@xopcai/xopc 0.0.20 → 0.0.22

package/dist/src/extensions/types/core.d.ts

@@ -5,6 +5,7 @@
  */
 import type { Command } from 'commander';
 import type { Config } from '../../config/config-surface.js';
+import type { Config as FullConfig } from '../../config/schema.js';
 import type { MessageBus } from '../../infra/bus/index.js';
 import type { TypedEventBus } from './events.js';
 import type { AgentTool } from '@mariozechner/pi-agent-core';
@@ -78,6 +79,10 @@ export interface ExtensionApi {
     }): void;
     registerHttpRoute(path: string, handler: HttpRequestHandler): void;
     registerCommand(command: ExtensionCommand): void;
+    /**
+     * Register a reload handler when config paths matching this extension change during hot reload.
+     */
+    registerReload(handler: ExtensionReloadHandler): void;
     registerService(service: ExtensionService): void;
     registerGatewayMethod(method: string, handler: GatewayMethodHandler): void;
     /**
@@ -121,11 +126,40 @@ export interface HttpResponse {
 }
 export type HttpRequestHandler = (req: HttpRequest) => HttpResponse | Promise<HttpResponse>;
 export type GatewayMethodHandler = (params: unknown) => unknown | Promise<unknown>;
+export interface ExtensionReloadResult {
+    success: boolean;
+    error?: string;
+}
+export type ExtensionReloadHandler = (newConfig: FullConfig, changedPaths: string[]) => ExtensionReloadResult | Promise<ExtensionReloadResult>;
+export interface ExtensionReloadRegistration {
+    extensionId: string;
+    handler: ExtensionReloadHandler;
+    /** Config path prefixes this handler cares about. Empty = any extension-related change passed to matcher. */
+    configPrefixes: string[];
+}
+/**
+ * Chat command registered by an extension (bridged into CommandRegistry with category `extension`).
+ */
 export interface ExtensionCommand {
     name: string;
     description: string;
-    handler: (args: string[]) => void | Promise<void>;
     aliases?: string[];
+    scope?: Array<'global' | 'private' | 'group'>;
+    acceptsArgs?: boolean;
+    examples?: string[];
+    handler: ExtensionCommandHandler;
+}
+export type ExtensionCommandHandler = (args: string, context: ExtensionCommandContext) => Promise<ExtensionCommandResult | void> | ExtensionCommandResult | void;
+export interface ExtensionCommandContext {
+    sessionKey: string;
+    source: string;
+    isGroup: boolean;
+    config: Config;
+    reply(text: string): Promise<void>;
+}
+export interface ExtensionCommandResult {
+    content: string;
+    success?: boolean;
 }
 export interface ExtensionService {
     id: string;

package/dist/src/extensions/types/manifest.d.ts

@@ -24,9 +24,23 @@ export interface ExtensionManifest {
     activation?: ActivationDeclaration;
     contracts?: ContractDeclaration;
     setup?: SetupDeclaration;
+    /** Hot-reload: config path prefixes and capability flags (optional; handlers can register at runtime). */
+    reload?: {
+        configPrefixes?: string[];
+        supportsHotReload?: boolean;
+    };
+    /** Chat commands metadata (runtime registration still required in `register()`). */
+    commands?: ExtensionManifestCommand[];
     /** Frontend UI declaration — enables extensions to render custom UI in the Gateway Console. */
     ui?: ExtensionUiManifest;
 }
+export interface ExtensionManifestCommand {
+    name: string;
+    description: string;
+    aliases?: string[];
+    scope?: Array<'global' | 'private' | 'group'>;
+    examples?: string[];
+}
 /** Top-level UI declaration within an extension manifest. */
 export interface ExtensionUiManifest {
     /** Frontend entry HTML (relative to extension root). */

package/dist/src/gateway/agents-admin.js

@@ -1,6 +1,6 @@
 import { DEFAULT_AGENT_ID, init_agent_scope, listAgentEntries, normalizeAgentId, resolveAgentBootstrapDir, resolveAgentDir, resolveAgentWorkspaceDir, resolveDefaultAgentId, resolveUserPath, validateAgentIdForNewAgent } from "../agent/agent-scope.js";
-import { WORKSPACE_FILES, init_paths } from "../config/paths.js";
 import { resolveEffectiveAgentProfile } from "../config/agent-profile.js";
+import { WORKSPACE_FILES, init_paths } from "../config/paths.js";
 import { BOOTSTRAP_FILES } from "../agent/context/workspace.js";
 import { isPathUnderWorkspace, resolveWorkspaceSafePath } from "./workspace-editor-path.js";
 import { seedWorkspaceBootstrapFiles } from "../agent/context/workspace-seed.js";

package/dist/src/gateway/hono/lib/config-payload.d.ts

@@ -114,6 +114,9 @@ export declare function buildSafeWebConfigPayload(service: GatewayService): Prom
     cron: {
         enabled: boolean;
     };
+    update: {
+        channel: "stable" | "beta" | "dev";
+    };
     stt: {
         enabled: boolean;
         provider: "openai" | "alibaba";

package/dist/src/gateway/hono/lib/config-payload.js

@@ -83,6 +83,7 @@ async function buildSafeWebConfigPayload(service) {
 			}
 		},
 		cron: { enabled: config.cron?.enabled },
+		update: { channel: config.update?.channel ?? "stable" },
 		stt: config.stt,
 		tts: config.tts,
 		tools: safeToolsWebForGet(config),

