@xopcai/xopc 0.0.114 → 0.0.115

package/dist/src/gateway/hono/routes/channels.js

@@ -1,4 +1,4 @@
-import { buildChannelCatalogForConfig, buildChannelCatalogFromSnapshot, init_channel_catalog_service, isChannelConfigured } from "../../../channels/catalog/channel-catalog-service.js";
+import { buildChannelCatalogForConfig, buildChannelCatalogFromSnapshot, getChannelSetupStatus, init_channel_catalog_service } from "../../../channels/catalog/channel-catalog-service.js";
 import { approveChannelPairing, approveChannelPairingBySender, dismissChannelPairingPending, listChannelPairingState, listChannelPairingSummary, revokeChannelPairingPaired } from "../../../channels/pairing/pairing-service.js";
 //#region src/gateway/hono/routes/channels.ts
 init_channel_catalog_service();
@@ -16,20 +16,24 @@ function localeFromRequest(c) {
 }
 function registerChannelRoutes(authenticated, deps) {
 	const { service, strictRateLimitMiddleware } = deps;
+	const channelRateLimitMiddleware = deps.channelRateLimitMiddleware ?? strictRateLimitMiddleware;
 	authenticated.get("/api/channels/catalog", (c) => {
 		const snapshot = service.getExtensionLoader()?.getManifestSnapshot();
 		const locale = localeFromRequest(c);
 		const catalog = snapshot ? buildChannelCatalogFromSnapshot(snapshot, { locale }) : buildChannelCatalogForConfig(service.currentConfig, { locale });
-		const channelsCfg = service.currentConfig.channels;
 		const running = new Set(service.getRunningChannelIds());
 		return c.json({
 			ok: true,
-			payload: { channels: catalog.entries.map((entry) => ({
-				...entry,
-				enabled: channelsCfg?.[entry.id]?.enabled === true,
-				configured: isChannelConfigured(service.currentConfig, entry.id),
-				runtime: running.has(entry.id) ? "loaded" : "missing"
-			})) }
+			payload: { channels: catalog.entries.map((entry) => {
+				const setupStatus = getChannelSetupStatus(service.currentConfig, entry.id, entry);
+				return {
+					...entry,
+					enabled: setupStatus.enabled,
+					configured: setupStatus.ready,
+					setupStatus,
+					runtime: running.has(entry.id) ? "loaded" : "missing"
+				};
+			}) }
 		});
 	});
 	authenticated.get("/api/channels/status", (c) => {
@@ -61,7 +65,7 @@ function registerChannelRoutes(authenticated, deps) {
 			payload: { config: value }
 		});
 	});
-	authenticated.post("/api/channels/:channelId/actions/:actionId", strictRateLimitMiddleware, async (c) => {
+	authenticated.post("/api/channels/:channelId/actions/:actionId", channelRateLimitMiddleware, async (c) => {
 		const channel = channelIdParam(c.req.param("channelId"));
 		const action = c.req.param("actionId")?.trim() ?? "";
 		if (!channel || !action) return c.json({
@@ -162,7 +166,7 @@ function registerChannelRoutes(authenticated, deps) {
 			payload: { summary }
 		});
 	});
-	authenticated.post("/api/channels/:channelId/pairing/approve", strictRateLimitMiddleware, async (c) => {
+	authenticated.post("/api/channels/:channelId/pairing/approve", channelRateLimitMiddleware, async (c) => {
 		const channel = channelIdParam(c.req.param("channelId"));
 		const body = await c.req.json().catch(() => ({}));
 		const result = approveChannelPairing({
@@ -185,7 +189,7 @@ function registerChannelRoutes(authenticated, deps) {
 			}
 		});
 	});
-	authenticated.post("/api/channels/:channelId/pairing/approve-sender", strictRateLimitMiddleware, async (c) => {
+	authenticated.post("/api/channels/:channelId/pairing/approve-sender", channelRateLimitMiddleware, async (c) => {
 		const channel = channelIdParam(c.req.param("channelId"));
 		const body = await c.req.json().catch(() => ({}));
 		const result = approveChannelPairingBySender({
@@ -208,7 +212,7 @@ function registerChannelRoutes(authenticated, deps) {
 			}
 		});
 	});
-	authenticated.delete("/api/channels/:channelId/pairing/paired", strictRateLimitMiddleware, async (c) => {
+	authenticated.delete("/api/channels/:channelId/pairing/paired", channelRateLimitMiddleware, async (c) => {
 		const channel = channelIdParam(c.req.param("channelId"));
 		const body = await c.req.json().catch(() => ({}));
 		const result = revokeChannelPairingPaired({
@@ -228,7 +232,7 @@ function registerChannelRoutes(authenticated, deps) {
 			payload: { changed: result.changed }
 		});
 	});
-	authenticated.delete("/api/channels/:channelId/pairing/pending", strictRateLimitMiddleware, async (c) => {
+	authenticated.delete("/api/channels/:channelId/pairing/pending", channelRateLimitMiddleware, async (c) => {
 		const channel = channelIdParam(c.req.param("channelId"));
 		const body = await c.req.json().catch(() => ({}));
 		const result = dismissChannelPairingPending({
@@ -261,7 +265,7 @@ function registerChannelRoutes(authenticated, deps) {
 			payload: { checks }
 		});
 	});
-	authenticated.post("/api/channels/:channelId/restart", strictRateLimitMiddleware, async (c) => {
+	authenticated.post("/api/channels/:channelId/restart", channelRateLimitMiddleware, async (c) => {
 		const channel = channelIdParam(c.req.param("channelId"));
 		await service.restartChannel(channel);
 		return c.json({

