@xopcai/xopc 0.0.81 → 0.0.83

package/dist/src/gateway/hono/routes/shares.js.map

@@ -1 +1 @@
-{"version":3,"file":"shares.js","names":[],"sources":["../../../../../src/gateway/hono/routes/shares.ts"],"sourcesContent":["import type { Hono } from 'hono';\nimport { createReadStream } from 'node:fs';\nimport { stat } from 'node:fs/promises';\nimport { createHash } from 'node:crypto';\nimport { Readable } from 'node:stream';\n\nimport { extractToken } from '../../auth.js';\nimport { getClientIpFromHeaders } from '../../auth-rate-limit.js';\nimport { getShareStore } from '../../../share/share-store.js';\nimport { resolveShareUrl } from '../../../share/share-url.js';\nimport { consumeSharePublicLimit } from '../../../share/share-rate-limit.js';\nimport { logShareAudit } from '../../../share/share-audit.js';\nimport { renderShareLandingPage, renderShareExpiredPage } from '../../../share/share-landing.js';\nimport type { ShareExpiredReason } from '../../../share/share-landing.js';\nimport type { ShareConfig } from '../../../share/share-types.js';\nimport { resolveGatewayEffectiveHost } from '../../../config/gateway-bind.js';\nimport { SHARE_CONFIG_DEFAULTS } from '../../../share/share-types.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\nimport type { GatewayService } from '../../service.js';\n\nfunction getShareUrlContext(service: GatewayService) {\n  const gateway = service.currentConfig.gateway;\n  return {\n    gatewayHost: resolveGatewayEffectiveHost(service.currentConfig),\n    gatewayPort: gateway.port ?? 18790,\n  };\n}\n\nfunction resolveShareConfig(service: GatewayService): Partial<ShareConfig> {\n  const raw = (service.currentConfig.gateway as Record<string, unknown>)?.share;\n  if (!raw || typeof raw !== 'object') return {};\n  return raw as Partial<ShareConfig>;\n}\n\nfunction hashGatewayToken(token: string): string {\n  return createHash('sha256').update(token, 'utf8').digest('hex').slice(0, 12);\n}\n\nconst MAX_CONCURRENT_DOWNLOADS_PER_TOKEN = 5;\nconst activeDownloads = new Map<string, number>();\n\nfunction acquireDownloadSlot(token: string): boolean {\n  const current = activeDownloads.get(token) ?? 0;\n  if (current >= MAX_CONCURRENT_DOWNLOADS_PER_TOKEN) return false;\n  activeDownloads.set(token, current + 1);\n  return true;\n}\n\nfunction releaseDownloadSlot(token: string): void {\n  const current = activeDownloads.get(token) ?? 0;\n  if (current <= 1) {\n    activeDownloads.delete(token);\n  } else {\n    activeDownloads.set(token, current - 1);\n  }\n}\n\n// ── Public routes (no auth required) ──────────────────────────────────────────\n\nexport function registerSharePublicRoutes(app: Hono, service: GatewayService): void {\n  const store = getShareStore(resolveShareConfig(service));\n\n  /** Landing page — does NOT consume viewCount (prevents link unfurl from wasting views). */\n  app.get('/s/:token', async (c) => {\n    const clientIp = getClientIpFromHeaders({ get: (n: string) => c.req.header(n) ?? undefined });\n    const rateResult = consumeSharePublicLimit(clientIp);\n    if (!rateResult.allowed) {\n      c.header('Retry-After', String(Math.ceil(rateResult.retryAfterMs / 1000)));\n      return c.text('Too many requests', 429);\n    }\n\n    const token = c.req.param('token');\n    const record = store.getByToken(token);\n\n    if (!record) {\n      return c.html(renderShareExpiredPage('not_found'), 404);\n    }\n\n    const validation = store.validateAccess(record);\n    if (!validation.valid) {\n      logShareAudit(\n        'share.access_denied',\n        { shareId: record.id, tokenPrefix: token.slice(0, 8), reason: validation.reason, clientIp },\n        `Share access denied: ${validation.reason}`,\n      );\n      return c.html(renderShareExpiredPage(validation.reason as ShareExpiredReason), 410);\n    }\n\n    // Direct download shortcut: ?dl=1\n    if (c.req.query('dl') === '1') {\n      return handleDownload(c, store, record, clientIp);\n    }\n\n    // Inline preview for whitelisted MIME types: ?inline=1\n    if (c.req.query('inline') === '1') {\n      const cfg = { ...SHARE_CONFIG_DEFAULTS, ...resolveShareConfig(service) };\n      if (cfg.inlinePreviewMimes.includes(record.mimeType)) {\n        return handleDownload(c, store, record, clientIp, true);\n      }\n    }\n\n    const downloadPath = `/s/${token}/download`;\n    return c.html(renderShareLandingPage(record, downloadPath));\n  });\n\n  /** Actual file download — consumes viewCount. */\n  app.post('/s/:token/download', async (c) => {\n    const clientIp = getClientIpFromHeaders({ get: (n: string) => c.req.header(n) ?? undefined });\n    const rateResult = consumeSharePublicLimit(clientIp);\n    if (!rateResult.allowed) {\n      c.header('Retry-After', String(Math.ceil(rateResult.retryAfterMs / 1000)));\n      return c.text('Too many requests', 429);\n    }\n\n    const token = c.req.param('token');\n    const record = store.getByToken(token);\n\n    if (!record) {\n      return c.html(renderShareExpiredPage('not_found'), 404);\n    }\n\n    const validation = store.validateAccess(record);\n    if (!validation.valid) {\n      logShareAudit(\n        'share.access_denied',\n        { shareId: record.id, tokenPrefix: token.slice(0, 8), reason: validation.reason, clientIp },\n        `Share download denied: ${validation.reason}`,\n      );\n      return c.html(renderShareExpiredPage(validation.reason as ShareExpiredReason), 410);\n    }\n\n    return handleDownload(c, store, record, clientIp);\n  });\n\n  /** File metadata (for link preview cards). */\n  app.get('/s/:token/meta', async (c) => {\n    const clientIp = getClientIpFromHeaders({ get: (n: string) => c.req.header(n) ?? undefined });\n    const rateResult = consumeSharePublicLimit(clientIp);\n    if (!rateResult.allowed) {\n      c.header('Retry-After', String(Math.ceil(rateResult.retryAfterMs / 1000)));\n      return c.text('Too many requests', 429);\n    }\n\n    const token = c.req.param('token');\n    const record = store.getByToken(token);\n    if (!record) {\n      return c.json({ valid: false }, 404);\n    }\n\n    const validation = store.validateAccess(record);\n    const remainingViews = record.maxViews !== null ? Math.max(0, record.maxViews - record.viewCount) : null;\n\n    return c.json({\n      fileName: record.fileName,\n      fileSize: record.fileSize,\n      mimeType: record.mimeType,\n      description: record.description ?? null,\n      expiresAt: record.expiresAt,\n      remainingViews,\n      valid: validation.valid,\n    });\n  });\n\n  /** HEAD check (Hono uses .on() for HEAD method). */\n  app.on('HEAD', '/s/:token', async (c) => {\n    const token = c.req.param('token');\n    const record = store.getByToken(token);\n    if (!record) return c.body(null, 404);\n    const validation = store.validateAccess(record);\n    return c.body(null, validation.valid ? 200 : 410);\n  });\n}\n\n// ── Authenticated routes ──────────────────────────────────────────────────────\n\nexport function registerShareRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  const { service } = deps;\n  const store = getShareStore(resolveShareConfig(service));\n\n  /** Create a share. */\n  authenticated.post('/api/shares', async (c) => {\n    const gatewayToken = extractToken({ authorization: c.req.header('authorization') ?? undefined });\n    if (!gatewayToken) return c.json({ ok: false, error: { message: 'Token required' } }, 401);\n\n    let body: Record<string, unknown>;\n    try {\n      body = (await c.req.json()) as Record<string, unknown>;\n    } catch {\n      return c.json({ ok: false, error: { message: 'Invalid JSON' } }, 400);\n    }\n\n    const path = typeof body.path === 'string' ? body.path.trim() : '';\n    if (!path) {\n      return c.json({ ok: false, error: { message: 'Missing path' } }, 400);\n    }\n\n    const sessionKey = typeof body.sessionKey === 'string' ? body.sessionKey.trim() : undefined;\n    const agentId = typeof body.agentId === 'string' ? body.agentId.trim() : undefined;\n\n    // Resolve workspace root (same logic as workspace editor routes)\n    const workspaceRoot = await resolveWorkspaceRootForShare(service, sessionKey, agentId);\n    if (!workspaceRoot) {\n      return c.json({ ok: false, error: { message: 'Workspace not configured' } }, 400);\n    }\n\n    const ttlMs = typeof body.ttlMs === 'number' ? body.ttlMs : undefined;\n    const maxViews = body.maxViews === null ? null : typeof body.maxViews === 'number' ? body.maxViews : undefined;\n    const description = typeof body.description === 'string' ? body.description.trim() || undefined : undefined;\n\n    try {\n      store.updateConfig(resolveShareConfig(service));\n      const record = await store.create({\n        path,\n        ttlMs,\n        maxViews,\n        description,\n        sessionKey,\n        agentId,\n        workspaceRoot,\n        gatewayTokenHash: hashGatewayToken(gatewayToken),\n      });\n\n      const urlCtx = getShareUrlContext(service);\n      const resolved = resolveShareUrl(record.token, urlCtx);\n\n      return c.json({\n        ok: true,\n        payload: {\n          id: record.id,\n          token: record.token,\n          shareUrl: resolved.shareUrl,\n          lanUrl: resolved.lanUrl,\n          reachability: resolved.reachability,\n          reachabilityHint: resolved.reachabilityHint,\n          expiresAt: record.expiresAt,\n          maxViews: record.maxViews,\n          fileName: record.fileName,\n          fileSize: record.fileSize,\n        },\n      }, 201);\n    } catch (err) {\n      const message = err instanceof Error ? err.message : String(err);\n      return c.json({ ok: false, error: { message } }, 400);\n    }\n  });\n\n  /** List all shares. */\n  authenticated.get('/api/shares', async (c) => {\n    store.updateConfig(resolveShareConfig(service));\n    const shares = store.getAllShares();\n    const urlCtx = getShareUrlContext(service);\n    const now = Date.now();\n\n    const items = shares.map((r) => {\n      const resolved = resolveShareUrl(r.token, urlCtx);\n      const expired = now >= new Date(r.expiresAt).getTime();\n      return {\n        id: r.id,\n        fileName: r.fileName,\n        workspaceRelativePath: r.workspaceRelativePath,\n        shareUrl: resolved.shareUrl,\n        lanUrl: resolved.lanUrl,\n        reachability: resolved.reachability,\n        createdAt: r.createdAt,\n        expiresAt: r.expiresAt,\n        viewCount: r.viewCount,\n        maxViews: r.maxViews,\n        revoked: r.revoked,\n        expired,\n        description: r.description ?? null,\n        fileSize: r.fileSize,\n        mimeType: r.mimeType,\n      };\n    });\n\n    return c.json({ ok: true, payload: { shares: items } });\n  });\n\n  /** Get single share details. */\n  authenticated.get('/api/shares/:id', async (c) => {\n    const id = c.req.param('id');\n    const record = store.getById(id);\n    if (!record) return c.json({ ok: false, error: { message: 'Not found' } }, 404);\n\n    const urlCtx = getShareUrlContext(service);\n    const resolved = resolveShareUrl(record.token, urlCtx);\n    const expired = Date.now() >= new Date(record.expiresAt).getTime();\n\n    return c.json({\n      ok: true,\n      payload: {\n        ...record,\n        token: undefined,\n        shareUrl: resolved.shareUrl,\n        lanUrl: resolved.lanUrl,\n        reachability: resolved.reachability,\n        expired,\n      },\n    });\n  });\n\n  /** Revoke a share. */\n  authenticated.delete('/api/shares/:id', async (c) => {\n    const id = c.req.param('id');\n    const success = store.revoke(id);\n    if (!success) return c.json({ ok: false, error: { message: 'Not found' } }, 404);\n    return c.json({ ok: true });\n  });\n\n  /** Batch revoke. */\n  authenticated.delete('/api/shares', async (c) => {\n    let body: Record<string, unknown> = {};\n    try {\n      body = (await c.req.json()) as Record<string, unknown>;\n    } catch {\n      /* empty body = no-op */\n    }\n\n    if (body.expired === true) {\n      const count = store.revokeExpired();\n      return c.json({ ok: true, payload: { revokedCount: count } });\n    }\n\n    const ids = Array.isArray(body.ids) ? (body.ids as string[]).filter((x) => typeof x === 'string') : [];\n    if (ids.length === 0) {\n      