@xopcai/xopc 0.0.84 → 0.0.85

package/dist/src/cli/commands/gateway/lifecycle.js.map

@@ -1 +1 @@
-{"version":3,"file":"lifecycle.js","names":[],"sources":["../../../../../src/cli/commands/gateway/lifecycle.ts"],"sourcesContent":["/**\n * Gateway lifecycle orchestration — OpenClaw-aligned service + unmanaged fallback.\n */\n\nimport { isRestartEnabled } from '../../../config/commands.flags.js';\nimport { loadConfig } from '../../../config/index.js';\nimport { resolveConfigPath } from '../../../config/paths.js';\nimport { resolveGatewayService } from '../../../daemon/service.js';\nimport {\n  findVerifiedGatewayListenerPidsOnPortSync,\n  formatGatewayPidList,\n  signalVerifiedGatewayPidSync,\n} from '../../../infra/gateway-processes.js';\nimport { authorizeGatewaySigusr1Restart } from '../../../infra/restart.js';\nimport {\n  DEFAULT_RESTART_HEALTH_ATTEMPTS,\n  DEFAULT_RESTART_HEALTH_DELAY_MS,\n  renderGatewayPortHealthDiagnostics,\n  waitForGatewayHealthyListener,\n} from './restart-health.js';\nimport {\n  parsePortFromArgs,\n  renderGatewayServiceStartHints,\n  resolveGatewayPortFromConfig,\n} from './shared.js';\nimport {\n  runServiceRestart,\n  runServiceStop,\n  type ServiceRecoveryResult,\n} from './lifecycle-core.js';\n\nconst POST_RESTART_HEALTH_ATTEMPTS = DEFAULT_RESTART_HEALTH_ATTEMPTS;\nconst POST_RESTART_HEALTH_DELAY_MS = DEFAULT_RESTART_HEALTH_DELAY_MS;\n\nasync function resolveGatewayLifecyclePort(service?: Awaited<ReturnType<typeof resolveGatewayService>>): Promise<number> {\n  const resolvedService = service ?? (await resolveGatewayService());\n  const command = await resolvedService.readCommand(process.env).catch(() => null);\n  const portFromArgs = parsePortFromArgs(command?.programArguments);\n  return portFromArgs ?? resolveGatewayPortFromConfig();\n}\n\nfunction resolveVerifiedGatewayListenerPids(port: number): number[] {\n  return findVerifiedGatewayListenerPidsOnPortSync(port).filter(\n    (pid): pid is number => Number.isFinite(pid) && pid > 0,\n  );\n}\n\nasync function assertUnmanagedGatewayRestartEnabled(port: number): Promise<void> {\n  const config = loadConfig(resolveConfigPath());\n  if (!isRestartEnabled(config)) {\n    throw new Error(\n      'Gateway restart is disabled in config (commands.restart=false); unmanaged SIGUSR1 restart would be ignored',\n    );\n  }\n\n  try {\n    const controller = new AbortController();\n    const timeout = setTimeout(() => controller.abort(), 1000);\n    const response = await fetch(`http://127.0.0.1:${port}/api/health`, {\n      method: 'GET',\n      signal: controller.signal,\n    });\n    clearTimeout(timeout);\n    if (!response.ok) {\n      return;\n    }\n  } catch {\n    // Best-effort probe; unmanaged restart may still target a starting gateway.\n  }\n}\n\nasync function stopGatewayWithoutServiceManager(port: number): Promise<ServiceRecoveryResult | null> {\n  const pids = resolveVerifiedGatewayListenerPids(port);\n  if (pids.length === 0) {\n    return null;\n  }\n  for (const pid of pids) {\n    signalVerifiedGatewayPidSync(pid, 'SIGTERM');\n  }\n  return {\n    result: 'stopped',\n    message: `Gateway stop signal sent to unmanaged process${pids.length === 1 ? '' : 'es'} on port ${port}: ${formatGatewayPidList(pids)}.`,\n  };\n}\n\nasync function restartGatewayWithoutServiceManager(port: number): Promise<ServiceRecoveryResult | null> {\n  await assertUnmanagedGatewayRestartEnabled(port);\n  const pids = resolveVerifiedGatewayListenerPids(port);\n  if (pids.length === 0) {\n    return null;\n  }\n  if (pids.length > 1) {\n    throw new Error(\n      `multiple gateway processes are listening on port ${port}: ${formatGatewayPidList(pids)}; use \"xopc gateway status\" before retrying restart`,\n    );\n  }\n  authorizeGatewaySigusr1Restart();\n  signalVerifiedGatewayPidSync(pids[0], 'SIGUSR1');\n  return {\n    result: 'restarted',\n    message: `Gateway restart signal sent to unmanaged process on port ${port}: ${pids[0]}.