preserves
+* GitHub's `created_at` desc ordering.
+*/
+function selectInstallableReleases(raw) {
+	const seen = /* @__PURE__ */ new Set();
+	const releases = [];
+	for (const r of raw) {
+		const hasElectronBuild = r.assets.some((a) => ELECTRON_ASSET_PATTERN.test(a.name));
+		if (!hasElectronBuild) continue;
+		const platformMatch = r.tag_name.match(PLATFORM_TAG_PATTERN);
+		if (platformMatch) {
+			const tag = platformMatch[1];
+			if (!seen.has(tag)) {
+				seen.add(tag);
+				releases.push({
+					tag,
+					prerelease: r.prerelease,
+					publishedAt: r.published_at,
+					hasElectronBuild
+				});
+			}
+			continue;
+		}
+		const legacyMatch = r.tag_name.match(LEGACY_V_TAG_PATTERN);
+		if (legacyMatch) {
+			const tag = legacyMatch[1];
+			if (!seen.has(tag)) {
+				seen.add(tag);
+				releases.push({
+					tag,
+					prerelease: r.prerelease,
+					publishedAt: r.published_at,
+					hasElectronBuild
+				});
+			}
+		}
+	}
+	return releases;
+}
+//#endregion
+//#region src/routes/api/host/versions/releases/+server.ts
+/**
+* GET /api/host/versions/releases — list installable platform releases from GitHub.
+*
+* Powers the desktop App-update badge: only platform releases that carry an
+* Electron installer asset. Best-effort — a GitHub outage yields an empty list
+* with an error signal rather than failing the page. (No server-side cache: the
+* admin UI no longer polls this, so a direct fetch per visit is fine.)
+*/
+var GET = async (event) => {
+	const requestId = getRequestId(event);
+	const capabilityError = requireCapability(event, "host:updates", requestId);
+	if (capabilityError) return capabilityError;
+	const authError = requireAdmin(event, requestId);
+	if (authError) return authError;
+	try {
+		const res = await fetch("https://api.github.com/repos/itlackey/openpalm/releases?per_page=20", {
+			headers: {
+				"User-Agent": "openpalm-admin/1.0",
+				Accept: "application/vnd.github+json"
+			},
+			signal: AbortSignal.timeout(8e3)
+		});
+		if (!res.ok) return json({
+			releases: [],
+			error: "GitHub releases unavailable"
+		});
+		return json({ releases: selectInstallableReleases(await res.json()) });
+	} catch {
+		return json({
+			releases: [],
+			error: "GitHub releases unavailable"
+		});
+	}
+};
+
+export { GET };
+//# sourceMappingURL=_server.ts-CfuLncMW.js.map

