@xopcai/xopc 0.0.103 → 0.0.104

package/dist/src/gateway/hono/routes/config.js

@@ -5,6 +5,9 @@ import { applyGatewayPatch } from "./config-patch/gateway.js";
 import { applyMiscPatch, validateGatewayAfterPatch } from "./config-patch/misc.js";
 import "./config-patch/index.js";
 //#region src/gateway/hono/routes/config.ts
+function localeFromRequest(c) {
+	return c.req.query("locale") ?? c.req.header("X-XOPC-Locale") ?? c.req.header("Accept-Language")?.split(",")[0];
+}
 function registerConfigRoutes(authenticated, deps) {
 	const { service, strictRateLimitMiddleware } = deps;
 	authenticated.post("/api/config/reload", strictRateLimitMiddleware, async (c) => {
@@ -30,7 +33,7 @@ function registerConfigRoutes(authenticated, deps) {
 		});
 	});
 	authenticated.get("/api/config", async (c) => {
-		const safeConfig = await buildSafeWebConfigPayload(service);
+		const safeConfig = await buildSafeWebConfigPayload(service, { locale: localeFromRequest(c) });
 		return c.json({
 			ok: true,
 			payload: { config: safeConfig }
@@ -62,7 +65,7 @@ function registerConfigRoutes(authenticated, deps) {
 			error: result.error
 		}, 500);
 		if (body.gateway?.heartbeat !== void 0 && typeof body.gateway.heartbeat === "object") service.reloadHeartbeatFromCurrentConfig();
-		const safeConfig = await buildSafeWebConfigPayload(service);
+		const safeConfig = await buildSafeWebConfigPayload(service, { locale: localeFromRequest(c) });
 		return c.json({
 			ok: true,
 			payload: { config: safeConfig }

