@xopcai/xopc 0.0.149 → 0.0.151

package/dist/src/extensions/update.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"update.js","names":["marketplace.findExtension"],"sources":["../../../src/extensions/update.ts"],"sourcesContent":["/**\n * Post-update extension sync — refresh lockfile-managed npm / store extensions.\n */\n\nimport { existsSync, readFileSync, readdirSync, rmSync } from 'node:fs';\nimport { join } from 'node:path';\nimport semver from 'semver';\n\nimport {\n  downloadExtensionStoreZipBuffer,\n  resolveExtensionZipDownloadUrl,\n  resolveExtensionsStoreBaseUrl,\n  verifyStoreArtifactSha256,\n} from '../agent/skills/marketplace/adapters/store/store-api-client.js';\nimport type { Config } from '../config/schema.js';\nimport { resolveBundledExtensionsDir, resolveExtensionsDir } from '../config/paths.js';\nimport { loadConfig } from '../config/loader.js';\nimport type { UpdateChannel } from '../infra/update-channels.js';\nimport { createLogger } from '../utils/logger.js';\nimport {\n  installExtensionFromStoreZip,\n  installFromNpm,\n  type InstallResult,\n} from './install.js';\nimport {\n  getExtensionLockfileManager,\n  type ExtensionLockEntry,\n} from './lockfile.js';\nimport * as marketplace from './marketplace.js';\n\nconst log = createLogger('ExtensionUpdate');\n\nconst MANIFEST = 'xopc.extension.json';\n\nexport type ExtensionUpdateLogger = {\n  info?: (message: string) => void;\n  warn?: (message: string) => void;\n  error?: (message: string) => void;\n};\n\nexport type ExtensionUpdateStatus = 'updated' | 'unchanged' | 'skipped' | 'error';\n\nexport type ExtensionUpdateOutcome = {\n  extensionId: string;\n  status: ExtensionUpdateStatus;\n  message: string;\n  currentVersion?: string;\n  nextVersion?: string;\n};\n\nexport type ExtensionChannelSyncSummary = {\n  skippedBundled: string[];\n  warnings: string[];\n};\n\nexport type ExtensionPostUpdateResult = {\n  status: 'ok' | 'error' | 'skipped';\n  outcomes: ExtensionUpdateOutcome[];\n  channelSync?: ExtensionChannelSyncSummary;\n};\n\nfunction readInstalledExtensionVersion(targetDir: string, extensionId: string): string | undefined {\n  const manifestPath = join(targetDir, extensionId, MANIFEST);\n  if (!existsSync(manifestPath)) {\n    return undefined;\n  }\n  try {\n    const raw = JSON.parse(readFileSync(manifestPath, 'utf-8')) as { version?: string };\n    const version = typeof raw.version === 'string' ? semver.valid(raw.version) : null;\n    return version ?? undefined;\n  } catch {\n    return undefined;\n  }\n}\n\nasync function resolveNpmPackageForId(extensionId: string): Promise<string | undefined> {\n  const found = await marketplace.findExtension(extensionId);\n  return found?.npmPackage;\n}\n\nasync function upsertNpmExtensionLock(\n  lock: ReturnType<typeof getExtensionLockfileManager>,\n  targetDir: string,\n  result: InstallResult,\n  spec: string,\n): Promise<void> {\n  if (!result.extensionId) return;\n  const reg = await marketplace.findExtension(result.extensionId);\n  const resolved = reg?.npmPackage ?? spec;\n  let ver = reg?.version ?? '0.0.0';\n  try {\n    const raw = readFileSync(join(targetDir, result.extensionId, MANIFEST), 'utf-8');\n    const m = JSON.parse(raw) as { version?: string };\n    const mv = typeof m.version === 'string' ? semver.valid(m.version) : null;\n    if (mv) ver = mv;\n  } catch {\n    // keep registry / fallback version\n  }\n  await lock.upsert(result.extensionId, {\n    name: result.extensionId,\n    version: ver,\n    resolved,\n    source: 'npm',\n  });\n}\n\nasync function installExtensionFromStoreWithLock(params: {\n  storeBase: string;\n  packageName: string;\n  version?: string;\n  targetDir: string;\n  lock: ReturnType<typeof getExtensionLockfileManager>;\n}): Promise<{ ok: true; extensionId: string; version: string } | { ok: false; error: string }> {\n  try {\n    const { downloadUrl, version, sha256 } = await resolveExtensionZipDownloadUrl(\n      params.storeBase,\n      params.packageName,\n      params.version,\n    );\n    const buf = await downloadExtensionStoreZipBuffer(params.storeBase, downloadUrl);\n    verifyStoreArtifactSha256(buf, sha256);\n    const result = await installExtensionFromStoreZip(buf, params.targetDir);\n    if (!result.ok || !result.extensionId) {\n      return { ok: false, error: result.error ?? 'install failed' };\n    }\n    await params.lock.upsert(result.extensionId, {\n      name: result.extensionId,\n      version,\n      resolved: params.packageName,\n      source: 'store',\n    });\n    return { ok: true, extensionId: result.extensionId, version };\n  } catch (err) {\n    return { ok: false, error: err instanceof Error ? err.message : String(err) };\n  }\n}\n\nfunction listBundledExtensionIds(): Set<string> {\n  const ids = new Set<string>();\n  const bundledDir = resolveBundledExtensionsDir();\n  if (!bundledDir || !existsSync(bundledDir)) {\n    return ids;\n  }\n  for (const entry of readdirSync(bundledDir, { withFileTypes: true })) {\n    if (entry.isDirectory()) {\n      ids.add(entry.name);\n    }\n  }\n  return ids;\n}\n\nexport async function syncExtensionsForUpdateChannel(params: {\n  channel: UpdateChannel;\n  config?: Config;\n  logger?: ExtensionUpdateLogger;\n}): Promise<{ skipIds: Set<string>; summary: ExtensionChannelSyncSummary }> {\n  const logger = params.logger ?? {};\n  const summary: ExtensionChannelSyncSummary = {\n    skippedBundled: [],\n    warnings: [],\n  };\n  const skipIds = new Set<string>();\n\n  if (params.channel !== 'dev') {\n    return { skipIds, summary };\n  }\n\n  const lock = getExtensionLockfileManager();\n  const data = await lock.load();\n  const bundledIds = listBundledExtensionIds();\n\n  for (const extensionId of Object.keys(data.extensions)) {\n    if (!bundledIds.has(extensionId)) {\n      continue;\n    }\n    skipIds.add(extensionId);\n    summary.skippedBundled.push(extensionId);\n    logger.info?.(`Skipping \"${extensionId}\" on dev channel (bundled copy preferred).`);\n  }\n\n  return { skipIds, summary };\n}\n\nasync function updateSingleExtension(params: {\n  extensionId: string;\n  entry: ExtensionLockEntry;\n  targetDir: string;\n  storeBase: string;\n  lock: ReturnType<typeof getExtensionLockfileManager>;\n  timeoutMs?: number;\n  logger?: ExtensionUpdateLogger;\n}): Promise<ExtensionUpdateOutcome> {\n  const { extensionId, entry, targetDir, storeBase, lock, timeoutMs, logger } = params;\n  const currentVersion = readInstalledExtensionVersion(targetDir, extensionId);\n\n  if (entry.source === 'store') {\n    const pkgName = entry.resolved?.trim() || extensionId;\n    if (existsSync(join(targetDir, extensionId))) {\n      rmSync(join(targetDir, extensionId), { recursive: true, force: true });\n    }\n    const result = await installExtensionFromStoreWithLock({\n      storeBase,\n      packageName: pkgName,\n      targetDir,\n      lock,\n    });\n    if (result.ok === false) {\n      logger.error?.(`Failed to update ${extensionId}: ${result.error}`);\n      return {\n        extensionId,\n        status: 'error',\n        message: result.error,\n        currentVersion,\n      };\n    }\n    const nextVersion = result.version;\n    const status =\n      currentVersion && nextVersion && currentVersion === nextVersion ? 'unchanged' : 'updated';\n    return {\n      extensionId,\n      status,\n      currentVersion,\n      nextVersion,\n      message:\n        status === 'unchanged'\n          ? `${extensionId} is up to date (${currentVersion}).`\n          : `Updated ${extensionId}: ${currentVersion ?? 'unknown'} -> ${nextVersion}.`,\n    };\n  }\n\n  if (entry.source !== 'npm') {\n    return {\n      extensionId,\n      status: 'skipped',\n      message: `Skipping \"${extensionId}\" (source: ${entry.source}).`,\n    };\n  }\n\n  const spec = entry.resolved?.trim() || (await resolveNpmPackageForId(extensionId));\n  if (!spec) {\n    return {\n      extensionId,\n      status: 'skipped',\n      message: `Skipping \"${extensionId}\" (could not resolve npm package).`,\n    };\n  }\n\n  if (existsSync(join(targetDir, extensionId))) {\n    rmSync(join(targetDir, extensionId), { recursive: true, force: true });\n  }\n\n  const installResult = await installFromNpm(spec, targetDir, timeoutMs);\n  if (!installResult.ok) {\n    const message = installResult.error ?? 'npm install failed';\n    logger.error?.(`Failed to update ${extensionId}: ${message}`);\n    return {\n      extensionId,\n      status: 'error',\n      message,\n      currentVersion,\n    };\n  }\n\n  await upsertNpmExtensionLock(lock, targetDir, installResult, spec);\n  const nextVersion =\n    (installResult.extensionId\n      ? readInstalledExtensionVersion(targetDir, installResult.extensionId)\n      : undefined) ?? entry.version;\n  const resolvedId = installResult.extensionId ?? extensionId;\n  const status =\n    currentVersion && nextVersion && currentVersion === nextVersion ? 'unchanged' : 'updated';\n  return {\n    extensionId: resolvedId,\n    status,\n    currentVersion,\n    nextVersion,\n    message:\n      status === 'unchanged'\n        ? `${resolvedId} is up to date (${currentVersion}).`\n        : `Updated ${resolvedId}: ${currentVersion ?? 'unknown'} -> ${nextVersion}.`,\n  };\n}\n\nexport async function updateNpmInstalledExtensions(params: {\n  extensionIds?: string[];\n  skipIds?: Set<string>;\n  config?: Config;\n  timeoutMs?: number;\n  logger?: ExtensionUpdateLogger;\n}): Promise<{ outcomes: ExtensionUpdateOutcome[]; status: 'ok' | 'error' | 'skipped' }> {\n  const logger = params.logger ?? {};\n  const config = params.config ?? loadConfig();\n  const targetDir = resolveExtensionsDir();\n  const storeBase = resolveExtensionsStoreBaseUrl(config);\n  const lock = getExtensionLockfileManager();\n  const data = await lock.load();\n\n  const ids = params.extensionIds?.length\n    ? params.extensionIds\n    : Object.keys(data.extensions);\n\n  if (ids.length === 0) {\n    return { outcomes: [], status: 'skipped' };\n  }\n\n  const outcomes: ExtensionUpdateOutcome[] = [];\n  let hasError = false;\n\n  for (const extensionId of ids) {\n    if (params.skipIds?.has(extensionId)) {\n      outcomes.push({\n        extensionId,\n        status: 'skipped',\n        message: `Skipping \"${extensionId}\" (channel sync).`,\n      });\n      continue;\n    }\n\n    const entry = data.extensions[extensionId];\n    if (!entry) {\n      outcomes.push({\n        extensionId,\n        status: 'skipped',\n        message: `No lockfile entry for \"${extensionId}\".`,\n      });\n      continue;\n    }\n\n    const outcome = await updateSingleExtension({\n      extensionId,\n      entry,\n      targetDir,\n      storeBase,\n      lock,\n      timeoutMs: params.timeoutMs,\n      logger,\n    });\n    outcomes.push(outcome);\n    if (outcome.status === 'error') {\n      hasError = true;\n    } else if (outcome.status === 'updated') {\n      log.info(\n        { extensionId: outcome.extensionId, nextVersion: outcome.nextVersion },\n        outcome.message,\n      );\n    }\n  }\n\n  return { outcomes, status: hasError ? 'error' : 'ok' };\n}\n\nexport async function runPostUpdateExtensionSync(params: {\n  channel: UpdateChannel;\n  config?: Config;\n  timeoutMs?: number;\n  logger?: ExtensionUpdateLogger;\n}): Promise<ExtensionPostUpdateResult> {\n  const logger = params.logger ?? {\n    info: (message) => log.info(message),\n    warn: (message) => log.warn(message),\n    error: (message) => log.error(message),\n  };\n\n  const channelSyncResult = await syncExtensionsForUpdateChannel({\n    channel: params.channel,\n    config: params.config,\n    logger,\n  });\n\n  const updateResult = await updateNpmInstalledExtensions({\n    skipIds: channelSyncResult.skipIds,\n    config: params.config,\n    timeoutMs: params.timeoutMs,\n    logger,\n  });\n\n  return {\n    status: updateResult.status,\n    outcomes: updateResult.outcomes,\n    channelSync: channelSyncResult.summary,\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;YAeuF;aACtC;aAEC;AAYlD,MAAM,MAAM,aAAa,kBAAkB;AAE3C,MAAM,WAAW;AA6BjB,SAAS,8BAA8B,WAAmB,aAAyC;CACjG,MAAM,eAAe,KAAK,WAAW,aAAa,SAAS;AAC3D,KAAI,CAAC,WAAW,aAAa,CAC3B;AAEF,KAAI;EACF,MAAM,MAAM,KAAK,MAAM,aAAa,cAAc,QAAQ,CAAC;AAE3D,UADgB,OAAO,IAAI,YAAY,WAAW,OAAO,MAAM,IAAI,QAAQ,GAAG,SAC5D,KAAA;SACZ;AACN;;;AAIJ,eAAe,uBAAuB,aAAkD;AAEtF,SAAO,MADaA,cAA0B,YAAY,GAC5C;;AAGhB,eAAe,uBACb,MACA,WACA,QACA,MACe;AACf,KAAI,CAAC,OAAO,YAAa;CACzB,MAAM,MAAM,MAAMA,cAA0B,OAAO,YAAY;CAC/D,MAAM,WAAW,KAAK,cAAc;CACpC,IAAI,MAAM,KAAK,WAAW;AAC1B,KAAI;EACF,MAAM,MAAM,aAAa,KAAK,WAAW,OAAO,aAAa,SAAS,EAAE,QAAQ;EAChF,MAAM,IAAI,KAAK,MAAM,IAAI;EACzB,MAAM,KAAK,OAAO,EAAE,YAAY,WAAW,OAAO,MAAM,EAAE,QAAQ,GAAG;AACrE,MAAI,GAAI,OAAM;SACR;AAGR,OAAM,KAAK,OAAO,OAAO,aAAa;EACpC,MAAM,OAAO;EACb,SAAS;EACT;EACA,QAAQ;EACT,CAAC;;AAGJ,eAAe,kCAAkC,QAM8C;AAC7F,KAAI;EACF,MAAM,EAAE,aAAa,SAAS,WAAW,MAAM,+BAC7C,OAAO,WACP,OAAO,aACP,OAAO,QACR;EACD,MAAM,MAAM,MAAM,gCAAgC,OAAO,WAAW,YAAY;AAChF,4BAA0B,KAAK,OAAO;EACtC,MAAM,SAAS,MAAM,6BAA6B,KAAK,OAAO,UAAU;AACxE,MAAI,CAAC,OAAO,MAAM,CAAC,OAAO,YACxB,QAAO;GAAE,IAAI;GAAO,OAAO,OAAO,SAAS;GAAkB;AAE/D,QAAM,OAAO,KAAK,OAAO,OAAO,aAAa;GAC3C,MAAM,OAAO;GACb;GACA,UAAU,OAAO;GACjB,QAAQ;GACT,CAAC;AACF,SAAO;GAAE,IAAI;GAAM,aAAa,OAAO;GAAa;GAAS;UACtD,KAAK;AACZ,SAAO;GAAE,IAAI;GAAO,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;GAAE;;;AAIjF,SAAS,0BAAuC;CAC9C,MAAM,sBAAM,IAAI,KAAa;CAC7B,MAAM,aAAa,6BAA6B;AAChD,KAAI,CAAC,cAAc,CAAC,WAAW,WAAW,CACxC,QAAO;AAET,MAAK,MAAM,SAAS,YAAY,YAAY,EAAE,eAAe,MAAM,CAAC,CAClE,KAAI,MAAM,aAAa,CACrB,KAAI,IAAI,MAAM,KAAK;AAGvB,QAAO;;AAGT,eAAsB,+BAA+B,QAIuB;CAC1E,MAAM,SAAS,OAAO,UAAU,EAAE;CAClC,MAAM,UAAuC;EAC3C,gBAAgB,EAAE;EAClB,UAAU,EAAE;EACb;CACD,MAAM,0BAAU,IAAI,KAAa;AAEjC,KAAI,OAAO,YAAY,MACrB,QAAO;EAAE;EAAS;EAAS;CAI7B,MAAM,OAAO,MADA,6BACU,CAAC,MAAM;CAC9B,MAAM,aAAa,yBAAyB;AAE5C,MAAK,MAAM,eAAe,OAAO,KAAK,KAAK,WAAW,EAAE;AACtD,MAAI,CAAC,WAAW,IAAI,YAAY,CAC9B;AAEF,UAAQ,IAAI,YAAY;AACxB,UAAQ,eAAe,KAAK,YAAY;AACxC,SAAO,OAAO,aAAa,YAAY,4CAA4C;;AAGrF,QAAO;EAAE;EAAS;EAAS;;AAG7B,eAAe,sBAAsB,QAQD;CAClC,MAAM,EAAE,aAAa,OAAO,WAAW,WAAW,MAAM,WAAW,WAAW;CAC9E,MAAM,iBAAiB,8BAA8B,WAAW,YAAY;AAE5E,KAAI,MAAM,WAAW,SAAS;EAC5B,MAAM,UAAU,MAAM,UAAU,MAAM,IAAI;AAC1C,MAAI,WAAW,KAAK,WAAW,YAAY,CAAC,CAC1C,QAAO,KAAK,WAAW,YAAY,EAAE;GAAE,WAAW;GAAM,OAAO;GAAM,CAAC;EAExE,MAAM,SAAS,MAAM,kCAAkC;GACrD;GACA,aAAa;GACb;GACA;GACD,CAAC;AACF,MAAI,OAAO,OAAO,OAAO;AACvB,UAAO,QAAQ,oBAAoB,YAAY,IAAI,OAAO,QAAQ;AAClE,UAAO;IACL;IACA,QAAQ;IACR,SAAS,OAAO;IAChB;IACD;;EAEH,MAAM,cAAc,OAAO;EAC3B,MAAM,SACJ,kBAAkB,eAAe,mBAAmB,cAAc,cAAc;AAClF,SAAO;GACL;GACA;GACA;GACA;GACA,SACE,WAAW,cACP,GAAG,YAAY,kBAAkB,eAAe,MAChD,WAAW,YAAY,IAAI,kBAAkB,UAAU,MAAM,YAAY;GAChF;;AAGH,KAAI,MAAM,WAAW,MACnB,QAAO;EACL;EACA,QAAQ;EACR,SAAS,aAAa,YAAY,aAAa,MAAM,OAAO;EAC7D;CAGH,MAAM,OAAO,MAAM,UAAU,MAAM,IAAK,MAAM,uBAAuB,YAAY;AACjF,KAAI,CAAC,KACH,QAAO;EACL;EACA,QAAQ;EACR,SAAS,aAAa,YAAY;EACnC;AAGH,KAAI,WAAW,KAAK,WAAW,YAAY,CAAC,CAC1C,QAAO,KAAK,WAAW,YAAY,EAAE;EAAE,WAAW;EAAM,OAAO;EAAM,CAAC;CAGxE,MAAM,gBAAgB,MAAM,eAAe,MAAM,WAAW,UAAU;AACtE,KAAI,CAAC,cAAc,IAAI;EACrB,MAAM,UAAU,cAAc,SAAS;AACvC,SAAO,QAAQ,oBAAoB,YAAY,IAAI,UAAU;AAC7D,SAAO;GACL;GACA,QAAQ;GACR;GACA;GACD;;AAGH,OAAM,uBAAuB,MAAM,WAAW,eAAe,KAAK;CAClE,MAAM,eACH,cAAc,cACX,8BAA8B,WAAW,cAAc,YAAY,GACnE,KAAA,MAAc,MAAM;CAC1B,MAAM,aAAa,cAAc,eAAe;CAChD,MAAM,SACJ,kBAAkB,eAAe,mBAAmB,cAAc,cAAc;AAClF,QAAO;EACL,aAAa;EACb;EACA;EACA;EACA,SACE,WAAW,cACP,GAAG,WAAW,kBAAkB,eAAe,MAC/C,WAAW,WAAW,IAAI,kBAAkB,UAAU,MAAM,YAAY;EAC/E;;AAGH,eAAsB,6BAA6B,QAMqC;CACtF,MAAM,SAAS,OAAO,UAAU,EAAE;CAClC,MAAM,SAAS,OAAO,UAAU,YAAY;CAC5C,MAAM,YAAY,sBAAsB;CACxC,MAAM,YAAY,8BAA8B,OAAO;CACvD,MAAM,OAAO,6BAA6B;CAC1C,MAAM,OAAO,MAAM,KAAK,MAAM;CAE9B,MAAM,MAAM,OAAO,cAAc,SAC7B,OAAO,eACP,OAAO,KAAK,KAAK,WAAW;AAEhC,KAAI,IAAI,WAAW,EACjB,QAAO;EAAE,UAAU,EAAE;EAAE,QAAQ;EAAW;CAG5C,MAAM,WAAqC,EAAE;CAC7C,IAAI,WAAW;AAEf,MAAK,MAAM,eAAe,KAAK;AAC7B,MAAI,OAAO,SAAS,IAAI,YAAY,EAAE;AACpC,YAAS,KAAK;IACZ;IACA,QAAQ;IACR,SAAS,aAAa,YAAY;IACnC,CAAC;AACF;;EAGF,MAAM,QAAQ,KAAK,WAAW;AAC9B,MAAI,CAAC,OAAO;AACV,YAAS,KAAK;IACZ;IACA,QAAQ;IACR,SAAS,0BAA0B,YAAY;IAChD,CAAC;AACF;;EAGF,MAAM,UAAU,MAAM,sBAAsB;GAC1C;GACA;GACA;GACA;GACA;GACA,WAAW,OAAO;GAClB;GACD,CAAC;AACF,WAAS,KAAK,QAAQ;AACtB,MAAI,QAAQ,WAAW,QACrB,YAAW;WACF,QAAQ,WAAW,UAC5B,KAAI,KACF;GAAE,aAAa,QAAQ;GAAa,aAAa,QAAQ;GAAa,EACtE,QAAQ,QACT;;AAIL,QAAO;EAAE;EAAU,QAAQ,WAAW,UAAU;EAAM;;AAGxD,eAAsB,2BAA2B,QAKV;CACrC,MAAM,SAAS,OAAO,UAAU;EAC9B,OAAO,YAAY,IAAI,KAAK,QAAQ;EACpC,OAAO,YAAY,IAAI,KAAK,QAAQ;EACpC,QAAQ,YAAY,IAAI,MAAM,QAAQ;EACvC;CAED,MAAM,oBAAoB,MAAM,+BAA+B;EAC7D,SAAS,OAAO;EAChB,QAAQ,OAAO;EACf;EACD,CAAC;CAEF,MAAM,eAAe,MAAM,6BAA6B;EACtD,SAAS,kBAAkB;EAC3B,QAAQ,OAAO;EACf,WAAW,OAAO;EAClB;EACD,CAAC;AAEF,QAAO;EACL,QAAQ,aAAa;EACrB,UAAU,aAAa;EACvB,aAAa,kBAAkB;EAChC"}

package/dist/src/extensions/when-context.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"when-context.js","names":[],"sources":["../../../src/extensions/when-context.ts"],"sourcesContent":["import type { Config as SurfaceConfig } from '../config/config-surface.js';\nimport { getAllProviders, isProviderConfiguredSync } from '../providers/index.js';\nimport type { ExtensionLoader } from './loader.js';\n\n/**\n * Flat payload for `GET /api/context` and client-side `when` evaluation.\n */\nexport function buildWhenContextSnapshot(\n  config: SurfaceConfig,\n  loader: ExtensionLoader | null,\n): Record<string, unknown> {\n  const out: Record<string, unknown> = {\n    platform: process.platform,\n    isElectron: Boolean(process.versions.electron),\n    gatewayAuthenticated: true,\n    sessionActive: false,\n    agentRunning: false,\n  };\n  for (const p of getAllProviders()) {\n    out[`hasProvider.${p}`] = isProviderConfiguredSync(p);\n  }\n  const channels = config.channels;\n  if (channels && typeof channels === 'object') {\n    for (const [id, raw] of Object.entries(channels)) {\n      if (raw && typeof raw === 'object' && raw !== null && 'enabled' in raw) {\n        out[`hasChannel.${id}`] = (raw as { enabled?: boolean }).enabled === true;\n      } else {\n        out[`hasChannel.${id}`] = Boolean(raw);\n      }\n    }\n  }\n  if (loader) {\n    try {\n      loader.setConfig(config);\n      for (const ext of loader.discoverExtensions()) {\n        out[`extensionEnabled.${ext.id}`] = true;\n      }\n    } catch {\n      /* non-fatal for context snapshot */\n    }\n  }\n  return out;\n}\n"],"mappings":";;gBACkF;;;;AAMlF,SAAgB,yBACd,QACA,QACyB;CACzB,MAAM,MAA+B;EACnC,UAAU,QAAQ;EAClB,YAAY,QAAQ,QAAQ,SAAS,SAAS;EAC9C,sBAAsB;EACtB,eAAe;EACf,cAAc;EACf;AACD,MAAK,MAAM,KAAK,iBAAiB,CAC/B,KAAI,eAAe,OAAO,yBAAyB,EAAE;CAEvD,MAAM,WAAW,OAAO;AACxB,KAAI,YAAY,OAAO,aAAa,SAClC,MAAK,MAAM,CAAC,IAAI,QAAQ,OAAO,QAAQ,SAAS,CAC9C,KAAI,OAAO,OAAO,QAAQ,YAAY,QAAQ,QAAQ,aAAa,IACjE,KAAI,cAAc,QAAS,IAA8B,YAAY;KAErE,KAAI,cAAc,QAAQ,QAAQ,IAAI;AAI5C,KAAI,OACF,KAAI;AACF,SAAO,UAAU,OAAO;AACxB,OAAK,MAAM,OAAO,OAAO,oBAAoB,CAC3C,KAAI,oBAAoB,IAAI,QAAQ;SAEhC;AAIV,QAAO"}

package/dist/src/extensions/when-expression.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"when-expression.js","names":[],"sources":["../../../src/extensions/when-expression.ts"],"sourcesContent":["/**\n * Boolean when-expressions for extension UI contributions (Phase 2).\n * Grammar: expression := term (('&&' | '||') term)*; term := '!' term | atom;\n * atom := variable (('==' | '!=') literal)? | '(' expression ')'\n */\n\nexport type WhenContext = Record<string, unknown>;\n\ntype Tok =\n  | { k: 'AND' }\n  | { k: 'OR' }\n  | { k: 'NOT' }\n  | { k: 'EQ' }\n  | { k: 'NE' }\n  | { k: 'LP' }\n  | { k: 'RP' }\n  | { k: 'IDENT'; v: string }\n  | { k: 'STR'; v: string }\n  | { k: 'NUM'; v: number }\n  | { k: 'BOOL'; v: boolean }\n  | { k: 'EOF' };\n\nfunction tokenize(input: string): Tok[] {\n  const out: Tok[] = [];\n  let i = 0;\n  const s = input.trim();\n  while (i < s.length) {\n    const c = s[i]!;\n    if (/\\s/.test(c)) {\n      i++;\n      continue;\n    }\n    if (s.slice(i, i + 2) === '&&') {\n      out.push({ k: 'AND' });\n      i += 2;\n      continue;\n    }\n    if (s.slice(i, i + 2) === '||') {\n      out.push({ k: 'OR' });\n      i += 2;\n      continue;\n    }\n    if (s.slice(i, i + 2) === '==') {\n      out.push({ k: 'EQ' });\n      i += 2;\n      continue;\n    }\n    if (s.slice(i, i + 2) === '!=') {\n      out.push({ k: 'NE' });\n      i += 2;\n      continue;\n    }\n    if (c === '(') {\n      out.push({ k: 'LP' });\n      i++;\n      continue;\n    }\n    if (c === ')') {\n      out.push({ k: 'RP' });\n      i++;\n      continue;\n    }\n    if (c === '!') {\n      out.push({ k: 'NOT' });\n      i++;\n      continue;\n    }\n    if (c === \"'\" || c === '\"') {\n      const q = c;\n      i++;\n      let buf = '';\n      while (i < s.length) {\n        const ch = s[i]!;\n        if (ch === '\\\\' && i + 1 < s.length) {\n          buf += s[i + 1]!;\n          i += 2;\n          continue;\n        }\n        if (ch === q) {\n          i++;\n          break;\n        }\n        buf += ch;\n        i++;\n      }\n      out.push({ k: 'STR', v: buf });\n      continue;\n    }\n    if (/[0-9]/.test(c) || (c === '-' && i + 1 < s.length && /[0-9]/.test(s[i + 1]!))) {\n      let j = i + 1;\n      while (j < s.length && /[0-9.]/.test(s[j]!)) j++;\n      const n = Number(s.slice(i, j));\n      out.push({ k: 'NUM', v: Number.isFinite(n) ? n : 0 });\n      i = j;\n      continue;\n    }\n    if (/[a-zA-Z_]/.test(c)) {\n      let j = i + 1;\n      while (j < s.length && /[a-zA-Z0-9_.]/.test(s[j]!)) j++;\n      const word = s.slice(i, j);\n      i = j;\n      if (word === 'true') out.push({ k: 'BOOL', v: true });\n      else if (word === 'false') out.push({ k: 'BOOL', v: false });\n      else out.push({ k: 'IDENT', v: word });\n      continue;\n    }\n    throw new Error(`Unexpected character in when-expression at ${i}: ${c}`);\n  }\n  out.push({ k: 'EOF' });\n  return out;\n}\n\nfunction ctxLookup(ctx: WhenContext, key: string): unknown {\n  if (key in ctx) return ctx[key];\n  return undefined;\n}\n\nclass Parser {\n  private i = 0;\n  constructor(\n    private readonly toks: Tok[],\n    private readonly ctx: WhenContext,\n  ) {}\n\n  parse(): boolean {\n    const v = this.parseOr();\n    const tail = this.cur();\n    if (tail.k !== 'EOF') {\n      throw new Error(\n        `Unexpected tokens after expression (at ${this.i}: ${tail.k}${'v' in tail ? ` ${(tail as { v: unknown }).v}` : ''})`,\n      );\n    }\n    return v;\n  }\n\n  private cur(): Tok {\n    return this.toks[this.i] ?? { k: 'EOF' };\n  }\n\n  private parseOr(): boolean {\n    let v = this.parseAnd();\n    while (this.cur().k === 'OR') {\n      this.i++;\n      const rhs = this.parseAnd();\n      v = v || rhs;\n    }\n    return v;\n  }\n\n  private parseAnd(): boolean {\n    let v = this.parseUnary();\n    while (this.cur().k === 'AND') {\n      this.i++;\n      const rhs = this.parseUnary();\n      v = v && rhs;\n    }\n    return v;\n  }\n\n  private parseUnary(): boolean {\n    if (this.cur().k === 'NOT') {\n      this.i++;\n      return !this.parseUnary();\n    }\n    return this.parsePrimary();\n  }\n\n  private parsePrimary(): boolean {\n    const t = this.cur();\n    if (t.k === 'LP') {\n      this.i++;\n      const inner = this.parseOr();\n      if (this.cur().k !== 'RP') throw new Error('Expected )');\n      this.i++;\n      return inner;\n    }\n    return this.parseAtom();\n  }\n\n  private parseAtom(): boolean {\n    const left = this.readAtomValue();\n    const op = this.cur();\n    if (op.k === 'EQ' || op.k === 'NE') {\n      this.i++;\n      const right = this.readAtomValue();\n      const eq = valuesLooselyEqual(left, right);\n      return op.k === 'EQ' ? eq : !eq;\n    }\n    return isTruthyWhen(left);\n  }\n\n  private readAtomValue(): unknown {\n    const t = this.cur();\n    if (t.k === 'IDENT') {\n      this.i++;\n      return ctxLookup(this.ctx, t.v);\n    }\n    if (t.k === 'STR') {\n      this.i++;\n      return t.v;\n    }\n    if (t.k === 'NUM') {\n      this.i++;\n      return t.v;\n    }\n    if (t.k === 'BOOL') {\n      this.i++;\n      return t.v;\n    }\n    throw new Error('Expected value in when-expression');\n  }\n}\n\nfunction valuesLooselyEqual(a: unknown, b: unknown): boolean {\n  if (a === b) return true;\n  if (a == null || b == null) return a === b;\n  if (typeof a === 'boolean' || typeof b === 'boolean') return Boolean(a) === Boolean(b);\n  if (typeof a === 'number' && typeof b === 'number') return a === b;\n  return String(a) === String(b);\n}\n\nfunction isTruthyWhen(v: unknown): boolean {\n  if (typeof v === 'boolean') return v;\n  if (typeof v === 'number') return v !== 0;\n  if (typeof v === 'string') return v.length > 0;\n  return v != null;\n}\n\n/**\n * Evaluate a when-expression string against a flat context object.\n * Unknown variables are treated as falsey for boolean tests; missing keys are undefined.\n */\nexport function evaluateWhenExpression(expr: string, ctx: WhenContext): boolean {\n  const s = expr.trim();\n  if (!s) return true;\n  const toks = tokenize(s);\n  return new Parser(toks, ctx).parse();\n}\n"],"mappings":";AAsBA,SAAS,SAAS,OAAsB;CACtC,MAAM,MAAa,EAAE;CACrB,IAAI,IAAI;CACR,MAAM,IAAI,MAAM,MAAM;AACtB,QAAO,IAAI,EAAE,QAAQ;EACnB,MAAM,IAAI,EAAE;AACZ,MAAI,KAAK,KAAK,EAAE,EAAE;AAChB;AACA;;AAEF,MAAI,EAAE,MAAM,GAAG,IAAI,EAAE,KAAK,MAAM;AAC9B,OAAI,KAAK,EAAE,GAAG,OAAO,CAAC;AACtB,QAAK;AACL;;AAEF,MAAI,EAAE,MAAM,GAAG,IAAI,EAAE,KAAK,MAAM;AAC9B,OAAI,KAAK,EAAE,GAAG,MAAM,CAAC;AACrB,QAAK;AACL;;AAEF,MAAI,EAAE,MAAM,GAAG,IAAI,EAAE,KAAK,MAAM;AAC9B,OAAI,KAAK,EAAE,GAAG,MAAM,CAAC;AACrB,QAAK;AACL;;AAEF,MAAI,EAAE,MAAM,GAAG,IAAI,EAAE,KAAK,MAAM;AAC9B,OAAI,KAAK,EAAE,GAAG,MAAM,CAAC;AACrB,QAAK;AACL;;AAEF,MAAI,MAAM,KAAK;AACb,OAAI,KAAK,EAAE,GAAG,MAAM,CAAC;AACrB;AACA;;AAEF,MAAI,MAAM,KAAK;AACb,OAAI,KAAK,EAAE,GAAG,MAAM,CAAC;AACrB;AACA;;AAEF,MAAI,MAAM,KAAK;AACb,OAAI,KAAK,EAAE,GAAG,OAAO,CAAC;AACtB;AACA;;AAEF,MAAI,MAAM,OAAO,MAAM,MAAK;GAC1B,MAAM,IAAI;AACV;GACA,IAAI,MAAM;AACV,UAAO,IAAI,EAAE,QAAQ;IACnB,MAAM,KAAK,EAAE;AACb,QAAI,OAAO,QAAQ,IAAI,IAAI,EAAE,QAAQ;AACnC,YAAO,EAAE,IAAI;AACb,UAAK;AACL;;AAEF,QAAI,OAAO,GAAG;AACZ;AACA;;AAEF,WAAO;AACP;;AAEF,OAAI,KAAK;IAAE,GAAG;IAAO,GAAG;IAAK,CAAC;AAC9B;;AAEF,MAAI,QAAQ,KAAK,EAAE,IAAK,MAAM,OAAO,IAAI,IAAI,EAAE,UAAU,QAAQ,KAAK,EAAE,IAAI,GAAI,EAAG;GACjF,IAAI,IAAI,IAAI;AACZ,UAAO,IAAI,EAAE,UAAU,SAAS,KAAK,EAAE,GAAI,CAAE;GAC7C,MAAM,IAAI,OAAO,EAAE,MAAM,GAAG,EAAE,CAAC;AAC/B,OAAI,KAAK;IAAE,GAAG;IAAO,GAAG,OAAO,SAAS,EAAE,GAAG,IAAI;IAAG,CAAC;AACrD,OAAI;AACJ;;AAEF,MAAI,YAAY,KAAK,EAAE,EAAE;GACvB,IAAI,IAAI,IAAI;AACZ,UAAO,IAAI,EAAE,UAAU,gBAAgB,KAAK,EAAE,GAAI,CAAE;GACpD,MAAM,OAAO,EAAE,MAAM,GAAG,EAAE;AAC1B,OAAI;AACJ,OAAI,SAAS,OAAQ,KAAI,KAAK;IAAE,GAAG;IAAQ,GAAG;IAAM,CAAC;YAC5C,SAAS,QAAS,KAAI,KAAK;IAAE,GAAG;IAAQ,GAAG;IAAO,CAAC;OACvD,KAAI,KAAK;IAAE,GAAG;IAAS,GAAG;IAAM,CAAC;AACtC;;AAEF,QAAM,IAAI,MAAM,8CAA8C,EAAE,IAAI,IAAI;;AAE1E,KAAI,KAAK,EAAE,GAAG,OAAO,CAAC;AACtB,QAAO;;AAGT,SAAS,UAAU,KAAkB,KAAsB;AACzD,KAAI,OAAO,IAAK,QAAO,IAAI;;AAI7B,IAAM,SAAN,MAAa;CACX,IAAY;CACZ,YACE,MACA,KACA;AAFiB,OAAA,OAAA;AACA,OAAA,MAAA;;CAGnB,QAAiB;EACf,MAAM,IAAI,KAAK,SAAS;EACxB,MAAM,OAAO,KAAK,KAAK;AACvB,MAAI,KAAK,MAAM,MACb,OAAM,IAAI,MACR,0CAA0C,KAAK,EAAE,IAAI,KAAK,IAAI,OAAO,OAAO,IAAK,KAAwB,MAAM,GAAG,GACnH;AAEH,SAAO;;CAGT,MAAmB;AACjB,SAAO,KAAK,KAAK,KAAK,MAAM,EAAE,GAAG,OAAO;;CAG1C,UAA2B;EACzB,IAAI,IAAI,KAAK,UAAU;AACvB,SAAO,KAAK,KAAK,CAAC,MAAM,MAAM;AAC5B,QAAK;GACL,MAAM,MAAM,KAAK,UAAU;AAC3B,OAAI,KAAK;;AAEX,SAAO;;CAGT,WAA4B;EAC1B,IAAI,IAAI,KAAK,YAAY;AACzB,SAAO,KAAK,KAAK,CAAC,MAAM,OAAO;AAC7B,QAAK;GACL,MAAM,MAAM,KAAK,YAAY;AAC7B,OAAI,KAAK;;AAEX,SAAO;;CAGT,aAA8B;AAC5B,MAAI,KAAK,KAAK,CAAC,MAAM,OAAO;AAC1B,QAAK;AACL,UAAO,CAAC,KAAK,YAAY;;AAE3B,SAAO,KAAK,cAAc;;CAG5B,eAAgC;AAE9B,MADU,KAAK,KACV,CAAC,MAAM,MAAM;AAChB,QAAK;GACL,MAAM,QAAQ,KAAK,SAAS;AAC5B,OAAI,KAAK,KAAK,CAAC,MAAM,KAAM,OAAM,IAAI,MAAM,aAAa;AACxD,QAAK;AACL,UAAO;;AAET,SAAO,KAAK,WAAW;;CAGzB,YAA6B;EAC3B,MAAM,OAAO,KAAK,eAAe;EACjC,MAAM,KAAK,KAAK,KAAK;AACrB,MAAI,GAAG,MAAM,QAAQ,GAAG,MAAM,MAAM;AAClC,QAAK;GAEL,MAAM,KAAK,mBAAmB,MADhB,KAAK,eACsB,CAAC;AAC1C,UAAO,GAAG,MAAM,OAAO,KAAK,CAAC;;AAE/B,SAAO,aAAa,KAAK;;CAG3B,gBAAiC;EAC/B,MAAM,IAAI,KAAK,KAAK;AACpB,MAAI,EAAE,MAAM,SAAS;AACnB,QAAK;AACL,UAAO,UAAU,KAAK,KAAK,EAAE,EAAE;;AAEjC,MAAI,EAAE,MAAM,OAAO;AACjB,QAAK;AACL,UAAO,EAAE;;AAEX,MAAI,EAAE,MAAM,OAAO;AACjB,QAAK;AACL,UAAO,EAAE;;AAEX,MAAI,EAAE,MAAM,QAAQ;AAClB,QAAK;AACL,UAAO,EAAE;;AAEX,QAAM,IAAI,MAAM,oCAAoC;;;AAIxD,SAAS,mBAAmB,GAAY,GAAqB;AAC3D,KAAI,MAAM,EAAG,QAAO;AACpB,KAAI,KAAK,QAAQ,KAAK,KAAM,QAAO,MAAM;AACzC,KAAI,OAAO,MAAM,aAAa,OAAO,MAAM,UAAW,QAAO,QAAQ,EAAE,KAAK,QAAQ,EAAE;AACtF,KAAI,OAAO,MAAM,YAAY,OAAO,MAAM,SAAU,QAAO,MAAM;AACjE,QAAO,OAAO,EAAE,KAAK,OAAO,EAAE;;AAGhC,SAAS,aAAa,GAAqB;AACzC,KAAI,OAAO,MAAM,UAAW,QAAO;AACnC,KAAI,OAAO,MAAM,SAAU,QAAO,MAAM;AACxC,KAAI,OAAO,MAAM,SAAU,QAAO,EAAE,SAAS;AAC7C,QAAO,KAAK;;;;;;AAOd,SAAgB,uBAAuB,MAAc,KAA2B;CAC9E,MAAM,IAAI,KAAK,MAAM;AACrB,KAAI,CAAC,EAAG,QAAO;AAEf,QAAO,IAAI,OADE,SAAS,EACA,EAAE,IAAI,CAAC,OAAO"}

