@xopcai/xopc 0.0.145 → 0.0.147

package/dist/src/gateway/hono/lib/config-payload.d.ts

@@ -97,71 +97,6 @@ export declare function buildSafeWebConfigPayload(service: GatewayService, optio
                 allow?: string[];
                 deny?: string[];
             };
-            memory: {
-                mode: "off" | "auto" | "readOnly" | "confirmWrite";
-                sources: ("session" | "workspace" | "curated" | "userProfile" | "agentProfile" | "connectedSources")[];
-                writePolicy?: {
-                    userProfile?: "allow" | "confirm" | "deny";
-                    agentProfile?: "allow" | "confirm" | "deny";
-                    curated?: "allow" | "confirm" | "deny";
-                    workspace?: "allow" | "confirm" | "deny";
-                };
-                retention?: {
-                    compaction: boolean;
-                    maxAgeDays?: number;
-                    maxItems?: number;
-                    maxChars?: number;
-                };
-                privacy?: {
-                    crossAgentSharing: "allow" | "deny" | "readOnly";
-                    sensitiveWritePolicy: "allow" | "confirm" | "deny";
-                };
-                providerRouting?: {
-                    searchStrategy: "local-first" | "external-first" | "fanout" | "local-only" | "external-only";
-                    writeStrategy: "local-first" | "external-first" | "local-only" | "external-only" | "write-through";
-                    allowExternalWrites: boolean;
-                    allowedProviderIds?: string[];
-                    autoWriteKinds?: ("user_profile" | "preference" | "boundary" | "relationship" | "project_context" | "commitment" | "routine" | "personal_logistics" | "open_question" | "milestone" | "current_state" | "agent_note" | "workspace_fact" | "daily_note" | "session_summary" | "derived_insight" | "task_lesson" | "tool_preference" | "long_term_goal")[];
-                };
-                dreaming?: {
-                    enabled: boolean;
-                    frequency?: string;
-                    timezone?: string;
-                    phases?: {
-                        light?: {
-                            enabled?: boolean;
-                            cron?: string;
-                            lookbackDays?: number;
-                            limit?: number;
-                            dedupeSimilarity?: number;
-                        };
-                        deep?: {
-                            enabled?: boolean;
-                            cron?: string;
-                            minScore?: number;
-                            minRecallCount?: number;
-                            minUniqueQueries?: number;
-                            limit?: number;
-                            recencyHalfLifeDays?: number;
-                            maxAgeDays?: number;
-                        };
-                        rem?: {
-                            enabled?: boolean;
-                            cron?: string;
-                            lookbackDays?: number;
-                            limit?: number;
-                            minPatternStrength?: number;
-                        };
-                    };
-                };
-                understanding?: {
-                    enabled?: boolean;
-                    adaptiveCadence?: boolean;
-                    reviewIntervalTurns?: number;
-                    maxHistoryMessages?: number;
-                    maxDurationMs?: number;
-                };
-            };
             workflows: {
                 default?: string;
                 allowed?: string[];
@@ -239,71 +174,6 @@ export declare function buildSafeWebConfigPayload(service: GatewayService, optio
                 allow?: string[];
                 deny?: string[];
             };
-            memory?: {
-                mode: "off" | "auto" | "readOnly" | "confirmWrite";
-                sources: ("session" | "workspace" | "curated" | "userProfile" | "agentProfile" | "connectedSources")[];
-                writePolicy?: {
-                    userProfile?: "allow" | "confirm" | "deny";
-                    agentProfile?: "allow" | "confirm" | "deny";
-                    curated?: "allow" | "confirm" | "deny";
-                    workspace?: "allow" | "confirm" | "deny";
-                };
-                retention?: {
-                    compaction: boolean;
-                    maxAgeDays?: number;
-                    maxItems?: number;
-                    maxChars?: number;
-                };
-                privacy?: {
-                    crossAgentSharing: "allow" | "deny" | "readOnly";
-                    sensitiveWritePolicy: "allow" | "confirm" | "deny";
-                };
-                providerRouting?: {
-                    searchStrategy: "local-first" | "external-first" | "fanout" | "local-only" | "external-only";
-                    writeStrategy: "local-first" | "external-first" | "local-only" | "external-only" | "write-through";
-                    allowExternalWrites: boolean;
-                    allowedProviderIds?: string[];
-                    autoWriteKinds?: ("user_profile" | "preference" | "boundary" | "relationship" | "project_context" | "commitment" | "routine" | "personal_logistics" | "open_question" | "milestone" | "current_state" | "agent_note" | "workspace_fact" | "daily_note" | "session_summary" | "derived_insight" | "task_lesson" | "tool_preference" | "long_term_goal")[];
-                };
-                dreaming?: {
-                    enabled: boolean;
-                    frequency?: string;
-                    timezone?: string;
-                    phases?: {
-                        light?: {
-                            enabled?: boolean;
-                            cron?: string;
-                            lookbackDays?: number;
-                            limit?: number;
-                            dedupeSimilarity?: number;
-                        };
-                        deep?: {
-                            enabled?: boolean;
-                            cron?: string;
-                            minScore?: number;
-                            minRecallCount?: number;
-                            minUniqueQueries?: number;
-                            limit?: number;
-                            recencyHalfLifeDays?: number;
-                            maxAgeDays?: number;
-                        };
-                        rem?: {
-                            enabled?: boolean;
-                            cron?: string;
-                            lookbackDays?: number;
-                            limit?: number;
-                            minPatternStrength?: number;
-                        };
-                    };
-                };
-                understanding?: {
-                    enabled?: boolean;
-                    adaptiveCadence?: boolean;
-                    reviewIntervalTurns?: number;
-                    maxHistoryMessages?: number;
-                    maxDurationMs?: number;
-                };
-            };
             workflows?: {
                 default?: string;
                 allowed?: string[];

package/dist/src/gateway/hono/lib/config-payload.js

@@ -116,7 +116,6 @@ async function buildSafeWebConfigPayload(service, options = {}) {
 				models: e.models,
 				tools: e.tools,
 				skills: e.skills,
-				memory: e.memory,
 				workflows: e.workflows,
 				boundaries: e.boundaries
 			})),

package/dist/src/gateway/hono/lib/config-payload.js.map

@@ -1 +1 @@
-{"version":3,"file":"config-payload.js","names":["getModelsJsonPath"],"sources":["../../../../../src/gateway/hono/lib/config-payload.ts"],"sourcesContent":["import {\n  listAgentEntries,\n  normalizeAgentId,\n  resolveDefaultAgentId,\n} from '../../../agent/agent-scope.js';\nimport {\n  buildChannelCatalogForConfig,\n  buildChannelCatalogFromSnapshot,\n  getChannelSetupStatus,\n} from '../../../channels/catalog/channel-catalog-service.js';\nimport { normalizeConfiguredMcpServers } from '../../../config/mcp-config-normalize.js';\nimport type { Config } from '../../../config/schema.js';\nimport {\n  GENERIC_MASKED_SECRET,\n  maskSecretLength,\n} from './mask-secret-length.js';\nimport { maskTunnelSecretForWeb } from '../../../tunnel/env.js';\nimport { resolveShareConfig } from '../../../share/share-config.js';\nimport {\n  resolveGoalsConfigForWeb,\n  resolveSessionConfigForWeb,\n  resolveUpdateConfigForWeb,\n} from '../../../config/web-patch.js';\nimport { CredentialResolver } from '../../../auth/credentials.js';\nimport { loadModelsJson, getModelsJsonPath } from '../../../config/models-json.js';\nimport { getAllProviders, isProviderConfigured } from '../../../providers/index.js';\nimport { getProviderRegistry } from '../../../providers/plugin-registry.js';\nimport type { GatewayService } from '../../service.js';\nimport { safeToolsWebForGet } from '../../config-tools-web.js';\nimport { buildSafeProvidersConfigForWeb } from './safe-providers-config.js';\nimport { maskSttConfigForWeb, maskTtsConfigForWeb } from './safe-voice-config.js';\n\nfunction readModelsJsonProviderApiKey(providerId: string): string | undefined {\n  const { config } = loadModelsJson(getModelsJsonPath());\n  const entry = config.providers?.[providerId];\n  const key = entry?.apiKey;\n  return typeof key === 'string' && key.trim() ? key.trim() : undefined;\n}\n\n/** Length-preserving mask for LLM provider keys in GET `/api/config`. */\nasync function maskLlmProviderApiKeyForWeb(provider: string): Promise<string> {\n  const resolver = new CredentialResolver();\n  const stored = await resolver.revealGatewayStoredApiKey(provider);\n  if (stored) return maskSecretLength(stored);\n\n  const fromModelsJson = readModelsJsonProviderApiKey(provider);\n  if (fromModelsJson) return maskSecretLength(fromModelsJson);\n\n  // Extension plugins manage their own auth; don't show a fake gateway key mask.\n  if (getProviderRegistry().has(provider)) return '';\n\n  if (await isProviderConfigured(provider)) return GENERIC_MASKED_SECRET;\n  return '';\n}\n\n/** MCP block for GET/PATCH `/api/config` (authenticated console editing). */\nexport function buildSafeMcpConfigForWeb(config: Config) {\n  const mcp = config.mcp;\n  if (!mcp) {\n    return { servers: {} as Record<string, Record<string, unknown>> };\n  }\n  return {\n    ...(mcp.sessionIdleTtlMs !== undefined ? { sessionIdleTtlMs: mcp.sessionIdleTtlMs } : {}),\n    servers: normalizeConfiguredMcpServers(mcp.servers),\n  };\n}\n\nfunction maskBrowserCloudConfigForWeb(cloud: unknown): Record<string, unknown> | null {\n  if (!cloud || typeof cloud !== 'object' || Array.isArray(cloud)) {\n    return null;\n  }\n  const raw = cloud as Record<string, unknown>;\n  const safe: Record<string, unknown> = {};\n  if (typeof raw.apiKey === 'string' && raw.apiKey.trim()) {\n    safe.apiKey = maskSecretLength(raw.apiKey);\n  }\n  if (typeof raw.projectId === 'string' && raw.projectId.trim()) {\n    safe.projectId = raw.projectId.trim();\n  }\n  if (typeof raw.region === 'string' && raw.region.trim()) {\n    safe.region = raw.region.trim();\n  }\n  return Object.keys(safe).length > 0 ? safe : null;\n}\n\nexport function buildSafeBrowserConfigForWeb(browser: unknown) {\n  if (!browser || typeof browser !== 'object') {\n    return {\n      enabled: false,\n      headless: false,\n      allowPrivateUrls: false,\n      commandTimeout: null,\n      backend: null,\n      cloudProvider: null,\n      cloud: null,\n      cdpUrl: null,\n      extension: null,\n      cloakbrowser: null,\n      humanize: null,\n      humanPreset: null,\n      dialogPolicy: null,\n      dialogTimeoutSeconds: null,\n    };\n  }\n\n  return {\n    enabled: (browser as Record<string, unknown>).enabled !== false,\n    headless: (browser as Record<string, unknown>).headless === true,\n    allowPrivateUrls: (browser as Record<string, unknown>).allowPrivateUrls === true,\n    commandTimeout:\n      typeof (browser as Record<string, unknown>).commandTimeout === 'number' &&\n      Number.isFinite((browser as Record<string, unknown>).commandTimeout as number)\n        ? Math.floor((browser as Record<string, unknown>).commandTimeout as number)\n        : null,\n    backend:\n      (browser as Record<string, unknown>).backend === 'local' ||\n      (browser as Record<string, unknown>).backend === 'cdp' ||\n      (browser as Record<string, unknown>).backend === 'cloud' ||\n      (browser as Record<string, unknown>).backend === 'extension' ||\n      (browser as Record<string, unknown>).backend === 'cloakbrowser'\n        ? (browser as Record<string, unknown>).backend\n        : null,\n    cloudProvider:\n      (browser as Record<string, unknown>).cloudProvider === 'browserbase' ||\n      (browser as Record<string, unknown>).cloudProvider === 'browser-use'\n        ? (browser as Record<string, unknown>).cloudProvider\n        : null,\n    cloud: maskBrowserCloudConfigForWeb((browser as Record<string, unknown>).cloud),\n    cdpUrl:\n      typeof (browser as Record<string, unknown>).cdpUrl === 'string' &&\n      ((browser as Record<string, unknown>).cdpUrl as string).trim()\n        ? ((browser as Record<string, unknown>).cdpUrl as string).trim()\n        : null,\n    extension:\n      (browser as Record<string, unknown>).extension &&\n      typeof (browser as Record<string, unknown>).extension === 'object' &&\n      !Array.isArray((browser as Record<string, unknown>).extension)\n        ? (browser as Record<string, unknown>).extension\n      : null,\n    cloakbrowser:\n      (browser as Record<string, unknown>).cloakbrowser &&\n      typeof (browser as Record<string, unknown>).cloakbrowser === 'object' &&\n      !Array.isArray((browser as Record<string, unknown>).cloakbrowser)\n        ? (browser as Record<string, unknown>).cloakbrowser\n        : null,\n    humanize:\n      typeof (browser as Record<string, unknown>).humanize === 'boolean'\n        ? (browser as Record<string, unknown>).humanize\n        : null,\n    humanPreset:\n      (browser as Record<string, unknown>).humanPreset === 'default' ||\n      (browser as Record<string, unknown>).humanPreset === 'careful'\n        ? (browser as Record<string, unknown>).humanPreset\n        : null,\n    dialogPolicy:\n      (browser as Record<string, unknown>).dialogPolicy === 'must_respond' ||\n      (browser as Record<string, unknown>).dialogPolicy === 'auto_accept' ||\n      (browser as Record<string, unknown>).dialogPolicy === 'auto_dismiss'\n        ? (browser as Record<string, unknown>).dialogPolicy\n        : null,\n    dialogTimeoutSeconds:\n      typeof (browser as Record<string, unknown>).dialogTimeoutSeconds === 'number' &&\n      Number.isFinite((browser as Record<string, unknown>).dialogTimeoutSeconds as number)\n        ? Math.floor((browser as Record<string, unknown>).dialogTimeoutSeconds as number)\n        : null,\n  };\n}\n\n/** Sanitized config snapshot for GET/PATCH `/api/config` (matches persisted `service.currentConfig`). */\nexport async function buildSafeWebConfigPayload(service: GatewayService, options: { locale?: string } = {}) {\n  const config = service.currentConfig;\n  const extensionLoader =\n    typeof service.getExtensionLoader === 'function' ? service.getExtensionLoader() : undefined;\n  const snapshot = extensionLoader?.getManifestSnapshot();\n  const catalog = snapshot\n    ? buildChannelCatalogFromSnapshot(snapshot, { locale: options.locale })\n    : buildChannelCatalogForConfig(config, { locale: options.locale });\n  const channelsPayload = Object.fromEntries(\n    catalog.entries.map((entry) => {\n      const plugin =\n        typeof service.getChannelRuntimePlugin === 'function'\n          ? service.getChannelRuntimePlugin(entry.id)\n          : undefined;\n      const channelCfgKey = entry.configPath.startsWith('channels.')\n        ? entry.configPath.slice('channels.'.length).split('.')[0] || entry.id\n        : entry.id;\n      const channelCfg = config.channels?.[channelCfgKey] as Record<string, unknown> | undefined;\n      const setupStatus = getChannelSetupStatus(config, entry.id, entry);\n      return [\n        entry.id,\n        {\n          enabled: setupStatus.enabled,\n          configured: setupStatus.ready,\n          setupStatus,\n          config: plugin?.configSurface?.buildConfigSurface(config) ?? channelCfg ?? {},\n          schema: entry.configSchema,\n          uiHints: entry.uiHints,\n        },\n      ];\n    }),\n  );\n  return {\n    agents: {\n      defaultId: resolveDefaultAgentId(config),\n      list: listAgentEntries(config)\n        .filter((e) => e.enabled !== false)\n        .map((e) => ({\n          id: normalizeAgentId(e.id),\n          identity: e.identity,\n          workspace: e.workspace,\n          models: e.models,\n          tools: e.tools,\n          skills: e.skills,\n          memory: e.memory,\n          workflows: e.workflows,\n          boundaries: e.boundaries,\n        })),\n      capabilityPresets: config.agents?.capabilityPresets ?? {},\n    },\n    channels: channelsPayload,\n    providers: Object.fromEntries(\n      await Promise.all(\n        getAllProviders().map(async (provider) => [\n          provider,\n          await maskLlmProviderApiKeyForWeb(provider),\n        ]),\n      ),\n    ),\n    /** Masked `cfg.providers` for capability keys (image / STT / etc.). */\n    providersConfig: buildSafeProvidersConfigForWeb(config.providers),\n    gateway: {\n      bind: config.gateway?.bind ?? 'loopback',\n      customBindHost: config.gateway?.customBindHost,\n      port: config.gateway?.port,\n      corsOrigins: Array.isArray(config.gateway?.corsOrigins) ? config.gateway.corsOrigins : [],\n      trustedProxies: Array.isArray(config.gateway?.trustedProxies)\n        ? config.gateway.trustedProxies\n        : [],\n      allowRealIpFallback: config.gateway?.allowRealIpFallback === true,\n      dangerouslyAllowHostHeaderOriginFallback:\n        config.gateway?.dangerouslyAllowHostHeaderOriginFallback === true,\n      security: {\n        strict: config.gateway?.security?.strict === true,\n      },\n      auth: {\n        mode: config.gateway?.auth?.mode || 'token',\n        token: config.gateway?.auth?.token ? maskSecretLength(config.gateway.auth.token) : '',\n        password: config.gateway?.auth?.password\n          ? maskSecretLength(config.gateway.auth.password)\n          : '',\n        trustedProxy: config.gateway?.auth?.trustedProxy\n          ? {\n              userHeader: config.gateway.auth.trustedProxy.userHeader,\n              requiredHeaders: config.gateway.auth.trustedProxy.requiredHeaders ?? [],\n              allowUsers: config.gateway.auth.trustedProxy.allowUsers ?? [],\n              allowLoopback: config.gateway.auth.trustedProxy.allowLoopback === true,\n            }\n          : undefined,\n        rateLimit: {\n          enabled: config.gateway?.auth?.rateLimit?.enabled !== false,\n          maxAttempts:\n            typeof config.gateway?.auth?.rateLimit?.maxAttempts === 'number'\n              ? config.gateway.auth.rateLimit.maxAttempts\n              : 5,\n          windowMs:\n            typeof config.gateway?.auth?.rateLimit?.windowMs === 'number'\n              ? config.gateway.auth.rateLimit.windowMs\n              : 900_000,\n          blockDurationMs:\n            typeof config.gateway?.auth?.rateLimit?.blockDurationMs === 'number'\n              ? config.gateway.auth.rateLimit.blockDurationMs\n              : typeof config.gateway?.auth?.rateLimit?.lockoutMs === 'number'\n                ? config.gateway.auth.rateLimit.lockoutMs\n                : 300_000,\n          exemptLoopback: config.gateway?.auth?.rateLimit?.exemptLoopback !== false,\n        },\n      },\n      heartbeat: {\n        enabled: config.gateway?.heartbeat?.enabled,\n        intervalMs: config.gateway?.heartbeat?.intervalMs,\n        includeSystemPromptSection: config.gateway?.heartbeat?.includeSystemPromptSection === true,\n        target: config.gateway?.heartbeat?.target,\n        targetChatId: config.gateway?.heartbeat?.targetChatId,\n        prompt: config.gateway?.heartbeat?.prompt,\n        ackMaxChars: config.gateway?.heartbeat?.ackMaxChars,\n        isolatedSession: config.gateway?.heartbeat?.isolatedSession,\n        activeHours: config.gateway?.heartbeat?.activeHours,\n      },\n      maxSseConnections:\n        typeof config.gateway?.maxSseConnections === 'number'\n          ? config.gateway.maxSseConnections\n          : 100,\n      channelConnectDeferMode: config.gateway?.channelConnectDeferMode ?? 'auto',\n      channelConnectDeferIds: Array.isArray(config.gateway?.channelConnectDeferIds)\n        ? config.gateway.channelConnectDeferIds\n        : [],\n      channelConnectDeferSkipIds: Array.isArray(config.gateway?.channelConnectDeferSkipIds)\n        ? config.gateway.channelConnectDeferSkipIds\n        : [],\n      share: resolveShareConfig(config.gateway?.share),\n      publicUrl: config.gateway?.publicUrl ?? null,\n      skillsMarketplaceProvider: config.gateway?.skillsMarketplaceProvider ?? 'store',\n      skillsStoreBaseUrl: config.gateway?.skillsStoreBaseUrl ?? 'https://store.xopc.ai',\n    },\n    browser: buildSafeBrowserConfigForWeb(config.browser),\n    goals: resolveGoalsConfigForWeb(config),\n    session: resolveSessionConfigForWeb(config),\n    tui: {\n      defaultAgent: config.tui?.defaultAgent ?? 'coder',\n    },\n    tunnel: {\n      enabled: config.tunnel?.enabled === true,\n      autoStart: config.tunnel?.autoStart === true,\n      brokerUrl: config.tunnel?.brokerUrl ?? 