@xopcai/xopc 0.0.82 → 0.0.83

package/dist/src/gateway/hono/routes/mcp.js.map

@@ -1 +1 @@
-{"version":3,"file":"mcp.js","names":[],"sources":["../../../../../src/gateway/hono/routes/mcp.ts"],"sourcesContent":["import type { Hono } from 'hono';\nimport { getWorkspacePath } from '../../../config/schema.js';\nimport { normalizeConfiguredMcpServers, canonicalizeConfiguredMcpServer } from '../../../config/mcp-config-normalize.js';\nimport { loadMergedBundleMcpConfig } from '../../../agent/mcp/bundle-mcp-config.js';\nimport {\n  createBundleMcpToolRuntime,\n  listBundleMcpServerToolsForGateway,\n  mapBundleMcpToolsForGateway,\n} from '../../../agent/mcp/bundle-mcp-materialize.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\n\nexport function registerMcpRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  authenticated.get('/api/mcp/servers', (c) => {\n    const cfg = deps.service.currentConfig;\n    const workspaceDir = getWorkspacePath(cfg) || './workspace';\n    const merged = loadMergedBundleMcpConfig({\n      workspaceDir,\n      cfg,\n    });\n    return c.json({\n      ok: true,\n      payload: {\n        servers: Object.keys(merged.config.mcpServers).sort(),\n        configured: normalizeConfiguredMcpServers(cfg.mcp?.servers),\n      },\n    });\n  });\n\n  authenticated.get('/api/mcp/servers/:id/tools', async (c) => {\n    const id = c.req.param('id');\n    const cfg = deps.service.currentConfig;\n    const workspaceDir = getWorkspacePath(cfg) || './workspace';\n    try {\n      const tools = await listBundleMcpServerToolsForGateway({\n        workspaceDir,\n        cfg,\n        serverId: id,\n      });\n      return c.json({ ok: true, payload: { tools } });\n    } catch (err) {\n      return c.json(\n        { ok: false, error: err instanceof Error ? err.message : String(err) },\n        500,\n      );\n    }\n  });\n\n  authenticated.post('/api/mcp/servers/:id/test', async (c) => {\n    const id = c.req.param('id');\n    const cfg = deps.service.currentConfig;\n    const workspaceDir = getWorkspacePath(cfg) || './workspace';\n    const body = await c.req.json().catch(() => ({}));\n    const inlineServer =\n      body && typeof body === 'object' && !Array.isArray(body) && body.server && typeof body.server === 'object'\n        ? (body.server as Record<string, unknown>)\n        : undefined;\n    const servers = normalizeConfiguredMcpServers(cfg.mcp?.servers);\n    const mergedServers = loadMergedBundleMcpConfig({ workspaceDir, cfg }).config.mcpServers;\n    const knownServer =\n      inlineServer ??\n      (servers[id] as Record<string, unknown> | undefined) ??\n      (mergedServers[id] as Record<string, unknown> | undefined);\n    if (!knownServer) {\n      return c.json({ ok: false, error: `Unknown MCP server: ${id}` }, 404);\n    }\n    try {\n      const testCfg: typeof cfg = inlineServer\n        ? {\n            ...cfg,\n            mcp: {\n              ...cfg.mcp,\n              servers: {\n                [id]: canonicalizeConfiguredMcpServer(inlineServer),\n              },\n            },\n          }\n        : cfg;\n      const runtime = await createBundleMcpToolRuntime({\n        workspaceDir,\n        cfg: testCfg,\n      });\n      const tools = mapBundleMcpToolsForGateway(runtime.tools, id);\n      await runtime.dispose();\n      return c.json({ ok: true, payload: { serverId: id, toolCount: tools.length, tools } });\n    } catch (err) {\n      return c.json(\n        { ok: false, error: err instanceof Error ? err.message : String(err) },\n        500,\n      );\n    }\n  });\n\n  authenticated.post('/api/mcp/approvals/respond', async (c) => {\n    const body = await c.req.json().catch(() => ({}));\n    return c.json({ ok: true, payload: { acknowledged: true, body } });\n  });\n}\n"],"mappings":";;;;;aAC6D;AAU7D,SAAgB,kBAAkB,eAAqB,MAAoC;AACzF,eAAc,IAAI,qBAAqB,MAAM;EAC3C,MAAM,MAAM,KAAK,QAAQ;EAEzB,MAAM,SAAS,0BAA0B;GACvC,cAFmB,iBAAiB,IAAI,IAAI;GAG5C;GACD,CAAC;AACF,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,SAAS,OAAO,KAAK,OAAO,OAAO,WAAW,CAAC,MAAM;IACrD,YAAY,8BAA8B,IAAI,KAAK,QAAQ;IAC5D;GACF,CAAC;GACF;AAEF,eAAc,IAAI,8BAA8B,OAAO,MAAM;EAC3D,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK;EAC5B,MAAM,MAAM,KAAK,QAAQ;EACzB,MAAM,eAAe,iBAAiB,IAAI,IAAI;AAC9C,MAAI;GACF,MAAM,QAAQ,MAAM,mCAAmC;IACrD;IACA;IACA,UAAU;IACX,CAAC;AACF,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,OAAO;IAAE,CAAC;WACxC,KAAK;AACZ,UAAO,EAAE,KACP;IAAE,IAAI;IAAO,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;IAAE,EACtE,IACD;;GAEH;AAEF,eAAc,KAAK,6BAA6B,OAAO,MAAM;EAC3D,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK;EAC5B,MAAM,MAAM,KAAK,QAAQ;EACzB,MAAM,eAAe,iBAAiB,IAAI,IAAI;EAC9C,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,eACJ,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAI,KAAK,UAAU,OAAO,KAAK,WAAW,WAC7F,KAAK,SACN,KAAA;EACN,MAAM,UAAU,8BAA8B,IAAI,KAAK,QAAQ;EAC/D,MAAM,gBAAgB,0BAA0B;GAAE;GAAc;GAAK,CAAC,CAAC,OAAO;AAK9E,MAAI,EAHF,gBACC,QAAQ,OACR,cAAc,KAEf,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,uBAAuB;GAAM,EAAE,IAAI;AAEvE,MAAI;GAYF,MAAM,UAAU,MAAM,2BAA2B;IAC/C;IACA,KAb0B,eACxB;KACE,GAAG;KACH,KAAK;MACH,GAAG,IAAI;MACP,SAAS,GACN,KAAK,gCAAgC,aAAa,EACpD;MACF;KACF,GACD;IAIH,CAAC;GACF,MAAM,QAAQ,4BAA4B,QAAQ,OAAO,GAAG;AAC5D,SAAM,QAAQ,SAAS;AACvB,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS;KAAE,UAAU;KAAI,WAAW,MAAM;KAAQ;KAAO;IAAE,CAAC;WAC/E,KAAK;AACZ,UAAO,EAAE,KACP;IAAE,IAAI;IAAO,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;IAAE,EACtE,IACD;;GAEH;AAEF,eAAc,KAAK,8BAA8B,OAAO,MAAM;EAC5D,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;AACjD,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;IAAE,cAAc;IAAM;IAAM;GAAE,CAAC;GAClE"}
+{"version":3,"file":"mcp.js","names":[],"sources":["../../../../../src/gateway/hono/routes/mcp.ts"],"sourcesContent":["import type { Hono } from 'hono';\nimport { getWorkspacePath } from '../../../config/workspace-path-helpers.js';\nimport { normalizeConfiguredMcpServers, canonicalizeConfiguredMcpServer } from '../../../config/mcp-config-normalize.js';\nimport { loadMergedBundleMcpConfig } from '../../../agent/mcp/bundle-mcp-config.js';\nimport {\n  createBundleMcpToolRuntime,\n  listBundleMcpServerToolsForGateway,\n  mapBundleMcpToolsForGateway,\n} from '../../../agent/mcp/bundle-mcp-materialize.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\n\nexport function registerMcpRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  authenticated.get('/api/mcp/servers', (c) => {\n    const cfg = deps.service.currentConfig;\n    const workspaceDir = getWorkspacePath(cfg) || './workspace';\n    const merged = loadMergedBundleMcpConfig({\n      workspaceDir,\n      cfg,\n    });\n    return c.json({\n      ok: true,\n      payload: {\n        servers: Object.keys(merged.config.mcpServers).sort(),\n        configured: normalizeConfiguredMcpServers(cfg.mcp?.servers),\n      },\n    });\n  });\n\n  authenticated.get('/api/mcp/servers/:id/tools', async (c) => {\n    const id = c.req.param('id');\n    const cfg = deps.service.currentConfig;\n    const workspaceDir = getWorkspacePath(cfg) || './workspace';\n    try {\n      const tools = await listBundleMcpServerToolsForGateway({\n        workspaceDir,\n        cfg,\n        serverId: id,\n      });\n      return c.json({ ok: true, payload: { tools } });\n    } catch (err) {\n      return c.json(\n        { ok: false, error: err instanceof Error ? err.message : String(err) },\n        500,\n      );\n    }\n  });\n\n  authenticated.post('/api/mcp/servers/:id/test', async (c) => {\n    const id = c.req.param('id');\n    const cfg = deps.service.currentConfig;\n    const workspaceDir = getWorkspacePath(cfg) || './workspace';\n    const body = await c.req.json().catch(() => ({}));\n    const inlineServer =\n      body && typeof body === 'object' && !Array.isArray(body) && body.server && typeof body.server === 'object'\n        ? (body.server as Record<string, unknown>)\n        : undefined;\n    const servers = normalizeConfiguredMcpServers(cfg.mcp?.servers);\n    const mergedServers = loadMergedBundleMcpConfig({ workspaceDir, cfg }).config.mcpServers;\n    const knownServer =\n      inlineServer ??\n      (servers[id] as Record<string, unknown> | undefined) ??\n      (mergedServers[id] as Record<string, unknown> | undefined);\n    if (!knownServer) {\n      return c.json({ ok: false, error: `Unknown MCP server: ${id}` }, 404);\n    }\n    try {\n      const testCfg: typeof cfg = inlineServer\n        ? {\n            ...cfg,\n            mcp: {\n              ...cfg.mcp,\n              servers: {\n                [id]: canonicalizeConfiguredMcpServer(inlineServer),\n              },\n            },\n          }\n        : cfg;\n      const runtime = await createBundleMcpToolRuntime({\n        workspaceDir,\n        cfg: testCfg,\n      });\n      const tools = mapBundleMcpToolsForGateway(runtime.tools, id);\n      await runtime.dispose();\n      return c.json({ ok: true, payload: { serverId: id, toolCount: tools.length, tools } });\n    } catch (err) {\n      return c.json(\n        { ok: false, error: err instanceof Error ? err.message : String(err) },\n        500,\n      );\n    }\n  });\n\n  authenticated.post('/api/mcp/approvals/respond', async (c) => {\n    const body = await c.req.json().catch(() => ({}));\n    return c.json({ ok: true, payload: { acknowledged: true, body } });\n  });\n}\n"],"mappings":";;;;;AAWA,SAAgB,kBAAkB,eAAqB,MAAoC;AACzF,eAAc,IAAI,qBAAqB,MAAM;EAC3C,MAAM,MAAM,KAAK,QAAQ;EAEzB,MAAM,SAAS,0BAA0B;GACvC,cAFmB,iBAAiB,IAAI,IAAI;GAG5C;GACD,CAAC;AACF,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,SAAS,OAAO,KAAK,OAAO,OAAO,WAAW,CAAC,MAAM;IACrD,YAAY,8BAA8B,IAAI,KAAK,QAAQ;IAC5D;GACF,CAAC;GACF;AAEF,eAAc,IAAI,8BAA8B,OAAO,MAAM;EAC3D,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK;EAC5B,MAAM,MAAM,KAAK,QAAQ;EACzB,MAAM,eAAe,iBAAiB,IAAI,IAAI;AAC9C,MAAI;GACF,MAAM,QAAQ,MAAM,mCAAmC;IACrD;IACA;IACA,UAAU;IACX,CAAC;AACF,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,OAAO;IAAE,CAAC;WACxC,KAAK;AACZ,UAAO,EAAE,KACP;IAAE,IAAI;IAAO,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;IAAE,EACtE,IACD;;GAEH;AAEF,eAAc,KAAK,6BAA6B,OAAO,MAAM;EAC3D,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK;EAC5B,MAAM,MAAM,KAAK,QAAQ;EACzB,MAAM,eAAe,iBAAiB,IAAI,IAAI;EAC9C,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,eACJ,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,KAAK,IAAI,KAAK,UAAU,OAAO,KAAK,WAAW,WAC7F,KAAK,SACN,KAAA;EACN,MAAM,UAAU,8BAA8B,IAAI,KAAK,QAAQ;EAC/D,MAAM,gBAAgB,0BAA0B;GAAE;GAAc;GAAK,CAAC,CAAC,OAAO;AAK9E,MAAI,EAHF,gBACC,QAAQ,OACR,cAAc,KAEf,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,uBAAuB;GAAM,EAAE,IAAI;AAEvE,MAAI;GAYF,MAAM,UAAU,MAAM,2BAA2B;IAC/C;IACA,KAb0B,eACxB;KACE,GAAG;KACH,KAAK;MACH,GAAG,IAAI;MACP,SAAS,GACN,KAAK,gCAAgC,aAAa,EACpD;MACF;KACF,GACD;IAIH,CAAC;GACF,MAAM,QAAQ,4BAA4B,QAAQ,OAAO,GAAG;AAC5D,SAAM,QAAQ,SAAS;AACvB,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS;KAAE,UAAU;KAAI,WAAW,MAAM;KAAQ;KAAO;IAAE,CAAC;WAC/E,KAAK;AACZ,UAAO,EAAE,KACP;IAAE,IAAI;IAAO,OAAO,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;IAAE,EACtE,IACD;;GAEH;AAEF,eAAc,KAAK,8BAA8B,OAAO,MAAM;EAC5D,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;AACjD,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;IAAE,cAAc;IAAM;IAAM;GAAE,CAAC;GAClE"}

package/dist/src/gateway/hono/routes/models.js

@@ -1,8 +1,8 @@
 import { resolveModelsJsonPath } from "../../../config/paths.js";
+import { CredentialResolver, init_credentials } from "../../../auth/credentials.js";
 import { init_resolve_config_value, testApiKeyResolution } from "../../../config/resolve-config-value.js";
 import { init_models_json, loadModelsJson, saveModelsJson, validateModelsConfig } from "../../../config/models-json.js";
 import { getModelRegistry } from "../../../providers/model-registry.js";
-import { CredentialResolver, init_credentials } from "../../../auth/credentials.js";
 import { getProviderRegistry, init_plugin_registry } from "../../../providers/plugin-registry.js";
 import { PROVIDER_META, getAllModels, getAllProviders, getAvailableModels, getProviderActiveKeySource, init_providers, isProviderConfigured } from "../../../providers/index.js";
 import { getImageGenerationProvider } from "../../../agent/image/generation/provider-registry.js";

package/dist/src/gateway/hono/routes/sessions.js

@@ -27,10 +27,10 @@ function registerSessionsRoutes(authenticated, deps) {
 				peerId: body.chat_id
 			});
 			await service.sessionManagerInstance.saveMessages(sessionKey, []);
-			const session = await service.getSession(sessionKey);
+			const session = await service.sessions.getSession(sessionKey);
 			return c.json({ session }, 201);
 		}
-		const emptySession = (await service.listSessions({
+		const emptySession = (await service.sessions.listSessions({
 			channel,
 			limit: 50,
 			sortBy: "updatedAt",
@@ -40,7 +40,7 @@ function registerSessionsRoutes(authenticated, deps) {
 			return parseSessionKey(s.key)?.agentId === agentId;
 		});
 		if (emptySession) {
-			const session = await service.getSession(emptySession.key);
+			const session = await service.sessions.getSession(emptySession.key);
 			return c.json({
 				session,
 				reused: true
@@ -55,14 +55,14 @@ function registerSessionsRoutes(authenticated, deps) {
 			peerId: chatId
 		});
 		await service.sessionManagerInstance.saveMessages(sessionKey, []);
-		const session = await service.getSession(sessionKey);
+		const session = await service.sessions.getSession(sessionKey);
 		return c.json({ session }, 201);
 	});
 	authenticated.get("/api/sessions", async (c) => {
 		const blocked = ensureGatewayReadyForSessions(c, service, "sessions.list");
 		if (blocked) return blocked;
 		const query = c.req.query();
-		const result = await service.listSessions({
+		const result = await service.sessions.listSessions({
 			status: query.status,
 			search: query.search,
 			channel: query.channel,
@@ -72,12 +72,12 @@ function registerSessionsRoutes(authenticated, deps) {
 		return c.json(result);
 	});
 	authenticated.get("/api/sessions/stats", async (c) => {
-		const result = await service.getSessionStats();
+		const result = await service.sessions.stats();
 		return c.json(result);
 	});
 	authenticated.get("/api/sessions/chat-ids", async (c) => {
 		const channel = c.req.query("channel");
-		const chatIds = await service.getSessionChatIds(channel || void 0);
+		const chatIds = await service.sessions.chatIds(channel || void 0);
 		return c.json({
 			ok: true,
 			payload: { chatIds }
@@ -87,18 +87,18 @@ function registerSessionsRoutes(authenticated, deps) {
 		const blocked = ensureGatewayReadyForSessions(c, service, "sessions.run");
 		if (blocked) return blocked;
 		const key = c.req.param("key");
-		if (!await service.getSession(key)) return c.json({
+		if (!await service.sessions.getSession(key)) return c.json({
 			ok: false,
 			error: "Session not found"
 		}, 404);
 		return c.json({
 			ok: true,
-			payload: service.getSessionActiveRun(key)
+			payload: service.sessions.getActiveRun(key)
 		});
 	});
 	authenticated.get("/api/sessions/:key/agent-config", async (c) => {
 		const key = c.req.param("key");
-		const payload = await service.getSessionAgentConfig(key);
+		const payload = await service.sessions.getAgentConfig(key);
 		return c.json({
 			ok: true,
 			payload
@@ -107,7 +107,7 @@ function registerSessionsRoutes(authenticated, deps) {
 	authenticated.patch("/api/sessions/:key/agent-config", async (c) => {
 		const key = c.req.param("key");
 		const body = await c.req.json().catch(() => ({}));
-		const result = await service.patchSessionAgentConfig(key, body);
+		const result = await service.sessions.patchAgentConfig(key, body);
 		if (!result.ok) return c.json({
 			ok: false,
 			error: result.error
@@ -125,7 +125,7 @@ function registerSessionsRoutes(authenticated, deps) {
 		const offsetRaw = c.req.query("offset");
 		const parsedOffset = offsetRaw ? Number.parseInt(offsetRaw, 10) : 0;
 		const offset = Number.isFinite(parsedOffset) ? Math.max(0, parsedOffset) : 0;
-		const result = await service.getSessionMessagePage(key, {
+		const result = await service.sessions.getMessagePage(key, {
 			limit,
 			offset,
 			...before ? { before } : {}
@@ -152,7 +152,7 @@ function registerSessionsRoutes(authenticated, deps) {
 		const parsedLimit = limitRaw ? Number.parseInt(limitRaw, 10) : 50;
 		const offset = Number.isFinite(parsedOffset) ? Math.max(0, parsedOffset) : 0;
 		const limit = Number.isFinite(parsedLimit) ? Math.min(200, Math.max(1, parsedLimit)) : 50;
-		const result = await service.getSessionMessagePage(key, {
+		const result = await service.sessions.getMessagePage(key, {
 			offset,
 			limit,
 			...before ? { before } : {}
@@ -183,7 +183,7 @@ function registerSessionsRoutes(authenticated, deps) {
 			ok: false,
 			error: "Session not found"
 		}, 404);
-		const checkpoints = await service.listSessionCompactionCheckpoints(key);
+		const checkpoints = await service.sessions.listCompactionCheckpoints(key);
 		return c.json({
 			ok: true,
 			payload: { checkpoints }
@@ -192,7 +192,7 @@ function registerSessionsRoutes(authenticated, deps) {
 	authenticated.get("/api/sessions/:key/compaction/checkpoints/:checkpointId", async (c) => {
 		const key = c.req.param("key");
 		const checkpointId = c.req.param("checkpointId");
-		const checkpoint = await service.getSessionCompactionCheckpoint(key, checkpointId);
+		const checkpoint = await service.sessions.getCompactionCheckpoint(key, checkpointId);
