@xopcai/xopc 0.0.124 → 0.0.126

package/dist/src/gateway/dreaming-automation-reconciler.js.map

@@ -1 +1 @@
-{"version":3,"file":"dreaming-automation-reconciler.js","names":[],"sources":["../../../src/gateway/dreaming-automation-reconciler.ts"],"sourcesContent":["import type { Config } from '../config/schema.js';\nimport { getWorkspacePath } from '../config/workspace-path-helpers.js';\nimport { resolveDefaultAgentId } from '../agent/agent-scope.js';\nimport { resolveDreamingConfig, type DreamingResolvedConfig } from '../agent/memory/dreaming/config.js';\nimport {\n  DREAMING_CRON_NAME,\n  DREAMING_CRON_TAG,\n  DREAMING_LIGHT_CRON_NAME,\n  DREAMING_LIGHT_SWEEP_TOKEN,\n  DREAMING_REM_CRON_NAME,\n  DREAMING_REM_SWEEP_TOKEN,\n  DREAMING_SWEEP_TOKEN,\n  type DreamingPhaseId,\n} from '../agent/memory/dreaming/constants.js';\nimport type { AutomationService } from '../automations/index.js';\nimport type { Automation, AutomationAction, AutomationTrigger } from '../automations/domain/types.js';\n\ntype DreamingAutomationSpec = {\n  id: string;\n  phase: DreamingPhaseId;\n  name: string;\n  token: string;\n};\n\nconst DREAMING_AUTOMATIONS: readonly DreamingAutomationSpec[] = [\n  {\n    id: 'system-dreaming-light',\n    phase: 'light',\n    name: DREAMING_LIGHT_CRON_NAME,\n    token: DREAMING_LIGHT_SWEEP_TOKEN,\n  },\n  {\n    id: 'system-dreaming-deep',\n    phase: 'deep',\n    name: DREAMING_CRON_NAME,\n    token: DREAMING_SWEEP_TOKEN,\n  },\n  {\n    id: 'system-dreaming-rem',\n    phase: 'rem',\n    name: DREAMING_REM_CRON_NAME,\n    token: DREAMING_REM_SWEEP_TOKEN,\n  },\n];\n\nexport type DreamingAutomationReconcileResult = {\n  created: string[];\n  updated: string[];\n  disabled: string[];\n};\n\nfunction phaseDescription(phase: DreamingPhaseId): string {\n  const label = phase === 'light' ? 'Light sweep' : phase === 'deep' ? 'Deep promotion' : 'REM pattern discovery';\n  return `${label} for memory dreaming. ${DREAMING_CRON_TAG}`;\n}\n\nfunction buildTrigger(config: DreamingResolvedConfig, phase: DreamingPhaseId): AutomationTrigger {\n  const phaseConfig = config.phases[phase];\n  return {\n    kind: 'schedule',\n    schedule: {\n      kind: 'cron',\n      expr: phaseConfig.cron,\n      ...(config.timezone ? { tz: config.timezone } : {}),\n    },\n  };\n}\n\nfunction buildAction(config: Config, agentId: string, token: string): AutomationAction {\n  const workspaceDir = getWorkspacePath(config);\n  return {\n    kind: 'agent',\n    agentId,\n    instruction: token,\n    ...(workspaceDir ? { workingDirectory: workspaceDir } : {}),\n    timeoutSeconds: 3600,\n  };\n}\n\nfunction automationNeedsUpdate(current: Automation, next: {\n  name: string;\n  description: string;\n  enabled: boolean;\n  trigger: AutomationTrigger;\n  action: AutomationAction;\n}): boolean {\n  return (\n    current.name !== next.name ||\n    current.description !== next.description ||\n    current.enabled !== next.enabled ||\n    JSON.stringify(current.trigger) !== JSON.stringify(next.trigger) ||\n    JSON.stringify(current.action) !== JSON.stringify(next.action) ||\n    current.safety?.mode !== 'auto_apply' ||\n    current.afterRun?.kind !== 'none' ||\n    current.reliability?.disableAfterConsecutiveFailures !== 3\n  );\n}\n\nexport async function reconcileDreamingAutomations(params: {\n  config: Config;\n  automationService: AutomationService;\n}): Promise<DreamingAutomationReconcileResult> {\n  const { config, automationService } = params;\n  const resolved = resolveDreamingConfig(config);\n  const agentId = resolveDefaultAgentId(config);\n  const result: DreamingAutomationReconcileResult = { created: [], updated: [], disabled: [] };\n\n  for (const spec of DREAMING_AUTOMATIONS) {\n    const current = await automationService.get(spec.id);\n    const enabled = resolved.enabled && resolved.phases[spec.phase].enabled;\n\n    if (!resolved.enabled) {\n      if (current?.enabled) {\n        await automationService.update(spec.id, { enabled: false });\n        result.disabled.push(spec.id);\n      }\n      continue;\n    }\n\n    const next = {\n      name: spec.name,\n      description: phaseDescription(spec.phase),\n      enabled,\n      trigger: buildTrigger(resolved, spec.phase),\n      action: buildAction(config, agentId, spec.token),\n    };\n\n    if (!current) {\n      await automationService.create({\n        id: spec.id,\n        ...next,\n        safety: { mode: 'auto_apply' },\n        afterRun: { kind: 'none' },\n        reliability: { disableAfterConsecutiveFailures: 3 },\n      });\n      result.created.push(spec.id);\n      continue;\n    }\n\n    if (automationNeedsUpdate(current, next)) {\n      await automationService.update(spec.id, {\n        ...next,\n        safety: { mode: 'auto_apply' },\n        afterRun: { kind: 'none' },\n        reliability: { disableAfterConsecutiveFailures: 3 },\n      });\n      result.updated.push(spec.id);\n    }\n  }\n\n  return result;\n}\n"],"mappings":";;;;;kBAEgE;AAsBhE,MAAM,uBAA0D;CAC9D;EACE,IAAI;EACJ,OAAO;EACP,MAAM;EACN,OAAO;EACR;CACD;EACE,IAAI;EACJ,OAAO;EACP,MAAM;EACN,OAAO;EACR;CACD;EACE,IAAI;EACJ,OAAO;EACP,MAAM;EACN,OAAO;EACR;CACF;AAQD,SAAS,iBAAiB,OAAgC;AAExD,QAAO,GADO,UAAU,UAAU,gBAAgB,UAAU,SAAS,mBAAmB,wBACxE,wBAAwB;;AAG1C,SAAS,aAAa,QAAgC,OAA2C;AAE/F,QAAO;EACL,MAAM;EACN,UAAU;GACR,MAAM;GACN,MALgB,OAAO,OAAO,OAKZ;GAClB,GAAI,OAAO,WAAW,EAAE,IAAI,OAAO,UAAU,GAAG,EAAE;GACnD;EACF;;AAGH,SAAS,YAAY,QAAgB,SAAiB,OAAiC;CACrF,MAAM,eAAe,iBAAiB,OAAO;AAC7C,QAAO;EACL,MAAM;EACN;EACA,aAAa;EACb,GAAI,eAAe,EAAE,kBAAkB,cAAc,GAAG,EAAE;EAC1D,gBAAgB;EACjB;;AAGH,SAAS,sBAAsB,SAAqB,MAMxC;AACV,QACE,QAAQ,SAAS,KAAK,QACtB,QAAQ,gBAAgB,KAAK,eAC7B,QAAQ,YAAY,KAAK,WACzB,KAAK,UAAU,QAAQ,QAAQ,KAAK,KAAK,UAAU,KAAK,QAAQ,IAChE,KAAK,UAAU,QAAQ,OAAO,KAAK,KAAK,UAAU,KAAK,OAAO,IAC9D,QAAQ,QAAQ,SAAS,gBACzB,QAAQ,UAAU,SAAS,UAC3B,QAAQ,aAAa,oCAAoC;;AAI7D,eAAsB,6BAA6B,QAGJ;CAC7C,MAAM,EAAE,QAAQ,sBAAsB;CACtC,MAAM,WAAW,sBAAsB,OAAO;CAC9C,MAAM,UAAU,sBAAsB,OAAO;CAC7C,MAAM,SAA4C;EAAE,SAAS,EAAE;EAAE,SAAS,EAAE;EAAE,UAAU,EAAE;EAAE;AAE5F,MAAK,MAAM,QAAQ,sBAAsB;EACvC,MAAM,UAAU,MAAM,kBAAkB,IAAI,KAAK,GAAG;EACpD,MAAM,UAAU,SAAS,WAAW,SAAS,OAAO,KAAK,OAAO;AAEhE,MAAI,CAAC,SAAS,SAAS;AACrB,OAAI,SAAS,SAAS;AACpB,UAAM,kBAAkB,OAAO,KAAK,IAAI,EAAE,SAAS,OAAO,CAAC;AAC3D,WAAO,SAAS,KAAK,KAAK,GAAG;;AAE/B;;EAGF,MAAM,OAAO;GACX,MAAM,KAAK;GACX,aAAa,iBAAiB,KAAK,MAAM;GACzC;GACA,SAAS,aAAa,UAAU,KAAK,MAAM;GAC3C,QAAQ,YAAY,QAAQ,SAAS,KAAK,MAAM;GACjD;AAED,MAAI,CAAC,SAAS;AACZ,SAAM,kBAAkB,OAAO;IAC7B,IAAI,KAAK;IACT,GAAG;IACH,QAAQ,EAAE,MAAM,cAAc;IAC9B,UAAU,EAAE,MAAM,QAAQ;IAC1B,aAAa,EAAE,iCAAiC,GAAG;IACpD,CAAC;AACF,UAAO,QAAQ,KAAK,KAAK,GAAG;AAC5B;;AAGF,MAAI,sBAAsB,SAAS,KAAK,EAAE;AACxC,SAAM,kBAAkB,OAAO,KAAK,IAAI;IACtC,GAAG;IACH,QAAQ,EAAE,MAAM,cAAc;IAC9B,UAAU,EAAE,MAAM,QAAQ;IAC1B,aAAa,EAAE,iCAAiC,GAAG;IACpD,CAAC;AACF,UAAO,QAAQ,KAAK,KAAK,GAAG;;;AAIhC,QAAO"}
+{"version":3,"file":"dreaming-automation-reconciler.js","names":[],"sources":["../../../src/gateway/dreaming-automation-reconciler.ts"],"sourcesContent":["import type { Config } from '../config/schema.js';\nimport { normalizeAgentId } from '../agent/agent-scope.js';\nimport { resolveDreamingConfig, type DreamingResolvedConfig } from '../agent/memory/dreaming/config.js';\nimport { resolveDreamingAgentScope } from '../agent/memory/dreaming/scope.js';\nimport {\n  DREAMING_CRON_NAME,\n  DREAMING_CRON_TAG,\n  DREAMING_LIGHT_CRON_NAME,\n  DREAMING_LIGHT_SWEEP_TOKEN,\n  DREAMING_REM_CRON_NAME,\n  DREAMING_REM_SWEEP_TOKEN,\n  DREAMING_SWEEP_TOKEN,\n  type DreamingPhaseId,\n} from '../agent/memory/dreaming/constants.js';\nimport type { AutomationService } from '../automations/index.js';\nimport type { Automation, AutomationAction, AutomationTrigger } from '../automations/domain/types.js';\n\ntype DreamingAutomationSpec = {\n  id: string;\n  phase: DreamingPhaseId;\n  name: string;\n  token: string;\n};\n\nconst DREAMING_AUTOMATIONS: readonly DreamingAutomationSpec[] = [\n  {\n    id: 'system-dreaming-light',\n    phase: 'light',\n    name: DREAMING_LIGHT_CRON_NAME,\n    token: DREAMING_LIGHT_SWEEP_TOKEN,\n  },\n  {\n    id: 'system-dreaming-deep',\n    phase: 'deep',\n    name: DREAMING_CRON_NAME,\n    token: DREAMING_SWEEP_TOKEN,\n  },\n  {\n    id: 'system-dreaming-rem',\n    phase: 'rem',\n    name: DREAMING_REM_CRON_NAME,\n    token: DREAMING_REM_SWEEP_TOKEN,\n  },\n];\n\nexport type DreamingAutomationReconcileResult = {\n  created: string[];\n  updated: string[];\n  disabled: string[];\n  removed: string[];\n};\n\nfunction phaseDescription(phase: DreamingPhaseId): string {\n  const label = phase === 'light' ? 'Light sweep' : phase === 'deep' ? 'Deep promotion' : 'REM pattern discovery';\n  return `${label} for memory dreaming. ${DREAMING_CRON_TAG}`;\n}\n\nfunction buildTrigger(config: DreamingResolvedConfig, phase: DreamingPhaseId): AutomationTrigger {\n  const phaseConfig = config.phases[phase];\n  return {\n    kind: 'schedule',\n    schedule: {\n      kind: 'cron',\n      expr: phaseConfig.cron,\n      ...(config.timezone ? { tz: config.timezone } : {}),\n    },\n  };\n}\n\nfunction dreamingAutomationId(agentId: string, phase: DreamingPhaseId): string {\n  return `system-dreaming:${normalizeAgentId(agentId)}:${phase}`;\n}\n\nfunction buildAction(config: Config, agentId: string, token: string): AutomationAction {\n  const scope = resolveDreamingAgentScope(config, agentId);\n  return {\n    kind: 'agent',\n    agentId: scope.agentId,\n    instruction: token,\n    workingDirectory: scope.workspaceDir,\n    timeoutSeconds: 3600,\n  };\n}\n\nfunction automationNeedsUpdate(current: Automation, next: {\n  name: string;\n  description: string;\n  enabled: boolean;\n  trigger: AutomationTrigger;\n  action: AutomationAction;\n}): boolean {\n  return (\n    current.name !== next.name ||\n    current.description !== next.description ||\n    current.enabled !== next.enabled ||\n    JSON.stringify(current.trigger) !== JSON.stringify(next.trigger) ||\n    JSON.stringify(current.action) !== JSON.stringify(next.action) ||\n    current.safety?.mode !== 'auto_apply' ||\n    current.afterRun?.kind !== 'none' ||\n    current.reliability?.disableAfterConsecutiveFailures !== 3\n  );\n}\n\nexport async function reconcileDreamingAutomations(params: {\n  config: Config;\n  automationService: AutomationService;\n}): Promise<DreamingAutomationReconcileResult> {\n  const { config, automationService } = params;\n  const result: DreamingAutomationReconcileResult = { created: [], updated: [], disabled: [], removed: [] };\n\n  for (const spec of DREAMING_AUTOMATIONS) {\n    if (await automationService.remove(spec.id)) {\n      result.removed.push(spec.id);\n    }\n  }\n\n  const expectedIds = new Set<string>();\n  const agents = config.agents.list.filter((agent) => agent.enabled !== false);\n\n  for (const agent of agents) {\n    const agentId = normalizeAgentId(agent.id);\n    const resolved = resolveDreamingConfig(config, agentId);\n\n    for (const spec of DREAMING_AUTOMATIONS) {\n      const id = dreamingAutomationId(agentId, spec.phase);\n      expectedIds.add(id);\n      const current = await automationService.get(id);\n      const enabled = resolved.enabled && resolved.phases[spec.phase].enabled;\n\n      if (!resolved.enabled) {\n        if (current?.enabled) {\n          await automationService.update(id, { enabled: false });\n          result.disabled.push(id);\n        }\n        continue;\n      }\n\n      const next = {\n        name: `${spec.name} (${agentId})`,\n        description: phaseDescription(spec.phase),\n        enabled,\n        trigger: buildTrigger(resolved, spec.phase),\n        action: buildAction(config, agentId, spec.token),\n      };\n\n      if (!current) {\n        await automationService.create({\n          id,\n          ...next,\n          safety: { mode: 'auto_apply' },\n          afterRun: { kind: 'none' },\n          reliability: { disableAfterConsecutiveFailures: 3 },\n        });\n        result.created.push(id);\n        continue;\n      }\n\n      if (automationNeedsUpdate(current, next)) {\n        await automationService.update(id, {\n          ...next,\n          safety: { mode: 'auto_apply' },\n          afterRun: { kind: 'none' },\n          reliability: { disableAfterConsecutiveFailures: 3 },\n        });\n        result.updated.push(id);\n      }\n    }\n  }\n\n  const allAutomations = await automationService.list();\n  for (const automation of allAutomations) {\n    if (!automation.id.startsWith('system-dreaming:')) {\n      continue;\n    }\n    if (expectedIds.has(automation.id)) {\n      continue;\n    }\n    if (automation.enabled) {\n      await automationService.update(automation.id, { enabled: false });\n      result.disabled.push(automation.id);\n    }\n  }\n\n  return result;\n}\n"],"mappings":";;;;;kBAC2D;AAuB3D,MAAM,uBAA0D;CAC9D;EACE,IAAI;EACJ,OAAO;EACP,MAAM;EACN,OAAO;EACR;CACD;EACE,IAAI;EACJ,OAAO;EACP,MAAM;EACN,OAAO;EACR;CACD;EACE,IAAI;EACJ,OAAO;EACP,MAAM;EACN,OAAO;EACR;CACF;AASD,SAAS,iBAAiB,OAAgC;AAExD,QAAO,GADO,UAAU,UAAU,gBAAgB,UAAU,SAAS,mBAAmB,wBACxE,wBAAwB;;AAG1C,SAAS,aAAa,QAAgC,OAA2C;AAE/F,QAAO;EACL,MAAM;EACN,UAAU;GACR,MAAM;GACN,MALgB,OAAO,OAAO,OAKZ;GAClB,GAAI,OAAO,WAAW,EAAE,IAAI,OAAO,UAAU,GAAG,EAAE;GACnD;EACF;;AAGH,SAAS,qBAAqB,SAAiB,OAAgC;AAC7E,QAAO,mBAAmB,iBAAiB,QAAQ,CAAC,GAAG;;AAGzD,SAAS,YAAY,QAAgB,SAAiB,OAAiC;CACrF,MAAM,QAAQ,0BAA0B,QAAQ,QAAQ;AACxD,QAAO;EACL,MAAM;EACN,SAAS,MAAM;EACf,aAAa;EACb,kBAAkB,MAAM;EACxB,gBAAgB;EACjB;;AAGH,SAAS,sBAAsB,SAAqB,MAMxC;AACV,QACE,QAAQ,SAAS,KAAK,QACtB,QAAQ,gBAAgB,KAAK,eAC7B,QAAQ,YAAY,KAAK,WACzB,KAAK,UAAU,QAAQ,QAAQ,KAAK,KAAK,UAAU,KAAK,QAAQ,IAChE,KAAK,UAAU,QAAQ,OAAO,KAAK,KAAK,UAAU,KAAK,OAAO,IAC9D,QAAQ,QAAQ,SAAS,gBACzB,QAAQ,UAAU,SAAS,UAC3B,QAAQ,aAAa,oCAAoC;;AAI7D,eAAsB,6BAA6B,QAGJ;CAC7C,MAAM,EAAE,QAAQ,sBAAsB;CACtC,MAAM,SAA4C;EAAE,SAAS,EAAE;EAAE,SAAS,EAAE;EAAE,UAAU,EAAE;EAAE,SAAS,EAAE;EAAE;AAEzG,MAAK,MAAM,QAAQ,qBACjB,KAAI,MAAM,kBAAkB,OAAO,KAAK,GAAG,CACzC,QAAO,QAAQ,KAAK,KAAK,GAAG;CAIhC,MAAM,8BAAc,IAAI,KAAa;CACrC,MAAM,SAAS,OAAO,OAAO,KAAK,QAAQ,UAAU,MAAM,YAAY,MAAM;AAE5E,MAAK,MAAM,SAAS,QAAQ;EAC1B,MAAM,UAAU,iBAAiB,MAAM,GAAG;EAC1C,MAAM,WAAW,sBAAsB,QAAQ,QAAQ;AAEvD,OAAK,MAAM,QAAQ,sBAAsB;GACvC,MAAM,KAAK,qBAAqB,SAAS,KAAK,MAAM;AACpD,eAAY,IAAI,GAAG;GACnB,MAAM,UAAU,MAAM,kBAAkB,IAAI,GAAG;GAC/C,MAAM,UAAU,SAAS,WAAW,SAAS,OAAO,KAAK,OAAO;AAEhE,OAAI,CAAC,SAAS,SAAS;AACrB,QAAI,SAAS,SAAS;AACpB,WAAM,kBAAkB,OAAO,IAAI,EAAE,SAAS,OAAO,CAAC;AACtD,YAAO,SAAS,KAAK,GAAG;;AAE1B;;GAGF,MAAM,OAAO;IACX,MAAM,GAAG,KAAK,KAAK,IAAI,QAAQ;IAC/B,aAAa,iBAAiB,KAAK,MAAM;IACzC;IACA,SAAS,aAAa,UAAU,KAAK,MAAM;IAC3C,QAAQ,YAAY,QAAQ,SAAS,KAAK,MAAM;IACjD;AAED,OAAI,CAAC,SAAS;AACZ,UAAM,kBAAkB,OAAO;KAC7B;KACA,GAAG;KACH,QAAQ,EAAE,MAAM,cAAc;KAC9B,UAAU,EAAE,MAAM,QAAQ;KAC1B,aAAa,EAAE,iCAAiC,GAAG;KACpD,CAAC;AACF,WAAO,QAAQ,KAAK,GAAG;AACvB;;AAGF,OAAI,sBAAsB,SAAS,KAAK,EAAE;AACxC,UAAM,kBAAkB,OAAO,IAAI;KACjC,GAAG;KACH,QAAQ,EAAE,MAAM,cAAc;KAC9B,UAAU,EAAE,MAAM,QAAQ;KAC1B,aAAa,EAAE,iCAAiC,GAAG;KACpD,CAAC;AACF,WAAO,QAAQ,KAAK,GAAG;;;;CAK7B,MAAM,iBAAiB,MAAM,kBAAkB,MAAM;AACrD,MAAK,MAAM,cAAc,gBAAgB;AACvC,MAAI,CAAC,WAAW,GAAG,WAAW,mBAAmB,CAC/C;AAEF,MAAI,YAAY,IAAI,WAAW,GAAG,CAChC;AAEF,MAAI,WAAW,SAAS;AACtB,SAAM,kBAAkB,OAAO,WAAW,IAAI,EAAE,SAAS,OAAO,CAAC;AACjE,UAAO,SAAS,KAAK,WAAW,GAAG;;;AAIvC,QAAO"}