'https://frp.xopc.ai/api',\n      registrationSecret: config.tunnel?.registrationSecret\n        ? maskTunnelSecretForWeb(config.tunnel.registrationSecret)\n        : '',\n      consent: config.tunnel?.consent\n        ? {\n            version: config.tunnel.consent.version,\n            acceptedAt: config.tunnel.consent.acceptedAt,\n          }\n        : undefined,\n      transport: { tls: 'broker_terminated' as const },\n    },\n    update: {\n      ...resolveUpdateConfigForWeb(config),\n    },\n    stt: maskSttConfigForWeb(config.tools?.media?.audio),\n    tts: maskTtsConfigForWeb(config.messages?.tts),\n    voice: config.voice,\n    tools: safeToolsWebForGet(config),\n    bindings: Array.isArray(config.bindings) ? config.bindings : [],\n    mcp: buildSafeMcpConfigForWeb(config),\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;kBAIuC;8BAKuB;kBAcI;kBACiB;gBACC;sBACR;AAM5E,SAAS,6BAA6B,YAAwC;CAC5E,MAAM,EAAE,WAAW,eAAeA,uBAAmB,CAAC;CAEtD,MAAM,OADQ,OAAO,YAAY,cACd;AACnB,QAAO,OAAO,QAAQ,YAAY,IAAI,MAAM,GAAG,IAAI,MAAM,GAAG,KAAA;;;AAI9D,eAAe,4BAA4B,UAAmC;CAE5E,MAAM,SAAS,MAAM,IADA,oBACQ,CAAC,0BAA0B,SAAS;AACjE,KAAI,OAAQ,QAAO,iBAAiB,OAAO;CAE3C,MAAM,iBAAiB,6BAA6B,SAAS;AAC7D,KAAI,eAAgB,QAAO,iBAAiB,eAAe;AAG3D,KAAI,qBAAqB,CAAC,IAAI,SAAS,CAAE,QAAO;AAEhD,KAAI,MAAM,qBAAqB,SAAS,CAAE,QAAO;AACjD,QAAO;;;AAIT,SAAgB,yBAAyB,QAAgB;CACvD,MAAM,MAAM,OAAO;AACnB,KAAI,CAAC,IACH,QAAO,EAAE,SAAS,EAAE,EAA6C;AAEnE,QAAO;EACL,GAAI,IAAI,qBAAqB,KAAA,IAAY,EAAE,kBAAkB,IAAI,kBAAkB,GAAG,EAAE;EACxF,SAAS,8BAA8B,IAAI,QAAQ;EACpD;;AAGH,SAAS,6BAA6B,OAAgD;AACpF,KAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,MAAM,CAC7D,QAAO;CAET,MAAM,MAAM;CACZ,MAAM,OAAgC,EAAE;AACxC,KAAI,OAAO,IAAI,WAAW,YAAY,IAAI,OAAO,MAAM,CACrD,MAAK,SAAS,iBAAiB,IAAI,OAAO;AAE5C,KAAI,OAAO,IAAI,cAAc,YAAY,IAAI,UAAU,MAAM,CAC3D,MAAK,YAAY,IAAI,UAAU,MAAM;AAEvC,KAAI,OAAO,IAAI,WAAW,YAAY,IAAI,OAAO,MAAM,CACrD,MAAK,SAAS,IAAI,OAAO,MAAM;AAEjC,QAAO,OAAO,KAAK,KAAK,CAAC,SAAS,IAAI,OAAO;;AAG/C,SAAgB,6BAA6B,SAAkB;AAC7D,KAAI,CAAC,WAAW,OAAO,YAAY,SACjC,QAAO;EACL,SAAS;EACT,UAAU;EACV,kBAAkB;EAClB,gBAAgB;EAChB,SAAS;EACT,eAAe;EACf,OAAO;EACP,QAAQ;EACR,WAAW;EACX,cAAc;EACd,UAAU;EACV,aAAa;EACb,cAAc;EACd,sBAAsB;EACvB;AAGH,QAAO;EACL,SAAU,QAAoC,YAAY;EAC1D,UAAW,QAAoC,aAAa;EAC5D,kBAAmB,QAAoC,qBAAqB;EAC5E,gBACE,OAAQ,QAAoC,mBAAmB,YAC/D,OAAO,SAAU,QAAoC,eAAyB,GAC1E,KAAK,MAAO,QAAoC,eAAyB,GACzE;EACN,SACG,QAAoC,YAAY,WAChD,QAAoC,YAAY,SAChD,QAAoC,YAAY,WAChD,QAAoC,YAAY,eAChD,QAAoC,YAAY,iBAC5C,QAAoC,UACrC;EACN,eACG,QAAoC,kBAAkB,iBACtD,QAAoC,kBAAkB,gBAClD,QAAoC,gBACrC;EACN,OAAO,6BAA8B,QAAoC,MAAM;EAC/E,QACE,OAAQ,QAAoC,WAAW,YACrD,QAAoC,OAAkB,MAAM,GACxD,QAAoC,OAAkB,MAAM,GAC9D;EACN,WACG,QAAoC,aACrC,OAAQ,QAAoC,cAAc,YAC1D,CAAC,MAAM,QAAS,QAAoC,UAAU,GACzD,QAAoC,YACvC;EACJ,cACG,QAAoC,gBACrC,OAAQ,QAAoC,iBAAiB,YAC7D,CAAC,MAAM,QAAS,QAAoC,aAAa,GAC5D,QAAoC,eACrC;EACN,UACE,OAAQ,QAAoC,aAAa,YACpD,QAAoC,WACrC;EACN,aACG,QAAoC,gBAAgB,aACpD,QAAoC,gBAAgB,YAChD,QAAoC,cACrC;EACN,cACG,QAAoC,iBAAiB,kBACrD,QAAoC,iBAAiB,iBACrD,QAAoC,iBAAiB,iBACjD,QAAoC,eACrC;EACN,sBACE,OAAQ,QAAoC,yBAAyB,YACrE,OAAO,SAAU,QAAoC,qBAA+B,GAChF,KAAK,MAAO,QAAoC,qBAA+B,GAC/E;EACP;;;AAIH,eAAsB,0BAA0B,SAAyB,UAA+B,EAAE,EAAE;CAC1G,MAAM,SAAS,QAAQ;CAGvB,MAAM,YADJ,OAAO,QAAQ,uBAAuB,aAAa,QAAQ,oBAAoB,GAAG,KAAA,IAClD,qBAAqB;CACvD,MAAM,UAAU,WACZ,gCAAgC,UAAU,EAAE,QAAQ,QAAQ,QAAQ,CAAC,GACrE,6BAA6B,QAAQ,EAAE,QAAQ,QAAQ,QAAQ,CAAC;CACpE,MAAM,kBAAkB,OAAO,YAC7B,QAAQ,QAAQ,KAAK,UAAU;EAC7B,MAAM,SACJ,OAAO,QAAQ,4BAA4B,aACvC,QAAQ,wBAAwB,MAAM,GAAG,GACzC,KAAA;EACN,MAAM,gBAAgB,MAAM,WAAW,WAAW,YAAY,GAC1D,MAAM,WAAW,MAAM,EAAmB,CAAC,MAAM,IAAI,CAAC,MAAM,MAAM,KAClE,MAAM;EACV,MAAM,aAAa,OAAO,WAAW;EACrC,MAAM,cAAc,sBAAsB,QAAQ,MAAM,IAAI,MAAM;AAClE,SAAO,CACL,MAAM,IACN;GACE,SAAS,YAAY;GACrB,YAAY,YAAY;GACxB;GACA,QAAQ,QAAQ,eAAe,mBAAmB,OAAO,IAAI,cAAc,EAAE;GAC7E,QAAQ,MAAM;GACd,SAAS,MAAM;GAChB,CACF;GACD,CACH;AACD,QAAO;EACL,QAAQ;GACN,WAAW,sBAAsB,OAAO;GACxC,MAAM,iBAAiB,OAAO,CAC3B,QAAQ,MAAM,EAAE,YAAY,MAAM,CAClC,KAAK,OAAO;IACX,IAAI,iBAAiB,EAAE,GAAG;IAC1B,UAAU,EAAE;IACZ,WAAW,EAAE;IACb,QAAQ,EAAE;IACV,OAAO,EAAE;IACT,QAAQ,EAAE;IACV,QAAQ,EAAE;IACV,WAAW,EAAE;IACb,YAAY,EAAE;IACf,EAAE;GACL,mBAAmB,OAAO,QAAQ,qBAAqB,EAAE;GAC1D;EACD,UAAU;EACV,WAAW,OAAO,YAChB,MAAM,QAAQ,IACZ,iBAAiB,CAAC,IAAI,OAAO,aAAa,CACxC,UACA,MAAM,4BAA4B,SAAS,CAC5C,CAAC,CACH,CACF;;EAED,iBAAiB,+BAA+B,OAAO,UAAU;EACjE,SAAS;GACP,MAAM,OAAO,SAAS,QAAQ;GAC9B,gBAAgB,OAAO,SAAS;GAChC,MAAM,OAAO,SAAS;GACtB,aAAa,MAAM,QAAQ,OAAO,SAAS,YAAY,GAAG,OAAO,QAAQ,cAAc,EAAE;GACzF,gBAAgB,MAAM,QAAQ,OAAO,SAAS,eAAe,GACzD,OAAO,QAAQ,iBACf,EAAE;GACN,qBAAqB,OAAO,SAAS,wBAAwB;GAC7D,0CACE,OAAO,SAAS,6CAA6C;GAC/D,UAAU,EACR,QAAQ,OAAO,SAAS,UAAU,WAAW,MAC9C;GACD,MAAM;IACJ,MAAM,OAAO,SAAS,MAAM,QAAQ;IACpC,OAAO,OAAO,SAAS,MAAM,QAAQ,iBAAiB,OAAO,QAAQ,KAAK,MAAM,GAAG;IACnF,UAAU,OAAO,SAAS,MAAM,WAC5B,iBAAiB,OAAO,QAAQ,KAAK,SAAS,GAC9C;IACJ,cAAc,OAAO,SAAS,MAAM,eAChC;KACE,YAAY,OAAO,QAAQ,KAAK,aAAa;KAC7C,iBAAiB,OAAO,QAAQ,KAAK,aAAa,mBAAmB,EAAE;KACvE,YAAY,OAAO,QAAQ,KAAK,aAAa,cAAc,EAAE;KAC7D,eAAe,OAAO,QAAQ,KAAK,aAAa,kBAAkB;KACnE,GACD,KAAA;IACJ,WAAW;KACT,SAAS,OAAO,SAAS,MAAM,WAAW,YAAY;KACtD,aACE,OAAO,OAAO,SAAS,MAAM,WAAW,gBAAgB,WACpD,OAAO,QAAQ,KAAK,UAAU,cAC9B;KACN,UACE,OAAO,OAAO,SAAS,MAAM,WAAW,aAAa,WACjD,OAAO,QAAQ,KAAK,UAAU,WAC9B;KACN,iBACE,OAAO,OAAO,SAAS,MAAM,WAAW,oBAAoB,WACxD,OAAO,QAAQ,KAAK,UAAU,kBAC9B,OAAO,OAAO,SAAS,MAAM,WAAW,cAAc,WACpD,OAAO,QAAQ,KAAK,UAAU,YAC9B;KACR,gBAAgB,OAAO,SAAS,MAAM,WAAW,mBAAmB;KACrE;IACF;GACD,WAAW;IACT,SAAS,OAAO,SAAS,WAAW;IACpC,YAAY,OAAO,SAAS,WAAW;IACvC,4BAA4B,OAAO,SAAS,WAAW,+BAA+B;IACtF,QAAQ,OAAO,SAAS,WAAW;IACnC,cAAc,OAAO,SAAS,WAAW;IACzC,QAAQ,OAAO,SAAS,WAAW;IACnC,aAAa,OAAO,SAAS,WAAW;IACxC,iBAAiB,OAAO,SAAS,WAAW;IAC5C,aAAa,OAAO,SAAS,WAAW;IACzC;GACD,mBACE,OAAO,OAAO,SAAS,sBAAsB,WACzC,OAAO,QAAQ,oBACf;GACN,yBAAyB,OAAO,SAAS,2BAA2B;GACpE,wBAAwB,MAAM,QAAQ,OAAO,SAAS,uBAAuB,GACzE,OAAO,QAAQ,yBACf,EAAE;GACN,4BAA4B,MAAM,QAAQ,OAAO,SAAS,2BAA2B,GACjF,OAAO,QAAQ,6BACf,EAAE;GACN,OAAO,mBAAmB,OAAO,SAAS,MAAM;GAChD,WAAW,OAAO,SAAS,aAAa;GACxC,2BAA2B,OAAO,SAAS,6BAA6B;GACxE,oBAAoB,OAAO,SAAS,sBAAsB;GAC3D;EACD,SAAS,6BAA6B,OAAO,QAAQ;EACrD,OAAO,yBAAyB,OAAO;EACvC,SAAS,2BAA2B,OAAO;EAC3C,KAAK,EACH,cAAc,OAAO,KAAK,gBAAgB,SAC3C;EACD,QAAQ;GACN,SAAS,OAAO,QAAQ,YAAY;GACpC,WAAW,OAAO,QAAQ,cAAc;GACxC,WAAW,OAAO,QAAQ,aAAa;GACvC,oBAAoB,OAAO,QAAQ,qBAC/B,uBAAuB,OAAO,OAAO,mBAAmB,GACxD;GACJ,SAAS,OAAO,QAAQ,UACpB;IACE,SAAS,OAAO,OAAO,QAAQ;IAC/B,YAAY,OAAO,OAAO,QAAQ;IACnC,GACD,KAAA;GACJ,WAAW,EAAE,KAAK,qBAA8B;GACjD;EACD,QAAQ,EACN,GAAG,0BAA0B,OAAO,EACrC;EACD,KAAK,oBAAoB,OAAO,OAAO,OAAO,MAAM;EACpD,KAAK,oBAAoB,OAAO,UAAU,IAAI;EAC9C,OAAO,OAAO;EACd,OAAO,mBAAmB,OAAO;EACjC,UAAU,MAAM,QAAQ,OAAO,SAAS,GAAG,OAAO,WAAW,EAAE;EAC/D,KAAK,yBAAyB,OAAO;EACtC"}
+{"version":3,"file":"config-payload.js","names":["getModelsJsonPath"],"sources":["../../../../../src/gateway/hono/lib/config-payload.ts"],"sourcesContent":["import {\n  listAgentEntries,\n  normalizeAgentId,\n  resolveDefaultAgentId,\n} from '../../../agent/agent-scope.js';\nimport {\n  buildChannelCatalogForConfig,\n  buildChannelCatalogFromSnapshot,\n  getChannelSetupStatus,\n} from '../../../channels/catalog/channel-catalog-service.js';\nimport { normalizeConfiguredMcpServers } from '../../../config/mcp-config-normalize.js';\nimport type { Config } from '../../../config/schema.js';\nimport {\n  GENERIC_MASKED_SECRET,\n  maskSecretLength,\n} from './mask-secret-length.js';\nimport { maskTunnelSecretForWeb } from '../../../tunnel/env.js';\nimport { resolveShareConfig } from '../../../share/share-config.js';\nimport {\n  resolveGoalsConfigForWeb,\n  resolveSessionConfigForWeb,\n  resolveUpdateConfigForWeb,\n} from '../../../config/web-patch.js';\nimport { CredentialResolver } from '../../../auth/credentials.js';\nimport { loadModelsJson, getModelsJsonPath } from '../../../config/models-json.js';\nimport { getAllProviders, isProviderConfigured } from '../../../providers/index.js';\nimport { getProviderRegistry } from '../../../providers/plugin-registry.js';\nimport type { GatewayService } from '../../service.js';\nimport { safeToolsWebForGet } from '../../config-tools-web.js';\nimport { buildSafeProvidersConfigForWeb } from './safe-providers-config.js';\nimport { maskSttConfigForWeb, maskTtsConfigForWeb } from './safe-voice-config.js';\n\nfunction readModelsJsonProviderApiKey(providerId: string): string | undefined {\n  const { config } = loadModelsJson(getModelsJsonPath());\n  const entry = config.providers?.[providerId];\n  const key = entry?.apiKey;\n  return typeof key === 'string' && key.trim() ? key.trim() : undefined;\n}\n\n/** Length-preserving mask for LLM provider keys in GET `/api/config`. */\nasync function maskLlmProviderApiKeyForWeb(provider: string): Promise<string> {\n  const resolver = new CredentialResolver();\n  const stored = await resolver.revealGatewayStoredApiKey(provider);\n  if (stored) return maskSecretLength(stored);\n\n  const fromModelsJson = readModelsJsonProviderApiKey(provider);\n  if (fromModelsJson) return maskSecretLength(fromModelsJson);\n\n  // Extension plugins manage their own auth; don't show a fake gateway key mask.\n  if (getProviderRegistry().has(provider)) return '';\n\n  if (await isProviderConfigured(provider)) return GENERIC_MASKED_SECRET;\n  return '';\n}\n\n/** MCP block for GET/PATCH `/api/config` (authenticated console editing). */\nexport function buildSafeMcpConfigForWeb(config: Config) {\n  const mcp = config.mcp;\n  if (!mcp) {\n    return { servers: {} as Record<string, Record<string, unknown>> };\n  }\n  return {\n    ...(mcp.sessionIdleTtlMs !== undefined ? { sessionIdleTtlMs: mcp.sessionIdleTtlMs } : {}),\n    servers: normalizeConfiguredMcpServers(mcp.servers),\n  };\n}\n\nfunction maskBrowserCloudConfigForWeb(cloud: unknown): Record<string, unknown> | null {\n  if (!cloud || typeof cloud !== 'object' || Array.isArray(cloud)) {\n    return null;\n  }\n  const raw = cloud as Record<string, unknown>;\n  const safe: Record<string, unknown> = {};\n  if (typeof raw.apiKey === 'string' && raw.apiKey.trim()) {\n    safe.apiKey = maskSecretLength(raw.apiKey);\n  }\n  if (typeof raw.projectId === 'string' && raw.projectId.trim()) {\n    safe.projectId = raw.projectId.trim();\n  }\n  if (typeof raw.region === 'string' && raw.region.trim()) {\n    safe.region = raw.region.trim();\n  }\n  return Object.keys(safe).length > 0 ? safe : null;\n}\n\nexport function buildSafeBrowserConfigForWeb(browser: unknown) {\n  if (!browser || typeof browser !== 'object') {\n    return {\n      enabled: false,\n      headless: false,\n      allowPrivateUrls: false,\n      commandTimeout: null,\n      backend: null,\n      cloudProvider: null,\n      cloud: null,\n      cdpUrl: null,\n      extension: null,\n      cloakbrowser: null,\n      humanize: null,\n      humanPreset: null,\n      dialogPolicy: null,\n      dialogTimeoutSeconds: null,\n    };\n  }\n\n  return {\n    enabled: (browser as Record<string, unknown>).enabled !== false,\n    headless: (browser as Record<string, unknown>).headless === true,\n    allowPrivateUrls: (browser as Record<string, unknown>).allowPrivateUrls === true,\n    commandTimeout:\n      typeof (browser as Record<string, unknown>).commandTimeout === 'number' &&\n      Number.isFinite((browser as Record<string, unknown>).commandTimeout as number)\n        ? Math.floor((browser as Record<string, unknown>).commandTimeout as number)\n        : null,\n    backend:\n      (browser as Record<string, unknown>).backend === 'local' ||\n      (browser as Record<string, unknown>).backend === 'cdp' ||\n      (browser as Record<string, unknown>).backend === 'cloud' ||\n      (browser as Record<string, unknown>).backend === 'extension' ||\n      (browser as Record<string, unknown>).backend === 'cloakbrowser'\n        ? (browser as Record<string, unknown>).backend\n        : null,\n    cloudProvider:\n      (browser as Record<string, unknown>).cloudProvider === 'browserbase' ||\n      (browser as Record<string, unknown>).cloudProvider === 'browser-use'\n        ? (browser as Record<string, unknown>).cloudProvider\n        : null,\n    cloud: maskBrowserCloudConfigForWeb((browser as Record<string, unknown>).cloud),\n    cdpUrl:\n      typeof (browser as Record<string, unknown>).cdpUrl === 'string' &&\n      ((browser as Record<string, unknown>).cdpUrl as string).trim()\n        ? ((browser as Record<string, unknown>).cdpUrl as string).trim()\n        : null,\n    extension:\n      (browser as Record<string, unknown>).extension &&\n      typeof (browser as Record<string, unknown>).extension === 'object' &&\n      !Array.isArray((browser as Record<string, unknown>).extension)\n        ? (browser as Record<string, unknown>).extension\n      : null,\n    cloakbrowser:\n      (browser as Record<string, unknown>).cloakbrowser &&\n      typeof (browser as Record<string, unknown>).cloakbrowser === 'object' &&\n      !Array.isArray((browser as Record<string, unknown>).cloakbrowser)\n        ? (browser as Record<string, unknown>).cloakbrowser\n        : null,\n    humanize:\n      typeof (browser as Record<string, unknown>).humanize === 'boolean'\n        ? (browser as Record<string, unknown>).humanize\n        : null,\n    humanPreset:\n      (browser as Record<string, unknown>).humanPreset === 'default' ||\n      (browser as Record<string, unknown>).humanPreset === 'careful'\n        ? (browser as Record<string, unknown>).humanPreset\n        : null,\n    dialogPolicy:\n      (browser as Record<string, unknown>).dialogPolicy === 'must_respond' ||\n      (browser as Record<string, unknown>).dialogPolicy === 'auto_accept' ||\n      (browser as Record<string, unknown>).dialogPolicy === 'auto_dismiss'\n        ? (browser as Record<string, unknown>).dialogPolicy\n        : null,\n    dialogTimeoutSeconds:\n      typeof (browser as Record<string, unknown>).dialogTimeoutSeconds === 'number' &&\n      Number.isFinite((browser as Record<string, unknown>).dialogTimeoutSeconds as number)\n        ? Math.floor((browser as Record<string, unknown>).dialogTimeoutSeconds as number)\n        : null,\n  };\n}\n\n/** Sanitized config snapshot for GET/PATCH `/api/config` (matches persisted `service.currentConfig`). */\nexport async function buildSafeWebConfigPayload(service: GatewayService, options: { locale?: string } = {}) {\n  const config = service.currentConfig;\n  const extensionLoader =\n    typeof service.getExtensionLoader === 'function' ? service.getExtensionLoader() : undefined;\n  const snapshot = extensionLoader?.getManifestSnapshot();\n  const catalog = snapshot\n    ? buildChannelCatalogFromSnapshot(snapshot, { locale: options.locale })\n    : buildChannelCatalogForConfig(config, { locale: options.locale });\n  const channelsPayload = Object.fromEntries(\n    catalog.entries.map((entry) => {\n      const plugin =\n        typeof service.getChannelRuntimePlugin === 'function'\n          ? service.getChannelRuntimePlugin(entry.id)\n          : undefined;\n      const channelCfgKey = entry.configPath.startsWith('channels.')\n        ? entry.configPath.slice('channels.'.length).split('.')[0] || entry.id\n        : entry.id;\n      const channelCfg = config.channels?.[channelCfgKey] as Record<string, unknown> | undefined;\n      const setupStatus = getChannelSetupStatus(config, entry.id, entry);\n      return [\n        entry.id,\n        {\n          enabled: setupStatus.enabled,\n          configured: setupStatus.ready,\n          setupStatus,\n          config: plugin?.configSurface?.buildConfigSurface(config) ?? channelCfg ?? {},\n          schema: entry.configSchema,\n          uiHints: entry.uiHints,\n        },\n      ];\n    }),\n  );\n  return {\n    agents: {\n      defaultId: resolveDefaultAgentId(config),\n      list: listAgentEntries(config)\n        .filter((e) => e.enabled !== false)\n        .map((e) => ({\n          id: normalizeAgentId(e.id),\n          identity: e.identity,\n          workspace: e.workspace,\n          models: e.models,\n          tools: e.tools,\n          skills: e.skills,\n          workflows: e.workflows,\n          boundaries: e.boundaries,\n        })),\n      capabilityPresets: config.agents?.capabilityPresets ?? {},\n    },\n    channels: channelsPayload,\n    providers: Object.fromEntries(\n      await Promise.all(\n        getAllProviders().map(async (provider) => [\n          provider,\n          await maskLlmProviderApiKeyForWeb(provider),\n        ]),\n      ),\n    ),\n    /** Masked `cfg.providers` for capability keys (image / STT / etc.). */\n    providersConfig: buildSafeProvidersConfigForWeb(config.providers),\n    gateway: {\n      bind: config.gateway?.bind ?? 'loopback',\n      customBindHost: config.gateway?.customBindHost,\n      port: config.gateway?.port,\n      corsOrigins: Array.isArray(config.gateway?.corsOrigins) ? config.gateway.corsOrigins : [],\n      trustedProxies: Array.isArray(config.gateway?.trustedProxies)\n        ? config.gateway.trustedProxies\n        : [],\n      allowRealIpFallback: config.gateway?.allowRealIpFallback === true,\n      dangerouslyAllowHostHeaderOriginFallback:\n        config.gateway?.dangerouslyAllowHostHeaderOriginFallback === true,\n      security: {\n        strict: config.gateway?.security?.strict === true,\n      },\n      auth: {\n        mode: config.gateway?.auth?.mode || 'token',\n        token: config.gateway?.auth?.token ? maskSecretLength(config.gateway.auth.token) : '',\n        password: config.gateway?.auth?.password\n          ? maskSecretLength(config.gateway.auth.password)\n          : '',\n        trustedProxy: config.gateway?.auth?.trustedProxy\n          ? {\n              userHeader: config.gateway.auth.trustedProxy.userHeader,\n              requiredHeaders: config.gateway.auth.trustedProxy.requiredHeaders ?? [],\n              allowUsers: config.gateway.auth.trustedProxy.allowUsers ?? [],\n              allowLoopback: config.gateway.auth.trustedProxy.allowLoopback === true,\n            }\n          : undefined,\n        rateLimit: {\n          enabled: config.gateway?.auth?.rateLimit?.enabled !== false,\n          maxAttempts:\n            typeof config.gateway?.auth?.rateLimit?.maxAttempts === 'number'\n              ? config.gateway.auth.rateLimit.maxAttempts\n              : 5,\n          windowMs:\n            typeof config.gateway?.auth?.rateLimit?.windowMs === 'number'\n              ? config.gateway.auth.rateLimit.windowMs\n              : 900_000,\n          blockDurationMs:\n            typeof config.gateway?.auth?.rateLimit?.blockDurationMs === 'number'\n              ? config.gateway.auth.rateLimit.blockDurationMs\n              : typeof config.gateway?.auth?.rateLimit?.lockoutMs === 'number'\n                ? config.gateway.auth.rateLimit.lockoutMs\n                : 300_000,\n          exemptLoopback: config.gateway?.auth?.rateLimit?.exemptLoopback !== false,\n        },\n      },\n      heartbeat: {\n        enabled: config.gateway?.heartbeat?.enabled,\n        intervalMs: config.gateway?.heartbeat?.intervalMs,\n        includeSystemPromptSection: config.gateway?.heartbeat?.includeSystemPromptSection === true,\n        target: config.gateway?.heartbeat?.target,\n        targetChatId: config.gateway?.heartbeat?.targetChatId,\n        prompt: config.gateway?.heartbeat?.prompt,\n        ackMaxChars: config.gateway?.heartbeat?.ackMaxChars,\n        isolatedSession: config.gateway?.heartbeat?.isolatedSession,\n        activeHours: config.gateway?.heartbeat?.activeHours,\n      },\n      maxSseConnections:\n        typeof config.gateway?.maxSseConnections === 'number'\n          ? config.gateway.maxSseConnections\n          : 100,\n      channelConnectDeferMode: config.gateway?.channelConnectDeferMode ?? 'auto',\n      channelConnectDeferIds: Array.isArray(config.gateway?.channelConnectDeferIds)\n        ? config.gateway.channelConnectDeferIds\n        : [],\n      channelConnectDeferSkipIds: Array.isArray(config.gateway?.channelConnectDeferSkipIds)\n        ? config.gateway.channelConnectDeferSkipIds\n        : [],\n      share: resolveShareConfig(config.gateway?.share),\n      publicUrl: config.gateway?.publicUrl ?? null,\n      skillsMarketplaceProvider: config.gateway?.skillsMarketplaceProvider ?? 'store',\n      skillsStoreBaseUrl: config.gateway?.skillsStoreBaseUrl ?? 'https://store.xopc.ai',\n    },\n    browser: buildSafeBrowserConfigForWeb(config.browser),\n    goals: resolveGoalsConfigForWeb(config),\n    session: resolveSessionConfigForWeb(config),\n    tui: {\n      defaultAgent: config.tui?.defaultAgent ?? 'coder',\n    },\n    tunnel: {\n      enabled: config.tunnel?.enabled === true,\n      autoStart: config.tunnel?.autoStart === true,\n      brokerUrl: config.tunnel?.brokerUrl ?? 