@xopcai/xopc 0.0.8 → 0.0.11

package/dist/src/gateway/hono/routes/models.js

@@ -2,12 +2,31 @@ import { resolveModelsJsonPath } from "../../../config/paths.js";
 import { init_resolve_config_value, testApiKeyResolution } from "../../../config/resolve-config-value.js";
 import { init_models_json, loadModelsJson, saveModelsJson, validateModelsConfig } from "../../../config/models-json.js";
 import { getModelRegistry } from "../../../providers/model-registry.js";
+import { getProviderRegistry, init_plugin_registry } from "../../../providers/plugin-registry.js";
 import { PROVIDER_META, getAllModels, getAllProviders, getAvailableModels, getProviderActiveKeySource, init_providers, isProviderConfigured } from "../../../providers/index.js";
 import { listImageGenerationProvidersSummary } from "../../../agent/image/generation/runtime.js";
 //#region src/gateway/hono/routes/models.ts
 init_models_json();
 init_resolve_config_value();
 init_providers();
+init_plugin_registry();
+function mapPluginModel(providerId, model, available) {
+	return {
+		id: `${providerId}/${model.id}`,
+		name: model.name,
+		provider: providerId,
+		contextWindow: model.contextWindow ?? 128e3,
+		maxTokens: model.maxOutputTokens ?? 4096,
+		reasoning: false,
+		vision: model.supportsImages ?? false,
+		cost: {
+			input: model.pricing?.input ?? 0,
+			output: model.pricing?.output ?? 0
+		},
+		available,
+		source: "extension"
+	};
+}
 function registerModelsRoutes(authenticated, deps) {
 	const { service } = deps;
 	authenticated.get("/api/models-json", async (c) => {
@@ -76,6 +95,7 @@ function registerModelsRoutes(authenticated, deps) {
 		});
 	});
 	authenticated.get("/api/models", async (c) => {
+		const pluginRegistry = getProviderRegistry();
 		const models = (await getAvailableModels()).map((m) => ({
 			id: `${m.provider}/${m.id}`,
 			name: m.name,
@@ -87,8 +107,17 @@ function registerModelsRoutes(authenticated, deps) {
 			cost: {
 				input: m.cost?.input ?? 0,
 				output: m.cost?.output ?? 0
-			}
+			},
+			...pluginRegistry.has(m.provider) ? { source: "extension" } : {}
 		}));
+		const existingIds = new Set(models.map((m) => m.id));
+		for (const plugin of pluginRegistry.listAll()) for (const model of plugin.models) {
+			const compositeId = `${plugin.id}/${model.id}`;
+			if (!existingIds.has(compositeId)) {
+				models.push(mapPluginModel(plugin.id, model, true));
+				existingIds.add(compositeId);
+			}
+		}
 		models.sort((a, b) => {
 			if (a.provider !== b.provider) return a.provider.localeCompare(b.provider);
 			return a.name.localeCompare(b.name);
@@ -106,6 +135,7 @@ function registerModelsRoutes(authenticated, deps) {
 		});
 	});
 	authenticated.get("/api/providers", async (c) => {
+		const pluginRegistry = getProviderRegistry();
 		const allModels = getAllModels();
 		const availableModels = await getAvailableModels();
 		const configured = new Set(availableModels.map((m) => `${m.provider}/${m.id}`));
@@ -121,8 +151,17 @@ function registerModelsRoutes(authenticated, deps) {
 				input: m.cost?.input ?? 0,
 				output: m.cost?.output ?? 0
 			},
-			available: configured.has(`${m.provider}/${m.id}`)
+			available: configured.has(`${m.provider}/${m.id}`),
+			...pluginRegistry.has(m.provider) ? { source: "extension" } : {}
 		}));
+		const existingIds = new Set(models.map((m) => m.id));
+		for (const plugin of pluginRegistry.listAll()) for (const model of plugin.models) {
+			const compositeId = `${plugin.id}/${model.id}`;
+			if (!existingIds.has(compositeId)) {
+				models.push(mapPluginModel(plugin.id, model, configured.has(compositeId)));
+				existingIds.add(compositeId);
+			}
+		}
 		models.sort((a, b) => {
 			if (a.provider !== b.provider) return a.provider.localeCompare(b.provider);
 			return a.name.localeCompare(b.name);
@@ -134,15 +173,29 @@ function registerModelsRoutes(authenticated, deps) {
 	});
 	authenticated.get("/api/providers/meta", async (c) => {
 		const providers = getAllProviders();
-		const meta = await Promise.all(providers.map(async (provider) => ({
-			id: provider,
-			name: PROVIDER_META[provider]?.name || provider,
-			category: PROVIDER_META[provider]?.category || "specialty",
-			supportsOAuth: PROVIDER_META[provider]?.supportsOAuth ?? false,
-			supportsApiKey: PROVIDER_META[provider]?.supportsApiKey ?? true,
-			configured: await isProviderConfigured(provider),
-			activeKeySource: await getProviderActiveKeySource(provider)
-		})));
+		const pluginRegistry = getProviderRegistry();
+		const meta = await Promise.all(providers.map(async (provider) => {
+			const plugin = pluginRegistry.get(provider);
+			return {
+				id: provider,
+				name: plugin?.name ?? PROVIDER_META[provider]?.name ?? provider,
+				category: plugin ? "extension" : PROVIDER_META[provider]?.category || "specialty",
+				supportsOAuth: plugin ? false : PROVIDER_META[provider]?.supportsOAuth ?? false,
+				supportsApiKey: plugin ? true : PROVIDER_META[provider]?.supportsApiKey ?? true,
+				configured: await isProviderConfigured(provider),
+				activeKeySource: await getProviderActiveKeySource(provider)
+			};
+		}));
+		const knownProviderIds = new Set(providers);
+		for (const plugin of pluginRegistry.listAll()) if (!knownProviderIds.has(plugin.id)) meta.push({
+			id: plugin.id,
+			name: plugin.name,
+			category: "extension",
+			supportsOAuth: false,
+			supportsApiKey: true,
+			configured: true,
+			activeKeySource: "extension"
+		});
 		return c.json({
 			ok: true,
 			payload: { providers: meta }

