@xopcai/xopc 0.0.113 → 0.0.115

package/dist/src/gateway/hono/routes/auth-registry-extensions.js

@@ -7,8 +7,8 @@ import { createOAuthHandler } from "../oauth.js";
 import { createOAuthAsyncHandler } from "../oauth-async.js";
 import { extensionAssetMimeType } from "../lib/extension-assets.js";
 import { loadExtensionStore, saveExtensionStore } from "../lib/extension-store.js";
-import { existsSync, readFileSync, statSync } from "node:fs";
 import { relative, resolve } from "node:path";
+import { existsSync, readFileSync, statSync } from "node:fs";
 //#region src/gateway/hono/routes/auth-registry-extensions.ts
 init_providers();
 const EXTENSION_ASSET_CSP = "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; connect-src 'none'; frame-ancestors 'self'; frame-src 'none'; base-uri 'none'; object-src 'none'; form-action 'none'";

package/dist/src/gateway/hono/routes/channels.js

@@ -1,4 +1,4 @@
-import { buildChannelCatalogForConfig, buildChannelCatalogFromSnapshot, init_channel_catalog_service, isChannelConfigured } from "../../../channels/catalog/channel-catalog-service.js";
+import { buildChannelCatalogForConfig, buildChannelCatalogFromSnapshot, getChannelSetupStatus, init_channel_catalog_service } from "../../../channels/catalog/channel-catalog-service.js";
 import { approveChannelPairing, approveChannelPairingBySender, dismissChannelPairingPending, listChannelPairingState, listChannelPairingSummary, revokeChannelPairingPaired } from "../../../channels/pairing/pairing-service.js";
 //#region src/gateway/hono/routes/channels.ts
 init_channel_catalog_service();
@@ -16,20 +16,24 @@ function localeFromRequest(c) {
 }
 function registerChannelRoutes(authenticated, deps) {
 	const { service, strictRateLimitMiddleware } = deps;
+	const channelRateLimitMiddleware = deps.channelRateLimitMiddleware ?? strictRateLimitMiddleware;
 	authenticated.get("/api/channels/catalog", (c) => {
 		const snapshot = service.getExtensionLoader()?.getManifestSnapshot();
 		const locale = localeFromRequest(c);
 		const catalog = snapshot ? buildChannelCatalogFromSnapshot(snapshot, { locale }) : buildChannelCatalogForConfig(service.currentConfig, { locale });
-		const channelsCfg = service.currentConfig.channels;
 		const running = new Set(service.getRunningChannelIds());
 		return c.json({
 			ok: true,
-			payload: { channels: catalog.entries.map((entry) => ({
-				...entry,
-				enabled: channelsCfg?.[entry.id]?.enabled === true,
-				configured: isChannelConfigured(service.currentConfig, entry.id),
-				runtime: running.has(entry.id) ? "loaded" : "missing"
-			})) }
+			payload: { channels: catalog.entries.map((entry) => {
+				const setupStatus = getChannelSetupStatus(service.currentConfig, entry.id, entry);
+				return {
+					...entry,
+					enabled: setupStatus.enabled,
+					configured: setupStatus.ready,
+					setupStatus,
+					runtime: running.has(entry.id) ? "loaded" : "missing"
+				};
+			}) }
 		});
 	});
 	authenticated.get("/api/channels/status", (c) => {
@@ -61,7 +65,7 @@ function registerChannelRoutes(authenticated, deps) {
 			payload: { config: value }
 		});
 	});
-	authenticated.post("/api/channels/:channelId/actions/:actionId", strictRateLimitMiddleware, async (c) => {
+	authenticated.post("/api/channels/:channelId/actions/:actionId", channelRateLimitMiddleware, async (c) => {
 		const channel = channelIdParam(c.req.param("channelId"));
 		const action = c.req.param("actionId")?.trim() ?? "";
 		if (!channel || !action) return c.json({
@@ -162,7 +166,7 @@ function registerChannelRoutes(authenticated, deps) {
 			payload: { summary }
 		});
 	});
-	authenticated.post("/api/channels/:channelId/pairing/approve", strictRateLimitMiddleware, async (c) => {
+	authenticated.post("/api/channels/:channelId/pairing/approve", channelRateLimitMiddleware, async (c) => {
 		const channel = channelIdParam(c.req.param("channelId"));
 		const body = await c.req.json().catch(() => ({}));
 		const result = approveChannelPairing({
@@ -185,7 +189,7 @@ function registerChannelRoutes(authenticated, deps) {
 			}
 		});
 	});
-	authenticated.post("/api/channels/:channelId/pairing/approve-sender", strictRateLimitMiddleware, async (c) => {
+	authenticated.post("/api/channels/:channelId/pairing/approve-sender", channelRateLimitMiddleware, async (c) => {
 		const channel = channelIdParam(c.req.param("channelId"));
 		const body = await c.req.json().catch(() => ({}));
 		const result = approveChannelPairingBySender({
@@ -208,7 +212,7 @@ function registerChannelRoutes(authenticated, deps) {
 			}
 		});
 	});
-	authenticated.delete("/api/channels/:channelId/pairing/paired", strictRateLimitMiddleware, async (c) => {
+	authenticated.delete("/api/channels/:channelId/pairing/paired", channelRateLimitMiddleware, async (c) => {
 		const channel = channelIdParam(c.req.param("channelId"));
 		const body = await c.req.json().catch(() => ({}));
 		const result = revokeChannelPairingPaired({
@@ -228,7 +232,7 @@ function registerChannelRoutes(authenticated, deps) {
 			payload: { changed: result.changed }
 		});
 	});
-	authenticated.delete("/api/channels/:channelId/pairing/pending", strictRateLimitMiddleware, async (c) => {
+	authenticated.delete("/api/channels/:channelId/pairing/pending", channelRateLimitMiddleware, async (c) => {
 		const channel = channelIdParam(c.req.param("channelId"));
 		const body = await c.req.json().catch(() => ({}));
 		const result = dismissChannelPairingPending({
@@ -261,7 +265,7 @@ function registerChannelRoutes(authenticated, deps) {
 			payload: { checks }
 		});
 	});
-	authenticated.post("/api/channels/:channelId/restart", strictRateLimitMiddleware, async (c) => {
+	authenticated.post("/api/channels/:channelId/restart", channelRateLimitMiddleware, async (c) => {
 		const channel = channelIdParam(c.req.param("channelId"));
 		await service.restartChannel(channel);
 		return c.json({