package/dist/src/gateway/hono/app.js

@@ -6,6 +6,8 @@ import { loadTunnelState } from "../../tunnel/tunnel-state.js";
 import { resolveReverseProxyPublicUrl } from "../public-url.js";
 import { maxWebchatAgentRequestBodyBytes } from "../chat-limits.js";
 import { isLoopbackIpAddress, isTrustedProxyAddress } from "../client-ip.js";
+import { WORK_ITEM_ATTACHMENT_UPLOAD_BODY_MAX_BYTES } from "../../work-items/work-item-service.js";
+import "../../work-items/index.js";
 import { buildGatewayConsoleCspHeader } from "../security/csp.js";
 import { checkBrowserOrigin } from "../security/origin-check.js";
 import { auth } from "./middleware/auth.js";
@@ -152,6 +154,10 @@ function createHonoApp(config) {
 		if (/^\/api\/notes\/[^/]+\/media$/.test(path)) return true;
 		return path === "/api/notes" && contentType?.includes("multipart/form-data") === true;
 	};
+	const isWorkItemAttachmentUploadRequest = (path, method, contentType) => {
+		if (method !== "POST" || contentType?.includes("multipart/form-data") !== true) return false;
+		return /^\/api\/work-items\/[^/]+\/attachments$/.test(path) || /^\/api\/projects\/[^/]+\/work-items$/.test(path);
+	};
 	app.use("/api/skills/upload", bodyLimit({
 		maxSize: SKILL_UPLOAD_BODY_MAX,
 		onError: (c) => {
@@ -167,7 +173,7 @@ function createHonoApp(config) {
 	}));
 	app.use("/api/*", async (c, next) => {
 		const contentType = c.req.header("content-type");
-		const maxSize = c.req.path === "/api/agent" ? WEBCHAT_AGENT_BODY_MAX : c.req.path === "/api/skills/upload" ? SKILL_UPLOAD_BODY_MAX : c.req.path === "/api/voice/transcribe" ? VOICE_TRANSCRIBE_BODY_MAX : isNoteMediaUploadRequest(c.req.path, c.req.method, contentType) ? NOTE_MEDIA_BODY_MAX : DEFAULT_API_BODY_MAX;
+		const maxSize = c.req.path === "/api/agent" ? WEBCHAT_AGENT_BODY_MAX : c.req.path === "/api/skills/upload" ? SKILL_UPLOAD_BODY_MAX : c.req.path === "/api/voice/transcribe" ? VOICE_TRANSCRIBE_BODY_MAX : isNoteMediaUploadRequest(c.req.path, c.req.method, contentType) ? NOTE_MEDIA_BODY_MAX : isWorkItemAttachmentUploadRequest(c.req.path, c.req.method, contentType) ? WORK_ITEM_ATTACHMENT_UPLOAD_BODY_MAX_BYTES : DEFAULT_API_BODY_MAX;
 		const maxSizeMb = Math.ceil(maxSize / (1024 * 1024));
 		return bodyLimit({
 			maxSize,