package/build/server/chunks/_server.ts-CfuLncMW.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-CfuLncMW.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/host/versions/releases/_server.ts.js"],"sourcesContent":["import { r as json } from \"../../../../../../chunks/exports.js\";\nimport { mt as ELECTRON_ASSET_PATTERN } from \"../../../../../../chunks/compose-args.js\";\nimport \"../../../../../../chunks/src.js\";\nimport { a as getRequestId, d as requireCapability, u as requireAdmin } from \"../../../../../../chunks/helpers.js\";\n//#region src/lib/server/release-units.ts\n/**\n* Parse GitHub release tags into platform + per-unit release lists.\n*\n* With independently versioned units, git tags are unit-prefixed\n* (platform-X.Y.Z, assistant-X.Y.Z, guardian-X.Y.Z, portals-X.Y.Z). Docker\n* images always use the v-prefixed form, so the prefix is stripped here and the\n* UI re-adds the `v` only when talking to Docker. Legacy `vX.Y.Z` tags are kept\n* under the platform list for backward compat with pre-unit releases.\n*\n* Pure + side-effect free so it can be unit-tested without mocking the GitHub\n* API. The `/api/host/versions/releases` route calls {@link groupReleasesByUnit}\n* after fetching the raw release list.\n*/\nvar PLATFORM_TAG_PATTERN = /^platform-(\\d+\\.\\d+\\.\\d+(?:[-+][0-9A-Za-z.-]*)?)$/;\nvar LEGACY_V_TAG_PATTERN = /^v(\\d+\\.\\d+\\.\\d+(?:[-+][0-9A-Za-z.-]*)?)$/;\n/**\n* Select only platform releases that carry installable app assets (Electron\n* installer or skeleton/deploy bundle), skipping per-unit container-image\n* releases.\n*\n* Per-unit version pickers now read from Docker Hub tags (not GitHub releases),\n* so the releases endpoint only needs app-level releases — the ones with\n* downloadable installer/bundle assets. This dramatically reduces the data the\n* UI holds and keeps the GitHub API call to its existing single request (the\n* filtering is client-side of the fetch, not a second fetch).\n*\n* Deduplicates by semver so `{#each r.tag}` keys stay unique when a platform\n* release created both a `platform-X.Y.Z` and a legacy `vX.Y.Z` tag. Preserves\n* GitHub's `created_at` desc ordering.\n*/\nfunction selectInstallableReleases(raw) {\n\tconst seen = /* @__PURE__ */ new Set();\n\tconst releases = [];\n\tfor (const r of raw) {\n\t\tconst hasElectronBuild = r.assets.some((a) => ELECTRON_ASSET_PATTERN.test(a.name));\n\t\tif (!hasElectronBuild) continue;\n\t\tconst platformMatch = r.tag_name.match(PLATFORM_TAG_PATTERN);\n\t\tif (platformMatch) {\n\t\t\tconst tag = platformMatch[1];\n\t\t\tif (!seen.has(tag)) {\n\t\t\t\tseen.add(tag);\n\t\t\t\treleases.push({\n\t\t\t\t\ttag,\n\t\t\t\t\tprerelease: r.prerelease,\n\t\t\t\t\tpublishedAt: r.published_at,\n\t\t\t\t\thasElectronBuild\n\t\t\t\t});\n\t\t\t}\n\t\t\tcontinue;\n\t\t}\n\t\tconst legacyMatch = r.tag_name.match(LEGACY_V_TAG_PATTERN);\n\t\tif (legacyMatch) {\n\t\t\tconst tag = legacyMatch[1];\n\t\t\tif (!seen.has(tag)) {\n\t\t\t\tseen.add(tag);\n\t\t\t\treleases.push({\n\t\t\t\t\ttag,\n\t\t\t\t\tprerelease: r.prerelease,\n\t\t\t\t\tpublishedAt: r.published_at,\n\t\t\t\t\thasElectronBuild\n\t\t\t\t});\n\t\t\t}\n\t\t}\n\t}\n\treturn releases;\n}\n//#endregion\n//#region src/routes/api/host/versions/releases/+server.ts\n/**\n* GET /api/host/versions/releases — list installable platform releases from GitHub.\n*\n* Powers the desktop App-update badge: only platform releases that carry an\n* Electron installer asset. Best-effort — a GitHub outage yields an empty list\n* with an error signal rather than failing the page. (No server-side cache: the\n* admin UI no longer polls this, so a direct fetch per visit is fine.)\n*/\nvar GET = async (event) => {\n\tconst requestId = getRequestId(event);\n\tconst capabilityError = requireCapability(event, \"host:updates\", requestId);\n\tif (capabilityError) return capabilityError;\n\tconst authError = requireAdmin(event, requestId);\n\tif (authError) return authError;\n\ttry {\n\t\tconst res = await fetch(\"https://api.github.com/repos/itlackey/openpalm/releases?per_page=20\", {\n\t\t\theaders: {\n\t\t\t\t\"User-Agent\": \"openpalm-admin/1.0\",\n\t\t\t\tAccept: \"application/vnd.github+json\"\n\t\t\t},\n\t\t\tsignal: AbortSignal.timeout(8e3)\n\t\t});\n\t\tif (!res.ok) return json({\n\t\t\treleases: [],\n\t\t\terror: \"GitHub releases unavailable\"\n\t\t});\n\t\treturn json({ releases: selectInstallableReleases(await res.json()) });\n\t} catch {\n\t\treturn json({\n\t\t\treleases: [],\n\t\t\terror: \"GitHub releases unavailable\"\n\t\t});\n\t}\n};\n//#endregion\nexport { GET };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAIA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,IAAI,oBAAoB,GAAG,mDAAmD;AAC9E,IAAI,oBAAoB,GAAG,2CAA2C;AACtE;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,yBAAyB,CAAC,GAAG,EAAE;AACxC,CAAC,MAAM,IAAI,mBAAmB,IAAI,GAAG,EAAE;AACvC,CAAC,MAAM,QAAQ,GAAG,EAAE;AACpB,CAAC,KAAK,MAAM,CAAC,IAAI,GAAG,EAAE;AACtB,EAAE,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AACpF,EAAE,IAAI,CAAC,gBAAgB,EAAE;AACzB,EAAE,MAAM,aAAa,GAAG,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,oBAAoB,CAAC;AAC9D,EAAE,IAAI,aAAa,EAAE;AACrB,GAAG,MAAM,GAAG,GAAG,aAAa,CAAC,CAAC,CAAC;AAC/B,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE;AACvB,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;AACjB,IAAI,QAAQ,CAAC,IAAI,CAAC;AAClB,KAAK,GAAG;AACR,KAAK,UAAU,EAAE,CAAC,CAAC,UAAU;AAC7B,KAAK,WAAW,EAAE,CAAC,CAAC,YAAY;AAChC,KAAK;AACL,KAAK,CAAC;AACN,GAAG;AACH,GAAG;AACH,EAAE;AACF,EAAE,MAAM,WAAW,GAAG,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,oBAAoB,CAAC;AAC5D,EAAE,IAAI,WAAW,EAAE;AACnB,GAAG,MAAM,GAAG,GAAG,WAAW,CAAC,CAAC,CAAC;AAC7B,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE;AACvB,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;AACjB,IAAI,QAAQ,CAAC,IAAI,CAAC;AAClB,KAAK,GAAG;AACR,KAAK,UAAU,EAAE,CAAC,CAAC,UAAU;AAC7B,KAAK,WAAW,EAAE,CAAC,CAAC,YAAY;AAChC,KAAK;AACL,KAAK,CAAC;AACN,GAAG;AACH,EAAE;AACF,CAAC;AACD,CAAC,OAAO,QAAQ;AAChB;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACG,IAAC,GAAG,GAAG,OAAO,KAAK,KAAK;AAC3B,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC;AACtC,CAAC,MAAM,eAAe,GAAG,iBAAiB,CAAC,KAAK,EAAE,cAAc,EAAE,SAAS,CAAC;AAC5E,CAAC,IAAI,eAAe,EAAE,OAAO,eAAe;AAC5C,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,EAAE,SAAS,CAAC;AACjD,CAAC,IAAI,SAAS,EAAE,OAAO,SAAS;AAChC,CAAC,IAAI;AACL,EAAE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,qEAAqE,EAAE;AACjG,GAAG,OAAO,EAAE;AACZ,IAAI,YAAY,EAAE,oBAAoB;AACtC,IAAI,MAAM,EAAE;AACZ,IAAI;AACJ,GAAG,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,GAAG;AAClC,GAAG,CAAC;AACJ,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,IAAI,CAAC;AAC3B,GAAG,QAAQ,EAAE,EAAE;AACf,GAAG,KAAK,EAAE;AACV,GAAG,CAAC;AACJ,EAAE,OAAO,IAAI,CAAC,EAAE,QAAQ,EAAE,yBAAyB,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;AACxE,CAAC,CAAC,CAAC,MAAM;AACT,EAAE,OAAO,IAAI,CAAC;AACd,GAAG,QAAQ,EAAE,EAAE;AACf,GAAG,KAAK,EAAE;AACV,GAAG,CAAC;AACJ,CAAC;AACD;;;;"}

package/build/server/chunks/_server.ts-CjPhaG_g.js

@@ -0,0 +1,68 @@
+import { d as deleteConnection, v as validateEndpointUrl, u as updateConnection } from './endpoints-B9ePqrMw.js';
+import { d as getRequestId, k as jsonResponse, e as errorResponse, l as requireCapability, w as withAdminBody } from './helpers-q4Ng8QTq.js';
+import { r as requireConnectionsManage, a as publishConnectionEntry } from './connections-api-NkotVLIl.js';
+import './src-BwQUi60U.js';
+import './provider-constants-1s1k8kbj.js';
+import './chunk-CLZ62Ad-.js';
+import 'node:module';
+import 'node:fs';
+import 'node:child_process';
+import 'node:path';
+import 'buffer';
+import 'node:url';
+import 'node:os';
+import 'node:crypto';
+import 'events';
+import 'fs';
+import 'node:events';
+import 'node:stream';
+import 'node:string_decoder';
+import 'path';
+import 'assert';
+import 'zlib';
+import 'node:assert';
+import 'node:fs/promises';
+import './state-Dm7U51xT.js';
+import './features-0lgyQreD.js';
+
+//#region src/routes/api/connections/[id]/+server.ts
+var PATCH = async (event) => {
+	const capabilityError = requireCapability(event, "connections:manage", getRequestId(event));
+	if (capabilityError) return capabilityError;
+	return withAdminBody(event, async ({ requestId, body }) => {
+		const id = event.params.id;
+		const patch = {};
+		if (typeof body.label === "string") patch.label = body.label;
+		if (typeof body.url === "string") {
+			const urlCheck = validateEndpointUrl(body.url);
+			if (!urlCheck.ok) return errorResponse(400, "invalid_connection", "URL must be a valid http(s) URL", {}, requestId);
+			patch.url = urlCheck.url;
+		}
+		if (body.password === null) patch.password = null;
+		else if (typeof body.password === "string") patch.password = body.password;
+		try {
+			return jsonResponse(200, { connection: publishConnectionEntry(updateConnection(id, patch)) }, requestId);
+		} catch (e) {
+			const msg = e instanceof Error ? e.message : "failed to update connection";
+			const status = msg.startsWith("Endpoint not found") ? 404 : 400;
+			return errorResponse(status, status === 404 ? "not_found" : "invalid_connection", msg, {}, requestId);
+		}
+	});
+};
+var DELETE = async (event) => {
+	const requestId = getRequestId(event);
+	const guardError = requireConnectionsManage(event, requestId);
+	if (guardError) return guardError;
+	const id = event.params.id;
+	try {
+		deleteConnection(id);
+		return jsonResponse(200, { ok: true }, requestId);
+	} catch (e) {
+		const msg = e instanceof Error ? e.message : "failed to delete connection";
+		const status = msg.startsWith("Endpoint not found") ? 404 : 400;
+		return errorResponse(status, status === 404 ? "not_found" : "invalid_connection", msg, {}, requestId);
+	}
+};
+
+export { DELETE, PATCH };
+//# sourceMappingURL=_server.ts-CjPhaG_g.js.map