`,\n  };\n}\n\nexport async function runDaemonStop(options: { json?: boolean; disable?: boolean } = {}): Promise<void> {\n  const service = await resolveGatewayService();\n  let gatewayPortPromise: Promise<number> | undefined;\n\n  await runServiceStop({\n    service,\n    opts: options,\n    onNotLoaded: async () => {\n      gatewayPortPromise ??= resolveGatewayLifecyclePort(service);\n      return stopGatewayWithoutServiceManager(await gatewayPortPromise);\n    },\n  });\n}\n\nexport async function runDaemonRestart(options: {\n  json?: boolean;\n  wait?: string;\n} = {}): Promise<void> {\n  const service = await resolveGatewayService();\n  let restartedWithoutServiceManager = false;\n  const restartPort = await resolveGatewayLifecyclePort(service);\n  const restartHealthAttempts = POST_RESTART_HEALTH_ATTEMPTS;\n  const restartWaitSeconds = Math.round(\n    (restartHealthAttempts * POST_RESTART_HEALTH_DELAY_MS) / 1000,\n  );\n\n  await runServiceRestart({\n    service,\n    opts: options,\n    renderStartHints: renderGatewayServiceStartHints,\n    checkTokenDrift: true,\n    onNotLoaded: async () => {\n      const handled = await restartGatewayWithoutServiceManager(restartPort);\n      if (handled) {\n        restartedWithoutServiceManager = true;\n      }\n      return handled;\n    },\n    postRestartCheck: async ({ options: opts, fail }) => {\n      if (!restartedWithoutServiceManager) {\n        return;\n      }\n      const health = await waitForGatewayHealthyListener({\n        port: restartPort,\n        attempts: restartHealthAttempts,\n        delayMs: POST_RESTART_HEALTH_DELAY_MS,\n      });\n      if (health.healthy) {\n        return;\n      }\n      const diagnostics = renderGatewayPortHealthDiagnostics(health);\n      fail(\n        `Gateway restart timed out after ${restartWaitSeconds}s waiting for health checks.`,\n        ['xopc gateway status', 'xopc doctor'],\n        diagnostics,\n        opts,\n      );\n    },\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;YAM6D;AAyB7D,MAAM,+BAA+B;AACrC,MAAM,+BAAA;AAEN,eAAe,4BAA4B,SAA8E;AAIvH,QADqB,mBAAkB,OAFf,WAAY,MAAM,uBAAuB,EAC3B,YAAY,QAAQ,IAAI,CAAC,YAAY,KAAK,GAChC,iBAC7B,IAAI,8BAA8B;;AAGvD,SAAS,mCAAmC,MAAwB;AAClE,QAAO,0CAA0C,KAAK,CAAC,QACpD,QAAuB,OAAO,SAAS,IAAI,IAAI,MAAM,EACvD;;AAGH,eAAe,qCAAqC,MAA6B;AAE/E,KAAI,CAAC,iBADU,WAAW,mBAAmB,CACjB,CAAC,CAC3B,OAAM,IAAI,MACR,6GACD;AAGH,KAAI;EACF,MAAM,aAAa,IAAI,iBAAiB;EACxC,MAAM,UAAU,iBAAiB,WAAW,OAAO,EAAE,IAAK;EAC1D,MAAM,WAAW,MAAM,MAAM,oBAAoB,KAAK,cAAc;GAClE,QAAQ;GACR,QAAQ,WAAW;GACpB,CAAC;AACF,eAAa,QAAQ;AACrB,MAAI,CAAC,SAAS,GACZ;SAEI;;AAKV,eAAe,iCAAiC,MAAqD;CACnG,MAAM,OAAO,mCAAmC,KAAK;AACrD,KAAI,KAAK,WAAW,EAClB,QAAO;AAET,MAAK,MAAM,OAAO,KAChB,8BAA6B,KAAK,UAAU;AAE9C,QAAO;EACL,QAAQ;EACR,SAAS,gDAAgD,KAAK,WAAW,IAAI,KAAK,KAAK,WAAW,KAAK,IAAI,qBAAqB,KAAK,CAAC;EACvI;;AAGH,eAAe,oCAAoC,MAAqD;AACtG,OAAM,qCAAqC,KAAK;CAChD,MAAM,OAAO,mCAAmC,KAAK;AACrD,KAAI,KAAK,WAAW,EAClB,QAAO;AAET,KAAI,KAAK,SAAS,EAChB,OAAM,IAAI,MACR,oDAAoD,KAAK,IAAI,qBAAqB,KAAK,CAAC,qDACzF;AAEH,iCAAgC;AAChC,8BAA6B,KAAK,IAAI,UAAU;AAChD,QAAO;EACL,QAAQ;EACR,SAAS,4DAA4D,KAAK,IAAI,KAAK,GAAG;EACvF;;AAGH,eAAsB,cAAc,UAAiD,EAAE,EAAiB;CACtG,MAAM,UAAU,MAAM,uBAAuB;CAC7C,IAAI;AAEJ,OAAM,eAAe;EACnB;EACA,MAAM;EACN,aAAa,YAAY;AACvB,0BAAuB,4BAA4B,QAAQ;AAC3D,UAAO,iCAAiC,MAAM,mBAAmB;;EAEpE,CAAC;;AAGJ,eAAsB,iBAAiB,UAGnC,EAAE,EAAiB;CACrB,MAAM,UAAU,MAAM,uBAAuB;CAC7C,IAAI,iCAAiC;CACrC,MAAM,cAAc,MAAM,4BAA4B,QAAQ;CAC9D,MAAM,wBAAwB;CAC9B,MAAM,qBAAqB,KAAK,MAC7B,wBAAwB,+BAAgC,IAC1D;AAED,OAAM,kBAAkB;EACtB;EACA,MAAM;EACN,kBAAkB;EAClB,iBAAiB;EACjB,aAAa,YAAY;GACvB,MAAM,UAAU,MAAM,oCAAoC,YAAY;AACtE,OAAI,QACF,kCAAiC;AAEnC,UAAO;;EAET,kBAAkB,OAAO,EAAE,SAAS,MAAM,WAAW;AACnD,OAAI,CAAC,+BACH;GAEF,MAAM,SAAS,MAAM,8BAA8B;IACjD,MAAM;IACN,UAAU;IACV,SAAS;IACV,CAAC;AACF,OAAI,OAAO,QACT;GAEF,MAAM,cAAc,mCAAmC,OAAO;AAC9D,QACE,mCAAmC,mBAAmB,+BACtD,CAAC,uBAAuB,cAAc,EACtC,aACA,KACD;;EAEJ,CAAC"}