package/dist/src/gateway/hono/routes/models.js.map

@@ -1 +1 @@
-{"version":3,"file":"models.js","names":["getModelsJsonPath"],"sources":["../../../../../src/gateway/hono/routes/models.ts"],"sourcesContent":["import type { Hono } from 'hono';\n\nimport {\n  getModelsJsonPath,\n  loadModelsJson,\n  saveModelsJson,\n  validateModelsConfig,\n} from '../../../config/models-json.js';\nimport { testApiKeyResolution } from '../../../config/resolve-config-value.js';\nimport { listImageGenerationProvidersSummary } from '../../../agent/image/generation/runtime.js';\nimport {\n  getAllModels,\n  getAvailableModels,\n  getModelRegistry,\n  getAllProviders,\n  getProviderActiveKeySource,\n  isProviderConfigured,\n  PROVIDER_META,\n} from '../../../providers/index.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\n\nexport function registerModelsRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  const { service } = deps;\n\n  // GET /api/models-json - Get models.json configuration\n  authenticated.get('/api/models-json', async (c) => {\n    const path = getModelsJsonPath();\n    const { config, error } = loadModelsJson(path);\n    const registry = getModelRegistry();\n    \n    return c.json({\n      ok: true,\n      payload: {\n        config,\n        path,\n        exists: error === undefined,\n        loadError: error || registry.getError(),\n      },\n    });\n  });\n\n  // POST /api/models-json/validate - Validate models.json configuration\n  authenticated.post('/api/models-json/validate', async (c) => {\n    const body = await c.req.json();\n    const { config } = body;\n    \n    const result = validateModelsConfig(config);\n    \n    return c.json({\n      ok: true,\n      payload: result,\n    });\n  });\n\n  // PATCH /api/models-json - Save models.json configuration\n  authenticated.patch('/api/models-json', async (c) => {\n    const body = await c.req.json();\n    const { config } = body;\n    \n    const path = getModelsJsonPath();\n    const result = saveModelsJson(path, config);\n    \n    if (!result.success) {\n      return c.json({ ok: false, error: result.error }, 400);\n    }\n    \n    // Refresh registry\n    const registry = getModelRegistry();\n    registry.refresh();\n    \n    // Emit event\n    service.emit('models-json.updated', { \n      modelCount: registry.getAll().length,\n    });\n    \n    return c.json({ \n      ok: true, \n      payload: { \n        saved: true,\n        modelCount: registry.getAll().length,\n      },\n    });\n  });\n\n  // POST /api/models-json/reload - Hot reload models.json\n  authenticated.post('/api/models-json/reload', async (c) => {\n    const registry = getModelRegistry();\n    registry.refresh();\n    \n    const error = registry.getError();\n    const models = registry.getAll();\n    \n    service.emit('models-json.reloaded', { \n      modelCount: models.length,\n      error: error || undefined,\n    });\n    \n    return c.json({\n      ok: true,\n      payload: {\n        modelCount: models.length,\n        error,\n      },\n    });\n  });\n\n  // POST /api/models-json/test-api-key - Test API key resolution\n  authenticated.post('/api/models-json/test-api-key', async (c) => {\n    const body = await c.req.json();\n    const { value } = body;\n    \n    const result = testApiKeyResolution(value);\n    \n    return c.json({\n      ok: true,\n      payload: result,\n    });\n  });\n\n  // GET /api/models - Get available models (only configured providers)\n  authenticated.get('/api/models', async (c) => {\n    const models = (await getAvailableModels()).map(m => ({\n      id: `${m.provider}/${m.id}`,\n      name: m.name,\n      provider: m.provider,\n      contextWindow: m.contextWindow ?? 128000,\n      maxTokens: m.maxTokens ?? 4096,\n      reasoning: m.reasoning ?? false,\n      vision: m.input?.includes('image') ?? false,\n      cost: {\n        input: m.cost?.input ?? 0,\n        output: m.cost?.output ?? 0,\n      },\n    }));\n\n    // Sort by provider then name\n    models.sort((a, b) => {\n      if (a.provider !== b.provider) return a.provider.localeCompare(b.provider);\n      return a.name.localeCompare(b.name);\n    });\n\n    return c.json({ ok: true, payload: { models } });\n  });\n\n  // GET /api/image/providers — registered image generation providers and models (not in LLM model registry)\n  authenticated.get('/api/image/providers', (c) => {\n    const providers = listImageGenerationProvidersSummary();\n    return c.json({ ok: true, payload: { providers } });\n  });\n\n  // GET /api/providers - Get ALL available providers and models\n  authenticated.get('/api/providers', async (c) => {\n    const allModels = getAllModels();\n    const availableModels = await getAvailableModels();\n    const configured = new Set(availableModels.map(m => `${m.provider}/${m.id}`));\n    \n    const models = allModels.map(m => ({\n      id: `${m.provider}/${m.id}`,\n      name: m.name,\n      provider: m.provider,\n      contextWindow: m.contextWindow ?? 128000,\n      maxTokens: m.maxTokens ?? 4096,\n      reasoning: m.reasoning ?? false,\n      vision: m.input?.includes('image') ?? false,\n      cost: {\n        input: m.cost?.input ?? 0,\n        output: m.cost?.output ?? 0,\n      },\n      available: configured.has(`${m.provider}/${m.id}`),\n    }));\n\n    // Sort by provider then name\n    models.sort((a, b) => {\n      if (a.provider !== b.provider) return a.provider.localeCompare(b.provider);\n      return a.name.localeCompare(b.name);\n    });\n\n    return c.json({ ok: true, payload: { models } });\n  });\n\n  // GET /api/providers/meta - Get provider metadata (categories, display names)\n  authenticated.get('/api/providers/meta', async (c) => {\n    const providers = getAllProviders();\n    \n    const meta = await Promise.all(\n      providers.map(async (provider) => ({\n        id: provider,\n        name: PROVIDER_META[provider]?.name || provider,\n        category: PROVIDER_META[provider]?.category || 'specialty',\n        supportsOAuth: PROVIDER_META[provider]?.supportsOAuth ?? false,\n        supportsApiKey: PROVIDER_META[provider]?.supportsApiKey ?? true,\n        configured: await isProviderConfigured(provider),\n        activeKeySource: await getProviderActiveKeySource(provider),\n      })),\n    );\n\n    return c.json({ ok: true, payload: { providers: meta } });\n  });\n}\n"],"mappings":";;;;;;;kBAOwC;2BACuC;gBAU1C;AAGrC,SAAgB,qBAAqB,eAAqB,MAAoC;CAC5F,MAAM,EAAE,YAAY;AAGpB,eAAc,IAAI,oBAAoB,OAAO,MAAM;EACjD,MAAM,OAAOA,uBAAmB;EAChC,MAAM,EAAE,QAAQ,UAAU,eAAe,KAAK;EAC9C,MAAM,WAAW,kBAAkB;AAEnC,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP;IACA;IACA,QAAQ,UAAU,KAAA;IAClB,WAAW,SAAS,SAAS,UAAU;IACxC;GACF,CAAC;GACF;AAGF,eAAc,KAAK,6BAA6B,OAAO,MAAM;EAE3D,MAAM,EAAE,WADK,MAAM,EAAE,IAAI,MAAM;EAG/B,MAAM,SAAS,qBAAqB,OAAO;AAE3C,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;GACV,CAAC;GACF;AAGF,eAAc,MAAM,oBAAoB,OAAO,MAAM;EAEnD,MAAM,EAAE,WADK,MAAM,EAAE,IAAI,MAAM;EAI/B,MAAM,SAAS,eADFA,uBAAmB,EACI,OAAO;AAE3C,MAAI,CAAC,OAAO,QACV,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,OAAO;GAAO,EAAE,IAAI;EAIxD,MAAM,WAAW,kBAAkB;AACnC,WAAS,SAAS;AAGlB,UAAQ,KAAK,uBAAuB,EAClC,YAAY,SAAS,QAAQ,CAAC,QAC/B,CAAC;AAEF,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,OAAO;IACP,YAAY,SAAS,QAAQ,CAAC;IAC/B;GACF,CAAC;GACF;AAGF,eAAc,KAAK,2BAA2B,OAAO,MAAM;EACzD,MAAM,WAAW,kBAAkB;AACnC,WAAS,SAAS;EAElB,MAAM,QAAQ,SAAS,UAAU;EACjC,MAAM,SAAS,SAAS,QAAQ;AAEhC,UAAQ,KAAK,wBAAwB;GACnC,YAAY,OAAO;GACnB,OAAO,SAAS,KAAA;GACjB,CAAC;AAEF,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,