package/dist/src/gateway/hono/routes/channels.js.map

@@ -1 +1 @@
-{"version":3,"file":"channels.js","names":[],"sources":["../../../../../src/gateway/hono/routes/channels.ts"],"sourcesContent":["import type { Hono } from 'hono';\n\nimport {\n  approveChannelPairing,\n  approveChannelPairingBySender,\n  dismissChannelPairingPending,\n  listChannelPairingState,\n  listChannelPairingSummary,\n  revokeChannelPairingPaired,\n} from '../../../channels/pairing/pairing-service.js';\nimport {\n  buildChannelCatalogForConfig,\n  buildChannelCatalogFromSnapshot,\n  isChannelConfigured,\n} from '../../../channels/catalog/channel-catalog-service.js';\nimport type { Config } from '../../../config/index.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\nimport type { ChannelRuntimeActionPayload } from '../../../channels/plugins/types.adapters.js';\n\nfunction channelIdParam(raw: string | undefined): string {\n  return (raw ?? '').trim().toLowerCase();\n}\n\nfunction accountIdFromQuery(raw: string | undefined): string {\n  return raw?.trim() || 'default';\n}\n\nfunction actionPayloadChangedConfig(payload: ChannelRuntimeActionPayload | undefined): boolean {\n  return Boolean(payload && 'configChanged' in payload && payload.configChanged === true);\n}\n\nfunction localeFromRequest(c: { req: { query(name: string): string | undefined; header(name: string): string | undefined } }): string | undefined {\n  return c.req.query('locale') ?? c.req.header('X-XOPC-Locale') ?? c.req.header('Accept-Language')?.split(',')[0];\n}\n\nexport function registerChannelRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  const { service, strictRateLimitMiddleware } = deps;\n\n  authenticated.get('/api/channels/catalog', (c) => {\n    const snapshot = service.getExtensionLoader()?.getManifestSnapshot();\n    const locale = localeFromRequest(c);\n    const catalog = snapshot\n      ? buildChannelCatalogFromSnapshot(snapshot, { locale })\n      : buildChannelCatalogForConfig(service.currentConfig, { locale });\n    const channelsCfg = service.currentConfig.channels as Record<string, { enabled?: boolean } | undefined> | undefined;\n    const running = new Set(service.getRunningChannelIds());\n    return c.json({\n      ok: true,\n      payload: {\n        channels: catalog.entries.map((entry) => ({\n          ...entry,\n          enabled: channelsCfg?.[entry.id]?.enabled === true,\n          configured: isChannelConfigured(service.currentConfig, entry.id),\n          runtime: running.has(entry.id) ? 'loaded' : 'missing',\n        })),\n      },\n    });\n  });\n\n  authenticated.get('/api/channels/status', (c) => {\n    const channels = service.getChannelsStatus();\n    return c.json({ ok: true, payload: { channels } });\n  });\n\n  authenticated.get('/api/channels/meta', (c) => {\n    const channels = service.getChannelsHubMeta();\n    return c.json({ ok: true, payload: { channels } });\n  });\n\n  authenticated.get('/api/channels/:channelId/config', (c) => {\n    const channel = channelIdParam(c.req.param('channelId'));\n    if (!channel) {\n      return c.json({ ok: false, error: { code: 'BAD_REQUEST', message: 'Missing channel id' } }, 400);\n    }\n    const plugin = service.getChannelRuntimePlugin(channel);\n    const value =\n      plugin?.configSurface?.buildConfigSurface(service.currentConfig) ??\n      (service.currentConfig.channels as Record<string, unknown> | undefined)?.[channel] ??\n      {};\n    return c.json({ ok: true, payload: { config: value } });\n  });\n\n  authenticated.post('/api/channels/:channelId/actions/:actionId', strictRateLimitMiddleware, async (c) => {\n    const channel = channelIdParam(c.req.param('channelId'));\n    const action = c.req.param('actionId')?.trim() ?? '';\n    if (!channel || !action) {\n      return c.json({ ok: false, error: { code: 'BAD_REQUEST', message: 'Missing channel/action id' } }, 400);\n    }\n    const plugin = await service.ensureChannelRuntimePlugin(channel);\n    if (!plugin) {\n      return c.json({ ok: false, error: { code: 'CHANNEL_RUNTIME_MISSING', message: 'Channel runtime is not loaded' } }, 404);\n    }\n    const body = await c.req.json().catch(() => ({}));\n    const accountId =\n      body && typeof body === 'object' && typeof (body as { accountId?: unknown }).accountId === 'string'\n        ? (body as { accountId: string }).accountId.trim()\n        : undefined;\n    const input = body && typeof body === 'object' ? (body as { input?: unknown }).input : undefined;\n\n    if (action === 'doctor.run' && plugin.doctor) {\n      const checks = await plugin.doctor.check({ cfg: service.currentConfig, locale: localeFromRequest(c) });\n      return c.json({ ok: true, payload: { type: 'diagnostics', checks } });\n    }\n\n    if (plugin.runtimeActions) {\n      const result = await plugin.runtimeActions.runAction({\n        cfg: service.currentConfig,\n        locale: localeFromRequest(c),\n        actionId: action,\n        accountId,\n        input,\n      });\n      if (!result.ok) {\n        return c.json({ ok: false, error: { code: 'CHANNEL_ACTION_FAILED', message: result.message ?? 'Channel action failed' } }, 400);\n      }\n      if (result.nextConfig) {\n        const saved = await service.saveConfig(result.nextConfig);\n        if (!saved.saved) {\n          return c.json({ ok: false, error: { code: 'CHANNEL_ACTION_FAILED', message: saved.error ?? 'Failed to save channel config' } }, 500);\n        }\n      } else if (actionPayloadChangedConfig(result.payload)) {\n        await service.reloadConfig();\n      }\n      return c.json({ ok: true, payload: result.payload ?? {} });\n    }\n\n    return c.json(\n      {\n        ok: false,\n        error: {\n          code: 'ACTION_NOT_IMPLEMENTED',\n          message: `Channel action \"${channel}.${action}\" is not implemented by the runtime adapter.`,\n        },\n      },\n      501,\n    );\n  });\n\n  authenticated.get('/api/channels/:channelId/pairing', (c) => {\n    const channel = channelIdParam(c.req.param('channelId'));\n    if (!channel) {\n      return c.json({ ok: false, error: { code: 'BAD_REQUEST', message: 'Missing channel id' } }, 400);\n    }\n    const accountId = accountIdFromQuery(c.req.query('account'));\n    const config = service.currentConfig as Config | undefined;\n    const state = listChannelPairingState({ channel, accountId, config });\n    return c.json({ ok: true, payload: state });\n  });\n\n  authenticated.get('/api/channels/pairing/summary', (c) => {\n    const config = service.currentConfig as Config | undefined;\n    const summary = listChannelPairingSummary(config);\n    return c.json({ ok: true, payload: { summary } });\n  });\n\n  authenticated.post('/api/channels/:channelId/pairing/approve', strictRateLimitMiddleware, async (c) => {\n    const channel = channelIdParam(c.req.param('channelId'));\n    const body = await c.req.json().catch(() => ({}));\n    const accountId =\n      body && typeof body === 'object' && typeof (body as { accountId?: unknown }).accountId === 'string'\n        ? (body as { accountId: string }).accountId.trim()\n        : 'default';\n    const code =\n      body && typeof body === 'object' && typeof (body as { code?: unknown }).code === 'string'\n        ? (body as { code: string }).code.trim()\n        : '';\n    const result = approveChannelPairing({ channel, accountId, code });\n    if (result.ok === false) {\n      return c.json({ ok: false, error: { code: 'PAIRING_INVALID', message: result.error } }, 400);\n    }\n    return c.json({ ok: true, payload: { senderId: result.senderId, alreadyPaired: result.alreadyPaired } });\n  });\n\n  authenticated.post('/api/channels/:channelId/pairing/approve-sender', strictRateLimitMiddleware, async (c) => {\n    const channel = channelIdParam(c.req.param('channelId'));\n    const body = await c.req.json().catch(() => ({}));\n    const accountId =\n      body && typeof body === 'object' && typeof (body as { accountId?: unknown }).accountId === 'string'\n        ? (body as { accountId: string }).accountId.trim()\n        : 'default';\n    const senderId =\n      body && typeof body === 'object' && typeof (body as { senderId?: unknown }).senderId === 'string'\n        ? (body as { senderId: string }).senderId.trim()\n        : '';\n    const result = approveChannelPairingBySender({ channel, accountId, senderId });\n    if (result.ok === false) {\n      return c.json({ ok: false, error: { code: 'PAIRING_INVALID', message: result.error } }, 400);\n    }\n    return c.json({ ok: true, payload: { senderId: result.senderId, alreadyPaired: result.alreadyPaired } });\n  });\n\n  authenticated.delete('/api/channels/:channelId/pairing/paired', strictRateLimitMiddleware, async (c) => {\n    const channel = channelIdParam(c.req.param('channelId'));\n    const body = await c.req.json().catch(() => ({}));\n    const accountId =\n      body && typeof body === 'object' && typeof (body as { accountId?: unknown }).accountId === 'string'\n        ? (body as { accountId: string }).accountId.trim()\n        : 'default';\n    const senderId =\n      body && typeof body === 'object' && typeof (body as { senderId?: unknown }).senderId === 'string'\n        ? (body as { senderId: string }).senderId.trim()\n        : '';\n    const result = revokeChannelPairingPaired({ channel, accountId, senderId });\n    if (result.ok === false) {\n      return c.json({ ok: false, error: { code: 'BAD_REQUEST', message: result.error } }, 400);\n    }\n    return c.json({ ok: true, payload: { changed: result.changed } });\n  });\n\n  authenticated.delete('/api/channels/:channelId/pairing/pending', strictRateLimitMiddleware, async (c) => {\n    const channel = channelIdParam(c.req.param('channelId'));\n    const body = await c.req.json().catch(() => ({}));\n    const accountId =\n      body && typeof body === 'object' && typeof (body as { accountId?: unknown }).accountId === 'string'\n        ? (body as { accountId: string }).accountId.trim()\n        : 'default';\n    const senderId =\n      body && typeof body === 'object' && typeof (body as { senderId?: unknown }).senderId === 'string'\n        ? (body as { senderId: string }).senderId.trim()\n        : '';\n    const result = dismissChannelPairingPending({ channel, accountId, senderId });\n    if (result.ok === false) {\n      return c.json({ ok: false, error: { code: 'PAIRING_INVALID', message: result.error } }, 400);\n    }\n    return c.json({ ok: true, payload: { senderId: result.senderId } });\n  });\n\n  authenticated.get('/api/channels/:channelId/doctor', async (c) => {\n    const channel = channelIdParam(c.req.param('channelId'));\n    const plugin = service.getChannelRuntimePlugin(channel);\n    if (!plugin?.doctor) {\n      return c.json({ ok: true, payload: { checks: [] } });\n    }\n    const checks = await plugin.doctor.check({ cfg: service.currentConfig });\n    return c.json({ ok: true, payload: { checks } });\n  });\n\n  authenticated.post('/api/channels/:channelId/restart', strictRateLimitMiddleware, async (c) => {\n    const channel = channelIdParam(c.req.param('channelId'));\n    await service.restartChannel(channel);\n    return c.json({ ok: true, payload: { restarted: true } });\n  });\n}\n"],"mappings":";;;8BAc8D;AAK9D,SAAS,eAAe,KAAiC;AACvD,SAAQ,OAAO,IAAI,MAAM,CAAC,aAAa;;AAGzC,SAAS,mBAAmB,KAAiC;AAC3D,QAAO,KAAK,MAAM,IAAI;;AAGxB,SAAS,2BAA2B,SAA2D;AAC7F,QAAO,QAAQ,WAAW,mBAAmB,WAAW,QAAQ,kBAAkB,KAAK;;AAGzF,SAAS,kBAAkB,GAAuH;AAChJ,QAAO,EAAE,IAAI,MAAM,SAAS,IAAI,EAAE,IAAI,OAAO,gBAAgB,IAAI,EAAE,IAAI,OAAO,kBAAkB,EAAE,MAAM,IAAI,CAAC;;AAG/G,SAAgB,sBAAsB,eAAqB,MAAoC;CAC7F,MAAM,EAAE,SAAS,8BAA8B;AAE/C,eAAc,IAAI,0BAA0B,MAAM;EAChD,MAAM,WAAW,QAAQ,oBAAoB,EAAE,qBAAqB;EACpE,MAAM,SAAS,kBAAkB,EAAE;EACnC,MAAM,UAAU,WACZ,gCAAgC,UAAU,EAAE,QAAQ,CAAC,GACrD,6BAA6B,QAAQ,eAAe,EAAE,QAAQ,CAAC;EACnE,MAAM,cAAc,QAAQ,cAAc;EAC1C,MAAM,UAAU,IAAI,IAAI,QAAQ,sBAAsB,CAAC;AACvD,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS,EACP,UAAU,QAAQ,QAAQ,KAAK,WAAW;IACxC,GAAG;IACH,SAAS,cAAc,MAAM,KAAK,YAAY;IAC9C,YAAY,oBAAoB,QAAQ,eAAe,MAAM,GAAG;IAChE,SAAS,QAAQ,IAAI,MAAM,GAAG,GAAG,WAAW;IAC7C,EAAE,EACJ;GACF,CAAC;GACF;AAEF,eAAc,IAAI,yBAAyB,MAAM;EAC/C,MAAM,WAAW,QAAQ,mBAAmB;AAC5C,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,UAAU;GAAE,CAAC;GAClD;AAEF,eAAc,IAAI,uBAAuB,MAAM;EAC7C,MAAM,WAAW,QAAQ,oBAAoB;AAC7C,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,UAAU;GAAE,CAAC;GAClD;AAEF,eAAc,IAAI,oCAAoC,MAAM;EAC1D,MAAM,UAAU,eAAe,EAAE,IAAI,MAAM,YAAY,CAAC;AACxD,MAAI,CAAC,QACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;IAAE,MAAM;IAAe,SAAS;IAAsB;GAAE,EAAE,IAAI;EAGlG,MAAM,QADS,QAAQ,wBAAwB,QAEvC,EAAE,eAAe,mBAAmB,QAAQ,cAAc,IAC/D,QAAQ,cAAc,WAAmD,YAC1E,EAAE;AACJ,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,QAAQ,OAAO;GAAE,CAAC;GACvD;AAEF,eAAc,KAAK,8CAA8C,2BAA2B,OAAO,MAAM;EACvG,MAAM,UAAU,eAAe,EAAE,IAAI,MAAM,YAAY,CAAC;EACxD,MAAM,SAAS,EAAE,IAAI,MAAM,WAAW,EAAE,MAAM,IAAI;AAClD,MAAI,CAAC,WAAW,CAAC,OACf,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;IAAE,MAAM;IAAe,SAAS;IAA6B;GAAE,EAAE,IAAI;EAEzG,MAAM,SAAS,MAAM,QAAQ,2BAA2B,QAAQ;AAChE,MAAI,CAAC,OACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;IAAE,MAAM;IAA2B,SAAS;IAAiC;GAAE,EAAE,IAAI;EAEzH,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,YACJ,QAAQ,OAAO,SAAS,YAAY,OAAQ,KAAiC,cAAc,WACtF,KAA+B,UAAU,MAAM,GAChD,KAAA;EACN,MAAM,QAAQ,QAAQ,OAAO,SAAS,WAAY,KAA6B,QAAQ,KAAA;AAEvF,MAAI,WAAW,gBAAgB,OAAO,QAAQ;GAC5C,MAAM,SAAS,MAAM,OAAO,OAAO,MAAM;IAAE,KAAK,QAAQ;IAAe,QAAQ,kBAAkB,EAAE;IAAE,CAAC;AACtG,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS;KAAE,MAAM;KAAe;KAAQ;IAAE,CAAC;;AAGvE,MAAI,OAAO,gBAAgB;GACzB,MAAM,SAAS,MAAM,OAAO,eAAe,UAAU;IACnD,KAAK,QAAQ;IACb,QAAQ,kBAAkB,EAAE;IAC5B,UAAU;IACV;IACA;IACD,CAAC;AACF,OAAI,CAAC,OAAO,GACV,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;KAAE,MAAM;KAAyB,SAAS,OAAO,WAAW;KAAyB;IAAE,EAAE,IAAI;AAEjI,OAAI,OAAO,YAAY;IACrB,MAAM,QAAQ,MAAM,QAAQ,WAAW,OAAO,WAAW;AACzD,QAAI,CAAC,MAAM,MACT,QAAO,EAAE,KAAK;KAAE,IAAI;KAAO,OAAO;MAAE,MAAM;MAAyB,SAAS,MAAM,SAAS;MAAiC;KAAE,EAAE,IAAI;cAE7H,2BAA2B,OAAO,QAAQ,CACnD,OAAM,QAAQ,cAAc;AAE9B,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,OAAO,WAAW,EAAE;IAAE,CAAC;;AAG5D,SAAO,EAAE,KACP;GACE,IAAI;GACJ,OAAO;IACL,MAAM;IACN,SAAS,mBAAmB,QAAQ,GAAG,OAAO;IAC/C;GACF,EACD,IACD;GACD;AAEF,eAAc,IAAI,qCAAqC,MAAM;EAC3D,MAAM,UAAU,eAAe,EAAE,IAAI,MAAM,YAAY,CAAC;AACxD,MAAI,CAAC,QACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;IAAE,MAAM;IAAe,SAAS;IAAsB;GAAE,EAAE,IAAI;EAElG,MAAM,YAAY,mBAAmB,EAAE,IAAI,MAAM,UAAU,CAAC;EAC5D,MAAM,SAAS,QAAQ;EACvB,MAAM,QAAQ,wBAAwB;GAAE;GAAS;GAAW;GAAQ,CAAC;AACrE,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;GAAO,CAAC;GAC3C;AAEF,eAAc,IAAI,kCAAkC,MAAM;EACxD,MAAM,SAAS,QAAQ;EACvB,MAAM,UAAU,0BAA0B,OAAO;AACjD,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,SAAS;GAAE,CAAC;GACjD;AAEF,eAAc,KAAK,4CAA4C,2BAA2B,OAAO,MAAM;EACrG,MAAM,UAAU,eAAe,EAAE,IAAI,MAAM,YAAY,CAAC;EACxD,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EASjD,MAAM,SAAS,sBAAsB;GAAE;GAAS,WAP9C,QAAQ,OAAO,SAAS,YAAY,OAAQ,KAAiC,cAAc,WACtF,KAA+B,UAAU,MAAM,GAChD;GAKqD,MAHzD,QAAQ,OAAO,SAAS,YAAY,OAAQ,KAA4B,SAAS,WAC5E,KAA0B,KAAK,MAAM,GACtC;GAC2D,CAAC;AAClE,MAAI,OAAO,OAAO,MAChB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;IAAE,MAAM;IAAmB,SAAS,OAAO;IAAO;GAAE,EAAE,IAAI;AAE9F,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;IAAE,UAAU,OAAO;IAAU,eAAe,OAAO;IAAe;GAAE,CAAC;GACxG;AAEF,eAAc,KAAK,mDAAmD,2BAA2B,OAAO,MAAM;EAC5G,MAAM,UAAU,eAAe,EAAE,IAAI,MAAM,YAAY,CAAC;EACxD,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EASjD,MAAM,SAAS,8BAA8B;GAAE;GAAS,WAPtD,QAAQ,OAAO,SAAS,YAAY,OAAQ,KAAiC,cAAc,WACtF,KAA+B,UAAU,MAAM,GAChD;GAK6D,UAHjE,QAAQ,OAAO,SAAS,YAAY,OAAQ,KAAgC,aAAa,WACpF,KAA8B,SAAS,MAAM,GAC9C;GACuE,CAAC;AAC9E,MAAI,OAAO,OAAO,MAChB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;IAAE,MAAM;IAAmB,SAAS,OAAO;IAAO;GAAE,EAAE,IAAI;AAE9F,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;IAAE,UAAU,OAAO;IAAU,eAAe,OAAO;IAAe;GAAE,CAAC;GACxG;AAEF,eAAc,OAAO,2CAA2C,2BAA2B,OAAO,MAAM;EACtG,MAAM,UAAU,eAAe,EAAE,IAAI,MAAM,YAAY,CAAC;EACxD,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EASjD,MAAM,SAAS,2BAA2B;GAAE;GAAS,WAPnD,QAAQ,OAAO,SAAS,YAAY,OAAQ,KAAiC,cAAc,WACtF,KAA+B,UAAU,MAAM,GAChD;GAK0D,UAH9D,QAAQ,OAAO,SAAS,YAAY,OAAQ,KAAgC,aAAa,WACpF,KAA8B,SAAS,MAAM,GAC9C;GACoE,CAAC;AAC3E,MAAI,OAAO,OAAO,MAChB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;IAAE,MAAM;IAAe,SAAS,OAAO;IAAO;GAAE,EAAE,IAAI;AAE1F,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,SAAS,OAAO,SAAS;GAAE,CAAC;GACjE;AAEF,eAAc,OAAO,4CAA4C,2BAA2B,OAAO,MAAM;EACvG,MAAM,UAAU,eAAe,EAAE,IAAI,MAAM,YAAY,CAAC;EACxD,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EASjD,MAAM,SAAS,6BAA6B;GAAE;GAAS,WAPrD,QAAQ,OAAO,SAAS,YAAY,OAAQ,KAAiC,cAAc,WACtF,KAA+B,UAAU,MAAM,GAChD;GAK4D,UAHhE,QAAQ,OAAO,SAAS,YAAY,OAAQ,KAAgC,aAAa,WACpF,KAA8B,SAAS,MAAM,GAC9C;GACsE,CAAC;AAC7E,MAAI,OAAO,OAAO,MAChB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;IAAE,MAAM;IAAmB,SAAS,OAAO;IAAO;GAAE,EAAE,IAAI;AAE9F,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,UAAU,OAAO,UAAU;GAAE,CAAC;GACnE;AAEF,eAAc,IAAI,mCAAmC,OAAO,MAAM;EAChE,MAAM,UAAU,eAAe,EAAE,IAAI,MAAM,YAAY,CAAC;EACxD,MAAM,SAAS,QAAQ,wBAAwB,QAAQ;AACvD,MAAI,CAAC,QAAQ,OACX,QAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,QAAQ,EAAE,EAAE;GAAE,CAAC;EAEtD,MAAM,SAAS,MAAM,OAAO,OAAO,MAAM,EAAE,KAAK,QAAQ,eAAe,CAAC;AACxE,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,QAAQ;GAAE,CAAC;GAChD;AAEF,eAAc,KAAK,oCAAoC,2BAA2B,OAAO,MAAM;EAC7F,MAAM,UAAU,eAAe,EAAE,IAAI,MAAM,YAAY,CAAC;AACxD,QAAM,QAAQ,eAAe,QAAQ;AACrC,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,WAAW,MAAM;GAAE,CAAC;GACzD"}
