@openpalm/ui 0.13.0-beta.5 → 0.13.0-beta.7

package/build/server/chunks/_server.ts-DcWSFqr3.js

@@ -1,72 +0,0 @@
-import { d as deleteConnection, v as validateEndpointUrl, U as USER_ADDABLE_CONNECTION_KINDS, u as updateConnection } from './endpoints-CnnGlw2U.js';
-import { d as getRequestId, k as jsonResponse, e as errorResponse, l as requireCapability, w as withAdminBody } from './helpers-9U7R7yqL.js';
-import { r as requireConnectionsManage, a as publishConnectionEntry } from './connections-api-mP7OE2x7.js';
-import './src-AHSKeKr0.js';
-import './chunk-DOvWTNp_.js';
-import 'node:module';
-import './network-preset-CJ1RRnki.js';
-import 'node:fs';
-import 'node:child_process';
-import 'node:path';
-import 'buffer';
-import 'node:url';
-import 'node:os';
-import 'node:crypto';
-import 'events';
-import 'fs';
-import 'node:events';
-import 'node:stream';
-import 'node:string_decoder';
-import 'path';
-import 'assert';
-import 'zlib';
-import 'node:assert';
-import 'node:fs/promises';
-import './state-CzXOEt0t.js';
-import './features-BUWlozR5.js';
-
-//#region src/routes/api/connections/[id]/+server.ts
-var PATCH = async (event) => {
-	const capabilityError = requireCapability(event, "connections:manage", getRequestId(event));
-	if (capabilityError) return capabilityError;
-	return withAdminBody(event, async ({ requestId, body }) => {
-		const id = event.params.id;
-		const patch = {};
-		if (typeof body.label === "string") patch.label = body.label;
-		if (typeof body.url === "string") {
-			const urlCheck = validateEndpointUrl(body.url);
-			if (!urlCheck.ok) return errorResponse(400, "invalid_connection", "URL must be a valid http(s) URL", {}, requestId);
-			patch.url = urlCheck.url;
-		}
-		if (body.password === null) patch.password = null;
-		else if (typeof body.password === "string") patch.password = body.password;
-		if (body.kind !== void 0) {
-			if (typeof body.kind !== "string" || !USER_ADDABLE_CONNECTION_KINDS.includes(body.kind)) return errorResponse(400, "invalid_connection", "kind must be remote-opencode or openpalm-client-api", {}, requestId);
-			patch.kind = body.kind;
-		}
-		try {
-			return jsonResponse(200, { connection: publishConnectionEntry(updateConnection(id, patch)) }, requestId);
-		} catch (e) {
-			const msg = e instanceof Error ? e.message : "failed to update connection";
-			const status = msg.startsWith("Endpoint not found") ? 404 : 400;
-			return errorResponse(status, status === 404 ? "not_found" : "invalid_connection", msg, {}, requestId);
-		}
-	});
-};
-var DELETE = async (event) => {
-	const requestId = getRequestId(event);
-	const guardError = requireConnectionsManage(event, requestId);
-	if (guardError) return guardError;
-	const id = event.params.id;
-	try {
-		deleteConnection(id);
-		return jsonResponse(200, { ok: true }, requestId);
-	} catch (e) {
-		const msg = e instanceof Error ? e.message : "failed to delete connection";
-		const status = msg.startsWith("Endpoint not found") ? 404 : 400;
-		return errorResponse(status, status === 404 ? "not_found" : "invalid_connection", msg, {}, requestId);
-	}
-};
-
-export { DELETE, PATCH };
-//# sourceMappingURL=_server.ts-DcWSFqr3.js.map

package/build/server/chunks/_server.ts-DcWSFqr3.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"_server.ts-DcWSFqr3.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/connections/_id_/_server.ts.js"],"sourcesContent":["import { c as updateConnection, l as validateEndpointUrl, r as deleteConnection, t as USER_ADDABLE_CONNECTION_KINDS } from \"../../../../../chunks/endpoints.js\";\nimport { a as getRequestId, c as jsonResponse, d as requireCapability, p as withAdminBody, r as errorResponse } from \"../../../../../chunks/helpers.js\";\nimport { n as publishConnectionEntry, r as requireConnectionsManage } from \"../../../../../chunks/connections-api.js\";\n//#region src/routes/api/connections/[id]/+server.ts\nvar PATCH = async (event) => {\n\tconst capabilityError = requireCapability(event, \"connections:manage\", getRequestId(event));\n\tif (capabilityError) return capabilityError;\n\treturn withAdminBody(event, async ({ requestId, body }) => {\n\t\tconst id = event.params.id;\n\t\tconst patch = {};\n\t\tif (typeof body.label === \"string\") patch.label = body.label;\n\t\tif (typeof body.url === \"string\") {\n\t\t\tconst urlCheck = validateEndpointUrl(body.url);\n\t\t\tif (!urlCheck.ok) return errorResponse(400, \"invalid_connection\", \"URL must be a valid http(s) URL\", {}, requestId);\n\t\t\tpatch.url = urlCheck.url;\n\t\t}\n\t\tif (body.password === null) patch.password = null;\n\t\telse if (typeof body.password === \"string\") patch.password = body.password;\n\t\tif (body.kind !== void 0) {\n\t\t\tif (typeof body.kind !== \"string\" || !USER_ADDABLE_CONNECTION_KINDS.includes(body.kind)) return errorResponse(400, \"invalid_connection\", \"kind must be remote-opencode or openpalm-client-api\", {}, requestId);\n\t\t\tpatch.kind = body.kind;\n\t\t}\n\t\ttry {\n\t\t\treturn jsonResponse(200, { connection: publishConnectionEntry(updateConnection(id, patch)) }, requestId);\n\t\t} catch (e) {\n\t\t\tconst msg = e instanceof Error ? e.message : \"failed to update connection\";\n\t\t\tconst status = msg.startsWith(\"Endpoint not found\") ? 404 : 400;\n\t\t\treturn errorResponse(status, status === 404 ? \"not_found\" : \"invalid_connection\", msg, {}, requestId);\n\t\t}\n\t});\n};\nvar DELETE = async (event) => {\n\tconst requestId = getRequestId(event);\n\tconst guardError = requireConnectionsManage(event, requestId);\n\tif (guardError) return guardError;\n\tconst id = event.params.id;\n\ttry {\n\t\tdeleteConnection(id);\n\t\treturn jsonResponse(200, { ok: true }, requestId);\n\t} catch (e) {\n\t\tconst msg = e instanceof Error ? e.message : \"failed to delete connection\";\n\t\tconst status = msg.startsWith(\"Endpoint not found\") ? 404 : 400;\n\t\treturn errorResponse(status, status === 404 ? \"not_found\" : \"invalid_connection\", msg, {}, requestId);\n\t}\n};\n//#endregion\nexport { DELETE, PATCH };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AAGA;AACG,IAAC,KAAK,GAAG,OAAO,KAAK,KAAK;AAC7B,CAAC,MAAM,eAAe,GAAG,iBAAiB,CAAC,KAAK,EAAE,oBAAoB,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC;AAC5F,CAAC,IAAI,eAAe,EAAE,OAAO,eAAe;AAC5C,CAAC,OAAO,aAAa,CAAC,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK;AAC5D,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,EAAE;AAC5B,EAAE,MAAM,KAAK,GAAG,EAAE;AAClB,EAAE,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK;AAC9D,EAAE,IAAI,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,EAAE;AACpC,GAAG,MAAM,QAAQ,GAAG,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC;AACjD,GAAG,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,OAAO,aAAa,CAAC,GAAG,EAAE,oBAAoB,EAAE,iCAAiC,EAAE,EAAE,EAAE,SAAS,CAAC;AACtH,GAAG,KAAK,CAAC,GAAG,GAAG,QAAQ,CAAC,GAAG;AAC3B,EAAE;AACF,EAAE,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,EAAE,KAAK,CAAC,QAAQ,GAAG,IAAI;AACnD,OAAO,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,EAAE,KAAK,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ;AAC5E,EAAE,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE;AAC5B,GAAG,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,6BAA6B,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,OAAO,aAAa,CAAC,GAAG,EAAE,oBAAoB,EAAE,qDAAqD,EAAE,EAAE,EAAE,SAAS,CAAC;AACjN,GAAG,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI;AACzB,EAAE;AACF,EAAE,IAAI;AACN,GAAG,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,sBAAsB,CAAC,gBAAgB,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,EAAE,EAAE,SAAS,CAAC;AAC3G,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE;AACd,GAAG,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,GAAG,CAAC,CAAC,OAAO,GAAG,6BAA6B;AAC7E,GAAG,MAAM,MAAM,GAAG,GAAG,CAAC,UAAU,CAAC,oBAAoB,CAAC,GAAG,GAAG,GAAG,GAAG;AAClE,GAAG,OAAO,aAAa,CAAC,MAAM,EAAE,MAAM,KAAK,GAAG,GAAG,WAAW,GAAG,oBAAoB,EAAE,GAAG,EAAE,EAAE,EAAE,SAAS,CAAC;AACxG,EAAE;AACF,CAAC,CAAC,CAAC;AACH;AACG,IAAC,MAAM,GAAG,OAAO,KAAK,KAAK;AAC9B,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC;AACtC,CAAC,MAAM,UAAU,GAAG,wBAAwB,CAAC,KAAK,EAAE,SAAS,CAAC;AAC9D,CAAC,IAAI,UAAU,EAAE,OAAO,UAAU;AAClC,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,EAAE;AAC3B,CAAC,IAAI;AACL,EAAE,gBAAgB,CAAC,EAAE,CAAC;AACtB,EAAE,OAAO,YAAY,CAAC,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,SAAS,CAAC;AACnD,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE;AACb,EAAE,MAAM,GAAG,GAAG,CAAC,YAAY,KAAK,GAAG,CAAC,CAAC,OAAO,GAAG,6BAA6B;AAC5E,EAAE,MAAM,MAAM,GAAG,GAAG,CAAC,UAAU,CAAC,oBAAoB,CAAC,GAAG,GAAG,GAAG,GAAG;AACjE,EAAE,OAAO,aAAa,CAAC,MAAM,EAAE,MAAM,KAAK,GAAG,GAAG,WAAW,GAAG,oBAAoB,EAAE,GAAG,EAAE,EAAE,EAAE,SAAS,CAAC;AACvG,CAAC;AACD;;;;"}

