@xopcai/xopc 0.0.115 → 0.0.117

package/dist/src/gateway/hono/routes/config-patch/agents.js.map

@@ -1 +1 @@
-{"version":3,"file":"agents.js","names":[],"sources":["../../../../../../src/gateway/hono/routes/config-patch/agents.ts"],"sourcesContent":["/**\n * `PATCH /api/config` — `body.agents.defaults.*` section.\n *\n * Mutates `config.agents.defaults` in place to match the patch body. All\n * branches are field-by-field \"if undefined skip, if null delete, else\n * coerce/validate then assign\" so the web UI can clear individual settings\n * with `{ field: null }` without rewriting the rest.\n *\n * Was 660 lines inlined in `config.ts` (40% of the route handler) — extracted\n * so the dispatcher can chain section patchers instead of being a single 1600\n * -line if-else cascade.\n *\n * **No early returns / errors.** This section never rejects the patch; out-of\n * -range numbers and unrecognized strings are silently dropped (preserves\n * pre-extraction behavior so the route stays a \"best-effort merge\").\n */\nimport type { Config } from '../../../../config/schema.js';\nimport { isMaskedSecretPatchValue } from '../../lib/mask-secret-length.js';\nimport {\n  normalizePatchAgentImageGenerationModel,\n  normalizePatchAgentModel,\n  normalizePatchTypedModels,\n} from '../../lib/agent-model.js';\n\nexport function applyAgentsPatch(config: Config, body: any): void {\n  if (!body.agents?.defaults) return;\n\n  if (!config.agents) config.agents = { defaults: { workspace: '~/.xopc/workspace', maxTokens: 8192, temperature: 0.7, maxToolIterations: 20, maxRequestsPerTurn: 50, maxToolFailuresPerTurn: 3, thinkingDefault: 'medium', reasoningDefault: 'stream', verboseDefault: 'full' } };\n  if (!config.agents.defaults) config.agents.defaults = {} as any;\n\n  if (body.agents.defaults.maxTokens !== undefined) {\n    config.agents.defaults.maxTokens = body.agents.defaults.maxTokens;\n  }\n  if (body.agents.defaults.temperature !== undefined) {\n    config.agents.defaults.temperature = body.agents.defaults.temperature;\n  }\n  if (body.agents.defaults.maxToolIterations !== undefined) {\n    config.agents.defaults.maxToolIterations = body.agents.defaults.maxToolIterations;\n  }\n  if (body.agents.defaults.workspace !== undefined) {\n    config.agents.defaults.workspace = body.agents.defaults.workspace;\n  }\n  if (body.agents.defaults.thinkingDefault !== undefined) {\n    config.agents.defaults.thinkingDefault = body.agents.defaults.thinkingDefault;\n  }\n  if (body.agents.defaults.reasoningDefault !== undefined) {\n    config.agents.defaults.reasoningDefault = body.agents.defaults.reasoningDefault;\n  }\n  if (body.agents.defaults.verboseDefault !== undefined) {\n    config.agents.defaults.verboseDefault = body.agents.defaults.verboseDefault;\n  }\n  if (body.agents.defaults.imageModel !== undefined) {\n    const v = body.agents.defaults.imageModel;\n    if (v === null) {\n      delete (config.agents.defaults as Record<string, unknown>).imageModel;\n    } else {\n      const normalized = normalizePatchAgentModel(v);\n      if (normalized === undefined) {\n        delete (config.agents.defaults as Record<string, unknown>).imageModel;\n      } else {\n        config.agents.defaults.imageModel = normalized as Config['agents']['defaults']['imageModel'];\n      }\n    }\n  }\n  if (body.agents.defaults.imageGenerationModel !== undefined) {\n    const v = body.agents.defaults.imageGenerationModel;\n    if (v === null) {\n      delete (config.agents.defaults as Record<string, unknown>).imageGenerationModel;\n    } else {\n      const normalized = normalizePatchAgentImageGenerationModel(v);\n      if (normalized === undefined) {\n        delete (config.agents.defaults as Record<string, unknown>).imageGenerationModel;\n      } else {\n        config.agents.defaults.imageGenerationModel =\n          normalized as Config['agents']['defaults']['imageGenerationModel'];\n      }\n    }\n  }\n  if (body.agents.defaults.mediaMaxMb !== undefined) {\n    const v = body.agents.defaults.mediaMaxMb;\n    if (v === null) {\n      delete (config.agents.defaults as Record<string, unknown>).mediaMaxMb;\n    } else {\n      const n = typeof v === 'number' ? v : Number(v);\n      if (!Number.isNaN(n) && n > 0) {\n        config.agents.defaults.mediaMaxMb = n;\n      }\n    }\n  }\n  if (body.agents.defaults.browser !== undefined) {\n    const b = body.agents.defaults.browser;\n    if (b === null) {\n      delete (config.agents.defaults as Record<string, unknown>).browser;\n    } else if (typeof b === 'object' && !Array.isArray(b)) {\n      const br = b as Record<string, unknown>;\n      if (!config.agents.defaults.browser) {\n        config.agents.defaults.browser = { enabled: false, headless: false };\n      }\n      const target = config.agents.defaults.browser as Record<string, unknown>;\n      if (br.enabled !== undefined) {\n        if (br.enabled === null) delete target.enabled;\n        else target.enabled = Boolean(br.enabled);\n      }\n      if (br.headless !== undefined) {\n        if (br.headless === null) delete target.headless;\n        else target.headless = Boolean(br.headless);\n      }\n      if (br.allowPrivateUrls !== undefined) {\n        if (br.allowPrivateUrls === null) delete target.allowPrivateUrls;\n        else target.allowPrivateUrls = Boolean(br.allowPrivateUrls);\n      }\n      if (br.commandTimeout !== undefined) {\n        if (br.commandTimeout === null) {\n          delete target.commandTimeout;\n        } else if (typeof br.commandTimeout === 'number' && Number.isFinite(br.commandTimeout)) {\n          const n = Math.floor(br.commandTimeout);\n          if (n >= 5 && n <= 900) {\n            target.commandTimeout = n;\n          }\n        }\n      }\n      if (br.backend !== undefined) {\n        if (br.backend === null || br.backend === '' || br.backend === 'extension') {\n          delete target.backend;\n        } else if (\n          br.backend === 'local' ||\n          br.backend === 'cdp' ||\n          br.backend === 'cloud' ||\n          br.backend === 'cloakbrowser'\n        ) {\n          target.backend = br.backend;\n        }\n      }\n      if (br.cloudProvider !== undefined) {\n        if (br.cloudProvider === null || br.cloudProvider === '') {\n          delete target.cloudProvider;\n        } else if (br.cloudProvider === 'browserbase' || br.cloudProvider === 'browser-use') {\n          target.cloudProvider = br.cloudProvider;\n        }\n      }\n      if (br.cloud !== undefined) {\n        if (br.cloud === null) {\n          delete target.cloud;\n        } else if (typeof br.cloud === 'object' && !Array.isArray(br.cloud)) {\n          const cloudPatch = br.cloud as Record<string, unknown>;\n          const existingCloud =\n            target.cloud && typeof target.cloud === 'object' && !Array.isArray(target.cloud)\n              ? (target.cloud as Record<string, unknown>)\n              : {};\n          const cloudTarget: Record<string, unknown> = { ...existingCloud };\n          if (cloudPatch.apiKey !== undefined) {\n            if (cloudPatch.apiKey === null || cloudPatch.apiKey === '') {\n              delete cloudTarget.apiKey;\n            } else if (isMaskedSecretPatchValue(String(cloudPatch.apiKey))) {\n              // Keep the existing stored key when the web UI sends the masked sentinel.\n            } else if (typeof cloudPatch.apiKey === 'string') {\n              cloudTarget.apiKey = cloudPatch.apiKey.trim();\n            }\n          }\n          for (const key of ['projectId', 'region']) {\n            const value = cloudPatch[key];\n            if (value === null || value === '') {\n              delete cloudTarget[key];\n            } else if (typeof value === 'string' && value.trim()) {\n              cloudTarget[key] = value.trim();\n            }\n          }\n          if (Object.keys(cloudTarget).length > 0) {\n            target.cloud = cloudTarget;\n          } else {\n            delete target.cloud;\n          }\n        }\n      }\n      if (br.cdpUrl !== undefined) {\n        if (br.cdpUrl === null || br.cdpUrl === '') {\n          delete target.cdpUrl;\n        } else if (typeof br.cdpUrl === 'string') {\n          target.cdpUrl = br.cdpUrl.trim();\n        }\n      }\n      if (br.extension !== undefined) {\n        if (br.extension === null) {\n          delete target.extension;\n        } else if (typeof br.extension === 'object' && !Array.isArray(br.extension)) {\n          const ext = br.extension as Record<string, unknown>;\n          const extTarget: Record<string, unknown> = {};\n          if (ext.port === null || ext.port === '') {\n            // explicit clear: leave unset (consumers fall back to default)\n          } else if (typeof ext.port === 'number' && ext.port >= 1024 && ext.port <= 65535) {\n            extTarget.port = Math.floor(ext.port);\n          }\n          if (ext.host === null || ext.host === '') {\n            // explicit clear\n          } else if (typeof ext.host === 'string' && ext.host.trim()) {\n            extTarget.host = ext.host.trim();\n          }\n          if (\n            ext.connectionTimeout === null ||\n            ext.connectionTimeout === ''\n          ) {\n            // explicit clear\n          } else if (\n            typeof ext.connectionTimeout === 'number' &&\n            Number.isFinite(ext.connectionTimeout) &&\n            ext.connectionTimeout >= 1000\n          ) {\n            extTarget.connectionTimeout = Math.floor(ext.connectionTimeout);\n          }\n          if (Object.keys(extTarget).length > 0) {\n            target.extension = extTarget;\n          } else {\n            delete target.extension;\n          }\n        }\n      }\n      if (br.cloakbrowser !== undefined) {\n        if (br.cloakbrowser === null) {\n          delete target.cloakbrowser;\n        } else if (typeof br.cloakbrowser === 'object' && !Array.isArray(br.cloakbrowser)) {\n          const cloakbrowserPatch = br.cloakbrowser as Record<string, unknown>;\n          const cloakbrowserTarget: Record<string, unknown> = {};\n          if (typeof cloakbrowserPatch.keepOpen === 'boolean') {\n            cloakbrowserTarget.keepOpen = cloakbrowserPatch.keepOpen;\n          }\n          if (typeof cloakbrowserPatch.temporaryProfile === 'boolean') {\n            cloakbrowserTarget.temporaryProfile = cloakbrowserPatch.temporaryProfile;\n          }\n          for (const key of ['cacheDir', 'binaryPath', 'timezone', 'locale', 'webrtcIp', 'fingerprintPlatform']) {\n            const value = cloakbrowserPatch[key];\n            if (typeof value === 'string' && value.trim()) {\n              cloakbrowserTarget[key] = value.trim();\n            }\n          }\n          if (\n            Array.isArray(cloakbrowserPatch.extraArgs) &&\n            cloakbrowserPatch.extraArgs.every((value) => typeof value === 'string')\n          ) {\n            cloakbrowserTarget.extraArgs = cloakbrowserPatch.extraArgs;\n          }\n          if (Object.keys(cloakbrowserTarget).length > 0) {\n            target.cloakbrowser = cloakbrowserTarget;\n          } else {\n            delete target.cloakbrowser;\n          }\n        }\n      }\n      if (br.humanize !== undefined) {\n        if (br.humanize === null) {\n          delete target.humanize;\n        } else {\n          target.humanize = Boolean(br.humanize);\n        }\n      }\n      if (br.humanPreset !== undefined) {\n        if (br.humanPreset === null) {\n          delete target.humanPreset;\n        } else if (br.humanPreset === 'default' || br.humanPreset === 'careful') {\n          target.humanPreset = br.humanPreset;\n        }\n      }\n      if (br.dialogPolicy !== undefined) {\n        if (br.dialogPolicy === null) {\n          delete target.dialogPolicy;\n        } else if (\n          br.dialogPolicy === 'must_respond' ||\n          br.dialogPolicy === 'auto_dismiss' ||\n          br.dialogPolicy === 'auto_accept'\n        ) {\n          target.dialogPolicy = br.dialogPolicy;\n        }\n      }\n      if (br.dialogTimeoutSeconds !== undefined) {\n        if (br.dialogTimeoutSeconds === null) {\n          delete target.dialogTimeoutSeconds;\n        } else if (typeof br.dialogTimeoutSeconds === 'number' && Number.isFinite(br.dialogTimeoutSeconds)) {\n          const n = Math.floor(br.dialogTimeoutSeconds);\n          if (n >= 1 && n <= 86_400) {\n            target.dialogTimeoutSeconds = n;\n          }\n        }\n      }\n    }\n  }\n\n  const dPatch = body.agents.defaults as Record<string, unknown>;\n  const def = config.agents.defaults as Record<string, unknown>;\n\n  if (dPatch.maxTaskDurationMs !== undefined) {\n    const v = dPatch.maxTaskDurationMs;\n    if (v === null) {\n      delete def.maxTaskDurationMs;\n    } else if (typeof v === 'number' && Number.isFinite(v)) {\n      const ms = Math.floor(v);\n      if (ms >= 60_000 && ms <= 14_400_000) {\n        def.maxTaskDurationMs = ms;\n      }\n    }\n  }\n  if (dPatch.maxRequestsPerTurn !== undefined) {\n    const v = dPatch.maxRequestsPerTurn;\n    if (v === null) {\n      delete def.maxRequestsPerTurn;\n    } else if (typeof v === 'number' && Number.isFinite(v)) {\n      const n = Math.floor(v);\n      if (n >= 10 && n <= 200) {\n        def.maxRequestsPerTurn = n;\n      }\n    }\n  }\n  if (dPatch.maxToolFailuresPerTurn !== undefined) {\n    const v = dPatch.maxToolFailuresPerTurn;\n    if (v === null) {\n      delete def.maxToolFailuresPerTurn;\n    } else if (typeof v === 'number' && Number.isFinite(v)) {\n      const n = Math.floor(v);\n      if (n >= 1 && n <= 20) {\n        def.maxToolFailuresPerTurn = n;\n      }\n    }\n  }\n\n  if (dPatch.compaction !== undefined) {\n    const c = dPatch.compaction;\n    if (c === null) {\n      delete def.compaction;\n    } else if (typeof c === 'object' && !Array.isArray(c)) {\n      const p = c as Record<string, unknown>;\n      if (!def.compaction || typeof def.compaction !== 'object') {\n        def.compaction = {};\n      }\n      const t = def.compaction as Record<string, unknown>;\n      if (p.enabled !== undefined) t.enabled = Boolean(p.enabled);\n      if (p.mode === 'default' || p.mode === 'safeguard') t.mode = p.mode;\n      if (typeof p.reserveTokens === 'number' && Number.isFinite(p.reserveTokens)) {\n        t.reserveTokens = Math.floor(p.reserveTokens);\n      }\n      if (typeof p.triggerThreshold === 'number' && Number.isFinite(p.triggerThreshold)) {\n        const x = p.triggerThreshold;\n        if (x >= 0.5 && x <= 0.95) t.triggerThreshold = x;\n      }\n      if (typeof p.minMessagesBeforeCompact === 'number' && Number.isFinite(p.minMessagesBeforeCompact)) {\n        t.minMessagesBeforeCompact = Math.floor(p.minMessagesBeforeCompact);\n      }\n      if (typeof p.keepRecentMessages === 'number' && Number.isFinite(p.keepRecentMessages)) {\n        t.keepRecentMessages = Math.floor(p.keepRecentMessages);\n      }\n      if (typeof p.evictionWindow === 'number' && Number.isFinite(p.evictionWindow)) {\n        const x = p.evictionWindow;\n        if (x >= 0.1 && x <= 0.5) t.evictionWindow = x;\n      }\n      if (typeof p.retentionWindow === 'number' && Number.isFinite(p.retentionWindow)) {\n        const n = Math.floor(p.retentionWindow);\n        if (n >= 3 && n <= 20) t.retentionWindow = n;\n      }\n    }\n  }\n\n  if (dPatch.pruning !== undefined) {\n    const c = dPatch.pruning;\n    if (c === null) {\n      delete def.pruning;\n    } else if (typeof c === 'object' && !Array.isArray(c)) {\n      const p = c as Record<string, unknown>;\n      if (!def.pruning || typeof def.pruning !== 'object') {\n        def.pruning = {};\n      }\n      const t = def.pruning as Record<string, unknown>;\n      if (p.enabled !== undefined) t.enabled = Boolean(p.enabled);\n      if (typeof p.maxToolResultChars === 'number' && Number.isFinite(p.maxToolResultChars)) {\n        t.maxToolResultChars = Math.floor(p.maxToolResultChars);\n      }\n      if (typeof p.headKeepRatio === 'number' && Number.isFinite(p.headKeepRatio)) {\n        t.headKeepRatio = p.headKeepRatio;\n      }\n      if (typeof p.tailKeepRatio === 'number' && Number.isFinite(p.tailKeepRatio)) {\n        t.tailKeepRatio = p.tailKeepRatio;\n      }\n    }\n  }\n\n  if (dPatch.memory !== undefined) {\n    const c = dPatch.memory;\n    if (c === null) {\n      delete def.memory;\n    } else if (typeof c === 'object' && !Array.isArray(c)) {\n      const p = c as Record<string, unknown>;\n      if (!def.memory || typeof def.memory !== 'object') {\n        def.memory = {};\n      }\n      const t = def.memory as Record<string, unknown>;\n      if (p.enabled !