@xopcai/xopc 0.0.149 → 0.0.151

package/dist/src/gateway/hono/routes/browser-install.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"browser-install.js","names":[],"sources":["../../../../../src/gateway/hono/routes/browser-install.ts"],"sourcesContent":["import type { Hono } from 'hono';\nimport { streamSSE } from 'hono/streaming';\n\nimport {\n  acquireBrowserInstallLock,\n  cancelBrowserInstall,\n  type BrowserInstallKind,\n} from '../../../browser/install-lock.js';\nimport type { BrowserInstallProgress } from '../../../browser/install-progress.js';\nimport { runPlaywrightChromiumInstallWithProgress } from '../../../browser/providers/playwright-install.js';\nimport { createGatewayRouteLogger } from '../lib/route-logger.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\n\nconst log = createGatewayRouteLogger('BrowserInstall');\n\nfunction parseCloakInstallBody(body: unknown): { cacheDir?: string; binaryPath?: string } {\n  const input = body && typeof body === 'object' && !Array.isArray(body)\n    ? (body as Record<string, unknown>)\n    : {};\n  const cacheDir = typeof input.cacheDir === 'string' && input.cacheDir.trim()\n    ? input.cacheDir.trim()\n    : undefined;\n  const binaryPath = typeof input.binaryPath === 'string' && input.binaryPath.trim()\n    ? input.binaryPath.trim()\n    : undefined;\n  return { cacheDir, binaryPath };\n}\n\nfunction isInstallCancelled(err: unknown, signal?: AbortSignal): boolean {\n  if (signal?.aborted) return true;\n  return err instanceof Error && err.message === 'Install cancelled';\n}\n\nasync function writeInstallProgress(\n  stream: { writeSSE: (payload: { event: string; data: string }) => Promise<void> },\n  progress: BrowserInstallProgress,\n): Promise<void> {\n  try {\n    await stream.writeSSE({\n      event: 'progress',\n      data: JSON.stringify(progress),\n    });\n  } catch {\n    // Client navigated away — install continues unless user hit cancel.\n  }\n}\n\nfunction createInstallProgressEmitter(\n  stream: { writeSSE: (payload: { event: string; data: string }) => Promise<void> },\n): (progress: BrowserInstallProgress) => Promise<void> {\n  let chain = Promise.resolve();\n  return (progress) => {\n    chain = chain.then(() => writeInstallProgress(stream, progress));\n    return chain;\n  };\n}\n\nasync function runBrowserInstallStream(\n  kind: BrowserInstallKind,\n  stream: { writeSSE: (payload: { event: string; data: string }) => Promise<void> },\n  run: (\n    signal: AbortSignal,\n    emitProgress: (progress: BrowserInstallProgress) => Promise<void>,\n  ) => Promise<unknown>,\n): Promise<void> {\n  const lock = acquireBrowserInstallLock(kind);\n  if (!lock) {\n    await stream.writeSSE({\n      event: 'result',\n      data: JSON.stringify({\n        ok: false,\n        error: 'busy',\n        message: 'An install for this browser type is already in progress.',\n      }),\n    });\n    return;\n  }\n\n  try {\n    const emitProgress = createInstallProgressEmitter(stream);\n    const payload = await run(lock.signal, emitProgress);\n    await emitProgress({ phase: 'ready', message: 'Install complete', percent: 100 });\n    try {\n      await stream.writeSSE({\n        event: 'result',\n        data: JSON.stringify({ ok: true, payload }),\n      });\n    } catch {\n      log.info({ kind }, 'Gateway: browser install finished after client disconnected');\n    }\n  } catch (err) {\n    if (isInstallCancelled(err, lock.signal)) {\n      log.info({ kind }, 'Gateway: browser install cancelled by user');\n      try {\n        await stream.writeSSE({\n          event: 'result',\n          data: JSON.stringify({\n            ok: false,\n            error: 'cancelled',\n            message: 'Install cancelled',\n          }),\n        });\n      } catch {\n        /* client gone */\n      }\n      return;\n    }\n    const message = err instanceof Error ? err.message : String(err);\n    log.warn({ kind, errorMessage: message }, 'Gateway: streamed browser install failed');\n    try {\n      await stream.writeSSE({\n        event: 'result',\n        data: JSON.stringify({ ok: false, error: 'install-failed', message }),\n      });\n    } catch {\n      /* client gone */\n    }\n  } finally {\n    lock.release();\n  }\n}\n\nfunction registerInstallCancelRoute(\n  authenticated: Hono,\n  deps: AuthenticatedRouteDeps,\n  kind: BrowserInstallKind,\n  path: string,\n): void {\n  const { strictRateLimitMiddleware } = deps;\n  authenticated.post(path, strictRateLimitMiddleware, (c) => {\n    const cancelled = cancelBrowserInstall(kind);\n    return c.json({ ok: true, payload: { cancelled } });\n  });\n}\n\nexport function registerBrowserInstallRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  const { strictRateLimitMiddleware } = deps;\n\n  registerInstallCancelRoute(\n    authenticated,\n    deps,\n    'playwright',\n    '/api/browser/playwright/install/cancel',\n  );\n  registerInstallCancelRoute(\n    authenticated,\n    deps,\n    'cloakbrowser',\n    '/api/browser/cloakbrowser/install/cancel',\n  );\n\n  authenticated.post('/api/browser/playwright/install/stream', strictRateLimitMiddleware, async (c) => {\n    return streamSSE(c, async (stream) => {\n      await runBrowserInstallStream('playwright', stream, async (signal, emitProgress) => {\n        log.info('Gateway: starting streamed Playwright Chromium install');\n        await runPlaywrightChromiumInstallWithProgress({\n          signal,\n          onProgress: emitProgress,\n        });\n        const { playwrightChromiumDoctor } = await import('../../../browser/providers/playwright-doctor.js');\n        const payload = await playwrightChromiumDoctor();\n        if (!payload.installed) {\n          throw new Error(payload.reason ?? 'Chromium not found after install');\n        }\n        return payload;\n      });\n    });\n  });\n\n  authenticated.post('/api/browser/cloakbrowser/install/stream', strictRateLimitMiddleware, async (c) => {\n    let body: unknown;\n    try {\n      body = await c.req.json();\n    } catch {\n      body = {};\n    }\n    const { cacheDir, binaryPath } = parseCloakInstallBody(body);\n\n    return streamSSE(c, async (stream) => {\n      await runBrowserInstallStream('cloakbrowser', stream, async (signal, emitProgress) => {\n        log.info(\n          { cacheDir, binaryPath: binaryPath ? '(custom)' : undefined },\n          'Gateway: starting streamed CloakBrowser install',\n        );\n        const { installCloakBrowser } = await import('../../../browser/providers/cloakbrowser.js');\n        return installCloakBrowser({\n          cacheDir,\n          binaryPath,\n          signal,\n          onProgress: emitProgress,\n        });\n      });\n    });\n  });\n}\n"],"mappings":";;;;;AAaA,MAAM,MAAM,yBAAyB,iBAAiB;AAEtD,SAAS,sBAAsB,MAA2D;CACxF,MAAM,QAAQ,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,GACjE,OACD,EAAE;AAON,QAAO;EAAE,UANQ,OAAO,MAAM,aAAa,YAAY,MAAM,SAAS,MAAM,GACxE,MAAM,SAAS,MAAM,GACrB,KAAA;EAIe,YAHA,OAAO,MAAM,eAAe,YAAY,MAAM,WAAW,MAAM,GAC9E,MAAM,WAAW,MAAM,GACvB,KAAA;EAC2B;;AAGjC,SAAS,mBAAmB,KAAc,QAA+B;AACvE,KAAI,QAAQ,QAAS,QAAO;AAC5B,QAAO,eAAe,SAAS,IAAI,YAAY;;AAGjD,eAAe,qBACb,QACA,UACe;AACf,KAAI;AACF,QAAM,OAAO,SAAS;GACpB,OAAO;GACP,MAAM,KAAK,UAAU,SAAS;GAC/B,CAAC;SACI;;AAKV,SAAS,6BACP,QACqD;CACrD,IAAI,QAAQ,QAAQ,SAAS;AAC7B,SAAQ,aAAa;AACnB,UAAQ,MAAM,WAAW,qBAAqB,QAAQ,SAAS,CAAC;AAChE,SAAO;;;AAIX,eAAe,wBACb,MACA,QACA,KAIe;CACf,MAAM,OAAO,0BAA0B,KAAK;AAC5C,KAAI,CAAC,MAAM;AACT,QAAM,OAAO,SAAS;GACpB,OAAO;GACP,MAAM,KAAK,UAAU;IACnB,IAAI;IACJ,OAAO;IACP,SAAS;IACV,CAAC;GACH,CAAC;AACF;;AAGF,KAAI;EACF,MAAM,eAAe,6BAA6B,OAAO;EACzD,MAAM,UAAU,MAAM,IAAI,KAAK,QAAQ,aAAa;AACpD,QAAM,aAAa;GAAE,OAAO;GAAS,SAAS;GAAoB,SAAS;GAAK,CAAC;AACjF,MAAI;AACF,SAAM,OAAO,SAAS;IACpB,OAAO;IACP,MAAM,KAAK,UAAU;KAAE,IAAI;KAAM;KAAS,CAAC;IAC5C,CAAC;UACI;AACN,OAAI,KAAK,EAAE,MAAM,EAAE,8DAA8D;;UAE5E,KAAK;AACZ,MAAI,mBAAmB,KAAK,KAAK,OAAO,EAAE;AACxC,OAAI,KAAK,EAAE,MAAM,EAAE,6CAA6C;AAChE,OAAI;AACF,UAAM,OAAO,SAAS;KACpB,OAAO;KACP,MAAM,KAAK,UAAU;MACnB,IAAI;MACJ,OAAO;MACP,SAAS;MACV,CAAC;KACH,CAAC;WACI;AAGR;;EAEF,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAChE,MAAI,KAAK;GAAE;GAAM,cAAc;GAAS,EAAE,2CAA2C;AACrF,MAAI;AACF,SAAM,OAAO,SAAS;IACpB,OAAO;IACP,MAAM,KAAK,UAAU;KAAE,IAAI;KAAO,OAAO;KAAkB;KAAS,CAAC;IACtE,CAAC;UACI;WAGA;AACR,OAAK,SAAS;;;AAIlB,SAAS,2BACP,eACA,MACA,MACA,MACM;CACN,MAAM,EAAE,8BAA8B;AACtC,eAAc,KAAK,MAAM,4BAA4B,MAAM;EACzD,MAAM,YAAY,qBAAqB,KAAK;AAC5C,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,WAAW;GAAE,CAAC;GACnD;;AAGJ,SAAgB,6BAA6B,eAAqB,MAAoC;CACpG,MAAM,EAAE,8BAA8B;AAEtC,4BACE,eACA,MACA,cACA,yCACD;AACD,4BACE,eACA,MACA,gBACA,2CACD;AAED,eAAc,KAAK,0CAA0C,2BAA2B,OAAO,MAAM;AACnG,SAAO,UAAU,GAAG,OAAO,WAAW;AACpC,SAAM,wBAAwB,cAAc,QAAQ,OAAO,QAAQ,iBAAiB;AAClF,QAAI,KAAK,yDAAyD;AAClE,UAAM,yCAAyC;KAC7C;KACA,YAAY;KACb,CAAC;IACF,MAAM,EAAE,6BAA6B,MAAM,OAAO;IAClD,MAAM,UAAU,MAAM,0BAA0B;AAChD,QAAI,CAAC,QAAQ,UACX,OAAM,IAAI,MAAM,QAAQ,UAAU,mCAAmC;AAEvE,WAAO;KACP;IACF;GACF;AAEF,eAAc,KAAK,4CAA4C,2BAA2B,OAAO,MAAM;EACrG,IAAI;AACJ,MAAI;AACF,UAAO,MAAM,EAAE,IAAI,MAAM;UACnB;AACN,UAAO,EAAE;;EAEX,MAAM,EAAE,UAAU,eAAe,sBAAsB,KAAK;AAE5D,SAAO,UAAU,GAAG,OAAO,WAAW;AACpC,SAAM,wBAAwB,gBAAgB,QAAQ,OAAO,QAAQ,iBAAiB;AACpF,QAAI,KACF;KAAE;KAAU,YAAY,aAAa,aAAa,KAAA;KAAW,EAC7D,kDACD;IACD,MAAM,EAAE,wBAAwB,MAAM,OAAO;AAC7C,WAAO,oBAAoB;KACzB;KACA;KACA;KACA,YAAY;KACb,CAAC;KACF;IACF;GACF"}

