@xopcai/xopc 0.0.117 → 0.0.119

package/dist/src/gateway/hono/lib/config-payload.d.ts

@@ -44,6 +44,7 @@ export declare function buildSafeWebConfigPayload(service: GatewayService, optio
                 defaultRole: string;
                 roles: Record<string, {
                     model: string;
+                    fallbacks?: string[];
                     description?: string;
                 }>;
                 policy?: {
@@ -165,6 +166,7 @@ export declare function buildSafeWebConfigPayload(service: GatewayService, optio
                 defaultRole?: string;
                 roles?: Record<string, {
                     model: string;
+                    fallbacks?: string[];
                     description?: string;
                 }>;
                 policy?: {
@@ -365,12 +367,6 @@ export declare function buildSafeWebConfigPayload(service: GatewayService, optio
         dialogPolicy: unknown;
         dialogTimeoutSeconds: number;
     };
-    cron: {
-        enabled: boolean;
-        maxConcurrentJobs: number;
-        historyRetentionDays: number;
-        enableMetrics: boolean;
-    };
     goals: {
         maxTurns: number;
         checklistMode: boolean;
@@ -401,6 +397,9 @@ export declare function buildSafeWebConfigPayload(service: GatewayService, optio
             maxEntries: number;
         };
     };
+    tui: {
+        defaultAgent: string;
+    };
     tunnel: {
         enabled: boolean;
         autoStart: boolean;

package/dist/src/gateway/hono/lib/config-payload.js

@@ -7,7 +7,7 @@ import { getProviderRegistry, init_plugin_registry } from "../../../providers/pl
 import { getAllProviders, init_providers, isProviderConfigured } from "../../../providers/index.js";
 import { resolveShareConfig } from "../../../share/share-config.js";
 import { normalizeConfiguredMcpServers } from "../../../config/mcp-config-normalize.js";
-import { resolveCronConfigForWeb, resolveGoalsConfigForWeb, resolveSessionConfigForWeb, resolveUpdateConfigForWeb } from "../../../config/web-patch.js";
+import { resolveGoalsConfigForWeb, resolveSessionConfigForWeb, resolveUpdateConfigForWeb } from "../../../config/web-patch.js";
 import { GENERIC_MASKED_SECRET, maskSecretLength } from "./mask-secret-length.js";
 import { safeToolsWebForGet } from "../../config-tools-web.js";
 import { maskTunnelSecretForWeb } from "../../../tunnel/env.js";
@@ -174,9 +174,9 @@ async function buildSafeWebConfigPayload(service, options = {}) {
 			skillsStoreBaseUrl: config.gateway?.skillsStoreBaseUrl ?? "https://store.xopc.ai"
 		},
 		browser: buildSafeBrowserConfigForWeb(config.browser),
-		cron: resolveCronConfigForWeb(config),
 		goals: resolveGoalsConfigForWeb(config),
 		session: resolveSessionConfigForWeb(config),
+		tui: { defaultAgent: config.tui?.defaultAgent ?? "coder" },
 		tunnel: {
 			enabled: config.tunnel?.enabled === true,
 			autoStart: config.tunnel?.autoStart === true,

