@xopcai/xopc 0.0.27 → 0.0.29

package/dist/src/gateway/hono/routes/public-gateway.js.map

@@ -1 +1 @@
-{"version":3,"file":"public-gateway.js","names":[],"sources":["../../../../../src/gateway/hono/routes/public-gateway.ts"],"sourcesContent":["import type { Hono } from 'hono';\n\nimport { PACKAGE_VERSION } from '../../../package-version.js';\nimport type { GatewayService } from '../../service.js';\nimport { serveStaticFile } from '../lib/static-ui.js';\n\nexport function registerPublicGatewayRoutes(app: Hono, service: GatewayService): void {\n  app.get('/health', (c) => {\n    return c.json(service.getHealth());\n  });\n\n  /** Public liveness probe (no auth) — minimal payload for CLI / load balancers. */\n  app.get('/api/health', (c) => {\n    const health = service.getHealth();\n    return c.json({\n      status: 'ok',\n      version: health.version,\n      uptime: health.uptime,\n    });\n  });\n\n  app.get('/api', (c) => {\n    return c.json({\n      service: 'xopc-gateway',\n      version: PACKAGE_VERSION,\n      transport: 'streamable-http',\n      endpoints: [\n        'GET  /health',\n        'GET  /api/health',\n        'GET  /status',\n        'GET  /api/status',\n        'POST /api/agent           (SSE stream / JSON)',\n        'POST /api/agent/abort',\n        'POST /api/agent/steer',\n        'POST /api/send',\n        'GET  /api/events          (SSE stream)',\n        'GET  /api/channels/status',\n        'POST /api/channels/weixin/login/start',\n        'GET  /api/channels/weixin/login/:sessionKey',\n        'GET  /api/config',\n        'GET  /api/agents',\n        'POST /api/agents',\n        'PATCH /api/agents/:id',\n        'DELETE /api/agents/:id',\n        'GET/PUT /api/agents/:id/files/...',\n        'DELETE /api/providers/:providerId/key',\n        'PATCH /api/config',\n        'POST /api/config/reload',\n        'POST /api/heartbeat/trigger',\n        '...  /api/cron/*',\n        'GET/PATCH /api/sessions/:key/agent-config',\n        '...  /api/sessions/*',\n        'GET  /api/host/fs/meta',\n        'GET  /api/host/fs/list',\n      ],\n    });\n  });\n\n  app.get('/assets/*', (c) => {\n    const path = c.req.path.replace('/assets/', '');\n    const response = serveStaticFile(`assets/${path}`);\n    if (response) return response;\n    return c.text('Not found', 404);\n  });\n\n  /** From `web/public/channel-icons/` (Vite copies to static root). Public: img requests send no Bearer token. */\n  app.get('/channel-icons/*', (c) => {\n    const path = c.req.path.replace('/channel-icons/', '');\n    const response = serveStaticFile(`channel-icons/${path}`);\n    if (response) return response;\n    return c.text('Not found', 404);\n  });\n\n  app.get('/favicon.ico', (c) => {\n    const response = serveStaticFile('favicon.ico');\n    if (response) return response;\n    return c.text('Not found', 404);\n  });\n\n  app.get('/logo.svg', (c) => {\n    const response = serveStaticFile('logo.svg');\n    if (response) return response;\n    return c.text('Not found', 404);\n  });\n\n  app.get('/logo-dark.svg', (c) => {\n    const response = serveStaticFile('logo-dark.svg');\n    if (response) return response;\n    return c.text('Not found', 404);\n  });\n\n  app.get('/', (c) => {\n    const response = serveStaticFile('index.html');\n    if (response) return response;\n    return c.text('UI not found', 404);\n  });\n}\n"],"mappings":";;;sBAE8D;AAI9D,SAAgB,4BAA4B,KAAW,SAA+B;AACpF,KAAI,IAAI,YAAY,MAAM;AACxB,SAAO,EAAE,KAAK,QAAQ,WAAW,CAAC;GAClC;;AAGF,KAAI,IAAI,gBAAgB,MAAM;EAC5B,MAAM,SAAS,QAAQ,WAAW;AAClC,SAAO,EAAE,KAAK;GACZ,QAAQ;GACR,SAAS,OAAO;GAChB,QAAQ,OAAO;GAChB,CAAC;GACF;AAEF,KAAI,IAAI,SAAS,MAAM;AACrB,SAAO,EAAE,KAAK;GACZ,SAAS;GACT,SAAS;GACT,WAAW;GACX,WAAW;IACT;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACD;GACF,CAAC;GACF;AAEF,KAAI,IAAI,cAAc,MAAM;EAE1B,MAAM,WAAW,gBAAgB,UADpB,EAAE,IAAI,KAAK,QAAQ,YAAY,GACG,GAAG;AAClD,MAAI,SAAU,QAAO;AACrB,SAAO,EAAE,KAAK,aAAa,IAAI;GAC/B;;AAGF,KAAI,IAAI,qBAAqB,MAAM;EAEjC,MAAM,WAAW,gBAAgB,iBADpB,EAAE,IAAI,KAAK,QAAQ,mBAAmB,GACG,GAAG;AACzD,MAAI,SAAU,QAAO;AACrB,SAAO,EAAE,KAAK,aAAa,IAAI;GAC/B;AAEF,KAAI,IAAI,iBAAiB,MAAM;EAC7B,MAAM,WAAW,gBAAgB,cAAc;AAC/C,MAAI,SAAU,QAAO;AACrB,SAAO,EAAE,KAAK,aAAa,IAAI;GAC/B;AAEF,KAAI,IAAI,cAAc,MAAM;EAC1B,MAAM,WAAW,gBAAgB,WAAW;AAC5C,MAAI,SAAU,QAAO;AACrB,SAAO,EAAE,KAAK,aAAa,IAAI;GAC/B;AAEF,KAAI,IAAI,mBAAmB,MAAM;EAC/B,MAAM,WAAW,gBAAgB,gBAAgB;AACjD,MAAI,SAAU,QAAO;AACrB,SAAO,EAAE,KAAK,aAAa,IAAI;GAC/B;AAEF,KAAI,IAAI,MAAM,MAAM;EAClB,MAAM,WAAW,gBAAgB,aAAa;AAC9C,MAAI,SAAU,QAAO;AACrB,SAAO,EAAE,KAAK,gBAAgB,IAAI;GAClC"}
+{"version":3,"file":"public-gateway.js","names":[],"sources":["../../../../../src/gateway/hono/routes/public-gateway.ts"],"sourcesContent":["import type { Hono } from 'hono';\n\nimport { PACKAGE_VERSION } from '../../../package-version.js';\nimport type { GatewayService } from '../../service.js';\nimport { serveStaticFile } from '../lib/static-ui.js';\n\nexport function registerPublicGatewayRoutes(app: Hono, service: GatewayService): void {\n  app.get('/health', (c) => {\n    return c.json(service.getHealth());\n  });\n\n  /** Public liveness probe (no auth) — minimal payload for CLI / load balancers. */\n  app.get('/api/health', (c) => {\n    const health = service.getHealth();\n    return c.json({\n      status: 'ok',\n      version: health.version,\n      uptime: health.uptime,\n    });\n  });\n\n  app.get('/api', (c) => {\n    return c.json({\n      service: 'xopc-gateway',\n      version: PACKAGE_VERSION,\n      transport: 'streamable-http',\n      endpoints: [\n        'GET  /health',\n        'GET  /api/health',\n        'GET  /status',\n        'GET  /api/status',\n        'POST /api/agent           (SSE stream / JSON)',\n        'POST /api/agent/abort',\n        'POST /api/agent/steer',\n        'POST /api/send',\n        'GET  /api/events          (SSE stream)',\n        'GET  /api/channels/status',\n        'POST /api/channels/weixin/login/start',\n        'GET  /api/channels/weixin/login/:sessionKey',\n        'GET  /api/config',\n        'GET  /api/agents',\n        'POST /api/agents',\n        'PATCH /api/agents/:id',\n        'DELETE /api/agents/:id',\n        'GET/PUT/DELETE /api/agents/:id/avatar',\n        'GET/PUT /api/agents/:id/files/...',\n        'DELETE /api/providers/:providerId/key',\n        'PATCH /api/config',\n        'POST /api/config/reload',\n        'POST /api/heartbeat/trigger',\n        '...  /api/cron/*',\n        'GET/PATCH /api/sessions/:key/agent-config',\n        '...  /api/sessions/*',\n        'GET  /api/host/fs/meta',\n        'GET  /api/host/fs/list',\n      ],\n    });\n  });\n\n  app.get('/assets/*', (c) => {\n    const path = c.req.path.replace('/assets/', '');\n    const response = serveStaticFile(`assets/${path}`);\n    if (response) return response;\n    return c.text('Not found', 404);\n  });\n\n  /** From `web/public/channel-icons/` (Vite copies to static root). Public: img requests send no Bearer token. */\n  app.get('/channel-icons/*', (c) => {\n    const path = c.req.path.replace('/channel-icons/', '');\n    const response = serveStaticFile(`channel-icons/${path}`);\n    if (response) return response;\n    return c.text('Not found', 404);\n  });\n\n  app.get('/favicon.ico', (c) => {\n    const response = serveStaticFile('favicon.ico');\n    if (response) return response;\n    return c.text('Not found', 404);\n  });\n\n  app.get('/logo.svg', (c) => {\n    const response = serveStaticFile('logo.svg');\n    if (response) return response;\n    return c.text('Not found', 404);\n  });\n\n  app.get('/logo-dark.svg', (c) => {\n    const response = serveStaticFile('logo-dark.svg');\n    if (response) return response;\n    return c.text('Not found', 404);\n  });\n\n  app.get('/', (c) => {\n    const response = serveStaticFile('index.html');\n    if (response) return response;\n    return c.text('UI not found', 404);\n  });\n}\n"],"mappings":";;;sBAE8D;AAI9D,SAAgB,4BAA4B,KAAW,SAA+B;AACpF,KAAI,IAAI,YAAY,MAAM;AACxB,SAAO,EAAE,KAAK,QAAQ,WAAW,CAAC;GAClC;;AAGF,KAAI,IAAI,gBAAgB,MAAM;EAC5B,MAAM,SAAS,QAAQ,WAAW;AAClC,SAAO,EAAE,KAAK;GACZ,QAAQ;GACR,SAAS,OAAO;GAChB,QAAQ,OAAO;GAChB,CAAC;GACF;AAEF,KAAI,IAAI,SAAS,MAAM;AACrB,SAAO,EAAE,KAAK;GACZ,SAAS;GACT,SAAS;GACT,WAAW;GACX,WAAW;IACT;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACD;GACF,CAAC;GACF;AAEF,KAAI,IAAI,cAAc,MAAM;EAE1B,MAAM,WAAW,gBAAgB,UADpB,EAAE,IAAI,KAAK,QAAQ,YAAY,GACG,GAAG;AAClD,MAAI,SAAU,QAAO;AACrB,SAAO,EAAE,KAAK,aAAa,IAAI;GAC/B;;AAGF,KAAI,IAAI,qBAAqB,MAAM;EAEjC,MAAM,WAAW,gBAAgB,iBADpB,EAAE,IAAI,KAAK,QAAQ,mBAAmB,GACG,GAAG;AACzD,MAAI,SAAU,QAAO;AACrB,SAAO,EAAE,KAAK,aAAa,IAAI;GAC/B;AAEF,KAAI,IAAI,iBAAiB,MAAM;EAC7B,MAAM,WAAW,gBAAgB,cAAc;AAC/C,MAAI,SAAU,QAAO;AACrB,SAAO,EAAE,KAAK,aAAa,IAAI;GAC/B;AAEF,KAAI,IAAI,cAAc,MAAM;EAC1B,MAAM,WAAW,gBAAgB,WAAW;AAC5C,MAAI,SAAU,QAAO;AACrB,SAAO,EAAE,KAAK,aAAa,IAAI;GAC/B;AAEF,KAAI,IAAI,mBAAmB,MAAM;EAC/B,MAAM,WAAW,gBAAgB,gBAAgB;AACjD,MAAI,SAAU,QAAO;AACrB,SAAO,EAAE,KAAK,aAAa,IAAI;GAC/B;AAEF,KAAI,IAAI,MAAM,MAAM;EAClB,MAAM,WAAW,gBAAgB,aAAa;AAC9C,MAAI,SAAU,QAAO;AACrB,SAAO,EAAE,KAAK,gBAAgB,IAAI;GAClC"}

