@xopcai/xopc 0.0.149 → 0.0.151

package/dist/src/cli/utils/init-workspace.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"init-workspace.js","names":[],"sources":["../../../../src/cli/utils/init-workspace.ts"],"sourcesContent":["import type { Config } from '../../config/schema.js';\n\nimport {\n  initWorkspaceCore,\n  type InitWorkspaceCoreOptions,\n  type InitWorkspaceResult,\n} from './init-workspace-core.js';\n\nexport type { InitWorkspaceResult };\n\nexport interface InitWorkspaceOptions extends Omit<InitWorkspaceCoreOptions, 'assertChannelPlugins'> {\n  /**\n   * When true, only {@link ConfigSchema} (Zod) runs; bundled channel plugins are not loaded and\n   * their `configSchema.validate` hooks are skipped. Use from the Electron main process so the\n   * desktop shell does not import the full channel graph (e.g. Telegram → providers → pi-ai).\n   * CLI / gateway should leave this false so plugin rules run here; the gateway still validates\n   * on startup after the channel config validator is registered.\n   */\n  skipChannelPluginValidation?: boolean;\n}\n\n/**\n * Single idempotent workspace + config initialisation for CLI, gateway, onboard, and Electron.\n * Skips saveConfig (and backup rotation) when the persisted JSON would be unchanged.\n *\n * Electron main should import {@link initWorkspaceCore} directly to avoid bundling channel plugins.\n */\nexport async function initWorkspace(options: InitWorkspaceOptions): Promise<InitWorkspaceResult> {\n  const skipChannelPluginValidation = options.skipChannelPluginValidation ?? false;\n  let assertChannelPlugins: ((cfg: Config) => void | Promise<void>) | undefined;\n  if (!skipChannelPluginValidation) {\n    const { assertChannelPluginConfigs } = await import('../../config/validate-channel-configs.js');\n    assertChannelPlugins = assertChannelPluginConfigs;\n  }\n  const { skipChannelPluginValidation: _skip, ...coreOptions } = options;\n  return initWorkspaceCore({ ...coreOptions, assertChannelPlugins });\n}\n"],"mappings":";;;;;;;;AA2BA,eAAsB,cAAc,SAA6D;CAC/F,MAAM,8BAA8B,QAAQ,+BAA+B;CAC3E,IAAI;AACJ,KAAI,CAAC,6BAA6B;EAChC,MAAM,EAAE,+BAA+B,MAAM,OAAO;AACpD,yBAAuB;;CAEzB,MAAM,EAAE,6BAA6B,OAAO,GAAG,gBAAgB;AAC/D,QAAO,kBAAkB;EAAE,GAAG;EAAa;EAAsB,CAAC"}

package/dist/src/cli/utils/oauth-login.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"oauth-login.js","names":[],"sources":["../../../../src/cli/utils/oauth-login.ts"],"sourcesContent":["import { input, select } from '@inquirer/prompts';\n\nimport type { OAuthCredentials, OAuthLoginCallbacks, OAuthProviderInterface } from '../../auth/index.js';\nimport { CredentialResolver } from '../../auth/credentials.js';\nimport { createLogger } from '../../utils/logger.js';\n\nimport { getOAuthProvider, type OAuthProviderConfig } from './oauth-providers.js';\n\nconst log = createLogger('OAuthLogin');\n\nexport interface RunCliOAuthLoginOptions {\n  provider: string;\n  onProgress?: (message: string) => void;\n}\n\nexport interface RunCliOAuthLoginResult {\n  provider: string;\n  credentials: OAuthCredentials;\n  expires?: number;\n}\n\nasync function openBrowser(url: string): Promise<void> {\n  const { spawn } = await import('node:child_process');\n  const platform = process.platform;\n  const command = platform === 'darwin' ? 'open' : platform === 'win32' ? 'cmd' : 'xdg-open';\n  const args = platform === 'win32' ? ['/c', 'start', '', url] : [url];\n  const child = spawn(command, args, { stdio: 'ignore', detached: true });\n  child.on('error', (err) => {\n    log.debug({ err, command }, 'Browser open command failed');\n  });\n  child.unref();\n}\n\nexport function buildCliOAuthCallbacks(params: {\n  config: OAuthProviderConfig;\n  provider: OAuthProviderInterface;\n  onProgress?: (message: string) => void;\n}): OAuthLoginCallbacks {\n  let manualPromptPromise: Promise<string> | undefined;\n  const promptForManualCode = () =>\n    (manualPromptPromise ??= input({\n      message: 'Paste the authorization code (or full redirect URL):',\n      validate: (value: string) => value.trim().length > 0 || 'Required',\n    }));\n\n  return {\n    onAuth: (info) => {\n      console.log('\\n' + params.config.urlPrompt);\n      console.log(info.url);\n      if (info.instructions) {\n        console.log('\\n' + info.instructions);\n      }\n      if (params.provider.usesCallbackServer) {\n        console.log('\\nWaiting for localhost callback. If it does not complete, paste the final redirect URL below.');\n      }\n      void openBrowser(info.url);\n      console.log('');\n    },\n    onDeviceCode: (info) => {\n      console.log(`\\nOpen ${info.verificationUri} and enter code ${info.userCode}\\n`);\n      void openBrowser(info.verificationUri);\n    },\n    onPrompt: async (prompt) =>\n      input({\n        message: prompt.message,\n        validate: prompt.allowEmpty ? undefined : (value: string) => value.trim().length > 0 || 'Required',\n      }),\n    onManualCodeInput: params.provider.usesCallbackServer && params.provider.id !== 'openai-codex' ? promptForManualCode : undefined,\n    onProgress: (message) => {\n      params.onProgress?.(message);\n    },\n    onSelect: async (prompt) => {\n      return select({\n        message: prompt.message,\n        choices: prompt.options.map((option) => ({ value: option.id, name: option.label })),\n      });\n    },\n  };\n}\n\nexport async function runCliOAuthLogin(options: RunCliOAuthLoginOptions): Promise<RunCliOAuthLoginResult> {\n  const config = getOAuthProvider(options.provider);\n  if (!config) {\n    throw new Error(`OAuth not supported for provider: ${options.provider}`);\n  }\n\n  const credentials = await config.provider.login(\n    buildCliOAuthCallbacks({ config, provider: config.provider, onProgress: options.onProgress }),\n  );\n\n  const resolver = new CredentialResolver();\n  await resolver.saveOAuthToken(options.provider, {\n    access: config.provider.getApiKey(credentials),\n    refresh: credentials.refresh,\n    expiresAt: credentials.expires,\n    scope: Array.isArray(credentials.scope) ? credentials.scope.filter((value): value is string => typeof value === 'string') : undefined,\n    createdAt: new Date().toISOString(),\n  });\n\n  return { provider: options.provider, credentials, expires: credentials.expires };\n}\n"],"mappings":";;;;;;kBAG+D;aACV;AAIrD,MAAM,MAAM,aAAa,aAAa;AAatC,eAAe,YAAY,KAA4B;CACrD,MAAM,EAAE,UAAU,MAAM,OAAO;CAC/B,MAAM,WAAW,QAAQ;CACzB,MAAM,UAAU,aAAa,WAAW,SAAS,aAAa,UAAU,QAAQ;CAEhF,MAAM,QAAQ,MAAM,SADP,aAAa,UAAU;EAAC;EAAM;EAAS;EAAI;EAAI,GAAG,CAAC,IAAI,EACjC;EAAE,OAAO;EAAU,UAAU;EAAM,CAAC;AACvE,OAAM,GAAG,UAAU,QAAQ;AACzB,MAAI,MAAM;GAAE;GAAK;GAAS,EAAE,8BAA8B;GAC1D;AACF,OAAM,OAAO;;AAGf,SAAgB,uBAAuB,QAIf;CACtB,IAAI;CACJ,MAAM,4BACH,wBAAwB,MAAM;EAC7B,SAAS;EACT,WAAW,UAAkB,MAAM,MAAM,CAAC,SAAS,KAAK;EACzD,CAAC;AAEJ,QAAO;EACL,SAAS,SAAS;AAChB,WAAQ,IAAI,OAAO,OAAO,OAAO,UAAU;AAC3C,WAAQ,IAAI,KAAK,IAAI;AACrB,OAAI,KAAK,aACP,SAAQ,IAAI,OAAO,KAAK,aAAa;AAEvC,OAAI,OAAO,SAAS,mBAClB,SAAQ,IAAI,iGAAiG;AAE1G,eAAY,KAAK,IAAI;AAC1B,WAAQ,IAAI,GAAG;;EAEjB,eAAe,SAAS;AACtB,WAAQ,IAAI,UAAU,KAAK,gBAAgB,kBAAkB,KAAK,SAAS,IAAI;AAC1E,eAAY,KAAK,gBAAgB;;EAExC,UAAU,OAAO,WACf,MAAM;GACJ,SAAS,OAAO;GAChB,UAAU,OAAO,aAAa,KAAA,KAAa,UAAkB,MAAM,MAAM,CAAC,SAAS,KAAK;GACzF,CAAC;EACJ,mBAAmB,OAAO,SAAS,sBAAsB,OAAO,SAAS,OAAO,iBAAiB,sBAAsB,KAAA;EACvH,aAAa,YAAY;AACvB,UAAO,aAAa,QAAQ;;EAE9B,UAAU,OAAO,WAAW;AAC1B,UAAO,OAAO;IACZ,SAAS,OAAO;IAChB,SAAS,OAAO,QAAQ,KAAK,YAAY;KAAE,OAAO,OAAO;KAAI,MAAM,OAAO;KAAO,EAAE;IACpF,CAAC;;EAEL;;AAGH,eAAsB,iBAAiB,SAAmE;CACxG,MAAM,SAAS,iBAAiB,QAAQ,SAAS;AACjD,KAAI,CAAC,OACH,OAAM,IAAI,MAAM,qCAAqC,QAAQ,WAAW;CAG1E,MAAM,cAAc,MAAM,OAAO,SAAS,MACxC,uBAAuB;EAAE;EAAQ,UAAU,OAAO;EAAU,YAAY,QAAQ;EAAY,CAAC,CAC9F;AAGD,OAAM,IADe,oBACP,CAAC,eAAe,QAAQ,UAAU;EAC9C,QAAQ,OAAO,SAAS,UAAU,YAAY;EAC9C,SAAS,YAAY;EACrB,WAAW,YAAY;EACvB,OAAO,MAAM,QAAQ,YAAY,MAAM,GAAG,YAAY,MAAM,QAAQ,UAA2B,OAAO,UAAU,SAAS,GAAG,KAAA;EAC5H,4BAAW,IAAI,MAAM,EAAC,aAAa;EACpC,CAAC;AAEF,QAAO;EAAE,UAAU,QAAQ;EAAU;EAAa,SAAS,YAAY;EAAS"}

package/dist/src/cli/utils/oauth-providers.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"oauth-providers.js","names":["googleGeminiCliOAuthProvider","googleAntigravityOAuthProvider"],"sources":["../../../../src/cli/utils/oauth-providers.ts"],"sourcesContent":["/**\n * OAuth Provider Configuration\n *\n * Centralized OAuth provider definitions for CLI commands.\n * Used by both auth.ts and onboard.ts to avoid duplication.\n */\n\nimport {\n  anthropicOAuthProvider,\n  minimaxOAuthProvider,\n  minimaxCnOAuthProvider,\n  kimiCodingOAuthProvider,\n  githubCopilotOAuthProvider,\n  googleGeminiCliOAuthProvider,\n  googleAntigravityOAuthProvider,\n  openaiCodexOAuthProvider,\n} from '../../auth/oauth/index.js';\nimport type { OAuthProviderInterface } from '../../auth/oauth/types.js';\n\nexport interface OAuthProviderConfig {\n  displayName: string;\n  provider: OAuthProviderInterface;\n  profileId: string;\n  urlPrompt: string;\n}\n\n/**\n * Map of provider IDs to their OAuth configuration.\n */\nexport const OAUTH_PROVIDERS: Record<string, OAuthProviderConfig> = {\n  anthropic: {\n    displayName: 'Anthropic (Claude)',\n    provider: anthropicOAuthProvider,\n    profileId: 'anthropic:default',\n    urlPrompt: '🌐 Please open this URL in your browser:\\n',\n  },\n  minimax: {\n    displayName: 'MiniMax (幂维智能)',\n    provider: minimaxOAuthProvider,\n    profileId: 'minimax:default',\n    urlPrompt: '🌐 Please open this URL in your browser:\\n',\n  },\n  'minimax-cn': {\n    displayName: 'MiniMax CN',\n    provider: minimaxCnOAuthProvider,\n    profileId: 'minimax-cn:default',\n    urlPrompt: '🌐 请在浏览器中打开以下 URL:\\n',\n  },\n  'kimi-coding': {\n    displayName: 'Kimi For Coding (月之暗面)',\n    provider: kimiCodingOAuthProvider,\n    profileId: 'kimi-coding:default',\n    urlPrompt: '🌐 Please open this URL in your browser:\\n',\n  },\n  'github-copilot': {\n    displayName: 'GitHub Copilot',\n    provider: githubCopilotOAuthProvider,\n    profileId: 'github-copilot:default',\n    urlPrompt: '🌐 Please open this URL in your browser:\\n',\n  },\n  'google-gemini-cli': {\n    displayName: 'Google Gemini CLI',\n    provider: googleGeminiCliOAuthProvider,\n    profileId: 'google-gemini-cli:default',\n    urlPrompt: '🌐 Please open this URL in your browser:\\n',\n  },\n  'google-antigravity': {\n    displayName: 'Google Antigravity',\n    provider: googleAntigravityOAuthProvider,\n    profileId: 'google-antigravity:default',\n    urlPrompt: '🌐 Please open this URL in your browser:\\n',\n  },\n  'openai-codex': {\n    displayName: 'OpenAI Codex',\n    provider: openaiCodexOAuthProvider,\n    profileId: 'openai-codex:default',\n    urlPrompt: '🌐 Please open this URL in your browser:\\n',\n  },\n} as const;\n\n/**\n * Get supported OAuth provider IDs.\n */\nexport function getSupportedOAuthProviders(): string[] {\n  return Object.keys(OAUTH_PROVIDERS);\n}\n\n/**\n * Check if a provider supports OAuth.\n */\nexport function supportsOAuth(provider: string): boolean {\n  return provider in OAUTH_PROVIDERS;\n}\n\n/**\n * Get OAuth provider config by ID.\n */\nexport function getOAuthProvider(provider: string): OAuthProviderConfig | undefined {\n  return OAUTH_PROVIDERS[provider as keyof typeof OAUTH_PROVIDERS];\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AA6BA,MAAa,kBAAuD;CAClE,WAAW;EACT,aAAa;EACb,UAAU;EACV,WAAW;EACX,WAAW;EACZ;CACD,SAAS;EACP,aAAa;EACb,UAAU;EACV,WAAW;EACX,WAAW;EACZ;CACD,cAAc;EACZ,aAAa;EACb,UAAU;EACV,WAAW;EACX,WAAW;EACZ;CACD,eAAe;EACb,aAAa;EACb,UAAU;EACV,WAAW;EACX,WAAW;EACZ;CACD,kBAAkB;EAChB,aAAa;EACb,UAAU;EACV,WAAW;EACX,WAAW;EACZ;CACD,qBAAqB;EACnB,aAAa;EACb,UAAUA;EACV,WAAW;EACX,WAAW;EACZ;CACD,sBAAsB;EACpB,aAAa;EACb,UAAUC;EACV,WAAW;EACX,WAAW;EACZ;CACD,gBAAgB;EACd,aAAa;EACb,UAAU;EACV,WAAW;EACX,WAAW;EACZ;CACF;;;;AAKD,SAAgB,6BAAuC;AACrD,QAAO,OAAO,KAAK,gBAAgB;;;;;AAMrC,SAAgB,cAAc,UAA2B;AACvD,QAAO,YAAY;;;;;AAMrB,SAAgB,iBAAiB,UAAmD;AAClF,QAAO,gBAAgB"}

package/dist/src/cli/utils/session.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"session.js","names":[],"sources":["../../../../src/cli/utils/session.ts"],"sourcesContent":["/**\n * Session management utilities for CLI commands\n */\n\nimport { SessionIndex } from '../../session/index.js';\nimport { loadConfig } from '../../config/loader.js';\n\n/**\n * Get initialized SessionManager instance\n * Eliminates repeated initialization boilerplate\n */\nexport async function getSessionIndex(): Promise<SessionIndex> {\n  const config = loadConfig();\n  const manager = new SessionIndex({ config });\n  await manager.initialize();\n  return manager;\n}\n\nexport async function getSessionIndexSafe(): Promise<\n  { manager: SessionIndex; error: null } | { manager: null; error: Error }\n> {\n  try {\n    const manager = await getSessionIndex();\n    return { manager, error: null };\n  } catch (error) {\n    return { manager: null, error: error as Error };\n  }\n}\n"],"mappings":";;;;;;;aAKoD;;;;;AAMpD,eAAsB,kBAAyC;CAE7D,MAAM,UAAU,IAAI,aAAa,EAAE,QADpB,YAC0B,EAAE,CAAC;AAC5C,OAAM,QAAQ,YAAY;AAC1B,QAAO;;AAGT,eAAsB,sBAEpB;AACA,KAAI;AAEF,SAAO;GAAE,SAAA,MADa,iBAAiB;GACrB,OAAO;GAAM;UACxB,OAAO;AACd,SAAO;GAAE,SAAS;GAAa;GAAgB"}

package/dist/src/commands/agents.config.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"agents.config.js","names":[],"sources":["../../../src/commands/agents.config.ts"],"sourcesContent":["/**\n * Mutate `agents.list` / bindings when adding or removing agents.\n */\n\nimport { rm } from 'node:fs/promises';\nimport { existsSync } from 'node:fs';\n\nimport type { Config } from '../config/schema.js';\nimport {\n  listAgentEntries,\n  normalizeAgentId,\n  resolveAgentHomeDir,\n  resolveAgentWorkspaceDir,\n  resolveDefaultAgentId,\n  DEFAULT_AGENT_ID,\n} from '../agent/agent-scope.js';\n\ntype AgentEntry = NonNullable<NonNullable<Config['agents']>['list']>[number];\n\nexport { listAgentEntries };\n\nexport function findAgentEntryIndex(list: AgentEntry[], agentId: string): number {\n  const id = normalizeAgentId(agentId);\n  return list.findIndex((e) => normalizeAgentId(e.id) === id);\n}\n\nexport function applyAgentConfig(\n  cfg: Config,\n  params: {\n    agentId: string;\n    /** Used only when creating a previously absent agent entry. */\n    identity?: AgentEntry['identity'];\n    workspace?: string;\n    model?: string;\n    models?: AgentEntry['models'];\n    extends?: AgentEntry['extends'];\n    skills?: string[];\n    tools?: AgentEntry['tools'];\n  },\n): Config {\n  const agentId = normalizeAgentId(params.agentId);\n  const list = listAgentEntries(cfg);\n  const index = findAgentEntryIndex(list, agentId);\n  const nextTools = params.tools;\n  const base = index >= 0 ? list[index] : {\n    id: agentId,\n    enabled: true as const,\n    identity: params.identity ?? { name: agentId, role: 'Agent', language: 'en', tone: 'direct' },\n    responsibilities: { primary: ['Help the user complete tasks'] },\n    workspace: { root: `~/.xopc/workspace/${agentId}` },\n    tools: { builtin: {} },\n    skills: { mode: 'all' as const },\n    workflows: {},\n    boundaries: { requiresConfirmation: [], forbidden: [], escalation: [] },\n  };\n  const nextEntry: AgentEntry = {\n    ...base,\n    enabled: base.enabled ?? true,\n    ...(params.extends !== undefined ? { extends: params.extends } : {}),\n    ...(params.workspace ? { workspace: { root: params.workspace } } : {}),\n    ...(params.models ? { models: params.models } : {}),\n    ...(params.model\n      ? {\n          models: {\n            ...(base.models ?? {}),\n            defaultRole: 'deep',\n            roles: { ...(base.models?.roles ?? {}), deep: { model: params.model } },\n          },\n        }\n      : {}),\n    ...(params.skills ? { skills: { mode: 'allowlist' as const, allow: params.skills } } : {}),\n    ...(nextTools ? { tools: nextTools } : {}),\n  };\n  const nextList = [...list];\n  if (index >= 0) {\n    nextList[index] = nextEntry;\n  } else {\n    if (nextList.length === 0 && agentId !== normalizeAgentId(resolveDefaultAgentId(cfg))) {\n      nextList.push({\n        id: resolveDefaultAgentId(cfg),\n        enabled: true,\n        identity: { name: resolveDefaultAgentId(cfg), role: 'Agent', language: 'en', tone: 'direct' },\n        responsibilities: { primary: ['Help the user complete tasks'] },\n        workspace: { root: `~/.xopc/workspace/${resolveDefaultAgentId(cfg)}` },\n        tools: { builtin: {} },\n        skills: { mode: 'all' },\n        workflows: {},\n        boundaries: { requiresConfirmation: [], forbidden: [], escalation: [] },\n      });\n    }\n    nextList.push(nextEntry);\n  }\n  return {\n    ...cfg,\n    agents: {\n      ...cfg.agents,\n      list: nextList,\n    },\n  };\n}\n\nexport function getAgentDeleteBlocker(cfg: Config, agentId: string): string | null {\n  const id = normalizeAgentId(agentId);\n  if (id === DEFAULT_AGENT_ID) {\n    return `Agent id \"${DEFAULT_AGENT_ID}\" is reserved for the primary agent.`;\n  }\n  if (id === normalizeAgentId(resolveDefaultAgentId(cfg))) {\n    return `Agent \"${id}\" is the global default agent. Change agents.default first.`;\n  }\n  const tuiDefault = cfg.tui?.defaultAgent?.trim();\n  if (tuiDefault && id === normalizeAgentId(tuiDefault)) {\n    return `Agent \"${id}\" is the TUI default agent. Change tui.defaultAgent first.`;\n  }\n  return null;\n}\n\nexport function setTuiDefaultAgentConfig(\n  cfg: Config,\n  agentIdRaw: string,\n): { ok: true; config: Config; agentId: string } | { ok: false; message: string } {\n  const raw = agentIdRaw.trim();\n  if (!raw) {\n    return { ok: false, message: 'Agent id is required.' };\n  }\n  const agentId = normalizeAgentId(raw);\n  if (agentId !== raw.toLowerCase()) {\n    return { ok: false, message: `Invalid agent id: ${raw}` };\n  }\n  const entry = listAgentEntries(cfg).find((agent) => normalizeAgentId(agent.id) === agentId);\n  if (!entry || entry.enabled === false) {\n    return { ok: false, message: `Agent \"${agentId}\" not found or disabled.` };\n  }\n  return {\n    ok: true,\n    agentId,\n    config: {\n      ...cfg,\n      tui: {\n        ...cfg.tui,\n        defaultAgent: agentId,\n      },\n    },\n  };\n}\n\nexport function pruneAgentConfig(\n  cfg: Config,\n  agentId: string,\n): { config: Config; removedBindings: number } {\n  const id = normalizeAgentId(agentId);\n  const blocker = getAgentDeleteBlocker(cfg, id);\n  if (blocker) {\n    throw new Error(blocker);\n  }\n  const agents = listAgentEntries(cfg);\n  const nextAgentsList = agents.filter((e) => normalizeAgentId(e.id) !== id);\n  const nextAgents = nextAgentsList.length > 0 ? nextAgentsList : [];\n\n  const bindings = cfg.bindings ?? [];\n  const filteredBindings = bindings.filter((b) => normalizeAgentId(b.agentId) !== id);\n\n  return {\n    config: {\n      ...cfg,\n      agents: { ...cfg.agents, list: nextAgents },\n      bindings: filteredBindings,\n    },\n    removedBindings: bindings.length - filteredBindings.length,\n  };\n}\n\nexport async function removeAgentDirsFromDisk(cfg: Config, id: string): Promise<void> {\n  const aid = normalizeAgentId(id);\n  if (aid === DEFAULT_AGENT_ID) {\n    throw new Error('Refusing to delete the main agent home on disk from this command.');\n  }\n  const home = resolveAgentHomeDir(cfg, aid);\n  const ws = resolveAgentWorkspaceDir(cfg, aid);\n  if (existsSync(home)) {\n    await rm(home, { recursive: true, force: true });\n  }\n  if (existsSync(ws) && ws !== home) {\n    await rm(ws, { recursive: true, force: true });\n  }\n}\n"],"mappings":";;;;;;;kBAeiC;AAMjC,SAAgB,oBAAoB,MAAoB,SAAyB;CAC/E,MAAM,KAAK,iBAAiB,QAAQ;AACpC,QAAO,KAAK,WAAW,MAAM,iBAAiB,EAAE,GAAG,KAAK,GAAG;;AAG7D,SAAgB,iBACd,KACA,QAWQ;CACR,MAAM,UAAU,iBAAiB,OAAO,QAAQ;CAChD,MAAM,OAAO,iBAAiB,IAAI;CAClC,MAAM,QAAQ,oBAAoB,MAAM,QAAQ;CAChD,MAAM,YAAY,OAAO;CACzB,MAAM,OAAO,SAAS,IAAI,KAAK,SAAS;EACtC,IAAI;EACJ,SAAS;EACT,UAAU,OAAO,YAAY;GAAE,MAAM;GAAS,MAAM;GAAS,UAAU;GAAM,MAAM;GAAU;EAC7F,kBAAkB,EAAE,SAAS,CAAC,+BAA+B,EAAE;EAC/D,WAAW,EAAE,MAAM,qBAAqB,WAAW;EACnD,OAAO,EAAE,SAAS,EAAE,EAAE;EACtB,QAAQ,EAAE,MAAM,OAAgB;EAChC,WAAW,EAAE;EACb,YAAY;GAAE,sBAAsB,EAAE;GAAE,WAAW,EAAE;GAAE,YAAY,EAAE;GAAE;EACxE;CACD,MAAM,YAAwB;EAC5B,GAAG;EACH,SAAS,KAAK,WAAW;EACzB,GAAI,OAAO,YAAY,KAAA,IAAY,EAAE,SAAS,OAAO,SAAS,GAAG,EAAE;EACnE,GAAI,OAAO,YAAY,EAAE,WAAW,EAAE,MAAM,OAAO,WAAW,EAAE,GAAG,EAAE;EACrE,GAAI,OAAO,SAAS,EAAE,QAAQ,OAAO,QAAQ,GAAG,EAAE;EAClD,GAAI,OAAO,QACP,EACE,QAAQ;GACN,GAAI,KAAK,UAAU,EAAE;GACrB,aAAa;GACb,OAAO;IAAE,GAAI,KAAK,QAAQ,SAAS,EAAE;IAAG,MAAM,EAAE,OAAO,OAAO,OAAO;IAAE;GACxE,EACF,GACD,EAAE;EACN,GAAI,OAAO,SAAS,EAAE,QAAQ;GAAE,MAAM;GAAsB,OAAO,OAAO;GAAQ,EAAE,GAAG,EAAE;EACzF,GAAI,YAAY,EAAE,OAAO,WAAW,GAAG,EAAE;EAC1C;CACD,MAAM,WAAW,CAAC,GAAG,KAAK;AAC1B,KAAI,SAAS,EACX,UAAS,SAAS;MACb;AACL,MAAI,SAAS,WAAW,KAAK,YAAY,iBAAiB,sBAAsB,IAAI,CAAC,CACnF,UAAS,KAAK;GACZ,IAAI,sBAAsB,IAAI;GAC9B,SAAS;GACT,UAAU;IAAE,MAAM,sBAAsB,IAAI;IAAE,MAAM;IAAS,UAAU;IAAM,MAAM;IAAU;GAC7F,kBAAkB,EAAE,SAAS,CAAC,+BAA+B,EAAE;GAC/D,WAAW,EAAE,MAAM,qBAAqB,sBAAsB,IAAI,IAAI;GACtE,OAAO,EAAE,SAAS,EAAE,EAAE;GACtB,QAAQ,EAAE,MAAM,OAAO;GACvB,WAAW,EAAE;GACb,YAAY;IAAE,sBAAsB,EAAE;IAAE,WAAW,EAAE;IAAE,YAAY,EAAE;IAAE;GACxE,CAAC;AAEJ,WAAS,KAAK,UAAU;;AAE1B,QAAO;EACL,GAAG;EACH,QAAQ;GACN,GAAG,IAAI;GACP,MAAM;GACP;EACF;;AAGH,SAAgB,sBAAsB,KAAa,SAAgC;CACjF,MAAM,KAAK,iBAAiB,QAAQ;AACpC,KAAI,OAAA,OACF,QAAO,aAAa,iBAAiB;AAEvC,KAAI,OAAO,iBAAiB,sBAAsB,IAAI,CAAC,CACrD,QAAO,UAAU,GAAG;CAEtB,MAAM,aAAa,IAAI,KAAK,cAAc,MAAM;AAChD,KAAI,cAAc,OAAO,iBAAiB,WAAW,CACnD,QAAO,UAAU,GAAG;AAEtB,QAAO;;AAGT,SAAgB,yBACd,KACA,YACgF;CAChF,MAAM,MAAM,WAAW,MAAM;AAC7B,KAAI,CAAC,IACH,QAAO;EAAE,IAAI;EAAO,SAAS;EAAyB;CAExD,MAAM,UAAU,iBAAiB,IAAI;AACrC,KAAI,YAAY,IAAI,aAAa,CAC/B,QAAO;EAAE,IAAI;EAAO,SAAS,qBAAqB;EAAO;CAE3D,MAAM,QAAQ,iBAAiB,IAAI,CAAC,MAAM,UAAU,iBAAiB,MAAM,GAAG,KAAK,QAAQ;AAC3F,KAAI,CAAC,SAAS,MAAM,YAAY,MAC9B,QAAO;EAAE,IAAI;EAAO,SAAS,UAAU,QAAQ;EAA2B;AAE5E,QAAO;EACL,IAAI;EACJ;EACA,QAAQ;GACN,GAAG;GACH,KAAK;IACH,GAAG,IAAI;IACP,cAAc;IACf;GACF;EACF;;AAGH,SAAgB,iBACd,KACA,SAC6C;CAC7C,MAAM,KAAK,iBAAiB,QAAQ;CACpC,MAAM,UAAU,sBAAsB,KAAK,GAAG;AAC9C,KAAI,QACF,OAAM,IAAI,MAAM,QAAQ;CAG1B,MAAM,iBADS,iBAAiB,IACH,CAAC,QAAQ,MAAM,iBAAiB,EAAE,GAAG,KAAK,GAAG;CAC1E,MAAM,aAAa,eAAe,SAAS,IAAI,iBAAiB,EAAE;CAElE,MAAM,WAAW,IAAI,YAAY,EAAE;CACnC,MAAM,mBAAmB,SAAS,QAAQ,MAAM,iBAAiB,EAAE,QAAQ,KAAK,GAAG;AAEnF,QAAO;EACL,QAAQ;GACN,GAAG;GACH,QAAQ;IAAE,GAAG,IAAI;IAAQ,MAAM;IAAY;GAC3C,UAAU;GACX;EACD,iBAAiB,SAAS,SAAS,iBAAiB;EACrD;;AAGH,eAAsB,wBAAwB,KAAa,IAA2B;CACpF,MAAM,MAAM,iBAAiB,GAAG;AAChC,KAAI,QAAA,OACF,OAAM,IAAI,MAAM,oEAAoE;CAEtF,MAAM,OAAO,oBAAoB,KAAK,IAAI;CAC1C,MAAM,KAAK,yBAAyB,KAAK,IAAI;AAC7C,KAAI,WAAW,KAAK,CAClB,OAAM,GAAG,MAAM;EAAE,WAAW;EAAM,OAAO;EAAM,CAAC;AAElD,KAAI,WAAW,GAAG,IAAI,OAAO,KAC3B,OAAM,GAAG,IAAI;EAAE,WAAW;EAAM,OAAO;EAAM,CAAC"}