package/dist/src/gateway/hono/routes/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","names":[],"sources":["../../../../../src/gateway/hono/routes/config.ts"],"sourcesContent":["import type { Context, Hono } from 'hono';\n\nimport type { Config } from '../../../config/schema.js';\nimport { buildSafeWebConfigPayload } from '../lib/config-payload.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\nimport {\n  applyAgentsPatch,\n  applyChannelsPatch,\n  applyGatewayPatch,\n  applyMiscPatch,\n  validateGatewayAfterPatch,\n} from './config-patch/index.js';\n\nexport function registerConfigRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  const { service, strictRateLimitMiddleware } = deps;\n\n  authenticated.post('/api/config/reload', strictRateLimitMiddleware, async (c) => {\n    const result = await service.reloadConfig();\n    return c.json({ ok: true, payload: result });\n  });\n\n  authenticated.post('/api/heartbeat/trigger', strictRateLimitMiddleware, async (c) => {\n    let reason = 'manual';\n    try {\n      const body = await c.req.json();\n      if (body && typeof body === 'object' && typeof (body as { reason?: unknown }).reason === 'string') {\n        const r = (body as { reason: string }).reason.trim();\n        if (r) reason = r.slice(0, 120);\n      }\n    } catch {\n      /* empty or invalid body */\n    }\n    service.requestHeartbeatNow({ reason });\n    return c.json({ ok: true, payload: { scheduled: true } });\n  });\n\n  authenticated.get('/api/config', async (c) => {\n    const safeConfig = await buildSafeWebConfigPayload(service);\n    return c.json({ ok: true, payload: { config: safeConfig } });\n  });\n\n  // PATCH /api/config — section patchers run sequentially against the live\n  // config object (mutate-in-place is intentional: the route handler reads\n  // `service.currentConfig` and rewrites it through `saveConfig`). Each\n  // patcher only touches the keys it owns and returns `{ ok: false }` with a\n  // 400 body when validation fails; we surface the first failure verbatim.\n  authenticated.patch('/api/config', strictRateLimitMiddleware, async (c) => {\n    const body = await c.req.json();\n    const config: Config = service.currentConfig as Config;\n\n    applyAgentsPatch(config, body);\n    applyChannelsPatch(config, body);\n\n    const gatewayResult = applyGatewayPatch(config, body);\n    if (gatewayResult.ok === false) {\n      return c.json({ ok: false, error: gatewayResult.error }, gatewayResult.status as 400 | 500);\n    }\n\n    const miscResult = await applyMiscPatch(config, body);\n    if (miscResult.ok === false) {\n      return c.json({ ok: false, error: miscResult.error }, miscResult.status as 400 | 500);\n    }\n\n    const finalGwCheck = validateGatewayAfterPatch(config, body);\n    if (finalGwCheck.ok === false) {\n      return c.json({ ok: false, error: finalGwCheck.error }, finalGwCheck.status as 400 | 500);\n    }\n\n    const result = await service.saveConfig(config);\n    if (!result.saved) {\n      return c.json({ ok: false, error: result.error }, 500);\n    }\n\n    if (body.gateway?.heartbeat !== undefined && typeof body.gateway.heartbeat === 'object') {\n      service.reloadHeartbeatFromCurrentConfig();\n    }\n\n    const safeConfig = await buildSafeWebConfigPayload(service);\n    return c.json({ ok: true, payload: { config: safeConfig } });\n  });\n\n  const revealGatewayAuthSecretHandler = async (c: Context) => {\n    const field = await resolveRevealGatewayAuthField(c);\n    if (!field) {\n      return c.json({ ok: false, error: { message: 'field must be token or password' } }, 400);\n    }\n    const config = service.currentConfig as Config;\n    const secret =\n      field === 'token'\n        ? config.gateway?.auth?.token?.trim() || null\n        : config.gateway?.auth?.password?.trim() || null;\n    return c.json({\n      ok: true,\n      payload: { field, secret, source: secret ? ('config' as const) : ('none' as const) },\n    });\n  };\n\n  /**\n   * POST /api/gateway/reveal-auth-secret/:field — preferred; no JSON body required.\n   * POST /api/gateway/reveal-auth-secret — legacy JSON body `{ field: \"token\" | \"password\" }`.\n   */\n  authenticated.post(\n    '/api/gateway/reveal-auth-secret/:field',\n    strictRateLimitMiddleware,\n    revealGatewayAuthSecretHandler,\n  );\n  authenticated.post('/api/gateway/reveal-auth-secret', strictRateLimitMiddleware, revealGatewayAuthSecretHandler);\n\n  /** POST /api/agents/browser/reveal-cloud-api-key — plaintext browser cloud apiKey from config only. */\n  authenticated.post('/api/agents/browser/reveal-cloud-api-key', strictRateLimitMiddleware, async (c) => {\n    const config = service.currentConfig as Config;\n    const apiKey = config.agents?.defaults?.browser?.cloud?.apiKey?.trim() || null;\n    return c.json({\n      ok: true,\n      payload: { apiKey, source: apiKey ? ('config' as const) : ('none' as const) },\n    });\n  });\n\n  /** POST /api/tools/web/reveal-search-api-key — plaintext search provider apiKey by index. */\n  authenticated.post('/api/tools/web/reveal-search-api-key', strictRateLimitMiddleware, async (c) => {\n    let index = -1;\n    try {\n      const body = await c.req.json();\n      if (body && typeof body === 'object' && typeof (body as { index?: unknown }).index === 'number') {\n        index = Math.floor((body as { index: number }).index);\n      }\n    } catch {\n      index = -1;\n    }\n    const providers = service.currentConfig.tools?.web?.search?.providers ?? [];\n    if (index < 0 || index >= providers.length) {\n      return c.json({ ok: false, error: { message: 'Invalid provider index' } }, 400);\n    }\n    const apiKey = providers[index]?.apiKey?.trim() || null;\n    return c.json({\n      ok: true,\n      payload: { index, apiKey, source: apiKey ? ('config' as const) : ('none' as const) },\n    });\n  });\n}\n\nfunction normalizeRevealGatewayAuthField(raw: unknown): 'token' | 'password' | null {\n  return raw === 'token' || raw === 'password' ? raw : null;\n}\n\nasync function resolveRevealGatewayAuthField(c: Context): Promise<'token' | 'password' | null> {\n  const fromPath = normalizeRevealGatewayAuthField(c.req.param('field'));\n  if (fromPath) return fromPath;\n\n  const fromQuery = normalizeRevealGatewayAuthField(c.req.query('field'));\n  if (fromQuery) return fromQuery;\n\n  try {\n    const body = await c.req.json();\n    return normalizeRevealGatewayAuthField(\n      body && typeof body === 'object' && !Array.isArray(body)\n        ? (body as { field?: unknown }).field\n        : undefined,\n    );\n  } catch {\n    return null;\n  }\n}\n"],"mappings":";;;;;;;AAaA,SAAgB,qBAAqB,eAAqB,MAAoC;CAC5F,MAAM,EAAE,SAAS,8BAA8B;AAE/C,eAAc,KAAK,sBAAsB,2BAA2B,OAAO,MAAM;EAC/E,MAAM,SAAS,MAAM,QAAQ,cAAc;AAC3C,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;GAAQ,CAAC;GAC5C;AAEF,eAAc,KAAK,0BAA0B,2BAA2B,OAAO,MAAM;EACnF,IAAI,SAAS;AACb,MAAI;GACF,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM;AAC/B,OAAI,QAAQ,OAAO,SAAS,YAAY,OAAQ,KAA8B,WAAW,UAAU;IACjG,MAAM,IAAK,KAA4B,OAAO,MAAM;AACpD,QAAI,EAAG,UAAS,EAAE,MAAM,GAAG,IAAI;;UAE3B;AAGR,UAAQ,oBAAoB,EAAE,QAAQ,CAAC;AACvC,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,WAAW,MAAM;GAAE,CAAC;GACzD;AAEF,eAAc,IAAI,eAAe,OAAO,MAAM;EAC5C,MAAM,aAAa,MAAM,0BAA0B,QAAQ;AAC3D,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,QAAQ,YAAY;GAAE,CAAC;GAC5D;AAOF,eAAc,MAAM,eAAe,2BAA2B,OAAO,MAAM;EACzE,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM;EAC/B,MAAM,SAAiB,QAAQ;AAE/B,mBAAiB,QAAQ,KAAK;AAC9B,qBAAmB,QAAQ,KAAK;EAEhC,MAAM,gBAAgB,kBAAkB,QAAQ,KAAK;AACrD,MAAI,cAAc,OAAO,MACvB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,cAAc;GAAO,EAAE,cAAc,OAAoB;EAG7F,MAAM,aAAa,MAAM,eAAe,QAAQ,KAAK;AACrD,MAAI,WAAW,OAAO,MACpB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,WAAW;GAAO,EAAE,WAAW,OAAoB;EAGvF,MAAM,eAAe,0BAA0B,QAAQ,KAAK;AAC5D,MAAI,aAAa,OAAO,MACtB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,aAAa;GAAO,EAAE,aAAa,OAAoB;EAG3F,MAAM,SAAS,MAAM,QAAQ,WAAW,OAAO;AAC/C,MAAI,CAAC,OAAO,MACV,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,OAAO;GAAO,EAAE,IAAI;AAGxD,MAAI,KAAK,SAAS,cAAc,KAAA,KAAa,OAAO,KAAK,QAAQ,cAAc,SAC7E,SAAQ,kCAAkC;EAG5C,MAAM,aAAa,MAAM,0BAA0B,QAAQ;AAC3D,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,QAAQ,YAAY;GAAE,CAAC;GAC5D;CAEF,MAAM,iCAAiC,OAAO,MAAe;EAC3D,MAAM,QAAQ,MAAM,8BAA8B,EAAE;AACpD,MAAI,CAAC,MACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,mCAAmC;GAAE,EAAE,IAAI;EAE1F,MAAM,SAAS,QAAQ;EACvB,MAAM,SACJ,UAAU,UACN,OAAO,SAAS,MAAM,OAAO,MAAM,IAAI,OACvC,OAAO,SAAS,MAAM,UAAU,MAAM,IAAI;AAChD,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IAAE;IAAO;IAAQ,QAAQ,SAAU,WAAsB;IAAkB;GACrF,CAAC;;;;;;AAOJ,eAAc,KACZ,0CACA,2BACA,+BACD;AACD,eAAc,KAAK,mCAAmC,2BAA2B,+BAA+B;;AAGhH,eAAc,KAAK,4CAA4C,2BAA2B,OAAO,MAAM;EAErG,MAAM,SADS,QAAQ,cACD,QAAQ,UAAU,SAAS,OAAO,QAAQ,MAAM,IAAI;AAC1E,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IAAE;IAAQ,QAAQ,SAAU,WAAsB;IAAkB;GAC9E,CAAC;GACF;;AAGF,eAAc,KAAK,wCAAwC,2BAA2B,OAAO,MAAM;EACjG,IAAI,QAAQ;AACZ,MAAI;GACF,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM;AAC/B,OAAI,QAAQ,OAAO,SAAS,YAAY,OAAQ,KAA6B,UAAU,SACrF,SAAQ,KAAK,MAAO,KAA2B,MAAM;UAEjD;AACN,WAAQ;;EAEV,MAAM,YAAY,QAAQ,cAAc,OAAO,KAAK,QAAQ,aAAa,EAAE;AAC3E,MAAI,QAAQ,KAAK,SAAS,UAAU,OAClC,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,0BAA0B;GAAE,EAAE,IAAI;EAEjF,MAAM,SAAS,UAAU,QAAQ,QAAQ,MAAM,IAAI;AACnD,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IAAE;IAAO;IAAQ,QAAQ,SAAU,WAAsB;IAAkB;GACrF,CAAC;GACF;;AAGJ,SAAS,gCAAgC,KAA2C;AAClF,QAAO,QAAQ,WAAW,QAAQ,aAAa,MAAM;;AAGvD,eAAe,8BAA8B,GAAkD;CAC7F,MAAM,WAAW,gCAAgC,EAAE,IAAI,MAAM,QAAQ,CAAC;AACtE,KAAI,SAAU,QAAO;CAErB,MAAM,YAAY,gCAAgC,EAAE,IAAI,MAAM,QAAQ,CAAC;AACvE,KAAI,UAAW,QAAO;AAEtB,KAAI;EACF,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM;AAC/B,SAAO,gCACL,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,GACnD,KAA6B,QAC9B,KAAA,EACL;SACK;AACN,SAAO"}
+{"version":3,"file":"config.js","names":[],"sources":["../../../../../src/gateway/hono/routes/config.ts"],"sourcesContent":["import type { Context, Hono } from 'hono';\n\nimport type { Config } from '../../../config/schema.js';\nimport { buildSafeWebConfigPayload } from '../lib/config-payload.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\nimport {\n  applyAgentsPatch,\n  applyChannelsPatch,\n  applyGatewayPatch,\n  applyMiscPatch,\n  validateGatewayAfterPatch,\n} from './config-patch/index.js';\n\nfunction localeFromRequest(c: { req: { query(name: string): string | undefined; header(name: string): string | undefined } }): string | undefined {\n  return c.req.query('locale') ?? c.req.header('X-XOPC-Locale') ?? c.req.header('Accept-Language')?.split(',')[0];\n}\n\nexport function registerConfigRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  const { service, strictRateLimitMiddleware } = deps;\n\n  authenticated.post('/api/config/reload', strictRateLimitMiddleware, async (c) => {\n    const result = await service.reloadConfig();\n    return c.json({ ok: true, payload: result });\n  });\n\n  authenticated.post('/api/heartbeat/trigger', strictRateLimitMiddleware, async (c) => {\n    let reason = 'manual';\n    try {\n      const body = await c.req.json();\n      if (body && typeof body === 'object' && typeof (body as { reason?: unknown }).reason === 'string') {\n        const r = (body as { reason: string }).reason.trim();\n        if (r) reason = r.slice(0, 120);\n      }\n    } catch {\n      /* empty or invalid body */\n    }\n    service.requestHeartbeatNow({ reason });\n    return c.json({ ok: true, payload: { scheduled: true } });\n  });\n\n  authenticated.get('/api/config', async (c) => {\n    const safeConfig = await buildSafeWebConfigPayload(service, { locale: localeFromRequest(c) });\n    return c.json({ ok: true, payload: { config: safeConfig } });\n  });\n\n  // PATCH /api/config — section patchers run sequentially against the live\n  // config object (mutate-in-place is intentional: the route handler reads\n  // `service.currentConfig` and rewrites it through `saveConfig`). Each\n  // patcher only touches the keys it owns and returns `{ ok: false }` with a\n  // 400 body when validation fails; we surface the first failure verbatim.\n  authenticated.patch('/api/config', strictRateLimitMiddleware, async (c) => {\n    const body = await c.req.json();\n    const config: Config = service.currentConfig as Config;\n\n    applyAgentsPatch(config, body);\n    applyChannelsPatch(config, body);\n\n    const gatewayResult = applyGatewayPatch(config, body);\n    if (gatewayResult.ok === false) {\n      return c.json({ ok: false, error: gatewayResult.error }, gatewayResult.status as 400 | 500);\n    }\n\n    const miscResult = await applyMiscPatch(config, body);\n    if (miscResult.ok === false) {\n      return c.json({ ok: false, error: miscResult.error }, miscResult.status as 400 | 500);\n    }\n\n    const finalGwCheck = validateGatewayAfterPatch(config, body);\n    if (finalGwCheck.ok === false) {\n      return c.json({ ok: false, error: finalGwCheck.error }, finalGwCheck.status as 400 | 500);\n    }\n\n    const result = await service.saveConfig(config);\n    if (!result.saved) {\n      return c.json({ ok: false, error: result.error }, 500);\n    }\n\n    if (body.gateway?.heartbeat !== undefined && typeof body.gateway.heartbeat === 'object') {\n      service.reloadHeartbeatFromCurrentConfig();\n    }\n\n    const safeConfig = await buildSafeWebConfigPayload(service, { locale: localeFromRequest(c) });\n    return c.json({ ok: true, payload: { config: safeConfig } });\n  });\n\n  const revealGatewayAuthSecretHandler = async (c: Context) => {\n    const field = await resolveRevealGatewayAuthField(c);\n    if (!field) {\n      return c.json({ ok: false, error: { message: 'field must be token or password' } }, 400);\n    }\n    const config = service.currentConfig as Config;\n    const secret =\n      field === 'token'\n        ? config.gateway?.auth?.token?.trim() || null\n        : config.gateway?.auth?.password?.trim() || null;\n    return c.json({\n      ok: true,\n      payload: { field, secret, source: secret ? ('config' as const) : ('none' as const) },\n    });\n  };\n\n  /**\n   * POST /api/gateway/reveal-auth-secret/:field — preferred; no JSON body required.\n   * POST /api/gateway/reveal-auth-secret — legacy JSON body `{ field: \"token\" | \"password\" }`.\n   */\n  authenticated.post(\n    '/api/gateway/reveal-auth-secret/:field',\n    strictRateLimitMiddleware,\n    revealGatewayAuthSecretHandler,\n  );\n  authenticated.post('/api/gateway/reveal-auth-secret', strictRateLimitMiddleware, revealGatewayAuthSecretHandler);\n\n  /** POST /api/agents/browser/reveal-cloud-api-key — plaintext browser cloud apiKey from config only. */\n  authenticated.post('/api/agents/browser/reveal-cloud-api-key', strictRateLimitMiddleware, async (c) => {\n    const config = service.currentConfig as Config;\n    const apiKey = config.agents?.defaults?.browser?.cloud?.apiKey?.trim() || null;\n    return c.json({\n      ok: true,\n      payload: { apiKey, source: apiKey ? ('config' as const) : ('none' as const) },\n    });\n  });\n\n  /** POST /api/tools/web/reveal-search-api-key — plaintext search provider apiKey by index. */\n  authenticated.post('/api/tools/web/reveal-search-api-key', strictRateLimitMiddleware, async (c) => {\n    let index = -1;\n    try {\n      const body = await c.req.json();\n      if (body && typeof body === 'object' && typeof (body as { index?: unknown }).index === 'number') {\n        index = Math.floor((body as { index: number }).index);\n      }\n    } catch {\n      index = -1;\n    }\n    const providers = service.currentConfig.tools?.web?.search?.providers ?? [];\n    if (index < 0 || index >= providers.length) {\n      return c.json({ ok: false, error: { message: 'Invalid provider index' } }, 400);\n    }\n    const apiKey = providers[index]?.apiKey?.trim() || null;\n    return c.json({\n      ok: true,\n      payload: { index, apiKey, source: apiKey ? ('config' as const) : ('none' as const) },\n    });\n  });\n}\n\nfunction normalizeRevealGatewayAuthField(raw: unknown): 'token' | 'password' | null {\n  return raw === 'token' || raw === 'password' ? raw : null;\n}\n\nasync function resolveRevealGatewayAuthField(c: Context): Promise<'token' | 'password' | null> {\n  const fromPath = normalizeRevealGatewayAuthField(c.req.param('field'));\n  if (fromPath) return fromPath;\n\n  const fromQuery = normalizeRevealGatewayAuthField(c.req.query('field'));\n  if (fromQuery) return fromQuery;\n\n  try {\n    const body = await c.req.json();\n    return normalizeRevealGatewayAuthField(\n      body && typeof body === 'object' && !Array.isArray(body)\n        ? (body as { field?: unknown }).field\n        : undefined,\n    );\n  } catch {\n    return null;\n  }\n}\n"],"mappings":";;;;;;;AAaA,SAAS,kBAAkB,GAAuH;AAChJ,QAAO,EAAE,IAAI,MAAM,SAAS,IAAI,EAAE,IAAI,OAAO,gBAAgB,IAAI,EAAE,IAAI,OAAO,kBAAkB,EAAE,MAAM,IAAI,CAAC;;AAG/G,SAAgB,qBAAqB,eAAqB,MAAoC;CAC5F,MAAM,EAAE,SAAS,8BAA8B;AAE/C,eAAc,KAAK,sBAAsB,2BAA2B,OAAO,MAAM;EAC/E,MAAM,SAAS,MAAM,QAAQ,cAAc;AAC3C,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;GAAQ,CAAC;GAC5C;AAEF,eAAc,KAAK,0BAA0B,2BAA2B,OAAO,MAAM;EACnF,IAAI,SAAS;AACb,MAAI;GACF,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM;AAC/B,OAAI,QAAQ,OAAO,SAAS,YAAY,OAAQ,KAA8B,WAAW,UAAU;IACjG,MAAM,IAAK,KAA4B,OAAO,MAAM;AACpD,QAAI,EAAG,UAAS,EAAE,MAAM,GAAG,IAAI;;UAE3B;AAGR,UAAQ,oBAAoB,EAAE,QAAQ,CAAC;AACvC,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,WAAW,MAAM;GAAE,CAAC;GACzD;AAEF,eAAc,IAAI,eAAe,OAAO,MAAM;EAC5C,MAAM,aAAa,MAAM,0BAA0B,SAAS,EAAE,QAAQ,kBAAkB,EAAE,EAAE,CAAC;AAC7F,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,QAAQ,YAAY;GAAE,CAAC;GAC5D;AAOF,eAAc,MAAM,eAAe,2BAA2B,OAAO,MAAM;EACzE,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM;EAC/B,MAAM,SAAiB,QAAQ;AAE/B,mBAAiB,QAAQ,KAAK;AAC9B,qBAAmB,QAAQ,KAAK;EAEhC,MAAM,gBAAgB,kBAAkB,QAAQ,KAAK;AACrD,MAAI,cAAc,OAAO,MACvB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,cAAc;GAAO,EAAE,cAAc,OAAoB;EAG7F,MAAM,aAAa,MAAM,eAAe,QAAQ,KAAK;AACrD,MAAI,WAAW,OAAO,MACpB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,WAAW;GAAO,EAAE,WAAW,OAAoB;EAGvF,MAAM,eAAe,0BAA0B,QAAQ,KAAK;AAC5D,MAAI,aAAa,OAAO,MACtB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,aAAa;GAAO,EAAE,aAAa,OAAoB;EAG3F,MAAM,SAAS,MAAM,QAAQ,WAAW,OAAO;AAC/C,MAAI,CAAC,OAAO,MACV,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,OAAO;GAAO,EAAE,IAAI;AAGxD,MAAI,KAAK,SAAS,cAAc,KAAA,KAAa,OAAO,KAAK,QAAQ,cAAc,SAC7E,SAAQ,kCAAkC;EAG5C,MAAM,aAAa,MAAM,0BAA0B,SAAS,EAAE,QAAQ,kBAAkB,EAAE,EAAE,CAAC;AAC7F,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,QAAQ,YAAY;GAAE,CAAC;GAC5D;CAEF,MAAM,iCAAiC,OAAO,MAAe;EAC3D,MAAM,QAAQ,MAAM,8BAA8B,EAAE;AACpD,MAAI,CAAC,MACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,mCAAmC;GAAE,EAAE,IAAI;EAE1F,MAAM,SAAS,QAAQ;EACvB,MAAM,SACJ,UAAU,UACN,OAAO,SAAS,MAAM,OAAO,MAAM,IAAI,OACvC,OAAO,SAAS,MAAM,UAAU,MAAM,IAAI;AAChD,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IAAE;IAAO;IAAQ,QAAQ,SAAU,WAAsB;IAAkB;GACrF,CAAC;;;;;;AAOJ,eAAc,KACZ,0CACA,2BACA,+BACD;AACD,eAAc,KAAK,mCAAmC,2BAA2B,+BAA+B;;AAGhH,eAAc,KAAK,4CAA4C,2BAA2B,OAAO,MAAM;EAErG,MAAM,SADS,QAAQ,cACD,QAAQ,UAAU,SAAS,OAAO,QAAQ,MAAM,IAAI;AAC1E,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IAAE;IAAQ,QAAQ,SAAU,WAAsB;IAAkB;GAC9E,CAAC;GACF;;AAGF,eAAc,KAAK,wCAAwC,2BAA2B,OAAO,MAAM;EACjG,IAAI,QAAQ;AACZ,MAAI;GACF,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM;AAC/B,OAAI,QAAQ,OAAO,SAAS,YAAY,OAAQ,KAA6B,UAAU,SACrF,SAAQ,KAAK,MAAO,KAA2B,MAAM;UAEjD;AACN,WAAQ;;EAEV,MAAM,YAAY,QAAQ,cAAc,OAAO,KAAK,QAAQ,aAAa,EAAE;AAC3E,MAAI,QAAQ,KAAK,SAAS,UAAU,OAClC,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,0BAA0B;GAAE,EAAE,IAAI;EAEjF,MAAM,SAAS,UAAU,QAAQ,QAAQ,MAAM,IAAI;AACnD,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IAAE;IAAO;IAAQ,QAAQ,SAAU,WAAsB;IAAkB;GACrF,CAAC;GACF;;AAGJ,SAAS,gCAAgC,KAA2C;AAClF,QAAO,QAAQ,WAAW,QAAQ,aAAa,MAAM;;AAGvD,eAAe,8BAA8B,GAAkD;CAC7F,MAAM,WAAW,gCAAgC,EAAE,IAAI,MAAM,QAAQ,CAAC;AACtE,KAAI,SAAU,QAAO;CAErB,MAAM,YAAY,gCAAgC,EAAE,IAAI,MAAM,QAAQ,CAAC;AACvE,KAAI,UAAW,QAAO;AAEtB,KAAI;EACF,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM;AAC/B,SAAO,gCACL,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,GACnD,KAA6B,QAC9B,KAAA,EACL;SACK;AACN,SAAO"}

