@xopcai/xopc 0.0.102 → 0.0.104

package/dist/src/gateway/hono/routes/config.js

@@ -5,6 +5,9 @@ import { applyGatewayPatch } from "./config-patch/gateway.js";
 import { applyMiscPatch, validateGatewayAfterPatch } from "./config-patch/misc.js";
 import "./config-patch/index.js";
 //#region src/gateway/hono/routes/config.ts
+function localeFromRequest(c) {
+	return c.req.query("locale") ?? c.req.header("X-XOPC-Locale") ?? c.req.header("Accept-Language")?.split(",")[0];
+}
 function registerConfigRoutes(authenticated, deps) {
 	const { service, strictRateLimitMiddleware } = deps;
 	authenticated.post("/api/config/reload", strictRateLimitMiddleware, async (c) => {
@@ -30,7 +33,7 @@ function registerConfigRoutes(authenticated, deps) {
 		});
 	});
 	authenticated.get("/api/config", async (c) => {
-		const safeConfig = await buildSafeWebConfigPayload(service);
+		const safeConfig = await buildSafeWebConfigPayload(service, { locale: localeFromRequest(c) });
 		return c.json({
 			ok: true,
 			payload: { config: safeConfig }
@@ -62,7 +65,7 @@ function registerConfigRoutes(authenticated, deps) {
 			error: result.error
 		}, 500);
 		if (body.gateway?.heartbeat !== void 0 && typeof body.gateway.heartbeat === "object") service.reloadHeartbeatFromCurrentConfig();
-		const safeConfig = await buildSafeWebConfigPayload(service);
+		const safeConfig = await buildSafeWebConfigPayload(service, { locale: localeFromRequest(c) });
 		return c.json({
 			ok: true,
 			payload: { config: safeConfig }

package/dist/src/gateway/hono/routes/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","names":[],"sources":["../../../../../src/gateway/hono/routes/config.ts"],"sourcesContent":["import type { Context, Hono } from 'hono';\n\nimport type { Config } from '../../../config/schema.js';\nimport { buildSafeWebConfigPayload } from '../lib/config-payload.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\nimport {\n  applyAgentsPatch,\n  applyChannelsPatch,\n  applyGatewayPatch,\n  applyMiscPatch,\n  validateGatewayAfterPatch,\n} from './config-patch/index.js';\n\nexport function registerConfigRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  const { service, strictRateLimitMiddleware } = deps;\n\n  authenticated.post('/api/config/reload', strictRateLimitMiddleware, async (c) => {\n    const result = await service.reloadConfig();\n    return c.json({ ok: true, payload: result });\n  });\n\n  authenticated.post('/api/heartbeat/trigger', strictRateLimitMiddleware, async (c) => {\n    let reason = 'manual';\n    try {\n      const body = await c.req.json();\n      if (body && typeof body === 'object' && typeof (body as { reason?: unknown }).reason === 'string') {\n        const r = (body as { reason: string }).reason.trim();\n        if (r) reason = r.slice(0, 120);\n      }\n    } catch {\n      /* empty or invalid body */\n    }\n    service.requestHeartbeatNow({ reason });\n    return c.json({ ok: true, payload: { scheduled: true } });\n  });\n\n  authenticated.get('/api/config', async (c) => {\n    const safeConfig = await buildSafeWebConfigPayload(service);\n    return c.json({ ok: true, payload: { config: safeConfig } });\n  });\n\n  // PATCH /api/config — section patchers run sequentially against the live\n  // config object (mutate-in-place is intentional: the route handler reads\n  // `service.currentConfig` and rewrites it through `saveConfig`). Each\n  // patcher only touches the keys it owns and returns `{ ok: false }` with a\n  // 400 body when validation fails; we surface the first failure verbatim.\n  authenticated.patch('/api/config', strictRateLimitMiddleware, async (c) => {\n    const body = await c.req.json();\n    const config: Config = service.currentConfig as Config;\n\n    applyAgentsPatch(config, body);\n    applyChannelsPatch(config, body);\n\n    const gatewayResult = applyGatewayPatch(config, body);\n    if (gatewayResult.ok === false) {\n      return c.json({ ok: false, error: gatewayResult.error }, gatewayResult.status as 400 | 500);\n    }\n\n    const miscResult = await applyMiscPatch(config, body);\n    if (miscResult.ok === false) {\n      return c.json({ ok: false, error: miscResult.error }, miscResult.status as 400 | 500);\n    }\n\n    const finalGwCheck = validateGatewayAfterPatch(config, body);\n    if (finalGwCheck.ok === false) {\n      return c.json({ ok: false, error: finalGwCheck.error }, finalGwCheck.status as 400 | 500);\n    }\n\n    const result = await service.saveConfig(config);\n    if (!result.saved) {\n      return c.json({ ok: false, error: result.error }, 500);\n    }\n\n    if (body.gateway?.heartbeat !== undefined && typeof body.gateway.heartbeat === 'object') {\n      service.reloadHeartbeatFromCurrentConfig();\n    }\n\n    const safeConfig = await buildSafeWebConfigPayload(service);\n    return c.json({ ok: true, payload: { config: safeConfig } });\n  });\n\n  const revealGatewayAuthSecretHandler = async (c: Context) => {\n    const field = await resolveRevealGatewayAuthField(c);\n    if (!field) {\n      return c.json({ ok: false, error: { message: 'field must be token or password' } }, 400);\n    }\n    const config = service.currentConfig as Config;\n    const secret =\n      field === 'token'\n        ? config.gateway?.auth?.token?.trim() || null\n        : config.gateway?.auth?.password?.trim() || null;\n    return c.json({\n      ok: true,\n      payload: { field, secret, source: secret ? ('config' as const) : ('none' as const) },\n    });\n  };\n\n  /**\n   * POST /api/gateway/reveal-auth-secret/:field — preferred; no JSON body required.\n   * POST /api/gateway/reveal-auth-secret — legacy JSON body `{ field: \"token\" | \"password\" }`.\n   */\n  authenticated.post(\n    '/api/gateway/reveal-auth-secret/:field',\n    strictRateLimitMiddleware,\n    revealGatewayAuthSecretHandler,\n  );\n  authenticated.post('/api/gateway/reveal-auth-secret', strictRateLimitMiddleware, revealGatewayAuthSecretHandler);\n\n  /** POST /api/agents/browser/reveal-cloud-api-key — plaintext browser cloud apiKey from config only. */\n  authenticated.post('/api/agents/browser/reveal-cloud-api-key', strictRateLimitMiddleware, async (c) => {\n    const config = service.currentConfig as Config;\n    const apiKey = config.agents?.defaults?.browser?.cloud?.apiKey?.trim() || null;\n    return c.json({\n      ok: true,\n      payload: { apiKey, source: apiKey ? ('config' as const) : ('none' as const) },\n    });\n  });\n\n  /** POST /api/tools/web/reveal-search-api-key — plaintext search provider apiKey by index. */\n  authenticated.post('/api/tools/web/reveal-search-api-key', strictRateLimitMiddleware, async (c) => {\n    let index = -1;\n    try {\n      const body = await c.req.json();\n      if (body && typeof body === 'object' && typeof (body as { index?: unknown }).index === 'number') {\n        index = Math.floor((body as { index: number }).index);\n      }\n    } catch {\n      index = -1;\n    }\n    const providers = service.currentConfig.tools?.web?.search?.providers ?? [];\n    if (index < 0 || index >= providers.length) {\n      return c.json({ ok: false, error: { message: 'Invalid provider index' } }, 400);\n    }\n    const apiKey = providers[index]?.apiKey?.trim() || null;\n    return c.json({\n      ok: true,\n      payload: { index, apiKey, source: apiKey ? ('config' as const) : ('none' as const) },\n    });\n  });\n}\n\nfunction normalizeRevealGatewayAuthField(raw: unknown): 'token' | 'password' | null {\n  return raw === 'token' || raw === 'password' ? raw : null;\n}\n\nasync function resolveRevealGatewayAuthField(c: Context): Promise<'token' | 'password' | null> {\n  const fromPath = normalizeRevealGatewayAuthField(c.req.param('field'));\n  if (fromPath) return fromPath;\n\n  const fromQuery = normalizeRevealGatewayAuthField(c.req.query('field'));\n  if (fromQuery) return fromQuery;\n\n  try {\n    const body = await c.req.json();\n    return normalizeRevealGatewayAuthField(\n      body && typeof body === 'object' && !Array.isArray(body)\n        ? (body as { field?: unknown }).field\n        : undefined,\n    );\n  } catch {\n    return null;\n  }\n}\n"],"mappings":";;;;;;;AAaA,SAAgB,qBAAqB,eAAqB,MAAoC;CAC5F,MAAM,EAAE,SAAS,8BAA8B;AAE/C,eAAc,KAAK,sBAAsB,2BAA2B,OAAO,MAAM;EAC/E,MAAM,SAAS,MAAM,QAAQ,cAAc;AAC3C,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;GAAQ,CAAC;GAC5C;AAEF,eAAc,KAAK,0BAA0B,2BAA2B,OAAO,MAAM;EACnF,IAAI,SAAS;AACb,MAAI;GACF,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM;AAC/B,OAAI,QAAQ,OAAO,SAAS,YAAY,OAAQ,KAA8B,WAAW,UAAU;IACjG,MAAM,IAAK,KAA4B,OAAO,MAAM;AACpD,QAAI,EAAG,UAAS,EAAE,MAAM,GAAG,IAAI;;UAE3B;AAGR,UAAQ,oBAAoB,EAAE,QAAQ,CAAC;AACvC,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,WAAW,MAAM;GAAE,CAAC;GACzD;AAEF,eAAc,IAAI,eAAe,OAAO,MAAM;EAC5C,MAAM,aAAa,MAAM,0BAA0B,QAAQ;AAC3D,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,QAAQ,YAAY;GAAE,CAAC;GAC5D;AAOF,eAAc,MAAM,eAAe,2BAA2B,OAAO,MAAM;EACzE,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM;EAC/B,MAAM,SAAiB,QAAQ;AAE/B,mBAAiB,QAAQ,KAAK;AAC9B,qBAAmB,QAAQ,KAAK;EAEhC,MAAM,gBAAgB,kBAAkB,QAAQ,KAAK;AACrD,MAAI,cAAc,OAAO,MACvB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,cAAc;GAAO,EAAE,cAAc,OAAoB;EAG7F,MAAM,aAAa,MAAM,eAAe,QAAQ,KAAK;AACrD,MAAI,WAAW,OAAO,MACpB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,WAAW;GAAO,EAAE,WAAW,OAAoB;EAGvF,MAAM,eAAe,0BAA0B,QAAQ,KAAK;AAC5D,MAAI,aAAa,OAAO,MACtB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,aAAa;GAAO,EAAE,aAAa,OAAoB;EAG3F,MAAM,SAAS,MAAM,QAAQ,WAAW,OAAO;AAC/C,MAAI,CAAC,OAAO,MACV,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,OAAO;GAAO,EAAE,IAAI;AAGxD,MAAI,KAAK,SAAS,cAAc,KAAA,KAAa,OAAO,KAAK,QAAQ,cAAc,SAC7E,SAAQ,kCAAkC;EAG5C,MAAM,aAAa,MAAM,0BAA0B,QAAQ;AAC3D,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,QAAQ,YAAY;GAAE,CAAC;GAC5D;CAEF,MAAM,iCAAiC,OAAO,MAAe;EAC3D,MAAM,QAAQ,MAAM,8BAA8B,EAAE;AACpD,MAAI,CAAC,MACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,mCAAmC;GAAE,EAAE,IAAI;EAE1F,MAAM,SAAS,QAAQ;EACvB,MAAM,SACJ,UAAU,UACN,OAAO,SAAS,MAAM,OAAO,MAAM,IAAI,OACvC,OAAO,SAAS,MAAM,UAAU,MAAM,IAAI;AAChD,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IAAE;IAAO;IAAQ,QAAQ,SAAU,WAAsB;IAAkB;GACrF,CAAC;;;;;;AAOJ,eAAc,KACZ,0CACA,2BACA,+BACD;AACD,eAAc,KAAK,mCAAmC,2BAA2B,+BAA+B;;AAGhH,eAAc,KAAK,4CAA4C,2BAA2B,OAAO,MAAM;EAErG,MAAM,SADS,QAAQ,cACD,QAAQ,UAAU,SAAS,OAAO,QAAQ,MAAM,IAAI;AAC1E,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IAAE;IAAQ,QAAQ,SAAU,WAAsB;IAAkB;GAC9E,CAAC;GACF;;AAGF,eAAc,KAAK,wCAAwC,2BAA2B,OAAO,MAAM;EACjG,IAAI,QAAQ;AACZ,MAAI;GACF,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM;AAC/B,OAAI,QAAQ,OAAO,SAAS,YAAY,OAAQ,KAA6B,UAAU,SACrF,SAAQ,KAAK,MAAO,KAA2B,MAAM;UAEjD;AACN,WAAQ;;EAEV,MAAM,YAAY,QAAQ,cAAc,OAAO,KAAK,QAAQ,aAAa,EAAE;AAC3E,MAAI,QAAQ,KAAK,SAAS,UAAU,OAClC,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,0BAA0B;GAAE,EAAE,IAAI;EAEjF,MAAM,SAAS,UAAU,QAAQ,QAAQ,MAAM,IAAI;AACnD,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IAAE;IAAO;IAAQ,QAAQ,SAAU,WAAsB;IAAkB;GACrF,CAAC;GACF;;AAGJ,SAAS,gCAAgC,KAA2C;AAClF,QAAO,QAAQ,WAAW,QAAQ,aAAa,MAAM;;AAGvD,eAAe,8BAA8B,GAAkD;CAC7F,MAAM,WAAW,gCAAgC,EAAE,IAAI,MAAM,QAAQ,CAAC;AACtE,KAAI,SAAU,QAAO;CAErB,MAAM,YAAY,gCAAgC,EAAE,IAAI,MAAM,QAAQ,CAAC;AACvE,KAAI,UAAW,QAAO;AAEtB,KAAI;EACF,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM;AAC/B,SAAO,gCACL,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,GACnD,KAA6B,QAC9B,KAAA,EACL;SACK;AACN,SAAO"}
+{"version":3,"file":"config.js","names":[],"sources":["../../../../../src/gateway/hono/routes/config.ts"],"sourcesContent":["import type { Context, Hono } from 'hono';\n\nimport type { Config } from '../../../config/schema.js';\nimport { buildSafeWebConfigPayload } from '../lib/config-payload.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\nimport {\n  applyAgentsPatch,\n  applyChannelsPatch,\n  applyGatewayPatch,\n  applyMiscPatch,\n  validateGatewayAfterPatch,\n} from './config-patch/index.js';\n\nfunction localeFromRequest(c: { req: { query(name: string): string | undefined; header(name: string): string | undefined } }): string | undefined {\n  return c.req.query('locale') ?? c.req.header('X-XOPC-Locale') ?? c.req.header('Accept-Language')?.split(',')[0];\n}\n\nexport function registerConfigRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  const { service, strictRateLimitMiddleware } = deps;\n\n  authenticated.post('/api/config/reload', strictRateLimitMiddleware, async (c) => {\n    const result = await service.reloadConfig();\n    return c.json({ ok: true, payload: result });\n  });\n\n  authenticated.post('/api/heartbeat/trigger', strictRateLimitMiddleware, async (c) => {\n    let reason = 'manual';\n    try {\n      const body = await c.req.json();\n      if (body && typeof body === 'object' && typeof (body as { reason?: unknown }).reason === 'string') {\n        const r = (body as { reason: string }).reason.trim();\n        if (r) reason = r.slice(0, 120);\n      }\n    } catch {\n      /* empty or invalid body */\n    }\n    service.requestHeartbeatNow({ reason });\n    return c.json({ ok: true, payload: { scheduled: true } });\n  });\n\n  authenticated.get('/api/config', async (c) => {\n    const safeConfig = await buildSafeWebConfigPayload(service, { locale: localeFromRequest(c) });\n    return c.json({ ok: true, payload: { config: safeConfig } });\n  });\n\n  // PATCH /api/config — section patchers run sequentially against the live\n  // config object (mutate-in-place is intentional: the route handler reads\n  // `service.currentConfig` and rewrites it through `saveConfig`). Each\n  // patcher only touches the keys it owns and returns `{ ok: false }` with a\n  // 400 body when validation fails; we surface the first failure verbatim.\n  authenticated.patch('/api/config', strictRateLimitMiddleware, async (c) => {\n    const body = await c.req.json();\n    const config: Config = service.currentConfig as Config;\n\n    applyAgentsPatch(config, body);\n    applyChannelsPatch(config, body);\n\n    const gatewayResult = applyGatewayPatch(config, body);\n    if (gatewayResult.ok === false) {\n      return c.json({ ok: false, error: gatewayResult.error }, gatewayResult.status as 400 | 500);\n    }\n\n    const miscResult = await applyMiscPatch(config, body);\n    if (miscResult.ok === false) {\n      return c.json({ ok: false, error: miscResult.error }, miscResult.status as 400 | 500);\n    }\n\n    const finalGwCheck = validateGatewayAfterPatch(config, body);\n    if (finalGwCheck.ok === false) {\n      return c.json({ ok: false, error: finalGwCheck.error }, finalGwCheck.status as 400 | 500);\n    }\n\n    const result = await service.saveConfig(config);\n    if (!result.saved) {\n      return c.json({ ok: false, error: result.error }, 500);\n    }\n\n    if (body.gateway?.heartbeat !== undefined && typeof body.gateway.heartbeat === 'object') {\n      service.reloadHeartbeatFromCurrentConfig();\n    }\n\n    const safeConfig = await buildSafeWebConfigPayload(service, { locale: localeFromRequest(c) });\n    return c.json({ ok: true, payload: { config: safeConfig } });\n  });\n\n  const revealGatewayAuthSecretHandler = async (c: Context) => {\n    const field = await resolveRevealGatewayAuthField(c);\n    if (!field) {\n      return c.json({ ok: false, error: { message: 'field must be token or password' } }, 400);\n    }\n    const config = service.currentConfig as Config;\n    const secret =\n      field === 'token'\n        ? config.gateway?.auth?.token?.trim() || null\n        : config.gateway?.auth?.password?.trim() || null;\n    return c.json({\n      ok: true,\n      payload: { field, secret, source: secret ? ('config' as const) : ('none' as const) },\n    });\n  };\n\n  /**\n   * POST /api/gateway/reveal-auth-secret/:field — preferred; no JSON body required.\n   * POST /api/gateway/reveal-auth-secret — legacy JSON body `{ field: \"token\" | \"password\" }`.\n   */\n  authenticated.post(\n    '/api/gateway/reveal-auth-secret/:field',\n    strictRateLimitMiddleware,\n    revealGatewayAuthSecretHandler,\n  );\n  authenticated.post('/api/gateway/reveal-auth-secret', strictRateLimitMiddleware, revealGatewayAuthSecretHandler);\n\n  /** POST /api/agents/browser/reveal-cloud-api-key — plaintext browser cloud apiKey from config only. */\n  authenticated.post('/api/agents/browser/reveal-cloud-api-key', strictRateLimitMiddleware, async (c) => {\n    const config = service.currentConfig as Config;\n    const apiKey = config.agents?.defaults?.browser?.cloud?.apiKey?.trim() || null;\n    return c.json({\n      ok: true,\n      payload: { apiKey, source: apiKey ? ('config' as const) : ('none' as const) },\n    });\n  });\n\n  /** POST /api/tools/web/reveal-search-api-key — plaintext search provider apiKey by index. */\n  authenticated.post('/api/tools/web/reveal-search-api-key', strictRateLimitMiddleware, async (c) => {\n    let index = -1;\n    try {\n      const body = await c.req.json();\n      if (body && typeof body === 'object' && typeof (body as { index?: unknown }).index === 'number') {\n        index = Math.floor((body as { index: number }).index);\n      }\n    } catch {\n      index = -1;\n    }\n    const providers = service.currentConfig.tools?.web?.search?.providers ?? [];\n    if (index < 0 || index >= providers.length) {\n      return c.json({ ok: false, error: { message: 'Invalid provider index' } }, 400);\n    }\n    const apiKey = providers[index]?.apiKey?.trim() || null;\n    return c.json({\n      ok: true,\n      payload: { index, apiKey, source: apiKey ? ('config' as const) : ('none' as const) },\n    });\n  });\n}\n\nfunction normalizeRevealGatewayAuthField(raw: unknown): 'token' | 'password' | null {\n  return raw === 'token' || raw === 'password' ? raw : null;\n}\n\nasync function resolveRevealGatewayAuthField(c: Context): Promise<'token' | 'password' | null> {\n  const fromPath = normalizeRevealGatewayAuthField(c.req.param('field'));\n  if (fromPath) return fromPath;\n\n  const fromQuery = normalizeRevealGatewayAuthField(c.req.query('field'));\n  if (fromQuery) return fromQuery;\n\n  try {\n    const body = await c.req.json();\n    return normalizeRevealGatewayAuthField(\n      body && typeof body === 'object' && !Array.isArray(body)\n        ? (body as { field?: unknown }).field\n        : undefined,\n    );\n  } catch {\n    return null;\n  }\n}\n"],"mappings":";;;;;;;AAaA,SAAS,kBAAkB,GAAuH;AAChJ,QAAO,EAAE,IAAI,MAAM,SAAS,IAAI,EAAE,IAAI,OAAO,gBAAgB,IAAI,EAAE,IAAI,OAAO,kBAAkB,EAAE,MAAM,IAAI,CAAC;;AAG/G,SAAgB,qBAAqB,eAAqB,MAAoC;CAC5F,MAAM,EAAE,SAAS,8BAA8B;AAE/C,eAAc,KAAK,sBAAsB,2BAA2B,OAAO,MAAM;EAC/E,MAAM,SAAS,MAAM,QAAQ,cAAc;AAC3C,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;GAAQ,CAAC;GAC5C;AAEF,eAAc,KAAK,0BAA0B,2BAA2B,OAAO,MAAM;EACnF,IAAI,SAAS;AACb,MAAI;GACF,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM;AAC/B,OAAI,QAAQ,OAAO,SAAS,YAAY,OAAQ,KAA8B,WAAW,UAAU;IACjG,MAAM,IAAK,KAA4B,OAAO,MAAM;AACpD,QAAI,EAAG,UAAS,EAAE,MAAM,GAAG,IAAI;;UAE3B;AAGR,UAAQ,oBAAoB,EAAE,QAAQ,CAAC;AACvC,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,WAAW,MAAM;GAAE,CAAC;GACzD;AAEF,eAAc,IAAI,eAAe,OAAO,MAAM;EAC5C,MAAM,aAAa,MAAM,0BAA0B,SAAS,EAAE,QAAQ,kBAAkB,EAAE,EAAE,CAAC;AAC7F,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,QAAQ,YAAY;GAAE,CAAC;GAC5D;AAOF,eAAc,MAAM,eAAe,2BAA2B,OAAO,MAAM;EACzE,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM;EAC/B,MAAM,SAAiB,QAAQ;AAE/B,mBAAiB,QAAQ,KAAK;AAC9B,qBAAmB,QAAQ,KAAK;EAEhC,MAAM,gBAAgB,kBAAkB,QAAQ,KAAK;AACrD,MAAI,cAAc,OAAO,MACvB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,cAAc;GAAO,EAAE,cAAc,OAAoB;EAG7F,MAAM,aAAa,MAAM,eAAe,QAAQ,KAAK;AACrD,MAAI,WAAW,OAAO,MACpB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,WAAW;GAAO,EAAE,WAAW,OAAoB;EAGvF,MAAM,eAAe,0BAA0B,QAAQ,KAAK;AAC5D,MAAI,aAAa,OAAO,MACtB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,aAAa;GAAO,EAAE,aAAa,OAAoB;EAG3F,MAAM,SAAS,MAAM,QAAQ,WAAW,OAAO;AAC/C,MAAI,CAAC,OAAO,MACV,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,OAAO;GAAO,EAAE,IAAI;AAGxD,MAAI,KAAK,SAAS,cAAc,KAAA,KAAa,OAAO,KAAK,QAAQ,cAAc,SAC7E,SAAQ,kCAAkC;EAG5C,MAAM,aAAa,MAAM,0BAA0B,SAAS,EAAE,QAAQ,kBAAkB,EAAE,EAAE,CAAC;AAC7F,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,QAAQ,YAAY;GAAE,CAAC;GAC5D;CAEF,MAAM,iCAAiC,OAAO,MAAe;EAC3D,MAAM,QAAQ,MAAM,8BAA8B,EAAE;AACpD,MAAI,CAAC,MACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,mCAAmC;GAAE,EAAE,IAAI;EAE1F,MAAM,SAAS,QAAQ;EACvB,MAAM,SACJ,UAAU,UACN,OAAO,SAAS,MAAM,OAAO,MAAM,IAAI,OACvC,OAAO,SAAS,MAAM,UAAU,MAAM,IAAI;AAChD,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IAAE;IAAO;IAAQ,QAAQ,SAAU,WAAsB;IAAkB;GACrF,CAAC;;;;;;AAOJ,eAAc,KACZ,0CACA,2BACA,+BACD;AACD,eAAc,KAAK,mCAAmC,2BAA2B,+BAA+B;;AAGhH,eAAc,KAAK,4CAA4C,2BAA2B,OAAO,MAAM;EAErG,MAAM,SADS,QAAQ,cACD,QAAQ,UAAU,SAAS,OAAO,QAAQ,MAAM,IAAI;AAC1E,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IAAE;IAAQ,QAAQ,SAAU,WAAsB;IAAkB;GAC9E,CAAC;GACF;;AAGF,eAAc,KAAK,wCAAwC,2BAA2B,OAAO,MAAM;EACjG,IAAI,QAAQ;AACZ,MAAI;GACF,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM;AAC/B,OAAI,QAAQ,OAAO,SAAS,YAAY,OAAQ,KAA6B,UAAU,SACrF,SAAQ,KAAK,MAAO,KAA2B,MAAM;UAEjD;AACN,WAAQ;;EAEV,MAAM,YAAY,QAAQ,cAAc,OAAO,KAAK,QAAQ,aAAa,EAAE;AAC3E,MAAI,QAAQ,KAAK,SAAS,UAAU,OAClC,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,0BAA0B;GAAE,EAAE,IAAI;EAEjF,MAAM,SAAS,UAAU,QAAQ,QAAQ,MAAM,IAAI;AACnD,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IAAE;IAAO;IAAQ,QAAQ,SAAU,WAAsB;IAAkB;GACrF,CAAC;GACF;;AAGJ,SAAS,gCAAgC,KAA2C;AAClF,QAAO,QAAQ,WAAW,QAAQ,aAAa,MAAM;;AAGvD,eAAe,8BAA8B,GAAkD;CAC7F,MAAM,WAAW,gCAAgC,EAAE,IAAI,MAAM,QAAQ,CAAC;AACtE,KAAI,SAAU,QAAO;CAErB,MAAM,YAAY,gCAAgC,EAAE,IAAI,MAAM,QAAQ,CAAC;AACvE,KAAI,UAAW,QAAO;AAEtB,KAAI;EACF,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM;AAC/B,SAAO,gCACL,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,GACnD,KAA6B,QAC9B,KAAA,EACL;SACK;AACN,SAAO"}

