@xopcai/xopc 0.0.123 → 0.0.125

package/dist/src/gateway/hono/app.js.map

@@ -1 +1 @@
-{"version":3,"file":"app.js","names":[],"sources":["../../../../src/gateway/hono/app.ts"],"sourcesContent":["import { Hono } from 'hono';\nimport type { Context } from 'hono';\nimport { cors } from 'hono/cors';\nimport { createMiddleware } from 'hono/factory';\nimport { bodyLimit } from 'hono/body-limit';\nimport { getConnInfo } from '@hono/node-server/conninfo';\n\nimport { resolveGatewayEffectiveHost } from '../../config/gateway-bind.js';\nimport { createLogger } from '../../utils/logger.js';\nimport type { GatewayService } from '../service.js';\nimport { resolveAllowedBrowserOrigins, resolveGatewayServiceListenPort } from '../host.js';\nimport { loadTunnelState } from '../../tunnel/tunnel-state.js';\nimport { maxWebchatAgentRequestBodyBytes } from '../chat-limits.js';\nimport { buildGatewayConsoleCspHeader } from '../security/csp.js';\nimport { checkBrowserOrigin } from '../security/origin-check.js';\nimport { isLoopbackIpAddress, isTrustedProxyAddress } from '../client-ip.js';\nimport { resolveReverseProxyPublicUrl } from '../public-url.js';\nimport { auth } from './middleware/auth.js';\nimport { operatorScopes } from './middleware/scopes.js';\nimport {\n  createChannelRateLimitMiddleware,\n  createStrictRateLimitMiddleware,\n} from './middleware/strict-rate-limit.js';\nimport { logContextMiddleware } from './middleware/log-context.js';\nimport { logger } from './middleware/logger.js';\nimport { routeErrorMiddleware } from './middleware/route-errors.js';\nimport { registerPublicExtensionAssetRoutes } from './routes/auth-registry-extensions.js';\nimport { registerAuthenticatedRoutes } from './routes/index.js';\nimport { registerPublicGatewayRoutes } from './routes/public-gateway.js';\nimport { resetLazyRouteBundlesForTests } from './routes/lazy-fallback.js';\nimport { prewarmStaticUiCache } from './lib/static-ui.js';\nimport { registerSiteShareMiddleware } from '../../share/site-share-router.js';\nconst log = createLogger('Gateway:App');\n\nexport interface HonoAppConfig {\n  service: GatewayService;\n  token?: string;\n}\n\n/**\n * Extension sandbox HTML under `/api/extensions/:id/assets/*` ships its own CSP\n * (`frame-ancestors 'self'`). The global gateway middleware must not overwrite it\n * with `frame-ancestors 'none'` / `X-Frame-Options: DENY`, or the console cannot embed iframes.\n */\nexport function isExtensionGatewayUiAssetPath(path: string): boolean {\n  return /^\\/api\\/extensions\\/[^/]+\\/assets\\//.test(path);\n}\n\nexport function createHonoApp(config: HonoAppConfig): Hono {\n  if (process.env.VITEST) {\n    resetLazyRouteBundlesForTests();\n  }\n  const { service, token } = config;\n  const app = new Hono();\n\n  const gatewayPort = resolveGatewayServiceListenPort(service);\n\n  const resolveBrowserOrigins = (): string[] =>\n    resolveAllowedBrowserOrigins({\n      configuredOrigins: service.currentConfig.gateway.corsOrigins,\n      port: gatewayPort,\n      bindHost: resolveGatewayEffectiveHost(service.currentConfig),\n      tunnelPublicUrl: loadTunnelState()?.publicUrl,\n      reverseProxyPublicUrl: resolveReverseProxyPublicUrl(service.currentConfig),\n    });\n\n  /**\n   * TCP source for the in-flight request, normalized for trusted-proxy checks.\n   * Returns undefined when the runtime doesn't expose conninfo (tests, mocks).\n   */\n  const resolveRequestRemoteAddress = (c: Context): string | undefined => {\n    try {\n      return getConnInfo(c).remote.address;\n    } catch {\n      return undefined;\n    }\n  };\n\n  /**\n   * A request's TCP source qualifies as a \"trusted proxy hop\" when it's\n   * loopback (the user's own machine, where any reverse proxy lives) or\n   * listed in `gateway.trustedProxies`. We use this signal to safely\n   * auto-allow same-host Origins through CSRF without requiring a manual\n   * `corsOrigins` entry for every reverse-proxy hostname.\n   */\n  const isRequestFromTrustedProxy = (c: Context): boolean => {\n    const remote = resolveRequestRemoteAddress(c);\n    if (!remote) return false;\n    if (isLoopbackIpAddress(remote)) return true;\n    return isTrustedProxyAddress(remote, service.currentConfig.gateway?.trustedProxies);\n  };\n\n  app.use(logContextMiddleware());\n  app.use(logger({\n    trustedProxies: service.currentConfig.gateway?.trustedProxies,\n    allowRealIpFallback: service.currentConfig.gateway?.allowRealIpFallback === true,\n  }));\n\n  // Site-share middleware runs BEFORE CORS/CSP — it owns the request when the\n  // Host header matches `*.<publicHostSuffix>` (default `*.share.xopc.ai`) or\n  // the path starts with `/site/:token/`. Otherwise it falls through.\n  registerSiteShareMiddleware(app, service);\n  app.use(\n    cors({\n      origin: (origin) => {\n        const allowed = resolveBrowserOrigins();\n        if (!origin) {\n          return allowed[0] ?? `http://127.0.0.1:${gatewayPort}`;\n        }\n        const normalized = origin.toLowerCase();\n        const hit = allowed.find((entry) => entry.toLowerCase() === normalized);\n        if (hit) return origin;\n        return allowed.includes('*') ? '*' : '';\n      },\n      allowMethods: ['GET', 'POST', 'PATCH', 'DELETE', 'OPTIONS'],\n      allowHeaders: ['Content-Type', 'Authorization', 'Accept', 'X-Session-Id', 'Last-Event-ID'],\n      credentials: true,\n      maxAge: 86400,\n    }),\n  );\n\n  // Build CSP header once at startup (no inline script hashes needed for SPA)\n  const gatewayConsoleCsp = buildGatewayConsoleCspHeader();\n\n  // Security headers middleware\n  app.use(createMiddleware(async (c, next) => {\n    await next();\n    if (isExtensionGatewayUiAssetPath(c.req.path)) {\n      return;\n    }\n    c.header('X-Frame-Options', 'DENY');\n    c.header('X-Content-Type-Options', 'nosniff');\n    c.header('Referrer-Policy', 'strict-origin-when-cross-origin');\n    c.header('X-XSS-Protection', '1; mode=block');\n    // microphone=(self): allow same-origin chat voice (composer). microphone=() breaks packaged Electron loading the gateway SPA.\n    c.header('Permissions-Policy', 'camera=(), microphone=(self), geolocation=()');\n    c.header('Content-Security-Policy', gatewayConsoleCsp);\n  }));\n\n  // Browser Origin check middleware for API routes (CSRF protection).\n  // Non-browser requests (no Origin header) pass through — they are\n  // authenticated by the token middleware instead.\n  const allowHostHeaderOriginFallback =\n    service.currentConfig.gateway?.dangerouslyAllowHostHeaderOriginFallback === true;\n  app.use('/api/*', createMiddleware(async (c, next) => {\n    // Sandboxed extension iframes (no allow-same-origin) send `Origin: null`.\n    // `checkBrowserOrigin` rejects that; these routes rely on CSP instead\n    // (`registerPublicExtensionAssetRoutes`).\n    if (isExtensionGatewayUiAssetPath(c.req.path)) {\n      return next();\n    }\n\n    const origin = c.req.header('origin');\n    if (!origin || origin.trim().toLowerCase() === 'null') {\n      // Native apps / opaque origins — authenticated via Bearer token\n      return next();\n    }\n\n    const result = checkBrowserOrigin({\n      requestHost: c.req.header('host'),\n      origin,\n      allowedOrigins: resolveBrowserOrigins(),\n      allowHostHeaderOriginFallback,\n      autoAllowSameHostFromTrustedProxy: isRequestFromTrustedProxy(c),\n      isLocalClient: false,\n    });\n\n    if (!result.ok) {\n      log.warn(\n        {\n          origin,\n          requestHost: c.req.header('host'),\n          reason: 'reason' in result ? result.reason : 'unknown',\n          path: c.req.path,\n          method: c.req.method,\n        },\n        `Browser origin check failed: ${origin} not in allowed list`,\n      );\n      return c.json({ error: 'Forbidden', message: 'Origin not allowed' }, 403);\n    }\n\n    return next();\n  }));\n\n  const DEFAULT_API_BODY_MAX = 1 * 1024 * 1024;\n  const SKILL_UPLOAD_BODY_MAX = 10 * 1024 * 1024;\n  const NOTE_MEDIA_BODY_MAX = 25 * 1024 * 1024;\n  const VOICE_TRANSCRIBE_BODY_MAX = 35 * 1024 * 1024;\n  const WEBCHAT_AGENT_BODY_MAX = maxWebchatAgentRequestBodyBytes();\n\n  const isNoteMediaUploadRequest = (path: string, method: string, contentType: string | undefined): boolean => {\n    if (method !== 'POST') return false;\n    if (/^\\/api\\/notes\\/[^/]+\\/media$/.test(path)) return true;\n    return path === '/api/notes' && contentType?.includes('multipart/form-data') === true;\n  };\n\n  app.use('/api/skills/upload', bodyLimit({\n    maxSize: SKILL_UPLOAD_BODY_MAX,\n    onError: (c) => {\n      log.warn({ path: c.req.path, maxSizeMb: 10 }, 'Request body too large: skills upload exceeds 10MB limit');\n      return c.json({ error: 'Skill package too large', maxSize: '10MB' }, 413);\n    },\n  }));\n\n  app.use('/api/*', async (c, next) => {\n    const contentType = c.req.header('content-type');\n    const maxSize = c.req.path === '/api/agent'\n      ? WEBCHAT_AGENT_BODY_MAX\n      : c.req.path === '/api/skills/upload'\n        ? SKILL_UPLOAD_BODY_MAX\n        : c.req.path === '/api/voice/transcribe'\n          ? VOICE_TRANSCRIBE_BODY_MAX\n          : isNoteMediaUploadRequest(c.req.path, c.req.method, contentType)\n            ? NOTE_MEDIA_BODY_MAX\n            : DEFAULT_API_BODY_MAX;\n    const maxSizeMb = Math.ceil(maxSize / (1024 * 1024));\n    return bodyLimit({\n      maxSize,\n      onError: (ctx) => {\n        log.warn({ path: ctx.req.path, maxSizeMb }, `Request body too large: exceeds ${maxSizeMb}MB limit`);\n        return ctx.json({ error: 'Request body too large', maxSize: `${maxSizeMb}MB` }, 413);\n      },\n    })(c, next);\n  });\n\n  registerPublicGatewayRoutes(app, service);\n\n  // Extension UI assets are served without auth: sandboxed iframes (no allow-same-origin)\n  // have an opaque origin of `null` and cannot forward the ?token= from the parent HTML URL.\n  // Security is enforced by the strict CSP (frame-ancestors 'self') on every response.\n  registerPublicExtensionAssetRoutes(app, service);\n\n  const authenticated = new Hono();\n  authenticated.use(routeErrorMiddleware());\n  authenticated.use(\n    auth({\n      token,\n      getGatewayAuth: () => service.currentConfig.gateway?.auth,\n      getResolvedAuth: () => {\n        if (typeof service.getResolvedAuth === 'function') {\n          return service.getResolvedAuth();\n        }\n        return token ? { mode: 'token', token } : { mode: 'none' };\n      },\n      getTrustedProxyContext: () => ({\n        trustedProxies: service.currentConfig.gateway?.trustedProxies,\n        allowRealIpFallback: service.currentConfig.gateway?.allowRealIpFallback === true,\n      }),\n    }),\n  );\n  authenticated.use(operatorScopes());\n\n  const strictRateLimitMiddleware = createStrictRateLimitMiddleware({\n    getTrustedProxyContext: () => ({\n      trustedProxies: service.currentConfig.gateway?.trustedProxies,\n      allowRealIpFallback: service.currentConfig.gateway?.allowRealIpFallback === true,\n    }),\n  });\n  const channelRateLimitMiddleware = createChannelRateLimitMiddleware({\n    getTrustedProxyContext: () => ({\n      trustedProxies: service.currentConfig.gateway?.trustedProxies,\n      allowRealIpFallback: service.currentConfig.gateway?.allowRealIpFallback === true,\n    }),\n  });\n\n  const sseConfig = {\n    service,\n    maxSseConnections: service.currentConfig.gateway.maxSseConnections,\n  };\n\n  registerAuthenticatedRoutes(app, authenticated, {\n    service,\n    strictRateLimitMiddleware,\n    channelRateLimitMiddleware,\n    sseConfig,\n  });\n\n  const prewarm = prewarmStaticUiCache();\n  if (prewarm.loaded > 0) {\n    log.debug({ loaded: prewarm.loaded, missing: prewarm.missing }, 'Static UI cache prewarmed');\n  }\n\n  app.route('/', authenticated);\n\n  app.notFound((c) => {\n    const isApiRoute = c.req.path.startsWith('/api/');\n    const fields = { path: c.req.path, method: c.req.method };\n    if (isApiRoute) {\n      log.warn(fields, 'Route not found');\n    } else {\n      log.debug(fields, 'Route not found');\n    }\n    return c.json({ error: 'Not found' }, 404);\n  });\n\n  app.onError((err, c) => {\n    log.error(\n      {\n        err,\n        phase: 'gateway.http.unhandled',\n        path: c.req.path,\n        method: c.req.method,\n        userAgent: c.req.header('user-agent'),\n      },\n      `Hono error on ${c.req.method} ${c.req.path}: ${err instanceof Error ? err.message : String(err)}`,\n    );\n    return c.json({ error: 'Internal server error' }, 500);\n  });\n\n  return