package/dist/src/gateway/hono/routes/channels.js.map

@@ -1 +1 @@
-{"version":3,"file":"channels.js","names":[],"sources":["../../../../../src/gateway/hono/routes/channels.ts"],"sourcesContent":["import type { Hono } from 'hono';\n\nimport {\n  approveChannelPairing,\n  approveChannelPairingBySender,\n  dismissChannelPairingPending,\n  listChannelPairingState,\n  listChannelPairingSummary,\n  revokeChannelPairingPaired,\n} from '../../../channels/pairing/pairing-service.js';\nimport {\n  buildChannelCatalogForConfig,\n  buildChannelCatalogFromSnapshot,\n  isChannelConfigured,\n} from '../../../channels/catalog/channel-catalog-service.js';\nimport type { Config } from '../../../config/index.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\nimport type { ChannelRuntimeActionPayload } from '../../../channels/plugins/types.adapters.js';\n\nfunction channelIdParam(raw: string | undefined): string {\n  return (raw ?? '').trim().toLowerCase();\n}\n\nfunction accountIdFromQuery(raw: string | undefined): string {\n  return raw?.trim() || 'default';\n}\n\nfunction actionPayloadChangedConfig(payload: ChannelRuntimeActionPayload | undefined): boolean {\n  return Boolean(payload && 'configChanged' in payload && payload.configChanged === true);\n}\n\nfunction localeFromRequest(c: { req: { query(name: string): string | undefined; header(name: string): string | undefined } }): string | undefined {\n  return c.req.query('locale') ?? c.req.header('X-XOPC-Locale') ?? c.req.header('Accept-Language')?.split(',')[0];\n}\n\nexport function registerChannelRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  const { service, strictRateLimitMiddleware } = deps;\n\n  authenticated.get('/api/channels/catalog', (c) => {\n    const snapshot = service.getExtensionLoader()?.getManifestSnapshot();\n    const locale = localeFromRequest(c);\n    const catalog = snapshot\n      ? buildChannelCatalogFromSnapshot(snapshot, { locale })\n      : buildChannelCatalogForConfig(service.currentConfig, { locale });\n    const channelsCfg = service.currentConfig.channels as Record<string, { enabled?: boolean } | undefined> | undefined;\n    const running = new Set(service.getRunningChannelIds());\n    return c.json({\n      ok: true,\n      payload: {\n        channels: catalog.entries.map((entry) => ({\n          ...entry,\n          enabled: channelsCfg?.[entry.id]?.enabled === true,\n          configured: isChannelConfigured(service.currentConfig, entry.id),\n          runtime: running.has(entry.id) ? 'loaded' : 'missing',\n        })),\n      },\n    });\n  });\n\n  authenticated.get('/api/channels/status', (c) => {\n    const channels = service.getChannelsStatus();\n    return c.json({ ok: true, payload: { channels } });\n  });\n\n  authenticated.get('/api/channels/meta', (c) => {\n    const channels = service.getChannelsHubMeta();\n    return c.json({ ok: true, payload: { channels } });\n  });\n\n  authenticated.get('/api/channels/:channelId/config', (c) => {\n    const channel = channelIdParam(c.req.param('channelId'));\n    if (!channel) {\n      return c.json({ ok: false, error: { code: 'BAD_REQUEST', message: 'Missing channel id' } }, 400);\n    }\n    const plugin = service.getChannelRuntimePlugin(channel);\n    const value =\n      plugin?.configSurface?.buildConfigSurface(service.currentConfig) ??\n      (service.currentConfig.channels as Record<string, unknown> | undefined)?.[channel] ??\n      {};\n    return c.json({ ok: true, payload: { config: value } });\n  });\n\n  authenticated.post('/api/channels/:channelId/actions/:actionId', strictRateLimitMiddleware, async (c) => {\n    const channel = channelIdParam(c.req.param('channelId'));\n    const action = c.req.param('actionId')?.trim() ?? '';\n    if (!channel || !action) {\n      return c.json({ ok: false, error: { code: 'BAD_REQUEST', message: 'Missing channel/action id' } }, 400);\n    }\n    const plugin = await service.ensureChannelRuntimePlugin(channel);\n    if (!plugin) {\n      return c.json({ ok: false, error: { code: 'CHANNEL_RUNTIME_MISSING', message: 'Channel runtime is not loaded' } }, 404);\n    }\n    const body = await c.req.json().catch(() => ({}));\n    const accountId =\n      body && typeof body === 'object' && typeof (body as { accountId?: unknown }).accountId === 'string'\n        ? (body as { accountId: string }).accountId.trim()\n        : undefined;\n    const input = body && typeof body === 'object' ? (body as { input?: unknown }).input : undefined;\n\n    if (action === 'doctor.run' && plugin.doctor) {\n      const checks = await plugin.doctor.check({ cfg: service.currentConfig, locale: localeFromRequest(c) });\n      return c.json({ ok: true, payload: { type: 'diagnostics', checks } });\n    }\n\n    if (plugin.runtimeActions) {\n      const result = await plugin.runtimeActions.runAction({\n        cfg: service.currentConfig,\n        locale: localeFromRequest(c),\n        actionId: action,\n        accountId,\n        input,\n      });\n      if (!result.ok) {\n        return c.json({ ok: false, error: { code: 'CHANNEL_ACTION_FAILED', message: result.message ?? 'Channel action failed' } }, 400);\n      }\n      if (result.nextConfig) {\n        const saved = await service.saveConfig(result.nextConfig);\n        if (!saved.saved) {\n          return c.json({ ok: false, error: { code: 'CHANNEL_ACTION_FAILED', message: saved.error ?? 'Failed to save channel config' } }, 500);\n        }\n      } else if (actionPayloadChangedConfig(result.payload)) {\n        await service.reloadConfig();\n      }\n      return c.json({ ok: true, payload: result.payload ?? {} });\n    }\n\n    return c.json(\n      {\n        ok: false,\n        error: {\n          code: 'ACTION_NOT_IMPLEMENTED',\n          message: `Channel action \"${channel}.${action}\" is not implemented by the runtime adapter.`,\n        },\n      },\n      501,\n    );\n  });\n\n  authenticated.get('/api/channels/:channelId/pairing', (c) => {\n    const channel = channelIdParam(c.req.param('channelId'));\n    if (!channel) {\n      return c.json({ ok: false, error: { code: 'BAD_REQUEST', message: 'Missing channel id' } }, 400);\n    }\n    const accountId = accountIdFromQuery(c.req.query('account'));\n    const config = service.currentConfig as Config | undefined;\n    const state = listChannelPairingState({ channel, accountId, config });\n    return c.json({ ok: true, payload: state });\n  });\n\n  authenticated.get('/api/channels/pairing/summary', (c) => {\n    const config = service.currentConfig as Config | undefined;\n    const summary = listChannelPairingSummary(config);\n    return c.json({ ok: true, payload: { summary } });\n  });\n\n  authenticated.post('/api/channels/:channelId/pairing/approve', strictRateLimitMiddleware, async (c) => {\n    const channel = channelIdParam(c.req.param('channelId'));\n    const body = await c.req.json().catch(() => ({}));\n    const accountId =\n      body && typeof body === 'object' && typeof (body as { accountId?: unknown }).accountId === 'string'\n        ? (body as { accountId: string }).accountId.trim()\n        : 'default';\n    const code =\n      body && typeof body === 'object' && typeof (body as { code?: unknown }).code === 'string'\n        ? (body as { code: string }).code.trim()\n        : '';\n    const result = approveChannelPairing({ channel, accountId, code });\n    if (result.ok === false) {\n      return c.json({ ok: false, error: { code: 'PAIRING_INVALID', message: result.error } }, 400);\n    }\n    return c.json({ ok: true, payload: { senderId: result.senderId, alreadyPaired: result.alreadyPaired } });\n  });\n\n  authenticated.post('/api/channels/:channelId/pairing/approve-sender', strictRateLimitMiddleware, async (c) => {\n    const channel = channelIdParam(c.req.param('channelId'));\n    const body = await c.req.json().catch(() => ({}));\n    const accountId =\n      body && typeof body === 'object' && typeof (body as { accountId?: unknown }).accountId === 'string'\n        ? (body as { accountId: string }).accountId.trim()\n        : 'default';\n    const senderId =\n      body && typeof body === 'object' && typeof (body as { senderId?: unknown }).senderId === 'string'\n        ? (body as { senderId: string }).senderId.trim()\n        : '';\n    const result = approveChannelPairingBySender({ channel, accountId, senderId });\n    if (result.ok === false) {\n      return c.json({ ok: false, error: { code: 'PAIRING_INVALID', message: result.error } }, 400);\n    }\n    return c.json({ ok: true, payload: { senderId: result.senderId, alreadyPaired: result.alreadyPaired } });\n  });\n\n  authenticated.delete('/api/channels/:channelId/pairing/paired', strictRateLimitMiddleware, async (c) => {\n    const channel = channelIdParam(c.req.param('channelId'));\n    const body = await c.req.json().catch(() => ({}));\n    const accountId =\n      body && typeof body === 'object' && typeof (body as { accountId?: unknown }).accountId === 'string'\n        ? (body as { accountId: string }).accountId.trim()\n        : 'default';\n    const senderId =\n      body && typeof body === 'object' && typeof (body as { senderId?: unknown }).senderId === 'string'\n        ? (body as { senderId: string }).senderId.trim()\n        : '';\n    const result = revokeChannelPairingPaired({ channel, accountId, senderId });\n    if (result.ok === false) {\n      return c.json({ ok: false, error: { code: 'BAD_REQUEST', message: result.error } }, 400);\n    }\n    return c.json({ ok: true, payload: { changed: result.changed } });\n  });\n\n  authenticated.delete('/api/channels/:channelId/pairing/pending', strictRateLimitMiddleware, async (c) => {\n    const channel = channelIdParam(c.req.param('channelId'));\n    const body = await c.req.json().catch(() => ({}));\n    const accountId =\n      body && typeof body === 'object' && typeof (body as { accountId?: unknown }).accountId === 'string'\n        ? (body as { accountId: string }).accountId.trim()\n        : 'default';\n    const senderId =\n      body && typeof body === 'object' && typeof (body as { senderId?: unknown }).senderId === 'string'\n        ? (body as { senderId: string }).senderId.trim()\n        : '';\n    const result = dismissChannelPairingPending({ channel, accountId, senderId });\n    if (result.ok === false) {\n      return c.json({ ok: false, error: { code: 'PAIRING_INVALID', message: result.error } }, 400);\n    }\n    return c.json({ ok: true, payload: { senderId: result.senderId } });\n  });\n\n  authenticated.get('/api/channels/:channelId/doctor', async (c) => {\n    const channel = channelIdParam(c.req.param('channelId'));\n    const plugin = service.getChannelRuntimePlugin(channel);\n    if (!plugin?.doctor) {\n      return c.json({ ok: true, payload: { checks: [] } });\n    }\n    const checks = await plugin.doctor.check({ cfg: service.currentConfig });\n    return c.json({ ok: true, payload: { checks } });\n  });\n\n  authenticated.post('/api/channels/:channelId/restart', strictRateLimitMiddleware, async (c) => {\n    const channel = channelIdParam(c.req.param('channelId'));\n    await service.restartChannel(channel);\n    return c.json({ ok: true, payload: { restarted: true } });\n  });\n}\n"],"mappings":";;;8BAc8D;AAK9D,SAAS,eAAe,KAAiC;AACvD,SAAQ,OAAO,IAAI,MAAM,CAAC,aAAa;;AAGzC,SAAS,mBAAmB,KAAiC;AAC3D,QAAO,KAAK,MAAM,IAAI;;AAGxB,SAAS,2BAA2B,SAA2D;AAC7F,QAAO,QAAQ,WAAW,mBAAmB,WAAW,QAAQ,kBAAkB,KAAK;;AAGzF,SAAS,kBAAkB,GAAuH;AAChJ,QAAO,EAAE,IAAI,MAAM,SAAS,IAAI,EAAE,IAAI,OAAO,gBAAgB,IAAI,EAAE,IAAI,OAAO,kBAAkB,EAAE,MAAM,IAAI,CAAC;;AAG/G,SAAgB,sBAAsB,eAAqB,MAAoC;CAC7F,MAAM,EAAE,SAAS,8BAA8B;AAE/C,eAAc,IAAI,0BAA0B,MAAM;EAChD,MAAM,WAAW,QAAQ,oBAAoB,EAAE,qBAAqB;EACpE,MAAM,SAAS,kBAAkB,EAAE;EACnC,MAAM,UAAU,WACZ,gCAAgC,UAAU,EAAE,QAAQ,CAAC,GACrD,6BAA6B,QAAQ,eAAe,EAAE,QAAQ,CAAC;EACnE,MAAM,cAAc,QAAQ,cAAc;EAC1C,MAAM,UAAU,IAAI,IAAI,QAAQ,sBAAsB,CAAC;AACvD,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS,EACP,UAAU,QAAQ,QAAQ,KAAK,WAAW;IACxC,GAAG;IACH,SAAS,cAAc,MAAM,KAAK,YAAY;IAC9C,YAAY,oBAAoB,QAAQ,eAAe,MAAM,GAAG;IAChE,SAAS,QAAQ,IAAI,MAAM,GAAG,GAAG,WAAW;IAC7C,EAAE,EACJ;GACF,CAAC;GACF;AAEF,eAAc,IAAI,yBAAyB,MAAM;EAC/C,MAAM,WAAW,QAAQ,mBAAmB;AAC5C,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,UAAU;GAAE,CAAC;GAClD;AAEF,eAAc,IAAI,uBAAuB,MAAM;EAC7C,MAAM,WAAW,QAAQ,oBAAoB;AAC7C,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,UAAU;GAAE,CAAC;GAClD;AAEF,eAAc,IAAI,oCAAoC,MAAM;EAC1D,MAAM,UAAU,eAAe,EAAE,IAAI,MAAM,YAAY,CAAC;AACxD,MAAI,CAAC,QACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;IAAE,MAAM;IAAe,SAAS;IAAsB;GAAE,EAAE,IAAI;EAGlG,MAAM,QADS,QAAQ,wBAAwB,QAEvC,EAAE,eAAe,mBAAmB,QAAQ,cAAc,IAC/D,QAAQ,cAAc,WAAmD,YAC1E,EAAE;AACJ,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,QAAQ,OAAO;GAAE,CAAC;GACvD;AAEF,eAAc,KAAK,8CAA8C,2BAA2B,OAAO,MAAM;EACvG,MAAM,UAAU,eAAe,EAAE,IAAI,MAAM,YAAY,CAAC;EACxD,MAAM,SAAS,EAAE,IAAI,MAAM,WAAW,EAAE,MAAM,IAAI;AAClD,MAAI,CAAC,WAAW,CAAC,OACf,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;IAAE,MAAM;IAAe,SAAS;IAA6B;GAAE,EAAE,IAAI;EAEzG,MAAM,SAAS,MAAM,QAAQ,2BAA2B,QAAQ;AAChE,MAAI,CAAC,OACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;IAAE,MAAM;IAA2B,SAAS;IAAiC;GAAE,EAAE,IAAI;EAEzH,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,YACJ,QAAQ,OAAO,SAAS,YAAY,OAAQ,KAAiC,cAAc,WACtF,KAA+B,UAAU,MAAM,GAChD,KAAA;EACN,MAAM,QAAQ,QAAQ,OAAO,SAAS,WAAY,KAA6B,QAAQ,KAAA;AAEvF,MAAI,WAAW,gBAAgB,OAAO,QAAQ;GAC5C,MAAM,SAAS,MAAM,OAAO,OAAO,MAAM;IAAE,KAAK,QAAQ;IAAe,QAAQ,kBAAkB,EAAE;IAAE,CAAC;AACtG,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS;KAAE,MAAM;KAAe;KAAQ;IAAE,CAAC;;AAGvE,MAAI,OAAO,gBAAgB;GACzB,MAAM,SAAS,MAAM,OAAO,eAAe,UAAU;IACnD,KAAK,QAAQ;IACb,QAAQ,kBAAkB,EAAE;IAC5B,UAAU;IACV;IACA;IACD,CAAC;AACF,OAAI,CAAC,OAAO,GACV,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;KAAE,MAAM;KAAyB,SAAS,OAAO,WAAW;KAAyB;IAAE,EAAE,IAAI;AAEjI,OAAI,OAAO,YAAY;IACrB,MAAM,QAAQ,MAAM,QAAQ,WAAW,OAAO,WAAW;AACzD,QAAI,CAAC,MAAM,MACT,QAAO,EAAE,KAAK;KAAE,IAAI;KAAO,OAAO;MAAE,MAAM;MAAyB,SAAS,MAAM,SAAS;MAAiC;KAAE,EAAE,IAAI;cAE7H,2BAA2B,OAAO,QAAQ,CACnD,OAAM,QAAQ,cAAc;AAE9B,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,OAAO,WAAW,EAAE;IAAE,CAAC;;AAG5D,SAAO,EAAE,KACP;GACE,IAAI;GACJ,OAAO;IACL,MAAM;IACN,SAAS,mBAAmB,QAAQ,GAAG,OAAO;IAC/C;GACF,EACD,IACD;GACD;AAEF,eAAc,IAAI,qCAAqC,MAAM;EAC3D,MAAM,UAAU,eAAe,EAAE,IAAI,MAAM,YAAY,CAAC;AACxD,MAAI,CAAC,QACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;IAAE,MAAM;IAAe,SAAS;IAAsB;GAAE,EAAE,IAAI;EAElG,MAAM,YAAY,mBAAmB,EAAE,IAAI,MAAM,UAAU,CAAC;EAC5D,MAAM,SAAS,QAAQ;EACvB,MAAM,QAAQ,wBAAwB;GAAE;GAAS;GAAW;GAAQ,CAAC;AACrE,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;GAAO,CAAC;GAC3C;AAEF,eAAc,IAAI,kCAAkC,MAAM;EACxD,MAAM,SAAS,QAAQ;EACvB,MAAM,UAAU,0BAA0B,OAAO;AACjD,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,SAAS;GAAE,CAAC;GACjD;AAEF,eAAc,KAAK,4CAA4C,2BAA2B,OAAO,MAAM;EACrG,MAAM,UAAU,eAAe,EAAE,IAAI,MAAM,YAAY,CAAC;EACxD,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EASjD,MAAM,SAAS,sBAAsB;GAAE;GAAS,WAP9C,QAAQ,OAAO,SAAS,YAAY,OAAQ,KAAiC,cAAc,WACtF,KAA+B,UAAU,MAAM,GAChD;GAKqD,MAHzD,QAAQ,OAAO,SAAS,YAAY,OAAQ,KAA4B,SAAS,WAC5E,KAA0B,KAAK,MAAM,GACtC;GAC2D,CAAC;AAClE,MAAI,OAAO,OAAO,MAChB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;IAAE,MAAM;IAAmB,SAAS,OAAO;IAAO;GAAE,EAAE,IAAI;AAE9F,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;IAAE,UAAU,OAAO;IAAU,eAAe,OAAO;IAAe;GAAE,CAAC;GACxG;AAEF,eAAc,KAAK,mDAAmD,2BAA2B,OAAO,MAAM;EAC5G,MAAM,UAAU,eAAe,EAAE,IAAI,MAAM,YAAY,CAAC;EACxD,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EASjD,MAAM,SAAS,8BAA8B;GAAE;GAAS,WAPtD,QAAQ,OAAO,SAAS,YAAY,OAAQ,KAAiC,cAAc,WACtF,KAA+B,UAAU,MAAM,GAChD;GAK6D,UAHjE,QAAQ,OAAO,SAAS,YAAY,OAAQ,KAAgC,aAAa,WACpF,KAA8B,SAAS,MAAM,GAC9C;GACuE,CAAC;AAC9E,MAAI,OAAO,OAAO,MAChB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;IAAE,MAAM;IAAmB,SAAS,OAAO;IAAO;GAAE,EAAE,IAAI;AAE9F,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;IAAE,UAAU,OAAO;IAAU,eAAe,OAAO;IAAe;GAAE,CAAC;GACxG;AAEF,eAAc,OAAO,2CAA2C,2BAA2B,OAAO,MAAM;EACtG,MAAM,UAAU,eAAe,EAAE,IAAI,MAAM,YAAY,CAAC;EACxD,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EASjD,MAAM,SAAS,2BAA2B;GAAE;GAAS,WAPnD,QAAQ,OAAO,SAAS,YAAY,OAAQ,KAAiC,cAAc,WACtF,KAA+B,UAAU,MAAM,GAChD;GAK0D,UAH9D,QAAQ,OAAO,SAAS,YAAY,OAAQ,KAAgC,aAAa,WACpF,KAA8B,SAAS,MAAM,GAC9C;GACoE,CAAC;AAC3E,MAAI,OAAO,OAAO,MAChB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;IAAE,MAAM;IAAe,SAAS,OAAO;IAAO;GAAE,EAAE,IAAI;AAE1F,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,SAAS,OAAO,SAAS;GAAE,CAAC;GACjE;AAEF,eAAc,OAAO,4CAA4C,2BAA2B,OAAO,MAAM;EACvG,MAAM,UAAU,eAAe,EAAE,IAAI,MAAM,YAAY,CAAC;EACxD,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EASjD,MAAM,SAAS,6BAA6B;GAAE;GAAS,WAPrD,QAAQ,OAAO,SAAS,YAAY,OAAQ,KAAiC,cAAc,WACtF,KAA+B,UAAU,MAAM,GAChD;GAK4D,UAHhE,QAAQ,OAAO,SAAS,YAAY,OAAQ,KAAgC,aAAa,WACpF,KAA8B,SAAS,MAAM,GAC9C;GACsE,CAAC;AAC7E,MAAI,OAAO,OAAO,MAChB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;IAAE,MAAM;IAAmB,SAAS,OAAO;IAAO;GAAE,EAAE,IAAI;AAE9F,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,UAAU,OAAO,UAAU;GAAE,CAAC;GACnE;AAEF,eAAc,IAAI,mCAAmC,OAAO,MAAM;EAChE,MAAM,UAAU,eAAe,EAAE,IAAI,MAAM,YAAY,CAAC;EACxD,MAAM,SAAS,QAAQ,wBAAwB,QAAQ;AACvD,MAAI,CAAC,QAAQ,OACX,QAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,QAAQ,EAAE,EAAE;GAAE,CAAC;EAEtD,MAAM,SAAS,MAAM,OAAO,OAAO,MAAM,EAAE,KAAK,QAAQ,eAAe,CAAC;AACxE,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,QAAQ;GAAE,CAAC;GAChD;AAEF,eAAc,KAAK,oCAAoC,2BAA2B,OAAO,MAAM;EAC7F,MAAM,UAAU,eAAe,EAAE,IAAI,MAAM,YAAY,CAAC;AACxD,QAAM,QAAQ,eAAe,QAAQ;AACrC,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,WAAW,MAAM;GAAE,CAAC;GACzD"}
+{"version":3,"file":"channels.js","names":[],"sources":["../../../../../src/gateway/hono/routes/channels.ts"],"sourcesContent":["import type { Hono } from 'hono';\n\nimport {\n  approveChannelPairing,\n  approveChannelPairingBySender,\n  dismissChannelPairingPending,\n  listChannelPairingState,\n  listChannelPairingSummary,\n  revokeChannelPairingPaired,\n} from '../../../channels/pairing/pairing-service.js';\nimport {\n  buildChannelCatalogForConfig,\n  buildChannelCatalogFromSnapshot,\n  getChannelSetupStatus,\n} from '../../../channels/catalog/channel-catalog-service.js';\nimport type { Config } from '../../../config/index.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\nimport type { ChannelRuntimeActionPayload } from '../../../channels/plugins/types.adapters.js';\n\nfunction channelIdParam(raw: string | undefined): string {\n  return (raw ?? '').trim().toLowerCase();\n}\n\nfunction accountIdFromQuery(raw: string | undefined): string {\n  return raw?.trim() || 'default';\n}\n\nfunction actionPayloadChangedConfig(payload: ChannelRuntimeActionPayload | undefined): boolean {\n  return Boolean(payload && 'configChanged' in payload && payload.configChanged === true);\n}\n\nfunction localeFromRequest(c: { req: { query(name: string): string | undefined; header(name: string): string | undefined } }): string | undefined {\n  return c.req.query('locale') ?? c.req.header('X-XOPC-Locale') ?? c.req.header('Accept-Language')?.split(',')[0];\n}\n\nexport function registerChannelRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  const { service, strictRateLimitMiddleware } = deps;\n  const channelRateLimitMiddleware = deps.channelRateLimitMiddleware ?? strictRateLimitMiddleware;\n\n  authenticated.get('/api/channels/catalog', (c) => {\n    const snapshot = service.getExtensionLoader()?.getManifestSnapshot();\n    const locale = localeFromRequest(c);\n    const catalog = snapshot\n      ? buildChannelCatalogFromSnapshot(snapshot, { locale })\n      : buildChannelCatalogForConfig(service.currentConfig, { locale });\n    const running = new Set(service.getRunningChannelIds());\n    return c.json({\n      ok: true,\n      payload: {\n        channels: catalog.entries.map((entry) => {\n          const setupStatus = getChannelSetupStatus(service.currentConfig, entry.id, entry);\n          return {\n            ...entry,\n            enabled: setupStatus.enabled,\n            configured: setupStatus.ready,\n            setupStatus,\n            runtime: running.has(entry.id) ? 'loaded' : 'missing',\n          };\n        }),\n      },\n    });\n  });\n\n  authenticated.get('/api/channels/status', (c) => {\n    const channels = service.getChannelsStatus();\n    return c.json({ ok: true, payload: { channels } });\n  });\n\n  authenticated.get('/api/channels/meta', (c) => {\n    const channels = service.getChannelsHubMeta();\n    return c.json({ ok: true, payload: { channels } });\n  });\n\n  authenticated.get('/api/channels/:channelId/config', (c) => {\n    const channel = channelIdParam(c.req.param('channelId'));\n    if (!channel) {\n      return c.json({ ok: false, error: { code: 'BAD_REQUEST', message: 'Missing channel id' } }, 400);\n    }\n    const plugin = service.getChannelRuntimePlugin(channel);\n    const value =\n      plugin?.configSurface?.buildConfigSurface(service.currentConfig) ??\n      (service.currentConfig.channels as Record<string, unknown> | undefined)?.[channel] ??\n      {};\n    return c.json({ ok: true, payload: { config: value } });\n  });\n\n  authenticated.post('/api/channels/:channelId/actions/:actionId', channelRateLimitMiddleware, async (c) => {\n    const channel = channelIdParam(c.req.param('channelId'));\n    const action = c.req.param('actionId')?.trim() ?? '';\n    if (!channel || !action) {\n      return c.json({ ok: false, error: { code: 'BAD_REQUEST', message: 'Missing channel/action id' } }, 400);\n    }\n    const plugin = await service.ensureChannelRuntimePlugin(channel);\n    if (!plugin) {\n      return c.json({ ok: false, error: { code: 'CHANNEL_RUNTIME_MISSING', message: 'Channel runtime is not loaded' } }, 404);\n    }\n    const body = await c.req.json().catch(() => ({}));\n    const accountId =\n      body && typeof body === 'object' && typeof (body as { accountId?: unknown }).accountId === 'string'\n        ? (body as { accountId: string }).accountId.trim()\n        : undefined;\n    const input = body && typeof body === 'object' ? (body as { input?: unknown }).input : undefined;\n\n    if (action === 'doctor.run' && plugin.doctor) {\n      const checks = await plugin.doctor.check({ cfg: service.currentConfig, locale: localeFromRequest(c) });\n      return c.json({ ok: true, payload: { type: 'diagnostics', checks } });\n    }\n\n    if (plugin.runtimeActions) {\n      const result = await plugin.runtimeActions.runAction({\n        cfg: service.currentConfig,\n        locale: localeFromRequest(c),\n        actionId: action,\n        accountId,\n        input,\n      });\n      if (!result.ok) {\n        return c.json({ ok: false, error: { code: 'CHANNEL_ACTION_FAILED', message: result.message ?? 'Channel action failed' } }, 400);\n      }\n      if (result.nextConfig) {\n        const saved = await service.saveConfig(result.nextConfig);\n        if (!saved.saved) {\n          return c.json({ ok: false, error: { code: 'CHANNEL_ACTION_FAILED', message: saved.error ?? 'Failed to save channel config' } }, 500);\n        }\n      } else if (actionPayloadChangedConfig(result.payload)) {\n        await service.reloadConfig();\n      }\n      return c.json({ ok: true, payload: result.payload ?? {} });\n    }\n\n    return c.json(\n      {\n        ok: false,\n        error: {\n          code: 'ACTION_NOT_IMPLEMENTED',\n          message: `Channel action \"${channel}.${action}\" is not implemented by the runtime adapter.