YAAY,OAAO;IACnB;IACD;GACF,CAAC;GACF;AAGF,eAAc,KAAK,iCAAiC,OAAO,MAAM;EAE/D,MAAM,EAAE,UADK,MAAM,EAAE,IAAI,MAAM;EAG/B,MAAM,SAAS,qBAAqB,MAAM;AAE1C,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;GACV,CAAC;GACF;AAGF,eAAc,IAAI,eAAe,OAAO,MAAM;EAC5C,MAAM,UAAU,MAAM,oBAAoB,EAAE,KAAI,OAAM;GACpD,IAAI,GAAG,EAAE,SAAS,GAAG,EAAE;GACvB,MAAM,EAAE;GACR,UAAU,EAAE;GACZ,eAAe,EAAE,iBAAiB;GAClC,WAAW,EAAE,aAAa;GAC1B,WAAW,EAAE,aAAa;GAC1B,QAAQ,EAAE,OAAO,SAAS,QAAQ,IAAI;GACtC,MAAM;IACJ,OAAO,EAAE,MAAM,SAAS;IACxB,QAAQ,EAAE,MAAM,UAAU;IAC3B;GACF,EAAE;AAGH,SAAO,MAAM,GAAG,MAAM;AACpB,OAAI,EAAE,aAAa,EAAE,SAAU,QAAO,EAAE,SAAS,cAAc,EAAE,SAAS;AAC1E,UAAO,EAAE,KAAK,cAAc,EAAE,KAAK;IACnC;AAEF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,QAAQ;GAAE,CAAC;GAChD;AAGF,eAAc,IAAI,yBAAyB,MAAM;EAC/C,MAAM,YAAY,qCAAqC;AACvD,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,WAAW;GAAE,CAAC;GACnD;AAGF,eAAc,IAAI,kBAAkB,OAAO,MAAM;EAC/C,MAAM,YAAY,cAAc;EAChC,MAAM,kBAAkB,MAAM,oBAAoB;EAClD,MAAM,aAAa,IAAI,IAAI,gBAAgB,KAAI,MAAK,GAAG,EAAE,SAAS,GAAG,EAAE,KAAK,CAAC;EAE7E,MAAM,SAAS,UAAU,KAAI,OAAM;GACjC,IAAI,GAAG,EAAE,SAAS,GAAG,EAAE;GACvB,MAAM,EAAE;GACR,UAAU,EAAE;GACZ,eAAe,EAAE,iBAAiB;GAClC,WAAW,EAAE,aAAa;GAC1B,WAAW,EAAE,aAAa;GAC1B,QAAQ,EAAE,OAAO,SAAS,QAAQ,IAAI;GACtC,MAAM;IACJ,OAAO,EAAE,MAAM,SAAS;IACxB,QAAQ,EAAE,MAAM,UAAU;IAC3B;GACD,WAAW,WAAW,IAAI,GAAG,EAAE,SAAS,GAAG,EAAE,KAAK;GACnD,EAAE;AAGH,SAAO,MAAM,GAAG,MAAM;AACpB,OAAI,EAAE,aAAa,EAAE,SAAU,QAAO,EAAE,SAAS,cAAc,EAAE,SAAS;AAC1E,UAAO,EAAE,KAAK,cAAc,EAAE,KAAK;IACnC;AAEF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,QAAQ;GAAE,CAAC;GAChD;AAGF,eAAc,IAAI,uBAAuB,OAAO,MAAM;EACpD,MAAM,YAAY,iBAAiB;EAEnC,MAAM,OAAO,MAAM,QAAQ,IACzB,UAAU,IAAI,OAAO,cAAc;GACjC,IAAI;GACJ,MAAM,cAAc,WAAW,QAAQ;GACvC,UAAU,cAAc,WAAW,YAAY;GAC/C,eAAe,cAAc,WAAW,iBAAiB;GACzD,gBAAgB,cAAc,WAAW,kBAAkB;GAC3D,YAAY,MAAM,qBAAqB,SAAS;GAChD,iBAAiB,MAAM,2BAA2B,SAAS;GAC5D,EAAE,CACJ;AAED,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,WAAW,MAAM;GAAE,CAAC;GACzD"}
+{"version":3,"file":"models.js","names":["getModelsJsonPath"],"sources":["../../../../../src/gateway/hono/routes/models.ts"],"sourcesContent":["import type { Hono } from 'hono';\n\nimport {\n  getModelsJsonPath,\n  loadModelsJson,\n  saveModelsJson,\n  validateModelsConfig,\n} from '../../../config/models-json.js';\nimport { testApiKeyResolution } from '../../../config/resolve-config-value.js';\nimport { listImageGenerationProvidersSummary } from '../../../agent/image/generation/runtime.js';\nimport {\n  getAllModels,\n  getAvailableModels,\n  getModelRegistry,\n  getAllProviders,\n  getProviderActiveKeySource,\n  isProviderConfigured,\n  PROVIDER_META,\n} from '../../../providers/index.js';\nimport { getProviderRegistry } from '../../../providers/plugin-registry.js';\nimport type { ProviderModelDefinition } from '../../../extensions/types/providers.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\n\nfunction mapPluginModel(providerId: string, model: ProviderModelDefinition, available: boolean) {\n  return {\n    id: `${providerId}/${model.id}`,\n    name: model.name,\n    provider: providerId,\n    contextWindow: model.contextWindow ?? 128000,\n    maxTokens: model.maxOutputTokens ?? 4096,\n    reasoning: false,\n    vision: model.supportsImages ?? false,\n    cost: { input: model.pricing?.input ?? 0, output: model.pricing?.output ?? 0 },\n    available,\n    source: 'extension' as const,\n  };\n}\n\nexport function registerModelsRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  const { service } = deps;\n\n  // GET /api/models-json - Get models.json configuration\n  authenticated.get('/api/models-json', async (c) => {\n    const path = getModelsJsonPath();\n    const { config, error } = loadModelsJson(path);\n    const registry = getModelRegistry();\n    \n    return c.json({\n      ok: true,\n      payload: {\n        config,\n        path,\n        exists: error === undefined,\n        loadError: error || registry.getError(),\n      },\n    });\n  });\n\n  // POST /api/models-json/validate - Validate models.json configuration\n  authenticated.post('/api/models-json/validate', async (c) => {\n    const body = await c.req.json();\n    const { config } = body;\n    \n    const result = validateModelsConfig(config);\n    \n    return c.json({\n      ok: true,\n      payload: result,\n    });\n  });\n\n  // PATCH /api/models-json - Save models.json configuration\n  authenticated.patch('/api/models-json', async (c) => {\n    const body = await c.req.json();\n    const { config } = body;\n    \n    const path = getModelsJsonPath();\n    const result = saveModelsJson(path, config);\n    \n    if (!result.success) {\n      return c.json({ ok: false, error: result.error }, 400);\n    }\n    \n    // Refresh registry\n    const registry = getModelRegistry();\n    registry.refresh();\n    \n    // Emit event\n    service.emit('models-json.updated', { \n      modelCount: registry.getAll().length,\n    });\n    \n    return c.json({ \n      ok: true, \n      payload: { \n        saved: true,\n        modelCount: registry.getAll().length,\n      },\n    });\n  });\n\n  // POST /api/models-json/reload - Hot reload models.json\n  authenticated.post('/api/models-json/reload', async (c) => {\n    const registry = getModelRegistry();\n    registry.refresh();\n    \n    const error = registry.getError();\n    const models = registry.getAll();\n    \n    service.emit('models-json.reloaded', { \n      modelCount: models.length,\n      error: error || undefined,\n    });\n    \n    return c.json({\n      ok: true,\n      payload: {\n        modelCount: models.length,\n        error,\n      },\n    });\n  });\n\n  // POST /api/models-json/test-api-key - Test API key resolution\n  authenticated.post('/api/models-json/test-api-key', async (c) => {\n    const body = await c.req.json();\n    const { value } = body;\n    \n    const result = testApiKeyResolution(value);\n    \n    return c.json({\n      ok: true,\n      payload: result,\n    });\n  });\n\n  // GET /api/models - Get available models (only configured providers)\n  authenticated.get('/api/models', async (c) => {\n    const pluginRegistry = getProviderRegistry();\n    const models = (await getAvailableModels()).map(m => ({\n      id: `${m.provider}/${m.id}`,\n      name: m.name,\n      provider: m.provider,\n      contextWindow: m.contextWindow ?? 128000,\n      maxTokens: m.maxTokens ?? 4096,\n      reasoning: m.reasoning ?? false,\n      vision: m.input?.includes('image') ?? false,\n      cost: {\n        input: m.cost?.input ?? 0,\n        output: m.cost?.output ?? 0,\n      },\n      ...(pluginRegistry.has(m.provider) ? { source: 'extension' as const } : {}),\n    }));\n\n    const existingIds = new Set(models.map(m => m.id));\n    for (const plugin of pluginRegistry.listAll()) {\n      for (const model of plugin.models) {\n        const compositeId = `${plugin.id}/${model.id}`;\n        if (!existingIds.has(compositeId)) {\n          models.push(mapPluginModel(plugin.id, model, true));\n          existingIds.add(compositeId);\n        }\n      }\n    }\n\n    // Sort by provider then name\n    models.sort((a, b) => {\n      if (a.provider !