app;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;aAQqD;AAwBrD,MAAM,MAAM,aAAa,cAAc;;;;;;AAYvC,SAAgB,8BAA8B,MAAuB;AACnE,QAAO,sCAAsC,KAAK,KAAK;;AAGzD,SAAgB,cAAc,QAA6B;AACzD,KAAI,QAAQ,IAAI,OACd,gCAA+B;CAEjC,MAAM,EAAE,SAAS,UAAU;CAC3B,MAAM,MAAM,IAAI,MAAM;CAEtB,MAAM,cAAc,gCAAgC,QAAQ;CAE5D,MAAM,8BACJ,6BAA6B;EAC3B,mBAAmB,QAAQ,cAAc,QAAQ;EACjD,MAAM;EACN,UAAU,4BAA4B,QAAQ,cAAc;EAC5D,iBAAiB,iBAAiB,EAAE;EACpC,uBAAuB,6BAA6B,QAAQ,cAAc;EAC3E,CAAC;;;;;CAMJ,MAAM,+BAA+B,MAAmC;AACtE,MAAI;AACF,UAAO,YAAY,EAAE,CAAC,OAAO;UACvB;AACN;;;;;;;;;;CAWJ,MAAM,6BAA6B,MAAwB;EACzD,MAAM,SAAS,4BAA4B,EAAE;AAC7C,MAAI,CAAC,OAAQ,QAAO;AACpB,MAAI,oBAAoB,OAAO,CAAE,QAAO;AACxC,SAAO,sBAAsB,QAAQ,QAAQ,cAAc,SAAS,eAAe;;AAGrF,KAAI,IAAI,sBAAsB,CAAC;AAC/B,KAAI,IAAI,OAAO;EACb,gBAAgB,QAAQ,cAAc,SAAS;EAC/C,qBAAqB,QAAQ,cAAc,SAAS,wBAAwB;EAC7E,CAAC,CAAC;AAKH,6BAA4B,KAAK,QAAQ;AACzC,KAAI,IACF,KAAK;EACH,SAAS,WAAW;GAClB,MAAM,UAAU,uBAAuB;AACvC,OAAI,CAAC,OACH,QAAO,QAAQ,MAAM,oBAAoB;GAE3C,MAAM,aAAa,OAAO,aAAa;AAEvC,OADY,QAAQ,MAAM,UAAU,MAAM,aAAa,KAAK,WACrD,CAAE,QAAO;AAChB,UAAO,QAAQ,SAAS,IAAI,GAAG,MAAM;;EAEvC,cAAc;GAAC;GAAO;GAAQ;GAAS;GAAU;GAAU;EAC3D,cAAc;GAAC;GAAgB;GAAiB;GAAU;GAAgB;GAAgB;EAC1F,aAAa;EACb,QAAQ;EACT,CAAC,CACH;CAGD,MAAM,oBAAoB,8BAA8B;AAGxD,KAAI,IAAI,iBAAiB,OAAO,GAAG,SAAS;AAC1C,QAAM,MAAM;AACZ,MAAI,8BAA8B,EAAE,IAAI,KAAK,CAC3C;AAEF,IAAE,OAAO,mBAAmB,OAAO;AACnC,IAAE,OAAO,0BAA0B,UAAU;AAC7C,IAAE,OAAO,mBAAmB,kCAAkC;AAC9D,IAAE,OAAO,oBAAoB,gBAAgB;AAE7C,IAAE,OAAO,sBAAsB,+CAA+C;AAC9E,IAAE,OAAO,2BAA2B,kBAAkB;GACtD,CAAC;CAKH,MAAM,gCACJ,QAAQ,cAAc,SAAS,6CAA6C;AAC9E,KAAI,IAAI,UAAU,iBAAiB,OAAO,GAAG,SAAS;AAIpD,MAAI,8BAA8B,EAAE,IAAI,KAAK,CAC3C,QAAO,MAAM;EAGf,MAAM,SAAS,EAAE,IAAI,OAAO,SAAS;AACrC,MAAI,CAAC,UAAU,OAAO,MAAM,CAAC,aAAa,KAAK,OAE7C,QAAO,MAAM;EAGf,MAAM,SAAS,mBAAmB;GAChC,aAAa,EAAE,IAAI,OAAO,OAAO;GACjC;GACA,gBAAgB,uBAAuB;GACvC;GACA,mCAAmC,0BAA0B,EAAE;GAC/D,eAAe;GAChB,CAAC;AAEF,MAAI,CAAC,OAAO,IAAI;AACd,OAAI,KACF;IACE;IACA,aAAa,EAAE,IAAI,OAAO,OAAO;IACjC,QAAQ,YAAY,SAAS,OAAO,SAAS;IAC7C,MAAM,EAAE,IAAI;IACZ,QAAQ,EAAE,IAAI;IACf,EACD,gCAAgC,OAAO,sBACxC;AACD,UAAO,EAAE,KAAK;IAAE,OAAO;IAAa,SAAS;IAAsB,EAAE,IAAI;;AAG3E,SAAO,MAAM;GACb,CAAC;CAEH,MAAM,uBAAuB,IAAI,OAAO;CACxC,MAAM,wBAAwB,KAAK,OAAO;CAC1C,MAAM,sBAAsB,KAAK,OAAO;CACxC,MAAM,4BAA4B,KAAK,OAAO;CAC9C,MAAM,yBAAyB,iCAAiC;CAEhE,MAAM,4BAA4B,MAAc,QAAgB,gBAA6C;AAC3G,MAAI,WAAW,OAAQ,QAAO;AAC9B,MAAI,+BAA+B,KAAK,KAAK,CAAE,QAAO;AACtD,SAAO,SAAS,gBAAgB,aAAa,SAAS,sBAAsB,KAAK;;AAGnF,KAAI,IAAI,sBAAsB,UAAU;EACtC,SAAS;EACT,UAAU,MAAM;AACd,OAAI,KAAK;IAAE,MAAM,EAAE,IAAI;IAAM,WAAW;IAAI,EAAE,2DAA2D;AACzG,UAAO,EAAE,KAAK;IAAE,OAAO;IAA2B,SAAS;IAAQ,EAAE,IAAI;;EAE5E,CAAC,CAAC;AAEH,KAAI,IAAI,UAAU,OAAO,GAAG,SAAS;EACnC,MAAM,cAAc,EAAE,IAAI,OAAO,eAAe;EAChD,MAAM,UAAU,EAAE,IAAI,SAAS,eAC3B,yBACA,EAAE,IAAI,SAAS,uBACb,wBACA,EAAE,IAAI,SAAS,0BACb,4BACA,yBAAyB,EAAE,IAAI,MAAM,EAAE,IAAI,QAAQ,YAAY,GAC7D,sBACA;EACV,MAAM,YAAY,KAAK,KAAK,WAAW,OAAO,MAAM;AACpD,SAAO,UAAU;GACf;GACA,UAAU,QAAQ;AAChB,QAAI,KAAK;KAAE,MAAM,IAAI,IAAI;KAAM;KAAW,EAAE,mCAAmC,UAAU,UAAU;AACnG,WAAO,IAAI,KAAK;KAAE,OAAO;KAA0B,SAAS,GAAG,UAAU;KAAK,EAAE,IAAI;;GAEvF,CAAC,CAAC,GAAG,KAAK;GACX;AAEF,6BAA4B,KAAK,QAAQ;AAKzC,oCAAmC,KAAK,QAAQ;CAEhD,MAAM,gBAAgB,IAAI,MAAM;AAChC,eAAc,IAAI,sBAAsB,CAAC;AACzC,eAAc,IACZ,KAAK;EACH;EACA,sBAAsB,QAAQ,cAAc,SAAS;EACrD,uBAAuB;AACrB,OAAI,OAAO,QAAQ,oBAAoB,WACrC,QAAO,QAAQ,iBAAiB;AAElC,UAAO,QAAQ;IAAE,MAAM;IAAS;IAAO,GAAG,EAAE,MAAM,QAAQ;;EAE5D,+BAA+B;GAC7B,gBAAgB,QAAQ,cAAc,SAAS;GAC/C,qBAAqB,QAAQ,cAAc,SAAS,wBAAwB;GAC7E;EACF,CAAC,CACH;AACD,eAAc,IAAI,gBAAgB,CAAC;AAoBnC,6BAA4B,KAAK,eAAe;EAC9C;EACA,2BApBgC,gCAAgC,EAChE,+BAA+B;GAC7B,gBAAgB,QAAQ,cAAc,SAAS;GAC/C,qBAAqB,QAAQ,cAAc,SAAS,wBAAwB;GAC7E,GACF,CAe0B;EACzB,4BAfiC,iCAAiC,EAClE,+BAA+B;GAC7B,gBAAgB,QAAQ,cAAc,SAAS;GAC/C,qBAAqB,QAAQ,cAAc,SAAS,wBAAwB;GAC7E,GACF,CAU2B;EAC1B,WAAA;GARA;GACA,mBAAmB,QAAQ,cAAc,QAAQ;GAOxC;EACV,CAAC;CAEF,MAAM,UAAU,sBAAsB;AACtC,KAAI,QAAQ,SAAS,EACnB,KAAI,MAAM;EAAE,QAAQ,QAAQ;EAAQ,SAAS,QAAQ;EAAS,EAAE,4BAA4B;AAG9F,KAAI,MAAM,KAAK,cAAc;AAE7B,KAAI,UAAU,MAAM;EAClB,MAAM,aAAa,EAAE,IAAI,KAAK,WAAW,QAAQ;EACjD,MAAM,SAAS;GAAE,MAAM,EAAE,IAAI;GAAM,QAAQ,EAAE,IAAI;GAAQ;AACzD,MAAI,WACF,KAAI,KAAK,QAAQ,kBAAkB;MAEnC,KAAI,MAAM,QAAQ,kBAAkB;AAEtC,SAAO,EAAE,KAAK,EAAE,OAAO,aAAa,EAAE,IAAI;GAC1C;AAEF,KAAI,SAAS,KAAK,MAAM;AACtB,MAAI,MACF;GACE;GACA,OAAO;GACP,MAAM,EAAE,IAAI;GACZ,QAAQ,EAAE,IAAI;GACd,WAAW,EAAE,IAAI,OAAO,aAAa;GACtC,EACD,iBAAiB,EAAE,IAAI,OAAO,GAAG,EAAE,IAAI,KAAK,IAAI,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,GACjG;AACD,SAAO,EAAE,KAAK,EAAE,OAAO,yBAAyB,EAAE,IAAI;GACtD;AAEF,QAAO"}
+{"version":3,"file":"app.js","names":[],"sources":["../../../../src/gateway/hono/app.ts"],"sourcesContent":["import { Hono } from 'hono';\nimport type { Context } from 'hono';\nimport { cors } from 'hono/cors';\nimport { createMiddleware } from 'hono/factory';\nimport { bodyLimit } from 'hono/body-limit';\nimport { getConnInfo } from '@hono/node-server/conninfo';\n\nimport { resolveGatewayEffectiveHost } from '../../config/gateway-bind.js';\nimport { createLogger } from '../../utils/logger.js';\nimport type { GatewayService } from '../service.js';\nimport { resolveAllowedBrowserOrigins, resolveGatewayServiceListenPort } from '../host.js';\nimport { loadTunnelState } from '../../tunnel/tunnel-state.js';\nimport { WORK_ITEM_ATTACHMENT_UPLOAD_BODY_MAX_BYTES } from '../../work-items/index.js';\nimport { maxWebchatAgentRequestBodyBytes } from '../chat-limits.js';\nimport { buildGatewayConsoleCspHeader } from '../security/csp.js';\nimport { checkBrowserOrigin } from '../security/origin-check.js';\nimport { isLoopbackIpAddress, isTrustedProxyAddress } from '../client-ip.js';\nimport { resolveReverseProxyPublicUrl } from '../public-url.js';\nimport { auth } from './middleware/auth.js';\nimport { operatorScopes } from './middleware/scopes.js';\nimport {\n  createChannelRateLimitMiddleware,\n  createStrictRateLimitMiddleware,\n} from './middleware/strict-rate-limit.js';\nimport { logContextMiddleware } from './middleware/log-context.js';\nimport { logger } from './middleware/logger.js';\nimport { routeErrorMiddleware } from './middleware/route-errors.js';\nimport { registerPublicExtensionAssetRoutes } from './routes/auth-registry-extensions.js';\nimport { registerAuthenticatedRoutes } from './routes/index.js';\nimport { registerPublicGatewayRoutes } from './routes/public-gateway.js';\nimport { resetLazyRouteBundlesForTests } from './routes/lazy-fallback.js';\nimport { prewarmStaticUiCache } from './lib/static-ui.js';\nimport { registerSiteShareMiddleware } from '../../share/site-share-router.js';\nconst log = createLogger('Gateway:App');\n\nexport interface HonoAppConfig {\n  service: GatewayService;\n  token?: string;\n}\n\n/**\n * Extension sandbox HTML under `/api/extensions/:id/assets/*` ships its own CSP\n * (`frame-ancestors 'self'`). The global gateway middleware must not overwrite it\n * with `frame-ancestors 'none'` / `X-Frame-Options: DENY`, or the console cannot embed iframes.\n */\nexport function isExtensionGatewayUiAssetPath(path: string): boolean {\n  return /^\\/api\\/extensions\\/[^/]+\\/assets\\//.test(path);\n}\n\nexport function createHonoApp(config: HonoAppConfig): Hono {\n  if (process.env.VITEST) {\n    resetLazyRouteBundlesForTests();\n  }\n  const { service, token } = config;\n  const app = new Hono();\n\n  const gatewayPort = resolveGatewayServiceListenPort(service);\n\n  const resolveBrowserOrigins = (): string[] =>\n    resolveAllowedBrowserOrigins({\n      configuredOrigins: service.currentConfig.gateway.corsOrigins,\n      port: gatewayPort,\n      bindHost: resolveGatewayEffectiveHost(service.currentConfig),\n      tunnelPublicUrl: loadTunnelState()?.publicUrl,\n      reverseProxyPublicUrl: resolveReverseProxyPublicUrl(service.currentConfig),\n    });\n\n  /**\n   * TCP source for the in-flight request, normalized for trusted-proxy checks.\n   * Returns undefined when the runtime doesn't expose conninfo (tests, mocks).\n   */\n  const resolveRequestRemoteAddress = (c: Context): string | undefined => {\n    try {\n      return getConnInfo(c).remote.address;\n    } catch {\n      return undefined;\n    }\n  };\n\n  /**\n   * A request's TCP source qualifies as a \"trusted proxy hop\" when it's\n   * loopback (the user's own machine, where any reverse proxy lives) or\n   * listed in `gateway.trustedProxies`. We use this signal to safely\n   * auto-allow same-host Origins through CSRF without requiring a manual\n   * `corsOrigins` entry for every reverse-proxy hostname.\n   */\n  const isRequestFromTrustedProxy = (c: Context): boolean => {\n    const remote = resolveRequestRemoteAddress(c);\n    if (!remote) return false;\n    if (isLoopbackIpAddress(remote)) return true;\n    return isTrustedProxyAddress(remote, service.currentConfig.gateway?.trustedProxies);\n  };\n\n  app.use(logContextMiddleware());\n  app.use(logger({\n    trustedProxies: service.currentConfig.gateway?.trustedProxies,\n    allowRealIpFallback: service.currentConfig.gateway?.allowRealIpFallback === true,\n  }));\n\n  // Site-share middleware runs BEFORE CORS/CSP — it owns the request when the\n  // Host header matches `*.<publicHostSuffix>` (default `*.share.xopc.ai`) or\n  // the path starts with `/site/:token/`. Otherwise it falls through.\n  registerSiteShareMiddleware(app, service);\n  app.use(\n    cors({\n      origin: (origin) => {\n        const allowed = resolveBrowserOrigins();\n        if (!origin) {\n          return allowed[0] ?? `http://127.0.0.1:${gatewayPort}`;\n        }\n        const normalized = origin.toLowerCase();\n        const hit = allowed.find((entry) => entry.toLowerCase() === normalized);\n        if (hit) return origin;\n        return allowed.includes('*') ? '*' : '';\n      },\n      allowMethods: ['GET', 'POST', 'PATCH', 'DELETE', 'OPTIONS'],\n      allowHeaders: ['Content-Type', 'Authorization', 'Accept', 'X-Session-Id', 'Last-Event-ID'],\n      credentials: true,\n      maxAge: 86400,\n    }),\n  );\n\n  // Build CSP header once at startup (no inline script hashes needed for SPA)\n  const gatewayConsoleCsp = buildGatewayConsoleCspHeader();\n\n  // Security headers middleware\n  app.use(createMiddleware(async (c, next) => {\n    await next();\n    if (isExtensionGatewayUiAssetPath(c.req.path)) {\n      return;\n    }\n    c.header('X-Frame-Options', 'DENY');\n    c.header('X-Content-Type-Options', 'nosniff');\n    c.header('Referrer-Policy', 'strict-origin-when-cross-origin');\n    c.header('X-XSS-Protection', '1; mode=block');\n    // microphone=(self): allow same-origin chat voice (composer). microphone=() breaks packaged Electron loading the gateway SPA.\n    c.header('Permissions-Policy', 'camera=(), microphone=(self), geolocation=()');\n    c.header('Content-Security-Policy', gatewayConsoleCsp);\n  }));\n\n  // Browser Origin check middleware for API routes (CSRF protection).\n  // Non-browser requests (no Origin header) pass through — they are\n  // authenticated by the token middleware instead.\n  const allowHostHeaderOriginFallback =\n    service.currentConfig.gateway?.dangerouslyAllowHostHeaderOriginFallback === true;\n  app.use('/api/*', createMiddleware(async (c, next) => {\n    // Sandboxed extension iframes (no allow-same-origin) send `Origin: null`.\n    // `checkBrowserOrigin` rejects that; these routes rely on CSP instead\n    // (`registerPublicExtensionAssetRoutes`).\n    if (isExtensionGatewayUiAssetPath(c.req.path)) {\n      return next();\n    }\n\n    const origin = c.req.header('origin');\n    if (!origin || origin.trim().toLowerCase() === 'null') {\n      // Native apps / opaque origins — authenticated via Bearer token\n      return next();\n    }\n\n    const result = checkBrowserOrigin({\n      requestHost: c.req.header('host'),\n      origin,\n      allowedOrigins: resolveBrowserOrigins(),\n      allowHostHeaderOriginFallback,\n      autoAllowSameHostFromTrustedProxy: isRequestFromTrustedProxy(c),\n      isLocalClient: false,\n    });\n\n    if (!result.ok) {\n      log.warn(\n        {\n          origin,\n          requestHost: c.req.header('host'),\n          reason: 'reason' in result ? result.reason : 'unknown',\n          path: c.req.path,\n          method: c.req.method,\n        },\n        `Browser origin check failed: ${origin} not in allowed list`,\n      );\n      return c.json({ error: 'Forbidden', message: 'Origin not allowed' }, 403);\n    }\n\n    return next();\n  }));\n\n  const DEFAULT_API_BODY_MAX = 1 * 1024 * 1024;\n  const SKILL_UPLOAD_BODY_MAX = 10 * 1024 * 1024;\n  const NOTE_MEDIA_BODY_MAX = 25 * 1024 * 1024;\n  const VOICE_TRANSCRIBE_BODY_MAX = 35 * 1024 * 1024;\n  const WEBCHAT_AGENT_BODY_MAX = maxWebchatAgentRequestBodyBytes();\n\n  const isNoteMediaUploadRequest = (path: string, method: string, contentType: string | undefined): boolean => {\n    if (method !== 'POST') return false;\n    if (/^\\/api\\/notes\\/[^/]+\\/media$/.test(path)) return true;\n    return path === '/api/notes' && contentType?.includes('multipart/form-data') === true;\n  };\n\n  const isWorkItemAttachmentUploadRequest = (path: string, method: string, contentType: string | undefined): boolean => {\n    if (method !== 'POST' || contentType?.includes('multipart/form-data') !== true) return false;\n    return /^\\/api\\/work-items\\/[^/]+\\/attachments$/.test(path)\n      || /^\\/api\\/projects\\/[^/]+\\/work-items$/.test(path);\n  };\n\n  app.use('/api/skills/upload', bodyLimit({\n    maxSize: SKILL_UPLOAD_BODY_MAX,\n    onError: (c) => {\n      log.warn({ path: c.req.path, maxSizeMb: 10 }, 'Request body too large: skills upload exceeds 10MB limit');\n      return c.json({ error: 'Skill package too large', maxSize: '10MB' }, 413);\n    },\n  }));\n\n  app.use('/api/*', async (c, next) => {\n    const contentType = c.req.header('content-type');\n    const maxSize = c.req.path === '/api/agent'\n      ? WEBCHAT_AGENT_BODY_MAX\n      : c.req.path === '/api/skills/upload'\n        ? SKILL_UPLOAD_BODY_MAX\n        : c.req.path === '/api/voice/transcribe'\n          ? VOICE_TRANSCRIBE_BODY_MAX\n          : isNoteMediaUploadRequest(c.req.path, c.req.method, contentType)\n            ? NOTE_MEDIA_BODY_MAX\n            : isWorkItemAttachmentUploadRequest(c.req.path, c.req.method, contentType)\n              ? WORK_ITEM_ATTACHMENT_UPLOAD_BODY_MAX_BYTES\n              : DEFAULT_API_BODY_MAX;\n    const maxSizeMb = Math.ceil(maxSize / (1024 * 1024));\n    return bodyLimit({\n      maxSize,\n      onError: (ctx) => {\n        log.warn({ path: ctx.req.path, maxSizeMb }, `Request body too large: exceeds ${maxSizeMb}MB limit`);\n        return ctx.json({ error: 'Request body too large', maxSize: `${maxSizeMb}MB` }, 413);\n      },\n    })(c, next);\n  });\n\n  registerPublicGatewayRoutes(app, service);\n\n  // Extension UI assets are served without auth: sandboxed iframes (no allow-same-origin)\n  // have an opaque origin of `null` and cannot forward the ?token= from the parent HTML URL.\n  // Security is enforced by the strict CSP (frame-ancestors 'self') on every response.