package/dist/src/gateway/hono/routes/dreaming.js

@@ -1,9 +1,9 @@
 import { DREAMING_CRON_NAME, DREAMING_DIR_RELATIVE, DREAMING_LAST_RUN_RELATIVE, DREAMING_LIGHT_CRON_NAME, DREAMING_LIGHT_SWEEP_TOKEN, DREAMING_REM_CRON_NAME, DREAMING_REM_SWEEP_TOKEN, DREAMING_SWEEP_TOKEN, SHORT_TERM_PROMOTION_LOCK_RELATIVE, SHORT_TERM_RECALL_STORE_RELATIVE } from "../../../agent/memory/dreaming/constants.js";
 import { loadDreamingStore, saveDreamingStore } from "../../../agent/memory/dreaming/short-term-store.js";
 import { resolveDreamingConfig } from "../../../agent/memory/dreaming/config.js";
-import { getWorkspacePath } from "../../../config/workspace-path-helpers.js";
 import { parseDreamingLastRunFile } from "../../../agent/memory/dreaming/last-run.js";
 import { readDreamingEvents } from "../../../agent/memory/dreaming/events.js";
+import { getWorkspacePath } from "../../../config/workspace-path-helpers.js";
 import { previewDreamingDeepPromotion } from "../../../agent/memory/dreaming/preview.js";
 import fs from "node:fs/promises";
 import path from "node:path";

package/dist/src/gateway/hono/routes/lazy-bundles.js

@@ -117,7 +117,11 @@ const AUTHENTICATED_LAZY_ROUTE_BUNDLES = [
 	},
 	{
 		id: "commands-skills",
-		match: (path) => startsWithAny(path, ["/api/commands", "/api/skills"]),
+		match: (path) => startsWithAny(path, [
+			"/api/commands",
+			"/api/skills",
+			"/api/chat/skills"
+		]),
 		load: async () => {
 			const { registerCommandsSkillsRoutes } = await import("./commands-skills.js");
 			return { register: registerCommandsSkillsRoutes };
@@ -235,6 +239,14 @@ const AUTHENTICATED_LAZY_ROUTE_BUNDLES = [
 			return { register: registerConnectorRoutes };
 		}
 	},
+	{
+		id: "tui",
+		match: (path) => startsWithAny(path, ["/api/tui"]),
+		load: async () => {
+			const { registerTuiRoutes } = await import("./tui.js");
+			return { register: registerTuiRoutes };
+		}
+	},
 	{
 		id: "mcp",
 		match: (path) => startsWithAny(path, ["/api/mcp"]),