package/dist/src/config/agent-profile.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"agent-profile.js","names":[],"sources":["../../../src/config/agent-profile.ts"],"sourcesContent":["import { resolveEffectiveAgentManifest, type EffectiveAgentManifest } from '../agent-manifest/index.js';\nimport { normalizeAgentId, resolveAgentWorkspaceDir } from '../agent/agent-scope.js';\nimport type { ThinkLevel, ReasoningLevel, VerboseLevel } from '../agent/transcript/thinking-types.js';\nimport { agentExists, getDefaultAgentId } from '../routing/resolve-route.js';\nimport { parseSessionKey } from '../routing/session-key.js';\nimport type { Config } from './schema.js';\n\nexport { resolveAgentWorkspaceDir } from '../agent/agent-scope.js';\n\nexport interface EffectiveAgentTools {\n  denied: Set<string>;\n}\n\nexport interface EffectiveAgentProfile {\n  agentId: string;\n  manifest: EffectiveAgentManifest;\n  resolvedWorkspacePath: string;\n  primaryModelRef: string | undefined;\n  fallbacks: string[];\n  thinkingDefault?: ThinkLevel;\n  reasoningDefault?: ReasoningLevel;\n  verboseDefault?: VerboseLevel;\n  systemPromptOverride?: string;\n  skillsAllowlist?: string[];\n  tools: EffectiveAgentTools;\n  params: Record<string, unknown>;\n}\n\nfunction findAgentManifest(config: Config, agentId: string) {\n  const id = normalizeAgentId(agentId);\n  return config.agents.list.find((agent) => agent.enabled !== false && normalizeAgentId(agent.id) === id);\n}\n\nexport function extractProfileAgentId(sessionKey: string | undefined | null, config: Config): string {\n  const parsed = parseSessionKey(sessionKey ?? '');\n  if (!parsed) {\n    return getDefaultAgentId(config);\n  }\n  const aid = parsed.agentId;\n  if (aid === 'subagent' || aid.startsWith('subagent:')) {\n    return getDefaultAgentId(config);\n  }\n  if (!agentExists(aid, config)) {\n    return getDefaultAgentId(config);\n  }\n  return aid.toLowerCase();\n}\n\nexport function resolveEffectiveAgentManifestForAgent(config: Config, agentId: string): EffectiveAgentManifest {\n  const agent = findAgentManifest(config, agentId) ?? findAgentManifest(config, getDefaultAgentId(config));\n  if (!agent) {\n    throw new Error(`No enabled agent manifest found for \"${agentId}\"`);\n  }\n  return resolveEffectiveAgentManifest({\n    agent,\n    presets: config.agents.capabilityPresets,\n    defaultPresetId: config.agents.defaultPreset,\n  }).manifest;\n}\n\nexport function resolveEffectiveAgentManifestForSession(\n  config: Config,\n  sessionKey: string | undefined | null,\n): EffectiveAgentManifest {\n  return resolveEffectiveAgentManifestForAgent(config, extractProfileAgentId(sessionKey, config));\n}\n\nexport function resolveEffectiveAgentProfile(config: Config, agentId: string): EffectiveAgentProfile {\n  const manifest = resolveEffectiveAgentManifestForAgent(config, agentId);\n  const defaultRoleModel = manifest.models.roles[manifest.models.defaultRole];\n  const defaultModel = defaultRoleModel?.model;\n  const deniedTools = Object.entries(manifest.tools.builtin)\n    .filter(([, policy]) => policy.mode === 'deny')\n    .map(([name]) => name);\n  const skillsAllowlist = manifest.skills.mode === 'allowlist' ? [...(manifest.skills.allow ?? [])] : undefined;\n\n  return {\n    agentId: manifest.id,\n    manifest,\n    resolvedWorkspacePath: resolveAgentWorkspaceDir(config, manifest.id),\n    primaryModelRef: defaultModel?.trim() || undefined,\n    fallbacks: (defaultRoleModel?.fallbacks ?? []).map((ref) => ref.trim()).filter(Boolean),\n    systemPromptOverride: manifest.prompt?.customInstructions,\n    skillsAllowlist,\n    tools: { denied: new Set(deniedTools) },\n    params: {},\n  };\n}\n\nexport function resolveEffectiveAgentProfileForSession(\n  config: Config,\n  sessionKey: string | undefined | null,\n): EffectiveAgentProfile {\n  return resolveEffectiveAgentProfile(config, extractProfileAgentId(sessionKey, config));\n}\n"],"mappings":";;;;;;kBACqF;oBAER;kBACjB;AAwB5D,SAAS,kBAAkB,QAAgB,SAAiB;CAC1D,MAAM,KAAK,iBAAiB,QAAQ;AACpC,QAAO,OAAO,OAAO,KAAK,MAAM,UAAU,MAAM,YAAY,SAAS,iBAAiB,MAAM,GAAG,KAAK,GAAG;;AAGzG,SAAgB,sBAAsB,YAAuC,QAAwB;CACnG,MAAM,SAAS,gBAAgB,cAAc,GAAG;AAChD,KAAI,CAAC,OACH,QAAO,kBAAkB,OAAO;CAElC,MAAM,MAAM,OAAO;AACnB,KAAI,QAAQ,cAAc,IAAI,WAAW,YAAY,CACnD,QAAO,kBAAkB,OAAO;AAElC,KAAI,CAAC,YAAY,KAAK,OAAO,CAC3B,QAAO,kBAAkB,OAAO;AAElC,QAAO,IAAI,aAAa;;AAG1B,SAAgB,sCAAsC,QAAgB,SAAyC;CAC7G,MAAM,QAAQ,kBAAkB,QAAQ,QAAQ,IAAI,kBAAkB,QAAQ,kBAAkB,OAAO,CAAC;AACxG,KAAI,CAAC,MACH,OAAM,IAAI,MAAM,wCAAwC,QAAQ,GAAG;AAErE,QAAO,8BAA8B;EACnC;EACA,SAAS,OAAO,OAAO;EACvB,iBAAiB,OAAO,OAAO;EAChC,CAAC,CAAC;;AAGL,SAAgB,wCACd,QACA,YACwB;AACxB,QAAO,sCAAsC,QAAQ,sBAAsB,YAAY,OAAO,CAAC;;AAGjG,SAAgB,6BAA6B,QAAgB,SAAwC;CACnG,MAAM,WAAW,sCAAsC,QAAQ,QAAQ;CACvE,MAAM,mBAAmB,SAAS,OAAO,MAAM,SAAS,OAAO;CAC/D,MAAM,eAAe,kBAAkB;CACvC,MAAM,cAAc,OAAO,QAAQ,SAAS,MAAM,QAAQ,CACvD,QAAQ,GAAG,YAAY,OAAO,SAAS,OAAO,CAC9C,KAAK,CAAC,UAAU,KAAK;CACxB,MAAM,kBAAkB,SAAS,OAAO,SAAS,cAAc,CAAC,GAAI,SAAS,OAAO,SAAS,EAAE,CAAE,GAAG,KAAA;AAEpG,QAAO;EACL,SAAS,SAAS;EAClB;EACA,uBAAuB,yBAAyB,QAAQ,SAAS,GAAG;EACpE,iBAAiB,cAAc,MAAM,IAAI,KAAA;EACzC,YAAY,kBAAkB,aAAa,EAAE,EAAE,KAAK,QAAQ,IAAI,MAAM,CAAC,CAAC,OAAO,QAAQ;EACvF,sBAAsB,SAAS,QAAQ;EACvC;EACA,OAAO,EAAE,QAAQ,IAAI,IAAI,YAAY,EAAE;EACvC,QAAQ,EAAE;EACX;;AAGH,SAAgB,uCACd,QACA,YACuB;AACvB,QAAO,6BAA6B,QAAQ,sBAAsB,YAAY,OAAO,CAAC"}

package/dist/src/config/agent-typed-models.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"agent-typed-models.js","names":[],"sources":["../../../src/config/agent-typed-models.ts"],"sourcesContent":["/**\n * Named model roles from the selected agent manifest.\n */\n\nimport type { AgentTypedModel, Config } from './schema.js';\nimport { parseModelRef } from './schema.js';\nimport { resolveEffectiveAgentManifestForAgent } from './agent-profile.js';\n\nexport type { AgentTypedModel };\n\nfunction rolesToEntries(\n  roles: Record<string, { model: string; fallbacks?: string[]; description?: string }> | undefined,\n): AgentTypedModel[] {\n  return Object.entries(roles ?? {}).map(([id, role]) => ({\n    id,\n    ...role,\n  }));\n}\n\nexport function resolveEffectiveTypedModels(config: Config, agentId: string): Map<string, AgentTypedModel> {\n  const out = new Map<string, AgentTypedModel>();\n  const manifest = resolveEffectiveAgentManifestForAgent(config, agentId);\n  for (const modelRole of rolesToEntries(manifest.models.roles)) {\n    out.set(modelRole.id, modelRole);\n  }\n  return out;\n}\n\n/** Resolve a typed model id to `provider/model`, or undefined when not configured. */\nexport function resolveTypedModelRef(\n  config: Config,\n  agentId: string,\n  typeId: string,\n): string | undefined {\n  const entry = resolveEffectiveTypedModels(config, agentId).get(typeId);\n  const ref = entry?.model?.trim();\n  return ref || undefined;\n}\n\nfunction parseModelRefInput(ref: string): { directRef?: string; typeId?: string } {\n  const trimmed = ref.trim();\n  if (!trimmed) {\n    return {};\n  }\n  if (trimmed.includes('/')) {\n    return { directRef: trimmed };\n  }\n  const typeId = trimmed.startsWith('@') ? trimmed.slice(1).trim() : trimmed;\n  return typeId ? { typeId } : {};\n}\n\n/**\n * Resolve a model reference: `provider/model`, typed id (`small`), or `@small`.\n * Throws when the ref is invalid or the typed id is unknown.\n */\nexport function resolveModelRef(config: Config, agentId: string, ref: string): string {\n  const { directRef, typeId } = parseModelRefInput(ref);\n  if (directRef) {\n    if (!parseModelRef(directRef)) {\n      throw new Error(`model ref must be provider/model format (got '${directRef}')`);\n    }\n    return directRef;\n  }\n  if (typeId) {\n    const resolved = resolveTypedModelRef(config, agentId, typeId);\n    if (resolved) {\n      return resolved;\n    }\n    const available = [...resolveEffectiveTypedModels(config, agentId).keys()];\n    const hint =\n      available.length > 0 ? ` (available: ${available.join(', ')})` : ' (none configured)';\n    throw new Error(`Unknown typed model id '${typeId}' for agent '${agentId}'${hint}`);\n  }\n  throw new Error('model ref must not be empty');\n}\n"],"mappings":";;;aAK4C;AAK5C,SAAS,eACP,OACmB;AACnB,QAAO,OAAO,QAAQ,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,WAAW;EACtD;EACA,GAAG;EACJ,EAAE;;AAGL,SAAgB,4BAA4B,QAAgB,SAA+C;CACzG,MAAM,sBAAM,IAAI,KAA8B;CAC9C,MAAM,WAAW,sCAAsC,QAAQ,QAAQ;AACvE,MAAK,MAAM,aAAa,eAAe,SAAS,OAAO,MAAM,CAC3D,KAAI,IAAI,UAAU,IAAI,UAAU;AAElC,QAAO;;;AAIT,SAAgB,qBACd,QACA,SACA,QACoB;AAGpB,QAFc,4BAA4B,QAAQ,QAAQ,CAAC,IAAI,OAC9C,EAAE,OAAO,MAAM,IAClB,KAAA;;AAGhB,SAAS,mBAAmB,KAAsD;CAChF,MAAM,UAAU,IAAI,MAAM;AAC1B,KAAI,CAAC,QACH,QAAO,EAAE;AAEX,KAAI,QAAQ,SAAS,IAAI,CACvB,QAAO,EAAE,WAAW,SAAS;CAE/B,MAAM,SAAS,QAAQ,WAAW,IAAI,GAAG,QAAQ,MAAM,EAAE,CAAC,MAAM,GAAG;AACnE,QAAO,SAAS,EAAE,QAAQ,GAAG,EAAE;;;;;;AAOjC,SAAgB,gBAAgB,QAAgB,SAAiB,KAAqB;CACpF,MAAM,EAAE,WAAW,WAAW,mBAAmB,IAAI;AACrD,KAAI,WAAW;AACb,MAAI,CAAC,cAAc,UAAU,CAC3B,OAAM,IAAI,MAAM,iDAAiD,UAAU,IAAI;AAEjF,SAAO;;AAET,KAAI,QAAQ;EACV,MAAM,WAAW,qBAAqB,QAAQ,SAAS,OAAO;AAC9D,MAAI,SACF,QAAO;EAET,MAAM,YAAY,CAAC,GAAG,4BAA4B,QAAQ,QAAQ,CAAC,MAAM,CAAC;EAC1E,MAAM,OACJ,UAAU,SAAS,IAAI,gBAAgB,UAAU,KAAK,KAAK,CAAC,KAAK;AACnE,QAAM,IAAI,MAAM,2BAA2B,OAAO,eAAe,QAAQ,GAAG,OAAO;;AAErF,OAAM,IAAI,MAAM,8BAA8B"}

package/dist/src/config/commands.flags.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"commands.flags.js","names":[],"sources":["../../../src/config/commands.flags.ts"],"sourcesContent":["export function isRestartEnabled(config?: { commands?: unknown }): boolean {\n  const commands = config?.commands;\n  if (!commands || typeof commands !== 'object' || Array.isArray(commands)) {\n    return true;\n  }\n  if (!Object.prototype.hasOwnProperty.call(commands, 'restart')) {\n    return true;\n  }\n  return (commands as { restart?: unknown }).restart !== false;\n}\n"],"mappings":";AAAA,SAAgB,iBAAiB,QAA0C;CACzE,MAAM,WAAW,QAAQ;AACzB,KAAI,CAAC,YAAY,OAAO,aAAa,YAAY,MAAM,QAAQ,SAAS,CACtE,QAAO;AAET,KAAI,CAAC,OAAO,UAAU,eAAe,KAAK,UAAU,UAAU,CAC5D,QAAO;AAET,QAAQ,SAAmC,YAAY"}

package/dist/src/config/default-model.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"default-model.js","names":[],"sources":["../../../src/config/default-model.ts"],"sourcesContent":["export const DEFAULT_MODEL_ROLE = 'deep';\nexport const DEFAULT_MODEL_REF = 'deepseek/deepseek-v4-flash';\n\nexport const DEFAULT_AGENT_MODELS = {\n  defaultRole: DEFAULT_MODEL_ROLE,\n  roles: {\n    [DEFAULT_MODEL_ROLE]: {\n      model: DEFAULT_MODEL_REF,\n      description: 'Default model for general agent work.',\n    },\n  },\n} as const;\n"],"mappings":";;;;AAAa,sBAAqB;AACrB,qBAAoB;AAEpB,wBAAuB;EAClC,aAAa;EACb,OAAO,GACJ,qBAAqB;GACpB,OAAO;GACP,aAAa;GACd,EACF;EACF"}

package/dist/src/config/diff.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"diff.js","names":[],"sources":["../../../src/config/diff.ts"],"sourcesContent":["/**\n * Configuration diff utilities\n */\n\n/**\n * Check if value is a plain object\n */\nfunction isPlainObject(value: unknown): value is Record<string, unknown> {\n  if (value === null || value === undefined || typeof value !== 'object') {\n    return false;\n  }\n  return Object.getPrototypeOf(value) === Object.prototype;\n}\n\n/**\n * Deep compare two values and return list of changed paths\n */\nexport function diffConfigPaths(prev: unknown, next: unknown, prefix = ''): string[] {\n  if (prev === next) {\n    return [];\n  }\n\n  // Both are plain objects - recurse\n  if (isPlainObject(prev) && isPlainObject(next)) {\n    const keys = new Set([...Object.keys(prev), ...Object.keys(next)]);\n    const paths: string[] = [];\n\n    for (const key of keys) {\n      const prevValue = (prev as Record<string, unknown>)[key];\n      const nextValue = (next as Record<string, unknown>)[key];\n      if (prevValue === nextValue) {\n        continue;\n      }\n      const childPrefix = prefix ? `${prefix}.${key}` : key;\n      const childPaths = diffConfigPaths(prevValue, nextValue, childPrefix);\n      paths.push(...childPaths);\n    }\n\n    return paths;\n  }\n\n  // Both are arrays — compare element by element. We recurse so that two\n  // equal-by-value arrays whose elements are differently-allocated objects\n  // (e.g. from two separate `ConfigSchema.parse` passes) don't report a\n  // false-positive diff. Bail out at the parent path on length mismatch.\n  if (Array.isArray(prev) && Array.isArray(next)) {\n    if (prev.length !== next.length) {\n      return [prefix || '<root>'];\n    }\n    for (let i = 0; i < prev.length; i++) {\n      if (diffConfigPaths(prev[i], next[i], prefix).length > 0) {\n        return [prefix || '<root>'];\n      }\n    }\n    return [];\n  }\n\n  // Primitive or other types changed\n  return [prefix || '<root>'];\n}\n"],"mappings":";;;;;;;AAOA,SAAS,cAAc,OAAkD;AACvE,KAAI,UAAU,QAAQ,UAAU,KAAA,KAAa,OAAO,UAAU,SAC5D,QAAO;AAET,QAAO,OAAO,eAAe,MAAM,KAAK,OAAO;;;;;AAMjD,SAAgB,gBAAgB,MAAe,MAAe,SAAS,IAAc;AACnF,KAAI,SAAS,KACX,QAAO,EAAE;AAIX,KAAI,cAAc,KAAK,IAAI,cAAc,KAAK,EAAE;EAC9C,MAAM,OAAO,IAAI,IAAI,CAAC,GAAG,OAAO,KAAK,KAAK,EAAE,GAAG,OAAO,KAAK,KAAK,CAAC,CAAC;EAClE,MAAM,QAAkB,EAAE;AAE1B,OAAK,MAAM,OAAO,MAAM;GACtB,MAAM,YAAa,KAAiC;GACpD,MAAM,YAAa,KAAiC;AACpD,OAAI,cAAc,UAChB;GAGF,MAAM,aAAa,gBAAgB,WAAW,WAD1B,SAAS,GAAG,OAAO,GAAG,QAAQ,IACmB;AACrE,SAAM,KAAK,GAAG,WAAW;;AAG3B,SAAO;;AAOT,KAAI,MAAM,QAAQ,KAAK,IAAI,MAAM,QAAQ,KAAK,EAAE;AAC9C,MAAI,KAAK,WAAW,KAAK,OACvB,QAAO,CAAC,UAAU,SAAS;AAE7B,OAAK,IAAI,IAAI,GAAG,IAAI,KAAK,QAAQ,IAC/B,KAAI,gBAAgB,KAAK,IAAI,KAAK,IAAI,OAAO,CAAC,SAAS,EACrD,QAAO,CAAC,UAAU,SAAS;AAG/B,SAAO,EAAE;;AAIX,QAAO,CAAC,UAAU,SAAS"}