+{"version":3,"file":"channels.js","names":[],"sources":["../../../../../src/gateway/hono/routes/channels.ts"],"sourcesContent":["import type { Hono } from 'hono';\n\nimport {\n  approveChannelPairing,\n  approveChannelPairingBySender,\n  dismissChannelPairingPending,\n  listChannelPairingState,\n  listChannelPairingSummary,\n  revokeChannelPairingPaired,\n} from '../../../channels/pairing/pairing-service.js';\nimport {\n  buildChannelCatalogForConfig,\n  buildChannelCatalogFromSnapshot,\n  getChannelSetupStatus,\n} from '../../../channels/catalog/channel-catalog-service.js';\nimport type { Config } from '../../../config/index.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\nimport type { ChannelRuntimeActionPayload } from '../../../channels/plugins/types.adapters.js';\n\nfunction channelIdParam(raw: string | undefined): string {\n  return (raw ?? '').trim().toLowerCase();\n}\n\nfunction accountIdFromQuery(raw: string | undefined): string {\n  return raw?.trim() || 'default';\n}\n\nfunction actionPayloadChangedConfig(payload: ChannelRuntimeActionPayload | undefined): boolean {\n  return Boolean(payload && 'configChanged' in payload && payload.configChanged === true);\n}\n\nfunction localeFromRequest(c: { req: { query(name: string): string | undefined; header(name: string): string | undefined } }): string | undefined {\n  return c.req.query('locale') ?? c.req.header('X-XOPC-Locale') ?? c.req.header('Accept-Language')?.split(',')[0];\n}\n\nexport function registerChannelRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  const { service, strictRateLimitMiddleware } = deps;\n  const channelRateLimitMiddleware = deps.channelRateLimitMiddleware ?? strictRateLimitMiddleware;\n\n  authenticated.get('/api/channels/catalog', (c) => {\n    const snapshot = service.getExtensionLoader()?.getManifestSnapshot();\n    const locale = localeFromRequest(c);\n    const catalog = snapshot\n      ? buildChannelCatalogFromSnapshot(snapshot, { locale })\n      : buildChannelCatalogForConfig(service.currentConfig, { locale });\n    const running = new Set(service.getRunningChannelIds());\n    return c.json({\n      ok: true,\n      payload: {\n        channels: catalog.entries.map((entry) => {\n          const setupStatus = getChannelSetupStatus(service.currentConfig, entry.id, entry);\n          return {\n            ...entry,\n            enabled: setupStatus.enabled,\n            configured: setupStatus.ready,\n            setupStatus,\n            runtime: running.has(entry.id) ? 'loaded' : 'missing',\n          };\n        }),\n      },\n    });\n  });\n\n  authenticated.get('/api/channels/status', (c) => {\n    const channels = service.getChannelsStatus();\n    return c.json({ ok: true, payload: { channels } });\n  });\n\n  authenticated.get('/api/channels/meta', (c) => {\n    const channels = service.getChannelsHubMeta();\n    return c.json({ ok: true, payload: { channels } });\n  });\n\n  authenticated.get('/api/channels/:channelId/config', (c) => {\n    const channel = channelIdParam(c.req.param('channelId'));\n    if (!channel) {\n      return c.json({ ok: false, error: { code: 'BAD_REQUEST', message: 'Missing channel id' } }, 400);\n    }\n    const plugin = service.getChannelRuntimePlugin(channel);\n    const value =\n      plugin?.configSurface?.buildConfigSurface(service.currentConfig) ??\n      (service.currentConfig.channels as Record<string, unknown> | undefined)?.[channel] ??\n      {};\n    return c.json({ ok: true, payload: { config: value } });\n  });\n\n  authenticated.post('/api/channels/:channelId/actions/:actionId', channelRateLimitMiddleware, async (c) => {\n    const channel = channelIdParam(c.req.param('channelId'));\n    const action = c.req.param('actionId')?.trim() ?? '';\n    if (!channel || !action) {\n      return c.json({ ok: false, error: { code: 'BAD_REQUEST', message: 'Missing channel/action id' } }, 400);\n    }\n    const plugin = await service.ensureChannelRuntimePlugin(channel);\n    if (!plugin) {\n      return c.json({ ok: false, error: { code: 'CHANNEL_RUNTIME_MISSING', message: 'Channel runtime is not loaded' } }, 404);\n    }\n    const body = await c.req.json().catch(() => ({}));\n    const accountId =\n      body && typeof body === 'object' && typeof (body as { accountId?: unknown }).accountId === 'string'\n        ? (body as { accountId: string }).accountId.trim()\n        : undefined;\n    const input = body && typeof body === 'object' ? (body as { input?: unknown }).input : undefined;\n\n    if (action === 'doctor.run' && plugin.doctor) {\n      const checks = await plugin.doctor.check({ cfg: service.currentConfig, locale: localeFromRequest(c) });\n      return c.json({ ok: true, payload: { type: 'diagnostics', checks } });\n    }\n\n    if (plugin.runtimeActions) {\n      const result = await plugin.runtimeActions.runAction({\n        cfg: service.currentConfig,\n        locale: localeFromRequest(c),\n        actionId: action,\n        accountId,\n        input,\n      });\n      if (!result.ok) {\n        return c.json({ ok: false, error: { code: 'CHANNEL_ACTION_FAILED', message: result.message ?? 'Channel action failed' } }, 400);\n      }\n      if (result.nextConfig) {\n        const saved = await service.saveConfig(result.nextConfig);\n        if (!saved.saved) {\n          return c.json({ ok: false, error: { code: 'CHANNEL_ACTION_FAILED', message: saved.error ?? 'Failed to save channel config' } }, 500);\n        }\n      } else if (actionPayloadChangedConfig(result.payload)) {\n        await service.reloadConfig();\n      }\n      return c.json({ ok: true, payload: result.payload ?? {} });\n    }\n\n    return c.json(\n      {\n        ok: false,\n        error: {\n          code: 'ACTION_NOT_IMPLEMENTED',\n          message: `Channel action \"${channel}.${action}\" is not implemented by the runtime adapter.`,\n        },\n      },\n      501,\n    );\n  });\n\n  authenticated.get('/api/channels/:channelId/pairing', (c) => {\n    const channel = channelIdParam(c.req.param('channelId'));\n    if (!channel) {\n      return c.json({ ok: false, error: { code: 'BAD_REQUEST', message: 'Missing channel id' } }, 400);\n    }\n    const accountId = accountIdFromQuery(c.req.query('account'));\n    const config = service.currentConfig as Config | undefined;\n    const state = listChannelPairingState({ channel, accountId, config });\n    return c.json({ ok: true, payload: state });\n  });\n\n  authenticated.get('/api/channels/pairing/summary', (c) => {\n    const config = service.currentConfig as Config | undefined;\n    const summary = listChannelPairingSummary(config);\n    return c.json({ ok: true, payload: { summary } });\n  });\n\n  authenticated.post('/api/channels/:channelId/pairing/approve', channelRateLimitMiddleware, async (c) => {\n    const channel = channelIdParam(c.req.param('channelId'));\n    const body = await c.req.json().catch(() => ({}));\n    const accountId =\n      body && typeof body === 'object' && typeof (body as { accountId?: unknown }).accountId === 'string'\n        ? (body as { accountId: string }).accountId.trim()\n        : 'default';\n    const code =\n      body && typeof body === 'object' && typeof (body as { code?: unknown }).code === 'string'\n        ? (body as { code: string }).code.trim()\n        : '';\n    const result = approveChannelPairing({ channel, accountId, code });\n    if (result.ok === false) {\n      return c.json({ ok: false, error: { code: 'PAIRING_INVALID', message: result.error } }, 400);\n    }\n    return c.json({ ok: true, payload: { senderId: result.senderId, alreadyPaired: result.alreadyPaired } });\n  });\n\n  authenticated.post('/api/channels/:channelId/pairing/approve-sender', channelRateLimitMiddleware, async (c) => {\n    const channel = channelIdParam(c.req.param('channelId'));\n    const body = await c.req.json().catch(() => ({}));\n    const accountId =\n      body && typeof body === 'object' && typeof (body as { accountId?: unknown }).accountId === 'string'\n        ? (body as { accountId: string }).accountId.trim()\n        : 'default';\n    const senderId =\n      body && typeof body === 'object' && typeof (body as { senderId?: unknown }).senderId === 'string'\n        ? (body as { senderId: string }).senderId.trim()\n        : '';\n    const result = approveChannelPairingBySender({ channel, accountId, senderId });\n    if (result.ok === false) {\n      return c.json({ ok: false, error: { code: 'PAIRING_INVALID', message: result.error } }, 400);\n    }\n    return c.json({ ok: true, payload: { senderId: result.senderId, alreadyPaired: result.alreadyPaired } });\n  });\n\n  authenticated.delete('/api/channels/:channelId/pairing/paired', channelRateLimitMiddleware, async (c) => {\n    const channel = channelIdParam(c.req.param('channelId'));\n    const body = await c.req.json().catch(() => ({}));\n    const accountId =\n      body && typeof body === 'object' && typeof (body as { accountId?: unknown }).accountId === 'string'\n        ? (body as { accountId: string }).accountId.trim()\n        : 'default';\n    const senderId =\n      body && typeof body === 'object' && typeof (body as { senderId?: unknown }).senderId === 'string'\n        ? (body as { senderId: string }).senderId.trim()\n        : '';\n    const result = revokeChannelPairingPaired({ channel, accountId, senderId });\n    if (result.ok === false) {\n      return c.json({ ok: false, error: { code: 'BAD_REQUEST', message: result.error } }, 400);\n    }\n    return c.json({ ok: true, payload: { changed: result.changed } });\n  });\n\n  authenticated.delete('/api/channels/:channelId/pairing/pending', channelRateLimitMiddleware, async (c) => {\n    const channel = channelIdParam(c.req.param('channelId'));\n    const body = await c.req.json().catch(() => ({}));\n    const accountId =\n      body && typeof body === 'object' && typeof (body as { accountId?: unknown }).accountId === 'string'\n        ? (body as { accountId: string }).accountId.trim()\n        : 'default';\n    const senderId =\n      body && typeof body === 'object' && typeof (body as { senderId?: unknown }).senderId === 'string'\n        ? (body as { senderId: string }).senderId.trim()\n        : '';\n    const result = dismissChannelPairingPending({ channel, accountId, senderId });\n    if (result.ok === false) {\n      return c.json({ ok: false, error: { code: 'PAIRING_INVALID', message: result.error } }, 400);\n    }\n    return c.json({ ok: true, payload: { senderId: result.senderId } });\n  });\n\n  authenticated.get('/api/channels/:channelId/doctor', async (c) => {\n    const channel = channelIdParam(c.req.param('channelId'));\n    const plugin = service.getChannelRuntimePlugin(channel);\n    if (!plugin?.doctor) {\n      return c.json({ ok: true, payload: { checks: [] } });\n    }\n    const checks = await plugin.doctor.check({ cfg: service.currentConfig });\n    return c.json({ ok: true, payload: { checks } });\n  });\n\n  authenticated.post('/api/channels/:channelId/restart', channelRateLimitMiddleware, async (c) => {\n    const channel = channelIdParam(c.req.param('channelId'));\n    await service.restartChannel(channel);\n    return c.json({ ok: true, payload: { restarted: true } });\n  });\n}\n"],"mappings":";;;8BAc8D;AAK9D,SAAS,eAAe,KAAiC;AACvD,SAAQ,OAAO,IAAI,MAAM,CAAC,aAAa;;AAGzC,SAAS,mBAAmB,KAAiC;AAC3D,QAAO,KAAK,MAAM,IAAI;;AAGxB,SAAS,2BAA2B,SAA2D;AAC7F,QAAO,QAAQ,WAAW,mBAAmB,WAAW,QAAQ,kBAAkB,KAAK;;AAGzF,SAAS,kBAAkB,GAAuH;AAChJ,QAAO,EAAE,IAAI,MAAM,SAAS,IAAI,EAAE,IAAI,OAAO,gBAAgB,IAAI,EAAE,IAAI,OAAO,kBAAkB,EAAE,MAAM,IAAI,CAAC;;AAG/G,SAAgB,sBAAsB,eAAqB,MAAoC;CAC7F,MAAM,EAAE,SAAS,8BAA8B;CAC/C,MAAM,6BAA6B,KAAK,8BAA8B;AAEtE,eAAc,IAAI,0BAA0B,MAAM;EAChD,MAAM,WAAW,QAAQ,oBAAoB,EAAE,qBAAqB;EACpE,MAAM,SAAS,kBAAkB,EAAE;EACnC,MAAM,UAAU,WACZ,gCAAgC,UAAU,EAAE,QAAQ,CAAC,GACrD,6BAA6B,QAAQ,eAAe,EAAE,QAAQ,CAAC;EACnE,MAAM,UAAU,IAAI,IAAI,QAAQ,sBAAsB,CAAC;AACvD,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS,EACP,UAAU,QAAQ,QAAQ,KAAK,UAAU;IACvC,MAAM,cAAc,sBAAsB,QAAQ,eAAe,MAAM,IAAI,MAAM;AACjF,WAAO;KACL,GAAG;KACH,SAAS,YAAY;KACrB,YAAY,YAAY;KACxB;KACA,SAAS,QAAQ,IAAI,MAAM,GAAG,GAAG,WAAW;KAC7C;KACD,EACH;GACF,CAAC;GACF;AAEF,eAAc,IAAI,yBAAyB,MAAM;EAC/C,MAAM,WAAW,QAAQ,mBAAmB;AAC5C,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,UAAU;GAAE,CAAC;GAClD;AAEF,eAAc,IAAI,uBAAuB,MAAM;EAC7C,MAAM,WAAW,QAAQ,oBAAoB;AAC7C,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,UAAU;GAAE,CAAC;GAClD;AAEF,eAAc,IAAI,oCAAoC,MAAM;EAC1D,MAAM,UAAU,eAAe,EAAE,IAAI,MAAM,YAAY,CAAC;AACxD,MAAI,CAAC,QACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;IAAE,MAAM;IAAe,SAAS;IAAsB;GAAE,EAAE,IAAI;EAGlG,MAAM,QADS,QAAQ,wBAAwB,QAEvC,EAAE,eAAe,mBAAmB,QAAQ,cAAc,IAC/D,QAAQ,cAAc,WAAmD,YAC1E,EAAE;AACJ,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,QAAQ,OAAO;GAAE,CAAC;GACvD;AAEF,eAAc,KAAK,8CAA8C,4BAA4B,OAAO,MAAM;EACxG,MAAM,UAAU,eAAe,EAAE,IAAI,MAAM,YAAY,CAAC;EACxD,MAAM,SAAS,EAAE,IAAI,MAAM,WAAW,EAAE,MAAM,IAAI;AAClD,MAAI,CAAC,WAAW,CAAC,OACf,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;IAAE,MAAM;IAAe,SAAS;IAA6B;GAAE,EAAE,IAAI;EAEzG,MAAM,SAAS,MAAM,QAAQ,2BAA2B,QAAQ;AAChE,MAAI,CAAC,OACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;IAAE,MAAM;IAA2B,SAAS;IAAiC;GAAE,EAAE,IAAI;EAEzH,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,YACJ,QAAQ,OAAO,SAAS,YAAY,OAAQ,KAAiC,cAAc,WACtF,KAA+B,UAAU,MAAM,GAChD,KAAA;EACN,MAAM,QAAQ,QAAQ,OAAO,SAAS,WAAY,KAA6B,QAAQ,KAAA;AAEvF,MAAI,WAAW,gBAAgB,OAAO,QAAQ;GAC5C,MAAM,SAAS,MAAM,OAAO,OAAO,MAAM;IAAE,KAAK,QAAQ;IAAe,QAAQ,kBAAkB,EAAE;IAAE,CAAC;AACtG,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS;KAAE,MAAM;KAAe;KAAQ;IAAE,CAAC;;AAGvE,MAAI,OAAO,gBAAgB;GACzB,MAAM,SAAS,MAAM,OAAO,eAAe,UAAU;IACnD,KAAK,QAAQ;IACb,QAAQ,kBAAkB,EAAE;IAC5B,UAAU;IACV;IACA;IACD,CAAC;AACF,OAAI,CAAC,OAAO,GACV,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;KAAE,MAAM;KAAyB,SAAS,OAAO,WAAW;KAAyB;IAAE,EAAE,IAAI;AAEjI,OAAI,OAAO,YAAY;IACrB,MAAM,QAAQ,MAAM,QAAQ,WAAW,OAAO,WAAW;AACzD,QAAI,CAAC,MAAM,MACT,QAAO,EAAE,KAAK;KAAE,IAAI;KAAO,OAAO;MAAE,MAAM;MAAyB,SAAS,MAAM,SAAS;MAAiC;KAAE,EAAE,IAAI;cAE7H,2BAA2B,OAAO,QAAQ,CACnD,OAAM,QAAQ,cAAc;AAE9B,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,OAAO,WAAW,EAAE;IAAE,CAAC;;AAG5D,SAAO,EAAE,KACP;GACE,IAAI;GACJ,OAAO;IACL,MAAM;IACN,SAAS,mBAAmB,QAAQ,GAAG,OAAO;IAC/C;GACF,EACD,IACD;GACD;AAEF,eAAc,IAAI,qCAAqC,MAAM;EAC3D,MAAM,UAAU,eAAe,EAAE,IAAI,MAAM,YAAY,CAAC;AACxD,MAAI,CAAC,QACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;IAAE,MAAM;IAAe,SAAS;IAAsB;GAAE,EAAE,IAAI;EAElG,MAAM,YAAY,mBAAmB,EAAE,IAAI,MAAM,UAAU,CAAC;EAC5D,MAAM,SAAS,QAAQ;EACvB,MAAM,QAAQ,wBAAwB;GAAE;GAAS;GAAW;GAAQ,CAAC;AACrE,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;GAAO,CAAC;GAC3C;AAEF,eAAc,IAAI,kCAAkC,MAAM;EACxD,MAAM,SAAS,QAAQ;EACvB,MAAM,UAAU,0BAA0B,OAAO;AACjD,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,SAAS;GAAE,CAAC;GACjD;AAEF,eAAc,KAAK,4CAA4C,4BAA4B,OAAO,MAAM;EACtG,MAAM,UAAU,eAAe,EAAE,IAAI,MAAM,YAAY,CAAC;EACxD,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EASjD,MAAM,SAAS,sBAAsB;GAAE;GAAS,WAP9C,QAAQ,OAAO,SAAS,YAAY,OAAQ,KAAiC,cAAc,WACtF,KAA+B,UAAU,MAAM,GAChD;GAKqD,MAHzD,QAAQ,OAAO,SAAS,YAAY,OAAQ,KAA4B,SAAS,WAC5E,KAA0B,KAAK,MAAM,GACtC;GAC2D,CAAC;AAClE,MAAI,OAAO,OAAO,MAChB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;IAAE,MAAM;IAAmB,SAAS,OAAO;IAAO;GAAE,EAAE,IAAI;AAE9F,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;IAAE,UAAU,OAAO;IAAU,eAAe,OAAO;IAAe;GAAE,CAAC;GACxG;AAEF,eAAc,KAAK,mDAAmD,4BAA4B,OAAO,MAAM;EAC7G,MAAM,UAAU,eAAe,EAAE,IAAI,MAAM,YAAY,CAAC;EACxD,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EASjD,MAAM,SAAS,8BAA8B;GAAE;GAAS,WAPtD,QAAQ,OAAO,SAAS,YAAY,OAAQ,KAAiC,cAAc,WACtF,KAA+B,UAAU,MAAM,GAChD;GAK6D,UAHjE,QAAQ,OAAO,SAAS,YAAY,OAAQ,KAAgC,aAAa,WACpF,KAA8B,SAAS,MAAM,GAC9C;GACuE,CAAC;AAC9E,MAAI,OAAO,OAAO,MAChB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;IAAE,MAAM;IAAmB,SAAS,OAAO;IAAO;GAAE,EAAE,IAAI;AAE9F,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;IAAE,UAAU,OAAO;IAAU,eAAe,OAAO;IAAe;GAAE,CAAC;GACxG;AAEF,eAAc,OAAO,2CAA2C,4BAA4B,OAAO,MAAM;EACvG,MAAM,UAAU,eAAe,EAAE,IAAI,MAAM,YAAY,CAAC;EACxD,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EASjD,MAAM,SAAS,2BAA2B;GAAE;GAAS,WAPnD,QAAQ,OAAO,SAAS,YAAY,OAAQ,KAAiC,cAAc,WACtF,KAA+B,UAAU,MAAM,GAChD;GAK0D,UAH9D,QAAQ,OAAO,SAAS,YAAY,OAAQ,KAAgC,aAAa,WACpF,KAA8B,SAAS,MAAM,GAC9C;GACoE,CAAC;AAC3E,MAAI,OAAO,OAAO,MAChB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;IAAE,MAAM;IAAe,SAAS,OAAO;IAAO;GAAE,EAAE,IAAI;AAE1F,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,SAAS,OAAO,SAAS;GAAE,CAAC;GACjE;AAEF,eAAc,OAAO,4CAA4C,4BAA4B,OAAO,MAAM;EACxG,MAAM,UAAU,eAAe,EAAE,IAAI,MAAM,YAAY,CAAC;EACxD,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EASjD,MAAM,SAAS,6BAA6B;GAAE;GAAS,WAPrD,QAAQ,OAAO,SAAS,YAAY,OAAQ,KAAiC,cAAc,WACtF,KAA+B,UAAU,MAAM,GAChD;GAK4D,UAHhE,QAAQ,OAAO,SAAS,YAAY,OAAQ,KAAgC,aAAa,WACpF,KAA8B,SAAS,MAAM,GAC9C;GACsE,CAAC;AAC7E,MAAI,OAAO,OAAO,MAChB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;IAAE,MAAM;IAAmB,SAAS,OAAO;IAAO;GAAE,EAAE,IAAI;AAE9F,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,UAAU,OAAO,UAAU;GAAE,CAAC;GACnE;AAEF,eAAc,IAAI,mCAAmC,OAAO,MAAM;EAChE,MAAM,UAAU,eAAe,EAAE,IAAI,MAAM,YAAY,CAAC;EACxD,MAAM,SAAS,QAAQ,wBAAwB,QAAQ;AACvD,MAAI,CAAC,QAAQ,OACX,QAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,QAAQ,EAAE,EAAE;GAAE,CAAC;EAEtD,MAAM,SAAS,MAAM,OAAO,OAAO,MAAM,EAAE,KAAK,QAAQ,eAAe,CAAC;AACxE,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,QAAQ;GAAE,CAAC;GAChD;AAEF,eAAc,KAAK,oCAAoC,4BAA4B,OAAO,MAAM;EAC9F,MAAM,UAAU,eAAe,EAAE,IAAI,MAAM,YAAY,CAAC;AACxD,QAAM,QAAQ,eAAe,QAAQ;AACrC,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,WAAW,MAAM;GAAE,CAAC;GACzD"}