package/build/server/chunks/_server.ts-CjPhaG_g.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-CjPhaG_g.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/connections/_id_/_server.ts.js"],"sourcesContent":["import { c as validateEndpointUrl, n as deleteConnection, s as updateConnection } from \"../../../../../chunks/endpoints.js\";\nimport { a as getRequestId, c as jsonResponse, d as requireCapability, p as withAdminBody, r as errorResponse } from \"../../../../../chunks/helpers.js\";\nimport { n as publishConnectionEntry, r as requireConnectionsManage } from \"../../../../../chunks/connections-api.js\";\n//#region src/routes/api/connections/[id]/+server.ts\nvar PATCH = async (event) => {\n\tconst capabilityError = requireCapability(event, \"connections:manage\", getRequestId(event));\n\tif (capabilityError) return capabilityError;\n\treturn withAdminBody(event, async ({ requestId, body }) => {\n\t\tconst id = event.params.id;\n\t\tconst patch = {};\n\t\tif (typeof body.label === \"string\") patch.label = body.label;\n\t\tif (typeof body.url === \"string\") {\n\t\t\tconst urlCheck = validateEndpointUrl(body.url);\n\t\t\tif (!urlCheck.ok) return errorResponse(400, \"invalid_connection\", \"URL must be a valid http(s) URL\", {}, requestId);\n\t\t\tpatch.url = urlCheck.url;\n\t\t}\n\t\tif (body.password === null) patch.password = null;\n\t\telse if (typeof body.password === \"string\") patch.password = body.password;\n\t\ttry {\n\t\t\treturn jsonResponse(200, { connection: publishConnectionEntry(updateConnection(id, patch)) }, requestId);\n\t\t} catch (e) {\n\t\t\tconst msg = e instanceof Error ? e.message : \"failed to update connection\";\n\t\t\tconst status = msg.startsWith(\"Endpoint not found\") ? 404 : 400;\n\t\t\treturn errorResponse(status, status === 404 ? \"not_found\" : \"invalid_connection\", msg, {}, requestId);\n\t\t}\n\t});\n};\nvar DELETE = async (event) => {\n\tconst requestId = getRequestId(event);\n\tconst guardError = requireConnectionsManage(event, requestId);\n\tif (guardError) return guardError;\n\tconst id = event.params.id;\n\ttry {\n\t\tdeleteConnection(id);\n\t\treturn jsonResponse(200, { ok: true }, requestId);\n\t} catch (e) {\n\t\tconst msg = e instanceof Error ? e.message : \"failed to delete connection\";\n\t\tconst status = msg.startsWith(\"Endpoint not found\") ? 404 : 400;\n\t\treturn errorResponse(status, status === 404 ? \"not_found\" : \"invalid_connection\", msg, {}, requestId);\n\t}\n};\n//#endregion\nexport { DELETE, PATCH };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AAGA;AACG,IAAC,KAAK,GAAG,OAAO,KAAK,KAAK;AAC7B,CAAC,MAAM,eAAe,GAAG,iBAAiB,CAAC,KAAK,EAAE,oBAAoB,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC;AAC5F,CAAC,IAAI,eAAe,EAAE,OAAO,eAAe;AAC5C,CAAC,OAAO,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK;AAC5D,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,EAAE;AAC5B,EAAE,MAAM,KAAK,GAAG,EAAE;AAClB,EAAE,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK;AAC9D,EAAE,IAAI,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,EAAE;AACpC,GAAG,MAAM,QAAQ,GAAG,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC;AACjD,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,OAAO,aAAa,CAAC,GAAG,EAAE,oBAAoB,EAAE,iCAAiC,EAAE,EAAE,EAAE,SAAS,CAAC;AACtH,GAAG,KAAK,CAAC,GAAG,GAAG,QAAQ,CAAC,GAAG;AAC3B,EAAE;AACF,EAAE,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,EAAE,KAAK,CAAC,QAAQ,GAAG,IAAI;AACnD,OAAO,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,EAAE,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ;AAC5E,EAAE,IAAI;AACN,GAAG,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,sBAAsB,CAAC,gBAAgB,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,EAAE,EAAE,SAAS,CAAC;AAC3G,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE;AACd,GAAG,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,GAAG,CAAC,CAAC,OAAO,GAAG,6BAA6B;AAC7E,GAAG,MAAM,MAAM,GAAG,GAAG,CAAC,UAAU,CAAC,oBAAoB,CAAC,GAAG,GAAG,GAAG,GAAG;AAClE,GAAG,OAAO,aAAa,CAAC,MAAM,EAAE,MAAM,KAAK,GAAG,GAAG,WAAW,GAAG,oBAAoB,EAAE,GAAG,EAAE,EAAE,EAAE,SAAS,CAAC;AACxG,EAAE;AACF,CAAC,CAAC,CAAC;AACH;AACG,IAAC,MAAM,GAAG,OAAO,KAAK,KAAK;AAC9B,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC;AACtC,CAAC,MAAM,UAAU,GAAG,wBAAwB,CAAC,KAAK,EAAE,SAAS,CAAC;AAC9D,CAAC,IAAI,UAAU,EAAE,OAAO,UAAU;AAClC,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,EAAE;AAC3B,CAAC,IAAI;AACL,EAAE,gBAAgB,CAAC,EAAE,CAAC;AACtB,EAAE,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,SAAS,CAAC;AACnD,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE;AACb,EAAE,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,GAAG,CAAC,CAAC,OAAO,GAAG,6BAA6B;AAC5E,EAAE,MAAM,MAAM,GAAG,GAAG,CAAC,UAAU,CAAC,oBAAoB,CAAC,GAAG,GAAG,GAAG,GAAG;AACjE,EAAE,OAAO,aAAa,CAAC,MAAM,EAAE,MAAM,KAAK,GAAG,GAAG,WAAW,GAAG,oBAAoB,EAAE,GAAG,EAAE,EAAE,EAAE,SAAS,CAAC;AACvG,CAAC;AACD;;;;"}