 		if (!checkpoint) return c.json({
 			ok: false,
 			error: "Checkpoint not found"
@@ -211,7 +211,7 @@ function registerSessionsRoutes(authenticated, deps) {
 			error: "checkpointId required"
 		}, 400);
 		try {
-			await service.restoreSessionCompactionCheckpoint(key, checkpointId);
+			await service.sessions.restoreCompactionCheckpoint(key, checkpointId);
 		} catch (err) {
 			const msg = err instanceof Error ? err.message : String(err);
 			if (msg.includes("not found") || msg.includes("Invalid")) return c.json({
@@ -223,7 +223,7 @@ function registerSessionsRoutes(authenticated, deps) {
 				error: msg
 			}, 500);
 		}
-		const session = await service.getSession(key);
+		const session = await service.sessions.getSession(key);
 		if (!session) return c.json({
 			ok: false,
 			error: "Session not found"
@@ -235,14 +235,14 @@ function registerSessionsRoutes(authenticated, deps) {
 	});
 	authenticated.post("/api/sessions/:key/compaction/run", async (c) => {
 		const key = c.req.param("key");
-		if (!await service.getSession(key)) return c.json({
+		if (!await service.sessions.getSession(key)) return c.json({
 			ok: false,
 			error: "Session not found"
 		}, 404);
 		const body = await c.req.json().catch(() => ({}));
 		const instructions = typeof body.instructions === "string" ? body.instructions : void 0;
 		const force = typeof body.force === "boolean" ? body.force : true;
-		const result = await service.runSessionCompaction(key, {
+		const result = await service.sessions.runCompaction(key, {
 			instructions,
 			force
 		});
@@ -266,7 +266,7 @@ function registerSessionsRoutes(authenticated, deps) {
 			const parsedLimit = limitRaw ? Number.parseInt(limitRaw, 10) : 50;
 			const offset = Number.isFinite(parsedOffset) ? Math.max(0, parsedOffset) : 0;
 			const limit = Number.isFinite(parsedLimit) ? Math.min(200, Math.max(1, parsedLimit)) : 50;
-			const result = await service.getSessionMessagePage(key, {
+			const result = await service.sessions.getMessagePage(key, {
 				offset,
 				limit,
 				includeTranscriptSummary: includeTranscript,
@@ -275,7 +275,7 @@ function registerSessionsRoutes(authenticated, deps) {
 			if (!result) return c.json({ error: "Session not found" }, 404);
 			return c.json(result);
 		}
-		const session = await service.getSession(key, {
+		const session = await service.sessions.getSession(key, {
 			includeTranscriptSummary: includeTranscript,
 			includeTranscriptRows
 		});
@@ -290,12 +290,12 @@ function registerSessionsRoutes(authenticated, deps) {
 		if (Array.isArray(body.tags)) patch.tags = body.tags;
 		if (typeof body.replaceTags === "boolean") patch.replaceTags = body.replaceTags;
 		if (body.customData !== void 0 && typeof body.customData === "object" && body.customData !== null) patch.customData = body.customData;
-		const result = await service.patchSession(key, patch);
+		const result = await service.sessions.patch(key, patch);
 		if (result.ok === false) return c.json({
 			ok: false,
 			error: result.error
 		}, 404);
-		const session = await service.getSession(key);
+		const session = await service.sessions.getSession(key);
 		return c.json({
 			ok: true,
 			session
@@ -304,7 +304,7 @@ function registerSessionsRoutes(authenticated, deps) {
 	authenticated.get("/api/sessions/:key/export", async (c) => {
 		const key = c.req.param("key");
 		const format = c.req.query("format") || "json";
-		const result = await service.exportSession(key, format);
+		const result = await service.sessions.export(key, format);
 		return c.json(result);
 	});
 	authenticated.delete("/api/sessions/:key/messages", async (c) => {
@@ -333,38 +333,38 @@ function registerSessionsRoutes(authenticated, deps) {
 	});
 	authenticated.delete("/api/sessions/:key", async (c) => {
 		const key = c.req.param("key");
-		const result = await service.deleteSession(key);
+		const result = await service.sessions.delete(key);
 		return c.json(result);
 	});
 	authenticated.post("/api/sessions/:key/archive", async (c) => {
 		const key = c.req.param("key");
-		const result = await service.archiveSession(key);
+		const result = await service.sessions.archive(key);
 		return c.json(result);
 	});
 	authenticated.post("/api/sessions/:key/unarchive", async (c) => {
 		const key = c.req.param("key");
-		const result = await service.unarchiveSession(key);
+		const result = await service.sessions.unarchive(key);
 		return c.json(result);
 	});
 	authenticated.post("/api/sessions/:key/pin", async (c) => {
 		const key = c.req.param("key");
-		const result = await service.pinSession(key);
+		const result = await service.sessions.pin(key);
 		return c.json(result);
 	});
 	authenticated.post("/api/sessions/:key/unpin", async (c) => {
 		const key = c.req.param("key");
-		const result = await service.unpinSession(key);
+		const result = await service.sessions.unpin(key);
 		return c.json(result);
 	});
 	authenticated.post("/api/sessions/:key/rename", async (c) => {
 		const key = c.req.param("key");
 		const { name } = await c.req.json();
-		const result = await service.renameSession(key, name);
+		const result = await service.sessions.rename(key, name);
 		return c.json(result);
 	});
 	authenticated.get("/api/subagents", async (c) => {
 		const query = c.req.query();
-		const result = await service.listSubagents({
+		const result = await service.sessions.listSubagents({
 			limit: query.limit ? parseInt(query.limit) : void 0,
 			offset: query.offset ? parseInt(query.offset) : void 0
 		});
@@ -375,7 +375,7 @@ function registerSessionsRoutes(authenticated, deps) {
 		if (!key.startsWith("subagent:")) return c.json({ error: "Not a subagent session" }, 400);
 		const includeRaw = c.req.query("include") ?? "";
 		const includeSet = new Set(includeRaw.split(",").map((s) => s.trim()).filter(Boolean));
-		const session = await service.getSession(key, {
+		const session = await service.sessions.getSession(key, {
 			includeTranscriptSummary: includeSet.has("transcript"),
 			includeTranscriptRows: includeSet.has("transcriptRows")
 		});

package/dist/src/gateway/hono/routes/sessions.js.map

@@ -1 +1 @@
-{"version":3,"file":"sessions.js","names":[],"sources":["../../../../../src/gateway/hono/routes/sessions.ts"],"sourcesContent":["import type { Hono } from 'hono';\n\nimport { buildSessionKey, parseSessionKey } from '../../../routing/session-key.js';\nimport { agentExists, getDefaultAgentId } from '../../../routing/resolve-route.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\nimport { messagesToClientHistory } from '../../../session/client-history.js';\nimport { computeUserRoundDeleteRange } from '../../../session/user-round-delete.js';\nimport { respondStartupUnavailable } from '../lib/startup-unavailable.js';\nimport type { StartupUnavailableGatewayMethod } from '../../startup-readiness.js';\n\ntype SessionsStartupMethod = StartupUnavailableGatewayMethod;\n\nfunction ensureGatewayReadyForSessions(\n  c: Parameters<typeof respondStartupUnavailable>[0],\n  service: AuthenticatedRouteDeps['service'],\n  method: SessionsStartupMethod,\n): Response | null {\n  if (service.isGatewayReady()) {\n    return null;\n  }\n  return respondStartupUnavailable(c, method);\n}\n\nexport function registerSessionsRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  const { service } = deps;\n\n  // ========== Session REST API (/api/sessions) ==========\n\n  // POST /api/sessions - Create new session (reuses empty sessions)\n  authenticated.post('/api/sessions', async (c) => {\n    const body = await c.req.json().catch(() => ({}));\n    const channel = body.channel || 'webchat';\n    const routingCfg = service.currentConfig;\n    let agentId =\n      typeof body.agentId === 'string' && body.agentId.trim()\n        ? body.agentId.trim().toLowerCase()\n        : getDefaultAgentId(routingCfg);\n    if (!agentExists(agentId, routingCfg)) {\n      agentId = getDefaultAgentId(routingCfg);\n    }\n\n    // If a specific chat_id is provided, use it (for advanced use cases)\n    // Otherwise, try to find and reuse an existing empty session\n    if (body.chat_id) {\n      const sessionKey = buildSessionKey({\n        agentId,\n        source: channel,\n        accountId: 'default',\n        peerKind: 'direct',\n        peerId: body.chat_id,\n      });\n\n      await service.sessionManagerInstance.saveMessages(sessionKey, []);\n      const session = await service.getSession(sessionKey);\n      return c.json({ session }, 201);\n    }\n    \n    // Look for existing empty sessions to reuse\n    const existingSessions = await service.listSessions({\n      channel,\n      limit: 50,\n      sortBy: 'updatedAt',\n      sortOrder: 'desc',\n    });\n    \n    // Reuse an empty session only when it matches the requested agent (session key embeds agent id).\n    const emptySession = existingSessions.items.find((s) => {\n      if (s.messageCount !== 0) return false;\n      const parsed = parseSessionKey(s.key);\n      return parsed?.agentId === agentId;\n    });\n    \n    if (emptySession) {\n      // Return existing empty session instead of creating a new one\n      const session = await service.getSession(emptySession.key);\n      return c.json({ session, reused: true }, 200);\n    }\n    \n    // No empty session found, create a new one\n    const chatId = `chat_${Date.now()}`;\n    const sessionKey = buildSessionKey({\n      agentId,\n      source: channel,\n      accountId: 'default',\n      peerKind: 'direct',\n      peerId: chatId,\n    });\n\n    await service.sessionManagerInstance.saveMessages(sessionKey, []);\n\n    const session = await service.getSession(sessionKey);\n    return c.json({ session }, 201);\n  });\n\n  // GET /api/sessions - List sessions\n  authenticated.get('/api/sessions', async (c) => {\n    const blocked = ensureGatewayReadyForSessions(c, service, 'sessions.list');\n    if (blocked) {\n      return blocked;\n    }\n    const query = c.req.query();\n    const result = await service.listSessions({\n      status: query.status as any,\n      search: query.search,\n      channel: query.channel,\n      limit: query.limit ? parseInt(query.limit) : undefined,\n      offset: query.offset ? parseInt(query.offset) : undefined,\n    });\n    return c.json(result);\n  });\n\n  // GET /api/sessions/stats - Get session stats (must be before /:key)\n  authenticated.get('/api/sessions/stats', async (c) => {\n    const result = await service.getSessionStats();\n    return c.json(result);\n  });\n\n  // GET /api/sessions/chat-ids - Get unique chat IDs from sessions (must be before /:key)\n  authenticated.get('/api/sessions/chat-ids', async (c) => {\n    const channel = c.req.query('channel');\n    const chatIds = await service.getSessionChatIds(channel || undefined);\n    return c.json({ ok: true, payload: { chatIds } });\n  });\n\n  // GET /api/sessions/:key/run — read-only active webchat agent run (for UI resume)\n  authenticated.get('/api/sessions/:key/run', async (c) => {\n    const blocked = ensureGatewayReadyForSessions(c, service, 'sessions.run');\n    if (blocked) {\n      return blocked;\n    }\n    const key = c.req.param('key');\n    const session = await service.getSession(key);\n    if (!session) {\n      return c.json({ ok: false, error: 'Session not found' }, 404);\n    }\n    return c.json({ ok: true, payload: service.getSessionActiveRun(key) });\n  });\n\n  // GET /api/sessions/:key/agent-config — resolved session agent settings (thinking, etc.)\n  authenticated.get('/api/sessions/:key/agent-config', async (c) => {\n    const key = c.req.param('key');\n    const payload = await service.getSessionAgentConfig(key);\n    return c.json({ ok: true, payload });\n  });\n\n  authenticated.patch('/api/sessions/:key/agent-config', async (c) => {\n    const key = c.req.param('key');\n    const body = await c.req.json().catch(() => ({}));\n    const result = await service.patchSessionAgentConfig(key, body);\n    if (!result.ok) {\n      return c.json({ ok: false, error: result.error }, 400);\n    }\n    return c.json({ ok: true });\n  });\n\n  // GET /api/sessions/:key/messages — flattened transcript for TUI / clients\n  authenticated.get('/api/sessions/:key/messages', async (c) => {\n    const blocked = ensureGatewayReadyForSessions(c, service, 'sessions.messages');\n    if (blocked) {\n      return blocked;\n    }\n    const key = c.req.param('key');\n    const limitRaw = c.req.query('limit');\n    const parsedLimit = limitRaw ? Number.parseInt(limitRaw, 10) : undefined;\n    const limit =\n      parsedLimit !== undefined && Number.isFinite(parsedLimit)\n        ? Math.min(500, Math.max(1, parsedLimit))\n        : undefined;\n\n    const before = c.req.query('before')?.trim();\n    const offsetRaw = c.req.query('offset');\n    const parsedOffset = offsetRaw ? Number.parseInt(offsetRaw, 10) : 0;\n    const offset = Number.isFinite(parsedOffset) ? Math.max(0, parsedOffset) : 0;\n\n    const result = await service.getSessionMessagePage(key, {\n      limit,\n      offset,\n      ...(before ? { before } : {}),\n    });\n    if (!result) {\n      return c.json({ ok: false, error: 'Session not found' }, 404);\n    }\n\n    const messages = messagesToClientHistory(result.session.messages, { limit });\n    return c.json({\n      ok: true,\n      payload: { messages },\n      pagination: result.pagination,\n    });\n  });\n\n  // GET /api/sessions/:key/history — UI chat history page from the newest tail.\n  authenticated.get('/api/sessions/:key/history', async (c) => {\n    const blocked = ensureGatewayReadyForSessions(c, service, 'sessions.history');\n    if (blocked) {\n      return blocked;\n    }\n    const key = c.req.param('key');\n    const offsetRaw = c.req.query('offset');\n    const limitRaw = c.req.query('limit');\n    const before = c.req.query('before')?.trim();\n    const parsedOffset = offsetRaw ? Number.parseInt(offsetRaw, 10) : 0;\n    const parsedLimit = limitRaw ? Number.parseInt(limitRaw, 10) : 50;\n    const offset = Number.isFinite(parsedOffset) ? Math.max(0, parsedOffset) : 0;\n    const limit = Number.isFinite(parsedLimit) ? Math.min(200, Math.max(1, parsedLimit)) : 50;\n    const result = await service.getSessionMessagePage(key, {\n      offset,\n      limit,\n      ...(before ? { before } : {}),\n    });\n\n    if (!result) {\n      return c.json({ error: 'Session not found' }, 404);\n    }\n\n    return c.json(result);\n  });\n\n  // POST /api/sessions/:key/transcript/context — append persisted-only `kind: 'context'` row (not in LLM context)\n  authenticated.post('/api/sessions/:key/transcript/context', async (c) => {\n    const key = c.req.param('key');\n    const meta = await service.sessionManagerInstance.getSessionMetadata(key);\n    if (!meta) {\n      return c.json({ ok: false, error: 'Session not found' }, 404);\n    }\n    const body = await c.req.json().catch(() => ({}));\n    const id = typeof body.id === 'string' && body.id.trim() ? body.id.trim() : undefined;\n    const text = typeof body.text === 'string' ? body.text : undefined;\n    const data =\n      body.data !== undefined && typeof body.data === 'object' && body.data !== null && !Array.isArray(body.data)\n        ? (body.data as Record<string, unknown>)\n        : undefined;\n    await service.sessionManagerInstance.appendTranscriptContextEntry(key, { id, text, data });\n    return c.json({ ok: true });\n  });\n\n  // GET /api/sessions/:key/compaction/checkpoints — list pre-compaction snapshots (OpenClaw-style)\n  authenticated.get('/api/sessions/:key/compaction/checkpoints', async (c) => {\n    const key = c.req.param('key');\n    const meta = await service.sessionManagerInstance.getSessionMetadata(key);\n    if (!meta) {\n      return c.json({ ok: false, error: 'Session not found' }, 404);\n    }\n    const checkpoints = await service.listSessionCompactionCheckpoints(key);\n    return c.json({ ok: true, payload: { checkpoints } });\n  });\n\n  authenticated.get('/api/sessions/:key/compaction/checkpoints/:checkpointId', async (c) => {\n    const key = c.req.param('key');\n    const checkpointId = c.req.param('checkpointId');\n    const checkpoint = await service.getSessionCompactionCheckpoint(key, checkpointId);\n    if (!checkpoint) {\n      return c.json({ ok: false, error: 'Checkpoint not found' }, 404);\n    }\n    return c.json({ ok: true, payload: { checkpoint } });\n  });\n\n  authenticated.post('/api/sessions/:key/compaction/restore', async (c) => {\n    const key = c.req.param('key');\n    const body = await c.req.json().catch(() => ({}));\n    const checkpointId = typeof body.checkpointId === 'string' ? body.checkpointId.trim() : '';\n    if (!checkpointId) {\n      return c.json({ ok: false, error: 'checkpointId required' }, 400);\n    }\n    try {\n      await service.restoreSessionCompactionCheckpoint(key, checkpointId);\n    } catch (err) {\n      const msg = err instanceof Error ? err.message : String(err);\n      if (msg.includes('not found') || msg.includes('Invalid')) {\n        return c.json({ ok: false, error: msg }, 404);\n      }\n      return c.json({ ok: false, error: msg }, 500);\n    }\n    const session = await service.getSession(key);\n    if (!session) {\n      return c.json({ ok: false, error: 'Session not found' }, 404);\n    }\n    return c.json({ ok: true, session });\n  });\n\n  authenticated.post('/api/sessions/:key/compaction/run', async (c) => {\n    const key = c.req.param('key');\n    const session = await service.getSession(key);\n    if (!session) {\n      return c.json({ ok: false, error: 'Session not found' }, 404);\n    }\n    const body = await c.req.json().catch(() => ({}));\n    const instructions = typeof body.instructions === 'string' ? body.instructions : undefined;\n    const force = typeof body.force === 'boolean' ? body.force : true;\n    const result = await service.runSessionCompaction(key, { instructions, force });\n    return c.json({ ok: true, payload: { result } });\n  });\n\n  // GET /api/sessions/:key - Get single session (must be after /stats and /chat-ids)\n  authenticated.get('/api/sessions/:key', async (c) => {\n    const key = c.req.param('key');\n    const includeRaw = c.req.query('include') ?? '';\n    const includeSet = new Set(\n      includeRaw\n        .split(',')\n        .map((s) => s.trim())\n        .filter(Boolean),\n    );\n    const includeTranscript = includeSet.has('transcript');\n    const includeTranscriptRows = includeSet.has('transcriptRows');\n    const offsetRaw = c.req.query('offset');\n    const limitRaw = c.req.query('limit');\n    const hasPagingQuery = offsetRaw !