package/dist/src/gateway/hono/routes/lazy-bundles.js.map

@@ -1 +1 @@
-{"version":3,"file":"lazy-bundles.js","names":[],"sources":["../../../../../src/gateway/hono/routes/lazy-bundles.ts"],"sourcesContent":["import type { Hono } from 'hono';\n\nimport type { GatewayService } from '../../service.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\n\nexport type AuthenticatedLazyRouteBundle = {\n  id: string;\n  match: (path: string) => boolean;\n  load: () => Promise<{ register: (authenticated: Hono, deps: AuthenticatedRouteDeps) => void }>;\n};\n\nexport type AppLazyRouteBundle = {\n  id: string;\n  prefixes: readonly string[];\n  match: (path: string) => boolean;\n  load: () => Promise<{\n    registerOnApp: (app: Hono, service: GatewayService) => void;\n  }>;\n};\n\nfunction startsWithAny(path: string, prefixes: readonly string[]): boolean {\n  return prefixes.some((prefix) => path === prefix || path.startsWith(`${prefix}/`));\n}\n\nexport const AUTHENTICATED_LAZY_ROUTE_BUNDLES: readonly AuthenticatedLazyRouteBundle[] = [\n  {\n    id: 'media',\n    match: (path) => startsWithAny(path, ['/api/media']),\n    load: async () => {\n      const { registerMediaRoutes } = await import('./media.js');\n      return { register: registerMediaRoutes };\n    },\n  },\n  {\n    id: 'workspace',\n    match: (path) => startsWithAny(path, ['/api/workspace']),\n    load: async () => {\n      const { registerWorkspaceRoutes } = await import('./workspace.js');\n      return { register: registerWorkspaceRoutes };\n    },\n  },\n  {\n    id: 'host-fs',\n    match: (path) => startsWithAny(path, ['/api/host/fs']),\n    load: async () => {\n      const { registerHostFsRoutes } = await import('./host-fs.js');\n      return { register: registerHostFsRoutes };\n    },\n  },\n  {\n    id: 'channels',\n    match: (path) => startsWithAny(path, ['/api/channels']),\n    load: async () => {\n      const { registerChannelRoutes } = await import('./channels.js');\n      return { register: registerChannelRoutes };\n    },\n  },\n  {\n    id: 'browser-install',\n    match: (path) =>\n      path === '/api/browser/playwright/install/stream' ||\n      path === '/api/browser/cloakbrowser/install/stream',\n    load: async () => {\n      const { registerBrowserInstallRoutes } = await import('./browser-install.js');\n      return { register: registerBrowserInstallRoutes };\n    },\n  },\n  {\n    id: 'browser',\n    // `browser-install` above already matched the SSE install streams; this\n    // catches the remaining /api/browser/* handlers (extension, cdp,\n    // cloakbrowser doctor/launch/install, playwright doctor/install, cloud).\n    match: (path) => startsWithAny(path, ['/api/browser']),\n    load: async () => {\n      const { registerBrowserRoutes } = await import('./browser.js');\n      return { register: registerBrowserRoutes };\n    },\n  },\n  {\n    id: 'config',\n    match: (path) =>\n      startsWithAny(path, [\n        '/api/config',\n        '/api/heartbeat/trigger',\n        // Secret reveal handlers live in config routes but use /api/gateway and\n        // /api/tools paths; without these prefixes the extension-gateway bundle\n        // matches first and returns 404 (no handler for multi-segment paths).\n        '/api/gateway/reveal-auth-secret',\n        '/api/tools/web/reveal-search-api-key',\n      ]),\n    load: async () => {\n      const { registerConfigRoutes } = await import('./config.js');\n      return { register: registerConfigRoutes };\n    },\n  },\n  {\n    id: 'doctor',\n    match: (path) => startsWithAny(path, ['/api/doctor']),\n    load: async () => {\n      const { registerDoctorRoutes } = await import('./doctor.js');\n      return { register: registerDoctorRoutes };\n    },\n  },\n  {\n    id: 'dreaming',\n    match: (path) => startsWithAny(path, ['/api/dreaming']),\n    load: async () => {\n      const { registerDreamingRoutes } = await import('./dreaming.js');\n      return { register: registerDreamingRoutes };\n    },\n  },\n  {\n    id: 'agents',\n    match: (path) => startsWithAny(path, ['/api/agents', '/api/voice/models']),\n    load: async () => {\n      const { registerAgentsRoutes } = await import('./agents.js');\n      return { register: registerAgentsRoutes };\n    },\n  },\n  {\n    id: 'auth-registry-extensions',\n    match: (path) =>\n      startsWithAny(path, [\n        '/api/auth',\n        '/api/registry',\n        '/api/extensions',\n        '/api/context',\n        '/api/marketplace',\n      ]),\n    load: async () => {\n      const { registerAuthRegistryExtensionsRoutes } = await import('./auth-registry-extensions.js');\n      return { register: registerAuthRegistryExtensionsRoutes };\n    },\n  },\n  {\n    id: 'models',\n    match: (path) =>\n      startsWithAny(path, ['/api/models', '/api/models-json', '/api/providers', '/api/image']),\n    load: async () => {\n      const { registerModelsRoutes } = await import('./models.js');\n      return { register: registerModelsRoutes };\n    },\n  },\n  {\n    id: 'commands-skills',\n    match: (path) => startsWithAny(path, ['/api/commands', '/api/skills']),\n    load: async () => {\n      const { registerCommandsSkillsRoutes } = await import('./commands-skills.js');\n      return { register: registerCommandsSkillsRoutes };\n    },\n  },\n  {\n    id: 'cron',\n    match: (path) => startsWithAny(path, ['/api/cron']),\n    load: async () => {\n      const { registerCronRoutes } = await import('./cron.js');\n      return { register: registerCronRoutes };\n    },\n  },\n  {\n    id: 'goals',\n    match: (path) => startsWithAny(path, ['/api/goals']),\n    load: async () => {\n      const { registerGoalsRoutes } = await import('./goals.js');\n      return { register: registerGoalsRoutes };\n    },\n  },\n  {\n    id: 'notes',\n    match: (path) => startsWithAny(path, ['/api/notes']),\n    load: async () => {\n      const { registerNotesRoutes } = await import('./notes.js');\n      return { register: registerNotesRoutes };\n    },\n  },\n  {\n    id: 'home',\n    match: (path) => startsWithAny(path, ['/api/home']),\n    load: async () => {\n      const { registerHomeRoutes } = await import('./home.js');\n      return { register: registerHomeRoutes };\n    },\n  },\n  {\n    id: 'workflows',\n    match: (path) => startsWithAny(path, ['/api/workflows']),\n    load: async () => {\n      const { registerWorkflowRoutes } = await import('./workflows.js');\n      return { register: registerWorkflowRoutes };\n    },\n  },\n  {\n    id: 'logs',\n    match: (path) => startsWithAny(path, ['/api/logs']),\n    load: async () => {\n      const { registerLogsRoutes } = await import('./logs.js');\n      return { register: registerLogsRoutes };\n    },\n  },\n  {\n    id: 'shares',\n    match: (path) => startsWithAny(path, ['/api/shares']),\n    load: async () => {\n      const { registerShareRoutes } = await import('./shares.js');\n      return { register: registerShareRoutes };\n    },\n  },\n  {\n    id: 'site-shares',\n    match: (path) => startsWithAny(path, ['/api/site-shares']),\n    load: async () => {\n      const { registerSiteShareRoutes } = await import('./site-shares.js');\n      return { register: registerSiteShareRoutes };\n    },\n  },\n  {\n    id: 'tunnel',\n    match: (path) => startsWithAny(path, ['/api/tunnel']),\n    load: async () => {\n      const { registerTunnelRoutes } = await import('./tunnel.js');\n      return { register: registerTunnelRoutes };\n    },\n  },\n  {\n    id: 'exposure',\n    match: (path) => startsWithAny(path, ['/api/exposure']),\n    load: async () => {\n      const { registerExposureRoutes } = await import('./exposure.js');\n      return { register: registerExposureRoutes };\n    },\n  },\n  {\n    id: 'extension-gateway',\n    match: (path) => startsWithAny(path, ['/api/gateway']),\n    load: async () => {\n      const { registerExtensionGatewayRoutes } = await import('./extension-gateway.js');\n      return { register: registerExtensionGatewayRoutes };\n    },\n  },\n  {\n    id: 'update',\n    match: (path) => startsWithAny(path, ['/api/update']),\n    load: async () => {\n      const { registerUpdateRoutes } = await import('./update.js');\n      return { register: registerUpdateRoutes };\n    },\n  },\n  {\n    id: 'voice',\n    match: (path) => startsWithAny(path, ['/api/voice']) && path !== '/api/voice/models',\n    load: async () => {\n      const { registerVoiceRoutes } = await import('./voice.js');\n      return { register: registerVoiceRoutes };\n    },\n  },\n  {\n    id: 'connectors',\n    match: (path) => startsWithAny(path, ['/api/connectors']),\n    load: async () => {\n      const { registerConnectorRoutes } = await import('./connectors.js');\n      return { register: registerConnectorRoutes };\n    },\n  },\n  {\n    id: 'mcp',\n    match: (path) => startsWithAny(path, ['/api/mcp']),\n    load: async () => {\n      const { registerMcpRoutes } = await import('./mcp.js');\n      return { register: registerMcpRoutes };\n    },\n  },\n];\n\nexport const APP_LAZY_ROUTE_BUNDLES: readonly AppLazyRouteBundle[] = [\n  {\n    id: 'shares-public',\n    prefixes: ['/s'],\n    match: (path) => startsWithAny(path, ['/s']),\n    load: async () => {\n      const { registerSharePublicRoutes } = await import('./shares.js');\n      return { registerOnApp: registerSharePublicRoutes };\n    },\n  },\n  {\n    id: 'tunnel-public',\n    prefixes: [\n      '/api/tunnel/pair/ping',\n      '/api/tunnel/pair/validate-url',\n      '/api/tunnel/exchange-token',\n    ],\n    match: (path) =>\n      path === '/api/tunnel/exchange-token' ||\n      path === '/api/tunnel/pair/ping' ||\n      path === '/api/tunnel/pair/validate-url',\n    load: async () => {\n      const { registerTunnelPublicRoutes } = await import('./tunnel.js');\n      return { registerOnApp: registerTunnelPublicRoutes };\n    },\n  },\n];\n\nexport function findAuthenticatedLazyRouteBundle(path: string): AuthenticatedLazyRouteBundle | undefined {\n  return AUTHENTICATED_LAZY_ROUTE_BUNDLES.find((bundle) => bundle.match(path));\n}\n"],"mappings":";AAoBA,SAAS,cAAc,MAAc,UAAsC;AACzE,QAAO,SAAS,MAAM,WAAW,SAAS,UAAU,KAAK,WAAW,GAAG,OAAO,GAAG,CAAC;;AAGpF,MAAa,mCAA4E;CACvF;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,aAAa,CAAC;EACpD,MAAM,YAAY;GAChB,MAAM,EAAE,wBAAwB,MAAM,OAAO;AAC7C,UAAO,EAAE,UAAU,qBAAqB;;EAE3C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,iBAAiB,CAAC;EACxD,MAAM,YAAY;GAChB,MAAM,EAAE,4BAA4B,MAAM,OAAO;AACjD,UAAO,EAAE,UAAU,yBAAyB;;EAE/C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,eAAe,CAAC;EACtD,MAAM,YAAY;GAChB,MAAM,EAAE,yBAAyB,MAAM,OAAO;AAC9C,UAAO,EAAE,UAAU,sBAAsB;;EAE5C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,gBAAgB,CAAC;EACvD,MAAM,YAAY;GAChB,MAAM,EAAE,0BAA0B,MAAM,OAAO;AAC/C,UAAO,EAAE,UAAU,uBAAuB;;EAE7C;CACD;EACE,IAAI;EACJ,QAAQ,SACN,SAAS,4CACT,SAAS;EACX,MAAM,YAAY;GAChB,MAAM,EAAE,iCAAiC,MAAM,OAAO;AACtD,UAAO,EAAE,UAAU,8BAA8B;;EAEpD;CACD;EACE,IAAI;EAIJ,QAAQ,SAAS,cAAc,MAAM,CAAC,eAAe,CAAC;EACtD,MAAM,YAAY;GAChB,MAAM,EAAE,0BAA0B,MAAM,OAAO;AAC/C,UAAO,EAAE,UAAU,uBAAuB;;EAE7C;CACD;EACE,IAAI;EACJ,QAAQ,SACN,cAAc,MAAM;GAClB;GACA;GAIA;GACA;GACD,CAAC;EACJ,MAAM,YAAY;GAChB,MAAM,EAAE,yBAAyB,MAAM,OAAO;AAC9C,UAAO,EAAE,UAAU,sBAAsB;;EAE5C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,cAAc,CAAC;EACrD,MAAM,YAAY;GAChB,MAAM,EAAE,yBAAyB,MAAM,OAAO;AAC9C,UAAO,EAAE,UAAU,sBAAsB;;EAE5C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,gBAAgB,CAAC;EACvD,MAAM,YAAY;GAChB,MAAM,EAAE,2BAA2B,MAAM,OAAO;AAChD,UAAO,EAAE,UAAU,wBAAwB;;EAE9C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,eAAe,oBAAoB,CAAC;EAC1E,MAAM,YAAY;GAChB,MAAM,EAAE,yBAAyB,MAAM,OAAO;AAC9C,UAAO,EAAE,UAAU,sBAAsB;;EAE5C;CACD;EACE,IAAI;EACJ,QAAQ,SACN,cAAc,MAAM;GAClB;GACA;GACA;GACA;GACA;GACD,CAAC;EACJ,MAAM,YAAY;GAChB,MAAM,EAAE,yCAAyC,MAAM,OAAO;AAC9D,UAAO,EAAE,UAAU,sCAAsC;;EAE5D;CACD;EACE,IAAI;EACJ,QAAQ,SACN,cAAc,MAAM;GAAC;GAAe;GAAoB;GAAkB;GAAa,CAAC;EAC1F,MAAM,YAAY;GAChB,MAAM,EAAE,yBAAyB,MAAM,OAAO;AAC9C,UAAO,EAAE,UAAU,sBAAsB;;EAE5C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,iBAAiB,cAAc,CAAC;EACtE,MAAM,YAAY;GAChB,MAAM,EAAE,iCAAiC,MAAM,OAAO;AACtD,UAAO,EAAE,UAAU,8BAA8B;;EAEpD;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,YAAY,CAAC;EACnD,MAAM,YAAY;GAChB,MAAM,EAAE,uBAAuB,MAAM,OAAO;AAC5C,UAAO,EAAE,UAAU,oBAAoB;;EAE1C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,aAAa,CAAC;EACpD,MAAM,YAAY;GAChB,MAAM,EAAE,wBAAwB,MAAM,OAAO;AAC7C,UAAO,EAAE,UAAU,qBAAqB;;EAE3C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,aAAa,CAAC;EACpD,MAAM,YAAY;GAChB,MAAM,EAAE,wBAAwB,MAAM,OAAO;AAC7C,UAAO,EAAE,UAAU,qBAAqB;;EAE3C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,YAAY,CAAC;EACnD,MAAM,YAAY;GAChB,MAAM,EAAE,uBAAuB,MAAM,OAAO;AAC5C,UAAO,EAAE,UAAU,oBAAoB;;EAE1C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,iBAAiB,CAAC;EACxD,MAAM,YAAY;GAChB,MAAM,EAAE,2BAA2B,MAAM,OAAO;AAChD,UAAO,EAAE,UAAU,wBAAwB;;EAE9C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,YAAY,CAAC;EACnD,MAAM,YAAY;GAChB,MAAM,EAAE,uBAAuB,MAAM,OAAO;AAC5C,UAAO,EAAE,UAAU,oBAAoB;;EAE1C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,cAAc,CAAC;EACrD,MAAM,YAAY;GAChB,MAAM,EAAE,wBAAwB,MAAM,OAAO;AAC7C,UAAO,EAAE,UAAU,qBAAqB;;EAE3C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,mBAAmB,CAAC;EAC1D,MAAM,YAAY;GAChB,MAAM,EAAE,4BAA4B,MAAM,OAAO;AACjD,UAAO,EAAE,UAAU,yBAAyB;;EAE/C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,cAAc,CAAC;EACrD,MAAM,YAAY;GAChB,MAAM,EAAE,yBAAyB,MAAM,OAAO;AAC9C,UAAO,EAAE,UAAU,sBAAsB;;EAE5C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,gBAAgB,CAAC;EACvD,MAAM,YAAY;GAChB,MAAM,EAAE,2BAA2B,MAAM,OAAO;AAChD,UAAO,EAAE,UAAU,wBAAwB;;EAE9C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,eAAe,CAAC;EACtD,MAAM,YAAY;GAChB,MAAM,EAAE,mCAAmC,MAAM,OAAO;AACxD,UAAO,EAAE,UAAU,gCAAgC;;EAEtD;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,cAAc,CAAC;EACrD,MAAM,YAAY;GAChB,MAAM,EAAE,yBAAyB,MAAM,OAAO;AAC9C,UAAO,EAAE,UAAU,sBAAsB;;EAE5C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,aAAa,CAAC,IAAI,SAAS;EACjE,MAAM,YAAY;GAChB,MAAM,EAAE,wBAAwB,MAAM,OAAO;AAC7C,UAAO,EAAE,UAAU,qBAAqB;;EAE3C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,kBAAkB,CAAC;EACzD,MAAM,YAAY;GAChB,MAAM,EAAE,4BAA4B,MAAM,OAAO;AACjD,UAAO,EAAE,UAAU,yBAAyB;;EAE/C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,WAAW,CAAC;EAClD,MAAM,YAAY;GAChB,MAAM,EAAE,sBAAsB,MAAM,OAAO;AAC3C,UAAO,EAAE,UAAU,mBAAmB;;EAEzC;CACF;AAED,MAAa,yBAAwD,CACnE;CACE,IAAI;CACJ,UAAU,CAAC,KAAK;CAChB,QAAQ,SAAS,cAAc,MAAM,CAAC,KAAK,CAAC;CAC5C,MAAM,YAAY;EAChB,MAAM,EAAE,8BAA8B,MAAM,OAAO;AACnD,SAAO,EAAE,eAAe,2BAA2B;;CAEtD,EACD;CACE,IAAI;CACJ,UAAU;EACR;EACA;EACA;EACD;CACD,QAAQ,SACN,SAAS,gCACT,SAAS,2BACT,SAAS;CACX,MAAM,YAAY;EAChB,MAAM,EAAE,+BAA+B,MAAM,OAAO;AACpD,SAAO,EAAE,eAAe,4BAA4B;;CAEvD,CACF;AAED,SAAgB,iCAAiC,MAAwD;AACvG,QAAO,iCAAiC,MAAM,WAAW,OAAO,MAAM,KAAK,CAAC"}
+{"version":3,"file":"lazy-bundles.js","names":[],"sources":["../../../../../src/gateway/hono/routes/lazy-bundles.ts"],"sourcesContent":["import type { Hono } from 'hono';\n\nimport type { GatewayService } from '../../service.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\n\nexport type AuthenticatedLazyRouteBundle = {\n  id: string;\n  match: (path: string) => boolean;\n  load: () => Promise<{ register: (authenticated: Hono, deps: AuthenticatedRouteDeps) => void }>;\n};\n\nexport type AppLazyRouteBundle = {\n  id: string;\n  prefixes: readonly string[];\n  match: (path: string) => boolean;\n  load: () => Promise<{\n    registerOnApp: (app: Hono, service: GatewayService) => void;\n  }>;\n};\n\nfunction startsWithAny(path: string, prefixes: readonly string[]): boolean {\n  return prefixes.some((prefix) => path === prefix || path.startsWith(`${prefix}/`));\n}\n\nexport const AUTHENTICATED_LAZY_ROUTE_BUNDLES: readonly AuthenticatedLazyRouteBundle[] = [\n  {\n    id: 'media',\n    match: (path) => startsWithAny(path, ['/api/media']),\n    load: async () => {\n      const { registerMediaRoutes } = await import('./media.js');\n      return { register: registerMediaRoutes };\n    },\n  },\n  {\n    id: 'workspace',\n    match: (path) => startsWithAny(path, ['/api/workspace']),\n    load: async () => {\n      const { registerWorkspaceRoutes } = await import('./workspace.js');\n      return { register: registerWorkspaceRoutes };\n    },\n  },\n  {\n    id: 'host-fs',\n    match: (path) => startsWithAny(path, ['/api/host/fs']),\n    load: async () => {\n      const { registerHostFsRoutes } = await import('./host-fs.js');\n      return { register: registerHostFsRoutes };\n    },\n  },\n  {\n    id: 'channels',\n    match: (path) => startsWithAny(path, ['/api/channels']),\n    load: async () => {\n      const { registerChannelRoutes } = await import('./channels.js');\n      return { register: registerChannelRoutes };\n    },\n  },\n  {\n    id: 'browser-install',\n    match: (path) =>\n      path === '/api/browser/playwright/install/stream' ||\n      path === '/api/browser/cloakbrowser/install/stream',\n    load: async () => {\n      const { registerBrowserInstallRoutes } = await import('./browser-install.js');\n      return { register: registerBrowserInstallRoutes };\n    },\n  },\n  {\n    id: 'browser',\n    // `browser-install` above already matched the SSE install streams; this\n    // catches the remaining /api/browser/* handlers (extension, cdp,\n    // cloakbrowser doctor/launch/install, playwright doctor/install, cloud).\n    match: (path) => startsWithAny(path, ['/api/browser']),\n    load: async () => {\n      const { registerBrowserRoutes } = await import('./browser.js');\n      return { register: registerBrowserRoutes };\n    },\n  },\n  {\n    id: 'config',\n    match: (path) =>\n      startsWithAny(path, [\n        '/api/config',\n        '/api/heartbeat/trigger',\n        // Secret reveal handlers live in config routes but use /api/gateway and\n        // /api/tools paths; without these prefixes the extension-gateway bundle\n        // matches first and returns 404 (no handler for multi-segment paths).\n        '/api/gateway/reveal-auth-secret',\n        '/api/tools/web/reveal-search-api-key',\n      ]),\n    load: async () => {\n      const { registerConfigRoutes } = await import('./config.js');\n      return { register: registerConfigRoutes };\n    },\n  },\n  {\n    id: 'doctor',\n    match: (path) => startsWithAny(path, ['/api/doctor']),\n    load: async () => {\n      const { registerDoctorRoutes } = await import('./doctor.js');\n      return { register: registerDoctorRoutes };\n    },\n  },\n  {\n    id: 'dreaming',\n    match: (path) => startsWithAny(path, ['/api/dreaming']),\n    load: async () => {\n      const { registerDreamingRoutes } = await import('./dreaming.js');\n      return { register: registerDreamingRoutes };\n    },\n  },\n  {\n    id: 'agents',\n    match: (path) => startsWithAny(path, ['/api/agents', '/api/voice/models']),\n    load: async () => {\n      const { registerAgentsRoutes } = await import('./agents.js');\n      return { register: registerAgentsRoutes };\n    },\n  },\n  {\n    id: 'auth-registry-extensions',\n    match: (path) =>\n      startsWithAny(path, [\n        '/api/auth',\n        '/api/registry',\n        '/api/extensions',\n        '/api/context',\n        '/api/marketplace',\n      ]),\n    load: async () => {\n      const { registerAuthRegistryExtensionsRoutes } = await import('./auth-registry-extensions.js');\n      return { register: registerAuthRegistryExtensionsRoutes };\n    },\n  },\n  {\n    id: 'models',\n    match: (path) =>\n      startsWithAny(path, ['/api/models', '/api/models-json', '/api/providers', '/api/image']),\n    load: async () => {\n      const { registerModelsRoutes } = await import('./models.js');\n      return { register: registerModelsRoutes };\n    },\n  },\n  {\n    id: 'commands-skills',\n    match: (path) => startsWithAny(path, ['/api/commands', '/api/skills', '/api/chat/skills']),\n    load: async () => {\n      const { registerCommandsSkillsRoutes } = await import('./commands-skills.js');\n      return { register: registerCommandsSkillsRoutes };\n    },\n  },\n  {\n    id: 'cron',\n    match: (path) => startsWithAny(path, ['/api/cron']),\n    load: async () => {\n      const { registerCronRoutes } = await import('./cron.js');\n      return { register: registerCronRoutes };\n    },\n  },\n  {\n    id: 'goals',\n    match: (path) => startsWithAny(path, ['/api/goals']),\n    load: async () => {\n      const { registerGoalsRoutes } = await import('./goals.js');\n      return { register: registerGoalsRoutes };\n    },\n  },\n  {\n    id: 'notes',\n    match: (path) => startsWithAny(path, ['/api/notes']),\n    load: async () => {\n      const { registerNotesRoutes } = await import('./notes.js');\n      return { register: registerNotesRoutes };\n    },\n  },\n  {\n    id: 'home',\n    match: (path) => startsWithAny(path, ['/api/home']),\n    load: async () => {\n      const { registerHomeRoutes } = await import('./home.js');\n      return { register: registerHomeRoutes };\n    },\n  },\n  {\n    id: 'workflows',\n    match: (path) => startsWithAny(path, ['/api/workflows']),\n    load: async () => {\n      const { registerWorkflowRoutes } = await import('./workflows.js');\n      return { register: registerWorkflowRoutes };\n    },\n  },\n  {\n    id: 'logs',\n    match: (path) => startsWithAny(path, ['/api/logs']),\n    load: async () => {\n      const { registerLogsRoutes } = await import('./logs.js');\n      return { register: registerLogsRoutes };\n    },\n  },\n  {\n    id: 'shares',\n    match: (path) => startsWithAny(path, ['/api/shares']),\n    load: async () => {\n      const { registerShareRoutes } = await import('./shares.js');\n      return { register: registerShareRoutes };\n    },\n  },\n  {\n    id: 'site-shares',\n    match: (path) => startsWithAny(path, ['/api/site-shares']),\n    load: async () => {\n      const { registerSiteShareRoutes } = await import('./site-shares.js');\n      return { register: registerSiteShareRoutes };\n    },\n  },\n  {\n    id: 'tunnel',\n    match: (path) => startsWithAny(path, ['/api/tunnel']),\n    load: async () => {\n      const { registerTunnelRoutes } = await import('./tunnel.js');\n      return { register: registerTunnelRoutes };\n    },\n  },\n  {\n    id: 'exposure',\n    match: (path) => startsWithAny(path, ['/api/exposure']),\n    load: async () => {\n      const { registerExposureRoutes } = await import('./exposure.js');\n      return { register: registerExposureRoutes };\n    },\n  },\n  {\n    id: 'extension-gateway',\n    match: (path) => startsWithAny(path, ['/api/gateway']),\n    load: async () => {\n      const { registerExtensionGatewayRoutes } = await import('./extension-gateway.js');\n      return { register: registerExtensionGatewayRoutes };\n    },\n  },\n  {\n    id: 'update',\n    match: (path) => startsWithAny(path, ['/api/update']),\n    load: async () => {\n      const { registerUpdateRoutes } = await import('./update.js');\n      return { register: registerUpdateRoutes };\n    },\n  },\n  {\n    id: 'voice',\n    match: (path) => startsWithAny(path, ['/api/voice']) && path !== '/api/voice/models',\n    load: async () => {\n      const { registerVoiceRoutes } = await import('./voice.js');\n      return { register: registerVoiceRoutes };\n    },\n  },\n  {\n    id: 'connectors',\n    match: (path) => startsWithAny(path, ['/api/connectors']),\n    load: async () => {\n      const { registerConnectorRoutes } = await import('./connectors.js');\n      return { register: registerConnectorRoutes };\n    },\n  },\n  {\n    id: 'tui',\n    match: (path) => startsWithAny(path, ['/api/tui']),\n    load: async () => {\n      const { registerTuiRoutes } = await import('./tui.js');\n      return { register: registerTuiRoutes };\n    },\n  },\n  {\n    id: 'mcp',\n    match: (path) => startsWithAny(path, ['/api/mcp']),\n    load: async () => {\n      const { registerMcpRoutes } = await import('./mcp.js');\n      return { register: registerMcpRoutes };\n    },\n  },\n];\n\nexport const APP_LAZY_ROUTE_BUNDLES: readonly AppLazyRouteBundle[] = [\n  {\n    id: 'shares-public',\n    prefixes: ['/s'],\n    match: (path) => startsWithAny(path, ['/s']),\n    load: async () => {\n      const { registerSharePublicRoutes } = await import('./shares.js');\n      return { registerOnApp: registerSharePublicRoutes };\n    },\n  },\n  {\n    id: 'tunnel-public',\n    prefixes: [\n      '/api/tunnel/pair/ping',\n      '/api/tunnel/pair/validate-url',\n      '/api/tunnel/exchange-token',\n    ],\n    match: (path) =>\n      path === '/api/tunnel/exchange-token' ||\n      path === '/api/tunnel/pair/ping' ||\n      path === '/api/tunnel/pair/validate-url',\n    load: async () => {\n      const { registerTunnelPublicRoutes } = await import('./tunnel.js');\n      return { registerOnApp: registerTunnelPublicRoutes };\n    },\n  },\n];\n\nexport function findAuthenticatedLazyRouteBundle(path: string): AuthenticatedLazyRouteBundle | undefined {\n  return AUTHENTICATED_LAZY_ROUTE_BUNDLES.find((bundle) => bundle.match(path));\n}\n"],"mappings":";AAoBA,SAAS,cAAc,MAAc,UAAsC;AACzE,QAAO,SAAS,MAAM,WAAW,SAAS,UAAU,KAAK,WAAW,GAAG,OAAO,GAAG,CAAC;;AAGpF,MAAa,mCAA4E;CACvF;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,aAAa,CAAC;EACpD,MAAM,YAAY;GAChB,MAAM,EAAE,wBAAwB,MAAM,OAAO;AAC7C,UAAO,EAAE,UAAU,qBAAqB;;EAE3C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,iBAAiB,CAAC;EACxD,MAAM,YAAY;GAChB,MAAM,EAAE,4BAA4B,MAAM,OAAO;AACjD,UAAO,EAAE,UAAU,yBAAyB;;EAE/C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,eAAe,CAAC;EACtD,MAAM,YAAY;GAChB,MAAM,EAAE,yBAAyB,MAAM,OAAO;AAC9C,UAAO,EAAE,UAAU,sBAAsB;;EAE5C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,gBAAgB,CAAC;EACvD,MAAM,YAAY;GAChB,MAAM,EAAE,0BAA0B,MAAM,OAAO;AAC/C,UAAO,EAAE,UAAU,uBAAuB;;EAE7C;CACD;EACE,IAAI;EACJ,QAAQ,SACN,SAAS,4CACT,SAAS;EACX,MAAM,YAAY;GAChB,MAAM,EAAE,iCAAiC,MAAM,OAAO;AACtD,UAAO,EAAE,UAAU,8BAA8B;;EAEpD;CACD;EACE,IAAI;EAIJ,QAAQ,SAAS,cAAc,MAAM,CAAC,eAAe,CAAC;EACtD,MAAM,YAAY;GAChB,MAAM,EAAE,0BAA0B,MAAM,OAAO;AAC/C,UAAO,EAAE,UAAU,uBAAuB;;EAE7C;CACD;EACE,IAAI;EACJ,QAAQ,SACN,cAAc,MAAM;GAClB;GACA;GAIA;GACA;GACD,CAAC;EACJ,MAAM,YAAY;GAChB,MAAM,EAAE,yBAAyB,MAAM,OAAO;AAC9C,UAAO,EAAE,UAAU,sBAAsB;;EAE5C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,cAAc,CAAC;EACrD,MAAM,YAAY;GAChB,MAAM,EAAE,yBAAyB,MAAM,OAAO;AAC9C,UAAO,EAAE,UAAU,sBAAsB;;EAE5C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,gBAAgB,CAAC;EACvD,MAAM,YAAY;GAChB,MAAM,EAAE,2BAA2B,MAAM,OAAO;AAChD,UAAO,EAAE,UAAU,wBAAwB;;EAE9C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,eAAe,oBAAoB,CAAC;EAC1E,MAAM,YAAY;GAChB,MAAM,EAAE,yBAAyB,MAAM,OAAO;AAC9C,UAAO,EAAE,UAAU,sBAAsB;;EAE5C;CACD;EACE,IAAI;EACJ,QAAQ,SACN,cAAc,MAAM;GAClB;GACA;GACA;GACA;GACA;GACD,CAAC;EACJ,MAAM,YAAY;GAChB,MAAM,EAAE,yCAAyC,MAAM,OAAO;AAC9D,UAAO,EAAE,UAAU,sCAAsC;;EAE5D;CACD;EACE,IAAI;EACJ,QAAQ,SACN,cAAc,MAAM;GAAC;GAAe;GAAoB;GAAkB;GAAa,CAAC;EAC1F,MAAM,YAAY;GAChB,MAAM,EAAE,yBAAyB,MAAM,OAAO;AAC9C,UAAO,EAAE,UAAU,sBAAsB;;EAE5C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM;GAAC;GAAiB;GAAe;GAAmB,CAAC;EAC1F,MAAM,YAAY;GAChB,MAAM,EAAE,iCAAiC,MAAM,OAAO;AACtD,UAAO,EAAE,UAAU,8BAA8B;;EAEpD;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,YAAY,CAAC;EACnD,MAAM,YAAY;GAChB,MAAM,EAAE,uBAAuB,MAAM,OAAO;AAC5C,UAAO,EAAE,UAAU,oBAAoB;;EAE1C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,aAAa,CAAC;EACpD,MAAM,YAAY;GAChB,MAAM,EAAE,wBAAwB,MAAM,OAAO;AAC7C,UAAO,EAAE,UAAU,qBAAqB;;EAE3C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,aAAa,CAAC;EACpD,MAAM,YAAY;GAChB,MAAM,EAAE,wBAAwB,MAAM,OAAO;AAC7C,UAAO,EAAE,UAAU,qBAAqB;;EAE3C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,YAAY,CAAC;EACnD,MAAM,YAAY;GAChB,MAAM,EAAE,uBAAuB,MAAM,OAAO;AAC5C,UAAO,EAAE,UAAU,oBAAoB;;EAE1C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,iBAAiB,CAAC;EACxD,MAAM,YAAY;GAChB,MAAM,EAAE,2BAA2B,MAAM,OAAO;AAChD,UAAO,EAAE,UAAU,wBAAwB;;EAE9C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,YAAY,CAAC;EACnD,MAAM,YAAY;GAChB,MAAM,EAAE,uBAAuB,MAAM,OAAO;AAC5C,UAAO,EAAE,UAAU,oBAAoB;;EAE1C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,cAAc,CAAC;EACrD,MAAM,YAAY;GAChB,MAAM,EAAE,wBAAwB,MAAM,OAAO;AAC7C,UAAO,EAAE,UAAU,qBAAqB;;EAE3C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,mBAAmB,CAAC;EAC1D,MAAM,YAAY;GAChB,MAAM,EAAE,4BAA4B,MAAM,OAAO;AACjD,UAAO,EAAE,UAAU,yBAAyB;;EAE/C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,cAAc,CAAC;EACrD,MAAM,YAAY;GAChB,MAAM,EAAE,yBAAyB,MAAM,OAAO;AAC9C,UAAO,EAAE,UAAU,sBAAsB;;EAE5C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,gBAAgB,CAAC;EACvD,MAAM,YAAY;GAChB,MAAM,EAAE,2BAA2B,MAAM,OAAO;AAChD,UAAO,EAAE,UAAU,wBAAwB;;EAE9C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,eAAe,CAAC;EACtD,MAAM,YAAY;GAChB,MAAM,EAAE,mCAAmC,MAAM,OAAO;AACxD,UAAO,EAAE,UAAU,gCAAgC;;EAEtD;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,cAAc,CAAC;EACrD,MAAM,YAAY;GAChB,MAAM,EAAE,yBAAyB,MAAM,OAAO;AAC9C,UAAO,EAAE,UAAU,sBAAsB;;EAE5C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,aAAa,CAAC,IAAI,SAAS;EACjE,MAAM,YAAY;GAChB,MAAM,EAAE,wBAAwB,MAAM,OAAO;AAC7C,UAAO,EAAE,UAAU,qBAAqB;;EAE3C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,kBAAkB,CAAC;EACzD,MAAM,YAAY;GAChB,MAAM,EAAE,4BAA4B,MAAM,OAAO;AACjD,UAAO,EAAE,UAAU,yBAAyB;;EAE/C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,WAAW,CAAC;EAClD,MAAM,YAAY;GAChB,MAAM,EAAE,sBAAsB,MAAM,OAAO;AAC3C,UAAO,EAAE,UAAU,mBAAmB;;EAEzC;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,WAAW,CAAC;EAClD,MAAM,YAAY;GAChB,MAAM,EAAE,sBAAsB,MAAM,OAAO;AAC3C,UAAO,EAAE,UAAU,mBAAmB;;EAEzC;CACF;AAED,MAAa,yBAAwD,CACnE;CACE,IAAI;CACJ,UAAU,CAAC,KAAK;CAChB,QAAQ,SAAS,cAAc,MAAM,CAAC,KAAK,CAAC;CAC5C,MAAM,YAAY;EAChB,MAAM,EAAE,8BAA8B,MAAM,OAAO;AACnD,SAAO,EAAE,eAAe,2BAA2B;;CAEtD,EACD;CACE,IAAI;CACJ,UAAU;EACR;EACA;EACA;EACD;CACD,QAAQ,SACN,SAAS,gCACT,SAAS,2BACT,SAAS;CACX,MAAM,YAAY;EAChB,MAAM,EAAE,+BAA+B,MAAM,OAAO;AACpD,SAAO,EAAE,eAAe,4BAA4B;;CAEvD,CACF;AAED,SAAgB,iCAAiC,MAAwD;AACvG,QAAO,iCAAiC,MAAM,WAAW,OAAO,MAAM,KAAK,CAAC"}