package/dist/src/gateway/hono/app.js.map

@@ -1 +1 @@
-{"version":3,"file":"app.js","names":[],"sources":["../../../../src/gateway/hono/app.ts"],"sourcesContent":["import { Hono } from 'hono';\nimport type { Context } from 'hono';\nimport { cors } from 'hono/cors';\nimport { createMiddleware } from 'hono/factory';\nimport { bodyLimit } from 'hono/body-limit';\nimport { getConnInfo } from '@hono/node-server/conninfo';\n\nimport { resolveGatewayEffectiveHost } from '../../config/gateway-bind.js';\nimport { createLogger } from '../../utils/logger.js';\nimport type { GatewayService } from '../service.js';\nimport { resolveAllowedBrowserOrigins, resolveGatewayServiceListenPort } from '../host.js';\nimport { loadTunnelState } from '../../tunnel/tunnel-state.js';\nimport { maxWebchatAgentRequestBodyBytes } from '../chat-limits.js';\nimport { buildGatewayConsoleCspHeader } from '../security/csp.js';\nimport { checkBrowserOrigin } from '../security/origin-check.js';\nimport { isLoopbackIpAddress, isTrustedProxyAddress } from '../client-ip.js';\nimport { resolveReverseProxyPublicUrl } from '../public-url.js';\nimport { auth } from './middleware/auth.js';\nimport { operatorScopes } from './middleware/scopes.js';\nimport {\n  createChannelRateLimitMiddleware,\n  createStrictRateLimitMiddleware,\n} from './middleware/strict-rate-limit.js';\nimport { logContextMiddleware } from './middleware/log-context.js';\nimport { logger } from './middleware/logger.js';\nimport { routeErrorMiddleware } from './middleware/route-errors.js';\nimport { registerPublicExtensionAssetRoutes } from './routes/auth-registry-extensions.js';\nimport { registerAuthenticatedRoutes } from './routes/index.js';\nimport { registerPublicGatewayRoutes } from './routes/public-gateway.js';\nimport { resetLazyRouteBundlesForTests } from './routes/lazy-fallback.js';\nimport { prewarmStaticUiCache } from './lib/static-ui.js';\nimport { registerSiteShareMiddleware } from '../../share/site-share-router.js';\nconst log = createLogger('Gateway:App');\n\nexport interface HonoAppConfig {\n  service: GatewayService;\n  token?: string;\n}\n\n/**\n * Extension sandbox HTML under `/api/extensions/:id/assets/*` ships its own CSP\n * (`frame-ancestors 'self'`). The global gateway middleware must not overwrite it\n * with `frame-ancestors 'none'` / `X-Frame-Options: DENY`, or the console cannot embed iframes.\n */\nexport function isExtensionGatewayUiAssetPath(path: string): boolean {\n  return /^\\/api\\/extensions\\/[^/]+\\/assets\\//.test(path);\n}\n\nexport function createHonoApp(config: HonoAppConfig): Hono {\n  if (process.env.VITEST) {\n    resetLazyRouteBundlesForTests();\n  }\n  const { service, token } = config;\n  const app = new Hono();\n\n  const gatewayPort = resolveGatewayServiceListenPort(service);\n\n  const resolveBrowserOrigins = (): string[] =>\n    resolveAllowedBrowserOrigins({\n      configuredOrigins: service.currentConfig.gateway.corsOrigins,\n      port: gatewayPort,\n      bindHost: resolveGatewayEffectiveHost(service.currentConfig),\n      tunnelPublicUrl: loadTunnelState()?.publicUrl,\n      reverseProxyPublicUrl: resolveReverseProxyPublicUrl(service.currentConfig),\n    });\n\n  /**\n   * TCP source for the in-flight request, normalized for trusted-proxy checks.\n   * Returns undefined when the runtime doesn't expose conninfo (tests, mocks).\n   */\n  const resolveRequestRemoteAddress = (c: Context): string | undefined => {\n    try {\n      return getConnInfo(c).remote.address;\n    } catch {\n      return undefined;\n    }\n  };\n\n  /**\n   * A request's TCP source qualifies as a \"trusted proxy hop\" when it's\n   * loopback (the user's own machine, where any reverse proxy lives) or\n   * listed in `gateway.trustedProxies`. We use this signal to safely\n   * auto-allow same-host Origins through CSRF without requiring a manual\n   * `corsOrigins` entry for every reverse-proxy hostname.\n   */\n  const isRequestFromTrustedProxy = (c: Context): boolean => {\n    const remote = resolveRequestRemoteAddress(c);\n    if (!remote) return false;\n    if (isLoopbackIpAddress(remote)) return true;\n    return isTrustedProxyAddress(remote, service.currentConfig.gateway?.trustedProxies);\n  };\n\n  app.use(logContextMiddleware());\n  app.use(logger({\n    trustedProxies: service.currentConfig.gateway?.trustedProxies,\n    allowRealIpFallback: service.currentConfig.gateway?.allowRealIpFallback === true,\n  }));\n\n  // Site-share middleware runs BEFORE CORS/CSP — it owns the request when the\n  // Host header matches `*.<publicHostSuffix>` (default `*.share.xopc.ai`) or\n  // the path starts with `/site/:token/`. Otherwise it falls through.\n  registerSiteShareMiddleware(app, service);\n  app.use(\n    cors({\n      origin: (origin) => {\n        const allowed = resolveBrowserOrigins();\n        if (!origin) {\n          return allowed[0] ?? `http://127.0.0.1:${gatewayPort}`;\n        }\n        const normalized = origin.toLowerCase();\n        const hit = allowed.find((entry) => entry.toLowerCase() === normalized);\n        if (hit) return origin;\n        return allowed.includes('*') ? '*' : '';\n      },\n      allowMethods: ['GET', 'POST', 'PATCH', 'DELETE', 'OPTIONS'],\n      allowHeaders: ['Content-Type', 'Authorization', 'Accept', 'X-Session-Id', 'Last-Event-ID'],\n      credentials: true,\n      maxAge: 86400,\n    }),\n  );\n\n  // Build CSP header once at startup (no inline script hashes needed for SPA)\n  const gatewayConsoleCsp = buildGatewayConsoleCspHeader();\n\n  // Security headers middleware\n  app.use(createMiddleware(async (c, next) => {\n    await next();\n    if (isExtensionGatewayUiAssetPath(c.req.path)) {\n      return;\n    }\n    c.header('X-Frame-Options', 'DENY');\n    c.header('X-Content-Type-Options', 'nosniff');\n    c.header('Referrer-Policy', 'strict-origin-when-cross-origin');\n    c.header('X-XSS-Protection', '1; mode=block');\n    // microphone=(self): allow same-origin chat voice (composer). microphone=() breaks packaged Electron loading the gateway SPA.\n    c.header('Permissions-Policy', 'camera=(), microphone=(self), geolocation=()');\n    c.header('Content-Security-Policy', gatewayConsoleCsp);\n  }));\n\n  // Browser Origin check middleware for API routes (CSRF protection).\n  // Non-browser requests (no Origin header) pass through — they are\n  // authenticated by the token middleware instead.\n  const allowHostHeaderOriginFallback =\n    service.currentConfig.gateway?.dangerouslyAllowHostHeaderOriginFallback === true;\n  app.use('/api/*', createMiddleware(async (c, next) => {\n    // Sandboxed extension iframes (no allow-same-origin) send `Origin: null`.\n    // `checkBrowserOrigin` rejects that; these routes rely on CSP instead\n    // (`registerPublicExtensionAssetRoutes`).\n    if (isExtensionGatewayUiAssetPath(c.req.path)) {\n      return next();\n    }\n\n    const origin = c.req.header('origin');\n    if (!origin || origin.trim().toLowerCase() === 'null') {\n      // Native apps / opaque origins — authenticated via Bearer token\n      return next();\n    }\n\n    const result = checkBrowserOrigin({\n      requestHost: c.req.header('host'),\n      origin,\n      allowedOrigins: resolveBrowserOrigins(),\n      allowHostHeaderOriginFallback,\n      autoAllowSameHostFromTrustedProxy: isRequestFromTrustedProxy(c),\n      isLocalClient: false,\n    });\n\n    if (!result.ok) {\n      log.warn(\n        {\n          origin,\n          requestHost: c.req.header('host'),\n          reason: 'reason' in result ? result.reason : 'unknown',\n          path: c.req.path,\n          method: c.req.method,\n        },\n        `Browser origin check failed: ${origin} not in allowed list`,\n      );\n      return c.json({ error: 'Forbidden', message: 'Origin not allowed' }, 403);\n    }\n\n    return next();\n  }));\n\n  const DEFAULT_API_BODY_MAX = 1 * 1024 * 1024;\n  const SKILL_UPLOAD_BODY_MAX = 10 * 1024 * 1024;\n  const NOTE_MEDIA_BODY_MAX = 25 * 1024 * 1024;\n  const VOICE_TRANSCRIBE_BODY_MAX = 35 * 1024 * 1024;\n  const WEBCHAT_AGENT_BODY_MAX = maxWebchatAgentRequestBodyBytes();\n\n  const isNoteMediaUploadRequest = (path: string, method: string, contentType: string | undefined): boolean => {\n    if (method !== 'POST') return false;\n    if (/^\\/api\\/notes\\/[^/]+\\/media$/.test(path)) return true;\n    return path === '/api/notes' && contentType?.includes('multipart/form-data') === true;\n  };\n\n  app.use('/api/skills/upload', bodyLimit({\n    maxSize: SKILL_UPLOAD_BODY_MAX,\n    onError: (c) => {\n      log.warn({ path: c.req.path, maxSizeMb: 10 }, 'Request body too large: skills upload exceeds 10MB limit');\n      return c.json({ error: 'Skill package too large', maxSize: '10MB' }, 413);\n    },\n  }));\n\n  app.use('/api/*', async (c, next) => {\n    const contentType = c.req.header('content-type');\n    const maxSize = c.req.path === '/api/agent'\n      ? WEBCHAT_AGENT_BODY_MAX\n      : c.req.path === '/api/skills/upload'\n        ? SKILL_UPLOAD_BODY_MAX\n        : c.req.path === '/api/voice/transcribe'\n          ? VOICE_TRANSCRIBE_BODY_MAX\n          : isNoteMediaUploadRequest(c.req.path, c.req.method, contentType)\n            ? NOTE_MEDIA_BODY_MAX\n            : DEFAULT_API_BODY_MAX;\n    const maxSizeMb = Math.ceil(maxSize / (1024 * 1024));\n    return bodyLimit({\n      maxSize,\n      onError: (ctx) => {\n        log.warn({ path: ctx.req.path, maxSizeMb }, `Request body too large: exceeds ${maxSizeMb}MB limit`);\n        return ctx.json({ error: 'Request body too large', maxSize: `${maxSizeMb}MB` }, 413);\n      },\n    })(c, next);\n  });\n\n  registerPublicGatewayRoutes(app, service);\n\n  // Extension UI assets are served without auth: sandboxed iframes (no allow-same-origin)\n  // have an opaque origin of `null` and cannot forward the ?token= from the parent HTML URL.\n  // Security is enforced by the strict CSP (frame-ancestors 'self') on every response.\n  registerPublicExtensionAssetRoutes(app, service);\n\n  const authenticated = new Hono();\n  authenticated.use(routeErrorMiddleware());\n  authenticated.use(\n    auth({\n      token,\n      getGatewayAuth: () => service.currentConfig.gateway?.auth,\n      getResolvedAuth: () => {\n        if (typeof service.getResolvedAuth === 'function') {\n          return service.getResolvedAuth();\n        }\n        return token ? { mode: 'token', token } : { mode: 'none' };\n      },\n      getTrustedProxyContext: () => ({\n        trustedProxies: service.currentConfig.gateway?.trustedProxies,\n        allowRealIpFallback: service.currentConfig.gateway?.allowRealIpFallback === true,\n      }),\n    }),\n  );\n  authenticated.use(operatorScopes());\n\n  const strictRateLimitMiddleware = createStrictRateLimitMiddleware({\n    getTrustedProxyContext: () => ({\n      trustedProxies: service.currentConfig.gateway?.trustedProxies,\n      allowRealIpFallback: service.currentConfig.gateway?.allowRealIpFallback === true,\n    }),\n  });\n  const channelRateLimitMiddleware = createChannelRateLimitMiddleware({\n    getTrustedProxyContext: () => ({\n      trustedProxies: service.currentConfig.gateway?.trustedProxies,\n      allowRealIpFallback: service.currentConfig.gateway?.allowRealIpFallback === true,\n    }),\n  });\n\n  const sseConfig = {\n    service,\n    maxSseConnections: service.currentConfig.gateway.maxSseConnections,\n  };\n\n  registerAuthenticatedRoutes(app, authenticated, {\n    service,\n    strictRateLimitMiddleware,\n    channelRateLimitMiddleware,\n    sseConfig,\n  });\n\n  const prewarm = prewarmStaticUiCache();\n  if (prewarm.loaded > 0) {\n    log.debug({ loaded: prewarm.loaded, missing: prewarm.missing }, 'Static UI cache prewarmed');\n  }\n\n  app.route('/', authenticated);\n\n  app.notFound((c) => {\n    const isApiRoute = c.req.path.startsWith('/api/');\n    const fields = { path: c.req.path, method: c.req.method };\n    if (isApiRoute) {\n      log.warn(fields, 'Route not found');\n    } else {\n      log.debug(fields, 'Route not found');\n    }\n    return c.json({ error: 'Not found' }, 404);\n  });\n\n  app.onError((err, c) => {\n    log.error(\n      {\n        err,\n        phase: 'gateway.http.unhandled',\n        path: c.req.path,\n        method: c.req.method,\n        userAgent: c.req.header('user-agent'),\n      },\n      `Hono error on ${c.req.method} ${c.req.path}: ${err instanceof Error ? err.message : String(err)}`,\n    );\n    return c.json({ error: 'Internal server error' }, 500);\n  });\n\n  return app;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;aAQqD;AAwBrD,MAAM,MAAM,aAAa,cAAc;;;;;;AAYvC,SAAgB,8BAA8B,MAAuB;AACnE,QAAO,sCAAsC,KAAK,KAAK;;AAGzD,SAAgB,cAAc,QAA6B;AACzD,KAAI,QAAQ,IAAI,OACd,gCAA+B;CAEjC,MAAM,EAAE,SAAS,UAAU;CAC3B,MAAM,MAAM,IAAI,MAAM;CAEtB,MAAM,cAAc,gCAAgC,QAAQ;CAE5D,MAAM,8BACJ,6BAA6B;EAC3B,mBAAmB,QAAQ,cAAc,QAAQ;EACjD,MAAM;EACN,UAAU,4BAA4B,QAAQ,cAAc;EAC5D,iBAAiB,iBAAiB,EAAE;EACpC,uBAAuB,6BAA6B,QAAQ,cAAc;EAC3E,CAAC;;;;;CAMJ,MAAM,+BAA+B,MAAmC;AACtE,MAAI;AACF,UAAO,YAAY,EAAE,CAAC,OAAO;UACvB;AACN;;;;;;;;;;CAWJ,MAAM,6BAA6B,MAAwB;EACzD,MAAM,SAAS,4BAA4B,EAAE;AAC7C,MAAI,CAAC,OAAQ,QAAO;AACpB,MAAI,oBAAoB,OAAO,CAAE,QAAO;AACxC,SAAO,sBAAsB,QAAQ,QAAQ,cAAc,SAAS,eAAe;;AAGrF,KAAI,IAAI,sBAAsB,CAAC;AAC/B,KAAI,IAAI,OAAO;EACb,gBAAgB,QAAQ,cAAc,SAAS;EAC/C,qBAAqB,QAAQ,cAAc,SAAS,wBAAwB;EAC7E,CAAC,CAAC;AAKH,6BAA4B,KAAK,QAAQ;AACzC,KAAI,IACF,KAAK;EACH,SAAS,WAAW;GAClB,MAAM,UAAU,uBAAuB;AACvC,OAAI,CAAC,OACH,QAAO,QAAQ,MAAM,oBAAoB;GAE3C,MAAM,aAAa,OAAO,aAAa;AAEvC,OADY,QAAQ,MAAM,UAAU,MAAM,aAAa,KAAK,WACrD,CAAE,QAAO;AAChB,UAAO,QAAQ,SAAS,IAAI,GAAG,MAAM;;EAEvC,cAAc;GAAC;GAAO;GAAQ;GAAS;GAAU;GAAU;EAC3D,cAAc;GAAC;GAAgB;GAAiB;GAAU;GAAgB;GAAgB;EAC1F,aAAa;EACb,QAAQ;EACT,CAAC,CACH;CAGD,MAAM,oBAAoB,8BAA8B;AAGxD,KAAI,IAAI,iBAAiB,OAAO,GAAG,SAAS;AAC1C,QAAM,MAAM;AACZ,MAAI,8BAA8B,EAAE,IAAI,KAAK,CAC3C;AAEF,IAAE,OAAO,mBAAmB,OAAO;AACnC,IAAE,OAAO,0BAA0B,UAAU;AAC7C,IAAE,OAAO,mBAAmB,kCAAkC;AAC9D,IAAE,OAAO,oBAAoB,gBAAgB;AAE7C,IAAE,OAAO,sBAAsB,+CAA+C;AAC9E,IAAE,OAAO,2BAA2B,kBAAkB;GACtD,CAAC;CAKH,MAAM,gCACJ,QAAQ,cAAc,SAAS,6CAA6C;AAC9E,KAAI,IAAI,UAAU,iBAAiB,OAAO,GAAG,SAAS;AAIpD,MAAI,8BAA8B,EAAE,IAAI,KAAK,CAC3C,QAAO,MAAM;EAGf,MAAM,SAAS,EAAE,IAAI,OAAO,SAAS;AACrC,MAAI,CAAC,UAAU,OAAO,MAAM,CAAC,aAAa,KAAK,OAE7C,QAAO,MAAM;EAGf,MAAM,SAAS,mBAAmB;GAChC,aAAa,EAAE,IAAI,OAAO,OAAO;GACjC;GACA,gBAAgB,uBAAuB;GACvC;GACA,mCAAmC,0BAA0B,EAAE;GAC/D,eAAe;GAChB,CAAC;AAEF,MAAI,CAAC,OAAO,IAAI;AACd,OAAI,KACF;IACE;IACA,aAAa,EAAE,IAAI,OAAO,OAAO;IACjC,QAAQ,YAAY,SAAS,OAAO,SAAS;IAC7C,MAAM,EAAE,IAAI;IACZ,QAAQ,EAAE,IAAI;IACf,EACD,gCAAgC,OAAO,sBACxC;AACD,UAAO,EAAE,KAAK;IAAE,OAAO;IAAa,SAAS;IAAsB,EAAE,IAAI;;AAG3E,SAAO,MAAM;GACb,CAAC;CAEH,MAAM,uBAAuB,IAAI,OAAO;CACxC,MAAM,wBAAwB,KAAK,OAAO;CAC1C,MAAM,sBAAsB,KAAK,OAAO;CACxC,MAAM,4BAA4B,KAAK,OAAO;CAC9C,MAAM,yBAAyB,iCAAiC;CAEhE,MAAM,4BAA4B,MAAc,QAAgB,gBAA6C;AAC3G,MAAI,WAAW,OAAQ,QAAO;AAC9B,MAAI,+BAA+B,KAAK,KAAK,CAAE,QAAO;AACtD,SAAO,SAAS,gBAAgB,aAAa,SAAS,sBAAsB,KAAK;;AAGnF,KAAI,IAAI,sBAAsB,UAAU;EACtC,SAAS;EACT,UAAU,MAAM;AACd,OAAI,KAAK;IAAE,MAAM,EAAE,IAAI;IAAM,WAAW;IAAI,EAAE,2DAA2D;AACzG,UAAO,EAAE,KAAK;IAAE,OAAO;IAA2B,SAAS;IAAQ,EAAE,IAAI;;EAE5E,CAAC,CAAC;AAEH,KAAI,IAAI,UAAU,OAAO,GAAG,SAAS;EACnC,MAAM,cAAc,EAAE,IAAI,OAAO,eAAe;EAChD,MAAM,UAAU,EAAE,IAAI,SAAS,eAC3B,yBACA,EAAE,IAAI,SAAS,uBACb,wBACA,EAAE,IAAI,SAAS,0BACb,4BACA,yBAAyB,EAAE,IAAI,MAAM,EAAE,IAAI,QAAQ,YAAY,GAC7D,sBACA;EACV,MAAM,YAAY,KAAK,KAAK,WAAW,OAAO,MAAM;AACpD,SAAO,UAAU;GACf;GACA,UAAU,QAAQ;AAChB,QAAI,KAAK;KAAE,MAAM,IAAI,IAAI;KAAM;KAAW,EAAE,mCAAmC,UAAU,UAAU;AACnG,WAAO,IAAI,KAAK;KAAE,OAAO;KAA0B,SAAS,GAAG,UAAU;KAAK,EAAE,IAAI;;GAEvF,CAAC,CAAC,GAAG,KAAK;GACX;AAEF,6BAA4B,KAAK,QAAQ;AAKzC,oCAAmC,KAAK,QAAQ;CAEhD,MAAM,gBAAgB,IAAI,MAAM;AAChC,eAAc,IAAI,sBAAsB,CAAC;AACzC,eAAc,IACZ,KAAK;EACH;EACA,sBAAsB,QAAQ,cAAc,SAAS;EACrD,uBAAuB;AACrB,OAAI,OAAO,QAAQ,oBAAoB,WACrC,QAAO,QAAQ,iBAAiB;AAElC,UAAO,QAAQ;IAAE,MAAM;IAAS;IAAO,GAAG,EAAE,MAAM,QAAQ;;EAE5D,+BAA+B;GAC7B,gBAAgB,QAAQ,cAAc,SAAS;GAC/C,qBAAqB,QAAQ,cAAc,SAAS,wBAAwB;GAC7E;EACF,CAAC,CACH;AACD,eAAc,IAAI,gBAAgB,CAAC;AAoBnC,6BAA4B,KAAK,eAAe;EAC9C;EACA,2BApBgC,gCAAgC,EAChE,+BAA+B;GAC7B,gBAAgB,QAAQ,cAAc,SAAS;GAC/C,qBAAqB,QAAQ,cAAc,SAAS,wBAAwB;GAC7E,GACF,CAe0B;EACzB,4BAfiC,iCAAiC,EAClE,+BAA+B;GAC7B,gBAAgB,QAAQ,cAAc,SAAS;GAC/C,qBAAqB,QAAQ,cAAc,SAAS,wBAAwB;GAC7E,GACF,CAU2B;EAC1B,WAAA;GARA;GACA,mBAAmB,QAAQ,cAAc,QAAQ;GAOxC;EACV,CAAC;CAEF,MAAM,UAAU,sBAAsB;AACtC,KAAI,QAAQ,SAAS,EACnB,KAAI,MAAM;EAAE,QAAQ,QAAQ;EAAQ,SAAS,QAAQ;EAAS,EAAE,4BAA4B;AAG9F,KAAI,MAAM,KAAK,cAAc;AAE7B,KAAI,UAAU,MAAM;EAClB,MAAM,aAAa,EAAE,IAAI,KAAK,WAAW,QAAQ;EACjD,MAAM,SAAS;GAAE,MAAM,EAAE,IAAI;GAAM,QAAQ,EAAE,IAAI;GAAQ;AACzD,MAAI,WACF,KAAI,KAAK,QAAQ,kBAAkB;MAEnC,KAAI,MAAM,QAAQ,kBAAkB;AAEtC,SAAO,EAAE,KAAK,EAAE,OAAO,aAAa,EAAE,IAAI;GAC1C;AAEF,KAAI,SAAS,KAAK,MAAM;AACtB,MAAI,MACF;GACE;GACA,OAAO;GACP,MAAM,EAAE,IAAI;GACZ,QAAQ,EAAE,IAAI;GACd,WAAW,EAAE,IAAI,OAAO,aAAa;GACtC,EACD,iBAAiB,EAAE,IAAI,OAAO,GAAG,EAAE,IAAI,KAAK,IAAI,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,GACjG;AACD,SAAO,EAAE,KAAK,EAAE,OAAO,yBAAyB,EAAE,IAAI;GACtD;AAEF,QAAO"}
