@xopcai/xopc 0.0.81 → 0.0.83

package/dist/src/gateway/hono/routes/config-patch/channels.js

@@ -0,0 +1,186 @@
+//#region src/gateway/hono/routes/config-patch/channels.ts
+function applyChannelsPatch(config, body) {
+	const patchChannels = body.channels;
+	if (patchChannels == null || typeof patchChannels !== "object" || Array.isArray(patchChannels)) return;
+	if ("telegram" in patchChannels) {
+		const tgRaw = patchChannels.telegram;
+		if (tgRaw === null) {
+			if (config.channels) delete config.channels.telegram;
+		} else if (typeof tgRaw === "object" && !Array.isArray(tgRaw)) {
+			const bodyTg = tgRaw;
+			if (!config.channels) config.channels = { telegram: {
+				enabled: false,
+				allowFrom: [],
+				groupAllowFrom: [],
+				debug: false,
+				accounts: { default: {
+					accountId: "default",
+					enabled: true,
+					botToken: "",
+					allowFrom: [],
+					dmPolicy: "pairing",
+					groupPolicy: "open",
+					replyToMode: "off",
+					historyLimit: 50,
+					textChunkLimit: 4e3,
+					streamMode: "partial"
+				} },
+				dmPolicy: "pairing",
+				groupPolicy: "open",
+				replyToMode: "off",
+				historyLimit: 50,
+				textChunkLimit: 4e3
+			} };
+			if (!config.channels.telegram) config.channels.telegram = {};
+			const tg = config.channels.telegram;
+			if (bodyTg.enabled !== void 0) tg.enabled = bodyTg.enabled;
+			if (bodyTg.botToken !== void 0) {
+				const accRaw = tg.accounts;
+				const acc = accRaw && typeof accRaw === "object" && !Array.isArray(accRaw) ? { ...accRaw } : {};
+				const defRaw = acc.default;
+				acc.default = {
+					...defRaw && typeof defRaw === "object" && !Array.isArray(defRaw) ? { ...defRaw } : {},
+					accountId: "default",
+					botToken: bodyTg.botToken
+				};
+				tg.accounts = acc;
+			}
+			if (bodyTg.allowFrom !== void 0) tg.allowFrom = bodyTg.allowFrom;
+			if ("apiRoot" in bodyTg) {
+				const ar = bodyTg.apiRoot;
+				if (ar === null || ar === void 0 || typeof ar === "string" && !ar.trim()) delete tg.apiRoot;
+				else tg.apiRoot = String(ar).trim();
+			}
+			if (bodyTg.debug !== void 0) tg.debug = bodyTg.debug;
+			if (bodyTg.streamMode !== void 0) tg.streamMode = bodyTg.streamMode;
+			if ("groupAllowFrom" in bodyTg) {
+				const ga = bodyTg.groupAllowFrom;
+				if (ga === null || Array.isArray(ga) && ga.length === 0) delete tg.groupAllowFrom;
+				else tg.groupAllowFrom = ga;
+			}
+			if (bodyTg.dmPolicy !== void 0) tg.dmPolicy = bodyTg.dmPolicy;
+			if (bodyTg.groupPolicy !== void 0) tg.groupPolicy = bodyTg.groupPolicy;
+			if (bodyTg.replyToMode !== void 0) tg.replyToMode = bodyTg.replyToMode;
+			if (bodyTg.historyLimit !== void 0) tg.historyLimit = bodyTg.historyLimit;
+			if (bodyTg.textChunkLimit !== void 0) tg.textChunkLimit = bodyTg.textChunkLimit;
+			if ("proxy" in bodyTg) {
+				const pr = bodyTg.proxy;
+				if (pr === null || pr === void 0 || typeof pr === "string" && !pr.trim()) delete tg.proxy;
+				else tg.proxy = String(pr).trim();
+			}
+			if (bodyTg.accounts !== void 0) tg.accounts = bodyTg.accounts;
+		}
+	}
+	if ("weixin" in patchChannels) {
+		const wxRaw = patchChannels.weixin;
+		if (wxRaw === null) {
+			if (config.channels) delete config.channels.weixin;
+		} else if (typeof wxRaw === "object" && !Array.isArray(wxRaw)) {
+			const wx = wxRaw;
+			if (!config.channels) config.channels = {};
+			if (!config.channels.weixin) config.channels.weixin = {
+				enabled: false,
+				dmPolicy: "open",
+				allowFrom: [],
+				debug: false,
+				historyLimit: 50,
+				textChunkLimit: 4e3
+			};
+			const wxTarget = config.channels.weixin;
+			if (wx.enabled !== void 0) wxTarget.enabled = wx.enabled;
+			if (wx.dmPolicy !== void 0) wxTarget.dmPolicy = wx.dmPolicy;
+			if (wx.allowFrom !== void 0) wxTarget.allowFrom = wx.allowFrom;
+			if (wx.debug !== void 0) wxTarget.debug = wx.debug;
+			if (wx.streamMode !== void 0) wxTarget.streamMode = wx.streamMode;
+			if (wx.historyLimit !== void 0) wxTarget.historyLimit = wx.historyLimit;
+			if (wx.textChunkLimit !== void 0) wxTarget.textChunkLimit = wx.textChunkLimit;
+			if ("routeTag" in wx) {
+				const rt = wx.routeTag;
+				if (rt === null || rt === void 0 || rt === "") delete wxTarget.routeTag;
+				else wxTarget.routeTag = rt;
+			}
+			if (wx.accounts !== void 0) wxTarget.accounts = wx.accounts;
+		}
+	}
+	if ("feishu" in patchChannels) {
+		const fsRaw = patchChannels.feishu;
+		if (fsRaw === null) {
+			if (config.channels) delete config.channels.feishu;
+		} else if (typeof fsRaw === "object" && !Array.isArray(fsRaw)) {
+			const fs = fsRaw;
+			if (!config.channels) config.channels = {};
+			if (!config.channels.feishu) config.channels.feishu = {
+				enabled: false,
+				appId: "",
+				appSecret: "",
+				domain: "feishu",
+				connectionMode: "websocket",
+				dmPolicy: "open",
+				groupPolicy: "allowlist",
+				allowFrom: [],
+				groupAllowFrom: [],
+				requireMention: true,
+				historyLimit: 50,
+				textChunkLimit: 4e3,
+				accounts: {}
+			};
+			const fsTarget = config.channels.feishu;
+			if (fs.enabled !== void 0) fsTarget.enabled = fs.enabled;
+			if (fs.defaultAccount !== void 0) {
+				const da = fs.defaultAccount;
+				if (da === null || da === "") delete fsTarget.defaultAccount;
+				else fsTarget.defaultAccount = String(da);
+			}
+			if (fs.appId !== void 0) fsTarget.appId = fs.appId;
+			if ("appSecret" in fs) {
+				const v = fs.appSecret;
+				if (v === null || typeof v === "string" && !String(v).trim()) delete fsTarget.appSecret;
+				else fsTarget.appSecret = v;
+			}
+			if (fs.domain !== void 0) fsTarget.domain = fs.domain;
+			if (fs.connectionMode !== void 0) fsTarget.connectionMode = fs.connectionMode;
+			if (fs.verificationToken !== void 0) {
+				const v = fs.verificationToken;
+				if (v === null || typeof v === "string" && !String(v).trim()) delete fsTarget.verificationToken;
+				else fsTarget.verificationToken = v;
+			}
+			if (fs.encryptKey !== void 0) {
+				const v = fs.encryptKey;
+				if (v === null || typeof v === "string" && !String(v).trim()) delete fsTarget.encryptKey;
+				else fsTarget.encryptKey = v;
+			}
+			if (fs.webhookHost !== void 0) {
+				const v = fs.webhookHost;
+				if (v === null || typeof v === "string" && !String(v).trim()) delete fsTarget.webhookHost;
+				else fsTarget.webhookHost = v;
+			}
+			if (fs.webhookPort !== void 0) fsTarget.webhookPort = fs.webhookPort;
+			if (fs.webhookPath !== void 0) {
+				const v = fs.webhookPath;
+				if (v === null || typeof v === "string" && !String(v).trim()) delete fsTarget.webhookPath;
+				else fsTarget.webhookPath = v;
+			}
+			if (fs.dmPolicy !== void 0) fsTarget.dmPolicy = fs.dmPolicy;
+			if (fs.groupPolicy !== void 0) fsTarget.groupPolicy = fs.groupPolicy;
+			if (fs.allowFrom !== void 0) fsTarget.allowFrom = fs.allowFrom;
+			if (fs.groupAllowFrom !== void 0) {
+				const ga = fs.groupAllowFrom;
+				if (ga === null || Array.isArray(ga) && ga.length === 0) delete fsTarget.groupAllowFrom;
+				else fsTarget.groupAllowFrom = ga;
+			}
+			if (fs.requireMention !== void 0) fsTarget.requireMention = fs.requireMention;
+			if (fs.historyLimit !== void 0) fsTarget.historyLimit = fs.historyLimit;
+			if (fs.textChunkLimit !== void 0) fsTarget.textChunkLimit = fs.textChunkLimit;
+			if (fs.renderMode !== void 0) fsTarget.renderMode = fs.renderMode;
+			if (fs.streaming !== void 0) fsTarget.streaming = fs.streaming;
+			if (fs.reactionNotifications !== void 0) fsTarget.reactionNotifications = fs.reactionNotifications;
+			if (fs.tools !== void 0) fsTarget.tools = fs.tools;
+			if (fs.actions !== void 0) fsTarget.actions = fs.actions;
+			if (fs.accounts !== void 0) fsTarget.accounts = fs.accounts;