`,\n        },\n      },\n      501,\n    );\n  });\n\n  authenticated.get('/api/channels/:channelId/pairing', (c) => {\n    const channel = channelIdParam(c.req.param('channelId'));\n    if (!channel) {\n      return c.json({ ok: false, error: { code: 'BAD_REQUEST', message: 'Missing channel id' } }, 400);\n    }\n    const accountId = accountIdFromQuery(c.req.query('account'));\n    const config = service.currentConfig as Config | undefined;\n    const state = listChannelPairingState({ channel, accountId, config });\n    return c.json({ ok: true, payload: state });\n  });\n\n  authenticated.get('/api/channels/pairing/summary', (c) => {\n    const config = service.currentConfig as Config | undefined;\n    const summary = listChannelPairingSummary(config);\n    return c.json({ ok: true, payload: { summary } });\n  });\n\n  authenticated.post('/api/channels/:channelId/pairing/approve', channelRateLimitMiddleware, async (c) => {\n    const channel = channelIdParam(c.req.param('channelId'));\n    const body = await c.req.json().catch(() => ({}));\n    const accountId =\n      body && typeof body === 'object' && typeof (body as { accountId?: unknown }).accountId === 'string'\n        ? (body as { accountId: string }).accountId.trim()\n        : 'default';\n    const code =\n      body && typeof body === 'object' && typeof (body as { code?: unknown }).code === 'string'\n        ? (body as { code: string }).code.trim()\n        : '';\n    const result = approveChannelPairing({ channel, accountId, code });\n    if (result.ok === false) {\n      return c.json({ ok: false, error: { code: 'PAIRING_INVALID', message: result.error } }, 400);\n    }\n    return c.json({ ok: true, payload: { senderId: result.senderId, alreadyPaired: result.alreadyPaired } });\n  });\n\n  authenticated.post('/api/channels/:channelId/pairing/approve-sender', channelRateLimitMiddleware, async (c) => {\n    const channel = channelIdParam(c.req.param('channelId'));\n    const body = await c.req.json().catch(() => ({}));\n    const accountId =\n      body && typeof body === 'object' && typeof (body as { accountId?: unknown }).accountId === 'string'\n        ? (body as { accountId: string }).accountId.trim()\n        : 'default';\n    const senderId =\n      body && typeof body === 'object' && typeof (body as { senderId?: unknown }).senderId === 'string'\n        ? (body as { senderId: string }).senderId.trim()\n        : '';\n    const result = approveChannelPairingBySender({ channel, accountId, senderId });\n    if (result.ok === false) {\n      return c.json({ ok: false, error: { code: 'PAIRING_INVALID', message: result.error } }, 400);\n    }\n    return c.json({ ok: true, payload: { senderId: result.senderId, alreadyPaired: result.alreadyPaired } });\n  });\n\n  authenticated.delete('/api/channels/:channelId/pairing/paired', channelRateLimitMiddleware, async (c) => {\n    const channel = channelIdParam(c.req.param('channelId'));\n    const body = await c.req.json().catch(() => ({}));\n    const accountId =\n      body && typeof body === 'object' && typeof (body as { accountId?: unknown }).accountId === 'string'\n        ? (body as { accountId: string }).accountId.trim()\n        : 'default';\n    const senderId =\n      body && typeof body === 'object' && typeof (body as { senderId?: unknown }).senderId === 'string'\n        ? (body as { senderId: string }).senderId.trim()\n        : '';\n    const result = revokeChannelPairingPaired({ channel, accountId, senderId });\n    if (result.ok === false) {\n      return c.json({ ok: false, error: { code: 'BAD_REQUEST', message: result.error } }, 400);\n    }\n    return c.json({ ok: true, payload: { changed: result.changed } });\n  });\n\n  authenticated.delete('/api/channels/:channelId/pairing/pending', channelRateLimitMiddleware, async (c) => {\n    const channel = channelIdParam(c.req.param('channelId'));\n    const body = await c.req.json().catch(() => ({}));\n    const accountId =\n      body && typeof body === 'object' && typeof (body as { accountId?: unknown }).accountId === 'string'\n        ? (body as { accountId: string }).accountId.trim()\n        : 'default';\n    const senderId =\n      body && typeof body === 'object' && typeof (body as { senderId?: unknown }).senderId === 'string'\n        ? (body as { senderId: string }).senderId.trim()\n        : '';\n    const result = dismissChannelPairingPending({ channel, accountId, senderId });\n    if (result.ok === false) {\n      return c.json({ ok: false, error: { code: 'PAIRING_INVALID', message: result.error } }, 400);\n    }\n    return c.json({ ok: true, payload: { senderId: result.senderId } });\n  });\n\n  authenticated.get('/api/channels/:channelId/doctor', async (c) => {\n    const channel = channelIdParam(c.req.param('channelId'));\n    const plugin = service.getChannelRuntimePlugin(channel);\n    if (!plugin?.doctor) {\n      return c.json({ ok: true, payload: { checks: [] } });\n    }\n    const checks = await plugin.doctor.check({ cfg: service.currentConfig });\n    return c.json({ ok: true, payload: { checks } });\n  });\n\n  authenticated.post('/api/channels/:channelId/restart', channelRateLimitMiddleware, async (c) => {\n    const channel = channelIdParam(c.req.param('channelId'));\n    await service.restartChannel(channel);\n    return c.json({ ok: true, payload: { restarted: true } });\n  });\n}\n"],"mappings":";;;8BAc8D;AAK9D,SAAS,eAAe,KAAiC;AACvD,SAAQ,OAAO,IAAI,MAAM,CAAC,aAAa;;AAGzC,SAAS,mBAAmB,KAAiC;AAC3D,QAAO,KAAK,MAAM,IAAI;;AAGxB,SAAS,2BAA2B,SAA2D;AAC7F,QAAO,QAAQ,WAAW,mBAAmB,WAAW,QAAQ,kBAAkB,KAAK;;AAGzF,SAAS,kBAAkB,GAAuH;AAChJ,QAAO,EAAE,IAAI,MAAM,SAAS,IAAI,EAAE,IAAI,OAAO,gBAAgB,IAAI,EAAE,IAAI,OAAO,kBAAkB,EAAE,MAAM,IAAI,CAAC;;AAG/G,SAAgB,sBAAsB,eAAqB,MAAoC;CAC7F,MAAM,EAAE,SAAS,8BAA8B;CAC/C,MAAM,6BAA6B,KAAK,8BAA8B;AAEtE,eAAc,IAAI,0BAA0B,MAAM;EAChD,MAAM,WAAW,QAAQ,oBAAoB,EAAE,qBAAqB;EACpE,MAAM,SAAS,kBAAkB,EAAE;EACnC,MAAM,UAAU,WACZ,gCAAgC,UAAU,EAAE,QAAQ,CAAC,GACrD,6BAA6B,QAAQ,eAAe,EAAE,QAAQ,CAAC;EACnE,MAAM,UAAU,IAAI,IAAI,QAAQ,sBAAsB,CAAC;AACvD,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS,EACP,UAAU,QAAQ,QAAQ,KAAK,UAAU;IACvC,MAAM,cAAc,sBAAsB,QAAQ,eAAe,MAAM,IAAI,MAAM;AACjF,WAAO;KACL,GAAG;KACH,SAAS,YAAY;KACrB,YAAY,YAAY;KACxB;KACA,SAAS,QAAQ,IAAI,MAAM,GAAG,GAAG,WAAW;KAC7C;KACD,EACH;GACF,CAAC;GACF;AAEF,eAAc,IAAI,yBAAyB,MAAM;EAC/C,MAAM,WAAW,QAAQ,mBAAmB;AAC5C,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,UAAU;GAAE,CAAC;GAClD;AAEF,eAAc,IAAI,uBAAuB,MAAM;EAC7C,MAAM,WAAW,QAAQ,oBAAoB;AAC7C,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,UAAU;GAAE,CAAC;GAClD;AAEF,eAAc,IAAI,oCAAoC,MAAM;EAC1D,MAAM,UAAU,eAAe,EAAE,IAAI,MAAM,YAAY,CAAC;AACxD,MAAI,CAAC,QACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;IAAE,MAAM;IAAe,SAAS;IAAsB;GAAE,EAAE,IAAI;EAGlG,MAAM,QADS,QAAQ,wBAAwB,QAEvC,EAAE,eAAe,mBAAmB,QAAQ,cAAc,IAC/D,QAAQ,cAAc,WAAmD,YAC1E,EAAE;AACJ,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,QAAQ,OAAO;GAAE,CAAC;GACvD;AAEF,eAAc,KAAK,8CAA8C,4BAA4B,OAAO,MAAM;EACxG,MAAM,UAAU,eAAe,EAAE,IAAI,MAAM,YAAY,CAAC;EACxD,MAAM,SAAS,EAAE,IAAI,MAAM,WAAW,EAAE,MAAM,IAAI;AAClD,MAAI,CAAC,WAAW,CAAC,OACf,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;IAAE,MAAM;IAAe,SAAS;IAA6B;GAAE,EAAE,IAAI;EAEzG,MAAM,SAAS,MAAM,QAAQ,2BAA2B,QAAQ;AAChE,MAAI,CAAC,OACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;IAAE,MAAM;IAA2B,SAAS;IAAiC;GAAE,EAAE,IAAI;EAEzH,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,YACJ,QAAQ,OAAO,SAAS,YAAY,OAAQ,KAAiC,cAAc,WACtF,KAA+B,UAAU,MAAM,GAChD,KAAA;EACN,MAAM,QAAQ,QAAQ,OAAO,SAAS,WAAY,KAA6B,QAAQ,KAAA;AAEvF,MAAI,WAAW,gBAAgB,OAAO,QAAQ;GAC5C,MAAM,SAAS,MAAM,OAAO,OAAO,MAAM;IAAE,KAAK,QAAQ;IAAe,QAAQ,kBAAkB,EAAE;IAAE,CAAC;AACtG,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS;KAAE,MAAM;KAAe;KAAQ;IAAE,CAAC;;AAGvE,MAAI,OAAO,gBAAgB;GACzB,MAAM,SAAS,MAAM,OAAO,eAAe,UAAU;IACnD,KAAK,QAAQ;IACb,QAAQ,kBAAkB,EAAE;IAC5B,UAAU;IACV;IACA;IACD,CAAC;AACF,OAAI,CAAC,OAAO,GACV,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;KAAE,MAAM;KAAyB,SAAS,OAAO,WAAW;KAAyB;IAAE,EAAE,IAAI;AAEjI,OAAI,OAAO,YAAY;IACrB,MAAM,QAAQ,MAAM,QAAQ,WAAW,OAAO,WAAW;AACzD,QAAI,CAAC,MAAM,MACT,QAAO,EAAE,KAAK;KAAE,IAAI;KAAO,OAAO;MAAE,MAAM;MAAyB,SAAS,MAAM,SAAS;MAAiC;KAAE,EAAE,IAAI;cAE7H,2BAA2B,OAAO,QAAQ,CACnD,OAAM,QAAQ,cAAc;AAE9B,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,OAAO,WAAW,EAAE;IAAE,CAAC;;AAG5D,SAAO,EAAE,KACP;GACE,IAAI;GACJ,OAAO;IACL,MAAM;IACN,SAAS,mBAAmB,QAAQ,GAAG,OAAO;IAC/C;GACF,EACD,IACD;GACD;AAEF,eAAc,IAAI,qCAAqC,MAAM;EAC3D,MAAM,UAAU,eAAe,EAAE,IAAI,MAAM,YAAY,CAAC;AACxD,MAAI,CAAC,QACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;IAAE,MAAM;IAAe,SAAS;IAAsB;GAAE,EAAE,IAAI;EAElG,MAAM,YAAY,mBAAmB,EAAE,IAAI,MAAM,UAAU,CAAC;EAC5D,MAAM,SAAS,QAAQ;EACvB,MAAM,QAAQ,wBAAwB;GAAE;GAAS;GAAW;GAAQ,CAAC;AACrE,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;GAAO,CAAC;GAC3C;AAEF,eAAc,IAAI,kCAAkC,MAAM;EACxD,MAAM,SAAS,QAAQ;EACvB,MAAM,UAAU,0BAA0B,OAAO;AACjD,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,SAAS;GAAE,CAAC;GACjD;AAEF,eAAc,KAAK,4CAA4C,4BAA4B,OAAO,MAAM;EACtG,MAAM,UAAU,eAAe,EAAE,IAAI,MAAM,YAAY,CAAC;EACxD,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EASjD,MAAM,SAAS,sBAAsB;GAAE;GAAS,WAP9C,QAAQ,OAAO,SAAS,YAAY,OAAQ,KAAiC,cAAc,WACtF,KAA+B,UAAU,MAAM,GAChD;GAKqD,MAHzD,QAAQ,OAAO,SAAS,YAAY,OAAQ,KAA4B,SAAS,WAC5E,KAA0B,KAAK,MAAM,GACtC;GAC2D,CAAC;AAClE,MAAI,OAAO,OAAO,MAChB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;IAAE,MAAM;IAAmB,SAAS,OAAO;IAAO;GAAE,EAAE,IAAI;AAE9F,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;IAAE,UAAU,OAAO;IAAU,eAAe,OAAO;IAAe;GAAE,CAAC;GACxG;AAEF,eAAc,KAAK,mDAAmD,4BAA4B,OAAO,MAAM;EAC7G,MAAM,UAAU,eAAe,EAAE,IAAI,MAAM,YAAY,CAAC;EACxD,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EASjD,MAAM,SAAS,8BAA8B;GAAE;GAAS,WAPtD,QAAQ,OAAO,SAAS,YAAY,OAAQ,KAAiC,cAAc,WACtF,KAA+B,UAAU,MAAM,GAChD;GAK6D,UAHjE,QAAQ,OAAO,SAAS,YAAY,OAAQ,KAAgC,aAAa,WACpF,KAA8B,SAAS,MAAM,GAC9C;GACuE,CAAC;AAC9E,MAAI,OAAO,OAAO,MAChB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;IAAE,MAAM;IAAmB,SAAS,OAAO;IAAO;GAAE,EAAE,IAAI;AAE9F,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;IAAE,UAAU,OAAO;IAAU,eAAe,OAAO;IAAe;GAAE,CAAC;GACxG;AAEF,eAAc,OAAO,2CAA2C,4BAA4B,OAAO,MAAM;EACvG,MAAM,UAAU,eAAe,EAAE,IAAI,MAAM,YAAY,CAAC;EACxD,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EASjD,MAAM,SAAS,2BAA2B;GAAE;GAAS,WAPnD,QAAQ,OAAO,SAAS,YAAY,OAAQ,KAAiC,cAAc,WACtF,KAA+B,UAAU,MAAM,GAChD;GAK0D,UAH9D,QAAQ,OAAO,SAAS,YAAY,OAAQ,KAAgC,aAAa,WACpF,KAA8B,SAAS,MAAM,GAC9C;GACoE,CAAC;AAC3E,MAAI,OAAO,OAAO,MAChB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;IAAE,MAAM;IAAe,SAAS,OAAO;IAAO;GAAE,EAAE,IAAI;AAE1F,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,SAAS,OAAO,SAAS;GAAE,CAAC;GACjE;AAEF,eAAc,OAAO,4CAA4C,4BAA4B,OAAO,MAAM;EACxG,MAAM,UAAU,eAAe,EAAE,IAAI,MAAM,YAAY,CAAC;EACxD,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EASjD,MAAM,SAAS,6BAA6B;GAAE;GAAS,WAPrD,QAAQ,OAAO,SAAS,YAAY,OAAQ,KAAiC,cAAc,WACtF,KAA+B,UAAU,MAAM,GAChD;GAK4D,UAHhE,QAAQ,OAAO,SAAS,YAAY,OAAQ,KAAgC,aAAa,WACpF,KAA8B,SAAS,MAAM,GAC9C;GACsE,CAAC;AAC7E,MAAI,OAAO,OAAO,MAChB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;IAAE,MAAM;IAAmB,SAAS,OAAO;IAAO;GAAE,EAAE,IAAI;AAE9F,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,UAAU,OAAO,UAAU;GAAE,CAAC;GACnE;AAEF,eAAc,IAAI,mCAAmC,OAAO,MAAM;EAChE,MAAM,UAAU,eAAe,EAAE,IAAI,MAAM,YAAY,CAAC;EACxD,MAAM,SAAS,QAAQ,wBAAwB,QAAQ;AACvD,MAAI,CAAC,QAAQ,OACX,QAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,QAAQ,EAAE,EAAE;GAAE,CAAC;EAEtD,MAAM,SAAS,MAAM,OAAO,OAAO,MAAM,EAAE,KAAK,QAAQ,eAAe,CAAC;AACxE,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,QAAQ;GAAE,CAAC;GAChD;AAEF,eAAc,KAAK,oCAAoC,4BAA4B,OAAO,MAAM;EAC9F,MAAM,UAAU,eAAe,EAAE,IAAI,MAAM,YAAY,CAAC;AACxD,QAAM,QAAQ,eAAe,QAAQ;AACrC,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,WAAW,MAAM;GAAE,CAAC;GACzD"}