+{"version":3,"file":"app.js","names":[],"sources":["../../../../src/gateway/hono/app.ts"],"sourcesContent":["import { Hono } from 'hono';\nimport type { Context } from 'hono';\nimport { cors } from 'hono/cors';\nimport { createMiddleware } from 'hono/factory';\nimport { bodyLimit } from 'hono/body-limit';\nimport { getConnInfo } from '@hono/node-server/conninfo';\n\nimport { resolveGatewayEffectiveHost } from '../../config/gateway-bind.js';\nimport { createLogger } from '../../utils/logger.js';\nimport type { GatewayService } from '../service.js';\nimport { resolveAllowedBrowserOrigins, resolveGatewayServiceListenPort } from '../host.js';\nimport { loadTunnelState } from '../../tunnel/tunnel-state.js';\nimport { WORK_ITEM_ATTACHMENT_UPLOAD_BODY_MAX_BYTES } from '../../work-items/index.js';\nimport { maxWebchatAgentRequestBodyBytes } from '../chat-limits.js';\nimport { buildGatewayConsoleCspHeader } from '../security/csp.js';\nimport { checkBrowserOrigin } from '../security/origin-check.js';\nimport { isLoopbackIpAddress, isTrustedProxyAddress } from '../client-ip.js';\nimport { resolveReverseProxyPublicUrl } from '../public-url.js';\nimport { auth } from './middleware/auth.js';\nimport { operatorScopes } from './middleware/scopes.js';\nimport {\n  createChannelRateLimitMiddleware,\n  createStrictRateLimitMiddleware,\n} from './middleware/strict-rate-limit.js';\nimport { logContextMiddleware } from './middleware/log-context.js';\nimport { logger } from './middleware/logger.js';\nimport { routeErrorMiddleware } from './middleware/route-errors.js';\nimport { registerPublicExtensionAssetRoutes } from './routes/auth-registry-extensions.js';\nimport { registerAuthenticatedRoutes } from './routes/index.js';\nimport { registerPublicGatewayRoutes } from './routes/public-gateway.js';\nimport { resetLazyRouteBundlesForTests } from './routes/lazy-fallback.js';\nimport { prewarmStaticUiCache } from './lib/static-ui.js';\nimport { registerSiteShareMiddleware } from '../../share/site-share-router.js';\nconst log = createLogger('Gateway:App');\n\nexport interface HonoAppConfig {\n  service: GatewayService;\n  token?: string;\n}\n\n/**\n * Extension sandbox HTML under `/api/extensions/:id/assets/*` ships its own CSP\n * (`frame-ancestors 'self'`). The global gateway middleware must not overwrite it\n * with `frame-ancestors 'none'` / `X-Frame-Options: DENY`, or the console cannot embed iframes.\n */\nexport function isExtensionGatewayUiAssetPath(path: string): boolean {\n  return /^\\/api\\/extensions\\/[^/]+\\/assets\\//.test(path);\n}\n\nexport function createHonoApp(config: HonoAppConfig): Hono {\n  if (process.env.VITEST) {\n    resetLazyRouteBundlesForTests();\n  }\n  const { service, token } = config;\n  const app = new Hono();\n\n  const gatewayPort = resolveGatewayServiceListenPort(service);\n\n  const resolveBrowserOrigins = (): string[] =>\n    resolveAllowedBrowserOrigins({\n      configuredOrigins: service.currentConfig.gateway.corsOrigins,\n      port: gatewayPort,\n      bindHost: resolveGatewayEffectiveHost(service.currentConfig),\n      tunnelPublicUrl: loadTunnelState()?.publicUrl,\n      reverseProxyPublicUrl: resolveReverseProxyPublicUrl(service.currentConfig),\n    });\n\n  /**\n   * TCP source for the in-flight request, normalized for trusted-proxy checks.\n   * Returns undefined when the runtime doesn't expose conninfo (tests, mocks).\n   */\n  const resolveRequestRemoteAddress = (c: Context): string | undefined => {\n    try {\n      return getConnInfo(c).remote.address;\n    } catch {\n      return undefined;\n    }\n  };\n\n  /**\n   * A request's TCP source qualifies as a \"trusted proxy hop\" when it's\n   * loopback (the user's own machine, where any reverse proxy lives) or\n   * listed in `gateway.trustedProxies`. We use this signal to safely\n   * auto-allow same-host Origins through CSRF without requiring a manual\n   * `corsOrigins` entry for every reverse-proxy hostname.\n   */\n  const isRequestFromTrustedProxy = (c: Context): boolean => {\n    const remote = resolveRequestRemoteAddress(c);\n    if (!remote) return false;\n    if (isLoopbackIpAddress(remote)) return true;\n    return isTrustedProxyAddress(remote, service.currentConfig.gateway?.trustedProxies);\n  };\n\n  app.use(logContextMiddleware());\n  app.use(logger({\n    trustedProxies: service.currentConfig.gateway?.trustedProxies,\n    allowRealIpFallback: service.currentConfig.gateway?.allowRealIpFallback === true,\n  }));\n\n  // Site-share middleware runs BEFORE CORS/CSP — it owns the request when the\n  // Host header matches `*.<publicHostSuffix>` (default `*.share.xopc.ai`) or\n  // the path starts with `/site/:token/`. Otherwise it falls through.\n  registerSiteShareMiddleware(app, service);\n  app.use(\n    cors({\n      origin: (origin) => {\n        const allowed = resolveBrowserOrigins();\n        if (!origin) {\n          return allowed[0] ?? `http://127.0.0.1:${gatewayPort}`;\n        }\n        const normalized = origin.toLowerCase();\n        const hit = allowed.find((entry) => entry.toLowerCase() === normalized);\n        if (hit) return origin;\n        return allowed.includes('*') ? '*' : '';\n      },\n      allowMethods: ['GET', 'POST', 'PATCH', 'DELETE', 'OPTIONS'],\n      allowHeaders: ['Content-Type', 'Authorization', 'Accept', 'X-Session-Id', 'Last-Event-ID'],\n      credentials: true,\n      maxAge: 86400,\n    }),\n  );\n\n  // Build CSP header once at startup (no inline script hashes needed for SPA)\n  const gatewayConsoleCsp = buildGatewayConsoleCspHeader();\n\n  // Security headers middleware\n  app.use(createMiddleware(async (c, next) => {\n    await next();\n    if (isExtensionGatewayUiAssetPath(c.req.path)) {\n      return;\n    }\n    c.header('X-Frame-Options', 'DENY');\n    c.header('X-Content-Type-Options', 'nosniff');\n    c.header('Referrer-Policy', 'strict-origin-when-cross-origin');\n    c.header('X-XSS-Protection', '1; mode=block');\n    // microphone=(self): allow same-origin chat voice (composer). microphone=() breaks packaged Electron loading the gateway SPA.\n    c.header('Permissions-Policy', 'camera=(), microphone=(self), geolocation=()');\n    c.header('Content-Security-Policy', gatewayConsoleCsp);\n  }));\n\n  // Browser Origin check middleware for API routes (CSRF protection).\n  // Non-browser requests (no Origin header) pass through — they are\n  // authenticated by the token middleware instead.\n  const allowHostHeaderOriginFallback =\n    service.currentConfig.gateway?.dangerouslyAllowHostHeaderOriginFallback === true;\n  app.use('/api/*', createMiddleware(async (c, next) => {\n    // Sandboxed extension iframes (no allow-same-origin) send `Origin: null`.\n    // `checkBrowserOrigin` rejects that; these routes rely on CSP instead\n    // (`registerPublicExtensionAssetRoutes`).\n    if (isExtensionGatewayUiAssetPath(c.req.path)) {\n      return next();\n    }\n\n    const origin = c.req.header('origin');\n    if (!origin || origin.trim().toLowerCase() === 'null') {\n      // Native apps / opaque origins — authenticated via Bearer token\n      return next();\n    }\n\n    const result = checkBrowserOrigin({\n      requestHost: c.req.header('host'),\n      origin,\n      allowedOrigins: resolveBrowserOrigins(),\n      allowHostHeaderOriginFallback,\n      autoAllowSameHostFromTrustedProxy: isRequestFromTrustedProxy(c),\n      isLocalClient: false,\n    });\n\n    if (!result.ok) {\n      log.warn(\n        {\n          origin,\n          requestHost: c.req.header('host'),\n          reason: 'reason' in result ? result.reason : 'unknown',\n          path: c.req.path,\n          method: c.req.method,\n        },\n        `Browser origin check failed: ${origin} not in allowed list`,\n      );\n      return c.json({ error: 'Forbidden', message: 'Origin not allowed' }, 403);\n    }\n\n    return next();\n  }));\n\n  const DEFAULT_API_BODY_MAX = 1 * 1024 * 1024;\n  const SKILL_UPLOAD_BODY_MAX = 10 * 1024 * 1024;\n  const NOTE_MEDIA_BODY_MAX = 25 * 1024 * 1024;\n  const VOICE_TRANSCRIBE_BODY_MAX = 35 * 1024 * 1024;\n  const WEBCHAT_AGENT_BODY_MAX = maxWebchatAgentRequestBodyBytes();\n\n  const isNoteMediaUploadRequest = (path: string, method: string, contentType: string | undefined): boolean => {\n    if (method !== 'POST') return false;\n    if (/^\\/api\\/notes\\/[^/]+\\/media$/.test(path)) return true;\n    return path === '/api/notes' && contentType?.includes('multipart/form-data') === true;\n  };\n\n  const isWorkItemAttachmentUploadRequest = (path: string, method: string, contentType: string | undefined): boolean => {\n    if (method !== 'POST' || contentType?.includes('multipart/form-data') !== true) return false;\n    return /^\\/api\\/work-items\\/[^/]+\\/attachments$/.test(path)\n      || /^\\/api\\/projects\\/[^/]+\\/work-items$/.test(path);\n  };\n\n  app.use('/api/skills/upload', bodyLimit({\n    maxSize: SKILL_UPLOAD_BODY_MAX,\n    onError: (c) => {\n      log.warn({ path: c.req.path, maxSizeMb: 10 }, 'Request body too large: skills upload exceeds 10MB limit');\n      return c.json({ error: 'Skill package too large', maxSize: '10MB' }, 413);\n    },\n  }));\n\n  app.use('/api/*', async (c, next) => {\n    const contentType = c.req.header('content-type');\n    const maxSize = c.req.path === '/api/agent'\n      ? WEBCHAT_AGENT_BODY_MAX\n      : c.req.path === '/api/skills/upload'\n        ? SKILL_UPLOAD_BODY_MAX\n        : c.req.path === '/api/voice/transcribe'\n          ? VOICE_TRANSCRIBE_BODY_MAX\n          : isNoteMediaUploadRequest(c.req.path, c.req.method, contentType)\n            ? NOTE_MEDIA_BODY_MAX\n            : isWorkItemAttachmentUploadRequest(c.req.path, c.req.method, contentType)\n              ? WORK_ITEM_ATTACHMENT_UPLOAD_BODY_MAX_BYTES\n              : DEFAULT_API_BODY_MAX;\n    const maxSizeMb = Math.ceil(maxSize / (1024 * 1024));\n    return bodyLimit({\n      maxSize,\n      onError: (ctx) => {\n        log.warn({ path: ctx.req.path, maxSizeMb }, `Request body too large: exceeds ${maxSizeMb}MB limit`);\n        return ctx.json({ error: 'Request body too large', maxSize: `${maxSizeMb}MB` }, 413);\n      },\n    })(c, next);\n  });\n\n  registerPublicGatewayRoutes(app, service);\n\n  // Extension UI assets are served without auth: sandboxed iframes (no allow-same-origin)\n  // have an opaque origin of `null` and cannot forward the ?token= from the parent HTML URL.\n  // Security is enforced by the strict CSP (frame-ancestors 'self') on every response.\n  registerPublicExtensionAssetRoutes(app, service);\n\n  const authenticated = new Hono();\n  authenticated.use(routeErrorMiddleware());\n  authenticated.use(\n    auth({\n      token,\n      getGatewayAuth: () => service.currentConfig.gateway?.auth,\n      getResolvedAuth: () => {\n        if (typeof service.getResolvedAuth === 'function') {\n          return service.getResolvedAuth();\n        }\n        return token ? { mode: 'token', token } : { mode: 'none' };\n      },\n      getTrustedProxyContext: () => ({\n        trustedProxies: service.currentConfig.gateway?.trustedProxies,\n        allowRealIpFallback: service.currentConfig.gateway?.allowRealIpFallback === true,\n      }),\n    }),\n  );\n  authenticated.use(operatorScopes());\n\n  const strictRateLimitMiddleware = createStrictRateLimitMiddleware({\n    getTrustedProxyContext: () => ({\n      trustedProxies: service.currentConfig.gateway?.trustedProxies,\n      allowRealIpFallback: service.currentConfig.gateway?.allowRealIpFallback === true,\n    }),\n  });\n  const channelRateLimitMiddleware = createChannelRateLimitMiddleware({\n    getTrustedProxyContext: () => ({\n      trustedProxies: service.currentConfig.gateway?.trustedProxies,\n      allowRealIpFallback: service.currentConfig.gateway?.allowRealIpFallback === true,\n    }),\n  });\n\n  const sseConfig = {\n    service,\n    maxSseConnections: service.currentConfig.gateway.maxSseConnections,\n  };\n\n  registerAuthenticatedRoutes(app, authenticated, {\n    service,\n    strictRateLimitMiddleware,\n    channelRateLimitMiddleware,\n    sseConfig,\n  });\n\n  const prewarm = prewarmStaticUiCache();\n  if (prewarm.loaded > 0) {\n    log.debug({ loaded: prewarm.loaded, missing: prewarm.missing }, 'Static UI cache prewarmed');\n  }\n\n  app.route('/', authenticated);\n\n  app.notFound((c) => {\n    const isApiRoute = c.req.path.startsWith('/api/');\n    const fields = { path: c.req.path, method: c.req.method };\n    if (isApiRoute) {\n      log.warn(fields, 'Route not found');\n    } else {\n      log.debug(fields, 'Route not found');\n    }\n    return c.json({ error: 'Not found' }, 404);\n  });\n\n  app.onError((err, c) => {\n    log.error(\n      {\n        err,\n        phase: 'gateway.http.unhandled',\n        path: c.req.path,\n        method: c.req.method,\n        userAgent: c.req.header('user-agent'),\n      },\n      `Hono error on ${c.req.method} ${c.req.path}: ${err instanceof Error ? err.message : String(err)}`,\n    );\n    return c.json({ error: 'Internal server error' }, 500);\n  });\n\n  return app;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;aAQqD;AAyBrD,MAAM,MAAM,aAAa,cAAc;;;;;;AAYvC,SAAgB,8BAA8B,MAAuB;AACnE,QAAO,sCAAsC,KAAK,KAAK;;AAGzD,SAAgB,cAAc,QAA6B;AACzD,KAAI,QAAQ,IAAI,OACd,gCAA+B;CAEjC,MAAM,EAAE,SAAS,UAAU;CAC3B,MAAM,MAAM,IAAI,MAAM;CAEtB,MAAM,cAAc,gCAAgC,QAAQ;CAE5D,MAAM,8BACJ,6BAA6B;EAC3B,mBAAmB,QAAQ,cAAc,QAAQ;EACjD,MAAM;EACN,UAAU,4BAA4B,QAAQ,cAAc;EAC5D,iBAAiB,iBAAiB,EAAE;EACpC,uBAAuB,6BAA6B,QAAQ,cAAc;EAC3E,CAAC;;;;;CAMJ,MAAM,+BAA+B,MAAmC;AACtE,MAAI;AACF,UAAO,YAAY,EAAE,CAAC,OAAO;UACvB;AACN;;;;;;;;;;CAWJ,MAAM,6BAA6B,MAAwB;EACzD,MAAM,SAAS,4BAA4B,EAAE;AAC7C,MAAI,CAAC,OAAQ,QAAO;AACpB,MAAI,oBAAoB,OAAO,CAAE,QAAO;AACxC,SAAO,sBAAsB,QAAQ,QAAQ,cAAc,SAAS,eAAe;;AAGrF,KAAI,IAAI,sBAAsB,CAAC;AAC/B,KAAI,IAAI,OAAO;EACb,gBAAgB,QAAQ,cAAc,SAAS;EAC/C,qBAAqB,QAAQ,cAAc,SAAS,wBAAwB;EAC7E,CAAC,CAAC;AAKH,6BAA4B,KAAK,QAAQ;AACzC,KAAI,IACF,KAAK;EACH,SAAS,WAAW;GAClB,MAAM,UAAU,uBAAuB;AACvC,OAAI,CAAC,OACH,QAAO,QAAQ,MAAM,oBAAoB;GAE3C,MAAM,aAAa,OAAO,aAAa;AAEvC,OADY,QAAQ,MAAM,UAAU,MAAM,aAAa,KAAK,WACrD,CAAE,QAAO;AAChB,UAAO,QAAQ,SAAS,IAAI,GAAG,MAAM;;EAEvC,cAAc;GAAC;GAAO;GAAQ;GAAS;GAAU;GAAU;EAC3D,cAAc;GAAC;GAAgB;GAAiB;GAAU;GAAgB;GAAgB;EAC1F,aAAa;EACb,QAAQ;EACT,CAAC,CACH;CAGD,MAAM,oBAAoB,8BAA8B;AAGxD,KAAI,IAAI,iBAAiB,OAAO,GAAG,SAAS;AAC1C,QAAM,MAAM;AACZ,MAAI,8BAA8B,EAAE,IAAI,KAAK,CAC3C;AAEF,IAAE,OAAO,mBAAmB,OAAO;AACnC,IAAE,OAAO,0BAA0B,UAAU;AAC7C,IAAE,OAAO,mBAAmB,kCAAkC;AAC9D,IAAE,OAAO,oBAAoB,gBAAgB;AAE7C,IAAE,OAAO,sBAAsB,+CAA+C;AAC9E,IAAE,OAAO,2BAA2B,kBAAkB;GACtD,CAAC;CAKH,MAAM,gCACJ,QAAQ,cAAc,SAAS,6CAA6C;AAC9E,KAAI,IAAI,UAAU,iBAAiB,OAAO,GAAG,SAAS;AAIpD,MAAI,8BAA8B,EAAE,IAAI,KAAK,CAC3C,QAAO,MAAM;EAGf,MAAM,SAAS,EAAE,IAAI,OAAO,SAAS;AACrC,MAAI,CAAC,UAAU,OAAO,MAAM,CAAC,aAAa,KAAK,OAE7C,QAAO,MAAM;EAGf,MAAM,SAAS,mBAAmB;GAChC,aAAa,EAAE,IAAI,OAAO,OAAO;GACjC;GACA,gBAAgB,uBAAuB;GACvC;GACA,mCAAmC,0BAA0B,EAAE;GAC/D,eAAe;GAChB,CAAC;AAEF,MAAI,CAAC,OAAO,IAAI;AACd,OAAI,KACF;IACE;IACA,aAAa,EAAE,IAAI,OAAO,OAAO;IACjC,QAAQ,YAAY,SAAS,OAAO,SAAS;IAC7C,MAAM,EAAE,IAAI;IACZ,QAAQ,EAAE,IAAI;IACf,EACD,gCAAgC,OAAO,sBACxC;AACD,UAAO,EAAE,KAAK;IAAE,OAAO;IAAa,SAAS;IAAsB,EAAE,IAAI;;AAG3E,SAAO,MAAM;GACb,CAAC;CAEH,MAAM,uBAAuB,IAAI,OAAO;CACxC,MAAM,wBAAwB,KAAK,OAAO;CAC1C,MAAM,sBAAsB,KAAK,OAAO;CACxC,MAAM,4BAA4B,KAAK,OAAO;CAC9C,MAAM,yBAAyB,iCAAiC;CAEhE,MAAM,4BAA4B,MAAc,QAAgB,gBAA6C;AAC3G,MAAI,WAAW,OAAQ,QAAO;AAC9B,MAAI,+BAA+B,KAAK,KAAK,CAAE,QAAO;AACtD,SAAO,SAAS,gBAAgB,aAAa,SAAS,sBAAsB,KAAK;;CAGnF,MAAM,qCAAqC,MAAc,QAAgB,gBAA6C;AACpH,MAAI,WAAW,UAAU,aAAa,SAAS,sBAAsB,KAAK,KAAM,QAAO;AACvF,SAAO,0CAA0C,KAAK,KAAK,IACtD,uCAAuC,KAAK,KAAK;;AAGxD,KAAI,IAAI,sBAAsB,UAAU;EACtC,SAAS;EACT,UAAU,MAAM;AACd,OAAI,KAAK;IAAE,MAAM,EAAE,IAAI;IAAM,WAAW;IAAI,EAAE,2DAA2D;AACzG,UAAO,EAAE,KAAK;IAAE,OAAO;IAA2B,SAAS;IAAQ,EAAE,IAAI;;EAE5E,CAAC,CAAC;AAEH,KAAI,IAAI,UAAU,OAAO,GAAG,SAAS;EACnC,MAAM,cAAc,EAAE,IAAI,OAAO,eAAe;EAChD,MAAM,UAAU,EAAE,IAAI,SAAS,eAC3B,yBACA,EAAE,IAAI,SAAS,uBACb,wBACA,EAAE,IAAI,SAAS,0BACb,4BACA,yBAAyB,EAAE,IAAI,MAAM,EAAE,IAAI,QAAQ,YAAY,GAC7D,sBACA,kCAAkC,EAAE,IAAI,MAAM,EAAE,IAAI,QAAQ,YAAY,GACtE,6CACA;EACZ,MAAM,YAAY,KAAK,KAAK,WAAW,OAAO,MAAM;AACpD,SAAO,UAAU;GACf;GACA,UAAU,QAAQ;AAChB,QAAI,KAAK;KAAE,MAAM,IAAI,IAAI;KAAM;KAAW,EAAE,mCAAmC,UAAU,UAAU;AACnG,WAAO,IAAI,KAAK;KAAE,OAAO;KAA0B,SAAS,GAAG,UAAU;KAAK,EAAE,IAAI;;GAEvF,CAAC,CAAC,GAAG,KAAK;GACX;AAEF,6BAA4B,KAAK,QAAQ;AAKzC,oCAAmC,KAAK,QAAQ;CAEhD,MAAM,gBAAgB,IAAI,MAAM;AAChC,eAAc,IAAI,sBAAsB,CAAC;AACzC,eAAc,IACZ,KAAK;EACH;EACA,sBAAsB,QAAQ,cAAc,SAAS;EACrD,uBAAuB;AACrB,OAAI,OAAO,QAAQ,oBAAoB,WACrC,QAAO,QAAQ,iBAAiB;AAElC,UAAO,QAAQ;IAAE,MAAM;IAAS;IAAO,GAAG,EAAE,MAAM,QAAQ;;EAE5D,+BAA+B;GAC7B,gBAAgB,QAAQ,cAAc,SAAS;GAC/C,qBAAqB,QAAQ,cAAc,SAAS,wBAAwB;GAC7E;EACF,CAAC,CACH;AACD,eAAc,IAAI,gBAAgB,CAAC;AAoBnC,6BAA4B,KAAK,eAAe;EAC9C;EACA,2BApBgC,gCAAgC,EAChE,+BAA+B;GAC7B,gBAAgB,QAAQ,cAAc,SAAS;GAC/C,qBAAqB,QAAQ,cAAc,SAAS,wBAAwB;GAC7E,GACF,CAe0B;EACzB,4BAfiC,iCAAiC,EAClE,+BAA+B;GAC7B,gBAAgB,QAAQ,cAAc,SAAS;GAC/C,qBAAqB,QAAQ,cAAc,SAAS,wBAAwB;GAC7E,GACF,CAU2B;EAC1B,WAAA;GARA;GACA,mBAAmB,QAAQ,cAAc,QAAQ;GAOxC;EACV,CAAC;CAEF,MAAM,UAAU,sBAAsB;AACtC,KAAI,QAAQ,SAAS,EACnB,KAAI,MAAM;EAAE,QAAQ,QAAQ;EAAQ,SAAS,QAAQ;EAAS,EAAE,4BAA4B;AAG9F,KAAI,MAAM,KAAK,cAAc;AAE7B,KAAI,UAAU,MAAM;EAClB,MAAM,aAAa,EAAE,IAAI,KAAK,WAAW,QAAQ;EACjD,MAAM,SAAS;GAAE,MAAM,EAAE,IAAI;GAAM,QAAQ,EAAE,IAAI;GAAQ;AACzD,MAAI,WACF,KAAI,KAAK,QAAQ,kBAAkB;MAEnC,KAAI,MAAM,QAAQ,kBAAkB;AAEtC,SAAO,EAAE,KAAK,EAAE,OAAO,aAAa,EAAE,IAAI;GAC1C;AAEF,KAAI,SAAS,KAAK,MAAM;AACtB,MAAI,MACF;GACE;GACA,OAAO;GACP,MAAM,EAAE,IAAI;GACZ,QAAQ,EAAE,IAAI;GACd,WAAW,EAAE,IAAI,OAAO,aAAa;GACtC,EACD,iBAAiB,EAAE,IAAI,OAAO,GAAG,EAAE,IAAI,KAAK,IAAI,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,GACjG;AACD,SAAO,EAAE,KAAK,EAAE,OAAO,yBAAyB,EAAE,IAAI;GACtD;AAEF,QAAO"}