package/dist/src/gateway/hono/routes/browser.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"browser.js","names":[],"sources":["../../../../../src/gateway/hono/routes/browser.ts"],"sourcesContent":["/**\n * Browser/extension settings routes: `/api/browser/*` except for the\n * long-running install streams under `/api/browser/{playwright,cloakbrowser}/install/stream`\n * (those live in `browser-install.ts` so the SSE pump doesn't have to load\n * with the rest of settings).\n *\n * Four backend families:\n *   - **Extension WS bridge** — pair Chrome via the xopc browser extension.\n *     Owns a module-scoped manual handle so the bridge can outlive a config\n *     save (UI flow: Start → pair → Save).\n *   - **CloakBrowser** — install / launch / probe runtime status.\n *   - **Playwright Chromium** — doctor + on-demand install of bundled browser.\n *   - **Local CDP** — launch / list / stop user-driven debug Chrome instances.\n *   - **Cloud providers** (browserbase / browser-use) — connection test.\n *\n * Extracted from `config.ts` (which was 2237 lines and 80% browser routes).\n */\nimport type { Hono } from 'hono';\nimport net from 'node:net';\n\nimport type { Config } from '../../../config/schema.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\n\nconst DEFAULT_EXTENSION_PORT = 19820;\nconst DEFAULT_EXTENSION_HOST = '127.0.0.1';\n\n/**\n * Optional manual hold on the extension WS server kept alive from the UI so\n * users can pair the extension before saving config / running a browser tool.\n * Module-scoped so repeat Start calls are idempotent and the bridge survives\n * config patches.\n */\ntype ManualHandle = { release: () => Promise<void>; host: string; port: number };\nlet manualExtensionHandle: ManualHandle | null = null;\n\nfunction loopbackHostnameFromUrl(input: string): string | null {\n  let parsed: URL;\n  try {\n    parsed = new URL(input);\n  } catch {\n    return null;\n  }\n  const proto = parsed.protocol;\n  if (proto !== 'ws:' && proto !== 'wss:' && proto !== 'http:' && proto !== 'https:') {\n    return null;\n  }\n  const host = parsed.hostname.toLowerCase();\n  if (host === '127.0.0.1' || host === 'localhost' || host === '::1') return host;\n  return null;\n}\n\nfunction isLoopbackHost(host: string): boolean {\n  const h = host.trim().toLowerCase();\n  return h === '127.0.0.1' || h === 'localhost' || h === '::1' || h === '[::1]';\n}\n\nfunction parseExtensionProbePort(raw: string | undefined): number | undefined {\n  if (!raw) return undefined;\n  const n = Number.parseInt(raw, 10);\n  if (!Number.isFinite(n) || n < 1024 || n > 65_535) return undefined;\n  return n;\n}\n\nfunction isLoopbackPortOpen(host: string, port: number, timeoutMs = 500): Promise<boolean> {\n  return new Promise((resolve) => {\n    const socket = net.connect({ host, port });\n    const finish = (open: boolean) => {\n      socket.removeAllListeners();\n      try {\n        socket.destroy();\n      } catch {\n        /* */\n      }\n      resolve(open);\n    };\n    socket.setTimeout(timeoutMs);\n    socket.once('connect', () => finish(true));\n    socket.once('timeout', () => finish(false));\n    socket.once('error', () => finish(false));\n  });\n}\n\nasync function readExtensionBridgeSnapshot() {\n  const { getExtensionBrowserServerSnapshot } = await import(\n    '../../../browser/providers/extension-ws-acquire.js'\n  );\n  return getExtensionBrowserServerSnapshot();\n}\n\nasync function stopExtensionBridgeFromSettings(service: AuthenticatedRouteDeps['service']): Promise<{\n  forcedShutdown: boolean;\n}> {\n  if (manualExtensionHandle) {\n    try {\n      await manualExtensionHandle.release();\n    } catch {\n      /* refcount underflow should not surface */\n    }\n    manualExtensionHandle = null;\n  }\n  await service.releaseBrowserExtensionBridge();\n  const { forceShutdownExtensionBrowserServer } = await import(\n    '../../../browser/providers/extension-ws-acquire.js'\n  );\n  const forcedShutdown = await forceShutdownExtensionBrowserServer();\n  return { forcedShutdown };\n}\n\nfunction resolveExtensionStatusTarget(\n  browser: Record<string, unknown> | undefined,\n  query: { probe?: string; host?: string; port?: string },\n): { host: string; port: number; backend: string } | null {\n  const backend = typeof browser?.backend === 'string' ? browser.backend : 'extension';\n  const probe = query.probe === '1' || query.probe === 'true';\n  if (!probe && backend !== 'extension') {\n    return null;\n  }\n\n  const ext = browser?.extension as Record<string, unknown> | undefined;\n  const configPort =\n    typeof ext?.port === 'number' && ext.port >= 1024 && ext.port <= 65_535\n      ? Math.floor(ext.port)\n      : DEFAULT_EXTENSION_PORT;\n  const configHost =\n    typeof ext?.host === 'string' && ext.host.trim() ? ext.host.trim() : DEFAULT_EXTENSION_HOST;\n\n  const port = parseExtensionProbePort(query.port) ?? configPort;\n  const host =\n    typeof query.host === 'string' && query.host.trim() ? query.host.trim() : configHost;\n  if (!isLoopbackHost(host)) {\n    return null;\n  }\n\n  return { host, port, backend: probe && backend !== 'extension' ? 'extension' : backend };\n}\n\nexport function registerBrowserRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  const { service, strictRateLimitMiddleware } = deps;\n\n  // Browser extension bridge status — gateway-side check so frontend doesn't cross-origin fetch.\n  authenticated.get('/api/browser/extension-status', async (c) => {\n    const target = resolveExtensionStatusTarget(undefined, {\n      probe: c.req.query('probe'),\n      host: c.req.query('host'),\n      port: c.req.query('port'),\n    });\n\n    let artifacts: Record<string, unknown> | undefined;\n    try {\n      const { browserExtDoctor } = await import('../../../browser/providers/browser-ext-install.js');\n      const doctor = await browserExtDoctor();\n      artifacts = {\n        installed: doctor.installed,\n        extensionDir: doctor.extensionDir,\n        xopcVersion: doctor.xopcVersion,\n        installedVersion: doctor.installedVersion,\n        needsRefresh: doctor.needsRefresh,\n        needsChromeReload: doctor.needsChromeReload,\n      };\n    } catch {\n      /* optional */\n    }\n\n    if (!target) {\n      const backend = 'extension';\n      return c.json({ running: false, connected: false, backend, artifacts });\n    }\n    const snapshot = await readExtensionBridgeSnapshot();\n    let probeRunning = false;\n    let probeConnected = false;\n    try {\n      const res = await fetch(`http://${target.host}:${target.port}/`, { signal: AbortSignal.timeout(2000) });\n      const data = (await res.json()) as { ok?: boolean; connected?: boolean };\n      probeRunning = Boolean(data.ok);\n      probeConnected = Boolean(data.connected);\n    } catch {\n      /* probe failed — fall through to snapshot / port check */\n    }\n    const running = probeRunning || snapshot.active;\n    const portConflict =\n      !running && !snapshot.active\n        ? await isLoopbackPortOpen(target.host, target.port)\n        : false;\n    return c.json({\n      running,\n      connected: probeConnected,\n      backend: target.backend,\n      artifacts,\n      bridgeHeld: snapshot.active,\n      refCount: snapshot.refCount,\n      manualBridge: manualExtensionHandle !== null,\n      portConflict,\n    });\n  });\n\n  authenticated.get('/api/browser/extension/doctor', async (c) => {\n    const cacheDirRaw = c.req.query('cacheDir');\n    try {\n      const { browserExtDoctor } = await import('../../../browser/providers/browser-ext-install.js');\n      const status = await browserExtDoctor({\n        cacheDir: cacheDirRaw && cacheDirRaw.trim() ? cacheDirRaw.trim() : undefined,\n      });\n      return c.json({ ok: true, payload: status });\n    } catch (e) {\n      const message = e instanceof Error ? e.message : String(e);\n      return c.json({ ok: false, error: message }, 400);\n    }\n  });\n\n  authenticated.post('/api/browser/extension/install', strictRateLimitMiddleware, async (c) => {\n    let body: unknown;\n    try {\n      body = await c.req.json();\n    } catch {\n      body = {};\n    }\n    const input = body && typeof body === 'object' && !Array.isArray(body)\n      ? (body as Record<string, unknown>)\n      : {};\n    const cacheDir = typeof input.cacheDir === 'string' && input.cacheDir.trim()\n      ? input.cacheDir.trim()\n      : undefined;\n    const force = input.force === true;\n\n    try {\n      const { ensureBrowserExtensionArtifacts, browserExtDoctor } = await import(\n        '../../../browser/providers/browser-ext-install.js'\n      );\n      const result = await ensureBrowserExtensionArtifacts({ cacheDir, force });\n      const doctor = await browserExtDoctor({ cacheDir });\n      return c.json({ ok: true, payload: { ...result, doctor } });\n    } catch (e) {\n      const message = e instanceof Error ? e.message : String(e);\n      return c.json({ ok: false, error: message }, 500);\n    }\n  });\n\n  authenticated.post('/api/browser/extension/open', strictRateLimitMiddleware, async (c) => {\n    let body: unknown;\n    try {\n      body = await c.req.json();\n    } catch {\n      body = {};\n    }\n    const input = body && typeof body === 'object' && !Array.isArray(body)\n      ? (body as Record<string, unknown>)\n      : {};\n    const cacheDir = typeof input.cacheDir === 'string' && input.cacheDir.trim()\n      ? input.cacheDir.trim()\n      : undefined;\n    const actionRaw = typeof input.action === 'string' ? input.action.trim() : 'both';\n    const action =\n      actionRaw === 'chrome' || actionRaw === 'folder' || actionRaw === 'both' ? actionRaw : 'both';\n\n    try {\n      const { openBrowserExtensionInstallUi } = await import(\n        '../../../browser/providers/browser-ext-install.js'\n      );\n      const result = await openBrowserExtensionInstallUi({ action, cacheDir });\n      return c.json({ ok: true, payload: result });\n    } catch (e) {\n      const message = e instanceof Error ? e.message : String(e);\n      return c.json({ ok: false, error: message }, 500);\n    }\n  });\n\n  // Start the extension WS bridge eagerly so the user can pair the extension\n  // before saving config / running any tool. Idempotent (returns current state\n  // if already running).\n  authenticated.post('/api/browser/extension/start', strictRateLimitMiddleware, async (c) => {\n    let body: unknown;\n    try {\n      body = await c.req.json();\n    } catch {\n      body = {};\n    }\n    const input = body && typeof body === 'object' && !Array.isArray(body)\n      ? (body as Record<string, unknown>)\n      : {};\n    const port =\n      typeof input.port === 'number' && input.port >= 1024 && input.port <= 65535\n        ? Math.floor(input.port)\n        : DEFAULT_EXTENSION_PORT;\n    const hostRaw = typeof input.host === 'string' && input.host.trim() ? input.host.trim() : DEFAULT_EXTENSION_HOST;\n    if (!isLoopbackHost(hostRaw)) {\n      return c.json({ ok: false, error: 'extension bridge host must be loopback' }, 400);\n    }\n\n    try {\n      if (manualExtensionHandle && (manualExtensionHandle.host !== hostRaw || manualExtensionHandle.port !== port)) {\n        await manualExtensionHandle.release();\n        manualExtensionHandle = null;\n      }\n      if (!manualExtensionHandle) {\n        const { acquireExtensionBrowserServer } = await import(\n          '../../../browser/providers/extension-ws-acquire.js'\n        );\n        const { release } = await acquireExtensionBrowserServer({ host: hostRaw, port });\n        manualExtensionHandle = { release, host: hostRaw, port };\n      }\n      return c.json({ ok: true, payload: { running: true, host: hostRaw, port } });\n    } catch (e) {\n      return c.json({ ok: false, error: e instanceof Error ? e.message : String(e) }, 500);\n    }\n  });\n\n  authenticated.post('/api/browser/extension/stop', strictRateLimitMiddleware, async (c) => {\n    try {\n      const { forcedShutdown } = await stopExtensionBridgeFromSettings(service);\n      return c.json({\n        ok: true,\n        payload: { running: false, forcedShutdown },\n      });\n    } catch (e) {\n      return c.json({ ok: false, error: e instanceof Error ? e.message : String(e) }, 500);\n    }\n  });\n\n  authenticated.post('/api/browser/extension/disconnect', strictRateLimitMiddleware, async (c) => {\n    try {\n      const { getExtensionBrowserProvider } = await import(\n        '../../../browser/providers/extension-ws-acquire.js'\n      );\n      const provider = getExtensionBrowserProvider();\n      if (!provider?.isConnected()) {\n        return c.json({\n          ok: true,\n          payload: { connected: false, alreadyDisconnected: true },\n        });\n      }\n      provider.disconnectClient();\n      return c.json({ ok: true, payload: { connected: false } });\n    } catch (e) {\n      return c.json({ ok: false, error: e instanceof Error ? e.message : String(e) }, 500);\n    }\n  });\n\n  // Doctor: does Playwright have a runnable Chromium on disk?\n  authenticated.get('/api/browser/playwright/doctor', async (c) => {\n    try {\n      const { playwrightChromiumDoctor } = await import('../../../browser/providers/playwright-doctor.js');\n      const payload = await playwrightChromiumDoctor();\n      return c.json({ ok: true, payload });\n    } catch (e) {\n      return c.json(\n        { ok: false, error: e instanceof Error ? e.message : String(e) },\n        500,\n      );\n    }\n  });\n\n  // Doctor: CloakBrowser installed?\n  authenticated.get('/api/browser/cloakbrowser/doctor', async (c) => {\n    const cacheDirRaw = c.req.query('cacheDir');\n    const binaryPathRaw = c.req.query('binaryPath');\n    try {\n      const { cloakBrowserDoctor } = await import('../../../browser/providers/cloakbrowser.js');\n      const status = await cloakBrowserDoctor({\n        cacheDir: cacheDirRaw && cacheDirRaw.trim() ? cacheDirRaw.trim() : undefined,\n        binaryPath: binaryPathRaw && binaryPathRaw.trim() ? binaryPathRaw.trim() : undefined,\n      });\n      return c.json({ ok: true, payload: status });\n    } catch (e) {\n      const message = e instanceof Error ? e.message : String(e);\n      return c.json({ ok: false, error: message }, 400);\n    }\n  });\n\n  // Runtime status for CloakBrowser (CDP port + profile dir from saved agent defaults).\n  authenticated.get('/api/browser/cloakbrowser/status', async (c) => {\n    try {\n      const { cloakBrowserConfigFromAgentDefaults } = await import('../../../browser/backend-from-config.js');\n      const { probeCloakBrowserRuntime } = await import('../../../browser/providers/cloakbrowser.js');\n      const config = cloakBrowserConfigFromAgentDefaults(service.currentConfig as Config);\n      const status = await probeCloakBrowserRuntime(config);\n      return c.json({ ok: true, payload: status });\n    } catch (e) {\n      const message = e instanceof Error ? e.message : String(e);\n      return c.json({ ok: false, error: message }, 500);\n    }\n  });\n\n  // Open CloakBrowser with the same profile/settings agents use (saved config, headed).\n  authenticated.post('/api/browser/cloakbrowser/launch', strictRateLimitMiddleware, async (c) => {\n    try {\n      const { cloakBrowserConfigFromAgentDefaults } = await import('../../../browser/backend-from-config.js');\n      const { launchCloakBrowser } = await import('../../../browser/providers/cloakbrowser.js');\n      const config = cloakBrowserConfigFromAgentDefaults(service.currentConfig as Config);\n      const result = await launchCloakBrowser({\n        ...config,\n        skipPlaywrightConnect: true,\n      });\n      return c.json({\n        ok: true,\n        payload: {\n          running: true,\n          reused: result.reused,\n          port: result.cdpPort,\n          pid: result.pid,\n          userDataDir: result.userDataDir,\n          temporaryProfile: config.temporaryProfile === true,\n        },\n      });\n    } catch (e) {\n      const message = e instanceof Error ? e.message : String(e);\n      return c.json({ ok: false, error: message }, 500);\n    }\n  });\n\n  // Ping a user-supplied CDP endpoint — loopback only (SSRF guard).\n  authenticated.post('/api/browser/cdp/ping', strictRateLimitMiddleware, async (c) => {\n    let body: unknown;\n    try {\n      body = await c.req.json();\n    } catch {\n      return c.json({ ok: false, error: 'invalid JSON body' }, 400);\n    }\n    const input = body && typeof body === 'object' && !Array.isArray(body)\n      ? (body as Record<string, unknown>)\n      : {};\n    const cdpUrl = typeof input.cdpUrl === 'string' ? input.cdpUrl.trim() : '';\n    if (!cdpUrl) return c.json({ ok: false, error: 'cdpUrl is required' }, 400);\n\n    const loopback = loopbackHostnameFromUrl(cdpUrl);\n    if (!loopback) {\n      return c.json(\n        { ok: false, error: 'CDP ping only allowed for loopback hosts (127.0.0.1 / localhost / ::1)' },\n        403,\n      );\n    }\n    let httpBase: URL;\n    try {\n      httpBase = new URL(cdpUrl);\n      httpBase.protocol = httpBase.protocol === 'wss:' ? 'https:' : 'http:';\n      httpBase.pathname = '/json/version';\n      httpBase.search = '';\n      httpBase.hash = '';\n    } catch (e) {\n      return c.json({ ok: false, error: e instanceof Error ? e.message : 'invalid cdpUrl' }, 400);\n    }\n    try {\n      const res = await fetch(httpBase.toString(), { signal: AbortSignal.timeout(2000) });\n      if (!res.ok) {\n        return c.json({ ok: true, payload: { reachable: false, status: res.status } });\n      }\n      const data = (await res.json()) as { Browser?: string; 'Protocol-Version'?: string; webSocketDebuggerUrl?: string };\n      return c.json({\n        ok: true,\n        payload: {\n          reachable: true,\n          browser: data.Browser ?? null,\n          protocolVersion: data['Protocol-Version'] ?? null,\n          webSocketDebuggerUrl: data.webSocketDebuggerUrl ?? null,\n        },\n      });\n    } catch (e) {\n      const message = e instanceof Error ? e.message : String(e);\n      return c.json({ ok: true, payload: { reachable: false, error: message } });\n    }\n  });\n\n  // Spawn a local debuggable Chrome and return its WS endpoint.\n  authenticated.post('/api/browser/cdp/launch', strictRateLimitMiddleware, async (c) => {\n    let body: unknown;\n    try {\n      body = await c.req.json();\n    } catch {\n      body = {};\n    }\n    const input = body && typeof body === 'object' && !Array.isArray(body)\n      ? (body as Record<string, unknown>)\n      : {};\n    const executablePath =\n      typeof input.executablePath === 'string' && input.executablePath.trim()\n        ? input.executablePath.trim()\n        : undefined;\n    try {\n      const { launchLocalCdpChrome } = await import('../../../browser/cdp-local-launcher.js');\n      const result = await launchLocalCdpChrome({ executablePath });\n      return c.json({ ok: true, payload: result });\n    } catch (e) {\n      const message = e instanceof Error ? e.message : String(e);\n      return c.json({ ok: false, error: message }, 500);\n    }\n  });\n\n  authenticated.post('/api/browser/cdp/stop', strictRateLimitMiddleware, async (c) => {\n    let body: unknown;\n    try {\n      body = await c.req.json();\n    } catch {\n      return c.json({ ok: false, error: 'invalid JSON body' }, 400);\n    }\n    const input = body && typeof body === 'object' && !Array.isArray(body)\n      ? (body as Record<string, unknown>)\n      : {};\n    const port = typeof input.port === 'number' && Number.isInteger(input.port) ? input.port : NaN;\n    if (!Number.isFinite(port) || port < 1024 || port > 65535) {\n      return c.json({ ok: false, error: 'port must be an integer in [1024, 65535]' }, 400);\n    }\n    const { stopLocalCdpChrome } = await import('../../../browser/cdp-local-launcher.js');\n    const stopped = await stopLocalCdpChrome(port);\n    return c.json({ ok: true, payload: { stopped } });\n  });\n\n  authenticated.get('/api/browser/cdp/instances', async (c) => {\n    const { listLocalCdpInstances } = await import('../../../browser/cdp-local-launcher.js');\n    return c.json({ ok: true, payload: { instances: listLocalCdpInstances() } });\n  });\n\n  // Cloud provider connection test.\n  authenticated.post('/api/browser/cloud/test-connection', strictRateLimitMiddleware, async (c) => {\n    let body: unknown;\n    try {\n      body = await c.req.json();\n    } catch {\n      return c.json({ ok: false, error: 'invalid JSON body' }, 400);\n    }\n    const input = body && typeof body === 'object' && !Array.isArray(body)\n      ? (body as Record<string, unknown>)\n      : {};\n    const provider = input.provider;\n    const apiKeyRaw = typeof input.apiKey === 'string' ? input.apiKey.trim() : '';\n\n    // The masked sentinel means \"use the stored config key\".\n    let apiKey = apiKeyRaw;\n    if (apiKey === '***' || apiKey === '••••••••••••') {\n      apiKey = '';\n    }\n    if (!apiKey) {\n      if (provider === 'browserbase') apiKey = process.env.BROWSERBASE_API_KEY ?? '';\n      else if (provider === 'browser-use') apiKey = process.env.BROWSER_USE_API_KEY ?? '';\n    }\n    if (!apiKey) {\n      return c.json({ ok: true, payload: { reachable: false, error: 'No API key configured' } });\n    }\n\n    try {\n      if (provider === 'browserbase') {\n        const res = await fetch('https://api.browserbase.com/v1/projects', {\n          headers: { 'x-bb-api-key': apiKey },\n          signal: AbortSignal.timeout(5000),\n        });\n        if (!res.ok) {\n          return c.json({\n            ok: true,\n            payload: { reachable: false, status: res.status, error: await res.text().catch(() => '') },\n          });\n        }\n        const data = (await res.json().catch(() => null)) as unknown;\n        const projects = Array.isArray(data) ? data : Array.isArray((data as { data?: unknown[] })?.data) ? (data as { data: unknown[] }).data : [];\n        return c.json({ ok: true, payload: { reachable: true, projectCount: projects.length } });\n      }\n      if (provider === 'browser-use') {\n        const res = await fetch('https://api.browser-use.com/api/v1/users/me', {\n          headers: { Authorization: `Bearer ${apiKey}` },\n          signal: AbortSignal.timeout(5000),\n        });\n        if (!res.ok) {\n          return c.json({\n            ok: true,\n            payload: { reachable: false, status: res.status, error: await res.text().catch(() => '') },\n          });\n        }\n        return c.json({ ok: true, payload: { reachable: true } });\n      }\n      return c.json({ ok: false, error: 'provider must be browserbase or browser-use' }, 400);\n    } catch (e) {\n      const message = e instanceof Error ? e.message : String(e);\n      return c.json({ ok: true, payload: { reachable: false, error: message } });\n    }\n  });\n\n  authenticated.post('/api/browser/playwright/install', strictRateLimitMiddleware, async (c) => {\n    try {\n      const { installPlaywrightChromium } = await import('../../../browser/providers/playwright-install.js');\n      const payload = await installPlaywrightChromium();\n      return c.json({ ok: true, payload });\n    } catch (e) {\n      const message = e instanceof Error ? e.message : String(e);\n      return c.json({ ok: false, error: message || 'Failed to install Playwright Chromium' }, 500);\n    }\n  });\n\n  authenticated.post('/api/browser/cloakbrowser/install', strictRateLimitMiddleware, async (c) => {\n    let body: unknown;\n    try {\n      body = await c.req.json();\n    } catch {\n      body = {};\n    }\n    const input = body && typeof body === 'object' && !Array.isArray(body)\n      ? (body as Record<string, unknown>)\n      : {};\n    const cacheDir = typeof input.cacheDir === 'string' && input.cacheDir.trim()\n      ? input.cacheDir.trim()\n      : undefined;\n    const binaryPath = typeof input.binaryPath === 'string' && input.binaryPath.trim()\n      ? input.binaryPath.trim()\n      : undefined;\n\n    try {\n      const { installCloakBrowser } = await import('../../../browser/providers/cloakbrowser.js');\n      const status = await installCloakBrowser({ cacheDir, binaryPath });\n      return c.json({ ok: true, payload: status });\n    } catch (e) {\n      const message = e instanceof Error ? e.message : String(e);\n      return c.json({ ok: false, error: message }, 500);\n    }\n  });\n}\n"],"mappings":";;AAuBA,MAAM,yBAAyB;AAC/B,MAAM,yBAAyB;AAS/B,IAAI,wBAA6C;AAEjD,SAAS,wBAAwB,OAA8B;CAC7D,IAAI;AACJ,KAAI;AACF,WAAS,IAAI,IAAI,MAAM;SACjB;AACN,SAAO;;CAET,MAAM,QAAQ,OAAO;AACrB,KAAI,UAAU,SAAS,UAAU,UAAU,UAAU,WAAW,UAAU,SACxE,QAAO;CAET,MAAM,OAAO,OAAO,SAAS,aAAa;AAC1C,KAAI,SAAS,eAAe,SAAS,eAAe,SAAS,MAAO,QAAO;AAC3E,QAAO;;AAGT,SAAS,eAAe,MAAuB;CAC7C,MAAM,IAAI,KAAK,MAAM,CAAC,aAAa;AACnC,QAAO,MAAM,eAAe,MAAM,eAAe,MAAM,SAAS,MAAM;;AAGxE,SAAS,wBAAwB,KAA6C;AAC5E,KAAI,CAAC,IAAK,QAAO,KAAA;CACjB,MAAM,IAAI,OAAO,SAAS,KAAK,GAAG;AAClC,KAAI,CAAC,OAAO,SAAS,EAAE,IAAI,IAAI,QAAQ,IAAI,MAAQ,QAAO,KAAA;AAC1D,QAAO;;AAGT,SAAS,mBAAmB,MAAc,MAAc,YAAY,KAAuB;AACzF,QAAO,IAAI,SAAS,YAAY;EAC9B,MAAM,SAAS,IAAI,QAAQ;GAAE;GAAM;GAAM,CAAC;EAC1C,MAAM,UAAU,SAAkB;AAChC,UAAO,oBAAoB;AAC3B,OAAI;AACF,WAAO,SAAS;WACV;AAGR,WAAQ,KAAK;;AAEf,SAAO,WAAW,UAAU;AAC5B,SAAO,KAAK,iBAAiB,OAAO,KAAK,CAAC;AAC1C,SAAO,KAAK,iBAAiB,OAAO,MAAM,CAAC;AAC3C,SAAO,KAAK,eAAe,OAAO,MAAM,CAAC;GACzC;;AAGJ,eAAe,8BAA8B;CAC3C,MAAM,EAAE,sCAAsC,MAAM,OAClD;AAEF,QAAO,mCAAmC;;AAG5C,eAAe,gCAAgC,SAE5C;AACD,KAAI,uBAAuB;AACzB,MAAI;AACF,SAAM,sBAAsB,SAAS;UAC/B;AAGR,0BAAwB;;AAE1B,OAAM,QAAQ,+BAA+B;CAC7C,MAAM,EAAE,wCAAwC,MAAM,OACpD;AAGF,QAAO,EAAE,gBAAA,MADoB,qCAAqC,EACzC;;AAG3B,SAAS,6BACP,SACA,OACwD;CACxD,MAAM,UAAU,OAAO,SAAS,YAAY,WAAW,QAAQ,UAAU;CACzE,MAAM,QAAQ,MAAM,UAAU,OAAO,MAAM,UAAU;AACrD,KAAI,CAAC,SAAS,YAAY,YACxB,QAAO;CAGT,MAAM,MAAM,SAAS;CACrB,MAAM,aACJ,OAAO,KAAK,SAAS,YAAY,IAAI,QAAQ,QAAQ,IAAI,QAAQ,QAC7D,KAAK,MAAM,IAAI,KAAK,GACpB;CACN,MAAM,aACJ,OAAO,KAAK,SAAS,YAAY,IAAI,KAAK,MAAM,GAAG,IAAI,KAAK,MAAM,GAAG;CAEvE,MAAM,OAAO,wBAAwB,MAAM,KAAK,IAAI;CACpD,MAAM,OACJ,OAAO,MAAM,SAAS,YAAY,MAAM,KAAK,MAAM,GAAG,MAAM,KAAK,MAAM,GAAG;AAC5E,KAAI,CAAC,eAAe,KAAK,CACvB,QAAO;AAGT,QAAO;EAAE;EAAM;EAAM,SAAS,SAAS,YAAY,cAAc,cAAc;EAAS;;AAG1F,SAAgB,sBAAsB,eAAqB,MAAoC;CAC7F,MAAM,EAAE,SAAS,8BAA8B;AAG/C,eAAc,IAAI,iCAAiC,OAAO,MAAM;EAC9D,MAAM,SAAS,6BAA6B,KAAA,GAAW;GACrD,OAAO,EAAE,IAAI,MAAM,QAAQ;GAC3B,MAAM,EAAE,IAAI,MAAM,OAAO;GACzB,MAAM,EAAE,IAAI,MAAM,OAAO;GAC1B,CAAC;EAEF,IAAI;AACJ,MAAI;GACF,MAAM,EAAE,qBAAqB,MAAM,OAAO;GAC1C,MAAM,SAAS,MAAM,kBAAkB;AACvC,eAAY;IACV,WAAW,OAAO;IAClB,cAAc,OAAO;IACrB,aAAa,OAAO;IACpB,kBAAkB,OAAO;IACzB,cAAc,OAAO;IACrB,mBAAmB,OAAO;IAC3B;UACK;AAIR,MAAI,CAAC,OAEH,QAAO,EAAE,KAAK;GAAE,SAAS;GAAO,WAAW;GAAO,SAAA;GAAS;GAAW,CAAC;EAEzE,MAAM,WAAW,MAAM,6BAA6B;EACpD,IAAI,eAAe;EACnB,IAAI,iBAAiB;AACrB,MAAI;GAEF,MAAM,OAAQ,OAAM,MADF,MAAM,UAAU,OAAO,KAAK,GAAG,OAAO,KAAK,IAAI,EAAE,QAAQ,YAAY,QAAQ,IAAK,EAAE,CAAC,EAC/E,MAAM;AAC9B,kBAAe,QAAQ,KAAK,GAAG;AAC/B,oBAAiB,QAAQ,KAAK,UAAU;UAClC;EAGR,MAAM,UAAU,gBAAgB,SAAS;EACzC,MAAM,eACJ,CAAC,WAAW,CAAC,SAAS,SAClB,MAAM,mBAAmB,OAAO,MAAM,OAAO,KAAK,GAClD;AACN,SAAO,EAAE,KAAK;GACZ;GACA,WAAW;GACX,SAAS,OAAO;GAChB;GACA,YAAY,SAAS;GACrB,UAAU,SAAS;GACnB,cAAc,0BAA0B;GACxC;GACD,CAAC;GACF;AAEF,eAAc,IAAI,iCAAiC,OAAO,MAAM;EAC9D,MAAM,cAAc,EAAE,IAAI,MAAM,WAAW;AAC3C,MAAI;GACF,MAAM,EAAE,qBAAqB,MAAM,OAAO;GAC1C,MAAM,SAAS,MAAM,iBAAiB,EACpC,UAAU,eAAe,YAAY,MAAM,GAAG,YAAY,MAAM,GAAG,KAAA,GACpE,CAAC;AACF,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS;IAAQ,CAAC;WACrC,GAAG;GACV,MAAM,UAAU,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE;AAC1D,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAAS,EAAE,IAAI;;GAEnD;AAEF,eAAc,KAAK,kCAAkC,2BAA2B,OAAO,MAAM;EAC3F,IAAI;AACJ,MAAI;AACF,UAAO,MAAM,EAAE,IAAI,MAAM;UACnB;AACN,UAAO,EAAE;;EAEX,MAAM,QAAQ,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,GACjE,OACD,EAAE;EACN,MAAM,WAAW,OAAO,MAAM,aAAa,YAAY,MAAM,SAAS,MAAM,GACxE,MAAM,SAAS,MAAM,GACrB,KAAA;EACJ,MAAM,QAAQ,MAAM,UAAU;AAE9B,MAAI;GACF,MAAM,EAAE,iCAAiC,qBAAqB,MAAM,OAClE;GAEF,MAAM,SAAS,MAAM,gCAAgC;IAAE;IAAU;IAAO,CAAC;GACzE,MAAM,SAAS,MAAM,iBAAiB,EAAE,UAAU,CAAC;AACnD,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS;KAAE,GAAG;KAAQ;KAAQ;IAAE,CAAC;WACpD,GAAG;GACV,MAAM,UAAU,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE;AAC1D,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAAS,EAAE,IAAI;;GAEnD;AAEF,eAAc,KAAK,+BAA+B,2BAA2B,OAAO,MAAM;EACxF,IAAI;AACJ,MAAI;AACF,UAAO,MAAM,EAAE,IAAI,MAAM;UACnB;AACN,UAAO,EAAE;;EAEX,MAAM,QAAQ,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,GACjE,OACD,EAAE;EACN,MAAM,WAAW,OAAO,MAAM,aAAa,YAAY,MAAM,SAAS,MAAM,GACxE,MAAM,SAAS,MAAM,GACrB,KAAA;EACJ,MAAM,YAAY,OAAO,MAAM,WAAW,WAAW,MAAM,OAAO,MAAM,GAAG;EAC3E,MAAM,SACJ,cAAc,YAAY,cAAc,YAAY,cAAc,SAAS,YAAY;AAEzF,MAAI;GACF,MAAM,EAAE,kCAAkC,MAAM,OAC9C;GAEF,MAAM,SAAS,MAAM,8BAA8B;IAAE;IAAQ;IAAU,CAAC;AACxE,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS;IAAQ,CAAC;WACrC,GAAG;GACV,MAAM,UAAU,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE;AAC1D,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAAS,EAAE,IAAI;;GAEnD;AAKF,eAAc,KAAK,gCAAgC,2BAA2B,OAAO,MAAM;EACzF,IAAI;AACJ,MAAI;AACF,UAAO,MAAM,EAAE,IAAI,MAAM;UACnB;AACN,UAAO,EAAE;;EAEX,MAAM,QAAQ,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,GACjE,OACD,EAAE;EACN,MAAM,OACJ,OAAO,MAAM,SAAS,YAAY,MAAM,QAAQ,QAAQ,MAAM,QAAQ,QAClE,KAAK,MAAM,MAAM,KAAK,GACtB;EACN,MAAM,UAAU,OAAO,MAAM,SAAS,YAAY,MAAM,KAAK,MAAM,GAAG,MAAM,KAAK,MAAM,GAAG;AAC1F,MAAI,CAAC,eAAe,QAAQ,CAC1B,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAA0C,EAAE,IAAI;AAGpF,MAAI;AACF,OAAI,0BAA0B,sBAAsB,SAAS,WAAW,sBAAsB,SAAS,OAAO;AAC5G,UAAM,sBAAsB,SAAS;AACrC,4BAAwB;;AAE1B,OAAI,CAAC,uBAAuB;IAC1B,MAAM,EAAE,kCAAkC,MAAM,OAC9C;IAEF,MAAM,EAAE,YAAY,MAAM,8BAA8B;KAAE,MAAM;KAAS;KAAM,CAAC;AAChF,4BAAwB;KAAE;KAAS,MAAM;KAAS;KAAM;;AAE1D,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS;KAAE,SAAS;KAAM,MAAM;KAAS;KAAM;IAAE,CAAC;WACrE,GAAG;AACV,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE;IAAE,EAAE,IAAI;;GAEtF;AAEF,eAAc,KAAK,+BAA+B,2BAA2B,OAAO,MAAM;AACxF,MAAI;GACF,MAAM,EAAE,mBAAmB,MAAM,gCAAgC,QAAQ;AACzE,UAAO,EAAE,KAAK;IACZ,IAAI;IACJ,SAAS;KAAE,SAAS;KAAO;KAAgB;IAC5C,CAAC;WACK,GAAG;AACV,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE;IAAE,EAAE,IAAI;;GAEtF;AAEF,eAAc,KAAK,qCAAqC,2BAA2B,OAAO,MAAM;AAC9F,MAAI;GACF,MAAM,EAAE,gCAAgC,MAAM,OAC5C;GAEF,MAAM,WAAW,6BAA6B;AAC9C,OAAI,CAAC,UAAU,aAAa,CAC1B,QAAO,EAAE,KAAK;IACZ,IAAI;IACJ,SAAS;KAAE,WAAW;KAAO,qBAAqB;KAAM;IACzD,CAAC;AAEJ,YAAS,kBAAkB;AAC3B,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,WAAW,OAAO;IAAE,CAAC;WACnD,GAAG;AACV,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE;IAAE,EAAE,IAAI;;GAEtF;AAGF,eAAc,IAAI,kCAAkC,OAAO,MAAM;AAC/D,MAAI;GACF,MAAM,EAAE,6BAA6B,MAAM,OAAO;GAClD,MAAM,UAAU,MAAM,0BAA0B;AAChD,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM;IAAS,CAAC;WAC7B,GAAG;AACV,UAAO,EAAE,KACP;IAAE,IAAI;IAAO,OAAO,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE;IAAE,EAChE,IACD;;GAEH;AAGF,eAAc,IAAI,oCAAoC,OAAO,MAAM;EACjE,MAAM,cAAc,EAAE,IAAI,MAAM,WAAW;EAC3C,MAAM,gBAAgB,EAAE,IAAI,MAAM,aAAa;AAC/C,MAAI;GACF,MAAM,EAAE,uBAAuB,MAAM,OAAO;GAC5C,MAAM,SAAS,MAAM,mBAAmB;IACtC,UAAU,eAAe,YAAY,MAAM,GAAG,YAAY,MAAM,GAAG,KAAA;IACnE,YAAY,iBAAiB,cAAc,MAAM,GAAG,cAAc,MAAM,GAAG,KAAA;IAC5E,CAAC;AACF,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS;IAAQ,CAAC;WACrC,GAAG;GACV,MAAM,UAAU,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE;AAC1D,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAAS,EAAE,IAAI;;GAEnD;AAGF,eAAc,IAAI,oCAAoC,OAAO,MAAM;AACjE,MAAI;GACF,MAAM,EAAE,wCAAwC,MAAM,OAAO;GAC7D,MAAM,EAAE,6BAA6B,MAAM,OAAO;GAElD,MAAM,SAAS,MAAM,yBADN,oCAAoC,QAAQ,cACP,CAAC;AACrD,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS;IAAQ,CAAC;WACrC,GAAG;GACV,MAAM,UAAU,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE;AAC1D,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAAS,EAAE,IAAI;;GAEnD;AAGF,eAAc,KAAK,oCAAoC,2BAA2B,OAAO,MAAM;AAC7F,MAAI;GACF,MAAM,EAAE,wCAAwC,MAAM,OAAO;GAC7D,MAAM,EAAE,uBAAuB,MAAM,OAAO;GAC5C,MAAM,SAAS,oCAAoC,QAAQ,cAAwB;GACnF,MAAM,SAAS,MAAM,mBAAmB;IACtC,GAAG;IACH,uBAAuB;IACxB,CAAC;AACF,UAAO,EAAE,KAAK;IACZ,IAAI;IACJ,SAAS;KACP,SAAS;KACT,QAAQ,OAAO;KACf,MAAM,OAAO;KACb,KAAK,OAAO;KACZ,aAAa,OAAO;KACpB,kBAAkB,OAAO,qBAAqB;KAC/C;IACF,CAAC;WACK,GAAG;GACV,MAAM,UAAU,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE;AAC1D,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAAS,EAAE,IAAI;;GAEnD;AAGF,eAAc,KAAK,yBAAyB,2BAA2B,OAAO,MAAM;EAClF,IAAI;AACJ,MAAI;AACF,UAAO,MAAM,EAAE,IAAI,MAAM;UACnB;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAAqB,EAAE,IAAI;;EAE/D,MAAM,QAAQ,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,GACjE,OACD,EAAE;EACN,MAAM,SAAS,OAAO,MAAM,WAAW,WAAW,MAAM,OAAO,MAAM,GAAG;AACxE,MAAI,CAAC,OAAQ,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAsB,EAAE,IAAI;AAG3E,MAAI,CADa,wBAAwB,OAC5B,CACX,QAAO,EAAE,KACP;GAAE,IAAI;GAAO,OAAO;GAA0E,EAC9F,IACD;EAEH,IAAI;AACJ,MAAI;AACF,cAAW,IAAI,IAAI,OAAO;AAC1B,YAAS,WAAW,SAAS,aAAa,SAAS,WAAW;AAC9D,YAAS,WAAW;AACpB,YAAS,SAAS;AAClB,YAAS,OAAO;WACT,GAAG;AACV,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,QAAQ,EAAE,UAAU;IAAkB,EAAE,IAAI;;AAE7F,MAAI;GACF,MAAM,MAAM,MAAM,MAAM,SAAS,UAAU,EAAE,EAAE,QAAQ,YAAY,QAAQ,IAAK,EAAE,CAAC;AACnF,OAAI,CAAC,IAAI,GACP,QAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS;KAAE,WAAW;KAAO,QAAQ,IAAI;KAAQ;IAAE,CAAC;GAEhF,MAAM,OAAQ,MAAM,IAAI,MAAM;AAC9B,UAAO,EAAE,KAAK;IACZ,IAAI;IACJ,SAAS;KACP,WAAW;KACX,SAAS,KAAK,WAAW;KACzB,iBAAiB,KAAK,uBAAuB;KAC7C,sBAAsB,KAAK,wBAAwB;KACpD;IACF,CAAC;WACK,GAAG;GACV,MAAM,UAAU,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE;AAC1D,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS;KAAE,WAAW;KAAO,OAAO;KAAS;IAAE,CAAC;;GAE5E;AAGF,eAAc,KAAK,2BAA2B,2BAA2B,OAAO,MAAM;EACpF,IAAI;AACJ,MAAI;AACF,UAAO,MAAM,EAAE,IAAI,MAAM;UACnB;AACN,UAAO,EAAE;;EAEX,MAAM,QAAQ,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,GACjE,OACD,EAAE;EACN,MAAM,iBACJ,OAAO,MAAM,mBAAmB,YAAY,MAAM,eAAe,MAAM,GACnE,MAAM,eAAe,MAAM,GAC3B,KAAA;AACN,MAAI;GACF,MAAM,EAAE,yBAAyB,MAAM,OAAO;GAC9C,MAAM,SAAS,MAAM,qBAAqB,EAAE,gBAAgB,CAAC;AAC7D,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS;IAAQ,CAAC;WACrC,GAAG;GACV,MAAM,UAAU,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE;AAC1D,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAAS,EAAE,IAAI;;GAEnD;AAEF,eAAc,KAAK,yBAAyB,2BAA2B,OAAO,MAAM;EAClF,IAAI;AACJ,MAAI;AACF,UAAO,MAAM,EAAE,IAAI,MAAM;UACnB;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAAqB,EAAE,IAAI;;EAE/D,MAAM,QAAQ,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,GACjE,OACD,EAAE;EACN,MAAM,OAAO,OAAO,MAAM,SAAS,YAAY,OAAO,UAAU,MAAM,KAAK,GAAG,MAAM,OAAO;AAC3F,MAAI,CAAC,OAAO,SAAS,KAAK,IAAI,OAAO,QAAQ,OAAO,MAClD,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAA4C,EAAE,IAAI;EAEtF,MAAM,EAAE,uBAAuB,MAAM,OAAO;EAC5C,MAAM,UAAU,MAAM,mBAAmB,KAAK;AAC9C,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,SAAS;GAAE,CAAC;GACjD;AAEF,eAAc,IAAI,8BAA8B,OAAO,MAAM;EAC3D,MAAM,EAAE,0BAA0B,MAAM,OAAO;AAC/C,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,WAAW,uBAAuB,EAAE;GAAE,CAAC;GAC5E;AAGF,eAAc,KAAK,sCAAsC,2BAA2B,OAAO,MAAM;EAC/F,IAAI;AACJ,MAAI;AACF,UAAO,MAAM,EAAE,IAAI,MAAM;UACnB;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAAqB,EAAE,IAAI;;EAE/D,MAAM,QAAQ,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,GACjE,OACD,EAAE;EACN,MAAM,WAAW,MAAM;EAIvB,IAAI,SAHc,OAAO,MAAM,WAAW,WAAW,MAAM,OAAO,MAAM,GAAG;AAI3E,MAAI,WAAW,SAAS,WAAW,eACjC,UAAS;AAEX,MAAI,CAAC;OACC,aAAa,cAAe,UAAS,QAAQ,IAAI,uBAAuB;YACnE,aAAa,cAAe,UAAS,QAAQ,IAAI,uBAAuB;;AAEnF,MAAI,CAAC,OACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;IAAE,WAAW;IAAO,OAAO;IAAyB;GAAE,CAAC;AAG5F,MAAI;AACF,OAAI,aAAa,eAAe;IAC9B,MAAM,MAAM,MAAM,MAAM,2CAA2C;KACjE,SAAS,EAAE,gBAAgB,QAAQ;KACnC,QAAQ,YAAY,QAAQ,IAAK;KAClC,CAAC;AACF,QAAI,CAAC,IAAI,GACP,QAAO,EAAE,KAAK;KACZ,IAAI;KACJ,SAAS;MAAE,WAAW;MAAO,QAAQ,IAAI;MAAQ,OAAO,MAAM,IAAI,MAAM,CAAC,YAAY,GAAG;MAAE;KAC3F,CAAC;IAEJ,MAAM,OAAQ,MAAM,IAAI,MAAM,CAAC,YAAY,KAAK;IAChD,MAAM,WAAW,MAAM,QAAQ,KAAK,GAAG,OAAO,MAAM,QAAS,MAA+B,KAAK,GAAI,KAA6B,OAAO,EAAE;AAC3I,WAAO,EAAE,KAAK;KAAE,IAAI;KAAM,SAAS;MAAE,WAAW;MAAM,cAAc,SAAS;MAAQ;KAAE,CAAC;;AAE1F,OAAI,aAAa,eAAe;IAC9B,MAAM,MAAM,MAAM,MAAM,+CAA+C;KACrE,SAAS,EAAE,eAAe,UAAU,UAAU;KAC9C,QAAQ,YAAY,QAAQ,IAAK;KAClC,CAAC;AACF,QAAI,CAAC,IAAI,GACP,QAAO,EAAE,KAAK;KACZ,IAAI;KACJ,SAAS;MAAE,WAAW;MAAO,QAAQ,IAAI;MAAQ,OAAO,MAAM,IAAI,MAAM,CAAC,YAAY,GAAG;MAAE;KAC3F,CAAC;AAEJ,WAAO,EAAE,KAAK;KAAE,IAAI;KAAM,SAAS,EAAE,WAAW,MAAM;KAAE,CAAC;;AAE3D,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAA+C,EAAE,IAAI;WAChF,GAAG;GACV,MAAM,UAAU,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE;AAC1D,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS;KAAE,WAAW;KAAO,OAAO;KAAS;IAAE,CAAC;;GAE5E;AAEF,eAAc,KAAK,mCAAmC,2BAA2B,OAAO,MAAM;AAC5F,MAAI;GACF,MAAM,EAAE,8BAA8B,MAAM,OAAO;GACnD,MAAM,UAAU,MAAM,2BAA2B;AACjD,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM;IAAS,CAAC;WAC7B,GAAG;GACV,MAAM,UAAU,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE;AAC1D,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,WAAW;IAAyC,EAAE,IAAI;;GAE9F;AAEF,eAAc,KAAK,qCAAqC,2BAA2B,OAAO,MAAM;EAC9F,IAAI;AACJ,MAAI;AACF,UAAO,MAAM,EAAE,IAAI,MAAM;UACnB;AACN,UAAO,EAAE;;EAEX,MAAM,QAAQ,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,GACjE,OACD,EAAE;EACN,MAAM,WAAW,OAAO,MAAM,aAAa,YAAY,MAAM,SAAS,MAAM,GACxE,MAAM,SAAS,MAAM,GACrB,KAAA;EACJ,MAAM,aAAa,OAAO,MAAM,eAAe,YAAY,MAAM,WAAW,MAAM,GAC9E,MAAM,WAAW,MAAM,GACvB,KAAA;AAEJ,MAAI;GACF,MAAM,EAAE,wBAAwB,MAAM,OAAO;GAC7C,MAAM,SAAS,MAAM,oBAAoB;IAAE;IAAU;IAAY,CAAC;AAClE,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS;IAAQ,CAAC;WACrC,GAAG;GACV,MAAM,UAAU,aAAa,QAAQ,EAAE,UAAU,OAAO,EAAE;AAC1D,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAAS,EAAE,IAAI;;GAEnD"}

package/dist/src/gateway/hono/routes/capabilities.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"capabilities.js","names":[],"sources":["../../../../../src/gateway/hono/routes/capabilities.ts"],"sourcesContent":["import { Hono } from 'hono';\n\nimport type { Config } from '../../../config/schema.js';\nimport type { ConnectorInstallInput } from '../../../connectors/types.js';\nimport {\n  getStoreConnectorInstallPlan,\n  installStoreConnector,\n  listStoreConnectors,\n} from '../../../capabilities/store-connector.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\n\nfunction errorMessage(error: unknown): string {\n  return error instanceof Error ? error.message : String(error);\n}\n\nfunction optionalVersion(body: unknown): string | undefined {\n  if (!body || typeof body !== 'object' || Array.isArray(body)) return undefined;\n  const value = (body as Record<string, unknown>).version;\n  return typeof value === 'string' && value.trim() ? value.trim() : undefined;\n}\n\nexport function registerCapabilityRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  const { service, strictRateLimitMiddleware } = deps;\n\n  authenticated.get('/api/capabilities/connectors', async (c) => {\n    try {\n      const page = Number(c.req.query('page') ?? '1');\n      const pageSize = Number(c.req.query('pageSize') ?? '24');\n      const result = await listStoreConnectors(service.currentConfig as Config, {\n        q: c.req.query('q'),\n        page: Number.isFinite(page) ? Math.max(1, page) : 1,\n        pageSize: Number.isFinite(pageSize) ? Math.min(50, Math.max(1, pageSize)) : 24,\n        sort: c.req.query('sort') === 'newest' ? 'newest' : 'downloads',\n        category: c.req.query('category'),\n      });\n      return c.json({ ok: true, payload: result });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 502);\n    }\n  });\n\n  authenticated.post('/api/capabilities/connectors/:name/install-plan', strictRateLimitMiddleware, async (c) => {\n    const body = await c.req.json().catch(() => ({}));\n    try {\n      const plan = await getStoreConnectorInstallPlan(\n        service.currentConfig as Config,\n        c.req.param('name'),\n        optionalVersion(body),\n      );\n      return c.json({ ok: true, payload: { plan } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.post('/api/capabilities/connectors/:name/install', strictRateLimitMiddleware, async (c) => {\n    const body = await c.req.json().catch(() => ({}));\n    const input: ConnectorInstallInput = body && typeof body === 'object' && !Array.isArray(body)\n      ? body as ConnectorInstallInput\n      : {};\n    try {\n      const config = service.currentConfig as Config;\n      const { instance, plan } = await installStoreConnector(\n        config,\n        c.req.param('name'),\n        input,\n        optionalVersion(body),\n      );\n      const saved = await service.saveConfig(config);\n      if (!saved.saved) {\n        return c.json({ ok: false, error: saved.error ?? 'Failed to save connector configuration.' }, 500);\n      }\n      return c.json({ ok: true, payload: { instance, plan } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n}\n"],"mappings":";;AAWA,SAAS,aAAa,OAAwB;AAC5C,QAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;;AAG/D,SAAS,gBAAgB,MAAmC;AAC1D,KAAI,CAAC,QAAQ,OAAO,SAAS,YAAY,MAAM,QAAQ,KAAK,CAAE,QAAO,KAAA;CACrE,MAAM,QAAS,KAAiC;AAChD,QAAO,OAAO,UAAU,YAAY,MAAM,MAAM,GAAG,MAAM,MAAM,GAAG,KAAA;;AAGpE,SAAgB,yBAAyB,eAAqB,MAAoC;CAChG,MAAM,EAAE,SAAS,8BAA8B;AAE/C,eAAc,IAAI,gCAAgC,OAAO,MAAM;AAC7D,MAAI;GACF,MAAM,OAAO,OAAO,EAAE,IAAI,MAAM,OAAO,IAAI,IAAI;GAC/C,MAAM,WAAW,OAAO,EAAE,IAAI,MAAM,WAAW,IAAI,KAAK;GACxD,MAAM,SAAS,MAAM,oBAAoB,QAAQ,eAAyB;IACxE,GAAG,EAAE,IAAI,MAAM,IAAI;IACnB,MAAM,OAAO,SAAS,KAAK,GAAG,KAAK,IAAI,GAAG,KAAK,GAAG;IAClD,UAAU,OAAO,SAAS,SAAS,GAAG,KAAK,IAAI,IAAI,KAAK,IAAI,GAAG,SAAS,CAAC,GAAG;IAC5E,MAAM,EAAE,IAAI,MAAM,OAAO,KAAK,WAAW,WAAW;IACpD,UAAU,EAAE,IAAI,MAAM,WAAW;IAClC,CAAC;AACF,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS;IAAQ,CAAC;WACrC,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,KAAK,mDAAmD,2BAA2B,OAAO,MAAM;EAC5G,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;AACjD,MAAI;GACF,MAAM,OAAO,MAAM,6BACjB,QAAQ,eACR,EAAE,IAAI,MAAM,OAAO,EACnB,gBAAgB,KAAK,CACtB;AACD,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,MAAM;IAAE,CAAC;WACvC,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,KAAK,8CAA8C,2BAA2B,OAAO,MAAM;EACvG,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,QAA+B,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,GACzF,OACA,EAAE;AACN,MAAI;GACF,MAAM,SAAS,QAAQ;GACvB,MAAM,EAAE,UAAU,SAAS,MAAM,sBAC/B,QACA,EAAE,IAAI,MAAM,OAAO,EACnB,OACA,gBAAgB,KAAK,CACtB;GACD,MAAM,QAAQ,MAAM,QAAQ,WAAW,OAAO;AAC9C,OAAI,CAAC,MAAM,MACT,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,MAAM,SAAS;IAA2C,EAAE,IAAI;AAEpG,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS;KAAE;KAAU;KAAM;IAAE,CAAC;WACjD,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D"}