package/build/server/chunks/_server.ts-CmUo0zla.js

@@ -0,0 +1,112 @@
+import { g as getActiveConnection } from './endpoints-B9ePqrMw.js';
+import { d as getRequestId, r as requireAdmin } from './helpers-q4Ng8QTq.js';
+import './src-BwQUi60U.js';
+import './provider-constants-1s1k8kbj.js';
+import './chunk-CLZ62Ad-.js';
+import 'node:module';
+import 'node:fs';
+import 'node:child_process';
+import 'node:path';
+import 'buffer';
+import 'node:url';
+import 'node:os';
+import 'node:crypto';
+import 'events';
+import 'fs';
+import 'node:events';
+import 'node:stream';
+import 'node:string_decoder';
+import 'path';
+import 'assert';
+import 'zlib';
+import 'node:assert';
+import 'node:fs/promises';
+import './state-Dm7U51xT.js';
+import './features-0lgyQreD.js';
+
+//#region src/routes/proxy/assistant/[...path]/+server.ts
+/**
+* Proxy route: forward /proxy/assistant/[...path] → assistant OpenCode server.
+*
+* Auth: requires the operator's `op_session` cookie (cookie-only since
+* Phase 2 of the auth/proxy refactor — the `x-admin-token` header fallback
+* was removed).
+* Forwards the full request body and method unchanged.
+* The target URL and per-endpoint Basic-auth password are resolved per-request
+* from the active endpoint store, so switching endpoints in the UI takes
+* effect immediately without restarting the server.
+*
+* Streaming: the upstream response body is forwarded as-is (no buffering) so
+* SSE responses (text/event-stream) pass through chunk-by-chunk. We do not
+* impose a fixed timeout on the upstream fetch — OpenCode SSE streams can run
+* for minutes. Instead the per-request AbortController is wired to the client
+* disconnect signal (`event.request.signal`); when the browser aborts (tab
+* close, navigation away), we propagate the abort to upstream.
+*/
+function buildForwardHeaders(incomingContentType, username, password) {
+	const headers = {};
+	if (incomingContentType) headers["content-type"] = incomingContentType;
+	if (password) headers.authorization = `Basic ${btoa(`${username || "openpalm"}:${password}`)}`;
+	return headers;
+}
+function buildResponseHeaders(upstream, requestId, endpointId, endpointLabel) {
+	const headers = new Headers();
+	headers.set("content-type", upstream.headers.get("content-type") ?? "application/json");
+	const cacheControl = upstream.headers.get("cache-control");
+	if (cacheControl) headers.set("cache-control", cacheControl);
+	const transferEncoding = upstream.headers.get("transfer-encoding");
+	if (transferEncoding) headers.set("transfer-encoding", transferEncoding);
+	headers.set("x-request-id", requestId);
+	headers.set("x-endpoint-id", endpointId);
+	headers.set("x-endpoint-label", encodeURIComponent(endpointLabel));
+	return headers;
+}
+var handler = async (event) => {
+	const requestId = getRequestId(event);
+	const authError = requireAdmin(event, requestId);
+	if (authError) return authError;
+	const endpoint = getActiveConnection();
+	const { path } = event.params;
+	const targetUrl = `${endpoint.url}/${path}${event.url.search}`;
+	const method = event.request.method;
+	const contentType = event.request.headers.get("content-type");
+	const body = method !== "GET" && method !== "HEAD" ? await event.request.arrayBuffer() : void 0;
+	const controller = new AbortController();
+	const onClientAbort = () => controller.abort();
+	event.request.signal.addEventListener("abort", onClientAbort, { once: true });
+	try {
+		const upstream = await fetch(targetUrl, {
+			method,
+			headers: buildForwardHeaders(contentType, endpoint.username, endpoint.password),
+			body,
+			signal: controller.signal
+		});
+		return new Response(upstream.body, {
+			status: upstream.status,
+			headers: buildResponseHeaders(upstream, requestId, endpoint.id, endpoint.label)
+		});
+	} catch (e) {
+		event.request.signal.removeEventListener("abort", onClientAbort);
+		console.warn("[proxy/assistant] Upstream request failed:", e);
+		return new Response(JSON.stringify({
+			error: "endpoint_unreachable",
+			message: `Assistant endpoint "${endpoint.label}" is not reachable`,
+			endpointId: endpoint.id,
+			endpointLabel: endpoint.label,
+			url: endpoint.url
+		}), {
+			status: 503,
+			headers: {
+				"content-type": "application/json",
+				"x-request-id": requestId
+			}
+		});
+	}
+};
+var GET = handler;
+var POST = handler;
+var PUT = handler;
+var DELETE = handler;
+
+export { DELETE, GET, POST, PUT };
+//# sourceMappingURL=_server.ts-CmUo0zla.js.map