package/dist/src/gateway/hono/lib/config-payload.js.map

@@ -1 +1 @@
-{"version":3,"file":"config-payload.js","names":[],"sources":["../../../../../src/gateway/hono/lib/config-payload.ts"],"sourcesContent":["import {\n  listAgentEntries,\n  normalizeAgentId,\n  resolveDefaultAgentId,\n} from '../../../agent/agent-scope.js';\nimport {\n  listChannelPlugins,\n  syncChannelPluginsFromManager,\n} from '../../../channels/plugins/registry.js';\nimport { bundledChannelPlugins } from '../../../generated/bundled-channel-plugins.js';\nimport { getAllProviders, isProviderConfigured } from '../../../providers/index.js';\nimport type { GatewayService } from '../../service.js';\nimport { safeToolsWebForGet } from '../../config-tools-web.js';\nimport { agentModelFallbacksToArray, agentModelRefToString } from './agent-model.js';\n\n/** Sanitized config snapshot for GET/PATCH `/api/config` (matches persisted `service.currentConfig`). */\nexport async function buildSafeWebConfigPayload(service: GatewayService) {\n  const config = service.currentConfig;\n  if (listChannelPlugins().length === 0) {\n    syncChannelPluginsFromManager(bundledChannelPlugins);\n  }\n  const channelsPayload = Object.fromEntries(\n    listChannelPlugins().map((plugin) => {\n      if (plugin.configSurface) {\n        return [plugin.id, plugin.configSurface.buildConfigSurface(config)];\n      }\n      const channelCfg = config.channels?.[plugin.id] as Record<string, unknown> | undefined;\n      return [\n        plugin.id,\n        {\n          enabled: channelCfg?.enabled ?? false,\n          configured: plugin.config.listAccountIds(config).length > 0,\n        },\n      ];\n    }),\n  );\n  return {\n    agents: {\n      defaultId: resolveDefaultAgentId(config),\n      list: listAgentEntries(config)\n        .filter((e) => e.enabled !== false)\n        .map((e) => ({\n          id: normalizeAgentId(e.id),\n          ...(typeof e.name === 'string' && e.name.trim() ? { name: e.name.trim() } : {}),\n        })),\n      defaults: {\n        model: agentModelRefToString(config.agents?.defaults?.model) ?? '',\n        modelFallbacks: agentModelFallbacksToArray(config.agents?.defaults?.model),\n        imageModel: agentModelRefToString(config.agents?.defaults?.imageModel) ?? null,\n        imageModelFallbacks: agentModelFallbacksToArray(config.agents?.defaults?.imageModel),\n        imageGenerationModel: agentModelRefToString(config.agents?.defaults?.imageGenerationModel) ?? null,\n        imageGenerationModelFallbacks: agentModelFallbacksToArray(\n          config.agents?.defaults?.imageGenerationModel,\n        ),\n        mediaMaxMb: config.agents?.defaults?.mediaMaxMb,\n        maxTokens: config.agents?.defaults?.maxTokens,\n        temperature: config.agents?.defaults?.temperature,\n        maxToolIterations: config.agents?.defaults?.maxToolIterations,\n        workspace: config.agents?.defaults?.workspace,\n        thinkingDefault: config.agents?.defaults?.thinkingDefault,\n        reasoningDefault: config.agents?.defaults?.reasoningDefault,\n        verboseDefault: config.agents?.defaults?.verboseDefault,\n        browser: {\n          enabled: config.agents?.defaults?.browser?.enabled === true,\n          headless: config.agents?.defaults?.browser?.headless !== false,\n        },\n        maxTaskDurationMs: config.agents?.defaults?.maxTaskDurationMs,\n        maxRequestsPerTurn: config.agents?.defaults?.maxRequestsPerTurn,\n        maxToolFailuresPerTurn: config.agents?.defaults?.maxToolFailuresPerTurn,\n        compaction: config.agents?.defaults?.compaction,\n        pruning: config.agents?.defaults?.pruning,\n        memory: config.agents?.defaults?.memory,\n        sessionSearch: config.agents?.defaults?.sessionSearch,\n        backgroundReview: config.agents?.defaults?.backgroundReview,\n        webExtract: config.agents?.defaults?.webExtract,\n        delegate: config.agents?.defaults?.delegate,\n        executeCode: config.agents?.defaults?.executeCode,\n        systemPromptOverride: config.agents?.defaults?.systemPromptOverride,\n        skills: config.agents?.defaults?.skills,\n        tools: config.agents?.defaults?.tools,\n        params: config.agents?.defaults?.params,\n      },\n    },\n    channels: channelsPayload,\n    providers: Object.fromEntries(\n      await Promise.all(\n        getAllProviders().map(async (provider) => [\n          provider,\n          (await isProviderConfigured(provider)) ? '***' : '',\n        ]),\n      ),\n    ),\n    gateway: {\n      host: config.gateway?.host,\n      port: config.gateway?.port,\n      auth: {\n        mode: config.gateway?.auth?.mode || 'token',\n        token: config.gateway?.auth?.token || '',\n      },\n      heartbeat: {\n        enabled: config.gateway?.heartbeat?.enabled,\n        intervalMs: config.gateway?.heartbeat?.intervalMs,\n        target: config.gateway?.heartbeat?.target,\n        targetChatId: config.gateway?.heartbeat?.targetChatId,\n        prompt: config.gateway?.heartbeat?.prompt,\n        ackMaxChars: config.gateway?.heartbeat?.ackMaxChars,\n        isolatedSession: config.gateway?.heartbeat?.isolatedSession,\n        activeHours: config.gateway?.heartbeat?.activeHours,\n      },\n    },\n    cron: { enabled: config.cron?.enabled },\n    stt: config.stt,\n    tts: config.tts,\n    tools: safeToolsWebForGet(config),\n    bindings: Array.isArray(config.bindings) ? config.bindings : [],\n  };\n}\n"],"mappings":";;;;;;;kBAIuC;gBAM6C;;AAMpF,eAAsB,0BAA0B,SAAyB;CACvE,MAAM,SAAS,QAAQ;AACvB,KAAI,oBAAoB,CAAC,WAAW,EAClC,+BAA8B,sBAAsB;CAEtD,MAAM,kBAAkB,OAAO,YAC7B,oBAAoB,CAAC,KAAK,WAAW;AACnC,MAAI,OAAO,cACT,QAAO,CAAC,OAAO,IAAI,OAAO,cAAc,mBAAmB,OAAO,CAAC;EAErE,MAAM,aAAa,OAAO,WAAW,OAAO;AAC5C,SAAO,CACL,OAAO,IACP;GACE,SAAS,YAAY,WAAW;GAChC,YAAY,OAAO,OAAO,eAAe,OAAO,CAAC,SAAS;GAC3D,CACF;GACD,CACH;AACD,QAAO;EACL,QAAQ;GACN,WAAW,sBAAsB,OAAO;GACxC,MAAM,iBAAiB,OAAO,CAC3B,QAAQ,MAAM,EAAE,YAAY,MAAM,CAClC,KAAK,OAAO;IACX,IAAI,iBAAiB,EAAE,GAAG;IAC1B,GAAI,OAAO,EAAE,SAAS,YAAY,EAAE,KAAK,MAAM,GAAG,EAAE,MAAM,EAAE,KAAK,MAAM,EAAE,GAAG,EAAE;IAC/E,EAAE;GACL,UAAU;IACR,OAAO,sBAAsB,OAAO,QAAQ,UAAU,MAAM,IAAI;IAChE,gBAAgB,2BAA2B,OAAO,QAAQ,UAAU,MAAM;IAC1E,YAAY,sBAAsB,OAAO,QAAQ,UAAU,WAAW,IAAI;IAC1E,qBAAqB,2BAA2B,OAAO,QAAQ,UAAU,WAAW;IACpF,sBAAsB,sBAAsB,OAAO,QAAQ,UAAU,qBAAqB,IAAI;IAC9F,+BAA+B,2BAC7B,OAAO,QAAQ,UAAU,qBAC1B;IACD,YAAY,OAAO,QAAQ,UAAU;IACrC,WAAW,OAAO,QAAQ,UAAU;IACpC,aAAa,OAAO,QAAQ,UAAU;IACtC,mBAAmB,OAAO,QAAQ,UAAU;IAC5C,WAAW,OAAO,QAAQ,UAAU;IACpC,iBAAiB,OAAO,QAAQ,UAAU;IAC1C,kBAAkB,OAAO,QAAQ,UAAU;IAC3C,gBAAgB,OAAO,QAAQ,UAAU;IACzC,SAAS;KACP,SAAS,OAAO,QAAQ,UAAU,SAAS,YAAY;KACvD,UAAU,OAAO,QAAQ,UAAU,SAAS,aAAa;KAC1D;IACD,mBAAmB,OAAO,QAAQ,UAAU;IAC5C,oBAAoB,OAAO,QAAQ,UAAU;IAC7C,wBAAwB,OAAO,QAAQ,UAAU;IACjD,YAAY,OAAO,QAAQ,UAAU;IACrC,SAAS,OAAO,QAAQ,UAAU;IAClC,QAAQ,OAAO,QAAQ,UAAU;IACjC,eAAe,OAAO,QAAQ,UAAU;IACxC,kBAAkB,OAAO,QAAQ,UAAU;IAC3C,YAAY,OAAO,QAAQ,UAAU;IACrC,UAAU,OAAO,QAAQ,UAAU;IACnC,aAAa,OAAO,QAAQ,UAAU;IACtC,sBAAsB,OAAO,QAAQ,UAAU;IAC/C,QAAQ,OAAO,QAAQ,UAAU;IACjC,OAAO,OAAO,QAAQ,UAAU;IAChC,QAAQ,OAAO,QAAQ,UAAU;IAClC;GACF;EACD,UAAU;EACV,WAAW,OAAO,YAChB,MAAM,QAAQ,IACZ,iBAAiB,CAAC,IAAI,OAAO,aAAa,CACxC,UACC,MAAM,qBAAqB,SAAS,GAAI,QAAQ,GAClD,CAAC,CACH,CACF;EACD,SAAS;GACP,MAAM,OAAO,SAAS;GACtB,MAAM,OAAO,SAAS;GACtB,MAAM;IACJ,MAAM,OAAO,SAAS,MAAM,QAAQ;IACpC,OAAO,OAAO,SAAS,MAAM,SAAS;IACvC;GACD,WAAW;IACT,SAAS,OAAO,SAAS,WAAW;IACpC,YAAY,OAAO,SAAS,WAAW;IACvC,QAAQ,OAAO,SAAS,WAAW;IACnC,cAAc,OAAO,SAAS,WAAW;IACzC,QAAQ,OAAO,SAAS,WAAW;IACnC,aAAa,OAAO,SAAS,WAAW;IACxC,iBAAiB,OAAO,SAAS,WAAW;IAC5C,aAAa,OAAO,SAAS,WAAW;IACzC;GACF;EACD,MAAM,EAAE,SAAS,OAAO,MAAM,SAAS;EACvC,KAAK,OAAO;EACZ,KAAK,OAAO;EACZ,OAAO,mBAAmB,OAAO;EACjC,UAAU,MAAM,QAAQ,OAAO,SAAS,GAAG,OAAO,WAAW,EAAE;EAChE"}
+{"version":3,"file":"config-payload.js","names":[],"sources":["../../../../../src/gateway/hono/lib/config-payload.ts"],"sourcesContent":["import {\n  listAgentEntries,\n  normalizeAgentId,\n  resolveDefaultAgentId,\n} from '../../../agent/agent-scope.js';\nimport {\n  listChannelPlugins,\n  syncChannelPluginsFromManager,\n} from '../../../channels/plugins/registry.js';\nimport { bundledChannelPlugins } from '../../../generated/bundled-channel-plugins.js';\nimport { getAllProviders, isProviderConfigured } from '../../../providers/index.js';\nimport type { GatewayService } from '../../service.js';\nimport { safeToolsWebForGet } from '../../config-tools-web.js';\nimport { agentModelFallbacksToArray, agentModelRefToString } from './agent-model.js';\n\n/** Sanitized config snapshot for GET/PATCH `/api/config` (matches persisted `service.currentConfig`). */\nexport async function buildSafeWebConfigPayload(service: GatewayService) {\n  const config = service.currentConfig;\n  if (listChannelPlugins().length === 0) {\n    syncChannelPluginsFromManager(bundledChannelPlugins);\n  }\n  const channelsPayload = Object.fromEntries(\n    listChannelPlugins().map((plugin) => {\n      if (plugin.configSurface) {\n        return [plugin.id, plugin.configSurface.buildConfigSurface(config)];\n      }\n      const channelCfg = config.channels?.[plugin.id] as Record<string, unknown> | undefined;\n      return [\n        plugin.id,\n        {\n          enabled: channelCfg?.enabled ?? false,\n          configured: plugin.config.listAccountIds(config).length > 0,\n        },\n      ];\n    }),\n  );\n  return {\n    agents: {\n      defaultId: resolveDefaultAgentId(config),\n      list: listAgentEntries(config)\n        .filter((e) => e.enabled !== false)\n        .map((e) => ({\n          id: normalizeAgentId(e.id),\n          ...(typeof e.name === 'string' && e.name.trim() ? { name: e.name.trim() } : {}),\n        })),\n      defaults: {\n        model: agentModelRefToString(config.agents?.defaults?.model) ?? '',\n        modelFallbacks: agentModelFallbacksToArray(config.agents?.defaults?.model),\n        imageModel: agentModelRefToString(config.agents?.defaults?.imageModel) ?? null,\n        imageModelFallbacks: agentModelFallbacksToArray(config.agents?.defaults?.imageModel),\n        imageGenerationModel: agentModelRefToString(config.agents?.defaults?.imageGenerationModel) ?? null,\n        imageGenerationModelFallbacks: agentModelFallbacksToArray(\n          config.agents?.defaults?.imageGenerationModel,\n        ),\n        mediaMaxMb: config.agents?.defaults?.mediaMaxMb,\n        maxTokens: config.agents?.defaults?.maxTokens,\n        temperature: config.agents?.defaults?.temperature,\n        maxToolIterations: config.agents?.defaults?.maxToolIterations,\n        workspace: config.agents?.defaults?.workspace,\n        thinkingDefault: config.agents?.defaults?.thinkingDefault,\n        reasoningDefault: config.agents?.defaults?.reasoningDefault,\n        verboseDefault: config.agents?.defaults?.verboseDefault,\n        browser: {\n          enabled: config.agents?.defaults?.browser?.enabled === true,\n          headless: config.agents?.defaults?.browser?.headless !== false,\n        },\n        maxTaskDurationMs: config.agents?.defaults?.maxTaskDurationMs,\n        maxRequestsPerTurn: config.agents?.defaults?.maxRequestsPerTurn,\n        maxToolFailuresPerTurn: config.agents?.defaults?.maxToolFailuresPerTurn,\n        compaction: config.agents?.defaults?.compaction,\n        pruning: config.agents?.defaults?.pruning,\n        memory: config.agents?.defaults?.memory,\n        sessionSearch: config.agents?.defaults?.sessionSearch,\n        backgroundReview: config.agents?.defaults?.backgroundReview,\n        webExtract: config.agents?.defaults?.webExtract,\n        delegate: config.agents?.defaults?.delegate,\n        executeCode: config.agents?.defaults?.executeCode,\n        systemPromptOverride: config.agents?.defaults?.systemPromptOverride,\n        skills: config.agents?.defaults?.skills,\n        tools: config.agents?.defaults?.tools,\n        params: config.agents?.defaults?.params,\n      },\n    },\n    channels: channelsPayload,\n    providers: Object.fromEntries(\n      await Promise.all(\n        getAllProviders().map(async (provider) => [\n          provider,\n          (await isProviderConfigured(provider)) ? '***' : '',\n        ]),\n      ),\n    ),\n    gateway: {\n      host: config.gateway?.host,\n      port: config.gateway?.port,\n      auth: {\n        mode: config.gateway?.auth?.mode || 'token',\n        token: config.gateway?.auth?.token || '',\n      },\n      heartbeat: {\n        enabled: config.gateway?.heartbeat?.enabled,\n        intervalMs: config.gateway?.heartbeat?.intervalMs,\n        target: config.gateway?.heartbeat?.target,\n        targetChatId: config.gateway?.heartbeat?.targetChatId,\n        prompt: config.gateway?.heartbeat?.prompt,\n        ackMaxChars: config.gateway?.heartbeat?.ackMaxChars,\n        isolatedSession: config.gateway?.heartbeat?.isolatedSession,\n        activeHours: config.gateway?.heartbeat?.activeHours,\n      },\n    },\n    cron: { enabled: config.cron?.enabled },\n    update: {\n      channel: config.update?.channel ?? 'stable',\n    },\n    stt: config.stt,\n    tts: config.tts,\n    tools: safeToolsWebForGet(config),\n    bindings: Array.isArray(config.bindings) ? config.bindings : [],\n  };\n}\n"],"mappings":";;;;;;;kBAIuC;gBAM6C;;AAMpF,eAAsB,0BAA0B,SAAyB;CACvE,MAAM,SAAS,QAAQ;AACvB,KAAI,oBAAoB,CAAC,WAAW,EAClC,+BAA8B,sBAAsB;CAEtD,MAAM,kBAAkB,OAAO,YAC7B,oBAAoB,CAAC,KAAK,WAAW;AACnC,MAAI,OAAO,cACT,QAAO,CAAC,OAAO,IAAI,OAAO,cAAc,mBAAmB,OAAO,CAAC;EAErE,MAAM,aAAa,OAAO,WAAW,OAAO;AAC5C,SAAO,CACL,OAAO,IACP;GACE,SAAS,YAAY,WAAW;GAChC,YAAY,OAAO,OAAO,eAAe,OAAO,CAAC,SAAS;GAC3D,CACF;GACD,CACH;AACD,QAAO;EACL,QAAQ;GACN,WAAW,sBAAsB,OAAO;GACxC,MAAM,iBAAiB,OAAO,CAC3B,QAAQ,MAAM,EAAE,YAAY,MAAM,CAClC,KAAK,OAAO;IACX,IAAI,iBAAiB,EAAE,GAAG;IAC1B,GAAI,OAAO,EAAE,SAAS,YAAY,EAAE,KAAK,MAAM,GAAG,EAAE,MAAM,EAAE,KAAK,MAAM,EAAE,GAAG,EAAE;IAC/E,EAAE;GACL,UAAU;IACR,OAAO,sBAAsB,OAAO,QAAQ,UAAU,MAAM,IAAI;IAChE,gBAAgB,2BAA2B,OAAO,QAAQ,UAAU,MAAM;IAC1E,YAAY,sBAAsB,OAAO,QAAQ,UAAU,WAAW,IAAI;IAC1E,qBAAqB,2BAA2B,OAAO,QAAQ,UAAU,WAAW;IACpF,sBAAsB,sBAAsB,OAAO,QAAQ,UAAU,qBAAqB,IAAI;IAC9F,+BAA+B,2BAC7B,OAAO,QAAQ,UAAU,qBAC1B;IACD,YAAY,OAAO,QAAQ,UAAU;IACrC,WAAW,OAAO,QAAQ,UAAU;IACpC,aAAa,OAAO,QAAQ,UAAU;IACtC,mBAAmB,OAAO,QAAQ,UAAU;IAC5C,WAAW,OAAO,QAAQ,UAAU;IACpC,iBAAiB,OAAO,QAAQ,UAAU;IAC1C,kBAAkB,OAAO,QAAQ,UAAU;IAC3C,gBAAgB,OAAO,QAAQ,UAAU;IACzC,SAAS;KACP,SAAS,OAAO,QAAQ,UAAU,SAAS,YAAY;KACvD,UAAU,OAAO,QAAQ,UAAU,SAAS,aAAa;KAC1D;IACD,mBAAmB,OAAO,QAAQ,UAAU;IAC5C,oBAAoB,OAAO,QAAQ,UAAU;IAC7C,wBAAwB,OAAO,QAAQ,UAAU;IACjD,YAAY,OAAO,QAAQ,UAAU;IACrC,SAAS,OAAO,QAAQ,UAAU;IAClC,QAAQ,OAAO,QAAQ,UAAU;IACjC,eAAe,OAAO,QAAQ,UAAU;IACxC,kBAAkB,OAAO,QAAQ,UAAU;IAC3C,YAAY,OAAO,QAAQ,UAAU;IACrC,UAAU,OAAO,QAAQ,UAAU;IACnC,aAAa,OAAO,QAAQ,UAAU;IACtC,sBAAsB,OAAO,QAAQ,UAAU;IAC/C,QAAQ,OAAO,QAAQ,UAAU;IACjC,OAAO,OAAO,QAAQ,UAAU;IAChC,QAAQ,OAAO,QAAQ,UAAU;IAClC;GACF;EACD,UAAU;EACV,WAAW,OAAO,YAChB,MAAM,QAAQ,IACZ,iBAAiB,CAAC,IAAI,OAAO,aAAa,CACxC,UACC,MAAM,qBAAqB,SAAS,GAAI,QAAQ,GAClD,CAAC,CACH,CACF;EACD,SAAS;GACP,MAAM,OAAO,SAAS;GACtB,MAAM,OAAO,SAAS;GACtB,MAAM;IACJ,MAAM,OAAO,SAAS,MAAM,QAAQ;IACpC,OAAO,OAAO,SAAS,MAAM,SAAS;IACvC;GACD,WAAW;IACT,SAAS,OAAO,SAAS,WAAW;IACpC,YAAY,OAAO,SAAS,WAAW;IACvC,QAAQ,OAAO,SAAS,WAAW;IACnC,cAAc,OAAO,SAAS,WAAW;IACzC,QAAQ,OAAO,SAAS,WAAW;IACnC,aAAa,OAAO,SAAS,WAAW;IACxC,iBAAiB,OAAO,SAAS,WAAW;IAC5C,aAAa,OAAO,SAAS,WAAW;IACzC;GACF;EACD,MAAM,EAAE,SAAS,OAAO,MAAM,SAAS;EACvC,QAAQ,EACN,SAAS,OAAO,QAAQ,WAAW,UACpC;EACD,KAAK,OAAO;EACZ,KAAK,OAAO;EACZ,OAAO,mBAAmB,OAAO;EACjC,UAAU,MAAM,QAAQ,OAAO,SAAS,GAAG,OAAO,WAAW,EAAE;EAChE"}