return c.json({ ok: false, error: { message: 'Provide ids array or expired: true' } }, 400);\n    }\n    const count = store.revokeMany(ids);\n    return c.json({ ok: true, payload: { revokedCount: count } });\n  });\n\n  /** Update a share (extend TTL or change maxViews). */\n  authenticated.patch('/api/shares/:id', async (c) => {\n    const id = c.req.param('id');\n    let body: Record<string, unknown>;\n    try {\n      body = (await c.req.json()) as Record<string, unknown>;\n    } catch {\n      return c.json({ ok: false, error: { message: 'Invalid JSON' } }, 400);\n    }\n\n    const patch: { extendTtlMs?: number; maxViews?: number | null } = {};\n    if (typeof body.extendTtlMs === 'number') patch.extendTtlMs = body.extendTtlMs;\n    if (body.maxViews === null || typeof body.maxViews === 'number') patch.maxViews = body.maxViews as number | null;\n\n    const updated = store.update(id, patch);\n    if (!updated) return c.json({ ok: false, error: { message: 'Not found' } }, 404);\n\n    const urlCtx = getShareUrlContext(service);\n    const resolved = resolveShareUrl(updated.token, urlCtx);\n\n    return c.json({\n      ok: true,\n      payload: {\n        id: updated.id,\n        expiresAt: updated.expiresAt,\n        maxViews: updated.maxViews,\n        shareUrl: resolved.shareUrl,\n      },\n    });\n  });\n}\n\n// ── Helpers ───────────────────────────────────────────────────────────────────\n\nasync function resolveWorkspaceRootForShare(\n  service: GatewayService,\n  sessionKey: string | undefined,\n  agentId: string | undefined,\n): Promise<string | null> {\n  const cfg = service.currentConfig;\n\n  if (sessionKey) {\n    try {\n      return await service.getEffectiveWorkspacePathForSession(sessionKey);\n    } catch {\n      /* fall through to agentId */\n    }\n  }\n\n  // Import dynamically to avoid circular dependency at module load time\n  const { getWorkspacePath } = await import('../../../config/schema.js');\n  const { resolveAgentWorkspaceDir, normalizeAgentId, resolveDefaultAgentId } = await import(\n    '../../../agent/agent-scope.js'\n  );\n\n  if (agentId) {\n    const normalized = normalizeAgentId(agentId);\n    return resolveAgentWorkspaceDir(cfg, normalized);\n  }\n\n  const root = getWorkspacePath(cfg);\n  if (root) return root;\n\n  const defaultId = resolveDefaultAgentId(cfg);\n  return resolveAgentWorkspaceDir(cfg, defaultId);\n}\n\nasync function handleDownload(\n  c: { header: (n: string, v: string) => void; body: (b: unknown, s?: number) => Response },\n  store: ReturnType<typeof getShareStore>,\n  record: ReturnType<ReturnType<typeof getShareStore>['getByToken']> & {},\n  clientIp: string,\n  inline = false,\n): Promise<Response> {\n  // Concurrency check\n  if (!acquireDownloadSlot(record.token)) {\n    return c.body('Too many concurrent downloads for this share', 429) as unknown as Response;\n  }\n\n  try {\n    // File integrity check (inode + path)\n    const integrity = await store.validateFileIntegrity(record);\n    if (!integrity.valid) {\n      logShareAudit(\n        'share.access_denied',\n        { shareId: record.id, tokenPrefix: record.token.slice(0, 8), reason: integrity.reason, clientIp },\n        `Share file integrity check failed: ${integrity.reason}`,\n      );\n      const { renderShareExpiredPage: render } = await import('../../../share/share-landing.js');\n      return new Response(render(integrity.reason as ShareExpiredReason), {\n        status: 410,\n        headers: { 'Content-Type': 'text/html; charset=utf-8' },\n      });\n    }\n\n    // Consume viewCount\n    store.incrementViewCount(record.id);\n\n    logShareAudit(\n      'share.access',\n      { shareId: record.id, tokenPrefix: record.token.slice(0, 8), clientIp, viewCount: record.viewCount },\n      `Share downloaded: ${record.fileName}`,\n    );\n\n    // Stream file\n    const fileStat = await stat(record.absolutePath);\n    const stream = createReadStream(record.absolutePath);\n    const webStream = Readable.toWeb(stream) as ReadableStream;\n\n    const disposition = inline ? `inline; filename=\"${encodeURIComponent(record.fileName)}\"` : `attachment; filename=\"${encodeURIComponent(record.fileName)}\"`;\n\n    return new Response(webStream, {\n      status: 200,\n      headers: {\n        'Content-Type': record.mimeType,\n        'Content-Disposition': disposition,\n        'Content-Length': String(fileStat.size),\n        'Cache-Control': 'private, no-store',\n        'X-Content-Type-Options': 'nosniff',\n        'X-Frame-Options': 'DENY',\n        'Referrer-Policy': 'no-referrer',\n      },\n    });\n  } finally {\n    releaseDownloadSlot(record.token);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;AAoBA,SAAS,mBAAmB,SAAyB;CACnD,MAAM,UAAU,QAAQ,cAAc;AACtC,QAAO;EACL,aAAa,4BAA4B,QAAQ,cAAc;EAC/D,aAAa,QAAQ,QAAQ;EAC9B;;AAGH,SAAS,mBAAmB,SAA+C;CACzE,MAAM,MAAO,QAAQ,cAAc,SAAqC;AACxE,KAAI,CAAC,OAAO,OAAO,QAAQ,SAAU,QAAO,EAAE;AAC9C,QAAO;;AAGT,SAAS,iBAAiB,OAAuB;AAC/C,QAAO,WAAW,SAAS,CAAC,OAAO,OAAO,OAAO,CAAC,OAAO,MAAM,CAAC,MAAM,GAAG,GAAG;;AAG9E,MAAM,qCAAqC;AAC3C,MAAM,kCAAkB,IAAI,KAAqB;AAEjD,SAAS,oBAAoB,OAAwB;CACnD,MAAM,UAAU,gBAAgB,IAAI,MAAM,IAAI;AAC9C,KAAI,WAAW,mCAAoC,QAAO;AAC1D,iBAAgB,IAAI,OAAO,UAAU,EAAE;AACvC,QAAO;;AAGT,SAAS,oBAAoB,OAAqB;CAChD,MAAM,UAAU,gBAAgB,IAAI,MAAM,IAAI;AAC9C,KAAI,WAAW,EACb,iBAAgB,OAAO,MAAM;KAE7B,iBAAgB,IAAI,OAAO,UAAU,EAAE;;AAM3C,SAAgB,0BAA0B,KAAW,SAA+B;CAClF,MAAM,QAAQ,cAAc,mBAAmB,QAAQ,CAAC;;AAGxD,KAAI,IAAI,aAAa,OAAO,MAAM;EAChC,MAAM,WAAW,uBAAuB,EAAE,MAAM,MAAc,EAAE,IAAI,OAAO,EAAE,IAAI,KAAA,GAAW,CAAC;EAC7F,MAAM,aAAa,wBAAwB,SAAS;AACpD,MAAI,CAAC,WAAW,SAAS;AACvB,KAAE,OAAO,eAAe,OAAO,KAAK,KAAK,WAAW,eAAe,IAAK,CAAC,CAAC;AAC1E,UAAO,EAAE,KAAK,qBAAqB,IAAI;;EAGzC,MAAM,QAAQ,EAAE,IAAI,MAAM,QAAQ;EAClC,MAAM,SAAS,MAAM,WAAW,MAAM;AAEtC,MAAI,CAAC,OACH,QAAO,EAAE,KAAK,uBAAuB,YAAY,EAAE,IAAI;EAGzD,MAAM,aAAa,MAAM,eAAe,OAAO;AAC/C,MAAI,CAAC,WAAW,OAAO;AACrB,iBACE,uBACA;IAAE,SAAS,OAAO;IAAI,aAAa,MAAM,MAAM,GAAG,EAAE;IAAE,QAAQ,WAAW;IAAQ;IAAU,EAC3F,wBAAwB,WAAW,SACpC;AACD,UAAO,EAAE,KAAK,uBAAuB,WAAW,OAA6B,EAAE,IAAI;;AAIrF,MAAI,EAAE,IAAI,MAAM,KAAK,KAAK,IACxB,QAAO,eAAe,GAAG,OAAO,QAAQ,SAAS;AAInD,MAAI,EAAE,IAAI,MAAM,SAAS,KAAK;OAExB;IADU,GAAG;IAAuB,GAAG,mBAAmB,QAAQ;IAC/D,CAAC,mBAAmB,SAAS,OAAO,SAAS,CAClD,QAAO,eAAe,GAAG,OAAO,QAAQ,UAAU,KAAK;;EAI3D,MAAM,eAAe,MAAM,MAAM;AACjC,SAAO,EAAE,KAAK,uBAAuB,QAAQ,aAAa,CAAC;GAC3D;;AAGF,KAAI,KAAK,sBAAsB,OAAO,MAAM;EAC1C,MAAM,WAAW,uBAAuB,EAAE,MAAM,MAAc,EAAE,IAAI,OAAO,EAAE,IAAI,KAAA,GAAW,CAAC;EAC7F,MAAM,aAAa,wBAAwB,SAAS;AACpD,MAAI,CAAC,WAAW,SAAS;AACvB,KAAE,OAAO,eAAe,OAAO,KAAK,KAAK,WAAW,eAAe,IAAK,CAAC,CAAC;AAC1E,UAAO,EAAE,KAAK,qBAAqB,IAAI;;EAGzC,MAAM,QAAQ,EAAE,IAAI,MAAM,QAAQ;EAClC,MAAM,SAAS,MAAM,WAAW,MAAM;AAEtC,MAAI,CAAC,OACH,QAAO,EAAE,KAAK,uBAAuB,YAAY,EAAE,IAAI;EAGzD,MAAM,aAAa,MAAM,eAAe,OAAO;AAC/C,MAAI,CAAC,WAAW,OAAO;AACrB,iBACE,uBACA;IAAE,SAAS,OAAO;IAAI,aAAa,MAAM,MAAM,GAAG,EAAE;IAAE,QAAQ,WAAW;IAAQ;IAAU,EAC3F,0BAA0B,WAAW,SACtC;AACD,UAAO,EAAE,KAAK,uBAAuB,WAAW,OAA6B,EAAE,IAAI;;AAGrF,SAAO,eAAe,GAAG,OAAO,QAAQ,SAAS;GACjD;;AAGF,KAAI,IAAI,kBAAkB,OAAO,MAAM;EAErC,MAAM,aAAa,wBADF,uBAAuB,EAAE,MAAM,MAAc,EAAE,IAAI,OAAO,EAAE,IAAI,KAAA,GAAW,CACzC,CAAC;AACpD,MAAI,CAAC,WAAW,SAAS;AACvB,KAAE,OAAO,eAAe,OAAO,KAAK,KAAK,WAAW,eAAe,IAAK,CAAC,CAAC;AAC1E,UAAO,EAAE,KAAK,qBAAqB,IAAI;;EAGzC,MAAM,QAAQ,EAAE,IAAI,MAAM,QAAQ;EAClC,MAAM,SAAS,MAAM,WAAW,MAAM;AACtC,MAAI,CAAC,OACH,QAAO,EAAE,KAAK,EAAE,OAAO,OAAO,EAAE,IAAI;EAGtC,MAAM,aAAa,MAAM,eAAe,OAAO;EAC/C,MAAM,iBAAiB,OAAO,aAAa,OAAO,KAAK,IAAI,GAAG,OAAO,WAAW,OAAO,UAAU,GAAG;AAEpG,SAAO,EAAE,KAAK;GACZ,UAAU,OAAO;GACjB,UAAU,OAAO;GACjB,UAAU,OAAO;GACjB,aAAa,OAAO,eAAe;GACnC,WAAW,OAAO;GAClB;GACA,OAAO,WAAW;GACnB,CAAC;GACF;;AAGF,KAAI,GAAG,QAAQ,aAAa,OAAO,MAAM;EACvC,MAAM,QAAQ,EAAE,IAAI,MAAM,QAAQ;EAClC,MAAM,SAAS,MAAM,WAAW,MAAM;AACtC,MAAI,CAAC,OAAQ,QAAO,EAAE,KAAK,MAAM,IAAI;EACrC,MAAM,aAAa,MAAM,eAAe,OAAO;AAC/C,SAAO,EAAE,KAAK,MAAM,WAAW,QAAQ,MAAM,IAAI;GACjD;;AAKJ,SAAgB,oBAAoB,eAAqB,MAAoC;CAC3F,MAAM,EAAE,YAAY;CACpB,MAAM,QAAQ,cAAc,mBAAmB,QAAQ,CAAC;;AAGxD,eAAc,KAAK,eAAe,OAAO,MAAM;EAC7C,MAAM,eAAe,aAAa,EAAE,eAAe,EAAE,IAAI,OAAO,gBAAgB,IAAI,KAAA,GAAW,CAAC;AAChG,MAAI,CAAC,aAAc,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,kBAAkB;GAAE,EAAE,IAAI;EAE1F,IAAI;AACJ,MAAI;AACF,UAAQ,MAAM,EAAE,IAAI,MAAM;UACpB;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS,gBAAgB;IAAE,EAAE,IAAI;;EAGvE,MAAM,OAAO,OAAO,KAAK,SAAS,WAAW,KAAK,KAAK,MAAM,GAAG;AAChE,MAAI,CAAC,KACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,gBAAgB;GAAE,EAAE,IAAI;EAGvE,MAAM,aAAa,OAAO,KAAK,eAAe,WAAW,KAAK,WAAW,MAAM,GAAG,KAAA;EAClF,MAAM,UAAU,OAAO,KAAK,YAAY,WAAW,KAAK,QAAQ,MAAM,GAAG,KAAA;EAGzE,MAAM,gBAAgB,MAAM,6BAA6B,SAAS,YAAY,QAAQ;AACtF,MAAI,CAAC,cACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,4BAA4B;GAAE,EAAE,IAAI;EAGnF,MAAM,QAAQ,OAAO,KAAK,UAAU,WAAW,KAAK,QAAQ,KAAA;EAC5D,MAAM,WAAW,KAAK,aAAa,OAAO,OAAO,OAAO,KAAK,aAAa,WAAW,KAAK,WAAW,KAAA;EACrG,MAAM,cAAc,OAAO,KAAK,gBAAgB,WAAW,KAAK,YAAY,MAAM,IAAI,KAAA,IAAY,KAAA;AAElG,MAAI;AACF,SAAM,aAAa,mBAAmB,QAAQ,CAAC;GAC/C,MAAM,SAAS,MAAM,MAAM,OAAO;IAChC;IACA;IACA;IACA;IACA;IACA;IACA;IACA,kBAAkB,iBAAiB,aAAa;IACjD,CAAC;GAEF,MAAM,SAAS,mBAAmB,QAAQ;GAC1C,MAAM,WAAW,gBAAgB,OAAO,OAAO,OAAO;AAEtD,UAAO,EAAE,KAAK;IACZ,IAAI;IACJ,SAAS;KACP,IAAI,OAAO;KACX,OAAO,OAAO;KACd,UAAU,SAAS;KACnB,QAAQ,SAAS;KACjB,cAAc,SAAS;KACvB,kBAAkB,SAAS;KAC3B,WAAW,OAAO;KAClB,UAAU,OAAO;KACjB,UAAU,OAAO;KACjB,UAAU,OAAO;KAClB;IACF,EAAE,IAAI;WACA,KAAK;GACZ,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAChE,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS;IAAE,EAAE,IAAI;;GAEvD;;AAGF,eAAc,IAAI,eAAe,OAAO,MAAM;AAC5C,QAAM,aAAa,mBAAmB,QAAQ,CAAC;EAC/C,MAAM,SAAS,MAAM,cAAc;EACnC,MAAM,SAAS,mBAAmB,QAAQ;EAC1C,MAAM,MAAM,KAAK,KAAK;EAEtB,MAAM,QAAQ,OAAO,KAAK,MAAM;GAC9B,MAAM,WAAW,gBAAgB,EAAE,OAAO,OAAO;GACjD,MAAM,UAAU,OAAO,IAAI,KAAK,EAAE,UAAU,CAAC,SAAS;AACtD,UAAO;IACL,IAAI,EAAE;IACN,UAAU,EAAE;IACZ,uBAAuB,EAAE;IACzB,UAAU,SAAS;IACnB,QAAQ,SAAS;IACjB,cAAc,SAAS;IACvB,WAAW,EAAE;IACb,WAAW,EAAE;IACb,WAAW,EAAE;IACb,UAAU,EAAE;IACZ,SAAS,EAAE;IACX;IACA,aAAa,EAAE,eAAe;IAC9B,UAAU,EAAE;IACZ,UAAU,EAAE;IACb;IACD;AAEF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,QAAQ,OAAO;GAAE,CAAC;GACvD;;AAGF,eAAc,IAAI,mBAAmB,OAAO,MAAM;EAChD,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK;EAC5B,MAAM,SAAS,MAAM,QAAQ,GAAG;AAChC,MAAI,CAAC,OAAQ,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,aAAa;GAAE,EAAE,IAAI;EAE/E,MAAM,SAAS,mBAAmB,QAAQ;EAC1C,MAAM,WAAW,gBAAgB,OAAO,OAAO,OAAO;EACtD,MAAM,UAAU,KAAK,KAAK,IAAI,IAAI,KAAK,OAAO,UAAU,CAAC,SAAS;AAElE,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,GAAG;IACH,OAAO,KAAA;IACP,UAAU,SAAS;IACnB,QAAQ,SAAS;IACjB,cAAc,SAAS;IACvB;IACD;GACF,CAAC;GACF;;AAGF,eAAc,OAAO,mBAAmB,OAAO,MAAM;EACnD,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK;AAE5B,MAAI,CADY,MAAM,OAAO,GACjB,CAAE,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,aAAa;GAAE,EAAE,IAAI;AAChF,SAAO,EAAE,KAAK,EAAE,IAAI,MAAM,CAAC;GAC3B;;AAGF,eAAc,OAAO,eAAe,OAAO,MAAM;EAC/C,IAAI,OAAgC,EAAE;AACtC,MAAI;AACF,UAAQ,MAAM,EAAE,IAAI,MAAM;UACpB;AAIR,MAAI,KAAK,YAAY,MAAM;GACzB,MAAM,QAAQ,MAAM,eAAe;AACnC,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,cAAc,OAAO;IAAE,CAAC;;EAG/D,MAAM,MAAM,MAAM,QAAQ,KAAK,IAAI,GAAI,KAAK,IAAiB,QAAQ,MAAM,OAAO,MAAM,SAAS,GAAG,EAAE;AACtG,MAAI,IAAI,WAAW,EACjB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,sCAAsC;GAAE,EAAE,IAAI;EAE7F,MAAM,QAAQ,MAAM,WAAW,IAAI;AACnC,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,cAAc,OAAO;GAAE,CAAC;GAC7D;;AAGF,eAAc,MAAM,mBAAmB,OAAO,MAAM;EAClD,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK;EAC5B,IAAI;AACJ,MAAI;AACF,UAAQ,MAAM,EAAE,IAAI,MAAM;UACpB;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS,gBAAgB;IAAE,EAAE,IAAI;;EAGvE,MAAM,QAA4D,EAAE;AACpE,MAAI,OAAO,KAAK,gBAAgB,SAAU,OAAM,cAAc,KAAK;AACnE,MAAI,KAAK,aAAa,QAAQ,OAAO,KAAK,aAAa,SAAU,OAAM,WAAW,KAAK;EAEvF,MAAM,UAAU,MAAM,OAAO,IAAI,MAAM;AACvC,MAAI,CAAC,QAAS,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,aAAa;GAAE,EAAE,IAAI;EAEhF,MAAM,SAAS,mBAAmB,QAAQ;EAC1C,MAAM,WAAW,gBAAgB,QAAQ,OAAO,OAAO;AAEvD,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,IAAI,QAAQ;IACZ,WAAW,QAAQ;IACnB,UAAU,QAAQ;IAClB,UAAU,SAAS;IACpB;GACF,CAAC;GACF;;AAKJ,eAAe,6BACb,SACA,YACA,SACwB;CACxB,MAAM,MAAM,QAAQ;AAEpB,KAAI,WACF,KAAI;AACF,SAAO,MAAM,QAAQ,oCAAoC,WAAW;SAC9D;CAMV,MAAM,EAAE,qBAAqB,MAAM,OAAO;CAC1C,MAAM,EAAE,0BAA0B,kBAAkB,0BAA0B,MAAM,OAClF;AAGF,KAAI,QAEF,QAAO,yBAAyB,KADb,iBAAiB,QACW,CAAC;CAGlD,MAAM,OAAO,iBAAiB,IAAI;AAClC,KAAI,KAAM,QAAO;AAGjB,QAAO,yBAAyB,KADd,sBAAsB,IACM,CAAC;;AAGjD,eAAe,eACb,GACA,OACA,QACA,UACA,SAAS,OACU;AAEnB,KAAI,CAAC,oBAAoB,OAAO,MAAM,CACpC,QAAO,EAAE,KAAK,gDAAgD,IAAI;AAGpE,KAAI;EAEF,MAAM,YAAY,MAAM,MAAM,sBAAsB,OAAO;AAC3D,MAAI,CAAC,UAAU,OAAO;AACpB,iBACE,uBACA;IAAE,SAAS,OAAO;IAAI,aAAa,OAAO,MAAM,MAAM,GAAG,EAAE;IAAE,QAAQ,UAAU;IAAQ;IAAU,EACjG,sCAAsC,UAAU,SACjD;GACD,MAAM,EAAE,wBAAwB,WAAW,MAAM,OAAO;AACxD,UAAO,IAAI,SAAS,OAAO,UAAU,OAA6B,EAAE;IAClE,QAAQ;IACR,SAAS,EAAE,gBAAgB,4BAA4B;IACxD,CAAC;;AAIJ,QAAM,mBAAmB,OAAO,GAAG;AAEnC,gBACE,gBACA;GAAE,SAAS,OAAO;GAAI,aAAa,OAAO,MAAM,MAAM,GAAG,EAAE;GAAE;GAAU,WAAW,OAAO;GAAW,EACpG,qBAAqB,OAAO,WAC7B;EAGD,MAAM,WAAW,MAAM,KAAK,OAAO,aAAa;EAChD,MAAM,SAAS,iBAAiB,OAAO,aAAa;EACpD,MAAM,YAAY,SAAS,MAAM,OAAO;EAExC,MAAM,cAAc,SAAS,qBAAqB,mBAAmB,OAAO,SAAS,CAAC,KAAK,yBAAyB,mBAAmB,OAAO,SAAS,CAAC;AAExJ,SAAO,IAAI,SAAS,WAAW;GAC7B,QAAQ;GACR,SAAS;IACP,gBAAgB,OAAO;IACvB,uBAAuB;IACvB,kBAAkB,OAAO,SAAS,KAAK;IACvC,iBAAiB;IACjB,0BAA0B;IAC1B,mBAAmB;IACnB,mBAAmB;IACpB;GACF,CAAC;WACM;AACR,sBAAoB,OAAO,MAAM"}