== b.provider) return a.provider.localeCompare(b.provider);\n      return a.name.localeCompare(b.name);\n    });\n\n    return c.json({ ok: true, payload: { models } });\n  });\n\n  // GET /api/image/providers — registered image generation providers and models (not in LLM model registry)\n  authenticated.get('/api/image/providers', (c) => {\n    const providers = listImageGenerationProvidersSummary();\n    return c.json({ ok: true, payload: { providers } });\n  });\n\n  // GET /api/providers - Get ALL available providers and models\n  authenticated.get('/api/providers', async (c) => {\n    const pluginRegistry = getProviderRegistry();\n    const allModels = getAllModels();\n    const availableModels = await getAvailableModels();\n    const configured = new Set(availableModels.map(m => `${m.provider}/${m.id}`));\n\n    const models = allModels.map(m => ({\n      id: `${m.provider}/${m.id}`,\n      name: m.name,\n      provider: m.provider,\n      contextWindow: m.contextWindow ?? 128000,\n      maxTokens: m.maxTokens ?? 4096,\n      reasoning: m.reasoning ?? false,\n      vision: m.input?.includes('image') ?? false,\n      cost: {\n        input: m.cost?.input ?? 0,\n        output: m.cost?.output ?? 0,\n      },\n      available: configured.has(`${m.provider}/${m.id}`),\n      ...(pluginRegistry.has(m.provider) ? { source: 'extension' as const } : {}),\n    }));\n\n    const existingIds = new Set(models.map(m => m.id));\n    for (const plugin of pluginRegistry.listAll()) {\n      for (const model of plugin.models) {\n        const compositeId = `${plugin.id}/${model.id}`;\n        if (!existingIds.has(compositeId)) {\n          models.push(mapPluginModel(plugin.id, model, configured.has(compositeId)));\n          existingIds.add(compositeId);\n        }\n      }\n    }\n\n    // Sort by provider then name\n    models.sort((a, b) => {\n      if (a.provider !== b.provider) return a.provider.localeCompare(b.provider);\n      return a.name.localeCompare(b.name);\n    });\n\n    return c.json({ ok: true, payload: { models } });\n  });\n\n  // GET /api/providers/meta - Get provider metadata (categories, display names)\n  authenticated.get('/api/providers/meta', async (c) => {\n    const providers = getAllProviders();\n    const pluginRegistry = getProviderRegistry();\n\n    const meta = await Promise.all(\n      providers.map(async (provider) => {\n        const plugin = pluginRegistry.get(provider);\n        return {\n          id: provider,\n          name: plugin?.name ?? PROVIDER_META[provider]?.name ?? provider,\n          category: plugin ? ('extension' as const) : PROVIDER_META[provider]?.category || 'specialty',\n          supportsOAuth: plugin ? false : (PROVIDER_META[provider]?.supportsOAuth ?? false),\n          supportsApiKey: plugin ? true : (PROVIDER_META[provider]?.supportsApiKey ?? true),\n          configured: await isProviderConfigured(provider),\n          activeKeySource: await getProviderActiveKeySource(provider),\n        };\n      }),\n    );\n\n    const knownProviderIds = new Set(providers);\n    for (const plugin of pluginRegistry.listAll()) {\n      if (!knownProviderIds.has(plugin.id)) {\n        meta.push({\n          id: plugin.id,\n          name: plugin.name,\n          category: 'extension',\n          supportsOAuth: false,\n          supportsApiKey: true,\n          configured: true,\n          activeKeySource: 'extension',\n        });\n      }\n    }\n\n    return c.json({ ok: true, payload: { providers: meta } });\n  });\n}\n"],"mappings":";;;;;;;;kBAOwC;2BACuC;gBAU1C;sBACuC;AAI5E,SAAS,eAAe,YAAoB,OAAgC,WAAoB;AAC9F,QAAO;EACL,IAAI,GAAG,WAAW,GAAG,MAAM;EAC3B,MAAM,MAAM;EACZ,UAAU;EACV,eAAe,MAAM,iBAAiB;EACtC,WAAW,MAAM,mBAAmB;EACpC,WAAW;EACX,QAAQ,MAAM,kBAAkB;EAChC,MAAM;GAAE,OAAO,MAAM,SAAS,SAAS;GAAG,QAAQ,MAAM,SAAS,UAAU;GAAG;EAC9E;EACA,QAAQ;EACT;;AAGH,SAAgB,qBAAqB,eAAqB,MAAoC;CAC5F,MAAM,EAAE,YAAY;AAGpB,eAAc,IAAI,oBAAoB,OAAO,MAAM;EACjD,MAAM,OAAOA,uBAAmB;EAChC,MAAM,EAAE,QAAQ,UAAU,eAAe,KAAK;EAC9C,MAAM,WAAW,kBAAkB;AAEnC,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP;IACA;IACA,QAAQ,UAAU,KAAA;IAClB,WAAW,SAAS,SAAS,UAAU;IACxC;GACF,CAAC;GACF;AAGF,eAAc,KAAK,6BAA6B,OAAO,MAAM;EAE3D,MAAM,EAAE,WADK,MAAM,EAAE,IAAI,MAAM;EAG/B,MAAM,SAAS,qBAAqB,OAAO;AAE3C,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;GACV,CAAC;GACF;AAGF,eAAc,MAAM,oBAAoB,OAAO,MAAM;EAEnD,MAAM,EAAE,WADK,MAAM,EAAE,IAAI,MAAM;EAI/B,MAAM,SAAS,eADFA,uBAAmB,EACI,OAAO;AAE3C,MAAI,CAAC,OAAO,QACV,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,OAAO;GAAO,EAAE,IAAI;EAIxD,MAAM,WAAW,kBAAkB;AACnC,WAAS,SAAS;AAGlB,UAAQ,KAAK,uBAAuB,EAClC,YAAY,SAAS,QAAQ,CAAC,QAC/B,CAAC;AAEF,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,OAAO;IACP,YAAY,SAAS,QAAQ,CAAC;IAC/B;GACF,CAAC;GACF;AAGF,eAAc,KAAK,2BAA2B,OAAO,MAAM;EACzD,MAAM,WAAW,kBAAkB;AACnC,WAAS,SAAS;EAElB,MAAM,QAAQ,SAAS,UAAU;EACjC,MAAM,SAAS,SAAS,QAAQ;AAEhC,UAAQ,KAAK,wBAAwB;GACnC,YAAY,OAAO;GACnB,OAAO,SAAS,KAAA;GACjB,CAAC;AAEF,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,YAAY,OAAO;IACnB;IACD;GACF,CAAC;GACF;AAGF,eAAc,KAAK,iCAAiC,OAAO,MAAM;EAE/D,MAAM,EAAE,UADK,MAAM,EAAE,IAAI,MAAM;EAG/B,MAAM,SAAS,qBAAqB,MAAM;AAE1C,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;GACV,CAAC;GACF;AAGF,eAAc,IAAI,eAAe,OAAO,MAAM;EAC5C,MAAM,iBAAiB,qBAAqB;EAC5C,MAAM,UAAU,MAAM,oBAAoB,EAAE,KAAI,OAAM;GACpD,IAAI,GAAG,EAAE,SAAS,GAAG,EAAE;GACvB,MAAM,EAAE;GACR,UAAU,EAAE;GACZ,eAAe,EAAE,iBAAiB;GAClC,WAAW,EAAE,aAAa;GAC1B,WAAW,EAAE,aAAa;GAC1B,QAAQ,EAAE,OAAO,SAAS,QAAQ,IAAI;GACtC,MAAM;IACJ,OAAO,EAAE,MAAM,SAAS;IACxB,QAAQ,EAAE,MAAM,UAAU;IAC3B;GACD,GAAI,eAAe,IAAI,EAAE,SAAS,GAAG,EAAE,QAAQ,aAAsB,GAAG,EAAE;GAC3E,EAAE;EAEH,MAAM,cAAc,IAAI,IAAI,OAAO,KAAI,MAAK,EAAE,GAAG,CAAC;AAClD,OAAK,MAAM,UAAU,eAAe,SAAS,CAC3C,MAAK,MAAM,SAAS,OAAO,QAAQ;GACjC,MAAM,cAAc,GAAG,OAAO,GAAG,GAAG,MAAM;AAC1C,OAAI,CAAC,YAAY,IAAI,YAAY,EAAE;AACjC,WAAO,KAAK,eAAe,OAAO,IAAI,OAAO,KAAK,CAAC;AACnD,gBAAY,IAAI,YAAY;;;AAMlC,SAAO,MAAM,GAAG,MAAM;AACpB,OAAI,EAAE,aAAa,EAAE,SAAU,QAAO,EAAE,SAAS,cAAc,EAAE,SAAS;AAC1E,UAAO,EAAE,KAAK,cAAc,EAAE,KAAK;IACnC;AAEF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,QAAQ;GAAE,CAAC;GAChD;AAGF,eAAc,IAAI,yBAAyB,MAAM;EAC/C,MAAM,YAAY,qCAAqC;AACvD,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,WAAW;GAAE,CAAC;GACnD;AAGF,eAAc,IAAI,kBAAkB,OAAO,MAAM;EAC/C,MAAM,iBAAiB,qBAAqB;EAC5C,MAAM,YAAY,cAAc;EAChC,MAAM,kBAAkB,MAAM,oBAAoB;EAClD,MAAM,aAAa,IAAI,IAAI,gBAAgB,KAAI,MAAK,GAAG,EAAE,SAAS,GAAG,EAAE,KAAK,CAAC;EAE7E,MAAM,SAAS,UAAU,KAAI,OAAM;GACjC,IAAI,GAAG,EAAE,SAAS,GAAG,EAAE;GACvB,MAAM,EAAE;GACR,UAAU,EAAE;GACZ,eAAe,EAAE,iBAAiB;GAClC,WAAW,EAAE,aAAa;GAC1B,WAAW,EAAE,aAAa;GAC1B,QAAQ,EAAE,OAAO,SAAS,QAAQ,IAAI;GACtC,MAAM;IACJ,OAAO,EAAE,MAAM,SAAS;IACxB,QAAQ,EAAE,MAAM,UAAU;IAC3B;GACD,WAAW,WAAW,IAAI,GAAG,EAAE,SAAS,GAAG,EAAE,KAAK;GAClD,GAAI,eAAe,IAAI,EAAE,SAAS,GAAG,EAAE,QAAQ,aAAsB,GAAG,EAAE;GAC3E,EAAE;EAEH,MAAM,cAAc,IAAI,IAAI,OAAO,KAAI,MAAK,EAAE,GAAG,CAAC;AAClD,OAAK,MAAM,UAAU,eAAe,SAAS,CAC3C,MAAK,MAAM,SAAS,OAAO,QAAQ;GACjC,MAAM,cAAc,GAAG,OAAO,GAAG,GAAG,MAAM;AAC1C,OAAI,CAAC,YAAY,IAAI,YAAY,EAAE;AACjC,WAAO,KAAK,eAAe,OAAO,IAAI,OAAO,WAAW,IAAI,YAAY,CAAC,CAAC;AAC1E,gBAAY,IAAI,YAAY;;;AAMlC,SAAO,MAAM,GAAG,MAAM;AACpB,OAAI,EAAE,aAAa,EAAE,SAAU,QAAO,EAAE,SAAS,cAAc,EAAE,SAAS;AAC1E,UAAO,EAAE,KAAK,cAAc,EAAE,KAAK;IACnC;AAEF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,QAAQ;GAAE,CAAC;GAChD;AAGF,eAAc,IAAI,uBAAuB,OAAO,MAAM;EACpD,MAAM,YAAY,iBAAiB;EACnC,MAAM,iBAAiB,qBAAqB;EAE5C,MAAM,OAAO,MAAM,QAAQ,IACzB,UAAU,IAAI,OAAO,aAAa;GAChC,MAAM,SAAS,eAAe,IAAI,SAAS;AAC3C,UAAO;IACL,IAAI;IACJ,MAAM,QAAQ,QAAQ,cAAc,WAAW,QAAQ;IACvD,UAAU,SAAU,cAAwB,cAAc,WAAW,YAAY;IACjF,eAAe,SAAS,QAAS,cAAc,WAAW,iBAAiB;IAC3E,gBAAgB,SAAS,OAAQ,cAAc,WAAW,kBAAkB;IAC5E,YAAY,MAAM,qBAAqB,SAAS;IAChD,iBAAiB,MAAM,2BAA2B,SAAS;IAC5D;IACD,CACH;EAED,MAAM,mBAAmB,IAAI,IAAI,UAAU;AAC3C,OAAK,MAAM,UAAU,eAAe,SAAS,CAC3C,KAAI,CAAC,iBAAiB,IAAI,OAAO,GAAG,CAClC,MAAK,KAAK;GACR,IAAI,OAAO;GACX,MAAM,OAAO;GACb,UAAU;GACV,eAAe;GACf,gBAAgB;GAChB,YAAY;GACZ,iBAAiB;GAClB,CAAC;AAIN,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,WAAW,MAAM;GAAE,CAAC;GACzD"}