package/dist/src/gateway/hono/routes/config-patch/gateway.d.ts

@@ -3,7 +3,7 @@
  *
  * Covers heartbeat, bind/customBindHost/port, tailscale, auth (mode + token +
  * password + rateLimit + trustedProxy), trustedProxies, allowRealIpFallback,
- * dangerouslyAllowHostHeaderOriginFallback, security, share, publicUrl,
+ * dangerouslyAllowHostHeaderOriginFallback, security, share, siteShare, publicUrl,
  * corsOrigins, maxSseConnections, and channelConnectDefer{Mode,Ids,SkipIds}.
  *
  * Validation policy: each subsection that can reject rejects with a 400 and a

package/dist/src/gateway/hono/routes/config-patch/gateway.js

@@ -1,6 +1,7 @@
 import { init_public_url, validatePublicUrl } from "../../../../config/public-url.js";
 import { isValidIPv4 } from "../../../../config/gateway-bind.js";
 import { mergeShareConfigPatch } from "../../../../share/share-config.js";
+import { mergeSiteShareConfigPatch } from "../../../../share/site-share-config.js";
 import { isMaskedSecretPatchValue } from "../../lib/mask-secret-length.js";
 import { PATCH_OK, patchError } from "./result.js";
 //#region src/gateway/hono/routes/config-patch/gateway.ts
@@ -221,6 +222,11 @@ function applyGatewayPatch(config, body) {
 		const shareResult = mergeShareConfigPatch(config, body.gateway.share);
 		if (shareResult.ok === false) return patchError(shareResult.message);
 	}
+	if (body.gateway?.siteShare !== void 0) {
+		if (typeof body.gateway.siteShare !== "object" || body.gateway.siteShare === null || Array.isArray(body.gateway.siteShare)) return patchError("gateway.siteShare must be an object");
+		const siteShareResult = mergeSiteShareConfigPatch(config, body.gateway.siteShare);
+		if (siteShareResult.ok === false) return patchError(siteShareResult.message);
+	}
 	if (body.gateway?.publicUrl !== void 0) {
 		const gw = ensureGateway(config);
 		if (body.gateway.publicUrl === null || body.gateway.publicUrl === "") delete gw.publicUrl;