package/dist/src/config/gateway-bind.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"gateway-bind.js","names":[],"sources":["../../../src/config/gateway-bind.ts"],"sourcesContent":["import { existsSync } from 'node:fs';\nimport net from 'node:net';\n\nimport { getTailnetIPv4Sync } from '../infra/tailscale.js';\nimport type { Config } from '../config/schema.js';\nimport type { GatewayBindMode } from '../config/schema.js';\nimport { isLoopbackHost } from '../gateway/host.js';\n\nexport type { GatewayBindMode };\n\nexport function resolveGatewayBindMode(\n  cfg: Config,\n  bindOverride?: GatewayBindMode,\n): GatewayBindMode {\n  if (bindOverride) {\n    return bindOverride;\n  }\n  return cfg.gateway?.bind ?? defaultGatewayBindMode();\n}\n\nexport function resolveGatewayCustomBindHost(cfg: Config, override?: string): string | undefined {\n  const fromOverride = override?.trim();\n  if (fromOverride) {\n    return fromOverride;\n  }\n  return cfg.gateway?.customBindHost?.trim() || undefined;\n}\n\nlet containerEnvironmentCache: boolean | undefined;\n\nexport function isContainerEnvironment(): boolean {\n  if (containerEnvironmentCache !== undefined) {\n    return containerEnvironmentCache;\n  }\n  if (process.env.XOPC_CONTAINER === '1' || process.env.KUBERNETES_SERVICE_HOST) {\n    containerEnvironmentCache = true;\n    return true;\n  }\n  try {\n    if (existsSync('/.dockerenv')) {\n      containerEnvironmentCache = true;\n      return true;\n    }\n  } catch {\n    // ignore\n  }\n  containerEnvironmentCache = false;\n  return false;\n}\n\n/** Reset cached container detection (tests). */\nexport function resetContainerEnvironmentCacheForTest(): void {\n  containerEnvironmentCache = undefined;\n}\n\nexport function defaultGatewayBindMode(): GatewayBindMode {\n  return isContainerEnvironment() ? 'auto' : 'loopback';\n}\n\n/** Resolve primary Tailscale tailnet IPv4 (100.x) when available. */\nexport function pickPrimaryTailnetIPv4(): string | undefined {\n  return getTailnetIPv4Sync();\n}\n\nexport function isValidIPv4(host: string): boolean {\n  const parts = host.trim().split('.');\n  if (parts.length !== 4) {\n    return false;\n  }\n  return parts.every((part) => {\n    if (!/^\\d+$/.test(part)) {\n      return false;\n    }\n    const n = Number(part);\n    return Number.isInteger(n) && n >= 0 && n <= 255;\n  });\n}\n\nexport function resolveGatewayBindHostSync(params: {\n  bindMode: GatewayBindMode;\n  customBindHost?: string;\n}): string {\n  const { bindMode, customBindHost } = params;\n\n  if (bindMode === 'loopback') {\n    return '127.0.0.1';\n  }\n  if (bindMode === 'lan') {\n    return '0.0.0.0';\n  }\n  if (bindMode === 'auto') {\n    return isContainerEnvironment() ? '0.0.0.0' : '127.0.0.1';\n  }\n  if (bindMode === 'tailnet') {\n    return pickPrimaryTailnetIPv4() ?? '127.0.0.1';\n  }\n  if (bindMode === 'custom') {\n    const host = customBindHost?.trim();\n    if (!host || !isValidIPv4(host)) {\n      throw new Error('gateway.bind=custom requires a valid IPv4 gateway.customBindHost');\n    }\n    return host;\n  }\n  return '127.0.0.1';\n}\n\nexport async function canBindToHost(host: string): Promise<boolean> {\n  return new Promise((resolve) => {\n    const testServer = net.createServer();\n    testServer.once('error', () => resolve(false));\n    testServer.once('listening', () => {\n      testServer.close();\n      resolve(true);\n    });\n    testServer.listen(0, host);\n  });\n}\n\n/**\n * Resolve gateway bind host with optional bindability probe (OpenClaw-aligned).\n */\nexport async function resolveGatewayBindHost(params: {\n  bindMode: GatewayBindMode;\n  customBindHost?: string;\n}): Promise<string> {\n  const mode = params.bindMode;\n\n  if (mode === 'loopback') {\n    if (await canBindToHost('127.0.0.1')) {\n      return '127.0.0.1';\n    }\n    return '0.0.0.0';\n  }\n\n  if (mode === 'tailnet') {\n    const tailnetIp = pickPrimaryTailnetIPv4();\n    if (tailnetIp && (await canBindToHost(tailnetIp))) {\n      return tailnetIp;\n    }\n    if (await canBindToHost('127.0.0.1')) {\n      return '127.0.0.1';\n    }\n    return '0.0.0.0';\n  }\n\n  if (mode === 'lan') {\n    return '0.0.0.0';\n  }\n\n  if (mode === 'custom') {\n    const host = params.customBindHost?.trim();\n    if (!host) {\n      throw new Error('gateway.bind=custom requires gateway.customBindHost');\n    }\n    if (!isValidIPv4(host)) {\n      throw new Error(`gateway.bind=custom requires a valid IPv4 customBindHost (got ${host})`);\n    }\n    if (await canBindToHost(host)) {\n      return host;\n    }\n    throw new Error(`gateway bind=custom requested ${host} but it is not bindable on this host`);\n  }\n\n  if (mode === 'auto') {\n    if (isContainerEnvironment()) {\n      return '0.0.0.0';\n    }\n    if (await canBindToHost('127.0.0.1')) {\n      return '127.0.0.1';\n    }\n    return '0.0.0.0';\n  }\n\n  return '0.0.0.0';\n}\n\nexport async function resolveGatewayListenHosts(bindHost: string): Promise<string[]> {\n  if (bindHost !== '127.0.0.1') {\n    return [bindHost];\n  }\n  if (await canBindToHost('::1')) {\n    return [bindHost, '::1'];\n  }\n  return [bindHost];\n}\n\nexport function isNetworkAccessibleBindHost(bindHost: string): boolean {\n  return !isLoopbackHost(bindHost);\n}\n\nexport function resolveGatewayEffectiveHost(\n  cfg: Config,\n  overrides?: { bind?: GatewayBindMode },\n): string {\n  const bindMode = resolveGatewayBindMode(cfg, overrides?.bind);\n  const customBindHost = resolveGatewayCustomBindHost(cfg);\n  return resolveGatewayBindHostSync({ bindMode, customBindHost });\n}\n\n/** Loopback URL hostname when connecting to the gateway from the same machine. */\nexport function resolveGatewayLocalClientHost(cfg: Config): string {\n  const bindHost = resolveGatewayEffectiveHost(cfg);\n  return bindHost === '0.0.0.0' || bindHost === '::' ? '127.0.0.1' : bindHost;\n}\n"],"mappings":";;;;;AAUA,SAAgB,uBACd,KACA,cACiB;AACjB,KAAI,aACF,QAAO;AAET,QAAO,IAAI,SAAS,QAAQ,wBAAwB;;AAGtD,SAAgB,6BAA6B,KAAa,UAAuC;CAC/F,MAAM,eAAe,UAAU,MAAM;AACrC,KAAI,aACF,QAAO;AAET,QAAO,IAAI,SAAS,gBAAgB,MAAM,IAAI,KAAA;;AAGhD,IAAI;AAEJ,SAAgB,yBAAkC;AAChD,KAAI,8BAA8B,KAAA,EAChC,QAAO;AAET,KAAI,QAAQ,IAAI,mBAAmB,OAAO,QAAQ,IAAI,yBAAyB;AAC7E,8BAA4B;AAC5B,SAAO;;AAET,KAAI;AACF,MAAI,WAAW,cAAc,EAAE;AAC7B,+BAA4B;AAC5B,UAAO;;SAEH;AAGR,6BAA4B;AAC5B,QAAO;;;AAIT,SAAgB,wCAA8C;AAC5D,6BAA4B,KAAA;;AAG9B,SAAgB,yBAA0C;AACxD,QAAO,wBAAwB,GAAG,SAAS;;;AAI7C,SAAgB,yBAA6C;AAC3D,QAAO,oBAAoB;;AAG7B,SAAgB,YAAY,MAAuB;CACjD,MAAM,QAAQ,KAAK,MAAM,CAAC,MAAM,IAAI;AACpC,KAAI,MAAM,WAAW,EACnB,QAAO;AAET,QAAO,MAAM,OAAO,SAAS;AAC3B,MAAI,CAAC,QAAQ,KAAK,KAAK,CACrB,QAAO;EAET,MAAM,IAAI,OAAO,KAAK;AACtB,SAAO,OAAO,UAAU,EAAE,IAAI,KAAK,KAAK,KAAK;GAC7C;;AAGJ,SAAgB,2BAA2B,QAGhC;CACT,MAAM,EAAE,UAAU,mBAAmB;AAErC,KAAI,aAAa,WACf,QAAO;AAET,KAAI,aAAa,MACf,QAAO;AAET,KAAI,aAAa,OACf,QAAO,wBAAwB,GAAG,YAAY;AAEhD,KAAI,aAAa,UACf,QAAO,wBAAwB,IAAI;AAErC,KAAI,aAAa,UAAU;EACzB,MAAM,OAAO,gBAAgB,MAAM;AACnC,MAAI,CAAC,QAAQ,CAAC,YAAY,KAAK,CAC7B,OAAM,IAAI,MAAM,mEAAmE;AAErF,SAAO;;AAET,QAAO;;AAGT,eAAsB,cAAc,MAAgC;AAClE,QAAO,IAAI,SAAS,YAAY;EAC9B,MAAM,aAAa,IAAI,cAAc;AACrC,aAAW,KAAK,eAAe,QAAQ,MAAM,CAAC;AAC9C,aAAW,KAAK,mBAAmB;AACjC,cAAW,OAAO;AAClB,WAAQ,KAAK;IACb;AACF,aAAW,OAAO,GAAG,KAAK;GAC1B;;;;;AAMJ,eAAsB,uBAAuB,QAGzB;CAClB,MAAM,OAAO,OAAO;AAEpB,KAAI,SAAS,YAAY;AACvB,MAAI,MAAM,cAAc,YAAY,CAClC,QAAO;AAET,SAAO;;AAGT,KAAI,SAAS,WAAW;EACtB,MAAM,YAAY,wBAAwB;AAC1C,MAAI,aAAc,MAAM,cAAc,UAAU,CAC9C,QAAO;AAET,MAAI,MAAM,cAAc,YAAY,CAClC,QAAO;AAET,SAAO;;AAGT,KAAI,SAAS,MACX,QAAO;AAGT,KAAI,SAAS,UAAU;EACrB,MAAM,OAAO,OAAO,gBAAgB,MAAM;AAC1C,MAAI,CAAC,KACH,OAAM,IAAI,MAAM,sDAAsD;AAExE,MAAI,CAAC,YAAY,KAAK,CACpB,OAAM,IAAI,MAAM,iEAAiE,KAAK,GAAG;AAE3F,MAAI,MAAM,cAAc,KAAK,CAC3B,QAAO;AAET,QAAM,IAAI,MAAM,iCAAiC,KAAK,sCAAsC;;AAG9F,KAAI,SAAS,QAAQ;AACnB,MAAI,wBAAwB,CAC1B,QAAO;AAET,MAAI,MAAM,cAAc,YAAY,CAClC,QAAO;AAET,SAAO;;AAGT,QAAO;;AAGT,eAAsB,0BAA0B,UAAqC;AACnF,KAAI,aAAa,YACf,QAAO,CAAC,SAAS;AAEnB,KAAI,MAAM,cAAc,MAAM,CAC5B,QAAO,CAAC,UAAU,MAAM;AAE1B,QAAO,CAAC,SAAS;;AAGnB,SAAgB,4BAA4B,UAA2B;AACrE,QAAO,CAAC,eAAe,SAAS;;AAGlC,SAAgB,4BACd,KACA,WACQ;AAGR,QAAO,2BAA2B;EAAE,UAFnB,uBAAuB,KAAK,WAAW,KAEZ;EAAE,gBADvB,6BAA6B,IACQ;EAAE,CAAC;;;AAIjE,SAAgB,8BAA8B,KAAqB;CACjE,MAAM,WAAW,4BAA4B,IAAI;AACjD,QAAO,aAAa,aAAa,aAAa,OAAO,cAAc"}

package/dist/src/config/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","names":[],"sources":["../../../src/config/index.ts"],"sourcesContent":["export * from './schema.js';\nexport { getWorkspacePath } from './workspace-path-helpers.js';\nexport * from './agent-profile.js';\nexport * from './loader.js';\nexport * from './paths.js';\nexport * from './workspace-dirs.js';\nexport { expandWorkspacePathString, normalizeWorkspaceDir, resolveWorkspaceRoot } from './workspace-path.js';\nexport * from './profile.js';\nexport * from './reload.js';\nexport * from './diff.js';\nexport * from './rules.js';\nexport * from './integration.js';\nexport * from './models-json.js';\nexport * from './resolve-config-value.js';\nexport * from './runtime-overrides.js';\nexport * from './mcp-config-normalize.js';\n\n// Re-export thinking types\nexport type {\n  ThinkLevel,\n  ReasoningLevel,\n  VerboseLevel,\n  ElevatedMode,\n  SessionAgentConfig,\n} from '../agent/transcript/thinking-types.js';\nexport {\n  normalizeThinkLevel,\n  normalizeReasoningLevel,\n  normalizeVerboseLevel,\n  normalizeElevatedMode,\n  listThinkingLevels,\n  formatThinkingLevels,\n  thinkLevelToNumber,\n} from '../agent/transcript/thinking-types.js';\n\n// Re-export types from types.models (avoid conflict with schema.js)\nexport type {\n  ModelApi,\n  ModelCompatConfig,\n  ModelProviderAuthMode,\n  ModelDefinitionConfig,\n  ModelProviderConfig,\n  BedrockDiscoveryConfig,\n  ModelsConfig,\n} from './types.models.js';\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;qBAM6G"}

package/dist/src/config/loader.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"loader.js","names":["fsPromises"],"sources":["../../../src/config/loader.ts"],"sourcesContent":["import { readFileSync, existsSync, mkdirSync, promises as fsPromises } from 'fs';\nimport { dirname } from 'path';\nimport { writeTextAtomic } from '../infra/write-file-atomic.js';\nimport { type Config, ConfigSchema } from './schema.js';\nimport { resolveConfigPath } from './paths.js';\nimport { config } from 'dotenv';\nimport { createLogger } from '../utils/logger.js';\nimport { assertChannelPluginConfigs } from './validate-channel-configs.js';\n\nconst log = createLogger('ConfigLoader');\n\n/** Number of backup files to keep */\nconst CONFIG_BACKUP_COUNT = 10;\n\n/**\n * Rotate config backups before writing new config.\n * Creates a backup chain: xopc.json.bak, xopc.json.bak.1, xopc.json.bak.2, etc.\n */\nasync function rotateConfigBackups(configPath: string): Promise<void> {\n  if (CONFIG_BACKUP_COUNT <= 1) {\n    return;\n  }\n\n  const backupBase = `${configPath}.bak`;\n  const maxIndex = CONFIG_BACKUP_COUNT - 1;\n\n  // Delete oldest backup\n  try {\n    await fsPromises.unlink(`${backupBase}.${maxIndex}`);\n  } catch {\n    // best-effort: file may not exist\n  }\n\n  // Rotate existing backups: .bak.2 -> .bak.3, .bak.1 -> .bak.2, etc.\n  for (let index = maxIndex - 1; index >= 1; index--) {\n    try {\n      await fsPromises.rename(`${backupBase}.${index}`, `${backupBase}.${index + 1}`);\n    } catch {\n      // best-effort: file may not exist\n    }\n  }\n\n  // Move .bak to .bak.1\n  try {\n    await fsPromises.rename(backupBase, `${backupBase}.1`);\n  } catch {\n    // best-effort: file may not exist\n  }\n}\n\n/**\n * Load configuration from file\n * @param configPath Optional custom config path, defaults to XOPC_CONFIG_PATH or ~/.xopc/xopc.json\n */\nexport function loadConfig(configPath?: string): Config {\n  // dotenv ≥17 logs to stdout on every `config()` unless quiet; `loadConfig` runs from many call sites.\n  config({ quiet: true });\n\n  const path = configPath || process.env.XOPC_CONFIG_PATH || resolveConfigPath();\n\n  if (existsSync(path)) {\n    try {\n      const content = readFileSync(path, 'utf-8');\n      const json = JSON.parse(content);\n      const cfg = ConfigSchema.parse(json);\n      assertChannelPluginConfigs(cfg);\n      return cfg;\n    } catch (error) {\n      log.error({ err: error, path }, `Failed to load config`);\n      const cfg = ConfigSchema.parse(undefined);\n      assertChannelPluginConfigs(cfg);\n      return cfg;\n    }\n  }\n\n  const cfg = ConfigSchema.parse(undefined);\n  assertChannelPluginConfigs(cfg);\n  return cfg;\n}\n\n/**\n * Save configuration to file\n * @param config Configuration object to save\n * @param configPath Optional custom config path\n */\nexport async function saveConfig(config: Config, configPath?: string): Promise<void> {\n  const path = configPath || process.env.XOPC_CONFIG_PATH || resolveConfigPath();\n\n  const dir = dirname(path);\n  if (!existsSync(dir)) {\n    mkdirSync(dir, { recursive: true });\n  }\n\n  const validated = ConfigSchema.parse(config);\n  assertChannelPluginConfigs(validated);\n  const content = JSON.stringify(validated, null, 2);\n\n  // Backup existing config before writing\n  if (existsSync(path)) {\n    await rotateConfigBackups(path);\n    try {\n      // Copy current config to .bak as the latest backup\n      await fsPromises.copyFile(path, `${path}.bak`);\n    } catch {\n      // best-effort: backup copy may fail\n    }\n  }\n\n  await writeTextAtomic(path, content);\n}\n\nexport { resolveConfigPath } from './paths.js';\n"],"mappings":";;;;;;;;;;;;;;;AAkBA,eAAe,oBAAoB,YAAmC;AACpE,KAAI,uBAAuB,EACzB;CAGF,MAAM,aAAa,GAAG,WAAW;CACjC,MAAM,WAAW,sBAAsB;AAGvC,KAAI;AACF,QAAMA,SAAW,OAAO,GAAG,WAAW,GAAG,WAAW;SAC9C;AAKR,MAAK,IAAI,QAAQ,WAAW,GAAG,SAAS,GAAG,QACzC,KAAI;AACF,QAAMA,SAAW,OAAO,GAAG,WAAW,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,IAAI;SACzE;AAMV,KAAI;AACF,QAAMA,SAAW,OAAO,YAAY,GAAG,WAAW,IAAI;SAChD;;;;;;AASV,SAAgB,WAAW,YAA6B;AAEtD,QAAO,EAAE,OAAO,MAAM,CAAC;CAEvB,MAAM,OAAO,cAAc,QAAQ,IAAI,oBAAoB,mBAAmB;AAE9E,KAAI,WAAW,KAAK,CAClB,KAAI;EACF,MAAM,UAAU,aAAa,MAAM,QAAQ;EAC3C,MAAM,OAAO,KAAK,MAAM,QAAQ;EAChC,MAAM,MAAM,aAAa,MAAM,KAAK;AACpC,6BAA2B,IAAI;AAC/B,SAAO;UACA,OAAO;AACd,MAAI,MAAM;GAAE,KAAK;GAAO;GAAM,EAAE,wBAAwB;EACxD,MAAM,MAAM,aAAa,MAAM,KAAA,EAAU;AACzC,6BAA2B,IAAI;AAC/B,SAAO;;CAIX,MAAM,MAAM,aAAa,MAAM,KAAA,EAAU;AACzC,4BAA2B,IAAI;AAC/B,QAAO;;;;;;;AAQT,eAAsB,WAAW,QAAgB,YAAoC;CACnF,MAAM,OAAO,cAAc,QAAQ,IAAI,oBAAoB,mBAAmB;CAE9E,MAAM,MAAM,QAAQ,KAAK;AACzB,KAAI,CAAC,WAAW,IAAI,CAClB,WAAU,KAAK,EAAE,WAAW,MAAM,CAAC;CAGrC,MAAM,YAAY,aAAa,MAAM,OAAO;AAC5C,4BAA2B,UAAU;CACrC,MAAM,UAAU,KAAK,UAAU,WAAW,MAAM,EAAE;AAGlD,KAAI,WAAW,KAAK,EAAE;AACpB,QAAM,oBAAoB,KAAK;AAC/B,MAAI;AAEF,SAAMA,SAAW,SAAS,MAAM,GAAG,KAAK,MAAM;UACxC;;AAKV,OAAM,gBAAgB,MAAM,QAAQ;;;;yBA1G0B;cACR;aACT;cAEG;gCACyB;AAErE,OAAM,aAAa,eAAe;AAGlC,uBAAsB"}

package/dist/src/config/mcp-config-normalize.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"mcp-config-normalize.js","names":[],"sources":["../../../src/config/mcp-config-normalize.ts"],"sourcesContent":["import { isRecord } from '../utils/is-record.js';\n\nexport type ConfigMcpServers = Record<string, Record<string, unknown>>;\nexport type XopcMcpHttpTransport = 'sse' | 'streamable-http';\n\nconst CLI_MCP_TYPE_TO_XOPC_TRANSPORT: Record<string, XopcMcpHttpTransport | 'stdio'> = {\n  http: 'streamable-http',\n  'streamable-http': 'streamable-http',\n  sse: 'sse',\n  stdio: 'stdio',\n};\n\nfunction normalizeMcpString(value: unknown): string {\n  return typeof value === 'string' ? value.trim().toLowerCase() : '';\n}\n\nexport function resolveXopcMcpTransportAlias(value: unknown): XopcMcpHttpTransport | undefined {\n  const mapped = CLI_MCP_TYPE_TO_XOPC_TRANSPORT[normalizeMcpString(value)];\n  return mapped === 'sse' || mapped === 'streamable-http' ? mapped : undefined;\n}\n\nexport function isKnownCliMcpTypeAlias(value: unknown): boolean {\n  return Object.hasOwn(CLI_MCP_TYPE_TO_XOPC_TRANSPORT, normalizeMcpString(value));\n}\n\nexport function canonicalizeConfiguredMcpServer(\n  server: Record<string, unknown>,\n): Record<string, unknown> {\n  const next = { ...server };\n  const transportAlias = resolveXopcMcpTransportAlias(next.type);\n  if (typeof next.transport !== 'string' && transportAlias) {\n    next.transport = transportAlias;\n  }\n  if (isKnownCliMcpTypeAlias(next.type)) {\n    delete next.type;\n  }\n  return next;\n}\n\nexport function normalizeConfiguredMcpServers(value: unknown): ConfigMcpServers {\n  if (!isRecord(value)) {\n    return {};\n  }\n  return Object.fromEntries(\n    Object.entries(value)\n      .filter(([, server]) => isRecord(server))\n      .map(([name, server]) => [name, { ...(server as Record<string, unknown>) }]),\n  );\n}\n"],"mappings":";;AAKA,MAAM,iCAAiF;CACrF,MAAM;CACN,mBAAmB;CACnB,KAAK;CACL,OAAO;CACR;AAED,SAAS,mBAAmB,OAAwB;AAClD,QAAO,OAAO,UAAU,WAAW,MAAM,MAAM,CAAC,aAAa,GAAG;;AAGlE,SAAgB,6BAA6B,OAAkD;CAC7F,MAAM,SAAS,+BAA+B,mBAAmB,MAAM;AACvE,QAAO,WAAW,SAAS,WAAW,oBAAoB,SAAS,KAAA;;AAGrE,SAAgB,uBAAuB,OAAyB;AAC9D,QAAO,OAAO,OAAO,gCAAgC,mBAAmB,MAAM,CAAC;;AAGjF,SAAgB,gCACd,QACyB;CACzB,MAAM,OAAO,EAAE,GAAG,QAAQ;CAC1B,MAAM,iBAAiB,6BAA6B,KAAK,KAAK;AAC9D,KAAI,OAAO,KAAK,cAAc,YAAY,eACxC,MAAK,YAAY;AAEnB,KAAI,uBAAuB,KAAK,KAAK,CACnC,QAAO,KAAK;AAEd,QAAO;;AAGT,SAAgB,8BAA8B,OAAkC;AAC9E,KAAI,CAAC,SAAS,MAAM,CAClB,QAAO,EAAE;AAEX,QAAO,OAAO,YACZ,OAAO,QAAQ,MAAM,CAClB,QAAQ,GAAG,YAAY,SAAS,OAAO,CAAC,CACxC,KAAK,CAAC,MAAM,YAAY,CAAC,MAAM,EAAE,GAAI,QAAoC,CAAC,CAAC,CAC/E"}

package/dist/src/config/model-input.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"model-input.js","names":[],"sources":["../../../src/config/model-input.ts"],"sourcesContent":["import type { AgentModelConfig } from './schema.js';\n\nexport function resolveAgentModelPrimaryValue(model?: AgentModelConfig): string | undefined {\n  const primary = model?.primary?.trim();\n  return primary || undefined;\n}\n\nexport function resolveAgentModelFallbackValues(model?: AgentModelConfig): string[] {\n  return Array.isArray(model?.fallbacks) ? model.fallbacks : [];\n}\n"],"mappings":";AAEA,SAAgB,8BAA8B,OAA8C;AAE1F,QADgB,OAAO,SAAS,MAAM,IACpB,KAAA;;AAGpB,SAAgB,gCAAgC,OAAoC;AAClF,QAAO,MAAM,QAAQ,OAAO,UAAU,GAAG,MAAM,YAAY,EAAE"}