package/dist/src/gateway/hono/oauth.js

@@ -1,6 +1,6 @@
 import { CredentialResolver, init_credentials } from "../../auth/credentials.js";
-import { anthropicOAuthProvider } from "../../auth/oauth/anthropic.js";
 import { init_providers, isProviderConfigured } from "../../providers/index.js";
+import { anthropicOAuthProvider } from "../../auth/oauth/anthropic.js";
 import { minimaxOAuthProvider } from "../../auth/oauth/minimax.js";
 import { minimaxCnOAuthProvider } from "../../auth/oauth/minimax-cn.js";
 import { kimiCodingOAuthProvider } from "../../auth/oauth/kimi-coding.js";

package/dist/src/gateway/hono/routes/channels.js

@@ -1,4 +1,45 @@
 //#region src/gateway/hono/routes/channels.ts
+const feishuSetupSessions = /* @__PURE__ */ new Map();
+async function startFeishuSetupPolling(sessionKey, service) {
+	const session = feishuSetupSessions.get(sessionKey);
+	if (!session) return;
+	const { pollAppRegistration } = await import("../../../../extensions/feishu/src/auth/app-registration.js");
+	session.phase = "polling";
+	const outcome = await pollAppRegistration({
+		deviceCode: session.deviceCode,
+		intervalSec: session.intervalSec,
+		expireInSec: session.expireInSec,
+		initialDomain: session.domain
+	});
+	if (outcome.status === "success") {
+		session.phase = "done";
+		session.result = outcome.result;
+		try {
+			const fs = await import("node:fs");
+			const configPath = service.getHealth().configPath;
+			const raw = fs.readFileSync(configPath, "utf8");
+			const config = JSON.parse(raw);
+			const existingFeishu = config.channels?.feishu ?? {};
+			config.channels = {
+				...config.channels,
+				feishu: {
+					...existingFeishu,
+					enabled: true,
+					appId: outcome.result.appId,
+					appSecret: outcome.result.appSecret,
+					domain: outcome.result.domain,
+					connectionMode: existingFeishu.connectionMode || "websocket"
+				}
+			};
+			fs.writeFileSync(configPath, JSON.stringify(config, null, 2) + "\n", "utf8");
+			await service.afterFeishuCredentialsPersisted();
+		} catch {}
+	} else {
+		session.phase = "error";
+		session.error = outcome.status === "access_denied" ? "User denied authorization." : outcome.status === "expired" ? "Session expired." : outcome.status === "timeout" ? "Scan timed out." : "message" in outcome ? outcome.message : "Unknown error.";
+	}
+	setTimeout(() => feishuSetupSessions.delete(sessionKey), 3e4);
+}
 function registerChannelRoutes(authenticated, deps) {
 	const { service, strictRateLimitMiddleware } = deps;
 	authenticated.get("/api/channels/status", (c) => {
@@ -53,6 +94,76 @@ function registerChannelRoutes(authenticated, deps) {
 			payload: { status }
 		});
 	});
+	authenticated.post("/api/channels/feishu/setup/start", strictRateLimitMiddleware, async (c) => {
+		const body = await c.req.json().catch(() => ({}));
+		const domain = (body && typeof body === "object" && typeof body.domain === "string" ? body.domain.trim().toLowerCase() : "") === "lark" ? "lark" : "feishu";
+		const { initAppRegistration, beginAppRegistration } = await import("../../../../extensions/feishu/src/auth/app-registration.js");
+		if (!await initAppRegistration(domain)) return c.json({
+			ok: false,
+			error: {
+				code: "FEISHU_SCAN_NOT_SUPPORTED",
+				message: "Scan-to-create is not available."
+			}
+		}, 400);
+		const begin = await beginAppRegistration(domain);
+		const sessionKey = `feishu-setup-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`;
+		feishuSetupSessions.set(sessionKey, {
+			deviceCode: begin.deviceCode,
+			domain,
+			intervalSec: begin.intervalSec,
+			expireInSec: begin.expireInSec,
+			createdAt: Date.now(),
+			phase: "idle"
+		});
+		startFeishuSetupPolling(sessionKey, service);
+		return c.json({
+			ok: true,
+			payload: {
+				sessionKey,
+				qrUrl: begin.qrUrl
+			}
+		});
+	});
+	authenticated.get("/api/channels/feishu/setup/:sessionKey", async (c) => {
+		const sessionKey = c.req.param("sessionKey")?.trim() ?? "";
+		if (!sessionKey) return c.json({
+			ok: false,
+			error: {
+				code: "BAD_REQUEST",
+				message: "Missing sessionKey"
+			}
+		}, 400);
+		const session = feishuSetupSessions.get(sessionKey);
+		if (!session) return c.json({
+			ok: true,
+			payload: { status: {
+				phase: "unknown",
+				message: "Session not found or expired."
+			} }
+		});
+		if (session.phase === "done" && session.result) return c.json({
+			ok: true,
+			payload: { status: {
+				phase: "done",
+				ok: true,
+				appId: session.result.appId,
+				domain: session.result.domain,
+				openId: session.result.openId
+			} }
+		});
+		if (session.phase === "error") return c.json({
+			ok: true,
+			payload: { status: {
+				phase: "done",
+				ok: false,
+				message: session.error ?? "Setup failed."
+			} }
+		});
+		return c.json({
+			ok: true,
+			payload: { status: { phase: "polling" } }
+		});
+	});
 }
 //#endregion
 export { registerChannelRoutes };