package/dist/src/gateway/hono/routes/config-patch/gateway.js.map

@@ -1 +1 @@
-{"version":3,"file":"gateway.js","names":[],"sources":["../../../../../../src/gateway/hono/routes/config-patch/gateway.ts"],"sourcesContent":["/**\n * `PATCH /api/config` — `body.gateway.*` section.\n *\n * Covers heartbeat, bind/customBindHost/port, tailscale, auth (mode + token +\n * password + rateLimit + trustedProxy), trustedProxies, allowRealIpFallback,\n * dangerouslyAllowHostHeaderOriginFallback, security, share, publicUrl,\n * corsOrigins, maxSseConnections, and channelConnectDefer{Mode,Ids,SkipIds}.\n *\n * Validation policy: each subsection that can reject rejects with a 400 and a\n * specific `message`. The dispatcher converts these into `c.json(...)`.\n *\n * Initial-state branches use the same literal defaults the inline code did\n * (loopback + port 18790 + 1800s heartbeat + 100 SSE conn + empty CORS) so\n * a brand-new install gets a working gateway after the first PATCH.\n */\nimport type { Config, GatewayBindMode } from '../../../../config/schema.js';\nimport { isValidIPv4 } from '../../../../config/gateway-bind.js';\nimport { validatePublicUrl } from '../../../../config/public-url.js';\nimport { mergeShareConfigPatch } from '../../../../share/share-config.js';\nimport { isMaskedSecretPatchValue } from '../../lib/mask-secret-length.js';\nimport { type PatchResult, PATCH_OK, patchError } from './result.js';\n\n/**\n * Shared default for \"user PATCH'd a gateway subsection but `config.gateway`\n * was never initialised\". Identical to the inline literal repeated in the\n * pre-extraction handler so this is behavior-preserving.\n */\nfunction ensureGateway(config: Config): NonNullable<Config['gateway']> {\n  if (!config.gateway) {\n    config.gateway = {\n      bind: 'loopback',\n      port: 18790,\n      heartbeat: { enabled: true, intervalMs: 1_800_000, includeSystemPromptSection: false },\n      maxSseConnections: 100,\n      corsOrigins: [],\n    };\n  }\n  return config.gateway;\n}\n\nfunction parseDeferIdList(raw: unknown): string[] | null {\n  if (!Array.isArray(raw)) return null;\n  const ids = raw\n    .filter((x): x is string => typeof x === 'string' && x.trim().length > 0)\n    .map((x) => x.trim());\n  if (ids.length > 24) return null;\n  return ids;\n}\n\nexport function applyGatewayPatch(config: Config, body: any): PatchResult {\n  if (body.gateway?.heartbeat !== undefined && typeof body.gateway.heartbeat === 'object') {\n    const gw = ensureGateway(config);\n    if (!gw.heartbeat) {\n      gw.heartbeat = { enabled: true, intervalMs: 1_800_000, includeSystemPromptSection: false };\n    }\n    const h = gw.heartbeat;\n    const p = body.gateway.heartbeat as Record<string, unknown>;\n    if (p.enabled !== undefined) h.enabled = Boolean(p.enabled);\n    if (p.intervalMs !== undefined && typeof p.intervalMs === 'number' && Number.isFinite(p.intervalMs)) {\n      h.intervalMs = p.intervalMs;\n    }\n    if (p.includeSystemPromptSection !== undefined) {\n      h.includeSystemPromptSection = Boolean(p.includeSystemPromptSection);\n    }\n    if (p.target !== undefined) {\n      if (p.target === null || p.target === '') delete (h as { target?: string }).target;\n      else (h as { target?: string }).target = String(p.target);\n    }\n    if (p.targetChatId !== undefined) {\n      if (p.targetChatId === null || p.targetChatId === '') delete (h as { targetChatId?: string }).targetChatId;\n      else (h as { targetChatId?: string }).targetChatId = String(p.targetChatId);\n    }\n    if (p.prompt !== undefined) {\n      if (p.prompt === null || p.prompt === '') delete (h as { prompt?: string }).prompt;\n      else (h as { prompt?: string }).prompt = String(p.prompt);\n    }\n    if (p.ackMaxChars !== undefined) {\n      if (p.ackMaxChars === null || p.ackMaxChars === '') delete (h as { ackMaxChars?: number }).ackMaxChars;\n      else if (typeof p.ackMaxChars === 'number' && Number.isFinite(p.ackMaxChars)) {\n        (h as { ackMaxChars?: number }).ackMaxChars = p.ackMaxChars;\n      }\n    }\n    if (p.isolatedSession !== undefined) {\n      if (p.isolatedSession === null || p.isolatedSession === false) {\n        delete (h as { isolatedSession?: boolean }).isolatedSession;\n      } else {\n        (h as { isolatedSession?: boolean }).isolatedSession = Boolean(p.isolatedSession);\n      }\n    }\n    if (p.activeHours !== undefined) {\n      if (p.activeHours === null) {\n        delete (h as { activeHours?: unknown }).activeHours;\n      } else if (typeof p.activeHours === 'object' && p.activeHours !== null) {\n        const ah = p.activeHours as Record<string, unknown>;\n        const start = typeof ah.start === 'string' ? ah.start : '';\n        const end = typeof ah.end === 'string' ? ah.end : '';\n        if (start && end) {\n          (h as { activeHours?: { start: string; end: string; timezone?: string } }).activeHours = {\n            start,\n            end,\n            ...(typeof ah.timezone === 'string' && ah.timezone.trim() ? { timezone: ah.timezone } : {}),\n          };\n        } else {\n          delete (h as { activeHours?: unknown }).activeHours;\n        }\n      }\n    }\n  }\n\n  if (body.gateway?.bind !== undefined) {\n    const bindModes = new Set(['auto', 'loopback', 'lan', 'tailnet', 'custom']);\n    const bind = body.gateway.bind;\n    if (typeof bind !== 'string' || !bindModes.has(bind)) {\n      return patchError('gateway.bind must be one of: auto, loopback, lan, tailnet, custom');\n    }\n    if (!config.gateway) {\n      config.gateway = {\n        bind: bind as GatewayBindMode,\n        port: 18790,\n        heartbeat: { enabled: true, intervalMs: 1_800_000, includeSystemPromptSection: false },\n        maxSseConnections: 100,\n        corsOrigins: [],\n      };\n    } else {\n      config.gateway.bind = bind as GatewayBindMode;\n    }\n    if (bind !== 'custom') {\n      delete config.gateway.customBindHost;\n    }\n  }\n\n  if (body.gateway?.customBindHost !== undefined) {\n    if (body.gateway.customBindHost === null || body.gateway.customBindHost === '') {\n      if (config.gateway) {\n        delete config.gateway.customBindHost;\n      }\n    } else if (typeof body.gateway.customBindHost !== 'string' || !isValidIPv4(body.gateway.customBindHost.trim())) {\n      return patchError('gateway.customBindHost must be a valid IPv4 address');\n    } else if (config.gateway) {\n      config.gateway.customBindHost = body.gateway.customBindHost.trim();\n      config.gateway.bind = 'custom';\n    }\n  }\n\n  if (body.gateway?.port !== undefined) {\n    if (\n      typeof body.gateway.port !== 'number' ||\n      !Number.isFinite(body.gateway.port) ||\n      body.gateway.port < 1 ||\n      body.gateway.port > 65535\n    ) {\n      return patchError('gateway.port must be an integer from 1 to 65535');\n    }\n    if (!config.gateway) {\n      config.gateway = {\n        bind: 'loopback',\n        port: Math.floor(body.gateway.port),\n        heartbeat: { enabled: true, intervalMs: 1_800_000, includeSystemPromptSection: false },\n        maxSseConnections: 100,\n        corsOrigins: [],\n      };\n    } else {\n      config.gateway.port = Math.floor(body.gateway.port);\n    }\n  }\n\n  if (body.gateway?.tailscale !== undefined && typeof body.gateway.tailscale === 'object') {\n    const ts = body.gateway.tailscale as Record<string, unknown>;\n    if (!config.gateway) {\n      config.gateway = {\n        bind: 'loopback',\n        port: 18790,\n        auth: { mode: 'token' },\n        heartbeat: { enabled: true, intervalMs: 1_800_000, includeSystemPromptSection: false },\n        maxSseConnections: 100,\n        corsOrigins: [],\n      };\n    }\n    config.gateway.tailscale = {\n      ...(config.gateway.tailscale ?? { mode: 'off', resetOnExit: true }),\n    };\n    if (ts.mode !== undefined) {\n      if (ts.mode !== 'off' && ts.mode !== 'serve' && ts.mode !== 'funnel') {\n        return patchError('gateway.tailscale.mode must be off, serve, or funnel');\n      }\n      config.gateway.tailscale.mode = ts.mode as 'off' | 'serve' | 'funnel';\n    }\n    if (ts.resetOnExit !== undefined) {\n      config.gateway.tailscale.resetOnExit = ts.resetOnExit === true;\n    }\n  }\n\n  if (body.gateway?.auth !== undefined) {\n    const gw = ensureGateway(config);\n    if (!gw.auth) gw.auth = { mode: 'token' };\n    const a = body.gateway.auth;\n    if (a.mode !== undefined) {\n      if (\n        a.mode !== 'none' &&\n        a.mode !== 'token' &&\n        a.mode !== 'password' &&\n        a.mode !== 'trusted-proxy'\n      ) {\n        return patchError('gateway.auth.mode must be none, token, password, or trusted-proxy');\n      }\n      gw.auth.mode = a.mode;\n    }\n    if (a.token !== undefined) {\n      if (a.token === null || (typeof a.token === 'string' && !a.token.trim())) {\n        delete gw.auth.token;\n      } else if (typeof a.token === 'string' && !isMaskedSecretPatchValue(a.token)) {\n        gw.auth.token = a.token;\n      }\n    }\n    if (a.password !== undefined) {\n      if (a.password === null || (typeof a.password === 'string' && !a.password.trim())) {\n        delete gw.auth.password;\n      } else if (typeof a.password === 'string' && !isMaskedSecretPatchValue(a.password)) {\n        gw.auth.password = a.password;\n      }\n    }\n    if (a.rateLimit !== undefined && typeof a.rateLimit === 'object' && a.rateLimit !== null) {\n      const rlIn = a.rateLimit as Record<string, unknown>;\n      if (!gw.auth.rateLimit) {\n        gw.auth.rateLimit = {\n          enabled: true,\n          maxAttempts: 5,\n          windowMs: 900_000,\n          blockDurationMs: 300_000,\n          burstCoalesceMs: 1000,\n          exemptLoopback: true,\n        };\n      }\n      const rl = gw.auth.rateLimit!;\n      if (rlIn.enabled !== undefined) rl.enabled = Boolean(rlIn.enabled);\n      if (typeof rlIn.maxAttempts === 'number' && Number.isFinite(rlIn.maxAttempts)) {\n        rl.maxAttempts = Math.max(1, Math.floor(rlIn.maxAttempts));\n      }\n      if (typeof rlIn.windowMs === 'number' && Number.isFinite(rlIn.windowMs) && rlIn.windowMs > 0) {\n        rl.windowMs = Math.floor(rlIn.windowMs);\n      }\n      if (\n        typeof rlIn.blockDurationMs === 'number' &&\n        Number.isFinite(rlIn.blockDurationMs) &&\n        rlIn.blockDurationMs > 0\n      ) {\n        rl.blockDurationMs = Math.floor(rlIn.blockDurationMs);\n      }\n      if (\n        typeof rlIn.lockoutMs === 'number' &&\n        Number.isFinite(rlIn.lockoutMs) &&\n        rlIn.lockoutMs > 0\n      ) {\n        rl.blockDurationMs = Math.floor(rlIn.lockoutMs);\n      }\n      if (rlIn.exemptLoopback !== undefined) {\n        rl.exemptLoopback = Boolean(rlIn.exemptLoopback);\n      }\n    }\n    if (a.trustedProxy !== undefined) {\n      if (a.trustedProxy === null) {\n        delete gw.auth.trustedProxy;\n      } else if (typeof a.trustedProxy === 'object' && a.trustedProxy !== null) {\n        const tpIn = a.trustedProxy as Record<string, unknown>;\n        const userHeader =\n          typeof tpIn.userHeader === 'string' ? tpIn.userHeader.trim() : '';\n        if (!userHeader) {\n          return patchError('gateway.auth.trustedProxy.userHeader is required');\n        }\n        const trustedProxy: NonNullable<(typeof gw.auth)['trustedProxy']> = {\n          userHeader,\n        };\n        if (tpIn.requiredHeaders !== undefined) {\n          if (!Array.isArray(tpIn.requiredHeaders)) {\n            return patchError('gateway.auth.trustedProxy.requiredHeaders must be an array');\n          }\n          trustedProxy.requiredHeaders = tpIn.requiredHeaders\n            .filter((x): x is string => typeof x === 'string' && x.trim().length > 0)\n            .map((x) => x.trim());\n        }\n        if (tpIn.allowUsers !== undefined) {\n          if (!Array.isArray(tpIn.allowUsers)) {\n            return patchError('gateway.auth.trustedProxy.allowUsers must be an array');\n          }\n          trustedProxy.allowUsers = tpIn.allowUsers\n            .filter((x): x is string => typeof x === 'string' && x.trim().length > 0)\n            .map((x) => x.trim());\n        }\n        if (tpIn.allowLoopback !== undefined) {\n          trustedProxy.allowLoopback = Boolean(tpIn.allowLoopback);\n        }\n        gw.auth.trustedProxy = trustedProxy;\n      }\n    }\n  }\n\n  if (body.gateway?.trustedProxies !== undefined) {\n    if (!Array.isArray(body.gateway.trustedProxies)) {\n      return patchError('gateway.trustedProxies must be an array');\n    }\n    const gw = ensureGateway(config);\n    gw.trustedProxies = body.gateway.trustedProxies\n      .filter((x: unknown): x is string => typeof x === 'string' && x.trim().length > 0)\n      .map((x: string) => x.trim());\n  }\n\n  if (body.gateway?.allowRealIpFallback !== undefined) {\n    const gw = ensureGateway(config);\n    gw.allowRealIpFallback = Boolean(body.gateway.allowRealIpFallback);\n  }\n\n  if (body.gateway?.dangerouslyAllowHostHeaderOriginFallback !== undefined) {\n    const gw = ensureGateway(config);\n    gw.dangerouslyAllowHostHeaderOriginFallback = Boolean(\n      body.gateway.dangerouslyAllowHostHeaderOriginFallback,\n    );\n  }\n\n  if (body.gateway?.security !== undefined) {\n    if (typeof body.gateway.security !== 'object' || body.gateway.security === null) {\n      return patchError('gateway.security must be an object');\n    }\n    const gw = ensureGateway(config);\n    const secIn = body.gateway.security as Record<string, unknown>;\n    if (!gw.security) {\n      gw.security = {};\n    }\n    if (secIn.strict !== undefined) {\n      gw.security.strict = Boolean(secIn.strict);\n    }\n  }\n\n  if (body.gateway?.share !== undefined) {\n    if (typeof body.gateway.share !== 'object' || body.gateway.share === null || Array.isArray(body.gateway.share)) {\n      return patchError('gateway.share must be an object');\n    }\n    const shareResult = mergeShareConfigPatch(config, body.gateway.share as Record<string, unknown>);\n    if (shareResult.ok === false) {\n      return patchError(shareResult.message);\n    }\n  }\n\n  if (body.gateway?.publicUrl !== undefined) {\n    const gw = ensureGateway(config);\n    if (body.gateway.publicUrl === null || body.gateway.publicUrl === '') {\n      delete gw.publicUrl;\n    } else if (typeof body.gateway.publicUrl !== 'string') {\n      return patchError('gateway.publicUrl must be a string or null');\n    } else {\n      const validation = validatePublicUrl(body.gateway.publicUrl);\n      if (validation.ok === false) {\n        return patchError(`gateway.publicUrl: ${validation.message}`);\n      }\n      gw.publicUrl = validation.url;\n    }\n  }\n\n  if (body.gateway?.corsOrigins !== undefined) {\n    if (!Array.isArray(body.gateway.corsOrigins)) {\n      return patchError('gateway.corsOrigins must be an array');\n    }\n    const gw = ensureGateway(config);\n    gw.corsOrigins = body.gateway.corsOrigins\n      .filter((x: unknown): x is string => typeof x === 'string' && x.trim().length > 0)\n      .map((x: string) => x.trim());\n  }\n\n  if (body.gateway?.maxSseConnections !== undefined) {\n    if (\n      typeof body.gateway.maxSseConnections !== 'number' ||\n      !Number.isFinite(body.gateway.maxSseConnections) ||\n      body.gateway.maxSseConnections < 1\n    ) {\n      return patchError('gateway.maxSseConnections must be a positive integer');\n    }\n    if (!config.gateway) {\n      config.gateway = {\n        bind: 'loopback',\n        port: 18790,\n        heartbeat: { enabled: true, intervalMs: 1_800_000, includeSystemPromptSection: false },\n        maxSseConnections: Math.floor(body.gateway.maxSseConnections),\n        corsOrigins: [],\n      };\n    } else {\n      config.gateway.maxSseConnections = Math.floor(body.gateway.maxSseConnections);\n    }\n  }\n\n  if (body.gateway?.channelConnectDeferMode !== undefined) {\n    const mode = body.gateway.channelConnectDeferMode;\n    if (mode !== 'auto' && mode !== 'off' && mode !== 'explicit') {\n      return patchError('gateway.channelConnectDeferMode must be auto, off, or explicit');\n    }\n    const gw = ensureGateway(config);\n    gw.channelConnectDeferMode = mode;\n  }\n\n  if (body.gateway?.channelConnectDeferIds !== undefined) {\n    const ids = parseDeferIdList(body.gateway.channelConnectDeferIds);\n    if (ids === null) {\n      return patchError('gateway.channelConnectDeferIds must be an array of up to 24 strings');\n    }\n    const gw = ensureGateway(config);\n    gw.channelConnectDeferIds = ids;\n  }\n\n  if (body.gateway?.channelConnectDeferSkipIds !