package/dist/src/config/models-json.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"models-json.js","names":[],"sources":["../../../src/config/models-json.ts"],"sourcesContent":["/**\n * Models.json configuration types and schema\n * \n * Supports custom providers and models (Ollama, vLLM, LM Studio, proxies)\n * \n * File location: ~/.xopc/models.json (or XOPC_MODELS_JSON env var)\n */\n\nimport { z } from 'zod';\nimport { existsSync, readFileSync } from 'fs';\nimport { writeTextAtomicSync } from '../infra/write-file-atomic.js';\nimport { resolveModelsJsonPath } from './paths.js';\n\n// Re-export for convenience\nexport { resolveModelsJsonPath as getModelsJsonPath } from './paths.js';\n\n// ============================================\n// OpenAI Compatibility Settings\n// ============================================\n\nexport const OpenRouterRoutingSchema = z.object({\n\tonly: z.array(z.string()).optional(),\n\torder: z.array(z.string()).optional(),\n});\n\nexport const VercelGatewayRoutingSchema = z.object({\n\tonly: z.array(z.string()).optional(),\n\torder: z.array(z.string()).optional(),\n});\n\nexport const OpenAICompletionsCompatSchema = z.object({\n\tsupportsStore: z.boolean().optional(),\n\tsupportsDeveloperRole: z.boolean().optional(),\n\tsupportsReasoningEffort: z.boolean().optional(),\n\tsupportsUsageInStreaming: z.boolean().optional(),\n\tmaxTokensField: z.enum(['max_completion_tokens', 'max_tokens']).optional(),\n\trequiresToolResultName: z.boolean().optional(),\n\trequiresAssistantAfterToolResult: z.boolean().optional(),\n\trequiresThinkingAsText: z.boolean().optional(),\n\trequiresMistralToolIds: z.boolean().optional(),\n\tthinkingFormat: z.enum(['openai', 'zai', 'dashscope']).optional(),\n\topenRouterRouting: OpenRouterRoutingSchema.optional(),\n\tvercelGatewayRouting: VercelGatewayRoutingSchema.optional(),\n\tsupportsStrictMode: z.boolean().optional(),\n});\n\nexport const OpenAIResponsesCompatSchema = z.object({});\n\nexport const OpenAICompatSchema = z.union([\n\tOpenAICompletionsCompatSchema,\n\tOpenAIResponsesCompatSchema,\n]);\n\n// ============================================\n// Model Definition\n// ============================================\n\nexport const CustomModelSchema = z.object({\n\tid: z.string().min(1),\n\tname: z.string().min(1).optional(),\n\tapi: z.enum([\n\t\t'openai-completions',\n\t\t'openai-responses',\n\t\t'anthropic-messages',\n\t\t'google-generative-ai',\n\t\t'azure-openai-responses',\n\t\t'bedrock-converse-stream',\n\t\t'openai-codex-responses',\n\t\t'google-gemini-cli',\n\t\t'google-vertex',\n\t]).optional(),\n\treasoning: z.boolean().optional(),\n\tinput: z.array(z.enum(['text', 'image'])).optional(),\n\tcontextWindow: z.number().positive().optional(),\n\tmaxTokens: z.number().positive().optional(),\n\tcost: z.object({\n\t\tinput: z.number(),\n\t\toutput: z.number(),\n\t\tcacheRead: z.number(),\n\t\tcacheWrite: z.number(),\n\t}).optional(),\n\theaders: z.record(z.string(), z.string()).optional(),\n\tcompat: OpenAICompatSchema.optional(),\n});\n\n// ============================================\n// Model Override (for built-in models)\n// ============================================\n\nexport const ModelOverrideSchema = z.object({\n\tname: z.string().min(1).optional(),\n\treasoning: z.boolean().optional(),\n\tinput: z.array(z.enum(['text', 'image'])).optional(),\n\tcontextWindow: z.number().positive().optional(),\n\tmaxTokens: z.number().positive().optional(),\n\tcost: z.object({\n\t\tinput: z.number().optional(),\n\t\toutput: z.number().optional(),\n\t\tcacheRead: z.number().optional(),\n\t\tcacheWrite: z.number().optional(),\n\t}).optional(),\n\theaders: z.record(z.string(), z.string()).optional(),\n\tcompat: OpenAICompatSchema.optional(),\n});\n\n// ============================================\n// Provider Configuration\n// ============================================\n\nexport const ProviderConfigSchema = z.object({\n\tbaseUrl: z.string().url().optional(),\n\tapiKey: z.string().optional(),\n\tapi: z.enum([\n\t\t'openai-completions',\n\t\t'openai-responses',\n\t\t'anthropic-messages',\n\t\t'google-generative-ai',\n\t\t'azure-openai-responses',\n\t\t'bedrock-converse-stream',\n\t\t'openai-codex-responses',\n\t\t'google-gemini-cli',\n\t\t'google-vertex',\n\t]).optional(),\n\theaders: z.record(z.string(), z.string()).optional(),\n\tauthHeader: z.boolean().optional(),\n\tmodels: z.array(CustomModelSchema).optional(),\n\tmodelOverrides: z.record(z.string(), ModelOverrideSchema).optional(),\n});\n\n// ============================================\n// Root Models.json Schema\n// ============================================\n\nexport const ModelsJsonSchema = z.object({\n\tproviders: z.record(z.string(), ProviderConfigSchema),\n});\n\n// ============================================\n// TypeScript Types\n// ============================================\n\nexport type OpenRouterRouting = z.infer<typeof OpenRouterRoutingSchema>;\nexport type VercelGatewayRouting = z.infer<typeof VercelGatewayRoutingSchema>;\nexport type OpenAICompletionsCompat = z.infer<typeof OpenAICompletionsCompatSchema>;\nexport type OpenAIResponsesCompat = z.infer<typeof OpenAIResponsesCompatSchema>;\nexport type OpenAICompat = z.infer<typeof OpenAICompatSchema>;\nexport type CustomModel = z.infer<typeof CustomModelSchema>;\nexport type ModelOverride = z.infer<typeof ModelOverrideSchema>;\nexport type ProviderConfig = z.infer<typeof ProviderConfigSchema>;\nexport type ModelsJsonConfig = z.infer<typeof ModelsJsonSchema>;\n\n// ============================================\n// Validation Types\n// ============================================\n\nexport interface ValidationError {\n\tpath: string;\n\tmessage: string;\n\tseverity: 'error' | 'warning';\n}\n\nexport interface ValidationResult {\n\tvalid: boolean;\n\terrors: ValidationError[];\n}\n\n// ============================================\n// Strict Provider ID Validation\n// ============================================\n\nconst PROVIDER_ID_REGEX = /^[a-z0-9]([a-z0-9-_]*[a-z0-9])?$/;\n/** pi-ai KnownProvider ids — overriding in models.json requires baseUrl (see validation below). */\nconst RESERVED_PROVIDER_IDS = new Set([\n\t'amazon-bedrock', 'anthropic', 'azure-openai-responses', 'cerebras',\n\t'cloudflare-ai-gateway', 'cloudflare-workers-ai', 'deepseek', 'fireworks', 'github-copilot',\n\t'google', 'google-antigravity', 'google-gemini-cli', 'google-vertex', 'groq',\n\t'huggingface', 'kimi-coding', 'minimax', 'minimax-cn', 'mistral', 'moonshotai', 'moonshotai-cn',\n\t'openai', 'openai-codex', 'opencode', 'opencode-go', 'openrouter',\n\t'together', 'vercel-ai-gateway', 'xai', 'xiaomi', 'xiaomi-token-plan-ams', 'xiaomi-token-plan-cn',\n\t'xiaomi-token-plan-sgp', 'zai',\n]);\n\n// ============================================\n// Validation Function\n// ============================================\n\nexport function validateModelsConfig(config: unknown): ValidationResult {\n\tconst errors: ValidationError[] = [];\n\n\tconst result = ModelsJsonSchema.safeParse(config);\n\t\n\tif (!result.success) {\n\t\tfor (const issue of result.error.issues) {\n\t\t\terrors.push({\n\t\t\t\tpath: issue.path.join('.'),\n\t\t\t\tmessage: issue.message,\n\t\t\t\tseverity: 'error',\n\t\t\t});\n\t\t}\n\t\treturn { valid: false, errors };\n\t}\n\n\tconst data = result.data;\n\n\t// Additional validation rules\n\tfor (const [providerName, providerConfig] of Object.entries(data.providers)) {\n\t\t// Validate provider ID format\n\t\tif (!PROVIDER_ID_REGEX.test(providerName)) {\n\t\t\terrors.push({\n\t\t\t\tpath: `providers.${providerName}`,\n\t\t\t\tmessage: 'Provider ID must start/end with alphanumeric, contain only lowercase letters, numbers, hyphens, and underscores',\n\t\t\t\tseverity: 'error',\n\t\t\t});\n\t\t}\n\n\t\t// Warn about reserved provider IDs (can override but not recommended)\n\t\tif (RESERVED_PROVIDER_IDS.has(providerName) && !providerConfig.baseUrl) {\n\t\t\terrors.push({\n\t\t\t\tpath: `providers.${providerName}`,\n\t\t\t\tmessage: `Overriding built-in provider \"${providerName}\" requires baseUrl to be specified`,\n\t\t\t\tseverity: 'warning',\n\t\t\t});\n\t\t}\n\n\t\tconst hasModels = providerConfig.models && providerConfig.models.length > 0;\n\t\tconst hasModelOverrides = providerConfig.modelOverrides && Object.keys(providerConfig.modelOverrides).length > 0;\n\t\tconst hasBaseUrl = !!providerConfig.baseUrl;\n\n\t\t// If defining custom models, baseUrl and apiKey are required\n\t\tif (hasModels) {\n\t\t\tif (!hasBaseUrl) {\n\t\t\t\terrors.push({\n\t\t\t\t\tpath: `providers.${providerName}.baseUrl`,\n\t\t\t\t\tmessage: 'baseUrl is required when defining custom models',\n\t\t\t\t\tseverity: 'error',\n\t\t\t\t});\n\t\t\t}\n\t\t\tif (!providerConfig.apiKey) {\n\t\t\t\terrors.push({\n\t\t\t\t\tpath: `providers.${providerName}.apiKey`,\n\t\t\t\t\tmessage: 'apiKey is required when defining custom models',\n\t\t\t\t\tseverity: 'error',\n\t\t\t\t});\n\t\t\t}\n\t\t}\n\n\t\t// If no models and no baseUrl and no modelOverrides, apiKey alone is valid (auth for built-in providers)\n\t\tif (!hasModels && !hasBaseUrl && !hasModelOverrides && !providerConfig.apiKey) {\n\t\t\terrors.push({\n\t\t\t\tpath: `providers.${providerName}`,\n\t\t\t\tmessage: 'Must specify baseUrl, modelOverrides, models, or apiKey',\n\t\t\t\tseverity: 'error',\n\t\t\t});\n\t\t}\n\n\t\t// Validate each model\n\t\tif (providerConfig.models) {\n\t\t\tfor (let i = 0; i < providerConfig.models.length; i++) {\n\t\t\t\tconst model = providerConfig.models[i];\n\t\t\t\tif (!model.api && !providerConfig.api) {\n\t\t\t\t\terrors.push({\n\t\t\t\t\t\tpath: `providers.${providerName}.models[${i}].api`,\n\t\t\t\t\t\tmessage: 'api is required when not specified at provider level',\n\t\t\t\t\t\tseverity: 'error',\n\t\t\t\t\t});\n\t\t\t\t}\n\n\t\t\t\t// Validate model ID doesn't contain slashes\n\t\t\t\tif (model.id.includes('/')) {\n\t\t\t\t\terrors.push({\n\t\t\t\t\t\tpath: `providers.${providerName}.models[${i}].id`,\n\t\t\t\t\t\tmessage: 'Model ID cannot contain \"/\" character',\n\t\t\t\t\t\tseverity: 'error',\n\t\t\t\t\t});\n\t\t\t\t}\n\n\t\t\t\t// Validate cost values are non-negative\n\t\t\t\tif (model.cost) {\n\t\t\t\t\tconst costFields = ['input', 'output', 'cacheRead', 'cacheWrite'] as const;\n\t\t\t\t\tfor (const field of costFields) {\n\t\t\t\t\t\tconst value = model.cost[field];\n\t\t\t\t\t\tif (value !== undefined && value < 0) {\n\t\t\t\t\t\t\terrors.push({\n\t\t\t\t\t\t\t\tpath: `providers.${providerName}.models[${i}].cost.${field}`,\n\t\t\t\t\t\t\t\tmessage: 'Cost value cannot be negative',\n\t\t\t\t\t\t\t\tseverity: 'error',\n\t\t\t\t\t\t\t});\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\n\t\t// Validate modelOverrides keys don't contain slashes\n\t\tif (providerConfig.modelOverrides) {\n\t\t\tfor (const modelId of Object.keys(providerConfig.modelOverrides)) {\n\t\t\t\tif (!modelId.includes('/')) {\n\t\t\t\t\terrors.push({\n\t\t\t\t\t\tpath: `providers.${providerName}.modelOverrides.${modelId}`,\n\t\t\t\t\t\tmessage: 'Model override key should be in format \"provider/model-id\"',\n\t\t\t\t\t\tseverity: 'warning',\n\t\t\t\t\t});\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t}\n\n\treturn {\n\t\tvalid: errors.filter(e => e.severity === 'error').length === 0,\n\t\terrors,\n\t};\n}\n\n// ============================================\n// Default Values\n// ============================================\n\nexport function getDefaultModelValues(): Required<Pick<CustomModel, 'input' | 'contextWindow' | 'maxTokens' | 'cost'>> {\n\treturn {\n\t\tinput: ['text'],\n\t\tcontextWindow: 128000,\n\t\tmaxTokens: 16384,\n\t\tcost: {\n\t\t\tinput: 0,\n\t\t\toutput: 0,\n\t\t\tcacheRead: 0,\n\t\t\tcacheWrite: 0,\n\t\t},\n\t};\n}\n\n// ============================================\n// File Operations\n// ============================================\n\n/**\n * Load models.json from disk\n */\nexport function loadModelsJson(path: string = resolveModelsJsonPath()): { config: ModelsJsonConfig; error?: string } {\n\tif (!existsSync(path)) {\n\t\treturn { config: { providers: {} } };\n\t}\n\n\ttry {\n\t\tconst content = readFileSync(path, 'utf-8');\n\t\tconst config = JSON.parse(content);\n\t\tconst validation = validateModelsConfig(config);\n\t\t\n\t\tif (!validation.valid) {\n\t\t\tconst errors = validation.errors.map((e) => `${e.path}: ${e.message}`).join('; ');\n\t\t\treturn { config, error: `Validation failed: ${errors}` };\n\t\t}\n\t\t\n\t\treturn { config };\n\t} catch (error) {\n\t\treturn {\n\t\t\tconfig: { providers: {} },\n\t\t\terror: error instanceof Error ? error.message : 'Failed to load models.json',\n\t\t};\n\t}\n}\n\n/**\n * Save models.json to disk\n */\nexport function saveModelsJson(path: string, config: ModelsJsonConfig): { success: boolean; error?: string } {\n\ttry {\n\t\t// Validate before saving\n\t\tconst validation = validateModelsConfig(config);\n\t\tif (!validation.valid) {\n\t\t\tconst errors = validation.errors.map((e) => `${e.path}: ${e.message}`).join('; ');\n\t\t\treturn { success: false, error: `Validation failed: ${errors}` };\n\t\t}\n\n\t\twriteTextAtomicSync(path, JSON.stringify(config, null, 2));\n\t\treturn { success: true };\n\t} catch (error) {\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\terror: error instanceof Error ? error.message : 'Failed to save models.json',\n\t\t};\n\t}\n}\n\n/**\n * Check if models.json exists\n */\nexport function modelsJsonExists(path: string = resolveModelsJsonPath()): boolean {\n\treturn existsSync(path);\n}"],"mappings":";;;;;;;;;;;;;AA0LA,SAAgB,qBAAqB,QAAmC;CACvE,MAAM,SAA4B,EAAE;CAEpC,MAAM,SAAS,iBAAiB,UAAU,OAAO;AAEjD,KAAI,CAAC,OAAO,SAAS;AACpB,OAAK,MAAM,SAAS,OAAO,MAAM,OAChC,QAAO,KAAK;GACX,MAAM,MAAM,KAAK,KAAK,IAAI;GAC1B,SAAS,MAAM;GACf,UAAU;GACV,CAAC;AAEH,SAAO;GAAE,OAAO;GAAO;GAAQ;;CAGhC,MAAM,OAAO,OAAO;AAGpB,MAAK,MAAM,CAAC,cAAc,mBAAmB,OAAO,QAAQ,KAAK,UAAU,EAAE;AAE5E,MAAI,CAAC,kBAAkB,KAAK,aAAa,CACxC,QAAO,KAAK;GACX,MAAM,aAAa;GACnB,SAAS;GACT,UAAU;GACV,CAAC;AAIH,MAAI,sBAAsB,IAAI,aAAa,IAAI,CAAC,eAAe,QAC9D,QAAO,KAAK;GACX,MAAM,aAAa;GACnB,SAAS,iCAAiC,aAAa;GACvD,UAAU;GACV,CAAC;EAGH,MAAM,YAAY,eAAe,UAAU,eAAe,OAAO,SAAS;EAC1E,MAAM,oBAAoB,eAAe,kBAAkB,OAAO,KAAK,eAAe,eAAe,CAAC,SAAS;EAC/G,MAAM,aAAa,CAAC,CAAC,eAAe;AAGpC,MAAI,WAAW;AACd,OAAI,CAAC,WACJ,QAAO,KAAK;IACX,MAAM,aAAa,aAAa;IAChC,SAAS;IACT,UAAU;IACV,CAAC;AAEH,OAAI,CAAC,eAAe,OACnB,QAAO,KAAK;IACX,MAAM,aAAa,aAAa;IAChC,SAAS;IACT,UAAU;IACV,CAAC;;AAKJ,MAAI,CAAC,aAAa,CAAC,cAAc,CAAC,qBAAqB,CAAC,eAAe,OACtE,QAAO,KAAK;GACX,MAAM,aAAa;GACnB,SAAS;GACT,UAAU;GACV,CAAC;AAIH,MAAI,eAAe,OAClB,MAAK,IAAI,IAAI,GAAG,IAAI,eAAe,OAAO,QAAQ,KAAK;GACtD,MAAM,QAAQ,eAAe,OAAO;AACpC,OAAI,CAAC,MAAM,OAAO,CAAC,eAAe,IACjC,QAAO,KAAK;IACX,MAAM,aAAa,aAAa,UAAU,EAAE;IAC5C,SAAS;IACT,UAAU;IACV,CAAC;AAIH,OAAI,MAAM,GAAG,SAAS,IAAI,CACzB,QAAO,KAAK;IACX,MAAM,aAAa,aAAa,UAAU,EAAE;IAC5C,SAAS;IACT,UAAU;IACV,CAAC;AAIH,OAAI,MAAM,KAET,MAAK,MAAM,SAAS;IADA;IAAS;IAAU;IAAa;IACtB,EAAE;IAC/B,MAAM,QAAQ,MAAM,KAAK;AACzB,QAAI,UAAU,KAAA,KAAa,QAAQ,EAClC,QAAO,KAAK;KACX,MAAM,aAAa,aAAa,UAAU,EAAE,SAAS;KACrD,SAAS;KACT,UAAU;KACV,CAAC;;;AAQP,MAAI,eAAe;QACb,MAAM,WAAW,OAAO,KAAK,eAAe,eAAe,CAC/D,KAAI,CAAC,QAAQ,SAAS,IAAI,CACzB,QAAO,KAAK;IACX,MAAM,aAAa,aAAa,kBAAkB;IAClD,SAAS;IACT,UAAU;IACV,CAAC;;;AAMN,QAAO;EACN,OAAO,OAAO,QAAO,MAAK,EAAE,aAAa,QAAQ,CAAC,WAAW;EAC7D;EACA;;AAOF,SAAgB,wBAAuG;AACtH,QAAO;EACN,OAAO,CAAC,OAAO;EACf,eAAe;EACf,WAAW;EACX,MAAM;GACL,OAAO;GACP,QAAQ;GACR,WAAW;GACX,YAAY;GACZ;EACD;;;;;AAUF,SAAgB,eAAe,OAAe,uBAAuB,EAAgD;AACpH,KAAI,CAAC,WAAW,KAAK,CACpB,QAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,EAAE,EAAE;AAGrC,KAAI;EACH,MAAM,UAAU,aAAa,MAAM,QAAQ;EAC3C,MAAM,SAAS,KAAK,MAAM,QAAQ;EAClC,MAAM,aAAa,qBAAqB,OAAO;AAE/C,MAAI,CAAC,WAAW,MAEf,QAAO;GAAE;GAAQ,OAAO,sBADT,WAAW,OAAO,KAAK,MAAM,GAAG,EAAE,KAAK,IAAI,EAAE,UAAU,CAAC,KAAK,KACxB;GAAI;AAGzD,SAAO,EAAE,QAAQ;UACT,OAAO;AACf,SAAO;GACN,QAAQ,EAAE,WAAW,EAAE,EAAE;GACzB,OAAO,iBAAiB,QAAQ,MAAM,UAAU;GAChD;;;;;;AAOH,SAAgB,eAAe,MAAc,QAAgE;AAC5G,KAAI;EAEH,MAAM,aAAa,qBAAqB,OAAO;AAC/C,MAAI,CAAC,WAAW,MAEf,QAAO;GAAE,SAAS;GAAO,OAAO,sBADjB,WAAW,OAAO,KAAK,MAAM,GAAG,EAAE,KAAK,IAAI,EAAE,UAAU,CAAC,KAAK,KAChB;GAAI;AAGjE,sBAAoB,MAAM,KAAK,UAAU,QAAQ,MAAM,EAAE,CAAC;AAC1D,SAAO,EAAE,SAAS,MAAM;UAChB,OAAO;AACf,SAAO;GACN,SAAS;GACT,OAAO,iBAAiB,QAAQ,MAAM,UAAU;GAChD;;;;;;AAOH,SAAgB,iBAAiB,OAAe,uBAAuB,EAAW;AACjF,QAAO,WAAW,KAAK;;;;yBA1X4C;aACjB;AAStC,2BAA0B,EAAE,OAAO;EAC/C,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;EACpC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;EACrC,CAAC;AAEW,8BAA6B,EAAE,OAAO;EAClD,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;EACpC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,UAAU;EACrC,CAAC;AAEW,iCAAgC,EAAE,OAAO;EACrD,eAAe,EAAE,SAAS,CAAC,UAAU;EACrC,uBAAuB,EAAE,SAAS,CAAC,UAAU;EAC7C,yBAAyB,EAAE,SAAS,CAAC,UAAU;EAC/C,0BAA0B,EAAE,SAAS,CAAC,UAAU;EAChD,gBAAgB,EAAE,KAAK,CAAC,yBAAyB,aAAa,CAAC,CAAC,UAAU;EAC1E,wBAAwB,EAAE,SAAS,CAAC,UAAU;EAC9C,kCAAkC,EAAE,SAAS,CAAC,UAAU;EACxD,wBAAwB,EAAE,SAAS,CAAC,UAAU;EAC9C,wBAAwB,EAAE,SAAS,CAAC,UAAU;EAC9C,gBAAgB,EAAE,KAAK;GAAC;GAAU;GAAO;GAAY,CAAC,CAAC,UAAU;EACjE,mBAAmB,wBAAwB,UAAU;EACrD,sBAAsB,2BAA2B,UAAU;EAC3D,oBAAoB,EAAE,SAAS,CAAC,UAAU;EAC1C,CAAC;AAEW,+BAA8B,EAAE,OAAO,EAAE,CAAC;AAE1C,sBAAqB,EAAE,MAAM,CACzC,+BACA,4BACA,CAAC;AAMW,qBAAoB,EAAE,OAAO;EACzC,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE;EACrB,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU;EAClC,KAAK,EAAE,KAAK;GACX;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA,CAAC,CAAC,UAAU;EACb,WAAW,EAAE,SAAS,CAAC,UAAU;EACjC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,QAAQ,QAAQ,CAAC,CAAC,CAAC,UAAU;EACpD,eAAe,EAAE,QAAQ,CAAC,UAAU,CAAC,UAAU;EAC/C,WAAW,EAAE,QAAQ,CAAC,UAAU,CAAC,UAAU;EAC3C,MAAM,EAAE,OAAO;GACd,OAAO,EAAE,QAAQ;GACjB,QAAQ,EAAE,QAAQ;GAClB,WAAW,EAAE,QAAQ;GACrB,YAAY,EAAE,QAAQ;GACtB,CAAC,CAAC,UAAU;EACb,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,QAAQ,CAAC,CAAC,UAAU;EACpD,QAAQ,mBAAmB,UAAU;EACrC,CAAC;AAMW,uBAAsB,EAAE,OAAO;EAC3C,MAAM,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,UAAU;EAClC,WAAW,EAAE,SAAS,CAAC,UAAU;EACjC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,QAAQ,QAAQ,CAAC,CAAC,CAAC,UAAU;EACpD,eAAe,EAAE,QAAQ,CAAC,UAAU,CAAC,UAAU;EAC/C,WAAW,EAAE,QAAQ,CAAC,UAAU,CAAC,UAAU;EAC3C,MAAM,EAAE,OAAO;GACd,OAAO,EAAE,QAAQ,CAAC,UAAU;GAC5B,QAAQ,EAAE,QAAQ,CAAC,UAAU;GAC7B,WAAW,EAAE,QAAQ,CAAC,UAAU;GAChC,YAAY,EAAE,QAAQ,CAAC,UAAU;GACjC,CAAC,CAAC,UAAU;EACb,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,QAAQ,CAAC,CAAC,UAAU;EACpD,QAAQ,mBAAmB,UAAU;EACrC,CAAC;AAMW,wBAAuB,EAAE,OAAO;EAC5C,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU;EACpC,QAAQ,EAAE,QAAQ,CAAC,UAAU;EAC7B,KAAK,EAAE,KAAK;GACX;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA,CAAC,CAAC,UAAU;EACb,SAAS,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,QAAQ,CAAC,CAAC,UAAU;EACpD,YAAY,EAAE,SAAS,CAAC,UAAU;EAClC,QAAQ,EAAE,MAAM,kBAAkB,CAAC,UAAU;EAC7C,gBAAgB,EAAE,OAAO,EAAE,QAAQ,EAAE,oBAAoB,CAAC,UAAU;EACpE,CAAC;AAMW,oBAAmB,EAAE,OAAO,EACxC,WAAW,EAAE,OAAO,EAAE,QAAQ,EAAE,qBAAqB,EACrD,CAAC;AAmCI,qBAAoB;AAEpB,yBAAwB,IAAI,IAAI;EACrC;EAAkB;EAAa;EAA0B;EACzD;EAAyB;EAAyB;EAAY;EAAa;EAC3E;EAAU;EAAsB;EAAqB;EAAiB;EACtE;EAAe;EAAe;EAAW;EAAc;EAAW;EAAc;EAChF;EAAU;EAAgB;EAAY;EAAe;EACrD;EAAY;EAAqB;EAAO;EAAU;EAAyB;EAC3E;EAAyB;EACzB,CAAC"}