\n  registerPublicExtensionAssetRoutes(app, service);\n\n  const authenticated = new Hono();\n  authenticated.use(routeErrorMiddleware());\n  authenticated.use(\n    auth({\n      token,\n      getGatewayAuth: () => service.currentConfig.gateway?.auth,\n      getResolvedAuth: () => {\n        if (typeof service.getResolvedAuth === 'function') {\n          return service.getResolvedAuth();\n        }\n        return token ? { mode: 'token', token } : { mode: 'none' };\n      },\n      getTrustedProxyContext: () => ({\n        trustedProxies: service.currentConfig.gateway?.trustedProxies,\n        allowRealIpFallback: service.currentConfig.gateway?.allowRealIpFallback === true,\n      }),\n    }),\n  );\n  authenticated.use(operatorScopes());\n\n  const strictRateLimitMiddleware = createStrictRateLimitMiddleware({\n    getTrustedProxyContext: () => ({\n      trustedProxies: service.currentConfig.gateway?.trustedProxies,\n      allowRealIpFallback: service.currentConfig.gateway?.allowRealIpFallback === true,\n    }),\n  });\n  const channelRateLimitMiddleware = createChannelRateLimitMiddleware({\n    getTrustedProxyContext: () => ({\n      trustedProxies: service.currentConfig.gateway?.trustedProxies,\n      allowRealIpFallback: service.currentConfig.gateway?.allowRealIpFallback === true,\n    }),\n  });\n\n  const sseConfig = {\n    service,\n    maxSseConnections: service.currentConfig.gateway.maxSseConnections,\n  };\n\n  registerAuthenticatedRoutes(app, authenticated, {\n    service,\n    strictRateLimitMiddleware,\n    channelRateLimitMiddleware,\n    sseConfig,\n  });\n\n  const prewarm = prewarmStaticUiCache();\n  if (prewarm.loaded > 0) {\n    log.debug({ loaded: prewarm.loaded, missing: prewarm.missing }, 'Static UI cache prewarmed');\n  }\n\n  app.route('/', authenticated);\n\n  app.notFound((c) => {\n    const isApiRoute = c.req.path.startsWith('/api/');\n    const fields = { path: c.req.path, method: c.req.method };\n    if (isApiRoute) {\n      log.warn(fields, 'Route not found');\n    } else {\n      log.debug(fields, 'Route not found');\n    }\n    return c.json({ error: 'Not found' }, 404);\n  });\n\n  app.onError((err, c) => {\n    log.error(\n      {\n        err,\n        phase: 'gateway.http.unhandled',\n        path: c.req.path,\n        method: c.req.method,\n        userAgent: c.req.header('user-agent'),\n      },\n      `Hono error on ${c.req.method} ${c.req.path}: ${err instanceof Error ? err.message : String(err)}`,\n    );\n    return c.json({ error: 'Internal server error' }, 500);\n  });\n\n  return app;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;aAQqD;AAyBrD,MAAM,MAAM,aAAa,cAAc;;;;;;AAYvC,SAAgB,8BAA8B,MAAuB;AACnE,QAAO,sCAAsC,KAAK,KAAK;;AAGzD,SAAgB,cAAc,QAA6B;AACzD,KAAI,QAAQ,IAAI,OACd,gCAA+B;CAEjC,MAAM,EAAE,SAAS,UAAU;CAC3B,MAAM,MAAM,IAAI,MAAM;CAEtB,MAAM,cAAc,gCAAgC,QAAQ;CAE5D,MAAM,8BACJ,6BAA6B;EAC3B,mBAAmB,QAAQ,cAAc,QAAQ;EACjD,MAAM;EACN,UAAU,4BAA4B,QAAQ,cAAc;EAC5D,iBAAiB,iBAAiB,EAAE;EACpC,uBAAuB,6BAA6B,QAAQ,cAAc;EAC3E,CAAC;;;;;CAMJ,MAAM,+BAA+B,MAAmC;AACtE,MAAI;AACF,UAAO,YAAY,EAAE,CAAC,OAAO;UACvB;AACN;;;;;;;;;;CAWJ,MAAM,6BAA6B,MAAwB;EACzD,MAAM,SAAS,4BAA4B,EAAE;AAC7C,MAAI,CAAC,OAAQ,QAAO;AACpB,MAAI,oBAAoB,OAAO,CAAE,QAAO;AACxC,SAAO,sBAAsB,QAAQ,QAAQ,cAAc,SAAS,eAAe;;AAGrF,KAAI,IAAI,sBAAsB,CAAC;AAC/B,KAAI,IAAI,OAAO;EACb,gBAAgB,QAAQ,cAAc,SAAS;EAC/C,qBAAqB,QAAQ,cAAc,SAAS,wBAAwB;EAC7E,CAAC,CAAC;AAKH,6BAA4B,KAAK,QAAQ;AACzC,KAAI,IACF,KAAK;EACH,SAAS,WAAW;GAClB,MAAM,UAAU,uBAAuB;AACvC,OAAI,CAAC,OACH,QAAO,QAAQ,MAAM,oBAAoB;GAE3C,MAAM,aAAa,OAAO,aAAa;AAEvC,OADY,QAAQ,MAAM,UAAU,MAAM,aAAa,KAAK,WACrD,CAAE,QAAO;AAChB,UAAO,QAAQ,SAAS,IAAI,GAAG,MAAM;;EAEvC,cAAc;GAAC;GAAO;GAAQ;GAAS;GAAU;GAAU;EAC3D,cAAc;GAAC;GAAgB;GAAiB;GAAU;GAAgB;GAAgB;EAC1F,aAAa;EACb,QAAQ;EACT,CAAC,CACH;CAGD,MAAM,oBAAoB,8BAA8B;AAGxD,KAAI,IAAI,iBAAiB,OAAO,GAAG,SAAS;AAC1C,QAAM,MAAM;AACZ,MAAI,8BAA8B,EAAE,IAAI,KAAK,CAC3C;AAEF,IAAE,OAAO,mBAAmB,OAAO;AACnC,IAAE,OAAO,0BAA0B,UAAU;AAC7C,IAAE,OAAO,mBAAmB,kCAAkC;AAC9D,IAAE,OAAO,oBAAoB,gBAAgB;AAE7C,IAAE,OAAO,sBAAsB,+CAA+C;AAC9E,IAAE,OAAO,2BAA2B,kBAAkB;GACtD,CAAC;CAKH,MAAM,gCACJ,QAAQ,cAAc,SAAS,6CAA6C;AAC9E,KAAI,IAAI,UAAU,iBAAiB,OAAO,GAAG,SAAS;AAIpD,MAAI,8BAA8B,EAAE,IAAI,KAAK,CAC3C,QAAO,MAAM;EAGf,MAAM,SAAS,EAAE,IAAI,OAAO,SAAS;AACrC,MAAI,CAAC,UAAU,OAAO,MAAM,CAAC,aAAa,KAAK,OAE7C,QAAO,MAAM;EAGf,MAAM,SAAS,mBAAmB;GAChC,aAAa,EAAE,IAAI,OAAO,OAAO;GACjC;GACA,gBAAgB,uBAAuB;GACvC;GACA,mCAAmC,0BAA0B,EAAE;GAC/D,eAAe;GAChB,CAAC;AAEF,MAAI,CAAC,OAAO,IAAI;AACd,OAAI,KACF;IACE;IACA,aAAa,EAAE,IAAI,OAAO,OAAO;IACjC,QAAQ,YAAY,SAAS,OAAO,SAAS;IAC7C,MAAM,EAAE,IAAI;IACZ,QAAQ,EAAE,IAAI;IACf,EACD,gCAAgC,OAAO,sBACxC;AACD,UAAO,EAAE,KAAK;IAAE,OAAO;IAAa,SAAS;IAAsB,EAAE,IAAI;;AAG3E,SAAO,MAAM;GACb,CAAC;CAEH,MAAM,uBAAuB,IAAI,OAAO;CACxC,MAAM,wBAAwB,KAAK,OAAO;CAC1C,MAAM,sBAAsB,KAAK,OAAO;CACxC,MAAM,4BAA4B,KAAK,OAAO;CAC9C,MAAM,yBAAyB,iCAAiC;CAEhE,MAAM,4BAA4B,MAAc,QAAgB,gBAA6C;AAC3G,MAAI,WAAW,OAAQ,QAAO;AAC9B,MAAI,+BAA+B,KAAK,KAAK,CAAE,QAAO;AACtD,SAAO,SAAS,gBAAgB,aAAa,SAAS,sBAAsB,KAAK;;CAGnF,MAAM,qCAAqC,MAAc,QAAgB,gBAA6C;AACpH,MAAI,WAAW,UAAU,aAAa,SAAS,sBAAsB,KAAK,KAAM,QAAO;AACvF,SAAO,0CAA0C,KAAK,KAAK,IACtD,uCAAuC,KAAK,KAAK;;AAGxD,KAAI,IAAI,sBAAsB,UAAU;EACtC,SAAS;EACT,UAAU,MAAM;AACd,OAAI,KAAK;IAAE,MAAM,EAAE,IAAI;IAAM,WAAW;IAAI,EAAE,2DAA2D;AACzG,UAAO,EAAE,KAAK;IAAE,OAAO;IAA2B,SAAS;IAAQ,EAAE,IAAI;;EAE5E,CAAC,CAAC;AAEH,KAAI,IAAI,UAAU,OAAO,GAAG,SAAS;EACnC,MAAM,cAAc,EAAE,IAAI,OAAO,eAAe;EAChD,MAAM,UAAU,EAAE,IAAI,SAAS,eAC3B,yBACA,EAAE,IAAI,SAAS,uBACb,wBACA,EAAE,IAAI,SAAS,0BACb,4BACA,yBAAyB,EAAE,IAAI,MAAM,EAAE,IAAI,QAAQ,YAAY,GAC7D,sBACA,kCAAkC,EAAE,IAAI,MAAM,EAAE,IAAI,QAAQ,YAAY,GACtE,6CACA;EACZ,MAAM,YAAY,KAAK,KAAK,WAAW,OAAO,MAAM;AACpD,SAAO,UAAU;GACf;GACA,UAAU,QAAQ;AAChB,QAAI,KAAK;KAAE,MAAM,IAAI,IAAI;KAAM;KAAW,EAAE,mCAAmC,UAAU,UAAU;AACnG,WAAO,IAAI,KAAK;KAAE,OAAO;KAA0B,SAAS,GAAG,UAAU;KAAK,EAAE,IAAI;;GAEvF,CAAC,CAAC,GAAG,KAAK;GACX;AAEF,6BAA4B,KAAK,QAAQ;AAKzC,oCAAmC,KAAK,QAAQ;CAEhD,MAAM,gBAAgB,IAAI,MAAM;AAChC,eAAc,IAAI,sBAAsB,CAAC;AACzC,eAAc,IACZ,KAAK;EACH;EACA,sBAAsB,QAAQ,cAAc,SAAS;EACrD,uBAAuB;AACrB,OAAI,OAAO,QAAQ,oBAAoB,WACrC,QAAO,QAAQ,iBAAiB;AAElC,UAAO,QAAQ;IAAE,MAAM;IAAS;IAAO,GAAG,EAAE,MAAM,QAAQ;;EAE5D,+BAA+B;GAC7B,gBAAgB,QAAQ,cAAc,SAAS;GAC/C,qBAAqB,QAAQ,cAAc,SAAS,wBAAwB;GAC7E;EACF,CAAC,CACH;AACD,eAAc,IAAI,gBAAgB,CAAC;AAoBnC,6BAA4B,KAAK,eAAe;EAC9C;EACA,2BApBgC,gCAAgC,EAChE,+BAA+B;GAC7B,gBAAgB,QAAQ,cAAc,SAAS;GAC/C,qBAAqB,QAAQ,cAAc,SAAS,wBAAwB;GAC7E,GACF,CAe0B;EACzB,4BAfiC,iCAAiC,EAClE,+BAA+B;GAC7B,gBAAgB,QAAQ,cAAc,SAAS;GAC/C,qBAAqB,QAAQ,cAAc,SAAS,wBAAwB;GAC7E,GACF,CAU2B;EAC1B,WAAA;GARA;GACA,mBAAmB,QAAQ,cAAc,QAAQ;GAOxC;EACV,CAAC;CAEF,MAAM,UAAU,sBAAsB;AACtC,KAAI,QAAQ,SAAS,EACnB,KAAI,MAAM;EAAE,QAAQ,QAAQ;EAAQ,SAAS,QAAQ;EAAS,EAAE,4BAA4B;AAG9F,KAAI,MAAM,KAAK,cAAc;AAE7B,KAAI,UAAU,MAAM;EAClB,MAAM,aAAa,EAAE,IAAI,KAAK,WAAW,QAAQ;EACjD,MAAM,SAAS;GAAE,MAAM,EAAE,IAAI;GAAM,QAAQ,EAAE,IAAI;GAAQ;AACzD,MAAI,WACF,KAAI,KAAK,QAAQ,kBAAkB;MAEnC,KAAI,MAAM,QAAQ,kBAAkB;AAEtC,SAAO,EAAE,KAAK,EAAE,OAAO,aAAa,EAAE,IAAI;GAC1C;AAEF,KAAI,SAAS,KAAK,MAAM;AACtB,MAAI,MACF;GACE;GACA,OAAO;GACP,MAAM,EAAE,IAAI;GACZ,QAAQ,EAAE,IAAI;GACd,WAAW,EAAE,IAAI,OAAO,aAAa;GACtC,EACD,iBAAiB,EAAE,IAAI,OAAO,GAAG,EAAE,IAAI,KAAK,IAAI,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,GACjG;AACD,SAAO,EAAE,KAAK,EAAE,OAAO,yBAAyB,EAAE,IAAI;GACtD;AAEF,QAAO"}

package/dist/src/gateway/hono/routes/commands-skills.js

@@ -1,5 +1,8 @@
+import { effectiveWorkspacePathForSession } from "../../../session/session-workspace.js";
+import { getProjectForSession } from "../../../projects/workspace.js";
 import { commandRegistry } from "../../../chat-commands/registry.js";
 import { isRegisteredProvider } from "../../../agent/skills/marketplace/registry.js";
+import { buildReviewContext, resolveGitRoot } from "../../../review/review-git.js";
 import "../../../chat-commands/index.js";
 import "../../../agent/skills/skills-marketplace.js";
 //#region src/gateway/hono/routes/commands-skills.ts
@@ -35,6 +38,24 @@ function registerCommandsSkillsRoutes(authenticated, deps) {
 			}
 		});
 	});
+	authenticated.get("/api/review/context", async (c) => {
+		const sessionKey = c.req.query("sessionKey")?.trim() || "agent:main:main";
+		try {
+			const payload = await buildReviewContext(await resolveGitRoot(effectiveWorkspacePathForSession(service.getConfig(), sessionKey, null, getProjectForSession(sessionKey))));
+			return c.json({
+				ok: true,
+				payload
+			});
+		} catch (err) {
+			return c.json({
+				ok: false,
+				error: {
+					code: "REVIEW_CONTEXT_FAILED",
+					message: err instanceof Error ? err.message : "Failed to load review context"
+				}
+			}, 400);
+		}
+	});
 	authenticated.get("/api/chat/skills", (c) => {
 		const agentId = c.req.query("agentId")?.trim() || service.getConfig().agents?.default || "main";
 		const payload = service.marketplace.getAgentSkillsApi(agentId);

package/dist/src/gateway/hono/routes/commands-skills.js.map

@@ -1 +1 @@
-{"version":3,"file":"commands-skills.js","names":[],"sources":["../../../../../src/gateway/hono/routes/commands-skills.ts"],"sourcesContent":["import type { Hono } from 'hono';\n\nimport { commandRegistry } from '../../../chat-commands/index.js';\nimport { isRegisteredProvider } from '../../../agent/skills/skills-marketplace.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\n\nfunction parseMarketplaceProviderQuery(raw: string | undefined): string | undefined {\n  const v = raw?.trim().toLowerCase();\n  if (v && isRegisteredProvider(v)) return v;\n  return undefined;\n}\n\nexport function registerCommandsSkillsRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  const { service } = deps;\n\n  // ========== Chat slash commands (CommandRegistry) ==========\n\n  authenticated.get('/api/commands', (c) => {\n    const all = commandRegistry.list();\n    const commands = all\n      .filter((cmd) => cmd.scope.includes('global') || cmd.scope.includes('private'))\n      .map((cmd) => ({\n        id: cmd.id,\n        name: cmd.name,\n        aliases: cmd.aliases ?? [],\n        description: cmd.description,\n        category: cmd.category,\n        scope: cmd.scope,\n        acceptsArgs: cmd.acceptsArgs ?? false,\n        examples: cmd.examples ?? [],\n      }));\n    const extensionCommands = all\n      .filter((cmd) => cmd.category === 'extension')\n      .map((cmd) => ({\n        id: cmd.id,\n        name: cmd.name,\n        description: cmd.description,\n        extensionId: cmd.id.startsWith('ext.') ? cmd.id.split('.')[1] : undefined,\n      }));\n    return c.json({ ok: true, payload: { commands, extensionCommands } });\n  });\n\n  // ========== Skills (managed global skills under ~/.xopc/skills) ==========\n\n  authenticated.get('/api/chat/skills', (c) => {\n    const agentId = c.req.query('agentId')?.trim() || service.getConfig().agents?.default || 'main';\n    const payload = service.marketplace.getAgentSkillsApi(agentId);\n    return c.json({ ok: true, payload });\n  });\n\n  authenticated.get('/api/skills', (c) => {\n    const payload = service.marketplace.getSkillsApi();\n    return c.json({ ok: true, payload });\n  });\n\n  authenticated.get('/api/skills/status', (c) => {\n    const payload = service.marketplace.getSkillsStatusApi();\n    return c.json({ ok: true, payload });\n  });\n\n  authenticated.get('/api/skills/:skillName/content', (c) => {\n    const raw = c.req.param('skillName');\n    if (!raw) {\n      return c.json({ ok: false, error: 'Missing skill name' }, 400);\n    }\n    let skillName: string;\n    try {\n      skillName = decodeURIComponent(raw);\n    } catch {\n      return c.json({ ok: false, error: 'Invalid skill name' }, 400);\n    }\n    const data = service.marketplace.getSkillMarkdownSource(skillName);\n    if (!data) {\n      return c.json({ ok: false, error: 'Skill not found' }, 404);\n    }\n    return c.json({ ok: true, payload: data });\n  });\n\n  authenticated.post('/api/skills/reload', (c) => {\n    service.marketplace.reloadSkills();\n    return c.json({ ok: true });\n  });\n\n  authenticated.patch('/api/skills/enabled', async (c) => {\n    let body: { skillName?: unknown; enabled?: unknown };\n    try {\n      body = (await c.req.json()) as { skillName?: unknown; enabled?: unknown };\n    } catch {\n      return c.json({ ok: false, error: 'Invalid JSON' }, 400);\n    }\n    const skillName = typeof body.skillName === 'string' ? body.skillName.trim() : '';\n    const enabled = body.enabled;\n    if (!skillName || typeof enabled !== 'boolean') {\n      return c.json({ ok: false, error: 'Expected { skillName: string, enabled: boolean }' }, 400);\n    }\n    try {\n      service.marketplace.patchSkillEnabled(skillName, enabled);\n      return c.json({ ok: true });\n    } catch (err) {\n      return c.json(\n        { ok: false, error: err instanceof Error ? err.message : 'Update failed' },\n        400,\n      );\n    }\n  });\n\n  authenticated.get('/api/skills/marketplace', async (c) => {\n    const q = c.req.query('q')?.trim() ?? '';\n    const pageRaw = c.req.query('page');\n    const pageSizeRaw = c.req.query('pageSize');\n    const sortRaw = c.req.query('sort');\n    const page = pageRaw != null && pageRaw !== '' ? Math.max(1, Number(pageRaw) || 1) : undefined;\n    const pageSize =\n      pageSizeRaw != null && pageSizeRaw !== ''\n        ? Math.min(50, Math.max(1, Number(pageSizeRaw) || 20))\n        : undefined;\n    const sort =\n      sortRaw === 'newest' || sortRaw === 'downloads' ? sortRaw : undefined;\n    const category = c.req.query('category')?.trim() ?? '';\n    const provider = parseMarketplaceProviderQuery(c.req.query('provider'));\n    try {\n      const payload = await service.marketplace.fetchSkillsCatalog(\n        {\n          q: q || undefined,\n          page,\n          pageSize,\n          sort,\n          category: category || undefined,\n        },\n        provider,\n      );\n      return c.json({ ok: true, payload });\n    } catch (err) {\n      return c.json(\n        { ok: false, error: err instanceof Error ? err.message : 'Marketplace request failed' },\n        502,\n      );\n    }\n  });\n\n  authenticated.get('/api/skills/marketplace/provider', async (c) => {\n    const info = await service.marketplace.getSkillsProvider();\n    return c.json({ ok: true, payload: info });\n  });\n\n  /** All registered marketplace providers (built-in + extension-contributed). */\n  authenticated.get('/api/skills/marketplace/providers', async (c) => {\n    const [providers, current] = await Promise.all([\n      service.marketplace.getSkillsProviders(),\n      service.marketplace.getSkillsProvider(),\n    ]);\n    return c.json({ ok: true, payload: { providers, current: current.provider } });\n  });\n\n  authenticated.get('/api/skills/marketplace/categories', async (c) => {\n    const provider = parseMarketplaceProviderQuery(c.req.query('provider'));\n    try {\n      const payload = await service.marketplace.fetchSkillsCategories(provider);\n      return c.json({ ok: true, payload });\n    } catch (err) {\n      return c.json(\n        { ok: false, error: err instanceof Error ? err.message : 'Marketplace categories failed' },\n        502,\n      );\n    }\n  });\n\n  authenticated.get('/api/skills/marketplace/packages/:pkgName', async (c) => {\n    const raw = c.req.param('pkgName');\n    if (!raw) {\n      return c.json({ ok: false, error: 'Missing package name' }, 400);\n    }\n    let pkgName: string;\n    try {\n      pkgName = decodeURIComponent(raw);\n    } catch {\n      return c.json({ ok: false, error: 'Invalid package name' }, 400);\n    }\n    try {\n      const provider = parseMarketplaceProviderQuery(c.req.query('provider'));\n      const payload = await service.marketplace.fetchSkillsPackageDetail(pkgName, provider);\n      return c.json({ ok: true, payload });\n    } catch (err) {\n      return c.json(\n        { ok: false, error: err instanceof Error ? err.message : 'Marketplace request failed' },\n        502,\n      );\n    }\n  });\n\n  authenticated.post('/api/skills/marketplace/install', async (c) => {\n    let body: { name?: unknown; version?: unknown; overwrite?: unknown; provider?: unknown };\n    try {\n      body = (await c.req.json()) as typeof body;\n    } catch {\n      return c.json({ ok: false, error: 'Invalid JSON' }, 400);\n    }\n    const name = typeof body.name === 'string' ? body.name.trim() : '';\n    const version = typeof body.version === 'string' ? body.version.trim() : undefined;\n    const overwrite =\n      body.overwrite === true ||\n      body.overwrite === 'true' ||\n      body.overwrite === '1';\n    const provider = parseMarketplaceProviderQuery(\n      typeof body.provider === 'string' ? body.provider : undefined,\n    );\n    if (!name) {\n      return c.json({ ok: false, error: 'Expected { name: string, version?: string, overwrite?: boolean }' }, 400);\n    }\n    try {\n      const payload = await service.marketplace.installSkill({ name, version, overwrite, provider });\n      return c.json({ ok: true, payload });\n    } catch (err) {\n      return c.json(\n        { ok: false, error: err instanceof Error ? err.message : 'Install failed' },\n        400,\n      );\n    }\n  });\n\n  authenticated.post('/api/skills/upload', async (c) => {\n    let body: Record<string, unknown>;\n    try {\n      body = await c.req.parseBody({ all: true });\n    } catch {\n      return c.json({ ok: false, error: 'Invalid multipart body' }, 400);\n    }\n    const file = body['file'];\n    if (!file || typeof file !