package/dist/src/gateway/hono/routes/capability-presets.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"capability-presets.js","names":[],"sources":["../../../../../src/gateway/hono/routes/capability-presets.ts"],"sourcesContent":["import type { Hono } from 'hono';\n\nimport { CapabilityPresetSchema } from '../../../agent-manifest/schema.js';\nimport type { Config } from '../../../config/schema.js';\nimport {\n  listCapabilityPresets,\n  prepareCreateCapabilityPreset,\n  prepareDeleteCapabilityPreset,\n  prepareUpdateCapabilityPreset,\n  type CreateCapabilityPresetBody,\n  type UpdateCapabilityPresetBody,\n} from '../../capability-presets-admin.js';\nimport { normalizeAgentId } from '../../../agent/agent-scope.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\n\nfunction parseJsonObject(raw: unknown): Record<string, unknown> | { error: string } {\n  if (raw === null || typeof raw !== 'object' || Array.isArray(raw)) {\n    return { error: 'body must be an object' };\n  }\n  return raw as Record<string, unknown>;\n}\n\nfunction isParseError(value: unknown): value is { error: string } {\n  return (\n    typeof value === 'object' &&\n    value !== null &&\n    'error' in value &&\n    typeof (value as { error: string }).error === 'string'\n  );\n}\n\nfunction parseCreateBody(raw: unknown): CreateCapabilityPresetBody | { error: string } {\n  const body = parseJsonObject(raw);\n  if (isParseError(body)) return body;\n  const out: CreateCapabilityPresetBody = {\n    id: typeof body.id === 'string' ? body.id : undefined,\n    name: typeof body.name === 'string' ? body.name : undefined,\n    description: typeof body.description === 'string' ? body.description : undefined,\n  };\n  if (Object.hasOwn(body, 'version')) out.version = Number(body.version);\n  if (Object.hasOwn(body, 'memory')) return { error: 'memory is not a capability preset field' };\n  for (const key of ['extends', 'models', 'tools', 'skills', 'workflows', 'boundaries', 'runtime', 'locks'] as const) {\n    if (!Object.hasOwn(body, key)) continue;\n    const parsed = CapabilityPresetSchema.pick({ [key]: true } as Record<typeof key, true>).safeParse({\n      [key]: body[key],\n    });\n    if (!parsed.success) {\n      return { error: `${key} ${parsed.error.issues[0]?.message ?? 'is invalid'}` };\n    }\n    out[key] = parsed.data[key] as never;\n  }\n  return out;\n}\n\nfunction parseUpdateBody(raw: unknown): UpdateCapabilityPresetBody | { error: string } {\n  const body = parseJsonObject(raw);\n  if (isParseError(body)) return body;\n  const out: UpdateCapabilityPresetBody = {};\n  if (Object.hasOwn(body, 'name')) out.name = String(body.name ?? '');\n  if (Object.hasOwn(body, 'description')) {\n    out.description = body.description === null ? null : String(body.description ?? '');\n  }\n  if (Object.hasOwn(body, 'version')) out.version = Number(body.version);\n  if (Object.hasOwn(body, 'memory')) return { error: 'memory is not a capability preset field' };\n  for (const key of ['extends', 'models', 'tools', 'skills', 'workflows', 'boundaries', 'runtime', 'locks'] as const) {\n    if (!Object.hasOwn(body, key)) continue;\n    if (body[key] === null) {\n      out[key] = null as never;\n      continue;\n    }\n    const parsed = CapabilityPresetSchema.pick({ [key]: true } as Record<typeof key, true>).safeParse({\n      [key]: body[key],\n    });\n    if (!parsed.success) {\n      return { error: `${key} ${parsed.error.issues[0]?.message ?? 'is invalid'}` };\n    }\n    out[key] = parsed.data[key] as never;\n  }\n  return out;\n}\n\nexport function registerCapabilityPresetsRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  const { service, strictRateLimitMiddleware } = deps;\n\n  authenticated.get('/api/capability-presets', async (c) => {\n    return c.json({ ok: true, payload: listCapabilityPresets(service.currentConfig as Config) });\n  });\n\n  authenticated.post('/api/capability-presets', strictRateLimitMiddleware, async (c) => {\n    let raw: unknown;\n    try {\n      raw = await c.req.json();\n    } catch {\n      return c.json({ ok: false, error: { message: 'Invalid JSON' } }, 400);\n    }\n    const body = parseCreateBody(raw);\n    if (isParseError(body)) {\n      return c.json({ ok: false, error: { message: body.error } }, 400);\n    }\n    const prep = prepareCreateCapabilityPreset(service.currentConfig as Config, body);\n    if (prep.ok === false) {\n      return c.json({ ok: false, error: { message: prep.error } }, prep.status ?? 400);\n    }\n    const save = await service.saveConfig(prep.data.nextConfig);\n    if (!save.saved) {\n      return c.json({ ok: false, error: { message: save.error ?? 'save failed' } }, 500);\n    }\n    return c.json({\n      ok: true,\n      payload: {\n        presetId: prep.data.presetId,\n        presets: listCapabilityPresets(service.currentConfig as Config),\n      },\n    });\n  });\n\n  authenticated.patch('/api/capability-presets/:id', strictRateLimitMiddleware, async (c) => {\n    const id = normalizeAgentId(c.req.param('id') ?? '');\n    let raw: unknown;\n    try {\n      raw = await c.req.json();\n    } catch {\n      return c.json({ ok: false, error: { message: 'Invalid JSON' } }, 400);\n    }\n    const body = parseUpdateBody(raw);\n    if (isParseError(body)) {\n      return c.json({ ok: false, error: { message: body.error } }, 400);\n    }\n    const prep = prepareUpdateCapabilityPreset(service.currentConfig as Config, id, body);\n    if (prep.ok === false) {\n      return c.json({ ok: false, error: { message: prep.error } }, prep.status ?? 400);\n    }\n    const save = await service.saveConfig(prep.data.nextConfig);\n    if (!save.saved) {\n      return c.json({ ok: false, error: { message: save.error ?? 'save failed' } }, 500);\n    }\n    return c.json({ ok: true, payload: listCapabilityPresets(service.currentConfig as Config) });\n  });\n\n  authenticated.delete('/api/capability-presets/:id', strictRateLimitMiddleware, async (c) => {\n    const id = normalizeAgentId(c.req.param('id') ?? '');\n    const prep = prepareDeleteCapabilityPreset(service.currentConfig as Config, id);\n    if (prep.ok === false) {\n      return c.json({ ok: false, error: { message: prep.error } }, prep.status ?? 400);\n    }\n    const save = await service.saveConfig(prep.data.nextConfig);\n    if (!save.saved) {\n      return c.json({ ok: false, error: { message: save.error ?? 'save failed' } }, 500);\n    }\n    return c.json({ ok: true, payload: listCapabilityPresets(service.currentConfig as Config) });\n  });\n}\n"],"mappings":";;;;aAE2E;kBAUV;AAGjE,SAAS,gBAAgB,KAA2D;AAClF,KAAI,QAAQ,QAAQ,OAAO,QAAQ,YAAY,MAAM,QAAQ,IAAI,CAC/D,QAAO,EAAE,OAAO,0BAA0B;AAE5C,QAAO;;AAGT,SAAS,aAAa,OAA4C;AAChE,QACE,OAAO,UAAU,YACjB,UAAU,QACV,WAAW,SACX,OAAQ,MAA4B,UAAU;;AAIlD,SAAS,gBAAgB,KAA8D;CACrF,MAAM,OAAO,gBAAgB,IAAI;AACjC,KAAI,aAAa,KAAK,CAAE,QAAO;CAC/B,MAAM,MAAkC;EACtC,IAAI,OAAO,KAAK,OAAO,WAAW,KAAK,KAAK,KAAA;EAC5C,MAAM,OAAO,KAAK,SAAS,WAAW,KAAK,OAAO,KAAA;EAClD,aAAa,OAAO,KAAK,gBAAgB,WAAW,KAAK,cAAc,KAAA;EACxE;AACD,KAAI,OAAO,OAAO,MAAM,UAAU,CAAE,KAAI,UAAU,OAAO,KAAK,QAAQ;AACtE,KAAI,OAAO,OAAO,MAAM,SAAS,CAAE,QAAO,EAAE,OAAO,2CAA2C;AAC9F,MAAK,MAAM,OAAO;EAAC;EAAW;EAAU;EAAS;EAAU;EAAa;EAAc;EAAW;EAAQ,EAAW;AAClH,MAAI,CAAC,OAAO,OAAO,MAAM,IAAI,CAAE;EAC/B,MAAM,SAAS,uBAAuB,KAAK,GAAG,MAAM,MAAM,CAA6B,CAAC,UAAU,GAC/F,MAAM,KAAK,MACb,CAAC;AACF,MAAI,CAAC,OAAO,QACV,QAAO,EAAE,OAAO,GAAG,IAAI,GAAG,OAAO,MAAM,OAAO,IAAI,WAAW,gBAAgB;AAE/E,MAAI,OAAO,OAAO,KAAK;;AAEzB,QAAO;;AAGT,SAAS,gBAAgB,KAA8D;CACrF,MAAM,OAAO,gBAAgB,IAAI;AACjC,KAAI,aAAa,KAAK,CAAE,QAAO;CAC/B,MAAM,MAAkC,EAAE;AAC1C,KAAI,OAAO,OAAO,MAAM,OAAO,CAAE,KAAI,OAAO,OAAO,KAAK,QAAQ,GAAG;AACnE,KAAI,OAAO,OAAO,MAAM,cAAc,CACpC,KAAI,cAAc,KAAK,gBAAgB,OAAO,OAAO,OAAO,KAAK,eAAe,GAAG;AAErF,KAAI,OAAO,OAAO,MAAM,UAAU,CAAE,KAAI,UAAU,OAAO,KAAK,QAAQ;AACtE,KAAI,OAAO,OAAO,MAAM,SAAS,CAAE,QAAO,EAAE,OAAO,2CAA2C;AAC9F,MAAK,MAAM,OAAO;EAAC;EAAW;EAAU;EAAS;EAAU;EAAa;EAAc;EAAW;EAAQ,EAAW;AAClH,MAAI,CAAC,OAAO,OAAO,MAAM,IAAI,CAAE;AAC/B,MAAI,KAAK,SAAS,MAAM;AACtB,OAAI,OAAO;AACX;;EAEF,MAAM,SAAS,uBAAuB,KAAK,GAAG,MAAM,MAAM,CAA6B,CAAC,UAAU,GAC/F,MAAM,KAAK,MACb,CAAC;AACF,MAAI,CAAC,OAAO,QACV,QAAO,EAAE,OAAO,GAAG,IAAI,GAAG,OAAO,MAAM,OAAO,IAAI,WAAW,gBAAgB;AAE/E,MAAI,OAAO,OAAO,KAAK;;AAEzB,QAAO;;AAGT,SAAgB,gCAAgC,eAAqB,MAAoC;CACvG,MAAM,EAAE,SAAS,8BAA8B;AAE/C,eAAc,IAAI,2BAA2B,OAAO,MAAM;AACxD,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,sBAAsB,QAAQ,cAAwB;GAAE,CAAC;GAC5F;AAEF,eAAc,KAAK,2BAA2B,2BAA2B,OAAO,MAAM;EACpF,IAAI;AACJ,MAAI;AACF,SAAM,MAAM,EAAE,IAAI,MAAM;UAClB;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS,gBAAgB;IAAE,EAAE,IAAI;;EAEvE,MAAM,OAAO,gBAAgB,IAAI;AACjC,MAAI,aAAa,KAAK,CACpB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,KAAK,OAAO;GAAE,EAAE,IAAI;EAEnE,MAAM,OAAO,8BAA8B,QAAQ,eAAyB,KAAK;AACjF,MAAI,KAAK,OAAO,MACd,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,KAAK,OAAO;GAAE,EAAE,KAAK,UAAU,IAAI;EAElF,MAAM,OAAO,MAAM,QAAQ,WAAW,KAAK,KAAK,WAAW;AAC3D,MAAI,CAAC,KAAK,MACR,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,KAAK,SAAS,eAAe;GAAE,EAAE,IAAI;AAEpF,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,UAAU,KAAK,KAAK;IACpB,SAAS,sBAAsB,QAAQ,cAAwB;IAChE;GACF,CAAC;GACF;AAEF,eAAc,MAAM,+BAA+B,2BAA2B,OAAO,MAAM;EACzF,MAAM,KAAK,iBAAiB,EAAE,IAAI,MAAM,KAAK,IAAI,GAAG;EACpD,IAAI;AACJ,MAAI;AACF,SAAM,MAAM,EAAE,IAAI,MAAM;UAClB;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS,gBAAgB;IAAE,EAAE,IAAI;;EAEvE,MAAM,OAAO,gBAAgB,IAAI;AACjC,MAAI,aAAa,KAAK,CACpB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,KAAK,OAAO;GAAE,EAAE,IAAI;EAEnE,MAAM,OAAO,8BAA8B,QAAQ,eAAyB,IAAI,KAAK;AACrF,MAAI,KAAK,OAAO,MACd,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,KAAK,OAAO;GAAE,EAAE,KAAK,UAAU,IAAI;EAElF,MAAM,OAAO,MAAM,QAAQ,WAAW,KAAK,KAAK,WAAW;AAC3D,MAAI,CAAC,KAAK,MACR,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,KAAK,SAAS,eAAe;GAAE,EAAE,IAAI;AAEpF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,sBAAsB,QAAQ,cAAwB;GAAE,CAAC;GAC5F;AAEF,eAAc,OAAO,+BAA+B,2BAA2B,OAAO,MAAM;EAC1F,MAAM,KAAK,iBAAiB,EAAE,IAAI,MAAM,KAAK,IAAI,GAAG;EACpD,MAAM,OAAO,8BAA8B,QAAQ,eAAyB,GAAG;AAC/E,MAAI,KAAK,OAAO,MACd,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,KAAK,OAAO;GAAE,EAAE,KAAK,UAAU,IAAI;EAElF,MAAM,OAAO,MAAM,QAAQ,WAAW,KAAK,KAAK,WAAW;AAC3D,MAAI,CAAC,KAAK,MACR,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,KAAK,SAAS,eAAe;GAAE,EAAE,IAAI;AAEpF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,sBAAsB,QAAQ,cAAwB;GAAE,CAAC;GAC5F"}

package/dist/src/gateway/hono/routes/channels.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"channels.js","names":[],"sources":["../../../../../src/gateway/hono/routes/channels.ts"],"sourcesContent":["import type { Hono } from 'hono';\n\nimport {\n  approveChannelPairing,\n  approveChannelPairingBySender,\n  dismissChannelPairingPending,\n  listChannelPairingState,\n  listChannelPairingSummary,\n  revokeChannelPairingPaired,\n} from '../../../channels/pairing/pairing-service.js';\nimport {\n  buildChannelCatalogForConfig,\n  buildChannelCatalogFromSnapshot,\n  getChannelSetupStatus,\n} from '../../../channels/catalog/channel-catalog-service.js';\nimport type { Config } from '../../../config/index.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\nimport type { ChannelRuntimeActionPayload } from '../../../channels/plugins/types.adapters.js';\n\nfunction channelIdParam(raw: string | undefined): string {\n  return (raw ?? '').trim().toLowerCase();\n}\n\nfunction accountIdFromQuery(raw: string | undefined): string {\n  return raw?.trim() || 'default';\n}\n\nfunction actionPayloadChangedConfig(payload: ChannelRuntimeActionPayload | undefined): boolean {\n  return Boolean(payload && 'configChanged' in payload && payload.configChanged === true);\n}\n\nfunction localeFromRequest(c: { req: { query(name: string): string | undefined; header(name: string): string | undefined } }): string | undefined {\n  return c.req.query('locale') ?? c.req.header('X-XOPC-Locale') ?? c.req.header('Accept-Language')?.split(',')[0];\n}\n\nexport function registerChannelRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  const { service, strictRateLimitMiddleware } = deps;\n  const channelRateLimitMiddleware = deps.channelRateLimitMiddleware ?? strictRateLimitMiddleware;\n\n  authenticated.get('/api/channels/catalog', (c) => {\n    const snapshot = service.getExtensionLoader()?.getManifestSnapshot();\n    const locale = localeFromRequest(c);\n    const catalog = snapshot\n      ? buildChannelCatalogFromSnapshot(snapshot, { locale })\n      : buildChannelCatalogForConfig(service.currentConfig, { locale });\n    const running = new Set(service.getRunningChannelIds());\n    return c.json({\n      ok: true,\n      payload: {\n        channels: catalog.entries.map((entry) => {\n          const setupStatus = getChannelSetupStatus(service.currentConfig, entry.id, entry);\n          return {\n            ...entry,\n            enabled: setupStatus.enabled,\n            configured: setupStatus.ready,\n            setupStatus,\n            runtime: running.has(entry.id) ? 'loaded' : 'missing',\n          };\n        }),\n      },\n    });\n  });\n\n  authenticated.get('/api/channels/status', (c) => {\n    const channels = service.getChannelsStatus();\n    return c.json({ ok: true, payload: { channels } });\n  });\n\n  authenticated.get('/api/channels/meta', (c) => {\n    const channels = service.getChannelsHubMeta();\n    return c.json({ ok: true, payload: { channels } });\n  });\n\n  authenticated.get('/api/channels/:channelId/config', (c) => {\n    const channel = channelIdParam(c.req.param('channelId'));\n    if (!channel) {\n      return c.json({ ok: false, error: { code: 'BAD_REQUEST', message: 'Missing channel id' } }, 400);\n    }\n    const plugin = service.getChannelRuntimePlugin(channel);\n    const value =\n      plugin?.configSurface?.buildConfigSurface(service.currentConfig) ??\n      (service.currentConfig.channels as Record<string, unknown> | undefined)?.[channel] ??\n      {};\n    return c.json({ ok: true, payload: { config: value } });\n  });\n\n  authenticated.post('/api/channels/:channelId/actions/:actionId', channelRateLimitMiddleware, async (c) => {\n    const channel = channelIdParam(c.req.param('channelId'));\n    const action = c.req.param('actionId')?.trim() ?? '';\n    if (!channel || !action) {\n      return c.json({ ok: false, error: { code: 'BAD_REQUEST', message: 'Missing channel/action id' } }, 400);\n    }\n    const plugin = await service.ensureChannelRuntimePlugin(channel);\n    if (!plugin) {\n      return c.json({ ok: false, error: { code: 'CHANNEL_RUNTIME_MISSING', message: 'Channel runtime is not loaded' } }, 404);\n    }\n    const body = await c.req.json().catch(() => ({}));\n    const accountId =\n      body && typeof body === 'object' && typeof (body as { accountId?: unknown }).accountId === 'string'\n        ? (body as { accountId: string }).accountId.trim()\n        : undefined;\n    const input = body && typeof body === 'object' ? (body as { input?: unknown }).input : undefined;\n\n    if (action === 'doctor.run' && plugin.doctor) {\n      const checks = await plugin.doctor.check({ cfg: service.currentConfig, locale: localeFromRequest(c) });\n      return c.json({ ok: true, payload: { type: 'diagnostics', checks } });\n    }\n\n    if (plugin.runtimeActions) {\n      const result = await plugin.runtimeActions.runAction({\n        cfg: service.currentConfig,\n        locale: localeFromRequest(c),\n        actionId: action,\n        accountId,\n        input,\n      });\n      if (!result.ok) {\n        return c.json({ ok: false, error: { code: 'CHANNEL_ACTION_FAILED', message: result.message ?? 'Channel action failed' } }, 400);\n      }\n      if (result.nextConfig) {\n        const saved = await service.saveConfig(result.nextConfig);\n        if (!saved.saved) {\n          return c.json({ ok: false, error: { code: 'CHANNEL_ACTION_FAILED', message: saved.error ?? 'Failed to save channel config' } }, 500);\n        }\n      } else if (actionPayloadChangedConfig(result.payload)) {\n        await service.reloadConfig();\n      }\n      return c.json({ ok: true, payload: result.payload ?? {} });\n    }\n\n    return c.json(\n      {\n        ok: false,\n        error: {\n          code: 'ACTION_NOT_IMPLEMENTED',\n          message: `Channel action \"${channel}.${action}\" is not implemented by the runtime adapter.`,\n        },\n      },\n      501,\n    );\n  });\n\n  authenticated.get('/api/channels/:channelId/pairing', (c) => {\n    const channel = channelIdParam(c.req.param('channelId'));\n    if (!channel) {\n      return c.json({ ok: false, error: { code: 'BAD_REQUEST', message: 'Missing channel id' } }, 400);\n    }\n    const accountId = accountIdFromQuery(c.req.query('account'));\n    const config = service.currentConfig as Config | undefined;\n    const state = listChannelPairingState({ channel, accountId, config });\n    return c.json({ ok: true, payload: state });\n  });\n\n  authenticated.get('/api/channels/pairing/summary', (c) => {\n    const config = service.currentConfig as Config | undefined;\n    const summary = listChannelPairingSummary(config);\n    return c.json({ ok: true, payload: { summary } });\n  });\n\n  authenticated.post('/api/channels/:channelId/pairing/approve', channelRateLimitMiddleware, async (c) => {\n    const channel = channelIdParam(c.req.param('channelId'));\n    const body = await c.req.json().catch(() => ({}));\n    const accountId =\n      body && typeof body === 'object' && typeof (body as { accountId?: unknown }).accountId === 'string'\n        ? (body as { accountId: string }).accountId.trim()\n        : 'default';\n    const code =\n      body && typeof body === 'object' && typeof (body as { code?: unknown }).code === 'string'\n        ? (body as { code: string }).code.trim()\n        : '';\n    const result = approveChannelPairing({ channel, accountId, code });\n    if (result.ok === false) {\n      return c.json({ ok: false, error: { code: 'PAIRING_INVALID', message: result.error } }, 400);\n    }\n    return c.json({ ok: true, payload: { senderId: result.senderId, alreadyPaired: result.alreadyPaired } });\n  });\n\n  authenticated.post('/api/channels/:channelId/pairing/approve-sender', channelRateLimitMiddleware, async (c) => {\n    const channel = channelIdParam(c.req.param('channelId'));\n    const body = await c.req.json().catch(() => ({}));\n    const accountId =\n      body && typeof body === 'object' && typeof (body as { accountId?: unknown }).accountId === 'string'\n        ? (body as { accountId: string }).accountId.trim()\n        : 'default';\n    const senderId =\n      body && typeof body === 'object' && typeof (body as { senderId?: unknown }).senderId === 'string'\n        ? (body as { senderId: string }).senderId.trim()\n        : '';\n    const result = approveChannelPairingBySender({ channel, accountId, senderId });\n    if (result.ok === false) {\n      return c.json({ ok: false, error: { code: 'PAIRING_INVALID', message: result.error } }, 400);\n    }\n    return c.json({ ok: true, payload: { senderId: result.senderId, alreadyPaired: result.alreadyPaired } });\n  });\n\n  authenticated.delete('/api/channels/:channelId/pairing/paired', channelRateLimitMiddleware, async (c) => {\n    const channel = channelIdParam(c.req.param('channelId'));\n    const body = await c.req.json().catch(() => ({}));\n    const accountId =\n      body && typeof body === 'object' && typeof (body as { accountId?: unknown }).accountId === 'string'\n        ? (body as { accountId: string }).accountId.trim()\n        : 'default';\n    const senderId =\n      body && typeof body === 'object' && typeof (body as { senderId?: unknown }).senderId === 'string'\n        ? (body as { senderId: string }).senderId.trim()\n        : '';\n    const result = revokeChannelPairingPaired({ channel, accountId, senderId });\n    if (result.ok === false) {\n      return c.json({ ok: false, error: { code: 'BAD_REQUEST', message: result.error } }, 400);\n    }\n    return c.json({ ok: true, payload: { changed: result.changed } });\n  });\n\n  authenticated.delete('/api/channels/:channelId/pairing/pending', channelRateLimitMiddleware, async (c) => {\n    const channel = channelIdParam(c.req.param('channelId'));\n    const body = await c.req.json().catch(() => ({}));\n    const accountId =\n      body && typeof body === 'object' && typeof (body as { accountId?: unknown }).accountId === 'string'\n        ? (body as { accountId: string }).accountId.trim()\n        : 'default';\n    const senderId =\n      body && typeof body === 'object' && typeof (body as { senderId?: unknown }).senderId === 'string'\n        ? (body as { senderId: string }).senderId.trim()\n        : '';\n    const result = dismissChannelPairingPending({ channel, accountId, senderId });\n    if (result.ok === false) {\n      return c.json({ ok: false, error: { code: 'PAIRING_INVALID', message: result.error } }, 400);\n    }\n    return c.json({ ok: true, payload: { senderId: result.senderId } });\n  });\n\n  authenticated.get('/api/channels/:channelId/doctor', async (c) => {\n    const channel = channelIdParam(c.req.param('channelId'));\n    const plugin = service.getChannelRuntimePlugin(channel);\n    if (!plugin?.doctor) {\n      return c.json({ ok: true, payload: { checks: [] } });\n    }\n    const checks = await plugin.doctor.check({ cfg: service.currentConfig });\n    return c.json({ ok: true, payload: { checks } });\n  });\n\n  authenticated.post('/api/channels/:channelId/restart', channelRateLimitMiddleware, async (c) => {\n    const channel = channelIdParam(c.req.param('channelId'));\n    await service.restartChannel(channel);\n    return c.json({ ok: true, payload: { restarted: true } });\n  });\n}\n"],"mappings":";;;8BAc8D;AAK9D,SAAS,eAAe,KAAiC;AACvD,SAAQ,OAAO,IAAI,MAAM,CAAC,aAAa;;AAGzC,SAAS,mBAAmB,KAAiC;AAC3D,QAAO,KAAK,MAAM,IAAI;;AAGxB,SAAS,2BAA2B,SAA2D;AAC7F,QAAO,QAAQ,WAAW,mBAAmB,WAAW,QAAQ,kBAAkB,KAAK;;AAGzF,SAAS,kBAAkB,GAAuH;AAChJ,QAAO,EAAE,IAAI,MAAM,SAAS,IAAI,EAAE,IAAI,OAAO,gBAAgB,IAAI,EAAE,IAAI,OAAO,kBAAkB,EAAE,MAAM,IAAI,CAAC;;AAG/G,SAAgB,sBAAsB,eAAqB,MAAoC;CAC7F,MAAM,EAAE,SAAS,8BAA8B;CAC/C,MAAM,6BAA6B,KAAK,8BAA8B;AAEtE,eAAc,IAAI,0BAA0B,MAAM;EAChD,MAAM,WAAW,QAAQ,oBAAoB,EAAE,qBAAqB;EACpE,MAAM,SAAS,kBAAkB,EAAE;EACnC,MAAM,UAAU,WACZ,gCAAgC,UAAU,EAAE,QAAQ,CAAC,GACrD,6BAA6B,QAAQ,eAAe,EAAE,QAAQ,CAAC;EACnE,MAAM,UAAU,IAAI,IAAI,QAAQ,sBAAsB,CAAC;AACvD,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS,EACP,UAAU,QAAQ,QAAQ,KAAK,UAAU;IACvC,MAAM,cAAc,sBAAsB,QAAQ,eAAe,MAAM,IAAI,MAAM;AACjF,WAAO;KACL,GAAG;KACH,SAAS,YAAY;KACrB,YAAY,YAAY;KACxB;KACA,SAAS,QAAQ,IAAI,MAAM,GAAG,GAAG,WAAW;KAC7C;KACD,EACH;GACF,CAAC;GACF;AAEF,eAAc,IAAI,yBAAyB,MAAM;EAC/C,MAAM,WAAW,QAAQ,mBAAmB;AAC5C,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,UAAU;GAAE,CAAC;GAClD;AAEF,eAAc,IAAI,uBAAuB,MAAM;EAC7C,MAAM,WAAW,QAAQ,oBAAoB;AAC7C,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,UAAU;GAAE,CAAC;GAClD;AAEF,eAAc,IAAI,oCAAoC,MAAM;EAC1D,MAAM,UAAU,eAAe,EAAE,IAAI,MAAM,YAAY,CAAC;AACxD,MAAI,CAAC,QACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;IAAE,MAAM;IAAe,SAAS;IAAsB;GAAE,EAAE,IAAI;EAGlG,MAAM,QADS,QAAQ,wBAAwB,QAEvC,EAAE,eAAe,mBAAmB,QAAQ,cAAc,IAC/D,QAAQ,cAAc,WAAmD,YAC1E,EAAE;AACJ,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,QAAQ,OAAO;GAAE,CAAC;GACvD;AAEF,eAAc,KAAK,8CAA8C,4BAA4B,OAAO,MAAM;EACxG,MAAM,UAAU,eAAe,EAAE,IAAI,MAAM,YAAY,CAAC;EACxD,MAAM,SAAS,EAAE,IAAI,MAAM,WAAW,EAAE,MAAM,IAAI;AAClD,MAAI,CAAC,WAAW,CAAC,OACf,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;IAAE,MAAM;IAAe,SAAS;IAA6B;GAAE,EAAE,IAAI;EAEzG,MAAM,SAAS,MAAM,QAAQ,2BAA2B,QAAQ;AAChE,MAAI,CAAC,OACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;IAAE,MAAM;IAA2B,SAAS;IAAiC;GAAE,EAAE,IAAI;EAEzH,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,YACJ,QAAQ,OAAO,SAAS,YAAY,OAAQ,KAAiC,cAAc,WACtF,KAA+B,UAAU,MAAM,GAChD,KAAA;EACN,MAAM,QAAQ,QAAQ,OAAO,SAAS,WAAY,KAA6B,QAAQ,KAAA;AAEvF,MAAI,WAAW,gBAAgB,OAAO,QAAQ;GAC5C,MAAM,SAAS,MAAM,OAAO,OAAO,MAAM;IAAE,KAAK,QAAQ;IAAe,QAAQ,kBAAkB,EAAE;IAAE,CAAC;AACtG,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS;KAAE,MAAM;KAAe;KAAQ;IAAE,CAAC;;AAGvE,MAAI,OAAO,gBAAgB;GACzB,MAAM,SAAS,MAAM,OAAO,eAAe,UAAU;IACnD,KAAK,QAAQ;IACb,QAAQ,kBAAkB,EAAE;IAC5B,UAAU;IACV;IACA;IACD,CAAC;AACF,OAAI,CAAC,OAAO,GACV,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;KAAE,MAAM;KAAyB,SAAS,OAAO,WAAW;KAAyB;IAAE,EAAE,IAAI;AAEjI,OAAI,OAAO,YAAY;IACrB,MAAM,QAAQ,MAAM,QAAQ,WAAW,OAAO,WAAW;AACzD,QAAI,CAAC,MAAM,MACT,QAAO,EAAE,KAAK;KAAE,IAAI;KAAO,OAAO;MAAE,MAAM;MAAyB,SAAS,MAAM,SAAS;MAAiC;KAAE,EAAE,IAAI;cAE7H,2BAA2B,OAAO,QAAQ,CACnD,OAAM,QAAQ,cAAc;AAE9B,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,OAAO,WAAW,EAAE;IAAE,CAAC;;AAG5D,SAAO,EAAE,KACP;GACE,IAAI;GACJ,OAAO;IACL,MAAM;IACN,SAAS,mBAAmB,QAAQ,GAAG,OAAO;IAC/C;GACF,EACD,IACD;GACD;AAEF,eAAc,IAAI,qCAAqC,MAAM;EAC3D,MAAM,UAAU,eAAe,EAAE,IAAI,MAAM,YAAY,CAAC;AACxD,MAAI,CAAC,QACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;IAAE,MAAM;IAAe,SAAS;IAAsB;GAAE,EAAE,IAAI;EAElG,MAAM,YAAY,mBAAmB,EAAE,IAAI,MAAM,UAAU,CAAC;EAC5D,MAAM,SAAS,QAAQ;EACvB,MAAM,QAAQ,wBAAwB;GAAE;GAAS;GAAW;GAAQ,CAAC;AACrE,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;GAAO,CAAC;GAC3C;AAEF,eAAc,IAAI,kCAAkC,MAAM;EACxD,MAAM,SAAS,QAAQ;EACvB,MAAM,UAAU,0BAA0B,OAAO;AACjD,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,SAAS;GAAE,CAAC;GACjD;AAEF,eAAc,KAAK,4CAA4C,4BAA4B,OAAO,MAAM;EACtG,MAAM,UAAU,eAAe,EAAE,IAAI,MAAM,YAAY,CAAC;EACxD,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EASjD,MAAM,SAAS,sBAAsB;GAAE;GAAS,WAP9C,QAAQ,OAAO,SAAS,YAAY,OAAQ,KAAiC,cAAc,WACtF,KAA+B,UAAU,MAAM,GAChD;GAKqD,MAHzD,QAAQ,OAAO,SAAS,YAAY,OAAQ,KAA4B,SAAS,WAC5E,KAA0B,KAAK,MAAM,GACtC;GAC2D,CAAC;AAClE,MAAI,OAAO,OAAO,MAChB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;IAAE,MAAM;IAAmB,SAAS,OAAO;IAAO;GAAE,EAAE,IAAI;AAE9F,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;IAAE,UAAU,OAAO;IAAU,eAAe,OAAO;IAAe;GAAE,CAAC;GACxG;AAEF,eAAc,KAAK,mDAAmD,4BAA4B,OAAO,MAAM;EAC7G,MAAM,UAAU,eAAe,EAAE,IAAI,MAAM,YAAY,CAAC;EACxD,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EASjD,MAAM,SAAS,8BAA8B;GAAE;GAAS,WAPtD,QAAQ,OAAO,SAAS,YAAY,OAAQ,KAAiC,cAAc,WACtF,KAA+B,UAAU,MAAM,GAChD;GAK6D,UAHjE,QAAQ,OAAO,SAAS,YAAY,OAAQ,KAAgC,aAAa,WACpF,KAA8B,SAAS,MAAM,GAC9C;GACuE,CAAC;AAC9E,MAAI,OAAO,OAAO,MAChB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;IAAE,MAAM;IAAmB,SAAS,OAAO;IAAO;GAAE,EAAE,IAAI;AAE9F,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;IAAE,UAAU,OAAO;IAAU,eAAe,OAAO;IAAe;GAAE,CAAC;GACxG;AAEF,eAAc,OAAO,2CAA2C,4BAA4B,OAAO,MAAM;EACvG,MAAM,UAAU,eAAe,EAAE,IAAI,MAAM,YAAY,CAAC;EACxD,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EASjD,MAAM,SAAS,2BAA2B;GAAE;GAAS,WAPnD,QAAQ,OAAO,SAAS,YAAY,OAAQ,KAAiC,cAAc,WACtF,KAA+B,UAAU,MAAM,GAChD;GAK0D,UAH9D,QAAQ,OAAO,SAAS,YAAY,OAAQ,KAAgC,aAAa,WACpF,KAA8B,SAAS,MAAM,GAC9C;GACoE,CAAC;AAC3E,MAAI,OAAO,OAAO,MAChB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;IAAE,MAAM;IAAe,SAAS,OAAO;IAAO;GAAE,EAAE,IAAI;AAE1F,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,SAAS,OAAO,SAAS;GAAE,CAAC;GACjE;AAEF,eAAc,OAAO,4CAA4C,4BAA4B,OAAO,MAAM;EACxG,MAAM,UAAU,eAAe,EAAE,IAAI,MAAM,YAAY,CAAC;EACxD,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EASjD,MAAM,SAAS,6BAA6B;GAAE;GAAS,WAPrD,QAAQ,OAAO,SAAS,YAAY,OAAQ,KAAiC,cAAc,WACtF,KAA+B,UAAU,MAAM,GAChD;GAK4D,UAHhE,QAAQ,OAAO,SAAS,YAAY,OAAQ,KAAgC,aAAa,WACpF,KAA8B,SAAS,MAAM,GAC9C;GACsE,CAAC;AAC7E,MAAI,OAAO,OAAO,MAChB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;IAAE,MAAM;IAAmB,SAAS,OAAO;IAAO;GAAE,EAAE,IAAI;AAE9F,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,UAAU,OAAO,UAAU;GAAE,CAAC;GACnE;AAEF,eAAc,IAAI,mCAAmC,OAAO,MAAM;EAChE,MAAM,UAAU,eAAe,EAAE,IAAI,MAAM,YAAY,CAAC;EACxD,MAAM,SAAS,QAAQ,wBAAwB,QAAQ;AACvD,MAAI,CAAC,QAAQ,OACX,QAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,QAAQ,EAAE,EAAE;GAAE,CAAC;EAEtD,MAAM,SAAS,MAAM,OAAO,OAAO,MAAM,EAAE,KAAK,QAAQ,eAAe,CAAC;AACxE,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,QAAQ;GAAE,CAAC;GAChD;AAEF,eAAc,KAAK,oCAAoC,4BAA4B,OAAO,MAAM;EAC9F,MAAM,UAAU,eAAe,EAAE,IAAI,MAAM,YAAY,CAAC;AACxD,QAAM,QAAQ,eAAe,QAAQ;AACrC,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,WAAW,MAAM;GAAE,CAAC;GACzD"}

