@xopcai/xopc 0.0.82 → 0.0.84

package/dist/src/gateway/hono/routes/config.js

@@ -1,639 +1,12 @@
-import { BindingsConfigSchema, McpConfigSchema, init_schema } from "../../../config/schema.js";
-import { CredentialResolver, init_credentials } from "../../../auth/credentials.js";
-import { canonicalizeConfiguredMcpServer } from "../../../config/mcp-config-normalize.js";
-import { isValidIPv4 } from "../../../config/gateway-bind.js";
-import { mergeCronConfigPatch, mergeGatewaySkillsMarketplacePatch, mergeGoalsConfigPatch, mergeSessionConfigPatch, mergeUpdateConfigPatch } from "../../../config/web-patch.js";
-import { assertGatewayAuthConfigured, resolveGatewayAuth } from "../../auth.js";
-import { applyToolsWebPatch } from "../../config-tools-web.js";
-import { mergeTunnelConfigPatch } from "../../../tunnel/tunnel-config.js";
-import { assertGatewayRuntimeConfig } from "../../runtime-config.js";
-import { mergeShareConfigPatch } from "../../../share/share-config.js";
-import { normalizePatchAgentImageGenerationModel, normalizePatchAgentModel } from "../lib/agent-model.js";
-import { mergeSttConfigPatch, mergeTtsConfigPatch } from "../lib/safe-voice-config.js";
 import { buildSafeWebConfigPayload } from "../lib/config-payload.js";
-import net from "node:net";
+import { applyAgentsPatch } from "./config-patch/agents.js";
+import { applyChannelsPatch } from "./config-patch/channels.js";
+import { applyGatewayPatch } from "./config-patch/gateway.js";
+import { applyMiscPatch, validateGatewayAfterPatch } from "./config-patch/misc.js";
+import "./config-patch/index.js";
 //#region src/gateway/hono/routes/config.ts
-init_schema();
-init_credentials();
-const DEFAULT_EXTENSION_PORT = 19820;
-const DEFAULT_EXTENSION_HOST = "127.0.0.1";
-let manualExtensionHandle = null;
-function loopbackHostnameFromUrl(input) {
-	let parsed;
-	try {
-		parsed = new URL(input);
-	} catch {
-		return null;
-	}
-	const proto = parsed.protocol;
-	if (proto !== "ws:" && proto !== "wss:" && proto !== "http:" && proto !== "https:") return null;
-	const host = parsed.hostname.toLowerCase();
-	if (host === "127.0.0.1" || host === "localhost" || host === "::1") return host;
-	return null;
-}
-function isLoopbackHost(host) {
-	const h = host.trim().toLowerCase();
-	return h === "127.0.0.1" || h === "localhost" || h === "::1" || h === "[::1]";
-}
-function parseExtensionProbePort(raw) {
-	if (!raw) return void 0;
-	const n = Number.parseInt(raw, 10);
-	if (!Number.isFinite(n) || n < 1024 || n > 65535) return void 0;
-	return n;
-}
-function isLoopbackPortOpen(host, port, timeoutMs = 500) {
-	return new Promise((resolve) => {
-		const socket = net.connect({
-			host,
-			port
-		});
-		const finish = (open) => {
-			socket.removeAllListeners();
-			try {
-				socket.destroy();
-			} catch {}
-			resolve(open);
-		};
-		socket.setTimeout(timeoutMs);
-		socket.once("connect", () => finish(true));
-		socket.once("timeout", () => finish(false));
-		socket.once("error", () => finish(false));
-	});
-}
-async function readExtensionBridgeSnapshot() {
-	const { getExtensionBrowserServerSnapshot } = await import("../../../browser/providers/extension-ws-acquire.js");
-	return getExtensionBrowserServerSnapshot();
-}
-async function stopExtensionBridgeFromSettings(service) {
-	if (manualExtensionHandle) {
-		try {
-			await manualExtensionHandle.release();
-		} catch {}
-		manualExtensionHandle = null;
-	}
-	await service.releaseBrowserExtensionBridge();
-	const { forceShutdownExtensionBrowserServer } = await import("../../../browser/providers/extension-ws-acquire.js");
-	return { forcedShutdown: await forceShutdownExtensionBrowserServer() };
-}
-function resolveExtensionStatusTarget(browser, query) {
-	const backend = typeof browser?.backend === "string" ? browser.backend : "extension";
-	const probe = query.probe === "1" || query.probe === "true";
-	if (!probe && backend !== "extension") return null;
-	const ext = browser?.extension;
-	const configPort = typeof ext?.port === "number" && ext.port >= 1024 && ext.port <= 65535 ? Math.floor(ext.port) : DEFAULT_EXTENSION_PORT;
-	const configHost = typeof ext?.host === "string" && ext.host.trim() ? ext.host.trim() : DEFAULT_EXTENSION_HOST;
-	const port = parseExtensionProbePort(query.port) ?? configPort;
-	const host = typeof query.host === "string" && query.host.trim() ? query.host.trim() : configHost;
-	if (!isLoopbackHost(host)) return null;
-	return {
-		host,
-		port,
-		backend: probe && backend !== "extension" ? "extension" : backend
-	};
-}
 function registerConfigRoutes(authenticated, deps) {
 	const { service, strictRateLimitMiddleware } = deps;
-	authenticated.get("/api/browser/extension-status", async (c) => {
-		const browser = service.currentConfig?.agents?.defaults?.browser;
-		const target = resolveExtensionStatusTarget(browser, {
-			probe: c.req.query("probe"),
-			host: c.req.query("host"),
-			port: c.req.query("port")
-		});
-		let artifacts;
-		try {
-			const { browserExtDoctor } = await import("../../../browser/providers/browser-ext-install.js");
-			const doctor = await browserExtDoctor();
-			artifacts = {
-				installed: doctor.installed,
-				extensionDir: doctor.extensionDir,
-				xopcVersion: doctor.xopcVersion,
-				installedVersion: doctor.installedVersion,
-				needsRefresh: doctor.needsRefresh,
-				needsChromeReload: doctor.needsChromeReload
-			};
-		} catch {}
-		if (!target) {
-			const backend = typeof browser?.backend === "string" ? browser.backend : "extension";
-			return c.json({
-				running: false,
-				connected: false,
-				backend,
-				artifacts
-			});
-		}
-		const snapshot = await readExtensionBridgeSnapshot();
-		let probeRunning = false;
-		let probeConnected = false;
-		try {
-			const data = await (await fetch(`http://${target.host}:${target.port}/`, { signal: AbortSignal.timeout(2e3) })).json();
-			probeRunning = Boolean(data.ok);
-			probeConnected = Boolean(data.connected);
-		} catch {}
-		const running = probeRunning || snapshot.active;
-		const portConflict = !running && !snapshot.active ? await isLoopbackPortOpen(target.host, target.port) : false;
-		return c.json({
-			running,
-			connected: probeConnected,
-			backend: target.backend,
-			artifacts,
-			bridgeHeld: snapshot.active,
-			refCount: snapshot.refCount,
-			manualBridge: manualExtensionHandle !== null,
-			portConflict
-		});
-	});
-	authenticated.get("/api/browser/extension/doctor", async (c) => {
-		const cacheDirRaw = c.req.query("cacheDir");
-		try {
-			const { browserExtDoctor } = await import("../../../browser/providers/browser-ext-install.js");
-			const status = await browserExtDoctor({ cacheDir: cacheDirRaw && cacheDirRaw.trim() ? cacheDirRaw.trim() : void 0 });
-			return c.json({
-				ok: true,
-				payload: status
-			});
-		} catch (e) {
-			const message = e instanceof Error ? e.message : String(e);
-			return c.json({
-				ok: false,
-				error: message
-			}, 400);
-		}
-	});
-	authenticated.post("/api/browser/extension/install", strictRateLimitMiddleware, async (c) => {
-		let body;
-		try {
-			body = await c.req.json();
-		} catch {
-			body = {};
-		}
-		const input = body && typeof body === "object" && !Array.isArray(body) ? body : {};
-		const cacheDir = typeof input.cacheDir === "string" && input.cacheDir.trim() ? input.cacheDir.trim() : void 0;
-		const force = input.force === true;
-		try {
-			const { ensureBrowserExtensionArtifacts, browserExtDoctor } = await import("../../../browser/providers/browser-ext-install.js");
-			const result = await ensureBrowserExtensionArtifacts({
-				cacheDir,
-				force
-			});
-			const doctor = await browserExtDoctor({ cacheDir });
-			return c.json({
-				ok: true,
-				payload: {
-					...result,
-					doctor
-				}
-			});
-		} catch (e) {
-			const message = e instanceof Error ? e.message : String(e);
-			return c.json({
-				ok: false,
-				error: message
-			}, 500);
-		}
-	});
-	authenticated.post("/api/browser/extension/open", strictRateLimitMiddleware, async (c) => {
-		let body;
-		try {
-			body = await c.req.json();
-		} catch {
-			body = {};
-		}
-		const input = body && typeof body === "object" && !Array.isArray(body) ? body : {};
-		const cacheDir = typeof input.cacheDir === "string" && input.cacheDir.trim() ? input.cacheDir.trim() : void 0;
-		const actionRaw = typeof input.action === "string" ? input.action.trim() : "both";
-		const action = actionRaw === "chrome" || actionRaw === "folder" || actionRaw === "both" ? actionRaw : "both";
-		try {
-			const { openBrowserExtensionInstallUi } = await import("../../../browser/providers/browser-ext-install.js");
-			const result = await openBrowserExtensionInstallUi({
-				action,
-				cacheDir
-			});
-			return c.json({
-				ok: true,
-				payload: result
-			});
-		} catch (e) {
-			const message = e instanceof Error ? e.message : String(e);
-			return c.json({
-				ok: false,
-				error: message
-			}, 500);
-		}
-	});
-	authenticated.post("/api/browser/extension/start", strictRateLimitMiddleware, async (c) => {
-		let body;
-		try {
-			body = await c.req.json();
-		} catch {
-			body = {};
-		}
-		const input = body && typeof body === "object" && !Array.isArray(body) ? body : {};
