@xopcai/xopc 0.0.149 → 0.0.151

package/dist/src/gateway/hono/routes/sessions.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"sessions.js","names":[],"sources":["../../../../../src/gateway/hono/routes/sessions.ts"],"sourcesContent":["import { randomUUID } from 'node:crypto';\n\nimport type { Hono } from 'hono';\n\nimport { buildSessionKey } from '../../../routing/session-key.js';\nimport { resolveProjectAgentId } from '../../../projects/index.js';\nimport type { SessionMetadataSeed } from '../../../storage/sqlite/index.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\nimport { createGatewayRouteLogger, logRouteError } from '../lib/route-logger.js';\nimport { messagesToClientHistory } from '../../../session/client-history.js';\nimport type { SessionType } from '../../../session/types.js';\nimport { computeUserRoundDeleteRange } from '../../../session/user-round-delete.js';\nimport { deleteMediaUrisNoLongerReferenced } from '../../../media/session-references.js';\nimport { respondStartupUnavailable } from '../lib/startup-unavailable.js';\nimport type { StartupUnavailableGatewayMethod } from '../../startup-readiness.js';\nimport { evictEmbeddedSessionRunner } from '../../../agent/embedded/session-runner.js';\n\nconst log = createGatewayRouteLogger('Sessions');\n\ntype SessionsStartupMethod = StartupUnavailableGatewayMethod;\n\nconst SESSION_TYPES = new Set<SessionType>(['chat', 'workflow-run', 'workflow-subagent', 'cron', 'heartbeat']);\nconst DEFAULT_SIDEBAR_STALE_DAYS = 60;\n\nfunction isSessionType(value: string): value is SessionType {\n  return SESSION_TYPES.has(value as SessionType);\n}\n\nfunction ensureGatewayReadyForSessions(\n  c: Parameters<typeof respondStartupUnavailable>[0],\n  service: AuthenticatedRouteDeps['service'],\n  method: SessionsStartupMethod,\n): Response | null {\n  if (service.isGatewayReady()) {\n    return null;\n  }\n  return respondStartupUnavailable(c, method);\n}\n\nfunction parsePositiveInt(value: string | undefined, fallback: number, max: number): number {\n  const parsed = value ? Number.parseInt(value, 10) : fallback;\n  if (!Number.isFinite(parsed)) return fallback;\n  return Math.min(max, Math.max(1, parsed));\n}\n\nfunction parseOffset(value: string | undefined): number {\n  const parsed = value ? Number.parseInt(value, 10) : 0;\n  return Number.isFinite(parsed) ? Math.max(0, parsed) : 0;\n}\n\nfunction buildDirectSessionMetadata(params: {\n  agentId: string;\n  source: string;\n  accountId: string;\n  peerId: string;\n}): SessionMetadataSeed {\n  return {\n    sourceChannel: params.source,\n    sourceChatId: [params.accountId, 'direct', params.peerId].join(':'),\n    sessionType: 'chat',\n    hiddenFromSessionList: true,\n    routing: {\n      agentId: params.agentId,\n      source: params.source,\n      accountId: params.accountId,\n      peerKind: 'direct',\n      peerId: params.peerId,\n    },\n    customData: {\n      genericNewChatShell: params.source === 'webchat' && params.peerId.startsWith('chat_'),\n    },\n  };\n}\n\nexport function registerSessionsRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  const { service } = deps;\n\n  // ========== Session REST API (/api/sessions) ==========\n\n  authenticated.get('/api/sidebar/chat-list', async (c) => {\n    const blocked = ensureGatewayReadyForSessions(c, service, 'sessions.list');\n    if (blocked) {\n      return blocked;\n    }\n\n    const projectLimit = parsePositiveInt(c.req.query('projectLimit'), 12, 50);\n    const projectOffset = parseOffset(c.req.query('projectOffset'));\n    const sessionPreviewLimit = parsePositiveInt(c.req.query('sessionPreviewLimit'), 5, 20);\n    const inboxLimit = parsePositiveInt(c.req.query('inboxLimit'), 20, 100);\n    const inboxOffset = parseOffset(c.req.query('inboxOffset'));\n    const staleDays = parsePositiveInt(c.req.query('staleDays'), DEFAULT_SIDEBAR_STALE_DAYS, 3650);\n    const updatedAfter = Date.now() - staleDays * 24 * 60 * 60 * 1000;\n    const includeSessionKey = c.req.query('includeSessionKey')?.trim() || undefined;\n\n    const projects = service.projects.listWithSidebarSessions({\n      status: 'active',\n      limit: projectLimit,\n      offset: projectOffset,\n      updatedAfter,\n      includePinned: true,\n      includeSessionKey,\n    });\n    const projectItems = await Promise.all(\n      projects.items.map(async (project) => {\n        const sessions = await service.sessions.listSessions({\n          projectId: project.id,\n          limit: sessionPreviewLimit,\n          offset: 0,\n          updatedAfter,\n          includePinned: true,\n          includeSessionKey,\n          sortBy: 'updatedAt',\n          sortOrder: 'desc',\n        });\n        return {\n          project,\n          sessions: sessions.items,\n          sessionTotal: sessions.total,\n          sessionHasMore: sessions.hasMore,\n        };\n      }),\n    );\n    const inbox = await service.sessions.listSessions({\n      unassigned: true,\n      limit: inboxLimit,\n      offset: inboxOffset,\n      updatedAfter,\n      includePinned: true,\n      includeSessionKey,\n      sortBy: 'updatedAt',\n      sortOrder: 'desc',\n    });\n\n    return c.json({\n      ok: true,\n      projects: {\n        items: projectItems,\n        total: projects.total,\n        limit: projects.limit,\n        offset: projects.offset,\n        hasMore: projects.hasMore,\n      },\n      inbox,\n    });\n  });\n\n  // POST /api/sessions - Create a new session. Empty-shell reuse is a client concern.\n  authenticated.post('/api/sessions', async (c) => {\n    const body = await c.req.json().catch(() => ({}));\n    const channel = body.channel || 'webchat';\n    const projectId = typeof body.projectId === 'string' && body.projectId.trim() ? body.projectId.trim() : undefined;\n    const routingCfg = service.currentConfig;\n    if (projectId && !service.projects.get(projectId)) {\n      return c.json({ ok: false, error: 'Project not found' }, 404);\n    }\n    const agentId = resolveProjectAgentId({\n      config: routingCfg,\n      projects: service.projects,\n      explicitAgentId: typeof body.agentId === 'string' ? body.agentId : undefined,\n      projectId,\n    });\n\n    // If a specific chat_id is provided, use it (for advanced use cases).\n    if (body.chat_id) {\n      const sessionKey = buildSessionKey({\n        agentId,\n        source: channel,\n        accountId: 'default',\n        peerKind: 'direct',\n        peerId: body.chat_id,\n      });\n\n      await service.sessionIndexInstance.saveMessages(sessionKey, [], {\n        metadata: buildDirectSessionMetadata({\n          agentId,\n          source: channel,\n          accountId: 'default',\n          peerId: body.chat_id,\n        }),\n      });\n      if (projectId) {\n        service.projects.attachSession(sessionKey, projectId);\n      }\n      const session = await service.sessions.getSession(sessionKey);\n      return c.json({ session }, 201);\n    }\n\n    const chatId = `chat_${randomUUID()}`;\n    const sessionKey = buildSessionKey({\n      agentId,\n      source: channel,\n      accountId: 'default',\n      peerKind: 'direct',\n      peerId: chatId,\n    });\n\n    await service.sessionIndexInstance.saveMessages(sessionKey, [], {\n      metadata: buildDirectSessionMetadata({\n        agentId,\n        source: channel,\n        accountId: 'default',\n        peerId: chatId,\n      }),\n    });\n\n    if (projectId) {\n      service.projects.attachSession(sessionKey, projectId);\n    }\n    const session = await service.sessions.getSession(sessionKey);\n    return c.json({ session }, 201);\n  });\n\n  // GET /api/sessions - List sessions\n  authenticated.get('/api/sessions', async (c) => {\n    const blocked = ensureGatewayReadyForSessions(c, service, 'sessions.list');\n    if (blocked) {\n      return blocked;\n    }\n    const query = c.req.query();\n    const sessionTypes = query.types\n      ?.split(',')\n      .map((value) => value.trim())\n      .filter(isSessionType);\n    const result = await service.sessions.listSessions({\n      status: query.status as any,\n      search: query.search,\n      channel: query.channel,\n      sessionTypes: sessionTypes?.length ? sessionTypes : undefined,\n      includeHidden: query.includeHidden === 'true',\n      projectId: query.projectId,\n      unassigned: query.unassigned === 'true',\n      updatedAfter: query.updatedAfter ? parseInt(query.updatedAfter) : undefined,\n      includePinned: query.includePinned === 'true',\n      includeSessionKey: query.includeSessionKey,\n      limit: query.limit ? parseInt(query.limit) : undefined,\n      offset: query.offset ? parseInt(query.offset) : undefined,\n    });\n    return c.json(result);\n  });\n\n  // GET /api/sessions/stats - Get session stats (must be before /:key)\n  authenticated.get('/api/sessions/stats', async (c) => {\n    const result = await service.sessions.stats();\n    return c.json(result);\n  });\n\n  // GET /api/sessions/chat-ids - Get unique chat IDs from sessions (must be before /:key)\n  authenticated.get('/api/sessions/chat-ids', async (c) => {\n    const channel = c.req.query('channel');\n    const chatIds = await service.sessions.chatIds(channel || undefined);\n    return c.json({ ok: true, payload: { chatIds } });\n  });\n\n  // GET /api/sessions/resolve?sessionId=... - Resolve OpenClaw-style session id to canonical key.\n  authenticated.get('/api/sessions/resolve', async (c) => {\n    const result = await service.sessions.resolveSession({\n      sessionId: c.req.query('sessionId'),\n      sessionKey: c.req.query('sessionKey') ?? c.req.query('key'),\n    });\n    if (!result) {\n      return c.json({ ok: false, error: 'Session not found' }, 404);\n    }\n    return c.json({ ok: true, payload: result });\n  });\n\n  // POST /api/sessions/resolve - Resolve by JSON body (`sessionId`, `sessionKey`, or `key`).\n  authenticated.post('/api/sessions/resolve', async (c) => {\n    const body = await c.req.json().catch(() => ({}));\n    const result = await service.sessions.resolveSession({\n      sessionId: typeof body.sessionId === 'string' ? body.sessionId : undefined,\n      sessionKey: typeof body.sessionKey === 'string' ? body.sessionKey : undefined,\n      key: typeof body.key === 'string' ? body.key : undefined,\n    });\n    if (!result) {\n      return c.json({ ok: false, error: 'Session not found' }, 404);\n    }\n    return c.json({ ok: true, payload: result });\n  });\n\n  // GET /api/sessions/:key/run — read-only active webchat agent run (for UI resume)\n  authenticated.get('/api/sessions/:key/run', async (c) => {\n    const blocked = ensureGatewayReadyForSessions(c, service, 'sessions.run');\n    if (blocked) {\n      return blocked;\n    }\n    const key = c.req.param('key');\n    const session = await service.sessions.getSession(key);\n    if (!session) {\n      return c.json({ ok: false, error: 'Session not found' }, 404);\n    }\n    return c.json({ ok: true, payload: service.sessions.getActiveRun(key) });\n  });\n\n  // GET /api/sessions/:key/agent-config — resolved session agent settings (thinking, etc.)\n  authenticated.get('/api/sessions/:key/agent-config', async (c) => {\n    const key = c.req.param('key');\n    const payload = await service.sessions.getAgentConfig(key);\n    return c.json({ ok: true, payload });\n  });\n\n  authenticated.patch('/api/sessions/:key/agent-config', async (c) => {\n    const key = c.req.param('key');\n    const body = await c.req.json().catch(() => ({}));\n    const result = await service.sessions.patchAgentConfig(key, body);\n    if (!result.ok) {\n      return c.json({ ok: false, error: result.error }, 400);\n    }\n    return c.json({ ok: true });\n  });\n\n  // GET /api/sessions/:key/messages — flattened transcript for TUI / clients\n  authenticated.get('/api/sessions/:key/messages', async (c) => {\n    const blocked = ensureGatewayReadyForSessions(c, service, 'sessions.messages');\n    if (blocked) {\n      return blocked;\n    }\n    const key = c.req.param('key');\n    const limitRaw = c.req.query('limit');\n    const parsedLimit = limitRaw ? Number.parseInt(limitRaw, 10) : undefined;\n    const limit =\n      parsedLimit !== undefined && Number.isFinite(parsedLimit)\n        ? Math.min(500, Math.max(1, parsedLimit))\n        : undefined;\n\n    const before = c.req.query('before')?.trim();\n    const offsetRaw = c.req.query('offset');\n    const parsedOffset = offsetRaw ? Number.parseInt(offsetRaw, 10) : 0;\n    const offset = Number.isFinite(parsedOffset) ? Math.max(0, parsedOffset) : 0;\n\n    const result = await service.sessions.getMessagePage(key, {\n      limit,\n      offset,\n      ...(before ? { before } : {}),\n    });\n    if (!result) {\n      return c.json({ ok: false, error: 'Session not found' }, 404);\n    }\n\n    const messages = messagesToClientHistory(result.session.messages, { limit });\n    return c.json({\n      ok: true,\n      payload: { messages },\n      pagination: result.pagination,\n    });\n  });\n\n  // GET /api/sessions/:key/history — UI chat history page from the newest tail.\n  authenticated.get('/api/sessions/:key/history', async (c) => {\n    const blocked = ensureGatewayReadyForSessions(c, service, 'sessions.history');\n    if (blocked) {\n      return blocked;\n    }\n    const key = c.req.param('key');\n    const offsetRaw = c.req.query('offset');\n    const limitRaw = c.req.query('limit');\n    const before = c.req.query('before')?.trim();\n    const parsedOffset = offsetRaw ? Number.parseInt(offsetRaw, 10) : 0;\n    const parsedLimit = limitRaw ? Number.parseInt(limitRaw, 10) : 50;\n    const offset = Number.isFinite(parsedOffset) ? Math.max(0, parsedOffset) : 0;\n    const limit = Number.isFinite(parsedLimit) ? Math.min(200, Math.max(1, parsedLimit)) : 50;\n    const result = await service.sessions.getMessagePage(key, {\n      offset,\n      limit,\n      ...(before ? { before } : {}),\n      includeContextRows: true,\n    });\n\n    if (!result) {\n      return c.json({ error: 'Session not found' }, 404);\n    }\n\n    return c.json(result);\n  });\n\n  // GET /api/sessions/:key/timeline — row-backed conversation outline for Web / TUI navigation.\n  authenticated.get('/api/sessions/:key/timeline', async (c) => {\n    const blocked = ensureGatewayReadyForSessions(c, service, 'sessions.history');\n    if (blocked) {\n      return blocked;\n    }\n    const key = c.req.param('key');\n    const items = await service.sessions.getTimeline(key);\n    if (!items) {\n      return c.json({ ok: false, error: 'Session not found' }, 404);\n    }\n    return c.json({ ok: true, items });\n  });\n\n  // GET /api/sessions/:key/transcript/window — TUI-focused transcript slice around a row.\n  authenticated.get('/api/sessions/:key/transcript/window', async (c) => {\n    const blocked = ensureGatewayReadyForSessions(c, service, 'sessions.history');\n    if (blocked) {\n      return blocked;\n    }\n    const key = c.req.param('key');\n    const rowNumberRaw = c.req.query('rowNumber');\n    const rowNumber = rowNumberRaw ? Number.parseInt(rowNumberRaw, 10) : NaN;\n    if (!Number.isFinite(rowNumber) || rowNumber < 1) {\n      return c.json({ ok: false, error: 'rowNumber must be a positive integer' }, 400);\n    }\n    const before = parsePositiveInt(c.req.query('before'), 80, 200);\n    const after = parsePositiveInt(c.req.query('after'), 120, 200);\n    const window = await service.sessions.getTranscriptWindow(key, { rowNumber, before, after });\n    if (!window) {\n      return c.json({ ok: false, error: 'Session not found' }, 404);\n    }\n    return c.json({ ok: true, payload: window });\n  });\n\n  // POST /api/sessions/:key/transcript/context — append persisted-only `kind: 'context'` row (not in LLM context)\n  authenticated.post('/api/sessions/:key/transcript/context', async (c) => {\n    const key = c.req.param('key');\n    const meta = await service.sessionIndexInstance.getSessionMetadata(key);\n    if (!meta) {\n      return c.json({ ok: false, error: 'Session not found' }, 404);\n    }\n    const body = await c.req.json().catch(() => ({}));\n    const id = typeof body.id === 'string' && body.id.trim() ? body.id.trim() : undefined;\n    const text = typeof body.text === 'string' ? body.text : undefined;\n    const data =\n      body.data !== undefined && typeof body.data === 'object' && body.data !== null && !Array.isArray(body.data)\n        ? (body.data as Record<string, unknown>)\n        : undefined;\n    await service.sessionIndexInstance.appendTranscriptContextEntry(key, { id, text, data });\n    return c.json({ ok: true });\n  });\n\n  // POST /api/sessions/:key/transcript/label — append label change for a transcript entry.\n  authenticated.post('/api/sessions/:key/transcript/label', async (c) => {\n    const key = c.req.param('key');\n    const meta = await service.sessionIndexInstance.getSessionMetadata(key);\n    if (!meta) {\n      return c.json({ ok: false, error: 'Session not found' }, 404);\n    }\n    const body = await c.req.json().catch(() => ({}));\n    const targetId = typeof body.targetId === 'string' ? body.targetId.trim() : '';\n    if (!targetId) {\n      return c.json({ ok: false, error: 'targetId is required' }, 400);\n    }\n    const label = typeof body.label === 'string' && body.label.trim() ? body.label.trim() : undefined;\n    await service.sessionIndexInstance.appendTranscriptLabelEntry(key, { targetId, label });\n    return c.json({ ok: true });\n  });\n\n  // POST /api/sessions/:key/transcript/custom — append extension state for TUI replay.\n  authenticated.post('/api/sessions/:key/transcript/custom', async (c) => {\n    const key = c.req.param('key');\n    const meta = await service.sessionIndexInstance.getSessionMetadata(key);\n    if (!meta) {\n      return c.json({ ok: false, error: 'Session not found' }, 404);\n    }\n    const body = await c.req.json().catch(() => ({}));\n    const customType = typeof body.customType === 'string' ? body.customType.trim() : '';\n    if (!customType) {\n      return c.json({ ok: false, error: 'customType is required' }, 400);\n    }\n    await service.sessionIndexInstance.appendTranscriptCustomEntry(key, {\n      customType,\n      data: body.data,\n    });\n    return c.json({ ok: true });\n  });\n\n  // POST /api/sessions/:key/transcript/custom-message — append visible extension custom message.\n  authenticated.post('/api/sessions/:key/transcript/custom-message', async (c) => {\n    const key = c.req.param('key');\n    const meta = await service.sessionIndexInstance.getSessionMetadata(key);\n    if (!meta) {\n      return c.json({ ok: false, error: 'Session not found' }, 404);\n    }\n    const body = await c.req.json().catch(() => ({}));\n    const customType = typeof body.customType === 'string' ? body.customType.trim() : '';\n    if (!customType) {\n      return c.json({ ok: false, error: 'customType is required' }, 400);\n    }\n    const content =\n      typeof body.content === 'string' || Array.isArray(body.content) ? body.content : '';\n    await service.sessionIndexInstance.appendTranscriptCustomMessageEntry(key, {\n      customType,\n      content,\n      display: typeof body.display === 'boolean' ? body.display : undefined,\n      details: body.details,\n    });\n    evictEmbeddedSessionRunner(key, 'gateway_custom_message_appended');\n    return c.json({ ok: true });\n  });\n\n  // POST /api/sessions/:key/transcript/bash — append local TUI shell execution.\n  authenticated.post('/api/sessions/:key/transcript/bash', async (c) => {\n    const key = c.req.param('key');\n    const meta = await service.sessionIndexInstance.getSessionMetadata(key);\n    if (!meta) {\n      return c.json({ ok: false, error: 'Session not found' }, 404);\n    }\n    const body = await c.req.json().catch(() => ({}));\n    const command = typeof body.command === 'string' ? body.command.trim() : '';\n    if (!command) {\n      return c.json({ ok: false, error: 'command is required' }, 400);\n    }\n    await service.sessionIndexInstance.appendTranscriptBashExecutionEntry(key, {\n      command,\n      output: typeof body.output === 'string' ? body.output : '',\n      exitCode: typeof body.exitCode === 'number' ? body.exitCode : body.exitCode === null ? null : undefined,\n      signal: typeof body.signal === 'string' ? body.signal : body.signal === null ? null : undefined,\n      excludeFromContext: body.excludeFromContext === true,\n      truncated: body.truncated === true,\n      fullOutputPath: typeof body.fullOutputPath === 'string' ? body.fullOutputPath : undefined,\n    });\n    evictEmbeddedSessionRunner(key, 'gateway_bash_execution_appended');\n    return c.json({ ok: true });\n  });\n\n  // GET /api/sessions/:key/compaction/checkpoints — list pre-compaction snapshots (OpenClaw-style)\n  authenticated.get('/api/sessions/:key/compaction/checkpoints', async (c) => {\n    const key = c.req.param('key');\n    const meta = await service.sessionIndexInstance.getSessionMetadata(key);\n    if (!meta) {\n      return c.json({ ok: false, error: 'Session not found' }, 404);\n    }\n    const checkpoints = await service.sessions.listCompactionCheckpoints(key);\n    return c.json({ ok: true, payload: { checkpoints } });\n  });\n\n  authenticated.get('/api/sessions/:key/compaction/checkpoints/:checkpointId', async (c) => {\n    const key = c.req.param('key');\n    const checkpointId = c.req.param('checkpointId');\n    const checkpoint = await service.sessions.getCompactionCheckpoint(key, checkpointId);\n    if (!checkpoint) {\n      return c.json({ ok: false, error: 'Checkpoint not found' }, 404);\n    }\n    return c.json({ ok: true, payload: { checkpoint } });\n  });\n\n  authenticated.post('/api/sessions/:key/compaction/restore', async (c) => {\n    const key = c.req.param('key');\n    const body = await c.req.json().catch(() => ({}));\n    const checkpointId = typeof body.checkpointId === 'string' ? body.checkpointId.trim() : '';\n    if (!checkpointId) {\n      return c.json({ ok: false, error: 'checkpointId required' }, 400);\n    }\n    try {\n      await service.sessions.restoreCompactionCheckpoint(key, checkpointId);\n    } catch (err) {\n      logRouteError(log, c, err, 'gateway.route.sessions', { operation: 'restoreCheckpoint', sessionKey: key });\n      const msg = err instanceof Error ? err.message : String(err);\n      if (msg.includes('not found') || msg.includes('Invalid')) {\n        return c.json({ ok: false, error: msg }, 404);\n      }\n      return c.json({ ok: false, error: msg }, 500);\n    }\n    const session = await service.sessions.getSession(key);\n    if (!session) {\n      return c.json({ ok: false, error: 'Session not found' }, 404);\n    }\n    return c.json({ ok: true, session });\n  });\n\n  authenticated.post('/api/sessions/:key/compaction/run', async (c) => {\n    const key = c.req.param('key');\n    const session = await service.sessions.getSession(key);\n    if (!session) {\n      return c.json({ ok: false, error: 'Session not found' }, 404);\n    }\n    const body = await c.req.json().catch(() => ({}));\n    const instructions = typeof body.instructions === 'string' ? body.instructions : undefined;\n    const force = typeof body.force === 'boolean' ? body.force : true;\n    const result = await service.sessions.runCompaction(key, { instructions, force });\n    return c.json({ ok: true, payload: { result } });\n  });\n\n  // GET /api/sessions/:key - Get single session (must be after /stats and /chat-ids)\n  authenticated.get('/api/sessions/:key', async (c) => {\n    const key = c.req.param('key');\n    const includeRaw = c.req.query('include') ?? '';\n    const includeSet = new Set(\n      includeRaw\n        .split(',')\n        .map((s) => s.trim())\n        .filter(Boolean),\n    );\n    const includeTranscript = includeSet.has('transcript');\n    const includeTranscriptRows = includeSet.has('transcriptRows');\n    const offsetRaw = c.req.query('offset');\n    const limitRaw = c.req.query('limit');\n    const hasPagingQuery = offsetRaw !== undefined || limitRaw !== undefined;\n\n    if (hasPagingQuery) {\n      const blocked = ensureGatewayReadyForSessions(c, service, 'sessions.history');\n      if (blocked) {\n        return blocked;\n      }\n      const parsedOffset = offsetRaw ? Number.parseInt(offsetRaw, 10) : 0;\n      const parsedLimit = limitRaw ? Number.parseInt(limitRaw, 10) : 50;\n      const offset = Number.isFinite(parsedOffset) ? Math.max(0, parsedOffset) : 0;\n      const limit = Number.isFinite(parsedLimit) ? Math.min(200, Math.max(1, parsedLimit)) : 50;\n      const result = await service.sessions.getMessagePage(key, {\n        offset,\n        limit,\n        includeTranscriptSummary: includeTranscript,\n        includeTranscriptRows,\n      });\n      if (!result) {\n        return c.json({ error: 'Session not found' }, 404);\n      }\n      return c.json(result);\n    }\n\n    const session = await service.sessions.getSession(key, {\n      includeTranscriptSummary: includeTranscript,\n      includeTranscriptRows,\n    });\n    if (!session) {\n      return c.json({ error: 'Session not found' }, 404);\n    }\n    return c.json({ session });\n  });\n\n  // PATCH /api/sessions/:key - Partial metadata (name, tags, customData); OpenClaw-style patch subset\n  authenticated.patch('/api/sessions/:key', async (c) => {\n    const key = c.req.param('key');\n    const body = await c.req.json().catch(() => ({}));\n    const patch: {\n      name?: string;\n      tags?: string[];\n      replaceTags?: boolean;\n      customData?: Record<string, unknown>;\n    } = {};\n    if (typeof body.name === 'string') {\n      patch.name = body.name;\n    }\n    if (Array.isArray(body.tags)) {\n      patch.tags = body.tags;\n    }\n    if (typeof body.replaceTags === 'boolean') {\n      patch.replaceTags = body.replaceTags;\n    }\n    if (body.customData !== undefined && typeof body.customData === 'object' && body.customData !== null) {\n      patch.customData = body.customData as Record<string, unknown>;\n    }\n    let requestedProjectId: string | null | undefined;\n    if ('projectId' in body) {\n      requestedProjectId = typeof body.projectId === 'string' && body.projectId.trim() ? body.projectId.trim() : null;\n      if (requestedProjectId && !service.projects.get(requestedProjectId)) {\n        return c.json({ ok: false, error: 'Project not found' }, 404);\n      }\n    }\n    const result = await service.sessions.patch(key, patch);\n    if (result.ok === false) {\n      return c.json({ ok: false, error: result.error }, 404);\n    }\n    if (requestedProjectId !