'https://frp.xopc.ai/api',\n      registrationSecret: config.tunnel?.registrationSecret\n        ? maskTunnelSecretForWeb(config.tunnel.registrationSecret)\n        : '',\n      consent: config.tunnel?.consent\n        ? {\n            version: config.tunnel.consent.version,\n            acceptedAt: config.tunnel.consent.acceptedAt,\n          }\n        : undefined,\n      transport: { tls: 'broker_terminated' as const },\n    },\n    update: {\n      ...resolveUpdateConfigForWeb(config),\n    },\n    stt: maskSttConfigForWeb(config.tools?.media?.audio),\n    tts: maskTtsConfigForWeb(config.messages?.tts),\n    voice: config.voice,\n    tools: safeToolsWebForGet(config),\n    bindings: Array.isArray(config.bindings) ? config.bindings : [],\n    mcp: buildSafeMcpConfigForWeb(config),\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;kBAIuC;8BAKuB;kBAcI;kBACiB;gBACC;sBACR;AAM5E,SAAS,6BAA6B,YAAwC;CAC5E,MAAM,EAAE,WAAW,eAAeA,uBAAmB,CAAC;CAEtD,MAAM,OADQ,OAAO,YAAY,cACd;AACnB,QAAO,OAAO,QAAQ,YAAY,IAAI,MAAM,GAAG,IAAI,MAAM,GAAG,KAAA;;;AAI9D,eAAe,4BAA4B,UAAmC;CAE5E,MAAM,SAAS,MAAM,IADA,oBACQ,CAAC,0BAA0B,SAAS;AACjE,KAAI,OAAQ,QAAO,iBAAiB,OAAO;CAE3C,MAAM,iBAAiB,6BAA6B,SAAS;AAC7D,KAAI,eAAgB,QAAO,iBAAiB,eAAe;AAG3D,KAAI,qBAAqB,CAAC,IAAI,SAAS,CAAE,QAAO;AAEhD,KAAI,MAAM,qBAAqB,SAAS,CAAE,QAAO;AACjD,QAAO;;;AAIT,SAAgB,yBAAyB,QAAgB;CACvD,MAAM,MAAM,OAAO;AACnB,KAAI,CAAC,IACH,QAAO,EAAE,SAAS,EAAE,EAA6C;AAEnE,QAAO;EACL,GAAI,IAAI,qBAAqB,KAAA,IAAY,EAAE,kBAAkB,IAAI,kBAAkB,GAAG,EAAE;EACxF,SAAS,8BAA8B,IAAI,QAAQ;EACpD;;AAGH,SAAS,6BAA6B,OAAgD;AACpF,KAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,MAAM,CAC7D,QAAO;CAET,MAAM,MAAM;CACZ,MAAM,OAAgC,EAAE;AACxC,KAAI,OAAO,IAAI,WAAW,YAAY,IAAI,OAAO,MAAM,CACrD,MAAK,SAAS,iBAAiB,IAAI,OAAO;AAE5C,KAAI,OAAO,IAAI,cAAc,YAAY,IAAI,UAAU,MAAM,CAC3D,MAAK,YAAY,IAAI,UAAU,MAAM;AAEvC,KAAI,OAAO,IAAI,WAAW,YAAY,IAAI,OAAO,MAAM,CACrD,MAAK,SAAS,IAAI,OAAO,MAAM;AAEjC,QAAO,OAAO,KAAK,KAAK,CAAC,SAAS,IAAI,OAAO;;AAG/C,SAAgB,6BAA6B,SAAkB;AAC7D,KAAI,CAAC,WAAW,OAAO,YAAY,SACjC,QAAO;EACL,SAAS;EACT,UAAU;EACV,kBAAkB;EAClB,gBAAgB;EAChB,SAAS;EACT,eAAe;EACf,OAAO;EACP,QAAQ;EACR,WAAW;EACX,cAAc;EACd,UAAU;EACV,aAAa;EACb,cAAc;EACd,sBAAsB;EACvB;AAGH,QAAO;EACL,SAAU,QAAoC,YAAY;EAC1D,UAAW,QAAoC,aAAa;EAC5D,kBAAmB,QAAoC,qBAAqB;EAC5E,gBACE,OAAQ,QAAoC,mBAAmB,YAC/D,OAAO,SAAU,QAAoC,eAAyB,GAC1E,KAAK,MAAO,QAAoC,eAAyB,GACzE;EACN,SACG,QAAoC,YAAY,WAChD,QAAoC,YAAY,SAChD,QAAoC,YAAY,WAChD,QAAoC,YAAY,eAChD,QAAoC,YAAY,iBAC5C,QAAoC,UACrC;EACN,eACG,QAAoC,kBAAkB,iBACtD,QAAoC,kBAAkB,gBAClD,QAAoC,gBACrC;EACN,OAAO,6BAA8B,QAAoC,MAAM;EAC/E,QACE,OAAQ,QAAoC,WAAW,YACrD,QAAoC,OAAkB,MAAM,GACxD,QAAoC,OAAkB,MAAM,GAC9D;EACN,WACG,QAAoC,aACrC,OAAQ,QAAoC,cAAc,YAC1D,CAAC,MAAM,QAAS,QAAoC,UAAU,GACzD,QAAoC,YACvC;EACJ,cACG,QAAoC,gBACrC,OAAQ,QAAoC,iBAAiB,YAC7D,CAAC,MAAM,QAAS,QAAoC,aAAa,GAC5D,QAAoC,eACrC;EACN,UACE,OAAQ,QAAoC,aAAa,YACpD,QAAoC,WACrC;EACN,aACG,QAAoC,gBAAgB,aACpD,QAAoC,gBAAgB,YAChD,QAAoC,cACrC;EACN,cACG,QAAoC,iBAAiB,kBACrD,QAAoC,iBAAiB,iBACrD,QAAoC,iBAAiB,iBACjD,QAAoC,eACrC;EACN,sBACE,OAAQ,QAAoC,yBAAyB,YACrE,OAAO,SAAU,QAAoC,qBAA+B,GAChF,KAAK,MAAO,QAAoC,qBAA+B,GAC/E;EACP;;;AAIH,eAAsB,0BAA0B,SAAyB,UAA+B,EAAE,EAAE;CAC1G,MAAM,SAAS,QAAQ;CAGvB,MAAM,YADJ,OAAO,QAAQ,uBAAuB,aAAa,QAAQ,oBAAoB,GAAG,KAAA,IAClD,qBAAqB;CACvD,MAAM,UAAU,WACZ,gCAAgC,UAAU,EAAE,QAAQ,QAAQ,QAAQ,CAAC,GACrE,6BAA6B,QAAQ,EAAE,QAAQ,QAAQ,QAAQ,CAAC;CACpE,MAAM,kBAAkB,OAAO,YAC7B,QAAQ,QAAQ,KAAK,UAAU;EAC7B,MAAM,SACJ,OAAO,QAAQ,4BAA4B,aACvC,QAAQ,wBAAwB,MAAM,GAAG,GACzC,KAAA;EACN,MAAM,gBAAgB,MAAM,WAAW,WAAW,YAAY,GAC1D,MAAM,WAAW,MAAM,EAAmB,CAAC,MAAM,IAAI,CAAC,MAAM,MAAM,KAClE,MAAM;EACV,MAAM,aAAa,OAAO,WAAW;EACrC,MAAM,cAAc,sBAAsB,QAAQ,MAAM,IAAI,MAAM;AAClE,SAAO,CACL,MAAM,IACN;GACE,SAAS,YAAY;GACrB,YAAY,YAAY;GACxB;GACA,QAAQ,QAAQ,eAAe,mBAAmB,OAAO,IAAI,cAAc,EAAE;GAC7E,QAAQ,MAAM;GACd,SAAS,MAAM;GAChB,CACF;GACD,CACH;AACD,QAAO;EACL,QAAQ;GACN,WAAW,sBAAsB,OAAO;GACxC,MAAM,iBAAiB,OAAO,CAC3B,QAAQ,MAAM,EAAE,YAAY,MAAM,CAClC,KAAK,OAAO;IACX,IAAI,iBAAiB,EAAE,GAAG;IAC1B,UAAU,EAAE;IACZ,WAAW,EAAE;IACb,QAAQ,EAAE;IACV,OAAO,EAAE;IACT,QAAQ,EAAE;IACV,WAAW,EAAE;IACb,YAAY,EAAE;IACf,EAAE;GACL,mBAAmB,OAAO,QAAQ,qBAAqB,EAAE;GAC1D;EACD,UAAU;EACV,WAAW,OAAO,YAChB,MAAM,QAAQ,IACZ,iBAAiB,CAAC,IAAI,OAAO,aAAa,CACxC,UACA,MAAM,4BAA4B,SAAS,CAC5C,CAAC,CACH,CACF;;EAED,iBAAiB,+BAA+B,OAAO,UAAU;EACjE,SAAS;GACP,MAAM,OAAO,SAAS,QAAQ;GAC9B,gBAAgB,OAAO,SAAS;GAChC,MAAM,OAAO,SAAS;GACtB,aAAa,MAAM,QAAQ,OAAO,SAAS,YAAY,GAAG,OAAO,QAAQ,cAAc,EAAE;GACzF,gBAAgB,MAAM,QAAQ,OAAO,SAAS,eAAe,GACzD,OAAO,QAAQ,iBACf,EAAE;GACN,qBAAqB,OAAO,SAAS,wBAAwB;GAC7D,0CACE,OAAO,SAAS,6CAA6C;GAC/D,UAAU,EACR,QAAQ,OAAO,SAAS,UAAU,WAAW,MAC9C;GACD,MAAM;IACJ,MAAM,OAAO,SAAS,MAAM,QAAQ;IACpC,OAAO,OAAO,SAAS,MAAM,QAAQ,iBAAiB,OAAO,QAAQ,KAAK,MAAM,GAAG;IACnF,UAAU,OAAO,SAAS,MAAM,WAC5B,iBAAiB,OAAO,QAAQ,KAAK,SAAS,GAC9C;IACJ,cAAc,OAAO,SAAS,MAAM,eAChC;KACE,YAAY,OAAO,QAAQ,KAAK,aAAa;KAC7C,iBAAiB,OAAO,QAAQ,KAAK,aAAa,mBAAmB,EAAE;KACvE,YAAY,OAAO,QAAQ,KAAK,aAAa,cAAc,EAAE;KAC7D,eAAe,OAAO,QAAQ,KAAK,aAAa,kBAAkB;KACnE,GACD,KAAA;IACJ,WAAW;KACT,SAAS,OAAO,SAAS,MAAM,WAAW,YAAY;KACtD,aACE,OAAO,OAAO,SAAS,MAAM,WAAW,gBAAgB,WACpD,OAAO,QAAQ,KAAK,UAAU,cAC9B;KACN,UACE,OAAO,OAAO,SAAS,MAAM,WAAW,aAAa,WACjD,OAAO,QAAQ,KAAK,UAAU,WAC9B;KACN,iBACE,OAAO,OAAO,SAAS,MAAM,WAAW,oBAAoB,WACxD,OAAO,QAAQ,KAAK,UAAU,kBAC9B,OAAO,OAAO,SAAS,MAAM,WAAW,cAAc,WACpD,OAAO,QAAQ,KAAK,UAAU,YAC9B;KACR,gBAAgB,OAAO,SAAS,MAAM,WAAW,mBAAmB;KACrE;IACF;GACD,WAAW;IACT,SAAS,OAAO,SAAS,WAAW;IACpC,YAAY,OAAO,SAAS,WAAW;IACvC,4BAA4B,OAAO,SAAS,WAAW,+BAA+B;IACtF,QAAQ,OAAO,SAAS,WAAW;IACnC,cAAc,OAAO,SAAS,WAAW;IACzC,QAAQ,OAAO,SAAS,WAAW;IACnC,aAAa,OAAO,SAAS,WAAW;IACxC,iBAAiB,OAAO,SAAS,WAAW;IAC5C,aAAa,OAAO,SAAS,WAAW;IACzC;GACD,mBACE,OAAO,OAAO,SAAS,sBAAsB,WACzC,OAAO,QAAQ,oBACf;GACN,yBAAyB,OAAO,SAAS,2BAA2B;GACpE,wBAAwB,MAAM,QAAQ,OAAO,SAAS,uBAAuB,GACzE,OAAO,QAAQ,yBACf,EAAE;GACN,4BAA4B,MAAM,QAAQ,OAAO,SAAS,2BAA2B,GACjF,OAAO,QAAQ,6BACf,EAAE;GACN,OAAO,mBAAmB,OAAO,SAAS,MAAM;GAChD,WAAW,OAAO,SAAS,aAAa;GACxC,2BAA2B,OAAO,SAAS,6BAA6B;GACxE,oBAAoB,OAAO,SAAS,sBAAsB;GAC3D;EACD,SAAS,6BAA6B,OAAO,QAAQ;EACrD,OAAO,yBAAyB,OAAO;EACvC,SAAS,2BAA2B,OAAO;EAC3C,KAAK,EACH,cAAc,OAAO,KAAK,gBAAgB,SAC3C;EACD,QAAQ;GACN,SAAS,OAAO,QAAQ,YAAY;GACpC,WAAW,OAAO,QAAQ,cAAc;GACxC,WAAW,OAAO,QAAQ,aAAa;GACvC,oBAAoB,OAAO,QAAQ,qBAC/B,uBAAuB,OAAO,OAAO,mBAAmB,GACxD;GACJ,SAAS,OAAO,QAAQ,UACpB;IACE,SAAS,OAAO,OAAO,QAAQ;IAC/B,YAAY,OAAO,OAAO,QAAQ;IACnC,GACD,KAAA;GACJ,WAAW,EAAE,KAAK,qBAA8B;GACjD;EACD,QAAQ,EACN,GAAG,0BAA0B,OAAO,EACrC;EACD,KAAK,oBAAoB,OAAO,OAAO,OAAO,MAAM;EACpD,KAAK,oBAAoB,OAAO,UAAU,IAAI;EAC9C,OAAO,OAAO;EACd,OAAO,mBAAmB,OAAO;EACjC,UAAU,MAAM,QAAQ,OAAO,SAAS,GAAG,OAAO,WAAW,EAAE;EAC/D,KAAK,yBAAyB,OAAO;EACtC"}

package/dist/src/gateway/hono/routes/agents.js

@@ -1,4 +1,4 @@
-import { MemoryPolicySchema, ToolPolicySetSchema, init_schema } from "../../../agent-manifest/schema.js";
+import { ToolPolicySetSchema, init_schema } from "../../../agent-manifest/schema.js";
 import { AgentModelsSchema, init_schema as init_schema$1 } from "../../../config/schema.js";
 import { init_agent_scope, normalizeAgentId } from "../../../agent/agent-scope.js";
 import { getVoiceModelsConfig } from "../../../config/voice.js";
@@ -236,23 +236,17 @@ function registerAgentsRoutes(authenticated, deps) {
 			ok: false,
 			error: { message: modelsPatch.error }
 		}, 400);
-		let memoryPatch;
-		if (Object.hasOwn(body, "memory")) {
-			const parsedMemory = MemoryPolicySchema.safeParse(body.memory);
-			if (!parsedMemory.success) return c.json({
-				ok: false,
-				error: { message: `memory ${parsedMemory.error.issues[0]?.message ?? "is invalid"}` }
-			}, 400);
-			memoryPatch = parsedMemory.data;
-		}
+		if (Object.hasOwn(body, "memory")) return c.json({
+			ok: false,
+			error: { message: "Agent memory configuration is not supported; use userContext" }
+		}, 400);
 		const prep = prepareUpdateAgent(service.currentConfig, id, {
 			workspace: typeof body.workspace === "string" ? body.workspace : void 0,
 			...extendsPatch !== void 0 ? { extends: extendsPatch } : {},
 			...modelsPatch !== void 0 ? { models: modelsPatch } : {},
 			setDefault: body.setDefault === true,
 			...skillsPatch !== void 0 ? { skills: skillsPatch } : {},
-			...toolsPatch !== void 0 ? { tools: toolsPatch } : {},
-			...memoryPatch !== void 0 ? { memory: memoryPatch } : {}
+			...toolsPatch !== void 0 ? { tools: toolsPatch } : {}
 		});
 		if (prep.ok === false) return c.json({
 			ok: false,

package/dist/src/gateway/hono/routes/agents.js.map

@@ -1 +1 @@
-{"version":3,"file":"agents.js","names":[],"sources":["../../../../../src/gateway/hono/routes/agents.ts"],"sourcesContent":["import type { Hono } from 'hono';\n\nimport { AgentModelsSchema, type Config } from '../../../config/schema.js';\nimport { MemoryPolicySchema, ToolPolicySetSchema } from '../../../agent-manifest/schema.js';\nimport { getVoiceModelsConfig } from '../../../config/voice.js';\nimport { normalizeAgentId } from '../../../agent/agent-scope.js';\nimport {\n  deleteAgentAvatarFile,\n  finalizeCreateAgentDirs,\n  getGatewayAgentEffectiveManifest,\n  listAgentProfileFiles,\n  listGatewayAgents,\n  prepareCreateAgent,\n  prepareDeleteAgent,\n  prepareUpdateAgent,\n  readAgentAvatarFile,\n  readAgentProfileFile,\n  readUserProfileFile,\n  runAfterDeletePurge,\n  writeAgentAvatarFromBase64,\n  writeAgentProfileFile,\n  writeUserProfileFile,\n  type CreateAgentBody,\n} from '../../agents-admin.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\n\nfunction parseProfileFiles(raw: unknown): Record<string, string> | undefined | { error: string } {\n  if (raw === undefined) {\n    return undefined;\n  }\n  if (raw === null || typeof raw !== 'object' || Array.isArray(raw)) {\n    return { error: 'profileFiles must be an object' };\n  }\n  const profileFiles: Record<string, string> = {};\n  for (const [name, content] of Object.entries(raw as Record<string, unknown>)) {\n    if (typeof content !== 'string') {\n      return { error: `profileFiles[\"${name}\"] must be a string` };\n    }\n    profileFiles[name] = content;\n  }\n  return profileFiles;\n}\n\nfunction isParseError(value: unknown): value is { error: string } {\n  return (\n    typeof value === 'object' &&\n    value !== null &&\n    'error' in value &&\n    typeof (value as { error: string }).error === 'string'\n  );\n}\n\nfunction parseCreateAgentBody(raw: unknown): CreateAgentBody | { error: string } {\n  if (raw === null || typeof raw !== 'object' || Array.isArray(raw)) {\n    return { error: 'each agent must be an object' };\n  }\n  const body = raw as Record<string, unknown>;\n  if (Object.hasOwn(body, 'model')) {\n    return { error: 'model is not supported; use models.defaultRole and models.roles' };\n  }\n  if (Object.hasOwn(body, 'toolsDisable')) {\n    return { error: 'toolsDisable was removed; use tools.builtin policies' };\n  }\n  if (Object.hasOwn(body, 'typedModels')) {\n    return { error: 'typedModels is not supported; use models.roles' };\n  }\n  if (Object.hasOwn(body, 'agentDir')) {\n    return { error: 'agentDir was removed from agent manifests' };\n  }\n  if (Object.hasOwn(body, 'name')) {\n    return { error: 'name is not supported; write IDENTITY.md in profileFiles' };\n  }\n  if (Object.hasOwn(body, 'description')) {\n    return { error: 'description is not supported; write IDENTITY.md in profileFiles' };\n  }\n  const workspace = typeof body.workspace === 'string' ? body.workspace : '';\n  const models = Object.hasOwn(body, 'models')\n    ? AgentModelsSchema.safeParse(body.models)\n    : undefined;\n  if (models && !models.success) {\n    return { error: `models ${models.error.issues[0]?.message ?? 'is invalid'}` };\n  }\n  const id = typeof body.id === 'string' ? body.id : undefined;\n  const presetIds = Object.hasOwn(body, 'extends')\n    ? Array.isArray(body.extends)\n      ? body.extends.map((x: unknown) => normalizeAgentId(String(x))).filter(Boolean)\n      : null\n    : undefined;\n  if (presetIds === null) {\n    return { error: 'extends must be an array' };\n  }\n  const skills = Object.hasOwn(body, 'skills')\n    ? Array.isArray(body.skills)\n      ? body.skills.map((x: unknown) => String(x).trim()).filter(Boolean)\n      : null\n    : undefined;\n  if (skills === null) {\n    return { error: 'skills must be an array' };\n  }\n  const toolsRaw = Object.hasOwn(body, 'tools') ? body.tools : undefined;\n  let tools: CreateAgentBody['tools'] | undefined;\n  if (toolsRaw !== undefined) {\n    if (toolsRaw === null || typeof toolsRaw !== 'object' || Array.isArray(toolsRaw)) {\n      return { error: 'tools must be an object' };\n    }\n    const parsedTools = ToolPolicySetSchema.safeParse(toolsRaw);\n    if (!parsedTools.success) {\n      return { error: `tools ${parsedTools.error.issues[0]?.message ?? 'is invalid'}` };\n    }\n    tools = parsedTools.data;\n  }\n  let profileFiles: Record<string, string> | undefined;\n  if (Object.hasOwn(body, 'profileFiles')) {\n    const parsed = parseProfileFiles(body.profileFiles);\n    if (isParseError(parsed)) {\n      return parsed;\n    }\n    profileFiles = parsed;\n  }\n  if (!profileFiles?.['IDENTITY.md'] && typeof body.cloneFrom !== 'string') {\n    return { error: 'profileFiles.IDENTITY.md is required' };\n  }\n  const cloneFrom = typeof body.cloneFrom === 'string' ? body.cloneFrom : undefined;\n  return {\n    workspace,\n    ...(models && models.data !== undefined ? { models: models.data } : {}),\n    ...(id !== undefined ? { id } : {}),\n    ...(presetIds !== undefined ? { extends: presetIds } : {}),\n    ...(skills !== undefined ? { skills } : {}),\n    ...(tools !== undefined ? { tools } : {}),\n    ...(profileFiles !== undefined ? { profileFiles } : {}),\n    ...(cloneFrom !== undefined ? { cloneFrom } : {}),\n  };\n}\n\ntype PatchModels = {\n  defaultRole?: string | null;\n  roles?: Record<string, { model: string; fallbacks?: string[]; description?: string }>;\n};\n\nfunction parsePatchModels(raw: unknown): PatchModels | null | undefined | { error: string } {\n  if (raw === undefined) {\n    return undefined;\n  }\n  if (raw === null) {\n    return null;\n  }\n  if (typeof raw !== 'object' || Array.isArray(raw)) {\n    return { error: 'models must be an object or null' };\n  }\n  const body = raw as Record<string, unknown>;\n  const out: PatchModels = {};\n  if (Object.hasOwn(body, 'defaultRole')) {\n    out.defaultRole = body.defaultRole === null ? null : String(body.defaultRole ?? '').trim();\n  }\n  if (Object.hasOwn(body, 'roles')) {\n    if (body.roles === null) {\n      return { error: 'models.roles must be an object' };\n    } else {\n      const parsed = AgentModelsSchema.safeParse({ roles: body.roles });\n      if (!parsed.success) {\n        return { error: `models.roles ${parsed.error.issues[0]?.message ?? 'is invalid'}` };\n      }\n      out.roles = parsed.data?.roles;\n    }\n  }\n  return out;\n}\n\nexport function registerAgentsRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  const { service, strictRateLimitMiddleware } = deps;\n\n  authenticated.get('/api/agents', async (c) => {\n    const cfg = service.currentConfig as Config;\n    const locale = c.req.query('locale') || c.req.header('Accept-Language')?.split(',')[0]?.trim();\n    const payload = await listGatewayAgents(cfg, { locale });\n    return c.json({ ok: true, payload });\n  });\n\n  authenticated.get('/api/user-profile', async (c) => {\n    const res = await readUserProfileFile();\n    if (res.ok === false) {\n      return c.json({ ok: false, error: { message: res.error } }, res.status ?? 400);\n    }\n    return c.json({ ok: true, payload: res.data });\n  });\n\n  authenticated.put('/api/user-profile', strictRateLimitMiddleware, async (c) => {\n    let content = '';\n    try {\n      const body = (await c.req.json()) as { content?: unknown };\n      content = typeof body.content === 'string' ? body.content : '';\n    } catch {\n      return c.json({ ok: false, error: { message: 'Invalid JSON' } }, 400);\n    }\n    const res = await writeUserProfileFile(content);\n    if (res.ok === false) {\n      return c.json({ ok: false, error: { message: res.error } }, res.status ?? 400);\n    }\n    return c.json({ ok: true, payload: res.data });\n  });\n\n  authenticated.post('/api/agents', strictRateLimitMiddleware, async (c) => {\n    let body: Record<string, unknown> = {};\n    try {\n      body = (await c.req.json()) as Record<string, unknown>;\n    } catch {\n      return c.json({ ok: false, error: { message: 'Invalid JSON' } }, 400);\n    }\n    const parsed = parseCreateAgentBody(body);\n    if ('error' in parsed) {\n      return c.json({ ok: false, error: { message: parsed.error } }, 400);\n    }\n    const prep = prepareCreateAgent(service.currentConfig as Config, parsed);\n    if (prep.ok === false) {\n      return c.json({ ok: false, error: { message: prep.error } }, prep.status ?? 400);\n    }\n    const { nextConfig, agentId } = prep.data;\n    const save = await service.saveConfig(nextConfig);\n    if (!save.saved) {\n      return c.json({ ok: false, error: { message: save.error ?? 'save failed' } }, 500);\n    }\n    const finalized = await finalizeCreateAgentDirs(service.currentConfig as Config, agentId, {\n      ...(parsed.profileFiles !== undefined ? { profileFiles: parsed.profileFiles } : {}),\n      ...(parsed.cloneFrom ? { cloneFrom: parsed.cloneFrom } : {}),\n    });\n    if (finalized.ok === false) {\n      return c.json({ ok: false, error: { message: finalized.error } }, finalized.status ?? 400);\n    }\n    const locale = c.req.query('locale') || c.req.header('Accept-Language')?.split(',')[0]?.trim();\n    const agentsPayload = await listGatewayAgents(service.currentConfig as Config, { locale });\n    return c.json({\n      ok: true,\n      payload: {\n        agentId,\n        agents: agentsPayload,\n      },\n    });\n  });\n\n  authenticated.get('/api/agents/:id/effective-manifest', async (c) => {\n    const id = normalizeAgentId(c.req.param('id') ?? '');\n    const res = getGatewayAgentEffectiveManifest(service.currentConfig as Config, id);\n    if (res.ok === false) {\n      return c.json({ ok: false, error: { message: res.error } }, res.status ?? 400);\n    }\n    return c.json({ ok: true, payload: res.data });\n  });\n\n  authenticated.patch('/api/agents/:id', strictRateLimitMiddleware, async (c) => {\n    const id = normalizeAgentId(c.req.param('id') ?? '');\n    let body: Record<string, unknown> = {};\n    try {\n      body = (await c.req.json()) as Record<string, unknown>;\n    } catch {\n      return c.json({ ok: false, error: { message: 'Invalid JSON' } }, 400);\n    }\n    if (Object.hasOwn(body, 'model')) {\n      return c.json({ ok: false, error: { message: 'model is not supported; use models.defaultRole and models.roles' } }, 400);\n    }\n    if (Object.hasOwn(body, 'typedModels')) {\n      return c.json({ ok: false, error: { message: 'typedModels is not supported; use models.roles' } }, 400);\n    }\n    if (Object.hasOwn(body, 'toolsDisable')) {\n      return c.json({ ok: false, error: { message: 'toolsDisable was removed; use tools.builtin policies' } }, 400);\n    }\n    if (Object.hasOwn(body, 'agentDir')) {\n      return c.json({ ok: false, error: { message: 'agentDir was removed from agent manifests' } }, 400);\n    }\n    if (Object.hasOwn(body, 'name')) {\n      return c.json({ ok: false, error: { message: 'name is not supported; edit IDENTITY.md' } }, 400);\n    }\n    if (Object.hasOwn(body, 'description')) {\n      return c.json({ ok: false, error: { message: 'description is not supported; edit IDENTITY.md' } }, 400);\n    }\n    const skillsPatch =\n      body.skills === null\n        ? null\n        : Array.isArray(body.skills)\n          ? body.skills.map((x: unknown) => String(x).trim()).filter(Boolean)\n          : undefined;\n    const extendsPatch = Object.hasOwn(body, 'extends')\n      ? Array.isArray(body.extends)\n        ? body.extends.map((x: unknown) => String(x).trim()).filter(Boolean)\n        : undefined\n      : undefined;\n    if (Object.hasOwn(body, 'extends') && extendsPatch === undefined) {\n      return c.json({ ok: false, error: { message: 'extends must be an array' } }, 400);\n    }\n    let toolsPatch: CreateAgentBody['tools'] | null | undefined;\n    if (Object.hasOwn(body, 'tools')) {\n      if (body.tools === null) {\n        toolsPatch = null;\n      } else if (typeof body.tools === 'object' && !Array.isArray(body.tools)) {\n        const parsedTools = ToolPolicySetSchema.safeParse(body.tools);\n        if (!parsedTools.success) {\n          return c.json({ ok: false, error: { message: `tools ${parsedTools.error.issues[0]?.message ?? 'is invalid'}` } }, 400);\n        }\n        toolsPatch = parsedTools.data;\n      } else {\n        return c.json({ ok: false, error: { message: 'tools must be an object or null' } }, 400);\n      }\n    }\n    const modelsPatch = Object.hasOwn(body, 'models') ? parsePatchModels(body.models) : undefined;\n    if (isParseError(modelsPatch)) {\n      return c.json({ ok: false, error: { message: modelsPatch.error } }, 400);\n    }\n    let memoryPatch: Config['agents']['list'][number]['memory'] | undefined;\n    if (Object.hasOwn(body, 'memory')) {\n      const parsedMemory = MemoryPolicySchema.safeParse(body.memory);\n      if (!parsedMemory.success) {\n        return c.json({ ok: false, error: { message: `memory ${parsedMemory.error.issues[0]?.message ?? 'is invalid'}` } }, 400);\n      }\n      memoryPatch = parsedMemory.data;\n    }\n\n    const prep = prepareUpdateAgent(service.currentConfig as Config, id, {\n      workspace: typeof body.workspace === 'string' ? body.workspace : undefined,\n      ...(extendsPatch !== undefined ? { extends: extendsPatch } : {}),\n      ...(modelsPatch !== undefined ? { models: modelsPatch } : {}),\n      setDefault: body.setDefault === true,\n      ...(skillsPatch !== undefined ? { skills: skillsPatch } : {}),\n      ...(toolsPatch !== undefined ? { tools: toolsPatch } : {}),\n      ...(memoryPatch !== undefined ? { memory: memoryPatch } : {}),\n    });\n    if (prep.ok === false) {\n      return c.json({ ok: false, error: { message: prep.error } }, prep.status ?? 400);\n    }\n    const save = await service.saveConfig(prep.data.nextConfig);\n    if (!save.saved) {\n      return c.json({ ok: false, error: { message: save.error ?? 'save failed' } }, 500);\n    }\n    const locale = c.req.query('locale') || c.req.header('Accept-Language')?.split(',')[0]?.trim();\n    const agentsPayload = await listGatewayAgents(service.currentConfig as Config, { locale });\n    return c.json({ ok: true, payload: agentsPayload });\n  });\n\n  authenticated.delete('/api/agents/:id', strictRateLimitMiddleware, async (c) => {\n    const id = normalizeAgentId(c.req.param('id') ?? '');\n    const purge = c.req.query('purge') === '1' || c.req.query('purge') === 'true';\n    const prep = prepareDeleteAgent(service.currentConfig as Config, id);\n    if (prep.ok === false) {\n      return c.json({ ok: false, error: { message: prep.error } }, prep.status ?? 