package/dist/src/gateway/hono/routes/models.js

@@ -8,6 +8,7 @@ import { PROVIDER_META, getAllModels, getAllProviders, getAvailableModels, getPr
 import { getImageGenerationProvider } from "../../../agent/image/generation/provider-registry.js";
 import { listImageGenerationProvidersSummary } from "../../../agent/image/generation/runtime.js";
 import { respondStartupUnavailable } from "../lib/startup-unavailable.js";
+import { getProviderHint, getRecommendedModelsForProvider, isRecommendedModel, sortModelsForPicker, sortProvidersForPicker } from "../../../providers/presentation.js";
 //#region src/gateway/hono/routes/models.ts
 init_models_json();
 init_resolve_config_value();
@@ -53,6 +54,7 @@ function mapPluginModel(providerId, model, available) {
 			output: model.pricing?.output ?? 0
 		},
 		available,
+		recommended: isRecommendedModel(providerId, model.id),
 		source: "extension"
 	};
 }
@@ -126,7 +128,7 @@ function registerModelsRoutes(authenticated, deps) {
 	authenticated.get("/api/models", async (c) => {
 		if (!service.isGatewayReady()) return respondStartupUnavailable(c, "models.list");
 		const pluginRegistry = getProviderRegistry();
-		const models = (await getAvailableModels()).map((m) => ({
+		const models = sortModelsForPicker(await getAvailableModels()).map((m) => ({
 			id: `${m.provider}/${m.id}`,
 			name: m.name,
 			provider: m.provider,
@@ -134,6 +136,7 @@ function registerModelsRoutes(authenticated, deps) {
 			maxTokens: m.maxTokens ?? 4096,
 			reasoning: m.reasoning ?? false,
 			vision: m.input?.includes("image") ?? false,
+			recommended: isRecommendedModel(m.provider, m.id),
 			cost: {
 				input: m.cost?.input ?? 0,
 				output: m.cost?.output ?? 0
@@ -149,8 +152,9 @@ function registerModelsRoutes(authenticated, deps) {
 			}
 		}
 		models.sort((a, b) => {
+			if (a.recommended !== b.recommended) return a.recommended ? -1 : 1;
 			if (a.provider !== b.provider) return a.provider.localeCompare(b.provider);
-			return a.name.localeCompare(b.name);
+			return a.name.localeCompare(b.name, void 0, { sensitivity: "base" });
 		});
 		return c.json({
 			ok: true,
@@ -230,7 +234,7 @@ function registerModelsRoutes(authenticated, deps) {
 		const allModels = getAllModels();
 		const availableModels = await getAvailableModels();
 		const configured = new Set(availableModels.map((m) => `${m.provider}/${m.id}`));
-		const models = allModels.map((m) => ({
+		const models = sortModelsForPicker(allModels).map((m) => ({
 			id: `${m.provider}/${m.id}`,
 			name: m.name,
 			provider: m.provider,
@@ -238,6 +242,7 @@ function registerModelsRoutes(authenticated, deps) {
 			maxTokens: m.maxTokens ?? 4096,
 			reasoning: m.reasoning ?? false,
 			vision: m.input?.includes("image") ?? false,
+			recommended: isRecommendedModel(m.provider, m.id),
 			cost: {
 				input: m.cost?.input ?? 0,
 				output: m.cost?.output ?? 0
@@ -254,8 +259,9 @@ function registerModelsRoutes(authenticated, deps) {
 			}
 		}
 		models.sort((a, b) => {
+			if (a.recommended !== b.recommended) return a.recommended ? -1 : 1;
 			if (a.provider !== b.provider) return a.provider.localeCompare(b.provider);
-			return a.name.localeCompare(b.name);
+			return a.name.localeCompare(b.name, void 0, { sensitivity: "base" });
 		});
 		return c.json({
 			ok: true,
@@ -263,7 +269,7 @@ function registerModelsRoutes(authenticated, deps) {
 		});
 	});
 	authenticated.get("/api/providers/meta", async (c) => {
-		const providers = getAllProviders();
+		const providers = sortProvidersForPicker(getAllProviders());
 		const pluginRegistry = getProviderRegistry();
 		const meta = await Promise.all(providers.map(async (provider) => {
 			const plugin = pluginRegistry.get(provider);
@@ -277,6 +283,17 @@ function registerModelsRoutes(authenticated, deps) {
 				supportsOAuth: plugin ? false : PROVIDER_META[provider]?.supportsOAuth ?? false,
 				supportsApiKey: plugin ? false : PROVIDER_META[provider]?.supportsApiKey ?? true,
 				configured,
+				onboardingFeatured: [
+					"openai",
+					"anthropic",
+					"xai",
+					"google",
+					"openrouter",
+					"deepseek"
+				].includes(provider),
+				recommendedModels: getRecommendedModelsForProvider(provider),
+				modelCount: getAllModels().filter((m) => m.provider === provider).length,
+				...getProviderHint(provider) ? { hint: getProviderHint(provider) } : {},
 				activeKeySource: authState.authMode,
 				authMode: authState.authMode,
 				authStatus: authState.authStatus,
@@ -295,6 +312,9 @@ function registerModelsRoutes(authenticated, deps) {
 				supportsOAuth: false,
 				supportsApiKey: false,
 				configured: true,
+				onboardingFeatured: false,
+				recommendedModels: getRecommendedModelsForProvider(plugin.id),
+				modelCount: plugin.models.length,
 				activeKeySource: "extension",
 				authMode: "extension",
 				authStatus: "connected",