== undefined) {\n      try {\n        if (requestedProjectId) {\n          service.projects.attachSession(key, requestedProjectId);\n        } else {\n          service.projects.detachSession(key);\n        }\n      } catch (error) {\n        return c.json({ ok: false, error: error instanceof Error ? error.message : String(error) }, 404);\n      }\n    }\n\n    const session = await service.sessions.getSession(key);\n    return c.json({ ok: true, session });\n  });\n\n  // GET /api/sessions/:key/export - Export session (must be before /:key)\n  authenticated.get('/api/sessions/:key/export', async (c) => {\n    const key = c.req.param('key');\n    const format = c.req.query('format') as any || 'json';\n    const result = await service.sessions.export(key, format);\n    return c.json(result);\n  });\n\n  authenticated.post('/api/sessions/import', async (c) => {\n    const body = await c.req.json().catch(() => ({}));\n    const targetKey = typeof body.targetKey === 'string' ? body.targetKey : '';\n    const content = typeof body.content === 'string' ? body.content : '';\n    if (!targetKey.trim()) {\n      return c.json({ ok: false, error: 'targetKey is required' }, 400);\n    }\n    if (!content.trim()) {\n      return c.json({ ok: false, error: 'content is required' }, 400);\n    }\n    try {\n      const result = await service.sessions.importExport(targetKey, content);\n      return c.json({ ok: true, ...result });\n    } catch (err) {\n      const errorMessage = err instanceof Error ? err.message : String(err);\n      return c.json({ ok: false, error: errorMessage }, 400);\n    }\n  });\n\n  authenticated.post('/api/sessions/:key/btw', async (c) => {\n    const key = c.req.param('key');\n    const body = await c.req.json().catch(() => ({}));\n    const question = typeof body.question === 'string' ? body.question : '';\n    const result = await service.sessions.btwQuery(key, question);\n    return c.json(result);\n  });\n\n  authenticated.post('/api/sessions/:key/fork', async (c) => {\n    const key = c.req.param('key');\n    const body = await c.req.json().catch(() => ({}));\n    const targetKey = typeof body.targetKey === 'string' ? body.targetKey : '';\n    if (!targetKey.trim()) {\n      return c.json({ ok: false, error: 'targetKey is required' }, 400);\n    }\n    try {\n      const result = await service.sessions.fork(key, targetKey);\n      return c.json({ ok: true, ...result });\n    } catch (err) {\n      const errorMessage = err instanceof Error ? err.message : String(err);\n      return c.json({ ok: false, error: errorMessage }, 400);\n    }\n  });\n\n  authenticated.post('/api/sessions/:key/fork-row', async (c) => {\n    const key = c.req.param('key');\n    const body = await c.req.json().catch(() => ({}));\n    const targetKey = typeof body.targetKey === 'string' ? body.targetKey : '';\n    const throughRow = typeof body.throughRow === 'number' ? Math.trunc(body.throughRow) : NaN;\n    if (!targetKey.trim()) {\n      return c.json({ ok: false, error: 'targetKey is required' }, 400);\n    }\n    if (!Number.isFinite(throughRow) || throughRow < 1) {\n      return c.json({ ok: false, error: 'throughRow must be a positive integer' }, 400);\n    }\n    try {\n      const result = await service.sessions.forkRows(key, targetKey, { throughRow });\n      return c.json({ ok: true, ...result });\n    } catch (err) {\n      const errorMessage = err instanceof Error ? err.message : String(err);\n      return c.json({ ok: false, error: errorMessage }, 400);\n    }\n  });\n\n  // DELETE /api/sessions/:key/messages — delete LLM rows by range or by user turn.\n  // `userRoundIndex` (0-based among user messages) removes the user row and every following\n  // assistant / tool / toolResult row until the next user. Prefer this from the web console so\n  // tool loops are not left orphaned after retry/delete.\n  authenticated.delete('/api/sessions/:key/messages', async (c) => {\n    const key = c.req.param('key');\n    const body = await c.req.json().catch(() => ({}));\n    const loaded = await service.sessionIndexInstance.loadMessages(key);\n    if (!loaded) {\n      return c.json({ error: 'Session not found' }, 404);\n    }\n\n    let startIndex = typeof body.startIndex === 'number' ? body.startIndex : -1;\n    let count = typeof body.count === 'number' ? body.count : 0;\n    const userRoundIndex =\n      typeof body.userRoundIndex === 'number' ? body.userRoundIndex : undefined;\n\n    if (userRoundIndex !== undefined) {\n      const range = computeUserRoundDeleteRange(loaded, userRoundIndex);\n      if (!range) {\n        return c.json({ error: 'User round index out of range' }, 400);\n      }\n      startIndex = range.startIndex;\n      count = range.count;\n    }\n\n    if (startIndex < 0 || count <= 0) {\n      return c.json({ error: 'Invalid startIndex or count' }, 400);\n    }\n    if (startIndex >= loaded.length) {\n      return c.json({ error: 'Index out of range' }, 400);\n    }\n    const deleteCount = Math.min(count, loaded.length - startIndex);\n    const removed = loaded.slice(startIndex, startIndex + deleteCount);\n    const next = loaded.slice(0, startIndex).concat(loaded.slice(startIndex + deleteCount));\n    await service.sessionIndexInstance.saveMessages(key, next);\n    await deleteMediaUrisNoLongerReferenced({ removed, remaining: next });\n    return c.json({ ok: true, deleted: deleteCount });\n  });\n\n  // POST /api/sessions/:key/reset - Reset session (archive transcript, new session id; keep key + overrides)\n  authenticated.post('/api/sessions/:key/reset', async (c) => {\n    const blocked = ensureGatewayReadyForSessions(c, service, 'sessions.reset');\n    if (blocked) {\n      return blocked;\n    }\n    const key = c.req.param('key');\n    const result = await service.sessions.reset(key);\n    if (result.ok === false) {\n      const status = result.error === 'Session not found' ? 404 : 400;\n      return c.json({ ok: false, error: result.error }, status);\n    }\n    const session = await service.sessions.getSession(key);\n    return c.json({\n      ok: true,\n      reset: true,\n      sessionId: result.sessionId,\n      previousSessionId: result.previousSessionId,\n      session,\n    });\n  });\n\n  // DELETE /api/sessions/:key - Delete session (removes key from index)\n  authenticated.delete('/api/sessions/:key', async (c) => {\n    const key = c.req.param('key');\n    const result = await service.sessions.delete(key);\n    return c.json(result);\n  });\n\n  // POST /api/sessions/:key/archive - Archive session\n  authenticated.post('/api/sessions/:key/archive', async (c) => {\n    const key = c.req.param('key');\n    const result = await service.sessions.archive(key);\n    return c.json(result);\n  });\n\n  // POST /api/sessions/:key/unarchive - Unarchive session\n  authenticated.post('/api/sessions/:key/unarchive', async (c) => {\n    const key = c.req.param('key');\n    const result = await service.sessions.unarchive(key);\n    return c.json(result);\n  });\n\n  // POST /api/sessions/:key/pin - Pin session\n  authenticated.post('/api/sessions/:key/pin', async (c) => {\n    const key = c.req.param('key');\n    const result = await service.sessions.pin(key);\n    return c.json(result);\n  });\n\n  // POST /api/sessions/:key/unpin - Unpin session\n  authenticated.post('/api/sessions/:key/unpin', async (c) => {\n    const key = c.req.param('key');\n    const result = await service.sessions.unpin(key);\n    return c.json(result);\n  });\n\n  // POST /api/sessions/:key/rename - Rename session\n  authenticated.post('/api/sessions/:key/rename', async (c) => {\n    const key = c.req.param('key');\n\n    const body = await c.req.json();\n    const { name } = body;\n    const result = await service.sessions.rename(key, name);\n    return c.json(result);\n  });\n\n  // ========== Subagent REST API (/api/subagents) ==========\n\n  // GET /api/subagents - List subagent sessions\n  authenticated.get('/api/subagents', async (c) => {\n    const query = c.req.query();\n    const result = await service.sessions.listSubagents({\n      limit: query.limit ? parseInt(query.limit) : undefined,\n      offset: query.offset ? parseInt(query.offset) : undefined,\n    });\n    return c.json(result);\n  });\n\n  // GET /api/subagents/:key - Get subagent session detail\n  authenticated.get('/api/subagents/:key', async (c) => {\n    const key = c.req.param('key');\n    // Verify it's a subagent session\n    if (!key.startsWith('subagent:')) {\n      return c.json({ error: 'Not a subagent session' }, 400);\n    }\n    const includeRaw = c.req.query('include') ?? '';\n    const includeSet = new Set(\n      includeRaw\n        .split(',')\n        .map((s) => s.trim())\n        .filter(Boolean),\n    );\n    const session = await service.sessions.getSession(key, {\n      includeTranscriptSummary: includeSet.has('transcript'),\n      includeTranscriptRows: includeSet.has('transcriptRows'),\n    });\n    if (!session) {\n      return c.json({ error: 'Subagent session not found' }, 404);\n    }\n    return c.json({ session });\n  });\n}\n"],"mappings":";;;;;;;;;;;kBAIkE;AAalE,MAAM,MAAM,yBAAyB,WAAW;AAIhD,MAAM,gBAAgB,IAAI,IAAiB;CAAC;CAAQ;CAAgB;CAAqB;CAAQ;CAAY,CAAC;AAC9G,MAAM,6BAA6B;AAEnC,SAAS,cAAc,OAAqC;AAC1D,QAAO,cAAc,IAAI,MAAqB;;AAGhD,SAAS,8BACP,GACA,SACA,QACiB;AACjB,KAAI,QAAQ,gBAAgB,CAC1B,QAAO;AAET,QAAO,0BAA0B,GAAG,OAAO;;AAG7C,SAAS,iBAAiB,OAA2B,UAAkB,KAAqB;CAC1F,MAAM,SAAS,QAAQ,OAAO,SAAS,OAAO,GAAG,GAAG;AACpD,KAAI,CAAC,OAAO,SAAS,OAAO,CAAE,QAAO;AACrC,QAAO,KAAK,IAAI,KAAK,KAAK,IAAI,GAAG,OAAO,CAAC;;AAG3C,SAAS,YAAY,OAAmC;CACtD,MAAM,SAAS,QAAQ,OAAO,SAAS,OAAO,GAAG,GAAG;AACpD,QAAO,OAAO,SAAS,OAAO,GAAG,KAAK,IAAI,GAAG,OAAO,GAAG;;AAGzD,SAAS,2BAA2B,QAKZ;AACtB,QAAO;EACL,eAAe,OAAO;EACtB,cAAc;GAAC,OAAO;GAAW;GAAU,OAAO;GAAO,CAAC,KAAK,IAAI;EACnE,aAAa;EACb,uBAAuB;EACvB,SAAS;GACP,SAAS,OAAO;GAChB,QAAQ,OAAO;GACf,WAAW,OAAO;GAClB,UAAU;GACV,QAAQ,OAAO;GAChB;EACD,YAAY,EACV,qBAAqB,OAAO,WAAW,aAAa,OAAO,OAAO,WAAW,QAAQ,EACtF;EACF;;AAGH,SAAgB,uBAAuB,eAAqB,MAAoC;CAC9F,MAAM,EAAE,YAAY;AAIpB,eAAc,IAAI,0BAA0B,OAAO,MAAM;EACvD,MAAM,UAAU,8BAA8B,GAAG,SAAS,gBAAgB;AAC1E,MAAI,QACF,QAAO;EAGT,MAAM,eAAe,iBAAiB,EAAE,IAAI,MAAM,eAAe,EAAE,IAAI,GAAG;EAC1E,MAAM,gBAAgB,YAAY,EAAE,IAAI,MAAM,gBAAgB,CAAC;EAC/D,MAAM,sBAAsB,iBAAiB,EAAE,IAAI,MAAM,sBAAsB,EAAE,GAAG,GAAG;EACvF,MAAM,aAAa,iBAAiB,EAAE,IAAI,MAAM,aAAa,EAAE,IAAI,IAAI;EACvE,MAAM,cAAc,YAAY,EAAE,IAAI,MAAM,cAAc,CAAC;EAC3D,MAAM,YAAY,iBAAiB,EAAE,IAAI,MAAM,YAAY,EAAE,4BAA4B,KAAK;EAC9F,MAAM,eAAe,KAAK,KAAK,GAAG,YAAY,KAAK,KAAK,KAAK;EAC7D,MAAM,oBAAoB,EAAE,IAAI,MAAM,oBAAoB,EAAE,MAAM,IAAI,KAAA;EAEtE,MAAM,WAAW,QAAQ,SAAS,wBAAwB;GACxD,QAAQ;GACR,OAAO;GACP,QAAQ;GACR;GACA,eAAe;GACf;GACD,CAAC;EACF,MAAM,eAAe,MAAM,QAAQ,IACjC,SAAS,MAAM,IAAI,OAAO,YAAY;GACpC,MAAM,WAAW,MAAM,QAAQ,SAAS,aAAa;IACnD,WAAW,QAAQ;IACnB,OAAO;IACP,QAAQ;IACR;IACA,eAAe;IACf;IACA,QAAQ;IACR,WAAW;IACZ,CAAC;AACF,UAAO;IACL;IACA,UAAU,SAAS;IACnB,cAAc,SAAS;IACvB,gBAAgB,SAAS;IAC1B;IACD,CACH;EACD,MAAM,QAAQ,MAAM,QAAQ,SAAS,aAAa;GAChD,YAAY;GACZ,OAAO;GACP,QAAQ;GACR;GACA,eAAe;GACf;GACA,QAAQ;GACR,WAAW;GACZ,CAAC;AAEF,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,UAAU;IACR,OAAO;IACP,OAAO,SAAS;IAChB,OAAO,SAAS;IAChB,QAAQ,SAAS;IACjB,SAAS,SAAS;IACnB;GACD;GACD,CAAC;GACF;AAGF,eAAc,KAAK,iBAAiB,OAAO,MAAM;EAC/C,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,UAAU,KAAK,WAAW;EAChC,MAAM,YAAY,OAAO,KAAK,cAAc,YAAY,KAAK,UAAU,MAAM,GAAG,KAAK,UAAU,MAAM,GAAG,KAAA;EACxG,MAAM,aAAa,QAAQ;AAC3B,MAAI,aAAa,CAAC,QAAQ,SAAS,IAAI,UAAU,CAC/C,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAqB,EAAE,IAAI;EAE/D,MAAM,UAAU,sBAAsB;GACpC,QAAQ;GACR,UAAU,QAAQ;GAClB,iBAAiB,OAAO,KAAK,YAAY,WAAW,KAAK,UAAU,KAAA;GACnE;GACD,CAAC;AAGF,MAAI,KAAK,SAAS;GAChB,MAAM,aAAa,gBAAgB;IACjC;IACA,QAAQ;IACR,WAAW;IACX,UAAU;IACV,QAAQ,KAAK;IACd,CAAC;AAEF,SAAM,QAAQ,qBAAqB,aAAa,YAAY,EAAE,EAAE,EAC9D,UAAU,2BAA2B;IACnC;IACA,QAAQ;IACR,WAAW;IACX,QAAQ,KAAK;IACd,CAAC,EACH,CAAC;AACF,OAAI,UACF,SAAQ,SAAS,cAAc,YAAY,UAAU;GAEvD,MAAM,UAAU,MAAM,QAAQ,SAAS,WAAW,WAAW;AAC7D,UAAO,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI;;EAGjC,MAAM,SAAS,QAAQ,YAAY;EACnC,MAAM,aAAa,gBAAgB;GACjC;GACA,QAAQ;GACR,WAAW;GACX,UAAU;GACV,QAAQ;GACT,CAAC;AAEF,QAAM,QAAQ,qBAAqB,aAAa,YAAY,EAAE,EAAE,EAC9D,UAAU,2BAA2B;GACnC;GACA,QAAQ;GACR,WAAW;GACX,QAAQ;GACT,CAAC,EACH,CAAC;AAEF,MAAI,UACF,SAAQ,SAAS,cAAc,YAAY,UAAU;EAEvD,MAAM,UAAU,MAAM,QAAQ,SAAS,WAAW,WAAW;AAC7D,SAAO,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI;GAC/B;AAGF,eAAc,IAAI,iBAAiB,OAAO,MAAM;EAC9C,MAAM,UAAU,8BAA8B,GAAG,SAAS,gBAAgB;AAC1E,MAAI,QACF,QAAO;EAET,MAAM,QAAQ,EAAE,IAAI,OAAO;EAC3B,MAAM,eAAe,MAAM,OACvB,MAAM,IAAI,CACX,KAAK,UAAU,MAAM,MAAM,CAAC,CAC5B,OAAO,cAAc;EACxB,MAAM,SAAS,MAAM,QAAQ,SAAS,aAAa;GACjD,QAAQ,MAAM;GACd,QAAQ,MAAM;GACd,SAAS,MAAM;GACf,cAAc,cAAc,SAAS,eAAe,KAAA;GACpD,eAAe,MAAM,kBAAkB;GACvC,WAAW,MAAM;GACjB,YAAY,MAAM,eAAe;GACjC,cAAc,MAAM,eAAe,SAAS,MAAM,aAAa,GAAG,KAAA;GAClE,eAAe,MAAM,kBAAkB;GACvC,mBAAmB,MAAM;GACzB,OAAO,MAAM,QAAQ,SAAS,MAAM,MAAM,GAAG,KAAA;GAC7C,QAAQ,MAAM,SAAS,SAAS,MAAM,OAAO,GAAG,KAAA;GACjD,CAAC;AACF,SAAO,EAAE,KAAK,OAAO;GACrB;AAGF,eAAc,IAAI,uBAAuB,OAAO,MAAM;EACpD,MAAM,SAAS,MAAM,QAAQ,SAAS,OAAO;AAC7C,SAAO,EAAE,KAAK,OAAO;GACrB;AAGF,eAAc,IAAI,0BAA0B,OAAO,MAAM;EACvD,MAAM,UAAU,EAAE,IAAI,MAAM,UAAU;EACtC,MAAM,UAAU,MAAM,QAAQ,SAAS,QAAQ,WAAW,KAAA,EAAU;AACpE,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,SAAS;GAAE,CAAC;GACjD;AAGF,eAAc,IAAI,yBAAyB,OAAO,MAAM;EACtD,MAAM,SAAS,MAAM,QAAQ,SAAS,eAAe;GACnD,WAAW,EAAE,IAAI,MAAM,YAAY;GACnC,YAAY,EAAE,IAAI,MAAM,aAAa,IAAI,EAAE,IAAI,MAAM,MAAM;GAC5D,CAAC;AACF,MAAI,CAAC,OACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAqB,EAAE,IAAI;AAE/D,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;GAAQ,CAAC;GAC5C;AAGF,eAAc,KAAK,yBAAyB,OAAO,MAAM;EACvD,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,SAAS,MAAM,QAAQ,SAAS,eAAe;GACnD,WAAW,OAAO,KAAK,cAAc,WAAW,KAAK,YAAY,KAAA;GACjE,YAAY,OAAO,KAAK,eAAe,WAAW,KAAK,aAAa,KAAA;GACpE,KAAK,OAAO,KAAK,QAAQ,WAAW,KAAK,MAAM,KAAA;GAChD,CAAC;AACF,MAAI,CAAC,OACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAqB,EAAE,IAAI;AAE/D,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;GAAQ,CAAC;GAC5C;AAGF,eAAc,IAAI,0BAA0B,OAAO,MAAM;EACvD,MAAM,UAAU,8BAA8B,GAAG,SAAS,eAAe;AACzE,MAAI,QACF,QAAO;EAET,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;AAE9B,MAAI,CAAC,MADiB,QAAQ,SAAS,WAAW,IAAI,CAEpD,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAqB,EAAE,IAAI;AAE/D,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,QAAQ,SAAS,aAAa,IAAI;GAAE,CAAC;GACxE;AAGF,eAAc,IAAI,mCAAmC,OAAO,MAAM;EAChE,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAC9B,MAAM,UAAU,MAAM,QAAQ,SAAS,eAAe,IAAI;AAC1D,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM;GAAS,CAAC;GACpC;AAEF,eAAc,MAAM,mCAAmC,OAAO,MAAM;EAClE,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAC9B,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,SAAS,MAAM,QAAQ,SAAS,iBAAiB,KAAK,KAAK;AACjE,MAAI,CAAC,OAAO,GACV,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,OAAO;GAAO,EAAE,IAAI;AAExD,SAAO,EAAE,KAAK,EAAE,IAAI,MAAM,CAAC;GAC3B;AAGF,eAAc,IAAI,+BAA+B,OAAO,MAAM;EAC5D,MAAM,UAAU,8BAA8B,GAAG,SAAS,oBAAoB;AAC9E,MAAI,QACF,QAAO;EAET,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAC9B,MAAM,WAAW,EAAE,IAAI,MAAM,QAAQ;EACrC,MAAM,cAAc,WAAW,OAAO,SAAS,UAAU,GAAG,GAAG,KAAA;EAC/D,MAAM,QACJ,gBAAgB,KAAA,KAAa,OAAO,SAAS,YAAY,GACrD,KAAK,IAAI,KAAK,KAAK,IAAI,GAAG,YAAY,CAAC,GACvC,KAAA;EAEN,MAAM,SAAS,EAAE,IAAI,MAAM,SAAS,EAAE,MAAM;EAC5C,MAAM,YAAY,EAAE,IAAI,MAAM,SAAS;EACvC,MAAM,eAAe,YAAY,OAAO,SAAS,WAAW,GAAG,GAAG;EAClE,MAAM,SAAS,OAAO,SAAS,aAAa,GAAG,KAAK,IAAI,GAAG,aAAa,GAAG;EAE3E,MAAM,SAAS,MAAM,QAAQ,SAAS,eAAe,KAAK;GACxD;GACA;GACA,GAAI,SAAS,EAAE,QAAQ,GAAG,EAAE;GAC7B,CAAC;AACF,MAAI,CAAC,OACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAqB,EAAE,IAAI;EAG/D,MAAM,WAAW,wBAAwB,OAAO,QAAQ,UAAU,EAAE,OAAO,CAAC;AAC5E,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS,EAAE,UAAU;GACrB,YAAY,OAAO;GACpB,CAAC;GACF;AAGF,eAAc,IAAI,8BAA8B,OAAO,MAAM;EAC3D,MAAM,UAAU,8BAA8B,GAAG,SAAS,mBAAmB;AAC7E,MAAI,QACF,QAAO;EAET,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAC9B,MAAM,YAAY,EAAE,IAAI,MAAM,SAAS;EACvC,MAAM,WAAW,EAAE,IAAI,MAAM,QAAQ;EACrC,MAAM,SAAS,EAAE,IAAI,MAAM,SAAS,EAAE,MAAM;EAC5C,MAAM,eAAe,YAAY,OAAO,SAAS,WAAW,GAAG,GAAG;EAClE,MAAM,cAAc,WAAW,OAAO,SAAS,UAAU,GAAG,GAAG;EAC/D,MAAM,SAAS,OAAO,SAAS,aAAa,GAAG,KAAK,IAAI,GAAG,aAAa,GAAG;EAC3E,MAAM,QAAQ,OAAO,SAAS,YAAY,GAAG,KAAK,IAAI,KAAK,KAAK,IAAI,GAAG,YAAY,CAAC,GAAG;EACvF,MAAM,SAAS,MAAM,QAAQ,SAAS,eAAe,KAAK;GACxD;GACA;GACA,GAAI,SAAS,EAAE,QAAQ,GAAG,EAAE;GAC5B,oBAAoB;GACrB,CAAC;AAEF,MAAI,CAAC,OACH,QAAO,EAAE,KAAK,EAAE,OAAO,qBAAqB,EAAE,IAAI;AAGpD,SAAO,EAAE,KAAK,OAAO;GACrB;AAGF,eAAc,IAAI,+BAA+B,OAAO,MAAM;EAC5D,MAAM,UAAU,8BAA8B,GAAG,SAAS,mBAAmB;AAC7E,MAAI,QACF,QAAO;EAET,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAC9B,MAAM,QAAQ,MAAM,QAAQ,SAAS,YAAY,IAAI;AACrD,MAAI,CAAC,MACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAqB,EAAE,IAAI;AAE/D,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM;GAAO,CAAC;GAClC;AAGF,eAAc,IAAI,wCAAwC,OAAO,MAAM;EACrE,MAAM,UAAU,8BAA8B,GAAG,SAAS,mBAAmB;AAC7E,MAAI,QACF,QAAO;EAET,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAC9B,MAAM,eAAe,EAAE,IAAI,MAAM,YAAY;EAC7C,MAAM,YAAY,eAAe,OAAO,SAAS,cAAc,GAAG,GAAG;AACrE,MAAI,CAAC,OAAO,SAAS,UAAU,IAAI,YAAY,EAC7C,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAwC,EAAE,IAAI;EAElF,MAAM,SAAS,iBAAiB,EAAE,IAAI,MAAM,SAAS,EAAE,IAAI,IAAI;EAC/D,MAAM,QAAQ,iBAAiB,EAAE,IAAI,MAAM,QAAQ,EAAE,KAAK,IAAI;EAC9D,MAAM,SAAS,MAAM,QAAQ,SAAS,oBAAoB,KAAK;GAAE;GAAW;GAAQ;GAAO,CAAC;AAC5F,MAAI,CAAC,OACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAqB,EAAE,IAAI;AAE/D,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;GAAQ,CAAC;GAC5C;AAGF,eAAc,KAAK,yCAAyC,OAAO,MAAM;EACvE,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;AAE9B,MAAI,CAAC,MADc,QAAQ,qBAAqB,mBAAmB,IAAI,CAErE,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAqB,EAAE,IAAI;EAE/D,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,KAAK,OAAO,KAAK,OAAO,YAAY,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,MAAM,GAAG,KAAA;EAC5E,MAAM,OAAO,OAAO,KAAK,SAAS,WAAW,KAAK,OAAO,KAAA;EACzD,MAAM,OACJ,KAAK,SAAS,KAAA,KAAa,OAAO,KAAK,SAAS,YAAY,KAAK,SAAS,QAAQ,CAAC,MAAM,QAAQ,KAAK,KAAK,GACtG,KAAK,OACN,KAAA;AACN,QAAM,QAAQ,qBAAqB,6BAA6B,KAAK;GAAE;GAAI;GAAM;GAAM,CAAC;AACxF,SAAO,EAAE,KAAK,EAAE,IAAI,MAAM,CAAC;GAC3B;AAGF,eAAc,KAAK,uCAAuC,OAAO,MAAM;EACrE,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;AAE9B,MAAI,CAAC,MADc,QAAQ,qBAAqB,mBAAmB,IAAI,CAErE,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAqB,EAAE,IAAI;EAE/D,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,WAAW,OAAO,KAAK,aAAa,WAAW,KAAK,SAAS,MAAM,GAAG;AAC5E,MAAI,CAAC,SACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAwB,EAAE,IAAI;EAElE,MAAM,QAAQ,OAAO,KAAK,UAAU,YAAY,KAAK,MAAM,MAAM,GAAG,KAAK,MAAM,MAAM,GAAG,KAAA;AACxF,QAAM,QAAQ,qBAAqB,2BAA2B,KAAK;GAAE;GAAU;GAAO,CAAC;AACvF,SAAO,EAAE,KAAK,EAAE,IAAI,MAAM,CAAC;GAC3B;AAGF,eAAc,KAAK,wCAAwC,OAAO,MAAM;EACtE,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;AAE9B,MAAI,CAAC,MADc,QAAQ,qBAAqB,mBAAmB,IAAI,CAErE,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAqB,EAAE,IAAI;EAE/D,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,aAAa,OAAO,KAAK,eAAe,WAAW,KAAK,WAAW,MAAM,GAAG;AAClF,MAAI,CAAC,WACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAA0B,EAAE,IAAI;AAEpE,QAAM,QAAQ,qBAAqB,4BAA4B,KAAK;GAClE;GACA,MAAM,KAAK;GACZ,CAAC;AACF,SAAO,EAAE,KAAK,EAAE,IAAI,MAAM,CAAC;GAC3B;AAGF,eAAc,KAAK,gDAAgD,OAAO,MAAM;EAC9E,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;AAE9B,MAAI,CAAC,MADc,QAAQ,qBAAqB,mBAAmB,IAAI,CAErE,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAqB,EAAE,IAAI;EAE/D,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,aAAa,OAAO,KAAK,eAAe,WAAW,KAAK,WAAW,MAAM,GAAG;AAClF,MAAI,CAAC,WACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAA0B,EAAE,IAAI;EAEpE,MAAM,UACJ,OAAO,KAAK,YAAY,YAAY,MAAM,QAAQ,KAAK,QAAQ,GAAG,KAAK,UAAU;AACnF,QAAM,QAAQ,qBAAqB,mCAAmC,KAAK;GACzE;GACA;GACA,SAAS,OAAO,KAAK,YAAY,YAAY,KAAK,UAAU,KAAA;GAC5D,SAAS,KAAK;GACf,CAAC;AACF,6BAA2B,KAAK,kCAAkC;AAClE,SAAO,EAAE,KAAK,EAAE,IAAI,MAAM,CAAC;GAC3B;AAGF,eAAc,KAAK,sCAAsC,OAAO,MAAM;EACpE,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;AAE9B,MAAI,CAAC,MADc,QAAQ,qBAAqB,mBAAmB,IAAI,CAErE,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAqB,EAAE,IAAI;EAE/D,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,UAAU,OAAO,KAAK,YAAY,WAAW,KAAK,QAAQ,MAAM,GAAG;AACzE,MAAI,CAAC,QACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAuB,EAAE,IAAI;AAEjE,QAAM,QAAQ,qBAAqB,mCAAmC,KAAK;GACzE;GACA,QAAQ,OAAO,KAAK,WAAW,WAAW,KAAK,SAAS;GACxD,UAAU,OAAO,KAAK,aAAa,WAAW,KAAK,WAAW,KAAK,aAAa,OAAO,OAAO,KAAA;GAC9F,QAAQ,OAAO,KAAK,WAAW,WAAW,KAAK,SAAS,KAAK,WAAW,OAAO,OAAO,KAAA;GACtF,oBAAoB,KAAK,uBAAuB;GAChD,WAAW,KAAK,cAAc;GAC9B,gBAAgB,OAAO,KAAK,mBAAmB,WAAW,KAAK,iBAAiB,KAAA;GACjF,CAAC;AACF,6BAA2B,KAAK,kCAAkC;AAClE,SAAO,EAAE,KAAK,EAAE,IAAI,MAAM,CAAC;GAC3B;AAGF,eAAc,IAAI,6CAA6C,OAAO,MAAM;EAC1E,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;AAE9B,MAAI,CAAC,MADc,QAAQ,qBAAqB,mBAAmB,IAAI,CAErE,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAqB,EAAE,IAAI;EAE/D,MAAM,cAAc,MAAM,QAAQ,SAAS,0BAA0B,IAAI;AACzE,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,aAAa;GAAE,CAAC;GACrD;AAEF,eAAc,IAAI,2DAA2D,OAAO,MAAM;EACxF,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAC9B,MAAM,eAAe,EAAE,IAAI,MAAM,eAAe;EAChD,MAAM,aAAa,MAAM,QAAQ,SAAS,wBAAwB,KAAK,aAAa;AACpF,MAAI,CAAC,WACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAwB,EAAE,IAAI;AAElE,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,YAAY;GAAE,CAAC;GACpD;AAEF,eAAc,KAAK,yCAAyC,OAAO,MAAM;EACvE,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAC9B,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,eAAe,OAAO,KAAK,iBAAiB,WAAW,KAAK,aAAa,MAAM,GAAG;AACxF,MAAI,CAAC,aACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAyB,EAAE,IAAI;AAEnE,MAAI;AACF,SAAM,QAAQ,SAAS,4BAA4B,KAAK,aAAa;WAC9D,KAAK;AACZ,iBAAc,KAAK,GAAG,KAAK,0BAA0B;IAAE,WAAW;IAAqB,YAAY;IAAK,CAAC;GACzG,MAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAC5D,OAAI,IAAI,SAAS,YAAY,IAAI,IAAI,SAAS,UAAU,CACtD,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAAK,EAAE,IAAI;AAE/C,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAAK,EAAE,IAAI;;EAE/C,MAAM,UAAU,MAAM,QAAQ,SAAS,WAAW,IAAI;AACtD,MAAI,CAAC,QACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAqB,EAAE,IAAI;AAE/D,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM;GAAS,CAAC;GACpC;AAEF,eAAc,KAAK,qCAAqC,OAAO,MAAM;EACnE,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;AAE9B,MAAI,CAAC,MADiB,QAAQ,SAAS,WAAW,IAAI,CAEpD,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAqB,EAAE,IAAI;EAE/D,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,eAAe,OAAO,KAAK,iBAAiB,WAAW,KAAK,eAAe,KAAA;EACjF,MAAM,QAAQ,OAAO,KAAK,UAAU,YAAY,KAAK,QAAQ;EAC7D,MAAM,SAAS,MAAM,QAAQ,SAAS,cAAc,KAAK;GAAE;GAAc;GAAO,CAAC;AACjF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,QAAQ;GAAE,CAAC;GAChD;AAGF,eAAc,IAAI,sBAAsB,OAAO,MAAM;EACnD,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAC9B,MAAM,aAAa,EAAE,IAAI,MAAM,UAAU,IAAI;EAC7C,MAAM,aAAa,IAAI,IACrB,WACG,MAAM,IAAI,CACV,KAAK,MAAM,EAAE,MAAM,CAAC,CACpB,OAAO,QAAQ,CACnB;EACD,MAAM,oBAAoB,WAAW,IAAI,aAAa;EACtD,MAAM,wBAAwB,WAAW,IAAI,iBAAiB;EAC9D,MAAM,YAAY,EAAE,IAAI,MAAM,SAAS;EACvC,MAAM,WAAW,EAAE,IAAI,MAAM,QAAQ;AAGrC,MAFuB,cAAc,KAAA,KAAa,aAAa,KAAA,GAE3C;GAClB,MAAM,UAAU,8BAA8B,GAAG,SAAS,mBAAmB;AAC7E,OAAI,QACF,QAAO;GAET,MAAM,eAAe,YAAY,OAAO,SAAS,WAAW,GAAG,GAAG;GAClE,MAAM,cAAc,WAAW,OAAO,SAAS,UAAU,GAAG,GAAG;GAC/D,MAAM,SAAS,OAAO,SAAS,aAAa,GAAG,KAAK,IAAI,GAAG,aAAa,GAAG;GAC3E,MAAM,QAAQ,OAAO,SAAS,YAAY,GAAG,KAAK,IAAI,KAAK,KAAK,IAAI,GAAG,YAAY,CAAC,GAAG;GACvF,MAAM,SAAS,MAAM,QAAQ,SAAS,eAAe,KAAK;IACxD;IACA;IACA,0BAA0B;IAC1B;IACD,CAAC;AACF,OAAI,CAAC,OACH,QAAO,EAAE,KAAK,EAAE,OAAO,qBAAqB,EAAE,IAAI;AAEpD,UAAO,EAAE,KAAK,OAAO;;EAGvB,MAAM,UAAU,MAAM,QAAQ,SAAS,WAAW,KAAK;GACrD,0BAA0B;GAC1B;GACD,CAAC;AACF,MAAI,CAAC,QACH,QAAO,EAAE,KAAK,EAAE,OAAO,qBAAqB,EAAE,IAAI;AAEpD,SAAO,EAAE,KAAK,EAAE,SAAS,CAAC;GAC1B;AAGF,eAAc,MAAM,sBAAsB,OAAO,MAAM;EACrD,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAC9B,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,QAKF,EAAE;AACN,MAAI,OAAO,KAAK,SAAS,SACvB,OAAM,OAAO,KAAK;AAEpB,MAAI,MAAM,QAAQ,KAAK,KAAK,CAC1B,OAAM,OAAO,KAAK;AAEpB,MAAI,OAAO,KAAK,gBAAgB,UAC9B,OAAM,cAAc,KAAK;AAE3B,MAAI,KAAK,eAAe,KAAA,KAAa,OAAO,KAAK,eAAe,YAAY,KAAK,eAAe,KAC9F,OAAM,aAAa,KAAK;EAE1B,IAAI;AACJ,MAAI,eAAe,MAAM;AACvB,wBAAqB,OAAO,KAAK,cAAc,YAAY,KAAK,UAAU,MAAM,GAAG,KAAK,UAAU,MAAM,GAAG;AAC3G,OAAI,sBAAsB,CAAC,QAAQ,SAAS,IAAI,mBAAmB,CACjE,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAAqB,EAAE,IAAI;;EAGjE,MAAM,SAAS,MAAM,QAAQ,SAAS,MAAM,KAAK,MAAM;AACvD,MAAI,OAAO,OAAO,MAChB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,OAAO;GAAO,EAAE,IAAI;AAExD,MAAI,uBAAuB,KAAA,EACzB,KAAI;AACF,OAAI,mBACF,SAAQ,SAAS,cAAc,KAAK,mBAAmB;OAEvD,SAAQ,SAAS,cAAc,IAAI;WAE9B,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;IAAE,EAAE,IAAI;;EAIpG,MAAM,UAAU,MAAM,QAAQ,SAAS,WAAW,IAAI;AACtD,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM;GAAS,CAAC;GACpC;AAGF,eAAc,IAAI,6BAA6B,OAAO,MAAM;EAC1D,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAC9B,MAAM,SAAS,EAAE,IAAI,MAAM,SAAS,IAAW;EAC/C,MAAM,SAAS,MAAM,QAAQ,SAAS,OAAO,KAAK,OAAO;AACzD,SAAO,EAAE,KAAK,OAAO;GACrB;AAEF,eAAc,KAAK,wBAAwB,OAAO,MAAM;EACtD,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,YAAY,OAAO,KAAK,cAAc,WAAW,KAAK,YAAY;EACxE,MAAM,UAAU,OAAO,KAAK,YAAY,WAAW,KAAK,UAAU;AAClE,MAAI,CAAC,UAAU,MAAM,CACnB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAyB,EAAE,IAAI;AAEnE,MAAI,CAAC,QAAQ,MAAM,CACjB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAuB,EAAE,IAAI;AAEjE,MAAI;GACF,MAAM,SAAS,MAAM,QAAQ,SAAS,aAAa,WAAW,QAAQ;AACtE,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,GAAG;IAAQ,CAAC;WAC/B,KAAK;GACZ,MAAM,eAAe,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AACrE,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAAc,EAAE,IAAI;;GAExD;AAEF,eAAc,KAAK,0BAA0B,OAAO,MAAM;EACxD,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAC9B,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,WAAW,OAAO,KAAK,aAAa,WAAW,KAAK,WAAW;EACrE,MAAM,SAAS,MAAM,QAAQ,SAAS,SAAS,KAAK,SAAS;AAC7D,SAAO,EAAE,KAAK,OAAO;GACrB;AAEF,eAAc,KAAK,2BAA2B,OAAO,MAAM;EACzD,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAC9B,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,YAAY,OAAO,KAAK,cAAc,WAAW,KAAK,YAAY;AACxE,MAAI,CAAC,UAAU,MAAM,CACnB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAyB,EAAE,IAAI;AAEnE,MAAI;GACF,MAAM,SAAS,MAAM,QAAQ,SAAS,KAAK,KAAK,UAAU;AAC1D,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,GAAG;IAAQ,CAAC;WAC/B,KAAK;GACZ,MAAM,eAAe,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AACrE,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAAc,EAAE,IAAI;;GAExD;AAEF,eAAc,KAAK,+BAA+B,OAAO,MAAM;EAC7D,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAC9B,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,YAAY,OAAO,KAAK,cAAc,WAAW,KAAK,YAAY;EACxE,MAAM,aAAa,OAAO,KAAK,eAAe,WAAW,KAAK,MAAM,KAAK,WAAW,GAAG;AACvF,MAAI,CAAC,UAAU,MAAM,CACnB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAyB,EAAE,IAAI;AAEnE,MAAI,CAAC,OAAO,SAAS,WAAW,IAAI,aAAa,EAC/C,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAyC,EAAE,IAAI;AAEnF,MAAI;GACF,MAAM,SAAS,MAAM,QAAQ,SAAS,SAAS,KAAK,WAAW,EAAE,YAAY,CAAC;AAC9E,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,GAAG;IAAQ,CAAC;WAC/B,KAAK;GACZ,MAAM,eAAe,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AACrE,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAAc,EAAE,IAAI;;GAExD;AAMF,eAAc,OAAO,+BAA+B,OAAO,MAAM;EAC/D,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAC9B,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,SAAS,MAAM,QAAQ,qBAAqB,aAAa,IAAI;AACnE,MAAI,CAAC,OACH,QAAO,EAAE,KAAK,EAAE,OAAO,qBAAqB,EAAE,IAAI;EAGpD,IAAI,aAAa,OAAO,KAAK,eAAe,WAAW,KAAK,aAAa;EACzE,IAAI,QAAQ,OAAO,KAAK,UAAU,WAAW,KAAK,QAAQ;EAC1D,MAAM,iBACJ,OAAO,KAAK,mBAAmB,WAAW,KAAK,iBAAiB,KAAA;AAElE,MAAI,mBAAmB,KAAA,GAAW;GAChC,MAAM,QAAQ,4BAA4B,QAAQ,eAAe;AACjE,OAAI,CAAC,MACH,QAAO,EAAE,KAAK,EAAE,OAAO,iCAAiC,EAAE,IAAI;AAEhE,gBAAa,MAAM;AACnB,WAAQ,MAAM;;AAGhB,MAAI,aAAa,KAAK,SAAS,EAC7B,QAAO,EAAE,KAAK,EAAE,OAAO,+BAA+B,EAAE,IAAI;AAE9D,MAAI,cAAc,OAAO,OACvB,QAAO,EAAE,KAAK,EAAE,OAAO,sBAAsB,EAAE,IAAI;EAErD,MAAM,cAAc,KAAK,IAAI,OAAO,OAAO,SAAS,WAAW;EAC/D,MAAM,UAAU,OAAO,MAAM,YAAY,aAAa,YAAY;EAClE,MAAM,OAAO,OAAO,MAAM,GAAG,WAAW,CAAC,OAAO,OAAO,MAAM,aAAa,YAAY,CAAC;AACvF,QAAM,QAAQ,qBAAqB,aAAa,KAAK,KAAK;AAC1D,QAAM,kCAAkC;GAAE;GAAS,WAAW;GAAM,CAAC;AACrE,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;GAAa,CAAC;GACjD;AAGF,eAAc,KAAK,4BAA4B,OAAO,MAAM;EAC1D,MAAM,UAAU,8BAA8B,GAAG,SAAS,iBAAiB;AAC3E,MAAI,QACF,QAAO;EAET,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAC9B,MAAM,SAAS,MAAM,QAAQ,SAAS,MAAM,IAAI;AAChD,MAAI,OAAO,OAAO,OAAO;GACvB,MAAM,SAAS,OAAO,UAAU,sBAAsB,MAAM;AAC5D,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,OAAO;IAAO,EAAE,OAAO;;EAE3D,MAAM,UAAU,MAAM,QAAQ,SAAS,WAAW,IAAI;AACtD,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,OAAO;GACP,WAAW,OAAO;GAClB,mBAAmB,OAAO;GAC1B;GACD,CAAC;GACF;AAGF,eAAc,OAAO,sBAAsB,OAAO,MAAM;EACtD,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAC9B,MAAM,SAAS,MAAM,QAAQ,SAAS,OAAO,IAAI;AACjD,SAAO,EAAE,KAAK,OAAO;GACrB;AAGF,eAAc,KAAK,8BAA8B,OAAO,MAAM;EAC5D,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAC9B,MAAM,SAAS,MAAM,QAAQ,SAAS,QAAQ,IAAI;AAClD,SAAO,EAAE,KAAK,OAAO;GACrB;AAGF,eAAc,KAAK,gCAAgC,OAAO,MAAM;EAC9D,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAC9B,MAAM,SAAS,MAAM,QAAQ,SAAS,UAAU,IAAI;AACpD,SAAO,EAAE,KAAK,OAAO;GACrB;AAGF,eAAc,KAAK,0BAA0B,OAAO,MAAM;EACxD,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAC9B,MAAM,SAAS,MAAM,QAAQ,SAAS,IAAI,IAAI;AAC9C,SAAO,EAAE,KAAK,OAAO;GACrB;AAGF,eAAc,KAAK,4BAA4B,OAAO,MAAM;EAC1D,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAC9B,MAAM,SAAS,MAAM,QAAQ,SAAS,MAAM,IAAI;AAChD,SAAO,EAAE,KAAK,OAAO;GACrB;AAGF,eAAc,KAAK,6BAA6B,OAAO,MAAM;EAC3D,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAG9B,MAAM,EAAE,SAAS,MADE,EAAE,IAAI,MAAM;EAE/B,MAAM,SAAS,MAAM,QAAQ,SAAS,OAAO,KAAK,KAAK;AACvD,SAAO,EAAE,KAAK,OAAO;GACrB;AAKF,eAAc,IAAI,kBAAkB,OAAO,MAAM;EAC/C,MAAM,QAAQ,EAAE,IAAI,OAAO;EAC3B,MAAM,SAAS,MAAM,QAAQ,SAAS,cAAc;GAClD,OAAO,MAAM,QAAQ,SAAS,MAAM,MAAM,GAAG,KAAA;GAC7C,QAAQ,MAAM,SAAS,SAAS,MAAM,OAAO,GAAG,KAAA;GACjD,CAAC;AACF,SAAO,EAAE,KAAK,OAAO;GACrB;AAGF,eAAc,IAAI,uBAAuB,OAAO,MAAM;EACpD,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;AAE9B,MAAI,CAAC,IAAI,WAAW,YAAY,CAC9B,QAAO,EAAE,KAAK,EAAE,OAAO,0BAA0B,EAAE,IAAI;EAEzD,MAAM,aAAa,EAAE,IAAI,MAAM,UAAU,IAAI;EAC7C,MAAM,aAAa,IAAI,IACrB,WACG,MAAM,IAAI,CACV,KAAK,MAAM,EAAE,MAAM,CAAC,CACpB,OAAO,QAAQ,CACnB;EACD,MAAM,UAAU,MAAM,QAAQ,SAAS,WAAW,KAAK;GACrD,0BAA0B,WAAW,IAAI,aAAa;GACtD,uBAAuB,WAAW,IAAI,iBAAiB;GACxD,CAAC;AACF,MAAI,CAAC,QACH,QAAO,EAAE,KAAK,EAAE,OAAO,8BAA8B,EAAE,IAAI;AAE7D,SAAO,EAAE,KAAK,EAAE,SAAS,CAAC;GAC1B"}