package/build/server/chunks/_server.ts-Ddf5c75T.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"_server.ts-Ddf5c75T.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/host/containers/pull/_server.ts.js"],"sourcesContent":["import { Nt as createLogger, o as buildManagedServices, t as buildComposeOptions } from \"../../../../../../chunks/compose-args.js\";\nimport { i as checkDocker, t as applyStack } from \"../../../../../../chunks/docker.js\";\nimport \"../../../../../../chunks/src.js\";\nimport { t as getState } from \"../../../../../../chunks/state.js\";\nimport { a as getRequestId, c as jsonResponse, d as requireCapability, r as errorResponse, u as requireAdmin } from \"../../../../../../chunks/helpers.js\";\nimport { t as withSerialQueue } from \"../../../../../../chunks/serial-queue.js\";\n//#region src/routes/api/host/containers/pull/+server.ts\nvar logger = createLogger(\"containers-pull\");\nvar POST = async (event) => {\n\tconst requestId = getRequestId(event);\n\tconst capabilityError = requireCapability(event, \"host:containers\", requestId);\n\tif (capabilityError) return capabilityError;\n\tlogger.info(\"pull request received\", { requestId });\n\tconst authError = requireAdmin(event, requestId);\n\tif (authError) return authError;\n\treturn withSerialQueue(\"admin:containers:pull\", async () => {\n\t\tconst state = getState();\n\t\tconst dockerCheck = await checkDocker();\n\t\tif (!dockerCheck.ok) return errorResponse(503, \"docker_unavailable\", \"Docker is not available\", { stderr: dockerCheck.stderr }, requestId);\n\t\tconst composeOpts = buildComposeOptions(state);\n\t\tlogger.info(\"pulling and recreating containers\", { requestId });\n\t\tconst result = await applyStack({\n\t\t\tkind: \"services\",\n\t\t\tservices: await buildManagedServices(state)\n\t\t}, composeOpts, void 0, { pull: \"always\" });\n\t\tif (!result.ok) {\n\t\t\tlogger.error(\"pull/recreate failed\", {\n\t\t\t\trequestId,\n\t\t\t\terror: result.error\n\t\t\t});\n\t\t\treturn errorResponse(502, \"up_failed\", \"Failed to pull and recreate containers\", { stderr: result.rawStderr ?? result.error ?? \"\" }, requestId);\n\t\t}\n\t\tlogger.info(\"pull completed\", {\n\t\t\trequestId,\n\t\t\tstarted: result.started\n\t\t});\n\t\treturn jsonResponse(200, {\n\t\t\tok: true,\n\t\t\tstarted: result.started\n\t\t}, requestId);\n\t});\n};\n//#endregion\nexport { POST };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AAMA;AACA,IAAI,MAAM,GAAG,YAAY,CAAC,iBAAiB,CAAC;AACzC,IAAC,IAAI,GAAG,OAAO,KAAK,KAAK;AAC5B,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC;AACtC,CAAC,MAAM,eAAe,GAAG,iBAAiB,CAAC,KAAK,EAAE,iBAAiB,EAAE,SAAS,CAAC;AAC/E,CAAC,IAAI,eAAe,EAAE,OAAO,eAAe;AAC5C,CAAC,MAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE,EAAE,SAAS,EAAE,CAAC;AACpD,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,EAAE,SAAS,CAAC;AACjD,CAAC,IAAI,SAAS,EAAE,OAAO,SAAS;AAChC,CAAC,OAAO,eAAe,CAAC,uBAAuB,EAAE,YAAY;AAC7D,EAAE,MAAM,KAAK,GAAG,QAAQ,EAAE;AAC1B,EAAE,MAAM,WAAW,GAAG,MAAM,WAAW,EAAE;AACzC,EAAE,IAAI,CAAC,WAAW,CAAC,EAAE,EAAE,OAAO,aAAa,CAAC,GAAG,EAAE,oBAAoB,EAAE,yBAAyB,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,EAAE,SAAS,CAAC;AAC5I,EAAE,MAAM,WAAW,GAAG,mBAAmB,CAAC,KAAK,CAAC;AAChD,EAAE,MAAM,CAAC,IAAI,CAAC,mCAAmC,EAAE,EAAE,SAAS,EAAE,CAAC;AACjE,EAAE,MAAM,MAAM,GAAG,MAAM,UAAU,CAAC;AAClC,GAAG,IAAI,EAAE,UAAU;AACnB,GAAG,QAAQ,EAAE,MAAM,oBAAoB,CAAC,KAAK;AAC7C,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;AAC7C,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE;AAClB,GAAG,MAAM,CAAC,KAAK,CAAC,sBAAsB,EAAE;AACxC,IAAI,SAAS;AACb,IAAI,KAAK,EAAE,MAAM,CAAC;AAClB,IAAI,CAAC;AACL,GAAG,OAAO,aAAa,CAAC,GAAG,EAAE,WAAW,EAAE,wCAAwC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,KAAK,IAAI,EAAE,EAAE,EAAE,SAAS,CAAC;AAClJ,EAAE;AACF,EAAE,MAAM,CAAC,IAAI,CAAC,gBAAgB,EAAE;AAChC,GAAG,SAAS;AACZ,GAAG,OAAO,EAAE,MAAM,CAAC;AACnB,GAAG,CAAC;AACJ,EAAE,OAAO,YAAY,CAAC,GAAG,EAAE;AAC3B,GAAG,EAAE,EAAE,IAAI;AACX,GAAG,OAAO,EAAE,MAAM,CAAC;AACnB,GAAG,EAAE,SAAS,CAAC;AACf,CAAC,CAAC,CAAC;AACH;;;;"}