package/dist/src/config/paths-state.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"paths-state.js","names":[],"sources":["../../../src/config/paths-state.ts"],"sourcesContent":["import { homedir } from 'node:os';\nimport { join } from 'node:path';\n\nexport const ENV_VARS = {\n  STATE_DIR: 'XOPC_STATE_DIR',\n  PROFILE: 'XOPC_PROFILE',\n  HOME: 'XOPC_HOME',\n  CONFIG_PATH: 'XOPC_CONFIG_PATH',\n  CREDENTIALS_DIR: 'XOPC_CREDENTIALS_DIR',\n  LOG_LEVEL: 'XOPC_LOG_LEVEL',\n  LOG_DIR: 'XOPC_LOG_DIR',\n  LOG_CONSOLE: 'XOPC_LOG_CONSOLE',\n  LOG_FILE: 'XOPC_LOG_FILE',\n  LOG_RETENTION_DAYS: 'XOPC_LOG_RETENTION_DAYS',\n  PRETTY_LOGS: 'XOPC_PRETTY_LOGS',\n} as const;\n\nexport function resolveHomeDir(env: NodeJS.ProcessEnv = process.env): string {\n  return env[ENV_VARS.HOME] || homedir();\n}\n\nexport function resolveStateDir(env: NodeJS.ProcessEnv = process.env): string {\n  if (env[ENV_VARS.STATE_DIR]) {\n    return env[ENV_VARS.STATE_DIR]!;\n  }\n\n  const home = resolveHomeDir(env);\n  return join(home, '.xopc');\n}\n\n/** Persisted npm update check throttle / notification state (`~/.xopc/update-check.json`). */\nexport function resolveUpdateCheckStatePath(env: NodeJS.ProcessEnv = process.env): string {\n  return join(resolveStateDir(env), 'update-check.json');\n}\n\n/** Cross-process lock for one-click / CLI / auto npm updates (`~/.xopc/update.lock`). */\nexport function resolveUpdateLockPath(env: NodeJS.ProcessEnv = process.env): string {\n  return join(resolveStateDir(env), 'update.lock');\n}\n\n/** Primary SQLite state database (`~/.xopc/xopc.db`). */\nexport const XOPC_DB_FILENAME = 'xopc.db';\n\nexport function resolveXopcDatabasePath(env: NodeJS.ProcessEnv = process.env): string {\n  return join(resolveStateDir(env), XOPC_DB_FILENAME);\n}\n"],"mappings":";;;;AAiBA,SAAgB,eAAe,MAAyB,QAAQ,KAAa;AAC3E,QAAO,IAAI,SAAS,SAAS,SAAS;;AAGxC,SAAgB,gBAAgB,MAAyB,QAAQ,KAAa;AAC5E,KAAI,IAAI,SAAS,WACf,QAAO,IAAI,SAAS;AAItB,QAAO,KADM,eAAe,IACZ,EAAE,QAAQ;;;AAI5B,SAAgB,4BAA4B,MAAyB,QAAQ,KAAa;AACxF,QAAO,KAAK,gBAAgB,IAAI,EAAE,oBAAoB;;;AAIxD,SAAgB,sBAAsB,MAAyB,QAAQ,KAAa;AAClF,QAAO,KAAK,gBAAgB,IAAI,EAAE,cAAc;;AAMlD,SAAgB,wBAAwB,MAAyB,QAAQ,KAAa;AACpF,QAAO,KAAK,gBAAgB,IAAI,EAAE,iBAAiB;;;;AAzCxC,YAAW;EACtB,WAAW;EACX,SAAS;EACT,MAAM;EACN,aAAa;EACb,iBAAiB;EACjB,WAAW;EACX,SAAS;EACT,aAAa;EACb,UAAU;EACV,oBAAoB;EACpB,aAAa;EACd;AA0BY,oBAAmB"}

package/dist/src/config/paths.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"paths.js","names":["resolveAgentDirScoped","resolveAgentHomeScoped","resolveAgentProfileDirScoped","resolveAgentProfileMarkdownPathScoped"],"sources":["../../../src/config/paths.ts"],"sourcesContent":["import { join, sep } from 'path';\nimport { fileURLToPath } from 'url';\nimport { dirname } from 'path';\nimport { existsSync } from 'fs';\n\nimport type { Config } from './schema.js';\nimport {\n  resolveAgentDir as resolveAgentDirScoped,\n  resolveAgentHomeDir as resolveAgentHomeScoped,\n  resolveAgentProfileDir as resolveAgentProfileDirScoped,\n  resolveAgentProfileMarkdownPath as resolveAgentProfileMarkdownPathScoped,\n  resolveAgentWorkspaceDir,\n} from '../agent/agent-scope.js';\nimport { ENV_VARS, resolveStateDir } from './paths-state.js';\n\nexport { ENV_VARS, resolveHomeDir, resolveStateDir, resolveXopcDatabasePath, XOPC_DB_FILENAME } from './paths-state.js';\nexport { resolveDefaultAgentWorkspaceDir } from './workspace-defaults.js';\nexport {\n  resolveAgentWorkspaceDir,\n  resolveAgentDir as resolveAgentDirFromConfig,\n  resolveAgentHomeDir as resolveAgentHomeDirFromConfig,\n} from '../agent/agent-scope.js';\n\n// ============================================\n// File Names\n// ============================================\nconst ENV_BUNDLED_EXTENSIONS_ROOT = 'XOPC_BUNDLED_EXTENSIONS_ROOT';\nconst ENV_BUNDLED_SKILLS_ROOT = 'XOPC_BUNDLED_SKILLS_ROOT';\n\nexport const FILENAMES = {\n  CONFIG: 'xopc.json',\n  MODELS_JSON: 'models.json',\n  /** Primary SQLite state database (`~/.xopc/xopc.db`). */\n  XOPC_DB: 'xopc.db',\n  EXTENSIONS_LOCK: 'extensions-lock.json',\n  CREDENTIALS_PROFILES: 'auth-profiles.json',\n  WORKSPACE_STATE: 'workspace.json',\n  SKILLS_CACHE: 'skills-cache.json',\n  /** Hub / CLI install provenance for ~/.xopc/skills/<id>. */\n  SKILLS_LOCK: 'skills-lock.json',\n  PID: 'pid',\n  STATUS: 'status.json',\n  SOCKET: 'agent.sock',\n} as const;\n\n// ============================================\n// Workspace Files\n// ============================================\nexport const WORKSPACE_FILES = {\n  SOUL: 'SOUL.md',\n  IDENTITY: 'IDENTITY.md',\n  AGENTS: 'AGENTS.md',\n  TOOLS: 'TOOLS.md',\n  HEARTBEAT: 'HEARTBEAT.md',\n} as const;\n\nexport const USER_PROFILE_FILENAME = 'PROFILE.md';\nexport const USER_MEMORY_FILENAME = 'MEMORY.md';\n\n// ============================================\n// Path Resolution Functions\n// ============================================\n\n/**\n * Resolve the main config file path\n */\nexport function resolveConfigPath(): string {\n  return process.env[ENV_VARS.CONFIG_PATH] ?? join(resolveStateDir(), FILENAMES.CONFIG);\n}\n\n/**\n * Resolve the credentials directory\n */\nexport function resolveCredentialsDir(): string {\n  return process.env[ENV_VARS.CREDENTIALS_DIR] ?? join(resolveStateDir(), 'credentials');\n}\n\n/**\n * Resolve the global auth-profiles.json path\n */\nexport function resolveAuthProfilesPath(): string {\n  return join(resolveCredentialsDir(), FILENAMES.CREDENTIALS_PROFILES);\n}\n\n/** Global user profile root (`~/.xopc/user/`). */\nexport function resolveUserDir(): string {\n  return join(resolveStateDir(), 'user');\n}\n\n/** Global human/user profile Markdown (`~/.xopc/user/PROFILE.md`). */\nexport function resolveUserProfilePath(): string {\n  return join(resolveUserDir(), USER_PROFILE_FILENAME);\n}\n\n/** Global human/user long-term memory Markdown (`~/.xopc/user/MEMORY.md`). */\nexport function resolveUserMemoryPath(): string {\n  return join(resolveUserDir(), USER_MEMORY_FILENAME);\n}\n\n/**\n * Resolve OAuth token file path for a provider\n */\nexport function resolveOAuthPath(provider: string): string {\n  return join(resolveCredentialsDir(), 'oauth', `${provider}.json`);\n}\n\n/**\n * Internal agent state dir: `stateDir/agents/<id>/agent/`\n * (credentials, inbox IPC, pid, agent.json — not the Markdown workspace).\n */\nexport function resolveAgentDir(config: Config, agentId: string): string {\n  return resolveAgentDirScoped(config, agentId);\n}\n\n/**\n * Per-agent home: `stateDir/agents/<id>/` (sessions + `agent/`).\n */\nexport function resolveAgentHomeDir(config: Config, agentId: string): string {\n  return resolveAgentHomeScoped(config, agentId);\n}\n\n/** Agent profile Markdown root: `stateDir/agents/<id>/profile/`. */\nexport function resolveAgentProfileDir(config: Config, agentId: string): string {\n  return resolveAgentProfileDirScoped(config, agentId);\n}\n\n/** Single file under {@link resolveAgentProfileDir} (basename only). */\nexport function resolveAgentProfileMarkdownPath(config: Config, agentId: string, filename: string): string {\n  return resolveAgentProfileMarkdownPathScoped(config, agentId, filename);\n}\n\n/**\n * Resolve a profile system Markdown path (SOUL.md, …) under the agent `profile/` directory.\n */\nexport function resolveWorkspaceFile(config: Config, filename: string, agentId: string): string {\n  return join(resolveAgentProfileDirScoped(config, agentId), filename);\n}\n\n/**\n * OpenClaw-aligned: per-agent auth-profiles.json directly under agent dir (no credentials subdirectory).\n */\nexport function resolveAgentAuthProfilesPath(config: Config, agentId: string): string {\n  return join(resolveAgentDir(config, agentId), FILENAMES.CREDENTIALS_PROFILES);\n}\n\n/**\n * Resolve the inbox directory for an agent\n */\nexport function resolveInboxDir(config: Config, agentId: string): string {\n  return join(resolveAgentDir(config, agentId), 'inbox');\n}\n\n/**\n * Resolve the pending inbox directory\n */\nexport function resolveInboxPendingDir(config: Config, agentId: string): string {\n  return join(resolveInboxDir(config, agentId), 'pending');\n}\n\n/**\n * Resolve the processed inbox directory\n */\nexport function resolveInboxProcessedDir(config: Config, agentId: string): string {\n  return join(resolveInboxDir(config, agentId), 'processed');\n}\n\n/**\n * Resolve a specific inbox message path\n */\nexport function resolveInboxMessagePath(\n  config: Config,\n  messageId: string,\n  pending: boolean,\n  agentId: string,\n): string {\n  const dir = pending ? resolveInboxPendingDir(config, agentId) : resolveInboxProcessedDir(config, agentId);\n  return join(dir, `${messageId}.json`);\n}\n\n/**\n * Resolve the pid file path\n */\nexport function resolvePidPath(config: Config, agentId: string): string {\n  return join(resolveAgentDir(config, agentId), FILENAMES.PID);\n}\n\n/**\n * Resolve the status.json path\n */\nexport function resolveStatusPath(config: Config, agentId: string): string {\n  return join(resolveAgentDir(config, agentId), FILENAMES.STATUS);\n}\n\n/**\n * Resolve the Unix socket path\n */\nexport function resolveSocketPath(config: Config, agentId: string): string {\n  return join(resolveAgentDir(config, agentId), FILENAMES.SOCKET);\n}\n\n/**\n * Resolve the extensions directory (global)\n */\nexport function resolveExtensionsDir(): string {\n  return join(resolveStateDir(), 'extensions');\n}\n\n/**\n * Resolve the extensions lockfile path\n */\nexport function resolveExtensionsLockPath(): string {\n  return join(resolveExtensionsDir(), FILENAMES.EXTENSIONS_LOCK);\n}\n\n/**\n * Per-agent extensions directory (`…/agents/<id>/agent/extensions/`) — used for discovery of\n * legacy or manually placed copies. CLI, web store, and `extensions dev` symlink installs use\n * {@link resolveExtensionsDir} (`~/.xopc/extensions`) only.\n */\nexport function resolveWorkspaceExtensionsDir(config: Config, agentId: string): string {\n  return join(resolveAgentDir(config, agentId), 'extensions');\n}\n\n/**\n * Resolve the skills directory (global)\n */\nexport function resolveSkillsDir(): string {\n  return join(resolveStateDir(), 'skills');\n}\n\n/**\n * Resolve a specific skill path\n */\nexport function resolveSkillPath(skillId: string): string {\n  return join(resolveSkillsDir(), skillId, 'SKILL.md');\n}\n\n/**\n * Skills hub lock file (~/.xopc/skills-lock.json): install source + content hash per managed skill id.\n */\nexport function resolveSkillsLockPath(): string {\n  return join(resolveStateDir(), FILENAMES.SKILLS_LOCK);\n}\n\n/**\n * Resolve the logs directory\n */\nexport function resolveLogsDir(): string {\n  return process.env[ENV_VARS.LOG_DIR] ?? join(resolveStateDir(), 'logs');\n}\n\n/**\n * Resolve a specific log file path\n */\nexport function resolveLogPath(date: string): string {\n  return join(resolveLogsDir(), `xopc-${date}.log`);\n}\n\n/**\n * Resolve the bin directory\n */\nexport function resolveBinDir(): string {\n  return join(resolveStateDir(), 'bin');\n}\n\n/**\n * Resolve the xopc CLI path\n */\nexport function resolveXopcBinPath(): string {\n  return join(resolveBinDir(), 'xopc');\n}\n\n/**\n * Resolve the tools directory\n */\nexport function resolveToolsDir(): string {\n  return join(resolveStateDir(), 'tools');\n}\n\n/**\n * Resolve the Node.js tools directory\n */\nexport function resolveNodeToolsDir(): string {\n  return join(resolveToolsDir(), 'node');\n}\n\n/**\n * Resolve the current Node.js bin directory\n */\nexport function resolveNodeBinDir(): string {\n  return join(resolveNodeToolsDir(), 'current', 'bin');\n}\n\n/**\n * Resolve the node binary path\n */\nexport function resolveNodeBinPath(): string {\n  return join(resolveNodeBinDir(), 'node');\n}\n\n/**\n * Resolve the npm binary path\n */\nexport function resolveNpmBinPath(): string {\n  return join(resolveNodeBinDir(), 'npm');\n}\n\n/**\n * Resolve the models.json path\n */\nexport function resolveModelsJsonPath(): string {\n  return join(resolveStateDir(), FILENAMES.MODELS_JSON);\n}\n\n/**\n * OpenClaw-aligned: workspace setup state directory (`<workspace>/.xopc/`).\n */\nexport function resolveWorkspaceStateDir(config: Config, agentId: string): string {\n  return join(resolveAgentWorkspaceDir(config, agentId), '.xopc');\n}\n\n/**\n * OpenClaw-aligned: workspace setup state file (`<workspace>/.xopc/workspace.json`).\n */\nexport function resolveWorkspaceStatePath(config: Config, agentId: string): string {\n  return join(resolveWorkspaceStateDir(config, agentId), FILENAMES.WORKSPACE_STATE);\n}\n\n/**\n * Resolve the skills cache file path (internal agent state, under agent dir).\n */\nexport function resolveSkillsCachePath(config: Config, agentId: string): string {\n  return join(resolveAgentDir(config, agentId), 'state', FILENAMES.SKILLS_CACHE);\n}\n\n/**\n * Resolve the bundled extensions directory (shipped with xopc).\n *\n * Layout-dependent candidates (first existing wins):\n * - `XOPC_BUNDLED_EXTENSIONS_ROOT` (Electron packaged gateway override)\n * - `dist/src/config` → `dist/extensions` (npm / gateway)\n * - `src/config` → `dist/extensions` when built, else `extensions/` (dev, tsx)\n * - `out/server` → `dist/electron/extensions` (Electron extension bundles)\n */\nexport function resolveBundledExtensionsDir(): string | null {\n  const envDir = process.env[ENV_BUNDLED_EXTENSIONS_ROOT];\n  if (envDir && existsSync(envDir)) {\n    return envDir;\n  }\n\n  try {\n    const currentFile = fileURLToPath(import.meta.url);\n    const srcDir = dirname(currentFile);\n    const isElectronServerBundle = srcDir.endsWith(`${sep}out${sep}server`);\n    const candidates = isElectronServerBundle\n      ? [join(srcDir, '..', '..', 'dist', 'electron', 'extensions')]\n      : [\n          // In source-tree dev, prefer compiled bundled extensions when present: manifests point\n          // at built JavaScript entries (for example src/index.js), while source folders contain TS.\n          join(srcDir, '..', '..', 'dist', 'extensions'),\n          join(srcDir, '..', '..', 'extensions'),\n          join(srcDir, '..', '..', '..', 'dist', 'extensions'),\n          join(srcDir, '..', '..', '..', 'extensions'),\n        ];\n    for (const dir of candidates) {\n      if (existsSync(dir)) {\n        return dir;\n      }\n    }\n    return null;\n  } catch {\n    return null;\n  }\n}\n\n/**\n * Resolve the bundled skills directory (shipped with xopc)\n */\nexport function resolveBundledSkillsDir(): string | null {\n  const envDir = process.env[ENV_BUNDLED_SKILLS_ROOT];\n  if (envDir && existsSync(envDir)) {\n    return envDir;\n  }\n\n  try {\n    const currentFile = fileURLToPath(import.meta.url);\n    const srcDir = dirname(currentFile);\n    \n    // Production (npm): dist/config/paths.js -> ../../ -> package root -> skills\n    const packageRoot = join(srcDir, '..', '..');\n    const skillsDir = join(packageRoot, 'skills');\n    if (existsSync(skillsDir)) {\n      return skillsDir;\n    }\n    \n    // Development (source): src/config/paths.js -> ../../../ -> package root -> skills\n    const devPackageRoot = join(srcDir, '..', '..', '..');\n    const devSkillsDir = join(devPackageRoot, 'skills');\n    if (existsSync(devSkillsDir)) {\n      return devSkillsDir;\n    }\n    \n    return null;\n  } catch {\n    return null;\n  }\n}\n\n/**\n * Path to extension-sdk entry (for jiti / extension loader aliases).\n */\nexport function resolveExtensionSdkPath(): string {\n  try {\n    const currentFile = fileURLToPath(import.meta.url);\n    const srcDir = dirname(currentFile);\n    const adjacent = join(srcDir, '..', 'extensions', 'sdk', 'index.ts');\n    if (existsSync(adjacent)) {\n      return adjacent;\n    }\n    const fromPackageRoot = join(srcDir, '..', '..', 'src', 'extensions', 'sdk', 'index.ts');\n    if (existsSync(fromPackageRoot)) {\n      return fromPackageRoot;\n    }\n    const cwd = join(process.cwd(), 'src', 'extensions', 'sdk', 'index.ts');\n    if (existsSync(cwd)) {\n      return cwd;\n    }\n    return adjacent;\n  } catch {\n    return join(process.cwd(), 'src', 'extensions', 'sdk', 'index.ts');\n  }\n}\n\n// Re-export existsSync for bundled paths\nexport { existsSync };\n"],"mappings":";;;;;;;;;;;AAkEA,SAAgB,oBAA4B;AAC1C,QAAO,QAAQ,IAAI,SAAS,gBAAgB,KAAK,iBAAiB,EAAE,UAAU,OAAO;;;;;AAMvF,SAAgB,wBAAgC;AAC9C,QAAO,QAAQ,IAAI,SAAS,oBAAoB,KAAK,iBAAiB,EAAE,cAAc;;;;;AAMxF,SAAgB,0BAAkC;AAChD,QAAO,KAAK,uBAAuB,EAAE,UAAU,qBAAqB;;;AAItE,SAAgB,iBAAyB;AACvC,QAAO,KAAK,iBAAiB,EAAE,OAAO;;;AAIxC,SAAgB,yBAAiC;AAC/C,QAAO,KAAK,gBAAgB,EAAE,sBAAsB;;;AAItD,SAAgB,wBAAgC;AAC9C,QAAO,KAAK,gBAAgB,EAAE,qBAAqB;;;;;AAMrD,SAAgB,iBAAiB,UAA0B;AACzD,QAAO,KAAK,uBAAuB,EAAE,SAAS,GAAG,SAAS,OAAO;;;;;;AAOnE,SAAgB,gBAAgB,QAAgB,SAAyB;AACvE,QAAOA,kBAAsB,QAAQ,QAAQ;;;;;AAM/C,SAAgB,oBAAoB,QAAgB,SAAyB;AAC3E,QAAOC,sBAAuB,QAAQ,QAAQ;;;AAIhD,SAAgB,uBAAuB,QAAgB,SAAyB;AAC9E,QAAOC,yBAA6B,QAAQ,QAAQ;;;AAItD,SAAgB,gCAAgC,QAAgB,SAAiB,UAA0B;AACzG,QAAOC,kCAAsC,QAAQ,SAAS,SAAS;;;;;AAMzE,SAAgB,qBAAqB,QAAgB,UAAkB,SAAyB;AAC9F,QAAO,KAAKD,yBAA6B,QAAQ,QAAQ,EAAE,SAAS;;;;;AAMtE,SAAgB,6BAA6B,QAAgB,SAAyB;AACpF,QAAO,KAAK,gBAAgB,QAAQ,QAAQ,EAAE,UAAU,qBAAqB;;;;;AAM/E,SAAgB,gBAAgB,QAAgB,SAAyB;AACvE,QAAO,KAAK,gBAAgB,QAAQ,QAAQ,EAAE,QAAQ;;;;;AAMxD,SAAgB,uBAAuB,QAAgB,SAAyB;AAC9E,QAAO,KAAK,gBAAgB,QAAQ,QAAQ,EAAE,UAAU;;;;;AAM1D,SAAgB,yBAAyB,QAAgB,SAAyB;AAChF,QAAO,KAAK,gBAAgB,QAAQ,QAAQ,EAAE,YAAY;;;;;AAM5D,SAAgB,wBACd,QACA,WACA,SACA,SACQ;AAER,QAAO,KADK,UAAU,uBAAuB,QAAQ,QAAQ,GAAG,yBAAyB,QAAQ,QAAQ,EACxF,GAAG,UAAU,OAAO;;;;;AAMvC,SAAgB,eAAe,QAAgB,SAAyB;AACtE,QAAO,KAAK,gBAAgB,QAAQ,QAAQ,EAAE,UAAU,IAAI;;;;;AAM9D,SAAgB,kBAAkB,QAAgB,SAAyB;AACzE,QAAO,KAAK,gBAAgB,QAAQ,QAAQ,EAAE,UAAU,OAAO;;;;;AAMjE,SAAgB,kBAAkB,QAAgB,SAAyB;AACzE,QAAO,KAAK,gBAAgB,QAAQ,QAAQ,EAAE,UAAU,OAAO;;;;;AAMjE,SAAgB,uBAA+B;AAC7C,QAAO,KAAK,iBAAiB,EAAE,aAAa;;;;;AAM9C,SAAgB,4BAAoC;AAClD,QAAO,KAAK,sBAAsB,EAAE,UAAU,gBAAgB;;;;;;;AAQhE,SAAgB,8BAA8B,QAAgB,SAAyB;AACrF,QAAO,KAAK,gBAAgB,QAAQ,QAAQ,EAAE,aAAa;;;;;AAM7D,SAAgB,mBAA2B;AACzC,QAAO,KAAK,iBAAiB,EAAE,SAAS;;;;;AAM1C,SAAgB,iBAAiB,SAAyB;AACxD,QAAO,KAAK,kBAAkB,EAAE,SAAS,WAAW;;;;;AAMtD,SAAgB,wBAAgC;AAC9C,QAAO,KAAK,iBAAiB,EAAE,UAAU,YAAY;;;;;AAMvD,SAAgB,iBAAyB;AACvC,QAAO,QAAQ,IAAI,SAAS,YAAY,KAAK,iBAAiB,EAAE,OAAO;;;;;AAMzE,SAAgB,eAAe,MAAsB;AACnD,QAAO,KAAK,gBAAgB,EAAE,QAAQ,KAAK,MAAM;;;;;AAMnD,SAAgB,gBAAwB;AACtC,QAAO,KAAK,iBAAiB,EAAE,MAAM;;;;;AAMvC,SAAgB,qBAA6B;AAC3C,QAAO,KAAK,eAAe,EAAE,OAAO;;;;;AAMtC,SAAgB,kBAA0B;AACxC,QAAO,KAAK,iBAAiB,EAAE,QAAQ;;;;;AAMzC,SAAgB,sBAA8B;AAC5C,QAAO,KAAK,iBAAiB,EAAE,OAAO;;;;;AAMxC,SAAgB,oBAA4B;AAC1C,QAAO,KAAK,qBAAqB,EAAE,WAAW,MAAM;;;;;AAMtD,SAAgB,qBAA6B;AAC3C,QAAO,KAAK,mBAAmB,EAAE,OAAO;;;;;AAM1C,SAAgB,oBAA4B;AAC1C,QAAO,KAAK,mBAAmB,EAAE,MAAM;;;;;AAMzC,SAAgB,wBAAgC;AAC9C,QAAO,KAAK,iBAAiB,EAAE,UAAU,YAAY;;;;;AAMvD,SAAgB,yBAAyB,QAAgB,SAAyB;AAChF,QAAO,KAAK,yBAAyB,QAAQ,QAAQ,EAAE,QAAQ;;;;;AAMjE,SAAgB,0BAA0B,QAAgB,SAAyB;AACjF,QAAO,KAAK,yBAAyB,QAAQ,QAAQ,EAAE,UAAU,gBAAgB;;;;;AAMnF,SAAgB,uBAAuB,QAAgB,SAAyB;AAC9E,QAAO,KAAK,gBAAgB,QAAQ,QAAQ,EAAE,SAAS,UAAU,aAAa;;;;;;;;;;;AAYhF,SAAgB,8BAA6C;CAC3D,MAAM,SAAS,QAAQ,IAAI;AAC3B,KAAI,UAAU,WAAW,OAAO,CAC9B,QAAO;AAGT,KAAI;EAEF,MAAM,SAAS,QADK,cAAc,OAAO,KAAK,IACZ,CAAC;EAEnC,MAAM,aADyB,OAAO,SAAS,GAAG,IAAI,KAAK,IAAI,QACtB,GACrC,CAAC,KAAK,QAAQ,MAAM,MAAM,QAAQ,YAAY,aAAa,CAAC,GAC5D;GAGE,KAAK,QAAQ,MAAM,MAAM,QAAQ,aAAa;GAC9C,KAAK,QAAQ,MAAM,MAAM,aAAa;GACtC,KAAK,QAAQ,MAAM,MAAM,MAAM,QAAQ,aAAa;GACpD,KAAK,QAAQ,MAAM,MAAM,MAAM,aAAa;GAC7C;AACL,OAAK,MAAM,OAAO,WAChB,KAAI,WAAW,IAAI,CACjB,QAAO;AAGX,SAAO;SACD;AACN,SAAO;;;;;;AAOX,SAAgB,0BAAyC;CACvD,MAAM,SAAS,QAAQ,IAAI;AAC3B,KAAI,UAAU,WAAW,OAAO,CAC9B,QAAO;AAGT,KAAI;EAEF,MAAM,SAAS,QADK,cAAc,OAAO,KAAK,IACZ,CAAC;EAInC,MAAM,YAAY,KADE,KAAK,QAAQ,MAAM,KACL,EAAE,SAAS;AAC7C,MAAI,WAAW,UAAU,CACvB,QAAO;EAKT,MAAM,eAAe,KADE,KAAK,QAAQ,MAAM,MAAM,KACR,EAAE,SAAS;AACnD,MAAI,WAAW,aAAa,CAC1B,QAAO;AAGT,SAAO;SACD;AACN,SAAO;;;;;;AAOX,SAAgB,0BAAkC;AAChD,KAAI;EAEF,MAAM,SAAS,QADK,cAAc,OAAO,KAAK,IACZ,CAAC;EACnC,MAAM,WAAW,KAAK,QAAQ,MAAM,cAAc,OAAO,WAAW;AACpE,MAAI,WAAW,SAAS,CACtB,QAAO;EAET,MAAM,kBAAkB,KAAK,QAAQ,MAAM,MAAM,OAAO,cAAc,OAAO,WAAW;AACxF,MAAI,WAAW,gBAAgB,CAC7B,QAAO;EAET,MAAM,MAAM,KAAK,QAAQ,KAAK,EAAE,OAAO,cAAc,OAAO,WAAW;AACvE,MAAI,WAAW,IAAI,CACjB,QAAO;AAET,SAAO;SACD;AACN,SAAO,KAAK,QAAQ,KAAK,EAAE,OAAO,cAAc,OAAO,WAAW;;;;;mBAjarC;mBAC4B;0BAGa;AAUpE,+BAA8B;AAC9B,2BAA0B;AAEnB,aAAY;EACvB,QAAQ;EACR,aAAa;;EAEb,SAAS;EACT,iBAAiB;EACjB,sBAAsB;EACtB,iBAAiB;EACjB,cAAc;;EAEd,aAAa;EACb,KAAK;EACL,QAAQ;EACR,QAAQ;EACT;AAKY,mBAAkB;EAC7B,MAAM;EACN,UAAU;EACV,QAAQ;EACR,OAAO;EACP,WAAW;EACZ;AAEY,yBAAwB;AACxB,wBAAuB"}