package/dist/src/gateway/hono/routes/shares.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"shares.js","names":[],"sources":["../../../../../src/gateway/hono/routes/shares.ts"],"sourcesContent":["import type { Context, Hono } from 'hono';\nimport { createReadStream } from 'node:fs';\nimport { stat } from 'node:fs/promises';\nimport { createHash } from 'node:crypto';\nimport { Readable } from 'node:stream';\n\nimport { extractToken } from '../../auth.js';\nimport { getClientIpFromHeaders } from '../../security/loopback.js';\nimport { getShareStore, shareResponseContentType } from '../../../share/share-store.js';\nimport { getSiteShareStore } from '../../../share/site-share-store.js';\nimport { resolveSiteShareConfig } from '../../../share/site-share-config.js';\nimport { resolveShareUrl, resolveSiteShareUrl } from '../../../share/share-url.js';\nimport { resolveReverseProxyPublicUrl } from '../../public-url.js';\nimport { consumeSharePublicLimit } from '../../../share/share-rate-limit.js';\nimport { logShareAudit } from '../../../share/share-audit.js';\nimport {\n  renderShareLandingPage,\n  renderShareExpiredPage,\n  renderFolderLandingPage,\n} from '../../../share/share-landing.js';\nimport type { ShareExpiredReason } from '../../../share/share-landing.js';\nimport type { ShareConfig, ShareRecord } from '../../../share/share-types.js';\nimport { resolveGatewayEffectiveHost } from '../../../config/gateway-bind.js';\nimport { SHARE_CONFIG_DEFAULTS } from '../../../share/share-types.js';\nimport { createZipStream, planDirectoryFiles } from '../../../share/share-zip.js';\nimport {\n  audienceDefaults,\n  cleanupStagedSite,\n  decideShareKind,\n  forgetStagedSite,\n  makeDescription,\n  makeTitle,\n  probeShareTarget,\n  rememberStagedSite,\n  stageSingleHtmlAsSite,\n  type ShareAudience,\n  type ShareAutoMode,\n} from '../../../share/share-auto.js';\nimport {\n  deleteThumbnail,\n  placeholderSvg,\n  readThumbnail,\n  scheduleThumbnail,\n  thumbnailContentType,\n  thumbnailExists,\n} from '../../../share/share-thumbnail.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\nimport type { GatewayService } from '../../service.js';\n\nfunction getShareUrlContext(service: GatewayService) {\n  const gateway = service.currentConfig.gateway;\n  return {\n    gatewayHost: resolveGatewayEffectiveHost(service.currentConfig),\n    gatewayPort: gateway.port ?? 18790,\n    reverseProxyPublicUrl: resolveReverseProxyPublicUrl(service.currentConfig),\n  };\n}\n\nfunction thumbnailRenderContext(service: GatewayService) {\n  const cfg = { ...SHARE_CONFIG_DEFAULTS, ...resolveShareConfig(service) };\n  const port = service.currentConfig.gateway.port ?? 18790;\n  // Always use loopback for the internal renderer — never the public tunnel URL.\n  const internalBaseUrl = cfg.thumbnail.internalGatewayUrl ?? `http://127.0.0.1:${port}`;\n  return { config: cfg.thumbnail, internalBaseUrl };\n}\n\nfunction resolveShareConfig(service: GatewayService): Partial<ShareConfig> {\n  const raw = (service.currentConfig.gateway as Record<string, unknown>)?.share;\n  if (!raw || typeof raw !== 'object') return {};\n  return raw as Partial<ShareConfig>;\n}\n\nfunction hashGatewayToken(token: string): string {\n  return createHash('sha256').update(token, 'utf8').digest('hex').slice(0, 12);\n}\n\nconst MAX_CONCURRENT_DOWNLOADS_PER_TOKEN = 5;\nconst activeDownloads = new Map<string, number>();\nconst activeZipStreams = new Map<string, number>();\n\nfunction acquireDownloadSlot(token: string): boolean {\n  const current = activeDownloads.get(token) ?? 0;\n  if (current >= MAX_CONCURRENT_DOWNLOADS_PER_TOKEN) return false;\n  activeDownloads.set(token, current + 1);\n  return true;\n}\n\nfunction releaseDownloadSlot(token: string): void {\n  const current = activeDownloads.get(token) ?? 0;\n  if (current <= 1) activeDownloads.delete(token);\n  else activeDownloads.set(token, current - 1);\n}\n\nfunction acquireZipSlot(token: string, limit: number): boolean {\n  const current = activeZipStreams.get(token) ?? 0;\n  if (current >= limit) return false;\n  activeZipStreams.set(token, current + 1);\n  return true;\n}\n\nfunction releaseZipSlot(token: string): void {\n  const current = activeZipStreams.get(token) ?? 0;\n  if (current <= 1) activeZipStreams.delete(token);\n  else activeZipStreams.set(token, current - 1);\n}\n\n/**\n * Whether the browser can render this MIME natively (when served with\n * `Content-Disposition: inline`). Honours the per-deployment whitelist so\n * admins can block specific types.\n */\nfunction isPreviewableInline(mime: string, whitelist: string[]): boolean {\n  return whitelist.includes(mime);\n}\n\n/**\n * Whether the type benefits from being rendered through the SPA preview page\n * (e.g. markdown — the browser would otherwise show raw source). Independent\n * of the inline whitelist: SPA preview pulls the bytes via the share API and\n * renders client-side, so admins control reach via TTL/maxViews, not MIME.\n */\nfunction isRichSpaPreviewable(mime: string): boolean {\n  return (\n    mime === 'text/markdown' ||\n    mime === 'application/vnd.openxmlformats-officedocument.wordprocessingml.document' ||\n    mime === 'application/vnd.openxmlformats-officedocument.presentationml.presentation'\n  );\n}\n\nfunction rfc5987ContentDisposition(disposition: 'inline' | 'attachment', fileName: string): string {\n  const ascii = fileName.replace(/[^\\x20-\\x7e]/g, '_').replace(/\"/g, '');\n  const utf8 = encodeURIComponent(fileName);\n  return `${disposition}; filename=\"${ascii}\"; filename*=UTF-8''${utf8}`;\n}\n\n// ── Public routes (no auth required) ──────────────────────────────────────────\n\nexport function registerSharePublicRoutes(app: Hono, service: GatewayService): void {\n  const store = getShareStore(resolveShareConfig(service));\n\n  /** Landing page — does NOT consume downloadCount. */\n  app.get('/s/:token', async (c) => {\n    const clientIp = getClientIpFromHeaders({ get: (n: string) => c.req.header(n) ?? undefined });\n    const rateResult = consumeSharePublicLimit(clientIp);\n    if (!rateResult.allowed) {\n      c.header('Retry-After', String(Math.ceil(rateResult.retryAfterMs / 1000)));\n      return c.text('Too many requests', 429);\n    }\n\n    const token = c.req.param('token');\n    const record = store.getByToken(token);\n    if (!record) return c.html(renderShareExpiredPage('not_found'), 404);\n\n    const validation = store.validateAccess(record);\n    if (!validation.valid) {\n      logShareAudit(\n        'share.access_denied',\n        { shareId: record.id, tokenPrefix: token.slice(0, 8), reason: validation.reason, clientIp },\n        `Share access denied: ${validation.reason}`,\n      );\n      return c.html(renderShareExpiredPage(validation.reason as ShareExpiredReason), 410);\n    }\n\n    if (record.kind === 'directory') {\n      return renderDirectoryLanding(c, store, service, record, token);\n    }\n\n    // File: support direct download / inline preview shortcuts\n    if (c.req.query('dl') === '1') {\n      return handleFileDownload(c, store, record, clientIp);\n    }\n    if (c.req.query('inline') === '1') {\n      const cfg = { ...SHARE_CONFIG_DEFAULTS, ...resolveShareConfig(service) };\n      if (cfg.inlinePreviewMimes.includes(record.mimeType)) {\n        return handleFileDownload(c, store, record, clientIp, true);\n      }\n    }\n\n    const downloadPath = `/s/${token}/download`;\n    const cfg = { ...SHARE_CONFIG_DEFAULTS, ...resolveShareConfig(service) };\n    const previewable = isPreviewableInline(record.mimeType, cfg.inlinePreviewMimes);\n    const richPreviewable = isRichSpaPreviewable(record.mimeType);\n    const og = buildLandingOg(service, record);\n    return c.html(\n      renderShareLandingPage(record, downloadPath, {\n        inlineUrl: previewable ? `/s/${token}?inline=1` : null,\n        previewUrl: richPreviewable ? `/#/share/${encodeURIComponent(token)}` : null,\n        og,\n      }),\n    );\n  });\n\n  /** Single-file download — POST so unfurl/scrapers don't consume views. */\n  app.post('/s/:token/download', async (c) => {\n    const clientIp = getClientIpFromHeaders({ get: (n: string) => c.req.header(n) ?? undefined });\n    const rateResult = consumeSharePublicLimit(clientIp);\n    if (!rateResult.allowed) {\n      c.header('Retry-After', String(Math.ceil(rateResult.retryAfterMs / 1000)));\n      return c.text('Too many requests', 429);\n    }\n\n    const token = c.req.param('token');\n    const record = store.getByToken(token);\n    if (!record) return c.html(renderShareExpiredPage('not_found'), 404);\n\n    const validation = store.validateAccess(record);\n    if (!validation.valid) {\n      logShareAudit(\n        'share.access_denied',\n        { shareId: record.id, tokenPrefix: token.slice(0, 8), reason: validation.reason, clientIp },\n        `Share download denied: ${validation.reason}`,\n      );\n      return c.html(renderShareExpiredPage(validation.reason as ShareExpiredReason), 410);\n    }\n\n    if (record.kind === 'directory') {\n      return c.html(renderShareExpiredPage('not_found'), 404);\n    }\n    return handleFileDownload(c, store, record, clientIp);\n  });\n\n  /** Directory child file (GET — preview counts as download per product). */\n  app.get('/s/:token/file', async (c) => {\n    const clientIp = getClientIpFromHeaders({ get: (n: string) => c.req.header(n) ?? undefined });\n    const rateResult = consumeSharePublicLimit(clientIp);\n    if (!rateResult.allowed) {\n      c.header('Retry-After', String(Math.ceil(rateResult.retryAfterMs / 1000)));\n      return c.text('Too many requests', 429);\n    }\n\n    const token = c.req.param('token');\n    const record = store.getByToken(token);\n    if (!record) return c.html(renderShareExpiredPage('not_found'), 404);\n    if (record.kind !== 'directory') return c.html(renderShareExpiredPage('not_found'), 404);\n\n    const validation = store.validateAccess(record);\n    if (!validation.valid) {\n      return c.html(renderShareExpiredPage(validation.reason as ShareExpiredReason), 410);\n    }\n\n    const relPath = c.req.query('path') ?? '';\n    const inline = c.req.query('inline') === '1' || c.req.query('dl') !== '1';\n    return handleDirectoryFile(c, store, service, record, relPath, clientIp, inline);\n  });\n\n  /** Directory JSON listing. */\n  app.get('/s/:token/tree', async (c) => {\n    const clientIp = getClientIpFromHeaders({ get: (n: string) => c.req.header(n) ?? undefined });\n    const rateResult = consumeSharePublicLimit(clientIp);\n    if (!rateResult.allowed) {\n      c.header('Retry-After', String(Math.ceil(rateResult.retryAfterMs / 1000)));\n      return c.text('Too many requests', 429);\n    }\n\n    const token = c.req.param('token');\n    const record = store.getByToken(token);\n    if (!record) return c.json({ ok: false, error: { message: 'not_found' } }, 404);\n    if (record.kind !== 'directory') return c.json({ ok: false, error: { message: 'not_directory' } }, 400);\n\n    const validation = store.validateAccess(record);\n    if (!validation.valid) {\n      return c.json({ ok: false, error: { message: validation.reason } }, 410);\n    }\n\n    const path = c.req.query('path') ?? '';\n    // Tree HTML browser pages: render landing for the sub-path\n    if ((c.req.header('accept') ?? '').includes('text/html')) {\n      return renderDirectoryLanding(c, store, service, record, token, path);\n    }\n    try {\n      const listing = await store.listDirectory(record, path);\n      return c.json({ ok: true, payload: listing });\n    } catch (err) {\n      const message = err instanceof Error ? err.message : String(err);\n      return c.json({ ok: false, error: { message } }, 400);\n    }\n  });\n\n  /** Folder ZIP download (whole share or sub-path). */\n  app.get('/s/:token/zip', async (c) => {\n    const clientIp = getClientIpFromHeaders({ get: (n: string) => c.req.header(n) ?? undefined });\n    const rateResult = consumeSharePublicLimit(clientIp);\n    if (!rateResult.allowed) {\n      c.header('Retry-After', String(Math.ceil(rateResult.retryAfterMs / 1000)));\n      return c.text('Too many requests', 429);\n    }\n\n    const token = c.req.param('token');\n    const record = store.getByToken(token);\n    if (!record) return c.html(renderShareExpiredPage('not_found'), 404);\n    if (record.kind !== 'directory') return c.html(renderShareExpiredPage('not_found'), 404);\n\n    const validation = store.validateAccess(record);\n    if (!validation.valid) {\n      return c.html(renderShareExpiredPage(validation.reason as ShareExpiredReason), 410);\n    }\n\n    return handleDirectoryZip(c, store, service, record, c.req.query('path') ?? '', clientIp);\n  });\n\n  /** Metadata (for link preview cards / unfurl). Does NOT consume views. */\n  app.get('/s/:token/meta', async (c) => {\n    const clientIp = getClientIpFromHeaders({ get: (n: string) => c.req.header(n) ?? undefined });\n    const rateResult = consumeSharePublicLimit(clientIp);\n    if (!rateResult.allowed) {\n      c.header('Retry-After', String(Math.ceil(rateResult.retryAfterMs / 1000)));\n      return c.text('Too many requests', 429);\n    }\n\n    const token = c.req.param('token');\n    const record = store.getByToken(token);\n    if (!record) return c.json({ valid: false }, 404);\n\n    const validation = store.validateAccess(record);\n    const remainingViews = record.maxViews !== null ? Math.max(0, record.maxViews - record.downloadCount) : null;\n\n    return c.json({\n      kind: record.kind,\n      fileName: record.fileName,\n      fileSize: record.fileSize,\n      mimeType: record.mimeType,\n      description: record.description ?? null,\n      expiresAt: record.expiresAt,\n      remainingViews,\n      valid: validation.valid,\n      directory: record.directory ?? null,\n    });\n  });\n\n  /** HEAD check. */\n  app.on('HEAD', '/s/:token', async (c) => {\n    const token = c.req.param('token');\n    const record = store.getByToken(token);\n    if (!record) return c.body(null, 404);\n    const validation = store.validateAccess(record);\n    return c.body(null, validation.valid ? 200 : 410);\n  });\n\n  /** Thumbnail (jpeg/png/svg) — does NOT consume views. */\n  app.get('/s/:token/thumbnail', async (c) => {\n    const clientIp = getClientIpFromHeaders({ get: (n: string) => c.req.header(n) ?? undefined });\n    const rateResult = consumeSharePublicLimit(clientIp);\n    if (!rateResult.allowed) {\n      c.header('Retry-After', String(Math.ceil(rateResult.retryAfterMs / 1000)));\n      return c.text('Too many requests', 429);\n    }\n    const token = c.req.param('token');\n    const record = store.getByToken(token);\n    if (!record) return c.body(null, 404);\n    const validation = store.validateAccess(record);\n    if (!validation.valid) return c.body(null, 410);\n\n    const cached = await readThumbnail(token);\n    if (cached) {\n      return new Response(cached, {\n        status: 200,\n        headers: {\n          'Content-Type': thumbnailContentType(cached),\n          'Cache-Control': 'public, max-age=300',\n          'X-Content-Type-Options': 'nosniff',\n        },\n      });\n    }\n    // Schedule and return a placeholder so social-card scrapers always get an image.\n    scheduleThumbnail({ scope: 'file', token, recordId: record.id }, thumbnailRenderContext(service));\n    const placeholder = placeholderSvg(record.fileName, record.kind === 'directory' ? 'folder' : 'file');\n    return new Response(placeholder, {\n      status: 200,\n      headers: {\n        'Content-Type': 'image/svg+xml; charset=utf-8',\n        'Cache-Control': 'public, max-age=10',\n        'X-Content-Type-Options': 'nosniff',\n      },\n    });\n  });\n\n  app.on('HEAD', '/s/:token/thumbnail', async (c) => {\n    const token = c.req.param('token');\n    const record = store.getByToken(token);\n    if (!record) return c.body(null, 404);\n    const validation = store.validateAccess(record);\n    if (!validation.valid) return c.body(null, 410);\n    const ready = await thumbnailExists(token);\n    return c.body(null, ready ? 200 : 202);\n  });\n\n  /** Site-share thumbnail. Shape mirrors /s/:token/thumbnail. */\n  app.get('/site/:token/thumbnail', async (c) => {\n    const clientIp = getClientIpFromHeaders({ get: (n: string) => c.req.header(n) ?? undefined });\n    const rateResult = consumeSharePublicLimit(clientIp);\n    if (!rateResult.allowed) {\n      c.header('Retry-After', String(Math.ceil(rateResult.retryAfterMs / 1000)));\n      return c.text('Too many requests', 429);\n    }\n    const token = c.req.param('token');\n    const siteStore = getSiteShareStore(resolveSiteShareConfig(service));\n    const record = siteStore.getByToken(token);\n    if (!record) return c.body(null, 404);\n    const validation = siteStore.validateAccess(record);\n    if (!validation.valid) return c.body(null, 410);\n\n    const cached = await readThumbnail(token);\n    if (cached) {\n      return new Response(cached, {\n        status: 200,\n        headers: {\n          'Content-Type': thumbnailContentType(cached),\n          'Cache-Control': 'public, max-age=300',\n          'X-Content-Type-Options': 'nosniff',\n        },\n      });\n    }\n    scheduleThumbnail({ scope: 'site', token, recordId: record.id }, thumbnailRenderContext(service));\n    const placeholder = placeholderSvg(record.description ?? 'site share', 'html');\n    return new Response(placeholder, {\n      status: 200,\n      headers: {\n        'Content-Type': 'image/svg+xml; charset=utf-8',\n        'Cache-Control': 'public, max-age=10',\n        'X-Content-Type-Options': 'nosniff',\n      },\n    });\n  });\n\n  app.on('HEAD', '/site/:token/thumbnail', async (c) => {\n    const token = c.req.param('token');\n    const ready = await thumbnailExists(token);\n    return c.body(null, ready ? 200 : 202);\n  });\n\n  // Wire share-store cleanup → drop on-disk thumbnail file.\n  store.setCleanupHook((rec) => {\n    void deleteThumbnail(rec.token);\n  });\n}\n\n// ── Authenticated routes ──────────────────────────────────────────────────────\n\nexport function registerShareRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  const { service } = deps;\n  const store = getShareStore(resolveShareConfig(service));\n  const siteStoreEager = getSiteShareStore(resolveSiteShareConfig(service));\n  // Register once: when a site share is revoked / expires, drop its staging dir (if any).\n  siteStoreEager.setCleanupHook((rec) => {\n    const dir = forgetStagedSite(rec.id);\n    if (dir) void cleanupStagedSite(dir);\n  });\n\n  authenticated.post('/api/shares', async (c) => {\n    const gatewayToken = extractToken({ authorization: c.req.header('authorization') ?? undefined });\n    if (!gatewayToken) return c.json({ ok: false, error: { message: 'Token required' } }, 401);\n\n    let body: Record<string, unknown>;\n    try {\n      body = (await c.req.json()) as Record<string, unknown>;\n    } catch {\n      return c.json({ ok: false, error: { message: 'Invalid JSON' } }, 400);\n    }\n\n    const path = typeof body.path === 'string' ? body.path.trim() : '';\n    if (!path) return c.json({ ok: false, error: { message: 'Missing path' } }, 400);\n\n    const sessionKey = typeof body.sessionKey === 'string' ? body.sessionKey.trim() : undefined;\n    const agentId = typeof body.agentId === 'string' ? body.agentId.trim() : undefined;\n\n    const workspaceRoot = await resolveWorkspaceRootForShare(service, sessionKey, agentId);\n    if (!workspaceRoot) {\n      return c.json({ ok: false, error: { message: 'Workspace not configured' } }, 400);\n    }\n\n    const ttlMs = typeof body.ttlMs === 'number' ? body.ttlMs : undefined;\n    const maxViews = body.maxViews === null ? null : typeof body.maxViews === 'number' ? body.maxViews : undefined;\n    const description = typeof body.description === 'string' ? body.description.trim() || undefined : undefined;\n    const kind = body.kind === 'directory' || body.kind === 'file' ? body.kind : undefined;\n    const directoryMode = body.directoryMode === 'zip-only' ? 'zip-only' : body.directoryMode === 'browse' ? 'browse' : undefined;\n    const followSymlinks = body.followSymlinks === true;\n    const maxFileCount = typeof body.maxFileCount === 'number' ? body.maxFileCount : undefined;\n    const maxFolderSize = typeof body.maxFolderSize === 'number' ? body.maxFolderSize : undefined;\n    const maxDepth = typeof body.maxDepth === 'number' ? body.maxDepth : undefined;\n\n    try {\n      store.updateConfig(resolveShareConfig(service));\n      const record = await store.create({\n        path,\n        ttlMs,\n        maxViews,\n        description,\n        sessionKey,\n        agentId,\n        workspaceRoot,\n        gatewayTokenHash: hashGatewayToken(gatewayToken),\n        kind,\n        directoryMode,\n        followSymlinks,\n        maxFileCount,\n        maxFolderSize,\n        maxDepth,\n      });\n\n      const urlCtx = getShareUrlContext(service);\n      const resolved = resolveShareUrl(record.token, urlCtx);\n\n      return c.json(\n        {\n          ok: true,\n          payload: {\n            id: record.id,\n            token: record.token,\n            kind: record.kind,\n            shareUrl: resolved.shareUrl,\n            lanUrl: resolved.lanUrl,\n            reachability: resolved.reachability,\n            reachabilityHint: resolved.reachabilityHint,\n            expiresAt: record.expiresAt,\n            maxViews: record.maxViews,\n            fileName: record.fileName,\n            fileSize: record.fileSize,\n            directory: record.directory ?? null,\n          },\n        },\n        201,\n      );\n    } catch (err) {\n      const message = err instanceof Error ? err.message : String(err);\n      return c.json({ ok: false, error: { message } }, 400);\n    }\n  });\n\n  /**\n   * Smart share — picks file vs site, fills sensible defaults, returns the\n   * payload the mobile share-sheet needs (title, description, thumbnailUrl,\n   * reachability) in a single round-trip.\n   */\n  authenticated.post('/api/shares/auto', async (c) => {\n    const gatewayToken = extractToken({ authorization: c.req.header('authorization') ?? undefined });\n    if (!gatewayToken) return c.json({ ok: false, error: { message: 'Token required' } }, 401);\n\n    let body: Record<string, unknown>;\n    try {\n      body = (await c.req.json()) as Record<string, unknown>;\n    } catch {\n      return c.json({ ok: false, error: { message: 'Invalid JSON' } }, 400);\n    }\n\n    const path = typeof body.path === 'string' ? body.path.trim() : '';\n    if (!path) return c.json({ ok: false, error: { message: 'Missing path' } }, 400);\n    const sessionKey = typeof body.sessionKey === 'string' ? body.sessionKey.trim() : undefined;\n    const agentId = typeof body.agentId === 'string' ? body.agentId.trim() : undefined;\n    const mode = (typeof body.mode === 'string' && ['auto', 'force-file', 'force-site', 'force-zip'].includes(body.mode))\n      ? (body.mode as ShareAutoMode)\n      : 'auto';\n    const audience: ShareAudience | undefined =\n      body.audience === 'friend' || body.audience === 'colleague' || body.audience === 'public'\n        ? body.audience\n        : undefined;\n    const title = typeof body.title === 'string' ? body.title : undefined;\n    const description = typeof body.description === 'string' ? body.description : undefined;\n    const ttlOverride = typeof body.ttlMs === 'number' ? body.ttlMs : undefined;\n    const maxViewsOverride =\n      body.maxViews === null ? null : typeof body.maxViews === 'number' ? body.maxViews : undefined;\n    const wantThumbnail = body.thumbnail !== false;\n\n    const workspaceRoot = await resolveWorkspaceRootForShare(service, sessionKey, agentId);\n    if (!workspaceRoot) {\n      return c.json({ ok: false, error: { message: 'Workspace not configured' } }, 400);\n    }\n\n    let probe;\n    try {\n      probe = await probeShareTarget(workspaceRoot, path);\n    } catch (err) {\n      const message = err instanceof Error ? err.message : String(err);\n      return c.json({ ok: false, error: { message } }, 400);\n    }\n\n    let decision;\n    try {\n      decision = decideShareKind(probe, mode);\n    } catch (err) {\n      const message = err instanceof Error ? err.message : String(err);\n      return c.json({ ok: false, error: { message } }, 400);\n    }\n\n    const defaults = audienceDefaults(audience);\n    const ttlMs = ttlOverride ?? defaults.ttlMs;\n    const maxViews = maxViewsOverride !== undefined ? maxViewsOverride : defaults.maxViews;\n    const tokenHash = hashGatewayToken(gatewayToken);\n    const urlCtx = getShareUrlContext(service);\n\n    try {\n      if (decision.kind === 'site') {\n        const siteStore = getSiteShareStore(resolveSiteShareConfig(service));\n        // Single HTML file → stage into a temp dir as index.html so it can be\n        // served as a site (recipient lands on a rendered page, not the\n        // file-landing). The staging dir is auto-cleaned on revoke/expire.\n        let sitePath = path;\n        let stagedDir: string | null = null;\n        if (probe.kind === 'file') {\n          const staged = await stageSingleHtmlAsSite(workspaceRoot, probe.absolutePath);\n          sitePath = staged.relativePath;\n          stagedDir = staged.stagingDir;\n        }\n        const siteRec = await siteStore.create({\n          kind: 'static',\n          path: sitePath,\n          ttlMs,\n          description,\n          subdomain: typeof body.subdomain === 'string' ? body.subdomain : undefined,\n          spaFallback: true,\n          rewriteMode: 'html-css',\n          sessionKey,\n          agentId,\n          workspaceRoot,\n          gatewayTokenHash: tokenHash,\n        });\n        if (stagedDir) rememberStagedSite(siteRec.id, stagedDir);\n        const cfg = siteStore.getConfig();\n        const subdomainLabel = siteRec.subdomain ?? siteRec.token;\n        const resolved = resolveSiteShareUrl({\n          ...urlCtx,\n          token: siteRec.token,\n          subdomainLabel,\n          publicHostSuffix: cfg.publicHostSuffix,\n        });\n        if (wantThumbnail) {\n          scheduleThumbnail({ scope: 'site', token: siteRec.token, recordId: siteRec.id }, thumbnailRenderContext(service));\n          siteStore.setThumbnailStatus(siteRec.id, 'pending');\n        }\n        const titleOut = makeTitle(probe.kind === 'directory' ? path.split('/').pop() || path : path, title);\n        return c.json({\n          ok: true,\n          payload: {\n            share: {\n              id: siteRec.id,\n              kind: 'site',\n              title: titleOut,\n              description: makeDescription({ audience, expiresAt: siteRec.expiresAt, override: description }),\n              shareUrl: resolved.shareUrl,\n              lanUrl: null,\n              reachability: resolved.reachability,\n              reachabilityHint: resolved.reachabilityHint,\n              expiresAt: siteRec.expiresAt,\n              maxViews: null,\n            },\n            thumbnail: {\n              url: wantThumbnail ? resolved.thumbnailUrl : '',\n              status: wantThumbnail ? 