== undefined || limitRaw !== undefined;\n\n    if (hasPagingQuery) {\n      const blocked = ensureGatewayReadyForSessions(c, service, 'sessions.history');\n      if (blocked) {\n        return blocked;\n      }\n      const parsedOffset = offsetRaw ? Number.parseInt(offsetRaw, 10) : 0;\n      const parsedLimit = limitRaw ? Number.parseInt(limitRaw, 10) : 50;\n      const offset = Number.isFinite(parsedOffset) ? Math.max(0, parsedOffset) : 0;\n      const limit = Number.isFinite(parsedLimit) ? Math.min(200, Math.max(1, parsedLimit)) : 50;\n      const result = await service.getSessionMessagePage(key, {\n        offset,\n        limit,\n        includeTranscriptSummary: includeTranscript,\n        includeTranscriptRows,\n      });\n      if (!result) {\n        return c.json({ error: 'Session not found' }, 404);\n      }\n      return c.json(result);\n    }\n\n    const session = await service.getSession(key, {\n      includeTranscriptSummary: includeTranscript,\n      includeTranscriptRows,\n    });\n    if (!session) {\n      return c.json({ error: 'Session not found' }, 404);\n    }\n    return c.json({ session });\n  });\n\n  // PATCH /api/sessions/:key - Partial metadata (name, tags, customData); OpenClaw-style patch subset\n  authenticated.patch('/api/sessions/:key', async (c) => {\n    const key = c.req.param('key');\n    const body = await c.req.json().catch(() => ({}));\n    const patch: {\n      name?: string;\n      tags?: string[];\n      replaceTags?: boolean;\n      customData?: Record<string, unknown>;\n    } = {};\n    if (typeof body.name === 'string') {\n      patch.name = body.name;\n    }\n    if (Array.isArray(body.tags)) {\n      patch.tags = body.tags;\n    }\n    if (typeof body.replaceTags === 'boolean') {\n      patch.replaceTags = body.replaceTags;\n    }\n    if (body.customData !== undefined && typeof body.customData === 'object' && body.customData !== null) {\n      patch.customData = body.customData as Record<string, unknown>;\n    }\n    const result = await service.patchSession(key, patch);\n    if (result.ok === false) {\n      return c.json({ ok: false, error: result.error }, 404);\n    }\n    const session = await service.getSession(key);\n    return c.json({ ok: true, session });\n  });\n\n  // GET /api/sessions/:key/export - Export session (must be before /:key)\n  authenticated.get('/api/sessions/:key/export', async (c) => {\n    const key = c.req.param('key');\n    const format = c.req.query('format') as any || 'json';\n    const result = await service.exportSession(key, format);\n    return c.json(result);\n  });\n\n  // DELETE /api/sessions/:key/messages — delete LLM rows by range or by user turn.\n  // `userRoundIndex` (0-based among user messages) removes the user row and every following\n  // assistant / tool / toolResult row until the next user. Prefer this from the web console so\n  // tool loops are not left orphaned after retry/delete.\n  authenticated.delete('/api/sessions/:key/messages', async (c) => {\n    const key = c.req.param('key');\n    const body = await c.req.json().catch(() => ({}));\n    const loaded = await service.sessionManagerInstance.loadMessages(key);\n    if (!loaded) {\n      return c.json({ error: 'Session not found' }, 404);\n    }\n\n    let startIndex = typeof body.startIndex === 'number' ? body.startIndex : -1;\n    let count = typeof body.count === 'number' ? body.count : 0;\n    const userRoundIndex =\n      typeof body.userRoundIndex === 'number' ? body.userRoundIndex : undefined;\n\n    if (userRoundIndex !== undefined) {\n      const range = computeUserRoundDeleteRange(loaded, userRoundIndex);\n      if (!range) {\n        return c.json({ error: 'User round index out of range' }, 400);\n      }\n      startIndex = range.startIndex;\n      count = range.count;\n    }\n\n    if (startIndex < 0 || count <= 0) {\n      return c.json({ error: 'Invalid startIndex or count' }, 400);\n    }\n    if (startIndex >= loaded.length) {\n      return c.json({ error: 'Index out of range' }, 400);\n    }\n    const deleteCount = Math.min(count, loaded.length - startIndex);\n    const next = loaded.slice(0, startIndex).concat(loaded.slice(startIndex + deleteCount));\n    await service.sessionManagerInstance.saveMessages(key, next);\n    return c.json({ ok: true, deleted: deleteCount });\n  });\n\n  // DELETE /api/sessions/:key - Delete session\n  authenticated.delete('/api/sessions/:key', async (c) => {\n    const key = c.req.param('key');\n    const result = await service.deleteSession(key);\n    return c.json(result);\n  });\n\n  // POST /api/sessions/:key/archive - Archive session\n  authenticated.post('/api/sessions/:key/archive', async (c) => {\n    const key = c.req.param('key');\n    const result = await service.archiveSession(key);\n    return c.json(result);\n  });\n\n  // POST /api/sessions/:key/unarchive - Unarchive session\n  authenticated.post('/api/sessions/:key/unarchive', async (c) => {\n    const key = c.req.param('key');\n    const result = await service.unarchiveSession(key);\n    return c.json(result);\n  });\n\n  // POST /api/sessions/:key/pin - Pin session\n  authenticated.post('/api/sessions/:key/pin', async (c) => {\n    const key = c.req.param('key');\n    const result = await service.pinSession(key);\n    return c.json(result);\n  });\n\n  // POST /api/sessions/:key/unpin - Unpin session\n  authenticated.post('/api/sessions/:key/unpin', async (c) => {\n    const key = c.req.param('key');\n    const result = await service.unpinSession(key);\n    return c.json(result);\n  });\n\n  // POST /api/sessions/:key/rename - Rename session\n  authenticated.post('/api/sessions/:key/rename', async (c) => {\n    const key = c.req.param('key');\n\n    const body = await c.req.json();\n    const { name } = body;\n    const result = await service.renameSession(key, name);\n    return c.json(result);\n  });\n\n  // ========== Subagent REST API (/api/subagents) ==========\n\n  // GET /api/subagents - List subagent sessions\n  authenticated.get('/api/subagents', async (c) => {\n    const query = c.req.query();\n    const result = await service.listSubagents({\n      limit: query.limit ? parseInt(query.limit) : undefined,\n      offset: query.offset ? parseInt(query.offset) : undefined,\n    });\n    return c.json(result);\n  });\n\n  // GET /api/subagents/:key - Get subagent session detail\n  authenticated.get('/api/subagents/:key', async (c) => {\n    const key = c.req.param('key');\n    // Verify it's a subagent session\n    if (!key.startsWith('subagent:')) {\n      return c.json({ error: 'Not a subagent session' }, 400);\n    }\n    const includeRaw = c.req.query('include') ?? '';\n    const includeSet = new Set(\n      includeRaw\n        .split(',')\n        .map((s) => s.trim())\n        .filter(Boolean),\n    );\n    const session = await service.getSession(key, {\n      includeTranscriptSummary: includeSet.has('transcript'),\n      includeTranscriptRows: includeSet.has('transcriptRows'),\n    });\n    if (!session) {\n      return c.json({ error: 'Subagent session not found' }, 404);\n    }\n    return c.json({ session });\n  });\n}\n"],"mappings":";;;;;;kBAEmF;oBACA;AASnF,SAAS,8BACP,GACA,SACA,QACiB;AACjB,KAAI,QAAQ,gBAAgB,CAC1B,QAAO;AAET,QAAO,0BAA0B,GAAG,OAAO;;AAG7C,SAAgB,uBAAuB,eAAqB,MAAoC;CAC9F,MAAM,EAAE,YAAY;AAKpB,eAAc,KAAK,iBAAiB,OAAO,MAAM;EAC/C,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,UAAU,KAAK,WAAW;EAChC,MAAM,aAAa,QAAQ;EAC3B,IAAI,UACF,OAAO,KAAK,YAAY,YAAY,KAAK,QAAQ,MAAM,GACnD,KAAK,QAAQ,MAAM,CAAC,aAAa,GACjC,kBAAkB,WAAW;AACnC,MAAI,CAAC,YAAY,SAAS,WAAW,CACnC,WAAU,kBAAkB,WAAW;AAKzC,MAAI,KAAK,SAAS;GAChB,MAAM,aAAa,gBAAgB;IACjC;IACA,QAAQ;IACR,WAAW;IACX,UAAU;IACV,QAAQ,KAAK;IACd,CAAC;AAEF,SAAM,QAAQ,uBAAuB,aAAa,YAAY,EAAE,CAAC;GACjE,MAAM,UAAU,MAAM,QAAQ,WAAW,WAAW;AACpD,UAAO,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI;;EAYjC,MAAM,gBAAe,MARU,QAAQ,aAAa;GAClD;GACA,OAAO;GACP,QAAQ;GACR,WAAW;GACZ,CAAC,EAGoC,MAAM,MAAM,MAAM;AACtD,OAAI,EAAE,iBAAiB,EAAG,QAAO;AAEjC,UADe,gBAAgB,EAAE,IACpB,EAAE,YAAY;IAC3B;AAEF,MAAI,cAAc;GAEhB,MAAM,UAAU,MAAM,QAAQ,WAAW,aAAa,IAAI;AAC1D,UAAO,EAAE,KAAK;IAAE;IAAS,QAAQ;IAAM,EAAE,IAAI;;EAI/C,MAAM,SAAS,QAAQ,KAAK,KAAK;EACjC,MAAM,aAAa,gBAAgB;GACjC;GACA,QAAQ;GACR,WAAW;GACX,UAAU;GACV,QAAQ;GACT,CAAC;AAEF,QAAM,QAAQ,uBAAuB,aAAa,YAAY,EAAE,CAAC;EAEjE,MAAM,UAAU,MAAM,QAAQ,WAAW,WAAW;AACpD,SAAO,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI;GAC/B;AAGF,eAAc,IAAI,iBAAiB,OAAO,MAAM;EAC9C,MAAM,UAAU,8BAA8B,GAAG,SAAS,gBAAgB;AAC1E,MAAI,QACF,QAAO;EAET,MAAM,QAAQ,EAAE,IAAI,OAAO;EAC3B,MAAM,SAAS,MAAM,QAAQ,aAAa;GACxC,QAAQ,MAAM;GACd,QAAQ,MAAM;GACd,SAAS,MAAM;GACf,OAAO,MAAM,QAAQ,SAAS,MAAM,MAAM,GAAG,KAAA;GAC7C,QAAQ,MAAM,SAAS,SAAS,MAAM,OAAO,GAAG,KAAA;GACjD,CAAC;AACF,SAAO,EAAE,KAAK,OAAO;GACrB;AAGF,eAAc,IAAI,uBAAuB,OAAO,MAAM;EACpD,MAAM,SAAS,MAAM,QAAQ,iBAAiB;AAC9C,SAAO,EAAE,KAAK,OAAO;GACrB;AAGF,eAAc,IAAI,0BAA0B,OAAO,MAAM;EACvD,MAAM,UAAU,EAAE,IAAI,MAAM,UAAU;EACtC,MAAM,UAAU,MAAM,QAAQ,kBAAkB,WAAW,KAAA,EAAU;AACrE,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,SAAS;GAAE,CAAC;GACjD;AAGF,eAAc,IAAI,0BAA0B,OAAO,MAAM;EACvD,MAAM,UAAU,8BAA8B,GAAG,SAAS,eAAe;AACzE,MAAI,QACF,QAAO;EAET,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;AAE9B,MAAI,CAAC,MADiB,QAAQ,WAAW,IAAI,CAE3C,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAqB,EAAE,IAAI;AAE/D,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,QAAQ,oBAAoB,IAAI;GAAE,CAAC;GACtE;AAGF,eAAc,IAAI,mCAAmC,OAAO,MAAM;EAChE,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAC9B,MAAM,UAAU,MAAM,QAAQ,sBAAsB,IAAI;AACxD,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM;GAAS,CAAC;GACpC;AAEF,eAAc,MAAM,mCAAmC,OAAO,MAAM;EAClE,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAC9B,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,SAAS,MAAM,QAAQ,wBAAwB,KAAK,KAAK;AAC/D,MAAI,CAAC,OAAO,GACV,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,OAAO;GAAO,EAAE,IAAI;AAExD,SAAO,EAAE,KAAK,EAAE,IAAI,MAAM,CAAC;GAC3B;AAGF,eAAc,IAAI,+BAA+B,OAAO,MAAM;EAC5D,MAAM,UAAU,8BAA8B,GAAG,SAAS,oBAAoB;AAC9E,MAAI,QACF,QAAO;EAET,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAC9B,MAAM,WAAW,EAAE,IAAI,MAAM,QAAQ;EACrC,MAAM,cAAc,WAAW,OAAO,SAAS,UAAU,GAAG,GAAG,KAAA;EAC/D,MAAM,QACJ,gBAAgB,KAAA,KAAa,OAAO,SAAS,YAAY,GACrD,KAAK,IAAI,KAAK,KAAK,IAAI,GAAG,YAAY,CAAC,GACvC,KAAA;EAEN,MAAM,SAAS,EAAE,IAAI,MAAM,SAAS,EAAE,MAAM;EAC5C,MAAM,YAAY,EAAE,IAAI,MAAM,SAAS;EACvC,MAAM,eAAe,YAAY,OAAO,SAAS,WAAW,GAAG,GAAG;EAClE,MAAM,SAAS,OAAO,SAAS,aAAa,GAAG,KAAK,IAAI,GAAG,aAAa,GAAG;EAE3E,MAAM,SAAS,MAAM,QAAQ,sBAAsB,KAAK;GACtD;GACA;GACA,GAAI,SAAS,EAAE,QAAQ,GAAG,EAAE;GAC7B,CAAC;AACF,MAAI,CAAC,OACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAqB,EAAE,IAAI;EAG/D,MAAM,WAAW,wBAAwB,OAAO,QAAQ,UAAU,EAAE,OAAO,CAAC;AAC5E,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS,EAAE,UAAU;GACrB,YAAY,OAAO;GACpB,CAAC;GACF;AAGF,eAAc,IAAI,8BAA8B,OAAO,MAAM;EAC3D,MAAM,UAAU,8BAA8B,GAAG,SAAS,mBAAmB;AAC7E,MAAI,QACF,QAAO;EAET,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAC9B,MAAM,YAAY,EAAE,IAAI,MAAM,SAAS;EACvC,MAAM,WAAW,EAAE,IAAI,MAAM,QAAQ;EACrC,MAAM,SAAS,EAAE,IAAI,MAAM,SAAS,EAAE,MAAM;EAC5C,MAAM,eAAe,YAAY,OAAO,SAAS,WAAW,GAAG,GAAG;EAClE,MAAM,cAAc,WAAW,OAAO,SAAS,UAAU,GAAG,GAAG;EAC/D,MAAM,SAAS,OAAO,SAAS,aAAa,GAAG,KAAK,IAAI,GAAG,aAAa,GAAG;EAC3E,MAAM,QAAQ,OAAO,SAAS,YAAY,GAAG,KAAK,IAAI,KAAK,KAAK,IAAI,GAAG,YAAY,CAAC,GAAG;EACvF,MAAM,SAAS,MAAM,QAAQ,sBAAsB,KAAK;GACtD;GACA;GACA,GAAI,SAAS,EAAE,QAAQ,GAAG,EAAE;GAC7B,CAAC;AAEF,MAAI,CAAC,OACH,QAAO,EAAE,KAAK,EAAE,OAAO,qBAAqB,EAAE,IAAI;AAGpD,SAAO,EAAE,KAAK,OAAO;GACrB;AAGF,eAAc,KAAK,yCAAyC,OAAO,MAAM;EACvE,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;AAE9B,MAAI,CAAC,MADc,QAAQ,uBAAuB,mBAAmB,IAAI,CAEvE,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAqB,EAAE,IAAI;EAE/D,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,KAAK,OAAO,KAAK,OAAO,YAAY,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,MAAM,GAAG,KAAA;EAC5E,MAAM,OAAO,OAAO,KAAK,SAAS,WAAW,KAAK,OAAO,KAAA;EACzD,MAAM,OACJ,KAAK,SAAS,KAAA,KAAa,OAAO,KAAK,SAAS,YAAY,KAAK,SAAS,QAAQ,CAAC,MAAM,QAAQ,KAAK,KAAK,GACtG,KAAK,OACN,KAAA;AACN,QAAM,QAAQ,uBAAuB,6BAA6B,KAAK;GAAE;GAAI;GAAM;GAAM,CAAC;AAC1F,SAAO,EAAE,KAAK,EAAE,IAAI,MAAM,CAAC;GAC3B;AAGF,eAAc,IAAI,6CAA6C,OAAO,MAAM;EAC1E,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;AAE9B,MAAI,CAAC,MADc,QAAQ,uBAAuB,mBAAmB,IAAI,CAEvE,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAqB,EAAE,IAAI;EAE/D,MAAM,cAAc,MAAM,QAAQ,iCAAiC,IAAI;AACvE,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,aAAa;GAAE,CAAC;GACrD;AAEF,eAAc,IAAI,2DAA2D,OAAO,MAAM;EACxF,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAC9B,MAAM,eAAe,EAAE,IAAI,MAAM,eAAe;EAChD,MAAM,aAAa,MAAM,QAAQ,+BAA+B,KAAK,aAAa;AAClF,MAAI,CAAC,WACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAwB,EAAE,IAAI;AAElE,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,YAAY;GAAE,CAAC;GACpD;AAEF,eAAc,KAAK,yCAAyC,OAAO,MAAM;EACvE,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAC9B,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,eAAe,OAAO,KAAK,iBAAiB,WAAW,KAAK,aAAa,MAAM,GAAG;AACxF,MAAI,CAAC,aACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAyB,EAAE,IAAI;AAEnE,MAAI;AACF,SAAM,QAAQ,mCAAmC,KAAK,aAAa;WAC5D,KAAK;GACZ,MAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAC5D,OAAI,IAAI,SAAS,YAAY,IAAI,IAAI,SAAS,UAAU,CACtD,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAAK,EAAE,IAAI;AAE/C,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAAK,EAAE,IAAI;;EAE/C,MAAM,UAAU,MAAM,QAAQ,WAAW,IAAI;AAC7C,MAAI,CAAC,QACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAqB,EAAE,IAAI;AAE/D,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM;GAAS,CAAC;GACpC;AAEF,eAAc,KAAK,qCAAqC,OAAO,MAAM;EACnE,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;AAE9B,MAAI,CAAC,MADiB,QAAQ,WAAW,IAAI,CAE3C,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAqB,EAAE,IAAI;EAE/D,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,eAAe,OAAO,KAAK,iBAAiB,WAAW,KAAK,eAAe,KAAA;EACjF,MAAM,QAAQ,OAAO,KAAK,UAAU,YAAY,KAAK,QAAQ;EAC7D,MAAM,SAAS,MAAM,QAAQ,qBAAqB,KAAK;GAAE;GAAc;GAAO,CAAC;AAC/E,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,QAAQ;GAAE,CAAC;GAChD;AAGF,eAAc,IAAI,sBAAsB,OAAO,MAAM;EACnD,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAC9B,MAAM,aAAa,EAAE,IAAI,MAAM,UAAU,IAAI;EAC7C,MAAM,aAAa,IAAI,IACrB,WACG,MAAM,IAAI,CACV,KAAK,MAAM,EAAE,MAAM,CAAC,CACpB,OAAO,QAAQ,CACnB;EACD,MAAM,oBAAoB,WAAW,IAAI,aAAa;EACtD,MAAM,wBAAwB,WAAW,IAAI,iBAAiB;EAC9D,MAAM,YAAY,EAAE,IAAI,MAAM,SAAS;EACvC,MAAM,WAAW,EAAE,IAAI,MAAM,QAAQ;AAGrC,MAFuB,cAAc,KAAA,KAAa,aAAa,KAAA,GAE3C;GAClB,MAAM,UAAU,8BAA8B,GAAG,SAAS,mBAAmB;AAC7E,OAAI,QACF,QAAO;GAET,MAAM,eAAe,YAAY,OAAO,SAAS,WAAW,GAAG,GAAG;GAClE,MAAM,cAAc,WAAW,OAAO,SAAS,UAAU,GAAG,GAAG;GAC/D,MAAM,SAAS,OAAO,SAAS,aAAa,GAAG,KAAK,IAAI,GAAG,aAAa,GAAG;GAC3E,MAAM,QAAQ,OAAO,SAAS,YAAY,GAAG,KAAK,IAAI,KAAK,KAAK,IAAI,GAAG,YAAY,CAAC,GAAG;GACvF,MAAM,SAAS,MAAM,QAAQ,sBAAsB,KAAK;IACtD;IACA;IACA,0BAA0B;IAC1B;IACD,CAAC;AACF,OAAI,CAAC,OACH,QAAO,EAAE,KAAK,EAAE,OAAO,qBAAqB,EAAE,IAAI;AAEpD,UAAO,EAAE,KAAK,OAAO;;EAGvB,MAAM,UAAU,MAAM,QAAQ,WAAW,KAAK;GAC5C,0BAA0B;GAC1B;GACD,CAAC;AACF,MAAI,CAAC,QACH,QAAO,EAAE,KAAK,EAAE,OAAO,qBAAqB,EAAE,IAAI;AAEpD,SAAO,EAAE,KAAK,EAAE,SAAS,CAAC;GAC1B;AAGF,eAAc,MAAM,sBAAsB,OAAO,MAAM;EACrD,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAC9B,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,QAKF,EAAE;AACN,MAAI,OAAO,KAAK,SAAS,SACvB,OAAM,OAAO,KAAK;AAEpB,MAAI,MAAM,QAAQ,KAAK,KAAK,CAC1B,OAAM,OAAO,KAAK;AAEpB,MAAI,OAAO,KAAK,gBAAgB,UAC9B,OAAM,cAAc,KAAK;AAE3B,MAAI,KAAK,eAAe,KAAA,KAAa,OAAO,KAAK,eAAe,YAAY,KAAK,eAAe,KAC9F,OAAM,aAAa,KAAK;EAE1B,MAAM,SAAS,MAAM,QAAQ,aAAa,KAAK,MAAM;AACrD,MAAI,OAAO,OAAO,MAChB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,OAAO;GAAO,EAAE,IAAI;EAExD,MAAM,UAAU,MAAM,QAAQ,WAAW,IAAI;AAC7C,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM;GAAS,CAAC;GACpC;AAGF,eAAc,IAAI,6BAA6B,OAAO,MAAM;EAC1D,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAC9B,MAAM,SAAS,EAAE,IAAI,MAAM,SAAS,IAAW;EAC/C,MAAM,SAAS,MAAM,QAAQ,cAAc,KAAK,OAAO;AACvD,SAAO,EAAE,KAAK,OAAO;GACrB;AAMF,eAAc,OAAO,+BAA+B,OAAO,MAAM;EAC/D,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAC9B,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,SAAS,MAAM,QAAQ,uBAAuB,aAAa,IAAI;AACrE,MAAI,CAAC,OACH,QAAO,EAAE,KAAK,EAAE,OAAO,qBAAqB,EAAE,IAAI;EAGpD,IAAI,aAAa,OAAO,KAAK,eAAe,WAAW,KAAK,aAAa;EACzE,IAAI,QAAQ,OAAO,KAAK,UAAU,WAAW,KAAK,QAAQ;EAC1D,MAAM,iBACJ,OAAO,KAAK,mBAAmB,WAAW,KAAK,iBAAiB,KAAA;AAElE,MAAI,mBAAmB,KAAA,GAAW;GAChC,MAAM,QAAQ,4BAA4B,QAAQ,eAAe;AACjE,OAAI,CAAC,MACH,QAAO,EAAE,KAAK,EAAE,OAAO,iCAAiC,EAAE,IAAI;AAEhE,gBAAa,MAAM;AACnB,WAAQ,MAAM;;AAGhB,MAAI,aAAa,KAAK,SAAS,EAC7B,QAAO,EAAE,KAAK,EAAE,OAAO,+BAA+B,EAAE,IAAI;AAE9D,MAAI,cAAc,OAAO,OACvB,QAAO,EAAE,KAAK,EAAE,OAAO,sBAAsB,EAAE,IAAI;EAErD,MAAM,cAAc,KAAK,IAAI,OAAO,OAAO,SAAS,WAAW;EAC/D,MAAM,OAAO,OAAO,MAAM,GAAG,WAAW,CAAC,OAAO,OAAO,MAAM,aAAa,YAAY,CAAC;AACvF,QAAM,QAAQ,uBAAuB,aAAa,KAAK,KAAK;AAC5D,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;GAAa,CAAC;GACjD;AAGF,eAAc,OAAO,sBAAsB,OAAO,MAAM;EACtD,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAC9B,MAAM,SAAS,MAAM,QAAQ,cAAc,IAAI;AAC/C,SAAO,EAAE,KAAK,OAAO;GACrB;AAGF,eAAc,KAAK,8BAA8B,OAAO,MAAM;EAC5D,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAC9B,MAAM,SAAS,MAAM,QAAQ,eAAe,IAAI;AAChD,SAAO,EAAE,KAAK,OAAO;GACrB;AAGF,eAAc,KAAK,gCAAgC,OAAO,MAAM;EAC9D,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAC9B,MAAM,SAAS,MAAM,QAAQ,iBAAiB,IAAI;AAClD,SAAO,EAAE,KAAK,OAAO;GACrB;AAGF,eAAc,KAAK,0BAA0B,OAAO,MAAM;EACxD,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAC9B,MAAM,SAAS,MAAM,QAAQ,WAAW,IAAI;AAC5C,SAAO,EAAE,KAAK,OAAO;GACrB;AAGF,eAAc,KAAK,4BAA4B,OAAO,MAAM;EAC1D,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAC9B,MAAM,SAAS,MAAM,QAAQ,aAAa,IAAI;AAC9C,SAAO,EAAE,KAAK,OAAO;GACrB;AAGF,eAAc,KAAK,6BAA6B,OAAO,MAAM;EAC3D,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAG9B,MAAM,EAAE,SAAS,MADE,EAAE,IAAI,MAAM;EAE/B,MAAM,SAAS,MAAM,QAAQ,cAAc,KAAK,KAAK;AACrD,SAAO,EAAE,KAAK,OAAO;GACrB;AAKF,eAAc,IAAI,kBAAkB,OAAO,MAAM;EAC/C,MAAM,QAAQ,EAAE,IAAI,OAAO;EAC3B,MAAM,SAAS,MAAM,QAAQ,cAAc;GACzC,OAAO,MAAM,QAAQ,SAAS,MAAM,MAAM,GAAG,KAAA;GAC7C,QAAQ,MAAM,SAAS,SAAS,MAAM,OAAO,GAAG,KAAA;GACjD,CAAC;AACF,SAAO,EAAE,KAAK,OAAO;GACrB;AAGF,eAAc,IAAI,uBAAuB,OAAO,MAAM;EACpD,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;AAE9B,MAAI,CAAC,IAAI,WAAW,YAAY,CAC9B,QAAO,EAAE,KAAK,EAAE,OAAO,0BAA0B,EAAE,IAAI;EAEzD,MAAM,aAAa,EAAE,IAAI,MAAM,UAAU,IAAI;EAC7C,MAAM,aAAa,IAAI,IACrB,WACG,MAAM,IAAI,CACV,KAAK,MAAM,EAAE,MAAM,CAAC,CACpB,OAAO,QAAQ,CACnB;EACD,MAAM,UAAU,MAAM,QAAQ,WAAW,KAAK;GAC5C,0BAA0B,WAAW,IAAI,aAAa;GACtD,uBAAuB,WAAW,IAAI,iBAAiB;GACxD,CAAC;AACF,MAAI,CAAC,QACH,QAAO,EAAE,KAAK,EAAE,OAAO,8BAA8B,EAAE,IAAI;AAE7D,SAAO,EAAE,KAAK,EAAE,SAAS,CAAC;GAC1B"}