package/dist/src/gateway/agent-builtin-tools.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"agent-builtin-tools.js","names":[],"sources":["../../../src/gateway/agent-builtin-tools.ts"],"sourcesContent":["/**\n * Built-in agent tool `name` values for gateway admin UI (disable toggles).\n * Extension tools are not listed; users can still add arbitrary strings in config.\n */\nexport const GATEWAY_BUILTIN_TOOL_IDS = [\n  'code_search',\n  'code_read_symbol',\n  'code_trace',\n  'code_impact',\n  'code_architecture',\n  'read_file',\n  'write_file',\n  'apply_patch',\n  'list_dir',\n  'grep',\n  'find',\n  'exec_command',\n  'update_plan',\n  'session_status',\n  'dreaming',\n  'tool_manual',\n  'clarify',\n  'todo',\n  'skills_list',\n  'skill_view',\n  'skill_manage',\n  'web_search',\n  'web_fetch',\n  'web_extract',\n  'send_message',\n  'send_media',\n  'read_media',\n  'create_share',\n  'text_to_speech',\n  'memory_search',\n  'memory_get',\n  'curated_memory',\n  'session_search',\n  'automation',\n  'workflow',\n  'delegate_task',\n  'execute_code',\n  'image',\n  'image_generate',\n  'create_desktop_pet',\n  'browser_use',\n  'extensions',\n  'bundle-mcp',\n] as const;\n\nexport type GatewayBuiltinToolId = (typeof GATEWAY_BUILTIN_TOOL_IDS)[number];\n"],"mappings":";;;;;AAIA,MAAa,2BAA2B;CACtC;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACD"}

package/dist/src/gateway/agent-run-relay.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"agent-run-relay.js","names":[],"sources":["../../../src/gateway/agent-run-relay.ts"],"sourcesContent":["/**\n * Multicast buffer for a single web agent run so multiple HTTP SSE consumers can\n * attach (initial POST /api/agent and later POST /api/agent/resume) while one\n * background pump drains processDirectStreaming.\n */\n\nimport { createLogger } from '../utils/logger.js';\n\nconst log = createLogger('Gateway:AgentRunRelay');\n\nexport type RelayEvent = { type: string } & Record<string, unknown>;\n\ntype RunState = {\n  sessionKey: string;\n  events: RelayEvent[];\n  nextSeq: number;\n  done: boolean;\n  waiters: Array<() => void>;\n  cleanupTimer?: ReturnType<typeof setTimeout>;\n};\n\nconst COMPLETE_TTL_MS = 5 * 60_000;\nconst MAX_EVENTS = 8000;\n\nexport class AgentRunRelay {\n  private runs = new Map<string, RunState>();\n\n  ensureRun(runId: string, sessionKey: string): void {\n    if (this.runs.has(runId)) return;\n    this.runs.set(runId, { sessionKey, events: [], nextSeq: 1, done: false, waiters: [] });\n  }\n\n  getSessionKey(runId: string): string | undefined {\n    return this.runs.get(runId)?.sessionKey;\n  }\n\n  hasRun(runId: string): boolean {\n    return this.runs.has(runId);\n  }\n\n  publish(runId: string, event: RelayEvent): RelayEvent | undefined {\n    const state = this.runs.get(runId);\n    if (!state) return undefined;\n    const relayed = {\n      ...event,\n      runId,\n      seq: state.nextSeq++,\n    };\n    if (state.events.length >= MAX_EVENTS) {\n      log.warn(\n        { runId, max: MAX_EVENTS, droppedType: relayed.type },\n        'Relay buffer full; dropping event (resume may miss tool_end/tokens)',\n      );\n    } else {\n      state.events.push(relayed);\n    }\n    const waiters = state.waiters.splice(0);\n    for (const w of waiters) w();\n    return relayed;\n  }\n\n  complete(runId: string): void {\n    const state = this.runs.get(runId);\n    if (!state) return;\n    state.done = true;\n    const waiters = state.waiters.splice(0);\n    for (const w of waiters) w();\n    if (state.cleanupTimer) clearTimeout(state.cleanupTimer);\n    state.cleanupTimer = setTimeout(() => {\n      this.runs.delete(runId);\n    }, COMPLETE_TTL_MS);\n  }\n\n  async *subscribe(runId: string): AsyncGenerator<RelayEvent> {\n    const state = this.runs.get(runId);\n    if (!state) {\n      throw new Error('UNKNOWN_RUN');\n    }\n    let cursor = 0;\n    while (true) {\n      while (cursor < state.events.length) {\n        yield state.events[cursor++];\n      }\n      if (state.done) break;\n      await new Promise<void>((resolve) => {\n        state.waiters.push(resolve);\n      });\n    }\n  }\n}\n"],"mappings":";;;aAMkD;AAElD,MAAM,MAAM,aAAa,wBAAwB;AAajD,MAAM,kBAAkB,IAAI;AAC5B,MAAM,aAAa;AAEnB,IAAa,gBAAb,MAA2B;CACzB,uBAAe,IAAI,KAAuB;CAE1C,UAAU,OAAe,YAA0B;AACjD,MAAI,KAAK,KAAK,IAAI,MAAM,CAAE;AAC1B,OAAK,KAAK,IAAI,OAAO;GAAE;GAAY,QAAQ,EAAE;GAAE,SAAS;GAAG,MAAM;GAAO,SAAS,EAAE;GAAE,CAAC;;CAGxF,cAAc,OAAmC;AAC/C,SAAO,KAAK,KAAK,IAAI,MAAM,EAAE;;CAG/B,OAAO,OAAwB;AAC7B,SAAO,KAAK,KAAK,IAAI,MAAM;;CAG7B,QAAQ,OAAe,OAA2C;EAChE,MAAM,QAAQ,KAAK,KAAK,IAAI,MAAM;AAClC,MAAI,CAAC,MAAO,QAAO,KAAA;EACnB,MAAM,UAAU;GACd,GAAG;GACH;GACA,KAAK,MAAM;GACZ;AACD,MAAI,MAAM,OAAO,UAAU,WACzB,KAAI,KACF;GAAE;GAAO,KAAK;GAAY,aAAa,QAAQ;GAAM,EACrD,sEACD;MAED,OAAM,OAAO,KAAK,QAAQ;EAE5B,MAAM,UAAU,MAAM,QAAQ,OAAO,EAAE;AACvC,OAAK,MAAM,KAAK,QAAS,IAAG;AAC5B,SAAO;;CAGT,SAAS,OAAqB;EAC5B,MAAM,QAAQ,KAAK,KAAK,IAAI,MAAM;AAClC,MAAI,CAAC,MAAO;AACZ,QAAM,OAAO;EACb,MAAM,UAAU,MAAM,QAAQ,OAAO,EAAE;AACvC,OAAK,MAAM,KAAK,QAAS,IAAG;AAC5B,MAAI,MAAM,aAAc,cAAa,MAAM,aAAa;AACxD,QAAM,eAAe,iBAAiB;AACpC,QAAK,KAAK,OAAO,MAAM;KACtB,gBAAgB;;CAGrB,OAAO,UAAU,OAA2C;EAC1D,MAAM,QAAQ,KAAK,KAAK,IAAI,MAAM;AAClC,MAAI,CAAC,MACH,OAAM,IAAI,MAAM,cAAc;EAEhC,IAAI,SAAS;AACb,SAAO,MAAM;AACX,UAAO,SAAS,MAAM,OAAO,OAC3B,OAAM,MAAM,OAAO;AAErB,OAAI,MAAM,KAAM;AAChB,SAAM,IAAI,SAAe,YAAY;AACnC,UAAM,QAAQ,KAAK,QAAQ;KAC3B"}