== undefined) {\n        if (p.enabled === null) delete t.enabled;\n        else t.enabled = Boolean(p.enabled);\n      }\n      if (p.useEnhancedSystem !== undefined) {\n        if (p.useEnhancedSystem === null) delete t.useEnhancedSystem;\n        else t.useEnhancedSystem = Boolean(p.useEnhancedSystem);\n      }\n      if (p.userProfileEnabled !== undefined) {\n        if (p.userProfileEnabled === null) delete t.userProfileEnabled;\n        else t.userProfileEnabled = Boolean(p.userProfileEnabled);\n      }\n      if (p.memoryCharLimit !== undefined) {\n        if (p.memoryCharLimit === null) delete t.memoryCharLimit;\n        else if (typeof p.memoryCharLimit === 'number' && p.memoryCharLimit > 0) {\n          t.memoryCharLimit = Math.floor(p.memoryCharLimit);\n        }\n      }\n      if (p.userCharLimit !== undefined) {\n        if (p.userCharLimit === null) delete t.userCharLimit;\n        else if (typeof p.userCharLimit === 'number' && p.userCharLimit > 0) {\n          t.userCharLimit = Math.floor(p.userCharLimit);\n        }\n      }\n      if (p.provider === 'none' || p.provider === 'stub') {\n        t.provider = p.provider;\n      } else if (p.provider === null) {\n        delete t.provider;\n      }\n      if (p.injectionFrequency === 'every-turn' || p.injectionFrequency === 'first-turn') {\n        t.injectionFrequency = p.injectionFrequency;\n      } else if (p.injectionFrequency === null) {\n        delete t.injectionFrequency;\n      }\n      if (p.contextCadence !== undefined) {\n        if (p.contextCadence === null) delete t.contextCadence;\n        else if (typeof p.contextCadence === 'number' && p.contextCadence >= 1) {\n          t.contextCadence = Math.floor(p.contextCadence);\n        }\n      }\n      if (p.dialecticCadence !== undefined) {\n        if (p.dialecticCadence === null) delete t.dialecticCadence;\n        else if (typeof p.dialecticCadence === 'number' && p.dialecticCadence >= 1) {\n          t.dialecticCadence = Math.floor(p.dialecticCadence);\n        }\n      }\n\n      // Dreaming (schemaless patch): agents.defaults.memory.dreaming\n      if (p.dreaming !== undefined) {\n        const d0 = p.dreaming;\n        if (d0 === null) {\n          delete (t as { dreaming?: unknown }).dreaming;\n        } else if (typeof d0 === 'object' && d0 !== null && !Array.isArray(d0)) {\n          if (!('dreaming' in t) || typeof (t as { dreaming?: unknown }).dreaming !== 'object') {\n            (t as { dreaming?: Record<string, unknown> }).dreaming = {};\n          }\n          const dt = (t as { dreaming: Record<string, unknown> }).dreaming;\n          const dp = d0 as Record<string, unknown>;\n\n          if (dp.enabled !== undefined) {\n            if (dp.enabled === null) delete dt.enabled;\n            else dt.enabled = Boolean(dp.enabled);\n          }\n          if (dp.frequency !== undefined) {\n            const v = dp.frequency;\n            if (v === null || v === '') delete dt.frequency;\n            else if (typeof v === 'string') dt.frequency = v;\n          }\n          if (dp.timezone !== undefined) {\n            const v = dp.timezone;\n            if (v === null || v === '') delete dt.timezone;\n            else if (typeof v === 'string') dt.timezone = v;\n          }\n\n          // Accept either `phases.deep` or `deep`.\n          if (dp.phases !== undefined || dp.deep !== undefined) {\n            if (!('phases' in dt) || typeof (dt as { phases?: unknown }).phases !== 'object' || (dt as { phases?: unknown }).phases === null) {\n              dt.phases = {};\n            }\n            const phases = (dt as { phases: Record<string, unknown> }).phases;\n            if (!('deep' in phases) || typeof phases.deep !== 'object' || phases.deep === null) {\n              phases.deep = {};\n            }\n            const deep = phases.deep as Record<string, unknown>;\n\n            const deepPatchRaw =\n              typeof dp.phases === 'object' && dp.phases !== null && !Array.isArray(dp.phases)\n                ? (dp.phases as Record<string, unknown>).deep\n                : dp.deep;\n            const deepPatch =\n              typeof deepPatchRaw === 'object' && deepPatchRaw !== null && !Array.isArray(deepPatchRaw)\n                ? (deepPatchRaw as Record<string, unknown>)\n                : null;\n\n            if (deepPatch) {\n              if (deepPatch.enabled !== undefined) {\n                if (deepPatch.enabled === null) delete deep.enabled;\n                else deep.enabled = Boolean(deepPatch.enabled);\n              }\n              if (deepPatch.minScore !== undefined) {\n                const v = deepPatch.minScore;\n                if (v === null) delete deep.minScore;\n                else if (typeof v === 'number' && Number.isFinite(v)) deep.minScore = v;\n              }\n              if (deepPatch.minRecallCount !== undefined) {\n                const v = deepPatch.minRecallCount;\n                if (v === null) delete deep.minRecallCount;\n                else if (typeof v === 'number' && Number.isFinite(v)) deep.minRecallCount = Math.floor(v);\n              }\n              if (deepPatch.limit !== undefined) {\n                const v = deepPatch.limit;\n                if (v === null) delete deep.limit;\n                else if (typeof v === 'number' && Number.isFinite(v)) deep.limit = Math.floor(v);\n              }\n            }\n          }\n        }\n      }\n    }\n  }\n\n  if (dPatch.sessionSearch !== undefined) {\n    const c = dPatch.sessionSearch;\n    if (c === null) {\n      delete def.sessionSearch;\n    } else if (typeof c === 'object' && !Array.isArray(c)) {\n      const p = c as Record<string, unknown>;\n      if (!def.sessionSearch || typeof def.sessionSearch !== 'object') {\n        def.sessionSearch = {};\n      }\n      const t = def.sessionSearch as Record<string, unknown>;\n      if (p.summaryModel !== undefined) {\n        if (p.summaryModel === null || p.summaryModel === '') {\n          delete t.summaryModel;\n        } else if (typeof p.summaryModel === 'string') {\n          t.summaryModel = p.summaryModel;\n        }\n      }\n    }\n  }\n\n  if (dPatch.backgroundReview !== undefined) {\n    const c = dPatch.backgroundReview;\n    if (c === null) {\n      delete def.backgroundReview;\n    } else if (typeof c === 'object' && !Array.isArray(c)) {\n      const p = c as Record<string, unknown>;\n      if (!def.backgroundReview || typeof def.backgroundReview !== 'object') {\n        def.backgroundReview = {};\n      }\n      const t = def.backgroundReview as Record<string, unknown>;\n      if (p.enabled !== undefined) {\n        if (p.enabled === null) delete t.enabled;\n        else t.enabled = Boolean(p.enabled);\n      }\n      if (p.memoryNudgeInterval !== undefined) {\n        if (p.memoryNudgeInterval === null) delete t.memoryNudgeInterval;\n        else if (typeof p.memoryNudgeInterval === 'number' && p.memoryNudgeInterval >= 0) {\n          t.memoryNudgeInterval = Math.floor(p.memoryNudgeInterval);\n        }\n      }\n      if (p.skillNudgeInterval !== undefined) {\n        if (p.skillNudgeInterval === null) delete t.skillNudgeInterval;\n        else if (typeof p.skillNudgeInterval === 'number' && p.skillNudgeInterval >= 0) {\n          t.skillNudgeInterval = Math.floor(p.skillNudgeInterval);\n        }\n      }\n      if (p.maxToolRounds !== undefined) {\n        if (p.maxToolRounds === null) delete t.maxToolRounds;\n        else if (typeof p.maxToolRounds === 'number' && p.maxToolRounds >= 1 && p.maxToolRounds <= 32) {\n          t.maxToolRounds = Math.floor(p.maxToolRounds);\n        }\n      }\n      if (p.maxHistoryMessages !== undefined) {\n        if (p.maxHistoryMessages === null) delete t.maxHistoryMessages;\n        else if (typeof p.maxHistoryMessages === 'number' && p.maxHistoryMessages >= 10 && p.maxHistoryMessages <= 200) {\n          t.maxHistoryMessages = Math.floor(p.maxHistoryMessages);\n        }\n      }\n      if (p.maxDurationMs !== undefined) {\n        if (p.maxDurationMs === null) delete t.maxDurationMs;\n        else if (typeof p.maxDurationMs === 'number' && p.maxDurationMs >= 30_000 && p.maxDurationMs <= 600_000) {\n          t.maxDurationMs = Math.floor(p.maxDurationMs);\n        }\n      }\n    }\n  }\n\n  if (dPatch.webExtract !== undefined) {\n    const c = dPatch.webExtract;\n    if (c === null) {\n      delete def.webExtract;\n    } else if (typeof c === 'object' && !Array.isArray(c)) {\n      const p = c as Record<string, unknown>;\n      if (!def.webExtract || typeof def.webExtract !== 'object') {\n        def.webExtract = {};\n      }\n      const t = def.webExtract as Record<string, unknown>;\n      if (p.model !== undefined) {\n        if (p.model === null || p.model === '') {\n          delete t.model;\n        } else if (typeof p.model === 'string') {\n          t.model = p.model;\n        }\n      }\n      if (p.maxLength !== undefined) {\n        if (p.maxLength === null) delete t.maxLength;\n        else if (typeof p.maxLength === 'number' && p.maxLength > 0) {\n          t.maxLength = p.maxLength;\n        }\n      }\n    }\n  }\n\n  if (dPatch.delegate !== undefined) {\n    const c = dPatch.delegate;\n    if (c === null) {\n      delete def.delegate;\n    } else if (typeof c === 'object' && !Array.isArray(c)) {\n      const p = c as Record<string, unknown>;\n      if (!def.delegate || typeof def.delegate !== 'object') {\n        def.delegate = {};\n      }\n      const t = def.delegate as Record<string, unknown>;\n      if (p.enabled !== undefined) {\n        if (p.enabled === null) delete t.enabled;\n        else t.enabled = Boolean(p.enabled);\n      }\n    }\n  }\n\n  if (dPatch.executeCode !== undefined) {\n    const c = dPatch.executeCode;\n    if (c === null) {\n      delete def.executeCode;\n    } else if (typeof c === 'object' && !Array.isArray(c)) {\n      const p = c as Record<string, unknown>;\n      if (!def.executeCode || typeof def.executeCode !== 'object') {\n        def.executeCode = {};\n      }\n      const t = def.executeCode as Record<string, unknown>;\n      if (p.enabled !== undefined) {\n        if (p.enabled === null) delete t.enabled;\n        else t.enabled = Boolean(p.enabled);\n      }\n    }\n  }\n\n  if (dPatch.systemPromptOverride !== undefined) {\n    const v = dPatch.systemPromptOverride;\n    if (v === null || v === '') {\n      delete def.systemPromptOverride;\n    } else if (typeof v === 'string') {\n      def.systemPromptOverride = v;\n    }\n  }\n\n  if (dPatch.skills !== undefined) {\n    const v = dPatch.skills;\n    if (v === null) {\n      delete def.skills;\n    } else if (Array.isArray(v) && v.every((x) => typeof x === 'string')) {\n      def.skills = v;\n    }\n  }\n\n  if (dPatch.models !== undefined) {\n    if (!def.models || typeof def.models !== 'object') {\n      def.models = {};\n    }\n    const modelsTarget = def.models as NonNullable<Config['agents']['defaults']['models']>;\n    const modelPatch = dPatch.models;\n    if (modelPatch === null) {\n      delete def.models;\n    } else if (typeof modelPatch === 'object' && !Array.isArray(modelPatch)) {\n      const p = modelPatch as Record<string, unknown>;\n      if (Object.hasOwn(p, 'chat')) {\n        const chat = p.chat;\n        if (chat === null) {\n          delete modelsTarget.chat;\n        } else {\n          const normalizedChat = normalizePatchAgentModel(chat);\n          if (normalizedChat === undefined) {\n            delete modelsTarget.chat;\n          } else {\n            modelsTarget.chat = normalizedChat;\n          }\n        }\n      }\n      if (Object.hasOwn(p, 'roles')) {\n        const normalized = normalizePatchTypedModels({ roles: p.roles });\n        if (normalized === undefined) {\n          // skip invalid shape\n        } else if (normalized === null) {\n          delete modelsTarget.roles;\n        } else {\n          modelsTarget.roles = normalized;\n        }\n      }\n    } else {\n      const normalized = normalizePatchTypedModels(modelPatch);\n      if (normalized === undefined) {\n        // skip invalid shape\n      } else if (normalized === null) {\n        delete modelsTarget.roles;\n      } else {\n        modelsTarget.roles = normalized;\n      }\n    }\n    if (def.models && Object.keys(def.models).length === 0) {\n      delete def.models;\n    }\n  }\n\n  if (dPatch.tools !== undefined) {\n    const t0 = dPatch.tools;\n    if (t0 === null) {\n      delete def.tools;\n    } else if (typeof t0 === 'object' && !Array.isArray(t0)) {\n      const p = t0 as { disable?: unknown };\n      if (!def.tools || typeof def.tools !== 'object') {\n        def.tools = {};\n      }\n      const t = def.tools as { disable?: string[] };\n      if (p.disable !== undefined) {\n        if (p.disable === null || (Array.isArray(p.disable) && p.disable.length === 0)) {\n          delete t.disable;\n        } else if (Array.isArray(p.disable) && p.disable.every((x) => typeof x === 'string')) {\n          t.disable = p.disable;\n        }\n      }\n    }\n  }\n\n  if (dPatch.params !== undefined) {\n    const v = dPatch.params;\n    if (v === null) {\n      delete def.params;\n    } else if (typeof v === 'object' && !Array.isArray(v) && v !== null) {\n      def.params = v as Record<string, unknown>;\n    }\n  }\n}\n"],"mappings":";;;AAwBA,SAAgB,iBAAiB,QAAgB,MAAiB;AAChE,KAAI,CAAC,KAAK,QAAQ,SAAU;AAE5B,KAAI,CAAC,OAAO,OAAQ,QAAO,SAAS,EAAE,UAAU;EAAE,WAAW;EAAqB,WAAW;EAAM,aAAa;EAAK,mBAAmB;EAAI,oBAAoB;EAAI,wBAAwB;EAAG,iBAAiB;EAAU,kBAAkB;EAAU,gBAAgB;EAAQ,EAAE;AAChR,KAAI,CAAC,OAAO,OAAO,SAAU,QAAO,OAAO,WAAW,EAAE;AAExD,KAAI,KAAK,OAAO,SAAS,cAAc,KAAA,EACrC,QAAO,OAAO,SAAS,YAAY,KAAK,OAAO,SAAS;AAE1D,KAAI,KAAK,OAAO,SAAS,gBAAgB,KAAA,EACvC,QAAO,OAAO,SAAS,cAAc,KAAK,OAAO,SAAS;AAE5D,KAAI,KAAK,OAAO,SAAS,sBAAsB,KAAA,EAC7C,QAAO,OAAO,SAAS,oBAAoB,KAAK,OAAO,SAAS;AAElE,KAAI,KAAK,OAAO,SAAS,cAAc,KAAA,EACrC,QAAO,OAAO,SAAS,YAAY,KAAK,OAAO,SAAS;AAE1D,KAAI,KAAK,OAAO,SAAS,oBAAoB,KAAA,EAC3C,QAAO,OAAO,SAAS,kBAAkB,KAAK,OAAO,SAAS;AAEhE,KAAI,KAAK,OAAO,SAAS,qBAAqB,KAAA,EAC5C,QAAO,OAAO,SAAS,mBAAmB,KAAK,OAAO,SAAS;AAEjE,KAAI,KAAK,OAAO,SAAS,mBAAmB,KAAA,EAC1C,QAAO,OAAO,SAAS,iBAAiB,KAAK,OAAO,SAAS;AAE/D,KAAI,KAAK,OAAO,SAAS,eAAe,KAAA,GAAW;EACjD,MAAM,IAAI,KAAK,OAAO,SAAS;AAC/B,MAAI,MAAM,KACR,QAAQ,OAAO,OAAO,SAAqC;OACtD;GACL,MAAM,aAAa,yBAAyB,EAAE;AAC9C,OAAI,eAAe,KAAA,EACjB,QAAQ,OAAO,OAAO,SAAqC;OAE3D,QAAO,OAAO,SAAS,aAAa;;;AAI1C,KAAI,KAAK,OAAO,SAAS,yBAAyB,KAAA,GAAW;EAC3D,MAAM,IAAI,KAAK,OAAO,SAAS;AAC/B,MAAI,MAAM,KACR,QAAQ,OAAO,OAAO,SAAqC;OACtD;GACL,MAAM,aAAa,wCAAwC,EAAE;AAC7D,OAAI,eAAe,KAAA,EACjB,QAAQ,OAAO,OAAO,SAAqC;OAE3D,QAAO,OAAO,SAAS,uBACrB;;;AAIR,KAAI,KAAK,OAAO,SAAS,eAAe,KAAA,GAAW;EACjD,MAAM,IAAI,KAAK,OAAO,SAAS;AAC/B,MAAI,MAAM,KACR,QAAQ,OAAO,OAAO,SAAqC;OACtD;GACL,MAAM,IAAI,OAAO,MAAM,WAAW,IAAI,OAAO,EAAE;AAC/C,OAAI,CAAC,OAAO,MAAM,EAAE,IAAI,IAAI,EAC1B,QAAO,OAAO,SAAS,aAAa;;;AAI1C,KAAI,KAAK,OAAO,SAAS,YAAY,KAAA,GAAW;EAC9C,MAAM,IAAI,KAAK,OAAO,SAAS;AAC/B,MAAI,MAAM,KACR,QAAQ,OAAO,OAAO,SAAqC;WAClD,OAAO,MAAM,YAAY,CAAC,MAAM,QAAQ,EAAE,EAAE;GACrD,MAAM,KAAK;AACX,OAAI,CAAC,OAAO,OAAO,SAAS,QAC1B,QAAO,OAAO,SAAS,UAAU;IAAE,SAAS;IAAO,UAAU;IAAO;GAEtE,MAAM,SAAS,OAAO,OAAO,SAAS;AACtC,OAAI,GAAG,YAAY,KAAA,EACjB,KAAI,GAAG,YAAY,KAAM,QAAO,OAAO;OAClC,QAAO,UAAU,QAAQ,GAAG,QAAQ;AAE3C,OAAI,GAAG,aAAa,KAAA,EAClB,KAAI,GAAG,aAAa,KAAM,QAAO,OAAO;OACnC,QAAO,WAAW,QAAQ,GAAG,SAAS;AAE7C,OAAI,GAAG,qBAAqB,KAAA,EAC1B,KAAI,GAAG,qBAAqB,KAAM,QAAO,OAAO;OAC3C,QAAO,mBAAmB,QAAQ,GAAG,iBAAiB;AAE7D,OAAI,GAAG,mBAAmB,KAAA;QACpB,GAAG,mBAAmB,KACxB,QAAO,OAAO;aACL,OAAO,GAAG,mBAAmB,YAAY,OAAO,SAAS,GAAG,eAAe,EAAE;KACtF,MAAM,IAAI,KAAK,MAAM,GAAG,eAAe;AACvC,SAAI,KAAK,KAAK,KAAK,IACjB,QAAO,iBAAiB;;;AAI9B,OAAI,GAAG,YAAY,KAAA;QACb,GAAG,YAAY,QAAQ,GAAG,YAAY,MAAM,GAAG,YAAY,YAC7D,QAAO,OAAO;aAEd,GAAG,YAAY,WACf,GAAG,YAAY,SACf,GAAG,YAAY,WACf,GAAG,YAAY,eAEf,QAAO,UAAU,GAAG;;AAGxB,OAAI,GAAG,kBAAkB,KAAA;QACnB,GAAG,kBAAkB,QAAQ,GAAG,kBAAkB,GACpD,QAAO,OAAO;aACL,GAAG,kBAAkB,iBAAiB,GAAG,kBAAkB,cACpE,QAAO,gBAAgB,GAAG;;AAG9B,OAAI,GAAG,UAAU,KAAA;QACX,GAAG,UAAU,KACf,QAAO,OAAO;aACL,OAAO,GAAG,UAAU,YAAY,CAAC,MAAM,QAAQ,GAAG,MAAM,EAAE;KACnE,MAAM,aAAa,GAAG;KAKtB,MAAM,cAAuC,EAAE,GAH7C,OAAO,SAAS,OAAO,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,OAAO,MAAM,GAC3E,OAAO,QACR,EAAE,EACyD;AACjE,SAAI,WAAW,WAAW,KAAA;UACpB,WAAW,WAAW,QAAQ,WAAW,WAAW,GACtD,QAAO,YAAY;eACV,yBAAyB,OAAO,WAAW,OAAO,CAAC,EAAE,YAErD,OAAO,WAAW,WAAW,SACtC,aAAY,SAAS,WAAW,OAAO,MAAM;;AAGjD,UAAK,MAAM,OAAO,CAAC,aAAa,SAAS,EAAE;MACzC,MAAM,QAAQ,WAAW;AACzB,UAAI,UAAU,QAAQ,UAAU,GAC9B,QAAO,YAAY;eACV,OAAO,UAAU,YAAY,MAAM,MAAM,CAClD,aAAY,OAAO,MAAM,MAAM;;AAGnC,SAAI,OAAO,KAAK,YAAY,CAAC,SAAS,EACpC,QAAO,QAAQ;SAEf,QAAO,OAAO;;;AAIpB,OAAI,GAAG,WAAW,KAAA;QACZ,GAAG,WAAW,QAAQ,GAAG,WAAW,GACtC,QAAO,OAAO;aACL,OAAO,GAAG,WAAW,SAC9B,QAAO,SAAS,GAAG,OAAO,MAAM;;AAGpC,OAAI,GAAG,cAAc,KAAA;QACf,GAAG,cAAc,KACnB,QAAO,OAAO;aACL,OAAO,GAAG,cAAc,YAAY,CAAC,MAAM,QAAQ,GAAG,UAAU,EAAE;KAC3E,MAAM,MAAM,GAAG;KACf,MAAM,YAAqC,EAAE;AAC7C,SAAI,IAAI,SAAS,QAAQ,IAAI,SAAS,IAAI,YAE/B,OAAO,IAAI,SAAS,YAAY,IAAI,QAAQ,QAAQ,IAAI,QAAQ,MACzE,WAAU,OAAO,KAAK,MAAM,IAAI,KAAK;AAEvC,SAAI,IAAI,SAAS,QAAQ,IAAI,SAAS,IAAI,YAE/B,OAAO,IAAI,SAAS,YAAY,IAAI,KAAK,MAAM,CACxD,WAAU,OAAO,IAAI,KAAK,MAAM;AAElC,SACE,IAAI,sBAAsB,QAC1B,IAAI,sBAAsB,IAC1B,YAGA,OAAO,IAAI,sBAAsB,YACjC,OAAO,SAAS,IAAI,kBAAkB,IACtC,IAAI,qBAAqB,IAEzB,WAAU,oBAAoB,KAAK,MAAM,IAAI,kBAAkB;AAEjE,SAAI,OAAO,KAAK,UAAU,CAAC,SAAS,EAClC,QAAO,YAAY;SAEnB,QAAO,OAAO;;;AAIpB,OAAI,GAAG,iBAAiB,KAAA;QAClB,GAAG,iBAAiB,KACtB,QAAO,OAAO;aACL,OAAO,GAAG,iBAAiB,YAAY,CAAC,MAAM,QAAQ,GAAG,aAAa,EAAE;KACjF,MAAM,oBAAoB,GAAG;KAC7B,MAAM,qBAA8C,EAAE;AACtD,SAAI,OAAO,kBAAkB,aAAa,UACxC,oBAAmB,WAAW,kBAAkB;AAElD,SAAI,OAAO,kBAAkB,qBAAqB,UAChD,oBAAmB,mBAAmB,kBAAkB;AAE1D,UAAK,MAAM,OAAO;MAAC;MAAY;MAAc;MAAY;MAAU;MAAY;MAAsB,EAAE;MACrG,MAAM,QAAQ,kBAAkB;AAChC,UAAI,OAAO,UAAU,YAAY,MAAM,MAAM,CAC3C,oBAAmB,OAAO,MAAM,MAAM;;AAG1C,SACE,MAAM,QAAQ,kBAAkB,UAAU,IAC1C,kBAAkB,UAAU,OAAO,UAAU,OAAO,UAAU,SAAS,CAEvE,oBAAmB,YAAY,kBAAkB;AAEnD,SAAI,OAAO,KAAK,mBAAmB,CAAC,SAAS,EAC3C,QAAO,eAAe;SAEtB,QAAO,OAAO;;;AAIpB,OAAI,GAAG,aAAa,KAAA,EAClB,KAAI,GAAG,aAAa,KAClB,QAAO,OAAO;OAEd,QAAO,WAAW,QAAQ,GAAG,SAAS;AAG1C,OAAI,GAAG,gBAAgB,KAAA;QACjB,GAAG,gBAAgB,KACrB,QAAO,OAAO;aACL,GAAG,gBAAgB,aAAa,GAAG,gBAAgB,UAC5D,QAAO,cAAc,GAAG;;AAG5B,OAAI,GAAG,iBAAiB,KAAA;QAClB,GAAG,iBAAiB,KACtB,QAAO,OAAO;aAEd,GAAG,iBAAiB,kBACpB,GAAG,iBAAiB,kBACpB,GAAG,iBAAiB,cAEpB,QAAO,eAAe,GAAG;;AAG7B,OAAI,GAAG,yBAAyB,KAAA;QAC1B,GAAG,yBAAyB,KAC9B,QAAO,OAAO;aACL,OAAO,GAAG,yBAAyB,YAAY,OAAO,SAAS,GAAG,qBAAqB,EAAE;KAClG,MAAM,IAAI,KAAK,MAAM,GAAG,qBAAqB;AAC7C,SAAI,KAAK,KAAK,KAAK,MACjB,QAAO,uBAAuB;;;;;CAOxC,MAAM,SAAS,KAAK,OAAO;CAC3B,MAAM,MAAM,OAAO,OAAO;AAE1B,KAAI,OAAO,sBAAsB,KAAA,GAAW;EAC1C,MAAM,IAAI,OAAO;AACjB,MAAI,MAAM,KACR,QAAO,IAAI;WACF,OAAO,MAAM,YAAY,OAAO,SAAS,EAAE,EAAE;GACtD,MAAM,KAAK,KAAK,MAAM,EAAE;AACxB,OAAI,MAAM,OAAU,MAAM,MACxB,KAAI,oBAAoB;;;AAI9B,KAAI,OAAO,uBAAuB,KAAA,GAAW;EAC3C,MAAM,IAAI,OAAO;AACjB,MAAI,MAAM,KACR,QAAO,IAAI;WACF,OAAO,MAAM,YAAY,OAAO,SAAS,EAAE,EAAE;GACtD,MAAM,IAAI,KAAK,MAAM,EAAE;AACvB,OAAI,KAAK,MAAM,KAAK,IAClB,KAAI,qBAAqB;;;AAI/B,KAAI,OAAO,2BAA2B,KAAA,GAAW;EAC/C,MAAM,IAAI,OAAO;AACjB,MAAI,MAAM,KACR,QAAO,IAAI;WACF,OAAO,MAAM,YAAY,OAAO,SAAS,EAAE,EAAE;GACtD,MAAM,IAAI,KAAK,MAAM,EAAE;AACvB,OAAI,KAAK,KAAK,KAAK,GACjB,KAAI,yBAAyB;;;AAKnC,KAAI,OAAO,eAAe,KAAA,GAAW;EACnC,MAAM,IAAI,OAAO;AACjB,MAAI,MAAM,KACR,QAAO,IAAI;WACF,OAAO,MAAM,YAAY,CAAC,MAAM,QAAQ,EAAE,EAAE;GACrD,MAAM,IAAI;AACV,OAAI,CAAC,IAAI,cAAc,OAAO,IAAI,eAAe,SAC/C,KAAI,aAAa,EAAE;GAErB,MAAM,IAAI,IAAI;AACd,OAAI,EAAE,YAAY,KAAA,EAAW,GAAE,UAAU,QAAQ,EAAE,QAAQ;AAC3D,OAAI,EAAE,SAAS,aAAa,EAAE,SAAS,YAAa,GAAE,OAAO,EAAE;AAC/D,OAAI,OAAO,EAAE,kBAAkB,YAAY,OAAO,SAAS,EAAE,cAAc,CACzE,GAAE,gBAAgB,KAAK,MAAM,EAAE,cAAc;AAE/C,OAAI,OAAO,EAAE,qBAAqB,YAAY,OAAO,SAAS,EAAE,iBAAiB,EAAE;IACjF,MAAM,IAAI,EAAE;AACZ,QAAI,KAAK,MAAO,KAAK,IAAM,GAAE,mBAAmB;;AAElD,OAAI,OAAO,EAAE,6BAA6B,YAAY,OAAO,SAAS,EAAE,yBAAyB,CAC/F,GAAE,2BAA2B,KAAK,MAAM,EAAE,yBAAyB;AAErE,OAAI,OAAO,EAAE,uBAAuB,YAAY,OAAO,SAAS,EAAE,mBAAmB,CACnF,GAAE,qBAAqB,KAAK,MAAM,EAAE,mBAAmB;AAEzD,OAAI,OAAO,EAAE,mBAAmB,YAAY,OAAO,SAAS,EAAE,eAAe,EAAE;IAC7E,MAAM,IAAI,EAAE;AACZ,QAAI,KAAK,MAAO,KAAK,GAAK,GAAE,iBAAiB;;AAE/C,OAAI,OAAO,EAAE,oBAAoB,YAAY,OAAO,SAAS,EAAE,gBAAgB,EAAE;IAC/E,MAAM,IAAI,KAAK,MAAM,EAAE,gBAAgB;AACvC,QAAI,KAAK,KAAK,KAAK,GAAI,GAAE,kBAAkB;;;;AAKjD,KAAI,OAAO,YAAY,KAAA,GAAW;EAChC,MAAM,IAAI,OAAO;AACjB,MAAI,MAAM,KACR,QAAO,IAAI;WACF,OAAO,MAAM,YAAY,CAAC,MAAM,QAAQ,EAAE,EAAE;GACrD,MAAM,IAAI;AACV,OAAI,CAAC,IAAI,WAAW,OAAO,IAAI,YAAY,SACzC,KAAI,UAAU,EAAE;GAElB,MAAM,IAAI,IAAI;AACd,OAAI,EAAE,YAAY,KAAA,EAAW,GAAE,UAAU,QAAQ,EAAE,QAAQ;AAC3D,OAAI,OAAO,EAAE,uBAAuB,YAAY,OAAO,SAAS,EAAE,mBAAmB,CACnF,GAAE,qBAAqB,KAAK,MAAM,EAAE,mBAAmB;AAEzD,OAAI,OAAO,EAAE,kBAAkB,YAAY,OAAO,SAAS,EAAE,cAAc,CACzE,GAAE,gBAAgB,EAAE;AAEtB,OAAI,OAAO,EAAE,kBAAkB,YAAY,OAAO,SAAS,EAAE,cAAc,CACzE,GAAE,gBAAgB,EAAE;;;AAK1B,KAAI,OAAO,WAAW,KAAA,GAAW;EAC/B,MAAM,IAAI,OAAO;AACjB,MAAI,MAAM,KACR,QAAO,IAAI;WACF,OAAO,MAAM,YAAY,CAAC,MAAM,QAAQ,EAAE,EAAE;GACrD,MAAM,IAAI;AACV,OAAI,CAAC,IAAI,UAAU,OAAO,IAAI,WAAW,SACvC,KAAI,SAAS,EAAE;GAEjB,MAAM,IAAI,IAAI;AACd,OAAI,EAAE,YAAY,KAAA,EAChB,KAAI,EAAE,YAAY,KAAM,QAAO,EAAE;OAC5B,GAAE,UAAU,QAAQ,EAAE,QAAQ;AAErC,OAAI,EAAE,sBAAsB,KAAA,EAC1B,KAAI,EAAE,sBAAsB,KAAM,QAAO,EAAE;OACtC,GAAE,oBAAoB,QAAQ,EAAE,kBAAkB;AAEzD,OAAI,EAAE,uBAAuB,KAAA,EAC3B,KAAI,EAAE,uBAAuB,KAAM,QAAO,EAAE;OACvC,GAAE,qBAAqB,QAAQ,EAAE,mBAAmB;AAE3D,OAAI,EAAE,oBAAoB,KAAA;QACpB,EAAE,oBAAoB,KAAM,QAAO,EAAE;aAChC,OAAO,EAAE,oBAAoB,YAAY,EAAE,kBAAkB,EACpE,GAAE,kBAAkB,KAAK,MAAM,EAAE,gBAAgB;;AAGrD,OAAI,EAAE,kBAAkB,KAAA;QAClB,EAAE,kBAAkB,KAAM,QAAO,EAAE;aAC9B,OAAO,EAAE,kBAAkB,YAAY,EAAE,gBAAgB,EAChE,GAAE,gBAAgB,KAAK,MAAM,EAAE,cAAc;;AAGjD,OAAI,EAAE,aAAa,UAAU,EAAE,aAAa,OAC1C,GAAE,WAAW,EAAE;YACN,EAAE,aAAa,KACxB,QAAO,EAAE;AAEX,OAAI,EAAE,uBAAuB,gBAAgB,EAAE,uBAAuB,aACpE,GAAE,qBAAqB,EAAE;YAChB,EAAE,uBAAuB,KAClC,QAAO,EAAE;AAEX,OAAI,EAAE,mBAAmB,KAAA;QACnB,EAAE,mBAAmB,KAAM,QAAO,EAAE;aAC/B,OAAO,EAAE,mBAAmB,YAAY,EAAE,kBAAkB,EACnE,GAAE,iBAAiB,KAAK,MAAM,EAAE,eAAe;;AAGnD,OAAI,EAAE,qBAAqB,KAAA;QACrB,EAAE,qBAAqB,KAAM,QAAO,EAAE;aACjC,OAAO,EAAE,qBAAqB,YAAY,EAAE,oBAAoB,EACvE,GAAE,mBAAmB,KAAK,MAAM,EAAE,iBAAiB;;AAKvD,OAAI,EAAE,aAAa,KAAA,GAAW;IAC5B,MAAM,KAAK,EAAE;AACb,QAAI,OAAO,KACT,QAAQ,EAA6B;aAC5B,OAAO,OAAO,YAAY,OAAO,QAAQ,CAAC,MAAM,QAAQ,GAAG,EAAE;AACtE,SAAI,EAAE,cAAc,MAAM,OAAQ,EAA6B,aAAa,SACzE,GAA6C,WAAW,EAAE;KAE7D,MAAM,KAAM,EAA4C;KACxD,MAAM,KAAK;AAEX,SAAI,GAAG,YAAY,KAAA,EACjB,KAAI,GAAG,YAAY,KAAM,QAAO,GAAG;SAC9B,IAAG,UAAU,QAAQ,GAAG,QAAQ;AAEvC,SAAI,GAAG,cAAc,KAAA,GAAW;MAC9B,MAAM,IAAI,GAAG;AACb,UAAI,MAAM,QAAQ,MAAM,GAAI,QAAO,GAAG;eAC7B,OAAO,MAAM,SAAU,IAAG,YAAY;;AAEjD,SAAI,GAAG,aAAa,KAAA,GAAW;MAC7B,MAAM,IAAI,GAAG;AACb,UAAI,MAAM,QAAQ,MAAM,GAAI,QAAO,GAAG;eAC7B,OAAO,MAAM,SAAU,IAAG,WAAW;;AAIhD,SAAI,GAAG,WAAW,KAAA,KAAa,GAAG,SAAS,KAAA,GAAW;AACpD,UAAI,EAAE,YAAY,OAAO,OAAQ,GAA4B,WAAW,YAAa,GAA4B,WAAW,KAC1H,IAAG,SAAS,EAAE;MAEhB,MAAM,SAAU,GAA2C;AAC3D,UAAI,EAAE,UAAU,WAAW,OAAO,OAAO,SAAS,YAAY,OAAO,SAAS,KAC5E,QAAO,OAAO,EAAE;MAElB,MAAM,OAAO,OAAO;MAEpB,MAAM,eACJ,OAAO,GAAG,WAAW,YAAY,GAAG,WAAW,QAAQ,CAAC,MAAM,QAAQ,GAAG,OAAO,GAC3E,GAAG,OAAmC,OACvC,GAAG;MACT,MAAM,YACJ,OAAO,iBAAiB,YAAY,iBAAiB,QAAQ,CAAC,MAAM,QAAQ,aAAa,GACpF,eACD;AAEN,UAAI,WAAW;AACb,WAAI,UAAU,YAAY,KAAA,EACxB,KAAI,UAAU,YAAY,KAAM,QAAO,KAAK;WACvC,MAAK,UAAU,QAAQ,UAAU,QAAQ;AAEhD,WAAI,UAAU,aAAa,KAAA,GAAW;QACpC,MAAM,IAAI,UAAU;AACpB,YAAI,MAAM,KAAM,QAAO,KAAK;iBACnB,OAAO,MAAM,YAAY,OAAO,SAAS,EAAE,CAAE,MAAK,WAAW;;AAExE,WAAI,UAAU,mBAAmB,KAAA,GAAW;QAC1C,MAAM,IAAI,UAAU;AACpB,YAAI,MAAM,KAAM,QAAO,KAAK;iBACnB,OAAO,MAAM,YAAY,OAAO,SAAS,EAAE,CAAE,MAAK,iBAAiB,KAAK,MAAM,EAAE;;AAE3F,WAAI,UAAU,UAAU,KAAA,GAAW;QACjC,MAAM,IAAI,UAAU;AACpB,YAAI,MAAM,KAAM,QAAO,KAAK;iBACnB,OAAO,MAAM,YAAY,OAAO,SAAS,EAAE,CAAE,MAAK,QAAQ,KAAK,MAAM,EAAE;;;;;;;;AAS9F,KAAI,OAAO,kBAAkB,KAAA,GAAW;EACtC,MAAM,IAAI,OAAO;AACjB,MAAI,MAAM,KACR,QAAO,IAAI;WACF,OAAO,MAAM,YAAY,CAAC,MAAM,QAAQ,EAAE,EAAE;GACrD,MAAM,IAAI;AACV,OAAI,CAAC,IAAI,iBAAiB,OAAO,IAAI,kBAAkB,SACrD,KAAI,gBAAgB,EAAE;GAExB,MAAM,IAAI,IAAI;AACd,OAAI,EAAE,iBAAiB,KAAA;QACjB,EAAE,iBAAiB,QAAQ,EAAE,iBAAiB,GAChD,QAAO,EAAE;aACA,OAAO,EAAE,iBAAiB,SACnC,GAAE,eAAe,EAAE;;;;AAM3B,KAAI,OAAO,qBAAqB,KAAA,GAAW;EACzC,MAAM,IAAI,OAAO;AACjB,MAAI,MAAM,KACR,QAAO,IAAI;WACF,OAAO,MAAM,YAAY,CAAC,MAAM,QAAQ,EAAE,EAAE;GACrD,MAAM,IAAI;AACV,OAAI,CAAC,IAAI,oBAAoB,OAAO,IAAI,qBAAqB,SAC3D,KAAI,mBAAmB,EAAE;GAE3B,MAAM,IAAI,IAAI;AACd,OAAI,EAAE,YAAY,KAAA,EAChB,KAAI,EAAE,YAAY,KAAM,QAAO,EAAE;OAC5B,GAAE,UAAU,QAAQ,EAAE,QAAQ;AAErC,OAAI,EAAE,wBAAwB,KAAA;QACxB,EAAE,wBAAwB,KAAM,QAAO,EAAE;aACpC,OAAO,EAAE,wBAAwB,YAAY,EAAE,uBAAuB,EAC7E,GAAE,sBAAsB,KAAK,MAAM,EAAE,oBAAoB;;AAG7D,OAAI,EAAE,uBAAuB,KAAA;QACvB,EAAE,uBAAuB,KAAM,QAAO,EAAE;aACnC,OAAO,EAAE,uBAAuB,YAAY,EAAE,sBAAsB,EAC3E,GAAE,qBAAqB,KAAK,MAAM,EAAE,mBAAmB;;AAG3D,OAAI,EAAE,kBAAkB,KAAA;QAClB,EAAE,kBAAkB,KAAM,QAAO,EAAE;aAC9B,OAAO,EAAE,kBAAkB,YAAY,EAAE,iBAAiB,KAAK,EAAE,iBAAiB,GACzF,GAAE,gBAAgB,KAAK,MAAM,EAAE,cAAc;;AAGjD,OAAI,EAAE,uBAAuB,KAAA;QACvB,EAAE,uBAAuB,KAAM,QAAO,EAAE;aACnC,OAAO,EAAE,uBAAuB,YAAY,EAAE,sBAAsB,MAAM,EAAE,sBAAsB,IACzG,GAAE,qBAAqB,KAAK,MAAM,EAAE,mBAAmB;;AAG3D,OAAI,EAAE,kBAAkB,KAAA;QAClB,EAAE,kBAAkB,KAAM,QAAO,EAAE;aAC9B,OAAO,EAAE,kBAAkB,YAAY,EAAE,iBAAiB,OAAU,EAAE,iBAAiB,IAC9F,GAAE,gBAAgB,KAAK,MAAM,EAAE,cAAc;;;;AAMrD,KAAI,OAAO,eAAe,KAAA,GAAW;EACnC,MAAM,IAAI,OAAO;AACjB,MAAI,MAAM,KACR,QAAO,IAAI;WACF,OAAO,MAAM,YAAY,CAAC,MAAM,QAAQ,EAAE,EAAE;GACrD,MAAM,IAAI;AACV,OAAI,CAAC,IAAI,cAAc,OAAO,IAAI,eAAe,SAC/C,KAAI,aAAa,EAAE;GAErB,MAAM,IAAI,IAAI;AACd,OAAI,EAAE,UAAU,KAAA;QACV,EAAE,UAAU,QAAQ,EAAE,UAAU,GAClC,QAAO,EAAE;aACA,OAAO,EAAE,UAAU,SAC5B,GAAE,QAAQ,EAAE;;AAGhB,OAAI,EAAE,cAAc,KAAA;QACd,EAAE,cAAc,KAAM,QAAO,EAAE;aAC1B,OAAO,EAAE,cAAc,YAAY,EAAE,YAAY,EACxD,GAAE,YAAY,EAAE;;;;AAMxB,KAAI,OAAO,aAAa,KAAA,GAAW;EACjC,MAAM,IAAI,OAAO;AACjB,MAAI,MAAM,KACR,QAAO,IAAI;WACF,OAAO,MAAM,YAAY,CAAC,MAAM,QAAQ,EAAE,EAAE;GACrD,MAAM,IAAI;AACV,OAAI,CAAC,IAAI,YAAY,OAAO,IAAI,aAAa,SAC3C,KAAI,WAAW,EAAE;GAEnB,MAAM,IAAI,IAAI;AACd,OAAI,EAAE,YAAY,KAAA,EAChB,KAAI,EAAE,YAAY,KAAM,QAAO,EAAE;OAC5B,GAAE,UAAU,QAAQ,EAAE,QAAQ;;;AAKzC,KAAI,OAAO,gBAAgB,KAAA,GAAW;EACpC,MAAM,IAAI,OAAO;AACjB,MAAI,MAAM,KACR,QAAO,IAAI;WACF,OAAO,MAAM,YAAY,CAAC,MAAM,QAAQ,EAAE,EAAE;GACrD,MAAM,IAAI;AACV,OAAI,CAAC,IAAI,eAAe,OAAO,IAAI,gBAAgB,SACjD,KAAI,cAAc,EAAE;GAEtB,MAAM,IAAI,IAAI;AACd,OAAI,EAAE,YAAY,KAAA,EAChB,KAAI,EAAE,YAAY,KAAM,QAAO,EAAE;OAC5B,GAAE,UAAU,QAAQ,EAAE,QAAQ;;;AAKzC,KAAI,OAAO,yBAAyB,KAAA,GAAW;EAC7C,MAAM,IAAI,OAAO;AACjB,MAAI,MAAM,QAAQ,MAAM,GACtB,QAAO,IAAI;WACF,OAAO,MAAM,SACtB,KAAI,uBAAuB;;AAI/B,KAAI,OAAO,WAAW,KAAA,GAAW;EAC/B,MAAM,IAAI,OAAO;AACjB,MAAI,MAAM,KACR,QAAO,IAAI;WACF,MAAM,QAAQ,EAAE,IAAI,EAAE,OAAO,MAAM,OAAO,MAAM,SAAS,CAClE,KAAI,SAAS;;AAIjB,KAAI,OAAO,WAAW,KAAA,GAAW;AAC/B,MAAI,CAAC,IAAI,UAAU,OAAO,IAAI,WAAW,SACvC,KAAI,SAAS,EAAE;EAEjB,MAAM,eAAe,IAAI;EACzB,MAAM,aAAa,OAAO;AAC1B,MAAI,eAAe,KACjB,QAAO,IAAI;WACF,OAAO,eAAe,YAAY,CAAC,MAAM,QAAQ,WAAW,EAAE;GACvE,MAAM,IAAI;AACV,OAAI,OAAO,OAAO,GAAG,OAAO,EAAE;IAC5B,MAAM,OAAO,EAAE;AACf,QAAI,SAAS,KACX,QAAO,aAAa;SACf;KACL,MAAM,iBAAiB,yBAAyB,KAAK;AACrD,SAAI,mBAAmB,KAAA,EACrB,QAAO,aAAa;SAEpB,cAAa,OAAO;;;AAI1B,OAAI,OAAO,OAAO,GAAG,QAAQ,EAAE;IAC7B,MAAM,aAAa,0BAA0B,EAAE,OAAO,EAAE,OAAO,CAAC;AAChE,QAAI,eAAe,KAAA,GAAW,YAEnB,eAAe,KACxB,QAAO,aAAa;QAEpB,cAAa,QAAQ;;SAGpB;GACL,MAAM,aAAa,0BAA0B,WAAW;AACxD,OAAI,eAAe,KAAA,GAAW,YAEnB,eAAe,KACxB,QAAO,aAAa;OAEpB,cAAa,QAAQ;;AAGzB,MAAI,IAAI,UAAU,OAAO,KAAK,IAAI,OAAO,CAAC,WAAW,EACnD,QAAO,IAAI;;AAIf,KAAI,OAAO,UAAU,KAAA,GAAW;EAC9B,MAAM,KAAK,OAAO;AAClB,MAAI,OAAO,KACT,QAAO,IAAI;WACF,OAAO,OAAO,YAAY,CAAC,MAAM,QAAQ,GAAG,EAAE;GACvD,MAAM,IAAI;AACV,OAAI,CAAC,IAAI,SAAS,OAAO,IAAI,UAAU,SACrC,KAAI,QAAQ,EAAE;GAEhB,MAAM,IAAI,IAAI;AACd,OAAI,EAAE,YAAY,KAAA;QACZ,EAAE,YAAY,QAAS,MAAM,QAAQ,EAAE,QAAQ,IAAI,EAAE,QAAQ,WAAW,EAC1E,QAAO,EAAE;aACA,MAAM,QAAQ,EAAE,QAAQ,IAAI,EAAE,QAAQ,OAAO,MAAM,OAAO,MAAM,SAAS,CAClF,GAAE,UAAU,EAAE;;;;AAMtB,KAAI,OAAO,WAAW,KAAA,GAAW;EAC/B,MAAM,IAAI,OAAO;AACjB,MAAI,MAAM,KACR,QAAO,IAAI;WACF,OAAO,MAAM,YAAY,CAAC,MAAM,QAAQ,EAAE,IAAI,MAAM,KAC7D,KAAI,SAAS"}
+{"version":3,"file":"agents.js","names":[],"sources":["../../../../../../src/gateway/hono/routes/config-patch/agents.ts"],"sourcesContent":["import type { Config } from '../../../../config/schema.js';\n\nexport function applyAgentsPatch(_config: Config, body: any): void {\n  if (body.agents !== undefined) {\n    throw new Error('agents config patching was removed; use manifest-specific agent APIs');\n  }\n}\n"],"mappings":";AAEA,SAAgB,iBAAiB,SAAiB,MAAiB;AACjE,KAAI,KAAK,WAAW,KAAA,EAClB,OAAM,IAAI,MAAM,uEAAuE"}

package/dist/src/gateway/hono/routes/config-patch/misc.js

@@ -1,4 +1,4 @@
-import { BindingsConfigSchema, McpConfigSchema, init_schema } from "../../../../config/schema.js";
+import { BindingsConfigSchema, BrowserConfigSchema, McpConfigSchema, init_schema } from "../../../../config/schema.js";
 import { CredentialResolver, init_credentials } from "../../../../auth/credentials.js";
 import { canonicalizeConfiguredMcpServer } from "../../../../config/mcp-config-normalize.js";
 import { mergeCronConfigPatch, mergeGatewaySkillsMarketplacePatch, mergeGoalsConfigPatch, mergeSessionConfigPatch, mergeUpdateConfigPatch } from "../../../../config/web-patch.js";
@@ -32,6 +32,12 @@ async function applyMiscPatch(config, body) {
 		const sessionResult = mergeSessionConfigPatch(config, body.session);
 		if (sessionResult.ok === false) return patchError(sessionResult.message);
 	}
+	if (body.browser !== void 0) {
+		if (typeof body.browser !== "object" || body.browser === null || Array.isArray(body.browser)) return patchError("browser must be an object");
+		const parsed = BrowserConfigSchema.safeParse(body.browser);
+		if (!parsed.success) return patchError(parsed.error.issues.map((i) => i.message).join("; "));
+		config.browser = parsed.data;
+	}
 	if (body.gateway !== void 0 && typeof body.gateway === "object" && body.gateway !== null && !Array.isArray(body.gateway)) {
 		const gwPatch = body.gateway;
 		if (gwPatch.skillsMarketplaceProvider !== void 0 || gwPatch.skillsStoreBaseUrl !== void 0) {

package/dist/src/gateway/hono/routes/config-patch/misc.js.map

@@ -1 +1 @@
-{"version":3,"file":"misc.js","names":[],"sources":["../../../../../../src/gateway/hono/routes/config-patch/misc.ts"],"sourcesContent":["/**\n * `PATCH /api/config` — tail sections that are each <50 lines:\n *   update / cron / goals / session / gateway.{skillsMarketplaceProvider,\n *   skillsStoreBaseUrl} / providers / providersConfig / stt / tts / tools /\n *   tunnel / bindings / mcp.\n *\n * Most of these delegate to a `mergeXxxConfigPatch(config, body) → { ok,\n * message? }` helper that lives next to the schema, so this file is mostly\n * \"validate object shape, call helper, surface 400 on failure\". The async\n * `providers` branch saves into the credential resolver rather than config.\n *\n * Final validation (resolveGatewayAuth + assertGatewayRuntimeConfig) runs\n * after every gateway-touching patch lands, so it sees the merged shape.\n */\nimport type { Config } from '../../../../config/schema.js';\nimport { BindingsConfigSchema, McpConfigSchema } from '../../../../config/schema.js';\nimport { CredentialResolver } from '../../../../auth/credentials.js';\nimport { isMaskedSecretPatchValue } from '../../lib/mask-secret-length.js';\nimport { applyToolsWebPatch } from '../../../config-tools-web.js';\nimport { mergeTunnelConfigPatch } from '../../../../tunnel/tunnel-config.js';\nimport { canonicalizeConfiguredMcpServer } from '../../../../config/mcp-config-normalize.js';\nimport {\n  mergeCronConfigPatch,\n  mergeGatewaySkillsMarketplacePatch,\n  mergeGoalsConfigPatch,\n  mergeSessionConfigPatch,\n  mergeUpdateConfigPatch,\n} from '../../../../config/web-patch.js';\nimport { mergeSttConfigPatch, mergeTtsConfigPatch } from '../../lib/safe-voice-config.js';\nimport { assertGatewayRuntimeConfig } from '../../../runtime-config.js';\nimport { resolveGatewayAuth, assertGatewayAuthConfigured } from '../../../auth.js';\nimport { type PatchResult, PATCH_OK, patchError } from './result.js';\n\nexport async function applyMiscPatch(config: Config, body: any): Promise<PatchResult> {\n  if (body.update !== undefined && typeof body.update === 'object' && body.update !== null) {\n    const updateResult = mergeUpdateConfigPatch(config, body.update as Record<string, unknown>);\n    if (updateResult.ok === false) {\n      return patchError(updateResult.message);\n    }\n  }\n\n  if (body.cron !== undefined) {\n    if (typeof body.cron !== 'object' || body.cron === null || Array.isArray(body.cron)) {\n      return patchError('cron must be an object');\n    }\n    const cronResult = mergeCronConfigPatch(config, body.cron as Record<string, unknown>);\n    if (cronResult.ok === false) {\n      return patchError(cronResult.message);\n    }\n  }\n\n  if (body.goals !== undefined) {\n    if (typeof body.goals !== 'object' || body.goals === null || Array.isArray(body.goals)) {\n      return patchError('goals must be an object');\n    }\n    const goalsResult = mergeGoalsConfigPatch(config, body.goals as Record<string, unknown>);\n    if (goalsResult.ok === false) {\n      return patchError(goalsResult.message);\n    }\n  }\n\n  if (body.session !== undefined) {\n    if (typeof body.session !== 'object' || body.session === null || Array.isArray(body.session)) {\n      return patchError('session must be an object');\n    }\n    const sessionResult = mergeSessionConfigPatch(config, body.session as Record<string, unknown>);\n    if (sessionResult.ok === false) {\n      return patchError(sessionResult.message);\n    }\n  }\n\n  if (\n    body.gateway !