package/dist/src/config/profile.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"profile.js","names":[],"sources":["../../../src/config/profile.ts"],"sourcesContent":["import { join } from 'path';\nimport { mkdir, readdir, stat, rm } from 'fs/promises';\nimport { existsSync } from 'fs';\nimport { createLogger } from '../utils/logger.js';\nimport { resolveHomeDir, ENV_VARS } from './paths-state.js';\n\nconst log = createLogger('Profile');\n\n// ============================================\n// Types\n// ============================================\n\nexport interface ProfileInfo {\n  /** Profile name */\n  name: string;\n  /** Full path to state directory */\n  stateDir: string;\n  /** Whether this is the currently active profile */\n  isActive: boolean;\n  /** Number of agents in this profile */\n  agentCount: number;\n  /** Profile creation time */\n  createdAt?: Date;\n}\n\n// ============================================\n// Path Resolution\n// ============================================\n\n/**\n * Resolve state directory for a specific profile\n */\nexport function resolveProfileStateDir(profile: string): string {\n  const home = resolveHomeDir();\n  return profile === 'default'\n    ? join(home, '.xopc')\n    : join(home, `.xopc-${profile}`);\n}\n\n/**\n * Get the name of a profile from its state directory path\n */\nexport function getProfileNameFromDir(stateDir: string): string {\n  const home = resolveHomeDir();\n  const relative = stateDir.replace(home, '').replace(/^\\//, '');\n\n  if (relative === '.xopc') {\n    return 'default';\n  }\n\n  const match = relative.match(/^\\.xopc-(.+)$/);\n  return match ? match[1] : 'default';\n}\n\n/**\n * Get the currently active profile name from environment\n */\nexport function getCurrentProfile(): string {\n  // Check XOPC_PROFILE first\n  if (process.env[ENV_VARS.PROFILE]) {\n    return process.env[ENV_VARS.PROFILE]!;\n  }\n\n  // Infer from XOPC_STATE_DIR\n  if (process.env[ENV_VARS.STATE_DIR]) {\n    return getProfileNameFromDir(process.env[ENV_VARS.STATE_DIR]!);\n  }\n\n  return 'default';\n}\n\n// ============================================\n// Profile Management\n// ============================================\n\nexport class ProfileManager {\n  private readonly homeDir: string;\n\n  constructor() {\n    this.homeDir = resolveHomeDir();\n  }\n\n  /**\n   * List all available profiles\n   */\n  async listProfiles(): Promise<ProfileInfo[]> {\n    const profiles: ProfileInfo[] = [];\n    const currentProfile = getCurrentProfile();\n\n    // Check for default profile\n    const defaultDir = join(this.homeDir, '.xopc');\n    if (existsSync(defaultDir)) {\n      profiles.push(await this.getProfileInfo('default', currentProfile === 'default'));\n    }\n\n    // Check for named profiles\n    try {\n      const entries = await readdir(this.homeDir, { withFileTypes: true });\n      const profileDirs = entries.filter(\n        (entry) =>\n          entry.isDirectory() &&\n          entry.name.startsWith('.xopc-') &&\n          entry.name !== '.xopc'\n      );\n\n      for (const dir of profileDirs) {\n        const name = dir.name.replace('.xopc-', '');\n        profiles.push(await this.getProfileInfo(name, currentProfile === name));\n      }\n    } catch (error) {\n      log.warn({ error }, 'Failed to list profile directories');\n    }\n\n    return profiles.sort((a, b) => {\n      // Default profile first, then alphabetical\n      if (a.name === 'default') return -1;\n      if (b.name === 'default') return 1;\n      return a.name.localeCompare(b.name);\n    });\n  }\n\n  /**\n   * Create a new profile\n   */\n  async createProfile(name: string): Promise<ProfileInfo> {\n    if (name === 'default') {\n      throw new Error('Cannot create a profile named \"default\", use \"init\" instead');\n    }\n\n    if (!/^[a-zA-Z0-9_-]+$/.test(name)) {\n      throw new Error(\n        'Profile name must contain only letters, numbers, hyphens, and underscores'\n      );\n    }\n\n    const stateDir = resolveProfileStateDir(name);\n\n    if (existsSync(stateDir)) {\n      throw new Error(`Profile \"${name}\" already exists at ${stateDir}`);\n    }\n\n    // Create basic directory structure\n    await mkdir(stateDir, { recursive: true });\n    await mkdir(join(stateDir, 'agents'), { recursive: true });\n    await mkdir(join(stateDir, 'credentials'), { recursive: true });\n    await mkdir(join(stateDir, 'extensions'), { recursive: true });\n    await mkdir(join(stateDir, 'skills'), { recursive: true });\n    await mkdir(join(stateDir, 'logs'), { recursive: true });\n    await mkdir(join(stateDir, 'bin'), { recursive: true });\n    await mkdir(join(stateDir, 'tools'), { recursive: true });\n\n    log.info({ name, stateDir }, 'Created new profile');\n\n    return this.getProfileInfo(name, false);\n  }\n\n  /**\n   * Delete a profile (with safety checks)\n   */\n  async deleteProfile(name: string, options: { force?: boolean } = {}): Promise<void> {\n    if (name === 'default') {\n      throw new Error('Cannot delete the default profile');\n    }\n\n    const stateDir = resolveProfileStateDir(name);\n\n    if (!existsSync(stateDir)) {\n      throw new Error(`Profile \"${name}\" does not exist`);\n    }\n\n    // Safety check: don't delete if it's the current profile\n    const currentProfile = getCurrentProfile();\n    if (currentProfile === name && !options.force) {\n      throw new Error(\n        `Cannot delete profile \"${name}\" because it is currently active. ` +\n          `Switch to another profile first or use --force.`\n      );\n    }\n\n    // Delete the directory\n    await rm(stateDir, { recursive: true, force: true });\n\n    log.info({ name }, 'Deleted profile');\n  }\n\n  /**\n   * Get shell command to switch to a profile\n   */\n  getSwitchCommand(name: string): string {\n    if (name === 'default') {\n      return `unset ${ENV_VARS.PROFILE}`;\n    }\n    return `export ${ENV_VARS.PROFILE}=${name}`;\n  }\n\n  /**\n   * Get the profile state directory\n   */\n  getProfileStateDir(name: string): string {\n    return resolveProfileStateDir(name);\n  }\n\n  // ============================================\n  // Private Methods\n  // ============================================\n\n  private async getProfileInfo(name: string, isActive: boolean): Promise<ProfileInfo> {\n    const stateDir = resolveProfileStateDir(name);\n\n    let agentCount = 0;\n    let createdAt: Date | undefined;\n\n    try {\n      const stats = await stat(stateDir);\n      createdAt = stats.birthtime;\n\n      // Count agents\n      const agentsDir = join(stateDir, 'agents');\n      if (existsSync(agentsDir)) {\n        const entries = await readdir(agentsDir, { withFileTypes: true });\n        agentCount = entries.filter((e) => e.isDirectory()).length;\n      }\n    } catch (error) {\n      log.warn({ name, error }, 'Failed to get profile stats');\n    }\n\n    return {\n      name,\n      stateDir,\n      isActive,\n      agentCount,\n      createdAt,\n    };\n  }\n}\n\n// ============================================\n// Convenience Functions\n// ============================================\n\nlet defaultManager: ProfileManager | null = null;\n\nexport function getProfileManager(): ProfileManager {\n  if (!defaultManager) {\n    defaultManager = new ProfileManager();\n  }\n  return defaultManager;\n}\n\nexport async function listProfiles(): Promise<ProfileInfo[]> {\n  const manager = getProfileManager();\n  return manager.listProfiles();\n}\n\nexport async function createProfile(name: string): Promise<ProfileInfo> {\n  const manager = getProfileManager();\n  return manager.createProfile(name);\n}\n\nexport async function deleteProfile(name: string, options?: { force?: boolean }): Promise<void> {\n  const manager = getProfileManager();\n  return manager.deleteProfile(name, options);\n}\n\nexport function getSwitchCommand(name: string): string {\n  const manager = getProfileManager();\n  return manager.getSwitchCommand(name);\n}\n"],"mappings":";;;;;;;aAGkD;kBACU;AAE5D,MAAM,MAAM,aAAa,UAAU;;;;AA0BnC,SAAgB,uBAAuB,SAAyB;CAC9D,MAAM,OAAO,gBAAgB;AAC7B,QAAO,YAAY,YACf,KAAK,MAAM,QAAQ,GACnB,KAAK,MAAM,SAAS,UAAU;;;;;AAMpC,SAAgB,sBAAsB,UAA0B;CAC9D,MAAM,OAAO,gBAAgB;CAC7B,MAAM,WAAW,SAAS,QAAQ,MAAM,GAAG,CAAC,QAAQ,OAAO,GAAG;AAE9D,KAAI,aAAa,QACf,QAAO;CAGT,MAAM,QAAQ,SAAS,MAAM,gBAAgB;AAC7C,QAAO,QAAQ,MAAM,KAAK;;;;;AAM5B,SAAgB,oBAA4B;AAE1C,KAAI,QAAQ,IAAI,SAAS,SACvB,QAAO,QAAQ,IAAI,SAAS;AAI9B,KAAI,QAAQ,IAAI,SAAS,WACvB,QAAO,sBAAsB,QAAQ,IAAI,SAAS,WAAY;AAGhE,QAAO;;AAOT,IAAa,iBAAb,MAA4B;CAC1B;CAEA,cAAc;AACZ,OAAK,UAAU,gBAAgB;;;;;CAMjC,MAAM,eAAuC;EAC3C,MAAM,WAA0B,EAAE;EAClC,MAAM,iBAAiB,mBAAmB;AAI1C,MAAI,WADe,KAAK,KAAK,SAAS,QACb,CAAC,CACxB,UAAS,KAAK,MAAM,KAAK,eAAe,WAAW,mBAAmB,UAAU,CAAC;AAInF,MAAI;GAEF,MAAM,eAAc,MADE,QAAQ,KAAK,SAAS,EAAE,eAAe,MAAM,CAAC,EACxC,QACzB,UACC,MAAM,aAAa,IACnB,MAAM,KAAK,WAAW,SAAS,IAC/B,MAAM,SAAS,QAClB;AAED,QAAK,MAAM,OAAO,aAAa;IAC7B,MAAM,OAAO,IAAI,KAAK,QAAQ,UAAU,GAAG;AAC3C,aAAS,KAAK,MAAM,KAAK,eAAe,MAAM,mBAAmB,KAAK,CAAC;;WAElE,OAAO;AACd,OAAI,KAAK,EAAE,OAAO,EAAE,qCAAqC;;AAG3D,SAAO,SAAS,MAAM,GAAG,MAAM;AAE7B,OAAI,EAAE,SAAS,UAAW,QAAO;AACjC,OAAI,EAAE,SAAS,UAAW,QAAO;AACjC,UAAO,EAAE,KAAK,cAAc,EAAE,KAAK;IACnC;;;;;CAMJ,MAAM,cAAc,MAAoC;AACtD,MAAI,SAAS,UACX,OAAM,IAAI,MAAM,kEAA8D;AAGhF,MAAI,CAAC,mBAAmB,KAAK,KAAK,CAChC,OAAM,IAAI,MACR,4EACD;EAGH,MAAM,WAAW,uBAAuB,KAAK;AAE7C,MAAI,WAAW,SAAS,CACtB,OAAM,IAAI,MAAM,YAAY,KAAK,sBAAsB,WAAW;AAIpE,QAAM,MAAM,UAAU,EAAE,WAAW,MAAM,CAAC;AAC1C,QAAM,MAAM,KAAK,UAAU,SAAS,EAAE,EAAE,WAAW,MAAM,CAAC;AAC1D,QAAM,MAAM,KAAK,UAAU,cAAc,EAAE,EAAE,WAAW,MAAM,CAAC;AAC/D,QAAM,MAAM,KAAK,UAAU,aAAa,EAAE,EAAE,WAAW,MAAM,CAAC;AAC9D,QAAM,MAAM,KAAK,UAAU,SAAS,EAAE,EAAE,WAAW,MAAM,CAAC;AAC1D,QAAM,MAAM,KAAK,UAAU,OAAO,EAAE,EAAE,WAAW,MAAM,CAAC;AACxD,QAAM,MAAM,KAAK,UAAU,MAAM,EAAE,EAAE,WAAW,MAAM,CAAC;AACvD,QAAM,MAAM,KAAK,UAAU,QAAQ,EAAE,EAAE,WAAW,MAAM,CAAC;AAEzD,MAAI,KAAK;GAAE;GAAM;GAAU,EAAE,sBAAsB;AAEnD,SAAO,KAAK,eAAe,MAAM,MAAM;;;;;CAMzC,MAAM,cAAc,MAAc,UAA+B,EAAE,EAAiB;AAClF,MAAI,SAAS,UACX,OAAM,IAAI,MAAM,oCAAoC;EAGtD,MAAM,WAAW,uBAAuB,KAAK;AAE7C,MAAI,CAAC,WAAW,SAAS,CACvB,OAAM,IAAI,MAAM,YAAY,KAAK,kBAAkB;AAKrD,MADuB,mBACL,KAAK,QAAQ,CAAC,QAAQ,MACtC,OAAM,IAAI,MACR,0BAA0B,KAAK,mFAEhC;AAIH,QAAM,GAAG,UAAU;GAAE,WAAW;GAAM,OAAO;GAAM,CAAC;AAEpD,MAAI,KAAK,EAAE,MAAM,EAAE,kBAAkB;;;;;CAMvC,iBAAiB,MAAsB;AACrC,MAAI,SAAS,UACX,QAAO,SAAS,SAAS;AAE3B,SAAO,UAAU,SAAS,QAAQ,GAAG;;;;;CAMvC,mBAAmB,MAAsB;AACvC,SAAO,uBAAuB,KAAK;;CAOrC,MAAc,eAAe,MAAc,UAAyC;EAClF,MAAM,WAAW,uBAAuB,KAAK;EAE7C,IAAI,aAAa;EACjB,IAAI;AAEJ,MAAI;AAEF,gBAAY,MADQ,KAAK,SAAS,EAChB;GAGlB,MAAM,YAAY,KAAK,UAAU,SAAS;AAC1C,OAAI,WAAW,UAAU,CAEvB,eAAa,MADS,QAAQ,WAAW,EAAE,eAAe,MAAM,CAAC,EAC5C,QAAQ,MAAM,EAAE,aAAa,CAAC,CAAC;WAE/C,OAAO;AACd,OAAI,KAAK;IAAE;IAAM;IAAO,EAAE,8BAA8B;;AAG1D,SAAO;GACL;GACA;GACA;GACA;GACA;GACD;;;AAQL,IAAI,iBAAwC;AAE5C,SAAgB,oBAAoC;AAClD,KAAI,CAAC,eACH,kBAAiB,IAAI,gBAAgB;AAEvC,QAAO;;AAGT,eAAsB,eAAuC;AAE3D,QADgB,mBACF,CAAC,cAAc;;AAG/B,eAAsB,cAAc,MAAoC;AAEtE,QADgB,mBACF,CAAC,cAAc,KAAK;;AAGpC,eAAsB,cAAc,MAAc,SAA8C;AAE9F,QADgB,mBACF,CAAC,cAAc,MAAM,QAAQ;;AAG7C,SAAgB,iBAAiB,MAAsB;AAErD,QADgB,mBACF,CAAC,iBAAiB,KAAK"}

package/dist/src/config/public-url.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"public-url.js","names":[],"sources":["../../../src/config/public-url.ts"],"sourcesContent":["/**\n * Validation + normalization helpers for `gateway.publicUrl`.\n *\n * The publicUrl is a user-deployed reverse-proxy origin (e.g.\n * `https://gateway.example.com`). We accept it as both a config field and as\n * a one-off candidate (auto-detected from `window.location.origin`), so the\n * validator must run in identical shape on both surfaces.\n */\n\nimport net from 'node:net';\n\nexport type PublicUrlIssueCode =\n  | 'invalid_url'\n  | 'invalid_scheme'\n  | 'has_userinfo'\n  | 'has_path'\n  | 'has_query_or_fragment'\n  | 'requires_https';\n\nexport type PublicUrlValidation =\n  | { ok: true; url: string; protocol: 'http:' | 'https:'; hostname: string }\n  | { ok: false; code: PublicUrlIssueCode; message: string };\n\n/** Lowercase RFC1918 / loopback / link-local / `.local` host match. */\nexport function isPrivateOrLocalHostname(hostname: string): boolean {\n  const host = hostname.trim().toLowerCase();\n  if (!host) return false;\n  if (host === 'localhost' || host.endsWith('.localhost')) return true;\n  if (host.endsWith('.local')) return true;\n  // IPv6 loopback / link-local\n  if (host === '::1' || host === '[::1]') return true;\n  if (host.startsWith('fe80:') || host.startsWith('[fe80:')) return true;\n  if (host.startsWith('fc') || host.startsWith('fd')) {\n    // fc00::/7 ULA\n    if (net.isIPv6(host.replace(/^\\[|\\]$/g, ''))) return true;\n  }\n  // IPv4 private + loopback ranges\n  if (net.isIPv4(host)) {\n    const parts = host.split('.').map((p) => Number.parseInt(p, 10));\n    if (parts.length !== 4 || parts.some((n) => !Number.isFinite(n))) return false;\n    const [a, b] = parts;\n    if (a === 10) return true;\n    if (a === 127) return true;\n    if (a === 169 && b === 254) return true; // link-local\n    if (a === 172 && b >= 16 && b <= 31) return true;\n    if (a === 192 && b === 168) return true;\n    if (a === 100 && b >= 64 && b <= 127) return true; // CGNAT — common for tailnet / mesh\n  }\n  return false;\n}\n\n/**\n * Validate a candidate publicUrl. Strict by design — we reject anything that\n * looks ambiguous so the QR payload is always a clean origin.\n */\nexport function validatePublicUrl(raw: string): PublicUrlValidation {\n  const trimmed = (raw ?? '').trim();\n  if (!trimmed) {\n    return { ok: false, code: 'invalid_url', message: 'publicUrl is empty' };\n  }\n  let parsed: URL;\n  try {\n    parsed = new URL(trimmed);\n  } catch {\n    return { ok: false, code: 'invalid_url', message: 'publicUrl is not a valid URL' };\n  }\n  const protocol = parsed.protocol.toLowerCase();\n  if (protocol !== 'https:' && protocol !== 'http:') {\n    return { ok: false, code: 'invalid_scheme', message: 'publicUrl must use http(s)' };\n  }\n  if (parsed.username || parsed.password) {\n    return { ok: false, code: 'has_userinfo', message: 'publicUrl must not contain userinfo' };\n  }\n  // pathname may be \"/\" (trailing slash) but nothing else\n  const path = parsed.pathname;\n  if (path && path !== '/' && path !== '') {\n    return { ok: false, code: 'has_path', message: 'publicUrl must not contain a path' };\n  }\n  if (parsed.search || parsed.hash) {\n    return {\n      ok: false,\n      code: 'has_query_or_fragment',\n      message: 'publicUrl must not contain query or fragment',\n    };\n  }\n  const hostname = parsed.hostname.toLowerCase();\n  if (protocol === 'http:' && !isPrivateOrLocalHostname(hostname)) {\n    return {\n      ok: false,\n      code: 'requires_https',\n      message:\n        'publicUrl must use https for public hostnames (http is only allowed for RFC1918 / .local)',\n    };\n  }\n  // Normalize: drop trailing slash, lowercase host.\n  const normalized = `${protocol}//${parsed.host.toLowerCase()}`;\n  return {\n    ok: true,\n    url: normalized,\n    protocol: protocol as 'http:' | 'https:',\n    hostname,\n  };\n}\n\n/** Convenience: return the normalized origin or `null` when invalid. */\nexport function normalizePublicUrlOrNull(raw: string | null | undefined): string | null {\n  if (!raw) return null;\n  const result = validatePublicUrl(raw);\n  return result.ok ? result.url : null;\n}\n"],"mappings":";;;;;;;;;;;;AAwBA,SAAgB,yBAAyB,UAA2B;CAClE,MAAM,OAAO,SAAS,MAAM,CAAC,aAAa;AAC1C,KAAI,CAAC,KAAM,QAAO;AAClB,KAAI,SAAS,eAAe,KAAK,SAAS,aAAa,CAAE,QAAO;AAChE,KAAI,KAAK,SAAS,SAAS,CAAE,QAAO;AAEpC,KAAI,SAAS,SAAS,SAAS,QAAS,QAAO;AAC/C,KAAI,KAAK,WAAW,QAAQ,IAAI,KAAK,WAAW,SAAS,CAAE,QAAO;AAClE,KAAI,KAAK,WAAW,KAAK,IAAI,KAAK,WAAW,KAAK;MAE5C,IAAI,OAAO,KAAK,QAAQ,YAAY,GAAG,CAAC,CAAE,QAAO;;AAGvD,KAAI,IAAI,OAAO,KAAK,EAAE;EACpB,MAAM,QAAQ,KAAK,MAAM,IAAI,CAAC,KAAK,MAAM,OAAO,SAAS,GAAG,GAAG,CAAC;AAChE,MAAI,MAAM,WAAW,KAAK,MAAM,MAAM,MAAM,CAAC,OAAO,SAAS,EAAE,CAAC,CAAE,QAAO;EACzE,MAAM,CAAC,GAAG,KAAK;AACf,MAAI,MAAM,GAAI,QAAO;AACrB,MAAI,MAAM,IAAK,QAAO;AACtB,MAAI,MAAM,OAAO,MAAM,IAAK,QAAO;AACnC,MAAI,MAAM,OAAO,KAAK,MAAM,KAAK,GAAI,QAAO;AAC5C,MAAI,MAAM,OAAO,MAAM,IAAK,QAAO;AACnC,MAAI,MAAM,OAAO,KAAK,MAAM,KAAK,IAAK,QAAO;;AAE/C,QAAO;;;;;;AAOT,SAAgB,kBAAkB,KAAkC;CAClE,MAAM,WAAW,OAAO,IAAI,MAAM;AAClC,KAAI,CAAC,QACH,QAAO;EAAE,IAAI;EAAO,MAAM;EAAe,SAAS;EAAsB;CAE1E,IAAI;AACJ,KAAI;AACF,WAAS,IAAI,IAAI,QAAQ;SACnB;AACN,SAAO;GAAE,IAAI;GAAO,MAAM;GAAe,SAAS;GAAgC;;CAEpF,MAAM,WAAW,OAAO,SAAS,aAAa;AAC9C,KAAI,aAAa,YAAY,aAAa,QACxC,QAAO;EAAE,IAAI;EAAO,MAAM;EAAkB,SAAS;EAA8B;AAErF,KAAI,OAAO,YAAY,OAAO,SAC5B,QAAO;EAAE,IAAI;EAAO,MAAM;EAAgB,SAAS;EAAuC;CAG5F,MAAM,OAAO,OAAO;AACpB,KAAI,QAAQ,SAAS,OAAO,SAAS,GACnC,QAAO;EAAE,IAAI;EAAO,MAAM;EAAY,SAAS;EAAqC;AAEtF,KAAI,OAAO,UAAU,OAAO,KAC1B,QAAO;EACL,IAAI;EACJ,MAAM;EACN,SAAS;EACV;CAEH,MAAM,WAAW,OAAO,SAAS,aAAa;AAC9C,KAAI,aAAa,WAAW,CAAC,yBAAyB,SAAS,CAC7D,QAAO;EACL,IAAI;EACJ,MAAM;EACN,SACE;EACH;AAIH,QAAO;EACL,IAAI;EACJ,KAAK,GAHe,SAAS,IAAI,OAAO,KAAK,aAAa;EAIhD;EACV;EACD;;;AAIH,SAAgB,yBAAyB,KAA+C;AACtF,KAAI,CAAC,IAAK,QAAO;CACjB,MAAM,SAAS,kBAAkB,IAAI;AACrC,QAAO,OAAO,KAAK,OAAO,MAAM"}