'pending' : 'unavailable',\n              width: SHARE_CONFIG_DEFAULTS.thumbnail.viewportWidth,\n              height: SHARE_CONFIG_DEFAULTS.thumbnail.viewportHeight,\n            },\n            routing: { reason: decision.reason, hint: decision.hint },\n          },\n        }, 201);\n      }\n\n      return await createFileShareResponse({\n        c, service, store, probe, decision,\n        ttlMs, maxViews, title, description, audience,\n        workspaceRoot, tokenHash, urlCtx, wantThumbnail,\n      });\n    } catch (err) {\n      const message = err instanceof Error ? err.message : String(err);\n      return c.json({ ok: false, error: { message } }, 400);\n    }\n  });\n\n  authenticated.get('/api/shares', async (c) => {\n    store.updateConfig(resolveShareConfig(service));\n    const shares = store.getAllShares();\n    const urlCtx = getShareUrlContext(service);\n    const now = Date.now();\n\n    const items = shares.map((r) => {\n      const resolved = resolveShareUrl(r.token, urlCtx);\n      const expired = now >= new Date(r.expiresAt).getTime();\n      return {\n        id: r.id,\n        kind: r.kind,\n        fileName: r.fileName,\n        workspaceRelativePath: r.workspaceRelativePath,\n        shareUrl: resolved.shareUrl,\n        lanUrl: resolved.lanUrl,\n        reachability: resolved.reachability,\n        createdAt: r.createdAt,\n        expiresAt: r.expiresAt,\n        downloadCount: r.downloadCount,\n        maxViews: r.maxViews,\n        revoked: r.revoked,\n        expired,\n        description: r.description ?? null,\n        fileSize: r.fileSize,\n        mimeType: r.mimeType,\n        directory: r.directory ?? null,\n      };\n    });\n\n    return c.json({ ok: true, payload: { shares: items } });\n  });\n\n  authenticated.get('/api/shares/:id', async (c) => {\n    const id = c.req.param('id');\n    const record = store.getById(id);\n    if (!record) return c.json({ ok: false, error: { message: 'Not found' } }, 404);\n\n    const urlCtx = getShareUrlContext(service);\n    const resolved = resolveShareUrl(record.token, urlCtx);\n    const expired = Date.now() >= new Date(record.expiresAt).getTime();\n\n    return c.json({\n      ok: true,\n      payload: {\n        ...record,\n        token: undefined,\n        shareUrl: resolved.shareUrl,\n        lanUrl: resolved.lanUrl,\n        reachability: resolved.reachability,\n        expired,\n      },\n    });\n  });\n\n  authenticated.delete('/api/shares/:id', async (c) => {\n    const id = c.req.param('id');\n    const success = store.revoke(id);\n    if (!success) return c.json({ ok: false, error: { message: 'Not found' } }, 404);\n    return c.json({ ok: true });\n  });\n\n  authenticated.delete('/api/shares', async (c) => {\n    let body: Record<string, unknown> = {};\n    try {\n      body = (await c.req.json()) as Record<string, unknown>;\n    } catch {\n      /* empty body = no-op */\n    }\n\n    if (body.expired === true) {\n      const count = store.revokeExpired();\n      return c.json({ ok: true, payload: { revokedCount: count } });\n    }\n\n    const ids = Array.isArray(body.ids) ? (body.ids as string[]).filter((x) => typeof x === 'string') : [];\n    if (ids.length === 0) {\n      return c.json({ ok: false, error: { message: 'Provide ids array or expired: true' } }, 400);\n    }\n    const count = store.revokeMany(ids);\n    return c.json({ ok: true, payload: { revokedCount: count } });\n  });\n\n  authenticated.patch('/api/shares/:id', async (c) => {\n    const id = c.req.param('id');\n    let body: Record<string, unknown>;\n    try {\n      body = (await c.req.json()) as Record<string, unknown>;\n    } catch {\n      return c.json({ ok: false, error: { message: 'Invalid JSON' } }, 400);\n    }\n\n    const patch: { extendTtlMs?: number; maxViews?: number | null } = {};\n    if (typeof body.extendTtlMs === 'number') patch.extendTtlMs = body.extendTtlMs;\n    if (body.maxViews === null || typeof body.maxViews === 'number') patch.maxViews = body.maxViews as number | null;\n\n    const updated = store.update(id, patch);\n    if (!updated) return c.json({ ok: false, error: { message: 'Not found' } }, 404);\n\n    const urlCtx = getShareUrlContext(service);\n    const resolved = resolveShareUrl(updated.token, urlCtx);\n\n    return c.json({\n      ok: true,\n      payload: {\n        id: updated.id,\n        expiresAt: updated.expiresAt,\n        maxViews: updated.maxViews,\n        shareUrl: resolved.shareUrl,\n      },\n    });\n  });\n}\n\n// ── Directory landing / file / zip helpers ────────────────────────────────────\n\nasync function renderDirectoryLanding(\n  c: Context,\n  store: ReturnType<typeof getShareStore>,\n  service: GatewayService,\n  record: ShareRecord,\n  token: string,\n  subPath = '',\n): Promise<Response> {\n  store.updateConfig(resolveShareConfig(service));\n  const urls = {\n    tree: (p: string) => (p ? `/s/${token}/tree?path=${encodeURIComponent(p)}` : `/s/${token}`),\n    file: (p: string) => `/s/${token}/file?path=${encodeURIComponent(p)}`,\n    zip: (p: string) => (p ? `/s/${token}/zip?path=${encodeURIComponent(p)}` : `/s/${token}/zip`),\n  };\n\n  let listing: import('../../../share/share-store.js').DirectoryListing | null = null;\n  if (record.directory?.mode !== 'zip-only') {\n    try {\n      listing = await store.listDirectory(record, subPath);\n    } catch (err) {\n      logShareAudit(\n        'share.access_denied',\n        { shareId: record.id, tokenPrefix: record.token.slice(0, 8), subPath, reason: String(err) },\n        `Directory listing failed`,\n      );\n      return c.html(renderShareExpiredPage('not_found'), 404);\n    }\n  }\n  const og = buildLandingOg(service, record);\n  return c.html(renderFolderLandingPage(record, listing, urls, { og })) as unknown as Response;\n}\n\nfunction buildLandingOg(service: GatewayService, record: ShareRecord) {\n  const resolved = resolveShareUrl(record.token, getShareUrlContext(service));\n  // Only emit OG tags when the share is genuinely public — otherwise WeChat\n  // and friends would silently fall back to \"no preview\" on unreachable URLs.\n  if (resolved.reachability !== 'public') return undefined;\n  return {\n    absoluteShareUrl: resolved.shareUrl,\n    absoluteThumbnailUrl: `${resolved.shareUrl}/thumbnail`,\n    title: record.fileName,\n    description: record.description ?? undefined,\n  };\n}\n\nasync function handleDirectoryFile(\n  c: Context,\n  store: ReturnType<typeof getShareStore>,\n  service: GatewayService,\n  record: ShareRecord,\n  relPath: string,\n  clientIp: string,\n  inline: boolean,\n): Promise<Response> {\n  if (!acquireDownloadSlot(record.token)) {\n    return new Response('Too many concurrent downloads for this share', { status: 429 });\n  }\n\n  try {\n    const resolved = await store.resolveDirectoryChild(record, relPath);\n    if (resolved.ok !== true) {\n      logShareAudit(\n        'share.access_denied',\n        { shareId: record.id, tokenPrefix: record.token.slice(0, 8), reason: resolved.reason, clientIp, relPath },\n        `Directory child resolution failed: ${resolved.reason}`,\n      );\n      return c.html(renderShareExpiredPage('not_found'), 404);\n    }\n    const integrity = await store.validateFileIntegrity(record);\n    if (!integrity.valid) {\n      return c.html(renderShareExpiredPage((integrity.reason ?? 'file_deleted') as ShareExpiredReason), 410);\n    }\n\n    const fileStat = await stat(resolved.absolutePath);\n    if (!fileStat.isFile()) {\n      return c.html(renderShareExpiredPage('not_found'), 404);\n    }\n\n    // Re-check size against configured max\n    store.updateConfig(resolveShareConfig(service));\n    const cfg = store.getConfig();\n    if (fileStat.size > cfg.maxFileSize) {\n      return c.html(renderShareExpiredPage('not_found'), 410);\n    }\n\n    // Inline preview MIME guard\n    const cfgPreview = { ...SHARE_CONFIG_DEFAULTS, ...resolveShareConfig(service) };\n    const baseName = relPath.split('/').pop() || record.fileName;\n    const { resolveMimeType } = await import('../../../share/share-store.js');\n    const mime = resolveMimeType(baseName);\n    const useInline = inline && cfgPreview.inlinePreviewMimes.includes(mime);\n\n    store.incrementDownloadCount(record.id);\n    logShareAudit(\n      'share.access',\n      { shareId: record.id, tokenPrefix: record.token.slice(0, 8), clientIp, relPath, mode: useInline ? 'inline' : 'attachment' },\n      `Directory file served: ${baseName}`,\n    );\n\n    const stream = createReadStream(resolved.absolutePath);\n    const webStream = Readable.toWeb(stream) as ReadableStream;\n    const disposition = rfc5987ContentDisposition(useInline ? 'inline' : 'attachment', baseName);\n\n    return new Response(webStream, {\n      status: 200,\n      headers: {\n        'Content-Type': shareResponseContentType(mime),\n        'Content-Disposition': disposition,\n        'Content-Length': String(fileStat.size),\n        'Cache-Control': 'private, no-store',\n        'X-Content-Type-Options': 'nosniff',\n        'X-Frame-Options': 'DENY',\n        'Referrer-Policy': 'no-referrer',\n      },\n    });\n  } finally {\n    releaseDownloadSlot(record.token);\n  }\n}\n\nasync function handleDirectoryZip(\n  c: Context,\n  store: ReturnType<typeof getShareStore>,\n  service: GatewayService,\n  record: ShareRecord,\n  subPath: string,\n  clientIp: string,\n): Promise<Response> {\n  store.updateConfig(resolveShareConfig(service));\n  const cfg = store.getConfig();\n  const zipLimit = cfg.directory.zipConcurrency;\n  if (!acquireZipSlot(record.token, zipLimit)) {\n    return new Response('Too many concurrent ZIP streams for this share', { status: 429 });\n  }\n\n  try {\n    const resolved = await store.resolveDirectoryChild(record, subPath);\n    if (resolved.ok !== true) {\n      return c.html(renderShareExpiredPage('not_found'), 404);\n    }\n    const integrity = await store.validateFileIntegrity(record);\n    if (!integrity.valid) {\n      return c.html(renderShareExpiredPage((integrity.reason ?? 'file_deleted') as ShareExpiredReason), 410);\n    }\n\n    const files = await planDirectoryFiles(record, {\n      rootRelativePath: subPath,\n      maxFileCount: cfg.directory.maxFileCount,\n      maxFolderSize: cfg.directory.maxFolderSize,\n      followSymlinks: record.directory?.followSymlinks ?? false,\n      maxDepth: record.directory?.maxDepth ?? cfg.directory.maxDepth,\n    });\n\n    store.incrementDownloadCount(record.id);\n    logShareAudit(\n      'share.access',\n      { shareId: record.id, tokenPrefix: record.token.slice(0, 8), clientIp, mode: 'zip', subPath, fileCount: files.length },\n      `Directory zip served: ${record.fileName}${subPath ? '/' + subPath : ''}`,\n    );\n\n    const zipName = subPath\n      ? `${record.fileName}-${subPath.replace(/[\\\\/]/g, '_')}.zip`\n      : `${record.fileName}.zip`;\n    const stream = createZipStream({ files });\n    const webStream = Readable.toWeb(stream) as ReadableStream;\n\n    return new Response(webStream, {\n      status: 200,\n      headers: {\n        'Content-Type': 'application/zip',\n        'Content-Disposition': rfc5987ContentDisposition('attachment', zipName),\n        'Cache-Control': 'private, no-store',\n        'X-Content-Type-Options': 'nosniff',\n        'X-Frame-Options': 'DENY',\n        'Referrer-Policy': 'no-referrer',\n      },\n    });\n  } catch (err) {\n    const message = err instanceof Error ? err.message : String(err);\n    return new Response(`zip build failed: ${message}`, { status: 500 });\n  } finally {\n    releaseZipSlot(record.token);\n  }\n}\n\n// ── Helpers ───────────────────────────────────────────────────────────────────\n\nasync function createFileShareResponse(args: {\n  c: Context;\n  service: GatewayService;\n  store: ReturnType<typeof getShareStore>;\n  probe: Awaited<ReturnType<typeof probeShareTarget>>;\n  decision: ReturnType<typeof decideShareKind>;\n  ttlMs: number;\n  maxViews: number | null | undefined;\n  title?: string;\n  description?: string;\n  audience?: ShareAudience;\n  workspaceRoot: string;\n  tokenHash: string;\n  urlCtx: ReturnType<typeof getShareUrlContext>;\n  wantThumbnail: boolean;\n}): Promise<Response> {\n  const { c, service, store, probe, decision, ttlMs, maxViews, title, description, audience, workspaceRoot, tokenHash, urlCtx, wantThumbnail } = args;\n  store.updateConfig(resolveShareConfig(service));\n  const record = await store.create({\n    path: relPathFromAbs(workspaceRoot, probe.absolutePath),\n    workspaceRoot,\n    gatewayTokenHash: tokenHash,\n    ttlMs,\n    maxViews: maxViews === undefined ? undefined : maxViews,\n    description,\n    kind: probe.kind === 'directory' ? 'directory' : 'file',\n    directoryMode: decision.kind === 'zip' ? 'zip-only' : (probe.kind === 'directory' ? 'browse' : undefined),\n  });\n  const resolved = resolveShareUrl(record.token, urlCtx);\n  const titleOut = makeTitle(record.fileName, title);\n  const descOut = makeDescription({ audience, expiresAt: record.expiresAt, override: description });\n  const thumbnailUrl = wantThumbnail\n    ? `${resolved.shareUrl}/thumbnail`\n    : '';\n  if (wantThumbnail) {\n    scheduleThumbnail({ scope: 'file', token: record.token, recordId: record.id }, thumbnailRenderContext(service));\n    store.setThumbnailStatus(record.id, 'pending');\n  }\n  return c.json({\n    ok: true,\n    payload: {\n      share: {\n        id: record.id,\n        kind: decision.kind,\n        title: titleOut,\n        description: descOut,\n        shareUrl: resolved.shareUrl,\n        lanUrl: resolved.lanUrl,\n        reachability: resolved.reachability,\n        reachabilityHint: resolved.reachabilityHint,\n        expiresAt: record.expiresAt,\n        maxViews: record.maxViews,\n      },\n      thumbnail: {\n        url: thumbnailUrl,\n        status: wantThumbnail ? 'pending' : 'unavailable',\n        width: SHARE_CONFIG_DEFAULTS.thumbnail.viewportWidth,\n        height: SHARE_CONFIG_DEFAULTS.thumbnail.viewportHeight,\n      },\n      routing: { reason: decision.reason, hint: decision.hint },\n    },\n  }, 201) as unknown as Response;\n}\n\nfunction relPathFromAbs(workspaceRoot: string, abs: string): string {\n  const root = workspaceRoot.replace(/[\\\\/]+$/, '');\n  if (abs === root) return '';\n  if (abs.startsWith(`${root}/`)) return abs.slice(root.length + 1);\n  if (abs.startsWith(`${root}\\\\`)) return abs.slice(root.length + 1).replace(/\\\\/g, '/');\n  // Fall back to basename — store.create will resolve again under workspace.\n  return abs.split(/[\\\\/]/).pop() ?? abs;\n}\n\nasync function resolveWorkspaceRootForShare(\n  service: GatewayService,\n  sessionKey: string | undefined,\n  agentId: string | undefined,\n): Promise<string | null> {\n  const cfg = service.currentConfig;\n\n  if (sessionKey) {\n    try {\n      return await service.sessions.getEffectiveWorkspacePath(sessionKey);\n    } catch {\n      /* fall through to agentId */\n    }\n  }\n\n  const { getWorkspacePath } = await import('../../../config/workspace-path-helpers.js');\n  const { resolveAgentWorkspaceDir, normalizeAgentId, resolveDefaultAgentId } = await import(\n    '../../../agent/agent-scope.js'\n  );\n\n  if (agentId) {\n    const normalized = normalizeAgentId(agentId);\n    return resolveAgentWorkspaceDir(cfg, normalized);\n  }\n\n  const root = getWorkspacePath(cfg);\n  if (root) return root;\n\n  const defaultId = resolveDefaultAgentId(cfg);\n  return resolveAgentWorkspaceDir(cfg, defaultId);\n}\n\nasync function handleFileDownload(\n  c: Context,\n  store: ReturnType<typeof getShareStore>,\n  record: ShareRecord,\n  clientIp: string,\n  inline = false,\n): Promise<Response> {\n  if (!acquireDownloadSlot(record.token)) {\n    return new Response('Too many concurrent downloads for this share', { status: 429 });\n  }\n\n  try {\n    const integrity = await store.validateFileIntegrity(record);\n    if (!integrity.valid) {\n      logShareAudit(\n        'share.access_denied',\n        { shareId: record.id, tokenPrefix: record.token.slice(0, 8), reason: integrity.reason, clientIp },\n        `Share file integrity check failed: ${integrity.reason}`,\n      );\n      return new Response(renderShareExpiredPage((integrity.reason ?? 'file_deleted') as ShareExpiredReason), {\n        status: 410,\n        headers: { 'Content-Type': 'text/html; charset=utf-8' },\n      });\n    }\n\n    store.incrementDownloadCount(record.id);\n\n    logShareAudit(\n      'share.access',\n      { shareId: record.id, tokenPrefix: record.token.slice(0, 8), clientIp, downloadCount: record.downloadCount },\n      `Share downloaded: ${record.fileName}`,\n    );\n\n    const fileStat = await stat(record.absolutePath);\n    const stream = createReadStream(record.absolutePath);\n    const webStream = Readable.toWeb(stream) as ReadableStream;\n    const disposition = rfc5987ContentDisposition(inline ? 'inline' : 'attachment', record.fileName);\n\n    return new Response(webStream, {\n      status: 200,\n      headers: {\n        'Content-Type': shareResponseContentType(record.mimeType),\n        'Content-Disposition': disposition,\n        'Content-Length': String(fileStat.size),\n        'Cache-Control': 'private, no-store',\n        'X-Content-Type-Options': 'nosniff',\n        'X-Frame-Options': 'DENY',\n        'Referrer-Policy': 'no-referrer',\n      },\n    });\n  } finally {\n    releaseDownloadSlot(record.token);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAiDA,SAAS,mBAAmB,SAAyB;CACnD,MAAM,UAAU,QAAQ,cAAc;AACtC,QAAO;EACL,aAAa,4BAA4B,QAAQ,cAAc;EAC/D,aAAa,QAAQ,QAAQ;EAC7B,uBAAuB,6BAA6B,QAAQ,cAAc;EAC3E;;AAGH,SAAS,uBAAuB,SAAyB;CACvD,MAAM,MAAM;EAAE,GAAG;EAAuB,GAAG,mBAAmB,QAAQ;EAAE;CACxE,MAAM,OAAO,QAAQ,cAAc,QAAQ,QAAQ;CAEnD,MAAM,kBAAkB,IAAI,UAAU,sBAAsB,oBAAoB;AAChF,QAAO;EAAE,QAAQ,IAAI;EAAW;EAAiB;;AAGnD,SAAS,mBAAmB,SAA+C;CACzE,MAAM,MAAO,QAAQ,cAAc,SAAqC;AACxE,KAAI,CAAC,OAAO,OAAO,QAAQ,SAAU,QAAO,EAAE;AAC9C,QAAO;;AAGT,SAAS,iBAAiB,OAAuB;AAC/C,QAAO,WAAW,SAAS,CAAC,OAAO,OAAO,OAAO,CAAC,OAAO,MAAM,CAAC,MAAM,GAAG,GAAG;;AAG9E,MAAM,qCAAqC;AAC3C,MAAM,kCAAkB,IAAI,KAAqB;AACjD,MAAM,mCAAmB,IAAI,KAAqB;AAElD,SAAS,oBAAoB,OAAwB;CACnD,MAAM,UAAU,gBAAgB,IAAI,MAAM,IAAI;AAC9C,KAAI,WAAW,mCAAoC,QAAO;AAC1D,iBAAgB,IAAI,OAAO,UAAU,EAAE;AACvC,QAAO;;AAGT,SAAS,oBAAoB,OAAqB;CAChD,MAAM,UAAU,gBAAgB,IAAI,MAAM,IAAI;AAC9C,KAAI,WAAW,EAAG,iBAAgB,OAAO,MAAM;KAC1C,iBAAgB,IAAI,OAAO,UAAU,EAAE;;AAG9C,SAAS,eAAe,OAAe,OAAwB;CAC7D,MAAM,UAAU,iBAAiB,IAAI,MAAM,IAAI;AAC/C,KAAI,WAAW,MAAO,QAAO;AAC7B,kBAAiB,IAAI,OAAO,UAAU,EAAE;AACxC,QAAO;;AAGT,SAAS,eAAe,OAAqB;CAC3C,MAAM,UAAU,iBAAiB,IAAI,MAAM,IAAI;AAC/C,KAAI,WAAW,EAAG,kBAAiB,OAAO,MAAM;KAC3C,kBAAiB,IAAI,OAAO,UAAU,EAAE;;;;;;;AAQ/C,SAAS,oBAAoB,MAAc,WAA8B;AACvE,QAAO,UAAU,SAAS,KAAK;;;;;;;;AASjC,SAAS,qBAAqB,MAAuB;AACnD,QACE,SAAS,mBACT,SAAS,6EACT,SAAS;;AAIb,SAAS,0BAA0B,aAAsC,UAA0B;AAGjG,QAAO,GAAG,YAAY,cAFR,SAAS,QAAQ,iBAAiB,IAAI,CAAC,QAAQ,MAAM,GAE1B,CAAC,sBAD7B,mBAAmB,SACoC;;AAKtE,SAAgB,0BAA0B,KAAW,SAA+B;CAClF,MAAM,QAAQ,cAAc,mBAAmB,QAAQ,CAAC;;AAGxD,KAAI,IAAI,aAAa,OAAO,MAAM;EAChC,MAAM,WAAW,uBAAuB,EAAE,MAAM,MAAc,EAAE,IAAI,OAAO,EAAE,IAAI,KAAA,GAAW,CAAC;EAC7F,MAAM,aAAa,wBAAwB,SAAS;AACpD,MAAI,CAAC,WAAW,SAAS;AACvB,KAAE,OAAO,eAAe,OAAO,KAAK,KAAK,WAAW,eAAe,IAAK,CAAC,CAAC;AAC1E,UAAO,EAAE,KAAK,qBAAqB,IAAI;;EAGzC,MAAM,QAAQ,EAAE,IAAI,MAAM,QAAQ;EAClC,MAAM,SAAS,MAAM,WAAW,MAAM;AACtC,MAAI,CAAC,OAAQ,QAAO,EAAE,KAAK,uBAAuB,YAAY,EAAE,IAAI;EAEpE,MAAM,aAAa,MAAM,eAAe,OAAO;AAC/C,MAAI,CAAC,WAAW,OAAO;AACrB,iBACE,uBACA;IAAE,SAAS,OAAO;IAAI,aAAa,MAAM,MAAM,GAAG,EAAE;IAAE,QAAQ,WAAW;IAAQ;IAAU,EAC3F,wBAAwB,WAAW,SACpC;AACD,UAAO,EAAE,KAAK,uBAAuB,WAAW,OAA6B,EAAE,IAAI;;AAGrF,MAAI,OAAO,SAAS,YAClB,QAAO,uBAAuB,GAAG,OAAO,SAAS,QAAQ,MAAM;AAIjE,MAAI,EAAE,IAAI,MAAM,KAAK,KAAK,IACxB,QAAO,mBAAmB,GAAG,OAAO,QAAQ,SAAS;AAEvD,MAAI,EAAE,IAAI,MAAM,SAAS,KAAK;OAExB;IADU,GAAG;IAAuB,GAAG,mBAAmB,QAAQ;IAC/D,CAAC,mBAAmB,SAAS,OAAO,SAAS,CAClD,QAAO,mBAAmB,GAAG,OAAO,QAAQ,UAAU,KAAK;;EAI/D,MAAM,eAAe,MAAM,MAAM;EACjC,MAAM,MAAM;GAAE,GAAG;GAAuB,GAAG,mBAAmB,QAAQ;GAAE;EACxE,MAAM,cAAc,oBAAoB,OAAO,UAAU,IAAI,mBAAmB;EAChF,MAAM,kBAAkB,qBAAqB,OAAO,SAAS;EAC7D,MAAM,KAAK,eAAe,SAAS,OAAO;AAC1C,SAAO,EAAE,KACP,uBAAuB,QAAQ,cAAc;GAC3C,WAAW,cAAc,MAAM,MAAM,aAAa;GAClD,YAAY,kBAAkB,YAAY,mBAAmB,MAAM,KAAK;GACxE;GACD,CAAC,CACH;GACD;;AAGF,KAAI,KAAK,sBAAsB,OAAO,MAAM;EAC1C,MAAM,WAAW,uBAAuB,EAAE,MAAM,MAAc,EAAE,IAAI,OAAO,EAAE,IAAI,KAAA,GAAW,CAAC;EAC7F,MAAM,aAAa,wBAAwB,SAAS;AACpD,MAAI,CAAC,WAAW,SAAS;AACvB,KAAE,OAAO,eAAe,OAAO,KAAK,KAAK,WAAW,eAAe,IAAK,CAAC,CAAC;AAC1E,UAAO,EAAE,KAAK,qBAAqB,IAAI;;EAGzC,MAAM,QAAQ,EAAE,IAAI,MAAM,QAAQ;EAClC,MAAM,SAAS,MAAM,WAAW,MAAM;AACtC,MAAI,CAAC,OAAQ,QAAO,EAAE,KAAK,uBAAuB,YAAY,EAAE,IAAI;EAEpE,MAAM,aAAa,MAAM,eAAe,OAAO;AAC/C,MAAI,CAAC,WAAW,OAAO;AACrB,iBACE,uBACA;IAAE,SAAS,OAAO;IAAI,aAAa,MAAM,MAAM,GAAG,EAAE;IAAE,QAAQ,WAAW;IAAQ;IAAU,EAC3F,0BAA0B,WAAW,SACtC;AACD,UAAO,EAAE,KAAK,uBAAuB,WAAW,OAA6B,EAAE,IAAI;;AAGrF,MAAI,OAAO,SAAS,YAClB,QAAO,EAAE,KAAK,uBAAuB,YAAY,EAAE,IAAI;AAEzD,SAAO,mBAAmB,GAAG,OAAO,QAAQ,SAAS;GACrD;;AAGF,KAAI,IAAI,kBAAkB,OAAO,MAAM;EACrC,MAAM,WAAW,uBAAuB,EAAE,MAAM,MAAc,EAAE,IAAI,OAAO,EAAE,IAAI,KAAA,GAAW,CAAC;EAC7F,MAAM,aAAa,wBAAwB,SAAS;AACpD,MAAI,CAAC,WAAW,SAAS;AACvB,KAAE,OAAO,eAAe,OAAO,KAAK,KAAK,WAAW,eAAe,IAAK,CAAC,CAAC;AAC1E,UAAO,EAAE,KAAK,qBAAqB,IAAI;;EAGzC,MAAM,QAAQ,EAAE,IAAI,MAAM,QAAQ;EAClC,MAAM,SAAS,MAAM,WAAW,MAAM;AACtC,MAAI,CAAC,OAAQ,QAAO,EAAE,KAAK,uBAAuB,YAAY,EAAE,IAAI;AACpE,MAAI,OAAO,SAAS,YAAa,QAAO,EAAE,KAAK,uBAAuB,YAAY,EAAE,IAAI;EAExF,MAAM,aAAa,MAAM,eAAe,OAAO;AAC/C,MAAI,CAAC,WAAW,MACd,QAAO,EAAE,KAAK,uBAAuB,WAAW,OAA6B,EAAE,IAAI;AAKrF,SAAO,oBAAoB,GAAG,OAAO,SAAS,QAF9B,EAAE,IAAI,MAAM,OAAO,IAAI,IAEwB,UADhD,EAAE,IAAI,MAAM,SAAS,KAAK,OAAO,EAAE,IAAI,MAAM,KAAK,KAAK,IACU;GAChF;;AAGF,KAAI,IAAI,kBAAkB,OAAO,MAAM;EAErC,MAAM,aAAa,wBADF,uBAAuB,EAAE,MAAM,MAAc,EAAE,IAAI,OAAO,EAAE,IAAI,KAAA,GAAW,CACzC,CAAC;AACpD,MAAI,CAAC,WAAW,SAAS;AACvB,KAAE,OAAO,eAAe,OAAO,KAAK,KAAK,WAAW,eAAe,IAAK,CAAC,CAAC;AAC1E,UAAO,EAAE,KAAK,qBAAqB,IAAI;;EAGzC,MAAM,QAAQ,EAAE,IAAI,MAAM,QAAQ;EAClC,MAAM,SAAS,MAAM,WAAW,MAAM;AACtC,MAAI,CAAC,OAAQ,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,aAAa;GAAE,EAAE,IAAI;AAC/E,MAAI,OAAO,SAAS,YAAa,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,iBAAiB;GAAE,EAAE,IAAI;EAEvG,MAAM,aAAa,MAAM,eAAe,OAAO;AAC/C,MAAI,CAAC,WAAW,MACd,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,WAAW,QAAQ;GAAE,EAAE,IAAI;EAG1E,MAAM,OAAO,EAAE,IAAI,MAAM,OAAO,IAAI;AAEpC,OAAK,EAAE,IAAI,OAAO,SAAS,IAAI,IAAI,SAAS,YAAY,CACtD,QAAO,uBAAuB,GAAG,OAAO,SAAS,QAAQ,OAAO,KAAK;AAEvE,MAAI;GACF,MAAM,UAAU,MAAM,MAAM,cAAc,QAAQ,KAAK;AACvD,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS;IAAS,CAAC;WACtC,KAAK;GACZ,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAChE,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS;IAAE,EAAE,IAAI;;GAEvD;;AAGF,KAAI,IAAI,iBAAiB,OAAO,MAAM;EACpC,MAAM,WAAW,uBAAuB,EAAE,MAAM,MAAc,EAAE,IAAI,OAAO,EAAE,IAAI,KAAA,GAAW,CAAC;EAC7F,MAAM,aAAa,wBAAwB,SAAS;AACpD,MAAI,CAAC,WAAW,SAAS;AACvB,KAAE,OAAO,eAAe,OAAO,KAAK,KAAK,WAAW,eAAe,IAAK,CAAC,CAAC;AAC1E,UAAO,EAAE,KAAK,qBAAqB,IAAI;;EAGzC,MAAM,QAAQ,EAAE,IAAI,MAAM,QAAQ;EAClC,MAAM,SAAS,MAAM,WAAW,MAAM;AACtC,MAAI,CAAC,OAAQ,QAAO,EAAE,KAAK,uBAAuB,YAAY,EAAE,IAAI;AACpE,MAAI,OAAO,SAAS,YAAa,QAAO,EAAE,KAAK,uBAAuB,YAAY,EAAE,IAAI;EAExF,MAAM,aAAa,MAAM,eAAe,OAAO;AAC/C,MAAI,CAAC,WAAW,MACd,QAAO,EAAE,KAAK,uBAAuB,WAAW,OAA6B,EAAE,IAAI;AAGrF,SAAO,mBAAmB,GAAG,OAAO,SAAS,QAAQ,EAAE,IAAI,MAAM,OAAO,IAAI,IAAI,SAAS;GACzF;;AAGF,KAAI,IAAI,kBAAkB,OAAO,MAAM;EAErC,MAAM,aAAa,wBADF,uBAAuB,EAAE,MAAM,MAAc,EAAE,IAAI,OAAO,EAAE,IAAI,KAAA,GAAW,CACzC,CAAC;AACpD,MAAI,CAAC,WAAW,SAAS;AACvB,KAAE,OAAO,eAAe,OAAO,KAAK,KAAK,WAAW,eAAe,IAAK,CAAC,CAAC;AAC1E,UAAO,EAAE,KAAK,qBAAqB,IAAI;;EAGzC,MAAM,QAAQ,EAAE,IAAI,MAAM,QAAQ;EAClC,MAAM,SAAS,MAAM,WAAW,MAAM;AACtC,MAAI,CAAC,OAAQ,QAAO,EAAE,KAAK,EAAE,OAAO,OAAO,EAAE,IAAI;EAEjD,MAAM,aAAa,MAAM,eAAe,OAAO;EAC/C,MAAM,iBAAiB,OAAO,aAAa,OAAO,KAAK,IAAI,GAAG,OAAO,WAAW,OAAO,cAAc,GAAG;AAExG,SAAO,EAAE,KAAK;GACZ,MAAM,OAAO;GACb,UAAU,OAAO;GACjB,UAAU,OAAO;GACjB,UAAU,OAAO;GACjB,aAAa,OAAO,eAAe;GACnC,WAAW,OAAO;GAClB;GACA,OAAO,WAAW;GAClB,WAAW,OAAO,aAAa;GAChC,CAAC;GACF;;AAGF,KAAI,GAAG,QAAQ,aAAa,OAAO,MAAM;EACvC,MAAM,QAAQ,EAAE,IAAI,MAAM,QAAQ;EAClC,MAAM,SAAS,MAAM,WAAW,MAAM;AACtC,MAAI,CAAC,OAAQ,QAAO,EAAE,KAAK,MAAM,IAAI;EACrC,MAAM,aAAa,MAAM,eAAe,OAAO;AAC/C,SAAO,EAAE,KAAK,MAAM,WAAW,QAAQ,MAAM,IAAI;GACjD;;AAGF,KAAI,IAAI,uBAAuB,OAAO,MAAM;EAE1C,MAAM,aAAa,wBADF,uBAAuB,EAAE,MAAM,MAAc,EAAE,IAAI,OAAO,EAAE,IAAI,KAAA,GAAW,CACzC,CAAC;AACpD,MAAI,CAAC,WAAW,SAAS;AACvB,KAAE,OAAO,eAAe,OAAO,KAAK,KAAK,WAAW,eAAe,IAAK,CAAC,CAAC;AAC1E,UAAO,EAAE,KAAK,qBAAqB,IAAI;;EAEzC,MAAM,QAAQ,EAAE,IAAI,MAAM,QAAQ;EAClC,MAAM,SAAS,MAAM,WAAW,MAAM;AACtC,MAAI,CAAC,OAAQ,QAAO,EAAE,KAAK,MAAM,IAAI;AAErC,MAAI,CADe,MAAM,eAAe,OACzB,CAAC,MAAO,QAAO,EAAE,KAAK,MAAM,IAAI;EAE/C,MAAM,SAAS,MAAM,cAAc,MAAM;AACzC,MAAI,OACF,QAAO,IAAI,SAAS,QAAQ;GAC1B,QAAQ;GACR,SAAS;IACP,gBAAgB,qBAAqB,OAAO;IAC5C,iBAAiB;IACjB,0BAA0B;IAC3B;GACF,CAAC;AAGJ,oBAAkB;GAAE,OAAO;GAAQ;GAAO,UAAU,OAAO;GAAI,EAAE,uBAAuB,QAAQ,CAAC;EACjG,MAAM,cAAc,eAAe,OAAO,UAAU,OAAO,SAAS,cAAc,WAAW,OAAO;AACpG,SAAO,IAAI,SAAS,aAAa;GAC/B,QAAQ;GACR,SAAS;IACP,gBAAgB;IAChB,iBAAiB;IACjB,0BAA0B;IAC3B;GACF,CAAC;GACF;AAEF,KAAI,GAAG,QAAQ,uBAAuB,OAAO,MAAM;EACjD,MAAM,QAAQ,EAAE,IAAI,MAAM,QAAQ;EAClC,MAAM,SAAS,MAAM,WAAW,MAAM;AACtC,MAAI,CAAC,OAAQ,QAAO,EAAE,KAAK,MAAM,IAAI;AAErC,MAAI,CADe,MAAM,eAAe,OACzB,CAAC,MAAO,QAAO,EAAE,KAAK,MAAM,IAAI;EAC/C,MAAM,QAAQ,MAAM,gBAAgB,MAAM;AAC1C,SAAO,EAAE,KAAK,MAAM,QAAQ,MAAM,IAAI;GACtC;;AAGF,KAAI,IAAI,0BAA0B,OAAO,MAAM;EAE7C,MAAM,aAAa,wBADF,uBAAuB,EAAE,MAAM,MAAc,EAAE,IAAI,OAAO,EAAE,IAAI,KAAA,GAAW,CACzC,CAAC;AACpD,MAAI,CAAC,WAAW,SAAS;AACvB,KAAE,OAAO,eAAe,OAAO,KAAK,KAAK,WAAW,eAAe,IAAK,CAAC,CAAC;AAC1E,UAAO,EAAE,KAAK,qBAAqB,IAAI;;EAEzC,MAAM,QAAQ,EAAE,IAAI,MAAM,QAAQ;EAClC,MAAM,YAAY,kBAAkB,uBAAuB,QAAQ,CAAC;EACpE,MAAM,SAAS,UAAU,WAAW,MAAM;AAC1C,MAAI,CAAC,OAAQ,QAAO,EAAE,KAAK,MAAM,IAAI;AAErC,MAAI,CADe,UAAU,eAAe,OAC7B,CAAC,MAAO,QAAO,EAAE,KAAK,MAAM,IAAI;EAE/C,MAAM,SAAS,MAAM,cAAc,MAAM;AACzC,MAAI,OACF,QAAO,IAAI,SAAS,QAAQ;GAC1B,QAAQ;GACR,SAAS;IACP,gBAAgB,qBAAqB,OAAO;IAC5C,iBAAiB;IACjB,0BAA0B;IAC3B;GACF,CAAC;AAEJ,oBAAkB;GAAE,OAAO;GAAQ;GAAO,UAAU,OAAO;GAAI,EAAE,uBAAuB,QAAQ,CAAC;EACjG,MAAM,cAAc,eAAe,OAAO,eAAe,cAAc,OAAO;AAC9E,SAAO,IAAI,SAAS,aAAa;GAC/B,QAAQ;GACR,SAAS;IACP,gBAAgB;IAChB,iBAAiB;IACjB,0BAA0B;IAC3B;GACF,CAAC;GACF;AAEF,KAAI,GAAG,QAAQ,0BAA0B,OAAO,MAAM;EAEpD,MAAM,QAAQ,MAAM,gBADN,EAAE,IAAI,MAAM,QACe,CAAC;AAC1C,SAAO,EAAE,KAAK,MAAM,QAAQ,MAAM,IAAI;GACtC;AAGF,OAAM,gBAAgB,QAAQ;AACvB,kBAAgB,IAAI,MAAM;GAC/B;;AAKJ,SAAgB,oBAAoB,eAAqB,MAAoC;CAC3F,MAAM,EAAE,YAAY;CACpB,MAAM,QAAQ,cAAc,mBAAmB,QAAQ,CAAC;AACjC,mBAAkB,uBAAuB,QAAQ,CAE1D,CAAC,gBAAgB,QAAQ;EACrC,MAAM,MAAM,iBAAiB,IAAI,GAAG;AACpC,MAAI,IAAU,mBAAkB,IAAI;GACpC;AAEF,eAAc,KAAK,eAAe,OAAO,MAAM;EAC7C,MAAM,eAAe,aAAa,EAAE,eAAe,EAAE,IAAI,OAAO,gBAAgB,IAAI,KAAA,GAAW,CAAC;AAChG,MAAI,CAAC,aAAc,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,kBAAkB;GAAE,EAAE,IAAI;EAE1F,IAAI;AACJ,MAAI;AACF,UAAQ,MAAM,EAAE,IAAI,MAAM;UACpB;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS,gBAAgB;IAAE,EAAE,IAAI;;EAGvE,MAAM,OAAO,OAAO,KAAK,SAAS,WAAW,KAAK,KAAK,MAAM,GAAG;AAChE,MAAI,CAAC,KAAM,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,gBAAgB;GAAE,EAAE,IAAI;EAEhF,MAAM,aAAa,OAAO,KAAK,eAAe,WAAW,KAAK,WAAW,MAAM,GAAG,KAAA;EAClF,MAAM,UAAU,OAAO,KAAK,YAAY,WAAW,KAAK,QAAQ,MAAM,GAAG,KAAA;EAEzE,MAAM,gBAAgB,MAAM,6BAA6B,SAAS,YAAY,QAAQ;AACtF,MAAI,CAAC,cACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,4BAA4B;GAAE,EAAE,IAAI;EAGnF,MAAM,QAAQ,OAAO,KAAK,UAAU,WAAW,KAAK,QAAQ,KAAA;EAC5D,MAAM,WAAW,KAAK,aAAa,OAAO,OAAO,OAAO,KAAK,aAAa,WAAW,KAAK,WAAW,KAAA;EACrG,MAAM,cAAc,OAAO,KAAK,gBAAgB,WAAW,KAAK,YAAY,MAAM,IAAI,KAAA,IAAY,KAAA;EAClG,MAAM,OAAO,KAAK,SAAS,eAAe,KAAK,SAAS,SAAS,KAAK,OAAO,KAAA;EAC7E,MAAM,gBAAgB,KAAK,kBAAkB,aAAa,aAAa,KAAK,kBAAkB,WAAW,WAAW,KAAA;EACpH,MAAM,iBAAiB,KAAK,mBAAmB;EAC/C,MAAM,eAAe,OAAO,KAAK,iBAAiB,WAAW,KAAK,eAAe,KAAA;EACjF,MAAM,gBAAgB,OAAO,KAAK,kBAAkB,WAAW,KAAK,gBAAgB,KAAA;EACpF,MAAM,WAAW,OAAO,KAAK,aAAa,WAAW,KAAK,WAAW,KAAA;AAErE,MAAI;AACF,SAAM,aAAa,mBAAmB,QAAQ,CAAC;GAC/C,MAAM,SAAS,MAAM,MAAM,OAAO;IAChC;IACA;IACA;IACA;IACA;IACA;IACA;IACA,kBAAkB,iBAAiB,aAAa;IAChD;IACA;IACA;IACA;IACA;IACA;IACD,CAAC;GAEF,MAAM,SAAS,mBAAmB,QAAQ;GAC1C,MAAM,WAAW,gBAAgB,OAAO,OAAO,OAAO;AAEtD,UAAO,EAAE,KACP;IACE,IAAI;IACJ,SAAS;KACP,IAAI,OAAO;KACX,OAAO,OAAO;KACd,MAAM,OAAO;KACb,UAAU,SAAS;KACnB,QAAQ,SAAS;KACjB,cAAc,SAAS;KACvB,kBAAkB,SAAS;KAC3B,WAAW,OAAO;KAClB,UAAU,OAAO;KACjB,UAAU,OAAO;KACjB,UAAU,OAAO;KACjB,WAAW,OAAO,aAAa;KAChC;IACF,EACD,IACD;WACM,KAAK;GACZ,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAChE,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS;IAAE,EAAE,IAAI;;GAEvD;;;;;;AAOF,eAAc,KAAK,oBAAoB,OAAO,MAAM;EAClD,MAAM,eAAe,aAAa,EAAE,eAAe,EAAE,IAAI,OAAO,gBAAgB,IAAI,KAAA,GAAW,CAAC;AAChG,MAAI,CAAC,aAAc,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,kBAAkB;GAAE,EAAE,IAAI;EAE1F,IAAI;AACJ,MAAI;AACF,UAAQ,MAAM,EAAE,IAAI,MAAM;UACpB;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS,gBAAgB;IAAE,EAAE,IAAI;;EAGvE,MAAM,OAAO,OAAO,KAAK,SAAS,WAAW,KAAK,KAAK,MAAM,GAAG;AAChE,MAAI,CAAC,KAAM,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,gBAAgB;GAAE,EAAE,IAAI;EAChF,MAAM,aAAa,OAAO,KAAK,eAAe,WAAW,KAAK,WAAW,MAAM,GAAG,KAAA;EAClF,MAAM,UAAU,OAAO,KAAK,YAAY,WAAW,KAAK,QAAQ,MAAM,GAAG,KAAA;EACzE,MAAM,OAAQ,OAAO,KAAK,SAAS,YAAY;GAAC;GAAQ;GAAc;GAAc;GAAY,CAAC,SAAS,KAAK,KAAK,GAC/G,KAAK,OACN;EACJ,MAAM,WACJ,KAAK,aAAa,YAAY,KAAK,aAAa,eAAe,KAAK,aAAa,WAC7E,KAAK,WACL,KAAA;EACN,MAAM,QAAQ,OAAO,KAAK,UAAU,WAAW,KAAK,QAAQ,KAAA;EAC5D,MAAM,cAAc,OAAO,KAAK,gBAAgB,WAAW,KAAK,cAAc,KAAA;EAC9E,MAAM,cAAc,OAAO,KAAK,UAAU,WAAW,KAAK,QAAQ,KAAA;EAClE,MAAM,mBACJ,KAAK,aAAa,OAAO,OAAO,OAAO,KAAK,aAAa,WAAW,KAAK,WAAW,KAAA;EACtF,MAAM,gBAAgB,KAAK,cAAc;EAEzC,MAAM,gBAAgB,MAAM,6BAA6B,SAAS,YAAY,QAAQ;AACtF,MAAI,CAAC,cACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,4BAA4B;GAAE,EAAE,IAAI;EAGnF,IAAI;AACJ,MAAI;AACF,WAAQ,MAAM,iBAAiB,eAAe,KAAK;WAC5C,KAAK;GACZ,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAChE,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS;IAAE,EAAE,IAAI;;EAGvD,IAAI;AACJ,MAAI;AACF,cAAW,gBAAgB,OAAO,KAAK;WAChC,KAAK;GACZ,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAChE,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS;IAAE,EAAE,IAAI;;EAGvD,MAAM,WAAW,iBAAiB,SAAS;EAC3C,MAAM,QAAQ,eAAe,SAAS;EACtC,MAAM,WAAW,qBAAqB,KAAA,IAAY,mBAAmB,SAAS;EAC9E,MAAM,YAAY,iBAAiB,aAAa;EAChD,MAAM,SAAS,mBAAmB,QAAQ;AAE1C,MAAI;AACF,OAAI,SAAS,SAAS,QAAQ;IAC5B,MAAM,YAAY,kBAAkB,uBAAuB,QAAQ,CAAC;IAIpE,IAAI,WAAW;IACf,IAAI,YAA2B;AAC/B,QAAI,MAAM,SAAS,QAAQ;KACzB,MAAM,SAAS,MAAM,sBAAsB,eAAe,MAAM,aAAa;AAC7E,gBAAW,OAAO;AAClB,iBAAY,OAAO;;IAErB,MAAM,UAAU,MAAM,UAAU,OAAO;KACrC,MAAM;KACN,MAAM;KACN;KACA;KACA,WAAW,OAAO,KAAK,cAAc,WAAW,KAAK,YAAY,KAAA;KACjE,aAAa;KACb,aAAa;KACb;KACA;KACA;KACA,kBAAkB;KACnB,CAAC;AACF,QAAI,UAAW,oBAAmB,QAAQ,IAAI,UAAU;IACxD,MAAM,MAAM,UAAU,WAAW;IACjC,MAAM,iBAAiB,QAAQ,aAAa,QAAQ;IACpD,MAAM,WAAW,oBAAoB;KACnC,GAAG;KACH,OAAO,QAAQ;KACf;KACA,kBAAkB,IAAI;KACvB,CAAC;AACF,QAAI,eAAe;AACjB,uBAAkB;MAAE,OAAO;MAAQ,OAAO,QAAQ;MAAO,UAAU,QAAQ;MAAI,EAAE,uBAAuB,QAAQ,CAAC;AACjH,eAAU,mBAAmB,QAAQ,IAAI,UAAU;;IAErD,MAAM,WAAW,UAAU,MAAM,SAAS,cAAc,KAAK,MAAM,IAAI,CAAC,KAAK,IAAI,OAAO,MAAM,MAAM;AACpG,WAAO,EAAE,KAAK;KACZ,IAAI;KACJ,SAAS;MACP,OAAO;OACL,IAAI,QAAQ;OACZ,MAAM;OACN,OAAO;OACP,aAAa,gBAAgB;QAAE;QAAU,WAAW,QAAQ;QAAW,UAAU;QAAa,CAAC;OAC/F,UAAU,SAAS;OACnB,QAAQ;OACR,cAAc,SAAS;OACvB,kBAAkB,SAAS;OAC3B,WAAW,QAAQ;OACnB,UAAU;OACX;MACD,WAAW;OACT,KAAK,gBAAgB,SAAS,eAAe;OAC7C,QAAQ,gBAAgB,YAAY;OACpC,OAAO,sBAAsB,UAAU;OACvC,QAAQ,sBAAsB,UAAU;OACzC;MACD,SAAS;OAAE,QAAQ,SAAS;OAAQ,MAAM,SAAS;OAAM;MAC1D;KACF,EAAE,IAAI;;AAGT,UAAO,MAAM,wBAAwB;IACnC;IAAG;IAAS;IAAO;IAAO;IAC1B;IAAO;IAAU;IAAO;IAAa;IACrC;IAAe;IAAW;IAAQ;IACnC,CAAC;WACK,KAAK;GACZ,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAChE,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS;IAAE,EAAE,IAAI;;GAEvD;AAEF,eAAc,IAAI,eAAe,OAAO,MAAM;AAC5C,QAAM,aAAa,mBAAmB,QAAQ,CAAC;EAC/C,MAAM,SAAS,MAAM,cAAc;EACnC,MAAM,SAAS,mBAAmB,QAAQ;EAC1C,MAAM,MAAM,KAAK,KAAK;EAEtB,MAAM,QAAQ,OAAO,KAAK,MAAM;GAC9B,MAAM,WAAW,gBAAgB,EAAE,OAAO,OAAO;GACjD,MAAM,UAAU,OAAO,IAAI,KAAK,EAAE,UAAU,CAAC,SAAS;AACtD,UAAO;IACL,IAAI,EAAE;IACN,MAAM,EAAE;IACR,UAAU,EAAE;IACZ,uBAAuB,EAAE;IACzB,UAAU,SAAS;IACnB,QAAQ,SAAS;IACjB,cAAc,SAAS;IACvB,WAAW,EAAE;IACb,WAAW,EAAE;IACb,eAAe,EAAE;IACjB,UAAU,EAAE;IACZ,SAAS,EAAE;IACX;IACA,aAAa,EAAE,eAAe;IAC9B,UAAU,EAAE;IACZ,UAAU,EAAE;IACZ,WAAW,EAAE,aAAa;IAC3B;IACD;AAEF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,QAAQ,OAAO;GAAE,CAAC;GACvD;AAEF,eAAc,IAAI,mBAAmB,OAAO,MAAM;EAChD,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK;EAC5B,MAAM,SAAS,MAAM,QAAQ,GAAG;AAChC,MAAI,CAAC,OAAQ,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,aAAa;GAAE,EAAE,IAAI;EAE/E,MAAM,SAAS,mBAAmB,QAAQ;EAC1C,MAAM,WAAW,gBAAgB,OAAO,OAAO,OAAO;EACtD,MAAM,UAAU,KAAK,KAAK,IAAI,IAAI,KAAK,OAAO,UAAU,CAAC,SAAS;AAElE,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,GAAG;IACH,OAAO,KAAA;IACP,UAAU,SAAS;IACnB,QAAQ,SAAS;IACjB,cAAc,SAAS;IACvB;IACD;GACF,CAAC;GACF;AAEF,eAAc,OAAO,mBAAmB,OAAO,MAAM;EACnD,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK;AAE5B,MAAI,CADY,MAAM,OAAO,GACjB,CAAE,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,aAAa;GAAE,EAAE,IAAI;AAChF,SAAO,EAAE,KAAK,EAAE,IAAI,MAAM,CAAC;GAC3B;AAEF,eAAc,OAAO,eAAe,OAAO,MAAM;EAC/C,IAAI,OAAgC,EAAE;AACtC,MAAI;AACF,UAAQ,MAAM,EAAE,IAAI,MAAM;UACpB;AAIR,MAAI,KAAK,YAAY,MAAM;GACzB,MAAM,QAAQ,MAAM,eAAe;AACnC,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,cAAc,OAAO;IAAE,CAAC;;EAG/D,MAAM,MAAM,MAAM,QAAQ,KAAK,IAAI,GAAI,KAAK,IAAiB,QAAQ,MAAM,OAAO,MAAM,SAAS,GAAG,EAAE;AACtG,MAAI,IAAI,WAAW,EACjB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,sCAAsC;GAAE,EAAE,IAAI;EAE7F,MAAM,QAAQ,MAAM,WAAW,IAAI;AACnC,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,cAAc,OAAO;GAAE,CAAC;GAC7D;AAEF,eAAc,MAAM,mBAAmB,OAAO,MAAM;EAClD,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK;EAC5B,IAAI;AACJ,MAAI;AACF,UAAQ,MAAM,EAAE,IAAI,MAAM;UACpB;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS,gBAAgB;IAAE,EAAE,IAAI;;EAGvE,MAAM,QAA4D,EAAE;AACpE,MAAI,OAAO,KAAK,gBAAgB,SAAU,OAAM,cAAc,KAAK;AACnE,MAAI,KAAK,aAAa,QAAQ,OAAO,KAAK,aAAa,SAAU,OAAM,WAAW,KAAK;EAEvF,MAAM,UAAU,MAAM,OAAO,IAAI,MAAM;AACvC,MAAI,CAAC,QAAS,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,aAAa;GAAE,EAAE,IAAI;EAEhF,MAAM,SAAS,mBAAmB,QAAQ;EAC1C,MAAM,WAAW,gBAAgB,QAAQ,OAAO,OAAO;AAEvD,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,IAAI,QAAQ;IACZ,WAAW,QAAQ;IACnB,UAAU,QAAQ;IAClB,UAAU,SAAS;IACpB;GACF,CAAC;GACF;;AAKJ,eAAe,uBACb,GACA,OACA,SACA,QACA,OACA,UAAU,IACS;AACnB,OAAM,aAAa,mBAAmB,QAAQ,CAAC;CAC/C,MAAM,OAAO;EACX,OAAO,MAAe,IAAI,MAAM,MAAM,aAAa,mBAAmB,EAAE,KAAK,MAAM;EACnF,OAAO,MAAc,MAAM,MAAM,aAAa,mBAAmB,EAAE;EACnE,MAAM,MAAe,IAAI,MAAM,MAAM,YAAY,mBAAmB,EAAE,KAAK,MAAM,MAAM;EACxF;CAED,IAAI,UAA2E;AAC/E,KAAI,OAAO,WAAW,SAAS,WAC7B,KAAI;AACF,YAAU,MAAM,MAAM,cAAc,QAAQ,QAAQ;UAC7C,KAAK;AACZ,gBACE,uBACA;GAAE,SAAS,OAAO;GAAI,aAAa,OAAO,MAAM,MAAM,GAAG,EAAE;GAAE;GAAS,QAAQ,OAAO,IAAI;GAAE,EAC3F,2BACD;AACD,SAAO,EAAE,KAAK,uBAAuB,YAAY,EAAE,IAAI;;CAG3D,MAAM,KAAK,eAAe,SAAS,OAAO;AAC1C,QAAO,EAAE,KAAK,wBAAwB,QAAQ,SAAS,MAAM,EAAE,IAAI,CAAC,CAAC;;AAGvE,SAAS,eAAe,SAAyB,QAAqB;CACpE,MAAM,WAAW,gBAAgB,OAAO,OAAO,mBAAmB,QAAQ,CAAC;AAG3E,KAAI,SAAS,iBAAiB,SAAU,QAAO,KAAA;AAC/C,QAAO;EACL,kBAAkB,SAAS;EAC3B,sBAAsB,GAAG,SAAS,SAAS;EAC3C,OAAO,OAAO;EACd,aAAa,OAAO,eAAe,KAAA;EACpC;;AAGH,eAAe,oBACb,GACA,OACA,SACA,QACA,SACA,UACA,QACmB;AACnB,KAAI,CAAC,oBAAoB,OAAO,MAAM,CACpC,QAAO,IAAI,SAAS,gDAAgD,EAAE,QAAQ,KAAK,CAAC;AAGtF,KAAI;EACF,MAAM,WAAW,MAAM,MAAM,sBAAsB,QAAQ,QAAQ;AACnE,MAAI,SAAS,OAAO,MAAM;AACxB,iBACE,uBACA;IAAE,SAAS,OAAO;IAAI,aAAa,OAAO,MAAM,MAAM,GAAG,EAAE;IAAE,QAAQ,SAAS;IAAQ;IAAU;IAAS,EACzG,sCAAsC,SAAS,SAChD;AACD,UAAO,EAAE,KAAK,uBAAuB,YAAY,EAAE,IAAI;;EAEzD,MAAM,YAAY,MAAM,MAAM,sBAAsB,OAAO;AAC3D,MAAI,CAAC,UAAU,MACb,QAAO,EAAE,KAAK,uBAAwB,UAAU,UAAU,eAAsC,EAAE,IAAI;EAGxG,MAAM,WAAW,MAAM,KAAK,SAAS,aAAa;AAClD,MAAI,CAAC,SAAS,QAAQ,CACpB,QAAO,EAAE,KAAK,uBAAuB,YAAY,EAAE,IAAI;AAIzD,QAAM,aAAa,mBAAmB,QAAQ,CAAC;EAC/C,MAAM,MAAM,MAAM,WAAW;AAC7B,MAAI,SAAS,OAAO,IAAI,YACtB,QAAO,EAAE,KAAK,uBAAuB,YAAY,EAAE,IAAI;EAIzD,MAAM,aAAa;GAAE,GAAG;GAAuB,GAAG,mBAAmB,QAAQ;GAAE;EAC/E,MAAM,WAAW,QAAQ,MAAM,IAAI,CAAC,KAAK,IAAI,OAAO;EACpD,MAAM,EAAE,oBAAoB,MAAM,OAAO;EACzC,MAAM,OAAO,gBAAgB,SAAS;EACtC,MAAM,YAAY,UAAU,WAAW,mBAAmB,SAAS,KAAK;AAExE,QAAM,uBAAuB,OAAO,GAAG;AACvC,gBACE,gBACA;GAAE,SAAS,OAAO;GAAI,aAAa,OAAO,MAAM,MAAM,GAAG,EAAE;GAAE;GAAU;GAAS,MAAM,YAAY,WAAW;GAAc,EAC3H,0BAA0B,WAC3B;EAED,MAAM,SAAS,iBAAiB,SAAS,aAAa;EACtD,MAAM,YAAY,SAAS,MAAM,OAAO;EACxC,MAAM,cAAc,0BAA0B,YAAY,WAAW,cAAc,SAAS;AAE5F,SAAO,IAAI,SAAS,WAAW;GAC7B,QAAQ;GACR,SAAS;IACP,gBAAgB,yBAAyB,KAAK;IAC9C,uBAAuB;IACvB,kBAAkB,OAAO,SAAS,KAAK;IACvC,iBAAiB;IACjB,0BAA0B;IAC1B,mBAAmB;IACnB,mBAAmB;IACpB;GACF,CAAC;WACM;AACR,sBAAoB,OAAO,MAAM;;;AAIrC,eAAe,mBACb,GACA,OACA,SACA,QACA,SACA,UACmB;AACnB,OAAM,aAAa,mBAAmB,QAAQ,CAAC;CAC/C,MAAM,MAAM,MAAM,WAAW;CAC7B,MAAM,WAAW,IAAI,UAAU;AAC/B,KAAI,CAAC,eAAe,OAAO,OAAO,SAAS,CACzC,QAAO,IAAI,SAAS,kDAAkD,EAAE,QAAQ,KAAK,CAAC;AAGxF,KAAI;AAEF,OAAI,MADmB,MAAM,sBAAsB,QAAQ,QAAQ,EACtD,OAAO,KAClB,QAAO,EAAE,KAAK,uBAAuB,YAAY,EAAE,IAAI;EAEzD,MAAM,YAAY,MAAM,MAAM,sBAAsB,OAAO;AAC3D,MAAI,CAAC,UAAU,MACb,QAAO,EAAE,KAAK,uBAAwB,UAAU,UAAU,eAAsC,EAAE,IAAI;EAGxG,MAAM,QAAQ,MAAM,mBAAmB,QAAQ;GAC7C,kBAAkB;GAClB,cAAc,IAAI,UAAU;GAC5B,eAAe,IAAI,UAAU;GAC7B,gBAAgB,OAAO,WAAW,kBAAkB;GACpD,UAAU,OAAO,WAAW,YAAY,IAAI,UAAU;GACvD,CAAC;AAEF,QAAM,uBAAuB,OAAO,GAAG;AACvC,gBACE,gBACA;GAAE,SAAS,OAAO;GAAI,aAAa,OAAO,MAAM,MAAM,GAAG,EAAE;GAAE;GAAU,MAAM;GAAO;GAAS,WAAW,MAAM;GAAQ,EACtH,yBAAyB,OAAO,WAAW,UAAU,MAAM,UAAU,KACtE;EAED,MAAM,UAAU,UACZ,GAAG,OAAO,SAAS,GAAG,QAAQ,QAAQ,UAAU,IAAI,CAAC,QACrD,GAAG,OAAO,SAAS;EACvB,MAAM,SAAS,gBAAgB,EAAE,OAAO,CAAC;EACzC,MAAM,YAAY,SAAS,MAAM,OAAO;AAExC,SAAO,IAAI,SAAS,WAAW;GAC7B,QAAQ;GACR,SAAS;IACP,gBAAgB;IAChB,uBAAuB,0BAA0B,cAAc,QAAQ;IACvE,iBAAiB;IACjB,0BAA0B;IAC1B,mBAAmB;IACnB,mBAAmB;IACpB;GACF,CAAC;UACK,KAAK;EACZ,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAChE,SAAO,IAAI,SAAS,qBAAqB,WAAW,EAAE,QAAQ,KAAK,CAAC;WAC5D;AACR,iBAAe,OAAO,MAAM;;;AAMhC,eAAe,wBAAwB,MAejB;CACpB,MAAM,EAAE,GAAG,SAAS,OAAO,OAAO,UAAU,OAAO,UAAU,OAAO,aAAa,UAAU,eAAe,WAAW,QAAQ,kBAAkB;AAC/I,OAAM,aAAa,mBAAmB,QAAQ,CAAC;CAC/C,MAAM,SAAS,MAAM,MAAM,OAAO;EAChC,MAAM,eAAe,eAAe,MAAM,aAAa;EACvD;EACA,kBAAkB;EAClB;EACA,UAAU,aAAa,KAAA,IAAY,KAAA,IAAY;EAC/C;EACA,MAAM,MAAM,SAAS,cAAc,cAAc;EACjD,eAAe,SAAS,SAAS,QAAQ,aAAc,MAAM,SAAS,cAAc,WAAW,KAAA;EAChG,CAAC;CACF,MAAM,WAAW,gBAAgB,OAAO,OAAO,OAAO;CACtD,MAAM,WAAW,UAAU,OAAO,UAAU,MAAM;CAClD,MAAM,UAAU,gBAAgB;EAAE;EAAU,WAAW,OAAO;EAAW,UAAU;EAAa,CAAC;CACjG,MAAM,eAAe,gBACjB,GAAG,SAAS,SAAS,cACrB;AACJ,KAAI,eAAe;AACjB,oBAAkB;GAAE,OAAO;GAAQ,OAAO,OAAO;GAAO,UAAU,OAAO;GAAI,EAAE,uBAAuB,QAAQ,CAAC;AAC/G,QAAM,mBAAmB,OAAO,IAAI,UAAU;;AAEhD,QAAO,EAAE,KAAK;EACZ,IAAI;EACJ,SAAS;GACP,OAAO;IACL,IAAI,OAAO;IACX,MAAM,SAAS;IACf,OAAO;IACP,aAAa;IACb,UAAU,SAAS;IACnB,QAAQ,SAAS;IACjB,cAAc,SAAS;IACvB,kBAAkB,SAAS;IAC3B,WAAW,OAAO;IAClB,UAAU,OAAO;IAClB;GACD,WAAW;IACT,KAAK;IACL,QAAQ,gBAAgB,YAAY;IACpC,OAAO,sBAAsB,UAAU;IACvC,QAAQ,sBAAsB,UAAU;IACzC;GACD,SAAS;IAAE,QAAQ,SAAS;IAAQ,MAAM,SAAS;IAAM;GAC1D;EACF,EAAE,IAAI;;AAGT,SAAS,eAAe,eAAuB,KAAqB;CAClE,MAAM,OAAO,cAAc,QAAQ,WAAW,GAAG;AACjD,KAAI,QAAQ,KAAM,QAAO;AACzB,KAAI,IAAI,WAAW,GAAG,KAAK,GAAG,CAAE,QAAO,IAAI,MAAM,KAAK,SAAS,EAAE;AACjE,KAAI,IAAI,WAAW,GAAG,KAAK,IAAI,CAAE,QAAO,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC,QAAQ,OAAO,IAAI;AAEtF,QAAO,IAAI,MAAM,QAAQ,CAAC,KAAK,IAAI;;AAGrC,eAAe,6BACb,SACA,YACA,SACwB;CACxB,MAAM,MAAM,QAAQ;AAEpB,KAAI,WACF,KAAI;AACF,SAAO,MAAM,QAAQ,SAAS,0BAA0B,WAAW;SAC7D;CAKV,MAAM,EAAE,qBAAqB,MAAM,OAAO;CAC1C,MAAM,EAAE,0BAA0B,kBAAkB,0BAA0B,MAAM,OAClF;AAGF,KAAI,QAEF,QAAO,yBAAyB,KADb,iBAAiB,QACW,CAAC;CAGlD,MAAM,OAAO,iBAAiB,IAAI;AAClC,KAAI,KAAM,QAAO;AAGjB,QAAO,yBAAyB,KADd,sBAAsB,IACM,CAAC;;AAGjD,eAAe,mBACb,GACA,OACA,QACA,UACA,SAAS,OACU;AACnB,KAAI,CAAC,oBAAoB,OAAO,MAAM,CACpC,QAAO,IAAI,SAAS,gDAAgD,EAAE,QAAQ,KAAK,CAAC;AAGtF,KAAI;EACF,MAAM,YAAY,MAAM,MAAM,sBAAsB,OAAO;AAC3D,MAAI,CAAC,UAAU,OAAO;AACpB,iBACE,uBACA;IAAE,SAAS,OAAO;IAAI,aAAa,OAAO,MAAM,MAAM,GAAG,EAAE;IAAE,QAAQ,UAAU;IAAQ;IAAU,EACjG,sCAAsC,UAAU,SACjD;AACD,UAAO,IAAI,SAAS,uBAAwB,UAAU,UAAU,eAAsC,EAAE;IACtG,QAAQ;IACR,SAAS,EAAE,gBAAgB,4BAA4B;IACxD,CAAC;;AAGJ,QAAM,uBAAuB,OAAO,GAAG;AAEvC,gBACE,gBACA;GAAE,SAAS,OAAO;GAAI,aAAa,OAAO,MAAM,MAAM,GAAG,EAAE;GAAE;GAAU,eAAe,OAAO;GAAe,EAC5G,qBAAqB,OAAO,WAC7B;EAED,MAAM,WAAW,MAAM,KAAK,OAAO,aAAa;EAChD,MAAM,SAAS,iBAAiB,OAAO,aAAa;EACpD,MAAM,YAAY,SAAS,MAAM,OAAO;EACxC,MAAM,cAAc,0BAA0B,SAAS,WAAW,cAAc,OAAO,SAAS;AAEhG,SAAO,IAAI,SAAS,WAAW;GAC7B,QAAQ;GACR,SAAS;IACP,gBAAgB,yBAAyB,OAAO,SAAS;IACzD,uBAAuB;IACvB,kBAAkB,OAAO,SAAS,KAAK;IACvC,iBAAiB;IACjB,0BAA0B;IAC1B,mBAAmB;IACnB,mBAAmB;IACpB;GACF,CAAC;WACM;AACR,sBAAoB,OAAO,MAAM"}

package/dist/src/gateway/hono/routes/site-shares.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"site-shares.js","names":[],"sources":["../../../../../src/gateway/hono/routes/site-shares.ts"],"sourcesContent":["import type { Hono } from 'hono';\nimport { createHash } from 'node:crypto';\n\nimport { extractToken } from '../../auth.js';\nimport { getSiteShareStore } from '../../../share/site-share-store.js';\nimport { resolveSiteShareConfig } from '../../../share/site-share-config.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\nimport { resolveGatewayEffectiveHost } from '../../../config/gateway-bind.js';\n\nfunction hashGatewayToken(token: string): string {\n  return createHash('sha256').update(token, 'utf8').digest('hex').slice(0, 12);\n}\n\nfunction buildShareUrls(\n  record: import('../../../share/site-share-types.js').SiteShareRecord,\n  publicHostSuffix: string,\n  gatewayHost: string,\n  gatewayPort: number,\n): { publicUrl: string; subpathUrl: string } {\n  const label = record.subdomain ?? record.token;\n  const publicUrl = `https://${label}.${publicHostSuffix}/`;\n  const subpathUrl = `http://${gatewayHost}:${gatewayPort}/site/${record.token}/`;\n  return { publicUrl, subpathUrl };\n}\n\nexport function registerSiteShareRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  const { service } = deps;\n  const store = getSiteShareStore(resolveSiteShareConfig(service));\n\n  async function resolveWorkspaceRoot(\n    sessionKey: string | undefined,\n    agentId: string | undefined,\n  ): Promise<string | null> {\n    const cfg = service.currentConfig;\n    if (sessionKey) {\n      try {\n        return await service.sessions.getEffectiveWorkspacePath(sessionKey);\n      } catch {\n        /* fall through */\n      }\n    }\n    const { getWorkspacePath } = await import('../../../config/workspace-path-helpers.js');\n    const { resolveAgentWorkspaceDir, normalizeAgentId, resolveDefaultAgentId } = await import(\n      '../../../agent/agent-scope.js'\n    );\n    if (agentId) {\n      const normalized = normalizeAgentId(agentId);\n      return resolveAgentWorkspaceDir(cfg, normalized);\n    }\n    const root = getWorkspacePath(cfg);\n    if (root) return root;\n    const defaultId = resolveDefaultAgentId(cfg);\n    return resolveAgentWorkspaceDir(cfg, defaultId);\n  }\n\n  authenticated.post('/api/site-shares', async (c) => {\n    const gatewayToken = extractToken({ authorization: c.req.header('authorization') ?? undefined });\n    if (!gatewayToken) return c.json({ ok: false, error: { message: 'Token required' } }, 401);\n\n    let body: Record<string, unknown>;\n    try {\n      body = (await c.req.json()) as Record<string, unknown>;\n    } catch {\n      return c.json({ ok: false, error: { message: 'Invalid JSON' } }, 400);\n    }\n\n    const kind = body.kind === 'static' || body.kind === 'proxy' ? body.kind : null;\n    if (!kind) return c.json({ ok: false, error: { message: \"kind must be 'static' or 'proxy'\" } }, 400);\n\n    const sessionKey = typeof body.sessionKey === 'string' ? body.sessionKey.trim() : undefined;\n    const agentId = typeof body.agentId === 'string' ? body.agentId.trim() : undefined;\n    const path = typeof body.path === 'string' ? body.path.trim() : undefined;\n    const upstreamUrl = typeof body.upstreamUrl === 'string' ? body.upstreamUrl.trim() : undefined;\n    const ttlMs = typeof body.ttlMs === 'number' ? body.ttlMs : undefined;\n    const description = typeof body.description === 'string' ? body.description.trim() || undefined : undefined;\n    const subdomain = typeof body.subdomain === 'string' ? body.subdomain.trim() || undefined : undefined;\n    const maxRequests =\n      body.maxRequests === null\n        ? null\n        : typeof body.maxRequests === 'number'\n        ? body.maxRequests\n        : undefined;\n    const spaFallback = typeof body.spaFallback === 'boolean' ? body.spaFallback : undefined;\n    const rewriteMode =\n      body.rewriteMode === 'none' || body.rewriteMode === 'html-only' || body.rewriteMode === 'html-css'\n        ? body.rewriteMode\n        : undefined;\n    const forwardWebSocket = typeof body.forwardWebSocket === 'boolean' ? body.forwardWebSocket : undefined;\n\n    let workspaceRoot: string | null = null;\n    if (kind === 'static') {\n      workspaceRoot = await resolveWorkspaceRoot(sessionKey, agentId);\n      if (!workspaceRoot) {\n        return c.json({ ok: false, error: { message: 'Workspace not configured' } }, 400);\n      }\n    }\n\n    try {\n      store.updateConfig(resolveSiteShareConfig(service));\n      const record = await store.create({\n        kind,\n        path,\n        upstreamUrl,\n        ttlMs,\n        description,\n        subdomain,\n        maxRequests,\n        spaFallback,\n        rewriteMode,\n        forwardWebSocket,\n        sessionKey,\n        agentId,\n        workspaceRoot,\n        gatewayTokenHash: hashGatewayToken(gatewayToken),\n      });\n\n      const cfg = store.getConfig();\n      const gw = service.currentConfig.gateway;\n      const urls = buildShareUrls(record, cfg.publicHostSuffix, resolveGatewayEffectiveHost(service.currentConfig), gw.port ?? 18790);\n\n      return c.json(\n        {\n          ok: true,\n          payload: {\n            id: record.id,\n            token: record.token,\n            subdomain: record.subdomain,\n            kind: record.source.kind,\n            createdAt: record.createdAt,\n            expiresAt: record.expiresAt,\n            description: record.description ?? null,\n            maxRequests: record.maxRequests,\n            publicUrl: urls.publicUrl,\n            subpathUrl: urls.subpathUrl,\n          },\n        },\n        201,\n      );\n    } catch (err) {\n      const message = err instanceof Error ? err.message : String(err);\n      return c.json({ ok: false, error: { message } }, 400);\n    }\n  });\n\n  authenticated.get('/api/site-shares', (c) => {\n    store.updateConfig(resolveSiteShareConfig(service));\n    const cfg = store.getConfig();\n    const gw = service.currentConfig.gateway;\n    const gatewayHost = resolveGatewayEffectiveHost(service.currentConfig);\n    const gatewayPort = gw.port ?? 18790;\n    const items = store.getAllShares().map((r) => {\n      const urls = buildShareUrls(r, cfg.publicHostSuffix, gatewayHost, gatewayPort);\n      const expired = Date.now() >= new Date(r.expiresAt).getTime();\n      return {\n        id: r.id,\n        token: r.token,\n        subdomain: r.subdomain,\n        kind: r.source.kind,\n        createdAt: r.createdAt,\n        expiresAt: r.expiresAt,\n        revoked: r.revoked,\n        expired,\n        description: r.description ?? null,\n        requestCount: r.requestCount,\n        uniqueClientCount: r.uniqueClientCount,\n        maxRequests: r.maxRequests,\n        source: r.source,\n        publicUrl: urls.publicUrl,\n        subpathUrl: urls.subpathUrl,\n      };\n    });\n    return c.json({ ok: true, payload: { shares: items } });\n  });\n\n  authenticated.get('/api/site-shares/:id', (c) => {\n    const id = c.req.param('id');\n    const record = store.getById(id);\n    if (!record) return c.json({ ok: false, error: { message: 'Not found' } }, 404);\n    const cfg = store.getConfig();\n    const gw = service.currentConfig.gateway;\n    const urls = buildShareUrls(record, cfg.publicHostSuffix, resolveGatewayEffectiveHost(service.currentConfig), gw.port ?? 18790);\n    return c.json({\n      ok: true,\n      payload: {\n        ...record,\n        ...urls,\n        expired: Date.now() >= new Date(record.expiresAt).getTime(),\n      },\n    });\n  });\n\n  authenticated.delete('/api/site-shares/:id', (c) => {\n    const id = c.req.param('id');\n    const ok = store.revoke(id);\n    if (!ok) return c.json({ ok: false, error: { message: 'Not found' } }, 404);\n    return c.json({ ok: true });\n  });\n\n  authenticated.delete('/api/site-shares', async (c) => {\n    let body: Record<string, unknown> = {};\n    try {\n      body = (await c.req.json()) as Record<string, unknown>;\n    } catch {\n      /* empty */\n    }\n    if (body.expired === true) {\n      const count = store.revokeExpired();\n      return c.json({ ok: true, payload: { revokedCount: count } });\n    }\n    const ids = Array.isArray(body.ids) ? (body.ids as string[]).filter((x) => typeof x === 'string') : [];\n    if (ids.length === 0) {\n      return c.json({ ok: false, error: { message: 'Provide ids array or expired: true' } }, 400);\n    }\n    const count = store.revokeMany(ids);\n    return c.json({ ok: true, payload: { revokedCount: count } });\n  });\n\n  authenticated.patch('/api/site-shares/:id', async (c) => {\n    const id = c.req.param('id');\n    let body: Record<string, unknown>;\n    try {\n      body = (await c.req.json()) as Record<string, unknown>;\n    } catch {\n      return c.json({ ok: false, error: { message: 'Invalid JSON' } }, 400);\n    }\n    const patch: { extendTtlMs?: number; maxRequests?: number | null } = {};\n    if (typeof body.extendTtlMs === 'number') patch.extendTtlMs = body.extendTtlMs;\n    if (body.maxRequests === null || typeof body.maxRequests === 'number') {\n      patch.maxRequests = body.maxRequests as number | null;\n    }\n    const updated = store.update(id, patch);\n    if (!updated) return c.json({ ok: false, error: { message: 'Not found' } }, 404);\n    return c.json({ ok: true, payload: { id: updated.id, expiresAt: updated.expiresAt, maxRequests: updated.maxRequests } });\n  });\n}\n"],"mappings":";;;;;;AASA,SAAS,iBAAiB,OAAuB;AAC/C,QAAO,WAAW,SAAS,CAAC,OAAO,OAAO,OAAO,CAAC,OAAO,MAAM,CAAC,MAAM,GAAG,GAAG;;AAG9E,SAAS,eACP,QACA,kBACA,aACA,aAC2C;AAI3C,QAAO;EAAE,WAAA,WAHK,OAAO,aAAa,OAAO,MACN,GAAG,iBAAiB;EAEnC,YAAA,UADS,YAAY,GAAG,YAAY,QAAQ,OAAO,MAAM;EAC7C;;AAGlC,SAAgB,wBAAwB,eAAqB,MAAoC;CAC/F,MAAM,EAAE,YAAY;CACpB,MAAM,QAAQ,kBAAkB,uBAAuB,QAAQ,CAAC;CAEhE,eAAe,qBACb,YACA,SACwB;EACxB,MAAM,MAAM,QAAQ;AACpB,MAAI,WACF,KAAI;AACF,UAAO,MAAM,QAAQ,SAAS,0BAA0B,WAAW;UAC7D;EAIV,MAAM,EAAE,qBAAqB,MAAM,OAAO;EAC1C,MAAM,EAAE,0BAA0B,kBAAkB,0BAA0B,MAAM,OAClF;AAEF,MAAI,QAEF,QAAO,yBAAyB,KADb,iBAAiB,QACW,CAAC;EAElD,MAAM,OAAO,iBAAiB,IAAI;AAClC,MAAI,KAAM,QAAO;AAEjB,SAAO,yBAAyB,KADd,sBAAsB,IACM,CAAC;;AAGjD,eAAc,KAAK,oBAAoB,OAAO,MAAM;EAClD,MAAM,eAAe,aAAa,EAAE,eAAe,EAAE,IAAI,OAAO,gBAAgB,IAAI,KAAA,GAAW,CAAC;AAChG,MAAI,CAAC,aAAc,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,kBAAkB;GAAE,EAAE,IAAI;EAE1F,IAAI;AACJ,MAAI;AACF,UAAQ,MAAM,EAAE,IAAI,MAAM;UACpB;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS,gBAAgB;IAAE,EAAE,IAAI;;EAGvE,MAAM,OAAO,KAAK,SAAS,YAAY,KAAK,SAAS,UAAU,KAAK,OAAO;AAC3E,MAAI,CAAC,KAAM,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,oCAAoC;GAAE,EAAE,IAAI;EAEpG,MAAM,aAAa,OAAO,KAAK,eAAe,WAAW,KAAK,WAAW,MAAM,GAAG,KAAA;EAClF,MAAM,UAAU,OAAO,KAAK,YAAY,WAAW,KAAK,QAAQ,MAAM,GAAG,KAAA;EACzE,MAAM,OAAO,OAAO,KAAK,SAAS,WAAW,KAAK,KAAK,MAAM,GAAG,KAAA;EAChE,MAAM,cAAc,OAAO,KAAK,gBAAgB,WAAW,KAAK,YAAY,MAAM,GAAG,KAAA;EACrF,MAAM,QAAQ,OAAO,KAAK,UAAU,WAAW,KAAK,QAAQ,KAAA;EAC5D,MAAM,cAAc,OAAO,KAAK,gBAAgB,WAAW,KAAK,YAAY,MAAM,IAAI,KAAA,IAAY,KAAA;EAClG,MAAM,YAAY,OAAO,KAAK,cAAc,WAAW,KAAK,UAAU,MAAM,IAAI,KAAA,IAAY,KAAA;EAC5F,MAAM,cACJ,KAAK,gBAAgB,OACjB,OACA,OAAO,KAAK,gBAAgB,WAC5B,KAAK,cACL,KAAA;EACN,MAAM,cAAc,OAAO,KAAK,gBAAgB,YAAY,KAAK,cAAc,KAAA;EAC/E,MAAM,cACJ,KAAK,gBAAgB,UAAU,KAAK,gBAAgB,eAAe,KAAK,gBAAgB,aACpF,KAAK,cACL,KAAA;EACN,MAAM,mBAAmB,OAAO,KAAK,qBAAqB,YAAY,KAAK,mBAAmB,KAAA;EAE9F,IAAI,gBAA+B;AACnC,MAAI,SAAS,UAAU;AACrB,mBAAgB,MAAM,qBAAqB,YAAY,QAAQ;AAC/D,OAAI,CAAC,cACH,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS,4BAA4B;IAAE,EAAE,IAAI;;AAIrF,MAAI;AACF,SAAM,aAAa,uBAAuB,QAAQ,CAAC;GACnD,MAAM,SAAS,MAAM,MAAM,OAAO;IAChC;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA,kBAAkB,iBAAiB,aAAa;IACjD,CAAC;GAEF,MAAM,MAAM,MAAM,WAAW;GAC7B,MAAM,KAAK,QAAQ,cAAc;GACjC,MAAM,OAAO,eAAe,QAAQ,IAAI,kBAAkB,4BAA4B,QAAQ,cAAc,EAAE,GAAG,QAAQ,MAAM;AAE/H,UAAO,EAAE,KACP;IACE,IAAI;IACJ,SAAS;KACP,IAAI,OAAO;KACX,OAAO,OAAO;KACd,WAAW,OAAO;KAClB,MAAM,OAAO,OAAO;KACpB,WAAW,OAAO;KAClB,WAAW,OAAO;KAClB,aAAa,OAAO,eAAe;KACnC,aAAa,OAAO;KACpB,WAAW,KAAK;KAChB,YAAY,KAAK;KAClB;IACF,EACD,IACD;WACM,KAAK;GACZ,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAChE,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS;IAAE,EAAE,IAAI;;GAEvD;AAEF,eAAc,IAAI,qBAAqB,MAAM;AAC3C,QAAM,aAAa,uBAAuB,QAAQ,CAAC;EACnD,MAAM,MAAM,MAAM,WAAW;EAC7B,MAAM,KAAK,QAAQ,cAAc;EACjC,MAAM,cAAc,4BAA4B,QAAQ,cAAc;EACtE,MAAM,cAAc,GAAG,QAAQ;EAC/B,MAAM,QAAQ,MAAM,cAAc,CAAC,KAAK,MAAM;GAC5C,MAAM,OAAO,eAAe,GAAG,IAAI,kBAAkB,aAAa,YAAY;GAC9E,MAAM,UAAU,KAAK,KAAK,IAAI,IAAI,KAAK,EAAE,UAAU,CAAC,SAAS;AAC7D,UAAO;IACL,IAAI,EAAE;IACN,OAAO,EAAE;IACT,WAAW,EAAE;IACb,MAAM,EAAE,OAAO;IACf,WAAW,EAAE;IACb,WAAW,EAAE;IACb,SAAS,EAAE;IACX;IACA,aAAa,EAAE,eAAe;IAC9B,cAAc,EAAE;IAChB,mBAAmB,EAAE;IACrB,aAAa,EAAE;IACf,QAAQ,EAAE;IACV,WAAW,KAAK;IAChB,YAAY,KAAK;IAClB;IACD;AACF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,QAAQ,OAAO;GAAE,CAAC;GACvD;AAEF,eAAc,IAAI,yBAAyB,MAAM;EAC/C,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK;EAC5B,MAAM,SAAS,MAAM,QAAQ,GAAG;AAChC,MAAI,CAAC,OAAQ,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,aAAa;GAAE,EAAE,IAAI;EAC/E,MAAM,MAAM,MAAM,WAAW;EAC7B,MAAM,KAAK,QAAQ,cAAc;EACjC,MAAM,OAAO,eAAe,QAAQ,IAAI,kBAAkB,4BAA4B,QAAQ,cAAc,EAAE,GAAG,QAAQ,MAAM;AAC/H,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,GAAG;IACH,GAAG;IACH,SAAS,KAAK,KAAK,IAAI,IAAI,KAAK,OAAO,UAAU,CAAC,SAAS;IAC5D;GACF,CAAC;GACF;AAEF,eAAc,OAAO,yBAAyB,MAAM;EAClD,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK;AAE5B,MAAI,CADO,MAAM,OAAO,GACjB,CAAE,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,aAAa;GAAE,EAAE,IAAI;AAC3E,SAAO,EAAE,KAAK,EAAE,IAAI,MAAM,CAAC;GAC3B;AAEF,eAAc,OAAO,oBAAoB,OAAO,MAAM;EACpD,IAAI,OAAgC,EAAE;AACtC,MAAI;AACF,UAAQ,MAAM,EAAE,IAAI,MAAM;UACpB;AAGR,MAAI,KAAK,YAAY,MAAM;GACzB,MAAM,QAAQ,MAAM,eAAe;AACnC,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,cAAc,OAAO;IAAE,CAAC;;EAE/D,MAAM,MAAM,MAAM,QAAQ,KAAK,IAAI,GAAI,KAAK,IAAiB,QAAQ,MAAM,OAAO,MAAM,SAAS,GAAG,EAAE;AACtG,MAAI,IAAI,WAAW,EACjB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,sCAAsC;GAAE,EAAE,IAAI;EAE7F,MAAM,QAAQ,MAAM,WAAW,IAAI;AACnC,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,cAAc,OAAO;GAAE,CAAC;GAC7D;AAEF,eAAc,MAAM,wBAAwB,OAAO,MAAM;EACvD,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK;EAC5B,IAAI;AACJ,MAAI;AACF,UAAQ,MAAM,EAAE,IAAI,MAAM;UACpB;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS,gBAAgB;IAAE,EAAE,IAAI;;EAEvE,MAAM,QAA+D,EAAE;AACvE,MAAI,OAAO,KAAK,gBAAgB,SAAU,OAAM,cAAc,KAAK;AACnE,MAAI,KAAK,gBAAgB,QAAQ,OAAO,KAAK,gBAAgB,SAC3D,OAAM,cAAc,KAAK;EAE3B,MAAM,UAAU,MAAM,OAAO,IAAI,MAAM;AACvC,MAAI,CAAC,QAAS,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,aAAa;GAAE,EAAE,IAAI;AAChF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;IAAE,IAAI,QAAQ;IAAI,WAAW,QAAQ;IAAW,aAAa,QAAQ;IAAa;GAAE,CAAC;GACxH"}