package/dist/src/gateway/hono/routes/public-gateway.js

@@ -49,6 +49,16 @@ function registerPublicGatewayRoutes(app, service) {
 		if (response) return response;
 		return c.text("Not found", 404);
 	});
+	app.get("/logo.svg", (c) => {
+		const response = serveStaticFile("logo.svg");
+		if (response) return response;
+		return c.text("Not found", 404);
+	});
+	app.get("/logo-dark.svg", (c) => {
+		const response = serveStaticFile("logo-dark.svg");
+		if (response) return response;
+		return c.text("Not found", 404);
+	});
 	app.get("/", (c) => {
 		const response = serveStaticFile("index.html");
 		if (response) return response;

package/dist/src/gateway/hono/routes/public-gateway.js.map

@@ -1 +1 @@
-{"version":3,"file":"public-gateway.js","names":[],"sources":["../../../../../src/gateway/hono/routes/public-gateway.ts"],"sourcesContent":["import type { Hono } from 'hono';\n\nimport { PACKAGE_VERSION } from '../../../package-version.js';\nimport type { GatewayService } from '../../service.js';\nimport { serveStaticFile } from '../lib/static-ui.js';\n\nexport function registerPublicGatewayRoutes(app: Hono, service: GatewayService): void {\n  app.get('/health', (c) => {\n    return c.json(service.getHealth());\n  });\n\n  app.get('/api', (c) => {\n    return c.json({\n      service: 'xopc-gateway',\n      version: PACKAGE_VERSION,\n      transport: 'streamable-http',\n      endpoints: [\n        'GET  /health',\n        'GET  /status',\n        'POST /api/agent           (SSE stream / JSON)',\n        'POST /api/agent/abort',\n        'POST /api/agent/steer',\n        'POST /api/send',\n        'GET  /api/events          (SSE stream)',\n        'GET  /api/channels/status',\n        'POST /api/channels/weixin/login/start',\n        'GET  /api/channels/weixin/login/:sessionKey',\n        'GET  /api/config',\n        'GET  /api/agents',\n        'POST /api/agents',\n        'PATCH /api/agents/:id',\n        'DELETE /api/agents/:id',\n        'GET/PUT /api/agents/:id/files/...',\n        'PATCH /api/config',\n        'POST /api/config/reload',\n        'POST /api/heartbeat/trigger',\n        '...  /api/cron/*',\n        'GET/PATCH /api/sessions/:key/agent-config',\n        '...  /api/sessions/*',\n        'GET  /api/host/fs/meta',\n        'GET  /api/host/fs/list',\n      ],\n    });\n  });\n\n  app.get('/assets/*', (c) => {\n    const path = c.req.path.replace('/assets/', '');\n    const response = serveStaticFile(`assets/${path}`);\n    if (response) return response;\n    return c.text('Not found', 404);\n  });\n\n  app.get('/favicon.ico', (c) => {\n    const response = serveStaticFile('favicon.ico');\n    if (response) return response;\n    return c.text('Not found', 404);\n  });\n\n  app.get('/', (c) => {\n    const response = serveStaticFile('index.html');\n    if (response) return response;\n    return c.text('UI not found', 404);\n  });\n}\n"],"mappings":";;;sBAE8D;AAI9D,SAAgB,4BAA4B,KAAW,SAA+B;AACpF,KAAI,IAAI,YAAY,MAAM;AACxB,SAAO,EAAE,KAAK,QAAQ,WAAW,CAAC;GAClC;AAEF,KAAI,IAAI,SAAS,MAAM;AACrB,SAAO,EAAE,KAAK;GACZ,SAAS;GACT,SAAS;GACT,WAAW;GACX,WAAW;IACT;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACD;GACF,CAAC;GACF;AAEF,KAAI,IAAI,cAAc,MAAM;EAE1B,MAAM,WAAW,gBAAgB,UADpB,EAAE,IAAI,KAAK,QAAQ,YAAY,GAAG,GACG;AAClD,MAAI,SAAU,QAAO;AACrB,SAAO,EAAE,KAAK,aAAa,IAAI;GAC/B;AAEF,KAAI,IAAI,iBAAiB,MAAM;EAC7B,MAAM,WAAW,gBAAgB,cAAc;AAC/C,MAAI,SAAU,QAAO;AACrB,SAAO,EAAE,KAAK,aAAa,IAAI;GAC/B;AAEF,KAAI,IAAI,MAAM,MAAM;EAClB,MAAM,WAAW,gBAAgB,aAAa;AAC9C,MAAI,SAAU,QAAO;AACrB,SAAO,EAAE,KAAK,gBAAgB,IAAI;GAClC"}
+{"version":3,"file":"public-gateway.js","names":[],"sources":["../../../../../src/gateway/hono/routes/public-gateway.ts"],"sourcesContent":["import type { Hono } from 'hono';\n\nimport { PACKAGE_VERSION } from '../../../package-version.js';\nimport type { GatewayService } from '../../service.js';\nimport { serveStaticFile } from '../lib/static-ui.js';\n\nexport function registerPublicGatewayRoutes(app: Hono, service: GatewayService): void {\n  app.get('/health', (c) => {\n    return c.json(service.getHealth());\n  });\n\n  app.get('/api', (c) => {\n    return c.json({\n      service: 'xopc-gateway',\n      version: PACKAGE_VERSION,\n      transport: 'streamable-http',\n      endpoints: [\n        'GET  /health',\n        'GET  /status',\n        'POST /api/agent           (SSE stream / JSON)',\n        'POST /api/agent/abort',\n        'POST /api/agent/steer',\n        'POST /api/send',\n        'GET  /api/events          (SSE stream)',\n        'GET  /api/channels/status',\n        'POST /api/channels/weixin/login/start',\n        'GET  /api/channels/weixin/login/:sessionKey',\n        'GET  /api/config',\n        'GET  /api/agents',\n        'POST /api/agents',\n        'PATCH /api/agents/:id',\n        'DELETE /api/agents/:id',\n        'GET/PUT /api/agents/:id/files/...',\n        'PATCH /api/config',\n        'POST /api/config/reload',\n        'POST /api/heartbeat/trigger',\n        '...  /api/cron/*',\n        'GET/PATCH /api/sessions/:key/agent-config',\n        '...  /api/sessions/*',\n        'GET  /api/host/fs/meta',\n        'GET  /api/host/fs/list',\n      ],\n    });\n  });\n\n  app.get('/assets/*', (c) => {\n    const path = c.req.path.replace('/assets/', '');\n    const response = serveStaticFile(`assets/${path}`);\n    if (response) return response;\n    return c.text('Not found', 404);\n  });\n\n  app.get('/favicon.ico', (c) => {\n    const response = serveStaticFile('favicon.ico');\n    if (response) return response;\n    return c.text('Not found', 404);\n  });\n\n  app.get('/logo.svg', (c) => {\n    const response = serveStaticFile('logo.svg');\n    if (response) return response;\n    return c.text('Not found', 404);\n  });\n\n  app.get('/logo-dark.svg', (c) => {\n    const response = serveStaticFile('logo-dark.svg');\n    if (response) return response;\n    return c.text('Not found', 404);\n  });\n\n  app.get('/', (c) => {\n    const response = serveStaticFile('index.html');\n    if (response) return response;\n    return c.text('UI not found', 404);\n  });\n}\n"],"mappings":";;;sBAE8D;AAI9D,SAAgB,4BAA4B,KAAW,SAA+B;AACpF,KAAI,IAAI,YAAY,MAAM;AACxB,SAAO,EAAE,KAAK,QAAQ,WAAW,CAAC;GAClC;AAEF,KAAI,IAAI,SAAS,MAAM;AACrB,SAAO,EAAE,KAAK;GACZ,SAAS;GACT,SAAS;GACT,WAAW;GACX,WAAW;IACT;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACA;IACD;GACF,CAAC;GACF;AAEF,KAAI,IAAI,cAAc,MAAM;EAE1B,MAAM,WAAW,gBAAgB,UADpB,EAAE,IAAI,KAAK,QAAQ,YAAY,GAAG,GACG;AAClD,MAAI,SAAU,QAAO;AACrB,SAAO,EAAE,KAAK,aAAa,IAAI;GAC/B;AAEF,KAAI,IAAI,iBAAiB,MAAM;EAC7B,MAAM,WAAW,gBAAgB,cAAc;AAC/C,MAAI,SAAU,QAAO;AACrB,SAAO,EAAE,KAAK,aAAa,IAAI;GAC/B;AAEF,KAAI,IAAI,cAAc,MAAM;EAC1B,MAAM,WAAW,gBAAgB,WAAW;AAC5C,MAAI,SAAU,QAAO;AACrB,SAAO,EAAE,KAAK,aAAa,IAAI;GAC/B;AAEF,KAAI,IAAI,mBAAmB,MAAM;EAC/B,MAAM,WAAW,gBAAgB,gBAAgB;AACjD,MAAI,SAAU,QAAO;AACrB,SAAO,EAAE,KAAK,aAAa,IAAI;GAC/B;AAEF,KAAI,IAAI,MAAM,MAAM;EAClB,MAAM,WAAW,gBAAgB,aAAa;AAC9C,MAAI,SAAU,QAAO;AACrB,SAAO,EAAE,KAAK,gBAAgB,IAAI;GAClC"}