+{"version":3,"file":"sessions.js","names":[],"sources":["../../../../../src/gateway/hono/routes/sessions.ts"],"sourcesContent":["import type { Hono } from 'hono';\n\nimport { buildSessionKey, parseSessionKey } from '../../../routing/session-key.js';\nimport { agentExists, getDefaultAgentId } from '../../../routing/resolve-route.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\nimport { messagesToClientHistory } from '../../../session/client-history.js';\nimport { computeUserRoundDeleteRange } from '../../../session/user-round-delete.js';\nimport { respondStartupUnavailable } from '../lib/startup-unavailable.js';\nimport type { StartupUnavailableGatewayMethod } from '../../startup-readiness.js';\n\ntype SessionsStartupMethod = StartupUnavailableGatewayMethod;\n\nfunction ensureGatewayReadyForSessions(\n  c: Parameters<typeof respondStartupUnavailable>[0],\n  service: AuthenticatedRouteDeps['service'],\n  method: SessionsStartupMethod,\n): Response | null {\n  if (service.isGatewayReady()) {\n    return null;\n  }\n  return respondStartupUnavailable(c, method);\n}\n\nexport function registerSessionsRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  const { service } = deps;\n\n  // ========== Session REST API (/api/sessions) ==========\n\n  // POST /api/sessions - Create new session (reuses empty sessions)\n  authenticated.post('/api/sessions', async (c) => {\n    const body = await c.req.json().catch(() => ({}));\n    const channel = body.channel || 'webchat';\n    const routingCfg = service.currentConfig;\n    let agentId =\n      typeof body.agentId === 'string' && body.agentId.trim()\n        ? body.agentId.trim().toLowerCase()\n        : getDefaultAgentId(routingCfg);\n    if (!agentExists(agentId, routingCfg)) {\n      agentId = getDefaultAgentId(routingCfg);\n    }\n\n    // If a specific chat_id is provided, use it (for advanced use cases)\n    // Otherwise, try to find and reuse an existing empty session\n    if (body.chat_id) {\n      const sessionKey = buildSessionKey({\n        agentId,\n        source: channel,\n        accountId: 'default',\n        peerKind: 'direct',\n        peerId: body.chat_id,\n      });\n\n      await service.sessionManagerInstance.saveMessages(sessionKey, []);\n      const session = await service.sessions.getSession(sessionKey);\n      return c.json({ session }, 201);\n    }\n\n    // Look for existing empty sessions to reuse\n    const existingSessions = await service.sessions.listSessions({\n      channel,\n      limit: 50,\n      sortBy: 'updatedAt',\n      sortOrder: 'desc',\n    });\n    \n    // Reuse an empty session only when it matches the requested agent (session key embeds agent id).\n    const emptySession = existingSessions.items.find((s) => {\n      if (s.messageCount !== 0) return false;\n      const parsed = parseSessionKey(s.key);\n      return parsed?.agentId === agentId;\n    });\n    \n    if (emptySession) {\n      // Return existing empty session instead of creating a new one\n      const session = await service.sessions.getSession(emptySession.key);\n      return c.json({ session, reused: true }, 200);\n    }\n    \n    // No empty session found, create a new one\n    const chatId = `chat_${Date.now()}`;\n    const sessionKey = buildSessionKey({\n      agentId,\n      source: channel,\n      accountId: 'default',\n      peerKind: 'direct',\n      peerId: chatId,\n    });\n\n    await service.sessionManagerInstance.saveMessages(sessionKey, []);\n\n    const session = await service.sessions.getSession(sessionKey);\n    return c.json({ session }, 201);\n  });\n\n  // GET /api/sessions - List sessions\n  authenticated.get('/api/sessions', async (c) => {\n    const blocked = ensureGatewayReadyForSessions(c, service, 'sessions.list');\n    if (blocked) {\n      return blocked;\n    }\n    const query = c.req.query();\n    const result = await service.sessions.listSessions({\n      status: query.status as any,\n      search: query.search,\n      channel: query.channel,\n      limit: query.limit ? parseInt(query.limit) : undefined,\n      offset: query.offset ? parseInt(query.offset) : undefined,\n    });\n    return c.json(result);\n  });\n\n  // GET /api/sessions/stats - Get session stats (must be before /:key)\n  authenticated.get('/api/sessions/stats', async (c) => {\n    const result = await service.sessions.stats();\n    return c.json(result);\n  });\n\n  // GET /api/sessions/chat-ids - Get unique chat IDs from sessions (must be before /:key)\n  authenticated.get('/api/sessions/chat-ids', async (c) => {\n    const channel = c.req.query('channel');\n    const chatIds = await service.sessions.chatIds(channel || undefined);\n    return c.json({ ok: true, payload: { chatIds } });\n  });\n\n  // GET /api/sessions/:key/run — read-only active webchat agent run (for UI resume)\n  authenticated.get('/api/sessions/:key/run', async (c) => {\n    const blocked = ensureGatewayReadyForSessions(c, service, 'sessions.run');\n    if (blocked) {\n      return blocked;\n    }\n    const key = c.req.param('key');\n    const session = await service.sessions.getSession(key);\n    if (!session) {\n      return c.json({ ok: false, error: 'Session not found' }, 404);\n    }\n    return c.json({ ok: true, payload: service.sessions.getActiveRun(key) });\n  });\n\n  // GET /api/sessions/:key/agent-config — resolved session agent settings (thinking, etc.)\n  authenticated.get('/api/sessions/:key/agent-config', async (c) => {\n    const key = c.req.param('key');\n    const payload = await service.sessions.getAgentConfig(key);\n    return c.json({ ok: true, payload });\n  });\n\n  authenticated.patch('/api/sessions/:key/agent-config', async (c) => {\n    const key = c.req.param('key');\n    const body = await c.req.json().catch(() => ({}));\n    const result = await service.sessions.patchAgentConfig(key, body);\n    if (!result.ok) {\n      return c.json({ ok: false, error: result.error }, 400);\n    }\n    return c.json({ ok: true });\n  });\n\n  // GET /api/sessions/:key/messages — flattened transcript for TUI / clients\n  authenticated.get('/api/sessions/:key/messages', async (c) => {\n    const blocked = ensureGatewayReadyForSessions(c, service, 'sessions.messages');\n    if (blocked) {\n      return blocked;\n    }\n    const key = c.req.param('key');\n    const limitRaw = c.req.query('limit');\n    const parsedLimit = limitRaw ? Number.parseInt(limitRaw, 10) : undefined;\n    const limit =\n      parsedLimit !== undefined && Number.isFinite(parsedLimit)\n        ? Math.min(500, Math.max(1, parsedLimit))\n        : undefined;\n\n    const before = c.req.query('before')?.trim();\n    const offsetRaw = c.req.query('offset');\n    const parsedOffset = offsetRaw ? Number.parseInt(offsetRaw, 10) : 0;\n    const offset = Number.isFinite(parsedOffset) ? Math.max(0, parsedOffset) : 0;\n\n    const result = await service.sessions.getMessagePage(key, {\n      limit,\n      offset,\n      ...(before ? { before } : {}),\n    });\n    if (!result) {\n      return c.json({ ok: false, error: 'Session not found' }, 404);\n    }\n\n    const messages = messagesToClientHistory(result.session.messages, { limit });\n    return c.json({\n      ok: true,\n      payload: { messages },\n      pagination: result.pagination,\n    });\n  });\n\n  // GET /api/sessions/:key/history — UI chat history page from the newest tail.\n  authenticated.get('/api/sessions/:key/history', async (c) => {\n    const blocked = ensureGatewayReadyForSessions(c, service, 'sessions.history');\n    if (blocked) {\n      return blocked;\n    }\n    const key = c.req.param('key');\n    const offsetRaw = c.req.query('offset');\n    const limitRaw = c.req.query('limit');\n    const before = c.req.query('before')?.trim();\n    const parsedOffset = offsetRaw ? Number.parseInt(offsetRaw, 10) : 0;\n    const parsedLimit = limitRaw ? Number.parseInt(limitRaw, 10) : 50;\n    const offset = Number.isFinite(parsedOffset) ? Math.max(0, parsedOffset) : 0;\n    const limit = Number.isFinite(parsedLimit) ? Math.min(200, Math.max(1, parsedLimit)) : 50;\n    const result = await service.sessions.getMessagePage(key, {\n      offset,\n      limit,\n      ...(before ? { before } : {}),\n    });\n\n    if (!result) {\n      return c.json({ error: 'Session not found' }, 404);\n    }\n\n    return c.json(result);\n  });\n\n  // POST /api/sessions/:key/transcript/context — append persisted-only `kind: 'context'` row (not in LLM context)\n  authenticated.post('/api/sessions/:key/transcript/context', async (c) => {\n    const key = c.req.param('key');\n    const meta = await service.sessionManagerInstance.getSessionMetadata(key);\n    if (!meta) {\n      return c.json({ ok: false, error: 'Session not found' }, 404);\n    }\n    const body = await c.req.json().catch(() => ({}));\n    const id = typeof body.id === 'string' && body.id.trim() ? body.id.trim() : undefined;\n    const text = typeof body.text === 'string' ? body.text : undefined;\n    const data =\n      body.data !== undefined && typeof body.data === 'object' && body.data !== null && !Array.isArray(body.data)\n        ? (body.data as Record<string, unknown>)\n        : undefined;\n    await service.sessionManagerInstance.appendTranscriptContextEntry(key, { id, text, data });\n    return c.json({ ok: true });\n  });\n\n  // GET /api/sessions/:key/compaction/checkpoints — list pre-compaction snapshots (OpenClaw-style)\n  authenticated.get('/api/sessions/:key/compaction/checkpoints', async (c) => {\n    const key = c.req.param('key');\n    const meta = await service.sessionManagerInstance.getSessionMetadata(key);\n    if (!meta) {\n      return c.json({ ok: false, error: 'Session not found' }, 404);\n    }\n    const checkpoints = await service.sessions.listCompactionCheckpoints(key);\n    return c.json({ ok: true, payload: { checkpoints } });\n  });\n\n  authenticated.get('/api/sessions/:key/compaction/checkpoints/:checkpointId', async (c) => {\n    const key = c.req.param('key');\n    const checkpointId = c.req.param('checkpointId');\n    const checkpoint = await service.sessions.getCompactionCheckpoint(key, checkpointId);\n    if (!checkpoint) {\n      return c.json({ ok: false, error: 'Checkpoint not found' }, 404);\n    }\n    return c.json({ ok: true, payload: { checkpoint } });\n  });\n\n  authenticated.post('/api/sessions/:key/compaction/restore', async (c) => {\n    const key = c.req.param('key');\n    const body = await c.req.json().catch(() => ({}));\n    const checkpointId = typeof body.checkpointId === 'string' ? body.checkpointId.trim() : '';\n    if (!checkpointId) {\n      return c.json({ ok: false, error: 'checkpointId required' }, 400);\n    }\n    try {\n      await service.sessions.restoreCompactionCheckpoint(key, checkpointId);\n    } catch (err) {\n      const msg = err instanceof Error ? err.message : String(err);\n      if (msg.includes('not found') || msg.includes('Invalid')) {\n        return c.json({ ok: false, error: msg }, 404);\n      }\n      return c.json({ ok: false, error: msg }, 500);\n    }\n    const session = await service.sessions.getSession(key);\n    if (!session) {\n      return c.json({ ok: false, error: 'Session not found' }, 404);\n    }\n    return c.json({ ok: true, session });\n  });\n\n  authenticated.post('/api/sessions/:key/compaction/run', async (c) => {\n    const key = c.req.param('key');\n    const session = await service.sessions.getSession(key);\n    if (!session) {\n      return c.json({ ok: false, error: 'Session not found' }, 404);\n    }\n    const body = await c.req.json().catch(() => ({}));\n    const instructions = typeof body.instructions === 'string' ? body.instructions : undefined;\n    const force = typeof body.force === 'boolean' ? body.force : true;\n    const result = await service.sessions.runCompaction(key, { instructions, force });\n    return c.json({ ok: true, payload: { result } });\n  });\n\n  // GET /api/sessions/:key - Get single session (must be after /stats and /chat-ids)\n  authenticated.get('/api/sessions/:key', async (c) => {\n    const key = c.req.param('key');\n    const includeRaw = c.req.query('include') ?? '';\n    const includeSet = new Set(\n      includeRaw\n        .split(',')\n        .map((s) => s.trim())\n        .filter(Boolean),\n    );\n    const includeTranscript = includeSet.has('transcript');\n    const includeTranscriptRows = includeSet.has('transcriptRows');\n    const offsetRaw = c.req.query('offset');\n    const limitRaw = c.req.query('limit');\n    const hasPagingQuery = offsetRaw !== undefined || limitRaw !== undefined;\n\n    if (hasPagingQuery) {\n      const blocked = ensureGatewayReadyForSessions(c, service, 'sessions.history');\n      if (blocked) {\n        return blocked;\n      }\n      const parsedOffset = offsetRaw ? Number.parseInt(offsetRaw, 10) : 0;\n      const parsedLimit = limitRaw ? Number.parseInt(limitRaw, 10) : 50;\n      const offset = Number.isFinite(parsedOffset) ? Math.max(0, parsedOffset) : 0;\n      const limit = Number.isFinite(parsedLimit) ? Math.min(200, Math.max(1, parsedLimit)) : 50;\n      const result = await service.sessions.getMessagePage(key, {\n        offset,\n        limit,\n        includeTranscriptSummary: includeTranscript,\n        includeTranscriptRows,\n      });\n      if (!result) {\n        return c.json({ error: 'Session not found' }, 404);\n      }\n      return c.json(result);\n    }\n\n    const session = await service.sessions.getSession(key, {\n      includeTranscriptSummary: includeTranscript,\n      includeTranscriptRows,\n    });\n    if (!session) {\n      return c.json({ error: 'Session not found' }, 404);\n    }\n    return c.json({ session });\n  });\n\n  // PATCH /api/sessions/:key - Partial metadata (name, tags, customData); OpenClaw-style patch subset\n  authenticated.patch('/api/sessions/:key', async (c) => {\n    const key = c.req.param('key');\n    const body = await c.req.json().catch(() => ({}));\n    const patch: {\n      name?: string;\n      tags?: string[];\n      replaceTags?: boolean;\n      customData?: Record<string, unknown>;\n    } = {};\n    if (typeof body.name === 'string') {\n      patch.name = body.name;\n    }\n    if (Array.isArray(body.tags)) {\n      patch.tags = body.tags;\n    }\n    if (typeof body.replaceTags === 'boolean') {\n      patch.replaceTags = body.replaceTags;\n    }\n    if (body.customData !== undefined && typeof body.customData === 'object' && body.customData !== null) {\n      patch.customData = body.customData as Record<string, unknown>;\n    }\n    const result = await service.sessions.patch(key, patch);\n    if (result.ok === false) {\n      return c.json({ ok: false, error: result.error }, 404);\n    }\n    const session = await service.sessions.getSession(key);\n    return c.json({ ok: true, session });\n  });\n\n  // GET /api/sessions/:key/export - Export session (must be before /:key)\n  authenticated.get('/api/sessions/:key/export', async (c) => {\n    const key = c.req.param('key');\n    const format = c.req.query('format') as any || 'json';\n    const result = await service.sessions.export(key, format);\n    return c.json(result);\n  });\n\n  // DELETE /api/sessions/:key/messages — delete LLM rows by range or by user turn.