package/dist/src/gateway/hono/routes/channels.js.map

@@ -1 +1 @@
-{"version":3,"file":"channels.js","names":[],"sources":["../../../../../src/gateway/hono/routes/channels.ts"],"sourcesContent":["import type { Hono } from 'hono';\n\nimport type { AuthenticatedRouteDeps } from './deps.js';\n\nexport function registerChannelRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  const { service, strictRateLimitMiddleware } = deps;\n\n  authenticated.get('/api/channels/status', (c) => {\n    const channels = service.getChannelsStatus();\n    return c.json({ ok: true, payload: { channels } });\n  });\n\n  authenticated.post('/api/channels/weixin/login/start', strictRateLimitMiddleware, async (c) => {\n    const body = await c.req.json().catch(() => ({}));\n    const account =\n      body && typeof body === 'object' && typeof (body as { account?: unknown }).account === 'string'\n        ? (body as { account: string }).account.trim() || undefined\n        : undefined;\n    const rawTimeout =\n      body && typeof body === 'object' ? (body as { timeoutMs?: unknown }).timeoutMs : undefined;\n    const timeoutMs =\n      typeof rawTimeout === 'number' && Number.isFinite(rawTimeout) ? Math.max(60_000, rawTimeout) : undefined;\n\n    const { startWeixinGatewayQrLogin } = await import('../../../channels/weixin/index.js');\n    const result = await startWeixinGatewayQrLogin({\n      configPath: service.getHealth().configPath,\n      account,\n      timeoutMs,\n      onPersisted: async (r) => {\n        if (r.ok) {\n          await service.afterWeixinCredentialsPersisted();\n        }\n      },\n    });\n\n    if (result.ok === false) {\n      return c.json(\n        { ok: false, error: { code: 'WEIXIN_LOGIN_FAILED', message: result.message } },\n        400,\n      );\n    }\n    return c.json({\n      ok: true,\n      payload: { sessionKey: result.sessionKey, qrcodeUrl: result.qrcodeUrl },\n    });\n  });\n\n  authenticated.get('/api/channels/weixin/login/:sessionKey', async (c) => {\n    const sessionKey = c.req.param('sessionKey')?.trim() ?? '';\n    if (!sessionKey) {\n      return c.json({ ok: false, error: { code: 'BAD_REQUEST', message: 'Missing sessionKey' } }, 400);\n    }\n    const { getWeixinGatewayQrLoginStatus } = await import('../../../channels/weixin/index.js');\n    const status = getWeixinGatewayQrLoginStatus(sessionKey);\n    return c.json({ ok: true, payload: { status } });\n  });\n}\n"],"mappings":";AAIA,SAAgB,sBAAsB,eAAqB,MAAoC;CAC7F,MAAM,EAAE,SAAS,8BAA8B;AAE/C,eAAc,IAAI,yBAAyB,MAAM;EAC/C,MAAM,WAAW,QAAQ,mBAAmB;AAC5C,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,UAAU;GAAE,CAAC;GAClD;AAEF,eAAc,KAAK,oCAAoC,2BAA2B,OAAO,MAAM;EAC7F,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,UACJ,QAAQ,OAAO,SAAS,YAAY,OAAQ,KAA+B,YAAY,WAClF,KAA6B,QAAQ,MAAM,IAAI,KAAA,IAChD,KAAA;EACN,MAAM,aACJ,QAAQ,OAAO,SAAS,WAAY,KAAiC,YAAY,KAAA;EACnF,MAAM,YACJ,OAAO,eAAe,YAAY,OAAO,SAAS,WAAW,GAAG,KAAK,IAAI,KAAQ,WAAW,GAAG,KAAA;EAEjG,MAAM,EAAE,8BAA8B,MAAM,OAAO;EACnD,MAAM,SAAS,MAAM,0BAA0B;GAC7C,YAAY,QAAQ,WAAW,CAAC;GAChC;GACA;GACA,aAAa,OAAO,MAAM;AACxB,QAAI,EAAE,GACJ,OAAM,QAAQ,iCAAiC;;GAGpD,CAAC;AAEF,MAAI,OAAO,OAAO,MAChB,QAAO,EAAE,KACP;GAAE,IAAI;GAAO,OAAO;IAAE,MAAM;IAAuB,SAAS,OAAO;IAAS;GAAE,EAC9E,IACD;AAEH,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IAAE,YAAY,OAAO;IAAY,WAAW,OAAO;IAAW;GACxE,CAAC;GACF;AAEF,eAAc,IAAI,0CAA0C,OAAO,MAAM;EACvE,MAAM,aAAa,EAAE,IAAI,MAAM,aAAa,EAAE,MAAM,IAAI;AACxD,MAAI,CAAC,WACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;IAAE,MAAM;IAAe,SAAS;IAAsB;GAAE,EAAE,IAAI;EAElG,MAAM,EAAE,kCAAkC,MAAM,OAAO;EACvD,MAAM,SAAS,8BAA8B,WAAW;AACxD,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,QAAQ;GAAE,CAAC;GAChD"}
+{"version":3,"file":"channels.js","names":[],"sources":["../../../../../src/gateway/hono/routes/channels.ts"],"sourcesContent":["import type { Hono } from 'hono';\n\nimport type { GatewayService } from '../../service.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\n\ntype FeishuSetupDomain = 'feishu' | 'lark';\n\ninterface FeishuSetupSession {\n  deviceCode: string;\n  domain: FeishuSetupDomain;\n  intervalSec: number;\n  expireInSec: number;\n  createdAt: number;\n  phase: 'idle' | 'polling' | 'scanned' | 'done' | 'error';\n  result?: {\n    appId: string;\n    appSecret: string;\n    domain: FeishuSetupDomain;\n    openId?: string;\n  };\n  error?: string;\n}\n\nconst feishuSetupSessions = new Map<string, FeishuSetupSession>();\n\nasync function startFeishuSetupPolling(sessionKey: string, service: GatewayService): Promise<void> {\n  const session = feishuSetupSessions.get(sessionKey);\n  if (!session) return;\n\n  const { pollAppRegistration } = await import(\n    '../../../../extensions/feishu/src/auth/app-registration.js'\n  );\n\n  session.phase = 'polling';\n\n  const outcome = await pollAppRegistration({\n    deviceCode: session.deviceCode,\n    intervalSec: session.intervalSec,\n    expireInSec: session.expireInSec,\n    initialDomain: session.domain,\n  });\n\n  if (outcome.status === 'success') {\n    session.phase = 'done';\n    session.result = outcome.result;\n    try {\n      const fs = await import('node:fs');\n      const configPath = service.getHealth().configPath;\n      const raw = fs.readFileSync(configPath, 'utf8');\n      const config = JSON.parse(raw) as {\n        channels?: Record<string, unknown>;\n      };\n      const existingFeishu = (config.channels?.feishu ?? {}) as Record<string, unknown>;\n\n      config.channels = {\n        ...config.channels,\n        feishu: {\n          ...existingFeishu,\n          enabled: true,\n          appId: outcome.result.appId,\n          appSecret: outcome.result.appSecret,\n          domain: outcome.result.domain,\n          connectionMode: (existingFeishu.connectionMode as string) || 'websocket',\n        },\n      };\n\n      fs.writeFileSync(configPath, JSON.stringify(config, null, 2) + '\\n', 'utf8');\n      await service.afterFeishuCredentialsPersisted();\n    } catch {\n      // Config write / reload failure is non-blocking; session still carries credentials for debugging.\n    }\n  } else {\n    session.phase = 'error';\n    session.error =\n      outcome.status === 'access_denied'\n        ? 'User denied authorization.'\n        : outcome.status === 'expired'\n          ? 'Session expired.'\n          : outcome.status === 'timeout'\n            ? 'Scan timed out.'\n            : 'message' in outcome\n              ? outcome.message\n              : 'Unknown error.';\n  }\n\n  setTimeout(() => feishuSetupSessions.delete(sessionKey), 30_000);\n}\n\nexport function registerChannelRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  const { service, strictRateLimitMiddleware } = deps;\n\n  authenticated.get('/api/channels/status', (c) => {\n    const channels = service.getChannelsStatus();\n    return c.json({ ok: true, payload: { channels } });\n  });\n\n  authenticated.post('/api/channels/weixin/login/start', strictRateLimitMiddleware, async (c) => {\n    const body = await c.req.json().catch(() => ({}));\n    const account =\n      body && typeof body === 'object' && typeof (body as { account?: unknown }).account === 'string'\n        ? (body as { account: string }).account.trim() || undefined\n        : undefined;\n    const rawTimeout =\n      body && typeof body === 'object' ? (body as { timeoutMs?: unknown }).timeoutMs : undefined;\n    const timeoutMs =\n      typeof rawTimeout === 'number' && Number.isFinite(rawTimeout) ? Math.max(60_000, rawTimeout) : undefined;\n\n    const { startWeixinGatewayQrLogin } = await import('../../../channels/weixin/index.js');\n    const result = await startWeixinGatewayQrLogin({\n      configPath: service.getHealth().configPath,\n      account,\n      timeoutMs,\n      onPersisted: async (r) => {\n        if (r.ok) {\n          await service.afterWeixinCredentialsPersisted();\n        }\n      },\n    });\n\n    if (result.ok === false) {\n      return c.json(\n        { ok: false, error: { code: 'WEIXIN_LOGIN_FAILED', message: result.message } },\n        400,\n      );\n    }\n    return c.json({\n      ok: true,\n      payload: { sessionKey: result.sessionKey, qrcodeUrl: result.qrcodeUrl },\n    });\n  });\n\n  authenticated.get('/api/channels/weixin/login/:sessionKey', async (c) => {\n    const sessionKey = c.req.param('sessionKey')?.trim() ?? '';\n    if (!sessionKey) {\n      return c.json({ ok: false, error: { code: 'BAD_REQUEST', message: 'Missing sessionKey' } }, 400);\n    }\n    const { getWeixinGatewayQrLoginStatus } = await import('../../../channels/weixin/index.js');\n    const status = getWeixinGatewayQrLoginStatus(sessionKey);\n    return c.json({ ok: true, payload: { status } });\n  });\n\n  authenticated.post('/api/channels/feishu/setup/start', strictRateLimitMiddleware, async (c) => {\n    const body = await c.req.json().catch(() => ({}));\n    const rawDomain =\n      body && typeof body === 'object' && typeof (body as { domain?: unknown }).domain === 'string'\n        ? (body as { domain: string }).domain.trim().toLowerCase()\n        : '';\n    const domain: FeishuSetupDomain = rawDomain === 'lark' ? 'lark' : 'feishu';\n\n    const { initAppRegistration, beginAppRegistration } = await import(\n      '../../../../extensions/feishu/src/auth/app-registration.js'\n    );\n\n    const supported = await initAppRegistration(domain);\n    if (!supported) {\n      return c.json(\n        {\n          ok: false,\n          error: { code: 'FEISHU_SCAN_NOT_SUPPORTED', message: 'Scan-to-create is not available.' },\n        },\n        400,\n      );\n    }\n\n    const begin = await beginAppRegistration(domain);\n\n    const sessionKey = `feishu-setup-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`;\n\n    feishuSetupSessions.set(sessionKey, {\n      deviceCode: begin.deviceCode,\n      domain,\n      intervalSec: begin.intervalSec,\n      expireInSec: begin.expireInSec,\n      createdAt: Date.now(),\n      phase: 'idle',\n    });\n\n    void startFeishuSetupPolling(sessionKey, service);\n\n    return c.json({\n      ok: true,\n      payload: { sessionKey, qrUrl: begin.qrUrl },\n    });\n  });\n\n  authenticated.get('/api/channels/feishu/setup/:sessionKey', async (c) => {\n    const sessionKey = c.req.param('sessionKey')?.trim() ?? '';\n    if (!sessionKey) {\n      return c.json({ ok: false, error: { code: 'BAD_REQUEST', message: 'Missing sessionKey' } }, 400);\n    }\n\n    const session = feishuSetupSessions.get(sessionKey);\n    if (!session) {\n      return c.json({\n        ok: true,\n        payload: {\n          status: { phase: 'unknown' as const, message: 'Session not found or expired.' },\n        },\n      });\n    }\n\n    if (session.phase === 'done' && session.result) {\n      return c.json({\n        ok: true,\n        payload: {\n          status: {\n            phase: 'done' as const,\n            ok: true,\n            appId: session.result.appId,\n            domain: session.result.domain,\n            openId: session.result.openId,\n          },\n        },\n      });\n    }\n\n    if (session.phase === 'error') {\n      return c.json({\n        ok: true,\n        payload: {\n          status: {\n            phase: 'done' as const,\n            ok: false,\n            message: session.error ?? 'Setup failed.',\n          },\n        },\n      });\n    }\n\n    return c.json({\n      ok: true,\n      payload: {\n        status: { phase: 'polling' as const },\n      },\n    });\n  });\n}\n"],"mappings":";AAuBA,MAAM,sCAAsB,IAAI,KAAiC;AAEjE,eAAe,wBAAwB,YAAoB,SAAwC;CACjG,MAAM,UAAU,oBAAoB,IAAI,WAAW;AACnD,KAAI,CAAC,QAAS;CAEd,MAAM,EAAE,wBAAwB,MAAM,OACpC;AAGF,SAAQ,QAAQ;CAEhB,MAAM,UAAU,MAAM,oBAAoB;EACxC,YAAY,QAAQ;EACpB,aAAa,QAAQ;EACrB,aAAa,QAAQ;EACrB,eAAe,QAAQ;EACxB,CAAC;AAEF,KAAI,QAAQ,WAAW,WAAW;AAChC,UAAQ,QAAQ;AAChB,UAAQ,SAAS,QAAQ;AACzB,MAAI;GACF,MAAM,KAAK,MAAM,OAAO;GACxB,MAAM,aAAa,QAAQ,WAAW,CAAC;GACvC,MAAM,MAAM,GAAG,aAAa,YAAY,OAAO;GAC/C,MAAM,SAAS,KAAK,MAAM,IAAI;GAG9B,MAAM,iBAAkB,OAAO,UAAU,UAAU,EAAE;AAErD,UAAO,WAAW;IAChB,GAAG,OAAO;IACV,QAAQ;KACN,GAAG;KACH,SAAS;KACT,OAAO,QAAQ,OAAO;KACtB,WAAW,QAAQ,OAAO;KAC1B,QAAQ,QAAQ,OAAO;KACvB,gBAAiB,eAAe,kBAA6B;KAC9D;IACF;AAED,MAAG,cAAc,YAAY,KAAK,UAAU,QAAQ,MAAM,EAAE,GAAG,MAAM,OAAO;AAC5E,SAAM,QAAQ,iCAAiC;UACzC;QAGH;AACL,UAAQ,QAAQ;AAChB,UAAQ,QACN,QAAQ,WAAW,kBACf,+BACA,QAAQ,WAAW,YACjB,qBACA,QAAQ,WAAW,YACjB,oBACA,aAAa,UACX,QAAQ,UACR;;AAGd,kBAAiB,oBAAoB,OAAO,WAAW,EAAE,IAAO;;AAGlE,SAAgB,sBAAsB,eAAqB,MAAoC;CAC7F,MAAM,EAAE,SAAS,8BAA8B;AAE/C,eAAc,IAAI,yBAAyB,MAAM;EAC/C,MAAM,WAAW,QAAQ,mBAAmB;AAC5C,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,UAAU;GAAE,CAAC;GAClD;AAEF,eAAc,KAAK,oCAAoC,2BAA2B,OAAO,MAAM;EAC7F,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,UACJ,QAAQ,OAAO,SAAS,YAAY,OAAQ,KAA+B,YAAY,WAClF,KAA6B,QAAQ,MAAM,IAAI,KAAA,IAChD,KAAA;EACN,MAAM,aACJ,QAAQ,OAAO,SAAS,WAAY,KAAiC,YAAY,KAAA;EACnF,MAAM,YACJ,OAAO,eAAe,YAAY,OAAO,SAAS,WAAW,GAAG,KAAK,IAAI,KAAQ,WAAW,GAAG,KAAA;EAEjG,MAAM,EAAE,8BAA8B,MAAM,OAAO;EACnD,MAAM,SAAS,MAAM,0BAA0B;GAC7C,YAAY,QAAQ,WAAW,CAAC;GAChC;GACA;GACA,aAAa,OAAO,MAAM;AACxB,QAAI,EAAE,GACJ,OAAM,QAAQ,iCAAiC;;GAGpD,CAAC;AAEF,MAAI,OAAO,OAAO,MAChB,QAAO,EAAE,KACP;GAAE,IAAI;GAAO,OAAO;IAAE,MAAM;IAAuB,SAAS,OAAO;IAAS;GAAE,EAC9E,IACD;AAEH,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IAAE,YAAY,OAAO;IAAY,WAAW,OAAO;IAAW;GACxE,CAAC;GACF;AAEF,eAAc,IAAI,0CAA0C,OAAO,MAAM;EACvE,MAAM,aAAa,EAAE,IAAI,MAAM,aAAa,EAAE,MAAM,IAAI;AACxD,MAAI,CAAC,WACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;IAAE,MAAM;IAAe,SAAS;IAAsB;GAAE,EAAE,IAAI;EAElG,MAAM,EAAE,kCAAkC,MAAM,OAAO;EACvD,MAAM,SAAS,8BAA8B,WAAW;AACxD,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,QAAQ;GAAE,CAAC;GAChD;AAEF,eAAc,KAAK,oCAAoC,2BAA2B,OAAO,MAAM;EAC7F,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EAKjD,MAAM,UAHJ,QAAQ,OAAO,SAAS,YAAY,OAAQ,KAA8B,WAAW,WAChF,KAA4B,OAAO,MAAM,CAAC,aAAa,GACxD,QAC0C,SAAS,SAAS;EAElE,MAAM,EAAE,qBAAqB,yBAAyB,MAAM,OAC1D;AAIF,MAAI,CAAC,MADmB,oBAAoB,OAAO,CAEjD,QAAO,EAAE,KACP;GACE,IAAI;GACJ,OAAO;IAAE,MAAM;IAA6B,SAAS;IAAoC;GAC1F,EACD,IACD;EAGH,MAAM,QAAQ,MAAM,qBAAqB,OAAO;EAEhD,MAAM,aAAa,gBAAgB,KAAK,KAAK,CAAC,GAAG,KAAK,QAAQ,CAAC,SAAS,GAAG,CAAC,MAAM,GAAG,EAAE;AAEvF,sBAAoB,IAAI,YAAY;GAClC,YAAY,MAAM;GAClB;GACA,aAAa,MAAM;GACnB,aAAa,MAAM;GACnB,WAAW,KAAK,KAAK;GACrB,OAAO;GACR,CAAC;AAEG,0BAAwB,YAAY,QAAQ;AAEjD,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IAAE;IAAY,OAAO,MAAM;IAAO;GAC5C,CAAC;GACF;AAEF,eAAc,IAAI,0CAA0C,OAAO,MAAM;EACvE,MAAM,aAAa,EAAE,IAAI,MAAM,aAAa,EAAE,MAAM,IAAI;AACxD,MAAI,CAAC,WACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;IAAE,MAAM;IAAe,SAAS;IAAsB;GAAE,EAAE,IAAI;EAGlG,MAAM,UAAU,oBAAoB,IAAI,WAAW;AACnD,MAAI,CAAC,QACH,QAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS,EACP,QAAQ;IAAE,OAAO;IAAoB,SAAS;IAAiC,EAChF;GACF,CAAC;AAGJ,MAAI,QAAQ,UAAU,UAAU,QAAQ,OACtC,QAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS,EACP,QAAQ;IACN,OAAO;IACP,IAAI;IACJ,OAAO,QAAQ,OAAO;IACtB,QAAQ,QAAQ,OAAO;IACvB,QAAQ,QAAQ,OAAO;IACxB,EACF;GACF,CAAC;AAGJ,MAAI,QAAQ,UAAU,QACpB,QAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS,EACP,QAAQ;IACN,OAAO;IACP,IAAI;IACJ,SAAS,QAAQ,SAAS;IAC3B,EACF;GACF,CAAC;AAGJ,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS,EACP,QAAQ,EAAE,OAAO,WAAoB,EACtC;GACF,CAAC;GACF"}