+{"version":3,"file":"lifecycle.js","names":[],"sources":["../../../../../src/cli/commands/gateway/lifecycle.ts"],"sourcesContent":["/**\n * Gateway lifecycle orchestration — OpenClaw-aligned service + unmanaged fallback.\n */\n\nimport { isRestartEnabled } from '../../../config/commands.flags.js';\nimport { loadConfig } from '../../../config/index.js';\nimport { resolveConfigPath } from '../../../config/paths.js';\nimport { resolveGatewayService } from '../../../daemon/service.js';\nimport {\n  findVerifiedGatewayListenerPidsOnPortSync,\n  formatGatewayPidList,\n  signalVerifiedGatewayPidSync,\n} from '../../../infra/gateway-processes.js';\nimport { authorizeGatewaySigusr1Restart, writeGatewayRestartIntentSync } from '../../../infra/restart.js';\nimport {\n  DEFAULT_RESTART_HEALTH_ATTEMPTS,\n  DEFAULT_RESTART_HEALTH_DELAY_MS,\n  renderGatewayPortHealthDiagnostics,\n  waitForGatewayHealthyListener,\n} from './restart-health.js';\nimport {\n  parsePortFromArgs,\n  renderGatewayServiceStartHints,\n  resolveGatewayPortFromConfig,\n} from './shared.js';\nimport {\n  runServiceRestart,\n  runServiceStop,\n  type ServiceRecoveryResult,\n} from './lifecycle-core.js';\n\nconst POST_RESTART_HEALTH_ATTEMPTS = DEFAULT_RESTART_HEALTH_ATTEMPTS;\nconst POST_RESTART_HEALTH_DELAY_MS = DEFAULT_RESTART_HEALTH_DELAY_MS;\n\nasync function resolveGatewayLifecyclePort(service?: Awaited<ReturnType<typeof resolveGatewayService>>): Promise<number> {\n  const resolvedService = service ?? (await resolveGatewayService());\n  const command = await resolvedService.readCommand(process.env).catch(() => null);\n  const portFromArgs = parsePortFromArgs(command?.programArguments);\n  return portFromArgs ?? resolveGatewayPortFromConfig();\n}\n\nfunction resolveVerifiedGatewayListenerPids(port: number): number[] {\n  return findVerifiedGatewayListenerPidsOnPortSync(port).filter(\n    (pid): pid is number => Number.isFinite(pid) && pid > 0,\n  );\n}\n\nasync function assertUnmanagedGatewayRestartEnabled(port: number): Promise<void> {\n  const config = loadConfig(resolveConfigPath());\n  if (!isRestartEnabled(config)) {\n    throw new Error(\n      'Gateway restart is disabled in config (commands.restart=false); unmanaged SIGUSR1 restart would be ignored',\n    );\n  }\n\n  try {\n    const controller = new AbortController();\n    const timeout = setTimeout(() => controller.abort(), 1000);\n    const response = await fetch(`http://127.0.0.1:${port}/api/health`, {\n      method: 'GET',\n      signal: controller.signal,\n    });\n    clearTimeout(timeout);\n    if (!response.ok) {\n      return;\n    }\n  } catch {\n    // Best-effort probe; unmanaged restart may still target a starting gateway.\n  }\n}\n\nasync function stopGatewayWithoutServiceManager(port: number): Promise<ServiceRecoveryResult | null> {\n  const pids = resolveVerifiedGatewayListenerPids(port);\n  if (pids.length === 0) {\n    return null;\n  }\n  for (const pid of pids) {\n    signalVerifiedGatewayPidSync(pid, 'SIGTERM');\n  }\n  return {\n    result: 'stopped',\n    message: `Gateway stop signal sent to unmanaged process${pids.length === 1 ? '' : 'es'} on port ${port}: ${formatGatewayPidList(pids)}.`,\n  };\n}\n\nasync function restartGatewayWithoutServiceManager(port: number): Promise<ServiceRecoveryResult | null> {\n  await assertUnmanagedGatewayRestartEnabled(port);\n  const pids = resolveVerifiedGatewayListenerPids(port);\n  if (pids.length === 0) {\n    return null;\n  }\n  if (pids.length > 1) {\n    throw new Error(\n      `multiple gateway processes are listening on port ${port}: ${formatGatewayPidList(pids)}; use \"xopc gateway status\" before retrying restart`,\n    );\n  }\n  const targetPid = pids[0];\n\n  if (process.platform === 'win32') {\n    // Windows does not support SIGUSR1. Write a restart intent file and send\n    // SIGTERM; the gateway run-loop's onSigterm handler checks for the intent\n    // and treats it as a restart instead of a stop.\n    writeGatewayRestartIntentSync({ targetPid });\n    signalVerifiedGatewayPidSync(targetPid, 'SIGTERM');\n  } else {\n    authorizeGatewaySigusr1Restart();\n    signalVerifiedGatewayPidSync(targetPid, 'SIGUSR1');\n  }\n\n  return {\n    result: 'restarted',\n    message: `Gateway restart signal sent to unmanaged process on port ${port}: ${targetPid}.