package/dist/src/gateway/hono/routes/commands-skills.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"commands-skills.js","names":[],"sources":["../../../../../src/gateway/hono/routes/commands-skills.ts"],"sourcesContent":["import type { Hono } from 'hono';\n\nimport { commandRegistry } from '../../../chat-commands/index.js';\nimport { isRegisteredProvider } from '../../../agent/skills/skills-marketplace.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\nimport { effectiveWorkspacePathForSession } from '../../../session/session-workspace.js';\nimport { getProjectForSession } from '../../../projects/workspace.js';\nimport { buildReviewContext, resolveGitRoot } from '../../../review/review-git.js';\nimport {\n  isSkillInstallTarget,\n  type SkillInstallTarget,\n} from '../../../agent/skills/install-target.js';\n\nfunction parseMarketplaceProviderQuery(raw: string | undefined): string | undefined {\n  const v = raw?.trim().toLowerCase();\n  if (v && isRegisteredProvider(v)) return v;\n  return undefined;\n}\n\nfunction optionalTrimmedString(value: unknown): string | undefined {\n  return typeof value === 'string' && value.trim() ? value.trim() : undefined;\n}\n\nfunction optionalBoolean(value: unknown): boolean | undefined {\n  if (value === true || value === 'true' || value === '1') return true;\n  if (value === false || value === 'false' || value === '0') return false;\n  return undefined;\n}\n\nfunction optionalSkillInstallTarget(value: unknown): SkillInstallTarget | undefined {\n  if (value == null || value === '') return undefined;\n  return isSkillInstallTarget(value) ? value : undefined;\n}\n\nfunction skillHubInstallStatus(err: unknown): 400 | 409 | 502 {\n  const message = err instanceof Error ? err.message : String(err);\n  if (message.includes('already exists')) return 409;\n  if (\n    message.startsWith('HTTP ') ||\n    message.includes('fetching archive') ||\n    message.includes('git clone failed') ||\n    message.includes('Git operation failed')\n  ) {\n    return 502;\n  }\n  return 400;\n}\n\nexport function registerCommandsSkillsRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  const { service } = deps;\n\n  // ========== Chat slash commands (CommandRegistry) ==========\n\n  authenticated.get('/api/commands', (c) => {\n    const all = commandRegistry.list();\n    const commands = all\n      .filter((cmd) => cmd.scope.includes('global') || cmd.scope.includes('private'))\n      .map((cmd) => ({\n        id: cmd.id,\n        name: cmd.name,\n        aliases: cmd.aliases ?? [],\n        description: cmd.description,\n        category: cmd.category,\n        scope: cmd.scope,\n        acceptsArgs: cmd.acceptsArgs ?? false,\n        examples: cmd.examples ?? [],\n      }));\n    const extensionCommands = all\n      .filter((cmd) => cmd.category === 'extension')\n      .map((cmd) => ({\n        id: cmd.id,\n        name: cmd.name,\n        description: cmd.description,\n        extensionId: cmd.id.startsWith('ext.') ? cmd.id.split('.')[1] : undefined,\n      }));\n    return c.json({ ok: true, payload: { commands, extensionCommands } });\n  });\n\n  authenticated.get('/api/review/context', async (c) => {\n    const sessionKey = c.req.query('sessionKey')?.trim() || 'agent:main:main';\n    try {\n      const workspace = effectiveWorkspacePathForSession(\n        service.getConfig(),\n        sessionKey,\n        null,\n        getProjectForSession(sessionKey),\n      );\n      const cwd = await resolveGitRoot(workspace);\n      const payload = await buildReviewContext(cwd);\n      return c.json({ ok: true, payload });\n    } catch (err) {\n      return c.json(\n        {\n          ok: false,\n          error: {\n            code: 'REVIEW_CONTEXT_FAILED',\n            message: err instanceof Error ? err.message : 'Failed to load review context',\n          },\n        },\n        400,\n      );\n    }\n  });\n\n  // ========== Skills (managed global skills under ~/.xopc/skills) ==========\n\n  authenticated.get('/api/chat/skills', (c) => {\n    const agentId = c.req.query('agentId')?.trim() || service.getConfig().agents?.default || 'main';\n    const payload = service.marketplace.getAgentSkillsApi(agentId);\n    return c.json({ ok: true, payload });\n  });\n\n  authenticated.get('/api/chat/capabilities', (c) => {\n    const payload = service.agentService.getCapabilityCatalog(c.req.query('sessionKey')?.trim());\n    return c.json({ ok: true, payload });\n  });\n\n  authenticated.get('/api/skills', (c) => {\n    const payload = service.marketplace.getSkillsApi();\n    return c.json({ ok: true, payload });\n  });\n\n  authenticated.get('/api/skills/status', (c) => {\n    const payload = service.marketplace.getSkillsStatusApi();\n    return c.json({ ok: true, payload });\n  });\n\n  authenticated.get('/api/skills/:skillName/content', (c) => {\n    const raw = c.req.param('skillName');\n    if (!raw) {\n      return c.json({ ok: false, error: 'Missing skill name' }, 400);\n    }\n    let skillName: string;\n    try {\n      skillName = decodeURIComponent(raw);\n    } catch {\n      return c.json({ ok: false, error: 'Invalid skill name' }, 400);\n    }\n    const data = service.marketplace.getSkillMarkdownSource(skillName);\n    if (!data) {\n      return c.json({ ok: false, error: 'Skill not found' }, 404);\n    }\n    return c.json({ ok: true, payload: data });\n  });\n\n  authenticated.post('/api/skills/reload', (c) => {\n    service.marketplace.reloadSkills();\n    return c.json({ ok: true });\n  });\n\n  authenticated.patch('/api/skills/enabled', async (c) => {\n    let body: { skillName?: unknown; enabled?: unknown };\n    try {\n      body = (await c.req.json()) as { skillName?: unknown; enabled?: unknown };\n    } catch {\n      return c.json({ ok: false, error: 'Invalid JSON' }, 400);\n    }\n    const skillName = typeof body.skillName === 'string' ? body.skillName.trim() : '';\n    const enabled = body.enabled;\n    if (!skillName || typeof enabled !== 'boolean') {\n      return c.json({ ok: false, error: 'Expected { skillName: string, enabled: boolean }' }, 400);\n    }\n    try {\n      service.marketplace.patchSkillEnabled(skillName, enabled);\n      return c.json({ ok: true });\n    } catch (err) {\n      return c.json(\n        { ok: false, error: err instanceof Error ? err.message : 'Update failed' },\n        400,\n      );\n    }\n  });\n\n  authenticated.get('/api/skills/marketplace', async (c) => {\n    const q = c.req.query('q')?.trim() ?? '';\n    const pageRaw = c.req.query('page');\n    const pageSizeRaw = c.req.query('pageSize');\n    const sortRaw = c.req.query('sort');\n    const page = pageRaw != null && pageRaw !== '' ? Math.max(1, Number(pageRaw) || 1) : undefined;\n    const pageSize =\n      pageSizeRaw != null && pageSizeRaw !== ''\n        ? Math.min(50, Math.max(1, Number(pageSizeRaw) || 20))\n        : undefined;\n    const sort =\n      sortRaw === 'newest' || sortRaw === 'downloads' ? sortRaw : undefined;\n    const category = c.req.query('category')?.trim() ?? '';\n    const provider = parseMarketplaceProviderQuery(c.req.query('provider'));\n    try {\n      const payload = await service.marketplace.fetchSkillsCatalog(\n        {\n          q: q || undefined,\n          page,\n          pageSize,\n          sort,\n          category: category || undefined,\n        },\n        provider,\n      );\n      return c.json({ ok: true, payload });\n    } catch (err) {\n      return c.json(\n        { ok: false, error: err instanceof Error ? err.message : 'Marketplace request failed' },\n        502,\n      );\n    }\n  });\n\n  authenticated.get('/api/skills/marketplace/provider', async (c) => {\n    const info = await service.marketplace.getSkillsProvider();\n    return c.json({ ok: true, payload: info });\n  });\n\n  /** All registered marketplace providers (built-in + extension-contributed). */\n  authenticated.get('/api/skills/marketplace/providers', async (c) => {\n    const [providers, current] = await Promise.all([\n      service.marketplace.getSkillsProviders(),\n      service.marketplace.getSkillsProvider(),\n    ]);\n    return c.json({ ok: true, payload: { providers, current: current.provider } });\n  });\n\n  authenticated.get('/api/skills/marketplace/categories', async (c) => {\n    const provider = parseMarketplaceProviderQuery(c.req.query('provider'));\n    try {\n      const payload = await service.marketplace.fetchSkillsCategories(provider);\n      return c.json({ ok: true, payload });\n    } catch (err) {\n      return c.json(\n        { ok: false, error: err instanceof Error ? err.message : 'Marketplace categories failed' },\n        502,\n      );\n    }\n  });\n\n  authenticated.get('/api/skills/marketplace/packages/:pkgName', async (c) => {\n    const raw = c.req.param('pkgName');\n    if (!raw) {\n      return c.json({ ok: false, error: 'Missing package name' }, 400);\n    }\n    let pkgName: string;\n    try {\n      pkgName = decodeURIComponent(raw);\n    } catch {\n      return c.json({ ok: false, error: 'Invalid package name' }, 400);\n    }\n    try {\n      const provider = parseMarketplaceProviderQuery(c.req.query('provider'));\n      const payload = await service.marketplace.fetchSkillsPackageDetail(pkgName, provider);\n      return c.json({ ok: true, payload });\n    } catch (err) {\n      return c.json(\n        { ok: false, error: err instanceof Error ? err.message : 'Marketplace request failed' },\n        502,\n      );\n    }\n  });\n\n  authenticated.post('/api/skills/marketplace/install', async (c) => {\n    let body: {\n      name?: unknown;\n      version?: unknown;\n      overwrite?: unknown;\n      provider?: unknown;\n      target?: unknown;\n    };\n    try {\n      body = (await c.req.json()) as typeof body;\n    } catch {\n      return c.json({ ok: false, error: 'Invalid JSON' }, 400);\n    }\n    const name = typeof body.name === 'string' ? body.name.trim() : '';\n    const version = typeof body.version === 'string' ? body.version.trim() : undefined;\n    const overwrite =\n      body.overwrite === true ||\n      body.overwrite === 'true' ||\n      body.overwrite === '1';\n    const provider = parseMarketplaceProviderQuery(\n      typeof body.provider === 'string' ? body.provider : undefined,\n    );\n    const target = optionalSkillInstallTarget(body.target);\n    if (body.target != null && !target) {\n      return c.json({ ok: false, error: 'Expected target to be \"workspace\" or \"global\"' }, 400);\n    }\n    if (!name) {\n      return c.json({ ok: false, error: 'Expected { name: string, version?: string, overwrite?: boolean }' }, 400);\n    }\n    try {\n      const payload = await service.marketplace.installSkill({ name, version, overwrite, provider, target });\n      return c.json({ ok: true, payload });\n    } catch (err) {\n      return c.json(\n        { ok: false, error: err instanceof Error ? err.message : 'Install failed' },\n        400,\n      );\n    }\n  });\n\n  authenticated.post('/api/skills/hub/install', async (c) => {\n    let body: Record<string, unknown>;\n    try {\n      body = (await c.req.json()) as Record<string, unknown>;\n    } catch {\n      return c.json({ ok: false, error: 'Invalid JSON' }, 400);\n    }\n\n    const source = optionalTrimmedString(body.source);\n    if (!source) {\n      return c.json({ ok: false, error: 'Expected { source: string }' }, 400);\n    }\n    const target = optionalSkillInstallTarget(body.target);\n    if (body.target != null && body.target !== '' && !target) {\n      return c.json({ ok: false, error: 'Expected target to be \"workspace\" or \"global\"' }, 400);\n    }\n\n    try {\n      const payload = await service.marketplace.installSkillFromSource({\n        source,\n        ref: optionalTrimmedString(body.ref),\n        path: optionalTrimmedString(body.path),\n        skillId: optionalTrimmedString(body.skillId),\n        target,\n        force: optionalBoolean(body.force) ?? false,\n        strictScan: optionalBoolean(body.strictScan) ?? false,\n      });\n      return c.json({ ok: true, payload });\n    } catch (err) {\n      return c.json(\n        { ok: false, error: err instanceof Error ? err.message : 'Install failed' },\n        skillHubInstallStatus(err),\n      );\n    }\n  });\n\n  authenticated.post('/api/skills/upload', async (c) => {\n    let body: Record<string, unknown>;\n    try {\n      body = await c.req.parseBody({ all: true });\n    } catch {\n      return c.json({ ok: false, error: 'Invalid multipart body' }, 400);\n    }\n    const file = body['file'];\n    if (!file || typeof file !== 'object') {\n      return c.json({ ok: false, error: 'Missing file field' }, 400);\n    }\n    let buf: Buffer;\n    if (file instanceof File) {\n      buf = Buffer.from(await file.arrayBuffer());\n    } else if (typeof (file as Blob).arrayBuffer === 'function') {\n      buf = Buffer.from(await (file as Blob).arrayBuffer());\n    } else {\n      return c.json({ ok: false, error: 'Invalid file upload' }, 400);\n    }\n    const skillIdRaw = body['skillId'];\n    const overwriteRaw = body['overwrite'];\n    const skillId = typeof skillIdRaw === 'string' && skillIdRaw.trim() ? skillIdRaw.trim() : undefined;\n    const overwrite =\n      overwriteRaw === 'true' ||\n      overwriteRaw === true ||\n      overwriteRaw === '1';\n    const targetRaw = body['target'];\n    const target = optionalSkillInstallTarget(targetRaw);\n    if (targetRaw != null && targetRaw !== '' && !target) {\n      return c.json({ ok: false, error: 'Expected target to be \"workspace\" or \"global\"' }, 400);\n    }\n\n    try {\n      const result = service.marketplace.installSkillZip(buf, { skillId, overwrite, target });\n      return c.json({ ok: true, payload: result });\n    } catch (err) {\n      return c.json(\n        { ok: false, error: err instanceof Error ? err.message : 'Install failed' },\n        400,\n      );\n    }\n  });\n\n  authenticated.delete('/api/skills/:id', (c) => {\n    const id = c.req.param('id');\n    if (!id) {\n      return c.json({ ok: false, error: 'Missing id' }, 400);\n    }\n    const targetRaw = c.req.query('target');\n    const target = optionalSkillInstallTarget(targetRaw);\n    if (targetRaw != null && targetRaw !== '' && !target) {\n      return c.json({ ok: false, error: 'Expected target to be \"workspace\" or \"global\"' }, 400);\n    }\n    try {\n      service.marketplace.deleteSkill(id, target);\n      return c.json({ ok: true });\n    } catch (err) {\n      return c.json(\n        { ok: false, error: err instanceof Error ? err.message : 'Delete failed' },\n        400,\n      );\n    }\n  });\n}\n"],"mappings":";;;;;;;;;AAaA,SAAS,8BAA8B,KAA6C;CAClF,MAAM,IAAI,KAAK,MAAM,CAAC,aAAa;AACnC,KAAI,KAAK,qBAAqB,EAAE,CAAE,QAAO;;AAI3C,SAAS,sBAAsB,OAAoC;AACjE,QAAO,OAAO,UAAU,YAAY,MAAM,MAAM,GAAG,MAAM,MAAM,GAAG,KAAA;;AAGpE,SAAS,gBAAgB,OAAqC;AAC5D,KAAI,UAAU,QAAQ,UAAU,UAAU,UAAU,IAAK,QAAO;AAChE,KAAI,UAAU,SAAS,UAAU,WAAW,UAAU,IAAK,QAAO;;AAIpE,SAAS,2BAA2B,OAAgD;AAClF,KAAI,SAAS,QAAQ,UAAU,GAAI,QAAO,KAAA;AAC1C,QAAO,qBAAqB,MAAM,GAAG,QAAQ,KAAA;;AAG/C,SAAS,sBAAsB,KAA+B;CAC5D,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAChE,KAAI,QAAQ,SAAS,iBAAiB,CAAE,QAAO;AAC/C,KACE,QAAQ,WAAW,QAAQ,IAC3B,QAAQ,SAAS,mBAAmB,IACpC,QAAQ,SAAS,mBAAmB,IACpC,QAAQ,SAAS,uBAAuB,CAExC,QAAO;AAET,QAAO;;AAGT,SAAgB,6BAA6B,eAAqB,MAAoC;CACpG,MAAM,EAAE,YAAY;AAIpB,eAAc,IAAI,kBAAkB,MAAM;EACxC,MAAM,MAAM,gBAAgB,MAAM;EAClC,MAAM,WAAW,IACd,QAAQ,QAAQ,IAAI,MAAM,SAAS,SAAS,IAAI,IAAI,MAAM,SAAS,UAAU,CAAC,CAC9E,KAAK,SAAS;GACb,IAAI,IAAI;GACR,MAAM,IAAI;GACV,SAAS,IAAI,WAAW,EAAE;GAC1B,aAAa,IAAI;GACjB,UAAU,IAAI;GACd,OAAO,IAAI;GACX,aAAa,IAAI,eAAe;GAChC,UAAU,IAAI,YAAY,EAAE;GAC7B,EAAE;EACL,MAAM,oBAAoB,IACvB,QAAQ,QAAQ,IAAI,aAAa,YAAY,CAC7C,KAAK,SAAS;GACb,IAAI,IAAI;GACR,MAAM,IAAI;GACV,aAAa,IAAI;GACjB,aAAa,IAAI,GAAG,WAAW,OAAO,GAAG,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,KAAA;GACjE,EAAE;AACL,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;IAAE;IAAU;IAAmB;GAAE,CAAC;GACrE;AAEF,eAAc,IAAI,uBAAuB,OAAO,MAAM;EACpD,MAAM,aAAa,EAAE,IAAI,MAAM,aAAa,EAAE,MAAM,IAAI;AACxD,MAAI;GAQF,MAAM,UAAU,MAAM,mBAAmB,MADvB,eANA,iCAChB,QAAQ,WAAW,EACnB,YACA,MACA,qBAAqB,WAAW,CAEQ,CAAC,CACE;AAC7C,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM;IAAS,CAAC;WAC7B,KAAK;AACZ,UAAO,EAAE,KACP;IACE,IAAI;IACJ,OAAO;KACL,MAAM;KACN,SAAS,eAAe,QAAQ,IAAI,UAAU;KAC/C;IACF,EACD,IACD;;GAEH;AAIF,eAAc,IAAI,qBAAqB,MAAM;EAC3C,MAAM,UAAU,EAAE,IAAI,MAAM,UAAU,EAAE,MAAM,IAAI,QAAQ,WAAW,CAAC,QAAQ,WAAW;EACzF,MAAM,UAAU,QAAQ,YAAY,kBAAkB,QAAQ;AAC9D,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM;GAAS,CAAC;GACpC;AAEF,eAAc,IAAI,2BAA2B,MAAM;EACjD,MAAM,UAAU,QAAQ,aAAa,qBAAqB,EAAE,IAAI,MAAM,aAAa,EAAE,MAAM,CAAC;AAC5F,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM;GAAS,CAAC;GACpC;AAEF,eAAc,IAAI,gBAAgB,MAAM;EACtC,MAAM,UAAU,QAAQ,YAAY,cAAc;AAClD,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM;GAAS,CAAC;GACpC;AAEF,eAAc,IAAI,uBAAuB,MAAM;EAC7C,MAAM,UAAU,QAAQ,YAAY,oBAAoB;AACxD,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM;GAAS,CAAC;GACpC;AAEF,eAAc,IAAI,mCAAmC,MAAM;EACzD,MAAM,MAAM,EAAE,IAAI,MAAM,YAAY;AACpC,MAAI,CAAC,IACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAsB,EAAE,IAAI;EAEhE,IAAI;AACJ,MAAI;AACF,eAAY,mBAAmB,IAAI;UAC7B;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAAsB,EAAE,IAAI;;EAEhE,MAAM,OAAO,QAAQ,YAAY,uBAAuB,UAAU;AAClE,MAAI,CAAC,KACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAmB,EAAE,IAAI;AAE7D,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;GAAM,CAAC;GAC1C;AAEF,eAAc,KAAK,uBAAuB,MAAM;AAC9C,UAAQ,YAAY,cAAc;AAClC,SAAO,EAAE,KAAK,EAAE,IAAI,MAAM,CAAC;GAC3B;AAEF,eAAc,MAAM,uBAAuB,OAAO,MAAM;EACtD,IAAI;AACJ,MAAI;AACF,UAAQ,MAAM,EAAE,IAAI,MAAM;UACpB;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAAgB,EAAE,IAAI;;EAE1D,MAAM,YAAY,OAAO,KAAK,cAAc,WAAW,KAAK,UAAU,MAAM,GAAG;EAC/E,MAAM,UAAU,KAAK;AACrB,MAAI,CAAC,aAAa,OAAO,YAAY,UACnC,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAoD,EAAE,IAAI;AAE9F,MAAI;AACF,WAAQ,YAAY,kBAAkB,WAAW,QAAQ;AACzD,UAAO,EAAE,KAAK,EAAE,IAAI,MAAM,CAAC;WACpB,KAAK;AACZ,UAAO,EAAE,KACP;IAAE,IAAI;IAAO,OAAO,eAAe,QAAQ,IAAI,UAAU;IAAiB,EAC1E,IACD;;GAEH;AAEF,eAAc,IAAI,2BAA2B,OAAO,MAAM;EACxD,MAAM,IAAI,EAAE,IAAI,MAAM,IAAI,EAAE,MAAM,IAAI;EACtC,MAAM,UAAU,EAAE,IAAI,MAAM,OAAO;EACnC,MAAM,cAAc,EAAE,IAAI,MAAM,WAAW;EAC3C,MAAM,UAAU,EAAE,IAAI,MAAM,OAAO;EACnC,MAAM,OAAO,WAAW,QAAQ,YAAY,KAAK,KAAK,IAAI,GAAG,OAAO,QAAQ,IAAI,EAAE,GAAG,KAAA;EACrF,MAAM,WACJ,eAAe,QAAQ,gBAAgB,KACnC,KAAK,IAAI,IAAI,KAAK,IAAI,GAAG,OAAO,YAAY,IAAI,GAAG,CAAC,GACpD,KAAA;EACN,MAAM,OACJ,YAAY,YAAY,YAAY,cAAc,UAAU,KAAA;EAC9D,MAAM,WAAW,EAAE,IAAI,MAAM,WAAW,EAAE,MAAM,IAAI;EACpD,MAAM,WAAW,8BAA8B,EAAE,IAAI,MAAM,WAAW,CAAC;AACvE,MAAI;GACF,MAAM,UAAU,MAAM,QAAQ,YAAY,mBACxC;IACE,GAAG,KAAK,KAAA;IACR;IACA;IACA;IACA,UAAU,YAAY,KAAA;IACvB,EACD,SACD;AACD,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM;IAAS,CAAC;WAC7B,KAAK;AACZ,UAAO,EAAE,KACP;IAAE,IAAI;IAAO,OAAO,eAAe,QAAQ,IAAI,UAAU;IAA8B,EACvF,IACD;;GAEH;AAEF,eAAc,IAAI,oCAAoC,OAAO,MAAM;EACjE,MAAM,OAAO,MAAM,QAAQ,YAAY,mBAAmB;AAC1D,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;GAAM,CAAC;GAC1C;;AAGF,eAAc,IAAI,qCAAqC,OAAO,MAAM;EAClE,MAAM,CAAC,WAAW,WAAW,MAAM,QAAQ,IAAI,CAC7C,QAAQ,YAAY,oBAAoB,EACxC,QAAQ,YAAY,mBAAmB,CACxC,CAAC;AACF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;IAAE;IAAW,SAAS,QAAQ;IAAU;GAAE,CAAC;GAC9E;AAEF,eAAc,IAAI,sCAAsC,OAAO,MAAM;EACnE,MAAM,WAAW,8BAA8B,EAAE,IAAI,MAAM,WAAW,CAAC;AACvE,MAAI;GACF,MAAM,UAAU,MAAM,QAAQ,YAAY,sBAAsB,SAAS;AACzE,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM;IAAS,CAAC;WAC7B,KAAK;AACZ,UAAO,EAAE,KACP;IAAE,IAAI;IAAO,OAAO,eAAe,QAAQ,IAAI,UAAU;IAAiC,EAC1F,IACD;;GAEH;AAEF,eAAc,IAAI,6CAA6C,OAAO,MAAM;EAC1E,MAAM,MAAM,EAAE,IAAI,MAAM,UAAU;AAClC,MAAI,CAAC,IACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAwB,EAAE,IAAI;EAElE,IAAI;AACJ,MAAI;AACF,aAAU,mBAAmB,IAAI;UAC3B;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAAwB,EAAE,IAAI;;AAElE,MAAI;GACF,MAAM,WAAW,8BAA8B,EAAE,IAAI,MAAM,WAAW,CAAC;GACvE,MAAM,UAAU,MAAM,QAAQ,YAAY,yBAAyB,SAAS,SAAS;AACrF,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM;IAAS,CAAC;WAC7B,KAAK;AACZ,UAAO,EAAE,KACP;IAAE,IAAI;IAAO,OAAO,eAAe,QAAQ,IAAI,UAAU;IAA8B,EACvF,IACD;;GAEH;AAEF,eAAc,KAAK,mCAAmC,OAAO,MAAM;EACjE,IAAI;AAOJ,MAAI;AACF,UAAQ,MAAM,EAAE,IAAI,MAAM;UACpB;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAAgB,EAAE,IAAI;;EAE1D,MAAM,OAAO,OAAO,KAAK,SAAS,WAAW,KAAK,KAAK,MAAM,GAAG;EAChE,MAAM,UAAU,OAAO,KAAK,YAAY,WAAW,KAAK,QAAQ,MAAM,GAAG,KAAA;EACzE,MAAM,YACJ,KAAK,cAAc,QACnB,KAAK,cAAc,UACnB,KAAK,cAAc;EACrB,MAAM,WAAW,8BACf,OAAO,KAAK,aAAa,WAAW,KAAK,WAAW,KAAA,EACrD;EACD,MAAM,SAAS,2BAA2B,KAAK,OAAO;AACtD,MAAI,KAAK,UAAU,QAAQ,CAAC,OAC1B,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAiD,EAAE,IAAI;AAE3F,MAAI,CAAC,KACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAoE,EAAE,IAAI;AAE9G,MAAI;GACF,MAAM,UAAU,MAAM,QAAQ,YAAY,aAAa;IAAE;IAAM;IAAS;IAAW;IAAU;IAAQ,CAAC;AACtG,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM;IAAS,CAAC;WAC7B,KAAK;AACZ,UAAO,EAAE,KACP;IAAE,IAAI;IAAO,OAAO,eAAe,QAAQ,IAAI,UAAU;IAAkB,EAC3E,IACD;;GAEH;AAEF,eAAc,KAAK,2BAA2B,OAAO,MAAM;EACzD,IAAI;AACJ,MAAI;AACF,UAAQ,MAAM,EAAE,IAAI,MAAM;UACpB;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAAgB,EAAE,IAAI;;EAG1D,MAAM,SAAS,sBAAsB,KAAK,OAAO;AACjD,MAAI,CAAC,OACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAA+B,EAAE,IAAI;EAEzE,MAAM,SAAS,2BAA2B,KAAK,OAAO;AACtD,MAAI,KAAK,UAAU,QAAQ,KAAK,WAAW,MAAM,CAAC,OAChD,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAiD,EAAE,IAAI;AAG3F,MAAI;GACF,MAAM,UAAU,MAAM,QAAQ,YAAY,uBAAuB;IAC/D;IACA,KAAK,sBAAsB,KAAK,IAAI;IACpC,MAAM,sBAAsB,KAAK,KAAK;IACtC,SAAS,sBAAsB,KAAK,QAAQ;IAC5C;IACA,OAAO,gBAAgB,KAAK,MAAM,IAAI;IACtC,YAAY,gBAAgB,KAAK,WAAW,IAAI;IACjD,CAAC;AACF,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM;IAAS,CAAC;WAC7B,KAAK;AACZ,UAAO,EAAE,KACP;IAAE,IAAI;IAAO,OAAO,eAAe,QAAQ,IAAI,UAAU;IAAkB,EAC3E,sBAAsB,IAAI,CAC3B;;GAEH;AAEF,eAAc,KAAK,sBAAsB,OAAO,MAAM;EACpD,IAAI;AACJ,MAAI;AACF,UAAO,MAAM,EAAE,IAAI,UAAU,EAAE,KAAK,MAAM,CAAC;UACrC;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAA0B,EAAE,IAAI;;EAEpE,MAAM,OAAO,KAAK;AAClB,MAAI,CAAC,QAAQ,OAAO,SAAS,SAC3B,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAsB,EAAE,IAAI;EAEhE,IAAI;AACJ,MAAI,gBAAgB,KAClB,OAAM,OAAO,KAAK,MAAM,KAAK,aAAa,CAAC;WAClC,OAAQ,KAAc,gBAAgB,WAC/C,OAAM,OAAO,KAAK,MAAO,KAAc,aAAa,CAAC;MAErD,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAuB,EAAE,IAAI;EAEjE,MAAM,aAAa,KAAK;EACxB,MAAM,eAAe,KAAK;EAC1B,MAAM,UAAU,OAAO,eAAe,YAAY,WAAW,MAAM,GAAG,WAAW,MAAM,GAAG,KAAA;EAC1F,MAAM,YACJ,iBAAiB,UACjB,iBAAiB,QACjB,iBAAiB;EACnB,MAAM,YAAY,KAAK;EACvB,MAAM,SAAS,2BAA2B,UAAU;AACpD,MAAI,aAAa,QAAQ,cAAc,MAAM,CAAC,OAC5C,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAiD,EAAE,IAAI;AAG3F,MAAI;GACF,MAAM,SAAS,QAAQ,YAAY,gBAAgB,KAAK;IAAE;IAAS;IAAW;IAAQ,CAAC;AACvF,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS;IAAQ,CAAC;WACrC,KAAK;AACZ,UAAO,EAAE,KACP;IAAE,IAAI;IAAO,OAAO,eAAe,QAAQ,IAAI,UAAU;IAAkB,EAC3E,IACD;;GAEH;AAEF,eAAc,OAAO,oBAAoB,MAAM;EAC7C,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK;AAC5B,MAAI,CAAC,GACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAc,EAAE,IAAI;EAExD,MAAM,YAAY,EAAE,IAAI,MAAM,SAAS;EACvC,MAAM,SAAS,2BAA2B,UAAU;AACpD,MAAI,aAAa,QAAQ,cAAc,MAAM,CAAC,OAC5C,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAiD,EAAE,IAAI;AAE3F,MAAI;AACF,WAAQ,YAAY,YAAY,IAAI,OAAO;AAC3C,UAAO,EAAE,KAAK,EAAE,IAAI,MAAM,CAAC;WACpB,KAAK;AACZ,UAAO,EAAE,KACP;IAAE,IAAI;IAAO,OAAO,eAAe,QAAQ,IAAI,UAAU;IAAiB,EAC1E,IACD;;GAEH"}

package/dist/src/gateway/hono/routes/config-patch/agents.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"agents.js","names":[],"sources":["../../../../../../src/gateway/hono/routes/config-patch/agents.ts"],"sourcesContent":["import type { Config } from '../../../../config/schema.js';\n\nexport function applyAgentsPatch(_config: Config, body: any): void {\n  if (body.agents !== undefined) {\n    throw new Error('agents config patching was removed; use manifest-specific agent APIs');\n  }\n}\n"],"mappings":";AAEA,SAAgB,iBAAiB,SAAiB,MAAiB;AACjE,KAAI,KAAK,WAAW,KAAA,EAClB,OAAM,IAAI,MAAM,uEAAuE"}

package/dist/src/gateway/hono/routes/config-patch/channels.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"channels.js","names":[],"sources":["../../../../../../src/gateway/hono/routes/config-patch/channels.ts"],"sourcesContent":["import type { Config } from '../../../../config/schema.js';\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n  return typeof value === 'object' && value !== null && !Array.isArray(value);\n}\n\nexport function applyChannelsPatch(config: Config, body: unknown): void {\n  if (!isRecord(body)) return;\n  const patchChannels = body.channels;\n  if (!isRecord(patchChannels)) return;\n\n  if (!config.channels) {\n    config.channels = {};\n  }\n\n  for (const [rawChannelId, patch] of Object.entries(patchChannels)) {\n    const channelId = rawChannelId.trim().toLowerCase();\n    if (!channelId) continue;\n\n    if (patch === null) {\n      delete (config.channels as Record<string, unknown>)[channelId];\n      continue;\n    }\n\n    if (!isRecord(patch)) continue;\n\n    const existing = (config.channels as Record<string, unknown>)[channelId];\n    (config.channels as Record<string, unknown>)[channelId] = {\n      ...(isRecord(existing) ? existing : {}),\n      ...patch,\n    };\n  }\n}\n"],"mappings":";AAEA,SAAS,SAAS,OAAkD;AAClE,QAAO,OAAO,UAAU,YAAY,UAAU,QAAQ,CAAC,MAAM,QAAQ,MAAM;;AAG7E,SAAgB,mBAAmB,QAAgB,MAAqB;AACtE,KAAI,CAAC,SAAS,KAAK,CAAE;CACrB,MAAM,gBAAgB,KAAK;AAC3B,KAAI,CAAC,SAAS,cAAc,CAAE;AAE9B,KAAI,CAAC,OAAO,SACV,QAAO,WAAW,EAAE;AAGtB,MAAK,MAAM,CAAC,cAAc,UAAU,OAAO,QAAQ,cAAc,EAAE;EACjE,MAAM,YAAY,aAAa,MAAM,CAAC,aAAa;AACnD,MAAI,CAAC,UAAW;AAEhB,MAAI,UAAU,MAAM;AAClB,UAAQ,OAAO,SAAqC;AACpD;;AAGF,MAAI,CAAC,SAAS,MAAM,CAAE;EAEtB,MAAM,WAAY,OAAO,SAAqC;AAC7D,SAAO,SAAqC,aAAa;GACxD,GAAI,SAAS,SAAS,GAAG,WAAW,EAAE;GACtC,GAAG;GACJ"}