package/dist/src/gateway/hono/routes/commands-skills.js

@@ -4,18 +4,29 @@ import "../../../chat-commands/index.js";
 function registerCommandsSkillsRoutes(authenticated, deps) {
 	const { service } = deps;
 	authenticated.get("/api/commands", (c) => {
-		const commands = commandRegistry.list().filter((cmd) => cmd.scope.includes("global") || cmd.scope.includes("private")).map((cmd) => ({
+		const all = commandRegistry.list();
+		const commands = all.filter((cmd) => cmd.scope.includes("global") || cmd.scope.includes("private")).map((cmd) => ({
 			id: cmd.id,
 			name: cmd.name,
 			aliases: cmd.aliases ?? [],
 			description: cmd.description,
 			category: cmd.category,
+			scope: cmd.scope,
 			acceptsArgs: cmd.acceptsArgs ?? false,
 			examples: cmd.examples ?? []
 		}));
+		const extensionCommands = all.filter((cmd) => cmd.category === "extension").map((cmd) => ({
+			id: cmd.id,
+			name: cmd.name,
+			description: cmd.description,
+			extensionId: cmd.id.startsWith("ext.") ? cmd.id.split(".")[1] : void 0
+		}));
 		return c.json({
 			ok: true,
-			payload: { commands }
+			payload: {
+				commands,
+				extensionCommands
+			}
 		});
 	});
 	authenticated.get("/api/skills", (c) => {