package/build/server/chunks/_server.ts-Dg2Gkcbx.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"_server.ts-Dg2Gkcbx.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/host/addons/_name_/_server.ts.js"],"sourcesContent":["import { C as getRegistryAddonConfig, E as listEnabledAddonIds, Nt as createLogger, T as listAvailableAddonIds } from \"../../../../../../chunks/compose-args.js\";\nimport \"../../../../../../chunks/src.js\";\nimport { t as getState } from \"../../../../../../chunks/state.js\";\nimport { a as getRequestId, c as jsonResponse, d as requireCapability, l as parseJsonBody, r as errorResponse, s as jsonBodyError, u as requireAdmin } from \"../../../../../../chunks/helpers.js\";\nimport { t as performAddonToggle } from \"../../../../../../chunks/addon-helpers.js\";\n//#region src/routes/api/host/addons/[name]/+server.ts\nvar logger = createLogger(\"addons.name\");\nvar GET = async (event) => {\n\tconst requestId = getRequestId(event);\n\tconst capabilityError = requireCapability(event, \"host:addons\", requestId);\n\tif (capabilityError) return capabilityError;\n\tconst authErr = requireAdmin(event, requestId);\n\tif (authErr) return authErr;\n\tconst state = getState();\n\tconst name = event.params.name;\n\tif (!listAvailableAddonIds().includes(name)) return errorResponse(404, \"not_found\", `Addon \"${name}\" is not available`, { name }, requestId);\n\tconst enabled = listEnabledAddonIds(state.homeDir).includes(name);\n\tlet config;\n\ttry {\n\t\tconfig = getRegistryAddonConfig(name);\n\t} catch (error) {\n\t\tlogger.error(\"failed to read addon schema\", {\n\t\t\tname,\n\t\t\terror: String(error),\n\t\t\trequestId\n\t\t});\n\t\treturn errorResponse(500, \"internal_error\", `Addon \"${name}\" schema is unavailable`, {}, requestId);\n\t}\n\treturn jsonResponse(200, {\n\t\tname,\n\t\tenabled,\n\t\tconfig\n\t}, requestId);\n};\nvar POST = async (event) => {\n\tconst requestId = getRequestId(event);\n\tconst capabilityError = requireCapability(event, \"host:addons\", requestId);\n\tif (capabilityError) return capabilityError;\n\tconst authErr = requireAdmin(event, requestId);\n\tif (authErr) return authErr;\n\tconst state = getState();\n\tconst name = event.params.name;\n\tif (!listAvailableAddonIds().includes(name)) return errorResponse(404, \"not_found\", `Addon \"${name}\" is not available`, { name }, requestId);\n\tconst result = await parseJsonBody(event.request);\n\tif (\"error\" in result) return jsonBodyError(result, requestId);\n\tconst body = result.data;\n\tconst toggle = await performAddonToggle(state, name, typeof body.enabled === \"boolean\" ? body.enabled : void 0, requestId);\n\tif (!toggle.ok) return errorResponse(500, \"internal_error\", toggle.error, {}, requestId);\n\treturn jsonResponse(200, {\n\t\tok: true,\n\t\taddon: name,\n\t\tenabled: toggle.enabled,\n\t\tchanged: toggle.changed\n\t}, requestId);\n};\n//#endregion\nexport { GET, POST };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AAKA;AACA,IAAI,MAAM,GAAG,YAAY,CAAC,aAAa,CAAC;AACrC,IAAC,GAAG,GAAG,OAAO,KAAK,KAAK;AAC3B,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC;AACtC,CAAC,MAAM,eAAe,GAAG,iBAAiB,CAAC,KAAK,EAAE,aAAa,EAAE,SAAS,CAAC;AAC3E,CAAC,IAAI,eAAe,EAAE,OAAO,eAAe;AAC5C,CAAC,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,EAAE,SAAS,CAAC;AAC/C,CAAC,IAAI,OAAO,EAAE,OAAO,OAAO;AAC5B,CAAC,MAAM,KAAK,GAAG,QAAQ,EAAE;AACzB,CAAC,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI;AAC/B,CAAC,IAAI,CAAC,qBAAqB,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,aAAa,CAAC,GAAG,EAAE,WAAW,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,kBAAkB,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,SAAS,CAAC;AAC7I,CAAC,MAAM,OAAO,GAAG,mBAAmB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;AAClE,CAAC,IAAI,MAAM;AACX,CAAC,IAAI;AACL,EAAE,MAAM,GAAG,sBAAsB,CAAC,IAAI,CAAC;AACvC,CAAC,CAAC,CAAC,OAAO,KAAK,EAAE;AACjB,EAAE,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE;AAC9C,GAAG,IAAI;AACP,GAAG,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC;AACvB,GAAG;AACH,GAAG,CAAC;AACJ,EAAE,OAAO,aAAa,CAAC,GAAG,EAAE,gBAAgB,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,uBAAuB,CAAC,EAAE,EAAE,EAAE,SAAS,CAAC;AACrG,CAAC;AACD,CAAC,OAAO,YAAY,CAAC,GAAG,EAAE;AAC1B,EAAE,IAAI;AACN,EAAE,OAAO;AACT,EAAE;AACF,EAAE,EAAE,SAAS,CAAC;AACd;AACG,IAAC,IAAI,GAAG,OAAO,KAAK,KAAK;AAC5B,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC;AACtC,CAAC,MAAM,eAAe,GAAG,iBAAiB,CAAC,KAAK,EAAE,aAAa,EAAE,SAAS,CAAC;AAC3E,CAAC,IAAI,eAAe,EAAE,OAAO,eAAe;AAC5C,CAAC,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,EAAE,SAAS,CAAC;AAC/C,CAAC,IAAI,OAAO,EAAE,OAAO,OAAO;AAC5B,CAAC,MAAM,KAAK,GAAG,QAAQ,EAAE;AACzB,CAAC,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI;AAC/B,CAAC,IAAI,CAAC,qBAAqB,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,aAAa,CAAC,GAAG,EAAE,WAAW,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,kBAAkB,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,SAAS,CAAC;AAC7I,CAAC,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC;AAClD,CAAC,IAAI,OAAO,IAAI,MAAM,EAAE,OAAO,aAAa,CAAC,MAAM,EAAE,SAAS,CAAC;AAC/D,CAAC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI;AACzB,CAAC,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,IAAI,CAAC,OAAO,KAAK,SAAS,GAAG,IAAI,CAAC,OAAO,GAAG,MAAM,EAAE,SAAS,CAAC;AAC3H,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,aAAa,CAAC,GAAG,EAAE,gBAAgB,EAAE,MAAM,CAAC,KAAK,EAAE,EAAE,EAAE,SAAS,CAAC;AACzF,CAAC,OAAO,YAAY,CAAC,GAAG,EAAE;AAC1B,EAAE,EAAE,EAAE,IAAI;AACV,EAAE,KAAK,EAAE,IAAI;AACb,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO;AACzB,EAAE,OAAO,EAAE,MAAM,CAAC;AAClB,EAAE,EAAE,SAAS,CAAC;AACd;;;;"}