+		}
+	}
+}
+//#endregion
+export { applyChannelsPatch };
+
+//# sourceMappingURL=channels.js.map

package/dist/src/gateway/hono/routes/config-patch/channels.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"channels.js","names":[],"sources":["../../../../../../src/gateway/hono/routes/config-patch/channels.ts"],"sourcesContent":["/**\n * `PATCH /api/config` — `body.channels.{telegram,weixin,feishu}` section.\n *\n * Uses `in patchChannels` / `null` semantics so the web UI can remove a\n * provider with `{ weixin: null }` — `if (ch.weixin)` would silently drop\n * those clears.\n *\n * Each provider has its own first-init template (so a brand-new install gets\n * sane account / policy defaults), then field-by-field overlay.\n */\nimport type { Config } from '../../../../config/schema.js';\n\nexport function applyChannelsPatch(config: Config, body: any): void {\n  const patchChannels = body.channels;\n  if (patchChannels == null || typeof patchChannels !== 'object' || Array.isArray(patchChannels)) {\n    return;\n  }\n\n  if ('telegram' in patchChannels) {\n    const tgRaw = patchChannels.telegram;\n    if (tgRaw === null) {\n      if (config.channels) delete config.channels.telegram;\n    } else if (typeof tgRaw === 'object' && !Array.isArray(tgRaw)) {\n      const bodyTg = tgRaw as Record<string, unknown>;\n      if (!config.channels) {\n        config.channels = {\n          telegram: {\n            enabled: false,\n            allowFrom: [],\n            groupAllowFrom: [],\n            debug: false,\n            accounts: {\n              default: {\n                accountId: 'default',\n                enabled: true,\n                botToken: '',\n                allowFrom: [],\n                dmPolicy: 'pairing' as const,\n                groupPolicy: 'open' as const,\n                replyToMode: 'off' as const,\n                historyLimit: 50,\n                textChunkLimit: 4000,\n                streamMode: 'partial' as const,\n              },\n            },\n            dmPolicy: 'pairing' as const,\n            groupPolicy: 'open' as const,\n            replyToMode: 'off' as const,\n            historyLimit: 50,\n            textChunkLimit: 4000,\n          },\n        };\n      }\n      if (!config.channels.telegram) config.channels.telegram = {} as any;\n      const tg = config.channels.telegram as Record<string, unknown>;\n\n      if (bodyTg.enabled !== undefined) {\n        tg.enabled = bodyTg.enabled;\n      }\n      if (bodyTg.botToken !== undefined) {\n        const accRaw = tg.accounts;\n        const acc =\n          accRaw && typeof accRaw === 'object' && !Array.isArray(accRaw)\n            ? { ...(accRaw as Record<string, unknown>) }\n            : {};\n        const defRaw = acc.default;\n        const def =\n          defRaw && typeof defRaw === 'object' && !Array.isArray(defRaw)\n            ? { ...(defRaw as Record<string, unknown>) }\n            : {};\n        acc.default = {\n          ...def,\n          accountId: 'default',\n          botToken: bodyTg.botToken,\n        };\n        tg.accounts = acc;\n      }\n      if (bodyTg.allowFrom !== undefined) {\n        tg.allowFrom = bodyTg.allowFrom;\n      }\n      if ('apiRoot' in bodyTg) {\n        const ar = bodyTg.apiRoot;\n        if (ar === null || ar === undefined || (typeof ar === 'string' && !ar.trim())) {\n          delete tg.apiRoot;\n        } else {\n          tg.apiRoot = String(ar).trim();\n        }\n      }\n      if (bodyTg.debug !== undefined) {\n        tg.debug = bodyTg.debug;\n      }\n      if (bodyTg.streamMode !== undefined) {\n        tg.streamMode = bodyTg.streamMode;\n      }\n      if ('groupAllowFrom' in bodyTg) {\n        const ga = bodyTg.groupAllowFrom;\n        if (ga === null || (Array.isArray(ga) && ga.length === 0)) {\n          delete tg.groupAllowFrom;\n        } else {\n          tg.groupAllowFrom = ga;\n        }\n      }\n      if (bodyTg.dmPolicy !== undefined) {\n        tg.dmPolicy = bodyTg.dmPolicy;\n      }\n      if (bodyTg.groupPolicy !== undefined) {\n        tg.groupPolicy = bodyTg.groupPolicy;\n      }\n      if (bodyTg.replyToMode !== undefined) {\n        tg.replyToMode = bodyTg.replyToMode;\n      }\n      if (bodyTg.historyLimit !== undefined) {\n        tg.historyLimit = bodyTg.historyLimit;\n      }\n      if (bodyTg.textChunkLimit !== undefined) {\n        tg.textChunkLimit = bodyTg.textChunkLimit;\n      }\n      if ('proxy' in bodyTg) {\n        const pr = bodyTg.proxy;\n        if (pr === null || pr === undefined || (typeof pr === 'string' && !pr.trim())) {\n          delete tg.proxy;\n        } else {\n          tg.proxy = String(pr).trim();\n        }\n      }\n      if (bodyTg.accounts !== undefined) {\n        tg.accounts = bodyTg.accounts;\n      }\n    }\n  }\n\n  if ('weixin' in patchChannels) {\n    const wxRaw = patchChannels.weixin;\n    if (wxRaw === null) {\n      if (config.channels) delete config.channels.weixin;\n    } else if (typeof wxRaw === 'object' && !Array.isArray(wxRaw)) {\n      const wx = wxRaw as Record<string, unknown>;\n      if (!config.channels) config.channels = {} as any;\n      if (!config.channels.weixin) {\n        config.channels.weixin = {\n          enabled: false,\n          dmPolicy: 'open',\n          allowFrom: [],\n          debug: false,\n          historyLimit: 50,\n          textChunkLimit: 4000,\n        };\n      }\n      const wxTarget = config.channels.weixin as Record<string, unknown>;\n      if (wx.enabled !== undefined) wxTarget.enabled = wx.enabled;\n      if (wx.dmPolicy !== undefined) wxTarget.dmPolicy = wx.dmPolicy;\n      if (wx.allowFrom !== undefined) wxTarget.allowFrom = wx.allowFrom;\n      if (wx.debug !== undefined) wxTarget.debug = wx.debug;\n      if (wx.streamMode !== undefined) wxTarget.streamMode = wx.streamMode;\n      if (wx.historyLimit !== undefined) wxTarget.historyLimit = wx.historyLimit;\n      if (wx.textChunkLimit !== undefined) wxTarget.textChunkLimit = wx.textChunkLimit;\n      if ('routeTag' in wx) {\n        const rt = wx.routeTag;\n        if (rt === null || rt === undefined || rt === '') {\n          delete wxTarget.routeTag;\n        } else {\n          wxTarget.routeTag = rt as string | number;\n        }\n      }\n      if (wx.accounts !== undefined) wxTarget.accounts = wx.accounts;\n    }\n  }\n\n  if ('feishu' in patchChannels) {\n    const fsRaw = patchChannels.feishu;\n    if (fsRaw === null) {\n      if (config.channels) delete config.channels.feishu;\n    } else if (typeof fsRaw === 'object' && !Array.isArray(fsRaw)) {\n      const fs = fsRaw as Record<string, unknown>;\n      if (!config.channels) config.channels = {} as any;\n      if (!config.channels.feishu) {\n        config.channels.feishu = {\n          enabled: false,\n          appId: '',\n          appSecret: '',\n          domain: 'feishu',\n          connectionMode: 'websocket',\n          dmPolicy: 'open',\n          groupPolicy: 'allowlist',\n          allowFrom: [],\n          groupAllowFrom: [],\n          requireMention: true,\n          historyLimit: 50,\n          textChunkLimit: 4000,\n          accounts: {},\n        };\n      }\n      const fsTarget = config.channels.feishu as Record<string, unknown>;\n\n      if (fs.enabled !== undefined) fsTarget.enabled = fs.enabled;\n      if (fs.defaultAccount !== undefined) {\n        const da = fs.defaultAccount;\n        if (da === null || da === '') delete fsTarget.defaultAccount;\n        else fsTarget.defaultAccount = String(da);\n      }\n      if (fs.appId !