package/dist/src/gateway/hono/routes/config-patch/gateway.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"gateway.js","names":[],"sources":["../../../../../../src/gateway/hono/routes/config-patch/gateway.ts"],"sourcesContent":["/**\n * `PATCH /api/config` — `body.gateway.*` section.\n *\n * Covers heartbeat, bind/customBindHost/port, tailscale, auth (mode + token +\n * password + rateLimit + trustedProxy), trustedProxies, allowRealIpFallback,\n * dangerouslyAllowHostHeaderOriginFallback, security, share, siteShare, publicUrl,\n * corsOrigins, maxSseConnections, and channelConnectDefer{Mode,Ids,SkipIds}.\n *\n * Validation policy: each subsection that can reject rejects with a 400 and a\n * specific `message`. The dispatcher converts these into `c.json(...)`.\n *\n * Initial-state branches use the same literal defaults the inline code did\n * (loopback + port 18790 + 1800s heartbeat + 100 SSE conn + empty CORS) so\n * a brand-new install gets a working gateway after the first PATCH.\n */\nimport type { Config, GatewayBindMode } from '../../../../config/schema.js';\nimport { isValidIPv4 } from '../../../../config/gateway-bind.js';\nimport { validatePublicUrl } from '../../../../config/public-url.js';\nimport { mergeShareConfigPatch } from '../../../../share/share-config.js';\nimport { mergeSiteShareConfigPatch } from '../../../../share/site-share-config.js';\nimport { isMaskedSecretPatchValue } from '../../lib/mask-secret-length.js';\nimport { type PatchResult, PATCH_OK, patchError } from './result.js';\n\n/**\n * Shared default for \"user PATCH'd a gateway subsection but `config.gateway`\n * was never initialised\". Identical to the inline literal repeated in the\n * pre-extraction handler so this is behavior-preserving.\n */\nfunction ensureGateway(config: Config): NonNullable<Config['gateway']> {\n  if (!config.gateway) {\n    config.gateway = {\n      bind: 'loopback',\n      port: 18790,\n      heartbeat: { enabled: true, intervalMs: 1_800_000, includeSystemPromptSection: false },\n      maxSseConnections: 100,\n      corsOrigins: [],\n    };\n  }\n  return config.gateway;\n}\n\nfunction parseDeferIdList(raw: unknown): string[] | null {\n  if (!Array.isArray(raw)) return null;\n  const ids = raw\n    .filter((x): x is string => typeof x === 'string' && x.trim().length > 0)\n    .map((x) => x.trim());\n  if (ids.length > 24) return null;\n  return ids;\n}\n\nexport function applyGatewayPatch(config: Config, body: any): PatchResult {\n  if (body.gateway?.heartbeat !== undefined && typeof body.gateway.heartbeat === 'object') {\n    const gw = ensureGateway(config);\n    if (!gw.heartbeat) {\n      gw.heartbeat = { enabled: true, intervalMs: 1_800_000, includeSystemPromptSection: false };\n    }\n    const h = gw.heartbeat;\n    const p = body.gateway.heartbeat as Record<string, unknown>;\n    if (p.enabled !== undefined) h.enabled = Boolean(p.enabled);\n    if (p.intervalMs !== undefined && typeof p.intervalMs === 'number' && Number.isFinite(p.intervalMs)) {\n      h.intervalMs = p.intervalMs;\n    }\n    if (p.includeSystemPromptSection !== undefined) {\n      h.includeSystemPromptSection = Boolean(p.includeSystemPromptSection);\n    }\n    if (p.target !== undefined) {\n      if (p.target === null || p.target === '') delete (h as { target?: string }).target;\n      else (h as { target?: string }).target = String(p.target);\n    }\n    if (p.targetChatId !== undefined) {\n      if (p.targetChatId === null || p.targetChatId === '') delete (h as { targetChatId?: string }).targetChatId;\n      else (h as { targetChatId?: string }).targetChatId = String(p.targetChatId);\n    }\n    if (p.prompt !== undefined) {\n      if (p.prompt === null || p.prompt === '') delete (h as { prompt?: string }).prompt;\n      else (h as { prompt?: string }).prompt = String(p.prompt);\n    }\n    if (p.ackMaxChars !== undefined) {\n      if (p.ackMaxChars === null || p.ackMaxChars === '') delete (h as { ackMaxChars?: number }).ackMaxChars;\n      else if (typeof p.ackMaxChars === 'number' && Number.isFinite(p.ackMaxChars)) {\n        (h as { ackMaxChars?: number }).ackMaxChars = p.ackMaxChars;\n      }\n    }\n    if (p.isolatedSession !== undefined) {\n      if (p.isolatedSession === null || p.isolatedSession === false) {\n        delete (h as { isolatedSession?: boolean }).isolatedSession;\n      } else {\n        (h as { isolatedSession?: boolean }).isolatedSession = Boolean(p.isolatedSession);\n      }\n    }\n    if (p.activeHours !== undefined) {\n      if (p.activeHours === null) {\n        delete (h as { activeHours?: unknown }).activeHours;\n      } else if (typeof p.activeHours === 'object' && p.activeHours !== null) {\n        const ah = p.activeHours as Record<string, unknown>;\n        const start = typeof ah.start === 'string' ? ah.start : '';\n        const end = typeof ah.end === 'string' ? ah.end : '';\n        if (start && end) {\n          (h as { activeHours?: { start: string; end: string; timezone?: string } }).activeHours = {\n            start,\n            end,\n            ...(typeof ah.timezone === 'string' && ah.timezone.trim() ? { timezone: ah.timezone } : {}),\n          };\n        } else {\n          delete (h as { activeHours?: unknown }).activeHours;\n        }\n      }\n    }\n  }\n\n  if (body.gateway?.bind !== undefined) {\n    const bindModes = new Set(['auto', 'loopback', 'lan', 'tailnet', 'custom']);\n    const bind = body.gateway.bind;\n    if (typeof bind !== 'string' || !bindModes.has(bind)) {\n      return patchError('gateway.bind must be one of: auto, loopback, lan, tailnet, custom');\n    }\n    if (!config.gateway) {\n      config.gateway = {\n        bind: bind as GatewayBindMode,\n        port: 18790,\n        heartbeat: { enabled: true, intervalMs: 1_800_000, includeSystemPromptSection: false },\n        maxSseConnections: 100,\n        corsOrigins: [],\n      };\n    } else {\n      config.gateway.bind = bind as GatewayBindMode;\n    }\n    if (bind !== 'custom') {\n      delete config.gateway.customBindHost;\n    }\n  }\n\n  if (body.gateway?.customBindHost !== undefined) {\n    if (body.gateway.customBindHost === null || body.gateway.customBindHost === '') {\n      if (config.gateway) {\n        delete config.gateway.customBindHost;\n      }\n    } else if (typeof body.gateway.customBindHost !== 'string' || !isValidIPv4(body.gateway.customBindHost.trim())) {\n      return patchError('gateway.customBindHost must be a valid IPv4 address');\n    } else if (config.gateway) {\n      config.gateway.customBindHost = body.gateway.customBindHost.trim();\n      config.gateway.bind = 'custom';\n    }\n  }\n\n  if (body.gateway?.port !== undefined) {\n    if (\n      typeof body.gateway.port !== 'number' ||\n      !Number.isFinite(body.gateway.port) ||\n      body.gateway.port < 1 ||\n      body.gateway.port > 65535\n    ) {\n      return patchError('gateway.port must be an integer from 1 to 65535');\n    }\n    if (!config.gateway) {\n      config.gateway = {\n        bind: 'loopback',\n        port: Math.floor(body.gateway.port),\n        heartbeat: { enabled: true, intervalMs: 1_800_000, includeSystemPromptSection: false },\n        maxSseConnections: 100,\n        corsOrigins: [],\n      };\n    } else {\n      config.gateway.port = Math.floor(body.gateway.port);\n    }\n  }\n\n  if (body.gateway?.tailscale !== undefined && typeof body.gateway.tailscale === 'object') {\n    const ts = body.gateway.tailscale as Record<string, unknown>;\n    if (!config.gateway) {\n      config.gateway = {\n        bind: 'loopback',\n        port: 18790,\n        auth: { mode: 'token' },\n        heartbeat: { enabled: true, intervalMs: 1_800_000, includeSystemPromptSection: false },\n        maxSseConnections: 100,\n        corsOrigins: [],\n      };\n    }\n    config.gateway.tailscale = {\n      ...(config.gateway.tailscale ?? { mode: 'off', resetOnExit: true }),\n    };\n    if (ts.mode !== undefined) {\n      if (ts.mode !== 'off' && ts.mode !== 'serve' && ts.mode !== 'funnel') {\n        return patchError('gateway.tailscale.mode must be off, serve, or funnel');\n      }\n      config.gateway.tailscale.mode = ts.mode as 'off' | 'serve' | 'funnel';\n    }\n    if (ts.resetOnExit !== undefined) {\n      config.gateway.tailscale.resetOnExit = ts.resetOnExit === true;\n    }\n  }\n\n  if (body.gateway?.auth !== undefined) {\n    const gw = ensureGateway(config);\n    if (!gw.auth) gw.auth = { mode: 'token' };\n    const a = body.gateway.auth;\n    if (a.mode !== undefined) {\n      if (\n        a.mode !== 'none' &&\n        a.mode !== 'token' &&\n        a.mode !== 'password' &&\n        a.mode !== 'trusted-proxy'\n      ) {\n        return patchError('gateway.auth.mode must be none, token, password, or trusted-proxy');\n      }\n      gw.auth.mode = a.mode;\n    }\n    if (a.token !== undefined) {\n      if (a.token === null || (typeof a.token === 'string' && !a.token.trim())) {\n        delete gw.auth.token;\n      } else if (typeof a.token === 'string' && !isMaskedSecretPatchValue(a.token)) {\n        gw.auth.token = a.token;\n      }\n    }\n    if (a.password !== undefined) {\n      if (a.password === null || (typeof a.password === 'string' && !a.password.trim())) {\n        delete gw.auth.password;\n      } else if (typeof a.password === 'string' && !isMaskedSecretPatchValue(a.password)) {\n        gw.auth.password = a.password;\n      }\n    }\n    if (a.rateLimit !== undefined && typeof a.rateLimit === 'object' && a.rateLimit !== null) {\n      const rlIn = a.rateLimit as Record<string, unknown>;\n      if (!gw.auth.rateLimit) {\n        gw.auth.rateLimit = {\n          enabled: true,\n          maxAttempts: 5,\n          windowMs: 900_000,\n          blockDurationMs: 300_000,\n          burstCoalesceMs: 1000,\n          exemptLoopback: true,\n        };\n      }\n      const rl = gw.auth.rateLimit!;\n      if (rlIn.enabled !== undefined) rl.enabled = Boolean(rlIn.enabled);\n      if (typeof rlIn.maxAttempts === 'number' && Number.isFinite(rlIn.maxAttempts)) {\n        rl.maxAttempts = Math.max(1, Math.floor(rlIn.maxAttempts));\n      }\n      if (typeof rlIn.windowMs === 'number' && Number.isFinite(rlIn.windowMs) && rlIn.windowMs > 0) {\n        rl.windowMs = Math.floor(rlIn.windowMs);\n      }\n      if (\n        typeof rlIn.blockDurationMs === 'number' &&\n        Number.isFinite(rlIn.blockDurationMs) &&\n        rlIn.blockDurationMs > 0\n      ) {\n        rl.blockDurationMs = Math.floor(rlIn.blockDurationMs);\n      }\n      if (\n        typeof rlIn.lockoutMs === 'number' &&\n        Number.isFinite(rlIn.lockoutMs) &&\n        rlIn.lockoutMs > 0\n      ) {\n        rl.blockDurationMs = Math.floor(rlIn.lockoutMs);\n      }\n      if (rlIn.exemptLoopback !== undefined) {\n        rl.exemptLoopback = Boolean(rlIn.exemptLoopback);\n      }\n    }\n    if (a.trustedProxy !== undefined) {\n      if (a.trustedProxy === null) {\n        delete gw.auth.trustedProxy;\n      } else if (typeof a.trustedProxy === 'object' && a.trustedProxy !== null) {\n        const tpIn = a.trustedProxy as Record<string, unknown>;\n        const userHeader =\n          typeof tpIn.userHeader === 'string' ? tpIn.userHeader.trim() : '';\n        if (!userHeader) {\n          return patchError('gateway.auth.trustedProxy.userHeader is required');\n        }\n        const trustedProxy: NonNullable<(typeof gw.auth)['trustedProxy']> = {\n          userHeader,\n        };\n        if (tpIn.requiredHeaders !== undefined) {\n          if (!Array.isArray(tpIn.requiredHeaders)) {\n            return patchError('gateway.auth.trustedProxy.requiredHeaders must be an array');\n          }\n          trustedProxy.requiredHeaders = tpIn.requiredHeaders\n            .filter((x): x is string => typeof x === 'string' && x.trim().length > 0)\n            .map((x) => x.trim());\n        }\n        if (tpIn.allowUsers !== undefined) {\n          if (!Array.isArray(tpIn.allowUsers)) {\n            return patchError('gateway.auth.trustedProxy.allowUsers must be an array');\n          }\n          trustedProxy.allowUsers = tpIn.allowUsers\n            .filter((x): x is string => typeof x === 'string' && x.trim().length > 0)\n            .map((x) => x.trim());\n        }\n        if (tpIn.allowLoopback !== undefined) {\n          trustedProxy.allowLoopback = Boolean(tpIn.allowLoopback);\n        }\n        gw.auth.trustedProxy = trustedProxy;\n      }\n    }\n  }\n\n  if (body.gateway?.trustedProxies !== undefined) {\n    if (!Array.isArray(body.gateway.trustedProxies)) {\n      return patchError('gateway.trustedProxies must be an array');\n    }\n    const gw = ensureGateway(config);\n    gw.trustedProxies = body.gateway.trustedProxies\n      .filter((x: unknown): x is string => typeof x === 'string' && x.trim().length > 0)\n      .map((x: string) => x.trim());\n  }\n\n  if (body.gateway?.allowRealIpFallback !== undefined) {\n    const gw = ensureGateway(config);\n    gw.allowRealIpFallback = Boolean(body.gateway.allowRealIpFallback);\n  }\n\n  if (body.gateway?.dangerouslyAllowHostHeaderOriginFallback !== undefined) {\n    const gw = ensureGateway(config);\n    gw.dangerouslyAllowHostHeaderOriginFallback = Boolean(\n      body.gateway.dangerouslyAllowHostHeaderOriginFallback,\n    );\n  }\n\n  if (body.gateway?.security !== undefined) {\n    if (typeof body.gateway.security !== 'object' || body.gateway.security === null) {\n      return patchError('gateway.security must be an object');\n    }\n    const gw = ensureGateway(config);\n    const secIn = body.gateway.security as Record<string, unknown>;\n    if (!gw.security) {\n      gw.security = {};\n    }\n    if (secIn.strict !== undefined) {\n      gw.security.strict = Boolean(secIn.strict);\n    }\n  }\n\n  if (body.gateway?.share !== undefined) {\n    if (typeof body.gateway.share !== 'object' || body.gateway.share === null || Array.isArray(body.gateway.share)) {\n      return patchError('gateway.share must be an object');\n    }\n    const shareResult = mergeShareConfigPatch(config, body.gateway.share as Record<string, unknown>);\n    if (shareResult.ok === false) {\n      return patchError(shareResult.message);\n    }\n  }\n\n  if (body.gateway?.siteShare !== undefined) {\n    if (\n      typeof body.gateway.siteShare !== 'object' ||\n      body.gateway.siteShare === null ||\n      Array.isArray(body.gateway.siteShare)\n    ) {\n      return patchError('gateway.siteShare must be an object');\n    }\n    const siteShareResult = mergeSiteShareConfigPatch(config, body.gateway.siteShare as Record<string, unknown>);\n    if (siteShareResult.ok === false) {\n      return patchError(siteShareResult.message);\n    }\n  }\n\n  if (body.gateway?.publicUrl !== undefined) {\n    const gw = ensureGateway(config);\n    if (body.gateway.publicUrl === null || body.gateway.publicUrl === '') {\n      delete gw.publicUrl;\n    } else if (typeof body.gateway.publicUrl !== 'string') {\n      return patchError('gateway.publicUrl must be a string or null');\n    } else {\n      const validation = validatePublicUrl(body.gateway.publicUrl);\n      if (validation.ok === false) {\n        return patchError(`gateway.publicUrl: ${validation.message}`);\n      }\n      gw.publicUrl = validation.url;\n    }\n  }\n\n  if (body.gateway?.corsOrigins !== undefined) {\n    if (!Array.isArray(body.gateway.corsOrigins)) {\n      return patchError('gateway.corsOrigins must be an array');\n    }\n    const gw = ensureGateway(config);\n    gw.corsOrigins = body.gateway.corsOrigins\n      .filter((x: unknown): x is string => typeof x === 'string' && x.trim().length > 0)\n      .map((x: string) => x.trim());\n  }\n\n  if (body.gateway?.maxSseConnections !== undefined) {\n    if (\n      typeof body.gateway.maxSseConnections !== 'number' ||\n      !Number.isFinite(body.gateway.maxSseConnections) ||\n      body.gateway.maxSseConnections < 1\n    ) {\n      return patchError('gateway.maxSseConnections must be a positive integer');\n    }\n    if (!config.gateway) {\n      config.gateway = {\n        bind: 'loopback',\n        port: 18790,\n        heartbeat: { enabled: true, intervalMs: 1_800_000, includeSystemPromptSection: false },\n        maxSseConnections: Math.floor(body.gateway.maxSseConnections),\n        corsOrigins: [],\n      };\n    } else {\n      config.gateway.maxSseConnections = Math.floor(body.gateway.maxSseConnections);\n    }\n  }\n\n  if (body.gateway?.channelConnectDeferMode !== undefined) {\n    const mode = body.gateway.channelConnectDeferMode;\n    if (mode !== 'auto' && mode !== 'off' && mode !== 'explicit') {\n      return patchError('gateway.channelConnectDeferMode must be auto, off, or explicit');\n    }\n    const gw = ensureGateway(config);\n    gw.channelConnectDeferMode = mode;\n  }\n\n  if (body.gateway?.channelConnectDeferIds !== undefined) {\n    const ids = parseDeferIdList(body.gateway.channelConnectDeferIds);\n    if (ids === null) {\n      return patchError('gateway.channelConnectDeferIds must be an array of up to 24 strings');\n    }\n    const gw = ensureGateway(config);\n    gw.channelConnectDeferIds = ids;\n  }\n\n  if (body.gateway?.channelConnectDeferSkipIds !== undefined) {\n    const ids = parseDeferIdList(body.gateway.channelConnectDeferSkipIds);\n    if (ids === null) {\n      return patchError('gateway.channelConnectDeferSkipIds must be an array of up to 24 strings');\n    }\n    const gw = ensureGateway(config);\n    gw.channelConnectDeferSkipIds = ids;\n  }\n\n  return PATCH_OK;\n}\n"],"mappings":";;;;;;;iBAiBqE;;;;;;AAWrE,SAAS,cAAc,QAAgD;AACrE,KAAI,CAAC,OAAO,QACV,QAAO,UAAU;EACf,MAAM;EACN,MAAM;EACN,WAAW;GAAE,SAAS;GAAM,YAAY;GAAW,4BAA4B;GAAO;EACtF,mBAAmB;EACnB,aAAa,EAAE;EAChB;AAEH,QAAO,OAAO;;AAGhB,SAAS,iBAAiB,KAA+B;AACvD,KAAI,CAAC,MAAM,QAAQ,IAAI,CAAE,QAAO;CAChC,MAAM,MAAM,IACT,QAAQ,MAAmB,OAAO,MAAM,YAAY,EAAE,MAAM,CAAC,SAAS,EAAE,CACxE,KAAK,MAAM,EAAE,MAAM,CAAC;AACvB,KAAI,IAAI,SAAS,GAAI,QAAO;AAC5B,QAAO;;AAGT,SAAgB,kBAAkB,QAAgB,MAAwB;AACxE,KAAI,KAAK,SAAS,cAAc,KAAA,KAAa,OAAO,KAAK,QAAQ,cAAc,UAAU;EACvF,MAAM,KAAK,cAAc,OAAO;AAChC,MAAI,CAAC,GAAG,UACN,IAAG,YAAY;GAAE,SAAS;GAAM,YAAY;GAAW,4BAA4B;GAAO;EAE5F,MAAM,IAAI,GAAG;EACb,MAAM,IAAI,KAAK,QAAQ;AACvB,MAAI,EAAE,YAAY,KAAA,EAAW,GAAE,UAAU,QAAQ,EAAE,QAAQ;AAC3D,MAAI,EAAE,eAAe,KAAA,KAAa,OAAO,EAAE,eAAe,YAAY,OAAO,SAAS,EAAE,WAAW,CACjG,GAAE,aAAa,EAAE;AAEnB,MAAI,EAAE,+BAA+B,KAAA,EACnC,GAAE,6BAA6B,QAAQ,EAAE,2BAA2B;AAEtE,MAAI,EAAE,WAAW,KAAA,EACf,KAAI,EAAE,WAAW,QAAQ,EAAE,WAAW,GAAI,QAAQ,EAA0B;MACtE,GAA0B,SAAS,OAAO,EAAE,OAAO;AAE3D,MAAI,EAAE,iBAAiB,KAAA,EACrB,KAAI,EAAE,iBAAiB,QAAQ,EAAE,iBAAiB,GAAI,QAAQ,EAAgC;MACxF,GAAgC,eAAe,OAAO,EAAE,aAAa;AAE7E,MAAI,EAAE,WAAW,KAAA,EACf,KAAI,EAAE,WAAW,QAAQ,EAAE,WAAW,GAAI,QAAQ,EAA0B;MACtE,GAA0B,SAAS,OAAO,EAAE,OAAO;AAE3D,MAAI,EAAE,gBAAgB,KAAA;OAChB,EAAE,gBAAgB,QAAQ,EAAE,gBAAgB,GAAI,QAAQ,EAA+B;YAClF,OAAO,EAAE,gBAAgB,YAAY,OAAO,SAAS,EAAE,YAAY,CACzE,GAA+B,cAAc,EAAE;;AAGpD,MAAI,EAAE,oBAAoB,KAAA,EACxB,KAAI,EAAE,oBAAoB,QAAQ,EAAE,oBAAoB,MACtD,QAAQ,EAAoC;MAE3C,GAAoC,kBAAkB,QAAQ,EAAE,gBAAgB;AAGrF,MAAI,EAAE,gBAAgB,KAAA;OAChB,EAAE,gBAAgB,KACpB,QAAQ,EAAgC;YAC/B,OAAO,EAAE,gBAAgB,YAAY,EAAE,gBAAgB,MAAM;IACtE,MAAM,KAAK,EAAE;IACb,MAAM,QAAQ,OAAO,GAAG,UAAU,WAAW,GAAG,QAAQ;IACxD,MAAM,MAAM,OAAO,GAAG,QAAQ,WAAW,GAAG,MAAM;AAClD,QAAI,SAAS,IACV,GAA0E,cAAc;KACvF;KACA;KACA,GAAI,OAAO,GAAG,aAAa,YAAY,GAAG,SAAS,MAAM,GAAG,EAAE,UAAU,GAAG,UAAU,GAAG,EAAE;KAC3F;QAED,QAAQ,EAAgC;;;;AAMhD,KAAI,KAAK,SAAS,SAAS,KAAA,GAAW;EACpC,MAAM,YAAY,IAAI,IAAI;GAAC;GAAQ;GAAY;GAAO;GAAW;GAAS,CAAC;EAC3E,MAAM,OAAO,KAAK,QAAQ;AAC1B,MAAI,OAAO,SAAS,YAAY,CAAC,UAAU,IAAI,KAAK,CAClD,QAAO,WAAW,oEAAoE;AAExF,MAAI,CAAC,OAAO,QACV,QAAO,UAAU;GACT;GACN,MAAM;GACN,WAAW;IAAE,SAAS;IAAM,YAAY;IAAW,4BAA4B;IAAO;GACtF,mBAAmB;GACnB,aAAa,EAAE;GAChB;MAED,QAAO,QAAQ,OAAO;AAExB,MAAI,SAAS,SACX,QAAO,OAAO,QAAQ;;AAI1B,KAAI,KAAK,SAAS,mBAAmB,KAAA;MAC/B,KAAK,QAAQ,mBAAmB,QAAQ,KAAK,QAAQ,mBAAmB;OACtE,OAAO,QACT,QAAO,OAAO,QAAQ;aAEf,OAAO,KAAK,QAAQ,mBAAmB,YAAY,CAAC,YAAY,KAAK,QAAQ,eAAe,MAAM,CAAC,CAC5G,QAAO,WAAW,sDAAsD;WAC/D,OAAO,SAAS;AACzB,UAAO,QAAQ,iBAAiB,KAAK,QAAQ,eAAe,MAAM;AAClE,UAAO,QAAQ,OAAO;;;AAI1B,KAAI,KAAK,SAAS,SAAS,KAAA,GAAW;AACpC,MACE,OAAO,KAAK,QAAQ,SAAS,YAC7B,CAAC,OAAO,SAAS,KAAK,QAAQ,KAAK,IACnC,KAAK,QAAQ,OAAO,KACpB,KAAK,QAAQ,OAAO,MAEpB,QAAO,WAAW,kDAAkD;AAEtE,MAAI,CAAC,OAAO,QACV,QAAO,UAAU;GACf,MAAM;GACN,MAAM,KAAK,MAAM,KAAK,QAAQ,KAAK;GACnC,WAAW;IAAE,SAAS;IAAM,YAAY;IAAW,4BAA4B;IAAO;GACtF,mBAAmB;GACnB,aAAa,EAAE;GAChB;MAED,QAAO,QAAQ,OAAO,KAAK,MAAM,KAAK,QAAQ,KAAK;;AAIvD,KAAI,KAAK,SAAS,cAAc,KAAA,KAAa,OAAO,KAAK,QAAQ,cAAc,UAAU;EACvF,MAAM,KAAK,KAAK,QAAQ;AACxB,MAAI,CAAC,OAAO,QACV,QAAO,UAAU;GACf,MAAM;GACN,MAAM;GACN,MAAM,EAAE,MAAM,SAAS;GACvB,WAAW;IAAE,SAAS;IAAM,YAAY;IAAW,4BAA4B;IAAO;GACtF,mBAAmB;GACnB,aAAa,EAAE;GAChB;AAEH,SAAO,QAAQ,YAAY,EACzB,GAAI,OAAO,QAAQ,aAAa;GAAE,MAAM;GAAO,aAAa;GAAM,EACnE;AACD,MAAI,GAAG,SAAS,KAAA,GAAW;AACzB,OAAI,GAAG,SAAS,SAAS,GAAG,SAAS,WAAW,GAAG,SAAS,SAC1D,QAAO,WAAW,uDAAuD;AAE3E,UAAO,QAAQ,UAAU,OAAO,GAAG;;AAErC,MAAI,GAAG,gBAAgB,KAAA,EACrB,QAAO,QAAQ,UAAU,cAAc,GAAG,gBAAgB;;AAI9D,KAAI,KAAK,SAAS,SAAS,KAAA,GAAW;EACpC,MAAM,KAAK,cAAc,OAAO;AAChC,MAAI,CAAC,GAAG,KAAM,IAAG,OAAO,EAAE,MAAM,SAAS;EACzC,MAAM,IAAI,KAAK,QAAQ;AACvB,MAAI,EAAE,SAAS,KAAA,GAAW;AACxB,OACE,EAAE,SAAS,UACX,EAAE,SAAS,WACX,EAAE,SAAS,cACX,EAAE,SAAS,gBAEX,QAAO,WAAW,oEAAoE;AAExF,MAAG,KAAK,OAAO,EAAE;;AAEnB,MAAI,EAAE,UAAU,KAAA;OACV,EAAE,UAAU,QAAS,OAAO,EAAE,UAAU,YAAY,CAAC,EAAE,MAAM,MAAM,CACrE,QAAO,GAAG,KAAK;YACN,OAAO,EAAE,UAAU,YAAY,CAAC,yBAAyB,EAAE,MAAM,CAC1E,IAAG,KAAK,QAAQ,EAAE;;AAGtB,MAAI,EAAE,aAAa,KAAA;OACb,EAAE,aAAa,QAAS,OAAO,EAAE,aAAa,YAAY,CAAC,EAAE,SAAS,MAAM,CAC9E,QAAO,GAAG,KAAK;YACN,OAAO,EAAE,aAAa,YAAY,CAAC,yBAAyB,EAAE,SAAS,CAChF,IAAG,KAAK,WAAW,EAAE;;AAGzB,MAAI,EAAE,cAAc,KAAA,KAAa,OAAO,EAAE,cAAc,YAAY,EAAE,cAAc,MAAM;GACxF,MAAM,OAAO,EAAE;AACf,OAAI,CAAC,GAAG,KAAK,UACX,IAAG,KAAK,YAAY;IAClB,SAAS;IACT,aAAa;IACb,UAAU;IACV,iBAAiB;IACjB,iBAAiB;IACjB,gBAAgB;IACjB;GAEH,MAAM,KAAK,GAAG,KAAK;AACnB,OAAI,KAAK,YAAY,KAAA,EAAW,IAAG,UAAU,QAAQ,KAAK,QAAQ;AAClE,OAAI,OAAO,KAAK,gBAAgB,YAAY,OAAO,SAAS,KAAK,YAAY,CAC3E,IAAG,cAAc,KAAK,IAAI,GAAG,KAAK,MAAM,KAAK,YAAY,CAAC;AAE5D,OAAI,OAAO,KAAK,aAAa,YAAY,OAAO,SAAS,KAAK,SAAS,IAAI,KAAK,WAAW,EACzF,IAAG,WAAW,KAAK,MAAM,KAAK,SAAS;AAEzC,OACE,OAAO,KAAK,oBAAoB,YAChC,OAAO,SAAS,KAAK,gBAAgB,IACrC,KAAK,kBAAkB,EAEvB,IAAG,kBAAkB,KAAK,MAAM,KAAK,gBAAgB;AAEvD,OACE,OAAO,KAAK,cAAc,YAC1B,OAAO,SAAS,KAAK,UAAU,IAC/B,KAAK,YAAY,EAEjB,IAAG,kBAAkB,KAAK,MAAM,KAAK,UAAU;AAEjD,OAAI,KAAK,mBAAmB,KAAA,EAC1B,IAAG,iBAAiB,QAAQ,KAAK,eAAe;;AAGpD,MAAI,EAAE,iBAAiB,KAAA;OACjB,EAAE,iBAAiB,KACrB,QAAO,GAAG,KAAK;YACN,OAAO,EAAE,iBAAiB,YAAY,EAAE,iBAAiB,MAAM;IACxE,MAAM,OAAO,EAAE;IACf,MAAM,aACJ,OAAO,KAAK,eAAe,WAAW,KAAK,WAAW,MAAM,GAAG;AACjE,QAAI,CAAC,WACH,QAAO,WAAW,mDAAmD;IAEvE,MAAM,eAA8D,EAClE,YACD;AACD,QAAI,KAAK,oBAAoB,KAAA,GAAW;AACtC,SAAI,CAAC,MAAM,QAAQ,KAAK,gBAAgB,CACtC,QAAO,WAAW,6DAA6D;AAEjF,kBAAa,kBAAkB,KAAK,gBACjC,QAAQ,MAAmB,OAAO,MAAM,YAAY,EAAE,MAAM,CAAC,SAAS,EAAE,CACxE,KAAK,MAAM,EAAE,MAAM,CAAC;;AAEzB,QAAI,KAAK,eAAe,KAAA,GAAW;AACjC,SAAI,CAAC,MAAM,QAAQ,KAAK,WAAW,CACjC,QAAO,WAAW,wDAAwD;AAE5E,kBAAa,aAAa,KAAK,WAC5B,QAAQ,MAAmB,OAAO,MAAM,YAAY,EAAE,MAAM,CAAC,SAAS,EAAE,CACxE,KAAK,MAAM,EAAE,MAAM,CAAC;;AAEzB,QAAI,KAAK,kBAAkB,KAAA,EACzB,cAAa,gBAAgB,QAAQ,KAAK,cAAc;AAE1D,OAAG,KAAK,eAAe;;;;AAK7B,KAAI,KAAK,SAAS,mBAAmB,KAAA,GAAW;AAC9C,MAAI,CAAC,MAAM,QAAQ,KAAK,QAAQ,eAAe,CAC7C,QAAO,WAAW,0CAA0C;EAE9D,MAAM,KAAK,cAAc,OAAO;AAChC,KAAG,iBAAiB,KAAK,QAAQ,eAC9B,QAAQ,MAA4B,OAAO,MAAM,YAAY,EAAE,MAAM,CAAC,SAAS,EAAE,CACjF,KAAK,MAAc,EAAE,MAAM,CAAC;;AAGjC,KAAI,KAAK,SAAS,wBAAwB,KAAA,GAAW;EACnD,MAAM,KAAK,cAAc,OAAO;AAChC,KAAG,sBAAsB,QAAQ,KAAK,QAAQ,oBAAoB;;AAGpE,KAAI,KAAK,SAAS,6CAA6C,KAAA,GAAW;EACxE,MAAM,KAAK,cAAc,OAAO;AAChC,KAAG,2CAA2C,QAC5C,KAAK,QAAQ,yCACd;;AAGH,KAAI,KAAK,SAAS,aAAa,KAAA,GAAW;AACxC,MAAI,OAAO,KAAK,QAAQ,aAAa,YAAY,KAAK,QAAQ,aAAa,KACzE,QAAO,WAAW,qCAAqC;EAEzD,MAAM,KAAK,cAAc,OAAO;EAChC,MAAM,QAAQ,KAAK,QAAQ;AAC3B,MAAI,CAAC,GAAG,SACN,IAAG,WAAW,EAAE;AAElB,MAAI,MAAM,WAAW,KAAA,EACnB,IAAG,SAAS,SAAS,QAAQ,MAAM,OAAO;;AAI9C,KAAI,KAAK,SAAS,UAAU,KAAA,GAAW;AACrC,MAAI,OAAO,KAAK,QAAQ,UAAU,YAAY,KAAK,QAAQ,UAAU,QAAQ,MAAM,QAAQ,KAAK,QAAQ,MAAM,CAC5G,QAAO,WAAW,kCAAkC;EAEtD,MAAM,cAAc,sBAAsB,QAAQ,KAAK,QAAQ,MAAiC;AAChG,MAAI,YAAY,OAAO,MACrB,QAAO,WAAW,YAAY,QAAQ;;AAI1C,KAAI,KAAK,SAAS,cAAc,KAAA,GAAW;AACzC,MACE,OAAO,KAAK,QAAQ,cAAc,YAClC,KAAK,QAAQ,cAAc,QAC3B,MAAM,QAAQ,KAAK,QAAQ,UAAU,CAErC,QAAO,WAAW,sCAAsC;EAE1D,MAAM,kBAAkB,0BAA0B,QAAQ,KAAK,QAAQ,UAAqC;AAC5G,MAAI,gBAAgB,OAAO,MACzB,QAAO,WAAW,gBAAgB,QAAQ;;AAI9C,KAAI,KAAK,SAAS,cAAc,KAAA,GAAW;EACzC,MAAM,KAAK,cAAc,OAAO;AAChC,MAAI,KAAK,QAAQ,cAAc,QAAQ,KAAK,QAAQ,cAAc,GAChE,QAAO,GAAG;WACD,OAAO,KAAK,QAAQ,cAAc,SAC3C,QAAO,WAAW,6CAA6C;OAC1D;GACL,MAAM,aAAa,kBAAkB,KAAK,QAAQ,UAAU;AAC5D,OAAI,WAAW,OAAO,MACpB,QAAO,WAAW,sBAAsB,WAAW,UAAU;AAE/D,MAAG,YAAY,WAAW;;;AAI9B,KAAI,KAAK,SAAS,gBAAgB,KAAA,GAAW;AAC3C,MAAI,CAAC,MAAM,QAAQ,KAAK,QAAQ,YAAY,CAC1C,QAAO,WAAW,uCAAuC;EAE3D,MAAM,KAAK,cAAc,OAAO;AAChC,KAAG,cAAc,KAAK,QAAQ,YAC3B,QAAQ,MAA4B,OAAO,MAAM,YAAY,EAAE,MAAM,CAAC,SAAS,EAAE,CACjF,KAAK,MAAc,EAAE,MAAM,CAAC;;AAGjC,KAAI,KAAK,SAAS,sBAAsB,KAAA,GAAW;AACjD,MACE,OAAO,KAAK,QAAQ,sBAAsB,YAC1C,CAAC,OAAO,SAAS,KAAK,QAAQ,kBAAkB,IAChD,KAAK,QAAQ,oBAAoB,EAEjC,QAAO,WAAW,uDAAuD;AAE3E,MAAI,CAAC,OAAO,QACV,QAAO,UAAU;GACf,MAAM;GACN,MAAM;GACN,WAAW;IAAE,SAAS;IAAM,YAAY;IAAW,4BAA4B;IAAO;GACtF,mBAAmB,KAAK,MAAM,KAAK,QAAQ,kBAAkB;GAC7D,aAAa,EAAE;GAChB;MAED,QAAO,QAAQ,oBAAoB,KAAK,MAAM,KAAK,QAAQ,kBAAkB;;AAIjF,KAAI,KAAK,SAAS,4BAA4B,KAAA,GAAW;EACvD,MAAM,OAAO,KAAK,QAAQ;AAC1B,MAAI,SAAS,UAAU,SAAS,SAAS,SAAS,WAChD,QAAO,WAAW,iEAAiE;EAErF,MAAM,KAAK,cAAc,OAAO;AAChC,KAAG,0BAA0B;;AAG/B,KAAI,KAAK,SAAS,2BAA2B,KAAA,GAAW;EACtD,MAAM,MAAM,iBAAiB,KAAK,QAAQ,uBAAuB;AACjE,MAAI,QAAQ,KACV,QAAO,WAAW,sEAAsE;EAE1F,MAAM,KAAK,cAAc,OAAO;AAChC,KAAG,yBAAyB;;AAG9B,KAAI,KAAK,SAAS,+BAA+B,KAAA,GAAW;EAC1D,MAAM,MAAM,iBAAiB,KAAK,QAAQ,2BAA2B;AACrE,MAAI,QAAQ,KACV,QAAO,WAAW,0EAA0E;EAE9F,MAAM,KAAK,cAAc,OAAO;AAChC,KAAG,6BAA6B;;AAGlC,QAAO"}