package/build/server/chunks/_server.ts-Drhyf5o4.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"_server.ts-Drhyf5o4.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/host/versions/releases/_server.ts.js"],"sourcesContent":["import { r as json } from \"../../../../../../chunks/exports.js\";\nimport { mt as ELECTRON_ASSET_PATTERN } from \"../../../../../../chunks/compose-args.js\";\nimport \"../../../../../../chunks/src.js\";\nimport { a as getRequestId, d as requireCapability, u as requireAdmin } from \"../../../../../../chunks/helpers.js\";\n//#region src/lib/server/release-units.ts\n/**\n* Parse GitHub release tags into platform + per-unit release lists.\n*\n* With independently versioned units, git tags are unit-prefixed\n* (platform-X.Y.Z, assistant-X.Y.Z, guardian-X.Y.Z, portals-X.Y.Z). Docker\n* images always use the v-prefixed form, so the prefix is stripped here and the\n* UI re-adds the `v` only when talking to Docker. Legacy `vX.Y.Z` tags are kept\n* under the platform list for backward compat with pre-unit releases.\n*\n* Pure + side-effect free so it can be unit-tested without mocking the GitHub\n* API. The `/api/host/versions/releases` route calls {@link groupReleasesByUnit}\n* after fetching the raw release list.\n*/\nvar PLATFORM_TAG_PATTERN = /^platform-(\\d+\\.\\d+\\.\\d+(?:[-+][0-9A-Za-z.-]*)?)$/;\nvar LEGACY_V_TAG_PATTERN = /^v(\\d+\\.\\d+\\.\\d+(?:[-+][0-9A-Za-z.-]*)?)$/;\n/**\n* Select only platform releases that carry installable app assets (Electron\n* installer or skeleton/deploy bundle), skipping per-unit container-image\n* releases.\n*\n* Per-unit version pickers now read from Docker Hub tags (not GitHub releases),\n* so the releases endpoint only needs app-level releases — the ones with\n* downloadable installer/bundle assets. This dramatically reduces the data the\n* UI holds and keeps the GitHub API call to its existing single request (the\n* filtering is client-side of the fetch, not a second fetch).\n*\n* Deduplicates by semver so `{#each r.tag}` keys stay unique when a platform\n* release created both a `platform-X.Y.Z` and a legacy `vX.Y.Z` tag. Preserves\n* GitHub's `created_at` desc ordering.\n*/\nfunction selectInstallableReleases(raw) {\n\tconst seen = /* @__PURE__ */ new Set();\n\tconst releases = [];\n\tfor (const r of raw) {\n\t\tconst hasElectronBuild = r.assets.some((a) => ELECTRON_ASSET_PATTERN.test(a.name));\n\t\tif (!hasElectronBuild) continue;\n\t\tconst platformMatch = r.tag_name.match(PLATFORM_TAG_PATTERN);\n\t\tif (platformMatch) {\n\t\t\tconst tag = platformMatch[1];\n\t\t\tif (!seen.has(tag)) {\n\t\t\t\tseen.add(tag);\n\t\t\t\treleases.push({\n\t\t\t\t\ttag,\n\t\t\t\t\tprerelease: r.prerelease,\n\t\t\t\t\tpublishedAt: r.published_at,\n\t\t\t\t\thasElectronBuild\n\t\t\t\t});\n\t\t\t}\n\t\t\tcontinue;\n\t\t}\n\t\tconst legacyMatch = r.tag_name.match(LEGACY_V_TAG_PATTERN);\n\t\tif (legacyMatch) {\n\t\t\tconst tag = legacyMatch[1];\n\t\t\tif (!seen.has(tag)) {\n\t\t\t\tseen.add(tag);\n\t\t\t\treleases.push({\n\t\t\t\t\ttag,\n\t\t\t\t\tprerelease: r.prerelease,\n\t\t\t\t\tpublishedAt: r.published_at,\n\t\t\t\t\thasElectronBuild\n\t\t\t\t});\n\t\t\t}\n\t\t}\n\t}\n\treturn releases;\n}\n//#endregion\n//#region src/routes/api/host/versions/releases/+server.ts\n/**\n* GET /api/host/versions/releases — list installable platform releases from GitHub.\n*\n* Powers the desktop App-update badge: only platform releases that carry an\n* Electron installer asset. Best-effort — a GitHub outage yields an empty list\n* with an error signal rather than failing the page. (No server-side cache: the\n* admin UI no longer polls this, so a direct fetch per visit is fine.)\n*/\nvar GET = async (event) => {\n\tconst requestId = getRequestId(event);\n\tconst capabilityError = requireCapability(event, \"host:updates\", requestId);\n\tif (capabilityError) return capabilityError;\n\tconst authError = requireAdmin(event, requestId);\n\tif (authError) return authError;\n\ttry {\n\t\tconst res = await fetch(\"https://api.github.com/repos/itlackey/openpalm/releases?per_page=20\", {\n\t\t\theaders: {\n\t\t\t\t\"User-Agent\": \"openpalm-admin/1.0\",\n\t\t\t\tAccept: \"application/vnd.github+json\"\n\t\t\t},\n\t\t\tsignal: AbortSignal.timeout(8e3)\n\t\t});\n\t\tif (!res.ok) return json({\n\t\t\treleases: [],\n\t\t\terror: \"GitHub releases unavailable\"\n\t\t});\n\t\treturn json({ releases: selectInstallableReleases(await res.json()) });\n\t} catch {\n\t\treturn json({\n\t\t\treleases: [],\n\t\t\terror: \"GitHub releases unavailable\"\n\t\t});\n\t}\n};\n//#endregion\nexport { GET };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAIA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,IAAI,oBAAoB,GAAG,mDAAmD;AAC9E,IAAI,oBAAoB,GAAG,2CAA2C;AACtE;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,yBAAyB,CAAC,GAAG,EAAE;AACxC,CAAC,MAAM,IAAI,mBAAmB,IAAI,GAAG,EAAE;AACvC,CAAC,MAAM,QAAQ,GAAG,EAAE;AACpB,CAAC,KAAK,MAAM,CAAC,IAAI,GAAG,EAAE;AACtB,EAAE,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AACpF,EAAE,IAAI,CAAC,gBAAgB,EAAE;AACzB,EAAE,MAAM,aAAa,GAAG,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,oBAAoB,CAAC;AAC9D,EAAE,IAAI,aAAa,EAAE;AACrB,GAAG,MAAM,GAAG,GAAG,aAAa,CAAC,CAAC,CAAC;AAC/B,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE;AACvB,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;AACjB,IAAI,QAAQ,CAAC,IAAI,CAAC;AAClB,KAAK,GAAG;AACR,KAAK,UAAU,EAAE,CAAC,CAAC,UAAU;AAC7B,KAAK,WAAW,EAAE,CAAC,CAAC,YAAY;AAChC,KAAK;AACL,KAAK,CAAC;AACN,GAAG;AACH,GAAG;AACH,EAAE;AACF,EAAE,MAAM,WAAW,GAAG,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,oBAAoB,CAAC;AAC5D,EAAE,IAAI,WAAW,EAAE;AACnB,GAAG,MAAM,GAAG,GAAG,WAAW,CAAC,CAAC,CAAC;AAC7B,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE;AACvB,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;AACjB,IAAI,QAAQ,CAAC,IAAI,CAAC;AAClB,KAAK,GAAG;AACR,KAAK,UAAU,EAAE,CAAC,CAAC,UAAU;AAC7B,KAAK,WAAW,EAAE,CAAC,CAAC,YAAY;AAChC,KAAK;AACL,KAAK,CAAC;AACN,GAAG;AACH,EAAE;AACF,CAAC;AACD,CAAC,OAAO,QAAQ;AAChB;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACG,IAAC,GAAG,GAAG,OAAO,KAAK,KAAK;AAC3B,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC;AACtC,CAAC,MAAM,eAAe,GAAG,iBAAiB,CAAC,KAAK,EAAE,cAAc,EAAE,SAAS,CAAC;AAC5E,CAAC,IAAI,eAAe,EAAE,OAAO,eAAe;AAC5C,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,EAAE,SAAS,CAAC;AACjD,CAAC,IAAI,SAAS,EAAE,OAAO,SAAS;AAChC,CAAC,IAAI;AACL,EAAE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,qEAAqE,EAAE;AACjG,GAAG,OAAO,EAAE;AACZ,IAAI,YAAY,EAAE,oBAAoB;AACtC,IAAI,MAAM,EAAE;AACZ,IAAI;AACJ,GAAG,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,GAAG;AAClC,GAAG,CAAC;AACJ,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,OAAO,IAAI,CAAC;AAC3B,GAAG,QAAQ,EAAE,EAAE;AACf,GAAG,KAAK,EAAE;AACV,GAAG,CAAC;AACJ,EAAE,OAAO,IAAI,CAAC,EAAE,QAAQ,EAAE,yBAAyB,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;AACxE,CAAC,CAAC,CAAC,MAAM;AACT,EAAE,OAAO,IAAI,CAAC;AACd,GAAG,QAAQ,EAAE,EAAE;AACf,GAAG,KAAK,EAAE;AACV,GAAG,CAAC;AACJ,CAAC;AACD;;;;"}

package/build/server/chunks/_server.ts-Dv1LAL-L.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"_server.ts-Dv1LAL-L.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/runtime/_server.ts.js"],"sourcesContent":["import { r as json } from \"../../../../chunks/exports.js\";\nimport { t as computeServerRuntimeContext } from \"../../../../chunks/features.js\";\n//#region src/routes/api/runtime/+server.ts\n/**\n* GET /api/runtime — public runtime-context endpoint (plan\n* ui-runtime-modes-plan.md §6.4, issue #509).\n*\n* PUBLIC by design: no auth is consulted. The body is the ServerRuntimeContext\n* whose `version` field is the contract-version handshake remote/hosted\n* clients use to detect version skew before enabling features. It carries no\n* secrets — mode, capability names, versions, and route pointers only.\n*/\nvar GET = (event) => {\n\treturn json(computeServerRuntimeContext(event));\n};\n//#endregion\nexport { GET };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACG,IAAC,GAAG,GAAG,CAAC,KAAK,KAAK;AACrB,CAAC,OAAO,IAAI,CAAC,2BAA2B,CAAC,KAAK,CAAC,CAAC;AAChD;;;;"}