package/dist/src/gateway/hono/routes/sessions.js

@@ -1,5 +1,6 @@
 import { buildSessionKey, init_session_key, parseSessionKey } from "../../../routing/session-key.js";
 import { agentExists, getDefaultAgentId, init_resolve_route } from "../../../routing/resolve-route.js";
+import { messagesToClientHistory } from "../../../session/client-history.js";
 //#region src/gateway/hono/routes/sessions.ts
 init_session_key();
 init_resolve_route();
@@ -92,6 +93,22 @@ function registerSessionsRoutes(authenticated, deps) {
 		}, 400);
 		return c.json({ ok: true });
 	});
+	authenticated.get("/api/sessions/:key/messages", async (c) => {
+		const key = c.req.param("key");
+		const limitRaw = c.req.query("limit");
+		const parsedLimit = limitRaw ? Number.parseInt(limitRaw, 10) : void 0;
+		const limit = parsedLimit !== void 0 && Number.isFinite(parsedLimit) ? Math.min(500, Math.max(1, parsedLimit)) : void 0;
+		const session = await service.getSession(key);
+		if (!session) return c.json({
+			ok: false,
+			error: "Session not found"
+		}, 404);
+		const messages = messagesToClientHistory(session.messages, { limit });
+		return c.json({
+			ok: true,
+			payload: { messages }
+		});
+	});
 	authenticated.get("/api/sessions/:key", async (c) => {
 		const key = c.req.param("key");
 		const session = await service.getSession(key);