== undefined) fsTarget.appId = fs.appId;\n      if ('appSecret' in fs) {\n        const v = fs.appSecret;\n        if (v === null || (typeof v === 'string' && !String(v).trim())) {\n          delete fsTarget.appSecret;\n        } else {\n          fsTarget.appSecret = v;\n        }\n      }\n      if (fs.domain !== undefined) fsTarget.domain = fs.domain;\n      if (fs.connectionMode !== undefined) fsTarget.connectionMode = fs.connectionMode;\n      if (fs.verificationToken !== undefined) {\n        const v = fs.verificationToken;\n        if (v === null || (typeof v === 'string' && !String(v).trim())) delete fsTarget.verificationToken;\n        else fsTarget.verificationToken = v;\n      }\n      if (fs.encryptKey !== undefined) {\n        const v = fs.encryptKey;\n        if (v === null || (typeof v === 'string' && !String(v).trim())) delete fsTarget.encryptKey;\n        else fsTarget.encryptKey = v;\n      }\n      if (fs.webhookHost !== undefined) {\n        const v = fs.webhookHost;\n        if (v === null || (typeof v === 'string' && !String(v).trim())) delete fsTarget.webhookHost;\n        else fsTarget.webhookHost = v;\n      }\n      if (fs.webhookPort !== undefined) fsTarget.webhookPort = fs.webhookPort;\n      if (fs.webhookPath !== undefined) {\n        const v = fs.webhookPath;\n        if (v === null || (typeof v === 'string' && !String(v).trim())) delete fsTarget.webhookPath;\n        else fsTarget.webhookPath = v;\n      }\n      if (fs.dmPolicy !== undefined) fsTarget.dmPolicy = fs.dmPolicy;\n      if (fs.groupPolicy !== undefined) fsTarget.groupPolicy = fs.groupPolicy;\n      if (fs.allowFrom !== undefined) fsTarget.allowFrom = fs.allowFrom;\n      if (fs.groupAllowFrom !== undefined) {\n        const ga = fs.groupAllowFrom;\n        if (ga === null || (Array.isArray(ga) && ga.length === 0)) delete fsTarget.groupAllowFrom;\n        else fsTarget.groupAllowFrom = ga;\n      }\n      if (fs.requireMention !== undefined) fsTarget.requireMention = fs.requireMention;\n      if (fs.historyLimit !== undefined) fsTarget.historyLimit = fs.historyLimit;\n      if (fs.textChunkLimit !== undefined) fsTarget.textChunkLimit = fs.textChunkLimit;\n      if (fs.renderMode !== undefined) fsTarget.renderMode = fs.renderMode;\n      if (fs.streaming !== undefined) fsTarget.streaming = fs.streaming;\n      if (fs.reactionNotifications !== undefined) {\n        fsTarget.reactionNotifications = fs.reactionNotifications;\n      }\n      if (fs.tools !== undefined) fsTarget.tools = fs.tools;\n      if (fs.actions !== undefined) fsTarget.actions = fs.actions;\n      if (fs.accounts !== undefined) fsTarget.accounts = fs.accounts;\n    }\n  }\n}\n"],"mappings":";AAYA,SAAgB,mBAAmB,QAAgB,MAAiB;CAClE,MAAM,gBAAgB,KAAK;AAC3B,KAAI,iBAAiB,QAAQ,OAAO,kBAAkB,YAAY,MAAM,QAAQ,cAAc,CAC5F;AAGF,KAAI,cAAc,eAAe;EAC/B,MAAM,QAAQ,cAAc;AAC5B,MAAI,UAAU;OACR,OAAO,SAAU,QAAO,OAAO,SAAS;aACnC,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,MAAM,EAAE;GAC7D,MAAM,SAAS;AACf,OAAI,CAAC,OAAO,SACV,QAAO,WAAW,EAChB,UAAU;IACR,SAAS;IACT,WAAW,EAAE;IACb,gBAAgB,EAAE;IAClB,OAAO;IACP,UAAU,EACR,SAAS;KACP,WAAW;KACX,SAAS;KACT,UAAU;KACV,WAAW,EAAE;KACb,UAAU;KACV,aAAa;KACb,aAAa;KACb,cAAc;KACd,gBAAgB;KAChB,YAAY;KACb,EACF;IACD,UAAU;IACV,aAAa;IACb,aAAa;IACb,cAAc;IACd,gBAAgB;IACjB,EACF;AAEH,OAAI,CAAC,OAAO,SAAS,SAAU,QAAO,SAAS,WAAW,EAAE;GAC5D,MAAM,KAAK,OAAO,SAAS;AAE3B,OAAI,OAAO,YAAY,KAAA,EACrB,IAAG,UAAU,OAAO;AAEtB,OAAI,OAAO,aAAa,KAAA,GAAW;IACjC,MAAM,SAAS,GAAG;IAClB,MAAM,MACJ,UAAU,OAAO,WAAW,YAAY,CAAC,MAAM,QAAQ,OAAO,GAC1D,EAAE,GAAI,QAAoC,GAC1C,EAAE;IACR,MAAM,SAAS,IAAI;AAKnB,QAAI,UAAU;KACZ,GAJA,UAAU,OAAO,WAAW,YAAY,CAAC,MAAM,QAAQ,OAAO,GAC1D,EAAE,GAAI,QAAoC,GAC1C,EAAE;KAGN,WAAW;KACX,UAAU,OAAO;KAClB;AACD,OAAG,WAAW;;AAEhB,OAAI,OAAO,cAAc,KAAA,EACvB,IAAG,YAAY,OAAO;AAExB,OAAI,aAAa,QAAQ;IACvB,MAAM,KAAK,OAAO;AAClB,QAAI,OAAO,QAAQ,OAAO,KAAA,KAAc,OAAO,OAAO,YAAY,CAAC,GAAG,MAAM,CAC1E,QAAO,GAAG;QAEV,IAAG,UAAU,OAAO,GAAG,CAAC,MAAM;;AAGlC,OAAI,OAAO,UAAU,KAAA,EACnB,IAAG,QAAQ,OAAO;AAEpB,OAAI,OAAO,eAAe,KAAA,EACxB,IAAG,aAAa,OAAO;AAEzB,OAAI,oBAAoB,QAAQ;IAC9B,MAAM,KAAK,OAAO;AAClB,QAAI,OAAO,QAAS,MAAM,QAAQ,GAAG,IAAI,GAAG,WAAW,EACrD,QAAO,GAAG;QAEV,IAAG,iBAAiB;;AAGxB,OAAI,OAAO,aAAa,KAAA,EACtB,IAAG,WAAW,OAAO;AAEvB,OAAI,OAAO,gBAAgB,KAAA,EACzB,IAAG,cAAc,OAAO;AAE1B,OAAI,OAAO,gBAAgB,KAAA,EACzB,IAAG,cAAc,OAAO;AAE1B,OAAI,OAAO,iBAAiB,KAAA,EAC1B,IAAG,eAAe,OAAO;AAE3B,OAAI,OAAO,mBAAmB,KAAA,EAC5B,IAAG,iBAAiB,OAAO;AAE7B,OAAI,WAAW,QAAQ;IACrB,MAAM,KAAK,OAAO;AAClB,QAAI,OAAO,QAAQ,OAAO,KAAA,KAAc,OAAO,OAAO,YAAY,CAAC,GAAG,MAAM,CAC1E,QAAO,GAAG;QAEV,IAAG,QAAQ,OAAO,GAAG,CAAC,MAAM;;AAGhC,OAAI,OAAO,aAAa,KAAA,EACtB,IAAG,WAAW,OAAO;;;AAK3B,KAAI,YAAY,eAAe;EAC7B,MAAM,QAAQ,cAAc;AAC5B,MAAI,UAAU;OACR,OAAO,SAAU,QAAO,OAAO,SAAS;aACnC,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,MAAM,EAAE;GAC7D,MAAM,KAAK;AACX,OAAI,CAAC,OAAO,SAAU,QAAO,WAAW,EAAE;AAC1C,OAAI,CAAC,OAAO,SAAS,OACnB,QAAO,SAAS,SAAS;IACvB,SAAS;IACT,UAAU;IACV,WAAW,EAAE;IACb,OAAO;IACP,cAAc;IACd,gBAAgB;IACjB;GAEH,MAAM,WAAW,OAAO,SAAS;AACjC,OAAI,GAAG,YAAY,KAAA,EAAW,UAAS,UAAU,GAAG;AACpD,OAAI,GAAG,aAAa,KAAA,EAAW,UAAS,WAAW,GAAG;AACtD,OAAI,GAAG,cAAc,KAAA,EAAW,UAAS,YAAY,GAAG;AACxD,OAAI,GAAG,UAAU,KAAA,EAAW,UAAS,QAAQ,GAAG;AAChD,OAAI,GAAG,eAAe,KAAA,EAAW,UAAS,aAAa,GAAG;AAC1D,OAAI,GAAG,iBAAiB,KAAA,EAAW,UAAS,eAAe,GAAG;AAC9D,OAAI,GAAG,mBAAmB,KAAA,EAAW,UAAS,iBAAiB,GAAG;AAClE,OAAI,cAAc,IAAI;IACpB,MAAM,KAAK,GAAG;AACd,QAAI,OAAO,QAAQ,OAAO,KAAA,KAAa,OAAO,GAC5C,QAAO,SAAS;QAEhB,UAAS,WAAW;;AAGxB,OAAI,GAAG,aAAa,KAAA,EAAW,UAAS,WAAW,GAAG;;;AAI1D,KAAI,YAAY,eAAe;EAC7B,MAAM,QAAQ,cAAc;AAC5B,MAAI,UAAU;OACR,OAAO,SAAU,QAAO,OAAO,SAAS;aACnC,OAAO,UAAU,YAAY,CAAC,MAAM,QAAQ,MAAM,EAAE;GAC7D,MAAM,KAAK;AACX,OAAI,CAAC,OAAO,SAAU,QAAO,WAAW,EAAE;AAC1C,OAAI,CAAC,OAAO,SAAS,OACnB,QAAO,SAAS,SAAS;IACvB,SAAS;IACT,OAAO;IACP,WAAW;IACX,QAAQ;IACR,gBAAgB;IAChB,UAAU;IACV,aAAa;IACb,WAAW,EAAE;IACb,gBAAgB,EAAE;IAClB,gBAAgB;IAChB,cAAc;IACd,gBAAgB;IAChB,UAAU,EAAE;IACb;GAEH,MAAM,WAAW,OAAO,SAAS;AAEjC,OAAI,GAAG,YAAY,KAAA,EAAW,UAAS,UAAU,GAAG;AACpD,OAAI,GAAG,mBAAmB,KAAA,GAAW;IACnC,MAAM,KAAK,GAAG;AACd,QAAI,OAAO,QAAQ,OAAO,GAAI,QAAO,SAAS;QACzC,UAAS,iBAAiB,OAAO,GAAG;;AAE3C,OAAI,GAAG,UAAU,KAAA,EAAW,UAAS,QAAQ,GAAG;AAChD,OAAI,eAAe,IAAI;IACrB,MAAM,IAAI,GAAG;AACb,QAAI,MAAM,QAAS,OAAO,MAAM,YAAY,CAAC,OAAO,EAAE,CAAC,MAAM,CAC3D,QAAO,SAAS;QAEhB,UAAS,YAAY;;AAGzB,OAAI,GAAG,WAAW,KAAA,EAAW,UAAS,SAAS,GAAG;AAClD,OAAI,GAAG,mBAAmB,KAAA,EAAW,UAAS,iBAAiB,GAAG;AAClE,OAAI,GAAG,sBAAsB,KAAA,GAAW;IACtC,MAAM,IAAI,GAAG;AACb,QAAI,MAAM,QAAS,OAAO,MAAM,YAAY,CAAC,OAAO,EAAE,CAAC,MAAM,CAAG,QAAO,SAAS;QAC3E,UAAS,oBAAoB;;AAEpC,OAAI,GAAG,eAAe,KAAA,GAAW;IAC/B,MAAM,IAAI,GAAG;AACb,QAAI,MAAM,QAAS,OAAO,MAAM,YAAY,CAAC,OAAO,EAAE,CAAC,MAAM,CAAG,QAAO,SAAS;QAC3E,UAAS,aAAa;;AAE7B,OAAI,GAAG,gBAAgB,KAAA,GAAW;IAChC,MAAM,IAAI,GAAG;AACb,QAAI,MAAM,QAAS,OAAO,MAAM,YAAY,CAAC,OAAO,EAAE,CAAC,MAAM,CAAG,QAAO,SAAS;QAC3E,UAAS,cAAc;;AAE9B,OAAI,GAAG,gBAAgB,KAAA,EAAW,UAAS,cAAc,GAAG;AAC5D,OAAI,GAAG,gBAAgB,KAAA,GAAW;IAChC,MAAM,IAAI,GAAG;AACb,QAAI,MAAM,QAAS,OAAO,MAAM,YAAY,CAAC,OAAO,EAAE,CAAC,MAAM,CAAG,QAAO,SAAS;QAC3E,UAAS,cAAc;;AAE9B,OAAI,GAAG,aAAa,KAAA,EAAW,UAAS,WAAW,GAAG;AACtD,OAAI,GAAG,gBAAgB,KAAA,EAAW,UAAS,cAAc,GAAG;AAC5D,OAAI,GAAG,cAAc,KAAA,EAAW,UAAS,YAAY,GAAG;AACxD,OAAI,GAAG,mBAAmB,KAAA,GAAW;IACnC,MAAM,KAAK,GAAG;AACd,QAAI,OAAO,QAAS,MAAM,QAAQ,GAAG,IAAI,GAAG,WAAW,EAAI,QAAO,SAAS;QACtE,UAAS,iBAAiB;;AAEjC,OAAI,GAAG,mBAAmB,KAAA,EAAW,UAAS,iBAAiB,GAAG;AAClE,OAAI,GAAG,iBAAiB,KAAA,EAAW,UAAS,eAAe,GAAG;AAC9D,OAAI,GAAG,mBAAmB,KAAA,EAAW,UAAS,iBAAiB,GAAG;AAClE,OAAI,GAAG,eAAe,KAAA,EAAW,UAAS,aAAa,GAAG;AAC1D,OAAI,GAAG,cAAc,KAAA,EAAW,UAAS,YAAY,GAAG;AACxD,OAAI,GAAG,0BAA0B,KAAA,EAC/B,UAAS,wBAAwB,GAAG;AAEtC,OAAI,GAAG,UAAU,KAAA,EAAW,UAAS,QAAQ,GAAG;AAChD,OAAI,GAAG,YAAY,KAAA,EAAW,UAAS,UAAU,GAAG;AACpD,OAAI,GAAG,aAAa,KAAA,EAAW,UAAS,WAAW,GAAG"}

package/dist/src/gateway/hono/routes/config-patch/gateway.d.ts

@@ -0,0 +1,18 @@
+/**
+ * `PATCH /api/config` — `body.gateway.*` section.