-		const port = typeof input.port === "number" && input.port >= 1024 && input.port <= 65535 ? Math.floor(input.port) : DEFAULT_EXTENSION_PORT;
-		const hostRaw = typeof input.host === "string" && input.host.trim() ? input.host.trim() : DEFAULT_EXTENSION_HOST;
-		if (!isLoopbackHost(hostRaw)) return c.json({
-			ok: false,
-			error: "extension bridge host must be loopback"
-		}, 400);
-		try {
-			if (manualExtensionHandle && (manualExtensionHandle.host !== hostRaw || manualExtensionHandle.port !== port)) {
-				await manualExtensionHandle.release();
-				manualExtensionHandle = null;
-			}
-			if (!manualExtensionHandle) {
-				const { acquireExtensionBrowserServer } = await import("../../../browser/providers/extension-ws-acquire.js");
-				const { release } = await acquireExtensionBrowserServer({
-					host: hostRaw,
-					port
-				});
-				manualExtensionHandle = {
-					release,
-					host: hostRaw,
-					port
-				};
-			}
-			return c.json({
-				ok: true,
-				payload: {
-					running: true,
-					host: hostRaw,
-					port
-				}
-			});
-		} catch (e) {
-			return c.json({
-				ok: false,
-				error: e instanceof Error ? e.message : String(e)
-			}, 500);
-		}
-	});
-	authenticated.post("/api/browser/extension/stop", strictRateLimitMiddleware, async (c) => {
-		try {
-			const { forcedShutdown } = await stopExtensionBridgeFromSettings(service);
-			return c.json({
-				ok: true,
-				payload: {
-					running: false,
-					forcedShutdown
-				}
-			});
-		} catch (e) {
-			return c.json({
-				ok: false,
-				error: e instanceof Error ? e.message : String(e)
-			}, 500);
-		}
-	});
-	authenticated.post("/api/browser/extension/disconnect", strictRateLimitMiddleware, async (c) => {
-		try {
-			const { getExtensionBrowserProvider } = await import("../../../browser/providers/extension-ws-acquire.js");
-			const provider = getExtensionBrowserProvider();
-			if (!provider?.isConnected()) return c.json({
-				ok: true,
-				payload: {
-					connected: false,
-					alreadyDisconnected: true
-				}
-			});
-			provider.disconnectClient();
-			return c.json({
-				ok: true,
-				payload: { connected: false }
-			});
-		} catch (e) {
-			return c.json({
-				ok: false,
-				error: e instanceof Error ? e.message : String(e)
-			}, 500);
-		}
-	});
-	authenticated.get("/api/browser/playwright/doctor", async (c) => {
-		try {
-			const { playwrightChromiumDoctor } = await import("../../../browser/providers/playwright-doctor.js");
-			const payload = await playwrightChromiumDoctor();
-			return c.json({
-				ok: true,
-				payload
-			});
-		} catch (e) {
-			return c.json({
-				ok: false,
-				error: e instanceof Error ? e.message : String(e)
-			}, 500);
-		}
-	});
-	authenticated.get("/api/browser/cloakbrowser/doctor", async (c) => {
-		const cacheDirRaw = c.req.query("cacheDir");
-		const binaryPathRaw = c.req.query("binaryPath");
-		try {
-			const { cloakBrowserDoctor } = await import("../../../browser/providers/cloakbrowser.js");
-			const status = await cloakBrowserDoctor({
-				cacheDir: cacheDirRaw && cacheDirRaw.trim() ? cacheDirRaw.trim() : void 0,
-				binaryPath: binaryPathRaw && binaryPathRaw.trim() ? binaryPathRaw.trim() : void 0
-			});
-			return c.json({
-				ok: true,
-				payload: status
-			});
-		} catch (e) {
-			const message = e instanceof Error ? e.message : String(e);
-			return c.json({
-				ok: false,
-				error: message
-			}, 400);
-		}
-	});
-	authenticated.get("/api/browser/cloakbrowser/status", async (c) => {
-		try {
-			const { cloakBrowserConfigFromAgentDefaults } = await import("../../../browser/backend-from-config.js");
-			const { probeCloakBrowserRuntime } = await import("../../../browser/providers/cloakbrowser.js");
-			const status = await probeCloakBrowserRuntime(cloakBrowserConfigFromAgentDefaults(service.currentConfig));
-			return c.json({
-				ok: true,
-				payload: status
-			});
-		} catch (e) {
-			const message = e instanceof Error ? e.message : String(e);
-			return c.json({
-				ok: false,
-				error: message
-			}, 500);
-		}
-	});
-	authenticated.post("/api/browser/cloakbrowser/launch", strictRateLimitMiddleware, async (c) => {
-		try {
-			const { cloakBrowserConfigFromAgentDefaults } = await import("../../../browser/backend-from-config.js");
-			const { launchCloakBrowser } = await import("../../../browser/providers/cloakbrowser.js");
-			const config = cloakBrowserConfigFromAgentDefaults(service.currentConfig);
-			const result = await launchCloakBrowser({
-				...config,
-				skipPlaywrightConnect: true
-			});
-			return c.json({
-				ok: true,
-				payload: {
-					running: true,
-					reused: result.reused,
-					port: result.cdpPort,
-					pid: result.pid,
-					userDataDir: result.userDataDir,
-					temporaryProfile: config.temporaryProfile === true
-				}
-			});
-		} catch (e) {
-			const message = e instanceof Error ? e.message : String(e);
-			return c.json({
-				ok: false,
-				error: message
-			}, 500);
-		}
-	});
-	authenticated.post("/api/browser/cdp/ping", strictRateLimitMiddleware, async (c) => {
-		let body;
-		try {
-			body = await c.req.json();
-		} catch {
-			return c.json({
-				ok: false,
-				error: "invalid JSON body"
-			}, 400);
-		}
-		const input = body && typeof body === "object" && !Array.isArray(body) ? body : {};
-		const cdpUrl = typeof input.cdpUrl === "string" ? input.cdpUrl.trim() : "";
-		if (!cdpUrl) return c.json({
-			ok: false,
-			error: "cdpUrl is required"
-		}, 400);
-		if (!loopbackHostnameFromUrl(cdpUrl)) return c.json({
-			ok: false,
-			error: "CDP ping only allowed for loopback hosts (127.0.0.1 / localhost / ::1)"
-		}, 403);
-		let httpBase;
-		try {
-			httpBase = new URL(cdpUrl);
-			httpBase.protocol = httpBase.protocol === "wss:" ? "https:" : "http:";
-			httpBase.pathname = "/json/version";
-			httpBase.search = "";
-			httpBase.hash = "";
-		} catch (e) {
-			return c.json({
-				ok: false,
-				error: e instanceof Error ? e.message : "invalid cdpUrl"
-			}, 400);
-		}
-		try {
-			const res = await fetch(httpBase.toString(), { signal: AbortSignal.timeout(2e3) });
-			if (!res.ok) return c.json({
-				ok: true,
-				payload: {
-					reachable: false,
-					status: res.status
-				}
-			});
-			const data = await res.json();
-			return c.json({
-				ok: true,
-				payload: {
-					reachable: true,
-					browser: data.Browser ?? null,
-					protocolVersion: data["Protocol-Version"] ?? null,
-					webSocketDebuggerUrl: data.webSocketDebuggerUrl ?? null
-				}
-			});
-		} catch (e) {
-			const message = e instanceof Error ? e.message : String(e);
-			return c.json({
-				ok: true,
-				payload: {
-					reachable: false,
-					error: message
-				}
-			});
-		}
-	});
-	authenticated.post("/api/browser/cdp/launch", strictRateLimitMiddleware, async (c) => {
-		let body;
-		try {
-			body = await c.req.json();
-		} catch {
-			body = {};
-		}
-		const input = body && typeof body === "object" && !Array.isArray(body) ? body : {};
-		const executablePath = typeof input.executablePath === "string" && input.executablePath.trim() ? input.executablePath.trim() : void 0;
-		try {
-			const { launchLocalCdpChrome } = await import("../../../browser/cdp-local-launcher.js");
-			const result = await launchLocalCdpChrome({ executablePath });
-			return c.json({
-				ok: true,
-				payload: result
-			});
-		} catch (e) {
-			const message = e instanceof Error ? e.message : String(e);
-			return c.json({
-				ok: false,
-				error: message
-			}, 500);
-		}
-	});
-	authenticated.post("/api/browser/cdp/stop", strictRateLimitMiddleware, async (c) => {
-		let body;
-		try {
-			body = await c.req.json();
-		} catch {
-			return c.json({
-				ok: false,
-				error: "invalid JSON body"
-			}, 400);
-		}
-		const input = body && typeof body === "object" && !Array.isArray(body) ? body : {};
-		const port = typeof input.port === "number" && Number.isInteger(input.port) ? input.port : NaN;
-		if (!Number.isFinite(port) || port < 1024 || port > 65535) return c.json({
-			ok: false,
-			error: "port must be an integer in [1024, 65535]"
-		}, 400);
-		const { stopLocalCdpChrome } = await import("../../../browser/cdp-local-launcher.js");
-		const stopped = await stopLocalCdpChrome(port);
-		return c.json({
-			ok: true,
-			payload: { stopped }
-		});
-	});
-	authenticated.get("/api/browser/cdp/instances", async (c) => {
-		const { listLocalCdpInstances } = await import("../../../browser/cdp-local-launcher.js");
-		return c.json({
-			ok: true,
-			payload: { instances: listLocalCdpInstances() }
-		});
-	});
-	authenticated.post("/api/browser/cloud/test-connection", strictRateLimitMiddleware, async (c) => {
-		let body;
-		try {
-			body = await c.req.json();
-		} catch {
-			return c.json({
-				ok: false,
-				error: "invalid JSON body"
-			}, 400);
-		}
-		const input = body && typeof body === "object" && !Array.isArray(body) ? body : {};
-		const provider = input.provider;
-		let apiKey = typeof input.apiKey === "string" ? input.apiKey.trim() : "";
-		if (apiKey === "***" || apiKey === "••••••••••••") {
-			const stored = service.currentConfig?.agents?.defaults?.browser?.cloud?.apiKey;
-			apiKey = typeof stored === "string" ? stored.trim() : "";
-		}
-		if (!apiKey) {