package/dist/src/gateway/hono/routes/models.js.map

@@ -1 +1 @@
-{"version":3,"file":"models.js","names":["getModelsJsonPath"],"sources":["../../../../../src/gateway/hono/routes/models.ts"],"sourcesContent":["import type { Hono } from 'hono';\n\nimport {\n  getModelsJsonPath,\n  loadModelsJson,\n  saveModelsJson,\n  validateModelsConfig,\n} from '../../../config/models-json.js';\nimport type { Config } from '../../../config/schema.js';\nimport { testApiKeyResolution } from '../../../config/resolve-config-value.js';\nimport {\n  getImageGenerationProvider,\n  listImageGenerationProvidersSummary,\n} from '../../../agent/image/generation/runtime.js';\nimport {\n  EXTENSION_PROVIDER_BASE_URL,\n  getAllModels,\n  getAvailableModels,\n  getModelRegistry,\n  getAllProviders,\n  getProviderAuthState,\n  isProviderConfigured,\n  PROVIDER_META,\n} from '../../../providers/index.js';\nimport { CredentialResolver } from '../../../auth/credentials.js';\nimport { getProviderRegistry } from '../../../providers/plugin-registry.js';\nimport type { ProviderModelDefinition } from '../../../extensions/types/providers.js';\nimport type { GatewayService } from '../../service.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\nimport { respondStartupUnavailable } from '../lib/startup-unavailable.js';\n\nfunction readModelsJsonProviderApiKey(providerId: string): string | undefined {\n  const { config } = loadModelsJson(getModelsJsonPath());\n  const entry = config.providers?.[providerId.trim()];\n  const key = entry?.apiKey;\n  return typeof key === 'string' && key.trim() ? key.trim() : undefined;\n}\n\n/** Plaintext key only when persisted under `cfg.providers.<id>.apiKey` (not env / credential store). */\nfunction readProviderApiKeyFromConfigFileOnly(cfg: Config, providerId: string): string | undefined {\n  const id = providerId.trim().toLowerCase();\n  const bucket = cfg.providers?.[id];\n  if (!bucket || typeof bucket !== 'object' || Array.isArray(bucket)) return undefined;\n  const k = (bucket as { apiKey?: unknown }).apiKey;\n  return typeof k === 'string' && k.trim() ? k.trim() : undefined;\n}\n\n/** Extension id from manifest `providers[]` (e.g. provider `demo` → extension `demo-provider`). */\nfunction resolveExtensionIdForProvider(service: GatewayService, providerId: string): string | undefined {\n  const loader = service.getExtensionLoader();\n  if (!loader) return undefined;\n  return loader.buildManifestRegistry().findByProvider(providerId)?.id;\n}\n\n/** Effective LLM REST base URL for a provider (models.json overrides included). */\nfunction resolveProviderApiBaseUrl(providerId: string): string | undefined {\n  const model = getModelRegistry().getAll().find((m) => m.provider === providerId);\n  if (!model?.baseUrl || model.baseUrl === EXTENSION_PROVIDER_BASE_URL) return undefined;\n  return model.baseUrl;\n}\n\nfunction mapPluginModel(providerId: string, model: ProviderModelDefinition, available: boolean) {\n  return {\n    id: `${providerId}/${model.id}`,\n    name: model.name,\n    provider: providerId,\n    contextWindow: model.contextWindow ?? 128000,\n    maxTokens: model.maxOutputTokens ?? 4096,\n    reasoning: false,\n    vision: model.supportsImages ?? false,\n    cost: { input: model.pricing?.input ?? 0, output: model.pricing?.output ?? 0 },\n    available,\n    source: 'extension' as const,\n  };\n}\n\nexport function registerModelsRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  const { service, strictRateLimitMiddleware } = deps;\n\n  // GET /api/models-json - Get models.json configuration\n  authenticated.get('/api/models-json', async (c) => {\n    const path = getModelsJsonPath();\n    const { config, error } = loadModelsJson(path);\n    const registry = getModelRegistry();\n    \n    return c.json({\n      ok: true,\n      payload: {\n        config,\n        path,\n        exists: error === undefined,\n        loadError: error || registry.getError(),\n      },\n    });\n  });\n\n  // POST /api/models-json/validate - Validate models.json configuration\n  authenticated.post('/api/models-json/validate', async (c) => {\n    const body = await c.req.json();\n    const { config } = body;\n    \n    const result = validateModelsConfig(config);\n    \n    return c.json({\n      ok: true,\n      payload: result,\n    });\n  });\n\n  // PATCH /api/models-json - Save models.json configuration\n  authenticated.patch('/api/models-json', async (c) => {\n    const body = await c.req.json();\n    const { config } = body;\n    \n    const path = getModelsJsonPath();\n    const result = saveModelsJson(path, config);\n    \n    if (!result.success) {\n      return c.json({ ok: false, error: result.error }, 400);\n    }\n    \n    // Refresh registry\n    const registry = getModelRegistry();\n    registry.refresh();\n    \n    // Emit event\n    service.emit('models-json.updated', { \n      modelCount: registry.getAll().length,\n    });\n    \n    return c.json({ \n      ok: true, \n      payload: { \n        saved: true,\n        modelCount: registry.getAll().length,\n      },\n    });\n  });\n\n  // POST /api/models-json/reload - Hot reload models.json\n  authenticated.post('/api/models-json/reload', async (c) => {\n    const registry = getModelRegistry();\n    registry.refresh();\n    \n    const error = registry.getError();\n    const models = registry.getAll();\n    \n    service.emit('models-json.reloaded', { \n      modelCount: models.length,\n      error: error || undefined,\n    });\n    \n    return c.json({\n      ok: true,\n      payload: {\n        modelCount: models.length,\n        error,\n      },\n    });\n  });\n\n  // POST /api/models-json/test-api-key - Test API key resolution\n  authenticated.post('/api/models-json/test-api-key', async (c) => {\n    const body = await c.req.json();\n    const { value } = body;\n    \n    const result = testApiKeyResolution(value);\n    \n    return c.json({\n      ok: true,\n      payload: result,\n    });\n  });\n\n  // GET /api/models - Get available models (only configured providers)\n  authenticated.get('/api/models', async (c) => {\n    if (!service.isGatewayReady()) {\n      return respondStartupUnavailable(c, 'models.list');\n    }\n    const pluginRegistry = getProviderRegistry();\n    const models = (await getAvailableModels()).map(m => ({\n      id: `${m.provider}/${m.id}`,\n      name: m.name,\n      provider: m.provider,\n      contextWindow: m.contextWindow ?? 128000,\n      maxTokens: m.maxTokens ?? 4096,\n      reasoning: m.reasoning ?? false,\n      vision: m.input?.includes('image') ?? false,\n      cost: {\n        input: m.cost?.input ?? 0,\n        output: m.cost?.output ?? 0,\n      },\n      ...(pluginRegistry.has(m.provider) ? { source: 'extension' as const } : {}),\n    }));\n\n    const existingIds = new Set(models.map(m => m.id));\n    for (const plugin of pluginRegistry.listAll()) {\n      for (const model of plugin.models) {\n        const compositeId = `${plugin.id}/${model.id}`;\n        if (!existingIds.has(compositeId)) {\n          models.push(mapPluginModel(plugin.id, model, true));\n          existingIds.add(compositeId);\n        }\n      }\n    }\n\n    // Sort by provider then name\n    models.sort((a, b) => {\n      if (a.provider !== b.provider) return a.provider.localeCompare(b.provider);\n      return a.name.localeCompare(b.name);\n    });\n\n    return c.json({ ok: true, payload: { models } });\n  });\n\n  // GET /api/image/providers — registered image generation providers and models (not in LLM model registry)\n  authenticated.get('/api/image/providers', (c) => {\n    const cfg = deps.service.currentConfig;\n    const summaries = listImageGenerationProvidersSummary(cfg);\n    const providers = summaries.map((p) => {\n      const provider = getImageGenerationProvider(p.id, cfg);\n      let configured = false;\n      try {\n        configured = provider?.isConfigured?.({ cfg }) === true;\n      } catch {\n        configured = false;\n      }\n      return { ...p, configured };\n    });\n    return c.json({ ok: true, payload: { providers } });\n  });\n\n  // POST /api/image/providers/:id/test — lightweight credential probe; does NOT\n  // hit the vendor (no quota burn). Returns `{ ok, configured, reason }`.\n  authenticated.post('/api/image/providers/:id/test', (c) => {\n    const id = c.req.param('id');\n    const cfg = deps.service.currentConfig;\n    const provider = getImageGenerationProvider(id, cfg);\n    if (!provider) {\n      return c.json(\n        { ok: false, error: { message: `Image generation provider not found: ${id}` } },\n        404,\n      );\n    }\n    let configured = false;\n    let reason: string | undefined;\n    try {\n      configured = provider.isConfigured?.({ cfg }) === true;\n      if (!configured) reason = 'Missing API key (set via config or environment).';\n    } catch (err) {\n      reason = err instanceof Error ? err.message : String(err);\n    }\n    return c.json({\n      ok: true,\n      payload: {\n        id: provider.id,\n        configured,\n        ...(reason ? { reason } : {}),\n        defaultModel: provider.defaultModel ?? null,\n      },\n    });\n  });\n\n  /**\n   * POST /api/image/providers/:id/reveal-api-key — return `cfg.providers.<id>.apiKey` plaintext for the\n   * gateway console (same auth as PATCH /api/config). Does not resolve env vars or credential files.\n   */\n  authenticated.post(\n    '/api/image/providers/:id/reveal-api-key',\n    strictRateLimitMiddleware,\n    async (c) => {\n      const rawId = c.req.param('id');\n      const cfg = deps.service.currentConfig;\n      const provider = getImageGenerationProvider(rawId, cfg);\n      if (!provider) {\n        return c.json(\n          { ok: false, error: { message: `Image generation provider not found: ${rawId}` } },\n          404,\n        );\n      }\n      const apiKey = readProviderApiKeyFromConfigFileOnly(cfg, provider.id);\n      return c.json({\n        ok: true,\n        payload: {\n          id: provider.id,\n          apiKey: apiKey ?? null,\n          source: apiKey ? ('config' as const) : ('none' as const),\n        },\n      });\n    },\n  );\n\n  // GET /api/providers - Get ALL available providers and models\n  authenticated.get('/api/providers', async (c) => {\n    const pluginRegistry = getProviderRegistry();\n    const allModels = getAllModels();\n    const availableModels = await getAvailableModels();\n    const configured = new Set(availableModels.map(m => `${m.provider}/${m.id}`));\n\n    const models = allModels.map(m => ({\n      id: `${m.provider}/${m.id}`,\n      name: m.name,\n      provider: m.provider,\n      contextWindow: m.contextWindow ?? 128000,\n      maxTokens: m.maxTokens ?? 4096,\n      reasoning: m.reasoning ?? false,\n      vision: m.input?.includes('image') ?? false,\n      cost: {\n        input: m.cost?.input ?? 0,\n        output: m.cost?.output ?? 0,\n      },\n      available: configured.has(`${m.provider}/${m.id}`),\n      ...(pluginRegistry.has(m.provider) ? { source: 'extension' as const } : {}),\n    }));\n\n    const existingIds = new Set(models.map(m => m.id));\n    for (const plugin of pluginRegistry.listAll()) {\n      for (const model of plugin.models) {\n        const compositeId = `${plugin.id}/${model.id}`;\n        if (!existingIds.has(compositeId)) {\n          models.push(mapPluginModel(plugin.id, model, configured.has(compositeId)));\n          existingIds.add(compositeId);\n        }\n      }\n    }\n\n    // Sort by provider then name\n    models.sort((a, b) => {\n      if (a.provider !== b.provider) return a.provider.localeCompare(b.provider);\n      return a.name.localeCompare(b.name);\n    });\n\n    return c.json({ ok: true, payload: { models } });\n  });\n\n  // GET /api/providers/meta - Get provider metadata (categories, display names)\n  authenticated.get('/api/providers/meta', async (c) => {\n    const providers = getAllProviders();\n    const pluginRegistry = getProviderRegistry();\n\n    const meta = await Promise.all(\n      providers.map(async (provider) => {\n        const plugin = pluginRegistry.get(provider);\n        const extensionId = plugin\n          ? resolveExtensionIdForProvider(service, provider)\n          : undefined;\n        const authState = await getProviderAuthState(provider);\n        const configured = authState.authMode !== 'none' || (await isProviderConfigured(provider));\n        return {\n          id: provider,\n          name: plugin?.name ?? PROVIDER_META[provider]?.name ?? provider,\n          category: plugin ? ('extension' as const) : PROVIDER_META[provider]?.category || 'specialty',\n          supportsOAuth: plugin ? false : (PROVIDER_META[provider]?.supportsOAuth ?? false),\n          supportsApiKey: plugin ? false : (PROVIDER_META[provider]?.supportsApiKey ?? true),\n          configured,\n          activeKeySource: authState.authMode,\n          authMode: authState.authMode,\n          authStatus: authState.authStatus,\n          ...(authState.expiresAt ? { expiresAt: authState.expiresAt } : {}),\n          baseUrl: resolveProviderApiBaseUrl(provider),\n          ...(extensionId ? { extensionId } : {}),\n        };\n      }),\n    );\n\n    const knownProviderIds = new Set(providers);\n    for (const plugin of pluginRegistry.listAll()) {\n      if (!knownProviderIds.has(plugin.id)) {\n        const extensionId = resolveExtensionIdForProvider(service, plugin.id);\n        meta.push({\n          id: plugin.id,\n          name: plugin.name,\n          category: 'extension',\n          supportsOAuth: false,\n          supportsApiKey: false,\n          configured: true,\n          activeKeySource: 'extension',\n          authMode: 'extension',\n          authStatus: 'connected',\n          baseUrl: resolveProviderApiBaseUrl(plugin.id),\n          ...(extensionId ? { extensionId } : {}),\n        });\n      }\n    }\n\n    return c.json({ ok: true, payload: { providers: meta } });\n  });\n\n  /**\n   * POST /api/providers/:providerId/reveal-api-key — plaintext key when stored in the\n   * gateway credential store or models.json (not env vars or OAuth tokens).