package/dist/src/gateway/hono/lib/config-payload.js.map

@@ -1 +1 @@
-{"version":3,"file":"config-payload.js","names":["getModelsJsonPath"],"sources":["../../../../../src/gateway/hono/lib/config-payload.ts"],"sourcesContent":["import {\n  listAgentEntries,\n  normalizeAgentId,\n  resolveDefaultAgentId,\n} from '../../../agent/agent-scope.js';\nimport {\n  buildChannelCatalogForConfig,\n  buildChannelCatalogFromSnapshot,\n  getChannelSetupStatus,\n} from '../../../channels/catalog/channel-catalog-service.js';\nimport { normalizeConfiguredMcpServers } from '../../../config/mcp-config-normalize.js';\nimport type { Config } from '../../../config/schema.js';\nimport {\n  GENERIC_MASKED_SECRET,\n  maskSecretLength,\n} from './mask-secret-length.js';\nimport { maskTunnelSecretForWeb } from '../../../tunnel/env.js';\nimport { resolveShareConfig } from '../../../share/share-config.js';\nimport {\n  resolveCronConfigForWeb,\n  resolveGoalsConfigForWeb,\n  resolveSessionConfigForWeb,\n  resolveUpdateConfigForWeb,\n} from '../../../config/web-patch.js';\nimport { CredentialResolver } from '../../../auth/credentials.js';\nimport { loadModelsJson, getModelsJsonPath } from '../../../config/models-json.js';\nimport { getAllProviders, isProviderConfigured } from '../../../providers/index.js';\nimport { getProviderRegistry } from '../../../providers/plugin-registry.js';\nimport type { GatewayService } from '../../service.js';\nimport { safeToolsWebForGet } from '../../config-tools-web.js';\nimport { buildSafeProvidersConfigForWeb } from './safe-providers-config.js';\nimport { maskSttConfigForWeb, maskTtsConfigForWeb } from './safe-voice-config.js';\n\nfunction readModelsJsonProviderApiKey(providerId: string): string | undefined {\n  const { config } = loadModelsJson(getModelsJsonPath());\n  const entry = config.providers?.[providerId];\n  const key = entry?.apiKey;\n  return typeof key === 'string' && key.trim() ? key.trim() : undefined;\n}\n\n/** Length-preserving mask for LLM provider keys in GET `/api/config`. */\nasync function maskLlmProviderApiKeyForWeb(provider: string): Promise<string> {\n  const resolver = new CredentialResolver();\n  const stored = await resolver.revealGatewayStoredApiKey(provider);\n  if (stored) return maskSecretLength(stored);\n\n  const fromModelsJson = readModelsJsonProviderApiKey(provider);\n  if (fromModelsJson) return maskSecretLength(fromModelsJson);\n\n  // Extension plugins manage their own auth; don't show a fake gateway key mask.\n  if (getProviderRegistry().has(provider)) return '';\n\n  if (await isProviderConfigured(provider)) return GENERIC_MASKED_SECRET;\n  return '';\n}\n\n/** MCP block for GET/PATCH `/api/config` (authenticated console editing). */\nexport function buildSafeMcpConfigForWeb(config: Config) {\n  const mcp = config.mcp;\n  if (!mcp) {\n    return { servers: {} as Record<string, Record<string, unknown>> };\n  }\n  return {\n    ...(mcp.sessionIdleTtlMs !== undefined ? { sessionIdleTtlMs: mcp.sessionIdleTtlMs } : {}),\n    servers: normalizeConfiguredMcpServers(mcp.servers),\n  };\n}\n\nfunction maskBrowserCloudConfigForWeb(cloud: unknown): Record<string, unknown> | null {\n  if (!cloud || typeof cloud !== 'object' || Array.isArray(cloud)) {\n    return null;\n  }\n  const raw = cloud as Record<string, unknown>;\n  const safe: Record<string, unknown> = {};\n  if (typeof raw.apiKey === 'string' && raw.apiKey.trim()) {\n    safe.apiKey = maskSecretLength(raw.apiKey);\n  }\n  if (typeof raw.projectId === 'string' && raw.projectId.trim()) {\n    safe.projectId = raw.projectId.trim();\n  }\n  if (typeof raw.region === 'string' && raw.region.trim()) {\n    safe.region = raw.region.trim();\n  }\n  return Object.keys(safe).length > 0 ? safe : null;\n}\n\nexport function buildSafeBrowserConfigForWeb(browser: unknown) {\n  if (!browser || typeof browser !== 'object') {\n    return {\n      enabled: false,\n      headless: false,\n      allowPrivateUrls: false,\n      commandTimeout: null,\n      backend: null,\n      cloudProvider: null,\n      cloud: null,\n      cdpUrl: null,\n      extension: null,\n      cloakbrowser: null,\n      humanize: null,\n      humanPreset: null,\n      dialogPolicy: null,\n      dialogTimeoutSeconds: null,\n    };\n  }\n\n  return {\n    enabled: (browser as Record<string, unknown>).enabled !== false,\n    headless: (browser as Record<string, unknown>).headless === true,\n    allowPrivateUrls: (browser as Record<string, unknown>).allowPrivateUrls === true,\n    commandTimeout:\n      typeof (browser as Record<string, unknown>).commandTimeout === 'number' &&\n      Number.isFinite((browser as Record<string, unknown>).commandTimeout as number)\n        ? Math.floor((browser as Record<string, unknown>).commandTimeout as number)\n        : null,\n    backend:\n      (browser as Record<string, unknown>).backend === 'local' ||\n      (browser as Record<string, unknown>).backend === 'cdp' ||\n      (browser as Record<string, unknown>).backend === 'cloud' ||\n      (browser as Record<string, unknown>).backend === 'extension' ||\n      (browser as Record<string, unknown>).backend === 'cloakbrowser'\n        ? (browser as Record<string, unknown>).backend\n        : null,\n    cloudProvider:\n      (browser as Record<string, unknown>).cloudProvider === 'browserbase' ||\n      (browser as Record<string, unknown>).cloudProvider === 'browser-use'\n        ? (browser as Record<string, unknown>).cloudProvider\n        : null,\n    cloud: maskBrowserCloudConfigForWeb((browser as Record<string, unknown>).cloud),\n    cdpUrl:\n      typeof (browser as Record<string, unknown>).cdpUrl === 'string' &&\n      ((browser as Record<string, unknown>).cdpUrl as string).trim()\n        ? ((browser as Record<string, unknown>).cdpUrl as string).trim()\n        : null,\n    extension:\n      (browser as Record<string, unknown>).extension &&\n      typeof (browser as Record<string, unknown>).extension === 'object' &&\n      !Array.isArray((browser as Record<string, unknown>).extension)\n        ? (browser as Record<string, unknown>).extension\n      : null,\n    cloakbrowser:\n      (browser as Record<string, unknown>).cloakbrowser &&\n      typeof (browser as Record<string, unknown>).cloakbrowser === 'object' &&\n      !Array.isArray((browser as Record<string, unknown>).cloakbrowser)\n        ? (browser as Record<string, unknown>).cloakbrowser\n        : null,\n    humanize:\n      typeof (browser as Record<string, unknown>).humanize === 'boolean'\n        ? (browser as Record<string, unknown>).humanize\n        : null,\n    humanPreset:\n      (browser as Record<string, unknown>).humanPreset === 'default' ||\n      (browser as Record<string, unknown>).humanPreset === 'careful'\n        ? (browser as Record<string, unknown>).humanPreset\n        : null,\n    dialogPolicy:\n      (browser as Record<string, unknown>).dialogPolicy === 'must_respond' ||\n      (browser as Record<string, unknown>).dialogPolicy === 'auto_accept' ||\n      (browser as Record<string, unknown>).dialogPolicy === 'auto_dismiss'\n        ? (browser as Record<string, unknown>).dialogPolicy\n        : null,\n    dialogTimeoutSeconds:\n      typeof (browser as Record<string, unknown>).dialogTimeoutSeconds === 'number' &&\n      Number.isFinite((browser as Record<string, unknown>).dialogTimeoutSeconds as number)\n        ? Math.floor((browser as Record<string, unknown>).dialogTimeoutSeconds as number)\n        : null,\n  };\n}\n\n/** Sanitized config snapshot for GET/PATCH `/api/config` (matches persisted `service.currentConfig`). */\nexport async function buildSafeWebConfigPayload(service: GatewayService, options: { locale?: string } = {}) {\n  const config = service.currentConfig;\n  const extensionLoader =\n    typeof service.getExtensionLoader === 'function' ? service.getExtensionLoader() : undefined;\n  const snapshot = extensionLoader?.getManifestSnapshot();\n  const catalog = snapshot\n    ? buildChannelCatalogFromSnapshot(snapshot, { locale: options.locale })\n    : buildChannelCatalogForConfig(config, { locale: options.locale });\n  const channelsPayload = Object.fromEntries(\n    catalog.entries.map((entry) => {\n      const plugin =\n        typeof service.getChannelRuntimePlugin === 'function'\n          ? service.getChannelRuntimePlugin(entry.id)\n          : undefined;\n      const channelCfgKey = entry.configPath.startsWith('channels.')\n        ? entry.configPath.slice('channels.'.length).split('.')[0] || entry.id\n        : entry.id;\n      const channelCfg = config.channels?.[channelCfgKey] as Record<string, unknown> | undefined;\n      const setupStatus = getChannelSetupStatus(config, entry.id, entry);\n      return [\n        entry.id,\n        {\n          enabled: setupStatus.enabled,\n          configured: setupStatus.ready,\n          setupStatus,\n          config: plugin?.configSurface?.buildConfigSurface(config) ?? channelCfg ?? {},\n          schema: entry.configSchema,\n          uiHints: entry.uiHints,\n        },\n      ];\n    }),\n  );\n  return {\n    agents: {\n      defaultId: resolveDefaultAgentId(config),\n      list: listAgentEntries(config)\n        .filter((e) => e.enabled !== false)\n        .map((e) => ({\n          id: normalizeAgentId(e.id),\n          identity: e.identity,\n          workspace: e.workspace,\n          models: e.models,\n          tools: e.tools,\n          skills: e.skills,\n          memory: e.memory,\n          workflows: e.workflows,\n          boundaries: e.boundaries,\n        })),\n      capabilityPresets: config.agents?.capabilityPresets ?? {},\n    },\n    channels: channelsPayload,\n    providers: Object.fromEntries(\n      await Promise.all(\n        getAllProviders().map(async (provider) => [\n          provider,\n          await maskLlmProviderApiKeyForWeb(provider),\n        ]),\n      ),\n    ),\n    /** Masked `cfg.providers` for capability keys (image / STT / etc.). */\n    providersConfig: buildSafeProvidersConfigForWeb(config.providers),\n    gateway: {\n      bind: config.gateway?.bind ?? 'loopback',\n      customBindHost: config.gateway?.customBindHost,\n      port: config.gateway?.port,\n      corsOrigins: Array.isArray(config.gateway?.corsOrigins) ? config.gateway.corsOrigins : [],\n      trustedProxies: Array.isArray(config.gateway?.trustedProxies)\n        ? config.gateway.trustedProxies\n        : [],\n      allowRealIpFallback: config.gateway?.allowRealIpFallback === true,\n      dangerouslyAllowHostHeaderOriginFallback:\n        config.gateway?.dangerouslyAllowHostHeaderOriginFallback === true,\n      security: {\n        strict: config.gateway?.security?.strict === true,\n      },\n      auth: {\n        mode: config.gateway?.auth?.mode || 'token',\n        token: config.gateway?.auth?.token ? maskSecretLength(config.gateway.auth.token) : '',\n        password: config.gateway?.auth?.password\n          ? maskSecretLength(config.gateway.auth.password)\n          : '',\n        trustedProxy: config.gateway?.auth?.trustedProxy\n          ? {\n              userHeader: config.gateway.auth.trustedProxy.userHeader,\n              requiredHeaders: config.gateway.auth.trustedProxy.requiredHeaders ?? [],\n              allowUsers: config.gateway.auth.trustedProxy.allowUsers ?? [],\n              allowLoopback: config.gateway.auth.trustedProxy.allowLoopback === true,\n            }\n          : undefined,\n        rateLimit: {\n          enabled: config.gateway?.auth?.rateLimit?.enabled !== false,\n          maxAttempts:\n            typeof config.gateway?.auth?.rateLimit?.maxAttempts === 'number'\n              ? config.gateway.auth.rateLimit.maxAttempts\n              : 5,\n          windowMs:\n            typeof config.gateway?.auth?.rateLimit?.windowMs === 'number'\n              ? config.gateway.auth.rateLimit.windowMs\n              : 900_000,\n          blockDurationMs:\n            typeof config.gateway?.auth?.rateLimit?.blockDurationMs === 'number'\n              ? config.gateway.auth.rateLimit.blockDurationMs\n              : typeof config.gateway?.auth?.rateLimit?.lockoutMs === 'number'\n                ? config.gateway.auth.rateLimit.lockoutMs\n                : 300_000,\n          exemptLoopback: config.gateway?.auth?.rateLimit?.exemptLoopback !== false,\n        },\n      },\n      heartbeat: {\n        enabled: config.gateway?.heartbeat?.enabled,\n        intervalMs: config.gateway?.heartbeat?.intervalMs,\n        includeSystemPromptSection: config.gateway?.heartbeat?.includeSystemPromptSection === true,\n        target: config.gateway?.heartbeat?.target,\n        targetChatId: config.gateway?.heartbeat?.targetChatId,\n        prompt: config.gateway?.heartbeat?.prompt,\n        ackMaxChars: config.gateway?.heartbeat?.ackMaxChars,\n        isolatedSession: config.gateway?.heartbeat?.isolatedSession,\n        activeHours: config.gateway?.heartbeat?.activeHours,\n      },\n      maxSseConnections:\n        typeof config.gateway?.maxSseConnections === 'number'\n          ? config.gateway.maxSseConnections\n          : 100,\n      channelConnectDeferMode: config.gateway?.channelConnectDeferMode ?? 'auto',\n      channelConnectDeferIds: Array.isArray(config.gateway?.channelConnectDeferIds)\n        ? config.gateway.channelConnectDeferIds\n        : [],\n      channelConnectDeferSkipIds: Array.isArray(config.gateway?.channelConnectDeferSkipIds)\n        ? config.gateway.channelConnectDeferSkipIds\n        : [],\n      share: resolveShareConfig(config.gateway?.share),\n      publicUrl: config.gateway?.publicUrl ?? null,\n      skillsMarketplaceProvider: config.gateway?.skillsMarketplaceProvider ?? 'skillhub',\n      skillsStoreBaseUrl: config.gateway?.skillsStoreBaseUrl ?? 'https://store.xopc.ai',\n    },\n    browser: buildSafeBrowserConfigForWeb(config.browser),\n    cron: resolveCronConfigForWeb(config),\n    goals: resolveGoalsConfigForWeb(config),\n    session: resolveSessionConfigForWeb(config),\n    tunnel: {\n      enabled: config.tunnel?.enabled === true,\n      autoStart: config.tunnel?.autoStart === true,\n      brokerUrl: config.tunnel?.brokerUrl ?? 'https://frp.xopc.ai/api',\n      registrationSecret: config.tunnel?.registrationSecret\n        ? maskTunnelSecretForWeb(config.tunnel.registrationSecret)\n        : '',\n      consent: config.tunnel?.consent\n        ? {\n            version: config.tunnel.consent.version,\n            acceptedAt: config.tunnel.consent.acceptedAt,\n          }\n        : undefined,\n      transport: { tls: 'broker_terminated' as const },\n    },\n    update: {\n      ...resolveUpdateConfigForWeb(config),\n    },\n    stt: maskSttConfigForWeb(config.tools?.media?.audio),\n    tts: maskTtsConfigForWeb(config.messages?.tts),\n    tools: safeToolsWebForGet(config),\n    bindings: Array.isArray(config.bindings) ? config.bindings : [],\n    mcp: buildSafeMcpConfigForWeb(config),\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;kBAIuC;8BAKuB;kBAeI;kBACiB;gBACC;sBACR;AAM5E,SAAS,6BAA6B,YAAwC;CAC5E,MAAM,EAAE,WAAW,eAAeA,uBAAmB,CAAC;CAEtD,MAAM,OADQ,OAAO,YAAY,cACd;AACnB,QAAO,OAAO,QAAQ,YAAY,IAAI,MAAM,GAAG,IAAI,MAAM,GAAG,KAAA;;;AAI9D,eAAe,4BAA4B,UAAmC;CAE5E,MAAM,SAAS,MAAM,IADA,oBACQ,CAAC,0BAA0B,SAAS;AACjE,KAAI,OAAQ,QAAO,iBAAiB,OAAO;CAE3C,MAAM,iBAAiB,6BAA6B,SAAS;AAC7D,KAAI,eAAgB,QAAO,iBAAiB,eAAe;AAG3D,KAAI,qBAAqB,CAAC,IAAI,SAAS,CAAE,QAAO;AAEhD,KAAI,MAAM,qBAAqB,SAAS,CAAE,QAAO;AACjD,QAAO;;;AAIT,SAAgB,yBAAyB,QAAgB;CACvD,MAAM,MAAM,OAAO;AACnB,KAAI,CAAC,IACH,QAAO,EAAE,SAAS,EAAE,EAA6C;AAEnE,QAAO;EACL,GAAI,IAAI,qBAAqB,KAAA,IAAY,EAAE,kBAAkB,IAAI,kBAAkB,GAAG,EAAE;EACxF,SAAS,8BAA8B,IAAI,QAAQ;EACpD;;AAGH,SAAS,6BAA6B,OAAgD;AACpF,KAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,MAAM,CAC7D,QAAO;CAET,MAAM,MAAM;CACZ,MAAM,OAAgC,EAAE;AACxC,KAAI,OAAO,IAAI,WAAW,YAAY,IAAI,OAAO,MAAM,CACrD,MAAK,SAAS,iBAAiB,IAAI,OAAO;AAE5C,KAAI,OAAO,IAAI,cAAc,YAAY,IAAI,UAAU,MAAM,CAC3D,MAAK,YAAY,IAAI,UAAU,MAAM;AAEvC,KAAI,OAAO,IAAI,WAAW,YAAY,IAAI,OAAO,MAAM,CACrD,MAAK,SAAS,IAAI,OAAO,MAAM;AAEjC,QAAO,OAAO,KAAK,KAAK,CAAC,SAAS,IAAI,OAAO;;AAG/C,SAAgB,6BAA6B,SAAkB;AAC7D,KAAI,CAAC,WAAW,OAAO,YAAY,SACjC,QAAO;EACL,SAAS;EACT,UAAU;EACV,kBAAkB;EAClB,gBAAgB;EAChB,SAAS;EACT,eAAe;EACf,OAAO;EACP,QAAQ;EACR,WAAW;EACX,cAAc;EACd,UAAU;EACV,aAAa;EACb,cAAc;EACd,sBAAsB;EACvB;AAGH,QAAO;EACL,SAAU,QAAoC,YAAY;EAC1D,UAAW,QAAoC,aAAa;EAC5D,kBAAmB,QAAoC,qBAAqB;EAC5E,gBACE,OAAQ,QAAoC,mBAAmB,YAC/D,OAAO,SAAU,QAAoC,eAAyB,GAC1E,KAAK,MAAO,QAAoC,eAAyB,GACzE;EACN,SACG,QAAoC,YAAY,WAChD,QAAoC,YAAY,SAChD,QAAoC,YAAY,WAChD,QAAoC,YAAY,eAChD,QAAoC,YAAY,iBAC5C,QAAoC,UACrC;EACN,eACG,QAAoC,kBAAkB,iBACtD,QAAoC,kBAAkB,gBAClD,QAAoC,gBACrC;EACN,OAAO,6BAA8B,QAAoC,MAAM;EAC/E,QACE,OAAQ,QAAoC,WAAW,YACrD,QAAoC,OAAkB,MAAM,GACxD,QAAoC,OAAkB,MAAM,GAC9D;EACN,WACG,QAAoC,aACrC,OAAQ,QAAoC,cAAc,YAC1D,CAAC,MAAM,QAAS,QAAoC,UAAU,GACzD,QAAoC,YACvC;EACJ,cACG,QAAoC,gBACrC,OAAQ,QAAoC,iBAAiB,YAC7D,CAAC,MAAM,QAAS,QAAoC,aAAa,GAC5D,QAAoC,eACrC;EACN,UACE,OAAQ,QAAoC,aAAa,YACpD,QAAoC,WACrC;EACN,aACG,QAAoC,gBAAgB,aACpD,QAAoC,gBAAgB,YAChD,QAAoC,cACrC;EACN,cACG,QAAoC,iBAAiB,kBACrD,QAAoC,iBAAiB,iBACrD,QAAoC,iBAAiB,iBACjD,QAAoC,eACrC;EACN,sBACE,OAAQ,QAAoC,yBAAyB,YACrE,OAAO,SAAU,QAAoC,qBAA+B,GAChF,KAAK,MAAO,QAAoC,qBAA+B,GAC/E;EACP;;;AAIH,eAAsB,0BAA0B,SAAyB,UAA+B,EAAE,EAAE;CAC1G,MAAM,SAAS,QAAQ;CAGvB,MAAM,YADJ,OAAO,QAAQ,uBAAuB,aAAa,QAAQ,oBAAoB,GAAG,KAAA,IAClD,qBAAqB;CACvD,MAAM,UAAU,WACZ,gCAAgC,UAAU,EAAE,QAAQ,QAAQ,QAAQ,CAAC,GACrE,6BAA6B,QAAQ,EAAE,QAAQ,QAAQ,QAAQ,CAAC;CACpE,MAAM,kBAAkB,OAAO,YAC7B,QAAQ,QAAQ,KAAK,UAAU;EAC7B,MAAM,SACJ,OAAO,QAAQ,4BAA4B,aACvC,QAAQ,wBAAwB,MAAM,GAAG,GACzC,KAAA;EACN,MAAM,gBAAgB,MAAM,WAAW,WAAW,YAAY,GAC1D,MAAM,WAAW,MAAM,EAAmB,CAAC,MAAM,IAAI,CAAC,MAAM,MAAM,KAClE,MAAM;EACV,MAAM,aAAa,OAAO,WAAW;EACrC,MAAM,cAAc,sBAAsB,QAAQ,MAAM,IAAI,MAAM;AAClE,SAAO,CACL,MAAM,IACN;GACE,SAAS,YAAY;GACrB,YAAY,YAAY;GACxB;GACA,QAAQ,QAAQ,eAAe,mBAAmB,OAAO,IAAI,cAAc,EAAE;GAC7E,QAAQ,MAAM;GACd,SAAS,MAAM;GAChB,CACF;GACD,CACH;AACD,QAAO;EACL,QAAQ;GACN,WAAW,sBAAsB,OAAO;GACxC,MAAM,iBAAiB,OAAO,CAC3B,QAAQ,MAAM,EAAE,YAAY,MAAM,CAClC,KAAK,OAAO;IACX,IAAI,iBAAiB,EAAE,GAAG;IAC1B,UAAU,EAAE;IACZ,WAAW,EAAE;IACb,QAAQ,EAAE;IACV,OAAO,EAAE;IACT,QAAQ,EAAE;IACV,QAAQ,EAAE;IACV,WAAW,EAAE;IACb,YAAY,EAAE;IACf,EAAE;GACL,mBAAmB,OAAO,QAAQ,qBAAqB,EAAE;GAC1D;EACD,UAAU;EACV,WAAW,OAAO,YAChB,MAAM,QAAQ,IACZ,iBAAiB,CAAC,IAAI,OAAO,aAAa,CACxC,UACA,MAAM,4BAA4B,SAAS,CAC5C,CAAC,CACH,CACF;;EAED,iBAAiB,+BAA+B,OAAO,UAAU;EACjE,SAAS;GACP,MAAM,OAAO,SAAS,QAAQ;GAC9B,gBAAgB,OAAO,SAAS;GAChC,MAAM,OAAO,SAAS;GACtB,aAAa,MAAM,QAAQ,OAAO,SAAS,YAAY,GAAG,OAAO,QAAQ,cAAc,EAAE;GACzF,gBAAgB,MAAM,QAAQ,OAAO,SAAS,eAAe,GACzD,OAAO,QAAQ,iBACf,EAAE;GACN,qBAAqB,OAAO,SAAS,wBAAwB;GAC7D,0CACE,OAAO,SAAS,6CAA6C;GAC/D,UAAU,EACR,QAAQ,OAAO,SAAS,UAAU,WAAW,MAC9C;GACD,MAAM;IACJ,MAAM,OAAO,SAAS,MAAM,QAAQ;IACpC,OAAO,OAAO,SAAS,MAAM,QAAQ,iBAAiB,OAAO,QAAQ,KAAK,MAAM,GAAG;IACnF,UAAU,OAAO,SAAS,MAAM,WAC5B,iBAAiB,OAAO,QAAQ,KAAK,SAAS,GAC9C;IACJ,cAAc,OAAO,SAAS,MAAM,eAChC;KACE,YAAY,OAAO,QAAQ,KAAK,aAAa;KAC7C,iBAAiB,OAAO,QAAQ,KAAK,aAAa,mBAAmB,EAAE;KACvE,YAAY,OAAO,QAAQ,KAAK,aAAa,cAAc,EAAE;KAC7D,eAAe,OAAO,QAAQ,KAAK,aAAa,kBAAkB;KACnE,GACD,KAAA;IACJ,WAAW;KACT,SAAS,OAAO,SAAS,MAAM,WAAW,YAAY;KACtD,aACE,OAAO,OAAO,SAAS,MAAM,WAAW,gBAAgB,WACpD,OAAO,QAAQ,KAAK,UAAU,cAC9B;KACN,UACE,OAAO,OAAO,SAAS,MAAM,WAAW,aAAa,WACjD,OAAO,QAAQ,KAAK,UAAU,WAC9B;KACN,iBACE,OAAO,OAAO,SAAS,MAAM,WAAW,oBAAoB,WACxD,OAAO,QAAQ,KAAK,UAAU,kBAC9B,OAAO,OAAO,SAAS,MAAM,WAAW,cAAc,WACpD,OAAO,QAAQ,KAAK,UAAU,YAC9B;KACR,gBAAgB,OAAO,SAAS,MAAM,WAAW,mBAAmB;KACrE;IACF;GACD,WAAW;IACT,SAAS,OAAO,SAAS,WAAW;IACpC,YAAY,OAAO,SAAS,WAAW;IACvC,4BAA4B,OAAO,SAAS,WAAW,+BAA+B;IACtF,QAAQ,OAAO,SAAS,WAAW;IACnC,cAAc,OAAO,SAAS,WAAW;IACzC,QAAQ,OAAO,SAAS,WAAW;IACnC,aAAa,OAAO,SAAS,WAAW;IACxC,iBAAiB,OAAO,SAAS,WAAW;IAC5C,aAAa,OAAO,SAAS,WAAW;IACzC;GACD,mBACE,OAAO,OAAO,SAAS,sBAAsB,WACzC,OAAO,QAAQ,oBACf;GACN,yBAAyB,OAAO,SAAS,2BAA2B;GACpE,wBAAwB,MAAM,QAAQ,OAAO,SAAS,uBAAuB,GACzE,OAAO,QAAQ,yBACf,EAAE;GACN,4BAA4B,MAAM,QAAQ,OAAO,SAAS,2BAA2B,GACjF,OAAO,QAAQ,6BACf,EAAE;GACN,OAAO,mBAAmB,OAAO,SAAS,MAAM;GAChD,WAAW,OAAO,SAAS,aAAa;GACxC,2BAA2B,OAAO,SAAS,6BAA6B;GACxE,oBAAoB,OAAO,SAAS,sBAAsB;GAC3D;EACD,SAAS,6BAA6B,OAAO,QAAQ;EACrD,MAAM,wBAAwB,OAAO;EACrC,OAAO,yBAAyB,OAAO;EACvC,SAAS,2BAA2B,OAAO;EAC3C,QAAQ;GACN,SAAS,OAAO,QAAQ,YAAY;GACpC,WAAW,OAAO,QAAQ,cAAc;GACxC,WAAW,OAAO,QAAQ,aAAa;GACvC,oBAAoB,OAAO,QAAQ,qBAC/B,uBAAuB,OAAO,OAAO,mBAAmB,GACxD;GACJ,SAAS,OAAO,QAAQ,UACpB;IACE,SAAS,OAAO,OAAO,QAAQ;IAC/B,YAAY,OAAO,OAAO,QAAQ;IACnC,GACD,KAAA;GACJ,WAAW,EAAE,KAAK,qBAA8B;GACjD;EACD,QAAQ,EACN,GAAG,0BAA0B,OAAO,EACrC;EACD,KAAK,oBAAoB,OAAO,OAAO,OAAO,MAAM;EACpD,KAAK,oBAAoB,OAAO,UAAU,IAAI;EAC9C,OAAO,mBAAmB,OAAO;EACjC,UAAU,MAAM,QAAQ,OAAO,SAAS,GAAG,OAAO,WAAW,EAAE;EAC/D,KAAK,yBAAyB,OAAO;EACtC"}