400);\n    }\n    const { nextConfig, agentId } = prep.data;\n    const save = await service.saveConfig(nextConfig);\n    if (!save.saved) {\n      return c.json({ ok: false, error: { message: save.error ?? 'save failed' } }, 500);\n    }\n    if (purge) {\n      await runAfterDeletePurge(service.currentConfig as Config, agentId);\n    }\n    const locale = c.req.query('locale') || c.req.header('Accept-Language')?.split(',')[0]?.trim();\n    const agentsPayload = await listGatewayAgents(service.currentConfig as Config, { locale });\n    return c.json({\n      ok: true,\n      payload: { agentId, purged: purge, agents: agentsPayload },\n    });\n  });\n\n  authenticated.get('/api/agents/:id/avatar', async (c) => {\n    const id = normalizeAgentId(c.req.param('id') ?? '');\n    const res = await readAgentAvatarFile(service.currentConfig as Config, id);\n    if (res.ok === false) {\n      return c.json({ ok: false, error: { message: res.error } }, res.status ?? 400);\n    }\n    return new Response(res.data.buffer, {\n      status: 200,\n      headers: {\n        'Content-Type': res.data.contentType,\n        'Cache-Control': 'private, max-age=3600',\n      },\n    });\n  });\n\n  authenticated.put('/api/agents/:id/avatar', strictRateLimitMiddleware, async (c) => {\n    const id = normalizeAgentId(c.req.param('id') ?? '');\n    let body: Record<string, unknown> = {};\n    try {\n      body = (await c.req.json()) as Record<string, unknown>;\n    } catch {\n      return c.json({ ok: false, error: { message: 'Invalid JSON' } }, 400);\n    }\n    const base64 = typeof body.base64 === 'string' ? body.base64 : '';\n    const mimeType = typeof body.mimeType === 'string' ? body.mimeType : '';\n    const res = await writeAgentAvatarFromBase64(service.currentConfig as Config, id, base64, mimeType);\n    if (res.ok === false) {\n      return c.json({ ok: false, error: { message: res.error } }, res.status ?? 400);\n    }\n    return c.json({ ok: true, payload: { agentId: res.data.agentId } });\n  });\n\n  authenticated.delete('/api/agents/:id/avatar', strictRateLimitMiddleware, async (c) => {\n    const id = normalizeAgentId(c.req.param('id') ?? '');\n    const res = await deleteAgentAvatarFile(service.currentConfig as Config, id);\n    if (res.ok === false) {\n      return c.json({ ok: false, error: { message: res.error } }, res.status ?? 400);\n    }\n    return c.json({ ok: true, payload: { agentId: res.data.agentId } });\n  });\n\n  authenticated.get('/api/agents/:id/files', async (c) => {\n    const id = normalizeAgentId(c.req.param('id') ?? '');\n    const res = await listAgentProfileFiles(service.currentConfig as Config, id);\n    if (res.ok === false) {\n      return c.json({ ok: false, error: { message: res.error } }, res.status ?? 400);\n    }\n    return c.json({ ok: true, payload: res.data });\n  });\n\n  authenticated.get('/api/agents/:id/files/:name', async (c) => {\n    const id = normalizeAgentId(c.req.param('id') ?? '');\n    const name = decodeURIComponent(c.req.param('name') ?? '');\n    const res = await readAgentProfileFile(service.currentConfig as Config, id, name);\n    if (res.ok === false) {\n      return c.json({ ok: false, error: { message: res.error } }, res.status ?? 400);\n    }\n    return c.json({ ok: true, payload: { agentId: res.data.agentId, name, content: res.data.content } });\n  });\n\n  authenticated.put('/api/agents/:id/files/:name', strictRateLimitMiddleware, async (c) => {\n    const id = normalizeAgentId(c.req.param('id') ?? '');\n    const name = decodeURIComponent(c.req.param('name') ?? '');\n    let content = '';\n    try {\n      const body = (await c.req.json()) as { content?: unknown };\n      content = typeof body.content === 'string' ? body.content : '';\n    } catch {\n      return c.json({ ok: false, error: { message: 'Invalid JSON' } }, 400);\n    }\n    const res = await writeAgentProfileFile(service.currentConfig as Config, id, name, content);\n    if (res.ok === false) {\n      return c.json({ ok: false, error: { message: res.error } }, res.status ?? 400);\n    }\n    return c.json({ ok: true, payload: { agentId: res.data.agentId, name } });\n  });\n\n  // GET /api/voice/models - Get available STT/TTS models\n  authenticated.get('/api/voice/models', (c) => {\n    const models = getVoiceModelsConfig();\n    return c.json({ ok: true, payload: { models } });\n  });\n\n}\n"],"mappings":";;;;;;eAE2E;aACiB;kBAE3B;AAqBjE,SAAS,kBAAkB,KAAsE;AAC/F,KAAI,QAAQ,KAAA,EACV;AAEF,KAAI,QAAQ,QAAQ,OAAO,QAAQ,YAAY,MAAM,QAAQ,IAAI,CAC/D,QAAO,EAAE,OAAO,kCAAkC;CAEpD,MAAM,eAAuC,EAAE;AAC/C,MAAK,MAAM,CAAC,MAAM,YAAY,OAAO,QAAQ,IAA+B,EAAE;AAC5E,MAAI,OAAO,YAAY,SACrB,QAAO,EAAE,OAAO,iBAAiB,KAAK,sBAAsB;AAE9D,eAAa,QAAQ;;AAEvB,QAAO;;AAGT,SAAS,aAAa,OAA4C;AAChE,QACE,OAAO,UAAU,YACjB,UAAU,QACV,WAAW,SACX,OAAQ,MAA4B,UAAU;;AAIlD,SAAS,qBAAqB,KAAmD;AAC/E,KAAI,QAAQ,QAAQ,OAAO,QAAQ,YAAY,MAAM,QAAQ,IAAI,CAC/D,QAAO,EAAE,OAAO,gCAAgC;CAElD,MAAM,OAAO;AACb,KAAI,OAAO,OAAO,MAAM,QAAQ,CAC9B,QAAO,EAAE,OAAO,mEAAmE;AAErF,KAAI,OAAO,OAAO,MAAM,eAAe,CACrC,QAAO,EAAE,OAAO,wDAAwD;AAE1E,KAAI,OAAO,OAAO,MAAM,cAAc,CACpC,QAAO,EAAE,OAAO,kDAAkD;AAEpE,KAAI,OAAO,OAAO,MAAM,WAAW,CACjC,QAAO,EAAE,OAAO,6CAA6C;AAE/D,KAAI,OAAO,OAAO,MAAM,OAAO,CAC7B,QAAO,EAAE,OAAO,4DAA4D;AAE9E,KAAI,OAAO,OAAO,MAAM,cAAc,CACpC,QAAO,EAAE,OAAO,mEAAmE;CAErF,MAAM,YAAY,OAAO,KAAK,cAAc,WAAW,KAAK,YAAY;CACxE,MAAM,SAAS,OAAO,OAAO,MAAM,SAAS,GACxC,kBAAkB,UAAU,KAAK,OAAO,GACxC,KAAA;AACJ,KAAI,UAAU,CAAC,OAAO,QACpB,QAAO,EAAE,OAAO,UAAU,OAAO,MAAM,OAAO,IAAI,WAAW,gBAAgB;CAE/E,MAAM,KAAK,OAAO,KAAK,OAAO,WAAW,KAAK,KAAK,KAAA;CACnD,MAAM,YAAY,OAAO,OAAO,MAAM,UAAU,GAC5C,MAAM,QAAQ,KAAK,QAAQ,GACzB,KAAK,QAAQ,KAAK,MAAe,iBAAiB,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,QAAQ,GAC7E,OACF,KAAA;AACJ,KAAI,cAAc,KAChB,QAAO,EAAE,OAAO,4BAA4B;CAE9C,MAAM,SAAS,OAAO,OAAO,MAAM,SAAS,GACxC,MAAM,QAAQ,KAAK,OAAO,GACxB,KAAK,OAAO,KAAK,MAAe,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC,OAAO,QAAQ,GACjE,OACF,KAAA;AACJ,KAAI,WAAW,KACb,QAAO,EAAE,OAAO,2BAA2B;CAE7C,MAAM,WAAW,OAAO,OAAO,MAAM,QAAQ,GAAG,KAAK,QAAQ,KAAA;CAC7D,IAAI;AACJ,KAAI,aAAa,KAAA,GAAW;AAC1B,MAAI,aAAa,QAAQ,OAAO,aAAa,YAAY,MAAM,QAAQ,SAAS,CAC9E,QAAO,EAAE,OAAO,2BAA2B;EAE7C,MAAM,cAAc,oBAAoB,UAAU,SAAS;AAC3D,MAAI,CAAC,YAAY,QACf,QAAO,EAAE,OAAO,SAAS,YAAY,MAAM,OAAO,IAAI,WAAW,gBAAgB;AAEnF,UAAQ,YAAY;;CAEtB,IAAI;AACJ,KAAI,OAAO,OAAO,MAAM,eAAe,EAAE;EACvC,MAAM,SAAS,kBAAkB,KAAK,aAAa;AACnD,MAAI,aAAa,OAAO,CACtB,QAAO;AAET,iBAAe;;AAEjB,KAAI,CAAC,eAAe,kBAAkB,OAAO,KAAK,cAAc,SAC9D,QAAO,EAAE,OAAO,wCAAwC;CAE1D,MAAM,YAAY,OAAO,KAAK,cAAc,WAAW,KAAK,YAAY,KAAA;AACxE,QAAO;EACL;EACA,GAAI,UAAU,OAAO,SAAS,KAAA,IAAY,EAAE,QAAQ,OAAO,MAAM,GAAG,EAAE;EACtE,GAAI,OAAO,KAAA,IAAY,EAAE,IAAI,GAAG,EAAE;EAClC,GAAI,cAAc,KAAA,IAAY,EAAE,SAAS,WAAW,GAAG,EAAE;EACzD,GAAI,WAAW,KAAA,IAAY,EAAE,QAAQ,GAAG,EAAE;EAC1C,GAAI,UAAU,KAAA,IAAY,EAAE,OAAO,GAAG,EAAE;EACxC,GAAI,iBAAiB,KAAA,IAAY,EAAE,cAAc,GAAG,EAAE;EACtD,GAAI,cAAc,KAAA,IAAY,EAAE,WAAW,GAAG,EAAE;EACjD;;AAQH,SAAS,iBAAiB,KAAkE;AAC1F,KAAI,QAAQ,KAAA,EACV;AAEF,KAAI,QAAQ,KACV,QAAO;AAET,KAAI,OAAO,QAAQ,YAAY,MAAM,QAAQ,IAAI,CAC/C,QAAO,EAAE,OAAO,oCAAoC;CAEtD,MAAM,OAAO;CACb,MAAM,MAAmB,EAAE;AAC3B,KAAI,OAAO,OAAO,MAAM,cAAc,CACpC,KAAI,cAAc,KAAK,gBAAgB,OAAO,OAAO,OAAO,KAAK,eAAe,GAAG,CAAC,MAAM;AAE5F,KAAI,OAAO,OAAO,MAAM,QAAQ,CAC9B,KAAI,KAAK,UAAU,KACjB,QAAO,EAAE,OAAO,kCAAkC;MAC7C;EACL,MAAM,SAAS,kBAAkB,UAAU,EAAE,OAAO,KAAK,OAAO,CAAC;AACjE,MAAI,CAAC,OAAO,QACV,QAAO,EAAE,OAAO,gBAAgB,OAAO,MAAM,OAAO,IAAI,WAAW,gBAAgB;AAErF,MAAI,QAAQ,OAAO,MAAM;;AAG7B,QAAO;;AAGT,SAAgB,qBAAqB,eAAqB,MAAoC;CAC5F,MAAM,EAAE,SAAS,8BAA8B;AAE/C,eAAc,IAAI,eAAe,OAAO,MAAM;EAC5C,MAAM,MAAM,QAAQ;EAEpB,MAAM,UAAU,MAAM,kBAAkB,KAAK,EAAE,QADhC,EAAE,IAAI,MAAM,SAAS,IAAI,EAAE,IAAI,OAAO,kBAAkB,EAAE,MAAM,IAAI,CAAC,IAAI,MAAM,EACvC,CAAC;AACxD,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM;GAAS,CAAC;GACpC;AAEF,eAAc,IAAI,qBAAqB,OAAO,MAAM;EAClD,MAAM,MAAM,MAAM,qBAAqB;AACvC,MAAI,IAAI,OAAO,MACb,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,IAAI,OAAO;GAAE,EAAE,IAAI,UAAU,IAAI;AAEhF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,IAAI;GAAM,CAAC;GAC9C;AAEF,eAAc,IAAI,qBAAqB,2BAA2B,OAAO,MAAM;EAC7E,IAAI,UAAU;AACd,MAAI;GACF,MAAM,OAAQ,MAAM,EAAE,IAAI,MAAM;AAChC,aAAU,OAAO,KAAK,YAAY,WAAW,KAAK,UAAU;UACtD;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS,gBAAgB;IAAE,EAAE,IAAI;;EAEvE,MAAM,MAAM,MAAM,qBAAqB,QAAQ;AAC/C,MAAI,IAAI,OAAO,MACb,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,IAAI,OAAO;GAAE,EAAE,IAAI,UAAU,IAAI;AAEhF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,IAAI;GAAM,CAAC;GAC9C;AAEF,eAAc,KAAK,eAAe,2BAA2B,OAAO,MAAM;EACxE,IAAI,OAAgC,EAAE;AACtC,MAAI;AACF,UAAQ,MAAM,EAAE,IAAI,MAAM;UACpB;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS,gBAAgB;IAAE,EAAE,IAAI;;EAEvE,MAAM,SAAS,qBAAqB,KAAK;AACzC,MAAI,WAAW,OACb,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,OAAO,OAAO;GAAE,EAAE,IAAI;EAErE,MAAM,OAAO,mBAAmB,QAAQ,eAAyB,OAAO;AACxE,MAAI,KAAK,OAAO,MACd,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,KAAK,OAAO;GAAE,EAAE,KAAK,UAAU,IAAI;EAElF,MAAM,EAAE,YAAY,YAAY,KAAK;EACrC,MAAM,OAAO,MAAM,QAAQ,WAAW,WAAW;AACjD,MAAI,CAAC,KAAK,MACR,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,KAAK,SAAS,eAAe;GAAE,EAAE,IAAI;EAEpF,MAAM,YAAY,MAAM,wBAAwB,QAAQ,eAAyB,SAAS;GACxF,GAAI,OAAO,iBAAiB,KAAA,IAAY,EAAE,cAAc,OAAO,cAAc,GAAG,EAAE;GAClF,GAAI,OAAO,YAAY,EAAE,WAAW,OAAO,WAAW,GAAG,EAAE;GAC5D,CAAC;AACF,MAAI,UAAU,OAAO,MACnB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,UAAU,OAAO;GAAE,EAAE,UAAU,UAAU,IAAI;EAE5F,MAAM,SAAS,EAAE,IAAI,MAAM,SAAS,IAAI,EAAE,IAAI,OAAO,kBAAkB,EAAE,MAAM,IAAI,CAAC,IAAI,MAAM;EAC9F,MAAM,gBAAgB,MAAM,kBAAkB,QAAQ,eAAyB,EAAE,QAAQ,CAAC;AAC1F,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP;IACA,QAAQ;IACT;GACF,CAAC;GACF;AAEF,eAAc,IAAI,sCAAsC,OAAO,MAAM;EACnE,MAAM,KAAK,iBAAiB,EAAE,IAAI,MAAM,KAAK,IAAI,GAAG;EACpD,MAAM,MAAM,iCAAiC,QAAQ,eAAyB,GAAG;AACjF,MAAI,IAAI,OAAO,MACb,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,IAAI,OAAO;GAAE,EAAE,IAAI,UAAU,IAAI;AAEhF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,IAAI;GAAM,CAAC;GAC9C;AAEF,eAAc,MAAM,mBAAmB,2BAA2B,OAAO,MAAM;EAC7E,MAAM,KAAK,iBAAiB,EAAE,IAAI,MAAM,KAAK,IAAI,GAAG;EACpD,IAAI,OAAgC,EAAE;AACtC,MAAI;AACF,UAAQ,MAAM,EAAE,IAAI,MAAM;UACpB;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS,gBAAgB;IAAE,EAAE,IAAI;;AAEvE,MAAI,OAAO,OAAO,MAAM,QAAQ,CAC9B,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,mEAAmE;GAAE,EAAE,IAAI;AAE1H,MAAI,OAAO,OAAO,MAAM,cAAc,CACpC,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,kDAAkD;GAAE,EAAE,IAAI;AAEzG,MAAI,OAAO,OAAO,MAAM,eAAe,CACrC,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,wDAAwD;GAAE,EAAE,IAAI;AAE/G,MAAI,OAAO,OAAO,MAAM,WAAW,CACjC,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,6CAA6C;GAAE,EAAE,IAAI;AAEpG,MAAI,OAAO,OAAO,MAAM,OAAO,CAC7B,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,2CAA2C;GAAE,EAAE,IAAI;AAElG,MAAI,OAAO,OAAO,MAAM,cAAc,CACpC,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,kDAAkD;GAAE,EAAE,IAAI;EAEzG,MAAM,cACJ,KAAK,WAAW,OACZ,OACA,MAAM,QAAQ,KAAK,OAAO,GACxB,KAAK,OAAO,KAAK,MAAe,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC,OAAO,QAAQ,GACjE,KAAA;EACR,MAAM,eAAe,OAAO,OAAO,MAAM,UAAU,GAC/C,MAAM,QAAQ,KAAK,QAAQ,GACzB,KAAK,QAAQ,KAAK,MAAe,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC,OAAO,QAAQ,GAClE,KAAA,IACF,KAAA;AACJ,MAAI,OAAO,OAAO,MAAM,UAAU,IAAI,iBAAiB,KAAA,EACrD,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,4BAA4B;GAAE,EAAE,IAAI;EAEnF,IAAI;AACJ,MAAI,OAAO,OAAO,MAAM,QAAQ,CAC9B,KAAI,KAAK,UAAU,KACjB,cAAa;WACJ,OAAO,KAAK,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK,MAAM,EAAE;GACvE,MAAM,cAAc,oBAAoB,UAAU,KAAK,MAAM;AAC7D,OAAI,CAAC,YAAY,QACf,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS,SAAS,YAAY,MAAM,OAAO,IAAI,WAAW,gBAAgB;IAAE,EAAE,IAAI;AAExH,gBAAa,YAAY;QAEzB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,mCAAmC;GAAE,EAAE,IAAI;EAG5F,MAAM,cAAc,OAAO,OAAO,MAAM,SAAS,GAAG,iBAAiB,KAAK,OAAO,GAAG,KAAA;AACpF,MAAI,aAAa,YAAY,CAC3B,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,YAAY,OAAO;GAAE,EAAE,IAAI;EAE1E,IAAI;AACJ,MAAI,OAAO,OAAO,MAAM,SAAS,EAAE;GACjC,MAAM,eAAe,mBAAmB,UAAU,KAAK,OAAO;AAC9D,OAAI,CAAC,aAAa,QAChB,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS,UAAU,aAAa,MAAM,OAAO,IAAI,WAAW,gBAAgB;IAAE,EAAE,IAAI;AAE1H,iBAAc,aAAa;;EAG7B,MAAM,OAAO,mBAAmB,QAAQ,eAAyB,IAAI;GACnE,WAAW,OAAO,KAAK,cAAc,WAAW,KAAK,YAAY,KAAA;GACjE,GAAI,iBAAiB,KAAA,IAAY,EAAE,SAAS,cAAc,GAAG,EAAE;GAC/D,GAAI,gBAAgB,KAAA,IAAY,EAAE,QAAQ,aAAa,GAAG,EAAE;GAC5D,YAAY,KAAK,eAAe;GAChC,GAAI,gBAAgB,KAAA,IAAY,EAAE,QAAQ,aAAa,GAAG,EAAE;GAC5D,GAAI,eAAe,KAAA,IAAY,EAAE,OAAO,YAAY,GAAG,EAAE;GACzD,GAAI,gBAAgB,KAAA,IAAY,EAAE,QAAQ,aAAa,GAAG,EAAE;GAC7D,CAAC;AACF,MAAI,KAAK,OAAO,MACd,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,KAAK,OAAO;GAAE,EAAE,KAAK,UAAU,IAAI;EAElF,MAAM,OAAO,MAAM,QAAQ,WAAW,KAAK,KAAK,WAAW;AAC3D,MAAI,CAAC,KAAK,MACR,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,KAAK,SAAS,eAAe;GAAE,EAAE,IAAI;EAEpF,MAAM,SAAS,EAAE,IAAI,MAAM,SAAS,IAAI,EAAE,IAAI,OAAO,kBAAkB,EAAE,MAAM,IAAI,CAAC,IAAI,MAAM;EAC9F,MAAM,gBAAgB,MAAM,kBAAkB,QAAQ,eAAyB,EAAE,QAAQ,CAAC;AAC1F,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;GAAe,CAAC;GACnD;AAEF,eAAc,OAAO,mBAAmB,2BAA2B,OAAO,MAAM;EAC9E,MAAM,KAAK,iBAAiB,EAAE,IAAI,MAAM,KAAK,IAAI,GAAG;EACpD,MAAM,QAAQ,EAAE,IAAI,MAAM,QAAQ,KAAK,OAAO,EAAE,IAAI,MAAM,QAAQ,KAAK;EACvE,MAAM,OAAO,mBAAmB,QAAQ,eAAyB,GAAG;AACpE,MAAI,KAAK,OAAO,MACd,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,KAAK,OAAO;GAAE,EAAE,KAAK,UAAU,IAAI;EAElF,MAAM,EAAE,YAAY,YAAY,KAAK;EACrC,MAAM,OAAO,MAAM,QAAQ,WAAW,WAAW;AACjD,MAAI,CAAC,KAAK,MACR,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,KAAK,SAAS,eAAe;GAAE,EAAE,IAAI;AAEpF,MAAI,MACF,OAAM,oBAAoB,QAAQ,eAAyB,QAAQ;EAErE,MAAM,SAAS,EAAE,IAAI,MAAM,SAAS,IAAI,EAAE,IAAI,OAAO,kBAAkB,EAAE,MAAM,IAAI,CAAC,IAAI,MAAM;EAC9F,MAAM,gBAAgB,MAAM,kBAAkB,QAAQ,eAAyB,EAAE,QAAQ,CAAC;AAC1F,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IAAE;IAAS,QAAQ;IAAO,QAAQ;IAAe;GAC3D,CAAC;GACF;AAEF,eAAc,IAAI,0BAA0B,OAAO,MAAM;EACvD,MAAM,KAAK,iBAAiB,EAAE,IAAI,MAAM,KAAK,IAAI,GAAG;EACpD,MAAM,MAAM,MAAM,oBAAoB,QAAQ,eAAyB,GAAG;AAC1E,MAAI,IAAI,OAAO,MACb,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,IAAI,OAAO;GAAE,EAAE,IAAI,UAAU,IAAI;AAEhF,SAAO,IAAI,SAAS,IAAI,KAAK,QAAQ;GACnC,QAAQ;GACR,SAAS;IACP,gBAAgB,IAAI,KAAK;IACzB,iBAAiB;IAClB;GACF,CAAC;GACF;AAEF,eAAc,IAAI,0BAA0B,2BAA2B,OAAO,MAAM;EAClF,MAAM,KAAK,iBAAiB,EAAE,IAAI,MAAM,KAAK,IAAI,GAAG;EACpD,IAAI,OAAgC,EAAE;AACtC,MAAI;AACF,UAAQ,MAAM,EAAE,IAAI,MAAM;UACpB;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS,gBAAgB;IAAE,EAAE,IAAI;;EAEvE,MAAM,SAAS,OAAO,KAAK,WAAW,WAAW,KAAK,SAAS;EAC/D,MAAM,WAAW,OAAO,KAAK,aAAa,WAAW,KAAK,WAAW;EACrE,MAAM,MAAM,MAAM,2BAA2B,QAAQ,eAAyB,IAAI,QAAQ,SAAS;AACnG,MAAI,IAAI,OAAO,MACb,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,IAAI,OAAO;GAAE,EAAE,IAAI,UAAU,IAAI;AAEhF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,SAAS,IAAI,KAAK,SAAS;GAAE,CAAC;GACnE;AAEF,eAAc,OAAO,0BAA0B,2BAA2B,OAAO,MAAM;EACrF,MAAM,KAAK,iBAAiB,EAAE,IAAI,MAAM,KAAK,IAAI,GAAG;EACpD,MAAM,MAAM,MAAM,sBAAsB,QAAQ,eAAyB,GAAG;AAC5E,MAAI,IAAI,OAAO,MACb,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,IAAI,OAAO;GAAE,EAAE,IAAI,UAAU,IAAI;AAEhF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,SAAS,IAAI,KAAK,SAAS;GAAE,CAAC;GACnE;AAEF,eAAc,IAAI,yBAAyB,OAAO,MAAM;EACtD,MAAM,KAAK,iBAAiB,EAAE,IAAI,MAAM,KAAK,IAAI,GAAG;EACpD,MAAM,MAAM,MAAM,sBAAsB,QAAQ,eAAyB,GAAG;AAC5E,MAAI,IAAI,OAAO,MACb,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,IAAI,OAAO;GAAE,EAAE,IAAI,UAAU,IAAI;AAEhF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,IAAI;GAAM,CAAC;GAC9C;AAEF,eAAc,IAAI,+BAA+B,OAAO,MAAM;EAC5D,MAAM,KAAK,iBAAiB,EAAE,IAAI,MAAM,KAAK,IAAI,GAAG;EACpD,MAAM,OAAO,mBAAmB,EAAE,IAAI,MAAM,OAAO,IAAI,GAAG;EAC1D,MAAM,MAAM,MAAM,qBAAqB,QAAQ,eAAyB,IAAI,KAAK;AACjF,MAAI,IAAI,OAAO,MACb,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,IAAI,OAAO;GAAE,EAAE,IAAI,UAAU,IAAI;AAEhF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;IAAE,SAAS,IAAI,KAAK;IAAS;IAAM,SAAS,IAAI,KAAK;IAAS;GAAE,CAAC;GACpG;AAEF,eAAc,IAAI,+BAA+B,2BAA2B,OAAO,MAAM;EACvF,MAAM,KAAK,iBAAiB,EAAE,IAAI,MAAM,KAAK,IAAI,GAAG;EACpD,MAAM,OAAO,mBAAmB,EAAE,IAAI,MAAM,OAAO,IAAI,GAAG;EAC1D,IAAI,UAAU;AACd,MAAI;GACF,MAAM,OAAQ,MAAM,EAAE,IAAI,MAAM;AAChC,aAAU,OAAO,KAAK,YAAY,WAAW,KAAK,UAAU;UACtD;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS,gBAAgB;IAAE,EAAE,IAAI;;EAEvE,MAAM,MAAM,MAAM,sBAAsB,QAAQ,eAAyB,IAAI,MAAM,QAAQ;AAC3F,MAAI,IAAI,OAAO,MACb,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,IAAI,OAAO;GAAE,EAAE,IAAI,UAAU,IAAI;AAEhF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;IAAE,SAAS,IAAI,KAAK;IAAS;IAAM;GAAE,CAAC;GACzE;AAGF,eAAc,IAAI,sBAAsB,MAAM;EAC5C,MAAM,SAAS,sBAAsB;AACrC,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,QAAQ;GAAE,CAAC;GAChD"}
+{"version":3,"file":"agents.js","names":[],"sources":["../../../../../src/gateway/hono/routes/agents.ts"],"sourcesContent":["import type { Hono } from 'hono';\n\nimport { AgentModelsSchema, type Config } from '../../../config/schema.js';\nimport { ToolPolicySetSchema } from '../../../agent-manifest/schema.js';\nimport { getVoiceModelsConfig } from '../../../config/voice.js';\nimport { normalizeAgentId } from '../../../agent/agent-scope.js';\nimport {\n  deleteAgentAvatarFile,\n  finalizeCreateAgentDirs,\n  getGatewayAgentEffectiveManifest,\n  listAgentProfileFiles,\n  listGatewayAgents,\n  prepareCreateAgent,\n  prepareDeleteAgent,\n  prepareUpdateAgent,\n  readAgentAvatarFile,\n  readAgentProfileFile,\n  readUserProfileFile,\n  runAfterDeletePurge,\n  writeAgentAvatarFromBase64,\n  writeAgentProfileFile,\n  writeUserProfileFile,\n  type CreateAgentBody,\n} from '../../agents-admin.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\n\nfunction parseProfileFiles(raw: unknown): Record<string, string> | undefined | { error: string } {\n  if (raw === undefined) {\n    return undefined;\n  }\n  if (raw === null || typeof raw !== 'object' || Array.isArray(raw)) {\n    return { error: 'profileFiles must be an object' };\n  }\n  const profileFiles: Record<string, string> = {};\n  for (const [name, content] of Object.entries(raw as Record<string, unknown>)) {\n    if (typeof content !== 'string') {\n      return { error: `profileFiles[\"${name}\"] must be a string` };\n    }\n    profileFiles[name] = content;\n  }\n  return profileFiles;\n}\n\nfunction isParseError(value: unknown): value is { error: string } {\n  return (\n    typeof value === 'object' &&\n    value !== null &&\n    'error' in value &&\n    typeof (value as { error: string }).error === 'string'\n  );\n}\n\nfunction parseCreateAgentBody(raw: unknown): CreateAgentBody | { error: string } {\n  if (raw === null || typeof raw !== 'object' || Array.isArray(raw)) {\n    return { error: 'each agent must be an object' };\n  }\n  const body = raw as Record<string, unknown>;\n  if (Object.hasOwn(body, 'model')) {\n    return { error: 'model is not supported; use models.defaultRole and models.roles' };\n  }\n  if (Object.hasOwn(body, 'toolsDisable')) {\n    return { error: 'toolsDisable was removed; use tools.builtin policies' };\n  }\n  if (Object.hasOwn(body, 'typedModels')) {\n    return { error: 'typedModels is not supported; use models.roles' };\n  }\n  if (Object.hasOwn(body, 'agentDir')) {\n    return { error: 'agentDir was removed from agent manifests' };\n  }\n  if (Object.hasOwn(body, 'name')) {\n    return { error: 'name is not supported; write IDENTITY.md in profileFiles' };\n  }\n  if (Object.hasOwn(body, 'description')) {\n    return { error: 'description is not supported; write IDENTITY.md in profileFiles' };\n  }\n  const workspace = typeof body.workspace === 'string' ? body.workspace : '';\n  const models = Object.hasOwn(body, 'models')\n    ? AgentModelsSchema.safeParse(body.models)\n    : undefined;\n  if (models && !models.success) {\n    return { error: `models ${models.error.issues[0]?.message ?? 'is invalid'}` };\n  }\n  const id = typeof body.id === 'string' ? body.id : undefined;\n  const presetIds = Object.hasOwn(body, 'extends')\n    ? Array.isArray(body.extends)\n      ? body.extends.map((x: unknown) => normalizeAgentId(String(x))).filter(Boolean)\n      : null\n    : undefined;\n  if (presetIds === null) {\n    return { error: 'extends must be an array' };\n  }\n  const skills = Object.hasOwn(body, 'skills')\n    ? Array.isArray(body.skills)\n      ? body.skills.map((x: unknown) => String(x).trim()).filter(Boolean)\n      : null\n    : undefined;\n  if (skills === null) {\n    return { error: 'skills must be an array' };\n  }\n  const toolsRaw = Object.hasOwn(body, 'tools') ? body.tools : undefined;\n  let tools: CreateAgentBody['tools'] | undefined;\n  if (toolsRaw !== undefined) {\n    if (toolsRaw === null || typeof toolsRaw !== 'object' || Array.isArray(toolsRaw)) {\n      return { error: 'tools must be an object' };\n    }\n    const parsedTools = ToolPolicySetSchema.safeParse(toolsRaw);\n    if (!parsedTools.success) {\n      return { error: `tools ${parsedTools.error.issues[0]?.message ?? 'is invalid'}` };\n    }\n    tools = parsedTools.data;\n  }\n  let profileFiles: Record<string, string> | undefined;\n  if (Object.hasOwn(body, 'profileFiles')) {\n    const parsed = parseProfileFiles(body.profileFiles);\n    if (isParseError(parsed)) {\n      return parsed;\n    }\n    profileFiles = parsed;\n  }\n  if (!profileFiles?.['IDENTITY.md'] && typeof body.cloneFrom !