package/dist/src/gateway/hono/routes/update.d.ts

@@ -0,0 +1,3 @@
+import type { Hono } from 'hono';
+import type { AuthenticatedRouteDeps } from './deps.js';
+export declare function registerUpdateRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void;

package/dist/src/gateway/hono/routes/update.js

@@ -0,0 +1,141 @@
+import { PACKAGE_VERSION, init_package_version } from "../../../package-version.js";
+import { createLogger } from "../../../utils/logger/index.js";
+import { init_logger } from "../../../utils/logger.js";
+import { loadConfig } from "../../../config/loader.js";
+import "../../../config/index.js";
+import { normalizeUpdateChannel } from "../../../infra/update-channels.js";
+import { detectInstallKind, resolvePackageRoot } from "../../../infra/update-check.js";
+import { getUpdateAvailable, runGatewayUpdateCheck } from "../../../infra/update-startup.js";
+import { runAutoUpdateCommand } from "../../../infra/update-runner.js";
+//#region src/gateway/hono/routes/update.ts
+init_package_version();
+init_logger();
+const log = createLogger("GatewayUpdate");
+let updateRunInFlight = false;
+function parseUpdateCliJson(stdout) {
+	const t = stdout.trim();
+	if (!t) return null;
+	try {
+		const parsed = JSON.parse(t);
+		return parsed && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : null;
+	} catch {
+		const lines = t.split("\n").filter(Boolean);
+		for (let i = lines.length - 1; i >= 0; i--) {
+			const line = lines[i].trim();
+			if (!line.startsWith("{")) continue;
+			try {
+				const parsed = JSON.parse(line);
+				if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) return parsed;
+			} catch {}
+		}
+	}
+	return null;
+}
+function registerUpdateRoutes(authenticated, deps) {
+	const { strictRateLimitMiddleware, service } = deps;
+	/**
+	* GET /api/update/status
+	*/
+	authenticated.get("/api/update/status", (c) => {
+		const update = getUpdateAvailable();
+		return c.json({
+			ok: true,
+			payload: {
+				currentVersion: PACKAGE_VERSION,
+				updateAvailable: update !== null,
+				latestVersion: update?.latestVersion ?? null,
+				channel: update?.channel ?? null
+			}
+		});
+	});
+	/**
+	* POST /api/update/check
+	*/
+	authenticated.post("/api/update/check", strictRateLimitMiddleware, async (c) => {
+		await runGatewayUpdateCheck({
+			config: loadConfig(service.getHealth().configPath),
+			force: true,
+			onUpdateAvailableChange: (update) => {
+				service.emit("update.available", update);
+			}
+		});
+		const result = getUpdateAvailable();
+		return c.json({
+			ok: true,
+			payload: {
+				currentVersion: PACKAGE_VERSION,
+				updateAvailable: result !== null,
+				latestVersion: result?.latestVersion ?? null,
+				channel: result?.channel ?? null
+			}
+		});
+	});
+	/**
+	* POST /api/update/run — one-click npm install (OpenClaw-style). Rejects git checkouts.
+	*/
+	authenticated.post("/api/update/run", strictRateLimitMiddleware, async (c) => {
+		if (updateRunInFlight) return c.json({
+			ok: false,
+			error: "busy",
+			message: "Another update is already in progress."
+		}, 409);
+		const configPath = service.getHealth().configPath;
+		const channel = normalizeUpdateChannel(loadConfig(configPath).update?.channel) ?? "stable";
+		const root = await resolvePackageRoot();
+		if (root) {
+			if (await detectInstallKind(root) === "git") return c.json({
+				ok: false,
+				error: "git-checkout",
+				message: "Running from a git checkout. Use `git pull` in the repo, or install from npm to use one-click update."
+			}, 400);
+		}
+		updateRunInFlight = true;
+		try {
+			log.info({ channel }, "Gateway: starting one-click npm update");
+			const result = await runAutoUpdateCommand({
+				channel,
+				root
+			});
+			const parsed = parseUpdateCliJson(result.stdout ?? "");
+			if (result.ok && parsed?.status === "skipped" && parsed?.reason === "git-checkout") return c.json({
+				ok: false,
+				error: "git-checkout",
+				message: String(parsed.message ?? "Git checkout — use git pull instead.")
+			}, 400);
+			if (!result.ok) {
+				log.warn({
+					channel,
+					exitCode: result.exitCode,
+					reason: result.reason
+				}, "Gateway: one-click npm update failed");
+				return c.json({
+					ok: false,
+					error: "update-failed",
+					message: result.stderr?.trim() || result.reason || `Update exited with code ${result.exitCode ?? "unknown"}`,
+					result: parsed
+				});
+			}
+			log.info({ channel }, "Gateway: one-click npm update finished");
+			return c.json({
+				ok: true,
+				result: parsed
+			});
+		} catch (err) {
+			log.error({
+				err,
+				channel
+			}, "Gateway: one-click npm update threw");
+			return c.json({
+				ok: false,
+				error: "internal",
+				message: err instanceof Error ? err.message : String(err)
+			}, 500);
+		} finally {
+			updateRunInFlight = false;
+		}
+	});
+}
+//#endregion
+export { registerUpdateRoutes };
+
+//# sourceMappingURL=update.js.map