package/build/server/chunks/_server.ts-CmUo0zla.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-CmUo0zla.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/proxy/assistant/_...path_/_server.ts.js"],"sourcesContent":["import { r as getActiveConnection } from \"../../../../../chunks/endpoints.js\";\nimport { a as getRequestId, u as requireAdmin } from \"../../../../../chunks/helpers.js\";\n//#region src/routes/proxy/assistant/[...path]/+server.ts\n/**\n* Proxy route: forward /proxy/assistant/[...path] → assistant OpenCode server.\n*\n* Auth: requires the operator's `op_session` cookie (cookie-only since\n* Phase 2 of the auth/proxy refactor — the `x-admin-token` header fallback\n* was removed).\n* Forwards the full request body and method unchanged.\n* The target URL and per-endpoint Basic-auth password are resolved per-request\n* from the active endpoint store, so switching endpoints in the UI takes\n* effect immediately without restarting the server.\n*\n* Streaming: the upstream response body is forwarded as-is (no buffering) so\n* SSE responses (text/event-stream) pass through chunk-by-chunk. We do not\n* impose a fixed timeout on the upstream fetch — OpenCode SSE streams can run\n* for minutes. Instead the per-request AbortController is wired to the client\n* disconnect signal (`event.request.signal`); when the browser aborts (tab\n* close, navigation away), we propagate the abort to upstream.\n*/\nfunction buildForwardHeaders(incomingContentType, username, password) {\n\tconst headers = {};\n\tif (incomingContentType) headers[\"content-type\"] = incomingContentType;\n\tif (password) headers.authorization = `Basic ${btoa(`${username || \"openpalm\"}:${password}`)}`;\n\treturn headers;\n}\nfunction buildResponseHeaders(upstream, requestId, endpointId, endpointLabel) {\n\tconst headers = new Headers();\n\theaders.set(\"content-type\", upstream.headers.get(\"content-type\") ?? \"application/json\");\n\tconst cacheControl = upstream.headers.get(\"cache-control\");\n\tif (cacheControl) headers.set(\"cache-control\", cacheControl);\n\tconst transferEncoding = upstream.headers.get(\"transfer-encoding\");\n\tif (transferEncoding) headers.set(\"transfer-encoding\", transferEncoding);\n\theaders.set(\"x-request-id\", requestId);\n\theaders.set(\"x-endpoint-id\", endpointId);\n\theaders.set(\"x-endpoint-label\", encodeURIComponent(endpointLabel));\n\treturn headers;\n}\nvar handler = async (event) => {\n\tconst requestId = getRequestId(event);\n\tconst authError = requireAdmin(event, requestId);\n\tif (authError) return authError;\n\tconst endpoint = getActiveConnection();\n\tconst { path } = event.params;\n\tconst targetUrl = `${endpoint.url}/${path}${event.url.search}`;\n\tconst method = event.request.method;\n\tconst contentType = event.request.headers.get(\"content-type\");\n\tconst body = method !== \"GET\" && method !== \"HEAD\" ? await event.request.arrayBuffer() : void 0;\n\tconst controller = new AbortController();\n\tconst onClientAbort = () => controller.abort();\n\tevent.request.signal.addEventListener(\"abort\", onClientAbort, { once: true });\n\ttry {\n\t\tconst upstream = await fetch(targetUrl, {\n\t\t\tmethod,\n\t\t\theaders: buildForwardHeaders(contentType, endpoint.username, endpoint.password),\n\t\t\tbody,\n\t\t\tsignal: controller.signal\n\t\t});\n\t\treturn new Response(upstream.body, {\n\t\t\tstatus: upstream.status,\n\t\t\theaders: buildResponseHeaders(upstream, requestId, endpoint.id, endpoint.label)\n\t\t});\n\t} catch (e) {\n\t\tevent.request.signal.removeEventListener(\"abort\", onClientAbort);\n\t\tconsole.warn(\"[proxy/assistant] Upstream request failed:\", e);\n\t\treturn new Response(JSON.stringify({\n\t\t\terror: \"endpoint_unreachable\",\n\t\t\tmessage: `Assistant endpoint \"${endpoint.label}\" is not reachable`,\n\t\t\tendpointId: endpoint.id,\n\t\t\tendpointLabel: endpoint.label,\n\t\t\turl: endpoint.url\n\t\t}), {\n\t\t\tstatus: 503,\n\t\t\theaders: {\n\t\t\t\t\"content-type\": \"application/json\",\n\t\t\t\t\"x-request-id\": requestId\n\t\t\t}\n\t\t});\n\t}\n};\nvar GET = handler;\nvar POST = handler;\nvar PUT = handler;\nvar DELETE = handler;\n//#endregion\nexport { DELETE, GET, POST, PUT };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,mBAAmB,CAAC,mBAAmB,EAAE,QAAQ,EAAE,QAAQ,EAAE;AACtE,CAAC,MAAM,OAAO,GAAG,EAAE;AACnB,CAAC,IAAI,mBAAmB,EAAE,OAAO,CAAC,cAAc,CAAC,GAAG,mBAAmB;AACvE,CAAC,IAAI,QAAQ,EAAE,OAAO,CAAC,aAAa,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,EAAE,QAAQ,IAAI,UAAU,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;AAC/F,CAAC,OAAO,OAAO;AACf;AACA,SAAS,oBAAoB,CAAC,QAAQ,EAAE,SAAS,EAAE,UAAU,EAAE,aAAa,EAAE;AAC9E,CAAC,MAAM,OAAO,GAAG,IAAI,OAAO,EAAE;AAC9B,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,kBAAkB,CAAC;AACxF,CAAC,MAAM,YAAY,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;AAC3D,CAAC,IAAI,YAAY,EAAE,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,YAAY,CAAC;AAC7D,CAAC,MAAM,gBAAgB,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;AACnE,CAAC,IAAI,gBAAgB,EAAE,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,gBAAgB,CAAC;AACzE,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,EAAE,SAAS,CAAC;AACvC,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,UAAU,CAAC;AACzC,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,EAAE,kBAAkB,CAAC,aAAa,CAAC,CAAC;AACnE,CAAC,OAAO,OAAO;AACf;AACA,IAAI,OAAO,GAAG,OAAO,KAAK,KAAK;AAC/B,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC;AACtC,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,EAAE,SAAS,CAAC;AACjD,CAAC,IAAI,SAAS,EAAE,OAAO,SAAS;AAChC,CAAC,MAAM,QAAQ,GAAG,mBAAmB,EAAE;AACvC,CAAC,MAAM,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,MAAM;AAC9B,CAAC,MAAM,SAAS,GAAG,CAAC,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AAC/D,CAAC,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM;AACpC,CAAC,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;AAC9D,CAAC,MAAM,IAAI,GAAG,MAAM,KAAK,KAAK,IAAI,MAAM,KAAK,MAAM,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,MAAM;AAChG,CAAC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE;AACzC,CAAC,MAAM,aAAa,GAAG,MAAM,UAAU,CAAC,KAAK,EAAE;AAC/C,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,aAAa,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;AAC9E,CAAC,IAAI;AACL,EAAE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE;AAC1C,GAAG,MAAM;AACT,GAAG,OAAO,EAAE,mBAAmB,CAAC,WAAW,EAAE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC;AAClF,GAAG,IAAI;AACP,GAAG,MAAM,EAAE,UAAU,CAAC;AACtB,GAAG,CAAC;AACJ,EAAE,OAAO,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,EAAE;AACrC,GAAG,MAAM,EAAE,QAAQ,CAAC,MAAM;AAC1B,GAAG,OAAO,EAAE,oBAAoB,CAAC,QAAQ,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC,KAAK;AACjF,GAAG,CAAC;AACJ,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE;AACb,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,aAAa,CAAC;AAClE,EAAE,OAAO,CAAC,IAAI,CAAC,4CAA4C,EAAE,CAAC,CAAC;AAC/D,EAAE,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC;AACrC,GAAG,KAAK,EAAE,sBAAsB;AAChC,GAAG,OAAO,EAAE,CAAC,oBAAoB,EAAE,QAAQ,CAAC,KAAK,CAAC,kBAAkB,CAAC;AACrE,GAAG,UAAU,EAAE,QAAQ,CAAC,EAAE;AAC1B,GAAG,aAAa,EAAE,QAAQ,CAAC,KAAK;AAChC,GAAG,GAAG,EAAE,QAAQ,CAAC;AACjB,GAAG,CAAC,EAAE;AACN,GAAG,MAAM,EAAE,GAAG;AACd,GAAG,OAAO,EAAE;AACZ,IAAI,cAAc,EAAE,kBAAkB;AACtC,IAAI,cAAc,EAAE;AACpB;AACA,GAAG,CAAC;AACJ,CAAC;AACD,CAAC;AACE,IAAC,GAAG,GAAG;AACP,IAAC,IAAI,GAAG;AACR,IAAC,GAAG,GAAG;AACP,IAAC,MAAM,GAAG;;;;"}