package/dist/src/gateway/agents-admin.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"agents-admin.js","names":["pathResolve"],"sources":["../../../src/gateway/agents-admin.ts"],"sourcesContent":["/**\n * Gateway REST helpers for multi-agent management.\n */\n\nimport { cp, mkdir, readdir, readFile, realpath, stat, unlink, writeFile } from 'node:fs/promises';\nimport { dirname, join, resolve as pathResolve } from 'node:path';\n\nimport {\n  listAgentEntries,\n  normalizeAgentId,\n  resolveAgentDir,\n  resolveAgentProfileDir,\n  resolveAgentWorkspaceDir,\n  resolveDefaultAgentId,\n  resolveUserPath,\n  validateAgentIdForNewAgent,\n} from '../agent/agent-scope.js';\nimport {\n  AGENT_PROFILE_MARKDOWN_SYSTEM_FILES,\n  REQUIRED_AGENT_PROFILE_MARKDOWN_FILE_SET,\n} from '../agent/context/workspace.js';\nimport { seedAgentProfileMarkdownFiles } from '../agent/context/workspace-seed.js';\nimport {\n  resolveEffectiveAgentManifest,\n  type ResolveManifestResult,\n} from '../agent-manifest/resolver.js';\nimport {\n  applyAgentConfig,\n  findAgentEntryIndex,\n  getAgentDeleteBlocker,\n  pruneAgentConfig,\n  removeAgentDirsFromDisk,\n} from '../commands/agents.config.js';\nimport type { AgentModelsConfig, Config } from '../config/schema.js';\nimport { resolveUserProfilePath, WORKSPACE_FILES } from '../config/paths.js';\nimport { resolveEffectiveAgentProfile } from '../config/agent-profile.js';\nimport type { AgentTypedModel } from '../config/schema.js';\nimport { resolveEffectiveTypedModels } from '../config/agent-typed-models.js';\nimport { GATEWAY_BUILTIN_TOOL_IDS } from './agent-builtin-tools.js';\nimport { isPathUnderWorkspace, resolveWorkspaceSafePath } from './workspace-editor-path.js';\n\nconst EDITABLE_PROFILE_MARKDOWN_NAMES = new Set<string>([...AGENT_PROFILE_MARKDOWN_SYSTEM_FILES]);\n\nexport type GatewayAgentTypedModelsInfo = {\n  defaultRole: string;\n  preset: AgentTypedModel[];\n  entry?: AgentTypedModel[];\n  effective: AgentTypedModel[];\n};\n\nexport type GatewayAgentRow = {\n  id: string;\n  name?: string;\n  description?: string;\n  language?: string;\n  role?: string;\n  responsibilities?: {\n    primary: string[];\n    secondary?: string[];\n  };\n  /** Value from `IDENTITY.md` **Avatar:** line when present (may be URL, `xopc:…`, etc.). */\n  avatar?: string;\n  workspace: string;\n  /** Absolute directory for profile Markdown (`SOUL.md`, …) and gateway avatars: `agents/<id>/profile/`. */\n  profileDir: string;\n  model?: { primary?: string; fallbacks?: string[] };\n  typedModels: GatewayAgentTypedModelsInfo;\n  extends: string[];\n  isDefault: boolean;\n  skills: {\n    preset: string[];\n    entry?: string[];\n    effectiveAllowlist?: string[];\n  };\n  tools: {\n    presetDenied: string[];\n    entryDisable: string[];\n    effectiveDisable: string[];\n  };\n};\n\nexport type GatewayAgentsListResponse = {\n  defaultId: string;\n  agents: GatewayAgentRow[];\n  builtinToolIds: string[];\n};\n\nexport type GatewayAgentEffectiveManifestResponse = ResolveManifestResult;\n\nfunction collectAgentIdsForList(cfg: Config): string[] {\n  const entries = listAgentEntries(cfg).filter((e) => e.enabled !== false);\n  const defaultId = resolveDefaultAgentId(cfg);\n  if (entries.length === 0) {\n    return [defaultId];\n  }\n  const ids = new Set<string>();\n  for (const e of entries) {\n    ids.add(normalizeAgentId(e.id));\n  }\n  ids.add(defaultId);\n  return [...ids];\n}\n\nfunction rolesToTypedModels(\n  roles: Record<string, { model: string; fallbacks?: string[]; description?: string }> | undefined,\n): AgentTypedModel[] {\n  return Object.entries(roles ?? {})\n    .map(([id, role]) => ({ id, ...role }))\n    .sort((a, b) => a.id.localeCompare(b.id));\n}\n\n/** Extract `**Avatar:**` value from profile IDENTITY.md (same line shape as the gateway console parser). */\nexport function extractAvatarFromIdentityMarkdown(content: string): string | undefined {\n  return parseIdentityMarkdown(content).avatar || undefined;\n}\n\nexport function parseIdentityMarkdown(content: string): {\n  name?: string;\n  description?: string;\n  language?: string;\n  avatar?: string;\n} {\n  const out: { name?: string; description?: string; language?: string; avatar?: string } = {};\n  for (const line of content.split('\\n')) {\n    const match = line.match(/^[-*]\\s+\\*\\*(Name|Description|Language|Avatar):\\*\\*\\s*(.*)/i);\n    if (match) {\n      const key = match[1]?.toLowerCase();\n      const v = match[2]?.trim() ?? '';\n      if (!v || /^_\\(.*\\)_$/.test(v)) continue;\n      if (key === 'name') out.name = v;\n      if (key === 'description') out.description = v;\n      if (key === 'language') out.language = v;\n      if (key === 'avatar') out.avatar = v;\n    }\n  }\n  return out;\n}\n\nexport async function listGatewayAgents(\n  cfg: Config,\n  _options: { locale?: string } = {},\n): Promise<GatewayAgentsListResponse> {\n  const defaultId = resolveDefaultAgentId(cfg);\n  const agents: GatewayAgentRow[] = [];\n  const presetSkills: string[] | undefined = undefined;\n  const presetDenied: string[] = [];\n  const presetTypedModels: ReturnType<typeof rolesToTypedModels> = [];\n  for (const id of collectAgentIdsForList(cfg)) {\n    const profile = resolveEffectiveAgentProfile(cfg, id);\n    const entry = listAgentEntries(cfg).find((e) => normalizeAgentId(e.id) === id);\n    const model =\n      profile.primaryModelRef || profile.fallbacks.length > 0\n        ? {\n            ...(profile.primaryModelRef ? { primary: profile.primaryModelRef } : {}),\n            ...(profile.fallbacks.length > 0 ? { fallbacks: profile.fallbacks } : {}),\n          }\n        : undefined;\n    const entrySkills = entry?.skills.mode === 'allowlist' ? entry.skills.allow ?? [] : undefined;\n    const entryDisable = Object.entries(entry?.tools.builtin ?? {})\n      .filter(([, policy]) => policy.mode === 'deny')\n      .map(([name]) => name);\n    const entryTypedModels = rolesToTypedModels(entry?.models?.roles);\n    const effectiveTypedModels = [...resolveEffectiveTypedModels(cfg, id).values()].sort((a, b) =>\n      a.id.localeCompare(b.id),\n    );\n    let identity: ReturnType<typeof parseIdentityMarkdown> = {};\n    try {\n      const identityPath = join(resolveAgentProfileDir(cfg, id), WORKSPACE_FILES.IDENTITY);\n      const content = await readFile(identityPath, 'utf-8');\n      identity = parseIdentityMarkdown(content);\n    } catch {\n      /* missing IDENTITY.md or unreadable */\n    }\n    agents.push({\n      id,\n      ...(identity.name ? { name: identity.name } : {}),\n      ...(identity.description ? { description: identity.description } : {}),\n      ...(identity.language ? { language: identity.language } : {}),\n      ...(profile.manifest.identity.role ? { role: profile.manifest.identity.role } : {}),\n      responsibilities: {\n        primary: [...profile.manifest.responsibilities.primary],\n        ...(profile.manifest.responsibilities.secondary\n          ? { secondary: [...profile.manifest.responsibilities.secondary] }\n          : {}),\n      },\n      ...(identity.avatar ? { avatar: identity.avatar } : {}),\n      workspace: profile.resolvedWorkspacePath,\n      profileDir: resolveAgentProfileDir(cfg, id),\n      ...(model ? { model } : {}),\n      typedModels: {\n        defaultRole: profile.manifest.models.defaultRole,\n        preset: [...presetTypedModels],\n        ...(entryTypedModels.length > 0 ? { entry: entryTypedModels } : {}),\n        effective: effectiveTypedModels,\n      },\n      extends: [...(entry?.extends ?? [])],\n      isDefault: id === defaultId,\n      skills: {\n        preset: presetSkills ? [...presetSkills] : [],\n        ...(entrySkills !== undefined ? { entry: [...entrySkills] } : {}),\n        ...(profile.skillsAllowlist !== undefined\n          ? { effectiveAllowlist: [...profile.skillsAllowlist] }\n          : {}),\n      },\n      tools: {\n        presetDenied: [...presetDenied],\n        entryDisable: [...entryDisable],\n        effectiveDisable: [...profile.tools.denied].sort((a, b) => a.localeCompare(b)),\n      },\n    });\n  }\n  agents.sort((a, b) => a.id.localeCompare(b.id));\n  return { defaultId, agents, builtinToolIds: [...GATEWAY_BUILTIN_TOOL_IDS] };\n}\n\nexport function getGatewayAgentEffectiveManifest(\n  cfg: Config,\n  agentIdRaw: string,\n): AgentAdminResult<GatewayAgentEffectiveManifestResponse> {\n  const agentId = normalizeAgentId(agentIdRaw);\n  const entry = listAgentEntries(cfg).find((e) => normalizeAgentId(e.id) === agentId);\n  if (!entry) {\n    return { ok: false, error: `agent \"${agentId}\" not found`, status: 404 };\n  }\n  try {\n    return {\n      ok: true,\n      data: resolveEffectiveAgentManifest({\n        agent: entry,\n        presets: cfg.agents.capabilityPresets,\n        defaultPresetId: cfg.agents.defaultPreset,\n      }),\n    };\n  } catch (err) {\n    return {\n      ok: false,\n      error: err instanceof Error ? err.message : String(err),\n      status: 400,\n    };\n  }\n}\n\nexport type CreateAgentBody = {\n  /** Optional id seed; normalized agent id defaults from `profileFiles[\"IDENTITY.md\"]` name when omitted. */\n  id?: string;\n  workspace: string;\n  models?: AgentModelsConfig;\n  /** Reusable capability plans applied after the global baseline. */\n  extends?: string[];\n  /** Initial `agents.list[].skills` for the new entry. */\n  skills?: string[];\n  /** Initial `agents.list[].tools` for the new entry. */\n  tools?: NonNullable<Config['agents']['list']>[number]['tools'];\n  /** Profile markdown files to write after seeding (e.g. `IDENTITY.md`, `SOUL.md`). */\n  profileFiles?: Record<string, string>;\n  /** Clone from an existing agent id — copies config entry fields and profile directory. */\n  cloneFrom?: string;\n};\n\nexport type AgentAdminHttpStatus = 400 | 404 | 409;\n\nexport type AgentAdminResult<T> =\n  | { ok: true; data: T }\n  | { ok: false; error: string; status?: AgentAdminHttpStatus };\n\nexport function prepareCreateAgent(\n  cfg: Config,\n  body: CreateAgentBody,\n): AgentAdminResult<{ nextConfig: Config; agentId: string; workspace: string }> {\n  const workspace = body.workspace?.trim() ?? '';\n  if (!workspace) {\n    return { ok: false, error: 'workspace is required', status: 400 };\n  }\n  if (body.profileFiles !== undefined) {\n    if (typeof body.profileFiles !== 'object' || body.profileFiles === null || Array.isArray(body.profileFiles)) {\n      return { ok: false, error: 'profileFiles must be an object', status: 400 };\n    }\n    for (const [name, content] of Object.entries(body.profileFiles)) {\n      const bad = assertAllowedFile(name);\n      if (bad) {\n        return bad;\n      }\n      if (typeof content !== 'string') {\n        return { ok: false, error: `profileFiles[\"${name}\"] must be a string`, status: 400 };\n      }\n    }\n  }\n  if (!body.cloneFrom && typeof body.profileFiles?.[WORKSPACE_FILES.IDENTITY] !== 'string') {\n    return { ok: false, error: `profileFiles[\"${WORKSPACE_FILES.IDENTITY}\"] is required`, status: 400 };\n  }\n\n  const identity = body.profileFiles?.[WORKSPACE_FILES.IDENTITY]\n    ? parseIdentityMarkdown(body.profileFiles[WORKSPACE_FILES.IDENTITY])\n    : {};\n  const nameSeed = identity.name ?? body.id ?? '';\n  const idRes = validateAgentIdForNewAgent(body.id, nameSeed);\n  if (idRes.ok === false) {\n    return { ok: false, error: idRes.error, status: 400 };\n  }\n  const agentId = idRes.agentId;\n  if (findAgentEntryIndex(listAgentEntries(cfg), agentId) >= 0) {\n    return { ok: false, error: `agent \"${agentId}\" already exists`, status: 409 };\n  }\n\n  // Resolve fields from cloneFrom source when present\n  let cloneSourceEntry: ReturnType<typeof listAgentEntries>[number] | undefined;\n  if (body.cloneFrom) {\n    const srcId = normalizeAgentId(body.cloneFrom);\n    cloneSourceEntry = listAgentEntries(cfg).find((e) => normalizeAgentId(e.id) === srcId);\n    if (!cloneSourceEntry && srcId !== resolveDefaultAgentId(cfg)) {\n      return { ok: false, error: `source agent \"${srcId}\" not found`, status: 404 };\n    }\n  }\n\n  const wsAbs = resolveUserPath(workspace);\n\n  const rawModels = body.models ?? cloneSourceEntry?.models;\n  const inheritedPresetIds = body.extends ?? cloneSourceEntry?.extends ?? [];\n  for (const presetId of inheritedPresetIds) {\n    if (!cfg.agents.capabilityPresets[presetId]) {\n      return { ok: false, error: `capability preset \"${presetId}\" not found`, status: 400 };\n    }\n  }\n  const effectiveModels =\n    rawModels?.roles\n      ? {\n          defaultRole: rawModels.defaultRole ?? Object.keys(rawModels.roles)[0] ?? 'deep',\n          roles: rawModels.roles,\n        }\n      : undefined;\n  if (effectiveModels && !effectiveModels.roles[effectiveModels.defaultRole]) {\n    return { ok: false, error: 'models.defaultRole must reference models.roles', status: 400 };\n  }\n\n  let next = applyAgentConfig(cfg, {\n    agentId,\n    workspace: wsAbs,\n    extends: [...inheritedPresetIds],\n    ...(effectiveModels ? { models: effectiveModels } : {}),\n    ...(body.skills !== undefined\n      ? { skills: body.skills.map((s) => String(s).trim()).filter(Boolean) }\n      : cloneSourceEntry?.skills.mode === 'allowlist' && body.cloneFrom\n        ? { skills: [...(cloneSourceEntry.skills.allow ?? [])] }\n        : {}),\n    ...(body.tools !== undefined ? { tools: body.tools } : cloneSourceEntry?.tools && body.cloneFrom ? { tools: cloneSourceEntry.tools } : {}),\n  });\n\n  return { ok: true, data: { nextConfig: next, agentId, workspace: wsAbs } };\n}\n\nexport async function finalizeCreateAgentDirs(\n  cfg: Config,\n  agentId: string,\n  opts?: { profileFiles?: Record<string, string>; cloneFrom?: string },\n): Promise<AgentAdminResult<void>> {\n  const wsPath = resolveAgentWorkspaceDir(cfg, agentId);\n  const profilePath = resolveAgentProfileDir(cfg, agentId);\n  const adPath = resolveAgentDir(cfg, agentId);\n  await mkdir(wsPath, { recursive: true });\n  await mkdir(profilePath, { recursive: true });\n  await mkdir(adPath, { recursive: true });\n  const id = normalizeAgentId(agentId);\n  const displayName = opts?.profileFiles?.[WORKSPACE_FILES.IDENTITY]\n    ? (parseIdentityMarkdown(opts.profileFiles[WORKSPACE_FILES.IDENTITY]).name ?? id)\n    : id;\n\n  // When cloning, copy the entire source profile directory instead of seeding\n  if (opts?.cloneFrom) {\n    const srcProfilePath = resolveAgentProfileDir(cfg, normalizeAgentId(opts.cloneFrom));\n    try {\n      const srcStat = await stat(srcProfilePath);\n      if (srcStat.isDirectory()) {\n        const srcFiles = await readdir(srcProfilePath);\n        for (const fileName of srcFiles) {\n          const srcFile = join(srcProfilePath, fileName);\n          const dstFile = join(profilePath, fileName);\n          try {\n            const fileStat = await stat(srcFile);\n            if (fileStat.isFile()) {\n              await cp(srcFile, dstFile);\n            }\n          } catch {\n            /* skip unreadable files */\n          }\n        }\n      }\n    } catch {\n      // Source profile dir doesn't exist — fall through to normal seed\n      seedAgentProfileMarkdownFiles(profilePath, wsPath, { displayName });\n    }\n  } else {\n    seedAgentProfileMarkdownFiles(profilePath, wsPath, { displayName });\n  }\n\n  const profileFiles = opts?.profileFiles;\n  if (profileFiles && Object.keys(profileFiles).length > 0) {\n    for (const [name, content] of Object.entries(profileFiles)) {\n      const written = await writeAgentProfileFile(cfg, agentId, name, content);\n      if (written.ok === false) {\n        return written;\n      }\n    }\n  }\n\n  return { ok: true, data: undefined };\n}\n\nexport type UpdateAgentBody = {\n  workspace?: string;\n  extends?: string[];\n  models?: {\n    defaultRole?: string | null;\n    roles?: Record<string, { model: string; fallbacks?: string[]; description?: string }>;\n  } | null;\n  setDefault?: boolean;\n  /** Replace `agents.list[].skills`; `null` resets to all skills. */\n  skills?: string[] | null;\n  /** Replace `agents.list[].tools`; `null` resets to no explicit policies. */\n  tools?: NonNullable<Config['agents']['list']>[number]['tools'] | null;\n};\n\nexport function prepareUpdateAgent(\n  cfg: Config,\n  agentIdRaw: string,\n  body: UpdateAgentBody,\n): AgentAdminResult<{ nextConfig: Config }> {\n  const agentId = normalizeAgentId(agentIdRaw);\n  let list = [...listAgentEntries(cfg)];\n  let idx = findAgentEntryIndex(list, agentId);\n  if (idx < 0 && agentId === resolveDefaultAgentId(cfg)) {\n    list = [...list, {\n      id: agentId,\n      enabled: true as const,\n      identity: { name: agentId, role: 'Agent', language: 'en', tone: 'direct' },\n      responsibilities: { primary: ['Help the user complete tasks'] },\n      workspace: { root: `~/.xopc/workspace/${agentId}` },\n      tools: { builtin: {} },\n      skills: { mode: 'all' },\n      workflows: {},\n      boundaries: { requiresConfirmation: [], forbidden: [], escalation: [] },\n    }];\n    idx = list.length - 1;\n  }\n  if (idx < 0) {\n    return { ok: false, error: `agent \"${agentId}\" not found`, status: 404 };\n  }\n\n  type Entry = (typeof list)[number];\n  const entry: Entry = { ...list[idx] };\n\n  if (body.workspace !== undefined) {\n    const w = body.workspace.trim();\n    if (w) {\n      entry.workspace = { root: resolveUserPath(w) };\n    }\n  }\n  if (body.extends !== undefined) {\n    const nextExtends = Array.from(new Set(body.extends.map((id) => normalizeAgentId(id)).filter(Boolean)));\n    for (const presetId of nextExtends) {\n      if (!cfg.agents.capabilityPresets[presetId]) {\n        return { ok: false, error: `capability preset \"${presetId}\" not found`, status: 400 };\n      }\n    }\n    if (nextExtends.length > 0) {\n      entry.extends = nextExtends;\n    } else {\n      delete entry.extends;\n    }\n  }\n  if (body.models !== undefined) {\n    if (body.models === null) {\n      delete entry.models;\n    } else {\n      if (body.models.defaultRole !== undefined) {\n        if (body.models.defaultRole === null || !body.models.defaultRole.trim()) {\n          return { ok: false, error: 'models.defaultRole must be a non-empty string', status: 400 };\n        }\n        entry.models = {\n          defaultRole: body.models.defaultRole.trim(),\n          roles: entry.models?.roles ?? {},\n          ...(entry.models?.policy ? { policy: entry.models.policy } : {}),\n        };\n      }\n      if (Object.hasOwn(body.models, 'roles')) {\n        if (body.models.roles !== undefined) {\n          const roles = Object.fromEntries(\n            Object.entries(body.models.roles)\n              .map(([id, row]) => ({\n                id: id.trim(),\n                model: row.model.trim(),\n                fallbacks: (row.fallbacks ?? []).map((ref) => ref.trim()).filter(Boolean),\n                description: row.description?.trim(),\n              }))\n              .filter((row) => row.id && row.model)\n              .map((row) => [\n                row.id,\n                {\n                  model: row.model,\n                  ...(row.fallbacks.length > 0 ? { fallbacks: row.fallbacks } : {}),\n                  ...(row.description ? { description: row.description } : {}),\n                },\n              ]),\n          );\n          entry.models = {\n            defaultRole: entry.models?.defaultRole ?? Object.keys(roles)[0] ?? 'deep',\n            roles,\n            ...(entry.models?.policy ? { policy: entry.models.policy } : {}),\n          };\n        }\n      }\n      const roles = entry.models?.roles ?? {};\n      const defaultRole = entry.models?.defaultRole ?? Object.keys(roles)[0];\n      if (!defaultRole || !roles[defaultRole]) {\n        return { ok: false, error: 'models.defaultRole must reference models.roles', status: 400 };\n      }\n      entry.models = { ...entry.models, defaultRole };\n    }\n  }\n\n  if (body.skills !== undefined) {\n    if (body.skills === null) {\n      entry.skills = { mode: 'all' };\n    } else {\n      const next = body.skills.map((s) => String(s).trim()).filter(Boolean);\n      if (next.length === 0) {\n        entry.skills = { mode: 'allowlist', allow: [] };\n      } else {\n        entry.skills = { mode: 'allowlist', allow: next };\n      }\n    }\n  }\n\n  if (body.tools !== undefined) {\n    if (body.tools === null) {\n      entry.tools = { builtin: {} };\n    } else {\n      entry.tools = body.tools;\n    }\n  }\n\n  list[idx] = entry;\n  let next: Config = {\n    ...cfg,\n    agents: {\n      ...cfg.agents,\n      list,\n    },\n  };\n\n  if (body.setDefault === true) {\n    next = {\n      ...next,\n      agents: {\n        ...next.agents,\n        default: agentId,\n      },\n    };\n  }\n  return { ok: true, data: { nextConfig: next } };\n}\n\nexport function prepareDeleteAgent(\n  cfg: Config,\n  agentIdRaw: string,\n): AgentAdminResult<{ nextConfig: Config; agentId: string }> {\n  const agentId = normalizeAgentId(agentIdRaw);\n  const blocker = getAgentDeleteBlocker(cfg, agentId);\n  if (blocker) {\n    return { ok: false, error: blocker, status: 400 };\n  }\n  if (findAgentEntryIndex(listAgentEntries(cfg), agentId) < 0) {\n    return { ok: false, error: `agent \"${agentId}\" not found`, status: 404 };\n  }\n  const { config: pruned } = pruneAgentConfig(cfg, agentId);\n  return { ok: true, data: { nextConfig: pruned, agentId } };\n}\n\nexport async function runAfterDeletePurge(cfg: Config, agentId: string): Promise<void> {\n  await removeAgentDirsFromDisk(cfg, agentId);\n}\n\nexport type AgentFileEntry = {\n  name: string;\n  missing: boolean;\n  size?: number;\n  updatedAtMs?: number;\n};\n\nasync function profileMarkdownRootReal(cfg: Config, agentId: string): Promise<string> {\n  const dir = resolveAgentProfileDir(cfg, agentId);\n  await mkdir(dir, { recursive: true });\n  try {\n    return await realpath(dir);\n  } catch {\n    return pathResolve(dir);\n  }\n}\n\nfunction assertAllowedFile(name: string): AgentAdminResult<never> | null {\n  if (!name || name.includes('/') || name.includes('\\\\') || !EDITABLE_PROFILE_MARKDOWN_NAMES.has(name)) {\n    return { ok: false, error: `unsupported file \"${name}\"`, status: 400 };\n  }\n  return null;\n}\n\nexport async function listAgentProfileFiles(\n  cfg: Config,\n  agentId: string,\n): Promise<AgentAdminResult<{ agentId: string; profileDir: string; files: AgentFileEntry[] }>> {\n  const id = normalizeAgentId(agentId);\n  if (collectAgentIdsForList(cfg).every((x) => x !== id)) {\n    return { ok: false, error: `agent \"${id}\" not found`, status: 404 };\n  }\n  const root = await profileMarkdownRootReal(cfg, id);\n  const names = [...EDITABLE_PROFILE_MARKDOWN_NAMES];\n  const files: AgentFileEntry[] = [];\n  for (const name of names.sort((a, b) => a.localeCompare(b))) {\n    const abs = resolveWorkspaceSafePath(root, name);\n    if (!abs) {\n      continue;\n    }\n    try {\n      const st = await stat(abs);\n      if (!st.isFile()) {\n        continue;\n      }\n      files.push({\n        name,\n        missing: false,\n        size: st.size,\n        updatedAtMs: st.mtimeMs,\n      });\n    } catch {\n      if (!REQUIRED_AGENT_PROFILE_MARKDOWN_FILE_SET.has(name)) {\n        continue;\n      }\n      files.push({ name, missing: true });\n    }\n  }\n  files.sort((a, b) => a.name.localeCompare(b.name));\n  return { ok: true, data: { agentId: id, profileDir: root, files } };\n}\n\nexport async function readAgentProfileFile(\n  cfg: Config,\n  agentId: string,\n  name: string,\n): Promise<AgentAdminResult<{ agentId: string; content: string; path: string }>> {\n  const bad = assertAllowedFile(name);\n  if (bad) {\n    return bad;\n  }\n  const id = normalizeAgentId(agentId);\n  if (collectAgentIdsForList(cfg).every((x) => x !== id)) {\n    return { ok: false, error: `agent \"${id}\" not found`, status: 404 };\n  }\n  const root = await profileMarkdownRootReal(cfg, id);\n  const abs = resolveWorkspaceSafePath(root, name);\n  if (!abs) {\n    return { ok: false, error: 'invalid path', status: 400 };\n  }\n  try {\n    const content = await readFile(abs, 'utf-8');\n    return { ok: true, data: { agentId: id, content, path: abs } };\n  } catch {\n    return { ok: false, error: 'file not found', status: 404 };\n  }\n}\n\nexport async function writeAgentProfileFile(\n  cfg: Config,\n  agentId: string,\n  name: string,\n  content: string,\n): Promise<AgentAdminResult<{ agentId: string; path: string }>> {\n  const bad = assertAllowedFile(name);\n  if (bad) {\n    return bad;\n  }\n  const id = normalizeAgentId(agentId);\n  if (collectAgentIdsForList(cfg).every((x) => x !== id)) {\n    return { ok: false, error: `agent \"${id}\" not found`, status: 404 };\n  }\n  const root = await profileMarkdownRootReal(cfg, id);\n  const abs = resolveWorkspaceSafePath(root, name);\n  if (!abs) {\n    return { ok: false, error: 'invalid path', status: 400 };\n  }\n  const rootReal = await profileMarkdownRootReal(cfg, id);\n  if (!isPathUnderWorkspace(rootReal, abs)) {\n    return { ok: false, error: 'path escapes profile markdown root', status: 400 };\n  }\n  await writeFile(abs, content, 'utf-8');\n  return { ok: true, data: { agentId: id, path: abs } };\n}\n\nexport async function readUserProfileFile(): Promise<AgentAdminResult<{ content: string; path: string }>> {\n  const path = resolveUserProfilePath();\n  try {\n    const content = await readFile(path, 'utf-8');\n    return { ok: true, data: { content, path } };\n  } catch {\n    return { ok: true, data: { content: '', path } };\n  }\n}\n\nexport async function writeUserProfileFile(\n  content: string,\n): Promise<AgentAdminResult<{ path: string }>> {\n  const path = resolveUserProfilePath();\n  await mkdir(dirname(path), { recursive: true });\n  await writeFile(path, content, 'utf-8');\n  return { ok: true, data: { path } };\n}\n\n// ---------------------------------------------------------------------------\n// Binary agent avatar (profile markdown root dir, not a SOUL/IDENTITY markdown file)\n// ---------------------------------------------------------------------------\n\nconst AGENT_AVATAR_MAX_BYTES = 512 * 1024;\nconst AGENT_AVATAR_BASENAME = 'agent-avatar';\n\nconst AGENT_AVATAR_EXTENSIONS = ['.png', '.jpg', '.jpeg', '.webp'] as const;\n\nfunction agentAvatarFilenames(): string[] {\n  return AGENT_AVATAR_EXTENSIONS.map((ext) => `${AGENT_AVATAR_BASENAME}${ext}`);\n}\n\nfunction mimeToExt(mime: string): '.png' | '.jpg' | '.jpeg' | '.webp' | null {\n  const m = mime.toLowerCase().trim();\n  if (m === 'image/png') return '.png';\n  if (m === 'image/jpeg' || m === 'image/jpg') return '.jpg';\n  if (m === 'image/webp') return '.webp';\n  return null;\n}\n\nfunction detectImageMimeFromBytes(buf: Uint8Array): 'image/png' | 'image/jpeg' | 'image/webp' | null {\n  if (buf.length >= 8 && buf[0] === 0x89 && buf[1] === 0x50 && buf[2] === 0x4e && buf[3] === 0x47) {\n    return 'image/png';\n  }\n  if (buf.length >= 3 && buf[0] === 0xff && buf[1] === 0xd8 && buf[2] === 0xff) {\n    return 'image/jpeg';\n  }\n  if (\n    buf.length >= 12 &&\n    buf[0] === 0x52 &&\n    buf[1] === 0x49 &&\n    buf[2] === 0x46 &&\n    buf[3] === 0x46 &&\n    buf[8] === 0x57 &&\n    buf[9] === 0x45 &&\n    buf[10] === 0x42 &&\n    buf[11] === 0x50\n  ) {\n    return 'image/webp';\n  }\n  return null;\n}\n\nfunction assertAgentExistsForAvatar(cfg: Config, id: string): AgentAdminResult<never> | null {\n  if (collectAgentIdsForList(cfg).every((x) => x !== id)) {\n    return { ok: false, error: `agent \"${id}\" not found`, status: 404 };\n  }\n  return null;\n}\n\nexport async function readAgentAvatarFile(\n  cfg: Config,\n  agentId: string,\n): Promise<AgentAdminResult<{ agentId: string; buffer: Buffer; contentType: string; path: string }>> {\n  const missingAgent = assertAgentExistsForAvatar(cfg, agentId);\n  if (missingAgent) {\n    return missingAgent;\n  }\n  const id = normalizeAgentId(agentId);\n  const root = await profileMarkdownRootReal(cfg, id);\n  for (const name of agentAvatarFilenames()) {\n    const abs = resolveWorkspaceSafePath(root, name);\n    if (!abs) {\n      continue;\n    }\n    try {\n      const st = await stat(abs);\n      if (!st.isFile() || st.size <= 0 || st.size > AGENT_AVATAR_MAX_BYTES) {\n        continue;\n      }\n      const buffer = await readFile(abs);\n      const detected = detectImageMimeFromBytes(buffer);\n      if (!detected) {\n        continue;\n      }\n      return { ok: true, data: { agentId: id, buffer, contentType: detected, path: abs } };\n    } catch {\n      /* try next */\n    }\n  }\n  return { ok: false, error: 'avatar not found', status: 404 };\n}\n\nexport async function writeAgentAvatarFromBase64(\n  cfg: Config,\n  agentId: string,\n  base64: string,\n  mimeType: string,\n): Promise<AgentAdminResult<{ agentId: string; path: string }>> {\n  const missingAgent = assertAgentExistsForAvatar(cfg, agentId);\n  if (missingAgent) {\n    return missingAgent;\n  }\n  const id = normalizeAgentId(agentId);\n  const ext = mimeToExt(mimeType);\n  if (!ext) {\n    return { ok: false, error: 'unsupported mimeType (use image/png, image/jpeg, or image/webp)', status: 400 };\n  }\n  let raw: Buffer;\n  try {\n    raw = Buffer.from(base64, 'base64');\n  } catch {\n    return { ok: false, error: 'invalid base64', status: 400 };\n  }\n  if (raw.length === 0 || raw.length > AGENT_AVATAR_MAX_BYTES) {\n    return { ok: false, error: `avatar must be non-empty and at most ${AGENT_AVATAR_MAX_BYTES} bytes`, status: 400 };\n  }\n  const detected = detectImageMimeFromBytes(raw);\n  if (!detected || !extMatchesDetectedMime(ext, detected)) {\n    return { ok: false, error: 'file content does not match declared image type', status: 400 };\n  }\n\n  const root = await profileMarkdownRootReal(cfg, id);\n  const rootReal = await profileMarkdownRootReal(cfg, id);\n  const targetName = `${AGENT_AVATAR_BASENAME}${ext}`;\n  const abs = resolveWorkspaceSafePath(root, targetName);\n  if (!abs || !isPathUnderWorkspace(rootReal, abs)) {\n    return { ok: false, error: 'invalid path', status: 400 };\n  }\n  for (const name of agentAvatarFilenames()) {\n    if (name === targetName) {\n      continue;\n    }\n    const other = resolveWorkspaceSafePath(root, name);\n    if (other && isPathUnderWorkspace(rootReal, other)) {\n      try {\n        await unlink(other);\n      } catch {\n        /* absent */\n      }\n    }\n  }\n  await writeFile(abs, raw);\n  return { ok: true, data: { agentId: id, path: abs } };\n}\n\nfunction mimeToExtToMime(ext: '.png' | '.jpg' | '.jpeg' | '.webp'): 'image/png' | 'image/jpeg' | 'image/webp' {\n  if (ext === '.png') return 'image/png';\n  if (ext === '.webp') return 'image/webp';\n  return 'image/jpeg';\n}\n\nfunction extMatchesDetectedMime(\n  ext: '.png' | '.jpg' | '.jpeg' | '.webp',\n  detected: 'image/png' | 'image/jpeg' | 'image/webp',\n): boolean {\n  return detected === mimeToExtToMime(ext);\n}\n\n/** Remove any `agent-avatar.*` in the agent profile markdown root. Idempotent: ok even when no file existed. */\nexport async function deleteAgentAvatarFile(cfg: Config, agentId: string): Promise<AgentAdminResult<{ agentId: string }>> {\n  const missingAgent = assertAgentExistsForAvatar(cfg, agentId);\n  if (missingAgent) {\n    return missingAgent;\n  }\n  const id = normalizeAgentId(agentId);\n  const root = await profileMarkdownRootReal(cfg, id);\n  const rootReal = await profileMarkdownRootReal(cfg, id);\n  for (const name of agentAvatarFilenames()) {\n    const abs = resolveWorkspaceSafePath(root, name);\n    if (!abs || !isPathUnderWorkspace(rootReal, abs)) {\n      continue;\n    }\n    try {\n      await unlink(abs);\n    } catch {\n      /* absent */\n    }\n  }\n  return { ok: true, data: { agentId: id } };\n}\n"],"mappings":";;;;;;;;;;;;;;;;kBAgBiC;YAkB4C;AAO7E,MAAM,kCAAkC,IAAI,IAAY,CAAC,GAAG,oCAAoC,CAAC;AAgDjG,SAAS,uBAAuB,KAAuB;CACrD,MAAM,UAAU,iBAAiB,IAAI,CAAC,QAAQ,MAAM,EAAE,YAAY,MAAM;CACxE,MAAM,YAAY,sBAAsB,IAAI;AAC5C,KAAI,QAAQ,WAAW,EACrB,QAAO,CAAC,UAAU;CAEpB,MAAM,sBAAM,IAAI,KAAa;AAC7B,MAAK,MAAM,KAAK,QACd,KAAI,IAAI,iBAAiB,EAAE,GAAG,CAAC;AAEjC,KAAI,IAAI,UAAU;AAClB,QAAO,CAAC,GAAG,IAAI;;AAGjB,SAAS,mBACP,OACmB;AACnB,QAAO,OAAO,QAAQ,SAAS,EAAE,CAAC,CAC/B,KAAK,CAAC,IAAI,WAAW;EAAE;EAAI,GAAG;EAAM,EAAE,CACtC,MAAM,GAAG,MAAM,EAAE,GAAG,cAAc,EAAE,GAAG,CAAC;;;AAI7C,SAAgB,kCAAkC,SAAqC;AACrF,QAAO,sBAAsB,QAAQ,CAAC,UAAU,KAAA;;AAGlD,SAAgB,sBAAsB,SAKpC;CACA,MAAM,MAAmF,EAAE;AAC3F,MAAK,MAAM,QAAQ,QAAQ,MAAM,KAAK,EAAE;EACtC,MAAM,QAAQ,KAAK,MAAM,8DAA8D;AACvF,MAAI,OAAO;GACT,MAAM,MAAM,MAAM,IAAI,aAAa;GACnC,MAAM,IAAI,MAAM,IAAI,MAAM,IAAI;AAC9B,OAAI,CAAC,KAAK,aAAa,KAAK,EAAE,CAAE;AAChC,OAAI,QAAQ,OAAQ,KAAI,OAAO;AAC/B,OAAI,QAAQ,cAAe,KAAI,cAAc;AAC7C,OAAI,QAAQ,WAAY,KAAI,WAAW;AACvC,OAAI,QAAQ,SAAU,KAAI,SAAS;;;AAGvC,QAAO;;AAGT,eAAsB,kBACpB,KACA,WAAgC,EAAE,EACE;CACpC,MAAM,YAAY,sBAAsB,IAAI;CAC5C,MAAM,SAA4B,EAAE;CAEpC,MAAM,eAAyB,EAAE;CACjC,MAAM,oBAA2D,EAAE;AACnE,MAAK,MAAM,MAAM,uBAAuB,IAAI,EAAE;EAC5C,MAAM,UAAU,6BAA6B,KAAK,GAAG;EACrD,MAAM,QAAQ,iBAAiB,IAAI,CAAC,MAAM,MAAM,iBAAiB,EAAE,GAAG,KAAK,GAAG;EAC9E,MAAM,QACJ,QAAQ,mBAAmB,QAAQ,UAAU,SAAS,IAClD;GACE,GAAI,QAAQ,kBAAkB,EAAE,SAAS,QAAQ,iBAAiB,GAAG,EAAE;GACvE,GAAI,QAAQ,UAAU,SAAS,IAAI,EAAE,WAAW,QAAQ,WAAW,GAAG,EAAE;GACzE,GACD,KAAA;EACN,MAAM,cAAc,OAAO,OAAO,SAAS,cAAc,MAAM,OAAO,SAAS,EAAE,GAAG,KAAA;EACpF,MAAM,eAAe,OAAO,QAAQ,OAAO,MAAM,WAAW,EAAE,CAAC,CAC5D,QAAQ,GAAG,YAAY,OAAO,SAAS,OAAO,CAC9C,KAAK,CAAC,UAAU,KAAK;EACxB,MAAM,mBAAmB,mBAAmB,OAAO,QAAQ,MAAM;EACjE,MAAM,uBAAuB,CAAC,GAAG,4BAA4B,KAAK,GAAG,CAAC,QAAQ,CAAC,CAAC,MAAM,GAAG,MACvF,EAAE,GAAG,cAAc,EAAE,GAAG,CACzB;EACD,IAAI,WAAqD,EAAE;AAC3D,MAAI;AAGF,cAAW,sBAAsB,MADX,SADD,KAAK,uBAAuB,KAAK,GAAG,EAAE,gBAAgB,SAChC,EAAE,QAAQ,CACZ;UACnC;AAGR,SAAO,KAAK;GACV;GACA,GAAI,SAAS,OAAO,EAAE,MAAM,SAAS,MAAM,GAAG,EAAE;GAChD,GAAI,SAAS,cAAc,EAAE,aAAa,SAAS,aAAa,GAAG,EAAE;GACrE,GAAI,SAAS,WAAW,EAAE,UAAU,SAAS,UAAU,GAAG,EAAE;GAC5D,GAAI,QAAQ,SAAS,SAAS,OAAO,EAAE,MAAM,QAAQ,SAAS,SAAS,MAAM,GAAG,EAAE;GAClF,kBAAkB;IAChB,SAAS,CAAC,GAAG,QAAQ,SAAS,iBAAiB,QAAQ;IACvD,GAAI,QAAQ,SAAS,iBAAiB,YAClC,EAAE,WAAW,CAAC,GAAG,QAAQ,SAAS,iBAAiB,UAAU,EAAE,GAC/D,EAAE;IACP;GACD,GAAI,SAAS,SAAS,EAAE,QAAQ,SAAS,QAAQ,GAAG,EAAE;GACtD,WAAW,QAAQ;GACnB,YAAY,uBAAuB,KAAK,GAAG;GAC3C,GAAI,QAAQ,EAAE,OAAO,GAAG,EAAE;GAC1B,aAAa;IACX,aAAa,QAAQ,SAAS,OAAO;IACrC,QAAQ,CAAC,GAAG,kBAAkB;IAC9B,GAAI,iBAAiB,SAAS,IAAI,EAAE,OAAO,kBAAkB,GAAG,EAAE;IAClE,WAAW;IACZ;GACD,SAAS,CAAC,GAAI,OAAO,WAAW,EAAE,CAAE;GACpC,WAAW,OAAO;GAClB,QAAQ;IACN,QAA2C,EAAE;IAC7C,GAAI,gBAAgB,KAAA,IAAY,EAAE,OAAO,CAAC,GAAG,YAAY,EAAE,GAAG,EAAE;IAChE,GAAI,QAAQ,oBAAoB,KAAA,IAC5B,EAAE,oBAAoB,CAAC,GAAG,QAAQ,gBAAgB,EAAE,GACpD,EAAE;IACP;GACD,OAAO;IACL,cAAc,CAAC,GAAG,aAAa;IAC/B,cAAc,CAAC,GAAG,aAAa;IAC/B,kBAAkB,CAAC,GAAG,QAAQ,MAAM,OAAO,CAAC,MAAM,GAAG,MAAM,EAAE,cAAc,EAAE,CAAC;IAC/E;GACF,CAAC;;AAEJ,QAAO,MAAM,GAAG,MAAM,EAAE,GAAG,cAAc,EAAE,GAAG,CAAC;AAC/C,QAAO;EAAE;EAAW;EAAQ,gBAAgB,CAAC,GAAG,yBAAyB;EAAE;;AAG7E,SAAgB,iCACd,KACA,YACyD;CACzD,MAAM,UAAU,iBAAiB,WAAW;CAC5C,MAAM,QAAQ,iBAAiB,IAAI,CAAC,MAAM,MAAM,iBAAiB,EAAE,GAAG,KAAK,QAAQ;AACnF,KAAI,CAAC,MACH,QAAO;EAAE,IAAI;EAAO,OAAO,UAAU,QAAQ;EAAc,QAAQ;EAAK;AAE1E,KAAI;AACF,SAAO;GACL,IAAI;GACJ,MAAM,8BAA8B;IAClC,OAAO;IACP,SAAS,IAAI,OAAO;IACpB,iBAAiB,IAAI,OAAO;IAC7B,CAAC;GACH;UACM,KAAK;AACZ,SAAO;GACL,IAAI;GACJ,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;GACvD,QAAQ;GACT;;;AA2BL,SAAgB,mBACd,KACA,MAC8E;CAC9E,MAAM,YAAY,KAAK,WAAW,MAAM,IAAI;AAC5C,KAAI,CAAC,UACH,QAAO;EAAE,IAAI;EAAO,OAAO;EAAyB,QAAQ;EAAK;AAEnE,KAAI,KAAK,iBAAiB,KAAA,GAAW;AACnC,MAAI,OAAO,KAAK,iBAAiB,YAAY,KAAK,iBAAiB,QAAQ,MAAM,QAAQ,KAAK,aAAa,CACzG,QAAO;GAAE,IAAI;GAAO,OAAO;GAAkC,QAAQ;GAAK;AAE5E,OAAK,MAAM,CAAC,MAAM,YAAY,OAAO,QAAQ,KAAK,aAAa,EAAE;GAC/D,MAAM,MAAM,kBAAkB,KAAK;AACnC,OAAI,IACF,QAAO;AAET,OAAI,OAAO,YAAY,SACrB,QAAO;IAAE,IAAI;IAAO,OAAO,iBAAiB,KAAK;IAAsB,QAAQ;IAAK;;;AAI1F,KAAI,CAAC,KAAK,aAAa,OAAO,KAAK,eAAe,gBAAgB,cAAc,SAC9E,QAAO;EAAE,IAAI;EAAO,OAAO,iBAAiB,gBAAgB,SAAS;EAAiB,QAAQ;EAAK;CAMrG,MAAM,YAHW,KAAK,eAAe,gBAAgB,YACjD,sBAAsB,KAAK,aAAa,gBAAgB,UAAU,GAClE,EAAE,EACoB,QAAQ,KAAK,MAAM;CAC7C,MAAM,QAAQ,2BAA2B,KAAK,IAAI,SAAS;AAC3D,KAAI,MAAM,OAAO,MACf,QAAO;EAAE,IAAI;EAAO,OAAO,MAAM;EAAO,QAAQ;EAAK;CAEvD,MAAM,UAAU,MAAM;AACtB,KAAI,oBAAoB,iBAAiB,IAAI,EAAE,QAAQ,IAAI,EACzD,QAAO;EAAE,IAAI;EAAO,OAAO,UAAU,QAAQ;EAAmB,QAAQ;EAAK;CAI/E,IAAI;AACJ,KAAI,KAAK,WAAW;EAClB,MAAM,QAAQ,iBAAiB,KAAK,UAAU;AAC9C,qBAAmB,iBAAiB,IAAI,CAAC,MAAM,MAAM,iBAAiB,EAAE,GAAG,KAAK,MAAM;AACtF,MAAI,CAAC,oBAAoB,UAAU,sBAAsB,IAAI,CAC3D,QAAO;GAAE,IAAI;GAAO,OAAO,iBAAiB,MAAM;GAAc,QAAQ;GAAK;;CAIjF,MAAM,QAAQ,gBAAgB,UAAU;CAExC,MAAM,YAAY,KAAK,UAAU,kBAAkB;CACnD,MAAM,qBAAqB,KAAK,WAAW,kBAAkB,WAAW,EAAE;AAC1E,MAAK,MAAM,YAAY,mBACrB,KAAI,CAAC,IAAI,OAAO,kBAAkB,UAChC,QAAO;EAAE,IAAI;EAAO,OAAO,sBAAsB,SAAS;EAAc,QAAQ;EAAK;CAGzF,MAAM,kBACJ,WAAW,QACP;EACE,aAAa,UAAU,eAAe,OAAO,KAAK,UAAU,MAAM,CAAC,MAAM;EACzE,OAAO,UAAU;EAClB,GACD,KAAA;AACN,KAAI,mBAAmB,CAAC,gBAAgB,MAAM,gBAAgB,aAC5D,QAAO;EAAE,IAAI;EAAO,OAAO;EAAkD,QAAQ;EAAK;AAgB5F,QAAO;EAAE,IAAI;EAAM,MAAM;GAAE,YAbhB,iBAAiB,KAAK;IAC/B;IACA,WAAW;IACX,SAAS,CAAC,GAAG,mBAAmB;IAChC,GAAI,kBAAkB,EAAE,QAAQ,iBAAiB,GAAG,EAAE;IACtD,GAAI,KAAK,WAAW,KAAA,IAChB,EAAE,QAAQ,KAAK,OAAO,KAAK,MAAM,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC,OAAO,QAAQ,EAAE,GACpE,kBAAkB,OAAO,SAAS,eAAe,KAAK,YACpD,EAAE,QAAQ,CAAC,GAAI,iBAAiB,OAAO,SAAS,EAAE,CAAE,EAAE,GACtD,EAAE;IACR,GAAI,KAAK,UAAU,KAAA,IAAY,EAAE,OAAO,KAAK,OAAO,GAAG,kBAAkB,SAAS,KAAK,YAAY,EAAE,OAAO,iBAAiB,OAAO,GAAG,EAAE;IAC1I,CAE0C;GAAE;GAAS,WAAW;GAAO;EAAE;;AAG5E,eAAsB,wBACpB,KACA,SACA,MACiC;CACjC,MAAM,SAAS,yBAAyB,KAAK,QAAQ;CACrD,MAAM,cAAc,uBAAuB,KAAK,QAAQ;CACxD,MAAM,SAAS,gBAAgB,KAAK,QAAQ;AAC5C,OAAM,MAAM,QAAQ,EAAE,WAAW,MAAM,CAAC;AACxC,OAAM,MAAM,aAAa,EAAE,WAAW,MAAM,CAAC;AAC7C,OAAM,MAAM,QAAQ,EAAE,WAAW,MAAM,CAAC;CACxC,MAAM,KAAK,iBAAiB,QAAQ;CACpC,MAAM,cAAc,MAAM,eAAe,gBAAgB,YACpD,sBAAsB,KAAK,aAAa,gBAAgB,UAAU,CAAC,QAAQ,KAC5E;AAGJ,KAAI,MAAM,WAAW;EACnB,MAAM,iBAAiB,uBAAuB,KAAK,iBAAiB,KAAK,UAAU,CAAC;AACpF,MAAI;AAEF,QAAI,MADkB,KAAK,eAAe,EAC9B,aAAa,EAAE;IACzB,MAAM,WAAW,MAAM,QAAQ,eAAe;AAC9C,SAAK,MAAM,YAAY,UAAU;KAC/B,MAAM,UAAU,KAAK,gBAAgB,SAAS;KAC9C,MAAM,UAAU,KAAK,aAAa,SAAS;AAC3C,SAAI;AAEF,WAAI,MADmB,KAAK,QAAQ,EACvB,QAAQ,CACnB,OAAM,GAAG,SAAS,QAAQ;aAEtB;;;UAKN;AAEN,iCAA8B,aAAa,QAAQ,EAAE,aAAa,CAAC;;OAGrE,+BAA8B,aAAa,QAAQ,EAAE,aAAa,CAAC;CAGrE,MAAM,eAAe,MAAM;AAC3B,KAAI,gBAAgB,OAAO,KAAK,aAAa,CAAC,SAAS,EACrD,MAAK,MAAM,CAAC,MAAM,YAAY,OAAO,QAAQ,aAAa,EAAE;EAC1D,MAAM,UAAU,MAAM,sBAAsB,KAAK,SAAS,MAAM,QAAQ;AACxE,MAAI,QAAQ,OAAO,MACjB,QAAO;;AAKb,QAAO;EAAE,IAAI;EAAM,MAAM,KAAA;EAAW;;AAiBtC,SAAgB,mBACd,KACA,YACA,MAC0C;CAC1C,MAAM,UAAU,iBAAiB,WAAW;CAC5C,IAAI,OAAO,CAAC,GAAG,iBAAiB,IAAI,CAAC;CACrC,IAAI,MAAM,oBAAoB,MAAM,QAAQ;AAC5C,KAAI,MAAM,KAAK,YAAY,sBAAsB,IAAI,EAAE;AACrD,SAAO,CAAC,GAAG,MAAM;GACf,IAAI;GACJ,SAAS;GACT,UAAU;IAAE,MAAM;IAAS,MAAM;IAAS,UAAU;IAAM,MAAM;IAAU;GAC1E,kBAAkB,EAAE,SAAS,CAAC,+BAA+B,EAAE;GAC/D,WAAW,EAAE,MAAM,qBAAqB,WAAW;GACnD,OAAO,EAAE,SAAS,EAAE,EAAE;GACtB,QAAQ,EAAE,MAAM,OAAO;GACvB,WAAW,EAAE;GACb,YAAY;IAAE,sBAAsB,EAAE;IAAE,WAAW,EAAE;IAAE,YAAY,EAAE;IAAE;GACxE,CAAC;AACF,QAAM,KAAK,SAAS;;AAEtB,KAAI,MAAM,EACR,QAAO;EAAE,IAAI;EAAO,OAAO,UAAU,QAAQ;EAAc,QAAQ;EAAK;CAI1E,MAAM,QAAe,EAAE,GAAG,KAAK,MAAM;AAErC,KAAI,KAAK,cAAc,KAAA,GAAW;EAChC,MAAM,IAAI,KAAK,UAAU,MAAM;AAC/B,MAAI,EACF,OAAM,YAAY,EAAE,MAAM,gBAAgB,EAAE,EAAE;;AAGlD,KAAI,KAAK,YAAY,KAAA,GAAW;EAC9B,MAAM,cAAc,MAAM,KAAK,IAAI,IAAI,KAAK,QAAQ,KAAK,OAAO,iBAAiB,GAAG,CAAC,CAAC,OAAO,QAAQ,CAAC,CAAC;AACvG,OAAK,MAAM,YAAY,YACrB,KAAI,CAAC,IAAI,OAAO,kBAAkB,UAChC,QAAO;GAAE,IAAI;GAAO,OAAO,sBAAsB,SAAS;GAAc,QAAQ;GAAK;AAGzF,MAAI,YAAY,SAAS,EACvB,OAAM,UAAU;MAEhB,QAAO,MAAM;;AAGjB,KAAI,KAAK,WAAW,KAAA,EAClB,KAAI,KAAK,WAAW,KAClB,QAAO,MAAM;MACR;AACL,MAAI,KAAK,OAAO,gBAAgB,KAAA,GAAW;AACzC,OAAI,KAAK,OAAO,gBAAgB,QAAQ,CAAC,KAAK,OAAO,YAAY,MAAM,CACrE,QAAO;IAAE,IAAI;IAAO,OAAO;IAAiD,QAAQ;IAAK;AAE3F,SAAM,SAAS;IACb,aAAa,KAAK,OAAO,YAAY,MAAM;IAC3C,OAAO,MAAM,QAAQ,SAAS,EAAE;IAChC,GAAI,MAAM,QAAQ,SAAS,EAAE,QAAQ,MAAM,OAAO,QAAQ,GAAG,EAAE;IAChE;;AAEH,MAAI,OAAO,OAAO,KAAK,QAAQ,QAAQ;OACjC,KAAK,OAAO,UAAU,KAAA,GAAW;IACnC,MAAM,QAAQ,OAAO,YACnB,OAAO,QAAQ,KAAK,OAAO,MAAM,CAC9B,KAAK,CAAC,IAAI,UAAU;KACnB,IAAI,GAAG,MAAM;KACb,OAAO,IAAI,MAAM,MAAM;KACvB,YAAY,IAAI,aAAa,EAAE,EAAE,KAAK,QAAQ,IAAI,MAAM,CAAC,CAAC,OAAO,QAAQ;KACzE,aAAa,IAAI,aAAa,MAAM;KACrC,EAAE,CACF,QAAQ,QAAQ,IAAI,MAAM,IAAI,MAAM,CACpC,KAAK,QAAQ,CACZ,IAAI,IACJ;KACE,OAAO,IAAI;KACX,GAAI,IAAI,UAAU,SAAS,IAAI,EAAE,WAAW,IAAI,WAAW,GAAG,EAAE;KAChE,GAAI,IAAI,cAAc,EAAE,aAAa,IAAI,aAAa,GAAG,EAAE;KAC5D,CACF,CAAC,CACL;AACD,UAAM,SAAS;KACb,aAAa,MAAM,QAAQ,eAAe,OAAO,KAAK,MAAM,CAAC,MAAM;KACnE;KACA,GAAI,MAAM,QAAQ,SAAS,EAAE,QAAQ,MAAM,OAAO,QAAQ,GAAG,EAAE;KAChE;;;EAGL,MAAM,QAAQ,MAAM,QAAQ,SAAS,EAAE;EACvC,MAAM,cAAc,MAAM,QAAQ,eAAe,OAAO,KAAK,MAAM,CAAC;AACpE,MAAI,CAAC,eAAe,CAAC,MAAM,aACzB,QAAO;GAAE,IAAI;GAAO,OAAO;GAAkD,QAAQ;GAAK;AAE5F,QAAM,SAAS;GAAE,GAAG,MAAM;GAAQ;GAAa;;AAInD,KAAI,KAAK,WAAW,KAAA,EAClB,KAAI,KAAK,WAAW,KAClB,OAAM,SAAS,EAAE,MAAM,OAAO;MACzB;EACL,MAAM,OAAO,KAAK,OAAO,KAAK,MAAM,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC,OAAO,QAAQ;AACrE,MAAI,KAAK,WAAW,EAClB,OAAM,SAAS;GAAE,MAAM;GAAa,OAAO,EAAE;GAAE;MAE/C,OAAM,SAAS;GAAE,MAAM;GAAa,OAAO;GAAM;;AAKvD,KAAI,KAAK,UAAU,KAAA,EACjB,KAAI,KAAK,UAAU,KACjB,OAAM,QAAQ,EAAE,SAAS,EAAE,EAAE;KAE7B,OAAM,QAAQ,KAAK;AAIvB,MAAK,OAAO;CACZ,IAAI,OAAe;EACjB,GAAG;EACH,QAAQ;GACN,GAAG,IAAI;GACP;GACD;EACF;AAED,KAAI,KAAK,eAAe,KACtB,QAAO;EACL,GAAG;EACH,QAAQ;GACN,GAAG,KAAK;GACR,SAAS;GACV;EACF;AAEH,QAAO;EAAE,IAAI;EAAM,MAAM,EAAE,YAAY,MAAM;EAAE;;AAGjD,SAAgB,mBACd,KACA,YAC2D;CAC3D,MAAM,UAAU,iBAAiB,WAAW;CAC5C,MAAM,UAAU,sBAAsB,KAAK,QAAQ;AACnD,KAAI,QACF,QAAO;EAAE,IAAI;EAAO,OAAO;EAAS,QAAQ;EAAK;AAEnD,KAAI,oBAAoB,iBAAiB,IAAI,EAAE,QAAQ,GAAG,EACxD,QAAO;EAAE,IAAI;EAAO,OAAO,UAAU,QAAQ;EAAc,QAAQ;EAAK;CAE1E,MAAM,EAAE,QAAQ,WAAW,iBAAiB,KAAK,QAAQ;AACzD,QAAO;EAAE,IAAI;EAAM,MAAM;GAAE,YAAY;GAAQ;GAAS;EAAE;;AAG5D,eAAsB,oBAAoB,KAAa,SAAgC;AACrF,OAAM,wBAAwB,KAAK,QAAQ;;AAU7C,eAAe,wBAAwB,KAAa,SAAkC;CACpF,MAAM,MAAM,uBAAuB,KAAK,QAAQ;AAChD,OAAM,MAAM,KAAK,EAAE,WAAW,MAAM,CAAC;AACrC,KAAI;AACF,SAAO,MAAM,SAAS,IAAI;SACpB;AACN,SAAOA,QAAY,IAAI;;;AAI3B,SAAS,kBAAkB,MAA8C;AACvE,KAAI,CAAC,QAAQ,KAAK,SAAS,IAAI,IAAI,KAAK,SAAS,KAAK,IAAI,CAAC,gCAAgC,IAAI,KAAK,CAClG,QAAO;EAAE,IAAI;EAAO,OAAO,qBAAqB,KAAK;EAAI,QAAQ;EAAK;AAExE,QAAO;;AAGT,eAAsB,sBACpB,KACA,SAC6F;CAC7F,MAAM,KAAK,iBAAiB,QAAQ;AACpC,KAAI,uBAAuB,IAAI,CAAC,OAAO,MAAM,MAAM,GAAG,CACpD,QAAO;EAAE,IAAI;EAAO,OAAO,UAAU,GAAG;EAAc,QAAQ;EAAK;CAErE,MAAM,OAAO,MAAM,wBAAwB,KAAK,GAAG;CACnD,MAAM,QAAQ,CAAC,GAAG,gCAAgC;CAClD,MAAM,QAA0B,EAAE;AAClC,MAAK,MAAM,QAAQ,MAAM,MAAM,GAAG,MAAM,EAAE,cAAc,EAAE,CAAC,EAAE;EAC3D,MAAM,MAAM,yBAAyB,MAAM,KAAK;AAChD,MAAI,CAAC,IACH;AAEF,MAAI;GACF,MAAM,KAAK,MAAM,KAAK,IAAI;AAC1B,OAAI,CAAC,GAAG,QAAQ,CACd;AAEF,SAAM,KAAK;IACT;IACA,SAAS;IACT,MAAM,GAAG;IACT,aAAa,GAAG;IACjB,CAAC;UACI;AACN,OAAI,CAAC,yCAAyC,IAAI,KAAK,CACrD;AAEF,SAAM,KAAK;IAAE;IAAM,SAAS;IAAM,CAAC;;;AAGvC,OAAM,MAAM,GAAG,MAAM,EAAE,KAAK,cAAc,EAAE,KAAK,CAAC;AAClD,QAAO;EAAE,IAAI;EAAM,MAAM;GAAE,SAAS;GAAI,YAAY;GAAM;GAAO;EAAE;;AAGrE,eAAsB,qBACpB,KACA,SACA,MAC+E;CAC/E,MAAM,MAAM,kBAAkB,KAAK;AACnC,KAAI,IACF,QAAO;CAET,MAAM,KAAK,iBAAiB,QAAQ;AACpC,KAAI,uBAAuB,IAAI,CAAC,OAAO,MAAM,MAAM,GAAG,CACpD,QAAO;EAAE,IAAI;EAAO,OAAO,UAAU,GAAG;EAAc,QAAQ;EAAK;CAGrE,MAAM,MAAM,yBAAyB,MADlB,wBAAwB,KAAK,GAAG,EACR,KAAK;AAChD,KAAI,CAAC,IACH,QAAO;EAAE,IAAI;EAAO,OAAO;EAAgB,QAAQ;EAAK;AAE1D,KAAI;AAEF,SAAO;GAAE,IAAI;GAAM,MAAM;IAAE,SAAS;IAAI,SAAA,MADlB,SAAS,KAAK,QAAQ;IACK,MAAM;IAAK;GAAE;SACxD;AACN,SAAO;GAAE,IAAI;GAAO,OAAO;GAAkB,QAAQ;GAAK;;;AAI9D,eAAsB,sBACpB,KACA,SACA,MACA,SAC8D;CAC9D,MAAM,MAAM,kBAAkB,KAAK;AACnC,KAAI,IACF,QAAO;CAET,MAAM,KAAK,iBAAiB,QAAQ;AACpC,KAAI,uBAAuB,IAAI,CAAC,OAAO,MAAM,MAAM,GAAG,CACpD,QAAO;EAAE,IAAI;EAAO,OAAO,UAAU,GAAG;EAAc,QAAQ;EAAK;CAGrE,MAAM,MAAM,yBAAyB,MADlB,wBAAwB,KAAK,GAAG,EACR,KAAK;AAChD,KAAI,CAAC,IACH,QAAO;EAAE,IAAI;EAAO,OAAO;EAAgB,QAAQ;EAAK;AAG1D,KAAI,CAAC,qBAAqB,MADH,wBAAwB,KAAK,GAAG,EACnB,IAAI,CACtC,QAAO;EAAE,IAAI;EAAO,OAAO;EAAsC,QAAQ;EAAK;AAEhF,OAAM,UAAU,KAAK,SAAS,QAAQ;AACtC,QAAO;EAAE,IAAI;EAAM,MAAM;GAAE,SAAS;GAAI,MAAM;GAAK;EAAE;;AAGvD,eAAsB,sBAAoF;CACxG,MAAM,OAAO,wBAAwB;AACrC,KAAI;AAEF,SAAO;GAAE,IAAI;GAAM,MAAM;IAAE,SAAA,MADL,SAAS,MAAM,QAAQ;IACT;IAAM;GAAE;SACtC;AACN,SAAO;GAAE,IAAI;GAAM,MAAM;IAAE,SAAS;IAAI;IAAM;GAAE;;;AAIpD,eAAsB,qBACpB,SAC6C;CAC7C,MAAM,OAAO,wBAAwB;AACrC,OAAM,MAAM,QAAQ,KAAK,EAAE,EAAE,WAAW,MAAM,CAAC;AAC/C,OAAM,UAAU,MAAM,SAAS,QAAQ;AACvC,QAAO;EAAE,IAAI;EAAM,MAAM,EAAE,MAAM;EAAE;;AAOrC,MAAM,yBAAyB,MAAM;AACrC,MAAM,wBAAwB;AAE9B,MAAM,0BAA0B;CAAC;CAAQ;CAAQ;CAAS;CAAQ;AAElE,SAAS,uBAAiC;AACxC,QAAO,wBAAwB,KAAK,QAAQ,GAAG,wBAAwB,MAAM;;AAG/E,SAAS,UAAU,MAA0D;CAC3E,MAAM,IAAI,KAAK,aAAa,CAAC,MAAM;AACnC,KAAI,MAAM,YAAa,QAAO;AAC9B,KAAI,MAAM,gBAAgB,MAAM,YAAa,QAAO;AACpD,KAAI,MAAM,aAAc,QAAO;AAC/B,QAAO;;AAGT,SAAS,yBAAyB,KAAmE;AACnG,KAAI,IAAI,UAAU,KAAK,IAAI,OAAO,OAAQ,IAAI,OAAO,MAAQ,IAAI,OAAO,MAAQ,IAAI,OAAO,GACzF,QAAO;AAET,KAAI,IAAI,UAAU,KAAK,IAAI,OAAO,OAAQ,IAAI,OAAO,OAAQ,IAAI,OAAO,IACtE,QAAO;AAET,KACE,IAAI,UAAU,MACd,IAAI,OAAO,MACX,IAAI,OAAO,MACX,IAAI,OAAO,MACX,IAAI,OAAO,MACX,IAAI,OAAO,MACX,IAAI,OAAO,MACX,IAAI,QAAQ,MACZ,IAAI,QAAQ,GAEZ,QAAO;AAET,QAAO;;AAGT,SAAS,2BAA2B,KAAa,IAA4C;AAC3F,KAAI,uBAAuB,IAAI,CAAC,OAAO,MAAM,MAAM,GAAG,CACpD,QAAO;EAAE,IAAI;EAAO,OAAO,UAAU,GAAG;EAAc,QAAQ;EAAK;AAErE,QAAO;;AAGT,eAAsB,oBACpB,KACA,SACmG;CACnG,MAAM,eAAe,2BAA2B,KAAK,QAAQ;AAC7D,KAAI,aACF,QAAO;CAET,MAAM,KAAK,iBAAiB,QAAQ;CACpC,MAAM,OAAO,MAAM,wBAAwB,KAAK,GAAG;AACnD,MAAK,MAAM,QAAQ,sBAAsB,EAAE;EACzC,MAAM,MAAM,yBAAyB,MAAM,KAAK;AAChD,MAAI,CAAC,IACH;AAEF,MAAI;GACF,MAAM,KAAK,MAAM,KAAK,IAAI;AAC1B,OAAI,CAAC,GAAG,QAAQ,IAAI,GAAG,QAAQ,KAAK,GAAG,OAAO,uBAC5C;GAEF,MAAM,SAAS,MAAM,SAAS,IAAI;GAClC,MAAM,WAAW,yBAAyB,OAAO;AACjD,OAAI,CAAC,SACH;AAEF,UAAO;IAAE,IAAI;IAAM,MAAM;KAAE,SAAS;KAAI;KAAQ,aAAa;KAAU,MAAM;KAAK;IAAE;UAC9E;;AAIV,QAAO;EAAE,IAAI;EAAO,OAAO;EAAoB,QAAQ;EAAK;;AAG9D,eAAsB,2BACpB,KACA,SACA,QACA,UAC8D;CAC9D,MAAM,eAAe,2BAA2B,KAAK,QAAQ;AAC7D,KAAI,aACF,QAAO;CAET,MAAM,KAAK,iBAAiB,QAAQ;CACpC,MAAM,MAAM,UAAU,SAAS;AAC/B,KAAI,CAAC,IACH,QAAO;EAAE,IAAI;EAAO,OAAO;EAAmE,QAAQ;EAAK;CAE7G,IAAI;AACJ,KAAI;AACF,QAAM,OAAO,KAAK,QAAQ,SAAS;SAC7B;AACN,SAAO;GAAE,IAAI;GAAO,OAAO;GAAkB,QAAQ;GAAK;;AAE5D,KAAI,IAAI,WAAW,KAAK,IAAI,SAAS,uBACnC,QAAO;EAAE,IAAI;EAAO,OAAO,wCAAwC,uBAAuB;EAAS,QAAQ;EAAK;CAElH,MAAM,WAAW,yBAAyB,IAAI;AAC9C,KAAI,CAAC,YAAY,CAAC,uBAAuB,KAAK,SAAS,CACrD,QAAO;EAAE,IAAI;EAAO,OAAO;EAAmD,QAAQ;EAAK;CAG7F,MAAM,OAAO,MAAM,wBAAwB,KAAK,GAAG;CACnD,MAAM,WAAW,MAAM,wBAAwB,KAAK,GAAG;CACvD,MAAM,aAAa,GAAG,wBAAwB;CAC9C,MAAM,MAAM,yBAAyB,MAAM,WAAW;AACtD,KAAI,CAAC,OAAO,CAAC,qBAAqB,UAAU,IAAI,CAC9C,QAAO;EAAE,IAAI;EAAO,OAAO;EAAgB,QAAQ;EAAK;AAE1D,MAAK,MAAM,QAAQ,sBAAsB,EAAE;AACzC,MAAI,SAAS,WACX;EAEF,MAAM,QAAQ,yBAAyB,MAAM,KAAK;AAClD,MAAI,SAAS,qBAAqB,UAAU,MAAM,CAChD,KAAI;AACF,SAAM,OAAO,MAAM;UACb;;AAKZ,OAAM,UAAU,KAAK,IAAI;AACzB,QAAO;EAAE,IAAI;EAAM,MAAM;GAAE,SAAS;GAAI,MAAM;GAAK;EAAE;;AAGvD,SAAS,gBAAgB,KAAqF;AAC5G,KAAI,QAAQ,OAAQ,QAAO;AAC3B,KAAI,QAAQ,QAAS,QAAO;AAC5B,QAAO;;AAGT,SAAS,uBACP,KACA,UACS;AACT,QAAO,aAAa,gBAAgB,IAAI;;;AAI1C,eAAsB,sBAAsB,KAAa,SAAiE;CACxH,MAAM,eAAe,2BAA2B,KAAK,QAAQ;AAC7D,KAAI,aACF,QAAO;CAET,MAAM,KAAK,iBAAiB,QAAQ;CACpC,MAAM,OAAO,MAAM,wBAAwB,KAAK,GAAG;CACnD,MAAM,WAAW,MAAM,wBAAwB,KAAK,GAAG;AACvD,MAAK,MAAM,QAAQ,sBAAsB,EAAE;EACzC,MAAM,MAAM,yBAAyB,MAAM,KAAK;AAChD,MAAI,CAAC,OAAO,CAAC,qBAAqB,UAAU,IAAI,CAC9C;AAEF,MAAI;AACF,SAAM,OAAO,IAAI;UACX;;AAIV,QAAO;EAAE,IAAI;EAAM,MAAM,EAAE,SAAS,IAAI;EAAE"}