`,\n  };\n}\n\nexport async function runDaemonStop(options: { json?: boolean; disable?: boolean } = {}): Promise<void> {\n  const service = await resolveGatewayService();\n  let gatewayPortPromise: Promise<number> | undefined;\n\n  await runServiceStop({\n    service,\n    opts: options,\n    onNotLoaded: async () => {\n      gatewayPortPromise ??= resolveGatewayLifecyclePort(service);\n      return stopGatewayWithoutServiceManager(await gatewayPortPromise);\n    },\n  });\n}\n\nexport async function runDaemonRestart(options: {\n  json?: boolean;\n  wait?: string;\n} = {}): Promise<void> {\n  const service = await resolveGatewayService();\n  let restartedWithoutServiceManager = false;\n  const restartPort = await resolveGatewayLifecyclePort(service);\n  const restartHealthAttempts = POST_RESTART_HEALTH_ATTEMPTS;\n  const restartWaitSeconds = Math.round(\n    (restartHealthAttempts * POST_RESTART_HEALTH_DELAY_MS) / 1000,\n  );\n\n  await runServiceRestart({\n    service,\n    opts: options,\n    renderStartHints: renderGatewayServiceStartHints,\n    checkTokenDrift: true,\n    onNotLoaded: async () => {\n      const handled = await restartGatewayWithoutServiceManager(restartPort);\n      if (handled) {\n        restartedWithoutServiceManager = true;\n      }\n      return handled;\n    },\n    postRestartCheck: async ({ options: opts, fail }) => {\n      if (!restartedWithoutServiceManager) {\n        return;\n      }\n      const health = await waitForGatewayHealthyListener({\n        port: restartPort,\n        attempts: restartHealthAttempts,\n        delayMs: POST_RESTART_HEALTH_DELAY_MS,\n      });\n      if (health.healthy) {\n        return;\n      }\n      const diagnostics = renderGatewayPortHealthDiagnostics(health);\n      fail(\n        `Gateway restart timed out after ${restartWaitSeconds}s waiting for health checks.`,\n        ['xopc gateway status', 'xopc doctor'],\n        diagnostics,\n        opts,\n      );\n    },\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;YAM6D;AAyB7D,MAAM,+BAA+B;AACrC,MAAM,+BAAA;AAEN,eAAe,4BAA4B,SAA8E;AAIvH,QADqB,mBAAkB,OAFf,WAAY,MAAM,uBAAuB,EAC3B,YAAY,QAAQ,IAAI,CAAC,YAAY,KAAK,GAChC,iBAC7B,IAAI,8BAA8B;;AAGvD,SAAS,mCAAmC,MAAwB;AAClE,QAAO,0CAA0C,KAAK,CAAC,QACpD,QAAuB,OAAO,SAAS,IAAI,IAAI,MAAM,EACvD;;AAGH,eAAe,qCAAqC,MAA6B;AAE/E,KAAI,CAAC,iBADU,WAAW,mBAAmB,CACjB,CAAC,CAC3B,OAAM,IAAI,MACR,6GACD;AAGH,KAAI;EACF,MAAM,aAAa,IAAI,iBAAiB;EACxC,MAAM,UAAU,iBAAiB,WAAW,OAAO,EAAE,IAAK;EAC1D,MAAM,WAAW,MAAM,MAAM,oBAAoB,KAAK,cAAc;GAClE,QAAQ;GACR,QAAQ,WAAW;GACpB,CAAC;AACF,eAAa,QAAQ;AACrB,MAAI,CAAC,SAAS,GACZ;SAEI;;AAKV,eAAe,iCAAiC,MAAqD;CACnG,MAAM,OAAO,mCAAmC,KAAK;AACrD,KAAI,KAAK,WAAW,EAClB,QAAO;AAET,MAAK,MAAM,OAAO,KAChB,8BAA6B,KAAK,UAAU;AAE9C,QAAO;EACL,QAAQ;EACR,SAAS,gDAAgD,KAAK,WAAW,IAAI,KAAK,KAAK,WAAW,KAAK,IAAI,qBAAqB,KAAK,CAAC;EACvI;;AAGH,eAAe,oCAAoC,MAAqD;AACtG,OAAM,qCAAqC,KAAK;CAChD,MAAM,OAAO,mCAAmC,KAAK;AACrD,KAAI,KAAK,WAAW,EAClB,QAAO;AAET,KAAI,KAAK,SAAS,EAChB,OAAM,IAAI,MACR,oDAAoD,KAAK,IAAI,qBAAqB,KAAK,CAAC,qDACzF;CAEH,MAAM,YAAY,KAAK;AAEvB,KAAI,QAAQ,aAAa,SAAS;AAIhC,gCAA8B,EAAE,WAAW,CAAC;AAC5C,+BAA6B,WAAW,UAAU;QAC7C;AACL,kCAAgC;AAChC,+BAA6B,WAAW,UAAU;;AAGpD,QAAO;EACL,QAAQ;EACR,SAAS,4DAA4D,KAAK,IAAI,UAAU;EACzF;;AAGH,eAAsB,cAAc,UAAiD,EAAE,EAAiB;CACtG,MAAM,UAAU,MAAM,uBAAuB;CAC7C,IAAI;AAEJ,OAAM,eAAe;EACnB;EACA,MAAM;EACN,aAAa,YAAY;AACvB,0BAAuB,4BAA4B,QAAQ;AAC3D,UAAO,iCAAiC,MAAM,mBAAmB;;EAEpE,CAAC;;AAGJ,eAAsB,iBAAiB,UAGnC,EAAE,EAAiB;CACrB,MAAM,UAAU,MAAM,uBAAuB;CAC7C,IAAI,iCAAiC;CACrC,MAAM,cAAc,MAAM,4BAA4B,QAAQ;CAC9D,MAAM,wBAAwB;CAC9B,MAAM,qBAAqB,KAAK,MAC7B,wBAAwB,+BAAgC,IAC1D;AAED,OAAM,kBAAkB;EACtB;EACA,MAAM;EACN,kBAAkB;EAClB,iBAAiB;EACjB,aAAa,YAAY;GACvB,MAAM,UAAU,MAAM,oCAAoC,YAAY;AACtE,OAAI,QACF,kCAAiC;AAEnC,UAAO;;EAET,kBAAkB,OAAO,EAAE,SAAS,MAAM,WAAW;AACnD,OAAI,CAAC,+BACH;GAEF,MAAM,SAAS,MAAM,8BAA8B;IACjD,MAAM;IACN,UAAU;IACV,SAAS;IACV,CAAC;AACF,OAAI,OAAO,QACT;GAEF,MAAM,cAAc,mCAAmC,OAAO;AAC9D,QACE,mCAAmC,mBAAmB,+BACtD,CAAC,uBAAuB,cAAc,EACtC,aACA,KACD;;EAEJ,CAAC"}