package/build/server/chunks/_server.ts-WfJI8r0e.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"_server.ts-WfJI8r0e.js","sources":["../../../.svelte-kit/adapter-node/entries/endpoints/api/host/containers/restart/_server.ts.js"],"sourcesContent":["import { Nt as createLogger, _ as HostSwapBlockedError, t as buildComposeOptions, v as reconcileHostOwnership } from \"../../../../../../chunks/compose-args.js\";\nimport { h as composeRestart, i as checkDocker } from \"../../../../../../chunks/docker.js\";\nimport { k as isAllowedService } from \"../../../../../../chunks/src.js\";\nimport { t as getState } from \"../../../../../../chunks/state.js\";\nimport { a as getRequestId, c as jsonResponse, d as requireCapability, l as parseJsonBody, r as errorResponse, s as jsonBodyError, u as requireAdmin } from \"../../../../../../chunks/helpers.js\";\nimport { t as withSerialQueue } from \"../../../../../../chunks/serial-queue.js\";\n//#region src/routes/api/host/containers/restart/+server.ts\nvar logger = createLogger(\"containers-restart\");\nvar POST = async (event) => {\n\tconst requestId = getRequestId(event);\n\tconst capabilityError = requireCapability(event, \"host:containers\", requestId);\n\tif (capabilityError) return capabilityError;\n\tlogger.info(\"container restart request\", { requestId });\n\tconst authError = requireAdmin(event, requestId);\n\tif (authError) return authError;\n\treturn withSerialQueue(\"admin:containers:restart\", async () => {\n\t\tconst state = getState();\n\t\tconst result = await parseJsonBody(event.request);\n\t\tif (\"error\" in result) return jsonBodyError(result, requestId);\n\t\tconst body = result.data;\n\t\tconst service = typeof body.service === \"string\" ? body.service : \"\";\n\t\tif (!isAllowedService(service, state.configDir)) return errorResponse(400, \"invalid_service\", \"Service is not in allowlist\", { service }, requestId);\n\t\tif ((await checkDocker()).ok) {\n\t\t\ttry {\n\t\t\t\tawait reconcileHostOwnership(state, { services: [service] });\n\t\t\t} catch (err) {\n\t\t\t\tif (err instanceof HostSwapBlockedError) return errorResponse(409, \"host_swap_blocked\", \"OP_HOME appears to have moved from another host. Ownership must be adopted for this host before starting. Run `openpalm start --adopt-host` from the host CLI, then retry.\", {\n\t\t\t\t\tservice,\n\t\t\t\t\tpreviousHost: err.previousIdentity?.host ?? null,\n\t\t\t\t\tcurrentHost: err.currentIdentity.host\n\t\t\t\t}, requestId);\n\t\t\t\tthrow err;\n\t\t\t}\n\t\t\tconst result = await composeRestart([service], buildComposeOptions(state));\n\t\t\tif (result.ok) state.services[service] = \"running\";\n\t\t\telse return errorResponse(500, \"docker_error\", `Failed to restart service: ${result.stderr}`, { service }, requestId);\n\t\t} else state.services[service] = \"running\";\n\t\treturn jsonResponse(200, {\n\t\t\tok: true,\n\t\t\tservice,\n\t\t\tstatus: state.services[service]\n\t\t}, requestId);\n\t});\n};\n//#endregion\nexport { POST };\n"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AAMA;AACA,IAAI,MAAM,GAAG,YAAY,CAAC,oBAAoB,CAAC;AAC5C,IAAC,IAAI,GAAG,OAAO,KAAK,KAAK;AAC5B,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,CAAC;AACtC,CAAC,MAAM,eAAe,GAAG,iBAAiB,CAAC,KAAK,EAAE,iBAAiB,EAAE,SAAS,CAAC;AAC/E,CAAC,IAAI,eAAe,EAAE,OAAO,eAAe;AAC5C,CAAC,MAAM,CAAC,IAAI,CAAC,2BAA2B,EAAE,EAAE,SAAS,EAAE,CAAC;AACxD,CAAC,MAAM,SAAS,GAAG,YAAY,CAAC,KAAK,EAAE,SAAS,CAAC;AACjD,CAAC,IAAI,SAAS,EAAE,OAAO,SAAS;AAChC,CAAC,OAAO,eAAe,CAAC,0BAA0B,EAAE,YAAY;AAChE,EAAE,MAAM,KAAK,GAAG,QAAQ,EAAE;AAC1B,EAAE,MAAM,MAAM,GAAG,MAAM,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC;AACnD,EAAE,IAAI,OAAO,IAAI,MAAM,EAAE,OAAO,aAAa,CAAC,MAAM,EAAE,SAAS,CAAC;AAChE,EAAE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI;AAC1B,EAAE,MAAM,OAAO,GAAG,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,GAAG,IAAI,CAAC,OAAO,GAAG,EAAE;AACtE,EAAE,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,EAAE,OAAO,aAAa,CAAC,GAAG,EAAE,iBAAiB,EAAE,6BAA6B,EAAE,EAAE,OAAO,EAAE,EAAE,SAAS,CAAC;AACtJ,EAAE,IAAI,CAAC,MAAM,WAAW,EAAE,EAAE,EAAE,EAAE;AAChC,GAAG,IAAI;AACP,IAAI,MAAM,sBAAsB,CAAC,KAAK,EAAE,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;AAChE,GAAG,CAAC,CAAC,OAAO,GAAG,EAAE;AACjB,IAAI,IAAI,GAAG,YAAY,oBAAoB,EAAE,OAAO,aAAa,CAAC,GAAG,EAAE,mBAAmB,EAAE,4KAA4K,EAAE;AAC1Q,KAAK,OAAO;AACZ,KAAK,YAAY,EAAE,GAAG,CAAC,gBAAgB,EAAE,IAAI,IAAI,IAAI;AACrD,KAAK,WAAW,EAAE,GAAG,CAAC,eAAe,CAAC;AACtC,KAAK,EAAE,SAAS,CAAC;AACjB,IAAI,MAAM,GAAG;AACb,GAAG;AACH,GAAG,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,CAAC,OAAO,CAAC,EAAE,mBAAmB,CAAC,KAAK,CAAC,CAAC;AAC7E,GAAG,IAAI,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,SAAS;AACrD,QAAQ,OAAO,aAAa,CAAC,GAAG,EAAE,cAAc,EAAE,CAAC,2BAA2B,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,OAAO,EAAE,EAAE,SAAS,CAAC;AACxH,EAAE,CAAC,MAAM,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,SAAS;AAC5C,EAAE,OAAO,YAAY,CAAC,GAAG,EAAE;AAC3B,GAAG,EAAE,EAAE,IAAI;AACX,GAAG,OAAO;AACV,GAAG,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,OAAO;AACjC,GAAG,EAAE,SAAS,CAAC;AACf,CAAC,CAAC,CAAC;AACH;;;;"}

package/build/server/chunks/addon-helpers-CkCisYhs.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"addon-helpers-CkCisYhs.js","sources":["../../../.svelte-kit/adapter-node/chunks/addon-helpers.js"],"sourcesContent":["import { D as setAddonEnabled, E as listEnabledAddonIds, Nt as createLogger, S as getAddonServiceNames, t as buildComposeOptions } from \"./compose-args.js\";\nimport { i as checkDocker, v as composeStop } from \"./docker.js\";\nimport \"./src.js\";\nimport { n as resetState } from \"./state.js\";\n//#region src/lib/server/addon-helpers.ts\n/**\n* Shared addon enable/disable logic for admin route handlers.\n*\n* Both /admin/addons and /admin/addons/:name share the same POST flow:\n* validate → stop running services if disabling → mutate state → audit.\n* This module houses the shared mutation step so neither route duplicates it.\n*/\nvar logger = createLogger(\"addon-helpers\");\n/**\n* Stop running services if disabling, then call setAddonEnabled.\n* Returns the mutation result with the final enabled state.\n*/\nasync function performAddonToggle(state, name, requestedEnabled, requestId) {\n\tconst wasEnabled = listEnabledAddonIds(state.homeDir).includes(name);\n\tconst nextEnabled = requestedEnabled !== void 0 ? requestedEnabled : wasEnabled;\n\tif (!nextEnabled && wasEnabled) {\n\t\tconst serviceNames = getAddonServiceNames(state.homeDir, name);\n\t\tif (serviceNames.length > 0) {\n\t\t\tif ((await checkDocker()).ok) try {\n\t\t\t\tawait composeStop(serviceNames, buildComposeOptions(state));\n\t\t\t\tlogger.info(\"stopped addon services before disable\", {\n\t\t\t\t\tname,\n\t\t\t\t\tservices: serviceNames,\n\t\t\t\t\trequestId\n\t\t\t\t});\n\t\t\t} catch (err) {\n\t\t\t\tlogger.warn(\"failed to stop addon services before disable\", {\n\t\t\t\t\tname,\n\t\t\t\t\tservices: serviceNames,\n\t\t\t\t\terror: String(err),\n\t\t\t\t\trequestId\n\t\t\t\t});\n\t\t\t}\n\t\t}\n\t}\n\tconst mutation = setAddonEnabled(state.homeDir, name, nextEnabled, state);\n\tif (!mutation.ok) return mutation;\n\tif (mutation.changed) resetState();\n\treturn {\n\t\tok: true,\n\t\tenabled: listEnabledAddonIds(state.homeDir).includes(name),\n\t\tchanged: mutation.changed\n\t};\n}\n//#endregion\nexport { performAddonToggle as t };\n"],"names":[],"mappings":";;;AAIA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,IAAI,MAAM,GAAG,YAAY,CAAC,eAAe,CAAC;AAC1C;AACA;AACA;AACA;AACA,eAAe,kBAAkB,CAAC,KAAK,EAAE,IAAI,EAAE,gBAAgB,EAAE,SAAS,EAAE;AAC5E,CAAC,MAAM,UAAU,GAAG,mBAAmB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;AACrE,CAAC,MAAM,WAAW,GAAG,gBAAgB,KAAK,MAAM,GAAG,gBAAgB,GAAG,UAAU;AAChF,CAAC,IAAI,CAAC,WAAW,IAAI,UAAU,EAAE;AACjC,EAAE,MAAM,YAAY,GAAG,oBAAoB,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,CAAC;AAChE,EAAE,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE;AAC/B,GAAG,IAAI,CAAC,MAAM,WAAW,EAAE,EAAE,EAAE,EAAE,IAAI;AACrC,IAAI,MAAM,WAAW,CAAC,YAAY,EAAE,mBAAmB,CAAC,KAAK,CAAC,CAAC;AAC/D,IAAI,MAAM,CAAC,IAAI,CAAC,uCAAuC,EAAE;AACzD,KAAK,IAAI;AACT,KAAK,QAAQ,EAAE,YAAY;AAC3B,KAAK;AACL,KAAK,CAAC;AACN,GAAG,CAAC,CAAC,OAAO,GAAG,EAAE;AACjB,IAAI,MAAM,CAAC,IAAI,CAAC,8CAA8C,EAAE;AAChE,KAAK,IAAI;AACT,KAAK,QAAQ,EAAE,YAAY;AAC3B,KAAK,KAAK,EAAE,MAAM,CAAC,GAAG,CAAC;AACvB,KAAK;AACL,KAAK,CAAC;AACN,GAAG;AACH,EAAE;AACF,CAAC;AACD,CAAC,MAAM,QAAQ,GAAG,eAAe,CAAC,KAAK,CAAC,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,CAAC;AAC1E,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,OAAO,QAAQ;AAClC,CAAC,IAAI,QAAQ,CAAC,OAAO,EAAE,UAAU,EAAE;AACnC,CAAC,OAAO;AACR,EAAE,EAAE,EAAE,IAAI;AACV,EAAE,OAAO,EAAE,mBAAmB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;AAC5D,EAAE,OAAO,EAAE,QAAQ,CAAC;AACpB,EAAE;AACF;;;;"}