package/dist/src/gateway/hono/routes/config-patch/misc.js

@@ -1,5 +1,5 @@
-import { CredentialResolver, init_credentials } from "../../../../auth/credentials.js";
 import { BindingsConfigSchema, McpConfigSchema, init_schema } from "../../../../config/schema.js";
+import { CredentialResolver, init_credentials } from "../../../../auth/credentials.js";
 import { canonicalizeConfiguredMcpServer } from "../../../../config/mcp-config-normalize.js";
 import { mergeCronConfigPatch, mergeGatewaySkillsMarketplacePatch, mergeGoalsConfigPatch, mergeSessionConfigPatch, mergeUpdateConfigPatch } from "../../../../config/web-patch.js";
 import { assertGatewayAuthConfigured, resolveGatewayAuth } from "../../../auth.js";

package/dist/src/gateway/hono/routes/deps.d.ts

@@ -4,5 +4,6 @@ import type { SSEHandlerConfig } from '../sse.js';
 export interface AuthenticatedRouteDeps {
     service: GatewayService;
     strictRateLimitMiddleware: MiddlewareHandler;
+    channelRateLimitMiddleware?: MiddlewareHandler;
     sseConfig: SSEHandlerConfig;
 }

package/dist/src/gateway/hono/routes/dreaming.js

@@ -5,8 +5,8 @@ import { parseDreamingLastRunFile } from "../../../agent/memory/dreaming/last-ru
 import { readDreamingEvents } from "../../../agent/memory/dreaming/events.js";
 import { getWorkspacePath } from "../../../config/workspace-path-helpers.js";
 import { previewDreamingDeepPromotion } from "../../../agent/memory/dreaming/preview.js";
-import fs from "node:fs/promises";
 import path from "node:path";
+import fs from "node:fs/promises";
 //#region src/gateway/hono/routes/dreaming.ts
 function isRecord(v) {
 	return v !== null && typeof v === "object" && !Array.isArray(v);

package/dist/src/gateway/hono/routes/host-fs.js

@@ -1,7 +1,7 @@
 import { createGatewayRouteLogger } from "../lib/route-logger.js";
-import { readdir, realpath, stat } from "node:fs/promises";
-import * as path$1 from "node:path";
 import * as os$1 from "node:os";
+import * as path$1 from "node:path";
+import { readdir, realpath, stat } from "node:fs/promises";
 //#region src/gateway/hono/routes/host-fs.ts
 const log = createGatewayRouteLogger("HostFs");
 function jsonError(status, message) {

package/dist/src/gateway/hono/routes/models.js

@@ -1,5 +1,5 @@
-import { init_resolve_config_value, testApiKeyResolution } from "../../../config/resolve-config-value.js";
 import { resolveModelsJsonPath } from "../../../config/paths.js";
+import { init_resolve_config_value, testApiKeyResolution } from "../../../config/resolve-config-value.js";
 import { init_models_json, loadModelsJson, saveModelsJson, validateModelsConfig } from "../../../config/models-json.js";
 import { getModelRegistry } from "../../../providers/model-registry.js";
 import { CredentialResolver, init_credentials } from "../../../auth/credentials.js";

package/dist/src/gateway/hono/routes/shares.js

@@ -13,8 +13,8 @@ import { getClientIpFromHeaders } from "../../security/loopback.js";
 import { renderFolderLandingPage, renderShareExpiredPage, renderShareLandingPage } from "../../../share/share-landing.js";
 import { consumeSharePublicLimit } from "../../../share/share-rate-limit.js";
 import { createZipStream, planDirectoryFiles } from "../../../share/share-zip.js";
-import { createHash } from "node:crypto";
 import { createReadStream } from "node:fs";
+import { createHash } from "node:crypto";
 import { stat } from "node:fs/promises";
 import { Readable } from "node:stream";
 //#region src/gateway/hono/routes/shares.ts

package/dist/src/gateway/hono/routes/workflows.js

@@ -7,8 +7,8 @@ import "../../../workflows/domain/index.js";
 import { resolveWorkflowRunArtifactsDir } from "../../../workflows/store/paths.js";
 import { WorkflowDraftService } from "../../../workflows/draft/workflow-draft-service.js";
 import "../../../workflows/draft/index.js";
-import { readFile, stat } from "node:fs/promises";
 import { basename, join } from "node:path";
+import { readFile, stat } from "node:fs/promises";
 //#region src/gateway/hono/routes/workflows.ts
 init_agent_scope();
 function registerWorkflowRoutes(authenticated, deps) {

package/dist/src/gateway/hono/routes/workspace.js

@@ -8,10 +8,10 @@ import { resolveHeartbeatMdPath } from "../../workspace-heartbeat-path.js";
 import { createGatewayRouteLogger } from "../lib/route-logger.js";
 import { runRipgrepInDirectory } from "../../workspace-ripgrep.js";
 import { fuzzySearchWorkspaceFiles } from "../../workspace-file-search.js";
-import { randomUUID } from "node:crypto";
+import { basename, dirname, join, resolve } from "node:path";
 import { constants } from "node:fs";
+import { randomUUID } from "node:crypto";
 import { copyFile, link, mkdir, readFile, readdir, rename, stat, unlink, writeFile } from "node:fs/promises";
-import { basename, dirname, join, resolve } from "node:path";
 //#region src/gateway/hono/routes/workspace.ts
 init_agent_scope();
 const log = createGatewayRouteLogger("Workspace");

package/dist/src/gateway/lock.js

@@ -1,8 +1,8 @@
-import { createHash } from "node:crypto";
-import fs from "node:fs";
-import fs$1 from "node:fs/promises";
 import path from "node:path";
 import net from "node:net";
+import fs from "node:fs";
+import { createHash } from "node:crypto";
+import fs$1 from "node:fs/promises";
 import { homedir } from "os";
 //#region src/gateway/lock.ts
 /**

package/dist/src/gateway/ports.js

@@ -1,7 +1,7 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
-import fs from "node:fs";
 import net from "node:net";
+import fs from "node:fs";
 import { execFileSync } from "node:child_process";
 //#region src/gateway/ports.ts
 /**

package/dist/src/gateway/rate-limit/buckets.d.ts

@@ -35,6 +35,7 @@ declare class BucketRegistry {
     private authFailureLimiter?;
     private authFailureSignature?;
     private strictApiLimiter?;
+    private channelApiLimiter?;
     private tunnelMutateLimiter?;
     private pairingExchangeLimiter?;
     private sharePublicShortLimiter?;
@@ -47,6 +48,8 @@ declare class BucketRegistry {
     authFailure(cfg: ResolvedAuthRateLimitConfig): FailureLimiter;
     /** Sensitive admin / mutation endpoints — 15 req / 60 s per client IP. */
     strictApi(): RateLimiter;
+    /** Channel mutation/action endpoints — 20 req / 60 s per client IP. */
+    channelApi(): RateLimiter;
     /** Tunnel mutation calls — 12 req / 5 min per gateway-token fingerprint. */
     tunnelMutate(): RateLimiter;
     /** Failed pairing-exchange attempts — 30 failures / 5 min per client IP. */

package/dist/src/gateway/rate-limit/buckets.js

@@ -47,6 +47,7 @@ var BucketRegistry = class {
 	authFailureLimiter;
 	authFailureSignature;
 	strictApiLimiter;
+	channelApiLimiter;
 	tunnelMutateLimiter;
 	pairingExchangeLimiter;
 	sharePublicShortLimiter;
@@ -78,6 +79,14 @@ var BucketRegistry = class {
 		});
 		return this.strictApiLimiter;
 	}
+	/** Channel mutation/action endpoints — 20 req / 60 s per client IP. */
+	channelApi() {
+		if (!this.channelApiLimiter) this.channelApiLimiter = new RateLimiter({
+			maxRequests: 20,
+			windowMs: 6e4
+		});
+		return this.channelApiLimiter;
+	}
 	/** Tunnel mutation calls — 12 req / 5 min per gateway-token fingerprint. */
 	tunnelMutate() {
 		if (!this.tunnelMutateLimiter) this.tunnelMutateLimiter = new RateLimiter({
@@ -114,12 +123,14 @@ var BucketRegistry = class {
 	destroyAll() {
 		this.authFailureLimiter?.destroy();
 		this.strictApiLimiter?.destroy();
+		this.channelApiLimiter?.destroy();
 		this.tunnelMutateLimiter?.destroy();
 		this.pairingExchangeLimiter?.destroy();
 		this.sharePublicShortLimiter?.destroy();
 		this.sharePublicLongLimiter?.destroy();
 		this.authFailureLimiter = void 0;
 		this.strictApiLimiter = void 0;
+		this.channelApiLimiter = void 0;
 		this.tunnelMutateLimiter = void 0;
 		this.pairingExchangeLimiter = void 0;
 		this.sharePublicShortLimiter = void 0;
@@ -130,6 +141,7 @@ var BucketRegistry = class {
 	resetAllForTests() {
 		this.authFailureLimiter?.resetForTests();
 		this.strictApiLimiter?.resetForTests();
+		this.channelApiLimiter?.resetForTests();
 		this.tunnelMutateLimiter?.resetForTests();
 		this.pairingExchangeLimiter?.resetForTests();
 		this.sharePublicShortLimiter?.resetForTests();