package/dist/src/cli/commands/gateway/shared.js

@@ -1,7 +1,7 @@
 import { init_paths, resolveConfigPath } from "../../../config/paths.js";
 import { loadConfig } from "../../../config/loader.js";
-import "../../../config/index.js";
 import { resolveGatewayLaunchAgentLabel, resolveGatewaySystemdServiceName, resolveGatewayWindowsTaskName } from "../../../daemon/constants.js";
+import "../../../config/index.js";
 //#region src/cli/commands/gateway/shared.ts
 init_paths();
 function parsePortFromArgs(programArguments) {

package/dist/src/cli/commands/image.js

@@ -8,8 +8,8 @@ import { formatExamples, register } from "../registry.js";
 import { getContextWithOpts } from "../context.js";
 import "../../agent/image/index.js";
 import { colors } from "../utils/colors.js";
-import { mkdir, writeFile } from "node:fs/promises";
 import { join, resolve } from "node:path";
+import { mkdir, writeFile } from "node:fs/promises";
 import { Command } from "commander";
 //#region src/cli/commands/image.ts
 init_loader();

package/dist/src/cli/commands/init.js

@@ -1,14 +1,14 @@
-import { init_write_file_atomic, writeTextAtomic } from "../../infra/write-file-atomic.js";
-import { createLogger } from "../../utils/logger/index.js";
-import { init_logger } from "../../utils/logger.js";
 import { resolveStateDir } from "../../config/paths-state.js";
 import { resolveAgentWorkspaceDir } from "../../agent/agent-scope.js";
+import { createLogger } from "../../utils/logger/index.js";
+import { init_logger } from "../../utils/logger.js";
 import { WORKSPACE_FILES, init_paths, resolveAgentDir, resolveAgentHomeDir, resolveAgentMetadataPath, resolveAgentProfileDir, resolveBinDir, resolveConfigPath, resolveCredentialsDir, resolveCronDir, resolveExtensionsDir, resolveInboxDir, resolveInboxPendingDir, resolveInboxProcessedDir, resolveLogsDir, resolveSessionsDir, resolveSkillsDir, resolveToolsDir, resolveWorkspaceStateDir, resolveWorkspaceStatePath } from "../../config/paths.js";
+import { init_write_file_atomic, writeTextAtomic } from "../../infra/write-file-atomic.js";
 import { init_loader, loadConfig, saveConfig } from "../../config/loader.js";
 import { formatExamples, register } from "../registry.js";
-import { mkdir, writeFile } from "fs/promises";
 import { join } from "path";
 import { existsSync } from "fs";
+import { mkdir, writeFile } from "fs/promises";
 import { Command } from "commander";
 //#region src/cli/commands/init.ts
 init_write_file_atomic();

package/dist/src/cli/commands/onboard.js

@@ -1,11 +1,11 @@
+import { ConfigSchema, init_schema } from "../../config/schema.js";
 import { init_agent_scope, resolveAgentProfileDir, resolveDefaultAgentId } from "../../agent/agent-scope.js";
 import { WORKSPACE_FILES, init_paths } from "../../config/paths.js";
-import { ConfigSchema, init_schema } from "../../config/schema.js";
 import { saveConfig } from "../../config/loader.js";
+import { resolveGatewayLocalClientHost } from "../../config/gateway-bind.js";
 import { isWeixinOnboardConfigured } from "../../../extensions/weixin/src/adapters/onboard-cli.js";
 import { formatExamples, register } from "../registry.js";
 import "../../config/index.js";
-import { resolveGatewayLocalClientHost } from "../../config/gateway-bind.js";
 import { seedMainAgentProfileMarkdown } from "../../agent/context/workspace-seed.js";
 import { colors } from "../utils/colors.js";
 import { initWorkspace } from "../utils/init-workspace.js";

package/dist/src/cli/commands/tunnel.js

@@ -1,13 +1,13 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
 import { loadConfig, saveConfig } from "../../config/loader.js";
+import { resolveGatewayEffectiveHost } from "../../config/gateway-bind.js";
+import { loadTunnelState } from "../../tunnel/tunnel-state.js";
 import { formatExamples, register } from "../registry.js";
 import "../../config/index.js";
-import { resolveGatewayEffectiveHost } from "../../config/gateway-bind.js";
 import { TUNNEL_RISK_SUMMARY_LINES, TunnelConsentError, assertTunnelMayStart, hasValidTunnelConsent } from "../../tunnel/consent.js";
 import { resolveTunnelBrokerUrl, resolveTunnelRegistrationSecret } from "../../tunnel/env.js";
 import { ensureFrpcBinary } from "../../tunnel/frpc-binary.js";
-import { loadTunnelState } from "../../tunnel/tunnel-state.js";
 import { getTunnelService } from "../../tunnel/tunnel-service.js";
 import { resolveFrpSubdomainHost } from "../../tunnel/frp-subdomain-host.js";
 import { applyTunnelConsentToConfig, mergeTunnelConfigPatch, setTunnelEnabledInConfig } from "../../tunnel/tunnel-config.js";

package/dist/src/cli/utils/gateway-client.js

@@ -2,8 +2,8 @@ import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
 import { init_paths, resolveConfigPath } from "../../config/paths.js";
 import { loadConfig } from "../../config/loader.js";
-import "../../config/index.js";
 import { resolveGatewayEffectiveHost } from "../../config/gateway-bind.js";
+import "../../config/index.js";
 import { assertSecureGatewayHttpUrl } from "../../gateway/ws-security.js";
 import { addGatewayClientOptions, parseGatewayClientOptions } from "./gateway-client-options.js";
 //#region src/cli/utils/gateway-client.ts

package/dist/src/cli/utils/init-workspace-core.js

@@ -1,8 +1,8 @@
 import { ConfigSchema, init_schema } from "../../config/schema.js";
 import { init_loader, loadConfig, saveConfig } from "../../config/loader.js";
-import { randomBytes } from "node:crypto";
-import { existsSync, mkdirSync, readFileSync } from "node:fs";
 import { dirname, join } from "node:path";
+import { existsSync, mkdirSync, readFileSync } from "node:fs";
+import { randomBytes } from "node:crypto";
 //#region src/cli/utils/init-workspace-core.ts
 init_schema();
 init_loader();

package/dist/src/config/agent-profile.js

@@ -1,5 +1,5 @@
-import { init_agent_scope, resolveAgentWorkspaceDir } from "../agent/agent-scope.js";
 import { getAgentDefaultModelRef, init_schema } from "./schema.js";
+import { init_agent_scope, resolveAgentWorkspaceDir } from "../agent/agent-scope.js";
 import { init_session_key, parseSessionKey } from "../routing/session-key.js";
 import { agentExists, getDefaultAgentId, init_resolve_route } from "../routing/resolve-route.js";
 //#region src/config/agent-profile.ts