package/dist/src/gateway/hono/routes/dreaming.js

@@ -1,9 +1,9 @@
 import { DREAMING_CRON_NAME, DREAMING_DIR_RELATIVE, DREAMING_LAST_RUN_RELATIVE, DREAMING_LIGHT_CRON_NAME, DREAMING_LIGHT_SWEEP_TOKEN, DREAMING_REM_CRON_NAME, DREAMING_REM_SWEEP_TOKEN, DREAMING_SWEEP_TOKEN, SHORT_TERM_PROMOTION_LOCK_RELATIVE, SHORT_TERM_RECALL_STORE_RELATIVE } from "../../../agent/memory/dreaming/constants.js";
 import { loadDreamingStore, saveDreamingStore } from "../../../agent/memory/dreaming/short-term-store.js";
 import { resolveDreamingConfig } from "../../../agent/memory/dreaming/config.js";
-import { getWorkspacePath } from "../../../config/workspace-path-helpers.js";
 import { parseDreamingLastRunFile } from "../../../agent/memory/dreaming/last-run.js";
 import { readDreamingEvents } from "../../../agent/memory/dreaming/events.js";
+import { getWorkspacePath } from "../../../config/workspace-path-helpers.js";
 import { previewDreamingDeepPromotion } from "../../../agent/memory/dreaming/preview.js";
 import fs from "node:fs/promises";
 import path from "node:path";

package/dist/src/gateway/hono/routes/lazy-bundles.js

@@ -117,7 +117,11 @@ const AUTHENTICATED_LAZY_ROUTE_BUNDLES = [
 	},
 	{
 		id: "commands-skills",
-		match: (path) => startsWithAny(path, ["/api/commands", "/api/skills"]),
+		match: (path) => startsWithAny(path, [
+			"/api/commands",
+			"/api/skills",
+			"/api/chat/skills"
+		]),
 		load: async () => {
 			const { registerCommandsSkillsRoutes } = await import("./commands-skills.js");
 			return { register: registerCommandsSkillsRoutes };
@@ -235,6 +239,14 @@ const AUTHENTICATED_LAZY_ROUTE_BUNDLES = [
 			return { register: registerConnectorRoutes };
 		}
 	},
+	{
+		id: "tui",
+		match: (path) => startsWithAny(path, ["/api/tui"]),
+		load: async () => {
+			const { registerTuiRoutes } = await import("./tui.js");
+			return { register: registerTuiRoutes };
+		}
+	},
 	{
 		id: "mcp",
 		match: (path) => startsWithAny(path, ["/api/mcp"]),