package/dist/src/gateway/auth.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth.js","names":[],"sources":["../../../src/gateway/auth.ts"],"sourcesContent":["import crypto from 'crypto';\nimport type { GatewayAuthConfig } from '../config/schema.js';\nimport { safeEqualSecret } from './security/secret-equal.js';\n\n/**\n * Resolved gateway authentication configuration.\n *\n * Supports four modes:\n * - `none`: no authentication (local dev only)\n * - `token`: Bearer token authentication (default)\n * - `password`: password-based authentication (for simpler setups)\n * - `trusted-proxy`: reverse proxy terminates auth and forwards user identity headers\n */\nexport interface ResolvedGatewayAuth {\n  mode: 'none' | 'token' | 'password' | 'trusted-proxy';\n  token?: string;\n  password?: string;\n  trustedProxy?: GatewayAuthConfig['trustedProxy'];\n}\n\n/**\n * Resolve gateway authentication configuration.\n * Priority: env vars > config > defaults\n */\nexport function resolveGatewayAuth(params: {\n  authConfig?: GatewayAuthConfig | null;\n  env?: NodeJS.ProcessEnv;\n}): ResolvedGatewayAuth {\n  const env = params.env ?? process.env;\n  const config: GatewayAuthConfig = params.authConfig ?? { mode: 'token' };\n\n  const envMode = env.XOPC_GATEWAY_AUTH_MODE;\n  const envToken = env.XOPC_GATEWAY_TOKEN;\n  const envPassword = env.XOPC_GATEWAY_PASSWORD;\n\n  let mode: ResolvedGatewayAuth['mode'] = 'token';\n  if (\n    envMode === 'none' ||\n    envMode === 'token' ||\n    envMode === 'password' ||\n    envMode === 'trusted-proxy'\n  ) {\n    mode = envMode;\n  } else if (\n    config.mode === 'none' ||\n    config.mode === 'password' ||\n    config.mode === 'trusted-proxy'\n  ) {\n    mode = config.mode;\n  }\n\n  const hasToken = Boolean(envToken || config.token);\n  const hasPassword = Boolean(envPassword || config.password);\n  if (hasToken && hasPassword) {\n    throw new Error(\n      'Invalid config: both gateway.auth.token and gateway.auth.password are set. ' +\n      'Choose one authentication mode: \"token\" (Bearer header) or \"password\".',\n    );\n  }\n\n  if (mode === 'trusted-proxy' && hasToken) {\n    throw new Error(\n      'Invalid config: gateway.auth.mode is trusted-proxy but a shared token is also configured. ' +\n      'Remove gateway.auth.token / XOPC_GATEWAY_TOKEN because trusted-proxy and token auth are mutually exclusive.',\n    );\n  }\n\n  if (mode === 'trusted-proxy') {\n    return {\n      mode: 'trusted-proxy',\n      trustedProxy: config.trustedProxy,\n    };\n  }\n\n  let token: string | undefined;\n  if (mode === 'token') {\n    if (envToken) {\n      token = envToken;\n    } else if (config.token) {\n      token = config.token;\n    } else {\n      token = crypto.randomBytes(24).toString('hex');\n    }\n  }\n\n  let password: string | undefined;\n  if (mode === 'password') {\n    if (envPassword) {\n      password = envPassword;\n    } else if (config.password) {\n      password = config.password;\n    }\n  }\n\n  return { mode, token, password };\n}\n\n/**\n * Assert that gateway auth is properly configured.\n */\nexport function assertGatewayAuthConfigured(auth: ResolvedGatewayAuth): void {\n  if (auth.mode === 'token' && !auth.token) {\n    throw new Error(\n      'Gateway auth mode is token, but no token was configured. ' +\n      'Set gateway.auth.token in config or XOPC_GATEWAY_TOKEN environment variable.',\n    );\n  }\n  if (auth.mode === 'password' && !auth.password) {\n    throw new Error(\n      'Gateway auth mode is password, but no password was configured. ' +\n      'Set gateway.auth.password in config or XOPC_GATEWAY_PASSWORD environment variable.',\n    );\n  }\n  if (auth.mode === 'trusted-proxy') {\n    if (!auth.trustedProxy) {\n      throw new Error(\n        'Gateway auth mode is trusted-proxy, but no trustedProxy config was provided ' +\n        '(set gateway.auth.trustedProxy).',\n      );\n    }\n    if (!auth.trustedProxy.userHeader || auth.trustedProxy.userHeader.trim() === '') {\n      throw new Error(\n        'Gateway auth mode is trusted-proxy, but trustedProxy.userHeader is empty ' +\n        '(set gateway.auth.trustedProxy.userHeader).',\n      );\n    }\n  }\n}\n\n/**\n * Validate a credential against configured auth using constant-time comparison.\n *\n * Works for both token and password modes — the caller extracts the credential\n * from the appropriate transport (header, query param, etc.).\n */\nexport function validateToken(auth: ResolvedGatewayAuth, providedCredential?: string | null): boolean {\n  if (auth.mode === 'none' || auth.mode === 'trusted-proxy') {\n    return true;\n  }\n\n  if (!providedCredential) {\n    return false;\n  }\n\n  if (auth.mode === 'password') {\n    if (!auth.password) return false;\n    return safeEqualSecret(auth.password, providedCredential);\n  }\n\n  if (!auth.token) return false;\n  return safeEqualSecret(auth.token, providedCredential);\n}\n\n/**\n * Extract token from request headers.\n * Supports: Authorization: Bearer <token>, X-Api-Key: <token>\n */\nexport function extractToken(headers?: Record<string, string | string[] | undefined>): string | undefined {\n  if (!headers) return undefined;\n\n  const authHeader = headers.authorization;\n  if (authHeader) {\n    const value = Array.isArray(authHeader) ? authHeader[0] : authHeader;\n    if (value?.startsWith('Bearer ')) {\n      return value.slice(7);\n    }\n  }\n\n  const apiKey = headers['x-api-key'];\n  if (apiKey) {\n    return Array.isArray(apiKey) ? apiKey[0] : apiKey;\n  }\n\n  return undefined;\n}\n"],"mappings":";;;;;;;AAwBA,SAAgB,mBAAmB,QAGX;CACtB,MAAM,MAAM,OAAO,OAAO,QAAQ;CAClC,MAAM,SAA4B,OAAO,cAAc,EAAE,MAAM,SAAS;CAExE,MAAM,UAAU,IAAI;CACpB,MAAM,WAAW,IAAI;CACrB,MAAM,cAAc,IAAI;CAExB,IAAI,OAAoC;AACxC,KACE,YAAY,UACZ,YAAY,WACZ,YAAY,cACZ,YAAY,gBAEZ,QAAO;UAEP,OAAO,SAAS,UAChB,OAAO,SAAS,cAChB,OAAO,SAAS,gBAEhB,QAAO,OAAO;CAGhB,MAAM,WAAW,QAAQ,YAAY,OAAO,MAAM;CAClD,MAAM,cAAc,QAAQ,eAAe,OAAO,SAAS;AAC3D,KAAI,YAAY,YACd,OAAM,IAAI,MACR,wJAED;AAGH,KAAI,SAAS,mBAAmB,SAC9B,OAAM,IAAI,MACR,wMAED;AAGH,KAAI,SAAS,gBACX,QAAO;EACL,MAAM;EACN,cAAc,OAAO;EACtB;CAGH,IAAI;AACJ,KAAI,SAAS,QACX,KAAI,SACF,SAAQ;UACC,OAAO,MAChB,SAAQ,OAAO;KAEf,SAAQ,OAAO,YAAY,GAAG,CAAC,SAAS,MAAM;CAIlD,IAAI;AACJ,KAAI,SAAS;MACP,YACF,YAAW;WACF,OAAO,SAChB,YAAW,OAAO;;AAItB,QAAO;EAAE;EAAM;EAAO;EAAU;;;;;AAMlC,SAAgB,4BAA4B,MAAiC;AAC3E,KAAI,KAAK,SAAS,WAAW,CAAC,KAAK,MACjC,OAAM,IAAI,MACR,wIAED;AAEH,KAAI,KAAK,SAAS,cAAc,CAAC,KAAK,SACpC,OAAM,IAAI,MACR,oJAED;AAEH,KAAI,KAAK,SAAS,iBAAiB;AACjC,MAAI,CAAC,KAAK,aACR,OAAM,IAAI,MACR,+GAED;AAEH,MAAI,CAAC,KAAK,aAAa,cAAc,KAAK,aAAa,WAAW,MAAM,KAAK,GAC3E,OAAM,IAAI,MACR,uHAED;;;;;;;;;AAWP,SAAgB,cAAc,MAA2B,oBAA6C;AACpG,KAAI,KAAK,SAAS,UAAU,KAAK,SAAS,gBACxC,QAAO;AAGT,KAAI,CAAC,mBACH,QAAO;AAGT,KAAI,KAAK,SAAS,YAAY;AAC5B,MAAI,CAAC,KAAK,SAAU,QAAO;AAC3B,SAAO,gBAAgB,KAAK,UAAU,mBAAmB;;AAG3D,KAAI,CAAC,KAAK,MAAO,QAAO;AACxB,QAAO,gBAAgB,KAAK,OAAO,mBAAmB;;;;;;AAOxD,SAAgB,aAAa,SAA6E;AACxG,KAAI,CAAC,QAAS,QAAO,KAAA;CAErB,MAAM,aAAa,QAAQ;AAC3B,KAAI,YAAY;EACd,MAAM,QAAQ,MAAM,QAAQ,WAAW,GAAG,WAAW,KAAK;AAC1D,MAAI,OAAO,WAAW,UAAU,CAC9B,QAAO,MAAM,MAAM,EAAE;;CAIzB,MAAM,SAAS,QAAQ;AACvB,KAAI,OACF,QAAO,MAAM,QAAQ,OAAO,GAAG,OAAO,KAAK"}

package/dist/src/gateway/capability-presets-admin.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"capability-presets-admin.js","names":[],"sources":["../../../src/gateway/capability-presets-admin.ts"],"sourcesContent":["import {\n  CapabilityPresetSchema,\n  DEFAULT_CAPABILITY_PRESET_ID,\n  type CapabilityPreset,\n} from '../agent-manifest/schema.js';\nimport { linearizePresetIds } from '../agent-manifest/preset-chain.js';\nimport type { Config } from '../config/schema.js';\nimport { GATEWAY_BUILTIN_TOOL_IDS } from './agent-builtin-tools.js';\n\nexport type CapabilityPresetAdminResult<T> =\n  | { ok: true; data: T }\n  | { ok: false; error: string; status?: 400 | 404 | 409 | 500 };\n\nexport type CapabilityPresetAgentUsage = {\n  agentId: string;\n  agentName?: string;\n  direct: boolean;\n};\n\nexport type CapabilityPresetRow = CapabilityPreset & {\n  usage: CapabilityPresetAgentUsage[];\n};\n\nexport type CapabilityPresetsListResponse = {\n  defaultPresetId: string;\n  presets: CapabilityPresetRow[];\n  agents: Array<{ id: string; name?: string; extends: string[] }>;\n  builtinToolIds: string[];\n};\n\nexport type CreateCapabilityPresetBody = {\n  id?: string;\n  name?: string;\n  description?: string;\n  version?: number;\n  extends?: CapabilityPreset['extends'];\n  models?: CapabilityPreset['models'];\n  tools?: CapabilityPreset['tools'];\n  skills?: CapabilityPreset['skills'];\n  workflows?: CapabilityPreset['workflows'];\n  boundaries?: CapabilityPreset['boundaries'];\n  runtime?: CapabilityPreset['runtime'];\n  locks?: CapabilityPreset['locks'];\n};\n\nexport type UpdateCapabilityPresetBody = {\n  name?: string;\n  description?: string | null;\n  version?: number;\n  extends?: string[] | null;\n  models?: CapabilityPreset['models'] | null;\n  tools?: CapabilityPreset['tools'] | null;\n  skills?: CapabilityPreset['skills'] | null;\n  workflows?: CapabilityPreset['workflows'] | null;\n  boundaries?: CapabilityPreset['boundaries'] | null;\n  runtime?: CapabilityPreset['runtime'] | null;\n  locks?: string[] | null;\n};\n\nfunction presetMap(cfg: Config): Record<string, CapabilityPreset> {\n  return cfg.agents.capabilityPresets ?? {};\n}\n\nfunction normalizePresetId(id: string): string {\n  return id.trim().toLowerCase();\n}\n\nfunction agentUsage(cfg: Config, presetId: string): CapabilityPresetAgentUsage[] {\n  const defaultPresetId = cfg.agents.defaultPreset || DEFAULT_CAPABILITY_PRESET_ID;\n  return cfg.agents.list\n    .filter((agent) => {\n      const roots = [\n        ...(cfg.agents.capabilityPresets[defaultPresetId] ? [defaultPresetId] : []),\n        ...(agent.extends ?? []).filter((id) => id !== defaultPresetId),\n      ];\n      return linearizePresetIds(roots, cfg.agents.capabilityPresets).includes(presetId);\n    })\n    .map((agent) => ({\n      agentId: agent.id,\n      ...(agent.identity.name ? { agentName: agent.identity.name } : {}),\n      direct: presetId === defaultPresetId || (agent.extends ?? []).includes(presetId),\n    }))\n    .sort((a, b) => a.agentId.localeCompare(b.agentId));\n}\n\nfunction validatePresetReferences(\n  presets: Record<string, CapabilityPreset>,\n): CapabilityPresetAdminResult<void> {\n  for (const [id, preset] of Object.entries(presets)) {\n    for (const parent of preset.extends ?? []) {\n      if (!presets[parent]) {\n        return { ok: false, error: `capability preset \"${id}\" extends missing preset \"${parent}\"`, status: 400 };\n      }\n    }\n  }\n\n  const visiting = new Set<string>();\n  const visited = new Set<string>();\n  const visit = (id: string, stack: string[]): CapabilityPresetAdminResult<void> => {\n    if (visiting.has(id)) {\n      return { ok: false, error: `capability preset cycle detected: ${[...stack, id].join(' -> ')}`, status: 400 };\n    }\n    if (visited.has(id)) {\n      return { ok: true, data: undefined };\n    }\n    visiting.add(id);\n    for (const parent of presets[id]?.extends ?? []) {\n      const res = visit(parent, [...stack, id]);\n      if (!res.ok) return res;\n    }\n    visiting.delete(id);\n    visited.add(id);\n    return { ok: true, data: undefined };\n  };\n\n  for (const id of Object.keys(presets)) {\n    const res = visit(id, []);\n    if (!res.ok) return res;\n  }\n  return { ok: true, data: undefined };\n}\n\nfunction validateAgentPresetReferences(cfg: Config): CapabilityPresetAdminResult<void> {\n  const presets = presetMap(cfg);\n  for (const agent of cfg.agents.list) {\n    for (const presetId of agent.extends ?? []) {\n      if (!presets[presetId]) {\n        return { ok: false, error: `agent \"${agent.id}\" extends missing preset \"${presetId}\"`, status: 400 };\n      }\n    }\n  }\n  return { ok: true, data: undefined };\n}\n\nfunction nextConfigWithPresets(\n  cfg: Config,\n  presets: Record<string, CapabilityPreset>,\n): CapabilityPresetAdminResult<{ nextConfig: Config }> {\n  const refs = validatePresetReferences(presets);\n  if (refs.ok === false) return { ok: false, error: refs.error, status: refs.status };\n  const nextConfig: Config = {\n    ...cfg,\n    agents: {\n      ...cfg.agents,\n      capabilityPresets: presets,\n    },\n  };\n  const agentRefs = validateAgentPresetReferences(nextConfig);\n  if (agentRefs.ok === false) return { ok: false, error: agentRefs.error, status: agentRefs.status };\n  return { ok: true, data: { nextConfig } };\n}\n\nexport function listCapabilityPresets(cfg: Config): CapabilityPresetsListResponse {\n  const presets = Object.values(presetMap(cfg))\n    .map((preset) => ({ ...preset, usage: agentUsage(cfg, preset.id) }))\n    .sort((a, b) => a.id.localeCompare(b.id));\n  const agents = cfg.agents.list\n    .map((agent) => ({\n      id: agent.id,\n      ...(agent.identity.name ? { name: agent.identity.name } : {}),\n      extends: [...(agent.extends ?? [])],\n    }))\n    .sort((a, b) => a.id.localeCompare(b.id));\n  return { defaultPresetId: cfg.agents.defaultPreset, presets, agents, builtinToolIds: [...GATEWAY_BUILTIN_TOOL_IDS] };\n}\n\nexport function prepareCreateCapabilityPreset(\n  cfg: Config,\n  body: CreateCapabilityPresetBody,\n): CapabilityPresetAdminResult<{ nextConfig: Config; presetId: string }> {\n  const id = normalizePresetId(body.id ?? '');\n  const name = body.name?.trim() || id;\n  const description = body.description?.trim();\n  const { id: _id, name: _name, description: _description, ...policy } = body;\n  const parsed = CapabilityPresetSchema.safeParse({\n    ...policy,\n    id,\n    name,\n    version: body.version ?? 1,\n    ...(description ? { description } : {}),\n  });\n  if (!parsed.success) {\n    return { ok: false, error: parsed.error.issues[0]?.message ?? 'capability preset is invalid', status: 400 };\n  }\n  const presets = presetMap(cfg);\n  if (presets[id]) {\n    return { ok: false, error: `capability preset \"${id}\" already exists`, status: 409 };\n  }\n  const next = nextConfigWithPresets(cfg, { ...presets, [id]: parsed.data });\n  if (next.ok === false) return { ok: false, error: next.error, status: next.status };\n  return { ok: true, data: { ...next.data, presetId: id } };\n}\n\nexport function prepareUpdateCapabilityPreset(\n  cfg: Config,\n  presetIdRaw: string,\n  body: UpdateCapabilityPresetBody,\n): CapabilityPresetAdminResult<{ nextConfig: Config }> {\n  const presetId = normalizePresetId(presetIdRaw);\n  const presets = presetMap(cfg);\n  const current = presets[presetId];\n  if (!current) {\n    return { ok: false, error: `capability preset \"${presetId}\" not found`, status: 404 };\n  }\n  const nextPreset: CapabilityPreset = { ...current };\n\n  if (body.name !== undefined) {\n    const name = body.name.trim();\n    if (!name) {\n      return { ok: false, error: 'name must be a non-empty string', status: 400 };\n    }\n    nextPreset.name = name;\n  }\n  if (body.description !== undefined) {\n    if (body.description === null || !body.description.trim()) {\n      delete nextPreset.description;\n    } else {\n      nextPreset.description = body.description.trim();\n    }\n  }\n  nextPreset.version = body.version ?? current.version + 1;\n  for (const key of ['extends', 'models', 'tools', 'skills', 'memory', 'workflows', 'boundaries', 'runtime', 'locks'] as const) {\n    if (body[key] === undefined) continue;\n    if (body[key] === null) {\n      delete nextPreset[key];\n    } else {\n      (nextPreset as Record<string, unknown>)[key] = body[key];\n    }\n  }\n\n  const parsed = CapabilityPresetSchema.safeParse(nextPreset);\n  if (!parsed.success) {\n    return { ok: false, error: parsed.error.issues[0]?.message ?? 'capability preset is invalid', status: 400 };\n  }\n  return nextConfigWithPresets(cfg, { ...presets, [presetId]: parsed.data });\n}\n\nexport function prepareDeleteCapabilityPreset(\n  cfg: Config,\n  presetIdRaw: string,\n): CapabilityPresetAdminResult<{ nextConfig: Config }> {\n  const presetId = normalizePresetId(presetIdRaw);\n  const presets = presetMap(cfg);\n  if (!presets[presetId]) {\n    return { ok: false, error: `capability preset \"${presetId}\" not found`, status: 404 };\n  }\n  if (presetId === cfg.agents.defaultPreset) {\n    return { ok: false, error: `capability preset \"${presetId}\" is the global default and cannot be deleted`, status: 409 };\n  }\n  const usage = agentUsage(cfg, presetId);\n  if (usage.length > 0) {\n    return {\n      ok: false,\n      error: `capability preset \"${presetId}\" is used by agents: ${usage.map((u) => u.agentId).join(', ')}`,\n      status: 409,\n    };\n  }\n  const nextPresets = { ...presets };\n  delete nextPresets[presetId];\n  return nextConfigWithPresets(cfg, nextPresets);\n}\n"],"mappings":";;;;aAIqC;mBACkC;AAsDvE,SAAS,UAAU,KAA+C;AAChE,QAAO,IAAI,OAAO,qBAAqB,EAAE;;AAG3C,SAAS,kBAAkB,IAAoB;AAC7C,QAAO,GAAG,MAAM,CAAC,aAAa;;AAGhC,SAAS,WAAW,KAAa,UAAgD;CAC/E,MAAM,kBAAkB,IAAI,OAAO,iBAAA;AACnC,QAAO,IAAI,OAAO,KACf,QAAQ,UAAU;AAKjB,SAAO,mBAAmB,CAHxB,GAAI,IAAI,OAAO,kBAAkB,mBAAmB,CAAC,gBAAgB,GAAG,EAAE,EAC1E,IAAI,MAAM,WAAW,EAAE,EAAE,QAAQ,OAAO,OAAO,gBAAgB,CAElC,EAAE,IAAI,OAAO,kBAAkB,CAAC,SAAS,SAAS;GACjF,CACD,KAAK,WAAW;EACf,SAAS,MAAM;EACf,GAAI,MAAM,SAAS,OAAO,EAAE,WAAW,MAAM,SAAS,MAAM,GAAG,EAAE;EACjE,QAAQ,aAAa,oBAAoB,MAAM,WAAW,EAAE,EAAE,SAAS,SAAS;EACjF,EAAE,CACF,MAAM,GAAG,MAAM,EAAE,QAAQ,cAAc,EAAE,QAAQ,CAAC;;AAGvD,SAAS,yBACP,SACmC;AACnC,MAAK,MAAM,CAAC,IAAI,WAAW,OAAO,QAAQ,QAAQ,CAChD,MAAK,MAAM,UAAU,OAAO,WAAW,EAAE,CACvC,KAAI,CAAC,QAAQ,QACX,QAAO;EAAE,IAAI;EAAO,OAAO,sBAAsB,GAAG,4BAA4B,OAAO;EAAI,QAAQ;EAAK;CAK9G,MAAM,2BAAW,IAAI,KAAa;CAClC,MAAM,0BAAU,IAAI,KAAa;CACjC,MAAM,SAAS,IAAY,UAAuD;AAChF,MAAI,SAAS,IAAI,GAAG,CAClB,QAAO;GAAE,IAAI;GAAO,OAAO,qCAAqC,CAAC,GAAG,OAAO,GAAG,CAAC,KAAK,OAAO;GAAI,QAAQ;GAAK;AAE9G,MAAI,QAAQ,IAAI,GAAG,CACjB,QAAO;GAAE,IAAI;GAAM,MAAM,KAAA;GAAW;AAEtC,WAAS,IAAI,GAAG;AAChB,OAAK,MAAM,UAAU,QAAQ,KAAK,WAAW,EAAE,EAAE;GAC/C,MAAM,MAAM,MAAM,QAAQ,CAAC,GAAG,OAAO,GAAG,CAAC;AACzC,OAAI,CAAC,IAAI,GAAI,QAAO;;AAEtB,WAAS,OAAO,GAAG;AACnB,UAAQ,IAAI,GAAG;AACf,SAAO;GAAE,IAAI;GAAM,MAAM,KAAA;GAAW;;AAGtC,MAAK,MAAM,MAAM,OAAO,KAAK,QAAQ,EAAE;EACrC,MAAM,MAAM,MAAM,IAAI,EAAE,CAAC;AACzB,MAAI,CAAC,IAAI,GAAI,QAAO;;AAEtB,QAAO;EAAE,IAAI;EAAM,MAAM,KAAA;EAAW;;AAGtC,SAAS,8BAA8B,KAAgD;CACrF,MAAM,UAAU,UAAU,IAAI;AAC9B,MAAK,MAAM,SAAS,IAAI,OAAO,KAC7B,MAAK,MAAM,YAAY,MAAM,WAAW,EAAE,CACxC,KAAI,CAAC,QAAQ,UACX,QAAO;EAAE,IAAI;EAAO,OAAO,UAAU,MAAM,GAAG,4BAA4B,SAAS;EAAI,QAAQ;EAAK;AAI1G,QAAO;EAAE,IAAI;EAAM,MAAM,KAAA;EAAW;;AAGtC,SAAS,sBACP,KACA,SACqD;CACrD,MAAM,OAAO,yBAAyB,QAAQ;AAC9C,KAAI,KAAK,OAAO,MAAO,QAAO;EAAE,IAAI;EAAO,OAAO,KAAK;EAAO,QAAQ,KAAK;EAAQ;CACnF,MAAM,aAAqB;EACzB,GAAG;EACH,QAAQ;GACN,GAAG,IAAI;GACP,mBAAmB;GACpB;EACF;CACD,MAAM,YAAY,8BAA8B,WAAW;AAC3D,KAAI,UAAU,OAAO,MAAO,QAAO;EAAE,IAAI;EAAO,OAAO,UAAU;EAAO,QAAQ,UAAU;EAAQ;AAClG,QAAO;EAAE,IAAI;EAAM,MAAM,EAAE,YAAY;EAAE;;AAG3C,SAAgB,sBAAsB,KAA4C;CAChF,MAAM,UAAU,OAAO,OAAO,UAAU,IAAI,CAAC,CAC1C,KAAK,YAAY;EAAE,GAAG;EAAQ,OAAO,WAAW,KAAK,OAAO,GAAG;EAAE,EAAE,CACnE,MAAM,GAAG,MAAM,EAAE,GAAG,cAAc,EAAE,GAAG,CAAC;CAC3C,MAAM,SAAS,IAAI,OAAO,KACvB,KAAK,WAAW;EACf,IAAI,MAAM;EACV,GAAI,MAAM,SAAS,OAAO,EAAE,MAAM,MAAM,SAAS,MAAM,GAAG,EAAE;EAC5D,SAAS,CAAC,GAAI,MAAM,WAAW,EAAE,CAAE;EACpC,EAAE,CACF,MAAM,GAAG,MAAM,EAAE,GAAG,cAAc,EAAE,GAAG,CAAC;AAC3C,QAAO;EAAE,iBAAiB,IAAI,OAAO;EAAe;EAAS;EAAQ,gBAAgB,CAAC,GAAG,yBAAyB;EAAE;;AAGtH,SAAgB,8BACd,KACA,MACuE;CACvE,MAAM,KAAK,kBAAkB,KAAK,MAAM,GAAG;CAC3C,MAAM,OAAO,KAAK,MAAM,MAAM,IAAI;CAClC,MAAM,cAAc,KAAK,aAAa,MAAM;CAC5C,MAAM,EAAE,IAAI,KAAK,MAAM,OAAO,aAAa,cAAc,GAAG,WAAW;CACvE,MAAM,SAAS,uBAAuB,UAAU;EAC9C,GAAG;EACH;EACA;EACA,SAAS,KAAK,WAAW;EACzB,GAAI,cAAc,EAAE,aAAa,GAAG,EAAE;EACvC,CAAC;AACF,KAAI,CAAC,OAAO,QACV,QAAO;EAAE,IAAI;EAAO,OAAO,OAAO,MAAM,OAAO,IAAI,WAAW;EAAgC,QAAQ;EAAK;CAE7G,MAAM,UAAU,UAAU,IAAI;AAC9B,KAAI,QAAQ,IACV,QAAO;EAAE,IAAI;EAAO,OAAO,sBAAsB,GAAG;EAAmB,QAAQ;EAAK;CAEtF,MAAM,OAAO,sBAAsB,KAAK;EAAE,GAAG;GAAU,KAAK,OAAO;EAAM,CAAC;AAC1E,KAAI,KAAK,OAAO,MAAO,QAAO;EAAE,IAAI;EAAO,OAAO,KAAK;EAAO,QAAQ,KAAK;EAAQ;AACnF,QAAO;EAAE,IAAI;EAAM,MAAM;GAAE,GAAG,KAAK;GAAM,UAAU;GAAI;EAAE;;AAG3D,SAAgB,8BACd,KACA,aACA,MACqD;CACrD,MAAM,WAAW,kBAAkB,YAAY;CAC/C,MAAM,UAAU,UAAU,IAAI;CAC9B,MAAM,UAAU,QAAQ;AACxB,KAAI,CAAC,QACH,QAAO;EAAE,IAAI;EAAO,OAAO,sBAAsB,SAAS;EAAc,QAAQ;EAAK;CAEvF,MAAM,aAA+B,EAAE,GAAG,SAAS;AAEnD,KAAI,KAAK,SAAS,KAAA,GAAW;EAC3B,MAAM,OAAO,KAAK,KAAK,MAAM;AAC7B,MAAI,CAAC,KACH,QAAO;GAAE,IAAI;GAAO,OAAO;GAAmC,QAAQ;GAAK;AAE7E,aAAW,OAAO;;AAEpB,KAAI,KAAK,gBAAgB,KAAA,EACvB,KAAI,KAAK,gBAAgB,QAAQ,CAAC,KAAK,YAAY,MAAM,CACvD,QAAO,WAAW;KAElB,YAAW,cAAc,KAAK,YAAY,MAAM;AAGpD,YAAW,UAAU,KAAK,WAAW,QAAQ,UAAU;AACvD,MAAK,MAAM,OAAO;EAAC;EAAW;EAAU;EAAS;EAAU;EAAU;EAAa;EAAc;EAAW;EAAQ,EAAW;AAC5H,MAAI,KAAK,SAAS,KAAA,EAAW;AAC7B,MAAI,KAAK,SAAS,KAChB,QAAO,WAAW;MAEjB,YAAuC,OAAO,KAAK;;CAIxD,MAAM,SAAS,uBAAuB,UAAU,WAAW;AAC3D,KAAI,CAAC,OAAO,QACV,QAAO;EAAE,IAAI;EAAO,OAAO,OAAO,MAAM,OAAO,IAAI,WAAW;EAAgC,QAAQ;EAAK;AAE7G,QAAO,sBAAsB,KAAK;EAAE,GAAG;GAAU,WAAW,OAAO;EAAM,CAAC;;AAG5E,SAAgB,8BACd,KACA,aACqD;CACrD,MAAM,WAAW,kBAAkB,YAAY;CAC/C,MAAM,UAAU,UAAU,IAAI;AAC9B,KAAI,CAAC,QAAQ,UACX,QAAO;EAAE,IAAI;EAAO,OAAO,sBAAsB,SAAS;EAAc,QAAQ;EAAK;AAEvF,KAAI,aAAa,IAAI,OAAO,cAC1B,QAAO;EAAE,IAAI;EAAO,OAAO,sBAAsB,SAAS;EAAgD,QAAQ;EAAK;CAEzH,MAAM,QAAQ,WAAW,KAAK,SAAS;AACvC,KAAI,MAAM,SAAS,EACjB,QAAO;EACL,IAAI;EACJ,OAAO,sBAAsB,SAAS,uBAAuB,MAAM,KAAK,MAAM,EAAE,QAAQ,CAAC,KAAK,KAAK;EACnG,QAAQ;EACT;CAEH,MAAM,cAAc,EAAE,GAAG,SAAS;AAClC,QAAO,YAAY;AACnB,QAAO,sBAAsB,KAAK,YAAY"}