package/dist/src/gateway/hono/routes/sessions.js.map

@@ -1 +1 @@
-{"version":3,"file":"sessions.js","names":[],"sources":["../../../../../src/gateway/hono/routes/sessions.ts"],"sourcesContent":["import type { Hono } from 'hono';\n\nimport { buildSessionKey, parseSessionKey } from '../../../routing/session-key.js';\nimport { agentExists, getDefaultAgentId } from '../../../routing/resolve-route.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\n\nexport function registerSessionsRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  const { service } = deps;\n\n  // ========== Session REST API (/api/sessions) ==========\n\n  // POST /api/sessions - Create new session (reuses empty sessions)\n  authenticated.post('/api/sessions', async (c) => {\n    const body = await c.req.json().catch(() => ({}));\n    const channel = body.channel || 'webchat';\n    const routingCfg = service.currentConfig;\n    let agentId =\n      typeof body.agentId === 'string' && body.agentId.trim()\n        ? body.agentId.trim().toLowerCase()\n        : getDefaultAgentId(routingCfg);\n    if (!agentExists(agentId, routingCfg)) {\n      agentId = getDefaultAgentId(routingCfg);\n    }\n\n    // If a specific chat_id is provided, use it (for advanced use cases)\n    // Otherwise, try to find and reuse an existing empty session\n    if (body.chat_id) {\n      const sessionKey = buildSessionKey({\n        agentId,\n        source: channel,\n        accountId: 'default',\n        peerKind: 'direct',\n        peerId: body.chat_id,\n      });\n\n      await service.sessionManagerInstance.saveMessages(sessionKey, []);\n      const session = await service.getSession(sessionKey);\n      return c.json({ session }, 201);\n    }\n    \n    // Look for existing empty sessions to reuse\n    const existingSessions = await service.listSessions({\n      channel,\n      limit: 50,\n      sortBy: 'updatedAt',\n      sortOrder: 'desc',\n    });\n    \n    // Reuse an empty session only when it matches the requested agent (session key embeds agent id).\n    const emptySession = existingSessions.items.find((s) => {\n      if (s.messageCount !== 0) return false;\n      const parsed = parseSessionKey(s.key);\n      return parsed?.agentId === agentId;\n    });\n    \n    if (emptySession) {\n      // Return existing empty session instead of creating a new one\n      const session = await service.getSession(emptySession.key);\n      return c.json({ session, reused: true }, 200);\n    }\n    \n    // No empty session found, create a new one\n    const chatId = `chat_${Date.now()}`;\n    const sessionKey = buildSessionKey({\n      agentId,\n      source: channel,\n      accountId: 'default',\n      peerKind: 'direct',\n      peerId: chatId,\n    });\n\n    await service.sessionManagerInstance.saveMessages(sessionKey, []);\n\n    const session = await service.getSession(sessionKey);\n    return c.json({ session }, 201);\n  });\n\n  // GET /api/sessions - List sessions\n  authenticated.get('/api/sessions', async (c) => {\n    const query = c.req.query();\n    const result = await service.listSessions({\n      status: query.status as any,\n      search: query.search,\n      channel: query.channel,\n      limit: query.limit ? parseInt(query.limit) : undefined,\n      offset: query.offset ? parseInt(query.offset) : undefined,\n    });\n    return c.json(result);\n  });\n\n  // GET /api/sessions/stats - Get session stats (must be before /:key)\n  authenticated.get('/api/sessions/stats', async (c) => {\n    const result = await service.getSessionStats();\n    return c.json(result);\n  });\n\n  // GET /api/sessions/chat-ids - Get unique chat IDs from sessions (must be before /:key)\n  authenticated.get('/api/sessions/chat-ids', async (c) => {\n    const channel = c.req.query('channel');\n    const chatIds = await service.getSessionChatIds(channel || undefined);\n    return c.json({ ok: true, payload: { chatIds } });\n  });\n\n  // GET /api/sessions/:key/agent-config — resolved session agent settings (thinking, etc.)\n  authenticated.get('/api/sessions/:key/agent-config', async (c) => {\n    const key = c.req.param('key');\n    const payload = await service.getSessionAgentConfig(key);\n    return c.json({ ok: true, payload });\n  });\n\n  authenticated.patch('/api/sessions/:key/agent-config', async (c) => {\n    const key = c.req.param('key');\n    const body = await c.req.json().catch(() => ({}));\n    const result = await service.patchSessionAgentConfig(key, body);\n    if (!result.ok) {\n      return c.json({ ok: false, error: result.error }, 400);\n    }\n    return c.json({ ok: true });\n  });\n\n  // GET /api/sessions/:key - Get single session (must be after /stats and /chat-ids)\n  authenticated.get('/api/sessions/:key', async (c) => {\n    const key = c.req.param('key');\n    const session = await service.getSession(key);\n    if (!session) {\n      return c.json({ error: 'Session not found' }, 404);\n    }\n    return c.json({ session });\n  });\n\n  // GET /api/sessions/:key/export - Export session (must be before /:key)\n  authenticated.get('/api/sessions/:key/export', async (c) => {\n    const key = c.req.param('key');\n    const format = c.req.query('format') as any || 'json';\n    const result = await service.exportSession(key, format);\n    return c.json(result);\n  });\n\n  // DELETE /api/sessions/:key/messages — delete a range of messages by index (before whole-session DELETE)\n  authenticated.delete('/api/sessions/:key/messages', async (c) => {\n    const key = c.req.param('key');\n    const body = await c.req.json().catch(() => ({}));\n    const startIndex = typeof body.startIndex === 'number' ? body.startIndex : -1;\n    const count = typeof body.count === 'number' ? body.count : 0;\n    if (startIndex < 0 || count <= 0) {\n      return c.json({ error: 'Invalid startIndex or count' }, 400);\n    }\n    const loaded = await service.sessionManagerInstance.loadMessages(key);\n    if (!loaded || startIndex >= loaded.length) {\n      return c.json({ error: 'Index out of range' }, 400);\n    }\n    const deleteCount = Math.min(count, loaded.length - startIndex);\n    const next = loaded.slice(0, startIndex).concat(loaded.slice(startIndex + deleteCount));\n    await service.sessionManagerInstance.saveMessages(key, next);\n    return c.json({ ok: true, deleted: deleteCount });\n  });\n\n  // DELETE /api/sessions/:key - Delete session\n  authenticated.delete('/api/sessions/:key', async (c) => {\n    const key = c.req.param('key');\n    const result = await service.deleteSession(key);\n    return c.json(result);\n  });\n\n  // POST /api/sessions/:key/archive - Archive session\n  authenticated.post('/api/sessions/:key/archive', async (c) => {\n    const key = c.req.param('key');\n    const result = await service.archiveSession(key);\n    return c.json(result);\n  });\n\n  // POST /api/sessions/:key/unarchive - Unarchive session\n  authenticated.post('/api/sessions/:key/unarchive', async (c) => {\n    const key = c.req.param('key');\n    const result = await service.unarchiveSession(key);\n    return c.json(result);\n  });\n\n  // POST /api/sessions/:key/pin - Pin session\n  authenticated.post('/api/sessions/:key/pin', async (c) => {\n    const key = c.req.param('key');\n    const result = await service.pinSession(key);\n    return c.json(result);\n  });\n\n  // POST /api/sessions/:key/unpin - Unpin session\n  authenticated.post('/api/sessions/:key/unpin', async (c) => {\n    const key = c.req.param('key');\n    const result = await service.unpinSession(key);\n    return c.json(result);\n  });\n\n  // POST /api/sessions/:key/rename - Rename session\n  authenticated.post('/api/sessions/:key/rename', async (c) => {\n    const key = c.req.param('key');\n\n    const body = await c.req.json();\n    const { name } = body;\n    const result = await service.renameSession(key, name);\n    return c.json(result);\n  });\n\n  // ========== Subagent REST API (/api/subagents) ==========\n\n  // GET /api/subagents - List subagent sessions\n  authenticated.get('/api/subagents', async (c) => {\n    const query = c.req.query();\n    const result = await service.listSubagents({\n      limit: query.limit ? parseInt(query.limit) : undefined,\n      offset: query.offset ? parseInt(query.offset) : undefined,\n    });\n    return c.json(result);\n  });\n\n  // GET /api/subagents/:key - Get subagent session detail\n  authenticated.get('/api/subagents/:key', async (c) => {\n    const key = c.req.param('key');\n    // Verify it's a subagent session\n    if (!key.startsWith('subagent:')) {\n      return c.json({ error: 'Not a subagent session' }, 400);\n    }\n    const session = await service.getSession(key);\n    if (!session) {\n      return c.json({ error: 'Subagent session not found' }, 404);\n    }\n    return c.json({ session });\n  });\n}\n"],"mappings":";;;kBAEmF;oBACA;AAGnF,SAAgB,uBAAuB,eAAqB,MAAoC;CAC9F,MAAM,EAAE,YAAY;AAKpB,eAAc,KAAK,iBAAiB,OAAO,MAAM;EAC/C,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,UAAU,KAAK,WAAW;EAChC,MAAM,aAAa,QAAQ;EAC3B,IAAI,UACF,OAAO,KAAK,YAAY,YAAY,KAAK,QAAQ,MAAM,GACnD,KAAK,QAAQ,MAAM,CAAC,aAAa,GACjC,kBAAkB,WAAW;AACnC,MAAI,CAAC,YAAY,SAAS,WAAW,CACnC,WAAU,kBAAkB,WAAW;AAKzC,MAAI,KAAK,SAAS;GAChB,MAAM,aAAa,gBAAgB;IACjC;IACA,QAAQ;IACR,WAAW;IACX,UAAU;IACV,QAAQ,KAAK;IACd,CAAC;AAEF,SAAM,QAAQ,uBAAuB,aAAa,YAAY,EAAE,CAAC;GACjE,MAAM,UAAU,MAAM,QAAQ,WAAW,WAAW;AACpD,UAAO,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI;;EAYjC,MAAM,gBAAe,MARU,QAAQ,aAAa;GAClD;GACA,OAAO;GACP,QAAQ;GACR,WAAW;GACZ,CAAC,EAGoC,MAAM,MAAM,MAAM;AACtD,OAAI,EAAE,iBAAiB,EAAG,QAAO;AAEjC,UADe,gBAAgB,EAAE,IACpB,EAAE,YAAY;IAC3B;AAEF,MAAI,cAAc;GAEhB,MAAM,UAAU,MAAM,QAAQ,WAAW,aAAa,IAAI;AAC1D,UAAO,EAAE,KAAK;IAAE;IAAS,QAAQ;IAAM,EAAE,IAAI;;EAI/C,MAAM,SAAS,QAAQ,KAAK,KAAK;EACjC,MAAM,aAAa,gBAAgB;GACjC;GACA,QAAQ;GACR,WAAW;GACX,UAAU;GACV,QAAQ;GACT,CAAC;AAEF,QAAM,QAAQ,uBAAuB,aAAa,YAAY,EAAE,CAAC;EAEjE,MAAM,UAAU,MAAM,QAAQ,WAAW,WAAW;AACpD,SAAO,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI;GAC/B;AAGF,eAAc,IAAI,iBAAiB,OAAO,MAAM;EAC9C,MAAM,QAAQ,EAAE,IAAI,OAAO;EAC3B,MAAM,SAAS,MAAM,QAAQ,aAAa;GACxC,QAAQ,MAAM;GACd,QAAQ,MAAM;GACd,SAAS,MAAM;GACf,OAAO,MAAM,QAAQ,SAAS,MAAM,MAAM,GAAG,KAAA;GAC7C,QAAQ,MAAM,SAAS,SAAS,MAAM,OAAO,GAAG,KAAA;GACjD,CAAC;AACF,SAAO,EAAE,KAAK,OAAO;GACrB;AAGF,eAAc,IAAI,uBAAuB,OAAO,MAAM;EACpD,MAAM,SAAS,MAAM,QAAQ,iBAAiB;AAC9C,SAAO,EAAE,KAAK,OAAO;GACrB;AAGF,eAAc,IAAI,0BAA0B,OAAO,MAAM;EACvD,MAAM,UAAU,EAAE,IAAI,MAAM,UAAU;EACtC,MAAM,UAAU,MAAM,QAAQ,kBAAkB,WAAW,KAAA,EAAU;AACrE,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,SAAS;GAAE,CAAC;GACjD;AAGF,eAAc,IAAI,mCAAmC,OAAO,MAAM;EAChE,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAC9B,MAAM,UAAU,MAAM,QAAQ,sBAAsB,IAAI;AACxD,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM;GAAS,CAAC;GACpC;AAEF,eAAc,MAAM,mCAAmC,OAAO,MAAM;EAClE,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAC9B,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,SAAS,MAAM,QAAQ,wBAAwB,KAAK,KAAK;AAC/D,MAAI,CAAC,OAAO,GACV,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,OAAO;GAAO,EAAE,IAAI;AAExD,SAAO,EAAE,KAAK,EAAE,IAAI,MAAM,CAAC;GAC3B;AAGF,eAAc,IAAI,sBAAsB,OAAO,MAAM;EACnD,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAC9B,MAAM,UAAU,MAAM,QAAQ,WAAW,IAAI;AAC7C,MAAI,CAAC,QACH,QAAO,EAAE,KAAK,EAAE,OAAO,qBAAqB,EAAE,IAAI;AAEpD,SAAO,EAAE,KAAK,EAAE,SAAS,CAAC;GAC1B;AAGF,eAAc,IAAI,6BAA6B,OAAO,MAAM;EAC1D,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAC9B,MAAM,SAAS,EAAE,IAAI,MAAM,SAAS,IAAW;EAC/C,MAAM,SAAS,MAAM,QAAQ,cAAc,KAAK,OAAO;AACvD,SAAO,EAAE,KAAK,OAAO;GACrB;AAGF,eAAc,OAAO,+BAA+B,OAAO,MAAM;EAC/D,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAC9B,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,aAAa,OAAO,KAAK,eAAe,WAAW,KAAK,aAAa;EAC3E,MAAM,QAAQ,OAAO,KAAK,UAAU,WAAW,KAAK,QAAQ;AAC5D,MAAI,aAAa,KAAK,SAAS,EAC7B,QAAO,EAAE,KAAK,EAAE,OAAO,+BAA+B,EAAE,IAAI;EAE9D,MAAM,SAAS,MAAM,QAAQ,uBAAuB,aAAa,IAAI;AACrE,MAAI,CAAC,UAAU,cAAc,OAAO,OAClC,QAAO,EAAE,KAAK,EAAE,OAAO,sBAAsB,EAAE,IAAI;EAErD,MAAM,cAAc,KAAK,IAAI,OAAO,OAAO,SAAS,WAAW;EAC/D,MAAM,OAAO,OAAO,MAAM,GAAG,WAAW,CAAC,OAAO,OAAO,MAAM,aAAa,YAAY,CAAC;AACvF,QAAM,QAAQ,uBAAuB,aAAa,KAAK,KAAK;AAC5D,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;GAAa,CAAC;GACjD;AAGF,eAAc,OAAO,sBAAsB,OAAO,MAAM;EACtD,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAC9B,MAAM,SAAS,MAAM,QAAQ,cAAc,IAAI;AAC/C,SAAO,EAAE,KAAK,OAAO;GACrB;AAGF,eAAc,KAAK,8BAA8B,OAAO,MAAM;EAC5D,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAC9B,MAAM,SAAS,MAAM,QAAQ,eAAe,IAAI;AAChD,SAAO,EAAE,KAAK,OAAO;GACrB;AAGF,eAAc,KAAK,gCAAgC,OAAO,MAAM;EAC9D,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAC9B,MAAM,SAAS,MAAM,QAAQ,iBAAiB,IAAI;AAClD,SAAO,EAAE,KAAK,OAAO;GACrB;AAGF,eAAc,KAAK,0BAA0B,OAAO,MAAM;EACxD,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAC9B,MAAM,SAAS,MAAM,QAAQ,WAAW,IAAI;AAC5C,SAAO,EAAE,KAAK,OAAO;GACrB;AAGF,eAAc,KAAK,4BAA4B,OAAO,MAAM;EAC1D,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAC9B,MAAM,SAAS,MAAM,QAAQ,aAAa,IAAI;AAC9C,SAAO,EAAE,KAAK,OAAO;GACrB;AAGF,eAAc,KAAK,6BAA6B,OAAO,MAAM;EAC3D,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAG9B,MAAM,EAAE,SAAS,MADE,EAAE,IAAI,MAAM;EAE/B,MAAM,SAAS,MAAM,QAAQ,cAAc,KAAK,KAAK;AACrD,SAAO,EAAE,KAAK,OAAO;GACrB;AAKF,eAAc,IAAI,kBAAkB,OAAO,MAAM;EAC/C,MAAM,QAAQ,EAAE,IAAI,OAAO;EAC3B,MAAM,SAAS,MAAM,QAAQ,cAAc;GACzC,OAAO,MAAM,QAAQ,SAAS,MAAM,MAAM,GAAG,KAAA;GAC7C,QAAQ,MAAM,SAAS,SAAS,MAAM,OAAO,GAAG,KAAA;GACjD,CAAC;AACF,SAAO,EAAE,KAAK,OAAO;GACrB;AAGF,eAAc,IAAI,uBAAuB,OAAO,MAAM;EACpD,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;AAE9B,MAAI,CAAC,IAAI,WAAW,YAAY,CAC9B,QAAO,EAAE,KAAK,EAAE,OAAO,0BAA0B,EAAE,IAAI;EAEzD,MAAM,UAAU,MAAM,QAAQ,WAAW,IAAI;AAC7C,MAAI,CAAC,QACH,QAAO,EAAE,KAAK,EAAE,OAAO,8BAA8B,EAAE,IAAI;AAE7D,SAAO,EAAE,KAAK,EAAE,SAAS,CAAC;GAC1B"}