== undefined &&\n    typeof body.gateway === 'object' &&\n    body.gateway !== null &&\n    !Array.isArray(body.gateway)\n  ) {\n    const gwPatch = body.gateway as Record<string, unknown>;\n    if (gwPatch.skillsMarketplaceProvider !== undefined || gwPatch.skillsStoreBaseUrl !== undefined) {\n      const skillsResult = mergeGatewaySkillsMarketplacePatch(config, {\n        ...(gwPatch.skillsMarketplaceProvider !== undefined\n          ? { skillsMarketplaceProvider: gwPatch.skillsMarketplaceProvider }\n          : {}),\n        ...(gwPatch.skillsStoreBaseUrl !== undefined\n          ? { skillsStoreBaseUrl: gwPatch.skillsStoreBaseUrl }\n          : {}),\n      });\n      if (skillsResult.ok === false) {\n        return patchError(skillsResult.message);\n      }\n    }\n  }\n\n  // LLM provider credentials — saved into the credential system (not config).\n  if (body.providers) {\n    const resolver = new CredentialResolver();\n    for (const [key, apiKey] of Object.entries(body.providers)) {\n      if (\n        apiKey !== undefined &&\n        typeof apiKey === 'string' &&\n        apiKey.trim() &&\n        !isMaskedSecretPatchValue(apiKey)\n      ) {\n        await resolver.saveApiKey(key, apiKey, { profileName: 'default' });\n      }\n    }\n  }\n\n  // Structured per-vendor provider config (cfg.providers.<id>) for capability\n  // providers (image / audio / video). Distinct from `body.providers` above\n  // which targets the LLM-side credential resolver.\n  if (body.providersConfig && typeof body.providersConfig === 'object' && !Array.isArray(body.providersConfig)) {\n    const cfgProviders = (config as { providers?: Record<string, Record<string, unknown>> }).providers ?? {};\n    for (const [vendorId, raw] of Object.entries(body.providersConfig as Record<string, unknown>)) {\n      if (!vendorId || typeof vendorId !== 'string') continue;\n      if (raw === null) {\n        delete cfgProviders[vendorId];\n        continue;\n      }\n      if (!raw || typeof raw !== 'object' || Array.isArray(raw)) continue;\n      const next = (cfgProviders[vendorId] ?? {}) as Record<string, unknown>;\n      const patch = raw as Record<string, unknown>;\n      for (const field of ['apiKey', 'baseUrl', 'region', 'imageBaseUrl'] as const) {\n        if (patch[field] === null || patch[field] === '') {\n          delete next[field];\n        } else if (typeof patch[field] === 'string') {\n          const trimmed = (patch[field] as string).trim();\n          if (field === 'apiKey' && isMaskedSecretPatchValue(trimmed)) {\n            continue;\n          }\n          next[field] = trimmed;\n        }\n      }\n      if (patch.azure === null) {\n        delete next.azure;\n      } else if (patch.azure && typeof patch.azure === 'object' && !Array.isArray(patch.azure)) {\n        next.azure = { ...(next.azure as Record<string, unknown> ?? {}), ...(patch.azure as Record<string, unknown>) };\n      }\n      if (patch.request === null) {\n        delete next.request;\n      } else if (patch.request && typeof patch.request === 'object' && !Array.isArray(patch.request)) {\n        next.request = { ...(next.request as Record<string, unknown> ?? {}), ...(patch.request as Record<string, unknown>) };\n      }\n      cfgProviders[vendorId] = next;\n    }\n    (config as { providers?: Record<string, Record<string, unknown>> }).providers = cfgProviders;\n  }\n\n  // PATCH `stt` writes to tools.media.audio; PATCH `tts` writes to messages.tts.\n  if (body.stt !== undefined) {\n    config.tools = config.tools ?? {};\n    config.tools.media = config.tools.media ?? {};\n    (config.tools.media as Record<string, unknown>).audio = mergeSttConfigPatch(\n      config.tools.media.audio,\n      body.stt,\n    );\n  }\n  if (body.tts !== undefined) {\n    config.messages = config.messages ?? {};\n    (config.messages as Record<string, unknown>).tts = mergeTtsConfigPatch(\n      config.messages.tts,\n      body.tts,\n    );\n  }\n\n  const toolsPatchErr = applyToolsWebPatch(config, body as Record<string, unknown>);\n  if (toolsPatchErr) {\n    return patchError(toolsPatchErr);\n  }\n\n  if (body.tunnel !== undefined) {\n    if (!body.tunnel || typeof body.tunnel !== 'object' || Array.isArray(body.tunnel)) {\n      return patchError('tunnel must be an object');\n    }\n    const tunnelResult = mergeTunnelConfigPatch(config, body.tunnel as Record<string, unknown>);\n    if (tunnelResult.ok === false) {\n      return patchError(tunnelResult.message);\n    }\n  }\n\n  if (body.bindings !== undefined) {\n    if (!Array.isArray(body.bindings)) {\n      return patchError('bindings must be an array');\n    }\n    const parsed = BindingsConfigSchema.safeParse(body.bindings);\n    if (!parsed.success) {\n      return patchError(parsed.error.issues.map((i) => i.message).join('; '));\n    }\n    config.bindings = parsed.data;\n  }\n\n  if (body.mcp !== undefined) {\n    if (body.mcp === null) {\n      delete config.mcp;\n    } else if (typeof body.mcp !== 'object' || Array.isArray(body.mcp)) {\n      return patchError('mcp must be an object');\n    } else {\n      const parsed = McpConfigSchema.safeParse(body.mcp);\n      if (!parsed.success) {\n        return patchError(parsed.error.issues.map((i) => i.message).join('; '));\n      }\n      if (parsed.data === undefined) {\n        delete config.mcp;\n      } else {\n        const next = { ...parsed.data };\n        if (next.servers) {\n          next.servers = Object.fromEntries(\n            Object.entries(next.servers).map(([name, server]) => [\n              name,\n              canonicalizeConfiguredMcpServer(server as Record<string, unknown>),\n            ]),\n          );\n        }\n        config.mcp = next;\n      }\n    }\n  }\n\n  return PATCH_OK;\n}\n\n/**\n * Re-validate gateway runtime config when `body.gateway` touched anything that\n * could break the bind/auth contract. Runs *after* all per-section patches\n * land so it sees the fully merged shape.\n */\nexport function validateGatewayAfterPatch(config: Config, body: any): PatchResult {\n  if (body.gateway === undefined) return PATCH_OK;\n  try {\n    const auth = resolveGatewayAuth({ authConfig: config.gateway?.auth });\n    assertGatewayAuthConfigured(auth);\n    assertGatewayRuntimeConfig({\n      cfg: config,\n      auth,\n      port: config.gateway?.port ?? 18790,\n    });\n  } catch (err) {\n    const message = err instanceof Error ? err.message : String(err);\n    return patchError(message);\n  }\n  return PATCH_OK;\n}\n"],"mappings":";;;;;;;;;;;;aAeqF;kBAChB;AAiBrE,eAAsB,eAAe,QAAgB,MAAiC;AACpF,KAAI,KAAK,WAAW,KAAA,KAAa,OAAO,KAAK,WAAW,YAAY,KAAK,WAAW,MAAM;EACxF,MAAM,eAAe,uBAAuB,QAAQ,KAAK,OAAkC;AAC3F,MAAI,aAAa,OAAO,MACtB,QAAO,WAAW,aAAa,QAAQ;;AAI3C,KAAI,KAAK,SAAS,KAAA,GAAW;AAC3B,MAAI,OAAO,KAAK,SAAS,YAAY,KAAK,SAAS,QAAQ,MAAM,QAAQ,KAAK,KAAK,CACjF,QAAO,WAAW,yBAAyB;EAE7C,MAAM,aAAa,qBAAqB,QAAQ,KAAK,KAAgC;AACrF,MAAI,WAAW,OAAO,MACpB,QAAO,WAAW,WAAW,QAAQ;;AAIzC,KAAI,KAAK,UAAU,KAAA,GAAW;AAC5B,MAAI,OAAO,KAAK,UAAU,YAAY,KAAK,UAAU,QAAQ,MAAM,QAAQ,KAAK,MAAM,CACpF,QAAO,WAAW,0BAA0B;EAE9C,MAAM,cAAc,sBAAsB,QAAQ,KAAK,MAAiC;AACxF,MAAI,YAAY,OAAO,MACrB,QAAO,WAAW,YAAY,QAAQ;;AAI1C,KAAI,KAAK,YAAY,KAAA,GAAW;AAC9B,MAAI,OAAO,KAAK,YAAY,YAAY,KAAK,YAAY,QAAQ,MAAM,QAAQ,KAAK,QAAQ,CAC1F,QAAO,WAAW,4BAA4B;EAEhD,MAAM,gBAAgB,wBAAwB,QAAQ,KAAK,QAAmC;AAC9F,MAAI,cAAc,OAAO,MACvB,QAAO,WAAW,cAAc,QAAQ;;AAI5C,KACE,KAAK,YAAY,KAAA,KACjB,OAAO,KAAK,YAAY,YACxB,KAAK,YAAY,QACjB,CAAC,MAAM,QAAQ,KAAK,QAAQ,EAC5B;EACA,MAAM,UAAU,KAAK;AACrB,MAAI,QAAQ,8BAA8B,KAAA,KAAa,QAAQ,uBAAuB,KAAA,GAAW;GAC/F,MAAM,eAAe,mCAAmC,QAAQ;IAC9D,GAAI,QAAQ,8BAA8B,KAAA,IACtC,EAAE,2BAA2B,QAAQ,2BAA2B,GAChE,EAAE;IACN,GAAI,QAAQ,uBAAuB,KAAA,IAC/B,EAAE,oBAAoB,QAAQ,oBAAoB,GAClD,EAAE;IACP,CAAC;AACF,OAAI,aAAa,OAAO,MACtB,QAAO,WAAW,aAAa,QAAQ;;;AAM7C,KAAI,KAAK,WAAW;EAClB,MAAM,WAAW,IAAI,oBAAoB;AACzC,OAAK,MAAM,CAAC,KAAK,WAAW,OAAO,QAAQ,KAAK,UAAU,CACxD,KACE,WAAW,KAAA,KACX,OAAO,WAAW,YAClB,OAAO,MAAM,IACb,CAAC,yBAAyB,OAAO,CAEjC,OAAM,SAAS,WAAW,KAAK,QAAQ,EAAE,aAAa,WAAW,CAAC;;AAQxE,KAAI,KAAK,mBAAmB,OAAO,KAAK,oBAAoB,YAAY,CAAC,MAAM,QAAQ,KAAK,gBAAgB,EAAE;EAC5G,MAAM,eAAgB,OAAmE,aAAa,EAAE;AACxG,OAAK,MAAM,CAAC,UAAU,QAAQ,OAAO,QAAQ,KAAK,gBAA2C,EAAE;AAC7F,OAAI,CAAC,YAAY,OAAO,aAAa,SAAU;AAC/C,OAAI,QAAQ,MAAM;AAChB,WAAO,aAAa;AACpB;;AAEF,OAAI,CAAC,OAAO,OAAO,QAAQ,YAAY,MAAM,QAAQ,IAAI,CAAE;GAC3D,MAAM,OAAQ,aAAa,aAAa,EAAE;GAC1C,MAAM,QAAQ;AACd,QAAK,MAAM,SAAS;IAAC;IAAU;IAAW;IAAU;IAAe,CACjE,KAAI,MAAM,WAAW,QAAQ,MAAM,WAAW,GAC5C,QAAO,KAAK;YACH,OAAO,MAAM,WAAW,UAAU;IAC3C,MAAM,UAAW,MAAM,OAAkB,MAAM;AAC/C,QAAI,UAAU,YAAY,yBAAyB,QAAQ,CACzD;AAEF,SAAK,SAAS;;AAGlB,OAAI,MAAM,UAAU,KAClB,QAAO,KAAK;YACH,MAAM,SAAS,OAAO,MAAM,UAAU,YAAY,CAAC,MAAM,QAAQ,MAAM,MAAM,CACtF,MAAK,QAAQ;IAAE,GAAI,KAAK,SAAoC,EAAE;IAAG,GAAI,MAAM;IAAmC;AAEhH,OAAI,MAAM,YAAY,KACpB,QAAO,KAAK;YACH,MAAM,WAAW,OAAO,MAAM,YAAY,YAAY,CAAC,MAAM,QAAQ,MAAM,QAAQ,CAC5F,MAAK,UAAU;IAAE,GAAI,KAAK,WAAsC,EAAE;IAAG,GAAI,MAAM;IAAqC;AAEtH,gBAAa,YAAY;;AAE1B,SAAmE,YAAY;;AAIlF,KAAI,KAAK,QAAQ,KAAA,GAAW;AAC1B,SAAO,QAAQ,OAAO,SAAS,EAAE;AACjC,SAAO,MAAM,QAAQ,OAAO,MAAM,SAAS,EAAE;AAC5C,SAAO,MAAM,MAAkC,QAAQ,oBACtD,OAAO,MAAM,MAAM,OACnB,KAAK,IACN;;AAEH,KAAI,KAAK,QAAQ,KAAA,GAAW;AAC1B,SAAO,WAAW,OAAO,YAAY,EAAE;AACtC,SAAO,SAAqC,MAAM,oBACjD,OAAO,SAAS,KAChB,KAAK,IACN;;CAGH,MAAM,gBAAgB,mBAAmB,QAAQ,KAAgC;AACjF,KAAI,cACF,QAAO,WAAW,cAAc;AAGlC,KAAI,KAAK,WAAW,KAAA,GAAW;AAC7B,MAAI,CAAC,KAAK,UAAU,OAAO,KAAK,WAAW,YAAY,MAAM,QAAQ,KAAK,OAAO,CAC/E,QAAO,WAAW,2BAA2B;EAE/C,MAAM,eAAe,uBAAuB,QAAQ,KAAK,OAAkC;AAC3F,MAAI,aAAa,OAAO,MACtB,QAAO,WAAW,aAAa,QAAQ;;AAI3C,KAAI,KAAK,aAAa,KAAA,GAAW;AAC/B,MAAI,CAAC,MAAM,QAAQ,KAAK,SAAS,CAC/B,QAAO,WAAW,4BAA4B;EAEhD,MAAM,SAAS,qBAAqB,UAAU,KAAK,SAAS;AAC5D,MAAI,CAAC,OAAO,QACV,QAAO,WAAW,OAAO,MAAM,OAAO,KAAK,MAAM,EAAE,QAAQ,CAAC,KAAK,KAAK,CAAC;AAEzE,SAAO,WAAW,OAAO;;AAG3B,KAAI,KAAK,QAAQ,KAAA,EACf,KAAI,KAAK,QAAQ,KACf,QAAO,OAAO;UACL,OAAO,KAAK,QAAQ,YAAY,MAAM,QAAQ,KAAK,IAAI,CAChE,QAAO,WAAW,wBAAwB;MACrC;EACL,MAAM,SAAS,gBAAgB,UAAU,KAAK,IAAI;AAClD,MAAI,CAAC,OAAO,QACV,QAAO,WAAW,OAAO,MAAM,OAAO,KAAK,MAAM,EAAE,QAAQ,CAAC,KAAK,KAAK,CAAC;AAEzE,MAAI,OAAO,SAAS,KAAA,EAClB,QAAO,OAAO;OACT;GACL,MAAM,OAAO,EAAE,GAAG,OAAO,MAAM;AAC/B,OAAI,KAAK,QACP,MAAK,UAAU,OAAO,YACpB,OAAO,QAAQ,KAAK,QAAQ,CAAC,KAAK,CAAC,MAAM,YAAY,CACnD,MACA,gCAAgC,OAAkC,CACnE,CAAC,CACH;AAEH,UAAO,MAAM;;;AAKnB,QAAO;;;;;;;AAQT,SAAgB,0BAA0B,QAAgB,MAAwB;AAChF,KAAI,KAAK,YAAY,KAAA,EAAW,QAAO;AACvC,KAAI;EACF,MAAM,OAAO,mBAAmB,EAAE,YAAY,OAAO,SAAS,MAAM,CAAC;AACrE,8BAA4B,KAAK;AACjC,6BAA2B;GACzB,KAAK;GACL;GACA,MAAM,OAAO,SAAS,QAAQ;GAC/B,CAAC;UACK,KAAK;AAEZ,SAAO,WADS,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,CACtC;;AAE5B,QAAO"}
+{"version":3,"file":"misc.js","names":[],"sources":["../../../../../../src/gateway/hono/routes/config-patch/misc.ts"],"sourcesContent":["/**\n * `PATCH /api/config` — tail sections that are each <50 lines:\n *   update / cron / goals / session / gateway.{skillsMarketplaceProvider,\n *   skillsStoreBaseUrl} / providers / providersConfig / stt / tts / tools /\n *   tunnel / bindings / mcp.\n *\n * Most of these delegate to a `mergeXxxConfigPatch(config, body) → { ok,\n * message? }` helper that lives next to the schema, so this file is mostly\n * \"validate object shape, call helper, surface 400 on failure\". The async\n * `providers` branch saves into the credential resolver rather than config.\n *\n * Final validation (resolveGatewayAuth + assertGatewayRuntimeConfig) runs\n * after every gateway-touching patch lands, so it sees the merged shape.\n */\nimport type { Config } from '../../../../config/schema.js';\nimport { BindingsConfigSchema, BrowserConfigSchema, McpConfigSchema } from '../../../../config/schema.js';\nimport { CredentialResolver } from '../../../../auth/credentials.js';\nimport { isMaskedSecretPatchValue } from '../../lib/mask-secret-length.js';\nimport { applyToolsWebPatch } from '../../../config-tools-web.js';\nimport { mergeTunnelConfigPatch } from '../../../../tunnel/tunnel-config.js';\nimport { canonicalizeConfiguredMcpServer } from '../../../../config/mcp-config-normalize.js';\nimport {\n  mergeCronConfigPatch,\n  mergeGatewaySkillsMarketplacePatch,\n  mergeGoalsConfigPatch,\n  mergeSessionConfigPatch,\n  mergeUpdateConfigPatch,\n} from '../../../../config/web-patch.js';\nimport { mergeSttConfigPatch, mergeTtsConfigPatch } from '../../lib/safe-voice-config.js';\nimport { assertGatewayRuntimeConfig } from '../../../runtime-config.js';\nimport { resolveGatewayAuth, assertGatewayAuthConfigured } from '../../../auth.js';\nimport { type PatchResult, PATCH_OK, patchError } from './result.js';\n\nexport async function applyMiscPatch(config: Config, body: any): Promise<PatchResult> {\n  if (body.update !== undefined && typeof body.update === 'object' && body.update !== null) {\n    const updateResult = mergeUpdateConfigPatch(config, body.update as Record<string, unknown>);\n    if (updateResult.ok === false) {\n      return patchError(updateResult.message);\n    }\n  }\n\n  if (body.cron !== undefined) {\n    if (typeof body.cron !== 'object' || body.cron === null || Array.isArray(body.cron)) {\n      return patchError('cron must be an object');\n    }\n    const cronResult = mergeCronConfigPatch(config, body.cron as Record<string, unknown>);\n    if (cronResult.ok === false) {\n      return patchError(cronResult.message);\n    }\n  }\n\n  if (body.goals !== undefined) {\n    if (typeof body.goals !== 'object' || body.goals === null || Array.isArray(body.goals)) {\n      return patchError('goals must be an object');\n    }\n    const goalsResult = mergeGoalsConfigPatch(config, body.goals as Record<string, unknown>);\n    if (goalsResult.ok === false) {\n      return patchError(goalsResult.message);\n    }\n  }\n\n  if (body.session !== undefined) {\n    if (typeof body.session !== 'object' || body.session === null || Array.isArray(body.session)) {\n      return patchError('session must be an object');\n    }\n    const sessionResult = mergeSessionConfigPatch(config, body.session as Record<string, unknown>);\n    if (sessionResult.ok === false) {\n      return patchError(sessionResult.message);\n    }\n  }\n\n  if (body.browser !== undefined) {\n    if (typeof body.browser !== 'object' || body.browser === null || Array.isArray(body.browser)) {\n      return patchError('browser must be an object');\n    }\n    const parsed = BrowserConfigSchema.safeParse(body.browser);\n    if (!parsed.success) {\n      return patchError(parsed.error.issues.map((i) => i.message).join('; '));\n    }\n    config.browser = parsed.data;\n  }\n\n  if (\n    body.gateway !== undefined &&\n    typeof body.gateway === 'object' &&\n    body.gateway !== null &&\n    !Array.isArray(body.gateway)\n  ) {\n    const gwPatch = body.gateway as Record<string, unknown>;\n    if (gwPatch.skillsMarketplaceProvider !== undefined || gwPatch.skillsStoreBaseUrl !== undefined) {\n      const skillsResult = mergeGatewaySkillsMarketplacePatch(config, {\n        ...(gwPatch.skillsMarketplaceProvider !== undefined\n          ? { skillsMarketplaceProvider: gwPatch.skillsMarketplaceProvider }\n          : {}),\n        ...(gwPatch.skillsStoreBaseUrl !== undefined\n          ? { skillsStoreBaseUrl: gwPatch.skillsStoreBaseUrl }\n          : {}),\n      });\n      if (skillsResult.ok === false) {\n        return patchError(skillsResult.message);\n      }\n    }\n  }\n\n  // LLM provider credentials — saved into the credential system (not config).\n  if (body.providers) {\n    const resolver = new CredentialResolver();\n    for (const [key, apiKey] of Object.entries(body.providers)) {\n      if (\n        apiKey !== undefined &&\n        typeof apiKey === 'string' &&\n        apiKey.trim() &&\n        !isMaskedSecretPatchValue(apiKey)\n      ) {\n        await resolver.saveApiKey(key, apiKey, { profileName: 'default' });\n      }\n    }\n  }\n\n  // Structured per-vendor provider config (cfg.providers.<id>) for capability\n  // providers (image / audio / video). Distinct from `body.providers` above\n  // which targets the LLM-side credential resolver.\n  if (body.providersConfig && typeof body.providersConfig === 'object' && !Array.isArray(body.providersConfig)) {\n    const cfgProviders = (config as { providers?: Record<string, Record<string, unknown>> }).providers ?? {};\n    for (const [vendorId, raw] of Object.entries(body.providersConfig as Record<string, unknown>)) {\n      if (!vendorId || typeof vendorId !== 'string') continue;\n      if (raw === null) {\n        delete cfgProviders[vendorId];\n        continue;\n      }\n      if (!raw || typeof raw !