package/dist/src/gateway/chat-limits.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"chat-limits.js","names":[],"sources":["../../../src/gateway/chat-limits.ts"],"sourcesContent":["/** Web chat: max files per user message (keep in sync with `web` MAX_CHAT_ATTACHMENTS). */\nexport const MAX_CHAT_ATTACHMENTS = 10;\n\n/**\n * Max raw bytes per attachment in web chat (keep in sync with `web` MAX_WEBCHAT_ATTACHMENT_FILE_BYTES).\n * JSON requests send base64 (`data`); gateway body limit must allow worst-case payload.\n */\nexport const MAX_WEBCHAT_ATTACHMENT_FILE_BYTES = 32 * 1024 * 1024;\n\n/** Upper bound for `POST /api/agent` JSON body when every slot is a max-sized binary attachment (base64 ~4/3). */\nexport function maxWebchatAgentRequestBodyBytes(): number {\n  const rawMax = MAX_WEBCHAT_ATTACHMENT_FILE_BYTES * MAX_CHAT_ATTACHMENTS;\n  return Math.ceil((rawMax * 4) / 3) + 1024 * 1024;\n}\n"],"mappings":";;AACA,MAAa,uBAAuB;;;;;AAMpC,MAAa,oCAAoC,KAAK,OAAO;;AAG7D,SAAgB,kCAA0C;CACxD,MAAM,SAAS,oCAAA;AACf,QAAO,KAAK,KAAM,SAAS,IAAK,EAAE,GAAG,OAAO"}

package/dist/src/gateway/chat-stream/mapper.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"mapper.js","names":["message"],"sources":["../../../../src/gateway/chat-stream/mapper.ts"],"sourcesContent":["import type { AgentMessage } from '@earendil-works/pi-agent-core';\n\nimport type { EmbeddedStreamEvent } from '../../agent/embedded/types.js';\nimport type { ChatStreamEvent, ChatStreamStatus } from './protocol.js';\n\nexport type RuntimeStreamEvent = EmbeddedStreamEvent | { type: string; [key: string]: unknown };\n\nexport interface ChatStreamMapperOptions {\n  runId: string;\n  sessionKey: string;\n  channel: string;\n}\n\ntype ToolResultEnvelope = { content?: unknown[]; details?: unknown; text?: string };\n\nexport class ChatStreamMapper {\n  private assistantIndex = 0;\n  private currentAssistantMessageId: string | undefined;\n  private lastAssistantMessageId: string | undefined;\n  private currentAssistantText = '';\n  private currentAssistantReviewEmitted = false;\n  private toolCallToMessageId = new Map<string, string>();\n  private turnDiffs: string[] = [];\n  private turnDiffFiles = new Set<string>();\n  private turnDiffAdded = 0;\n  private turnDiffRemoved = 0;\n  private started = false;\n  private ended = false;\n\n  constructor(private readonly opts: ChatStreamMapperOptions) {}\n\n  map(input: RuntimeStreamEvent): ChatStreamEvent[] {\n    const event = input as { type: string; [key: string]: unknown };\n    switch (event.type) {\n      case 'agent_start':\n        return this.start();\n      case 'agent_end':\n        return [];\n      case 'message_start':\n        return this.mapMessageStart(event.message);\n      case 'message_update':\n        return this.mapMessageUpdate(event);\n      case 'message_end':\n        return this.mapMessageEnd(event.message);\n      case 'tool_execution_start':\n        return this.mapToolStart(event);\n      case 'tool_execution_update':\n        return this.mapToolUpdate(event);\n      case 'tool_execution_end':\n        return this.mapToolEnd(event);\n      case 'review_start':\n        return [this.make('review_start', {\n          messageId: this.ensureAssistantMessageId(),\n          reviewId: String(event.reviewId ?? ''),\n          target: String(event.target ?? 'working tree changes'),\n          stage: event.stage === 'preparing' ? 'preparing' : 'reviewing',\n        })];\n      case 'review_delta':\n        return [this.make('review_delta', {\n          messageId: this.ensureAssistantMessageId(),\n          reviewId: String(event.reviewId ?? ''),\n          delta: String(event.delta ?? ''),\n        })];\n      case 'review_end':\n        return [this.make('review_end', {\n          messageId: this.ensureAssistantMessageId(),\n          reviewId: String(event.reviewId ?? ''),\n          status: event.status === 'error' ? 'error' : 'complete',\n          ...(typeof event.message === 'string' && event.message ? { message: event.message } : {}),\n        })];\n      case 'user_message':\n        return [this.make('user_message', { message: userMessageFromLegacyEvent(event) })];\n      case 'user_transcript':\n        return [this.make('user_transcript', { text: String(event.text ?? ''), media: event.media })];\n      case 'progress':\n        return [\n          this.make('progress', {\n            stage: String(event.stage ?? ''),\n            message: String(event.message ?? ''),\n            ...(typeof event.detail === 'string' ? { detail: event.detail } : {}),\n            ...(typeof event.toolName === 'string' ? { toolName: event.toolName } : {}),\n            ...(typeof event.completed === 'number' ? { completed: event.completed } : {}),\n            ...(typeof event.total === 'number' ? { total: event.total } : {}),\n          }),\n        ];\n      case 'compaction':\n        return [\n          this.make('compaction', {\n            status: event.status === 'completed' || event.status === 'skipped' ? event.status : 'started',\n            tokensBefore: typeof event.tokensBefore === 'number' ? event.tokensBefore : undefined,\n            tokensAfter: typeof event.tokensAfter === 'number' ? event.tokensAfter : undefined,\n            summary: typeof event.summary === 'string' ? event.summary : undefined,\n          }),\n        ];\n      case 'tts_audio':\n        return [\n          this.make('tts_audio', {\n            uri: String(event.uri ?? ''),\n            mimeType: String(event.mimeType ?? 'audio/mpeg'),\n            name: String(event.name ?? 'voice.mp3'),\n            attachTo: 'last_assistant',\n            ...(this.lastAssistantMessageId ? { messageId: this.lastAssistantMessageId } : {}),\n          }),\n        ];\n      case 'clarify_request':\n        return [\n          this.make('clarify_request', {\n            requestId: String(event.requestId ?? ''),\n            question: String(event.question ?? ''),\n            choices: Array.isArray(event.choices) ? event.choices.filter((x): x is string => typeof x === 'string') : undefined,\n            default: typeof event.default === 'string' ? event.default : undefined,\n          }),\n        ];\n      case 'memory_consent_required':\n        return [\n          this.make('memory_consent_required', {\n            requests: Array.isArray(event.requests)\n              ? event.requests.flatMap((raw) => {\n                  if (!raw || typeof raw !== 'object') return [];\n                  const request = raw as Record<string, unknown>;\n                  const id = typeof request.id === 'string' ? request.id : '';\n                  const recordId = typeof request.recordId === 'string' ? request.recordId : '';\n                  const statement = typeof request.statement === 'string' ? request.statement : '';\n                  const purpose = typeof request.purpose === 'string' ? request.purpose : '';\n                  return id && recordId && statement ? [{ id, recordId, statement, purpose }] : [];\n                })\n              : [],\n          }),\n        ];\n      case 'memory_captured':\n        return [\n          this.make('memory_captured', {\n            records: Array.isArray(event.records)\n              ? event.records.flatMap((raw) => {\n                  if (!raw || typeof raw !== 'object') return [];\n                  const record = raw as Record<string, unknown>;\n                  const id = typeof record.id === 'string' ? record.id : '';\n                  const content = typeof record.content === 'string' ? record.content : '';\n                  const kind = typeof record.kind === 'string' ? record.kind : '';\n                  return id && content ? [{ id, content, kind }] : [];\n                })\n              : [],\n          }),\n        ];\n      case 'error':\n        return [this.make('error', { code: 'AGENT_RUN_ERROR', message: String(event.content ?? event.message ?? 'Unknown error') })];\n      default:\n        return [];\n    }\n  }\n\n  start(): ChatStreamEvent[] {\n    if (this.started) return [];\n    this.started = true;\n    return [this.make('run_start', { channel: this.opts.channel })];\n  }\n\n  end(status: ChatStreamStatus, summary?: string): ChatStreamEvent[] {\n    if (this.ended) return [];\n    this.ended = true;\n    return [this.make('run_end', { status, summary })];\n  }\n\n  error(message: string, code = 'AGENT_RUN_ERROR'): ChatStreamEvent[] {\n    return [this.make('error', { code, message })];\n  }\n\n  private mapMessageStart(raw: unknown): ChatStreamEvent[] {\n    const message = raw as AgentMessage | undefined;\n    if (message?.role !== 'assistant') return [];\n    const messageId = this.nextAssistantMessageId();\n    this.currentAssistantMessageId = messageId;\n    this.currentAssistantText = '';\n    this.currentAssistantReviewEmitted = false;\n    return [this.make('assistant_message_start', { messageId })];\n  }\n\n  private mapMessageUpdate(event: { [key: string]: unknown }): ChatStreamEvent[] {\n    const message = event.message as AgentMessage | undefined;\n    if (message?.role !== 'assistant') return [];\n    const messageId = this.ensureAssistantMessageId();\n    const review = extractReview(message);\n    if (review && !this.currentAssistantReviewEmitted) {\n      this.currentAssistantReviewEmitted = true;\n      return [this.make('review', { messageId, review })];\n    }\n    const delta = event.assistantMessageEvent as { type?: unknown; delta?: unknown } | undefined;\n    if (delta?.type === 'text_delta' && typeof delta.delta === 'string' && delta.delta) {\n      const text = extractTextFromMessage(message);\n      const suffixFromMessage = appendSuffix(this.currentAssistantText, text);\n      const suffix = text ? suffixFromMessage : appendSuffix(this.currentAssistantText, delta.delta);\n      if (!suffix) {\n        if (text) this.currentAssistantText = text;\n        return [];\n      }\n      this.currentAssistantText = text || `${this.currentAssistantText}${suffix}`;\n      return [this.make('assistant_delta', { messageId, delta: suffix })];\n    }\n    if (delta?.type === 'thinking_delta' && typeof delta.delta === 'string' && delta.delta) {\n      return [this.make('thinking_delta', { messageId, delta: delta.delta })];\n    }\n\n    const text = extractTextFromMessage(message);\n    const suffix = appendSuffix(this.currentAssistantText, text);\n    this.currentAssistantText = text || this.currentAssistantText;\n    return suffix ? [this.make('assistant_delta', { messageId, delta: suffix })] : [];\n  }\n\n  private mapMessageEnd(raw: unknown): ChatStreamEvent[] {\n    const message = raw as AgentMessage | undefined;\n    if (message?.role !== 'assistant') return [];\n    const messageId = this.ensureAssistantMessageId();\n    const events: ChatStreamEvent[] = [];\n    const review = extractReview(message);\n    if (review && !this.currentAssistantReviewEmitted) {\n      this.currentAssistantReviewEmitted = true;\n      events.push(this.make('review', { messageId, review }));\n    }\n    const text = extractTextFromMessage(message);\n    const suffix = appendSuffix(this.currentAssistantText, text);\n    if (suffix) events.push(this.make('assistant_delta', { messageId, delta: suffix }));\n    this.currentAssistantText = text || this.currentAssistantText;\n    events.push(this.make('thinking_end', { messageId }));\n    if (this.turnDiffs.length > 0) {\n      events.push(\n        this.make('turn_diff', {\n          messageId,\n          files: [...this.turnDiffFiles],\n          diff: this.turnDiffs.join('\\n'),\n          added: this.turnDiffAdded,\n          removed: this.turnDiffRemoved,\n        }),\n      );\n      this.turnDiffs = [];\n      this.turnDiffFiles.clear();\n      this.turnDiffAdded = 0;\n      this.turnDiffRemoved = 0;\n    }\n    events.push(this.make('assistant_message_end', { messageId, usage: extractUsage(message) }));\n    this.lastAssistantMessageId = messageId;\n    this.currentAssistantMessageId = undefined;\n    this.currentAssistantText = '';\n    this.currentAssistantReviewEmitted = false;\n    return events;\n  }\n\n  private mapToolStart(event: { [key: string]: unknown }): ChatStreamEvent[] {\n    const toolCallId = String(event.toolCallId ?? '');\n    if (!toolCallId) return [];\n    const messageId = this.ensureAssistantMessageId();\n    const toolName = String(event.toolName ?? 'unknown');\n    this.toolCallToMessageId.set(toolCallId, messageId);\n    const events: ChatStreamEvent[] = [\n      this.make('tool_start', {\n        messageId,\n        toolCallId,\n        toolName,\n        args: event.args,\n      }),\n    ];\n    if (toolName === 'exec_command') {\n      const args = asRecord(event.args);\n      events.push(\n        this.make('command_started', {\n          messageId,\n          toolCallId,\n          command: String(args?.cmd ?? args?.command ?? ''),\n          cwd: typeof args?.cwd === 'string' ? args.cwd : undefined,\n        }),\n      );\n    }\n    return events;\n  }\n\n  private mapToolUpdate(event: { [key: string]: unknown }): ChatStreamEvent[] {\n    const toolCallId = String(event.toolCallId ?? '');\n    if (!toolCallId) return [];\n    const messageId = this.toolCallToMessageId.get(toolCallId) ?? this.ensureAssistantMessageId();\n    const partial = event.partialResult;\n    const details = extractDetails(partial);\n    const textDelta = extractText(partial);\n    const toolName = String(event.toolName ?? 'unknown');\n    const events: ChatStreamEvent[] = [\n      this.make('tool_update', {\n        messageId,\n        toolCallId,\n        toolName,\n        details,\n        textDelta,\n      }),\n    ];\n    if (toolName === 'exec_command') {\n      const rec = asRecord(details);\n      if (rec?.kind === 'command_output_delta') {\n        const stream = rec.stream === 'stderr' ? 'stderr' : 'stdout';\n        const delta = typeof rec.delta === 'string' ? rec.delta : '';\n        if (delta) {\n          events.push(this.make('command_output_delta', { messageId, toolCallId, stream, delta }));\n        }\n      }\n    }\n    return events;\n  }\n\n  private mapToolEnd(event: { [key: string]: unknown }): ChatStreamEvent[] {\n    const toolCallId = String(event.toolCallId ?? '');\n    if (!toolCallId) return [];\n    const messageId = this.toolCallToMessageId.get(toolCallId) ?? this.ensureAssistantMessageId();\n    const result = normalizeToolResult(event.result);\n    const toolName = String(event.toolName ?? 'unknown');\n    const events: ChatStreamEvent[] = [\n      this.make('tool_end', {\n        messageId,\n        toolCallId,\n        toolName,\n        status: event.isError ? 'error' : 'success',\n        result,\n        errorMessage: event.isError ? result?.text : undefined,\n      }),\n    ];\n    const details = asRecord(result?.details);\n    if (toolName === 'exec_command' && details) {\n      events.push(\n        this.make('command_completed', {\n          messageId,\n          toolCallId,\n          command: typeof details.command === 'string' ? details.command : '',\n          cwd: typeof details.cwd === 'string' ? details.cwd : undefined,\n          exitCode: typeof details.exitCode === 'number' ? details.exitCode : null,\n          durationMs: typeof details.durationMs === 'number' ? details.durationMs : undefined,\n          timedOut: details.timedOut === true,\n          truncated: details.truncated === true,\n        }),\n      );\n    }\n    if (toolName === 'apply_patch' && details) {\n      const changes = Array.isArray(details.changes) ? details.changes : [];\n      const diff = typeof details.diff === 'string' ? details.diff : '';\n      const added = typeof details.added === 'number' ? details.added : 0;\n      const removed = typeof details.removed === 'number' ? details.removed : 0;\n      if (diff || changes.length > 0) {\n        this.recordPatchDiff(details);\n        events.push(this.make('patch_applied', { messageId, toolCallId, changes, diff, added, removed }));\n      }\n    }\n    if (toolName === 'update_plan' && details) {\n      const plan = extractTurnPlan(details);\n      if (plan) {\n        events.push(this.make('turn_plan', { messageId, ...plan }));\n      }\n    }\n    return events;\n  }\n\n  private ensureAssistantMessageId(): string {\n    if (!this.currentAssistantMessageId) {\n      this.currentAssistantMessageId = this.nextAssistantMessageId();\n    }\n    return this.currentAssistantMessageId;\n  }\n\n  private nextAssistantMessageId(): string {\n    this.assistantIndex += 1;\n    return `msg_${this.opts.runId.replace(/[^a-zA-Z0-9_-]/g, '_')}_${this.assistantIndex}`;\n  }\n\n  private make<T extends ChatStreamEvent['type']>(\n    type: T,\n    payload: Extract<ChatStreamEvent, { type: T }>['payload'],\n  ): Extract<ChatStreamEvent, { type: T }> {\n    return {\n      type,\n      runId: this.opts.runId,\n      sessionKey: this.opts.sessionKey,\n      timestamp: Date.now(),\n      payload,\n    } as Extract<ChatStreamEvent, { type: T }>;\n  }\n\n  private recordPatchDiff(details: Record<string, unknown>): void {\n    const diff = typeof details.diff === 'string' ? details.diff : '';\n    if (diff) this.turnDiffs.push(diff);\n    if (typeof details.added === 'number') this.turnDiffAdded += details.added;\n    if (typeof details.removed === 'number') this.turnDiffRemoved += details.removed;\n    const changes = Array.isArray(details.changes) ? details.changes : [];\n    for (const change of changes) {\n      const rec = asRecord(change);\n      const path = typeof rec?.moveTo === 'string'\n        ? rec.moveTo\n        : typeof rec?.path === 'string'\n          ? rec.path\n          : undefined;\n      if (path) this.turnDiffFiles.add(path);\n    }\n  }\n}\n\nfunction userMessageFromLegacyEvent(event: { [key: string]: unknown }): unknown {\n  return {\n    role: 'user',\n    content: event.content ?? [],\n    attachments: event.media,\n    timestamp: typeof event.timestamp === 'number' ? event.timestamp : Date.now(),\n  };\n}\n\nfunction extractTextFromMessage(message: AgentMessage): string {\n  return extractText((message as { content?: unknown }).content);\n}\n\nfunction extractReview(message: AgentMessage): unknown {\n  const metadata = (message as { metadata?: unknown }).metadata;\n  const metadataReview = asRecord(metadata)?.review;\n  if (isReviewBlock(metadataReview)) return metadataReview;\n  const content = (message as { content?: unknown }).content;\n  if (Array.isArray(content)) {\n    for (const block of content) {\n      if (isReviewBlock(block)) return block;\n    }\n  }\n  return undefined;\n}\n\nfunction isReviewBlock(value: unknown): value is Record<string, unknown> {\n  return !!value && typeof value === 'object' && !Array.isArray(value)\n    && (value as { type?: unknown }).type === 'review';\n}\n\nfunction extractText(value: unknown): string | undefined {\n  if (typeof value === 'string') return value;\n  if (!Array.isArray(value)) return undefined;\n  const text = value\n    .map((block) => {\n      if (!block || typeof block !== 'object') return '';\n      const rec = block as { type?: unknown; text?: unknown };\n      return rec.type === 'text' && typeof rec.text === 'string' ? rec.text : '';\n    })\n    .join('');\n  return text || undefined;\n}\n\nfunction appendSuffix(base: string, next: string | undefined): string {\n  if (!next) return '';\n  if (!base) return next;\n  if (next === base || base.endsWith(next)) return '';\n  if (next.startsWith(base)) return next.slice(base.length);\n  const max = Math.min(base.length, next.length, 512);\n  for (let overlap = max; overlap > 0; overlap--) {\n    if (base.slice(-overlap) === next.slice(0, overlap)) return next.slice(overlap);\n  }\n  return next;\n}\n\nfunction extractUsage(message: AgentMessage): AssistantMessageEndEventPayload['usage'] {\n  const usage = (message as { usage?: unknown }).usage;\n  if (!usage || typeof usage !== 'object') return undefined;\n  const rec = usage as Record<string, unknown>;\n  return {\n    inputTokens: typeof rec.inputTokens === 'number' ? rec.inputTokens : undefined,\n    outputTokens: typeof rec.outputTokens === 'number' ? rec.outputTokens : undefined,\n    totalTokens: typeof rec.totalTokens === 'number' ? rec.totalTokens : undefined,\n    cost: typeof rec.cost === 'number' ? rec.cost : undefined,\n  };\n}\n\ntype AssistantMessageEndEventPayload = Extract<ChatStreamEvent, { type: 'assistant_message_end' }>['payload'];\n\nfunction extractDetails(value: unknown): unknown {\n  if (!value || typeof value !== 'object') return undefined;\n  return (value as Record<string, unknown>).details;\n}\n\nfunction asRecord(value: unknown): Record<string, unknown> | null {\n  return value && typeof value === 'object' && !Array.isArray(value)\n    ? (value as Record<string, unknown>)\n    : null;\n}\n\nfunction normalizeToolResult(value: unknown): ToolResultEnvelope | undefined {\n  if (value == null) return undefined;\n  if (typeof value === 'string') return { text: value };\n  if (typeof value !== 'object') return { text: String(value) };\n  const rec = value as Record<string, unknown>;\n  return {\n    content: Array.isArray(rec.content) ? rec.content : undefined,\n    details: rec.details,\n    text: extractText(rec.content) ?? (typeof rec.text === 'string' ? rec.text : undefined),\n  };\n}\n\nfunction extractTurnPlan(details: Record<string, unknown>): { explanation?: string; plan: { step: string; status: 'pending' | 'in_progress' | 'completed' }[] } | undefined {\n  const rawPlan = Array.isArray(details.plan) ? details.plan : [];\n  const plan = rawPlan\n    .map((item) => {\n      const rec = asRecord(item);\n      const step = typeof rec?.step === 'string' ? rec.step.trim() : '';\n      const status = rec?.status;\n      if (!step || (status !== 'pending' && status !== 'in_progress' && status !== 'completed')) {\n        return undefined;\n      }\n      return { step, status };\n    })\n    .filter((item): item is { step: string; status: 'pending' | 'in_progress' | 'completed' } => Boolean(item));\n  if (plan.length === 0) return undefined;\n  const explanation = typeof details.explanation === 'string' && details.explanation.trim()\n    ? details.explanation.trim()\n    : undefined;\n  return { explanation, plan };\n}\n"],"mappings":";AAeA,IAAa,mBAAb,MAA8B;CAC5B,iBAAyB;CACzB;CACA;CACA,uBAA+B;CAC/B,gCAAwC;CACxC,sCAA8B,IAAI,KAAqB;CACvD,YAA8B,EAAE;CAChC,gCAAwB,IAAI,KAAa;CACzC,gBAAwB;CACxB,kBAA0B;CAC1B,UAAkB;CAClB,QAAgB;CAEhB,YAAY,MAAgD;AAA/B,OAAA,OAAA;;CAE7B,IAAI,OAA8C;EAChD,MAAM,QAAQ;AACd,UAAQ,MAAM,MAAd;GACE,KAAK,cACH,QAAO,KAAK,OAAO;GACrB,KAAK,YACH,QAAO,EAAE;GACX,KAAK,gBACH,QAAO,KAAK,gBAAgB,MAAM,QAAQ;GAC5C,KAAK,iBACH,QAAO,KAAK,iBAAiB,MAAM;GACrC,KAAK,cACH,QAAO,KAAK,cAAc,MAAM,QAAQ;GAC1C,KAAK,uBACH,QAAO,KAAK,aAAa,MAAM;GACjC,KAAK,wBACH,QAAO,KAAK,cAAc,MAAM;GAClC,KAAK,qBACH,QAAO,KAAK,WAAW,MAAM;GAC/B,KAAK,eACH,QAAO,CAAC,KAAK,KAAK,gBAAgB;IAChC,WAAW,KAAK,0BAA0B;IAC1C,UAAU,OAAO,MAAM,YAAY,GAAG;IACtC,QAAQ,OAAO,MAAM,UAAU,uBAAuB;IACtD,OAAO,MAAM,UAAU,cAAc,cAAc;IACpD,CAAC,CAAC;GACL,KAAK,eACH,QAAO,CAAC,KAAK,KAAK,gBAAgB;IAChC,WAAW,KAAK,0BAA0B;IAC1C,UAAU,OAAO,MAAM,YAAY,GAAG;IACtC,OAAO,OAAO,MAAM,SAAS,GAAG;IACjC,CAAC,CAAC;GACL,KAAK,aACH,QAAO,CAAC,KAAK,KAAK,cAAc;IAC9B,WAAW,KAAK,0BAA0B;IAC1C,UAAU,OAAO,MAAM,YAAY,GAAG;IACtC,QAAQ,MAAM,WAAW,UAAU,UAAU;IAC7C,GAAI,OAAO,MAAM,YAAY,YAAY,MAAM,UAAU,EAAE,SAAS,MAAM,SAAS,GAAG,EAAE;IACzF,CAAC,CAAC;GACL,KAAK,eACH,QAAO,CAAC,KAAK,KAAK,gBAAgB,EAAE,SAAS,2BAA2B,MAAM,EAAE,CAAC,CAAC;GACpF,KAAK,kBACH,QAAO,CAAC,KAAK,KAAK,mBAAmB;IAAE,MAAM,OAAO,MAAM,QAAQ,GAAG;IAAE,OAAO,MAAM;IAAO,CAAC,CAAC;GAC/F,KAAK,WACH,QAAO,CACL,KAAK,KAAK,YAAY;IACpB,OAAO,OAAO,MAAM,SAAS,GAAG;IAChC,SAAS,OAAO,MAAM,WAAW,GAAG;IACpC,GAAI,OAAO,MAAM,WAAW,WAAW,EAAE,QAAQ,MAAM,QAAQ,GAAG,EAAE;IACpE,GAAI,OAAO,MAAM,aAAa,WAAW,EAAE,UAAU,MAAM,UAAU,GAAG,EAAE;IAC1E,GAAI,OAAO,MAAM,cAAc,WAAW,EAAE,WAAW,MAAM,WAAW,GAAG,EAAE;IAC7E,GAAI,OAAO,MAAM,UAAU,WAAW,EAAE,OAAO,MAAM,OAAO,GAAG,EAAE;IAClE,CAAC,CACH;GACH,KAAK,aACH,QAAO,CACL,KAAK,KAAK,cAAc;IACtB,QAAQ,MAAM,WAAW,eAAe,MAAM,WAAW,YAAY,MAAM,SAAS;IACpF,cAAc,OAAO,MAAM,iBAAiB,WAAW,MAAM,eAAe,KAAA;IAC5E,aAAa,OAAO,MAAM,gBAAgB,WAAW,MAAM,cAAc,KAAA;IACzE,SAAS,OAAO,MAAM,YAAY,WAAW,MAAM,UAAU,KAAA;IAC9D,CAAC,CACH;GACH,KAAK,YACH,QAAO,CACL,KAAK,KAAK,aAAa;IACrB,KAAK,OAAO,MAAM,OAAO,GAAG;IAC5B,UAAU,OAAO,MAAM,YAAY,aAAa;IAChD,MAAM,OAAO,MAAM,QAAQ,YAAY;IACvC,UAAU;IACV,GAAI,KAAK,yBAAyB,EAAE,WAAW,KAAK,wBAAwB,GAAG,EAAE;IAClF,CAAC,CACH;GACH,KAAK,kBACH,QAAO,CACL,KAAK,KAAK,mBAAmB;IAC3B,WAAW,OAAO,MAAM,aAAa,GAAG;IACxC,UAAU,OAAO,MAAM,YAAY,GAAG;IACtC,SAAS,MAAM,QAAQ,MAAM,QAAQ,GAAG,MAAM,QAAQ,QAAQ,MAAmB,OAAO,MAAM,SAAS,GAAG,KAAA;IAC1G,SAAS,OAAO,MAAM,YAAY,WAAW,MAAM,UAAU,KAAA;IAC9D,CAAC,CACH;GACH,KAAK,0BACH,QAAO,CACL,KAAK,KAAK,2BAA2B,EACnC,UAAU,MAAM,QAAQ,MAAM,SAAS,GACnC,MAAM,SAAS,SAAS,QAAQ;AAC9B,QAAI,CAAC,OAAO,OAAO,QAAQ,SAAU,QAAO,EAAE;IAC9C,MAAM,UAAU;IAChB,MAAM,KAAK,OAAO,QAAQ,OAAO,WAAW,QAAQ,KAAK;IACzD,MAAM,WAAW,OAAO,QAAQ,aAAa,WAAW,QAAQ,WAAW;IAC3E,MAAM,YAAY,OAAO,QAAQ,cAAc,WAAW,QAAQ,YAAY;IAC9E,MAAM,UAAU,OAAO,QAAQ,YAAY,WAAW,QAAQ,UAAU;AACxE,WAAO,MAAM,YAAY,YAAY,CAAC;KAAE;KAAI;KAAU;KAAW;KAAS,CAAC,GAAG,EAAE;KAChF,GACF,EAAE,EACP,CAAC,CACH;GACH,KAAK,kBACH,QAAO,CACL,KAAK,KAAK,mBAAmB,EAC3B,SAAS,MAAM,QAAQ,MAAM,QAAQ,GACjC,MAAM,QAAQ,SAAS,QAAQ;AAC7B,QAAI,CAAC,OAAO,OAAO,QAAQ,SAAU,QAAO,EAAE;IAC9C,MAAM,SAAS;IACf,MAAM,KAAK,OAAO,OAAO,OAAO,WAAW,OAAO,KAAK;IACvD,MAAM,UAAU,OAAO,OAAO,YAAY,WAAW,OAAO,UAAU;IACtE,MAAM,OAAO,OAAO,OAAO,SAAS,WAAW,OAAO,OAAO;AAC7D,WAAO,MAAM,UAAU,CAAC;KAAE;KAAI;KAAS;KAAM,CAAC,GAAG,EAAE;KACnD,GACF,EAAE,EACP,CAAC,CACH;GACH,KAAK,QACH,QAAO,CAAC,KAAK,KAAK,SAAS;IAAE,MAAM;IAAmB,SAAS,OAAO,MAAM,WAAW,MAAM,WAAW,gBAAgB;IAAE,CAAC,CAAC;GAC9H,QACE,QAAO,EAAE;;;CAIf,QAA2B;AACzB,MAAI,KAAK,QAAS,QAAO,EAAE;AAC3B,OAAK,UAAU;AACf,SAAO,CAAC,KAAK,KAAK,aAAa,EAAE,SAAS,KAAK,KAAK,SAAS,CAAC,CAAC;;CAGjE,IAAI,QAA0B,SAAqC;AACjE,MAAI,KAAK,MAAO,QAAO,EAAE;AACzB,OAAK,QAAQ;AACb,SAAO,CAAC,KAAK,KAAK,WAAW;GAAE;GAAQ;GAAS,CAAC,CAAC;;CAGpD,MAAM,SAAiB,OAAO,mBAAsC;AAClE,SAAO,CAAC,KAAK,KAAK,SAAS;GAAE;GAAM;GAAS,CAAC,CAAC;;CAGhD,gBAAwB,KAAiC;AAEvD,MAAIA,KAAS,SAAS,YAAa,QAAO,EAAE;EAC5C,MAAM,YAAY,KAAK,wBAAwB;AAC/C,OAAK,4BAA4B;AACjC,OAAK,uBAAuB;AAC5B,OAAK,gCAAgC;AACrC,SAAO,CAAC,KAAK,KAAK,2BAA2B,EAAE,WAAW,CAAC,CAAC;;CAG9D,iBAAyB,OAAsD;EAC7E,MAAM,UAAU,MAAM;AACtB,MAAI,SAAS,SAAS,YAAa,QAAO,EAAE;EAC5C,MAAM,YAAY,KAAK,0BAA0B;EACjD,MAAM,SAAS,cAAc,QAAQ;AACrC,MAAI,UAAU,CAAC,KAAK,+BAA+B;AACjD,QAAK,gCAAgC;AACrC,UAAO,CAAC,KAAK,KAAK,UAAU;IAAE;IAAW;IAAQ,CAAC,CAAC;;EAErD,MAAM,QAAQ,MAAM;AACpB,MAAI,OAAO,SAAS,gBAAgB,OAAO,MAAM,UAAU,YAAY,MAAM,OAAO;GAClF,MAAM,OAAO,uBAAuB,QAAQ;GAC5C,MAAM,oBAAoB,aAAa,KAAK,sBAAsB,KAAK;GACvE,MAAM,SAAS,OAAO,oBAAoB,aAAa,KAAK,sBAAsB,MAAM,MAAM;AAC9F,OAAI,CAAC,QAAQ;AACX,QAAI,KAAM,MAAK,uBAAuB;AACtC,WAAO,EAAE;;AAEX,QAAK,uBAAuB,QAAQ,GAAG,KAAK,uBAAuB;AACnE,UAAO,CAAC,KAAK,KAAK,mBAAmB;IAAE;IAAW,OAAO;IAAQ,CAAC,CAAC;;AAErE,MAAI,OAAO,SAAS,oBAAoB,OAAO,MAAM,UAAU,YAAY,MAAM,MAC/E,QAAO,CAAC,KAAK,KAAK,kBAAkB;GAAE;GAAW,OAAO,MAAM;GAAO,CAAC,CAAC;EAGzE,MAAM,OAAO,uBAAuB,QAAQ;EAC5C,MAAM,SAAS,aAAa,KAAK,sBAAsB,KAAK;AAC5D,OAAK,uBAAuB,QAAQ,KAAK;AACzC,SAAO,SAAS,CAAC,KAAK,KAAK,mBAAmB;GAAE;GAAW,OAAO;GAAQ,CAAC,CAAC,GAAG,EAAE;;CAGnF,cAAsB,KAAiC;EACrD,MAAM,UAAU;AAChB,MAAI,SAAS,SAAS,YAAa,QAAO,EAAE;EAC5C,MAAM,YAAY,KAAK,0BAA0B;EACjD,MAAM,SAA4B,EAAE;EACpC,MAAM,SAAS,cAAc,QAAQ;AACrC,MAAI,UAAU,CAAC,KAAK,+BAA+B;AACjD,QAAK,gCAAgC;AACrC,UAAO,KAAK,KAAK,KAAK,UAAU;IAAE;IAAW;IAAQ,CAAC,CAAC;;EAEzD,MAAM,OAAO,uBAAuB,QAAQ;EAC5C,MAAM,SAAS,aAAa,KAAK,sBAAsB,KAAK;AAC5D,MAAI,OAAQ,QAAO,KAAK,KAAK,KAAK,mBAAmB;GAAE;GAAW,OAAO;GAAQ,CAAC,CAAC;AACnF,OAAK,uBAAuB,QAAQ,KAAK;AACzC,SAAO,KAAK,KAAK,KAAK,gBAAgB,EAAE,WAAW,CAAC,CAAC;AACrD,MAAI,KAAK,UAAU,SAAS,GAAG;AAC7B,UAAO,KACL,KAAK,KAAK,aAAa;IACrB;IACA,OAAO,CAAC,GAAG,KAAK,cAAc;IAC9B,MAAM,KAAK,UAAU,KAAK,KAAK;IAC/B,OAAO,KAAK;IACZ,SAAS,KAAK;IACf,CAAC,CACH;AACD,QAAK,YAAY,EAAE;AACnB,QAAK,cAAc,OAAO;AAC1B,QAAK,gBAAgB;AACrB,QAAK,kBAAkB;;AAEzB,SAAO,KAAK,KAAK,KAAK,yBAAyB;GAAE;GAAW,OAAO,aAAa,QAAQ;GAAE,CAAC,CAAC;AAC5F,OAAK,yBAAyB;AAC9B,OAAK,4BAA4B,KAAA;AACjC,OAAK,uBAAuB;AAC5B,OAAK,gCAAgC;AACrC,SAAO;;CAGT,aAAqB,OAAsD;EACzE,MAAM,aAAa,OAAO,MAAM,cAAc,GAAG;AACjD,MAAI,CAAC,WAAY,QAAO,EAAE;EAC1B,MAAM,YAAY,KAAK,0BAA0B;EACjD,MAAM,WAAW,OAAO,MAAM,YAAY,UAAU;AACpD,OAAK,oBAAoB,IAAI,YAAY,UAAU;EACnD,MAAM,SAA4B,CAChC,KAAK,KAAK,cAAc;GACtB;GACA;GACA;GACA,MAAM,MAAM;GACb,CAAC,CACH;AACD,MAAI,aAAa,gBAAgB;GAC/B,MAAM,OAAO,SAAS,MAAM,KAAK;AACjC,UAAO,KACL,KAAK,KAAK,mBAAmB;IAC3B;IACA;IACA,SAAS,OAAO,MAAM,OAAO,MAAM,WAAW,GAAG;IACjD,KAAK,OAAO,MAAM,QAAQ,WAAW,KAAK,MAAM,KAAA;IACjD,CAAC,CACH;;AAEH,SAAO;;CAGT,cAAsB,OAAsD;EAC1E,MAAM,aAAa,OAAO,MAAM,cAAc,GAAG;AACjD,MAAI,CAAC,WAAY,QAAO,EAAE;EAC1B,MAAM,YAAY,KAAK,oBAAoB,IAAI,WAAW,IAAI,KAAK,0BAA0B;EAC7F,MAAM,UAAU,MAAM;EACtB,MAAM,UAAU,eAAe,QAAQ;EACvC,MAAM,YAAY,YAAY,QAAQ;EACtC,MAAM,WAAW,OAAO,MAAM,YAAY,UAAU;EACpD,MAAM,SAA4B,CAChC,KAAK,KAAK,eAAe;GACvB;GACA;GACA;GACA;GACA;GACD,CAAC,CACH;AACD,MAAI,aAAa,gBAAgB;GAC/B,MAAM,MAAM,SAAS,QAAQ;AAC7B,OAAI,KAAK,SAAS,wBAAwB;IACxC,MAAM,SAAS,IAAI,WAAW,WAAW,WAAW;IACpD,MAAM,QAAQ,OAAO,IAAI,UAAU,WAAW,IAAI,QAAQ;AAC1D,QAAI,MACF,QAAO,KAAK,KAAK,KAAK,wBAAwB;KAAE;KAAW;KAAY;KAAQ;KAAO,CAAC,CAAC;;;AAI9F,SAAO;;CAGT,WAAmB,OAAsD;EACvE,MAAM,aAAa,OAAO,MAAM,cAAc,GAAG;AACjD,MAAI,CAAC,WAAY,QAAO,EAAE;EAC1B,MAAM,YAAY,KAAK,oBAAoB,IAAI,WAAW,IAAI,KAAK,0BAA0B;EAC7F,MAAM,SAAS,oBAAoB,MAAM,OAAO;EAChD,MAAM,WAAW,OAAO,MAAM,YAAY,UAAU;EACpD,MAAM,SAA4B,CAChC,KAAK,KAAK,YAAY;GACpB;GACA;GACA;GACA,QAAQ,MAAM,UAAU,UAAU;GAClC;GACA,cAAc,MAAM,UAAU,QAAQ,OAAO,KAAA;GAC9C,CAAC,CACH;EACD,MAAM,UAAU,SAAS,QAAQ,QAAQ;AACzC,MAAI,aAAa,kBAAkB,QACjC,QAAO,KACL,KAAK,KAAK,qBAAqB;GAC7B;GACA;GACA,SAAS,OAAO,QAAQ,YAAY,WAAW,QAAQ,UAAU;GACjE,KAAK,OAAO,QAAQ,QAAQ,WAAW,QAAQ,MAAM,KAAA;GACrD,UAAU,OAAO,QAAQ,aAAa,WAAW,QAAQ,WAAW;GACpE,YAAY,OAAO,QAAQ,eAAe,WAAW,QAAQ,aAAa,KAAA;GAC1E,UAAU,QAAQ,aAAa;GAC/B,WAAW,QAAQ,cAAc;GAClC,CAAC,CACH;AAEH,MAAI,aAAa,iBAAiB,SAAS;GACzC,MAAM,UAAU,MAAM,QAAQ,QAAQ,QAAQ,GAAG,QAAQ,UAAU,EAAE;GACrE,MAAM,OAAO,OAAO,QAAQ,SAAS,WAAW,QAAQ,OAAO;GAC/D,MAAM,QAAQ,OAAO,QAAQ,UAAU,WAAW,QAAQ,QAAQ;GAClE,MAAM,UAAU,OAAO,QAAQ,YAAY,WAAW,QAAQ,UAAU;AACxE,OAAI,QAAQ,QAAQ,SAAS,GAAG;AAC9B,SAAK,gBAAgB,QAAQ;AAC7B,WAAO,KAAK,KAAK,KAAK,iBAAiB;KAAE;KAAW;KAAY;KAAS;KAAM;KAAO;KAAS,CAAC,CAAC;;;AAGrG,MAAI,aAAa,iBAAiB,SAAS;GACzC,MAAM,OAAO,gBAAgB,QAAQ;AACrC,OAAI,KACF,QAAO,KAAK,KAAK,KAAK,aAAa;IAAE;IAAW,GAAG;IAAM,CAAC,CAAC;;AAG/D,SAAO;;CAGT,2BAA2C;AACzC,MAAI,CAAC,KAAK,0BACR,MAAK,4BAA4B,KAAK,wBAAwB;AAEhE,SAAO,KAAK;;CAGd,yBAAyC;AACvC,OAAK,kBAAkB;AACvB,SAAO,OAAO,KAAK,KAAK,MAAM,QAAQ,mBAAmB,IAAI,CAAC,GAAG,KAAK;;CAGxE,KACE,MACA,SACuC;AACvC,SAAO;GACL;GACA,OAAO,KAAK,KAAK;GACjB,YAAY,KAAK,KAAK;GACtB,WAAW,KAAK,KAAK;GACrB;GACD;;CAGH,gBAAwB,SAAwC;EAC9D,MAAM,OAAO,OAAO,QAAQ,SAAS,WAAW,QAAQ,OAAO;AAC/D,MAAI,KAAM,MAAK,UAAU,KAAK,KAAK;AACnC,MAAI,OAAO,QAAQ,UAAU,SAAU,MAAK,iBAAiB,QAAQ;AACrE,MAAI,OAAO,QAAQ,YAAY,SAAU,MAAK,mBAAmB,QAAQ;EACzE,MAAM,UAAU,MAAM,QAAQ,QAAQ,QAAQ,GAAG,QAAQ,UAAU,EAAE;AACrE,OAAK,MAAM,UAAU,SAAS;GAC5B,MAAM,MAAM,SAAS,OAAO;GAC5B,MAAM,OAAO,OAAO,KAAK,WAAW,WAChC,IAAI,SACJ,OAAO,KAAK,SAAS,WACnB,IAAI,OACJ,KAAA;AACN,OAAI,KAAM,MAAK,cAAc,IAAI,KAAK;;;;AAK5C,SAAS,2BAA2B,OAA4C;AAC9E,QAAO;EACL,MAAM;EACN,SAAS,MAAM,WAAW,EAAE;EAC5B,aAAa,MAAM;EACnB,WAAW,OAAO,MAAM,cAAc,WAAW,MAAM,YAAY,KAAK,KAAK;EAC9E;;AAGH,SAAS,uBAAuB,SAA+B;AAC7D,QAAO,YAAa,QAAkC,QAAQ;;AAGhE,SAAS,cAAc,SAAgC;CACrD,MAAM,WAAY,QAAmC;CACrD,MAAM,iBAAiB,SAAS,SAAS,EAAE;AAC3C,KAAI,cAAc,eAAe,CAAE,QAAO;CAC1C,MAAM,UAAW,QAAkC;AACnD,KAAI,MAAM,QAAQ,QAAQ;OACnB,MAAM,SAAS,QAClB,KAAI,cAAc,MAAM,CAAE,QAAO;;;AAMvC,SAAS,cAAc,OAAkD;AACvE,QAAO,CAAC,CAAC,SAAS,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,MAAM,IAC9D,MAA6B,SAAS;;AAG9C,SAAS,YAAY,OAAoC;AACvD,KAAI,OAAO,UAAU,SAAU,QAAO;AACtC,KAAI,CAAC,MAAM,QAAQ,MAAM,CAAE,QAAO,KAAA;AAQlC,QAPa,MACV,KAAK,UAAU;AACd,MAAI,CAAC,SAAS,OAAO,UAAU,SAAU,QAAO;EAChD,MAAM,MAAM;AACZ,SAAO,IAAI,SAAS,UAAU,OAAO,IAAI,SAAS,WAAW,IAAI,OAAO;GACxE,CACD,KAAK,GACG,IAAI,KAAA;;AAGjB,SAAS,aAAa,MAAc,MAAkC;AACpE,KAAI,CAAC,KAAM,QAAO;AAClB,KAAI,CAAC,KAAM,QAAO;AAClB,KAAI,SAAS,QAAQ,KAAK,SAAS,KAAK,CAAE,QAAO;AACjD,KAAI,KAAK,WAAW,KAAK,CAAE,QAAO,KAAK,MAAM,KAAK,OAAO;CACzD,MAAM,MAAM,KAAK,IAAI,KAAK,QAAQ,KAAK,QAAQ,IAAI;AACnD,MAAK,IAAI,UAAU,KAAK,UAAU,GAAG,UACnC,KAAI,KAAK,MAAM,CAAC,QAAQ,KAAK,KAAK,MAAM,GAAG,QAAQ,CAAE,QAAO,KAAK,MAAM,QAAQ;AAEjF,QAAO;;AAGT,SAAS,aAAa,SAAiE;CACrF,MAAM,QAAS,QAAgC;AAC/C,KAAI,CAAC,SAAS,OAAO,UAAU,SAAU,QAAO,KAAA;CAChD,MAAM,MAAM;AACZ,QAAO;EACL,aAAa,OAAO,IAAI,gBAAgB,WAAW,IAAI,cAAc,KAAA;EACrE,cAAc,OAAO,IAAI,iBAAiB,WAAW,IAAI,eAAe,KAAA;EACxE,aAAa,OAAO,IAAI,gBAAgB,WAAW,IAAI,cAAc,KAAA;EACrE,MAAM,OAAO,IAAI,SAAS,WAAW,IAAI,OAAO,KAAA;EACjD;;AAKH,SAAS,eAAe,OAAyB;AAC/C,KAAI,CAAC,SAAS,OAAO,UAAU,SAAU,QAAO,KAAA;AAChD,QAAQ,MAAkC;;AAG5C,SAAS,SAAS,OAAgD;AAChE,QAAO,SAAS,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,MAAM,GAC7D,QACD;;AAGN,SAAS,oBAAoB,OAAgD;AAC3E,KAAI,SAAS,KAAM,QAAO,KAAA;AAC1B,KAAI,OAAO,UAAU,SAAU,QAAO,EAAE,MAAM,OAAO;AACrD,KAAI,OAAO,UAAU,SAAU,QAAO,EAAE,MAAM,OAAO,MAAM,EAAE;CAC7D,MAAM,MAAM;AACZ,QAAO;EACL,SAAS,MAAM,QAAQ,IAAI,QAAQ,GAAG,IAAI,UAAU,KAAA;EACpD,SAAS,IAAI;EACb,MAAM,YAAY,IAAI,QAAQ,KAAK,OAAO,IAAI,SAAS,WAAW,IAAI,OAAO,KAAA;EAC9E;;AAGH,SAAS,gBAAgB,SAAmJ;CAE1K,MAAM,QADU,MAAM,QAAQ,QAAQ,KAAK,GAAG,QAAQ,OAAO,EAAE,EAE5D,KAAK,SAAS;EACb,MAAM,MAAM,SAAS,KAAK;EAC1B,MAAM,OAAO,OAAO,KAAK,SAAS,WAAW,IAAI,KAAK,MAAM,GAAG;EAC/D,MAAM,SAAS,KAAK;AACpB,MAAI,CAAC,QAAS,WAAW,aAAa,WAAW,iBAAiB,WAAW,YAC3E;AAEF,SAAO;GAAE;GAAM;GAAQ;GACvB,CACD,QAAQ,SAAoF,QAAQ,KAAK,CAAC;AAC7G,KAAI,KAAK,WAAW,EAAG,QAAO,KAAA;AAI9B,QAAO;EAAE,aAHW,OAAO,QAAQ,gBAAgB,YAAY,QAAQ,YAAY,MAAM,GACrF,QAAQ,YAAY,MAAM,GAC1B,KAAA;EACkB;EAAM"}