+{"version":3,"file":"sessions.js","names":[],"sources":["../../../../../src/gateway/hono/routes/sessions.ts"],"sourcesContent":["import type { Hono } from 'hono';\n\nimport { buildSessionKey, parseSessionKey } from '../../../routing/session-key.js';\nimport { agentExists, getDefaultAgentId } from '../../../routing/resolve-route.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\nimport { messagesToClientHistory } from '../../../session/client-history.js';\n\nexport function registerSessionsRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  const { service } = deps;\n\n  // ========== Session REST API (/api/sessions) ==========\n\n  // POST /api/sessions - Create new session (reuses empty sessions)\n  authenticated.post('/api/sessions', async (c) => {\n    const body = await c.req.json().catch(() => ({}));\n    const channel = body.channel || 'webchat';\n    const routingCfg = service.currentConfig;\n    let agentId =\n      typeof body.agentId === 'string' && body.agentId.trim()\n        ? body.agentId.trim().toLowerCase()\n        : getDefaultAgentId(routingCfg);\n    if (!agentExists(agentId, routingCfg)) {\n      agentId = getDefaultAgentId(routingCfg);\n    }\n\n    // If a specific chat_id is provided, use it (for advanced use cases)\n    // Otherwise, try to find and reuse an existing empty session\n    if (body.chat_id) {\n      const sessionKey = buildSessionKey({\n        agentId,\n        source: channel,\n        accountId: 'default',\n        peerKind: 'direct',\n        peerId: body.chat_id,\n      });\n\n      await service.sessionManagerInstance.saveMessages(sessionKey, []);\n      const session = await service.getSession(sessionKey);\n      return c.json({ session }, 201);\n    }\n    \n    // Look for existing empty sessions to reuse\n    const existingSessions = await service.listSessions({\n      channel,\n      limit: 50,\n      sortBy: 'updatedAt',\n      sortOrder: 'desc',\n    });\n    \n    // Reuse an empty session only when it matches the requested agent (session key embeds agent id).\n    const emptySession = existingSessions.items.find((s) => {\n      if (s.messageCount !== 0) return false;\n      const parsed = parseSessionKey(s.key);\n      return parsed?.agentId === agentId;\n    });\n    \n    if (emptySession) {\n      // Return existing empty session instead of creating a new one\n      const session = await service.getSession(emptySession.key);\n      return c.json({ session, reused: true }, 200);\n    }\n    \n    // No empty session found, create a new one\n    const chatId = `chat_${Date.now()}`;\n    const sessionKey = buildSessionKey({\n      agentId,\n      source: channel,\n      accountId: 'default',\n      peerKind: 'direct',\n      peerId: chatId,\n    });\n\n    await service.sessionManagerInstance.saveMessages(sessionKey, []);\n\n    const session = await service.getSession(sessionKey);\n    return c.json({ session }, 201);\n  });\n\n  // GET /api/sessions - List sessions\n  authenticated.get('/api/sessions', async (c) => {\n    const query = c.req.query();\n    const result = await service.listSessions({\n      status: query.status as any,\n      search: query.search,\n      channel: query.channel,\n      limit: query.limit ? parseInt(query.limit) : undefined,\n      offset: query.offset ? parseInt(query.offset) : undefined,\n    });\n    return c.json(result);\n  });\n\n  // GET /api/sessions/stats - Get session stats (must be before /:key)\n  authenticated.get('/api/sessions/stats', async (c) => {\n    const result = await service.getSessionStats();\n    return c.json(result);\n  });\n\n  // GET /api/sessions/chat-ids - Get unique chat IDs from sessions (must be before /:key)\n  authenticated.get('/api/sessions/chat-ids', async (c) => {\n    const channel = c.req.query('channel');\n    const chatIds = await service.getSessionChatIds(channel || undefined);\n    return c.json({ ok: true, payload: { chatIds } });\n  });\n\n  // GET /api/sessions/:key/agent-config — resolved session agent settings (thinking, etc.)\n  authenticated.get('/api/sessions/:key/agent-config', async (c) => {\n    const key = c.req.param('key');\n    const payload = await service.getSessionAgentConfig(key);\n    return c.json({ ok: true, payload });\n  });\n\n  authenticated.patch('/api/sessions/:key/agent-config', async (c) => {\n    const key = c.req.param('key');\n    const body = await c.req.json().catch(() => ({}));\n    const result = await service.patchSessionAgentConfig(key, body);\n    if (!result.ok) {\n      return c.json({ ok: false, error: result.error }, 400);\n    }\n    return c.json({ ok: true });\n  });\n\n  // GET /api/sessions/:key/messages — flattened transcript for TUI / clients\n  authenticated.get('/api/sessions/:key/messages', async (c) => {\n    const key = c.req.param('key');\n    const limitRaw = c.req.query('limit');\n    const parsedLimit = limitRaw ? Number.parseInt(limitRaw, 10) : undefined;\n    const limit =\n      parsedLimit !== undefined && Number.isFinite(parsedLimit)\n        ? Math.min(500, Math.max(1, parsedLimit))\n        : undefined;\n\n    const session = await service.getSession(key);\n    if (!session) {\n      return c.json({ ok: false, error: 'Session not found' }, 404);\n    }\n\n    const messages = messagesToClientHistory(session.messages, { limit });\n    return c.json({ ok: true, payload: { messages } });\n  });\n\n  // GET /api/sessions/:key - Get single session (must be after /stats and /chat-ids)\n  authenticated.get('/api/sessions/:key', async (c) => {\n    const key = c.req.param('key');\n    const session = await service.getSession(key);\n    if (!session) {\n      return c.json({ error: 'Session not found' }, 404);\n    }\n    return c.json({ session });\n  });\n\n  // GET /api/sessions/:key/export - Export session (must be before /:key)\n  authenticated.get('/api/sessions/:key/export', async (c) => {\n    const key = c.req.param('key');\n    const format = c.req.query('format') as any || 'json';\n    const result = await service.exportSession(key, format);\n    return c.json(result);\n  });\n\n  // DELETE /api/sessions/:key/messages — delete a range of messages by index (before whole-session DELETE)\n  authenticated.delete('/api/sessions/:key/messages', async (c) => {\n    const key = c.req.param('key');\n    const body = await c.req.json().catch(() => ({}));\n    const startIndex = typeof body.startIndex === 'number' ? body.startIndex : -1;\n    const count = typeof body.count === 'number' ? body.count : 0;\n    if (startIndex < 0 || count <= 0) {\n      return c.json({ error: 'Invalid startIndex or count' }, 400);\n    }\n    const loaded = await service.sessionManagerInstance.loadMessages(key);\n    if (!loaded || startIndex >= loaded.length) {\n      return c.json({ error: 'Index out of range' }, 400);\n    }\n    const deleteCount = Math.min(count, loaded.length - startIndex);\n    const next = loaded.slice(0, startIndex).concat(loaded.slice(startIndex + deleteCount));\n    await service.sessionManagerInstance.saveMessages(key, next);\n    return c.json({ ok: true, deleted: deleteCount });\n  });\n\n  // DELETE /api/sessions/:key - Delete session\n  authenticated.delete('/api/sessions/:key', async (c) => {\n    const key = c.req.param('key');\n    const result = await service.deleteSession(key);\n    return c.json(result);\n  });\n\n  // POST /api/sessions/:key/archive - Archive session\n  authenticated.post('/api/sessions/:key/archive', async (c) => {\n    const key = c.req.param('key');\n    const result = await service.archiveSession(key);\n    return c.json(result);\n  });\n\n  // POST /api/sessions/:key/unarchive - Unarchive session\n  authenticated.post('/api/sessions/:key/unarchive', async (c) => {\n    const key = c.req.param('key');\n    const result = await service.unarchiveSession(key);\n    return c.json(result);\n  });\n\n  // POST /api/sessions/:key/pin - Pin session\n  authenticated.post('/api/sessions/:key/pin', async (c) => {\n    const key = c.req.param('key');\n    const result = await service.pinSession(key);\n    return c.json(result);\n  });\n\n  // POST /api/sessions/:key/unpin - Unpin session\n  authenticated.post('/api/sessions/:key/unpin', async (c) => {\n    const key = c.req.param('key');\n    const result = await service.unpinSession(key);\n    return c.json(result);\n  });\n\n  // POST /api/sessions/:key/rename - Rename session\n  authenticated.post('/api/sessions/:key/rename', async (c) => {\n    const key = c.req.param('key');\n\n    const body = await c.req.json();\n    const { name } = body;\n    const result = await service.renameSession(key, name);\n    return c.json(result);\n  });\n\n  // ========== Subagent REST API (/api/subagents) ==========\n\n  // GET /api/subagents - List subagent sessions\n  authenticated.get('/api/subagents', async (c) => {\n    const query = c.req.query();\n    const result = await service.listSubagents({\n      limit: query.limit ? parseInt(query.limit) : undefined,\n      offset: query.offset ? parseInt(query.offset) : undefined,\n    });\n    return c.json(result);\n  });\n\n  // GET /api/subagents/:key - Get subagent session detail\n  authenticated.get('/api/subagents/:key', async (c) => {\n    const key = c.req.param('key');\n    // Verify it's a subagent session\n    if (!key.startsWith('subagent:')) {\n      return c.json({ error: 'Not a subagent session' }, 400);\n    }\n    const session = await service.getSession(key);\n    if (!session) {\n      return c.json({ error: 'Subagent session not found' }, 404);\n    }\n    return c.json({ session });\n  });\n}\n"],"mappings":";;;;kBAEmF;oBACA;AAInF,SAAgB,uBAAuB,eAAqB,MAAoC;CAC9F,MAAM,EAAE,YAAY;AAKpB,eAAc,KAAK,iBAAiB,OAAO,MAAM;EAC/C,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,UAAU,KAAK,WAAW;EAChC,MAAM,aAAa,QAAQ;EAC3B,IAAI,UACF,OAAO,KAAK,YAAY,YAAY,KAAK,QAAQ,MAAM,GACnD,KAAK,QAAQ,MAAM,CAAC,aAAa,GACjC,kBAAkB,WAAW;AACnC,MAAI,CAAC,YAAY,SAAS,WAAW,CACnC,WAAU,kBAAkB,WAAW;AAKzC,MAAI,KAAK,SAAS;GAChB,MAAM,aAAa,gBAAgB;IACjC;IACA,QAAQ;IACR,WAAW;IACX,UAAU;IACV,QAAQ,KAAK;IACd,CAAC;AAEF,SAAM,QAAQ,uBAAuB,aAAa,YAAY,EAAE,CAAC;GACjE,MAAM,UAAU,MAAM,QAAQ,WAAW,WAAW;AACpD,UAAO,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI;;EAYjC,MAAM,gBAAe,MARU,QAAQ,aAAa;GAClD;GACA,OAAO;GACP,QAAQ;GACR,WAAW;GACZ,CAAC,EAGoC,MAAM,MAAM,MAAM;AACtD,OAAI,EAAE,iBAAiB,EAAG,QAAO;AAEjC,UADe,gBAAgB,EAAE,IACpB,EAAE,YAAY;IAC3B;AAEF,MAAI,cAAc;GAEhB,MAAM,UAAU,MAAM,QAAQ,WAAW,aAAa,IAAI;AAC1D,UAAO,EAAE,KAAK;IAAE;IAAS,QAAQ;IAAM,EAAE,IAAI;;EAI/C,MAAM,SAAS,QAAQ,KAAK,KAAK;EACjC,MAAM,aAAa,gBAAgB;GACjC;GACA,QAAQ;GACR,WAAW;GACX,UAAU;GACV,QAAQ;GACT,CAAC;AAEF,QAAM,QAAQ,uBAAuB,aAAa,YAAY,EAAE,CAAC;EAEjE,MAAM,UAAU,MAAM,QAAQ,WAAW,WAAW;AACpD,SAAO,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI;GAC/B;AAGF,eAAc,IAAI,iBAAiB,OAAO,MAAM;EAC9C,MAAM,QAAQ,EAAE,IAAI,OAAO;EAC3B,MAAM,SAAS,MAAM,QAAQ,aAAa;GACxC,QAAQ,MAAM;GACd,QAAQ,MAAM;GACd,SAAS,MAAM;GACf,OAAO,MAAM,QAAQ,SAAS,MAAM,MAAM,GAAG,KAAA;GAC7C,QAAQ,MAAM,SAAS,SAAS,MAAM,OAAO,GAAG,KAAA;GACjD,CAAC;AACF,SAAO,EAAE,KAAK,OAAO;GACrB;AAGF,eAAc,IAAI,uBAAuB,OAAO,MAAM;EACpD,MAAM,SAAS,MAAM,QAAQ,iBAAiB;AAC9C,SAAO,EAAE,KAAK,OAAO;GACrB;AAGF,eAAc,IAAI,0BAA0B,OAAO,MAAM;EACvD,MAAM,UAAU,EAAE,IAAI,MAAM,UAAU;EACtC,MAAM,UAAU,MAAM,QAAQ,kBAAkB,WAAW,KAAA,EAAU;AACrE,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,SAAS;GAAE,CAAC;GACjD;AAGF,eAAc,IAAI,mCAAmC,OAAO,MAAM;EAChE,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAC9B,MAAM,UAAU,MAAM,QAAQ,sBAAsB,IAAI;AACxD,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM;GAAS,CAAC;GACpC;AAEF,eAAc,MAAM,mCAAmC,OAAO,MAAM;EAClE,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAC9B,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,SAAS,MAAM,QAAQ,wBAAwB,KAAK,KAAK;AAC/D,MAAI,CAAC,OAAO,GACV,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,OAAO;GAAO,EAAE,IAAI;AAExD,SAAO,EAAE,KAAK,EAAE,IAAI,MAAM,CAAC;GAC3B;AAGF,eAAc,IAAI,+BAA+B,OAAO,MAAM;EAC5D,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAC9B,MAAM,WAAW,EAAE,IAAI,MAAM,QAAQ;EACrC,MAAM,cAAc,WAAW,OAAO,SAAS,UAAU,GAAG,GAAG,KAAA;EAC/D,MAAM,QACJ,gBAAgB,KAAA,KAAa,OAAO,SAAS,YAAY,GACrD,KAAK,IAAI,KAAK,KAAK,IAAI,GAAG,YAAY,CAAC,GACvC,KAAA;EAEN,MAAM,UAAU,MAAM,QAAQ,WAAW,IAAI;AAC7C,MAAI,CAAC,QACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAqB,EAAE,IAAI;EAG/D,MAAM,WAAW,wBAAwB,QAAQ,UAAU,EAAE,OAAO,CAAC;AACrE,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,UAAU;GAAE,CAAC;GAClD;AAGF,eAAc,IAAI,sBAAsB,OAAO,MAAM;EACnD,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAC9B,MAAM,UAAU,MAAM,QAAQ,WAAW,IAAI;AAC7C,MAAI,CAAC,QACH,QAAO,EAAE,KAAK,EAAE,OAAO,qBAAqB,EAAE,IAAI;AAEpD,SAAO,EAAE,KAAK,EAAE,SAAS,CAAC;GAC1B;AAGF,eAAc,IAAI,6BAA6B,OAAO,MAAM;EAC1D,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAC9B,MAAM,SAAS,EAAE,IAAI,MAAM,SAAS,IAAW;EAC/C,MAAM,SAAS,MAAM,QAAQ,cAAc,KAAK,OAAO;AACvD,SAAO,EAAE,KAAK,OAAO;GACrB;AAGF,eAAc,OAAO,+BAA+B,OAAO,MAAM;EAC/D,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAC9B,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,aAAa,OAAO,KAAK,eAAe,WAAW,KAAK,aAAa;EAC3E,MAAM,QAAQ,OAAO,KAAK,UAAU,WAAW,KAAK,QAAQ;AAC5D,MAAI,aAAa,KAAK,SAAS,EAC7B,QAAO,EAAE,KAAK,EAAE,OAAO,+BAA+B,EAAE,IAAI;EAE9D,MAAM,SAAS,MAAM,QAAQ,uBAAuB,aAAa,IAAI;AACrE,MAAI,CAAC,UAAU,cAAc,OAAO,OAClC,QAAO,EAAE,KAAK,EAAE,OAAO,sBAAsB,EAAE,IAAI;EAErD,MAAM,cAAc,KAAK,IAAI,OAAO,OAAO,SAAS,WAAW;EAC/D,MAAM,OAAO,OAAO,MAAM,GAAG,WAAW,CAAC,OAAO,OAAO,MAAM,aAAa,YAAY,CAAC;AACvF,QAAM,QAAQ,uBAAuB,aAAa,KAAK,KAAK;AAC5D,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;GAAa,CAAC;GACjD;AAGF,eAAc,OAAO,sBAAsB,OAAO,MAAM;EACtD,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAC9B,MAAM,SAAS,MAAM,QAAQ,cAAc,IAAI;AAC/C,SAAO,EAAE,KAAK,OAAO;GACrB;AAGF,eAAc,KAAK,8BAA8B,OAAO,MAAM;EAC5D,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAC9B,MAAM,SAAS,MAAM,QAAQ,eAAe,IAAI;AAChD,SAAO,EAAE,KAAK,OAAO;GACrB;AAGF,eAAc,KAAK,gCAAgC,OAAO,MAAM;EAC9D,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAC9B,MAAM,SAAS,MAAM,QAAQ,iBAAiB,IAAI;AAClD,SAAO,EAAE,KAAK,OAAO;GACrB;AAGF,eAAc,KAAK,0BAA0B,OAAO,MAAM;EACxD,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAC9B,MAAM,SAAS,MAAM,QAAQ,WAAW,IAAI;AAC5C,SAAO,EAAE,KAAK,OAAO;GACrB;AAGF,eAAc,KAAK,4BAA4B,OAAO,MAAM;EAC1D,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAC9B,MAAM,SAAS,MAAM,QAAQ,aAAa,IAAI;AAC9C,SAAO,EAAE,KAAK,OAAO;GACrB;AAGF,eAAc,KAAK,6BAA6B,OAAO,MAAM;EAC3D,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAG9B,MAAM,EAAE,SAAS,MADE,EAAE,IAAI,MAAM;EAE/B,MAAM,SAAS,MAAM,QAAQ,cAAc,KAAK,KAAK;AACrD,SAAO,EAAE,KAAK,OAAO;GACrB;AAKF,eAAc,IAAI,kBAAkB,OAAO,MAAM;EAC/C,MAAM,QAAQ,EAAE,IAAI,OAAO;EAC3B,MAAM,SAAS,MAAM,QAAQ,cAAc;GACzC,OAAO,MAAM,QAAQ,SAAS,MAAM,MAAM,GAAG,KAAA;GAC7C,QAAQ,MAAM,SAAS,SAAS,MAAM,OAAO,GAAG,KAAA;GACjD,CAAC;AACF,SAAO,EAAE,KAAK,OAAO;GACrB;AAGF,eAAc,IAAI,uBAAuB,OAAO,MAAM;EACpD,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;AAE9B,MAAI,CAAC,IAAI,WAAW,YAAY,CAC9B,QAAO,EAAE,KAAK,EAAE,OAAO,0BAA0B,EAAE,IAAI;EAEzD,MAAM,UAAU,MAAM,QAAQ,WAAW,IAAI;AAC7C,MAAI,CAAC,QACH,QAAO,EAAE,KAAK,EAAE,OAAO,8BAA8B,EAAE,IAAI;AAE7D,SAAO,EAAE,KAAK,EAAE,SAAS,CAAC;GAC1B"}