== undefined) {\n    const ids = parseDeferIdList(body.gateway.channelConnectDeferSkipIds);\n    if (ids === null) {\n      return patchError('gateway.channelConnectDeferSkipIds must be an array of up to 24 strings');\n    }\n    const gw = ensureGateway(config);\n    gw.channelConnectDeferSkipIds = ids;\n  }\n\n  return PATCH_OK;\n}\n"],"mappings":";;;;;;iBAiBqE;;;;;;AAUrE,SAAS,cAAc,QAAgD;AACrE,KAAI,CAAC,OAAO,QACV,QAAO,UAAU;EACf,MAAM;EACN,MAAM;EACN,WAAW;GAAE,SAAS;GAAM,YAAY;GAAW,4BAA4B;GAAO;EACtF,mBAAmB;EACnB,aAAa,EAAE;EAChB;AAEH,QAAO,OAAO;;AAGhB,SAAS,iBAAiB,KAA+B;AACvD,KAAI,CAAC,MAAM,QAAQ,IAAI,CAAE,QAAO;CAChC,MAAM,MAAM,IACT,QAAQ,MAAmB,OAAO,MAAM,YAAY,EAAE,MAAM,CAAC,SAAS,EAAE,CACxE,KAAK,MAAM,EAAE,MAAM,CAAC;AACvB,KAAI,IAAI,SAAS,GAAI,QAAO;AAC5B,QAAO;;AAGT,SAAgB,kBAAkB,QAAgB,MAAwB;AACxE,KAAI,KAAK,SAAS,cAAc,KAAA,KAAa,OAAO,KAAK,QAAQ,cAAc,UAAU;EACvF,MAAM,KAAK,cAAc,OAAO;AAChC,MAAI,CAAC,GAAG,UACN,IAAG,YAAY;GAAE,SAAS;GAAM,YAAY;GAAW,4BAA4B;GAAO;EAE5F,MAAM,IAAI,GAAG;EACb,MAAM,IAAI,KAAK,QAAQ;AACvB,MAAI,EAAE,YAAY,KAAA,EAAW,GAAE,UAAU,QAAQ,EAAE,QAAQ;AAC3D,MAAI,EAAE,eAAe,KAAA,KAAa,OAAO,EAAE,eAAe,YAAY,OAAO,SAAS,EAAE,WAAW,CACjG,GAAE,aAAa,EAAE;AAEnB,MAAI,EAAE,+BAA+B,KAAA,EACnC,GAAE,6BAA6B,QAAQ,EAAE,2BAA2B;AAEtE,MAAI,EAAE,WAAW,KAAA,EACf,KAAI,EAAE,WAAW,QAAQ,EAAE,WAAW,GAAI,QAAQ,EAA0B;MACtE,GAA0B,SAAS,OAAO,EAAE,OAAO;AAE3D,MAAI,EAAE,iBAAiB,KAAA,EACrB,KAAI,EAAE,iBAAiB,QAAQ,EAAE,iBAAiB,GAAI,QAAQ,EAAgC;MACxF,GAAgC,eAAe,OAAO,EAAE,aAAa;AAE7E,MAAI,EAAE,WAAW,KAAA,EACf,KAAI,EAAE,WAAW,QAAQ,EAAE,WAAW,GAAI,QAAQ,EAA0B;MACtE,GAA0B,SAAS,OAAO,EAAE,OAAO;AAE3D,MAAI,EAAE,gBAAgB,KAAA;OAChB,EAAE,gBAAgB,QAAQ,EAAE,gBAAgB,GAAI,QAAQ,EAA+B;YAClF,OAAO,EAAE,gBAAgB,YAAY,OAAO,SAAS,EAAE,YAAY,CACzE,GAA+B,cAAc,EAAE;;AAGpD,MAAI,EAAE,oBAAoB,KAAA,EACxB,KAAI,EAAE,oBAAoB,QAAQ,EAAE,oBAAoB,MACtD,QAAQ,EAAoC;MAE3C,GAAoC,kBAAkB,QAAQ,EAAE,gBAAgB;AAGrF,MAAI,EAAE,gBAAgB,KAAA;OAChB,EAAE,gBAAgB,KACpB,QAAQ,EAAgC;YAC/B,OAAO,EAAE,gBAAgB,YAAY,EAAE,gBAAgB,MAAM;IACtE,MAAM,KAAK,EAAE;IACb,MAAM,QAAQ,OAAO,GAAG,UAAU,WAAW,GAAG,QAAQ;IACxD,MAAM,MAAM,OAAO,GAAG,QAAQ,WAAW,GAAG,MAAM;AAClD,QAAI,SAAS,IACV,GAA0E,cAAc;KACvF;KACA;KACA,GAAI,OAAO,GAAG,aAAa,YAAY,GAAG,SAAS,MAAM,GAAG,EAAE,UAAU,GAAG,UAAU,GAAG,EAAE;KAC3F;QAED,QAAQ,EAAgC;;;;AAMhD,KAAI,KAAK,SAAS,SAAS,KAAA,GAAW;EACpC,MAAM,YAAY,IAAI,IAAI;GAAC;GAAQ;GAAY;GAAO;GAAW;GAAS,CAAC;EAC3E,MAAM,OAAO,KAAK,QAAQ;AAC1B,MAAI,OAAO,SAAS,YAAY,CAAC,UAAU,IAAI,KAAK,CAClD,QAAO,WAAW,oEAAoE;AAExF,MAAI,CAAC,OAAO,QACV,QAAO,UAAU;GACT;GACN,MAAM;GACN,WAAW;IAAE,SAAS;IAAM,YAAY;IAAW,4BAA4B;IAAO;GACtF,mBAAmB;GACnB,aAAa,EAAE;GAChB;MAED,QAAO,QAAQ,OAAO;AAExB,MAAI,SAAS,SACX,QAAO,OAAO,QAAQ;;AAI1B,KAAI,KAAK,SAAS,mBAAmB,KAAA;MAC/B,KAAK,QAAQ,mBAAmB,QAAQ,KAAK,QAAQ,mBAAmB;OACtE,OAAO,QACT,QAAO,OAAO,QAAQ;aAEf,OAAO,KAAK,QAAQ,mBAAmB,YAAY,CAAC,YAAY,KAAK,QAAQ,eAAe,MAAM,CAAC,CAC5G,QAAO,WAAW,sDAAsD;WAC/D,OAAO,SAAS;AACzB,UAAO,QAAQ,iBAAiB,KAAK,QAAQ,eAAe,MAAM;AAClE,UAAO,QAAQ,OAAO;;;AAI1B,KAAI,KAAK,SAAS,SAAS,KAAA,GAAW;AACpC,MACE,OAAO,KAAK,QAAQ,SAAS,YAC7B,CAAC,OAAO,SAAS,KAAK,QAAQ,KAAK,IACnC,KAAK,QAAQ,OAAO,KACpB,KAAK,QAAQ,OAAO,MAEpB,QAAO,WAAW,kDAAkD;AAEtE,MAAI,CAAC,OAAO,QACV,QAAO,UAAU;GACf,MAAM;GACN,MAAM,KAAK,MAAM,KAAK,QAAQ,KAAK;GACnC,WAAW;IAAE,SAAS;IAAM,YAAY;IAAW,4BAA4B;IAAO;GACtF,mBAAmB;GACnB,aAAa,EAAE;GAChB;MAED,QAAO,QAAQ,OAAO,KAAK,MAAM,KAAK,QAAQ,KAAK;;AAIvD,KAAI,KAAK,SAAS,cAAc,KAAA,KAAa,OAAO,KAAK,QAAQ,cAAc,UAAU;EACvF,MAAM,KAAK,KAAK,QAAQ;AACxB,MAAI,CAAC,OAAO,QACV,QAAO,UAAU;GACf,MAAM;GACN,MAAM;GACN,MAAM,EAAE,MAAM,SAAS;GACvB,WAAW;IAAE,SAAS;IAAM,YAAY;IAAW,4BAA4B;IAAO;GACtF,mBAAmB;GACnB,aAAa,EAAE;GAChB;AAEH,SAAO,QAAQ,YAAY,EACzB,GAAI,OAAO,QAAQ,aAAa;GAAE,MAAM;GAAO,aAAa;GAAM,EACnE;AACD,MAAI,GAAG,SAAS,KAAA,GAAW;AACzB,OAAI,GAAG,SAAS,SAAS,GAAG,SAAS,WAAW,GAAG,SAAS,SAC1D,QAAO,WAAW,uDAAuD;AAE3E,UAAO,QAAQ,UAAU,OAAO,GAAG;;AAErC,MAAI,GAAG,gBAAgB,KAAA,EACrB,QAAO,QAAQ,UAAU,cAAc,GAAG,gBAAgB;;AAI9D,KAAI,KAAK,SAAS,SAAS,KAAA,GAAW;EACpC,MAAM,KAAK,cAAc,OAAO;AAChC,MAAI,CAAC,GAAG,KAAM,IAAG,OAAO,EAAE,MAAM,SAAS;EACzC,MAAM,IAAI,KAAK,QAAQ;AACvB,MAAI,EAAE,SAAS,KAAA,GAAW;AACxB,OACE,EAAE,SAAS,UACX,EAAE,SAAS,WACX,EAAE,SAAS,cACX,EAAE,SAAS,gBAEX,QAAO,WAAW,oEAAoE;AAExF,MAAG,KAAK,OAAO,EAAE;;AAEnB,MAAI,EAAE,UAAU,KAAA;OACV,EAAE,UAAU,QAAS,OAAO,EAAE,UAAU,YAAY,CAAC,EAAE,MAAM,MAAM,CACrE,QAAO,GAAG,KAAK;YACN,OAAO,EAAE,UAAU,YAAY,CAAC,yBAAyB,EAAE,MAAM,CAC1E,IAAG,KAAK,QAAQ,EAAE;;AAGtB,MAAI,EAAE,aAAa,KAAA;OACb,EAAE,aAAa,QAAS,OAAO,EAAE,aAAa,YAAY,CAAC,EAAE,SAAS,MAAM,CAC9E,QAAO,GAAG,KAAK;YACN,OAAO,EAAE,aAAa,YAAY,CAAC,yBAAyB,EAAE,SAAS,CAChF,IAAG,KAAK,WAAW,EAAE;;AAGzB,MAAI,EAAE,cAAc,KAAA,KAAa,OAAO,EAAE,cAAc,YAAY,EAAE,cAAc,MAAM;GACxF,MAAM,OAAO,EAAE;AACf,OAAI,CAAC,GAAG,KAAK,UACX,IAAG,KAAK,YAAY;IAClB,SAAS;IACT,aAAa;IACb,UAAU;IACV,iBAAiB;IACjB,iBAAiB;IACjB,gBAAgB;IACjB;GAEH,MAAM,KAAK,GAAG,KAAK;AACnB,OAAI,KAAK,YAAY,KAAA,EAAW,IAAG,UAAU,QAAQ,KAAK,QAAQ;AAClE,OAAI,OAAO,KAAK,gBAAgB,YAAY,OAAO,SAAS,KAAK,YAAY,CAC3E,IAAG,cAAc,KAAK,IAAI,GAAG,KAAK,MAAM,KAAK,YAAY,CAAC;AAE5D,OAAI,OAAO,KAAK,aAAa,YAAY,OAAO,SAAS,KAAK,SAAS,IAAI,KAAK,WAAW,EACzF,IAAG,WAAW,KAAK,MAAM,KAAK,SAAS;AAEzC,OACE,OAAO,KAAK,oBAAoB,YAChC,OAAO,SAAS,KAAK,gBAAgB,IACrC,KAAK,kBAAkB,EAEvB,IAAG,kBAAkB,KAAK,MAAM,KAAK,gBAAgB;AAEvD,OACE,OAAO,KAAK,cAAc,YAC1B,OAAO,SAAS,KAAK,UAAU,IAC/B,KAAK,YAAY,EAEjB,IAAG,kBAAkB,KAAK,MAAM,KAAK,UAAU;AAEjD,OAAI,KAAK,mBAAmB,KAAA,EAC1B,IAAG,iBAAiB,QAAQ,KAAK,eAAe;;AAGpD,MAAI,EAAE,iBAAiB,KAAA;OACjB,EAAE,iBAAiB,KACrB,QAAO,GAAG,KAAK;YACN,OAAO,EAAE,iBAAiB,YAAY,EAAE,iBAAiB,MAAM;IACxE,MAAM,OAAO,EAAE;IACf,MAAM,aACJ,OAAO,KAAK,eAAe,WAAW,KAAK,WAAW,MAAM,GAAG;AACjE,QAAI,CAAC,WACH,QAAO,WAAW,mDAAmD;IAEvE,MAAM,eAA8D,EAClE,YACD;AACD,QAAI,KAAK,oBAAoB,KAAA,GAAW;AACtC,SAAI,CAAC,MAAM,QAAQ,KAAK,gBAAgB,CACtC,QAAO,WAAW,6DAA6D;AAEjF,kBAAa,kBAAkB,KAAK,gBACjC,QAAQ,MAAmB,OAAO,MAAM,YAAY,EAAE,MAAM,CAAC,SAAS,EAAE,CACxE,KAAK,MAAM,EAAE,MAAM,CAAC;;AAEzB,QAAI,KAAK,eAAe,KAAA,GAAW;AACjC,SAAI,CAAC,MAAM,QAAQ,KAAK,WAAW,CACjC,QAAO,WAAW,wDAAwD;AAE5E,kBAAa,aAAa,KAAK,WAC5B,QAAQ,MAAmB,OAAO,MAAM,YAAY,EAAE,MAAM,CAAC,SAAS,EAAE,CACxE,KAAK,MAAM,EAAE,MAAM,CAAC;;AAEzB,QAAI,KAAK,kBAAkB,KAAA,EACzB,cAAa,gBAAgB,QAAQ,KAAK,cAAc;AAE1D,OAAG,KAAK,eAAe;;;;AAK7B,KAAI,KAAK,SAAS,mBAAmB,KAAA,GAAW;AAC9C,MAAI,CAAC,MAAM,QAAQ,KAAK,QAAQ,eAAe,CAC7C,QAAO,WAAW,0CAA0C;EAE9D,MAAM,KAAK,cAAc,OAAO;AAChC,KAAG,iBAAiB,KAAK,QAAQ,eAC9B,QAAQ,MAA4B,OAAO,MAAM,YAAY,EAAE,MAAM,CAAC,SAAS,EAAE,CACjF,KAAK,MAAc,EAAE,MAAM,CAAC;;AAGjC,KAAI,KAAK,SAAS,wBAAwB,KAAA,GAAW;EACnD,MAAM,KAAK,cAAc,OAAO;AAChC,KAAG,sBAAsB,QAAQ,KAAK,QAAQ,oBAAoB;;AAGpE,KAAI,KAAK,SAAS,6CAA6C,KAAA,GAAW;EACxE,MAAM,KAAK,cAAc,OAAO;AAChC,KAAG,2CAA2C,QAC5C,KAAK,QAAQ,yCACd;;AAGH,KAAI,KAAK,SAAS,aAAa,KAAA,GAAW;AACxC,MAAI,OAAO,KAAK,QAAQ,aAAa,YAAY,KAAK,QAAQ,aAAa,KACzE,QAAO,WAAW,qCAAqC;EAEzD,MAAM,KAAK,cAAc,OAAO;EAChC,MAAM,QAAQ,KAAK,QAAQ;AAC3B,MAAI,CAAC,GAAG,SACN,IAAG,WAAW,EAAE;AAElB,MAAI,MAAM,WAAW,KAAA,EACnB,IAAG,SAAS,SAAS,QAAQ,MAAM,OAAO;;AAI9C,KAAI,KAAK,SAAS,UAAU,KAAA,GAAW;AACrC,MAAI,OAAO,KAAK,QAAQ,UAAU,YAAY,KAAK,QAAQ,UAAU,QAAQ,MAAM,QAAQ,KAAK,QAAQ,MAAM,CAC5G,QAAO,WAAW,kCAAkC;EAEtD,MAAM,cAAc,sBAAsB,QAAQ,KAAK,QAAQ,MAAiC;AAChG,MAAI,YAAY,OAAO,MACrB,QAAO,WAAW,YAAY,QAAQ;;AAI1C,KAAI,KAAK,SAAS,cAAc,KAAA,GAAW;EACzC,MAAM,KAAK,cAAc,OAAO;AAChC,MAAI,KAAK,QAAQ,cAAc,QAAQ,KAAK,QAAQ,cAAc,GAChE,QAAO,GAAG;WACD,OAAO,KAAK,QAAQ,cAAc,SAC3C,QAAO,WAAW,6CAA6C;OAC1D;GACL,MAAM,aAAa,kBAAkB,KAAK,QAAQ,UAAU;AAC5D,OAAI,WAAW,OAAO,MACpB,QAAO,WAAW,sBAAsB,WAAW,UAAU;AAE/D,MAAG,YAAY,WAAW;;;AAI9B,KAAI,KAAK,SAAS,gBAAgB,KAAA,GAAW;AAC3C,MAAI,CAAC,MAAM,QAAQ,KAAK,QAAQ,YAAY,CAC1C,QAAO,WAAW,uCAAuC;EAE3D,MAAM,KAAK,cAAc,OAAO;AAChC,KAAG,cAAc,KAAK,QAAQ,YAC3B,QAAQ,MAA4B,OAAO,MAAM,YAAY,EAAE,MAAM,CAAC,SAAS,EAAE,CACjF,KAAK,MAAc,EAAE,MAAM,CAAC;;AAGjC,KAAI,KAAK,SAAS,sBAAsB,KAAA,GAAW;AACjD,MACE,OAAO,KAAK,QAAQ,sBAAsB,YAC1C,CAAC,OAAO,SAAS,KAAK,QAAQ,kBAAkB,IAChD,KAAK,QAAQ,oBAAoB,EAEjC,QAAO,WAAW,uDAAuD;AAE3E,MAAI,CAAC,OAAO,QACV,QAAO,UAAU;GACf,MAAM;GACN,MAAM;GACN,WAAW;IAAE,SAAS;IAAM,YAAY;IAAW,4BAA4B;IAAO;GACtF,mBAAmB,KAAK,MAAM,KAAK,QAAQ,kBAAkB;GAC7D,aAAa,EAAE;GAChB;MAED,QAAO,QAAQ,oBAAoB,KAAK,MAAM,KAAK,QAAQ,kBAAkB;;AAIjF,KAAI,KAAK,SAAS,4BAA4B,KAAA,GAAW;EACvD,MAAM,OAAO,KAAK,QAAQ;AAC1B,MAAI,SAAS,UAAU,SAAS,SAAS,SAAS,WAChD,QAAO,WAAW,iEAAiE;EAErF,MAAM,KAAK,cAAc,OAAO;AAChC,KAAG,0BAA0B;;AAG/B,KAAI,KAAK,SAAS,2BAA2B,KAAA,GAAW;EACtD,MAAM,MAAM,iBAAiB,KAAK,QAAQ,uBAAuB;AACjE,MAAI,QAAQ,KACV,QAAO,WAAW,sEAAsE;EAE1F,MAAM,KAAK,cAAc,OAAO;AAChC,KAAG,yBAAyB;;AAG9B,KAAI,KAAK,SAAS,+BAA+B,KAAA,GAAW;EAC1D,MAAM,MAAM,iBAAiB,KAAK,QAAQ,2BAA2B;AACrE,MAAI,QAAQ,KACV,QAAO,WAAW,0EAA0E;EAE9F,MAAM,KAAK,cAAc,OAAO;AAChC,KAAG,6BAA6B;;AAGlC,QAAO"}
+{"version":3,"file":"gateway.js","names":[],"sources":["../../../../../../src/gateway/hono/routes/config-patch/gateway.ts"],"sourcesContent":["/**\n * `PATCH /api/config` — `body.gateway.*` section.\n *\n * Covers heartbeat, bind/customBindHost/port, tailscale, auth (mode + token +\n * password + rateLimit + trustedProxy), trustedProxies, allowRealIpFallback,\n * dangerouslyAllowHostHeaderOriginFallback, security, share, siteShare, publicUrl,\n * corsOrigins, maxSseConnections, and channelConnectDefer{Mode,Ids,SkipIds}.\n *\n * Validation policy: each subsection that can reject rejects with a 400 and a\n * specific `message`. The dispatcher converts these into `c.json(...)`.\n *\n * Initial-state branches use the same literal defaults the inline code did\n * (loopback + port 18790 + 1800s heartbeat + 100 SSE conn + empty CORS) so\n * a brand-new install gets a working gateway after the first PATCH.\n */\nimport type { Config, GatewayBindMode } from '../../../../config/schema.js';\nimport { isValidIPv4 } from '../../../../config/gateway-bind.js';\nimport { validatePublicUrl } from '../../../../config/public-url.js';\nimport { mergeShareConfigPatch } from '../../../../share/share-config.js';\nimport { mergeSiteShareConfigPatch } from '../../../../share/site-share-config.js';\nimport { isMaskedSecretPatchValue } from '../../lib/mask-secret-length.js';\nimport { type PatchResult, PATCH_OK, patchError } from './result.js';\n\n/**\n * Shared default for \"user PATCH'd a gateway subsection but `config.gateway`\n * was never initialised\". Identical to the inline literal repeated in the\n * pre-extraction handler so this is behavior-preserving.\n */\nfunction ensureGateway(config: Config): NonNullable<Config['gateway']> {\n  if (!config.gateway) {\n    config.gateway = {\n      bind: 'loopback',\n      port: 18790,\n      heartbeat: { enabled: true, intervalMs: 1_800_000, includeSystemPromptSection: false },\n      maxSseConnections: 100,\n      corsOrigins: [],\n    };\n  }\n  return config.gateway;\n}\n\nfunction parseDeferIdList(raw: unknown): string[] | null {\n  if (!Array.isArray(raw)) return null;\n  const ids = raw\n    .filter((x): x is string => typeof x === 'string' && x.trim().length > 0)\n    .map((x) => x.trim());\n  if (ids.length > 24) return null;\n  return ids;\n}\n\nexport function applyGatewayPatch(config: Config, body: any): PatchResult {\n  if (body.gateway?.heartbeat !== undefined && typeof body.gateway.heartbeat === 'object') {\n    const gw = ensureGateway(config);\n    if (!gw.heartbeat) {\n      gw.heartbeat = { enabled: true, intervalMs: 1_800_000, includeSystemPromptSection: false };\n    }\n    const h = gw.heartbeat;\n    const p = body.gateway.heartbeat as Record<string, unknown>;\n    if (p.enabled !== undefined) h.enabled = Boolean(p.enabled);\n    if (p.intervalMs !== undefined && typeof p.intervalMs === 'number' && Number.isFinite(p.intervalMs)) {\n      h.intervalMs = p.intervalMs;\n    }\n    if (p.includeSystemPromptSection !== undefined) {\n      h.includeSystemPromptSection = Boolean(p.includeSystemPromptSection);\n    }\n    if (p.target !== undefined) {\n      if (p.target === null || p.target === '') delete (h as { target?: string }).target;\n      else (h as { target?: string }).target = String(p.target);\n    }\n    if (p.targetChatId !== undefined) {\n      if (p.targetChatId === null || p.targetChatId === '') delete (h as { targetChatId?: string }).targetChatId;\n      else (h as { targetChatId?: string }).targetChatId = String(p.targetChatId);\n    }\n    if (p.prompt !== undefined) {\n      if (p.prompt === null || p.prompt === '') delete (h as { prompt?: string }).prompt;\n      else (h as { prompt?: string }).prompt = String(p.prompt);\n    }\n    if (p.ackMaxChars !== undefined) {\n      if (p.ackMaxChars === null || p.ackMaxChars === '') delete (h as { ackMaxChars?: number }).ackMaxChars;\n      else if (typeof p.ackMaxChars === 'number' && Number.isFinite(p.ackMaxChars)) {\n        (h as { ackMaxChars?: number }).ackMaxChars = p.ackMaxChars;\n      }\n    }\n    if (p.isolatedSession !== undefined) {\n      if (p.isolatedSession === null || p.isolatedSession === false) {\n        delete (h as { isolatedSession?: boolean }).isolatedSession;\n      } else {\n        (h as { isolatedSession?: boolean }).isolatedSession = Boolean(p.isolatedSession);\n      }\n    }\n    if (p.activeHours !== undefined) {\n      if (p.activeHours === null) {\n        delete (h as { activeHours?: unknown }).activeHours;\n      } else if (typeof p.activeHours === 'object' && p.activeHours !== null) {\n        const ah = p.activeHours as Record<string, unknown>;\n        const start = typeof ah.start === 'string' ? ah.start : '';\n        const end = typeof ah.end === 'string' ? ah.end : '';\n        if (start && end) {\n          (h as { activeHours?: { start: string; end: string; timezone?: string } }).activeHours = {\n            start,\n            end,\n            ...(typeof ah.timezone === 'string' && ah.timezone.trim() ? { timezone: ah.timezone } : {}),\n          };\n        } else {\n          delete (h as { activeHours?: unknown }).activeHours;\n        }\n      }\n    }\n  }\n\n  if (body.gateway?.bind !== undefined) {\n    const bindModes = new Set(['auto', 'loopback', 'lan', 'tailnet', 'custom']);\n    const bind = body.gateway.bind;\n    if (typeof bind !== 'string' || !bindModes.has(bind)) {\n      return patchError('gateway.bind must be one of: auto, loopback, lan, tailnet, custom');\n    }\n    if (!config.gateway) {\n      config.gateway = {\n        bind: bind as GatewayBindMode,\n        port: 18790,\n        heartbeat: { enabled: true, intervalMs: 1_800_000, includeSystemPromptSection: false },\n        maxSseConnections: 100,\n        corsOrigins: [],\n      };\n    } else {\n      config.gateway.bind = bind as GatewayBindMode;\n    }\n    if (bind !== 'custom') {\n      delete config.gateway.customBindHost;\n    }\n  }\n\n  if (body.gateway?.customBindHost !== undefined) {\n    if (body.gateway.customBindHost === null || body.gateway.customBindHost === '') {\n      if (config.gateway) {\n        delete config.gateway.customBindHost;\n      }\n    } else if (typeof body.gateway.customBindHost !== 'string' || !isValidIPv4(body.gateway.customBindHost.trim())) {\n      return patchError('gateway.customBindHost must be a valid IPv4 address');\n    } else if (config.gateway) {\n      config.gateway.customBindHost = body.gateway.customBindHost.trim();\n      config.gateway.bind = 'custom';\n    }\n  }\n\n  if (body.gateway?.port !== undefined) {\n    if (\n      typeof body.gateway.port !== 'number' ||\n      !Number.isFinite(body.gateway.port) ||\n      body.gateway.port < 1 ||\n      body.gateway.port > 65535\n    ) {\n      return patchError('gateway.port must be an integer from 1 to 65535');\n    }\n    if (!config.gateway) {\n      config.gateway = {\n        bind: 'loopback',\n        port: Math.floor(body.gateway.port),\n        heartbeat: { enabled: true, intervalMs: 1_800_000, includeSystemPromptSection: false },\n        maxSseConnections: 100,\n        corsOrigins: [],\n      };\n    } else {\n      config.gateway.port = Math.floor(body.gateway.port);\n    }\n  }\n\n  if (body.gateway?.tailscale !== undefined && typeof body.gateway.tailscale === 'object') {\n    const ts = body.gateway.tailscale as Record<string, unknown>;\n    if (!config.gateway) {\n      config.gateway = {\n        bind: 'loopback',\n        port: 18790,\n        auth: { mode: 'token' },\n        heartbeat: { enabled: true, intervalMs: 1_800_000, includeSystemPromptSection: false },\n        maxSseConnections: 100,\n        corsOrigins: [],\n      };\n    }\n    config.gateway.tailscale = {\n      ...(config.gateway.tailscale ?? { mode: 'off', resetOnExit: true }),\n    };\n    if (ts.mode !== undefined) {\n      if (ts.mode !== 'off' && ts.mode !== 'serve' && ts.mode !== 'funnel') {\n        return patchError('gateway.tailscale.mode must be off, serve, or funnel');\n      }\n      config.gateway.tailscale.mode = ts.mode as 'off' | 'serve' | 'funnel';\n    }\n    if (ts.resetOnExit !== undefined) {\n      config.gateway.tailscale.resetOnExit = ts.resetOnExit === true;\n    }\n  }\n\n  if (body.gateway?.auth !== undefined) {\n    const gw = ensureGateway(config);\n    if (!gw.auth) gw.auth = { mode: 'token' };\n    const a = body.gateway.auth;\n    if (a.mode !== undefined) {\n      if (\n        a.mode !== 'none' &&\n        a.mode !== 'token' &&\n        a.mode !== 'password' &&\n        a.mode !== 'trusted-proxy'\n      ) {\n        return patchError('gateway.auth.mode must be none, token, password, or trusted-proxy');\n      }\n      gw.auth.mode = a.mode;\n    }\n    if (a.token !