package/dist/src/config/reload.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"reload.js","names":[],"sources":["../../../src/config/reload.ts"],"sourcesContent":["/**\n * Configuration hot reload manager\n */\n\nimport { watch, type FSWatcher } from 'fs';\nimport { loadConfig } from './loader.js';\nimport type { Config } from './schema.js';\nimport { diffConfigPaths } from './diff.js';\nimport { buildReloadPlan, type ReloadPlan } from './rules.js';\nimport { resolveModelsJsonPath } from './paths.js';\nimport { logger as log } from '../utils/logger.js';\n\nexport interface HotReloadConfig {\n  debounceMs: number;\n  enabled: boolean;\n}\n\nexport interface ReloadResult {\n  success: boolean;\n  plan?: ReloadPlan;\n  error?: string;\n}\n\n/**\n * Callback types for different reload actions\n */\nexport type ReloadCallback = (newConfig: Config) => void | Promise<void>;\n\nexport interface ReloadCallbacks {\n  onModelsReload?: ReloadCallback;\n  onAgentDefaultsReload?: ReloadCallback;\n  onChannelsReload?: ReloadCallback;\n  onCronReload?: ReloadCallback;\n  onHeartbeatReload?: ReloadCallback;\n  onToolsReload?: ReloadCallback;\n  onMcpReload?: ReloadCallback;\n  onWebSearchReload?: ReloadCallback;\n  /** All `extensions.*` hot paths in one batch (deduplicated in applyReload). */\n  onExtensionsReload?: (\n    newConfig: Config,\n    changedPaths: string[],\n  ) => void | Promise<void>;\n  onFullRestart?: ReloadCallback;\n}\n\n/**\n * Configuration hot reload manager\n */\nexport class ConfigHotReloader {\n  private configPath: string;\n  private callbacks: ReloadCallbacks;\n  private watcher: FSWatcher | null = null;\n  private modelsJsonWatcher: FSWatcher | null = null;\n  private debounceTimer: ReturnType<typeof setTimeout> | null = null;\n  private currentConfig: Config;\n  private debounceMs: number;\n  private enabled: boolean;\n\n  constructor(\n    configPath: string,\n    initialConfig: Config,\n    callbacks: ReloadCallbacks,\n    options: HotReloadConfig = { debounceMs: 300, enabled: true }\n  ) {\n    this.configPath = configPath;\n    this.currentConfig = initialConfig;\n    this.callbacks = callbacks;\n    this.debounceMs = options.debounceMs;\n    this.enabled = options.enabled;\n  }\n\n  /**\n   * Start watching config file for changes\n   */\n  start(): void {\n    if (!this.enabled) {\n      log.info('Config hot reload disabled');\n      return;\n    }\n\n    try {\n      this.watcher = watch(this.configPath, (eventType) => {\n        if (eventType === 'change') {\n          this.scheduleReload();\n        }\n      });\n      log.info({ path: this.configPath }, 'Config hot reload enabled');\n    } catch (err) {\n      log.error({ err }, 'Failed to setup config watcher');\n    }\n\n    this.startModelsJsonWatcher();\n  }\n\n  /**\n   * Stop watching config file\n   */\n  async stop(): Promise<void> {\n    if (this.watcher) {\n      this.watcher.close();\n      this.watcher = null;\n    }\n    if (this.modelsJsonWatcher) {\n      this.modelsJsonWatcher.close();\n      this.modelsJsonWatcher = null;\n    }\n    if (this.debounceTimer) {\n      clearTimeout(this.debounceTimer);\n      this.debounceTimer = null;\n    }\n    log.info('Config hot reload stopped');\n  }\n\n  /**\n   * Schedule a reload with debounce\n   */\n  private scheduleReload(): void {\n    if (this.debounceTimer) {\n      clearTimeout(this.debounceTimer);\n    }\n    this.debounceTimer = setTimeout(() => {\n      void this.reload();\n    }, this.debounceMs);\n  }\n\n  /**\n   * Watch models.json independently so direct file edits are picked up without restarting.\n   * The watcher is best-effort: if the file does not exist yet, it will not be watched.\n   */\n  private startModelsJsonWatcher(): void {\n    const modelsJsonPath = resolveModelsJsonPath();\n    try {\n      this.modelsJsonWatcher = watch(modelsJsonPath, (eventType) => {\n        if (eventType === 'change') {\n          this.scheduleModelsJsonReload();\n        }\n      });\n      log.info({ path: modelsJsonPath }, 'models.json hot reload enabled');\n    } catch {\n      log.debug({ path: modelsJsonPath }, 'models.json not found, skipping watcher');\n    }\n  }\n\n  /**\n   * Debounced handler for models.json changes.\n   * Calls onModelsReload with the current config so the registry is refreshed.\n   */\n  private scheduleModelsJsonReload(): void {\n    if (this.debounceTimer) {\n      clearTimeout(this.debounceTimer);\n    }\n    this.debounceTimer = setTimeout(() => {\n      log.info('models.json changed on disk — refreshing ModelRegistry');\n      if (this.callbacks.onModelsReload) {\n        void Promise.resolve(this.callbacks.onModelsReload(this.currentConfig));\n      }\n    }, this.debounceMs);\n  }\n\n  /**\n   * Reload configuration and apply changes\n   */\n  async reload(): Promise<ReloadResult> {\n    try {\n      log.info('Reloading configuration...');\n      \n      // Load new config\n      const newConfig = loadConfig(this.configPath);\n      \n      // Diff with current config\n      const changedPaths = diffConfigPaths(this.currentConfig, newConfig);\n      \n      if (changedPaths.length === 0) {\n        log.debug('No config changes detected');\n        return { success: true };\n      }\n      \n      log.info({ changedPaths }, 'Config changes detected');\n      \n      // Build reload plan\n      const plan = buildReloadPlan(changedPaths);\n      \n      // Apply changes based on plan\n      await this.applyReload(plan, newConfig);\n      \n      // Update current config\n      this.currentConfig = newConfig;\n      \n      return { success: true, plan };\n      \n    } catch (err) {\n      const error = err instanceof Error ? err.message : String(err);\n      log.error({ err, configPath: this.configPath, errorMessage: error }, `Config hot reload failed: ${error}`);\n      return { success: false, error };\n    }\n  }\n\n  /**\n   * Apply reload based on plan\n   */\n  private async applyReload(plan: ReloadPlan, newConfig: Config): Promise<void> {\n    // Handle restart-required changes first\n    if (plan.requiresRestart) {\n      log.info(\n        { restartPaths: plan.restartPaths },\n        'Config changes require gateway restart'\n      );\n      \n      if (this.callbacks.onFullRestart) {\n        this.callbacks.onFullRestart(newConfig);\n      }\n      return;\n    }\n\n    if (!plan.requiresHotReload) {\n      log.info({ plan }, 'Config hot reload completed');\n      return;\n    }\n\n    const isExtensionPath = (p: string) => p === 'extensions' || p.startsWith('extensions.');\n    const extensionPaths = plan.hotPaths.filter(isExtensionPath);\n    const otherPaths = plan.hotPaths.filter((p) => !isExtensionPath(p));\n\n    for (const path of otherPaths) {\n      await this.applyHotPath(path, newConfig);\n    }\n\n    if (extensionPaths.length > 0 && this.callbacks.onExtensionsReload) {\n      await Promise.resolve(this.callbacks.onExtensionsReload(newConfig, extensionPaths));\n    }\n\n    log.info({ plan }, 'Config hot reload completed');\n  }\n\n  /**\n   * Apply a single hot-reloadable path\n   */\n  private async applyHotPath(path: string, newConfig: Config): Promise<void> {\n    if (path.startsWith('models.')) {\n      if (this.callbacks.onModelsReload) {\n        await Promise.resolve(this.callbacks.onModelsReload(newConfig));\n      }\n      return;\n    }\n\n    if (path.startsWith('agents.list') || path.startsWith('agents.capabilityPresets')) {\n      if (this.callbacks.onAgentDefaultsReload) {\n        await Promise.resolve(this.callbacks.onAgentDefaultsReload(newConfig));\n      }\n      return;\n    }\n\n    if (path.startsWith('channels.')) {\n      if (this.callbacks.onChannelsReload) {\n        await Promise.resolve(this.callbacks.onChannelsReload(newConfig));\n      }\n      return;\n    }\n\n    if (path.startsWith('cron.')) {\n      if (this.callbacks.onCronReload) {\n        await Promise.resolve(this.callbacks.onCronReload(newConfig));\n      }\n      return;\n    }\n\n    if (path === 'gateway.heartbeat' || path.startsWith('gateway.heartbeat.')) {\n      if (this.callbacks.onHeartbeatReload) {\n        await Promise.resolve(this.callbacks.onHeartbeatReload(newConfig));\n      }\n      return;\n    }\n\n    if (path.startsWith('tools.')) {\n      if (this.callbacks.onToolsReload) {\n        await Promise.resolve(this.callbacks.onToolsReload(newConfig));\n      }\n      return;\n    }\n\n    if (path.startsWith('mcp.') || path === 'mcp') {\n      if (this.callbacks.onMcpReload) {\n        await Promise.resolve(this.callbacks.onMcpReload(newConfig));\n      }\n      return;\n    }\n\n    if (path.startsWith('webSearch.') || path.startsWith('webTools.')) {\n      if (this.callbacks.onWebSearchReload) {\n        await Promise.resolve(this.callbacks.onWebSearchReload(newConfig));\n      }\n      return;\n    }\n\n    log.debug({ path }, 'No handler for hot reload path');\n  }\n\n  /**\n   * Manually trigger a reload\n   */\n  async triggerReload(): Promise<ReloadResult> {\n    return this.reload();\n  }\n\n  /**\n   * Align diff baseline with a freshly loaded config (e.g. Weixin QR wrote token files but JSON unchanged).\n   */\n  syncCurrentConfig(config: Config): void {\n    this.currentConfig = config;\n  }\n\n  /**\n   * Get current config\n   */\n  getConfig(): Config {\n    return this.currentConfig;\n  }\n\n  /**\n   * Check if hot reload is enabled\n   */\n  isEnabled(): boolean {\n    return this.enabled;\n  }\n}\n\nexport { diffConfigPaths } from './diff.js';\nexport { buildReloadPlan, matchReloadRule, BASE_RELOAD_RULES } from './rules.js';\n"],"mappings":";;;;;;;;;;;aAKyC;YAIU;aACA;;;;AAsCnD,IAAa,oBAAb,MAA+B;CAC7B;CACA;CACA,UAAoC;CACpC,oBAA8C;CAC9C,gBAA8D;CAC9D;CACA;CACA;CAEA,YACE,YACA,eACA,WACA,UAA2B;EAAE,YAAY;EAAK,SAAS;EAAM,EAC7D;AACA,OAAK,aAAa;AAClB,OAAK,gBAAgB;AACrB,OAAK,YAAY;AACjB,OAAK,aAAa,QAAQ;AAC1B,OAAK,UAAU,QAAQ;;;;;CAMzB,QAAc;AACZ,MAAI,CAAC,KAAK,SAAS;AACjB,UAAI,KAAK,6BAA6B;AACtC;;AAGF,MAAI;AACF,QAAK,UAAU,MAAM,KAAK,aAAa,cAAc;AACnD,QAAI,cAAc,SAChB,MAAK,gBAAgB;KAEvB;AACF,UAAI,KAAK,EAAE,MAAM,KAAK,YAAY,EAAE,4BAA4B;WACzD,KAAK;AACZ,UAAI,MAAM,EAAE,KAAK,EAAE,iCAAiC;;AAGtD,OAAK,wBAAwB;;;;;CAM/B,MAAM,OAAsB;AAC1B,MAAI,KAAK,SAAS;AAChB,QAAK,QAAQ,OAAO;AACpB,QAAK,UAAU;;AAEjB,MAAI,KAAK,mBAAmB;AAC1B,QAAK,kBAAkB,OAAO;AAC9B,QAAK,oBAAoB;;AAE3B,MAAI,KAAK,eAAe;AACtB,gBAAa,KAAK,cAAc;AAChC,QAAK,gBAAgB;;AAEvB,SAAI,KAAK,4BAA4B;;;;;CAMvC,iBAA+B;AAC7B,MAAI,KAAK,cACP,cAAa,KAAK,cAAc;AAElC,OAAK,gBAAgB,iBAAiB;AAC/B,QAAK,QAAQ;KACjB,KAAK,WAAW;;;;;;CAOrB,yBAAuC;EACrC,MAAM,iBAAiB,uBAAuB;AAC9C,MAAI;AACF,QAAK,oBAAoB,MAAM,iBAAiB,cAAc;AAC5D,QAAI,cAAc,SAChB,MAAK,0BAA0B;KAEjC;AACF,UAAI,KAAK,EAAE,MAAM,gBAAgB,EAAE,iCAAiC;UAC9D;AACN,UAAI,MAAM,EAAE,MAAM,gBAAgB,EAAE,0CAA0C;;;;;;;CAQlF,2BAAyC;AACvC,MAAI,KAAK,cACP,cAAa,KAAK,cAAc;AAElC,OAAK,gBAAgB,iBAAiB;AACpC,UAAI,KAAK,yDAAyD;AAClE,OAAI,KAAK,UAAU,eACZ,SAAQ,QAAQ,KAAK,UAAU,eAAe,KAAK,cAAc,CAAC;KAExE,KAAK,WAAW;;;;;CAMrB,MAAM,SAAgC;AACpC,MAAI;AACF,UAAI,KAAK,6BAA6B;GAGtC,MAAM,YAAY,WAAW,KAAK,WAAW;GAG7C,MAAM,eAAe,gBAAgB,KAAK,eAAe,UAAU;AAEnE,OAAI,aAAa,WAAW,GAAG;AAC7B,WAAI,MAAM,6BAA6B;AACvC,WAAO,EAAE,SAAS,MAAM;;AAG1B,UAAI,KAAK,EAAE,cAAc,EAAE,0BAA0B;GAGrD,MAAM,OAAO,gBAAgB,aAAa;AAG1C,SAAM,KAAK,YAAY,MAAM,UAAU;AAGvC,QAAK,gBAAgB;AAErB,UAAO;IAAE,SAAS;IAAM;IAAM;WAEvB,KAAK;GACZ,MAAM,QAAQ,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAC9D,UAAI,MAAM;IAAE;IAAK,YAAY,KAAK;IAAY,cAAc;IAAO,EAAE,6BAA6B,QAAQ;AAC1G,UAAO;IAAE,SAAS;IAAO;IAAO;;;;;;CAOpC,MAAc,YAAY,MAAkB,WAAkC;AAE5E,MAAI,KAAK,iBAAiB;AACxB,UAAI,KACF,EAAE,cAAc,KAAK,cAAc,EACnC,yCACD;AAED,OAAI,KAAK,UAAU,cACjB,MAAK,UAAU,cAAc,UAAU;AAEzC;;AAGF,MAAI,CAAC,KAAK,mBAAmB;AAC3B,UAAI,KAAK,EAAE,MAAM,EAAE,8BAA8B;AACjD;;EAGF,MAAM,mBAAmB,MAAc,MAAM,gBAAgB,EAAE,WAAW,cAAc;EACxF,MAAM,iBAAiB,KAAK,SAAS,OAAO,gBAAgB;EAC5D,MAAM,aAAa,KAAK,SAAS,QAAQ,MAAM,CAAC,gBAAgB,EAAE,CAAC;AAEnE,OAAK,MAAM,QAAQ,WACjB,OAAM,KAAK,aAAa,MAAM,UAAU;AAG1C,MAAI,eAAe,SAAS,KAAK,KAAK,UAAU,mBAC9C,OAAM,QAAQ,QAAQ,KAAK,UAAU,mBAAmB,WAAW,eAAe,CAAC;AAGrF,SAAI,KAAK,EAAE,MAAM,EAAE,8BAA8B;;;;;CAMnD,MAAc,aAAa,MAAc,WAAkC;AACzE,MAAI,KAAK,WAAW,UAAU,EAAE;AAC9B,OAAI,KAAK,UAAU,eACjB,OAAM,QAAQ,QAAQ,KAAK,UAAU,eAAe,UAAU,CAAC;AAEjE;;AAGF,MAAI,KAAK,WAAW,cAAc,IAAI,KAAK,WAAW,2BAA2B,EAAE;AACjF,OAAI,KAAK,UAAU,sBACjB,OAAM,QAAQ,QAAQ,KAAK,UAAU,sBAAsB,UAAU,CAAC;AAExE;;AAGF,MAAI,KAAK,WAAW,YAAY,EAAE;AAChC,OAAI,KAAK,UAAU,iBACjB,OAAM,QAAQ,QAAQ,KAAK,UAAU,iBAAiB,UAAU,CAAC;AAEnE;;AAGF,MAAI,KAAK,WAAW,QAAQ,EAAE;AAC5B,OAAI,KAAK,UAAU,aACjB,OAAM,QAAQ,QAAQ,KAAK,UAAU,aAAa,UAAU,CAAC;AAE/D;;AAGF,MAAI,SAAS,uBAAuB,KAAK,WAAW,qBAAqB,EAAE;AACzE,OAAI,KAAK,UAAU,kBACjB,OAAM,QAAQ,QAAQ,KAAK,UAAU,kBAAkB,UAAU,CAAC;AAEpE;;AAGF,MAAI,KAAK,WAAW,SAAS,EAAE;AAC7B,OAAI,KAAK,UAAU,cACjB,OAAM,QAAQ,QAAQ,KAAK,UAAU,cAAc,UAAU,CAAC;AAEhE;;AAGF,MAAI,KAAK,WAAW,OAAO,IAAI,SAAS,OAAO;AAC7C,OAAI,KAAK,UAAU,YACjB,OAAM,QAAQ,QAAQ,KAAK,UAAU,YAAY,UAAU,CAAC;AAE9D;;AAGF,MAAI,KAAK,WAAW,aAAa,IAAI,KAAK,WAAW,YAAY,EAAE;AACjE,OAAI,KAAK,UAAU,kBACjB,OAAM,QAAQ,QAAQ,KAAK,UAAU,kBAAkB,UAAU,CAAC;AAEpE;;AAGF,SAAI,MAAM,EAAE,MAAM,EAAE,iCAAiC;;;;;CAMvD,MAAM,gBAAuC;AAC3C,SAAO,KAAK,QAAQ;;;;;CAMtB,kBAAkB,QAAsB;AACtC,OAAK,gBAAgB;;;;;CAMvB,YAAoB;AAClB,SAAO,KAAK;;;;;CAMd,YAAqB;AACnB,SAAO,KAAK"}