package/dist/src/gateway/security/audit.d.ts

@@ -0,0 +1,18 @@
+import type { ResolvedGatewayAuth } from '../auth.js';
+export type SecurityAuditFinding = {
+    checkId: string;
+    severity: 'critical' | 'warn' | 'info';
+    title: string;
+    detail: string;
+};
+/**
+ * Audit the gateway configuration at startup and log security findings.
+ *
+ * This provides an early-warning system similar to OpenClaw's `security audit`
+ * command, adapted for xopc's configuration surface.
+ */
+export declare function auditGatewayConfig(params: {
+    auth: ResolvedGatewayAuth;
+    host?: string;
+    corsOrigins?: string[];
+}): SecurityAuditFinding[];

package/dist/src/gateway/security/audit.js

@@ -0,0 +1,68 @@
+import { createLogger } from "../../utils/logger/index.js";
+import { init_logger } from "../../utils/logger.js";
+//#region src/gateway/security/audit.ts
+init_logger();
+const log = createLogger("SecurityAudit");
+/**
+* Audit the gateway configuration at startup and log security findings.
+*
+* This provides an early-warning system similar to OpenClaw's `security audit`
+* command, adapted for xopc's configuration surface.
+*/
+function auditGatewayConfig(params) {
+	const findings = [];
+	if (params.auth.mode === "none") if (!(!params.host || params.host === "127.0.0.1" || params.host === "localhost" || params.host === "::1")) findings.push({
+		checkId: "gateway.auth.none_on_network",
+		severity: "critical",
+		title: "Gateway has no authentication on a network-accessible address",
+		detail: `Auth mode is "none" but gateway binds to ${params.host}. Any host on the network can access the gateway without credentials. Set gateway.auth.mode to "token" and configure a token.`
+	});
+	else findings.push({
+		checkId: "gateway.auth.none_loopback",
+		severity: "warn",
+		title: "Gateway authentication is disabled",
+		detail: "Auth mode is \"none\". This is acceptable for local development but should not be used in production."
+	});
+	if (params.corsOrigins?.includes("*")) findings.push({
+		checkId: "gateway.cors.wildcard",
+		severity: "warn",
+		title: "CORS allows all origins",
+		detail: "corsOrigins includes \"*\". Any website can make authenticated API calls to the gateway if it can obtain the token."
+	});
+	if (params.corsOrigins && params.corsOrigins.length > 20) findings.push({
+		checkId: "gateway.cors.excessive_origins",
+		severity: "info",
+		title: "Large number of CORS origins configured",
+		detail: `${params.corsOrigins.length} CORS origins configured. Review whether all are necessary.`
+	});
+	if (params.auth.mode === "token" && params.auth.token) {
+		if (!process.env.XOPC_GATEWAY_TOKEN) findings.push({
+			checkId: "gateway.auth.auto_generated_token",
+			severity: "info",
+			title: "Gateway token was auto-generated",
+			detail: "No explicit XOPC_GATEWAY_TOKEN set. The token was auto-generated and will change on each restart. Set XOPC_GATEWAY_TOKEN for a stable token."
+		});
+	}
+	for (const finding of findings) {
+		const logData = {
+			checkId: finding.checkId,
+			detail: finding.detail
+		};
+		switch (finding.severity) {
+			case "critical":
+				log.error(logData, `Security audit: ${finding.title}`);
+				break;
+			case "warn":
+				log.warn(logData, `Security audit: ${finding.title}`);
+				break;
+			case "info":
+				log.info(logData, `Security audit: ${finding.title}`);
+				break;
+		}
+	}
+	return findings;
+}
+//#endregion
+export { auditGatewayConfig };
+
+//# sourceMappingURL=audit.js.map