+{"version":3,"file":"shares.js","names":[],"sources":["../../../../../src/gateway/hono/routes/shares.ts"],"sourcesContent":["import type { Hono } from 'hono';\nimport { createReadStream } from 'node:fs';\nimport { stat } from 'node:fs/promises';\nimport { createHash } from 'node:crypto';\nimport { Readable } from 'node:stream';\n\nimport { extractToken } from '../../auth.js';\nimport { getClientIpFromHeaders } from '../../security/loopback.js';\nimport { getShareStore } from '../../../share/share-store.js';\nimport { resolveShareUrl } from '../../../share/share-url.js';\nimport { consumeSharePublicLimit } from '../../../share/share-rate-limit.js';\nimport { logShareAudit } from '../../../share/share-audit.js';\nimport { renderShareLandingPage, renderShareExpiredPage } from '../../../share/share-landing.js';\nimport type { ShareExpiredReason } from '../../../share/share-landing.js';\nimport type { ShareConfig } from '../../../share/share-types.js';\nimport { resolveGatewayEffectiveHost } from '../../../config/gateway-bind.js';\nimport { SHARE_CONFIG_DEFAULTS } from '../../../share/share-types.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\nimport type { GatewayService } from '../../service.js';\n\nfunction getShareUrlContext(service: GatewayService) {\n  const gateway = service.currentConfig.gateway;\n  return {\n    gatewayHost: resolveGatewayEffectiveHost(service.currentConfig),\n    gatewayPort: gateway.port ?? 18790,\n  };\n}\n\nfunction resolveShareConfig(service: GatewayService): Partial<ShareConfig> {\n  const raw = (service.currentConfig.gateway as Record<string, unknown>)?.share;\n  if (!raw || typeof raw !== 'object') return {};\n  return raw as Partial<ShareConfig>;\n}\n\nfunction hashGatewayToken(token: string): string {\n  return createHash('sha256').update(token, 'utf8').digest('hex').slice(0, 12);\n}\n\nconst MAX_CONCURRENT_DOWNLOADS_PER_TOKEN = 5;\nconst activeDownloads = new Map<string, number>();\n\nfunction acquireDownloadSlot(token: string): boolean {\n  const current = activeDownloads.get(token) ?? 0;\n  if (current >= MAX_CONCURRENT_DOWNLOADS_PER_TOKEN) return false;\n  activeDownloads.set(token, current + 1);\n  return true;\n}\n\nfunction releaseDownloadSlot(token: string): void {\n  const current = activeDownloads.get(token) ?? 0;\n  if (current <= 1) {\n    activeDownloads.delete(token);\n  } else {\n    activeDownloads.set(token, current - 1);\n  }\n}\n\n// ── Public routes (no auth required) ──────────────────────────────────────────\n\nexport function registerSharePublicRoutes(app: Hono, service: GatewayService): void {\n  const store = getShareStore(resolveShareConfig(service));\n\n  /** Landing page — does NOT consume viewCount (prevents link unfurl from wasting views). */\n  app.get('/s/:token', async (c) => {\n    const clientIp = getClientIpFromHeaders({ get: (n: string) => c.req.header(n) ?? undefined });\n    const rateResult = consumeSharePublicLimit(clientIp);\n    if (!rateResult.allowed) {\n      c.header('Retry-After', String(Math.ceil(rateResult.retryAfterMs / 1000)));\n      return c.text('Too many requests', 429);\n    }\n\n    const token = c.req.param('token');\n    const record = store.getByToken(token);\n\n    if (!record) {\n      return c.html(renderShareExpiredPage('not_found'), 404);\n    }\n\n    const validation = store.validateAccess(record);\n    if (!validation.valid) {\n      logShareAudit(\n        'share.access_denied',\n        { shareId: record.id, tokenPrefix: token.slice(0, 8), reason: validation.reason, clientIp },\n        `Share access denied: ${validation.reason}`,\n      );\n      return c.html(renderShareExpiredPage(validation.reason as ShareExpiredReason), 410);\n    }\n\n    // Direct download shortcut: ?dl=1\n    if (c.req.query('dl') === '1') {\n      return handleDownload(c, store, record, clientIp);\n    }\n\n    // Inline preview for whitelisted MIME types: ?inline=1\n    if (c.req.query('inline') === '1') {\n      const cfg = { ...SHARE_CONFIG_DEFAULTS, ...resolveShareConfig(service) };\n      if (cfg.inlinePreviewMimes.includes(record.mimeType)) {\n        return handleDownload(c, store, record, clientIp, true);\n      }\n    }\n\n    const downloadPath = `/s/${token}/download`;\n    return c.html(renderShareLandingPage(record, downloadPath));\n  });\n\n  /** Actual file download — consumes viewCount. */\n  app.post('/s/:token/download', async (c) => {\n    const clientIp = getClientIpFromHeaders({ get: (n: string) => c.req.header(n) ?? undefined });\n    const rateResult = consumeSharePublicLimit(clientIp);\n    if (!rateResult.allowed) {\n      c.header('Retry-After', String(Math.ceil(rateResult.retryAfterMs / 1000)));\n      return c.text('Too many requests', 429);\n    }\n\n    const token = c.req.param('token');\n    const record = store.getByToken(token);\n\n    if (!record) {\n      return c.html(renderShareExpiredPage('not_found'), 404);\n    }\n\n    const validation = store.validateAccess(record);\n    if (!validation.valid) {\n      logShareAudit(\n        'share.access_denied',\n        { shareId: record.id, tokenPrefix: token.slice(0, 8), reason: validation.reason, clientIp },\n        `Share download denied: ${validation.reason}`,\n      );\n      return c.html(renderShareExpiredPage(validation.reason as ShareExpiredReason), 410);\n    }\n\n    return handleDownload(c, store, record, clientIp);\n  });\n\n  /** File metadata (for link preview cards). */\n  app.get('/s/:token/meta', async (c) => {\n    const clientIp = getClientIpFromHeaders({ get: (n: string) => c.req.header(n) ?? undefined });\n    const rateResult = consumeSharePublicLimit(clientIp);\n    if (!rateResult.allowed) {\n      c.header('Retry-After', String(Math.ceil(rateResult.retryAfterMs / 1000)));\n      return c.text('Too many requests', 429);\n    }\n\n    const token = c.req.param('token');\n    const record = store.getByToken(token);\n    if (!record) {\n      return c.json({ valid: false }, 404);\n    }\n\n    const validation = store.validateAccess(record);\n    const remainingViews = record.maxViews !== null ? Math.max(0, record.maxViews - record.viewCount) : null;\n\n    return c.json({\n      fileName: record.fileName,\n      fileSize: record.fileSize,\n      mimeType: record.mimeType,\n      description: record.description ?? null,\n      expiresAt: record.expiresAt,\n      remainingViews,\n      valid: validation.valid,\n    });\n  });\n\n  /** HEAD check (Hono uses .on() for HEAD method). */\n  app.on('HEAD', '/s/:token', async (c) => {\n    const token = c.req.param('token');\n    const record = store.getByToken(token);\n    if (!record) return c.body(null, 404);\n    const validation = store.validateAccess(record);\n    return c.body(null, validation.valid ? 200 : 410);\n  });\n}\n\n// ── Authenticated routes ──────────────────────────────────────────────────────\n\nexport function registerShareRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  const { service } = deps;\n  const store = getShareStore(resolveShareConfig(service));\n\n  /** Create a share. */\n  authenticated.post('/api/shares', async (c) => {\n    const gatewayToken = extractToken({ authorization: c.req.header('authorization') ?? undefined });\n    if (!gatewayToken) return c.json({ ok: false, error: { message: 'Token required' } }, 401);\n\n    let body: Record<string, unknown>;\n    try {\n      body = (await c.req.json()) as Record<string, unknown>;\n    } catch {\n      return c.json({ ok: false, error: { message: 'Invalid JSON' } }, 400);\n    }\n\n    const path = typeof body.path === 'string' ? body.path.trim() : '';\n    if (!path) {\n      return c.json({ ok: false, error: { message: 'Missing path' } }, 400);\n    }\n\n    const sessionKey = typeof body.sessionKey === 'string' ? body.sessionKey.trim() : undefined;\n    const agentId = typeof body.agentId === 'string' ? body.agentId.trim() : undefined;\n\n    // Resolve workspace root (same logic as workspace editor routes)\n    const workspaceRoot = await resolveWorkspaceRootForShare(service, sessionKey, agentId);\n    if (!workspaceRoot) {\n      return c.json({ ok: false, error: { message: 'Workspace not configured' } }, 400);\n    }\n\n    const ttlMs = typeof body.ttlMs === 'number' ? body.ttlMs : undefined;\n    const maxViews = body.maxViews === null ? null : typeof body.maxViews === 'number' ? body.maxViews : undefined;\n    const description = typeof body.description === 'string' ? body.description.trim() || undefined : undefined;\n\n    try {\n      store.updateConfig(resolveShareConfig(service));\n      const record = await store.create({\n        path,\n        ttlMs,\n        maxViews,\n        description,\n        sessionKey,\n        agentId,\n        workspaceRoot,\n        gatewayTokenHash: hashGatewayToken(gatewayToken),\n      });\n\n      const urlCtx = getShareUrlContext(service);\n      const resolved = resolveShareUrl(record.token, urlCtx);\n\n      return c.json({\n        ok: true,\n        payload: {\n          id: record.id,\n          token: record.token,\n          shareUrl: resolved.shareUrl,\n          lanUrl: resolved.lanUrl,\n          reachability: resolved.reachability,\n          reachabilityHint: resolved.reachabilityHint,\n          expiresAt: record.expiresAt,\n          maxViews: record.maxViews,\n          fileName: record.fileName,\n          fileSize: record.fileSize,\n        },\n      }, 201);\n    } catch (err) {\n      const message = err instanceof Error ? err.message : String(err);\n      return c.json({ ok: false, error: { message } }, 400);\n    }\n  });\n\n  /** List all shares. */\n  authenticated.get('/api/shares', async (c) => {\n    store.updateConfig(resolveShareConfig(service));\n    const shares = store.getAllShares();\n    const urlCtx = getShareUrlContext(service);\n    const now = Date.now();\n\n    const items = shares.map((r) => {\n      const resolved = resolveShareUrl(r.token, urlCtx);\n      const expired = now >= new Date(r.expiresAt).getTime();\n      return {\n        id: r.id,\n        fileName: r.fileName,\n        workspaceRelativePath: r.workspaceRelativePath,\n        shareUrl: resolved.shareUrl,\n        lanUrl: resolved.lanUrl,\n        reachability: resolved.reachability,\n        createdAt: r.createdAt,\n        expiresAt: r.expiresAt,\n        viewCount: r.viewCount,\n        maxViews: r.maxViews,\n        revoked: r.revoked,\n        expired,\n        description: r.description ?? null,\n        fileSize: r.fileSize,\n        mimeType: r.mimeType,\n      };\n    });\n\n    return c.json({ ok: true, payload: { shares: items } });\n  });\n\n  /** Get single share details. */\n  authenticated.get('/api/shares/:id', async (c) => {\n    const id = c.req.param('id');\n    const record = store.getById(id);\n    if (!record) return c.json({ ok: false, error: { message: 'Not found' } }, 404);\n\n    const urlCtx = getShareUrlContext(service);\n    const resolved = resolveShareUrl(record.token, urlCtx);\n    const expired = Date.now() >= new Date(record.expiresAt).getTime();\n\n    return c.json({\n      ok: true,\n      payload: {\n        ...record,\n        token: undefined,\n        shareUrl: resolved.shareUrl,\n        lanUrl: resolved.lanUrl,\n        reachability: resolved.reachability,\n        expired,\n      },\n    });\n  });\n\n  /** Revoke a share. */\n  authenticated.delete('/api/shares/:id', async (c) => {\n    const id = c.req.param('id');\n    const success = store.revoke(id);\n    if (!success) return c.json({ ok: false, error: { message: 'Not found' } }, 404);\n    return c.json({ ok: true });\n  });\n\n  /** Batch revoke. */\n  authenticated.delete('/api/shares', async (c) => {\n    let body: Record<string, unknown> = {};\n    try {\n      body = (await c.req.json()) as Record<string, unknown>;\n    } catch {\n      /* empty body = no-op */\n    }\n\n    if (body.expired === true) {\n      const count = store.revokeExpired();\n      return c.json({ ok: true, payload: { revokedCount: count } });\n    }\n\n    const ids = Array.isArray(body.ids) ? (body.ids as string[]).filter((x) => typeof x === 'string') : [];\n    if (ids.length === 0) {\n      return c.json({ ok: false, error: { message: 'Provide ids array or expired: true' } }, 400);\n    }\n    const count = store.revokeMany(ids);\n    return c.json({ ok: true, payload: { revokedCount: count } });\n  });\n\n  /** Update a share (extend TTL or change maxViews). */\n  authenticated.patch('/api/shares/:id', async (c) => {\n    const id = c.req.param('id');\n    let body: Record<string, unknown>;\n    try {\n      body = (await c.req.json()) as Record<string, unknown>;\n    } catch {\n      return c.json({ ok: false, error: { message: 'Invalid JSON' } }, 400);\n    }\n\n    const patch: { extendTtlMs?: number; maxViews?: number | null } = {};\n    if (typeof body.extendTtlMs === 'number') patch.extendTtlMs = body.extendTtlMs;\n    if (body.maxViews === null || typeof body.maxViews === 'number') patch.maxViews = body.maxViews as number | null;\n\n    const updated = store.update(id, patch);\n    if (!updated) return c.json({ ok: false, error: { message: 'Not found' } }, 404);\n\n    const urlCtx = getShareUrlContext(service);\n    const resolved = resolveShareUrl(updated.token, urlCtx);\n\n    return c.json({\n      ok: true,\n      payload: {\n        id: updated.id,\n        expiresAt: updated.expiresAt,\n        maxViews: updated.maxViews,\n        shareUrl: resolved.shareUrl,\n      },\n    });\n  });\n}\n\n// ── Helpers ───────────────────────────────────────────────────────────────────\n\nasync function resolveWorkspaceRootForShare(\n  service: GatewayService,\n  sessionKey: string | undefined,\n  agentId: string | undefined,\n): Promise<string | null> {\n  const cfg = service.currentConfig;\n\n  if (sessionKey) {\n    try {\n      return await service.sessions.getEffectiveWorkspacePath(sessionKey);\n    } catch {\n      /* fall through to agentId */\n    }\n  }\n\n  // Import dynamically to avoid circular dependency at module load time\n  const { getWorkspacePath } = await import('../../../config/workspace-path-helpers.js');\n  const { resolveAgentWorkspaceDir, normalizeAgentId, resolveDefaultAgentId } = await import(\n    '../../../agent/agent-scope.js'\n  );\n\n  if (agentId) {\n    const normalized = normalizeAgentId(agentId);\n    return resolveAgentWorkspaceDir(cfg, normalized);\n  }\n\n  const root = getWorkspacePath(cfg);\n  if (root) return root;\n\n  const defaultId = resolveDefaultAgentId(cfg);\n  return resolveAgentWorkspaceDir(cfg, defaultId);\n}\n\nasync function handleDownload(\n  c: { header: (n: string, v: string) => void; body: (b: unknown, s?: number) => Response },\n  store: ReturnType<typeof getShareStore>,\n  record: ReturnType<ReturnType<typeof getShareStore>['getByToken']> & {},\n  clientIp: string,\n  inline = false,\n): Promise<Response> {\n  // Concurrency check\n  if (!acquireDownloadSlot(record.token)) {\n    return c.body('Too many concurrent downloads for this share', 429) as unknown as Response;\n  }\n\n  try {\n    // File integrity check (inode + path)\n    const integrity = await store.validateFileIntegrity(record);\n    if (!integrity.valid) {\n      logShareAudit(\n        'share.access_denied',\n        { shareId: record.id, tokenPrefix: record.token.slice(0, 8), reason: integrity.reason, clientIp },\n        `Share file integrity check failed: ${integrity.reason}`,\n      );\n      const { renderShareExpiredPage: render } = await import('../../../share/share-landing.js');\n      return new Response(render(integrity.reason as ShareExpiredReason), {\n        status: 410,\n        headers: { 'Content-Type': 'text/html; charset=utf-8' },\n      });\n    }\n\n    // Consume viewCount\n    store.incrementViewCount(record.id);\n\n    logShareAudit(\n      'share.access',\n      { shareId: record.id, tokenPrefix: record.token.slice(0, 8), clientIp, viewCount: record.viewCount },\n      `Share downloaded: ${record.fileName}`,\n    );\n\n    // Stream file\n    const fileStat = await stat(record.absolutePath);\n    const stream = createReadStream(record.absolutePath);\n    const webStream = Readable.toWeb(stream) as ReadableStream;\n\n    const disposition = inline ? `inline; filename=\"${encodeURIComponent(record.fileName)}\"` : `attachment; filename=\"${encodeURIComponent(record.fileName)}\"`;\n\n    return new Response(webStream, {\n      status: 200,\n      headers: {\n        'Content-Type': record.mimeType,\n        'Content-Disposition': disposition,\n        'Content-Length': String(fileStat.size),\n        'Cache-Control': 'private, no-store',\n        'X-Content-Type-Options': 'nosniff',\n        'X-Frame-Options': 'DENY',\n        'Referrer-Policy': 'no-referrer',\n      },\n    });\n  } finally {\n    releaseDownloadSlot(record.token);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;AAoBA,SAAS,mBAAmB,SAAyB;CACnD,MAAM,UAAU,QAAQ,cAAc;AACtC,QAAO;EACL,aAAa,4BAA4B,QAAQ,cAAc;EAC/D,aAAa,QAAQ,QAAQ;EAC9B;;AAGH,SAAS,mBAAmB,SAA+C;CACzE,MAAM,MAAO,QAAQ,cAAc,SAAqC;AACxE,KAAI,CAAC,OAAO,OAAO,QAAQ,SAAU,QAAO,EAAE;AAC9C,QAAO;;AAGT,SAAS,iBAAiB,OAAuB;AAC/C,QAAO,WAAW,SAAS,CAAC,OAAO,OAAO,OAAO,CAAC,OAAO,MAAM,CAAC,MAAM,GAAG,GAAG;;AAG9E,MAAM,qCAAqC;AAC3C,MAAM,kCAAkB,IAAI,KAAqB;AAEjD,SAAS,oBAAoB,OAAwB;CACnD,MAAM,UAAU,gBAAgB,IAAI,MAAM,IAAI;AAC9C,KAAI,WAAW,mCAAoC,QAAO;AAC1D,iBAAgB,IAAI,OAAO,UAAU,EAAE;AACvC,QAAO;;AAGT,SAAS,oBAAoB,OAAqB;CAChD,MAAM,UAAU,gBAAgB,IAAI,MAAM,IAAI;AAC9C,KAAI,WAAW,EACb,iBAAgB,OAAO,MAAM;KAE7B,iBAAgB,IAAI,OAAO,UAAU,EAAE;;AAM3C,SAAgB,0BAA0B,KAAW,SAA+B;CAClF,MAAM,QAAQ,cAAc,mBAAmB,QAAQ,CAAC;;AAGxD,KAAI,IAAI,aAAa,OAAO,MAAM;EAChC,MAAM,WAAW,uBAAuB,EAAE,MAAM,MAAc,EAAE,IAAI,OAAO,EAAE,IAAI,KAAA,GAAW,CAAC;EAC7F,MAAM,aAAa,wBAAwB,SAAS;AACpD,MAAI,CAAC,WAAW,SAAS;AACvB,KAAE,OAAO,eAAe,OAAO,KAAK,KAAK,WAAW,eAAe,IAAK,CAAC,CAAC;AAC1E,UAAO,EAAE,KAAK,qBAAqB,IAAI;;EAGzC,MAAM,QAAQ,EAAE,IAAI,MAAM,QAAQ;EAClC,MAAM,SAAS,MAAM,WAAW,MAAM;AAEtC,MAAI,CAAC,OACH,QAAO,EAAE,KAAK,uBAAuB,YAAY,EAAE,IAAI;EAGzD,MAAM,aAAa,MAAM,eAAe,OAAO;AAC/C,MAAI,CAAC,WAAW,OAAO;AACrB,iBACE,uBACA;IAAE,SAAS,OAAO;IAAI,aAAa,MAAM,MAAM,GAAG,EAAE;IAAE,QAAQ,WAAW;IAAQ;IAAU,EAC3F,wBAAwB,WAAW,SACpC;AACD,UAAO,EAAE,KAAK,uBAAuB,WAAW,OAA6B,EAAE,IAAI;;AAIrF,MAAI,EAAE,IAAI,MAAM,KAAK,KAAK,IACxB,QAAO,eAAe,GAAG,OAAO,QAAQ,SAAS;AAInD,MAAI,EAAE,IAAI,MAAM,SAAS,KAAK;OAExB;IADU,GAAG;IAAuB,GAAG,mBAAmB,QAAQ;IAC/D,CAAC,mBAAmB,SAAS,OAAO,SAAS,CAClD,QAAO,eAAe,GAAG,OAAO,QAAQ,UAAU,KAAK;;EAI3D,MAAM,eAAe,MAAM,MAAM;AACjC,SAAO,EAAE,KAAK,uBAAuB,QAAQ,aAAa,CAAC;GAC3D;;AAGF,KAAI,KAAK,sBAAsB,OAAO,MAAM;EAC1C,MAAM,WAAW,uBAAuB,EAAE,MAAM,MAAc,EAAE,IAAI,OAAO,EAAE,IAAI,KAAA,GAAW,CAAC;EAC7F,MAAM,aAAa,wBAAwB,SAAS;AACpD,MAAI,CAAC,WAAW,SAAS;AACvB,KAAE,OAAO,eAAe,OAAO,KAAK,KAAK,WAAW,eAAe,IAAK,CAAC,CAAC;AAC1E,UAAO,EAAE,KAAK,qBAAqB,IAAI;;EAGzC,MAAM,QAAQ,EAAE,IAAI,MAAM,QAAQ;EAClC,MAAM,SAAS,MAAM,WAAW,MAAM;AAEtC,MAAI,CAAC,OACH,QAAO,EAAE,KAAK,uBAAuB,YAAY,EAAE,IAAI;EAGzD,MAAM,aAAa,MAAM,eAAe,OAAO;AAC/C,MAAI,CAAC,WAAW,OAAO;AACrB,iBACE,uBACA;IAAE,SAAS,OAAO;IAAI,aAAa,MAAM,MAAM,GAAG,EAAE;IAAE,QAAQ,WAAW;IAAQ;IAAU,EAC3F,0BAA0B,WAAW,SACtC;AACD,UAAO,EAAE,KAAK,uBAAuB,WAAW,OAA6B,EAAE,IAAI;;AAGrF,SAAO,eAAe,GAAG,OAAO,QAAQ,SAAS;GACjD;;AAGF,KAAI,IAAI,kBAAkB,OAAO,MAAM;EAErC,MAAM,aAAa,wBADF,uBAAuB,EAAE,MAAM,MAAc,EAAE,IAAI,OAAO,EAAE,IAAI,KAAA,GAAW,CACzC,CAAC;AACpD,MAAI,CAAC,WAAW,SAAS;AACvB,KAAE,OAAO,eAAe,OAAO,KAAK,KAAK,WAAW,eAAe,IAAK,CAAC,CAAC;AAC1E,UAAO,EAAE,KAAK,qBAAqB,IAAI;;EAGzC,MAAM,QAAQ,EAAE,IAAI,MAAM,QAAQ;EAClC,MAAM,SAAS,MAAM,WAAW,MAAM;AACtC,MAAI,CAAC,OACH,QAAO,EAAE,KAAK,EAAE,OAAO,OAAO,EAAE,IAAI;EAGtC,MAAM,aAAa,MAAM,eAAe,OAAO;EAC/C,MAAM,iBAAiB,OAAO,aAAa,OAAO,KAAK,IAAI,GAAG,OAAO,WAAW,OAAO,UAAU,GAAG;AAEpG,SAAO,EAAE,KAAK;GACZ,UAAU,OAAO;GACjB,UAAU,OAAO;GACjB,UAAU,OAAO;GACjB,aAAa,OAAO,eAAe;GACnC,WAAW,OAAO;GAClB;GACA,OAAO,WAAW;GACnB,CAAC;GACF;;AAGF,KAAI,GAAG,QAAQ,aAAa,OAAO,MAAM;EACvC,MAAM,QAAQ,EAAE,IAAI,MAAM,QAAQ;EAClC,MAAM,SAAS,MAAM,WAAW,MAAM;AACtC,MAAI,CAAC,OAAQ,QAAO,EAAE,KAAK,MAAM,IAAI;EACrC,MAAM,aAAa,MAAM,eAAe,OAAO;AAC/C,SAAO,EAAE,KAAK,MAAM,WAAW,QAAQ,MAAM,IAAI;GACjD;;AAKJ,SAAgB,oBAAoB,eAAqB,MAAoC;CAC3F,MAAM,EAAE,YAAY;CACpB,MAAM,QAAQ,cAAc,mBAAmB,QAAQ,CAAC;;AAGxD,eAAc,KAAK,eAAe,OAAO,MAAM;EAC7C,MAAM,eAAe,aAAa,EAAE,eAAe,EAAE,IAAI,OAAO,gBAAgB,IAAI,KAAA,GAAW,CAAC;AAChG,MAAI,CAAC,aAAc,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,kBAAkB;GAAE,EAAE,IAAI;EAE1F,IAAI;AACJ,MAAI;AACF,UAAQ,MAAM,EAAE,IAAI,MAAM;UACpB;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS,gBAAgB;IAAE,EAAE,IAAI;;EAGvE,MAAM,OAAO,OAAO,KAAK,SAAS,WAAW,KAAK,KAAK,MAAM,GAAG;AAChE,MAAI,CAAC,KACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,gBAAgB;GAAE,EAAE,IAAI;EAGvE,MAAM,aAAa,OAAO,KAAK,eAAe,WAAW,KAAK,WAAW,MAAM,GAAG,KAAA;EAClF,MAAM,UAAU,OAAO,KAAK,YAAY,WAAW,KAAK,QAAQ,MAAM,GAAG,KAAA;EAGzE,MAAM,gBAAgB,MAAM,6BAA6B,SAAS,YAAY,QAAQ;AACtF,MAAI,CAAC,cACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,4BAA4B;GAAE,EAAE,IAAI;EAGnF,MAAM,QAAQ,OAAO,KAAK,UAAU,WAAW,KAAK,QAAQ,KAAA;EAC5D,MAAM,WAAW,KAAK,aAAa,OAAO,OAAO,OAAO,KAAK,aAAa,WAAW,KAAK,WAAW,KAAA;EACrG,MAAM,cAAc,OAAO,KAAK,gBAAgB,WAAW,KAAK,YAAY,MAAM,IAAI,KAAA,IAAY,KAAA;AAElG,MAAI;AACF,SAAM,aAAa,mBAAmB,QAAQ,CAAC;GAC/C,MAAM,SAAS,MAAM,MAAM,OAAO;IAChC;IACA;IACA;IACA;IACA;IACA;IACA;IACA,kBAAkB,iBAAiB,aAAa;IACjD,CAAC;GAEF,MAAM,SAAS,mBAAmB,QAAQ;GAC1C,MAAM,WAAW,gBAAgB,OAAO,OAAO,OAAO;AAEtD,UAAO,EAAE,KAAK;IACZ,IAAI;IACJ,SAAS;KACP,IAAI,OAAO;KACX,OAAO,OAAO;KACd,UAAU,SAAS;KACnB,QAAQ,SAAS;KACjB,cAAc,SAAS;KACvB,kBAAkB,SAAS;KAC3B,WAAW,OAAO;KAClB,UAAU,OAAO;KACjB,UAAU,OAAO;KACjB,UAAU,OAAO;KAClB;IACF,EAAE,IAAI;WACA,KAAK;GACZ,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAChE,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS;IAAE,EAAE,IAAI;;GAEvD;;AAGF,eAAc,IAAI,eAAe,OAAO,MAAM;AAC5C,QAAM,aAAa,mBAAmB,QAAQ,CAAC;EAC/C,MAAM,SAAS,MAAM,cAAc;EACnC,MAAM,SAAS,mBAAmB,QAAQ;EAC1C,MAAM,MAAM,KAAK,KAAK;EAEtB,MAAM,QAAQ,OAAO,KAAK,MAAM;GAC9B,MAAM,WAAW,gBAAgB,EAAE,OAAO,OAAO;GACjD,MAAM,UAAU,OAAO,IAAI,KAAK,EAAE,UAAU,CAAC,SAAS;AACtD,UAAO;IACL,IAAI,EAAE;IACN,UAAU,EAAE;IACZ,uBAAuB,EAAE;IACzB,UAAU,SAAS;IACnB,QAAQ,SAAS;IACjB,cAAc,SAAS;IACvB,WAAW,EAAE;IACb,WAAW,EAAE;IACb,WAAW,EAAE;IACb,UAAU,EAAE;IACZ,SAAS,EAAE;IACX;IACA,aAAa,EAAE,eAAe;IAC9B,UAAU,EAAE;IACZ,UAAU,EAAE;IACb;IACD;AAEF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,QAAQ,OAAO;GAAE,CAAC;GACvD;;AAGF,eAAc,IAAI,mBAAmB,OAAO,MAAM;EAChD,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK;EAC5B,MAAM,SAAS,MAAM,QAAQ,GAAG;AAChC,MAAI,CAAC,OAAQ,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,aAAa;GAAE,EAAE,IAAI;EAE/E,MAAM,SAAS,mBAAmB,QAAQ;EAC1C,MAAM,WAAW,gBAAgB,OAAO,OAAO,OAAO;EACtD,MAAM,UAAU,KAAK,KAAK,IAAI,IAAI,KAAK,OAAO,UAAU,CAAC,SAAS;AAElE,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,GAAG;IACH,OAAO,KAAA;IACP,UAAU,SAAS;IACnB,QAAQ,SAAS;IACjB,cAAc,SAAS;IACvB;IACD;GACF,CAAC;GACF;;AAGF,eAAc,OAAO,mBAAmB,OAAO,MAAM;EACnD,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK;AAE5B,MAAI,CADY,MAAM,OAAO,GACjB,CAAE,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,aAAa;GAAE,EAAE,IAAI;AAChF,SAAO,EAAE,KAAK,EAAE,IAAI,MAAM,CAAC;GAC3B;;AAGF,eAAc,OAAO,eAAe,OAAO,MAAM;EAC/C,IAAI,OAAgC,EAAE;AACtC,MAAI;AACF,UAAQ,MAAM,EAAE,IAAI,MAAM;UACpB;AAIR,MAAI,KAAK,YAAY,MAAM;GACzB,MAAM,QAAQ,MAAM,eAAe;AACnC,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,cAAc,OAAO;IAAE,CAAC;;EAG/D,MAAM,MAAM,MAAM,QAAQ,KAAK,IAAI,GAAI,KAAK,IAAiB,QAAQ,MAAM,OAAO,MAAM,SAAS,GAAG,EAAE;AACtG,MAAI,IAAI,WAAW,EACjB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,sCAAsC;GAAE,EAAE,IAAI;EAE7F,MAAM,QAAQ,MAAM,WAAW,IAAI;AACnC,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,cAAc,OAAO;GAAE,CAAC;GAC7D;;AAGF,eAAc,MAAM,mBAAmB,OAAO,MAAM;EAClD,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK;EAC5B,IAAI;AACJ,MAAI;AACF,UAAQ,MAAM,EAAE,IAAI,MAAM;UACpB;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS,gBAAgB;IAAE,EAAE,IAAI;;EAGvE,MAAM,QAA4D,EAAE;AACpE,MAAI,OAAO,KAAK,gBAAgB,SAAU,OAAM,cAAc,KAAK;AACnE,MAAI,KAAK,aAAa,QAAQ,OAAO,KAAK,aAAa,SAAU,OAAM,WAAW,KAAK;EAEvF,MAAM,UAAU,MAAM,OAAO,IAAI,MAAM;AACvC,MAAI,CAAC,QAAS,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,aAAa;GAAE,EAAE,IAAI;EAEhF,MAAM,SAAS,mBAAmB,QAAQ;EAC1C,MAAM,WAAW,gBAAgB,QAAQ,OAAO,OAAO;AAEvD,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,IAAI,QAAQ;IACZ,WAAW,QAAQ;IACnB,UAAU,QAAQ;IAClB,UAAU,SAAS;IACpB;GACF,CAAC;GACF;;AAKJ,eAAe,6BACb,SACA,YACA,SACwB;CACxB,MAAM,MAAM,QAAQ;AAEpB,KAAI,WACF,KAAI;AACF,SAAO,MAAM,QAAQ,SAAS,0BAA0B,WAAW;SAC7D;CAMV,MAAM,EAAE,qBAAqB,MAAM,OAAO;CAC1C,MAAM,EAAE,0BAA0B,kBAAkB,0BAA0B,MAAM,OAClF;AAGF,KAAI,QAEF,QAAO,yBAAyB,KADb,iBAAiB,QACW,CAAC;CAGlD,MAAM,OAAO,iBAAiB,IAAI;AAClC,KAAI,KAAM,QAAO;AAGjB,QAAO,yBAAyB,KADd,sBAAsB,IACM,CAAC;;AAGjD,eAAe,eACb,GACA,OACA,QACA,UACA,SAAS,OACU;AAEnB,KAAI,CAAC,oBAAoB,OAAO,MAAM,CACpC,QAAO,EAAE,KAAK,gDAAgD,IAAI;AAGpE,KAAI;EAEF,MAAM,YAAY,MAAM,MAAM,sBAAsB,OAAO;AAC3D,MAAI,CAAC,UAAU,OAAO;AACpB,iBACE,uBACA;IAAE,SAAS,OAAO;IAAI,aAAa,OAAO,MAAM,MAAM,GAAG,EAAE;IAAE,QAAQ,UAAU;IAAQ;IAAU,EACjG,sCAAsC,UAAU,SACjD;GACD,MAAM,EAAE,wBAAwB,WAAW,MAAM,OAAO;AACxD,UAAO,IAAI,SAAS,OAAO,UAAU,OAA6B,EAAE;IAClE,QAAQ;IACR,SAAS,EAAE,gBAAgB,4BAA4B;IACxD,CAAC;;AAIJ,QAAM,mBAAmB,OAAO,GAAG;AAEnC,gBACE,gBACA;GAAE,SAAS,OAAO;GAAI,aAAa,OAAO,MAAM,MAAM,GAAG,EAAE;GAAE;GAAU,WAAW,OAAO;GAAW,EACpG,qBAAqB,OAAO,WAC7B;EAGD,MAAM,WAAW,MAAM,KAAK,OAAO,aAAa;EAChD,MAAM,SAAS,iBAAiB,OAAO,aAAa;EACpD,MAAM,YAAY,SAAS,MAAM,OAAO;EAExC,MAAM,cAAc,SAAS,qBAAqB,mBAAmB,OAAO,SAAS,CAAC,KAAK,yBAAyB,mBAAmB,OAAO,SAAS,CAAC;AAExJ,SAAO,IAAI,SAAS,WAAW;GAC7B,QAAQ;GACR,SAAS;IACP,gBAAgB,OAAO;IACvB,uBAAuB;IACvB,kBAAkB,OAAO,SAAS,KAAK;IACvC,iBAAiB;IACjB,0BAA0B;IAC1B,mBAAmB;IACnB,mBAAmB;IACpB;GACF,CAAC;WACM;AACR,sBAAoB,OAAO,MAAM"}

package/dist/src/gateway/hono/routes/tunnel.js

@@ -1,5 +1,4 @@
 import { resolveGatewayEffectiveHost } from "../../../config/gateway-bind.js";
-import { getClientIpFromHeaders } from "../../auth-rate-limit.js";
 import { extractToken } from "../../auth.js";
 import { TUNNEL_CONSENT_REQUIRED_CODE, TunnelConsentError, assertTunnelMayStart, getTunnelConsentState } from "../../../tunnel/consent.js";
 import { getTunnelRegistrationSecretMeta, readTunnelRegistrationSecretFromConfigOnly, resolveTunnelBrokerUrl } from "../../../tunnel/env.js";
@@ -9,6 +8,7 @@ import { logTunnelAudit } from "../../../tunnel/tunnel-audit.js";
 import { getTunnelService, hashGatewayToken } from "../../../tunnel/tunnel-service.js";
 import { configureTunnelFromGatewayConfig } from "../../../tunnel/gateway-lifecycle.js";
 import { applyTunnelConsentToConfig, setTunnelEnabledInConfig } from "../../../tunnel/tunnel-config.js";
+import { getClientIpFromHeaders } from "../../security/loopback.js";
 import { applyLanPairingGatewayPatch } from "../../../tunnel/enable-lan-pairing.js";
 import { consumeTunnelMutationLimit } from "../../../tunnel/tunnel-rate-limit.js";
 import "../../../tunnel/index.js";

package/dist/src/gateway/hono/routes/tunnel.js.map

@@ -1 +1 @@
-{"version":3,"file":"tunnel.js","names":[],"sources":["../../../../../src/gateway/hono/routes/tunnel.ts"],"sourcesContent":["import type { Hono, MiddlewareHandler } from 'hono';\n\nimport type { Config } from '../../../config/schema.js';\nimport { resolveGatewayEffectiveHost } from '../../../config/gateway-bind.js';\nimport { extractToken } from '../../auth.js';\nimport {\n  assertTunnelMayStart,\n  getTunnelConsentState,\n  TUNNEL_CONSENT_REQUIRED_CODE,\n  TunnelConsentError,\n} from '../../../tunnel/consent.js';\nimport { hashGatewayToken } from '../../../tunnel/tunnel-service.js';\nimport { configureTunnelFromGatewayConfig } from '../../../tunnel/gateway-lifecycle.js';\nimport {\n  getTunnelRegistrationSecretMeta,\n  readTunnelRegistrationSecretFromConfigOnly,\n  resolveTunnelBrokerUrl,\n} from '../../../tunnel/env.js';\nimport { getTunnelService } from '../../../tunnel/index.js';\nimport { createPairingSecret, exchangePairingSecretOnce, getCachedPairingExchange } from '../../../tunnel/pairing.js';\nimport { buildMobilePairContext } from '../../../tunnel/pair-context.js';\nimport { applyLanPairingGatewayPatch } from '../../../tunnel/enable-lan-pairing.js';\nimport {\n  buildMobileConnectUrlOrder,\n  resolveMobilePairLanUrl,\n  validateMobilePairBaseUrl,\n} from '../../../tunnel/pair-url.js';\nimport { consumePairingExchangeFailLimit } from '../../../tunnel/pairing-rate-limit.js';\nimport { loadTunnelState } from '../../../tunnel/tunnel-state.js';\nimport { logTunnelAudit } from '../../../tunnel/tunnel-audit.js';\nimport {\n  applyTunnelConsentToConfig,\n  setTunnelEnabledInConfig,\n} from '../../../tunnel/tunnel-config.js';\nimport { consumeTunnelMutationLimit } from '../../../tunnel/tunnel-rate-limit.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\nimport type { GatewayService } from '../../service.js';\nimport { getClientIpFromHeaders } from '../../auth-rate-limit.js';\n\nasync function configureTunnelFromService(\n  deps: AuthenticatedRouteDeps,\n  opts?: { force?: boolean },\n): Promise<void> {\n  await configureTunnelFromGatewayConfig(deps.service.currentConfig, opts);\n}\n\nfunction enrichTunnelStatus(config: Config, status: ReturnType<ReturnType<typeof getTunnelService>['getStatus']>) {\n  const consent = getTunnelConsentState(config);\n  const brokerUrl = resolveTunnelBrokerUrl(config.tunnel?.brokerUrl);\n  const registrationSecret = getTunnelRegistrationSecretMeta(config, process.env, brokerUrl);\n  return {\n    ...status,\n    consentRequired: consent.consentRequired,\n    consent: {\n      currentVersion: consent.currentVersion,\n      acceptedVersion: consent.acceptedVersion,\n      acceptedAt: consent.acceptedAt,\n      valid: consent.valid,\n    },\n    canAutoStart: consent.canAutoStart,\n    registrationSecret,\n  };\n}\n\nfunction requireGatewayToken(c: { req: { header: (name: string) => string | undefined } }): string | null {\n  return (\n    extractToken({\n      authorization: c.req.header('authorization') ?? undefined,\n    }) ?? null\n  );\n}\n\nfunction createTunnelMutationRateLimitMiddleware(): MiddlewareHandler {\n  return async (c, next) => {\n    const token = requireGatewayToken(c);\n    if (!token) {\n      return c.json({ error: 'Gateway token required' }, 401);\n    }\n    const result = consumeTunnelMutationLimit(token);\n    if (!result.allowed) {\n      c.header('Retry-After', String(Math.ceil(result.retryAfterMs / 1000)));\n      return c.json(\n        {\n          error: 'Too many tunnel operations. Try again later.',\n          code: 'TUNNEL_RATE_LIMITED',\n          retryAfterMs: result.retryAfterMs,\n        },\n        429,\n      );\n    }\n    await next();\n  };\n}\n\nexport function registerTunnelPublicRoutes(app: Hono, service: GatewayService): void {\n  app.get('/api/tunnel/pair/ping', async (c) => {\n    const config = service.currentConfig as Config;\n    const tunnel = getTunnelService();\n    const status = tunnel.getStatus();\n    const context = buildMobilePairContext({\n      config,\n      tunnelPublicUrl: status.publicUrl,\n      tunnelConnected: status.state === 'connected',\n    });\n    return c.json({\n      ok: true,\n      service: 'xopc-gateway',\n      mobilePairing: true,\n      port: context.port,\n      bindMode: context.bindMode,\n      listenHost: context.listenHost,\n      pairingReady: context.pairingReady,\n      blockReason: context.blockReason ?? null,\n      tunnelConnected: status.state === 'connected',\n      connectUrls: context.connectUrls,\n    });\n  });\n\n  app.post('/api/tunnel/pair/validate-url', async (c) => {\n    let body: { baseUrl?: unknown };\n    try {\n      body = (await c.req.json()) as { baseUrl?: unknown };\n    } catch {\n      return c.json({ error: 'Invalid JSON body' }, 400);\n    }\n    const baseUrl = typeof body.baseUrl === 'string' ? body.baseUrl : '';\n    const result = validateMobilePairBaseUrl(baseUrl);\n    if (result.ok === false) {\n      return c.json({\n        ok: false,\n        code: result.code,\n        message: result.message,\n      });\n    }\n    return c.json({\n      ok: true,\n      url: result.url,\n      loopback: false,\n      probePath: '/api/tunnel/pair/ping',\n    });\n  });\n\n  app.post('/api/tunnel/exchange-token', async (c) => {\n    const clientIp =\n      getClientIpFromHeaders({\n        get: (name: string) => c.req.header(name) ?? undefined,\n      }) ?? 'unknown';\n\n    let body: { pairingSecret?: unknown };\n    try {\n      body = (await c.req.json()) as { pairingSecret?: unknown };\n    } catch {\n      return c.json({ error: 'Invalid JSON body' }, 400);\n    }\n\n    const pairingSecret = typeof body.pairingSecret === 'string' ? body.pairingSecret.trim() : '';\n    if (!pairingSecret) {\n      return c.json({ error: 'pairingSecret required' }, 400);\n    }\n\n    const cached = getCachedPairingExchange(pairingSecret);\n    if (cached) {\n      logTunnelAudit(\n        'tunnel.exchange_token',\n        { ok: true, clientIp, phase: 'pairing_exchange', replay: true },\n        'Pairing secret replayed (duplicate mobile exchange)',\n      );\n      return c.json(cached);\n    }\n\n    const token = service.getAuthToken();\n    if (!token) {\n      return c.json({ error: 'Gateway token not configured' }, 500);\n    }\n\n    const persisted = loadTunnelState();\n    const config = service.currentConfig as Config;\n    const publicUrl = persisted?.publicUrl?.trim() || null;\n    const lanUrl = resolveMobilePairLanUrl(config);\n    const connectUrls = buildMobileConnectUrlOrder({ baseUrl: publicUrl, lanUrl });\n\n    const payload = await exchangePairingSecretOnce(pairingSecret, () => ({\n      token,\n      baseUrl: publicUrl,\n      lanUrl,\n      connectUrls,\n    }));\n\n    if (!payload) {\n      const limited = consumePairingExchangeFailLimit(clientIp);\n      if (!limited.allowed) {\n        c.header('Retry-After', String(Math.ceil(limited.retryAfterMs / 1000)));\n      }\n      logTunnelAudit(\n        'tunnel.exchange_token',\n        { ok: false, clientIp, phase: 'pairing_exchange' },\n        'Pairing exchange denied: invalid or expired secret',\n      );\n      return c.json({ error: 'Invalid or expired pairing secret', code: 'PAIRING_INVALID' }, 401);\n    }\n\n    logTunnelAudit(\n      'tunnel.exchange_token',\n      { ok: true, clientIp, subdomain: persisted?.subdomain ?? null, phase: 'pairing_exchange' },\n      'Pairing secret exchanged for gateway token',\n    );\n    return c.json(payload);\n  });\n}\n\nexport function registerTunnelRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  const { strictRateLimitMiddleware } = deps;\n  const tunnel = getTunnelService();\n  const tunnelMutationLimit = createTunnelMutationRateLimitMiddleware();\n\n  authenticated.get('/api/tunnel/pair/context', async (c) => {\n    await configureTunnelFromService(deps);\n    const config = deps.service.currentConfig as Config;\n    const status = tunnel.getStatus();\n    const context = buildMobilePairContext({\n      config,\n      tunnelPublicUrl: status.publicUrl,\n      tunnelConnected: status.state === 'connected',\n    });\n    return c.json(context);\n  });\n\n  authenticated.post('/api/tunnel/pair/enable-lan', tunnelMutationLimit, async (c) => {\n    const token = requireGatewayToken(c);\n    if (!token) return c.json({ error: 'Gateway token required' }, 401);\n\n    const config = deps.service.currentConfig as Config;\n    const patchResult = applyLanPairingGatewayPatch(config);\n    if (patchResult.ok === false) {\n      return c.json({ ok: false, error: { message: patchResult.message, code: 'LAN_PAIRING_CONFIG' } }, 400);\n    }\n\n    if (patchResult.changed) {\n      const saveResult = await deps.service.saveConfig(config);\n      if (!saveResult.saved) {\n        return c.json(\n          { ok: false, error: { message: saveResult.error ?? 