== 'string') {\n    return { error: 'profileFiles.IDENTITY.md is required' };\n  }\n  const cloneFrom = typeof body.cloneFrom === 'string' ? body.cloneFrom : undefined;\n  return {\n    workspace,\n    ...(models && models.data !== undefined ? { models: models.data } : {}),\n    ...(id !== undefined ? { id } : {}),\n    ...(presetIds !== undefined ? { extends: presetIds } : {}),\n    ...(skills !== undefined ? { skills } : {}),\n    ...(tools !== undefined ? { tools } : {}),\n    ...(profileFiles !== undefined ? { profileFiles } : {}),\n    ...(cloneFrom !== undefined ? { cloneFrom } : {}),\n  };\n}\n\ntype PatchModels = {\n  defaultRole?: string | null;\n  roles?: Record<string, { model: string; fallbacks?: string[]; description?: string }>;\n};\n\nfunction parsePatchModels(raw: unknown): PatchModels | null | undefined | { error: string } {\n  if (raw === undefined) {\n    return undefined;\n  }\n  if (raw === null) {\n    return null;\n  }\n  if (typeof raw !== 'object' || Array.isArray(raw)) {\n    return { error: 'models must be an object or null' };\n  }\n  const body = raw as Record<string, unknown>;\n  const out: PatchModels = {};\n  if (Object.hasOwn(body, 'defaultRole')) {\n    out.defaultRole = body.defaultRole === null ? null : String(body.defaultRole ?? '').trim();\n  }\n  if (Object.hasOwn(body, 'roles')) {\n    if (body.roles === null) {\n      return { error: 'models.roles must be an object' };\n    } else {\n      const parsed = AgentModelsSchema.safeParse({ roles: body.roles });\n      if (!parsed.success) {\n        return { error: `models.roles ${parsed.error.issues[0]?.message ?? 'is invalid'}` };\n      }\n      out.roles = parsed.data?.roles;\n    }\n  }\n  return out;\n}\n\nexport function registerAgentsRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  const { service, strictRateLimitMiddleware } = deps;\n\n  authenticated.get('/api/agents', async (c) => {\n    const cfg = service.currentConfig as Config;\n    const locale = c.req.query('locale') || c.req.header('Accept-Language')?.split(',')[0]?.trim();\n    const payload = await listGatewayAgents(cfg, { locale });\n    return c.json({ ok: true, payload });\n  });\n\n  authenticated.get('/api/user-profile', async (c) => {\n    const res = await readUserProfileFile();\n    if (res.ok === false) {\n      return c.json({ ok: false, error: { message: res.error } }, res.status ?? 400);\n    }\n    return c.json({ ok: true, payload: res.data });\n  });\n\n  authenticated.put('/api/user-profile', strictRateLimitMiddleware, async (c) => {\n    let content = '';\n    try {\n      const body = (await c.req.json()) as { content?: unknown };\n      content = typeof body.content === 'string' ? body.content : '';\n    } catch {\n      return c.json({ ok: false, error: { message: 'Invalid JSON' } }, 400);\n    }\n    const res = await writeUserProfileFile(content);\n    if (res.ok === false) {\n      return c.json({ ok: false, error: { message: res.error } }, res.status ?? 400);\n    }\n    return c.json({ ok: true, payload: res.data });\n  });\n\n  authenticated.post('/api/agents', strictRateLimitMiddleware, async (c) => {\n    let body: Record<string, unknown> = {};\n    try {\n      body = (await c.req.json()) as Record<string, unknown>;\n    } catch {\n      return c.json({ ok: false, error: { message: 'Invalid JSON' } }, 400);\n    }\n    const parsed = parseCreateAgentBody(body);\n    if ('error' in parsed) {\n      return c.json({ ok: false, error: { message: parsed.error } }, 400);\n    }\n    const prep = prepareCreateAgent(service.currentConfig as Config, parsed);\n    if (prep.ok === false) {\n      return c.json({ ok: false, error: { message: prep.error } }, prep.status ?? 400);\n    }\n    const { nextConfig, agentId } = prep.data;\n    const save = await service.saveConfig(nextConfig);\n    if (!save.saved) {\n      return c.json({ ok: false, error: { message: save.error ?? 'save failed' } }, 500);\n    }\n    const finalized = await finalizeCreateAgentDirs(service.currentConfig as Config, agentId, {\n      ...(parsed.profileFiles !== undefined ? { profileFiles: parsed.profileFiles } : {}),\n      ...(parsed.cloneFrom ? { cloneFrom: parsed.cloneFrom } : {}),\n    });\n    if (finalized.ok === false) {\n      return c.json({ ok: false, error: { message: finalized.error } }, finalized.status ?? 400);\n    }\n    const locale = c.req.query('locale') || c.req.header('Accept-Language')?.split(',')[0]?.trim();\n    const agentsPayload = await listGatewayAgents(service.currentConfig as Config, { locale });\n    return c.json({\n      ok: true,\n      payload: {\n        agentId,\n        agents: agentsPayload,\n      },\n    });\n  });\n\n  authenticated.get('/api/agents/:id/effective-manifest', async (c) => {\n    const id = normalizeAgentId(c.req.param('id') ?? '');\n    const res = getGatewayAgentEffectiveManifest(service.currentConfig as Config, id);\n    if (res.ok === false) {\n      return c.json({ ok: false, error: { message: res.error } }, res.status ?? 400);\n    }\n    return c.json({ ok: true, payload: res.data });\n  });\n\n  authenticated.patch('/api/agents/:id', strictRateLimitMiddleware, async (c) => {\n    const id = normalizeAgentId(c.req.param('id') ?? '');\n    let body: Record<string, unknown> = {};\n    try {\n      body = (await c.req.json()) as Record<string, unknown>;\n    } catch {\n      return c.json({ ok: false, error: { message: 'Invalid JSON' } }, 400);\n    }\n    if (Object.hasOwn(body, 'model')) {\n      return c.json({ ok: false, error: { message: 'model is not supported; use models.defaultRole and models.roles' } }, 400);\n    }\n    if (Object.hasOwn(body, 'typedModels')) {\n      return c.json({ ok: false, error: { message: 'typedModels is not supported; use models.roles' } }, 400);\n    }\n    if (Object.hasOwn(body, 'toolsDisable')) {\n      return c.json({ ok: false, error: { message: 'toolsDisable was removed; use tools.builtin policies' } }, 400);\n    }\n    if (Object.hasOwn(body, 'agentDir')) {\n      return c.json({ ok: false, error: { message: 'agentDir was removed from agent manifests' } }, 400);\n    }\n    if (Object.hasOwn(body, 'name')) {\n      return c.json({ ok: false, error: { message: 'name is not supported; edit IDENTITY.md' } }, 400);\n    }\n    if (Object.hasOwn(body, 'description')) {\n      return c.json({ ok: false, error: { message: 'description is not supported; edit IDENTITY.md' } }, 400);\n    }\n    const skillsPatch =\n      body.skills === null\n        ? null\n        : Array.isArray(body.skills)\n          ? body.skills.map((x: unknown) => String(x).trim()).filter(Boolean)\n          : undefined;\n    const extendsPatch = Object.hasOwn(body, 'extends')\n      ? Array.isArray(body.extends)\n        ? body.extends.map((x: unknown) => String(x).trim()).filter(Boolean)\n        : undefined\n      : undefined;\n    if (Object.hasOwn(body, 'extends') && extendsPatch === undefined) {\n      return c.json({ ok: false, error: { message: 'extends must be an array' } }, 400);\n    }\n    let toolsPatch: CreateAgentBody['tools'] | null | undefined;\n    if (Object.hasOwn(body, 'tools')) {\n      if (body.tools === null) {\n        toolsPatch = null;\n      } else if (typeof body.tools === 'object' && !Array.isArray(body.tools)) {\n        const parsedTools = ToolPolicySetSchema.safeParse(body.tools);\n        if (!parsedTools.success) {\n          return c.json({ ok: false, error: { message: `tools ${parsedTools.error.issues[0]?.message ?? 'is invalid'}` } }, 400);\n        }\n        toolsPatch = parsedTools.data;\n      } else {\n        return c.json({ ok: false, error: { message: 'tools must be an object or null' } }, 400);\n      }\n    }\n    const modelsPatch = Object.hasOwn(body, 'models') ? parsePatchModels(body.models) : undefined;\n    if (isParseError(modelsPatch)) {\n      return c.json({ ok: false, error: { message: modelsPatch.error } }, 400);\n    }\n    if (Object.hasOwn(body, 'memory')) {\n      return c.json({ ok: false, error: { message: 'Agent memory configuration is not supported; use userContext' } }, 400);\n    }\n\n    const prep = prepareUpdateAgent(service.currentConfig as Config, id, {\n      workspace: typeof body.workspace === 'string' ? body.workspace : undefined,\n      ...(extendsPatch !== undefined ? { extends: extendsPatch } : {}),\n      ...(modelsPatch !== undefined ? { models: modelsPatch } : {}),\n      setDefault: body.setDefault === true,\n      ...(skillsPatch !== undefined ? { skills: skillsPatch } : {}),\n      ...(toolsPatch !== undefined ? { tools: toolsPatch } : {}),\n    });\n    if (prep.ok === false) {\n      return c.json({ ok: false, error: { message: prep.error } }, prep.status ?? 400);\n    }\n    const save = await service.saveConfig(prep.data.nextConfig);\n    if (!save.saved) {\n      return c.json({ ok: false, error: { message: save.error ?? 'save failed' } }, 500);\n    }\n    const locale = c.req.query('locale') || c.req.header('Accept-Language')?.split(',')[0]?.trim();\n    const agentsPayload = await listGatewayAgents(service.currentConfig as Config, { locale });\n    return c.json({ ok: true, payload: agentsPayload });\n  });\n\n  authenticated.delete('/api/agents/:id', strictRateLimitMiddleware, async (c) => {\n    const id = normalizeAgentId(c.req.param('id') ?? '');\n    const purge = c.req.query('purge') === '1' || c.req.query('purge') === 'true';\n    const prep = prepareDeleteAgent(service.currentConfig as Config, id);\n    if (prep.ok === false) {\n      return c.json({ ok: false, error: { message: prep.error } }, prep.status ?? 400);\n    }\n    const { nextConfig, agentId } = prep.data;\n    const save = await service.saveConfig(nextConfig);\n    if (!save.saved) {\n      return c.json({ ok: false, error: { message: save.error ?? 'save failed' } }, 500);\n    }\n    if (purge) {\n      await runAfterDeletePurge(service.currentConfig as Config, agentId);\n    }\n    const locale = c.req.query('locale') || c.req.header('Accept-Language')?.split(',')[0]?.trim();\n    const agentsPayload = await listGatewayAgents(service.currentConfig as Config, { locale });\n    return c.json({\n      ok: true,\n      payload: { agentId, purged: purge, agents: agentsPayload },\n    });\n  });\n\n  authenticated.get('/api/agents/:id/avatar', async (c) => {\n    const id = normalizeAgentId(c.req.param('id') ?? '');\n    const res = await readAgentAvatarFile(service.currentConfig as Config, id);\n    if (res.ok === false) {\n      return c.json({ ok: false, error: { message: res.error } }, res.status ?? 400);\n    }\n    return new Response(res.data.buffer, {\n      status: 200,\n      headers: {\n        'Content-Type': res.data.contentType,\n        'Cache-Control': 'private, max-age=3600',\n      },\n    });\n  });\n\n  authenticated.put('/api/agents/:id/avatar', strictRateLimitMiddleware, async (c) => {\n    const id = normalizeAgentId(c.req.param('id') ?? '');\n    let body: Record<string, unknown> = {};\n    try {\n      body = (await c.req.json()) as Record<string, unknown>;\n    } catch {\n      return c.json({ ok: false, error: { message: 'Invalid JSON' } }, 400);\n    }\n    const base64 = typeof body.base64 === 'string' ? body.base64 : '';\n    const mimeType = typeof body.mimeType === 'string' ? body.mimeType : '';\n    const res = await writeAgentAvatarFromBase64(service.currentConfig as Config, id, base64, mimeType);\n    if (res.ok === false) {\n      return c.json({ ok: false, error: { message: res.error } }, res.status ?? 400);\n    }\n    return c.json({ ok: true, payload: { agentId: res.data.agentId } });\n  });\n\n  authenticated.delete('/api/agents/:id/avatar', strictRateLimitMiddleware, async (c) => {\n    const id = normalizeAgentId(c.req.param('id') ?? '');\n    const res = await deleteAgentAvatarFile(service.currentConfig as Config, id);\n    if (res.ok === false) {\n      return c.json({ ok: false, error: { message: res.error } }, res.status ?? 400);\n    }\n    return c.json({ ok: true, payload: { agentId: res.data.agentId } });\n  });\n\n  authenticated.get('/api/agents/:id/files', async (c) => {\n    const id = normalizeAgentId(c.req.param('id') ?? '');\n    const res = await listAgentProfileFiles(service.currentConfig as Config, id);\n    if (res.ok === false) {\n      return c.json({ ok: false, error: { message: res.error } }, res.status ?? 400);\n    }\n    return c.json({ ok: true, payload: res.data });\n  });\n\n  authenticated.get('/api/agents/:id/files/:name', async (c) => {\n    const id = normalizeAgentId(c.req.param('id') ?? '');\n    const name = decodeURIComponent(c.req.param('name') ?? '');\n    const res = await readAgentProfileFile(service.currentConfig as Config, id, name);\n    if (res.ok === false) {\n      return c.json({ ok: false, error: { message: res.error } }, res.status ?? 400);\n    }\n    return c.json({ ok: true, payload: { agentId: res.data.agentId, name, content: res.data.content } });\n  });\n\n  authenticated.put('/api/agents/:id/files/:name', strictRateLimitMiddleware, async (c) => {\n    const id = normalizeAgentId(c.req.param('id') ?? '');\n    const name = decodeURIComponent(c.req.param('name') ?? '');\n    let content = '';\n    try {\n      const body = (await c.req.json()) as { content?: unknown };\n      content = typeof body.content === 'string' ? body.content : '';\n    } catch {\n      return c.json({ ok: false, error: { message: 'Invalid JSON' } }, 400);\n    }\n    const res = await writeAgentProfileFile(service.currentConfig as Config, id, name, content);\n    if (res.ok === false) {\n      return c.json({ ok: false, error: { message: res.error } }, res.status ?? 400);\n    }\n    return c.json({ ok: true, payload: { agentId: res.data.agentId, name } });\n  });\n\n  // GET /api/voice/models - Get available STT/TTS models\n  authenticated.get('/api/voice/models', (c) => {\n    const models = getVoiceModelsConfig();\n    return c.json({ ok: true, payload: { models } });\n  });\n\n}\n"],"mappings":";;;;;;eAE2E;aACH;kBAEP;AAqBjE,SAAS,kBAAkB,KAAsE;AAC/F,KAAI,QAAQ,KAAA,EACV;AAEF,KAAI,QAAQ,QAAQ,OAAO,QAAQ,YAAY,MAAM,QAAQ,IAAI,CAC/D,QAAO,EAAE,OAAO,kCAAkC;CAEpD,MAAM,eAAuC,EAAE;AAC/C,MAAK,MAAM,CAAC,MAAM,YAAY,OAAO,QAAQ,IAA+B,EAAE;AAC5E,MAAI,OAAO,YAAY,SACrB,QAAO,EAAE,OAAO,iBAAiB,KAAK,sBAAsB;AAE9D,eAAa,QAAQ;;AAEvB,QAAO;;AAGT,SAAS,aAAa,OAA4C;AAChE,QACE,OAAO,UAAU,YACjB,UAAU,QACV,WAAW,SACX,OAAQ,MAA4B,UAAU;;AAIlD,SAAS,qBAAqB,KAAmD;AAC/E,KAAI,QAAQ,QAAQ,OAAO,QAAQ,YAAY,MAAM,QAAQ,IAAI,CAC/D,QAAO,EAAE,OAAO,gCAAgC;CAElD,MAAM,OAAO;AACb,KAAI,OAAO,OAAO,MAAM,QAAQ,CAC9B,QAAO,EAAE,OAAO,mEAAmE;AAErF,KAAI,OAAO,OAAO,MAAM,eAAe,CACrC,QAAO,EAAE,OAAO,wDAAwD;AAE1E,KAAI,OAAO,OAAO,MAAM,cAAc,CACpC,QAAO,EAAE,OAAO,kDAAkD;AAEpE,KAAI,OAAO,OAAO,MAAM,WAAW,CACjC,QAAO,EAAE,OAAO,6CAA6C;AAE/D,KAAI,OAAO,OAAO,MAAM,OAAO,CAC7B,QAAO,EAAE,OAAO,4DAA4D;AAE9E,KAAI,OAAO,OAAO,MAAM,cAAc,CACpC,QAAO,EAAE,OAAO,mEAAmE;CAErF,MAAM,YAAY,OAAO,KAAK,cAAc,WAAW,KAAK,YAAY;CACxE,MAAM,SAAS,OAAO,OAAO,MAAM,SAAS,GACxC,kBAAkB,UAAU,KAAK,OAAO,GACxC,KAAA;AACJ,KAAI,UAAU,CAAC,OAAO,QACpB,QAAO,EAAE,OAAO,UAAU,OAAO,MAAM,OAAO,IAAI,WAAW,gBAAgB;CAE/E,MAAM,KAAK,OAAO,KAAK,OAAO,WAAW,KAAK,KAAK,KAAA;CACnD,MAAM,YAAY,OAAO,OAAO,MAAM,UAAU,GAC5C,MAAM,QAAQ,KAAK,QAAQ,GACzB,KAAK,QAAQ,KAAK,MAAe,iBAAiB,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,QAAQ,GAC7E,OACF,KAAA;AACJ,KAAI,cAAc,KAChB,QAAO,EAAE,OAAO,4BAA4B;CAE9C,MAAM,SAAS,OAAO,OAAO,MAAM,SAAS,GACxC,MAAM,QAAQ,KAAK,OAAO,GACxB,KAAK,OAAO,KAAK,MAAe,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC,OAAO,QAAQ,GACjE,OACF,KAAA;AACJ,KAAI,WAAW,KACb,QAAO,EAAE,OAAO,2BAA2B;CAE7C,MAAM,WAAW,OAAO,OAAO,MAAM,QAAQ,GAAG,KAAK,QAAQ,KAAA;CAC7D,IAAI;AACJ,KAAI,aAAa,KAAA,GAAW;AAC1B,MAAI,aAAa,QAAQ,OAAO,aAAa,YAAY,MAAM,QAAQ,SAAS,CAC9E,QAAO,EAAE,OAAO,2BAA2B;EAE7C,MAAM,cAAc,oBAAoB,UAAU,SAAS;AAC3D,MAAI,CAAC,YAAY,QACf,QAAO,EAAE,OAAO,SAAS,YAAY,MAAM,OAAO,IAAI,WAAW,gBAAgB;AAEnF,UAAQ,YAAY;;CAEtB,IAAI;AACJ,KAAI,OAAO,OAAO,MAAM,eAAe,EAAE;EACvC,MAAM,SAAS,kBAAkB,KAAK,aAAa;AACnD,MAAI,aAAa,OAAO,CACtB,QAAO;AAET,iBAAe;;AAEjB,KAAI,CAAC,eAAe,kBAAkB,OAAO,KAAK,cAAc,SAC9D,QAAO,EAAE,OAAO,wCAAwC;CAE1D,MAAM,YAAY,OAAO,KAAK,cAAc,WAAW,KAAK,YAAY,KAAA;AACxE,QAAO;EACL;EACA,GAAI,UAAU,OAAO,SAAS,KAAA,IAAY,EAAE,QAAQ,OAAO,MAAM,GAAG,EAAE;EACtE,GAAI,OAAO,KAAA,IAAY,EAAE,IAAI,GAAG,EAAE;EAClC,GAAI,cAAc,KAAA,IAAY,EAAE,SAAS,WAAW,GAAG,EAAE;EACzD,GAAI,WAAW,KAAA,IAAY,EAAE,QAAQ,GAAG,EAAE;EAC1C,GAAI,UAAU,KAAA,IAAY,EAAE,OAAO,GAAG,EAAE;EACxC,GAAI,iBAAiB,KAAA,IAAY,EAAE,cAAc,GAAG,EAAE;EACtD,GAAI,cAAc,KAAA,IAAY,EAAE,WAAW,GAAG,EAAE;EACjD;;AAQH,SAAS,iBAAiB,KAAkE;AAC1F,KAAI,QAAQ,KAAA,EACV;AAEF,KAAI,QAAQ,KACV,QAAO;AAET,KAAI,OAAO,QAAQ,YAAY,MAAM,QAAQ,IAAI,CAC/C,QAAO,EAAE,OAAO,oCAAoC;CAEtD,MAAM,OAAO;CACb,MAAM,MAAmB,EAAE;AAC3B,KAAI,OAAO,OAAO,MAAM,cAAc,CACpC,KAAI,cAAc,KAAK,gBAAgB,OAAO,OAAO,OAAO,KAAK,eAAe,GAAG,CAAC,MAAM;AAE5F,KAAI,OAAO,OAAO,MAAM,QAAQ,CAC9B,KAAI,KAAK,UAAU,KACjB,QAAO,EAAE,OAAO,kCAAkC;MAC7C;EACL,MAAM,SAAS,kBAAkB,UAAU,EAAE,OAAO,KAAK,OAAO,CAAC;AACjE,MAAI,CAAC,OAAO,QACV,QAAO,EAAE,OAAO,gBAAgB,OAAO,MAAM,OAAO,IAAI,WAAW,gBAAgB;AAErF,MAAI,QAAQ,OAAO,MAAM;;AAG7B,QAAO;;AAGT,SAAgB,qBAAqB,eAAqB,MAAoC;CAC5F,MAAM,EAAE,SAAS,8BAA8B;AAE/C,eAAc,IAAI,eAAe,OAAO,MAAM;EAC5C,MAAM,MAAM,QAAQ;EAEpB,MAAM,UAAU,MAAM,kBAAkB,KAAK,EAAE,QADhC,EAAE,IAAI,MAAM,SAAS,IAAI,EAAE,IAAI,OAAO,kBAAkB,EAAE,MAAM,IAAI,CAAC,IAAI,MAAM,EACvC,CAAC;AACxD,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM;GAAS,CAAC;GACpC;AAEF,eAAc,IAAI,qBAAqB,OAAO,MAAM;EAClD,MAAM,MAAM,MAAM,qBAAqB;AACvC,MAAI,IAAI,OAAO,MACb,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,IAAI,OAAO;GAAE,EAAE,IAAI,UAAU,IAAI;AAEhF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,IAAI;GAAM,CAAC;GAC9C;AAEF,eAAc,IAAI,qBAAqB,2BAA2B,OAAO,MAAM;EAC7E,IAAI,UAAU;AACd,MAAI;GACF,MAAM,OAAQ,MAAM,EAAE,IAAI,MAAM;AAChC,aAAU,OAAO,KAAK,YAAY,WAAW,KAAK,UAAU;UACtD;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS,gBAAgB;IAAE,EAAE,IAAI;;EAEvE,MAAM,MAAM,MAAM,qBAAqB,QAAQ;AAC/C,MAAI,IAAI,OAAO,MACb,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,IAAI,OAAO;GAAE,EAAE,IAAI,UAAU,IAAI;AAEhF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,IAAI;GAAM,CAAC;GAC9C;AAEF,eAAc,KAAK,eAAe,2BAA2B,OAAO,MAAM;EACxE,IAAI,OAAgC,EAAE;AACtC,MAAI;AACF,UAAQ,MAAM,EAAE,IAAI,MAAM;UACpB;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS,gBAAgB;IAAE,EAAE,IAAI;;EAEvE,MAAM,SAAS,qBAAqB,KAAK;AACzC,MAAI,WAAW,OACb,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,OAAO,OAAO;GAAE,EAAE,IAAI;EAErE,MAAM,OAAO,mBAAmB,QAAQ,eAAyB,OAAO;AACxE,MAAI,KAAK,OAAO,MACd,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,KAAK,OAAO;GAAE,EAAE,KAAK,UAAU,IAAI;EAElF,MAAM,EAAE,YAAY,YAAY,KAAK;EACrC,MAAM,OAAO,MAAM,QAAQ,WAAW,WAAW;AACjD,MAAI,CAAC,KAAK,MACR,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,KAAK,SAAS,eAAe;GAAE,EAAE,IAAI;EAEpF,MAAM,YAAY,MAAM,wBAAwB,QAAQ,eAAyB,SAAS;GACxF,GAAI,OAAO,iBAAiB,KAAA,IAAY,EAAE,cAAc,OAAO,cAAc,GAAG,EAAE;GAClF,GAAI,OAAO,YAAY,EAAE,WAAW,OAAO,WAAW,GAAG,EAAE;GAC5D,CAAC;AACF,MAAI,UAAU,OAAO,MACnB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,UAAU,OAAO;GAAE,EAAE,UAAU,UAAU,IAAI;EAE5F,MAAM,SAAS,EAAE,IAAI,MAAM,SAAS,IAAI,EAAE,IAAI,OAAO,kBAAkB,EAAE,MAAM,IAAI,CAAC,IAAI,MAAM;EAC9F,MAAM,gBAAgB,MAAM,kBAAkB,QAAQ,eAAyB,EAAE,QAAQ,CAAC;AAC1F,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP;IACA,QAAQ;IACT;GACF,CAAC;GACF;AAEF,eAAc,IAAI,sCAAsC,OAAO,MAAM;EACnE,MAAM,KAAK,iBAAiB,EAAE,IAAI,MAAM,KAAK,IAAI,GAAG;EACpD,MAAM,MAAM,iCAAiC,QAAQ,eAAyB,GAAG;AACjF,MAAI,IAAI,OAAO,MACb,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,IAAI,OAAO;GAAE,EAAE,IAAI,UAAU,IAAI;AAEhF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,IAAI;GAAM,CAAC;GAC9C;AAEF,eAAc,MAAM,mBAAmB,2BAA2B,OAAO,MAAM;EAC7E,MAAM,KAAK,iBAAiB,EAAE,IAAI,MAAM,KAAK,IAAI,GAAG;EACpD,IAAI,OAAgC,EAAE;AACtC,MAAI;AACF,UAAQ,MAAM,EAAE,IAAI,MAAM;UACpB;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS,gBAAgB;IAAE,EAAE,IAAI;;AAEvE,MAAI,OAAO,OAAO,MAAM,QAAQ,CAC9B,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,mEAAmE;GAAE,EAAE,IAAI;AAE1H,MAAI,OAAO,OAAO,MAAM,cAAc,CACpC,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,kDAAkD;GAAE,EAAE,IAAI;AAEzG,MAAI,OAAO,OAAO,MAAM,eAAe,CACrC,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,wDAAwD;GAAE,EAAE,IAAI;AAE/G,MAAI,OAAO,OAAO,MAAM,WAAW,CACjC,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,6CAA6C;GAAE,EAAE,IAAI;AAEpG,MAAI,OAAO,OAAO,MAAM,OAAO,CAC7B,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,2CAA2C;GAAE,EAAE,IAAI;AAElG,MAAI,OAAO,OAAO,MAAM,cAAc,CACpC,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,kDAAkD;GAAE,EAAE,IAAI;EAEzG,MAAM,cACJ,KAAK,WAAW,OACZ,OACA,MAAM,QAAQ,KAAK,OAAO,GACxB,KAAK,OAAO,KAAK,MAAe,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC,OAAO,QAAQ,GACjE,KAAA;EACR,MAAM,eAAe,OAAO,OAAO,MAAM,UAAU,GAC/C,MAAM,QAAQ,KAAK,QAAQ,GACzB,KAAK,QAAQ,KAAK,MAAe,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC,OAAO,QAAQ,GAClE,KAAA,IACF,KAAA;AACJ,MAAI,OAAO,OAAO,MAAM,UAAU,IAAI,iBAAiB,KAAA,EACrD,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,4BAA4B;GAAE,EAAE,IAAI;EAEnF,IAAI;AACJ,MAAI,OAAO,OAAO,MAAM,QAAQ,CAC9B,KAAI,KAAK,UAAU,KACjB,cAAa;WACJ,OAAO,KAAK,UAAU,YAAY,CAAC,MAAM,QAAQ,KAAK,MAAM,EAAE;GACvE,MAAM,cAAc,oBAAoB,UAAU,KAAK,MAAM;AAC7D,OAAI,CAAC,YAAY,QACf,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS,SAAS,YAAY,MAAM,OAAO,IAAI,WAAW,gBAAgB;IAAE,EAAE,IAAI;AAExH,gBAAa,YAAY;QAEzB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,mCAAmC;GAAE,EAAE,IAAI;EAG5F,MAAM,cAAc,OAAO,OAAO,MAAM,SAAS,GAAG,iBAAiB,KAAK,OAAO,GAAG,KAAA;AACpF,MAAI,aAAa,YAAY,CAC3B,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,YAAY,OAAO;GAAE,EAAE,IAAI;AAE1E,MAAI,OAAO,OAAO,MAAM,SAAS,CAC/B,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,gEAAgE;GAAE,EAAE,IAAI;EAGvH,MAAM,OAAO,mBAAmB,QAAQ,eAAyB,IAAI;GACnE,WAAW,OAAO,KAAK,cAAc,WAAW,KAAK,YAAY,KAAA;GACjE,GAAI,iBAAiB,KAAA,IAAY,EAAE,SAAS,cAAc,GAAG,EAAE;GAC/D,GAAI,gBAAgB,KAAA,IAAY,EAAE,QAAQ,aAAa,GAAG,EAAE;GAC5D,YAAY,KAAK,eAAe;GAChC,GAAI,gBAAgB,KAAA,IAAY,EAAE,QAAQ,aAAa,GAAG,EAAE;GAC5D,GAAI,eAAe,KAAA,IAAY,EAAE,OAAO,YAAY,GAAG,EAAE;GAC1D,CAAC;AACF,MAAI,KAAK,OAAO,MACd,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,KAAK,OAAO;GAAE,EAAE,KAAK,UAAU,IAAI;EAElF,MAAM,OAAO,MAAM,QAAQ,WAAW,KAAK,KAAK,WAAW;AAC3D,MAAI,CAAC,KAAK,MACR,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,KAAK,SAAS,eAAe;GAAE,EAAE,IAAI;EAEpF,MAAM,SAAS,EAAE,IAAI,MAAM,SAAS,IAAI,EAAE,IAAI,OAAO,kBAAkB,EAAE,MAAM,IAAI,CAAC,IAAI,MAAM;EAC9F,MAAM,gBAAgB,MAAM,kBAAkB,QAAQ,eAAyB,EAAE,QAAQ,CAAC;AAC1F,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;GAAe,CAAC;GACnD;AAEF,eAAc,OAAO,mBAAmB,2BAA2B,OAAO,MAAM;EAC9E,MAAM,KAAK,iBAAiB,EAAE,IAAI,MAAM,KAAK,IAAI,GAAG;EACpD,MAAM,QAAQ,EAAE,IAAI,MAAM,QAAQ,KAAK,OAAO,EAAE,IAAI,MAAM,QAAQ,KAAK;EACvE,MAAM,OAAO,mBAAmB,QAAQ,eAAyB,GAAG;AACpE,MAAI,KAAK,OAAO,MACd,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,KAAK,OAAO;GAAE,EAAE,KAAK,UAAU,IAAI;EAElF,MAAM,EAAE,YAAY,YAAY,KAAK;EACrC,MAAM,OAAO,MAAM,QAAQ,WAAW,WAAW;AACjD,MAAI,CAAC,KAAK,MACR,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,KAAK,SAAS,eAAe;GAAE,EAAE,IAAI;AAEpF,MAAI,MACF,OAAM,oBAAoB,QAAQ,eAAyB,QAAQ;EAErE,MAAM,SAAS,EAAE,IAAI,MAAM,SAAS,IAAI,EAAE,IAAI,OAAO,kBAAkB,EAAE,MAAM,IAAI,CAAC,IAAI,MAAM;EAC9F,MAAM,gBAAgB,MAAM,kBAAkB,QAAQ,eAAyB,EAAE,QAAQ,CAAC;AAC1F,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IAAE;IAAS,QAAQ;IAAO,QAAQ;IAAe;GAC3D,CAAC;GACF;AAEF,eAAc,IAAI,0BAA0B,OAAO,MAAM;EACvD,MAAM,KAAK,iBAAiB,EAAE,IAAI,MAAM,KAAK,IAAI,GAAG;EACpD,MAAM,MAAM,MAAM,oBAAoB,QAAQ,eAAyB,GAAG;AAC1E,MAAI,IAAI,OAAO,MACb,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,IAAI,OAAO;GAAE,EAAE,IAAI,UAAU,IAAI;AAEhF,SAAO,IAAI,SAAS,IAAI,KAAK,QAAQ;GACnC,QAAQ;GACR,SAAS;IACP,gBAAgB,IAAI,KAAK;IACzB,iBAAiB;IAClB;GACF,CAAC;GACF;AAEF,eAAc,IAAI,0BAA0B,2BAA2B,OAAO,MAAM;EAClF,MAAM,KAAK,iBAAiB,EAAE,IAAI,MAAM,KAAK,IAAI,GAAG;EACpD,IAAI,OAAgC,EAAE;AACtC,MAAI;AACF,UAAQ,MAAM,EAAE,IAAI,MAAM;UACpB;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS,gBAAgB;IAAE,EAAE,IAAI;;EAEvE,MAAM,SAAS,OAAO,KAAK,WAAW,WAAW,KAAK,SAAS;EAC/D,MAAM,WAAW,OAAO,KAAK,aAAa,WAAW,KAAK,WAAW;EACrE,MAAM,MAAM,MAAM,2BAA2B,QAAQ,eAAyB,IAAI,QAAQ,SAAS;AACnG,MAAI,IAAI,OAAO,MACb,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,IAAI,OAAO;GAAE,EAAE,IAAI,UAAU,IAAI;AAEhF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,SAAS,IAAI,KAAK,SAAS;GAAE,CAAC;GACnE;AAEF,eAAc,OAAO,0BAA0B,2BAA2B,OAAO,MAAM;EACrF,MAAM,KAAK,iBAAiB,EAAE,IAAI,MAAM,KAAK,IAAI,GAAG;EACpD,MAAM,MAAM,MAAM,sBAAsB,QAAQ,eAAyB,GAAG;AAC5E,MAAI,IAAI,OAAO,MACb,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,IAAI,OAAO;GAAE,EAAE,IAAI,UAAU,IAAI;AAEhF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,SAAS,IAAI,KAAK,SAAS;GAAE,CAAC;GACnE;AAEF,eAAc,IAAI,yBAAyB,OAAO,MAAM;EACtD,MAAM,KAAK,iBAAiB,EAAE,IAAI,MAAM,KAAK,IAAI,GAAG;EACpD,MAAM,MAAM,MAAM,sBAAsB,QAAQ,eAAyB,GAAG;AAC5E,MAAI,IAAI,OAAO,MACb,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,IAAI,OAAO;GAAE,EAAE,IAAI,UAAU,IAAI;AAEhF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,IAAI;GAAM,CAAC;GAC9C;AAEF,eAAc,IAAI,+BAA+B,OAAO,MAAM;EAC5D,MAAM,KAAK,iBAAiB,EAAE,IAAI,MAAM,KAAK,IAAI,GAAG;EACpD,MAAM,OAAO,mBAAmB,EAAE,IAAI,MAAM,OAAO,IAAI,GAAG;EAC1D,MAAM,MAAM,MAAM,qBAAqB,QAAQ,eAAyB,IAAI,KAAK;AACjF,MAAI,IAAI,OAAO,MACb,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,IAAI,OAAO;GAAE,EAAE,IAAI,UAAU,IAAI;AAEhF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;IAAE,SAAS,IAAI,KAAK;IAAS;IAAM,SAAS,IAAI,KAAK;IAAS;GAAE,CAAC;GACpG;AAEF,eAAc,IAAI,+BAA+B,2BAA2B,OAAO,MAAM;EACvF,MAAM,KAAK,iBAAiB,EAAE,IAAI,MAAM,KAAK,IAAI,GAAG;EACpD,MAAM,OAAO,mBAAmB,EAAE,IAAI,MAAM,OAAO,IAAI,GAAG;EAC1D,IAAI,UAAU;AACd,MAAI;GACF,MAAM,OAAQ,MAAM,EAAE,IAAI,MAAM;AAChC,aAAU,OAAO,KAAK,YAAY,WAAW,KAAK,UAAU;UACtD;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS,gBAAgB;IAAE,EAAE,IAAI;;EAEvE,MAAM,MAAM,MAAM,sBAAsB,QAAQ,eAAyB,IAAI,MAAM,QAAQ;AAC3F,MAAI,IAAI,OAAO,MACb,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,IAAI,OAAO;GAAE,EAAE,IAAI,UAAU,IAAI;AAEhF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;IAAE,SAAS,IAAI,KAAK;IAAS;IAAM;GAAE,CAAC;GACzE;AAGF,eAAc,IAAI,sBAAsB,MAAM;EAC5C,MAAM,SAAS,sBAAsB;AACrC,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,QAAQ;GAAE,CAAC;GAChD"}

package/dist/src/gateway/hono/routes/auth-registry-extensions.js

@@ -228,6 +228,12 @@ function registerAuthRegistryExtensionsRoutes(authenticated, deps) {
 			manifest: ext.manifest
 		});
 	});
+	authenticated.get("/api/extensions/:id/ui-grant", (c) => {
+		return c.json({ grant: service.localApps.getUiGrant(c.req.param("id")) });
+	});
+	authenticated.post("/api/extensions/:id/ui-grant", (c) => {
+		return c.json({ grant: service.localApps.grantUiPermissions(c.req.param("id")) });
+	});
 	authenticated.get("/api/extensions/:id/storage", async (c) => {
 		const store = await loadExtensionStore(c.req.param("id"));
 		return c.json({ keys: Object.keys(store) });

package/dist/src/gateway/hono/routes/auth-registry-extensions.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth-registry-extensions.js","names":["extensionMarketplace.searchExtensions","extensionMarketplace.listExtensions","extensionMarketplace.fetchRegistry"],"sources":["../../../../../src/gateway/hono/routes/auth-registry-extensions.ts"],"sourcesContent":["import type { Hono } from 'hono';\nimport { existsSync, readFileSync, statSync } from 'node:fs';\nimport { relative, resolve } from 'node:path';\n\nimport type { Config as SurfaceConfig } from '../../../config/config-surface.js';\nimport type { GatewayService } from '../../service.js';\nimport { buildWhenContextSnapshot } from '../../../extensions/when-context.js';\nimport * as extensionMarketplace from '../../../extensions/marketplace.js';\nimport { mergeActivationContext } from '../../../extensions/activation-context.js';\nimport { ActivationPlanner } from '../../../extensions/activation-planner.js';\nimport { getAllModels, getAvailableModels, type Model, type Api } from '../../../providers/index.js';\nimport { createOAuthHandler, loadOAuthCredentialsToCache } from '../oauth.js';\nimport { createOAuthAsyncHandler } from '../oauth-async.js';\nimport { extensionAssetMimeType } from '../lib/extension-assets.js';\nimport { loadExtensionStore, saveExtensionStore } from '../lib/extension-store.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\n\nconst EXTENSION_ASSET_CSP =\n  \"default-src 'self'; \" +\n  \"script-src 'self' 'unsafe-inline'; \" +\n  \"style-src 'self' 'unsafe-inline'; \" +\n  \"img-src 'self' data: blob:; \" +\n  \"connect-src 'none'; \" +\n  \"frame-ancestors 'self'; \" +\n  \"frame-src 'none'; \" +\n  \"base-uri 'none'; \" +\n  \"object-src 'none'; \" +\n  \"form-action 'none'\";\n\n/** Sandboxed extension iframes send `Origin: null`; echo it (and real origins) so every status includes ACAO. */\nfunction extensionUiAssetCorsAllowOrigin(c: { req: { header: (name: string) => string | undefined } }): string {\n  const origin = c.req.header('origin');\n  if (origin === 'null') return 'null';\n  if (origin) return origin;\n  return '*';\n}\n\nfunction rewriteExtensionAssetHtml(html: string, extensionId: string, assetPath: string): string {\n  const assetDir = assetPath.includes('/') ? assetPath.slice(0, assetPath.lastIndexOf('/') + 1) : '';\n  const assetBase = `/api/extensions/${extensionId}/assets/${assetDir}`;\n\n  return html\n    .replace(/(<script\\b[^>]*?\\ssrc=)([\"'])(\\.\\/)?([^\"']+)\\2/gi, (_match, tag, quote, _dot, file) => {\n      const isAbsolute =\n        file.startsWith('/') || file.startsWith('http://') || file.startsWith('https://');\n      const resolvedSrc = isAbsolute ? file : `${assetBase}${file}`;\n      return `${tag}${quote}${resolvedSrc}${quote} crossorigin=\"anonymous\"`;\n    })\n    .replace(/(<link\\b[^>]*?\\shref=)([\"'])(\\.\\/)?([^\"']+)\\2/gi, (_match, tag, quote, _dot, file) => {\n      const isAbsolute =\n        file.startsWith('/') || file.startsWith('http://') || file.startsWith('https://');\n      const resolvedHref = isAbsolute ? file : `${assetBase}${file}`;\n      return `${tag}${quote}${resolvedHref}${quote}`;\n    });\n}\n\nfunction hasNonEmptyConfigSchema(schema: unknown): boolean {\n  if (!schema || typeof schema !== 'object') return false;\n  const properties = (schema as { properties?: unknown }).properties;\n  return Boolean(properties && typeof properties === 'object' && Object.keys(properties).length > 0);\n}\n\n/**\n * Register extension UI asset routes on the public (unauthenticated) app.\n *\n * Sandboxed iframes (`sandbox=\"allow-scripts …\"` without `allow-same-origin`) have an\n * opaque origin of `null`, so sub-resource requests from inside the iframe cannot\n * carry the `?token=` query parameter that was on the parent HTML URL. Putting these\n * routes behind the auth middleware therefore causes every JS/CSS asset to return 401.\n *\n * Security is maintained by the strict Content-Security-Policy returned with every\n * asset (`frame-ancestors 'self'`), which prevents any page other than the gateway\n * console itself from embedding the extension iframes.\n */\nexport function registerPublicExtensionAssetRoutes(app: Hono, service: GatewayService): void {\n  app.get('/api/extensions/:id/assets/*', async (c) => {\n    const acao = extensionUiAssetCorsAllowOrigin(c);\n    const corsHdr = { 'Access-Control-Allow-Origin': acao } as const;\n\n    const extensionId = c.req.param('id');\n    const loader = service.getExtensionLoader();\n    if (!loader) {\n      return c.json({ error: 'Extensions unavailable' }, 503, corsHdr);\n    }\n\n    const discovered = loader.discoverExtensions();\n    const ext = discovered.find((e) => e.id === extensionId);\n    if (!ext || !ext.manifest.ui) {\n      return c.json({ error: 'Extension not found or has no UI' }, 404, corsHdr);\n    }\n\n    const prefix = `/api/extensions/${extensionId}/assets/`;\n    const assetPathEncoded = c.req.path.startsWith(prefix) ? c.req.path.slice(prefix.length) : '';\n    let assetPath = assetPathEncoded;\n    try {\n      assetPath = decodeURIComponent(assetPathEncoded);\n    } catch {\n      return c.json({ error: 'Invalid asset path' }, 400, corsHdr);\n    }\n\n    if (!assetPath || assetPath.includes('..')) {\n      return c.json({ error: 'Invalid asset path' }, 400, corsHdr);\n    }\n\n    const root = resolve(ext.path);\n    const fullPath = resolve(root, assetPath);\n    const rel = relative(root, fullPath);\n    if (rel.startsWith('..') || rel === '') {\n      return c.json({ error: 'Path traversal denied' }, 403, corsHdr);\n    }\n\n    if (!existsSync(fullPath) || !statSync(fullPath).isFile()) {\n      return c.json({ error: 'Not found' }, 404, corsHdr);\n    }\n\n    const rawContent = readFileSync(fullPath);\n    const mimeType = extensionAssetMimeType(assetPath);\n\n    const body: string | Uint8Array = mimeType.startsWith('text/html')\n      ? rewriteExtensionAssetHtml(rawContent.toString('utf-8'), extensionId, assetPath)\n      : new Uint8Array(rawContent);\n\n    return new Response(body, {\n      status: 200,\n      headers: {\n        'Content-Type': mimeType,\n        'Content-Security-Policy': EXTENSION_ASSET_CSP,\n        'Cache-Control': 'no-store',\n        'X-Content-Type-Options': 'nosniff',\n        'Access-Control-Allow-Origin': acao,\n      },\n    });\n  });\n}\n\nexport function registerAuthRegistryExtensionsRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  const { service, strictRateLimitMiddleware } = deps;\n\n  // ========== Auth API (/api/auth) ==========\n\n  // GET /api/auth/token - Get current gateway token\n  authenticated.get('/api/auth/token', (c) => {\n    const authToken = service.getAuthToken();\n    return c.json({ \n      ok: true, \n      payload: { \n        token: authToken,\n        mode: service.getAuthMode(),\n      } \n    });\n  });\n\n  // POST /api/auth/token/refresh - Generate new gateway token\n  authenticated.post('/api/auth/token/refresh', async (c) => {\n    try {\n      const newToken = await service.refreshAuthToken();\n      return c.json({ \n        ok: true, \n        payload: { \n          token: newToken,\n          message: 'Token refreshed successfully. Please update your client configuration.'\n        } \n      });\n    } catch (err) {\n      return c.json({ \n        ok: false, \n        error: err instanceof Error ? err.message : 'Failed to refresh token' \n      }, 500);\n    }\n  });\n\n  // ========== OAuth API (/api/auth/oauth) ==========\n  authenticated.route('/api/auth/oauth', createOAuthHandler(service));\n\n  // ========== Async OAuth API (/api/auth/oauth-async) ==========\n  authenticated.route('/api/auth/oauth-async', createOAuthAsyncHandler(service));\n\n  // Load OAuth credentials from config into cache on startup\n  loadOAuthCredentialsToCache(service);\n\n  // ========== Registry API ==========\n  \n  // GET /api/registry - Full registry for frontend\n  authenticated.get('/api/registry', async (c) => {\n    const allModels = getAllModels();\n    const availableModels = await getAvailableModels();\n    const configured = new Set(availableModels.map(m => `${m.provider}/${m.id}`));\n    \n    // Group models by provider\n    const providerMap = new Map<string, Model<Api>[]>();\n    for (const model of allModels) {\n      const list = providerMap.get(model.provider) ?? [];\n      list.push(model);\n      providerMap.set(model.provider, list);\n    }\n    \n    return c.json({\n      ok: true,\n      payload: {\n        version: 'pi-ai',\n        providers: Array.from(providerMap.entries()).map(([id, models]) => ({\n          id,\n          name: id.charAt(0).toUpperCase() + id.slice(1),\n          configured: models.some(m => configured.has(`${m.provider}/${m.id}`)),\n          models: models.map(m => ({\n            ref: `${m.provider}/${m.id}`,\n            id: m.id,\n            name: m.name,\n            provider: m.provider,\n            reasoning: m.reasoning ?? false,\n            input: m.input ?? ['text'],\n            contextWindow: m.contextWindow ?? 128000,\n            maxTokens: m.maxTokens ?? 4096,\n            cost: {\n              input: m.cost?.input ?? 0,\n              output: m.cost?.output ?? 0,\n            },\n            available: configured.has(`${m.provider}/${m.id}`),\n          })),\n        })),\n      },\n    });\n  });\n\n  // ========== Extension UI (manifest discovery + static assets) ==========\n\n  authenticated.get('/api/extensions', async (c) => {\n    const loader = service.getExtensionLoader();\n    if (!loader) {\n      return c.json({ extensions: [] });\n    }\n\n    const registry = loader.getRegistry();\n    const discovered = loader.discoverExtensions();\n    const activeIds = new Set<string>();\n    for (const [id] of registry.extensions) {\n      activeIds.add(id);\n    }\n\n    loader.setConfig(service.currentConfig as unknown as SurfaceConfig);\n    let activationEligibleIds: Set<string> = new Set();\n    try {\n      const planner = new ActivationPlanner(loader.buildManifestRegistry());\n      activationEligibleIds = new Set(\n        planner.getActivatedIds(mergeActivationContext(service.currentConfig as unknown as SurfaceConfig)),\n      );\n    } catch {\n      activationEligibleIds = new Set();\n    }\n\n    const extensions = discovered.map((ext) => ({\n      id: ext.manifest.id,\n      name: ext.manifest.name,\n      description: ext.manifest.description,\n      version: ext.manifest.version,\n      kind: ext.manifest.kind,\n      source: ext.source,\n      active: activeIds.has(ext.id),\n      activationEligible: activationEligibleIds.has(ext.id),\n      hasUi: Boolean(ext.manifest.ui),\n      hasConfigSchema: hasNonEmptyConfigSchema(ext.manifest.configSchema),\n      ui: ext.manifest.ui\n        ? {\n            icon: ext.manifest.ui.icon,\n            permissions: ext.manifest.ui.permissions,\n            contributions: ext.manifest.ui.contributions,\n          }\n        : undefined,\n    }));\n    return c.json({ extensions });\n  });\n\n  /**\n   * Built-in (bundled) extension enable/disable — persists `extensions.enabled` / `extensions.disabled`.\n   * Body: `{ extensionId: string, enabled: boolean }`\n   */\n  authenticated.post('/api/extensions/bundled/activation', strictRateLimitMiddleware, async (c) => {\n    const body = (await c.req.json().catch(() => null)) as\n      | { extensionId?: unknown; enabled?: unknown }\n      | null;\n    const extensionId =\n      typeof body?.extensionId === 'string' ? body.extensionId.trim() : '';\n    if (!extensionId) {\n      return c.json({ ok: false, error: { message: 'extensionId is required' } }, 400);\n    }\n    if (typeof body?.enabled !== 'boolean') {\n      return c.json({ ok: false, error: { message: 'enabled must be a boolean' } }, 400);\n    }\n    const result = await service.setBundledExtensionActivationTarget(extensionId, body.enabled);\n    if (!result.ok) {\n      return c.json({ ok: false, error: { message: result.error ?? 'Request failed' } }, 400);\n    }\n    return c.json({\n      ok: true,\n      payload: { requiresGatewayRestart: result.requiresGatewayRestart },\n    });\n  });\n\n  authenticated.get('/api/extensions/:id', async (c) => {\n    const extensionId = c.req.param('id');\n    const loader = service.getExtensionLoader();\n    if (!loader) {\n      return c.json({ error: 'Extensions unavailable' }, 503);\n    }\n    const discovered = loader.discoverExtensions();\n    const ext = discovered.find((e) => e.id === extensionId);\n    if (!ext) {\n      return c.json({ error: 'Extension not found' }, 404);\n    }\n    const registry = loader.getRegistry();\n    return c.json({\n      id: ext.manifest.id,\n      name: ext.manifest.name,\n      description: ext.manifest.description,\n      version: ext.manifest.version,\n      kind: ext.manifest.kind,\n      source: ext.source,\n      path: ext.path,\n      active: registry.extensions.has(ext.id),\n      manifest: ext.manifest,\n    });\n  });\n\n  authenticated.get('/api/extensions/:id/storage', async (c) => {\n    const extensionId = c.req.param('id');\n    const store = await loadExtensionStore(extensionId);\n    return c.json({ keys: Object.keys(store) });\n  });\n\n  authenticated.get('/api/extensions/:id/storage/:key', async (c) => {\n    const extensionId = c.req.param('id');\n    const key = decodeURIComponent(c.req.param('key'));\n    const store = await loadExtensionStore(extensionId);\n    if (!(key in store)) {\n      return c.json({ error: 'Key not found' }, 404);\n    }\n    return c.json({ value: store[key] });\n  });\n\n  authenticated.put('/api/extensions/:id/storage/:key', async (c) => {\n    const extensionId = c.req.param('id');\n    const key = decodeURIComponent(c.req.param('key'));\n    const body = (await c.req.json().catch(() => null)) as { value?: unknown } | null;\n    if (body === null || !('value' in body)) {\n      return c.json({ error: 'Request body must contain a \"value\" field' }, 400);\n    }\n    const store = await loadExtensionStore(extensionId);\n    store[key] = body.value;\n    await saveExtensionStore(extensionId, store);\n    return c.json({ ok: true });\n  });\n\n  authenticated.delete('/api/extensions/:id/storage/:key', async (c) => {\n    const extensionId = c.req.param('id');\n    const key = decodeURIComponent(c.req.param('key'));\n    const store = await loadExtensionStore(extensionId);\n    delete store[key];\n    await saveExtensionStore(extensionId, store);\n    return c.json({ ok: true });\n  });\n\n  authenticated.get('/api/extensions/:id/config', async (c) => {\n    const extensionId = c.req.param('id');\n    return c.json(await loadExtensionStore(`__config__${extensionId}`));\n  });\n\n  authenticated.patch('/api/extensions/:id/config', async (c) => {\n    const extensionId = c.req.param('id');\n    const patch = (await c.req.json().catch(() => null)) as Record<string, unknown> | null;\n    if (!patch || typeof patch !