== 'object') {\n      return c.json({ ok: false, error: 'Missing file field' }, 400);\n    }\n    let buf: Buffer;\n    if (file instanceof File) {\n      buf = Buffer.from(await file.arrayBuffer());\n    } else if (typeof (file as Blob).arrayBuffer === 'function') {\n      buf = Buffer.from(await (file as Blob).arrayBuffer());\n    } else {\n      return c.json({ ok: false, error: 'Invalid file upload' }, 400);\n    }\n    const skillIdRaw = body['skillId'];\n    const overwriteRaw = body['overwrite'];\n    const skillId = typeof skillIdRaw === 'string' && skillIdRaw.trim() ? skillIdRaw.trim() : undefined;\n    const overwrite =\n      overwriteRaw === 'true' ||\n      overwriteRaw === true ||\n      overwriteRaw === '1';\n\n    try {\n      const result = service.marketplace.installSkillZip(buf, { skillId, overwrite });\n      return c.json({ ok: true, payload: result });\n    } catch (err) {\n      return c.json(\n        { ok: false, error: err instanceof Error ? err.message : 'Install failed' },\n        400,\n      );\n    }\n  });\n\n  authenticated.delete('/api/skills/:id', (c) => {\n    const id = c.req.param('id');\n    if (!id) {\n      return c.json({ ok: false, error: 'Missing id' }, 400);\n    }\n    try {\n      service.marketplace.deleteSkill(id);\n      return c.json({ ok: true });\n    } catch (err) {\n      return c.json(\n        { ok: false, error: err instanceof Error ? err.message : 'Delete failed' },\n        400,\n      );\n    }\n  });\n}\n"],"mappings":";;;;;AAMA,SAAS,8BAA8B,KAA6C;CAClF,MAAM,IAAI,KAAK,MAAM,CAAC,aAAa;AACnC,KAAI,KAAK,qBAAqB,EAAE,CAAE,QAAO;;AAI3C,SAAgB,6BAA6B,eAAqB,MAAoC;CACpG,MAAM,EAAE,YAAY;AAIpB,eAAc,IAAI,kBAAkB,MAAM;EACxC,MAAM,MAAM,gBAAgB,MAAM;EAClC,MAAM,WAAW,IACd,QAAQ,QAAQ,IAAI,MAAM,SAAS,SAAS,IAAI,IAAI,MAAM,SAAS,UAAU,CAAC,CAC9E,KAAK,SAAS;GACb,IAAI,IAAI;GACR,MAAM,IAAI;GACV,SAAS,IAAI,WAAW,EAAE;GAC1B,aAAa,IAAI;GACjB,UAAU,IAAI;GACd,OAAO,IAAI;GACX,aAAa,IAAI,eAAe;GAChC,UAAU,IAAI,YAAY,EAAE;GAC7B,EAAE;EACL,MAAM,oBAAoB,IACvB,QAAQ,QAAQ,IAAI,aAAa,YAAY,CAC7C,KAAK,SAAS;GACb,IAAI,IAAI;GACR,MAAM,IAAI;GACV,aAAa,IAAI;GACjB,aAAa,IAAI,GAAG,WAAW,OAAO,GAAG,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,KAAA;GACjE,EAAE;AACL,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;IAAE;IAAU;IAAmB;GAAE,CAAC;GACrE;AAIF,eAAc,IAAI,qBAAqB,MAAM;EAC3C,MAAM,UAAU,EAAE,IAAI,MAAM,UAAU,EAAE,MAAM,IAAI,QAAQ,WAAW,CAAC,QAAQ,WAAW;EACzF,MAAM,UAAU,QAAQ,YAAY,kBAAkB,QAAQ;AAC9D,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM;GAAS,CAAC;GACpC;AAEF,eAAc,IAAI,gBAAgB,MAAM;EACtC,MAAM,UAAU,QAAQ,YAAY,cAAc;AAClD,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM;GAAS,CAAC;GACpC;AAEF,eAAc,IAAI,uBAAuB,MAAM;EAC7C,MAAM,UAAU,QAAQ,YAAY,oBAAoB;AACxD,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM;GAAS,CAAC;GACpC;AAEF,eAAc,IAAI,mCAAmC,MAAM;EACzD,MAAM,MAAM,EAAE,IAAI,MAAM,YAAY;AACpC,MAAI,CAAC,IACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAsB,EAAE,IAAI;EAEhE,IAAI;AACJ,MAAI;AACF,eAAY,mBAAmB,IAAI;UAC7B;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAAsB,EAAE,IAAI;;EAEhE,MAAM,OAAO,QAAQ,YAAY,uBAAuB,UAAU;AAClE,MAAI,CAAC,KACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAmB,EAAE,IAAI;AAE7D,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;GAAM,CAAC;GAC1C;AAEF,eAAc,KAAK,uBAAuB,MAAM;AAC9C,UAAQ,YAAY,cAAc;AAClC,SAAO,EAAE,KAAK,EAAE,IAAI,MAAM,CAAC;GAC3B;AAEF,eAAc,MAAM,uBAAuB,OAAO,MAAM;EACtD,IAAI;AACJ,MAAI;AACF,UAAQ,MAAM,EAAE,IAAI,MAAM;UACpB;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAAgB,EAAE,IAAI;;EAE1D,MAAM,YAAY,OAAO,KAAK,cAAc,WAAW,KAAK,UAAU,MAAM,GAAG;EAC/E,MAAM,UAAU,KAAK;AACrB,MAAI,CAAC,aAAa,OAAO,YAAY,UACnC,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAoD,EAAE,IAAI;AAE9F,MAAI;AACF,WAAQ,YAAY,kBAAkB,WAAW,QAAQ;AACzD,UAAO,EAAE,KAAK,EAAE,IAAI,MAAM,CAAC;WACpB,KAAK;AACZ,UAAO,EAAE,KACP;IAAE,IAAI;IAAO,OAAO,eAAe,QAAQ,IAAI,UAAU;IAAiB,EAC1E,IACD;;GAEH;AAEF,eAAc,IAAI,2BAA2B,OAAO,MAAM;EACxD,MAAM,IAAI,EAAE,IAAI,MAAM,IAAI,EAAE,MAAM,IAAI;EACtC,MAAM,UAAU,EAAE,IAAI,MAAM,OAAO;EACnC,MAAM,cAAc,EAAE,IAAI,MAAM,WAAW;EAC3C,MAAM,UAAU,EAAE,IAAI,MAAM,OAAO;EACnC,MAAM,OAAO,WAAW,QAAQ,YAAY,KAAK,KAAK,IAAI,GAAG,OAAO,QAAQ,IAAI,EAAE,GAAG,KAAA;EACrF,MAAM,WACJ,eAAe,QAAQ,gBAAgB,KACnC,KAAK,IAAI,IAAI,KAAK,IAAI,GAAG,OAAO,YAAY,IAAI,GAAG,CAAC,GACpD,KAAA;EACN,MAAM,OACJ,YAAY,YAAY,YAAY,cAAc,UAAU,KAAA;EAC9D,MAAM,WAAW,EAAE,IAAI,MAAM,WAAW,EAAE,MAAM,IAAI;EACpD,MAAM,WAAW,8BAA8B,EAAE,IAAI,MAAM,WAAW,CAAC;AACvE,MAAI;GACF,MAAM,UAAU,MAAM,QAAQ,YAAY,mBACxC;IACE,GAAG,KAAK,KAAA;IACR;IACA;IACA;IACA,UAAU,YAAY,KAAA;IACvB,EACD,SACD;AACD,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM;IAAS,CAAC;WAC7B,KAAK;AACZ,UAAO,EAAE,KACP;IAAE,IAAI;IAAO,OAAO,eAAe,QAAQ,IAAI,UAAU;IAA8B,EACvF,IACD;;GAEH;AAEF,eAAc,IAAI,oCAAoC,OAAO,MAAM;EACjE,MAAM,OAAO,MAAM,QAAQ,YAAY,mBAAmB;AAC1D,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;GAAM,CAAC;GAC1C;;AAGF,eAAc,IAAI,qCAAqC,OAAO,MAAM;EAClE,MAAM,CAAC,WAAW,WAAW,MAAM,QAAQ,IAAI,CAC7C,QAAQ,YAAY,oBAAoB,EACxC,QAAQ,YAAY,mBAAmB,CACxC,CAAC;AACF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;IAAE;IAAW,SAAS,QAAQ;IAAU;GAAE,CAAC;GAC9E;AAEF,eAAc,IAAI,sCAAsC,OAAO,MAAM;EACnE,MAAM,WAAW,8BAA8B,EAAE,IAAI,MAAM,WAAW,CAAC;AACvE,MAAI;GACF,MAAM,UAAU,MAAM,QAAQ,YAAY,sBAAsB,SAAS;AACzE,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM;IAAS,CAAC;WAC7B,KAAK;AACZ,UAAO,EAAE,KACP;IAAE,IAAI;IAAO,OAAO,eAAe,QAAQ,IAAI,UAAU;IAAiC,EAC1F,IACD;;GAEH;AAEF,eAAc,IAAI,6CAA6C,OAAO,MAAM;EAC1E,MAAM,MAAM,EAAE,IAAI,MAAM,UAAU;AAClC,MAAI,CAAC,IACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAwB,EAAE,IAAI;EAElE,IAAI;AACJ,MAAI;AACF,aAAU,mBAAmB,IAAI;UAC3B;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAAwB,EAAE,IAAI;;AAElE,MAAI;GACF,MAAM,WAAW,8BAA8B,EAAE,IAAI,MAAM,WAAW,CAAC;GACvE,MAAM,UAAU,MAAM,QAAQ,YAAY,yBAAyB,SAAS,SAAS;AACrF,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM;IAAS,CAAC;WAC7B,KAAK;AACZ,UAAO,EAAE,KACP;IAAE,IAAI;IAAO,OAAO,eAAe,QAAQ,IAAI,UAAU;IAA8B,EACvF,IACD;;GAEH;AAEF,eAAc,KAAK,mCAAmC,OAAO,MAAM;EACjE,IAAI;AACJ,MAAI;AACF,UAAQ,MAAM,EAAE,IAAI,MAAM;UACpB;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAAgB,EAAE,IAAI;;EAE1D,MAAM,OAAO,OAAO,KAAK,SAAS,WAAW,KAAK,KAAK,MAAM,GAAG;EAChE,MAAM,UAAU,OAAO,KAAK,YAAY,WAAW,KAAK,QAAQ,MAAM,GAAG,KAAA;EACzE,MAAM,YACJ,KAAK,cAAc,QACnB,KAAK,cAAc,UACnB,KAAK,cAAc;EACrB,MAAM,WAAW,8BACf,OAAO,KAAK,aAAa,WAAW,KAAK,WAAW,KAAA,EACrD;AACD,MAAI,CAAC,KACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAoE,EAAE,IAAI;AAE9G,MAAI;GACF,MAAM,UAAU,MAAM,QAAQ,YAAY,aAAa;IAAE;IAAM;IAAS;IAAW;IAAU,CAAC;AAC9F,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM;IAAS,CAAC;WAC7B,KAAK;AACZ,UAAO,EAAE,KACP;IAAE,IAAI;IAAO,OAAO,eAAe,QAAQ,IAAI,UAAU;IAAkB,EAC3E,IACD;;GAEH;AAEF,eAAc,KAAK,sBAAsB,OAAO,MAAM;EACpD,IAAI;AACJ,MAAI;AACF,UAAO,MAAM,EAAE,IAAI,UAAU,EAAE,KAAK,MAAM,CAAC;UACrC;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAA0B,EAAE,IAAI;;EAEpE,MAAM,OAAO,KAAK;AAClB,MAAI,CAAC,QAAQ,OAAO,SAAS,SAC3B,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAsB,EAAE,IAAI;EAEhE,IAAI;AACJ,MAAI,gBAAgB,KAClB,OAAM,OAAO,KAAK,MAAM,KAAK,aAAa,CAAC;WAClC,OAAQ,KAAc,gBAAgB,WAC/C,OAAM,OAAO,KAAK,MAAO,KAAc,aAAa,CAAC;MAErD,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAuB,EAAE,IAAI;EAEjE,MAAM,aAAa,KAAK;EACxB,MAAM,eAAe,KAAK;EAC1B,MAAM,UAAU,OAAO,eAAe,YAAY,WAAW,MAAM,GAAG,WAAW,MAAM,GAAG,KAAA;EAC1F,MAAM,YACJ,iBAAiB,UACjB,iBAAiB,QACjB,iBAAiB;AAEnB,MAAI;GACF,MAAM,SAAS,QAAQ,YAAY,gBAAgB,KAAK;IAAE;IAAS;IAAW,CAAC;AAC/E,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS;IAAQ,CAAC;WACrC,KAAK;AACZ,UAAO,EAAE,KACP;IAAE,IAAI;IAAO,OAAO,eAAe,QAAQ,IAAI,UAAU;IAAkB,EAC3E,IACD;;GAEH;AAEF,eAAc,OAAO,oBAAoB,MAAM;EAC7C,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK;AAC5B,MAAI,CAAC,GACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAc,EAAE,IAAI;AAExD,MAAI;AACF,WAAQ,YAAY,YAAY,GAAG;AACnC,UAAO,EAAE,KAAK,EAAE,IAAI,MAAM,CAAC;WACpB,KAAK;AACZ,UAAO,EAAE,KACP;IAAE,IAAI;IAAO,OAAO,eAAe,QAAQ,IAAI,UAAU;IAAiB,EAC1E,IACD;;GAEH"}
+{"version":3,"file":"commands-skills.js","names":[],"sources":["../../../../../src/gateway/hono/routes/commands-skills.ts"],"sourcesContent":["import type { Hono } from 'hono';\n\nimport { commandRegistry } from '../../../chat-commands/index.js';\nimport { isRegisteredProvider } from '../../../agent/skills/skills-marketplace.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\nimport { effectiveWorkspacePathForSession } from '../../../session/session-workspace.js';\nimport { getProjectForSession } from '../../../projects/workspace.js';\nimport { buildReviewContext, resolveGitRoot } from '../../../review/review-git.js';\n\nfunction parseMarketplaceProviderQuery(raw: string | undefined): string | undefined {\n  const v = raw?.trim().toLowerCase();\n  if (v && isRegisteredProvider(v)) return v;\n  return undefined;\n}\n\nexport function registerCommandsSkillsRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  const { service } = deps;\n\n  // ========== Chat slash commands (CommandRegistry) ==========\n\n  authenticated.get('/api/commands', (c) => {\n    const all = commandRegistry.list();\n    const commands = all\n      .filter((cmd) => cmd.scope.includes('global') || cmd.scope.includes('private'))\n      .map((cmd) => ({\n        id: cmd.id,\n        name: cmd.name,\n        aliases: cmd.aliases ?? [],\n        description: cmd.description,\n        category: cmd.category,\n        scope: cmd.scope,\n        acceptsArgs: cmd.acceptsArgs ?? false,\n        examples: cmd.examples ?? [],\n      }));\n    const extensionCommands = all\n      .filter((cmd) => cmd.category === 'extension')\n      .map((cmd) => ({\n        id: cmd.id,\n        name: cmd.name,\n        description: cmd.description,\n        extensionId: cmd.id.startsWith('ext.') ? cmd.id.split('.')[1] : undefined,\n      }));\n    return c.json({ ok: true, payload: { commands, extensionCommands } });\n  });\n\n  authenticated.get('/api/review/context', async (c) => {\n    const sessionKey = c.req.query('sessionKey')?.trim() || 'agent:main:main';\n    try {\n      const workspace = effectiveWorkspacePathForSession(\n        service.getConfig(),\n        sessionKey,\n        null,\n        getProjectForSession(sessionKey),\n      );\n      const cwd = await resolveGitRoot(workspace);\n      const payload = await buildReviewContext(cwd);\n      return c.json({ ok: true, payload });\n    } catch (err) {\n      return c.json(\n        {\n          ok: false,\n          error: {\n            code: 'REVIEW_CONTEXT_FAILED',\n            message: err instanceof Error ? err.message : 'Failed to load review context',\n          },\n        },\n        400,\n      );\n    }\n  });\n\n  // ========== Skills (managed global skills under ~/.xopc/skills) ==========\n\n  authenticated.get('/api/chat/skills', (c) => {\n    const agentId = c.req.query('agentId')?.trim() || service.getConfig().agents?.default || 'main';\n    const payload = service.marketplace.getAgentSkillsApi(agentId);\n    return c.json({ ok: true, payload });\n  });\n\n  authenticated.get('/api/skills', (c) => {\n    const payload = service.marketplace.getSkillsApi();\n    return c.json({ ok: true, payload });\n  });\n\n  authenticated.get('/api/skills/status', (c) => {\n    const payload = service.marketplace.getSkillsStatusApi();\n    return c.json({ ok: true, payload });\n  });\n\n  authenticated.get('/api/skills/:skillName/content', (c) => {\n    const raw = c.req.param('skillName');\n    if (!raw) {\n      return c.json({ ok: false, error: 'Missing skill name' }, 400);\n    }\n    let skillName: string;\n    try {\n      skillName = decodeURIComponent(raw);\n    } catch {\n      return c.json({ ok: false, error: 'Invalid skill name' }, 400);\n    }\n    const data = service.marketplace.getSkillMarkdownSource(skillName);\n    if (!data) {\n      return c.json({ ok: false, error: 'Skill not found' }, 404);\n    }\n    return c.json({ ok: true, payload: data });\n  });\n\n  authenticated.post('/api/skills/reload', (c) => {\n    service.marketplace.reloadSkills();\n    return c.json({ ok: true });\n  });\n\n  authenticated.patch('/api/skills/enabled', async (c) => {\n    let body: { skillName?: unknown; enabled?: unknown };\n    try {\n      body = (await c.req.json()) as { skillName?: unknown; enabled?: unknown };\n    } catch {\n      return c.json({ ok: false, error: 'Invalid JSON' }, 400);\n    }\n    const skillName = typeof body.skillName === 'string' ? body.skillName.trim() : '';\n    const enabled = body.enabled;\n    if (!skillName || typeof enabled !== 'boolean') {\n      return c.json({ ok: false, error: 'Expected { skillName: string, enabled: boolean }' }, 400);\n    }\n    try {\n      service.marketplace.patchSkillEnabled(skillName, enabled);\n      return c.json({ ok: true });\n    } catch (err) {\n      return c.json(\n        { ok: false, error: err instanceof Error ? err.message : 'Update failed' },\n        400,\n      );\n    }\n  });\n\n  authenticated.get('/api/skills/marketplace', async (c) => {\n    const q = c.req.query('q')?.trim() ?? '';\n    const pageRaw = c.req.query('page');\n    const pageSizeRaw = c.req.query('pageSize');\n    const sortRaw = c.req.query('sort');\n    const page = pageRaw != null && pageRaw !