package/build/server/chunks/_server.ts-CnQ4hgIT.js

@@ -0,0 +1,41 @@
+import { g as getState } from './state-Dm7U51xT.js';
+import { d as getRequestId, l as requireCapability, r as requireAdmin, e as errorResponse, k as jsonResponse } from './helpers-q4Ng8QTq.js';
+import { d as detectEmbeddingSettings } from './akm-5HN45xWY.js';
+import './src-BwQUi60U.js';
+import './provider-constants-1s1k8kbj.js';
+import './chunk-CLZ62Ad-.js';
+import 'node:module';
+import 'node:fs';
+import 'node:child_process';
+import 'node:path';
+import 'buffer';
+import 'node:url';
+import 'node:os';
+import 'node:crypto';
+import 'events';
+import 'fs';
+import 'node:events';
+import 'node:stream';
+import 'node:string_decoder';
+import 'path';
+import 'assert';
+import 'zlib';
+import 'node:assert';
+import 'node:fs/promises';
+import './endpoints-B9ePqrMw.js';
+import './features-0lgyQreD.js';
+
+//#region src/routes/api/host/akm/embedding/detect/+server.ts
+var POST = async (event) => {
+	const requestId = getRequestId(event);
+	const capabilityError = requireCapability(event, "host:stack:read", requestId);
+	if (capabilityError) return capabilityError;
+	const authError = requireAdmin(event, requestId);
+	if (authError) return authError;
+	const detected = await detectEmbeddingSettings(getState());
+	if (!detected.ok) return errorResponse(404, "embedding_not_detected", detected.message, {}, requestId);
+	return jsonResponse(200, detected, requestId);
+};
+
+export { POST };
+//# sourceMappingURL=_server.ts-CnQ4hgIT.js.map

package/build/server/chunks/_server.ts-CnQ4hgIT.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-CnQ4hgIT.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/host/akm/embedding/detect/_server.ts.js"],"sourcesContent":["import { t as getState } from \"../../../../../../../chunks/state.js\";\nimport { a as getRequestId, c as jsonResponse, d as requireCapability, r as errorResponse, u as requireAdmin } from \"../../../../../../../chunks/helpers.js\";\nimport { t as detectEmbeddingSettings } from \"../../../../../../../chunks/akm.js\";\n//#region src/routes/api/host/akm/embedding/detect/+server.ts\nvar POST = async (event) => {\n\tconst requestId = getRequestId(event);\n\tconst capabilityError = requireCapability(event, \"host:stack:read\", requestId);\n\tif (capabilityError) return capabilityError;\n\tconst authError = requireAdmin(event, requestId);\n\tif (authError) return authError;\n\tconst detected = await detectEmbeddingSettings(getState());\n\tif (!detected.ok) return errorResponse(404, \"embedding_not_detected\", detected.message, {}, requestId);\n\treturn jsonResponse(200, detected, requestId);\n};\n//#endregion\nexport { POST };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AAGA;AACG,IAAC,IAAI,GAAG,OAAO,KAAK,KAAK;AAC5B,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC;AACtC,CAAC,MAAM,eAAe,GAAG,iBAAiB,CAAC,KAAK,EAAE,iBAAiB,EAAE,SAAS,CAAC;AAC/E,CAAC,IAAI,eAAe,EAAE,OAAO,eAAe;AAC5C,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,EAAE,SAAS,CAAC;AACjD,CAAC,IAAI,SAAS,EAAE,OAAO,SAAS;AAChC,CAAC,MAAM,QAAQ,GAAG,MAAM,uBAAuB,CAAC,QAAQ,EAAE,CAAC;AAC3D,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,OAAO,aAAa,CAAC,GAAG,EAAE,wBAAwB,EAAE,QAAQ,CAAC,OAAO,EAAE,EAAE,EAAE,SAAS,CAAC;AACvG,CAAC,OAAO,YAAY,CAAC,GAAG,EAAE,QAAQ,EAAE,SAAS,CAAC;AAC9C;;;;"}

package/build/server/chunks/_server.ts-CncBUb14.js

@@ -0,0 +1,64 @@
+import { b3 as useExistingProviderForAssistantCli, G as createLogger } from './src-BwQUi60U.js';
+import { g as getState } from './state-Dm7U51xT.js';
+import { d as getRequestId, l as requireCapability, r as requireAdmin, e as errorResponse, p as parseJsonBody, j as jsonBodyError, k as jsonResponse } from './helpers-q4Ng8QTq.js';
+import './provider-constants-1s1k8kbj.js';
+import './chunk-CLZ62Ad-.js';
+import 'node:module';
+import 'node:fs';
+import 'node:child_process';
+import 'node:path';
+import 'buffer';
+import 'node:url';
+import 'node:os';
+import 'node:crypto';
+import 'events';
+import 'fs';
+import 'node:events';
+import 'node:stream';
+import 'node:string_decoder';
+import 'path';
+import 'assert';
+import 'zlib';
+import 'node:assert';
+import 'node:fs/promises';
+import './endpoints-B9ePqrMw.js';
+import './features-0lgyQreD.js';
+
+//#region src/routes/api/host/providers/assistant-clis/[toolId]/use-provider/+server.ts
+var logger = createLogger("admin.assistant-cli-tools");
+function isAssistantCliToolId(value) {
+	return value === "codex" || value === "claude" || value === "copilot" || value === "pi";
+}
+var POST = async (event) => {
+	const requestId = getRequestId(event);
+	const capabilityError = requireCapability(event, "host:secrets", requestId);
+	if (capabilityError) return capabilityError;
+	const authError = requireAdmin(event, requestId);
+	if (authError) return authError;
+	const toolId = event.params.toolId ?? "";
+	if (!isAssistantCliToolId(toolId)) return errorResponse(400, "bad_request", "Invalid assistant CLI tool id", {}, requestId);
+	const result = await parseJsonBody(event.request);
+	if ("error" in result) return jsonBodyError(result, requestId);
+	const providerId = typeof result.data.providerId === "string" ? result.data.providerId.trim() : "";
+	if (!providerId) return errorResponse(400, "bad_request", "providerId is required", {}, requestId);
+	try {
+		const writtenPaths = useExistingProviderForAssistantCli(getState(), toolId, providerId);
+		logger.info("assistant CLI provider mapping written", {
+			requestId,
+			toolId,
+			providerId,
+			writtenPaths
+		});
+		return jsonResponse(200, {
+			ok: true,
+			toolId,
+			providerId,
+			writtenPaths
+		}, requestId);
+	} catch (error) {
+		return errorResponse(400, "bad_request", error instanceof Error ? error.message : "Failed to write assistant CLI credentials", {}, requestId);
+	}
+};
+
+export { POST };
+//# sourceMappingURL=_server.ts-CncBUb14.js.map