package/dist/src/gateway/hono/lib/config-payload.d.ts

@@ -61,13 +61,13 @@ export declare function buildSafeWebConfigPayload(service: GatewayService, optio
                 };
                 policy?: {
                     allowFallbacks?: boolean;
-                    maxCostTier?: "low" | "medium" | "high";
+                    maxCostTier?: "low" | "high" | "medium";
                 };
             };
             tools: {
                 builtin: Record<string, {
                     mode: "allow" | "confirm" | "deny";
-                    scope?: "readonly" | "workspace" | "unrestricted";
+                    scope?: "workspace" | "readonly" | "unrestricted";
                     limits?: {
                         maxCallsPerTurn?: number;
                         timeoutMs?: number;
@@ -76,7 +76,7 @@ export declare function buildSafeWebConfigPayload(service: GatewayService, optio
                 mcp?: {
                     servers?: Record<string, {
                         mode: "allow" | "confirm" | "deny";
-                        scope?: "readonly" | "workspace" | "unrestricted";
+                        scope?: "workspace" | "readonly" | "unrestricted";
                         limits?: {
                             maxCallsPerTurn?: number;
                             timeoutMs?: number;
@@ -84,7 +84,7 @@ export declare function buildSafeWebConfigPayload(service: GatewayService, optio
                     }>;
                     tools?: Record<string, {
                         mode: "allow" | "confirm" | "deny";
-                        scope?: "readonly" | "workspace" | "unrestricted";
+                        scope?: "workspace" | "readonly" | "unrestricted";
                         limits?: {
                             maxCallsPerTurn?: number;
                             timeoutMs?: number;
@@ -98,8 +98,8 @@ export declare function buildSafeWebConfigPayload(service: GatewayService, optio
                 deny?: string[];
             };
             memory: {
-                mode: "off" | "readOnly" | "confirmWrite" | "auto";
-                sources: ("workspace" | "session" | "userProfile" | "agentProfile" | "curated")[];
+                mode: "off" | "auto" | "readOnly" | "confirmWrite";
+                sources: ("session" | "workspace" | "userProfile" | "agentProfile" | "curated")[];
                 writePolicy?: {
                     userProfile?: "allow" | "confirm" | "deny";
                     agentProfile?: "allow" | "confirm" | "deny";
@@ -195,13 +195,13 @@ export declare function buildSafeWebConfigPayload(service: GatewayService, optio
                 };
                 policy?: {
                     allowFallbacks?: boolean;
-                    maxCostTier?: "low" | "medium" | "high";
+                    maxCostTier?: "low" | "high" | "medium";
                 };
             };
             tools?: {
                 builtin: Record<string, {
                     mode: "allow" | "confirm" | "deny";
-                    scope?: "readonly" | "workspace" | "unrestricted";
+                    scope?: "workspace" | "readonly" | "unrestricted";
                     limits?: {
                         maxCallsPerTurn?: number;
                         timeoutMs?: number;
@@ -210,7 +210,7 @@ export declare function buildSafeWebConfigPayload(service: GatewayService, optio
                 mcp?: {
                     servers?: Record<string, {
                         mode: "allow" | "confirm" | "deny";
-                        scope?: "readonly" | "workspace" | "unrestricted";
+                        scope?: "workspace" | "readonly" | "unrestricted";
                         limits?: {
                             maxCallsPerTurn?: number;
                             timeoutMs?: number;
@@ -218,7 +218,7 @@ export declare function buildSafeWebConfigPayload(service: GatewayService, optio
                     }>;
                     tools?: Record<string, {
                         mode: "allow" | "confirm" | "deny";
-                        scope?: "readonly" | "workspace" | "unrestricted";
+                        scope?: "workspace" | "readonly" | "unrestricted";
                         limits?: {
                             maxCallsPerTurn?: number;
                             timeoutMs?: number;
@@ -232,8 +232,8 @@ export declare function buildSafeWebConfigPayload(service: GatewayService, optio
                 deny?: string[];
             };
             memory?: {
-                mode: "off" | "readOnly" | "confirmWrite" | "auto";
-                sources: ("workspace" | "session" | "userProfile" | "agentProfile" | "curated")[];
+                mode: "off" | "auto" | "readOnly" | "confirmWrite";
+                sources: ("session" | "workspace" | "userProfile" | "agentProfile" | "curated")[];
                 writePolicy?: {
                     userProfile?: "allow" | "confirm" | "deny";
                     agentProfile?: "allow" | "confirm" | "deny";
@@ -334,7 +334,7 @@ export declare function buildSafeWebConfigPayload(service: GatewayService, optio
             strict: boolean;
         };
         auth: {
-            mode: "none" | "token" | "password" | "trusted-proxy";
+            mode: "token" | "password" | "none" | "trusted-proxy";
             token: string;
             password: string;
             trustedProxy: {
@@ -367,7 +367,7 @@ export declare function buildSafeWebConfigPayload(service: GatewayService, optio
             };
         };
         maxSseConnections: number;
-        channelConnectDeferMode: "off" | "auto" | "explicit";
+        channelConnectDeferMode: "explicit" | "off" | "auto";
         channelConnectDeferIds: string[];
         channelConnectDeferSkipIds: string[];
         share: import("../../../share/share-types.js").ShareConfig;

package/dist/src/gateway/hono/lib/static-ui.js

@@ -1,7 +1,7 @@
 import { dirname, resolve } from "node:path";
 import { readFileSync } from "node:fs";
-import { createHash } from "node:crypto";
 import { fileURLToPath } from "node:url";
+import { createHash } from "node:crypto";
 //#region src/gateway/hono/lib/static-ui.ts
 const __dirname = dirname(fileURLToPath(import.meta.url));
 /**

package/dist/src/gateway/hono/middleware/log-context.js

@@ -1,4 +1,6 @@
 import { init_context, runWithLogContext } from "../../../utils/logger/context.js";
+import { runWithActivityContext } from "../../../activity/context.js";
+import "../../../activity/index.js";
 import { randomUUID } from "node:crypto";
 import { createMiddleware } from "hono/factory";
 //#region src/gateway/hono/middleware/log-context.ts
@@ -17,7 +19,12 @@ function logContextMiddleware() {
 			requestId,
 			...sessionHeader ? { sessionId: sessionHeader } : {}
 		}, async () => {
-			await next();
+			await runWithActivityContext({ source: {
+				kind: "gateway_api",
+				requestId
+			} }, async () => {
+				await next();
+			});
 		});
 	});
 }

package/dist/src/gateway/hono/middleware/log-context.js.map

@@ -1 +1 @@
-{"version":3,"file":"log-context.js","names":[],"sources":["../../../../../src/gateway/hono/middleware/log-context.ts"],"sourcesContent":["import { randomUUID } from 'node:crypto';\n\nimport { createMiddleware } from 'hono/factory';\n\nimport { runWithLogContext } from '../../../utils/logger/context.js';\n\n/**\n * Binds request (and optional session) correlation into AsyncLocalStorage so\n * all pino logs in the request inherit requestId / sessionId without a child logger.\n */\nexport function logContextMiddleware() {\n  return createMiddleware(async (c, next) => {\n    const headerRequestId = c.req.header('x-request-id')?.trim();\n    const requestId = headerRequestId && headerRequestId.length > 0 ? headerRequestId : randomUUID();\n    const sessionHeader = c.req.header('x-session-id')?.trim();\n\n    c.header('X-Request-Id', requestId);\n\n    return runWithLogContext(\n      {\n        requestId,\n        ...(sessionHeader ? { sessionId: sessionHeader } : {}),\n      },\n      async () => {\n        await next();\n      },\n    );\n  });\n}\n"],"mappings":";;;;cAIqE;;;;;AAMrE,SAAgB,uBAAuB;AACrC,QAAO,iBAAiB,OAAO,GAAG,SAAS;EACzC,MAAM,kBAAkB,EAAE,IAAI,OAAO,eAAe,EAAE,MAAM;EAC5D,MAAM,YAAY,mBAAmB,gBAAgB,SAAS,IAAI,kBAAkB,YAAY;EAChG,MAAM,gBAAgB,EAAE,IAAI,OAAO,eAAe,EAAE,MAAM;AAE1D,IAAE,OAAO,gBAAgB,UAAU;AAEnC,SAAO,kBACL;GACE;GACA,GAAI,gBAAgB,EAAE,WAAW,eAAe,GAAG,EAAE;GACtD,EACD,YAAY;AACV,SAAM,MAAM;IAEf;GACD"}
+{"version":3,"file":"log-context.js","names":[],"sources":["../../../../../src/gateway/hono/middleware/log-context.ts"],"sourcesContent":["import { randomUUID } from 'node:crypto';\n\nimport { createMiddleware } from 'hono/factory';\n\nimport { runWithActivityContext } from '../../../activity/index.js';\nimport { runWithLogContext } from '../../../utils/logger/context.js';\n\n/**\n * Binds request (and optional session) correlation into AsyncLocalStorage so\n * all pino logs in the request inherit requestId / sessionId without a child logger.\n */\nexport function logContextMiddleware() {\n  return createMiddleware(async (c, next) => {\n    const headerRequestId = c.req.header('x-request-id')?.trim();\n    const requestId = headerRequestId && headerRequestId.length > 0 ? headerRequestId : randomUUID();\n    const sessionHeader = c.req.header('x-session-id')?.trim();\n\n    c.header('X-Request-Id', requestId);\n\n    return runWithLogContext(\n      {\n        requestId,\n        ...(sessionHeader ? { sessionId: sessionHeader } : {}),\n      },\n      async () => {\n        await runWithActivityContext(\n          { source: { kind: 'gateway_api', requestId } },\n          async () => {\n            await next();\n          },\n        );\n      },\n    );\n  });\n}\n"],"mappings":";;;;;;cAKqE;;;;;AAMrE,SAAgB,uBAAuB;AACrC,QAAO,iBAAiB,OAAO,GAAG,SAAS;EACzC,MAAM,kBAAkB,EAAE,IAAI,OAAO,eAAe,EAAE,MAAM;EAC5D,MAAM,YAAY,mBAAmB,gBAAgB,SAAS,IAAI,kBAAkB,YAAY;EAChG,MAAM,gBAAgB,EAAE,IAAI,OAAO,eAAe,EAAE,MAAM;AAE1D,IAAE,OAAO,gBAAgB,UAAU;AAEnC,SAAO,kBACL;GACE;GACA,GAAI,gBAAgB,EAAE,WAAW,eAAe,GAAG,EAAE;GACtD,EACD,YAAY;AACV,SAAM,uBACJ,EAAE,QAAQ;IAAE,MAAM;IAAe;IAAW,EAAE,EAC9C,YAAY;AACV,UAAM,MAAM;KAEf;IAEJ;GACD"}

package/dist/src/gateway/hono/routes/activity.d.ts

@@ -0,0 +1,14 @@
+import type { Hono } from 'hono';
+import type { ActivityVisibility } from '../../../activity/types.js';
+import type { AuthenticatedRouteDeps } from './deps.js';
+export declare function parseActivityQuery(c: {
+    req: {
+        query(name: string): string | undefined;
+    };
+}): {
+    visibility?: ActivityVisibility;
+    limit?: number;
+    offset?: number;
+};
+export declare function parseActivityIncludeRelated(raw: string | undefined): boolean;
+export declare function registerActivityRoutes(authenticated: Hono, _deps: AuthenticatedRouteDeps): void;

package/dist/src/gateway/hono/routes/activity.js

@@ -0,0 +1,72 @@
+import { ActivityService } from "../../../activity/service.js";
+import "../../../activity/index.js";
+//#region src/gateway/hono/routes/activity.ts
+const ACTIVITY_OBJECT_KINDS = new Set([
+	"project",
+	"note",
+	"work_item",
+	"session",
+	"goal",
+	"workflow_run",
+	"automation"
+]);
+function parseActivityVisibility(raw) {
+	return raw === "timeline" || raw === "audit" || raw === "debug" ? raw : void 0;
+}
+function parseActivityLimit(raw) {
+	if (!raw) return void 0;
+	const n = Number.parseInt(raw, 10);
+	return Number.isFinite(n) ? Math.min(100, Math.max(1, n)) : void 0;
+}
+function parseActivityOffset(raw) {
+	if (!raw) return void 0;
+	const n = Number.parseInt(raw, 10);
+	return Number.isFinite(n) ? Math.max(0, n) : void 0;
+}
+function parseActivityQuery(c) {
+	return {
+		visibility: parseActivityVisibility(c.req.query("visibility")),
+		limit: parseActivityLimit(c.req.query("limit")),
+		offset: parseActivityOffset(c.req.query("offset"))
+	};
+}
+function parseActivityIncludeRelated(raw) {
+	return raw === "true" || raw === "1";
+}
+function registerActivityRoutes(authenticated, _deps) {
+	const activity = new ActivityService();
+	authenticated.get("/api/activity", (c) => {
+		const result = activity.list(parseActivityQuery(c));
+		return c.json({
+			ok: true,
+			...result
+		});
+	});
+	authenticated.get("/api/activity/objects/:kind/:id", (c) => {
+		const kind = c.req.param("kind");
+		if (!ACTIVITY_OBJECT_KINDS.has(kind)) return c.json({
+			ok: false,
+			error: "Unsupported activity object kind"
+		}, 400);
+		const id = c.req.param("id").trim();
+		if (!id) return c.json({
+			ok: false,
+			error: "Missing activity object id"
+		}, 400);
+		const result = activity.listForObject({
+			object: {
+				kind,
+				id
+			},
+			...parseActivityQuery(c)
+		});
+		return c.json({
+			ok: true,
+			...result
+		});
+	});
+}
+//#endregion
+export { parseActivityIncludeRelated, parseActivityQuery, registerActivityRoutes };
+
+//# sourceMappingURL=activity.js.map

package/dist/src/gateway/hono/routes/activity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"activity.js","names":[],"sources":["../../../../../src/gateway/hono/routes/activity.ts"],"sourcesContent":["import type { Hono } from 'hono';\n\nimport { ActivityService } from '../../../activity/index.js';\nimport type { ActivityObjectKind, ActivityVisibility } from '../../../activity/types.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\n\nconst ACTIVITY_OBJECT_KINDS = new Set<ActivityObjectKind>([\n  'project',\n  'note',\n  'work_item',\n  'session',\n  'goal',\n  'workflow_run',\n  'automation',\n]);\n\nfunction parseActivityVisibility(raw: string | undefined): ActivityVisibility | undefined {\n  return raw === 'timeline' || raw === 'audit' || raw === 'debug' ? raw : undefined;\n}\n\nfunction parseActivityLimit(raw: string | undefined): number | undefined {\n  if (!raw) return undefined;\n  const n = Number.parseInt(raw, 10);\n  return Number.isFinite(n) ? Math.min(100, Math.max(1, n)) : undefined;\n}\n\nfunction parseActivityOffset(raw: string | undefined): number | undefined {\n  if (!raw) return undefined;\n  const n = Number.parseInt(raw, 10);\n  return Number.isFinite(n) ? Math.max(0, n) : undefined;\n}\n\nexport function parseActivityQuery(c: {\n  req: { query(name: string): string | undefined };\n}): {\n  visibility?: ActivityVisibility;\n  limit?: number;\n  offset?: number;\n} {\n  return {\n    visibility: parseActivityVisibility(c.req.query('visibility')),\n    limit: parseActivityLimit(c.req.query('limit')),\n    offset: parseActivityOffset(c.req.query('offset')),\n  };\n}\n\nexport function parseActivityIncludeRelated(raw: string | undefined): boolean {\n  return raw === 'true' || raw === '1';\n}\n\nexport function registerActivityRoutes(authenticated: Hono, _deps: AuthenticatedRouteDeps): void {\n  const activity = new ActivityService();\n\n  authenticated.get('/api/activity', (c) => {\n    const result = activity.list(parseActivityQuery(c));\n    return c.json({ ok: true, ...result });\n  });\n\n  authenticated.get('/api/activity/objects/:kind/:id', (c) => {\n    const kind = c.req.param('kind') as ActivityObjectKind;\n    if (!ACTIVITY_OBJECT_KINDS.has(kind)) {\n      return c.json({ ok: false, error: 'Unsupported activity object kind' }, 400);\n    }\n    const id = c.req.param('id').trim();\n    if (!id) return c.json({ ok: false, error: 'Missing activity object id' }, 400);\n    const result = activity.listForObject({\n      object: { kind, id },\n      ...parseActivityQuery(c),\n    });\n    return c.json({ ok: true, ...result });\n  });\n}\n"],"mappings":";;;AAMA,MAAM,wBAAwB,IAAI,IAAwB;CACxD;CACA;CACA;CACA;CACA;CACA;CACA;CACD,CAAC;AAEF,SAAS,wBAAwB,KAAyD;AACxF,QAAO,QAAQ,cAAc,QAAQ,WAAW,QAAQ,UAAU,MAAM,KAAA;;AAG1E,SAAS,mBAAmB,KAA6C;AACvE,KAAI,CAAC,IAAK,QAAO,KAAA;CACjB,MAAM,IAAI,OAAO,SAAS,KAAK,GAAG;AAClC,QAAO,OAAO,SAAS,EAAE,GAAG,KAAK,IAAI,KAAK,KAAK,IAAI,GAAG,EAAE,CAAC,GAAG,KAAA;;AAG9D,SAAS,oBAAoB,KAA6C;AACxE,KAAI,CAAC,IAAK,QAAO,KAAA;CACjB,MAAM,IAAI,OAAO,SAAS,KAAK,GAAG;AAClC,QAAO,OAAO,SAAS,EAAE,GAAG,KAAK,IAAI,GAAG,EAAE,GAAG,KAAA;;AAG/C,SAAgB,mBAAmB,GAMjC;AACA,QAAO;EACL,YAAY,wBAAwB,EAAE,IAAI,MAAM,aAAa,CAAC;EAC9D,OAAO,mBAAmB,EAAE,IAAI,MAAM,QAAQ,CAAC;EAC/C,QAAQ,oBAAoB,EAAE,IAAI,MAAM,SAAS,CAAC;EACnD;;AAGH,SAAgB,4BAA4B,KAAkC;AAC5E,QAAO,QAAQ,UAAU,QAAQ;;AAGnC,SAAgB,uBAAuB,eAAqB,OAAqC;CAC/F,MAAM,WAAW,IAAI,iBAAiB;AAEtC,eAAc,IAAI,kBAAkB,MAAM;EACxC,MAAM,SAAS,SAAS,KAAK,mBAAmB,EAAE,CAAC;AACnD,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,GAAG;GAAQ,CAAC;GACtC;AAEF,eAAc,IAAI,oCAAoC,MAAM;EAC1D,MAAM,OAAO,EAAE,IAAI,MAAM,OAAO;AAChC,MAAI,CAAC,sBAAsB,IAAI,KAAK,CAClC,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAoC,EAAE,IAAI;EAE9E,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK,CAAC,MAAM;AACnC,MAAI,CAAC,GAAI,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAA8B,EAAE,IAAI;EAC/E,MAAM,SAAS,SAAS,cAAc;GACpC,QAAQ;IAAE;IAAM;IAAI;GACpB,GAAG,mBAAmB,EAAE;GACzB,CAAC;AACF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,GAAG;GAAQ,CAAC;GACtC"}