package/dist/src/gateway/security/audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audit.js","names":[],"sources":["../../../../src/gateway/security/audit.ts"],"sourcesContent":["import type { ResolvedGatewayAuth } from '../auth.js';\nimport { createLogger } from '../../utils/logger.js';\n\nconst log = createLogger('SecurityAudit');\n\nexport type SecurityAuditFinding = {\n  checkId: string;\n  severity: 'critical' | 'warn' | 'info';\n  title: string;\n  detail: string;\n};\n\n/**\n * Audit the gateway configuration at startup and log security findings.\n *\n * This provides an early-warning system similar to OpenClaw's `security audit`\n * command, adapted for xopc's configuration surface.\n */\nexport function auditGatewayConfig(params: {\n  auth: ResolvedGatewayAuth;\n  host?: string;\n  corsOrigins?: string[];\n}): SecurityAuditFinding[] {\n  const findings: SecurityAuditFinding[] = [];\n\n  // Check: no auth on non-loopback bind\n  if (params.auth.mode === 'none') {\n    const isLoopback = !params.host ||\n      params.host === '127.0.0.1' ||\n      params.host === 'localhost' ||\n      params.host === '::1';\n\n    if (!isLoopback) {\n      findings.push({\n        checkId: 'gateway.auth.none_on_network',\n        severity: 'critical',\n        title: 'Gateway has no authentication on a network-accessible address',\n        detail: `Auth mode is \"none\" but gateway binds to ${params.host}. ` +\n          'Any host on the network can access the gateway without credentials. ' +\n          'Set gateway.auth.mode to \"token\" and configure a token.',\n      });\n    } else {\n      findings.push({\n        checkId: 'gateway.auth.none_loopback',\n        severity: 'warn',\n        title: 'Gateway authentication is disabled',\n        detail: 'Auth mode is \"none\". This is acceptable for local development ' +\n          'but should not be used in production.',\n      });\n    }\n  }\n\n  // Check: wildcard CORS origins\n  if (params.corsOrigins?.includes('*')) {\n    findings.push({\n      checkId: 'gateway.cors.wildcard',\n      severity: 'warn',\n      title: 'CORS allows all origins',\n      detail: 'corsOrigins includes \"*\". Any website can make authenticated API calls ' +\n        'to the gateway if it can obtain the token.',\n    });\n  }\n\n  // Check: too many CORS origins may indicate misconfiguration\n  if (params.corsOrigins && params.corsOrigins.length > 20) {\n    findings.push({\n      checkId: 'gateway.cors.excessive_origins',\n      severity: 'info',\n      title: 'Large number of CORS origins configured',\n      detail: `${params.corsOrigins.length} CORS origins configured. Review whether all are necessary.`,\n    });\n  }\n\n  // Check: token mode without explicit token (auto-generated)\n  if (params.auth.mode === 'token' && params.auth.token) {\n    const envToken = process.env.XOPC_GATEWAY_TOKEN;\n    if (!envToken) {\n      findings.push({\n        checkId: 'gateway.auth.auto_generated_token',\n        severity: 'info',\n        title: 'Gateway token was auto-generated',\n        detail: 'No explicit XOPC_GATEWAY_TOKEN set. The token was auto-generated and will ' +\n          'change on each restart. Set XOPC_GATEWAY_TOKEN for a stable token.',\n      });\n    }\n  }\n\n  // Emit findings as log entries\n  for (const finding of findings) {\n    const logData = { checkId: finding.checkId, detail: finding.detail };\n    switch (finding.severity) {\n      case 'critical':\n        log.error(logData, `Security audit: ${finding.title}`);\n        break;\n      case 'warn':\n        log.warn(logData, `Security audit: ${finding.title}`);\n        break;\n      case 'info':\n        log.info(logData, `Security audit: ${finding.title}`);\n        break;\n    }\n  }\n\n  return findings;\n}\n"],"mappings":";;;aACqD;AAErD,MAAM,MAAM,aAAa,gBAAgB;;;;;;;AAezC,SAAgB,mBAAmB,QAIR;CACzB,MAAM,WAAmC,EAAE;AAG3C,KAAI,OAAO,KAAK,SAAS,OAMvB,KAAI,EALe,CAAC,OAAO,QACzB,OAAO,SAAS,eAChB,OAAO,SAAS,eAChB,OAAO,SAAS,OAGhB,UAAS,KAAK;EACZ,SAAS;EACT,UAAU;EACV,OAAO;EACP,QAAQ,4CAA4C,OAAO,KAAK;EAGjE,CAAC;KAEF,UAAS,KAAK;EACZ,SAAS;EACT,UAAU;EACV,OAAO;EACP,QAAQ;EAET,CAAC;AAKN,KAAI,OAAO,aAAa,SAAS,IAAI,CACnC,UAAS,KAAK;EACZ,SAAS;EACT,UAAU;EACV,OAAO;EACP,QAAQ;EAET,CAAC;AAIJ,KAAI,OAAO,eAAe,OAAO,YAAY,SAAS,GACpD,UAAS,KAAK;EACZ,SAAS;EACT,UAAU;EACV,OAAO;EACP,QAAQ,GAAG,OAAO,YAAY,OAAO;EACtC,CAAC;AAIJ,KAAI,OAAO,KAAK,SAAS,WAAW,OAAO,KAAK;MAE1C,CADa,QAAQ,IAAI,mBAE3B,UAAS,KAAK;GACZ,SAAS;GACT,UAAU;GACV,OAAO;GACP,QAAQ;GAET,CAAC;;AAKN,MAAK,MAAM,WAAW,UAAU;EAC9B,MAAM,UAAU;GAAE,SAAS,QAAQ;GAAS,QAAQ,QAAQ;GAAQ;AACpE,UAAQ,QAAQ,UAAhB;GACE,KAAK;AACH,QAAI,MAAM,SAAS,mBAAmB,QAAQ,QAAQ;AACtD;GACF,KAAK;AACH,QAAI,KAAK,SAAS,mBAAmB,QAAQ,QAAQ;AACrD;GACF,KAAK;AACH,QAAI,KAAK,SAAS,mBAAmB,QAAQ,QAAQ;AACrD;;;AAIN,QAAO"}

package/dist/src/gateway/security/csp.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Compute SHA-256 CSP hashes for inline `<script>` blocks in an HTML string.
+ * Only scripts without a `src` attribute are considered inline.
+ */
+export declare function computeInlineScriptHashes(html: string): string[];
+/**
+ * Build a Content-Security-Policy header string.
+ *
+ * For the gateway console, we use:
+ * - `script-src 'self'` + optional SHA-256 hashes for inline scripts (no unsafe-inline)
+ * - `style-src 'self' 'unsafe-inline'` (Tailwind + runtime style injection)
+ * - `frame-ancestors 'none'` (prevent clickjacking)
+ * - `base-uri 'none'` (prevent base tag hijacking)
+ * - `object-src 'none'` (prevent plugin execution)
+ */
+export declare function buildGatewayConsoleCspHeader(options?: {
+    inlineScriptHashes?: string[];
+    connectSrc?: string;
+}): string;

package/dist/src/gateway/security/csp.js

@@ -0,0 +1,52 @@
+import { createHash } from "node:crypto";
+//#region src/gateway/security/csp.ts
+/**
+* Compute SHA-256 CSP hashes for inline `<script>` blocks in an HTML string.
+* Only scripts without a `src` attribute are considered inline.
+*/
+function computeInlineScriptHashes(html) {
+	const hashes = [];
+	const scriptRegex = /<script(?:\s[^>]*)?>([^]*?)<\/script>/gi;
+	let match;
+	while ((match = scriptRegex.exec(html)) !== null) {
+		if (hasSrcAttribute(match[0].slice(0, match[0].indexOf(">") + 1))) continue;
+		const content = match[1];
+		if (!content) continue;
+		const hash = createHash("sha256").update(content, "utf8").digest("base64");
+		hashes.push(`sha256-${hash}`);
+	}
+	return hashes;
+}
+const ATTRIBUTE_NAME_REGEX = /\s([^\s=/>]+)(?:\s*=\s*(?:"[^"]*"|'[^']*'|[^\s>]+))?/g;
+function hasSrcAttribute(openTag) {
+	return Array.from(openTag.matchAll(ATTRIBUTE_NAME_REGEX)).some((attrMatch) => attrMatch[1]?.toLowerCase() === "src");
+}
+/**
+* Build a Content-Security-Policy header string.
+*
+* For the gateway console, we use:
+* - `script-src 'self'` + optional SHA-256 hashes for inline scripts (no unsafe-inline)
+* - `style-src 'self' 'unsafe-inline'` (Tailwind + runtime style injection)
+* - `frame-ancestors 'none'` (prevent clickjacking)
+* - `base-uri 'none'` (prevent base tag hijacking)
+* - `object-src 'none'` (prevent plugin execution)
+*/
+function buildGatewayConsoleCspHeader(options) {
+	const hashes = options?.inlineScriptHashes;
+	return [
+		"default-src 'self'",
+		"base-uri 'none'",
+		"object-src 'none'",
+		"frame-ancestors 'none'",
+		hashes?.length ? `script-src 'self' ${hashes.map((hash) => `'${hash}'`).join(" ")}` : "script-src 'self'",
+		"style-src 'self' 'unsafe-inline'",
+		"img-src 'self' data: blob: https:",
+		"font-src 'self'",
+		`connect-src ${options?.connectSrc ?? "'self' ws: wss:"}`,
+		"worker-src 'self'"
+	].join("; ");
+}
+//#endregion
+export { buildGatewayConsoleCspHeader, computeInlineScriptHashes };
+
+//# sourceMappingURL=csp.js.map

package/dist/src/gateway/security/csp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"csp.js","names":[],"sources":["../../../../src/gateway/security/csp.ts"],"sourcesContent":["import { createHash } from 'node:crypto';\n\n/**\n * Compute SHA-256 CSP hashes for inline `<script>` blocks in an HTML string.\n * Only scripts without a `src` attribute are considered inline.\n */\nexport function computeInlineScriptHashes(html: string): string[] {\n  const hashes: string[] = [];\n  const scriptRegex = /<script(?:\\s[^>]*)?>([^]*?)<\\/script>/gi;\n  let match: RegExpExecArray | null;\n  while ((match = scriptRegex.exec(html)) !== null) {\n    const openTag = match[0].slice(0, match[0].indexOf('>') + 1);\n    if (hasSrcAttribute(openTag)) {\n      continue;\n    }\n    const content = match[1];\n    if (!content) {\n      continue;\n    }\n    const hash = createHash('sha256').update(content, 'utf8').digest('base64');\n    hashes.push(`sha256-${hash}`);\n  }\n  return hashes;\n}\n\nconst ATTRIBUTE_NAME_REGEX = /\\s([^\\s=/>]+)(?:\\s*=\\s*(?:\"[^\"]*\"|'[^']*'|[^\\s>]+))?/g;\n\nfunction hasSrcAttribute(openTag: string): boolean {\n  return Array.from(openTag.matchAll(ATTRIBUTE_NAME_REGEX)).some(\n    (attrMatch) => attrMatch[1]?.toLowerCase() === 'src',\n  );\n}\n\n/**\n * Build a Content-Security-Policy header string.\n *\n * For the gateway console, we use:\n * - `script-src 'self'` + optional SHA-256 hashes for inline scripts (no unsafe-inline)\n * - `style-src 'self' 'unsafe-inline'` (Tailwind + runtime style injection)\n * - `frame-ancestors 'none'` (prevent clickjacking)\n * - `base-uri 'none'` (prevent base tag hijacking)\n * - `object-src 'none'` (prevent plugin execution)\n */\nexport function buildGatewayConsoleCspHeader(options?: {\n  inlineScriptHashes?: string[];\n  connectSrc?: string;\n}): string {\n  const hashes = options?.inlineScriptHashes;\n  const scriptSrc = hashes?.length\n    ? `script-src 'self' ${hashes.map((hash) => `'${hash}'`).join(' ')}`\n    : \"script-src 'self'\";\n  const connectSrc = options?.connectSrc ?? \"'self' ws: wss:\";\n\n  return [\n    \"default-src 'self'\",\n    \"base-uri 'none'\",\n    \"object-src 'none'\",\n    \"frame-ancestors 'none'\",\n    scriptSrc,\n    \"style-src 'self' 'unsafe-inline'\",\n    \"img-src 'self' data: blob: https:\",\n    \"font-src 'self'\",\n    `connect-src ${connectSrc}`,\n    \"worker-src 'self'\",\n  ].join('; ');\n}\n"],"mappings":";;;;;;AAMA,SAAgB,0BAA0B,MAAwB;CAChE,MAAM,SAAmB,EAAE;CAC3B,MAAM,cAAc;CACpB,IAAI;AACJ,SAAQ,QAAQ,YAAY,KAAK,KAAK,MAAM,MAAM;AAEhD,MAAI,gBADY,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,QAAQ,IAAI,GAAG,EAC/B,CAAC,CAC1B;EAEF,MAAM,UAAU,MAAM;AACtB,MAAI,CAAC,QACH;EAEF,MAAM,OAAO,WAAW,SAAS,CAAC,OAAO,SAAS,OAAO,CAAC,OAAO,SAAS;AAC1E,SAAO,KAAK,UAAU,OAAO;;AAE/B,QAAO;;AAGT,MAAM,uBAAuB;AAE7B,SAAS,gBAAgB,SAA0B;AACjD,QAAO,MAAM,KAAK,QAAQ,SAAS,qBAAqB,CAAC,CAAC,MACvD,cAAc,UAAU,IAAI,aAAa,KAAK,MAChD;;;;;;;;;;;;AAaH,SAAgB,6BAA6B,SAGlC;CACT,MAAM,SAAS,SAAS;AAMxB,QAAO;EACL;EACA;EACA;EACA;EATgB,QAAQ,SACtB,qBAAqB,OAAO,KAAK,SAAS,IAAI,KAAK,GAAG,CAAC,KAAK,IAAI,KAChE;EASF;EACA;EACA;EACA,eAXiB,SAAS,cAAc;EAYxC;EACD,CAAC,KAAK,KAAK"}