package/dist/src/gateway/hono/routes/lazy-bundles.js.map

@@ -1 +1 @@
-{"version":3,"file":"lazy-bundles.js","names":[],"sources":["../../../../../src/gateway/hono/routes/lazy-bundles.ts"],"sourcesContent":["import type { Hono } from 'hono';\n\nimport type { GatewayService } from '../../service.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\n\nexport type AuthenticatedLazyRouteBundle = {\n  id: string;\n  match: (path: string) => boolean;\n  load: () => Promise<{ register: (authenticated: Hono, deps: AuthenticatedRouteDeps) => void }>;\n};\n\nexport type AppLazyRouteBundle = {\n  id: string;\n  prefixes: readonly string[];\n  match: (path: string) => boolean;\n  load: () => Promise<{\n    registerOnApp: (app: Hono, service: GatewayService) => void;\n  }>;\n};\n\nfunction startsWithAny(path: string, prefixes: readonly string[]): boolean {\n  return prefixes.some((prefix) => path === prefix || path.startsWith(`${prefix}/`));\n}\n\nexport const AUTHENTICATED_LAZY_ROUTE_BUNDLES: readonly AuthenticatedLazyRouteBundle[] = [\n  {\n    id: 'media',\n    match: (path) => startsWithAny(path, ['/api/media']),\n    load: async () => {\n      const { registerMediaRoutes } = await import('./media.js');\n      return { register: registerMediaRoutes };\n    },\n  },\n  {\n    id: 'workspace',\n    match: (path) => startsWithAny(path, ['/api/workspace']),\n    load: async () => {\n      const { registerWorkspaceRoutes } = await import('./workspace.js');\n      return { register: registerWorkspaceRoutes };\n    },\n  },\n  {\n    id: 'host-fs',\n    match: (path) => startsWithAny(path, ['/api/host/fs']),\n    load: async () => {\n      const { registerHostFsRoutes } = await import('./host-fs.js');\n      return { register: registerHostFsRoutes };\n    },\n  },\n  {\n    id: 'channels',\n    match: (path) => startsWithAny(path, ['/api/channels']),\n    load: async () => {\n      const { registerChannelRoutes } = await import('./channels.js');\n      return { register: registerChannelRoutes };\n    },\n  },\n  {\n    id: 'browser-install',\n    match: (path) =>\n      path === '/api/browser/playwright/install/stream' ||\n      path === '/api/browser/cloakbrowser/install/stream',\n    load: async () => {\n      const { registerBrowserInstallRoutes } = await import('./browser-install.js');\n      return { register: registerBrowserInstallRoutes };\n    },\n  },\n  {\n    id: 'browser',\n    // `browser-install` above already matched the SSE install streams; this\n    // catches the remaining /api/browser/* handlers (extension, cdp,\n    // cloakbrowser doctor/launch/install, playwright doctor/install, cloud).\n    match: (path) => startsWithAny(path, ['/api/browser']),\n    load: async () => {\n      const { registerBrowserRoutes } = await import('./browser.js');\n      return { register: registerBrowserRoutes };\n    },\n  },\n  {\n    id: 'config',\n    match: (path) =>\n      startsWithAny(path, [\n        '/api/config',\n        '/api/heartbeat/trigger',\n        // Secret reveal handlers live in config routes but use /api/gateway and\n        // /api/tools paths; without these prefixes the extension-gateway bundle\n        // matches first and returns 404 (no handler for multi-segment paths).\n        '/api/gateway/reveal-auth-secret',\n        '/api/tools/web/reveal-search-api-key',\n      ]),\n    load: async () => {\n      const { registerConfigRoutes } = await import('./config.js');\n      return { register: registerConfigRoutes };\n    },\n  },\n  {\n    id: 'doctor',\n    match: (path) => startsWithAny(path, ['/api/doctor']),\n    load: async () => {\n      const { registerDoctorRoutes } = await import('./doctor.js');\n      return { register: registerDoctorRoutes };\n    },\n  },\n  {\n    id: 'dreaming',\n    match: (path) => startsWithAny(path, ['/api/dreaming']),\n    load: async () => {\n      const { registerDreamingRoutes } = await import('./dreaming.js');\n      return { register: registerDreamingRoutes };\n    },\n  },\n  {\n    id: 'agents',\n    match: (path) => startsWithAny(path, ['/api/agents', '/api/voice/models']),\n    load: async () => {\n      const { registerAgentsRoutes } = await import('./agents.js');\n      return { register: registerAgentsRoutes };\n    },\n  },\n  {\n    id: 'auth-registry-extensions',\n    match: (path) =>\n      startsWithAny(path, [\n        '/api/auth',\n        '/api/registry',\n        '/api/extensions',\n        '/api/context',\n        '/api/marketplace',\n      ]),\n    load: async () => {\n      const { registerAuthRegistryExtensionsRoutes } = await import('./auth-registry-extensions.js');\n      return { register: registerAuthRegistryExtensionsRoutes };\n    },\n  },\n  {\n    id: 'models',\n    match: (path) =>\n      startsWithAny(path, ['/api/models', '/api/models-json', '/api/providers', '/api/image']),\n    load: async () => {\n      const { registerModelsRoutes } = await import('./models.js');\n      return { register: registerModelsRoutes };\n    },\n  },\n  {\n    id: 'commands-skills',\n    match: (path) => startsWithAny(path, ['/api/commands', '/api/skills']),\n    load: async () => {\n      const { registerCommandsSkillsRoutes } = await import('./commands-skills.js');\n      return { register: registerCommandsSkillsRoutes };\n    },\n  },\n  {\n    id: 'cron',\n    match: (path) => startsWithAny(path, ['/api/cron']),\n    load: async () => {\n      const { registerCronRoutes } = await import('./cron.js');\n      return { register: registerCronRoutes };\n    },\n  },\n  {\n    id: 'goals',\n    match: (path) => startsWithAny(path, ['/api/goals']),\n    load: async () => {\n      const { registerGoalsRoutes } = await import('./goals.js');\n      return { register: registerGoalsRoutes };\n    },\n  },\n  {\n    id: 'notes',\n    match: (path) => startsWithAny(path, ['/api/notes']),\n    load: async () => {\n      const { registerNotesRoutes } = await import('./notes.js');\n      return { register: registerNotesRoutes };\n    },\n  },\n  {\n    id: 'home',\n    match: (path) => startsWithAny(path, ['/api/home']),\n    load: async () => {\n      const { registerHomeRoutes } = await import('./home.js');\n      return { register: registerHomeRoutes };\n    },\n  },\n  {\n    id: 'workflows',\n    match: (path) => startsWithAny(path, ['/api/workflows']),\n    load: async () => {\n      const { registerWorkflowRoutes } = await import('./workflows.js');\n      return { register: registerWorkflowRoutes };\n    },\n  },\n  {\n    id: 'logs',\n    match: (path) => startsWithAny(path, ['/api/logs']),\n    load: async () => {\n      const { registerLogsRoutes } = await import('./logs.js');\n      return { register: registerLogsRoutes };\n    },\n  },\n  {\n    id: 'shares',\n    match: (path) => startsWithAny(path, ['/api/shares']),\n    load: async () => {\n      const { registerShareRoutes } = await import('./shares.js');\n      return { register: registerShareRoutes };\n    },\n  },\n  {\n    id: 'site-shares',\n    match: (path) => startsWithAny(path, ['/api/site-shares']),\n    load: async () => {\n      const { registerSiteShareRoutes } = await import('./site-shares.js');\n      return { register: registerSiteShareRoutes };\n    },\n  },\n  {\n    id: 'tunnel',\n    match: (path) => startsWithAny(path, ['/api/tunnel']),\n    load: async () => {\n      const { registerTunnelRoutes } = await import('./tunnel.js');\n      return { register: registerTunnelRoutes };\n    },\n  },\n  {\n    id: 'exposure',\n    match: (path) => startsWithAny(path, ['/api/exposure']),\n    load: async () => {\n      const { registerExposureRoutes } = await import('./exposure.js');\n      return { register: registerExposureRoutes };\n    },\n  },\n  {\n    id: 'extension-gateway',\n    match: (path) => startsWithAny(path, ['/api/gateway']),\n    load: async () => {\n      const { registerExtensionGatewayRoutes } = await import('./extension-gateway.js');\n      return { register: registerExtensionGatewayRoutes };\n    },\n  },\n  {\n    id: 'update',\n    match: (path) => startsWithAny(path, ['/api/update']),\n    load: async () => {\n      const { registerUpdateRoutes } = await import('./update.js');\n      return { register: registerUpdateRoutes };\n    },\n  },\n  {\n    id: 'voice',\n    match: (path) => startsWithAny(path, ['/api/voice']) && path !== '/api/voice/models',\n    load: async () => {\n      const { registerVoiceRoutes } = await import('./voice.js');\n      return { register: registerVoiceRoutes };\n    },\n  },\n  {\n    id: 'connectors',\n    match: (path) => startsWithAny(path, ['/api/connectors']),\n    load: async () => {\n      const { registerConnectorRoutes } = await import('./connectors.js');\n      return { register: registerConnectorRoutes };\n    },\n  },\n  {\n    id: 'mcp',\n    match: (path) => startsWithAny(path, ['/api/mcp']),\n    load: async () => {\n      const { registerMcpRoutes } = await import('./mcp.js');\n      return { register: registerMcpRoutes };\n    },\n  },\n];\n\nexport const APP_LAZY_ROUTE_BUNDLES: readonly AppLazyRouteBundle[] = [\n  {\n    id: 'shares-public',\n    prefixes: ['/s'],\n    match: (path) => startsWithAny(path, ['/s']),\n    load: async () => {\n      const { registerSharePublicRoutes } = await import('./shares.js');\n      return { registerOnApp: registerSharePublicRoutes };\n    },\n  },\n  {\n    id: 'tunnel-public',\n    prefixes: [\n      '/api/tunnel/pair/ping',\n      '/api/tunnel/pair/validate-url',\n      '/api/tunnel/exchange-token',\n    ],\n    match: (path) =>\n      path === '/api/tunnel/exchange-token' ||\n      path === '/api/tunnel/pair/ping' ||\n      path === '/api/tunnel/pair/validate-url',\n    load: async () => {\n      const { registerTunnelPublicRoutes } = await import('./tunnel.js');\n      return { registerOnApp: registerTunnelPublicRoutes };\n    },\n  },\n];\n\nexport function findAuthenticatedLazyRouteBundle(path: string): AuthenticatedLazyRouteBundle | undefined {\n  return AUTHENTICATED_LAZY_ROUTE_BUNDLES.find((bundle) => bundle.match(path));\n}\n"],"mappings":";AAoBA,SAAS,cAAc,MAAc,UAAsC;AACzE,QAAO,SAAS,MAAM,WAAW,SAAS,UAAU,KAAK,WAAW,GAAG,OAAO,GAAG,CAAC;;AAGpF,MAAa,mCAA4E;CACvF;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,aAAa,CAAC;EACpD,MAAM,YAAY;GAChB,MAAM,EAAE,wBAAwB,MAAM,OAAO;AAC7C,UAAO,EAAE,UAAU,qBAAqB;;EAE3C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,iBAAiB,CAAC;EACxD,MAAM,YAAY;GAChB,MAAM,EAAE,4BAA4B,MAAM,OAAO;AACjD,UAAO,EAAE,UAAU,yBAAyB;;EAE/C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,eAAe,CAAC;EACtD,MAAM,YAAY;GAChB,MAAM,EAAE,yBAAyB,MAAM,OAAO;AAC9C,UAAO,EAAE,UAAU,sBAAsB;;EAE5C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,gBAAgB,CAAC;EACvD,MAAM,YAAY;GAChB,MAAM,EAAE,0BAA0B,MAAM,OAAO;AAC/C,UAAO,EAAE,UAAU,uBAAuB;;EAE7C;CACD;EACE,IAAI;EACJ,QAAQ,SACN,SAAS,4CACT,SAAS;EACX,MAAM,YAAY;GAChB,MAAM,EAAE,iCAAiC,MAAM,OAAO;AACtD,UAAO,EAAE,UAAU,8BAA8B;;EAEpD;CACD;EACE,IAAI;EAIJ,QAAQ,SAAS,cAAc,MAAM,CAAC,eAAe,CAAC;EACtD,MAAM,YAAY;GAChB,MAAM,EAAE,0BAA0B,MAAM,OAAO;AAC/C,UAAO,EAAE,UAAU,uBAAuB;;EAE7C;CACD;EACE,IAAI;EACJ,QAAQ,SACN,cAAc,MAAM;GAClB;GACA;GAIA;GACA;GACD,CAAC;EACJ,MAAM,YAAY;GAChB,MAAM,EAAE,yBAAyB,MAAM,OAAO;AAC9C,UAAO,EAAE,UAAU,sBAAsB;;EAE5C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,cAAc,CAAC;EACrD,MAAM,YAAY;GAChB,MAAM,EAAE,yBAAyB,MAAM,OAAO;AAC9C,UAAO,EAAE,UAAU,sBAAsB;;EAE5C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,gBAAgB,CAAC;EACvD,MAAM,YAAY;GAChB,MAAM,EAAE,2BAA2B,MAAM,OAAO;AAChD,UAAO,EAAE,UAAU,wBAAwB;;EAE9C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,eAAe,oBAAoB,CAAC;EAC1E,MAAM,YAAY;GAChB,MAAM,EAAE,yBAAyB,MAAM,OAAO;AAC9C,UAAO,EAAE,UAAU,sBAAsB;;EAE5C;CACD;EACE,IAAI;EACJ,QAAQ,SACN,cAAc,MAAM;GAClB;GACA;GACA;GACA;GACA;GACD,CAAC;EACJ,MAAM,YAAY;GAChB,MAAM,EAAE,yCAAyC,MAAM,OAAO;AAC9D,UAAO,EAAE,UAAU,sCAAsC;;EAE5D;CACD;EACE,IAAI;EACJ,QAAQ,SACN,cAAc,MAAM;GAAC;GAAe;GAAoB;GAAkB;GAAa,CAAC;EAC1F,MAAM,YAAY;GAChB,MAAM,EAAE,yBAAyB,MAAM,OAAO;AAC9C,UAAO,EAAE,UAAU,sBAAsB;;EAE5C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,iBAAiB,cAAc,CAAC;EACtE,MAAM,YAAY;GAChB,MAAM,EAAE,iCAAiC,MAAM,OAAO;AACtD,UAAO,EAAE,UAAU,8BAA8B;;EAEpD;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,YAAY,CAAC;EACnD,MAAM,YAAY;GAChB,MAAM,EAAE,uBAAuB,MAAM,OAAO;AAC5C,UAAO,EAAE,UAAU,oBAAoB;;EAE1C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,aAAa,CAAC;EACpD,MAAM,YAAY;GAChB,MAAM,EAAE,wBAAwB,MAAM,OAAO;AAC7C,UAAO,EAAE,UAAU,qBAAqB;;EAE3C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,aAAa,CAAC;EACpD,MAAM,YAAY;GAChB,MAAM,EAAE,wBAAwB,MAAM,OAAO;AAC7C,UAAO,EAAE,UAAU,qBAAqB;;EAE3C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,YAAY,CAAC;EACnD,MAAM,YAAY;GAChB,MAAM,EAAE,uBAAuB,MAAM,OAAO;AAC5C,UAAO,EAAE,UAAU,oBAAoB;;EAE1C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,iBAAiB,CAAC;EACxD,MAAM,YAAY;GAChB,MAAM,EAAE,2BAA2B,MAAM,OAAO;AAChD,UAAO,EAAE,UAAU,wBAAwB;;EAE9C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,YAAY,CAAC;EACnD,MAAM,YAAY;GAChB,MAAM,EAAE,uBAAuB,MAAM,OAAO;AAC5C,UAAO,EAAE,UAAU,oBAAoB;;EAE1C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,cAAc,CAAC;EACrD,MAAM,YAAY;GAChB,MAAM,EAAE,wBAAwB,MAAM,OAAO;AAC7C,UAAO,EAAE,UAAU,qBAAqB;;EAE3C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,mBAAmB,CAAC;EAC1D,MAAM,YAAY;GAChB,MAAM,EAAE,4BAA4B,MAAM,OAAO;AACjD,UAAO,EAAE,UAAU,yBAAyB;;EAE/C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,cAAc,CAAC;EACrD,MAAM,YAAY;GAChB,MAAM,EAAE,yBAAyB,MAAM,OAAO;AAC9C,UAAO,EAAE,UAAU,sBAAsB;;EAE5C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,gBAAgB,CAAC;EACvD,MAAM,YAAY;GAChB,MAAM,EAAE,2BAA2B,MAAM,OAAO;AAChD,UAAO,EAAE,UAAU,wBAAwB;;EAE9C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,eAAe,CAAC;EACtD,MAAM,YAAY;GAChB,MAAM,EAAE,mCAAmC,MAAM,OAAO;AACxD,UAAO,EAAE,UAAU,gCAAgC;;EAEtD;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,cAAc,CAAC;EACrD,MAAM,YAAY;GAChB,MAAM,EAAE,yBAAyB,MAAM,OAAO;AAC9C,UAAO,EAAE,UAAU,sBAAsB;;EAE5C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,aAAa,CAAC,IAAI,SAAS;EACjE,MAAM,YAAY;GAChB,MAAM,EAAE,wBAAwB,MAAM,OAAO;AAC7C,UAAO,EAAE,UAAU,qBAAqB;;EAE3C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,kBAAkB,CAAC;EACzD,MAAM,YAAY;GAChB,MAAM,EAAE,4BAA4B,MAAM,OAAO;AACjD,UAAO,EAAE,UAAU,yBAAyB;;EAE/C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,WAAW,CAAC;EAClD,MAAM,YAAY;GAChB,MAAM,EAAE,sBAAsB,MAAM,OAAO;AAC3C,UAAO,EAAE,UAAU,mBAAmB;;EAEzC;CACF;AAED,MAAa,yBAAwD,CACnE;CACE,IAAI;CACJ,UAAU,CAAC,KAAK;CAChB,QAAQ,SAAS,cAAc,MAAM,CAAC,KAAK,CAAC;CAC5C,MAAM,YAAY;EAChB,MAAM,EAAE,8BAA8B,MAAM,OAAO;AACnD,SAAO,EAAE,eAAe,2BAA2B;;CAEtD,EACD;CACE,IAAI;CACJ,UAAU;EACR;EACA;EACA;EACD;CACD,QAAQ,SACN,SAAS,gCACT,SAAS,2BACT,SAAS;CACX,MAAM,YAAY;EAChB,MAAM,EAAE,+BAA+B,MAAM,OAAO;AACpD,SAAO,EAAE,eAAe,4BAA4B;;CAEvD,CACF;AAED,SAAgB,iCAAiC,MAAwD;AACvG,QAAO,iCAAiC,MAAM,WAAW,OAAO,MAAM,KAAK,CAAC"}
+{"version":3,"file":"lazy-bundles.js","names":[],"sources":["../../../../../src/gateway/hono/routes/lazy-bundles.ts"],"sourcesContent":["import type { Hono } from 'hono';\n\nimport type { GatewayService } from '../../service.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\n\nexport type AuthenticatedLazyRouteBundle = {\n  id: string;\n  match: (path: string) => boolean;\n  load: () => Promise<{ register: (authenticated: Hono, deps: AuthenticatedRouteDeps) => void }>;\n};\n\nexport type AppLazyRouteBundle = {\n  id: string;\n  prefixes: readonly string[];\n  match: (path: string) => boolean;\n  load: () => Promise<{\n    registerOnApp: (app: Hono, service: GatewayService) => void;\n  }>;\n};\n\nfunction startsWithAny(path: string, prefixes: readonly string[]): boolean {\n  return prefixes.some((prefix) => path === prefix || path.startsWith(`${prefix}/`));\n}\n\nexport const AUTHENTICATED_LAZY_ROUTE_BUNDLES: readonly AuthenticatedLazyRouteBundle[] = [\n  {\n    id: 'media',\n    match: (path) => startsWithAny(path, ['/api/media']),\n    load: async () => {\n      const { registerMediaRoutes } = await import('./media.js');\n      return { register: registerMediaRoutes };\n    },\n  },\n  {\n    id: 'workspace',\n    match: (path) => startsWithAny(path, ['/api/workspace']),\n    load: async () => {\n      const { registerWorkspaceRoutes } = await import('./workspace.js');\n      return { register: registerWorkspaceRoutes };\n    },\n  },\n  {\n    id: 'host-fs',\n    match: (path) => startsWithAny(path, ['/api/host/fs']),\n    load: async () => {\n      const { registerHostFsRoutes } = await import('./host-fs.js');\n      return { register: registerHostFsRoutes };\n    },\n  },\n  {\n    id: 'channels',\n    match: (path) => startsWithAny(path, ['/api/channels']),\n    load: async () => {\n      const { registerChannelRoutes } = await import('./channels.js');\n      return { register: registerChannelRoutes };\n    },\n  },\n  {\n    id: 'browser-install',\n    match: (path) =>\n      path === '/api/browser/playwright/install/stream' ||\n      path === '/api/browser/cloakbrowser/install/stream',\n    load: async () => {\n      const { registerBrowserInstallRoutes } = await import('./browser-install.js');\n      return { register: registerBrowserInstallRoutes };\n    },\n  },\n  {\n    id: 'browser',\n    // `browser-install` above already matched the SSE install streams; this\n    // catches the remaining /api/browser/* handlers (extension, cdp,\n    // cloakbrowser doctor/launch/install, playwright doctor/install, cloud).\n    match: (path) => startsWithAny(path, ['/api/browser']),\n    load: async () => {\n      const { registerBrowserRoutes } = await import('./browser.js');\n      return { register: registerBrowserRoutes };\n    },\n  },\n  {\n    id: 'config',\n    match: (path) =>\n      startsWithAny(path, [\n        '/api/config',\n        '/api/heartbeat/trigger',\n        // Secret reveal handlers live in config routes but use /api/gateway and\n        // /api/tools paths; without these prefixes the extension-gateway bundle\n        // matches first and returns 404 (no handler for multi-segment paths).\n        '/api/gateway/reveal-auth-secret',\n        '/api/tools/web/reveal-search-api-key',\n      ]),\n    load: async () => {\n      const { registerConfigRoutes } = await import('./config.js');\n      return { register: registerConfigRoutes };\n    },\n  },\n  {\n    id: 'doctor',\n    match: (path) => startsWithAny(path, ['/api/doctor']),\n    load: async () => {\n      const { registerDoctorRoutes } = await import('./doctor.js');\n      return { register: registerDoctorRoutes };\n    },\n  },\n  {\n    id: 'dreaming',\n    match: (path) => startsWithAny(path, ['/api/dreaming']),\n    load: async () => {\n      const { registerDreamingRoutes } = await import('./dreaming.js');\n      return { register: registerDreamingRoutes };\n    },\n  },\n  {\n    id: 'agents',\n    match: (path) => startsWithAny(path, ['/api/agents', '/api/voice/models']),\n    load: async () => {\n      const { registerAgentsRoutes } = await import('./agents.js');\n      return { register: registerAgentsRoutes };\n    },\n  },\n  {\n    id: 'auth-registry-extensions',\n    match: (path) =>\n      startsWithAny(path, [\n        '/api/auth',\n        '/api/registry',\n        '/api/extensions',\n        '/api/context',\n        '/api/marketplace',\n      ]),\n    load: async () => {\n      const { registerAuthRegistryExtensionsRoutes } = await import('./auth-registry-extensions.js');\n      return { register: registerAuthRegistryExtensionsRoutes };\n    },\n  },\n  {\n    id: 'models',\n    match: (path) =>\n      startsWithAny(path, ['/api/models', '/api/models-json', '/api/providers', '/api/image']),\n    load: async () => {\n      const { registerModelsRoutes } = await import('./models.js');\n      return { register: registerModelsRoutes };\n    },\n  },\n  {\n    id: 'commands-skills',\n    match: (path) => startsWithAny(path, ['/api/commands', '/api/skills', '/api/chat/skills']),\n    load: async () => {\n      const { registerCommandsSkillsRoutes } = await