\n  // `userRoundIndex` (0-based among user messages) removes the user row and every following\n  // assistant / tool / toolResult row until the next user. Prefer this from the web console so\n  // tool loops are not left orphaned after retry/delete.\n  authenticated.delete('/api/sessions/:key/messages', async (c) => {\n    const key = c.req.param('key');\n    const body = await c.req.json().catch(() => ({}));\n    const loaded = await service.sessionManagerInstance.loadMessages(key);\n    if (!loaded) {\n      return c.json({ error: 'Session not found' }, 404);\n    }\n\n    let startIndex = typeof body.startIndex === 'number' ? body.startIndex : -1;\n    let count = typeof body.count === 'number' ? body.count : 0;\n    const userRoundIndex =\n      typeof body.userRoundIndex === 'number' ? body.userRoundIndex : undefined;\n\n    if (userRoundIndex !== undefined) {\n      const range = computeUserRoundDeleteRange(loaded, userRoundIndex);\n      if (!range) {\n        return c.json({ error: 'User round index out of range' }, 400);\n      }\n      startIndex = range.startIndex;\n      count = range.count;\n    }\n\n    if (startIndex < 0 || count <= 0) {\n      return c.json({ error: 'Invalid startIndex or count' }, 400);\n    }\n    if (startIndex >= loaded.length) {\n      return c.json({ error: 'Index out of range' }, 400);\n    }\n    const deleteCount = Math.min(count, loaded.length - startIndex);\n    const next = loaded.slice(0, startIndex).concat(loaded.slice(startIndex + deleteCount));\n    await service.sessionManagerInstance.saveMessages(key, next);\n    return c.json({ ok: true, deleted: deleteCount });\n  });\n\n  // DELETE /api/sessions/:key - Delete session\n  authenticated.delete('/api/sessions/:key', async (c) => {\n    const key = c.req.param('key');\n    const result = await service.sessions.delete(key);\n    return c.json(result);\n  });\n\n  // POST /api/sessions/:key/archive - Archive session\n  authenticated.post('/api/sessions/:key/archive', async (c) => {\n    const key = c.req.param('key');\n    const result = await service.sessions.archive(key);\n    return c.json(result);\n  });\n\n  // POST /api/sessions/:key/unarchive - Unarchive session\n  authenticated.post('/api/sessions/:key/unarchive', async (c) => {\n    const key = c.req.param('key');\n    const result = await service.sessions.unarchive(key);\n    return c.json(result);\n  });\n\n  // POST /api/sessions/:key/pin - Pin session\n  authenticated.post('/api/sessions/:key/pin', async (c) => {\n    const key = c.req.param('key');\n    const result = await service.sessions.pin(key);\n    return c.json(result);\n  });\n\n  // POST /api/sessions/:key/unpin - Unpin session\n  authenticated.post('/api/sessions/:key/unpin', async (c) => {\n    const key = c.req.param('key');\n    const result = await service.sessions.unpin(key);\n    return c.json(result);\n  });\n\n  // POST /api/sessions/:key/rename - Rename session\n  authenticated.post('/api/sessions/:key/rename', async (c) => {\n    const key = c.req.param('key');\n\n    const body = await c.req.json();\n    const { name } = body;\n    const result = await service.sessions.rename(key, name);\n    return c.json(result);\n  });\n\n  // ========== Subagent REST API (/api/subagents) ==========\n\n  // GET /api/subagents - List subagent sessions\n  authenticated.get('/api/subagents', async (c) => {\n    const query = c.req.query();\n    const result = await service.sessions.listSubagents({\n      limit: query.limit ? parseInt(query.limit) : undefined,\n      offset: query.offset ? parseInt(query.offset) : undefined,\n    });\n    return c.json(result);\n  });\n\n  // GET /api/subagents/:key - Get subagent session detail\n  authenticated.get('/api/subagents/:key', async (c) => {\n    const key = c.req.param('key');\n    // Verify it's a subagent session\n    if (!key.startsWith('subagent:')) {\n      return c.json({ error: 'Not a subagent session' }, 400);\n    }\n    const includeRaw = c.req.query('include') ?? '';\n    const includeSet = new Set(\n      includeRaw\n        .split(',')\n        .map((s) => s.trim())\n        .filter(Boolean),\n    );\n    const session = await service.sessions.getSession(key, {\n      includeTranscriptSummary: includeSet.has('transcript'),\n      includeTranscriptRows: includeSet.has('transcriptRows'),\n    });\n    if (!session) {\n      return c.json({ error: 'Subagent session not found' }, 404);\n    }\n    return c.json({ session });\n  });\n}\n"],"mappings":";;;;;;kBAEmF;oBACA;AASnF,SAAS,8BACP,GACA,SACA,QACiB;AACjB,KAAI,QAAQ,gBAAgB,CAC1B,QAAO;AAET,QAAO,0BAA0B,GAAG,OAAO;;AAG7C,SAAgB,uBAAuB,eAAqB,MAAoC;CAC9F,MAAM,EAAE,YAAY;AAKpB,eAAc,KAAK,iBAAiB,OAAO,MAAM;EAC/C,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,UAAU,KAAK,WAAW;EAChC,MAAM,aAAa,QAAQ;EAC3B,IAAI,UACF,OAAO,KAAK,YAAY,YAAY,KAAK,QAAQ,MAAM,GACnD,KAAK,QAAQ,MAAM,CAAC,aAAa,GACjC,kBAAkB,WAAW;AACnC,MAAI,CAAC,YAAY,SAAS,WAAW,CACnC,WAAU,kBAAkB,WAAW;AAKzC,MAAI,KAAK,SAAS;GAChB,MAAM,aAAa,gBAAgB;IACjC;IACA,QAAQ;IACR,WAAW;IACX,UAAU;IACV,QAAQ,KAAK;IACd,CAAC;AAEF,SAAM,QAAQ,uBAAuB,aAAa,YAAY,EAAE,CAAC;GACjE,MAAM,UAAU,MAAM,QAAQ,SAAS,WAAW,WAAW;AAC7D,UAAO,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI;;EAYjC,MAAM,gBAAe,MARU,QAAQ,SAAS,aAAa;GAC3D;GACA,OAAO;GACP,QAAQ;GACR,WAAW;GACZ,CAAC,EAGoC,MAAM,MAAM,MAAM;AACtD,OAAI,EAAE,iBAAiB,EAAG,QAAO;AAEjC,UADe,gBAAgB,EAAE,IACpB,EAAE,YAAY;IAC3B;AAEF,MAAI,cAAc;GAEhB,MAAM,UAAU,MAAM,QAAQ,SAAS,WAAW,aAAa,IAAI;AACnE,UAAO,EAAE,KAAK;IAAE;IAAS,QAAQ;IAAM,EAAE,IAAI;;EAI/C,MAAM,SAAS,QAAQ,KAAK,KAAK;EACjC,MAAM,aAAa,gBAAgB;GACjC;GACA,QAAQ;GACR,WAAW;GACX,UAAU;GACV,QAAQ;GACT,CAAC;AAEF,QAAM,QAAQ,uBAAuB,aAAa,YAAY,EAAE,CAAC;EAEjE,MAAM,UAAU,MAAM,QAAQ,SAAS,WAAW,WAAW;AAC7D,SAAO,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI;GAC/B;AAGF,eAAc,IAAI,iBAAiB,OAAO,MAAM;EAC9C,MAAM,UAAU,8BAA8B,GAAG,SAAS,gBAAgB;AAC1E,MAAI,QACF,QAAO;EAET,MAAM,QAAQ,EAAE,IAAI,OAAO;EAC3B,MAAM,SAAS,MAAM,QAAQ,SAAS,aAAa;GACjD,QAAQ,MAAM;GACd,QAAQ,MAAM;GACd,SAAS,MAAM;GACf,OAAO,MAAM,QAAQ,SAAS,MAAM,MAAM,GAAG,KAAA;GAC7C,QAAQ,MAAM,SAAS,SAAS,MAAM,OAAO,GAAG,KAAA;GACjD,CAAC;AACF,SAAO,EAAE,KAAK,OAAO;GACrB;AAGF,eAAc,IAAI,uBAAuB,OAAO,MAAM;EACpD,MAAM,SAAS,MAAM,QAAQ,SAAS,OAAO;AAC7C,SAAO,EAAE,KAAK,OAAO;GACrB;AAGF,eAAc,IAAI,0BAA0B,OAAO,MAAM;EACvD,MAAM,UAAU,EAAE,IAAI,MAAM,UAAU;EACtC,MAAM,UAAU,MAAM,QAAQ,SAAS,QAAQ,WAAW,KAAA,EAAU;AACpE,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,SAAS;GAAE,CAAC;GACjD;AAGF,eAAc,IAAI,0BAA0B,OAAO,MAAM;EACvD,MAAM,UAAU,8BAA8B,GAAG,SAAS,eAAe;AACzE,MAAI,QACF,QAAO;EAET,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;AAE9B,MAAI,CAAC,MADiB,QAAQ,SAAS,WAAW,IAAI,CAEpD,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAqB,EAAE,IAAI;AAE/D,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,QAAQ,SAAS,aAAa,IAAI;GAAE,CAAC;GACxE;AAGF,eAAc,IAAI,mCAAmC,OAAO,MAAM;EAChE,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAC9B,MAAM,UAAU,MAAM,QAAQ,SAAS,eAAe,IAAI;AAC1D,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM;GAAS,CAAC;GACpC;AAEF,eAAc,MAAM,mCAAmC,OAAO,MAAM;EAClE,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAC9B,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,SAAS,MAAM,QAAQ,SAAS,iBAAiB,KAAK,KAAK;AACjE,MAAI,CAAC,OAAO,GACV,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,OAAO;GAAO,EAAE,IAAI;AAExD,SAAO,EAAE,KAAK,EAAE,IAAI,MAAM,CAAC;GAC3B;AAGF,eAAc,IAAI,+BAA+B,OAAO,MAAM;EAC5D,MAAM,UAAU,8BAA8B,GAAG,SAAS,oBAAoB;AAC9E,MAAI,QACF,QAAO;EAET,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAC9B,MAAM,WAAW,EAAE,IAAI,MAAM,QAAQ;EACrC,MAAM,cAAc,WAAW,OAAO,SAAS,UAAU,GAAG,GAAG,KAAA;EAC/D,MAAM,QACJ,gBAAgB,KAAA,KAAa,OAAO,SAAS,YAAY,GACrD,KAAK,IAAI,KAAK,KAAK,IAAI,GAAG,YAAY,CAAC,GACvC,KAAA;EAEN,MAAM,SAAS,EAAE,IAAI,MAAM,SAAS,EAAE,MAAM;EAC5C,MAAM,YAAY,EAAE,IAAI,MAAM,SAAS;EACvC,MAAM,eAAe,YAAY,OAAO,SAAS,WAAW,GAAG,GAAG;EAClE,MAAM,SAAS,OAAO,SAAS,aAAa,GAAG,KAAK,IAAI,GAAG,aAAa,GAAG;EAE3E,MAAM,SAAS,MAAM,QAAQ,SAAS,eAAe,KAAK;GACxD;GACA;GACA,GAAI,SAAS,EAAE,QAAQ,GAAG,EAAE;GAC7B,CAAC;AACF,MAAI,CAAC,OACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAqB,EAAE,IAAI;EAG/D,MAAM,WAAW,wBAAwB,OAAO,QAAQ,UAAU,EAAE,OAAO,CAAC;AAC5E,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS,EAAE,UAAU;GACrB,YAAY,OAAO;GACpB,CAAC;GACF;AAGF,eAAc,IAAI,8BAA8B,OAAO,MAAM;EAC3D,MAAM,UAAU,8BAA8B,GAAG,SAAS,mBAAmB;AAC7E,MAAI,QACF,QAAO;EAET,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAC9B,MAAM,YAAY,EAAE,IAAI,MAAM,SAAS;EACvC,MAAM,WAAW,EAAE,IAAI,MAAM,QAAQ;EACrC,MAAM,SAAS,EAAE,IAAI,MAAM,SAAS,EAAE,MAAM;EAC5C,MAAM,eAAe,YAAY,OAAO,SAAS,WAAW,GAAG,GAAG;EAClE,MAAM,cAAc,WAAW,OAAO,SAAS,UAAU,GAAG,GAAG;EAC/D,MAAM,SAAS,OAAO,SAAS,aAAa,GAAG,KAAK,IAAI,GAAG,aAAa,GAAG;EAC3E,MAAM,QAAQ,OAAO,SAAS,YAAY,GAAG,KAAK,IAAI,KAAK,KAAK,IAAI,GAAG,YAAY,CAAC,GAAG;EACvF,MAAM,SAAS,MAAM,QAAQ,SAAS,eAAe,KAAK;GACxD;GACA;GACA,GAAI,SAAS,EAAE,QAAQ,GAAG,EAAE;GAC7B,CAAC;AAEF,MAAI,CAAC,OACH,QAAO,EAAE,KAAK,EAAE,OAAO,qBAAqB,EAAE,IAAI;AAGpD,SAAO,EAAE,KAAK,OAAO;GACrB;AAGF,eAAc,KAAK,yCAAyC,OAAO,MAAM;EACvE,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;AAE9B,MAAI,CAAC,MADc,QAAQ,uBAAuB,mBAAmB,IAAI,CAEvE,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAqB,EAAE,IAAI;EAE/D,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,KAAK,OAAO,KAAK,OAAO,YAAY,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,MAAM,GAAG,KAAA;EAC5E,MAAM,OAAO,OAAO,KAAK,SAAS,WAAW,KAAK,OAAO,KAAA;EACzD,MAAM,OACJ,KAAK,SAAS,KAAA,KAAa,OAAO,KAAK,SAAS,YAAY,KAAK,SAAS,QAAQ,CAAC,MAAM,QAAQ,KAAK,KAAK,GACtG,KAAK,OACN,KAAA;AACN,QAAM,QAAQ,uBAAuB,6BAA6B,KAAK;GAAE;GAAI;GAAM;GAAM,CAAC;AAC1F,SAAO,EAAE,KAAK,EAAE,IAAI,MAAM,CAAC;GAC3B;AAGF,eAAc,IAAI,6CAA6C,OAAO,MAAM;EAC1E,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;AAE9B,MAAI,CAAC,MADc,QAAQ,uBAAuB,mBAAmB,IAAI,CAEvE,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAqB,EAAE,IAAI;EAE/D,MAAM,cAAc,MAAM,QAAQ,SAAS,0BAA0B,IAAI;AACzE,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,aAAa;GAAE,CAAC;GACrD;AAEF,eAAc,IAAI,2DAA2D,OAAO,MAAM;EACxF,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAC9B,MAAM,eAAe,EAAE,IAAI,MAAM,eAAe;EAChD,MAAM,aAAa,MAAM,QAAQ,SAAS,wBAAwB,KAAK,aAAa;AACpF,MAAI,CAAC,WACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAwB,EAAE,IAAI;AAElE,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,YAAY;GAAE,CAAC;GACpD;AAEF,eAAc,KAAK,yCAAyC,OAAO,MAAM;EACvE,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAC9B,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,eAAe,OAAO,KAAK,iBAAiB,WAAW,KAAK,aAAa,MAAM,GAAG;AACxF,MAAI,CAAC,aACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAyB,EAAE,IAAI;AAEnE,MAAI;AACF,SAAM,QAAQ,SAAS,4BAA4B,KAAK,aAAa;WAC9D,KAAK;GACZ,MAAM,MAAM,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAC5D,OAAI,IAAI,SAAS,YAAY,IAAI,IAAI,SAAS,UAAU,CACtD,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAAK,EAAE,IAAI;AAE/C,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAAK,EAAE,IAAI;;EAE/C,MAAM,UAAU,MAAM,QAAQ,SAAS,WAAW,IAAI;AACtD,MAAI,CAAC,QACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAqB,EAAE,IAAI;AAE/D,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM;GAAS,CAAC;GACpC;AAEF,eAAc,KAAK,qCAAqC,OAAO,MAAM;EACnE,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;AAE9B,MAAI,CAAC,MADiB,QAAQ,SAAS,WAAW,IAAI,CAEpD,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAqB,EAAE,IAAI;EAE/D,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,eAAe,OAAO,KAAK,iBAAiB,WAAW,KAAK,eAAe,KAAA;EACjF,MAAM,QAAQ,OAAO,KAAK,UAAU,YAAY,KAAK,QAAQ;EAC7D,MAAM,SAAS,MAAM,QAAQ,SAAS,cAAc,KAAK;GAAE;GAAc;GAAO,CAAC;AACjF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,QAAQ;GAAE,CAAC;GAChD;AAGF,eAAc,IAAI,sBAAsB,OAAO,MAAM;EACnD,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAC9B,MAAM,aAAa,EAAE,IAAI,MAAM,UAAU,IAAI;EAC7C,MAAM,aAAa,IAAI,IACrB,WACG,MAAM,IAAI,CACV,KAAK,MAAM,EAAE,MAAM,CAAC,CACpB,OAAO,QAAQ,CACnB;EACD,MAAM,oBAAoB,WAAW,IAAI,aAAa;EACtD,MAAM,wBAAwB,WAAW,IAAI,iBAAiB;EAC9D,MAAM,YAAY,EAAE,IAAI,MAAM,SAAS;EACvC,MAAM,WAAW,EAAE,IAAI,MAAM,QAAQ;AAGrC,MAFuB,cAAc,KAAA,KAAa,aAAa,KAAA,GAE3C;GAClB,MAAM,UAAU,8BAA8B,GAAG,SAAS,mBAAmB;AAC7E,OAAI,QACF,QAAO;GAET,MAAM,eAAe,YAAY,OAAO,SAAS,WAAW,GAAG,GAAG;GAClE,MAAM,cAAc,WAAW,OAAO,SAAS,UAAU,GAAG,GAAG;GAC/D,MAAM,SAAS,OAAO,SAAS,aAAa,GAAG,KAAK,IAAI,GAAG,aAAa,GAAG;GAC3E,MAAM,QAAQ,OAAO,SAAS,YAAY,GAAG,KAAK,IAAI,KAAK,KAAK,IAAI,GAAG,YAAY,CAAC,GAAG;GACvF,MAAM,SAAS,MAAM,QAAQ,SAAS,eAAe,KAAK;IACxD;IACA;IACA,0BAA0B;IAC1B;IACD,CAAC;AACF,OAAI,CAAC,OACH,QAAO,EAAE,KAAK,EAAE,OAAO,qBAAqB,EAAE,IAAI;AAEpD,UAAO,EAAE,KAAK,OAAO;;EAGvB,MAAM,UAAU,MAAM,QAAQ,SAAS,WAAW,KAAK;GACrD,0BAA0B;GAC1B;GACD,CAAC;AACF,MAAI,CAAC,QACH,QAAO,EAAE,KAAK,EAAE,OAAO,qBAAqB,EAAE,IAAI;AAEpD,SAAO,EAAE,KAAK,EAAE,SAAS,CAAC;GAC1B;AAGF,eAAc,MAAM,sBAAsB,OAAO,MAAM;EACrD,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAC9B,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,QAKF,EAAE;AACN,MAAI,OAAO,KAAK,SAAS,SACvB,OAAM,OAAO,KAAK;AAEpB,MAAI,MAAM,QAAQ,KAAK,KAAK,CAC1B,OAAM,OAAO,KAAK;AAEpB,MAAI,OAAO,KAAK,gBAAgB,UAC9B,OAAM,cAAc,KAAK;AAE3B,MAAI,KAAK,eAAe,KAAA,KAAa,OAAO,KAAK,eAAe,YAAY,KAAK,eAAe,KAC9F,OAAM,aAAa,KAAK;EAE1B,MAAM,SAAS,MAAM,QAAQ,SAAS,MAAM,KAAK,MAAM;AACvD,MAAI,OAAO,OAAO,MAChB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,OAAO;GAAO,EAAE,IAAI;EAExD,MAAM,UAAU,MAAM,QAAQ,SAAS,WAAW,IAAI;AACtD,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM;GAAS,CAAC;GACpC;AAGF,eAAc,IAAI,6BAA6B,OAAO,MAAM;EAC1D,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAC9B,MAAM,SAAS,EAAE,IAAI,MAAM,SAAS,IAAW;EAC/C,MAAM,SAAS,MAAM,QAAQ,SAAS,OAAO,KAAK,OAAO;AACzD,SAAO,EAAE,KAAK,OAAO;GACrB;AAMF,eAAc,OAAO,+BAA+B,OAAO,MAAM;EAC/D,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAC9B,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EACjD,MAAM,SAAS,MAAM,QAAQ,uBAAuB,aAAa,IAAI;AACrE,MAAI,CAAC,OACH,QAAO,EAAE,KAAK,EAAE,OAAO,qBAAqB,EAAE,IAAI;EAGpD,IAAI,aAAa,OAAO,KAAK,eAAe,WAAW,KAAK,aAAa;EACzE,IAAI,QAAQ,OAAO,KAAK,UAAU,WAAW,KAAK,QAAQ;EAC1D,MAAM,iBACJ,OAAO,KAAK,mBAAmB,WAAW,KAAK,iBAAiB,KAAA;AAElE,MAAI,mBAAmB,KAAA,GAAW;GAChC,MAAM,QAAQ,4BAA4B,QAAQ,eAAe;AACjE,OAAI,CAAC,MACH,QAAO,EAAE,KAAK,EAAE,OAAO,iCAAiC,EAAE,IAAI;AAEhE,gBAAa,MAAM;AACnB,WAAQ,MAAM;;AAGhB,MAAI,aAAa,KAAK,SAAS,EAC7B,QAAO,EAAE,KAAK,EAAE,OAAO,+BAA+B,EAAE,IAAI;AAE9D,MAAI,cAAc,OAAO,OACvB,QAAO,EAAE,KAAK,EAAE,OAAO,sBAAsB,EAAE,IAAI;EAErD,MAAM,cAAc,KAAK,IAAI,OAAO,OAAO,SAAS,WAAW;EAC/D,MAAM,OAAO,OAAO,MAAM,GAAG,WAAW,CAAC,OAAO,OAAO,MAAM,aAAa,YAAY,CAAC;AACvF,QAAM,QAAQ,uBAAuB,aAAa,KAAK,KAAK;AAC5D,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;GAAa,CAAC;GACjD;AAGF,eAAc,OAAO,sBAAsB,OAAO,MAAM;EACtD,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAC9B,MAAM,SAAS,MAAM,QAAQ,SAAS,OAAO,IAAI;AACjD,SAAO,EAAE,KAAK,OAAO;GACrB;AAGF,eAAc,KAAK,8BAA8B,OAAO,MAAM;EAC5D,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAC9B,MAAM,SAAS,MAAM,QAAQ,SAAS,QAAQ,IAAI;AAClD,SAAO,EAAE,KAAK,OAAO;GACrB;AAGF,eAAc,KAAK,gCAAgC,OAAO,MAAM;EAC9D,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAC9B,MAAM,SAAS,MAAM,QAAQ,SAAS,UAAU,IAAI;AACpD,SAAO,EAAE,KAAK,OAAO;GACrB;AAGF,eAAc,KAAK,0BAA0B,OAAO,MAAM;EACxD,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAC9B,MAAM,SAAS,MAAM,QAAQ,SAAS,IAAI,IAAI;AAC9C,SAAO,EAAE,KAAK,OAAO;GACrB;AAGF,eAAc,KAAK,4BAA4B,OAAO,MAAM;EAC1D,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAC9B,MAAM,SAAS,MAAM,QAAQ,SAAS,MAAM,IAAI;AAChD,SAAO,EAAE,KAAK,OAAO;GACrB;AAGF,eAAc,KAAK,6BAA6B,OAAO,MAAM;EAC3D,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;EAG9B,MAAM,EAAE,SAAS,MADE,EAAE,IAAI,MAAM;EAE/B,MAAM,SAAS,MAAM,QAAQ,SAAS,OAAO,KAAK,KAAK;AACvD,SAAO,EAAE,KAAK,OAAO;GACrB;AAKF,eAAc,IAAI,kBAAkB,OAAO,MAAM;EAC/C,MAAM,QAAQ,EAAE,IAAI,OAAO;EAC3B,MAAM,SAAS,MAAM,QAAQ,SAAS,cAAc;GAClD,OAAO,MAAM,QAAQ,SAAS,MAAM,MAAM,GAAG,KAAA;GAC7C,QAAQ,MAAM,SAAS,SAAS,MAAM,OAAO,GAAG,KAAA;GACjD,CAAC;AACF,SAAO,EAAE,KAAK,OAAO;GACrB;AAGF,eAAc,IAAI,uBAAuB,OAAO,MAAM;EACpD,MAAM,MAAM,EAAE,IAAI,MAAM,MAAM;AAE9B,MAAI,CAAC,IAAI,WAAW,YAAY,CAC9B,QAAO,EAAE,KAAK,EAAE,OAAO,0BAA0B,EAAE,IAAI;EAEzD,MAAM,aAAa,EAAE,IAAI,MAAM,UAAU,IAAI;EAC7C,MAAM,aAAa,IAAI,IACrB,WACG,MAAM,IAAI,CACV,KAAK,MAAM,EAAE,MAAM,CAAC,CACpB,OAAO,QAAQ,CACnB;EACD,MAAM,UAAU,MAAM,QAAQ,SAAS,WAAW,KAAK;GACrD,0BAA0B,WAAW,IAAI,aAAa;GACtD,uBAAuB,WAAW,IAAI,iBAAiB;GACxD,CAAC;AACF,MAAI,CAAC,QACH,QAAO,EAAE,KAAK,EAAE,OAAO,8BAA8B,EAAE,IAAI;AAE7D,SAAO,EAAE,KAAK,EAAE,SAAS,CAAC;GAC1B"}

package/dist/src/gateway/hono/routes/shares.js

@@ -1,14 +1,14 @@
 import { resolveGatewayEffectiveHost } from "../../../config/gateway-bind.js";
-import { getClientIpFromHeaders } from "../../auth-rate-limit.js";
 import { extractToken } from "../../auth.js";
+import { getClientIpFromHeaders } from "../../security/loopback.js";
 import { logShareAudit } from "../../../share/share-audit.js";
 import { SHARE_CONFIG_DEFAULTS } from "../../../share/share-types.js";
 import { renderShareExpiredPage, renderShareLandingPage } from "../../../share/share-landing.js";
 import { consumeSharePublicLimit } from "../../../share/share-rate-limit.js";
 import { getShareStore } from "../../../share/share-store.js";
 import { resolveShareUrl } from "../../../share/share-url.js";
-import { createReadStream } from "node:fs";
 import { createHash } from "node:crypto";
+import { createReadStream } from "node:fs";
 import { stat } from "node:fs/promises";
 import { Readable } from "node:stream";
 //#region src/gateway/hono/routes/shares.ts
@@ -322,9 +322,9 @@ function registerShareRoutes(authenticated, deps) {
 async function resolveWorkspaceRootForShare(service, sessionKey, agentId) {
 	const cfg = service.currentConfig;
 	if (sessionKey) try {
-		return await service.getEffectiveWorkspacePathForSession(sessionKey);
+		return await service.sessions.getEffectiveWorkspacePath(sessionKey);
 	} catch {}
-	const { getWorkspacePath } = await import("../../../config/schema.js");