package/dist/src/gateway/rate-limit/buckets.js.map

@@ -1 +1 @@
-{"version":3,"file":"buckets.js","names":[],"sources":["../../../../src/gateway/rate-limit/buckets.ts"],"sourcesContent":["/**\n * Named rate-limit buckets used across the gateway. Each is a thin wrapper\n * over a primitive limiter ({@link RateLimiter} or {@link FailureLimiter})\n * that hard-codes its config and exposes a small surface.\n *\n * All buckets are owned by a process-level singleton {@link BucketRegistry}\n * so that:\n *   - lifecycle (cleanup timers) is centralized — `destroyAll()` on shutdown,\n *   - tests get one obvious reset entry point (`resetAllForTests`),\n *   - new buckets are added in exactly one place.\n *\n * Tuning policy:\n *   - `auth_failure` is read from runtime config because users tune it per\n *     deployment. Other buckets keep static defaults until a real need\n *     emerges to expose them. (YAGNI > premature configurability.)\n */\n\nimport { FailureLimiter, RateLimiter } from '../../infra/rate-limit/index.js';\n\nimport type { GatewayAuthRateLimitConfig } from '../../config/schema.js';\nimport type { AuthRateLimitPolicyConfig } from './auth-policy.js';\n\n/**\n * Auth-failure config validated/normalized into the shape both the limiter\n * primitive and the policy layer need.\n */\nexport type ResolvedAuthRateLimitConfig = {\n  enabled: boolean;\n  maxFailures: number;\n  windowMs: number;\n  blockDurationMs: number;\n  burstCoalesceMs: number;\n  exemptLoopback: boolean;\n};\n\nconst DEFAULT_AUTH_RATE_LIMIT: ResolvedAuthRateLimitConfig = {\n  enabled: true,\n  maxFailures: 5,\n  windowMs: 15 * 60 * 1000,\n  blockDurationMs: 5 * 60 * 1000,\n  burstCoalesceMs: 1000,\n  exemptLoopback: true,\n};\n\nexport function resolveAuthRateLimit(\n  input: GatewayAuthRateLimitConfig | undefined,\n): ResolvedAuthRateLimitConfig {\n  if (!input) return { ...DEFAULT_AUTH_RATE_LIMIT };\n  const blockDurationMs =\n    input.blockDurationMs ?? input.lockoutMs ?? DEFAULT_AUTH_RATE_LIMIT.blockDurationMs;\n  return {\n    enabled: input.enabled ?? DEFAULT_AUTH_RATE_LIMIT.enabled,\n    maxFailures: Math.max(1, Math.floor(input.maxAttempts ?? DEFAULT_AUTH_RATE_LIMIT.maxFailures)),\n    windowMs: Math.max(1000, Math.floor(input.windowMs ?? DEFAULT_AUTH_RATE_LIMIT.windowMs)),\n    blockDurationMs: Math.max(1000, Math.floor(blockDurationMs)),\n    burstCoalesceMs: Math.max(\n      0,\n      Math.floor(input.burstCoalesceMs ?? DEFAULT_AUTH_RATE_LIMIT.burstCoalesceMs),\n    ),\n    exemptLoopback: input.exemptLoopback ?? DEFAULT_AUTH_RATE_LIMIT.exemptLoopback,\n  };\n}\n\nexport function authPolicyConfig(\n  cfg: ResolvedAuthRateLimitConfig,\n): AuthRateLimitPolicyConfig {\n  return { enabled: cfg.enabled, exemptLoopback: cfg.exemptLoopback };\n}\n\nclass BucketRegistry {\n  private authFailureLimiter?: FailureLimiter;\n  private authFailureSignature?: string;\n\n  private strictApiLimiter?: RateLimiter;\n  private tunnelMutateLimiter?: RateLimiter;\n  private pairingExchangeLimiter?: FailureLimiter;\n  private sharePublicShortLimiter?: RateLimiter;\n  private sharePublicLongLimiter?: RateLimiter;\n\n  /**\n   * Reconfigured on the fly when `gateway.auth.rateLimit` is reloaded —\n   * compares a stable signature to avoid swapping out a hot bucket on every\n   * config read.\n   */\n  authFailure(cfg: ResolvedAuthRateLimitConfig): FailureLimiter {\n    const sig = `${cfg.maxFailures}|${cfg.windowMs}|${cfg.blockDurationMs}|${cfg.burstCoalesceMs}`;\n    if (!this.authFailureLimiter || this.authFailureSignature !== sig) {\n      this.authFailureLimiter?.destroy();\n      this.authFailureLimiter = new FailureLimiter({\n        maxFailures: cfg.maxFailures,\n        windowMs: cfg.windowMs,\n        blockDurationMs: cfg.blockDurationMs,\n        burstCoalesceMs: cfg.burstCoalesceMs,\n      });\n      this.authFailureSignature = sig;\n    }\n    return this.authFailureLimiter;\n  }\n\n  /** Sensitive admin / mutation endpoints — 15 req / 60 s per client IP. */\n  strictApi(): RateLimiter {\n    if (!this.strictApiLimiter) {\n      this.strictApiLimiter = new RateLimiter({ maxRequests: 15, windowMs: 60_000 });\n    }\n    return this.strictApiLimiter;\n  }\n\n  /** Tunnel mutation calls — 12 req / 5 min per gateway-token fingerprint. */\n  tunnelMutate(): RateLimiter {\n    if (!this.tunnelMutateLimiter) {\n      this.tunnelMutateLimiter = new RateLimiter({\n        maxRequests: 12,\n        windowMs: 5 * 60_000,\n      });\n    }\n    return this.tunnelMutateLimiter;\n  }\n\n  /** Failed pairing-exchange attempts — 30 failures / 5 min per client IP. */\n  pairingExchange(): FailureLimiter {\n    if (!this.pairingExchangeLimiter) {\n      this.pairingExchangeLimiter = new FailureLimiter({\n        maxFailures: 30,\n        windowMs: 5 * 60_000,\n        blockDurationMs: 5 * 60_000,\n      });\n    }\n    return this.pairingExchangeLimiter;\n  }\n\n  /** Public share download short window — 60 req / min per client IP. */\n  sharePublicShort(): RateLimiter {\n    if (!this.sharePublicShortLimiter) {\n      this.sharePublicShortLimiter = new RateLimiter({\n        maxRequests: 60,\n        windowMs: 60_000,\n      });\n    }\n    return this.sharePublicShortLimiter;\n  }\n\n  /** Public share download long window — 300 req / 15 min per client IP. */\n  sharePublicLong(): RateLimiter {\n    if (!this.sharePublicLongLimiter) {\n      this.sharePublicLongLimiter = new RateLimiter({\n        maxRequests: 300,\n        windowMs: 15 * 60_000,\n      });\n    }\n    return this.sharePublicLongLimiter;\n  }\n\n  destroyAll(): void {\n    this.authFailureLimiter?.destroy();\n    this.strictApiLimiter?.destroy();\n    this.tunnelMutateLimiter?.destroy();\n    this.pairingExchangeLimiter?.destroy();\n    this.sharePublicShortLimiter?.destroy();\n    this.sharePublicLongLimiter?.destroy();\n    this.authFailureLimiter = undefined;\n    this.strictApiLimiter = undefined;\n    this.tunnelMutateLimiter = undefined;\n    this.pairingExchangeLimiter = undefined;\n    this.sharePublicShortLimiter = undefined;\n    this.sharePublicLongLimiter = undefined;\n    this.authFailureSignature = undefined;\n  }\n\n  /** @internal */\n  resetAllForTests(): void {\n    this.authFailureLimiter?.resetForTests();\n    this.strictApiLimiter?.resetForTests();\n    this.tunnelMutateLimiter?.resetForTests();\n    this.pairingExchangeLimiter?.resetForTests();\n    this.sharePublicShortLimiter?.resetForTests();\n    this.sharePublicLongLimiter?.resetForTests();\n  }\n}\n\nexport const buckets = new BucketRegistry();\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAmCA,MAAM,0BAAuD;CAC3D,SAAS;CACT,aAAa;CACb,UAAU,MAAU;CACpB,iBAAiB,MAAS;CAC1B,iBAAiB;CACjB,gBAAgB;CACjB;AAED,SAAgB,qBACd,OAC6B;AAC7B,KAAI,CAAC,MAAO,QAAO,EAAE,GAAG,yBAAyB;CACjD,MAAM,kBACJ,MAAM,mBAAmB,MAAM,aAAa,wBAAwB;AACtE,QAAO;EACL,SAAS,MAAM,WAAW,wBAAwB;EAClD,aAAa,KAAK,IAAI,GAAG,KAAK,MAAM,MAAM,eAAe,wBAAwB,YAAY,CAAC;EAC9F,UAAU,KAAK,IAAI,KAAM,KAAK,MAAM,MAAM,YAAY,wBAAwB,SAAS,CAAC;EACxF,iBAAiB,KAAK,IAAI,KAAM,KAAK,MAAM,gBAAgB,CAAC;EAC5D,iBAAiB,KAAK,IACpB,GACA,KAAK,MAAM,MAAM,mBAAmB,wBAAwB,gBAAgB,CAC7E;EACD,gBAAgB,MAAM,kBAAkB,wBAAwB;EACjE;;AAGH,SAAgB,iBACd,KAC2B;AAC3B,QAAO;EAAE,SAAS,IAAI;EAAS,gBAAgB,IAAI;EAAgB;;AAGrE,IAAM,iBAAN,MAAqB;CACnB;CACA;CAEA;CACA;CACA;CACA;CACA;;;;;;CAOA,YAAY,KAAkD;EAC5D,MAAM,MAAM,GAAG,IAAI,YAAY,GAAG,IAAI,SAAS,GAAG,IAAI,gBAAgB,GAAG,IAAI;AAC7E,MAAI,CAAC,KAAK,sBAAsB,KAAK,yBAAyB,KAAK;AACjE,QAAK,oBAAoB,SAAS;AAClC,QAAK,qBAAqB,IAAI,eAAe;IAC3C,aAAa,IAAI;IACjB,UAAU,IAAI;IACd,iBAAiB,IAAI;IACrB,iBAAiB,IAAI;IACtB,CAAC;AACF,QAAK,uBAAuB;;AAE9B,SAAO,KAAK;;;CAId,YAAyB;AACvB,MAAI,CAAC,KAAK,iBACR,MAAK,mBAAmB,IAAI,YAAY;GAAE,aAAa;GAAI,UAAU;GAAQ,CAAC;AAEhF,SAAO,KAAK;;;CAId,eAA4B;AAC1B,MAAI,CAAC,KAAK,oBACR,MAAK,sBAAsB,IAAI,YAAY;GACzC,aAAa;GACb,UAAU,IAAI;GACf,CAAC;AAEJ,SAAO,KAAK;;;CAId,kBAAkC;AAChC,MAAI,CAAC,KAAK,uBACR,MAAK,yBAAyB,IAAI,eAAe;GAC/C,aAAa;GACb,UAAU,IAAI;GACd,iBAAiB,IAAI;GACtB,CAAC;AAEJ,SAAO,KAAK;;;CAId,mBAAgC;AAC9B,MAAI,CAAC,KAAK,wBACR,MAAK,0BAA0B,IAAI,YAAY;GAC7C,aAAa;GACb,UAAU;GACX,CAAC;AAEJ,SAAO,KAAK;;;CAId,kBAA+B;AAC7B,MAAI,CAAC,KAAK,uBACR,MAAK,yBAAyB,IAAI,YAAY;GAC5C,aAAa;GACb,UAAU,KAAK;GAChB,CAAC;AAEJ,SAAO,KAAK;;CAGd,aAAmB;AACjB,OAAK,oBAAoB,SAAS;AAClC,OAAK,kBAAkB,SAAS;AAChC,OAAK,qBAAqB,SAAS;AACnC,OAAK,wBAAwB,SAAS;AACtC,OAAK,yBAAyB,SAAS;AACvC,OAAK,wBAAwB,SAAS;AACtC,OAAK,qBAAqB,KAAA;AAC1B,OAAK,mBAAmB,KAAA;AACxB,OAAK,sBAAsB,KAAA;AAC3B,OAAK,yBAAyB,KAAA;AAC9B,OAAK,0BAA0B,KAAA;AAC/B,OAAK,yBAAyB,KAAA;AAC9B,OAAK,uBAAuB,KAAA;;;CAI9B,mBAAyB;AACvB,OAAK,oBAAoB,eAAe;AACxC,OAAK,kBAAkB,eAAe;AACtC,OAAK,qBAAqB,eAAe;AACzC,OAAK,wBAAwB,eAAe;AAC5C,OAAK,yBAAyB,eAAe;AAC7C,OAAK,wBAAwB,eAAe;;;AAIhD,MAAa,UAAU,IAAI,gBAAgB"}