== '' ? Math.max(1, Number(pageRaw) || 1) : undefined;\n    const pageSize =\n      pageSizeRaw != null && pageSizeRaw !== ''\n        ? Math.min(50, Math.max(1, Number(pageSizeRaw) || 20))\n        : undefined;\n    const sort =\n      sortRaw === 'newest' || sortRaw === 'downloads' ? sortRaw : undefined;\n    const category = c.req.query('category')?.trim() ?? '';\n    const provider = parseMarketplaceProviderQuery(c.req.query('provider'));\n    try {\n      const payload = await service.marketplace.fetchSkillsCatalog(\n        {\n          q: q || undefined,\n          page,\n          pageSize,\n          sort,\n          category: category || undefined,\n        },\n        provider,\n      );\n      return c.json({ ok: true, payload });\n    } catch (err) {\n      return c.json(\n        { ok: false, error: err instanceof Error ? err.message : 'Marketplace request failed' },\n        502,\n      );\n    }\n  });\n\n  authenticated.get('/api/skills/marketplace/provider', async (c) => {\n    const info = await service.marketplace.getSkillsProvider();\n    return c.json({ ok: true, payload: info });\n  });\n\n  /** All registered marketplace providers (built-in + extension-contributed). */\n  authenticated.get('/api/skills/marketplace/providers', async (c) => {\n    const [providers, current] = await Promise.all([\n      service.marketplace.getSkillsProviders(),\n      service.marketplace.getSkillsProvider(),\n    ]);\n    return c.json({ ok: true, payload: { providers, current: current.provider } });\n  });\n\n  authenticated.get('/api/skills/marketplace/categories', async (c) => {\n    const provider = parseMarketplaceProviderQuery(c.req.query('provider'));\n    try {\n      const payload = await service.marketplace.fetchSkillsCategories(provider);\n      return c.json({ ok: true, payload });\n    } catch (err) {\n      return c.json(\n        { ok: false, error: err instanceof Error ? err.message : 'Marketplace categories failed' },\n        502,\n      );\n    }\n  });\n\n  authenticated.get('/api/skills/marketplace/packages/:pkgName', async (c) => {\n    const raw = c.req.param('pkgName');\n    if (!raw) {\n      return c.json({ ok: false, error: 'Missing package name' }, 400);\n    }\n    let pkgName: string;\n    try {\n      pkgName = decodeURIComponent(raw);\n    } catch {\n      return c.json({ ok: false, error: 'Invalid package name' }, 400);\n    }\n    try {\n      const provider = parseMarketplaceProviderQuery(c.req.query('provider'));\n      const payload = await service.marketplace.fetchSkillsPackageDetail(pkgName, provider);\n      return c.json({ ok: true, payload });\n    } catch (err) {\n      return c.json(\n        { ok: false, error: err instanceof Error ? err.message : 'Marketplace request failed' },\n        502,\n      );\n    }\n  });\n\n  authenticated.post('/api/skills/marketplace/install', async (c) => {\n    let body: { name?: unknown; version?: unknown; overwrite?: unknown; provider?: unknown };\n    try {\n      body = (await c.req.json()) as typeof body;\n    } catch {\n      return c.json({ ok: false, error: 'Invalid JSON' }, 400);\n    }\n    const name = typeof body.name === 'string' ? body.name.trim() : '';\n    const version = typeof body.version === 'string' ? body.version.trim() : undefined;\n    const overwrite =\n      body.overwrite === true ||\n      body.overwrite === 'true' ||\n      body.overwrite === '1';\n    const provider = parseMarketplaceProviderQuery(\n      typeof body.provider === 'string' ? body.provider : undefined,\n    );\n    if (!name) {\n      return c.json({ ok: false, error: 'Expected { name: string, version?: string, overwrite?: boolean }' }, 400);\n    }\n    try {\n      const payload = await service.marketplace.installSkill({ name, version, overwrite, provider });\n      return c.json({ ok: true, payload });\n    } catch (err) {\n      return c.json(\n        { ok: false, error: err instanceof Error ? err.message : 'Install failed' },\n        400,\n      );\n    }\n  });\n\n  authenticated.post('/api/skills/upload', async (c) => {\n    let body: Record<string, unknown>;\n    try {\n      body = await c.req.parseBody({ all: true });\n    } catch {\n      return c.json({ ok: false, error: 'Invalid multipart body' }, 400);\n    }\n    const file = body['file'];\n    if (!file || typeof file !== 'object') {\n      return c.json({ ok: false, error: 'Missing file field' }, 400);\n    }\n    let buf: Buffer;\n    if (file instanceof File) {\n      buf = Buffer.from(await file.arrayBuffer());\n    } else if (typeof (file as Blob).arrayBuffer === 'function') {\n      buf = Buffer.from(await (file as Blob).arrayBuffer());\n    } else {\n      return c.json({ ok: false, error: 'Invalid file upload' }, 400);\n    }\n    const skillIdRaw = body['skillId'];\n    const overwriteRaw = body['overwrite'];\n    const skillId = typeof skillIdRaw === 'string' && skillIdRaw.trim() ? skillIdRaw.trim() : undefined;\n    const overwrite =\n      overwriteRaw === 'true' ||\n      overwriteRaw === true ||\n      overwriteRaw === '1';\n\n    try {\n      const result = service.marketplace.installSkillZip(buf, { skillId, overwrite });\n      return c.json({ ok: true, payload: result });\n    } catch (err) {\n      return c.json(\n        { ok: false, error: err instanceof Error ? err.message : 'Install failed' },\n        400,\n      );\n    }\n  });\n\n  authenticated.delete('/api/skills/:id', (c) => {\n    const id = c.req.param('id');\n    if (!id) {\n      return c.json({ ok: false, error: 'Missing id' }, 400);\n    }\n    try {\n      service.marketplace.deleteSkill(id);\n      return c.json({ ok: true });\n    } catch (err) {\n      return c.json(\n        { ok: false, error: err instanceof Error ? err.message : 'Delete failed' },\n        400,\n      );\n    }\n  });\n}\n"],"mappings":";;;;;;;;AASA,SAAS,8BAA8B,KAA6C;CAClF,MAAM,IAAI,KAAK,MAAM,CAAC,aAAa;AACnC,KAAI,KAAK,qBAAqB,EAAE,CAAE,QAAO;;AAI3C,SAAgB,6BAA6B,eAAqB,MAAoC;CACpG,MAAM,EAAE,YAAY;AAIpB,eAAc,IAAI,kBAAkB,MAAM;EACxC,MAAM,MAAM,gBAAgB,MAAM;EAClC,MAAM,WAAW,IACd,QAAQ,QAAQ,IAAI,MAAM,SAAS,SAAS,IAAI,IAAI,MAAM,SAAS,UAAU,CAAC,CAC9E,KAAK,SAAS;GACb,IAAI,IAAI;GACR,MAAM,IAAI;GACV,SAAS,IAAI,WAAW,EAAE;GAC1B,aAAa,IAAI;GACjB,UAAU,IAAI;GACd,OAAO,IAAI;GACX,aAAa,IAAI,eAAe;GAChC,UAAU,IAAI,YAAY,EAAE;GAC7B,EAAE;EACL,MAAM,oBAAoB,IACvB,QAAQ,QAAQ,IAAI,aAAa,YAAY,CAC7C,KAAK,SAAS;GACb,IAAI,IAAI;GACR,MAAM,IAAI;GACV,aAAa,IAAI;GACjB,aAAa,IAAI,GAAG,WAAW,OAAO,GAAG,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,KAAA;GACjE,EAAE;AACL,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;IAAE;IAAU;IAAmB;GAAE,CAAC;GACrE;AAEF,eAAc,IAAI,uBAAuB,OAAO,MAAM;EACpD,MAAM,aAAa,EAAE,IAAI,MAAM,aAAa,EAAE,MAAM,IAAI;AACxD,MAAI;GAQF,MAAM,UAAU,MAAM,mBAAmB,MADvB,eANA,iCAChB,QAAQ,WAAW,EACnB,YACA,MACA,qBAAqB,WAAW,CAEQ,CAAC,CACE;AAC7C,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM;IAAS,CAAC;WAC7B,KAAK;AACZ,UAAO,EAAE,KACP;IACE,IAAI;IACJ,OAAO;KACL,MAAM;KACN,SAAS,eAAe,QAAQ,IAAI,UAAU;KAC/C;IACF,EACD,IACD;;GAEH;AAIF,eAAc,IAAI,qBAAqB,MAAM;EAC3C,MAAM,UAAU,EAAE,IAAI,MAAM,UAAU,EAAE,MAAM,IAAI,QAAQ,WAAW,CAAC,QAAQ,WAAW;EACzF,MAAM,UAAU,QAAQ,YAAY,kBAAkB,QAAQ;AAC9D,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM;GAAS,CAAC;GACpC;AAEF,eAAc,IAAI,gBAAgB,MAAM;EACtC,MAAM,UAAU,QAAQ,YAAY,cAAc;AAClD,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM;GAAS,CAAC;GACpC;AAEF,eAAc,IAAI,uBAAuB,MAAM;EAC7C,MAAM,UAAU,QAAQ,YAAY,oBAAoB;AACxD,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM;GAAS,CAAC;GACpC;AAEF,eAAc,IAAI,mCAAmC,MAAM;EACzD,MAAM,MAAM,EAAE,IAAI,MAAM,YAAY;AACpC,MAAI,CAAC,IACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAsB,EAAE,IAAI;EAEhE,IAAI;AACJ,MAAI;AACF,eAAY,mBAAmB,IAAI;UAC7B;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAAsB,EAAE,IAAI;;EAEhE,MAAM,OAAO,QAAQ,YAAY,uBAAuB,UAAU;AAClE,MAAI,CAAC,KACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAmB,EAAE,IAAI;AAE7D,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;GAAM,CAAC;GAC1C;AAEF,eAAc,KAAK,uBAAuB,MAAM;AAC9C,UAAQ,YAAY,cAAc;AAClC,SAAO,EAAE,KAAK,EAAE,IAAI,MAAM,CAAC;GAC3B;AAEF,eAAc,MAAM,uBAAuB,OAAO,MAAM;EACtD,IAAI;AACJ,MAAI;AACF,UAAQ,MAAM,EAAE,IAAI,MAAM;UACpB;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAAgB,EAAE,IAAI;;EAE1D,MAAM,YAAY,OAAO,KAAK,cAAc,WAAW,KAAK,UAAU,MAAM,GAAG;EAC/E,MAAM,UAAU,KAAK;AACrB,MAAI,CAAC,aAAa,OAAO,YAAY,UACnC,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAoD,EAAE,IAAI;AAE9F,MAAI;AACF,WAAQ,YAAY,kBAAkB,WAAW,QAAQ;AACzD,UAAO,EAAE,KAAK,EAAE,IAAI,MAAM,CAAC;WACpB,KAAK;AACZ,UAAO,EAAE,KACP;IAAE,IAAI;IAAO,OAAO,eAAe,QAAQ,IAAI,UAAU;IAAiB,EAC1E,IACD;;GAEH;AAEF,eAAc,IAAI,2BAA2B,OAAO,MAAM;EACxD,MAAM,IAAI,EAAE,IAAI,MAAM,IAAI,EAAE,MAAM,IAAI;EACtC,MAAM,UAAU,EAAE,IAAI,MAAM,OAAO;EACnC,MAAM,cAAc,EAAE,IAAI,MAAM,WAAW;EAC3C,MAAM,UAAU,EAAE,IAAI,MAAM,OAAO;EACnC,MAAM,OAAO,WAAW,QAAQ,YAAY,KAAK,KAAK,IAAI,GAAG,OAAO,QAAQ,IAAI,EAAE,GAAG,KAAA;EACrF,MAAM,WACJ,eAAe,QAAQ,gBAAgB,KACnC,KAAK,IAAI,IAAI,KAAK,IAAI,GAAG,OAAO,YAAY,IAAI,GAAG,CAAC,GACpD,KAAA;EACN,MAAM,OACJ,YAAY,YAAY,YAAY,cAAc,UAAU,KAAA;EAC9D,MAAM,WAAW,EAAE,IAAI,MAAM,WAAW,EAAE,MAAM,IAAI;EACpD,MAAM,WAAW,8BAA8B,EAAE,IAAI,MAAM,WAAW,CAAC;AACvE,MAAI;GACF,MAAM,UAAU,MAAM,QAAQ,YAAY,mBACxC;IACE,GAAG,KAAK,KAAA;IACR;IACA;IACA;IACA,UAAU,YAAY,KAAA;IACvB,EACD,SACD;AACD,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM;IAAS,CAAC;WAC7B,KAAK;AACZ,UAAO,EAAE,KACP;IAAE,IAAI;IAAO,OAAO,eAAe,QAAQ,IAAI,UAAU;IAA8B,EACvF,IACD;;GAEH;AAEF,eAAc,IAAI,oCAAoC,OAAO,MAAM;EACjE,MAAM,OAAO,MAAM,QAAQ,YAAY,mBAAmB;AAC1D,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;GAAM,CAAC;GAC1C;;AAGF,eAAc,IAAI,qCAAqC,OAAO,MAAM;EAClE,MAAM,CAAC,WAAW,WAAW,MAAM,QAAQ,IAAI,CAC7C,QAAQ,YAAY,oBAAoB,EACxC,QAAQ,YAAY,mBAAmB,CACxC,CAAC;AACF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;IAAE;IAAW,SAAS,QAAQ;IAAU;GAAE,CAAC;GAC9E;AAEF,eAAc,IAAI,sCAAsC,OAAO,MAAM;EACnE,MAAM,WAAW,8BAA8B,EAAE,IAAI,MAAM,WAAW,CAAC;AACvE,MAAI;GACF,MAAM,UAAU,MAAM,QAAQ,YAAY,sBAAsB,SAAS;AACzE,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM;IAAS,CAAC;WAC7B,KAAK;AACZ,UAAO,EAAE,KACP;IAAE,IAAI;IAAO,OAAO,eAAe,QAAQ,IAAI,UAAU;IAAiC,EAC1F,IACD;;GAEH;AAEF,eAAc,IAAI,6CAA6C,OAAO,MAAM;EAC1E,MAAM,MAAM,EAAE,IAAI,MAAM,UAAU;AAClC,MAAI,CAAC,IACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAwB,EAAE,IAAI;EAElE,IAAI;AACJ,MAAI;AACF,aAAU,mBAAmB,IAAI;UAC3B;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAAwB,EAAE,IAAI;;AAElE,MAAI;GACF,MAAM,WAAW,8BAA8B,EAAE,IAAI,MAAM,WAAW,CAAC;GACvE,MAAM,UAAU,MAAM,QAAQ,YAAY,yBAAyB,SAAS,SAAS;AACrF,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM;IAAS,CAAC;WAC7B,KAAK;AACZ,UAAO,EAAE,KACP;IAAE,IAAI;IAAO,OAAO,eAAe,QAAQ,IAAI,UAAU;IAA8B,EACvF,IACD;;GAEH;AAEF,eAAc,KAAK,mCAAmC,OAAO,MAAM;EACjE,IAAI;AACJ,MAAI;AACF,UAAQ,MAAM,EAAE,IAAI,MAAM;UACpB;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAAgB,EAAE,IAAI;;EAE1D,MAAM,OAAO,OAAO,KAAK,SAAS,WAAW,KAAK,KAAK,MAAM,GAAG;EAChE,MAAM,UAAU,OAAO,KAAK,YAAY,WAAW,KAAK,QAAQ,MAAM,GAAG,KAAA;EACzE,MAAM,YACJ,KAAK,cAAc,QACnB,KAAK,cAAc,UACnB,KAAK,cAAc;EACrB,MAAM,WAAW,8BACf,OAAO,KAAK,aAAa,WAAW,KAAK,WAAW,KAAA,EACrD;AACD,MAAI,CAAC,KACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAoE,EAAE,IAAI;AAE9G,MAAI;GACF,MAAM,UAAU,MAAM,QAAQ,YAAY,aAAa;IAAE;IAAM;IAAS;IAAW;IAAU,CAAC;AAC9F,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM;IAAS,CAAC;WAC7B,KAAK;AACZ,UAAO,EAAE,KACP;IAAE,IAAI;IAAO,OAAO,eAAe,QAAQ,IAAI,UAAU;IAAkB,EAC3E,IACD;;GAEH;AAEF,eAAc,KAAK,sBAAsB,OAAO,MAAM;EACpD,IAAI;AACJ,MAAI;AACF,UAAO,MAAM,EAAE,IAAI,UAAU,EAAE,KAAK,MAAM,CAAC;UACrC;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAA0B,EAAE,IAAI;;EAEpE,MAAM,OAAO,KAAK;AAClB,MAAI,CAAC,QAAQ,OAAO,SAAS,SAC3B,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAsB,EAAE,IAAI;EAEhE,IAAI;AACJ,MAAI,gBAAgB,KAClB,OAAM,OAAO,KAAK,MAAM,KAAK,aAAa,CAAC;WAClC,OAAQ,KAAc,gBAAgB,WAC/C,OAAM,OAAO,KAAK,MAAO,KAAc,aAAa,CAAC;MAErD,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAuB,EAAE,IAAI;EAEjE,MAAM,aAAa,KAAK;EACxB,MAAM,eAAe,KAAK;EAC1B,MAAM,UAAU,OAAO,eAAe,YAAY,WAAW,MAAM,GAAG,WAAW,MAAM,GAAG,KAAA;EAC1F,MAAM,YACJ,iBAAiB,UACjB,iBAAiB,QACjB,iBAAiB;AAEnB,MAAI;GACF,MAAM,SAAS,QAAQ,YAAY,gBAAgB,KAAK;IAAE;IAAS;IAAW,CAAC;AAC/E,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS;IAAQ,CAAC;WACrC,KAAK;AACZ,UAAO,EAAE,KACP;IAAE,IAAI;IAAO,OAAO,eAAe,QAAQ,IAAI,UAAU;IAAkB,EAC3E,IACD;;GAEH;AAEF,eAAc,OAAO,oBAAoB,MAAM;EAC7C,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK;AAC5B,MAAI,CAAC,GACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAc,EAAE,IAAI;AAExD,MAAI;AACF,WAAQ,YAAY,YAAY,GAAG;AACnC,UAAO,EAAE,KAAK,EAAE,IAAI,MAAM,CAAC;WACpB,KAAK;AACZ,UAAO,EAAE,KACP;IAAE,IAAI;IAAO,OAAO,eAAe,QAAQ,IAAI,UAAU;IAAiB,EAC1E,IACD;;GAEH"}

package/dist/src/gateway/hono/routes/connectors.js

@@ -5,9 +5,9 @@ import { getConnectorDefinition, listConnectorCatalog } from "../../../connector
 import { appendComposioTriggerEvent, listComposioTriggerEvents } from "../../../connectors/composio-triggers.js";
 import { recordConnectorHealthUsage } from "../../../connectors/usage.js";
 import { getConnectorInstance, listConnectorInstances } from "../../../connectors/instances.js";
-import { testConnectorInstance } from "../../../connectors/health.js";
+import { previewConnectorDefinition, testConnectorInstance } from "../../../connectors/health.js";
 import { completeConnectorOAuth, startConnectorOAuth } from "../../../connectors/oauth.js";
-import { installConnector, installConnectorDefinition, uninstallConnector } from "../../../connectors/install.js";
+import { installConnector, installConnectorDefinition, uninstallConnector, updateConnectorConfig } from "../../../connectors/install.js";
 import { setConnectorEnabled } from "../../../connectors/lifecycle.js";
 import { isConnectorRegistrySource, listConnectorRegistries, searchConnectorRegistries } from "../../../connectors/registries/search.js";
 //#region src/gateway/hono/routes/connectors.ts
@@ -227,6 +227,27 @@ function registerConnectorRoutes(authenticated, deps) {
 			}
 		});
 	});
+	authenticated.post("/api/connectors/preview", strictRateLimitMiddleware, async (c) => {
+		const body = await c.req.json().catch(() => ({}));
+		const definition = body && typeof body === "object" && !Array.isArray(body) && body.definition && typeof body.definition === "object" && !Array.isArray(body.definition) ? body.definition : void 0;
+		if (!definition) return c.json({
+			ok: false,
+			error: "Missing connector definition."