-			if (provider === "browserbase") apiKey = process.env.BROWSERBASE_API_KEY ?? "";
-			else if (provider === "browser-use") apiKey = process.env.BROWSER_USE_API_KEY ?? "";
-		}
-		if (!apiKey) return c.json({
-			ok: true,
-			payload: {
-				reachable: false,
-				error: "No API key configured"
-			}
-		});
-		try {
-			if (provider === "browserbase") {
-				const res = await fetch("https://api.browserbase.com/v1/projects", {
-					headers: { "x-bb-api-key": apiKey },
-					signal: AbortSignal.timeout(5e3)
-				});
-				if (!res.ok) return c.json({
-					ok: true,
-					payload: {
-						reachable: false,
-						status: res.status,
-						error: await res.text().catch(() => "")
-					}
-				});
-				const data = await res.json().catch(() => null);
-				const projects = Array.isArray(data) ? data : Array.isArray(data?.data) ? data.data : [];
-				return c.json({
-					ok: true,
-					payload: {
-						reachable: true,
-						projectCount: projects.length
-					}
-				});
-			}
-			if (provider === "browser-use") {
-				const res = await fetch("https://api.browser-use.com/api/v1/users/me", {
-					headers: { Authorization: `Bearer ${apiKey}` },
-					signal: AbortSignal.timeout(5e3)
-				});
-				if (!res.ok) return c.json({
-					ok: true,
-					payload: {
-						reachable: false,
-						status: res.status,
-						error: await res.text().catch(() => "")
-					}
-				});
-				return c.json({
-					ok: true,
-					payload: { reachable: true }
-				});
-			}
-			return c.json({
-				ok: false,
-				error: "provider must be browserbase or browser-use"
-			}, 400);
-		} catch (e) {
-			const message = e instanceof Error ? e.message : String(e);
-			return c.json({
-				ok: true,
-				payload: {
-					reachable: false,
-					error: message
-				}
-			});
-		}
-	});
-	authenticated.post("/api/browser/playwright/install", strictRateLimitMiddleware, async (c) => {
-		try {
-			const { installPlaywrightChromium } = await import("../../../browser/providers/playwright-install.js");
-			const payload = await installPlaywrightChromium();
-			return c.json({
-				ok: true,
-				payload
-			});
-		} catch (e) {
-			const message = e instanceof Error ? e.message : String(e);
-			return c.json({
-				ok: false,
-				error: message || "Failed to install Playwright Chromium"
-			}, 500);
-		}
-	});
-	authenticated.post("/api/browser/cloakbrowser/install", strictRateLimitMiddleware, async (c) => {
-		let body;
-		try {
-			body = await c.req.json();
-		} catch {
-			body = {};
-		}
-		const input = body && typeof body === "object" && !Array.isArray(body) ? body : {};
-		const cacheDir = typeof input.cacheDir === "string" && input.cacheDir.trim() ? input.cacheDir.trim() : void 0;
-		const binaryPath = typeof input.binaryPath === "string" && input.binaryPath.trim() ? input.binaryPath.trim() : void 0;
-		try {
-			const { installCloakBrowser } = await import("../../../browser/providers/cloakbrowser.js");
-			const status = await installCloakBrowser({
-				cacheDir,
-				binaryPath
-			});
-			return c.json({
-				ok: true,
-				payload: status
-			});
-		} catch (e) {
-			const message = e instanceof Error ? e.message : String(e);
-			return c.json({
-				ok: false,
-				error: message
-			}, 500);
-		}
-	});
 	authenticated.post("/api/config/reload", strictRateLimitMiddleware, async (c) => {
 		const result = await service.reloadConfig();
 		return c.json({
@@ -666,1140 +39,23 @@ function registerConfigRoutes(authenticated, deps) {
 	authenticated.patch("/api/config", strictRateLimitMiddleware, async (c) => {
 		const body = await c.req.json();
 		const config = service.currentConfig;
-		if (body.agents?.defaults) {
-			if (!config.agents) config.agents = { defaults: {
-				workspace: "~/.xopc/workspace",
-				model: "anthropic/claude-sonnet-4-5",
-				maxTokens: 8192,
-				temperature: .7,
-				maxToolIterations: 20,
-				maxRequestsPerTurn: 50,
-				maxToolFailuresPerTurn: 3,
-				thinkingDefault: "medium",
-				reasoningDefault: "stream",
-				verboseDefault: "full"
-			} };
-			if (!config.agents.defaults) config.agents.defaults = {};
-			if (body.agents.defaults.model !== void 0) config.agents.defaults.model = normalizePatchAgentModel(body.agents.defaults.model);
-			if (body.agents.defaults.maxTokens !== void 0) config.agents.defaults.maxTokens = body.agents.defaults.maxTokens;
-			if (body.agents.defaults.temperature !== void 0) config.agents.defaults.temperature = body.agents.defaults.temperature;
-			if (body.agents.defaults.maxToolIterations !== void 0) config.agents.defaults.maxToolIterations = body.agents.defaults.maxToolIterations;
-			if (body.agents.defaults.workspace !== void 0) config.agents.defaults.workspace = body.agents.defaults.workspace;
-			if (body.agents.defaults.thinkingDefault !== void 0) config.agents.defaults.thinkingDefault = body.agents.defaults.thinkingDefault;
-			if (body.agents.defaults.reasoningDefault !== void 0) config.agents.defaults.reasoningDefault = body.agents.defaults.reasoningDefault;
-			if (body.agents.defaults.verboseDefault !== void 0) config.agents.defaults.verboseDefault = body.agents.defaults.verboseDefault;
-			if (body.agents.defaults.imageModel !== void 0) {
-				const v = body.agents.defaults.imageModel;
-				if (v === "" || v === null) delete config.agents.defaults.imageModel;
-				else config.agents.defaults.imageModel = normalizePatchAgentModel(v);
-			}
-			if (body.agents.defaults.imageGenerationModel !== void 0) {
-				const v = body.agents.defaults.imageGenerationModel;
-				if (v === "" || v === null) delete config.agents.defaults.imageGenerationModel;
-				else {
-					const normalized = normalizePatchAgentImageGenerationModel(v);
-					if (normalized === void 0) delete config.agents.defaults.imageGenerationModel;
-					else config.agents.defaults.imageGenerationModel = normalized;
-				}
-			}
-			if (body.agents.defaults.mediaMaxMb !== void 0) {
-				const v = body.agents.defaults.mediaMaxMb;
-				if (v === null) delete config.agents.defaults.mediaMaxMb;
-				else {
-					const n = typeof v === "number" ? v : Number(v);
-					if (!Number.isNaN(n) && n > 0) config.agents.defaults.mediaMaxMb = n;
-				}
-			}
-			if (body.agents.defaults.browser !== void 0) {
-				const b = body.agents.defaults.browser;
-				if (b === null) delete config.agents.defaults.browser;
-				else if (typeof b === "object" && !Array.isArray(b)) {
-					const br = b;
-					if (!config.agents.defaults.browser) config.agents.defaults.browser = {
-						enabled: false,
-						headless: false
-					};
-					const target = config.agents.defaults.browser;
-					if (br.enabled !== void 0) if (br.enabled === null) delete target.enabled;
-					else target.enabled = Boolean(br.enabled);
-					if (br.headless !== void 0) if (br.headless === null) delete target.headless;
-					else target.headless = Boolean(br.headless);
-					if (br.allowPrivateUrls !== void 0) if (br.allowPrivateUrls === null) delete target.allowPrivateUrls;
-					else target.allowPrivateUrls = Boolean(br.allowPrivateUrls);
-					if (br.commandTimeout !== void 0) {
-						if (br.commandTimeout === null) delete target.commandTimeout;
-						else if (typeof br.commandTimeout === "number" && Number.isFinite(br.commandTimeout)) {
-							const n = Math.floor(br.commandTimeout);
-							if (n >= 5 && n <= 900) target.commandTimeout = n;
-						}
-					}
-					if (br.backend !== void 0) {
-						if (br.backend === null || br.backend === "" || br.backend === "extension") delete target.backend;
-						else if (br.backend === "local" || br.backend === "cdp" || br.backend === "cloud" || br.backend === "cloakbrowser") target.backend = br.backend;
-					}
-					if (br.cloudProvider !== void 0) {
-						if (br.cloudProvider === null || br.cloudProvider === "") delete target.cloudProvider;
-						else if (br.cloudProvider === "browserbase" || br.cloudProvider === "browser-use") target.cloudProvider = br.cloudProvider;
-					}
-					if (br.cloud !== void 0) {
-						if (br.cloud === null) delete target.cloud;
-						else if (typeof br.cloud === "object" && !Array.isArray(br.cloud)) {
-							const cloudPatch = br.cloud;
-							const cloudTarget = { ...target.cloud && typeof target.cloud === "object" && !Array.isArray(target.cloud) ? target.cloud : {} };
-							if (cloudPatch.apiKey !== void 0) {
-								if (cloudPatch.apiKey === null || cloudPatch.apiKey === "") delete cloudTarget.apiKey;
-								else if (cloudPatch.apiKey === "***") {} else if (typeof cloudPatch.apiKey === "string") cloudTarget.apiKey = cloudPatch.apiKey.trim();
-							}
-							for (const key of ["projectId", "region"]) {
-								const value = cloudPatch[key];
-								if (value === null || value === "") delete cloudTarget[key];
-								else if (typeof value === "string" && value.trim()) cloudTarget[key] = value.trim();
-							}
-							if (Object.keys(cloudTarget).length > 0) target.cloud = cloudTarget;
-							else delete target.cloud;
-						}
-					}
-					if (br.cdpUrl !== void 0) {
-						if (br.cdpUrl === null || br.cdpUrl === "") delete target.cdpUrl;
-						else if (typeof br.cdpUrl === "string") target.cdpUrl = br.cdpUrl.trim();
-					}
-					if (br.extension !== void 0) {