package/dist/src/gateway/hono/routes/connectors.js

@@ -5,9 +5,9 @@ import { getConnectorDefinition, listConnectorCatalog } from "../../../connector
 import { appendComposioTriggerEvent, listComposioTriggerEvents } from "../../../connectors/composio-triggers.js";
 import { recordConnectorHealthUsage } from "../../../connectors/usage.js";
 import { getConnectorInstance, listConnectorInstances } from "../../../connectors/instances.js";
-import { testConnectorInstance } from "../../../connectors/health.js";
+import { previewConnectorDefinition, testConnectorInstance } from "../../../connectors/health.js";
 import { completeConnectorOAuth, startConnectorOAuth } from "../../../connectors/oauth.js";
-import { installConnector, installConnectorDefinition, uninstallConnector } from "../../../connectors/install.js";
+import { installConnector, installConnectorDefinition, uninstallConnector, updateConnectorConfig } from "../../../connectors/install.js";
 import { setConnectorEnabled } from "../../../connectors/lifecycle.js";
 import { isConnectorRegistrySource, listConnectorRegistries, searchConnectorRegistries } from "../../../connectors/registries/search.js";
 //#region src/gateway/hono/routes/connectors.ts
@@ -227,6 +227,27 @@ function registerConnectorRoutes(authenticated, deps) {
 			}
 		});
 	});
+	authenticated.post("/api/connectors/preview", strictRateLimitMiddleware, async (c) => {
+		const body = await c.req.json().catch(() => ({}));
+		const definition = body && typeof body === "object" && !Array.isArray(body) && body.definition && typeof body.definition === "object" && !Array.isArray(body.definition) ? body.definition : void 0;
+		if (!definition) return c.json({
+			ok: false,
+			error: "Missing connector definition."
+		}, 400);
+		const input = body && typeof body === "object" && !Array.isArray(body) ? body : {};
+		try {
+			const preview = await previewConnectorDefinition(service.currentConfig, definition, input);
+			return c.json({
+				ok: true,
+				payload: { preview }
+			});
+		} catch (error) {
+			return c.json({
+				ok: false,
+				error: errorMessage(error)
+			}, 400);
+		}
+	});
 	authenticated.post("/api/connectors/approvals/respond", async (c) => {
 		const body = await c.req.json().catch(() => ({}));
 		return c.json({
@@ -334,6 +355,29 @@ function registerConnectorRoutes(authenticated, deps) {
 			}, 500);
 		}
 	});
+	authenticated.post("/api/connectors/:id/config", strictRateLimitMiddleware, async (c) => {
+		const instanceId = c.req.param("id");
+		const body = await c.req.json().catch(() => ({}));
+		const input = body && typeof body === "object" && !Array.isArray(body) ? body : {};
+		const config = service.currentConfig;
+		try {
+			const instance = updateConnectorConfig(config, instanceId, input);
+			const saved = await service.saveConfig(config);
+			if (!saved.saved) return c.json({
+				ok: false,
+				error: saved.error
+			}, 500);
+			return c.json({
+				ok: true,
+				payload: { instance }
+			});
+		} catch (error) {
+			return c.json({
+				ok: false,
+				error: errorMessage(error)
+			}, 400);
+		}
+	});
 	authenticated.post("/api/connectors/:id/enable", strictRateLimitMiddleware, async (c) => {
 		const instanceId = c.req.param("id");
 		const config = service.currentConfig;