package/dist/src/gateway/hono/routes/commands-skills.js.map

@@ -1 +1 @@
-{"version":3,"file":"commands-skills.js","names":[],"sources":["../../../../../src/gateway/hono/routes/commands-skills.ts"],"sourcesContent":["import type { Hono } from 'hono';\n\nimport { commandRegistry } from '../../../chat-commands/index.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\n\nexport function registerCommandsSkillsRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  const { service } = deps;\n\n  // ========== Chat slash commands (CommandRegistry) ==========\n\n  authenticated.get('/api/commands', (c) => {\n    const commands = commandRegistry\n      .list()\n      .filter((cmd) => cmd.scope.includes('global') || cmd.scope.includes('private'))\n      .map((cmd) => ({\n        id: cmd.id,\n        name: cmd.name,\n        aliases: cmd.aliases ?? [],\n        description: cmd.description,\n        category: cmd.category,\n        acceptsArgs: cmd.acceptsArgs ?? false,\n        examples: cmd.examples ?? [],\n      }));\n    return c.json({ ok: true, payload: { commands } });\n  });\n\n  // ========== Skills (managed global skills under ~/.xopc/skills) ==========\n\n  authenticated.get('/api/skills', (c) => {\n    const payload = service.getSkillsApi();\n    return c.json({ ok: true, payload });\n  });\n\n  authenticated.get('/api/skills/:skillName/content', (c) => {\n    const raw = c.req.param('skillName');\n    if (!raw) {\n      return c.json({ ok: false, error: 'Missing skill name' }, 400);\n    }\n    let skillName: string;\n    try {\n      skillName = decodeURIComponent(raw);\n    } catch {\n      return c.json({ ok: false, error: 'Invalid skill name' }, 400);\n    }\n    const data = service.getSkillMarkdownSource(skillName);\n    if (!data) {\n      return c.json({ ok: false, error: 'Skill not found' }, 404);\n    }\n    return c.json({ ok: true, payload: data });\n  });\n\n  authenticated.post('/api/skills/reload', (c) => {\n    service.reloadSkillsFromDisk();\n    return c.json({ ok: true });\n  });\n\n  authenticated.patch('/api/skills/enabled', async (c) => {\n    let body: { skillName?: unknown; enabled?: unknown };\n    try {\n      body = (await c.req.json()) as { skillName?: unknown; enabled?: unknown };\n    } catch {\n      return c.json({ ok: false, error: 'Invalid JSON' }, 400);\n    }\n    const skillName = typeof body.skillName === 'string' ? body.skillName.trim() : '';\n    const enabled = body.enabled;\n    if (!skillName || typeof enabled !== 'boolean') {\n      return c.json({ ok: false, error: 'Expected { skillName: string, enabled: boolean }' }, 400);\n    }\n    try {\n      service.patchSkillEnabled(skillName, enabled);\n      return c.json({ ok: true });\n    } catch (err) {\n      return c.json(\n        { ok: false, error: err instanceof Error ? err.message : 'Update failed' },\n        400,\n      );\n    }\n  });\n\n  authenticated.get('/api/skills/marketplace', async (c) => {\n    const q = c.req.query('q')?.trim() ?? '';\n    const pageRaw = c.req.query('page');\n    const pageSizeRaw = c.req.query('pageSize');\n    const sortRaw = c.req.query('sort');\n    const page = pageRaw != null && pageRaw !== '' ? Math.max(1, Number(pageRaw) || 1) : undefined;\n    const pageSize =\n      pageSizeRaw != null && pageSizeRaw !== ''\n        ? Math.min(50, Math.max(1, Number(pageSizeRaw) || 20))\n        : undefined;\n    const sort =\n      sortRaw === 'newest' || sortRaw === 'downloads' ? sortRaw : undefined;\n    try {\n      const payload = await service.fetchSkillsMarketplaceCatalog({\n        q: q || undefined,\n        page,\n        pageSize,\n        sort,\n      });\n      return c.json({ ok: true, payload });\n    } catch (err) {\n      return c.json(\n        { ok: false, error: err instanceof Error ? err.message : 'Marketplace request failed' },\n        502,\n      );\n    }\n  });\n\n  authenticated.get('/api/skills/marketplace/packages/:pkgName', async (c) => {\n    const raw = c.req.param('pkgName');\n    if (!raw) {\n      return c.json({ ok: false, error: 'Missing package name' }, 400);\n    }\n    let pkgName: string;\n    try {\n      pkgName = decodeURIComponent(raw);\n    } catch {\n      return c.json({ ok: false, error: 'Invalid package name' }, 400);\n    }\n    try {\n      const payload = await service.fetchSkillsMarketplacePackageDetail(pkgName);\n      return c.json({ ok: true, payload });\n    } catch (err) {\n      return c.json(\n        { ok: false, error: err instanceof Error ? err.message : 'Marketplace request failed' },\n        502,\n      );\n    }\n  });\n\n  authenticated.post('/api/skills/marketplace/install', async (c) => {\n    let body: { name?: unknown; version?: unknown; overwrite?: unknown };\n    try {\n      body = (await c.req.json()) as typeof body;\n    } catch {\n      return c.json({ ok: false, error: 'Invalid JSON' }, 400);\n    }\n    const name = typeof body.name === 'string' ? body.name.trim() : '';\n    const version = typeof body.version === 'string' ? body.version.trim() : undefined;\n    const overwrite =\n      body.overwrite === true ||\n      body.overwrite === 'true' ||\n      body.overwrite === '1';\n    if (!name) {\n      return c.json({ ok: false, error: 'Expected { name: string, version?: string, overwrite?: boolean }' }, 400);\n    }\n    try {\n      const payload = await service.installSkillFromMarketplace({ name, version, overwrite });\n      return c.json({ ok: true, payload });\n    } catch (err) {\n      return c.json(\n        { ok: false, error: err instanceof Error ? err.message : 'Install failed' },\n        400,\n      );\n    }\n  });\n\n  authenticated.post('/api/skills/upload', async (c) => {\n    let body: Record<string, unknown>;\n    try {\n      body = await c.req.parseBody({ all: true });\n    } catch {\n      return c.json({ ok: false, error: 'Invalid multipart body' }, 400);\n    }\n    const file = body['file'];\n    if (!file || typeof file !== 'object') {\n      return c.json({ ok: false, error: 'Missing file field' }, 400);\n    }\n    let buf: Buffer;\n    if (file instanceof File) {\n      buf = Buffer.from(await file.arrayBuffer());\n    } else if (typeof (file as Blob).arrayBuffer === 'function') {\n      buf = Buffer.from(await (file as Blob).arrayBuffer());\n    } else {\n      return c.json({ ok: false, error: 'Invalid file upload' }, 400);\n    }\n    const skillIdRaw = body['skillId'];\n    const overwriteRaw = body['overwrite'];\n    const skillId = typeof skillIdRaw === 'string' && skillIdRaw.trim() ? skillIdRaw.trim() : undefined;\n    const overwrite =\n      overwriteRaw === 'true' ||\n      overwriteRaw === true ||\n      overwriteRaw === '1';\n\n    try {\n      const result = service.installManagedSkillZip(buf, { skillId, overwrite });\n      return c.json({ ok: true, payload: result });\n    } catch (err) {\n      return c.json(\n        { ok: false, error: err instanceof Error ? err.message : 'Install failed' },\n        400,\n      );\n    }\n  });\n\n  authenticated.delete('/api/skills/:id', (c) => {\n    const id = c.req.param('id');\n    if (!id) {\n      return c.json({ ok: false, error: 'Missing id' }, 400);\n    }\n    try {\n      service.deleteManagedSkill(id);\n      return c.json({ ok: true });\n    } catch (err) {\n      return c.json(\n        { ok: false, error: err instanceof Error ? err.message : 'Delete failed' },\n        400,\n      );\n    }\n  });\n}\n"],"mappings":";;;AAKA,SAAgB,6BAA6B,eAAqB,MAAoC;CACpG,MAAM,EAAE,YAAY;AAIpB,eAAc,IAAI,kBAAkB,MAAM;EACxC,MAAM,WAAW,gBACd,MAAM,CACN,QAAQ,QAAQ,IAAI,MAAM,SAAS,SAAS,IAAI,IAAI,MAAM,SAAS,UAAU,CAAC,CAC9E,KAAK,SAAS;GACb,IAAI,IAAI;GACR,MAAM,IAAI;GACV,SAAS,IAAI,WAAW,EAAE;GAC1B,aAAa,IAAI;GACjB,UAAU,IAAI;GACd,aAAa,IAAI,eAAe;GAChC,UAAU,IAAI,YAAY,EAAE;GAC7B,EAAE;AACL,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,UAAU;GAAE,CAAC;GAClD;AAIF,eAAc,IAAI,gBAAgB,MAAM;EACtC,MAAM,UAAU,QAAQ,cAAc;AACtC,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM;GAAS,CAAC;GACpC;AAEF,eAAc,IAAI,mCAAmC,MAAM;EACzD,MAAM,MAAM,EAAE,IAAI,MAAM,YAAY;AACpC,MAAI,CAAC,IACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAsB,EAAE,IAAI;EAEhE,IAAI;AACJ,MAAI;AACF,eAAY,mBAAmB,IAAI;UAC7B;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAAsB,EAAE,IAAI;;EAEhE,MAAM,OAAO,QAAQ,uBAAuB,UAAU;AACtD,MAAI,CAAC,KACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAmB,EAAE,IAAI;AAE7D,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;GAAM,CAAC;GAC1C;AAEF,eAAc,KAAK,uBAAuB,MAAM;AAC9C,UAAQ,sBAAsB;AAC9B,SAAO,EAAE,KAAK,EAAE,IAAI,MAAM,CAAC;GAC3B;AAEF,eAAc,MAAM,uBAAuB,OAAO,MAAM;EACtD,IAAI;AACJ,MAAI;AACF,UAAQ,MAAM,EAAE,IAAI,MAAM;UACpB;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAAgB,EAAE,IAAI;;EAE1D,MAAM,YAAY,OAAO,KAAK,cAAc,WAAW,KAAK,UAAU,MAAM,GAAG;EAC/E,MAAM,UAAU,KAAK;AACrB,MAAI,CAAC,aAAa,OAAO,YAAY,UACnC,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAoD,EAAE,IAAI;AAE9F,MAAI;AACF,WAAQ,kBAAkB,WAAW,QAAQ;AAC7C,UAAO,EAAE,KAAK,EAAE,IAAI,MAAM,CAAC;WACpB,KAAK;AACZ,UAAO,EAAE,KACP;IAAE,IAAI;IAAO,OAAO,eAAe,QAAQ,IAAI,UAAU;IAAiB,EAC1E,IACD;;GAEH;AAEF,eAAc,IAAI,2BAA2B,OAAO,MAAM;EACxD,MAAM,IAAI,EAAE,IAAI,MAAM,IAAI,EAAE,MAAM,IAAI;EACtC,MAAM,UAAU,EAAE,IAAI,MAAM,OAAO;EACnC,MAAM,cAAc,EAAE,IAAI,MAAM,WAAW;EAC3C,MAAM,UAAU,EAAE,IAAI,MAAM,OAAO;EACnC,MAAM,OAAO,WAAW,QAAQ,YAAY,KAAK,KAAK,IAAI,GAAG,OAAO,QAAQ,IAAI,EAAE,GAAG,KAAA;EACrF,MAAM,WACJ,eAAe,QAAQ,gBAAgB,KACnC,KAAK,IAAI,IAAI,KAAK,IAAI,GAAG,OAAO,YAAY,IAAI,GAAG,CAAC,GACpD,KAAA;EACN,MAAM,OACJ,YAAY,YAAY,YAAY,cAAc,UAAU,KAAA;AAC9D,MAAI;GACF,MAAM,UAAU,MAAM,QAAQ,8BAA8B;IAC1D,GAAG,KAAK,KAAA;IACR;IACA;IACA;IACD,CAAC;AACF,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM;IAAS,CAAC;WAC7B,KAAK;AACZ,UAAO,EAAE,KACP;IAAE,IAAI;IAAO,OAAO,eAAe,QAAQ,IAAI,UAAU;IAA8B,EACvF,IACD;;GAEH;AAEF,eAAc,IAAI,6CAA6C,OAAO,MAAM;EAC1E,MAAM,MAAM,EAAE,IAAI,MAAM,UAAU;AAClC,MAAI,CAAC,IACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAwB,EAAE,IAAI;EAElE,IAAI;AACJ,MAAI;AACF,aAAU,mBAAmB,IAAI;UAC3B;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAAwB,EAAE,IAAI;;AAElE,MAAI;GACF,MAAM,UAAU,MAAM,QAAQ,oCAAoC,QAAQ;AAC1E,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM;IAAS,CAAC;WAC7B,KAAK;AACZ,UAAO,EAAE,KACP;IAAE,IAAI;IAAO,OAAO,eAAe,QAAQ,IAAI,UAAU;IAA8B,EACvF,IACD;;GAEH;AAEF,eAAc,KAAK,mCAAmC,OAAO,MAAM;EACjE,IAAI;AACJ,MAAI;AACF,UAAQ,MAAM,EAAE,IAAI,MAAM;UACpB;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAAgB,EAAE,IAAI;;EAE1D,MAAM,OAAO,OAAO,KAAK,SAAS,WAAW,KAAK,KAAK,MAAM,GAAG;EAChE,MAAM,UAAU,OAAO,KAAK,YAAY,WAAW,KAAK,QAAQ,MAAM,GAAG,KAAA;EACzE,MAAM,YACJ,KAAK,cAAc,QACnB,KAAK,cAAc,UACnB,KAAK,cAAc;AACrB,MAAI,CAAC,KACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAoE,EAAE,IAAI;AAE9G,MAAI;GACF,MAAM,UAAU,MAAM,QAAQ,4BAA4B;IAAE;IAAM;IAAS;IAAW,CAAC;AACvF,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM;IAAS,CAAC;WAC7B,KAAK;AACZ,UAAO,EAAE,KACP;IAAE,IAAI;IAAO,OAAO,eAAe,QAAQ,IAAI,UAAU;IAAkB,EAC3E,IACD;;GAEH;AAEF,eAAc,KAAK,sBAAsB,OAAO,MAAM;EACpD,IAAI;AACJ,MAAI;AACF,UAAO,MAAM,EAAE,IAAI,UAAU,EAAE,KAAK,MAAM,CAAC;UACrC;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAA0B,EAAE,IAAI;;EAEpE,MAAM,OAAO,KAAK;AAClB,MAAI,CAAC,QAAQ,OAAO,SAAS,SAC3B,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAsB,EAAE,IAAI;EAEhE,IAAI;AACJ,MAAI,gBAAgB,KAClB,OAAM,OAAO,KAAK,MAAM,KAAK,aAAa,CAAC;WAClC,OAAQ,KAAc,gBAAgB,WAC/C,OAAM,OAAO,KAAK,MAAO,KAAc,aAAa,CAAC;MAErD,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAuB,EAAE,IAAI;EAEjE,MAAM,aAAa,KAAK;EACxB,MAAM,eAAe,KAAK;EAC1B,MAAM,UAAU,OAAO,eAAe,YAAY,WAAW,MAAM,GAAG,WAAW,MAAM,GAAG,KAAA;EAC1F,MAAM,YACJ,iBAAiB,UACjB,iBAAiB,QACjB,iBAAiB;AAEnB,MAAI;GACF,MAAM,SAAS,QAAQ,uBAAuB,KAAK;IAAE;IAAS;IAAW,CAAC;AAC1E,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS;IAAQ,CAAC;WACrC,KAAK;AACZ,UAAO,EAAE,KACP;IAAE,IAAI;IAAO,OAAO,eAAe,QAAQ,IAAI,UAAU;IAAkB,EAC3E,IACD;;GAEH;AAEF,eAAc,OAAO,oBAAoB,MAAM;EAC7C,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK;AAC5B,MAAI,CAAC,GACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAc,EAAE,IAAI;AAExD,MAAI;AACF,WAAQ,mBAAmB,GAAG;AAC9B,UAAO,EAAE,KAAK,EAAE,IAAI,MAAM,CAAC;WACpB,KAAK;AACZ,UAAO,EAAE,KACP;IAAE,IAAI;IAAO,OAAO,eAAe,QAAQ,IAAI,UAAU;IAAiB,EAC1E,IACD;;GAEH"}