'Failed to save config', code: 'SAVE_FAILED' } },\n          500,\n        );\n      }\n      logTunnelAudit(\n        'tunnel.enable_lan_pairing',\n        { gatewayTokenHash: hashGatewayToken(token).slice(0, 12) },\n        'Gateway bind switched to LAN for mobile pairing',\n      );\n    }\n\n    const status = tunnel.getStatus();\n    let context = buildMobilePairContext({\n      config: deps.service.currentConfig as Config,\n      tunnelPublicUrl: status.publicUrl,\n      tunnelConnected: status.state === 'connected',\n    });\n\n    if (patchResult.changed) {\n      context = {\n        ...context,\n        pairingReady: false,\n        blockReason: 'GATEWAY_LOOPBACK_ONLY',\n      };\n    }\n\n    return c.json({\n      ok: true,\n      requiresRestart: patchResult.changed,\n      context,\n    });\n  });\n\n  authenticated.post('/api/tunnel/pair', tunnelMutationLimit, async (c) => {\n    await configureTunnelFromService(deps);\n    const token = requireGatewayToken(c);\n    if (!token) return c.json({ error: 'Gateway token required' }, 401);\n\n    const { secret, expiresAt } = createPairingSecret();\n    logTunnelAudit(\n      'tunnel.pair',\n      {\n        expiresAt: expiresAt.toISOString(),\n        gatewayTokenHash: hashGatewayToken(token).slice(0, 12),\n      },\n      'Mobile pairing session created',\n    );\n    return c.json({ pairingSecret: secret, expiresAt: expiresAt.toISOString() });\n  });\n\n  authenticated.get('/api/tunnel/status', async (c) => {\n    await configureTunnelFromService(deps);\n    const config = deps.service.currentConfig as Config;\n    return c.json(enrichTunnelStatus(config, tunnel.getStatus()));\n  });\n\n  authenticated.post('/api/tunnel/consent', tunnelMutationLimit, async (c) => {\n    const token = requireGatewayToken(c);\n    if (!token) return c.json({ error: 'Gateway token required' }, 401);\n\n    const config = deps.service.currentConfig as Config;\n    applyTunnelConsentToConfig(config);\n    const result = await deps.service.saveConfig(config);\n    if (!result.saved) {\n      return c.json({ ok: false, error: result.error ?? 'Failed to save config' }, 500);\n    }\n    const consent = getTunnelConsentState(config);\n    logTunnelAudit(\n      'tunnel.consent',\n      {\n        consentVersion: consent.currentVersion,\n        gatewayTokenHash: hashGatewayToken(token).slice(0, 12),\n      },\n      'Remote access security consent recorded',\n    );\n    return c.json({\n      ok: true,\n      consent: {\n        currentVersion: consent.currentVersion,\n        acceptedVersion: consent.acceptedVersion,\n        acceptedAt: consent.acceptedAt,\n        valid: consent.valid,\n      },\n    });\n  });\n\n  authenticated.post('/api/tunnel/start', tunnelMutationLimit, async (c) => {\n    await configureTunnelFromService(deps, { force: true });\n    const config = deps.service.currentConfig as Config;\n    const token = requireGatewayToken(c);\n    if (!token) return c.json({ error: 'Gateway token required' }, 401);\n\n    try {\n      assertTunnelMayStart(config);\n    } catch (err) {\n      if (err instanceof TunnelConsentError) {\n        logTunnelAudit(\n          'tunnel.start_denied',\n          { reason: TUNNEL_CONSENT_REQUIRED_CODE, gatewayTokenHash: hashGatewayToken(token).slice(0, 12) },\n          'Tunnel start denied: consent required',\n        );\n        return c.json({ error: err.message, code: TUNNEL_CONSENT_REQUIRED_CODE }, 403);\n      }\n      throw err;\n    }\n\n    const gateway = config.gateway;\n    const port = gateway.port ?? 18790;\n    try {\n      const qr = await tunnel.start(port, token);\n      setTunnelEnabledInConfig(config, true);\n      await deps.service.saveConfig(config);\n      const status = tunnel.getStatus();\n      return c.json({\n        publicUrl: qr.publicUrl,\n        subdomain: status.subdomain,\n        qrPayload: qr.qrPayload,\n        lanUrl: qr.lanUrl,\n      });\n    } catch (err) {\n      const message = err instanceof Error ? err.message : String(err);\n      return c.json({ error: message }, 500);\n    }\n  });\n\n  authenticated.post('/api/tunnel/stop', tunnelMutationLimit, async (c) => {\n    await configureTunnelFromService(deps);\n    const config = deps.service.currentConfig as Config;\n    let release = false;\n    try {\n      const body = (await c.req.json().catch(() => ({}))) as { release?: unknown };\n      release = body.release === true;\n    } catch {\n      release = false;\n    }\n    const { released } = await tunnel.stop({ release });\n    setTunnelEnabledInConfig(config, false);\n    await deps.service.saveConfig(config);\n    return c.json({ ok: true, released });\n  });\n\n  authenticated.get('/api/tunnel/qr', async (c) => {\n    await configureTunnelFromService(deps);\n    const gateway = deps.service.currentConfig.gateway;\n    const port = gateway.port ?? 18790;\n    const host = resolveGatewayEffectiveHost(deps.service.currentConfig);\n    const token = requireGatewayToken(c);\n    if (!token) return c.json({ error: 'Gateway token required' }, 401);\n    const qr = await tunnel.buildQr(port, host);\n    return c.json(qr);\n  });\n\n  authenticated.get('/api/tunnel/transport-status', async (c) => {\n    await configureTunnelFromService(deps);\n    return c.json({\n      transport: { tls: 'broker_terminated' as const },\n    });\n  });\n\n  /**\n   * POST /api/tunnel/reveal-registration-secret — plaintext only when stored in config file.\n   */\n  authenticated.post('/api/tunnel/reveal-registration-secret', strictRateLimitMiddleware, async (c) => {\n    const config = deps.service.currentConfig as Config;\n    const registrationSecret = readTunnelRegistrationSecretFromConfigOnly(config);\n    return c.json({\n      ok: true,\n      payload: {\n        registrationSecret,\n        source: registrationSecret ? ('config' as const) : ('none' as const),\n      },\n    });\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAuCA,eAAe,2BACb,MACA,MACe;AACf,OAAM,iCAAiC,KAAK,QAAQ,eAAe,KAAK;;AAG1E,SAAS,mBAAmB,QAAgB,QAAsE;CAChH,MAAM,UAAU,sBAAsB,OAAO;CAC7C,MAAM,YAAY,uBAAuB,OAAO,QAAQ,UAAU;CAClE,MAAM,qBAAqB,gCAAgC,QAAQ,QAAQ,KAAK,UAAU;AAC1F,QAAO;EACL,GAAG;EACH,iBAAiB,QAAQ;EACzB,SAAS;GACP,gBAAgB,QAAQ;GACxB,iBAAiB,QAAQ;GACzB,YAAY,QAAQ;GACpB,OAAO,QAAQ;GAChB;EACD,cAAc,QAAQ;EACtB;EACD;;AAGH,SAAS,oBAAoB,GAA6E;AACxG,QACE,aAAa,EACX,eAAe,EAAE,IAAI,OAAO,gBAAgB,IAAI,KAAA,GACjD,CAAC,IAAI;;AAIV,SAAS,0CAA6D;AACpE,QAAO,OAAO,GAAG,SAAS;EACxB,MAAM,QAAQ,oBAAoB,EAAE;AACpC,MAAI,CAAC,MACH,QAAO,EAAE,KAAK,EAAE,OAAO,0BAA0B,EAAE,IAAI;EAEzD,MAAM,SAAS,2BAA2B,MAAM;AAChD,MAAI,CAAC,OAAO,SAAS;AACnB,KAAE,OAAO,eAAe,OAAO,KAAK,KAAK,OAAO,eAAe,IAAK,CAAC,CAAC;AACtE,UAAO,EAAE,KACP;IACE,OAAO;IACP,MAAM;IACN,cAAc,OAAO;IACtB,EACD,IACD;;AAEH,QAAM,MAAM;;;AAIhB,SAAgB,2BAA2B,KAAW,SAA+B;AACnF,KAAI,IAAI,yBAAyB,OAAO,MAAM;EAC5C,MAAM,SAAS,QAAQ;EAEvB,MAAM,SADS,kBACM,CAAC,WAAW;EACjC,MAAM,UAAU,uBAAuB;GACrC;GACA,iBAAiB,OAAO;GACxB,iBAAiB,OAAO,UAAU;GACnC,CAAC;AACF,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;GACT,eAAe;GACf,MAAM,QAAQ;GACd,UAAU,QAAQ;GAClB,YAAY,QAAQ;GACpB,cAAc,QAAQ;GACtB,aAAa,QAAQ,eAAe;GACpC,iBAAiB,OAAO,UAAU;GAClC,aAAa,QAAQ;GACtB,CAAC;GACF;AAEF,KAAI,KAAK,iCAAiC,OAAO,MAAM;EACrD,IAAI;AACJ,MAAI;AACF,UAAQ,MAAM,EAAE,IAAI,MAAM;UACpB;AACN,UAAO,EAAE,KAAK,EAAE,OAAO,qBAAqB,EAAE,IAAI;;EAGpD,MAAM,SAAS,0BADC,OAAO,KAAK,YAAY,WAAW,KAAK,UAAU,GACjB;AACjD,MAAI,OAAO,OAAO,MAChB,QAAO,EAAE,KAAK;GACZ,IAAI;GACJ,MAAM,OAAO;GACb,SAAS,OAAO;GACjB,CAAC;AAEJ,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,KAAK,OAAO;GACZ,UAAU;GACV,WAAW;GACZ,CAAC;GACF;AAEF,KAAI,KAAK,8BAA8B,OAAO,MAAM;EAClD,MAAM,WACJ,uBAAuB,EACrB,MAAM,SAAiB,EAAE,IAAI,OAAO,KAAK,IAAI,KAAA,GAC9C,CAAC,IAAI;EAER,IAAI;AACJ,MAAI;AACF,UAAQ,MAAM,EAAE,IAAI,MAAM;UACpB;AACN,UAAO,EAAE,KAAK,EAAE,OAAO,qBAAqB,EAAE,IAAI;;EAGpD,MAAM,gBAAgB,OAAO,KAAK,kBAAkB,WAAW,KAAK,cAAc,MAAM,GAAG;AAC3F,MAAI,CAAC,cACH,QAAO,EAAE,KAAK,EAAE,OAAO,0BAA0B,EAAE,IAAI;EAGzD,MAAM,SAAS,yBAAyB,cAAc;AACtD,MAAI,QAAQ;AACV,kBACE,yBACA;IAAE,IAAI;IAAM;IAAU,OAAO;IAAoB,QAAQ;IAAM,EAC/D,sDACD;AACD,UAAO,EAAE,KAAK,OAAO;;EAGvB,MAAM,QAAQ,QAAQ,cAAc;AACpC,MAAI,CAAC,MACH,QAAO,EAAE,KAAK,EAAE,OAAO,gCAAgC,EAAE,IAAI;EAG/D,MAAM,YAAY,iBAAiB;EACnC,MAAM,SAAS,QAAQ;EACvB,MAAM,YAAY,WAAW,WAAW,MAAM,IAAI;EAClD,MAAM,SAAS,wBAAwB,OAAO;EAC9C,MAAM,cAAc,2BAA2B;GAAE,SAAS;GAAW;GAAQ,CAAC;EAE9E,MAAM,UAAU,MAAM,0BAA0B,sBAAsB;GACpE;GACA,SAAS;GACT;GACA;GACD,EAAE;AAEH,MAAI,CAAC,SAAS;GACZ,MAAM,UAAU,gCAAgC,SAAS;AACzD,OAAI,CAAC,QAAQ,QACX,GAAE,OAAO,eAAe,OAAO,KAAK,KAAK,QAAQ,eAAe,IAAK,CAAC,CAAC;AAEzE,kBACE,yBACA;IAAE,IAAI;IAAO;IAAU,OAAO;IAAoB,EAClD,qDACD;AACD,UAAO,EAAE,KAAK;IAAE,OAAO;IAAqC,MAAM;IAAmB,EAAE,IAAI;;AAG7F,iBACE,yBACA;GAAE,IAAI;GAAM;GAAU,WAAW,WAAW,aAAa;GAAM,OAAO;GAAoB,EAC1F,6CACD;AACD,SAAO,EAAE,KAAK,QAAQ;GACtB;;AAGJ,SAAgB,qBAAqB,eAAqB,MAAoC;CAC5F,MAAM,EAAE,8BAA8B;CACtC,MAAM,SAAS,kBAAkB;CACjC,MAAM,sBAAsB,yCAAyC;AAErE,eAAc,IAAI,4BAA4B,OAAO,MAAM;AACzD,QAAM,2BAA2B,KAAK;EACtC,MAAM,SAAS,KAAK,QAAQ;EAC5B,MAAM,SAAS,OAAO,WAAW;EACjC,MAAM,UAAU,uBAAuB;GACrC;GACA,iBAAiB,OAAO;GACxB,iBAAiB,OAAO,UAAU;GACnC,CAAC;AACF,SAAO,EAAE,KAAK,QAAQ;GACtB;AAEF,eAAc,KAAK,+BAA+B,qBAAqB,OAAO,MAAM;EAClF,MAAM,QAAQ,oBAAoB,EAAE;AACpC,MAAI,CAAC,MAAO,QAAO,EAAE,KAAK,EAAE,OAAO,0BAA0B,EAAE,IAAI;EAEnE,MAAM,SAAS,KAAK,QAAQ;EAC5B,MAAM,cAAc,4BAA4B,OAAO;AACvD,MAAI,YAAY,OAAO,MACrB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;IAAE,SAAS,YAAY;IAAS,MAAM;IAAsB;GAAE,EAAE,IAAI;AAGxG,MAAI,YAAY,SAAS;GACvB,MAAM,aAAa,MAAM,KAAK,QAAQ,WAAW,OAAO;AACxD,OAAI,CAAC,WAAW,MACd,QAAO,EAAE,KACP;IAAE,IAAI;IAAO,OAAO;KAAE,SAAS,WAAW,SAAS;KAAyB,MAAM;KAAe;IAAE,EACnG,IACD;AAEH,kBACE,6BACA,EAAE,kBAAkB,iBAAiB,MAAM,CAAC,MAAM,GAAG,GAAG,EAAE,EAC1D,kDACD;;EAGH,MAAM,SAAS,OAAO,WAAW;EACjC,IAAI,UAAU,uBAAuB;GACnC,QAAQ,KAAK,QAAQ;GACrB,iBAAiB,OAAO;GACxB,iBAAiB,OAAO,UAAU;GACnC,CAAC;AAEF,MAAI,YAAY,QACd,WAAU;GACR,GAAG;GACH,cAAc;GACd,aAAa;GACd;AAGH,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,iBAAiB,YAAY;GAC7B;GACD,CAAC;GACF;AAEF,eAAc,KAAK,oBAAoB,qBAAqB,OAAO,MAAM;AACvE,QAAM,2BAA2B,KAAK;EACtC,MAAM,QAAQ,oBAAoB,EAAE;AACpC,MAAI,CAAC,MAAO,QAAO,EAAE,KAAK,EAAE,OAAO,0BAA0B,EAAE,IAAI;EAEnE,MAAM,EAAE,QAAQ,cAAc,qBAAqB;AACnD,iBACE,eACA;GACE,WAAW,UAAU,aAAa;GAClC,kBAAkB,iBAAiB,MAAM,CAAC,MAAM,GAAG,GAAG;GACvD,EACD,iCACD;AACD,SAAO,EAAE,KAAK;GAAE,eAAe;GAAQ,WAAW,UAAU,aAAa;GAAE,CAAC;GAC5E;AAEF,eAAc,IAAI,sBAAsB,OAAO,MAAM;AACnD,QAAM,2BAA2B,KAAK;EACtC,MAAM,SAAS,KAAK,QAAQ;AAC5B,SAAO,EAAE,KAAK,mBAAmB,QAAQ,OAAO,WAAW,CAAC,CAAC;GAC7D;AAEF,eAAc,KAAK,uBAAuB,qBAAqB,OAAO,MAAM;EAC1E,MAAM,QAAQ,oBAAoB,EAAE;AACpC,MAAI,CAAC,MAAO,QAAO,EAAE,KAAK,EAAE,OAAO,0BAA0B,EAAE,IAAI;EAEnE,MAAM,SAAS,KAAK,QAAQ;AAC5B,6BAA2B,OAAO;EAClC,MAAM,SAAS,MAAM,KAAK,QAAQ,WAAW,OAAO;AACpD,MAAI,CAAC,OAAO,MACV,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,OAAO,SAAS;GAAyB,EAAE,IAAI;EAEnF,MAAM,UAAU,sBAAsB,OAAO;AAC7C,iBACE,kBACA;GACE,gBAAgB,QAAQ;GACxB,kBAAkB,iBAAiB,MAAM,CAAC,MAAM,GAAG,GAAG;GACvD,EACD,0CACD;AACD,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,gBAAgB,QAAQ;IACxB,iBAAiB,QAAQ;IACzB,YAAY,QAAQ;IACpB,OAAO,QAAQ;IAChB;GACF,CAAC;GACF;AAEF,eAAc,KAAK,qBAAqB,qBAAqB,OAAO,MAAM;AACxE,QAAM,2BAA2B,MAAM,EAAE,OAAO,MAAM,CAAC;EACvD,MAAM,SAAS,KAAK,QAAQ;EAC5B,MAAM,QAAQ,oBAAoB,EAAE;AACpC,MAAI,CAAC,MAAO,QAAO,EAAE,KAAK,EAAE,OAAO,0BAA0B,EAAE,IAAI;AAEnE,MAAI;AACF,wBAAqB,OAAO;WACrB,KAAK;AACZ,OAAI,eAAe,oBAAoB;AACrC,mBACE,uBACA;KAAE,QAAQ;KAA8B,kBAAkB,iBAAiB,MAAM,CAAC,MAAM,GAAG,GAAG;KAAE,EAChG,wCACD;AACD,WAAO,EAAE,KAAK;KAAE,OAAO,IAAI;KAAS,MAAM;KAA8B,EAAE,IAAI;;AAEhF,SAAM;;EAIR,MAAM,OADU,OAAO,QACF,QAAQ;AAC7B,MAAI;GACF,MAAM,KAAK,MAAM,OAAO,MAAM,MAAM,MAAM;AAC1C,4BAAyB,QAAQ,KAAK;AACtC,SAAM,KAAK,QAAQ,WAAW,OAAO;GACrC,MAAM,SAAS,OAAO,WAAW;AACjC,UAAO,EAAE,KAAK;IACZ,WAAW,GAAG;IACd,WAAW,OAAO;IAClB,WAAW,GAAG;IACd,QAAQ,GAAG;IACZ,CAAC;WACK,KAAK;GACZ,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAChE,UAAO,EAAE,KAAK,EAAE,OAAO,SAAS,EAAE,IAAI;;GAExC;AAEF,eAAc,KAAK,oBAAoB,qBAAqB,OAAO,MAAM;AACvE,QAAM,2BAA2B,KAAK;EACtC,MAAM,SAAS,KAAK,QAAQ;EAC5B,IAAI,UAAU;AACd,MAAI;AAEF,cAAU,MADU,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE,EACnC,YAAY;UACrB;AACN,aAAU;;EAEZ,MAAM,EAAE,aAAa,MAAM,OAAO,KAAK,EAAE,SAAS,CAAC;AACnD,2BAAyB,QAAQ,MAAM;AACvC,QAAM,KAAK,QAAQ,WAAW,OAAO;AACrC,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM;GAAU,CAAC;GACrC;AAEF,eAAc,IAAI,kBAAkB,OAAO,MAAM;AAC/C,QAAM,2BAA2B,KAAK;EAEtC,MAAM,OADU,KAAK,QAAQ,cAAc,QACtB,QAAQ;EAC7B,MAAM,OAAO,4BAA4B,KAAK,QAAQ,cAAc;AAEpE,MAAI,CADU,oBAAoB,EACxB,CAAE,QAAO,EAAE,KAAK,EAAE,OAAO,0BAA0B,EAAE,IAAI;EACnE,MAAM,KAAK,MAAM,OAAO,QAAQ,MAAM,KAAK;AAC3C,SAAO,EAAE,KAAK,GAAG;GACjB;AAEF,eAAc,IAAI,gCAAgC,OAAO,MAAM;AAC7D,QAAM,2BAA2B,KAAK;AACtC,SAAO,EAAE,KAAK,EACZ,WAAW,EAAE,KAAK,qBAA8B,EACjD,CAAC;GACF;;;;AAKF,eAAc,KAAK,0CAA0C,2BAA2B,OAAO,MAAM;EACnG,MAAM,SAAS,KAAK,QAAQ;EAC5B,MAAM,qBAAqB,2CAA2C,OAAO;AAC7E,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP;IACA,QAAQ,qBAAsB,WAAsB;IACrD;GACF,CAAC;GACF"}