== 'object' || Array.isArray(raw)) continue;\n      const next = (cfgProviders[vendorId] ?? {}) as Record<string, unknown>;\n      const patch = raw as Record<string, unknown>;\n      for (const field of ['apiKey', 'baseUrl', 'region', 'imageBaseUrl'] as const) {\n        if (patch[field] === null || patch[field] === '') {\n          delete next[field];\n        } else if (typeof patch[field] === 'string') {\n          const trimmed = (patch[field] as string).trim();\n          if (field === 'apiKey' && isMaskedSecretPatchValue(trimmed)) {\n            continue;\n          }\n          next[field] = trimmed;\n        }\n      }\n      if (patch.azure === null) {\n        delete next.azure;\n      } else if (patch.azure && typeof patch.azure === 'object' && !Array.isArray(patch.azure)) {\n        next.azure = { ...(next.azure as Record<string, unknown> ?? {}), ...(patch.azure as Record<string, unknown>) };\n      }\n      if (patch.request === null) {\n        delete next.request;\n      } else if (patch.request && typeof patch.request === 'object' && !Array.isArray(patch.request)) {\n        next.request = { ...(next.request as Record<string, unknown> ?? {}), ...(patch.request as Record<string, unknown>) };\n      }\n      cfgProviders[vendorId] = next;\n    }\n    (config as { providers?: Record<string, Record<string, unknown>> }).providers = cfgProviders;\n  }\n\n  // PATCH `stt` writes to tools.media.audio; PATCH `tts` writes to messages.tts.\n  if (body.stt !== undefined) {\n    config.tools = config.tools ?? {};\n    config.tools.media = config.tools.media ?? {};\n    (config.tools.media as Record<string, unknown>).audio = mergeSttConfigPatch(\n      config.tools.media.audio,\n      body.stt,\n    );\n  }\n  if (body.tts !== undefined) {\n    config.messages = config.messages ?? {};\n    (config.messages as Record<string, unknown>).tts = mergeTtsConfigPatch(\n      config.messages.tts,\n      body.tts,\n    );\n  }\n\n  const toolsPatchErr = applyToolsWebPatch(config, body as Record<string, unknown>);\n  if (toolsPatchErr) {\n    return patchError(toolsPatchErr);\n  }\n\n  if (body.tunnel !== undefined) {\n    if (!body.tunnel || typeof body.tunnel !== 'object' || Array.isArray(body.tunnel)) {\n      return patchError('tunnel must be an object');\n    }\n    const tunnelResult = mergeTunnelConfigPatch(config, body.tunnel as Record<string, unknown>);\n    if (tunnelResult.ok === false) {\n      return patchError(tunnelResult.message);\n    }\n  }\n\n  if (body.bindings !== undefined) {\n    if (!Array.isArray(body.bindings)) {\n      return patchError('bindings must be an array');\n    }\n    const parsed = BindingsConfigSchema.safeParse(body.bindings);\n    if (!parsed.success) {\n      return patchError(parsed.error.issues.map((i) => i.message).join('; '));\n    }\n    config.bindings = parsed.data;\n  }\n\n  if (body.mcp !== undefined) {\n    if (body.mcp === null) {\n      delete config.mcp;\n    } else if (typeof body.mcp !== 'object' || Array.isArray(body.mcp)) {\n      return patchError('mcp must be an object');\n    } else {\n      const parsed = McpConfigSchema.safeParse(body.mcp);\n      if (!parsed.success) {\n        return patchError(parsed.error.issues.map((i) => i.message).join('; '));\n      }\n      if (parsed.data === undefined) {\n        delete config.mcp;\n      } else {\n        const next = { ...parsed.data };\n        if (next.servers) {\n          next.servers = Object.fromEntries(\n            Object.entries(next.servers).map(([name, server]) => [\n              name,\n              canonicalizeConfiguredMcpServer(server as Record<string, unknown>),\n            ]),\n          );\n        }\n        config.mcp = next;\n      }\n    }\n  }\n\n  return PATCH_OK;\n}\n\n/**\n * Re-validate gateway runtime config when `body.gateway` touched anything that\n * could break the bind/auth contract. Runs *after* all per-section patches\n * land so it sees the fully merged shape.\n */\nexport function validateGatewayAfterPatch(config: Config, body: any): PatchResult {\n  if (body.gateway === undefined) return PATCH_OK;\n  try {\n    const auth = resolveGatewayAuth({ authConfig: config.gateway?.auth });\n    assertGatewayAuthConfigured(auth);\n    assertGatewayRuntimeConfig({\n      cfg: config,\n      auth,\n      port: config.gateway?.port ?? 18790,\n    });\n  } catch (err) {\n    const message = err instanceof Error ? err.message : String(err);\n    return patchError(message);\n  }\n  return PATCH_OK;\n}\n"],"mappings":";;;;;;;;;;;;aAe0G;kBACrC;AAiBrE,eAAsB,eAAe,QAAgB,MAAiC;AACpF,KAAI,KAAK,WAAW,KAAA,KAAa,OAAO,KAAK,WAAW,YAAY,KAAK,WAAW,MAAM;EACxF,MAAM,eAAe,uBAAuB,QAAQ,KAAK,OAAkC;AAC3F,MAAI,aAAa,OAAO,MACtB,QAAO,WAAW,aAAa,QAAQ;;AAI3C,KAAI,KAAK,SAAS,KAAA,GAAW;AAC3B,MAAI,OAAO,KAAK,SAAS,YAAY,KAAK,SAAS,QAAQ,MAAM,QAAQ,KAAK,KAAK,CACjF,QAAO,WAAW,yBAAyB;EAE7C,MAAM,aAAa,qBAAqB,QAAQ,KAAK,KAAgC;AACrF,MAAI,WAAW,OAAO,MACpB,QAAO,WAAW,WAAW,QAAQ;;AAIzC,KAAI,KAAK,UAAU,KAAA,GAAW;AAC5B,MAAI,OAAO,KAAK,UAAU,YAAY,KAAK,UAAU,QAAQ,MAAM,QAAQ,KAAK,MAAM,CACpF,QAAO,WAAW,0BAA0B;EAE9C,MAAM,cAAc,sBAAsB,QAAQ,KAAK,MAAiC;AACxF,MAAI,YAAY,OAAO,MACrB,QAAO,WAAW,YAAY,QAAQ;;AAI1C,KAAI,KAAK,YAAY,KAAA,GAAW;AAC9B,MAAI,OAAO,KAAK,YAAY,YAAY,KAAK,YAAY,QAAQ,MAAM,QAAQ,KAAK,QAAQ,CAC1F,QAAO,WAAW,4BAA4B;EAEhD,MAAM,gBAAgB,wBAAwB,QAAQ,KAAK,QAAmC;AAC9F,MAAI,cAAc,OAAO,MACvB,QAAO,WAAW,cAAc,QAAQ;;AAI5C,KAAI,KAAK,YAAY,KAAA,GAAW;AAC9B,MAAI,OAAO,KAAK,YAAY,YAAY,KAAK,YAAY,QAAQ,MAAM,QAAQ,KAAK,QAAQ,CAC1F,QAAO,WAAW,4BAA4B;EAEhD,MAAM,SAAS,oBAAoB,UAAU,KAAK,QAAQ;AAC1D,MAAI,CAAC,OAAO,QACV,QAAO,WAAW,OAAO,MAAM,OAAO,KAAK,MAAM,EAAE,QAAQ,CAAC,KAAK,KAAK,CAAC;AAEzE,SAAO,UAAU,OAAO;;AAG1B,KACE,KAAK,YAAY,KAAA,KACjB,OAAO,KAAK,YAAY,YACxB,KAAK,YAAY,QACjB,CAAC,MAAM,QAAQ,KAAK,QAAQ,EAC5B;EACA,MAAM,UAAU,KAAK;AACrB,MAAI,QAAQ,8BAA8B,KAAA,KAAa,QAAQ,uBAAuB,KAAA,GAAW;GAC/F,MAAM,eAAe,mCAAmC,QAAQ;IAC9D,GAAI,QAAQ,8BAA8B,KAAA,IACtC,EAAE,2BAA2B,QAAQ,2BAA2B,GAChE,EAAE;IACN,GAAI,QAAQ,uBAAuB,KAAA,IAC/B,EAAE,oBAAoB,QAAQ,oBAAoB,GAClD,EAAE;IACP,CAAC;AACF,OAAI,aAAa,OAAO,MACtB,QAAO,WAAW,aAAa,QAAQ;;;AAM7C,KAAI,KAAK,WAAW;EAClB,MAAM,WAAW,IAAI,oBAAoB;AACzC,OAAK,MAAM,CAAC,KAAK,WAAW,OAAO,QAAQ,KAAK,UAAU,CACxD,KACE,WAAW,KAAA,KACX,OAAO,WAAW,YAClB,OAAO,MAAM,IACb,CAAC,yBAAyB,OAAO,CAEjC,OAAM,SAAS,WAAW,KAAK,QAAQ,EAAE,aAAa,WAAW,CAAC;;AAQxE,KAAI,KAAK,mBAAmB,OAAO,KAAK,oBAAoB,YAAY,CAAC,MAAM,QAAQ,KAAK,gBAAgB,EAAE;EAC5G,MAAM,eAAgB,OAAmE,aAAa,EAAE;AACxG,OAAK,MAAM,CAAC,UAAU,QAAQ,OAAO,QAAQ,KAAK,gBAA2C,EAAE;AAC7F,OAAI,CAAC,YAAY,OAAO,aAAa,SAAU;AAC/C,OAAI,QAAQ,MAAM;AAChB,WAAO,aAAa;AACpB;;AAEF,OAAI,CAAC,OAAO,OAAO,QAAQ,YAAY,MAAM,QAAQ,IAAI,CAAE;GAC3D,MAAM,OAAQ,aAAa,aAAa,EAAE;GAC1C,MAAM,QAAQ;AACd,QAAK,MAAM,SAAS;IAAC;IAAU;IAAW;IAAU;IAAe,CACjE,KAAI,MAAM,WAAW,QAAQ,MAAM,WAAW,GAC5C,QAAO,KAAK;YACH,OAAO,MAAM,WAAW,UAAU;IAC3C,MAAM,UAAW,MAAM,OAAkB,MAAM;AAC/C,QAAI,UAAU,YAAY,yBAAyB,QAAQ,CACzD;AAEF,SAAK,SAAS;;AAGlB,OAAI,MAAM,UAAU,KAClB,QAAO,KAAK;YACH,MAAM,SAAS,OAAO,MAAM,UAAU,YAAY,CAAC,MAAM,QAAQ,MAAM,MAAM,CACtF,MAAK,QAAQ;IAAE,GAAI,KAAK,SAAoC,EAAE;IAAG,GAAI,MAAM;IAAmC;AAEhH,OAAI,MAAM,YAAY,KACpB,QAAO,KAAK;YACH,MAAM,WAAW,OAAO,MAAM,YAAY,YAAY,CAAC,MAAM,QAAQ,MAAM,QAAQ,CAC5F,MAAK,UAAU;IAAE,GAAI,KAAK,WAAsC,EAAE;IAAG,GAAI,MAAM;IAAqC;AAEtH,gBAAa,YAAY;;AAE1B,SAAmE,YAAY;;AAIlF,KAAI,KAAK,QAAQ,KAAA,GAAW;AAC1B,SAAO,QAAQ,OAAO,SAAS,EAAE;AACjC,SAAO,MAAM,QAAQ,OAAO,MAAM,SAAS,EAAE;AAC5C,SAAO,MAAM,MAAkC,QAAQ,oBACtD,OAAO,MAAM,MAAM,OACnB,KAAK,IACN;;AAEH,KAAI,KAAK,QAAQ,KAAA,GAAW;AAC1B,SAAO,WAAW,OAAO,YAAY,EAAE;AACtC,SAAO,SAAqC,MAAM,oBACjD,OAAO,SAAS,KAChB,KAAK,IACN;;CAGH,MAAM,gBAAgB,mBAAmB,QAAQ,KAAgC;AACjF,KAAI,cACF,QAAO,WAAW,cAAc;AAGlC,KAAI,KAAK,WAAW,KAAA,GAAW;AAC7B,MAAI,CAAC,KAAK,UAAU,OAAO,KAAK,WAAW,YAAY,MAAM,QAAQ,KAAK,OAAO,CAC/E,QAAO,WAAW,2BAA2B;EAE/C,MAAM,eAAe,uBAAuB,QAAQ,KAAK,OAAkC;AAC3F,MAAI,aAAa,OAAO,MACtB,QAAO,WAAW,aAAa,QAAQ;;AAI3C,KAAI,KAAK,aAAa,KAAA,GAAW;AAC/B,MAAI,CAAC,MAAM,QAAQ,KAAK,SAAS,CAC/B,QAAO,WAAW,4BAA4B;EAEhD,MAAM,SAAS,qBAAqB,UAAU,KAAK,SAAS;AAC5D,MAAI,CAAC,OAAO,QACV,QAAO,WAAW,OAAO,MAAM,OAAO,KAAK,MAAM,EAAE,QAAQ,CAAC,KAAK,KAAK,CAAC;AAEzE,SAAO,WAAW,OAAO;;AAG3B,KAAI,KAAK,QAAQ,KAAA,EACf,KAAI,KAAK,QAAQ,KACf,QAAO,OAAO;UACL,OAAO,KAAK,QAAQ,YAAY,MAAM,QAAQ,KAAK,IAAI,CAChE,QAAO,WAAW,wBAAwB;MACrC;EACL,MAAM,SAAS,gBAAgB,UAAU,KAAK,IAAI;AAClD,MAAI,CAAC,OAAO,QACV,QAAO,WAAW,OAAO,MAAM,OAAO,KAAK,MAAM,EAAE,QAAQ,CAAC,KAAK,KAAK,CAAC;AAEzE,MAAI,OAAO,SAAS,KAAA,EAClB,QAAO,OAAO;OACT;GACL,MAAM,OAAO,EAAE,GAAG,OAAO,MAAM;AAC/B,OAAI,KAAK,QACP,MAAK,UAAU,OAAO,YACpB,OAAO,QAAQ,KAAK,QAAQ,CAAC,KAAK,CAAC,MAAM,YAAY,CACnD,MACA,gCAAgC,OAAkC,CACnE,CAAC,CACH;AAEH,UAAO,MAAM;;;AAKnB,QAAO;;;;;;;AAQT,SAAgB,0BAA0B,QAAgB,MAAwB;AAChF,KAAI,KAAK,YAAY,KAAA,EAAW,QAAO;AACvC,KAAI;EACF,MAAM,OAAO,mBAAmB,EAAE,YAAY,OAAO,SAAS,MAAM,CAAC;AACrE,8BAA4B,KAAK;AACjC,6BAA2B;GACzB,KAAK;GACL;GACA,MAAM,OAAO,SAAS,QAAQ;GAC/B,CAAC;UACK,KAAK;AAEZ,SAAO,WADS,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,CACtC;;AAE5B,QAAO"}

package/dist/src/gateway/hono/routes/config.js

@@ -96,7 +96,7 @@ function registerConfigRoutes(authenticated, deps) {
 	authenticated.post("/api/gateway/reveal-auth-secret", strictRateLimitMiddleware, revealGatewayAuthSecretHandler);
 	/** POST /api/agents/browser/reveal-cloud-api-key — plaintext browser cloud apiKey from config only. */
 	authenticated.post("/api/agents/browser/reveal-cloud-api-key", strictRateLimitMiddleware, async (c) => {
-		const apiKey = service.currentConfig.agents?.defaults?.browser?.cloud?.apiKey?.trim() || null;
+		const apiKey = service.currentConfig.browser?.cloud?.apiKey?.trim() || null;
 		return c.json({
 			ok: true,
 			payload: {

package/dist/src/gateway/hono/routes/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","names":[],"sources":["../../../../../src/gateway/hono/routes/config.ts"],"sourcesContent":["import type { Context, Hono } from 'hono';\n\nimport type { Config } from '../../../config/schema.js';\nimport { buildSafeWebConfigPayload } from '../lib/config-payload.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\nimport {\n  applyAgentsPatch,\n  applyChannelsPatch,\n  applyGatewayPatch,\n  applyMiscPatch,\n  validateGatewayAfterPatch,\n} from './config-patch/index.js';\n\nfunction localeFromRequest(c: { req: { query(name: string): string | undefined; header(name: string): string | undefined } }): string | undefined {\n  return c.req.query('locale') ?? c.req.header('X-XOPC-Locale') ?? c.req.header('Accept-Language')?.split(',')[0];\n}\n\nexport function registerConfigRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  const { service, strictRateLimitMiddleware } = deps;\n\n  authenticated.post('/api/config/reload', strictRateLimitMiddleware, async (c) => {\n    const result = await service.reloadConfig();\n    return c.json({ ok: true, payload: result });\n  });\n\n  authenticated.post('/api/heartbeat/trigger', strictRateLimitMiddleware, async (c) => {\n    let reason = 'manual';\n    try {\n      const body = await c.req.json();\n      if (body && typeof body === 'object' && typeof (body as { reason?: unknown }).reason === 'string') {\n        const r = (body as { reason: string }).reason.trim();\n        if (r) reason = r.slice(0, 120);\n      }\n    } catch {\n      /* empty or invalid body */\n    }\n    service.requestHeartbeatNow({ reason });\n    return c.json({ ok: true, payload: { scheduled: true } });\n  });\n\n  authenticated.get('/api/config', async (c) => {\n    const safeConfig = await buildSafeWebConfigPayload(service, { locale: localeFromRequest(c) });\n    return c.json({ ok: true, payload: { config: safeConfig } });\n  });\n\n  // PATCH /api/config — section patchers run sequentially against the live\n  // config object (mutate-in-place is intentional: the route handler reads\n  // `service.currentConfig` and rewrites it through `saveConfig`). Each\n  // patcher only touches the keys it owns and returns `{ ok: false }` with a\n  // 400 body when validation fails; we surface the first failure verbatim.\n  authenticated.patch('/api/config', strictRateLimitMiddleware, async (c) => {\n    const body = await c.req.json();\n    const config: Config = service.currentConfig as Config;\n\n    applyAgentsPatch(config, body);\n    applyChannelsPatch(config, body);\n\n    const gatewayResult = applyGatewayPatch(config, body);\n    if (gatewayResult.ok === false) {\n      return c.json({ ok: false, error: gatewayResult.error }, gatewayResult.status as 400 | 500);\n    }\n\n    const miscResult = await applyMiscPatch(config, body);\n    if (miscResult.ok === false) {\n      return c.json({ ok: false, error: miscResult.error }, miscResult.status as 400 | 500);\n    }\n\n    const finalGwCheck = validateGatewayAfterPatch(config, body);\n    if (finalGwCheck.ok === false) {\n      return c.json({ ok: false, error: finalGwCheck.error }, finalGwCheck.status as 400 | 500);\n    }\n\n    const result = await service.saveConfig(config);\n    if (!result.saved) {\n      return c.json({ ok: false, error: result.error }, 500);\n    }\n\n    if (body.gateway?.heartbeat !== undefined && typeof body.gateway.heartbeat === 'object') {\n      service.reloadHeartbeatFromCurrentConfig();\n    }\n\n    const safeConfig = await buildSafeWebConfigPayload(service, { locale: localeFromRequest(c) });\n    return c.json({ ok: true, payload: { config: safeConfig } });\n  });\n\n  const revealGatewayAuthSecretHandler = async (c: Context) => {\n    const field = await resolveRevealGatewayAuthField(c);\n    if (!field) {\n      return c.json({ ok: false, error: { message: 'field must be token or password' } }, 400);\n    }\n    const config = service.currentConfig as Config;\n    const secret =\n      field === 'token'\n        ? config.gateway?.auth?.token?.trim() || null\n        : config.gateway?.auth?.password?.trim() || null;\n    return c.json({\n      ok: true,\n      payload: { field, secret, source: secret ? ('config' as const) : ('none' as const) },\n    });\n  };\n\n  /**\n   * POST /api/gateway/reveal-auth-secret/:field — preferred; no JSON body required.\n   * POST /api/gateway/reveal-auth-secret — legacy JSON body `{ field: \"token\" | \"password\" }`.\n   */\n  authenticated.post(\n    '/api/gateway/reveal-auth-secret/:field',\n    strictRateLimitMiddleware,\n    revealGatewayAuthSecretHandler,\n  );\n  authenticated.post('/api/gateway/reveal-auth-secret', strictRateLimitMiddleware, revealGatewayAuthSecretHandler);\n\n  /** POST /api/agents/browser/reveal-cloud-api-key — plaintext browser cloud apiKey from config only. */\n  authenticated.post('/api/agents/browser/reveal-cloud-api-key', strictRateLimitMiddleware, async (c) => {\n    const config = service.currentConfig as Config;\n    const apiKey = config.agents?.defaults?.browser?.cloud?.apiKey?.trim() || null;\n    return c.json({\n      ok: true,\n      payload: { apiKey, source: apiKey ? ('config' as const) : ('none' as const) },\n    });\n  });\n\n  /** POST /api/tools/web/reveal-search-api-key — plaintext search provider apiKey by index. */\n  authenticated.post('/api/tools/web/reveal-search-api-key', strictRateLimitMiddleware, async (c) => {\n    let index = -1;\n    try {\n      const body = await c.req.json();\n      if (body && typeof body === 'object' && typeof (body as { index?: unknown }).index === 'number') {\n        index = Math.floor((body as { index: number }).index);\n      }\n    } catch {\n      index = -1;\n    }\n    const providers = service.currentConfig.tools?.web?.search?.providers ?? [];\n    if (index < 0 || index >= providers.length) {\n      return c.json({ ok: false, error: { message: 'Invalid provider index' } }, 400);\n    }\n    const apiKey = providers[index]?.apiKey?.trim() || null;\n    return c.json({\n      ok: true,\n      payload: { index, apiKey, source: apiKey ? ('config' as const) : ('none' as const) },\n    });\n  });\n}\n\nfunction normalizeRevealGatewayAuthField(raw: unknown): 'token' | 'password' | null {\n  return raw === 'token' || raw === 'password' ? raw : null;\n}\n\nasync function resolveRevealGatewayAuthField(c: Context): Promise<'token' | 'password' | null> {\n  const fromPath = normalizeRevealGatewayAuthField(c.req.param('field'));\n  if (fromPath) return fromPath;\n\n  const fromQuery = normalizeRevealGatewayAuthField(c.req.query('field'));\n  if (fromQuery) return fromQuery;\n\n  try {\n    const body = await c.req.json();\n    return normalizeRevealGatewayAuthField(\n      body && typeof body === 'object' && !Array.isArray(body)\n        ? (body as { field?: unknown }).field\n        : undefined,\n    );\n  } catch {\n    return null;\n  }\n}\n"],"mappings":";;;;;;;AAaA,SAAS,kBAAkB,GAAuH;AAChJ,QAAO,EAAE,IAAI,MAAM,SAAS,IAAI,EAAE,IAAI,OAAO,gBAAgB,IAAI,EAAE,IAAI,OAAO,kBAAkB,EAAE,MAAM,IAAI,CAAC;;AAG/G,SAAgB,qBAAqB,eAAqB,MAAoC;CAC5F,MAAM,EAAE,SAAS,8BAA8B;AAE/C,eAAc,KAAK,sBAAsB,2BAA2B,OAAO,MAAM;EAC/E,MAAM,SAAS,MAAM,QAAQ,cAAc;AAC3C,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;GAAQ,CAAC;GAC5C;AAEF,eAAc,KAAK,0BAA0B,2BAA2B,OAAO,MAAM;EACnF,IAAI,SAAS;AACb,MAAI;GACF,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM;AAC/B,OAAI,QAAQ,OAAO,SAAS,YAAY,OAAQ,KAA8B,WAAW,UAAU;IACjG,MAAM,IAAK,KAA4B,OAAO,MAAM;AACpD,QAAI,EAAG,UAAS,EAAE,MAAM,GAAG,IAAI;;UAE3B;AAGR,UAAQ,oBAAoB,EAAE,QAAQ,CAAC;AACvC,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,WAAW,MAAM;GAAE,CAAC;GACzD;AAEF,eAAc,IAAI,eAAe,OAAO,MAAM;EAC5C,MAAM,aAAa,MAAM,0BAA0B,SAAS,EAAE,QAAQ,kBAAkB,EAAE,EAAE,CAAC;AAC7F,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,QAAQ,YAAY;GAAE,CAAC;GAC5D;AAOF,eAAc,MAAM,eAAe,2BAA2B,OAAO,MAAM;EACzE,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM;EAC/B,MAAM,SAAiB,QAAQ;AAE/B,mBAAiB,QAAQ,KAAK;AAC9B,qBAAmB,QAAQ,KAAK;EAEhC,MAAM,gBAAgB,kBAAkB,QAAQ,KAAK;AACrD,MAAI,cAAc,OAAO,MACvB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,cAAc;GAAO,EAAE,cAAc,OAAoB;EAG7F,MAAM,aAAa,MAAM,eAAe,QAAQ,KAAK;AACrD,MAAI,WAAW,OAAO,MACpB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,WAAW;GAAO,EAAE,WAAW,OAAoB;EAGvF,MAAM,eAAe,0BAA0B,QAAQ,KAAK;AAC5D,MAAI,aAAa,OAAO,MACtB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,aAAa;GAAO,EAAE,aAAa,OAAoB;EAG3F,MAAM,SAAS,MAAM,QAAQ,WAAW,OAAO;AAC/C,MAAI,CAAC,OAAO,MACV,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,OAAO;GAAO,EAAE,IAAI;AAGxD,MAAI,KAAK,SAAS,cAAc,KAAA,KAAa,OAAO,KAAK,QAAQ,cAAc,SAC7E,SAAQ,kCAAkC;EAG5C,MAAM,aAAa,MAAM,0BAA0B,SAAS,EAAE,QAAQ,kBAAkB,EAAE,EAAE,CAAC;AAC7F,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,QAAQ,YAAY;GAAE,CAAC;GAC5D;CAEF,MAAM,iCAAiC,OAAO,MAAe;EAC3D,MAAM,QAAQ,MAAM,8BAA8B,EAAE;AACpD,MAAI,CAAC,MACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,mCAAmC;GAAE,EAAE,IAAI;EAE1F,MAAM,SAAS,QAAQ;EACvB,MAAM,SACJ,UAAU,UACN,OAAO,SAAS,MAAM,OAAO,MAAM,IAAI,OACvC,OAAO,SAAS,MAAM,UAAU,MAAM,IAAI;AAChD,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IAAE;IAAO;IAAQ,QAAQ,SAAU,WAAsB;IAAkB;GACrF,CAAC;;;;;;AAOJ,eAAc,KACZ,0CACA,2BACA,+BACD;AACD,eAAc,KAAK,mCAAmC,2BAA2B,+BAA+B;;AAGhH,eAAc,KAAK,4CAA4C,2BAA2B,OAAO,MAAM;EAErG,MAAM,SADS,QAAQ,cACD,QAAQ,UAAU,SAAS,OAAO,QAAQ,MAAM,IAAI;AAC1E,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IAAE;IAAQ,QAAQ,SAAU,WAAsB;IAAkB;GAC9E,CAAC;GACF;;AAGF,eAAc,KAAK,wCAAwC,2BAA2B,OAAO,MAAM;EACjG,IAAI,QAAQ;AACZ,MAAI;GACF,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM;AAC/B,OAAI,QAAQ,OAAO,SAAS,YAAY,OAAQ,KAA6B,UAAU,SACrF,SAAQ,KAAK,MAAO,KAA2B,MAAM;UAEjD;AACN,WAAQ;;EAEV,MAAM,YAAY,QAAQ,cAAc,OAAO,KAAK,QAAQ,aAAa,EAAE;AAC3E,MAAI,QAAQ,KAAK,SAAS,UAAU,OAClC,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,0BAA0B;GAAE,EAAE,IAAI;EAEjF,MAAM,SAAS,UAAU,QAAQ,QAAQ,MAAM,IAAI;AACnD,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IAAE;IAAO;IAAQ,QAAQ,SAAU,WAAsB;IAAkB;GACrF,CAAC;GACF;;AAGJ,SAAS,gCAAgC,KAA2C;AAClF,QAAO,QAAQ,WAAW,QAAQ,aAAa,MAAM;;AAGvD,eAAe,8BAA8B,GAAkD;CAC7F,MAAM,WAAW,gCAAgC,EAAE,IAAI,MAAM,QAAQ,CAAC;AACtE,KAAI,SAAU,QAAO;CAErB,MAAM,YAAY,gCAAgC,EAAE,IAAI,MAAM,QAAQ,CAAC;AACvE,KAAI,UAAW,QAAO;AAEtB,KAAI;EACF,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM;AAC/B,SAAO,gCACL,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,GACnD,KAA6B,QAC9B,KAAA,EACL;SACK;AACN,SAAO"}
+{"version":3,"file":"config.js","names":[],"sources":["../../../../../src/gateway/hono/routes/config.ts"],"sourcesContent":["import type { Context, Hono } from 'hono';\n\nimport type { Config } from '../../../config/schema.js';\nimport { buildSafeWebConfigPayload } from '../lib/config-payload.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\nimport {\n  applyAgentsPatch,\n  applyChannelsPatch,\n  applyGatewayPatch,\n  applyMiscPatch,\n  validateGatewayAfterPatch,\n} from './config-patch/index.js';\n\nfunction localeFromRequest(c: { req: { query(name: string): string | undefined; header(name: string): string | undefined } }): string | undefined {\n  return c.req.query('locale') ?? c.req.header('X-XOPC-Locale') ?? c.req.header('Accept-Language')?.split(',')[0];\n}\n\nexport function registerConfigRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  const { service, strictRateLimitMiddleware } = deps;\n\n  authenticated.post('/api/config/reload', strictRateLimitMiddleware, async (c) => {\n    const result = await service.reloadConfig();\n    return c.json({ ok: true, payload: result });\n  });\n\n  authenticated.post('/api/heartbeat/trigger', strictRateLimitMiddleware, async (c) => {\n    let reason = 'manual';\n    try {\n      const body = await c.req.json();\n      if (body && typeof body === 'object' && typeof (body as { reason?: unknown }).reason === 'string') {\n        const r = (body as { reason: string }).reason.trim();\n        if (r) reason = r.slice(0, 120);\n      }\n    } catch {\n      /* empty or invalid body */\n    }\n    service.requestHeartbeatNow({ reason });\n    return c.json({ ok: true, payload: { scheduled: true } });\n  });\n\n  authenticated.get('/api/config', async (c) => {\n    const safeConfig = await buildSafeWebConfigPayload(service, { locale: localeFromRequest(c) });\n    return c.json({ ok: true, payload: { config: safeConfig } });\n  });\n\n  // PATCH /api/config — section patchers run sequentially against the live\n  // config object (mutate-in-place is intentional: the route handler reads\n  // `service.currentConfig` and rewrites it through `saveConfig`). Each\n  // patcher only touches the keys it owns and returns `{ ok: false }` with a\n  // 400 body when validation fails; we surface the first failure verbatim.\n  authenticated.patch('/api/config', strictRateLimitMiddleware, async (c) => {\n    const body = await c.req.json();\n    const config: Config = service.currentConfig as Config;\n\n    applyAgentsPatch(config, body);\n    applyChannelsPatch(config, body);\n\n    const gatewayResult = applyGatewayPatch(config, body);\n    if (gatewayResult.ok === false) {\n      return c.json({ ok: false, error: gatewayResult.error }, gatewayResult.status as 400 | 500);\n    }\n\n    const miscResult = await applyMiscPatch(config, body);\n    if (miscResult.ok === false) {\n      return c.json({ ok: false, error: miscResult.error }, miscResult.status as 400 | 500);\n    }\n\n    const finalGwCheck = validateGatewayAfterPatch(config, body);\n    if (finalGwCheck.ok === false) {\n      return c.json({ ok: false, error: finalGwCheck.error }, finalGwCheck.status as 400 | 500);\n    }\n\n    const result = await service.saveConfig(config);\n    if (!result.saved) {\n      return c.json({ ok: false, error: result.error }, 500);\n    }\n\n    if (body.gateway?.heartbeat !== undefined && typeof body.gateway.heartbeat === 'object') {\n      service.reloadHeartbeatFromCurrentConfig();\n    }\n\n    const safeConfig = await buildSafeWebConfigPayload(service, { locale: localeFromRequest(c) });\n    return c.json({ ok: true, payload: { config: safeConfig } });\n  });\n\n  const revealGatewayAuthSecretHandler = async (c: Context) => {\n    const field = await resolveRevealGatewayAuthField(c);\n    if (!field) {\n      return c.json({ ok: false, error: { message: 'field must be token or password' } }, 400);\n    }\n    const config = service.currentConfig as Config;\n    const secret =\n      field === 'token'\n        ? config.gateway?.auth?.token?.trim() || null\n        : config.gateway?.auth?.password?.trim() || null;\n    return c.json({\n      ok: true,\n      payload: { field, secret, source: secret ? ('config' as const) : ('none' as const) },\n    });\n  };\n\n  /**\n   * POST /api/gateway/reveal-auth-secret/:field — preferred; no JSON body required.\n   * POST /api/gateway/reveal-auth-secret — legacy JSON body `{ field: \"token\" | \"password\" }`.\n   */\n  authenticated.post(\n    '/api/gateway/reveal-auth-secret/:field',\n    strictRateLimitMiddleware,\n    revealGatewayAuthSecretHandler,\n  );\n  authenticated.post('/api/gateway/reveal-auth-secret', strictRateLimitMiddleware, revealGatewayAuthSecretHandler);\n\n  /** POST /api/agents/browser/reveal-cloud-api-key — plaintext browser cloud apiKey from config only. */\n  authenticated.post('/api/agents/browser/reveal-cloud-api-key', strictRateLimitMiddleware, async (c) => {\n    const config = service.currentConfig as Config;\n    const apiKey = config.browser?.cloud?.apiKey?.trim() || null;\n    return c.json({\n      ok: true,\n      payload: { apiKey, source: apiKey ? ('config' as const) : ('none' as const) },\n    });\n  });\n\n  /** POST /api/tools/web/reveal-search-api-key — plaintext search provider apiKey by index. */\n  authenticated.post('/api/tools/web/reveal-search-api-key', strictRateLimitMiddleware, async (c) => {\n    let index = -1;\n    try {\n      const body = await c.req.json();\n      if (body && typeof body === 'object' && typeof (body as { index?: unknown }).index === 'number') {\n        index = Math.floor((body as { index: number }).index);\n      }\n    } catch {\n      index = -1;\n    }\n    const providers = service.currentConfig.tools?.web?.search?.providers ?? [];\n    if (index < 0 || index >= providers.length) {\n      return c.json({ ok: false, error: { message: 'Invalid provider index' } }, 400);\n    }\n    const apiKey = providers[index]?.apiKey?.trim() || null;\n    return c.json({\n      ok: true,\n      payload: { index, apiKey, source: apiKey ? ('config' as const) : ('none' as const) },\n    });\n  });\n}\n\nfunction normalizeRevealGatewayAuthField(raw: unknown): 'token' | 'password' | null {\n  return raw === 'token' || raw === 'password' ? raw : null;\n}\n\nasync function resolveRevealGatewayAuthField(c: Context): Promise<'token' | 'password' | null> {\n  const fromPath = normalizeRevealGatewayAuthField(c.req.param('field'));\n  if (fromPath) return fromPath;\n\n  const fromQuery = normalizeRevealGatewayAuthField(c.req.query('field'));\n  if (fromQuery) return fromQuery;\n\n  try {\n    const body = await c.req.json();\n    return normalizeRevealGatewayAuthField(\n      body && typeof body === 'object' && !Array.isArray(body)\n        ? (body as { field?: unknown }).field\n        : undefined,\n    );\n  } catch {\n    return null;\n  }\n}\n"],"mappings":";;;;;;;AAaA,SAAS,kBAAkB,GAAuH;AAChJ,QAAO,EAAE,IAAI,MAAM,SAAS,IAAI,EAAE,IAAI,OAAO,gBAAgB,IAAI,EAAE,IAAI,OAAO,kBAAkB,EAAE,MAAM,IAAI,CAAC;;AAG/G,SAAgB,qBAAqB,eAAqB,MAAoC;CAC5F,MAAM,EAAE,SAAS,8BAA8B;AAE/C,eAAc,KAAK,sBAAsB,2BAA2B,OAAO,MAAM;EAC/E,MAAM,SAAS,MAAM,QAAQ,cAAc;AAC3C,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;GAAQ,CAAC;GAC5C;AAEF,eAAc,KAAK,0BAA0B,2BAA2B,OAAO,MAAM;EACnF,IAAI,SAAS;AACb,MAAI;GACF,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM;AAC/B,OAAI,QAAQ,OAAO,SAAS,YAAY,OAAQ,KAA8B,WAAW,UAAU;IACjG,MAAM,IAAK,KAA4B,OAAO,MAAM;AACpD,QAAI,EAAG,UAAS,EAAE,MAAM,GAAG,IAAI;;UAE3B;AAGR,UAAQ,oBAAoB,EAAE,QAAQ,CAAC;AACvC,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,WAAW,MAAM;GAAE,CAAC;GACzD;AAEF,eAAc,IAAI,eAAe,OAAO,MAAM;EAC5C,MAAM,aAAa,MAAM,0BAA0B,SAAS,EAAE,QAAQ,kBAAkB,EAAE,EAAE,CAAC;AAC7F,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,QAAQ,YAAY;GAAE,CAAC;GAC5D;AAOF,eAAc,MAAM,eAAe,2BAA2B,OAAO,MAAM;EACzE,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM;EAC/B,MAAM,SAAiB,QAAQ;AAE/B,mBAAiB,QAAQ,KAAK;AAC9B,qBAAmB,QAAQ,KAAK;EAEhC,MAAM,gBAAgB,kBAAkB,QAAQ,KAAK;AACrD,MAAI,cAAc,OAAO,MACvB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,cAAc;GAAO,EAAE,cAAc,OAAoB;EAG7F,MAAM,aAAa,MAAM,eAAe,QAAQ,KAAK;AACrD,MAAI,WAAW,OAAO,MACpB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,WAAW;GAAO,EAAE,WAAW,OAAoB;EAGvF,MAAM,eAAe,0BAA0B,QAAQ,KAAK;AAC5D,MAAI,aAAa,OAAO,MACtB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,aAAa;GAAO,EAAE,aAAa,OAAoB;EAG3F,MAAM,SAAS,MAAM,QAAQ,WAAW,OAAO;AAC/C,MAAI,CAAC,OAAO,MACV,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,OAAO;GAAO,EAAE,IAAI;AAGxD,MAAI,KAAK,SAAS,cAAc,KAAA,KAAa,OAAO,KAAK,QAAQ,cAAc,SAC7E,SAAQ,kCAAkC;EAG5C,MAAM,aAAa,MAAM,0BAA0B,SAAS,EAAE,QAAQ,kBAAkB,EAAE,EAAE,CAAC;AAC7F,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,QAAQ,YAAY;GAAE,CAAC;GAC5D;CAEF,MAAM,iCAAiC,OAAO,MAAe;EAC3D,MAAM,QAAQ,MAAM,8BAA8B,EAAE;AACpD,MAAI,CAAC,MACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,mCAAmC;GAAE,EAAE,IAAI;EAE1F,MAAM,SAAS,QAAQ;EACvB,MAAM,SACJ,UAAU,UACN,OAAO,SAAS,MAAM,OAAO,MAAM,IAAI,OACvC,OAAO,SAAS,MAAM,UAAU,MAAM,IAAI;AAChD,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IAAE;IAAO;IAAQ,QAAQ,SAAU,WAAsB;IAAkB;GACrF,CAAC;;;;;;AAOJ,eAAc,KACZ,0CACA,2BACA,+BACD;AACD,eAAc,KAAK,mCAAmC,2BAA2B,+BAA+B;;AAGhH,eAAc,KAAK,4CAA4C,2BAA2B,OAAO,MAAM;EAErG,MAAM,SADS,QAAQ,cACD,SAAS,OAAO,QAAQ,MAAM,IAAI;AACxD,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IAAE;IAAQ,QAAQ,SAAU,WAAsB;IAAkB;GAC9E,CAAC;GACF;;AAGF,eAAc,KAAK,wCAAwC,2BAA2B,OAAO,MAAM;EACjG,IAAI,QAAQ;AACZ,MAAI;GACF,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM;AAC/B,OAAI,QAAQ,OAAO,SAAS,YAAY,OAAQ,KAA6B,UAAU,SACrF,SAAQ,KAAK,MAAO,KAA2B,MAAM;UAEjD;AACN,WAAQ;;EAEV,MAAM,YAAY,QAAQ,cAAc,OAAO,KAAK,QAAQ,aAAa,EAAE;AAC3E,MAAI,QAAQ,KAAK,SAAS,UAAU,OAClC,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,0BAA0B;GAAE,EAAE,IAAI;EAEjF,MAAM,SAAS,UAAU,QAAQ,QAAQ,MAAM,IAAI;AACnD,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IAAE;IAAO;IAAQ,QAAQ,SAAU,WAAsB;IAAkB;GACrF,CAAC;GACF;;AAGJ,SAAS,gCAAgC,KAA2C;AAClF,QAAO,QAAQ,WAAW,QAAQ,aAAa,MAAM;;AAGvD,eAAe,8BAA8B,GAAkD;CAC7F,MAAM,WAAW,gCAAgC,EAAE,IAAI,MAAM,QAAQ,CAAC;AACtE,KAAI,SAAU,QAAO;CAErB,MAAM,YAAY,gCAAgC,EAAE,IAAI,MAAM,QAAQ,CAAC;AACvE,KAAI,UAAW,QAAO;AAEtB,KAAI;EACF,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM;AAC/B,SAAO,gCACL,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,GACnD,KAA6B,QAC9B,KAAA,EACL;SACK;AACN,SAAO"}

package/dist/src/gateway/hono/routes/connectors.js

@@ -1,10 +1,15 @@
+import { createConnectorSetupSecretRequest, submitConnectorSetupSecret } from "../../../connectors/setup-secrets.js";
+import { executeComposioTool, getComposioToolkitScope, listComposioConnections, listComposioTools, setComposioToolkitScope, startComposioAuthorize } from "../../../connectors/composio.js";
 import { listConnectorProviders } from "../../../connectors/providers.js";
 import { getConnectorDefinition, listConnectorCatalog } from "../../../connectors/catalog.js";
+import { appendComposioTriggerEvent, listComposioTriggerEvents } from "../../../connectors/composio-triggers.js";
 import { recordConnectorHealthUsage } from "../../../connectors/usage.js";
 import { getConnectorInstance, listConnectorInstances } from "../../../connectors/instances.js";
 import { testConnectorInstance } from "../../../connectors/health.js";
 import { completeConnectorOAuth, startConnectorOAuth } from "../../../connectors/oauth.js";
-import { installConnector, uninstallConnector } from "../../../connectors/install.js";
+import { installConnector, installConnectorDefinition, uninstallConnector } from "../../../connectors/install.js";
+import { setConnectorEnabled } from "../../../connectors/lifecycle.js";
+import { isConnectorRegistrySource, listConnectorRegistries, searchConnectorRegistries } from "../../../connectors/registries/search.js";
 //#region src/gateway/hono/routes/connectors.ts
 function errorMessage(error) {
 	return error instanceof Error ? error.message : String(error);
@@ -19,7 +24,8 @@ function registerConnectorRoutes(authenticated, deps) {
 				providers: listConnectorProviders().map((provider) => ({
 					id: provider.id,
 					displayName: provider.displayName
-				}))
+				})),
+				registries: listConnectorRegistries()
 			}
 		});
 	});
@@ -30,6 +36,180 @@ function registerConnectorRoutes(authenticated, deps) {
 			payload: { instances: listConnectorInstances(config) }
 		});
 	});
+	authenticated.get("/api/connectors/registry/search", async (c) => {
+		const query = c.req.query("q") ?? c.req.query("query") ?? "";
+		const sourceParam = c.req.query("source") ?? "all";
+		const results = await searchConnectorRegistries({
+			query,
+			source: sourceParam !== "all" && isConnectorRegistrySource(sourceParam) ? sourceParam : "all",
+			page: Number(c.req.query("page") ?? "1"),
+			pageSize: Number(c.req.query("pageSize") ?? "24"),
+			browse: c.req.query("browse") === "1" || c.req.query("browse") === "true"
+		});
+		return c.json({
+			ok: true,
+			payload: {
+				results,
+				connectors: results.flatMap((result) => result.connectors)
+			}
+		});
+	});
+	authenticated.post("/api/connectors/setup/request-secret", strictRateLimitMiddleware, async (c) => {
+		const body = await c.req.json().catch(() => ({}));
+		const key = body && typeof body === "object" && !Array.isArray(body) && typeof body.key === "string" ? body.key.trim() : "";
+		if (!key) return c.json({
+			ok: false,
+			error: "Missing secret key."