+{"version":3,"file":"buckets.js","names":[],"sources":["../../../../src/gateway/rate-limit/buckets.ts"],"sourcesContent":["/**\n * Named rate-limit buckets used across the gateway. Each is a thin wrapper\n * over a primitive limiter ({@link RateLimiter} or {@link FailureLimiter})\n * that hard-codes its config and exposes a small surface.\n *\n * All buckets are owned by a process-level singleton {@link BucketRegistry}\n * so that:\n *   - lifecycle (cleanup timers) is centralized — `destroyAll()` on shutdown,\n *   - tests get one obvious reset entry point (`resetAllForTests`),\n *   - new buckets are added in exactly one place.\n *\n * Tuning policy:\n *   - `auth_failure` is read from runtime config because users tune it per\n *     deployment. Other buckets keep static defaults until a real need\n *     emerges to expose them. (YAGNI > premature configurability.)\n */\n\nimport { FailureLimiter, RateLimiter } from '../../infra/rate-limit/index.js';\n\nimport type { GatewayAuthRateLimitConfig } from '../../config/schema.js';\nimport type { AuthRateLimitPolicyConfig } from './auth-policy.js';\n\n/**\n * Auth-failure config validated/normalized into the shape both the limiter\n * primitive and the policy layer need.\n */\nexport type ResolvedAuthRateLimitConfig = {\n  enabled: boolean;\n  maxFailures: number;\n  windowMs: number;\n  blockDurationMs: number;\n  burstCoalesceMs: number;\n  exemptLoopback: boolean;\n};\n\nconst DEFAULT_AUTH_RATE_LIMIT: ResolvedAuthRateLimitConfig = {\n  enabled: true,\n  maxFailures: 5,\n  windowMs: 15 * 60 * 1000,\n  blockDurationMs: 5 * 60 * 1000,\n  burstCoalesceMs: 1000,\n  exemptLoopback: true,\n};\n\nexport function resolveAuthRateLimit(\n  input: GatewayAuthRateLimitConfig | undefined,\n): ResolvedAuthRateLimitConfig {\n  if (!input) return { ...DEFAULT_AUTH_RATE_LIMIT };\n  const blockDurationMs =\n    input.blockDurationMs ?? input.lockoutMs ?? DEFAULT_AUTH_RATE_LIMIT.blockDurationMs;\n  return {\n    enabled: input.enabled ?? DEFAULT_AUTH_RATE_LIMIT.enabled,\n    maxFailures: Math.max(1, Math.floor(input.maxAttempts ?? DEFAULT_AUTH_RATE_LIMIT.maxFailures)),\n    windowMs: Math.max(1000, Math.floor(input.windowMs ?? DEFAULT_AUTH_RATE_LIMIT.windowMs)),\n    blockDurationMs: Math.max(1000, Math.floor(blockDurationMs)),\n    burstCoalesceMs: Math.max(\n      0,\n      Math.floor(input.burstCoalesceMs ?? DEFAULT_AUTH_RATE_LIMIT.burstCoalesceMs),\n    ),\n    exemptLoopback: input.exemptLoopback ?? DEFAULT_AUTH_RATE_LIMIT.exemptLoopback,\n  };\n}\n\nexport function authPolicyConfig(\n  cfg: ResolvedAuthRateLimitConfig,\n): AuthRateLimitPolicyConfig {\n  return { enabled: cfg.enabled, exemptLoopback: cfg.exemptLoopback };\n}\n\nclass BucketRegistry {\n  private authFailureLimiter?: FailureLimiter;\n  private authFailureSignature?: string;\n\n  private strictApiLimiter?: RateLimiter;\n  private channelApiLimiter?: RateLimiter;\n  private tunnelMutateLimiter?: RateLimiter;\n  private pairingExchangeLimiter?: FailureLimiter;\n  private sharePublicShortLimiter?: RateLimiter;\n  private sharePublicLongLimiter?: RateLimiter;\n\n  /**\n   * Reconfigured on the fly when `gateway.auth.rateLimit` is reloaded —\n   * compares a stable signature to avoid swapping out a hot bucket on every\n   * config read.\n   */\n  authFailure(cfg: ResolvedAuthRateLimitConfig): FailureLimiter {\n    const sig = `${cfg.maxFailures}|${cfg.windowMs}|${cfg.blockDurationMs}|${cfg.burstCoalesceMs}`;\n    if (!this.authFailureLimiter || this.authFailureSignature !== sig) {\n      this.authFailureLimiter?.destroy();\n      this.authFailureLimiter = new FailureLimiter({\n        maxFailures: cfg.maxFailures,\n        windowMs: cfg.windowMs,\n        blockDurationMs: cfg.blockDurationMs,\n        burstCoalesceMs: cfg.burstCoalesceMs,\n      });\n      this.authFailureSignature = sig;\n    }\n    return this.authFailureLimiter;\n  }\n\n  /** Sensitive admin / mutation endpoints — 15 req / 60 s per client IP. */\n  strictApi(): RateLimiter {\n    if (!this.strictApiLimiter) {\n      this.strictApiLimiter = new RateLimiter({ maxRequests: 15, windowMs: 60_000 });\n    }\n    return this.strictApiLimiter;\n  }\n\n  /** Channel mutation/action endpoints — 20 req / 60 s per client IP. */\n  channelApi(): RateLimiter {\n    if (!this.channelApiLimiter) {\n      this.channelApiLimiter = new RateLimiter({ maxRequests: 20, windowMs: 60_000 });\n    }\n    return this.channelApiLimiter;\n  }\n\n  /** Tunnel mutation calls — 12 req / 5 min per gateway-token fingerprint. */\n  tunnelMutate(): RateLimiter {\n    if (!this.tunnelMutateLimiter) {\n      this.tunnelMutateLimiter = new RateLimiter({\n        maxRequests: 12,\n        windowMs: 5 * 60_000,\n      });\n    }\n    return this.tunnelMutateLimiter;\n  }\n\n  /** Failed pairing-exchange attempts — 30 failures / 5 min per client IP. */\n  pairingExchange(): FailureLimiter {\n    if (!this.pairingExchangeLimiter) {\n      this.pairingExchangeLimiter = new FailureLimiter({\n        maxFailures: 30,\n        windowMs: 5 * 60_000,\n        blockDurationMs: 5 * 60_000,\n      });\n    }\n    return this.pairingExchangeLimiter;\n  }\n\n  /** Public share download short window — 60 req / min per client IP. */\n  sharePublicShort(): RateLimiter {\n    if (!this.sharePublicShortLimiter) {\n      this.sharePublicShortLimiter = new RateLimiter({\n        maxRequests: 60,\n        windowMs: 60_000,\n      });\n    }\n    return this.sharePublicShortLimiter;\n  }\n\n  /** Public share download long window — 300 req / 15 min per client IP. */\n  sharePublicLong(): RateLimiter {\n    if (!this.sharePublicLongLimiter) {\n      this.sharePublicLongLimiter = new RateLimiter({\n        maxRequests: 300,\n        windowMs: 15 * 60_000,\n      });\n    }\n    return this.sharePublicLongLimiter;\n  }\n\n  destroyAll(): void {\n    this.authFailureLimiter?.destroy();\n    this.strictApiLimiter?.destroy();\n    this.channelApiLimiter?.destroy();\n    this.tunnelMutateLimiter?.destroy();\n    this.pairingExchangeLimiter?.destroy();\n    this.sharePublicShortLimiter?.destroy();\n    this.sharePublicLongLimiter?.destroy();\n    this.authFailureLimiter = undefined;\n    this.strictApiLimiter = undefined;\n    this.channelApiLimiter = undefined;\n    this.tunnelMutateLimiter = undefined;\n    this.pairingExchangeLimiter = undefined;\n    this.sharePublicShortLimiter = undefined;\n    this.sharePublicLongLimiter = undefined;\n    this.authFailureSignature = undefined;\n  }\n\n  /** @internal */\n  resetAllForTests(): void {\n    this.authFailureLimiter?.resetForTests();\n    this.strictApiLimiter?.resetForTests();\n    this.channelApiLimiter?.resetForTests();\n    this.tunnelMutateLimiter?.resetForTests();\n    this.pairingExchangeLimiter?.resetForTests();\n    this.sharePublicShortLimiter?.resetForTests();\n    this.sharePublicLongLimiter?.resetForTests();\n  }\n}\n\nexport const buckets = new BucketRegistry();\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAmCA,MAAM,0BAAuD;CAC3D,SAAS;CACT,aAAa;CACb,UAAU,MAAU;CACpB,iBAAiB,MAAS;CAC1B,iBAAiB;CACjB,gBAAgB;CACjB;AAED,SAAgB,qBACd,OAC6B;AAC7B,KAAI,CAAC,MAAO,QAAO,EAAE,GAAG,yBAAyB;CACjD,MAAM,kBACJ,MAAM,mBAAmB,MAAM,aAAa,wBAAwB;AACtE,QAAO;EACL,SAAS,MAAM,WAAW,wBAAwB;EAClD,aAAa,KAAK,IAAI,GAAG,KAAK,MAAM,MAAM,eAAe,wBAAwB,YAAY,CAAC;EAC9F,UAAU,KAAK,IAAI,KAAM,KAAK,MAAM,MAAM,YAAY,wBAAwB,SAAS,CAAC;EACxF,iBAAiB,KAAK,IAAI,KAAM,KAAK,MAAM,gBAAgB,CAAC;EAC5D,iBAAiB,KAAK,IACpB,GACA,KAAK,MAAM,MAAM,mBAAmB,wBAAwB,gBAAgB,CAC7E;EACD,gBAAgB,MAAM,kBAAkB,wBAAwB;EACjE;;AAGH,SAAgB,iBACd,KAC2B;AAC3B,QAAO;EAAE,SAAS,IAAI;EAAS,gBAAgB,IAAI;EAAgB;;AAGrE,IAAM,iBAAN,MAAqB;CACnB;CACA;CAEA;CACA;CACA;CACA;CACA;CACA;;;;;;CAOA,YAAY,KAAkD;EAC5D,MAAM,MAAM,GAAG,IAAI,YAAY,GAAG,IAAI,SAAS,GAAG,IAAI,gBAAgB,GAAG,IAAI;AAC7E,MAAI,CAAC,KAAK,sBAAsB,KAAK,yBAAyB,KAAK;AACjE,QAAK,oBAAoB,SAAS;AAClC,QAAK,qBAAqB,IAAI,eAAe;IAC3C,aAAa,IAAI;IACjB,UAAU,IAAI;IACd,iBAAiB,IAAI;IACrB,iBAAiB,IAAI;IACtB,CAAC;AACF,QAAK,uBAAuB;;AAE9B,SAAO,KAAK;;;CAId,YAAyB;AACvB,MAAI,CAAC,KAAK,iBACR,MAAK,mBAAmB,IAAI,YAAY;GAAE,aAAa;GAAI,UAAU;GAAQ,CAAC;AAEhF,SAAO,KAAK;;;CAId,aAA0B;AACxB,MAAI,CAAC,KAAK,kBACR,MAAK,oBAAoB,IAAI,YAAY;GAAE,aAAa;GAAI,UAAU;GAAQ,CAAC;AAEjF,SAAO,KAAK;;;CAId,eAA4B;AAC1B,MAAI,CAAC,KAAK,oBACR,MAAK,sBAAsB,IAAI,YAAY;GACzC,aAAa;GACb,UAAU,IAAI;GACf,CAAC;AAEJ,SAAO,KAAK;;;CAId,kBAAkC;AAChC,MAAI,CAAC,KAAK,uBACR,MAAK,yBAAyB,IAAI,eAAe;GAC/C,aAAa;GACb,UAAU,IAAI;GACd,iBAAiB,IAAI;GACtB,CAAC;AAEJ,SAAO,KAAK;;;CAId,mBAAgC;AAC9B,MAAI,CAAC,KAAK,wBACR,MAAK,0BAA0B,IAAI,YAAY;GAC7C,aAAa;GACb,UAAU;GACX,CAAC;AAEJ,SAAO,KAAK;;;CAId,kBAA+B;AAC7B,MAAI,CAAC,KAAK,uBACR,MAAK,yBAAyB,IAAI,YAAY;GAC5C,aAAa;GACb,UAAU,KAAK;GAChB,CAAC;AAEJ,SAAO,KAAK;;CAGd,aAAmB;AACjB,OAAK,oBAAoB,SAAS;AAClC,OAAK,kBAAkB,SAAS;AAChC,OAAK,mBAAmB,SAAS;AACjC,OAAK,qBAAqB,SAAS;AACnC,OAAK,wBAAwB,SAAS;AACtC,OAAK,yBAAyB,SAAS;AACvC,OAAK,wBAAwB,SAAS;AACtC,OAAK,qBAAqB,KAAA;AAC1B,OAAK,mBAAmB,KAAA;AACxB,OAAK,oBAAoB,KAAA;AACzB,OAAK,sBAAsB,KAAA;AAC3B,OAAK,yBAAyB,KAAA;AAC9B,OAAK,0BAA0B,KAAA;AAC/B,OAAK,yBAAyB,KAAA;AAC9B,OAAK,uBAAuB,KAAA;;;CAI9B,mBAAyB;AACvB,OAAK,oBAAoB,eAAe;AACxC,OAAK,kBAAkB,eAAe;AACtC,OAAK,mBAAmB,eAAe;AACvC,OAAK,qBAAqB,eAAe;AACzC,OAAK,wBAAwB,eAAe;AAC5C,OAAK,yBAAyB,eAAe;AAC7C,OAAK,wBAAwB,eAAe;;;AAIhD,MAAa,UAAU,IAAI,gBAAgB"}