package/dist/src/gateway/hono/routes/connectors.js.map

@@ -1 +1 @@
-{"version":3,"file":"connectors.js","names":[],"sources":["../../../../../src/gateway/hono/routes/connectors.ts"],"sourcesContent":["import type { Hono } from 'hono';\n\nimport type { Config } from '../../../config/schema.js';\nimport { getConnectorDefinition, listConnectorCatalog, listConnectorProviders } from '../../../connectors/catalog.js';\nimport { executeComposioTool, getComposioToolkitScope, listComposioConnections, listComposioTools, setComposioToolkitScope, startComposioAuthorize, type ComposioScope } from '../../../connectors/composio.js';\nimport { appendComposioTriggerEvent, listComposioTriggerEvents } from '../../../connectors/composio-triggers.js';\nimport { testConnectorInstance } from '../../../connectors/health.js';\nimport { installConnector, installConnectorDefinition, uninstallConnector } from '../../../connectors/install.js';\nimport { getConnectorInstance, listConnectorInstances } from '../../../connectors/instances.js';\nimport { setConnectorEnabled } from '../../../connectors/lifecycle.js';\nimport { startConnectorOAuth, completeConnectorOAuth } from '../../../connectors/oauth.js';\nimport { isConnectorRegistrySource, listConnectorRegistries, searchConnectorRegistries } from '../../../connectors/registries/search.js';\nimport { createConnectorSetupSecretRequest, submitConnectorSetupSecret } from '../../../connectors/setup-secrets.js';\nimport { recordConnectorHealthUsage } from '../../../connectors/usage.js';\nimport type { ConnectorDefinition, ConnectorInstallInput } from '../../../connectors/types.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\n\nfunction errorMessage(error: unknown): string {\n  return error instanceof Error ? error.message : String(error);\n}\n\nexport function registerConnectorRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  const { service, strictRateLimitMiddleware } = deps;\n\n  authenticated.get('/api/connectors/catalog', (c) => {\n    return c.json({\n      ok: true,\n      payload: {\n        connectors: listConnectorCatalog(),\n        providers: listConnectorProviders().map((provider) => ({\n          id: provider.id,\n          displayName: provider.displayName,\n        })),\n        registries: listConnectorRegistries(),\n      },\n    });\n  });\n\n  authenticated.get('/api/connectors/installed', (c) => {\n    const config = service.currentConfig as Config;\n    return c.json({ ok: true, payload: { instances: listConnectorInstances(config) } });\n  });\n\n  authenticated.get('/api/connectors/registry/search', async (c) => {\n    const query = c.req.query('q') ?? c.req.query('query') ?? '';\n    const sourceParam = c.req.query('source') ?? 'all';\n    const source = sourceParam !== 'all' && isConnectorRegistrySource(sourceParam) ? sourceParam : 'all';\n    const page = Number(c.req.query('page') ?? '1');\n    const pageSize = Number(c.req.query('pageSize') ?? '24');\n    const browse = c.req.query('browse') === '1' || c.req.query('browse') === 'true';\n    const results = await searchConnectorRegistries({ query, source, page, pageSize, browse });\n    return c.json({ ok: true, payload: { results, connectors: results.flatMap((result) => result.connectors) } });\n  });\n\n  authenticated.post('/api/connectors/setup/request-secret', strictRateLimitMiddleware, async (c) => {\n    const body = await c.req.json().catch(() => ({}));\n    const key = body && typeof body === 'object' && !Array.isArray(body) && typeof body.key === 'string'\n      ? body.key.trim()\n      : '';\n    if (!key) {\n      return c.json({ ok: false, error: 'Missing secret key.' }, 400);\n    }\n    const label = body && typeof body === 'object' && !Array.isArray(body) && typeof body.label === 'string'\n      ? body.label\n      : undefined;\n    return c.json({ ok: true, payload: { request: createConnectorSetupSecretRequest({ key, label }) } });\n  });\n\n  authenticated.post('/api/connectors/setup/submit-secret', strictRateLimitMiddleware, async (c) => {\n    const body = await c.req.json().catch(() => ({}));\n    const ref = body && typeof body === 'object' && !Array.isArray(body) && typeof body.ref === 'string'\n      ? body.ref\n      : '';\n    const value = body && typeof body === 'object' && !Array.isArray(body) && typeof body.value === 'string'\n      ? body.value\n      : '';\n    const accepted = submitConnectorSetupSecret(ref, value);\n    return c.json({ ok: accepted, payload: { accepted }, error: accepted ? undefined : 'Unknown, expired, or empty secret.' }, accepted ? 200 : 400);\n  });\n\n  authenticated.get('/api/connectors/composio/connections', async (c) => {\n    try {\n      return c.json({ ok: true, payload: { connections: await listComposioConnections() } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.post('/api/connectors/composio/:toolkit/authorize', strictRateLimitMiddleware, async (c) => {\n    try {\n      const toolkit = c.req.param('toolkit');\n      return c.json({ ok: true, payload: { oauth: await startComposioAuthorize(toolkit) } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.get('/api/connectors/composio/:toolkit/tools', async (c) => {\n    try {\n      const toolkit = c.req.param('toolkit');\n      return c.json({ ok: true, payload: { tools: await listComposioTools(toolkit, service.currentConfig as Config) } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.get('/api/connectors/composio/:toolkit/scope', async (c) => {\n    const toolkit = c.req.param('toolkit');\n    return c.json({ ok: true, payload: { toolkit, scope: getComposioToolkitScope(service.currentConfig as Config, toolkit) } });\n  });\n\n  authenticated.post('/api/connectors/composio/:toolkit/scope', strictRateLimitMiddleware, async (c) => {\n    const toolkit = c.req.param('toolkit');\n    const body = await c.req.json().catch(() => ({}));\n    const scope = body && typeof body === 'object' && !Array.isArray(body) && typeof body.scope === 'string'\n      ? body.scope\n      : '';\n    if (scope !== 'read' && scope !== 'write' && scope !== 'admin') {\n      return c.json({ ok: false, error: 'Scope must be read, write, or admin.' }, 400);\n    }\n    const config = service.currentConfig as Config;\n    try {\n      setComposioToolkitScope(config, toolkit, scope as ComposioScope);\n      const saved = await service.saveConfig(config);\n      if (!saved.saved) return c.json({ ok: false, error: saved.error }, 500);\n      return c.json({ ok: true, payload: { toolkit, scope } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.post('/api/connectors/composio/tools/:slug/execute', strictRateLimitMiddleware, async (c) => {\n    const body = await c.req.json().catch(() => ({}));\n    try {\n      const slug = c.req.param('slug');\n      const args = body && typeof body === 'object' && !Array.isArray(body) ? body.arguments : undefined;\n      return c.json({ ok: true, payload: { result: await executeComposioTool({ slug, arguments: args, config: service.currentConfig as Config }) } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.post('/api/connectors/composio/triggers', strictRateLimitMiddleware, async (c) => {\n    const body = await c.req.json().catch(() => ({}));\n    try {\n      const event = await appendComposioTriggerEvent(service.currentConfig as Config, body);\n      return c.json({ ok: true, payload: { event } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.get('/api/connectors/composio/triggers', async (c) => {\n    const limit = Number(c.req.query('limit') ?? '50');\n    try {\n      const events = await listComposioTriggerEvents(service.currentConfig as Config, limit);\n      return c.json({ ok: true, payload: { events } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.get('/api/connectors/:id', (c) => {\n    const connectorId = c.req.param('id');\n    const connector = getConnectorDefinition(connectorId);\n    if (!connector) {\n      return c.json({ ok: false, error: `Unknown connector: ${connectorId}` }, 404);\n    }\n    const config = service.currentConfig as Config;\n    const instances = listConnectorInstances(config).filter((instance) => instance.connectorId === connectorId);\n    return c.json({ ok: true, payload: { connector, instances } });\n  });\n\n  authenticated.post('/api/connectors/approvals/respond', async (c) => {\n    const body = await c.req.json().catch(() => ({}));\n    return c.json({ ok: true, payload: { acknowledged: true, body } });\n  });\n\n  authenticated.post('/api/connectors/:id/oauth/start', strictRateLimitMiddleware, async (c) => {\n    const connectorId = c.req.param('id');\n    const connector = getConnectorDefinition(connectorId);\n    if (!connector) {\n      return c.json({ ok: false, error: `Unknown connector: ${connectorId}` }, 404);\n    }\n    try {\n      const oauth = await startConnectorOAuth(connector);\n      return c.json({ ok: true, payload: { oauth } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.post('/api/connectors/:id/oauth/complete', strictRateLimitMiddleware, async (c) => {\n    const connectorId = c.req.param('id');\n    const connector = getConnectorDefinition(connectorId);\n    if (!connector) {\n      return c.json({ ok: false, error: `Unknown connector: ${connectorId}` }, 404);\n    }\n    const body = await c.req.json().catch(() => ({}));\n    const deviceCode = body && typeof body === 'object' && !Array.isArray(body) && typeof body.deviceCode === 'string'\n      ? body.deviceCode\n      : '';\n    try {\n      const oauth = await completeConnectorOAuth(connector, { deviceCode });\n      return c.json({ ok: true, payload: { oauth } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.post('/api/connectors/:id/install', strictRateLimitMiddleware, async (c) => {\n    const connectorId = c.req.param('id');\n    const body = await c.req.json().catch(() => ({}));\n    const input: ConnectorInstallInput = body && typeof body === 'object' && !Array.isArray(body) ? body : {};\n    const registryDefinition = body && typeof body === 'object' && !Array.isArray(body) && body.definition && typeof body.definition === 'object' && !Array.isArray(body.definition)\n      ? body.definition as ConnectorDefinition\n      : undefined;\n    const config = service.currentConfig as Config;\n    try {\n      const instance = registryDefinition?.id === connectorId\n        ? await installConnectorDefinition(config, registryDefinition, input)\n        : await installConnector(config, connectorId, input);\n      const saved = await service.saveConfig(config);\n      if (!saved.saved) {\n        return c.json({ ok: false, error: saved.error }, 500);\n      }\n      return c.json({ ok: true, payload: { instance } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.post('/api/connectors/:id/test', async (c) => {\n    const instanceId = c.req.param('id');\n    const config = service.currentConfig as Config;\n    const instance = getConnectorInstance(config, instanceId);\n    if (!instance) {\n      return c.json({ ok: false, error: `Connector instance not found: ${instanceId}` }, 404);\n    }\n    if (instance.materialized.type !== 'mcp') {\n      return c.json({ ok: false, error: `Connector type \"${instance.materialized.type}\" does not support MCP health checks.` }, 400);\n    }\n    try {\n      const result = await testConnectorInstance(config, instance.materialized.serverId);\n      recordConnectorHealthUsage(config, instance.instanceId, result);\n      const saved = await service.saveConfig(config);\n      if (!saved.saved) {\n        return c.json({ ok: false, error: saved.error }, 500);\n      }\n      return c.json({ ok: true, payload: result });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 500);\n    }\n  });\n\n  authenticated.post('/api/connectors/:id/enable', strictRateLimitMiddleware, async (c) => {\n    const instanceId = c.req.param('id');\n    const config = service.currentConfig as Config;\n    try {\n      const instance = setConnectorEnabled(config, instanceId, true);\n      const saved = await service.saveConfig(config);\n      if (!saved.saved) {\n        return c.json({ ok: false, error: saved.error }, 500);\n      }\n      return c.json({ ok: true, payload: { instance } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.post('/api/connectors/:id/disable', strictRateLimitMiddleware, async (c) => {\n    const instanceId = c.req.param('id');\n    const config = service.currentConfig as Config;\n    try {\n      const instance = setConnectorEnabled(config, instanceId, false);\n      const saved = await service.saveConfig(config);\n      if (!saved.saved) {\n        return c.json({ ok: false, error: saved.error }, 500);\n      }\n      return c.json({ ok: true, payload: { instance } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.delete('/api/connectors/:id', strictRateLimitMiddleware, async (c) => {\n    const instanceId = c.req.param('id');\n    const config = service.currentConfig as Config;\n    try {\n      const instance = uninstallConnector(config, instanceId);\n      const saved = await service.saveConfig(config);\n      if (!saved.saved) {\n        return c.json({ ok: false, error: saved.error }, 500);\n      }\n      return c.json({ ok: true, payload: { instance } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n}\n"],"mappings":";;;;;;;;;;;;;AAiBA,SAAS,aAAa,OAAwB;AAC5C,QAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;;AAG/D,SAAgB,wBAAwB,eAAqB,MAAoC;CAC/F,MAAM,EAAE,SAAS,8BAA8B;AAE/C,eAAc,IAAI,4BAA4B,MAAM;AAClD,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,YAAY,sBAAsB;IAClC,WAAW,wBAAwB,CAAC,KAAK,cAAc;KACrD,IAAI,SAAS;KACb,aAAa,SAAS;KACvB,EAAE;IACH,YAAY,yBAAyB;IACtC;GACF,CAAC;GACF;AAEF,eAAc,IAAI,8BAA8B,MAAM;EACpD,MAAM,SAAS,QAAQ;AACvB,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,WAAW,uBAAuB,OAAO,EAAE;GAAE,CAAC;GACnF;AAEF,eAAc,IAAI,mCAAmC,OAAO,MAAM;EAChE,MAAM,QAAQ,EAAE,IAAI,MAAM,IAAI,IAAI,EAAE,IAAI,MAAM,QAAQ,IAAI;EAC1D,MAAM,cAAc,EAAE,IAAI,MAAM,SAAS,IAAI;EAK7C,MAAM,UAAU,MAAM,0BAA0B;GAAE;GAAO,QAJ1C,gBAAgB,SAAS,0BAA0B,YAAY,GAAG,cAAc;GAI9B,MAHpD,OAAO,EAAE,IAAI,MAAM,OAAO,IAAI,IAG0B;GAAE,UAFtD,OAAO,EAAE,IAAI,MAAM,WAAW,IAAI,KAE4B;GAAE,QADlE,EAAE,IAAI,MAAM,SAAS,KAAK,OAAO,EAAE,IAAI,MAAM,SAAS,KAAK;GACe,CAAC;AAC1F,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;IAAE;IAAS,YAAY,QAAQ,SAAS,WAAW,OAAO,WAAW;IAAE;GAAE,CAAC;GAC7G;AAEF,eAAc,KAAK,wCAAwC,2BAA2B,OAAO,MAAM;EACjG,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,MAAM,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAI,OAAO,KAAK,QAAQ,WACxF,KAAK,IAAI,MAAM,GACf;AACJ,MAAI,CAAC,IACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAuB,EAAE,IAAI;EAEjE,MAAM,QAAQ,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAI,OAAO,KAAK,UAAU,WAC5F,KAAK,QACL,KAAA;AACJ,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,SAAS,kCAAkC;IAAE;IAAK;IAAO,CAAC,EAAE;GAAE,CAAC;GACpG;AAEF,eAAc,KAAK,uCAAuC,2BAA2B,OAAO,MAAM;EAChG,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EAOjD,MAAM,WAAW,2BANL,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAI,OAAO,KAAK,QAAQ,WACxF,KAAK,MACL,IACU,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAI,OAAO,KAAK,UAAU,WAC5F,KAAK,QACL,GACmD;AACvD,SAAO,EAAE,KAAK;GAAE,IAAI;GAAU,SAAS,EAAE,UAAU;GAAE,OAAO,WAAW,KAAA,IAAY;GAAsC,EAAE,WAAW,MAAM,IAAI;GAChJ;AAEF,eAAc,IAAI,wCAAwC,OAAO,MAAM;AACrE,MAAI;AACF,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,aAAa,MAAM,yBAAyB,EAAE;IAAE,CAAC;WAC/E,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,KAAK,+CAA+C,2BAA2B,OAAO,MAAM;AACxG,MAAI;GACF,MAAM,UAAU,EAAE,IAAI,MAAM,UAAU;AACtC,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,OAAO,MAAM,uBAAuB,QAAQ,EAAE;IAAE,CAAC;WAC/E,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,IAAI,2CAA2C,OAAO,MAAM;AACxE,MAAI;GACF,MAAM,UAAU,EAAE,IAAI,MAAM,UAAU;AACtC,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,OAAO,MAAM,kBAAkB,SAAS,QAAQ,cAAwB,EAAE;IAAE,CAAC;WAC3G,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,IAAI,2CAA2C,OAAO,MAAM;EACxE,MAAM,UAAU,EAAE,IAAI,MAAM,UAAU;AACtC,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;IAAE;IAAS,OAAO,wBAAwB,QAAQ,eAAyB,QAAQ;IAAE;GAAE,CAAC;GAC3H;AAEF,eAAc,KAAK,2CAA2C,2BAA2B,OAAO,MAAM;EACpG,MAAM,UAAU,EAAE,IAAI,MAAM,UAAU;EACtC,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,QAAQ,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAI,OAAO,KAAK,UAAU,WAC5F,KAAK,QACL;AACJ,MAAI,UAAU,UAAU,UAAU,WAAW,UAAU,QACrD,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAwC,EAAE,IAAI;EAElF,MAAM,SAAS,QAAQ;AACvB,MAAI;AACF,2BAAwB,QAAQ,SAAS,MAAuB;GAChE,MAAM,QAAQ,MAAM,QAAQ,WAAW,OAAO;AAC9C,OAAI,CAAC,MAAM,MAAO,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,MAAM;IAAO,EAAE,IAAI;AACvE,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS;KAAE;KAAS;KAAO;IAAE,CAAC;WACjD,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,KAAK,gDAAgD,2BAA2B,OAAO,MAAM;EACzG,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;AACjD,MAAI;GACF,MAAM,OAAO,EAAE,IAAI,MAAM,OAAO;GAChC,MAAM,OAAO,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,GAAG,KAAK,YAAY,KAAA;AACzF,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,QAAQ,MAAM,oBAAoB;KAAE;KAAM,WAAW;KAAM,QAAQ,QAAQ;KAAyB,CAAC,EAAE;IAAE,CAAC;WACxI,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,KAAK,qCAAqC,2BAA2B,OAAO,MAAM;EAC9F,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;AACjD,MAAI;GACF,MAAM,QAAQ,MAAM,2BAA2B,QAAQ,eAAyB,KAAK;AACrF,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,OAAO;IAAE,CAAC;WACxC,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,IAAI,qCAAqC,OAAO,MAAM;EAClE,MAAM,QAAQ,OAAO,EAAE,IAAI,MAAM,QAAQ,IAAI,KAAK;AAClD,MAAI;GACF,MAAM,SAAS,MAAM,0BAA0B,QAAQ,eAAyB,MAAM;AACtF,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,QAAQ;IAAE,CAAC;WACzC,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,IAAI,wBAAwB,MAAM;EAC9C,MAAM,cAAc,EAAE,IAAI,MAAM,KAAK;EACrC,MAAM,YAAY,uBAAuB,YAAY;AACrD,MAAI,CAAC,UACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,sBAAsB;GAAe,EAAE,IAAI;EAE/E,MAAM,SAAS,QAAQ;EACvB,MAAM,YAAY,uBAAuB,OAAO,CAAC,QAAQ,aAAa,SAAS,gBAAgB,YAAY;AAC3G,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;IAAE;IAAW;IAAW;GAAE,CAAC;GAC9D;AAEF,eAAc,KAAK,qCAAqC,OAAO,MAAM;EACnE,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;AACjD,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;IAAE,cAAc;IAAM;IAAM;GAAE,CAAC;GAClE;AAEF,eAAc,KAAK,mCAAmC,2BAA2B,OAAO,MAAM;EAC5F,MAAM,cAAc,EAAE,IAAI,MAAM,KAAK;EACrC,MAAM,YAAY,uBAAuB,YAAY;AACrD,MAAI,CAAC,UACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,sBAAsB;GAAe,EAAE,IAAI;AAE/E,MAAI;GACF,MAAM,QAAQ,MAAM,oBAAoB,UAAU;AAClD,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,OAAO;IAAE,CAAC;WACxC,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,KAAK,sCAAsC,2BAA2B,OAAO,MAAM;EAC/F,MAAM,cAAc,EAAE,IAAI,MAAM,KAAK;EACrC,MAAM,YAAY,uBAAuB,YAAY;AACrD,MAAI,CAAC,UACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,sBAAsB;GAAe,EAAE,IAAI;EAE/E,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,aAAa,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAI,OAAO,KAAK,eAAe,WACtG,KAAK,aACL;AACJ,MAAI;GACF,MAAM,QAAQ,MAAM,uBAAuB,WAAW,EAAE,YAAY,CAAC;AACrE,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,OAAO;IAAE,CAAC;WACxC,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,KAAK,+BAA+B,2BAA2B,OAAO,MAAM;EACxF,MAAM,cAAc,EAAE,IAAI,MAAM,KAAK;EACrC,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,QAA+B,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,GAAG,OAAO,EAAE;EACzG,MAAM,qBAAqB,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAI,KAAK,cAAc,OAAO,KAAK,eAAe,YAAY,CAAC,MAAM,QAAQ,KAAK,WAAW,GAC5K,KAAK,aACL,KAAA;EACJ,MAAM,SAAS,QAAQ;AACvB,MAAI;GACF,MAAM,WAAW,oBAAoB,OAAO,cACxC,MAAM,2BAA2B,QAAQ,oBAAoB,MAAM,GACnE,MAAM,iBAAiB,QAAQ,aAAa,MAAM;GACtD,MAAM,QAAQ,MAAM,QAAQ,WAAW,OAAO;AAC9C,OAAI,CAAC,MAAM,MACT,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,MAAM;IAAO,EAAE,IAAI;AAEvD,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,UAAU;IAAE,CAAC;WAC3C,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,KAAK,4BAA4B,OAAO,MAAM;EAC1D,MAAM,aAAa,EAAE,IAAI,MAAM,KAAK;EACpC,MAAM,SAAS,QAAQ;EACvB,MAAM,WAAW,qBAAqB,QAAQ,WAAW;AACzD,MAAI,CAAC,SACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,iCAAiC;GAAc,EAAE,IAAI;AAEzF,MAAI,SAAS,aAAa,SAAS,MACjC,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,mBAAmB,SAAS,aAAa,KAAK;GAAwC,EAAE,IAAI;AAEhI,MAAI;GACF,MAAM,SAAS,MAAM,sBAAsB,QAAQ,SAAS,aAAa,SAAS;AAClF,8BAA2B,QAAQ,SAAS,YAAY,OAAO;GAC/D,MAAM,QAAQ,MAAM,QAAQ,WAAW,OAAO;AAC9C,OAAI,CAAC,MAAM,MACT,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,MAAM;IAAO,EAAE,IAAI;AAEvD,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS;IAAQ,CAAC;WACrC,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,KAAK,8BAA8B,2BAA2B,OAAO,MAAM;EACvF,MAAM,aAAa,EAAE,IAAI,MAAM,KAAK;EACpC,MAAM,SAAS,QAAQ;AACvB,MAAI;GACF,MAAM,WAAW,oBAAoB,QAAQ,YAAY,KAAK;GAC9D,MAAM,QAAQ,MAAM,QAAQ,WAAW,OAAO;AAC9C,OAAI,CAAC,MAAM,MACT,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,MAAM;IAAO,EAAE,IAAI;AAEvD,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,UAAU;IAAE,CAAC;WAC3C,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,KAAK,+BAA+B,2BAA2B,OAAO,MAAM;EACxF,MAAM,aAAa,EAAE,IAAI,MAAM,KAAK;EACpC,MAAM,SAAS,QAAQ;AACvB,MAAI;GACF,MAAM,WAAW,oBAAoB,QAAQ,YAAY,MAAM;GAC/D,MAAM,QAAQ,MAAM,QAAQ,WAAW,OAAO;AAC9C,OAAI,CAAC,MAAM,MACT,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,MAAM;IAAO,EAAE,IAAI;AAEvD,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,UAAU;IAAE,CAAC;WAC3C,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,OAAO,uBAAuB,2BAA2B,OAAO,MAAM;EAClF,MAAM,aAAa,EAAE,IAAI,MAAM,KAAK;EACpC,MAAM,SAAS,QAAQ;AACvB,MAAI;GACF,MAAM,WAAW,mBAAmB,QAAQ,WAAW;GACvD,MAAM,QAAQ,MAAM,QAAQ,WAAW,OAAO;AAC9C,OAAI,CAAC,MAAM,MACT,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,MAAM;IAAO,EAAE,IAAI;AAEvD,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,UAAU;IAAE,CAAC;WAC3C,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D"}