package/build/server/chunks/compose-args2-Ccr5RMHS.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"compose-args2-Ccr5RMHS.js","sources":[],"sourcesContent":[],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;"}

package/build/server/chunks/connections-api-mP7OE2x7.js

@@ -1,34 +0,0 @@
-import { l as requireCapability, r as requireAdmin } from './helpers-9U7R7yqL.js';
-
-//#region src/lib/server/connections-api.ts
-/** Serialize a connection for the API — never includes the stored password. */
-function publishConnection(c) {
-	return {
-		id: c.id,
-		label: c.label,
-		url: c.url,
-		kind: c.kind,
-		isDefault: c.isDefault,
-		hasPassword: Boolean(c.password)
-	};
-}
-/** Serialize a user-persisted record (kind defaulted the same way reads default it). */
-function publishConnectionEntry(entry) {
-	return publishConnection({
-		...entry,
-		kind: entry.kind ?? "remote-opencode",
-		isDefault: false
-	});
-}
-/**
-* Shared guard for every /api/connections/* handler: the `connections:manage`
-* capability first (403 — capability-based, not session-based; plan §8.5),
-* then the host admin session (plan §6.8: the host app gates connection
-* writes behind the admin session).
-*/
-function requireConnectionsManage(event, requestId) {
-	return requireCapability(event, "connections:manage", requestId) ?? requireAdmin(event, requestId);
-}
-
-export { publishConnectionEntry as a, publishConnection as p, requireConnectionsManage as r };
-//# sourceMappingURL=connections-api-mP7OE2x7.js.map

package/build/server/chunks/connections-api-mP7OE2x7.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"connections-api-mP7OE2x7.js","sources":["../../../.svelte-kit/adapter-node/chunks/connections-api.js"],"sourcesContent":["import { d as requireCapability, u as requireAdmin } from \"./helpers.js\";\n//#region src/lib/server/connections-api.ts\n/** Serialize a connection for the API — never includes the stored password. */\nfunction publishConnection(c) {\n\treturn {\n\t\tid: c.id,\n\t\tlabel: c.label,\n\t\turl: c.url,\n\t\tkind: c.kind,\n\t\tisDefault: c.isDefault,\n\t\thasPassword: Boolean(c.password)\n\t};\n}\n/** Serialize a user-persisted record (kind defaulted the same way reads default it). */\nfunction publishConnectionEntry(entry) {\n\treturn publishConnection({\n\t\t...entry,\n\t\tkind: entry.kind ?? \"remote-opencode\",\n\t\tisDefault: false\n\t});\n}\n/**\n* Shared guard for every /api/connections/* handler: the `connections:manage`\n* capability first (403 — capability-based, not session-based; plan §8.5),\n* then the host admin session (plan §6.8: the host app gates connection\n* writes behind the admin session).\n*/\nfunction requireConnectionsManage(event, requestId) {\n\treturn requireCapability(event, \"connections:manage\", requestId) ?? requireAdmin(event, requestId);\n}\n//#endregion\nexport { publishConnectionEntry as n, requireConnectionsManage as r, publishConnection as t };\n"],"names":[],"mappings":";;AACA;AACA;AACA,SAAS,iBAAiB,CAAC,CAAC,EAAE;AAC9B,CAAC,OAAO;AACR,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE;AACV,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK;AAChB,EAAE,GAAG,EAAE,CAAC,CAAC,GAAG;AACZ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI;AACd,EAAE,SAAS,EAAE,CAAC,CAAC,SAAS;AACxB,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC,QAAQ;AACjC,EAAE;AACF;AACA;AACA,SAAS,sBAAsB,CAAC,KAAK,EAAE;AACvC,CAAC,OAAO,iBAAiB,CAAC;AAC1B,EAAE,GAAG,KAAK;AACV,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,iBAAiB;AACvC,EAAE,SAAS,EAAE;AACb,EAAE,CAAC;AACH;AACA;AACA;AACA;AACA;AACA;AACA;AACA,SAAS,wBAAwB,CAAC,KAAK,EAAE,SAAS,EAAE;AACpD,CAAC,OAAO,iBAAiB,CAAC,KAAK,EAAE,oBAAoB,EAAE,SAAS,CAAC,IAAI,YAAY,CAAC,KAAK,EAAE,SAAS,CAAC;AACnG;;;;"}

package/build/server/chunks/docker2-BL8hjShD.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"docker2-BL8hjShD.js","sources":[],"sourcesContent":[],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;"}