\n   */\n  authenticated.post(\n    '/api/providers/:providerId/reveal-api-key',\n    strictRateLimitMiddleware,\n    async (c) => {\n      const rawId = c.req.param('providerId')?.trim();\n      if (!rawId) {\n        return c.json({ ok: false, error: { message: 'Missing providerId' } }, 400);\n      }\n      const providerId = rawId.toLowerCase();\n      const resolver = new CredentialResolver();\n      const stored = await resolver.revealGatewayStoredApiKey(providerId);\n      if (stored) {\n        return c.json({\n          ok: true,\n          payload: { id: providerId, apiKey: stored, source: 'credential' as const },\n        });\n      }\n      const fromModelsJson = readModelsJsonProviderApiKey(providerId);\n      if (fromModelsJson) {\n        return c.json({\n          ok: true,\n          payload: { id: providerId, apiKey: fromModelsJson, source: 'models_json' as const },\n        });\n      }\n      return c.json({\n        ok: true,\n        payload: { id: providerId, apiKey: null, source: 'none' as const },\n      });\n    },\n  );\n\n  // DELETE /api/providers/:providerId/key - Remove a provider's stored API key\n  authenticated.delete('/api/providers/:providerId/key', strictRateLimitMiddleware, async (c) => {\n    const providerId = c.req.param('providerId');\n    if (!providerId) {\n      return c.json({ ok: false, error: { message: 'Missing providerId' } }, 400);\n    }\n\n    const normalizedProvider = providerId.toLowerCase();\n    const resolver = new CredentialResolver();\n\n    try {\n      await resolver.deleteProviderCredential(normalizedProvider);\n      return c.json({ ok: true, payload: { deleted: normalizedProvider } });\n    } catch (error) {\n      const errorMessage = error instanceof Error ? error.message : String(error);\n      return c.json({ ok: false, error: { message: `Failed to delete key: ${errorMessage}` } }, 500);\n    }\n  });\n}\n"],"mappings":";;;;;;;;;;;kBAOwC;2BAEuC;gBAc1C;kBAC6B;sBACU;AAM5E,SAAS,6BAA6B,YAAwC;CAC5E,MAAM,EAAE,WAAW,eAAeA,uBAAmB,CAAC;CAEtD,MAAM,OADQ,OAAO,YAAY,WAAW,MAAM,IAC/B;AACnB,QAAO,OAAO,QAAQ,YAAY,IAAI,MAAM,GAAG,IAAI,MAAM,GAAG,KAAA;;;AAI9D,SAAS,qCAAqC,KAAa,YAAwC;CACjG,MAAM,KAAK,WAAW,MAAM,CAAC,aAAa;CAC1C,MAAM,SAAS,IAAI,YAAY;AAC/B,KAAI,CAAC,UAAU,OAAO,WAAW,YAAY,MAAM,QAAQ,OAAO,CAAE,QAAO,KAAA;CAC3E,MAAM,IAAK,OAAgC;AAC3C,QAAO,OAAO,MAAM,YAAY,EAAE,MAAM,GAAG,EAAE,MAAM,GAAG,KAAA;;;AAIxD,SAAS,8BAA8B,SAAyB,YAAwC;CACtG,MAAM,SAAS,QAAQ,oBAAoB;AAC3C,KAAI,CAAC,OAAQ,QAAO,KAAA;AACpB,QAAO,OAAO,uBAAuB,CAAC,eAAe,WAAW,EAAE;;;AAIpE,SAAS,0BAA0B,YAAwC;CACzE,MAAM,QAAQ,kBAAkB,CAAC,QAAQ,CAAC,MAAM,MAAM,EAAE,aAAa,WAAW;AAChF,KAAI,CAAC,OAAO,WAAW,MAAM,YAAA,8BAAyC,QAAO,KAAA;AAC7E,QAAO,MAAM;;AAGf,SAAS,eAAe,YAAoB,OAAgC,WAAoB;AAC9F,QAAO;EACL,IAAI,GAAG,WAAW,GAAG,MAAM;EAC3B,MAAM,MAAM;EACZ,UAAU;EACV,eAAe,MAAM,iBAAiB;EACtC,WAAW,MAAM,mBAAmB;EACpC,WAAW;EACX,QAAQ,MAAM,kBAAkB;EAChC,MAAM;GAAE,OAAO,MAAM,SAAS,SAAS;GAAG,QAAQ,MAAM,SAAS,UAAU;GAAG;EAC9E;EACA,QAAQ;EACT;;AAGH,SAAgB,qBAAqB,eAAqB,MAAoC;CAC5F,MAAM,EAAE,SAAS,8BAA8B;AAG/C,eAAc,IAAI,oBAAoB,OAAO,MAAM;EACjD,MAAM,OAAOA,uBAAmB;EAChC,MAAM,EAAE,QAAQ,UAAU,eAAe,KAAK;EAC9C,MAAM,WAAW,kBAAkB;AAEnC,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP;IACA;IACA,QAAQ,UAAU,KAAA;IAClB,WAAW,SAAS,SAAS,UAAU;IACxC;GACF,CAAC;GACF;AAGF,eAAc,KAAK,6BAA6B,OAAO,MAAM;EAE3D,MAAM,EAAE,WAAW,MADA,EAAE,IAAI,MAAM;EAG/B,MAAM,SAAS,qBAAqB,OAAO;AAE3C,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;GACV,CAAC;GACF;AAGF,eAAc,MAAM,oBAAoB,OAAO,MAAM;EAEnD,MAAM,EAAE,WAAW,MADA,EAAE,IAAI,MAAM;EAI/B,MAAM,SAAS,eADFA,uBACqB,EAAE,OAAO;AAE3C,MAAI,CAAC,OAAO,QACV,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,OAAO;GAAO,EAAE,IAAI;EAIxD,MAAM,WAAW,kBAAkB;AACnC,WAAS,SAAS;AAGlB,UAAQ,KAAK,uBAAuB,EAClC,YAAY,SAAS,QAAQ,CAAC,QAC/B,CAAC;AAEF,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,OAAO;IACP,YAAY,SAAS,QAAQ,CAAC;IAC/B;GACF,CAAC;GACF;AAGF,eAAc,KAAK,2BAA2B,OAAO,MAAM;EACzD,MAAM,WAAW,kBAAkB;AACnC,WAAS,SAAS;EAElB,MAAM,QAAQ,SAAS,UAAU;EACjC,MAAM,SAAS,SAAS,QAAQ;AAEhC,UAAQ,KAAK,wBAAwB;GACnC,YAAY,OAAO;GACnB,OAAO,SAAS,KAAA;GACjB,CAAC;AAEF,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,YAAY,OAAO;IACnB;IACD;GACF,CAAC;GACF;AAGF,eAAc,KAAK,iCAAiC,OAAO,MAAM;EAE/D,MAAM,EAAE,UAAU,MADC,EAAE,IAAI,MAAM;EAG/B,MAAM,SAAS,qBAAqB,MAAM;AAE1C,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;GACV,CAAC;GACF;AAGF,eAAc,IAAI,eAAe,OAAO,MAAM;AAC5C,MAAI,CAAC,QAAQ,gBAAgB,CAC3B,QAAO,0BAA0B,GAAG,cAAc;EAEpD,MAAM,iBAAiB,qBAAqB;EAC5C,MAAM,UAAU,MAAM,oBAAoB,EAAE,KAAI,OAAM;GACpD,IAAI,GAAG,EAAE,SAAS,GAAG,EAAE;GACvB,MAAM,EAAE;GACR,UAAU,EAAE;GACZ,eAAe,EAAE,iBAAiB;GAClC,WAAW,EAAE,aAAa;GAC1B,WAAW,EAAE,aAAa;GAC1B,QAAQ,EAAE,OAAO,SAAS,QAAQ,IAAI;GACtC,MAAM;IACJ,OAAO,EAAE,MAAM,SAAS;IACxB,QAAQ,EAAE,MAAM,UAAU;IAC3B;GACD,GAAI,eAAe,IAAI,EAAE,SAAS,GAAG,EAAE,QAAQ,aAAsB,GAAG,EAAE;GAC3E,EAAE;EAEH,MAAM,cAAc,IAAI,IAAI,OAAO,KAAI,MAAK,EAAE,GAAG,CAAC;AAClD,OAAK,MAAM,UAAU,eAAe,SAAS,CAC3C,MAAK,MAAM,SAAS,OAAO,QAAQ;GACjC,MAAM,cAAc,GAAG,OAAO,GAAG,GAAG,MAAM;AAC1C,OAAI,CAAC,YAAY,IAAI,YAAY,EAAE;AACjC,WAAO,KAAK,eAAe,OAAO,IAAI,OAAO,KAAK,CAAC;AACnD,gBAAY,IAAI,YAAY;;;AAMlC,SAAO,MAAM,GAAG,MAAM;AACpB,OAAI,EAAE,aAAa,EAAE,SAAU,QAAO,EAAE,SAAS,cAAc,EAAE,SAAS;AAC1E,UAAO,EAAE,KAAK,cAAc,EAAE,KAAK;IACnC;AAEF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,QAAQ;GAAE,CAAC;GAChD;AAGF,eAAc,IAAI,yBAAyB,MAAM;EAC/C,MAAM,MAAM,KAAK,QAAQ;EAEzB,MAAM,YADY,oCAAoC,IAC3B,CAAC,KAAK,MAAM;GACrC,MAAM,WAAW,2BAA2B,EAAE,IAAI,IAAI;GACtD,IAAI,aAAa;AACjB,OAAI;AACF,iBAAa,UAAU,eAAe,EAAE,KAAK,CAAC,KAAK;WAC7C;AACN,iBAAa;;AAEf,UAAO;IAAE,GAAG;IAAG;IAAY;IAC3B;AACF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,WAAW;GAAE,CAAC;GACnD;AAIF,eAAc,KAAK,kCAAkC,MAAM;EACzD,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK;EAC5B,MAAM,MAAM,KAAK,QAAQ;EACzB,MAAM,WAAW,2BAA2B,IAAI,IAAI;AACpD,MAAI,CAAC,SACH,QAAO,EAAE,KACP;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,wCAAwC,MAAM;GAAE,EAC/E,IACD;EAEH,IAAI,aAAa;EACjB,IAAI;AACJ,MAAI;AACF,gBAAa,SAAS,eAAe,EAAE,KAAK,CAAC,KAAK;AAClD,OAAI,CAAC,WAAY,UAAS;WACnB,KAAK;AACZ,YAAS,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;;AAE3D,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,IAAI,SAAS;IACb;IACA,GAAI,SAAS,EAAE,QAAQ,GAAG,EAAE;IAC5B,cAAc,SAAS,gBAAgB;IACxC;GACF,CAAC;GACF;;;;;AAMF,eAAc,KACZ,2CACA,2BACA,OAAO,MAAM;EACX,MAAM,QAAQ,EAAE,IAAI,MAAM,KAAK;EAC/B,MAAM,MAAM,KAAK,QAAQ;EACzB,MAAM,WAAW,2BAA2B,OAAO,IAAI;AACvD,MAAI,CAAC,SACH,QAAO,EAAE,KACP;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,wCAAwC,SAAS;GAAE,EAClF,IACD;EAEH,MAAM,SAAS,qCAAqC,KAAK,SAAS,GAAG;AACrE,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,IAAI,SAAS;IACb,QAAQ,UAAU;IAClB,QAAQ,SAAU,WAAsB;IACzC;GACF,CAAC;GAEL;AAGD,eAAc,IAAI,kBAAkB,OAAO,MAAM;EAC/C,MAAM,iBAAiB,qBAAqB;EAC5C,MAAM,YAAY,cAAc;EAChC,MAAM,kBAAkB,MAAM,oBAAoB;EAClD,MAAM,aAAa,IAAI,IAAI,gBAAgB,KAAI,MAAK,GAAG,EAAE,SAAS,GAAG,EAAE,KAAK,CAAC;EAE7E,MAAM,SAAS,UAAU,KAAI,OAAM;GACjC,IAAI,GAAG,EAAE,SAAS,GAAG,EAAE;GACvB,MAAM,EAAE;GACR,UAAU,EAAE;GACZ,eAAe,EAAE,iBAAiB;GAClC,WAAW,EAAE,aAAa;GAC1B,WAAW,EAAE,aAAa;GAC1B,QAAQ,EAAE,OAAO,SAAS,QAAQ,IAAI;GACtC,MAAM;IACJ,OAAO,EAAE,MAAM,SAAS;IACxB,QAAQ,EAAE,MAAM,UAAU;IAC3B;GACD,WAAW,WAAW,IAAI,GAAG,EAAE,SAAS,GAAG,EAAE,KAAK;GAClD,GAAI,eAAe,IAAI,EAAE,SAAS,GAAG,EAAE,QAAQ,aAAsB,GAAG,EAAE;GAC3E,EAAE;EAEH,MAAM,cAAc,IAAI,IAAI,OAAO,KAAI,MAAK,EAAE,GAAG,CAAC;AAClD,OAAK,MAAM,UAAU,eAAe,SAAS,CAC3C,MAAK,MAAM,SAAS,OAAO,QAAQ;GACjC,MAAM,cAAc,GAAG,OAAO,GAAG,GAAG,MAAM;AAC1C,OAAI,CAAC,YAAY,IAAI,YAAY,EAAE;AACjC,WAAO,KAAK,eAAe,OAAO,IAAI,OAAO,WAAW,IAAI,YAAY,CAAC,CAAC;AAC1E,gBAAY,IAAI,YAAY;;;AAMlC,SAAO,MAAM,GAAG,MAAM;AACpB,OAAI,EAAE,aAAa,EAAE,SAAU,QAAO,EAAE,SAAS,cAAc,EAAE,SAAS;AAC1E,UAAO,EAAE,KAAK,cAAc,EAAE,KAAK;IACnC;AAEF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,QAAQ;GAAE,CAAC;GAChD;AAGF,eAAc,IAAI,uBAAuB,OAAO,MAAM;EACpD,MAAM,YAAY,iBAAiB;EACnC,MAAM,iBAAiB,qBAAqB;EAE5C,MAAM,OAAO,MAAM,QAAQ,IACzB,UAAU,IAAI,OAAO,aAAa;GAChC,MAAM,SAAS,eAAe,IAAI,SAAS;GAC3C,MAAM,cAAc,SAChB,8BAA8B,SAAS,SAAS,GAChD,KAAA;GACJ,MAAM,YAAY,MAAM,qBAAqB,SAAS;GACtD,MAAM,aAAa,UAAU,aAAa,UAAW,MAAM,qBAAqB,SAAS;AACzF,UAAO;IACL,IAAI;IACJ,MAAM,QAAQ,QAAQ,cAAc,WAAW,QAAQ;IACvD,UAAU,SAAU,cAAwB,cAAc,WAAW,YAAY;IACjF,eAAe,SAAS,QAAS,cAAc,WAAW,iBAAiB;IAC3E,gBAAgB,SAAS,QAAS,cAAc,WAAW,kBAAkB;IAC7E;IACA,iBAAiB,UAAU;IAC3B,UAAU,UAAU;IACpB,YAAY,UAAU;IACtB,GAAI,UAAU,YAAY,EAAE,WAAW,UAAU,WAAW,GAAG,EAAE;IACjE,SAAS,0BAA0B,SAAS;IAC5C,GAAI,cAAc,EAAE,aAAa,GAAG,EAAE;IACvC;IACD,CACH;EAED,MAAM,mBAAmB,IAAI,IAAI,UAAU;AAC3C,OAAK,MAAM,UAAU,eAAe,SAAS,CAC3C,KAAI,CAAC,iBAAiB,IAAI,OAAO,GAAG,EAAE;GACpC,MAAM,cAAc,8BAA8B,SAAS,OAAO,GAAG;AACrE,QAAK,KAAK;IACR,IAAI,OAAO;IACX,MAAM,OAAO;IACb,UAAU;IACV,eAAe;IACf,gBAAgB;IAChB,YAAY;IACZ,iBAAiB;IACjB,UAAU;IACV,YAAY;IACZ,SAAS,0BAA0B,OAAO,GAAG;IAC7C,GAAI,cAAc,EAAE,aAAa,GAAG,EAAE;IACvC,CAAC;;AAIN,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,WAAW,MAAM;GAAE,CAAC;GACzD;;;;;AAMF,eAAc,KACZ,6CACA,2BACA,OAAO,MAAM;EACX,MAAM,QAAQ,EAAE,IAAI,MAAM,aAAa,EAAE,MAAM;AAC/C,MAAI,CAAC,MACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,sBAAsB;GAAE,EAAE,IAAI;EAE7E,MAAM,aAAa,MAAM,aAAa;EAEtC,MAAM,SAAS,MAAM,IADA,oBACQ,CAAC,0BAA0B,WAAW;AACnE,MAAI,OACF,QAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IAAE,IAAI;IAAY,QAAQ;IAAQ,QAAQ;IAAuB;GAC3E,CAAC;EAEJ,MAAM,iBAAiB,6BAA6B,WAAW;AAC/D,MAAI,eACF,QAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IAAE,IAAI;IAAY,QAAQ;IAAgB,QAAQ;IAAwB;GACpF,CAAC;AAEJ,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IAAE,IAAI;IAAY,QAAQ;IAAM,QAAQ;IAAiB;GACnE,CAAC;GAEL;AAGD,eAAc,OAAO,kCAAkC,2BAA2B,OAAO,MAAM;EAC7F,MAAM,aAAa,EAAE,IAAI,MAAM,aAAa;AAC5C,MAAI,CAAC,WACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,sBAAsB;GAAE,EAAE,IAAI;EAG7E,MAAM,qBAAqB,WAAW,aAAa;EACnD,MAAM,WAAW,IAAI,oBAAoB;AAEzC,MAAI;AACF,SAAM,SAAS,yBAAyB,mBAAmB;AAC3D,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,SAAS,oBAAoB;IAAE,CAAC;WAC9D,OAAO;GACd,MAAM,eAAe,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;AAC3E,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS,yBAAyB,gBAAgB;IAAE,EAAE,IAAI;;GAEhG"}
+{"version":3,"file":"models.js","names":["getModelsJsonPath"],"sources":["../../../../../src/gateway/hono/routes/models.ts"],"sourcesContent":["import type { Hono } from 'hono';\n\nimport {\n  getModelsJsonPath,\n  loadModelsJson,\n  saveModelsJson,\n  validateModelsConfig,\n} from '../../../config/models-json.js';\nimport type { Config } from '../../../config/schema.js';\nimport { testApiKeyResolution } from '../../../config/resolve-config-value.js';\nimport {\n  getImageGenerationProvider,\n  listImageGenerationProvidersSummary,\n} from '../../../agent/image/generation/runtime.js';\nimport {\n  EXTENSION_PROVIDER_BASE_URL,\n  getAllModels,\n  getAvailableModels,\n  getModelRegistry,\n  getAllProviders,\n  getProviderAuthState,\n  isProviderConfigured,\n  PROVIDER_META,\n} from '../../../providers/index.js';\nimport {\n  getProviderHint,\n  getRecommendedModelsForProvider,\n  isRecommendedModel,\n  sortModelsForPicker,\n  sortProvidersForPicker,\n} from '../../../providers/presentation.js';\nimport { CredentialResolver } from '../../../auth/credentials.js';\nimport { getProviderRegistry } from '../../../providers/plugin-registry.js';\nimport type { ProviderModelDefinition } from '../../../extensions/types/providers.js';\nimport type { GatewayService } from '../../service.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\nimport { respondStartupUnavailable } from '../lib/startup-unavailable.js';\n\nfunction readModelsJsonProviderApiKey(providerId: string): string | undefined {\n  const { config } = loadModelsJson(getModelsJsonPath());\n  const entry = config.providers?.[providerId.trim()];\n  const key = entry?.apiKey;\n  return typeof key === 'string' && key.trim() ? key.trim() : undefined;\n}\n\n/** Plaintext key only when persisted under `cfg.providers.<id>.apiKey` (not env / credential store). */\nfunction readProviderApiKeyFromConfigFileOnly(cfg: Config, providerId: string): string | undefined {\n  const id = providerId.trim().toLowerCase();\n  const bucket = cfg.providers?.[id];\n  if (!bucket || typeof bucket !== 'object' || Array.isArray(bucket)) return undefined;\n  const k = (bucket as { apiKey?: unknown }).apiKey;\n  return typeof k === 'string' && k.trim() ? k.trim() : undefined;\n}\n\n/** Extension id from manifest `providers[]` (e.g. provider `demo` → extension `demo-provider`). */\nfunction resolveExtensionIdForProvider(service: GatewayService, providerId: string): string | undefined {\n  const loader = service.getExtensionLoader();\n  if (!loader) return undefined;\n  return loader.buildManifestRegistry().findByProvider(providerId)?.id;\n}\n\n/** Effective LLM REST base URL for a provider (models.json overrides included). */\nfunction resolveProviderApiBaseUrl(providerId: string): string | undefined {\n  const model = getModelRegistry().getAll().find((m) => m.provider === providerId);\n  if (!model?.baseUrl || model.baseUrl === EXTENSION_PROVIDER_BASE_URL) return undefined;\n  return model.baseUrl;\n}\n\nfunction mapPluginModel(providerId: string, model: ProviderModelDefinition, available: boolean) {\n  return {\n    id: `${providerId}/${model.id}`,\n    name: model.name,\n    provider: providerId,\n    contextWindow: model.contextWindow ?? 128000,\n    maxTokens: model.maxOutputTokens ?? 4096,\n    reasoning: false,\n    vision: model.supportsImages ?? false,\n    cost: { input: model.pricing?.input ?? 0, output: model.pricing?.output ?? 0 },\n    available,\n    recommended: isRecommendedModel(providerId, model.id),\n    source: 'extension' as const,\n  };\n}\n\nexport function registerModelsRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  const { service, strictRateLimitMiddleware } = deps;\n\n  // GET /api/models-json - Get models.json configuration\n  authenticated.get('/api/models-json', async (c) => {\n    const path = getModelsJsonPath();\n    const { config, error } = loadModelsJson(path);\n    const registry = getModelRegistry();\n    \n    return c.json({\n      ok: true,\n      payload: {\n        config,\n        path,\n        exists: error === undefined,\n        loadError: error || registry.getError(),\n      },\n    });\n  });\n\n  // POST /api/models-json/validate - Validate models.json configuration\n  authenticated.post('/api/models-json/validate', async (c) => {\n    const body = await c.req.json();\n    const { config } = body;\n    \n    const result = validateModelsConfig(config);\n    \n    return c.json({\n      ok: true,\n      payload: result,\n    });\n  });\n\n  // PATCH /api/models-json - Save models.json configuration\n  authenticated.patch('/api/models-json', async (c) => {\n    const body = await c.req.json();\n    const { config } = body;\n    \n    const path = getModelsJsonPath();\n    const result = saveModelsJson(path, config);\n    \n    if (!result.success) {\n      return c.json({ ok: false, error: result.error }, 400);\n    }\n    \n    // Refresh registry\n    const registry = getModelRegistry();\n    registry.refresh();\n    \n    // Emit event\n    service.emit('models-json.updated', { \n      modelCount: registry.getAll().length,\n    });\n    \n    return c.json({ \n      ok: true, \n      payload: { \n        saved: true,\n        modelCount: registry.getAll().length,\n      },\n    });\n  });\n\n  // POST /api/models-json/reload - Hot reload models.json\n  authenticated.post('/api/models-json/reload', async (c) => {\n    const registry = getModelRegistry();\n    registry.refresh();\n    \n    const error = registry.getError();\n    const models = registry.getAll();\n    \n    service.emit('models-json.reloaded', { \n      modelCount: models.length,\n      error: error || undefined,\n    });\n    \n    return c.json({\n      ok: true,\n      payload: {\n        modelCount: models.length,\n        error,\n      },\n    });\n  });\n\n  // POST /api/models-json/test-api-key - Test API key resolution\n  authenticated.post('/api/models-json/test-api-key', async (c) => {\n    const body = await c.req.json();\n    const { value } = body;\n    \n    const result = testApiKeyResolution(value);\n    \n    return c.json({\n      ok: true,\n      payload: result,\n    });\n  });\n\n  // GET /api/models - Get available models (only configured providers)\n  authenticated.get('/api/models', async (c) => {\n    if (!service.isGatewayReady()) {\n      return respondStartupUnavailable(c, 'models.list');\n    }\n    const pluginRegistry = getProviderRegistry();\n    const models = sortModelsForPicker(await getAvailableModels()).map(m => ({\n      id: `${m.provider}/${m.id}`,\n      name: m.name,\n      provider: m.provider,\n      contextWindow: m.contextWindow ?? 128000,\n      maxTokens: m.maxTokens ?? 4096,\n      reasoning: m.reasoning ?? false,\n      vision: m.input?.includes('image') ?? false,\n      recommended: isRecommendedModel(m.provider, m.id),\n      cost: {\n        input: m.cost?.input ?? 0,\n        output: m.cost?.output ?? 0,\n      },\n      ...(pluginRegistry.has(m.provider) ? { source: 'extension' as const } : {}),\n    }));\n\n    const existingIds = new Set(models.map(m => m.id));\n    for (const plugin of pluginRegistry.listAll()) {\n      for (const model of plugin.models) {\n        const compositeId = `${plugin.id}/${model.id}`;\n        if (!existingIds.has(compositeId)) {\n          models.push(mapPluginModel(plugin.id, model, true));\n          existingIds.add(compositeId);\n        }\n      }\n    }\n\n    models.sort((a, b) => {\n      if (a.recommended !== b.recommended) return a.recommended ? -1 : 1;\n      if (a.provider !== b.provider) return a.provider.localeCompare(b.provider);\n      return a.name.localeCompare(b.name, undefined, { sensitivity: 'base' });\n    });\n\n    return c.json({ ok: true, payload: { models } });\n  });\n\n  // GET /api/image/providers — registered image generation providers and models (not in LLM model registry)\n  authenticated.get('/api/image/providers', (c) => {\n    const cfg = deps.service.currentConfig;\n    const summaries = listImageGenerationProvidersSummary(cfg);\n    const providers = summaries.map((p) => {\n      const provider = getImageGenerationProvider(p.id, cfg);\n      let configured = false;\n      try {\n        configured = provider?.isConfigured?.({ cfg }) === true;\n      } catch {\n        configured = false;\n      }\n      return { ...p, configured };\n    });\n    return c.json({ ok: true, payload: { providers } });\n  });\n\n  // POST /api/image/providers/:id/test — lightweight credential probe; does NOT\n  // hit the vendor (no quota burn). Returns `{ ok, configured, reason }`.\n  authenticated.post('/api/image/providers/:id/test', (c) => {\n    const id = c.req.param('id');\n    const cfg = deps.service.currentConfig;\n    const provider = getImageGenerationProvider(id, cfg);\n    if (!provider) {\n      return c.json(\n        { ok: false, error: { message: `Image generation provider not found: ${id}` } },\n        404,\n      );\n    }\n    let configured = false;\n    let reason: string | undefined;\n    try {\n      configured = provider.isConfigured?.