import('./commands-skills.js');\n      return { register: registerCommandsSkillsRoutes };\n    },\n  },\n  {\n    id: 'cron',\n    match: (path) => startsWithAny(path, ['/api/cron']),\n    load: async () => {\n      const { registerCronRoutes } = await import('./cron.js');\n      return { register: registerCronRoutes };\n    },\n  },\n  {\n    id: 'goals',\n    match: (path) => startsWithAny(path, ['/api/goals']),\n    load: async () => {\n      const { registerGoalsRoutes } = await import('./goals.js');\n      return { register: registerGoalsRoutes };\n    },\n  },\n  {\n    id: 'notes',\n    match: (path) => startsWithAny(path, ['/api/notes']),\n    load: async () => {\n      const { registerNotesRoutes } = await import('./notes.js');\n      return { register: registerNotesRoutes };\n    },\n  },\n  {\n    id: 'home',\n    match: (path) => startsWithAny(path, ['/api/home']),\n    load: async () => {\n      const { registerHomeRoutes } = await import('./home.js');\n      return { register: registerHomeRoutes };\n    },\n  },\n  {\n    id: 'workflows',\n    match: (path) => startsWithAny(path, ['/api/workflows']),\n    load: async () => {\n      const { registerWorkflowRoutes } = await import('./workflows.js');\n      return { register: registerWorkflowRoutes };\n    },\n  },\n  {\n    id: 'logs',\n    match: (path) => startsWithAny(path, ['/api/logs']),\n    load: async () => {\n      const { registerLogsRoutes } = await import('./logs.js');\n      return { register: registerLogsRoutes };\n    },\n  },\n  {\n    id: 'shares',\n    match: (path) => startsWithAny(path, ['/api/shares']),\n    load: async () => {\n      const { registerShareRoutes } = await import('./shares.js');\n      return { register: registerShareRoutes };\n    },\n  },\n  {\n    id: 'site-shares',\n    match: (path) => startsWithAny(path, ['/api/site-shares']),\n    load: async () => {\n      const { registerSiteShareRoutes } = await import('./site-shares.js');\n      return { register: registerSiteShareRoutes };\n    },\n  },\n  {\n    id: 'tunnel',\n    match: (path) => startsWithAny(path, ['/api/tunnel']),\n    load: async () => {\n      const { registerTunnelRoutes } = await import('./tunnel.js');\n      return { register: registerTunnelRoutes };\n    },\n  },\n  {\n    id: 'exposure',\n    match: (path) => startsWithAny(path, ['/api/exposure']),\n    load: async () => {\n      const { registerExposureRoutes } = await import('./exposure.js');\n      return { register: registerExposureRoutes };\n    },\n  },\n  {\n    id: 'extension-gateway',\n    match: (path) => startsWithAny(path, ['/api/gateway']),\n    load: async () => {\n      const { registerExtensionGatewayRoutes } = await import('./extension-gateway.js');\n      return { register: registerExtensionGatewayRoutes };\n    },\n  },\n  {\n    id: 'update',\n    match: (path) => startsWithAny(path, ['/api/update']),\n    load: async () => {\n      const { registerUpdateRoutes } = await import('./update.js');\n      return { register: registerUpdateRoutes };\n    },\n  },\n  {\n    id: 'voice',\n    match: (path) => startsWithAny(path, ['/api/voice']) && path !== '/api/voice/models',\n    load: async () => {\n      const { registerVoiceRoutes } = await import('./voice.js');\n      return { register: registerVoiceRoutes };\n    },\n  },\n  {\n    id: 'connectors',\n    match: (path) => startsWithAny(path, ['/api/connectors']),\n    load: async () => {\n      const { registerConnectorRoutes } = await import('./connectors.js');\n      return { register: registerConnectorRoutes };\n    },\n  },\n  {\n    id: 'tui',\n    match: (path) => startsWithAny(path, ['/api/tui']),\n    load: async () => {\n      const { registerTuiRoutes } = await import('./tui.js');\n      return { register: registerTuiRoutes };\n    },\n  },\n  {\n    id: 'mcp',\n    match: (path) => startsWithAny(path, ['/api/mcp']),\n    load: async () => {\n      const { registerMcpRoutes } = await import('./mcp.js');\n      return { register: registerMcpRoutes };\n    },\n  },\n];\n\nexport const APP_LAZY_ROUTE_BUNDLES: readonly AppLazyRouteBundle[] = [\n  {\n    id: 'shares-public',\n    prefixes: ['/s'],\n    match: (path) => startsWithAny(path, ['/s']),\n    load: async () => {\n      const { registerSharePublicRoutes } = await import('./shares.js');\n      return { registerOnApp: registerSharePublicRoutes };\n    },\n  },\n  {\n    id: 'tunnel-public',\n    prefixes: [\n      '/api/tunnel/pair/ping',\n      '/api/tunnel/pair/validate-url',\n      '/api/tunnel/exchange-token',\n    ],\n    match: (path) =>\n      path === '/api/tunnel/exchange-token' ||\n      path === '/api/tunnel/pair/ping' ||\n      path === '/api/tunnel/pair/validate-url',\n    load: async () => {\n      const { registerTunnelPublicRoutes } = await import('./tunnel.js');\n      return { registerOnApp: registerTunnelPublicRoutes };\n    },\n  },\n];\n\nexport function findAuthenticatedLazyRouteBundle(path: string): AuthenticatedLazyRouteBundle | undefined {\n  return AUTHENTICATED_LAZY_ROUTE_BUNDLES.find((bundle) => bundle.match(path));\n}\n"],"mappings":";AAoBA,SAAS,cAAc,MAAc,UAAsC;AACzE,QAAO,SAAS,MAAM,WAAW,SAAS,UAAU,KAAK,WAAW,GAAG,OAAO,GAAG,CAAC;;AAGpF,MAAa,mCAA4E;CACvF;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,aAAa,CAAC;EACpD,MAAM,YAAY;GAChB,MAAM,EAAE,wBAAwB,MAAM,OAAO;AAC7C,UAAO,EAAE,UAAU,qBAAqB;;EAE3C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,iBAAiB,CAAC;EACxD,MAAM,YAAY;GAChB,MAAM,EAAE,4BAA4B,MAAM,OAAO;AACjD,UAAO,EAAE,UAAU,yBAAyB;;EAE/C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,eAAe,CAAC;EACtD,MAAM,YAAY;GAChB,MAAM,EAAE,yBAAyB,MAAM,OAAO;AAC9C,UAAO,EAAE,UAAU,sBAAsB;;EAE5C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,gBAAgB,CAAC;EACvD,MAAM,YAAY;GAChB,MAAM,EAAE,0BAA0B,MAAM,OAAO;AAC/C,UAAO,EAAE,UAAU,uBAAuB;;EAE7C;CACD;EACE,IAAI;EACJ,QAAQ,SACN,SAAS,4CACT,SAAS;EACX,MAAM,YAAY;GAChB,MAAM,EAAE,iCAAiC,MAAM,OAAO;AACtD,UAAO,EAAE,UAAU,8BAA8B;;EAEpD;CACD;EACE,IAAI;EAIJ,QAAQ,SAAS,cAAc,MAAM,CAAC,eAAe,CAAC;EACtD,MAAM,YAAY;GAChB,MAAM,EAAE,0BAA0B,MAAM,OAAO;AAC/C,UAAO,EAAE,UAAU,uBAAuB;;EAE7C;CACD;EACE,IAAI;EACJ,QAAQ,SACN,cAAc,MAAM;GAClB;GACA;GAIA;GACA;GACD,CAAC;EACJ,MAAM,YAAY;GAChB,MAAM,EAAE,yBAAyB,MAAM,OAAO;AAC9C,UAAO,EAAE,UAAU,sBAAsB;;EAE5C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,cAAc,CAAC;EACrD,MAAM,YAAY;GAChB,MAAM,EAAE,yBAAyB,MAAM,OAAO;AAC9C,UAAO,EAAE,UAAU,sBAAsB;;EAE5C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,gBAAgB,CAAC;EACvD,MAAM,YAAY;GAChB,MAAM,EAAE,2BAA2B,MAAM,OAAO;AAChD,UAAO,EAAE,UAAU,wBAAwB;;EAE9C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,eAAe,oBAAoB,CAAC;EAC1E,MAAM,YAAY;GAChB,MAAM,EAAE,yBAAyB,MAAM,OAAO;AAC9C,UAAO,EAAE,UAAU,sBAAsB;;EAE5C;CACD;EACE,IAAI;EACJ,QAAQ,SACN,cAAc,MAAM;GAClB;GACA;GACA;GACA;GACA;GACD,CAAC;EACJ,MAAM,YAAY;GAChB,MAAM,EAAE,yCAAyC,MAAM,OAAO;AAC9D,UAAO,EAAE,UAAU,sCAAsC;;EAE5D;CACD;EACE,IAAI;EACJ,QAAQ,SACN,cAAc,MAAM;GAAC;GAAe;GAAoB;GAAkB;GAAa,CAAC;EAC1F,MAAM,YAAY;GAChB,MAAM,EAAE,yBAAyB,MAAM,OAAO;AAC9C,UAAO,EAAE,UAAU,sBAAsB;;EAE5C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM;GAAC;GAAiB;GAAe;GAAmB,CAAC;EAC1F,MAAM,YAAY;GAChB,MAAM,EAAE,iCAAiC,MAAM,OAAO;AACtD,UAAO,EAAE,UAAU,8BAA8B;;EAEpD;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,YAAY,CAAC;EACnD,MAAM,YAAY;GAChB,MAAM,EAAE,uBAAuB,MAAM,OAAO;AAC5C,UAAO,EAAE,UAAU,oBAAoB;;EAE1C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,aAAa,CAAC;EACpD,MAAM,YAAY;GAChB,MAAM,EAAE,wBAAwB,MAAM,OAAO;AAC7C,UAAO,EAAE,UAAU,qBAAqB;;EAE3C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,aAAa,CAAC;EACpD,MAAM,YAAY;GAChB,MAAM,EAAE,wBAAwB,MAAM,OAAO;AAC7C,UAAO,EAAE,UAAU,qBAAqB;;EAE3C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,YAAY,CAAC;EACnD,MAAM,YAAY;GAChB,MAAM,EAAE,uBAAuB,MAAM,OAAO;AAC5C,UAAO,EAAE,UAAU,oBAAoB;;EAE1C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,iBAAiB,CAAC;EACxD,MAAM,YAAY;GAChB,MAAM,EAAE,2BAA2B,MAAM,OAAO;AAChD,UAAO,EAAE,UAAU,wBAAwB;;EAE9C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,YAAY,CAAC;EACnD,MAAM,YAAY;GAChB,MAAM,EAAE,uBAAuB,MAAM,OAAO;AAC5C,UAAO,EAAE,UAAU,oBAAoB;;EAE1C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,cAAc,CAAC;EACrD,MAAM,YAAY;GAChB,MAAM,EAAE,wBAAwB,MAAM,OAAO;AAC7C,UAAO,EAAE,UAAU,qBAAqB;;EAE3C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,mBAAmB,CAAC;EAC1D,MAAM,YAAY;GAChB,MAAM,EAAE,4BAA4B,MAAM,OAAO;AACjD,UAAO,EAAE,UAAU,yBAAyB;;EAE/C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,cAAc,CAAC;EACrD,MAAM,YAAY;GAChB,MAAM,EAAE,yBAAyB,MAAM,OAAO;AAC9C,UAAO,EAAE,UAAU,sBAAsB;;EAE5C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,gBAAgB,CAAC;EACvD,MAAM,YAAY;GAChB,MAAM,EAAE,2BAA2B,MAAM,OAAO;AAChD,UAAO,EAAE,UAAU,wBAAwB;;EAE9C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,eAAe,CAAC;EACtD,MAAM,YAAY;GAChB,MAAM,EAAE,mCAAmC,MAAM,OAAO;AACxD,UAAO,EAAE,UAAU,gCAAgC;;EAEtD;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,cAAc,CAAC;EACrD,MAAM,YAAY;GAChB,MAAM,EAAE,yBAAyB,MAAM,OAAO;AAC9C,UAAO,EAAE,UAAU,sBAAsB;;EAE5C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,aAAa,CAAC,IAAI,SAAS;EACjE,MAAM,YAAY;GAChB,MAAM,EAAE,wBAAwB,MAAM,OAAO;AAC7C,UAAO,EAAE,UAAU,qBAAqB;;EAE3C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,kBAAkB,CAAC;EACzD,MAAM,YAAY;GAChB,MAAM,EAAE,4BAA4B,MAAM,OAAO;AACjD,UAAO,EAAE,UAAU,yBAAyB;;EAE/C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,WAAW,CAAC;EAClD,MAAM,YAAY;GAChB,MAAM,EAAE,sBAAsB,MAAM,OAAO;AAC3C,UAAO,EAAE,UAAU,mBAAmB;;EAEzC;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,WAAW,CAAC;EAClD,MAAM,YAAY;GAChB,MAAM,EAAE,sBAAsB,MAAM,OAAO;AAC3C,UAAO,EAAE,UAAU,mBAAmB;;EAEzC;CACF;AAED,MAAa,yBAAwD,CACnE;CACE,IAAI;CACJ,UAAU,CAAC,KAAK;CAChB,QAAQ,SAAS,cAAc,MAAM,CAAC,KAAK,CAAC;CAC5C,MAAM,YAAY;EAChB,MAAM,EAAE,8BAA8B,MAAM,OAAO;AACnD,SAAO,EAAE,eAAe,2BAA2B;;CAEtD,EACD;CACE,IAAI;CACJ,UAAU;EACR;EACA;EACA;EACD;CACD,QAAQ,SACN,SAAS,gCACT,SAAS,2BACT,SAAS;CACX,MAAM,YAAY;EAChB,MAAM,EAAE,+BAA+B,MAAM,OAAO;AACpD,SAAO,EAAE,eAAe,4BAA4B;;CAEvD,CACF;AAED,SAAgB,iCAAiC,MAAwD;AACvG,QAAO,iCAAiC,MAAM,WAAW,OAAO,MAAM,KAAK,CAAC"}