package/build/server/chunks/_server.ts-CncBUb14.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"_server.ts-CncBUb14.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/host/providers/assistant-clis/_toolId_/use-provider/_server.ts.js"],"sourcesContent":["import { Nt as createLogger } from \"../../../../../../../../chunks/compose-args.js\";\nimport { K as useExistingProviderForAssistantCli } from \"../../../../../../../../chunks/src.js\";\nimport { t as getState } from \"../../../../../../../../chunks/state.js\";\nimport { a as getRequestId, c as jsonResponse, d as requireCapability, l as parseJsonBody, r as errorResponse, s as jsonBodyError, u as requireAdmin } from \"../../../../../../../../chunks/helpers.js\";\n//#region src/routes/api/host/providers/assistant-clis/[toolId]/use-provider/+server.ts\nvar logger = createLogger(\"admin.assistant-cli-tools\");\nfunction isAssistantCliToolId(value) {\n\treturn value === \"codex\" || value === \"claude\" || value === \"copilot\" || value === \"pi\";\n}\nvar POST = async (event) => {\n\tconst requestId = getRequestId(event);\n\tconst capabilityError = requireCapability(event, \"host:secrets\", requestId);\n\tif (capabilityError) return capabilityError;\n\tconst authError = requireAdmin(event, requestId);\n\tif (authError) return authError;\n\tconst toolId = event.params.toolId ?? \"\";\n\tif (!isAssistantCliToolId(toolId)) return errorResponse(400, \"bad_request\", \"Invalid assistant CLI tool id\", {}, requestId);\n\tconst result = await parseJsonBody(event.request);\n\tif (\"error\" in result) return jsonBodyError(result, requestId);\n\tconst providerId = typeof result.data.providerId === \"string\" ? result.data.providerId.trim() : \"\";\n\tif (!providerId) return errorResponse(400, \"bad_request\", \"providerId is required\", {}, requestId);\n\ttry {\n\t\tconst writtenPaths = useExistingProviderForAssistantCli(getState(), toolId, providerId);\n\t\tlogger.info(\"assistant CLI provider mapping written\", {\n\t\t\trequestId,\n\t\t\ttoolId,\n\t\t\tproviderId,\n\t\t\twrittenPaths\n\t\t});\n\t\treturn jsonResponse(200, {\n\t\t\tok: true,\n\t\t\ttoolId,\n\t\t\tproviderId,\n\t\t\twrittenPaths\n\t\t}, requestId);\n\t} catch (error) {\n\t\treturn errorResponse(400, \"bad_request\", error instanceof Error ? error.message : \"Failed to write assistant CLI credentials\", {}, requestId);\n\t}\n};\n//#endregion\nexport { POST };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAIA;AACA,IAAI,MAAM,GAAG,YAAY,CAAC,2BAA2B,CAAC;AACtD,SAAS,oBAAoB,CAAC,KAAK,EAAE;AACrC,CAAC,OAAO,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;AACxF;AACG,IAAC,IAAI,GAAG,OAAO,KAAK,KAAK;AAC5B,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC;AACtC,CAAC,MAAM,eAAe,GAAG,iBAAiB,CAAC,KAAK,EAAE,cAAc,EAAE,SAAS,CAAC;AAC5E,CAAC,IAAI,eAAe,EAAE,OAAO,eAAe;AAC5C,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,EAAE,SAAS,CAAC;AACjD,CAAC,IAAI,SAAS,EAAE,OAAO,SAAS;AAChC,CAAC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE;AACzC,CAAC,IAAI,CAAC,oBAAoB,CAAC,MAAM,CAAC,EAAE,OAAO,aAAa,CAAC,GAAG,EAAE,aAAa,EAAE,+BAA+B,EAAE,EAAE,EAAE,SAAS,CAAC;AAC5H,CAAC,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC;AAClD,CAAC,IAAI,OAAO,IAAI,MAAM,EAAE,OAAO,aAAa,CAAC,MAAM,EAAE,SAAS,CAAC;AAC/D,CAAC,MAAM,UAAU,GAAG,OAAO,MAAM,CAAC,IAAI,CAAC,UAAU,KAAK,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,EAAE;AACnG,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,aAAa,CAAC,GAAG,EAAE,aAAa,EAAE,wBAAwB,EAAE,EAAE,EAAE,SAAS,CAAC;AACnG,CAAC,IAAI;AACL,EAAE,MAAM,YAAY,GAAG,kCAAkC,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC;AACzF,EAAE,MAAM,CAAC,IAAI,CAAC,wCAAwC,EAAE;AACxD,GAAG,SAAS;AACZ,GAAG,MAAM;AACT,GAAG,UAAU;AACb,GAAG;AACH,GAAG,CAAC;AACJ,EAAE,OAAO,YAAY,CAAC,GAAG,EAAE;AAC3B,GAAG,EAAE,EAAE,IAAI;AACX,GAAG,MAAM;AACT,GAAG,UAAU;AACb,GAAG;AACH,GAAG,EAAE,SAAS,CAAC;AACf,CAAC,CAAC,CAAC,OAAO,KAAK,EAAE;AACjB,EAAE,OAAO,aAAa,CAAC,GAAG,EAAE,aAAa,EAAE,KAAK,YAAY,KAAK,GAAG,KAAK,CAAC,OAAO,GAAG,2CAA2C,EAAE,EAAE,EAAE,SAAS,CAAC;AAC/I,CAAC;AACD;;;;"}