-						if (br.extension === null) delete target.extension;
-						else if (typeof br.extension === "object" && !Array.isArray(br.extension)) {
-							const ext = br.extension;
-							const extTarget = {};
-							if (ext.port === null || ext.port === "") {} else if (typeof ext.port === "number" && ext.port >= 1024 && ext.port <= 65535) extTarget.port = Math.floor(ext.port);
-							if (ext.host === null || ext.host === "") {} else if (typeof ext.host === "string" && ext.host.trim()) extTarget.host = ext.host.trim();
-							if (ext.connectionTimeout === null || ext.connectionTimeout === "") {} else if (typeof ext.connectionTimeout === "number" && Number.isFinite(ext.connectionTimeout) && ext.connectionTimeout >= 1e3) extTarget.connectionTimeout = Math.floor(ext.connectionTimeout);
-							if (Object.keys(extTarget).length > 0) target.extension = extTarget;
-							else delete target.extension;
-						}
-					}
-					if (br.cloakbrowser !== void 0) {
-						if (br.cloakbrowser === null) delete target.cloakbrowser;
-						else if (typeof br.cloakbrowser === "object" && !Array.isArray(br.cloakbrowser)) {
-							const cloakbrowserPatch = br.cloakbrowser;
-							const cloakbrowserTarget = {};
-							if (typeof cloakbrowserPatch.keepOpen === "boolean") cloakbrowserTarget.keepOpen = cloakbrowserPatch.keepOpen;
-							if (typeof cloakbrowserPatch.temporaryProfile === "boolean") cloakbrowserTarget.temporaryProfile = cloakbrowserPatch.temporaryProfile;
-							for (const key of [
-								"cacheDir",
-								"binaryPath",
-								"timezone",
-								"locale",
-								"webrtcIp",
-								"fingerprintPlatform"
-							]) {
-								const value = cloakbrowserPatch[key];
-								if (typeof value === "string" && value.trim()) cloakbrowserTarget[key] = value.trim();
-							}
-							if (Array.isArray(cloakbrowserPatch.extraArgs) && cloakbrowserPatch.extraArgs.every((value) => typeof value === "string")) cloakbrowserTarget.extraArgs = cloakbrowserPatch.extraArgs;
-							if (Object.keys(cloakbrowserTarget).length > 0) target.cloakbrowser = cloakbrowserTarget;
-							else delete target.cloakbrowser;
-						}
-					}
-					if (br.humanize !== void 0) if (br.humanize === null) delete target.humanize;
-					else target.humanize = Boolean(br.humanize);
-					if (br.humanPreset !== void 0) {
-						if (br.humanPreset === null) delete target.humanPreset;
-						else if (br.humanPreset === "default" || br.humanPreset === "careful") target.humanPreset = br.humanPreset;
-					}
-					if (br.dialogPolicy !== void 0) {
-						if (br.dialogPolicy === null) delete target.dialogPolicy;
-						else if (br.dialogPolicy === "must_respond" || br.dialogPolicy === "auto_dismiss" || br.dialogPolicy === "auto_accept") target.dialogPolicy = br.dialogPolicy;
-					}
-					if (br.dialogTimeoutSeconds !== void 0) {
-						if (br.dialogTimeoutSeconds === null) delete target.dialogTimeoutSeconds;
-						else if (typeof br.dialogTimeoutSeconds === "number" && Number.isFinite(br.dialogTimeoutSeconds)) {
-							const n = Math.floor(br.dialogTimeoutSeconds);
-							if (n >= 1 && n <= 86400) target.dialogTimeoutSeconds = n;
-						}
-					}
-				}
-			}
-			const dPatch = body.agents.defaults;
-			const def = config.agents.defaults;
-			if (dPatch.maxTaskDurationMs !== void 0) {
-				const v = dPatch.maxTaskDurationMs;
-				if (v === null) delete def.maxTaskDurationMs;
-				else if (typeof v === "number" && Number.isFinite(v)) {
-					const ms = Math.floor(v);
-					if (ms >= 6e4 && ms <= 144e5) def.maxTaskDurationMs = ms;
-				}
-			}
-			if (dPatch.maxRequestsPerTurn !== void 0) {
-				const v = dPatch.maxRequestsPerTurn;
-				if (v === null) delete def.maxRequestsPerTurn;
-				else if (typeof v === "number" && Number.isFinite(v)) {
-					const n = Math.floor(v);
-					if (n >= 10 && n <= 200) def.maxRequestsPerTurn = n;
-				}
-			}
-			if (dPatch.maxToolFailuresPerTurn !== void 0) {
-				const v = dPatch.maxToolFailuresPerTurn;
-				if (v === null) delete def.maxToolFailuresPerTurn;
-				else if (typeof v === "number" && Number.isFinite(v)) {
-					const n = Math.floor(v);
-					if (n >= 1 && n <= 20) def.maxToolFailuresPerTurn = n;
-				}
-			}
-			if (dPatch.compaction !== void 0) {
-				const c = dPatch.compaction;
-				if (c === null) delete def.compaction;
-				else if (typeof c === "object" && !Array.isArray(c)) {
-					const p = c;
-					if (!def.compaction || typeof def.compaction !== "object") def.compaction = {};
-					const t = def.compaction;
-					if (p.enabled !== void 0) t.enabled = Boolean(p.enabled);
-					if (p.mode === "default" || p.mode === "safeguard") t.mode = p.mode;
-					if (typeof p.reserveTokens === "number" && Number.isFinite(p.reserveTokens)) t.reserveTokens = Math.floor(p.reserveTokens);
-					if (typeof p.triggerThreshold === "number" && Number.isFinite(p.triggerThreshold)) {
-						const x = p.triggerThreshold;
-						if (x >= .5 && x <= .95) t.triggerThreshold = x;
-					}
-					if (typeof p.minMessagesBeforeCompact === "number" && Number.isFinite(p.minMessagesBeforeCompact)) t.minMessagesBeforeCompact = Math.floor(p.minMessagesBeforeCompact);
-					if (typeof p.keepRecentMessages === "number" && Number.isFinite(p.keepRecentMessages)) t.keepRecentMessages = Math.floor(p.keepRecentMessages);
-					if (typeof p.evictionWindow === "number" && Number.isFinite(p.evictionWindow)) {
-						const x = p.evictionWindow;
-						if (x >= .1 && x <= .5) t.evictionWindow = x;
-					}
-					if (typeof p.retentionWindow === "number" && Number.isFinite(p.retentionWindow)) {
-						const n = Math.floor(p.retentionWindow);
-						if (n >= 3 && n <= 20) t.retentionWindow = n;
-					}
-				}
-			}
-			if (dPatch.pruning !== void 0) {
-				const c = dPatch.pruning;
-				if (c === null) delete def.pruning;
-				else if (typeof c === "object" && !Array.isArray(c)) {
-					const p = c;
-					if (!def.pruning || typeof def.pruning !== "object") def.pruning = {};
-					const t = def.pruning;
-					if (p.enabled !== void 0) t.enabled = Boolean(p.enabled);
-					if (typeof p.maxToolResultChars === "number" && Number.isFinite(p.maxToolResultChars)) t.maxToolResultChars = Math.floor(p.maxToolResultChars);
-					if (typeof p.headKeepRatio === "number" && Number.isFinite(p.headKeepRatio)) t.headKeepRatio = p.headKeepRatio;
-					if (typeof p.tailKeepRatio === "number" && Number.isFinite(p.tailKeepRatio)) t.tailKeepRatio = p.tailKeepRatio;
-				}
-			}
-			if (dPatch.memory !== void 0) {
-				const c = dPatch.memory;
-				if (c === null) delete def.memory;
-				else if (typeof c === "object" && !Array.isArray(c)) {
-					const p = c;
-					if (!def.memory || typeof def.memory !== "object") def.memory = {};
-					const t = def.memory;
-					if (p.enabled !== void 0) if (p.enabled === null) delete t.enabled;
-					else t.enabled = Boolean(p.enabled);
-					if (p.useEnhancedSystem !== void 0) if (p.useEnhancedSystem === null) delete t.useEnhancedSystem;
-					else t.useEnhancedSystem = Boolean(p.useEnhancedSystem);
-					if (p.userProfileEnabled !== void 0) if (p.userProfileEnabled === null) delete t.userProfileEnabled;
-					else t.userProfileEnabled = Boolean(p.userProfileEnabled);
-					if (p.memoryCharLimit !== void 0) {
-						if (p.memoryCharLimit === null) delete t.memoryCharLimit;
-						else if (typeof p.memoryCharLimit === "number" && p.memoryCharLimit > 0) t.memoryCharLimit = Math.floor(p.memoryCharLimit);
-					}
-					if (p.userCharLimit !== void 0) {
-						if (p.userCharLimit === null) delete t.userCharLimit;
-						else if (typeof p.userCharLimit === "number" && p.userCharLimit > 0) t.userCharLimit = Math.floor(p.userCharLimit);
-					}
-					if (p.provider === "none" || p.provider === "stub") t.provider = p.provider;
-					else if (p.provider === null) delete t.provider;
-					if (p.injectionFrequency === "every-turn" || p.injectionFrequency === "first-turn") t.injectionFrequency = p.injectionFrequency;
-					else if (p.injectionFrequency === null) delete t.injectionFrequency;
-					if (p.contextCadence !== void 0) {
-						if (p.contextCadence === null) delete t.contextCadence;
-						else if (typeof p.contextCadence === "number" && p.contextCadence >= 1) t.contextCadence = Math.floor(p.contextCadence);
-					}
-					if (p.dialecticCadence !== void 0) {
-						if (p.dialecticCadence === null) delete t.dialecticCadence;
-						else if (typeof p.dialecticCadence === "number" && p.dialecticCadence >= 1) t.dialecticCadence = Math.floor(p.dialecticCadence);
-					}
-					if (p.dreaming !== void 0) {
-						const d0 = p.dreaming;
-						if (d0 === null) delete t.dreaming;
-						else if (typeof d0 === "object" && d0 !== null && !Array.isArray(d0)) {
-							if (!("dreaming" in t) || typeof t.dreaming !== "object") t.dreaming = {};
-							const dt = t.dreaming;
-							const dp = d0;
-							if (dp.enabled !== void 0) if (dp.enabled === null) delete dt.enabled;
-							else dt.enabled = Boolean(dp.enabled);
-							if (dp.frequency !== void 0) {
-								const v = dp.frequency;
-								if (v === null || v === "") delete dt.frequency;
-								else if (typeof v === "string") dt.frequency = v;
-							}
-							if (dp.timezone !== void 0) {
-								const v = dp.timezone;