package/dist/src/gateway/hono/routes/public-gateway.js

@@ -33,11 +33,9 @@ function registerPublicGatewayRoutes(app, service) {
 				"POST /api/agent/steer",
 				"POST /api/send",
 				"GET  /api/events          (SSE stream)",
+				"GET  /api/channels/catalog",
 				"GET  /api/channels/status",
-				"POST /api/channels/weixin/login/start",
-				"GET  /api/channels/weixin/login/:sessionKey",
-				"POST /api/channels/feishu/setup/start",
-				"GET  /api/channels/feishu/setup/:sessionKey",
+				"POST /api/channels/:channelId/actions/:actionId",
 				"GET  /api/config",
 				"GET  /api/agents",
 				"POST /api/agents",

package/dist/src/gateway/hono/routes/public-gateway.js.map

@@ -1 +1 @@
-{"version":3,"file":"public-gateway.js","names":[],"sources":["../../../../../src/gateway/hono/routes/public-gateway.ts"],"sourcesContent":["import type { Hono } from 'hono';\n\nimport { PACKAGE_VERSION } from '../../../package-version.js';\nimport type { GatewayService } from '../../service.js';\nimport { serveStaticFile } from '../lib/static-ui.js';\n\nexport function registerPublicGatewayRoutes(app: Hono, service: GatewayService): void {\n  app.get('/health', (c) => {\n    return c.json(service.getHealth());\n  });\n\n  /** Public liveness probe (no auth) — minimal payload for CLI / load balancers. */\n  app.get('/api/health', (c) => {\n    const health = service.getHealth();\n    return c.json({\n      status: health.ready ? 'ok' : 'starting',\n      ready: health.ready,\n      httpListening: health.httpListening,\n      version: health.version,\n      uptime: health.uptime,\n      startupDurationMs: health.startupDurationMs,\n    });\n  });\n\n  app.get('/api', (c) => {\n    return c.json({\n      service: 'xopc-gateway',\n      version: PACKAGE_VERSION,\n      transport: 'streamable-http',\n      endpoints: [\n        'GET  /health',\n        'GET  /api/health',\n        'GET  /status',\n        'GET  /api/status',\n        'POST /api/agent           (SSE stream / JSON)',\n        'POST /api/agent/abort',\n        'POST /api/agent/steer',\n        'POST /api/send',\n        'GET  /api/events          (SSE stream)',\n        'GET  /api/channels/status',\n        'POST /api/channels/weixin/login/start',\n        'GET  /api/channels/weixin/login/:sessionKey',\n        'POST /api/channels/feishu/setup/start',\n        'GET  /api/channels/feishu/setup/:sessionKey',\n        'GET  /api/config',\n        'GET  /api/agents',\n        'POST /api/agents',\n        'PATCH /api/agents/:id',\n        'DELETE /api/agents/:id',\n        'GET/PUT/DELETE /api/agents/:id/avatar',\n        'GET/PUT /api/agents/:id/files/...',\n        'DELETE /api/providers/:providerId/key',\n        'PATCH /api/config',\n        'POST /api/config/reload',\n        'POST /api/heartbeat/trigger',\n        '...  /api/cron/*',\n        'GET/PATCH /api/sessions/:key/agent-config',\n        '...  /api/sessions/*',\n        'GET  /api/host/fs/meta',\n        'GET  /api/host/fs/list',\n      ],\n    });\n  });\n\n  app.get('/assets/*', (c) => {\n    const path = c.req.path.replace('/assets/', '');\n    const response = serveStaticFile(`assets/${path}`, c.req.raw);\n    if (response) return response;\n    return c.text('Not found', 404);\n  });\n\n  /** From `web/public/channel-icons/` (Vite copies to static root). Public: img requests send no Bearer token. */\n  app.get('/channel-icons/*', (c) => {\n    const path = c.req.path.replace('/channel-icons/', '');\n    const response = serveStaticFile(`channel-icons/${path}`, c.req.raw);\n    if (response) return response;\n    return c.text('Not found', 404);\n  });\n\n  app.get('/favicon.ico', (c) => {\n    const response = serveStaticFile('favicon.ico', c.req.raw);\n    if (response) return response;\n    const fallback = serveStaticFile('logo.svg', c.req.raw);\n    if (fallback) return fallback;\n    return c.text('Not found', 404);\n  });\n\n  app.get('/logo.svg', (c) => {\n    const response = serveStaticFile('logo.svg', c.req.raw);\n    if (response) return response;\n    return c.text('Not found', 404);\n  });\n\n  app.get('/logo-dark.svg', (c) => {\n    const response = serveStaticFile('logo-dark.svg', c.req.raw);\n    if (response) return response;\n    return c.text('Not found', 404);\n  });\n\n  app.get('/', (c) => {\n    const response = serveStaticFile('index.html', c.req.raw);\n    if (response) return response;\n    return c.text('UI not found', 404);\n  });\n}\n"],"mappings":";;;sBAE8D;AAI9D,SAAgB,4BAA4B,KAAW,SAA+B;AACpF,KAAI,IAAI,YAAY,MAAM;AACxB,SAAO,EAAE,KAAK,QAAQ,WAAW,CAAC;GAClC;;AAGF,KAAI,IAAI,gBAAgB,MAAM;EAC5B,MAAM,SAAS,QAAQ,WAAW;AAClC,SAAO,EAAE,KAAK;GACZ,QAAQ,OAAO,QAAQ,OAAO;GAC9B,OAAO,OAAO;GACd,eAAe,OAAO;GACtB,SAAS,OAAO;GAChB,QAAQ,OAAO;GACf,mBAAmB,OAAO;GAC3B,CAAC;GACF;AAEF,KAAI,IAAI,SAAS,MAAM;AACrB,SAAO,EAAE,KAAK;GACZ,SAAS;GACT,SAAS;GACT,WAAW;GACX,WAAW;IACT;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACD;GACF,CAAC;GACF;AAEF,KAAI,IAAI,cAAc,MAAM;EAE1B,MAAM,WAAW,gBAAgB,UADpB,EAAE,IAAI,KAAK,QAAQ,YAAY,GACG,IAAI,EAAE,IAAI,IAAI;AAC7D,MAAI,SAAU,QAAO;AACrB,SAAO,EAAE,KAAK,aAAa,IAAI;GAC/B;;AAGF,KAAI,IAAI,qBAAqB,MAAM;EAEjC,MAAM,WAAW,gBAAgB,iBADpB,EAAE,IAAI,KAAK,QAAQ,mBAAmB,GACG,IAAI,EAAE,IAAI,IAAI;AACpE,MAAI,SAAU,QAAO;AACrB,SAAO,EAAE,KAAK,aAAa,IAAI;GAC/B;AAEF,KAAI,IAAI,iBAAiB,MAAM;EAC7B,MAAM,WAAW,gBAAgB,eAAe,EAAE,IAAI,IAAI;AAC1D,MAAI,SAAU,QAAO;EACrB,MAAM,WAAW,gBAAgB,YAAY,EAAE,IAAI,IAAI;AACvD,MAAI,SAAU,QAAO;AACrB,SAAO,EAAE,KAAK,aAAa,IAAI;GAC/B;AAEF,KAAI,IAAI,cAAc,MAAM;EAC1B,MAAM,WAAW,gBAAgB,YAAY,EAAE,IAAI,IAAI;AACvD,MAAI,SAAU,QAAO;AACrB,SAAO,EAAE,KAAK,aAAa,IAAI;GAC/B;AAEF,KAAI,IAAI,mBAAmB,MAAM;EAC/B,MAAM,WAAW,gBAAgB,iBAAiB,EAAE,IAAI,IAAI;AAC5D,MAAI,SAAU,QAAO;AACrB,SAAO,EAAE,KAAK,aAAa,IAAI;GAC/B;AAEF,KAAI,IAAI,MAAM,MAAM;EAClB,MAAM,WAAW,gBAAgB,cAAc,EAAE,IAAI,IAAI;AACzD,MAAI,SAAU,QAAO;AACrB,SAAO,EAAE,KAAK,gBAAgB,IAAI;GAClC"}
+{"version":3,"file":"public-gateway.js","names":[],"sources":["../../../../../src/gateway/hono/routes/public-gateway.ts"],"sourcesContent":["import type { Hono } from 'hono';\n\nimport { PACKAGE_VERSION } from '../../../package-version.js';\nimport type { GatewayService } from '../../service.js';\nimport { serveStaticFile } from '../lib/static-ui.js';\n\nexport function registerPublicGatewayRoutes(app: Hono, service: GatewayService): void {\n  app.get('/health', (c) => {\n    return c.json(service.getHealth());\n  });\n\n  /** Public liveness probe (no auth) — minimal payload for CLI / load balancers. */\n  app.get('/api/health', (c) => {\n    const health = service.getHealth();\n    return c.json({\n      status: health.ready ? 'ok' : 'starting',\n      ready: health.ready,\n      httpListening: health.httpListening,\n      version: health.version,\n      uptime: health.uptime,\n      startupDurationMs: health.startupDurationMs,\n    });\n  });\n\n  app.get('/api', (c) => {\n    return c.json({\n      service: 'xopc-gateway',\n      version: PACKAGE_VERSION,\n      transport: 'streamable-http',\n      endpoints: [\n        'GET  /health',\n        'GET  /api/health',\n        'GET  /status',\n        'GET  /api/status',\n        'POST /api/agent           (SSE stream / JSON)',\n        'POST /api/agent/abort',\n        'POST /api/agent/steer',\n        'POST /api/send',\n        'GET  /api/events          (SSE stream)',\n        'GET  /api/channels/catalog',\n        'GET  /api/channels/status',\n        'POST /api/channels/:channelId/actions/:actionId',\n        'GET  /api/config',\n        'GET  /api/agents',\n        'POST /api/agents',\n        'PATCH /api/agents/:id',\n        'DELETE /api/agents/:id',\n        'GET/PUT/DELETE /api/agents/:id/avatar',\n        'GET/PUT /api/agents/:id/files/...',\n        'DELETE /api/providers/:providerId/key',\n        'PATCH /api/config',\n        'POST /api/config/reload',\n        'POST /api/heartbeat/trigger',\n        '...  /api/cron/*',\n        'GET/PATCH /api/sessions/:key/agent-config',\n        '...  /api/sessions/*',\n        'GET  /api/host/fs/meta',\n        'GET  /api/host/fs/list',\n      ],\n    });\n  });\n\n  app.get('/assets/*', (c) => {\n    const path = c.req.path.replace('/assets/', '');\n    const response = serveStaticFile(`assets/${path}`, c.req.raw);\n    if (response) return response;\n    return c.text('Not found', 404);\n  });\n\n  /** From `web/public/channel-icons/` (Vite copies to static root). Public: img requests send no Bearer token. */\n  app.get('/channel-icons/*', (c) => {\n    const path = c.req.path.replace('/channel-icons/', '');\n    const response = serveStaticFile(`channel-icons/${path}`, c.req.raw);\n    if (response) return response;\n    return c.text('Not found', 404);\n  });\n\n  app.get('/favicon.ico', (c) => {\n    const response = serveStaticFile('favicon.ico', c.req.raw);\n    if (response) return response;\n    const fallback = serveStaticFile('logo.svg', c.req.raw);\n    if (fallback) return fallback;\n    return c.text('Not found', 404);\n  });\n\n  app.get('/logo.svg', (c) => {\n    const response = serveStaticFile('logo.svg', c.req.raw);\n    if (response) return response;\n    return c.text('Not found', 404);\n  });\n\n  app.get('/logo-dark.svg', (c) => {\n    const response = serveStaticFile('logo-dark.svg', c.req.raw);\n    if (response) return response;\n    return c.text('Not found', 404);\n  });\n\n  app.get('/', (c) => {\n    const response = serveStaticFile('index.html', c.req.raw);\n    if (response) return response;\n    return c.text('UI not found', 404);\n  });\n}\n"],"mappings":";;;sBAE8D;AAI9D,SAAgB,4BAA4B,KAAW,SAA+B;AACpF,KAAI,IAAI,YAAY,MAAM;AACxB,SAAO,EAAE,KAAK,QAAQ,WAAW,CAAC;GAClC;;AAGF,KAAI,IAAI,gBAAgB,MAAM;EAC5B,MAAM,SAAS,QAAQ,WAAW;AAClC,SAAO,EAAE,KAAK;GACZ,QAAQ,OAAO,QAAQ,OAAO;GAC9B,OAAO,OAAO;GACd,eAAe,OAAO;GACtB,SAAS,OAAO;GAChB,QAAQ,OAAO;GACf,mBAAmB,OAAO;GAC3B,CAAC;GACF;AAEF,KAAI,IAAI,SAAS,MAAM;AACrB,SAAO,EAAE,KAAK;GACZ,SAAS;GACT,SAAS;GACT,WAAW;GACX,WAAW;IACT;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACD;GACF,CAAC;GACF;AAEF,KAAI,IAAI,cAAc,MAAM;EAE1B,MAAM,WAAW,gBAAgB,UADpB,EAAE,IAAI,KAAK,QAAQ,YAAY,GACG,IAAI,EAAE,IAAI,IAAI;AAC7D,MAAI,SAAU,QAAO;AACrB,SAAO,EAAE,KAAK,aAAa,IAAI;GAC/B;;AAGF,KAAI,IAAI,qBAAqB,MAAM;EAEjC,MAAM,WAAW,gBAAgB,iBADpB,EAAE,IAAI,KAAK,QAAQ,mBAAmB,GACG,IAAI,EAAE,IAAI,IAAI;AACpE,MAAI,SAAU,QAAO;AACrB,SAAO,EAAE,KAAK,aAAa,IAAI;GAC/B;AAEF,KAAI,IAAI,iBAAiB,MAAM;EAC7B,MAAM,WAAW,gBAAgB,eAAe,EAAE,IAAI,IAAI;AAC1D,MAAI,SAAU,QAAO;EACrB,MAAM,WAAW,gBAAgB,YAAY,EAAE,IAAI,IAAI;AACvD,MAAI,SAAU,QAAO;AACrB,SAAO,EAAE,KAAK,aAAa,IAAI;GAC/B;AAEF,KAAI,IAAI,cAAc,MAAM;EAC1B,MAAM,WAAW,gBAAgB,YAAY,EAAE,IAAI,IAAI;AACvD,MAAI,SAAU,QAAO;AACrB,SAAO,EAAE,KAAK,aAAa,IAAI;GAC/B;AAEF,KAAI,IAAI,mBAAmB,MAAM;EAC/B,MAAM,WAAW,gBAAgB,iBAAiB,EAAE,IAAI,IAAI;AAC5D,MAAI,SAAU,QAAO;AACrB,SAAO,EAAE,KAAK,aAAa,IAAI;GAC/B;AAEF,KAAI,IAAI,MAAM,MAAM;EAClB,MAAM,WAAW,gBAAgB,cAAc,EAAE,IAAI,IAAI;AACzD,MAAI,SAAU,QAAO;AACrB,SAAO,EAAE,KAAK,gBAAgB,IAAI;GAClC"}