+		}, 400);
+		const label = body && typeof body === "object" && !Array.isArray(body) && typeof body.label === "string" ? body.label : void 0;
+		return c.json({
+			ok: true,
+			payload: { request: createConnectorSetupSecretRequest({
+				key,
+				label
+			}) }
+		});
+	});
+	authenticated.post("/api/connectors/setup/submit-secret", strictRateLimitMiddleware, async (c) => {
+		const body = await c.req.json().catch(() => ({}));
+		const accepted = submitConnectorSetupSecret(body && typeof body === "object" && !Array.isArray(body) && typeof body.ref === "string" ? body.ref : "", body && typeof body === "object" && !Array.isArray(body) && typeof body.value === "string" ? body.value : "");
+		return c.json({
+			ok: accepted,
+			payload: { accepted },
+			error: accepted ? void 0 : "Unknown, expired, or empty secret."
+		}, accepted ? 200 : 400);
+	});
+	authenticated.get("/api/connectors/composio/connections", async (c) => {
+		try {
+			return c.json({
+				ok: true,
+				payload: { connections: await listComposioConnections() }
+			});
+		} catch (error) {
+			return c.json({
+				ok: false,
+				error: errorMessage(error)
+			}, 400);
+		}
+	});
+	authenticated.post("/api/connectors/composio/:toolkit/authorize", strictRateLimitMiddleware, async (c) => {
+		try {
+			const toolkit = c.req.param("toolkit");
+			return c.json({
+				ok: true,
+				payload: { oauth: await startComposioAuthorize(toolkit) }
+			});
+		} catch (error) {
+			return c.json({
+				ok: false,
+				error: errorMessage(error)
+			}, 400);
+		}
+	});
+	authenticated.get("/api/connectors/composio/:toolkit/tools", async (c) => {
+		try {
+			const toolkit = c.req.param("toolkit");
+			return c.json({
+				ok: true,
+				payload: { tools: await listComposioTools(toolkit, service.currentConfig) }
+			});
+		} catch (error) {
+			return c.json({
+				ok: false,
+				error: errorMessage(error)
+			}, 400);
+		}
+	});
+	authenticated.get("/api/connectors/composio/:toolkit/scope", async (c) => {
+		const toolkit = c.req.param("toolkit");
+		return c.json({
+			ok: true,
+			payload: {
+				toolkit,
+				scope: getComposioToolkitScope(service.currentConfig, toolkit)
+			}
+		});
+	});
+	authenticated.post("/api/connectors/composio/:toolkit/scope", strictRateLimitMiddleware, async (c) => {
+		const toolkit = c.req.param("toolkit");
+		const body = await c.req.json().catch(() => ({}));
+		const scope = body && typeof body === "object" && !Array.isArray(body) && typeof body.scope === "string" ? body.scope : "";
+		if (scope !== "read" && scope !== "write" && scope !== "admin") return c.json({
+			ok: false,
+			error: "Scope must be read, write, or admin."
+		}, 400);
+		const config = service.currentConfig;
+		try {
+			setComposioToolkitScope(config, toolkit, scope);
+			const saved = await service.saveConfig(config);
+			if (!saved.saved) return c.json({
+				ok: false,
+				error: saved.error
+			}, 500);
+			return c.json({
+				ok: true,
+				payload: {
+					toolkit,
+					scope
+				}
+			});
+		} catch (error) {
+			return c.json({
+				ok: false,
+				error: errorMessage(error)
+			}, 400);
+		}
+	});
+	authenticated.post("/api/connectors/composio/tools/:slug/execute", strictRateLimitMiddleware, async (c) => {
+		const body = await c.req.json().catch(() => ({}));
+		try {
+			const slug = c.req.param("slug");
+			const args = body && typeof body === "object" && !Array.isArray(body) ? body.arguments : void 0;
+			return c.json({
+				ok: true,
+				payload: { result: await executeComposioTool({
+					slug,
+					arguments: args,
+					config: service.currentConfig
+				}) }
+			});
+		} catch (error) {
+			return c.json({
+				ok: false,
+				error: errorMessage(error)
+			}, 400);
+		}
+	});
+	authenticated.post("/api/connectors/composio/triggers", strictRateLimitMiddleware, async (c) => {
+		const body = await c.req.json().catch(() => ({}));
+		try {
+			const event = await appendComposioTriggerEvent(service.currentConfig, body);
+			return c.json({
+				ok: true,
+				payload: { event }
+			});
+		} catch (error) {
+			return c.json({
+				ok: false,
+				error: errorMessage(error)
+			}, 400);
+		}
+	});
+	authenticated.get("/api/connectors/composio/triggers", async (c) => {
+		const limit = Number(c.req.query("limit") ?? "50");
+		try {
+			const events = await listComposioTriggerEvents(service.currentConfig, limit);
+			return c.json({
+				ok: true,
+				payload: { events }
+			});
+		} catch (error) {
+			return c.json({
+				ok: false,
+				error: errorMessage(error)
+			}, 400);
+		}
+	});
 	authenticated.get("/api/connectors/:id", (c) => {
 		const connectorId = c.req.param("id");
 		const connector = getConnectorDefinition(connectorId);
@@ -103,9 +283,10 @@ function registerConnectorRoutes(authenticated, deps) {
 		const connectorId = c.req.param("id");
 		const body = await c.req.json().catch(() => ({}));
 		const input = body && typeof body === "object" && !Array.isArray(body) ? body : {};
+		const registryDefinition = body && typeof body === "object" && !Array.isArray(body) && body.definition && typeof body.definition === "object" && !Array.isArray(body.definition) ? body.definition : void 0;
 		const config = service.currentConfig;
 		try {
-			const instance = await installConnector(config, connectorId, input);
+			const instance = registryDefinition?.id === connectorId ? await installConnectorDefinition(config, registryDefinition, input) : await installConnector(config, connectorId, input);
 			const saved = await service.saveConfig(config);
 			if (!saved.saved) return c.json({
 				ok: false,
@@ -130,6 +311,10 @@ function registerConnectorRoutes(authenticated, deps) {
 			ok: false,
 			error: `Connector instance not found: ${instanceId}`
 		}, 404);
+		if (instance.materialized.type !== "mcp") return c.json({
+			ok: false,
+			error: `Connector type "${instance.materialized.type}" does not support MCP health checks.`
+		}, 400);
 		try {
 			const result = await testConnectorInstance(config, instance.materialized.serverId);
 			recordConnectorHealthUsage(config, instance.instanceId, result);
@@ -149,6 +334,48 @@ function registerConnectorRoutes(authenticated, deps) {
 			}, 500);
 		}
 	});
+	authenticated.post("/api/connectors/:id/enable", strictRateLimitMiddleware, async (c) => {
+		const instanceId = c.req.param("id");
+		const config = service.currentConfig;
+		try {
+			const instance = setConnectorEnabled(config, instanceId, true);
+			const saved = await service.saveConfig(config);
+			if (!saved.saved) return c.json({
+				ok: false,
+				error: saved.error
+			}, 500);
+			return c.json({
+				ok: true,
+				payload: { instance }
+			});
+		} catch (error) {
+			return c.json({
+				ok: false,
+				error: errorMessage(error)
+			}, 400);
+		}
+	});
+	authenticated.post("/api/connectors/:id/disable", strictRateLimitMiddleware, async (c) => {
+		const instanceId = c.req.param("id");
+		const config = service.currentConfig;
+		try {
+			const instance = setConnectorEnabled(config, instanceId, false);
+			const saved = await service.saveConfig(config);
+			if (!saved.saved) return c.json({
+				ok: false,
+				error: saved.error
+			}, 500);
+			return c.json({
+				ok: true,
+				payload: { instance }
+			});
+		} catch (error) {
+			return c.json({
+				ok: false,
+				error: errorMessage(error)
+			}, 400);
+		}
+	});
 	authenticated.delete("/api/connectors/:id", strictRateLimitMiddleware, async (c) => {
 		const instanceId = c.req.param("id");
 		const config = service.currentConfig;

package/dist/src/gateway/hono/routes/connectors.js.map

@@ -1 +1 @@
-{"version":3,"file":"connectors.js","names":[],"sources":["../../../../../src/gateway/hono/routes/connectors.ts"],"sourcesContent":["import type { Hono } from 'hono';\n\nimport type { Config } from '../../../config/schema.js';\nimport { getConnectorDefinition, listConnectorCatalog, listConnectorProviders } from '../../../connectors/catalog.js';\nimport { testConnectorInstance } from '../../../connectors/health.js';\nimport { installConnector, uninstallConnector } from '../../../connectors/install.js';\nimport { getConnectorInstance, listConnectorInstances } from '../../../connectors/instances.js';\nimport { startConnectorOAuth, completeConnectorOAuth } from '../../../connectors/oauth.js';\nimport { recordConnectorHealthUsage } from '../../../connectors/usage.js';\nimport type { ConnectorInstallInput } from '../../../connectors/types.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\n\nfunction errorMessage(error: unknown): string {\n  return error instanceof Error ? error.message : String(error);\n}\n\nexport function registerConnectorRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  const { service, strictRateLimitMiddleware } = deps;\n\n  authenticated.get('/api/connectors/catalog', (c) => {\n    return c.json({\n      ok: true,\n      payload: {\n        connectors: listConnectorCatalog(),\n        providers: listConnectorProviders().map((provider) => ({\n          id: provider.id,\n          displayName: provider.displayName,\n        })),\n      },\n    });\n  });\n\n  authenticated.get('/api/connectors/installed', (c) => {\n    const config = service.currentConfig as Config;\n    return c.json({ ok: true, payload: { instances: listConnectorInstances(config) } });\n  });\n\n  authenticated.get('/api/connectors/:id', (c) => {\n    const connectorId = c.req.param('id');\n    const connector = getConnectorDefinition(connectorId);\n    if (!connector) {\n      return c.json({ ok: false, error: `Unknown connector: ${connectorId}` }, 404);\n    }\n    const config = service.currentConfig as Config;\n    const instances = listConnectorInstances(config).filter((instance) => instance.connectorId === connectorId);\n    return c.json({ ok: true, payload: { connector, instances } });\n  });\n\n  authenticated.post('/api/connectors/approvals/respond', async (c) => {\n    const body = await c.req.json().catch(() => ({}));\n    return c.json({ ok: true, payload: { acknowledged: true, body } });\n  });\n\n  authenticated.post('/api/connectors/:id/oauth/start', strictRateLimitMiddleware, async (c) => {\n    const connectorId = c.req.param('id');\n    const connector = getConnectorDefinition(connectorId);\n    if (!connector) {\n      return c.json({ ok: false, error: `Unknown connector: ${connectorId}` }, 404);\n    }\n    try {\n      const oauth = await startConnectorOAuth(connector);\n      return c.json({ ok: true, payload: { oauth } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.post('/api/connectors/:id/oauth/complete', strictRateLimitMiddleware, async (c) => {\n    const connectorId = c.req.param('id');\n    const connector = getConnectorDefinition(connectorId);\n    if (!connector) {\n      return c.json({ ok: false, error: `Unknown connector: ${connectorId}` }, 404);\n    }\n    const body = await c.req.json().catch(() => ({}));\n    const deviceCode = body && typeof body === 'object' && !Array.isArray(body) && typeof body.deviceCode === 'string'\n      ? body.deviceCode\n      : '';\n    try {\n      const oauth = await completeConnectorOAuth(connector, { deviceCode });\n      return c.json({ ok: true, payload: { oauth } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.post('/api/connectors/:id/install', strictRateLimitMiddleware, async (c) => {\n    const connectorId = c.req.param('id');\n    const body = await c.req.json().catch(() => ({}));\n    const input: ConnectorInstallInput = body && typeof body === 'object' && !Array.isArray(body) ? body : {};\n    const config = service.currentConfig as Config;\n    try {\n      const instance = await installConnector(config, connectorId, input);\n      const saved = await service.saveConfig(config);\n      if (!saved.saved) {\n        return c.json({ ok: false, error: saved.error }, 500);\n      }\n      return c.json({ ok: true, payload: { instance } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.post('/api/connectors/:id/test', async (c) => {\n    const instanceId = c.req.param('id');\n    const config = service.currentConfig as Config;\n    const instance = getConnectorInstance(config, instanceId);\n    if (!instance) {\n      return c.json({ ok: false, error: `Connector instance not found: ${instanceId}` }, 404);\n    }\n    try {\n      const result = await testConnectorInstance(config, instance.materialized.serverId);\n      recordConnectorHealthUsage(config, instance.instanceId, result);\n      const saved = await service.saveConfig(config);\n      if (!saved.saved) {\n        return c.json({ ok: false, error: saved.error }, 500);\n      }\n      return c.json({ ok: true, payload: result });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 500);\n    }\n  });\n\n  authenticated.delete('/api/connectors/:id', strictRateLimitMiddleware, async (c) => {\n    const instanceId = c.req.param('id');\n    const config = service.currentConfig as Config;\n    try {\n      const instance = uninstallConnector(config, instanceId);\n      const saved = await service.saveConfig(config);\n      if (!saved.saved) {\n        return c.json({ ok: false, error: saved.error }, 500);\n      }\n      return c.json({ ok: true, payload: { instance } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n}\n"],"mappings":";;;;;;;;AAYA,SAAS,aAAa,OAAwB;AAC5C,QAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;;AAG/D,SAAgB,wBAAwB,eAAqB,MAAoC;CAC/F,MAAM,EAAE,SAAS,8BAA8B;AAE/C,eAAc,IAAI,4BAA4B,MAAM;AAClD,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,YAAY,sBAAsB;IAClC,WAAW,wBAAwB,CAAC,KAAK,cAAc;KACrD,IAAI,SAAS;KACb,aAAa,SAAS;KACvB,EAAE;IACJ;GACF,CAAC;GACF;AAEF,eAAc,IAAI,8BAA8B,MAAM;EACpD,MAAM,SAAS,QAAQ;AACvB,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,WAAW,uBAAuB,OAAO,EAAE;GAAE,CAAC;GACnF;AAEF,eAAc,IAAI,wBAAwB,MAAM;EAC9C,MAAM,cAAc,EAAE,IAAI,MAAM,KAAK;EACrC,MAAM,YAAY,uBAAuB,YAAY;AACrD,MAAI,CAAC,UACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,sBAAsB;GAAe,EAAE,IAAI;EAE/E,MAAM,SAAS,QAAQ;EACvB,MAAM,YAAY,uBAAuB,OAAO,CAAC,QAAQ,aAAa,SAAS,gBAAgB,YAAY;AAC3G,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;IAAE;IAAW;IAAW;GAAE,CAAC;GAC9D;AAEF,eAAc,KAAK,qCAAqC,OAAO,MAAM;EACnE,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;AACjD,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;IAAE,cAAc;IAAM;IAAM;GAAE,CAAC;GAClE;AAEF,eAAc,KAAK,mCAAmC,2BAA2B,OAAO,MAAM;EAC5F,MAAM,cAAc,EAAE,IAAI,MAAM,KAAK;EACrC,MAAM,YAAY,uBAAuB,YAAY;AACrD,MAAI,CAAC,UACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,sBAAsB;GAAe,EAAE,IAAI;AAE/E,MAAI;GACF,MAAM,QAAQ,MAAM,oBAAoB,UAAU;AAClD,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,OAAO;IAAE,CAAC;WACxC,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,KAAK,sCAAsC,2BAA2B,OAAO,MAAM;EAC/F,MAAM,cAAc,EAAE,IAAI,MAAM,KAAK;EACrC,MAAM,YAAY,uBAAuB,YAAY;AACrD,MAAI,CAAC,UACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,sBAAsB;GAAe,EAAE,IAAI;EAE/E,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,aAAa,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAI,OAAO,KAAK,eAAe,WACtG,KAAK,aACL;AACJ,MAAI;GACF,MAAM,QAAQ,MAAM,uBAAuB,WAAW,EAAE,YAAY,CAAC;AACrE,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,OAAO;IAAE,CAAC;WACxC,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,KAAK,+BAA+B,2BAA2B,OAAO,MAAM;EACxF,MAAM,cAAc,EAAE,IAAI,MAAM,KAAK;EACrC,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,QAA+B,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,GAAG,OAAO,EAAE;EACzG,MAAM,SAAS,QAAQ;AACvB,MAAI;GACF,MAAM,WAAW,MAAM,iBAAiB,QAAQ,aAAa,MAAM;GACnE,MAAM,QAAQ,MAAM,QAAQ,WAAW,OAAO;AAC9C,OAAI,CAAC,MAAM,MACT,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,MAAM;IAAO,EAAE,IAAI;AAEvD,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,UAAU;IAAE,CAAC;WAC3C,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,KAAK,4BAA4B,OAAO,MAAM;EAC1D,MAAM,aAAa,EAAE,IAAI,MAAM,KAAK;EACpC,MAAM,SAAS,QAAQ;EACvB,MAAM,WAAW,qBAAqB,QAAQ,WAAW;AACzD,MAAI,CAAC,SACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,iCAAiC;GAAc,EAAE,IAAI;AAEzF,MAAI;GACF,MAAM,SAAS,MAAM,sBAAsB,QAAQ,SAAS,aAAa,SAAS;AAClF,8BAA2B,QAAQ,SAAS,YAAY,OAAO;GAC/D,MAAM,QAAQ,MAAM,QAAQ,WAAW,OAAO;AAC9C,OAAI,CAAC,MAAM,MACT,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,MAAM;IAAO,EAAE,IAAI;AAEvD,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS;IAAQ,CAAC;WACrC,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,OAAO,uBAAuB,2BAA2B,OAAO,MAAM;EAClF,MAAM,aAAa,EAAE,IAAI,MAAM,KAAK;EACpC,MAAM,SAAS,QAAQ;AACvB,MAAI;GACF,MAAM,WAAW,mBAAmB,QAAQ,WAAW;GACvD,MAAM,QAAQ,MAAM,QAAQ,WAAW,OAAO;AAC9C,OAAI,CAAC,MAAM,MACT,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,MAAM;IAAO,EAAE,IAAI;AAEvD,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,UAAU;IAAE,CAAC;WAC3C,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D"}