package/dist/src/gateway/hono/routes/update.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update.js","names":[],"sources":["../../../../../src/gateway/hono/routes/update.ts"],"sourcesContent":["import type { Hono } from 'hono';\n\nimport { loadConfig } from '../../../config/index.js';\nimport { detectInstallKind, resolvePackageRoot } from '../../../infra/update-check.js';\nimport { DEFAULT_PACKAGE_CHANNEL, normalizeUpdateChannel } from '../../../infra/update-channels.js';\nimport { runAutoUpdateCommand } from '../../../infra/update-runner.js';\nimport { getUpdateAvailable, runGatewayUpdateCheck } from '../../../infra/update-startup.js';\nimport { PACKAGE_VERSION } from '../../../package-version.js';\nimport { createLogger } from '../../../utils/logger.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\n\nconst log = createLogger('GatewayUpdate');\n\nlet updateRunInFlight = false;\n\nfunction parseUpdateCliJson(stdout: string): Record<string, unknown> | null {\n  const t = stdout.trim();\n  if (!t) return null;\n  try {\n    const parsed = JSON.parse(t) as unknown;\n    return parsed && typeof parsed === 'object' && !Array.isArray(parsed)\n      ? (parsed as Record<string, unknown>)\n      : null;\n  } catch {\n    const lines = t.split('\\n').filter(Boolean);\n    for (let i = lines.length - 1; i >= 0; i--) {\n      const line = lines[i]!.trim();\n      if (!line.startsWith('{')) continue;\n      try {\n        const parsed = JSON.parse(line) as unknown;\n        if (parsed && typeof parsed === 'object' && !Array.isArray(parsed)) {\n          return parsed as Record<string, unknown>;\n        }\n      } catch {\n        // try previous line\n      }\n    }\n  }\n  return null;\n}\n\nexport function registerUpdateRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  const { strictRateLimitMiddleware, service } = deps;\n\n  /**\n   * GET /api/update/status\n   */\n  authenticated.get('/api/update/status', (c) => {\n    const update = getUpdateAvailable();\n    return c.json({\n      ok: true,\n      payload: {\n        currentVersion: PACKAGE_VERSION,\n        updateAvailable: update !== null,\n        latestVersion: update?.latestVersion ?? null,\n        channel: update?.channel ?? null,\n      },\n    });\n  });\n\n  /**\n   * POST /api/update/check\n   */\n  authenticated.post('/api/update/check', strictRateLimitMiddleware, async (c) => {\n    const config = loadConfig(service.getHealth().configPath);\n    await runGatewayUpdateCheck({\n      config,\n      force: true,\n      onUpdateAvailableChange: (update) => {\n        service.emit('update.available', update);\n      },\n    });\n    const result = getUpdateAvailable();\n    return c.json({\n      ok: true,\n      payload: {\n        currentVersion: PACKAGE_VERSION,\n        updateAvailable: result !== null,\n        latestVersion: result?.latestVersion ?? null,\n        channel: result?.channel ?? null,\n      },\n    });\n  });\n\n  /**\n   * POST /api/update/run — one-click npm install (OpenClaw-style). Rejects git checkouts.\n   */\n  authenticated.post('/api/update/run', strictRateLimitMiddleware, async (c) => {\n    if (updateRunInFlight) {\n      return c.json(\n        {\n          ok: false,\n          error: 'busy',\n          message: 'Another update is already in progress.',\n        },\n        409,\n      );\n    }\n\n    const configPath = service.getHealth().configPath;\n    const config = loadConfig(configPath);\n    const channel =\n      normalizeUpdateChannel(config.update?.channel) ?? DEFAULT_PACKAGE_CHANNEL;\n\n    const root = await resolvePackageRoot();\n    if (root) {\n      const kind = await detectInstallKind(root);\n      if (kind === 'git') {\n        return c.json(\n          {\n            ok: false,\n            error: 'git-checkout',\n            message:\n              'Running from a git checkout. Use `git pull` in the repo, or install from npm to use one-click update.',\n          },\n          400,\n        );\n      }\n    }\n\n    updateRunInFlight = true;\n    try {\n      log.info({ channel }, 'Gateway: starting one-click npm update');\n      const result = await runAutoUpdateCommand({ channel, root });\n      const parsed = parseUpdateCliJson(result.stdout ?? '');\n\n      if (result.ok && parsed?.status === 'skipped' && parsed?.reason === 'git-checkout') {\n        return c.json(\n          {\n            ok: false,\n            error: 'git-checkout',\n            message: String(parsed.message ?? 'Git checkout — use git pull instead.'),\n          },\n          400,\n        );\n      }\n\n      if (!result.ok) {\n        log.warn(\n          { channel, exitCode: result.exitCode, reason: result.reason },\n          'Gateway: one-click npm update failed',\n        );\n        return c.json({\n          ok: false,\n          error: 'update-failed',\n          message: result.stderr?.trim() || result.reason || `Update exited with code ${result.exitCode ?? 'unknown'}`,\n          result: parsed,\n        });\n      }\n\n      log.info({ channel }, 'Gateway: one-click npm update finished');\n      // Do not run registry check here: the process still reports the old `PACKAGE_VERSION`\n      // until the gateway is restarted, which would keep `update available` set incorrectly.\n      return c.json({ ok: true, result: parsed });\n    } catch (err) {\n      log.error({ err, channel }, 'Gateway: one-click npm update threw');\n      return c.json(\n        {\n          ok: false,\n          error: 'internal',\n          message: err instanceof Error ? err.message : String(err),\n        },\n        500,\n      );\n    } finally {\n      updateRunInFlight = false;\n    }\n  });\n}\n"],"mappings":";;;;;;;;;;sBAO8D;aACN;AAGxD,MAAM,MAAM,aAAa,gBAAgB;AAEzC,IAAI,oBAAoB;AAExB,SAAS,mBAAmB,QAAgD;CAC1E,MAAM,IAAI,OAAO,MAAM;AACvB,KAAI,CAAC,EAAG,QAAO;AACf,KAAI;EACF,MAAM,SAAS,KAAK,MAAM,EAAE;AAC5B,SAAO,UAAU,OAAO,WAAW,YAAY,CAAC,MAAM,QAAQ,OAAO,GAChE,SACD;SACE;EACN,MAAM,QAAQ,EAAE,MAAM,KAAK,CAAC,OAAO,QAAQ;AAC3C,OAAK,IAAI,IAAI,MAAM,SAAS,GAAG,KAAK,GAAG,KAAK;GAC1C,MAAM,OAAO,MAAM,GAAI,MAAM;AAC7B,OAAI,CAAC,KAAK,WAAW,IAAI,CAAE;AAC3B,OAAI;IACF,MAAM,SAAS,KAAK,MAAM,KAAK;AAC/B,QAAI,UAAU,OAAO,WAAW,YAAY,CAAC,MAAM,QAAQ,OAAO,CAChE,QAAO;WAEH;;;AAKZ,QAAO;;AAGT,SAAgB,qBAAqB,eAAqB,MAAoC;CAC5F,MAAM,EAAE,2BAA2B,YAAY;;;;AAK/C,eAAc,IAAI,uBAAuB,MAAM;EAC7C,MAAM,SAAS,oBAAoB;AACnC,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,gBAAgB;IAChB,iBAAiB,WAAW;IAC5B,eAAe,QAAQ,iBAAiB;IACxC,SAAS,QAAQ,WAAW;IAC7B;GACF,CAAC;GACF;;;;AAKF,eAAc,KAAK,qBAAqB,2BAA2B,OAAO,MAAM;AAE9E,QAAM,sBAAsB;GAC1B,QAFa,WAAW,QAAQ,WAAW,CAAC,WAAW;GAGvD,OAAO;GACP,0BAA0B,WAAW;AACnC,YAAQ,KAAK,oBAAoB,OAAO;;GAE3C,CAAC;EACF,MAAM,SAAS,oBAAoB;AACnC,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,gBAAgB;IAChB,iBAAiB,WAAW;IAC5B,eAAe,QAAQ,iBAAiB;IACxC,SAAS,QAAQ,WAAW;IAC7B;GACF,CAAC;GACF;;;;AAKF,eAAc,KAAK,mBAAmB,2BAA2B,OAAO,MAAM;AAC5E,MAAI,kBACF,QAAO,EAAE,KACP;GACE,IAAI;GACJ,OAAO;GACP,SAAS;GACV,EACD,IACD;EAGH,MAAM,aAAa,QAAQ,WAAW,CAAC;EAEvC,MAAM,UACJ,uBAFa,WAAW,WAAW,CAEL,QAAQ,QAAQ,IAAA;EAEhD,MAAM,OAAO,MAAM,oBAAoB;AACvC,MAAI;OACW,MAAM,kBAAkB,KAAK,KAC7B,MACX,QAAO,EAAE,KACP;IACE,IAAI;IACJ,OAAO;IACP,SACE;IACH,EACD,IACD;;AAIL,sBAAoB;AACpB,MAAI;AACF,OAAI,KAAK,EAAE,SAAS,EAAE,yCAAyC;GAC/D,MAAM,SAAS,MAAM,qBAAqB;IAAE;IAAS;IAAM,CAAC;GAC5D,MAAM,SAAS,mBAAmB,OAAO,UAAU,GAAG;AAEtD,OAAI,OAAO,MAAM,QAAQ,WAAW,aAAa,QAAQ,WAAW,eAClE,QAAO,EAAE,KACP;IACE,IAAI;IACJ,OAAO;IACP,SAAS,OAAO,OAAO,WAAW,uCAAuC;IAC1E,EACD,IACD;AAGH,OAAI,CAAC,OAAO,IAAI;AACd,QAAI,KACF;KAAE;KAAS,UAAU,OAAO;KAAU,QAAQ,OAAO;KAAQ,EAC7D,uCACD;AACD,WAAO,EAAE,KAAK;KACZ,IAAI;KACJ,OAAO;KACP,SAAS,OAAO,QAAQ,MAAM,IAAI,OAAO,UAAU,2BAA2B,OAAO,YAAY;KACjG,QAAQ;KACT,CAAC;;AAGJ,OAAI,KAAK,EAAE,SAAS,EAAE,yCAAyC;AAG/D,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,QAAQ;IAAQ,CAAC;WACpC,KAAK;AACZ,OAAI,MAAM;IAAE;IAAK;IAAS,EAAE,sCAAsC;AAClE,UAAO,EAAE,KACP;IACE,IAAI;IACJ,OAAO;IACP,SAAS,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;IAC1D,EACD,IACD;YACO;AACR,uBAAoB;;GAEtB"}