== 'object' || Array.isArray(patch)) {\n      return c.json({ error: 'Request body must be a JSON object' }, 400);\n    }\n    const namespace = `__config__${extensionId}`;\n    const config = await loadExtensionStore(namespace);\n    Object.assign(config, patch);\n    await saveExtensionStore(namespace, config);\n    return c.json({ ok: true });\n  });\n\n  authenticated.get('/api/context', (c) => {\n    const loader = service.getExtensionLoader();\n    const snapshot = buildWhenContextSnapshot(\n      service.currentConfig as unknown as SurfaceConfig,\n      loader,\n    );\n    return c.json(snapshot);\n  });\n\n  authenticated.get('/api/marketplace', async (c) => {\n    const q = c.req.query('q');\n    const category = c.req.query('category');\n    try {\n      let extensions;\n      if (typeof q === 'string' && q.trim()) {\n        extensions = await extensionMarketplace.searchExtensions(q.trim());\n      } else if (typeof category === 'string' && category.trim()) {\n        extensions = await extensionMarketplace.listExtensions(category.trim());\n      } else {\n        const reg = await extensionMarketplace.fetchRegistry();\n        extensions = reg.extensions;\n      }\n      return c.json({ ok: true, extensions });\n    } catch (err) {\n      return c.json(\n        {\n          ok: false,\n          extensions: [],\n          error: err instanceof Error ? err.message : 'marketplace fetch failed',\n        },\n        500,\n      );\n    }\n  });\n\n  authenticated.get('/api/marketplace/packages/:pkgName', async (c) => {\n    const raw = c.req.param('pkgName');\n    if (!raw) {\n      return c.json({ ok: false, error: 'Missing package name' }, 400);\n    }\n    let pkgName: string;\n    try {\n      pkgName = decodeURIComponent(raw);\n    } catch {\n      return c.json({ ok: false, error: 'Invalid package name' }, 400);\n    }\n    try {\n      const payload = await service.marketplace.fetchExtensionPackageDetail(pkgName);\n      return c.json({ ok: true, payload });\n    } catch (err) {\n      return c.json(\n        { ok: false, error: err instanceof Error ? err.message : 'Marketplace request failed' },\n        502,\n      );\n    }\n  });\n\n  authenticated.post('/api/marketplace/install', strictRateLimitMiddleware, async (c) => {\n    let body: { name?: unknown; version?: unknown; overwrite?: unknown };\n    try {\n      body = (await c.req.json()) as typeof body;\n    } catch {\n      return c.json({ ok: false, error: 'Invalid JSON' }, 400);\n    }\n    const name = typeof body.name === 'string' ? body.name.trim() : '';\n    const version = typeof body.version === 'string' ? body.version.trim() : undefined;\n    const overwrite =\n      body.overwrite === true || body.overwrite === 'true' || body.overwrite === '1';\n    if (!name) {\n      return c.json(\n        { ok: false, error: 'Expected { name: string, version?: string, overwrite?: boolean }' },\n        400,\n      );\n    }\n    try {\n      const payload = await service.marketplace.installExtension({ name, version, overwrite });\n      return c.json({ ok: true, payload });\n    } catch (err) {\n      return c.json(\n        { ok: false, error: err instanceof Error ? err.message : 'Install failed' },\n        400,\n      );\n    }\n  });\n\n  authenticated.post('/api/marketplace/uninstall', strictRateLimitMiddleware, async (c) => {\n    let body: { extensionId?: unknown };\n    try {\n      body = (await c.req.json()) as typeof body;\n    } catch {\n      return c.json({ ok: false, error: 'Invalid JSON' }, 400);\n    }\n    const extensionId = typeof body.extensionId === 'string' ? body.extensionId.trim() : '';\n    if (!extensionId) {\n      return c.json({ ok: false, error: 'Expected { extensionId: string }' }, 400);\n    }\n    try {\n      const payload = await service.marketplace.uninstallExtension(extensionId);\n      return c.json({ ok: true, payload });\n    } catch (err) {\n      return c.json(\n        { ok: false, error: err instanceof Error ? err.message : 'Uninstall failed' },\n        400,\n      );\n    }\n  });\n\n  // POST /api/registry/reload — reload gateway config and refresh model list for clients\n  authenticated.post('/api/registry/reload', async (c) => {\n    try {\n      // Reload config\n      await service.reloadConfig();\n      \n      // Reload OAuth credentials from new config\n      loadOAuthCredentialsToCache(service);\n      \n      const models = getAllModels();\n      \n      // Emit SSE event to all connected clients\n      service.emit('registry.updated', { modelCount: models.length });\n      \n      return c.json({\n        ok: true,\n        payload: {\n          message: 'Registry reloaded',\n          modelCount: models.length,\n        },\n      });\n    } catch (err) {\n      return c.json({\n        error: err instanceof Error ? err.message : 'Failed to reload registry',\n      }, 500);\n    }\n  });\n\n}\n"],"mappings":";;;;;;;;;;;;gBAUqG;AAOrG,MAAM,sBACJ;;AAYF,SAAS,gCAAgC,GAAsE;CAC7G,MAAM,SAAS,EAAE,IAAI,OAAO,SAAS;AACrC,KAAI,WAAW,OAAQ,QAAO;AAC9B,KAAI,OAAQ,QAAO;AACnB,QAAO;;AAGT,SAAS,0BAA0B,MAAc,aAAqB,WAA2B;CAE/F,MAAM,YAAY,mBAAmB,YAAY,UADhC,UAAU,SAAS,IAAI,GAAG,UAAU,MAAM,GAAG,UAAU,YAAY,IAAI,GAAG,EAAE,GAAG;AAGhG,QAAO,KACJ,QAAQ,qDAAqD,QAAQ,KAAK,OAAO,MAAM,SAAS;AAI/F,SAAO,GAAG,MAAM,QAFd,KAAK,WAAW,IAAI,IAAI,KAAK,WAAW,UAAU,IAAI,KAAK,WAAW,WAAW,GAClD,OAAO,GAAG,YAAY,SACjB,MAAM;GAC5C,CACD,QAAQ,oDAAoD,QAAQ,KAAK,OAAO,MAAM,SAAS;AAI9F,SAAO,GAAG,MAAM,QAFd,KAAK,WAAW,IAAI,IAAI,KAAK,WAAW,UAAU,IAAI,KAAK,WAAW,WAAW,GACjD,OAAO,GAAG,YAAY,SACjB;GACvC;;AAGN,SAAS,wBAAwB,QAA0B;AACzD,KAAI,CAAC,UAAU,OAAO,WAAW,SAAU,QAAO;CAClD,MAAM,aAAc,OAAoC;AACxD,QAAO,QAAQ,cAAc,OAAO,eAAe,YAAY,OAAO,KAAK,WAAW,CAAC,SAAS,EAAE;;;;;;;;;;;;;;AAepG,SAAgB,mCAAmC,KAAW,SAA+B;AAC3F,KAAI,IAAI,gCAAgC,OAAO,MAAM;EACnD,MAAM,OAAO,gCAAgC,EAAE;EAC/C,MAAM,UAAU,EAAE,+BAA+B,MAAM;EAEvD,MAAM,cAAc,EAAE,IAAI,MAAM,KAAK;EACrC,MAAM,SAAS,QAAQ,oBAAoB;AAC3C,MAAI,CAAC,OACH,QAAO,EAAE,KAAK,EAAE,OAAO,0BAA0B,EAAE,KAAK,QAAQ;EAIlE,MAAM,MADa,OAAO,oBACJ,CAAC,MAAM,MAAM,EAAE,OAAO,YAAY;AACxD,MAAI,CAAC,OAAO,CAAC,IAAI,SAAS,GACxB,QAAO,EAAE,KAAK,EAAE,OAAO,oCAAoC,EAAE,KAAK,QAAQ;EAG5E,MAAM,SAAS,mBAAmB,YAAY;EAC9C,MAAM,mBAAmB,EAAE,IAAI,KAAK,WAAW,OAAO,GAAG,EAAE,IAAI,KAAK,MAAM,OAAO,OAAO,GAAG;EAC3F,IAAI,YAAY;AAChB,MAAI;AACF,eAAY,mBAAmB,iBAAiB;UAC1C;AACN,UAAO,EAAE,KAAK,EAAE,OAAO,sBAAsB,EAAE,KAAK,QAAQ;;AAG9D,MAAI,CAAC,aAAa,UAAU,SAAS,KAAK,CACxC,QAAO,EAAE,KAAK,EAAE,OAAO,sBAAsB,EAAE,KAAK,QAAQ;EAG9D,MAAM,OAAO,QAAQ,IAAI,KAAK;EAC9B,MAAM,WAAW,QAAQ,MAAM,UAAU;EACzC,MAAM,MAAM,SAAS,MAAM,SAAS;AACpC,MAAI,IAAI,WAAW,KAAK,IAAI,QAAQ,GAClC,QAAO,EAAE,KAAK,EAAE,OAAO,yBAAyB,EAAE,KAAK,QAAQ;AAGjE,MAAI,CAAC,WAAW,SAAS,IAAI,CAAC,SAAS,SAAS,CAAC,QAAQ,CACvD,QAAO,EAAE,KAAK,EAAE,OAAO,aAAa,EAAE,KAAK,QAAQ;EAGrD,MAAM,aAAa,aAAa,SAAS;EACzC,MAAM,WAAW,uBAAuB,UAAU;EAElD,MAAM,OAA4B,SAAS,WAAW,YAAY,GAC9D,0BAA0B,WAAW,SAAS,QAAQ,EAAE,aAAa,UAAU,GAC/E,IAAI,WAAW,WAAW;AAE9B,SAAO,IAAI,SAAS,MAAM;GACxB,QAAQ;GACR,SAAS;IACP,gBAAgB;IAChB,2BAA2B;IAC3B,iBAAiB;IACjB,0BAA0B;IAC1B,+BAA+B;IAChC;GACF,CAAC;GACF;;AAGJ,SAAgB,qCAAqC,eAAqB,MAAoC;CAC5G,MAAM,EAAE,SAAS,8BAA8B;AAK/C,eAAc,IAAI,oBAAoB,MAAM;EAC1C,MAAM,YAAY,QAAQ,cAAc;AACxC,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,OAAO;IACP,MAAM,QAAQ,aAAa;IAC5B;GACF,CAAC;GACF;AAGF,eAAc,KAAK,2BAA2B,OAAO,MAAM;AACzD,MAAI;GACF,MAAM,WAAW,MAAM,QAAQ,kBAAkB;AACjD,UAAO,EAAE,KAAK;IACZ,IAAI;IACJ,SAAS;KACP,OAAO;KACP,SAAS;KACV;IACF,CAAC;WACK,KAAK;AACZ,UAAO,EAAE,KAAK;IACZ,IAAI;IACJ,OAAO,eAAe,QAAQ,IAAI,UAAU;IAC7C,EAAE,IAAI;;GAET;AAGF,eAAc,MAAM,mBAAmB,mBAAmB,QAAQ,CAAC;AAGnE,eAAc,MAAM,yBAAyB,wBAAwB,QAAQ,CAAC;AAQ9E,eAAc,IAAI,iBAAiB,OAAO,MAAM;EAC9C,MAAM,YAAY,cAAc;EAChC,MAAM,kBAAkB,MAAM,oBAAoB;EAClD,MAAM,aAAa,IAAI,IAAI,gBAAgB,KAAI,MAAK,GAAG,EAAE,SAAS,GAAG,EAAE,KAAK,CAAC;EAG7E,MAAM,8BAAc,IAAI,KAA2B;AACnD,OAAK,MAAM,SAAS,WAAW;GAC7B,MAAM,OAAO,YAAY,IAAI,MAAM,SAAS,IAAI,EAAE;AAClD,QAAK,KAAK,MAAM;AAChB,eAAY,IAAI,MAAM,UAAU,KAAK;;AAGvC,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,SAAS;IACT,WAAW,MAAM,KAAK,YAAY,SAAS,CAAC,CAAC,KAAK,CAAC,IAAI,aAAa;KAClE;KACA,MAAM,GAAG,OAAO,EAAE,CAAC,aAAa,GAAG,GAAG,MAAM,EAAE;KAC9C,YAAY,OAAO,MAAK,MAAK,WAAW,IAAI,GAAG,EAAE,SAAS,GAAG,EAAE,KAAK,CAAC;KACrE,QAAQ,OAAO,KAAI,OAAM;MACvB,KAAK,GAAG,EAAE,SAAS,GAAG,EAAE;MACxB,IAAI,EAAE;MACN,MAAM,EAAE;MACR,UAAU,EAAE;MACZ,WAAW,EAAE,aAAa;MAC1B,OAAO,EAAE,SAAS,CAAC,OAAO;MAC1B,eAAe,EAAE,iBAAiB;MAClC,WAAW,EAAE,aAAa;MAC1B,MAAM;OACJ,OAAO,EAAE,MAAM,SAAS;OACxB,QAAQ,EAAE,MAAM,UAAU;OAC3B;MACD,WAAW,WAAW,IAAI,GAAG,EAAE,SAAS,GAAG,EAAE,KAAK;MACnD,EAAE;KACJ,EAAE;IACJ;GACF,CAAC;GACF;AAIF,eAAc,IAAI,mBAAmB,OAAO,MAAM;EAChD,MAAM,SAAS,QAAQ,oBAAoB;AAC3C,MAAI,CAAC,OACH,QAAO,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,CAAC;EAGnC,MAAM,WAAW,OAAO,aAAa;EACrC,MAAM,aAAa,OAAO,oBAAoB;EAC9C,MAAM,4BAAY,IAAI,KAAa;AACnC,OAAK,MAAM,CAAC,OAAO,SAAS,WAC1B,WAAU,IAAI,GAAG;AAGnB,SAAO,UAAU,QAAQ,cAA0C;EACnE,IAAI,wCAAqC,IAAI,KAAK;AAClD,MAAI;GACF,MAAM,UAAU,IAAI,kBAAkB,OAAO,uBAAuB,CAAC;AACrE,2BAAwB,IAAI,IAC1B,QAAQ,gBAAgB,uBAAuB,QAAQ,cAA0C,CAAC,CACnG;UACK;AACN,2CAAwB,IAAI,KAAK;;EAGnC,MAAM,aAAa,WAAW,KAAK,SAAS;GAC1C,IAAI,IAAI,SAAS;GACjB,MAAM,IAAI,SAAS;GACnB,aAAa,IAAI,SAAS;GAC1B,SAAS,IAAI,SAAS;GACtB,MAAM,IAAI,SAAS;GACnB,QAAQ,IAAI;GACZ,QAAQ,UAAU,IAAI,IAAI,GAAG;GAC7B,oBAAoB,sBAAsB,IAAI,IAAI,GAAG;GACrD,OAAO,QAAQ,IAAI,SAAS,GAAG;GAC/B,iBAAiB,wBAAwB,IAAI,SAAS,aAAa;GACnE,IAAI,IAAI,SAAS,KACb;IACE,MAAM,IAAI,SAAS,GAAG;IACtB,aAAa,IAAI,SAAS,GAAG;IAC7B,eAAe,IAAI,SAAS,GAAG;IAChC,GACD,KAAA;GACL,EAAE;AACH,SAAO,EAAE,KAAK,EAAE,YAAY,CAAC;GAC7B;;;;;AAMF,eAAc,KAAK,sCAAsC,2BAA2B,OAAO,MAAM;EAC/F,MAAM,OAAQ,MAAM,EAAE,IAAI,MAAM,CAAC,YAAY,KAAK;EAGlD,MAAM,cACJ,OAAO,MAAM,gBAAgB,WAAW,KAAK,YAAY,MAAM,GAAG;AACpE,MAAI,CAAC,YACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,2BAA2B;GAAE,EAAE,IAAI;AAElF,MAAI,OAAO,MAAM,YAAY,UAC3B,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,6BAA6B;GAAE,EAAE,IAAI;EAEpF,MAAM,SAAS,MAAM,QAAQ,oCAAoC,aAAa,KAAK,QAAQ;AAC3F,MAAI,CAAC,OAAO,GACV,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,OAAO,SAAS,kBAAkB;GAAE,EAAE,IAAI;AAEzF,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS,EAAE,wBAAwB,OAAO,wBAAwB;GACnE,CAAC;GACF;AAEF,eAAc,IAAI,uBAAuB,OAAO,MAAM;EACpD,MAAM,cAAc,EAAE,IAAI,MAAM,KAAK;EACrC,MAAM,SAAS,QAAQ,oBAAoB;AAC3C,MAAI,CAAC,OACH,QAAO,EAAE,KAAK,EAAE,OAAO,0BAA0B,EAAE,IAAI;EAGzD,MAAM,MADa,OAAO,oBACJ,CAAC,MAAM,MAAM,EAAE,OAAO,YAAY;AACxD,MAAI,CAAC,IACH,QAAO,EAAE,KAAK,EAAE,OAAO,uBAAuB,EAAE,IAAI;EAEtD,MAAM,WAAW,OAAO,aAAa;AACrC,SAAO,EAAE,KAAK;GACZ,IAAI,IAAI,SAAS;GACjB,MAAM,IAAI,SAAS;GACnB,aAAa,IAAI,SAAS;GAC1B,SAAS,IAAI,SAAS;GACtB,MAAM,IAAI,SAAS;GACnB,QAAQ,IAAI;GACZ,MAAM,IAAI;GACV,QAAQ,SAAS,WAAW,IAAI,IAAI,GAAG;GACvC,UAAU,IAAI;GACf,CAAC;GACF;AAEF,eAAc,IAAI,+BAA+B,OAAO,MAAM;EAE5D,MAAM,QAAQ,MAAM,mBADA,EAAE,IAAI,MAAM,KACkB,CAAC;AACnD,SAAO,EAAE,KAAK,EAAE,MAAM,OAAO,KAAK,MAAM,EAAE,CAAC;GAC3C;AAEF,eAAc,IAAI,oCAAoC,OAAO,MAAM;EACjE,MAAM,cAAc,EAAE,IAAI,MAAM,KAAK;EACrC,MAAM,MAAM,mBAAmB,EAAE,IAAI,MAAM,MAAM,CAAC;EAClD,MAAM,QAAQ,MAAM,mBAAmB,YAAY;AACnD,MAAI,EAAE,OAAO,OACX,QAAO,EAAE,KAAK,EAAE,OAAO,iBAAiB,EAAE,IAAI;AAEhD,SAAO,EAAE,KAAK,EAAE,OAAO,MAAM,MAAM,CAAC;GACpC;AAEF,eAAc,IAAI,oCAAoC,OAAO,MAAM;EACjE,MAAM,cAAc,EAAE,IAAI,MAAM,KAAK;EACrC,MAAM,MAAM,mBAAmB,EAAE,IAAI,MAAM,MAAM,CAAC;EAClD,MAAM,OAAQ,MAAM,EAAE,IAAI,MAAM,CAAC,YAAY,KAAK;AAClD,MAAI,SAAS,QAAQ,EAAE,WAAW,MAChC,QAAO,EAAE,KAAK,EAAE,OAAO,+CAA6C,EAAE,IAAI;EAE5E,MAAM,QAAQ,MAAM,mBAAmB,YAAY;AACnD,QAAM,OAAO,KAAK;AAClB,QAAM,mBAAmB,aAAa,MAAM;AAC5C,SAAO,EAAE,KAAK,EAAE,IAAI,MAAM,CAAC;GAC3B;AAEF,eAAc,OAAO,oCAAoC,OAAO,MAAM;EACpE,MAAM,cAAc,EAAE,IAAI,MAAM,KAAK;EACrC,MAAM,MAAM,mBAAmB,EAAE,IAAI,MAAM,MAAM,CAAC;EAClD,MAAM,QAAQ,MAAM,mBAAmB,YAAY;AACnD,SAAO,MAAM;AACb,QAAM,mBAAmB,aAAa,MAAM;AAC5C,SAAO,EAAE,KAAK,EAAE,IAAI,MAAM,CAAC;GAC3B;AAEF,eAAc,IAAI,8BAA8B,OAAO,MAAM;EAC3D,MAAM,cAAc,EAAE,IAAI,MAAM,KAAK;AACrC,SAAO,EAAE,KAAK,MAAM,mBAAmB,aAAa,cAAc,CAAC;GACnE;AAEF,eAAc,MAAM,8BAA8B,OAAO,MAAM;EAC7D,MAAM,cAAc,EAAE,IAAI,MAAM,KAAK;EACrC,MAAM,QAAS,MAAM,EAAE,IAAI,MAAM,CAAC,YAAY,KAAK;AACnD,MAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,MAAM,CAC7D,QAAO,EAAE,KAAK,EAAE,OAAO,sCAAsC,EAAE,IAAI;EAErE,MAAM,YAAY,aAAa;EAC/B,MAAM,SAAS,MAAM,mBAAmB,UAAU;AAClD,SAAO,OAAO,QAAQ,MAAM;AAC5B,QAAM,mBAAmB,WAAW,OAAO;AAC3C,SAAO,EAAE,KAAK,EAAE,IAAI,MAAM,CAAC;GAC3B;AAEF,eAAc,IAAI,iBAAiB,MAAM;EACvC,MAAM,SAAS,QAAQ,oBAAoB;EAC3C,MAAM,WAAW,yBACf,QAAQ,eACR,OACD;AACD,SAAO,EAAE,KAAK,SAAS;GACvB;AAEF,eAAc,IAAI,oBAAoB,OAAO,MAAM;EACjD,MAAM,IAAI,EAAE,IAAI,MAAM,IAAI;EAC1B,MAAM,WAAW,EAAE,IAAI,MAAM,WAAW;AACxC,MAAI;GACF,IAAI;AACJ,OAAI,OAAO,MAAM,YAAY,EAAE,MAAM,CACnC,cAAa,MAAMA,iBAAsC,EAAE,MAAM,CAAC;YACzD,OAAO,aAAa,YAAY,SAAS,MAAM,CACxD,cAAa,MAAMC,eAAoC,SAAS,MAAM,CAAC;OAGvE,eAAa,MADKC,eAAoC,EACrC;AAEnB,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM;IAAY,CAAC;WAChC,KAAK;AACZ,UAAO,EAAE,KACP;IACE,IAAI;IACJ,YAAY,EAAE;IACd,OAAO,eAAe,QAAQ,IAAI,UAAU;IAC7C,EACD,IACD;;GAEH;AAEF,eAAc,IAAI,sCAAsC,OAAO,MAAM;EACnE,MAAM,MAAM,EAAE,IAAI,MAAM,UAAU;AAClC,MAAI,CAAC,IACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAwB,EAAE,IAAI;EAElE,IAAI;AACJ,MAAI;AACF,aAAU,mBAAmB,IAAI;UAC3B;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAAwB,EAAE,IAAI;;AAElE,MAAI;GACF,MAAM,UAAU,MAAM,QAAQ,YAAY,4BAA4B,QAAQ;AAC9E,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM;IAAS,CAAC;WAC7B,KAAK;AACZ,UAAO,EAAE,KACP;IAAE,IAAI;IAAO,OAAO,eAAe,QAAQ,IAAI,UAAU;IAA8B,EACvF,IACD;;GAEH;AAEF,eAAc,KAAK,4BAA4B,2BAA2B,OAAO,MAAM;EACrF,IAAI;AACJ,MAAI;AACF,UAAQ,MAAM,EAAE,IAAI,MAAM;UACpB;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAAgB,EAAE,IAAI;;EAE1D,MAAM,OAAO,OAAO,KAAK,SAAS,WAAW,KAAK,KAAK,MAAM,GAAG;EAChE,MAAM,UAAU,OAAO,KAAK,YAAY,WAAW,KAAK,QAAQ,MAAM,GAAG,KAAA;EACzE,MAAM,YACJ,KAAK,cAAc,QAAQ,KAAK,cAAc,UAAU,KAAK,cAAc;AAC7E,MAAI,CAAC,KACH,QAAO,EAAE,KACP;GAAE,IAAI;GAAO,OAAO;GAAoE,EACxF,IACD;AAEH,MAAI;GACF,MAAM,UAAU,MAAM,QAAQ,YAAY,iBAAiB;IAAE;IAAM;IAAS;IAAW,CAAC;AACxF,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM;IAAS,CAAC;WAC7B,KAAK;AACZ,UAAO,EAAE,KACP;IAAE,IAAI;IAAO,OAAO,eAAe,QAAQ,IAAI,UAAU;IAAkB,EAC3E,IACD;;GAEH;AAEF,eAAc,KAAK,8BAA8B,2BAA2B,OAAO,MAAM;EACvF,IAAI;AACJ,MAAI;AACF,UAAQ,MAAM,EAAE,IAAI,MAAM;UACpB;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAAgB,EAAE,IAAI;;EAE1D,MAAM,cAAc,OAAO,KAAK,gBAAgB,WAAW,KAAK,YAAY,MAAM,GAAG;AACrF,MAAI,CAAC,YACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAoC,EAAE,IAAI;AAE9E,MAAI;GACF,MAAM,UAAU,MAAM,QAAQ,YAAY,mBAAmB,YAAY;AACzE,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM;IAAS,CAAC;WAC7B,KAAK;AACZ,UAAO,EAAE,KACP;IAAE,IAAI;IAAO,OAAO,eAAe,QAAQ,IAAI,UAAU;IAAoB,EAC7E,IACD;;GAEH;AAGF,eAAc,KAAK,wBAAwB,OAAO,MAAM;AACtD,MAAI;AAEF,SAAM,QAAQ,cAAc;GAK5B,MAAM,SAAS,cAAc;AAG7B,WAAQ,KAAK,oBAAoB,EAAE,YAAY,OAAO,QAAQ,CAAC;AAE/D,UAAO,EAAE,KAAK;IACZ,IAAI;IACJ,SAAS;KACP,SAAS;KACT,YAAY,OAAO;KACpB;IACF,CAAC;WACK,KAAK;AACZ,UAAO,EAAE,KAAK,EACZ,OAAO,eAAe,QAAQ,IAAI,UAAU,6BAC7C,EAAE,IAAI;;GAET"}
+{"version":3,"file":"auth-registry-extensions.js","names":["extensionMarketplace.searchExtensions","extensionMarketplace.listExtensions","extensionMarketplace.fetchRegistry"],"sources":["../../../../../src/gateway/hono/routes/auth-registry-extensions.ts"],"sourcesContent":["import type { Hono } from 'hono';\nimport { existsSync, readFileSync, statSync } from 'node:fs';\nimport { relative, resolve } from 'node:path';\n\nimport type { Config as SurfaceConfig } from '../../../config/config-surface.js';\nimport type { GatewayService } from '../../service.js';\nimport { buildWhenContextSnapshot } from '../../../extensions/when-context.js';\nimport * as extensionMarketplace from '../../../extensions/marketplace.js';\nimport { mergeActivationContext } from '../../../extensions/activation-context.js';\nimport { ActivationPlanner } from '../../../extensions/activation-planner.js';\nimport { getAllModels, getAvailableModels, type Model, type Api } from '../../../providers/index.js';\nimport { createOAuthHandler, loadOAuthCredentialsToCache } from '../oauth.js';\nimport { createOAuthAsyncHandler } from '../oauth-async.js';\nimport { extensionAssetMimeType } from '../lib/extension-assets.js';\nimport { loadExtensionStore, saveExtensionStore } from '../lib/extension-store.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\n\nconst EXTENSION_ASSET_CSP =\n  \"default-src 'self'; \" +\n  \"script-src 'self' 'unsafe-inline'; \" +\n  \"style-src 'self' 'unsafe-inline'; \" +\n  \"img-src 'self' data: blob:; \" +\n  \"connect-src 'none'; \" +\n  \"frame-ancestors 'self'; \" +\n  \"frame-src 'none'; \" +\n  \"base-uri 'none'; \" +\n  \"object-src 'none'; \" +\n  \"form-action 'none'\";\n\n/** Sandboxed extension iframes send `Origin: null`; echo it (and real origins) so every status includes ACAO. */\nfunction extensionUiAssetCorsAllowOrigin(c: { req: { header: (name: string) => string | undefined } }): string {\n  const origin = c.req.header('origin');\n  if (origin === 'null') return 'null';\n  if (origin) return origin;\n  return '*';\n}\n\nfunction rewriteExtensionAssetHtml(html: string, extensionId: string, assetPath: string): string {\n  const assetDir = assetPath.includes('/') ? assetPath.slice(0, assetPath.lastIndexOf('/') + 1) : '';\n  const assetBase = `/api/extensions/${extensionId}/assets/${assetDir}`;\n\n  return html\n    .replace(/(<script\\b[^>]*?\\ssrc=)([\"'])(\\.\\/)?([^\"']+)\\2/gi, (_match, tag, quote, _dot, file) => {\n      const isAbsolute =\n        file.startsWith('/') || file.startsWith('http://') || file.startsWith('https://');\n      const resolvedSrc = isAbsolute ? file : `${assetBase}${file}`;\n      return `${tag}${quote}${resolvedSrc}${quote} crossorigin=\"anonymous\"`;\n    })\n    .replace(/(<link\\b[^>]*?\\shref=)([\"'])(\\.\\/)?([^\"']+)\\2/gi, (_match, tag, quote, _dot, file) => {\n      const isAbsolute =\n        file.startsWith('/') || file.startsWith('http://') || file.startsWith('https://');\n      const resolvedHref = isAbsolute ? file : `${assetBase}${file}`;\n      return `${tag}${quote}${resolvedHref}${quote}`;\n    });\n}\n\nfunction hasNonEmptyConfigSchema(schema: unknown): boolean {\n  if (!schema || typeof schema !== 'object') return false;\n  const properties = (schema as { properties?: unknown }).properties;\n  return Boolean(properties && typeof properties === 'object' && Object.keys(properties).length > 0);\n}\n\n/**\n * Register extension UI asset routes on the public (unauthenticated) app.\n *\n * Sandboxed iframes (`sandbox=\"allow-scripts …\"` without `allow-same-origin`) have an\n * opaque origin of `null`, so sub-resource requests from inside the iframe cannot\n * carry the `?token=` query parameter that was on the parent HTML URL. Putting these\n * routes behind the auth middleware therefore causes every JS/CSS asset to return 401.\n *\n * Security is maintained by the strict Content-Security-Policy returned with every\n * asset (`frame-ancestors 'self'`), which prevents any page other than the gateway\n * console itself from embedding the extension iframes.\n */\nexport function registerPublicExtensionAssetRoutes(app: Hono, service: GatewayService): void {\n  app.get('/api/extensions/:id/assets/*', async (c) => {\n    const acao = extensionUiAssetCorsAllowOrigin(c);\n    const corsHdr = { 'Access-Control-Allow-Origin': acao } as const;\n\n    const extensionId = c.req.param('id');\n    const loader = service.getExtensionLoader();\n    if (!loader) {\n      return c.json({ error: 'Extensions unavailable' }, 503, corsHdr);\n    }\n\n    const discovered = loader.discoverExtensions();\n    const ext = discovered.find((e) => e.id === extensionId);\n    if (!ext || !ext.manifest.ui) {\n      return c.json({ error: 'Extension not found or has no UI' }, 404, corsHdr);\n    }\n\n    const prefix = `/api/extensions/${extensionId}/assets/`;\n    const assetPathEncoded = c.req.path.startsWith(prefix) ? c.req.path.slice(prefix.length) : '';\n    let assetPath = assetPathEncoded;\n    try {\n      assetPath = decodeURIComponent(assetPathEncoded);\n    } catch {\n      return c.json({ error: 'Invalid asset path' }, 400, corsHdr);\n    }\n\n    if (!assetPath || assetPath.includes('..')) {\n      return c.json({ error: 'Invalid asset path' }, 400, corsHdr);\n    }\n\n    const root = resolve(ext.path);\n    const fullPath = resolve(root, assetPath);\n    const rel = relative(root, fullPath);\n    if (rel.startsWith('..') || rel === '') {\n      return c.json({ error: 'Path traversal denied' }, 403, corsHdr);\n    }\n\n    if (!existsSync(fullPath) || !statSync(fullPath).isFile()) {\n      return c.json({ error: 'Not found' }, 404, corsHdr);\n    }\n\n    const rawContent = readFileSync(fullPath);\n    const mimeType = extensionAssetMimeType(assetPath);\n\n    const body: string | Uint8Array = mimeType.startsWith('text/html')\n      ? rewriteExtensionAssetHtml(rawContent.toString('utf-8'), extensionId, assetPath)\n      : new Uint8Array(rawContent);\n\n    return new Response(body, {\n      status: 200,\n      headers: {\n        'Content-Type': mimeType,\n        'Content-Security-Policy': EXTENSION_ASSET_CSP,\n        'Cache-Control': 'no-store',\n        'X-Content-Type-Options': 'nosniff',\n        'Access-Control-Allow-Origin': acao,\n      },\n    });\n  });\n}\n\nexport function registerAuthRegistryExtensionsRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  const { service, strictRateLimitMiddleware } = deps;\n\n  // ========== Auth API (/api/auth) ==========\n\n  // GET /api/auth/token - Get current gateway token\n  authenticated.get('/api/auth/token', (c) => {\n    const authToken = service.getAuthToken();\n    return c.json({ \n      ok: true, \n      payload: { \n        token: authToken,\n        mode: service.getAuthMode(),\n      } \n    });\n  });\n\n  // POST /api/auth/token/refresh - Generate new gateway token\n  authenticated.post('/api/auth/token/refresh', async (c) => {\n    try {\n      const newToken = await service.refreshAuthToken();\n      return c.json({ \n        ok: true, \n        payload: { \n          token: newToken,\n          message: 'Token refreshed successfully. Please update your client configuration.'\n        } \n      });\n    } catch (err) {\n      return c.json({ \n        ok: false, \n        error: err instanceof Error ? err.message : 'Failed to refresh token' \n      }, 500);\n    }\n  });\n\n  // ========== OAuth API (/api/auth/oauth) ==========\n  authenticated.route('/api/auth/oauth', createOAuthHandler(service));\n\n  // ========== Async OAuth API (/api/auth/oauth-async) ==========\n  authenticated.route('/api/auth/oauth-async', createOAuthAsyncHandler(service));\n\n  // Load OAuth credentials from config into cache on startup\n  loadOAuthCredentialsToCache(service);\n\n  // ========== Registry API ==========\n  \n  // GET /api/registry - Full registry for frontend\n  authenticated.get('/api/registry', async (c) => {\n    const allModels = getAllModels();\n    const availableModels = await getAvailableModels();\n    const configured = new Set(availableModels.map(m => `${m.provider}/${m.id}`));\n    \n    // Group models by provider\n    const providerMap = new Map<string, Model<Api>[]>();\n    for (const model of allModels) {\n      const list = providerMap.get(model.provider) ?? [];\n      list.push(model);\n      providerMap.set(model.provider, list);\n    }\n    \n    return c.json({\n      ok: true,\n      payload: {\n        version: 'pi-ai',\n        providers: Array.from(providerMap.entries()).map(([id, models]) => ({\n          id,\n          name: id.charAt(0).toUpperCase() + id.slice(1),\n          configured: models.some(m => configured.has(`${m.provider}/${m.id}`)),\n          models: models.map(m => ({\n            ref: `${m.provider}/${m.id}`,\n            id: m.id,\n            name: m.name,\n            provider: m.provider,\n            reasoning: m.reasoning ?? false,\n            input: m.input ?? ['text'],\n            contextWindow: m.contextWindow ?? 