package/dist/src/gateway/hono/routes/status.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"status.js","names":[],"sources":["../../../../../src/gateway/hono/routes/status.ts"],"sourcesContent":["import type { Context } from 'hono';\nimport type { Hono } from 'hono';\n\nimport type { Config } from '../../../config/schema.js';\nimport { isSTTAvailable } from '../../../voice/stt/index.js';\nimport { mergeSttConfigFromAppConfig } from '../../../channels/attachments/voice-stt-webchat.js';\nimport { getDefaultModelSync, resolveModel } from '../../../providers/index.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\n\nfunction isRefineAvailable(config: Config | undefined): boolean {\n  if (!config) return false;\n  for (const candidate of [\n    process.env.XOPC_VOICE_REFINE_MODEL?.trim(),\n    'openai/gpt-5.6-luna',\n    'google/gemini-3.5-flash',\n  ]) {\n    if (!candidate) continue;\n    try {\n      resolveModel(candidate);\n      return true;\n    } catch { /* next */ }\n  }\n  try {\n    resolveModel(getDefaultModelSync(config));\n    return true;\n  } catch {\n    return false;\n  }\n}\n\nfunction buildStatusPayload(service: AuthenticatedRouteDeps['service']) {\n  const health = service.getHealth();\n  const rows = service.getChannelsStatus();\n  const channels: Record<string, { status: string }> = {};\n  for (const row of rows) {\n    const status = !row.enabled ? 'disabled' : row.connected ? 'connected' : 'disconnected';\n    channels[row.name] = { status };\n  }\n\n  const config = service.currentConfig as Config | undefined;\n  const sttConfig = config\n    ? mergeSttConfigFromAppConfig(config.tools?.media?.audio, config.tools?.media)\n    : undefined;\n\n  return {\n    status: health.status,\n    version: health.version,\n    channels,\n    uptime: health.uptime,\n    voice: {\n      sttAvailable: sttConfig ? isSTTAvailable(sttConfig) : false,\n      sttEnabled: sttConfig?.enabled === true,\n      sttProvider: sttConfig?.provider ?? null,\n      localModelId:\n        sttConfig?.provider === 'xopc-local' &&\n        typeof sttConfig.providers?.['xopc-local']?.model === 'string'\n          ? sttConfig.providers['xopc-local'].model\n          : null,\n      refineAvailable: isRefineAvailable(config),\n    },\n  };\n}\n\nexport function registerStatusRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  const { service, strictRateLimitMiddleware } = deps;\n\n  const handler = (c: Context) => c.json(buildStatusPayload(service));\n\n  authenticated.get('/status', handler);\n  authenticated.get('/api/status', handler);\n\n  /**\n   * POST /api/gateway/restart — respawn gateway process when supported (foreground `xopc gateway`).\n   */\n  authenticated.post('/api/gateway/restart', strictRateLimitMiddleware, (c) => {\n    const result = service.triggerGatewayProcessRestart();\n    if (!result.ok) {\n      return c.json({ ok: false, error: result.mode, message: result.message ?? 'Restart failed' }, 400);\n    }\n    return c.json({ ok: true, payload: { mode: result.mode } });\n  });\n}\n"],"mappings":";;;;;gBAMgF;AAGhF,SAAS,kBAAkB,QAAqC;AAC9D,KAAI,CAAC,OAAQ,QAAO;AACpB,MAAK,MAAM,aAAa;EACtB,QAAQ,IAAI,yBAAyB,MAAM;EAC3C;EACA;EACD,EAAE;AACD,MAAI,CAAC,UAAW;AAChB,MAAI;AACF,gBAAa,UAAU;AACvB,UAAO;UACD;;AAEV,KAAI;AACF,eAAa,oBAAoB,OAAO,CAAC;AACzC,SAAO;SACD;AACN,SAAO;;;AAIX,SAAS,mBAAmB,SAA4C;CACtE,MAAM,SAAS,QAAQ,WAAW;CAClC,MAAM,OAAO,QAAQ,mBAAmB;CACxC,MAAM,WAA+C,EAAE;AACvD,MAAK,MAAM,OAAO,MAAM;EACtB,MAAM,SAAS,CAAC,IAAI,UAAU,aAAa,IAAI,YAAY,cAAc;AACzE,WAAS,IAAI,QAAQ,EAAE,QAAQ;;CAGjC,MAAM,SAAS,QAAQ;CACvB,MAAM,YAAY,SACd,4BAA4B,OAAO,OAAO,OAAO,OAAO,OAAO,OAAO,MAAM,GAC5E,KAAA;AAEJ,QAAO;EACL,QAAQ,OAAO;EACf,SAAS,OAAO;EAChB;EACA,QAAQ,OAAO;EACf,OAAO;GACL,cAAc,YAAY,eAAe,UAAU,GAAG;GACtD,YAAY,WAAW,YAAY;GACnC,aAAa,WAAW,YAAY;GACpC,cACE,WAAW,aAAa,gBACxB,OAAO,UAAU,YAAY,eAAe,UAAU,WAClD,UAAU,UAAU,cAAc,QAClC;GACN,iBAAiB,kBAAkB,OAAO;GAC3C;EACF;;AAGH,SAAgB,qBAAqB,eAAqB,MAAoC;CAC5F,MAAM,EAAE,SAAS,8BAA8B;CAE/C,MAAM,WAAW,MAAe,EAAE,KAAK,mBAAmB,QAAQ,CAAC;AAEnE,eAAc,IAAI,WAAW,QAAQ;AACrC,eAAc,IAAI,eAAe,QAAQ;;;;AAKzC,eAAc,KAAK,wBAAwB,4BAA4B,MAAM;EAC3E,MAAM,SAAS,QAAQ,8BAA8B;AACrD,MAAI,CAAC,OAAO,GACV,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,OAAO;GAAM,SAAS,OAAO,WAAW;GAAkB,EAAE,IAAI;AAEpG,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,MAAM,OAAO,MAAM;GAAE,CAAC;GAC3D"}

package/dist/src/gateway/hono/routes/tui.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"tui.js","names":[],"sources":["../../../../../src/gateway/hono/routes/tui.ts"],"sourcesContent":["import type { Hono } from 'hono';\n\nimport type { Config } from '../../../config/schema.js';\nimport { collectTuiStartupResources } from '../../../tui/tui-startup-resources.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\n\nexport function registerTuiRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  authenticated.get('/api/tui/startup-resources', (c) => {\n    const sessionKey = c.req.query('sessionKey')?.trim() || undefined;\n    const payload = collectTuiStartupResources(deps.service.currentConfig as Config, sessionKey);\n    return c.json({ ok: true, payload });\n  });\n}\n"],"mappings":";;AAMA,SAAgB,kBAAkB,eAAqB,MAAoC;AACzF,eAAc,IAAI,+BAA+B,MAAM;EACrD,MAAM,aAAa,EAAE,IAAI,MAAM,aAAa,EAAE,MAAM,IAAI,KAAA;EACxD,MAAM,UAAU,2BAA2B,KAAK,QAAQ,eAAyB,WAAW;AAC5F,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM;GAAS,CAAC;GACpC"}

package/dist/src/gateway/hono/routes/tunnel.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"tunnel.js","names":[],"sources":["../../../../../src/gateway/hono/routes/tunnel.ts"],"sourcesContent":["import type { Hono, MiddlewareHandler } from 'hono';\n\nimport type { Config } from '../../../config/schema.js';\nimport { resolveGatewayEffectiveHost } from '../../../config/gateway-bind.js';\nimport { extractToken } from '../../auth.js';\nimport {\n  assertTunnelMayStart,\n  getTunnelConsentState,\n  TUNNEL_CONSENT_REQUIRED_CODE,\n  TunnelConsentError,\n} from '../../../tunnel/consent.js';\nimport { hashGatewayToken } from '../../../tunnel/tunnel-service.js';\nimport { configureTunnelFromGatewayConfig } from '../../../tunnel/gateway-lifecycle.js';\nimport {\n  getTunnelRegistrationSecretMeta,\n  readTunnelRegistrationSecretFromConfigOnly,\n  resolveTunnelBrokerUrl,\n} from '../../../tunnel/env.js';\nimport { getTunnelService } from '../../../tunnel/index.js';\nimport { createPairingSecret, exchangePairingSecretOnce, getCachedPairingExchange } from '../../../tunnel/pairing.js';\nimport { buildMobilePairContext } from '../../../tunnel/pair-context.js';\nimport { applyLanPairingGatewayPatch } from '../../../tunnel/enable-lan-pairing.js';\nimport {\n  buildMobileConnectUrlOrder,\n  resolveMobilePairLanUrl,\n  validateMobilePairBaseUrl,\n} from '../../../tunnel/pair-url.js';\nimport { consumePairingExchangeFailLimit } from '../../../tunnel/pairing-rate-limit.js';\nimport { loadTunnelState } from '../../../tunnel/tunnel-state.js';\nimport { logTunnelAudit } from '../../../tunnel/tunnel-audit.js';\nimport { resolveReverseProxyPublicUrl } from '../../public-url.js';\nimport { validatePublicUrl } from '../../../config/public-url.js';\nimport {\n  applyTunnelConsentToConfig,\n  setTunnelEnabledInConfig,\n} from '../../../tunnel/tunnel-config.js';\nimport { consumeTunnelMutationLimit } from '../../../tunnel/tunnel-rate-limit.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\nimport type { GatewayService } from '../../service.js';\nimport { getClientIpFromHeaders } from '../../security/loopback.js';\n\nasync function configureTunnelFromService(\n  deps: AuthenticatedRouteDeps,\n  opts?: { force?: boolean },\n): Promise<void> {\n  await configureTunnelFromGatewayConfig(deps.service.currentConfig, opts);\n}\n\nfunction enrichTunnelStatus(config: Config, status: ReturnType<ReturnType<typeof getTunnelService>['getStatus']>) {\n  const consent = getTunnelConsentState(config);\n  const brokerUrl = resolveTunnelBrokerUrl(config.tunnel?.brokerUrl);\n  const registrationSecret = getTunnelRegistrationSecretMeta(config, process.env, brokerUrl);\n  return {\n    ...status,\n    consentRequired: consent.consentRequired,\n    consent: {\n      currentVersion: consent.currentVersion,\n      acceptedVersion: consent.acceptedVersion,\n      acceptedAt: consent.acceptedAt,\n      valid: consent.valid,\n    },\n    canAutoStart: consent.canAutoStart,\n    registrationSecret,\n  };\n}\n\nfunction requireGatewayToken(c: { req: { header: (name: string) => string | undefined } }): string | null {\n  return (\n    extractToken({\n      authorization: c.req.header('authorization') ?? undefined,\n    }) ?? null\n  );\n}\n\nfunction createTunnelMutationRateLimitMiddleware(): MiddlewareHandler {\n  return async (c, next) => {\n    const token = requireGatewayToken(c);\n    if (!token) {\n      return c.json({ error: 'Gateway token required' }, 401);\n    }\n    const result = consumeTunnelMutationLimit(token);\n    if (!result.allowed) {\n      c.header('Retry-After', String(Math.ceil(result.retryAfterMs / 1000)));\n      return c.json(\n        {\n          error: 'Too many tunnel operations. Try again later.',\n          code: 'TUNNEL_RATE_LIMITED',\n          retryAfterMs: result.retryAfterMs,\n        },\n        429,\n      );\n    }\n    await next();\n  };\n}\n\nexport function registerTunnelPublicRoutes(app: Hono, service: GatewayService): void {\n  app.get('/api/tunnel/pair/ping', async (c) => {\n    const config = service.currentConfig as Config;\n    const tunnel = getTunnelService();\n    const status = tunnel.getStatus();\n    const context = buildMobilePairContext({\n      config,\n      tunnelPublicUrl: status.publicUrl,\n      tunnelConnected: status.state === 'connected',\n      reverseProxyPublicUrl: resolveReverseProxyPublicUrl(config),\n    });\n    return c.json({\n      ok: true,\n      service: 'xopc-gateway',\n      mobilePairing: true,\n      port: context.port,\n      bindMode: context.bindMode,\n      listenHost: context.listenHost,\n      pairingReady: context.pairingReady,\n      blockReason: context.blockReason ?? null,\n      tunnelConnected: status.state === 'connected',\n      reverseProxyConfigured: Boolean(resolveReverseProxyPublicUrl(config)),\n      connectUrls: context.connectUrls,\n    });\n  });\n\n  app.post('/api/tunnel/pair/validate-url', async (c) => {\n    let body: { baseUrl?: unknown };\n    try {\n      body = (await c.req.json()) as { baseUrl?: unknown };\n    } catch {\n      return c.json({ error: 'Invalid JSON body' }, 400);\n    }\n    const baseUrl = typeof body.baseUrl === 'string' ? body.baseUrl : '';\n    const result = validateMobilePairBaseUrl(baseUrl);\n    if (result.ok === false) {\n      return c.json({\n        ok: false,\n        code: result.code,\n        message: result.message,\n      });\n    }\n    return c.json({\n      ok: true,\n      url: result.url,\n      loopback: false,\n      probePath: '/api/tunnel/pair/ping',\n    });\n  });\n\n  app.post('/api/tunnel/exchange-token', async (c) => {\n    const clientIp =\n      getClientIpFromHeaders({\n        get: (name: string) => c.req.header(name) ?? undefined,\n      }) ?? 'unknown';\n\n    let body: { pairingSecret?: unknown };\n    try {\n      body = (await c.req.json()) as { pairingSecret?: unknown };\n    } catch {\n      return c.json({ error: 'Invalid JSON body' }, 400);\n    }\n\n    const pairingSecret = typeof body.pairingSecret === 'string' ? body.pairingSecret.trim() : '';\n    if (!pairingSecret) {\n      return c.json({ error: 'pairingSecret required' }, 400);\n    }\n\n    const cached = getCachedPairingExchange(pairingSecret);\n    if (cached) {\n      logTunnelAudit(\n        'tunnel.exchange_token',\n        { ok: true, clientIp, phase: 'pairing_exchange', replay: true },\n        'Pairing secret replayed (duplicate mobile exchange)',\n      );\n      return c.json(cached);\n    }\n\n    const token = service.getAuthToken();\n    if (!token) {\n      return c.json({ error: 'Gateway token not configured' }, 500);\n    }\n\n    const persisted = loadTunnelState();\n    const config = service.currentConfig as Config;\n    const tunnelUrl = persisted?.publicUrl?.trim() || null;\n    const reverseProxyUrl = resolveReverseProxyPublicUrl(config);\n    const lanUrl = resolveMobilePairLanUrl(config);\n    const connectUrls = buildMobileConnectUrlOrder({\n      reverseProxyUrl,\n      baseUrl: reverseProxyUrl ?? tunnelUrl,\n      lanUrl,\n      tunnelUrl,\n    });\n    // Mobile prefers HTTPS user-deployed URL over FRP broker when both exist.\n    const advertisedBaseUrl = reverseProxyUrl ?? tunnelUrl;\n\n    const payload = await exchangePairingSecretOnce(pairingSecret, () => ({\n      token,\n      baseUrl: advertisedBaseUrl,\n      lanUrl,\n      connectUrls,\n    }));\n\n    if (!payload) {\n      const limited = consumePairingExchangeFailLimit(clientIp);\n      if (!limited.allowed) {\n        c.header('Retry-After', String(Math.ceil(limited.retryAfterMs / 1000)));\n      }\n      logTunnelAudit(\n        'tunnel.exchange_token',\n        { ok: false, clientIp, phase: 'pairing_exchange' },\n        'Pairing exchange denied: invalid or expired secret',\n      );\n      return c.json({ error: 'Invalid or expired pairing secret', code: 'PAIRING_INVALID' }, 401);\n    }\n\n    logTunnelAudit(\n      'tunnel.exchange_token',\n      { ok: true, clientIp, subdomain: persisted?.subdomain ?? null, phase: 'pairing_exchange' },\n      'Pairing secret exchanged for gateway token',\n    );\n    return c.json(payload);\n  });\n}\n\nexport function registerTunnelRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  const { strictRateLimitMiddleware } = deps;\n  const tunnel = getTunnelService();\n  const tunnelMutationLimit = createTunnelMutationRateLimitMiddleware();\n\n  authenticated.get('/api/tunnel/pair/context', async (c) => {\n    await configureTunnelFromService(deps);\n    const config = deps.service.currentConfig as Config;\n    const status = tunnel.getStatus();\n    const context = buildMobilePairContext({\n      config,\n      tunnelPublicUrl: status.publicUrl,\n      tunnelConnected: status.state === 'connected',\n      reverseProxyPublicUrl: resolveReverseProxyPublicUrl(config),\n    });\n    return c.json(context);\n  });\n\n  authenticated.post('/api/tunnel/pair/enable-lan', tunnelMutationLimit, async (c) => {\n    const token = requireGatewayToken(c);\n    if (!token) return c.json({ error: 'Gateway token required' }, 401);\n\n    const config = deps.service.currentConfig as Config;\n    const patchResult = applyLanPairingGatewayPatch(config);\n    if (patchResult.ok === false) {\n      return c.json({ ok: false, error: { message: patchResult.message, code: 'LAN_PAIRING_CONFIG' } }, 400);\n    }\n\n    if (patchResult.changed) {\n      const saveResult = await deps.service.saveConfig(config);\n      if (!saveResult.saved) {\n        return c.json(\n          { ok: false, error: { message: saveResult.error ?? 'Failed to save config', code: 'SAVE_FAILED' } },\n          500,\n        );\n      }\n      logTunnelAudit(\n        'tunnel.enable_lan_pairing',\n        { gatewayTokenHash: hashGatewayToken(token).slice(0, 12) },\n        'Gateway bind switched to LAN for mobile pairing',\n      );\n    }\n\n    const status = tunnel.getStatus();\n    let context = buildMobilePairContext({\n      config: deps.service.currentConfig as Config,\n      tunnelPublicUrl: status.publicUrl,\n      tunnelConnected: status.state === 'connected',\n      reverseProxyPublicUrl: resolveReverseProxyPublicUrl(deps.service.currentConfig as Config),\n    });\n\n    if (patchResult.changed) {\n      context = {\n        ...context,\n        pairingReady: false,\n        blockReason: 'GATEWAY_LOOPBACK_ONLY',\n      };\n    }\n\n    return c.json({\n      ok: true,\n      requiresRestart: patchResult.changed,\n      context,\n    });\n  });\n\n  authenticated.post('/api/tunnel/pair', tunnelMutationLimit, async (c) => {\n    await configureTunnelFromService(deps);\n    const token = requireGatewayToken(c);\n    if (!token) return c.json({ error: 'Gateway token required' }, 401);\n\n    const { secret, expiresAt } = createPairingSecret();\n    logTunnelAudit(\n      'tunnel.pair',\n      {\n        expiresAt: expiresAt.toISOString(),\n        gatewayTokenHash: hashGatewayToken(token).slice(0, 12),\n      },\n      'Mobile pairing session created',\n    );\n    return c.json({ pairingSecret: secret, expiresAt: expiresAt.toISOString() });\n  });\n\n  /**\n   * Probe a candidate reverse-proxy URL before persisting it. The check round-trips\n   * a `GET /api/tunnel/pair/ping` and validates the response identifies as\n   * `service: 'xopc-gateway'`. Surface-area errors are mapped to stable codes so\n   * the UI can render targeted hints (TLS / DNS / wrong service / blocked path).\n   */\n  authenticated.post('/api/tunnel/pair/probe-public', tunnelMutationLimit, async (c) => {\n    const token = requireGatewayToken(c);\n    if (!token) return c.json({ error: 'Gateway token required' }, 401);\n\n    let body: { url?: unknown };\n    try {\n      body = (await c.req.json()) as { url?: unknown };\n    } catch {\n      return c.json({ ok: false, code: 'INVALID_JSON', message: 'Invalid JSON body' }, 400);\n    }\n    const raw = typeof body.url === 'string' ? body.url : '';\n    const validation = validatePublicUrl(raw);\n    if (validation.ok === false) {\n      return c.json({ ok: false, code: validation.code, message: validation.message });\n    }\n\n    const pingUrl = `${validation.url}/api/tunnel/pair/ping`;\n    const startedAt = Date.now();\n    let response: Response;\n    try {\n      response = await fetch(pingUrl, {\n        method: 'GET',\n        headers: { Accept: 'application/json' },\n        signal: AbortSignal.timeout(5000),\n      });\n    } catch (error) {\n      const message = error instanceof Error ? error.message : String(error);\n      // Node's fetch surfaces TLS errors as TypeError with cause; map heuristically.\n      const lower = message.toLowerCase();\n      let code: 'TIMEOUT' | 'TLS_INVALID' | 'DNS_OR_CONN_REFUSED' | 'NETWORK_ERROR' = 'NETWORK_ERROR';\n      if (lower.includes('timeout') || lower.includes('aborted')) code = 'TIMEOUT';\n      else if (lower.includes('certificate') || lower.includes('cert') || lower.includes('tls') || lower.includes('ssl')) {\n        code = 'TLS_INVALID';\n      } else if (lower.includes('enotfound') || lower.includes('econnrefused') || lower.includes('eai_again')) {\n        code = 'DNS_OR_CONN_REFUSED';\n      }\n      return c.json({ ok: false, code, message });\n    }\n\n    if (response.status === 401 || response.status === 403) {\n      return c.json({ ok: false, code: 'AUTH_BLOCKED', message: `Reverse proxy returned ${response.status}` });\n    }\n    if (!response.ok) {\n      return c.json({ ok: false, code: 'HTTP_ERROR', message: `HTTP ${response.status}` });\n    }\n    let parsed: { service?: unknown; mobilePairing?: unknown } | null = null;\n    try {\n      parsed = (await response.json()) as { service?: unknown; mobilePairing?: unknown };\n    } catch {\n      return c.json({ ok: false, code: 'NOT_XOPC_GATEWAY', message: 'Response was not JSON' });\n    }\n    if (!parsed || parsed.service !== 'xopc-gateway') {\n      return c.json({\n        ok: false,\n        code: 'NOT_XOPC_GATEWAY',\n        message: 'Endpoint did not identify as an xopc gateway',\n      });\n    }\n    return c.json({\n      ok: true,\n      url: validation.url,\n      latencyMs: Date.now() - startedAt,\n      mobilePairing: parsed.mobilePairing === true,\n    });\n  });\n\n  authenticated.get('/api/tunnel/status', async (c) => {\n    await configureTunnelFromService(deps);\n    const config = deps.service.currentConfig as Config;\n    return c.json(enrichTunnelStatus(config, tunnel.getStatus()));\n  });\n\n  authenticated.post('/api/tunnel/consent', tunnelMutationLimit, async (c) => {\n    const token = requireGatewayToken(c);\n    if (!token) return c.json({ error: 'Gateway token required' }, 401);\n\n    const config = deps.service.currentConfig as Config;\n    applyTunnelConsentToConfig(config);\n    const result = await deps.service.saveConfig(config);\n    if (!result.saved) {\n      return c.json({ ok: false, error: result.error ?? 'Failed to save config' }, 500);\n    }\n    const consent = getTunnelConsentState(config);\n    logTunnelAudit(\n      'tunnel.consent',\n      {\n        consentVersion: consent.currentVersion,\n        gatewayTokenHash: hashGatewayToken(token).slice(0, 12),\n      },\n      'Remote access security consent recorded',\n    );\n    return c.json({\n      ok: true,\n      consent: {\n        currentVersion: consent.currentVersion,\n        acceptedVersion: consent.acceptedVersion,\n        acceptedAt: consent.acceptedAt,\n        valid: consent.valid,\n      },\n    });\n  });\n\n  authenticated.post('/api/tunnel/start', tunnelMutationLimit, async (c) => {\n    await configureTunnelFromService(deps, { force: true });\n    const config = deps.service.currentConfig as Config;\n    const token = requireGatewayToken(c);\n    if (!token) return c.json({ error: 'Gateway token required' }, 401);\n\n    try {\n      assertTunnelMayStart(config);\n    } catch (err) {\n      if (err instanceof TunnelConsentError) {\n        logTunnelAudit(\n          'tunnel.start_denied',\n          { reason: TUNNEL_CONSENT_REQUIRED_CODE, gatewayTokenHash: hashGatewayToken(token).slice(0, 12) },\n          'Tunnel start denied: consent required',\n        );\n        return c.json({ error: err.message, code: TUNNEL_CONSENT_REQUIRED_CODE }, 403);\n      }\n      throw err;\n    }\n\n    const gateway = config.gateway;\n    const port = gateway.port ?? 18790;\n    try {\n      const qr = await tunnel.start(port, token);\n      setTunnelEnabledInConfig(config, true);\n      await deps.service.saveConfig(config);\n      const status = tunnel.getStatus();\n      return c.json({\n        publicUrl: qr.publicUrl,\n        subdomain: status.subdomain,\n        qrPayload: qr.qrPayload,\n        lanUrl: qr.lanUrl,\n      });\n    } catch (err) {\n      const message = err instanceof Error ? err.message : String(err);\n      return c.json({ error: message }, 500);\n    }\n  });\n\n  authenticated.post('/api/tunnel/stop', tunnelMutationLimit, async (c) => {\n    await configureTunnelFromService(deps);\n    const config = deps.service.currentConfig as Config;\n    let release = false;\n    try {\n      const body = (await c.req.json().catch(() => ({}))) as { release?: unknown };\n      release = body.release === true;\n    } catch {\n      release = false;\n    }\n    const { released } = await tunnel.stop({ release });\n    setTunnelEnabledInConfig(config, false);\n    await deps.service.saveConfig(config);\n    return c.json({ ok: true, released });\n  });\n\n  authenticated.get('/api/tunnel/qr', async (c) => {\n    await configureTunnelFromService(deps);\n    const gateway = deps.service.currentConfig.gateway;\n    const port = gateway.port ?? 18790;\n    const host = resolveGatewayEffectiveHost(deps.service.currentConfig);\n    const token = requireGatewayToken(c);\n    if (!token) return c.json({ error: 'Gateway token required' }, 401);\n    const qr = await tunnel.buildQr(port, host);\n    return c.json(qr);\n  });\n\n  authenticated.get('/api/tunnel/transport-status', async (c) => {\n    await configureTunnelFromService(deps);\n    return c.json({\n      transport: { tls: 'broker_terminated' as const },\n    });\n  });\n\n  /**\n   * POST /api/tunnel/reveal-registration-secret — plaintext only when stored in config file.\n   */\n  authenticated.post('/api/tunnel/reveal-registration-secret', strictRateLimitMiddleware, async (c) => {\n    const config = deps.service.currentConfig as Config;\n    const registrationSecret = readTunnelRegistrationSecretFromConfigOnly(config);\n    return c.json({\n      ok: true,\n      payload: {\n        registrationSecret,\n        source: registrationSecret ? ('config' as const) : ('none' as const),\n      },\n    });\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;iBA+BkE;AAUlE,eAAe,2BACb,MACA,MACe;AACf,OAAM,iCAAiC,KAAK,QAAQ,eAAe,KAAK;;AAG1E,SAAS,mBAAmB,QAAgB,QAAsE;CAChH,MAAM,UAAU,sBAAsB,OAAO;CAC7C,MAAM,YAAY,uBAAuB,OAAO,QAAQ,UAAU;CAClE,MAAM,qBAAqB,gCAAgC,QAAQ,QAAQ,KAAK,UAAU;AAC1F,QAAO;EACL,GAAG;EACH,iBAAiB,QAAQ;EACzB,SAAS;GACP,gBAAgB,QAAQ;GACxB,iBAAiB,QAAQ;GACzB,YAAY,QAAQ;GACpB,OAAO,QAAQ;GAChB;EACD,cAAc,QAAQ;EACtB;EACD;;AAGH,SAAS,oBAAoB,GAA6E;AACxG,QACE,aAAa,EACX,eAAe,EAAE,IAAI,OAAO,gBAAgB,IAAI,KAAA,GACjD,CAAC,IAAI;;AAIV,SAAS,0CAA6D;AACpE,QAAO,OAAO,GAAG,SAAS;EACxB,MAAM,QAAQ,oBAAoB,EAAE;AACpC,MAAI,CAAC,MACH,QAAO,EAAE,KAAK,EAAE,OAAO,0BAA0B,EAAE,IAAI;EAEzD,MAAM,SAAS,2BAA2B,MAAM;AAChD,MAAI,CAAC,OAAO,SAAS;AACnB,KAAE,OAAO,eAAe,OAAO,KAAK,KAAK,OAAO,eAAe,IAAK,CAAC,CAAC;AACtE,UAAO,EAAE,KACP;IACE,OAAO;IACP,MAAM;IACN,cAAc,OAAO;IACtB,EACD,IACD;;AAEH,QAAM,MAAM;;;AAIhB,SAAgB,2BAA2B,KAAW,SAA+B;AACnF,KAAI,IAAI,yBAAyB,OAAO,MAAM;EAC5C,MAAM,SAAS,QAAQ;EAEvB,MAAM,SADS,kBACM,CAAC,WAAW;EACjC,MAAM,UAAU,uBAAuB;GACrC;GACA,iBAAiB,OAAO;GACxB,iBAAiB,OAAO,UAAU;GAClC,uBAAuB,6BAA6B,OAAO;GAC5D,CAAC;AACF,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;GACT,eAAe;GACf,MAAM,QAAQ;GACd,UAAU,QAAQ;GAClB,YAAY,QAAQ;GACpB,cAAc,QAAQ;GACtB,aAAa,QAAQ,eAAe;GACpC,iBAAiB,OAAO,UAAU;GAClC,wBAAwB,QAAQ,6BAA6B,OAAO,CAAC;GACrE,aAAa,QAAQ;GACtB,CAAC;GACF;AAEF,KAAI,KAAK,iCAAiC,OAAO,MAAM;EACrD,IAAI;AACJ,MAAI;AACF,UAAQ,MAAM,EAAE,IAAI,MAAM;UACpB;AACN,UAAO,EAAE,KAAK,EAAE,OAAO,qBAAqB,EAAE,IAAI;;EAGpD,MAAM,SAAS,0BADC,OAAO,KAAK,YAAY,WAAW,KAAK,UAAU,GACjB;AACjD,MAAI,OAAO,OAAO,MAChB,QAAO,EAAE,KAAK;GACZ,IAAI;GACJ,MAAM,OAAO;GACb,SAAS,OAAO;GACjB,CAAC;AAEJ,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,KAAK,OAAO;GACZ,UAAU;GACV,WAAW;GACZ,CAAC;GACF;AAEF,KAAI,KAAK,8BAA8B,OAAO,MAAM;EAClD,MAAM,WACJ,uBAAuB,EACrB,MAAM,SAAiB,EAAE,IAAI,OAAO,KAAK,IAAI,KAAA,GAC9C,CAAC,IAAI;EAER,IAAI;AACJ,MAAI;AACF,UAAQ,MAAM,EAAE,IAAI,MAAM;UACpB;AACN,UAAO,EAAE,KAAK,EAAE,OAAO,qBAAqB,EAAE,IAAI;;EAGpD,MAAM,gBAAgB,OAAO,KAAK,kBAAkB,WAAW,KAAK,cAAc,MAAM,GAAG;AAC3F,MAAI,CAAC,cACH,QAAO,EAAE,KAAK,EAAE,OAAO,0BAA0B,EAAE,IAAI;EAGzD,MAAM,SAAS,yBAAyB,cAAc;AACtD,MAAI,QAAQ;AACV,kBACE,yBACA;IAAE,IAAI;IAAM;IAAU,OAAO;IAAoB,QAAQ;IAAM,EAC/D,sDACD;AACD,UAAO,EAAE,KAAK,OAAO;;EAGvB,MAAM,QAAQ,QAAQ,cAAc;AACpC,MAAI,CAAC,MACH,QAAO,EAAE,KAAK,EAAE,OAAO,gCAAgC,EAAE,IAAI;EAG/D,MAAM,YAAY,iBAAiB;EACnC,MAAM,SAAS,QAAQ;EACvB,MAAM,YAAY,WAAW,WAAW,MAAM,IAAI;EAClD,MAAM,kBAAkB,6BAA6B,OAAO;EAC5D,MAAM,SAAS,wBAAwB,OAAO;EAC9C,MAAM,cAAc,2BAA2B;GAC7C;GACA,SAAS,mBAAmB;GAC5B;GACA;GACD,CAAC;EAEF,MAAM,oBAAoB,mBAAmB;EAE7C,MAAM,UAAU,MAAM,0BAA0B,sBAAsB;GACpE;GACA,SAAS;GACT;GACA;GACD,EAAE;AAEH,MAAI,CAAC,SAAS;GACZ,MAAM,UAAU,gCAAgC,SAAS;AACzD,OAAI,CAAC,QAAQ,QACX,GAAE,OAAO,eAAe,OAAO,KAAK,KAAK,QAAQ,eAAe,IAAK,CAAC,CAAC;AAEzE,kBACE,yBACA;IAAE,IAAI;IAAO;IAAU,OAAO;IAAoB,EAClD,qDACD;AACD,UAAO,EAAE,KAAK;IAAE,OAAO;IAAqC,MAAM;IAAmB,EAAE,IAAI;;AAG7F,iBACE,yBACA;GAAE,IAAI;GAAM;GAAU,WAAW,WAAW,aAAa;GAAM,OAAO;GAAoB,EAC1F,6CACD;AACD,SAAO,EAAE,KAAK,QAAQ;GACtB;;AAGJ,SAAgB,qBAAqB,eAAqB,MAAoC;CAC5F,MAAM,EAAE,8BAA8B;CACtC,MAAM,SAAS,kBAAkB;CACjC,MAAM,sBAAsB,yCAAyC;AAErE,eAAc,IAAI,4BAA4B,OAAO,MAAM;AACzD,QAAM,2BAA2B,KAAK;EACtC,MAAM,SAAS,KAAK,QAAQ;EAC5B,MAAM,SAAS,OAAO,WAAW;EACjC,MAAM,UAAU,uBAAuB;GACrC;GACA,iBAAiB,OAAO;GACxB,iBAAiB,OAAO,UAAU;GAClC,uBAAuB,6BAA6B,OAAO;GAC5D,CAAC;AACF,SAAO,EAAE,KAAK,QAAQ;GACtB;AAEF,eAAc,KAAK,+BAA+B,qBAAqB,OAAO,MAAM;EAClF,MAAM,QAAQ,oBAAoB,EAAE;AACpC,MAAI,CAAC,MAAO,QAAO,EAAE,KAAK,EAAE,OAAO,0BAA0B,EAAE,IAAI;EAEnE,MAAM,SAAS,KAAK,QAAQ;EAC5B,MAAM,cAAc,4BAA4B,OAAO;AACvD,MAAI,YAAY,OAAO,MACrB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;IAAE,SAAS,YAAY;IAAS,MAAM;IAAsB;GAAE,EAAE,IAAI;AAGxG,MAAI,YAAY,SAAS;GACvB,MAAM,aAAa,MAAM,KAAK,QAAQ,WAAW,OAAO;AACxD,OAAI,CAAC,WAAW,MACd,QAAO,EAAE,KACP;IAAE,IAAI;IAAO,OAAO;KAAE,SAAS,WAAW,SAAS;KAAyB,MAAM;KAAe;IAAE,EACnG,IACD;AAEH,kBACE,6BACA,EAAE,kBAAkB,iBAAiB,MAAM,CAAC,MAAM,GAAG,GAAG,EAAE,EAC1D,kDACD;;EAGH,MAAM,SAAS,OAAO,WAAW;EACjC,IAAI,UAAU,uBAAuB;GACnC,QAAQ,KAAK,QAAQ;GACrB,iBAAiB,OAAO;GACxB,iBAAiB,OAAO,UAAU;GAClC,uBAAuB,6BAA6B,KAAK,QAAQ,cAAwB;GAC1F,CAAC;AAEF,MAAI,YAAY,QACd,WAAU;GACR,GAAG;GACH,cAAc;GACd,aAAa;GACd;AAGH,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,iBAAiB,YAAY;GAC7B;GACD,CAAC;GACF;AAEF,eAAc,KAAK,oBAAoB,qBAAqB,OAAO,MAAM;AACvE,QAAM,2BAA2B,KAAK;EACtC,MAAM,QAAQ,oBAAoB,EAAE;AACpC,MAAI,CAAC,MAAO,QAAO,EAAE,KAAK,EAAE,OAAO,0BAA0B,EAAE,IAAI;EAEnE,MAAM,EAAE,QAAQ,cAAc,qBAAqB;AACnD,iBACE,eACA;GACE,WAAW,UAAU,aAAa;GAClC,kBAAkB,iBAAiB,MAAM,CAAC,MAAM,GAAG,GAAG;GACvD,EACD,iCACD;AACD,SAAO,EAAE,KAAK;GAAE,eAAe;GAAQ,WAAW,UAAU,aAAa;GAAE,CAAC;GAC5E;;;;;;;AAQF,eAAc,KAAK,iCAAiC,qBAAqB,OAAO,MAAM;AAEpF,MAAI,CADU,oBAAoB,EACxB,CAAE,QAAO,EAAE,KAAK,EAAE,OAAO,0BAA0B,EAAE,IAAI;EAEnE,IAAI;AACJ,MAAI;AACF,UAAQ,MAAM,EAAE,IAAI,MAAM;UACpB;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,MAAM;IAAgB,SAAS;IAAqB,EAAE,IAAI;;EAGvF,MAAM,aAAa,kBADP,OAAO,KAAK,QAAQ,WAAW,KAAK,MAAM,GACb;AACzC,MAAI,WAAW,OAAO,MACpB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,MAAM,WAAW;GAAM,SAAS,WAAW;GAAS,CAAC;EAGlF,MAAM,UAAU,GAAG,WAAW,IAAI;EAClC,MAAM,YAAY,KAAK,KAAK;EAC5B,IAAI;AACJ,MAAI;AACF,cAAW,MAAM,MAAM,SAAS;IAC9B,QAAQ;IACR,SAAS,EAAE,QAAQ,oBAAoB;IACvC,QAAQ,YAAY,QAAQ,IAAK;IAClC,CAAC;WACK,OAAO;GACd,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;GAEtE,MAAM,QAAQ,QAAQ,aAAa;GACnC,IAAI,OAA4E;AAChF,OAAI,MAAM,SAAS,UAAU,IAAI,MAAM,SAAS,UAAU,CAAE,QAAO;YAC1D,MAAM,SAAS,cAAc,IAAI,MAAM,SAAS,OAAO,IAAI,MAAM,SAAS,MAAM,IAAI,MAAM,SAAS,MAAM,CAChH,QAAO;YACE,MAAM,SAAS,YAAY,IAAI,MAAM,SAAS,eAAe,IAAI,MAAM,SAAS,YAAY,CACrG,QAAO;AAET,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO;IAAM;IAAS,CAAC;;AAG7C,MAAI,SAAS,WAAW,OAAO,SAAS,WAAW,IACjD,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,MAAM;GAAgB,SAAS,0BAA0B,SAAS;GAAU,CAAC;AAE1G,MAAI,CAAC,SAAS,GACZ,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,MAAM;GAAc,SAAS,QAAQ,SAAS;GAAU,CAAC;EAEtF,IAAI,SAAgE;AACpE,MAAI;AACF,YAAU,MAAM,SAAS,MAAM;UACzB;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,MAAM;IAAoB,SAAS;IAAyB,CAAC;;AAE1F,MAAI,CAAC,UAAU,OAAO,YAAY,eAChC,QAAO,EAAE,KAAK;GACZ,IAAI;GACJ,MAAM;GACN,SAAS;GACV,CAAC;AAEJ,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,KAAK,WAAW;GAChB,WAAW,KAAK,KAAK,GAAG;GACxB,eAAe,OAAO,kBAAkB;GACzC,CAAC;GACF;AAEF,eAAc,IAAI,sBAAsB,OAAO,MAAM;AACnD,QAAM,2BAA2B,KAAK;EACtC,MAAM,SAAS,KAAK,QAAQ;AAC5B,SAAO,EAAE,KAAK,mBAAmB,QAAQ,OAAO,WAAW,CAAC,CAAC;GAC7D;AAEF,eAAc,KAAK,uBAAuB,qBAAqB,OAAO,MAAM;EAC1E,MAAM,QAAQ,oBAAoB,EAAE;AACpC,MAAI,CAAC,MAAO,QAAO,EAAE,KAAK,EAAE,OAAO,0BAA0B,EAAE,IAAI;EAEnE,MAAM,SAAS,KAAK,QAAQ;AAC5B,6BAA2B,OAAO;EAClC,MAAM,SAAS,MAAM,KAAK,QAAQ,WAAW,OAAO;AACpD,MAAI,CAAC,OAAO,MACV,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,OAAO,SAAS;GAAyB,EAAE,IAAI;EAEnF,MAAM,UAAU,sBAAsB,OAAO;AAC7C,iBACE,kBACA;GACE,gBAAgB,QAAQ;GACxB,kBAAkB,iBAAiB,MAAM,CAAC,MAAM,GAAG,GAAG;GACvD,EACD,0CACD;AACD,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,gBAAgB,QAAQ;IACxB,iBAAiB,QAAQ;IACzB,YAAY,QAAQ;IACpB,OAAO,QAAQ;IAChB;GACF,CAAC;GACF;AAEF,eAAc,KAAK,qBAAqB,qBAAqB,OAAO,MAAM;AACxE,QAAM,2BAA2B,MAAM,EAAE,OAAO,MAAM,CAAC;EACvD,MAAM,SAAS,KAAK,QAAQ;EAC5B,MAAM,QAAQ,oBAAoB,EAAE;AACpC,MAAI,CAAC,MAAO,QAAO,EAAE,KAAK,EAAE,OAAO,0BAA0B,EAAE,IAAI;AAEnE,MAAI;AACF,wBAAqB,OAAO;WACrB,KAAK;AACZ,OAAI,eAAe,oBAAoB;AACrC,mBACE,uBACA;KAAE,QAAQ;KAA8B,kBAAkB,iBAAiB,MAAM,CAAC,MAAM,GAAG,GAAG;KAAE,EAChG,wCACD;AACD,WAAO,EAAE,KAAK;KAAE,OAAO,IAAI;KAAS,MAAM;KAA8B,EAAE,IAAI;;AAEhF,SAAM;;EAIR,MAAM,OADU,OAAO,QACF,QAAQ;AAC7B,MAAI;GACF,MAAM,KAAK,MAAM,OAAO,MAAM,MAAM,MAAM;AAC1C,4BAAyB,QAAQ,KAAK;AACtC,SAAM,KAAK,QAAQ,WAAW,OAAO;GACrC,MAAM,SAAS,OAAO,WAAW;AACjC,UAAO,EAAE,KAAK;IACZ,WAAW,GAAG;IACd,WAAW,OAAO;IAClB,WAAW,GAAG;IACd,QAAQ,GAAG;IACZ,CAAC;WACK,KAAK;GACZ,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAChE,UAAO,EAAE,KAAK,EAAE,OAAO,SAAS,EAAE,IAAI;;GAExC;AAEF,eAAc,KAAK,oBAAoB,qBAAqB,OAAO,MAAM;AACvE,QAAM,2BAA2B,KAAK;EACtC,MAAM,SAAS,KAAK,QAAQ;EAC5B,IAAI,UAAU;AACd,MAAI;AAEF,cAAU,MADU,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE,EACnC,YAAY;UACrB;AACN,aAAU;;EAEZ,MAAM,EAAE,aAAa,MAAM,OAAO,KAAK,EAAE,SAAS,CAAC;AACnD,2BAAyB,QAAQ,MAAM;AACvC,QAAM,KAAK,QAAQ,WAAW,OAAO;AACrC,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM;GAAU,CAAC;GACrC;AAEF,eAAc,IAAI,kBAAkB,OAAO,MAAM;AAC/C,QAAM,2BAA2B,KAAK;EAEtC,MAAM,OADU,KAAK,QAAQ,cAAc,QACtB,QAAQ;EAC7B,MAAM,OAAO,4BAA4B,KAAK,QAAQ,cAAc;AAEpE,MAAI,CADU,oBAAoB,EACxB,CAAE,QAAO,EAAE,KAAK,EAAE,OAAO,0BAA0B,EAAE,IAAI;EACnE,MAAM,KAAK,MAAM,OAAO,QAAQ,MAAM,KAAK;AAC3C,SAAO,EAAE,KAAK,GAAG;GACjB;AAEF,eAAc,IAAI,gCAAgC,OAAO,MAAM;AAC7D,QAAM,2BAA2B,KAAK;AACtC,SAAO,EAAE,KAAK,EACZ,WAAW,EAAE,KAAK,qBAA8B,EACjD,CAAC;GACF;;;;AAKF,eAAc,KAAK,0CAA0C,2BAA2B,OAAO,MAAM;EACnG,MAAM,SAAS,KAAK,QAAQ;EAC5B,MAAM,qBAAqB,2CAA2C,OAAO;AAC7E,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP;IACA,QAAQ,qBAAsB,WAAsB;IACrD;GACF,CAAC;GACF"}