-								if (v === null || v === "") delete dt.timezone;
-								else if (typeof v === "string") dt.timezone = v;
-							}
-							if (dp.phases !== void 0 || dp.deep !== void 0) {
-								if (!("phases" in dt) || typeof dt.phases !== "object" || dt.phases === null) dt.phases = {};
-								const phases = dt.phases;
-								if (!("deep" in phases) || typeof phases.deep !== "object" || phases.deep === null) phases.deep = {};
-								const deep = phases.deep;
-								const deepPatchRaw = typeof dp.phases === "object" && dp.phases !== null && !Array.isArray(dp.phases) ? dp.phases.deep : dp.deep;
-								const deepPatch = typeof deepPatchRaw === "object" && deepPatchRaw !== null && !Array.isArray(deepPatchRaw) ? deepPatchRaw : null;
-								if (deepPatch) {
-									if (deepPatch.enabled !== void 0) if (deepPatch.enabled === null) delete deep.enabled;
-									else deep.enabled = Boolean(deepPatch.enabled);
-									if (deepPatch.minScore !== void 0) {
-										const v = deepPatch.minScore;
-										if (v === null) delete deep.minScore;
-										else if (typeof v === "number" && Number.isFinite(v)) deep.minScore = v;
-									}
-									if (deepPatch.minRecallCount !== void 0) {
-										const v = deepPatch.minRecallCount;
-										if (v === null) delete deep.minRecallCount;
-										else if (typeof v === "number" && Number.isFinite(v)) deep.minRecallCount = Math.floor(v);
-									}
-									if (deepPatch.limit !== void 0) {
-										const v = deepPatch.limit;
-										if (v === null) delete deep.limit;
-										else if (typeof v === "number" && Number.isFinite(v)) deep.limit = Math.floor(v);
-									}
-								}
-							}
-						}
-					}
-				}
-			}
-			if (dPatch.sessionSearch !== void 0) {
-				const c = dPatch.sessionSearch;
-				if (c === null) delete def.sessionSearch;
-				else if (typeof c === "object" && !Array.isArray(c)) {
-					const p = c;
-					if (!def.sessionSearch || typeof def.sessionSearch !== "object") def.sessionSearch = {};
-					const t = def.sessionSearch;
-					if (p.summaryModel !== void 0) {
-						if (p.summaryModel === null || p.summaryModel === "") delete t.summaryModel;
-						else if (typeof p.summaryModel === "string") t.summaryModel = p.summaryModel;
-					}
-				}
-			}
-			if (dPatch.backgroundReview !== void 0) {
-				const c = dPatch.backgroundReview;
-				if (c === null) delete def.backgroundReview;
-				else if (typeof c === "object" && !Array.isArray(c)) {
-					const p = c;
-					if (!def.backgroundReview || typeof def.backgroundReview !== "object") def.backgroundReview = {};
-					const t = def.backgroundReview;
-					if (p.enabled !== void 0) if (p.enabled === null) delete t.enabled;
-					else t.enabled = Boolean(p.enabled);
-					if (p.memoryNudgeInterval !== void 0) {
-						if (p.memoryNudgeInterval === null) delete t.memoryNudgeInterval;
-						else if (typeof p.memoryNudgeInterval === "number" && p.memoryNudgeInterval >= 0) t.memoryNudgeInterval = Math.floor(p.memoryNudgeInterval);
-					}
-					if (p.skillNudgeInterval !== void 0) {
-						if (p.skillNudgeInterval === null) delete t.skillNudgeInterval;
-						else if (typeof p.skillNudgeInterval === "number" && p.skillNudgeInterval >= 0) t.skillNudgeInterval = Math.floor(p.skillNudgeInterval);
-					}
-					if (p.maxToolRounds !== void 0) {
-						if (p.maxToolRounds === null) delete t.maxToolRounds;
-						else if (typeof p.maxToolRounds === "number" && p.maxToolRounds >= 1 && p.maxToolRounds <= 32) t.maxToolRounds = Math.floor(p.maxToolRounds);
-					}
-					if (p.maxHistoryMessages !== void 0) {
-						if (p.maxHistoryMessages === null) delete t.maxHistoryMessages;
-						else if (typeof p.maxHistoryMessages === "number" && p.maxHistoryMessages >= 10 && p.maxHistoryMessages <= 200) t.maxHistoryMessages = Math.floor(p.maxHistoryMessages);
-					}
-					if (p.maxDurationMs !== void 0) {
-						if (p.maxDurationMs === null) delete t.maxDurationMs;
-						else if (typeof p.maxDurationMs === "number" && p.maxDurationMs >= 3e4 && p.maxDurationMs <= 6e5) t.maxDurationMs = Math.floor(p.maxDurationMs);
-					}
-				}
-			}
-			if (dPatch.webExtract !== void 0) {
-				const c = dPatch.webExtract;
-				if (c === null) delete def.webExtract;
-				else if (typeof c === "object" && !Array.isArray(c)) {
-					const p = c;
-					if (!def.webExtract || typeof def.webExtract !== "object") def.webExtract = {};
-					const t = def.webExtract;
-					if (p.model !== void 0) {
-						if (p.model === null || p.model === "") delete t.model;
-						else if (typeof p.model === "string") t.model = p.model;
-					}
-					if (p.maxLength !== void 0) {
-						if (p.maxLength === null) delete t.maxLength;
-						else if (typeof p.maxLength === "number" && p.maxLength > 0) t.maxLength = p.maxLength;
-					}
-				}
-			}
-			if (dPatch.delegate !== void 0) {
-				const c = dPatch.delegate;
-				if (c === null) delete def.delegate;
-				else if (typeof c === "object" && !Array.isArray(c)) {
-					const p = c;
-					if (!def.delegate || typeof def.delegate !== "object") def.delegate = {};
-					const t = def.delegate;
-					if (p.enabled !== void 0) if (p.enabled === null) delete t.enabled;
-					else t.enabled = Boolean(p.enabled);
-				}
-			}
-			if (dPatch.executeCode !== void 0) {
-				const c = dPatch.executeCode;
-				if (c === null) delete def.executeCode;
-				else if (typeof c === "object" && !Array.isArray(c)) {
-					const p = c;
-					if (!def.executeCode || typeof def.executeCode !== "object") def.executeCode = {};
-					const t = def.executeCode;
-					if (p.enabled !== void 0) if (p.enabled === null) delete t.enabled;
-					else t.enabled = Boolean(p.enabled);
-				}
-			}
-			if (dPatch.systemPromptOverride !== void 0) {
-				const v = dPatch.systemPromptOverride;
-				if (v === null || v === "") delete def.systemPromptOverride;
-				else if (typeof v === "string") def.systemPromptOverride = v;
-			}
-			if (dPatch.skills !== void 0) {
-				const v = dPatch.skills;
-				if (v === null) delete def.skills;
-				else if (Array.isArray(v) && v.every((x) => typeof x === "string")) def.skills = v;
-			}
-			if (dPatch.tools !== void 0) {
-				const t0 = dPatch.tools;
-				if (t0 === null) delete def.tools;
-				else if (typeof t0 === "object" && !Array.isArray(t0)) {
-					const p = t0;
-					if (!def.tools || typeof def.tools !== "object") def.tools = {};
-					const t = def.tools;
-					if (p.disable !== void 0) {
-						if (p.disable === null || Array.isArray(p.disable) && p.disable.length === 0) delete t.disable;
-						else if (Array.isArray(p.disable) && p.disable.every((x) => typeof x === "string")) t.disable = p.disable;
-					}
-				}
-			}
-			if (dPatch.params !== void 0) {
-				const v = dPatch.params;
-				if (v === null) delete def.params;
-				else if (typeof v === "object" && !Array.isArray(v) && v !== null) def.params = v;
-			}
-		}
-		const patchChannels = body.channels;
-		if (patchChannels != null && typeof patchChannels === "object" && !Array.isArray(patchChannels)) {
-			if ("telegram" in patchChannels) {
-				const tgRaw = patchChannels.telegram;
-				if (tgRaw === null) {
-					if (config.channels) delete config.channels.telegram;
-				} else if (typeof tgRaw === "object" && !Array.isArray(tgRaw)) {
-					const bodyTg = tgRaw;
-					if (!config.channels) config.channels = { telegram: {
-						enabled: false,
-						allowFrom: [],
-						groupAllowFrom: [],
-						debug: false,
-						accounts: { default: {
-							accountId: "default",
-							enabled: true,
-							botToken: "",
-							allowFrom: [],
-							dmPolicy: "pairing",
-							groupPolicy: "open",
-							replyToMode: "off",
-							historyLimit: 50,
-							textChunkLimit: 4e3,
-							streamMode: "partial"
-						} },
-						dmPolicy: "pairing",
-						groupPolicy: "open",
-						replyToMode: "off",
-						historyLimit: 50,
-						textChunkLimit: 4e3
-					} };
-					if (!config.channels.telegram) config.channels.telegram = {};
-					const tg = config.channels.telegram;
-					if (bodyTg.enabled !== void 0) tg.enabled = bodyTg.enabled;
-					if (bodyTg.botToken !== void 0) {
-						const accRaw = tg.accounts;
-						const acc = accRaw && typeof accRaw === "object" && !Array.isArray(accRaw) ? { ...accRaw } : {};
-						const defRaw = acc.default;
-						acc.default = {
-							...defRaw && typeof defRaw === "object" && !Array.isArray(defRaw) ? { ...defRaw } : {},
-							accountId: "default",
-							botToken: bodyTg.botToken
-						};
-						tg.accounts = acc;
-					}
-					if (bodyTg.allowFrom !== void 0) tg.allowFrom = bodyTg.allowFrom;
-					if ("apiRoot" in bodyTg) {
-						const ar = bodyTg.apiRoot;
-						if (ar === null || ar === void 0 || typeof ar === "string" && !ar.trim()) delete tg.apiRoot;
-						else tg.apiRoot = String(ar).trim();
-					}
-					if (bodyTg.debug !== void 0) tg.debug = bodyTg.debug;
-					if (bodyTg.streamMode !== void 0) tg.streamMode = bodyTg.streamMode;
-					if ("groupAllowFrom" in bodyTg) {
-						const ga = bodyTg.groupAllowFrom;
-						if (ga === null || Array.isArray(ga) && ga.length === 0) delete tg.groupAllowFrom;
-						else tg.groupAllowFrom = ga;
-					}
-					if (bodyTg.dmPolicy !== void 0) tg.dmPolicy = bodyTg.dmPolicy;