128000,\n            maxTokens: m.maxTokens ?? 4096,\n            cost: {\n              input: m.cost?.input ?? 0,\n              output: m.cost?.output ?? 0,\n            },\n            available: configured.has(`${m.provider}/${m.id}`),\n          })),\n        })),\n      },\n    });\n  });\n\n  // ========== Extension UI (manifest discovery + static assets) ==========\n\n  authenticated.get('/api/extensions', async (c) => {\n    const loader = service.getExtensionLoader();\n    if (!loader) {\n      return c.json({ extensions: [] });\n    }\n\n    const registry = loader.getRegistry();\n    const discovered = loader.discoverExtensions();\n    const activeIds = new Set<string>();\n    for (const [id] of registry.extensions) {\n      activeIds.add(id);\n    }\n\n    loader.setConfig(service.currentConfig as unknown as SurfaceConfig);\n    let activationEligibleIds: Set<string> = new Set();\n    try {\n      const planner = new ActivationPlanner(loader.buildManifestRegistry());\n      activationEligibleIds = new Set(\n        planner.getActivatedIds(mergeActivationContext(service.currentConfig as unknown as SurfaceConfig)),\n      );\n    } catch {\n      activationEligibleIds = new Set();\n    }\n\n    const extensions = discovered.map((ext) => ({\n      id: ext.manifest.id,\n      name: ext.manifest.name,\n      description: ext.manifest.description,\n      version: ext.manifest.version,\n      kind: ext.manifest.kind,\n      source: ext.source,\n      active: activeIds.has(ext.id),\n      activationEligible: activationEligibleIds.has(ext.id),\n      hasUi: Boolean(ext.manifest.ui),\n      hasConfigSchema: hasNonEmptyConfigSchema(ext.manifest.configSchema),\n      ui: ext.manifest.ui\n        ? {\n            icon: ext.manifest.ui.icon,\n            permissions: ext.manifest.ui.permissions,\n            contributions: ext.manifest.ui.contributions,\n          }\n        : undefined,\n    }));\n    return c.json({ extensions });\n  });\n\n  /**\n   * Built-in (bundled) extension enable/disable — persists `extensions.enabled` / `extensions.disabled`.\n   * Body: `{ extensionId: string, enabled: boolean }`\n   */\n  authenticated.post('/api/extensions/bundled/activation', strictRateLimitMiddleware, async (c) => {\n    const body = (await c.req.json().catch(() => null)) as\n      | { extensionId?: unknown; enabled?: unknown }\n      | null;\n    const extensionId =\n      typeof body?.extensionId === 'string' ? body.extensionId.trim() : '';\n    if (!extensionId) {\n      return c.json({ ok: false, error: { message: 'extensionId is required' } }, 400);\n    }\n    if (typeof body?.enabled !== 'boolean') {\n      return c.json({ ok: false, error: { message: 'enabled must be a boolean' } }, 400);\n    }\n    const result = await service.setBundledExtensionActivationTarget(extensionId, body.enabled);\n    if (!result.ok) {\n      return c.json({ ok: false, error: { message: result.error ?? 'Request failed' } }, 400);\n    }\n    return c.json({\n      ok: true,\n      payload: { requiresGatewayRestart: result.requiresGatewayRestart },\n    });\n  });\n\n  authenticated.get('/api/extensions/:id', async (c) => {\n    const extensionId = c.req.param('id');\n    const loader = service.getExtensionLoader();\n    if (!loader) {\n      return c.json({ error: 'Extensions unavailable' }, 503);\n    }\n    const discovered = loader.discoverExtensions();\n    const ext = discovered.find((e) => e.id === extensionId);\n    if (!ext) {\n      return c.json({ error: 'Extension not found' }, 404);\n    }\n    const registry = loader.getRegistry();\n    return c.json({\n      id: ext.manifest.id,\n      name: ext.manifest.name,\n      description: ext.manifest.description,\n      version: ext.manifest.version,\n      kind: ext.manifest.kind,\n      source: ext.source,\n      path: ext.path,\n      active: registry.extensions.has(ext.id),\n      manifest: ext.manifest,\n    });\n  });\n\n  authenticated.get('/api/extensions/:id/ui-grant', (c) => {\n    return c.json({ grant: service.localApps.getUiGrant(c.req.param('id')) });\n  });\n\n  authenticated.post('/api/extensions/:id/ui-grant', (c) => {\n    return c.json({ grant: service.localApps.grantUiPermissions(c.req.param('id')) });\n  });\n\n  authenticated.get('/api/extensions/:id/storage', async (c) => {\n    const extensionId = c.req.param('id');\n    const store = await loadExtensionStore(extensionId);\n    return c.json({ keys: Object.keys(store) });\n  });\n\n  authenticated.get('/api/extensions/:id/storage/:key', async (c) => {\n    const extensionId = c.req.param('id');\n    const key = decodeURIComponent(c.req.param('key'));\n    const store = await loadExtensionStore(extensionId);\n    if (!(key in store)) {\n      return c.json({ error: 'Key not found' }, 404);\n    }\n    return c.json({ value: store[key] });\n  });\n\n  authenticated.put('/api/extensions/:id/storage/:key', async (c) => {\n    const extensionId = c.req.param('id');\n    const key = decodeURIComponent(c.req.param('key'));\n    const body = (await c.req.json().catch(() => null)) as { value?: unknown } | null;\n    if (body === null || !('value' in body)) {\n      return c.json({ error: 'Request body must contain a \"value\" field' }, 400);\n    }\n    const store = await loadExtensionStore(extensionId);\n    store[key] = body.value;\n    await saveExtensionStore(extensionId, store);\n    return c.json({ ok: true });\n  });\n\n  authenticated.delete('/api/extensions/:id/storage/:key', async (c) => {\n    const extensionId = c.req.param('id');\n    const key = decodeURIComponent(c.req.param('key'));\n    const store = await loadExtensionStore(extensionId);\n    delete store[key];\n    await saveExtensionStore(extensionId, store);\n    return c.json({ ok: true });\n  });\n\n  authenticated.get('/api/extensions/:id/config', async (c) => {\n    const extensionId = c.req.param('id');\n    return c.json(await loadExtensionStore(`__config__${extensionId}`));\n  });\n\n  authenticated.patch('/api/extensions/:id/config', async (c) => {\n    const extensionId = c.req.param('id');\n    const patch = (await c.req.json().catch(() => null)) as Record<string, unknown> | null;\n    if (!patch || typeof patch !== 'object' || Array.isArray(patch)) {\n      return c.json({ error: 'Request body must be a JSON object' }, 400);\n    }\n    const namespace = `__config__${extensionId}`;\n    const config = await loadExtensionStore(namespace);\n    Object.assign(config, patch);\n    await saveExtensionStore(namespace, config);\n    return c.json({ ok: true });\n  });\n\n  authenticated.get('/api/context', (c) => {\n    const loader = service.getExtensionLoader();\n    const snapshot = buildWhenContextSnapshot(\n      service.currentConfig as unknown as SurfaceConfig,\n      loader,\n    );\n    return c.json(snapshot);\n  });\n\n  authenticated.get('/api/marketplace', async (c) => {\n    const q = c.req.query('q');\n    const category = c.req.query('category');\n    try {\n      let extensions;\n      if (typeof q === 'string' && q.trim()) {\n        extensions = await extensionMarketplace.searchExtensions(q.trim());\n      } else if (typeof category === 'string' && category.trim()) {\n        extensions = await extensionMarketplace.listExtensions(category.trim());\n      } else {\n        const reg = await extensionMarketplace.fetchRegistry();\n        extensions = reg.extensions;\n      }\n      return c.json({ ok: true, extensions });\n    } catch (err) {\n      return c.json(\n        {\n          ok: false,\n          extensions: [],\n          error: err instanceof Error ? err.message : 'marketplace fetch failed',\n        },\n        500,\n      );\n    }\n  });\n\n  authenticated.get('/api/marketplace/packages/:pkgName', async (c) => {\n    const raw = c.req.param('pkgName');\n    if (!raw) {\n      return c.json({ ok: false, error: 'Missing package name' }, 400);\n    }\n    let pkgName: string;\n    try {\n      pkgName = decodeURIComponent(raw);\n    } catch {\n      return c.json({ ok: false, error: 'Invalid package name' }, 400);\n    }\n    try {\n      const payload = await service.marketplace.fetchExtensionPackageDetail(pkgName);\n      return c.json({ ok: true, payload });\n    } catch (err) {\n      return c.json(\n        { ok: false, error: err instanceof Error ? err.message : 'Marketplace request failed' },\n        502,\n      );\n    }\n  });\n\n  authenticated.post('/api/marketplace/install', strictRateLimitMiddleware, async (c) => {\n    let body: { name?: unknown; version?: unknown; overwrite?: unknown };\n    try {\n      body = (await c.req.json()) as typeof body;\n    } catch {\n      return c.json({ ok: false, error: 'Invalid JSON' }, 400);\n    }\n    const name = typeof body.name === 'string' ? body.name.trim() : '';\n    const version = typeof body.version === 'string' ? body.version.trim() : undefined;\n    const overwrite =\n      body.overwrite === true || body.overwrite === 'true' || body.overwrite === '1';\n    if (!name) {\n      return c.json(\n        { ok: false, error: 'Expected { name: string, version?: string, overwrite?: boolean }' },\n        400,\n      );\n    }\n    try {\n      const payload = await service.marketplace.installExtension({ name, version, overwrite });\n      return c.json({ ok: true, payload });\n    } catch (err) {\n      return c.json(\n        { ok: false, error: err instanceof Error ? err.message : 'Install failed' },\n        400,\n      );\n    }\n  });\n\n  authenticated.post('/api/marketplace/uninstall', strictRateLimitMiddleware, async (c) => {\n    let body: { extensionId?: unknown };\n    try {\n      body = (await c.req.json()) as typeof body;\n    } catch {\n      return c.json({ ok: false, error: 'Invalid JSON' }, 400);\n    }\n    const extensionId = typeof body.extensionId === 'string' ? body.extensionId.trim() : '';\n    if (!extensionId) {\n      return c.json({ ok: false, error: 'Expected { extensionId: string }' }, 400);\n    }\n    try {\n      const payload = await service.marketplace.uninstallExtension(extensionId);\n      return c.json({ ok: true, payload });\n    } catch (err) {\n      return c.json(\n        { ok: false, error: err instanceof Error ? err.message : 'Uninstall failed' },\n        400,\n      );\n    }\n  });\n\n  // POST /api/registry/reload — reload gateway config and refresh model list for clients\n  authenticated.post('/api/registry/reload', async (c) => {\n    try {\n      // Reload config\n      await service.reloadConfig();\n      \n      // Reload OAuth credentials from new config\n      loadOAuthCredentialsToCache(service);\n      \n      const models = getAllModels();\n      \n      // Emit SSE event to all connected clients\n      service.emit('registry.updated', { modelCount: models.length });\n      \n      return c.json({\n        ok: true,\n        payload: {\n          message: 'Registry reloaded',\n          modelCount: models.length,\n        },\n      });\n    } catch (err) {\n      return c.json({\n        error: err instanceof Error ? err.message : 'Failed to reload registry',\n      }, 500);\n    }\n  });\n\n}\n"],"mappings":";;;;;;;;;;;;gBAUqG;AAOrG,MAAM,sBACJ;;AAYF,SAAS,gCAAgC,GAAsE;CAC7G,MAAM,SAAS,EAAE,IAAI,OAAO,SAAS;AACrC,KAAI,WAAW,OAAQ,QAAO;AAC9B,KAAI,OAAQ,QAAO;AACnB,QAAO;;AAGT,SAAS,0BAA0B,MAAc,aAAqB,WAA2B;CAE/F,MAAM,YAAY,mBAAmB,YAAY,UADhC,UAAU,SAAS,IAAI,GAAG,UAAU,MAAM,GAAG,UAAU,YAAY,IAAI,GAAG,EAAE,GAAG;AAGhG,QAAO,KACJ,QAAQ,qDAAqD,QAAQ,KAAK,OAAO,MAAM,SAAS;AAI/F,SAAO,GAAG,MAAM,QAFd,KAAK,WAAW,IAAI,IAAI,KAAK,WAAW,UAAU,IAAI,KAAK,WAAW,WAAW,GAClD,OAAO,GAAG,YAAY,SACjB,MAAM;GAC5C,CACD,QAAQ,oDAAoD,QAAQ,KAAK,OAAO,MAAM,SAAS;AAI9F,SAAO,GAAG,MAAM,QAFd,KAAK,WAAW,IAAI,IAAI,KAAK,WAAW,UAAU,IAAI,KAAK,WAAW,WAAW,GACjD,OAAO,GAAG,YAAY,SACjB;GACvC;;AAGN,SAAS,wBAAwB,QAA0B;AACzD,KAAI,CAAC,UAAU,OAAO,WAAW,SAAU,QAAO;CAClD,MAAM,aAAc,OAAoC;AACxD,QAAO,QAAQ,cAAc,OAAO,eAAe,YAAY,OAAO,KAAK,WAAW,CAAC,SAAS,EAAE;;;;;;;;;;;;;;AAepG,SAAgB,mCAAmC,KAAW,SAA+B;AAC3F,KAAI,IAAI,gCAAgC,OAAO,MAAM;EACnD,MAAM,OAAO,gCAAgC,EAAE;EAC/C,MAAM,UAAU,EAAE,+BAA+B,MAAM;EAEvD,MAAM,cAAc,EAAE,IAAI,MAAM,KAAK;EACrC,MAAM,SAAS,QAAQ,oBAAoB;AAC3C,MAAI,CAAC,OACH,QAAO,EAAE,KAAK,EAAE,OAAO,0BAA0B,EAAE,KAAK,QAAQ;EAIlE,MAAM,MADa,OAAO,oBACJ,CAAC,MAAM,MAAM,EAAE,OAAO,YAAY;AACxD,MAAI,CAAC,OAAO,CAAC,IAAI,SAAS,GACxB,QAAO,EAAE,KAAK,EAAE,OAAO,oCAAoC,EAAE,KAAK,QAAQ;EAG5E,MAAM,SAAS,mBAAmB,YAAY;EAC9C,MAAM,mBAAmB,EAAE,IAAI,KAAK,WAAW,OAAO,GAAG,EAAE,IAAI,KAAK,MAAM,OAAO,OAAO,GAAG;EAC3F,IAAI,YAAY;AAChB,MAAI;AACF,eAAY,mBAAmB,iBAAiB;UAC1C;AACN,UAAO,EAAE,KAAK,EAAE,OAAO,sBAAsB,EAAE,KAAK,QAAQ;;AAG9D,MAAI,CAAC,aAAa,UAAU,SAAS,KAAK,CACxC,QAAO,EAAE,KAAK,EAAE,OAAO,sBAAsB,EAAE,KAAK,QAAQ;EAG9D,MAAM,OAAO,QAAQ,IAAI,KAAK;EAC9B,MAAM,WAAW,QAAQ,MAAM,UAAU;EACzC,MAAM,MAAM,SAAS,MAAM,SAAS;AACpC,MAAI,IAAI,WAAW,KAAK,IAAI,QAAQ,GAClC,QAAO,EAAE,KAAK,EAAE,OAAO,yBAAyB,EAAE,KAAK,QAAQ;AAGjE,MAAI,CAAC,WAAW,SAAS,IAAI,CAAC,SAAS,SAAS,CAAC,QAAQ,CACvD,QAAO,EAAE,KAAK,EAAE,OAAO,aAAa,EAAE,KAAK,QAAQ;EAGrD,MAAM,aAAa,aAAa,SAAS;EACzC,MAAM,WAAW,uBAAuB,UAAU;EAElD,MAAM,OAA4B,SAAS,WAAW,YAAY,GAC9D,0BAA0B,WAAW,SAAS,QAAQ,EAAE,aAAa,UAAU,GAC/E,IAAI,WAAW,WAAW;AAE9B,SAAO,IAAI,SAAS,MAAM;GACxB,QAAQ;GACR,SAAS;IACP,gBAAgB;IAChB,2BAA2B;IAC3B,iBAAiB;IACjB,0BAA0B;IAC1B,+BAA+B;IAChC;GACF,CAAC;GACF;;AAGJ,SAAgB,qCAAqC,eAAqB,MAAoC;CAC5G,MAAM,EAAE,SAAS,8BAA8B;AAK/C,eAAc,IAAI,oBAAoB,MAAM;EAC1C,MAAM,YAAY,QAAQ,cAAc;AACxC,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,OAAO;IACP,MAAM,QAAQ,aAAa;IAC5B;GACF,CAAC;GACF;AAGF,eAAc,KAAK,2BAA2B,OAAO,MAAM;AACzD,MAAI;GACF,MAAM,WAAW,MAAM,QAAQ,kBAAkB;AACjD,UAAO,EAAE,KAAK;IACZ,IAAI;IACJ,SAAS;KACP,OAAO;KACP,SAAS;KACV;IACF,CAAC;WACK,KAAK;AACZ,UAAO,EAAE,KAAK;IACZ,IAAI;IACJ,OAAO,eAAe,QAAQ,IAAI,UAAU;IAC7C,EAAE,IAAI;;GAET;AAGF,eAAc,MAAM,mBAAmB,mBAAmB,QAAQ,CAAC;AAGnE,eAAc,MAAM,yBAAyB,wBAAwB,QAAQ,CAAC;AAQ9E,eAAc,IAAI,iBAAiB,OAAO,MAAM;EAC9C,MAAM,YAAY,cAAc;EAChC,MAAM,kBAAkB,MAAM,oBAAoB;EAClD,MAAM,aAAa,IAAI,IAAI,gBAAgB,KAAI,MAAK,GAAG,EAAE,SAAS,GAAG,EAAE,KAAK,CAAC;EAG7E,MAAM,8BAAc,IAAI,KAA2B;AACnD,OAAK,MAAM,SAAS,WAAW;GAC7B,MAAM,OAAO,YAAY,IAAI,MAAM,SAAS,IAAI,EAAE;AAClD,QAAK,KAAK,MAAM;AAChB,eAAY,IAAI,MAAM,UAAU,KAAK;;AAGvC,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,SAAS;IACT,WAAW,MAAM,KAAK,YAAY,SAAS,CAAC,CAAC,KAAK,CAAC,IAAI,aAAa;KAClE;KACA,MAAM,GAAG,OAAO,EAAE,CAAC,aAAa,GAAG,GAAG,MAAM,EAAE;KAC9C,YAAY,OAAO,MAAK,MAAK,WAAW,IAAI,GAAG,EAAE,SAAS,GAAG,EAAE,KAAK,CAAC;KACrE,QAAQ,OAAO,KAAI,OAAM;MACvB,KAAK,GAAG,EAAE,SAAS,GAAG,EAAE;MACxB,IAAI,EAAE;MACN,MAAM,EAAE;MACR,UAAU,EAAE;MACZ,WAAW,EAAE,aAAa;MAC1B,OAAO,EAAE,SAAS,CAAC,OAAO;MAC1B,eAAe,EAAE,iBAAiB;MAClC,WAAW,EAAE,aAAa;MAC1B,MAAM;OACJ,OAAO,EAAE,MAAM,SAAS;OACxB,QAAQ,EAAE,MAAM,UAAU;OAC3B;MACD,WAAW,WAAW,IAAI,GAAG,EAAE,SAAS,GAAG,EAAE,KAAK;MACnD,EAAE;KACJ,EAAE;IACJ;GACF,CAAC;GACF;AAIF,eAAc,IAAI,mBAAmB,OAAO,MAAM;EAChD,MAAM,SAAS,QAAQ,oBAAoB;AAC3C,MAAI,CAAC,OACH,QAAO,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,CAAC;EAGnC,MAAM,WAAW,OAAO,aAAa;EACrC,MAAM,aAAa,OAAO,oBAAoB;EAC9C,MAAM,4BAAY,IAAI,KAAa;AACnC,OAAK,MAAM,CAAC,OAAO,SAAS,WAC1B,WAAU,IAAI,GAAG;AAGnB,SAAO,UAAU,QAAQ,cAA0C;EACnE,IAAI,wCAAqC,IAAI,KAAK;AAClD,MAAI;GACF,MAAM,UAAU,IAAI,kBAAkB,OAAO,uBAAuB,CAAC;AACrE,2BAAwB,IAAI,IAC1B,QAAQ,gBAAgB,uBAAuB,QAAQ,cAA0C,CAAC,CACnG;UACK;AACN,2CAAwB,IAAI,KAAK;;EAGnC,MAAM,aAAa,WAAW,KAAK,SAAS;GAC1C,IAAI,IAAI,SAAS;GACjB,MAAM,IAAI,SAAS;GACnB,aAAa,IAAI,SAAS;GAC1B,SAAS,IAAI,SAAS;GACtB,MAAM,IAAI,SAAS;GACnB,QAAQ,IAAI;GACZ,QAAQ,UAAU,IAAI,IAAI,GAAG;GAC7B,oBAAoB,sBAAsB,IAAI,IAAI,GAAG;GACrD,OAAO,QAAQ,IAAI,SAAS,GAAG;GAC/B,iBAAiB,wBAAwB,IAAI,SAAS,aAAa;GACnE,IAAI,IAAI,SAAS,KACb;IACE,MAAM,IAAI,SAAS,GAAG;IACtB,aAAa,IAAI,SAAS,GAAG;IAC7B,eAAe,IAAI,SAAS,GAAG;IAChC,GACD,KAAA;GACL,EAAE;AACH,SAAO,EAAE,KAAK,EAAE,YAAY,CAAC;GAC7B;;;;;AAMF,eAAc,KAAK,sCAAsC,2BAA2B,OAAO,MAAM;EAC/F,MAAM,OAAQ,MAAM,EAAE,IAAI,MAAM,CAAC,YAAY,KAAK;EAGlD,MAAM,cACJ,OAAO,MAAM,gBAAgB,WAAW,KAAK,YAAY,MAAM,GAAG;AACpE,MAAI,CAAC,YACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,2BAA2B;GAAE,EAAE,IAAI;AAElF,MAAI,OAAO,MAAM,YAAY,UAC3B,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,6BAA6B;GAAE,EAAE,IAAI;EAEpF,MAAM,SAAS,MAAM,QAAQ,oCAAoC,aAAa,KAAK,QAAQ;AAC3F,MAAI,CAAC,OAAO,GACV,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,OAAO,SAAS,kBAAkB;GAAE,EAAE,IAAI;AAEzF,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS,EAAE,wBAAwB,OAAO,wBAAwB;GACnE,CAAC;GACF;AAEF,eAAc,IAAI,uBAAuB,OAAO,MAAM;EACpD,MAAM,cAAc,EAAE,IAAI,MAAM,KAAK;EACrC,MAAM,SAAS,QAAQ,oBAAoB;AAC3C,MAAI,CAAC,OACH,QAAO,EAAE,KAAK,EAAE,OAAO,0BAA0B,EAAE,IAAI;EAGzD,MAAM,MADa,OAAO,oBACJ,CAAC,MAAM,MAAM,EAAE,OAAO,YAAY;AACxD,MAAI,CAAC,IACH,QAAO,EAAE,KAAK,EAAE,OAAO,uBAAuB,EAAE,IAAI;EAEtD,MAAM,WAAW,OAAO,aAAa;AACrC,SAAO,EAAE,KAAK;GACZ,IAAI,IAAI,SAAS;GACjB,MAAM,IAAI,SAAS;GACnB,aAAa,IAAI,SAAS;GAC1B,SAAS,IAAI,SAAS;GACtB,MAAM,IAAI,SAAS;GACnB,QAAQ,IAAI;GACZ,MAAM,IAAI;GACV,QAAQ,SAAS,WAAW,IAAI,IAAI,GAAG;GACvC,UAAU,IAAI;GACf,CAAC;GACF;AAEF,eAAc,IAAI,iCAAiC,MAAM;AACvD,SAAO,EAAE,KAAK,EAAE,OAAO,QAAQ,UAAU,WAAW,EAAE,IAAI,MAAM,KAAK,CAAC,EAAE,CAAC;GACzE;AAEF,eAAc,KAAK,iCAAiC,MAAM;AACxD,SAAO,EAAE,KAAK,EAAE,OAAO,QAAQ,UAAU,mBAAmB,EAAE,IAAI,MAAM,KAAK,CAAC,EAAE,CAAC;GACjF;AAEF,eAAc,IAAI,+BAA+B,OAAO,MAAM;EAE5D,MAAM,QAAQ,MAAM,mBADA,EAAE,IAAI,MAAM,KACkB,CAAC;AACnD,SAAO,EAAE,KAAK,EAAE,MAAM,OAAO,KAAK,MAAM,EAAE,CAAC;GAC3C;AAEF,eAAc,IAAI,oCAAoC,OAAO,MAAM;EACjE,MAAM,cAAc,EAAE,IAAI,MAAM,KAAK;EACrC,MAAM,MAAM,mBAAmB,EAAE,IAAI,MAAM,MAAM,CAAC;EAClD,MAAM,QAAQ,MAAM,mBAAmB,YAAY;AACnD,MAAI,EAAE,OAAO,OACX,QAAO,EAAE,KAAK,EAAE,OAAO,iBAAiB,EAAE,IAAI;AAEhD,SAAO,EAAE,KAAK,EAAE,OAAO,MAAM,MAAM,CAAC;GACpC;AAEF,eAAc,IAAI,oCAAoC,OAAO,MAAM;EACjE,MAAM,cAAc,EAAE,IAAI,MAAM,KAAK;EACrC,MAAM,MAAM,mBAAmB,EAAE,IAAI,MAAM,MAAM,CAAC;EAClD,MAAM,OAAQ,MAAM,EAAE,IAAI,MAAM,CAAC,YAAY,KAAK;AAClD,MAAI,SAAS,QAAQ,EAAE,WAAW,MAChC,QAAO,EAAE,KAAK,EAAE,OAAO,+CAA6C,EAAE,IAAI;EAE5E,MAAM,QAAQ,MAAM,mBAAmB,YAAY;AACnD,QAAM,OAAO,KAAK;AAClB,QAAM,mBAAmB,aAAa,MAAM;AAC5C,SAAO,EAAE,KAAK,EAAE,IAAI,MAAM,CAAC;GAC3B;AAEF,eAAc,OAAO,oCAAoC,OAAO,MAAM;EACpE,MAAM,cAAc,EAAE,IAAI,MAAM,KAAK;EACrC,MAAM,MAAM,mBAAmB,EAAE,IAAI,MAAM,MAAM,CAAC;EAClD,MAAM,QAAQ,MAAM,mBAAmB,YAAY;AACnD,SAAO,MAAM;AACb,QAAM,mBAAmB,aAAa,MAAM;AAC5C,SAAO,EAAE,KAAK,EAAE,IAAI,MAAM,CAAC;GAC3B;AAEF,eAAc,IAAI,8BAA8B,OAAO,MAAM;EAC3D,MAAM,cAAc,EAAE,IAAI,MAAM,KAAK;AACrC,SAAO,EAAE,KAAK,MAAM,mBAAmB,aAAa,cAAc,CAAC;GACnE;AAEF,eAAc,MAAM,8BAA8B,OAAO,MAAM;EAC7D,MAAM,cAAc,EAAE,IAAI,MAAM,KAAK;EACrC,MAAM,QAAS,MAAM,EAAE,IAAI,MAAM,CAAC,YAAY,KAAK;AACnD,MAAI,CAAC,SAAS,OAAO,UAAU,YAAY,MAAM,QAAQ,MAAM,CAC7D,QAAO,EAAE,KAAK,EAAE,OAAO,sCAAsC,EAAE,IAAI;EAErE,MAAM,YAAY,aAAa;EAC/B,MAAM,SAAS,MAAM,mBAAmB,UAAU;AAClD,SAAO,OAAO,QAAQ,MAAM;AAC5B,QAAM,mBAAmB,WAAW,OAAO;AAC3C,SAAO,EAAE,KAAK,EAAE,IAAI,MAAM,CAAC;GAC3B;AAEF,eAAc,IAAI,iBAAiB,MAAM;EACvC,MAAM,SAAS,QAAQ,oBAAoB;EAC3C,MAAM,WAAW,yBACf,QAAQ,eACR,OACD;AACD,SAAO,EAAE,KAAK,SAAS;GACvB;AAEF,eAAc,IAAI,oBAAoB,OAAO,MAAM;EACjD,MAAM,IAAI,EAAE,IAAI,MAAM,IAAI;EAC1B,MAAM,WAAW,EAAE,IAAI,MAAM,WAAW;AACxC,MAAI;GACF,IAAI;AACJ,OAAI,OAAO,MAAM,YAAY,EAAE,MAAM,CACnC,cAAa,MAAMA,iBAAsC,EAAE,MAAM,CAAC;YACzD,OAAO,aAAa,YAAY,SAAS,MAAM,CACxD,cAAa,MAAMC,eAAoC,SAAS,MAAM,CAAC;OAGvE,eAAa,MADKC,eAAoC,EACrC;AAEnB,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM;IAAY,CAAC;WAChC,KAAK;AACZ,UAAO,EAAE,KACP;IACE,IAAI;IACJ,YAAY,EAAE;IACd,OAAO,eAAe,QAAQ,IAAI,UAAU;IAC7C,EACD,IACD;;GAEH;AAEF,eAAc,IAAI,sCAAsC,OAAO,MAAM;EACnE,MAAM,MAAM,EAAE,IAAI,MAAM,UAAU;AAClC,MAAI,CAAC,IACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAwB,EAAE,IAAI;EAElE,IAAI;AACJ,MAAI;AACF,aAAU,mBAAmB,IAAI;UAC3B;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAAwB,EAAE,IAAI;;AAElE,MAAI;GACF,MAAM,UAAU,MAAM,QAAQ,YAAY,4BAA4B,QAAQ;AAC9E,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM;IAAS,CAAC;WAC7B,KAAK;AACZ,UAAO,EAAE,KACP;IAAE,IAAI;IAAO,OAAO,eAAe,QAAQ,IAAI,UAAU;IAA8B,EACvF,IACD;;GAEH;AAEF,eAAc,KAAK,4BAA4B,2BAA2B,OAAO,MAAM;EACrF,IAAI;AACJ,MAAI;AACF,UAAQ,MAAM,EAAE,IAAI,MAAM;UACpB;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAAgB,EAAE,IAAI;;EAE1D,MAAM,OAAO,OAAO,KAAK,SAAS,WAAW,KAAK,KAAK,MAAM,GAAG;EAChE,MAAM,UAAU,OAAO,KAAK,YAAY,WAAW,KAAK,QAAQ,MAAM,GAAG,KAAA;EACzE,MAAM,YACJ,KAAK,cAAc,QAAQ,KAAK,cAAc,UAAU,KAAK,cAAc;AAC7E,MAAI,CAAC,KACH,QAAO,EAAE,KACP;GAAE,IAAI;GAAO,OAAO;GAAoE,EACxF,IACD;AAEH,MAAI;GACF,MAAM,UAAU,MAAM,QAAQ,YAAY,iBAAiB;IAAE;IAAM;IAAS;IAAW,CAAC;AACxF,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM;IAAS,CAAC;WAC7B,KAAK;AACZ,UAAO,EAAE,KACP;IAAE,IAAI;IAAO,OAAO,eAAe,QAAQ,IAAI,UAAU;IAAkB,EAC3E,IACD;;GAEH;AAEF,eAAc,KAAK,8BAA8B,2BAA2B,OAAO,MAAM;EACvF,IAAI;AACJ,MAAI;AACF,UAAQ,MAAM,EAAE,IAAI,MAAM;UACpB;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAAgB,EAAE,IAAI;;EAE1D,MAAM,cAAc,OAAO,KAAK,gBAAgB,WAAW,KAAK,YAAY,MAAM,GAAG;AACrF,MAAI,CAAC,YACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAoC,EAAE,IAAI;AAE9E,MAAI;GACF,MAAM,UAAU,MAAM,QAAQ,YAAY,mBAAmB,YAAY;AACzE,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM;IAAS,CAAC;WAC7B,KAAK;AACZ,UAAO,EAAE,KACP;IAAE,IAAI;IAAO,OAAO,eAAe,QAAQ,IAAI,UAAU;IAAoB,EAC7E,IACD;;GAEH;AAGF,eAAc,KAAK,wBAAwB,OAAO,MAAM;AACtD,MAAI;AAEF,SAAM,QAAQ,cAAc;GAK5B,MAAM,SAAS,cAAc;AAG7B,WAAQ,KAAK,oBAAoB,EAAE,YAAY,OAAO,QAAQ,CAAC;AAE/D,UAAO,EAAE,KAAK;IACZ,IAAI;IACJ,SAAS;KACP,SAAS;KACT,YAAY,OAAO;KACpB;IACF,CAAC;WACK,KAAK;AACZ,UAAO,EAAE,KAAK,EACZ,OAAO,eAAe,QAAQ,IAAI,UAAU,6BAC7C,EAAE,IAAI;;GAET"}