+{"version":3,"file":"config-payload.js","names":["getModelsJsonPath"],"sources":["../../../../../src/gateway/hono/lib/config-payload.ts"],"sourcesContent":["import {\n  listAgentEntries,\n  normalizeAgentId,\n  resolveDefaultAgentId,\n} from '../../../agent/agent-scope.js';\nimport {\n  buildChannelCatalogForConfig,\n  buildChannelCatalogFromSnapshot,\n  getChannelSetupStatus,\n} from '../../../channels/catalog/channel-catalog-service.js';\nimport { normalizeConfiguredMcpServers } from '../../../config/mcp-config-normalize.js';\nimport type { Config } from '../../../config/schema.js';\nimport {\n  GENERIC_MASKED_SECRET,\n  maskSecretLength,\n} from './mask-secret-length.js';\nimport { maskTunnelSecretForWeb } from '../../../tunnel/env.js';\nimport { resolveShareConfig } from '../../../share/share-config.js';\nimport {\n  resolveGoalsConfigForWeb,\n  resolveSessionConfigForWeb,\n  resolveUpdateConfigForWeb,\n} from '../../../config/web-patch.js';\nimport { CredentialResolver } from '../../../auth/credentials.js';\nimport { loadModelsJson, getModelsJsonPath } from '../../../config/models-json.js';\nimport { getAllProviders, isProviderConfigured } from '../../../providers/index.js';\nimport { getProviderRegistry } from '../../../providers/plugin-registry.js';\nimport type { GatewayService } from '../../service.js';\nimport { safeToolsWebForGet } from '../../config-tools-web.js';\nimport { buildSafeProvidersConfigForWeb } from './safe-providers-config.js';\nimport { maskSttConfigForWeb, maskTtsConfigForWeb } from './safe-voice-config.js';\n\nfunction readModelsJsonProviderApiKey(providerId: string): string | undefined {\n  const { config } = loadModelsJson(getModelsJsonPath());\n  const entry = config.providers?.[providerId];\n  const key = entry?.apiKey;\n  return typeof key === 'string' && key.trim() ? key.trim() : undefined;\n}\n\n/** Length-preserving mask for LLM provider keys in GET `/api/config`. */\nasync function maskLlmProviderApiKeyForWeb(provider: string): Promise<string> {\n  const resolver = new CredentialResolver();\n  const stored = await resolver.revealGatewayStoredApiKey(provider);\n  if (stored) return maskSecretLength(stored);\n\n  const fromModelsJson = readModelsJsonProviderApiKey(provider);\n  if (fromModelsJson) return maskSecretLength(fromModelsJson);\n\n  // Extension plugins manage their own auth; don't show a fake gateway key mask.\n  if (getProviderRegistry().has(provider)) return '';\n\n  if (await isProviderConfigured(provider)) return GENERIC_MASKED_SECRET;\n  return '';\n}\n\n/** MCP block for GET/PATCH `/api/config` (authenticated console editing). */\nexport function buildSafeMcpConfigForWeb(config: Config) {\n  const mcp = config.mcp;\n  if (!mcp) {\n    return { servers: {} as Record<string, Record<string, unknown>> };\n  }\n  return {\n    ...(mcp.sessionIdleTtlMs !== undefined ? { sessionIdleTtlMs: mcp.sessionIdleTtlMs } : {}),\n    servers: normalizeConfiguredMcpServers(mcp.servers),\n  };\n}\n\nfunction maskBrowserCloudConfigForWeb(cloud: unknown): Record<string, unknown> | null {\n  if (!cloud || typeof cloud !== 'object' || Array.isArray(cloud)) {\n    return null;\n  }\n  const raw = cloud as Record<string, unknown>;\n  const safe: Record<string, unknown> = {};\n  if (typeof raw.apiKey === 'string' && raw.apiKey.trim()) {\n    safe.apiKey = maskSecretLength(raw.apiKey);\n  }\n  if (typeof raw.projectId === 'string' && raw.projectId.trim()) {\n    safe.projectId = raw.projectId.trim();\n  }\n  if (typeof raw.region === 'string' && raw.region.trim()) {\n    safe.region = raw.region.trim();\n  }\n  return Object.keys(safe).length > 0 ? safe : null;\n}\n\nexport function buildSafeBrowserConfigForWeb(browser: unknown) {\n  if (!browser || typeof browser !== 'object') {\n    return {\n      enabled: false,\n      headless: false,\n      allowPrivateUrls: false,\n      commandTimeout: null,\n      backend: null,\n      cloudProvider: null,\n      cloud: null,\n      cdpUrl: null,\n      extension: null,\n      cloakbrowser: null,\n      humanize: null,\n      humanPreset: null,\n      dialogPolicy: null,\n      dialogTimeoutSeconds: null,\n    };\n  }\n\n  return {\n    enabled: (browser as Record<string, unknown>).enabled !== false,\n    headless: (browser as Record<string, unknown>).headless === true,\n    allowPrivateUrls: (browser as Record<string, unknown>).allowPrivateUrls === true,\n    commandTimeout:\n      typeof (browser as Record<string, unknown>).commandTimeout === 'number' &&\n      Number.isFinite((browser as Record<string, unknown>).commandTimeout as number)\n        ? Math.floor((browser as Record<string, unknown>).commandTimeout as number)\n        : null,\n    backend:\n      (browser as Record<string, unknown>).backend === 'local' ||\n      (browser as Record<string, unknown>).backend === 'cdp' ||\n      (browser as Record<string, unknown>).backend === 'cloud' ||\n      (browser as Record<string, unknown>).backend === 'extension' ||\n      (browser as Record<string, unknown>).backend === 'cloakbrowser'\n        ? (browser as Record<string, unknown>).backend\n        : null,\n    cloudProvider:\n      (browser as Record<string, unknown>).cloudProvider === 'browserbase' ||\n      (browser as Record<string, unknown>).cloudProvider === 'browser-use'\n        ? (browser as Record<string, unknown>).cloudProvider\n        : null,\n    cloud: maskBrowserCloudConfigForWeb((browser as Record<string, unknown>).cloud),\n    cdpUrl:\n      typeof (browser as Record<string, unknown>).cdpUrl === 'string' &&\n      ((browser as Record<string, unknown>).cdpUrl as string).trim()\n        ? ((browser as Record<string, unknown>).cdpUrl as string).trim()\n        : null,\n    extension:\n      (browser as Record<string, unknown>).extension &&\n      typeof (browser as Record<string, unknown>).extension === 'object' &&\n      !Array.isArray((browser as Record<string, unknown>).extension)\n        ? (browser as Record<string, unknown>).extension\n      : null,\n    cloakbrowser:\n      (browser as Record<string, unknown>).cloakbrowser &&\n      typeof (browser as Record<string, unknown>).cloakbrowser === 'object' &&\n      !Array.isArray((browser as Record<string, unknown>).cloakbrowser)\n        ? (browser as Record<string, unknown>).cloakbrowser\n        : null,\n    humanize:\n      typeof (browser as Record<string, unknown>).humanize === 'boolean'\n        ? (browser as Record<string, unknown>).humanize\n        : null,\n    humanPreset:\n      (browser as Record<string, unknown>).humanPreset === 'default' ||\n      (browser as Record<string, unknown>).humanPreset === 'careful'\n        ? (browser as Record<string, unknown>).humanPreset\n        : null,\n    dialogPolicy:\n      (browser as Record<string, unknown>).dialogPolicy === 'must_respond' ||\n      (browser as Record<string, unknown>).dialogPolicy === 'auto_accept' ||\n      (browser as Record<string, unknown>).dialogPolicy === 'auto_dismiss'\n        ? (browser as Record<string, unknown>).dialogPolicy\n        : null,\n    dialogTimeoutSeconds:\n      typeof (browser as Record<string, unknown>).dialogTimeoutSeconds === 'number' &&\n      Number.isFinite((browser as Record<string, unknown>).dialogTimeoutSeconds as number)\n        ? Math.floor((browser as Record<string, unknown>).dialogTimeoutSeconds as number)\n        : null,\n  };\n}\n\n/** Sanitized config snapshot for GET/PATCH `/api/config` (matches persisted `service.currentConfig`). */\nexport async function buildSafeWebConfigPayload(service: GatewayService, options: { locale?: string } = {}) {\n  const config = service.currentConfig;\n  const extensionLoader =\n    typeof service.getExtensionLoader === 'function' ? service.getExtensionLoader() : undefined;\n  const snapshot = extensionLoader?.getManifestSnapshot();\n  const catalog = snapshot\n    ? buildChannelCatalogFromSnapshot(snapshot, { locale: options.locale })\n    : buildChannelCatalogForConfig(config, { locale: options.locale });\n  const channelsPayload = Object.fromEntries(\n    catalog.entries.map((entry) => {\n      const plugin =\n        typeof service.getChannelRuntimePlugin === 'function'\n          ? service.getChannelRuntimePlugin(entry.id)\n          : undefined;\n      const channelCfgKey = entry.configPath.startsWith('channels.')\n        ? entry.configPath.slice('channels.'.length).split('.')[0] || entry.id\n        : entry.id;\n      const channelCfg = config.channels?.[channelCfgKey] as Record<string, unknown> | undefined;\n      const setupStatus = getChannelSetupStatus(config, entry.id, entry);\n      return [\n        entry.id,\n        {\n          enabled: setupStatus.enabled,\n          configured: setupStatus.ready,\n          setupStatus,\n          config: plugin?.configSurface?.buildConfigSurface(config) ?? channelCfg ?? {},\n          schema: entry.configSchema,\n          uiHints: entry.uiHints,\n        },\n      ];\n    }),\n  );\n  return {\n    agents: {\n      defaultId: resolveDefaultAgentId(config),\n      list: listAgentEntries(config)\n        .filter((e) => e.enabled !== false)\n        .map((e) => ({\n          id: normalizeAgentId(e.id),\n          identity: e.identity,\n          workspace: e.workspace,\n          models: e.models,\n          tools: e.tools,\n          skills: e.skills,\n          memory: e.memory,\n          workflows: e.workflows,\n          boundaries: e.boundaries,\n        })),\n      capabilityPresets: config.agents?.capabilityPresets ?? {},\n    },\n    channels: channelsPayload,\n    providers: Object.fromEntries(\n      await Promise.all(\n        getAllProviders().map(async (provider) => [\n          provider,\n          await maskLlmProviderApiKeyForWeb(provider),\n        ]),\n      ),\n    ),\n    /** Masked `cfg.providers` for capability keys (image / STT / etc.). */\n    providersConfig: buildSafeProvidersConfigForWeb(config.providers),\n    gateway: {\n      bind: config.gateway?.bind ?? 'loopback',\n      customBindHost: config.gateway?.customBindHost,\n      port: config.gateway?.port,\n      corsOrigins: Array.isArray(config.gateway?.corsOrigins) ? config.gateway.corsOrigins : [],\n      trustedProxies: Array.isArray(config.gateway?.trustedProxies)\n        ? config.gateway.trustedProxies\n        : [],\n      allowRealIpFallback: config.gateway?.allowRealIpFallback === true,\n      dangerouslyAllowHostHeaderOriginFallback:\n        config.gateway?.dangerouslyAllowHostHeaderOriginFallback === true,\n      security: {\n        strict: config.gateway?.security?.strict === true,\n      },\n      auth: {\n        mode: config.gateway?.auth?.mode || 'token',\n        token: config.gateway?.auth?.token ? maskSecretLength(config.gateway.auth.token) : '',\n        password: config.gateway?.auth?.password\n          ? maskSecretLength(config.gateway.auth.password)\n          : '',\n        trustedProxy: config.gateway?.auth?.trustedProxy\n          ? {\n              userHeader: config.gateway.auth.trustedProxy.userHeader,\n              requiredHeaders: config.gateway.auth.trustedProxy.requiredHeaders ?? [],\n              allowUsers: config.gateway.auth.trustedProxy.allowUsers ?? [],\n              allowLoopback: config.gateway.auth.trustedProxy.allowLoopback === true,\n            }\n          : undefined,\n        rateLimit: {\n          enabled: config.gateway?.auth?.rateLimit?.enabled !== false,\n          maxAttempts:\n            typeof config.gateway?.auth?.rateLimit?.maxAttempts === 'number'\n              ? config.gateway.auth.rateLimit.maxAttempts\n              : 5,\n          windowMs:\n            typeof config.gateway?.auth?.rateLimit?.windowMs === 'number'\n              ? config.gateway.auth.rateLimit.windowMs\n              : 900_000,\n          blockDurationMs:\n            typeof config.gateway?.auth?.rateLimit?.blockDurationMs === 'number'\n              ? config.gateway.auth.rateLimit.blockDurationMs\n              : typeof config.gateway?.auth?.rateLimit?.lockoutMs === 'number'\n                ? config.gateway.auth.rateLimit.lockoutMs\n                : 300_000,\n          exemptLoopback: config.gateway?.auth?.rateLimit?.exemptLoopback !== false,\n        },\n      },\n      heartbeat: {\n        enabled: config.gateway?.heartbeat?.enabled,\n        intervalMs: config.gateway?.heartbeat?.intervalMs,\n        includeSystemPromptSection: config.gateway?.heartbeat?.includeSystemPromptSection === true,\n        target: config.gateway?.heartbeat?.target,\n        targetChatId: config.gateway?.heartbeat?.targetChatId,\n        prompt: config.gateway?.heartbeat?.prompt,\n        ackMaxChars: config.gateway?.heartbeat?.ackMaxChars,\n        isolatedSession: config.gateway?.heartbeat?.isolatedSession,\n        activeHours: config.gateway?.heartbeat?.activeHours,\n      },\n      maxSseConnections:\n        typeof config.gateway?.maxSseConnections === 'number'\n          ? config.gateway.maxSseConnections\n          : 100,\n      channelConnectDeferMode: config.gateway?.channelConnectDeferMode ?? 'auto',\n      channelConnectDeferIds: Array.isArray(config.gateway?.channelConnectDeferIds)\n        ? config.gateway.channelConnectDeferIds\n        : [],\n      channelConnectDeferSkipIds: Array.isArray(config.gateway?.channelConnectDeferSkipIds)\n        ? config.gateway.channelConnectDeferSkipIds\n        : [],\n      share: resolveShareConfig(config.gateway?.share),\n      publicUrl: config.gateway?.publicUrl ?? null,\n      skillsMarketplaceProvider: config.gateway?.skillsMarketplaceProvider ?? 'skillhub',\n      skillsStoreBaseUrl: config.gateway?.skillsStoreBaseUrl ?? 'https://store.xopc.ai',\n    },\n    browser: buildSafeBrowserConfigForWeb(config.browser),\n    goals: resolveGoalsConfigForWeb(config),\n    session: resolveSessionConfigForWeb(config),\n    tui: {\n      defaultAgent: config.tui?.defaultAgent ?? 'coder',\n    },\n    tunnel: {\n      enabled: config.tunnel?.enabled === true,\n      autoStart: config.tunnel?.autoStart === true,\n      brokerUrl: config.tunnel?.brokerUrl ?? 'https://frp.xopc.ai/api',\n      registrationSecret: config.tunnel?.registrationSecret\n        ? maskTunnelSecretForWeb(config.tunnel.registrationSecret)\n        : '',\n      consent: config.tunnel?.consent\n        ? {\n            version: config.tunnel.consent.version,\n            acceptedAt: config.tunnel.consent.acceptedAt,\n          }\n        : undefined,\n      transport: { tls: 'broker_terminated' as const },\n    },\n    update: {\n      ...resolveUpdateConfigForWeb(config),\n    },\n    stt: maskSttConfigForWeb(config.tools?.media?.audio),\n    tts: maskTtsConfigForWeb(config.messages?.tts),\n    tools: safeToolsWebForGet(config),\n    bindings: Array.isArray(config.bindings) ? config.bindings : [],\n    mcp: buildSafeMcpConfigForWeb(config),\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;kBAIuC;8BAKuB;kBAcI;kBACiB;gBACC;sBACR;AAM5E,SAAS,6BAA6B,YAAwC;CAC5E,MAAM,EAAE,WAAW,eAAeA,uBAAmB,CAAC;CAEtD,MAAM,OADQ,OAAO,YAAY,cACd;AACnB,QAAO,OAAO,QAAQ,YAAY,IAAI,MAAM,GAAG,IAAI,MAAM,GAAG,KAAA;;;AAI9D,eAAe,4BAA4B,UAAmC;CAE5E,MAAM,SAAS,MAAM,IADA,oBACQ,CAAC,0BAA0B,SAAS;AACjE,KAAI,OAAQ,QAAO,iBAAiB,OAAO;CAE3C,MAAM,iBAAiB,6BAA6B,SAAS;AAC7D,KAAI,eAAgB,QAAO,iBAAiB,eAAe;AAG3D,KAAI,qBAAqB,CAAC,IAAI,SAAS,CAAE,QAAO;AAEhD,KAAI,MAAM,qBAAqB,SAAS,CAAE,QAAO;AACjD,QAAO;;;AAIT,SAAgB,yBAAyB,QAAgB;CACvD,MAAM,MAAM,OAAO;AACnB,KAAI,CAAC,IACH,QAAO,EAAE,SAAS,EAAE,EAA6C;AAEnE,QAAO;EACL,GAAI,IAAI,qBAAqB,KAAA,IAAY,EAAE,kBAAkB,IAAI,kBAAkB,GAAG,EAAE;EACxF,SAAS,8BAA8B,IAAI,QAAQ;EACpD;;AAGH,SAAS,6BAA6B,OAAgD;AACpF,KAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,MAAM,CAC7D,QAAO;CAET,MAAM,MAAM;CACZ,MAAM,OAAgC,EAAE;AACxC,KAAI,OAAO,IAAI,WAAW,YAAY,IAAI,OAAO,MAAM,CACrD,MAAK,SAAS,iBAAiB,IAAI,OAAO;AAE5C,KAAI,OAAO,IAAI,cAAc,YAAY,IAAI,UAAU,MAAM,CAC3D,MAAK,YAAY,IAAI,UAAU,MAAM;AAEvC,KAAI,OAAO,IAAI,WAAW,YAAY,IAAI,OAAO,MAAM,CACrD,MAAK,SAAS,IAAI,OAAO,MAAM;AAEjC,QAAO,OAAO,KAAK,KAAK,CAAC,SAAS,IAAI,OAAO;;AAG/C,SAAgB,6BAA6B,SAAkB;AAC7D,KAAI,CAAC,WAAW,OAAO,YAAY,SACjC,QAAO;EACL,SAAS;EACT,UAAU;EACV,kBAAkB;EAClB,gBAAgB;EAChB,SAAS;EACT,eAAe;EACf,OAAO;EACP,QAAQ;EACR,WAAW;EACX,cAAc;EACd,UAAU;EACV,aAAa;EACb,cAAc;EACd,sBAAsB;EACvB;AAGH,QAAO;EACL,SAAU,QAAoC,YAAY;EAC1D,UAAW,QAAoC,aAAa;EAC5D,kBAAmB,QAAoC,qBAAqB;EAC5E,gBACE,OAAQ,QAAoC,mBAAmB,YAC/D,OAAO,SAAU,QAAoC,eAAyB,GAC1E,KAAK,MAAO,QAAoC,eAAyB,GACzE;EACN,SACG,QAAoC,YAAY,WAChD,QAAoC,YAAY,SAChD,QAAoC,YAAY,WAChD,QAAoC,YAAY,eAChD,QAAoC,YAAY,iBAC5C,QAAoC,UACrC;EACN,eACG,QAAoC,kBAAkB,iBACtD,QAAoC,kBAAkB,gBAClD,QAAoC,gBACrC;EACN,OAAO,6BAA8B,QAAoC,MAAM;EAC/E,QACE,OAAQ,QAAoC,WAAW,YACrD,QAAoC,OAAkB,MAAM,GACxD,QAAoC,OAAkB,MAAM,GAC9D;EACN,WACG,QAAoC,aACrC,OAAQ,QAAoC,cAAc,YAC1D,CAAC,MAAM,QAAS,QAAoC,UAAU,GACzD,QAAoC,YACvC;EACJ,cACG,QAAoC,gBACrC,OAAQ,QAAoC,iBAAiB,YAC7D,CAAC,MAAM,QAAS,QAAoC,aAAa,GAC5D,QAAoC,eACrC;EACN,UACE,OAAQ,QAAoC,aAAa,YACpD,QAAoC,WACrC;EACN,aACG,QAAoC,gBAAgB,aACpD,QAAoC,gBAAgB,YAChD,QAAoC,cACrC;EACN,cACG,QAAoC,iBAAiB,kBACrD,QAAoC,iBAAiB,iBACrD,QAAoC,iBAAiB,iBACjD,QAAoC,eACrC;EACN,sBACE,OAAQ,QAAoC,yBAAyB,YACrE,OAAO,SAAU,QAAoC,qBAA+B,GAChF,KAAK,MAAO,QAAoC,qBAA+B,GAC/E;EACP;;;AAIH,eAAsB,0BAA0B,SAAyB,UAA+B,EAAE,EAAE;CAC1G,MAAM,SAAS,QAAQ;CAGvB,MAAM,YADJ,OAAO,QAAQ,uBAAuB,aAAa,QAAQ,oBAAoB,GAAG,KAAA,IAClD,qBAAqB;CACvD,MAAM,UAAU,WACZ,gCAAgC,UAAU,EAAE,QAAQ,QAAQ,QAAQ,CAAC,GACrE,6BAA6B,QAAQ,EAAE,QAAQ,QAAQ,QAAQ,CAAC;CACpE,MAAM,kBAAkB,OAAO,YAC7B,QAAQ,QAAQ,KAAK,UAAU;EAC7B,MAAM,SACJ,OAAO,QAAQ,4BAA4B,aACvC,QAAQ,wBAAwB,MAAM,GAAG,GACzC,KAAA;EACN,MAAM,gBAAgB,MAAM,WAAW,WAAW,YAAY,GAC1D,MAAM,WAAW,MAAM,EAAmB,CAAC,MAAM,IAAI,CAAC,MAAM,MAAM,KAClE,MAAM;EACV,MAAM,aAAa,OAAO,WAAW;EACrC,MAAM,cAAc,sBAAsB,QAAQ,MAAM,IAAI,MAAM;AAClE,SAAO,CACL,MAAM,IACN;GACE,SAAS,YAAY;GACrB,YAAY,YAAY;GACxB;GACA,QAAQ,QAAQ,eAAe,mBAAmB,OAAO,IAAI,cAAc,EAAE;GAC7E,QAAQ,MAAM;GACd,SAAS,MAAM;GAChB,CACF;GACD,CACH;AACD,QAAO;EACL,QAAQ;GACN,WAAW,sBAAsB,OAAO;GACxC,MAAM,iBAAiB,OAAO,CAC3B,QAAQ,MAAM,EAAE,YAAY,MAAM,CAClC,KAAK,OAAO;IACX,IAAI,iBAAiB,EAAE,GAAG;IAC1B,UAAU,EAAE;IACZ,WAAW,EAAE;IACb,QAAQ,EAAE;IACV,OAAO,EAAE;IACT,QAAQ,EAAE;IACV,QAAQ,EAAE;IACV,WAAW,EAAE;IACb,YAAY,EAAE;IACf,EAAE;GACL,mBAAmB,OAAO,QAAQ,qBAAqB,EAAE;GAC1D;EACD,UAAU;EACV,WAAW,OAAO,YAChB,MAAM,QAAQ,IACZ,iBAAiB,CAAC,IAAI,OAAO,aAAa,CACxC,UACA,MAAM,4BAA4B,SAAS,CAC5C,CAAC,CACH,CACF;;EAED,iBAAiB,+BAA+B,OAAO,UAAU;EACjE,SAAS;GACP,MAAM,OAAO,SAAS,QAAQ;GAC9B,gBAAgB,OAAO,SAAS;GAChC,MAAM,OAAO,SAAS;GACtB,aAAa,MAAM,QAAQ,OAAO,SAAS,YAAY,GAAG,OAAO,QAAQ,cAAc,EAAE;GACzF,gBAAgB,MAAM,QAAQ,OAAO,SAAS,eAAe,GACzD,OAAO,QAAQ,iBACf,EAAE;GACN,qBAAqB,OAAO,SAAS,wBAAwB;GAC7D,0CACE,OAAO,SAAS,6CAA6C;GAC/D,UAAU,EACR,QAAQ,OAAO,SAAS,UAAU,WAAW,MAC9C;GACD,MAAM;IACJ,MAAM,OAAO,SAAS,MAAM,QAAQ;IACpC,OAAO,OAAO,SAAS,MAAM,QAAQ,iBAAiB,OAAO,QAAQ,KAAK,MAAM,GAAG;IACnF,UAAU,OAAO,SAAS,MAAM,WAC5B,iBAAiB,OAAO,QAAQ,KAAK,SAAS,GAC9C;IACJ,cAAc,OAAO,SAAS,MAAM,eAChC;KACE,YAAY,OAAO,QAAQ,KAAK,aAAa;KAC7C,iBAAiB,OAAO,QAAQ,KAAK,aAAa,mBAAmB,EAAE;KACvE,YAAY,OAAO,QAAQ,KAAK,aAAa,cAAc,EAAE;KAC7D,eAAe,OAAO,QAAQ,KAAK,aAAa,kBAAkB;KACnE,GACD,KAAA;IACJ,WAAW;KACT,SAAS,OAAO,SAAS,MAAM,WAAW,YAAY;KACtD,aACE,OAAO,OAAO,SAAS,MAAM,WAAW,gBAAgB,WACpD,OAAO,QAAQ,KAAK,UAAU,cAC9B;KACN,UACE,OAAO,OAAO,SAAS,MAAM,WAAW,aAAa,WACjD,OAAO,QAAQ,KAAK,UAAU,WAC9B;KACN,iBACE,OAAO,OAAO,SAAS,MAAM,WAAW,oBAAoB,WACxD,OAAO,QAAQ,KAAK,UAAU,kBAC9B,OAAO,OAAO,SAAS,MAAM,WAAW,cAAc,WACpD,OAAO,QAAQ,KAAK,UAAU,YAC9B;KACR,gBAAgB,OAAO,SAAS,MAAM,WAAW,mBAAmB;KACrE;IACF;GACD,WAAW;IACT,SAAS,OAAO,SAAS,WAAW;IACpC,YAAY,OAAO,SAAS,WAAW;IACvC,4BAA4B,OAAO,SAAS,WAAW,+BAA+B;IACtF,QAAQ,OAAO,SAAS,WAAW;IACnC,cAAc,OAAO,SAAS,WAAW;IACzC,QAAQ,OAAO,SAAS,WAAW;IACnC,aAAa,OAAO,SAAS,WAAW;IACxC,iBAAiB,OAAO,SAAS,WAAW;IAC5C,aAAa,OAAO,SAAS,WAAW;IACzC;GACD,mBACE,OAAO,OAAO,SAAS,sBAAsB,WACzC,OAAO,QAAQ,oBACf;GACN,yBAAyB,OAAO,SAAS,2BAA2B;GACpE,wBAAwB,MAAM,QAAQ,OAAO,SAAS,uBAAuB,GACzE,OAAO,QAAQ,yBACf,EAAE;GACN,4BAA4B,MAAM,QAAQ,OAAO,SAAS,2BAA2B,GACjF,OAAO,QAAQ,6BACf,EAAE;GACN,OAAO,mBAAmB,OAAO,SAAS,MAAM;GAChD,WAAW,OAAO,SAAS,aAAa;GACxC,2BAA2B,OAAO,SAAS,6BAA6B;GACxE,oBAAoB,OAAO,SAAS,sBAAsB;GAC3D;EACD,SAAS,6BAA6B,OAAO,QAAQ;EACrD,OAAO,yBAAyB,OAAO;EACvC,SAAS,2BAA2B,OAAO;EAC3C,KAAK,EACH,cAAc,OAAO,KAAK,gBAAgB,SAC3C;EACD,QAAQ;GACN,SAAS,OAAO,QAAQ,YAAY;GACpC,WAAW,OAAO,QAAQ,cAAc;GACxC,WAAW,OAAO,QAAQ,aAAa;GACvC,oBAAoB,OAAO,QAAQ,qBAC/B,uBAAuB,OAAO,OAAO,mBAAmB,GACxD;GACJ,SAAS,OAAO,QAAQ,UACpB;IACE,SAAS,OAAO,OAAO,QAAQ;IAC/B,YAAY,OAAO,OAAO,QAAQ;IACnC,GACD,KAAA;GACJ,WAAW,EAAE,KAAK,qBAA8B;GACjD;EACD,QAAQ,EACN,GAAG,0BAA0B,OAAO,EACrC;EACD,KAAK,oBAAoB,OAAO,OAAO,OAAO,MAAM;EACpD,KAAK,oBAAoB,OAAO,UAAU,IAAI;EAC9C,OAAO,mBAAmB,OAAO;EACjC,UAAU,MAAM,QAAQ,OAAO,SAAS,GAAG,OAAO,WAAW,EAAE;EAC/D,KAAK,yBAAyB,OAAO;EACtC"}