-					if (bodyTg.groupPolicy !== void 0) tg.groupPolicy = bodyTg.groupPolicy;
-					if (bodyTg.replyToMode !== void 0) tg.replyToMode = bodyTg.replyToMode;
-					if (bodyTg.historyLimit !== void 0) tg.historyLimit = bodyTg.historyLimit;
-					if (bodyTg.textChunkLimit !== void 0) tg.textChunkLimit = bodyTg.textChunkLimit;
-					if ("proxy" in bodyTg) {
-						const pr = bodyTg.proxy;
-						if (pr === null || pr === void 0 || typeof pr === "string" && !pr.trim()) delete tg.proxy;
-						else tg.proxy = String(pr).trim();
-					}
-					if (bodyTg.accounts !== void 0) tg.accounts = bodyTg.accounts;
-				}
-			}
-			if ("weixin" in patchChannels) {
-				const wxRaw = patchChannels.weixin;
-				if (wxRaw === null) {
-					if (config.channels) delete config.channels.weixin;
-				} else if (typeof wxRaw === "object" && !Array.isArray(wxRaw)) {
-					const wx = wxRaw;
-					if (!config.channels) config.channels = {};
-					if (!config.channels.weixin) config.channels.weixin = {
-						enabled: false,
-						dmPolicy: "open",
-						allowFrom: [],
-						debug: false,
-						historyLimit: 50,
-						textChunkLimit: 4e3
-					};
-					const wxTarget = config.channels.weixin;
-					if (wx.enabled !== void 0) wxTarget.enabled = wx.enabled;
-					if (wx.dmPolicy !== void 0) wxTarget.dmPolicy = wx.dmPolicy;
-					if (wx.allowFrom !== void 0) wxTarget.allowFrom = wx.allowFrom;
-					if (wx.debug !== void 0) wxTarget.debug = wx.debug;
-					if (wx.streamMode !== void 0) wxTarget.streamMode = wx.streamMode;
-					if (wx.historyLimit !== void 0) wxTarget.historyLimit = wx.historyLimit;
-					if (wx.textChunkLimit !== void 0) wxTarget.textChunkLimit = wx.textChunkLimit;
-					if ("routeTag" in wx) {
-						const rt = wx.routeTag;
-						if (rt === null || rt === void 0 || rt === "") delete wxTarget.routeTag;
-						else wxTarget.routeTag = rt;
-					}
-					if (wx.accounts !== void 0) wxTarget.accounts = wx.accounts;
-				}
-			}
-			if ("feishu" in patchChannels) {
-				const fsRaw = patchChannels.feishu;
-				if (fsRaw === null) {
-					if (config.channels) delete config.channels.feishu;
-				} else if (typeof fsRaw === "object" && !Array.isArray(fsRaw)) {
-					const fs = fsRaw;
-					if (!config.channels) config.channels = {};
-					if (!config.channels.feishu) config.channels.feishu = {
-						enabled: false,
-						appId: "",
-						appSecret: "",
-						domain: "feishu",
-						connectionMode: "websocket",
-						dmPolicy: "open",
-						groupPolicy: "allowlist",
-						allowFrom: [],
-						groupAllowFrom: [],
-						requireMention: true,
-						historyLimit: 50,
-						textChunkLimit: 4e3,
-						accounts: {}
-					};
-					const fsTarget = config.channels.feishu;
-					if (fs.enabled !== void 0) fsTarget.enabled = fs.enabled;
-					if (fs.defaultAccount !== void 0) {
-						const da = fs.defaultAccount;
-						if (da === null || da === "") delete fsTarget.defaultAccount;
-						else fsTarget.defaultAccount = String(da);
-					}
-					if (fs.appId !== void 0) fsTarget.appId = fs.appId;
-					if ("appSecret" in fs) {
-						const v = fs.appSecret;
-						if (v === null || typeof v === "string" && !String(v).trim()) delete fsTarget.appSecret;
-						else fsTarget.appSecret = v;
-					}
-					if (fs.domain !== void 0) fsTarget.domain = fs.domain;
-					if (fs.connectionMode !== void 0) fsTarget.connectionMode = fs.connectionMode;
-					if (fs.verificationToken !== void 0) {
-						const v = fs.verificationToken;
-						if (v === null || typeof v === "string" && !String(v).trim()) delete fsTarget.verificationToken;
-						else fsTarget.verificationToken = v;
-					}
-					if (fs.encryptKey !== void 0) {
-						const v = fs.encryptKey;
-						if (v === null || typeof v === "string" && !String(v).trim()) delete fsTarget.encryptKey;
-						else fsTarget.encryptKey = v;
-					}
-					if (fs.webhookHost !== void 0) {
-						const v = fs.webhookHost;
-						if (v === null || typeof v === "string" && !String(v).trim()) delete fsTarget.webhookHost;
-						else fsTarget.webhookHost = v;
-					}
-					if (fs.webhookPort !== void 0) fsTarget.webhookPort = fs.webhookPort;
-					if (fs.webhookPath !== void 0) {
-						const v = fs.webhookPath;
-						if (v === null || typeof v === "string" && !String(v).trim()) delete fsTarget.webhookPath;
-						else fsTarget.webhookPath = v;
-					}
-					if (fs.dmPolicy !== void 0) fsTarget.dmPolicy = fs.dmPolicy;
-					if (fs.groupPolicy !== void 0) fsTarget.groupPolicy = fs.groupPolicy;
-					if (fs.allowFrom !== void 0) fsTarget.allowFrom = fs.allowFrom;
-					if (fs.groupAllowFrom !== void 0) {
-						const ga = fs.groupAllowFrom;
-						if (ga === null || Array.isArray(ga) && ga.length === 0) delete fsTarget.groupAllowFrom;
-						else fsTarget.groupAllowFrom = ga;
-					}
-					if (fs.requireMention !== void 0) fsTarget.requireMention = fs.requireMention;
-					if (fs.historyLimit !== void 0) fsTarget.historyLimit = fs.historyLimit;
-					if (fs.textChunkLimit !== void 0) fsTarget.textChunkLimit = fs.textChunkLimit;
-					if (fs.renderMode !== void 0) fsTarget.renderMode = fs.renderMode;
-					if (fs.streaming !== void 0) fsTarget.streaming = fs.streaming;
-					if (fs.reactionNotifications !== void 0) fsTarget.reactionNotifications = fs.reactionNotifications;
-					if (fs.tools !== void 0) fsTarget.tools = fs.tools;
-					if (fs.actions !== void 0) fsTarget.actions = fs.actions;
-					if (fs.accounts !== void 0) fsTarget.accounts = fs.accounts;
-				}
-			}
-		}
-		if (body.gateway?.heartbeat !== void 0 && typeof body.gateway.heartbeat === "object") {
-			if (!config.gateway) config.gateway = {
-				bind: "loopback",
-				port: 18790,
-				heartbeat: {
-					enabled: true,
-					intervalMs: 18e5,
-					includeSystemPromptSection: false
-				},
-				maxSseConnections: 100,
-				corsOrigins: ["*"]
-			};
-			if (!config.gateway.heartbeat) config.gateway.heartbeat = {
-				enabled: true,
-				intervalMs: 18e5,
-				includeSystemPromptSection: false
-			};
-			const h = config.gateway.heartbeat;
-			const p = body.gateway.heartbeat;
-			if (p.enabled !== void 0) h.enabled = Boolean(p.enabled);
-			if (p.intervalMs !== void 0 && typeof p.intervalMs === "number" && Number.isFinite(p.intervalMs)) h.intervalMs = p.intervalMs;
-			if (p.includeSystemPromptSection !== void 0) h.includeSystemPromptSection = Boolean(p.includeSystemPromptSection);
-			if (p.target !== void 0) if (p.target === null || p.target === "") delete h.target;
-			else h.target = String(p.target);
-			if (p.targetChatId !== void 0) if (p.targetChatId === null || p.targetChatId === "") delete h.targetChatId;
-			else h.targetChatId = String(p.targetChatId);
-			if (p.prompt !== void 0) if (p.prompt === null || p.prompt === "") delete h.prompt;
-			else h.prompt = String(p.prompt);
-			if (p.ackMaxChars !== void 0) {
-				if (p.ackMaxChars === null || p.ackMaxChars === "") delete h.ackMaxChars;
-				else if (typeof p.ackMaxChars === "number" && Number.isFinite(p.ackMaxChars)) h.ackMaxChars = p.ackMaxChars;
-			}
-			if (p.isolatedSession !== void 0) if (p.isolatedSession === null || p.isolatedSession === false) delete h.isolatedSession;
-			else h.isolatedSession = Boolean(p.isolatedSession);
-			if (p.activeHours !== void 0) {
-				if (p.activeHours === null) delete h.activeHours;
-				else if (typeof p.activeHours === "object" && p.activeHours !== null) {
-					const ah = p.activeHours;
-					const start = typeof ah.start === "string" ? ah.start : "";
-					const end = typeof ah.end === "string" ? ah.end : "";
-					if (start && end) h.activeHours = {
-						start,
-						end,
-						...typeof ah.timezone === "string" && ah.timezone.trim() ? { timezone: ah.timezone } : {}
-					};
-					else delete h.activeHours;
-				}
-			}
-		}
-		if (body.gateway?.bind !== void 0) {
-			const bindModes = new Set([
-				"auto",
-				"loopback",
-				"lan",
-				"tailnet",
-				"custom"
-			]);
-			const bind = body.gateway.bind;
-			if (typeof bind !== "string" || !bindModes.has(bind)) return c.json({
-				ok: false,
-				error: { message: "gateway.bind must be one of: auto, loopback, lan, tailnet, custom" }
-			}, 400);
-			if (!config.gateway) config.gateway = {
-				bind,
-				port: 18790,
-				heartbeat: {
-					enabled: true,
-					intervalMs: 18e5,
-					includeSystemPromptSection: false
-				},
-				maxSseConnections: 100,
-				corsOrigins: []
-			};
-			else config.gateway.bind = bind;
-			if (bind !== "custom") delete config.gateway.customBindHost;
-		}
-		if (body.gateway?.customBindHost !== void 0) {
-			if (body.gateway.customBindHost === null || body.gateway.customBindHost === "") {
-				if (config.gateway) delete config.gateway.customBindHost;
-			} else if (typeof body.gateway.customBindHost !== "string" || !isValidIPv4(body.gateway.customBindHost.trim())) return c.json({
-				ok: false,
-				error: { message: "gateway.customBindHost must be a valid IPv4 address" }
-			}, 400);
-			else if (config.gateway) {
-				config.gateway.customBindHost = body.gateway.customBindHost.trim();
-				config.gateway.bind = "custom";
-			}
-		}
-		if (body.gateway?.port !== void 0) {
-			if (typeof body.gateway.port !== "number" || !Number.isFinite(body.gateway.port) || body.gateway.port < 1 || body.gateway.port > 65535) return c.json({