+{"version":3,"file":"commands-skills.js","names":[],"sources":["../../../../../src/gateway/hono/routes/commands-skills.ts"],"sourcesContent":["import type { Hono } from 'hono';\n\nimport { commandRegistry } from '../../../chat-commands/index.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\n\nexport function registerCommandsSkillsRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  const { service } = deps;\n\n  // ========== Chat slash commands (CommandRegistry) ==========\n\n  authenticated.get('/api/commands', (c) => {\n    const all = commandRegistry.list();\n    const commands = all\n      .filter((cmd) => cmd.scope.includes('global') || cmd.scope.includes('private'))\n      .map((cmd) => ({\n        id: cmd.id,\n        name: cmd.name,\n        aliases: cmd.aliases ?? [],\n        description: cmd.description,\n        category: cmd.category,\n        scope: cmd.scope,\n        acceptsArgs: cmd.acceptsArgs ?? false,\n        examples: cmd.examples ?? [],\n      }));\n    const extensionCommands = all\n      .filter((cmd) => cmd.category === 'extension')\n      .map((cmd) => ({\n        id: cmd.id,\n        name: cmd.name,\n        description: cmd.description,\n        extensionId: cmd.id.startsWith('ext.') ? cmd.id.split('.')[1] : undefined,\n      }));\n    return c.json({ ok: true, payload: { commands, extensionCommands } });\n  });\n\n  // ========== Skills (managed global skills under ~/.xopc/skills) ==========\n\n  authenticated.get('/api/skills', (c) => {\n    const payload = service.getSkillsApi();\n    return c.json({ ok: true, payload });\n  });\n\n  authenticated.get('/api/skills/:skillName/content', (c) => {\n    const raw = c.req.param('skillName');\n    if (!raw) {\n      return c.json({ ok: false, error: 'Missing skill name' }, 400);\n    }\n    let skillName: string;\n    try {\n      skillName = decodeURIComponent(raw);\n    } catch {\n      return c.json({ ok: false, error: 'Invalid skill name' }, 400);\n    }\n    const data = service.getSkillMarkdownSource(skillName);\n    if (!data) {\n      return c.json({ ok: false, error: 'Skill not found' }, 404);\n    }\n    return c.json({ ok: true, payload: data });\n  });\n\n  authenticated.post('/api/skills/reload', (c) => {\n    service.reloadSkillsFromDisk();\n    return c.json({ ok: true });\n  });\n\n  authenticated.patch('/api/skills/enabled', async (c) => {\n    let body: { skillName?: unknown; enabled?: unknown };\n    try {\n      body = (await c.req.json()) as { skillName?: unknown; enabled?: unknown };\n    } catch {\n      return c.json({ ok: false, error: 'Invalid JSON' }, 400);\n    }\n    const skillName = typeof body.skillName === 'string' ? body.skillName.trim() : '';\n    const enabled = body.enabled;\n    if (!skillName || typeof enabled !== 'boolean') {\n      return c.json({ ok: false, error: 'Expected { skillName: string, enabled: boolean }' }, 400);\n    }\n    try {\n      service.patchSkillEnabled(skillName, enabled);\n      return c.json({ ok: true });\n    } catch (err) {\n      return c.json(\n        { ok: false, error: err instanceof Error ? err.message : 'Update failed' },\n        400,\n      );\n    }\n  });\n\n  authenticated.get('/api/skills/marketplace', async (c) => {\n    const q = c.req.query('q')?.trim() ?? '';\n    const pageRaw = c.req.query('page');\n    const pageSizeRaw = c.req.query('pageSize');\n    const sortRaw = c.req.query('sort');\n    const page = pageRaw != null && pageRaw !== '' ? Math.max(1, Number(pageRaw) || 1) : undefined;\n    const pageSize =\n      pageSizeRaw != null && pageSizeRaw !== ''\n        ? Math.min(50, Math.max(1, Number(pageSizeRaw) || 20))\n        : undefined;\n    const sort =\n      sortRaw === 'newest' || sortRaw === 'downloads' ? sortRaw : undefined;\n    try {\n      const payload = await service.fetchSkillsMarketplaceCatalog({\n        q: q || undefined,\n        page,\n        pageSize,\n        sort,\n      });\n      return c.json({ ok: true, payload });\n    } catch (err) {\n      return c.json(\n        { ok: false, error: err instanceof Error ? err.message : 'Marketplace request failed' },\n        502,\n      );\n    }\n  });\n\n  authenticated.get('/api/skills/marketplace/packages/:pkgName', async (c) => {\n    const raw = c.req.param('pkgName');\n    if (!raw) {\n      return c.json({ ok: false, error: 'Missing package name' }, 400);\n    }\n    let pkgName: string;\n    try {\n      pkgName = decodeURIComponent(raw);\n    } catch {\n      return c.json({ ok: false, error: 'Invalid package name' }, 400);\n    }\n    try {\n      const payload = await service.fetchSkillsMarketplacePackageDetail(pkgName);\n      return c.json({ ok: true, payload });\n    } catch (err) {\n      return c.json(\n        { ok: false, error: err instanceof Error ? err.message : 'Marketplace request failed' },\n        502,\n      );\n    }\n  });\n\n  authenticated.post('/api/skills/marketplace/install', async (c) => {\n    let body: { name?: unknown; version?: unknown; overwrite?: unknown };\n    try {\n      body = (await c.req.json()) as typeof body;\n    } catch {\n      return c.json({ ok: false, error: 'Invalid JSON' }, 400);\n    }\n    const name = typeof body.name === 'string' ? body.name.trim() : '';\n    const version = typeof body.version === 'string' ? body.version.trim() : undefined;\n    const overwrite =\n      body.overwrite === true ||\n      body.overwrite === 'true' ||\n      body.overwrite === '1';\n    if (!name) {\n      return c.json({ ok: false, error: 'Expected { name: string, version?: string, overwrite?: boolean }' }, 400);\n    }\n    try {\n      const payload = await service.installSkillFromMarketplace({ name, version, overwrite });\n      return c.json({ ok: true, payload });\n    } catch (err) {\n      return c.json(\n        { ok: false, error: err instanceof Error ? err.message : 'Install failed' },\n        400,\n      );\n    }\n  });\n\n  authenticated.post('/api/skills/upload', async (c) => {\n    let body: Record<string, unknown>;\n    try {\n      body = await c.req.parseBody({ all: true });\n    } catch {\n      return c.json({ ok: false, error: 'Invalid multipart body' }, 400);\n    }\n    const file = body['file'];\n    if (!file || typeof file !== 'object') {\n      return c.json({ ok: false, error: 'Missing file field' }, 400);\n    }\n    let buf: Buffer;\n    if (file instanceof File) {\n      buf = Buffer.from(await file.arrayBuffer());\n    } else if (typeof (file as Blob).arrayBuffer === 'function') {\n      buf = Buffer.from(await (file as Blob).arrayBuffer());\n    } else {\n      return c.json({ ok: false, error: 'Invalid file upload' }, 400);\n    }\n    const skillIdRaw = body['skillId'];\n    const overwriteRaw = body['overwrite'];\n    const skillId = typeof skillIdRaw === 'string' && skillIdRaw.trim() ? skillIdRaw.trim() : undefined;\n    const overwrite =\n      overwriteRaw === 'true' ||\n      overwriteRaw === true ||\n      overwriteRaw === '1';\n\n    try {\n      const result = service.installManagedSkillZip(buf, { skillId, overwrite });\n      return c.json({ ok: true, payload: result });\n    } catch (err) {\n      return c.json(\n        { ok: false, error: err instanceof Error ? err.message : 'Install failed' },\n        400,\n      );\n    }\n  });\n\n  authenticated.delete('/api/skills/:id', (c) => {\n    const id = c.req.param('id');\n    if (!id) {\n      return c.json({ ok: false, error: 'Missing id' }, 400);\n    }\n    try {\n      service.deleteManagedSkill(id);\n      return c.json({ ok: true });\n    } catch (err) {\n      return c.json(\n        { ok: false, error: err instanceof Error ? err.message : 'Delete failed' },\n        400,\n      );\n    }\n  });\n}\n"],"mappings":";;;AAKA,SAAgB,6BAA6B,eAAqB,MAAoC;CACpG,MAAM,EAAE,YAAY;AAIpB,eAAc,IAAI,kBAAkB,MAAM;EACxC,MAAM,MAAM,gBAAgB,MAAM;EAClC,MAAM,WAAW,IACd,QAAQ,QAAQ,IAAI,MAAM,SAAS,SAAS,IAAI,IAAI,MAAM,SAAS,UAAU,CAAC,CAC9E,KAAK,SAAS;GACb,IAAI,IAAI;GACR,MAAM,IAAI;GACV,SAAS,IAAI,WAAW,EAAE;GAC1B,aAAa,IAAI;GACjB,UAAU,IAAI;GACd,OAAO,IAAI;GACX,aAAa,IAAI,eAAe;GAChC,UAAU,IAAI,YAAY,EAAE;GAC7B,EAAE;EACL,MAAM,oBAAoB,IACvB,QAAQ,QAAQ,IAAI,aAAa,YAAY,CAC7C,KAAK,SAAS;GACb,IAAI,IAAI;GACR,MAAM,IAAI;GACV,aAAa,IAAI;GACjB,aAAa,IAAI,GAAG,WAAW,OAAO,GAAG,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,KAAA;GACjE,EAAE;AACL,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;IAAE;IAAU;IAAmB;GAAE,CAAC;GACrE;AAIF,eAAc,IAAI,gBAAgB,MAAM;EACtC,MAAM,UAAU,QAAQ,cAAc;AACtC,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM;GAAS,CAAC;GACpC;AAEF,eAAc,IAAI,mCAAmC,MAAM;EACzD,MAAM,MAAM,EAAE,IAAI,MAAM,YAAY;AACpC,MAAI,CAAC,IACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAsB,EAAE,IAAI;EAEhE,IAAI;AACJ,MAAI;AACF,eAAY,mBAAmB,IAAI;UAC7B;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAAsB,EAAE,IAAI;;EAEhE,MAAM,OAAO,QAAQ,uBAAuB,UAAU;AACtD,MAAI,CAAC,KACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAmB,EAAE,IAAI;AAE7D,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;GAAM,CAAC;GAC1C;AAEF,eAAc,KAAK,uBAAuB,MAAM;AAC9C,UAAQ,sBAAsB;AAC9B,SAAO,EAAE,KAAK,EAAE,IAAI,MAAM,CAAC;GAC3B;AAEF,eAAc,MAAM,uBAAuB,OAAO,MAAM;EACtD,IAAI;AACJ,MAAI;AACF,UAAQ,MAAM,EAAE,IAAI,MAAM;UACpB;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAAgB,EAAE,IAAI;;EAE1D,MAAM,YAAY,OAAO,KAAK,cAAc,WAAW,KAAK,UAAU,MAAM,GAAG;EAC/E,MAAM,UAAU,KAAK;AACrB,MAAI,CAAC,aAAa,OAAO,YAAY,UACnC,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAoD,EAAE,IAAI;AAE9F,MAAI;AACF,WAAQ,kBAAkB,WAAW,QAAQ;AAC7C,UAAO,EAAE,KAAK,EAAE,IAAI,MAAM,CAAC;WACpB,KAAK;AACZ,UAAO,EAAE,KACP;IAAE,IAAI;IAAO,OAAO,eAAe,QAAQ,IAAI,UAAU;IAAiB,EAC1E,IACD;;GAEH;AAEF,eAAc,IAAI,2BAA2B,OAAO,MAAM;EACxD,MAAM,IAAI,EAAE,IAAI,MAAM,IAAI,EAAE,MAAM,IAAI;EACtC,MAAM,UAAU,EAAE,IAAI,MAAM,OAAO;EACnC,MAAM,cAAc,EAAE,IAAI,MAAM,WAAW;EAC3C,MAAM,UAAU,EAAE,IAAI,MAAM,OAAO;EACnC,MAAM,OAAO,WAAW,QAAQ,YAAY,KAAK,KAAK,IAAI,GAAG,OAAO,QAAQ,IAAI,EAAE,GAAG,KAAA;EACrF,MAAM,WACJ,eAAe,QAAQ,gBAAgB,KACnC,KAAK,IAAI,IAAI,KAAK,IAAI,GAAG,OAAO,YAAY,IAAI,GAAG,CAAC,GACpD,KAAA;EACN,MAAM,OACJ,YAAY,YAAY,YAAY,cAAc,UAAU,KAAA;AAC9D,MAAI;GACF,MAAM,UAAU,MAAM,QAAQ,8BAA8B;IAC1D,GAAG,KAAK,KAAA;IACR;IACA;IACA;IACD,CAAC;AACF,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM;IAAS,CAAC;WAC7B,KAAK;AACZ,UAAO,EAAE,KACP;IAAE,IAAI;IAAO,OAAO,eAAe,QAAQ,IAAI,UAAU;IAA8B,EACvF,IACD;;GAEH;AAEF,eAAc,IAAI,6CAA6C,OAAO,MAAM;EAC1E,MAAM,MAAM,EAAE,IAAI,MAAM,UAAU;AAClC,MAAI,CAAC,IACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAwB,EAAE,IAAI;EAElE,IAAI;AACJ,MAAI;AACF,aAAU,mBAAmB,IAAI;UAC3B;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAAwB,EAAE,IAAI;;AAElE,MAAI;GACF,MAAM,UAAU,MAAM,QAAQ,oCAAoC,QAAQ;AAC1E,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM;IAAS,CAAC;WAC7B,KAAK;AACZ,UAAO,EAAE,KACP;IAAE,IAAI;IAAO,OAAO,eAAe,QAAQ,IAAI,UAAU;IAA8B,EACvF,IACD;;GAEH;AAEF,eAAc,KAAK,mCAAmC,OAAO,MAAM;EACjE,IAAI;AACJ,MAAI;AACF,UAAQ,MAAM,EAAE,IAAI,MAAM;UACpB;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAAgB,EAAE,IAAI;;EAE1D,MAAM,OAAO,OAAO,KAAK,SAAS,WAAW,KAAK,KAAK,MAAM,GAAG;EAChE,MAAM,UAAU,OAAO,KAAK,YAAY,WAAW,KAAK,QAAQ,MAAM,GAAG,KAAA;EACzE,MAAM,YACJ,KAAK,cAAc,QACnB,KAAK,cAAc,UACnB,KAAK,cAAc;AACrB,MAAI,CAAC,KACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAoE,EAAE,IAAI;AAE9G,MAAI;GACF,MAAM,UAAU,MAAM,QAAQ,4BAA4B;IAAE;IAAM;IAAS;IAAW,CAAC;AACvF,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM;IAAS,CAAC;WAC7B,KAAK;AACZ,UAAO,EAAE,KACP;IAAE,IAAI;IAAO,OAAO,eAAe,QAAQ,IAAI,UAAU;IAAkB,EAC3E,IACD;;GAEH;AAEF,eAAc,KAAK,sBAAsB,OAAO,MAAM;EACpD,IAAI;AACJ,MAAI;AACF,UAAO,MAAM,EAAE,IAAI,UAAU,EAAE,KAAK,MAAM,CAAC;UACrC;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAA0B,EAAE,IAAI;;EAEpE,MAAM,OAAO,KAAK;AAClB,MAAI,CAAC,QAAQ,OAAO,SAAS,SAC3B,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAsB,EAAE,IAAI;EAEhE,IAAI;AACJ,MAAI,gBAAgB,KAClB,OAAM,OAAO,KAAK,MAAM,KAAK,aAAa,CAAC;WAClC,OAAQ,KAAc,gBAAgB,WAC/C,OAAM,OAAO,KAAK,MAAO,KAAc,aAAa,CAAC;MAErD,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAuB,EAAE,IAAI;EAEjE,MAAM,aAAa,KAAK;EACxB,MAAM,eAAe,KAAK;EAC1B,MAAM,UAAU,OAAO,eAAe,YAAY,WAAW,MAAM,GAAG,WAAW,MAAM,GAAG,KAAA;EAC1F,MAAM,YACJ,iBAAiB,UACjB,iBAAiB,QACjB,iBAAiB;AAEnB,MAAI;GACF,MAAM,SAAS,QAAQ,uBAAuB,KAAK;IAAE;IAAS;IAAW,CAAC;AAC1E,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS;IAAQ,CAAC;WACrC,KAAK;AACZ,UAAO,EAAE,KACP;IAAE,IAAI;IAAO,OAAO,eAAe,QAAQ,IAAI,UAAU;IAAkB,EAC3E,IACD;;GAEH;AAEF,eAAc,OAAO,oBAAoB,MAAM;EAC7C,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK;AAC5B,MAAI,CAAC,GACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAc,EAAE,IAAI;AAExD,MAAI;AACF,WAAQ,mBAAmB,GAAG;AAC9B,UAAO,EAAE,KAAK,EAAE,IAAI,MAAM,CAAC;WACpB,KAAK;AACZ,UAAO,EAAE,KACP;IAAE,IAAI;IAAO,OAAO,eAAe,QAAQ,IAAI,UAAU;IAAiB,EAC1E,IACD;;GAEH"}