+ *
+ * Covers heartbeat, bind/customBindHost/port, tailscale, auth (mode + token +
+ * password + rateLimit + trustedProxy), trustedProxies, allowRealIpFallback,
+ * dangerouslyAllowHostHeaderOriginFallback, security, share, corsOrigins,
+ * maxSseConnections, and channelConnectDefer{Mode,Ids,SkipIds}.
+ *
+ * Validation policy: each subsection that can reject rejects with a 400 and a
+ * specific `message`. The dispatcher converts these into `c.json(...)`.
+ *
+ * Initial-state branches use the same literal defaults the inline code did
+ * (loopback + port 18790 + 1800s heartbeat + 100 SSE conn + empty CORS) so
+ * a brand-new install gets a working gateway after the first PATCH.
+ */
+import type { Config } from '../../../../config/schema.js';
+import { type PatchResult } from './result.js';
+export declare function applyGatewayPatch(config: Config, body: any): PatchResult;

package/dist/src/gateway/hono/routes/config-patch/gateway.js

@@ -0,0 +1,264 @@
+import { isValidIPv4 } from "../../../../config/gateway-bind.js";
+import { mergeShareConfigPatch } from "../../../../share/share-config.js";
+import { PATCH_OK, patchError } from "./result.js";
+//#region src/gateway/hono/routes/config-patch/gateway.ts
+/**
+* Shared default for "user PATCH'd a gateway subsection but `config.gateway`
+* was never initialised". Identical to the inline literal repeated in the
+* pre-extraction handler so this is behavior-preserving.
+*/
+function ensureGateway(config) {
+	if (!config.gateway) config.gateway = {
+		bind: "loopback",
+		port: 18790,
+		heartbeat: {
+			enabled: true,
+			intervalMs: 18e5,
+			includeSystemPromptSection: false
+		},
+		maxSseConnections: 100,
+		corsOrigins: []
+	};
+	return config.gateway;
+}
+function parseDeferIdList(raw) {
+	if (!Array.isArray(raw)) return null;
+	const ids = raw.filter((x) => typeof x === "string" && x.trim().length > 0).map((x) => x.trim());
+	if (ids.length > 24) return null;
+	return ids;
+}
+function applyGatewayPatch(config, body) {
+	if (body.gateway?.heartbeat !== void 0 && typeof body.gateway.heartbeat === "object") {
+		const gw = ensureGateway(config);
+		if (!gw.heartbeat) gw.heartbeat = {
+			enabled: true,
+			intervalMs: 18e5,
+			includeSystemPromptSection: false
+		};
+		const h = gw.heartbeat;
+		const p = body.gateway.heartbeat;
+		if (p.enabled !== void 0) h.enabled = Boolean(p.enabled);
+		if (p.intervalMs !== void 0 && typeof p.intervalMs === "number" && Number.isFinite(p.intervalMs)) h.intervalMs = p.intervalMs;
+		if (p.includeSystemPromptSection !== void 0) h.includeSystemPromptSection = Boolean(p.includeSystemPromptSection);
+		if (p.target !== void 0) if (p.target === null || p.target === "") delete h.target;
+		else h.target = String(p.target);
+		if (p.targetChatId !== void 0) if (p.targetChatId === null || p.targetChatId === "") delete h.targetChatId;
+		else h.targetChatId = String(p.targetChatId);
+		if (p.prompt !== void 0) if (p.prompt === null || p.prompt === "") delete h.prompt;
+		else h.prompt = String(p.prompt);
+		if (p.ackMaxChars !== void 0) {
+			if (p.ackMaxChars === null || p.ackMaxChars === "") delete h.ackMaxChars;
+			else if (typeof p.ackMaxChars === "number" && Number.isFinite(p.ackMaxChars)) h.ackMaxChars = p.ackMaxChars;
+		}
+		if (p.isolatedSession !== void 0) if (p.isolatedSession === null || p.isolatedSession === false) delete h.isolatedSession;
+		else h.isolatedSession = Boolean(p.isolatedSession);
+		if (p.activeHours !== void 0) {
+			if (p.activeHours === null) delete h.activeHours;
+			else if (typeof p.activeHours === "object" && p.activeHours !== null) {
+				const ah = p.activeHours;
+				const start = typeof ah.start === "string" ? ah.start : "";
+				const end = typeof ah.end === "string" ? ah.end : "";
+				if (start && end) h.activeHours = {
+					start,
+					end,
+					...typeof ah.timezone === "string" && ah.timezone.trim() ? { timezone: ah.timezone } : {}
+				};
+				else delete h.activeHours;
+			}
+		}
+	}
+	if (body.gateway?.bind !== void 0) {
+		const bindModes = new Set([
+			"auto",
+			"loopback",
+			"lan",
+			"tailnet",
+			"custom"
+		]);
+		const bind = body.gateway.bind;
+		if (typeof bind !== "string" || !bindModes.has(bind)) return patchError("gateway.bind must be one of: auto, loopback, lan, tailnet, custom");
+		if (!config.gateway) config.gateway = {
+			bind,
+			port: 18790,
+			heartbeat: {
+				enabled: true,
+				intervalMs: 18e5,
+				includeSystemPromptSection: false
+			},
+			maxSseConnections: 100,
+			corsOrigins: []
+		};
+		else config.gateway.bind = bind;
+		if (bind !== "custom") delete config.gateway.customBindHost;
+	}
+	if (body.gateway?.customBindHost !== void 0) {
+		if (body.gateway.customBindHost === null || body.gateway.customBindHost === "") {
+			if (config.gateway) delete config.gateway.customBindHost;
+		} else if (typeof body.gateway.customBindHost !== "string" || !isValidIPv4(body.gateway.customBindHost.trim())) return patchError("gateway.customBindHost must be a valid IPv4 address");
+		else if (config.gateway) {
+			config.gateway.customBindHost = body.gateway.customBindHost.trim();
+			config.gateway.bind = "custom";
+		}
+	}
+	if (body.gateway?.port !== void 0) {
+		if (typeof body.gateway.port !== "number" || !Number.isFinite(body.gateway.port) || body.gateway.port < 1 || body.gateway.port > 65535) return patchError("gateway.port must be an integer from 1 to 65535");
+		if (!config.gateway) config.gateway = {
+			bind: "loopback",
+			port: Math.floor(body.gateway.port),
+			heartbeat: {
+				enabled: true,
+				intervalMs: 18e5,
+				includeSystemPromptSection: false
+			},
+			maxSseConnections: 100,
+			corsOrigins: []
+		};
+		else config.gateway.port = Math.floor(body.gateway.port);
+	}
+	if (body.gateway?.tailscale !== void 0 && typeof body.gateway.tailscale === "object") {
+		const ts = body.gateway.tailscale;
+		if (!config.gateway) config.gateway = {
+			bind: "loopback",
+			port: 18790,
+			auth: { mode: "token" },
+			heartbeat: {
+				enabled: true,
+				intervalMs: 18e5,
+				includeSystemPromptSection: false
+			},
+			maxSseConnections: 100,
+			corsOrigins: []
+		};
+		config.gateway.tailscale = { ...config.gateway.tailscale ?? {
+			mode: "off",
+			resetOnExit: true
+		} };
+		if (ts.mode !== void 0) {
+			if (ts.mode !== "off" && ts.mode !== "serve" && ts.mode !== "funnel") return patchError("gateway.tailscale.mode must be off, serve, or funnel");
+			config.gateway.tailscale.mode = ts.mode;
+		}
+		if (ts.resetOnExit !== void 0) config.gateway.tailscale.resetOnExit = ts.resetOnExit === true;
+	}
+	if (body.gateway?.auth !== void 0) {
+		const gw = ensureGateway(config);
+		if (!gw.auth) gw.auth = { mode: "token" };
+		const a = body.gateway.auth;
+		if (a.mode !== void 0) {
+			if (a.mode !== "none" && a.mode !== "token" && a.mode !== "password" && a.mode !== "trusted-proxy") return patchError("gateway.auth.mode must be none, token, password, or trusted-proxy");
+			gw.auth.mode = a.mode;
+		}
+		if (a.token !== void 0) {
+			if (a.token === null || typeof a.token === "string" && !a.token.trim()) delete gw.auth.token;
+			else if (typeof a.token === "string") gw.auth.token = a.token;
+		}
+		if (a.password !== void 0) {
+			if (a.password === null || typeof a.password === "string" && !a.password.trim()) delete gw.auth.password;
+			else if (typeof a.password === "string" && a.password !== "***" && a.password !== "••••••••••••") gw.auth.password = a.password;
+		}
+		if (a.rateLimit !== void 0 && typeof a.rateLimit === "object" && a.rateLimit !== null) {
+			const rlIn = a.rateLimit;
+			if (!gw.auth.rateLimit) gw.auth.rateLimit = {
+				enabled: true,
+				maxAttempts: 5,
+				windowMs: 9e5,
+				blockDurationMs: 3e5,
+				burstCoalesceMs: 1e3,
+				exemptLoopback: true
+			};
+			const rl = gw.auth.rateLimit;
+			if (rlIn.enabled !== void 0) rl.enabled = Boolean(rlIn.enabled);