-				ok: false,
-				error: { message: "gateway.port must be an integer from 1 to 65535" }
-			}, 400);
-			if (!config.gateway) config.gateway = {
-				bind: "loopback",
-				port: Math.floor(body.gateway.port),
-				heartbeat: {
-					enabled: true,
-					intervalMs: 18e5,
-					includeSystemPromptSection: false
-				},
-				maxSseConnections: 100,
-				corsOrigins: []
-			};
-			else config.gateway.port = Math.floor(body.gateway.port);
-		}
-		if (body.gateway?.tailscale !== void 0 && typeof body.gateway.tailscale === "object") {
-			const ts = body.gateway.tailscale;
-			if (!config.gateway) config.gateway = {
-				bind: "loopback",
-				port: 18790,
-				auth: { mode: "token" },
-				heartbeat: {
-					enabled: true,
-					intervalMs: 18e5,
-					includeSystemPromptSection: false
-				},
-				maxSseConnections: 100,
-				corsOrigins: []
-			};
-			config.gateway.tailscale = { ...config.gateway.tailscale ?? {
-				mode: "off",
-				resetOnExit: true
-			} };
-			if (ts.mode !== void 0) {
-				if (ts.mode !== "off" && ts.mode !== "serve" && ts.mode !== "funnel") return c.json({
-					ok: false,
-					error: { message: "gateway.tailscale.mode must be off, serve, or funnel" }
-				}, 400);
-				config.gateway.tailscale.mode = ts.mode;
-			}
-			if (ts.resetOnExit !== void 0) config.gateway.tailscale.resetOnExit = ts.resetOnExit === true;
-		}
-		if (body.gateway?.auth !== void 0) {
-			if (!config.gateway) config.gateway = {
-				bind: "loopback",
-				port: 18790,
-				heartbeat: {
-					enabled: true,
-					intervalMs: 18e5,
-					includeSystemPromptSection: false
-				},
-				maxSseConnections: 100,
-				corsOrigins: []
-			};
-			if (!config.gateway.auth) config.gateway.auth = { mode: "token" };
-			const a = body.gateway.auth;
-			if (a.mode !== void 0) {
-				if (a.mode !== "none" && a.mode !== "token" && a.mode !== "password" && a.mode !== "trusted-proxy") return c.json({
-					ok: false,
-					error: { message: "gateway.auth.mode must be none, token, password, or trusted-proxy" }
-				}, 400);
-				config.gateway.auth.mode = a.mode;
-			}
-			if (a.token !== void 0) {
-				if (a.token === null || typeof a.token === "string" && !a.token.trim()) delete config.gateway.auth.token;
-				else if (typeof a.token === "string") config.gateway.auth.token = a.token;
-			}
-			if (a.password !== void 0) {
-				if (a.password === null || typeof a.password === "string" && !a.password.trim()) delete config.gateway.auth.password;
-				else if (typeof a.password === "string" && a.password !== "***" && a.password !== "••••••••••••") config.gateway.auth.password = a.password;
-			}
-			if (a.rateLimit !== void 0 && typeof a.rateLimit === "object" && a.rateLimit !== null) {
-				const rlIn = a.rateLimit;
-				if (!config.gateway.auth.rateLimit) config.gateway.auth.rateLimit = {
-					enabled: true,
-					maxAttempts: 5,
-					windowMs: 9e5,
-					blockDurationMs: 3e5,
-					exemptLoopback: true
-				};
-				const rl = config.gateway.auth.rateLimit;
-				if (rlIn.enabled !== void 0) rl.enabled = Boolean(rlIn.enabled);
-				if (typeof rlIn.maxAttempts === "number" && Number.isFinite(rlIn.maxAttempts)) rl.maxAttempts = Math.max(1, Math.floor(rlIn.maxAttempts));
-				if (typeof rlIn.windowMs === "number" && Number.isFinite(rlIn.windowMs) && rlIn.windowMs > 0) rl.windowMs = Math.floor(rlIn.windowMs);
-				if (typeof rlIn.blockDurationMs === "number" && Number.isFinite(rlIn.blockDurationMs) && rlIn.blockDurationMs > 0) rl.blockDurationMs = Math.floor(rlIn.blockDurationMs);
-				if (typeof rlIn.lockoutMs === "number" && Number.isFinite(rlIn.lockoutMs) && rlIn.lockoutMs > 0) rl.blockDurationMs = Math.floor(rlIn.lockoutMs);
-				if (rlIn.exemptLoopback !== void 0) rl.exemptLoopback = Boolean(rlIn.exemptLoopback);
-			}
-			if (a.trustedProxy !== void 0) {
-				if (a.trustedProxy === null) delete config.gateway.auth.trustedProxy;
-				else if (typeof a.trustedProxy === "object" && a.trustedProxy !== null) {
-					const tpIn = a.trustedProxy;
-					const userHeader = typeof tpIn.userHeader === "string" ? tpIn.userHeader.trim() : "";
-					if (!userHeader) return c.json({
-						ok: false,
-						error: { message: "gateway.auth.trustedProxy.userHeader is required" }
-					}, 400);
-					const trustedProxy = { userHeader };
-					if (tpIn.requiredHeaders !== void 0) {
-						if (!Array.isArray(tpIn.requiredHeaders)) return c.json({
-							ok: false,
-							error: { message: "gateway.auth.trustedProxy.requiredHeaders must be an array" }
-						}, 400);
-						trustedProxy.requiredHeaders = tpIn.requiredHeaders.filter((x) => typeof x === "string" && x.trim().length > 0).map((x) => x.trim());
-					}
-					if (tpIn.allowUsers !== void 0) {
-						if (!Array.isArray(tpIn.allowUsers)) return c.json({
-							ok: false,
-							error: { message: "gateway.auth.trustedProxy.allowUsers must be an array" }
-						}, 400);
-						trustedProxy.allowUsers = tpIn.allowUsers.filter((x) => typeof x === "string" && x.trim().length > 0).map((x) => x.trim());
-					}
-					if (tpIn.allowLoopback !== void 0) trustedProxy.allowLoopback = Boolean(tpIn.allowLoopback);
-					config.gateway.auth.trustedProxy = trustedProxy;
-				}
-			}
-		}
-		if (body.gateway?.trustedProxies !== void 0) {
-			if (!Array.isArray(body.gateway.trustedProxies)) return c.json({
-				ok: false,
-				error: { message: "gateway.trustedProxies must be an array" }
-			}, 400);
-			if (!config.gateway) config.gateway = {
-				bind: "loopback",
-				port: 18790,
-				heartbeat: {
-					enabled: true,
-					intervalMs: 18e5,
-					includeSystemPromptSection: false
-				},
-				maxSseConnections: 100,
-				corsOrigins: []
-			};
-			config.gateway.trustedProxies = body.gateway.trustedProxies.filter((x) => typeof x === "string" && x.trim().length > 0).map((x) => x.trim());
-		}
-		if (body.gateway?.allowRealIpFallback !== void 0) {
-			if (!config.gateway) config.gateway = {
-				bind: "loopback",
-				port: 18790,
-				heartbeat: {
-					enabled: true,
-					intervalMs: 18e5,
-					includeSystemPromptSection: false
-				},
-				maxSseConnections: 100,
-				corsOrigins: []
-			};
-			config.gateway.allowRealIpFallback = Boolean(body.gateway.allowRealIpFallback);
-		}
-		if (body.gateway?.dangerouslyAllowHostHeaderOriginFallback !== void 0) {
-			if (!config.gateway) config.gateway = {
-				bind: "loopback",
-				port: 18790,
-				heartbeat: {
-					enabled: true,
-					intervalMs: 18e5,
-					includeSystemPromptSection: false
-				},
-				maxSseConnections: 100,
-				corsOrigins: []
-			};
-			config.gateway.dangerouslyAllowHostHeaderOriginFallback = Boolean(body.gateway.dangerouslyAllowHostHeaderOriginFallback);
-		}
-		if (body.gateway?.security !== void 0) {
-			if (typeof body.gateway.security !== "object" || body.gateway.security === null) return c.json({
-				ok: false,
-				error: { message: "gateway.security must be an object" }
-			}, 400);
-			if (!config.gateway) config.gateway = {
-				bind: "loopback",
-				port: 18790,
-				heartbeat: {
-					enabled: true,
-					intervalMs: 18e5,
-					includeSystemPromptSection: false
-				},
-				maxSseConnections: 100,
-				corsOrigins: []
-			};
-			const secIn = body.gateway.security;
-			if (!config.gateway.security) config.gateway.security = {};
-			if (secIn.strict !== void 0) config.gateway.security.strict = Boolean(secIn.strict);
-		}
-		if (body.gateway?.share !== void 0) {
-			if (typeof body.gateway.share !== "object" || body.gateway.share === null || Array.isArray(body.gateway.share)) return c.json({
-				ok: false,
-				error: { message: "gateway.share must be an object" }
-			}, 400);
-			const shareResult = mergeShareConfigPatch(config, body.gateway.share);
-			if (shareResult.ok === false) return c.json({
-				ok: false,
-				error: { message: shareResult.message }
-			}, 400);
-		}
-		if (body.gateway?.corsOrigins !== void 0) {
-			if (!Array.isArray(body.gateway.corsOrigins)) return c.json({
-				ok: false,
-				error: { message: "gateway.corsOrigins must be an array" }
-			}, 400);
-			if (!config.gateway) config.gateway = {
-				bind: "loopback",
-				port: 18790,
-				heartbeat: {
-					enabled: true,
-					intervalMs: 18e5,
-					includeSystemPromptSection: false
-				},
-				maxSseConnections: 100,
-				corsOrigins: []
-			};
-			config.gateway.corsOrigins = body.gateway.corsOrigins.filter((x) => typeof x === "string" && x.trim().length > 0).map((x) => x.trim());
-		}
-		if (body.gateway?.maxSseConnections !== void 0) {
-			if (typeof body.gateway.maxSseConnections !== "number" || !Number.isFinite(body.gateway.maxSseConnections) || body.gateway.maxSseConnections < 1) return c.json({
-				ok: false,
-				error: { message: "gateway.maxSseConnections must be a positive integer" }
-			}, 400);
-			if (!config.gateway) config.gateway = {
-				bind: "loopback",
-				port: 18790,
-				heartbeat: {
-					enabled: true,
-					intervalMs: 18e5,
-					includeSystemPromptSection: false
-				},
-				maxSseConnections: Math.floor(body.gateway.maxSseConnections),
-				corsOrigins: []
-			};
-			else config.gateway.maxSseConnections = Math.floor(body.gateway.maxSseConnections);
-		}