package/dist/src/gateway/clarify-bridge.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"clarify-bridge.js","names":[],"sources":["../../../src/gateway/clarify-bridge.ts"],"sourcesContent":["import type { AgentRunRelay, RelayEvent } from './agent-run-relay.js';\nimport { createLogger } from '../utils/logger.js';\n\nconst log = createLogger('gateway:clarify');\n\n/** User inactivity window before pending clarification is rejected (web/Telegram, etc.). */\nexport const CLARIFY_USER_RESPONSE_TIMEOUT_MS = 5 * 60 * 1000;\n\nexport interface ClarifyBridgeRequest {\n  question: string;\n  choices?: string[];\n  default?: string;\n}\n\nexport interface StartClarifyRequestOptions {\n  sessionKey: string;\n  /** Present for in-flight webchat runs (SSE + relay). */\n  runId?: string;\n  relay: AgentRunRelay;\n  publishSse?: (event: RelayEvent) => void;\n  request: ClarifyBridgeRequest;\n  /** e.g. Telegram inline keyboard + prompt message */\n  deliver?: (ctx: {\n    sessionKey: string;\n    requestId: string;\n    request: ClarifyBridgeRequest;\n  }) => Promise<void>;\n}\n\ninterface PendingClarification {\n  runId: string;\n  sessionKey: string;\n  choices?: string[];\n  resolve: (answer: string) => void;\n  reject: (error: Error) => void;\n  timeout: ReturnType<typeof setTimeout>;\n}\n\n/**\n * Pending user answers for the `clarify` tool (web UI, Telegram, etc.).\n */\nexport class ClarifyBridge {\n  private pending = new Map<string, PendingClarification>();\n  /** sessionKey → requestId when waiting for a free-text reply (no multiple-choice). */\n  private pendingFreeTextBySession = new Map<string, string>();\n\n  startRequest(opts: StartClarifyRequestOptions): Promise<string> {\n    const { sessionKey, runId, relay, publishSse, request, deliver } = opts;\n    const requestId = crypto.randomUUID();\n    const hasChoices = Array.isArray(request.choices) && request.choices.length >= 2;\n    const needsFreeText = !hasChoices;\n\n    return new Promise<string>((resolve, reject) => {\n      const failStart = (err: unknown) => {\n        const e = this.deletePending(requestId);\n        if (e) {\n          e.reject(err instanceof Error ? err : new Error(String(err)));\n        }\n      };\n\n      const timeout = setTimeout(() => {\n        const entry = this.deletePending(requestId);\n        if (entry) {\n          entry.reject(new Error('Clarification timeout: user did not respond within 5 minutes'));\n        }\n      }, CLARIFY_USER_RESPONSE_TIMEOUT_MS);\n\n      this.pending.set(requestId, {\n        runId: runId ?? '',\n        sessionKey,\n        choices: hasChoices ? request.choices : undefined,\n        resolve,\n        reject,\n        timeout,\n      });\n\n      if (needsFreeText) {\n        this.pendingFreeTextBySession.set(sessionKey, requestId);\n      }\n\n      const payload: RelayEvent = {\n        type: 'clarify_request',\n        requestId,\n        question: request.question,\n        choices: request.choices,\n        default: request.default,\n      };\n\n      if (runId) {\n        relay.publish(runId, payload);\n      }\n      try {\n        publishSse?.(payload);\n      } catch (err) {\n        log.warn({ err, requestId }, 'clarify SSE publish failed');\n      }\n\n      if (deliver) {\n        void deliver({ sessionKey, requestId, request }).catch(failStart);\n      }\n    });\n  }\n\n  private deletePending(requestId: string): PendingClarification | undefined {\n    const entry = this.pending.get(requestId);\n    if (!entry) return undefined;\n    clearTimeout(entry.timeout);\n    this.pending.delete(requestId);\n    this.clearFreeTextSlot(entry.sessionKey, requestId);\n    return entry;\n  }\n\n  private clearFreeTextSlot(sessionKey: string, requestId: string): void {\n    if (this.pendingFreeTextBySession.get(sessionKey) === requestId) {\n      this.pendingFreeTextBySession.delete(sessionKey);\n    }\n  }\n\n  /**\n   * Consume the user's next text message as the clarify answer (Telegram DM/group).\n   */\n  tryConsumeFreeTextReply(sessionKey: string, text: string): boolean {\n    const requestId = this.pendingFreeTextBySession.get(sessionKey);\n    if (!requestId) return false;\n    return this.handleResponse(requestId, text);\n  }\n\n  handleChoiceCallback(requestId: string, choiceIndex: number): boolean {\n    const entry = this.pending.get(requestId);\n    if (!entry?.choices || choiceIndex < 0 || choiceIndex >= entry.choices.length) {\n      return false;\n    }\n    return this.handleResponse(requestId, entry.choices[choiceIndex]!);\n  }\n\n  handleResponse(requestId: string, answer: string): boolean {\n    const entry = this.deletePending(requestId);\n    if (!entry) return false;\n    entry.resolve(answer.trim());\n    return true;\n  }\n\n  cancelForRun(runId: string): void {\n    for (const [id, entry] of [...this.pending]) {\n      if (entry.runId === runId) {\n        const e = this.deletePending(id);\n        e?.reject(new Error('Clarification cancelled: agent run aborted'));\n      }\n    }\n  }\n\n  dispose(): void {\n    for (const [id, entry] of [...this.pending]) {\n      clearTimeout(entry.timeout);\n      entry.reject(new Error('Gateway shutting down'));\n      this.pending.delete(id);\n    }\n    this.pending.clear();\n    this.pendingFreeTextBySession.clear();\n  }\n}\n"],"mappings":";;;aACkD;AAElD,MAAM,MAAM,aAAa,kBAAkB;;AAG3C,MAAa,mCAAmC,MAAS;;;;AAmCzD,IAAa,gBAAb,MAA2B;CACzB,0BAAkB,IAAI,KAAmC;;CAEzD,2CAAmC,IAAI,KAAqB;CAE5D,aAAa,MAAmD;EAC9D,MAAM,EAAE,YAAY,OAAO,OAAO,YAAY,SAAS,YAAY;EACnE,MAAM,YAAY,OAAO,YAAY;EACrC,MAAM,aAAa,MAAM,QAAQ,QAAQ,QAAQ,IAAI,QAAQ,QAAQ,UAAU;EAC/E,MAAM,gBAAgB,CAAC;AAEvB,SAAO,IAAI,SAAiB,SAAS,WAAW;GAC9C,MAAM,aAAa,QAAiB;IAClC,MAAM,IAAI,KAAK,cAAc,UAAU;AACvC,QAAI,EACF,GAAE,OAAO,eAAe,QAAQ,MAAM,IAAI,MAAM,OAAO,IAAI,CAAC,CAAC;;GAIjE,MAAM,UAAU,iBAAiB;IAC/B,MAAM,QAAQ,KAAK,cAAc,UAAU;AAC3C,QAAI,MACF,OAAM,uBAAO,IAAI,MAAM,+DAA+D,CAAC;MAExF,iCAAiC;AAEpC,QAAK,QAAQ,IAAI,WAAW;IAC1B,OAAO,SAAS;IAChB;IACA,SAAS,aAAa,QAAQ,UAAU,KAAA;IACxC;IACA;IACA;IACD,CAAC;AAEF,OAAI,cACF,MAAK,yBAAyB,IAAI,YAAY,UAAU;GAG1D,MAAM,UAAsB;IAC1B,MAAM;IACN;IACA,UAAU,QAAQ;IAClB,SAAS,QAAQ;IACjB,SAAS,QAAQ;IAClB;AAED,OAAI,MACF,OAAM,QAAQ,OAAO,QAAQ;AAE/B,OAAI;AACF,iBAAa,QAAQ;YACd,KAAK;AACZ,QAAI,KAAK;KAAE;KAAK;KAAW,EAAE,6BAA6B;;AAG5D,OAAI,QACG,SAAQ;IAAE;IAAY;IAAW;IAAS,CAAC,CAAC,MAAM,UAAU;IAEnE;;CAGJ,cAAsB,WAAqD;EACzE,MAAM,QAAQ,KAAK,QAAQ,IAAI,UAAU;AACzC,MAAI,CAAC,MAAO,QAAO,KAAA;AACnB,eAAa,MAAM,QAAQ;AAC3B,OAAK,QAAQ,OAAO,UAAU;AAC9B,OAAK,kBAAkB,MAAM,YAAY,UAAU;AACnD,SAAO;;CAGT,kBAA0B,YAAoB,WAAyB;AACrE,MAAI,KAAK,yBAAyB,IAAI,WAAW,KAAK,UACpD,MAAK,yBAAyB,OAAO,WAAW;;;;;CAOpD,wBAAwB,YAAoB,MAAuB;EACjE,MAAM,YAAY,KAAK,yBAAyB,IAAI,WAAW;AAC/D,MAAI,CAAC,UAAW,QAAO;AACvB,SAAO,KAAK,eAAe,WAAW,KAAK;;CAG7C,qBAAqB,WAAmB,aAA8B;EACpE,MAAM,QAAQ,KAAK,QAAQ,IAAI,UAAU;AACzC,MAAI,CAAC,OAAO,WAAW,cAAc,KAAK,eAAe,MAAM,QAAQ,OACrE,QAAO;AAET,SAAO,KAAK,eAAe,WAAW,MAAM,QAAQ,aAAc;;CAGpE,eAAe,WAAmB,QAAyB;EACzD,MAAM,QAAQ,KAAK,cAAc,UAAU;AAC3C,MAAI,CAAC,MAAO,QAAO;AACnB,QAAM,QAAQ,OAAO,MAAM,CAAC;AAC5B,SAAO;;CAGT,aAAa,OAAqB;AAChC,OAAK,MAAM,CAAC,IAAI,UAAU,CAAC,GAAG,KAAK,QAAQ,CACzC,KAAI,MAAM,UAAU,MACR,MAAK,cAAc,GAC5B,EAAE,uBAAO,IAAI,MAAM,6CAA6C,CAAC;;CAKxE,UAAgB;AACd,OAAK,MAAM,CAAC,IAAI,UAAU,CAAC,GAAG,KAAK,QAAQ,EAAE;AAC3C,gBAAa,MAAM,QAAQ;AAC3B,SAAM,uBAAO,IAAI,MAAM,wBAAwB,CAAC;AAChD,QAAK,QAAQ,OAAO,GAAG;;AAEzB,OAAK,QAAQ,OAAO;AACpB,OAAK,yBAAyB,OAAO"}

package/dist/src/gateway/clarify-runtime.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"clarify-runtime.js","names":[],"sources":["../../../src/gateway/clarify-runtime.ts"],"sourcesContent":["import type { ClarifyBridge } from './clarify-bridge.js';\n\nlet bridgeRef: ClarifyBridge | null = null;\n\nexport function registerClarifyBridge(bridge: ClarifyBridge | null): void {\n  bridgeRef = bridge;\n}\n\nexport function submitClarifyResponseFromChannel(requestId: string, answer: string): boolean {\n  return bridgeRef?.handleResponse(requestId, answer) ?? false;\n}\n\nexport function submitClarifyChoiceFromChannel(requestId: string, choiceIndex: number): boolean {\n  return bridgeRef?.handleChoiceCallback(requestId, choiceIndex) ?? false;\n}\n\nexport function tryConsumeTelegramClarifyFreeText(sessionKey: string, text: string): boolean {\n  return bridgeRef?.tryConsumeFreeTextReply(sessionKey, text) ?? false;\n}\n"],"mappings":";AAEA,IAAI,YAAkC;AAEtC,SAAgB,sBAAsB,QAAoC;AACxE,aAAY;;AAGd,SAAgB,iCAAiC,WAAmB,QAAyB;AAC3F,QAAO,WAAW,eAAe,WAAW,OAAO,IAAI;;AAGzD,SAAgB,+BAA+B,WAAmB,aAA8B;AAC9F,QAAO,WAAW,qBAAqB,WAAW,YAAY,IAAI;;AAGpE,SAAgB,kCAAkC,YAAoB,MAAuB;AAC3F,QAAO,WAAW,wBAAwB,YAAY,KAAK,IAAI"}

package/dist/src/gateway/client-ip.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"client-ip.js","names":[],"sources":["../../../src/gateway/client-ip.ts"],"sourcesContent":["import net from 'node:net';\nimport type { IncomingMessage } from 'node:http';\n\nimport { isLoopbackHost } from './host.js';\n\nfunction stripIpv6Brackets(value: string): string {\n  if (value.startsWith('[') && value.endsWith(']')) {\n    return value.slice(1, -1);\n  }\n  return value;\n}\n\nfunction stripOptionalPort(ip: string): string {\n  if (ip.startsWith('[')) {\n    const end = ip.indexOf(']');\n    if (end !== -1) {\n      return ip.slice(1, end);\n    }\n  }\n  if (net.isIP(ip)) {\n    return ip;\n  }\n  const lastColon = ip.lastIndexOf(':');\n  if (lastColon > -1 && ip.includes('.') && ip.indexOf(':') === lastColon) {\n    const candidate = ip.slice(0, lastColon);\n    if (net.isIP(candidate) === 4) {\n      return candidate;\n    }\n  }\n  return ip;\n}\n\n/** Normalize IP for comparison (strip zone id, brackets, IPv4-mapped prefix). */\nexport function normalizeIpAddress(ip: string | undefined): string | undefined {\n  const trimmed = ip?.trim();\n  if (!trimmed) {\n    return undefined;\n  }\n\n  let value = stripOptionalPort(stripIpv6Brackets(trimmed));\n  const zoneIdx = value.indexOf('%');\n  if (zoneIdx > -1) {\n    value = value.slice(0, zoneIdx);\n  }\n\n  if (value.startsWith('::ffff:')) {\n    const mapped = value.slice('::ffff:'.length);\n    if (net.isIP(mapped) === 4) {\n      return mapped;\n    }\n  }\n\n  if (net.isIP(value) === 0) {\n    return undefined;\n  }\n  return value;\n}\n\nexport function isLoopbackIpAddress(ip: string | undefined): boolean {\n  const normalized = normalizeIpAddress(ip);\n  if (!normalized) {\n    return false;\n  }\n  return isLoopbackHost(normalized);\n}\n\nfunction ipv4ToInt(ip: string): number {\n  const parts = ip.split('.').map((part) => Number.parseInt(part, 10));\n  return ((parts[0] << 24) | (parts[1] << 16) | (parts[2] << 8) | parts[3]) >>> 0;\n}\n\nfunction isIpv4InCidr(ip: string, base: string, prefix: number): boolean {\n  const mask = prefix === 0 ? 0 : (~0 << (32 - prefix)) >>> 0;\n  return (ipv4ToInt(ip) & mask) === (ipv4ToInt(base) & mask);\n}\n\nfunction parseIpv6BigInt(ip: string): bigint | undefined {\n  try {\n    const parts = ip.split(':');\n    if (parts.length < 3) {\n      return undefined;\n    }\n    let hextets: number[] = [];\n    const emptyIdx = parts.indexOf('');\n    if (emptyIdx !== -1) {\n      const before = parts.slice(0, emptyIdx).filter(Boolean).map((h) => Number.parseInt(h, 16));\n      const after = parts.slice(emptyIdx + 1).filter(Boolean).map((h) => Number.parseInt(h, 16));\n      const missing = 8 - before.length - after.length;\n      hextets = [...before, ...Array(Math.max(0, missing)).fill(0), ...after];\n    } else {\n      hextets = parts.map((h) => Number.parseInt(h, 16));\n    }\n    if (hextets.length !== 8 || hextets.some((h) => !Number.isFinite(h) || h < 0 || h > 0xffff)) {\n      return undefined;\n    }\n    let value = 0n;\n    for (const hextet of hextets) {\n      value = (value << 16n) + BigInt(hextet);\n    }\n    return value;\n  } catch {\n    return undefined;\n  }\n}\n\nfunction isIpv6InCidr(ip: string, base: string, prefix: number): boolean {\n  const ipValue = parseIpv6BigInt(ip);\n  const baseValue = parseIpv6BigInt(base);\n  if (ipValue === undefined || baseValue === undefined) {\n    return false;\n  }\n  if (prefix <= 0) {\n    return true;\n  }\n  if (prefix >= 128) {\n    return ipValue === baseValue;\n  }\n  const shift = BigInt(128 - prefix);\n  return ipValue >> shift === baseValue >> shift;\n}\n\n/** Match an IP against a CIDR or exact address string. */\nexport function isIpInCidr(ip: string, cidr: string): boolean {\n  const normalizedIp = normalizeIpAddress(ip);\n  if (!normalizedIp) {\n    return false;\n  }\n  const candidate = cidr.trim();\n  if (!candidate) {\n    return false;\n  }\n\n  if (!candidate.includes('/')) {\n    const exact = normalizeIpAddress(candidate);\n    return exact === normalizedIp;\n  }\n\n  const [baseRaw, prefixRaw] = candidate.split('/');\n  const base = normalizeIpAddress(baseRaw);\n  const prefix = Number.parseInt(prefixRaw ?? '', 10);\n  if (!base || !Number.isInteger(prefix)) {\n    return false;\n  }\n\n  const ipKind = net.isIP(normalizedIp);\n  const baseKind = net.isIP(base);\n  if (ipKind !== baseKind) {\n    return false;\n  }\n\n  if (ipKind === 4) {\n    if (prefix < 0 || prefix > 32) {\n      return false;\n    }\n    return isIpv4InCidr(normalizedIp, base, prefix);\n  }\n\n  if (prefix < 0 || prefix > 128) {\n    return false;\n  }\n  return isIpv6InCidr(normalizedIp, base, prefix);\n}\n\nexport function isTrustedProxyAddress(ip: string | undefined, trustedProxies?: string[]): boolean {\n  const normalized = normalizeIpAddress(ip);\n  if (!normalized || !trustedProxies?.length) {\n    return false;\n  }\n  return trustedProxies.some((proxy) => {\n    const candidate = proxy.trim();\n    return candidate.length > 0 && isIpInCidr(normalized, candidate);\n  });\n}\n\nfunction parseIpLiteral(raw: string | undefined): string | undefined {\n  return normalizeIpAddress(raw);\n}\n\nfunction resolveForwardedClientIp(params: {\n  forwardedFor?: string;\n  trustedProxies?: string[];\n}): string | undefined {\n  const { forwardedFor, trustedProxies } = params;\n  if (!trustedProxies?.length) {\n    return undefined;\n  }\n\n  const forwardedChain: string[] = [];\n  for (const entry of forwardedFor?.split(',') ?? []) {\n    const normalized = parseIpLiteral(entry);\n    if (normalized) {\n      forwardedChain.push(normalized);\n    }\n  }\n  if (forwardedChain.length === 0) {\n    return undefined;\n  }\n\n  for (let index = forwardedChain.length - 1; index >= 0; index -= 1) {\n    const hop = forwardedChain[index];\n    if (isLoopbackIpAddress(hop)) {\n      continue;\n    }\n    if (!isTrustedProxyAddress(hop, trustedProxies)) {\n      return hop;\n    }\n  }\n  return undefined;\n}\n\nexport function resolveClientIp(params: {\n  remoteAddr?: string;\n  forwardedFor?: string;\n  realIp?: string;\n  trustedProxies?: string[];\n  /** Default false: only trust X-Real-IP when explicitly enabled. */\n  allowRealIpFallback?: boolean;\n}): string | undefined {\n  const remote = normalizeIpAddress(params.remoteAddr);\n  if (!remote) {\n    return undefined;\n  }\n  if (!isTrustedProxyAddress(remote, params.trustedProxies)) {\n    return remote;\n  }\n\n  const forwardedIp = resolveForwardedClientIp({\n    forwardedFor: params.forwardedFor,\n    trustedProxies: params.trustedProxies,\n  });\n  if (forwardedIp) {\n    return forwardedIp;\n  }\n  if (params.allowRealIpFallback) {\n    return parseIpLiteral(params.realIp);\n  }\n  return undefined;\n}\n\nfunction headerValue(value: string | string[] | undefined): string | undefined {\n  return Array.isArray(value) ? value[0] : value;\n}\n\nexport function resolveRequestClientIp(\n  req?: IncomingMessage,\n  trustedProxies?: string[],\n  allowRealIpFallback = false,\n): string | undefined {\n  if (!req) {\n    return undefined;\n  }\n  return resolveClientIp({\n    remoteAddr: req.socket?.remoteAddress ?? '',\n    forwardedFor: headerValue(req.headers?.['x-forwarded-for']),\n    realIp: headerValue(req.headers?.['x-real-ip']),\n    trustedProxies,\n    allowRealIpFallback,\n  });\n}\n\nexport function resolveClientIpFromRequest(params: {\n  remoteAddress?: string;\n  getHeader: (name: string) => string | undefined;\n  trustedProxies?: string[];\n  allowRealIpFallback?: boolean;\n}): string {\n  return (\n    resolveClientIp({\n      remoteAddr: params.remoteAddress,\n      forwardedFor: params.getHeader('x-forwarded-for'),\n      realIp: params.getHeader('x-real-ip'),\n      trustedProxies: params.trustedProxies,\n      allowRealIpFallback: params.allowRealIpFallback,\n    }) ?? 'unknown'\n  );\n}\n"],"mappings":";;;AAKA,SAAS,kBAAkB,OAAuB;AAChD,KAAI,MAAM,WAAW,IAAI,IAAI,MAAM,SAAS,IAAI,CAC9C,QAAO,MAAM,MAAM,GAAG,GAAG;AAE3B,QAAO;;AAGT,SAAS,kBAAkB,IAAoB;AAC7C,KAAI,GAAG,WAAW,IAAI,EAAE;EACtB,MAAM,MAAM,GAAG,QAAQ,IAAI;AAC3B,MAAI,QAAQ,GACV,QAAO,GAAG,MAAM,GAAG,IAAI;;AAG3B,KAAI,IAAI,KAAK,GAAG,CACd,QAAO;CAET,MAAM,YAAY,GAAG,YAAY,IAAI;AACrC,KAAI,YAAY,MAAM,GAAG,SAAS,IAAI,IAAI,GAAG,QAAQ,IAAI,KAAK,WAAW;EACvE,MAAM,YAAY,GAAG,MAAM,GAAG,UAAU;AACxC,MAAI,IAAI,KAAK,UAAU,KAAK,EAC1B,QAAO;;AAGX,QAAO;;;AAIT,SAAgB,mBAAmB,IAA4C;CAC7E,MAAM,UAAU,IAAI,MAAM;AAC1B,KAAI,CAAC,QACH;CAGF,IAAI,QAAQ,kBAAkB,kBAAkB,QAAQ,CAAC;CACzD,MAAM,UAAU,MAAM,QAAQ,IAAI;AAClC,KAAI,UAAU,GACZ,SAAQ,MAAM,MAAM,GAAG,QAAQ;AAGjC,KAAI,MAAM,WAAW,UAAU,EAAE;EAC/B,MAAM,SAAS,MAAM,MAAM,EAAiB;AAC5C,MAAI,IAAI,KAAK,OAAO,KAAK,EACvB,QAAO;;AAIX,KAAI,IAAI,KAAK,MAAM,KAAK,EACtB;AAEF,QAAO;;AAGT,SAAgB,oBAAoB,IAAiC;CACnE,MAAM,aAAa,mBAAmB,GAAG;AACzC,KAAI,CAAC,WACH,QAAO;AAET,QAAO,eAAe,WAAW;;AAGnC,SAAS,UAAU,IAAoB;CACrC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,KAAK,SAAS,OAAO,SAAS,MAAM,GAAG,CAAC;AACpE,SAAS,MAAM,MAAM,KAAO,MAAM,MAAM,KAAO,MAAM,MAAM,IAAK,MAAM,QAAQ;;AAGhF,SAAS,aAAa,IAAY,MAAc,QAAyB;CACvE,MAAM,OAAO,WAAW,IAAI,IAAK,MAAO,KAAK,WAAa;AAC1D,SAAQ,UAAU,GAAG,GAAG,WAAW,UAAU,KAAK,GAAG;;AAGvD,SAAS,gBAAgB,IAAgC;AACvD,KAAI;EACF,MAAM,QAAQ,GAAG,MAAM,IAAI;AAC3B,MAAI,MAAM,SAAS,EACjB;EAEF,IAAI,UAAoB,EAAE;EAC1B,MAAM,WAAW,MAAM,QAAQ,GAAG;AAClC,MAAI,aAAa,IAAI;GACnB,MAAM,SAAS,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,QAAQ,CAAC,KAAK,MAAM,OAAO,SAAS,GAAG,GAAG,CAAC;GAC1F,MAAM,QAAQ,MAAM,MAAM,WAAW,EAAE,CAAC,OAAO,QAAQ,CAAC,KAAK,MAAM,OAAO,SAAS,GAAG,GAAG,CAAC;GAC1F,MAAM,UAAU,IAAI,OAAO,SAAS,MAAM;AAC1C,aAAU;IAAC,GAAG;IAAQ,GAAG,MAAM,KAAK,IAAI,GAAG,QAAQ,CAAC,CAAC,KAAK,EAAE;IAAE,GAAG;IAAM;QAEvE,WAAU,MAAM,KAAK,MAAM,OAAO,SAAS,GAAG,GAAG,CAAC;AAEpD,MAAI,QAAQ,WAAW,KAAK,QAAQ,MAAM,MAAM,CAAC,OAAO,SAAS,EAAE,IAAI,IAAI,KAAK,IAAI,MAAO,CACzF;EAEF,IAAI,QAAQ;AACZ,OAAK,MAAM,UAAU,QACnB,UAAS,SAAS,OAAO,OAAO,OAAO;AAEzC,SAAO;SACD;AACN;;;AAIJ,SAAS,aAAa,IAAY,MAAc,QAAyB;CACvE,MAAM,UAAU,gBAAgB,GAAG;CACnC,MAAM,YAAY,gBAAgB,KAAK;AACvC,KAAI,YAAY,KAAA,KAAa,cAAc,KAAA,EACzC,QAAO;AAET,KAAI,UAAU,EACZ,QAAO;AAET,KAAI,UAAU,IACZ,QAAO,YAAY;CAErB,MAAM,QAAQ,OAAO,MAAM,OAAO;AAClC,QAAO,WAAW,UAAU,aAAa;;;AAI3C,SAAgB,WAAW,IAAY,MAAuB;CAC5D,MAAM,eAAe,mBAAmB,GAAG;AAC3C,KAAI,CAAC,aACH,QAAO;CAET,MAAM,YAAY,KAAK,MAAM;AAC7B,KAAI,CAAC,UACH,QAAO;AAGT,KAAI,CAAC,UAAU,SAAS,IAAI,CAE1B,QADc,mBAAmB,UACrB,KAAK;CAGnB,MAAM,CAAC,SAAS,aAAa,UAAU,MAAM,IAAI;CACjD,MAAM,OAAO,mBAAmB,QAAQ;CACxC,MAAM,SAAS,OAAO,SAAS,aAAa,IAAI,GAAG;AACnD,KAAI,CAAC,QAAQ,CAAC,OAAO,UAAU,OAAO,CACpC,QAAO;CAGT,MAAM,SAAS,IAAI,KAAK,aAAa;AAErC,KAAI,WADa,IAAI,KAAK,KACH,CACrB,QAAO;AAGT,KAAI,WAAW,GAAG;AAChB,MAAI,SAAS,KAAK,SAAS,GACzB,QAAO;AAET,SAAO,aAAa,cAAc,MAAM,OAAO;;AAGjD,KAAI,SAAS,KAAK,SAAS,IACzB,QAAO;AAET,QAAO,aAAa,cAAc,MAAM,OAAO;;AAGjD,SAAgB,sBAAsB,IAAwB,gBAAoC;CAChG,MAAM,aAAa,mBAAmB,GAAG;AACzC,KAAI,CAAC,cAAc,CAAC,gBAAgB,OAClC,QAAO;AAET,QAAO,eAAe,MAAM,UAAU;EACpC,MAAM,YAAY,MAAM,MAAM;AAC9B,SAAO,UAAU,SAAS,KAAK,WAAW,YAAY,UAAU;GAChE;;AAGJ,SAAS,eAAe,KAA6C;AACnE,QAAO,mBAAmB,IAAI;;AAGhC,SAAS,yBAAyB,QAGX;CACrB,MAAM,EAAE,cAAc,mBAAmB;AACzC,KAAI,CAAC,gBAAgB,OACnB;CAGF,MAAM,iBAA2B,EAAE;AACnC,MAAK,MAAM,SAAS,cAAc,MAAM,IAAI,IAAI,EAAE,EAAE;EAClD,MAAM,aAAa,eAAe,MAAM;AACxC,MAAI,WACF,gBAAe,KAAK,WAAW;;AAGnC,KAAI,eAAe,WAAW,EAC5B;AAGF,MAAK,IAAI,QAAQ,eAAe,SAAS,GAAG,SAAS,GAAG,SAAS,GAAG;EAClE,MAAM,MAAM,eAAe;AAC3B,MAAI,oBAAoB,IAAI,CAC1B;AAEF,MAAI,CAAC,sBAAsB,KAAK,eAAe,CAC7C,QAAO;;;AAMb,SAAgB,gBAAgB,QAOT;CACrB,MAAM,SAAS,mBAAmB,OAAO,WAAW;AACpD,KAAI,CAAC,OACH;AAEF,KAAI,CAAC,sBAAsB,QAAQ,OAAO,eAAe,CACvD,QAAO;CAGT,MAAM,cAAc,yBAAyB;EAC3C,cAAc,OAAO;EACrB,gBAAgB,OAAO;EACxB,CAAC;AACF,KAAI,YACF,QAAO;AAET,KAAI,OAAO,oBACT,QAAO,eAAe,OAAO,OAAO;;AAKxC,SAAS,YAAY,OAA0D;AAC7E,QAAO,MAAM,QAAQ,MAAM,GAAG,MAAM,KAAK;;AAG3C,SAAgB,uBACd,KACA,gBACA,sBAAsB,OACF;AACpB,KAAI,CAAC,IACH;AAEF,QAAO,gBAAgB;EACrB,YAAY,IAAI,QAAQ,iBAAiB;EACzC,cAAc,YAAY,IAAI,UAAU,mBAAmB;EAC3D,QAAQ,YAAY,IAAI,UAAU,aAAa;EAC/C;EACA;EACD,CAAC;;AAGJ,SAAgB,2BAA2B,QAKhC;AACT,QACE,gBAAgB;EACd,YAAY,OAAO;EACnB,cAAc,OAAO,UAAU,kBAAkB;EACjD,QAAQ,OAAO,UAAU,YAAY;EACrC,gBAAgB,OAAO;EACvB,qBAAqB,OAAO;EAC7B,CAAC,IAAI"}