package/build/server/chunks/_server.ts-CnrWBkQ7.js

@@ -0,0 +1,149 @@
+import { j as json } from './exports-CcmcYU0M.js';
+import { aE as readStackEnv, aG as readStackSecretEnv, c as annotateAddonProfileAvailability, a5 as getAddonProfiles, a4 as getAddonProfileSelection, am as listEnabledAddonIds } from './src-BwQUi60U.js';
+import { g as getState } from './state-Dm7U51xT.js';
+import { r as requireAdmin, d as getRequestId, f as getUiLoginPassword } from './helpers-q4Ng8QTq.js';
+import { existsSync, readFileSync } from 'node:fs';
+import { join } from 'node:path';
+import './utils-OXHIhUb5.js';
+import './provider-constants-1s1k8kbj.js';
+import './chunk-CLZ62Ad-.js';
+import 'node:module';
+import 'node:child_process';
+import 'buffer';
+import 'node:url';
+import 'node:os';
+import 'node:crypto';
+import 'events';
+import 'fs';
+import 'node:events';
+import 'node:stream';
+import 'node:string_decoder';
+import 'path';
+import 'assert';
+import 'zlib';
+import 'node:assert';
+import 'node:fs/promises';
+import './endpoints-B9ePqrMw.js';
+import './features-0lgyQreD.js';
+
+//#region src/routes/api/setup/current-config/+server.ts
+function readAkmConfig(configDir) {
+	const path = join(configDir, "akm", "config.json");
+	if (!existsSync(path)) return {};
+	try {
+		return JSON.parse(readFileSync(path, "utf-8"));
+	} catch {
+		return {};
+	}
+}
+/**
+* Read model preferences persisted by importHostOpenCode into
+* <configDir>/assistant/opencode.json. This is the on-disk source of truth
+* after a host import; reusing it means wizard reruns restore the same
+* preferences without re-detecting the (possibly absent) host install.
+* Returns undefined if the file doesn't exist or contains no model keys.
+*/
+function readPersistedModelPreferences(configDir) {
+	const path = join(configDir, "assistant", "opencode.json");
+	if (!existsSync(path)) return void 0;
+	try {
+		const parsed = JSON.parse(readFileSync(path, "utf-8"));
+		const prefs = {};
+		if (typeof parsed.model === "string" && parsed.model) prefs.model = parsed.model;
+		if (typeof parsed.small_model === "string" && parsed.small_model) prefs.small_model = parsed.small_model;
+		return prefs.model || prefs.small_model ? prefs : void 0;
+	} catch {
+		return;
+	}
+}
+function deriveBaseUrl(endpoint) {
+	if (!endpoint) return "";
+	return endpoint.replace(/\/chat\/completions\/?$/, "").replace(/\/embeddings\/?$/, "").replace(/\/+$/, "");
+}
+var GET = async (event) => {
+	const authError = requireAdmin(event, getRequestId(event));
+	if (authError) return authError;
+	const state = getState();
+	const configured = getUiLoginPassword();
+	const env = readStackEnv(state.homeDir);
+	const secretEnv = readStackSecretEnv(state.homeDir);
+	const akm = readAkmConfig(state.configDir);
+	const importedModelPreferences = readPersistedModelPreferences(state.configDir);
+	const voiceProfiles = await annotateAddonProfileAvailability(getAddonProfiles(state.homeDir, "voice"));
+	const selectedVoiceProfile = getAddonProfileSelection(state.homeDir, "voice");
+	const ollamaProfiles = await annotateAddonProfileAvailability(getAddonProfiles(state.homeDir, "ollama"));
+	const selectedOllamaProfile = getAddonProfileSelection(state.homeDir, "ollama");
+	const hostHome = process.env.HOME ?? process.env.USERPROFILE ?? "";
+	const hostAkm = !!hostHome && env.OP_AKM_STASH === `${hostHome}/akm` && env.OP_AKM_CONFIG === `${hostHome}/.config/akm`;
+	const meta = (envKey) => ({
+		envKey,
+		present: Boolean(secretEnv[envKey])
+	});
+	const discord = {};
+	for (const [field, envKey] of Object.entries({
+		botToken: "DISCORD_BOT_TOKEN",
+		applicationId: "DISCORD_APPLICATION_ID",
+		registerCommands: "DISCORD_REGISTER_COMMANDS",
+		allowedGuilds: "DISCORD_ALLOWED_GUILDS",
+		allowedRoles: "DISCORD_ALLOWED_ROLES",
+		allowedUsers: "DISCORD_ALLOWED_USERS",
+		blockedUsers: "DISCORD_BLOCKED_USERS"
+	})) if (secretEnv[envKey]) discord[field] = meta(envKey);
+	const slack = {};
+	for (const [field, envKey] of Object.entries({
+		slackBotToken: "SLACK_BOT_TOKEN",
+		slackAppToken: "SLACK_APP_TOKEN",
+		allowedChannels: "SLACK_ALLOWED_CHANNELS",
+		allowedUsers: "SLACK_ALLOWED_USERS",
+		blockedUsers: "SLACK_BLOCKED_USERS"
+	})) if (secretEnv[envKey]) slack[field] = meta(envKey);
+	const portalCredentials = {};
+	if (Object.keys(discord).length > 0) portalCredentials.discord = discord;
+	if (Object.keys(slack).length > 0) portalCredentials.slack = slack;
+	return json({
+		ok: true,
+		hasPassword: typeof configured === "string" && configured.length > 0,
+		assistantVersion: env.OP_ASSISTANT_VERSION ?? "",
+		guardianVersion: env.OP_GUARDIAN_VERSION ?? "",
+		portalVersion: env.OP_PORTAL_VERSION ?? "",
+		voiceVersion: env.OP_VOICE_VERSION ?? "",
+		hostAkm,
+		llm: akm.llm ? {
+			provider: akm.llm.provider ?? "",
+			model: akm.llm.model ?? "",
+			baseUrl: deriveBaseUrl(akm.llm.endpoint)
+		} : null,
+		embedding: akm.embedding ? {
+			provider: akm.embedding.provider ?? "",
+			model: akm.embedding.model ?? "",
+			dims: akm.embedding.dimension ?? 0,
+			baseUrl: deriveBaseUrl(akm.embedding.endpoint)
+		} : null,
+		voice: {
+			tts: {
+				engine: env.OP_TTS_ENGINE ?? "",
+				baseURL: env.OP_TTS_BASE_URL ?? "",
+				model: env.OP_TTS_MODEL ?? "",
+				voice: env.OP_TTS_VOICE ?? ""
+			},
+			stt: {
+				engine: env.OP_STT_ENGINE ?? "",
+				baseURL: env.OP_STT_BASE_URL ?? "",
+				model: env.OP_STT_MODEL ?? "",
+				language: env.OP_STT_LANGUAGE ?? ""
+			},
+			profiles: voiceProfiles,
+			selectedProfile: selectedVoiceProfile
+		},
+		ollama: {
+			profiles: ollamaProfiles,
+			selectedProfile: selectedOllamaProfile
+		},
+		enabledAddons: listEnabledAddonIds(state.homeDir),
+		portalCredentials,
+		importedModelPreferences: importedModelPreferences ?? null
+	});
+};
+
+export { GET };
+//# sourceMappingURL=_server.ts-CnrWBkQ7.js.map