+	const { getWorkspacePath } = await import("../../../config/workspace-path-helpers.js");
 	const { resolveAgentWorkspaceDir, normalizeAgentId, resolveDefaultAgentId } = await import("../../../agent/agent-scope.js");
 	if (agentId) return resolveAgentWorkspaceDir(cfg, normalizeAgentId(agentId));
 	const root = getWorkspacePath(cfg);

package/dist/src/gateway/hono/routes/shares.js.map

@@ -1 +1 @@
-{"version":3,"file":"shares.js","names":[],"sources":["../../../../../src/gateway/hono/routes/shares.ts"],"sourcesContent":["import type { Hono } from 'hono';\nimport { createReadStream } from 'node:fs';\nimport { stat } from 'node:fs/promises';\nimport { createHash } from 'node:crypto';\nimport { Readable } from 'node:stream';\n\nimport { extractToken } from '../../auth.js';\nimport { getClientIpFromHeaders } from '../../auth-rate-limit.js';\nimport { getShareStore } from '../../../share/share-store.js';\nimport { resolveShareUrl } from '../../../share/share-url.js';\nimport { consumeSharePublicLimit } from '../../../share/share-rate-limit.js';\nimport { logShareAudit } from '../../../share/share-audit.js';\nimport { renderShareLandingPage, renderShareExpiredPage } from '../../../share/share-landing.js';\nimport type { ShareExpiredReason } from '../../../share/share-landing.js';\nimport type { ShareConfig } from '../../../share/share-types.js';\nimport { resolveGatewayEffectiveHost } from '../../../config/gateway-bind.js';\nimport { SHARE_CONFIG_DEFAULTS } from '../../../share/share-types.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\nimport type { GatewayService } from '../../service.js';\n\nfunction getShareUrlContext(service: GatewayService) {\n  const gateway = service.currentConfig.gateway;\n  return {\n    gatewayHost: resolveGatewayEffectiveHost(service.currentConfig),\n    gatewayPort: gateway.port ?? 18790,\n  };\n}\n\nfunction resolveShareConfig(service: GatewayService): Partial<ShareConfig> {\n  const raw = (service.currentConfig.gateway as Record<string, unknown>)?.share;\n  if (!raw || typeof raw !== 'object') return {};\n  return raw as Partial<ShareConfig>;\n}\n\nfunction hashGatewayToken(token: string): string {\n  return createHash('sha256').update(token, 'utf8').digest('hex').slice(0, 12);\n}\n\nconst MAX_CONCURRENT_DOWNLOADS_PER_TOKEN = 5;\nconst activeDownloads = new Map<string, number>();\n\nfunction acquireDownloadSlot(token: string): boolean {\n  const current = activeDownloads.get(token) ?? 0;\n  if (current >= MAX_CONCURRENT_DOWNLOADS_PER_TOKEN) return false;\n  activeDownloads.set(token, current + 1);\n  return true;\n}\n\nfunction releaseDownloadSlot(token: string): void {\n  const current = activeDownloads.get(token) ?? 0;\n  if (current <= 1) {\n    activeDownloads.delete(token);\n  } else {\n    activeDownloads.set(token, current - 1);\n  }\n}\n\n// ── Public routes (no auth required) ──────────────────────────────────────────\n\nexport function registerSharePublicRoutes(app: Hono, service: GatewayService): void {\n  const store = getShareStore(resolveShareConfig(service));\n\n  /** Landing page — does NOT consume viewCount (prevents link unfurl from wasting views). */\n  app.get('/s/:token', async (c) => {\n    const clientIp = getClientIpFromHeaders({ get: (n: string) => c.req.header(n) ?? undefined });\n    const rateResult = consumeSharePublicLimit(clientIp);\n    if (!rateResult.allowed) {\n      c.header('Retry-After', String(Math.ceil(rateResult.retryAfterMs / 1000)));\n      return c.text('Too many requests', 429);\n    }\n\n    const token = c.req.param('token');\n    const record = store.getByToken(token);\n\n    if (!record) {\n      return c.html(renderShareExpiredPage('not_found'), 404);\n    }\n\n    const validation = store.validateAccess(record);\n    if (!validation.valid) {\n      logShareAudit(\n        'share.access_denied',\n        { shareId: record.id, tokenPrefix: token.slice(0, 8), reason: validation.reason, clientIp },\n        `Share access denied: ${validation.reason}`,\n      );\n      return c.html(renderShareExpiredPage(validation.reason as ShareExpiredReason), 410);\n    }\n\n    // Direct download shortcut: ?dl=1\n    if (c.req.query('dl') === '1') {\n      return handleDownload(c, store, record, clientIp);\n    }\n\n    // Inline preview for whitelisted MIME types: ?inline=1\n    if (c.req.query('inline') === '1') {\n      const cfg = { ...SHARE_CONFIG_DEFAULTS, ...resolveShareConfig(service) };\n      if (cfg.inlinePreviewMimes.includes(record.mimeType)) {\n        return handleDownload(c, store, record, clientIp, true);\n      }\n    }\n\n    const downloadPath = `/s/${token}/download`;\n    return c.html(renderShareLandingPage(record, downloadPath));\n  });\n\n  /** Actual file download — consumes viewCount. */\n  app.post('/s/:token/download', async (c) => {\n    const clientIp = getClientIpFromHeaders({ get: (n: string) => c.req.header(n) ?? undefined });\n    const rateResult = consumeSharePublicLimit(clientIp);\n    if (!rateResult.allowed) {\n      c.header('Retry-After', String(Math.ceil(rateResult.retryAfterMs / 1000)));\n      return c.text('Too many requests', 429);\n    }\n\n    const token = c.req.param('token');\n    const record = store.getByToken(token);\n\n    if (!record) {\n      return c.html(renderShareExpiredPage('not_found'), 404);\n    }\n\n    const validation = store.validateAccess(record);\n    if (!validation.valid) {\n      logShareAudit(\n        'share.access_denied',\n        { shareId: record.id, tokenPrefix: token.slice(0, 8), reason: validation.reason, clientIp },\n        `Share download denied: ${validation.reason}`,\n      );\n      return c.html(renderShareExpiredPage(validation.reason as ShareExpiredReason), 410);\n    }\n\n    return handleDownload(c, store, record, clientIp);\n  });\n\n  /** File metadata (for link preview cards). */\n  app.get('/s/:token/meta', async (c) => {\n    const clientIp = getClientIpFromHeaders({ get: (n: string) => c.req.header(n) ?? undefined });\n    const rateResult = consumeSharePublicLimit(clientIp);\n    if (!rateResult.allowed) {\n      c.header('Retry-After', String(Math.ceil(rateResult.retryAfterMs / 1000)));\n      return c.text('Too many requests', 429);\n    }\n\n    const token = c.req.param('token');\n    const record = store.getByToken(token);\n    if (!record) {\n      return c.json({ valid: false }, 404);\n    }\n\n    const validation = store.validateAccess(record);\n    const remainingViews = record.maxViews !== null ? Math.max(0, record.maxViews - record.viewCount) : null;\n\n    return c.json({\n      fileName: record.fileName,\n      fileSize: record.fileSize,\n      mimeType: record.mimeType,\n      description: record.description ?? null,\n      expiresAt: record.expiresAt,\n      remainingViews,\n      valid: validation.valid,\n    });\n  });\n\n  /** HEAD check (Hono uses .on() for HEAD method). */\n  app.on('HEAD', '/s/:token', async (c) => {\n    const token = c.req.param('token');\n    const record = store.getByToken(token);\n    if (!record) return c.body(null, 404);\n    const validation = store.validateAccess(record);\n    return c.body(null, validation.valid ? 200 : 410);\n  });\n}\n\n// ── Authenticated routes ──────────────────────────────────────────────────────\n\nexport function registerShareRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  const { service } = deps;\n  const store = getShareStore(resolveShareConfig(service));\n\n  /** Create a share. */\n  authenticated.post('/api/shares', async (c) => {\n    const gatewayToken = extractToken({ authorization: c.req.header('authorization') ?? undefined });\n    if (!gatewayToken) return c.json({ ok: false, error: { message: 'Token required' } }, 401);\n\n    let body: Record<string, unknown>;\n    try {\n      body = (await c.req.json()) as Record<string, unknown>;\n    } catch {\n      return c.json({ ok: false, error: { message: 'Invalid JSON' } }, 400);\n    }\n\n    const path = typeof body.path === 'string' ? body.path.trim() : '';\n    if (!path) {\n      return c.json({ ok: false, error: { message: 'Missing path' } }, 400);\n    }\n\n    const sessionKey = typeof body.sessionKey === 'string' ? body.sessionKey.trim() : undefined;\n    const agentId = typeof body.agentId === 'string' ? body.agentId.trim() : undefined;\n\n    // Resolve workspace root (same logic as workspace editor routes)\n    const workspaceRoot = await resolveWorkspaceRootForShare(service, sessionKey, agentId);\n    if (!workspaceRoot) {\n      return c.json({ ok: false, error: { message: 'Workspace not configured' } }, 400);\n    }\n\n    const ttlMs = typeof body.ttlMs === 'number' ? body.ttlMs : undefined;\n    const maxViews = body.maxViews === null ? null : typeof body.maxViews === 'number' ? body.maxViews : undefined;\n    const description = typeof body.description === 'string' ? body.description.trim() || undefined : undefined;\n\n    try {\n      store.updateConfig(resolveShareConfig(service));\n      const record = await store.create({\n        path,\n        ttlMs,\n        maxViews,\n        description,\n        sessionKey,\n        agentId,\n        workspaceRoot,\n        gatewayTokenHash: hashGatewayToken(gatewayToken),\n      });\n\n      const urlCtx = getShareUrlContext(service);\n      const resolved = resolveShareUrl(record.token, urlCtx);\n\n      return c.json({\n        ok: true,\n        payload: {\n          id: record.id,\n          token: record.token,\n          shareUrl: resolved.shareUrl,\n          lanUrl: resolved.lanUrl,\n          reachability: resolved.reachability,\n          reachabilityHint: resolved.reachabilityHint,\n          expiresAt: record.expiresAt,\n          maxViews: record.maxViews,\n          fileName: record.fileName,\n          fileSize: record.fileSize,\n        },\n      }, 201);\n    } catch (err) {\n      const message = err instanceof Error ? err.message : String(err);\n      return c.json({ ok: false, error: { message } }, 400);\n    }\n  });\n\n  /** List all shares. */\n  authenticated.get('/api/shares', async (c) => {\n    store.updateConfig(resolveShareConfig(service));\n    const shares = store.getAllShares();\n    const urlCtx = getShareUrlContext(service);\n    const now = Date.now();\n\n    const items = shares.map((r) => {\n      const resolved = resolveShareUrl(r.token, urlCtx);\n      const expired = now >= new Date(r.expiresAt).getTime();\n      return {\n        id: r.id,\n        fileName: r.fileName,\n        workspaceRelativePath: r.workspaceRelativePath,\n        shareUrl: resolved.shareUrl,\n        lanUrl: resolved.lanUrl,\n        reachability: resolved.reachability,\n        createdAt: r.createdAt,\n        expiresAt: r.expiresAt,\n        viewCount: r.viewCount,\n        maxViews: r.maxViews,\n        revoked: r.revoked,\n        expired,\n        description: r.description ?? null,\n        fileSize: r.fileSize,\n        mimeType: r.mimeType,\n      };\n    });\n\n    return c.json({ ok: true, payload: { shares: items } });\n  });\n\n  /** Get single share details. */\n  authenticated.get('/api/shares/:id', async (c) => {\n    const id = c.req.param('id');\n    const record = store.getById(id);\n    if (!record) return c.json({ ok: false, error: { message: 'Not found' } }, 404);\n\n    const urlCtx = getShareUrlContext(service);\n    const resolved = resolveShareUrl(record.token, urlCtx);\n    const expired = Date.now() >= new Date(record.expiresAt).getTime();\n\n    return c.json({\n      ok: true,\n      payload: {\n        ...record,\n        token: undefined,\n        shareUrl: resolved.shareUrl,\n        lanUrl: resolved.lanUrl,\n        reachability: resolved.reachability,\n        expired,\n      },\n    });\n  });\n\n  /** Revoke a share. */\n  authenticated.delete('/api/shares/:id', async (c) => {\n    const id = c.req.param('id');\n    const success = store.revoke(id);\n    if (!success) return c.json({ ok: false, error: { message: 'Not found' } }, 404);\n    return c.json({ ok: true });\n  });\n\n  /** Batch revoke. */\n  authenticated.delete('/api/shares', async (c) => {\n    let body: Record<string, unknown> = {};\n    try {\n      body = (await c.req.json()) as Record<string, unknown>;\n    } catch {\n      /* empty body = no-op */\n    }\n\n    if (body.expired === true) {\n      const count = store.revokeExpired();\n      return c.json({ ok: true, payload: { revokedCount: count } });\n    }\n\n    const ids = Array.isArray(body.ids) ? (body.ids as string[]).filter((x) => typeof x === 'string') : [];\n    if (ids.length === 0) {\n      return c.json({ ok: false, error: { message: 'Provide ids array or expired: true' } }, 400);\n    }\n    const count = store.revokeMany(ids);\n    return c.json({ ok: true, payload: { revokedCount: count } });\n  });\n\n  /** Update a share (extend TTL or change maxViews). */\n  authenticated.patch('/api/shares/:id', async (c) => {\n    const id = c.req.param('id');\n    let body: Record<string, unknown>;\n    try {\n      body = (await c.req.json()) as Record<string, unknown>;\n    } catch {\n      return c.json({ ok: false, error: { message: 'Invalid JSON' } }, 400);\n    }\n\n    const patch: { extendTtlMs?: number; maxViews?: number | null } = {};\n    if (typeof body.extendTtlMs === 'number') patch.extendTtlMs = body.extendTtlMs;\n    if (body.maxViews === null || typeof body.maxViews === 'number') patch.maxViews = body.maxViews as number | null;\n\n    const updated = store.update(id, patch);\n    if (!updated) return c.json({ ok: false, error: { message: 'Not found' } }, 404);\n\n    const urlCtx = getShareUrlContext(service);\n    const resolved = resolveShareUrl(updated.token, urlCtx);\n\n    return c.json({\n      ok: true,\n      payload: {\n        id: updated.id,\n        expiresAt: updated.expiresAt,\n        maxViews: updated.maxViews,\n        shareUrl: resolved.shareUrl,\n      },\n    });\n  });\n}\n\n// ── Helpers ───────────────────────────────────────────────────────────────────\n\nasync function resolveWorkspaceRootForShare(\n  service: GatewayService,\n  sessionKey: string | undefined,\n  agentId: string | undefined,\n): Promise<string | null> {\n  const cfg = service.currentConfig;\n\n  if (sessionKey) {\n    try {\n      return await service.getEffectiveWorkspacePathForSession(sessionKey);\n    } catch {\n      /* fall through to agentId */\n    }\n  }\n\n  // Import dynamically to avoid circular dependency at module load time\n  const { getWorkspacePath } = await import('../../../config/schema.js');\n  const { resolveAgentWorkspaceDir, normalizeAgentId, resolveDefaultAgentId } = await import(\n    '../../../agent/agent-scope.js'\n  );\n\n  if (agentId) {\n    const normalized = normalizeAgentId(agentId);\n    return resolveAgentWorkspaceDir(cfg, normalized);\n  }\n\n  const root = getWorkspacePath(cfg);\n  if (root) return root;\n\n  const defaultId = resolveDefaultAgentId(cfg);\n  return resolveAgentWorkspaceDir(cfg, defaultId);\n}\n\nasync function handleDownload(\n  c: { header: (n: string, v: string) => void; body: (b: unknown, s?: number) => Response },\n  store: ReturnType<typeof getShareStore>,\n  record: ReturnType<ReturnType<typeof getShareStore>['getByToken']> & {},\n  clientIp: string,\n  inline = false,\n): Promise<Response> {\n  // Concurrency check\n  if (!acquireDownloadSlot(record.token)) {\n    return c.body('Too many concurrent downloads for this share', 429) as unknown as Response;\n  }\n\n  try {\n    // File integrity check (inode + path)\n    const integrity = await store.validateFileIntegrity(record);\n    if (!integrity.valid) {\n      logShareAudit(\n        'share.access_denied',\n        { shareId: record.id, tokenPrefix: record.token.slice(0, 8), reason: integrity.reason, clientIp },\n        `Share file integrity check failed: ${integrity.reason}`,\n      );\n      const { renderShareExpiredPage: render } = await import('../../../share/share-landing.js');\n      return new Response(render(integrity.reason as ShareExpiredReason), {\n        status: 410,\n        headers: { 'Content-Type': 'text/html; charset=utf-8' },\n      });\n    }\n\n    // Consume viewCount\n    store.incrementViewCount(record.id);\n\n    logShareAudit(\n      'share.access',\n      { shareId: record.id, tokenPrefix: record.token.slice(0, 8), clientIp, viewCount: record.viewCount },\n      `Share downloaded: ${record.fileName}`,\n    );\n\n    // Stream file\n    const fileStat = await stat(record.absolutePath);\n    const stream = createReadStream(record.absolutePath);\n    const webStream = Readable.toWeb(stream) as ReadableStream;\n\n    const disposition = inline ? `inline; filename=\"${encodeURIComponent(record.fileName)}\"` : `attachment; filename=\"${encodeURIComponent(record.fileName)}\"`;\n\n    return new Response(webStream, {\n      status: 200,\n      headers: {\n        'Content-Type': record.mimeType,\n        'Content-Disposition': disposition,\n        'Content-Length': String(fileStat.size),\n        'Cache-Control': 'private, no-store',\n        'X-Content-Type-Options': 'nosniff',\n        'X-Frame-Options': 'DENY',\n        'Referrer-Policy': 'no-referrer',\n      },\n    });\n  } finally {\n    