package/build/server/chunks/endpoints-CnnGlw2U.js

@@ -1,452 +0,0 @@
-import { aD as readStackEnv, aA as readSecret } from './src-AHSKeKr0.js';
-import { g as getState } from './state-CzXOEt0t.js';
-import { existsSync, readFileSync, mkdirSync, writeFileSync, chmodSync, unlinkSync } from 'node:fs';
-import { dirname } from 'node:path';
-import { randomUUID } from 'node:crypto';
-
-//#region src/lib/server/basic-auth.ts
-/**
-* Shared HTTP Basic-auth encoding for host-UI → OpenCode/guardian calls.
-*
-* PR #564 P2-1: every host forwarder MUST send the exact same UTF-8 byte
-* sequence the assistant and guardian expect. Two divergences caused correct
-* passwords to 401 from the host:
-*  - `btoa()` is Latin-1-only and throws / corrupts on non-Latin-1 bytes
-*    (accents, CJK, emoji). Encode UTF-8 first (matches the guardian's
-*    `Buffer.from(..., 'utf-8')`).
-*  - the file-backed password was `.trim()`-ed, stripping surrounding spaces,
-*    while the assistant entrypoint (`$(cat)`) and the guardian strip only
-*    trailing newlines. Use `stripTrailingNewlines` so a password like
-*    `"päss 🔒 "` authenticates identically everywhere.
-*/
-/** OpenCode's server default Basic-auth username (the shipped assistant compose never overrides it). */
-var DEFAULT_OPENCODE_USERNAME$1 = "opencode";
-/** UTF-8-safe Basic auth header — identical byte sequence to the guardian's encoder. */
-function basicAuthHeader(username, password) {
-	return `Basic ${Buffer.from(`${username}:${password}`, "utf-8").toString("base64")}`;
-}
-/**
-* Strip only trailing newlines from a file-backed secret, matching the
-* assistant entrypoint's `$(cat file)` and the guardian's reader. Surrounding
-* spaces/tabs are preserved so the bytes match across every consumer.
-*/
-function stripTrailingNewlines(value) {
-	return value.replace(/\n+$/, "");
-}
-//#endregion
-//#region src/lib/server/endpoints.ts
-/**
-* Assistant connections — list of OpenCode servers the UI can target, with
-* one marked active. The internal model uses "connection" language (plan
-* ui-runtime-modes-plan.md §6.6, Phase 2 / #486); the on-disk file keeps its
-* historical name and schema keys — `endpoints.json` with
-* `{ activeId, endpoints }` — and is NEVER renamed or migrated.
-*
-* The "default" entry is synthesized from environment (OP_OPENCODE_URL /
-* OP_ASSISTANT_URL / OP_ASSISTANT_PORT) and cannot be deleted. User-added
-* connections are persisted to a JSON file in the config directory (it's
-* user-owned configuration, not service state — see Phase 5 / D4 in
-* docs/technical/auth-and-proxy-refactor-plan.md).
-*
-* File: ${configDir}/endpoints.json (mode 0600)
-* Shape: { activeId: string | null, endpoints: ConnectionEntry[] }
-*   - activeId === null or "default" → use the env-derived default
-*   - activeId === "<id>" → use the matching user entry (falls back to default if not found)
-*
-* Legacy path: ${dataDir}/admin/endpoints.json. Old installs are
-* migrated lazily on first read by maybeMigrateLegacyEndpointsFile().
-*/
-/**
-* Read-time kind defaulting (plan §6.6): a user-persisted record without a
-* `kind` key is a remote OpenCode connection — that is the only thing the
-* pre-Phase-2 UI let users add. Explicit kinds pass through untouched.
-*/
-function kindOf(entry) {
-	return entry.kind ?? "remote-opencode";
-}
-var DEFAULT_ID = "default";
-/**
-* OpenCode's server default Basic-auth username. The shipped assistant compose
-* never overrides OPENCODE_SERVER_USERNAME, and the guardian's upstream auth
-* sends `opencode:<password>`, so every host-UI forwarder must default here or
-* a correct password 401s (PR #564 r3566888629). User-added connections may
-* still carry an explicit username.
-*/
-var DEFAULT_OPENCODE_USERNAME = DEFAULT_OPENCODE_USERNAME$1;
-var LOCAL_ELECTRON_ID = "local-electron";
-var remoteStatusCache = null;
-function endpointsPath() {
-	return `${getState().configDir}/endpoints.json`;
-}
-/**
-* Legacy path used before Phase 5 of the auth/proxy refactor.
-* See docs/technical/auth-and-proxy-refactor-plan.md § Phase 5 / D4.
-*/
-function legacyEndpointsPath() {
-	return `${getState().dataDir}/admin/endpoints.json`;
-}
-/**
-* One-shot lazy migration from the legacy data/ path to the new config/ path.
-*
-* Phase 5 of docs/technical/auth-and-proxy-refactor-plan.md (D6 step 3):
-*   - If the new path already exists → no-op (already migrated).
-*   - If the legacy path doesn't exist → no-op (fresh install).
-*   - Otherwise copy contents to the new path (mode 0600), then unlink legacy.
-*
-* If the migration fails partway, the legacy file is left in place so reads
-* fall back to it for the remainder of this session. Idempotent across
-* process restarts because the existence check makes it a no-op after the
-* first successful run.
-*/
-function maybeMigrateLegacyEndpointsFile() {
-	const newPath = endpointsPath();
-	if (existsSync(newPath)) return;
-	const oldPath = legacyEndpointsPath();
-	if (!existsSync(oldPath)) return;
-	try {
-		mkdirSync(dirname(newPath), { recursive: true });
-		writeFileSync(newPath, readFileSync(oldPath), { mode: 384 });
-		try {
-			chmodSync(newPath, 384);
-		} catch {}
-		unlinkSync(oldPath);
-	} catch (e) {
-		console.warn("[endpoints] Failed to migrate legacy endpoints.json from data/ to config/. Leaving the old file in place; reads will fall back to it for this session.", e);
-	}
-}
-function localRuntimePath() {
-	return `${getState().dataDir}/local-opencode.runtime.json`;
-}
-/**
-* Read the Electron-written runtime.json each time it's needed. The file is
-* 0600 and is rewritten on each Electron launch (random password per launch),
-* so callers must NOT cache the result.
-*/
-function readLocalRuntime() {
-	const path = localRuntimePath();
-	if (!existsSync(path)) return null;
-	try {
-		const parsed = JSON.parse(readFileSync(path, "utf-8"));
-		if (!parsed || typeof parsed.url !== "string" || !parsed.url) return null;
-		return {
-			url: parsed.url,
-			username: typeof parsed.username === "string" ? parsed.username : void 0,
-			password: typeof parsed.password === "string" ? parsed.password : void 0,
-			pid: typeof parsed.pid === "number" ? parsed.pid : void 0,
-			startedAt: typeof parsed.startedAt === "string" ? parsed.startedAt : void 0
-		};
-	} catch (e) {
-		console.warn("[endpoints] Failed to parse local-opencode.runtime.json:", e);
-		return null;
-	}
-}
-function localEndpoint() {
-	const rt = readLocalRuntime();
-	if (!rt) return null;
-	return {
-		id: LOCAL_ELECTRON_ID,
-		label: "OpenPalm Admin",
-		url: normalizeBrowserFacingUrl(rt.url),
-		username: rt.username || DEFAULT_OPENCODE_USERNAME,
-		...rt.password ? { password: rt.password } : {},
-		kind: "local-opencode",
-		isDefault: false,
-		isLocal: true
-	};
-}
-function normalizeBrowserFacingUrl(raw) {
-	try {
-		const url = new URL(raw);
-		const host = url.hostname.toLowerCase().replace(/^\[|\]$/g, "");
-		if (host === "0.0.0.0" || host === "::") url.hostname = "127.0.0.1";
-		return url.toString().replace(/\/$/, "");
-	} catch {
-		return raw;
-	}
-}
-function readFile() {
-	maybeMigrateLegacyEndpointsFile();
-	let path = endpointsPath();
-	if (!existsSync(path)) {
-		const legacy = legacyEndpointsPath();
-		if (!existsSync(legacy)) return {
-			activeId: null,
-			endpoints: []
-		};
-		path = legacy;
-	}
-	try {
-		const parsed = JSON.parse(readFileSync(path, "utf-8"));
-		return {
-			activeId: typeof parsed.activeId === "string" ? parsed.activeId : null,
-			endpoints: Array.isArray(parsed.endpoints) ? parsed.endpoints.filter(isValidEntry) : []
-		};
-	} catch (e) {
-		console.warn("[endpoints] Failed to parse endpoints.json, resetting:", e);
-		return {
-			activeId: null,
-			endpoints: []
-		};
-	}
-}
-function isValidEntry(e) {
-	if (!e || typeof e !== "object") return false;
-	const o = e;
-	return typeof o.id === "string" && typeof o.label === "string" && typeof o.url === "string";
-}
-function writeFile(data) {
-	const path = endpointsPath();
-	mkdirSync(dirname(path), { recursive: true });
-	writeFileSync(path, JSON.stringify(data, null, 2), {
-		encoding: "utf-8",
-		mode: 384
-	});
-	try {
-		chmodSync(path, 384);
-	} catch {}
-}
-function defaultEndpoint() {
-	const persisted = readStackEnv(getState().homeDir);
-	const url = process.env.OP_OPENCODE_URL ?? process.env.OP_ASSISTANT_URL ?? `http://127.0.0.1:${process.env.OP_ASSISTANT_PORT ?? persisted.OP_ASSISTANT_PORT ?? "3800"}`;
-	const username = process.env.OPENCODE_SERVER_USERNAME || DEFAULT_OPENCODE_USERNAME;