+			if (typeof rlIn.maxAttempts === "number" && Number.isFinite(rlIn.maxAttempts)) rl.maxAttempts = Math.max(1, Math.floor(rlIn.maxAttempts));
+			if (typeof rlIn.windowMs === "number" && Number.isFinite(rlIn.windowMs) && rlIn.windowMs > 0) rl.windowMs = Math.floor(rlIn.windowMs);
+			if (typeof rlIn.blockDurationMs === "number" && Number.isFinite(rlIn.blockDurationMs) && rlIn.blockDurationMs > 0) rl.blockDurationMs = Math.floor(rlIn.blockDurationMs);
+			if (typeof rlIn.lockoutMs === "number" && Number.isFinite(rlIn.lockoutMs) && rlIn.lockoutMs > 0) rl.blockDurationMs = Math.floor(rlIn.lockoutMs);
+			if (rlIn.exemptLoopback !== void 0) rl.exemptLoopback = Boolean(rlIn.exemptLoopback);
+		}
+		if (a.trustedProxy !== void 0) {
+			if (a.trustedProxy === null) delete gw.auth.trustedProxy;
+			else if (typeof a.trustedProxy === "object" && a.trustedProxy !== null) {
+				const tpIn = a.trustedProxy;
+				const userHeader = typeof tpIn.userHeader === "string" ? tpIn.userHeader.trim() : "";
+				if (!userHeader) return patchError("gateway.auth.trustedProxy.userHeader is required");
+				const trustedProxy = { userHeader };
+				if (tpIn.requiredHeaders !== void 0) {
+					if (!Array.isArray(tpIn.requiredHeaders)) return patchError("gateway.auth.trustedProxy.requiredHeaders must be an array");
+					trustedProxy.requiredHeaders = tpIn.requiredHeaders.filter((x) => typeof x === "string" && x.trim().length > 0).map((x) => x.trim());
+				}
+				if (tpIn.allowUsers !== void 0) {
+					if (!Array.isArray(tpIn.allowUsers)) return patchError("gateway.auth.trustedProxy.allowUsers must be an array");
+					trustedProxy.allowUsers = tpIn.allowUsers.filter((x) => typeof x === "string" && x.trim().length > 0).map((x) => x.trim());
+				}
+				if (tpIn.allowLoopback !== void 0) trustedProxy.allowLoopback = Boolean(tpIn.allowLoopback);
+				gw.auth.trustedProxy = trustedProxy;
+			}
+		}
+	}
+	if (body.gateway?.trustedProxies !== void 0) {
+		if (!Array.isArray(body.gateway.trustedProxies)) return patchError("gateway.trustedProxies must be an array");
+		const gw = ensureGateway(config);
+		gw.trustedProxies = body.gateway.trustedProxies.filter((x) => typeof x === "string" && x.trim().length > 0).map((x) => x.trim());
+	}
+	if (body.gateway?.allowRealIpFallback !== void 0) {
+		const gw = ensureGateway(config);
+		gw.allowRealIpFallback = Boolean(body.gateway.allowRealIpFallback);
+	}
+	if (body.gateway?.dangerouslyAllowHostHeaderOriginFallback !== void 0) {
+		const gw = ensureGateway(config);
+		gw.dangerouslyAllowHostHeaderOriginFallback = Boolean(body.gateway.dangerouslyAllowHostHeaderOriginFallback);
+	}
+	if (body.gateway?.security !== void 0) {
+		if (typeof body.gateway.security !== "object" || body.gateway.security === null) return patchError("gateway.security must be an object");
+		const gw = ensureGateway(config);
+		const secIn = body.gateway.security;
+		if (!gw.security) gw.security = {};
+		if (secIn.strict !== void 0) gw.security.strict = Boolean(secIn.strict);
+	}
+	if (body.gateway?.share !== void 0) {
+		if (typeof body.gateway.share !== "object" || body.gateway.share === null || Array.isArray(body.gateway.share)) return patchError("gateway.share must be an object");
+		const shareResult = mergeShareConfigPatch(config, body.gateway.share);
+		if (shareResult.ok === false) return patchError(shareResult.message);
+	}
+	if (body.gateway?.corsOrigins !== void 0) {
+		if (!Array.isArray(body.gateway.corsOrigins)) return patchError("gateway.corsOrigins must be an array");
+		const gw = ensureGateway(config);
+		gw.corsOrigins = body.gateway.corsOrigins.filter((x) => typeof x === "string" && x.trim().length > 0).map((x) => x.trim());
+	}
+	if (body.gateway?.maxSseConnections !== void 0) {
+		if (typeof body.gateway.maxSseConnections !== "number" || !Number.isFinite(body.gateway.maxSseConnections) || body.gateway.maxSseConnections < 1) return patchError("gateway.maxSseConnections must be a positive integer");
+		if (!config.gateway) config.gateway = {
+			bind: "loopback",
+			port: 18790,
+			heartbeat: {
+				enabled: true,
+				intervalMs: 18e5,
+				includeSystemPromptSection: false
+			},
+			maxSseConnections: Math.floor(body.gateway.maxSseConnections),
+			corsOrigins: []
+		};
+		else config.gateway.maxSseConnections = Math.floor(body.gateway.maxSseConnections);
+	}
+	if (body.gateway?.channelConnectDeferMode !== void 0) {
+		const mode = body.gateway.channelConnectDeferMode;
+		if (mode !== "auto" && mode !== "off" && mode !== "explicit") return patchError("gateway.channelConnectDeferMode must be auto, off, or explicit");
+		const gw = ensureGateway(config);
+		gw.channelConnectDeferMode = mode;
+	}
+	if (body.gateway?.channelConnectDeferIds !== void 0) {
+		const ids = parseDeferIdList(body.gateway.channelConnectDeferIds);
+		if (ids === null) return patchError("gateway.channelConnectDeferIds must be an array of up to 24 strings");
+		const gw = ensureGateway(config);
+		gw.channelConnectDeferIds = ids;
+	}
+	if (body.gateway?.channelConnectDeferSkipIds !== void 0) {
+		const ids = parseDeferIdList(body.gateway.channelConnectDeferSkipIds);
+		if (ids === null) return patchError("gateway.channelConnectDeferSkipIds must be an array of up to 24 strings");
+		const gw = ensureGateway(config);
+		gw.channelConnectDeferSkipIds = ids;
+	}
+	return PATCH_OK;
+}
+//#endregion
+export { applyGatewayPatch };
+
+//# sourceMappingURL=gateway.js.map

package/dist/src/gateway/hono/routes/config-patch/gateway.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gateway.js","names":[],"sources":["../../../../../../src/gateway/hono/routes/config-patch/gateway.ts"],"sourcesContent":["/**\n * `PATCH /api/config` — `body.gateway.*` section.\n *\n * Covers heartbeat, bind/customBindHost/port, tailscale, auth (mode + token +\n * password + rateLimit + trustedProxy), trustedProxies, allowRealIpFallback,\n * dangerouslyAllowHostHeaderOriginFallback, security, share, corsOrigins,\n * maxSseConnections, and channelConnectDefer{Mode,Ids,SkipIds}.\n *\n * Validation policy: each subsection that can reject rejects with a 400 and a\n * specific `message`. The dispatcher converts these into `c.json(...)`.\n *\n * Initial-state branches use the same literal defaults the inline code did\n * (loopback + port 18790 + 1800s heartbeat + 100 SSE conn + empty CORS) so\n * a brand-new install gets a working gateway after the first PATCH.\n */\nimport type { Config, GatewayBindMode } from '../../../../config/schema.js';\nimport { isValidIPv4 } from '../../../../config/gateway-bind.js';\nimport { mergeShareConfigPatch } from '../../../../share/share-config.js';\nimport { type PatchResult, PATCH_OK, patchError } from './result.js';\n\n/**\n * Shared default for \"user PATCH'd a gateway subsection but `config.gateway`\n * was never initialised\". Identical to the inline literal repeated in the\n * pre-extraction handler so this is behavior-preserving.\n */\nfunction ensureGateway(config: Config): NonNullable<Config['gateway']> {\n  if (!config.gateway) {\n    config.gateway = {\n      bind: 'loopback',\n      port: 18790,\n      heartbeat: { enabled: true, intervalMs: 1_800_000, includeSystemPromptSection: false },\n      maxSseConnections: 100,\n      corsOrigins: [],\n    };\n  }\n  return config.gateway;\n}\n\nfunction parseDeferIdList(raw: unknown): string[] | null {\n  if (!Array.isArray(raw)) return null;\n  const ids = raw\n    .filter((x): x is string => typeof x === 'string' && x.trim().length > 0)\n    .map((x) => x.trim());\n  if (ids.length > 24) return null;\n  return ids;\n}\n\nexport function applyGatewayPatch(config: Config, body: any): PatchResult {\n  if (body.gateway?.heartbeat !== undefined && typeof body.gateway.heartbeat === 'object') {\n    const gw = ensureGateway(config);\n    if (!gw.heartbeat) {\n      gw.heartbeat = { enabled: true, intervalMs: 1_800_000, includeSystemPromptSection: false };\n    }\n    const h = gw.heartbeat;\n    const p = body.gateway.heartbeat as Record<string, unknown>;\n    if (p.enabled !