({ cfg }) === true;\n      if (!configured) reason = 'Missing API key (set via config or environment).';\n    } catch (err) {\n      reason = err instanceof Error ? err.message : String(err);\n    }\n    return c.json({\n      ok: true,\n      payload: {\n        id: provider.id,\n        configured,\n        ...(reason ? { reason } : {}),\n        defaultModel: provider.defaultModel ?? null,\n      },\n    });\n  });\n\n  /**\n   * POST /api/image/providers/:id/reveal-api-key — return `cfg.providers.<id>.apiKey` plaintext for the\n   * gateway console (same auth as PATCH /api/config). Does not resolve env vars or credential files.\n   */\n  authenticated.post(\n    '/api/image/providers/:id/reveal-api-key',\n    strictRateLimitMiddleware,\n    async (c) => {\n      const rawId = c.req.param('id');\n      const cfg = deps.service.currentConfig;\n      const provider = getImageGenerationProvider(rawId, cfg);\n      if (!provider) {\n        return c.json(\n          { ok: false, error: { message: `Image generation provider not found: ${rawId}` } },\n          404,\n        );\n      }\n      const apiKey = readProviderApiKeyFromConfigFileOnly(cfg, provider.id);\n      return c.json({\n        ok: true,\n        payload: {\n          id: provider.id,\n          apiKey: apiKey ?? null,\n          source: apiKey ? ('config' as const) : ('none' as const),\n        },\n      });\n    },\n  );\n\n  // GET /api/providers - Get ALL available providers and models\n  authenticated.get('/api/providers', async (c) => {\n    const pluginRegistry = getProviderRegistry();\n    const allModels = getAllModels();\n    const availableModels = await getAvailableModels();\n    const configured = new Set(availableModels.map(m => `${m.provider}/${m.id}`));\n\n    const models = sortModelsForPicker(allModels).map(m => ({\n      id: `${m.provider}/${m.id}`,\n      name: m.name,\n      provider: m.provider,\n      contextWindow: m.contextWindow ?? 128000,\n      maxTokens: m.maxTokens ?? 4096,\n      reasoning: m.reasoning ?? false,\n      vision: m.input?.includes('image') ?? false,\n      recommended: isRecommendedModel(m.provider, m.id),\n      cost: {\n        input: m.cost?.input ?? 0,\n        output: m.cost?.output ?? 0,\n      },\n      available: configured.has(`${m.provider}/${m.id}`),\n      ...(pluginRegistry.has(m.provider) ? { source: 'extension' as const } : {}),\n    }));\n\n    const existingIds = new Set(models.map(m => m.id));\n    for (const plugin of pluginRegistry.listAll()) {\n      for (const model of plugin.models) {\n        const compositeId = `${plugin.id}/${model.id}`;\n        if (!existingIds.has(compositeId)) {\n          models.push(mapPluginModel(plugin.id, model, configured.has(compositeId)));\n          existingIds.add(compositeId);\n        }\n      }\n    }\n\n    models.sort((a, b) => {\n      if (a.recommended !== b.recommended) return a.recommended ? -1 : 1;\n      if (a.provider !== b.provider) return a.provider.localeCompare(b.provider);\n      return a.name.localeCompare(b.name, undefined, { sensitivity: 'base' });\n    });\n\n    return c.json({ ok: true, payload: { models } });\n  });\n\n  // GET /api/providers/meta - Get provider metadata (categories, display names)\n  authenticated.get('/api/providers/meta', async (c) => {\n    const providers = sortProvidersForPicker(getAllProviders());\n    const pluginRegistry = getProviderRegistry();\n\n    const meta = await Promise.all(\n      providers.map(async (provider) => {\n        const plugin = pluginRegistry.get(provider);\n        const extensionId = plugin\n          ? resolveExtensionIdForProvider(service, provider)\n          : undefined;\n        const authState = await getProviderAuthState(provider);\n        const configured = authState.authMode !== 'none' || (await isProviderConfigured(provider));\n        return {\n          id: provider,\n          name: plugin?.name ?? PROVIDER_META[provider]?.name ?? provider,\n          category: plugin ? ('extension' as const) : PROVIDER_META[provider]?.category || 'specialty',\n          supportsOAuth: plugin ? false : (PROVIDER_META[provider]?.supportsOAuth ?? false),\n          supportsApiKey: plugin ? false : (PROVIDER_META[provider]?.supportsApiKey ?? true),\n          configured,\n          onboardingFeatured: ['openai', 'anthropic', 'xai', 'google', 'openrouter', 'deepseek'].includes(provider),\n          recommendedModels: getRecommendedModelsForProvider(provider),\n          modelCount: getAllModels().filter((m) => m.provider === provider).length,\n          ...(getProviderHint(provider) ? { hint: getProviderHint(provider) } : {}),\n          activeKeySource: authState.authMode,\n          authMode: authState.authMode,\n          authStatus: authState.authStatus,\n          ...(authState.expiresAt ? { expiresAt: authState.expiresAt } : {}),\n          baseUrl: resolveProviderApiBaseUrl(provider),\n          ...(extensionId ? { extensionId } : {}),\n        };\n      }),\n    );\n\n    const knownProviderIds = new Set(providers);\n    for (const plugin of pluginRegistry.listAll()) {\n      if (!knownProviderIds.has(plugin.id)) {\n        const extensionId = resolveExtensionIdForProvider(service, plugin.id);\n        meta.push({\n          id: plugin.id,\n          name: plugin.name,\n          category: 'extension',\n          supportsOAuth: false,\n          supportsApiKey: false,\n          configured: true,\n          onboardingFeatured: false,\n          recommendedModels: getRecommendedModelsForProvider(plugin.id),\n          modelCount: plugin.models.length,\n          activeKeySource: 'extension',\n          authMode: 'extension',\n          authStatus: 'connected',\n          baseUrl: resolveProviderApiBaseUrl(plugin.id),\n          ...(extensionId ? { extensionId } : {}),\n        });\n      }\n    }\n\n    return c.json({ ok: true, payload: { providers: meta } });\n  });\n\n  /**\n   * POST /api/providers/:providerId/reveal-api-key — plaintext key when stored in the\n   * gateway credential store or models.json (not env vars or OAuth tokens).\n   */\n  authenticated.post(\n    '/api/providers/:providerId/reveal-api-key',\n    strictRateLimitMiddleware,\n    async (c) => {\n      const rawId = c.req.param('providerId')?.trim();\n      if (!rawId) {\n        return c.json({ ok: false, error: { message: 'Missing providerId' } }, 400);\n      }\n      const providerId = rawId.toLowerCase();\n      const resolver = new CredentialResolver();\n      const stored = await resolver.revealGatewayStoredApiKey(providerId);\n      if (stored) {\n        return c.json({\n          ok: true,\n          payload: { id: providerId, apiKey: stored, source: 'credential' as const },\n        });\n      }\n      const fromModelsJson = readModelsJsonProviderApiKey(providerId);\n      if (fromModelsJson) {\n        return c.json({\n          ok: true,\n          payload: { id: providerId, apiKey: fromModelsJson, source: 'models_json' as const },\n        });\n      }\n      return c.json({\n        ok: true,\n        payload: { id: providerId, apiKey: null, source: 'none' as const },\n      });\n    },\n  );\n\n  // DELETE /api/providers/:providerId/key - Remove a provider's stored API key\n  authenticated.delete('/api/providers/:providerId/key', strictRateLimitMiddleware, async (c) => {\n    const providerId = c.req.param('providerId');\n    if (!providerId) {\n      return c.json({ ok: false, error: { message: 'Missing providerId' } }, 400);\n    }\n\n    const normalizedProvider = providerId.toLowerCase();\n    const resolver = new CredentialResolver();\n\n    try {\n      await resolver.deleteProviderCredential(normalizedProvider);\n      return c.json({ ok: true, payload: { deleted: normalizedProvider } });\n    } catch (error) {\n      const errorMessage = error instanceof Error ? error.message : String(error);\n      return c.json({ ok: false, error: { message: `Failed to delete key: ${errorMessage}` } }, 500);\n    }\n  });\n}\n"],"mappings":";;;;;;;;;;;;kBAOwC;2BAEuC;gBAc1C;kBAQ6B;sBACU;AAM5E,SAAS,6BAA6B,YAAwC;CAC5E,MAAM,EAAE,WAAW,eAAeA,uBAAmB,CAAC;CAEtD,MAAM,OADQ,OAAO,YAAY,WAAW,MAAM,IAC/B;AACnB,QAAO,OAAO,QAAQ,YAAY,IAAI,MAAM,GAAG,IAAI,MAAM,GAAG,KAAA;;;AAI9D,SAAS,qCAAqC,KAAa,YAAwC;CACjG,MAAM,KAAK,WAAW,MAAM,CAAC,aAAa;CAC1C,MAAM,SAAS,IAAI,YAAY;AAC/B,KAAI,CAAC,UAAU,OAAO,WAAW,YAAY,MAAM,QAAQ,OAAO,CAAE,QAAO,KAAA;CAC3E,MAAM,IAAK,OAAgC;AAC3C,QAAO,OAAO,MAAM,YAAY,EAAE,MAAM,GAAG,EAAE,MAAM,GAAG,KAAA;;;AAIxD,SAAS,8BAA8B,SAAyB,YAAwC;CACtG,MAAM,SAAS,QAAQ,oBAAoB;AAC3C,KAAI,CAAC,OAAQ,QAAO,KAAA;AACpB,QAAO,OAAO,uBAAuB,CAAC,eAAe,WAAW,EAAE;;;AAIpE,SAAS,0BAA0B,YAAwC;CACzE,MAAM,QAAQ,kBAAkB,CAAC,QAAQ,CAAC,MAAM,MAAM,EAAE,aAAa,WAAW;AAChF,KAAI,CAAC,OAAO,WAAW,MAAM,YAAA,8BAAyC,QAAO,KAAA;AAC7E,QAAO,MAAM;;AAGf,SAAS,eAAe,YAAoB,OAAgC,WAAoB;AAC9F,QAAO;EACL,IAAI,GAAG,WAAW,GAAG,MAAM;EAC3B,MAAM,MAAM;EACZ,UAAU;EACV,eAAe,MAAM,iBAAiB;EACtC,WAAW,MAAM,mBAAmB;EACpC,WAAW;EACX,QAAQ,MAAM,kBAAkB;EAChC,MAAM;GAAE,OAAO,MAAM,SAAS,SAAS;GAAG,QAAQ,MAAM,SAAS,UAAU;GAAG;EAC9E;EACA,aAAa,mBAAmB,YAAY,MAAM,GAAG;EACrD,QAAQ;EACT;;AAGH,SAAgB,qBAAqB,eAAqB,MAAoC;CAC5F,MAAM,EAAE,SAAS,8BAA8B;AAG/C,eAAc,IAAI,oBAAoB,OAAO,MAAM;EACjD,MAAM,OAAOA,uBAAmB;EAChC,MAAM,EAAE,QAAQ,UAAU,eAAe,KAAK;EAC9C,MAAM,WAAW,kBAAkB;AAEnC,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP;IACA;IACA,QAAQ,UAAU,KAAA;IAClB,WAAW,SAAS,SAAS,UAAU;IACxC;GACF,CAAC;GACF;AAGF,eAAc,KAAK,6BAA6B,OAAO,MAAM;EAE3D,MAAM,EAAE,WAAW,MADA,EAAE,IAAI,MAAM;EAG/B,MAAM,SAAS,qBAAqB,OAAO;AAE3C,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;GACV,CAAC;GACF;AAGF,eAAc,MAAM,oBAAoB,OAAO,MAAM;EAEnD,MAAM,EAAE,WAAW,MADA,EAAE,IAAI,MAAM;EAI/B,MAAM,SAAS,eADFA,uBACqB,EAAE,OAAO;AAE3C,MAAI,CAAC,OAAO,QACV,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,OAAO;GAAO,EAAE,IAAI;EAIxD,MAAM,WAAW,kBAAkB;AACnC,WAAS,SAAS;AAGlB,UAAQ,KAAK,uBAAuB,EAClC,YAAY,SAAS,QAAQ,CAAC,QAC/B,CAAC;AAEF,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,OAAO;IACP,YAAY,SAAS,QAAQ,CAAC;IAC/B;GACF,CAAC;GACF;AAGF,eAAc,KAAK,2BAA2B,OAAO,MAAM;EACzD,MAAM,WAAW,kBAAkB;AACnC,WAAS,SAAS;EAElB,MAAM,QAAQ,SAAS,UAAU;EACjC,MAAM,SAAS,SAAS,QAAQ;AAEhC,UAAQ,KAAK,wBAAwB;GACnC,YAAY,OAAO;GACnB,OAAO,SAAS,KAAA;GACjB,CAAC;AAEF,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,YAAY,OAAO;IACnB;IACD;GACF,CAAC;GACF;AAGF,eAAc,KAAK,iCAAiC,OAAO,MAAM;EAE/D,MAAM,EAAE,UAAU,MADC,EAAE,IAAI,MAAM;EAG/B,MAAM,SAAS,qBAAqB,MAAM;AAE1C,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;GACV,CAAC;GACF;AAGF,eAAc,IAAI,eAAe,OAAO,MAAM;AAC5C,MAAI,CAAC,QAAQ,gBAAgB,CAC3B,QAAO,0BAA0B,GAAG,cAAc;EAEpD,MAAM,iBAAiB,qBAAqB;EAC5C,MAAM,SAAS,oBAAoB,MAAM,oBAAoB,CAAC,CAAC,KAAI,OAAM;GACvE,IAAI,GAAG,EAAE,SAAS,GAAG,EAAE;GACvB,MAAM,EAAE;GACR,UAAU,EAAE;GACZ,eAAe,EAAE,iBAAiB;GAClC,WAAW,EAAE,aAAa;GAC1B,WAAW,EAAE,aAAa;GAC1B,QAAQ,EAAE,OAAO,SAAS,QAAQ,IAAI;GACtC,aAAa,mBAAmB,EAAE,UAAU,EAAE,GAAG;GACjD,MAAM;IACJ,OAAO,EAAE,MAAM,SAAS;IACxB,QAAQ,EAAE,MAAM,UAAU;IAC3B;GACD,GAAI,eAAe,IAAI,EAAE,SAAS,GAAG,EAAE,QAAQ,aAAsB,GAAG,EAAE;GAC3E,EAAE;EAEH,MAAM,cAAc,IAAI,IAAI,OAAO,KAAI,MAAK,EAAE,GAAG,CAAC;AAClD,OAAK,MAAM,UAAU,eAAe,SAAS,CAC3C,MAAK,MAAM,SAAS,OAAO,QAAQ;GACjC,MAAM,cAAc,GAAG,OAAO,GAAG,GAAG,MAAM;AAC1C,OAAI,CAAC,YAAY,IAAI,YAAY,EAAE;AACjC,WAAO,KAAK,eAAe,OAAO,IAAI,OAAO,KAAK,CAAC;AACnD,gBAAY,IAAI,YAAY;;;AAKlC,SAAO,MAAM,GAAG,MAAM;AACpB,OAAI,EAAE,gBAAgB,EAAE,YAAa,QAAO,EAAE,cAAc,KAAK;AACjE,OAAI,EAAE,aAAa,EAAE,SAAU,QAAO,EAAE,SAAS,cAAc,EAAE,SAAS;AAC1E,UAAO,EAAE,KAAK,cAAc,EAAE,MAAM,KAAA,GAAW,EAAE,aAAa,QAAQ,CAAC;IACvE;AAEF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,QAAQ;GAAE,CAAC;GAChD;AAGF,eAAc,IAAI,yBAAyB,MAAM;EAC/C,MAAM,MAAM,KAAK,QAAQ;EAEzB,MAAM,YADY,oCAAoC,IAC3B,CAAC,KAAK,MAAM;GACrC,MAAM,WAAW,2BAA2B,EAAE,IAAI,IAAI;GACtD,IAAI,aAAa;AACjB,OAAI;AACF,iBAAa,UAAU,eAAe,EAAE,KAAK,CAAC,KAAK;WAC7C;AACN,iBAAa;;AAEf,UAAO;IAAE,GAAG;IAAG;IAAY;IAC3B;AACF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,WAAW;GAAE,CAAC;GACnD;AAIF,eAAc,KAAK,kCAAkC,MAAM;EACzD,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK;EAC5B,MAAM,MAAM,KAAK,QAAQ;EACzB,MAAM,WAAW,2BAA2B,IAAI,IAAI;AACpD,MAAI,CAAC,SACH,QAAO,EAAE,KACP;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,wCAAwC,MAAM;GAAE,EAC/E,IACD;EAEH,IAAI,aAAa;EACjB,IAAI;AACJ,MAAI;AACF,gBAAa,SAAS,eAAe,EAAE,KAAK,CAAC,KAAK;AAClD,OAAI,CAAC,WAAY,UAAS;WACnB,KAAK;AACZ,YAAS,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;;AAE3D,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,IAAI,SAAS;IACb;IACA,GAAI,SAAS,EAAE,QAAQ,GAAG,EAAE;IAC5B,cAAc,SAAS,gBAAgB;IACxC;GACF,CAAC;GACF;;;;;AAMF,eAAc,KACZ,2CACA,2BACA,OAAO,MAAM;EACX,MAAM,QAAQ,EAAE,IAAI,MAAM,KAAK;EAC/B,MAAM,MAAM,KAAK,QAAQ;EACzB,MAAM,WAAW,2BAA2B,OAAO,IAAI;AACvD,MAAI,CAAC,SACH,QAAO,EAAE,KACP;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,wCAAwC,SAAS;GAAE,EAClF,IACD;EAEH,MAAM,SAAS,qCAAqC,KAAK,SAAS,GAAG;AACrE,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,IAAI,SAAS;IACb,QAAQ,UAAU;IAClB,QAAQ,SAAU,WAAsB;IACzC;GACF,CAAC;GAEL;AAGD,eAAc,IAAI,kBAAkB,OAAO,MAAM;EAC/C,MAAM,iBAAiB,qBAAqB;EAC5C,MAAM,YAAY,cAAc;EAChC,MAAM,kBAAkB,MAAM,oBAAoB;EAClD,MAAM,aAAa,IAAI,IAAI,gBAAgB,KAAI,MAAK,GAAG,EAAE,SAAS,GAAG,EAAE,KAAK,CAAC;EAE7E,MAAM,SAAS,oBAAoB,UAAU,CAAC,KAAI,OAAM;GACtD,IAAI,GAAG,EAAE,SAAS,GAAG,EAAE;GACvB,MAAM,EAAE;GACR,UAAU,EAAE;GACZ,eAAe,EAAE,iBAAiB;GAClC,WAAW,EAAE,aAAa;GAC1B,WAAW,EAAE,aAAa;GAC1B,QAAQ,EAAE,OAAO,SAAS,QAAQ,IAAI;GACtC,aAAa,mBAAmB,EAAE,UAAU,EAAE,GAAG;GACjD,MAAM;IACJ,OAAO,EAAE,MAAM,SAAS;IACxB,QAAQ,EAAE,MAAM,UAAU;IAC3B;GACD,WAAW,WAAW,IAAI,GAAG,EAAE,SAAS,GAAG,EAAE,KAAK;GAClD,GAAI,eAAe,IAAI,EAAE,SAAS,GAAG,EAAE,QAAQ,aAAsB,GAAG,EAAE;GAC3E,EAAE;EAEH,MAAM,cAAc,IAAI,IAAI,OAAO,KAAI,MAAK,EAAE,GAAG,CAAC;AAClD,OAAK,MAAM,UAAU,eAAe,SAAS,CAC3C,MAAK,MAAM,SAAS,OAAO,QAAQ;GACjC,MAAM,cAAc,GAAG,OAAO,GAAG,GAAG,MAAM;AAC1C,OAAI,CAAC,YAAY,IAAI,YAAY,EAAE;AACjC,WAAO,KAAK,eAAe,OAAO,IAAI,OAAO,WAAW,IAAI,YAAY,CAAC,CAAC;AAC1E,gBAAY,IAAI,YAAY;;;AAKlC,SAAO,MAAM,GAAG,MAAM;AACpB,OAAI,EAAE,gBAAgB,EAAE,YAAa,QAAO,EAAE,cAAc,KAAK;AACjE,OAAI,EAAE,aAAa,EAAE,SAAU,QAAO,EAAE,SAAS,cAAc,EAAE,SAAS;AAC1E,UAAO,EAAE,KAAK,cAAc,EAAE,MAAM,KAAA,GAAW,EAAE,aAAa,QAAQ,CAAC;IACvE;AAEF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,QAAQ;GAAE,CAAC;GAChD;AAGF,eAAc,IAAI,uBAAuB,OAAO,MAAM;EACpD,MAAM,YAAY,uBAAuB,iBAAiB,CAAC;EAC3D,MAAM,iBAAiB,qBAAqB;EAE5C,MAAM,OAAO,MAAM,QAAQ,IACzB,UAAU,IAAI,OAAO,aAAa;GAChC,MAAM,SAAS,eAAe,IAAI,SAAS;GAC3C,MAAM,cAAc,SAChB,8BAA8B,SAAS,SAAS,GAChD,KAAA;GACJ,MAAM,YAAY,MAAM,qBAAqB,SAAS;GACtD,MAAM,aAAa,UAAU,aAAa,UAAW,MAAM,qBAAqB,SAAS;AACzF,UAAO;IACL,IAAI;IACJ,MAAM,QAAQ,QAAQ,cAAc,WAAW,QAAQ;IACvD,UAAU,SAAU,cAAwB,cAAc,WAAW,YAAY;IACjF,eAAe,SAAS,QAAS,cAAc,WAAW,iBAAiB;IAC3E,gBAAgB,SAAS,QAAS,cAAc,WAAW,kBAAkB;IAC7E;IACA,oBAAoB;KAAC;KAAU;KAAa;KAAO;KAAU;KAAc;KAAW,CAAC,SAAS,SAAS;IACzG,mBAAmB,gCAAgC,SAAS;IAC5D,YAAY,cAAc,CAAC,QAAQ,MAAM,EAAE,aAAa,SAAS,CAAC;IAClE,GAAI,gBAAgB,SAAS,GAAG,EAAE,MAAM,gBAAgB,SAAS,EAAE,GAAG,EAAE;IACxE,iBAAiB,UAAU;IAC3B,UAAU,UAAU;IACpB,YAAY,UAAU;IACtB,GAAI,UAAU,YAAY,EAAE,WAAW,UAAU,WAAW,GAAG,EAAE;IACjE,SAAS,0BAA0B,SAAS;IAC5C,GAAI,cAAc,EAAE,aAAa,GAAG,EAAE;IACvC;IACD,CACH;EAED,MAAM,mBAAmB,IAAI,IAAI,UAAU;AAC3C,OAAK,MAAM,UAAU,eAAe,SAAS,CAC3C,KAAI,CAAC,iBAAiB,IAAI,OAAO,GAAG,EAAE;GACpC,MAAM,cAAc,8BAA8B,SAAS,OAAO,GAAG;AACrE,QAAK,KAAK;IACR,IAAI,OAAO;IACX,MAAM,OAAO;IACb,UAAU;IACV,eAAe;IACf,gBAAgB;IAChB,YAAY;IACZ,oBAAoB;IACpB,mBAAmB,gCAAgC,OAAO,GAAG;IAC7D,YAAY,OAAO,OAAO;IAC1B,iBAAiB;IACjB,UAAU;IACV,YAAY;IACZ,SAAS,0BAA0B,OAAO,GAAG;IAC7C,GAAI,cAAc,EAAE,aAAa,GAAG,EAAE;IACvC,CAAC;;AAIN,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,WAAW,MAAM;GAAE,CAAC;GACzD;;;;;AAMF,eAAc,KACZ,6CACA,2BACA,OAAO,MAAM;EACX,MAAM,QAAQ,EAAE,IAAI,MAAM,aAAa,EAAE,MAAM;AAC/C,MAAI,CAAC,MACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,sBAAsB;GAAE,EAAE,IAAI;EAE7E,MAAM,aAAa,MAAM,aAAa;EAEtC,MAAM,SAAS,MAAM,IADA,oBACQ,CAAC,0BAA0B,WAAW;AACnE,MAAI,OACF,QAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IAAE,IAAI;IAAY,QAAQ;IAAQ,QAAQ;IAAuB;GAC3E,CAAC;EAEJ,MAAM,iBAAiB,6BAA6B,WAAW;AAC/D,MAAI,eACF,QAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IAAE,IAAI;IAAY,QAAQ;IAAgB,QAAQ;IAAwB;GACpF,CAAC;AAEJ,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IAAE,IAAI;IAAY,QAAQ;IAAM,QAAQ;IAAiB;GACnE,CAAC;GAEL;AAGD,eAAc,OAAO,kCAAkC,2BAA2B,OAAO,MAAM;EAC7F,MAAM,aAAa,EAAE,IAAI,MAAM,aAAa;AAC5C,MAAI,CAAC,WACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,sBAAsB;GAAE,EAAE,IAAI;EAG7E,MAAM,qBAAqB,WAAW,aAAa;EACnD,MAAM,WAAW,IAAI,oBAAoB;AAEzC,MAAI;AACF,SAAM,SAAS,yBAAyB,mBAAmB;AAC3D,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,SAAS,oBAAoB;IAAE,CAAC;WAC9D,OAAO;GACd,MAAM,eAAe,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;AAC3E,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS,yBAAyB,gBAAgB;IAAE,EAAE,IAAI;;GAEhG"}