package/dist/src/gateway/hono/routes/agents.js

@@ -3,7 +3,7 @@ import { AgentModelsSchema, init_schema as init_schema$1, parseModelRef } from "
 import { init_agent_scope, normalizeAgentId } from "../../../agent/agent-scope.js";
 import { init_providers, isProviderConfigured, resolveModel } from "../../../providers/index.js";
 import { getVoiceModelsConfig } from "../../../config/voice.js";
-import { deleteAgentAvatarFile, finalizeCreateAgentDirs, getGatewayAgentEffectiveManifest, listAgentProfileFiles, listGatewayAgents, prepareCreateAgent, prepareDeleteAgent, prepareUpdateAgent, readAgentAvatarFile, readAgentProfileFile, runAfterDeletePurge, writeAgentAvatarFromBase64, writeAgentProfileFile } from "../../agents-admin.js";
+import { deleteAgentAvatarFile, finalizeCreateAgentDirs, getGatewayAgentEffectiveManifest, listAgentProfileFiles, listGatewayAgents, prepareCreateAgent, prepareDeleteAgent, prepareUpdateAgent, readAgentAvatarFile, readAgentProfileFile, readUserProfileFile, runAfterDeletePurge, writeAgentAvatarFromBase64, writeAgentProfileFile, writeUserProfileFile } from "../../agents-admin.js";
 import { resolveImageGenerationCapabilities, resolveImageUnderstandingCapabilities } from "../../image-capabilities.js";
 //#region src/gateway/hono/routes/agents.ts
 init_schema$1();
@@ -89,6 +89,38 @@ function registerAgentsRoutes(authenticated, deps) {
 			payload
 		});
 	});
+	authenticated.get("/api/user-profile", async (c) => {
+		const res = await readUserProfileFile();
+		if (res.ok === false) return c.json({
+			ok: false,
+			error: { message: res.error }
+		}, res.status ?? 400);
+		return c.json({
+			ok: true,
+			payload: res.data
+		});
+	});
+	authenticated.put("/api/user-profile", strictRateLimitMiddleware, async (c) => {
+		let content = "";
+		try {
+			const body = await c.req.json();
+			content = typeof body.content === "string" ? body.content : "";
+		} catch {
+			return c.json({
+				ok: false,
+				error: { message: "Invalid JSON" }
+			}, 400);
+		}
+		const res = await writeUserProfileFile(content);
+		if (res.ok === false) return c.json({
+			ok: false,
+			error: { message: res.error }
+		}, res.status ?? 400);
+		return c.json({
+			ok: true,
+			payload: res.data
+		});
+	});
 	authenticated.post("/api/agents", strictRateLimitMiddleware, async (c) => {
 		let body = {};
 		try {