+{"version":3,"file":"tunnel.js","names":[],"sources":["../../../../../src/gateway/hono/routes/tunnel.ts"],"sourcesContent":["import type { Hono, MiddlewareHandler } from 'hono';\n\nimport type { Config } from '../../../config/schema.js';\nimport { resolveGatewayEffectiveHost } from '../../../config/gateway-bind.js';\nimport { extractToken } from '../../auth.js';\nimport {\n  assertTunnelMayStart,\n  getTunnelConsentState,\n  TUNNEL_CONSENT_REQUIRED_CODE,\n  TunnelConsentError,\n} from '../../../tunnel/consent.js';\nimport { hashGatewayToken } from '../../../tunnel/tunnel-service.js';\nimport { configureTunnelFromGatewayConfig } from '../../../tunnel/gateway-lifecycle.js';\nimport {\n  getTunnelRegistrationSecretMeta,\n  readTunnelRegistrationSecretFromConfigOnly,\n  resolveTunnelBrokerUrl,\n} from '../../../tunnel/env.js';\nimport { getTunnelService } from '../../../tunnel/index.js';\nimport { createPairingSecret, exchangePairingSecretOnce, getCachedPairingExchange } from '../../../tunnel/pairing.js';\nimport { buildMobilePairContext } from '../../../tunnel/pair-context.js';\nimport { applyLanPairingGatewayPatch } from '../../../tunnel/enable-lan-pairing.js';\nimport {\n  buildMobileConnectUrlOrder,\n  resolveMobilePairLanUrl,\n  validateMobilePairBaseUrl,\n} from '../../../tunnel/pair-url.js';\nimport { consumePairingExchangeFailLimit } from '../../../tunnel/pairing-rate-limit.js';\nimport { loadTunnelState } from '../../../tunnel/tunnel-state.js';\nimport { logTunnelAudit } from '../../../tunnel/tunnel-audit.js';\nimport {\n  applyTunnelConsentToConfig,\n  setTunnelEnabledInConfig,\n} from '../../../tunnel/tunnel-config.js';\nimport { consumeTunnelMutationLimit } from '../../../tunnel/tunnel-rate-limit.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\nimport type { GatewayService } from '../../service.js';\nimport { getClientIpFromHeaders } from '../../security/loopback.js';\n\nasync function configureTunnelFromService(\n  deps: AuthenticatedRouteDeps,\n  opts?: { force?: boolean },\n): Promise<void> {\n  await configureTunnelFromGatewayConfig(deps.service.currentConfig, opts);\n}\n\nfunction enrichTunnelStatus(config: Config, status: ReturnType<ReturnType<typeof getTunnelService>['getStatus']>) {\n  const consent = getTunnelConsentState(config);\n  const brokerUrl = resolveTunnelBrokerUrl(config.tunnel?.brokerUrl);\n  const registrationSecret = getTunnelRegistrationSecretMeta(config, process.env, brokerUrl);\n  return {\n    ...status,\n    consentRequired: consent.consentRequired,\n    consent: {\n      currentVersion: consent.currentVersion,\n      acceptedVersion: consent.acceptedVersion,\n      acceptedAt: consent.acceptedAt,\n      valid: consent.valid,\n    },\n    canAutoStart: consent.canAutoStart,\n    registrationSecret,\n  };\n}\n\nfunction requireGatewayToken(c: { req: { header: (name: string) => string | undefined } }): string | null {\n  return (\n    extractToken({\n      authorization: c.req.header('authorization') ?? undefined,\n    }) ?? null\n  );\n}\n\nfunction createTunnelMutationRateLimitMiddleware(): MiddlewareHandler {\n  return async (c, next) => {\n    const token = requireGatewayToken(c);\n    if (!token) {\n      return c.json({ error: 'Gateway token required' }, 401);\n    }\n    const result = consumeTunnelMutationLimit(token);\n    if (!result.allowed) {\n      c.header('Retry-After', String(Math.ceil(result.retryAfterMs / 1000)));\n      return c.json(\n        {\n          error: 'Too many tunnel operations. Try again later.',\n          code: 'TUNNEL_RATE_LIMITED',\n          retryAfterMs: result.retryAfterMs,\n        },\n        429,\n      );\n    }\n    await next();\n  };\n}\n\nexport function registerTunnelPublicRoutes(app: Hono, service: GatewayService): void {\n  app.get('/api/tunnel/pair/ping', async (c) => {\n    const config = service.currentConfig as Config;\n    const tunnel = getTunnelService();\n    const status = tunnel.getStatus();\n    const context = buildMobilePairContext({\n      config,\n      tunnelPublicUrl: status.publicUrl,\n      tunnelConnected: status.state === 'connected',\n    });\n    return c.json({\n      ok: true,\n      service: 'xopc-gateway',\n      mobilePairing: true,\n      port: context.port,\n      bindMode: context.bindMode,\n      listenHost: context.listenHost,\n      pairingReady: context.pairingReady,\n      blockReason: context.blockReason ?? null,\n      tunnelConnected: status.state === 'connected',\n      connectUrls: context.connectUrls,\n    });\n  });\n\n  app.post('/api/tunnel/pair/validate-url', async (c) => {\n    let body: { baseUrl?: unknown };\n    try {\n      body = (await c.req.json()) as { baseUrl?: unknown };\n    } catch {\n      return c.json({ error: 'Invalid JSON body' }, 400);\n    }\n    const baseUrl = typeof body.baseUrl === 'string' ? body.baseUrl : '';\n    const result = validateMobilePairBaseUrl(baseUrl);\n    if (result.ok === false) {\n      return c.json({\n        ok: false,\n        code: result.code,\n        message: result.message,\n      });\n    }\n    return c.json({\n      ok: true,\n      url: result.url,\n      loopback: false,\n      probePath: '/api/tunnel/pair/ping',\n    });\n  });\n\n  app.post('/api/tunnel/exchange-token', async (c) => {\n    const clientIp =\n      getClientIpFromHeaders({\n        get: (name: string) => c.req.header(name) ?? undefined,\n      }) ?? 'unknown';\n\n    let body: { pairingSecret?: unknown };\n    try {\n      body = (await c.req.json()) as { pairingSecret?: unknown };\n    } catch {\n      return c.json({ error: 'Invalid JSON body' }, 400);\n    }\n\n    const pairingSecret = typeof body.pairingSecret === 'string' ? body.pairingSecret.trim() : '';\n    if (!pairingSecret) {\n      return c.json({ error: 'pairingSecret required' }, 400);\n    }\n\n    const cached = getCachedPairingExchange(pairingSecret);\n    if (cached) {\n      logTunnelAudit(\n        'tunnel.exchange_token',\n        { ok: true, clientIp, phase: 'pairing_exchange', replay: true },\n        'Pairing secret replayed (duplicate mobile exchange)',\n      );\n      return c.json(cached);\n    }\n\n    const token = service.getAuthToken();\n    if (!token) {\n      return c.json({ error: 'Gateway token not configured' }, 500);\n    }\n\n    const persisted = loadTunnelState();\n    const config = service.currentConfig as Config;\n    const publicUrl = persisted?.publicUrl?.trim() || null;\n    const lanUrl = resolveMobilePairLanUrl(config);\n    const connectUrls = buildMobileConnectUrlOrder({ baseUrl: publicUrl, lanUrl });\n\n    const payload = await exchangePairingSecretOnce(pairingSecret, () => ({\n      token,\n      baseUrl: publicUrl,\n      lanUrl,\n      connectUrls,\n    }));\n\n    if (!payload) {\n      const limited = consumePairingExchangeFailLimit(clientIp);\n      if (!limited.allowed) {\n        c.header('Retry-After', String(Math.ceil(limited.retryAfterMs / 1000)));\n      }\n      logTunnelAudit(\n        'tunnel.exchange_token',\n        { ok: false, clientIp, phase: 'pairing_exchange' },\n        'Pairing exchange denied: invalid or expired secret',\n      );\n      return c.json({ error: 'Invalid or expired pairing secret', code: 'PAIRING_INVALID' }, 401);\n    }\n\n    logTunnelAudit(\n      'tunnel.exchange_token',\n      { ok: true, clientIp, subdomain: persisted?.subdomain ?? null, phase: 'pairing_exchange' },\n      'Pairing secret exchanged for gateway token',\n    );\n    return c.json(payload);\n  });\n}\n\nexport function registerTunnelRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  const { strictRateLimitMiddleware } = deps;\n  const tunnel = getTunnelService();\n  const tunnelMutationLimit = createTunnelMutationRateLimitMiddleware();\n\n  authenticated.get('/api/tunnel/pair/context', async (c) => {\n    await configureTunnelFromService(deps);\n    const config = deps.service.currentConfig as Config;\n    const status = tunnel.getStatus();\n    const context = buildMobilePairContext({\n      config,\n      tunnelPublicUrl: status.publicUrl,\n      tunnelConnected: status.state === 'connected',\n    });\n    return c.json(context);\n  });\n\n  authenticated.post('/api/tunnel/pair/enable-lan', tunnelMutationLimit, async (c) => {\n    const token = requireGatewayToken(c);\n    if (!token) return c.json({ error: 'Gateway token required' }, 401);\n\n    const config = deps.service.currentConfig as Config;\n    const patchResult = applyLanPairingGatewayPatch(config);\n    if (patchResult.ok === false) {\n      return c.json({ ok: false, error: { message: patchResult.message, code: 'LAN_PAIRING_CONFIG' } }, 400);\n    }\n\n    if (patchResult.changed) {\n      const saveResult = await deps.service.saveConfig(config);\n      if (!saveResult.saved) {\n        return c.json(\n          { ok: false, error: { message: saveResult.error ?? 'Failed to save config', code: 'SAVE_FAILED' } },\n          500,\n        );\n      }\n      logTunnelAudit(\n        'tunnel.enable_lan_pairing',\n        { gatewayTokenHash: hashGatewayToken(token).slice(0, 12) },\n        'Gateway bind switched to LAN for mobile pairing',\n      );\n    }\n\n    const status = tunnel.getStatus();\n    let context = buildMobilePairContext({\n      config: deps.service.currentConfig as Config,\n      tunnelPublicUrl: status.publicUrl,\n      tunnelConnected: status.state === 'connected',\n    });\n\n    if (patchResult.changed) {\n      context = {\n        ...context,\n        pairingReady: false,\n        blockReason: 'GATEWAY_LOOPBACK_ONLY',\n      };\n    }\n\n    return c.json({\n      ok: true,\n      requiresRestart: patchResult.changed,\n      context,\n    });\n  });\n\n  authenticated.post('/api/tunnel/pair', tunnelMutationLimit, async (c) => {\n    await configureTunnelFromService(deps);\n    const token = requireGatewayToken(c);\n    if (!token) return c.json({ error: 'Gateway token required' }, 401);\n\n    const { secret, expiresAt } = createPairingSecret();\n    logTunnelAudit(\n      'tunnel.pair',\n      {\n        expiresAt: expiresAt.toISOString(),\n        gatewayTokenHash: hashGatewayToken(token).slice(0, 12),\n      },\n      'Mobile pairing session created',\n    );\n    return c.json({ pairingSecret: secret, expiresAt: expiresAt.toISOString() });\n  });\n\n  authenticated.get('/api/tunnel/status', async (c) => {\n    await configureTunnelFromService(deps);\n    const config = deps.service.currentConfig as Config;\n    return c.json(enrichTunnelStatus(config, tunnel.getStatus()));\n  });\n\n  authenticated.post('/api/tunnel/consent', tunnelMutationLimit, async (c) => {\n    const token = requireGatewayToken(c);\n    if (!token) return c.json({ error: 'Gateway token required' }, 401);\n\n    const config = deps.service.currentConfig as Config;\n    applyTunnelConsentToConfig(config);\n    const result = await deps.service.saveConfig(config);\n    if (!result.saved) {\n      return c.json({ ok: false, error: result.error ?? 'Failed to save config' }, 500);\n    }\n    const consent = getTunnelConsentState(config);\n    logTunnelAudit(\n      'tunnel.consent',\n      {\n        consentVersion: consent.currentVersion,\n        gatewayTokenHash: hashGatewayToken(token).slice(0, 12),\n      },\n      'Remote access security consent recorded',\n    );\n    return c.json({\n      ok: true,\n      consent: {\n        currentVersion: consent.currentVersion,\n        acceptedVersion: consent.acceptedVersion,\n        acceptedAt: consent.acceptedAt,\n        valid: consent.valid,\n      },\n    });\n  });\n\n  authenticated.post('/api/tunnel/start', tunnelMutationLimit, async (c) => {\n    await configureTunnelFromService(deps, { force: true });\n    const config = deps.service.currentConfig as Config;\n    const token = requireGatewayToken(c);\n    if (!token) return c.json({ error: 'Gateway token required' }, 401);\n\n    try {\n      assertTunnelMayStart(config);\n    } catch (err) {\n      if (err instanceof TunnelConsentError) {\n        logTunnelAudit(\n          'tunnel.start_denied',\n          { reason: TUNNEL_CONSENT_REQUIRED_CODE, gatewayTokenHash: hashGatewayToken(token).slice(0, 12) },\n          'Tunnel start denied: consent required',\n        );\n        return c.json({ error: err.message, code: TUNNEL_CONSENT_REQUIRED_CODE }, 403);\n      }\n      throw err;\n    }\n\n    const gateway = config.gateway;\n    const port = gateway.port ?? 