== undefined) {\n      if (a.token === null || (typeof a.token === 'string' && !a.token.trim())) {\n        delete gw.auth.token;\n      } else if (typeof a.token === 'string' && !isMaskedSecretPatchValue(a.token)) {\n        gw.auth.token = a.token;\n      }\n    }\n    if (a.password !== undefined) {\n      if (a.password === null || (typeof a.password === 'string' && !a.password.trim())) {\n        delete gw.auth.password;\n      } else if (typeof a.password === 'string' && !isMaskedSecretPatchValue(a.password)) {\n        gw.auth.password = a.password;\n      }\n    }\n    if (a.rateLimit !== undefined && typeof a.rateLimit === 'object' && a.rateLimit !== null) {\n      const rlIn = a.rateLimit as Record<string, unknown>;\n      if (!gw.auth.rateLimit) {\n        gw.auth.rateLimit = {\n          enabled: true,\n          maxAttempts: 5,\n          windowMs: 900_000,\n          blockDurationMs: 300_000,\n          burstCoalesceMs: 1000,\n          exemptLoopback: true,\n        };\n      }\n      const rl = gw.auth.rateLimit!;\n      if (rlIn.enabled !== undefined) rl.enabled = Boolean(rlIn.enabled);\n      if (typeof rlIn.maxAttempts === 'number' && Number.isFinite(rlIn.maxAttempts)) {\n        rl.maxAttempts = Math.max(1, Math.floor(rlIn.maxAttempts));\n      }\n      if (typeof rlIn.windowMs === 'number' && Number.isFinite(rlIn.windowMs) && rlIn.windowMs > 0) {\n        rl.windowMs = Math.floor(rlIn.windowMs);\n      }\n      if (\n        typeof rlIn.blockDurationMs === 'number' &&\n        Number.isFinite(rlIn.blockDurationMs) &&\n        rlIn.blockDurationMs > 0\n      ) {\n        rl.blockDurationMs = Math.floor(rlIn.blockDurationMs);\n      }\n      if (\n        typeof rlIn.lockoutMs === 'number' &&\n        Number.isFinite(rlIn.lockoutMs) &&\n        rlIn.lockoutMs > 0\n      ) {\n        rl.blockDurationMs = Math.floor(rlIn.lockoutMs);\n      }\n      if (rlIn.exemptLoopback !== undefined) {\n        rl.exemptLoopback = Boolean(rlIn.exemptLoopback);\n      }\n    }\n    if (a.trustedProxy !== undefined) {\n      if (a.trustedProxy === null) {\n        delete gw.auth.trustedProxy;\n      } else if (typeof a.trustedProxy === 'object' && a.trustedProxy !== null) {\n        const tpIn = a.trustedProxy as Record<string, unknown>;\n        const userHeader =\n          typeof tpIn.userHeader === 'string' ? tpIn.userHeader.trim() : '';\n        if (!userHeader) {\n          return patchError('gateway.auth.trustedProxy.userHeader is required');\n        }\n        const trustedProxy: NonNullable<(typeof gw.auth)['trustedProxy']> = {\n          userHeader,\n        };\n        if (tpIn.requiredHeaders !== undefined) {\n          if (!Array.isArray(tpIn.requiredHeaders)) {\n            return patchError('gateway.auth.trustedProxy.requiredHeaders must be an array');\n          }\n          trustedProxy.requiredHeaders = tpIn.requiredHeaders\n            .filter((x): x is string => typeof x === 'string' && x.trim().length > 0)\n            .map((x) => x.trim());\n        }\n        if (tpIn.allowUsers !== undefined) {\n          if (!Array.isArray(tpIn.allowUsers)) {\n            return patchError('gateway.auth.trustedProxy.allowUsers must be an array');\n          }\n          trustedProxy.allowUsers = tpIn.allowUsers\n            .filter((x): x is string => typeof x === 'string' && x.trim().length > 0)\n            .map((x) => x.trim());\n        }\n        if (tpIn.allowLoopback !== undefined) {\n          trustedProxy.allowLoopback = Boolean(tpIn.allowLoopback);\n        }\n        gw.auth.trustedProxy = trustedProxy;\n      }\n    }\n  }\n\n  if (body.gateway?.trustedProxies !== undefined) {\n    if (!Array.isArray(body.gateway.trustedProxies)) {\n      return patchError('gateway.trustedProxies must be an array');\n    }\n    const gw = ensureGateway(config);\n    gw.trustedProxies = body.gateway.trustedProxies\n      .filter((x: unknown): x is string => typeof x === 'string' && x.trim().length > 0)\n      .map((x: string) => x.trim());\n  }\n\n  if (body.gateway?.allowRealIpFallback !== undefined) {\n    const gw = ensureGateway(config);\n    gw.allowRealIpFallback = Boolean(body.gateway.allowRealIpFallback);\n  }\n\n  if (body.gateway?.dangerouslyAllowHostHeaderOriginFallback !== undefined) {\n    const gw = ensureGateway(config);\n    gw.dangerouslyAllowHostHeaderOriginFallback = Boolean(\n      body.gateway.dangerouslyAllowHostHeaderOriginFallback,\n    );\n  }\n\n  if (body.gateway?.security !== undefined) {\n    if (typeof body.gateway.security !== 'object' || body.gateway.security === null) {\n      return patchError('gateway.security must be an object');\n    }\n    const gw = ensureGateway(config);\n    const secIn = body.gateway.security as Record<string, unknown>;\n    if (!gw.security) {\n      gw.security = {};\n    }\n    if (secIn.strict !== undefined) {\n      gw.security.strict = Boolean(secIn.strict);\n    }\n  }\n\n  if (body.gateway?.share !== undefined) {\n    if (typeof body.gateway.share !== 'object' || body.gateway.share === null || Array.isArray(body.gateway.share)) {\n      return patchError('gateway.share must be an object');\n    }\n    const shareResult = mergeShareConfigPatch(config, body.gateway.share as Record<string, unknown>);\n    if (shareResult.ok === false) {\n      return patchError(shareResult.message);\n    }\n  }\n\n  if (body.gateway?.siteShare !== undefined) {\n    if (\n      typeof body.gateway.siteShare !== 'object' ||\n      body.gateway.siteShare === null ||\n      Array.isArray(body.gateway.siteShare)\n    ) {\n      return patchError('gateway.siteShare must be an object');\n    }\n    const siteShareResult = mergeSiteShareConfigPatch(config, body.gateway.siteShare as Record<string, unknown>);\n    if (siteShareResult.ok === false) {\n      return patchError(siteShareResult.message);\n    }\n  }\n\n  if (body.gateway?.publicUrl !== undefined) {\n    const gw = ensureGateway(config);\n    if (body.gateway.publicUrl === null || body.gateway.publicUrl === '') {\n      delete gw.publicUrl;\n    } else if (typeof body.gateway.publicUrl !== 'string') {\n      return patchError('gateway.publicUrl must be a string or null');\n    } else {\n      const validation = validatePublicUrl(body.gateway.publicUrl);\n      if (validation.ok === false) {\n        return patchError(`gateway.publicUrl: ${validation.message}`);\n      }\n      gw.publicUrl = validation.url;\n    }\n  }\n\n  if (body.gateway?.corsOrigins !== undefined) {\n    if (!Array.isArray(body.gateway.corsOrigins)) {\n      return patchError('gateway.corsOrigins must be an array');\n    }\n    const gw = ensureGateway(config);\n    gw.corsOrigins = body.gateway.corsOrigins\n      .filter((x: unknown): x is string => typeof x === 'string' && x.trim().length > 0)\n      .map((x: string) => x.trim());\n  }\n\n  if (body.gateway?.maxSseConnections !== undefined) {\n    if (\n      typeof body.gateway.maxSseConnections !== 'number' ||\n      !Number.isFinite(body.gateway.maxSseConnections) ||\n      body.gateway.maxSseConnections < 1\n    ) {\n      return patchError('gateway.maxSseConnections must be a positive integer');\n    }\n    if (!config.gateway) {\n      config.gateway = {\n        bind: 'loopback',\n        port: 18790,\n        heartbeat: { enabled: true, intervalMs: 1_800_000, includeSystemPromptSection: false },\n        maxSseConnections: Math.floor(body.gateway.maxSseConnections),\n        corsOrigins: [],\n      };\n    } else {\n      config.gateway.maxSseConnections = Math.floor(body.gateway.maxSseConnections);\n    }\n  }\n\n  if (body.gateway?.channelConnectDeferMode !== undefined) {\n    const mode = body.gateway.channelConnectDeferMode;\n    if (mode !== 'auto' && mode !== 'off' && mode !== 'explicit') {\n      return patchError('gateway.channelConnectDeferMode must be auto, off, or explicit');\n    }\n    const gw = ensureGateway(config);\n    gw.channelConnectDeferMode = mode;\n  }\n\n  if (body.gateway?.channelConnectDeferIds !== undefined) {\n    const ids = parseDeferIdList(body.gateway.channelConnectDeferIds);\n    if (ids === null) {\n      return patchError('gateway.channelConnectDeferIds must be an array of up to 24 strings');\n    }\n    const gw = ensureGateway(config);\n    gw.channelConnectDeferIds = ids;\n  }\n\n  if (body.gateway?.channelConnectDeferSkipIds !== undefined) {\n    const ids = parseDeferIdList(body.gateway.channelConnectDeferSkipIds);\n    if (ids === null) {\n      return patchError('gateway.channelConnectDeferSkipIds must be an array of up to 24 strings');\n    }\n    const gw = ensureGateway(config);\n    gw.channelConnectDeferSkipIds = ids;\n  }\n\n  return PATCH_OK;\n}\n"],"mappings":";;;;;;;iBAiBqE;;;;;;AAWrE,SAAS,cAAc,QAAgD;AACrE,KAAI,CAAC,OAAO,QACV,QAAO,UAAU;EACf,MAAM;EACN,MAAM;EACN,WAAW;GAAE,SAAS;GAAM,YAAY;GAAW,4BAA4B;GAAO;EACtF,mBAAmB;EACnB,aAAa,EAAE;EAChB;AAEH,QAAO,OAAO;;AAGhB,SAAS,iBAAiB,KAA+B;AACvD,KAAI,CAAC,MAAM,QAAQ,IAAI,CAAE,QAAO;CAChC,MAAM,MAAM,IACT,QAAQ,MAAmB,OAAO,MAAM,YAAY,EAAE,MAAM,CAAC,SAAS,EAAE,CACxE,KAAK,MAAM,EAAE,MAAM,CAAC;AACvB,KAAI,IAAI,SAAS,GAAI,QAAO;AAC5B,QAAO;;AAGT,SAAgB,kBAAkB,QAAgB,MAAwB;AACxE,KAAI,KAAK,SAAS,cAAc,KAAA,KAAa,OAAO,KAAK,QAAQ,cAAc,UAAU;EACvF,MAAM,KAAK,cAAc,OAAO;AAChC,MAAI,CAAC,GAAG,UACN,IAAG,YAAY;GAAE,SAAS;GAAM,YAAY;GAAW,4BAA4B;GAAO;EAE5F,MAAM,IAAI,GAAG;EACb,MAAM,IAAI,KAAK,QAAQ;AACvB,MAAI,EAAE,YAAY,KAAA,EAAW,GAAE,UAAU,QAAQ,EAAE,QAAQ;AAC3D,MAAI,EAAE,eAAe,KAAA,KAAa,OAAO,EAAE,eAAe,YAAY,OAAO,SAAS,EAAE,WAAW,CACjG,GAAE,aAAa,EAAE;AAEnB,MAAI,EAAE,+BAA+B,KAAA,EACnC,GAAE,6BAA6B,QAAQ,EAAE,2BAA2B;AAEtE,MAAI,EAAE,WAAW,KAAA,EACf,KAAI,EAAE,WAAW,QAAQ,EAAE,WAAW,GAAI,QAAQ,EAA0B;MACtE,GAA0B,SAAS,OAAO,EAAE,OAAO;AAE3D,MAAI,EAAE,iBAAiB,KAAA,EACrB,KAAI,EAAE,iBAAiB,QAAQ,EAAE,iBAAiB,GAAI,QAAQ,EAAgC;MACxF,GAAgC,eAAe,OAAO,EAAE,aAAa;AAE7E,MAAI,EAAE,WAAW,KAAA,EACf,KAAI,EAAE,WAAW,QAAQ,EAAE,WAAW,GAAI,QAAQ,EAA0B;MACtE,GAA0B,SAAS,OAAO,EAAE,OAAO;AAE3D,MAAI,EAAE,gBAAgB,KAAA;OAChB,EAAE,gBAAgB,QAAQ,EAAE,gBAAgB,GAAI,QAAQ,EAA+B;YAClF,OAAO,EAAE,gBAAgB,YAAY,OAAO,SAAS,EAAE,YAAY,CACzE,GAA+B,cAAc,EAAE;;AAGpD,MAAI,EAAE,oBAAoB,KAAA,EACxB,KAAI,EAAE,oBAAoB,QAAQ,EAAE,oBAAoB,MACtD,QAAQ,EAAoC;MAE3C,GAAoC,kBAAkB,QAAQ,EAAE,gBAAgB;AAGrF,MAAI,EAAE,gBAAgB,KAAA;OAChB,EAAE,gBAAgB,KACpB,QAAQ,EAAgC;YAC/B,OAAO,EAAE,gBAAgB,YAAY,EAAE,gBAAgB,MAAM;IACtE,MAAM,KAAK,EAAE;IACb,MAAM,QAAQ,OAAO,GAAG,UAAU,WAAW,GAAG,QAAQ;IACxD,MAAM,MAAM,OAAO,GAAG,QAAQ,WAAW,GAAG,MAAM;AAClD,QAAI,SAAS,IACV,GAA0E,cAAc;KACvF;KACA;KACA,GAAI,OAAO,GAAG,aAAa,YAAY,GAAG,SAAS,MAAM,GAAG,EAAE,UAAU,GAAG,UAAU,GAAG,EAAE;KAC3F;QAED,QAAQ,EAAgC;;;;AAMhD,KAAI,KAAK,SAAS,SAAS,KAAA,GAAW;EACpC,MAAM,YAAY,IAAI,IAAI;GAAC;GAAQ;GAAY;GAAO;GAAW;GAAS,CAAC;EAC3E,MAAM,OAAO,KAAK,QAAQ;AAC1B,MAAI,OAAO,SAAS,YAAY,CAAC,UAAU,IAAI,KAAK,CAClD,QAAO,WAAW,oEAAoE;AAExF,MAAI,CAAC,OAAO,QACV,QAAO,UAAU;GACT;GACN,MAAM;GACN,WAAW;IAAE,SAAS;IAAM,YAAY;IAAW,4BAA4B;IAAO;GACtF,mBAAmB;GACnB,aAAa,EAAE;GAChB;MAED,QAAO,QAAQ,OAAO;AAExB,MAAI,SAAS,SACX,QAAO,OAAO,QAAQ;;AAI1B,KAAI,KAAK,SAAS,mBAAmB,KAAA;MAC/B,KAAK,QAAQ,mBAAmB,QAAQ,KAAK,QAAQ,mBAAmB;OACtE,OAAO,QACT,QAAO,OAAO,QAAQ;aAEf,OAAO,KAAK,QAAQ,mBAAmB,YAAY,CAAC,YAAY,KAAK,QAAQ,eAAe,MAAM,CAAC,CAC5G,QAAO,WAAW,sDAAsD;WAC/D,OAAO,SAAS;AACzB,UAAO,QAAQ,iBAAiB,KAAK,QAAQ,eAAe,MAAM;AAClE,UAAO,QAAQ,OAAO;;;AAI1B,KAAI,KAAK,SAAS,SAAS,KAAA,GAAW;AACpC,MACE,OAAO,KAAK,QAAQ,SAAS,YAC7B,CAAC,OAAO,SAAS,KAAK,QAAQ,KAAK,IACnC,KAAK,QAAQ,OAAO,KACpB,KAAK,QAAQ,OAAO,MAEpB,QAAO,WAAW,kDAAkD;AAEtE,MAAI,CAAC,OAAO,QACV,QAAO,UAAU;GACf,MAAM;GACN,MAAM,KAAK,MAAM,KAAK,QAAQ,KAAK;GACnC,WAAW;IAAE,SAAS;IAAM,YAAY;IAAW,4BAA4B;IAAO;GACtF,mBAAmB;GACnB,aAAa,EAAE;GAChB;MAED,QAAO,QAAQ,OAAO,KAAK,MAAM,KAAK,QAAQ,KAAK;;AAIvD,KAAI,KAAK,SAAS,cAAc,KAAA,KAAa,OAAO,KAAK,QAAQ,cAAc,UAAU;EACvF,MAAM,KAAK,KAAK,QAAQ;AACxB,MAAI,CAAC,OAAO,QACV,QAAO,UAAU;GACf,MAAM;GACN,MAAM;GACN,MAAM,EAAE,MAAM,SAAS;GACvB,WAAW;IAAE,SAAS;IAAM,YAAY;IAAW,4BAA4B;IAAO;GACtF,mBAAmB;GACnB,aAAa,EAAE;GAChB;AAEH,SAAO,QAAQ,YAAY,EACzB,GAAI,OAAO,QAAQ,aAAa;GAAE,MAAM;GAAO,aAAa;GAAM,EACnE;AACD,MAAI,GAAG,SAAS,KAAA,GAAW;AACzB,OAAI,GAAG,SAAS,SAAS,GAAG,SAAS,WAAW,GAAG,SAAS,SAC1D,QAAO,WAAW,uDAAuD;AAE3E,UAAO,QAAQ,UAAU,OAAO,GAAG;;AAErC,MAAI,GAAG,gBAAgB,KAAA,EACrB,QAAO,QAAQ,UAAU,cAAc,GAAG,gBAAgB;;AAI9D,KAAI,KAAK,SAAS,SAAS,KAAA,GAAW;EACpC,MAAM,KAAK,cAAc,OAAO;AAChC,MAAI,CAAC,GAAG,KAAM,IAAG,OAAO,EAAE,MAAM,SAAS;EACzC,MAAM,IAAI,KAAK,QAAQ;AACvB,MAAI,EAAE,SAAS,KAAA,GAAW;AACxB,OACE,EAAE,SAAS,UACX,EAAE,SAAS,WACX,EAAE,SAAS,cACX,EAAE,SAAS,gBAEX,QAAO,WAAW,oEAAoE;AAExF,MAAG,KAAK,OAAO,EAAE;;AAEnB,MAAI,EAAE,UAAU,KAAA;OACV,EAAE,UAAU,QAAS,OAAO,EAAE,UAAU,YAAY,CAAC,EAAE,MAAM,MAAM,CACrE,QAAO,GAAG,KAAK;YACN,OAAO,EAAE,UAAU,YAAY,CAAC,yBAAyB,EAAE,MAAM,CAC1E,IAAG,KAAK,QAAQ,EAAE;;AAGtB,MAAI,EAAE,aAAa,KAAA;OACb,EAAE,aAAa,QAAS,OAAO,EAAE,aAAa,YAAY,CAAC,EAAE,SAAS,MAAM,CAC9E,QAAO,GAAG,KAAK;YACN,OAAO,EAAE,aAAa,YAAY,CAAC,yBAAyB,EAAE,SAAS,CAChF,IAAG,KAAK,WAAW,EAAE;;AAGzB,MAAI,EAAE,cAAc,KAAA,KAAa,OAAO,EAAE,cAAc,YAAY,EAAE,cAAc,MAAM;GACxF,MAAM,OAAO,EAAE;AACf,OAAI,CAAC,GAAG,KAAK,UACX,IAAG,KAAK,YAAY;IAClB,SAAS;IACT,aAAa;IACb,UAAU;IACV,iBAAiB;IACjB,iBAAiB;IACjB,gBAAgB;IACjB;GAEH,MAAM,KAAK,GAAG,KAAK;AACnB,OAAI,KAAK,YAAY,KAAA,EAAW,IAAG,UAAU,QAAQ,KAAK,QAAQ;AAClE,OAAI,OAAO,KAAK,gBAAgB,YAAY,OAAO,SAAS,KAAK,YAAY,CAC3E,IAAG,cAAc,KAAK,IAAI,GAAG,KAAK,MAAM,KAAK,YAAY,CAAC;AAE5D,OAAI,OAAO,KAAK,aAAa,YAAY,OAAO,SAAS,KAAK,SAAS,IAAI,KAAK,WAAW,EACzF,IAAG,WAAW,KAAK,MAAM,KAAK,SAAS;AAEzC,OACE,OAAO,KAAK,oBAAoB,YAChC,OAAO,SAAS,KAAK,gBAAgB,IACrC,KAAK,kBAAkB,EAEvB,IAAG,kBAAkB,KAAK,MAAM,KAAK,gBAAgB;AAEvD,OACE,OAAO,KAAK,cAAc,YAC1B,OAAO,SAAS,KAAK,UAAU,IAC/B,KAAK,YAAY,EAEjB,IAAG,kBAAkB,KAAK,MAAM,KAAK,UAAU;AAEjD,OAAI,KAAK,mBAAmB,KAAA,EAC1B,IAAG,iBAAiB,QAAQ,KAAK,eAAe;;AAGpD,MAAI,EAAE,iBAAiB,KAAA;OACjB,EAAE,iBAAiB,KACrB,QAAO,GAAG,KAAK;YACN,OAAO,EAAE,iBAAiB,YAAY,EAAE,iBAAiB,MAAM;IACxE,MAAM,OAAO,EAAE;IACf,MAAM,aACJ,OAAO,KAAK,eAAe,WAAW,KAAK,WAAW,MAAM,GAAG;AACjE,QAAI,CAAC,WACH,QAAO,WAAW,mDAAmD;IAEvE,MAAM,eAA8D,EAClE,YACD;AACD,QAAI,KAAK,oBAAoB,KAAA,GAAW;AACtC,SAAI,CAAC,MAAM,QAAQ,KAAK,gBAAgB,CACtC,QAAO,WAAW,6DAA6D;AAEjF,kBAAa,kBAAkB,KAAK,gBACjC,QAAQ,MAAmB,OAAO,MAAM,YAAY,EAAE,MAAM,CAAC,SAAS,EAAE,CACxE,KAAK,MAAM,EAAE,MAAM,CAAC;;AAEzB,QAAI,KAAK,eAAe,KAAA,GAAW;AACjC,SAAI,CAAC,MAAM,QAAQ,KAAK,WAAW,CACjC,QAAO,WAAW,wDAAwD;AAE5E,kBAAa,aAAa,KAAK,WAC5B,QAAQ,MAAmB,OAAO,MAAM,YAAY,EAAE,MAAM,CAAC,SAAS,EAAE,CACxE,KAAK,MAAM,EAAE,MAAM,CAAC;;AAEzB,QAAI,KAAK,kBAAkB,KAAA,EACzB,cAAa,gBAAgB,QAAQ,KAAK,cAAc;AAE1D,OAAG,KAAK,eAAe;;;;AAK7B,KAAI,KAAK,SAAS,mBAAmB,KAAA,GAAW;AAC9C,MAAI,CAAC,MAAM,QAAQ,KAAK,QAAQ,eAAe,CAC7C,QAAO,WAAW,0CAA0C;EAE9D,MAAM,KAAK,cAAc,OAAO;AAChC,KAAG,iBAAiB,KAAK,QAAQ,eAC9B,QAAQ,MAA4B,OAAO,MAAM,YAAY,EAAE,MAAM,CAAC,SAAS,EAAE,CACjF,KAAK,MAAc,EAAE,MAAM,CAAC;;AAGjC,KAAI,KAAK,SAAS,wBAAwB,KAAA,GAAW;EACnD,MAAM,KAAK,cAAc,OAAO;AAChC,KAAG,sBAAsB,QAAQ,KAAK,QAAQ,oBAAoB;;AAGpE,KAAI,KAAK,SAAS,6CAA6C,KAAA,GAAW;EACxE,MAAM,KAAK,cAAc,OAAO;AAChC,KAAG,2CAA2C,QAC5C,KAAK,QAAQ,yCACd;;AAGH,KAAI,KAAK,SAAS,aAAa,KAAA,GAAW;AACxC,MAAI,OAAO,KAAK,QAAQ,aAAa,YAAY,KAAK,QAAQ,aAAa,KACzE,QAAO,WAAW,qCAAqC;EAEzD,MAAM,KAAK,cAAc,OAAO;EAChC,MAAM,QAAQ,KAAK,QAAQ;AAC3B,MAAI,CAAC,GAAG,SACN,IAAG,WAAW,EAAE;AAElB,MAAI,MAAM,WAAW,KAAA,EACnB,IAAG,SAAS,SAAS,QAAQ,MAAM,OAAO;;AAI9C,KAAI,KAAK,SAAS,UAAU,KAAA,GAAW;AACrC,MAAI,OAAO,KAAK,QAAQ,UAAU,YAAY,KAAK,QAAQ,UAAU,QAAQ,MAAM,QAAQ,KAAK,QAAQ,MAAM,CAC5G,QAAO,WAAW,kCAAkC;EAEtD,MAAM,cAAc,sBAAsB,QAAQ,KAAK,QAAQ,MAAiC;AAChG,MAAI,YAAY,OAAO,MACrB,QAAO,WAAW,YAAY,QAAQ;;AAI1C,KAAI,KAAK,SAAS,cAAc,KAAA,GAAW;AACzC,MACE,OAAO,KAAK,QAAQ,cAAc,YAClC,KAAK,QAAQ,cAAc,QAC3B,MAAM,QAAQ,KAAK,QAAQ,UAAU,CAErC,QAAO,WAAW,sCAAsC;EAE1D,MAAM,kBAAkB,0BAA0B,QAAQ,KAAK,QAAQ,UAAqC;AAC5G,MAAI,gBAAgB,OAAO,MACzB,QAAO,WAAW,gBAAgB,QAAQ;;AAI9C,KAAI,KAAK,SAAS,cAAc,KAAA,GAAW;EACzC,MAAM,KAAK,cAAc,OAAO;AAChC,MAAI,KAAK,QAAQ,cAAc,QAAQ,KAAK,QAAQ,cAAc,GAChE,QAAO,GAAG;WACD,OAAO,KAAK,QAAQ,cAAc,SAC3C,QAAO,WAAW,6CAA6C;OAC1D;GACL,MAAM,aAAa,kBAAkB,KAAK,QAAQ,UAAU;AAC5D,OAAI,WAAW,OAAO,MACpB,QAAO,WAAW,sBAAsB,WAAW,UAAU;AAE/D,MAAG,YAAY,WAAW;;;AAI9B,KAAI,KAAK,SAAS,gBAAgB,KAAA,GAAW;AAC3C,MAAI,CAAC,MAAM,QAAQ,KAAK,QAAQ,YAAY,CAC1C,QAAO,WAAW,uCAAuC;EAE3D,MAAM,KAAK,cAAc,OAAO;AAChC,KAAG,cAAc,KAAK,QAAQ,YAC3B,QAAQ,MAA4B,OAAO,MAAM,YAAY,EAAE,MAAM,CAAC,SAAS,EAAE,CACjF,KAAK,MAAc,EAAE,MAAM,CAAC;;AAGjC,KAAI,KAAK,SAAS,sBAAsB,KAAA,GAAW;AACjD,MACE,OAAO,KAAK,QAAQ,sBAAsB,YAC1C,CAAC,OAAO,SAAS,KAAK,QAAQ,kBAAkB,IAChD,KAAK,QAAQ,oBAAoB,EAEjC,QAAO,WAAW,uDAAuD;AAE3E,MAAI,CAAC,OAAO,QACV,QAAO,UAAU;GACf,MAAM;GACN,MAAM;GACN,WAAW;IAAE,SAAS;IAAM,YAAY;IAAW,4BAA4B;IAAO;GACtF,mBAAmB,KAAK,MAAM,KAAK,QAAQ,kBAAkB;GAC7D,aAAa,EAAE;GAChB;MAED,QAAO,QAAQ,oBAAoB,KAAK,MAAM,KAAK,QAAQ,kBAAkB;;AAIjF,KAAI,KAAK,SAAS,4BAA4B,KAAA,GAAW;EACvD,MAAM,OAAO,KAAK,QAAQ;AAC1B,MAAI,SAAS,UAAU,SAAS,SAAS,SAAS,WAChD,QAAO,WAAW,iEAAiE;EAErF,MAAM,KAAK,cAAc,OAAO;AAChC,KAAG,0BAA0B;;AAG/B,KAAI,KAAK,SAAS,2BAA2B,KAAA,GAAW;EACtD,MAAM,MAAM,iBAAiB,KAAK,QAAQ,uBAAuB;AACjE,MAAI,QAAQ,KACV,QAAO,WAAW,sEAAsE;EAE1F,MAAM,KAAK,cAAc,OAAO;AAChC,KAAG,yBAAyB;;AAG9B,KAAI,KAAK,SAAS,+BAA+B,KAAA,GAAW;EAC1D,MAAM,MAAM,iBAAiB,KAAK,QAAQ,2BAA2B;AACrE,MAAI,QAAQ,KACV,QAAO,WAAW,0EAA0E;EAE9F,MAAM,KAAK,cAAc,OAAO;AAChC,KAAG,6BAA6B;;AAGlC,QAAO"}