package/dist/src/gateway/hono/routes/agents.js.map

@@ -1 +1 @@
-{"version":3,"file":"agents.js","names":[],"sources":["../../../../../src/gateway/hono/routes/agents.ts"],"sourcesContent":["import type { Hono } from 'hono';\n\nimport { AgentModelsSchema, type Config, parseModelRef } from '../../../config/schema.js';\nimport { MemoryPolicySchema, ToolPolicySetSchema } from '../../../agent-manifest/schema.js';\nimport { getVoiceModelsConfig } from '../../../config/voice.js';\nimport {\n  isProviderConfigured,\n  resolveModel,\n} from '../../../providers/index.js';\nimport { normalizeAgentId } from '../../../agent/agent-scope.js';\nimport {\n  deleteAgentAvatarFile,\n  finalizeCreateAgentDirs,\n  getGatewayAgentEffectiveManifest,\n  listAgentProfileFiles,\n  listGatewayAgents,\n  prepareCreateAgent,\n  prepareDeleteAgent,\n  prepareUpdateAgent,\n  readAgentAvatarFile,\n  readAgentProfileFile,\n  runAfterDeletePurge,\n  writeAgentAvatarFromBase64,\n  writeAgentProfileFile,\n  type CreateAgentBody,\n} from '../../agents-admin.js';\nimport {\n  resolveImageGenerationCapabilities,\n  resolveImageUnderstandingCapabilities,\n} from '../../image-capabilities.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\n\nfunction parseProfileFiles(raw: unknown): Record<string, string> | undefined | { error: string } {\n  if (raw === undefined) {\n    return undefined;\n  }\n  if (raw === null || typeof raw !== 'object' || Array.isArray(raw)) {\n    return { error: 'profileFiles must be an object' };\n  }\n  const profileFiles: Record<string, string> = {};\n  for (const [name, content] of Object.entries(raw as Record<string, unknown>)) {\n    if (typeof content !== 'string') {\n      return { error: `profileFiles[\"${name}\"] must be a string` };\n    }\n    profileFiles[name] = content;\n  }\n  return profileFiles;\n}\n\nfunction isParseError(value: unknown): value is { error: string } {\n  return (\n    typeof value === 'object' &&\n    value !== null &&\n    'error' in value &&\n    typeof (value as { error: string }).error === 'string'\n  );\n}\n\nfunction parseCreateAgentBody(raw: unknown): CreateAgentBody | { error: string } {\n  if (raw === null || typeof raw !== 'object' || Array.isArray(raw)) {\n    return { error: 'each agent must be an object' };\n  }\n  const body = raw as Record<string, unknown>;\n  if (Object.hasOwn(body, 'model')) {\n    return { error: 'model is not supported; use models.defaultRole and models.roles' };\n  }\n  if (Object.hasOwn(body, 'toolsDisable')) {\n    return { error: 'toolsDisable was removed; use tools.builtin policies' };\n  }\n  if (Object.hasOwn(body, 'typedModels')) {\n    return { error: 'typedModels is not supported; use models.roles' };\n  }\n  if (Object.hasOwn(body, 'agentDir')) {\n    return { error: 'agentDir was removed from agent manifests' };\n  }\n  if (Object.hasOwn(body, 'name')) {\n    return { error: 'name is not supported; write IDENTITY.md in profileFiles' };\n  }\n  if (Object.hasOwn(body, 'description')) {\n    return { error: 'description is not supported; write IDENTITY.md in profileFiles' };\n  }\n  const workspace = typeof body.workspace === 'string' ? body.workspace : '';\n  const models = Object.hasOwn(body, 'models')\n    ? AgentModelsSchema.safeParse(body.models)\n    : undefined;\n  if (models && !models.success) {\n    return { error: `models ${models.error.issues[0]?.message ?? 'is invalid'}` };\n  }\n  const id = typeof body.id === 'string' ? body.id : undefined;\n  const skills = Object.hasOwn(body, 'skills')\n    ? Array.isArray(body.skills)\n      ? body.skills.map((x: unknown) => String(x).trim()).filter(Boolean)\n      : null\n    : undefined;\n  if (skills === null) {\n    return { error: 'skills must be an array' };\n  }\n  const toolsRaw = Object.hasOwn(body, 'tools') ? body.tools : undefined;\n  let tools: CreateAgentBody['tools'] | undefined;\n  if (toolsRaw !== undefined) {\n    if (toolsRaw === null || typeof toolsRaw !== 'object' || Array.isArray(toolsRaw)) {\n      return { error: 'tools must be an object' };\n    }\n    const parsedTools = ToolPolicySetSchema.safeParse(toolsRaw);\n    if (!parsedTools.success) {\n      return { error: `tools ${parsedTools.error.issues[0]?.message ?? 'is invalid'}` };\n    }\n    tools = parsedTools.data;\n  }\n  let profileFiles: Record<string, string> | undefined;\n  if (Object.hasOwn(body, 'profileFiles')) {\n    const parsed = parseProfileFiles(body.profileFiles);\n    if (isParseError(parsed)) {\n      return parsed;\n    }\n    profileFiles = parsed;\n  }\n  if (!profileFiles?.['IDENTITY.md'] && typeof body.cloneFrom !== 'string') {\n    return { error: 'profileFiles.IDENTITY.md is required' };\n  }\n  const cloneFrom = typeof body.cloneFrom === 'string' ? body.cloneFrom : undefined;\n  return {\n    workspace,\n    ...(models && models.data !== undefined ? { models: models.data } : {}),\n    ...(id !== undefined ? { id } : {}),\n    ...(skills !== undefined ? { skills } : {}),\n    ...(tools !== undefined ? { tools } : {}),\n    ...(profileFiles !== undefined ? { profileFiles } : {}),\n    ...(cloneFrom !== undefined ? { cloneFrom } : {}),\n  };\n}\n\ntype PatchModels = {\n  defaultRole?: string | null;\n  roles?: Record<string, { model: string; description?: string }>;\n};\n\nfunction parsePatchModels(raw: unknown): PatchModels | null | undefined | { error: string } {\n  if (raw === undefined) {\n    return undefined;\n  }\n  if (raw === null) {\n    return null;\n  }\n  if (typeof raw !== 'object' || Array.isArray(raw)) {\n    return { error: 'models must be an object or null' };\n  }\n  const body = raw as Record<string, unknown>;\n  const out: PatchModels = {};\n  if (Object.hasOwn(body, 'defaultRole')) {\n    out.defaultRole = body.defaultRole === null ? null : String(body.defaultRole ?? '').trim();\n  }\n  if (Object.hasOwn(body, 'roles')) {\n    if (body.roles === null) {\n      return { error: 'models.roles must be an object' };\n    } else {\n      const parsed = AgentModelsSchema.safeParse({ roles: body.roles });\n      if (!parsed.success) {\n        return { error: `models.roles ${parsed.error.issues[0]?.message ?? 'is invalid'}` };\n      }\n      out.roles = parsed.data?.roles;\n    }\n  }\n  return out;\n}\n\nexport function registerAgentsRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  const { service, strictRateLimitMiddleware } = deps;\n\n  authenticated.get('/api/agents', async (c) => {\n    const cfg = service.currentConfig as Config;\n    const locale = c.req.query('locale') || c.req.header('Accept-Language')?.split(',')[0]?.trim();\n    const payload = await listGatewayAgents(cfg, { locale });\n    return c.json({ ok: true, payload });\n  });\n\n\n  authenticated.post('/api/agents', strictRateLimitMiddleware, async (c) => {\n    let body: Record<string, unknown> = {};\n    try {\n      body = (await c.req.json()) as Record<string, unknown>;\n    } catch {\n      return c.json({ ok: false, error: { message: 'Invalid JSON' } }, 400);\n    }\n    const parsed = parseCreateAgentBody(body);\n    if ('error' in parsed) {\n      return c.json({ ok: false, error: { message: parsed.error } }, 400);\n    }\n    const prep = prepareCreateAgent(service.currentConfig as Config, parsed);\n    if (prep.ok === false) {\n      return c.json({ ok: false, error: { message: prep.error } }, prep.status ?? 400);\n    }\n    const { nextConfig, agentId } = prep.data;\n    const save = await service.saveConfig(nextConfig);\n    if (!save.saved) {\n      return c.json({ ok: false, error: { message: save.error ?? 'save failed' } }, 500);\n    }\n    const finalized = await finalizeCreateAgentDirs(service.currentConfig as Config, agentId, {\n      ...(parsed.profileFiles !== undefined ? { profileFiles: parsed.profileFiles } : {}),\n      ...(parsed.cloneFrom ? { cloneFrom: parsed.cloneFrom } : {}),\n    });\n    if (finalized.ok === false) {\n      return c.json({ ok: false, error: { message: finalized.error } }, finalized.status ?? 400);\n    }\n    const locale = c.req.query('locale') || c.req.header('Accept-Language')?.split(',')[0]?.trim();\n    const agentsPayload = await listGatewayAgents(service.currentConfig as Config, { locale });\n    return c.json({\n      ok: true,\n      payload: {\n        agentId,\n        agents: agentsPayload,\n      },\n    });\n  });\n\n  authenticated.get('/api/agents/:id/effective-manifest', async (c) => {\n    const id = normalizeAgentId(c.req.param('id') ?? '');\n    const res = getGatewayAgentEffectiveManifest(service.currentConfig as Config, id);\n    if (res.ok === false) {\n      return c.json({ ok: false, error: { message: res.error } }, res.status ?? 400);\n    }\n    return c.json({ ok: true, payload: res.data });\n  });\n\n  authenticated.patch('/api/agents/:id', strictRateLimitMiddleware, async (c) => {\n    const id = normalizeAgentId(c.req.param('id') ?? '');\n    let body: Record<string, unknown> = {};\n    try {\n      body = (await c.req.json()) as Record<string, unknown>;\n    } catch {\n      return c.json({ ok: false, error: { message: 'Invalid JSON' } }, 400);\n    }\n    if (Object.hasOwn(body, 'model')) {\n      return c.json({ ok: false, error: { message: 'model is not supported; use models.defaultRole and models.roles' } }, 400);\n    }\n    if (Object.hasOwn(body, 'typedModels')) {\n      return c.json({ ok: false, error: { message: 'typedModels is not supported; use models.roles' } }, 400);\n    }\n    if (Object.hasOwn(body, 'toolsDisable')) {\n      return c.json({ ok: false, error: { message: 'toolsDisable was removed; use tools.builtin policies' } }, 400);\n    }\n    if (Object.hasOwn(body, 'agentDir')) {\n      return c.json({ ok: false, error: { message: 'agentDir was removed from agent manifests' } }, 400);\n    }\n    if (Object.hasOwn(body, 'name')) {\n      return c.json({ ok: false, error: { message: 'name is not supported; edit IDENTITY.md' } }, 400);\n    }\n    if (Object.hasOwn(body, 'description')) {\n      return c.json({ ok: false, error: { message: 'description is not supported; edit IDENTITY.md' } }, 400);\n    }\n    const skillsPatch =\n      body.skills === null\n        ? null\n        : Array.isArray(body.skills)\n          ? body.skills.map((x: unknown) => String(x).trim()).filter(Boolean)\n          : undefined;\n    const extendsPatch = Object.hasOwn(body, 'extends')\n      ? Array.isArray(body.extends)\n        ? body.extends.map((x: unknown) => String(x).trim()).filter(Boolean)\n        : undefined\n      : undefined;\n    if (Object.hasOwn(body, 'extends') && extendsPatch === undefined) {\n      return c.json({ ok: false, error: { message: 'extends must be an array' } }, 400);\n    }\n    let toolsPatch: CreateAgentBody['tools'] | null | undefined;\n    if (Object.hasOwn(body, 'tools')) {\n      if (body.tools === null) {\n        toolsPatch = null;\n      } else if (typeof body.tools === 'object' && !Array.isArray(body.tools)) {\n        const parsedTools = ToolPolicySetSchema.safeParse(body.tools);\n        if (!parsedTools.success) {\n          return c.json({ ok: false, error: { message: `tools ${parsedTools.error.issues[0]?.message ?? 'is invalid'}` } }, 400);\n        }\n        toolsPatch = parsedTools.data;\n      } else {\n        return c.json({ ok: false, error: { message: 'tools must be an object or null' } }, 400);\n      }\n    }\n    const modelsPatch = Object.hasOwn(body, 'models') ? parsePatchModels(body.models) : undefined;\n    if (isParseError(modelsPatch)) {\n      return c.json({ ok: false, error: { message: modelsPatch.error } }, 400);\n    }\n    let memoryPatch: Config['agents']['list'][number]['memory'] | undefined;\n    if (Object.hasOwn(body, 'memory')) {\n      const parsedMemory = MemoryPolicySchema.safeParse(body.memory);\n      if (!parsedMemory.success) {\n        return c.json({ ok: false, error: { message: `memory ${parsedMemory.error.issues[0]?.message ?? 'is invalid'}` } }, 400);\n      }\n      memoryPatch = parsedMemory.data;\n    }\n\n    const prep = prepareUpdateAgent(service.currentConfig as Config, id, {\n      workspace: typeof body.workspace === 'string' ? body.workspace : undefined,\n      ...(extendsPatch !== undefined ? { extends: extendsPatch } : {}),\n      ...(modelsPatch !== undefined ? { models: modelsPatch } : {}),\n      setDefault: body.setDefault === true,\n      ...(skillsPatch !== undefined ? { skills: skillsPatch } : {}),\n      ...(toolsPatch !== undefined ? { tools: toolsPatch } : {}),\n      ...(memoryPatch !== undefined ? { memory: memoryPatch } : {}),\n    });\n    if (prep.ok === false) {\n      return c.json({ ok: false, error: { message: prep.error } }, prep.status ?? 400);\n    }\n    const save = await service.saveConfig(prep.data.nextConfig);\n    if (!save.saved) {\n      return c.json({ ok: false, error: { message: save.error ?? 'save failed' } }, 500);\n    }\n    const locale = c.req.query('locale') || c.req.header('Accept-Language')?.split(',')[0]?.trim();\n    const agentsPayload = await listGatewayAgents(service.currentConfig as Config, { locale });\n    return c.json({ ok: true, payload: agentsPayload });\n  });\n\n  authenticated.delete('/api/agents/:id', strictRateLimitMiddleware, async (c) => {\n    const id = normalizeAgentId(c.req.param('id') ?? '');\n    const purge = c.req.query('purge') === '1' || c.req.query('purge') === 'true';\n    const prep = prepareDeleteAgent(service.currentConfig as Config, id);\n    if (prep.ok === false) {\n      return c.json({ ok: false, error: { message: prep.error } }, prep.status ?? 400);\n    }\n    const { nextConfig, agentId } = prep.data;\n    const save = await service.saveConfig(nextConfig);\n    if (!save.saved) {\n      return c.json({ ok: false, error: { message: save.error ?? 'save failed' } }, 500);\n    }\n    if (purge) {\n      await runAfterDeletePurge(service.currentConfig as Config, agentId);\n    }\n    const locale = c.req.query('locale') || c.req.header('Accept-Language')?.split(',')[0]?.trim();\n    const agentsPayload = await listGatewayAgents(service.currentConfig as Config, { locale });\n    return c.json({\n      ok: true,\n      payload: { agentId, purged: purge, agents: agentsPayload },\n    });\n  });\n\n  authenticated.get('/api/agents/:id/avatar', async (c) => {\n    const id = normalizeAgentId(c.req.param('id') ?? '');\n    const res = await readAgentAvatarFile(service.currentConfig as Config, id);\n    if (res.ok === false) {\n      return c.json({ ok: false, error: { message: res.error } }, res.status ?? 400);\n    }\n    return new Response(res.data.buffer, {\n      status: 200,\n      headers: {\n        'Content-Type': res.data.contentType,\n        'Cache-Control': 'private, max-age=3600',\n      },\n    });\n  });\n\n  authenticated.put('/api/agents/:id/avatar', strictRateLimitMiddleware, async (c) => {\n    const id = normalizeAgentId(c.req.param('id') ?? '');\n    let body: Record<string, unknown> = {};\n    try {\n      body = (await c.req.json()) as Record<string, unknown>;\n    } catch {\n      return c.json({ ok: false, error: { message: 'Invalid JSON' } }, 400);\n    }\n    const base64 = typeof body.base64 === 'string' ? body.base64 : '';\n    const mimeType = typeof body.mimeType === 'string' ? body.mimeType : '';\n    const res = await writeAgentAvatarFromBase64(service.currentConfig as Config, id, base64, mimeType);\n    if (res.ok === false) {\n      return c.json({ ok: false, error: { message: res.error } }, res.status ?? 400);\n    }\n    return c.json({ ok: true, payload: { agentId: res.data.agentId } });\n  });\n\n  authenticated.delete('/api/agents/:id/avatar', strictRateLimitMiddleware, async (c) => {\n    const id = normalizeAgentId(c.req.param('id') ?? '');\n    const res = await deleteAgentAvatarFile(service.currentConfig as Config, id);\n    if (res.ok === false) {\n      return c.json({ ok: false, error: { message: res.error } }, res.status ?? 400);\n    }\n    return c.json({ ok: true, payload: { agentId: res.data.agentId } });\n  });\n\n  authenticated.get('/api/agents/:id/files', async (c) => {\n    const id = normalizeAgentId(c.req.param('id') ?? '');\n    const res = await listAgentProfileFiles(service.currentConfig as Config, id);\n    if (res.ok === false) {\n      return c.json({ ok: false, error: { message: res.error } }, res.status ?? 400);\n    }\n    return c.json({ ok: true, payload: res.data });\n  });\n\n  authenticated.get('/api/agents/:id/files/:name', async (c) => {\n    const id = normalizeAgentId(c.req.param('id') ?? '');\n    const name = decodeURIComponent(c.req.param('name') ?? '');\n    const res = await readAgentProfileFile(service.currentConfig as Config, id, name);\n    if (res.ok === false) {\n      return c.json({ ok: false, error: { message: res.error } }, res.status ?? 400);\n    }\n    return c.json({ ok: true, payload: { agentId: res.data.agentId, name, content: res.data.content } });\n  });\n\n  authenticated.put('/api/agents/:id/files/:name', strictRateLimitMiddleware, async (c) => {\n    const id = normalizeAgentId(c.req.param('id') ?? '');\n    const name = decodeURIComponent(c.req.param('name') ?? '');\n    let content = '';\n    try {\n      const body = (await c.req.json()) as { content?: unknown };\n      content = typeof body.content === 'string' ? body.content : '';\n    } catch {\n      return c.json({ ok: false, error: { message: 'Invalid JSON' } }, 400);\n    }\n    const res = await writeAgentProfileFile(service.currentConfig as Config, id, name, content);\n    if (res.ok === false) {\n      return c.json({ ok: false, error: { message: res.error } }, res.status ?? 400);\n    }\n    return c.json({ ok: true, payload: { agentId: res.data.agentId, name } });\n  });\n\n  // GET /api/voice/models - Get available STT/TTS models\n  authenticated.get('/api/voice/models', (c) => {\n    const models = getVoiceModelsConfig();\n    return c.json({ ok: true, payload: { models } });\n  });\n\n  authenticated.get('/api/image/capabilities', async (c) => {\n    const config = service.currentConfig as Config;\n    const imageGenerationProviders = await resolveImageGenerationCapabilities(config);\n    const imageUnderstandingProviders = await resolveImageUnderstandingCapabilities(config);\n    return c.json({\n      ok: true,\n      payload: {\n        current: {\n          imageModel: null,\n          imageModelFallbacks: [],\n          imageGenerationModel: null,\n          imageGenerationModelFallbacks: [],\n          mediaMaxMb: null,\n        },\n        imageGeneration: { providers: imageGenerationProviders },\n        imageUnderstanding: { providers: imageUnderstandingProviders },\n      },\n    });\n  });\n\n  authenticated.post('/api/image/validate-model', strictRateLimitMiddleware, async (c) => {\n    let body: { modelRef?: unknown };\n    try {\n      body = (await c.req.json()) as { modelRef?: unknown };\n    } catch {\n      return c.json({ ok: false, error: 'Invalid JSON' }, 400);\n    }\n    const modelRef = body.modelRef;\n    if (!modelRef || typeof modelRef !== 'string') {\n      return c.json({ ok: false, error: 'modelRef is required' }, 400);\n    }\n\n    const parsed = parseModelRef(modelRef);\n    if (!parsed) {\n      return c.json({\n        ok: true,\n        payload: {\n          valid: false,\n          reason: 'invalid_format',\n          message: 'Model reference must be in \"provider/model\" format',\n        },\n      });\n    }\n\n    const configured = await isProviderConfigured(parsed.provider);\n    if (!configured) {\n      return c.json({\n        ok: true,\n        payload: {\n          valid: false,\n          reason: 'provider_not_configured',\n          message: `Provider \"${parsed.provider}\" is not configured. Set the API key first.