package/dist/src/gateway/hono/routes/config-patch/misc.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"misc.js","names":[],"sources":["../../../../../../src/gateway/hono/routes/config-patch/misc.ts"],"sourcesContent":["/**\n * `PATCH /api/config` — tail sections that are each <50 lines:\n *   update / goals / session / gateway.{skillsMarketplaceProvider,\n *   skillsStoreBaseUrl} / providers / providersConfig / stt / tts / tools /\n *   tunnel / bindings / mcp.\n *\n * Most of these delegate to a `mergeXxxConfigPatch(config, body) → { ok,\n * message? }` helper that lives next to the schema, so this file is mostly\n * \"validate object shape, call helper, surface 400 on failure\". The async\n * `providers` branch saves into the credential resolver rather than config.\n *\n * Final validation (resolveGatewayAuth + assertGatewayRuntimeConfig) runs\n * after every gateway-touching patch lands, so it sees the merged shape.\n */\nimport type { Config } from '../../../../config/schema.js';\nimport { BindingsConfigSchema, BrowserConfigSchema, McpConfigSchema, VoiceConfigSchema } from '../../../../config/schema.js';\nimport { CredentialResolver } from '../../../../auth/credentials.js';\nimport { isMaskedSecretPatchValue } from '../../lib/mask-secret-length.js';\nimport { applyToolsWebPatch } from '../../../config-tools-web.js';\nimport { mergeTunnelConfigPatch } from '../../../../tunnel/tunnel-config.js';\nimport { canonicalizeConfiguredMcpServer } from '../../../../config/mcp-config-normalize.js';\nimport { setTuiDefaultAgentConfig } from '../../../../commands/agents.config.js';\nimport {\n  mergeGatewaySkillsMarketplacePatch,\n  mergeGoalsConfigPatch,\n  mergeSessionConfigPatch,\n  mergeUpdateConfigPatch,\n} from '../../../../config/web-patch.js';\nimport { mergeSttConfigPatch, mergeTtsConfigPatch } from '../../lib/safe-voice-config.js';\nimport { assertGatewayRuntimeConfig } from '../../../runtime-config.js';\nimport { resolveGatewayAuth, assertGatewayAuthConfigured } from '../../../auth.js';\nimport { type PatchResult, PATCH_OK, patchError } from './result.js';\n\nexport async function applyMiscPatch(config: Config, body: any): Promise<PatchResult> {\n  if (body.update !== undefined && typeof body.update === 'object' && body.update !== null) {\n    const updateResult = mergeUpdateConfigPatch(config, body.update as Record<string, unknown>);\n    if (updateResult.ok === false) {\n      return patchError(updateResult.message);\n    }\n  }\n\n  if (body.goals !== undefined) {\n    if (typeof body.goals !== 'object' || body.goals === null || Array.isArray(body.goals)) {\n      return patchError('goals must be an object');\n    }\n    const goalsResult = mergeGoalsConfigPatch(config, body.goals as Record<string, unknown>);\n    if (goalsResult.ok === false) {\n      return patchError(goalsResult.message);\n    }\n  }\n\n  if (body.session !== undefined) {\n    if (typeof body.session !== 'object' || body.session === null || Array.isArray(body.session)) {\n      return patchError('session must be an object');\n    }\n    const sessionResult = mergeSessionConfigPatch(config, body.session as Record<string, unknown>);\n    if (sessionResult.ok === false) {\n      return patchError(sessionResult.message);\n    }\n  }\n\n  if (body.tui !== undefined) {\n    if (typeof body.tui !== 'object' || body.tui === null || Array.isArray(body.tui)) {\n      return patchError('tui must be an object');\n    }\n    const tuiPatch = body.tui as Record<string, unknown>;\n    if (tuiPatch.defaultAgent !== undefined) {\n      if (tuiPatch.defaultAgent === null) {\n        config.tui = { ...config.tui };\n        delete config.tui.defaultAgent;\n      } else {\n        if (typeof tuiPatch.defaultAgent !== 'string' || !tuiPatch.defaultAgent.trim()) {\n          return patchError('tui.defaultAgent must be a non-empty string');\n        }\n        const result = setTuiDefaultAgentConfig(config, tuiPatch.defaultAgent);\n        if (result.ok === false) {\n          return patchError(result.message);\n        }\n        config.tui = result.config.tui;\n      }\n    }\n  }\n\n  if (body.browser !== undefined) {\n    if (typeof body.browser !== 'object' || body.browser === null || Array.isArray(body.browser)) {\n      return patchError('browser must be an object');\n    }\n    const parsed = BrowserConfigSchema.safeParse(body.browser);\n    if (!parsed.success) {\n      return patchError(parsed.error.issues.map((i) => i.message).join('; '));\n    }\n    config.browser = parsed.data;\n  }\n\n  if (\n    body.gateway !== undefined &&\n    typeof body.gateway === 'object' &&\n    body.gateway !== null &&\n    !Array.isArray(body.gateway)\n  ) {\n    const gwPatch = body.gateway as Record<string, unknown>;\n    if (gwPatch.skillsMarketplaceProvider !== undefined || gwPatch.skillsStoreBaseUrl !== undefined) {\n      const skillsResult = mergeGatewaySkillsMarketplacePatch(config, {\n        ...(gwPatch.skillsMarketplaceProvider !== undefined\n          ? { skillsMarketplaceProvider: gwPatch.skillsMarketplaceProvider }\n          : {}),\n        ...(gwPatch.skillsStoreBaseUrl !== undefined\n          ? { skillsStoreBaseUrl: gwPatch.skillsStoreBaseUrl }\n          : {}),\n      });\n      if (skillsResult.ok === false) {\n        return patchError(skillsResult.message);\n      }\n    }\n  }\n\n  // LLM provider credentials — saved into the credential system (not config).\n  if (body.providers) {\n    const resolver = new CredentialResolver();\n    for (const [key, apiKey] of Object.entries(body.providers)) {\n      if (\n        apiKey !== undefined &&\n        typeof apiKey === 'string' &&\n        apiKey.trim() &&\n        !isMaskedSecretPatchValue(apiKey)\n      ) {\n        await resolver.saveApiKey(key, apiKey, { profileName: 'default' });\n      }\n    }\n  }\n\n  // Structured per-vendor provider config (cfg.providers.<id>) for capability\n  // providers (image / audio / video). Distinct from `body.providers` above\n  // which targets the LLM-side credential resolver.\n  if (body.providersConfig && typeof body.providersConfig === 'object' && !Array.isArray(body.providersConfig)) {\n    const cfgProviders = (config as { providers?: Record<string, Record<string, unknown>> }).providers ?? {};\n    for (const [vendorId, raw] of Object.entries(body.providersConfig as Record<string, unknown>)) {\n      if (!vendorId || typeof vendorId !== 'string') continue;\n      if (raw === null) {\n        delete cfgProviders[vendorId];\n        continue;\n      }\n      if (!raw || typeof raw !== 'object' || Array.isArray(raw)) continue;\n      const next = (cfgProviders[vendorId] ?? {}) as Record<string, unknown>;\n      const patch = raw as Record<string, unknown>;\n      for (const field of ['apiKey', 'baseUrl', 'region', 'imageBaseUrl'] as const) {\n        if (patch[field] === null || patch[field] === '') {\n          delete next[field];\n        } else if (typeof patch[field] === 'string') {\n          const trimmed = (patch[field] as string).trim();\n          if (field === 'apiKey' && isMaskedSecretPatchValue(trimmed)) {\n            continue;\n          }\n          next[field] = trimmed;\n        }\n      }\n      if (patch.azure === null) {\n        delete next.azure;\n      } else if (patch.azure && typeof patch.azure === 'object' && !Array.isArray(patch.azure)) {\n        next.azure = { ...(next.azure as Record<string, unknown> ?? {}), ...(patch.azure as Record<string, unknown>) };\n      }\n      if (patch.request === null) {\n        delete next.request;\n      } else if (patch.request && typeof patch.request === 'object' && !Array.isArray(patch.request)) {\n        next.request = { ...(next.request as Record<string, unknown> ?? {}), ...(patch.request as Record<string, unknown>) };\n      }\n      cfgProviders[vendorId] = next;\n    }\n    (config as { providers?: Record<string, Record<string, unknown>> }).providers = cfgProviders;\n  }\n\n  // PATCH `stt` writes to tools.media.audio; PATCH `tts` writes to messages.tts.\n  if (body.stt !== undefined) {\n    config.tools = config.tools ?? {};\n    config.tools.media = config.tools.media ?? {};\n    (config.tools.media as Record<string, unknown>).audio = mergeSttConfigPatch(\n      config.tools.media.audio,\n      body.stt,\n    );\n  }\n  if (body.tts !== undefined) {\n    config.messages = config.messages ?? {};\n    (config.messages as Record<string, unknown>).tts = mergeTtsConfigPatch(\n      config.messages.tts,\n      body.tts,\n    );\n  }\n  if (body.voice !== undefined) {\n    const parsed = VoiceConfigSchema.safeParse(body.voice);\n    if (!parsed.success) {\n      return patchError(parsed.error.issues.map((i) => i.message).join('; '));\n    }\n    config.voice = parsed.data;\n  }\n\n  const toolsPatchErr = applyToolsWebPatch(config, body as Record<string, unknown>);\n  if (toolsPatchErr) {\n    return patchError(toolsPatchErr);\n  }\n\n  if (body.tunnel !== undefined) {\n    if (!body.tunnel || typeof body.tunnel !== 'object' || Array.isArray(body.tunnel)) {\n      return patchError('tunnel must be an object');\n    }\n    const tunnelResult = mergeTunnelConfigPatch(config, body.tunnel as Record<string, unknown>);\n    if (tunnelResult.ok === false) {\n      return patchError(tunnelResult.message);\n    }\n  }\n\n  if (body.bindings !== undefined) {\n    if (!Array.isArray(body.bindings)) {\n      return patchError('bindings must be an array');\n    }\n    const parsed = BindingsConfigSchema.safeParse(body.bindings);\n    if (!parsed.success) {\n      return patchError(parsed.error.issues.map((i) => i.message).join('; '));\n    }\n    config.bindings = parsed.data;\n  }\n\n  if (body.mcp !== undefined) {\n    if (body.mcp === null) {\n      delete config.mcp;\n    } else if (typeof body.mcp !== 'object' || Array.isArray(body.mcp)) {\n      return patchError('mcp must be an object');\n    } else {\n      const parsed = McpConfigSchema.safeParse(body.mcp);\n      if (!parsed.success) {\n        return patchError(parsed.error.issues.map((i) => i.message).join('; '));\n      }\n      if (parsed.data === undefined) {\n        delete config.mcp;\n      } else {\n        const next = { ...parsed.data };\n        if (next.servers) {\n          next.servers = Object.fromEntries(\n            Object.entries(next.servers).map(([name, server]) => [\n              name,\n              canonicalizeConfiguredMcpServer(server as Record<string, unknown>),\n            ]),\n          );\n        }\n        config.mcp = next;\n      }\n    }\n  }\n\n  return PATCH_OK;\n}\n\n/**\n * Re-validate gateway runtime config when `body.gateway` touched anything that\n * could break the bind/auth contract. Runs *after* all per-section patches\n * land so it sees the fully merged shape.\n */\nexport function validateGatewayAfterPatch(config: Config, body: any): PatchResult {\n  if (body.gateway === undefined) return PATCH_OK;\n  try {\n    const auth = resolveGatewayAuth({ authConfig: config.gateway?.auth });\n    assertGatewayAuthConfigured(auth);\n    assertGatewayRuntimeConfig({\n      cfg: config,\n      auth,\n      port: config.gateway?.port ?? 18790,\n    });\n  } catch (err) {\n    const message = err instanceof Error ? err.message : String(err);\n    return patchError(message);\n  }\n  return PATCH_OK;\n}\n"],"mappings":";;;;;;;;;;;;;aAe6H;kBACxD;AAiBrE,eAAsB,eAAe,QAAgB,MAAiC;AACpF,KAAI,KAAK,WAAW,KAAA,KAAa,OAAO,KAAK,WAAW,YAAY,KAAK,WAAW,MAAM;EACxF,MAAM,eAAe,uBAAuB,QAAQ,KAAK,OAAkC;AAC3F,MAAI,aAAa,OAAO,MACtB,QAAO,WAAW,aAAa,QAAQ;;AAI3C,KAAI,KAAK,UAAU,KAAA,GAAW;AAC5B,MAAI,OAAO,KAAK,UAAU,YAAY,KAAK,UAAU,QAAQ,MAAM,QAAQ,KAAK,MAAM,CACpF,QAAO,WAAW,0BAA0B;EAE9C,MAAM,cAAc,sBAAsB,QAAQ,KAAK,MAAiC;AACxF,MAAI,YAAY,OAAO,MACrB,QAAO,WAAW,YAAY,QAAQ;;AAI1C,KAAI,KAAK,YAAY,KAAA,GAAW;AAC9B,MAAI,OAAO,KAAK,YAAY,YAAY,KAAK,YAAY,QAAQ,MAAM,QAAQ,KAAK,QAAQ,CAC1F,QAAO,WAAW,4BAA4B;EAEhD,MAAM,gBAAgB,wBAAwB,QAAQ,KAAK,QAAmC;AAC9F,MAAI,cAAc,OAAO,MACvB,QAAO,WAAW,cAAc,QAAQ;;AAI5C,KAAI,KAAK,QAAQ,KAAA,GAAW;AAC1B,MAAI,OAAO,KAAK,QAAQ,YAAY,KAAK,QAAQ,QAAQ,MAAM,QAAQ,KAAK,IAAI,CAC9E,QAAO,WAAW,wBAAwB;EAE5C,MAAM,WAAW,KAAK;AACtB,MAAI,SAAS,iBAAiB,KAAA,EAC5B,KAAI,SAAS,iBAAiB,MAAM;AAClC,UAAO,MAAM,EAAE,GAAG,OAAO,KAAK;AAC9B,UAAO,OAAO,IAAI;SACb;AACL,OAAI,OAAO,SAAS,iBAAiB,YAAY,CAAC,SAAS,aAAa,MAAM,CAC5E,QAAO,WAAW,8CAA8C;GAElE,MAAM,SAAS,yBAAyB,QAAQ,SAAS,aAAa;AACtE,OAAI,OAAO,OAAO,MAChB,QAAO,WAAW,OAAO,QAAQ;AAEnC,UAAO,MAAM,OAAO,OAAO;;;AAKjC,KAAI,KAAK,YAAY,KAAA,GAAW;AAC9B,MAAI,OAAO,KAAK,YAAY,YAAY,KAAK,YAAY,QAAQ,MAAM,QAAQ,KAAK,QAAQ,CAC1F,QAAO,WAAW,4BAA4B;EAEhD,MAAM,SAAS,oBAAoB,UAAU,KAAK,QAAQ;AAC1D,MAAI,CAAC,OAAO,QACV,QAAO,WAAW,OAAO,MAAM,OAAO,KAAK,MAAM,EAAE,QAAQ,CAAC,KAAK,KAAK,CAAC;AAEzE,SAAO,UAAU,OAAO;;AAG1B,KACE,KAAK,YAAY,KAAA,KACjB,OAAO,KAAK,YAAY,YACxB,KAAK,YAAY,QACjB,CAAC,MAAM,QAAQ,KAAK,QAAQ,EAC5B;EACA,MAAM,UAAU,KAAK;AACrB,MAAI,QAAQ,8BAA8B,KAAA,KAAa,QAAQ,uBAAuB,KAAA,GAAW;GAC/F,MAAM,eAAe,mCAAmC,QAAQ;IAC9D,GAAI,QAAQ,8BAA8B,KAAA,IACtC,EAAE,2BAA2B,QAAQ,2BAA2B,GAChE,EAAE;IACN,GAAI,QAAQ,uBAAuB,KAAA,IAC/B,EAAE,oBAAoB,QAAQ,oBAAoB,GAClD,EAAE;IACP,CAAC;AACF,OAAI,aAAa,OAAO,MACtB,QAAO,WAAW,aAAa,QAAQ;;;AAM7C,KAAI,KAAK,WAAW;EAClB,MAAM,WAAW,IAAI,oBAAoB;AACzC,OAAK,MAAM,CAAC,KAAK,WAAW,OAAO,QAAQ,KAAK,UAAU,CACxD,KACE,WAAW,KAAA,KACX,OAAO,WAAW,YAClB,OAAO,MAAM,IACb,CAAC,yBAAyB,OAAO,CAEjC,OAAM,SAAS,WAAW,KAAK,QAAQ,EAAE,aAAa,WAAW,CAAC;;AAQxE,KAAI,KAAK,mBAAmB,OAAO,KAAK,oBAAoB,YAAY,CAAC,MAAM,QAAQ,KAAK,gBAAgB,EAAE;EAC5G,MAAM,eAAgB,OAAmE,aAAa,EAAE;AACxG,OAAK,MAAM,CAAC,UAAU,QAAQ,OAAO,QAAQ,KAAK,gBAA2C,EAAE;AAC7F,OAAI,CAAC,YAAY,OAAO,aAAa,SAAU;AAC/C,OAAI,QAAQ,MAAM;AAChB,WAAO,aAAa;AACpB;;AAEF,OAAI,CAAC,OAAO,OAAO,QAAQ,YAAY,MAAM,QAAQ,IAAI,CAAE;GAC3D,MAAM,OAAQ,aAAa,aAAa,EAAE;GAC1C,MAAM,QAAQ;AACd,QAAK,MAAM,SAAS;IAAC;IAAU;IAAW;IAAU;IAAe,CACjE,KAAI,MAAM,WAAW,QAAQ,MAAM,WAAW,GAC5C,QAAO,KAAK;YACH,OAAO,MAAM,WAAW,UAAU;IAC3C,MAAM,UAAW,MAAM,OAAkB,MAAM;AAC/C,QAAI,UAAU,YAAY,yBAAyB,QAAQ,CACzD;AAEF,SAAK,SAAS;;AAGlB,OAAI,MAAM,UAAU,KAClB,QAAO,KAAK;YACH,MAAM,SAAS,OAAO,MAAM,UAAU,YAAY,CAAC,MAAM,QAAQ,MAAM,MAAM,CACtF,MAAK,QAAQ;IAAE,GAAI,KAAK,SAAoC,EAAE;IAAG,GAAI,MAAM;IAAmC;AAEhH,OAAI,MAAM,YAAY,KACpB,QAAO,KAAK;YACH,MAAM,WAAW,OAAO,MAAM,YAAY,YAAY,CAAC,MAAM,QAAQ,MAAM,QAAQ,CAC5F,MAAK,UAAU;IAAE,GAAI,KAAK,WAAsC,EAAE;IAAG,GAAI,MAAM;IAAqC;AAEtH,gBAAa,YAAY;;AAE1B,SAAmE,YAAY;;AAIlF,KAAI,KAAK,QAAQ,KAAA,GAAW;AAC1B,SAAO,QAAQ,OAAO,SAAS,EAAE;AACjC,SAAO,MAAM,QAAQ,OAAO,MAAM,SAAS,EAAE;AAC5C,SAAO,MAAM,MAAkC,QAAQ,oBACtD,OAAO,MAAM,MAAM,OACnB,KAAK,IACN;;AAEH,KAAI,KAAK,QAAQ,KAAA,GAAW;AAC1B,SAAO,WAAW,OAAO,YAAY,EAAE;AACtC,SAAO,SAAqC,MAAM,oBACjD,OAAO,SAAS,KAChB,KAAK,IACN;;AAEH,KAAI,KAAK,UAAU,KAAA,GAAW;EAC5B,MAAM,SAAS,kBAAkB,UAAU,KAAK,MAAM;AACtD,MAAI,CAAC,OAAO,QACV,QAAO,WAAW,OAAO,MAAM,OAAO,KAAK,MAAM,EAAE,QAAQ,CAAC,KAAK,KAAK,CAAC;AAEzE,SAAO,QAAQ,OAAO;;CAGxB,MAAM,gBAAgB,mBAAmB,QAAQ,KAAgC;AACjF,KAAI,cACF,QAAO,WAAW,cAAc;AAGlC,KAAI,KAAK,WAAW,KAAA,GAAW;AAC7B,MAAI,CAAC,KAAK,UAAU,OAAO,KAAK,WAAW,YAAY,MAAM,QAAQ,KAAK,OAAO,CAC/E,QAAO,WAAW,2BAA2B;EAE/C,MAAM,eAAe,uBAAuB,QAAQ,KAAK,OAAkC;AAC3F,MAAI,aAAa,OAAO,MACtB,QAAO,WAAW,aAAa,QAAQ;;AAI3C,KAAI,KAAK,aAAa,KAAA,GAAW;AAC/B,MAAI,CAAC,MAAM,QAAQ,KAAK,SAAS,CAC/B,QAAO,WAAW,4BAA4B;EAEhD,MAAM,SAAS,qBAAqB,UAAU,KAAK,SAAS;AAC5D,MAAI,CAAC,OAAO,QACV,QAAO,WAAW,OAAO,MAAM,OAAO,KAAK,MAAM,EAAE,QAAQ,CAAC,KAAK,KAAK,CAAC;AAEzE,SAAO,WAAW,OAAO;;AAG3B,KAAI,KAAK,QAAQ,KAAA,EACf,KAAI,KAAK,QAAQ,KACf,QAAO,OAAO;UACL,OAAO,KAAK,QAAQ,YAAY,MAAM,QAAQ,KAAK,IAAI,CAChE,QAAO,WAAW,wBAAwB;MACrC;EACL,MAAM,SAAS,gBAAgB,UAAU,KAAK,IAAI;AAClD,MAAI,CAAC,OAAO,QACV,QAAO,WAAW,OAAO,MAAM,OAAO,KAAK,MAAM,EAAE,QAAQ,CAAC,KAAK,KAAK,CAAC;AAEzE,MAAI,OAAO,SAAS,KAAA,EAClB,QAAO,OAAO;OACT;GACL,MAAM,OAAO,EAAE,GAAG,OAAO,MAAM;AAC/B,OAAI,KAAK,QACP,MAAK,UAAU,OAAO,YACpB,OAAO,QAAQ,KAAK,QAAQ,CAAC,KAAK,CAAC,MAAM,YAAY,CACnD,MACA,gCAAgC,OAAkC,CACnE,CAAC,CACH;AAEH,UAAO,MAAM;;;AAKnB,QAAO;;;;;;;AAQT,SAAgB,0BAA0B,QAAgB,MAAwB;AAChF,KAAI,KAAK,YAAY,KAAA,EAAW,QAAO;AACvC,KAAI;EACF,MAAM,OAAO,mBAAmB,EAAE,YAAY,OAAO,SAAS,MAAM,CAAC;AACrE,8BAA4B,KAAK;AACjC,6BAA2B;GACzB,KAAK;GACL;GACA,MAAM,OAAO,SAAS,QAAQ;GAC/B,CAAC;UACK,KAAK;AAEZ,SAAO,WADS,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI,CACtC;;AAE5B,QAAO"}

package/dist/src/gateway/hono/routes/config-patch/result.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"result.js","names":[],"sources":["../../../../../../src/gateway/hono/routes/config-patch/result.ts"],"sourcesContent":["/**\n * Shared result type for fallible `PATCH /api/config` section patchers.\n *\n * Patchers that can reject malformed input return `{ ok: false, status,\n * error }`; the route dispatcher converts that into `c.json(error, status)`.\n * Patchers that never fail (agents, channels) return `void` instead.\n */\nexport type PatchResult = { ok: true } | { ok: false; status: number; error: { message: string } };\n\nexport const PATCH_OK: PatchResult = { ok: true };\n\nexport function patchError(message: string, status = 400): PatchResult {\n  return { ok: false, status, error: { message } };\n}\n"],"mappings":";AASA,MAAa,WAAwB,EAAE,IAAI,MAAM;AAEjD,SAAgB,WAAW,SAAiB,SAAS,KAAkB;AACrE,QAAO;EAAE,IAAI;EAAO;EAAQ,OAAO,EAAE,SAAS;EAAE"}

package/dist/src/gateway/hono/routes/config.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"config.js","names":[],"sources":["../../../../../src/gateway/hono/routes/config.ts"],"sourcesContent":["import type { Context, Hono } from 'hono';\n\nimport type { Config } from '../../../config/schema.js';\nimport { buildSafeWebConfigPayload } from '../lib/config-payload.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\nimport {\n  applyAgentsPatch,\n  applyChannelsPatch,\n  applyGatewayPatch,\n  applyMiscPatch,\n  validateGatewayAfterPatch,\n} from './config-patch/index.js';\n\nfunction localeFromRequest(c: { req: { query(name: string): string | undefined; header(name: string): string | undefined } }): string | undefined {\n  return c.req.query('locale') ?? c.req.header('X-XOPC-Locale') ?? c.req.header('Accept-Language')?.split(',')[0];\n}\n\nexport function registerConfigRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  const { service, strictRateLimitMiddleware } = deps;\n\n  authenticated.post('/api/config/reload', strictRateLimitMiddleware, async (c) => {\n    const result = await service.reloadConfig();\n    return c.json({ ok: true, payload: result });\n  });\n\n  authenticated.post('/api/heartbeat/trigger', strictRateLimitMiddleware, async (c) => {\n    let reason = 'manual';\n    try {\n      const body = await c.req.json();\n      if (body && typeof body === 'object' && typeof (body as { reason?: unknown }).reason === 'string') {\n        const r = (body as { reason: string }).reason.trim();\n        if (r) reason = r.slice(0, 120);\n      }\n    } catch {\n      /* empty or invalid body */\n    }\n    service.requestHeartbeatNow({ reason });\n    return c.json({ ok: true, payload: { scheduled: true } });\n  });\n\n  authenticated.get('/api/config', async (c) => {\n    const safeConfig = await buildSafeWebConfigPayload(service, { locale: localeFromRequest(c) });\n    return c.json({ ok: true, payload: { config: safeConfig } });\n  });\n\n  // PATCH /api/config — section patchers run sequentially against the live\n  // config object (mutate-in-place is intentional: the route handler reads\n  // `service.currentConfig` and rewrites it through `saveConfig`). Each\n  // patcher only touches the keys it owns and returns `{ ok: false }` with a\n  // 400 body when validation fails; we surface the first failure verbatim.\n  authenticated.patch('/api/config', strictRateLimitMiddleware, async (c) => {\n    const body = await c.req.json();\n    const config: Config = service.currentConfig as Config;\n\n    applyAgentsPatch(config, body);\n    applyChannelsPatch(config, body);\n\n    const gatewayResult = applyGatewayPatch(config, body);\n    if (gatewayResult.ok === false) {\n      return c.json({ ok: false, error: gatewayResult.error }, gatewayResult.status as 400 | 500);\n    }\n\n    const miscResult = await applyMiscPatch(config, body);\n    if (miscResult.ok === false) {\n      return c.json({ ok: false, error: miscResult.error }, miscResult.status as 400 | 500);\n    }\n\n    const finalGwCheck = validateGatewayAfterPatch(config, body);\n    if (finalGwCheck.ok === false) {\n      return c.json({ ok: false, error: finalGwCheck.error }, finalGwCheck.status as 400 | 500);\n    }\n\n    const result = await service.saveConfig(config);\n    if (!result.saved) {\n      return c.json({ ok: false, error: result.error }, 500);\n    }\n\n    if (body.gateway?.heartbeat !== undefined && typeof body.gateway.heartbeat === 'object') {\n      service.reloadHeartbeatFromCurrentConfig();\n    }\n\n    const safeConfig = await buildSafeWebConfigPayload(service, { locale: localeFromRequest(c) });\n    return c.json({ ok: true, payload: { config: safeConfig } });\n  });\n\n  const revealGatewayAuthSecretHandler = async (c: Context) => {\n    const field = await resolveRevealGatewayAuthField(c);\n    if (!field) {\n      return c.json({ ok: false, error: { message: 'field must be token or password' } }, 400);\n    }\n    const config = service.currentConfig as Config;\n    const secret =\n      field === 'token'\n        ? config.gateway?.auth?.token?.trim() || null\n        : config.gateway?.auth?.password?.trim() || null;\n    return c.json({\n      ok: true,\n      payload: { field, secret, source: secret ? ('config' as const) : ('none' as const) },\n    });\n  };\n\n  /**\n   * POST /api/gateway/reveal-auth-secret/:field — preferred; no JSON body required.\n   * POST /api/gateway/reveal-auth-secret — legacy JSON body `{ field: \"token\" | \"password\" }`.\n   */\n  authenticated.post(\n    '/api/gateway/reveal-auth-secret/:field',\n    strictRateLimitMiddleware,\n    revealGatewayAuthSecretHandler,\n  );\n  authenticated.post('/api/gateway/reveal-auth-secret', strictRateLimitMiddleware, revealGatewayAuthSecretHandler);\n\n  /** POST /api/agents/browser/reveal-cloud-api-key — plaintext browser cloud apiKey from config only. */\n  authenticated.post('/api/agents/browser/reveal-cloud-api-key', strictRateLimitMiddleware, async (c) => {\n    const config = service.currentConfig as Config;\n    const apiKey = config.browser?.cloud?.apiKey?.trim() || null;\n    return c.json({\n      ok: true,\n      payload: { apiKey, source: apiKey ? ('config' as const) : ('none' as const) },\n    });\n  });\n\n  /** POST /api/tools/web/reveal-search-api-key — plaintext search provider apiKey by index. */\n  authenticated.post('/api/tools/web/reveal-search-api-key', strictRateLimitMiddleware, async (c) => {\n    let index = -1;\n    try {\n      const body = await c.req.json();\n      if (body && typeof body === 'object' && typeof (body as { index?: unknown }).index === 'number') {\n        index = Math.floor((body as { index: number }).index);\n      }\n    } catch {\n      index = -1;\n    }\n    const providers = service.currentConfig.tools?.web?.search?.providers ?? [];\n    if (index < 0 || index >= providers.length) {\n      return c.json({ ok: false, error: { message: 'Invalid provider index' } }, 400);\n    }\n    const apiKey = providers[index]?.apiKey?.trim() || null;\n    return c.json({\n      ok: true,\n      payload: { index, apiKey, source: apiKey ? ('config' as const) : ('none' as const) },\n    });\n  });\n}\n\nfunction normalizeRevealGatewayAuthField(raw: unknown): 'token' | 'password' | null {\n  return raw === 'token' || raw === 'password' ? raw : null;\n}\n\nasync function resolveRevealGatewayAuthField(c: Context): Promise<'token' | 'password' | null> {\n  const fromPath = normalizeRevealGatewayAuthField(c.req.param('field'));\n  if (fromPath) return fromPath;\n\n  const fromQuery = normalizeRevealGatewayAuthField(c.req.query('field'));\n  if (fromQuery) return fromQuery;\n\n  try {\n    const body = await c.req.json();\n    return normalizeRevealGatewayAuthField(\n      body && typeof body === 'object' && !Array.isArray(body)\n        ? (body as { field?: unknown }).field\n        : undefined,\n    );\n  } catch {\n    return null;\n  }\n}\n"],"mappings":";;;;;;;AAaA,SAAS,kBAAkB,GAAuH;AAChJ,QAAO,EAAE,IAAI,MAAM,SAAS,IAAI,EAAE,IAAI,OAAO,gBAAgB,IAAI,EAAE,IAAI,OAAO,kBAAkB,EAAE,MAAM,IAAI,CAAC;;AAG/G,SAAgB,qBAAqB,eAAqB,MAAoC;CAC5F,MAAM,EAAE,SAAS,8BAA8B;AAE/C,eAAc,KAAK,sBAAsB,2BAA2B,OAAO,MAAM;EAC/E,MAAM,SAAS,MAAM,QAAQ,cAAc;AAC3C,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;GAAQ,CAAC;GAC5C;AAEF,eAAc,KAAK,0BAA0B,2BAA2B,OAAO,MAAM;EACnF,IAAI,SAAS;AACb,MAAI;GACF,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM;AAC/B,OAAI,QAAQ,OAAO,SAAS,YAAY,OAAQ,KAA8B,WAAW,UAAU;IACjG,MAAM,IAAK,KAA4B,OAAO,MAAM;AACpD,QAAI,EAAG,UAAS,EAAE,MAAM,GAAG,IAAI;;UAE3B;AAGR,UAAQ,oBAAoB,EAAE,QAAQ,CAAC;AACvC,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,WAAW,MAAM;GAAE,CAAC;GACzD;AAEF,eAAc,IAAI,eAAe,OAAO,MAAM;EAC5C,MAAM,aAAa,MAAM,0BAA0B,SAAS,EAAE,QAAQ,kBAAkB,EAAE,EAAE,CAAC;AAC7F,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,QAAQ,YAAY;GAAE,CAAC;GAC5D;AAOF,eAAc,MAAM,eAAe,2BAA2B,OAAO,MAAM;EACzE,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM;EAC/B,MAAM,SAAiB,QAAQ;AAE/B,mBAAiB,QAAQ,KAAK;AAC9B,qBAAmB,QAAQ,KAAK;EAEhC,MAAM,gBAAgB,kBAAkB,QAAQ,KAAK;AACrD,MAAI,cAAc,OAAO,MACvB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,cAAc;GAAO,EAAE,cAAc,OAAoB;EAG7F,MAAM,aAAa,MAAM,eAAe,QAAQ,KAAK;AACrD,MAAI,WAAW,OAAO,MACpB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,WAAW;GAAO,EAAE,WAAW,OAAoB;EAGvF,MAAM,eAAe,0BAA0B,QAAQ,KAAK;AAC5D,MAAI,aAAa,OAAO,MACtB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,aAAa;GAAO,EAAE,aAAa,OAAoB;EAG3F,MAAM,SAAS,MAAM,QAAQ,WAAW,OAAO;AAC/C,MAAI,CAAC,OAAO,MACV,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,OAAO;GAAO,EAAE,IAAI;AAGxD,MAAI,KAAK,SAAS,cAAc,KAAA,KAAa,OAAO,KAAK,QAAQ,cAAc,SAC7E,SAAQ,kCAAkC;EAG5C,MAAM,aAAa,MAAM,0BAA0B,SAAS,EAAE,QAAQ,kBAAkB,EAAE,EAAE,CAAC;AAC7F,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,QAAQ,YAAY;GAAE,CAAC;GAC5D;CAEF,MAAM,iCAAiC,OAAO,MAAe;EAC3D,MAAM,QAAQ,MAAM,8BAA8B,EAAE;AACpD,MAAI,CAAC,MACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,mCAAmC;GAAE,EAAE,IAAI;EAE1F,MAAM,SAAS,QAAQ;EACvB,MAAM,SACJ,UAAU,UACN,OAAO,SAAS,MAAM,OAAO,MAAM,IAAI,OACvC,OAAO,SAAS,MAAM,UAAU,MAAM,IAAI;AAChD,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IAAE;IAAO;IAAQ,QAAQ,SAAU,WAAsB;IAAkB;GACrF,CAAC;;;;;;AAOJ,eAAc,KACZ,0CACA,2BACA,+BACD;AACD,eAAc,KAAK,mCAAmC,2BAA2B,+BAA+B;;AAGhH,eAAc,KAAK,4CAA4C,2BAA2B,OAAO,MAAM;EAErG,MAAM,SADS,QAAQ,cACD,SAAS,OAAO,QAAQ,MAAM,IAAI;AACxD,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IAAE;IAAQ,QAAQ,SAAU,WAAsB;IAAkB;GAC9E,CAAC;GACF;;AAGF,eAAc,KAAK,wCAAwC,2BAA2B,OAAO,MAAM;EACjG,IAAI,QAAQ;AACZ,MAAI;GACF,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM;AAC/B,OAAI,QAAQ,OAAO,SAAS,YAAY,OAAQ,KAA6B,UAAU,SACrF,SAAQ,KAAK,MAAO,KAA2B,MAAM;UAEjD;AACN,WAAQ;;EAEV,MAAM,YAAY,QAAQ,cAAc,OAAO,KAAK,QAAQ,aAAa,EAAE;AAC3E,MAAI,QAAQ,KAAK,SAAS,UAAU,OAClC,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,0BAA0B;GAAE,EAAE,IAAI;EAEjF,MAAM,SAAS,UAAU,QAAQ,QAAQ,MAAM,IAAI;AACnD,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IAAE;IAAO;IAAQ,QAAQ,SAAU,WAAsB;IAAkB;GACrF,CAAC;GACF;;AAGJ,SAAS,gCAAgC,KAA2C;AAClF,QAAO,QAAQ,WAAW,QAAQ,aAAa,MAAM;;AAGvD,eAAe,8BAA8B,GAAkD;CAC7F,MAAM,WAAW,gCAAgC,EAAE,IAAI,MAAM,QAAQ,CAAC;AACtE,KAAI,SAAU,QAAO;CAErB,MAAM,YAAY,gCAAgC,EAAE,IAAI,MAAM,QAAQ,CAAC;AACvE,KAAI,UAAW,QAAO;AAEtB,KAAI;EACF,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM;AAC/B,SAAO,gCACL,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,GACnD,KAA6B,QAC9B,KAAA,EACL;SACK;AACN,SAAO"}