package/dist/src/gateway/service/config-coordinator.js

@@ -1,7 +1,7 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
-import { getModelRegistry } from "../../providers/model-registry.js";
 import { loadConfig, saveConfig } from "../../config/loader.js";
+import { getModelRegistry } from "../../providers/model-registry.js";
 import { init_providers } from "../../providers/index.js";
 import { disposeAllSessionMcpRuntimes } from "../../agent/mcp/bundle-mcp-runtime.js";
 import "../../agent/mcp/bundle-mcp-tools.js";

package/dist/src/gateway/service/marketplace-service.js

@@ -1,7 +1,7 @@
 import { resolveStateDir } from "../../config/paths-state.js";
-import { init_paths, resolveExtensionsDir } from "../../config/paths.js";
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
+import { init_paths, resolveExtensionsDir } from "../../config/paths.js";
 import { createSkillConfigManager } from "../../agent/skills/config.js";
 import { removeSkillsLockEntry } from "../../agent/skills/hub-lock.js";
 import { deleteManagedSkill, installSkillFromZip, listManagedSkillDirs } from "../../agent/skills/managed-store.js";
@@ -11,8 +11,8 @@ import { installExtensionFromStoreZip, peekExtensionIdFromStoreZip } from "../..
 import { downloadExtensionStoreZipBuffer, fetchMarketplacePackageDetail, resolveExtensionZipDownloadUrl, resolveExtensionsStoreBaseUrl } from "../../agent/skills/marketplace/adapters/store/store-api-client.js";
 import { getMarketplaceProviderDisplayName, resolveSkillsMarketplaceProvider } from "../../agent/skills/marketplace/resolve-adapter.js";
 import { downloadFromMarketplace, getMarketplacePackageDetail, listMarketplaceCategories, listMarketplacePackages } from "../../agent/skills/skills-marketplace.js";
-import { existsSync, mkdirSync, rmSync } from "node:fs";
 import { join } from "node:path";
+import { existsSync, mkdirSync, rmSync } from "node:fs";
 //#region src/gateway/service/marketplace-service.ts
 /**
 * GatewayMarketplaceService — install / browse / remove for the two marketplaces

package/dist/src/gateway/service.js

@@ -1,18 +1,18 @@
 import { __toCommonJS } from "../../_virtual/_rolldown/runtime.js";
 import { PACKAGE_VERSION, init_package_version } from "../package-version.js";
 import { init_agent_scope, listAgentEntries, normalizeAgentId, resolveDefaultAgentId } from "../agent/agent-scope.js";
-import { init_paths, resolveAgentDir, resolveConfigPath, resolveExtensionsDir } from "../config/paths.js";
+import { buildSessionKey, init_session_key, sanitizeSegment } from "../routing/session-key.js";
+import { getDefaultAgentId, init_resolve_route } from "../routing/resolve-route.js";
 import { getLogDir } from "../utils/logger/config.js";
 import { getRuntimeLogStats } from "../utils/logger/stats.js";
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
-import { prewarmModelRegistry } from "../providers/model-registry.js";
+import { init_paths, resolveAgentDir, resolveConfigPath, resolveExtensionsDir } from "../config/paths.js";
 import { areExtensionsGloballyDisabled } from "../extensions/discover-extensions.js";
 import { buildExtensionMetadataSnapshot } from "../extensions/extension-metadata-snapshot.js";
 import { buildChannelCatalogForConfig, buildChannelCatalogFromSnapshot, init_channel_catalog_service } from "../channels/catalog/channel-catalog-service.js";
 import { loadConfig, saveConfig } from "../config/loader.js";
-import { buildSessionKey, init_session_key, sanitizeSegment } from "../routing/session-key.js";
-import { getDefaultAgentId, init_resolve_route } from "../routing/resolve-route.js";
+import { prewarmModelRegistry } from "../providers/model-registry.js";
 import { init_providers, providers_exports } from "../providers/index.js";
 import { closeXopcDatabase, openXopcDatabase } from "../storage/sqlite/connection.js";
 import "../storage/sqlite/index.js";

package/dist/src/gateway/workspace-fs-file-list.js

@@ -1,7 +1,7 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
-import { readdir } from "node:fs/promises";
 import { join, relative } from "node:path";
+import { readdir } from "node:fs/promises";
 //#region src/gateway/workspace-fs-file-list.ts
 init_logger();
 const log = createLogger("WorkspaceFsFileList");

package/dist/src/goals/goal-workflow-judge.js

@@ -1,9 +1,9 @@
+import { getAgentDefaultModelRef, init_schema } from "../config/schema.js";
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
-import { getAgentDefaultModelRef, init_schema } from "../config/schema.js";
-import { resolveGoalUiLocale } from "../agent/goals/goal-locale.js";
 import { renderWorkflowText } from "../agent/workflow/snapshot.js";
 import { GoalService } from "./goal-service.js";
+import { resolveGoalUiLocale } from "../agent/goals/goal-locale.js";
 import { evaluateAfterTurnHermesLike } from "../agent/goals/evaluate-turn.js";
 import { runViewToSnapshot } from "../workflows/service/run-view-to-snapshot.js";
 //#region src/goals/goal-workflow-judge.ts

package/dist/src/i18n/goals-bundle.js

@@ -1,7 +1,7 @@
 import { formatI18n } from "./format.js";
+import { serverLocaleOrFallback } from "./locale.js";
 import goals_en_default, { judgeReason } from "./locales/goals.en.js";
 import goals_zh_default from "./locales/goals.zh.js";
-import { serverLocaleOrFallback } from "./locale.js";
 //#region src/i18n/goals-bundle.ts
 /** Canonical English strings for judge parse / API contract (from `goals.en.json`). */
 const JUDGE_REASON_EN = judgeReason;

package/dist/src/i18n/index.js

@@ -1,5 +1,5 @@
 import { formatI18n } from "./format.js";
 import { DEFAULT_SERVER_LOCALE, SERVER_LOCALES, isServerLocale, normalizeServerLocale, serverLocaleOrFallback } from "./locale.js";
-import { JUDGE_REASON_EN, goalsChecklistProgressSuffix, goalsContinuationChecklistTemplate, goalsContinuationPlainTemplate, goalsEvaluateCopy, goalsJudgeReason, goalsJudgeResponseLanguageNote, goalsMessages } from "./goals-bundle.js";
 import { resolveToolLocale, shareToolErrorLine, shareToolMessages, shareToolSuccessLines } from "./share-tool-bundle.js";
+import { JUDGE_REASON_EN, goalsChecklistProgressSuffix, goalsContinuationChecklistTemplate, goalsContinuationPlainTemplate, goalsEvaluateCopy, goalsJudgeReason, goalsJudgeResponseLanguageNote, goalsMessages } from "./goals-bundle.js";
 export { DEFAULT_SERVER_LOCALE, JUDGE_REASON_EN, SERVER_LOCALES, formatI18n, goalsChecklistProgressSuffix, goalsContinuationChecklistTemplate, goalsContinuationPlainTemplate, goalsEvaluateCopy, goalsJudgeReason, goalsJudgeResponseLanguageNote, goalsMessages, isServerLocale, normalizeServerLocale, resolveToolLocale, serverLocaleOrFallback, shareToolErrorLine, shareToolMessages, shareToolSuccessLines };

package/dist/src/i18n/share-tool-bundle.js

@@ -1,7 +1,7 @@
-import { formatI18n } from "./format.js";
-import { normalizeServerLocale, serverLocaleOrFallback } from "./locale.js";
 import share_tool_en_default from "./locales/share-tool.en.js";
 import share_tool_zh_default from "./locales/share-tool.zh.js";
+import { formatI18n } from "./format.js";
+import { normalizeServerLocale, serverLocaleOrFallback } from "./locale.js";
 //#region src/i18n/share-tool-bundle.ts
 const byLocale = {
 	en: share_tool_en_default,

package/dist/src/infra/brew.js

@@ -1,5 +1,5 @@
-import path from "node:path";
 import os from "node:os";
+import path from "node:path";
 //#region src/infra/brew.ts
 function normalizePathValue(value) {
 	if (typeof value !== "string") return void 0;

package/dist/src/infra/package-json.js

@@ -1,5 +1,5 @@
-import fs from "node:fs/promises";
 import path from "node:path";
+import fs from "node:fs/promises";
 //#region src/infra/package-json.ts
 async function readPackageVersion(root) {
 	try {

package/dist/src/infra/package-update-steps.js

@@ -1,7 +1,7 @@
 import { readPackageVersion } from "./package-json.js";
 import { XOPC_PACKAGE_NAME, collectInstalledGlobalPackageErrors, globalInstallArgs, globalInstallFallbackArgs, resolveExpectedInstalledVersionFromSpec, resolveGlobalInstallTarget, resolveNpmGlobalPrefixLayoutFromGlobalRoot, resolveNpmGlobalPrefixLayoutFromPrefix } from "./update-global.js";
-import fs from "node:fs/promises";
 import path from "node:path";
+import fs from "node:fs/promises";
 //#region src/infra/package-update-steps.ts
 function formatError(err) {
 	return err instanceof Error ? err.message : String(err);

package/dist/src/infra/path-env.js

@@ -1,7 +1,7 @@
 import { resolveBrewPathDirs } from "./brew.js";
-import fs from "node:fs";
-import path from "node:path";
 import os from "node:os";
+import path from "node:path";
+import fs from "node:fs";
 //#region src/infra/path-env.ts
 function isTruthyEnvValue(value) {
 	if (!value) return false;

package/dist/src/infra/restart.js

@@ -1,8 +1,8 @@
 import { init_paths_state, resolveStateDir } from "../config/paths-state.js";
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
-import { mkdirSync, readFileSync, rmSync, writeFileSync } from "node:fs";
 import path from "node:path";
+import { mkdirSync, readFileSync, rmSync, writeFileSync } from "node:fs";
 //#region src/infra/restart.ts
 /**
 * Gateway restart coordination — OpenClaw-aligned SIGUSR1 authorization and restart intent.

package/dist/src/infra/stable-node-path.js

@@ -1,5 +1,5 @@
-import fs from "node:fs/promises";
 import path from "node:path";
+import fs from "node:fs/promises";
 //#region src/infra/stable-node-path.ts
 /** Resolve Homebrew Cellar node paths to stable opt/bin symlinks. */
 async function resolveStableNodePath(nodePath) {

package/dist/src/infra/update-check.js

@@ -1,7 +1,7 @@
 import { PACKAGE_VERSION, init_package_version } from "../package-version.js";
 import { channelToNpmTag } from "./update-channels.js";
-import { access, readFile } from "node:fs/promises";
 import { dirname, join } from "node:path";
+import { access, readFile } from "node:fs/promises";
 import { fileURLToPath } from "node:url";
 //#region src/infra/update-check.ts
 init_package_version();

package/dist/src/infra/update-global.js

@@ -2,9 +2,9 @@ import { resolveExecPathBinPrepend } from "./path-env.js";
 import { readPackageVersion } from "./package-json.js";
 import { applyPathPrepend } from "./path-prepend.js";
 import { createDefaultCommandRunner } from "./run-command.js";
+import path from "node:path";
 import fs from "node:fs";
 import fs$1 from "node:fs/promises";
-import path from "node:path";
 //#region src/infra/update-global.ts
 const XOPC_PACKAGE_NAME = "@xopcai/xopc";
 const GLOBAL_RENAME_PREFIX = ".";

package/dist/src/infra/update-lock.js

@@ -1,9 +1,9 @@
-import { init_write_file_atomic, writeTextAtomic } from "./write-file-atomic.js";
 import { init_paths_state, resolveUpdateLockPath } from "../config/paths-state.js";
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
-import { mkdir, readFile, unlink } from "node:fs/promises";
+import { init_write_file_atomic, writeTextAtomic } from "./write-file-atomic.js";
 import { dirname } from "node:path";
+import { mkdir, readFile, unlink } from "node:fs/promises";
 //#region src/infra/update-lock.ts
 init_write_file_atomic();
 init_paths_state();

package/dist/src/infra/update-restart.js

@@ -1,6 +1,6 @@
-import { init_paths, resolveConfigPath } from "../config/paths.js";
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
+import { init_paths, resolveConfigPath } from "../config/paths.js";
 import { init_loader, loadConfig } from "../config/loader.js";
 import { isRestartEnabled } from "../config/commands.flags.js";
 import { resolveGatewayService } from "../daemon/service.js";