`,\n          provider: parsed.provider,\n        },\n      });\n    }\n\n    try {\n      resolveModel(modelRef);\n    } catch {\n      return c.json({\n        ok: true,\n        payload: {\n          valid: false,\n          reason: 'model_not_found',\n          message: `Model not found in registry: ${modelRef}`,\n          provider: parsed.provider,\n          model: parsed.model,\n        },\n      });\n    }\n\n    return c.json({\n      ok: true,\n      payload: {\n        valid: true,\n        provider: parsed.provider,\n        model: parsed.model,\n      },\n    });\n  });\n\n}\n"],"mappings":";;;;;;;;eAE0F;aACE;gBAKvD;kBAC4B;AAuBjE,SAAS,kBAAkB,KAAsE;AAC/F,KAAI,QAAQ,KAAA,EACV;AAEF,KAAI,QAAQ,QAAQ,OAAO,QAAQ,YAAY,MAAM,QAAQ,IAAI,CAC/D,QAAO,EAAE,OAAO,kCAAkC;CAEpD,MAAM,eAAuC,EAAE;AAC/C,MAAK,MAAM,CAAC,MAAM,YAAY,OAAO,QAAQ,IAA+B,EAAE;AAC5E,MAAI,OAAO,YAAY,SACrB,QAAO,EAAE,OAAO,iBAAiB,KAAK,sBAAsB;AAE9D,eAAa,QAAQ;;AAEvB,QAAO;;AAGT,SAAS,aAAa,OAA4C;AAChE,QACE,OAAO,UAAU,YACjB,UAAU,QACV,WAAW,SACX,OAAQ,MAA4B,UAAU;;AAIlD,SAAS,qBAAqB,KAAmD;AAC/E,KAAI,QAAQ,QAAQ,OAAO,QAAQ,YAAY,MAAM,QAAQ,IAAI,CAC/D,QAAO,EAAE,OAAO,gCAAgC;CAElD,MAAM,OAAO;AACb,KAAI,OAAO,OAAO,MAAM,QAAQ,CAC9B,QAAO,EAAE,OAAO,mEAAmE;AAErF,KAAI,OAAO,OAAO,MAAM,eAAe,CACrC,QAAO,EAAE,OAAO,wDAAwD;AAE1E,KAAI,OAAO,OAAO,MAAM,cAAc,CACpC,QAAO,EAAE,OAAO,kDAAkD;AAEpE,KAAI,OAAO,OAAO,MAAM,WAAW,CACjC,QAAO,EAAE,OAAO,6CAA6C;AAE/D,KAAI,OAAO,OAAO,MAAM,OAAO,CAC7B,QAAO,EAAE,OAAO,4DAA4D;AAE9E,KAAI,OAAO,OAAO,MAAM,cAAc,CACpC,QAAO,EAAE,OAAO,mEAAmE;CAErF,MAAM,YAAY,OAAO,KAAK,cAAc,WAAW,KAAK,YAAY;CACxE,MAAM,SAAS,OAAO,OAAO,MAAM,SAAS,GACxC,kBAAkB,UAAU,KAAK,OAAO,GACxC,KAAA;AACJ,KAAI,UAAU,CAAC,OAAO,QACpB,QAAO,EAAE,OAAO,UAAU,OAAO,MAAM,OAAO,IAAI,WAAW,gBAAgB;CAE/E,MAAM,KAAK,OAAO,KAAK,OAAO,WAAW,KAAK,KAAK,KAAA;CACnD,MAAM,SAAS,OAAO,OAAO,MAAM,SAAS,GACxC,MAAM,QAAQ,KAAK,OAAO,GACxB,KAAK,OAAO,KAAK,MAAe,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC,OAAO,QAAQ,GACjE,OACF,KAAA;AACJ,KAAI,WAAW,KACb,QAAO,EAAE,OAAO,2BAA2B;CAE7C,MAAM,WAAW,OAAO,OAAO,MAAM,QAAQ,GAAG,KAAK,QAAQ,KAAA;CAC7D,IAAI;AACJ,KAAI,aAAa,KAAA,GAAW;AAC1B,MAAI,aAAa,QAAQ,OAAO,aAAa,YAAY,MAAM,QAAQ,SAAS,CAC9E,QAAO,EAAE,OAAO,2BAA2B;EAE7C,MAAM,cAAc,oBAAoB,UAAU,SAAS;AAC3D,MAAI,CAAC,YAAY,QACf,QAAO,EAAE,OAAO,SAAS,YAAY,MAAM,OAAO,IAAI,WAAW,gBAAgB;AAEnF,UAAQ,YAAY;;CAEtB,IAAI;AACJ,KAAI,OAAO,OAAO,MAAM,eAAe,EAAE;EACvC,MAAM,SAAS,kBAAkB,KAAK,aAAa;AACnD,MAAI,aAAa,OAAO,CACtB,QAAO;AAET,iBAAe;;AAEjB,KAAI,CAAC,eAAe,kBAAkB,OAAO,KAAK,cAAc,SAC9D,QAAO,EAAE,OAAO,wCAAwC;CAE1D,MAAM,YAAY,OAAO,KAAK,cAAc,WAAW,KAAK,YAAY,KAAA;AACxE,QAAO;EACL;EACA,GAAI,UAAU,OAAO,SAAS,KAAA,IAAY,EAAE,QAAQ,OAAO,MAAM,GAAG,EAAE;EACtE,GAAI,OAAO,KAAA,IAAY,EAAE,IAAI,GAAG,EAAE;EAClC,GAAI,WAAW,KAAA,IAAY,EAAE,QAAQ,GAAG,EAAE;EAC1C,GAAI,UAAU,KAAA,IAAY,EAAE,OAAO,GAAG,EAAE;EACxC,GAAI,iBAAiB,KAAA,IAAY,EAAE,cAAc,GAAG,EAAE;EACtD,GAAI,cAAc,KAAA,IAAY,EAAE,WAAW,GAAG,EAAE;EACjD;;AAQH,SAAS,iBAAiB,KAAkE;AAC1F,KAAI,QAAQ,KAAA,EACV;AAEF,KAAI,QAAQ,KACV,QAAO;AAET,KAAI,OAAO,QAAQ,YAAY,MAAM,QAAQ,IAAI,CAC/C,QAAO,EAAE,OAAO,oCAAoC;CAEtD,MAAM,OAAO;CACb,MAAM,MAAmB,EAAE;AAC3B,KAAI,OAAO,OAAO,MAAM,cAAc,CACpC,KAAI,cAAc,KAAK,gBAAgB,OAAO,OAAO,OAAO,KAAK,eAAe,GAAG,CAAC,MAAM;AAE5F,KAAI,OAAO,OAAO,MAAM,QAAQ,CAC9B,KAAI,KAAK,UAAU,KACjB,QAAO,EAAE,OAAO,kCAAkC;MAC7C;EACL,MAAM,SAAS,kBAAkB,UAAU,EAAE,OAAO,KAAK,OAAO,CAAC;AACjE,MAAI,CAAC,OAAO,QACV,QAAO,EAAE,OAAO,gBAAgB,OAAO,MAAM,OAAO,IAAI,WAAW,gBAAgB;AAErF,MAAI,QAAQ,OAAO,MAAM;;AAG7B,QAAO;;AAGT,SAAgB,qBAAqB,eAAqB,MAAoC;CAC5F,MAAM,EAAE,SAAS,8BAA8B;AAE/C,eAAc,IAAI,eAAe,OAAO,MAAM;EAC5C,MAAM,MAAM,QAAQ;EAEpB,MAAM,UAAU,MAAM,kBAAkB,KAAK,EAAE,QADhC,EAAE,IAAI,MAAM,SAAS,IAAI,EAAE,IAAI,OAAO,kBAAkB,EAAE,MAAM,IAAI,CAAC,IAAI,MAAM,EACvC,CAAC;AACxD,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM;GAAS,CAAC;GACpC;AAGF,eAAc,KAAK,eAAe,2BAA2B,OAAO,MAAM;EACxE,IAAI,OAAgC,EAAE;AACtC,MAAI;AACF,UAAQ,MAAM,EAAE,IAAI,MAAM;UACpB;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS,gBAAgB;IAAE,EAAE,IAAI;;EAEvE,MAAM,SAAS,qBAAqB,KAAK;AACzC,MAAI,WAAW,OACb,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,OAAO,OAAO;GAAE,EAAE,IAAI;EAErE,MAAM,OAAO,mBAAmB,QAAQ,eAAyB,OAAO;AACxE,MAAI,KAAK,OAAO,MACd,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,KAAK,OAAO;GAAE,EAAE,KAAK,UAAU,IAAI;EAElF,MAAM,EAAE,YAAY,YAAY,KAAK;EACrC,MAAM,OAAO,MAAM,QAAQ,WAAW,WAAW;AACjD,MAAI,CAAC,KAAK,MACR,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,KAAK,SAAS,eAAe;GAAE,EAAE,IAAI;EAEpF,MAAM,YAAY,MAAM,wBAAwB,QAAQ,eAAyB,SAAS;GACxF,GAAI,OAAO,iBAAiB,KAAA,IAAY,EAAE,cAAc,OAAO,cAAc,GAAG,EAAE;GAClF,GAAI,OAAO,YAAY,EAAE,WAAW,OAAO,WAAW,GAAG,EAAE;GAC5D,CAAC;AACF,MAAI,UAAU,OAAO,MACnB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,UAAU,OAAO;GAAE,EAAE,UAAU,UAAU,IAAI;EAE5F,MAAM,SAAS,EAAE,IAAI,MAAM,SAAS,IAAI,EAAE,IAAI,OAAO,kBAAkB,EAAE,MAAM,IAAI,CAAC,IAAI,MAAM;EAC9F,MAAM,gBAAgB,MAAM,kBAAkB,QAAQ,eAAyB,EAAE,QAAQ,CAAC;AAC1F,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP;IACA,QAAQ;IACT;GACF,CAAC;GACF;AAEF,eAAc,IAAI,sCAAsC,OAAO,MAAM;EACnE,MAAM,KAAK,iBAAiB,EAAE,IAAI,MAAM,KAAK,IAAI,GAAG;EACpD,MAAM,MAAM,iCAAiC,QAAQ,eAAyB,GAAG;AACjF,MAAI,IAAI,OAAO,MACb,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,IAAI,OAAO;GAAE,EAAE,IAAI,UAAU,IAAI;AAEhF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,IAAI;GAAM,CAAC;GAC9C;AAEF,eAAc,MAAM,mBAAmB,2BAA2B,OAAO,MAAM;EAC7E,MAAM,KAAK,iBAAiB,EAAE,IAAI,MAAM,KAAK,IAAI,GAAG;EACpD,IAAI,OAAgC,EAAE;AACtC,MAAI;AACF,UAAQ,MAAM,EAAE,IAAI,MAAM;UACpB;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS,gBAAgB;IAAE,EAAE,IAAI;;AAEvE,MAAI,OAAO,OAAO,MAAM,QAAQ,CAC9B,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,mEAAmE;GAAE,EAAE,IAAI;AAE1H,MAAI,OAAO,OAAO,MAAM,cAAc,CACpC,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,kDAAkD;GAAE,EAAE,IAAI;AAEzG,MAAI,OAAO,OAAO,MAAM,eAAe,CACrC,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,wDAAwD;GAAE,EAAE,IAAI;AAE/G,MAAI,OAAO,OAAO,MAAM,WAAW,CACjC,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,6CAA6C;GAAE,EAAE,IAAI;AAEpG,MAAI,OAAO,OAAO,MAAM,OAAO,CAC7B,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,2CAA2C;GAAE,EAAE,IAAI;AAElG,MAAI,OAAO,OAAO,MAAM,cAAc,CACpC,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,kDAAkD;GAAE,EAAE,IAAI;EAEzG,MAAM,cACJ,KAAK,WAAW,OACZ,OACA,MAAM,QAAQ,KAAK,OAAO,GACxB,KAAK,OAAO,KAAK,MAAe,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC,OAAO,QAAQ,GACjE,KAAA;EACR,MAAM,eAAe,OAAO,OAAO,MAAM,UAAU,GAC/C,MAAM,QAAQ,KAAK,QAAQ,GACzB,KAAK,QAAQ,KAAK,MAAe,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC,OAAO,QAAQ,GAClE,KAAA,IACF,KAAA;AACJ,MAAI,OAAO,OAAO,MAAM,UAAU,IAAI,iBAAiB,KAAA,EACrD,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,4BAA4B;GAAE,EAAE,IAAI;EAEnF,IAAI;AACJ,MAAI,OAAO,OAAO,MAAM,QAAQ,CAC9B,KAAI,KAAK,UAAU,KACjB,cAAa;WACJ,OAAO,KAAK,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK,MAAM,EAAE;GACvE,MAAM,cAAc,oBAAoB,UAAU,KAAK,MAAM;AAC7D,OAAI,CAAC,YAAY,QACf,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS,SAAS,YAAY,MAAM,OAAO,IAAI,WAAW,gBAAgB;IAAE,EAAE,IAAI;AAExH,gBAAa,YAAY;QAEzB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,mCAAmC;GAAE,EAAE,IAAI;EAG5F,MAAM,cAAc,OAAO,OAAO,MAAM,SAAS,GAAG,iBAAiB,KAAK,OAAO,GAAG,KAAA;AACpF,MAAI,aAAa,YAAY,CAC3B,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,YAAY,OAAO;GAAE,EAAE,IAAI;EAE1E,IAAI;AACJ,MAAI,OAAO,OAAO,MAAM,SAAS,EAAE;GACjC,MAAM,eAAe,mBAAmB,UAAU,KAAK,OAAO;AAC9D,OAAI,CAAC,aAAa,QAChB,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS,UAAU,aAAa,MAAM,OAAO,IAAI,WAAW,gBAAgB;IAAE,EAAE,IAAI;AAE1H,iBAAc,aAAa;;EAG7B,MAAM,OAAO,mBAAmB,QAAQ,eAAyB,IAAI;GACnE,WAAW,OAAO,KAAK,cAAc,WAAW,KAAK,YAAY,KAAA;GACjE,GAAI,iBAAiB,KAAA,IAAY,EAAE,SAAS,cAAc,GAAG,EAAE;GAC/D,GAAI,gBAAgB,KAAA,IAAY,EAAE,QAAQ,aAAa,GAAG,EAAE;GAC5D,YAAY,KAAK,eAAe;GAChC,GAAI,gBAAgB,KAAA,IAAY,EAAE,QAAQ,aAAa,GAAG,EAAE;GAC5D,GAAI,eAAe,KAAA,IAAY,EAAE,OAAO,YAAY,GAAG,EAAE;GACzD,GAAI,gBAAgB,KAAA,IAAY,EAAE,QAAQ,aAAa,GAAG,EAAE;GAC7D,CAAC;AACF,MAAI,KAAK,OAAO,MACd,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,KAAK,OAAO;GAAE,EAAE,KAAK,UAAU,IAAI;EAElF,MAAM,OAAO,MAAM,QAAQ,WAAW,KAAK,KAAK,WAAW;AAC3D,MAAI,CAAC,KAAK,MACR,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,KAAK,SAAS,eAAe;GAAE,EAAE,IAAI;EAEpF,MAAM,SAAS,EAAE,IAAI,MAAM,SAAS,IAAI,EAAE,IAAI,OAAO,kBAAkB,EAAE,MAAM,IAAI,CAAC,IAAI,MAAM;EAC9F,MAAM,gBAAgB,MAAM,kBAAkB,QAAQ,eAAyB,EAAE,QAAQ,CAAC;AAC1F,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;GAAe,CAAC;GACnD;AAEF,eAAc,OAAO,mBAAmB,2BAA2B,OAAO,MAAM;EAC9E,MAAM,KAAK,iBAAiB,EAAE,IAAI,MAAM,KAAK,IAAI,GAAG;EACpD,MAAM,QAAQ,EAAE,IAAI,MAAM,QAAQ,KAAK,OAAO,EAAE,IAAI,MAAM,QAAQ,KAAK;EACvE,MAAM,OAAO,mBAAmB,QAAQ,eAAyB,GAAG;AACpE,MAAI,KAAK,OAAO,MACd,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,KAAK,OAAO;GAAE,EAAE,KAAK,UAAU,IAAI;EAElF,MAAM,EAAE,YAAY,YAAY,KAAK;EACrC,MAAM,OAAO,MAAM,QAAQ,WAAW,WAAW;AACjD,MAAI,CAAC,KAAK,MACR,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,KAAK,SAAS,eAAe;GAAE,EAAE,IAAI;AAEpF,MAAI,MACF,OAAM,oBAAoB,QAAQ,eAAyB,QAAQ;EAErE,MAAM,SAAS,EAAE,IAAI,MAAM,SAAS,IAAI,EAAE,IAAI,OAAO,kBAAkB,EAAE,MAAM,IAAI,CAAC,IAAI,MAAM;EAC9F,MAAM,gBAAgB,MAAM,kBAAkB,QAAQ,eAAyB,EAAE,QAAQ,CAAC;AAC1F,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IAAE;IAAS,QAAQ;IAAO,QAAQ;IAAe;GAC3D,CAAC;GACF;AAEF,eAAc,IAAI,0BAA0B,OAAO,MAAM;EACvD,MAAM,KAAK,iBAAiB,EAAE,IAAI,MAAM,KAAK,IAAI,GAAG;EACpD,MAAM,MAAM,MAAM,oBAAoB,QAAQ,eAAyB,GAAG;AAC1E,MAAI,IAAI,OAAO,MACb,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,IAAI,OAAO;GAAE,EAAE,IAAI,UAAU,IAAI;AAEhF,SAAO,IAAI,SAAS,IAAI,KAAK,QAAQ;GACnC,QAAQ;GACR,SAAS;IACP,gBAAgB,IAAI,KAAK;IACzB,iBAAiB;IAClB;GACF,CAAC;GACF;AAEF,eAAc,IAAI,0BAA0B,2BAA2B,OAAO,MAAM;EAClF,MAAM,KAAK,iBAAiB,EAAE,IAAI,MAAM,KAAK,IAAI,GAAG;EACpD,IAAI,OAAgC,EAAE;AACtC,MAAI;AACF,UAAQ,MAAM,EAAE,IAAI,MAAM;UACpB;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS,gBAAgB;IAAE,EAAE,IAAI;;EAEvE,MAAM,SAAS,OAAO,KAAK,WAAW,WAAW,KAAK,SAAS;EAC/D,MAAM,WAAW,OAAO,KAAK,aAAa,WAAW,KAAK,WAAW;EACrE,MAAM,MAAM,MAAM,2BAA2B,QAAQ,eAAyB,IAAI,QAAQ,SAAS;AACnG,MAAI,IAAI,OAAO,MACb,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,IAAI,OAAO;GAAE,EAAE,IAAI,UAAU,IAAI;AAEhF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,SAAS,IAAI,KAAK,SAAS;GAAE,CAAC;GACnE;AAEF,eAAc,OAAO,0BAA0B,2BAA2B,OAAO,MAAM;EACrF,MAAM,KAAK,iBAAiB,EAAE,IAAI,MAAM,KAAK,IAAI,GAAG;EACpD,MAAM,MAAM,MAAM,sBAAsB,QAAQ,eAAyB,GAAG;AAC5E,MAAI,IAAI,OAAO,MACb,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,IAAI,OAAO;GAAE,EAAE,IAAI,UAAU,IAAI;AAEhF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,SAAS,IAAI,KAAK,SAAS;GAAE,CAAC;GACnE;AAEF,eAAc,IAAI,yBAAyB,OAAO,MAAM;EACtD,MAAM,KAAK,iBAAiB,EAAE,IAAI,MAAM,KAAK,IAAI,GAAG;EACpD,MAAM,MAAM,MAAM,sBAAsB,QAAQ,eAAyB,GAAG;AAC5E,MAAI,IAAI,OAAO,MACb,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,IAAI,OAAO;GAAE,EAAE,IAAI,UAAU,IAAI;AAEhF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,IAAI;GAAM,CAAC;GAC9C;AAEF,eAAc,IAAI,+BAA+B,OAAO,MAAM;EAC5D,MAAM,KAAK,iBAAiB,EAAE,IAAI,MAAM,KAAK,IAAI,GAAG;EACpD,MAAM,OAAO,mBAAmB,EAAE,IAAI,MAAM,OAAO,IAAI,GAAG;EAC1D,MAAM,MAAM,MAAM,qBAAqB,QAAQ,eAAyB,IAAI,KAAK;AACjF,MAAI,IAAI,OAAO,MACb,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,IAAI,OAAO;GAAE,EAAE,IAAI,UAAU,IAAI;AAEhF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;IAAE,SAAS,IAAI,KAAK;IAAS;IAAM,SAAS,IAAI,KAAK;IAAS;GAAE,CAAC;GACpG;AAEF,eAAc,IAAI,+BAA+B,2BAA2B,OAAO,MAAM;EACvF,MAAM,KAAK,iBAAiB,EAAE,IAAI,MAAM,KAAK,IAAI,GAAG;EACpD,MAAM,OAAO,mBAAmB,EAAE,IAAI,MAAM,OAAO,IAAI,GAAG;EAC1D,IAAI,UAAU;AACd,MAAI;GACF,MAAM,OAAQ,MAAM,EAAE,IAAI,MAAM;AAChC,aAAU,OAAO,KAAK,YAAY,WAAW,KAAK,UAAU;UACtD;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS,gBAAgB;IAAE,EAAE,IAAI;;EAEvE,MAAM,MAAM,MAAM,sBAAsB,QAAQ,eAAyB,IAAI,MAAM,QAAQ;AAC3F,MAAI,IAAI,OAAO,MACb,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,IAAI,OAAO;GAAE,EAAE,IAAI,UAAU,IAAI;AAEhF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;IAAE,SAAS,IAAI,KAAK;IAAS;IAAM;GAAE,CAAC;GACzE;AAGF,eAAc,IAAI,sBAAsB,MAAM;EAC5C,MAAM,SAAS,sBAAsB;AACrC,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,QAAQ;GAAE,CAAC;GAChD;AAEF,eAAc,IAAI,2BAA2B,OAAO,MAAM;EACxD,MAAM,SAAS,QAAQ;EACvB,MAAM,2BAA2B,MAAM,mCAAmC,OAAO;EACjF,MAAM,8BAA8B,MAAM,sCAAsC,OAAO;AACvF,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,SAAS;KACP,YAAY;KACZ,qBAAqB,EAAE;KACvB,sBAAsB;KACtB,+BAA+B,EAAE;KACjC,YAAY;KACb;IACD,iBAAiB,EAAE,WAAW,0BAA0B;IACxD,oBAAoB,EAAE,WAAW,6BAA6B;IAC/D;GACF,CAAC;GACF;AAEF,eAAc,KAAK,6BAA6B,2BAA2B,OAAO,MAAM;EACtF,IAAI;AACJ,MAAI;AACF,UAAQ,MAAM,EAAE,IAAI,MAAM;UACpB;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAAgB,EAAE,IAAI;;EAE1D,MAAM,WAAW,KAAK;AACtB,MAAI,CAAC,YAAY,OAAO,aAAa,SACnC,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAwB,EAAE,IAAI;EAGlE,MAAM,SAAS,cAAc,SAAS;AACtC,MAAI,CAAC,OACH,QAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,OAAO;IACP,QAAQ;IACR,SAAS;IACV;GACF,CAAC;AAIJ,MAAI,CAAC,MADoB,qBAAqB,OAAO,SAAS,CAE5D,QAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,OAAO;IACP,QAAQ;IACR,SAAS,aAAa,OAAO,SAAS;IACtC,UAAU,OAAO;IAClB;GACF,CAAC;AAGJ,MAAI;AACF,gBAAa,SAAS;UAChB;AACN,UAAO,EAAE,KAAK;IACZ,IAAI;IACJ,SAAS;KACP,OAAO;KACP,QAAQ;KACR,SAAS,gCAAgC;KACzC,UAAU,OAAO;KACjB,OAAO,OAAO;KACf;IACF,CAAC;;AAGJ,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,OAAO;IACP,UAAU,OAAO;IACjB,OAAO,OAAO;IACf;GACF,CAAC;GACF"}
+{"version":3,"file":"agents.js","names":[],"sources":["../../../../../src/gateway/hono/routes/agents.ts"],"sourcesContent":["import type { Hono } from 'hono';\n\nimport { AgentModelsSchema, type Config, parseModelRef } from '../../../config/schema.js';\nimport { MemoryPolicySchema, ToolPolicySetSchema } from '../../../agent-manifest/schema.js';\nimport { getVoiceModelsConfig } from '../../../config/voice.js';\nimport {\n  isProviderConfigured,\n  resolveModel,\n} from '../../../providers/index.js';\nimport { normalizeAgentId } from '../../../agent/agent-scope.js';\nimport {\n  deleteAgentAvatarFile,\n  finalizeCreateAgentDirs,\n  getGatewayAgentEffectiveManifest,\n  listAgentProfileFiles,\n  listGatewayAgents,\n  prepareCreateAgent,\n  prepareDeleteAgent,\n  prepareUpdateAgent,\n  readAgentAvatarFile,\n  readAgentProfileFile,\n  readUserProfileFile,\n  runAfterDeletePurge,\n  writeAgentAvatarFromBase64,\n  writeAgentProfileFile,\n  writeUserProfileFile,\n  type CreateAgentBody,\n} from '../../agents-admin.js';\nimport {\n  resolveImageGenerationCapabilities,\n  resolveImageUnderstandingCapabilities,\n} from '../../image-capabilities.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\n\nfunction parseProfileFiles(raw: unknown): Record<string, string> | undefined | { error: string } {\n  if (raw === undefined) {\n    return undefined;\n  }\n  if (raw === null || typeof raw !== 'object' || Array.isArray(raw)) {\n    return { error: 'profileFiles must be an object' };\n  }\n  const profileFiles: Record<string, string> = {};\n  for (const [name, content] of Object.entries(raw as Record<string, unknown>)) {\n    if (typeof content !== 'string') {\n      return { error: `profileFiles[\"${name}\"] must be a string` };\n    }\n    profileFiles[name] = content;\n  }\n  return profileFiles;\n}\n\nfunction isParseError(value: unknown): value is { error: string } {\n  return (\n    typeof value === 'object' &&\n    value !== null &&\n    'error' in value &&\n    typeof (value as { error: string }).error === 'string'\n  );\n}\n\nfunction parseCreateAgentBody(raw: unknown): CreateAgentBody | { error: string } {\n  if (raw === null || typeof raw !== 'object' || Array.isArray(raw)) {\n    return { error: 'each agent must be an object' };\n  }\n  const body = raw as Record<string, unknown>;\n  if (Object.hasOwn(body, 'model')) {\n    return { error: 'model is not supported; use models.defaultRole and models.roles' };\n  }\n  if (Object.hasOwn(body, 'toolsDisable')) {\n    return { error: 'toolsDisable was removed; use tools.builtin policies' };\n  }\n  if (Object.hasOwn(body, 'typedModels')) {\n    return { error: 'typedModels is not supported; use models.roles' };\n  }\n  if (Object.hasOwn(body, 'agentDir')) {\n    return { error: 'agentDir was removed from agent manifests' };\n  }\n  if (Object.hasOwn(body, 'name')) {\n    return { error: 'name is not supported; write IDENTITY.md in profileFiles' };\n  }\n  if (Object.hasOwn(body, 'description')) {\n    return { error: 'description is not supported; write IDENTITY.md in profileFiles' };\n  }\n  const workspace = typeof body.workspace === 'string' ? body.workspace : '';\n  const models = Object.hasOwn(body, 'models')\n    ? AgentModelsSchema.safeParse(body.models)\n    : undefined;\n  if (models && !models.success) {\n    return { error: `models ${models.error.issues[0]?.message ?? 'is invalid'}` };\n  }\n  const id = typeof body.id === 'string' ? body.id : undefined;\n  const skills = Object.hasOwn(body, 'skills')\n    ? Array.isArray(body.skills)\n      ? body.skills.map((x: unknown) => String(x).trim()).filter(Boolean)\n      : null\n    : undefined;\n  if (skills === null) {\n    return { error: 'skills must be an array' };\n  }\n  const toolsRaw = Object.hasOwn(body, 'tools') ? body.tools : undefined;\n  let tools: CreateAgentBody['tools'] | undefined;\n  if (toolsRaw !== undefined) {\n    if (toolsRaw === null || typeof toolsRaw !== 'object' || Array.isArray(toolsRaw)) {\n      return { error: 'tools must be an object' };\n    }\n    const parsedTools = ToolPolicySetSchema.safeParse(toolsRaw);\n    if (!parsedTools.success) {\n      return { error: `tools ${parsedTools.error.issues[0]?.message ?? 'is invalid'}` };\n    }\n    tools = parsedTools.data;\n  }\n  let profileFiles: Record<string, string> | undefined;\n  if (Object.hasOwn(body, 'profileFiles')) {\n    const parsed = parseProfileFiles(body.profileFiles);\n    if (isParseError(parsed)) {\n      return parsed;\n    }\n    profileFiles = parsed;\n  }\n  if (!profileFiles?.['IDENTITY.md'] && typeof body.cloneFrom !== 'string') {\n    return { error: 'profileFiles.IDENTITY.md is required' };\n  }\n  const cloneFrom = typeof body.cloneFrom === 'string' ? body.cloneFrom : undefined;\n  return {\n    workspace,\n    ...(models && models.data !== undefined ? { models: models.data } : {}),\n    ...(id !== undefined ? { id } : {}),\n    ...(skills !== undefined ? { skills } : {}),\n    ...(tools !== undefined ? { tools } : {}),\n    ...(profileFiles !== undefined ? { profileFiles } : {}),\n    ...(cloneFrom !== undefined ? { cloneFrom } : {}),\n  };\n}\n\ntype PatchModels = {\n  defaultRole?: string | null;\n  roles?: Record<string, { model: string; fallbacks?: string[]; description?: string }>;\n};\n\nfunction parsePatchModels(raw: unknown): PatchModels | null | undefined | { error: string } {\n  if (raw === undefined) {\n    return undefined;\n  }\n  if (raw === null) {\n    return null;\n  }\n  if (typeof raw !== 'object' || Array.isArray(raw)) {\n    return { error: 'models must be an object or null' };\n  }\n  const body = raw as Record<string, unknown>;\n  const out: PatchModels = {};\n  if (Object.hasOwn(body, 'defaultRole')) {\n    out.defaultRole = body.defaultRole === null ? null : String(body.defaultRole ?? '').trim();\n  }\n  if (Object.hasOwn(body, 'roles')) {\n    if (body.roles === null) {\n      return { error: 'models.roles must be an object' };\n    } else {\n      const parsed = AgentModelsSchema.safeParse({ roles: body.roles });\n      if (!parsed.success) {\n        return { error: `models.roles ${parsed.error.issues[0]?.message ?? 'is invalid'}` };\n      }\n      out.roles = parsed.data?.roles;\n    }\n  }\n  return out;\n}\n\nexport function registerAgentsRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  const { service, strictRateLimitMiddleware } = deps;\n\n  authenticated.get('/api/agents', async (c) => {\n    const cfg = service.currentConfig as Config;\n    const locale = c.req.query('locale') || c.req.header('Accept-Language')?.split(',')[0]?.trim();\n    const payload = await listGatewayAgents(cfg, { locale });\n    return c.json({ ok: true, payload });\n  });\n\n  authenticated.get('/api/user-profile', async (c) => {\n    const res = await readUserProfileFile();\n    if (res.ok === false) {\n      return c.json({ ok: false, error: { message: res.error } }, res.status ?? 400);\n    }\n    return c.json({ ok: true, payload: res.data });\n  });\n\n  authenticated.put('/api/user-profile', strictRateLimitMiddleware, async (c) => {\n    let content = '';\n    try {\n      const body = (await c.req.json()) as { content?: unknown };\n      content = typeof body.content === 'string' ? body.content : '';\n    } catch {\n      return c.json({ ok: false, error: { message: 'Invalid JSON' } }, 400);\n    }\n    const res = await writeUserProfileFile(content);\n    if (res.ok === false) {\n      return c.json({ ok: false, error: { message: res.error } }, res.status ?? 400);\n    }\n    return c.json({ ok: true, payload: res.data });\n  });\n\n  authenticated.post('/api/agents', strictRateLimitMiddleware, async (c) => {\n    let body: Record<string, unknown> = {};\n    try {\n      body = (await c.req.json()) as Record<string, unknown>;\n    } catch {\n      return c.json({ ok: false, error: { message: 'Invalid JSON' } }, 400);\n    }\n    const parsed = parseCreateAgentBody(body);\n    if ('error' in parsed) {\n      return c.json({ ok: false, error: { message: parsed.error } }, 400);\n    }\n    const prep = prepareCreateAgent(service.currentConfig as Config, parsed);\n    if (prep.ok === false) {\n      return c.json({ ok: false, error: { message: prep.error } }, prep.status ?? 400);\n    }\n    const { nextConfig, agentId } = prep.data;\n    const save = await service.saveConfig(nextConfig);\n    if (!save.saved) {\n      return c.json({ ok: false, error: { message: save.error ?? 'save failed' } }, 500);\n    }\n    const finalized = await finalizeCreateAgentDirs(service.currentConfig as Config, agentId, {\n      ...(parsed.profileFiles !== undefined ? { profileFiles: parsed.profileFiles } : {}),\n      ...(parsed.cloneFrom ? { cloneFrom: parsed.cloneFrom } : {}),\n    });\n    if (finalized.ok === false) {\n      return c.json({ ok: false, error: { message: finalized.error } }, finalized.status ?? 400);\n    }\n    const locale = c.req.query('locale') || c.req.header('Accept-Language')?.split(',')[0]?.trim();\n    const agentsPayload = await listGatewayAgents(service.currentConfig as Config, { locale });\n    return c.json({\n      ok: true,\n      payload: {\n        agentId,\n        agents: agentsPayload,\n      },\n    });\n  });\n\n  authenticated.get('/api/agents/:id/effective-manifest', async (c) => {\n    const id = normalizeAgentId(c.req.param('id') ?? '');\n    const res = getGatewayAgentEffectiveManifest(service.currentConfig as Config, id);\n    if (res.ok === false) {\n      return c.json({ ok: false, error: { message: res.error } }, res.status ?? 400);\n    }\n    return c.json({ ok: true, payload: res.data });\n  });\n\n  authenticated.patch('/api/agents/:id', strictRateLimitMiddleware, async (c) => {\n    const id = normalizeAgentId(c.req.param('id') ?? '');\n    let body: Record<string, unknown> = {};\n    try {\n      body = (await c.req.json()) as Record<string, unknown>;\n    } catch {\n      return c.json({ ok: false, error: { message: 'Invalid JSON' } }, 400);\n    }\n    if (Object.hasOwn(body, 'model')) {\n      return c.json({ ok: false, error: { message: 'model is not supported; use models.defaultRole and models.roles' } }, 400);\n    }\n    if (Object.hasOwn(body, 'typedModels')) {\n      return c.json({ ok: false, error: { message: 'typedModels is not supported; use models.roles' } }, 400);\n    }\n    if (Object.hasOwn(body, 'toolsDisable')) {\n      return c.json({ ok: false, error: { message: 'toolsDisable was removed; use tools.builtin policies' } }, 400);\n    }\n    if (Object.hasOwn(body, 'agentDir')) {\n      return c.json({ ok: false, error: { message: 'agentDir was removed from agent manifests' } }, 400);\n    }\n    if (Object.hasOwn(body, 'name')) {\n      return c.json({ ok: false, error: { message: 'name is not supported; edit IDENTITY.md' } }, 400);\n    }\n    if (Object.hasOwn(body, 'description')) {\n      return c.json({ ok: false, error: { message: 'description is not supported; edit IDENTITY.md' } }, 400);\n    }\n    const skillsPatch =\n      body.skills === null\n        ? null\n        : Array.isArray(body.skills)\n          ? body.skills.map((x: unknown) => String(x).trim()).filter(Boolean)\n          : undefined;\n    const extendsPatch = Object.hasOwn(body, 'extends')\n      ? Array.isArray(body.extends)\n        ? body.extends.map((x: unknown) => String(x).trim()).filter(Boolean)\n        : undefined\n      : undefined;\n    if (Object.hasOwn(body, 'extends') && extendsPatch === undefined) {\n      return c.json({ ok: false, error: { message: 'extends must be an array' } }, 400);\n    }\n    let toolsPatch: CreateAgentBody['tools'] | null | undefined;\n    if (Object.hasOwn(body, 'tools')) {\n      if (body.tools === null) {\n        toolsPatch = null;\n      } else if (typeof body.tools === 'object' && !Array.isArray(body.tools)) {\n        const parsedTools = ToolPolicySetSchema.safeParse(body.tools);\n        if (!parsedTools.success) {\n          return c.json({ ok: false, error: { message: `tools ${parsedTools.error.issues[0]?.message ?? 