package/dist/src/gateway/hono/routes/config.js

@@ -1,5 +1,5 @@
-import { CredentialResolver, init_credentials } from "../../../auth/credentials.js";
 import { BindingsConfigSchema, init_schema } from "../../../config/schema.js";
+import { CredentialResolver, init_credentials } from "../../../auth/credentials.js";
 import { normalizePatchAgentModel } from "../lib/agent-model.js";
 import { applyToolsWebPatch } from "../../config-tools-web.js";
 import { buildSafeWebConfigPayload } from "../lib/config-payload.js";
@@ -375,6 +375,79 @@ function registerConfigRoutes(authenticated, deps) {
 					if (wx.accounts !== void 0) wxTarget.accounts = wx.accounts;
 				}
 			}
+			if ("feishu" in patchChannels) {
+				const fsRaw = patchChannels.feishu;
+				if (fsRaw === null) {
+					if (config.channels) delete config.channels.feishu;
+				} else if (typeof fsRaw === "object" && !Array.isArray(fsRaw)) {
+					const fs = fsRaw;
+					if (!config.channels) config.channels = {};
+					if (!config.channels.feishu) config.channels.feishu = {
+						enabled: false,
+						appId: "",
+						appSecret: "",
+						domain: "feishu",
+						connectionMode: "websocket",
+						dmPolicy: "pairing",
+						groupPolicy: "allowlist",
+						allowFrom: [],
+						groupAllowFrom: [],
+						requireMention: true,
+						historyLimit: 50,
+						textChunkLimit: 4e3,
+						accounts: {}
+					};
+					const fsTarget = config.channels.feishu;
+					if (fs.enabled !== void 0) fsTarget.enabled = fs.enabled;
+					if (fs.defaultAccount !== void 0) {
+						const da = fs.defaultAccount;
+						if (da === null || da === "") delete fsTarget.defaultAccount;
+						else fsTarget.defaultAccount = String(da);
+					}
+					if (fs.appId !== void 0) fsTarget.appId = fs.appId;
+					if (fs.appSecret !== void 0) fsTarget.appSecret = fs.appSecret;
+					if (fs.domain !== void 0) fsTarget.domain = fs.domain;
+					if (fs.connectionMode !== void 0) fsTarget.connectionMode = fs.connectionMode;
+					if (fs.verificationToken !== void 0) {
+						const v = fs.verificationToken;
+						if (v === null || typeof v === "string" && !String(v).trim()) delete fsTarget.verificationToken;
+						else fsTarget.verificationToken = v;
+					}
+					if (fs.encryptKey !== void 0) {
+						const v = fs.encryptKey;
+						if (v === null || typeof v === "string" && !String(v).trim()) delete fsTarget.encryptKey;
+						else fsTarget.encryptKey = v;
+					}
+					if (fs.webhookHost !== void 0) {
+						const v = fs.webhookHost;
+						if (v === null || typeof v === "string" && !String(v).trim()) delete fsTarget.webhookHost;
+						else fsTarget.webhookHost = v;
+					}
+					if (fs.webhookPort !== void 0) fsTarget.webhookPort = fs.webhookPort;
+					if (fs.webhookPath !== void 0) {
+						const v = fs.webhookPath;
+						if (v === null || typeof v === "string" && !String(v).trim()) delete fsTarget.webhookPath;
+						else fsTarget.webhookPath = v;
+					}
+					if (fs.dmPolicy !== void 0) fsTarget.dmPolicy = fs.dmPolicy;
+					if (fs.groupPolicy !== void 0) fsTarget.groupPolicy = fs.groupPolicy;
+					if (fs.allowFrom !== void 0) fsTarget.allowFrom = fs.allowFrom;
+					if (fs.groupAllowFrom !== void 0) {
+						const ga = fs.groupAllowFrom;
+						if (ga === null || Array.isArray(ga) && ga.length === 0) delete fsTarget.groupAllowFrom;
+						else fsTarget.groupAllowFrom = ga;
+					}
+					if (fs.requireMention !== void 0) fsTarget.requireMention = fs.requireMention;
+					if (fs.historyLimit !== void 0) fsTarget.historyLimit = fs.historyLimit;
+					if (fs.textChunkLimit !== void 0) fsTarget.textChunkLimit = fs.textChunkLimit;
+					if (fs.renderMode !== void 0) fsTarget.renderMode = fs.renderMode;
+					if (fs.streaming !== void 0) fsTarget.streaming = fs.streaming;
+					if (fs.reactionNotifications !== void 0) fsTarget.reactionNotifications = fs.reactionNotifications;
+					if (fs.tools !== void 0) fsTarget.tools = fs.tools;
+					if (fs.actions !== void 0) fsTarget.actions = fs.actions;
+					if (fs.accounts !== void 0) fsTarget.accounts = fs.accounts;
+				}
+			}
 		}
 		if (body.gateway?.heartbeat !== void 0 && typeof body.gateway.heartbeat === "object") {
 			if (!config.gateway) config.gateway = {
@@ -442,6 +515,14 @@ function registerConfigRoutes(authenticated, deps) {
 			if (a.mode !== void 0) config.gateway.auth.mode = a.mode;
 			if (a.token !== void 0) config.gateway.auth.token = a.token;
 		}
+		if (body.update !== void 0 && typeof body.update === "object" && body.update !== null) {
+			const p = body.update;
+			if (p.channel === "stable" || p.channel === "beta" || p.channel === "dev") if (!config.update) config.update = {
+				checkOnStart: true,
+				channel: p.channel
+			};
+			else config.update.channel = p.channel;
+		}
 		if (body.providers) {
 			const resolver = new CredentialResolver();
 			for (const [key, apiKey] of Object.entries(body.providers)) if (apiKey !== void 0 && typeof apiKey === "string" && apiKey.trim() && apiKey !== "***" && apiKey !== "••••••••••••") await resolver.saveApiKey(key, apiKey, { profileName: "default" });