+		}, 400);
+		const input = body && typeof body === "object" && !Array.isArray(body) ? body : {};
+		try {
+			const preview = await previewConnectorDefinition(service.currentConfig, definition, input);
+			return c.json({
+				ok: true,
+				payload: { preview }
+			});
+		} catch (error) {
+			return c.json({
+				ok: false,
+				error: errorMessage(error)
+			}, 400);
+		}
+	});
 	authenticated.post("/api/connectors/approvals/respond", async (c) => {
 		const body = await c.req.json().catch(() => ({}));
 		return c.json({
@@ -334,6 +355,29 @@ function registerConnectorRoutes(authenticated, deps) {
 			}, 500);
 		}
 	});
+	authenticated.post("/api/connectors/:id/config", strictRateLimitMiddleware, async (c) => {
+		const instanceId = c.req.param("id");
+		const body = await c.req.json().catch(() => ({}));
+		const input = body && typeof body === "object" && !Array.isArray(body) ? body : {};
+		const config = service.currentConfig;
+		try {
+			const instance = updateConnectorConfig(config, instanceId, input);
+			const saved = await service.saveConfig(config);
+			if (!saved.saved) return c.json({
+				ok: false,
+				error: saved.error
+			}, 500);
+			return c.json({
+				ok: true,
+				payload: { instance }
+			});
+		} catch (error) {
+			return c.json({
+				ok: false,
+				error: errorMessage(error)
+			}, 400);
+		}
+	});
 	authenticated.post("/api/connectors/:id/enable", strictRateLimitMiddleware, async (c) => {
 		const instanceId = c.req.param("id");
 		const config = service.currentConfig;

package/dist/src/gateway/hono/routes/connectors.js.map

@@ -1 +1 @@
-{"version":3,"file":"connectors.js","names":[],"sources":["../../../../../src/gateway/hono/routes/connectors.ts"],"sourcesContent":["import type { Hono } from 'hono';\n\nimport type { Config } from '../../../config/schema.js';\nimport { getConnectorDefinition, listConnectorCatalog, listConnectorProviders } from '../../../connectors/catalog.js';\nimport { executeComposioTool, getComposioToolkitScope, listComposioConnections, listComposioTools, setComposioToolkitScope, startComposioAuthorize, type ComposioScope } from '../../../connectors/composio.js';\nimport { appendComposioTriggerEvent, listComposioTriggerEvents } from '../../../connectors/composio-triggers.js';\nimport { testConnectorInstance } from '../../../connectors/health.js';\nimport { installConnector, installConnectorDefinition, uninstallConnector } from '../../../connectors/install.js';\nimport { getConnectorInstance, listConnectorInstances } from '../../../connectors/instances.js';\nimport { setConnectorEnabled } from '../../../connectors/lifecycle.js';\nimport { startConnectorOAuth, completeConnectorOAuth } from '../../../connectors/oauth.js';\nimport { isConnectorRegistrySource, listConnectorRegistries, searchConnectorRegistries } from '../../../connectors/registries/search.js';\nimport { createConnectorSetupSecretRequest, submitConnectorSetupSecret } from '../../../connectors/setup-secrets.js';\nimport { recordConnectorHealthUsage } from '../../../connectors/usage.js';\nimport type { ConnectorDefinition, ConnectorInstallInput } from '../../../connectors/types.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\n\nfunction errorMessage(error: unknown): string {\n  return error instanceof Error ? error.message : String(error);\n}\n\nexport function registerConnectorRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  const { service, strictRateLimitMiddleware } = deps;\n\n  authenticated.get('/api/connectors/catalog', (c) => {\n    return c.json({\n      ok: true,\n      payload: {\n        connectors: listConnectorCatalog(),\n        providers: listConnectorProviders().map((provider) => ({\n          id: provider.id,\n          displayName: provider.displayName,\n        })),\n        registries: listConnectorRegistries(),\n      },\n    });\n  });\n\n  authenticated.get('/api/connectors/installed', (c) => {\n    const config = service.currentConfig as Config;\n    return c.json({ ok: true, payload: { instances: listConnectorInstances(config) } });\n  });\n\n  authenticated.get('/api/connectors/registry/search', async (c) => {\n    const query = c.req.query('q') ?? c.req.query('query') ?? '';\n    const sourceParam = c.req.query('source') ?? 'all';\n    const source = sourceParam !== 'all' && isConnectorRegistrySource(sourceParam) ? sourceParam : 'all';\n    const page = Number(c.req.query('page') ?? '1');\n    const pageSize = Number(c.req.query('pageSize') ?? '24');\n    const browse = c.req.query('browse') === '1' || c.req.query('browse') === 'true';\n    const results = await searchConnectorRegistries({ query, source, page, pageSize, browse });\n    return c.json({ ok: true, payload: { results, connectors: results.flatMap((result) => result.connectors) } });\n  });\n\n  authenticated.post('/api/connectors/setup/request-secret', strictRateLimitMiddleware, async (c) => {\n    const body = await c.req.json().catch(() => ({}));\n    const key = body && typeof body === 'object' && !Array.isArray(body) && typeof body.key === 'string'\n      ? body.key.trim()\n      : '';\n    if (!key) {\n      return c.json({ ok: false, error: 'Missing secret key.' }, 400);\n    }\n    const label = body && typeof body === 'object' && !Array.isArray(body) && typeof body.label === 'string'\n      ? body.label\n      : undefined;\n    return c.json({ ok: true, payload: { request: createConnectorSetupSecretRequest({ key, label }) } });\n  });\n\n  authenticated.post('/api/connectors/setup/submit-secret', strictRateLimitMiddleware, async (c) => {\n    const body = await c.req.json().catch(() => ({}));\n    const ref = body && typeof body === 'object' && !Array.isArray(body) && typeof body.ref === 'string'\n      ? body.ref\n      : '';\n    const value = body && typeof body === 'object' && !Array.isArray(body) && typeof body.value === 'string'\n      ? body.value\n      : '';\n    const accepted = submitConnectorSetupSecret(ref, value);\n    return c.json({ ok: accepted, payload: { accepted }, error: accepted ? undefined : 'Unknown, expired, or empty secret.' }, accepted ? 200 : 400);\n  });\n\n  authenticated.get('/api/connectors/composio/connections', async (c) => {\n    try {\n      return c.json({ ok: true, payload: { connections: await listComposioConnections() } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.post('/api/connectors/composio/:toolkit/authorize', strictRateLimitMiddleware, async (c) => {\n    try {\n      const toolkit = c.req.param('toolkit');\n      return c.json({ ok: true, payload: { oauth: await startComposioAuthorize(toolkit) } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.get('/api/connectors/composio/:toolkit/tools', async (c) => {\n    try {\n      const toolkit = c.req.param('toolkit');\n      return c.json({ ok: true, payload: { tools: await listComposioTools(toolkit, service.currentConfig as Config) } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.get('/api/connectors/composio/:toolkit/scope', async (c) => {\n    const toolkit = c.req.param('toolkit');\n    return c.json({ ok: true, payload: { toolkit, scope: getComposioToolkitScope(service.currentConfig as Config, toolkit) } });\n  });\n\n  authenticated.post('/api/connectors/composio/:toolkit/scope', strictRateLimitMiddleware, async (c) => {\n    const toolkit = c.req.param('toolkit');\n    const body = await c.req.json().catch(() => ({}));\n    const scope = body && typeof body === 'object' && !Array.isArray(body) && typeof body.scope === 'string'\n      ? body.scope\n      : '';\n    if (scope !== 'read' && scope !== 'write' && scope !== 'admin') {\n      return c.json({ ok: false, error: 'Scope must be read, write, or admin.' }, 400);\n    }\n    const config = service.currentConfig as Config;\n    try {\n      setComposioToolkitScope(config, toolkit, scope as ComposioScope);\n      const saved = await service.saveConfig(config);\n      if (!saved.saved) return c.json({ ok: false, error: saved.error }, 500);\n      return c.json({ ok: true, payload: { toolkit, scope } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.post('/api/connectors/composio/tools/:slug/execute', strictRateLimitMiddleware, async (c) => {\n    const body = await c.req.json().catch(() => ({}));\n    try {\n      const slug = c.req.param('slug');\n      const args = body && typeof body === 'object' && !Array.isArray(body) ? body.arguments : undefined;\n      return c.json({ ok: true, payload: { result: await executeComposioTool({ slug, arguments: args, config: service.currentConfig as Config }) } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.post('/api/connectors/composio/triggers', strictRateLimitMiddleware, async (c) => {\n    const body = await c.req.json().catch(() => ({}));\n    try {\n      const event = await appendComposioTriggerEvent(service.currentConfig as Config, body);\n      return c.json({ ok: true, payload: { event } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.get('/api/connectors/composio/triggers', async (c) => {\n    const limit = Number(c.req.query('limit') ?? '50');\n    try {\n      const events = await listComposioTriggerEvents(service.currentConfig as Config, limit);\n      return c.json({ ok: true, payload: { events } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.get('/api/connectors/:id', (c) => {\n    const connectorId = c.req.param('id');\n    const connector = getConnectorDefinition(connectorId);\n    if (!connector) {\n      return c.json({ ok: false, error: `Unknown connector: ${connectorId}` }, 404);\n    }\n    const config = service.currentConfig as Config;\n    const instances = listConnectorInstances(config).filter((instance) => instance.connectorId === connectorId);\n    return c.json({ ok: true, payload: { connector, instances } });\n  });\n\n  authenticated.post('/api/connectors/approvals/respond', async (c) => {\n    const body = await c.req.json().catch(() => ({}));\n    return c.json({ ok: true, payload: { acknowledged: true, body } });\n  });\n\n  authenticated.post('/api/connectors/:id/oauth/start', strictRateLimitMiddleware, async (c) => {\n    const connectorId = c.req.param('id');\n    const connector = getConnectorDefinition(connectorId);\n    if (!connector) {\n      return c.json({ ok: false, error: `Unknown connector: ${connectorId}` }, 404);\n    }\n    try {\n      const oauth = await startConnectorOAuth(connector);\n      return c.json({ ok: true, payload: { oauth } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.post('/api/connectors/:id/oauth/complete', strictRateLimitMiddleware, async (c) => {\n    const connectorId = c.req.param('id');\n    const connector = getConnectorDefinition(connectorId);\n    if (!connector) {\n      return c.json({ ok: false, error: `Unknown connector: ${connectorId}` }, 404);\n    }\n    const body = await c.req.json().catch(() => ({}));\n    const deviceCode = body && typeof body === 'object' && !Array.isArray(body) && typeof body.deviceCode === 'string'\n      ? body.deviceCode\n      : '';\n    try {\n      const oauth = await completeConnectorOAuth(connector, { deviceCode });\n      return c.json({ ok: true, payload: { oauth } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.post('/api/connectors/:id/install', strictRateLimitMiddleware, async (c) => {\n    const connectorId = c.req.param('id');\n    const body = await c.req.json().catch(() => ({}));\n    const input: ConnectorInstallInput = body && typeof body === 'object' && !Array.isArray(body) ? body : {};\n    const registryDefinition = body && typeof body === 'object' && !Array.isArray(body) && body.definition && typeof body.definition === 'object' && !Array.isArray(body.definition)\n      ? body.definition as ConnectorDefinition\n      : undefined;\n    const config = service.currentConfig as Config;\n    try {\n      const instance = registryDefinition?.id === connectorId\n        ? await installConnectorDefinition(config, registryDefinition, input)\n        : await installConnector(config, connectorId, input);\n      const saved = await service.saveConfig(config);\n      if (!saved.saved) {\n        return c.json({ ok: false, error: saved.error }, 500);\n      }\n      return c.json({ ok: true, payload: { instance } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.post('/api/connectors/:id/test', async (c) => {\n    const instanceId = c.req.param('id');\n    const config = service.currentConfig as Config;\n    const instance = getConnectorInstance(config, instanceId);\n    if (!instance) {\n      return c.json({ ok: false, error: `Connector instance not found: ${instanceId}` }, 404);\n    }\n    if (instance.materialized.type !== 'mcp') {\n      return c.json({ ok: false, error: `Connector type \"${instance.materialized.type}\" does not support MCP health checks.` }, 400);\n    }\n    try {\n      const result = await testConnectorInstance(config, instance.materialized.serverId);\n      recordConnectorHealthUsage(config, instance.instanceId, result);\n      const saved = await service.saveConfig(config);\n      if (!saved.saved) {\n        return c.json({ ok: false, error: saved.error }, 500);\n      }\n      return c.json({ ok: true, payload: result });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 500);\n    }\n  });\n\n  authenticated.post('/api/connectors/:id/enable', strictRateLimitMiddleware, async (c) => {\n    const instanceId = c.req.param('id');\n    const config = service.currentConfig as Config;\n    try {\n      const instance = setConnectorEnabled(config, instanceId, true);\n      const saved = await service.saveConfig(config);\n      if (!saved.saved) {\n        return c.json({ ok: false, error: saved.error }, 500);\n      }\n      return c.json({ ok: true, payload: { instance } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.post('/api/connectors/:id/disable', strictRateLimitMiddleware, async (c) => {\n    const instanceId = c.req.param('id');\n    const config = service.currentConfig as Config;\n    try {\n      const instance = setConnectorEnabled(config, instanceId, false);\n      const saved = await service.saveConfig(config);\n      if (!saved.saved) {\n        return c.json({ ok: false, error: saved.error }, 500);\n      }\n      return c.json({ ok: true, payload: { instance } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.delete('/api/connectors/:id', strictRateLimitMiddleware, async (c) => {\n    const instanceId = c.req.param('id');\n    const config = service.currentConfig as Config;\n    try {\n      const instance = uninstallConnector(config, instanceId);\n      const saved = await service.saveConfig(config);\n      if (!saved.saved) {\n        return c.json({ ok: false, error: saved.error }, 500);\n      }\n      return c.json({ ok: true, payload: { instance } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n}\n"],"mappings":";;;;;;;;;;;;;AAiBA,SAAS,aAAa,OAAwB;AAC5C,QAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;;AAG/D,SAAgB,wBAAwB,eAAqB,MAAoC;CAC/F,MAAM,EAAE,SAAS,8BAA8B;AAE/C,eAAc,IAAI,4BAA4B,MAAM;AAClD,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,YAAY,sBAAsB;IAClC,WAAW,wBAAwB,CAAC,KAAK,cAAc;KACrD,IAAI,SAAS;KACb,aAAa,SAAS;KACvB,EAAE;IACH,YAAY,yBAAyB;IACtC;GACF,CAAC;GACF;AAEF,eAAc,IAAI,8BAA8B,MAAM;EACpD,MAAM,SAAS,QAAQ;AACvB,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,WAAW,uBAAuB,OAAO,EAAE;GAAE,CAAC;GACnF;AAEF,eAAc,IAAI,mCAAmC,OAAO,MAAM;EAChE,MAAM,QAAQ,EAAE,IAAI,MAAM,IAAI,IAAI,EAAE,IAAI,MAAM,QAAQ,IAAI;EAC1D,MAAM,cAAc,EAAE,IAAI,MAAM,SAAS,IAAI;EAK7C,MAAM,UAAU,MAAM,0BAA0B;GAAE;GAAO,QAJ1C,gBAAgB,SAAS,0BAA0B,YAAY,GAAG,cAAc;GAI9B,MAHpD,OAAO,EAAE,IAAI,MAAM,OAAO,IAAI,IAG0B;GAAE,UAFtD,OAAO,EAAE,IAAI,MAAM,WAAW,IAAI,KAE4B;GAAE,QADlE,EAAE,IAAI,MAAM,SAAS,KAAK,OAAO,EAAE,IAAI,MAAM,SAAS,KAAK;GACe,CAAC;AAC1F,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;IAAE;IAAS,YAAY,QAAQ,SAAS,WAAW,OAAO,WAAW;IAAE;GAAE,CAAC;GAC7G;AAEF,eAAc,KAAK,wCAAwC,2BAA2B,OAAO,MAAM;EACjG,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,MAAM,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAI,OAAO,KAAK,QAAQ,WACxF,KAAK,IAAI,MAAM,GACf;AACJ,MAAI,CAAC,IACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAuB,EAAE,IAAI;EAEjE,MAAM,QAAQ,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAI,OAAO,KAAK,UAAU,WAC5F,KAAK,QACL,KAAA;AACJ,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,SAAS,kCAAkC;IAAE;IAAK;IAAO,CAAC,EAAE;GAAE,CAAC;GACpG;AAEF,eAAc,KAAK,uCAAuC,2BAA2B,OAAO,MAAM;EAChG,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EAOjD,MAAM,WAAW,2BANL,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAI,OAAO,KAAK,QAAQ,WACxF,KAAK,MACL,IACU,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAI,OAAO,KAAK,UAAU,WAC5F,KAAK,QACL,GACmD;AACvD,SAAO,EAAE,KAAK;GAAE,IAAI;GAAU,SAAS,EAAE,UAAU;GAAE,OAAO,WAAW,KAAA,IAAY;GAAsC,EAAE,WAAW,MAAM,IAAI;GAChJ;AAEF,eAAc,IAAI,wCAAwC,OAAO,MAAM;AACrE,MAAI;AACF,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,aAAa,MAAM,yBAAyB,EAAE;IAAE,CAAC;WAC/E,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,KAAK,+CAA+C,2BAA2B,OAAO,MAAM;AACxG,MAAI;GACF,MAAM,UAAU,EAAE,IAAI,MAAM,UAAU;AACtC,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,OAAO,MAAM,uBAAuB,QAAQ,EAAE;IAAE,CAAC;WAC/E,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,IAAI,2CAA2C,OAAO,MAAM;AACxE,MAAI;GACF,MAAM,UAAU,EAAE,IAAI,MAAM,UAAU;AACtC,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,OAAO,MAAM,kBAAkB,SAAS,QAAQ,cAAwB,EAAE;IAAE,CAAC;WAC3G,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,IAAI,2CAA2C,OAAO,MAAM;EACxE,MAAM,UAAU,EAAE,IAAI,MAAM,UAAU;AACtC,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;IAAE;IAAS,OAAO,wBAAwB,QAAQ,eAAyB,QAAQ;IAAE;GAAE,CAAC;GAC3H;AAEF,eAAc,KAAK,2CAA2C,2BAA2B,OAAO,MAAM;EACpG,MAAM,UAAU,EAAE,IAAI,MAAM,UAAU;EACtC,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,QAAQ,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAI,OAAO,KAAK,UAAU,WAC5F,KAAK,QACL;AACJ,MAAI,UAAU,UAAU,UAAU,WAAW,UAAU,QACrD,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAwC,EAAE,IAAI;EAElF,MAAM,SAAS,QAAQ;AACvB,MAAI;AACF,2BAAwB,QAAQ,SAAS,MAAuB;GAChE,MAAM,QAAQ,MAAM,QAAQ,WAAW,OAAO;AAC9C,OAAI,CAAC,MAAM,MAAO,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,MAAM;IAAO,EAAE,IAAI;AACvE,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS;KAAE;KAAS;KAAO;IAAE,CAAC;WACjD,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,KAAK,gDAAgD,2BAA2B,OAAO,MAAM;EACzG,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;AACjD,MAAI;GACF,MAAM,OAAO,EAAE,IAAI,MAAM,OAAO;GAChC,MAAM,OAAO,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,GAAG,KAAK,YAAY,KAAA;AACzF,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,QAAQ,MAAM,oBAAoB;KAAE;KAAM,WAAW;KAAM,QAAQ,QAAQ;KAAyB,CAAC,EAAE;IAAE,CAAC;WACxI,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,KAAK,qCAAqC,2BAA2B,OAAO,MAAM;EAC9F,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;AACjD,MAAI;GACF,MAAM,QAAQ,MAAM,2BAA2B,QAAQ,eAAyB,KAAK;AACrF,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,OAAO;IAAE,CAAC;WACxC,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,IAAI,qCAAqC,OAAO,MAAM;EAClE,MAAM,QAAQ,OAAO,EAAE,IAAI,MAAM,QAAQ,IAAI,KAAK;AAClD,MAAI;GACF,MAAM,SAAS,MAAM,0BAA0B,QAAQ,eAAyB,MAAM;AACtF,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,QAAQ;IAAE,CAAC;WACzC,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,IAAI,wBAAwB,MAAM;EAC9C,MAAM,cAAc,EAAE,IAAI,MAAM,KAAK;EACrC,MAAM,YAAY,uBAAuB,YAAY;AACrD,MAAI,CAAC,UACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,sBAAsB;GAAe,EAAE,IAAI;EAE/E,MAAM,SAAS,QAAQ;EACvB,MAAM,YAAY,uBAAuB,OAAO,CAAC,QAAQ,aAAa,SAAS,gBAAgB,YAAY;AAC3G,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;IAAE;IAAW;IAAW;GAAE,CAAC;GAC9D;AAEF,eAAc,KAAK,qCAAqC,OAAO,MAAM;EACnE,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;AACjD,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;IAAE,cAAc;IAAM;IAAM;GAAE,CAAC;GAClE;AAEF,eAAc,KAAK,mCAAmC,2BAA2B,OAAO,MAAM;EAC5F,MAAM,cAAc,EAAE,IAAI,MAAM,KAAK;EACrC,MAAM,YAAY,uBAAuB,YAAY;AACrD,MAAI,CAAC,UACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,sBAAsB;GAAe,EAAE,IAAI;AAE/E,MAAI;GACF,MAAM,QAAQ,MAAM,oBAAoB,UAAU;AAClD,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,OAAO;IAAE,CAAC;WACxC,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,KAAK,sCAAsC,2BAA2B,OAAO,MAAM;EAC/F,MAAM,cAAc,EAAE,IAAI,MAAM,KAAK;EACrC,MAAM,YAAY,uBAAuB,YAAY;AACrD,MAAI,CAAC,UACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,sBAAsB;GAAe,EAAE,IAAI;EAE/E,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,aAAa,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAI,OAAO,KAAK,eAAe,WACtG,KAAK,aACL;AACJ,MAAI;GACF,MAAM,QAAQ,MAAM,uBAAuB,WAAW,EAAE,YAAY,CAAC;AACrE,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,OAAO;IAAE,CAAC;WACxC,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,KAAK,+BAA+B,2BAA2B,OAAO,MAAM;EACxF,MAAM,cAAc,EAAE,IAAI,MAAM,KAAK;EACrC,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,QAA+B,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,GAAG,OAAO,EAAE;EACzG,MAAM,qBAAqB,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAI,KAAK,cAAc,OAAO,KAAK,eAAe,YAAY,CAAC,MAAM,QAAQ,KAAK,WAAW,GAC5K,KAAK,aACL,KAAA;EACJ,MAAM,SAAS,QAAQ;AACvB,MAAI;GACF,MAAM,WAAW,oBAAoB,OAAO,cACxC,MAAM,2BAA2B,QAAQ,oBAAoB,MAAM,GACnE,MAAM,iBAAiB,QAAQ,aAAa,MAAM;GACtD,MAAM,QAAQ,MAAM,QAAQ,WAAW,OAAO;AAC9C,OAAI,CAAC,MAAM,MACT,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,MAAM;IAAO,EAAE,IAAI;AAEvD,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,UAAU;IAAE,CAAC;WAC3C,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,KAAK,4BAA4B,OAAO,MAAM;EAC1D,MAAM,aAAa,EAAE,IAAI,MAAM,KAAK;EACpC,MAAM,SAAS,QAAQ;EACvB,MAAM,WAAW,qBAAqB,QAAQ,WAAW;AACzD,MAAI,CAAC,SACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,iCAAiC;GAAc,EAAE,IAAI;AAEzF,MAAI,SAAS,aAAa,SAAS,MACjC,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,mBAAmB,SAAS,aAAa,KAAK;GAAwC,EAAE,IAAI;AAEhI,MAAI;GACF,MAAM,SAAS,MAAM,sBAAsB,QAAQ,SAAS,aAAa,SAAS;AAClF,8BAA2B,QAAQ,SAAS,YAAY,OAAO;GAC/D,MAAM,QAAQ,MAAM,QAAQ,WAAW,OAAO;AAC9C,OAAI,CAAC,MAAM,MACT,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,MAAM;IAAO,EAAE,IAAI;AAEvD,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS;IAAQ,CAAC;WACrC,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,KAAK,8BAA8B,2BAA2B,OAAO,MAAM;EACvF,MAAM,aAAa,EAAE,IAAI,MAAM,KAAK;EACpC,MAAM,SAAS,QAAQ;AACvB,MAAI;GACF,MAAM,WAAW,oBAAoB,QAAQ,YAAY,KAAK;GAC9D,MAAM,QAAQ,MAAM,QAAQ,WAAW,OAAO;AAC9C,OAAI,CAAC,MAAM,MACT,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,MAAM;IAAO,EAAE,IAAI;AAEvD,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,UAAU;IAAE,CAAC;WAC3C,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,KAAK,+BAA+B,2BAA2B,OAAO,MAAM;EACxF,MAAM,aAAa,EAAE,IAAI,MAAM,KAAK;EACpC,MAAM,SAAS,QAAQ;AACvB,MAAI;GACF,MAAM,WAAW,oBAAoB,QAAQ,YAAY,MAAM;GAC/D,MAAM,QAAQ,MAAM,QAAQ,WAAW,OAAO;AAC9C,OAAI,CAAC,MAAM,MACT,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,MAAM;IAAO,EAAE,IAAI;AAEvD,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,UAAU;IAAE,CAAC;WAC3C,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,OAAO,uBAAuB,2BAA2B,OAAO,MAAM;EAClF,MAAM,aAAa,EAAE,IAAI,MAAM,KAAK;EACpC,MAAM,SAAS,QAAQ;AACvB,MAAI;GACF,MAAM,WAAW,mBAAmB,QAAQ,WAAW;GACvD,MAAM,QAAQ,MAAM,QAAQ,WAAW,OAAO;AAC9C,OAAI,CAAC,MAAM,MACT,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,MAAM;IAAO,EAAE,IAAI;AAEvD,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,UAAU;IAAE,CAAC;WAC3C,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D"}
+{"version":3,"file":"connectors.js","names":[],"sources":["../../../../../src/gateway/hono/routes/connectors.ts"],"sourcesContent":["import type { Hono } from 'hono';\n\nimport type { Config } from '../../../config/schema.js';\nimport { getConnectorDefinition, listConnectorCatalog, listConnectorProviders } from '../../../connectors/catalog.js';\nimport { executeComposioTool, getComposioToolkitScope, listComposioConnections, listComposioTools, setComposioToolkitScope, startComposioAuthorize, type ComposioScope } from '../../../connectors/composio.js';\nimport { appendComposioTriggerEvent, listComposioTriggerEvents } from '../../../connectors/composio-triggers.js';\nimport { previewConnectorDefinition, testConnectorInstance } from '../../../connectors/health.js';\nimport { installConnector, installConnectorDefinition, uninstallConnector, updateConnectorConfig } from '../../../connectors/install.js';\nimport { getConnectorInstance, listConnectorInstances } from '../../../connectors/instances.js';\nimport { setConnectorEnabled } from '../../../connectors/lifecycle.js';\nimport { startConnectorOAuth, completeConnectorOAuth } from '../../../connectors/oauth.js';\nimport { isConnectorRegistrySource, listConnectorRegistries, searchConnectorRegistries } from '../../../connectors/registries/search.js';\nimport { createConnectorSetupSecretRequest, submitConnectorSetupSecret } from '../../../connectors/setup-secrets.js';\nimport { recordConnectorHealthUsage } from '../../../connectors/usage.js';\nimport type { ConnectorDefinition, ConnectorInstallInput } from '../../../connectors/types.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\n\nfunction errorMessage(error: unknown): string {\n  return error instanceof Error ? error.message : String(error);\n}\n\nexport function registerConnectorRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  const { service, strictRateLimitMiddleware } = deps;\n\n  authenticated.get('/api/connectors/catalog', (c) => {\n    return c.json({\n      ok: true,\n      payload: {\n        connectors: listConnectorCatalog(),\n        providers: listConnectorProviders().map((provider) => ({\n          id: provider.id,\n          displayName: provider.displayName,\n        })),\n        registries: listConnectorRegistries(),\n      },\n    });\n  });\n\n  authenticated.get('/api/connectors/installed', (c) => {\n    const config = service.currentConfig as Config;\n    return c.json({ ok: true, payload: { instances: listConnectorInstances(config) } });\n  });\n\n  authenticated.get('/api/connectors/registry/search', async (c) => {\n    const query = c.req.query('q') ?? c.req.query('query') ?? '';\n    const sourceParam = c.req.query('source') ?? 'all';\n    const source = sourceParam !== 'all' && isConnectorRegistrySource(sourceParam) ? sourceParam : 'all';\n    const page = Number(c.req.query('page') ?? '1');\n    const pageSize = Number(c.req.query('pageSize') ?? '24');\n    const browse = c.req.query('browse') === '1' || c.req.query('browse') === 'true';\n    const results = await searchConnectorRegistries({ query, source, page, pageSize, browse });\n    return c.json({ ok: true, payload: { results, connectors: results.flatMap((result) => result.connectors) } });\n  });\n\n  authenticated.post('/api/connectors/setup/request-secret', strictRateLimitMiddleware, async (c) => {\n    const body = await c.req.json().catch(() => ({}));\n    const key = body && typeof body === 'object' && !Array.isArray(body) && typeof body.key === 'string'\n      ? body.key.trim()\n      : '';\n    if (!key) {\n      return c.json({ ok: false, error: 'Missing secret key.' }, 400);\n    }\n    const label = body && typeof body === 'object' && !Array.isArray(body) && typeof body.label === 'string'\n      ? body.label\n      : undefined;\n    return c.json({ ok: true, payload: { request: createConnectorSetupSecretRequest({ key, label }) } });\n  });\n\n  authenticated.post('/api/connectors/setup/submit-secret', strictRateLimitMiddleware, async (c) => {\n    const body = await c.req.json().catch(() => ({}));\n    const ref = body && typeof body === 'object' && !Array.isArray(body) && typeof body.ref === 'string'\n      ? body.ref\n      : '';\n    const value = body && typeof body === 'object' && !Array.isArray(body) && typeof body.value === 'string'\n      ? body.value\n      : '';\n    const accepted = submitConnectorSetupSecret(ref, value);\n    return c.json({ ok: accepted, payload: { accepted }, error: accepted ? undefined : 'Unknown, expired, or empty secret.' }, accepted ? 200 : 400);\n  });\n\n  authenticated.get('/api/connectors/composio/connections', async (c) => {\n    try {\n      return c.json({ ok: true, payload: { connections: await listComposioConnections() } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.post('/api/connectors/composio/:toolkit/authorize', strictRateLimitMiddleware, async (c) => {\n    try {\n      const toolkit = c.req.param('toolkit');\n      return c.json({ ok: true, payload: { oauth: await startComposioAuthorize(toolkit) } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.get('/api/connectors/composio/:toolkit/tools', async (c) => {\n    try {\n      const toolkit = c.req.param('toolkit');\n      return c.json({ ok: true, payload: { tools: await listComposioTools(toolkit, service.currentConfig as Config) } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.get('/api/connectors/composio/:toolkit/scope', async (c) => {\n    const toolkit = c.req.param('toolkit');\n    return c.json({ ok: true, payload: { toolkit, scope: getComposioToolkitScope(service.currentConfig as Config, toolkit) } });\n  });\n\n  authenticated.post('/api/connectors/composio/:toolkit/scope', strictRateLimitMiddleware, async (c) => {\n    const toolkit = c.req.param('toolkit');\n    const body = await c.req.json().catch(() => ({}));\n    const scope = body && typeof body === 'object' && !Array.isArray(body) && typeof body.scope === 'string'\n      ? body.scope\n      : '';\n    if (scope !== 'read' && scope !== 'write' && scope !== 'admin') {\n      return c.json({ ok: false, error: 'Scope must be read, write, or admin.' }, 400);\n    }\n    const config = service.currentConfig as Config;\n    try {\n      setComposioToolkitScope(config, toolkit, scope as ComposioScope);\n      const saved = await service.saveConfig(config);\n      if (!saved.saved) return c.json({ ok: false, error: saved.error }, 500);\n      return c.json({ ok: true, payload: { toolkit, scope } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.post('/api/connectors/composio/tools/:slug/execute', strictRateLimitMiddleware, async (c) => {\n    const body = await c.req.json().catch(() => ({}));\n    try {\n      const slug = c.req.param('slug');\n      const args = body && typeof body === 'object' && !Array.isArray(body) ? body.arguments : undefined;\n      return c.json({ ok: true, payload: { result: await executeComposioTool({ slug, arguments: args, config: service.currentConfig as Config }) } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.post('/api/connectors/composio/triggers', strictRateLimitMiddleware, async (c) => {\n    const body = await c.req.json().catch(() => ({}));\n    try {\n      const event = await appendComposioTriggerEvent(service.currentConfig as Config, body);\n      return c.json({ ok: true, payload: { event } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.get('/api/connectors/composio/triggers', async (c) => {\n    const limit = Number(c.req.query('limit') ?? '50');\n    try {\n      const events = await listComposioTriggerEvents(service.currentConfig as Config, limit);\n      return c.json({ ok: true, payload: { events } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.get('/api/connectors/:id', (c) => {\n    const connectorId = c.req.param('id');\n    const connector = getConnectorDefinition(connectorId);\n    if (!connector) {\n      return c.json({ ok: false, error: `Unknown connector: ${connectorId}` }, 404);\n    }\n    const config = service.currentConfig as Config;\n    const instances = listConnectorInstances(config).filter((instance) => instance.connectorId === connectorId);\n    return c.json({ ok: true, payload: { connector, instances } });\n  });\n\n  authenticated.post('/api/connectors/preview', strictRateLimitMiddleware, async (c) => {\n    const body = await c.req.json().catch(() => ({}));\n    const definition = body && typeof body === 'object' && !Array.isArray(body) && body.definition && typeof body.definition === 