package/dist/src/gateway/hono/routes/sessions.js

@@ -1,5 +1,6 @@
 import { buildSessionKey, init_session_key, parseSessionKey } from "../../../routing/session-key.js";
 import { agentExists, getDefaultAgentId, init_resolve_route } from "../../../routing/resolve-route.js";
+import { evictEmbeddedSessionRunner } from "../../../agent/embedded/session-runner.js";
 import { messagesToClientHistory } from "../../../session/client-history.js";
 import { deleteMediaUrisNoLongerReferenced } from "../../../media/session-references.js";
 import { createGatewayRouteLogger, logRouteError } from "../lib/route-logger.js";
@@ -9,6 +10,16 @@ import { respondStartupUnavailable } from "../lib/startup-unavailable.js";
 init_session_key();
 init_resolve_route();
 const log = createGatewayRouteLogger("Sessions");
+const SESSION_TYPES = new Set([
+	"chat",
+	"workflow-run",
+	"workflow-subagent",
+	"cron",
+	"heartbeat"
+]);
+function isSessionType(value) {
+	return SESSION_TYPES.has(value);
+}
 function ensureGatewayReadyForSessions(c, service, method) {
 	if (service.isGatewayReady()) return null;
 	return respondStartupUnavailable(c, method);
@@ -65,10 +76,13 @@ function registerSessionsRoutes(authenticated, deps) {
 		const blocked = ensureGatewayReadyForSessions(c, service, "sessions.list");
 		if (blocked) return blocked;
 		const query = c.req.query();
+		const sessionTypes = query.types?.split(",").map((value) => value.trim()).filter(isSessionType);
 		const result = await service.sessions.listSessions({
 			status: query.status,
 			search: query.search,
 			channel: query.channel,
+			sessionTypes: sessionTypes?.length ? sessionTypes : void 0,
+			includeHidden: query.includeHidden === "true",
 			limit: query.limit ? parseInt(query.limit) : void 0,
 			offset: query.offset ? parseInt(query.offset) : void 0
 		});
@@ -180,6 +194,89 @@ function registerSessionsRoutes(authenticated, deps) {
 		});
 		return c.json({ ok: true });
 	});
+	authenticated.post("/api/sessions/:key/transcript/label", async (c) => {
+		const key = c.req.param("key");
+		if (!await service.sessionIndexInstance.getSessionMetadata(key)) return c.json({
+			ok: false,
+			error: "Session not found"
+		}, 404);
+		const body = await c.req.json().catch(() => ({}));
+		const targetId = typeof body.targetId === "string" ? body.targetId.trim() : "";
+		if (!targetId) return c.json({
+			ok: false,
+			error: "targetId is required"
+		}, 400);
+		const label = typeof body.label === "string" && body.label.trim() ? body.label.trim() : void 0;
+		await service.sessionIndexInstance.appendTranscriptLabelEntry(key, {
+			targetId,
+			label
+		});
+		return c.json({ ok: true });
+	});
+	authenticated.post("/api/sessions/:key/transcript/custom", async (c) => {
+		const key = c.req.param("key");
+		if (!await service.sessionIndexInstance.getSessionMetadata(key)) return c.json({
+			ok: false,
+			error: "Session not found"
+		}, 404);
+		const body = await c.req.json().catch(() => ({}));
+		const customType = typeof body.customType === "string" ? body.customType.trim() : "";
+		if (!customType) return c.json({
+			ok: false,
+			error: "customType is required"
+		}, 400);
+		await service.sessionIndexInstance.appendTranscriptCustomEntry(key, {
+			customType,
+			data: body.data
+		});
+		return c.json({ ok: true });
+	});
+	authenticated.post("/api/sessions/:key/transcript/custom-message", async (c) => {
+		const key = c.req.param("key");
+		if (!await service.sessionIndexInstance.getSessionMetadata(key)) return c.json({
+			ok: false,
+			error: "Session not found"
+		}, 404);
+		const body = await c.req.json().catch(() => ({}));
+		const customType = typeof body.customType === "string" ? body.customType.trim() : "";
+		if (!customType) return c.json({
+			ok: false,
+			error: "customType is required"
+		}, 400);
+		const content = typeof body.content === "string" || Array.isArray(body.content) ? body.content : "";
+		await service.sessionIndexInstance.appendTranscriptCustomMessageEntry(key, {
+			customType,
+			content,
+			display: typeof body.display === "boolean" ? body.display : void 0,
+			details: body.details
+		});
+		evictEmbeddedSessionRunner(key, "gateway_custom_message_appended");
+		return c.json({ ok: true });
+	});
+	authenticated.post("/api/sessions/:key/transcript/bash", async (c) => {
+		const key = c.req.param("key");
+		if (!await service.sessionIndexInstance.getSessionMetadata(key)) return c.json({
+			ok: false,
+			error: "Session not found"
+		}, 404);
+		const body = await c.req.json().catch(() => ({}));
+		const command = typeof body.command === "string" ? body.command.trim() : "";
+		if (!command) return c.json({
+			ok: false,
+			error: "command is required"
+		}, 400);
+		await service.sessionIndexInstance.appendTranscriptBashExecutionEntry(key, {
+			command,
+			output: typeof body.output === "string" ? body.output : "",
+			exitCode: typeof body.exitCode === "number" ? body.exitCode : body.exitCode === null ? null : void 0,
+			signal: typeof body.signal === "string" ? body.signal : body.signal === null ? null : void 0,
+			excludeFromContext: body.excludeFromContext === true,
+			truncated: body.truncated === true,
+			fullOutputPath: typeof body.fullOutputPath === "string" ? body.fullOutputPath : void 0
+		});
+		evictEmbeddedSessionRunner(key, "gateway_bash_execution_appended");
+		return c.json({ ok: true });
+	});
 	authenticated.get("/api/sessions/:key/compaction/checkpoints", async (c) => {
 		const key = c.req.param("key");
 		if (!await service.sessionIndexInstance.getSessionMetadata(key)) return c.json({
@@ -314,6 +411,88 @@ function registerSessionsRoutes(authenticated, deps) {
 		const result = await service.sessions.export(key, format);
 		return c.json(result);
 	});
+	authenticated.post("/api/sessions/import", async (c) => {
+		const body = await c.req.json().catch(() => ({}));
+		const targetKey = typeof body.targetKey === "string" ? body.targetKey : "";
+		const content = typeof body.content === "string" ? body.content : "";
+		if (!targetKey.trim()) return c.json({
+			ok: false,
+			error: "targetKey is required"
+		}, 400);
+		if (!content.trim()) return c.json({
+			ok: false,
+			error: "content is required"
+		}, 400);
+		try {
+			const result = await service.sessions.importExport(targetKey, content);
+			return c.json({
+				ok: true,
+				...result
+			});
+		} catch (err) {
+			const errorMessage = err instanceof Error ? err.message : String(err);
+			return c.json({
+				ok: false,
+				error: errorMessage
+			}, 400);
+		}
+	});
+	authenticated.post("/api/sessions/:key/btw", async (c) => {
+		const key = c.req.param("key");
+		const body = await c.req.json().catch(() => ({}));
+		const question = typeof body.question === "string" ? body.question : "";
+		const result = await service.sessions.btwQuery(key, question);
+		return c.json(result);
+	});
+	authenticated.post("/api/sessions/:key/fork", async (c) => {
+		const key = c.req.param("key");
+		const body = await c.req.json().catch(() => ({}));
+		const targetKey = typeof body.targetKey === "string" ? body.targetKey : "";
+		if (!targetKey.trim()) return c.json({
+			ok: false,
+			error: "targetKey is required"
+		}, 400);
+		try {
+			const result = await service.sessions.fork(key, targetKey);
+			return c.json({
+				ok: true,
+				...result
+			});
+		} catch (err) {
+			const errorMessage = err instanceof Error ? err.message : String(err);
+			return c.json({
+				ok: false,
+				error: errorMessage
+			}, 400);
+		}
+	});
+	authenticated.post("/api/sessions/:key/fork-row", async (c) => {
+		const key = c.req.param("key");
+		const body = await c.req.json().catch(() => ({}));
+		const targetKey = typeof body.targetKey === "string" ? body.targetKey : "";
+		const throughRow = typeof body.throughRow === "number" ? Math.trunc(body.throughRow) : NaN;
+		if (!targetKey.trim()) return c.json({
+			ok: false,
+			error: "targetKey is required"
+		}, 400);
+		if (!Number.isFinite(throughRow) || throughRow < 1) return c.json({
+			ok: false,
+			error: "throughRow must be a positive integer"
+		}, 400);
+		try {
+			const result = await service.sessions.forkRows(key, targetKey, { throughRow });
+			return c.json({
+				ok: true,
+				...result
+			});
+		} catch (err) {
+			const errorMessage = err instanceof Error ? err.message : String(err);
+			return c.json({
+				ok: false,
+				error: errorMessage
+			}, 400);
+		}
+	});
 	authenticated.delete("/api/sessions/:key/messages", async (c) => {
 		const key = c.req.param("key");
 		const body = await c.req.json().catch(() => ({}));