package/dist/src/config/resolve-config-value.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"resolve-config-value.js","names":[],"sources":["../../../src/config/resolve-config-value.ts"],"sourcesContent":["/**\n * Resolve configuration values that may be shell commands, environment variables, or literals.\n * Used by model-registry.ts for apiKey and headers resolution.\n */\n\nimport { execSync } from 'child_process';\n\n// Cache configuration\nconst MAX_CACHE_SIZE = 100;\nconst CACHE_TTL_MS = 5 * 60 * 1000; // 5 minutes\n\ninterface CacheEntry {\n\tvalue: string | undefined;\n\ttimestamp: number;\n}\n\n// Cache for shell command results with LRU eviction\nconst commandResultCache = new Map<string, CacheEntry>();\n\n// Allowed safe commands for API key resolution (whitelist approach)\n// Only password manager commands are allowed. File reading commands (cat, head, tail, echo)\n// have been removed to prevent arbitrary file access. Use 'file:' prefix or env vars instead.\nconst ALLOWED_COMMANDS = [\n\t'op', // 1Password CLI\n\t'security', // macOS Keychain\n\t'pass', // pass password manager\n\t'gpg', // GPG\n];\n\n// Dangerous characters/patterns that should never be allowed\nconst DANGEROUS_PATTERNS = [\n\t/[;&|]/, // Command chaining\n\t/>/, // Output redirection\n\t/</, // Input redirection\n\t/\\$\\(/, // Command substitution\n\t/`/, // Backtick substitution\n\t/\\$\\{.*\\}/, // Variable expansion with braces\n\t/\\*\\*?/, // Glob expansion\n\t/\\.\\./, // Path traversal\n];\n\n/**\n * Clean expired cache entries and enforce size limit (LRU eviction)\n */\nfunction maintainCache(): void {\n\tconst now = Date.now();\n\n\t// Remove expired entries\n\tfor (const [key, entry] of commandResultCache.entries()) {\n\t\tif (now - entry.timestamp > CACHE_TTL_MS) {\n\t\t\tcommandResultCache.delete(key);\n\t\t}\n\t}\n\n\t// LRU eviction if still over limit\n\tif (commandResultCache.size > MAX_CACHE_SIZE) {\n\t\tconst sortedEntries = [...commandResultCache.entries()].sort(\n\t\t\t(a, b) => a[1].timestamp - b[1].timestamp\n\t\t);\n\t\tconst entriesToDelete = sortedEntries.slice(0, sortedEntries.length - MAX_CACHE_SIZE);\n\t\tfor (const [key] of entriesToDelete) {\n\t\t\tcommandResultCache.delete(key);\n\t\t}\n\t}\n}\n\n/**\n * Validate if a command is safe to execute\n */\nfunction isSafeCommand(command: string): { safe: boolean; error?: string } {\n\t// Check for dangerous patterns\n\tfor (const pattern of DANGEROUS_PATTERNS) {\n\t\tif (pattern.test(command)) {\n\t\t\treturn { safe: false, error: 'Command contains potentially dangerous characters' };\n\t\t}\n\t}\n\n\t// Extract the base command (first word before any arguments)\n\tconst baseCommand = command.trim().split(/\\s+/)[0];\n\n\t// Check if base command is in allowed list\n\tif (!ALLOWED_COMMANDS.includes(baseCommand)) {\n\t\treturn {\n\t\t\tsafe: false,\n\t\t\terror: `Command \"${baseCommand}\" is not in the allowed list. Allowed: ${ALLOWED_COMMANDS.join(', ')}`,\n\t\t};\n\t}\n\n\treturn { safe: true };\n}\n\n/**\n * Resolve a config value (API key, header value, etc.) to an actual value.\n * - If starts with \"!\", executes the rest as a shell command and uses stdout (cached)\n * - If matches an environment variable name (all uppercase with underscores), uses env value\n * - Otherwise treats as literal value\n */\nexport function resolveConfigValue(config: string): string | undefined {\n\tif (config.startsWith('!')) {\n\t\treturn executeCommand(config);\n\t}\n\t// Check if it's an environment variable name pattern (all uppercase with underscores)\n\tif (/^[A-Z][A-Z0-9_]*$/.test(config)) {\n\t\tconst envValue = process.env[config];\n\t\tif (envValue !== undefined) {\n\t\t\treturn envValue;\n\t\t}\n\t}\n\t// Treat as literal value\n\treturn config;\n}\n\nfunction executeCommand(commandConfig: string): string | undefined {\n\t// Maintain cache before operations\n\tmaintainCache();\n\n\t// Check cache\n\tconst cached = commandResultCache.get(commandConfig);\n\tif (cached) {\n\t\tconst now = Date.now();\n\t\tif (now - cached.timestamp <= CACHE_TTL_MS) {\n\t\t\treturn cached.value;\n\t\t}\n\t\t// Expired, will be replaced\n\t}\n\n\tconst command = commandConfig.slice(1);\n\n\t// Security check\n\tconst safety = isSafeCommand(command);\n\tif (!safety.safe) {\n\t\tconsole.error(`[Security] Blocked unsafe command: ${safety.error}`);\n\t\treturn undefined;\n\t}\n\n\tlet result: string | undefined;\n\ttry {\n\t\tconst output = execSync(command, {\n\t\t\tencoding: 'utf-8',\n\t\t\ttimeout: 10000,\n\t\t\tstdio: ['ignore', 'pipe', 'ignore'],\n\t\t});\n\t\tresult = output.trim() || undefined;\n\t} catch (err) {\n\t\t// Log error for debugging but don't expose details\n\t\tconsole.error(`[Config] Command execution failed: ${err instanceof Error ? err.message : 'Unknown error'}`);\n\t\tresult = undefined;\n\t}\n\n\t// Store with timestamp\n\tcommandResultCache.set(commandConfig, {\n\t\tvalue: result,\n\t\ttimestamp: Date.now(),\n\t});\n\treturn result;\n}\n\n/**\n * Resolve all header values using the same resolution logic as API keys.\n */\nexport function resolveHeaders(\n\theaders: Record<string, string> | undefined,\n): Record<string, string> | undefined {\n\tif (!headers) return undefined;\n\tconst resolved: Record<string, string> = {};\n\tfor (const [key, value] of Object.entries(headers)) {\n\t\tconst resolvedValue = resolveConfigValue(value);\n\t\tif (resolvedValue) {\n\t\t\tresolved[key] = resolvedValue;\n\t\t}\n\t}\n\treturn Object.keys(resolved).length > 0 ? resolved : undefined;\n}\n\n/** Clear the config value command cache. Exported for testing. */\nexport function clearConfigValueCache(): void {\n\tcommandResultCache.clear();\n}\n\n/** Get cache statistics for monitoring */\nexport function getCacheStats(): { size: number; maxSize: number; ttlMs: number } {\n\treturn {\n\t\tsize: commandResultCache.size,\n\t\tmaxSize: MAX_CACHE_SIZE,\n\t\tttlMs: CACHE_TTL_MS,\n\t};\n}\n\n/**\n * Test API key resolution without caching (for UI testing)\n * SECURITY: This function validates commands against a whitelist\n */\nexport function testApiKeyResolution(value: string): {\n\ttype: 'literal' | 'env' | 'command';\n\tresolved?: string;\n\terror?: string;\n} {\n\tif (value.startsWith('!')) {\n\t\tconst command = value.slice(1);\n\n\t\t// Security validation\n\t\tconst safety = isSafeCommand(command);\n\t\tif (!safety.safe) {\n\t\t\treturn {\n\t\t\t\ttype: 'command',\n\t\t\t\terror: `Security: ${safety.error}`,\n\t\t\t};\n\t\t}\n\n\t\ttry {\n\t\t\tconst output = execSync(command, {\n\t\t\t\tencoding: 'utf-8',\n\t\t\t\ttimeout: 10000,\n\t\t\t\tstdio: ['ignore', 'pipe', 'ignore'],\n\t\t\t});\n\t\t\treturn {\n\t\t\t\ttype: 'command',\n\t\t\t\tresolved: output.trim() || undefined,\n\t\t\t};\n\t\t} catch (err) {\n\t\t\treturn {\n\t\t\t\ttype: 'command',\n\t\t\t\terror: err instanceof Error ? err.message : 'Command failed',\n\t\t\t};\n\t\t}\n\t}\n\n\tif (/^[A-Z][A-Z0-9_]*$/.test(value)) {\n\t\tconst envValue = process.env[value];\n\t\tif (envValue !== undefined) {\n\t\t\treturn {\n\t\t\t\ttype: 'env',\n\t\t\t\tresolved: envValue,\n\t\t\t};\n\t\t}\n\t\treturn {\n\t\t\ttype: 'env',\n\t\t\terror: `Environment variable ${value} is not set`,\n\t\t};\n\t}\n\n\treturn {\n\t\ttype: 'literal',\n\t\tresolved: value,\n\t};\n}\n\n/**\n * Get the list of allowed commands (for documentation/UI)\n */\nexport function getAllowedCommands(): string[] {\n\treturn [...ALLOWED_COMMANDS];\n}\n"],"mappings":";;;;;;;;;;AA4CA,SAAS,gBAAsB;CAC9B,MAAM,MAAM,KAAK,KAAK;AAGtB,MAAK,MAAM,CAAC,KAAK,UAAU,mBAAmB,SAAS,CACtD,KAAI,MAAM,MAAM,YAAY,aAC3B,oBAAmB,OAAO,IAAI;AAKhC,KAAI,mBAAmB,OAAO,gBAAgB;EAC7C,MAAM,gBAAgB,CAAC,GAAG,mBAAmB,SAAS,CAAC,CAAC,MACtD,GAAG,MAAM,EAAE,GAAG,YAAY,EAAE,GAAG,UAChC;EACD,MAAM,kBAAkB,cAAc,MAAM,GAAG,cAAc,SAAS,eAAe;AACrF,OAAK,MAAM,CAAC,QAAQ,gBACnB,oBAAmB,OAAO,IAAI;;;;;;AAQjC,SAAS,cAAc,SAAoD;AAE1E,MAAK,MAAM,WAAW,mBACrB,KAAI,QAAQ,KAAK,QAAQ,CACxB,QAAO;EAAE,MAAM;EAAO,OAAO;EAAqD;CAKpF,MAAM,cAAc,QAAQ,MAAM,CAAC,MAAM,MAAM,CAAC;AAGhD,KAAI,CAAC,iBAAiB,SAAS,YAAY,CAC1C,QAAO;EACN,MAAM;EACN,OAAO,YAAY,YAAY,yCAAyC,iBAAiB,KAAK,KAAK;EACnG;AAGF,QAAO,EAAE,MAAM,MAAM;;;;;;;;AAStB,SAAgB,mBAAmB,QAAoC;AACtE,KAAI,OAAO,WAAW,IAAI,CACzB,QAAO,eAAe,OAAO;AAG9B,KAAI,oBAAoB,KAAK,OAAO,EAAE;EACrC,MAAM,WAAW,QAAQ,IAAI;AAC7B,MAAI,aAAa,KAAA,EAChB,QAAO;;AAIT,QAAO;;AAGR,SAAS,eAAe,eAA2C;AAElE,gBAAe;CAGf,MAAM,SAAS,mBAAmB,IAAI,cAAc;AACpD,KAAI;MACS,KAAK,KACV,GAAG,OAAO,aAAa,aAC7B,QAAO,OAAO;;CAKhB,MAAM,UAAU,cAAc,MAAM,EAAE;CAGtC,MAAM,SAAS,cAAc,QAAQ;AACrC,KAAI,CAAC,OAAO,MAAM;AACjB,UAAQ,MAAM,sCAAsC,OAAO,QAAQ;AACnE;;CAGD,IAAI;AACJ,KAAI;AAMH,WALe,SAAS,SAAS;GAChC,UAAU;GACV,SAAS;GACT,OAAO;IAAC;IAAU;IAAQ;IAAS;GACnC,CACc,CAAC,MAAM,IAAI,KAAA;UAClB,KAAK;AAEb,UAAQ,MAAM,sCAAsC,eAAe,QAAQ,IAAI,UAAU,kBAAkB;AAC3G,WAAS,KAAA;;AAIV,oBAAmB,IAAI,eAAe;EACrC,OAAO;EACP,WAAW,KAAK,KAAK;EACrB,CAAC;AACF,QAAO;;;;;AAMR,SAAgB,eACf,SACqC;AACrC,KAAI,CAAC,QAAS,QAAO,KAAA;CACrB,MAAM,WAAmC,EAAE;AAC3C,MAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,QAAQ,EAAE;EACnD,MAAM,gBAAgB,mBAAmB,MAAM;AAC/C,MAAI,cACH,UAAS,OAAO;;AAGlB,QAAO,OAAO,KAAK,SAAS,CAAC,SAAS,IAAI,WAAW,KAAA;;;AAItD,SAAgB,wBAA8B;AAC7C,oBAAmB,OAAO;;;AAI3B,SAAgB,gBAAkE;AACjF,QAAO;EACN,MAAM,mBAAmB;EACzB,SAAS;EACT,OAAO;EACP;;;;;;AAOF,SAAgB,qBAAqB,OAInC;AACD,KAAI,MAAM,WAAW,IAAI,EAAE;EAC1B,MAAM,UAAU,MAAM,MAAM,EAAE;EAG9B,MAAM,SAAS,cAAc,QAAQ;AACrC,MAAI,CAAC,OAAO,KACX,QAAO;GACN,MAAM;GACN,OAAO,aAAa,OAAO;GAC3B;AAGF,MAAI;AAMH,UAAO;IACN,MAAM;IACN,UAPc,SAAS,SAAS;KAChC,UAAU;KACV,SAAS;KACT,OAAO;MAAC;MAAU;MAAQ;MAAS;KACnC,CAGgB,CAAC,MAAM,IAAI,KAAA;IAC3B;WACO,KAAK;AACb,UAAO;IACN,MAAM;IACN,OAAO,eAAe,QAAQ,IAAI,UAAU;IAC5C;;;AAIH,KAAI,oBAAoB,KAAK,MAAM,EAAE;EACpC,MAAM,WAAW,QAAQ,IAAI;AAC7B,MAAI,aAAa,KAAA,EAChB,QAAO;GACN,MAAM;GACN,UAAU;GACV;AAEF,SAAO;GACN,MAAM;GACN,OAAO,wBAAwB,MAAM;GACrC;;AAGF,QAAO;EACN,MAAM;EACN,UAAU;EACV;;;;;AAMF,SAAgB,qBAA+B;AAC9C,QAAO,CAAC,GAAG,iBAAiB;;;;AAnPvB,kBAAiB;AACjB,gBAAe,MAAS;AAQxB,sCAAqB,IAAI,KAAyB;AAKlD,oBAAmB;EACxB;EACA;EACA;EACA;EACA;AAGK,sBAAqB;EAC1B;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA"}

package/dist/src/config/rules.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"rules.js","names":[],"sources":["../../../src/config/rules.ts"],"sourcesContent":["/**\n * Configuration reload rules\n * \n * Defines how different config paths are handled:\n * - hot: Apply changes immediately without restart\n * - restart: Require gateway restart\n * - none: Ignore changes (no action needed)\n */\n\nexport type ReloadKind = 'hot' | 'restart' | 'none';\n\nexport interface ReloadRule {\n  prefix: string;\n  kind: ReloadKind;\n  description?: string;\n}\n\nexport interface ReloadPlan {\n  changedPaths: string[];\n  hotPaths: string[];\n  restartPaths: string[];\n  noopPaths: string[];\n  requiresRestart: boolean;\n  requiresHotReload: boolean;\n}\n\n/**\n * Base reload rules for config paths\n */\nexport const BASE_RELOAD_RULES: ReloadRule[] = [\n  // Models config - hot reload\n  { prefix: 'models.providers', kind: 'hot', description: 'Model provider API keys, base URLs' },\n  { prefix: 'models.mode', kind: 'hot', description: 'Model merge mode' },\n  \n  { prefix: 'agents.list', kind: 'hot', description: 'Agent manifests' },\n  { prefix: 'agents.capabilityPresets', kind: 'hot', description: 'Agent capability presets' },\n  { prefix: 'agents.default', kind: 'hot', description: 'Default agent id' },\n  \n  // Gateway - restart required\n  { prefix: 'gateway.bind', kind: 'restart', description: 'Gateway bind mode' },\n  { prefix: 'gateway.customBindHost', kind: 'restart', description: 'Gateway custom bind host' },\n  { prefix: 'gateway.port', kind: 'restart', description: 'Port number' },\n  { prefix: 'gateway.mode', kind: 'restart', description: 'Gateway local/remote CLI mode' },\n  { prefix: 'gateway.remote', kind: 'restart', description: 'Remote gateway CLI target' },\n  { prefix: 'gateway.tailscale', kind: 'restart', description: 'Tailscale Serve/Funnel exposure' },\n  { prefix: 'gateway.tls', kind: 'restart', description: 'Gateway native TLS' },\n  { prefix: 'gateway.auth', kind: 'restart', description: 'Authentication settings' },\n  { prefix: 'gateway.security', kind: 'restart', description: 'Gateway security policy' },\n  { prefix: 'gateway.corsOrigins', kind: 'restart', description: 'CORS settings' },\n  { prefix: 'gateway.trustedProxies', kind: 'restart', description: 'Trusted reverse proxy CIDRs' },\n  {\n    prefix: 'gateway.allowRealIpFallback',\n    kind: 'restart',\n    description: 'Trusted-proxy X-Real-IP fallback',\n  },\n  {\n    prefix: 'gateway.dangerouslyAllowHostHeaderOriginFallback',\n    kind: 'restart',\n    description: 'Host-header origin fallback',\n  },\n  { prefix: 'gateway.maxSseConnections', kind: 'restart', description: 'SSE connection limit' },\n  { prefix: 'gateway.channelConnectDeferMode', kind: 'restart', description: 'Channel connect defer mode' },\n  { prefix: 'gateway.channelConnectDeferIds', kind: 'restart', description: 'Explicit channel connect defer list' },\n  { prefix: 'gateway.channelConnectDeferSkipIds', kind: 'restart', description: 'Channel connect defer skip list' },\n  { prefix: 'gateway.share', kind: 'restart', description: 'File share policy' },\n  { prefix: 'gateway.siteShare', kind: 'restart', description: 'Site share policy' },\n  {\n    prefix: 'gateway.skillsStoreBaseUrl',\n    kind: 'restart',\n    description: 'Skills marketplace API base URL',\n  },\n  { prefix: 'gateway.enableHotReload', kind: 'hot', description: 'Hot reload toggle' },\n  \n  // Channels - hot reload (channel-specific prefixes are registered by channel plugins)\n  { prefix: 'channels', kind: 'hot', description: 'Any channel subtree (e.g. future extensions)' },\n  \n  // Heartbeat lives under gateway.heartbeat in config JSON (not top-level `heartbeat`)\n  { prefix: 'gateway.heartbeat', kind: 'hot', description: 'Heartbeat settings' },\n  \n  // Web search - hot reload\n  { prefix: 'webSearch', kind: 'hot', description: 'Web search settings' },\n  { prefix: 'webTools', kind: 'hot', description: 'Web tools settings' },\n  \n  // Extension list toggles — still require process restart to load/unload modules\n  {\n    prefix: 'extensions.enabled',\n    kind: 'restart',\n    description: 'Extension enable list (requires restart)',\n  },\n  {\n    prefix: 'extensions.disabled',\n    kind: 'restart',\n    description: 'Extension disable list (requires restart)',\n  },\n  // Extension instance config — hot-reloaded via extension registerReload handlers\n  {\n    prefix: 'extensions',\n    kind: 'hot',\n    description: 'Extension configuration (hot-reloaded via extension handlers)',\n  },\n  \n  // Tools - hot reload (for tool-specific settings)\n  { prefix: 'tools', kind: 'hot', description: 'Tools configuration' },\n\n  // MCP servers - hot reload (dispose and reconnect runtimes)\n  { prefix: 'mcp', kind: 'hot', description: 'MCP server definitions and idle TTL' },\n\n  // Tunnel E2E TLS — restart (local HTTPS terminator port)\n  { prefix: 'tunnel', kind: 'hot', description: 'Tunnel broker and auto-start settings' },\n];\n\nfunction getChannelReloadRules(): ReloadRule[] {\n  return [];\n}\n\nfunction mergedReloadRules(): ReloadRule[] {\n  return [...BASE_RELOAD_RULES, ...getChannelReloadRules()];\n}\n\n/**\n * Find matching rule for a config path\n */\nexport function matchReloadRule(path: string): ReloadRule | null {\n  const merged = mergedReloadRules();\n  const exact = merged.find((r) => r.prefix === path);\n  if (exact) return exact;\n  const sorted = [...merged].sort((a, b) => b.prefix.length - a.prefix.length);\n  for (const rule of sorted) {\n    if (path === rule.prefix || path.startsWith(`${rule.prefix}.`)) {\n      return rule;\n    }\n  }\n  return null;\n}\n\n/**\n * Build reload plan from changed paths\n */\nexport function buildReloadPlan(changedPaths: string[]): ReloadPlan {\n  const plan: ReloadPlan = {\n    changedPaths,\n    hotPaths: [],\n    restartPaths: [],\n    noopPaths: [],\n    requiresRestart: false,\n    requiresHotReload: false,\n  };\n\n  for (const path of changedPaths) {\n    const rule = matchReloadRule(path);\n    \n    if (!rule) {\n      // No rule matched - default to restart for safety\n      plan.restartPaths.push(path);\n      plan.requiresRestart = true;\n      continue;\n    }\n\n    switch (rule.kind) {\n      case 'hot':\n        plan.hotPaths.push(path);\n        plan.requiresHotReload = true;\n        break;\n      case 'restart':\n        plan.restartPaths.push(path);\n        plan.requiresRestart = true;\n        break;\n      case 'none':\n        plan.noopPaths.push(path);\n        break;\n    }\n  }\n\n  return plan;\n}\n"],"mappings":";;;;AA6BA,MAAa,oBAAkC;CAE7C;EAAE,QAAQ;EAAoB,MAAM;EAAO,aAAa;EAAsC;CAC9F;EAAE,QAAQ;EAAe,MAAM;EAAO,aAAa;EAAoB;CAEvE;EAAE,QAAQ;EAAe,MAAM;EAAO,aAAa;EAAmB;CACtE;EAAE,QAAQ;EAA4B,MAAM;EAAO,aAAa;EAA4B;CAC5F;EAAE,QAAQ;EAAkB,MAAM;EAAO,aAAa;EAAoB;CAG1E;EAAE,QAAQ;EAAgB,MAAM;EAAW,aAAa;EAAqB;CAC7E;EAAE,QAAQ;EAA0B,MAAM;EAAW,aAAa;EAA4B;CAC9F;EAAE,QAAQ;EAAgB,MAAM;EAAW,aAAa;EAAe;CACvE;EAAE,QAAQ;EAAgB,MAAM;EAAW,aAAa;EAAiC;CACzF;EAAE,QAAQ;EAAkB,MAAM;EAAW,aAAa;EAA6B;CACvF;EAAE,QAAQ;EAAqB,MAAM;EAAW,aAAa;EAAmC;CAChG;EAAE,QAAQ;EAAe,MAAM;EAAW,aAAa;EAAsB;CAC7E;EAAE,QAAQ;EAAgB,MAAM;EAAW,aAAa;EAA2B;CACnF;EAAE,QAAQ;EAAoB,MAAM;EAAW,aAAa;EAA2B;CACvF;EAAE,QAAQ;EAAuB,MAAM;EAAW,aAAa;EAAiB;CAChF;EAAE,QAAQ;EAA0B,MAAM;EAAW,aAAa;EAA+B;CACjG;EACE,QAAQ;EACR,MAAM;EACN,aAAa;EACd;CACD;EACE,QAAQ;EACR,MAAM;EACN,aAAa;EACd;CACD;EAAE,QAAQ;EAA6B,MAAM;EAAW,aAAa;EAAwB;CAC7F;EAAE,QAAQ;EAAmC,MAAM;EAAW,aAAa;EAA8B;CACzG;EAAE,QAAQ;EAAkC,MAAM;EAAW,aAAa;EAAuC;CACjH;EAAE,QAAQ;EAAsC,MAAM;EAAW,aAAa;EAAmC;CACjH;EAAE,QAAQ;EAAiB,MAAM;EAAW,aAAa;EAAqB;CAC9E;EAAE,QAAQ;EAAqB,MAAM;EAAW,aAAa;EAAqB;CAClF;EACE,QAAQ;EACR,MAAM;EACN,aAAa;EACd;CACD;EAAE,QAAQ;EAA2B,MAAM;EAAO,aAAa;EAAqB;CAGpF;EAAE,QAAQ;EAAY,MAAM;EAAO,aAAa;EAAgD;CAGhG;EAAE,QAAQ;EAAqB,MAAM;EAAO,aAAa;EAAsB;CAG/E;EAAE,QAAQ;EAAa,MAAM;EAAO,aAAa;EAAuB;CACxE;EAAE,QAAQ;EAAY,MAAM;EAAO,aAAa;EAAsB;CAGtE;EACE,QAAQ;EACR,MAAM;EACN,aAAa;EACd;CACD;EACE,QAAQ;EACR,MAAM;EACN,aAAa;EACd;CAED;EACE,QAAQ;EACR,MAAM;EACN,aAAa;EACd;CAGD;EAAE,QAAQ;EAAS,MAAM;EAAO,aAAa;EAAuB;CAGpE;EAAE,QAAQ;EAAO,MAAM;EAAO,aAAa;EAAuC;CAGlF;EAAE,QAAQ;EAAU,MAAM;EAAO,aAAa;EAAyC;CACxF;AAED,SAAS,wBAAsC;AAC7C,QAAO,EAAE;;AAGX,SAAS,oBAAkC;AACzC,QAAO,CAAC,GAAG,mBAAmB,GAAG,uBAAuB,CAAC;;;;;AAM3D,SAAgB,gBAAgB,MAAiC;CAC/D,MAAM,SAAS,mBAAmB;CAClC,MAAM,QAAQ,OAAO,MAAM,MAAM,EAAE,WAAW,KAAK;AACnD,KAAI,MAAO,QAAO;CAClB,MAAM,SAAS,CAAC,GAAG,OAAO,CAAC,MAAM,GAAG,MAAM,EAAE,OAAO,SAAS,EAAE,OAAO,OAAO;AAC5E,MAAK,MAAM,QAAQ,OACjB,KAAI,SAAS,KAAK,UAAU,KAAK,WAAW,GAAG,KAAK,OAAO,GAAG,CAC5D,QAAO;AAGX,QAAO;;;;;AAMT,SAAgB,gBAAgB,cAAoC;CAClE,MAAM,OAAmB;EACvB;EACA,UAAU,EAAE;EACZ,cAAc,EAAE;EAChB,WAAW,EAAE;EACb,iBAAiB;EACjB,mBAAmB;EACpB;AAED,MAAK,MAAM,QAAQ,cAAc;EAC/B,MAAM,OAAO,gBAAgB,KAAK;AAElC,MAAI,CAAC,MAAM;AAET,QAAK,aAAa,KAAK,KAAK;AAC5B,QAAK,kBAAkB;AACvB;;AAGF,UAAQ,KAAK,MAAb;GACE,KAAK;AACH,SAAK,SAAS,KAAK,KAAK;AACxB,SAAK,oBAAoB;AACzB;GACF,KAAK;AACH,SAAK,aAAa,KAAK,KAAK;AAC5B,SAAK,kBAAkB;AACvB;GACF,KAAK;AACH,SAAK,UAAU,KAAK,KAAK;AACzB;;;AAIN,QAAO"}

package/dist/src/config/runtime-overrides.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"runtime-overrides.js","names":[],"sources":["../../../src/config/runtime-overrides.ts"],"sourcesContent":["type OverrideTree = Record<string, unknown>;\n\nlet overrides: OverrideTree = {};\n\nexport function getConfigOverrides(): OverrideTree {\n  return overrides;\n}\n\nexport function resetConfigOverrides(): void {\n  overrides = {};\n}\n\nexport function setConfigOverride(path: string[], value: unknown): void {\n  let cursor: OverrideTree = overrides;\n  for (let i = 0; i < path.length - 1; i++) {\n    const key = path[i];\n    if (typeof cursor[key] !== 'object' || cursor[key] === null) cursor[key] = {};\n    cursor = cursor[key] as OverrideTree;\n  }\n  cursor[path[path.length - 1]] = value;\n}\n\nexport function unsetConfigOverride(path: string[]): void {\n  let cursor: OverrideTree = overrides;\n  for (let i = 0; i < path.length - 1; i++) {\n    const next = cursor[path[i]];\n    if (typeof next !== 'object' || next === null) return;\n    cursor = next as OverrideTree;\n  }\n  delete cursor[path[path.length - 1]];\n}\n\n/** Deep-merge overrides on top of base config (process lifetime only). */\nexport function applyConfigOverrides<T extends object>(base: T): T {\n  return deepMerge(base, overrides) as T;\n}\n\nfunction deepMerge(base: unknown, override: unknown): unknown {\n  if (\n    typeof base !== 'object' ||\n    base === null ||\n    typeof override !== 'object' ||\n    override === null\n  ) {\n    return override ?? base;\n  }\n  const result = { ...(base as Record<string, unknown>) };\n  for (const [key, value] of Object.entries(override as Record<string, unknown>)) {\n    result[key] = deepMerge(result[key], value);\n  }\n  return result;\n}\n"],"mappings":";AAEA,IAAI,YAA0B,EAAE;AAEhC,SAAgB,qBAAmC;AACjD,QAAO;;AAGT,SAAgB,uBAA6B;AAC3C,aAAY,EAAE;;AAGhB,SAAgB,kBAAkB,MAAgB,OAAsB;CACtE,IAAI,SAAuB;AAC3B,MAAK,IAAI,IAAI,GAAG,IAAI,KAAK,SAAS,GAAG,KAAK;EACxC,MAAM,MAAM,KAAK;AACjB,MAAI,OAAO,OAAO,SAAS,YAAY,OAAO,SAAS,KAAM,QAAO,OAAO,EAAE;AAC7E,WAAS,OAAO;;AAElB,QAAO,KAAK,KAAK,SAAS,MAAM;;AAGlC,SAAgB,oBAAoB,MAAsB;CACxD,IAAI,SAAuB;AAC3B,MAAK,IAAI,IAAI,GAAG,IAAI,KAAK,SAAS,GAAG,KAAK;EACxC,MAAM,OAAO,OAAO,KAAK;AACzB,MAAI,OAAO,SAAS,YAAY,SAAS,KAAM;AAC/C,WAAS;;AAEX,QAAO,OAAO,KAAK,KAAK,SAAS;;;AAInC,SAAgB,qBAAuC,MAAY;AACjE,QAAO,UAAU,MAAM,UAAU;;AAGnC,SAAS,UAAU,MAAe,UAA4B;AAC5D,KACE,OAAO,SAAS,YAChB,SAAS,QACT,OAAO,aAAa,YACpB,aAAa,KAEb,QAAO,YAAY;CAErB,MAAM,SAAS,EAAE,GAAI,MAAkC;AACvD,MAAK,MAAM,CAAC,KAAK,UAAU,OAAO,QAAQ,SAAoC,CAC5E,QAAO,OAAO,UAAU,OAAO,MAAM,MAAM;AAE7C,QAAO"}