'object' && !Array.isArray(body.definition)\n      ? body.definition as ConnectorDefinition\n      : undefined;\n    if (!definition) {\n      return c.json({ ok: false, error: 'Missing connector definition.' }, 400);\n    }\n    const input: ConnectorInstallInput = body && typeof body === 'object' && !Array.isArray(body) ? body : {};\n    try {\n      const preview = await previewConnectorDefinition(service.currentConfig as Config, definition, input);\n      return c.json({ ok: true, payload: { preview } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.post('/api/connectors/approvals/respond', async (c) => {\n    const body = await c.req.json().catch(() => ({}));\n    return c.json({ ok: true, payload: { acknowledged: true, body } });\n  });\n\n  authenticated.post('/api/connectors/:id/oauth/start', strictRateLimitMiddleware, async (c) => {\n    const connectorId = c.req.param('id');\n    const connector = getConnectorDefinition(connectorId);\n    if (!connector) {\n      return c.json({ ok: false, error: `Unknown connector: ${connectorId}` }, 404);\n    }\n    try {\n      const oauth = await startConnectorOAuth(connector);\n      return c.json({ ok: true, payload: { oauth } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.post('/api/connectors/:id/oauth/complete', strictRateLimitMiddleware, async (c) => {\n    const connectorId = c.req.param('id');\n    const connector = getConnectorDefinition(connectorId);\n    if (!connector) {\n      return c.json({ ok: false, error: `Unknown connector: ${connectorId}` }, 404);\n    }\n    const body = await c.req.json().catch(() => ({}));\n    const deviceCode = body && typeof body === 'object' && !Array.isArray(body) && typeof body.deviceCode === 'string'\n      ? body.deviceCode\n      : '';\n    try {\n      const oauth = await completeConnectorOAuth(connector, { deviceCode });\n      return c.json({ ok: true, payload: { oauth } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.post('/api/connectors/:id/install', strictRateLimitMiddleware, async (c) => {\n    const connectorId = c.req.param('id');\n    const body = await c.req.json().catch(() => ({}));\n    const input: ConnectorInstallInput = body && typeof body === 'object' && !Array.isArray(body) ? body : {};\n    const registryDefinition = body && typeof body === 'object' && !Array.isArray(body) && body.definition && typeof body.definition === 'object' && !Array.isArray(body.definition)\n      ? body.definition as ConnectorDefinition\n      : undefined;\n    const config = service.currentConfig as Config;\n    try {\n      const instance = registryDefinition?.id === connectorId\n        ? await installConnectorDefinition(config, registryDefinition, input)\n        : await installConnector(config, connectorId, input);\n      const saved = await service.saveConfig(config);\n      if (!saved.saved) {\n        return c.json({ ok: false, error: saved.error }, 500);\n      }\n      return c.json({ ok: true, payload: { instance } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.post('/api/connectors/:id/test', async (c) => {\n    const instanceId = c.req.param('id');\n    const config = service.currentConfig as Config;\n    const instance = getConnectorInstance(config, instanceId);\n    if (!instance) {\n      return c.json({ ok: false, error: `Connector instance not found: ${instanceId}` }, 404);\n    }\n    if (instance.materialized.type !== 'mcp') {\n      return c.json({ ok: false, error: `Connector type \"${instance.materialized.type}\" does not support MCP health checks.` }, 400);\n    }\n    try {\n      const result = await testConnectorInstance(config, instance.materialized.serverId);\n      recordConnectorHealthUsage(config, instance.instanceId, result);\n      const saved = await service.saveConfig(config);\n      if (!saved.saved) {\n        return c.json({ ok: false, error: saved.error }, 500);\n      }\n      return c.json({ ok: true, payload: result });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 500);\n    }\n  });\n\n  authenticated.post('/api/connectors/:id/config', strictRateLimitMiddleware, async (c) => {\n    const instanceId = c.req.param('id');\n    const body = await c.req.json().catch(() => ({}));\n    const input: ConnectorInstallInput = body && typeof body === 'object' && !Array.isArray(body) ? body : {};\n    const config = service.currentConfig as Config;\n    try {\n      const instance = updateConnectorConfig(config, instanceId, input);\n      const saved = await service.saveConfig(config);\n      if (!saved.saved) {\n        return c.json({ ok: false, error: saved.error }, 500);\n      }\n      return c.json({ ok: true, payload: { instance } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.post('/api/connectors/:id/enable', strictRateLimitMiddleware, async (c) => {\n    const instanceId = c.req.param('id');\n    const config = service.currentConfig as Config;\n    try {\n      const instance = setConnectorEnabled(config, instanceId, true);\n      const saved = await service.saveConfig(config);\n      if (!saved.saved) {\n        return c.json({ ok: false, error: saved.error }, 500);\n      }\n      return c.json({ ok: true, payload: { instance } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.post('/api/connectors/:id/disable', strictRateLimitMiddleware, async (c) => {\n    const instanceId = c.req.param('id');\n    const config = service.currentConfig as Config;\n    try {\n      const instance = setConnectorEnabled(config, instanceId, false);\n      const saved = await service.saveConfig(config);\n      if (!saved.saved) {\n        return c.json({ ok: false, error: saved.error }, 500);\n      }\n      return c.json({ ok: true, payload: { instance } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.delete('/api/connectors/:id', strictRateLimitMiddleware, async (c) => {\n    const instanceId = c.req.param('id');\n    const config = service.currentConfig as Config;\n    try {\n      const instance = uninstallConnector(config, instanceId);\n      const saved = await service.saveConfig(config);\n      if (!saved.saved) {\n        return c.json({ ok: false, error: saved.error }, 500);\n      }\n      return c.json({ ok: true, payload: { instance } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n}\n"],"mappings":";;;;;;;;;;;;;AAiBA,SAAS,aAAa,OAAwB;AAC5C,QAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;;AAG/D,SAAgB,wBAAwB,eAAqB,MAAoC;CAC/F,MAAM,EAAE,SAAS,8BAA8B;AAE/C,eAAc,IAAI,4BAA4B,MAAM;AAClD,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,YAAY,sBAAsB;IAClC,WAAW,wBAAwB,CAAC,KAAK,cAAc;KACrD,IAAI,SAAS;KACb,aAAa,SAAS;KACvB,EAAE;IACH,YAAY,yBAAyB;IACtC;GACF,CAAC;GACF;AAEF,eAAc,IAAI,8BAA8B,MAAM;EACpD,MAAM,SAAS,QAAQ;AACvB,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,WAAW,uBAAuB,OAAO,EAAE;GAAE,CAAC;GACnF;AAEF,eAAc,IAAI,mCAAmC,OAAO,MAAM;EAChE,MAAM,QAAQ,EAAE,IAAI,MAAM,IAAI,IAAI,EAAE,IAAI,MAAM,QAAQ,IAAI;EAC1D,MAAM,cAAc,EAAE,IAAI,MAAM,SAAS,IAAI;EAK7C,MAAM,UAAU,MAAM,0BAA0B;GAAE;GAAO,QAJ1C,gBAAgB,SAAS,0BAA0B,YAAY,GAAG,cAAc;GAI9B,MAHpD,OAAO,EAAE,IAAI,MAAM,OAAO,IAAI,IAG0B;GAAE,UAFtD,OAAO,EAAE,IAAI,MAAM,WAAW,IAAI,KAE4B;GAAE,QADlE,EAAE,IAAI,MAAM,SAAS,KAAK,OAAO,EAAE,IAAI,MAAM,SAAS,KAAK;GACe,CAAC;AAC1F,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;IAAE;IAAS,YAAY,QAAQ,SAAS,WAAW,OAAO,WAAW;IAAE;GAAE,CAAC;GAC7G;AAEF,eAAc,KAAK,wCAAwC,2BAA2B,OAAO,MAAM;EACjG,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,MAAM,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAI,OAAO,KAAK,QAAQ,WACxF,KAAK,IAAI,MAAM,GACf;AACJ,MAAI,CAAC,IACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAuB,EAAE,IAAI;EAEjE,MAAM,QAAQ,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAI,OAAO,KAAK,UAAU,WAC5F,KAAK,QACL,KAAA;AACJ,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,SAAS,kCAAkC;IAAE;IAAK;IAAO,CAAC,EAAE;GAAE,CAAC;GACpG;AAEF,eAAc,KAAK,uCAAuC,2BAA2B,OAAO,MAAM;EAChG,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EAOjD,MAAM,WAAW,2BANL,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAI,OAAO,KAAK,QAAQ,WACxF,KAAK,MACL,IACU,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAI,OAAO,KAAK,UAAU,WAC5F,KAAK,QACL,GACmD;AACvD,SAAO,EAAE,KAAK;GAAE,IAAI;GAAU,SAAS,EAAE,UAAU;GAAE,OAAO,WAAW,KAAA,IAAY;GAAsC,EAAE,WAAW,MAAM,IAAI;GAChJ;AAEF,eAAc,IAAI,wCAAwC,OAAO,MAAM;AACrE,MAAI;AACF,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,aAAa,MAAM,yBAAyB,EAAE;IAAE,CAAC;WAC/E,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,KAAK,+CAA+C,2BAA2B,OAAO,MAAM;AACxG,MAAI;GACF,MAAM,UAAU,EAAE,IAAI,MAAM,UAAU;AACtC,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,OAAO,MAAM,uBAAuB,QAAQ,EAAE;IAAE,CAAC;WAC/E,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,IAAI,2CAA2C,OAAO,MAAM;AACxE,MAAI;GACF,MAAM,UAAU,EAAE,IAAI,MAAM,UAAU;AACtC,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,OAAO,MAAM,kBAAkB,SAAS,QAAQ,cAAwB,EAAE;IAAE,CAAC;WAC3G,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,IAAI,2CAA2C,OAAO,MAAM;EACxE,MAAM,UAAU,EAAE,IAAI,MAAM,UAAU;AACtC,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;IAAE;IAAS,OAAO,wBAAwB,QAAQ,eAAyB,QAAQ;IAAE;GAAE,CAAC;GAC3H;AAEF,eAAc,KAAK,2CAA2C,2BAA2B,OAAO,MAAM;EACpG,MAAM,UAAU,EAAE,IAAI,MAAM,UAAU;EACtC,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,QAAQ,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAI,OAAO,KAAK,UAAU,WAC5F,KAAK,QACL;AACJ,MAAI,UAAU,UAAU,UAAU,WAAW,UAAU,QACrD,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAwC,EAAE,IAAI;EAElF,MAAM,SAAS,QAAQ;AACvB,MAAI;AACF,2BAAwB,QAAQ,SAAS,MAAuB;GAChE,MAAM,QAAQ,MAAM,QAAQ,WAAW,OAAO;AAC9C,OAAI,CAAC,MAAM,MAAO,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,MAAM;IAAO,EAAE,IAAI;AACvE,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS;KAAE;KAAS;KAAO;IAAE,CAAC;WACjD,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,KAAK,gDAAgD,2BAA2B,OAAO,MAAM;EACzG,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;AACjD,MAAI;GACF,MAAM,OAAO,EAAE,IAAI,MAAM,OAAO;GAChC,MAAM,OAAO,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,GAAG,KAAK,YAAY,KAAA;AACzF,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,QAAQ,MAAM,oBAAoB;KAAE;KAAM,WAAW;KAAM,QAAQ,QAAQ;KAAyB,CAAC,EAAE;IAAE,CAAC;WACxI,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,KAAK,qCAAqC,2BAA2B,OAAO,MAAM;EAC9F,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;AACjD,MAAI;GACF,MAAM,QAAQ,MAAM,2BAA2B,QAAQ,eAAyB,KAAK;AACrF,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,OAAO;IAAE,CAAC;WACxC,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,IAAI,qCAAqC,OAAO,MAAM;EAClE,MAAM,QAAQ,OAAO,EAAE,IAAI,MAAM,QAAQ,IAAI,KAAK;AAClD,MAAI;GACF,MAAM,SAAS,MAAM,0BAA0B,QAAQ,eAAyB,MAAM;AACtF,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,QAAQ;IAAE,CAAC;WACzC,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,IAAI,wBAAwB,MAAM;EAC9C,MAAM,cAAc,EAAE,IAAI,MAAM,KAAK;EACrC,MAAM,YAAY,uBAAuB,YAAY;AACrD,MAAI,CAAC,UACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,sBAAsB;GAAe,EAAE,IAAI;EAE/E,MAAM,SAAS,QAAQ;EACvB,MAAM,YAAY,uBAAuB,OAAO,CAAC,QAAQ,aAAa,SAAS,gBAAgB,YAAY;AAC3G,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;IAAE;IAAW;IAAW;GAAE,CAAC;GAC9D;AAEF,eAAc,KAAK,2BAA2B,2BAA2B,OAAO,MAAM;EACpF,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,aAAa,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAI,KAAK,cAAc,OAAO,KAAK,eAAe,YAAY,CAAC,MAAM,QAAQ,KAAK,WAAW,GACpK,KAAK,aACL,KAAA;AACJ,MAAI,CAAC,WACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAiC,EAAE,IAAI;EAE3E,MAAM,QAA+B,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,GAAG,OAAO,EAAE;AACzG,MAAI;GACF,MAAM,UAAU,MAAM,2BAA2B,QAAQ,eAAyB,YAAY,MAAM;AACpG,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,SAAS;IAAE,CAAC;WAC1C,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,KAAK,qCAAqC,OAAO,MAAM;EACnE,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;AACjD,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;IAAE,cAAc;IAAM;IAAM;GAAE,CAAC;GAClE;AAEF,eAAc,KAAK,mCAAmC,2BAA2B,OAAO,MAAM;EAC5F,MAAM,cAAc,EAAE,IAAI,MAAM,KAAK;EACrC,MAAM,YAAY,uBAAuB,YAAY;AACrD,MAAI,CAAC,UACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,sBAAsB;GAAe,EAAE,IAAI;AAE/E,MAAI;GACF,MAAM,QAAQ,MAAM,oBAAoB,UAAU;AAClD,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,OAAO;IAAE,CAAC;WACxC,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,KAAK,sCAAsC,2BAA2B,OAAO,MAAM;EAC/F,MAAM,cAAc,EAAE,IAAI,MAAM,KAAK;EACrC,MAAM,YAAY,uBAAuB,YAAY;AACrD,MAAI,CAAC,UACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,sBAAsB;GAAe,EAAE,IAAI;EAE/E,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,aAAa,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAI,OAAO,KAAK,eAAe,WACtG,KAAK,aACL;AACJ,MAAI;GACF,MAAM,QAAQ,MAAM,uBAAuB,WAAW,EAAE,YAAY,CAAC;AACrE,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,OAAO;IAAE,CAAC;WACxC,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,KAAK,+BAA+B,2BAA2B,OAAO,MAAM;EACxF,MAAM,cAAc,EAAE,IAAI,MAAM,KAAK;EACrC,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,QAA+B,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,GAAG,OAAO,EAAE;EACzG,MAAM,qBAAqB,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAI,KAAK,cAAc,OAAO,KAAK,eAAe,YAAY,CAAC,MAAM,QAAQ,KAAK,WAAW,GAC5K,KAAK,aACL,KAAA;EACJ,MAAM,SAAS,QAAQ;AACvB,MAAI;GACF,MAAM,WAAW,oBAAoB,OAAO,cACxC,MAAM,2BAA2B,QAAQ,oBAAoB,MAAM,GACnE,MAAM,iBAAiB,QAAQ,aAAa,MAAM;GACtD,MAAM,QAAQ,MAAM,QAAQ,WAAW,OAAO;AAC9C,OAAI,CAAC,MAAM,MACT,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,MAAM;IAAO,EAAE,IAAI;AAEvD,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,UAAU;IAAE,CAAC;WAC3C,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,KAAK,4BAA4B,OAAO,MAAM;EAC1D,MAAM,aAAa,EAAE,IAAI,MAAM,KAAK;EACpC,MAAM,SAAS,QAAQ;EACvB,MAAM,WAAW,qBAAqB,QAAQ,WAAW;AACzD,MAAI,CAAC,SACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,iCAAiC;GAAc,EAAE,IAAI;AAEzF,MAAI,SAAS,aAAa,SAAS,MACjC,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,mBAAmB,SAAS,aAAa,KAAK;GAAwC,EAAE,IAAI;AAEhI,MAAI;GACF,MAAM,SAAS,MAAM,sBAAsB,QAAQ,SAAS,aAAa,SAAS;AAClF,8BAA2B,QAAQ,SAAS,YAAY,OAAO;GAC/D,MAAM,QAAQ,MAAM,QAAQ,WAAW,OAAO;AAC9C,OAAI,CAAC,MAAM,MACT,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,MAAM;IAAO,EAAE,IAAI;AAEvD,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS;IAAQ,CAAC;WACrC,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,KAAK,8BAA8B,2BAA2B,OAAO,MAAM;EACvF,MAAM,aAAa,EAAE,IAAI,MAAM,KAAK;EACpC,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,QAA+B,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,GAAG,OAAO,EAAE;EACzG,MAAM,SAAS,QAAQ;AACvB,MAAI;GACF,MAAM,WAAW,sBAAsB,QAAQ,YAAY,MAAM;GACjE,MAAM,QAAQ,MAAM,QAAQ,WAAW,OAAO;AAC9C,OAAI,CAAC,MAAM,MACT,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,MAAM;IAAO,EAAE,IAAI;AAEvD,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,UAAU;IAAE,CAAC;WAC3C,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,KAAK,8BAA8B,2BAA2B,OAAO,MAAM;EACvF,MAAM,aAAa,EAAE,IAAI,MAAM,KAAK;EACpC,MAAM,SAAS,QAAQ;AACvB,MAAI;GACF,MAAM,WAAW,oBAAoB,QAAQ,YAAY,KAAK;GAC9D,MAAM,QAAQ,MAAM,QAAQ,WAAW,OAAO;AAC9C,OAAI,CAAC,MAAM,MACT,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,MAAM;IAAO,EAAE,IAAI;AAEvD,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,UAAU;IAAE,CAAC;WAC3C,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,KAAK,+BAA+B,2BAA2B,OAAO,MAAM;EACxF,MAAM,aAAa,EAAE,IAAI,MAAM,KAAK;EACpC,MAAM,SAAS,QAAQ;AACvB,MAAI;GACF,MAAM,WAAW,oBAAoB,QAAQ,YAAY,MAAM;GAC/D,MAAM,QAAQ,MAAM,QAAQ,WAAW,OAAO;AAC9C,OAAI,CAAC,MAAM,MACT,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,MAAM;IAAO,EAAE,IAAI;AAEvD,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,UAAU;IAAE,CAAC;WAC3C,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,OAAO,uBAAuB,2BAA2B,OAAO,MAAM;EAClF,MAAM,aAAa,EAAE,IAAI,MAAM,KAAK;EACpC,MAAM,SAAS,QAAQ;AACvB,MAAI;GACF,MAAM,WAAW,mBAAmB,QAAQ,WAAW;GACvD,MAAM,QAAQ,MAAM,QAAQ,WAAW,OAAO;AAC9C,OAAI,CAAC,MAAM,MACT,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,MAAM;IAAO,EAAE,IAAI;AAEvD,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,UAAU;IAAE,CAAC;WAC3C,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D"}