package/dist/src/config/gateway-bind.js

@@ -1,7 +1,7 @@
 import { getTailnetIPv4Sync } from "../infra/tailscale.js";
 import { isLoopbackHost } from "../gateway/host.js";
-import { existsSync } from "node:fs";
 import net from "node:net";
+import { existsSync } from "node:fs";
 //#region src/config/gateway-bind.ts
 function resolveGatewayBindMode(cfg, bindOverride) {
 	if (bindOverride) return bindOverride;

package/dist/src/config/index.js

@@ -1,15 +1,15 @@
+import { TelegramAccountConfigSchema, TelegramConfigSchema, TelegramGroupConfigSchema, TelegramTopicConfigSchema } from "../../extensions/telegram/src/config-schema.js";
+import { WeixinAccountConfigSchema, WeixinConfigSchema } from "../../extensions/weixin/src/config-schema.js";
+import { AgentConfigSchema, AgentDefaultsSchema, AgentImageGenerationModelSchema, AgentModelRefSchema, AgentsConfigSchema, BindingMatchSchema, BindingRuleSchema, BindingsConfigSchema, ChannelsConfigSchema, CommandsConfigSchema, ConfigSchema, CronConfigSchema, ExtensionSecurityConfigSchema, ExtensionSlotsConfigSchema, ExtensionsConfigSchema, GatewayAuthRateLimitSchema, GatewayAuthSchema, GatewayBindModeSchema, GatewayChannelConnectDeferModeSchema, GatewayConfigSchema, GatewayModeSchema, GatewayRemoteSchema, GatewaySecuritySchema, GatewayTailscaleConsentSchema, GatewayTailscaleSchema, GatewayTlsSchema, GatewayTrustedProxySchema, GoalsConfigSchema, HeartbeatConfigSchema, McpConfigSchema, McpServerSchema, MediaUnderstandingCapabilitiesSchema, MediaUnderstandingModelSchema, MessagesConfigSchema, ModelsDevConfigSchema, ProviderAuthConfigSchema, ProviderAzureConfigSchema, ProviderRequestOverridesSchema, ProvidersConfigSchema, STTConfigSchema, STTFallbackConfigSchema, STTProviderConfigSchema, SearchProviderEntrySchema, SessionConfigSchema, SessionDmScopeSchema, SessionStorageConfigSchema, TTSConfigSchema, TTSEdgeConfigSchema, TTSFallbackConfigSchema, TTSModelOverridesConfigSchema, TTSProviderConfigSchema, TTSSummarizationConfigSchema, ToolsConfigSchema, ToolsMediaAudioConfigSchema, ToolsMediaConfigSchema, TunnelConfigSchema, TunnelConsentSchema, UpdateAutoConfigSchema, UpdateConfigSchema, WebSearchConfigSchema, WebToolsConfigSchema, WebsiteBlocklistSchema, WorkspaceConfigSchema, WorkspaceImportConfigSchema, getAgentDefaultModelRef, init_schema, parseModelRef } from "./schema.js";
+import { applyConfigOverrides, getConfigOverrides, resetConfigOverrides, setConfigOverride, unsetConfigOverride } from "./runtime-overrides.js";
 import { ENV_VARS, resolveHomeDir, resolveStateDir } from "./paths-state.js";
 import { expandWorkspacePathString, init_workspace_path, normalizeWorkspaceDir, resolveWorkspaceRoot } from "./workspace-path.js";
 import { resolveDefaultAgentWorkspaceDir } from "./workspace-defaults.js";
 import { resolveAgentDir as resolveAgentDir$1, resolveAgentHomeDir as resolveAgentHomeDir$1, resolveAgentWorkspaceDir, resolveSessionsDir as resolveSessionsDir$1 } from "../agent/agent-scope.js";
+import { extractProfileAgentId, resolveEffectiveAgentProfile, resolveEffectiveAgentProfileForSession } from "./agent-profile.js";
 import { resolveSessionFilePath, resolveSessionTranscriptPathInDir } from "../session/parity/transcript-paths.js";
 import { FILENAMES, WORKSPACE_FILES, existsSync, init_paths, resolveAgentAuthProfilesPath, resolveAgentDir, resolveAgentHomeDir, resolveAgentMetadataPath, resolveAgentProfileDir, resolveAgentProfileMarkdownPath, resolveAuthProfilesPath, resolveBinDir, resolveBundledExtensionsDir, resolveBundledSkillsDir, resolveConfigPath, resolveCredentialsDir, resolveCronDir, resolveCronJobsPath, resolveCronLogPath, resolveCronLogsDir, resolveCronRunsDir, resolveExtensionSdkPath, resolveExtensionsDir, resolveExtensionsLockPath, resolveInboxDir, resolveInboxMessagePath, resolveInboxPendingDir, resolveInboxProcessedDir, resolveLogPath, resolveLogsDir, resolveMemoryDir, resolveMemoryPath, resolveModelsJsonPath, resolveNodeBinDir, resolveNodeBinPath, resolveNodeToolsDir, resolveNpmBinPath, resolveOAuthPath, resolvePidPath, resolveSessionTranscriptPath, resolveSessionsArchiveDir, resolveSessionsDir, resolveSessionsMapPath, resolveSkillPath, resolveSkillsCachePath, resolveSkillsDir, resolveSkillsLockPath, resolveSocketPath, resolveStatusPath, resolveToolsDir, resolveWorkspaceExtensionsDir, resolveWorkspaceFile, resolveWorkspaceStateDir, resolveWorkspaceStatePath, resolveXopcBinPath } from "./paths.js";
-import { TelegramAccountConfigSchema, TelegramConfigSchema, TelegramGroupConfigSchema, TelegramTopicConfigSchema } from "../../extensions/telegram/src/config-schema.js";
-import { WeixinAccountConfigSchema, WeixinConfigSchema } from "../../extensions/weixin/src/config-schema.js";
-import { AgentConfigSchema, AgentDefaultsSchema, AgentImageGenerationModelSchema, AgentModelRefSchema, AgentsConfigSchema, BindingMatchSchema, BindingRuleSchema, BindingsConfigSchema, ChannelsConfigSchema, CommandsConfigSchema, ConfigSchema, CronConfigSchema, ExtensionSecurityConfigSchema, ExtensionSlotsConfigSchema, ExtensionsConfigSchema, GatewayAuthRateLimitSchema, GatewayAuthSchema, GatewayBindModeSchema, GatewayChannelConnectDeferModeSchema, GatewayConfigSchema, GatewayModeSchema, GatewayRemoteSchema, GatewaySecuritySchema, GatewayTailscaleConsentSchema, GatewayTailscaleSchema, GatewayTlsSchema, GatewayTrustedProxySchema, GoalsConfigSchema, HeartbeatConfigSchema, McpConfigSchema, McpServerSchema, MediaUnderstandingCapabilitiesSchema, MediaUnderstandingModelSchema, MessagesConfigSchema, ModelsDevConfigSchema, ProviderAuthConfigSchema, ProviderAzureConfigSchema, ProviderRequestOverridesSchema, ProvidersConfigSchema, STTConfigSchema, STTFallbackConfigSchema, STTProviderConfigSchema, SearchProviderEntrySchema, SessionConfigSchema, SessionDmScopeSchema, SessionStorageConfigSchema, TTSConfigSchema, TTSEdgeConfigSchema, TTSFallbackConfigSchema, TTSModelOverridesConfigSchema, TTSProviderConfigSchema, TTSSummarizationConfigSchema, ToolsConfigSchema, ToolsMediaAudioConfigSchema, ToolsMediaConfigSchema, TunnelConfigSchema, TunnelConsentSchema, UpdateAutoConfigSchema, UpdateConfigSchema, WebSearchConfigSchema, WebToolsConfigSchema, WebsiteBlocklistSchema, WorkspaceConfigSchema, WorkspaceImportConfigSchema, getAgentDefaultModelRef, init_schema, parseModelRef } from "./schema.js";
 import { init_loader, loadConfig, registerChannelConfigValidator, saveConfig } from "./loader.js";
-import { applyConfigOverrides, getConfigOverrides, resetConfigOverrides, setConfigOverride, unsetConfigOverride } from "./runtime-overrides.js";
-import { extractProfileAgentId, resolveEffectiveAgentProfile, resolveEffectiveAgentProfileForSession } from "./agent-profile.js";
 import { clearConfigValueCache, getAllowedCommands, getCacheStats, init_resolve_config_value, resolveConfigValue, resolveHeaders, testApiKeyResolution } from "./resolve-config-value.js";
 import { CustomModelSchema, ModelOverrideSchema, ModelsJsonSchema, OpenAICompatSchema, OpenAICompletionsCompatSchema, OpenAIResponsesCompatSchema, OpenRouterRoutingSchema, ProviderConfigSchema, VercelGatewayRoutingSchema, getDefaultModelValues, init_models_json, loadModelsJson, modelsJsonExists, saveModelsJson, validateModelsConfig } from "./models-json.js";
 import { canonicalizeConfiguredMcpServer, isKnownCliMcpTypeAlias, normalizeConfiguredMcpServers, resolveXopcMcpTransportAlias } from "./mcp-config-normalize.js";