package/dist/src/gateway/security/dangerous-tools.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Tools denied via Gateway HTTP tool invoke endpoints by default.
+ *
+ * These are high-risk because they enable command execution, file mutation,
+ * session orchestration, or control-plane actions that don't belong on a
+ * non-interactive HTTP surface.
+ */
+export declare const DEFAULT_GATEWAY_HTTP_TOOL_DENY: readonly string[];
+/**
+ * Check whether a tool name is in the default HTTP deny list.
+ */
+export declare function isDangerousHttpTool(toolName: string): boolean;
+/**
+ * Filter a list of tool names, removing those on the HTTP deny list.
+ * Returns only the safe tools.
+ */
+export declare function filterDangerousHttpTools(toolNames: string[]): {
+    allowed: string[];
+    denied: string[];
+};

package/dist/src/gateway/security/dangerous-tools.js

@@ -0,0 +1,46 @@
+//#region src/gateway/security/dangerous-tools.ts
+/**
+* Tools denied via Gateway HTTP tool invoke endpoints by default.
+*
+* These are high-risk because they enable command execution, file mutation,
+* session orchestration, or control-plane actions that don't belong on a
+* non-interactive HTTP surface.
+*/
+const DEFAULT_GATEWAY_HTTP_TOOL_DENY = [
+	"exec",
+	"spawn",
+	"shell",
+	"fs_write",
+	"fs_delete",
+	"fs_move",
+	"apply_patch",
+	"sessions_spawn",
+	"sessions_send",
+	"cron",
+	"gateway"
+];
+const DANGEROUS_TOOL_SET = new Set(DEFAULT_GATEWAY_HTTP_TOOL_DENY);
+/**
+* Check whether a tool name is in the default HTTP deny list.
+*/
+function isDangerousHttpTool(toolName) {
+	return DANGEROUS_TOOL_SET.has(toolName.toLowerCase());
+}
+/**
+* Filter a list of tool names, removing those on the HTTP deny list.
+* Returns only the safe tools.
+*/
+function filterDangerousHttpTools(toolNames) {
+	const allowed = [];
+	const denied = [];
+	for (const name of toolNames) if (isDangerousHttpTool(name)) denied.push(name);
+	else allowed.push(name);
+	return {
+		allowed,
+		denied
+	};
+}
+//#endregion
+export { DEFAULT_GATEWAY_HTTP_TOOL_DENY, filterDangerousHttpTools, isDangerousHttpTool };
+
+//# sourceMappingURL=dangerous-tools.js.map

package/dist/src/gateway/security/dangerous-tools.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"dangerous-tools.js","names":[],"sources":["../../../../src/gateway/security/dangerous-tools.ts"],"sourcesContent":["/**\n * Tools denied via Gateway HTTP tool invoke endpoints by default.\n *\n * These are high-risk because they enable command execution, file mutation,\n * session orchestration, or control-plane actions that don't belong on a\n * non-interactive HTTP surface.\n */\nexport const DEFAULT_GATEWAY_HTTP_TOOL_DENY: readonly string[] = [\n  // Direct command execution — immediate RCE surface\n  'exec',\n  // Arbitrary child process creation\n  'spawn',\n  // Shell command execution\n  'shell',\n  // Arbitrary file mutation on the host\n  'fs_write',\n  // Arbitrary file deletion on the host\n  'fs_delete',\n  // Arbitrary file move/rename on the host\n  'fs_move',\n  // Patch application can rewrite arbitrary files\n  'apply_patch',\n  // Session orchestration — spawning agents remotely is RCE\n  'sessions_spawn',\n  // Cross-session injection — message injection across sessions\n  'sessions_send',\n  // Persistent automation control plane — can create/update/remove scheduled runs\n  'cron',\n  // Gateway control plane — prevents gateway reconfiguration via HTTP\n  'gateway',\n] as const;\n\nconst DANGEROUS_TOOL_SET: ReadonlySet<string> = new Set(DEFAULT_GATEWAY_HTTP_TOOL_DENY);\n\n/**\n * Check whether a tool name is in the default HTTP deny list.\n */\nexport function isDangerousHttpTool(toolName: string): boolean {\n  return DANGEROUS_TOOL_SET.has(toolName.toLowerCase());\n}\n\n/**\n * Filter a list of tool names, removing those on the HTTP deny list.\n * Returns only the safe tools.\n */\nexport function filterDangerousHttpTools(toolNames: string[]): {\n  allowed: string[];\n  denied: string[];\n} {\n  const allowed: string[] = [];\n  const denied: string[] = [];\n  for (const name of toolNames) {\n    if (isDangerousHttpTool(name)) {\n      denied.push(name);\n    } else {\n      allowed.push(name);\n    }\n  }\n  return { allowed, denied };\n}\n"],"mappings":";;;;;;;;AAOA,MAAa,iCAAoD;CAE/D;CAEA;CAEA;CAEA;CAEA;CAEA;CAEA;CAEA;CAEA;CAEA;CAEA;CACD;AAED,MAAM,qBAA0C,IAAI,IAAI,+BAA+B;;;;AAKvF,SAAgB,oBAAoB,UAA2B;AAC7D,QAAO,mBAAmB,IAAI,SAAS,aAAa,CAAC;;;;;;AAOvD,SAAgB,yBAAyB,WAGvC;CACA,MAAM,UAAoB,EAAE;CAC5B,MAAM,SAAmB,EAAE;AAC3B,MAAK,MAAM,QAAQ,UACjB,KAAI,oBAAoB,KAAK,CAC3B,QAAO,KAAK,KAAK;KAEjB,SAAQ,KAAK,KAAK;AAGtB,QAAO;EAAE;EAAS;EAAQ"}

package/dist/src/gateway/security/flood-guard.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Unauthorized flood guard for WebSocket connections.
+ *
+ * Tracks repeated unauthorized message attempts on a single WS connection
+ * and decides when to forcibly close it. Prevents a rogue client from
+ * holding a socket open and spamming unauthorized requests.
+ */
+export type FloodGuardOptions = {
+    /** Close the connection after this many unauthorized messages. @default 10 */
+    closeAfter?: number;
+    /** Log every N unauthorized messages to prevent log spam. @default 100 */
+    logEvery?: number;
+};
+export type FloodGuardDecision = {
+    shouldClose: boolean;
+    shouldLog: boolean;
+    count: number;
+    suppressedSinceLastLog: number;
+};
+export declare class UnauthorizedFloodGuard {
+    private readonly closeAfter;
+    private readonly logEvery;
+    private count;
+    private suppressedSinceLastLog;
+    constructor(options?: FloodGuardOptions);
+    registerUnauthorized(): FloodGuardDecision;
+    reset(): void;
+}

package/dist/src/gateway/security/flood-guard.js

@@ -0,0 +1,42 @@
+//#region src/gateway/security/flood-guard.ts
+const DEFAULT_CLOSE_AFTER = 10;
+const DEFAULT_LOG_EVERY = 100;
+var UnauthorizedFloodGuard = class {
+	closeAfter;
+	logEvery;
+	count = 0;
+	suppressedSinceLastLog = 0;
+	constructor(options) {
+		this.closeAfter = Math.max(1, Math.floor(options?.closeAfter ?? DEFAULT_CLOSE_AFTER));
+		this.logEvery = Math.max(1, Math.floor(options?.logEvery ?? DEFAULT_LOG_EVERY));
+	}
+	registerUnauthorized() {
+		this.count += 1;
+		const shouldClose = this.count > this.closeAfter;
+		if (!(this.count === 1 || this.count % this.logEvery === 0 || shouldClose)) {
+			this.suppressedSinceLastLog += 1;
+			return {
+				shouldClose,
+				shouldLog: false,
+				count: this.count,
+				suppressedSinceLastLog: 0
+			};
+		}
+		const suppressedSinceLastLog = this.suppressedSinceLastLog;
+		this.suppressedSinceLastLog = 0;
+		return {
+			shouldClose,
+			shouldLog: true,
+			count: this.count,
+			suppressedSinceLastLog
+		};
+	}
+	reset() {
+		this.count = 0;
+		this.suppressedSinceLastLog = 0;
+	}
+};
+//#endregion
+export { UnauthorizedFloodGuard };
+
+//# sourceMappingURL=flood-guard.js.map

package/dist/src/gateway/security/flood-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"flood-guard.js","names":[],"sources":["../../../../src/gateway/security/flood-guard.ts"],"sourcesContent":["/**\n * Unauthorized flood guard for WebSocket connections.\n *\n * Tracks repeated unauthorized message attempts on a single WS connection\n * and decides when to forcibly close it. Prevents a rogue client from\n * holding a socket open and spamming unauthorized requests.\n */\n\nexport type FloodGuardOptions = {\n  /** Close the connection after this many unauthorized messages. @default 10 */\n  closeAfter?: number;\n  /** Log every N unauthorized messages to prevent log spam. @default 100 */\n  logEvery?: number;\n};\n\nexport type FloodGuardDecision = {\n  shouldClose: boolean;\n  shouldLog: boolean;\n  count: number;\n  suppressedSinceLastLog: number;\n};\n\nconst DEFAULT_CLOSE_AFTER = 10;\nconst DEFAULT_LOG_EVERY = 100;\n\nexport class UnauthorizedFloodGuard {\n  private readonly closeAfter: number;\n  private readonly logEvery: number;\n  private count = 0;\n  private suppressedSinceLastLog = 0;\n\n  constructor(options?: FloodGuardOptions) {\n    this.closeAfter = Math.max(1, Math.floor(options?.closeAfter ?? DEFAULT_CLOSE_AFTER));\n    this.logEvery = Math.max(1, Math.floor(options?.logEvery ?? DEFAULT_LOG_EVERY));\n  }\n\n  registerUnauthorized(): FloodGuardDecision {\n    this.count += 1;\n    const shouldClose = this.count > this.closeAfter;\n    const shouldLog = this.count === 1 || this.count % this.logEvery === 0 || shouldClose;\n\n    if (!shouldLog) {\n      this.suppressedSinceLastLog += 1;\n      return {\n        shouldClose,\n        shouldLog: false,\n        count: this.count,\n        suppressedSinceLastLog: 0,\n      };\n    }\n\n    const suppressedSinceLastLog = this.suppressedSinceLastLog;\n    this.suppressedSinceLastLog = 0;\n    return {\n      shouldClose,\n      shouldLog: true,\n      count: this.count,\n      suppressedSinceLastLog,\n    };\n  }\n\n  reset(): void {\n    this.count = 0;\n    this.suppressedSinceLastLog = 0;\n  }\n}\n"],"mappings":";AAsBA,MAAM,sBAAsB;AAC5B,MAAM,oBAAoB;AAE1B,IAAa,yBAAb,MAAoC;CAClC;CACA;CACA,QAAgB;CAChB,yBAAiC;CAEjC,YAAY,SAA6B;AACvC,OAAK,aAAa,KAAK,IAAI,GAAG,KAAK,MAAM,SAAS,cAAc,oBAAoB,CAAC;AACrF,OAAK,WAAW,KAAK,IAAI,GAAG,KAAK,MAAM,SAAS,YAAY,kBAAkB,CAAC;;CAGjF,uBAA2C;AACzC,OAAK,SAAS;EACd,MAAM,cAAc,KAAK,QAAQ,KAAK;AAGtC,MAAI,EAFc,KAAK,UAAU,KAAK,KAAK,QAAQ,KAAK,aAAa,KAAK,cAE1D;AACd,QAAK,0BAA0B;AAC/B,UAAO;IACL;IACA,WAAW;IACX,OAAO,KAAK;IACZ,wBAAwB;IACzB;;EAGH,MAAM,yBAAyB,KAAK;AACpC,OAAK,yBAAyB;AAC9B,SAAO;GACL;GACA,WAAW;GACX,OAAO,KAAK;GACZ;GACD;;CAGH,QAAc;AACZ,OAAK,QAAQ;AACb,OAAK,yBAAyB"}