+{"version":3,"file":"connectors.js","names":[],"sources":["../../../../../src/gateway/hono/routes/connectors.ts"],"sourcesContent":["import type { Hono } from 'hono';\n\nimport type { Config } from '../../../config/schema.js';\nimport { getConnectorDefinition, listConnectorCatalog, listConnectorProviders } from '../../../connectors/catalog.js';\nimport { executeComposioTool, getComposioToolkitScope, listComposioConnections, listComposioTools, setComposioToolkitScope, startComposioAuthorize, type ComposioScope } from '../../../connectors/composio.js';\nimport { appendComposioTriggerEvent, listComposioTriggerEvents } from '../../../connectors/composio-triggers.js';\nimport { previewConnectorDefinition, testConnectorInstance } from '../../../connectors/health.js';\nimport { installConnector, installConnectorDefinition, uninstallConnector, updateConnectorConfig } from '../../../connectors/install.js';\nimport { getConnectorInstance, listConnectorInstances } from '../../../connectors/instances.js';\nimport { setConnectorEnabled } from '../../../connectors/lifecycle.js';\nimport { startConnectorOAuth, completeConnectorOAuth } from '../../../connectors/oauth.js';\nimport { isConnectorRegistrySource, listConnectorRegistries, searchConnectorRegistries } from '../../../connectors/registries/search.js';\nimport { createConnectorSetupSecretRequest, submitConnectorSetupSecret } from '../../../connectors/setup-secrets.js';\nimport { recordConnectorHealthUsage } from '../../../connectors/usage.js';\nimport type { ConnectorDefinition, ConnectorInstallInput } from '../../../connectors/types.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\n\nfunction errorMessage(error: unknown): string {\n  return error instanceof Error ? error.message : String(error);\n}\n\nexport function registerConnectorRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  const { service, strictRateLimitMiddleware } = deps;\n\n  authenticated.get('/api/connectors/catalog', (c) => {\n    return c.json({\n      ok: true,\n      payload: {\n        connectors: listConnectorCatalog(),\n        providers: listConnectorProviders().map((provider) => ({\n          id: provider.id,\n          displayName: provider.displayName,\n        })),\n        registries: listConnectorRegistries(),\n      },\n    });\n  });\n\n  authenticated.get('/api/connectors/installed', (c) => {\n    const config = service.currentConfig as Config;\n    return c.json({ ok: true, payload: { instances: listConnectorInstances(config) } });\n  });\n\n  authenticated.get('/api/connectors/registry/search', async (c) => {\n    const query = c.req.query('q') ?? c.req.query('query') ?? '';\n    const sourceParam = c.req.query('source') ?? 'all';\n    const source = sourceParam !== 'all' && isConnectorRegistrySource(sourceParam) ? sourceParam : 'all';\n    const page = Number(c.req.query('page') ?? '1');\n    const pageSize = Number(c.req.query('pageSize') ?? '24');\n    const browse = c.req.query('browse') === '1' || c.req.query('browse') === 'true';\n    const results = await searchConnectorRegistries({ query, source, page, pageSize, browse });\n    return c.json({ ok: true, payload: { results, connectors: results.flatMap((result) => result.connectors) } });\n  });\n\n  authenticated.post('/api/connectors/setup/request-secret', strictRateLimitMiddleware, async (c) => {\n    const body = await c.req.json().catch(() => ({}));\n    const key = body && typeof body === 'object' && !Array.isArray(body) && typeof body.key === 'string'\n      ? body.key.trim()\n      : '';\n    if (!key) {\n      return c.json({ ok: false, error: 'Missing secret key.' }, 400);\n    }\n    const label = body && typeof body === 'object' && !Array.isArray(body) && typeof body.label === 'string'\n      ? body.label\n      : undefined;\n    return c.json({ ok: true, payload: { request: createConnectorSetupSecretRequest({ key, label }) } });\n  });\n\n  authenticated.post('/api/connectors/setup/submit-secret', strictRateLimitMiddleware, async (c) => {\n    const body = await c.req.json().catch(() => ({}));\n    const ref = body && typeof body === 'object' && !Array.isArray(body) && typeof body.ref === 'string'\n      ? body.ref\n      : '';\n    const value = body && typeof body === 'object' && !Array.isArray(body) && typeof body.value === 'string'\n      ? body.value\n      : '';\n    const accepted = submitConnectorSetupSecret(ref, value);\n    return c.json({ ok: accepted, payload: { accepted }, error: accepted ? undefined : 'Unknown, expired, or empty secret.' }, accepted ? 200 : 400);\n  });\n\n  authenticated.get('/api/connectors/composio/connections', async (c) => {\n    try {\n      return c.json({ ok: true, payload: { connections: await listComposioConnections() } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.post('/api/connectors/composio/:toolkit/authorize', strictRateLimitMiddleware, async (c) => {\n    try {\n      const toolkit = c.req.param('toolkit');\n      return c.json({ ok: true, payload: { oauth: await startComposioAuthorize(toolkit) } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.get('/api/connectors/composio/:toolkit/tools', async (c) => {\n    try {\n      const toolkit = c.req.param('toolkit');\n      return c.json({ ok: true, payload: { tools: await listComposioTools(toolkit, service.currentConfig as Config) } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.get('/api/connectors/composio/:toolkit/scope', async (c) => {\n    const toolkit = c.req.param('toolkit');\n    return c.json({ ok: true, payload: { toolkit, scope: getComposioToolkitScope(service.currentConfig as Config, toolkit) } });\n  });\n\n  authenticated.post('/api/connectors/composio/:toolkit/scope', strictRateLimitMiddleware, async (c) => {\n    const toolkit = c.req.param('toolkit');\n    const body = await c.req.json().catch(() => ({}));\n    const scope = body && typeof body === 'object' && !Array.isArray(body) && typeof body.scope === 'string'\n      ? body.scope\n      : '';\n    if (scope !== 'read' && scope !== 'write' && scope !== 'admin') {\n      return c.json({ ok: false, error: 'Scope must be read, write, or admin.' }, 400);\n    }\n    const config = service.currentConfig as Config;\n    try {\n      setComposioToolkitScope(config, toolkit, scope as ComposioScope);\n      const saved = await service.saveConfig(config);\n      if (!saved.saved) return c.json({ ok: false, error: saved.error }, 500);\n      return c.json({ ok: true, payload: { toolkit, scope } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.post('/api/connectors/composio/tools/:slug/execute', strictRateLimitMiddleware, async (c) => {\n    const body = await c.req.json().catch(() => ({}));\n    try {\n      const slug = c.req.param('slug');\n      const args = body && typeof body === 'object' && !Array.isArray(body) ? body.arguments : undefined;\n      return c.json({ ok: true, payload: { result: await executeComposioTool({ slug, arguments: args, config: service.currentConfig as Config }) } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.post('/api/connectors/composio/triggers', strictRateLimitMiddleware, async (c) => {\n    const body = await c.req.json().catch(() => ({}));\n    try {\n      const event = await appendComposioTriggerEvent(service.currentConfig as Config, body);\n      return c.json({ ok: true, payload: { event } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.get('/api/connectors/composio/triggers', async (c) => {\n    const limit = Number(c.req.query('limit') ?? '50');\n    try {\n      const events = await listComposioTriggerEvents(service.currentConfig as Config, limit);\n      return c.json({ ok: true, payload: { events } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.get('/api/connectors/:id', (c) => {\n    const connectorId = c.req.param('id');\n    const connector = getConnectorDefinition(connectorId);\n    if (!connector) {\n      return c.json({ ok: false, error: `Unknown connector: ${connectorId}` }, 404);\n    }\n    const config = service.currentConfig as Config;\n    const instances = listConnectorInstances(config).filter((instance) => instance.connectorId === connectorId);\n    return c.json({ ok: true, payload: { connector, instances } });\n  });\n\n  authenticated.post('/api/connectors/preview', strictRateLimitMiddleware, async (c) => {\n    const body = await c.req.json().catch(() => ({}));\n    const definition = body && typeof body === 'object' && !Array.isArray(body) && body.definition && typeof body.definition === 'object' && !Array.isArray(body.definition)\n      ? body.definition as ConnectorDefinition\n      : undefined;\n    if (!definition) {\n      return c.json({ ok: false, error: 'Missing connector definition.' }, 400);\n    }\n    const input: ConnectorInstallInput = body && typeof body === 'object' && !Array.isArray(body) ? body : {};\n    try {\n      const preview = await previewConnectorDefinition(service.currentConfig as Config, definition, input);\n      return c.json({ ok: true, payload: { preview } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.post('/api/connectors/approvals/respond', async (c) => {\n    const body = await c.req.json().catch(() => ({}));\n    return c.json({ ok: true, payload: { acknowledged: true, body } });\n  });\n\n  authenticated.post('/api/connectors/:id/oauth/start', strictRateLimitMiddleware, async (c) => {\n    const connectorId = c.req.param('id');\n    const connector = getConnectorDefinition(connectorId);\n    if (!connector) {\n      return c.json({ ok: false, error: `Unknown connector: ${connectorId}` }, 404);\n    }\n    try {\n      const oauth = await startConnectorOAuth(connector);\n      return c.json({ ok: true, payload: { oauth } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.post('/api/connectors/:id/oauth/complete', strictRateLimitMiddleware, async (c) => {\n    const connectorId = c.req.param('id');\n    const connector = getConnectorDefinition(connectorId);\n    if (!connector) {\n      return c.json({ ok: false, error: `Unknown connector: ${connectorId}` }, 404);\n    }\n    const body = await c.req.json().catch(() => ({}));\n    const deviceCode = body && typeof body === 'object' && !Array.isArray(body) && typeof body.deviceCode === 'string'\n      ? body.deviceCode\n      : '';\n    try {\n      const oauth = await completeConnectorOAuth(connector, { deviceCode });\n      return c.json({ ok: true, payload: { oauth } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.post('/api/connectors/:id/install', strictRateLimitMiddleware, async (c) => {\n    const connectorId = c.req.param('id');\n    const body = await c.req.json().catch(() => ({}));\n    const input: ConnectorInstallInput = body && typeof body === 'object' && !Array.isArray(body) ? body : {};\n    const registryDefinition = body && typeof body === 'object' && !Array.isArray(body) && body.definition && typeof body.definition === 'object' && !Array.isArray(body.definition)\n      ? body.definition as ConnectorDefinition\n      : undefined;\n    const config = service.currentConfig as Config;\n    try {\n      const instance = registryDefinition?.id === connectorId\n        ? await installConnectorDefinition(config, registryDefinition, input)\n        : await installConnector(config, connectorId, input);\n      const saved = await service.saveConfig(config);\n      if (!saved.saved) {\n        return c.json({ ok: false, error: saved.error }, 500);\n      }\n      return c.json({ ok: true, payload: { instance } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.post('/api/connectors/:id/test', async (c) => {\n    const instanceId = c.req.param('id');\n    const config = service.currentConfig as Config;\n    const instance = getConnectorInstance(config, instanceId);\n    if (!instance) {\n      return c.json({ ok: false, error: `Connector instance not found: ${instanceId}` }, 404);\n    }\n    if (instance.materialized.type !== 'mcp') {\n      return c.json({ ok: false, error: `Connector type \"${instance.materialized.type}\" does not support MCP health checks.` }, 400);\n    }\n    try {\n      const result = await testConnectorInstance(config, instance.materialized.serverId);\n      recordConnectorHealthUsage(config, instance.instanceId, result);\n      const saved = await service.saveConfig(config);\n      if (!saved.saved) {\n        return c.json({ ok: false, error: saved.error }, 500);\n      }\n      return c.json({ ok: true, payload: result });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 500);\n    }\n  });\n\n  authenticated.post('/api/connectors/:id/config', strictRateLimitMiddleware, async (c) => {\n    const instanceId = c.req.param('id');\n    const body = await c.req.json().catch(() => ({}));\n    const input: ConnectorInstallInput = body && typeof body === 'object' && !Array.isArray(body) ? body : {};\n    const config = service.currentConfig as Config;\n    try {\n      const instance = updateConnectorConfig(config, instanceId, input);\n      const saved = await service.saveConfig(config);\n      if (!saved.saved) {\n        return c.json({ ok: false, error: saved.error }, 500);\n      }\n      return c.json({ ok: true, payload: { instance } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.post('/api/connectors/:id/enable', strictRateLimitMiddleware, async (c) => {\n    const instanceId = c.req.param('id');\n    const config = service.currentConfig as Config;\n    try {\n      const instance = setConnectorEnabled(config, instanceId, true);\n      const saved = await service.saveConfig(config);\n      if (!saved.saved) {\n        return c.json({ ok: false, error: saved.error }, 500);\n      }\n      return c.json({ ok: true, payload: { instance } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.post('/api/connectors/:id/disable', strictRateLimitMiddleware, async (c) => {\n    const instanceId = c.req.param('id');\n    const config = service.currentConfig as Config;\n    try {\n      const instance = setConnectorEnabled(config, instanceId, false);\n      const saved = await service.saveConfig(config);\n      if (!saved.saved) {\n        return c.json({ ok: false, error: saved.error }, 500);\n      }\n      return c.json({ ok: true, payload: { instance } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.delete('/api/connectors/:id', strictRateLimitMiddleware, async (c) => {\n    const instanceId = c.req.param('id');\n    const config = service.currentConfig as Config;\n    try {\n      const instance = uninstallConnector(config, instanceId);\n      const saved = await service.saveConfig(config);\n      if (!saved.saved) {\n        return c.json({ ok: false, error: saved.error }, 500);\n      }\n      return c.json({ ok: true, payload: { instance } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n}\n"],"mappings":";;;;;;;;;;;;;AAiBA,SAAS,aAAa,OAAwB;AAC5C,QAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;;AAG/D,SAAgB,wBAAwB,eAAqB,MAAoC;CAC/F,MAAM,EAAE,SAAS,8BAA8B;AAE/C,eAAc,IAAI,4BAA4B,MAAM;AAClD,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,YAAY,sBAAsB;IAClC,WAAW,wBAAwB,CAAC,KAAK,cAAc;KACrD,IAAI,SAAS;KACb,aAAa,SAAS;KACvB,EAAE;IACH,YAAY,yBAAyB;IACtC;GACF,CAAC;GACF;AAEF,eAAc,IAAI,8BAA8B,MAAM;EACpD,MAAM,SAAS,QAAQ;AACvB,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,WAAW,uBAAuB,OAAO,EAAE;GAAE,CAAC;GACnF;AAEF,eAAc,IAAI,mCAAmC,OAAO,MAAM;EAChE,MAAM,QAAQ,EAAE,IAAI,MAAM,IAAI,IAAI,EAAE,IAAI,MAAM,QAAQ,IAAI;EAC1D,MAAM,cAAc,EAAE,IAAI,MAAM,SAAS,IAAI;EAK7C,MAAM,UAAU,MAAM,0BAA0B;GAAE;GAAO,QAJ1C,gBAAgB,SAAS,0BAA0B,YAAY,GAAG,cAAc;GAI9B,MAHpD,OAAO,EAAE,IAAI,MAAM,OAAO,IAAI,IAG0B;GAAE,UAFtD,OAAO,EAAE,IAAI,MAAM,WAAW,IAAI,KAE4B;GAAE,QADlE,EAAE,IAAI,MAAM,SAAS,KAAK,OAAO,EAAE,IAAI,MAAM,SAAS,KAAK;GACe,CAAC;AAC1F,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;IAAE;IAAS,YAAY,QAAQ,SAAS,WAAW,OAAO,WAAW;IAAE;GAAE,CAAC;GAC7G;AAEF,eAAc,KAAK,wCAAwC,2BAA2B,OAAO,MAAM;EACjG,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,MAAM,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAI,OAAO,KAAK,QAAQ,WACxF,KAAK,IAAI,MAAM,GACf;AACJ,MAAI,CAAC,IACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAuB,EAAE,IAAI;EAEjE,MAAM,QAAQ,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAI,OAAO,KAAK,UAAU,WAC5F,KAAK,QACL,KAAA;AACJ,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,SAAS,kCAAkC;IAAE;IAAK;IAAO,CAAC,EAAE;GAAE,CAAC;GACpG;AAEF,eAAc,KAAK,uCAAuC,2BAA2B,OAAO,MAAM;EAChG,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EAOjD,MAAM,WAAW,2BANL,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAI,OAAO,KAAK,QAAQ,WACxF,KAAK,MACL,IACU,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAI,OAAO,KAAK,UAAU,WAC5F,KAAK,QACL,GACmD;AACvD,SAAO,EAAE,KAAK;GAAE,IAAI;GAAU,SAAS,EAAE,UAAU;GAAE,OAAO,WAAW,KAAA,IAAY;GAAsC,EAAE,WAAW,MAAM,IAAI;GAChJ;AAEF,eAAc,IAAI,wCAAwC,OAAO,MAAM;AACrE,MAAI;AACF,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,aAAa,MAAM,yBAAyB,EAAE;IAAE,CAAC;WAC/E,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,KAAK,+CAA+C,2BAA2B,OAAO,MAAM;AACxG,MAAI;GACF,MAAM,UAAU,EAAE,IAAI,MAAM,UAAU;AACtC,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,OAAO,MAAM,uBAAuB,QAAQ,EAAE;IAAE,CAAC;WAC/E,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,IAAI,2CAA2C,OAAO,MAAM;AACxE,MAAI;GACF,MAAM,UAAU,EAAE,IAAI,MAAM,UAAU;AACtC,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,OAAO,MAAM,kBAAkB,SAAS,QAAQ,cAAwB,EAAE;IAAE,CAAC;WAC3G,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,IAAI,2CAA2C,OAAO,MAAM;EACxE,MAAM,UAAU,EAAE,IAAI,MAAM,UAAU;AACtC,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;IAAE;IAAS,OAAO,wBAAwB,QAAQ,eAAyB,QAAQ;IAAE;GAAE,CAAC;GAC3H;AAEF,eAAc,KAAK,2CAA2C,2BAA2B,OAAO,MAAM;EACpG,MAAM,UAAU,EAAE,IAAI,MAAM,UAAU;EACtC,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,QAAQ,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAI,OAAO,KAAK,UAAU,WAC5F,KAAK,QACL;AACJ,MAAI,UAAU,UAAU,UAAU,WAAW,UAAU,QACrD,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAwC,EAAE,IAAI;EAElF,MAAM,SAAS,QAAQ;AACvB,MAAI;AACF,2BAAwB,QAAQ,SAAS,MAAuB;GAChE,MAAM,QAAQ,MAAM,QAAQ,WAAW,OAAO;AAC9C,OAAI,CAAC,MAAM,MAAO,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,MAAM;IAAO,EAAE,IAAI;AACvE,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS;KAAE;KAAS;KAAO;IAAE,CAAC;WACjD,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,KAAK,gDAAgD,2BAA2B,OAAO,MAAM;EACzG,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;AACjD,MAAI;GACF,MAAM,OAAO,EAAE,IAAI,MAAM,OAAO;GAChC,MAAM,OAAO,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,GAAG,KAAK,YAAY,KAAA;AACzF,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,QAAQ,MAAM,oBAAoB;KAAE;KAAM,WAAW;KAAM,QAAQ,QAAQ;KAAyB,CAAC,EAAE;IAAE,CAAC;WACxI,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,KAAK,qCAAqC,2BAA2B,OAAO,MAAM;EAC9F,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;AACjD,MAAI;GACF,MAAM,QAAQ,MAAM,2BAA2B,QAAQ,eAAyB,KAAK;AACrF,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,OAAO;IAAE,CAAC;WACxC,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,IAAI,qCAAqC,OAAO,MAAM;EAClE,MAAM,QAAQ,OAAO,EAAE,IAAI,MAAM,QAAQ,IAAI,KAAK;AAClD,MAAI;GACF,MAAM,SAAS,MAAM,0BAA0B,QAAQ,eAAyB,MAAM;AACtF,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,QAAQ;IAAE,CAAC;WACzC,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,IAAI,wBAAwB,MAAM;EAC9C,MAAM,cAAc,EAAE,IAAI,MAAM,KAAK;EACrC,MAAM,YAAY,uBAAuB,YAAY;AACrD,MAAI,CAAC,UACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,sBAAsB;GAAe,EAAE,IAAI;EAE/E,MAAM,SAAS,QAAQ;EACvB,MAAM,YAAY,uBAAuB,OAAO,CAAC,QAAQ,aAAa,SAAS,gBAAgB,YAAY;AAC3G,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;IAAE;IAAW;IAAW;GAAE,CAAC;GAC9D;AAEF,eAAc,KAAK,2BAA2B,2BAA2B,OAAO,MAAM;EACpF,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,aAAa,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAI,KAAK,cAAc,OAAO,KAAK,eAAe,YAAY,CAAC,MAAM,QAAQ,KAAK,WAAW,GACpK,KAAK,aACL,KAAA;AACJ,MAAI,CAAC,WACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAiC,EAAE,IAAI;EAE3E,MAAM,QAA+B,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,GAAG,OAAO,EAAE;AACzG,MAAI;GACF,MAAM,UAAU,MAAM,2BAA2B,QAAQ,eAAyB,YAAY,MAAM;AACpG,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,SAAS;IAAE,CAAC;WAC1C,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,KAAK,qCAAqC,OAAO,MAAM;EACnE,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;AACjD,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;IAAE,cAAc;IAAM;IAAM;GAAE,CAAC;GAClE;AAEF,eAAc,KAAK,mCAAmC,2BAA2B,OAAO,MAAM;EAC5F,MAAM,cAAc,EAAE,IAAI,MAAM,KAAK;EACrC,MAAM,YAAY,uBAAuB,YAAY;AACrD,MAAI,CAAC,UACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,sBAAsB;GAAe,EAAE,IAAI;AAE/E,MAAI;GACF,MAAM,QAAQ,MAAM,oBAAoB,UAAU;AAClD,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,OAAO;IAAE,CAAC;WACxC,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,KAAK,sCAAsC,2BAA2B,OAAO,MAAM;EAC/F,MAAM,cAAc,EAAE,IAAI,MAAM,KAAK;EACrC,MAAM,YAAY,uBAAuB,YAAY;AACrD,MAAI,CAAC,UACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,sBAAsB;GAAe,EAAE,IAAI;EAE/E,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,aAAa,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAI,OAAO,KAAK,eAAe,WACtG,KAAK,aACL;AACJ,MAAI;GACF,MAAM,QAAQ,MAAM,uBAAuB,WAAW,EAAE,YAAY,CAAC;AACrE,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,OAAO;IAAE,CAAC;WACxC,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,KAAK,+BAA+B,2BAA2B,OAAO,MAAM;EACxF,MAAM,cAAc,EAAE,IAAI,MAAM,KAAK;EACrC,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,QAA+B,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,GAAG,OAAO,EAAE;EACzG,MAAM,qBAAqB,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAI,KAAK,cAAc,OAAO,KAAK,eAAe,YAAY,CAAC,MAAM,QAAQ,KAAK,WAAW,GAC5K,KAAK,aACL,KAAA;EACJ,MAAM,SAAS,QAAQ;AACvB,MAAI;GACF,MAAM,WAAW,oBAAoB,OAAO,cACxC,MAAM,2BAA2B,QAAQ,oBAAoB,MAAM,GACnE,MAAM,iBAAiB,QAAQ,aAAa,MAAM;GACtD,MAAM,QAAQ,MAAM,QAAQ,WAAW,OAAO;AAC9C,OAAI,CAAC,MAAM,MACT,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,MAAM;IAAO,EAAE,IAAI;AAEvD,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,UAAU;IAAE,CAAC;WAC3C,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,KAAK,4BAA4B,OAAO,MAAM;EAC1D,MAAM,aAAa,EAAE,IAAI,MAAM,KAAK;EACpC,MAAM,SAAS,QAAQ;EACvB,MAAM,WAAW,qBAAqB,QAAQ,WAAW;AACzD,MAAI,CAAC,SACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,iCAAiC;GAAc,EAAE,IAAI;AAEzF,MAAI,SAAS,aAAa,SAAS,MACjC,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,mBAAmB,SAAS,aAAa,KAAK;GAAwC,EAAE,IAAI;AAEhI,MAAI;GACF,MAAM,SAAS,MAAM,sBAAsB,QAAQ,SAAS,aAAa,SAAS;AAClF,8BAA2B,QAAQ,SAAS,YAAY,OAAO;GAC/D,MAAM,QAAQ,MAAM,QAAQ,WAAW,OAAO;AAC9C,OAAI,CAAC,MAAM,MACT,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,MAAM;IAAO,EAAE,IAAI;AAEvD,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS;IAAQ,CAAC;WACrC,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,KAAK,8BAA8B,2BAA2B,OAAO,MAAM;EACvF,MAAM,aAAa,EAAE,IAAI,MAAM,KAAK;EACpC,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,QAA+B,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,GAAG,OAAO,EAAE;EACzG,MAAM,SAAS,QAAQ;AACvB,MAAI;GACF,MAAM,WAAW,sBAAsB,QAAQ,YAAY,MAAM;GACjE,MAAM,QAAQ,MAAM,QAAQ,WAAW,OAAO;AAC9C,OAAI,CAAC,MAAM,MACT,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,MAAM;IAAO,EAAE,IAAI;AAEvD,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,UAAU;IAAE,CAAC;WAC3C,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,KAAK,8BAA8B,2BAA2B,OAAO,MAAM;EACvF,MAAM,aAAa,EAAE,IAAI,MAAM,KAAK;EACpC,MAAM,SAAS,QAAQ;AACvB,MAAI;GACF,MAAM,WAAW,oBAAoB,QAAQ,YAAY,KAAK;GAC9D,MAAM,QAAQ,MAAM,QAAQ,WAAW,OAAO;AAC9C,OAAI,CAAC,MAAM,MACT,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,MAAM;IAAO,EAAE,IAAI;AAEvD,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,UAAU;IAAE,CAAC;WAC3C,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,KAAK,+BAA+B,2BAA2B,OAAO,MAAM;EACxF,MAAM,aAAa,EAAE,IAAI,MAAM,KAAK;EACpC,MAAM,SAAS,QAAQ;AACvB,MAAI;GACF,MAAM,WAAW,oBAAoB,QAAQ,YAAY,MAAM;GAC/D,MAAM,QAAQ,MAAM,QAAQ,WAAW,OAAO;AAC9C,OAAI,CAAC,MAAM,MACT,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,MAAM;IAAO,EAAE,IAAI;AAEvD,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,UAAU;IAAE,CAAC;WAC3C,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,OAAO,uBAAuB,2BAA2B,OAAO,MAAM;EAClF,MAAM,aAAa,EAAE,IAAI,MAAM,KAAK;EACpC,MAAM,SAAS,QAAQ;AACvB,MAAI;GACF,MAAM,WAAW,mBAAmB,QAAQ,WAAW;GACvD,MAAM,QAAQ,MAAM,QAAQ,WAAW,OAAO;AAC9C,OAAI,CAAC,MAAM,MACT,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,MAAM;IAAO,EAAE,IAAI;AAEvD,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,UAAU;IAAE,CAAC;WAC3C,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D"}