package/dist/src/config/loader.js

@@ -1,9 +1,9 @@
 import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
-import { init_write_file_atomic, writeTextAtomic } from "../infra/write-file-atomic.js";
+import { ConfigSchema, init_schema } from "./schema.js";
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
 import { init_paths, resolveConfigPath } from "./paths.js";
-import { ConfigSchema, init_schema } from "./schema.js";
+import { init_write_file_atomic, writeTextAtomic } from "../infra/write-file-atomic.js";
 import { dirname } from "path";
 import { existsSync, mkdirSync, promises, readFileSync } from "fs";
 import { config } from "dotenv";

package/dist/src/config/models-json.js

@@ -1,8 +1,8 @@
 import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
-import { init_write_file_atomic, writeTextAtomicSync } from "../infra/write-file-atomic.js";
 import { init_paths, resolveModelsJsonPath } from "./paths.js";
-import { existsSync, readFileSync } from "fs";
+import { init_write_file_atomic, writeTextAtomicSync } from "../infra/write-file-atomic.js";
 import { z } from "zod";
+import { existsSync, readFileSync } from "fs";
 //#region src/config/models-json.ts
 /**
 * Models.json configuration types and schema

package/dist/src/config/paths-state.js

@@ -1,6 +1,6 @@
 import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
-import { join } from "node:path";
 import { homedir } from "node:os";
+import { join } from "node:path";
 //#region src/config/paths-state.ts
 function resolveHomeDir(env = process.env) {
 	return env[ENV_VARS.HOME] || homedir();

package/dist/src/config/profile.js

@@ -1,9 +1,9 @@
+import { ENV_VARS, init_paths_state, resolveHomeDir } from "./paths-state.js";
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
-import { ENV_VARS, init_paths_state, resolveHomeDir } from "./paths-state.js";
-import { mkdir, readdir, rm, stat } from "fs/promises";
 import { join } from "path";
 import { existsSync } from "fs";
+import { mkdir, readdir, rm, stat } from "fs/promises";
 //#region src/config/profile.ts
 init_logger();
 init_paths_state();