package/dist/src/gateway/hono/routes/connectors.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"connectors.js","names":[],"sources":["../../../../../src/gateway/hono/routes/connectors.ts"],"sourcesContent":["import type { Hono } from 'hono';\n\nimport type { Config } from '../../../config/schema.js';\nimport { startConnectorAuthorization } from '../../../connectors/auth-provider-registry.js';\nimport { getConnectorDefinition, listConnectorCatalog, listConnectorProviders } from '../../../connectors/catalog.js';\nimport { listComposioConnectorCatalog } from '../../../connectors/composio-catalog.js';\nimport { composioLogoResponse } from '../../../connectors/composio-logo.js';\nimport { syncComposioResultToMemory } from '../../../connectors/connector-memory-sync.js';\nimport {\n  executeComposioTool,\n  getComposioInstallationPolicy,\n  getComposioToolkitScope,\n  listComposioConnections,\n  inspectComposioConnectorHealth,\n  listComposioTools,\n  refreshComposioConnection,\n  revokeComposioConnection,\n  setComposioToolkitScope,\n  updateComposioConnection,\n  updateComposioInstallationPolicy,\n  type ComposioScope,\n} from '../../../connectors/composio.js';\nimport { appendComposioTriggerEvent, listComposioTriggerEvents } from '../../../connectors/composio-triggers.js';\nimport { previewConnectorDefinition, testConnectorInstance } from '../../../connectors/health.js';\nimport { installConnector, installConnectorDefinition, uninstallConnector, updateConnectorConfig } from '../../../connectors/install.js';\nimport { getConnectorInstance, listConnectorInstances } from '../../../connectors/instances.js';\nimport { setConnectorEnabled } from '../../../connectors/lifecycle.js';\nimport { isConnectorRegistrySource, listConnectorRegistries, searchConnectorRegistries } from '../../../connectors/registries/search.js';\nimport { createConnectorSetupSecretRequest, submitConnectorSetupSecret } from '../../../connectors/setup-secrets.js';\nimport { recordConnectorHealthUsage } from '../../../connectors/usage.js';\nimport type { ConnectorDefinition, ConnectorInstallInput } from '../../../connectors/types.js';\nimport {\n  decideConnectorApproval,\n  getConnectorApproval,\n  listConnectorApprovals,\n} from '../../../storage/sqlite/index.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\n\nfunction errorMessage(error: unknown): string {\n  return error instanceof Error ? error.message : String(error);\n}\n\nexport function registerConnectorRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  const { service, strictRateLimitMiddleware } = deps;\n\n  authenticated.get('/api/connectors/catalog', (c) => {\n    return c.json({\n      ok: true,\n      payload: {\n        connectors: listConnectorCatalog(),\n        providers: listConnectorProviders().map((provider) => ({\n          id: provider.id,\n          displayName: provider.displayName,\n        })),\n        registries: listConnectorRegistries(),\n      },\n    });\n  });\n\n  authenticated.get('/api/connectors/installed', (c) => {\n    const config = service.currentConfig as Config;\n    return c.json({ ok: true, payload: { instances: listConnectorInstances(config) } });\n  });\n\n  authenticated.get('/api/connectors/registry/search', async (c) => {\n    const query = c.req.query('q') ?? c.req.query('query') ?? '';\n    const sourceParam = c.req.query('source') ?? 'all';\n    const source = sourceParam !== 'all' && isConnectorRegistrySource(sourceParam) ? sourceParam : 'all';\n    const page = Number(c.req.query('page') ?? '1');\n    const pageSize = Number(c.req.query('pageSize') ?? '24');\n    const browse = c.req.query('browse') === '1' || c.req.query('browse') === 'true';\n    const results = await searchConnectorRegistries({ query, source, page, pageSize, browse });\n    return c.json({ ok: true, payload: { results, connectors: results.flatMap((result) => result.connectors) } });\n  });\n\n  authenticated.post('/api/connectors/setup/request-secret', strictRateLimitMiddleware, async (c) => {\n    const body = await c.req.json().catch(() => ({}));\n    const key = body && typeof body === 'object' && !Array.isArray(body) && typeof body.key === 'string'\n      ? body.key.trim()\n      : '';\n    if (!key) {\n      return c.json({ ok: false, error: 'Missing secret key.' }, 400);\n    }\n    const label = body && typeof body === 'object' && !Array.isArray(body) && typeof body.label === 'string'\n      ? body.label\n      : undefined;\n    return c.json({ ok: true, payload: { request: createConnectorSetupSecretRequest({ key, label }) } });\n  });\n\n  authenticated.post('/api/connectors/setup/submit-secret', strictRateLimitMiddleware, async (c) => {\n    const body = await c.req.json().catch(() => ({}));\n    const ref = body && typeof body === 'object' && !Array.isArray(body) && typeof body.ref === 'string'\n      ? body.ref\n      : '';\n    const value = body && typeof body === 'object' && !Array.isArray(body) && typeof body.value === 'string'\n      ? body.value\n      : '';\n    const accepted = submitConnectorSetupSecret(ref, value);\n    return c.json({ ok: accepted, payload: { accepted }, error: accepted ? undefined : 'Unknown, expired, or empty secret.' }, accepted ? 200 : 400);\n  });\n\n  authenticated.get('/api/connectors/composio/connections', async (c) => {\n    try {\n      return c.json({ ok: true, payload: { connections: await listComposioConnections() } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.patch('/api/connectors/composio/connections/:id', strictRateLimitMiddleware, async (c) => {\n    const body = await c.req.json().catch(() => ({}));\n    const row = body && typeof body === 'object' && !Array.isArray(body) ? body as Record<string, unknown> : {};\n    try {\n      const connection = updateComposioConnection(c.req.param('id'), {\n        alias: typeof row.alias === 'string' ? row.alias : undefined,\n        isDefault: typeof row.isDefault === 'boolean' ? row.isDefault : undefined,\n      });\n      return c.json({ ok: true, payload: { connection } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 404);\n    }\n  });\n\n  authenticated.post('/api/connectors/composio/connections/:id/refresh', strictRateLimitMiddleware, async (c) => {\n    try {\n      await refreshComposioConnection(c.req.param('id'));\n      return c.json({ ok: true, payload: { refreshed: true } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.delete('/api/connectors/composio/connections/:id', strictRateLimitMiddleware, async (c) => {\n    try {\n      await revokeComposioConnection(c.req.param('id'));\n      return c.json({ ok: true, payload: { revoked: true } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.get('/api/connectors/composio/catalog', async (c) => {\n    try {\n      const refresh = c.req.query('refresh') === '1' || c.req.query('refresh') === 'true';\n      return c.json({ ok: true, payload: await listComposioConnectorCatalog({ refresh }) });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.get('/api/connectors/composio/:toolkit/logo', async (c) => {\n    try {\n      return await composioLogoResponse(c.req.param('toolkit'));\n    } catch {\n      return c.json({ ok: false, error: 'Connector logo is unavailable.' }, 404);\n    }\n  });\n\n  authenticated.get('/api/connectors/composio/:toolkit/tools', async (c) => {\n    try {\n      const toolkit = c.req.param('toolkit');\n      return c.json({ ok: true, payload: { tools: await listComposioTools(toolkit, service.currentConfig as Config) } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.get('/api/connectors/composio/:toolkit/scope', async (c) => {\n    const toolkit = c.req.param('toolkit');\n    return c.json({ ok: true, payload: { toolkit, scope: getComposioToolkitScope(service.currentConfig as Config, toolkit) } });\n  });\n\n  authenticated.post('/api/connectors/composio/:toolkit/scope', strictRateLimitMiddleware, async (c) => {\n    const toolkit = c.req.param('toolkit');\n    const body = await c.req.json().catch(() => ({}));\n    const scope = body && typeof body === 'object' && !Array.isArray(body) && typeof body.scope === 'string'\n      ? body.scope\n      : '';\n    if (scope !== 'read' && scope !== 'write' && scope !== 'admin') {\n      return c.json({ ok: false, error: 'Scope must be read, write, or admin.' }, 400);\n    }\n    const config = service.currentConfig as Config;\n    try {\n      setComposioToolkitScope(config, toolkit, scope as ComposioScope);\n      const saved = await service.saveConfig(config);\n      if (!saved.saved) return c.json({ ok: false, error: saved.error }, 500);\n      return c.json({ ok: true, payload: { toolkit, scope } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.post('/api/connectors/composio/tools/:slug/execute', strictRateLimitMiddleware, async (c) => {\n    const body = await c.req.json().catch(() => ({}));\n    try {\n      const slug = c.req.param('slug');\n      const args = body && typeof body === 'object' && !Array.isArray(body) ? body.arguments : undefined;\n      return c.json({ ok: true, payload: { result: await executeComposioTool({ slug, arguments: args, config: service.currentConfig as Config }) } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.post('/api/connectors/composio/triggers', strictRateLimitMiddleware, async (c) => {\n    const body = await c.req.json().catch(() => ({}));\n    try {\n      const event = await appendComposioTriggerEvent(service.currentConfig as Config, body);\n      return c.json({ ok: true, payload: { event } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.get('/api/connectors/composio/triggers', async (c) => {\n    const limit = Number(c.req.query('limit') ?? '50');\n    try {\n      const events = await listComposioTriggerEvents(service.currentConfig as Config, limit);\n      return c.json({ ok: true, payload: { events } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.get('/api/connectors/:id', (c) => {\n    const connectorId = c.req.param('id');\n    const connector = getConnectorDefinition(connectorId);\n    if (!connector) {\n      return c.json({ ok: false, error: `Unknown connector: ${connectorId}` }, 404);\n    }\n    const config = service.currentConfig as Config;\n    const instances = listConnectorInstances(config).filter((instance) => instance.connectorId === connectorId);\n    return c.json({ ok: true, payload: { connector, instances } });\n  });\n\n  authenticated.post('/api/connectors/preview', strictRateLimitMiddleware, async (c) => {\n    const body = await c.req.json().catch(() => ({}));\n    const definition = body && typeof body === 'object' && !Array.isArray(body) && body.definition && typeof body.definition === 'object' && !Array.isArray(body.definition)\n      ? body.definition as ConnectorDefinition\n      : undefined;\n    if (!definition) {\n      return c.json({ ok: false, error: 'Missing connector definition.' }, 400);\n    }\n    const input: ConnectorInstallInput = body && typeof body === 'object' && !Array.isArray(body) ? body : {};\n    try {\n      const preview = await previewConnectorDefinition(service.currentConfig as Config, definition, input);\n      return c.json({ ok: true, payload: { preview } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.get('/api/connectors/composio/:toolkit/health', async (c) => {\n    const health = await inspectComposioConnectorHealth(c.req.param('toolkit'));\n    return c.json({ ok: health.status !== 'degraded', payload: { health } });\n  });\n\n  authenticated.post('/api/connectors/:id/memory-sync', strictRateLimitMiddleware, async (c) => {\n    const body = await c.req.json().catch(() => ({}));\n    const row = body && typeof body === 'object' && !Array.isArray(body) ? body as Record<string, unknown> : {};\n    const actionId = typeof row.actionId === 'string' ? row.actionId.trim() : '';\n    const agentId = typeof row.agentId === 'string' ? row.agentId.trim() : '';\n    if (!actionId || !agentId) return c.json({ ok: false, error: 'actionId and agentId are required.' }, 400);\n    try {\n      const result = await syncComposioResultToMemory({\n        config: service.currentConfig as Config,\n        connectorId: c.req.param('id'),\n        actionId,\n        agentId,\n        connectionId: typeof row.connectionId === 'string' ? row.connectionId : undefined,\n        arguments: row.arguments && typeof row.arguments === 'object' && !Array.isArray(row.arguments)\n          ? row.arguments as Record<string, unknown>\n          : {},\n      });\n      return c.json({ ok: true, payload: result });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.get('/api/connectors/composio/:toolkit/policy', (c) => {\n    const config = service.currentConfig as Config;\n    try {\n      const policy = getComposioInstallationPolicy(config, c.req.param('toolkit'));\n      const agents = config.agents.list.filter((agent) => agent.enabled).map((agent) => ({\n        id: agent.id,\n        name: agent.identity?.name ?? agent.id,\n      }));\n      return c.json({ ok: true, payload: { policy, agents } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.patch('/api/connectors/composio/:toolkit/policy', strictRateLimitMiddleware, async (c) => {\n    const body = await c.req.json().catch(() => ({}));\n    const row = body && typeof body === 'object' && !Array.isArray(body) ? body as Record<string, unknown> : {};\n    const rawConfirmationPolicy = row.confirmationPolicy;\n    if (rawConfirmationPolicy !== undefined && rawConfirmationPolicy !== 'never' && rawConfirmationPolicy !== 'writes' && rawConfirmationPolicy !== 'always') {\n      return c.json({ ok: false, error: 'Invalid confirmation policy.' }, 400);\n    }\n    const confirmationPolicy = rawConfirmationPolicy === 'never' || rawConfirmationPolicy === 'writes' || rawConfirmationPolicy === 'always'\n      ? rawConfirmationPolicy\n      : undefined;\n    const allowedAgentIds = Array.isArray(row.allowedAgentIds)\n      ? [...new Set(row.allowedAgentIds.filter((value): value is string => typeof value === 'string').map((value) => value.trim()).filter(Boolean))]\n      : undefined;\n    const selectedConnectionIds = Array.isArray(row.selectedConnectionIds)\n      ? [...new Set(row.selectedConnectionIds.filter((value): value is string => typeof value === 'string').map((value) => value.trim()).filter(Boolean))]\n      : undefined;\n    try {\n      const policy = updateComposioInstallationPolicy(service.currentConfig as Config, c.req.param('toolkit'), {\n        allowedAgentIds,\n        selectedConnectionIds,\n        confirmationPolicy,\n      });\n      return c.json({ ok: true, payload: { policy } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.get('/api/connectors/approvals', (c) => {\n    const status = c.req.query('status');\n    const allowedStatuses = new Set(['pending', 'approved', 'denied', 'expired', 'consumed']);\n    if (status && !allowedStatuses.has(status)) {\n      return c.json({ ok: false, error: 'Invalid approval status.' }, 400);\n    }\n    const principalId = c.req.query('principalId')?.trim() || 'local-owner';\n    const sessionKey = c.req.query('sessionKey')?.trim() || undefined;\n    const approvals = listConnectorApprovals({\n      principalId,\n      sessionKey,\n      status: status as 'pending' | 'approved' | 'denied' | 'expired' | 'consumed' | undefined,\n      limit: Number(c.req.query('limit') ?? '100'),\n    });\n    return c.json({ ok: true, payload: { approvals } });\n  });\n\n  authenticated.post('/api/connectors/approvals/respond', strictRateLimitMiddleware, async (c) => {\n    const body = await c.req.json().catch(() => ({}));\n    const record = body && typeof body === 'object' && !Array.isArray(body) ? body as Record<string, unknown> : {};\n    const id = typeof record.id === 'string' ? record.id.trim() : '';\n    const decision = record.decision;\n    if (!id || (decision !== 'approved' && decision !== 'denied')) {\n      return c.json({ ok: false, error: 'Approval id and an approved or denied decision are required.' }, 400);\n    }\n    const current = getConnectorApproval(id);\n    if (!current) return c.json({ ok: false, error: 'Connector approval not found.' }, 404);\n    const approval = decideConnectorApproval(id, decision);\n    if (!approval || approval.status !== decision) {\n      return c.json({ ok: false, error: `Connector approval is ${approval?.status ?? 'unavailable'}.`, payload: { approval } }, 409);\n    }\n    return c.json({ ok: true, payload: { approval } });\n  });\n\n  authenticated.post('/api/connectors/:id/auth/start', strictRateLimitMiddleware, async (c) => {\n    const connectorId = c.req.param('id');\n    const connector = getConnectorDefinition(connectorId);\n    if (!connector) {\n      return c.json({ ok: false, error: `Unknown connector: ${connectorId}` }, 404);\n    }\n    try {\n      const authorization = await startConnectorAuthorization(connector);\n      return c.json({ ok: true, payload: { authorization } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.post('/api/connectors/:id/install', strictRateLimitMiddleware, async (c) => {\n    const connectorId = c.req.param('id');\n    const body = await c.req.json().catch(() => ({}));\n    const input: ConnectorInstallInput = body && typeof body === 'object' && !Array.isArray(body) ? body : {};\n    const registryDefinition = body && typeof body === 'object' && !Array.isArray(body) && body.definition && typeof body.definition === 'object' && !Array.isArray(body.definition)\n      ? body.definition as ConnectorDefinition\n      : undefined;\n    const config = service.currentConfig as Config;\n    try {\n      const instance = registryDefinition?.id === connectorId\n        ? await installConnectorDefinition(config, registryDefinition, input)\n        : await installConnector(config, connectorId, input);\n      const saved = await service.saveConfig(config);\n      if (!saved.saved) {\n        return c.json({ ok: false, error: saved.error }, 500);\n      }\n      return c.json({ ok: true, payload: { instance } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.post('/api/connectors/:id/test', async (c) => {\n    const instanceId = c.req.param('id');\n    const config = service.currentConfig as Config;\n    const instance = getConnectorInstance(config, instanceId);\n    if (!instance) {\n      return c.json({ ok: false, error: `Connector instance not found: ${instanceId}` }, 404);\n    }\n    if (instance.materialized.type !== 'mcp') {\n      return c.json({ ok: false, error: `Connector type \"${instance.materialized.type}\" does not support MCP health checks.` }, 400);\n    }\n    try {\n      const result = await testConnectorInstance(config, instance.materialized.serverId);\n      recordConnectorHealthUsage(config, instance.instanceId, result);\n      const saved = await service.saveConfig(config);\n      if (!saved.saved) {\n        return c.json({ ok: false, error: saved.error }, 500);\n      }\n      return c.json({ ok: true, payload: result });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 500);\n    }\n  });\n\n  authenticated.post('/api/connectors/:id/config', strictRateLimitMiddleware, async (c) => {\n    const instanceId = c.req.param('id');\n    const body = await c.req.json().catch(() => ({}));\n    const input: ConnectorInstallInput = body && typeof body === 'object' && !Array.isArray(body) ? body : {};\n    const config = service.currentConfig as Config;\n    try {\n      const instance = updateConnectorConfig(config, instanceId, input);\n      const saved = await service.saveConfig(config);\n      if (!saved.saved) {\n        return c.json({ ok: false, error: saved.error }, 500);\n      }\n      return c.json({ ok: true, payload: { instance } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.post('/api/connectors/:id/enable', strictRateLimitMiddleware, async (c) => {\n    const instanceId = c.req.param('id');\n    const config = service.currentConfig as Config;\n    try {\n      const instance = setConnectorEnabled(config, instanceId, true);\n      const saved = await service.saveConfig(config);\n      if (!saved.saved) {\n        return c.json({ ok: false, error: saved.error }, 500);\n      }\n      return c.json({ ok: true, payload: { instance } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.post('/api/connectors/:id/disable', strictRateLimitMiddleware, async (c) => {\n    const instanceId = c.req.param('id');\n    const config = service.currentConfig as Config;\n    try {\n      const instance = setConnectorEnabled(config, instanceId, false);\n      const saved = await service.saveConfig(config);\n      if (!saved.saved) {\n        return c.json({ ok: false, error: saved.error }, 500);\n      }\n      return c.json({ ok: true, payload: { instance } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n\n  authenticated.delete('/api/connectors/:id', strictRateLimitMiddleware, async (c) => {\n    const instanceId = c.req.param('id');\n    const config = service.currentConfig as Config;\n    try {\n      const instance = uninstallConnector(config, instanceId);\n      const saved = await service.saveConfig(config);\n      if (!saved.saved) {\n        return c.json({ ok: false, error: saved.error }, 500);\n      }\n      return c.json({ ok: true, payload: { instance } });\n    } catch (error) {\n      return c.json({ ok: false, error: errorMessage(error) }, 400);\n    }\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAsCA,SAAS,aAAa,OAAwB;AAC5C,QAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;;AAG/D,SAAgB,wBAAwB,eAAqB,MAAoC;CAC/F,MAAM,EAAE,SAAS,8BAA8B;AAE/C,eAAc,IAAI,4BAA4B,MAAM;AAClD,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,YAAY,sBAAsB;IAClC,WAAW,wBAAwB,CAAC,KAAK,cAAc;KACrD,IAAI,SAAS;KACb,aAAa,SAAS;KACvB,EAAE;IACH,YAAY,yBAAyB;IACtC;GACF,CAAC;GACF;AAEF,eAAc,IAAI,8BAA8B,MAAM;EACpD,MAAM,SAAS,QAAQ;AACvB,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,WAAW,uBAAuB,OAAO,EAAE;GAAE,CAAC;GACnF;AAEF,eAAc,IAAI,mCAAmC,OAAO,MAAM;EAChE,MAAM,QAAQ,EAAE,IAAI,MAAM,IAAI,IAAI,EAAE,IAAI,MAAM,QAAQ,IAAI;EAC1D,MAAM,cAAc,EAAE,IAAI,MAAM,SAAS,IAAI;EAK7C,MAAM,UAAU,MAAM,0BAA0B;GAAE;GAAO,QAJ1C,gBAAgB,SAAS,0BAA0B,YAAY,GAAG,cAAc;GAI9B,MAHpD,OAAO,EAAE,IAAI,MAAM,OAAO,IAAI,IAG0B;GAAE,UAFtD,OAAO,EAAE,IAAI,MAAM,WAAW,IAAI,KAE4B;GAAE,QADlE,EAAE,IAAI,MAAM,SAAS,KAAK,OAAO,EAAE,IAAI,MAAM,SAAS,KAAK;GACe,CAAC;AAC1F,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;IAAE;IAAS,YAAY,QAAQ,SAAS,WAAW,OAAO,WAAW;IAAE;GAAE,CAAC;GAC7G;AAEF,eAAc,KAAK,wCAAwC,2BAA2B,OAAO,MAAM;EACjG,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,MAAM,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAI,OAAO,KAAK,QAAQ,WACxF,KAAK,IAAI,MAAM,GACf;AACJ,MAAI,CAAC,IACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAuB,EAAE,IAAI;EAEjE,MAAM,QAAQ,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAI,OAAO,KAAK,UAAU,WAC5F,KAAK,QACL,KAAA;AACJ,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,SAAS,kCAAkC;IAAE;IAAK;IAAO,CAAC,EAAE;GAAE,CAAC;GACpG;AAEF,eAAc,KAAK,uCAAuC,2BAA2B,OAAO,MAAM;EAChG,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EAOjD,MAAM,WAAW,2BANL,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAI,OAAO,KAAK,QAAQ,WACxF,KAAK,MACL,IACU,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAI,OAAO,KAAK,UAAU,WAC5F,KAAK,QACL,GACmD;AACvD,SAAO,EAAE,KAAK;GAAE,IAAI;GAAU,SAAS,EAAE,UAAU;GAAE,OAAO,WAAW,KAAA,IAAY;GAAsC,EAAE,WAAW,MAAM,IAAI;GAChJ;AAEF,eAAc,IAAI,wCAAwC,OAAO,MAAM;AACrE,MAAI;AACF,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,aAAa,MAAM,yBAAyB,EAAE;IAAE,CAAC;WAC/E,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,MAAM,4CAA4C,2BAA2B,OAAO,MAAM;EACtG,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,MAAM,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,GAAG,OAAkC,EAAE;AAC3G,MAAI;GACF,MAAM,aAAa,yBAAyB,EAAE,IAAI,MAAM,KAAK,EAAE;IAC7D,OAAO,OAAO,IAAI,UAAU,WAAW,IAAI,QAAQ,KAAA;IACnD,WAAW,OAAO,IAAI,cAAc,YAAY,IAAI,YAAY,KAAA;IACjE,CAAC;AACF,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,YAAY;IAAE,CAAC;WAC7C,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,KAAK,oDAAoD,2BAA2B,OAAO,MAAM;AAC7G,MAAI;AACF,SAAM,0BAA0B,EAAE,IAAI,MAAM,KAAK,CAAC;AAClD,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,WAAW,MAAM;IAAE,CAAC;WAClD,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,OAAO,4CAA4C,2BAA2B,OAAO,MAAM;AACvG,MAAI;AACF,SAAM,yBAAyB,EAAE,IAAI,MAAM,KAAK,CAAC;AACjD,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,SAAS,MAAM;IAAE,CAAC;WAChD,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,IAAI,oCAAoC,OAAO,MAAM;AACjE,MAAI;GACF,MAAM,UAAU,EAAE,IAAI,MAAM,UAAU,KAAK,OAAO,EAAE,IAAI,MAAM,UAAU,KAAK;AAC7E,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,MAAM,6BAA6B,EAAE,SAAS,CAAC;IAAE,CAAC;WAC9E,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,IAAI,0CAA0C,OAAO,MAAM;AACvE,MAAI;AACF,UAAO,MAAM,qBAAqB,EAAE,IAAI,MAAM,UAAU,CAAC;UACnD;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAAkC,EAAE,IAAI;;GAE5E;AAEF,eAAc,IAAI,2CAA2C,OAAO,MAAM;AACxE,MAAI;GACF,MAAM,UAAU,EAAE,IAAI,MAAM,UAAU;AACtC,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,OAAO,MAAM,kBAAkB,SAAS,QAAQ,cAAwB,EAAE;IAAE,CAAC;WAC3G,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,IAAI,2CAA2C,OAAO,MAAM;EACxE,MAAM,UAAU,EAAE,IAAI,MAAM,UAAU;AACtC,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;IAAE;IAAS,OAAO,wBAAwB,QAAQ,eAAyB,QAAQ;IAAE;GAAE,CAAC;GAC3H;AAEF,eAAc,KAAK,2CAA2C,2BAA2B,OAAO,MAAM;EACpG,MAAM,UAAU,EAAE,IAAI,MAAM,UAAU;EACtC,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,QAAQ,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAI,OAAO,KAAK,UAAU,WAC5F,KAAK,QACL;AACJ,MAAI,UAAU,UAAU,UAAU,WAAW,UAAU,QACrD,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAwC,EAAE,IAAI;EAElF,MAAM,SAAS,QAAQ;AACvB,MAAI;AACF,2BAAwB,QAAQ,SAAS,MAAuB;GAChE,MAAM,QAAQ,MAAM,QAAQ,WAAW,OAAO;AAC9C,OAAI,CAAC,MAAM,MAAO,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,MAAM;IAAO,EAAE,IAAI;AACvE,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS;KAAE;KAAS;KAAO;IAAE,CAAC;WACjD,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,KAAK,gDAAgD,2BAA2B,OAAO,MAAM;EACzG,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;AACjD,MAAI;GACF,MAAM,OAAO,EAAE,IAAI,MAAM,OAAO;GAChC,MAAM,OAAO,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,GAAG,KAAK,YAAY,KAAA;AACzF,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,QAAQ,MAAM,oBAAoB;KAAE;KAAM,WAAW;KAAM,QAAQ,QAAQ;KAAyB,CAAC,EAAE;IAAE,CAAC;WACxI,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,KAAK,qCAAqC,2BAA2B,OAAO,MAAM;EAC9F,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;AACjD,MAAI;GACF,MAAM,QAAQ,MAAM,2BAA2B,QAAQ,eAAyB,KAAK;AACrF,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,OAAO;IAAE,CAAC;WACxC,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,IAAI,qCAAqC,OAAO,MAAM;EAClE,MAAM,QAAQ,OAAO,EAAE,IAAI,MAAM,QAAQ,IAAI,KAAK;AAClD,MAAI;GACF,MAAM,SAAS,MAAM,0BAA0B,QAAQ,eAAyB,MAAM;AACtF,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,QAAQ;IAAE,CAAC;WACzC,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,IAAI,wBAAwB,MAAM;EAC9C,MAAM,cAAc,EAAE,IAAI,MAAM,KAAK;EACrC,MAAM,YAAY,uBAAuB,YAAY;AACrD,MAAI,CAAC,UACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,sBAAsB;GAAe,EAAE,IAAI;EAE/E,MAAM,SAAS,QAAQ;EACvB,MAAM,YAAY,uBAAuB,OAAO,CAAC,QAAQ,aAAa,SAAS,gBAAgB,YAAY;AAC3G,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;IAAE;IAAW;IAAW;GAAE,CAAC;GAC9D;AAEF,eAAc,KAAK,2BAA2B,2BAA2B,OAAO,MAAM;EACpF,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,aAAa,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAI,KAAK,cAAc,OAAO,KAAK,eAAe,YAAY,CAAC,MAAM,QAAQ,KAAK,WAAW,GACpK,KAAK,aACL,KAAA;AACJ,MAAI,CAAC,WACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAiC,EAAE,IAAI;EAE3E,MAAM,QAA+B,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,GAAG,OAAO,EAAE;AACzG,MAAI;GACF,MAAM,UAAU,MAAM,2BAA2B,QAAQ,eAAyB,YAAY,MAAM;AACpG,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,SAAS;IAAE,CAAC;WAC1C,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,IAAI,4CAA4C,OAAO,MAAM;EACzE,MAAM,SAAS,MAAM,+BAA+B,EAAE,IAAI,MAAM,UAAU,CAAC;AAC3E,SAAO,EAAE,KAAK;GAAE,IAAI,OAAO,WAAW;GAAY,SAAS,EAAE,QAAQ;GAAE,CAAC;GACxE;AAEF,eAAc,KAAK,mCAAmC,2BAA2B,OAAO,MAAM;EAC5F,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,MAAM,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,GAAG,OAAkC,EAAE;EAC3G,MAAM,WAAW,OAAO,IAAI,aAAa,WAAW,IAAI,SAAS,MAAM,GAAG;EAC1E,MAAM,UAAU,OAAO,IAAI,YAAY,WAAW,IAAI,QAAQ,MAAM,GAAG;AACvE,MAAI,CAAC,YAAY,CAAC,QAAS,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAsC,EAAE,IAAI;AACzG,MAAI;GACF,MAAM,SAAS,MAAM,2BAA2B;IAC9C,QAAQ,QAAQ;IAChB,aAAa,EAAE,IAAI,MAAM,KAAK;IAC9B;IACA;IACA,cAAc,OAAO,IAAI,iBAAiB,WAAW,IAAI,eAAe,KAAA;IACxE,WAAW,IAAI,aAAa,OAAO,IAAI,cAAc,YAAY,CAAC,MAAM,QAAQ,IAAI,UAAU,GAC1F,IAAI,YACJ,EAAE;IACP,CAAC;AACF,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS;IAAQ,CAAC;WACrC,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,IAAI,6CAA6C,MAAM;EACnE,MAAM,SAAS,QAAQ;AACvB,MAAI;GACF,MAAM,SAAS,8BAA8B,QAAQ,EAAE,IAAI,MAAM,UAAU,CAAC;GAC5E,MAAM,SAAS,OAAO,OAAO,KAAK,QAAQ,UAAU,MAAM,QAAQ,CAAC,KAAK,WAAW;IACjF,IAAI,MAAM;IACV,MAAM,MAAM,UAAU,QAAQ,MAAM;IACrC,EAAE;AACH,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS;KAAE;KAAQ;KAAQ;IAAE,CAAC;WACjD,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,MAAM,4CAA4C,2BAA2B,OAAO,MAAM;EACtG,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,MAAM,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,GAAG,OAAkC,EAAE;EAC3G,MAAM,wBAAwB,IAAI;AAClC,MAAI,0BAA0B,KAAA,KAAa,0BAA0B,WAAW,0BAA0B,YAAY,0BAA0B,SAC9I,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAgC,EAAE,IAAI;EAE1E,MAAM,qBAAqB,0BAA0B,WAAW,0BAA0B,YAAY,0BAA0B,WAC5H,wBACA,KAAA;EACJ,MAAM,kBAAkB,MAAM,QAAQ,IAAI,gBAAgB,GACtD,CAAC,GAAG,IAAI,IAAI,IAAI,gBAAgB,QAAQ,UAA2B,OAAO,UAAU,SAAS,CAAC,KAAK,UAAU,MAAM,MAAM,CAAC,CAAC,OAAO,QAAQ,CAAC,CAAC,GAC5I,KAAA;EACJ,MAAM,wBAAwB,MAAM,QAAQ,IAAI,sBAAsB,GAClE,CAAC,GAAG,IAAI,IAAI,IAAI,sBAAsB,QAAQ,UAA2B,OAAO,UAAU,SAAS,CAAC,KAAK,UAAU,MAAM,MAAM,CAAC,CAAC,OAAO,QAAQ,CAAC,CAAC,GAClJ,KAAA;AACJ,MAAI;GACF,MAAM,SAAS,iCAAiC,QAAQ,eAAyB,EAAE,IAAI,MAAM,UAAU,EAAE;IACvG;IACA;IACA;IACD,CAAC;AACF,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,QAAQ;IAAE,CAAC;WACzC,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,IAAI,8BAA8B,MAAM;EACpD,MAAM,SAAS,EAAE,IAAI,MAAM,SAAS;AAEpC,MAAI,UAAU,CAAC,IADa,IAAI;GAAC;GAAW;GAAY;GAAU;GAAW;GAAW,CAC1D,CAAC,IAAI,OAAO,CACxC,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAA4B,EAAE,IAAI;EAItE,MAAM,YAAY,uBAAuB;GACvC,aAHkB,EAAE,IAAI,MAAM,cAAc,EAAE,MAAM,IAAI;GAIxD,YAHiB,EAAE,IAAI,MAAM,aAAa,EAAE,MAAM,IAAI,KAAA;GAI9C;GACR,OAAO,OAAO,EAAE,IAAI,MAAM,QAAQ,IAAI,MAAM;GAC7C,CAAC;AACF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,WAAW;GAAE,CAAC;GACnD;AAEF,eAAc,KAAK,qCAAqC,2BAA2B,OAAO,MAAM;EAC9F,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,SAAS,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,GAAG,OAAkC,EAAE;EAC9G,MAAM,KAAK,OAAO,OAAO,OAAO,WAAW,OAAO,GAAG,MAAM,GAAG;EAC9D,MAAM,WAAW,OAAO;AACxB,MAAI,CAAC,MAAO,aAAa,cAAc,aAAa,SAClD,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAgE,EAAE,IAAI;AAG1G,MAAI,CADY,qBAAqB,GACzB,CAAE,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAiC,EAAE,IAAI;EACvF,MAAM,WAAW,wBAAwB,IAAI,SAAS;AACtD,MAAI,CAAC,YAAY,SAAS,WAAW,SACnC,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,yBAAyB,UAAU,UAAU,cAAc;GAAI,SAAS,EAAE,UAAU;GAAE,EAAE,IAAI;AAEhI,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,UAAU;GAAE,CAAC;GAClD;AAEF,eAAc,KAAK,kCAAkC,2BAA2B,OAAO,MAAM;EAC3F,MAAM,cAAc,EAAE,IAAI,MAAM,KAAK;EACrC,MAAM,YAAY,uBAAuB,YAAY;AACrD,MAAI,CAAC,UACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,sBAAsB;GAAe,EAAE,IAAI;AAE/E,MAAI;GACF,MAAM,gBAAgB,MAAM,4BAA4B,UAAU;AAClE,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,eAAe;IAAE,CAAC;WAChD,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,KAAK,+BAA+B,2BAA2B,OAAO,MAAM;EACxF,MAAM,cAAc,EAAE,IAAI,MAAM,KAAK;EACrC,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,QAA+B,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,GAAG,OAAO,EAAE;EACzG,MAAM,qBAAqB,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAI,KAAK,cAAc,OAAO,KAAK,eAAe,YAAY,CAAC,MAAM,QAAQ,KAAK,WAAW,GAC5K,KAAK,aACL,KAAA;EACJ,MAAM,SAAS,QAAQ;AACvB,MAAI;GACF,MAAM,WAAW,oBAAoB,OAAO,cACxC,MAAM,2BAA2B,QAAQ,oBAAoB,MAAM,GACnE,MAAM,iBAAiB,QAAQ,aAAa,MAAM;GACtD,MAAM,QAAQ,MAAM,QAAQ,WAAW,OAAO;AAC9C,OAAI,CAAC,MAAM,MACT,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,MAAM;IAAO,EAAE,IAAI;AAEvD,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,UAAU;IAAE,CAAC;WAC3C,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,KAAK,4BAA4B,OAAO,MAAM;EAC1D,MAAM,aAAa,EAAE,IAAI,MAAM,KAAK;EACpC,MAAM,SAAS,QAAQ;EACvB,MAAM,WAAW,qBAAqB,QAAQ,WAAW;AACzD,MAAI,CAAC,SACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,iCAAiC;GAAc,EAAE,IAAI;AAEzF,MAAI,SAAS,aAAa,SAAS,MACjC,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,mBAAmB,SAAS,aAAa,KAAK;GAAwC,EAAE,IAAI;AAEhI,MAAI;GACF,MAAM,SAAS,MAAM,sBAAsB,QAAQ,SAAS,aAAa,SAAS;AAClF,8BAA2B,QAAQ,SAAS,YAAY,OAAO;GAC/D,MAAM,QAAQ,MAAM,QAAQ,WAAW,OAAO;AAC9C,OAAI,CAAC,MAAM,MACT,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,MAAM;IAAO,EAAE,IAAI;AAEvD,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS;IAAQ,CAAC;WACrC,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,KAAK,8BAA8B,2BAA2B,OAAO,MAAM;EACvF,MAAM,aAAa,EAAE,IAAI,MAAM,KAAK;EACpC,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,QAA+B,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,GAAG,OAAO,EAAE;EACzG,MAAM,SAAS,QAAQ;AACvB,MAAI;GACF,MAAM,WAAW,sBAAsB,QAAQ,YAAY,MAAM;GACjE,MAAM,QAAQ,MAAM,QAAQ,WAAW,OAAO;AAC9C,OAAI,CAAC,MAAM,MACT,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,MAAM;IAAO,EAAE,IAAI;AAEvD,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,UAAU;IAAE,CAAC;WAC3C,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,KAAK,8BAA8B,2BAA2B,OAAO,MAAM;EACvF,MAAM,aAAa,EAAE,IAAI,MAAM,KAAK;EACpC,MAAM,SAAS,QAAQ;AACvB,MAAI;GACF,MAAM,WAAW,oBAAoB,QAAQ,YAAY,KAAK;GAC9D,MAAM,QAAQ,MAAM,QAAQ,WAAW,OAAO;AAC9C,OAAI,CAAC,MAAM,MACT,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,MAAM;IAAO,EAAE,IAAI;AAEvD,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,UAAU;IAAE,CAAC;WAC3C,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,KAAK,+BAA+B,2BAA2B,OAAO,MAAM;EACxF,MAAM,aAAa,EAAE,IAAI,MAAM,KAAK;EACpC,MAAM,SAAS,QAAQ;AACvB,MAAI;GACF,MAAM,WAAW,oBAAoB,QAAQ,YAAY,MAAM;GAC/D,MAAM,QAAQ,MAAM,QAAQ,WAAW,OAAO;AAC9C,OAAI,CAAC,MAAM,MACT,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,MAAM;IAAO,EAAE,IAAI;AAEvD,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,UAAU;IAAE,CAAC;WAC3C,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D;AAEF,eAAc,OAAO,uBAAuB,2BAA2B,OAAO,MAAM;EAClF,MAAM,aAAa,EAAE,IAAI,MAAM,KAAK;EACpC,MAAM,SAAS,QAAQ;AACvB,MAAI;GACF,MAAM,WAAW,mBAAmB,QAAQ,WAAW;GACvD,MAAM,QAAQ,MAAM,QAAQ,WAAW,OAAO;AAC9C,OAAI,CAAC,MAAM,MACT,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,MAAM;IAAO,EAAE,IAAI;AAEvD,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,UAAU;IAAE,CAAC;WAC3C,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,aAAa,MAAM;IAAE,EAAE,IAAI;;GAE/D"}