package/dist/src/gateway/hono/routes/update.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"update.js","names":[],"sources":["../../../../../src/gateway/hono/routes/update.ts"],"sourcesContent":["import type { Hono } from 'hono';\nimport { streamSSE } from 'hono/streaming';\n\nimport { loadConfig } from '../../../config/index.js';\nimport { acquireUpdateLock } from '../../../infra/update-lock.js';\nimport {\n  DEFAULT_PACKAGE_CHANNEL,\n  normalizeUpdateChannel,\n  type UpdateChannel,\n} from '../../../infra/update-channels.js';\nimport {\n  formatUpdateApiResult,\n  runGatewayUpdateWithPostSteps,\n  type UpdateRunResult,\n} from '../../../infra/update-runner.js';\nimport { getUpdateAvailable, runGatewayUpdateCheck } from '../../../infra/update-startup.js';\nimport { PACKAGE_VERSION } from '../../../package-version.js';\nimport { createGatewayRouteLogger } from '../lib/route-logger.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\n\nconst log = createGatewayRouteLogger('Update');\n\nfunction mapUpdateFailure(result: UpdateRunResult, channel: UpdateChannel) {\n  const apiResult = formatUpdateApiResult(result, channel);\n  const message =\n    typeof apiResult.message === 'string'\n      ? apiResult.message\n      : result.reason ?? 'Update failed';\n  return { apiResult, message };\n}\n\nexport function registerUpdateRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  const { strictRateLimitMiddleware, service } = deps;\n\n  authenticated.get('/api/update/status', (c) => {\n    const update = getUpdateAvailable();\n    return c.json({\n      ok: true,\n      payload: {\n        currentVersion: PACKAGE_VERSION,\n        updateAvailable: update !== null,\n        latestVersion: update?.latestVersion ?? null,\n        channel: update?.channel ?? null,\n      },\n    });\n  });\n\n  authenticated.post('/api/update/check', strictRateLimitMiddleware, async (c) => {\n    const config = loadConfig(service.getHealth().configPath);\n    await runGatewayUpdateCheck({\n      config,\n      force: true,\n      onUpdateAvailableChange: (update) => {\n        service.emit('update.available', update);\n      },\n    });\n    const result = getUpdateAvailable();\n    return c.json({\n      ok: true,\n      payload: {\n        currentVersion: PACKAGE_VERSION,\n        updateAvailable: result !== null,\n        latestVersion: result?.latestVersion ?? null,\n        channel: result?.channel ?? null,\n      },\n    });\n  });\n\n  authenticated.post('/api/update/run', strictRateLimitMiddleware, async (c) => {\n    const config = loadConfig(service.getHealth().configPath);\n    const channel = normalizeUpdateChannel(config.update?.channel) ?? DEFAULT_PACKAGE_CHANNEL;\n\n    const lock = await acquireUpdateLock('gateway');\n    if (!lock) {\n      return c.json(\n        { ok: false, error: 'busy', message: 'Another update is already in progress.' },\n        409,\n      );\n    }\n\n    try {\n      log.info({ channel }, 'Gateway: starting in-process update');\n      const result = await runGatewayUpdateWithPostSteps({\n        channel,\n        cwd: process.cwd(),\n        argv1: process.argv[1],\n        triggerInProcessRestart: () => service.triggerGatewayProcessRestart(),\n      });\n      const apiResult = formatUpdateApiResult(result, channel);\n      if (result.status === 'error') {\n        const { message } = mapUpdateFailure(result, channel);\n        log.warn({ channel, reason: result.reason }, 'Gateway: update failed');\n        return c.json({\n          ok: false,\n          error: 'update-failed',\n          message,\n          result: apiResult,\n        });\n      }\n      log.info({ channel, mode: result.mode }, 'Gateway: update finished');\n      return c.json({ ok: true, result: apiResult });\n    } catch (err) {\n      log.error({ err, channel }, 'Gateway: update threw');\n      return c.json(\n        {\n          ok: false,\n          error: 'internal',\n          message: err instanceof Error ? err.message : String(err),\n        },\n        500,\n      );\n    } finally {\n      await lock.release();\n    }\n  });\n\n  authenticated.post('/api/update/run/stream', strictRateLimitMiddleware, async (c) => {\n    const config = loadConfig(service.getHealth().configPath);\n    const channel = normalizeUpdateChannel(config.update?.channel) ?? DEFAULT_PACKAGE_CHANNEL;\n\n    return streamSSE(c, async (stream) => {\n      const lock = await acquireUpdateLock('gateway');\n      if (!lock) {\n        await stream.writeSSE({\n          event: 'result',\n          data: JSON.stringify({\n            ok: false,\n            error: 'busy',\n            message: 'Another update is already in progress.',\n          }),\n        });\n        return;\n      }\n\n      try {\n        log.info({ channel }, 'Gateway: starting streamed in-process update');\n        const result = await runGatewayUpdateWithPostSteps({\n          channel,\n          cwd: process.cwd(),\n          argv1: process.argv[1],\n          triggerInProcessRestart: () => service.triggerGatewayProcessRestart(),\n          progress: {\n            onStepStart: async (step) => {\n              await stream.writeSSE({\n                event: 'progress',\n                data: JSON.stringify({\n                  line: `[${step.index + 1}/${step.total}] ${step.name}: ${step.command}`,\n                  source: 'stdout',\n                }),\n              });\n            },\n            onStepComplete: async (step) => {\n              if (step.stderrTail) {\n                await stream.writeSSE({\n                  event: 'progress',\n                  data: JSON.stringify({ line: step.stderrTail, source: 'stderr' }),\n                });\n              }\n            },\n          },\n        });\n\n        const apiResult = formatUpdateApiResult(result, channel);\n        if (result.status === 'error') {\n          const { message } = mapUpdateFailure(result, channel);\n          await stream.writeSSE({\n            event: 'result',\n            data: JSON.stringify({\n              ok: false,\n              error: 'update-failed',\n              message,\n              result: apiResult,\n              reason: result.reason,\n            }),\n          });\n          return;\n        }\n\n        await stream.writeSSE({\n          event: 'result',\n          data: JSON.stringify({ ok: true, result: apiResult }),\n        });\n      } catch (err) {\n        log.error({ err, channel }, 'Gateway: streamed update threw');\n        await stream.writeSSE({\n          event: 'result',\n          data: JSON.stringify({\n            ok: false,\n            error: 'internal',\n            message: err instanceof Error ? err.message : String(err),\n          }),\n        });\n      } finally {\n        await lock.release();\n      }\n    });\n  });\n}\n"],"mappings":";;;;;;;;;;sBAgB8D;AAI9D,MAAM,MAAM,yBAAyB,SAAS;AAE9C,SAAS,iBAAiB,QAAyB,SAAwB;CACzE,MAAM,YAAY,sBAAsB,QAAQ,QAAQ;AAKxD,QAAO;EAAE;EAAW,SAHlB,OAAO,UAAU,YAAY,WACzB,UAAU,UACV,OAAO,UAAU;EACM;;AAG/B,SAAgB,qBAAqB,eAAqB,MAAoC;CAC5F,MAAM,EAAE,2BAA2B,YAAY;AAE/C,eAAc,IAAI,uBAAuB,MAAM;EAC7C,MAAM,SAAS,oBAAoB;AACnC,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,gBAAgB;IAChB,iBAAiB,WAAW;IAC5B,eAAe,QAAQ,iBAAiB;IACxC,SAAS,QAAQ,WAAW;IAC7B;GACF,CAAC;GACF;AAEF,eAAc,KAAK,qBAAqB,2BAA2B,OAAO,MAAM;AAE9E,QAAM,sBAAsB;GAC1B,QAFa,WAAW,QAAQ,WAAW,CAAC,WAEtC;GACN,OAAO;GACP,0BAA0B,WAAW;AACnC,YAAQ,KAAK,oBAAoB,OAAO;;GAE3C,CAAC;EACF,MAAM,SAAS,oBAAoB;AACnC,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,gBAAgB;IAChB,iBAAiB,WAAW;IAC5B,eAAe,QAAQ,iBAAiB;IACxC,SAAS,QAAQ,WAAW;IAC7B;GACF,CAAC;GACF;AAEF,eAAc,KAAK,mBAAmB,2BAA2B,OAAO,MAAM;EAE5E,MAAM,UAAU,uBADD,WAAW,QAAQ,WAAW,CAAC,WACD,CAAC,QAAQ,QAAQ,IAAA;EAE9D,MAAM,OAAO,MAAM,kBAAkB,UAAU;AAC/C,MAAI,CAAC,KACH,QAAO,EAAE,KACP;GAAE,IAAI;GAAO,OAAO;GAAQ,SAAS;GAA0C,EAC/E,IACD;AAGH,MAAI;AACF,OAAI,KAAK,EAAE,SAAS,EAAE,sCAAsC;GAC5D,MAAM,SAAS,MAAM,8BAA8B;IACjD;IACA,KAAK,QAAQ,KAAK;IAClB,OAAO,QAAQ,KAAK;IACpB,+BAA+B,QAAQ,8BAA8B;IACtE,CAAC;GACF,MAAM,YAAY,sBAAsB,QAAQ,QAAQ;AACxD,OAAI,OAAO,WAAW,SAAS;IAC7B,MAAM,EAAE,YAAY,iBAAiB,QAAQ,QAAQ;AACrD,QAAI,KAAK;KAAE;KAAS,QAAQ,OAAO;KAAQ,EAAE,yBAAyB;AACtE,WAAO,EAAE,KAAK;KACZ,IAAI;KACJ,OAAO;KACP;KACA,QAAQ;KACT,CAAC;;AAEJ,OAAI,KAAK;IAAE;IAAS,MAAM,OAAO;IAAM,EAAE,2BAA2B;AACpE,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,QAAQ;IAAW,CAAC;WACvC,KAAK;AACZ,OAAI,MAAM;IAAE;IAAK;IAAS,EAAE,wBAAwB;AACpD,UAAO,EAAE,KACP;IACE,IAAI;IACJ,OAAO;IACP,SAAS,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;IAC1D,EACD,IACD;YACO;AACR,SAAM,KAAK,SAAS;;GAEtB;AAEF,eAAc,KAAK,0BAA0B,2BAA2B,OAAO,MAAM;EAEnF,MAAM,UAAU,uBADD,WAAW,QAAQ,WAAW,CAAC,WACD,CAAC,QAAQ,QAAQ,IAAA;AAE9D,SAAO,UAAU,GAAG,OAAO,WAAW;GACpC,MAAM,OAAO,MAAM,kBAAkB,UAAU;AAC/C,OAAI,CAAC,MAAM;AACT,UAAM,OAAO,SAAS;KACpB,OAAO;KACP,MAAM,KAAK,UAAU;MACnB,IAAI;MACJ,OAAO;MACP,SAAS;MACV,CAAC;KACH,CAAC;AACF;;AAGF,OAAI;AACF,QAAI,KAAK,EAAE,SAAS,EAAE,+CAA+C;IACrE,MAAM,SAAS,MAAM,8BAA8B;KACjD;KACA,KAAK,QAAQ,KAAK;KAClB,OAAO,QAAQ,KAAK;KACpB,+BAA+B,QAAQ,8BAA8B;KACrE,UAAU;MACR,aAAa,OAAO,SAAS;AAC3B,aAAM,OAAO,SAAS;QACpB,OAAO;QACP,MAAM,KAAK,UAAU;SACnB,MAAM,IAAI,KAAK,QAAQ,EAAE,GAAG,KAAK,MAAM,IAAI,KAAK,KAAK,IAAI,KAAK;SAC9D,QAAQ;SACT,CAAC;QACH,CAAC;;MAEJ,gBAAgB,OAAO,SAAS;AAC9B,WAAI,KAAK,WACP,OAAM,OAAO,SAAS;QACpB,OAAO;QACP,MAAM,KAAK,UAAU;SAAE,MAAM,KAAK;SAAY,QAAQ;SAAU,CAAC;QAClE,CAAC;;MAGP;KACF,CAAC;IAEF,MAAM,YAAY,sBAAsB,QAAQ,QAAQ;AACxD,QAAI,OAAO,WAAW,SAAS;KAC7B,MAAM,EAAE,YAAY,iBAAiB,QAAQ,QAAQ;AACrD,WAAM,OAAO,SAAS;MACpB,OAAO;MACP,MAAM,KAAK,UAAU;OACnB,IAAI;OACJ,OAAO;OACP;OACA,QAAQ;OACR,QAAQ,OAAO;OAChB,CAAC;MACH,CAAC;AACF;;AAGF,UAAM,OAAO,SAAS;KACpB,OAAO;KACP,MAAM,KAAK,UAAU;MAAE,IAAI;MAAM,QAAQ;MAAW,CAAC;KACtD,CAAC;YACK,KAAK;AACZ,QAAI,MAAM;KAAE;KAAK;KAAS,EAAE,iCAAiC;AAC7D,UAAM,OAAO,SAAS;KACpB,OAAO;KACP,MAAM,KAAK,UAAU;MACnB,IAAI;MACJ,OAAO;MACP,SAAS,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;MAC1D,CAAC;KACH,CAAC;aACM;AACR,UAAM,KAAK,SAAS;;IAEtB;GACF"}

package/dist/src/gateway/hono/routes/voice.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"voice.js","names":[],"sources":["../../../../../src/gateway/hono/routes/voice.ts"],"sourcesContent":["/**\n * Voice routes — POST /api/voice/transcriptions (multipart) and legacy\n * POST /api/voice/transcribe (JSON/base64).\n *\n * The endpoints share one execution path that:\n *   1. Runs the configured STT provider and fallback chain\n *   2. Optionally runs LLM refine on the raw transcript\n *   3. Returns { raw, refined?, language }\n *\n * LLM refinement is opt-in through `voice.input.refinement`.\n */\n\nimport type { Context, Hono } from 'hono';\nimport { type UserMessage } from '@earendil-works/pi-ai/compat';\n\nimport type { Config } from '../../../config/schema.js';\nimport { getDefaultModelSync, resolveModel } from '../../../providers/index.js';\nimport { completeWithResolvedCredentials } from '../../../providers/model-call.js';\nimport { isSTTAvailable, transcribe } from '../../../voice/stt/index.js';\nimport { isTTSAvailable, mergeTtsConfigFromAppConfig, speak } from '../../../voice/tts/index.js';\nimport { listTtsProvidersForApi } from '../../../voice/tts/list-providers.js';\nimport { listSttProvidersForApi } from '../../../voice/stt/list-providers.js';\nimport { mergeSttConfigFromAppConfig } from '../../../channels/attachments/voice-stt-webchat.js';\nimport { resolveSttProviderConfigSlice } from '../../../voice/stt/config-slice.js';\nimport { resolveTtsProviderConfigSlice } from '../../../voice/tts/config-slice.js';\nimport {\n  listLocalVoiceModelStatuses,\n  removeLocalVoiceModel,\n  startLocalVoiceModelInstall,\n} from '../../../voice/local/model-manager.js';\nimport { getLocalVoiceRuntimeClient } from '../../../voice/local/runtime-client.js';\nimport { createGatewayRouteLogger } from '../lib/route-logger.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\n\nconst log = createGatewayRouteLogger('Voice');\n\nfunction readVoiceApiKeyFromConfigFileOnly(\n  cfg: Config,\n  kind: 'stt' | 'tts',\n  providerId: string,\n): string | undefined {\n  const id = providerId.trim();\n  if (!id) return undefined;\n  const slice =\n    kind === 'stt'\n      ? resolveSttProviderConfigSlice(id, cfg.tools?.media?.audio)\n      : resolveTtsProviderConfigSlice(id, cfg.messages?.tts);\n  const key = slice.apiKey;\n  return typeof key === 'string' && key.trim() ? key.trim() : undefined;\n}\n\nconst REFINE_TIMEOUT_MS = 15_000;\nconst MAX_AUDIO_BYTES = 25 * 1024 * 1024; // 25 MB\nconst MAX_SPEECH_TEXT_LENGTH = 1_200;\n\nfunction speechMimeType(format: string): string {\n  if (format === 'opus' || format === 'ogg') return 'audio/ogg';\n  if (format === 'mp3' || format === 'mpeg') return 'audio/mpeg';\n  if (format === 'wav') return 'audio/wav';\n  return `audio/${format}`;\n}\n\nconst LIGHT_REFINE_PROMPT = `你是语音转文字后处理助手。将语音转写原文整理为高质量文本输入。\n\n规则：\n1. 修正明显的语音识别错误\n2. 添加正确的标点符号\n3. 去除口语赘词（嗯、啊、那个、就是说、然后就是）\n4. 保持原意不变，不要扩写或改变语义\n5. 如果原文已经很好，原样输出\n6. 只输出整理后的文字，不要解释`;\n\nconst PUNCTUATION_REFINE_PROMPT = `为语音转写原文补充标点和合理分段。不要删词、改写、扩写或改变语义。只输出处理后的文字。`;\n\nfunction resolveRefineModel(\n  config: Config | undefined,\n  configuredRef?: string,\n): ReturnType<typeof resolveModel> | null {\n  if (configuredRef) {\n    try {\n      return resolveModel(configuredRef);\n    } catch {\n      log.warn({ modelRef: configuredRef }, 'Configured voice refinement model is invalid');\n      return null;\n    }\n  }\n  const envRef = process.env.XOPC_VOICE_REFINE_MODEL?.trim();\n  if (envRef) {\n    try {\n      return resolveModel(envRef);\n    } catch { /* fall through */ }\n  }\n  for (const candidate of ['openai/gpt-5.6-luna', 'google/gemini-3.5-flash']) {\n    try {\n      return resolveModel(candidate);\n    } catch { /* next */ }\n  }\n  try {\n    return resolveModel(getDefaultModelSync(config));\n  } catch {\n    return null;\n  }\n}\n\nasync function refineTranscript(\n  raw: string,\n  config: Config | undefined,\n  signal?: AbortSignal,\n): Promise<string | undefined> {\n  if (!raw.trim()) return undefined;\n\n  const refinement = config?.voice?.input?.refinement;\n  const mode = refinement?.mode ?? 'off';\n  if (mode === 'off') return undefined;\n\n  const instruction =\n    mode === 'punctuation'\n      ? PUNCTUATION_REFINE_PROMPT\n      : mode === 'custom'\n        ? refinement?.customInstruction?.trim()\n        : LIGHT_REFINE_PROMPT;\n  if (!instruction) {\n    log.warn('Custom voice refinement is enabled without an instruction; returning raw only');\n    return undefined;\n  }\n\n  const model = resolveRefineModel(config, refinement?.model);\n  if (!model) {\n    log.debug('No LLM model available for voice refine; returning raw only');\n    return undefined;\n  }\n\n  try {\n    const userMsg: UserMessage = {\n      role: 'user',\n      content: `${instruction}\\n\\n原文：${raw}`,\n      timestamp: Date.now(),\n    };\n\n    const timeoutSignal =\n      typeof AbortSignal !== 'undefined' && typeof AbortSignal.timeout === 'function'\n        ? AbortSignal.timeout(REFINE_TIMEOUT_MS)\n        : undefined;\n    const mergedSignal =\n      signal && timeoutSignal && typeof AbortSignal.any === 'function'\n        ? AbortSignal.any([signal, timeoutSignal])\n        : signal ?? timeoutSignal;\n\n    const result = await completeWithResolvedCredentials(\n      model,\n      { messages: [userMsg] },\n      {\n        maxTokens: Math.min(raw.length * 3, 4096),\n        temperature: 0.2,\n        signal: mergedSignal as AbortSignal,\n      },\n    );\n\n    let out = '';\n    if (Array.isArray(result.content)) {\n      for (const c of result.content) {\n        if (c && typeof c === 'object' && (c as { type?: string }).type === 'text') {\n          out += String((c as { text?: string }).text || '');\n        }\n      }\n    }\n\n    const refined = out.trim();\n    if (!refined || refined === raw.trim()) return undefined;\n    return refined;\n  } catch (error) {\n    const msg = error instanceof Error ? error.message : String(error);\n    log.warn({ errorMessage: msg }, 'Voice refine failed; returning raw only');\n    return undefined;\n  }\n}\n\nexport function registerVoiceRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  const { service, strictRateLimitMiddleware } = deps;\n\n  authenticated.post('/api/voice/language', strictRateLimitMiddleware, async (c) => {\n    let body: { language?: unknown } = {};\n    try {\n      body = (await c.req.json()) as typeof body;\n    } catch {\n      return c.json({ ok: false, error: { message: 'Invalid JSON body' } }, 400);\n    }\n    if (body.language !== 'en' && body.language !== 'zh') {\n      return c.json({ ok: false, error: { message: 'language must be \"en\" or \"zh\"' } }, 400);\n    }\n    const payload = await service.syncVoiceLanguage(body.language);\n    if (payload.error) {\n      return c.json({ ok: false, error: { message: payload.error } }, 500);\n    }\n    return c.json({ ok: true, payload });\n  });\n\n  /**\n   * GET /api/voice/providers\n   *\n   * Lists registered SpeechProviderPlugin ids with configured state for the\n   * current gateway config (OpenClaw `tts.providers` equivalent).\n   */\n  authenticated.get('/api/voice/providers', (c) => {\n    const config = service.currentConfig as Config;\n    const payload = listTtsProvidersForApi(config);\n    return c.json({ ok: true, payload });\n  });\n\n  /**\n   * GET /api/voice/stt-providers\n   *\n   * Lists registered MediaUnderstandingProvider ids with configured state for\n   * the current gateway config (OpenClaw `tools.media.audio.providers` equivalent).\n   */\n  authenticated.get('/api/voice/stt-providers', (c) => {\n    const config = service.currentConfig as Config;\n    const payload = listSttProvidersForApi(config);\n    return c.json({ ok: true, payload });\n  });\n\n  authenticated.get('/api/voice/local/status', async (c) => {\n    const models = await listLocalVoiceModelStatuses();\n    try {\n      const runtime = await getLocalVoiceRuntimeClient().request<{\n        ok: boolean;\n        protocolVersion: number;\n        engine: string;\n      }>('health', {}, { timeoutMs: 10_000, stopOnTimeout: false });\n      return c.json({ ok: true, payload: { runtime: { ...runtime, ready: true }, models } });\n    } catch (error) {\n      const message = error instanceof Error ? error.message : String(error);\n      return c.json({\n        ok: true,\n        payload: { runtime: { ready: false, error: message }, models },\n      });\n    }\n  });\n\n  authenticated.post(\n    '/api/voice/local/models/:modelId/install',\n    strictRateLimitMiddleware,\n    (c) => {\n      try {\n        const status = startLocalVoiceModelInstall(c.req.param('modelId'));\n        return c.json({ ok: true, payload: { model: status } }, 202);\n      } catch (error) {\n        const message = error instanceof Error ? error.message : String(error);\n        return c.json({ ok: false, error: { message } }, 400);\n      }\n    },\n  );\n\n  authenticated.delete(\n    '/api/voice/local/models/:modelId',\n    strictRateLimitMiddleware,\n    async (c) => {\n      try {\n        await removeLocalVoiceModel(c.req.param('modelId'));\n        return c.json({ ok: true });\n      } catch (error) {\n        const message = error instanceof Error ? error.message : String(error);\n        return c.json({ ok: false, error: { message } }, 400);\n      }\n    },\n  );\n\n  /**\n   * POST /api/voice/reveal-api-key — return plaintext voice provider apiKey from config file only.\n   * Body: `{ kind: 'stt' | 'tts', provider: string }`\n   */\n  authenticated.post('/api/voice/reveal-api-key', strictRateLimitMiddleware, async (c) => {\n    let body: { kind?: unknown; provider?: unknown } = {};\n    try {\n      body = (await c.req.json()) as typeof body;\n    } catch {\n      return c.json({ ok: false, error: { message: 'Invalid JSON body' } }, 400);\n    }\n    const kind = body.kind === 'stt' || body.kind === 'tts' ? body.kind : null;\n    const provider = typeof body.provider === 'string' ? body.provider.trim() : '';\n    if (!kind) {\n      return c.json({ ok: false, error: { message: 'kind must be \"stt\" or \"tts\"' } }, 400);\n    }\n    if (!provider) {\n      return c.json({ ok: false, error: { message: 'provider is required' } }, 400);\n    }\n\n    const cfg = service.currentConfig as Config;\n    const apiKey = readVoiceApiKeyFromConfigFileOnly(cfg, kind, provider);\n    return c.json({\n      ok: true,\n      payload: {\n        kind,\n        provider,\n        apiKey: apiKey ?? null,\n        source: apiKey ? ('config' as const) : ('none' as const),\n      },\n    });\n  });\n\n  /** Generate one bounded read-aloud chunk as binary audio. */\n  authenticated.post('/api/voice/speech', strictRateLimitMiddleware, async (c) => {\n    let body: { text?: unknown; language?: unknown; voice?: unknown } = {};\n    try {\n      body = (await c.req.json()) as typeof body;\n    } catch {\n      return c.json({ ok: false, error: { message: 'Invalid JSON body' } }, 400);\n    }\n\n    const text = typeof body.text === 'string' ? body.text.trim() : '';\n    if (!text) {\n      return c.json({ ok: false, error: { message: 'text is required' } }, 400);\n    }\n    if (text.length > MAX_SPEECH_TEXT_LENGTH) {\n      return c.json({ ok: false, error: { message: `text exceeds ${MAX_SPEECH_TEXT_LENGTH} characters` } }, 400);\n    }\n\n    const language = typeof body.language === 'string' ? body.language.trim() : '';\n    const voice = typeof body.voice === 'string' ? body.voice.trim() : '';\n    if (language && !/^[a-z]{2,3}(?:-[A-Z]{2})?$/.test(language)) {\n      return c.json({ ok: false, error: { message: 'language must be a valid locale' } }, 400);\n    }\n    if (voice.length > 100) {\n      return c.json({ ok: false, error: { message: 'voice exceeds 100 characters' } }, 400);\n    }\n\n    const config = service.currentConfig as Config;\n    const baseTtsConfig = mergeTtsConfigFromAppConfig(config.messages?.tts);\n    const provider = baseTtsConfig.provider;\n    const languageVoice = language.startsWith('en')\n      ? 'en-US-MichelleNeural'\n      : language.startsWith('zh')\n        ? 'zh-CN-XiaoxiaoNeural'\n        : undefined;\n    const providerOverride = provider === 'edge'\n      ? {\n          ...(language ? { lang: language } : {}),\n          ...(voice || languageVoice ? { voice: voice || languageVoice } : {}),\n        }\n      : {};\n    const ttsConfig = {\n      ...baseTtsConfig,\n      enabled: true,\n      providers: {\n        ...(baseTtsConfig.providers ?? {}),\n        [provider]: {\n          ...(baseTtsConfig.providers?.[provider] ?? {}),\n          ...providerOverride,\n        },\n      },\n    };\n\n    if (!isTTSAvailable(ttsConfig)) {\n      return c.json({ ok: false, error: { message: `TTS provider \\\"${provider}\\\" is not configured.` } }, 503);\n    }\n\n    try {\n      const result = await speak(text, ttsConfig, {\n        appConfig: config,\n        parseDirectives: false,\n        signal: c.req.raw.signal,\n        tts: voice ? { voice } : undefined,\n      });\n      if (!result.audio.length) {\n        throw new Error(`TTS provider \\\"${result.provider}\\\" returned empty audio`);\n      }\n      return new Response(new Uint8Array(result.audio), {\n        headers: {\n          'Content-Type': speechMimeType(result.format),\n          'Content-Length': String(result.audio.length),\n          'Cache-Control': 'private, no-store',\n          'X-Content-Type-Options': 'nosniff',\n          'X-Voice-Provider': result.provider,\n          ...(language ? { 'X-Voice-Language': language } : {}),\n        },\n      });\n    } catch (error) {\n      const msg = error instanceof Error ? error.message : String(error);\n      if (!c.req.raw.signal.aborted) {\n        log.error({ err: error, provider, textLength: text.length }, `Voice speech generation failed: ${msg}`);\n      }\n      return c.json({ ok: false, error: { message: `Speech generation failed: ${msg}` } }, 502);\n    }\n  });\n\n  /**\n   * POST /api/voice/tts-test\n   *\n   * Body: { text: string, provider?: string, model?: string, voice?: string }\n   * Response: { ok: true, payload: { audio: string, format: string, provider: string } }\n   */\n  authenticated.post('/api/voice/tts-test', strictRateLimitMiddleware, async (c) => {\n    let body: { text?: unknown; provider?: unknown; model?: unknown; voice?: unknown; providerConfig?: unknown } = {};\n    try {\n      body = (await c.req.json()) as typeof body;\n    } catch {\n      return c.json({ ok: false, error: { message: 'Invalid JSON body' } }, 400);\n    }\n\n    const text = typeof body.text === 'string' ? body.text.trim() : '';\n    if (!text) {\n      return c.json({ ok: false, error: { message: 'text is required' } }, 400);\n    }\n    if (text.length > 1000) {\n      return c.json({ ok: false, error: { message: 'text exceeds 1000 characters' } }, 400);\n    }\n\n    const config = service.currentConfig as Config;\n    const baseTtsConfig = mergeTtsConfigFromAppConfig(config.messages?.tts);\n    const provider = typeof body.provider === 'string' && body.provider.trim() ? body.provider.trim() : baseTtsConfig.provider;\n    const providerConfig =\n      body.providerConfig && typeof body.providerConfig === 'object' && !Array.isArray(body.providerConfig)\n        ? (body.providerConfig as Record<string, unknown>)\n        : undefined;\n    const ttsConfig = {\n      ...baseTtsConfig,\n      enabled: true,\n      provider,\n      providers: {\n        ...(baseTtsConfig.providers ?? {}),\n        ...(providerConfig ? { [provider]: { ...(baseTtsConfig.providers?.[provider] ?? {}), ...providerConfig } } : {}),\n      },\n      fallback: { enabled: false, order: [provider] },\n    };\n\n    if (!isTTSAvailable(ttsConfig)) {\n      return c.json({\n        ok: false,\n        error: { message: `TTS provider \"${provider}\" is not configured.` },\n      }, 503);\n    }\n\n    try {\n      const startedAt = Date.now();\n      const result = await speak(text, ttsConfig, {\n        appConfig: config,\n        parseDirectives: false,\n        tts: {\n          ...