+{"version":3,"file":"connectors.js","names":[],"sources":["../../../../../src/gateway/hono/routes/connectors.ts"],"sourcesContent":["import type { Hono } from 'hono';\n\nimport type { Config } from '../../../config/schema.js';\nimport { getConnectorDefinition, listConnectorCatalog, listConnectorProviders } from '../../../connectors/catalog.js';\nimport { executeComposioTool, getComposioToolkitScope, listComposioConnections, listComposioTools, setComposioToolkitScope, startComposioAuthorize, type ComposioScope } from '../../../connectors/composio.js';\nimport { appendComposioTriggerEvent, listComposioTriggerEvents } from '../../../connectors/composio-triggers.js';\nimport { testConnectorInstance } from '../../../connectors/health.js';\nimport { installConnector, installConnectorDefinition, uninstallConnector } from '../../../connectors/install.js';\nimport { getConnectorInstance, listConnectorInstances } from '../../../connectors/instances.js';\nimport { setConnectorEnabled } from '../../../connectors/lifecycle.js';\nimport { startConnectorOAuth, completeConnectorOAuth } from '../../../connectors/oauth.js';\nimport { isConnectorRegistrySource, listConnectorRegistries, searchConnectorRegistries } from '../../../connectors/registries/search.js';\nimport { createConnectorSetupSecretRequest, submitConnectorSetupSecret } from '../../../connectors/setup-secrets.js';\nimport { recordConnectorHealthUsage } from '../../../connectors/usage.js';\nimport type { ConnectorDefinition, ConnectorInstallInput } from '../../../connectors/types.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\n\nfunction errorMessage(error: unknown): string {\n  return error instanceof Error ? error.message : String(error);\n}\n\nexport function registerConnectorRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  const { service, strictRateLimitMiddleware } = deps;\n\n  authenticated.get('/api/connectors/catalog', (c) => {\n    return c.json({\n      ok: true,\n      payload: {\n        connectors: listConnectorCatalog(),\n        providers: listConnectorProviders().map((provider) => ({\n          id: provider.id,\n          displayName: provider.displayName,\n        })),\n        registries: listConnectorRegistries(),\n      },\n    });\n  });\n\n  authenticated.get('/api/connectors/installed', (c) => {\n    const config = service.currentConfig as Config;\n    return c.json({ ok: true, payload: { instances: listConnectorInstances(config) } });\n  });\n\n  authenticated.get('/api/connectors/registry/search', async (c) => {\n    const query = c.req.query('q') ?? c.req.query('query') ?? '';\n    const sourceParam = c.req.query('source') ?? 'all';\n    const source = sourceParam !== 'all' && isConnectorRegistrySource(sourceParam) ? sourceParam : 'all';\n    const page = Number(c.req.query('page') ?? '1');\n    const pageSize = Number(c.req.query('pageSize') ?? '24');\n    const browse = c.req.query('browse') === '1' || c.req.query('browse') === 'true';\n    const results = await searchConnectorRegistries({ query, source, page, pageSize, browse });\n    return c.json({ ok: true, payload: { results, connectors: results.flatMap((result) => result.connectors) } });\n  });\n\n  authenticated.post('/api/connectors/setup/request-secret', strictRateLimitMiddleware, async (c) => {\n    const body = await c.req.json().catch(() => ({}));\n    const key = body && typeof body === 'object' && !Array.isArray(body) && typeof body.key === 'string'\n      ? body.key.trim()\n      : '';\n    if (!key) {\n      return c.json({ ok: false, error: 'Missing secret key.' }, 400);\n    }\n    const label = body && typeof body === 'object' && !Array.isArray(body) && typeof body.label === 'string'\n      ? body.label\n      : undefined;\n    return c.json({ ok: true, payload: { request: createConnectorSetupSecretRequest({ key, label }) } });\n  });\n\n  authenticated.post('/api/connectors/setup/submit-secret', strictRateLimitMiddleware, async (c) => {\n    const body = await c.req.json().catch(() => ({}));\n    const ref = body && typeof body === 'object' && !Array.isArray(body) && typeof body.ref === 'string'\n      ? body.ref\n      : '';\n    const value = body && typeof body === 'object' && !Array.isArray(body) && typeof body.value === 'string'\n      ? body.value\n      : '';\n    const accepted = submitConnectorSetupSecret(ref, value);\n    return c.json({ ok: accepted, payload: { accepted }, error: accepted ? undefined : 'Unknown, expired, or empty secret.' }, accepted ? 200 : 400);\n  });\n\n  authenticated.get('/api/connectors/composio/connections', async (c) => {\n    try {\n      return c.json({ ok: true, payload: { connections: await listComposioConnections() } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.post('/api/connectors/composio/:toolkit/authorize', strictRateLimitMiddleware, async (c) => {\n    try {\n      const toolkit = c.req.param('toolkit');\n      return c.json({ ok: true, payload: { oauth: await startComposioAuthorize(toolkit) } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.get('/api/connectors/composio/:toolkit/tools', async (c) => {\n    try {\n      const toolkit = c.req.param('toolkit');\n      return c.json({ ok: true, payload: { tools: await listComposioTools(toolkit, service.currentConfig as Config) } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.get('/api/connectors/composio/:toolkit/scope', async (c) => {\n    const toolkit = c.req.param('toolkit');\n    return c.json({ ok: true, payload: { toolkit, scope: getComposioToolkitScope(service.currentConfig as Config, toolkit) } });\n  });\n\n  authenticated.post('/api/connectors/composio/:toolkit/scope', strictRateLimitMiddleware, async (c) => {\n    const toolkit = c.req.param('toolkit');\n    const body = await c.req.json().catch(() => ({}));\n    const scope = body && typeof body === 'object' && !Array.isArray(body) && typeof body.scope === 'string'\n      ? body.scope\n      : '';\n    if (scope !== 'read' && scope !== 'write' && scope !== 'admin') {\n      return c.json({ ok: false, error: 'Scope must be read, write, or admin.' }, 400);\n    }\n    const config = service.currentConfig as Config;\n    try {\n      setComposioToolkitScope(config, toolkit, scope as ComposioScope);\n      const saved = await service.saveConfig(config);\n      if (!saved.saved) return c.json({ ok: false, error: saved.error }, 500);\n      return c.json({ ok: true, payload: { toolkit, scope } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.post('/api/connectors/composio/tools/:slug/execute', strictRateLimitMiddleware, async (c) => {\n    const body = await c.req.json().catch(() => ({}));\n    try {\n      const slug = c.req.param('slug');\n      const args = body && typeof body === 'object' && !Array.isArray(body) ? body.arguments : undefined;\n      return c.json({ ok: true, payload: { result: await executeComposioTool({ slug, arguments: args, config: service.currentConfig as Config }) } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.post('/api/connectors/composio/triggers', strictRateLimitMiddleware, async (c) => {\n    const body = await c.req.json().catch(() => ({}));\n    try {\n      const event = await appendComposioTriggerEvent(service.currentConfig as Config, body);\n      return c.json({ ok: true, payload: { event } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.get('/api/connectors/composio/triggers', async (c) => {\n    const limit = Number(c.req.query('limit') ?? '50');\n    try {\n      const events = await listComposioTriggerEvents(service.currentConfig as Config, limit);\n      return c.json({ ok: true, payload: { events } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.get('/api/connectors/:id', (c) => {\n    const connectorId = c.req.param('id');\n    const connector = getConnectorDefinition(connectorId);\n    if (!connector) {\n      return c.json({ ok: false, error: `Unknown connector: ${connectorId}` }, 404);\n    }\n    const config = service.currentConfig as Config;\n    const instances = listConnectorInstances(config).filter((instance) => instance.connectorId === connectorId);\n    return c.json({ ok: true, payload: { connector, instances } });\n  });\n\n  authenticated.post('/api/connectors/approvals/respond', async (c) => {\n    const body = await c.req.json().catch(() => ({}));\n    return c.json({ ok: true, payload: { acknowledged: true, body } });\n  });\n\n  authenticated.post('/api/connectors/:id/oauth/start', strictRateLimitMiddleware, async (c) => {\n    const connectorId = c.req.param('id');\n    const connector = getConnectorDefinition(connectorId);\n    if (!connector) {\n      return c.json({ ok: false, error: `Unknown connector: ${connectorId}` }, 404);\n    }\n    try {\n      const oauth = await startConnectorOAuth(connector);\n      return c.json({ ok: true, payload: { oauth } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.post('/api/connectors/:id/oauth/complete', strictRateLimitMiddleware, async (c) => {\n    const connectorId = c.req.param('id');\n    const connector = getConnectorDefinition(connectorId);\n    if (!connector) {\n      return c.json({ ok: false, error: `Unknown connector: ${connectorId}` }, 404);\n    }\n    const body = await c.req.json().catch(() => ({}));\n    const deviceCode = body && typeof body === 'object' && !Array.isArray(body) && typeof body.deviceCode === 'string'\n      ? body.deviceCode\n      : '';\n    try {\n      const oauth = await completeConnectorOAuth(connector, { deviceCode });\n      return c.json({ ok: true, payload: { oauth } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.post('/api/connectors/:id/install', strictRateLimitMiddleware, async (c) => {\n    const connectorId = c.req.param('id');\n    const body = await c.req.json().catch(() => ({}));\n    const input: ConnectorInstallInput = body && typeof body === 'object' && !Array.isArray(body) ? body : {};\n    const registryDefinition = body && typeof body === 'object' && !Array.isArray(body) && body.definition && typeof body.definition === 'object' && !Array.isArray(body.definition)\n      ? body.definition as ConnectorDefinition\n      : undefined;\n    const config = service.currentConfig as Config;\n    try {\n      const instance = registryDefinition?.id === connectorId\n        ? await installConnectorDefinition(config, registryDefinition, input)\n        : await installConnector(config, connectorId, input);\n      const saved = await service.saveConfig(config);\n      if (!saved.saved) {\n        return c.json({ ok: false, error: saved.error }, 500);\n      }\n      return c.json({ ok: true, payload: { instance } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.post('/api/connectors/:id/test', async (c) => {\n    const instanceId = c.req.param('id');\n    const config = service.currentConfig as Config;\n    const instance = getConnectorInstance(config, instanceId);\n    if (!instance) {\n      return c.json({ ok: false, error: `Connector instance not found: ${instanceId}` }, 404);\n    }\n    if (instance.materialized.type !== 'mcp') {\n      return c.json({ ok: false, error: `Connector type \"${instance.materialized.type}\" does not support MCP health checks.` }, 400);\n    }\n    try {\n      const result = await testConnectorInstance(config, instance.materialized.serverId);\n      recordConnectorHealthUsage(config, instance.instanceId, result);\n      const saved = await service.saveConfig(config);\n      if (!saved.saved) {\n        return c.json({ ok: false, error: saved.error }, 500);\n      }\n      return c.json({ ok: true, payload: result });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 500);\n    }\n  });\n\n  authenticated.post('/api/connectors/:id/enable', strictRateLimitMiddleware, async (c) => {\n    const instanceId = c.req.param('id');\n    const config = service.currentConfig as Config;\n    try {\n      const instance = setConnectorEnabled(config, instanceId, true);\n      const saved = await service.saveConfig(config);\n      if (!saved.saved) {\n        return c.json({ ok: false, error: saved.error }, 500);\n      }\n      return c.json({ ok: true, payload: { instance } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.post('/api/connectors/:id/disable', strictRateLimitMiddleware, async (c) => {\n    const instanceId = c.req.param('id');\n    const config = service.currentConfig as Config;\n    try {\n      const instance = setConnectorEnabled(config, instanceId, false);\n      const saved = await service.saveConfig(config);\n      if (!saved.saved) {\n        return c.json({ ok: false, error: saved.error }, 500);\n      }\n      return c.json({ ok: true, payload: { instance } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.delete('/api/connectors/:id', strictRateLimitMiddleware, async (c) => {\n    const instanceId = c.req.param('id');\n    const config = service.currentConfig as Config;\n    try {\n      const instance = uninstallConnector(config, instanceId);\n      const saved = await service.saveConfig(config);\n      if (!saved.saved) {\n        return c.json({ ok: false, error: saved.error }, 500);\n      }\n      return c.json({ ok: true, payload: { instance } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n}\n"],"mappings":";;;;;;;;;;;;;AAiBA,SAAS,aAAa,OAAwB;AAC5C,QAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;;AAG/D,SAAgB,wBAAwB,eAAqB,MAAoC;CAC/F,MAAM,EAAE,SAAS,8BAA8B;AAE/C,eAAc,IAAI,4BAA4B,MAAM;AAClD,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,YAAY,sBAAsB;IAClC,WAAW,wBAAwB,CAAC,KAAK,cAAc;KACrD,IAAI,SAAS;KACb,aAAa,SAAS;KACvB,EAAE;IACH,YAAY,yBAAyB;IACtC;GACF,CAAC;GACF;AAEF,eAAc,IAAI,8BAA8B,MAAM;EACpD,MAAM,SAAS,QAAQ;AACvB,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,WAAW,uBAAuB,OAAO,EAAE;GAAE,CAAC;GACnF;AAEF,eAAc,IAAI,mCAAmC,OAAO,MAAM;EAChE,MAAM,QAAQ,EAAE,IAAI,MAAM,IAAI,IAAI,EAAE,IAAI,MAAM,QAAQ,IAAI;EAC1D,MAAM,cAAc,EAAE,IAAI,MAAM,SAAS,IAAI;EAK7C,MAAM,UAAU,MAAM,0BAA0B;GAAE;GAAO,QAJ1C,gBAAgB,SAAS,0BAA0B,YAAY,GAAG,cAAc;GAI9B,MAHpD,OAAO,EAAE,IAAI,MAAM,OAAO,IAAI,IAG0B;GAAE,UAFtD,OAAO,EAAE,IAAI,MAAM,WAAW,IAAI,KAE4B;GAAE,QADlE,EAAE,IAAI,MAAM,SAAS,KAAK,OAAO,EAAE,IAAI,MAAM,SAAS,KAAK;GACe,CAAC;AAC1F,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;IAAE;IAAS,YAAY,QAAQ,SAAS,WAAW,OAAO,WAAW;IAAE;GAAE,CAAC;GAC7G;AAEF,eAAc,KAAK,wCAAwC,2BAA2B,OAAO,MAAM;EACjG,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,MAAM,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAI,OAAO,KAAK,QAAQ,WACxF,KAAK,IAAI,MAAM,GACf;AACJ,MAAI,CAAC,IACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAuB,EAAE,IAAI;EAEjE,MAAM,QAAQ,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAI,OAAO,KAAK,UAAU,WAC5F,KAAK,QACL,KAAA;AACJ,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,SAAS,kCAAkC;IAAE;IAAK;IAAO,CAAC,EAAE;GAAE,CAAC;GACpG;AAEF,eAAc,KAAK,uCAAuC,2BAA2B,OAAO,MAAM;EAChG,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EAOjD,MAAM,WAAW,2BANL,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAI,OAAO,KAAK,QAAQ,WACxF,KAAK,MACL,IACU,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAI,OAAO,KAAK,UAAU,WAC5F,KAAK,QACL,GACmD;AACvD,SAAO,EAAE,KAAK;GAAE,IAAI;GAAU,SAAS,EAAE,UAAU;GAAE,OAAO,WAAW,KAAA,IAAY;GAAsC,EAAE,WAAW,MAAM,IAAI;GAChJ;AAEF,eAAc,IAAI,wCAAwC,OAAO,MAAM;AACrE,MAAI;AACF,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,aAAa,MAAM,yBAAyB,EAAE;IAAE,CAAC;WAC/E,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,KAAK,+CAA+C,2BAA2B,OAAO,MAAM;AACxG,MAAI;GACF,MAAM,UAAU,EAAE,IAAI,MAAM,UAAU;AACtC,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,OAAO,MAAM,uBAAuB,QAAQ,EAAE;IAAE,CAAC;WAC/E,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,IAAI,2CAA2C,OAAO,MAAM;AACxE,MAAI;GACF,MAAM,UAAU,EAAE,IAAI,MAAM,UAAU;AACtC,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,OAAO,MAAM,kBAAkB,SAAS,QAAQ,cAAwB,EAAE;IAAE,CAAC;WAC3G,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,IAAI,2CAA2C,OAAO,MAAM;EACxE,MAAM,UAAU,EAAE,IAAI,MAAM,UAAU;AACtC,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;IAAE;IAAS,OAAO,wBAAwB,QAAQ,eAAyB,QAAQ;IAAE;GAAE,CAAC;GAC3H;AAEF,eAAc,KAAK,2CAA2C,2BAA2B,OAAO,MAAM;EACpG,MAAM,UAAU,EAAE,IAAI,MAAM,UAAU;EACtC,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,QAAQ,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAI,OAAO,KAAK,UAAU,WAC5F,KAAK,QACL;AACJ,MAAI,UAAU,UAAU,UAAU,WAAW,UAAU,QACrD,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAwC,EAAE,IAAI;EAElF,MAAM,SAAS,QAAQ;AACvB,MAAI;AACF,2BAAwB,QAAQ,SAAS,MAAuB;GAChE,MAAM,QAAQ,MAAM,QAAQ,WAAW,OAAO;AAC9C,OAAI,CAAC,MAAM,MAAO,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,MAAM;IAAO,EAAE,IAAI;AACvE,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS;KAAE;KAAS;KAAO;IAAE,CAAC;WACjD,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,KAAK,gDAAgD,2BAA2B,OAAO,MAAM;EACzG,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;AACjD,MAAI;GACF,MAAM,OAAO,EAAE,IAAI,MAAM,OAAO;GAChC,MAAM,OAAO,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,GAAG,KAAK,YAAY,KAAA;AACzF,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,QAAQ,MAAM,oBAAoB;KAAE;KAAM,WAAW;KAAM,QAAQ,QAAQ;KAAyB,CAAC,EAAE;IAAE,CAAC;WACxI,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,KAAK,qCAAqC,2BAA2B,OAAO,MAAM;EAC9F,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;AACjD,MAAI;GACF,MAAM,QAAQ,MAAM,2BAA2B,QAAQ,eAAyB,KAAK;AACrF,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,OAAO;IAAE,CAAC;WACxC,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,IAAI,qCAAqC,OAAO,MAAM;EAClE,MAAM,QAAQ,OAAO,EAAE,IAAI,MAAM,QAAQ,IAAI,KAAK;AAClD,MAAI;GACF,MAAM,SAAS,MAAM,0BAA0B,QAAQ,eAAyB,MAAM;AACtF,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,QAAQ;IAAE,CAAC;WACzC,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,IAAI,wBAAwB,MAAM;EAC9C,MAAM,cAAc,EAAE,IAAI,MAAM,KAAK;EACrC,MAAM,YAAY,uBAAuB,YAAY;AACrD,MAAI,CAAC,UACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,sBAAsB;GAAe,EAAE,IAAI;EAE/E,MAAM,SAAS,QAAQ;EACvB,MAAM,YAAY,uBAAuB,OAAO,CAAC,QAAQ,aAAa,SAAS,gBAAgB,YAAY;AAC3G,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;IAAE;IAAW;IAAW;GAAE,CAAC;GAC9D;AAEF,eAAc,KAAK,qCAAqC,OAAO,MAAM;EACnE,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;AACjD,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;IAAE,cAAc;IAAM;IAAM;GAAE,CAAC;GAClE;AAEF,eAAc,KAAK,mCAAmC,2BAA2B,OAAO,MAAM;EAC5F,MAAM,cAAc,EAAE,IAAI,MAAM,KAAK;EACrC,MAAM,YAAY,uBAAuB,YAAY;AACrD,MAAI,CAAC,UACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,sBAAsB;GAAe,EAAE,IAAI;AAE/E,MAAI;GACF,MAAM,QAAQ,MAAM,oBAAoB,UAAU;AAClD,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,OAAO;IAAE,CAAC;WACxC,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,KAAK,sCAAsC,2BAA2B,OAAO,MAAM;EAC/F,MAAM,cAAc,EAAE,IAAI,MAAM,KAAK;EACrC,MAAM,YAAY,uBAAuB,YAAY;AACrD,MAAI,CAAC,UACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,sBAAsB;GAAe,EAAE,IAAI;EAE/E,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,aAAa,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAI,OAAO,KAAK,eAAe,WACtG,KAAK,aACL;AACJ,MAAI;GACF,MAAM,QAAQ,MAAM,uBAAuB,WAAW,EAAE,YAAY,CAAC;AACrE,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,OAAO;IAAE,CAAC;WACxC,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,KAAK,+BAA+B,2BAA2B,OAAO,MAAM;EACxF,MAAM,cAAc,EAAE,IAAI,MAAM,KAAK;EACrC,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,QAA+B,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,GAAG,OAAO,EAAE;EACzG,MAAM,qBAAqB,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAI,KAAK,cAAc,OAAO,KAAK,eAAe,YAAY,CAAC,MAAM,QAAQ,KAAK,WAAW,GAC5K,KAAK,aACL,KAAA;EACJ,MAAM,SAAS,QAAQ;AACvB,MAAI;GACF,MAAM,WAAW,oBAAoB,OAAO,cACxC,MAAM,2BAA2B,QAAQ,oBAAoB,MAAM,GACnE,MAAM,iBAAiB,QAAQ,aAAa,MAAM;GACtD,MAAM,QAAQ,MAAM,QAAQ,WAAW,OAAO;AAC9C,OAAI,CAAC,MAAM,MACT,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,MAAM;IAAO,EAAE,IAAI;AAEvD,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,UAAU;IAAE,CAAC;WAC3C,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,KAAK,4BAA4B,OAAO,MAAM;EAC1D,MAAM,aAAa,EAAE,IAAI,MAAM,KAAK;EACpC,MAAM,SAAS,QAAQ;EACvB,MAAM,WAAW,qBAAqB,QAAQ,WAAW;AACzD,MAAI,CAAC,SACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,iCAAiC;GAAc,EAAE,IAAI;AAEzF,MAAI,SAAS,aAAa,SAAS,MACjC,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,mBAAmB,SAAS,aAAa,KAAK;GAAwC,EAAE,IAAI;AAEhI,MAAI;GACF,MAAM,SAAS,MAAM,sBAAsB,QAAQ,SAAS,aAAa,SAAS;AAClF,8BAA2B,QAAQ,SAAS,YAAY,OAAO;GAC/D,MAAM,QAAQ,MAAM,QAAQ,WAAW,OAAO;AAC9C,OAAI,CAAC,MAAM,MACT,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,MAAM;IAAO,EAAE,IAAI;AAEvD,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS;IAAQ,CAAC;WACrC,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,KAAK,8BAA8B,2BAA2B,OAAO,MAAM;EACvF,MAAM,aAAa,EAAE,IAAI,MAAM,KAAK;EACpC,MAAM,SAAS,QAAQ;AACvB,MAAI;GACF,MAAM,WAAW,oBAAoB,QAAQ,YAAY,KAAK;GAC9D,MAAM,QAAQ,MAAM,QAAQ,WAAW,OAAO;AAC9C,OAAI,CAAC,MAAM,MACT,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,MAAM;IAAO,EAAE,IAAI;AAEvD,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,UAAU;IAAE,CAAC;WAC3C,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,KAAK,+BAA+B,2BAA2B,OAAO,MAAM;EACxF,MAAM,aAAa,EAAE,IAAI,MAAM,KAAK;EACpC,MAAM,SAAS,QAAQ;AACvB,MAAI;GACF,MAAM,WAAW,oBAAoB,QAAQ,YAAY,MAAM;GAC/D,MAAM,QAAQ,MAAM,QAAQ,WAAW,OAAO;AAC9C,OAAI,CAAC,MAAM,MACT,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,MAAM;IAAO,EAAE,IAAI;AAEvD,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,UAAU;IAAE,CAAC;WAC3C,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,OAAO,uBAAuB,2BAA2B,OAAO,MAAM;EAClF,MAAM,aAAa,EAAE,IAAI,MAAM,KAAK;EACpC,MAAM,SAAS,QAAQ;AACvB,MAAI;GACF,MAAM,WAAW,mBAAmB,QAAQ,WAAW;GACvD,MAAM,QAAQ,MAAM,QAAQ,WAAW,OAAO;AAC9C,OAAI,CAAC,MAAM,MACT,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,MAAM;IAAO,EAAE,IAAI;AAEvD,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,UAAU;IAAE,CAAC;WAC3C,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D"}