-		if (body.gateway?.channelConnectDeferMode !== void 0) {
-			const mode = body.gateway.channelConnectDeferMode;
-			if (mode !== "auto" && mode !== "off" && mode !== "explicit") return c.json({
-				ok: false,
-				error: { message: "gateway.channelConnectDeferMode must be auto, off, or explicit" }
-			}, 400);
-			if (!config.gateway) config.gateway = {
-				bind: "loopback",
-				port: 18790,
-				heartbeat: {
-					enabled: true,
-					intervalMs: 18e5,
-					includeSystemPromptSection: false
-				},
-				maxSseConnections: 100,
-				corsOrigins: []
-			};
-			config.gateway.channelConnectDeferMode = mode;
-		}
-		const parseDeferIdList = (raw) => {
-			if (!Array.isArray(raw)) return null;
-			const ids = raw.filter((x) => typeof x === "string" && x.trim().length > 0).map((x) => x.trim());
-			if (ids.length > 24) return null;
-			return ids;
-		};
-		if (body.gateway?.channelConnectDeferIds !== void 0) {
-			const ids = parseDeferIdList(body.gateway.channelConnectDeferIds);
-			if (ids === null) return c.json({
-				ok: false,
-				error: { message: "gateway.channelConnectDeferIds must be an array of up to 24 strings" }
-			}, 400);
-			if (!config.gateway) config.gateway = {
-				bind: "loopback",
-				port: 18790,
-				heartbeat: {
-					enabled: true,
-					intervalMs: 18e5,
-					includeSystemPromptSection: false
-				},
-				maxSseConnections: 100,
-				corsOrigins: []
-			};
-			config.gateway.channelConnectDeferIds = ids;
-		}
-		if (body.gateway?.channelConnectDeferSkipIds !== void 0) {
-			const ids = parseDeferIdList(body.gateway.channelConnectDeferSkipIds);
-			if (ids === null) return c.json({
-				ok: false,
-				error: { message: "gateway.channelConnectDeferSkipIds must be an array of up to 24 strings" }
-			}, 400);
-			if (!config.gateway) config.gateway = {
-				bind: "loopback",
-				port: 18790,
-				heartbeat: {
-					enabled: true,
-					intervalMs: 18e5,
-					includeSystemPromptSection: false
-				},
-				maxSseConnections: 100,
-				corsOrigins: []
-			};
-			config.gateway.channelConnectDeferSkipIds = ids;
-		}
-		if (body.update !== void 0 && typeof body.update === "object" && body.update !== null) {
-			const updateResult = mergeUpdateConfigPatch(config, body.update);
-			if (updateResult.ok === false) return c.json({
-				ok: false,
-				error: { message: updateResult.message }
-			}, 400);
-		}
-		if (body.cron !== void 0) {
-			if (typeof body.cron !== "object" || body.cron === null || Array.isArray(body.cron)) return c.json({
-				ok: false,
-				error: { message: "cron must be an object" }
-			}, 400);
-			const cronResult = mergeCronConfigPatch(config, body.cron);
-			if (cronResult.ok === false) return c.json({
-				ok: false,
-				error: { message: cronResult.message }
-			}, 400);
-		}
-		if (body.goals !== void 0) {
-			if (typeof body.goals !== "object" || body.goals === null || Array.isArray(body.goals)) return c.json({
-				ok: false,
-				error: { message: "goals must be an object" }
-			}, 400);
-			const goalsResult = mergeGoalsConfigPatch(config, body.goals);
-			if (goalsResult.ok === false) return c.json({
-				ok: false,
-				error: { message: goalsResult.message }
-			}, 400);
-		}
-		if (body.session !== void 0) {
-			if (typeof body.session !== "object" || body.session === null || Array.isArray(body.session)) return c.json({
-				ok: false,
-				error: { message: "session must be an object" }
-			}, 400);
-			const sessionResult = mergeSessionConfigPatch(config, body.session);
-			if (sessionResult.ok === false) return c.json({
-				ok: false,
-				error: { message: sessionResult.message }
-			}, 400);
-		}
-		if (body.gateway !== void 0 && typeof body.gateway === "object" && body.gateway !== null && !Array.isArray(body.gateway)) {
-			const gwPatch = body.gateway;
-			if (gwPatch.skillsMarketplaceProvider !== void 0 || gwPatch.skillsStoreBaseUrl !== void 0) {
-				const skillsResult = mergeGatewaySkillsMarketplacePatch(config, {
-					...gwPatch.skillsMarketplaceProvider !== void 0 ? { skillsMarketplaceProvider: gwPatch.skillsMarketplaceProvider } : {},
-					...gwPatch.skillsStoreBaseUrl !== void 0 ? { skillsStoreBaseUrl: gwPatch.skillsStoreBaseUrl } : {}
-				});
-				if (skillsResult.ok === false) return c.json({
-					ok: false,
-					error: { message: skillsResult.message }
-				}, 400);
-			}
-		}
-		if (body.providers) {
-			const resolver = new CredentialResolver();
-			for (const [key, apiKey] of Object.entries(body.providers)) if (apiKey !== void 0 && typeof apiKey === "string" && apiKey.trim() && apiKey !== "***" && apiKey !== "••••••••••••") await resolver.saveApiKey(key, apiKey, { profileName: "default" });
-		}
-		if (body.providersConfig && typeof body.providersConfig === "object" && !Array.isArray(body.providersConfig)) {
-			const cfgProviders = config.providers ?? {};
-			for (const [vendorId, raw] of Object.entries(body.providersConfig)) {
-				if (!vendorId || typeof vendorId !== "string") continue;
-				if (raw === null) {
-					delete cfgProviders[vendorId];
-					continue;
-				}
-				if (!raw || typeof raw !== "object" || Array.isArray(raw)) continue;
-				const next = cfgProviders[vendorId] ?? {};
-				const patch = raw;
-				for (const field of [
-					"apiKey",
-					"baseUrl",
-					"region",
-					"imageBaseUrl"
-				]) if (patch[field] === null || patch[field] === "") delete next[field];
-				else if (typeof patch[field] === "string") next[field] = patch[field].trim();
-				if (patch.azure === null) delete next.azure;
-				else if (patch.azure && typeof patch.azure === "object" && !Array.isArray(patch.azure)) next.azure = {
-					...next.azure ?? {},
-					...patch.azure
-				};
-				if (patch.request === null) delete next.request;
-				else if (patch.request && typeof patch.request === "object" && !Array.isArray(patch.request)) next.request = {
-					...next.request ?? {},
-					...patch.request
-				};
-				cfgProviders[vendorId] = next;
-			}
-			config.providers = cfgProviders;
-		}
-		if (body.stt !== void 0) {
-			config.tools = config.tools ?? {};
-			config.tools.media = config.tools.media ?? {};
-			config.tools.media.audio = mergeSttConfigPatch(config.tools.media.audio, body.stt);
-		}
-		if (body.tts !== void 0) {
-			config.messages = config.messages ?? {};
-			config.messages.tts = mergeTtsConfigPatch(config.messages.tts, body.tts);
-		}
-		const toolsPatchErr = applyToolsWebPatch(config, body);
-		if (toolsPatchErr) return c.json({
+		applyAgentsPatch(config, body);
+		applyChannelsPatch(config, body);
+		const gatewayResult = applyGatewayPatch(config, body);
+		if (gatewayResult.ok === false) return c.json({
 			ok: false,
-			error: { message: toolsPatchErr }
-		}, 400);
-		if (body.tunnel !== void 0) {
-			if (!body.tunnel || typeof body.tunnel !== "object" || Array.isArray(body.tunnel)) return c.json({
-				ok: false,
-				error: { message: "tunnel must be an object" }
-			}, 400);
-			const tunnelResult = mergeTunnelConfigPatch(config, body.tunnel);
-			if (tunnelResult.ok === false) return c.json({
-				ok: false,
-				error: { message: tunnelResult.message }
-			}, 400);
-		}
-		if (body.bindings !== void 0) {
-			if (!Array.isArray(body.bindings)) return c.json({
-				ok: false,
-				error: { message: "bindings must be an array" }
-			}, 400);
-			const parsed = BindingsConfigSchema.safeParse(body.bindings);
-			if (!parsed.success) return c.json({
-				ok: false,
-				error: { message: parsed.error.issues.map((i) => i.message).join("; ") }
-			}, 400);
-			config.bindings = parsed.data;
-		}
-		if (body.mcp !== void 0) if (body.mcp === null) delete config.mcp;
-		else if (typeof body.mcp !== "object" || Array.isArray(body.mcp)) return c.json({
+			error: gatewayResult.error
+		}, gatewayResult.status);
+		const miscResult = await applyMiscPatch(config, body);
+		if (miscResult.ok === false) return c.json({
 			ok: false,
-			error: { message: "mcp must be an object" }
-		}, 400);
-		else {
-			const parsed = McpConfigSchema.safeParse(body.mcp);
-			if (!parsed.success) return c.json({
-				ok: false,
-				error: { message: parsed.error.issues.map((i) => i.message).join("; ") }
-			}, 400);
-			if (parsed.data === void 0) delete config.mcp;
-			else {
-				const next = { ...parsed.data };
-				if (next.servers) next.servers = Object.fromEntries(Object.entries(next.servers).map(([name, server]) => [name, canonicalizeConfiguredMcpServer(server)]));
-				config.mcp = next;
-			}
-		}
-		if (body.gateway !== void 0) try {
-			const auth = resolveGatewayAuth({ authConfig: config.gateway?.auth });
-			assertGatewayAuthConfigured(auth);
-			assertGatewayRuntimeConfig({
-				cfg: config,
-				auth,
-				port: config.gateway?.port ?? 18790
-			});
-		} catch (err) {
-			const message = err instanceof Error ? err.message : String(err);
-			return c.json({
-				ok: false,
-				error: { message }
-			}, 400);
-		}
+			error: miscResult.error
+		}, miscResult.status);
+		const finalGwCheck = validateGatewayAfterPatch(config, body);
+		if (finalGwCheck.ok === false) return c.json({
+			ok: false,
+			error: finalGwCheck.error
+		}, finalGwCheck.status);
 		const result = await service.saveConfig(config);
 		if (!result.saved) return c.json({
 			ok: false,