-	const presetPassword = /^(true|1|yes)$/i.test((persisted.OPENCODE_AUTH ?? process.env.OPENCODE_AUTH ?? "").trim()) ? ((raw) => raw ? stripTrailingNewlines(raw) : void 0)(readSecret(getState().homeDir, "op_opencode_password") ?? void 0) || process.env.OP_OPENCODE_PASSWORD : void 0;
-	const password = process.env.OPENCODE_SERVER_PASSWORD || presetPassword || void 0;
-	return {
-		id: DEFAULT_ID,
-		label: "Local Assistant",
-		url: normalizeBrowserFacingUrl(url),
-		username,
-		password,
-		kind: "local-opencode",
-		isDefault: true
-	};
-}
-/**
-* Discriminated validator that callers (admin routes) use to surface
-* specific error messages. Plain HTTP is allowed for any host — OpenPalm is
-* LAN-first, so remote instances on a private network are reached over http://.
-*/
-function validateEndpointUrl(input) {
-	let u;
-	try {
-		u = new URL(input.trim());
-	} catch {
-		return {
-			ok: false,
-			reason: "invalid_url"
-		};
-	}
-	if (u.protocol !== "http:" && u.protocol !== "https:") return {
-		ok: false,
-		reason: "invalid_scheme"
-	};
-	if (!u.hostname) return {
-		ok: false,
-		reason: "missing_host"
-	};
-	if (u.search || u.hash) return {
-		ok: false,
-		reason: "unexpected_query_or_fragment"
-	};
-	return {
-		ok: true,
-		url: u.toString().replace(/\/$/, "")
-	};
-}
-/**
-* Validate a URL string — must be http(s) with a host. Returns the normalized
-* URL or null. For finer-grained errors, use `validateEndpointUrl`.
-*/
-function normalizeEndpointUrl(input) {
-	const result = validateEndpointUrl(input);
-	return result.ok ? result.url : null;
-}
-/**
-* Returns: [local-electron (if Electron is running it), default, ...user entries].
-* The local-electron entry is synthesized at call time from
-* state/local-opencode.runtime.json — never persisted to endpoints.json.
-*/
-function listConnections() {
-	const { endpoints } = readFile();
-	const local = localEndpoint();
-	return [
-		...local ? [local] : [],
-		defaultEndpoint(),
-		...endpoints.map((e) => ({
-			...e,
-			kind: kindOf(e),
-			isDefault: false
-		}))
-	];
-}
-/**
-* Returns the active connection, falling back to the default if no active id
-* is set OR if the active id is `local-electron` but the runtime.json isn't
-* there (e.g. the Electron child died). Re-reads runtime.json each call so a
-* password rotated by a new Electron launch is picked up immediately.
-*/
-function getActiveConnection() {
-	const { activeId, endpoints } = readFile();
-	if (activeId === LOCAL_ELECTRON_ID) {
-		const local = localEndpoint();
-		if (local) return local;
-		return defaultEndpoint();
-	}
-	if (!activeId || activeId === DEFAULT_ID) return defaultEndpoint();
-	const found = endpoints.find((e) => e.id === activeId);
-	if (!found) return defaultEndpoint();
-	return {
-		...found,
-		kind: kindOf(found),
-		isDefault: false
-	};
-}
-function setActiveConnectionId(id) {
-	const data = readFile();
-	if (!id || id === DEFAULT_ID) data.activeId = null;
-	else if (id === LOCAL_ELECTRON_ID) {
-		if (!localEndpoint()) throw new Error("Local OpenCode is not running (Electron only)");
-		data.activeId = LOCAL_ELECTRON_ID;
-	} else {
-		if (!data.endpoints.some((e) => e.id === id)) throw new Error(`Endpoint not found: ${id}`);
-		data.activeId = id;
-	}
-	writeFile(data);
-	return getActiveConnection();
-}
-/**
-* User-addable connection kinds (#486 D2). `local-opencode` is reserved for
-* synthesized entries (the env-derived default, the Electron local-runtime
-* entry) and is never accepted from a write path.
-*/
-var USER_ADDABLE_CONNECTION_KINDS = ["remote-opencode", "openpalm-client-api"];
-/**
-* Normalize a guardian ('openpalm-client-api'-kind) connection URL so it
-* always ends in `/oc` — the guardian's direct-ingress base path
-* (#486 D2). Operates on an ALREADY `normalizeEndpointUrl`-ed string (no
-* trailing slash), so only the `/oc` suffix logic is needed here.
-*
-* `packages/client/src/lib/connections/url-policy.ts` carries a deliberate
-* CLIENT-side twin (`normalizeGuardianUrl`) with the same rule — the client
-* artifact may not import host code and vice versa, so this is the same
-* accepted duplication as `validateConnectionUrl`/`validateEndpointUrl`.
-* Both are pinned by their own tests.
-*/
-function normalizeGuardianOcUrl(url) {
-	return url.endsWith("/oc") ? url : `${url}/oc`;
-}
-function assertAddableKind(kind) {
-	if (kind === void 0) return;
-	if (!USER_ADDABLE_CONNECTION_KINDS.includes(kind)) throw new Error("Invalid connection kind");
-}
-function addConnection(input) {
-	const label = input.label.trim();
-	if (!label) throw new Error("Label is required");
-	let url = normalizeEndpointUrl(input.url);
-	if (!url) throw new Error("URL must be a valid http(s) URL");
-	assertAddableKind(input.kind);
-	if (input.kind === "openpalm-client-api") url = normalizeGuardianOcUrl(url);
-	const data = readFile();
-	const entry = {
-		id: randomUUID(),
-		label,
-		url,
-		...input.password ? { password: input.password } : {},
-		...input.kind ? { kind: input.kind } : {}
-	};
-	data.endpoints.push(entry);
-	writeFile(data);
-	return entry;
-}
-function updateConnection(id, patch) {
-	if (id === DEFAULT_ID) throw new Error("Cannot edit the default endpoint");
-	if (id === LOCAL_ELECTRON_ID) throw new Error("Cannot edit the local Electron OpenCode entry (it is ephemeral and per-launch)");
-	assertAddableKind(patch.kind);
-	const data = readFile();
-	const idx = data.endpoints.findIndex((e) => e.id === id);
-	if (idx === -1) throw new Error(`Endpoint not found: ${id}`);
-	const next = { ...data.endpoints[idx] };
-	if (patch.label !== void 0) {
-		const label = patch.label.trim();
-		if (!label) throw new Error("Label cannot be empty");
-		next.label = label;
-	}
-	if (patch.url !== void 0) {
-		const url = normalizeEndpointUrl(patch.url);
-		if (!url) throw new Error("URL must be a valid http(s) URL");
-		next.url = url;
-	}
-	if (patch.password === null) delete next.password;
-	else if (typeof patch.password === "string") next.password = patch.password;
-	if (patch.kind !== void 0) next.kind = patch.kind;
-	if (next.kind === "openpalm-client-api") next.url = normalizeGuardianOcUrl(next.url);
-	data.endpoints[idx] = next;
-	writeFile(data);
-	return next;
-}
-function deleteConnection(id) {
-	if (id === DEFAULT_ID) throw new Error("Cannot delete the default endpoint");
-	if (id === LOCAL_ELECTRON_ID) throw new Error("Cannot delete the local Electron OpenCode entry (managed by Electron lifecycle)");
-	const data = readFile();
-	const idx = data.endpoints.findIndex((e) => e.id === id);
-	if (idx === -1) throw new Error(`Endpoint not found: ${id}`);
-	data.endpoints.splice(idx, 1);
-	if (data.activeId === id) data.activeId = null;
-	writeFile(data);
-}
-async function probeEndpoint(endpoint) {
-	const headers = new Headers();
-	if (endpoint.password) {
-		const username = endpoint.username ?? DEFAULT_OPENCODE_USERNAME;
-		headers.set("authorization", basicAuthHeader(username, endpoint.password));
-	}
-	const probeUrl = endpoint.kind === "openpalm-client-api" ? `${endpoint.url}/session` : endpoint.url;
-	try {
-		const response = await fetch(probeUrl, {
-			method: "GET",
-			headers,
-			redirect: "manual",
-			signal: AbortSignal.timeout(2e3)
-		});
-		if (response.status === 401 || response.status === 403) return {
-			id: endpoint.id,
-			name: endpoint.label,
-			url: endpoint.url,
-			state: "unauthorized",
-			detail: `HTTP ${response.status}`
-		};
-		if (response.ok || response.status >= 300 && response.status < 400) return {
-			id: endpoint.id,
-			name: endpoint.label,
-			url: endpoint.url,
-			state: "accessible"
-		};
-		return {
-			id: endpoint.id,
-			name: endpoint.label,
-			url: endpoint.url,
-			state: "unreachable",
-			detail: `HTTP ${response.status}`
-		};
-	} catch (error) {
-		return {
-			id: endpoint.id,
-			name: endpoint.label,
-			url: endpoint.url,
-			state: "unreachable",
-			detail: error instanceof Error ? error.message : String(error)
-		};
-	}
-}
-async function listRemoteStatuses() {
-	if (remoteStatusCache && remoteStatusCache.expiresAt > Date.now()) return remoteStatusCache.value.map((status) => ({ ...status }));
-	const statuses = await Promise.all(listConnections().map((endpoint) => probeEndpoint(endpoint)));
-	remoteStatusCache = {
-		value: statuses,
-		expiresAt: Date.now() + 5e3
-	};
-	return statuses.map((status) => ({ ...status }));
-}
-
-export { USER_ADDABLE_CONNECTION_KINDS as U, addConnection as a, basicAuthHeader as b, listRemoteStatuses as c, deleteConnection as d, getActiveConnection as g, listConnections as l, setActiveConnectionId as s, updateConnection as u, validateEndpointUrl as v };
-//# sourceMappingURL=endpoints-CnnGlw2U.js.map