'is invalid'}` } }, 400);\n        }\n        toolsPatch = parsedTools.data;\n      } else {\n        return c.json({ ok: false, error: { message: 'tools must be an object or null' } }, 400);\n      }\n    }\n    const modelsPatch = Object.hasOwn(body, 'models') ? parsePatchModels(body.models) : undefined;\n    if (isParseError(modelsPatch)) {\n      return c.json({ ok: false, error: { message: modelsPatch.error } }, 400);\n    }\n    let memoryPatch: Config['agents']['list'][number]['memory'] | undefined;\n    if (Object.hasOwn(body, 'memory')) {\n      const parsedMemory = MemoryPolicySchema.safeParse(body.memory);\n      if (!parsedMemory.success) {\n        return c.json({ ok: false, error: { message: `memory ${parsedMemory.error.issues[0]?.message ?? 'is invalid'}` } }, 400);\n      }\n      memoryPatch = parsedMemory.data;\n    }\n\n    const prep = prepareUpdateAgent(service.currentConfig as Config, id, {\n      workspace: typeof body.workspace === 'string' ? body.workspace : undefined,\n      ...(extendsPatch !== undefined ? { extends: extendsPatch } : {}),\n      ...(modelsPatch !== undefined ? { models: modelsPatch } : {}),\n      setDefault: body.setDefault === true,\n      ...(skillsPatch !== undefined ? { skills: skillsPatch } : {}),\n      ...(toolsPatch !== undefined ? { tools: toolsPatch } : {}),\n      ...(memoryPatch !== undefined ? { memory: memoryPatch } : {}),\n    });\n    if (prep.ok === false) {\n      return c.json({ ok: false, error: { message: prep.error } }, prep.status ?? 400);\n    }\n    const save = await service.saveConfig(prep.data.nextConfig);\n    if (!save.saved) {\n      return c.json({ ok: false, error: { message: save.error ?? 'save failed' } }, 500);\n    }\n    const locale = c.req.query('locale') || c.req.header('Accept-Language')?.split(',')[0]?.trim();\n    const agentsPayload = await listGatewayAgents(service.currentConfig as Config, { locale });\n    return c.json({ ok: true, payload: agentsPayload });\n  });\n\n  authenticated.delete('/api/agents/:id', strictRateLimitMiddleware, async (c) => {\n    const id = normalizeAgentId(c.req.param('id') ?? '');\n    const purge = c.req.query('purge') === '1' || c.req.query('purge') === 'true';\n    const prep = prepareDeleteAgent(service.currentConfig as Config, id);\n    if (prep.ok === false) {\n      return c.json({ ok: false, error: { message: prep.error } }, prep.status ?? 400);\n    }\n    const { nextConfig, agentId } = prep.data;\n    const save = await service.saveConfig(nextConfig);\n    if (!save.saved) {\n      return c.json({ ok: false, error: { message: save.error ?? 'save failed' } }, 500);\n    }\n    if (purge) {\n      await runAfterDeletePurge(service.currentConfig as Config, agentId);\n    }\n    const locale = c.req.query('locale') || c.req.header('Accept-Language')?.split(',')[0]?.trim();\n    const agentsPayload = await listGatewayAgents(service.currentConfig as Config, { locale });\n    return c.json({\n      ok: true,\n      payload: { agentId, purged: purge, agents: agentsPayload },\n    });\n  });\n\n  authenticated.get('/api/agents/:id/avatar', async (c) => {\n    const id = normalizeAgentId(c.req.param('id') ?? '');\n    const res = await readAgentAvatarFile(service.currentConfig as Config, id);\n    if (res.ok === false) {\n      return c.json({ ok: false, error: { message: res.error } }, res.status ?? 400);\n    }\n    return new Response(res.data.buffer, {\n      status: 200,\n      headers: {\n        'Content-Type': res.data.contentType,\n        'Cache-Control': 'private, max-age=3600',\n      },\n    });\n  });\n\n  authenticated.put('/api/agents/:id/avatar', strictRateLimitMiddleware, async (c) => {\n    const id = normalizeAgentId(c.req.param('id') ?? '');\n    let body: Record<string, unknown> = {};\n    try {\n      body = (await c.req.json()) as Record<string, unknown>;\n    } catch {\n      return c.json({ ok: false, error: { message: 'Invalid JSON' } }, 400);\n    }\n    const base64 = typeof body.base64 === 'string' ? body.base64 : '';\n    const mimeType = typeof body.mimeType === 'string' ? body.mimeType : '';\n    const res = await writeAgentAvatarFromBase64(service.currentConfig as Config, id, base64, mimeType);\n    if (res.ok === false) {\n      return c.json({ ok: false, error: { message: res.error } }, res.status ?? 400);\n    }\n    return c.json({ ok: true, payload: { agentId: res.data.agentId } });\n  });\n\n  authenticated.delete('/api/agents/:id/avatar', strictRateLimitMiddleware, async (c) => {\n    const id = normalizeAgentId(c.req.param('id') ?? '');\n    const res = await deleteAgentAvatarFile(service.currentConfig as Config, id);\n    if (res.ok === false) {\n      return c.json({ ok: false, error: { message: res.error } }, res.status ?? 400);\n    }\n    return c.json({ ok: true, payload: { agentId: res.data.agentId } });\n  });\n\n  authenticated.get('/api/agents/:id/files', async (c) => {\n    const id = normalizeAgentId(c.req.param('id') ?? '');\n    const res = await listAgentProfileFiles(service.currentConfig as Config, id);\n    if (res.ok === false) {\n      return c.json({ ok: false, error: { message: res.error } }, res.status ?? 400);\n    }\n    return c.json({ ok: true, payload: res.data });\n  });\n\n  authenticated.get('/api/agents/:id/files/:name', async (c) => {\n    const id = normalizeAgentId(c.req.param('id') ?? '');\n    const name = decodeURIComponent(c.req.param('name') ?? '');\n    const res = await readAgentProfileFile(service.currentConfig as Config, id, name);\n    if (res.ok === false) {\n      return c.json({ ok: false, error: { message: res.error } }, res.status ?? 400);\n    }\n    return c.json({ ok: true, payload: { agentId: res.data.agentId, name, content: res.data.content } });\n  });\n\n  authenticated.put('/api/agents/:id/files/:name', strictRateLimitMiddleware, async (c) => {\n    const id = normalizeAgentId(c.req.param('id') ?? '');\n    const name = decodeURIComponent(c.req.param('name') ?? '');\n    let content = '';\n    try {\n      const body = (await c.req.json()) as { content?: unknown };\n      content = typeof body.content === 'string' ? body.content : '';\n    } catch {\n      return c.json({ ok: false, error: { message: 'Invalid JSON' } }, 400);\n    }\n    const res = await writeAgentProfileFile(service.currentConfig as Config, id, name, content);\n    if (res.ok === false) {\n      return c.json({ ok: false, error: { message: res.error } }, res.status ?? 400);\n    }\n    return c.json({ ok: true, payload: { agentId: res.data.agentId, name } });\n  });\n\n  // GET /api/voice/models - Get available STT/TTS models\n  authenticated.get('/api/voice/models', (c) => {\n    const models = getVoiceModelsConfig();\n    return c.json({ ok: true, payload: { models } });\n  });\n\n  authenticated.get('/api/image/capabilities', async (c) => {\n    const config = service.currentConfig as Config;\n    const imageGenerationProviders = await resolveImageGenerationCapabilities(config);\n    const imageUnderstandingProviders = await resolveImageUnderstandingCapabilities(config);\n    return c.json({\n      ok: true,\n      payload: {\n        current: {\n          imageModel: null,\n          imageModelFallbacks: [],\n          imageGenerationModel: null,\n          imageGenerationModelFallbacks: [],\n          mediaMaxMb: null,\n        },\n        imageGeneration: { providers: imageGenerationProviders },\n        imageUnderstanding: { providers: imageUnderstandingProviders },\n      },\n    });\n  });\n\n  authenticated.post('/api/image/validate-model', strictRateLimitMiddleware, async (c) => {\n    let body: { modelRef?: unknown };\n    try {\n      body = (await c.req.json()) as { modelRef?: unknown };\n    } catch {\n      return c.json({ ok: false, error: 'Invalid JSON' }, 400);\n    }\n    const modelRef = body.modelRef;\n    if (!modelRef || typeof modelRef !== 'string') {\n      return c.json({ ok: false, error: 'modelRef is required' }, 400);\n    }\n\n    const parsed = parseModelRef(modelRef);\n    if (!parsed) {\n      return c.json({\n        ok: true,\n        payload: {\n          valid: false,\n          reason: 'invalid_format',\n          message: 'Model reference must be in \"provider/model\" format',\n        },\n      });\n    }\n\n    const configured = await isProviderConfigured(parsed.provider);\n    if (!configured) {\n      return c.json({\n        ok: true,\n        payload: {\n          valid: false,\n          reason: 'provider_not_configured',\n          message: `Provider \"${parsed.provider}\" is not configured. Set the API key first.`,\n          provider: parsed.provider,\n        },\n      });\n    }\n\n    try {\n      resolveModel(modelRef);\n    } catch {\n      return c.json({\n        ok: true,\n        payload: {\n          valid: false,\n          reason: 'model_not_found',\n          message: `Model not found in registry: ${modelRef}`,\n          provider: parsed.provider,\n          model: parsed.model,\n        },\n      });\n    }\n\n    return c.json({\n      ok: true,\n      payload: {\n        valid: true,\n        provider: parsed.provider,\n        model: parsed.model,\n      },\n    });\n  });\n\n}\n"],"mappings":";;;;;;;;eAE0F;aACE;gBAKvD;kBAC4B;AAyBjE,SAAS,kBAAkB,KAAsE;AAC/F,KAAI,QAAQ,KAAA,EACV;AAEF,KAAI,QAAQ,QAAQ,OAAO,QAAQ,YAAY,MAAM,QAAQ,IAAI,CAC/D,QAAO,EAAE,OAAO,kCAAkC;CAEpD,MAAM,eAAuC,EAAE;AAC/C,MAAK,MAAM,CAAC,MAAM,YAAY,OAAO,QAAQ,IAA+B,EAAE;AAC5E,MAAI,OAAO,YAAY,SACrB,QAAO,EAAE,OAAO,iBAAiB,KAAK,sBAAsB;AAE9D,eAAa,QAAQ;;AAEvB,QAAO;;AAGT,SAAS,aAAa,OAA4C;AAChE,QACE,OAAO,UAAU,YACjB,UAAU,QACV,WAAW,SACX,OAAQ,MAA4B,UAAU;;AAIlD,SAAS,qBAAqB,KAAmD;AAC/E,KAAI,QAAQ,QAAQ,OAAO,QAAQ,YAAY,MAAM,QAAQ,IAAI,CAC/D,QAAO,EAAE,OAAO,gCAAgC;CAElD,MAAM,OAAO;AACb,KAAI,OAAO,OAAO,MAAM,QAAQ,CAC9B,QAAO,EAAE,OAAO,mEAAmE;AAErF,KAAI,OAAO,OAAO,MAAM,eAAe,CACrC,QAAO,EAAE,OAAO,wDAAwD;AAE1E,KAAI,OAAO,OAAO,MAAM,cAAc,CACpC,QAAO,EAAE,OAAO,kDAAkD;AAEpE,KAAI,OAAO,OAAO,MAAM,WAAW,CACjC,QAAO,EAAE,OAAO,6CAA6C;AAE/D,KAAI,OAAO,OAAO,MAAM,OAAO,CAC7B,QAAO,EAAE,OAAO,4DAA4D;AAE9E,KAAI,OAAO,OAAO,MAAM,cAAc,CACpC,QAAO,EAAE,OAAO,mEAAmE;CAErF,MAAM,YAAY,OAAO,KAAK,cAAc,WAAW,KAAK,YAAY;CACxE,MAAM,SAAS,OAAO,OAAO,MAAM,SAAS,GACxC,kBAAkB,UAAU,KAAK,OAAO,GACxC,KAAA;AACJ,KAAI,UAAU,CAAC,OAAO,QACpB,QAAO,EAAE,OAAO,UAAU,OAAO,MAAM,OAAO,IAAI,WAAW,gBAAgB;CAE/E,MAAM,KAAK,OAAO,KAAK,OAAO,WAAW,KAAK,KAAK,KAAA;CACnD,MAAM,SAAS,OAAO,OAAO,MAAM,SAAS,GACxC,MAAM,QAAQ,KAAK,OAAO,GACxB,KAAK,OAAO,KAAK,MAAe,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC,OAAO,QAAQ,GACjE,OACF,KAAA;AACJ,KAAI,WAAW,KACb,QAAO,EAAE,OAAO,2BAA2B;CAE7C,MAAM,WAAW,OAAO,OAAO,MAAM,QAAQ,GAAG,KAAK,QAAQ,KAAA;CAC7D,IAAI;AACJ,KAAI,aAAa,KAAA,GAAW;AAC1B,MAAI,aAAa,QAAQ,OAAO,aAAa,YAAY,MAAM,QAAQ,SAAS,CAC9E,QAAO,EAAE,OAAO,2BAA2B;EAE7C,MAAM,cAAc,oBAAoB,UAAU,SAAS;AAC3D,MAAI,CAAC,YAAY,QACf,QAAO,EAAE,OAAO,SAAS,YAAY,MAAM,OAAO,IAAI,WAAW,gBAAgB;AAEnF,UAAQ,YAAY;;CAEtB,IAAI;AACJ,KAAI,OAAO,OAAO,MAAM,eAAe,EAAE;EACvC,MAAM,SAAS,kBAAkB,KAAK,aAAa;AACnD,MAAI,aAAa,OAAO,CACtB,QAAO;AAET,iBAAe;;AAEjB,KAAI,CAAC,eAAe,kBAAkB,OAAO,KAAK,cAAc,SAC9D,QAAO,EAAE,OAAO,wCAAwC;CAE1D,MAAM,YAAY,OAAO,KAAK,cAAc,WAAW,KAAK,YAAY,KAAA;AACxE,QAAO;EACL;EACA,GAAI,UAAU,OAAO,SAAS,KAAA,IAAY,EAAE,QAAQ,OAAO,MAAM,GAAG,EAAE;EACtE,GAAI,OAAO,KAAA,IAAY,EAAE,IAAI,GAAG,EAAE;EAClC,GAAI,WAAW,KAAA,IAAY,EAAE,QAAQ,GAAG,EAAE;EAC1C,GAAI,UAAU,KAAA,IAAY,EAAE,OAAO,GAAG,EAAE;EACxC,GAAI,iBAAiB,KAAA,IAAY,EAAE,cAAc,GAAG,EAAE;EACtD,GAAI,cAAc,KAAA,IAAY,EAAE,WAAW,GAAG,EAAE;EACjD;;AAQH,SAAS,iBAAiB,KAAkE;AAC1F,KAAI,QAAQ,KAAA,EACV;AAEF,KAAI,QAAQ,KACV,QAAO;AAET,KAAI,OAAO,QAAQ,YAAY,MAAM,QAAQ,IAAI,CAC/C,QAAO,EAAE,OAAO,oCAAoC;CAEtD,MAAM,OAAO;CACb,MAAM,MAAmB,EAAE;AAC3B,KAAI,OAAO,OAAO,MAAM,cAAc,CACpC,KAAI,cAAc,KAAK,gBAAgB,OAAO,OAAO,OAAO,KAAK,eAAe,GAAG,CAAC,MAAM;AAE5F,KAAI,OAAO,OAAO,MAAM,QAAQ,CAC9B,KAAI,KAAK,UAAU,KACjB,QAAO,EAAE,OAAO,kCAAkC;MAC7C;EACL,MAAM,SAAS,kBAAkB,UAAU,EAAE,OAAO,KAAK,OAAO,CAAC;AACjE,MAAI,CAAC,OAAO,QACV,QAAO,EAAE,OAAO,gBAAgB,OAAO,MAAM,OAAO,IAAI,WAAW,gBAAgB;AAErF,MAAI,QAAQ,OAAO,MAAM;;AAG7B,QAAO;;AAGT,SAAgB,qBAAqB,eAAqB,MAAoC;CAC5F,MAAM,EAAE,SAAS,8BAA8B;AAE/C,eAAc,IAAI,eAAe,OAAO,MAAM;EAC5C,MAAM,MAAM,QAAQ;EAEpB,MAAM,UAAU,MAAM,kBAAkB,KAAK,EAAE,QADhC,EAAE,IAAI,MAAM,SAAS,IAAI,EAAE,IAAI,OAAO,kBAAkB,EAAE,MAAM,IAAI,CAAC,IAAI,MAAM,EACvC,CAAC;AACxD,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM;GAAS,CAAC;GACpC;AAEF,eAAc,IAAI,qBAAqB,OAAO,MAAM;EAClD,MAAM,MAAM,MAAM,qBAAqB;AACvC,MAAI,IAAI,OAAO,MACb,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,IAAI,OAAO;GAAE,EAAE,IAAI,UAAU,IAAI;AAEhF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,IAAI;GAAM,CAAC;GAC9C;AAEF,eAAc,IAAI,qBAAqB,2BAA2B,OAAO,MAAM;EAC7E,IAAI,UAAU;AACd,MAAI;GACF,MAAM,OAAQ,MAAM,EAAE,IAAI,MAAM;AAChC,aAAU,OAAO,KAAK,YAAY,WAAW,KAAK,UAAU;UACtD;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS,gBAAgB;IAAE,EAAE,IAAI;;EAEvE,MAAM,MAAM,MAAM,qBAAqB,QAAQ;AAC/C,MAAI,IAAI,OAAO,MACb,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,IAAI,OAAO;GAAE,EAAE,IAAI,UAAU,IAAI;AAEhF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,IAAI;GAAM,CAAC;GAC9C;AAEF,eAAc,KAAK,eAAe,2BAA2B,OAAO,MAAM;EACxE,IAAI,OAAgC,EAAE;AACtC,MAAI;AACF,UAAQ,MAAM,EAAE,IAAI,MAAM;UACpB;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS,gBAAgB;IAAE,EAAE,IAAI;;EAEvE,MAAM,SAAS,qBAAqB,KAAK;AACzC,MAAI,WAAW,OACb,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,OAAO,OAAO;GAAE,EAAE,IAAI;EAErE,MAAM,OAAO,mBAAmB,QAAQ,eAAyB,OAAO;AACxE,MAAI,KAAK,OAAO,MACd,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,KAAK,OAAO;GAAE,EAAE,KAAK,UAAU,IAAI;EAElF,MAAM,EAAE,YAAY,YAAY,KAAK;EACrC,MAAM,OAAO,MAAM,QAAQ,WAAW,WAAW;AACjD,MAAI,CAAC,KAAK,MACR,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,KAAK,SAAS,eAAe;GAAE,EAAE,IAAI;EAEpF,MAAM,YAAY,MAAM,wBAAwB,QAAQ,eAAyB,SAAS;GACxF,GAAI,OAAO,iBAAiB,KAAA,IAAY,EAAE,cAAc,OAAO,cAAc,GAAG,EAAE;GAClF,GAAI,OAAO,YAAY,EAAE,WAAW,OAAO,WAAW,GAAG,EAAE;GAC5D,CAAC;AACF,MAAI,UAAU,OAAO,MACnB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,UAAU,OAAO;GAAE,EAAE,UAAU,UAAU,IAAI;EAE5F,MAAM,SAAS,EAAE,IAAI,MAAM,SAAS,IAAI,EAAE,IAAI,OAAO,kBAAkB,EAAE,MAAM,IAAI,CAAC,IAAI,MAAM;EAC9F,MAAM,gBAAgB,MAAM,kBAAkB,QAAQ,eAAyB,EAAE,QAAQ,CAAC;AAC1F,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP;IACA,QAAQ;IACT;GACF,CAAC;GACF;AAEF,eAAc,IAAI,sCAAsC,OAAO,MAAM;EACnE,MAAM,KAAK,iBAAiB,EAAE,IAAI,MAAM,KAAK,IAAI,GAAG;EACpD,MAAM,MAAM,iCAAiC,QAAQ,eAAyB,GAAG;AACjF,MAAI,IAAI,OAAO,MACb,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,IAAI,OAAO;GAAE,EAAE,IAAI,UAAU,IAAI;AAEhF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,IAAI;GAAM,CAAC;GAC9C;AAEF,eAAc,MAAM,mBAAmB,2BAA2B,OAAO,MAAM;EAC7E,MAAM,KAAK,iBAAiB,EAAE,IAAI,MAAM,KAAK,IAAI,GAAG;EACpD,IAAI,OAAgC,EAAE;AACtC,MAAI;AACF,UAAQ,MAAM,EAAE,IAAI,MAAM;UACpB;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS,gBAAgB;IAAE,EAAE,IAAI;;AAEvE,MAAI,OAAO,OAAO,MAAM,QAAQ,CAC9B,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,mEAAmE;GAAE,EAAE,IAAI;AAE1H,MAAI,OAAO,OAAO,MAAM,cAAc,CACpC,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,kDAAkD;GAAE,EAAE,IAAI;AAEzG,MAAI,OAAO,OAAO,MAAM,eAAe,CACrC,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,wDAAwD;GAAE,EAAE,IAAI;AAE/G,MAAI,OAAO,OAAO,MAAM,WAAW,CACjC,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,6CAA6C;GAAE,EAAE,IAAI;AAEpG,MAAI,OAAO,OAAO,MAAM,OAAO,CAC7B,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,2CAA2C;GAAE,EAAE,IAAI;AAElG,MAAI,OAAO,OAAO,MAAM,cAAc,CACpC,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,kDAAkD;GAAE,EAAE,IAAI;EAEzG,MAAM,cACJ,KAAK,WAAW,OACZ,OACA,MAAM,QAAQ,KAAK,OAAO,GACxB,KAAK,OAAO,KAAK,MAAe,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC,OAAO,QAAQ,GACjE,KAAA;EACR,MAAM,eAAe,OAAO,OAAO,MAAM,UAAU,GAC/C,MAAM,QAAQ,KAAK,QAAQ,GACzB,KAAK,QAAQ,KAAK,MAAe,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC,OAAO,QAAQ,GAClE,KAAA,IACF,KAAA;AACJ,MAAI,OAAO,OAAO,MAAM,UAAU,IAAI,iBAAiB,KAAA,EACrD,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,4BAA4B;GAAE,EAAE,IAAI;EAEnF,IAAI;AACJ,MAAI,OAAO,OAAO,MAAM,QAAQ,CAC9B,KAAI,KAAK,UAAU,KACjB,cAAa;WACJ,OAAO,KAAK,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK,MAAM,EAAE;GACvE,MAAM,cAAc,oBAAoB,UAAU,KAAK,MAAM;AAC7D,OAAI,CAAC,YAAY,QACf,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS,SAAS,YAAY,MAAM,OAAO,IAAI,WAAW,gBAAgB;IAAE,EAAE,IAAI;AAExH,gBAAa,YAAY;QAEzB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,mCAAmC;GAAE,EAAE,IAAI;EAG5F,MAAM,cAAc,OAAO,OAAO,MAAM,SAAS,GAAG,iBAAiB,KAAK,OAAO,GAAG,KAAA;AACpF,MAAI,aAAa,YAAY,CAC3B,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,YAAY,OAAO;GAAE,EAAE,IAAI;EAE1E,IAAI;AACJ,MAAI,OAAO,OAAO,MAAM,SAAS,EAAE;GACjC,MAAM,eAAe,mBAAmB,UAAU,KAAK,OAAO;AAC9D,OAAI,CAAC,aAAa,QAChB,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS,UAAU,aAAa,MAAM,OAAO,IAAI,WAAW,gBAAgB;IAAE,EAAE,IAAI;AAE1H,iBAAc,aAAa;;EAG7B,MAAM,OAAO,mBAAmB,QAAQ,eAAyB,IAAI;GACnE,WAAW,OAAO,KAAK,cAAc,WAAW,KAAK,YAAY,KAAA;GACjE,GAAI,iBAAiB,KAAA,IAAY,EAAE,SAAS,cAAc,GAAG,EAAE;GAC/D,GAAI,gBAAgB,KAAA,IAAY,EAAE,QAAQ,aAAa,GAAG,EAAE;GAC5D,YAAY,KAAK,eAAe;GAChC,GAAI,gBAAgB,KAAA,IAAY,EAAE,QAAQ,aAAa,GAAG,EAAE;GAC5D,GAAI,eAAe,KAAA,IAAY,EAAE,OAAO,YAAY,GAAG,EAAE;GACzD,GAAI,gBAAgB,KAAA,IAAY,EAAE,QAAQ,aAAa,GAAG,EAAE;GAC7D,CAAC;AACF,MAAI,KAAK,OAAO,MACd,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,KAAK,OAAO;GAAE,EAAE,KAAK,UAAU,IAAI;EAElF,MAAM,OAAO,MAAM,QAAQ,WAAW,KAAK,KAAK,WAAW;AAC3D,MAAI,CAAC,KAAK,MACR,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,KAAK,SAAS,eAAe;GAAE,EAAE,IAAI;EAEpF,MAAM,SAAS,EAAE,IAAI,MAAM,SAAS,IAAI,EAAE,IAAI,OAAO,kBAAkB,EAAE,MAAM,IAAI,CAAC,IAAI,MAAM;EAC9F,MAAM,gBAAgB,MAAM,kBAAkB,QAAQ,eAAyB,EAAE,QAAQ,CAAC;AAC1F,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;GAAe,CAAC;GACnD;AAEF,eAAc,OAAO,mBAAmB,2BAA2B,OAAO,MAAM;EAC9E,MAAM,KAAK,iBAAiB,EAAE,IAAI,MAAM,KAAK,IAAI,GAAG;EACpD,MAAM,QAAQ,EAAE,IAAI,MAAM,QAAQ,KAAK,OAAO,EAAE,IAAI,MAAM,QAAQ,KAAK;EACvE,MAAM,OAAO,mBAAmB,QAAQ,eAAyB,GAAG;AACpE,MAAI,KAAK,OAAO,MACd,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,KAAK,OAAO;GAAE,EAAE,KAAK,UAAU,IAAI;EAElF,MAAM,EAAE,YAAY,YAAY,KAAK;EACrC,MAAM,OAAO,MAAM,QAAQ,WAAW,WAAW;AACjD,MAAI,CAAC,KAAK,MACR,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,KAAK,SAAS,eAAe;GAAE,EAAE,IAAI;AAEpF,MAAI,MACF,OAAM,oBAAoB,QAAQ,eAAyB,QAAQ;EAErE,MAAM,SAAS,EAAE,IAAI,MAAM,SAAS,IAAI,EAAE,IAAI,OAAO,kBAAkB,EAAE,MAAM,IAAI,CAAC,IAAI,MAAM;EAC9F,MAAM,gBAAgB,MAAM,kBAAkB,QAAQ,eAAyB,EAAE,QAAQ,CAAC;AAC1F,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IAAE;IAAS,QAAQ;IAAO,QAAQ;IAAe;GAC3D,CAAC;GACF;AAEF,eAAc,IAAI,0BAA0B,OAAO,MAAM;EACvD,MAAM,KAAK,iBAAiB,EAAE,IAAI,MAAM,KAAK,IAAI,GAAG;EACpD,MAAM,MAAM,MAAM,oBAAoB,QAAQ,eAAyB,GAAG;AAC1E,MAAI,IAAI,OAAO,MACb,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,IAAI,OAAO;GAAE,EAAE,IAAI,UAAU,IAAI;AAEhF,SAAO,IAAI,SAAS,IAAI,KAAK,QAAQ;GACnC,QAAQ;GACR,SAAS;IACP,gBAAgB,IAAI,KAAK;IACzB,iBAAiB;IAClB;GACF,CAAC;GACF;AAEF,eAAc,IAAI,0BAA0B,2BAA2B,OAAO,MAAM;EAClF,MAAM,KAAK,iBAAiB,EAAE,IAAI,MAAM,KAAK,IAAI,GAAG;EACpD,IAAI,OAAgC,EAAE;AACtC,MAAI;AACF,UAAQ,MAAM,EAAE,IAAI,MAAM;UACpB;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS,gBAAgB;IAAE,EAAE,IAAI;;EAEvE,MAAM,SAAS,OAAO,KAAK,WAAW,WAAW,KAAK,SAAS;EAC/D,MAAM,WAAW,OAAO,KAAK,aAAa,WAAW,KAAK,WAAW;EACrE,MAAM,MAAM,MAAM,2BAA2B,QAAQ,eAAyB,IAAI,QAAQ,SAAS;AACnG,MAAI,IAAI,OAAO,MACb,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,IAAI,OAAO;GAAE,EAAE,IAAI,UAAU,IAAI;AAEhF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,SAAS,IAAI,KAAK,SAAS;GAAE,CAAC;GACnE;AAEF,eAAc,OAAO,0BAA0B,2BAA2B,OAAO,MAAM;EACrF,MAAM,KAAK,iBAAiB,EAAE,IAAI,MAAM,KAAK,IAAI,GAAG;EACpD,MAAM,MAAM,MAAM,sBAAsB,QAAQ,eAAyB,GAAG;AAC5E,MAAI,IAAI,OAAO,MACb,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,IAAI,OAAO;GAAE,EAAE,IAAI,UAAU,IAAI;AAEhF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,SAAS,IAAI,KAAK,SAAS;GAAE,CAAC;GACnE;AAEF,eAAc,IAAI,yBAAyB,OAAO,MAAM;EACtD,MAAM,KAAK,iBAAiB,EAAE,IAAI,MAAM,KAAK,IAAI,GAAG;EACpD,MAAM,MAAM,MAAM,sBAAsB,QAAQ,eAAyB,GAAG;AAC5E,MAAI,IAAI,OAAO,MACb,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,IAAI,OAAO;GAAE,EAAE,IAAI,UAAU,IAAI;AAEhF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,IAAI;GAAM,CAAC;GAC9C;AAEF,eAAc,IAAI,+BAA+B,OAAO,MAAM;EAC5D,MAAM,KAAK,iBAAiB,EAAE,IAAI,MAAM,KAAK,IAAI,GAAG;EACpD,MAAM,OAAO,mBAAmB,EAAE,IAAI,MAAM,OAAO,IAAI,GAAG;EAC1D,MAAM,MAAM,MAAM,qBAAqB,QAAQ,eAAyB,IAAI,KAAK;AACjF,MAAI,IAAI,OAAO,MACb,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,IAAI,OAAO;GAAE,EAAE,IAAI,UAAU,IAAI;AAEhF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;IAAE,SAAS,IAAI,KAAK;IAAS;IAAM,SAAS,IAAI,KAAK;IAAS;GAAE,CAAC;GACpG;AAEF,eAAc,IAAI,+BAA+B,2BAA2B,OAAO,MAAM;EACvF,MAAM,KAAK,iBAAiB,EAAE,IAAI,MAAM,KAAK,IAAI,GAAG;EACpD,MAAM,OAAO,mBAAmB,EAAE,IAAI,MAAM,OAAO,IAAI,GAAG;EAC1D,IAAI,UAAU;AACd,MAAI;GACF,MAAM,OAAQ,MAAM,EAAE,IAAI,MAAM;AAChC,aAAU,OAAO,KAAK,YAAY,WAAW,KAAK,UAAU;UACtD;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS,gBAAgB;IAAE,EAAE,IAAI;;EAEvE,MAAM,MAAM,MAAM,sBAAsB,QAAQ,eAAyB,IAAI,MAAM,QAAQ;AAC3F,MAAI,IAAI,OAAO,MACb,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,IAAI,OAAO;GAAE,EAAE,IAAI,UAAU,IAAI;AAEhF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;IAAE,SAAS,IAAI,KAAK;IAAS;IAAM;GAAE,CAAC;GACzE;AAGF,eAAc,IAAI,sBAAsB,MAAM;EAC5C,MAAM,SAAS,sBAAsB;AACrC,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,QAAQ;GAAE,CAAC;GAChD;AAEF,eAAc,IAAI,2BAA2B,OAAO,MAAM;EACxD,MAAM,SAAS,QAAQ;EACvB,MAAM,2BAA2B,MAAM,mCAAmC,OAAO;EACjF,MAAM,8BAA8B,MAAM,sCAAsC,OAAO;AACvF,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,SAAS;KACP,YAAY;KACZ,qBAAqB,EAAE;KACvB,sBAAsB;KACtB,+BAA+B,EAAE;KACjC,YAAY;KACb;IACD,iBAAiB,EAAE,WAAW,0BAA0B;IACxD,oBAAoB,EAAE,WAAW,6BAA6B;IAC/D;GACF,CAAC;GACF;AAEF,eAAc,KAAK,6BAA6B,2BAA2B,OAAO,MAAM;EACtF,IAAI;AACJ,MAAI;AACF,UAAQ,MAAM,EAAE,IAAI,MAAM;UACpB;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAAgB,EAAE,IAAI;;EAE1D,MAAM,WAAW,KAAK;AACtB,MAAI,CAAC,YAAY,OAAO,aAAa,SACnC,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAwB,EAAE,IAAI;EAGlE,MAAM,SAAS,cAAc,SAAS;AACtC,MAAI,CAAC,OACH,QAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,OAAO;IACP,QAAQ;IACR,SAAS;IACV;GACF,CAAC;AAIJ,MAAI,CAAC,MADoB,qBAAqB,OAAO,SAAS,CAE5D,QAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,OAAO;IACP,QAAQ;IACR,SAAS,aAAa,OAAO,SAAS;IACtC,UAAU,OAAO;IAClB;GACF,CAAC;AAGJ,MAAI;AACF,gBAAa,SAAS;UAChB;AACN,UAAO,EAAE,KAAK;IACZ,IAAI;IACJ,SAAS;KACP,OAAO;KACP,QAAQ;KACR,SAAS,gCAAgC;KACzC,UAAU,OAAO;KACjB,OAAO,OAAO;KACf;IACF,CAAC;;AAGJ,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,OAAO;IACP,UAAU,OAAO;IACjB,OAAO,OAAO;IACf;GACF,CAAC;GACF"}