(typeof body.model === 'string' && body.model.trim() ? { model: body.model.trim() } : {}),\n          ...(typeof body.voice === 'string' && body.voice.trim() ? { voice: body.voice.trim() } : {}),\n        },\n      });\n      if (!result.audio.length) {\n        throw new Error(`TTS provider \"${result.provider}\" returned empty audio`);\n      }\n      const mimeType =\n        result.format === 'opus' || result.format === 'ogg'\n          ? 'audio/ogg'\n          : result.format === 'mp3' || result.format === 'mpeg'\n            ? 'audio/mpeg'\n            : result.format === 'wav'\n              ? 'audio/wav'\n              : `audio/${result.format}`;\n      return c.json({\n        ok: true,\n        payload: {\n          audio: result.audio.toString('base64'),\n          mimeType,\n          format: result.format,\n          provider: result.provider,\n          latencyMs: Date.now() - startedAt,\n          audioSize: result.audio.length,\n        },\n      });\n    } catch (error) {\n      const msg = error instanceof Error ? error.message : String(error);\n      log.error({ errorMessage: msg, provider }, 'Voice TTS test failed');\n      return c.json({ ok: false, error: { message: `TTS test failed: ${msg}` } }, 502);\n    }\n  });\n\n  type TranscriptionInput = {\n    audioBuffer: Buffer;\n    mimeType: string;\n    fileName: string;\n    language?: string;\n  };\n\n  const runTranscription = async (c: Context, input: TranscriptionInput) => {\n    if (!input.audioBuffer.length) {\n      return c.json({ ok: false, error: { message: 'Empty audio data' } }, 400);\n    }\n    if (input.audioBuffer.length > MAX_AUDIO_BYTES) {\n      return c.json({ ok: false, error: { message: 'Audio data exceeds 25 MB limit' } }, 400);\n    }\n    if (!input.mimeType.toLowerCase().startsWith('audio/')) {\n      return c.json({ ok: false, error: { message: 'Uploaded file must have an audio MIME type' } }, 400);\n    }\n\n    const config = service.currentConfig as Config;\n    const sttConfig = mergeSttConfigFromAppConfig(\n      config.tools?.media?.audio,\n      config.tools?.media,\n    );\n    if (!isSTTAvailable(sttConfig)) {\n      return c.json({\n        ok: false,\n        error: { message: 'STT is not configured. Enable STT in gateway config (tools.media.audio).' },\n      }, 503);\n    }\n\n    const startedAt = Date.now();\n    try {\n      const result = await transcribe(input.audioBuffer, sttConfig, {\n        language: input.language || (sttConfig.provider === 'alibaba' ? 'zh' : undefined),\n        mime: input.mimeType,\n        fileName: input.fileName,\n        signal: c.req.raw.signal,\n      });\n      const raw = result.text;\n      const detectedLanguage = result.language ?? input.language;\n      const refined = raw.trim()\n        ? await refineTranscript(raw, config, c.req.raw.signal)\n        : undefined;\n      return c.json({\n        ok: true,\n        payload: {\n          raw,\n          ...(refined ? { refined } : {}),\n          ...(detectedLanguage ? { language: detectedLanguage } : {}),\n          provider: result.provider,\n          attempts: result.attempts,\n          latencyMs: Date.now() - startedAt,\n        },\n      });\n    } catch (error) {\n      const msg = error instanceof Error ? error.message : String(error);\n      if (!c.req.raw.signal.aborted) {\n        log.error({ err: error, mimeType: input.mimeType, fileName: input.fileName }, `Voice transcription failed: ${msg}`);\n      }\n      return c.json({ ok: false, error: { message: `Transcription failed: ${msg}` } }, 502);\n    }\n  };\n\n  /** Multipart endpoint used by browser and future native clients. */\n  authenticated.post('/api/voice/transcriptions', strictRateLimitMiddleware, async (c) => {\n    const contentLength = Number(c.req.header('content-length') ?? 0);\n    if (Number.isFinite(contentLength) && contentLength > MAX_AUDIO_BYTES + 1024 * 1024) {\n      return c.json({ ok: false, error: { message: 'Audio data exceeds 25 MB limit' } }, 413);\n    }\n    let form: FormData;\n    try {\n      form = await c.req.formData();\n    } catch {\n      return c.json({ ok: false, error: { message: 'Invalid multipart form data' } }, 400);\n    }\n    const audio = form.get('audio');\n    if (!(audio instanceof Blob)) {\n      return c.json({ ok: false, error: { message: 'Missing required file field: audio' } }, 400);\n    }\n    const languageValue = form.get('language');\n    const language = typeof languageValue === 'string' && languageValue.trim()\n      ? languageValue.trim()\n      : undefined;\n    const fileName = 'name' in audio && typeof audio.name === 'string' && audio.name.trim()\n      ? audio.name.trim()\n      : `audio-${Date.now()}`;\n    return runTranscription(c, {\n      audioBuffer: Buffer.from(await audio.arrayBuffer()),\n      mimeType: audio.type || 'audio/webm',\n      fileName,\n      ...(language ? { language } : {}),\n    });\n  });\n\n  /** Legacy JSON/base64 endpoint retained for mobile and external clients. */\n  authenticated.post('/api/voice/transcribe', strictRateLimitMiddleware, async (c) => {\n    let body: { audio?: unknown; mimeType?: unknown; language?: unknown; fileName?: unknown } = {};\n    try {\n      body = (await c.req.json()) as typeof body;\n    } catch {\n      return c.json({ ok: false, error: { message: 'Invalid JSON body' } }, 400);\n    }\n    if (typeof body.audio !== 'string' || !body.audio.trim()) {\n      return c.json({ ok: false, error: { message: 'Missing required field: audio (base64)' } }, 400);\n    }\n    if (typeof body.mimeType !== 'string' || !body.mimeType.trim()) {\n      return c.json({ ok: false, error: { message: 'Missing required field: mimeType' } }, 400);\n    }\n    const encoded = body.audio.replace(/\\s/g, '');\n    if (encoded.length % 4 === 1 || !/^[A-Za-z0-9+/]*={0,2}$/.test(encoded)) {\n      return c.json({ ok: false, error: { message: 'Invalid base64 audio data' } }, 400);\n    }\n    const language = typeof body.language === 'string' && body.language.trim()\n      ? body.language.trim()\n      : undefined;\n    const fileName = typeof body.fileName === 'string' && body.fileName.trim()\n      ? body.fileName.trim()\n      : `audio-${Date.now()}`;\n    return runTranscription(c, {\n      audioBuffer: Buffer.from(encoded, 'base64'),\n      mimeType: body.mimeType.trim(),\n      fileName,\n      ...(language ? { language } : {}),\n    });\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;gBAgBgF;AAkBhF,MAAM,MAAM,yBAAyB,QAAQ;AAE7C,SAAS,kCACP,KACA,MACA,YACoB;CACpB,MAAM,KAAK,WAAW,MAAM;AAC5B,KAAI,CAAC,GAAI,QAAO,KAAA;CAKhB,MAAM,OAHJ,SAAS,QACL,8BAA8B,IAAI,IAAI,OAAO,OAAO,MAAM,GAC1D,8BAA8B,IAAI,IAAI,UAAU,IAAI,EACxC;AAClB,QAAO,OAAO,QAAQ,YAAY,IAAI,MAAM,GAAG,IAAI,MAAM,GAAG,KAAA;;AAG9D,MAAM,oBAAoB;AAC1B,MAAM,kBAAkB,KAAK,OAAO;AACpC,MAAM,yBAAyB;AAE/B,SAAS,eAAe,QAAwB;AAC9C,KAAI,WAAW,UAAU,WAAW,MAAO,QAAO;AAClD,KAAI,WAAW,SAAS,WAAW,OAAQ,QAAO;AAClD,KAAI,WAAW,MAAO,QAAO;AAC7B,QAAO,SAAS;;AAGlB,MAAM,sBAAsB;;;;;;;;;AAU5B,MAAM,4BAA4B;AAElC,SAAS,mBACP,QACA,eACwC;AACxC,KAAI,cACF,KAAI;AACF,SAAO,aAAa,cAAc;SAC5B;AACN,MAAI,KAAK,EAAE,UAAU,eAAe,EAAE,+CAA+C;AACrF,SAAO;;CAGX,MAAM,SAAS,QAAQ,IAAI,yBAAyB,MAAM;AAC1D,KAAI,OACF,KAAI;AACF,SAAO,aAAa,OAAO;SACrB;AAEV,MAAK,MAAM,aAAa,CAAC,uBAAuB,0BAA0B,CACxE,KAAI;AACF,SAAO,aAAa,UAAU;SACxB;AAEV,KAAI;AACF,SAAO,aAAa,oBAAoB,OAAO,CAAC;SAC1C;AACN,SAAO;;;AAIX,eAAe,iBACb,KACA,QACA,QAC6B;AAC7B,KAAI,CAAC,IAAI,MAAM,CAAE,QAAO,KAAA;CAExB,MAAM,aAAa,QAAQ,OAAO,OAAO;CACzC,MAAM,OAAO,YAAY,QAAQ;AACjC,KAAI,SAAS,MAAO,QAAO,KAAA;CAE3B,MAAM,cACJ,SAAS,gBACL,4BACA,SAAS,WACP,YAAY,mBAAmB,MAAM,GACrC;AACR,KAAI,CAAC,aAAa;AAChB,MAAI,KAAK,gFAAgF;AACzF;;CAGF,MAAM,QAAQ,mBAAmB,QAAQ,YAAY,MAAM;AAC3D,KAAI,CAAC,OAAO;AACV,MAAI,MAAM,8DAA8D;AACxE;;AAGF,KAAI;EACF,MAAM,UAAuB;GAC3B,MAAM;GACN,SAAS,GAAG,YAAY,SAAS;GACjC,WAAW,KAAK,KAAK;GACtB;EAED,MAAM,gBACJ,OAAO,gBAAgB,eAAe,OAAO,YAAY,YAAY,aACjE,YAAY,QAAQ,kBAAkB,GACtC,KAAA;EACN,MAAM,eACJ,UAAU,iBAAiB,OAAO,YAAY,QAAQ,aAClD,YAAY,IAAI,CAAC,QAAQ,cAAc,CAAC,GACxC,UAAU;EAEhB,MAAM,SAAS,MAAM,gCACnB,OACA,EAAE,UAAU,CAAC,QAAQ,EAAE,EACvB;GACE,WAAW,KAAK,IAAI,IAAI,SAAS,GAAG,KAAK;GACzC,aAAa;GACb,QAAQ;GACT,CACF;EAED,IAAI,MAAM;AACV,MAAI,MAAM,QAAQ,OAAO,QAAQ;QAC1B,MAAM,KAAK,OAAO,QACrB,KAAI,KAAK,OAAO,MAAM,YAAa,EAAwB,SAAS,OAClE,QAAO,OAAQ,EAAwB,QAAQ,GAAG;;EAKxD,MAAM,UAAU,IAAI,MAAM;AAC1B,MAAI,CAAC,WAAW,YAAY,IAAI,MAAM,CAAE,QAAO,KAAA;AAC/C,SAAO;UACA,OAAO;EACd,MAAM,MAAM,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;AAClE,MAAI,KAAK,EAAE,cAAc,KAAK,EAAE,0CAA0C;AAC1E;;;AAIJ,SAAgB,oBAAoB,eAAqB,MAAoC;CAC3F,MAAM,EAAE,SAAS,8BAA8B;AAE/C,eAAc,KAAK,uBAAuB,2BAA2B,OAAO,MAAM;EAChF,IAAI,OAA+B,EAAE;AACrC,MAAI;AACF,UAAQ,MAAM,EAAE,IAAI,MAAM;UACpB;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS,qBAAqB;IAAE,EAAE,IAAI;;AAE5E,MAAI,KAAK,aAAa,QAAQ,KAAK,aAAa,KAC9C,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,qCAAiC;GAAE,EAAE,IAAI;EAExF,MAAM,UAAU,MAAM,QAAQ,kBAAkB,KAAK,SAAS;AAC9D,MAAI,QAAQ,MACV,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,QAAQ,OAAO;GAAE,EAAE,IAAI;AAEtE,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM;GAAS,CAAC;GACpC;;;;;;;AAQF,eAAc,IAAI,yBAAyB,MAAM;EAC/C,MAAM,SAAS,QAAQ;EACvB,MAAM,UAAU,uBAAuB,OAAO;AAC9C,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM;GAAS,CAAC;GACpC;;;;;;;AAQF,eAAc,IAAI,6BAA6B,MAAM;EACnD,MAAM,SAAS,QAAQ;EACvB,MAAM,UAAU,uBAAuB,OAAO;AAC9C,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM;GAAS,CAAC;GACpC;AAEF,eAAc,IAAI,2BAA2B,OAAO,MAAM;EACxD,MAAM,SAAS,MAAM,6BAA6B;AAClD,MAAI;GACF,MAAM,UAAU,MAAM,4BAA4B,CAAC,QAIhD,UAAU,EAAE,EAAE;IAAE,WAAW;IAAQ,eAAe;IAAO,CAAC;AAC7D,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS;KAAE,SAAS;MAAE,GAAG;MAAS,OAAO;MAAM;KAAE;KAAQ;IAAE,CAAC;WAC/E,OAAO;GACd,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;AACtE,UAAO,EAAE,KAAK;IACZ,IAAI;IACJ,SAAS;KAAE,SAAS;MAAE,OAAO;MAAO,OAAO;MAAS;KAAE;KAAQ;IAC/D,CAAC;;GAEJ;AAEF,eAAc,KACZ,4CACA,4BACC,MAAM;AACL,MAAI;GACF,MAAM,SAAS,4BAA4B,EAAE,IAAI,MAAM,UAAU,CAAC;AAClE,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,OAAO,QAAQ;IAAE,EAAE,IAAI;WACrD,OAAO;GACd,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;AACtE,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS;IAAE,EAAE,IAAI;;GAG1D;AAED,eAAc,OACZ,oCACA,2BACA,OAAO,MAAM;AACX,MAAI;AACF,SAAM,sBAAsB,EAAE,IAAI,MAAM,UAAU,CAAC;AACnD,UAAO,EAAE,KAAK,EAAE,IAAI,MAAM,CAAC;WACpB,OAAO;GACd,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;AACtE,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS;IAAE,EAAE,IAAI;;GAG1D;;;;;AAMD,eAAc,KAAK,6BAA6B,2BAA2B,OAAO,MAAM;EACtF,IAAI,OAA+C,EAAE;AACrD,MAAI;AACF,UAAQ,MAAM,EAAE,IAAI,MAAM;UACpB;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS,qBAAqB;IAAE,EAAE,IAAI;;EAE5E,MAAM,OAAO,KAAK,SAAS,SAAS,KAAK,SAAS,QAAQ,KAAK,OAAO;EACtE,MAAM,WAAW,OAAO,KAAK,aAAa,WAAW,KAAK,SAAS,MAAM,GAAG;AAC5E,MAAI,CAAC,KACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,mCAA+B;GAAE,EAAE,IAAI;AAEtF,MAAI,CAAC,SACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,wBAAwB;GAAE,EAAE,IAAI;EAG/E,MAAM,MAAM,QAAQ;EACpB,MAAM,SAAS,kCAAkC,KAAK,MAAM,SAAS;AACrE,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP;IACA;IACA,QAAQ,UAAU;IAClB,QAAQ,SAAU,WAAsB;IACzC;GACF,CAAC;GACF;;AAGF,eAAc,KAAK,qBAAqB,2BAA2B,OAAO,MAAM;EAC9E,IAAI,OAAgE,EAAE;AACtE,MAAI;AACF,UAAQ,MAAM,EAAE,IAAI,MAAM;UACpB;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS,qBAAqB;IAAE,EAAE,IAAI;;EAG5E,MAAM,OAAO,OAAO,KAAK,SAAS,WAAW,KAAK,KAAK,MAAM,GAAG;AAChE,MAAI,CAAC,KACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,oBAAoB;GAAE,EAAE,IAAI;AAE3E,MAAI,KAAK,SAAS,uBAChB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,gBAAgB,uBAAuB,cAAc;GAAE,EAAE,IAAI;EAG5G,MAAM,WAAW,OAAO,KAAK,aAAa,WAAW,KAAK,SAAS,MAAM,GAAG;EAC5E,MAAM,QAAQ,OAAO,KAAK,UAAU,WAAW,KAAK,MAAM,MAAM,GAAG;AACnE,MAAI,YAAY,CAAC,6BAA6B,KAAK,SAAS,CAC1D,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,mCAAmC;GAAE,EAAE,IAAI;AAE1F,MAAI,MAAM,SAAS,IACjB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,gCAAgC;GAAE,EAAE,IAAI;EAGvF,MAAM,SAAS,QAAQ;EACvB,MAAM,gBAAgB,4BAA4B,OAAO,UAAU,IAAI;EACvE,MAAM,WAAW,cAAc;EAC/B,MAAM,gBAAgB,SAAS,WAAW,KAAK,GAC3C,yBACA,SAAS,WAAW,KAAK,GACvB,yBACA,KAAA;EACN,MAAM,mBAAmB,aAAa,SAClC;GACE,GAAI,WAAW,EAAE,MAAM,UAAU,GAAG,EAAE;GACtC,GAAI,SAAS,gBAAgB,EAAE,OAAO,SAAS,eAAe,GAAG,EAAE;GACpE,GACD,EAAE;EACN,MAAM,YAAY;GAChB,GAAG;GACH,SAAS;GACT,WAAW;IACT,GAAI,cAAc,aAAa,EAAE;KAChC,WAAW;KACV,GAAI,cAAc,YAAY,aAAa,EAAE;KAC7C,GAAG;KACJ;IACF;GACF;AAED,MAAI,CAAC,eAAe,UAAU,CAC5B,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,kBAAkB,SAAS,wBAAwB;GAAE,EAAE,IAAI;AAG1G,MAAI;GACF,MAAM,SAAS,MAAM,MAAM,MAAM,WAAW;IAC1C,WAAW;IACX,iBAAiB;IACjB,QAAQ,EAAE,IAAI,IAAI;IAClB,KAAK,QAAQ,EAAE,OAAO,GAAG,KAAA;IAC1B,CAAC;AACF,OAAI,CAAC,OAAO,MAAM,OAChB,OAAM,IAAI,MAAM,kBAAkB,OAAO,SAAS,yBAAyB;AAE7E,UAAO,IAAI,SAAS,IAAI,WAAW,OAAO,MAAM,EAAE,EAChD,SAAS;IACP,gBAAgB,eAAe,OAAO,OAAO;IAC7C,kBAAkB,OAAO,OAAO,MAAM,OAAO;IAC7C,iBAAiB;IACjB,0BAA0B;IAC1B,oBAAoB,OAAO;IAC3B,GAAI,WAAW,EAAE,oBAAoB,UAAU,GAAG,EAAE;IACrD,EACF,CAAC;WACK,OAAO;GACd,MAAM,MAAM,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;AAClE,OAAI,CAAC,EAAE,IAAI,IAAI,OAAO,QACpB,KAAI,MAAM;IAAE,KAAK;IAAO;IAAU,YAAY,KAAK;IAAQ,EAAE,mCAAmC,MAAM;AAExG,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS,6BAA6B,OAAO;IAAE,EAAE,IAAI;;GAE3F;;;;;;;AAQF,eAAc,KAAK,uBAAuB,2BAA2B,OAAO,MAAM;EAChF,IAAI,OAA2G,EAAE;AACjH,MAAI;AACF,UAAQ,MAAM,EAAE,IAAI,MAAM;UACpB;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS,qBAAqB;IAAE,EAAE,IAAI;;EAG5E,MAAM,OAAO,OAAO,KAAK,SAAS,WAAW,KAAK,KAAK,MAAM,GAAG;AAChE,MAAI,CAAC,KACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,oBAAoB;GAAE,EAAE,IAAI;AAE3E,MAAI,KAAK,SAAS,IAChB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,gCAAgC;GAAE,EAAE,IAAI;EAGvF,MAAM,SAAS,QAAQ;EACvB,MAAM,gBAAgB,4BAA4B,OAAO,UAAU,IAAI;EACvE,MAAM,WAAW,OAAO,KAAK,aAAa,YAAY,KAAK,SAAS,MAAM,GAAG,KAAK,SAAS,MAAM,GAAG,cAAc;EAClH,MAAM,iBACJ,KAAK,kBAAkB,OAAO,KAAK,mBAAmB,YAAY,CAAC,MAAM,QAAQ,KAAK,eAAe,GAChG,KAAK,iBACN,KAAA;EACN,MAAM,YAAY;GAChB,GAAG;GACH,SAAS;GACT;GACA,WAAW;IACT,GAAI,cAAc,aAAa,EAAE;IACjC,GAAI,iBAAiB,GAAG,WAAW;KAAE,GAAI,cAAc,YAAY,aAAa,EAAE;KAAG,GAAG;KAAgB,EAAE,GAAG,EAAE;IAChH;GACD,UAAU;IAAE,SAAS;IAAO,OAAO,CAAC,SAAS;IAAE;GAChD;AAED,MAAI,CAAC,eAAe,UAAU,CAC5B,QAAO,EAAE,KAAK;GACZ,IAAI;GACJ,OAAO,EAAE,SAAS,iBAAiB,SAAS,uBAAuB;GACpE,EAAE,IAAI;AAGT,MAAI;GACF,MAAM,YAAY,KAAK,KAAK;GAC5B,MAAM,SAAS,MAAM,MAAM,MAAM,WAAW;IAC1C,WAAW;IACX,iBAAiB;IACjB,KAAK;KACH,GAAI,OAAO,KAAK,UAAU,YAAY,KAAK,MAAM,MAAM,GAAG,EAAE,OAAO,KAAK,MAAM,MAAM,EAAE,GAAG,EAAE;KAC3F,GAAI,OAAO,KAAK,UAAU,YAAY,KAAK,MAAM,MAAM,GAAG,EAAE,OAAO,KAAK,MAAM,MAAM,EAAE,GAAG,EAAE;KAC5F;IACF,CAAC;AACF,OAAI,CAAC,OAAO,MAAM,OAChB,OAAM,IAAI,MAAM,iBAAiB,OAAO,SAAS,wBAAwB;GAE3E,MAAM,WACJ,OAAO,WAAW,UAAU,OAAO,WAAW,QAC1C,cACA,OAAO,WAAW,SAAS,OAAO,WAAW,SAC3C,eACA,OAAO,WAAW,QAChB,cACA,SAAS,OAAO;AAC1B,UAAO,EAAE,KAAK;IACZ,IAAI;IACJ,SAAS;KACP,OAAO,OAAO,MAAM,SAAS,SAAS;KACtC;KACA,QAAQ,OAAO;KACf,UAAU,OAAO;KACjB,WAAW,KAAK,KAAK,GAAG;KACxB,WAAW,OAAO,MAAM;KACzB;IACF,CAAC;WACK,OAAO;GACd,MAAM,MAAM,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;AAClE,OAAI,MAAM;IAAE,cAAc;IAAK;IAAU,EAAE,wBAAwB;AACnE,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS,oBAAoB,OAAO;IAAE,EAAE,IAAI;;GAElF;CASF,MAAM,mBAAmB,OAAO,GAAY,UAA8B;AACxE,MAAI,CAAC,MAAM,YAAY,OACrB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,oBAAoB;GAAE,EAAE,IAAI;AAE3E,MAAI,MAAM,YAAY,SAAS,gBAC7B,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,kCAAkC;GAAE,EAAE,IAAI;AAEzF,MAAI,CAAC,MAAM,SAAS,aAAa,CAAC,WAAW,SAAS,CACpD,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,8CAA8C;GAAE,EAAE,IAAI;EAGrG,MAAM,SAAS,QAAQ;EACvB,MAAM,YAAY,4BAChB,OAAO,OAAO,OAAO,OACrB,OAAO,OAAO,MACf;AACD,MAAI,CAAC,eAAe,UAAU,CAC5B,QAAO,EAAE,KAAK;GACZ,IAAI;GACJ,OAAO,EAAE,SAAS,4EAA4E;GAC/F,EAAE,IAAI;EAGT,MAAM,YAAY,KAAK,KAAK;AAC5B,MAAI;GACF,MAAM,SAAS,MAAM,WAAW,MAAM,aAAa,WAAW;IAC5D,UAAU,MAAM,aAAa,UAAU,aAAa,YAAY,OAAO,KAAA;IACvE,MAAM,MAAM;IACZ,UAAU,MAAM;IAChB,QAAQ,EAAE,IAAI,IAAI;IACnB,CAAC;GACF,MAAM,MAAM,OAAO;GACnB,MAAM,mBAAmB,OAAO,YAAY,MAAM;GAClD,MAAM,UAAU,IAAI,MAAM,GACtB,MAAM,iBAAiB,KAAK,QAAQ,EAAE,IAAI,IAAI,OAAO,GACrD,KAAA;AACJ,UAAO,EAAE,KAAK;IACZ,IAAI;IACJ,SAAS;KACP;KACA,GAAI,UAAU,EAAE,SAAS,GAAG,EAAE;KAC9B,GAAI,mBAAmB,EAAE,UAAU,kBAAkB,GAAG,EAAE;KAC1D,UAAU,OAAO;KACjB,UAAU,OAAO;KACjB,WAAW,KAAK,KAAK,GAAG;KACzB;IACF,CAAC;WACK,OAAO;GACd,MAAM,MAAM,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;AAClE,OAAI,CAAC,EAAE,IAAI,IAAI,OAAO,QACpB,KAAI,MAAM;IAAE,KAAK;IAAO,UAAU,MAAM;IAAU,UAAU,MAAM;IAAU,EAAE,+BAA+B,MAAM;AAErH,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS,yBAAyB,OAAO;IAAE,EAAE,IAAI;;;;AAKzF,eAAc,KAAK,6BAA6B,2BAA2B,OAAO,MAAM;EACtF,MAAM,gBAAgB,OAAO,EAAE,IAAI,OAAO,iBAAiB,IAAI,EAAE;AACjE,MAAI,OAAO,SAAS,cAAc,IAAI,gBAAgB,kBAAkB,OAAO,KAC7E,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,kCAAkC;GAAE,EAAE,IAAI;EAEzF,IAAI;AACJ,MAAI;AACF,UAAO,MAAM,EAAE,IAAI,UAAU;UACvB;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS,+BAA+B;IAAE,EAAE,IAAI;;EAEtF,MAAM,QAAQ,KAAK,IAAI,QAAQ;AAC/B,MAAI,EAAE,iBAAiB,MACrB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,sCAAsC;GAAE,EAAE,IAAI;EAE7F,MAAM,gBAAgB,KAAK,IAAI,WAAW;EAC1C,MAAM,WAAW,OAAO,kBAAkB,YAAY,cAAc,MAAM,GACtE,cAAc,MAAM,GACpB,KAAA;EACJ,MAAM,WAAW,UAAU,SAAS,OAAO,MAAM,SAAS,YAAY,MAAM,KAAK,MAAM,GACnF,MAAM,KAAK,MAAM,GACjB,SAAS,KAAK,KAAK;AACvB,SAAO,iBAAiB,GAAG;GACzB,aAAa,OAAO,KAAK,MAAM,MAAM,aAAa,CAAC;GACnD,UAAU,MAAM,QAAQ;GACxB;GACA,GAAI,WAAW,EAAE,UAAU,GAAG,EAAE;GACjC,CAAC;GACF;;AAGF,eAAc,KAAK,yBAAyB,2BAA2B,OAAO,MAAM;EAClF,IAAI,OAAwF,EAAE;AAC9F,MAAI;AACF,UAAQ,MAAM,EAAE,IAAI,MAAM;UACpB;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS,qBAAqB;IAAE,EAAE,IAAI;;AAE5E,MAAI,OAAO,KAAK,UAAU,YAAY,CAAC,KAAK,MAAM,MAAM,CACtD,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,0CAA0C;GAAE,EAAE,IAAI;AAEjG,MAAI,OAAO,KAAK,aAAa,YAAY,CAAC,KAAK,SAAS,MAAM,CAC5D,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,oCAAoC;GAAE,EAAE,IAAI;EAE3F,MAAM,UAAU,KAAK,MAAM,QAAQ,OAAO,GAAG;AAC7C,MAAI,QAAQ,SAAS,MAAM,KAAK,CAAC,yBAAyB,KAAK,QAAQ,CACrE,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,6BAA6B;GAAE,EAAE,IAAI;EAEpF,MAAM,WAAW,OAAO,KAAK,aAAa,YAAY,KAAK,SAAS,MAAM,GACtE,KAAK,SAAS,MAAM,GACpB,KAAA;EACJ,MAAM,WAAW,OAAO,KAAK,aAAa,YAAY,KAAK,SAAS,MAAM,GACtE,KAAK,SAAS,MAAM,GACpB,SAAS,KAAK,KAAK;AACvB,SAAO,iBAAiB,GAAG;GACzB,aAAa,OAAO,KAAK,SAAS,SAAS;GAC3C,UAAU,KAAK,SAAS,MAAM;GAC9B;GACA,GAAI,WAAW,EAAE,UAAU,GAAG,EAAE;GACjC,CAAC;GACF"}

package/dist/src/gateway/hono/routes/work-discovery.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"work-discovery.js","names":[],"sources":["../../../../../src/gateway/hono/routes/work-discovery.ts"],"sourcesContent":["import type { Hono } from 'hono';\n\nimport { getAgentDefaultModelRef } from '../../../config/schema.js';\nimport { isLocalModelBaseUrl } from '../../../providers/model-call.js';\nimport { resolveModel } from '../../../providers/index.js';\nimport { previewWorkDiscoveryRoot, WORK_DISCOVERY_SCAN_POLICY_VERSION } from '../../../work-discovery/probe.js';\nimport { WorkDiscoveryService } from '../../../work-discovery/service.js';\nimport type { WorkDiscoveryRecognitionDecision, WorkDiscoverySource } from '../../../work-discovery/types.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\n\nconst services = new WeakMap<AuthenticatedRouteDeps['service'], WorkDiscoveryService>();\n\nfunction workDiscoveryService(deps: AuthenticatedRouteDeps): WorkDiscoveryService {\n  const existing = services.get(deps.service);\n  if (existing) return existing;\n  const service = new WorkDiscoveryService({\n    projects: deps.service.projects,\n    sessions: deps.service.sessionIndexInstance,\n    getConfig: () => deps.service.currentConfig,\n    emit: (type, payload) => deps.service.emit(type, payload),\n  });\n  services.set(deps.service, service);\n  return service;\n}\n\nfunction stringField(body: unknown, field: string): string {\n  if (!body || typeof body !== 'object') return '';\n  const value = (body as Record<string, unknown>)[field];\n  return typeof value === 'string' ? value.trim() : '';\n}\n\nexport function registerWorkDiscoveryRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  const service = workDiscoveryService(deps);\n  const limited = deps.strictRateLimitMiddleware;\n\n  authenticated.get('/api/onboarding/work-discovery', (c) => c.json({\n    enabled: service.isEnabled(),\n    state: service.getOnboardingState(),\n  }));\n\n  authenticated.patch('/api/onboarding/work-discovery', async (c) => {\n    const body = await c.req.json().catch(() => null);\n    if (stringField(body, 'status') !== 'dismissed') {\n      return c.json({ ok: false, error: 'Only dismissed status is accepted' }, 400);\n    }\n    return c.json({ ok: true, state: service.dismissOnboarding() });\n  });\n\n  authenticated.post('/api/work-discovery/preview', limited, async (c) => {\n    if (!service.isEnabled()) return c.json({ ok: false, error: 'Work discovery is disabled' }, 404);\n    const body = await c.req.json().catch(() => null);\n    const rootPath = stringField(body, 'rootPath');\n    if (!rootPath) return c.json({ ok: false, error: 'Missing rootPath' }, 400);\n    try {\n      const preview = await previewWorkDiscoveryRoot(rootPath);\n      const modelRef = getAgentDefaultModelRef(deps.service.currentConfig);\n      if (!modelRef) return c.json({ ok: false, error: 'No default model configured' }, 409);\n      const model = resolveModel(modelRef);\n      return c.json({\n        ok: true,\n        preview: {\n          ...preview,\n          exists: true,\n          readable: true,\n          provider: model.provider,\n          remoteModel: !isLocalModelBaseUrl(model.baseUrl),\n          policyVersion: WORK_DISCOVERY_SCAN_POLICY_VERSION,\n        },\n      });\n    } catch (error) {\n      return c.json({ ok: false, error: error instanceof Error ? error.message : String(error) }, 400);\n    }\n  });\n\n  authenticated.post('/api/work-discovery/runs', limited, async (c) => {\n    if (!service.isEnabled()) return c.json({ ok: false, error: 'Work discovery is disabled' }, 404);\n    const body = await c.req.json().catch(() => null);\n    const rootPath = stringField(body, 'rootPath');\n    const idempotencyKey = stringField(body, 'idempotencyKey');\n    const requestedSource = stringField(body, 'source');\n    const source: WorkDiscoverySource = requestedSource === 'manual_selected_directory'\n      ? 'manual_selected_directory'\n      : 'onboarding_selected_directory';\n    if (!rootPath || !idempotencyKey) {\n      return c.json({ ok: false, error: 'Missing rootPath or idempotencyKey' }, 400);\n    }\n    try {\n      const run = await service.startRun({ rootPath, source, idempotencyKey });\n      return c.json({ ok: true, run }, 202);\n    } catch (error) {\n      return c.json({ ok: false, error: error instanceof Error ? error.message : String(error) }, 400);\n    }\n  });\n\n  authenticated.get('/api/work-discovery/runs/:runId', (c) => {\n    const run = service.getRun(c.req.param('runId'));\n    return run ? c.json({ ok: true, run }) : c.json({ ok: false, error: 'Run not found' }, 404);\n  });\n\n  authenticated.post('/api/work-discovery/runs/:runId/cancel', (c) => {\n    const run = service.cancelRun(c.req.param('runId'));\n    return run ? c.json({ ok: true, run }) : c.json({ ok: false, error: 'Run not found' }, 404);\n  });\n\n  authenticated.post('/api/work-discovery/runs/:runId/retry', (c) => {\n    const run = service.retryRun(c.req.param('runId'));\n    return run ? c.json({ ok: true, run }) : c.json({ ok: false, error: 'Run not found' }, 404);\n  });\n\n  authenticated.post('/api/work-discovery/runs/:runId/recognition-feedback', async (c) => {\n    const body = await c.req.json().catch(() => null);\n    const decision = stringField(body, 'decision');\n    if (!['confirmed', 'corrected', 'different_goal', 'dismissed'].includes(decision)) {\n      return c.json({ ok: false, error: 'Invalid recognition decision' }, 400);\n    }\n    try {\n      const run = await service.submitRecognitionFeedback({\n        runId: c.req.param('runId'),\n        decision: decision as WorkDiscoveryRecognitionDecision,\n        ...(stringField(body, 'correctedIntent') ? { correctedIntent: stringField(body, 'correctedIntent') } : {}),\n      });\n      return run ? c.json({ ok: true, run }) : c.json({ ok: false, error: 'Completed run not found' }, 404);\n    } catch (error) {\n      return c.json({ ok: false, error: error instanceof Error ? error.message : String(error) }, 400);\n    }\n  });\n\n  authenticated.post('/api/work-discovery/runs/:runId/suggestions/:suggestionId/select', (c) => {\n    const run = service.selectSuggestion(c.req.param('runId'), c.req.param('suggestionId'));\n    return run ? c.json({ ok: true }) : c.json({ ok: false, error: 'Suggestion not found' }, 404);\n  });\n}\n"],"mappings":";;;;;;aAEoE;gBAET;AAM3D,MAAM,2BAAW,IAAI,SAAkE;AAEvF,SAAS,qBAAqB,MAAoD;CAChF,MAAM,WAAW,SAAS,IAAI,KAAK,QAAQ;AAC3C,KAAI,SAAU,QAAO;CACrB,MAAM,UAAU,IAAI,qBAAqB;EACvC,UAAU,KAAK,QAAQ;EACvB,UAAU,KAAK,QAAQ;EACvB,iBAAiB,KAAK,QAAQ;EAC9B,OAAO,MAAM,YAAY,KAAK,QAAQ,KAAK,MAAM,QAAQ;EAC1D,CAAC;AACF,UAAS,IAAI,KAAK,SAAS,QAAQ;AACnC,QAAO;;AAGT,SAAS,YAAY,MAAe,OAAuB;AACzD,KAAI,CAAC,QAAQ,OAAO,SAAS,SAAU,QAAO;CAC9C,MAAM,QAAS,KAAiC;AAChD,QAAO,OAAO,UAAU,WAAW,MAAM,MAAM,GAAG;;AAGpD,SAAgB,4BAA4B,eAAqB,MAAoC;CACnG,MAAM,UAAU,qBAAqB,KAAK;CAC1C,MAAM,UAAU,KAAK;AAErB,eAAc,IAAI,mCAAmC,MAAM,EAAE,KAAK;EAChE,SAAS,QAAQ,WAAW;EAC5B,OAAO,QAAQ,oBAAoB;EACpC,CAAC,CAAC;AAEH,eAAc,MAAM,kCAAkC,OAAO,MAAM;AAEjE,MAAI,YAAY,MADG,EAAE,IAAI,MAAM,CAAC,YAAY,KAAK,EAC3B,SAAS,KAAK,YAClC,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAqC,EAAE,IAAI;AAE/E,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,OAAO,QAAQ,mBAAmB;GAAE,CAAC;GAC/D;AAEF,eAAc,KAAK,+BAA+B,SAAS,OAAO,MAAM;AACtE,MAAI,CAAC,QAAQ,WAAW,CAAE,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAA8B,EAAE,IAAI;EAEhG,MAAM,WAAW,YAAY,MADV,EAAE,IAAI,MAAM,CAAC,YAAY,KAAK,EACd,WAAW;AAC9C,MAAI,CAAC,SAAU,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAoB,EAAE,IAAI;AAC3E,MAAI;GACF,MAAM,UAAU,MAAM,yBAAyB,SAAS;GACxD,MAAM,WAAW,wBAAwB,KAAK,QAAQ,cAAc;AACpE,OAAI,CAAC,SAAU,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAA+B,EAAE,IAAI;GACtF,MAAM,QAAQ,aAAa,SAAS;AACpC,UAAO,EAAE,KAAK;IACZ,IAAI;IACJ,SAAS;KACP,GAAG;KACH,QAAQ;KACR,UAAU;KACV,UAAU,MAAM;KAChB,aAAa,CAAC,oBAAoB,MAAM,QAAQ;KAChD,eAAA;KACD;IACF,CAAC;WACK,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;IAAE,EAAE,IAAI;;GAElG;AAEF,eAAc,KAAK,4BAA4B,SAAS,OAAO,MAAM;AACnE,MAAI,CAAC,QAAQ,WAAW,CAAE,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAA8B,EAAE,IAAI;EAChG,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,YAAY,KAAK;EACjD,MAAM,WAAW,YAAY,MAAM,WAAW;EAC9C,MAAM,iBAAiB,YAAY,MAAM,iBAAiB;EAE1D,MAAM,SADkB,YAAY,MAAM,SACS,KAAK,8BACpD,8BACA;AACJ,MAAI,CAAC,YAAY,CAAC,eAChB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAsC,EAAE,IAAI;AAEhF,MAAI;GACF,MAAM,MAAM,MAAM,QAAQ,SAAS;IAAE;IAAU;IAAQ;IAAgB,CAAC;AACxE,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM;IAAK,EAAE,IAAI;WAC9B,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;IAAE,EAAE,IAAI;;GAElG;AAEF,eAAc,IAAI,oCAAoC,MAAM;EAC1D,MAAM,MAAM,QAAQ,OAAO,EAAE,IAAI,MAAM,QAAQ,CAAC;AAChD,SAAO,MAAM,EAAE,KAAK;GAAE,IAAI;GAAM;GAAK,CAAC,GAAG,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAiB,EAAE,IAAI;GAC3F;AAEF,eAAc,KAAK,2CAA2C,MAAM;EAClE,MAAM,MAAM,QAAQ,UAAU,EAAE,IAAI,MAAM,QAAQ,CAAC;AACnD,SAAO,MAAM,EAAE,KAAK;GAAE,IAAI;GAAM;GAAK,CAAC,GAAG,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAiB,EAAE,IAAI;GAC3F;AAEF,eAAc,KAAK,0CAA0C,MAAM;EACjE,MAAM,MAAM,QAAQ,SAAS,EAAE,IAAI,MAAM,QAAQ,CAAC;AAClD,SAAO,MAAM,EAAE,KAAK;GAAE,IAAI;GAAM;GAAK,CAAC,GAAG,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAiB,EAAE,IAAI;GAC3F;AAEF,eAAc,KAAK,wDAAwD,OAAO,MAAM;EACtF,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,YAAY,KAAK;EACjD,MAAM,WAAW,YAAY,MAAM,WAAW;AAC9C,MAAI,CAAC;GAAC;GAAa;GAAa;GAAkB;GAAY,CAAC,SAAS,SAAS,CAC/E,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAgC,EAAE,IAAI;AAE1E,MAAI;GACF,MAAM,MAAM,MAAM,QAAQ,0BAA0B;IAClD,OAAO,EAAE,IAAI,MAAM,QAAQ;IACjB;IACV,GAAI,YAAY,MAAM,kBAAkB,GAAG,EAAE,iBAAiB,YAAY,MAAM,kBAAkB,EAAE,GAAG,EAAE;IAC1G,CAAC;AACF,UAAO,MAAM,EAAE,KAAK;IAAE,IAAI;IAAM;IAAK,CAAC,GAAG,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAA2B,EAAE,IAAI;WAC9F,OAAO;AACd,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;IAAE,EAAE,IAAI;;GAElG;AAEF,eAAc,KAAK,qEAAqE,MAAM;AAE5F,SADY,QAAQ,iBAAiB,EAAE,IAAI,MAAM,QAAQ,EAAE,EAAE,IAAI,MAAM,eAAe,CAC5E,GAAG,EAAE,KAAK,EAAE,IAAI,MAAM,CAAC,GAAG,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAwB,EAAE,IAAI;GAC7F"}