== undefined) h.enabled = Boolean(p.enabled);\n    if (p.intervalMs !== undefined && typeof p.intervalMs === 'number' && Number.isFinite(p.intervalMs)) {\n      h.intervalMs = p.intervalMs;\n    }\n    if (p.includeSystemPromptSection !== undefined) {\n      h.includeSystemPromptSection = Boolean(p.includeSystemPromptSection);\n    }\n    if (p.target !== undefined) {\n      if (p.target === null || p.target === '') delete (h as { target?: string }).target;\n      else (h as { target?: string }).target = String(p.target);\n    }\n    if (p.targetChatId !== undefined) {\n      if (p.targetChatId === null || p.targetChatId === '') delete (h as { targetChatId?: string }).targetChatId;\n      else (h as { targetChatId?: string }).targetChatId = String(p.targetChatId);\n    }\n    if (p.prompt !== undefined) {\n      if (p.prompt === null || p.prompt === '') delete (h as { prompt?: string }).prompt;\n      else (h as { prompt?: string }).prompt = String(p.prompt);\n    }\n    if (p.ackMaxChars !== undefined) {\n      if (p.ackMaxChars === null || p.ackMaxChars === '') delete (h as { ackMaxChars?: number }).ackMaxChars;\n      else if (typeof p.ackMaxChars === 'number' && Number.isFinite(p.ackMaxChars)) {\n        (h as { ackMaxChars?: number }).ackMaxChars = p.ackMaxChars;\n      }\n    }\n    if (p.isolatedSession !== undefined) {\n      if (p.isolatedSession === null || p.isolatedSession === false) {\n        delete (h as { isolatedSession?: boolean }).isolatedSession;\n      } else {\n        (h as { isolatedSession?: boolean }).isolatedSession = Boolean(p.isolatedSession);\n      }\n    }\n    if (p.activeHours !== undefined) {\n      if (p.activeHours === null) {\n        delete (h as { activeHours?: unknown }).activeHours;\n      } else if (typeof p.activeHours === 'object' && p.activeHours !== null) {\n        const ah = p.activeHours as Record<string, unknown>;\n        const start = typeof ah.start === 'string' ? ah.start : '';\n        const end = typeof ah.end === 'string' ? ah.end : '';\n        if (start && end) {\n          (h as { activeHours?: { start: string; end: string; timezone?: string } }).activeHours = {\n            start,\n            end,\n            ...(typeof ah.timezone === 'string' && ah.timezone.trim() ? { timezone: ah.timezone } : {}),\n          };\n        } else {\n          delete (h as { activeHours?: unknown }).activeHours;\n        }\n      }\n    }\n  }\n\n  if (body.gateway?.bind !== undefined) {\n    const bindModes = new Set(['auto', 'loopback', 'lan', 'tailnet', 'custom']);\n    const bind = body.gateway.bind;\n    if (typeof bind !== 'string' || !bindModes.has(bind)) {\n      return patchError('gateway.bind must be one of: auto, loopback, lan, tailnet, custom');\n    }\n    if (!config.gateway) {\n      config.gateway = {\n        bind: bind as GatewayBindMode,\n        port: 18790,\n        heartbeat: { enabled: true, intervalMs: 1_800_000, includeSystemPromptSection: false },\n        maxSseConnections: 100,\n        corsOrigins: [],\n      };\n    } else {\n      config.gateway.bind = bind as GatewayBindMode;\n    }\n    if (bind !== 'custom') {\n      delete config.gateway.customBindHost;\n    }\n  }\n\n  if (body.gateway?.customBindHost !== undefined) {\n    if (body.gateway.customBindHost === null || body.gateway.customBindHost === '') {\n      if (config.gateway) {\n        delete config.gateway.customBindHost;\n      }\n    } else if (typeof body.gateway.customBindHost !== 'string' || !isValidIPv4(body.gateway.customBindHost.trim())) {\n      return patchError('gateway.customBindHost must be a valid IPv4 address');\n    } else if (config.gateway) {\n      config.gateway.customBindHost = body.gateway.customBindHost.trim();\n      config.gateway.bind = 'custom';\n    }\n  }\n\n  if (body.gateway?.port !== undefined) {\n    if (\n      typeof body.gateway.port !== 'number' ||\n      !Number.isFinite(body.gateway.port) ||\n      body.gateway.port < 1 ||\n      body.gateway.port > 65535\n    ) {\n      return patchError('gateway.port must be an integer from 1 to 65535');\n    }\n    if (!config.gateway) {\n      config.gateway = {\n        bind: 'loopback',\n        port: Math.floor(body.gateway.port),\n        heartbeat: { enabled: true, intervalMs: 1_800_000, includeSystemPromptSection: false },\n        maxSseConnections: 100,\n        corsOrigins: [],\n      };\n    } else {\n      config.gateway.port = Math.floor(body.gateway.port);\n    }\n  }\n\n  if (body.gateway?.tailscale !== undefined && typeof body.gateway.tailscale === 'object') {\n    const ts = body.gateway.tailscale as Record<string, unknown>;\n    if (!config.gateway) {\n      config.gateway = {\n        bind: 'loopback',\n        port: 18790,\n        auth: { mode: 'token' },\n        heartbeat: { enabled: true, intervalMs: 1_800_000, includeSystemPromptSection: false },\n        maxSseConnections: 100,\n        corsOrigins: [],\n      };\n    }\n    config.gateway.tailscale = {\n      ...(config.gateway.tailscale ?? { mode: 'off', resetOnExit: true }),\n    };\n    if (ts.mode !== undefined) {\n      if (ts.mode !== 'off' && ts.mode !== 'serve' && ts.mode !== 'funnel') {\n        return patchError('gateway.tailscale.mode must be off, serve, or funnel');\n      }\n      config.gateway.tailscale.mode = ts.mode as 'off' | 'serve' | 'funnel';\n    }\n    if (ts.resetOnExit !== undefined) {\n      config.gateway.tailscale.resetOnExit = ts.resetOnExit === true;\n    }\n  }\n\n  if (body.gateway?.auth !== undefined) {\n    const gw = ensureGateway(config);\n    if (!gw.auth) gw.auth = { mode: 'token' };\n    const a = body.gateway.auth;\n    if (a.mode !== undefined) {\n      if (\n        a.mode !== 'none' &&\n        a.mode !== 'token' &&\n        a.mode !== 'password' &&\n        a.mode !== 'trusted-proxy'\n      ) {\n        return patchError('gateway.auth.mode must be none, token, password, or trusted-proxy');\n      }\n      gw.auth.mode = a.mode;\n    }\n    if (a.token !== undefined) {\n      if (a.token === null || (typeof a.token === 'string' && !a.token.trim())) {\n        delete gw.auth.token;\n      } else if (typeof a.token === 'string') {\n        gw.auth.token = a.token;\n      }\n    }\n    if (a.password !== undefined) {\n      if (a.password === null || (typeof a.password === 'string' && !a.password.trim())) {\n        delete gw.auth.password;\n      } else if (\n        typeof a.password === 'string' &&\n        a.password !== '***' &&\n        a.password !== '••••••••••••'\n      ) {\n        gw.auth.password = a.password;\n      }\n    }\n    if (a.rateLimit !== undefined && typeof a.rateLimit === 'object' && a.rateLimit !== null) {\n      const rlIn = a.rateLimit as Record<string, unknown>;\n      if (!gw.auth.rateLimit) {\n        gw.auth.rateLimit = {\n          enabled: true,\n          maxAttempts: 5,\n          windowMs: 900_000,\n          blockDurationMs: 300_000,\n          burstCoalesceMs: 1000,\n          exemptLoopback: true,\n        };\n      }\n      const rl = gw.auth.rateLimit!;\n      if (rlIn.enabled !== undefined) rl.enabled = Boolean(rlIn.enabled);\n      if (typeof rlIn.maxAttempts === 'number' && Number.isFinite(rlIn.maxAttempts)) {\n        rl.maxAttempts = Math.max(1, Math.floor(rlIn.maxAttempts));\n      }\n      if (typeof rlIn.windowMs === 'number' && Number.isFinite(rlIn.windowMs) && rlIn.windowMs > 0) {\n        rl.windowMs = Math.floor(rlIn.windowMs);\n      }\n      if (\n        typeof rlIn.blockDurationMs === 'number' &&\n        Number.isFinite(rlIn.blockDurationMs) &&\n        rlIn.blockDurationMs > 0\n      ) {\n        rl.blockDurationMs = Math.floor(rlIn.blockDurationMs);\n      }\n      if (\n        typeof rlIn.lockoutMs === 'number' &&\n        Number.isFinite(rlIn.lockoutMs) &&\n        rlIn.lockoutMs > 0\n      ) {\n        rl.blockDurationMs = Math.floor(rlIn.lockoutMs);\n      }\n      if (rlIn.exemptLoopback !