package/dist/src/gateway/config-tools-web.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"config-tools-web.js","names":[],"sources":["../../../src/gateway/config-tools-web.ts"],"sourcesContent":["import type { Config, SearchProviderEntry } from '../config/schema.js';\nimport {\n  isMaskedSecretPatchValue,\n  maskSecretLength,\n} from './hono/lib/mask-secret-length.js';\n\nexport function isMaskedApiKey(v: unknown): boolean {\n  return typeof v === 'string' && isMaskedSecretPatchValue(v);\n}\n\nexport function safeToolsWebForGet(config: Config): {\n  web: {\n    region: 'cn' | 'global' | null;\n    search: {\n      maxResults: number;\n      providers: Array<{ type: string; apiKey: string; url: string; disabled: boolean }>;\n    };\n    blocklist: {\n      enabled: boolean;\n      domains: string[];\n    };\n  };\n} {\n  const web = config.tools?.web;\n  const search = web?.search;\n  const providers = search?.providers ?? [];\n  const providersOut = providers.map((p) => ({\n    type: p.type,\n    apiKey: p.apiKey && p.apiKey.trim().length > 0 ? maskSecretLength(p.apiKey) : '',\n    url: typeof p.url === 'string' ? p.url : '',\n    disabled: Boolean(p.disabled),\n  }));\n  const blocklist = web?.blocklist;\n  return {\n    web: {\n      region: web?.region ?? null,\n      search: {\n        maxResults: search?.maxResults ?? 5,\n        providers: providersOut,\n      },\n      blocklist: {\n        enabled: blocklist?.enabled === true,\n        domains: Array.isArray(blocklist?.domains)\n          ? blocklist.domains.filter((d): d is string => typeof d === 'string' && d.trim().length > 0)\n          : [],\n      },\n    },\n  };\n}\n\n/**\n * Merge `body.tools.web` into config. Returns an error message on validation failure.\n */\nexport function applyToolsWebPatch(config: Config, body: Record<string, unknown>): string | undefined {\n  const tools = body.tools;\n  if (!tools || typeof tools !== 'object') return undefined;\n  const tw = (tools as { web?: unknown }).web;\n  if (!tw || typeof tw !== 'object') return undefined;\n\n  const incoming = tw as Record<string, unknown>;\n\n  if (!config.tools) {\n    config.tools = { web: {} };\n  }\n  if (!config.tools.web) {\n    config.tools.web = {};\n  }\n  if (!config.tools.web.search) {\n    config.tools.web.search = { maxResults: 5, providers: [] };\n  }\n\n  const prevSearch = config.tools.web.search;\n  const prevProviders = prevSearch.providers;\n\n  if (incoming.region !== undefined) {\n    if (incoming.region === null || incoming.region === '' || incoming.region === 'auto') {\n      delete config.tools.web.region;\n    } else if (incoming.region === 'cn' || incoming.region === 'global') {\n      config.tools.web.region = incoming.region;\n    } else {\n      return 'Invalid tools.web.region';\n    }\n  }\n\n  if (incoming.blocklist !== undefined) {\n    if (incoming.blocklist === null) {\n      delete config.tools.web.blocklist;\n    } else if (typeof incoming.blocklist !== 'object') {\n      return 'Invalid tools.web.blocklist';\n    } else {\n      const bl = incoming.blocklist as Record<string, unknown>;\n      const next = {\n        ...(config.tools.web.blocklist ?? { enabled: false, domains: [] }),\n      };\n      if (bl.enabled !== undefined) {\n        next.enabled = Boolean(bl.enabled);\n      }\n      if (bl.domains !== undefined) {\n        if (!Array.isArray(bl.domains)) {\n          return 'tools.web.blocklist.domains must be an array';\n        }\n        next.domains = bl.domains\n          .filter((d): d is string => typeof d === 'string' && d.trim().length > 0)\n          .map((d) => d.trim());\n      }\n      config.tools.web.blocklist = next;\n    }\n  }\n\n  const sr = incoming.search;\n  if (sr === undefined) return undefined;\n  if (typeof sr !== 'object' || sr === null) {\n    return 'Invalid tools.web.search';\n  }\n  const s = sr as Record<string, unknown>;\n\n  if (s.maxResults !== undefined) {\n    const n = typeof s.maxResults === 'number' ? s.maxResults : Number(s.maxResults);\n    if (!Number.isFinite(n) || n < 1 || n > 50) {\n      return 'tools.web.search.maxResults must be between 1 and 50';\n    }\n    config.tools.web.search.maxResults = Math.floor(n);\n  }\n\n  if (!('providers' in s)) {\n    return undefined;\n  }\n\n  if (!Array.isArray(s.providers)) {\n    return 'tools.web.search.providers must be an array';\n  }\n\n  const merged: SearchProviderEntry[] = [];\n  for (let i = 0; i < s.providers.length; i++) {\n    const rawRow = s.providers[i];\n    if (!rawRow || typeof rawRow !== 'object') {\n      return 'Invalid search provider entry';\n    }\n    const row = rawRow as Record<string, unknown>;\n    const type = row.type;\n    if (type !== 'brave' && type !== 'tavily' && type !== 'bing' && type !== 'searxng') {\n      return `Invalid search provider type: ${String(type)}`;\n    }\n    const prev = prevProviders?.[i];\n    let apiKey = typeof row.apiKey === 'string' ? row.apiKey : '';\n    if (isMaskedApiKey(apiKey) && prev?.apiKey) {\n      apiKey = prev.apiKey;\n    }\n    const urlRaw = typeof row.url === 'string' ? row.url.trim().replace(/\\/+$/, '') : '';\n    const entry: SearchProviderEntry = { type };\n    if (type === 'searxng') {\n      if (urlRaw) entry.url = urlRaw;\n      if (apiKey) entry.apiKey = apiKey;\n    } else {\n      if (apiKey) entry.apiKey = apiKey;\n    }\n    if (row.disabled === true) {\n      entry.disabled = true;\n    }\n    merged.push(entry);\n  }\n  config.tools.web.search.providers = merged;\n  return undefined;\n}\n"],"mappings":";;AAMA,SAAgB,eAAe,GAAqB;AAClD,QAAO,OAAO,MAAM,YAAY,yBAAyB,EAAE;;AAG7D,SAAgB,mBAAmB,QAYjC;CACA,MAAM,MAAM,OAAO,OAAO;CAC1B,MAAM,SAAS,KAAK;CAEpB,MAAM,gBADY,QAAQ,aAAa,EAAE,EACV,KAAK,OAAO;EACzC,MAAM,EAAE;EACR,QAAQ,EAAE,UAAU,EAAE,OAAO,MAAM,CAAC,SAAS,IAAI,iBAAiB,EAAE,OAAO,GAAG;EAC9E,KAAK,OAAO,EAAE,QAAQ,WAAW,EAAE,MAAM;EACzC,UAAU,QAAQ,EAAE,SAAS;EAC9B,EAAE;CACH,MAAM,YAAY,KAAK;AACvB,QAAO,EACL,KAAK;EACH,QAAQ,KAAK,UAAU;EACvB,QAAQ;GACN,YAAY,QAAQ,cAAc;GAClC,WAAW;GACZ;EACD,WAAW;GACT,SAAS,WAAW,YAAY;GAChC,SAAS,MAAM,QAAQ,WAAW,QAAQ,GACtC,UAAU,QAAQ,QAAQ,MAAmB,OAAO,MAAM,YAAY,EAAE,MAAM,CAAC,SAAS,EAAE,GAC1F,EAAE;GACP;EACF,EACF;;;;;AAMH,SAAgB,mBAAmB,QAAgB,MAAmD;CACpG,MAAM,QAAQ,KAAK;AACnB,KAAI,CAAC,SAAS,OAAO,UAAU,SAAU,QAAO,KAAA;CAChD,MAAM,KAAM,MAA4B;AACxC,KAAI,CAAC,MAAM,OAAO,OAAO,SAAU,QAAO,KAAA;CAE1C,MAAM,WAAW;AAEjB,KAAI,CAAC,OAAO,MACV,QAAO,QAAQ,EAAE,KAAK,EAAE,EAAE;AAE5B,KAAI,CAAC,OAAO,MAAM,IAChB,QAAO,MAAM,MAAM,EAAE;AAEvB,KAAI,CAAC,OAAO,MAAM,IAAI,OACpB,QAAO,MAAM,IAAI,SAAS;EAAE,YAAY;EAAG,WAAW,EAAE;EAAE;CAI5D,MAAM,gBADa,OAAO,MAAM,IAAI,OACH;AAEjC,KAAI,SAAS,WAAW,KAAA,EACtB,KAAI,SAAS,WAAW,QAAQ,SAAS,WAAW,MAAM,SAAS,WAAW,OAC5E,QAAO,OAAO,MAAM,IAAI;UACf,SAAS,WAAW,QAAQ,SAAS,WAAW,SACzD,QAAO,MAAM,IAAI,SAAS,SAAS;KAEnC,QAAO;AAIX,KAAI,SAAS,cAAc,KAAA,EACzB,KAAI,SAAS,cAAc,KACzB,QAAO,OAAO,MAAM,IAAI;UACf,OAAO,SAAS,cAAc,SACvC,QAAO;MACF;EACL,MAAM,KAAK,SAAS;EACpB,MAAM,OAAO,EACX,GAAI,OAAO,MAAM,IAAI,aAAa;GAAE,SAAS;GAAO,SAAS,EAAE;GAAE,EAClE;AACD,MAAI,GAAG,YAAY,KAAA,EACjB,MAAK,UAAU,QAAQ,GAAG,QAAQ;AAEpC,MAAI,GAAG,YAAY,KAAA,GAAW;AAC5B,OAAI,CAAC,MAAM,QAAQ,GAAG,QAAQ,CAC5B,QAAO;AAET,QAAK,UAAU,GAAG,QACf,QAAQ,MAAmB,OAAO,MAAM,YAAY,EAAE,MAAM,CAAC,SAAS,EAAE,CACxE,KAAK,MAAM,EAAE,MAAM,CAAC;;AAEzB,SAAO,MAAM,IAAI,YAAY;;CAIjC,MAAM,KAAK,SAAS;AACpB,KAAI,OAAO,KAAA,EAAW,QAAO,KAAA;AAC7B,KAAI,OAAO,OAAO,YAAY,OAAO,KACnC,QAAO;CAET,MAAM,IAAI;AAEV,KAAI,EAAE,eAAe,KAAA,GAAW;EAC9B,MAAM,IAAI,OAAO,EAAE,eAAe,WAAW,EAAE,aAAa,OAAO,EAAE,WAAW;AAChF,MAAI,CAAC,OAAO,SAAS,EAAE,IAAI,IAAI,KAAK,IAAI,GACtC,QAAO;AAET,SAAO,MAAM,IAAI,OAAO,aAAa,KAAK,MAAM,EAAE;;AAGpD,KAAI,EAAE,eAAe,GACnB;AAGF,KAAI,CAAC,MAAM,QAAQ,EAAE,UAAU,CAC7B,QAAO;CAGT,MAAM,SAAgC,EAAE;AACxC,MAAK,IAAI,IAAI,GAAG,IAAI,EAAE,UAAU,QAAQ,KAAK;EAC3C,MAAM,SAAS,EAAE,UAAU;AAC3B,MAAI,CAAC,UAAU,OAAO,WAAW,SAC/B,QAAO;EAET,MAAM,MAAM;EACZ,MAAM,OAAO,IAAI;AACjB,MAAI,SAAS,WAAW,SAAS,YAAY,SAAS,UAAU,SAAS,UACvE,QAAO,iCAAiC,OAAO,KAAK;EAEtD,MAAM,OAAO,gBAAgB;EAC7B,IAAI,SAAS,OAAO,IAAI,WAAW,WAAW,IAAI,SAAS;AAC3D,MAAI,eAAe,OAAO,IAAI,MAAM,OAClC,UAAS,KAAK;EAEhB,MAAM,SAAS,OAAO,IAAI,QAAQ,WAAW,IAAI,IAAI,MAAM,CAAC,QAAQ,QAAQ,GAAG,GAAG;EAClF,MAAM,QAA6B,EAAE,MAAM;AAC3C,MAAI,SAAS,WAAW;AACtB,OAAI,OAAQ,OAAM,MAAM;AACxB,OAAI,OAAQ,OAAM,SAAS;aAEvB,OAAQ,OAAM,SAAS;AAE7B,MAAI,IAAI,aAAa,KACnB,OAAM,WAAW;AAEnB,SAAO,KAAK,MAAM;;AAEpB,QAAO,MAAM,IAAI,OAAO,YAAY"}

package/dist/src/gateway/credential.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"credential.js","names":[],"sources":["../../../src/gateway/credential.ts"],"sourcesContent":["export type GatewayCredential = { kind: 'token'; value: string } | { kind: 'password'; value: string };\n\nexport function createGatewayCredential(\n  kind: GatewayCredential['kind'],\n  value: string | undefined,\n): GatewayCredential | undefined {\n  const trimmed = value?.trim();\n  return trimmed ? { kind, value: trimmed } : undefined;\n}\n\nexport function gatewayCredentialAuthorization(credential: GatewayCredential | undefined): string | undefined {\n  if (!credential || /[\\r\\n]/.test(credential.value)) return undefined;\n  return `Bearer ${credential.value}`;\n}\n"],"mappings":";AAEA,SAAgB,wBACd,MACA,OAC+B;CAC/B,MAAM,UAAU,OAAO,MAAM;AAC7B,QAAO,UAAU;EAAE;EAAM,OAAO;EAAS,GAAG,KAAA;;AAG9C,SAAgB,+BAA+B,YAA+D;AAC5G,KAAI,CAAC,cAAc,SAAS,KAAK,WAAW,MAAM,CAAE,QAAO,KAAA;AAC3D,QAAO,UAAU,WAAW"}

package/dist/src/gateway/discovery/mdns.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"mdns.js","names":[],"sources":["../../../../src/gateway/discovery/mdns.ts"],"sourcesContent":["import { createLogger } from '../../utils/logger.js';\n\nconst log = createLogger('GatewayDiscovery');\n\nexport type MdnsGatewayAdvertisement = {\n  name: string;\n  port: number;\n  txt: Record<string, string>;\n};\n\nlet advertised: MdnsGatewayAdvertisement | null = null;\n\n/** Register mDNS service `_xopc-gw._tcp` when enabled (best-effort; no native dep yet). */\nexport function startMdnsGatewayDiscovery(params: {\n  port: number;\n  tokenHint?: string;\n}): void {\n  advertised = {\n    name: 'xopc-gateway',\n    port: params.port,\n    txt: {\n      path: '/',\n      ...(params.tokenHint ? { auth: 'token' } : {}),\n    },\n  };\n  log.info(\n    { port: params.port, service: '_xopc-gw._tcp', phase: 'mdns_register' },\n    'Gateway mDNS advertisement registered (logical; install Bonjour for OS broadcast)',\n  );\n}\n\nexport function stopMdnsGatewayDiscovery(): void {\n  if (!advertised) {\n    return;\n  }\n  log.debug({ phase: 'mdns_stop' }, 'Gateway mDNS advertisement cleared');\n  advertised = null;\n}\n\nexport function getMdnsGatewayAdvertisement(): MdnsGatewayAdvertisement | null {\n  return advertised;\n}\n"],"mappings":";;;aAAqD;AAErD,MAAM,MAAM,aAAa,mBAAmB;AAQ5C,IAAI,aAA8C;;AAGlD,SAAgB,0BAA0B,QAGjC;AACP,cAAa;EACX,MAAM;EACN,MAAM,OAAO;EACb,KAAK;GACH,MAAM;GACN,GAAI,OAAO,YAAY,EAAE,MAAM,SAAS,GAAG,EAAE;GAC9C;EACF;AACD,KAAI,KACF;EAAE,MAAM,OAAO;EAAM,SAAS;EAAiB,OAAO;EAAiB,EACvE,oFACD;;AAGH,SAAgB,2BAAiC;AAC/C,KAAI,CAAC,WACH;AAEF,KAAI,MAAM,EAAE,OAAO,aAAa,EAAE,qCAAqC;AACvE,cAAa;;AAGf,SAAgB,8BAA+D;AAC7E,QAAO"}

package/dist/src/gateway/dreaming-automation-reconciler.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"dreaming-automation-reconciler.js","names":[],"sources":["../../../src/gateway/dreaming-automation-reconciler.ts"],"sourcesContent":["import type { Config } from '../config/schema.js';\nimport { resolveDreamingConfig, type DreamingResolvedConfig } from '../agent/memory/dreaming/config.js';\nimport { resolveDreamingAgentScope } from '../agent/memory/dreaming/scope.js';\nimport {\n  DREAMING_CRON_NAME,\n  DREAMING_CRON_TAG,\n  DREAMING_LIGHT_CRON_NAME,\n  DREAMING_LIGHT_SWEEP_TOKEN,\n  DREAMING_REM_CRON_NAME,\n  DREAMING_REM_SWEEP_TOKEN,\n  DREAMING_SWEEP_TOKEN,\n  type DreamingPhaseId,\n} from '../agent/memory/dreaming/constants.js';\nimport type { AutomationService } from '../automations/index.js';\nimport type { Automation, AutomationAction, AutomationTrigger } from '../automations/domain/types.js';\n\ntype DreamingAutomationSpec = {\n  phase: DreamingPhaseId;\n  name: string;\n  token: string;\n};\n\nconst DREAMING_AUTOMATIONS: readonly DreamingAutomationSpec[] = [\n  {\n    phase: 'light',\n    name: DREAMING_LIGHT_CRON_NAME,\n    token: DREAMING_LIGHT_SWEEP_TOKEN,\n  },\n  {\n    phase: 'deep',\n    name: DREAMING_CRON_NAME,\n    token: DREAMING_SWEEP_TOKEN,\n  },\n  {\n    phase: 'rem',\n    name: DREAMING_REM_CRON_NAME,\n    token: DREAMING_REM_SWEEP_TOKEN,\n  },\n];\n\nexport type DreamingAutomationReconcileResult = {\n  created: string[];\n  updated: string[];\n  disabled: string[];\n};\n\nfunction phaseDescription(phase: DreamingPhaseId): string {\n  const label = phase === 'light' ? 'Light sweep' : phase === 'deep' ? 'Deep promotion' : 'REM pattern discovery';\n  return `${label} for memory dreaming. ${DREAMING_CRON_TAG}`;\n}\n\nfunction buildTrigger(config: DreamingResolvedConfig, phase: DreamingPhaseId): AutomationTrigger {\n  const phaseConfig = config.phases[phase];\n  return {\n    kind: 'schedule',\n    schedule: {\n      kind: 'cron',\n      expr: phaseConfig.cron,\n      ...(config.timezone ? { tz: config.timezone } : {}),\n    },\n  };\n}\n\nfunction dreamingAutomationId(phase: DreamingPhaseId): string {\n  return `system-user-context-dreaming:${phase}`;\n}\n\nfunction buildAction(config: Config, token: string): AutomationAction {\n  const scope = resolveDreamingAgentScope(config);\n  return {\n    kind: 'agent',\n    agentId: scope.agentId,\n    instruction: token,\n    workingDirectory: scope.workspaceDir,\n    timeoutSeconds: 3600,\n  };\n}\n\nfunction automationNeedsUpdate(current: Automation, next: {\n  name: string;\n  description: string;\n  enabled: boolean;\n  trigger: AutomationTrigger;\n  action: AutomationAction;\n}): boolean {\n  return (\n    current.name !== next.name ||\n    current.description !== next.description ||\n    current.enabled !== next.enabled ||\n    JSON.stringify(current.trigger) !== JSON.stringify(next.trigger) ||\n    JSON.stringify(current.action) !== JSON.stringify(next.action) ||\n    current.safety?.mode !== 'auto_apply' ||\n    current.afterRun?.kind !== 'none' ||\n    current.reliability?.disableAfterConsecutiveFailures !== 3\n  );\n}\n\nexport async function reconcileDreamingAutomations(params: {\n  config: Config;\n  automationService: AutomationService;\n}): Promise<DreamingAutomationReconcileResult> {\n  const { config, automationService } = params;\n  const result: DreamingAutomationReconcileResult = { created: [], updated: [], disabled: [] };\n\n  const resolved = resolveDreamingConfig(config);\n\n  for (const spec of DREAMING_AUTOMATIONS) {\n    const id = dreamingAutomationId(spec.phase);\n    const current = await automationService.get(id);\n    const enabled = resolved.enabled && resolved.phases[spec.phase].enabled;\n\n    if (!resolved.enabled) {\n      if (current?.enabled) {\n        await automationService.update(id, { enabled: false });\n        result.disabled.push(id);\n      }\n      continue;\n    }\n\n    const next = {\n      name: spec.name,\n      description: phaseDescription(spec.phase),\n      enabled,\n      trigger: buildTrigger(resolved, spec.phase),\n      action: buildAction(config, spec.token),\n    };\n\n    if (!current) {\n      await automationService.create({\n        id,\n        ...next,\n        safety: { mode: 'auto_apply' },\n        afterRun: { kind: 'none' },\n        reliability: { disableAfterConsecutiveFailures: 3 },\n      });\n      result.created.push(id);\n      continue;\n    }\n\n    if (automationNeedsUpdate(current, next)) {\n      await automationService.update(id, {\n        ...next,\n        safety: { mode: 'auto_apply' },\n        afterRun: { kind: 'none' },\n        reliability: { disableAfterConsecutiveFailures: 3 },\n      });\n      result.updated.push(id);\n    }\n  }\n\n  return result;\n}\n"],"mappings":";;;;AAsBA,MAAM,uBAA0D;CAC9D;EACE,OAAO;EACP,MAAM;EACN,OAAO;EACR;CACD;EACE,OAAO;EACP,MAAM;EACN,OAAO;EACR;CACD;EACE,OAAO;EACP,MAAM;EACN,OAAO;EACR;CACF;AAQD,SAAS,iBAAiB,OAAgC;AAExD,QAAO,GADO,UAAU,UAAU,gBAAgB,UAAU,SAAS,mBAAmB,wBACxE,wBAAwB;;AAG1C,SAAS,aAAa,QAAgC,OAA2C;AAE/F,QAAO;EACL,MAAM;EACN,UAAU;GACR,MAAM;GACN,MALgB,OAAO,OAAO,OAKZ;GAClB,GAAI,OAAO,WAAW,EAAE,IAAI,OAAO,UAAU,GAAG,EAAE;GACnD;EACF;;AAGH,SAAS,qBAAqB,OAAgC;AAC5D,QAAO,gCAAgC;;AAGzC,SAAS,YAAY,QAAgB,OAAiC;CACpE,MAAM,QAAQ,0BAA0B,OAAO;AAC/C,QAAO;EACL,MAAM;EACN,SAAS,MAAM;EACf,aAAa;EACb,kBAAkB,MAAM;EACxB,gBAAgB;EACjB;;AAGH,SAAS,sBAAsB,SAAqB,MAMxC;AACV,QACE,QAAQ,SAAS,KAAK,QACtB,QAAQ,gBAAgB,KAAK,eAC7B,QAAQ,YAAY,KAAK,WACzB,KAAK,UAAU,QAAQ,QAAQ,KAAK,KAAK,UAAU,KAAK,QAAQ,IAChE,KAAK,UAAU,QAAQ,OAAO,KAAK,KAAK,UAAU,KAAK,OAAO,IAC9D,QAAQ,QAAQ,SAAS,gBACzB,QAAQ,UAAU,SAAS,UAC3B,QAAQ,aAAa,oCAAoC;;AAI7D,eAAsB,6BAA6B,QAGJ;CAC7C,MAAM,EAAE,QAAQ,sBAAsB;CACtC,MAAM,SAA4C;EAAE,SAAS,EAAE;EAAE,SAAS,EAAE;EAAE,UAAU,EAAE;EAAE;CAE5F,MAAM,WAAW,sBAAsB,OAAO;AAE9C,MAAK,MAAM,QAAQ,sBAAsB;EACvC,MAAM,KAAK,qBAAqB,KAAK,MAAM;EAC3C,MAAM,UAAU,MAAM,kBAAkB,IAAI,GAAG;EAC/C,MAAM,UAAU,SAAS,WAAW,SAAS,OAAO,KAAK,OAAO;AAEhE,MAAI,CAAC,SAAS,SAAS;AACrB,OAAI,SAAS,SAAS;AACpB,UAAM,kBAAkB,OAAO,IAAI,EAAE,SAAS,OAAO,CAAC;AACtD,WAAO,SAAS,KAAK,GAAG;;AAE1B;;EAGF,MAAM,OAAO;GACX,MAAM,KAAK;GACX,aAAa,iBAAiB,KAAK,MAAM;GACzC;GACA,SAAS,aAAa,UAAU,KAAK,MAAM;GAC3C,QAAQ,YAAY,QAAQ,KAAK,MAAM;GACxC;AAED,MAAI,CAAC,SAAS;AACZ,SAAM,kBAAkB,OAAO;IAC7B;IACA,GAAG;IACH,QAAQ,EAAE,MAAM,cAAc;IAC9B,UAAU,EAAE,MAAM,QAAQ;IAC1B,aAAa,EAAE,iCAAiC,GAAG;IACpD,CAAC;AACF,UAAO,QAAQ,KAAK,GAAG;AACvB;;AAGF,MAAI,sBAAsB,SAAS,KAAK,EAAE;AACxC,SAAM,kBAAkB,OAAO,IAAI;IACjC,GAAG;IACH,QAAQ,EAAE,MAAM,cAAc;IAC9B,UAAU,EAAE,MAAM,QAAQ;IAC1B,aAAa,EAAE,iCAAiC,GAAG;IACpD,CAAC;AACF,UAAO,QAAQ,KAAK,GAAG;;;AAI3B,QAAO"}

package/dist/src/gateway/ensure-network-cors.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"ensure-network-cors.js","names":[],"sources":["../../../src/gateway/ensure-network-cors.ts"],"sourcesContent":["import {\n  isNetworkAccessibleBindHost,\n  resolveGatewayEffectiveHost,\n} from '../config/gateway-bind.js';\nimport type { Config } from '../config/schema.js';\nimport { ConfigSchema } from '../config/schema.js';\nimport { buildDefaultCorsOrigins } from './host.js';\n\n/** Ensure network-accessible binds have browser CORS origins (fail-closed startup guard). */\nexport function ensureGatewayCorsOriginsForNetworkBind(config: Config, port: number): Config {\n  const bindHost = resolveGatewayEffectiveHost(config);\n  if (!isNetworkAccessibleBindHost(bindHost)) {\n    return config;\n  }\n  const existing = (config.gateway?.corsOrigins ?? [])\n    .map((origin) => origin.trim())\n    .filter(Boolean);\n  if (\n    existing.length > 0 ||\n    config.gateway?.dangerouslyAllowHostHeaderOriginFallback === true\n  ) {\n    return config;\n  }\n  return ConfigSchema.parse({\n    ...config,\n    gateway: {\n      ...config.gateway,\n      corsOrigins: buildDefaultCorsOrigins({ port, bindHost }),\n    },\n  });\n}\n"],"mappings":";;;;aAKmD;;AAInD,SAAgB,uCAAuC,QAAgB,MAAsB;CAC3F,MAAM,WAAW,4BAA4B,OAAO;AACpD,KAAI,CAAC,4BAA4B,SAAS,CACxC,QAAO;AAKT,MAHkB,OAAO,SAAS,eAAe,EAAE,EAChD,KAAK,WAAW,OAAO,MAAM,CAAC,CAC9B,OAAO,QAEA,CAAC,SAAS,KAClB,OAAO,SAAS,6CAA6C,KAE7D,QAAO;AAET,QAAO,aAAa,MAAM;EACxB,GAAG;EACH,SAAS;GACP,GAAG,OAAO;GACV,aAAa,wBAAwB;IAAE;IAAM;IAAU,CAAC;GACzD;EACF,CAAC"}

package/dist/src/gateway/file-path-classifier.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"file-path-classifier.js","names":[],"sources":["../../../src/gateway/file-path-classifier.ts"],"sourcesContent":["import { stat } from 'node:fs/promises';\nimport { basename, isAbsolute, resolve } from 'node:path';\n\nimport { resolveAgentProfileDir } from '../agent/agent-scope.js';\nimport {\n  isBareProfileMarkdownFileName,\n  resolveProfileMarkdownPathIfBareName,\n} from '../agent/tools/tool-paths.js';\nimport { extractProfileAgentId } from '../config/agent-profile.js';\nimport { resolveConfigPath, resolveSkillsDir } from '../config/paths.js';\nimport { resolveStateDir } from '../config/paths-state.js';\nimport type { Config } from '../config/schema.js';\nimport { isPathUnderWorkspace, resolveWorkspaceSafePath } from './workspace-editor-path.js';\nimport type { FileReferenceLocationKind, FileReferenceScope } from './file-reference-registry.js';\n\nexport type { FileReferenceLocationKind };\n\nexport interface FilePathClassifierContext {\n  workspaceRoot: string;\n  profileMarkdownRoot?: string;\n  stateDir: string;\n  skillsDir: string;\n  configFilePath: string;\n  agentsHomeDir: string;\n  agentId: string;\n}\n\nexport function buildFilePathClassifierContext(cfg: Config, sessionKeyRaw?: string): FilePathClassifierContext {\n  const agentId = extractProfileAgentId(sessionKeyRaw, cfg);\n  const stateDir = resolveStateDir();\n  return {\n    workspaceRoot: '',\n    profileMarkdownRoot: resolveAgentProfileDir(cfg, agentId),\n    stateDir,\n    skillsDir: resolveSkillsDir(),\n    configFilePath: resolveConfigPath(),\n    agentsHomeDir: resolve(stateDir, 'agents'),\n    agentId,\n  };\n}\n\nexport function looksLikeHostAbsolutePath(pathRaw: string): boolean {\n  const p = pathRaw.trim();\n  if (!p) return false;\n  if (/^[a-z][a-z0-9+.-]*:/i.test(p) && !/^[A-Za-z]:[\\\\/]/.test(p)) return false;\n  return isAbsolute(p) || /^[A-Za-z]:[\\\\/]/.test(p) || p.startsWith('\\\\\\\\');\n}\n\nexport function fileRefSessionKeysMatch(registered?: string, query?: string): boolean {\n  return (registered ?? '').trim() === (query ?? '').trim();\n}\n\nexport interface ClassifiedFileLocation {\n  scope: FileReferenceScope;\n  locationKind?: FileReferenceLocationKind;\n  manageRoute?: string;\n}\n\nexport function classifyFileLocation(absPath: string, ctx: FilePathClassifierContext): ClassifiedFileLocation {\n  const p = resolve(absPath);\n  const workspaceRoot = resolve(ctx.workspaceRoot);\n\n  if (isPathUnderWorkspace(workspaceRoot, p)) {\n    return { scope: 'workspace' };\n  }\n\n  if (ctx.profileMarkdownRoot) {\n    const profileRoot = resolve(ctx.profileMarkdownRoot);\n    if (isPathUnderWorkspace(profileRoot, p)) {\n      return {\n        scope: 'agent-profile',\n        locationKind: 'agent-profile',\n        manageRoute: '/settings/agents',\n      };\n    }\n  }\n\n  const skillsRoot = resolve(ctx.skillsDir);\n  if (isPathUnderWorkspace(skillsRoot, p)) {\n    return {\n      scope: 'external',\n      locationKind: 'xopc-skills',\n      manageRoute: '/settings/skills',\n    };\n  }\n\n  const agentsRoot = resolve(ctx.agentsHomeDir);\n  if (isPathUnderWorkspace(agentsRoot, p)) {\n    return {\n      scope: 'external',\n      locationKind: 'xopc-agents',\n      manageRoute: '/settings/agents',\n    };\n  }\n\n  const stateRoot = resolve(ctx.stateDir);\n  const configPath = resolve(ctx.configFilePath);\n  if (p === configPath || isPathUnderWorkspace(stateRoot, p)) {\n    return {\n      scope: 'external',\n      locationKind: 'xopc-config',\n      manageRoute: '/settings/gateway',\n    };\n  }\n\n  return { scope: 'external', locationKind: 'host' };\n}\n\nexport interface ResolveFileReferenceCandidateResult {\n  candidate: string | null;\n  invalid: boolean;\n}\n\n/**\n * Resolve user path to an absolute candidate (workspace, absolute host, or profile fallback).\n */\nexport async function resolveFileReferenceCandidate(\n  rawPath: string,\n  workspaceRoot: string,\n  ctx: FilePathClassifierContext,\n): Promise<ResolveFileReferenceCandidateResult> {\n  const displayRoot = workspaceRoot;\n  ctx = { ...ctx, workspaceRoot: displayRoot };\n\n  if (looksLikeHostAbsolutePath(rawPath)) {\n    return { candidate: resolve(rawPath), invalid: false };\n  }\n\n  const wsPath = resolveWorkspaceSafePath(workspaceRoot, rawPath);\n  if (!wsPath) {\n    return { candidate: null, invalid: true };\n  }\n\n  try {\n    await stat(wsPath);\n    return { candidate: wsPath, invalid: false };\n  } catch (e) {\n    const code = (e as NodeJS.ErrnoException)?.code;\n    if (code === 'ENOENT' && ctx.profileMarkdownRoot && isBareProfileMarkdownFileName(rawPath)) {\n      const alt = resolveProfileMarkdownPathIfBareName(rawPath, ctx.profileMarkdownRoot);\n      return { candidate: alt, invalid: false };\n    }\n    return { candidate: wsPath, invalid: false };\n  }\n}\n\nexport function displayNameForPath(rawPath: string): string {\n  return basename(rawPath.replace(/\\\\/g, '/')) || rawPath;\n}\n"],"mappings":";;;;;;;;;kBAGiE;YAMQ;kBACd;AAiB3D,SAAgB,+BAA+B,KAAa,eAAmD;CAC7G,MAAM,UAAU,sBAAsB,eAAe,IAAI;CACzD,MAAM,WAAW,iBAAiB;AAClC,QAAO;EACL,eAAe;EACf,qBAAqB,uBAAuB,KAAK,QAAQ;EACzD;EACA,WAAW,kBAAkB;EAC7B,gBAAgB,mBAAmB;EACnC,eAAe,QAAQ,UAAU,SAAS;EAC1C;EACD;;AAGH,SAAgB,0BAA0B,SAA0B;CAClE,MAAM,IAAI,QAAQ,MAAM;AACxB,KAAI,CAAC,EAAG,QAAO;AACf,KAAI,uBAAuB,KAAK,EAAE,IAAI,CAAC,kBAAkB,KAAK,EAAE,CAAE,QAAO;AACzE,QAAO,WAAW,EAAE,IAAI,kBAAkB,KAAK,EAAE,IAAI,EAAE,WAAW,OAAO;;AAG3E,SAAgB,wBAAwB,YAAqB,OAAyB;AACpF,SAAQ,cAAc,IAAI,MAAM,MAAM,SAAS,IAAI,MAAM;;AAS3D,SAAgB,qBAAqB,SAAiB,KAAwD;CAC5G,MAAM,IAAI,QAAQ,QAAQ;AAG1B,KAAI,qBAFkB,QAAQ,IAAI,cAEI,EAAE,EAAE,CACxC,QAAO,EAAE,OAAO,aAAa;AAG/B,KAAI,IAAI;MAEF,qBADgB,QAAQ,IAAI,oBACI,EAAE,EAAE,CACtC,QAAO;GACL,OAAO;GACP,cAAc;GACd,aAAa;GACd;;AAKL,KAAI,qBADe,QAAQ,IAAI,UACI,EAAE,EAAE,CACrC,QAAO;EACL,OAAO;EACP,cAAc;EACd,aAAa;EACd;AAIH,KAAI,qBADe,QAAQ,IAAI,cACI,EAAE,EAAE,CACrC,QAAO;EACL,OAAO;EACP,cAAc;EACd,aAAa;EACd;CAGH,MAAM,YAAY,QAAQ,IAAI,SAAS;AAEvC,KAAI,MADe,QAAQ,IAAI,eACX,IAAI,qBAAqB,WAAW,EAAE,CACxD,QAAO;EACL,OAAO;EACP,cAAc;EACd,aAAa;EACd;AAGH,QAAO;EAAE,OAAO;EAAY,cAAc;EAAQ;;;;;AAWpD,eAAsB,8BACpB,SACA,eACA,KAC8C;CAC9C,MAAM,cAAc;AACpB,OAAM;EAAE,GAAG;EAAK,eAAe;EAAa;AAE5C,KAAI,0BAA0B,QAAQ,CACpC,QAAO;EAAE,WAAW,QAAQ,QAAQ;EAAE,SAAS;EAAO;CAGxD,MAAM,SAAS,yBAAyB,eAAe,QAAQ;AAC/D,KAAI,CAAC,OACH,QAAO;EAAE,WAAW;EAAM,SAAS;EAAM;AAG3C,KAAI;AACF,QAAM,KAAK,OAAO;AAClB,SAAO;GAAE,WAAW;GAAQ,SAAS;GAAO;UACrC,GAAG;AAEV,MADc,GAA6B,SAC9B,YAAY,IAAI,uBAAuB,8BAA8B,QAAQ,CAExF,QAAO;GAAE,WADG,qCAAqC,SAAS,IAAI,oBACvC;GAAE,SAAS;GAAO;AAE3C,SAAO;GAAE,WAAW;GAAQ,SAAS;GAAO;;;AAIhD,SAAgB,mBAAmB,SAAyB;AAC1D,QAAO,SAAS,QAAQ,QAAQ,OAAO,IAAI,CAAC,IAAI"}