package/dist/src/gateway/security/index.d.ts

@@ -0,0 +1,9 @@
+export { safeEqualSecret } from './secret-equal.js';
+export { assertGatewayAuthNotKnownWeak, KNOWN_WEAK_GATEWAY_TOKEN_PLACEHOLDERS, } from './known-weak-secrets.js';
+export { checkBrowserOrigin } from './origin-check.js';
+export { computeInlineScriptHashes, buildGatewayConsoleCspHeader } from './csp.js';
+export { ADMIN_SCOPE, READ_SCOPE, WRITE_SCOPE, KNOWN_OPERATOR_SCOPES, DEFAULT_OPERATOR_SCOPES, isOperatorScope, authorizeRouteScope, authorizeScope, parseScopesHeader, type OperatorScope, } from './operator-scopes.js';
+export { DEFAULT_GATEWAY_HTTP_TOOL_DENY, isDangerousHttpTool, filterDangerousHttpTools, } from './dangerous-tools.js';
+export { createPreauthConnectionBudget, getMaxPreauthConnectionsPerIp, type PreauthConnectionBudget, } from './preauth-connection-budget.js';
+export { UnauthorizedFloodGuard, type FloodGuardOptions, type FloodGuardDecision, } from './flood-guard.js';
+export { auditGatewayConfig, type SecurityAuditFinding, } from './audit.js';

package/dist/src/gateway/security/index.js

@@ -0,0 +1,10 @@
+import { safeEqualSecret } from "./secret-equal.js";
+import { KNOWN_WEAK_GATEWAY_TOKEN_PLACEHOLDERS, assertGatewayAuthNotKnownWeak } from "./known-weak-secrets.js";
+import { auditGatewayConfig } from "./audit.js";
+import { buildGatewayConsoleCspHeader, computeInlineScriptHashes } from "./csp.js";
+import { checkBrowserOrigin } from "./origin-check.js";
+import { ADMIN_SCOPE, DEFAULT_OPERATOR_SCOPES, KNOWN_OPERATOR_SCOPES, READ_SCOPE, WRITE_SCOPE, authorizeRouteScope, authorizeScope, isOperatorScope, parseScopesHeader } from "./operator-scopes.js";
+import { DEFAULT_GATEWAY_HTTP_TOOL_DENY, filterDangerousHttpTools, isDangerousHttpTool } from "./dangerous-tools.js";
+import { UnauthorizedFloodGuard } from "./flood-guard.js";
+import { createPreauthConnectionBudget, getMaxPreauthConnectionsPerIp } from "./preauth-connection-budget.js";
+export { ADMIN_SCOPE, DEFAULT_GATEWAY_HTTP_TOOL_DENY, DEFAULT_OPERATOR_SCOPES, KNOWN_OPERATOR_SCOPES, KNOWN_WEAK_GATEWAY_TOKEN_PLACEHOLDERS, READ_SCOPE, UnauthorizedFloodGuard, WRITE_SCOPE, assertGatewayAuthNotKnownWeak, auditGatewayConfig, authorizeRouteScope, authorizeScope, buildGatewayConsoleCspHeader, checkBrowserOrigin, computeInlineScriptHashes, createPreauthConnectionBudget, filterDangerousHttpTools, getMaxPreauthConnectionsPerIp, isDangerousHttpTool, isOperatorScope, parseScopesHeader, safeEqualSecret };

package/dist/src/gateway/security/known-weak-secrets.d.ts

@@ -0,0 +1,10 @@
+import type { ResolvedGatewayAuth } from '../auth.js';
+/**
+ * Placeholder credentials that have shipped in `.env.example` or been used as
+ * copy-paste examples in onboarding docs. If any of these becomes the resolved
+ * gateway credential, reject it at startup. The operator almost certainly
+ * copied an example file verbatim without replacing the sentinel, which would
+ * otherwise leave the gateway protected by a publicly-known credential.
+ */
+export declare const KNOWN_WEAK_GATEWAY_TOKEN_PLACEHOLDERS: readonly ["change-me-to-a-long-random-token", "change-me-now", "your-secret-token-here", "test-token", "my-token", "token", "secret", "password", "123456", "abc123"];
+export declare function assertGatewayAuthNotKnownWeak(auth: ResolvedGatewayAuth): void;

package/dist/src/gateway/security/known-weak-secrets.js

@@ -0,0 +1,36 @@
+//#region src/gateway/security/known-weak-secrets.ts
+/**
+* Placeholder credentials that have shipped in `.env.example` or been used as
+* copy-paste examples in onboarding docs. If any of these becomes the resolved
+* gateway credential, reject it at startup. The operator almost certainly
+* copied an example file verbatim without replacing the sentinel, which would
+* otherwise leave the gateway protected by a publicly-known credential.
+*/
+const KNOWN_WEAK_GATEWAY_TOKEN_PLACEHOLDERS = [
+	"change-me-to-a-long-random-token",
+	"change-me-now",
+	"your-secret-token-here",
+	"test-token",
+	"my-token",
+	"token",
+	"secret",
+	"password",
+	"123456",
+	"abc123"
+];
+const KNOWN_WEAK_GATEWAY_TOKENS = new Set(KNOWN_WEAK_GATEWAY_TOKEN_PLACEHOLDERS);
+/**
+* Minimum acceptable token length. Short tokens are vulnerable to brute-force
+* even with rate limiting.
+*/
+const MIN_TOKEN_LENGTH = 16;
+function assertGatewayAuthNotKnownWeak(auth) {
+	if (auth.mode !== "token" || !auth.token) return;
+	const token = auth.token.trim();
+	if (KNOWN_WEAK_GATEWAY_TOKENS.has(token)) throw new Error("Invalid config: gateway auth token is set to a published example placeholder from docs or .env.example. Generate a real secret (e.g. `openssl rand -hex 32`) and set XOPC_GATEWAY_TOKEN or gateway.auth.token before starting the gateway.");
+	if (token.length < MIN_TOKEN_LENGTH) throw new Error(`Invalid config: gateway auth token is too short (${token.length} chars, minimum ${MIN_TOKEN_LENGTH}). Use a strong random token (e.g. \`openssl rand -hex 32\`).`);
+}
+//#endregion
+export { KNOWN_WEAK_GATEWAY_TOKEN_PLACEHOLDERS, assertGatewayAuthNotKnownWeak };
+
+//# sourceMappingURL=known-weak-secrets.js.map

package/dist/src/gateway/security/known-weak-secrets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"known-weak-secrets.js","names":[],"sources":["../../../../src/gateway/security/known-weak-secrets.ts"],"sourcesContent":["import type { ResolvedGatewayAuth } from '../auth.js';\n\n/**\n * Placeholder credentials that have shipped in `.env.example` or been used as\n * copy-paste examples in onboarding docs. If any of these becomes the resolved\n * gateway credential, reject it at startup. The operator almost certainly\n * copied an example file verbatim without replacing the sentinel, which would\n * otherwise leave the gateway protected by a publicly-known credential.\n */\n\nexport const KNOWN_WEAK_GATEWAY_TOKEN_PLACEHOLDERS = [\n  'change-me-to-a-long-random-token',\n  'change-me-now',\n  'your-secret-token-here',\n  'test-token',\n  'my-token',\n  'token',\n  'secret',\n  'password',\n  '123456',\n  'abc123',\n] as const;\n\nconst KNOWN_WEAK_GATEWAY_TOKENS: ReadonlySet<string> = new Set(\n  KNOWN_WEAK_GATEWAY_TOKEN_PLACEHOLDERS,\n);\n\n/**\n * Minimum acceptable token length. Short tokens are vulnerable to brute-force\n * even with rate limiting.\n */\nconst MIN_TOKEN_LENGTH = 16;\n\nexport function assertGatewayAuthNotKnownWeak(auth: ResolvedGatewayAuth): void {\n  if (auth.mode !== 'token' || !auth.token) {\n    return;\n  }\n\n  const token = auth.token.trim();\n\n  if (KNOWN_WEAK_GATEWAY_TOKENS.has(token)) {\n    throw new Error(\n      'Invalid config: gateway auth token is set to a published example placeholder ' +\n      'from docs or .env.example. Generate a real secret (e.g. `openssl rand -hex 32`) ' +\n      'and set XOPC_GATEWAY_TOKEN or gateway.auth.token before starting the gateway.',\n    );\n  }\n\n  if (token.length < MIN_TOKEN_LENGTH) {\n    throw new Error(\n      `Invalid config: gateway auth token is too short (${token.length} chars, minimum ${MIN_TOKEN_LENGTH}). ` +\n      'Use a strong random token (e.g. `openssl rand -hex 32`).',\n    );\n  }\n}\n"],"mappings":";;;;;;;;AAUA,MAAa,wCAAwC;CACnD;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACD;AAED,MAAM,4BAAiD,IAAI,IACzD,sCACD;;;;;AAMD,MAAM,mBAAmB;AAEzB,SAAgB,8BAA8B,MAAiC;AAC7E,KAAI,KAAK,SAAS,WAAW,CAAC,KAAK,MACjC;CAGF,MAAM,QAAQ,KAAK,MAAM,MAAM;AAE/B,KAAI,0BAA0B,IAAI,MAAM,CACtC,OAAM,IAAI,MACR,6OAGD;AAGH,KAAI,MAAM,SAAS,iBACjB,OAAM,IAAI,MACR,oDAAoD,MAAM,OAAO,kBAAkB,iBAAiB,+DAErG"}

package/dist/src/gateway/security/operator-scopes.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Operator scope system for fine-grained gateway API authorization.
+ *
+ * Each gateway API method maps to one or more required scopes.
+ * Clients declare their scopes at connection time; the gateway enforces
+ * that the declared scopes cover the method being invoked.
+ */
+export declare const ADMIN_SCOPE: "operator.admin";
+export declare const READ_SCOPE: "operator.read";
+export declare const WRITE_SCOPE: "operator.write";
+export type OperatorScope = typeof ADMIN_SCOPE | typeof READ_SCOPE | typeof WRITE_SCOPE;
+export declare const KNOWN_OPERATOR_SCOPES: ReadonlySet<OperatorScope>;
+export declare function isOperatorScope(value: unknown): value is OperatorScope;
+/** Default scopes granted to authenticated CLI / direct connections. */
+export declare const DEFAULT_OPERATOR_SCOPES: OperatorScope[];
+/**
+ * Check whether a set of granted scopes satisfies the required scope for a route.
+ */
+export declare function authorizeRouteScope(routePath: string, grantedScopes: readonly OperatorScope[]): {
+    allowed: true;
+} | {
+    allowed: false;
+    requiredScope: OperatorScope;
+};
+/**
+ * Check whether any of the granted scopes satisfies the required scope.
+ */
+export declare function authorizeScope(requiredScope: OperatorScope, grantedScopes: readonly OperatorScope[]): {
+    allowed: true;
+} | {
+    allowed: false;
+    requiredScope: OperatorScope;
+};
+/**
+ * Parse scopes from a comma-separated header value.
+ */
+export declare function parseScopesHeader(headerValue: string | undefined): OperatorScope[];