== undefined) {\n        rl.exemptLoopback = Boolean(rlIn.exemptLoopback);\n      }\n    }\n    if (a.trustedProxy !== undefined) {\n      if (a.trustedProxy === null) {\n        delete gw.auth.trustedProxy;\n      } else if (typeof a.trustedProxy === 'object' && a.trustedProxy !== null) {\n        const tpIn = a.trustedProxy as Record<string, unknown>;\n        const userHeader =\n          typeof tpIn.userHeader === 'string' ? tpIn.userHeader.trim() : '';\n        if (!userHeader) {\n          return patchError('gateway.auth.trustedProxy.userHeader is required');\n        }\n        const trustedProxy: NonNullable<(typeof gw.auth)['trustedProxy']> = {\n          userHeader,\n        };\n        if (tpIn.requiredHeaders !== undefined) {\n          if (!Array.isArray(tpIn.requiredHeaders)) {\n            return patchError('gateway.auth.trustedProxy.requiredHeaders must be an array');\n          }\n          trustedProxy.requiredHeaders = tpIn.requiredHeaders\n            .filter((x): x is string => typeof x === 'string' && x.trim().length > 0)\n            .map((x) => x.trim());\n        }\n        if (tpIn.allowUsers !== undefined) {\n          if (!Array.isArray(tpIn.allowUsers)) {\n            return patchError('gateway.auth.trustedProxy.allowUsers must be an array');\n          }\n          trustedProxy.allowUsers = tpIn.allowUsers\n            .filter((x): x is string => typeof x === 'string' && x.trim().length > 0)\n            .map((x) => x.trim());\n        }\n        if (tpIn.allowLoopback !== undefined) {\n          trustedProxy.allowLoopback = Boolean(tpIn.allowLoopback);\n        }\n        gw.auth.trustedProxy = trustedProxy;\n      }\n    }\n  }\n\n  if (body.gateway?.trustedProxies !== undefined) {\n    if (!Array.isArray(body.gateway.trustedProxies)) {\n      return patchError('gateway.trustedProxies must be an array');\n    }\n    const gw = ensureGateway(config);\n    gw.trustedProxies = body.gateway.trustedProxies\n      .filter((x: unknown): x is string => typeof x === 'string' && x.trim().length > 0)\n      .map((x: string) => x.trim());\n  }\n\n  if (body.gateway?.allowRealIpFallback !== undefined) {\n    const gw = ensureGateway(config);\n    gw.allowRealIpFallback = Boolean(body.gateway.allowRealIpFallback);\n  }\n\n  if (body.gateway?.dangerouslyAllowHostHeaderOriginFallback !== undefined) {\n    const gw = ensureGateway(config);\n    gw.dangerouslyAllowHostHeaderOriginFallback = Boolean(\n      body.gateway.dangerouslyAllowHostHeaderOriginFallback,\n    );\n  }\n\n  if (body.gateway?.security !== undefined) {\n    if (typeof body.gateway.security !== 'object' || body.gateway.security === null) {\n      return patchError('gateway.security must be an object');\n    }\n    const gw = ensureGateway(config);\n    const secIn = body.gateway.security as Record<string, unknown>;\n    if (!gw.security) {\n      gw.security = {};\n    }\n    if (secIn.strict !== undefined) {\n      gw.security.strict = Boolean(secIn.strict);\n    }\n  }\n\n  if (body.gateway?.share !== undefined) {\n    if (typeof body.gateway.share !== 'object' || body.gateway.share === null || Array.isArray(body.gateway.share)) {\n      return patchError('gateway.share must be an object');\n    }\n    const shareResult = mergeShareConfigPatch(config, body.gateway.share as Record<string, unknown>);\n    if (shareResult.ok === false) {\n      return patchError(shareResult.message);\n    }\n  }\n\n  if (body.gateway?.corsOrigins !== undefined) {\n    if (!Array.isArray(body.gateway.corsOrigins)) {\n      return patchError('gateway.corsOrigins must be an array');\n    }\n    const gw = ensureGateway(config);\n    gw.corsOrigins = body.gateway.corsOrigins\n      .filter((x: unknown): x is string => typeof x === 'string' && x.trim().length > 0)\n      .map((x: string) => x.trim());\n  }\n\n  if (body.gateway?.maxSseConnections !== undefined) {\n    if (\n      typeof body.gateway.maxSseConnections !== 'number' ||\n      !Number.isFinite(body.gateway.maxSseConnections) ||\n      body.gateway.maxSseConnections < 1\n    ) {\n      return patchError('gateway.maxSseConnections must be a positive integer');\n    }\n    if (!config.gateway) {\n      config.gateway = {\n        bind: 'loopback',\n        port: 18790,\n        heartbeat: { enabled: true, intervalMs: 1_800_000, includeSystemPromptSection: false },\n        maxSseConnections: Math.floor(body.gateway.maxSseConnections),\n        corsOrigins: [],\n      };\n    } else {\n      config.gateway.maxSseConnections = Math.floor(body.gateway.maxSseConnections);\n    }\n  }\n\n  if (body.gateway?.channelConnectDeferMode !== undefined) {\n    const mode = body.gateway.channelConnectDeferMode;\n    if (mode !== 'auto' && mode !== 'off' && mode !== 'explicit') {\n      return patchError('gateway.channelConnectDeferMode must be auto, off, or explicit');\n    }\n    const gw = ensureGateway(config);\n    gw.channelConnectDeferMode = mode;\n  }\n\n  if (body.gateway?.channelConnectDeferIds !== undefined) {\n    const ids = parseDeferIdList(body.gateway.channelConnectDeferIds);\n    if (ids === null) {\n      return patchError('gateway.channelConnectDeferIds must be an array of up to 24 strings');\n    }\n    const gw = ensureGateway(config);\n    gw.channelConnectDeferIds = ids;\n  }\n\n  if (body.gateway?.channelConnectDeferSkipIds !== undefined) {\n    const ids = parseDeferIdList(body.gateway.channelConnectDeferSkipIds);\n    if (ids === null) {\n      return patchError('gateway.channelConnectDeferSkipIds must be an array of up to 24 strings');\n    }\n    const gw = ensureGateway(config);\n    gw.channelConnectDeferSkipIds = ids;\n  }\n\n  return PATCH_OK;\n}\n"],"mappings":";;;;;;;;;AAyBA,SAAS,cAAc,QAAgD;AACrE,KAAI,CAAC,OAAO,QACV,QAAO,UAAU;EACf,MAAM;EACN,MAAM;EACN,WAAW;GAAE,SAAS;GAAM,YAAY;GAAW,4BAA4B;GAAO;EACtF,mBAAmB;EACnB,aAAa,EAAE;EAChB;AAEH,QAAO,OAAO;;AAGhB,SAAS,iBAAiB,KAA+B;AACvD,KAAI,CAAC,MAAM,QAAQ,IAAI,CAAE,QAAO;CAChC,MAAM,MAAM,IACT,QAAQ,MAAmB,OAAO,MAAM,YAAY,EAAE,MAAM,CAAC,SAAS,EAAE,CACxE,KAAK,MAAM,EAAE,MAAM,CAAC;AACvB,KAAI,IAAI,SAAS,GAAI,QAAO;AAC5B,QAAO;;AAGT,SAAgB,kBAAkB,QAAgB,MAAwB;AACxE,KAAI,KAAK,SAAS,cAAc,KAAA,KAAa,OAAO,KAAK,QAAQ,cAAc,UAAU;EACvF,MAAM,KAAK,cAAc,OAAO;AAChC,MAAI,CAAC,GAAG,UACN,IAAG,YAAY;GAAE,SAAS;GAAM,YAAY;GAAW,4BAA4B;GAAO;EAE5F,MAAM,IAAI,GAAG;EACb,MAAM,IAAI,KAAK,QAAQ;AACvB,MAAI,EAAE,YAAY,KAAA,EAAW,GAAE,UAAU,QAAQ,EAAE,QAAQ;AAC3D,MAAI,EAAE,eAAe,KAAA,KAAa,OAAO,EAAE,eAAe,YAAY,OAAO,SAAS,EAAE,WAAW,CACjG,GAAE,aAAa,EAAE;AAEnB,MAAI,EAAE,+BAA+B,KAAA,EACnC,GAAE,6BAA6B,QAAQ,EAAE,2BAA2B;AAEtE,MAAI,EAAE,WAAW,KAAA,EACf,KAAI,EAAE,WAAW,QAAQ,EAAE,WAAW,GAAI,QAAQ,EAA0B;MACtE,GAA0B,SAAS,OAAO,EAAE,OAAO;AAE3D,MAAI,EAAE,iBAAiB,KAAA,EACrB,KAAI,EAAE,iBAAiB,QAAQ,EAAE,iBAAiB,GAAI,QAAQ,EAAgC;MACxF,GAAgC,eAAe,OAAO,EAAE,aAAa;AAE7E,MAAI,EAAE,WAAW,KAAA,EACf,KAAI,EAAE,WAAW,QAAQ,EAAE,WAAW,GAAI,QAAQ,EAA0B;MACtE,GAA0B,SAAS,OAAO,EAAE,OAAO;AAE3D,MAAI,EAAE,gBAAgB,KAAA;OAChB,EAAE,gBAAgB,QAAQ,EAAE,gBAAgB,GAAI,QAAQ,EAA+B;YAClF,OAAO,EAAE,gBAAgB,YAAY,OAAO,SAAS,EAAE,YAAY,CACzE,GAA+B,cAAc,EAAE;;AAGpD,MAAI,EAAE,oBAAoB,KAAA,EACxB,KAAI,EAAE,oBAAoB,QAAQ,EAAE,oBAAoB,MACtD,QAAQ,EAAoC;MAE3C,GAAoC,kBAAkB,QAAQ,EAAE,gBAAgB;AAGrF,MAAI,EAAE,gBAAgB,KAAA;OAChB,EAAE,gBAAgB,KACpB,QAAQ,EAAgC;YAC/B,OAAO,EAAE,gBAAgB,YAAY,EAAE,gBAAgB,MAAM;IACtE,MAAM,KAAK,EAAE;IACb,MAAM,QAAQ,OAAO,GAAG,UAAU,WAAW,GAAG,QAAQ;IACxD,MAAM,MAAM,OAAO,GAAG,QAAQ,WAAW,GAAG,MAAM;AAClD,QAAI,SAAS,IACV,GAA0E,cAAc;KACvF;KACA;KACA,GAAI,OAAO,GAAG,aAAa,YAAY,GAAG,SAAS,MAAM,GAAG,EAAE,UAAU,GAAG,UAAU,GAAG,EAAE;KAC3F;QAED,QAAQ,EAAgC;;;;AAMhD,KAAI,KAAK,SAAS,SAAS,KAAA,GAAW;EACpC,MAAM,YAAY,IAAI,IAAI;GAAC;GAAQ;GAAY;GAAO;GAAW;GAAS,CAAC;EAC3E,MAAM,OAAO,KAAK,QAAQ;AAC1B,MAAI,OAAO,SAAS,YAAY,CAAC,UAAU,IAAI,KAAK,CAClD,QAAO,WAAW,oEAAoE;AAExF,MAAI,CAAC,OAAO,QACV,QAAO,UAAU;GACT;GACN,MAAM;GACN,WAAW;IAAE,SAAS;IAAM,YAAY;IAAW,4BAA4B;IAAO;GACtF,mBAAmB;GACnB,aAAa,EAAE;GAChB;MAED,QAAO,QAAQ,OAAO;AAExB,MAAI,SAAS,SACX,QAAO,OAAO,QAAQ;;AAI1B,KAAI,KAAK,SAAS,mBAAmB,KAAA;MAC/B,KAAK,QAAQ,mBAAmB,QAAQ,KAAK,QAAQ,mBAAmB;OACtE,OAAO,QACT,QAAO,OAAO,QAAQ;aAEf,OAAO,KAAK,QAAQ,mBAAmB,YAAY,CAAC,YAAY,KAAK,QAAQ,eAAe,MAAM,CAAC,CAC5G,QAAO,WAAW,sDAAsD;WAC/D,OAAO,SAAS;AACzB,UAAO,QAAQ,iBAAiB,KAAK,QAAQ,eAAe,MAAM;AAClE,UAAO,QAAQ,OAAO;;;AAI1B,KAAI,KAAK,SAAS,SAAS,KAAA,GAAW;AACpC,MACE,OAAO,KAAK,QAAQ,SAAS,YAC7B,CAAC,OAAO,SAAS,KAAK,QAAQ,KAAK,IACnC,KAAK,QAAQ,OAAO,KACpB,KAAK,QAAQ,OAAO,MAEpB,QAAO,WAAW,kDAAkD;AAEtE,MAAI,CAAC,OAAO,QACV,QAAO,UAAU;GACf,MAAM;GACN,MAAM,KAAK,MAAM,KAAK,QAAQ,KAAK;GACnC,WAAW;IAAE,SAAS;IAAM,YAAY;IAAW,4BAA4B;IAAO;GACtF,mBAAmB;GACnB,aAAa,EAAE;GAChB;MAED,QAAO,QAAQ,OAAO,KAAK,MAAM,KAAK,QAAQ,KAAK;;AAIvD,KAAI,KAAK,SAAS,cAAc,KAAA,KAAa,OAAO,KAAK,QAAQ,cAAc,UAAU;EACvF,MAAM,KAAK,KAAK,QAAQ;AACxB,MAAI,CAAC,OAAO,QACV,QAAO,UAAU;GACf,MAAM;GACN,MAAM;GACN,MAAM,EAAE,MAAM,SAAS;GACvB,WAAW;IAAE,SAAS;IAAM,YAAY;IAAW,4BAA4B;IAAO;GACtF,mBAAmB;GACnB,aAAa,EAAE;GAChB;AAEH,SAAO,QAAQ,YAAY,EACzB,GAAI,OAAO,QAAQ,aAAa;GAAE,MAAM;GAAO,aAAa;GAAM,EACnE;AACD,MAAI,GAAG,SAAS,KAAA,GAAW;AACzB,OAAI,GAAG,SAAS,SAAS,GAAG,SAAS,WAAW,GAAG,SAAS,SAC1D,QAAO,WAAW,uDAAuD;AAE3E,UAAO,QAAQ,UAAU,OAAO,GAAG;;AAErC,MAAI,GAAG,gBAAgB,KAAA,EACrB,QAAO,QAAQ,UAAU,cAAc,GAAG,gBAAgB;;AAI9D,KAAI,KAAK,SAAS,SAAS,KAAA,GAAW;EACpC,MAAM,KAAK,cAAc,OAAO;AAChC,MAAI,CAAC,GAAG,KAAM,IAAG,OAAO,EAAE,MAAM,SAAS;EACzC,MAAM,IAAI,KAAK,QAAQ;AACvB,MAAI,EAAE,SAAS,KAAA,GAAW;AACxB,OACE,EAAE,SAAS,UACX,EAAE,SAAS,WACX,EAAE,SAAS,cACX,EAAE,SAAS,gBAEX,QAAO,WAAW,oEAAoE;AAExF,MAAG,KAAK,OAAO,EAAE;;AAEnB,MAAI,EAAE,UAAU,KAAA;OACV,EAAE,UAAU,QAAS,OAAO,EAAE,UAAU,YAAY,CAAC,EAAE,MAAM,MAAM,CACrE,QAAO,GAAG,KAAK;YACN,OAAO,EAAE,UAAU,SAC5B,IAAG,KAAK,QAAQ,EAAE;;AAGtB,MAAI,EAAE,aAAa,KAAA;OACb,EAAE,aAAa,QAAS,OAAO,EAAE,aAAa,YAAY,CAAC,EAAE,SAAS,MAAM,CAC9E,QAAO,GAAG,KAAK;YAEf,OAAO,EAAE,aAAa,YACtB,EAAE,aAAa,SACf,EAAE,aAAa,eAEf,IAAG,KAAK,WAAW,EAAE;;AAGzB,MAAI,EAAE,cAAc,KAAA,KAAa,OAAO,EAAE,cAAc,YAAY,EAAE,cAAc,MAAM;GACxF,MAAM,OAAO,EAAE;AACf,OAAI,CAAC,GAAG,KAAK,UACX,IAAG,KAAK,YAAY;IAClB,SAAS;IACT,aAAa;IACb,UAAU;IACV,iBAAiB;IACjB,iBAAiB;IACjB,gBAAgB;IACjB;GAEH,MAAM,KAAK,GAAG,KAAK;AACnB,OAAI,KAAK,YAAY,KAAA,EAAW,IAAG,UAAU,QAAQ,KAAK,QAAQ;AAClE,OAAI,OAAO,KAAK,gBAAgB,YAAY,OAAO,SAAS,KAAK,YAAY,CAC3E,IAAG,cAAc,KAAK,IAAI,GAAG,KAAK,MAAM,KAAK,YAAY,CAAC;AAE5D,OAAI,OAAO,KAAK,aAAa,YAAY,OAAO,SAAS,KAAK,SAAS,IAAI,KAAK,WAAW,EACzF,IAAG,WAAW,KAAK,MAAM,KAAK,SAAS;AAEzC,OACE,OAAO,KAAK,oBAAoB,YAChC,OAAO,SAAS,KAAK,gBAAgB,IACrC,KAAK,kBAAkB,EAEvB,IAAG,kBAAkB,KAAK,MAAM,KAAK,gBAAgB;AAEvD,OACE,OAAO,KAAK,cAAc,YAC1B,OAAO,SAAS,KAAK,UAAU,IAC/B,KAAK,YAAY,EAEjB,IAAG,kBAAkB,KAAK,MAAM,KAAK,UAAU;AAEjD,OAAI,KAAK,mBAAmB,KAAA,EAC1B,IAAG,iBAAiB,QAAQ,KAAK,eAAe;;AAGpD,MAAI,EAAE,iBAAiB,KAAA;OACjB,EAAE,iBAAiB,KACrB,QAAO,GAAG,KAAK;YACN,OAAO,EAAE,iBAAiB,YAAY,EAAE,iBAAiB,MAAM;IACxE,MAAM,OAAO,EAAE;IACf,MAAM,aACJ,OAAO,KAAK,eAAe,WAAW,KAAK,WAAW,MAAM,GAAG;AACjE,QAAI,CAAC,WACH,QAAO,WAAW,mDAAmD;IAEvE,MAAM,eAA8D,EAClE,YACD;AACD,QAAI,KAAK,oBAAoB,KAAA,GAAW;AACtC,SAAI,CAAC,MAAM,QAAQ,KAAK,gBAAgB,CACtC,QAAO,WAAW,6DAA6D;AAEjF,kBAAa,kBAAkB,KAAK,gBACjC,QAAQ,MAAmB,OAAO,MAAM,YAAY,EAAE,MAAM,CAAC,SAAS,EAAE,CACxE,KAAK,MAAM,EAAE,MAAM,CAAC;;AAEzB,QAAI,KAAK,eAAe,KAAA,GAAW;AACjC,SAAI,CAAC,MAAM,QAAQ,KAAK,WAAW,CACjC,QAAO,WAAW,wDAAwD;AAE5E,kBAAa,aAAa,KAAK,WAC5B,QAAQ,MAAmB,OAAO,MAAM,YAAY,EAAE,MAAM,CAAC,SAAS,EAAE,CACxE,KAAK,MAAM,EAAE,MAAM,CAAC;;AAEzB,QAAI,KAAK,kBAAkB,KAAA,EACzB,cAAa,gBAAgB,QAAQ,KAAK,cAAc;AAE1D,OAAG,KAAK,eAAe;;;;AAK7B,KAAI,KAAK,SAAS,mBAAmB,KAAA,GAAW;AAC9C,MAAI,CAAC,MAAM,QAAQ,KAAK,QAAQ,eAAe,CAC7C,QAAO,WAAW,0CAA0C;EAE9D,MAAM,KAAK,cAAc,OAAO;AAChC,KAAG,iBAAiB,KAAK,QAAQ,eAC9B,QAAQ,MAA4B,OAAO,MAAM,YAAY,EAAE,MAAM,CAAC,SAAS,EAAE,CACjF,KAAK,MAAc,EAAE,MAAM,CAAC;;AAGjC,KAAI,KAAK,SAAS,wBAAwB,KAAA,GAAW;EACnD,MAAM,KAAK,cAAc,OAAO;AAChC,KAAG,sBAAsB,QAAQ,KAAK,QAAQ,oBAAoB;;AAGpE,KAAI,KAAK,SAAS,6CAA6C,KAAA,GAAW;EACxE,MAAM,KAAK,cAAc,OAAO;AAChC,KAAG,2CAA2C,QAC5C,KAAK,QAAQ,yCACd;;AAGH,KAAI,KAAK,SAAS,aAAa,KAAA,GAAW;AACxC,MAAI,OAAO,KAAK,QAAQ,aAAa,YAAY,KAAK,QAAQ,aAAa,KACzE,QAAO,WAAW,qCAAqC;EAEzD,MAAM,KAAK,cAAc,OAAO;EAChC,MAAM,QAAQ,KAAK,QAAQ;AAC3B,MAAI,CAAC,GAAG,SACN,IAAG,WAAW,EAAE;AAElB,MAAI,MAAM,WAAW,KAAA,EACnB,IAAG,SAAS,SAAS,QAAQ,MAAM,OAAO;;AAI9C,KAAI,KAAK,SAAS,UAAU,KAAA,GAAW;AACrC,MAAI,OAAO,KAAK,QAAQ,UAAU,YAAY,KAAK,QAAQ,UAAU,QAAQ,MAAM,QAAQ,KAAK,QAAQ,MAAM,CAC5G,QAAO,WAAW,kCAAkC;EAEtD,MAAM,cAAc,sBAAsB,QAAQ,KAAK,QAAQ,MAAiC;AAChG,MAAI,YAAY,OAAO,MACrB,QAAO,WAAW,YAAY,QAAQ;;AAI1C,KAAI,KAAK,SAAS,gBAAgB,KAAA,GAAW;AAC3C,MAAI,CAAC,MAAM,QAAQ,KAAK,QAAQ,YAAY,CAC1C,QAAO,WAAW,uCAAuC;EAE3D,MAAM,KAAK,cAAc,OAAO;AAChC,KAAG,cAAc,KAAK,QAAQ,YAC3B,QAAQ,MAA4B,OAAO,MAAM,YAAY,EAAE,MAAM,CAAC,SAAS,EAAE,CACjF,KAAK,MAAc,EAAE,MAAM,CAAC;;AAGjC,KAAI,KAAK,SAAS,sBAAsB,KAAA,GAAW;AACjD,MACE,OAAO,KAAK,QAAQ,sBAAsB,YAC1C,CAAC,OAAO,SAAS,KAAK,QAAQ,kBAAkB,IAChD,KAAK,QAAQ,oBAAoB,EAEjC,QAAO,WAAW,uDAAuD;AAE3E,MAAI,CAAC,OAAO,QACV,QAAO,UAAU;GACf,MAAM;GACN,MAAM;GACN,WAAW;IAAE,SAAS;IAAM,YAAY;IAAW,4BAA4B;IAAO;GACtF,mBAAmB,KAAK,MAAM,KAAK,QAAQ,kBAAkB;GAC7D,aAAa,EAAE;GAChB;MAED,QAAO,QAAQ,oBAAoB,KAAK,MAAM,KAAK,QAAQ,kBAAkB;;AAIjF,KAAI,KAAK,SAAS,4BAA4B,KAAA,GAAW;EACvD,MAAM,OAAO,KAAK,QAAQ;AAC1B,MAAI,SAAS,UAAU,SAAS,SAAS,SAAS,WAChD,QAAO,WAAW,iEAAiE;EAErF,MAAM,KAAK,cAAc,OAAO;AAChC,KAAG,0BAA0B;;AAG/B,KAAI,KAAK,SAAS,2BAA2B,KAAA,GAAW;EACtD,MAAM,MAAM,iBAAiB,KAAK,QAAQ,uBAAuB;AACjE,MAAI,QAAQ,KACV,QAAO,WAAW,sEAAsE;EAE1F,MAAM,KAAK,cAAc,OAAO;AAChC,KAAG,yBAAyB;;AAG9B,KAAI,KAAK,SAAS,+BAA+B,KAAA,GAAW;EAC1D,MAAM,MAAM,iBAAiB,KAAK,QAAQ,2BAA2B;AACrE,MAAI,QAAQ,KACV,QAAO,WAAW,0EAA0E;EAE9F,MAAM,KAAK,cAAc,OAAO;AAChC,KAAG,6BAA6B;;AAGlC,QAAO"}

package/dist/src/gateway/hono/routes/config-patch/index.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Barrel for `PATCH /api/config` section patchers. See `agents.ts`,
+ * `channels.ts`, `gateway.ts`, `misc.ts` for the per-section split.
+ */
+export { applyAgentsPatch } from './agents.js';
+export { applyChannelsPatch } from './channels.js';
+export { applyGatewayPatch } from './gateway.js';
+export { applyMiscPatch, validateGatewayAfterPatch } from './misc.js';
+export { type PatchResult, PATCH_OK, patchError } from './result.js';

package/dist/src/gateway/hono/routes/config-patch/index.js

@@ -0,0 +1,6 @@
+import { applyAgentsPatch } from "./agents.js";
+import { applyChannelsPatch } from "./channels.js";
+import { PATCH_OK, patchError } from "./result.js";
+import { applyGatewayPatch } from "./gateway.js";
+import { applyMiscPatch, validateGatewayAfterPatch } from "./misc.js";
+export { PATCH_OK, applyAgentsPatch, applyChannelsPatch, applyGatewayPatch, applyMiscPatch, patchError, validateGatewayAfterPatch };

package/dist/src/gateway/hono/routes/config-patch/misc.d.ts

@@ -0,0 +1,23 @@
+/**
+ * `PATCH /api/config` — tail sections that are each <50 lines:
+ *   update / cron / goals / session / gateway.{skillsMarketplaceProvider,
+ *   skillsStoreBaseUrl} / providers / providersConfig / stt / tts / tools /
+ *   tunnel / bindings / mcp.
+ *
+ * Most of these delegate to a `mergeXxxConfigPatch(config, body) → { ok,
+ * message? }` helper that lives next to the schema, so this file is mostly
+ * "validate object shape, call helper, surface 400 on failure". The async
+ * `providers` branch saves into the credential resolver rather than config.
+ *
+ * Final validation (resolveGatewayAuth + assertGatewayRuntimeConfig) runs
+ * after every gateway-touching patch lands, so it sees the merged shape.
+ */
+import type { Config } from '../../../../config/schema.js';
+import { type PatchResult } from './result.js';
+export declare function applyMiscPatch(config: Config, body: any): Promise<PatchResult>;
+/**
+ * Re-validate gateway runtime config when `body.gateway` touched anything that
+ * could break the bind/auth contract. Runs *after* all per-section patches
+ * land so it sees the fully merged shape.
+ */
+export declare function validateGatewayAfterPatch(config: Config, body: any): PatchResult;