package/dist/src/gateway/file-reference-registry.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"file-reference-registry.js","names":[],"sources":["../../../src/gateway/file-reference-registry.ts"],"sourcesContent":["import { randomUUID } from 'node:crypto';\n\nexport type FileReferenceScope =\n  | 'workspace'\n  | 'external'\n  | 'agent-profile'\n  | 'session-artifact'\n  | 'missing'\n  | 'invalid';\n\n/** Where an off-workspace file lives (UI badge + manage deep link). */\nexport type FileReferenceLocationKind =\n  | 'agent-profile'\n  | 'xopc-skills'\n  | 'xopc-config'\n  | 'xopc-agents'\n  | 'xopc-sessions'\n  | 'host';\n\nexport type FileReferenceCapability =\n  | 'preview'\n  | 'edit'\n  | 'openExternal'\n  | 'revealInFolder'\n  | 'copyPath'\n  | 'importToWorkspace';\n\nexport interface RegisteredFileReference {\n  id: string;\n  absolutePath: string;\n  sessionKey?: string;\n  scope: FileReferenceScope;\n  locationKind?: FileReferenceLocationKind;\n  capabilities: FileReferenceCapability[];\n  expiresAt: number;\n}\n\nexport interface RegisterFileReferenceInput {\n  absolutePath: string;\n  sessionKey?: string;\n  scope: FileReferenceScope;\n  locationKind?: FileReferenceLocationKind;\n  capabilities: FileReferenceCapability[];\n  ttlMs?: number;\n}\n\nconst DEFAULT_TTL_MS = 30 * 60 * 1000;\n\nexport class FileReferenceRegistry {\n  private readonly refs = new Map<string, RegisteredFileReference>();\n\n  register(input: RegisterFileReferenceInput): RegisteredFileReference {\n    this.expire();\n    const id = randomUUID();\n    const ref: RegisteredFileReference = {\n      id,\n      absolutePath: input.absolutePath,\n      sessionKey: input.sessionKey?.trim() || undefined,\n      scope: input.scope,\n      locationKind: input.locationKind,\n      capabilities: [...new Set(input.capabilities)],\n      expiresAt: Date.now() + (input.ttlMs ?? DEFAULT_TTL_MS),\n    };\n    this.refs.set(id, ref);\n    return ref;\n  }\n\n  resolve(id: string): RegisteredFileReference | null {\n    this.expire();\n    const ref = this.refs.get(id);\n    if (!ref) return null;\n    if (ref.expiresAt <= Date.now()) {\n      this.refs.delete(id);\n      return null;\n    }\n    return ref;\n  }\n\n  /**\n   * Remove a specific reference (used after a one-shot action like\n   * import-to-workspace completes so the source card can't be re-triggered).\n   * Returns true if the reference existed and was removed.\n   */\n  expireById(id: string): boolean {\n    return this.refs.delete(id);\n  }\n\n  expire(now = Date.now()): void {\n    for (const [id, ref] of this.refs) {\n      if (ref.expiresAt <= now) {\n        this.refs.delete(id);\n      }\n    }\n  }\n}\n\nexport const fileReferenceRegistry = new FileReferenceRegistry();\n"],"mappings":";;AA8CA,MAAM,iBAAiB,OAAU;AAEjC,IAAa,wBAAb,MAAmC;CACjC,uBAAwB,IAAI,KAAsC;CAElE,SAAS,OAA4D;AACnE,OAAK,QAAQ;EACb,MAAM,KAAK,YAAY;EACvB,MAAM,MAA+B;GACnC;GACA,cAAc,MAAM;GACpB,YAAY,MAAM,YAAY,MAAM,IAAI,KAAA;GACxC,OAAO,MAAM;GACb,cAAc,MAAM;GACpB,cAAc,CAAC,GAAG,IAAI,IAAI,MAAM,aAAa,CAAC;GAC9C,WAAW,KAAK,KAAK,IAAI,MAAM,SAAS;GACzC;AACD,OAAK,KAAK,IAAI,IAAI,IAAI;AACtB,SAAO;;CAGT,QAAQ,IAA4C;AAClD,OAAK,QAAQ;EACb,MAAM,MAAM,KAAK,KAAK,IAAI,GAAG;AAC7B,MAAI,CAAC,IAAK,QAAO;AACjB,MAAI,IAAI,aAAa,KAAK,KAAK,EAAE;AAC/B,QAAK,KAAK,OAAO,GAAG;AACpB,UAAO;;AAET,SAAO;;;;;;;CAQT,WAAW,IAAqB;AAC9B,SAAO,KAAK,KAAK,OAAO,GAAG;;CAG7B,OAAO,MAAM,KAAK,KAAK,EAAQ;AAC7B,OAAK,MAAM,CAAC,IAAI,QAAQ,KAAK,KAC3B,KAAI,IAAI,aAAa,IACnB,MAAK,KAAK,OAAO,GAAG;;;AAM5B,MAAa,wBAAwB,IAAI,uBAAuB"}

package/dist/src/gateway/global-defaults-admin.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"global-defaults-admin.js","names":[],"sources":["../../../src/gateway/global-defaults-admin.ts"],"sourcesContent":["import {\n  CapabilityPresetSchema,\n  DEFAULT_CAPABILITY_PRESET_ID,\n  type CapabilityPreset,\n} from '../agent-manifest/schema.js';\nimport { DEFAULT_AGENT_MODELS } from '../config/default-model.js';\nimport type { Config } from '../config/schema.js';\nimport {\n  getAllProviders,\n  getModelsByProvider,\n  getProviderAuthState,\n  getProviderDisplayName,\n} from '../providers/index.js';\nimport { getRecommendedModelsForProvider } from '../providers/presentation.js';\n\nexport type GlobalDefaultsProviderSource = 'config' | 'env' | 'oauth' | 'extension' | 'models_json' | 'agent' | null;\n\nexport type GlobalDefaultsProviderRow = {\n  id: string;\n  name: string;\n  configured: boolean;\n  source: GlobalDefaultsProviderSource;\n};\n\nexport type GlobalDefaultsRecommendation = {\n  provider: string;\n  model: string;\n  reason: 'configured-provider' | 'recommended';\n};\n\nexport type GlobalDefaultsPayload = {\n  presetId: string;\n  models: NonNullable<CapabilityPreset['models']>;\n  providers: GlobalDefaultsProviderRow[];\n  recommendations: GlobalDefaultsRecommendation[];\n};\n\nexport type UpdateGlobalDefaultsBody = {\n  models?: CapabilityPreset['models'];\n};\n\nexport type GlobalDefaultsAdminResult<T> =\n  | { ok: true; data: T }\n  | { ok: false; error: string; status?: 400 | 404 | 500 };\n\nfunction defaultPresetId(cfg: Config): string {\n  return cfg.agents.defaultPreset || DEFAULT_CAPABILITY_PRESET_ID;\n}\n\nfunction emptyGlobalDefaultsPreset(id: string): CapabilityPreset {\n  return {\n    id,\n    name: 'Global defaults',\n    description: 'Default capabilities inherited by every agent.',\n    version: 1,\n    models: DEFAULT_AGENT_MODELS,\n  };\n}\n\nexport function ensureGlobalDefaultsConfig(cfg: Config): Config {\n  const presetId = defaultPresetId(cfg);\n  const current = cfg.agents.capabilityPresets[presetId];\n  const preset = current\n    ? {\n        ...current,\n        id: presetId,\n        name: current.name || 'Global defaults',\n        version: current.version || 1,\n        models: current.models ?? DEFAULT_AGENT_MODELS,\n      }\n    : emptyGlobalDefaultsPreset(presetId);\n\n  return {\n    ...cfg,\n    agents: {\n      ...cfg.agents,\n      defaultPreset: presetId,\n      capabilityPresets: {\n        ...cfg.agents.capabilityPresets,\n        [presetId]: preset,\n      },\n    },\n  };\n}\n\nfunction sourceFromAuthMode(authMode: string): GlobalDefaultsProviderSource {\n  if (authMode === 'gateway') return 'config';\n  if (authMode === 'env') return 'env';\n  if (authMode === 'oauth') return 'oauth';\n  if (authMode === 'extension') return 'extension';\n  if (authMode === 'models_json') return 'models_json';\n  if (authMode === 'agent') return 'agent';\n  return null;\n}\n\nfunction recommendedModelForProvider(provider: string): string | null {\n  const recommended = getRecommendedModelsForProvider(provider, 1)[0];\n  if (recommended) return recommended.ref;\n  const model = getModelsByProvider(provider)[0];\n  return model ? `${provider}/${model.id}` : null;\n}\n\nexport async function listGlobalDefaults(cfg: Config): Promise<GlobalDefaultsPayload> {\n  const normalized = ensureGlobalDefaultsConfig(cfg);\n  const presetId = defaultPresetId(normalized);\n  const preset = normalized.agents.capabilityPresets[presetId] ?? emptyGlobalDefaultsPreset(presetId);\n  const providers: GlobalDefaultsProviderRow[] = [];\n  const recommendations: GlobalDefaultsRecommendation[] = [];\n\n  for (const provider of getAllProviders()) {\n    const auth = await getProviderAuthState(provider);\n    const configured = auth.authStatus === 'connected';\n    const source = configured ? sourceFromAuthMode(auth.authMode) : null;\n    providers.push({\n      id: provider,\n      name: getProviderDisplayName(provider),\n      configured,\n      source,\n    });\n    if (configured) {\n      const model = recommendedModelForProvider(provider);\n      if (model) {\n        recommendations.push({ provider, model, reason: 'configured-provider' });\n      }\n    }\n  }\n\n  providers.sort((a, b) => Number(b.configured) - Number(a.configured) || a.name.localeCompare(b.name));\n\n  return {\n    presetId,\n    models: preset.models ?? DEFAULT_AGENT_MODELS,\n    providers,\n    recommendations,\n  };\n}\n\nexport function prepareUpdateGlobalDefaults(\n  cfg: Config,\n  body: UpdateGlobalDefaultsBody,\n): GlobalDefaultsAdminResult<{ nextConfig: Config }> {\n  const normalized = ensureGlobalDefaultsConfig(cfg);\n  const presetId = defaultPresetId(normalized);\n  const current = normalized.agents.capabilityPresets[presetId] ?? emptyGlobalDefaultsPreset(presetId);\n  let nextPreset: CapabilityPreset = current;\n\n  if (body.models !== undefined) {\n    const parsed = CapabilityPresetSchema.pick({ models: true }).safeParse({ models: body.models });\n    if (!parsed.success) {\n      return { ok: false, error: `models ${parsed.error.issues[0]?.message ?? 'is invalid'}`, status: 400 };\n    }\n    const models = parsed.data.models ?? DEFAULT_AGENT_MODELS;\n    const roles = models.roles ?? {};\n    const defaultRole = models.defaultRole ?? Object.keys(roles)[0] ?? 'deep';\n    if (Object.keys(roles).length > 0 && !roles[defaultRole]) {\n      return { ok: false, error: 'models.defaultRole must reference models.roles', status: 400 };\n    }\n    nextPreset = {\n      ...nextPreset,\n      models: { ...models, defaultRole, roles },\n    };\n  }\n\n  return {\n    ok: true,\n    data: {\n      nextConfig: {\n        ...normalized,\n        agents: {\n          ...normalized.agents,\n          capabilityPresets: {\n            ...normalized.agents.capabilityPresets,\n            [presetId]: nextPreset,\n          },\n        },\n      },\n    },\n  };\n}\n"],"mappings":";;;;;aAIqC;oBAC6B;gBAOnC;AAiC/B,SAAS,gBAAgB,KAAqB;AAC5C,QAAO,IAAI,OAAO,iBAAA;;AAGpB,SAAS,0BAA0B,IAA8B;AAC/D,QAAO;EACL;EACA,MAAM;EACN,aAAa;EACb,SAAS;EACT,QAAQ;EACT;;AAGH,SAAgB,2BAA2B,KAAqB;CAC9D,MAAM,WAAW,gBAAgB,IAAI;CACrC,MAAM,UAAU,IAAI,OAAO,kBAAkB;CAC7C,MAAM,SAAS,UACX;EACE,GAAG;EACH,IAAI;EACJ,MAAM,QAAQ,QAAQ;EACtB,SAAS,QAAQ,WAAW;EAC5B,QAAQ,QAAQ,UAAU;EAC3B,GACD,0BAA0B,SAAS;AAEvC,QAAO;EACL,GAAG;EACH,QAAQ;GACN,GAAG,IAAI;GACP,eAAe;GACf,mBAAmB;IACjB,GAAG,IAAI,OAAO;KACb,WAAW;IACb;GACF;EACF;;AAGH,SAAS,mBAAmB,UAAgD;AAC1E,KAAI,aAAa,UAAW,QAAO;AACnC,KAAI,aAAa,MAAO,QAAO;AAC/B,KAAI,aAAa,QAAS,QAAO;AACjC,KAAI,aAAa,YAAa,QAAO;AACrC,KAAI,aAAa,cAAe,QAAO;AACvC,KAAI,aAAa,QAAS,QAAO;AACjC,QAAO;;AAGT,SAAS,4BAA4B,UAAiC;CACpE,MAAM,cAAc,gCAAgC,UAAU,EAAE,CAAC;AACjE,KAAI,YAAa,QAAO,YAAY;CACpC,MAAM,QAAQ,oBAAoB,SAAS,CAAC;AAC5C,QAAO,QAAQ,GAAG,SAAS,GAAG,MAAM,OAAO;;AAG7C,eAAsB,mBAAmB,KAA6C;CACpF,MAAM,aAAa,2BAA2B,IAAI;CAClD,MAAM,WAAW,gBAAgB,WAAW;CAC5C,MAAM,SAAS,WAAW,OAAO,kBAAkB,aAAa,0BAA0B,SAAS;CACnG,MAAM,YAAyC,EAAE;CACjD,MAAM,kBAAkD,EAAE;AAE1D,MAAK,MAAM,YAAY,iBAAiB,EAAE;EACxC,MAAM,OAAO,MAAM,qBAAqB,SAAS;EACjD,MAAM,aAAa,KAAK,eAAe;EACvC,MAAM,SAAS,aAAa,mBAAmB,KAAK,SAAS,GAAG;AAChE,YAAU,KAAK;GACb,IAAI;GACJ,MAAM,uBAAuB,SAAS;GACtC;GACA;GACD,CAAC;AACF,MAAI,YAAY;GACd,MAAM,QAAQ,4BAA4B,SAAS;AACnD,OAAI,MACF,iBAAgB,KAAK;IAAE;IAAU;IAAO,QAAQ;IAAuB,CAAC;;;AAK9E,WAAU,MAAM,GAAG,MAAM,OAAO,EAAE,WAAW,GAAG,OAAO,EAAE,WAAW,IAAI,EAAE,KAAK,cAAc,EAAE,KAAK,CAAC;AAErG,QAAO;EACL;EACA,QAAQ,OAAO,UAAU;EACzB;EACA;EACD;;AAGH,SAAgB,4BACd,KACA,MACmD;CACnD,MAAM,aAAa,2BAA2B,IAAI;CAClD,MAAM,WAAW,gBAAgB,WAAW;CAE5C,IAAI,aADY,WAAW,OAAO,kBAAkB,aAAa,0BAA0B,SAAS;AAGpG,KAAI,KAAK,WAAW,KAAA,GAAW;EAC7B,MAAM,SAAS,uBAAuB,KAAK,EAAE,QAAQ,MAAM,CAAC,CAAC,UAAU,EAAE,QAAQ,KAAK,QAAQ,CAAC;AAC/F,MAAI,CAAC,OAAO,QACV,QAAO;GAAE,IAAI;GAAO,OAAO,UAAU,OAAO,MAAM,OAAO,IAAI,WAAW;GAAgB,QAAQ;GAAK;EAEvG,MAAM,SAAS,OAAO,KAAK,UAAU;EACrC,MAAM,QAAQ,OAAO,SAAS,EAAE;EAChC,MAAM,cAAc,OAAO,eAAe,OAAO,KAAK,MAAM,CAAC,MAAM;AACnE,MAAI,OAAO,KAAK,MAAM,CAAC,SAAS,KAAK,CAAC,MAAM,aAC1C,QAAO;GAAE,IAAI;GAAO,OAAO;GAAkD,QAAQ;GAAK;AAE5F,eAAa;GACX,GAAG;GACH,QAAQ;IAAE,GAAG;IAAQ;IAAa;IAAO;GAC1C;;AAGH,QAAO;EACL,IAAI;EACJ,MAAM,EACJ,YAAY;GACV,GAAG;GACH,QAAQ;IACN,GAAG,WAAW;IACd,mBAAmB;KACjB,GAAG,WAAW,OAAO;MACpB,WAAW;KACb;IACF;GACF,EACF;EACF"}

package/dist/src/gateway/heartbeat/service.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"service.js","names":[],"sources":["../../../../src/gateway/heartbeat/service.ts"],"sourcesContent":["import { readFile } from 'fs/promises';\n\nimport type { AgentService } from '../../agent/service.js';\nimport type { Config } from '../../config/schema.js';\nimport type { MessageBus } from '../../infra/bus/index.js';\nimport type { SessionStore } from '../../session/store.js';\nimport { appendCronEventLines } from '../../heartbeat/event-prompt.js';\nimport { isWithinActiveHours } from '../../heartbeat/active-hours.js';\nimport { isHeartbeatContentEmpty } from '../../heartbeat/content-check.js';\nimport {\n  DEFAULT_ACK_MAX_CHARS,\n  stripHeartbeatToken,\n  shouldSilence,\n} from '../../heartbeat/tokens.js';\nimport { createHeartbeatWake } from '../../heartbeat/wake.js';\nimport { createLogger } from '../../utils/logger.js';\nimport { resolveHeartbeatMdPath } from '../workspace-heartbeat-path.js';\n\nconst log = createLogger('HeartbeatService');\n\nconst DEFAULT_PROMPT =\n  'Read HEARTBEAT.md if it exists. Follow it strictly. If nothing needs attention, reply HEARTBEAT_OK.';\n\nexport interface HeartbeatRunnerConfig {\n  enabled: boolean;\n  intervalMs: number;\n  target?: string;\n  targetChatId?: string;\n  prompt?: string;\n  ackMaxChars?: number;\n  isolatedSession?: boolean;\n  activeHours?: {\n    start: string;\n    end: string;\n    timezone?: string;\n  };\n}\n\nfunction mapConfigToRunner(cfg: Config | undefined): HeartbeatRunnerConfig {\n  const h = cfg?.gateway?.heartbeat;\n  return {\n    enabled: h?.enabled ?? true,\n    intervalMs: h?.intervalMs ?? 1_800_000,\n    target: h?.target,\n    targetChatId: h?.targetChatId,\n    prompt: h?.prompt,\n    ackMaxChars: h?.ackMaxChars,\n    isolatedSession: h?.isolatedSession,\n    activeHours: h?.activeHours,\n  };\n}\n\n/** Map persisted gateway config to runner options (gateway start / reload). */\nexport function heartbeatRunnerConfigFromConfig(cfg: Config): HeartbeatRunnerConfig {\n  return mapConfigToRunner(cfg);\n}\n\nexport interface HeartbeatServiceDeps {\n  agentService: AgentService;\n  messageBus: MessageBus;\n  sessionStore: SessionStore;\n  /** Current app config (for HEARTBEAT.md path under the default agent `profile/` directory). */\n  getConfig: () => Config;\n}\n\nexport class HeartbeatService {\n  private intervalId: ReturnType<typeof setInterval> | null = null;\n  private wake: ReturnType<typeof createHeartbeatWake>;\n  private lastHeartbeatText = '';\n  private lastHeartbeatAt = 0;\n  private runnerConfig: HeartbeatRunnerConfig | null = null;\n\n  constructor(private deps: HeartbeatServiceDeps) {\n    this.wake = createHeartbeatWake((reasons) => this.runHeartbeatOnce(reasons));\n  }\n\n  start(config: HeartbeatRunnerConfig): void {\n    if (!config.enabled) {\n      log.info('Heartbeat disabled');\n      this.runnerConfig = null;\n      return;\n    }\n\n    this.runnerConfig = config;\n    log.info({ intervalMs: config.intervalMs }, 'Heartbeat timer started (interval wake)');\n\n    this.intervalId = setInterval(() => {\n      this.wake.request({ reason: 'interval' });\n    }, config.intervalMs);\n    this.intervalId.unref?.();\n  }\n\n  /** Cron, exec completion, manual triggers, etc. */\n  requestNow(opts?: { reason?: string }): void {\n    this.wake.request({ reason: opts?.reason ?? 'manual' });\n  }\n\n  stop(): void {\n    if (this.intervalId) {\n      clearInterval(this.intervalId);\n      this.intervalId = null;\n    }\n    this.wake.stop();\n    this.runnerConfig = null;\n    log.info('Heartbeat stopped');\n  }\n\n  updateConfig(config: Config): void {\n    const mapped = mapConfigToRunner(config);\n    this.stop();\n    if (mapped.enabled) {\n      this.start(mapped);\n    }\n    log.info('Heartbeat config updated');\n  }\n\n  isRunning(): boolean {\n    return this.intervalId !== null;\n  }\n\n  private async runHeartbeatOnce(reasons: string[]): Promise<void> {\n    const reasonSummary = [...new Set(reasons)].join(', ') || 'unknown';\n\n    const cfg = this.runnerConfig;\n    if (!cfg?.enabled) {\n      log.debug({ reasons: reasonSummary }, 'Heartbeat: skip (disabled)');\n      return;\n    }\n\n    if (cfg.activeHours && !isWithinActiveHours(cfg.activeHours)) {\n      log.debug({ reasons: reasonSummary }, 'Heartbeat: skip (outside active hours)');\n      return;\n    }\n\n    const heartbeatPath = resolveHeartbeatMdPath(this.deps.getConfig());\n    if (!heartbeatPath) {\n      log.debug({ reasons: reasonSummary }, 'Heartbeat: skip (no HEARTBEAT path)');\n      return;\n    }\n    let heartbeatContent: string | undefined;\n    try {\n      const raw = await readFile(heartbeatPath, 'utf-8');\n      if (isHeartbeatContentEmpty(raw)) {\n        log.debug({ path: heartbeatPath, reasons: reasonSummary }, 'Heartbeat: skip (HEARTBEAT.md empty)');\n        return;\n      }\n      heartbeatContent = raw.trim();\n    } catch {\n      log.debug({ path: heartbeatPath, reasons: reasonSummary }, 'Heartbeat: HEARTBEAT.md missing; continuing');\n    }\n\n    const sessionKey = cfg.isolatedSession\n      ? `heartbeat:isolated:${Date.now()}`\n      : 'heartbeat:main';\n\n    let basePrompt = (cfg.prompt?.trim() || DEFAULT_PROMPT).trim();\n    if (heartbeatContent) {\n      basePrompt = `${basePrompt}\\n\\n---\\nHEARTBEAT.md:\\n${heartbeatContent}\\n---`;\n    }\n    basePrompt = appendCronEventLines(basePrompt, reasons);\n    const prompt = `${basePrompt}\\n\\nCurrent time: ${new Date().toISOString()}`;\n\n    const ackMax = cfg.ackMaxChars ?? DEFAULT_ACK_MAX_CHARS;\n\n    log.debug({ sessionKey, reasons: reasonSummary }, 'Heartbeat: invoking agent');\n\n    // `heartbeat:main` reuses one session key; each run would otherwise append to the transcript\n    // until the model rejects the request (context window exceeded). Heartbeat prompts are\n    // self-contained (HEARTBEAT.md + this turn's text), so we start from an empty history.\n    if (sessionKey === 'heartbeat:main') {\n      try {\n        await this.deps.sessionStore.saveMessages(sessionKey, [], {\n          metadata: {\n            sourceChannel: 'heartbeat',\n            sourceChatId: 'main',\n            sessionType: 'heartbeat',\n            customData: { heartbeatTarget: 'main' },\n            routing: {\n              agentId: 'main',\n              source: 'heartbeat',\n              accountId: 'default',\n              peerKind: 'direct',\n              peerId: 'main',\n            },\n          },\n        });\n      } catch (err) {\n        log.warn({ err, sessionKey }, 'Heartbeat: failed to reset main session transcript');\n      }\n    }\n\n    let reply: string;\n    try {\n      reply = await this.deps.agentService.turnDispatcher.processDirect(prompt, sessionKey);\n    } catch (error) {\n      log.error({ err: error }, 'Heartbeat: agent call failed');\n      return;\n    }\n\n    if (!reply?.trim()) {\n      log.debug({ reasons: reasonSummary }, 'Heartbeat: skip (empty model reply)');\n      return;\n    }\n\n    if (shouldSilence(reply, ackMax)) {\n      log.info(\n        { ackMax, replyChars: reply.length, reasons: reasonSummary },\n        'Heartbeat: not sent — silent (HEARTBEAT_OK / short ack)',\n      );\n      return;\n    }\n\n    const { stripped } = stripHeartbeatToken(reply);\n    const finalText = stripped || reply.trim();\n\n    if (this.isDuplicate(finalText)) {\n      log.info(\n        { finalTextChars: finalText.length, reasons: reasonSummary },\n        'Heartbeat: not sent — duplicate within 24h',\n      );\n      return;\n    }\n\n    const target = cfg.target?.trim();\n    const targetChatId = cfg.targetChatId?.trim();\n    const hasDeliveryTarget = Boolean(target && targetChatId);\n\n    if (hasDeliveryTarget) {\n      await this.deps.messageBus.publishOutbound({\n        channel: target!,\n        chat_id: targetChatId!,\n        content: finalText,\n        type: 'message',\n      });\n      log.info(\n        {\n          reasons: reasonSummary,\n          channel: target,\n          chatId: targetChatId,\n          contentChars: finalText.length,\n        },\n        'Heartbeat: sent — outbound queued',\n      );\n    } else {\n      log.info(\n        { reasons: reasonSummary, finalTextChars: finalText.length },\n        'Heartbeat: not sent — no delivery target (set gateway.heartbeat.target + targetChatId)',\n      );\n    }\n\n    this.lastHeartbeatText = finalText;\n    this.lastHeartbeatAt = Date.now();\n  }\n\n  private isDuplicate(text: string): boolean {\n    const DEDUP_WINDOW_MS = 24 * 60 * 60 * 1000;\n    return (\n      text.trim() === this.lastHeartbeatText.trim() &&\n      Date.now() - this.lastHeartbeatAt < DEDUP_WINDOW_MS\n    );\n  }\n}\n"],"mappings":";;;;;;;;;;aAeqD;AAGrD,MAAM,MAAM,aAAa,mBAAmB;AAE5C,MAAM,iBACJ;AAiBF,SAAS,kBAAkB,KAAgD;CACzE,MAAM,IAAI,KAAK,SAAS;AACxB,QAAO;EACL,SAAS,GAAG,WAAW;EACvB,YAAY,GAAG,cAAc;EAC7B,QAAQ,GAAG;EACX,cAAc,GAAG;EACjB,QAAQ,GAAG;EACX,aAAa,GAAG;EAChB,iBAAiB,GAAG;EACpB,aAAa,GAAG;EACjB;;;AAIH,SAAgB,gCAAgC,KAAoC;AAClF,QAAO,kBAAkB,IAAI;;AAW/B,IAAa,mBAAb,MAA8B;CAC5B,aAA4D;CAC5D;CACA,oBAA4B;CAC5B,kBAA0B;CAC1B,eAAqD;CAErD,YAAY,MAAoC;AAA5B,OAAA,OAAA;AAClB,OAAK,OAAO,qBAAqB,YAAY,KAAK,iBAAiB,QAAQ,CAAC;;CAG9E,MAAM,QAAqC;AACzC,MAAI,CAAC,OAAO,SAAS;AACnB,OAAI,KAAK,qBAAqB;AAC9B,QAAK,eAAe;AACpB;;AAGF,OAAK,eAAe;AACpB,MAAI,KAAK,EAAE,YAAY,OAAO,YAAY,EAAE,0CAA0C;AAEtF,OAAK,aAAa,kBAAkB;AAClC,QAAK,KAAK,QAAQ,EAAE,QAAQ,YAAY,CAAC;KACxC,OAAO,WAAW;AACrB,OAAK,WAAW,SAAS;;;CAI3B,WAAW,MAAkC;AAC3C,OAAK,KAAK,QAAQ,EAAE,QAAQ,MAAM,UAAU,UAAU,CAAC;;CAGzD,OAAa;AACX,MAAI,KAAK,YAAY;AACnB,iBAAc,KAAK,WAAW;AAC9B,QAAK,aAAa;;AAEpB,OAAK,KAAK,MAAM;AAChB,OAAK,eAAe;AACpB,MAAI,KAAK,oBAAoB;;CAG/B,aAAa,QAAsB;EACjC,MAAM,SAAS,kBAAkB,OAAO;AACxC,OAAK,MAAM;AACX,MAAI,OAAO,QACT,MAAK,MAAM,OAAO;AAEpB,MAAI,KAAK,2BAA2B;;CAGtC,YAAqB;AACnB,SAAO,KAAK,eAAe;;CAG7B,MAAc,iBAAiB,SAAkC;EAC/D,MAAM,gBAAgB,CAAC,GAAG,IAAI,IAAI,QAAQ,CAAC,CAAC,KAAK,KAAK,IAAI;EAE1D,MAAM,MAAM,KAAK;AACjB,MAAI,CAAC,KAAK,SAAS;AACjB,OAAI,MAAM,EAAE,SAAS,eAAe,EAAE,6BAA6B;AACnE;;AAGF,MAAI,IAAI,eAAe,CAAC,oBAAoB,IAAI,YAAY,EAAE;AAC5D,OAAI,MAAM,EAAE,SAAS,eAAe,EAAE,yCAAyC;AAC/E;;EAGF,MAAM,gBAAgB,uBAAuB,KAAK,KAAK,WAAW,CAAC;AACnE,MAAI,CAAC,eAAe;AAClB,OAAI,MAAM,EAAE,SAAS,eAAe,EAAE,sCAAsC;AAC5E;;EAEF,IAAI;AACJ,MAAI;GACF,MAAM,MAAM,MAAM,SAAS,eAAe,QAAQ;AAClD,OAAI,wBAAwB,IAAI,EAAE;AAChC,QAAI,MAAM;KAAE,MAAM;KAAe,SAAS;KAAe,EAAE,uCAAuC;AAClG;;AAEF,sBAAmB,IAAI,MAAM;UACvB;AACN,OAAI,MAAM;IAAE,MAAM;IAAe,SAAS;IAAe,EAAE,8CAA8C;;EAG3G,MAAM,aAAa,IAAI,kBACnB,sBAAsB,KAAK,KAAK,KAChC;EAEJ,IAAI,cAAc,IAAI,QAAQ,MAAM,IAAI,gBAAgB,MAAM;AAC9D,MAAI,iBACF,cAAa,GAAG,WAAW,0BAA0B,iBAAiB;AAExE,eAAa,qBAAqB,YAAY,QAAQ;EACtD,MAAM,SAAS,GAAG,WAAW,qCAAoB,IAAI,MAAM,EAAC,aAAa;EAEzE,MAAM,SAAS,IAAI,eAAA;AAEnB,MAAI,MAAM;GAAE;GAAY,SAAS;GAAe,EAAE,4BAA4B;AAK9E,MAAI,eAAe,iBACjB,KAAI;AACF,SAAM,KAAK,KAAK,aAAa,aAAa,YAAY,EAAE,EAAE,EACxD,UAAU;IACR,eAAe;IACf,cAAc;IACd,aAAa;IACb,YAAY,EAAE,iBAAiB,QAAQ;IACvC,SAAS;KACP,SAAS;KACT,QAAQ;KACR,WAAW;KACX,UAAU;KACV,QAAQ;KACT;IACF,EACF,CAAC;WACK,KAAK;AACZ,OAAI,KAAK;IAAE;IAAK;IAAY,EAAE,qDAAqD;;EAIvF,IAAI;AACJ,MAAI;AACF,WAAQ,MAAM,KAAK,KAAK,aAAa,eAAe,cAAc,QAAQ,WAAW;WAC9E,OAAO;AACd,OAAI,MAAM,EAAE,KAAK,OAAO,EAAE,+BAA+B;AACzD;;AAGF,MAAI,CAAC,OAAO,MAAM,EAAE;AAClB,OAAI,MAAM,EAAE,SAAS,eAAe,EAAE,sCAAsC;AAC5E;;AAGF,MAAI,cAAc,OAAO,OAAO,EAAE;AAChC,OAAI,KACF;IAAE;IAAQ,YAAY,MAAM;IAAQ,SAAS;IAAe,EAC5D,0DACD;AACD;;EAGF,MAAM,EAAE,aAAa,oBAAoB,MAAM;EAC/C,MAAM,YAAY,YAAY,MAAM,MAAM;AAE1C,MAAI,KAAK,YAAY,UAAU,EAAE;AAC/B,OAAI,KACF;IAAE,gBAAgB,UAAU;IAAQ,SAAS;IAAe,EAC5D,6CACD;AACD;;EAGF,MAAM,SAAS,IAAI,QAAQ,MAAM;EACjC,MAAM,eAAe,IAAI,cAAc,MAAM;AAG7C,MAF0B,QAAQ,UAAU,aAEvB,EAAE;AACrB,SAAM,KAAK,KAAK,WAAW,gBAAgB;IACzC,SAAS;IACT,SAAS;IACT,SAAS;IACT,MAAM;IACP,CAAC;AACF,OAAI,KACF;IACE,SAAS;IACT,SAAS;IACT,QAAQ;IACR,cAAc,UAAU;IACzB,EACD,oCACD;QAED,KAAI,KACF;GAAE,SAAS;GAAe,gBAAgB,UAAU;GAAQ,EAC5D,yFACD;AAGH,OAAK,oBAAoB;AACzB,OAAK,kBAAkB,KAAK,KAAK;;CAGnC,YAAoB,MAAuB;AAEzC,SACE,KAAK,MAAM,KAAK,KAAK,kBAAkB,MAAM,IAC7C,KAAK,KAAK,GAAG,KAAK,kBAHI,OAAU,KAAK"}