package/dist/src/gateway/hono/routes/commands-skills.js

@@ -141,17 +141,16 @@ function registerCommandsSkillsRoutes(authenticated, deps) {
 			}, 502);
 		}
 	});
-	authenticated.get("/api/skills/marketplace/provider", (c) => {
-		const info = service.marketplace.getSkillsProvider();
+	authenticated.get("/api/skills/marketplace/provider", async (c) => {
+		const info = await service.marketplace.getSkillsProvider();
 		return c.json({
 			ok: true,
 			payload: info
 		});
 	});
 	/** All registered marketplace providers (built-in + extension-contributed). */
-	authenticated.get("/api/skills/marketplace/providers", (c) => {
-		const providers = service.marketplace.getSkillsProviders();
-		const current = service.marketplace.getSkillsProvider();
+	authenticated.get("/api/skills/marketplace/providers", async (c) => {
+		const [providers, current] = await Promise.all([service.marketplace.getSkillsProviders(), service.marketplace.getSkillsProvider()]);
 		return c.json({
 			ok: true,
 			payload: {

package/dist/src/gateway/hono/routes/commands-skills.js.map

@@ -1 +1 @@
-{"version":3,"file":"commands-skills.js","names":[],"sources":["../../../../../src/gateway/hono/routes/commands-skills.ts"],"sourcesContent":["import type { Hono } from 'hono';\n\nimport { commandRegistry } from '../../../chat-commands/index.js';\nimport { isRegisteredProvider } from '../../../agent/skills/skills-marketplace.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\n\nfunction parseMarketplaceProviderQuery(raw: string | undefined): string | undefined {\n  const v = raw?.trim().toLowerCase();\n  if (v && isRegisteredProvider(v)) return v;\n  return undefined;\n}\n\nexport function registerCommandsSkillsRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  const { service } = deps;\n\n  // ========== Chat slash commands (CommandRegistry) ==========\n\n  authenticated.get('/api/commands', (c) => {\n    const all = commandRegistry.list();\n    const commands = all\n      .filter((cmd) => cmd.scope.includes('global') || cmd.scope.includes('private'))\n      .map((cmd) => ({\n        id: cmd.id,\n        name: cmd.name,\n        aliases: cmd.aliases ?? [],\n        description: cmd.description,\n        category: cmd.category,\n        scope: cmd.scope,\n        acceptsArgs: cmd.acceptsArgs ?? false,\n        examples: cmd.examples ?? [],\n      }));\n    const extensionCommands = all\n      .filter((cmd) => cmd.category === 'extension')\n      .map((cmd) => ({\n        id: cmd.id,\n        name: cmd.name,\n        description: cmd.description,\n        extensionId: cmd.id.startsWith('ext.') ? cmd.id.split('.')[1] : undefined,\n      }));\n    return c.json({ ok: true, payload: { commands, extensionCommands } });\n  });\n\n  // ========== Skills (managed global skills under ~/.xopc/skills) ==========\n\n  authenticated.get('/api/chat/skills', (c) => {\n    const agentId = c.req.query('agentId')?.trim() || service.getConfig().agents?.default || 'main';\n    const payload = service.marketplace.getAgentSkillsApi(agentId);\n    return c.json({ ok: true, payload });\n  });\n\n  authenticated.get('/api/skills', (c) => {\n    const payload = service.marketplace.getSkillsApi();\n    return c.json({ ok: true, payload });\n  });\n\n  authenticated.get('/api/skills/status', (c) => {\n    const payload = service.marketplace.getSkillsStatusApi();\n    return c.json({ ok: true, payload });\n  });\n\n  authenticated.get('/api/skills/:skillName/content', (c) => {\n    const raw = c.req.param('skillName');\n    if (!raw) {\n      return c.json({ ok: false, error: 'Missing skill name' }, 400);\n    }\n    let skillName: string;\n    try {\n      skillName = decodeURIComponent(raw);\n    } catch {\n      return c.json({ ok: false, error: 'Invalid skill name' }, 400);\n    }\n    const data = service.marketplace.getSkillMarkdownSource(skillName);\n    if (!data) {\n      return c.json({ ok: false, error: 'Skill not found' }, 404);\n    }\n    return c.json({ ok: true, payload: data });\n  });\n\n  authenticated.post('/api/skills/reload', (c) => {\n    service.marketplace.reloadSkills();\n    return c.json({ ok: true });\n  });\n\n  authenticated.patch('/api/skills/enabled', async (c) => {\n    let body: { skillName?: unknown; enabled?: unknown };\n    try {\n      body = (await c.req.json()) as { skillName?: unknown; enabled?: unknown };\n    } catch {\n      return c.json({ ok: false, error: 'Invalid JSON' }, 400);\n    }\n    const skillName = typeof body.skillName === 'string' ? body.skillName.trim() : '';\n    const enabled = body.enabled;\n    if (!skillName || typeof enabled !== 'boolean') {\n      return c.json({ ok: false, error: 'Expected { skillName: string, enabled: boolean }' }, 400);\n    }\n    try {\n      service.marketplace.patchSkillEnabled(skillName, enabled);\n      return c.json({ ok: true });\n    } catch (err) {\n      return c.json(\n        { ok: false, error: err instanceof Error ? err.message : 'Update failed' },\n        400,\n      );\n    }\n  });\n\n  authenticated.get('/api/skills/marketplace', async (c) => {\n    const q = c.req.query('q')?.trim() ?? '';\n    const pageRaw = c.req.query('page');\n    const pageSizeRaw = c.req.query('pageSize');\n    const sortRaw = c.req.query('sort');\n    const page = pageRaw != null && pageRaw !== '' ? Math.max(1, Number(pageRaw) || 1) : undefined;\n    const pageSize =\n      pageSizeRaw != null && pageSizeRaw !== ''\n        ? Math.min(50, Math.max(1, Number(pageSizeRaw) || 20))\n        : undefined;\n    const sort =\n      sortRaw === 'newest' || sortRaw === 'downloads' ? sortRaw : undefined;\n    const category = c.req.query('category')?.trim() ?? '';\n    const provider = parseMarketplaceProviderQuery(c.req.query('provider'));\n    try {\n      const payload = await service.marketplace.fetchSkillsCatalog(\n        {\n          q: q || undefined,\n          page,\n          pageSize,\n          sort,\n          category: category || undefined,\n        },\n        provider,\n      );\n      return c.json({ ok: true, payload });\n    } catch (err) {\n      return c.json(\n        { ok: false, error: err instanceof Error ? err.message : 'Marketplace request failed' },\n        502,\n      );\n    }\n  });\n\n  authenticated.get('/api/skills/marketplace/provider', (c) => {\n    const info = service.marketplace.getSkillsProvider();\n    return c.json({ ok: true, payload: info });\n  });\n\n  /** All registered marketplace providers (built-in + extension-contributed). */\n  authenticated.get('/api/skills/marketplace/providers', (c) => {\n    const providers = service.marketplace.getSkillsProviders();\n    const current = service.marketplace.getSkillsProvider();\n    return c.json({ ok: true, payload: { providers, current: current.provider } });\n  });\n\n  authenticated.get('/api/skills/marketplace/categories', async (c) => {\n    const provider = parseMarketplaceProviderQuery(c.req.query('provider'));\n    try {\n      const payload = await service.marketplace.fetchSkillsCategories(provider);\n      return c.json({ ok: true, payload });\n    } catch (err) {\n      return c.json(\n        { ok: false, error: err instanceof Error ? err.message : 'Marketplace categories failed' },\n        502,\n      );\n    }\n  });\n\n  authenticated.get('/api/skills/marketplace/packages/:pkgName', async (c) => {\n    const raw = c.req.param('pkgName');\n    if (!raw) {\n      return c.json({ ok: false, error: 'Missing package name' }, 400);\n    }\n    let pkgName: string;\n    try {\n      pkgName = decodeURIComponent(raw);\n    } catch {\n      return c.json({ ok: false, error: 'Invalid package name' }, 400);\n    }\n    try {\n      const provider = parseMarketplaceProviderQuery(c.req.query('provider'));\n      const payload = await service.marketplace.fetchSkillsPackageDetail(pkgName, provider);\n      return c.json({ ok: true, payload });\n    } catch (err) {\n      return c.json(\n        { ok: false, error: err instanceof Error ? err.message : 'Marketplace request failed' },\n        502,\n      );\n    }\n  });\n\n  authenticated.post('/api/skills/marketplace/install', async (c) => {\n    let body: { name?: unknown; version?: unknown; overwrite?: unknown; provider?: unknown };\n    try {\n      body = (await c.req.json()) as typeof body;\n    } catch {\n      return c.json({ ok: false, error: 'Invalid JSON' }, 400);\n    }\n    const name = typeof body.name === 'string' ? body.name.trim() : '';\n    const version = typeof body.version === 'string' ? body.version.trim() : undefined;\n    const overwrite =\n      body.overwrite === true ||\n      body.overwrite === 'true' ||\n      body.overwrite === '1';\n    const provider = parseMarketplaceProviderQuery(\n      typeof body.provider === 'string' ? body.provider : undefined,\n    );\n    if (!name) {\n      return c.json({ ok: false, error: 'Expected { name: string, version?: string, overwrite?: boolean }' }, 400);\n    }\n    try {\n      const payload = await service.marketplace.installSkill({ name, version, overwrite, provider });\n      return c.json({ ok: true, payload });\n    } catch (err) {\n      return c.json(\n        { ok: false, error: err instanceof Error ? err.message : 'Install failed' },\n        400,\n      );\n    }\n  });\n\n  authenticated.post('/api/skills/upload', async (c) => {\n    let body: Record<string, unknown>;\n    try {\n      body = await c.req.parseBody({ all: true });\n    } catch {\n      return c.json({ ok: false, error: 'Invalid multipart body' }, 400);\n    }\n    const file = body['file'];\n    if (!file || typeof file !== 'object') {\n      return c.json({ ok: false, error: 'Missing file field' }, 400);\n    }\n    let buf: Buffer;\n    if (file instanceof File) {\n      buf = Buffer.from(await file.arrayBuffer());\n    } else if (typeof (file as Blob).arrayBuffer === 'function') {\n      buf = Buffer.from(await (file as Blob).arrayBuffer());\n    } else {\n      return c.json({ ok: false, error: 'Invalid file upload' }, 400);\n    }\n    const skillIdRaw = body['skillId'];\n    const overwriteRaw = body['overwrite'];\n    const skillId = typeof skillIdRaw === 'string' && skillIdRaw.trim() ? skillIdRaw.trim() : undefined;\n    const overwrite =\n      overwriteRaw === 'true' ||\n      overwriteRaw === true ||\n      overwriteRaw === '1';\n\n    try {\n      const result = service.marketplace.installSkillZip(buf, { skillId, overwrite });\n      return c.json({ ok: true, payload: result });\n    } catch (err) {\n      return c.json(\n        { ok: false, error: err instanceof Error ? err.message : 'Install failed' },\n        400,\n      );\n    }\n  });\n\n  authenticated.delete('/api/skills/:id', (c) => {\n    const id = c.req.param('id');\n    if (!id) {\n      return c.json({ ok: false, error: 'Missing id' }, 400);\n    }\n    try {\n      service.marketplace.deleteSkill(id);\n      return c.json({ ok: true });\n    } catch (err) {\n      return c.json(\n        { ok: false, error: err instanceof Error ? err.message : 'Delete failed' },\n        400,\n      );\n    }\n  });\n}\n"],"mappings":";;;;;AAMA,SAAS,8BAA8B,KAA6C;CAClF,MAAM,IAAI,KAAK,MAAM,CAAC,aAAa;AACnC,KAAI,KAAK,qBAAqB,EAAE,CAAE,QAAO;;AAI3C,SAAgB,6BAA6B,eAAqB,MAAoC;CACpG,MAAM,EAAE,YAAY;AAIpB,eAAc,IAAI,kBAAkB,MAAM;EACxC,MAAM,MAAM,gBAAgB,MAAM;EAClC,MAAM,WAAW,IACd,QAAQ,QAAQ,IAAI,MAAM,SAAS,SAAS,IAAI,IAAI,MAAM,SAAS,UAAU,CAAC,CAC9E,KAAK,SAAS;GACb,IAAI,IAAI;GACR,MAAM,IAAI;GACV,SAAS,IAAI,WAAW,EAAE;GAC1B,aAAa,IAAI;GACjB,UAAU,IAAI;GACd,OAAO,IAAI;GACX,aAAa,IAAI,eAAe;GAChC,UAAU,IAAI,YAAY,EAAE;GAC7B,EAAE;EACL,MAAM,oBAAoB,IACvB,QAAQ,QAAQ,IAAI,aAAa,YAAY,CAC7C,KAAK,SAAS;GACb,IAAI,IAAI;GACR,MAAM,IAAI;GACV,aAAa,IAAI;GACjB,aAAa,IAAI,GAAG,WAAW,OAAO,GAAG,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,KAAA;GACjE,EAAE;AACL,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;IAAE;IAAU;IAAmB;GAAE,CAAC;GACrE;AAIF,eAAc,IAAI,qBAAqB,MAAM;EAC3C,MAAM,UAAU,EAAE,IAAI,MAAM,UAAU,EAAE,MAAM,IAAI,QAAQ,WAAW,CAAC,QAAQ,WAAW;EACzF,MAAM,UAAU,QAAQ,YAAY,kBAAkB,QAAQ;AAC9D,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM;GAAS,CAAC;GACpC;AAEF,eAAc,IAAI,gBAAgB,MAAM;EACtC,MAAM,UAAU,QAAQ,YAAY,cAAc;AAClD,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM;GAAS,CAAC;GACpC;AAEF,eAAc,IAAI,uBAAuB,MAAM;EAC7C,MAAM,UAAU,QAAQ,YAAY,oBAAoB;AACxD,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM;GAAS,CAAC;GACpC;AAEF,eAAc,IAAI,mCAAmC,MAAM;EACzD,MAAM,MAAM,EAAE,IAAI,MAAM,YAAY;AACpC,MAAI,CAAC,IACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAsB,EAAE,IAAI;EAEhE,IAAI;AACJ,MAAI;AACF,eAAY,mBAAmB,IAAI;UAC7B;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAAsB,EAAE,IAAI;;EAEhE,MAAM,OAAO,QAAQ,YAAY,uBAAuB,UAAU;AAClE,MAAI,CAAC,KACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAmB,EAAE,IAAI;AAE7D,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;GAAM,CAAC;GAC1C;AAEF,eAAc,KAAK,uBAAuB,MAAM;AAC9C,UAAQ,YAAY,cAAc;AAClC,SAAO,EAAE,KAAK,EAAE,IAAI,MAAM,CAAC;GAC3B;AAEF,eAAc,MAAM,uBAAuB,OAAO,MAAM;EACtD,IAAI;AACJ,MAAI;AACF,UAAQ,MAAM,EAAE,IAAI,MAAM;UACpB;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAAgB,EAAE,IAAI;;EAE1D,MAAM,YAAY,OAAO,KAAK,cAAc,WAAW,KAAK,UAAU,MAAM,GAAG;EAC/E,MAAM,UAAU,KAAK;AACrB,MAAI,CAAC,aAAa,OAAO,YAAY,UACnC,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAoD,EAAE,IAAI;AAE9F,MAAI;AACF,WAAQ,YAAY,kBAAkB,WAAW,QAAQ;AACzD,UAAO,EAAE,KAAK,EAAE,IAAI,MAAM,CAAC;WACpB,KAAK;AACZ,UAAO,EAAE,KACP;IAAE,IAAI;IAAO,OAAO,eAAe,QAAQ,IAAI,UAAU;IAAiB,EAC1E,IACD;;GAEH;AAEF,eAAc,IAAI,2BAA2B,OAAO,MAAM;EACxD,MAAM,IAAI,EAAE,IAAI,MAAM,IAAI,EAAE,MAAM,IAAI;EACtC,MAAM,UAAU,EAAE,IAAI,MAAM,OAAO;EACnC,MAAM,cAAc,EAAE,IAAI,MAAM,WAAW;EAC3C,MAAM,UAAU,EAAE,IAAI,MAAM,OAAO;EACnC,MAAM,OAAO,WAAW,QAAQ,YAAY,KAAK,KAAK,IAAI,GAAG,OAAO,QAAQ,IAAI,EAAE,GAAG,KAAA;EACrF,MAAM,WACJ,eAAe,QAAQ,gBAAgB,KACnC,KAAK,IAAI,IAAI,KAAK,IAAI,GAAG,OAAO,YAAY,IAAI,GAAG,CAAC,GACpD,KAAA;EACN,MAAM,OACJ,YAAY,YAAY,YAAY,cAAc,UAAU,KAAA;EAC9D,MAAM,WAAW,EAAE,IAAI,MAAM,WAAW,EAAE,MAAM,IAAI;EACpD,MAAM,WAAW,8BAA8B,EAAE,IAAI,MAAM,WAAW,CAAC;AACvE,MAAI;GACF,MAAM,UAAU,MAAM,QAAQ,YAAY,mBACxC;IACE,GAAG,KAAK,KAAA;IACR;IACA;IACA;IACA,UAAU,YAAY,KAAA;IACvB,EACD,SACD;AACD,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM;IAAS,CAAC;WAC7B,KAAK;AACZ,UAAO,EAAE,KACP;IAAE,IAAI;IAAO,OAAO,eAAe,QAAQ,IAAI,UAAU;IAA8B,EACvF,IACD;;GAEH;AAEF,eAAc,IAAI,qCAAqC,MAAM;EAC3D,MAAM,OAAO,QAAQ,YAAY,mBAAmB;AACpD,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;GAAM,CAAC;GAC1C;;AAGF,eAAc,IAAI,sCAAsC,MAAM;EAC5D,MAAM,YAAY,QAAQ,YAAY,oBAAoB;EAC1D,MAAM,UAAU,QAAQ,YAAY,mBAAmB;AACvD,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;IAAE;IAAW,SAAS,QAAQ;IAAU;GAAE,CAAC;GAC9E;AAEF,eAAc,IAAI,sCAAsC,OAAO,MAAM;EACnE,MAAM,WAAW,8BAA8B,EAAE,IAAI,MAAM,WAAW,CAAC;AACvE,MAAI;GACF,MAAM,UAAU,MAAM,QAAQ,YAAY,sBAAsB,SAAS;AACzE,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM;IAAS,CAAC;WAC7B,KAAK;AACZ,UAAO,EAAE,KACP;IAAE,IAAI;IAAO,OAAO,eAAe,QAAQ,IAAI,UAAU;IAAiC,EAC1F,IACD;;GAEH;AAEF,eAAc,IAAI,6CAA6C,OAAO,MAAM;EAC1E,MAAM,MAAM,EAAE,IAAI,MAAM,UAAU;AAClC,MAAI,CAAC,IACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAwB,EAAE,IAAI;EAElE,IAAI;AACJ,MAAI;AACF,aAAU,mBAAmB,IAAI;UAC3B;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAAwB,EAAE,IAAI;;AAElE,MAAI;GACF,MAAM,WAAW,8BAA8B,EAAE,IAAI,MAAM,WAAW,CAAC;GACvE,MAAM,UAAU,MAAM,QAAQ,YAAY,yBAAyB,SAAS,SAAS;AACrF,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM;IAAS,CAAC;WAC7B,KAAK;AACZ,UAAO,EAAE,KACP;IAAE,IAAI;IAAO,OAAO,eAAe,QAAQ,IAAI,UAAU;IAA8B,EACvF,IACD;;GAEH;AAEF,eAAc,KAAK,mCAAmC,OAAO,MAAM;EACjE,IAAI;AACJ,MAAI;AACF,UAAQ,MAAM,EAAE,IAAI,MAAM;UACpB;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAAgB,EAAE,IAAI;;EAE1D,MAAM,OAAO,OAAO,KAAK,SAAS,WAAW,KAAK,KAAK,MAAM,GAAG;EAChE,MAAM,UAAU,OAAO,KAAK,YAAY,WAAW,KAAK,QAAQ,MAAM,GAAG,KAAA;EACzE,MAAM,YACJ,KAAK,cAAc,QACnB,KAAK,cAAc,UACnB,KAAK,cAAc;EACrB,MAAM,WAAW,8BACf,OAAO,KAAK,aAAa,WAAW,KAAK,WAAW,KAAA,EACrD;AACD,MAAI,CAAC,KACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAoE,EAAE,IAAI;AAE9G,MAAI;GACF,MAAM,UAAU,MAAM,QAAQ,YAAY,aAAa;IAAE;IAAM;IAAS;IAAW;IAAU,CAAC;AAC9F,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM;IAAS,CAAC;WAC7B,KAAK;AACZ,UAAO,EAAE,KACP;IAAE,IAAI;IAAO,OAAO,eAAe,QAAQ,IAAI,UAAU;IAAkB,EAC3E,IACD;;GAEH;AAEF,eAAc,KAAK,sBAAsB,OAAO,MAAM;EACpD,IAAI;AACJ,MAAI;AACF,UAAO,MAAM,EAAE,IAAI,UAAU,EAAE,KAAK,MAAM,CAAC;UACrC;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAA0B,EAAE,IAAI;;EAEpE,MAAM,OAAO,KAAK;AAClB,MAAI,CAAC,QAAQ,OAAO,SAAS,SAC3B,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAsB,EAAE,IAAI;EAEhE,IAAI;AACJ,MAAI,gBAAgB,KAClB,OAAM,OAAO,KAAK,MAAM,KAAK,aAAa,CAAC;WAClC,OAAQ,KAAc,gBAAgB,WAC/C,OAAM,OAAO,KAAK,MAAO,KAAc,aAAa,CAAC;MAErD,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAuB,EAAE,IAAI;EAEjE,MAAM,aAAa,KAAK;EACxB,MAAM,eAAe,KAAK;EAC1B,MAAM,UAAU,OAAO,eAAe,YAAY,WAAW,MAAM,GAAG,WAAW,MAAM,GAAG,KAAA;EAC1F,MAAM,YACJ,iBAAiB,UACjB,iBAAiB,QACjB,iBAAiB;AAEnB,MAAI;GACF,MAAM,SAAS,QAAQ,YAAY,gBAAgB,KAAK;IAAE;IAAS;IAAW,CAAC;AAC/E,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS;IAAQ,CAAC;WACrC,KAAK;AACZ,UAAO,EAAE,KACP;IAAE,IAAI;IAAO,OAAO,eAAe,QAAQ,IAAI,UAAU;IAAkB,EAC3E,IACD;;GAEH;AAEF,eAAc,OAAO,oBAAoB,MAAM;EAC7C,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK;AAC5B,MAAI,CAAC,GACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAc,EAAE,IAAI;AAExD,MAAI;AACF,WAAQ,YAAY,YAAY,GAAG;AACnC,UAAO,EAAE,KAAK,EAAE,IAAI,MAAM,CAAC;WACpB,KAAK;AACZ,UAAO,EAAE,KACP;IAAE,IAAI;IAAO,OAAO,eAAe,QAAQ,IAAI,UAAU;IAAiB,EAC1E,IACD;;GAEH"}
+{"version":3,"file":"commands-skills.js","names":[],"sources":["../../../../../src/gateway/hono/routes/commands-skills.ts"],"sourcesContent":["import type { Hono } from 'hono';\n\nimport { commandRegistry } from '../../../chat-commands/index.js';\nimport { isRegisteredProvider } from '../../../agent/skills/skills-marketplace.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\n\nfunction parseMarketplaceProviderQuery(raw: string | undefined): string | undefined {\n  const v = raw?.trim().toLowerCase();\n  if (v && isRegisteredProvider(v)) return v;\n  return undefined;\n}\n\nexport function registerCommandsSkillsRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  const { service } = deps;\n\n  // ========== Chat slash commands (CommandRegistry) ==========\n\n  authenticated.get('/api/commands', (c) => {\n    const all = commandRegistry.list();\n    const commands = all\n      .filter((cmd) => cmd.scope.includes('global') || cmd.scope.includes('private'))\n      .map((cmd) => ({\n        id: cmd.id,\n        name: cmd.name,\n        aliases: cmd.aliases ?? [],\n        description: cmd.description,\n        category: cmd.category,\n        scope: cmd.scope,\n        acceptsArgs: cmd.acceptsArgs ?? false,\n        examples: cmd.examples ?? [],\n      }));\n    const extensionCommands = all\n      .filter((cmd) => cmd.category === 'extension')\n      .map((cmd) => ({\n        id: cmd.id,\n        name: cmd.name,\n        description: cmd.description,\n        extensionId: cmd.id.startsWith('ext.') ? cmd.id.split('.')[1] : undefined,\n      }));\n    return c.json({ ok: true, payload: { commands, extensionCommands } });\n  });\n\n  // ========== Skills (managed global skills under ~/.xopc/skills) ==========\n\n  authenticated.get('/api/chat/skills', (c) => {\n    const agentId = c.req.query('agentId')?.trim() || service.getConfig().agents?.default || 'main';\n    const payload = service.marketplace.getAgentSkillsApi(agentId);\n    return c.json({ ok: true, payload });\n  });\n\n  authenticated.get('/api/skills', (c) => {\n    const payload = service.marketplace.getSkillsApi();\n    return c.json({ ok: true, payload });\n  });\n\n  authenticated.get('/api/skills/status', (c) => {\n    const payload = service.marketplace.getSkillsStatusApi();\n    return c.json({ ok: true, payload });\n  });\n\n  authenticated.get('/api/skills/:skillName/content', (c) => {\n    const raw = c.req.param('skillName');\n    if (!raw) {\n      return c.json({ ok: false, error: 'Missing skill name' }, 400);\n    }\n    let skillName: string;\n    try {\n      skillName = decodeURIComponent(raw);\n    } catch {\n      return c.json({ ok: false, error: 'Invalid skill name' }, 400);\n    }\n    const data = service.marketplace.getSkillMarkdownSource(skillName);\n    if (!data) {\n      return c.json({ ok: false, error: 'Skill not found' }, 404);\n    }\n    return c.json({ ok: true, payload: data });\n  });\n\n  authenticated.post('/api/skills/reload', (c) => {\n    service.marketplace.reloadSkills();\n    return c.json({ ok: true });\n  });\n\n  authenticated.patch('/api/skills/enabled', async (c) => {\n    let body: { skillName?: unknown; enabled?: unknown };\n    try {\n      body = (await c.req.json()) as { skillName?: unknown; enabled?: unknown };\n    } catch {\n      return c.json({ ok: false, error: 'Invalid JSON' }, 400);\n    }\n    const skillName = typeof body.skillName === 'string' ? body.skillName.trim() : '';\n    const enabled = body.enabled;\n    if (!skillName || typeof enabled !== 'boolean') {\n      return c.json({ ok: false, error: 'Expected { skillName: string, enabled: boolean }' }, 400);\n    }\n    try {\n      service.marketplace.patchSkillEnabled(skillName, enabled);\n      return c.json({ ok: true });\n    } catch (err) {\n      return c.json(\n        { ok: false, error: err instanceof Error ? err.message : 'Update failed' },\n        400,\n      );\n    }\n  });\n\n  authenticated.get('/api/skills/marketplace', async (c) => {\n    const q = c.req.query('q')?.trim() ?? '';\n    const pageRaw = c.req.query('page');\n    const pageSizeRaw = c.req.query('pageSize');\n    const sortRaw = c.req.query('sort');\n    const page = pageRaw != null && pageRaw !== '' ? Math.max(1, Number(pageRaw) || 1) : undefined;\n    const pageSize =\n      pageSizeRaw != null && pageSizeRaw !== ''\n        ? Math.min(50, Math.max(1, Number(pageSizeRaw) || 20))\n        : undefined;\n    const sort =\n      sortRaw === 'newest' || sortRaw === 'downloads' ? sortRaw : undefined;\n    const category = c.req.query('category')?.trim() ?? '';\n    const provider = parseMarketplaceProviderQuery(c.req.query('provider'));\n    try {\n      const payload = await service.marketplace.fetchSkillsCatalog(\n        {\n          q: q || undefined,\n          page,\n          pageSize,\n          sort,\n          category: category || undefined,\n        },\n        provider,\n      );\n      return c.json({ ok: true, payload });\n    } catch (err) {\n      return c.json(\n        { ok: false, error: err instanceof Error ? err.message : 'Marketplace request failed' },\n        502,\n      );\n    }\n  });\n\n  authenticated.get('/api/skills/marketplace/provider', async (c) => {\n    const info = await service.marketplace.getSkillsProvider();\n    return c.json({ ok: true, payload: info });\n  });\n\n  /** All registered marketplace providers (built-in + extension-contributed). */\n  authenticated.get('/api/skills/marketplace/providers', async (c) => {\n    const [providers, current] = await Promise.all([\n      service.marketplace.getSkillsProviders(),\n      service.marketplace.getSkillsProvider(),\n    ]);\n    return c.json({ ok: true, payload: { providers, current: current.provider } });\n  });\n\n  authenticated.get('/api/skills/marketplace/categories', async (c) => {\n    const provider = parseMarketplaceProviderQuery(c.req.query('provider'));\n    try {\n      const payload = await service.marketplace.fetchSkillsCategories(provider);\n      return c.json({ ok: true, payload });\n    } catch (err) {\n      return c.json(\n        { ok: false, error: err instanceof Error ? err.message : 'Marketplace categories failed' },\n        502,\n      );\n    }\n  });\n\n  authenticated.get('/api/skills/marketplace/packages/:pkgName', async (c) => {\n    const raw = c.req.param('pkgName');\n    if (!raw) {\n      return c.json({ ok: false, error: 'Missing package name' }, 400);\n    }\n    let pkgName: string;\n    try {\n      pkgName = decodeURIComponent(raw);\n    } catch {\n      return c.json({ ok: false, error: 'Invalid package name' }, 400);\n    }\n    try {\n      const provider = parseMarketplaceProviderQuery(c.req.query('provider'));\n      const payload = await service.marketplace.fetchSkillsPackageDetail(pkgName, provider);\n      return c.json({ ok: true, payload });\n    } catch (err) {\n      return c.json(\n        { ok: false, error: err instanceof Error ? err.message : 'Marketplace request failed' },\n        502,\n      );\n    }\n  });\n\n  authenticated.post('/api/skills/marketplace/install', async (c) => {\n    let body: { name?: unknown; version?: unknown; overwrite?: unknown; provider?: unknown };\n    try {\n      body = (await c.req.json()) as typeof body;\n    } catch {\n      return c.json({ ok: false, error: 'Invalid JSON' }, 400);\n    }\n    const name = typeof body.name === 'string' ? body.name.trim() : '';\n    const version = typeof body.version === 'string' ? body.version.trim() : undefined;\n    const overwrite =\n      body.overwrite === true ||\n      body.overwrite === 'true' ||\n      body.overwrite === '1';\n    const provider = parseMarketplaceProviderQuery(\n      typeof body.provider === 'string' ? body.provider : undefined,\n    );\n    if (!name) {\n      return c.json({ ok: false, error: 'Expected { name: string, version?: string, overwrite?: boolean }' }, 400);\n    }\n    try {\n      const payload = await service.marketplace.installSkill({ name, version, overwrite, provider });\n      return c.json({ ok: true, payload });\n    } catch (err) {\n      return c.json(\n        { ok: false, error: err instanceof Error ? err.message : 'Install failed' },\n        400,\n      );\n    }\n  });\n\n  authenticated.post('/api/skills/upload', async (c) => {\n    let body: Record<string, unknown>;\n    try {\n      body = await c.req.parseBody({ all: true });\n    } catch {\n      return c.json({ ok: false, error: 'Invalid multipart body' }, 400);\n    }\n    const file = body['file'];\n    if (!file || typeof file !== 'object') {\n      return c.json({ ok: false, error: 'Missing file field' }, 400);\n    }\n    let buf: Buffer;\n    if (file instanceof File) {\n      buf = Buffer.from(await file.arrayBuffer());\n    } else if (typeof (file as Blob).arrayBuffer === 'function') {\n      buf = Buffer.from(await (file as Blob).arrayBuffer());\n    } else {\n      return c.json({ ok: false, error: 'Invalid file upload' }, 400);\n    }\n    const skillIdRaw = body['skillId'];\n    const overwriteRaw = body['overwrite'];\n    const skillId = typeof skillIdRaw === 'string' && skillIdRaw.trim() ? skillIdRaw.trim() : undefined;\n    const overwrite =\n      overwriteRaw === 'true' ||\n      overwriteRaw === true ||\n      overwriteRaw === '1';\n\n    try {\n      const result = service.marketplace.installSkillZip(buf, { skillId, overwrite });\n      return c.json({ ok: true, payload: result });\n    } catch (err) {\n      return c.json(\n        { ok: false, error: err instanceof Error ? err.message : 'Install failed' },\n        400,\n      );\n    }\n  });\n\n  authenticated.delete('/api/skills/:id', (c) => {\n    const id = c.req.param('id');\n    if (!id) {\n      return c.json({ ok: false, error: 'Missing id' }, 400);\n    }\n    try {\n      service.marketplace.deleteSkill(id);\n      return c.json({ ok: true });\n    } catch (err) {\n      return c.json(\n        { ok: false, error: err instanceof Error ? err.message : 'Delete failed' },\n        400,\n      );\n    }\n  });\n}\n"],"mappings":";;;;;AAMA,SAAS,8BAA8B,KAA6C;CAClF,MAAM,IAAI,KAAK,MAAM,CAAC,aAAa;AACnC,KAAI,KAAK,qBAAqB,EAAE,CAAE,QAAO;;AAI3C,SAAgB,6BAA6B,eAAqB,MAAoC;CACpG,MAAM,EAAE,YAAY;AAIpB,eAAc,IAAI,kBAAkB,MAAM;EACxC,MAAM,MAAM,gBAAgB,MAAM;EAClC,MAAM,WAAW,IACd,QAAQ,QAAQ,IAAI,MAAM,SAAS,SAAS,IAAI,IAAI,MAAM,SAAS,UAAU,CAAC,CAC9E,KAAK,SAAS;GACb,IAAI,IAAI;GACR,MAAM,IAAI;GACV,SAAS,IAAI,WAAW,EAAE;GAC1B,aAAa,IAAI;GACjB,UAAU,IAAI;GACd,OAAO,IAAI;GACX,aAAa,IAAI,eAAe;GAChC,UAAU,IAAI,YAAY,EAAE;GAC7B,EAAE;EACL,MAAM,oBAAoB,IACvB,QAAQ,QAAQ,IAAI,aAAa,YAAY,CAC7C,KAAK,SAAS;GACb,IAAI,IAAI;GACR,MAAM,IAAI;GACV,aAAa,IAAI;GACjB,aAAa,IAAI,GAAG,WAAW,OAAO,GAAG,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,KAAA;GACjE,EAAE;AACL,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;IAAE;IAAU;IAAmB;GAAE,CAAC;GACrE;AAIF,eAAc,IAAI,qBAAqB,MAAM;EAC3C,MAAM,UAAU,EAAE,IAAI,MAAM,UAAU,EAAE,MAAM,IAAI,QAAQ,WAAW,CAAC,QAAQ,WAAW;EACzF,MAAM,UAAU,QAAQ,YAAY,kBAAkB,QAAQ;AAC9D,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM;GAAS,CAAC;GACpC;AAEF,eAAc,IAAI,gBAAgB,MAAM;EACtC,MAAM,UAAU,QAAQ,YAAY,cAAc;AAClD,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM;GAAS,CAAC;GACpC;AAEF,eAAc,IAAI,uBAAuB,MAAM;EAC7C,MAAM,UAAU,QAAQ,YAAY,oBAAoB;AACxD,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM;GAAS,CAAC;GACpC;AAEF,eAAc,IAAI,mCAAmC,MAAM;EACzD,MAAM,MAAM,EAAE,IAAI,MAAM,YAAY;AACpC,MAAI,CAAC,IACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAsB,EAAE,IAAI;EAEhE,IAAI;AACJ,MAAI;AACF,eAAY,mBAAmB,IAAI;UAC7B;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAAsB,EAAE,IAAI;;EAEhE,MAAM,OAAO,QAAQ,YAAY,uBAAuB,UAAU;AAClE,MAAI,CAAC,KACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAmB,EAAE,IAAI;AAE7D,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;GAAM,CAAC;GAC1C;AAEF,eAAc,KAAK,uBAAuB,MAAM;AAC9C,UAAQ,YAAY,cAAc;AAClC,SAAO,EAAE,KAAK,EAAE,IAAI,MAAM,CAAC;GAC3B;AAEF,eAAc,MAAM,uBAAuB,OAAO,MAAM;EACtD,IAAI;AACJ,MAAI;AACF,UAAQ,MAAM,EAAE,IAAI,MAAM;UACpB;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAAgB,EAAE,IAAI;;EAE1D,MAAM,YAAY,OAAO,KAAK,cAAc,WAAW,KAAK,UAAU,MAAM,GAAG;EAC/E,MAAM,UAAU,KAAK;AACrB,MAAI,CAAC,aAAa,OAAO,YAAY,UACnC,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAoD,EAAE,IAAI;AAE9F,MAAI;AACF,WAAQ,YAAY,kBAAkB,WAAW,QAAQ;AACzD,UAAO,EAAE,KAAK,EAAE,IAAI,MAAM,CAAC;WACpB,KAAK;AACZ,UAAO,EAAE,KACP;IAAE,IAAI;IAAO,OAAO,eAAe,QAAQ,IAAI,UAAU;IAAiB,EAC1E,IACD;;GAEH;AAEF,eAAc,IAAI,2BAA2B,OAAO,MAAM;EACxD,MAAM,IAAI,EAAE,IAAI,MAAM,IAAI,EAAE,MAAM,IAAI;EACtC,MAAM,UAAU,EAAE,IAAI,MAAM,OAAO;EACnC,MAAM,cAAc,EAAE,IAAI,MAAM,WAAW;EAC3C,MAAM,UAAU,EAAE,IAAI,MAAM,OAAO;EACnC,MAAM,OAAO,WAAW,QAAQ,YAAY,KAAK,KAAK,IAAI,GAAG,OAAO,QAAQ,IAAI,EAAE,GAAG,KAAA;EACrF,MAAM,WACJ,eAAe,QAAQ,gBAAgB,KACnC,KAAK,IAAI,IAAI,KAAK,IAAI,GAAG,OAAO,YAAY,IAAI,GAAG,CAAC,GACpD,KAAA;EACN,MAAM,OACJ,YAAY,YAAY,YAAY,cAAc,UAAU,KAAA;EAC9D,MAAM,WAAW,EAAE,IAAI,MAAM,WAAW,EAAE,MAAM,IAAI;EACpD,MAAM,WAAW,8BAA8B,EAAE,IAAI,MAAM,WAAW,CAAC;AACvE,MAAI;GACF,MAAM,UAAU,MAAM,QAAQ,YAAY,mBACxC;IACE,GAAG,KAAK,KAAA;IACR;IACA;IACA;IACA,UAAU,YAAY,KAAA;IACvB,EACD,SACD;AACD,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM;IAAS,CAAC;WAC7B,KAAK;AACZ,UAAO,EAAE,KACP;IAAE,IAAI;IAAO,OAAO,eAAe,QAAQ,IAAI,UAAU;IAA8B,EACvF,IACD;;GAEH;AAEF,eAAc,IAAI,oCAAoC,OAAO,MAAM;EACjE,MAAM,OAAO,MAAM,QAAQ,YAAY,mBAAmB;AAC1D,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;GAAM,CAAC;GAC1C;;AAGF,eAAc,IAAI,qCAAqC,OAAO,MAAM;EAClE,MAAM,CAAC,WAAW,WAAW,MAAM,QAAQ,IAAI,CAC7C,QAAQ,YAAY,oBAAoB,EACxC,QAAQ,YAAY,mBAAmB,CACxC,CAAC;AACF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;IAAE;IAAW,SAAS,QAAQ;IAAU;GAAE,CAAC;GAC9E;AAEF,eAAc,IAAI,sCAAsC,OAAO,MAAM;EACnE,MAAM,WAAW,8BAA8B,EAAE,IAAI,MAAM,WAAW,CAAC;AACvE,MAAI;GACF,MAAM,UAAU,MAAM,QAAQ,YAAY,sBAAsB,SAAS;AACzE,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM;IAAS,CAAC;WAC7B,KAAK;AACZ,UAAO,EAAE,KACP;IAAE,IAAI;IAAO,OAAO,eAAe,QAAQ,IAAI,UAAU;IAAiC,EAC1F,IACD;;GAEH;AAEF,eAAc,IAAI,6CAA6C,OAAO,MAAM;EAC1E,MAAM,MAAM,EAAE,IAAI,MAAM,UAAU;AAClC,MAAI,CAAC,IACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAwB,EAAE,IAAI;EAElE,IAAI;AACJ,MAAI;AACF,aAAU,mBAAmB,IAAI;UAC3B;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAAwB,EAAE,IAAI;;AAElE,MAAI;GACF,MAAM,WAAW,8BAA8B,EAAE,IAAI,MAAM,WAAW,CAAC;GACvE,MAAM,UAAU,MAAM,QAAQ,YAAY,yBAAyB,SAAS,SAAS;AACrF,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM;IAAS,CAAC;WAC7B,KAAK;AACZ,UAAO,EAAE,KACP;IAAE,IAAI;IAAO,OAAO,eAAe,QAAQ,IAAI,UAAU;IAA8B,EACvF,IACD;;GAEH;AAEF,eAAc,KAAK,mCAAmC,OAAO,MAAM;EACjE,IAAI;AACJ,MAAI;AACF,UAAQ,MAAM,EAAE,IAAI,MAAM;UACpB;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAAgB,EAAE,IAAI;;EAE1D,MAAM,OAAO,OAAO,KAAK,SAAS,WAAW,KAAK,KAAK,MAAM,GAAG;EAChE,MAAM,UAAU,OAAO,KAAK,YAAY,WAAW,KAAK,QAAQ,MAAM,GAAG,KAAA;EACzE,MAAM,YACJ,KAAK,cAAc,QACnB,KAAK,cAAc,UACnB,KAAK,cAAc;EACrB,MAAM,WAAW,8BACf,OAAO,KAAK,aAAa,WAAW,KAAK,WAAW,KAAA,EACrD;AACD,MAAI,CAAC,KACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAoE,EAAE,IAAI;AAE9G,MAAI;GACF,MAAM,UAAU,MAAM,QAAQ,YAAY,aAAa;IAAE;IAAM;IAAS;IAAW;IAAU,CAAC;AAC9F,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM;IAAS,CAAC;WAC7B,KAAK;AACZ,UAAO,EAAE,KACP;IAAE,IAAI;IAAO,OAAO,eAAe,QAAQ,IAAI,UAAU;IAAkB,EAC3E,IACD;;GAEH;AAEF,eAAc,KAAK,sBAAsB,OAAO,MAAM;EACpD,IAAI;AACJ,MAAI;AACF,UAAO,MAAM,EAAE,IAAI,UAAU,EAAE,KAAK,MAAM,CAAC;UACrC;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAA0B,EAAE,IAAI;;EAEpE,MAAM,OAAO,KAAK;AAClB,MAAI,CAAC,QAAQ,OAAO,SAAS,SAC3B,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAsB,EAAE,IAAI;EAEhE,IAAI;AACJ,MAAI,gBAAgB,KAClB,OAAM,OAAO,KAAK,MAAM,KAAK,aAAa,CAAC;WAClC,OAAQ,KAAc,gBAAgB,WAC/C,OAAM,OAAO,KAAK,MAAO,KAAc,aAAa,CAAC;MAErD,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAuB,EAAE,IAAI;EAEjE,MAAM,aAAa,KAAK;EACxB,MAAM,eAAe,KAAK;EAC1B,MAAM,UAAU,OAAO,eAAe,YAAY,WAAW,MAAM,GAAG,WAAW,MAAM,GAAG,KAAA;EAC1F,MAAM,YACJ,iBAAiB,UACjB,iBAAiB,QACjB,iBAAiB;AAEnB,MAAI;GACF,MAAM,SAAS,QAAQ,YAAY,gBAAgB,KAAK;IAAE;IAAS;IAAW,CAAC;AAC/E,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS;IAAQ,CAAC;WACrC,KAAK;AACZ,UAAO,EAAE,KACP;IAAE,IAAI;IAAO,OAAO,eAAe,QAAQ,IAAI,UAAU;IAAkB,EAC3E,IACD;;GAEH;AAEF,eAAc,OAAO,oBAAoB,MAAM;EAC7C,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK;AAC5B,MAAI,CAAC,GACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAc,EAAE,IAAI;AAExD,MAAI;AACF,WAAQ,YAAY,YAAY,GAAG;AACnC,UAAO,EAAE,KAAK,EAAE,IAAI,MAAM,CAAC;WACpB,KAAK;AACZ,UAAO,EAAE,KACP;IAAE,IAAI;IAAO,OAAO,eAAe,QAAQ,IAAI,UAAU;IAAiB,EAC1E,IACD;;GAEH"}

package/dist/src/gateway/hono/routes/config-patch/misc.d.ts

@@ -1,6 +1,6 @@
 /**
  * `PATCH /api/config` — tail sections that are each <50 lines:
- *   update / cron / goals / session / gateway.{skillsMarketplaceProvider,
+ *   update / goals / session / gateway.{skillsMarketplaceProvider,
  *   skillsStoreBaseUrl} / providers / providersConfig / stt / tts / tools /
  *   tunnel / bindings / mcp.
  *

package/dist/src/gateway/hono/routes/config-patch/misc.js

@@ -1,7 +1,8 @@
 import { BindingsConfigSchema, BrowserConfigSchema, McpConfigSchema, init_schema } from "../../../../config/schema.js";
 import { CredentialResolver, init_credentials } from "../../../../auth/credentials.js";
 import { canonicalizeConfiguredMcpServer } from "../../../../config/mcp-config-normalize.js";
-import { mergeCronConfigPatch, mergeGatewaySkillsMarketplacePatch, mergeGoalsConfigPatch, mergeSessionConfigPatch, mergeUpdateConfigPatch } from "../../../../config/web-patch.js";
+import { setTuiDefaultAgentConfig } from "../../../../commands/agents.config.js";
+import { mergeGatewaySkillsMarketplacePatch, mergeGoalsConfigPatch, mergeSessionConfigPatch, mergeUpdateConfigPatch } from "../../../../config/web-patch.js";
 import { assertGatewayAuthConfigured, resolveGatewayAuth } from "../../../auth.js";
 import { isMaskedSecretPatchValue } from "../../lib/mask-secret-length.js";
 import { applyToolsWebPatch } from "../../../config-tools-web.js";
@@ -17,11 +18,6 @@ async function applyMiscPatch(config, body) {
 		const updateResult = mergeUpdateConfigPatch(config, body.update);
 		if (updateResult.ok === false) return patchError(updateResult.message);
 	}
-	if (body.cron !== void 0) {
-		if (typeof body.cron !== "object" || body.cron === null || Array.isArray(body.cron)) return patchError("cron must be an object");
-		const cronResult = mergeCronConfigPatch(config, body.cron);
-		if (cronResult.ok === false) return patchError(cronResult.message);
-	}
 	if (body.goals !== void 0) {
 		if (typeof body.goals !== "object" || body.goals === null || Array.isArray(body.goals)) return patchError("goals must be an object");
 		const goalsResult = mergeGoalsConfigPatch(config, body.goals);
@@ -32,6 +28,16 @@ async function applyMiscPatch(config, body) {
 		const sessionResult = mergeSessionConfigPatch(config, body.session);
 		if (sessionResult.ok === false) return patchError(sessionResult.message);
 	}
+	if (body.tui !== void 0) {
+		if (typeof body.tui !== "object" || body.tui === null || Array.isArray(body.tui)) return patchError("tui must be an object");
+		const tuiPatch = body.tui;
+		if (tuiPatch.defaultAgent !== void 0) {
+			if (typeof tuiPatch.defaultAgent !== "string" || !tuiPatch.defaultAgent.trim()) return patchError("tui.defaultAgent must be a non-empty string");
+			const result = setTuiDefaultAgentConfig(config, tuiPatch.defaultAgent);
+			if (result.ok === false) return patchError(result.message);
+			config.tui = result.config.tui;
+		}
+	}
 	if (body.browser !== void 0) {
 		if (typeof body.browser !== "object" || body.browser === null || Array.isArray(body.browser)) return patchError("browser must be an object");
 		const parsed = BrowserConfigSchema.safeParse(body.browser);