releaseDownloadSlot(record.token);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;AAoBA,SAAS,mBAAmB,SAAyB;CACnD,MAAM,UAAU,QAAQ,cAAc;AACtC,QAAO;EACL,aAAa,4BAA4B,QAAQ,cAAc;EAC/D,aAAa,QAAQ,QAAQ;EAC9B;;AAGH,SAAS,mBAAmB,SAA+C;CACzE,MAAM,MAAO,QAAQ,cAAc,SAAqC;AACxE,KAAI,CAAC,OAAO,OAAO,QAAQ,SAAU,QAAO,EAAE;AAC9C,QAAO;;AAGT,SAAS,iBAAiB,OAAuB;AAC/C,QAAO,WAAW,SAAS,CAAC,OAAO,OAAO,OAAO,CAAC,OAAO,MAAM,CAAC,MAAM,GAAG,GAAG;;AAG9E,MAAM,qCAAqC;AAC3C,MAAM,kCAAkB,IAAI,KAAqB;AAEjD,SAAS,oBAAoB,OAAwB;CACnD,MAAM,UAAU,gBAAgB,IAAI,MAAM,IAAI;AAC9C,KAAI,WAAW,mCAAoC,QAAO;AAC1D,iBAAgB,IAAI,OAAO,UAAU,EAAE;AACvC,QAAO;;AAGT,SAAS,oBAAoB,OAAqB;CAChD,MAAM,UAAU,gBAAgB,IAAI,MAAM,IAAI;AAC9C,KAAI,WAAW,EACb,iBAAgB,OAAO,MAAM;KAE7B,iBAAgB,IAAI,OAAO,UAAU,EAAE;;AAM3C,SAAgB,0BAA0B,KAAW,SAA+B;CAClF,MAAM,QAAQ,cAAc,mBAAmB,QAAQ,CAAC;;AAGxD,KAAI,IAAI,aAAa,OAAO,MAAM;EAChC,MAAM,WAAW,uBAAuB,EAAE,MAAM,MAAc,EAAE,IAAI,OAAO,EAAE,IAAI,KAAA,GAAW,CAAC;EAC7F,MAAM,aAAa,wBAAwB,SAAS;AACpD,MAAI,CAAC,WAAW,SAAS;AACvB,KAAE,OAAO,eAAe,OAAO,KAAK,KAAK,WAAW,eAAe,IAAK,CAAC,CAAC;AAC1E,UAAO,EAAE,KAAK,qBAAqB,IAAI;;EAGzC,MAAM,QAAQ,EAAE,IAAI,MAAM,QAAQ;EAClC,MAAM,SAAS,MAAM,WAAW,MAAM;AAEtC,MAAI,CAAC,OACH,QAAO,EAAE,KAAK,uBAAuB,YAAY,EAAE,IAAI;EAGzD,MAAM,aAAa,MAAM,eAAe,OAAO;AAC/C,MAAI,CAAC,WAAW,OAAO;AACrB,iBACE,uBACA;IAAE,SAAS,OAAO;IAAI,aAAa,MAAM,MAAM,GAAG,EAAE;IAAE,QAAQ,WAAW;IAAQ;IAAU,EAC3F,wBAAwB,WAAW,SACpC;AACD,UAAO,EAAE,KAAK,uBAAuB,WAAW,OAA6B,EAAE,IAAI;;AAIrF,MAAI,EAAE,IAAI,MAAM,KAAK,KAAK,IACxB,QAAO,eAAe,GAAG,OAAO,QAAQ,SAAS;AAInD,MAAI,EAAE,IAAI,MAAM,SAAS,KAAK;OAExB;IADU,GAAG;IAAuB,GAAG,mBAAmB,QAAQ;IAC/D,CAAC,mBAAmB,SAAS,OAAO,SAAS,CAClD,QAAO,eAAe,GAAG,OAAO,QAAQ,UAAU,KAAK;;EAI3D,MAAM,eAAe,MAAM,MAAM;AACjC,SAAO,EAAE,KAAK,uBAAuB,QAAQ,aAAa,CAAC;GAC3D;;AAGF,KAAI,KAAK,sBAAsB,OAAO,MAAM;EAC1C,MAAM,WAAW,uBAAuB,EAAE,MAAM,MAAc,EAAE,IAAI,OAAO,EAAE,IAAI,KAAA,GAAW,CAAC;EAC7F,MAAM,aAAa,wBAAwB,SAAS;AACpD,MAAI,CAAC,WAAW,SAAS;AACvB,KAAE,OAAO,eAAe,OAAO,KAAK,KAAK,WAAW,eAAe,IAAK,CAAC,CAAC;AAC1E,UAAO,EAAE,KAAK,qBAAqB,IAAI;;EAGzC,MAAM,QAAQ,EAAE,IAAI,MAAM,QAAQ;EAClC,MAAM,SAAS,MAAM,WAAW,MAAM;AAEtC,MAAI,CAAC,OACH,QAAO,EAAE,KAAK,uBAAuB,YAAY,EAAE,IAAI;EAGzD,MAAM,aAAa,MAAM,eAAe,OAAO;AAC/C,MAAI,CAAC,WAAW,OAAO;AACrB,iBACE,uBACA;IAAE,SAAS,OAAO;IAAI,aAAa,MAAM,MAAM,GAAG,EAAE;IAAE,QAAQ,WAAW;IAAQ;IAAU,EAC3F,0BAA0B,WAAW,SACtC;AACD,UAAO,EAAE,KAAK,uBAAuB,WAAW,OAA6B,EAAE,IAAI;;AAGrF,SAAO,eAAe,GAAG,OAAO,QAAQ,SAAS;GACjD;;AAGF,KAAI,IAAI,kBAAkB,OAAO,MAAM;EAErC,MAAM,aAAa,wBADF,uBAAuB,EAAE,MAAM,MAAc,EAAE,IAAI,OAAO,EAAE,IAAI,KAAA,GAAW,CACzC,CAAC;AACpD,MAAI,CAAC,WAAW,SAAS;AACvB,KAAE,OAAO,eAAe,OAAO,KAAK,KAAK,WAAW,eAAe,IAAK,CAAC,CAAC;AAC1E,UAAO,EAAE,KAAK,qBAAqB,IAAI;;EAGzC,MAAM,QAAQ,EAAE,IAAI,MAAM,QAAQ;EAClC,MAAM,SAAS,MAAM,WAAW,MAAM;AACtC,MAAI,CAAC,OACH,QAAO,EAAE,KAAK,EAAE,OAAO,OAAO,EAAE,IAAI;EAGtC,MAAM,aAAa,MAAM,eAAe,OAAO;EAC/C,MAAM,iBAAiB,OAAO,aAAa,OAAO,KAAK,IAAI,GAAG,OAAO,WAAW,OAAO,UAAU,GAAG;AAEpG,SAAO,EAAE,KAAK;GACZ,UAAU,OAAO;GACjB,UAAU,OAAO;GACjB,UAAU,OAAO;GACjB,aAAa,OAAO,eAAe;GACnC,WAAW,OAAO;GAClB;GACA,OAAO,WAAW;GACnB,CAAC;GACF;;AAGF,KAAI,GAAG,QAAQ,aAAa,OAAO,MAAM;EACvC,MAAM,QAAQ,EAAE,IAAI,MAAM,QAAQ;EAClC,MAAM,SAAS,MAAM,WAAW,MAAM;AACtC,MAAI,CAAC,OAAQ,QAAO,EAAE,KAAK,MAAM,IAAI;EACrC,MAAM,aAAa,MAAM,eAAe,OAAO;AAC/C,SAAO,EAAE,KAAK,MAAM,WAAW,QAAQ,MAAM,IAAI;GACjD;;AAKJ,SAAgB,oBAAoB,eAAqB,MAAoC;CAC3F,MAAM,EAAE,YAAY;CACpB,MAAM,QAAQ,cAAc,mBAAmB,QAAQ,CAAC;;AAGxD,eAAc,KAAK,eAAe,OAAO,MAAM;EAC7C,MAAM,eAAe,aAAa,EAAE,eAAe,EAAE,IAAI,OAAO,gBAAgB,IAAI,KAAA,GAAW,CAAC;AAChG,MAAI,CAAC,aAAc,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,kBAAkB;GAAE,EAAE,IAAI;EAE1F,IAAI;AACJ,MAAI;AACF,UAAQ,MAAM,EAAE,IAAI,MAAM;UACpB;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS,gBAAgB;IAAE,EAAE,IAAI;;EAGvE,MAAM,OAAO,OAAO,KAAK,SAAS,WAAW,KAAK,KAAK,MAAM,GAAG;AAChE,MAAI,CAAC,KACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,gBAAgB;GAAE,EAAE,IAAI;EAGvE,MAAM,aAAa,OAAO,KAAK,eAAe,WAAW,KAAK,WAAW,MAAM,GAAG,KAAA;EAClF,MAAM,UAAU,OAAO,KAAK,YAAY,WAAW,KAAK,QAAQ,MAAM,GAAG,KAAA;EAGzE,MAAM,gBAAgB,MAAM,6BAA6B,SAAS,YAAY,QAAQ;AACtF,MAAI,CAAC,cACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,4BAA4B;GAAE,EAAE,IAAI;EAGnF,MAAM,QAAQ,OAAO,KAAK,UAAU,WAAW,KAAK,QAAQ,KAAA;EAC5D,MAAM,WAAW,KAAK,aAAa,OAAO,OAAO,OAAO,KAAK,aAAa,WAAW,KAAK,WAAW,KAAA;EACrG,MAAM,cAAc,OAAO,KAAK,gBAAgB,WAAW,KAAK,YAAY,MAAM,IAAI,KAAA,IAAY,KAAA;AAElG,MAAI;AACF,SAAM,aAAa,mBAAmB,QAAQ,CAAC;GAC/C,MAAM,SAAS,MAAM,MAAM,OAAO;IAChC;IACA;IACA;IACA;IACA;IACA;IACA;IACA,kBAAkB,iBAAiB,aAAa;IACjD,CAAC;GAEF,MAAM,SAAS,mBAAmB,QAAQ;GAC1C,MAAM,WAAW,gBAAgB,OAAO,OAAO,OAAO;AAEtD,UAAO,EAAE,KAAK;IACZ,IAAI;IACJ,SAAS;KACP,IAAI,OAAO;KACX,OAAO,OAAO;KACd,UAAU,SAAS;KACnB,QAAQ,SAAS;KACjB,cAAc,SAAS;KACvB,kBAAkB,SAAS;KAC3B,WAAW,OAAO;KAClB,UAAU,OAAO;KACjB,UAAU,OAAO;KACjB,UAAU,OAAO;KAClB;IACF,EAAE,IAAI;WACA,KAAK;GACZ,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAChE,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS;IAAE,EAAE,IAAI;;GAEvD;;AAGF,eAAc,IAAI,eAAe,OAAO,MAAM;AAC5C,QAAM,aAAa,mBAAmB,QAAQ,CAAC;EAC/C,MAAM,SAAS,MAAM,cAAc;EACnC,MAAM,SAAS,mBAAmB,QAAQ;EAC1C,MAAM,MAAM,KAAK,KAAK;EAEtB,MAAM,QAAQ,OAAO,KAAK,MAAM;GAC9B,MAAM,WAAW,gBAAgB,EAAE,OAAO,OAAO;GACjD,MAAM,UAAU,OAAO,IAAI,KAAK,EAAE,UAAU,CAAC,SAAS;AACtD,UAAO;IACL,IAAI,EAAE;IACN,UAAU,EAAE;IACZ,uBAAuB,EAAE;IACzB,UAAU,SAAS;IACnB,QAAQ,SAAS;IACjB,cAAc,SAAS;IACvB,WAAW,EAAE;IACb,WAAW,EAAE;IACb,WAAW,EAAE;IACb,UAAU,EAAE;IACZ,SAAS,EAAE;IACX;IACA,aAAa,EAAE,eAAe;IAC9B,UAAU,EAAE;IACZ,UAAU,EAAE;IACb;IACD;AAEF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,QAAQ,OAAO;GAAE,CAAC;GACvD;;AAGF,eAAc,IAAI,mBAAmB,OAAO,MAAM;EAChD,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK;EAC5B,MAAM,SAAS,MAAM,QAAQ,GAAG;AAChC,MAAI,CAAC,OAAQ,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,aAAa;GAAE,EAAE,IAAI;EAE/E,MAAM,SAAS,mBAAmB,QAAQ;EAC1C,MAAM,WAAW,gBAAgB,OAAO,OAAO,OAAO;EACtD,MAAM,UAAU,KAAK,KAAK,IAAI,IAAI,KAAK,OAAO,UAAU,CAAC,SAAS;AAElE,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,GAAG;IACH,OAAO,KAAA;IACP,UAAU,SAAS;IACnB,QAAQ,SAAS;IACjB,cAAc,SAAS;IACvB;IACD;GACF,CAAC;GACF;;AAGF,eAAc,OAAO,mBAAmB,OAAO,MAAM;EACnD,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK;AAE5B,MAAI,CADY,MAAM,OAAO,GACjB,CAAE,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,aAAa;GAAE,EAAE,IAAI;AAChF,SAAO,EAAE,KAAK,EAAE,IAAI,MAAM,CAAC;GAC3B;;AAGF,eAAc,OAAO,eAAe,OAAO,MAAM;EAC/C,IAAI,OAAgC,EAAE;AACtC,MAAI;AACF,UAAQ,MAAM,EAAE,IAAI,MAAM;UACpB;AAIR,MAAI,KAAK,YAAY,MAAM;GACzB,MAAM,QAAQ,MAAM,eAAe;AACnC,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,cAAc,OAAO;IAAE,CAAC;;EAG/D,MAAM,MAAM,MAAM,QAAQ,KAAK,IAAI,GAAI,KAAK,IAAiB,QAAQ,MAAM,OAAO,MAAM,SAAS,GAAG,EAAE;AACtG,MAAI,IAAI,WAAW,EACjB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,sCAAsC;GAAE,EAAE,IAAI;EAE7F,MAAM,QAAQ,MAAM,WAAW,IAAI;AACnC,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,cAAc,OAAO;GAAE,CAAC;GAC7D;;AAGF,eAAc,MAAM,mBAAmB,OAAO,MAAM;EAClD,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK;EAC5B,IAAI;AACJ,MAAI;AACF,UAAQ,MAAM,EAAE,IAAI,MAAM;UACpB;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS,gBAAgB;IAAE,EAAE,IAAI;;EAGvE,MAAM,QAA4D,EAAE;AACpE,MAAI,OAAO,KAAK,gBAAgB,SAAU,OAAM,cAAc,KAAK;AACnE,MAAI,KAAK,aAAa,QAAQ,OAAO,KAAK,aAAa,SAAU,OAAM,WAAW,KAAK;EAEvF,MAAM,UAAU,MAAM,OAAO,IAAI,MAAM;AACvC,MAAI,CAAC,QAAS,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,aAAa;GAAE,EAAE,IAAI;EAEhF,MAAM,SAAS,mBAAmB,QAAQ;EAC1C,MAAM,WAAW,gBAAgB,QAAQ,OAAO,OAAO;AAEvD,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,IAAI,QAAQ;IACZ,WAAW,QAAQ;IACnB,UAAU,QAAQ;IAClB,UAAU,SAAS;IACpB;GACF,CAAC;GACF;;AAKJ,eAAe,6BACb,SACA,YACA,SACwB;CACxB,MAAM,MAAM,QAAQ;AAEpB,KAAI,WACF,KAAI;AACF,SAAO,MAAM,QAAQ,oCAAoC,WAAW;SAC9D;CAMV,MAAM,EAAE,qBAAqB,MAAM,OAAO;CAC1C,MAAM,EAAE,0BAA0B,kBAAkB,0BAA0B,MAAM,OAClF;AAGF,KAAI,QAEF,QAAO,yBAAyB,KADb,iBAAiB,QACW,CAAC;CAGlD,MAAM,OAAO,iBAAiB,IAAI;AAClC,KAAI,KAAM,QAAO;AAGjB,QAAO,yBAAyB,KADd,sBAAsB,IACM,CAAC;;AAGjD,eAAe,eACb,GACA,OACA,QACA,UACA,SAAS,OACU;AAEnB,KAAI,CAAC,oBAAoB,OAAO,MAAM,CACpC,QAAO,EAAE,KAAK,gDAAgD,IAAI;AAGpE,KAAI;EAEF,MAAM,YAAY,MAAM,MAAM,sBAAsB,OAAO;AAC3D,MAAI,CAAC,UAAU,OAAO;AACpB,iBACE,uBACA;IAAE,SAAS,OAAO;IAAI,aAAa,OAAO,MAAM,MAAM,GAAG,EAAE;IAAE,QAAQ,UAAU;IAAQ;IAAU,EACjG,sCAAsC,UAAU,SACjD;GACD,MAAM,EAAE,wBAAwB,WAAW,MAAM,OAAO;AACxD,UAAO,IAAI,SAAS,OAAO,UAAU,OAA6B,EAAE;IAClE,QAAQ;IACR,SAAS,EAAE,gBAAgB,4BAA4B;IACxD,CAAC;;AAIJ,QAAM,mBAAmB,OAAO,GAAG;AAEnC,gBACE,gBACA;GAAE,SAAS,OAAO;GAAI,aAAa,OAAO,MAAM,MAAM,GAAG,EAAE;GAAE;GAAU,WAAW,OAAO;GAAW,EACpG,qBAAqB,OAAO,WAC7B;EAGD,MAAM,WAAW,MAAM,KAAK,OAAO,aAAa;EAChD,MAAM,SAAS,iBAAiB,OAAO,aAAa;EACpD,MAAM,YAAY,SAAS,MAAM,OAAO;EAExC,MAAM,cAAc,SAAS,qBAAqB,mBAAmB,OAAO,SAAS,CAAC,KAAK,yBAAyB,mBAAmB,OAAO,SAAS,CAAC;AAExJ,SAAO,IAAI,SAAS,WAAW;GAC7B,QAAQ;GACR,SAAS;IACP,gBAAgB,OAAO;IACvB,uBAAuB;IACvB,kBAAkB,OAAO,SAAS,KAAK;IACvC,iBAAiB;IACjB,0BAA0B;IAC1B,mBAAmB;IACnB,mBAAmB;IACpB;GACF,CAAC;WACM;AACR,sBAAoB,OAAO,MAAM"}
+{"version":3,"file":"shares.js","names":[],"sources":["../../../../../src/gateway/hono/routes/shares.ts"],"sourcesContent":["import type { Hono } from 'hono';\nimport { createReadStream } from 'node:fs';\nimport { stat } from 'node:fs/promises';\nimport { createHash } from 'node:crypto';\nimport { Readable } from 'node:stream';\n\nimport { extractToken } from '../../auth.js';\nimport { getClientIpFromHeaders } from '../../security/loopback.js';\nimport { getShareStore } from '../../../share/share-store.js';\nimport { resolveShareUrl } from '../../../share/share-url.js';\nimport { consumeSharePublicLimit } from '../../../share/share-rate-limit.js';\nimport { logShareAudit } from '../../../share/share-audit.js';\nimport { renderShareLandingPage, renderShareExpiredPage } from '../../../share/share-landing.js';\nimport type { ShareExpiredReason } from '../../../share/share-landing.js';\nimport type { ShareConfig } from '../../../share/share-types.js';\nimport { resolveGatewayEffectiveHost } from '../../../config/gateway-bind.js';\nimport { SHARE_CONFIG_DEFAULTS } from '../../../share/share-types.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\nimport type { GatewayService } from '../../service.js';\n\nfunction getShareUrlContext(service: GatewayService) {\n  const gateway = service.currentConfig.gateway;\n  return {\n    gatewayHost: resolveGatewayEffectiveHost(service.currentConfig),\n    gatewayPort: gateway.port ?? 18790,\n  };\n}\n\nfunction resolveShareConfig(service: GatewayService): Partial<ShareConfig> {\n  const raw = (service.currentConfig.gateway as Record<string, unknown>)?.share;\n  if (!raw || typeof raw !== 'object') return {};\n  return raw as Partial<ShareConfig>;\n}\n\nfunction hashGatewayToken(token: string): string {\n  return createHash('sha256').update(token, 'utf8').digest('hex').slice(0, 12);\n}\n\nconst MAX_CONCURRENT_DOWNLOADS_PER_TOKEN = 5;\nconst activeDownloads = new Map<string, number>();\n\nfunction acquireDownloadSlot(token: string): boolean {\n  const current = activeDownloads.get(token) ?? 0;\n  if (current >= MAX_CONCURRENT_DOWNLOADS_PER_TOKEN) return false;\n  activeDownloads.set(token, current + 1);\n  return true;\n}\n\nfunction releaseDownloadSlot(token: string): void {\n  const current = activeDownloads.get(token) ?? 0;\n  if (current <= 1) {\n    activeDownloads.delete(token);\n  } else {\n    activeDownloads.set(token, current - 1);\n  }\n}\n\n// ── Public routes (no auth required) ──────────────────────────────────────────\n\nexport function registerSharePublicRoutes(app: Hono, service: GatewayService): void {\n  const store = getShareStore(resolveShareConfig(service));\n\n  /** Landing page — does NOT consume viewCount (prevents link unfurl from wasting views). */\n  app.get('/s/:token', async (c) => {\n    const clientIp = getClientIpFromHeaders({ get: (n: string) => c.req.header(n) ?? undefined });\n    const rateResult = consumeSharePublicLimit(clientIp);\n    if (!rateResult.allowed) {\n      c.header('Retry-After', String(Math.ceil(rateResult.retryAfterMs / 1000)));\n      return c.text('Too many requests', 429);\n    }\n\n    const token = c.req.param('token');\n    const record = store.getByToken(token);\n\n    if (!record) {\n      return c.html(renderShareExpiredPage('not_found'), 404);\n    }\n\n    const validation = store.validateAccess(record);\n    if (!validation.valid) {\n      logShareAudit(\n        'share.access_denied',\n        { shareId: record.id, tokenPrefix: token.slice(0, 8), reason: validation.reason, clientIp },\n        `Share access denied: ${validation.reason}`,\n      );\n      return c.html(renderShareExpiredPage(validation.reason as ShareExpiredReason), 410);\n    }\n\n    // Direct download shortcut: ?dl=1\n    if (c.req.query('dl') === '1') {\n      return handleDownload(c, store, record, clientIp);\n    }\n\n    // Inline preview for whitelisted MIME types: ?inline=1\n    if (c.req.query('inline') === '1') {\n      const cfg = { ...SHARE_CONFIG_DEFAULTS, ...resolveShareConfig(service) };\n      if (cfg.inlinePreviewMimes.includes(record.mimeType)) {\n        return handleDownload(c, store, record, clientIp, true);\n      }\n    }\n\n    const downloadPath = `/s/${token}/download`;\n    return c.html(renderShareLandingPage(record, downloadPath));\n  });\n\n  /** Actual file download — consumes viewCount. */\n  app.post('/s/:token/download', async (c) => {\n    const clientIp = getClientIpFromHeaders({ get: (n: string) => c.req.header(n) ?? undefined });\n    const rateResult = consumeSharePublicLimit(clientIp);\n    if (!rateResult.allowed) {\n      c.header('Retry-After', String(Math.ceil(rateResult.retryAfterMs / 1000)));\n      return c.text('Too many requests', 429);\n    }\n\n    const token = c.req.param('token');\n    const record = store.getByToken(token);\n\n    if (!record) {\n      return c.html(renderShareExpiredPage('not_found'), 404);\n    }\n\n    const validation = store.validateAccess(record);\n    if (!validation.valid) {\n      logShareAudit(\n        'share.access_denied',\n        { shareId: record.id, tokenPrefix: token.slice(0, 8), reason: validation.reason, clientIp },\n        `Share download denied: ${validation.reason}`,\n      );\n      return c.html(renderShareExpiredPage(validation.reason as ShareExpiredReason), 410);\n    }\n\n    return handleDownload(c, store, record, clientIp);\n  });\n\n  /** File metadata (for link preview cards). */\n  app.get('/s/:token/meta', async (c) => {\n    const clientIp = getClientIpFromHeaders({ get: (n: string) => c.req.header(n) ?? undefined });\n    const rateResult = consumeSharePublicLimit(clientIp);\n    if (!rateResult.allowed) {\n      c.header('Retry-After', String(Math.ceil(rateResult.retryAfterMs / 1000)));\n      return c.text('Too many requests', 429);\n    }\n\n    const token = c.req.param('token');\n    const record = store.getByToken(token);\n    if (!record) {\n      return c.json({ valid: false }, 404);\n    }\n\n    const validation = store.validateAccess(record);\n    const remainingViews = record.maxViews !== null ? Math.max(0, record.maxViews - record.viewCount) : null;\n\n    return c.json({\n      fileName: record.fileName,\n      fileSize: record.fileSize,\n      mimeType: record.mimeType,\n      description: record.description ?? null,\n      expiresAt: record.expiresAt,\n      remainingViews,\n      valid: validation.valid,\n    });\n  });\n\n  /** HEAD check (Hono uses .on() for HEAD method). */\n  app.on('HEAD', '/s/:token', async (c) => {\n    const token = c.req.param('token');\n    const record = store.getByToken(token);\n    if (!record) return c.body(null, 404);\n    const validation = store.validateAccess(record);\n    return c.body(null, validation.valid ? 