package/dist/src/gateway/hono/routes/config-patch/misc.js

@@ -1,5 +1,5 @@
-import { CredentialResolver, init_credentials } from "../../../../auth/credentials.js";
 import { BindingsConfigSchema, McpConfigSchema, init_schema } from "../../../../config/schema.js";
+import { CredentialResolver, init_credentials } from "../../../../auth/credentials.js";
 import { canonicalizeConfiguredMcpServer } from "../../../../config/mcp-config-normalize.js";
 import { mergeCronConfigPatch, mergeGatewaySkillsMarketplacePatch, mergeGoalsConfigPatch, mergeSessionConfigPatch, mergeUpdateConfigPatch } from "../../../../config/web-patch.js";
 import { assertGatewayAuthConfigured, resolveGatewayAuth } from "../../../auth.js";

package/dist/src/gateway/hono/routes/deps.d.ts

@@ -4,5 +4,6 @@ import type { SSEHandlerConfig } from '../sse.js';
 export interface AuthenticatedRouteDeps {
     service: GatewayService;
     strictRateLimitMiddleware: MiddlewareHandler;
+    channelRateLimitMiddleware?: MiddlewareHandler;
     sseConfig: SSEHandlerConfig;
 }

package/dist/src/gateway/hono/routes/dreaming.js

@@ -5,8 +5,8 @@ import { parseDreamingLastRunFile } from "../../../agent/memory/dreaming/last-ru
 import { readDreamingEvents } from "../../../agent/memory/dreaming/events.js";
 import { getWorkspacePath } from "../../../config/workspace-path-helpers.js";
 import { previewDreamingDeepPromotion } from "../../../agent/memory/dreaming/preview.js";
-import fs from "node:fs/promises";
 import path from "node:path";
+import fs from "node:fs/promises";
 //#region src/gateway/hono/routes/dreaming.ts
 function isRecord(v) {
 	return v !== null && typeof v === "object" && !Array.isArray(v);

package/dist/src/gateway/hono/routes/goals.js

@@ -413,14 +413,27 @@ function registerGoalsRoutes(authenticated, deps) {
 		}, 404);
 		let sessionKey = typeof body.sessionKey === "string" && body.sessionKey.trim() ? body.sessionKey.trim() : goal.activeSessionKey;
 		if (!sessionKey) {
+			const agentId = goal.agentId || getDefaultAgentId(cfg());
+			const peerId = `goal-${sanitizeSegment(goal.id) || Date.now()}`;
 			sessionKey = buildSessionKey({
-				agentId: goal.agentId || getDefaultAgentId(cfg()),
+				agentId,
 				source: "webchat",
 				accountId: "default",
 				peerKind: "direct",
-				peerId: `goal-${sanitizeSegment(goal.id) || Date.now()}`
+				peerId
 			});
-			await deps.service.sessionIndexInstance.saveMessages(sessionKey, []);
+			await deps.service.sessionIndexInstance.saveMessages(sessionKey, [], { metadata: {
+				sourceChannel: "webchat",
+				sourceChatId: `default:direct:${peerId}`,
+				sessionType: "chat",
+				routing: {
+					agentId,
+					source: "webchat",
+					accountId: "default",
+					peerKind: "direct",
+					peerId
+				}
+			} });
 			goals.attachSession(goalId, sessionKey);
 		}
 		const queued = deps.service.enqueueGoalRun(goalId, {