package/dist/src/gateway/hono/routes/public-gateway.js

@@ -33,11 +33,9 @@ function registerPublicGatewayRoutes(app, service) {
 				"POST /api/agent/steer",
 				"POST /api/send",
 				"GET  /api/events          (SSE stream)",
+				"GET  /api/channels/catalog",
 				"GET  /api/channels/status",
-				"POST /api/channels/weixin/login/start",
-				"GET  /api/channels/weixin/login/:sessionKey",
-				"POST /api/channels/feishu/setup/start",
-				"GET  /api/channels/feishu/setup/:sessionKey",
+				"POST /api/channels/:channelId/actions/:actionId",
 				"GET  /api/config",
 				"GET  /api/agents",
 				"POST /api/agents",

package/dist/src/gateway/hono/routes/public-gateway.js.map

@@ -1 +1 @@
-{"version":3,"file":"public-gateway.js","names":[],"sources":["../../../../../src/gateway/hono/routes/public-gateway.ts"],"sourcesContent":["import type { Hono } from 'hono';\n\nimport { PACKAGE_VERSION } from '../../../package-version.js';\nimport type { GatewayService } from '../../service.js';\nimport { serveStaticFile } from '../lib/static-ui.js';\n\nexport function registerPublicGatewayRoutes(app: Hono, service: GatewayService): void {\n  app.get('/health', (c) => {\n    return c.json(service.getHealth());\n  });\n\n  /** Public liveness probe (no auth) — minimal payload for CLI / load balancers. */\n  app.get('/api/health', (c) => {\n    const health = service.getHealth();\n    return c.json({\n      status: health.ready ? 'ok' : 'starting',\n      ready: health.ready,\n      httpListening: health.httpListening,\n      version: health.version,\n      uptime: health.uptime,\n      startupDurationMs: health.startupDurationMs,\n    });\n  });\n\n  app.get('/api', (c) => {\n    return c.json({\n      service: 'xopc-gateway',\n      version: PACKAGE_VERSION,\n      transport: 'streamable-http',\n      endpoints: [\n        'GET  /health',\n        'GET  /api/health',\n        'GET  /status',\n        'GET  /api/status',\n        'POST /api/agent           (SSE stream / JSON)',\n        'POST /api/agent/abort',\n        'POST /api/agent/steer',\n        'POST /api/send',\n        'GET  /api/events          (SSE stream)',\n        'GET  /api/channels/status',\n        'POST /api/channels/weixin/login/start',\n        'GET  /api/channels/weixin/login/:sessionKey',\n        'POST /api/channels/feishu/setup/start',\n        'GET  /api/channels/feishu/setup/:sessionKey',\n        'GET  /api/config',\n        'GET  /api/agents',\n        'POST /api/agents',\n        'PATCH /api/agents/:id',\n        'DELETE /api/agents/:id',\n        'GET/PUT/DELETE /api/agents/:id/avatar',\n        'GET/PUT /api/agents/:id/files/...',\n        'DELETE /api/providers/:providerId/key',\n        'PATCH /api/config',\n        'POST /api/config/reload',\n        'POST /api/heartbeat/trigger',\n        '...  /api/cron/*',\n        'GET/PATCH /api/sessions/:key/agent-config',\n        '...  /api/sessions/*',\n        'GET  /api/host/fs/meta',\n        'GET  /api/host/fs/list',\n      ],\n    });\n  });\n\n  app.get('/assets/*', (c) => {\n    const path = c.req.path.replace('/assets/', '');\n    const response = serveStaticFile(`assets/${path}`, c.req.raw);\n    if (response) return response;\n    return c.text('Not found', 404);\n  });\n\n  /** From `web/public/channel-icons/` (Vite copies to static root). Public: img requests send no Bearer token. */\n  app.get('/channel-icons/*', (c) => {\n    const path = c.req.path.replace('/channel-icons/', '');\n    const response = serveStaticFile(`channel-icons/${path}`, c.req.raw);\n    if (response) return response;\n    return c.text('Not found', 404);\n  });\n\n  app.get('/favicon.ico', (c) => {\n    const response = serveStaticFile('favicon.ico', c.req.raw);\n    if (response) return response;\n    const fallback = serveStaticFile('logo.svg', c.req.raw);\n    if (fallback) return fallback;\n    return c.text('Not found', 404);\n  });\n\n  app.get('/logo.svg', (c) => {\n    const response = serveStaticFile('logo.svg', c.req.raw);\n    if (response) return response;\n    return c.text('Not found', 404);\n  });\n\n  app.get('/logo-dark.svg', (c) => {\n    const response = serveStaticFile('logo-dark.svg', c.req.raw);\n    if (response) return response;\n    return c.text('Not found', 404);\n  });\n\n  app.get('/', (c) => {\n    const response = serveStaticFile('index.html', c.req.raw);\n    if (response) return response;\n    return c.text('UI not found', 404);\n  });\n}\n"],"mappings":";;;sBAE8D;AAI9D,SAAgB,4BAA4B,KAAW,SAA+B;AACpF,KAAI,IAAI,YAAY,MAAM;AACxB,SAAO,EAAE,KAAK,QAAQ,WAAW,CAAC;GAClC;;AAGF,KAAI,IAAI,gBAAgB,MAAM;EAC5B,MAAM,SAAS,QAAQ,WAAW;AAClC,SAAO,EAAE,KAAK;GACZ,QAAQ,OAAO,QAAQ,OAAO;GAC9B,OAAO,OAAO;GACd,eAAe,OAAO;GACtB,SAAS,OAAO;GAChB,QAAQ,OAAO;GACf,mBAAmB,OAAO;GAC3B,CAAC;GACF;AAEF,KAAI,IAAI,SAAS,MAAM;AACrB,SAAO,EAAE,KAAK;GACZ,SAAS;GACT,SAAS;GACT,WAAW;GACX,WAAW;IACT;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACD;GACF,CAAC;GACF;AAEF,KAAI,IAAI,cAAc,MAAM;EAE1B,MAAM,WAAW,gBAAgB,UADpB,EAAE,IAAI,KAAK,QAAQ,YAAY,GACG,IAAI,EAAE,IAAI,IAAI;AAC7D,MAAI,SAAU,QAAO;AACrB,SAAO,EAAE,KAAK,aAAa,IAAI;GAC/B;;AAGF,KAAI,IAAI,qBAAqB,MAAM;EAEjC,MAAM,WAAW,gBAAgB,iBADpB,EAAE,IAAI,KAAK,QAAQ,mBAAmB,GACG,IAAI,EAAE,IAAI,IAAI;AACpE,MAAI,SAAU,QAAO;AACrB,SAAO,EAAE,KAAK,aAAa,IAAI;GAC/B;AAEF,KAAI,IAAI,iBAAiB,MAAM;EAC7B,MAAM,WAAW,gBAAgB,eAAe,EAAE,IAAI,IAAI;AAC1D,MAAI,SAAU,QAAO;EACrB,MAAM,WAAW,gBAAgB,YAAY,EAAE,IAAI,IAAI;AACvD,MAAI,SAAU,QAAO;AACrB,SAAO,EAAE,KAAK,aAAa,IAAI;GAC/B;AAEF,KAAI,IAAI,cAAc,MAAM;EAC1B,MAAM,WAAW,gBAAgB,YAAY,EAAE,IAAI,IAAI;AACvD,MAAI,SAAU,QAAO;AACrB,SAAO,EAAE,KAAK,aAAa,IAAI;GAC/B;AAEF,KAAI,IAAI,mBAAmB,MAAM;EAC/B,MAAM,WAAW,gBAAgB,iBAAiB,EAAE,IAAI,IAAI;AAC5D,MAAI,SAAU,QAAO;AACrB,SAAO,EAAE,KAAK,aAAa,IAAI;GAC/B;AAEF,KAAI,IAAI,MAAM,MAAM;EAClB,MAAM,WAAW,gBAAgB,cAAc,EAAE,IAAI,IAAI;AACzD,MAAI,SAAU,QAAO;AACrB,SAAO,EAAE,KAAK,gBAAgB,IAAI;GAClC"}
+{"version":3,"file":"public-gateway.js","names":[],"sources":["../../../../../src/gateway/hono/routes/public-gateway.ts"],"sourcesContent":["import type { Hono } from 'hono';\n\nimport { PACKAGE_VERSION } from '../../../package-version.js';\nimport type { GatewayService } from '../../service.js';\nimport { serveStaticFile } from '../lib/static-ui.js';\n\nexport function registerPublicGatewayRoutes(app: Hono, service: GatewayService): void {\n  app.get('/health', (c) => {\n    return c.json(service.getHealth());\n  });\n\n  /** Public liveness probe (no auth) — minimal payload for CLI / load balancers. */\n  app.get('/api/health', (c) => {\n    const health = service.getHealth();\n    return c.json({\n      status: health.ready ? 'ok' : 'starting',\n      ready: health.ready,\n      httpListening: health.httpListening,\n      version: health.version,\n      uptime: health.uptime,\n      startupDurationMs: health.startupDurationMs,\n    });\n  });\n\n  app.get('/api', (c) => {\n    return c.json({\n      service: 'xopc-gateway',\n      version: PACKAGE_VERSION,\n      transport: 'streamable-http',\n      endpoints: [\n        'GET  /health',\n        'GET  /api/health',\n        'GET  /status',\n        'GET  /api/status',\n        'POST /api/agent           (SSE stream / JSON)',\n        'POST /api/agent/abort',\n        'POST /api/agent/steer',\n        'POST /api/send',\n        'GET  /api/events          (SSE stream)',\n        'GET  /api/channels/catalog',\n        'GET  /api/channels/status',\n        'POST /api/channels/:channelId/actions/:actionId',\n        'GET  /api/config',\n        'GET  /api/agents',\n        'POST /api/agents',\n        'PATCH /api/agents/:id',\n        'DELETE /api/agents/:id',\n        'GET/PUT/DELETE /api/agents/:id/avatar',\n        'GET/PUT /api/agents/:id/files/...',\n        'DELETE /api/providers/:providerId/key',\n        'PATCH /api/config',\n        'POST /api/config/reload',\n        'POST /api/heartbeat/trigger',\n        '...  /api/cron/*',\n        'GET/PATCH /api/sessions/:key/agent-config',\n        '...  /api/sessions/*',\n        'GET  /api/host/fs/meta',\n        'GET  /api/host/fs/list',\n      ],\n    });\n  });\n\n  app.get('/assets/*', (c) => {\n    const path = c.req.path.replace('/assets/', '');\n    const response = serveStaticFile(`assets/${path}`, c.req.raw);\n    if (response) return response;\n    return c.text('Not found', 404);\n  });\n\n  /** From `web/public/channel-icons/` (Vite copies to static root). Public: img requests send no Bearer token. */\n  app.get('/channel-icons/*', (c) => {\n    const path = c.req.path.replace('/channel-icons/', '');\n    const response = serveStaticFile(`channel-icons/${path}`, c.req.raw);\n    if (response) return response;\n    return c.text('Not found', 404);\n  });\n\n  app.get('/favicon.ico', (c) => {\n    const response = serveStaticFile('favicon.ico', c.req.raw);\n    if (response) return response;\n    const fallback = serveStaticFile('logo.svg', c.req.raw);\n    if (fallback) return fallback;\n    return c.text('Not found', 404);\n  });\n\n  app.get('/logo.svg', (c) => {\n    const response = serveStaticFile('logo.svg', c.req.raw);\n    if (response) return response;\n    return c.text('Not found', 404);\n  });\n\n  app.get('/logo-dark.svg', (c) => {\n    const response = serveStaticFile('logo-dark.svg', c.req.raw);\n    if (response) return response;\n    return c.text('Not found', 404);\n  });\n\n  app.get('/', (c) => {\n    const response = serveStaticFile('index.html', c.req.raw);\n    if (response) return response;\n    return c.text('UI not found', 404);\n  });\n}\n"],"mappings":";;;sBAE8D;AAI9D,SAAgB,4BAA4B,KAAW,SAA+B;AACpF,KAAI,IAAI,YAAY,MAAM;AACxB,SAAO,EAAE,KAAK,QAAQ,WAAW,CAAC;GAClC;;AAGF,KAAI,IAAI,gBAAgB,MAAM;EAC5B,MAAM,SAAS,QAAQ,WAAW;AAClC,SAAO,EAAE,KAAK;GACZ,QAAQ,OAAO,QAAQ,OAAO;GAC9B,OAAO,OAAO;GACd,eAAe,OAAO;GACtB,SAAS,OAAO;GAChB,QAAQ,OAAO;GACf,mBAAmB,OAAO;GAC3B,CAAC;GACF;AAEF,KAAI,IAAI,SAAS,MAAM;AACrB,SAAO,EAAE,KAAK;GACZ,SAAS;GACT,SAAS;GACT,WAAW;GACX,WAAW;IACT;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACD;GACF,CAAC;GACF;AAEF,KAAI,IAAI,cAAc,MAAM;EAE1B,MAAM,WAAW,gBAAgB,UADpB,EAAE,IAAI,KAAK,QAAQ,YAAY,GACG,IAAI,EAAE,IAAI,IAAI;AAC7D,MAAI,SAAU,QAAO;AACrB,SAAO,EAAE,KAAK,aAAa,IAAI;GAC/B;;AAGF,KAAI,IAAI,qBAAqB,MAAM;EAEjC,MAAM,WAAW,gBAAgB,iBADpB,EAAE,IAAI,KAAK,QAAQ,mBAAmB,GACG,IAAI,EAAE,IAAI,IAAI;AACpE,MAAI,SAAU,QAAO;AACrB,SAAO,EAAE,KAAK,aAAa,IAAI;GAC/B;AAEF,KAAI,IAAI,iBAAiB,MAAM;EAC7B,MAAM,WAAW,gBAAgB,eAAe,EAAE,IAAI,IAAI;AAC1D,MAAI,SAAU,QAAO;EACrB,MAAM,WAAW,gBAAgB,YAAY,EAAE,IAAI,IAAI;AACvD,MAAI,SAAU,QAAO;AACrB,SAAO,EAAE,KAAK,aAAa,IAAI;GAC/B;AAEF,KAAI,IAAI,cAAc,MAAM;EAC1B,MAAM,WAAW,gBAAgB,YAAY,EAAE,IAAI,IAAI;AACvD,MAAI,SAAU,QAAO;AACrB,SAAO,EAAE,KAAK,aAAa,IAAI;GAC/B;AAEF,KAAI,IAAI,mBAAmB,MAAM;EAC/B,MAAM,WAAW,gBAAgB,iBAAiB,EAAE,IAAI,IAAI;AAC5D,MAAI,SAAU,QAAO;AACrB,SAAO,EAAE,KAAK,aAAa,IAAI;GAC/B;AAEF,KAAI,IAAI,MAAM,MAAM;EAClB,MAAM,WAAW,gBAAgB,cAAc,EAAE,IAAI,IAAI;AACzD,MAAI,SAAU,QAAO;AACrB,SAAO,EAAE,KAAK,gBAAgB,IAAI;GAClC"}