package/dist/src/gateway/hono/routes/doctor.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"doctor.js","names":[],"sources":["../../../../../src/gateway/hono/routes/doctor.ts"],"sourcesContent":["import type { Hono } from 'hono';\n\nimport { collectDoctorResults } from '../../../cli/commands/doctor/flow.js';\nimport { resolveConfigPath } from '../../../config/paths.js';\nimport { resolveStateDir } from '../../../config/paths-state.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\n\nexport function registerDoctorRoutes(authenticated: Hono, _deps: AuthenticatedRouteDeps): void {\n  authenticated.get('/api/doctor', async (c) => {\n    const deep = c.req.query('deep') === 'true';\n    const security = c.req.query('security') === 'true';\n    const configPath = process.env.XOPC_CONFIG_PATH || resolveConfigPath();\n    const stateDir = resolveStateDir();\n\n    const results = await collectDoctorResults({\n      configPath,\n      stateDir,\n      options: { fix: false, json: true, deep, security },\n    });\n\n    return c.json({\n      ok: results.every((r) => r.status !== 'fail'),\n      checks: results.map((r) => ({\n        id: r.id,\n        label: r.label,\n        status: r.status,\n        message: r.message,\n        hints: r.hints,\n        fixed: r.fixed ?? false,\n        ...(r.findings ? { findings: r.findings } : {}),\n      })),\n    });\n  });\n}\n"],"mappings":";;;;YAG6D;kBACI;AAGjE,SAAgB,qBAAqB,eAAqB,OAAqC;AAC7F,eAAc,IAAI,eAAe,OAAO,MAAM;EAC5C,MAAM,OAAO,EAAE,IAAI,MAAM,OAAO,KAAK;EACrC,MAAM,WAAW,EAAE,IAAI,MAAM,WAAW,KAAK;EAI7C,MAAM,UAAU,MAAM,qBAAqB;GACzC,YAJiB,QAAQ,IAAI,oBAAoB,mBAAmB;GAKpE,UAJe,iBAIP;GACR,SAAS;IAAE,KAAK;IAAO,MAAM;IAAM;IAAM;IAAU;GACpD,CAAC;AAEF,SAAO,EAAE,KAAK;GACZ,IAAI,QAAQ,OAAO,MAAM,EAAE,WAAW,OAAO;GAC7C,QAAQ,QAAQ,KAAK,OAAO;IAC1B,IAAI,EAAE;IACN,OAAO,EAAE;IACT,QAAQ,EAAE;IACV,SAAS,EAAE;IACX,OAAO,EAAE;IACT,OAAO,EAAE,SAAS;IAClB,GAAI,EAAE,WAAW,EAAE,UAAU,EAAE,UAAU,GAAG,EAAE;IAC/C,EAAE;GACJ,CAAC;GACF"}

package/dist/src/gateway/hono/routes/dreaming.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"dreaming.js","names":[],"sources":["../../../../../src/gateway/hono/routes/dreaming.ts"],"sourcesContent":["import type { Hono } from 'hono';\nimport fs from 'node:fs/promises';\nimport path from 'node:path';\n\nimport { type Config } from '../../../config/schema.js';\nimport {\n  DREAMING_DIR_RELATIVE,\n  DREAMING_LAST_RUN_RELATIVE,\n  SHORT_TERM_PROMOTION_LOCK_RELATIVE,\n  SHORT_TERM_RECALL_STORE_RELATIVE,\n  type DreamingPhaseId,\n} from '../../../agent/memory/dreaming/constants.js';\nimport { readDreamingEvents } from '../../../agent/memory/dreaming/events.js';\nimport { previewDreamingDeepPromotion } from '../../../agent/memory/dreaming/preview.js';\nimport { runLightSweep } from '../../../agent/memory/dreaming/light-sweep.js';\nimport { runDreamingDeepPromotion } from '../../../agent/memory/dreaming/deep-promotion.js';\nimport { runRemPatterns } from '../../../agent/memory/dreaming/rem-patterns.js';\nimport { parseDreamingLastRunFile, type DreamingDeepLastRun } from '../../../agent/memory/dreaming/last-run.js';\nimport { resolveDreamingAgentScope, type DreamingAgentScope } from '../../../agent/memory/dreaming/scope.js';\nimport {\n  clearStaleDreamingLock,\n  loadDreamingStore,\n  resetDreamingStore,\n  type DreamingStore,\n} from '../../../agent/memory/dreaming/short-term-store.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\n\nfunction isRecord(v: unknown): v is Record<string, unknown> {\n  return v !== null && typeof v === 'object' && !Array.isArray(v);\n}\n\nfunction resolveRouteScope(cfg: Config): DreamingAgentScope {\n  return resolveDreamingAgentScope(cfg);\n}\n\nasync function readLockInfo(dreamingRoot: string): Promise<\n  | { locked: false }\n  | { locked: true; path: string; content: string; mtimeMs?: number }\n> {\n  const lockPath = path.join(dreamingRoot, SHORT_TERM_PROMOTION_LOCK_RELATIVE);\n  try {\n    const [content, st] = await Promise.all([fs.readFile(lockPath, 'utf-8'), fs.stat(lockPath)]);\n    return {\n      locked: true,\n      path: SHORT_TERM_PROMOTION_LOCK_RELATIVE,\n      content: content.trim(),\n      mtimeMs: st.mtimeMs,\n    };\n  } catch (err) {\n    const code = (err as NodeJS.ErrnoException | undefined)?.code;\n    if (code === 'ENOENT') return { locked: false };\n    return { locked: true, path: SHORT_TERM_PROMOTION_LOCK_RELATIVE, content: 'unknown', mtimeMs: undefined };\n  }\n}\n\nasync function readLastRun(\n  dreamingRoot: string,\n): Promise<\n  | { exists: false }\n  | {\n      exists: true;\n      path: string;\n      raw: unknown;\n      record: DreamingDeepLastRun | null;\n      parseError: string | null;\n    }\n> {\n  const fullPath = path.join(dreamingRoot, DREAMING_LAST_RUN_RELATIVE);\n  try {\n    const text = await fs.readFile(fullPath, 'utf-8');\n    let raw: unknown;\n    try {\n      raw = JSON.parse(text) as unknown;\n    } catch (parseErr) {\n      return {\n        exists: true,\n        path: DREAMING_LAST_RUN_RELATIVE,\n        raw: null,\n        record: null,\n        parseError: parseErr instanceof Error ? parseErr.message : String(parseErr),\n      };\n    }\n    const record = parseDreamingLastRunFile(raw);\n    return {\n      exists: true,\n      path: DREAMING_LAST_RUN_RELATIVE,\n      raw,\n      record,\n      parseError: record ? null : 'Invalid or unsupported last-run.json (expected v2 deep record).',\n    };\n  } catch (err) {\n    const code = (err as NodeJS.ErrnoException | undefined)?.code;\n    if (code === 'ENOENT') return { exists: false };\n    return {\n      exists: true,\n      path: DREAMING_LAST_RUN_RELATIVE,\n      raw: null,\n      record: null,\n      parseError: err instanceof Error ? err.message : String(err),\n    };\n  }\n}\n\nasync function readPhaseLastRun(\n  dreamingRoot: string,\n  filename: string,\n): Promise<{ exists: false } | { exists: true; path: string; raw: unknown }> {\n  const relPath = path.join(DREAMING_DIR_RELATIVE, filename);\n  const fullPath = path.join(dreamingRoot, relPath);\n  try {\n    const text = await fs.readFile(fullPath, 'utf-8');\n    const raw = JSON.parse(text) as unknown;\n    return { exists: true, path: relPath, raw };\n  } catch (err) {\n    const code = (err as NodeJS.ErrnoException | undefined)?.code;\n    if (code === 'ENOENT') return { exists: false };\n    return { exists: false };\n  }\n}\n\nfunction storeStats(store: DreamingStore): {\n  version: number;\n  updatedAt: string;\n  entryCount: number;\n  promotedCount: number;\n  lastPromotedAt: string | null;\n} {\n  const entries = Object.values(store.entries ?? {});\n  const promoted = entries.filter((e) => typeof e.promotedAt === 'string' && e.promotedAt.trim());\n  const lastPromotedAt = promoted\n    .map((e) => e.promotedAt!)\n    .sort((a, b) => (a < b ? 1 : a > b ? -1 : 0))[0];\n  return {\n    version: store.version,\n    updatedAt: store.updatedAt,\n    entryCount: entries.length,\n    promotedCount: promoted.length,\n    lastPromotedAt: lastPromotedAt ?? null,\n  };\n}\n\nexport function registerDreamingRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  const { service } = deps;\n\n  authenticated.get('/api/dreaming', async (c) => {\n    const cfg = service.currentConfig as Config;\n    let scope: DreamingAgentScope;\n    try {\n      scope = resolveRouteScope(cfg);\n    } catch (err) {\n      const message = err instanceof Error ? err.message : String(err);\n      return c.json({ ok: false, error: { message } }, 404);\n    }\n    const { store } = await loadDreamingStore({ dreamingRoot: scope.memoriesDir });\n    const lock = await readLockInfo(scope.memoriesDir);\n\n    // Read all three phase last-run files in parallel.\n    const [lastRun, lightLastRun, remLastRun] = await Promise.all([\n      readLastRun(scope.memoriesDir),\n      readPhaseLastRun(scope.memoriesDir, 'last-run-light.json'),\n      readPhaseLastRun(scope.memoriesDir, 'last-run-rem.json'),\n    ]);\n\n    return c.json({\n      ok: true,\n      payload: {\n        agentId: scope.agentId,\n        memory: scope.memory,\n        workspaceDir: scope.workspaceDir,\n        memoriesDir: scope.memoriesDir,\n        config: scope.config,\n        storePath: path.join(scope.memoriesDir, SHORT_TERM_RECALL_STORE_RELATIVE),\n        store: storeStats(store),\n        lock,\n        lastRun,\n        lightLastRun,\n        remLastRun,\n      },\n    });\n  });\n\n  authenticated.get('/api/dreaming/preview', async (c) => {\n    const cfg = service.currentConfig as Config;\n    let scope: DreamingAgentScope;\n    try {\n      scope = resolveRouteScope(cfg);\n    } catch (err) {\n      const message = err instanceof Error ? err.message : String(err);\n      return c.json({ ok: false, error: { message } }, 404);\n    }\n\n    const rawLimit = c.req.query('limit');\n    const limit = rawLimit ? Number(rawLimit) : 20;\n\n    const preview = await previewDreamingDeepPromotion({\n      workspaceDir: scope.workspaceDir,\n      dreamingRoot: scope.memoriesDir,\n      config: scope.config.deep,\n      limit: Number.isFinite(limit) ? limit : 20,\n    });\n\n    return c.json({ ok: true, payload: preview });\n  });\n\n  authenticated.post('/api/dreaming/run', async (c) => {\n    let body: unknown;\n    try { body = await c.req.json(); } catch { body = {}; }\n    const requestedPhase: DreamingPhaseId =\n      isRecord(body) && typeof body.phase === 'string' && ['light', 'deep', 'rem'].includes(body.phase)\n        ? (body.phase as DreamingPhaseId)\n        : 'deep';\n\n    const cfg = service.currentConfig as Config;\n    let scope: DreamingAgentScope;\n    try {\n      scope = resolveRouteScope(cfg);\n    } catch (err) {\n      const message = err instanceof Error ? err.message : String(err);\n      return c.json({ ok: false, error: { message } }, 404);\n    }\n    const dreaming = scope.config;\n    if (!dreaming.enabled || !dreaming.phases[requestedPhase].enabled) {\n      return c.json({\n        ok: false,\n        error: { message: `Dreaming ${requestedPhase} phase is disabled in config. Enable it first.` },\n      }, 400);\n    }\n\n    try {\n      service.emit('dreaming.phase.start', {\n        agentId: scope.agentId,\n        phase: requestedPhase,\n        timestamp: new Date().toISOString(),\n      });\n\n      const result =\n        requestedPhase === 'light'\n          ? await runLightSweep({\n              workspaceDir: scope.workspaceDir,\n              dreamingRoot: scope.memoriesDir,\n              config: dreaming.phases.light,\n            })\n          : requestedPhase === 'rem'\n            ? await runRemPatterns({\n                agentId: scope.agentId,\n                workspaceDir: scope.workspaceDir,\n                dreamingRoot: scope.memoriesDir,\n                config: dreaming.phases.rem,\n                sensitiveWritePolicy: cfg.userContext.privacy.sensitiveWritePolicy,\n                promotionWritePolicy: dreaming.promotionWritePolicy.decision,\n              })\n            : await runDreamingDeepPromotion({\n                agentId: scope.agentId,\n                workspaceDir: scope.workspaceDir,\n                dreamingRoot: scope.memoriesDir,\n                config: dreaming.phases.deep,\n                sensitiveWritePolicy: cfg.userContext.privacy.sensitiveWritePolicy,\n              });\n\n      service.emit('dreaming.phase.end', {\n        agentId: scope.agentId,\n        phase: requestedPhase,\n        ok: true,\n        timestamp: new Date().toISOString(),\n      });\n\n      return c.json({ ok: true, payload: { agentId: scope.agentId, phase: requestedPhase, result } });\n    } catch (err) {\n      const em = err instanceof Error ? err.message : String(err);\n      service.emit('dreaming.phase.end', {\n        agentId: scope.agentId,\n        phase: requestedPhase,\n        ok: false,\n        error: em,\n        timestamp: new Date().toISOString(),\n      });\n      return c.json({ ok: false, error: { message: em || 'Failed to trigger job' } }, 400);\n    }\n  });\n\n  authenticated.post('/api/dreaming/action', async (c) => {\n    const cfg = service.currentConfig as Config;\n\n    let body: unknown;\n    try {\n      body = await c.req.json();\n    } catch {\n      body = {};\n    }\n    const action = isRecord(body) && typeof body.action === 'string' ? body.action.trim() : '';\n    let scope: DreamingAgentScope;\n    try {\n      scope = resolveRouteScope(cfg);\n    } catch (err) {\n      const message = err instanceof Error ? err.message : String(err);\n      return c.json({ ok: false, error: { message } }, 404);\n    }\n\n    if (action !== 'reset_store' && action !== 'clear_lock') {\n      return c.json({ ok: false, error: { message: 'Invalid action' } }, 400);\n    }\n\n    if (action === 'reset_store') {\n      await resetDreamingStore({ dreamingRoot: scope.memoriesDir });\n      return c.json({\n        ok: true,\n        payload: { agentId: scope.agentId, reset: true, storePath: path.join(scope.memoriesDir, SHORT_TERM_RECALL_STORE_RELATIVE) },\n      });\n    }\n\n    const lockPath = path.join(scope.memoriesDir, SHORT_TERM_PROMOTION_LOCK_RELATIVE);\n    try {\n      const cleared = await clearStaleDreamingLock(scope.memoriesDir);\n      return c.json({\n        ok: true,\n        payload: { agentId: scope.agentId, cleared, lockPath },\n      });\n    } catch (err) {\n      const message = err instanceof Error ? err.message : String(err);\n      return c.json({ ok: false, error: { message } }, 409);\n    }\n  });\n\n  authenticated.get('/api/dreaming/events', async (c) => {\n    const cfg = service.currentConfig as Config;\n    let scope: DreamingAgentScope;\n    try {\n      scope = resolveRouteScope(cfg);\n    } catch (err) {\n      const message = err instanceof Error ? err.message : String(err);\n      return c.json({ ok: false, error: { message } }, 404);\n    }\n\n    const rawLimit = c.req.query('limit');\n    const limit = rawLimit ? Math.min(Math.max(Number(rawLimit) || 50, 1), 200) : 50;\n\n    const events = await readDreamingEvents(scope.memoriesDir, limit);\n    return c.json({ ok: true, payload: { agentId: scope.agentId, events } });\n  });\n}\n"],"mappings":";;;;;;;;;;;;AA2BA,SAAS,SAAS,GAA0C;AAC1D,QAAO,MAAM,QAAQ,OAAO,MAAM,YAAY,CAAC,MAAM,QAAQ,EAAE;;AAGjE,SAAS,kBAAkB,KAAiC;AAC1D,QAAO,0BAA0B,IAAI;;AAGvC,eAAe,aAAa,cAG1B;CACA,MAAM,WAAW,KAAK,KAAK,cAAc,mCAAmC;AAC5E,KAAI;EACF,MAAM,CAAC,SAAS,MAAM,MAAM,QAAQ,IAAI,CAAC,GAAG,SAAS,UAAU,QAAQ,EAAE,GAAG,KAAK,SAAS,CAAC,CAAC;AAC5F,SAAO;GACL,QAAQ;GACR,MAAM;GACN,SAAS,QAAQ,MAAM;GACvB,SAAS,GAAG;GACb;UACM,KAAK;AAEZ,MADc,KAA2C,SAC5C,SAAU,QAAO,EAAE,QAAQ,OAAO;AAC/C,SAAO;GAAE,QAAQ;GAAM,MAAM;GAAoC,SAAS;GAAW,SAAS,KAAA;GAAW;;;AAI7G,eAAe,YACb,cAUA;CACA,MAAM,WAAW,KAAK,KAAK,cAAc,2BAA2B;AACpE,KAAI;EACF,MAAM,OAAO,MAAM,GAAG,SAAS,UAAU,QAAQ;EACjD,IAAI;AACJ,MAAI;AACF,SAAM,KAAK,MAAM,KAAK;WACf,UAAU;AACjB,UAAO;IACL,QAAQ;IACR,MAAM;IACN,KAAK;IACL,QAAQ;IACR,YAAY,oBAAoB,QAAQ,SAAS,UAAU,OAAO,SAAS;IAC5E;;EAEH,MAAM,SAAS,yBAAyB,IAAI;AAC5C,SAAO;GACL,QAAQ;GACR,MAAM;GACN;GACA;GACA,YAAY,SAAS,OAAO;GAC7B;UACM,KAAK;AAEZ,MADc,KAA2C,SAC5C,SAAU,QAAO,EAAE,QAAQ,OAAO;AAC/C,SAAO;GACL,QAAQ;GACR,MAAM;GACN,KAAK;GACL,QAAQ;GACR,YAAY,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;GAC7D;;;AAIL,eAAe,iBACb,cACA,UAC2E;CAC3E,MAAM,UAAU,KAAK,KAAK,uBAAuB,SAAS;CAC1D,MAAM,WAAW,KAAK,KAAK,cAAc,QAAQ;AACjD,KAAI;EACF,MAAM,OAAO,MAAM,GAAG,SAAS,UAAU,QAAQ;AAEjD,SAAO;GAAE,QAAQ;GAAM,MAAM;GAAS,KAD1B,KAAK,MAAM,KACkB;GAAE;UACpC,KAAK;AAEZ,MADc,KAA2C,SAC5C,SAAU,QAAO,EAAE,QAAQ,OAAO;AAC/C,SAAO,EAAE,QAAQ,OAAO;;;AAI5B,SAAS,WAAW,OAMlB;CACA,MAAM,UAAU,OAAO,OAAO,MAAM,WAAW,EAAE,CAAC;CAClD,MAAM,WAAW,QAAQ,QAAQ,MAAM,OAAO,EAAE,eAAe,YAAY,EAAE,WAAW,MAAM,CAAC;CAC/F,MAAM,iBAAiB,SACpB,KAAK,MAAM,EAAE,WAAY,CACzB,MAAM,GAAG,MAAO,IAAI,IAAI,IAAI,IAAI,IAAI,KAAK,EAAG,CAAC;AAChD,QAAO;EACL,SAAS,MAAM;EACf,WAAW,MAAM;EACjB,YAAY,QAAQ;EACpB,eAAe,SAAS;EACxB,gBAAgB,kBAAkB;EACnC;;AAGH,SAAgB,uBAAuB,eAAqB,MAAoC;CAC9F,MAAM,EAAE,YAAY;AAEpB,eAAc,IAAI,iBAAiB,OAAO,MAAM;EAC9C,MAAM,MAAM,QAAQ;EACpB,IAAI;AACJ,MAAI;AACF,WAAQ,kBAAkB,IAAI;WACvB,KAAK;GACZ,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAChE,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS;IAAE,EAAE,IAAI;;EAEvD,MAAM,EAAE,UAAU,MAAM,kBAAkB,EAAE,cAAc,MAAM,aAAa,CAAC;EAC9E,MAAM,OAAO,MAAM,aAAa,MAAM,YAAY;EAGlD,MAAM,CAAC,SAAS,cAAc,cAAc,MAAM,QAAQ,IAAI;GAC5D,YAAY,MAAM,YAAY;GAC9B,iBAAiB,MAAM,aAAa,sBAAsB;GAC1D,iBAAiB,MAAM,aAAa,oBAAoB;GACzD,CAAC;AAEF,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,SAAS,MAAM;IACf,QAAQ,MAAM;IACd,cAAc,MAAM;IACpB,aAAa,MAAM;IACnB,QAAQ,MAAM;IACd,WAAW,KAAK,KAAK,MAAM,aAAa,iCAAiC;IACzE,OAAO,WAAW,MAAM;IACxB;IACA;IACA;IACA;IACD;GACF,CAAC;GACF;AAEF,eAAc,IAAI,yBAAyB,OAAO,MAAM;EACtD,MAAM,MAAM,QAAQ;EACpB,IAAI;AACJ,MAAI;AACF,WAAQ,kBAAkB,IAAI;WACvB,KAAK;GACZ,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAChE,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS;IAAE,EAAE,IAAI;;EAGvD,MAAM,WAAW,EAAE,IAAI,MAAM,QAAQ;EACrC,MAAM,QAAQ,WAAW,OAAO,SAAS,GAAG;EAE5C,MAAM,UAAU,MAAM,6BAA6B;GACjD,cAAc,MAAM;GACpB,cAAc,MAAM;GACpB,QAAQ,MAAM,OAAO;GACrB,OAAO,OAAO,SAAS,MAAM,GAAG,QAAQ;GACzC,CAAC;AAEF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;GAAS,CAAC;GAC7C;AAEF,eAAc,KAAK,qBAAqB,OAAO,MAAM;EACnD,IAAI;AACJ,MAAI;AAAE,UAAO,MAAM,EAAE,IAAI,MAAM;UAAU;AAAE,UAAO,EAAE;;EACpD,MAAM,iBACJ,SAAS,KAAK,IAAI,OAAO,KAAK,UAAU,YAAY;GAAC;GAAS;GAAQ;GAAM,CAAC,SAAS,KAAK,MAAM,GAC5F,KAAK,QACN;EAEN,MAAM,MAAM,QAAQ;EACpB,IAAI;AACJ,MAAI;AACF,WAAQ,kBAAkB,IAAI;WACvB,KAAK;GACZ,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAChE,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS;IAAE,EAAE,IAAI;;EAEvD,MAAM,WAAW,MAAM;AACvB,MAAI,CAAC,SAAS,WAAW,CAAC,SAAS,OAAO,gBAAgB,QACxD,QAAO,EAAE,KAAK;GACZ,IAAI;GACJ,OAAO,EAAE,SAAS,YAAY,eAAe,iDAAiD;GAC/F,EAAE,IAAI;AAGT,MAAI;AACF,WAAQ,KAAK,wBAAwB;IACnC,SAAS,MAAM;IACf,OAAO;IACP,4BAAW,IAAI,MAAM,EAAC,aAAa;IACpC,CAAC;GAEF,MAAM,SACJ,mBAAmB,UACf,MAAM,cAAc;IAClB,cAAc,MAAM;IACpB,cAAc,MAAM;IACpB,QAAQ,SAAS,OAAO;IACzB,CAAC,GACF,mBAAmB,QACjB,MAAM,eAAe;IACnB,SAAS,MAAM;IACf,cAAc,MAAM;IACpB,cAAc,MAAM;IACpB,QAAQ,SAAS,OAAO;IACxB,sBAAsB,IAAI,YAAY,QAAQ;IAC9C,sBAAsB,SAAS,qBAAqB;IACrD,CAAC,GACF,MAAM,yBAAyB;IAC7B,SAAS,MAAM;IACf,cAAc,MAAM;IACpB,cAAc,MAAM;IACpB,QAAQ,SAAS,OAAO;IACxB,sBAAsB,IAAI,YAAY,QAAQ;IAC/C,CAAC;AAEV,WAAQ,KAAK,sBAAsB;IACjC,SAAS,MAAM;IACf,OAAO;IACP,IAAI;IACJ,4BAAW,IAAI,MAAM,EAAC,aAAa;IACpC,CAAC;AAEF,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS;KAAE,SAAS,MAAM;KAAS,OAAO;KAAgB;KAAQ;IAAE,CAAC;WACxF,KAAK;GACZ,MAAM,KAAK,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAC3D,WAAQ,KAAK,sBAAsB;IACjC,SAAS,MAAM;IACf,OAAO;IACP,IAAI;IACJ,OAAO;IACP,4BAAW,IAAI,MAAM,EAAC,aAAa;IACpC,CAAC;AACF,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS,MAAM,yBAAyB;IAAE,EAAE,IAAI;;GAEtF;AAEF,eAAc,KAAK,wBAAwB,OAAO,MAAM;EACtD,MAAM,MAAM,QAAQ;EAEpB,IAAI;AACJ,MAAI;AACF,UAAO,MAAM,EAAE,IAAI,MAAM;UACnB;AACN,UAAO,EAAE;;EAEX,MAAM,SAAS,SAAS,KAAK,IAAI,OAAO,KAAK,WAAW,WAAW,KAAK,OAAO,MAAM,GAAG;EACxF,IAAI;AACJ,MAAI;AACF,WAAQ,kBAAkB,IAAI;WACvB,KAAK;GACZ,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAChE,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS;IAAE,EAAE,IAAI;;AAGvD,MAAI,WAAW,iBAAiB,WAAW,aACzC,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,kBAAkB;GAAE,EAAE,IAAI;AAGzE,MAAI,WAAW,eAAe;AAC5B,SAAM,mBAAmB,EAAE,cAAc,MAAM,aAAa,CAAC;AAC7D,UAAO,EAAE,KAAK;IACZ,IAAI;IACJ,SAAS;KAAE,SAAS,MAAM;KAAS,OAAO;KAAM,WAAW,KAAK,KAAK,MAAM,aAAa,iCAAiC;KAAE;IAC5H,CAAC;;EAGJ,MAAM,WAAW,KAAK,KAAK,MAAM,aAAa,mCAAmC;AACjF,MAAI;GACF,MAAM,UAAU,MAAM,uBAAuB,MAAM,YAAY;AAC/D,UAAO,EAAE,KAAK;IACZ,IAAI;IACJ,SAAS;KAAE,SAAS,MAAM;KAAS;KAAS;KAAU;IACvD,CAAC;WACK,KAAK;GACZ,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAChE,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS;IAAE,EAAE,IAAI;;GAEvD;AAEF,eAAc,IAAI,wBAAwB,OAAO,MAAM;EACrD,MAAM,MAAM,QAAQ;EACpB,IAAI;AACJ,MAAI;AACF,WAAQ,kBAAkB,IAAI;WACvB,KAAK;GACZ,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAChE,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS;IAAE,EAAE,IAAI;;EAGvD,MAAM,WAAW,EAAE,IAAI,MAAM,QAAQ;EACrC,MAAM,QAAQ,WAAW,KAAK,IAAI,KAAK,IAAI,OAAO,SAAS,IAAI,IAAI,EAAE,EAAE,IAAI,GAAG;EAE9E,MAAM,SAAS,MAAM,mBAAmB,MAAM,aAAa,MAAM;AACjE,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;IAAE,SAAS,MAAM;IAAS;IAAQ;GAAE,CAAC;GACxE"}

package/dist/src/gateway/hono/routes/exposure.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"exposure.js","names":[],"sources":["../../../../../src/gateway/hono/routes/exposure.ts"],"sourcesContent":["import type { Hono, MiddlewareHandler } from 'hono';\n\nimport type { Config } from '../../../config/schema.js';\nimport { extractToken } from '../../auth.js';\nimport { getExposureManager } from '../../../remote-access/exposure-manager.js';\nimport type { GatewayTailscaleMode } from '../../server-tailscale.js';\nimport { consumeTunnelMutationLimit } from '../../../tunnel/tunnel-rate-limit.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\n\nfunction requireGatewayToken(c: { req: { header: (name: string) => string | undefined } }): string | null {\n  return (\n    extractToken({\n      authorization: c.req.header('authorization') ?? undefined,\n    }) ?? null\n  );\n}\n\nfunction createExposureMutationRateLimitMiddleware(): MiddlewareHandler {\n  return async (c, next) => {\n    const token = requireGatewayToken(c);\n    if (!token) {\n      return c.json({ error: 'Gateway token required' }, 401);\n    }\n    const result = consumeTunnelMutationLimit(token);\n    if (!result.allowed) {\n      const retryAfterSec = Math.ceil(result.retryAfterMs / 1000);\n      c.header('Retry-After', String(retryAfterSec));\n      return c.json(\n        { error: 'Rate limit exceeded', retryAfterMs: result.retryAfterMs },\n        429,\n      );\n    }\n    return next();\n  };\n}\n\nfunction resolveGatewayPort(config: Config): number {\n  return config.gateway?.port ?? 18790;\n}\n\nexport function registerExposureRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  const manager = getExposureManager();\n\n  authenticated.get('/api/exposure/status', async (c) => {\n    const status = await manager.getStatus(deps.service.currentConfig);\n    return c.json(status);\n  });\n\n  const mutationLimit = createExposureMutationRateLimitMiddleware();\n\n  authenticated.post('/api/exposure/tailscale/start', mutationLimit, async (c) => {\n    const body = (await c.req.json().catch(() => ({}))) as { mode?: GatewayTailscaleMode };\n    const mode = body.mode === 'funnel' ? 'funnel' : 'serve';\n    const config = deps.service.currentConfig;\n    const port = resolveGatewayPort(config);\n    try {\n      await manager.startTailscale(config, port, mode);\n    } catch (err) {\n      const em = err instanceof Error ? err.message : String(err);\n      return c.json({ error: em }, 400);\n    }\n    return c.json(await manager.getStatus(config));\n  });\n\n  authenticated.post('/api/exposure/tailscale/stop', mutationLimit, async (c) => {\n    await manager.stopTailscale();\n    return c.json(await manager.getStatus(deps.service.currentConfig));\n  });\n}\n"],"mappings":";;;;AASA,SAAS,oBAAoB,GAA6E;AACxG,QACE,aAAa,EACX,eAAe,EAAE,IAAI,OAAO,gBAAgB,IAAI,KAAA,GACjD,CAAC,IAAI;;AAIV,SAAS,4CAA+D;AACtE,QAAO,OAAO,GAAG,SAAS;EACxB,MAAM,QAAQ,oBAAoB,EAAE;AACpC,MAAI,CAAC,MACH,QAAO,EAAE,KAAK,EAAE,OAAO,0BAA0B,EAAE,IAAI;EAEzD,MAAM,SAAS,2BAA2B,MAAM;AAChD,MAAI,CAAC,OAAO,SAAS;GACnB,MAAM,gBAAgB,KAAK,KAAK,OAAO,eAAe,IAAK;AAC3D,KAAE,OAAO,eAAe,OAAO,cAAc,CAAC;AAC9C,UAAO,EAAE,KACP;IAAE,OAAO;IAAuB,cAAc,OAAO;IAAc,EACnE,IACD;;AAEH,SAAO,MAAM;;;AAIjB,SAAS,mBAAmB,QAAwB;AAClD,QAAO,OAAO,SAAS,QAAQ;;AAGjC,SAAgB,uBAAuB,eAAqB,MAAoC;CAC9F,MAAM,UAAU,oBAAoB;AAEpC,eAAc,IAAI,wBAAwB,OAAO,MAAM;EACrD,MAAM,SAAS,MAAM,QAAQ,UAAU,KAAK,QAAQ,cAAc;AAClE,SAAO,EAAE,KAAK,OAAO;GACrB;CAEF,MAAM,gBAAgB,2CAA2C;AAEjE,eAAc,KAAK,iCAAiC,eAAe,OAAO,MAAM;EAE9E,MAAM,QAAO,MADO,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE,EAChC,SAAS,WAAW,WAAW;EACjD,MAAM,SAAS,KAAK,QAAQ;EAC5B,MAAM,OAAO,mBAAmB,OAAO;AACvC,MAAI;AACF,SAAM,QAAQ,eAAe,QAAQ,MAAM,KAAK;WACzC,KAAK;GACZ,MAAM,KAAK,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAC3D,UAAO,EAAE,KAAK,EAAE,OAAO,IAAI,EAAE,IAAI;;AAEnC,SAAO,EAAE,KAAK,MAAM,QAAQ,UAAU,OAAO,CAAC;GAC9C;AAEF,eAAc,KAAK,gCAAgC,eAAe,OAAO,MAAM;AAC7E,QAAM,QAAQ,eAAe;AAC7B,SAAO,EAAE,KAAK,MAAM,QAAQ,UAAU,KAAK,QAAQ,cAAc,CAAC;GAClE"}