200 : 410);\n  });\n}\n\n// ── Authenticated routes ──────────────────────────────────────────────────────\n\nexport function registerShareRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  const { service } = deps;\n  const store = getShareStore(resolveShareConfig(service));\n\n  /** Create a share. */\n  authenticated.post('/api/shares', async (c) => {\n    const gatewayToken = extractToken({ authorization: c.req.header('authorization') ?? undefined });\n    if (!gatewayToken) return c.json({ ok: false, error: { message: 'Token required' } }, 401);\n\n    let body: Record<string, unknown>;\n    try {\n      body = (await c.req.json()) as Record<string, unknown>;\n    } catch {\n      return c.json({ ok: false, error: { message: 'Invalid JSON' } }, 400);\n    }\n\n    const path = typeof body.path === 'string' ? body.path.trim() : '';\n    if (!path) {\n      return c.json({ ok: false, error: { message: 'Missing path' } }, 400);\n    }\n\n    const sessionKey = typeof body.sessionKey === 'string' ? body.sessionKey.trim() : undefined;\n    const agentId = typeof body.agentId === 'string' ? body.agentId.trim() : undefined;\n\n    // Resolve workspace root (same logic as workspace editor routes)\n    const workspaceRoot = await resolveWorkspaceRootForShare(service, sessionKey, agentId);\n    if (!workspaceRoot) {\n      return c.json({ ok: false, error: { message: 'Workspace not configured' } }, 400);\n    }\n\n    const ttlMs = typeof body.ttlMs === 'number' ? body.ttlMs : undefined;\n    const maxViews = body.maxViews === null ? null : typeof body.maxViews === 'number' ? body.maxViews : undefined;\n    const description = typeof body.description === 'string' ? body.description.trim() || undefined : undefined;\n\n    try {\n      store.updateConfig(resolveShareConfig(service));\n      const record = await store.create({\n        path,\n        ttlMs,\n        maxViews,\n        description,\n        sessionKey,\n        agentId,\n        workspaceRoot,\n        gatewayTokenHash: hashGatewayToken(gatewayToken),\n      });\n\n      const urlCtx = getShareUrlContext(service);\n      const resolved = resolveShareUrl(record.token, urlCtx);\n\n      return c.json({\n        ok: true,\n        payload: {\n          id: record.id,\n          token: record.token,\n          shareUrl: resolved.shareUrl,\n          lanUrl: resolved.lanUrl,\n          reachability: resolved.reachability,\n          reachabilityHint: resolved.reachabilityHint,\n          expiresAt: record.expiresAt,\n          maxViews: record.maxViews,\n          fileName: record.fileName,\n          fileSize: record.fileSize,\n        },\n      }, 201);\n    } catch (err) {\n      const message = err instanceof Error ? err.message : String(err);\n      return c.json({ ok: false, error: { message } }, 400);\n    }\n  });\n\n  /** List all shares. */\n  authenticated.get('/api/shares', async (c) => {\n    store.updateConfig(resolveShareConfig(service));\n    const shares = store.getAllShares();\n    const urlCtx = getShareUrlContext(service);\n    const now = Date.now();\n\n    const items = shares.map((r) => {\n      const resolved = resolveShareUrl(r.token, urlCtx);\n      const expired = now >= new Date(r.expiresAt).getTime();\n      return {\n        id: r.id,\n        fileName: r.fileName,\n        workspaceRelativePath: r.workspaceRelativePath,\n        shareUrl: resolved.shareUrl,\n        lanUrl: resolved.lanUrl,\n        reachability: resolved.reachability,\n        createdAt: r.createdAt,\n        expiresAt: r.expiresAt,\n        viewCount: r.viewCount,\n        maxViews: r.maxViews,\n        revoked: r.revoked,\n        expired,\n        description: r.description ?? null,\n        fileSize: r.fileSize,\n        mimeType: r.mimeType,\n      };\n    });\n\n    return c.json({ ok: true, payload: { shares: items } });\n  });\n\n  /** Get single share details. */\n  authenticated.get('/api/shares/:id', async (c) => {\n    const id = c.req.param('id');\n    const record = store.getById(id);\n    if (!record) return c.json({ ok: false, error: { message: 'Not found' } }, 404);\n\n    const urlCtx = getShareUrlContext(service);\n    const resolved = resolveShareUrl(record.token, urlCtx);\n    const expired = Date.now() >= new Date(record.expiresAt).getTime();\n\n    return c.json({\n      ok: true,\n      payload: {\n        ...record,\n        token: undefined,\n        shareUrl: resolved.shareUrl,\n        lanUrl: resolved.lanUrl,\n        reachability: resolved.reachability,\n        expired,\n      },\n    });\n  });\n\n  /** Revoke a share. */\n  authenticated.delete('/api/shares/:id', async (c) => {\n    const id = c.req.param('id');\n    const success = store.revoke(id);\n    if (!success) return c.json({ ok: false, error: { message: 'Not found' } }, 404);\n    return c.json({ ok: true });\n  });\n\n  /** Batch revoke. */\n  authenticated.delete('/api/shares', async (c) => {\n    let body: Record<string, unknown> = {};\n    try {\n      body = (await c.req.json()) as Record<string, unknown>;\n    } catch {\n      /* empty body = no-op */\n    }\n\n    if (body.expired === true) {\n      const count = store.revokeExpired();\n      return c.json({ ok: true, payload: { revokedCount: count } });\n    }\n\n    const ids = Array.isArray(body.ids) ? (body.ids as string[]).filter((x) => typeof x === 'string') : [];\n    if (ids.length === 0) {\n      return c.json({ ok: false, error: { message: 'Provide ids array or expired: true' } }, 400);\n    }\n    const count = store.revokeMany(ids);\n    return c.json({ ok: true, payload: { revokedCount: count } });\n  });\n\n  /** Update a share (extend TTL or change maxViews). */\n  authenticated.patch('/api/shares/:id', async (c) => {\n    const id = c.req.param('id');\n    let body: Record<string, unknown>;\n    try {\n      body = (await c.req.json()) as Record<string, unknown>;\n    } catch {\n      return c.json({ ok: false, error: { message: 'Invalid JSON' } }, 400);\n    }\n\n    const patch: { extendTtlMs?: number; maxViews?: number | null } = {};\n    if (typeof body.extendTtlMs === 'number') patch.extendTtlMs = body.extendTtlMs;\n    if (body.maxViews === null || typeof body.maxViews === 'number') patch.maxViews = body.maxViews as number | null;\n\n    const updated = store.update(id, patch);\n    if (!updated) return c.json({ ok: false, error: { message: 'Not found' } }, 404);\n\n    const urlCtx = getShareUrlContext(service);\n    const resolved = resolveShareUrl(updated.token, urlCtx);\n\n    return c.json({\n      ok: true,\n      payload: {\n        id: updated.id,\n        expiresAt: updated.expiresAt,\n        maxViews: updated.maxViews,\n        shareUrl: resolved.shareUrl,\n      },\n    });\n  });\n}\n\n// ── Helpers ───────────────────────────────────────────────────────────────────\n\nasync function resolveWorkspaceRootForShare(\n  service: GatewayService,\n  sessionKey: string | undefined,\n  agentId: string | undefined,\n): Promise<string | null> {\n  const cfg = service.currentConfig;\n\n  if (sessionKey) {\n    try {\n      return await service.sessions.getEffectiveWorkspacePath(sessionKey);\n    } catch {\n      /* fall through to agentId */\n    }\n  }\n\n  // Import dynamically to avoid circular dependency at module load time\n  const { getWorkspacePath } = await import('../../../config/workspace-path-helpers.js');\n  const { resolveAgentWorkspaceDir, normalizeAgentId, resolveDefaultAgentId } = await import(\n    '../../../agent/agent-scope.js'\n  );\n\n  if (agentId) {\n    const normalized = normalizeAgentId(agentId);\n    return resolveAgentWorkspaceDir(cfg, normalized);\n  }\n\n  const root = getWorkspacePath(cfg);\n  if (root) return root;\n\n  const defaultId = resolveDefaultAgentId(cfg);\n  return resolveAgentWorkspaceDir(cfg, defaultId);\n}\n\nasync function handleDownload(\n  c: { header: (n: string, v: string) => void; body: (b: unknown, s?: number) => Response },\n  store: ReturnType<typeof getShareStore>,\n  record: ReturnType<ReturnType<typeof getShareStore>['getByToken']> & {},\n  clientIp: string,\n  inline = false,\n): Promise<Response> {\n  // Concurrency check\n  if (!acquireDownloadSlot(record.token)) {\n    return c.body('Too many concurrent downloads for this share', 429) as unknown as Response;\n  }\n\n  try {\n    // File integrity check (inode + path)\n    const integrity = await store.validateFileIntegrity(record);\n    if (!integrity.valid) {\n      logShareAudit(\n        'share.access_denied',\n        { shareId: record.id, tokenPrefix: record.token.slice(0, 8), reason: integrity.reason, clientIp },\n        `Share file integrity check failed: ${integrity.reason}`,\n      );\n      const { renderShareExpiredPage: render } = await import('../../../share/share-landing.js');\n      return new Response(render(integrity.reason as ShareExpiredReason), {\n        status: 410,\n        headers: { 'Content-Type': 'text/html; charset=utf-8' },\n      });\n    }\n\n    // Consume viewCount\n    store.incrementViewCount(record.id);\n\n    logShareAudit(\n      'share.access',\n      { shareId: record.id, tokenPrefix: record.token.slice(0, 8), clientIp, viewCount: record.viewCount },\n      `Share downloaded: ${record.fileName}`,\n    );\n\n    // Stream file\n    const fileStat = await stat(record.absolutePath);\n    const stream = createReadStream(record.absolutePath);\n    const webStream = Readable.toWeb(stream) as ReadableStream;\n\n    const disposition = inline ? `inline; filename=\"${encodeURIComponent(record.fileName)}\"` : `attachment; filename=\"${encodeURIComponent(record.fileName)}\"`;\n\n    return new Response(webStream, {\n      status: 200,\n      headers: {\n        'Content-Type': record.mimeType,\n        'Content-Disposition': disposition,\n        'Content-Length': String(fileStat.size),\n        'Cache-Control': 'private, no-store',\n        'X-Content-Type-Options': 'nosniff',\n        'X-Frame-Options': 'DENY',\n        'Referrer-Policy': 'no-referrer',\n      },\n    });\n  } finally {\n    releaseDownloadSlot(record.token);\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;AAoBA,SAAS,mBAAmB,SAAyB;CACnD,MAAM,UAAU,QAAQ,cAAc;AACtC,QAAO;EACL,aAAa,4BAA4B,QAAQ,cAAc;EAC/D,aAAa,QAAQ,QAAQ;EAC9B;;AAGH,SAAS,mBAAmB,SAA+C;CACzE,MAAM,MAAO,QAAQ,cAAc,SAAqC;AACxE,KAAI,CAAC,OAAO,OAAO,QAAQ,SAAU,QAAO,EAAE;AAC9C,QAAO;;AAGT,SAAS,iBAAiB,OAAuB;AAC/C,QAAO,WAAW,SAAS,CAAC,OAAO,OAAO,OAAO,CAAC,OAAO,MAAM,CAAC,MAAM,GAAG,GAAG;;AAG9E,MAAM,qCAAqC;AAC3C,MAAM,kCAAkB,IAAI,KAAqB;AAEjD,SAAS,oBAAoB,OAAwB;CACnD,MAAM,UAAU,gBAAgB,IAAI,MAAM,IAAI;AAC9C,KAAI,WAAW,mCAAoC,QAAO;AAC1D,iBAAgB,IAAI,OAAO,UAAU,EAAE;AACvC,QAAO;;AAGT,SAAS,oBAAoB,OAAqB;CAChD,MAAM,UAAU,gBAAgB,IAAI,MAAM,IAAI;AAC9C,KAAI,WAAW,EACb,iBAAgB,OAAO,MAAM;KAE7B,iBAAgB,IAAI,OAAO,UAAU,EAAE;;AAM3C,SAAgB,0BAA0B,KAAW,SAA+B;CAClF,MAAM,QAAQ,cAAc,mBAAmB,QAAQ,CAAC;;AAGxD,KAAI,IAAI,aAAa,OAAO,MAAM;EAChC,MAAM,WAAW,uBAAuB,EAAE,MAAM,MAAc,EAAE,IAAI,OAAO,EAAE,IAAI,KAAA,GAAW,CAAC;EAC7F,MAAM,aAAa,wBAAwB,SAAS;AACpD,MAAI,CAAC,WAAW,SAAS;AACvB,KAAE,OAAO,eAAe,OAAO,KAAK,KAAK,WAAW,eAAe,IAAK,CAAC,CAAC;AAC1E,UAAO,EAAE,KAAK,qBAAqB,IAAI;;EAGzC,MAAM,QAAQ,EAAE,IAAI,MAAM,QAAQ;EAClC,MAAM,SAAS,MAAM,WAAW,MAAM;AAEtC,MAAI,CAAC,OACH,QAAO,EAAE,KAAK,uBAAuB,YAAY,EAAE,IAAI;EAGzD,MAAM,aAAa,MAAM,eAAe,OAAO;AAC/C,MAAI,CAAC,WAAW,OAAO;AACrB,iBACE,uBACA;IAAE,SAAS,OAAO;IAAI,aAAa,MAAM,MAAM,GAAG,EAAE;IAAE,QAAQ,WAAW;IAAQ;IAAU,EAC3F,wBAAwB,WAAW,SACpC;AACD,UAAO,EAAE,KAAK,uBAAuB,WAAW,OAA6B,EAAE,IAAI;;AAIrF,MAAI,EAAE,IAAI,MAAM,KAAK,KAAK,IACxB,QAAO,eAAe,GAAG,OAAO,QAAQ,SAAS;AAInD,MAAI,EAAE,IAAI,MAAM,SAAS,KAAK;OAExB;IADU,GAAG;IAAuB,GAAG,mBAAmB,QAAQ;IAC/D,CAAC,mBAAmB,SAAS,OAAO,SAAS,CAClD,QAAO,eAAe,GAAG,OAAO,QAAQ,UAAU,KAAK;;EAI3D,MAAM,eAAe,MAAM,MAAM;AACjC,SAAO,EAAE,KAAK,uBAAuB,QAAQ,aAAa,CAAC;GAC3D;;AAGF,KAAI,KAAK,sBAAsB,OAAO,MAAM;EAC1C,MAAM,WAAW,uBAAuB,EAAE,MAAM,MAAc,EAAE,IAAI,OAAO,EAAE,IAAI,KAAA,GAAW,CAAC;EAC7F,MAAM,aAAa,wBAAwB,SAAS;AACpD,MAAI,CAAC,WAAW,SAAS;AACvB,KAAE,OAAO,eAAe,OAAO,KAAK,KAAK,WAAW,eAAe,IAAK,CAAC,CAAC;AAC1E,UAAO,EAAE,KAAK,qBAAqB,IAAI;;EAGzC,MAAM,QAAQ,EAAE,IAAI,MAAM,QAAQ;EAClC,MAAM,SAAS,MAAM,WAAW,MAAM;AAEtC,MAAI,CAAC,OACH,QAAO,EAAE,KAAK,uBAAuB,YAAY,EAAE,IAAI;EAGzD,MAAM,aAAa,MAAM,eAAe,OAAO;AAC/C,MAAI,CAAC,WAAW,OAAO;AACrB,iBACE,uBACA;IAAE,SAAS,OAAO;IAAI,aAAa,MAAM,MAAM,GAAG,EAAE;IAAE,QAAQ,WAAW;IAAQ;IAAU,EAC3F,0BAA0B,WAAW,SACtC;AACD,UAAO,EAAE,KAAK,uBAAuB,WAAW,OAA6B,EAAE,IAAI;;AAGrF,SAAO,eAAe,GAAG,OAAO,QAAQ,SAAS;GACjD;;AAGF,KAAI,IAAI,kBAAkB,OAAO,MAAM;EAErC,MAAM,aAAa,wBADF,uBAAuB,EAAE,MAAM,MAAc,EAAE,IAAI,OAAO,EAAE,IAAI,KAAA,GAAW,CACzC,CAAC;AACpD,MAAI,CAAC,WAAW,SAAS;AACvB,KAAE,OAAO,eAAe,OAAO,KAAK,KAAK,WAAW,eAAe,IAAK,CAAC,CAAC;AAC1E,UAAO,EAAE,KAAK,qBAAqB,IAAI;;EAGzC,MAAM,QAAQ,EAAE,IAAI,MAAM,QAAQ;EAClC,MAAM,SAAS,MAAM,WAAW,MAAM;AACtC,MAAI,CAAC,OACH,QAAO,EAAE,KAAK,EAAE,OAAO,OAAO,EAAE,IAAI;EAGtC,MAAM,aAAa,MAAM,eAAe,OAAO;EAC/C,MAAM,iBAAiB,OAAO,aAAa,OAAO,KAAK,IAAI,GAAG,OAAO,WAAW,OAAO,UAAU,GAAG;AAEpG,SAAO,EAAE,KAAK;GACZ,UAAU,OAAO;GACjB,UAAU,OAAO;GACjB,UAAU,OAAO;GACjB,aAAa,OAAO,eAAe;GACnC,WAAW,OAAO;GAClB;GACA,OAAO,WAAW;GACnB,CAAC;GACF;;AAGF,KAAI,GAAG,QAAQ,aAAa,OAAO,MAAM;EACvC,MAAM,QAAQ,EAAE,IAAI,MAAM,QAAQ;EAClC,MAAM,SAAS,MAAM,WAAW,MAAM;AACtC,MAAI,CAAC,OAAQ,QAAO,EAAE,KAAK,MAAM,IAAI;EACrC,MAAM,aAAa,MAAM,eAAe,OAAO;AAC/C,SAAO,EAAE,KAAK,MAAM,WAAW,QAAQ,MAAM,IAAI;GACjD;;AAKJ,SAAgB,oBAAoB,eAAqB,MAAoC;CAC3F,MAAM,EAAE,YAAY;CACpB,MAAM,QAAQ,cAAc,mBAAmB,QAAQ,CAAC;;AAGxD,eAAc,KAAK,eAAe,OAAO,MAAM;EAC7C,MAAM,eAAe,aAAa,EAAE,eAAe,EAAE,IAAI,OAAO,gBAAgB,IAAI,KAAA,GAAW,CAAC;AAChG,MAAI,CAAC,aAAc,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,kBAAkB;GAAE,EAAE,IAAI;EAE1F,IAAI;AACJ,MAAI;AACF,UAAQ,MAAM,EAAE,IAAI,MAAM;UACpB;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS,gBAAgB;IAAE,EAAE,IAAI;;EAGvE,MAAM,OAAO,OAAO,KAAK,SAAS,WAAW,KAAK,KAAK,MAAM,GAAG;AAChE,MAAI,CAAC,KACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,gBAAgB;GAAE,EAAE,IAAI;EAGvE,MAAM,aAAa,OAAO,KAAK,eAAe,WAAW,KAAK,WAAW,MAAM,GAAG,KAAA;EAClF,MAAM,UAAU,OAAO,KAAK,YAAY,WAAW,KAAK,QAAQ,MAAM,GAAG,KAAA;EAGzE,MAAM,gBAAgB,MAAM,6BAA6B,SAAS,YAAY,QAAQ;AACtF,MAAI,CAAC,cACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,4BAA4B;GAAE,EAAE,IAAI;EAGnF,MAAM,QAAQ,OAAO,KAAK,UAAU,WAAW,KAAK,QAAQ,KAAA;EAC5D,MAAM,WAAW,KAAK,aAAa,OAAO,OAAO,OAAO,KAAK,aAAa,WAAW,KAAK,WAAW,KAAA;EACrG,MAAM,cAAc,OAAO,KAAK,gBAAgB,WAAW,KAAK,YAAY,MAAM,IAAI,KAAA,IAAY,KAAA;AAElG,MAAI;AACF,SAAM,aAAa,mBAAmB,QAAQ,CAAC;GAC/C,MAAM,SAAS,MAAM,MAAM,OAAO;IAChC;IACA;IACA;IACA;IACA;IACA;IACA;IACA,kBAAkB,iBAAiB,aAAa;IACjD,CAAC;GAEF,MAAM,SAAS,mBAAmB,QAAQ;GAC1C,MAAM,WAAW,gBAAgB,OAAO,OAAO,OAAO;AAEtD,UAAO,EAAE,KAAK;IACZ,IAAI;IACJ,SAAS;KACP,IAAI,OAAO;KACX,OAAO,OAAO;KACd,UAAU,SAAS;KACnB,QAAQ,SAAS;KACjB,cAAc,SAAS;KACvB,kBAAkB,SAAS;KAC3B,WAAW,OAAO;KAClB,UAAU,OAAO;KACjB,UAAU,OAAO;KACjB,UAAU,OAAO;KAClB;IACF,EAAE,IAAI;WACA,KAAK;GACZ,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAChE,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS;IAAE,EAAE,IAAI;;GAEvD;;AAGF,eAAc,IAAI,eAAe,OAAO,MAAM;AAC5C,QAAM,aAAa,mBAAmB,QAAQ,CAAC;EAC/C,MAAM,SAAS,MAAM,cAAc;EACnC,MAAM,SAAS,mBAAmB,QAAQ;EAC1C,MAAM,MAAM,KAAK,KAAK;EAEtB,MAAM,QAAQ,OAAO,KAAK,MAAM;GAC9B,MAAM,WAAW,gBAAgB,EAAE,OAAO,OAAO;GACjD,MAAM,UAAU,OAAO,IAAI,KAAK,EAAE,UAAU,CAAC,SAAS;AACtD,UAAO;IACL,IAAI,EAAE;IACN,UAAU,EAAE;IACZ,uBAAuB,EAAE;IACzB,UAAU,SAAS;IACnB,QAAQ,SAAS;IACjB,cAAc,SAAS;IACvB,WAAW,EAAE;IACb,WAAW,EAAE;IACb,WAAW,EAAE;IACb,UAAU,EAAE;IACZ,SAAS,EAAE;IACX;IACA,aAAa,EAAE,eAAe;IAC9B,UAAU,EAAE;IACZ,UAAU,EAAE;IACb;IACD;AAEF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,QAAQ,OAAO;GAAE,CAAC;GACvD;;AAGF,eAAc,IAAI,mBAAmB,OAAO,MAAM;EAChD,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK;EAC5B,MAAM,SAAS,MAAM,QAAQ,GAAG;AAChC,MAAI,CAAC,OAAQ,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,aAAa;GAAE,EAAE,IAAI;EAE/E,MAAM,SAAS,mBAAmB,QAAQ;EAC1C,MAAM,WAAW,gBAAgB,OAAO,OAAO,OAAO;EACtD,MAAM,UAAU,KAAK,KAAK,IAAI,IAAI,KAAK,OAAO,UAAU,CAAC,SAAS;AAElE,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,GAAG;IACH,OAAO,KAAA;IACP,UAAU,SAAS;IACnB,QAAQ,SAAS;IACjB,cAAc,SAAS;IACvB;IACD;GACF,CAAC;GACF;;AAGF,eAAc,OAAO,mBAAmB,OAAO,MAAM;EACnD,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK;AAE5B,MAAI,CADY,MAAM,OAAO,GACjB,CAAE,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,aAAa;GAAE,EAAE,IAAI;AAChF,SAAO,EAAE,KAAK,EAAE,IAAI,MAAM,CAAC;GAC3B;;AAGF,eAAc,OAAO,eAAe,OAAO,MAAM;EAC/C,IAAI,OAAgC,EAAE;AACtC,MAAI;AACF,UAAQ,MAAM,EAAE,IAAI,MAAM;UACpB;AAIR,MAAI,KAAK,YAAY,MAAM;GACzB,MAAM,QAAQ,MAAM,eAAe;AACnC,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,cAAc,OAAO;IAAE,CAAC;;EAG/D,MAAM,MAAM,MAAM,QAAQ,KAAK,IAAI,GAAI,KAAK,IAAiB,QAAQ,MAAM,OAAO,MAAM,SAAS,GAAG,EAAE;AACtG,MAAI,IAAI,WAAW,EACjB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,sCAAsC;GAAE,EAAE,IAAI;EAE7F,MAAM,QAAQ,MAAM,WAAW,IAAI;AACnC,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,cAAc,OAAO;GAAE,CAAC;GAC7D;;AAGF,eAAc,MAAM,mBAAmB,OAAO,MAAM;EAClD,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK;EAC5B,IAAI;AACJ,MAAI;AACF,UAAQ,MAAM,EAAE,IAAI,MAAM;UACpB;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS,gBAAgB;IAAE,EAAE,IAAI;;EAGvE,MAAM,QAA4D,EAAE;AACpE,MAAI,OAAO,KAAK,gBAAgB,SAAU,OAAM,cAAc,KAAK;AACnE,MAAI,KAAK,aAAa,QAAQ,OAAO,KAAK,aAAa,SAAU,OAAM,WAAW,KAAK;EAEvF,MAAM,UAAU,MAAM,OAAO,IAAI,MAAM;AACvC,MAAI,CAAC,QAAS,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,aAAa;GAAE,EAAE,IAAI;EAEhF,MAAM,SAAS,mBAAmB,QAAQ;EAC1C,MAAM,WAAW,gBAAgB,QAAQ,OAAO,OAAO;AAEvD,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,IAAI,QAAQ;IACZ,WAAW,QAAQ;IACnB,UAAU,QAAQ;IAClB,UAAU,SAAS;IACpB;GACF,CAAC;GACF;;AAKJ,eAAe,6BACb,SACA,YACA,SACwB;CACxB,MAAM,MAAM,QAAQ;AAEpB,KAAI,WACF,KAAI;AACF,SAAO,MAAM,QAAQ,SAAS,0BAA0B,WAAW;SAC7D;CAMV,MAAM,EAAE,qBAAqB,MAAM,OAAO;CAC1C,MAAM,EAAE,0BAA0B,kBAAkB,0BAA0B,MAAM,OAClF;AAGF,KAAI,QAEF,QAAO,yBAAyB,KADb,iBAAiB,QACW,CAAC;CAGlD,MAAM,OAAO,iBAAiB,IAAI;AAClC,KAAI,KAAM,QAAO;AAGjB,QAAO,yBAAyB,KADd,sBAAsB,IACM,CAAC;;AAGjD,eAAe,eACb,GACA,OACA,QACA,UACA,SAAS,OACU;AAEnB,KAAI,CAAC,oBAAoB,OAAO,MAAM,CACpC,QAAO,EAAE,KAAK,gDAAgD,IAAI;AAGpE,KAAI;EAEF,MAAM,YAAY,MAAM,MAAM,sBAAsB,OAAO;AAC3D,MAAI,CAAC,UAAU,OAAO;AACpB,iBACE,uBACA;IAAE,SAAS,OAAO;IAAI,aAAa,OAAO,MAAM,MAAM,GAAG,EAAE;IAAE,QAAQ,UAAU;IAAQ;IAAU,EACjG,sCAAsC,UAAU,SACjD;GACD,MAAM,EAAE,wBAAwB,WAAW,MAAM,OAAO;AACxD,UAAO,IAAI,SAAS,OAAO,UAAU,OAA6B,EAAE;IAClE,QAAQ;IACR,SAAS,EAAE,gBAAgB,4BAA4B;IACxD,CAAC;;AAIJ,QAAM,mBAAmB,OAAO,GAAG;AAEnC,gBACE,gBACA;GAAE,SAAS,OAAO;GAAI,aAAa,OAAO,MAAM,MAAM,GAAG,EAAE;GAAE;GAAU,WAAW,OAAO;GAAW,EACpG,qBAAqB,OAAO,WAC7B;EAGD,MAAM,WAAW,MAAM,KAAK,OAAO,aAAa;EAChD,MAAM,SAAS,iBAAiB,OAAO,aAAa;EACpD,MAAM,YAAY,SAAS,MAAM,OAAO;EAExC,MAAM,cAAc,SAAS,qBAAqB,mBAAmB,OAAO,SAAS,CAAC,KAAK,yBAAyB,mBAAmB,OAAO,SAAS,CAAC;AAExJ,SAAO,IAAI,SAAS,WAAW;GAC7B,QAAQ;GACR,SAAS;IACP,gBAAgB,OAAO;IACvB,uBAAuB;IACvB,kBAAkB,OAAO,SAAS,KAAK;IACvC,iBAAiB;IACjB,0BAA0B;IAC1B,mBAAmB;IACnB,mBAAmB;IACpB;GACF,CAAC;WACM;AACR,sBAAoB,OAAO,MAAM"}

package/dist/src/gateway/hono/routes/tunnel.js

@@ -1,5 +1,4 @@
 import { resolveGatewayEffectiveHost } from "../../../config/gateway-bind.js";
-import { getClientIpFromHeaders } from "../../auth-rate-limit.js";
 import { extractToken } from "../../auth.js";
 import { TUNNEL_CONSENT_REQUIRED_CODE, TunnelConsentError, assertTunnelMayStart, getTunnelConsentState } from "../../../tunnel/consent.js";
 import { getTunnelRegistrationSecretMeta, readTunnelRegistrationSecretFromConfigOnly, resolveTunnelBrokerUrl } from "../../../tunnel/env.js";
@@ -9,6 +8,7 @@ import { logTunnelAudit } from "../../../tunnel/tunnel-audit.js";
 import { getTunnelService, hashGatewayToken } from "../../../tunnel/tunnel-service.js";
 import { configureTunnelFromGatewayConfig } from "../../../tunnel/gateway-lifecycle.js";
 import { applyTunnelConsentToConfig, setTunnelEnabledInConfig } from "../../../tunnel/tunnel-config.js";
+import { getClientIpFromHeaders } from "../../security/loopback.js";
 import { applyLanPairingGatewayPatch } from "../../../tunnel/enable-lan-pairing.js";
 import { consumeTunnelMutationLimit } from "../../../tunnel/tunnel-rate-limit.js";
 import "../../../tunnel/index.js";