18790;\n    try {\n      const qr = await tunnel.start(port, token);\n      setTunnelEnabledInConfig(config, true);\n      await deps.service.saveConfig(config);\n      const status = tunnel.getStatus();\n      return c.json({\n        publicUrl: qr.publicUrl,\n        subdomain: status.subdomain,\n        qrPayload: qr.qrPayload,\n        lanUrl: qr.lanUrl,\n      });\n    } catch (err) {\n      const message = err instanceof Error ? err.message : String(err);\n      return c.json({ error: message }, 500);\n    }\n  });\n\n  authenticated.post('/api/tunnel/stop', tunnelMutationLimit, async (c) => {\n    await configureTunnelFromService(deps);\n    const config = deps.service.currentConfig as Config;\n    let release = false;\n    try {\n      const body = (await c.req.json().catch(() => ({}))) as { release?: unknown };\n      release = body.release === true;\n    } catch {\n      release = false;\n    }\n    const { released } = await tunnel.stop({ release });\n    setTunnelEnabledInConfig(config, false);\n    await deps.service.saveConfig(config);\n    return c.json({ ok: true, released });\n  });\n\n  authenticated.get('/api/tunnel/qr', async (c) => {\n    await configureTunnelFromService(deps);\n    const gateway = deps.service.currentConfig.gateway;\n    const port = gateway.port ?? 18790;\n    const host = resolveGatewayEffectiveHost(deps.service.currentConfig);\n    const token = requireGatewayToken(c);\n    if (!token) return c.json({ error: 'Gateway token required' }, 401);\n    const qr = await tunnel.buildQr(port, host);\n    return c.json(qr);\n  });\n\n  authenticated.get('/api/tunnel/transport-status', async (c) => {\n    await configureTunnelFromService(deps);\n    return c.json({\n      transport: { tls: 'broker_terminated' as const },\n    });\n  });\n\n  /**\n   * POST /api/tunnel/reveal-registration-secret — plaintext only when stored in config file.\n   */\n  authenticated.post('/api/tunnel/reveal-registration-secret', strictRateLimitMiddleware, async (c) => {\n    const config = deps.service.currentConfig as Config;\n    const registrationSecret = readTunnelRegistrationSecretFromConfigOnly(config);\n    return c.json({\n      ok: true,\n      payload: {\n        registrationSecret,\n        source: registrationSecret ? ('config' as const) : ('none' as const),\n      },\n    });\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAuCA,eAAe,2BACb,MACA,MACe;AACf,OAAM,iCAAiC,KAAK,QAAQ,eAAe,KAAK;;AAG1E,SAAS,mBAAmB,QAAgB,QAAsE;CAChH,MAAM,UAAU,sBAAsB,OAAO;CAC7C,MAAM,YAAY,uBAAuB,OAAO,QAAQ,UAAU;CAClE,MAAM,qBAAqB,gCAAgC,QAAQ,QAAQ,KAAK,UAAU;AAC1F,QAAO;EACL,GAAG;EACH,iBAAiB,QAAQ;EACzB,SAAS;GACP,gBAAgB,QAAQ;GACxB,iBAAiB,QAAQ;GACzB,YAAY,QAAQ;GACpB,OAAO,QAAQ;GAChB;EACD,cAAc,QAAQ;EACtB;EACD;;AAGH,SAAS,oBAAoB,GAA6E;AACxG,QACE,aAAa,EACX,eAAe,EAAE,IAAI,OAAO,gBAAgB,IAAI,KAAA,GACjD,CAAC,IAAI;;AAIV,SAAS,0CAA6D;AACpE,QAAO,OAAO,GAAG,SAAS;EACxB,MAAM,QAAQ,oBAAoB,EAAE;AACpC,MAAI,CAAC,MACH,QAAO,EAAE,KAAK,EAAE,OAAO,0BAA0B,EAAE,IAAI;EAEzD,MAAM,SAAS,2BAA2B,MAAM;AAChD,MAAI,CAAC,OAAO,SAAS;AACnB,KAAE,OAAO,eAAe,OAAO,KAAK,KAAK,OAAO,eAAe,IAAK,CAAC,CAAC;AACtE,UAAO,EAAE,KACP;IACE,OAAO;IACP,MAAM;IACN,cAAc,OAAO;IACtB,EACD,IACD;;AAEH,QAAM,MAAM;;;AAIhB,SAAgB,2BAA2B,KAAW,SAA+B;AACnF,KAAI,IAAI,yBAAyB,OAAO,MAAM;EAC5C,MAAM,SAAS,QAAQ;EAEvB,MAAM,SADS,kBACM,CAAC,WAAW;EACjC,MAAM,UAAU,uBAAuB;GACrC;GACA,iBAAiB,OAAO;GACxB,iBAAiB,OAAO,UAAU;GACnC,CAAC;AACF,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;GACT,eAAe;GACf,MAAM,QAAQ;GACd,UAAU,QAAQ;GAClB,YAAY,QAAQ;GACpB,cAAc,QAAQ;GACtB,aAAa,QAAQ,eAAe;GACpC,iBAAiB,OAAO,UAAU;GAClC,aAAa,QAAQ;GACtB,CAAC;GACF;AAEF,KAAI,KAAK,iCAAiC,OAAO,MAAM;EACrD,IAAI;AACJ,MAAI;AACF,UAAQ,MAAM,EAAE,IAAI,MAAM;UACpB;AACN,UAAO,EAAE,KAAK,EAAE,OAAO,qBAAqB,EAAE,IAAI;;EAGpD,MAAM,SAAS,0BADC,OAAO,KAAK,YAAY,WAAW,KAAK,UAAU,GACjB;AACjD,MAAI,OAAO,OAAO,MAChB,QAAO,EAAE,KAAK;GACZ,IAAI;GACJ,MAAM,OAAO;GACb,SAAS,OAAO;GACjB,CAAC;AAEJ,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,KAAK,OAAO;GACZ,UAAU;GACV,WAAW;GACZ,CAAC;GACF;AAEF,KAAI,KAAK,8BAA8B,OAAO,MAAM;EAClD,MAAM,WACJ,uBAAuB,EACrB,MAAM,SAAiB,EAAE,IAAI,OAAO,KAAK,IAAI,KAAA,GAC9C,CAAC,IAAI;EAER,IAAI;AACJ,MAAI;AACF,UAAQ,MAAM,EAAE,IAAI,MAAM;UACpB;AACN,UAAO,EAAE,KAAK,EAAE,OAAO,qBAAqB,EAAE,IAAI;;EAGpD,MAAM,gBAAgB,OAAO,KAAK,kBAAkB,WAAW,KAAK,cAAc,MAAM,GAAG;AAC3F,MAAI,CAAC,cACH,QAAO,EAAE,KAAK,EAAE,OAAO,0BAA0B,EAAE,IAAI;EAGzD,MAAM,SAAS,yBAAyB,cAAc;AACtD,MAAI,QAAQ;AACV,kBACE,yBACA;IAAE,IAAI;IAAM;IAAU,OAAO;IAAoB,QAAQ;IAAM,EAC/D,sDACD;AACD,UAAO,EAAE,KAAK,OAAO;;EAGvB,MAAM,QAAQ,QAAQ,cAAc;AACpC,MAAI,CAAC,MACH,QAAO,EAAE,KAAK,EAAE,OAAO,gCAAgC,EAAE,IAAI;EAG/D,MAAM,YAAY,iBAAiB;EACnC,MAAM,SAAS,QAAQ;EACvB,MAAM,YAAY,WAAW,WAAW,MAAM,IAAI;EAClD,MAAM,SAAS,wBAAwB,OAAO;EAC9C,MAAM,cAAc,2BAA2B;GAAE,SAAS;GAAW;GAAQ,CAAC;EAE9E,MAAM,UAAU,MAAM,0BAA0B,sBAAsB;GACpE;GACA,SAAS;GACT;GACA;GACD,EAAE;AAEH,MAAI,CAAC,SAAS;GACZ,MAAM,UAAU,gCAAgC,SAAS;AACzD,OAAI,CAAC,QAAQ,QACX,GAAE,OAAO,eAAe,OAAO,KAAK,KAAK,QAAQ,eAAe,IAAK,CAAC,CAAC;AAEzE,kBACE,yBACA;IAAE,IAAI;IAAO;IAAU,OAAO;IAAoB,EAClD,qDACD;AACD,UAAO,EAAE,KAAK;IAAE,OAAO;IAAqC,MAAM;IAAmB,EAAE,IAAI;;AAG7F,iBACE,yBACA;GAAE,IAAI;GAAM;GAAU,WAAW,WAAW,aAAa;GAAM,OAAO;GAAoB,EAC1F,6CACD;AACD,SAAO,EAAE,KAAK,QAAQ;GACtB;;AAGJ,SAAgB,qBAAqB,eAAqB,MAAoC;CAC5F,MAAM,EAAE,8BAA8B;CACtC,MAAM,SAAS,kBAAkB;CACjC,MAAM,sBAAsB,yCAAyC;AAErE,eAAc,IAAI,4BAA4B,OAAO,MAAM;AACzD,QAAM,2BAA2B,KAAK;EACtC,MAAM,SAAS,KAAK,QAAQ;EAC5B,MAAM,SAAS,OAAO,WAAW;EACjC,MAAM,UAAU,uBAAuB;GACrC;GACA,iBAAiB,OAAO;GACxB,iBAAiB,OAAO,UAAU;GACnC,CAAC;AACF,SAAO,EAAE,KAAK,QAAQ;GACtB;AAEF,eAAc,KAAK,+BAA+B,qBAAqB,OAAO,MAAM;EAClF,MAAM,QAAQ,oBAAoB,EAAE;AACpC,MAAI,CAAC,MAAO,QAAO,EAAE,KAAK,EAAE,OAAO,0BAA0B,EAAE,IAAI;EAEnE,MAAM,SAAS,KAAK,QAAQ;EAC5B,MAAM,cAAc,4BAA4B,OAAO;AACvD,MAAI,YAAY,OAAO,MACrB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;IAAE,SAAS,YAAY;IAAS,MAAM;IAAsB;GAAE,EAAE,IAAI;AAGxG,MAAI,YAAY,SAAS;GACvB,MAAM,aAAa,MAAM,KAAK,QAAQ,WAAW,OAAO;AACxD,OAAI,CAAC,WAAW,MACd,QAAO,EAAE,KACP;IAAE,IAAI;IAAO,OAAO;KAAE,SAAS,WAAW,SAAS;KAAyB,MAAM;KAAe;IAAE,EACnG,IACD;AAEH,kBACE,6BACA,EAAE,kBAAkB,iBAAiB,MAAM,CAAC,MAAM,GAAG,GAAG,EAAE,EAC1D,kDACD;;EAGH,MAAM,SAAS,OAAO,WAAW;EACjC,IAAI,UAAU,uBAAuB;GACnC,QAAQ,KAAK,QAAQ;GACrB,iBAAiB,OAAO;GACxB,iBAAiB,OAAO,UAAU;GACnC,CAAC;AAEF,MAAI,YAAY,QACd,WAAU;GACR,GAAG;GACH,cAAc;GACd,aAAa;GACd;AAGH,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,iBAAiB,YAAY;GAC7B;GACD,CAAC;GACF;AAEF,eAAc,KAAK,oBAAoB,qBAAqB,OAAO,MAAM;AACvE,QAAM,2BAA2B,KAAK;EACtC,MAAM,QAAQ,oBAAoB,EAAE;AACpC,MAAI,CAAC,MAAO,QAAO,EAAE,KAAK,EAAE,OAAO,0BAA0B,EAAE,IAAI;EAEnE,MAAM,EAAE,QAAQ,cAAc,qBAAqB;AACnD,iBACE,eACA;GACE,WAAW,UAAU,aAAa;GAClC,kBAAkB,iBAAiB,MAAM,CAAC,MAAM,GAAG,GAAG;GACvD,EACD,iCACD;AACD,SAAO,EAAE,KAAK;GAAE,eAAe;GAAQ,WAAW,UAAU,aAAa;GAAE,CAAC;GAC5E;AAEF,eAAc,IAAI,sBAAsB,OAAO,MAAM;AACnD,QAAM,2BAA2B,KAAK;EACtC,MAAM,SAAS,KAAK,QAAQ;AAC5B,SAAO,EAAE,KAAK,mBAAmB,QAAQ,OAAO,WAAW,CAAC,CAAC;GAC7D;AAEF,eAAc,KAAK,uBAAuB,qBAAqB,OAAO,MAAM;EAC1E,MAAM,QAAQ,oBAAoB,EAAE;AACpC,MAAI,CAAC,MAAO,QAAO,EAAE,KAAK,EAAE,OAAO,0BAA0B,EAAE,IAAI;EAEnE,MAAM,SAAS,KAAK,QAAQ;AAC5B,6BAA2B,OAAO;EAClC,MAAM,SAAS,MAAM,KAAK,QAAQ,WAAW,OAAO;AACpD,MAAI,CAAC,OAAO,MACV,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,OAAO,SAAS;GAAyB,EAAE,IAAI;EAEnF,MAAM,UAAU,sBAAsB,OAAO;AAC7C,iBACE,kBACA;GACE,gBAAgB,QAAQ;GACxB,kBAAkB,iBAAiB,MAAM,CAAC,MAAM,GAAG,GAAG;GACvD,EACD,0CACD;AACD,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,gBAAgB,QAAQ;IACxB,iBAAiB,QAAQ;IACzB,YAAY,QAAQ;IACpB,OAAO,QAAQ;IAChB;GACF,CAAC;GACF;AAEF,eAAc,KAAK,qBAAqB,qBAAqB,OAAO,MAAM;AACxE,QAAM,2BAA2B,MAAM,EAAE,OAAO,MAAM,CAAC;EACvD,MAAM,SAAS,KAAK,QAAQ;EAC5B,MAAM,QAAQ,oBAAoB,EAAE;AACpC,MAAI,CAAC,MAAO,QAAO,EAAE,KAAK,EAAE,OAAO,0BAA0B,EAAE,IAAI;AAEnE,MAAI;AACF,wBAAqB,OAAO;WACrB,KAAK;AACZ,OAAI,eAAe,oBAAoB;AACrC,mBACE,uBACA;KAAE,QAAQ;KAA8B,kBAAkB,iBAAiB,MAAM,CAAC,MAAM,GAAG,GAAG;KAAE,EAChG,wCACD;AACD,WAAO,EAAE,KAAK;KAAE,OAAO,IAAI;KAAS,MAAM;KAA8B,EAAE,IAAI;;AAEhF,SAAM;;EAIR,MAAM,OADU,OAAO,QACF,QAAQ;AAC7B,MAAI;GACF,MAAM,KAAK,MAAM,OAAO,MAAM,MAAM,MAAM;AAC1C,4BAAyB,QAAQ,KAAK;AACtC,SAAM,KAAK,QAAQ,WAAW,OAAO;GACrC,MAAM,SAAS,OAAO,WAAW;AACjC,UAAO,EAAE,KAAK;IACZ,WAAW,GAAG;IACd,WAAW,OAAO;IAClB,WAAW,GAAG;IACd,QAAQ,GAAG;IACZ,CAAC;WACK,KAAK;GACZ,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAChE,UAAO,EAAE,KAAK,EAAE,OAAO,SAAS,EAAE,IAAI;;GAExC;AAEF,eAAc,KAAK,oBAAoB,qBAAqB,OAAO,MAAM;AACvE,QAAM,2BAA2B,KAAK;EACtC,MAAM,SAAS,KAAK,QAAQ;EAC5B,IAAI,UAAU;AACd,MAAI;AAEF,cAAU,MADU,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE,EACnC,YAAY;UACrB;AACN,aAAU;;EAEZ,MAAM,EAAE,aAAa,MAAM,OAAO,KAAK,EAAE,SAAS,CAAC;AACnD,2BAAyB,QAAQ,MAAM;AACvC,QAAM,KAAK,QAAQ,WAAW,OAAO;AACrC,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM;GAAU,CAAC;GACrC;AAEF,eAAc,IAAI,kBAAkB,OAAO,MAAM;AAC/C,QAAM,2BAA2B,KAAK;EAEtC,MAAM,OADU,KAAK,QAAQ,cAAc,QACtB,QAAQ;EAC7B,MAAM,OAAO,4BAA4B,KAAK,QAAQ,cAAc;AAEpE,MAAI,CADU,oBAAoB,EACxB,CAAE,QAAO,EAAE,KAAK,EAAE,OAAO,0BAA0B,EAAE,IAAI;EACnE,MAAM,KAAK,MAAM,OAAO,QAAQ,MAAM,KAAK;AAC3C,SAAO,EAAE,KAAK,GAAG;GACjB;AAEF,eAAc,IAAI,gCAAgC,OAAO,MAAM;AAC7D,QAAM,2BAA2B,KAAK;AACtC,SAAO,EAAE,KAAK,EACZ,WAAW,EAAE,KAAK,qBAA8B,EACjD,CAAC;GACF;;;;AAKF,eAAc,KAAK,0CAA0C,2BAA2B,OAAO,MAAM;EACnG,MAAM,SAAS,KAAK,QAAQ;EAC5B,MAAM,qBAAqB,2CAA2C,OAAO;AAC7E,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP;IACA,QAAQ,qBAAsB,WAAsB;IACrD;GACF,CAAC;GACF"}

package/dist/src/gateway/hono/routes/workspace.js

@@ -1,10 +1,10 @@
-import { init_agent_scope, listAgentEntries, normalizeAgentId, resolveAgentHomeDir, resolveAgentWorkspaceDir, resolveDefaultAgentId } from "../../../agent/agent-scope.js";
-import { getWorkspacePath, init_schema } from "../../../config/schema.js";
-import { extractProfileAgentId } from "../../../config/agent-profile.js";
 import { createLogger } from "../../../utils/logger/index.js";
 import { init_logger } from "../../../utils/logger.js";
+import { init_agent_scope, listAgentEntries, normalizeAgentId, resolveAgentHomeDir, resolveAgentWorkspaceDir, resolveDefaultAgentId } from "../../../agent/agent-scope.js";
+import { extractProfileAgentId } from "../../../config/agent-profile.js";
 import { validateWritePath } from "../../../agent/sandbox/path-policy.js";
 import { resolveSafeInboundFilePath } from "../../../channels/attachments/inbound-persist.js";
+import { getWorkspacePath } from "../../../config/workspace-path-helpers.js";
 import { isPathUnderWorkspace, resolveWorkspaceSafePath, toWorkspaceRelativePosix } from "../../workspace-editor-path.js";
 import { resolveSafeTtsFilePath } from "../../../channels/attachments/outbound-tts-persist.js";
 import { buildFilePathClassifierContext, classifyFileLocation, displayNameForPath, fileRefSessionKeysMatch, resolveFileReferenceCandidate } from "../../file-path-classifier.js";
@@ -12,12 +12,11 @@ import { fileReferenceRegistry } from "../../file-reference-registry.js";
 import { resolveHeartbeatMdPath } from "../../workspace-heartbeat-path.js";
 import { listWorkspaceRelativeFilesFsFallback } from "../../workspace-fs-file-list.js";
 import { runRipgrepInDirectory, runRipgrepListFiles } from "../../workspace-ripgrep.js";
-import { basename, dirname, join, resolve } from "node:path";
-import { constants } from "node:fs";
 import { randomUUID } from "node:crypto";
+import { constants } from "node:fs";
 import { copyFile, link, mkdir, readFile, readdir, rename, stat, unlink, writeFile } from "node:fs/promises";
+import { basename, dirname, join, resolve } from "node:path";
 //#region src/gateway/hono/routes/workspace.ts
-init_schema();
 init_agent_scope();
 init_logger();
 const log = createLogger("HonoApp");
@@ -123,7 +122,7 @@ async function resolveEditorWorkspaceRootAsync(service, cfg, sessionKeyRaw, agen
 	if (sk) try {
 		return {
 			ok: true,
-			root: await service.getEffectiveWorkspacePathForSession(sk)
+			root: await service.sessions.getEffectiveWorkspacePath(sk)
 		};
 	} catch (err) {
 		const em = err instanceof Error ? err.message : String(err);