package/dist/src/gateway/hono/routes/workspace.js

@@ -1,13 +1,14 @@
+import { createLogger } from "../../../utils/logger/index.js";
+import { init_logger } from "../../../utils/logger.js";
 import { init_agent_scope, listAgentEntries, normalizeAgentId, resolveAgentHomeDir, resolveAgentWorkspaceDir, resolveDefaultAgentId } from "../../../agent/agent-scope.js";
 import { getWorkspacePath, init_schema } from "../../../config/schema.js";
 import { extractProfileAgentId } from "../../../config/agent-profile.js";
-import { createLogger } from "../../../utils/logger/index.js";
-import { init_logger } from "../../../utils/logger.js";
 import { resolveSafeInboundFilePath } from "../../../channels/attachments/inbound-persist.js";
+import { isPathUnderWorkspace, resolveWorkspaceSafePath, toWorkspaceRelativePosix } from "../../workspace-editor-path.js";
 import { resolveSafeTtsFilePath } from "../../../channels/attachments/outbound-tts-persist.js";
 import { resolveHeartbeatMdPath } from "../../workspace-heartbeat-path.js";
-import { isPathUnderWorkspace, resolveWorkspaceSafePath, toWorkspaceRelativePosix } from "../../workspace-editor-path.js";
-import { runRipgrepInDirectory } from "../../workspace-ripgrep.js";
+import { listWorkspaceRelativeFilesFsFallback } from "../../workspace-fs-file-list.js";
+import { runRipgrepInDirectory, runRipgrepListFiles } from "../../workspace-ripgrep.js";
 import { join, resolve } from "node:path";
 import { readFile, readdir, stat, writeFile } from "node:fs/promises";
 //#region src/gateway/hono/routes/workspace.ts
@@ -20,6 +21,69 @@ function resolvePersistedAttachmentAgentHome(cfg, sessionKeyRaw) {
 	const sk = typeof sessionKeyRaw === "string" ? sessionKeyRaw.trim() : "";
 	return resolveAgentHomeDir(cfg, sk ? extractProfileAgentId(sk, cfg) : resolveDefaultAgentId(cfg));
 }
+const FILE_SEARCH_MAX_LIMIT = 50;
+/** Subsequence fuzzy match: all query chars appear in order in `candidate` (case-insensitive). */
+function fuzzySubsequenceScore(query, candidate) {
+	const q = query.toLowerCase();
+	const c = candidate.toLowerCase();
+	if (q.length === 0) return 0;
+	let qi = 0;
+	for (let ci = 0; ci < c.length && qi < q.length; ci++) if (c[ci] === q[qi]) qi++;
+	if (qi < q.length) return null;
+	const base = c.split("/").pop() ?? c;
+	let score = 10;
+	if (c.startsWith(q)) score += 40;
+	if (base.startsWith(q)) score += 35;
+	else if (base.includes(q)) score += 20;
+	else if (c.includes(q)) score += 10;
+	score -= c.length * 1e-4;
+	return score;
+}
+async function fuzzySearchWorkspaceFiles(workspaceRoot, query, limit) {
+	let files = await runRipgrepListFiles(workspaceRoot);
+	if (files.length === 0) {
+		files = await listWorkspaceRelativeFilesFsFallback(workspaceRoot, 12e4);
+		if (files.length > 0) log.debug({
+			workspaceRoot,
+			fileCount: files.length
+		}, "workspace files/search: file list from fs walk (ripgrep unavailable or returned empty)");
+	}
+	const q = query.trim();
+	const capped = Math.min(Math.max(limit, 1), FILE_SEARCH_MAX_LIMIT);
+	const rows = [];
+	if (!q) {
+		const sorted = [...files].sort((a, b) => a.localeCompare(b));
+		for (const rel of sorted.slice(0, capped)) {
+			const name = rel.split("/").pop() ?? rel;
+			rows.push({
+				name,
+				path: rel,
+				isDirectory: false,
+				score: 0
+			});
+		}
+		return rows;
+	}
+	for (const rel of files) {
+		const name = rel.split("/").pop() ?? rel;
+		const scorePath = fuzzySubsequenceScore(q, rel);
+		const scoreName = fuzzySubsequenceScore(q, name);
+		const score = Math.max(scorePath ?? -Infinity, scoreName ?? -Infinity);
+		if (score === -Infinity) continue;
+		rows.push({
+			name,
+			path: rel,
+			isDirectory: false,
+			score
+		});
+	}
+	rows.sort((a, b) => b.score - a.score || a.path.localeCompare(b.path));
+	return rows.slice(0, capped).map(({ name, path, isDirectory }) => ({
+		name,
+		path,
+		isDirectory
+	}));
+}
 function isKnownEditorAgentId(cfg, id) {
 	const n = normalizeAgentId(id);
 	if (n === resolveDefaultAgentId(cfg)) return true;
@@ -556,6 +620,22 @@ function registerWorkspaceRoutes(authenticated, deps) {
 			payload: { results }
 		});
 	});
+	/** Fuzzy filename / path search over the session workspace (ripgrep `--files` + subsequence scoring). */
+	authenticated.get("/api/workspace/editor/files/search", async (c) => {
+		const q = typeof c.req.query("q") === "string" ? c.req.query("q").trim() : "";
+		const limitRaw = c.req.query("limit");
+		const limit = Math.min(Math.max(parseInt(typeof limitRaw === "string" ? limitRaw : "15", 10) || 15, 1), FILE_SEARCH_MAX_LIMIT);
+		const ws = await resolveEditorWorkspaceRootAsync(service, service.currentConfig, c.req.query("sessionKey"), c.req.query("agentId"));
+		if (ws.ok === false) return c.json({
+			ok: false,
+			error: { message: ws.message }
+		}, 400);
+		const entries = await fuzzySearchWorkspaceFiles(ws.root, q, limit);
+		return c.json({
+			ok: true,
+			payload: { entries }
+		});
+	});
 }
 //#endregion
 export { registerWorkspaceRoutes };