package/dist/src/config/public-url.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Validation + normalization helpers for `gateway.publicUrl`.
+ *
+ * The publicUrl is a user-deployed reverse-proxy origin (e.g.
+ * `https://gateway.example.com`). We accept it as both a config field and as
+ * a one-off candidate (auto-detected from `window.location.origin`), so the
+ * validator must run in identical shape on both surfaces.
+ */
+export type PublicUrlIssueCode = 'invalid_url' | 'invalid_scheme' | 'has_userinfo' | 'has_path' | 'has_query_or_fragment' | 'requires_https';
+export type PublicUrlValidation = {
+    ok: true;
+    url: string;
+    protocol: 'http:' | 'https:';
+    hostname: string;
+} | {
+    ok: false;
+    code: PublicUrlIssueCode;
+    message: string;
+};
+/** Lowercase RFC1918 / loopback / link-local / `.local` host match. */
+export declare function isPrivateOrLocalHostname(hostname: string): boolean;
+/**
+ * Validate a candidate publicUrl. Strict by design — we reject anything that
+ * looks ambiguous so the QR payload is always a clean origin.
+ */
+export declare function validatePublicUrl(raw: string): PublicUrlValidation;
+/** Convenience: return the normalized origin or `null` when invalid. */
+export declare function normalizePublicUrlOrNull(raw: string | null | undefined): string | null;

package/dist/src/config/public-url.js

@@ -0,0 +1,103 @@
+import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
+import net from "node:net";
+//#region src/config/public-url.ts
+/**
+* Validation + normalization helpers for `gateway.publicUrl`.
+*
+* The publicUrl is a user-deployed reverse-proxy origin (e.g.
+* `https://gateway.example.com`). We accept it as both a config field and as
+* a one-off candidate (auto-detected from `window.location.origin`), so the
+* validator must run in identical shape on both surfaces.
+*/
+/** Lowercase RFC1918 / loopback / link-local / `.local` host match. */
+function isPrivateOrLocalHostname(hostname) {
+	const host = hostname.trim().toLowerCase();
+	if (!host) return false;
+	if (host === "localhost" || host.endsWith(".localhost")) return true;
+	if (host.endsWith(".local")) return true;
+	if (host === "::1" || host === "[::1]") return true;
+	if (host.startsWith("fe80:") || host.startsWith("[fe80:")) return true;
+	if (host.startsWith("fc") || host.startsWith("fd")) {
+		if (net.isIPv6(host.replace(/^\[|\]$/g, ""))) return true;
+	}
+	if (net.isIPv4(host)) {
+		const parts = host.split(".").map((p) => Number.parseInt(p, 10));
+		if (parts.length !== 4 || parts.some((n) => !Number.isFinite(n))) return false;
+		const [a, b] = parts;
+		if (a === 10) return true;
+		if (a === 127) return true;
+		if (a === 169 && b === 254) return true;
+		if (a === 172 && b >= 16 && b <= 31) return true;
+		if (a === 192 && b === 168) return true;
+		if (a === 100 && b >= 64 && b <= 127) return true;
+	}
+	return false;
+}
+/**
+* Validate a candidate publicUrl. Strict by design — we reject anything that
+* looks ambiguous so the QR payload is always a clean origin.
+*/
+function validatePublicUrl(raw) {
+	const trimmed = (raw ?? "").trim();
+	if (!trimmed) return {
+		ok: false,
+		code: "invalid_url",
+		message: "publicUrl is empty"
+	};
+	let parsed;
+	try {
+		parsed = new URL(trimmed);
+	} catch {
+		return {
+			ok: false,
+			code: "invalid_url",
+			message: "publicUrl is not a valid URL"
+		};
+	}
+	const protocol = parsed.protocol.toLowerCase();
+	if (protocol !== "https:" && protocol !== "http:") return {
+		ok: false,
+		code: "invalid_scheme",
+		message: "publicUrl must use http(s)"
+	};
+	if (parsed.username || parsed.password) return {
+		ok: false,
+		code: "has_userinfo",
+		message: "publicUrl must not contain userinfo"
+	};
+	const path = parsed.pathname;
+	if (path && path !== "/" && path !== "") return {
+		ok: false,
+		code: "has_path",
+		message: "publicUrl must not contain a path"
+	};
+	if (parsed.search || parsed.hash) return {
+		ok: false,
+		code: "has_query_or_fragment",
+		message: "publicUrl must not contain query or fragment"
+	};
+	const hostname = parsed.hostname.toLowerCase();
+	if (protocol === "http:" && !isPrivateOrLocalHostname(hostname)) return {
+		ok: false,
+		code: "requires_https",
+		message: "publicUrl must use https for public hostnames (http is only allowed for RFC1918 / .local)"
+	};
+	return {
+		ok: true,
+		url: `${protocol}//${parsed.host.toLowerCase()}`,
+		protocol,
+		hostname
+	};
+}
+/** Convenience: return the normalized origin or `null` when invalid. */
+function normalizePublicUrlOrNull(raw) {
+	if (!raw) return null;
+	const result = validatePublicUrl(raw);
+	return result.ok ? result.url : null;
+}
+var init_public_url = __esmMin((() => {}));
+//#endregion
+init_public_url();
+export { init_public_url, isPrivateOrLocalHostname, normalizePublicUrlOrNull, validatePublicUrl };
+
+//# sourceMappingURL=public-url.js.map

package/dist/src/config/public-url.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"public-url.js","names":[],"sources":["../../../src/config/public-url.ts"],"sourcesContent":["/**\n * Validation + normalization helpers for `gateway.publicUrl`.\n *\n * The publicUrl is a user-deployed reverse-proxy origin (e.g.\n * `https://gateway.example.com`). We accept it as both a config field and as\n * a one-off candidate (auto-detected from `window.location.origin`), so the\n * validator must run in identical shape on both surfaces.\n */\n\nimport net from 'node:net';\n\nexport type PublicUrlIssueCode =\n  | 'invalid_url'\n  | 'invalid_scheme'\n  | 'has_userinfo'\n  | 'has_path'\n  | 'has_query_or_fragment'\n  | 'requires_https';\n\nexport type PublicUrlValidation =\n  | { ok: true; url: string; protocol: 'http:' | 'https:'; hostname: string }\n  | { ok: false; code: PublicUrlIssueCode; message: string };\n\n/** Lowercase RFC1918 / loopback / link-local / `.local` host match. */\nexport function isPrivateOrLocalHostname(hostname: string): boolean {\n  const host = hostname.trim().toLowerCase();\n  if (!host) return false;\n  if (host === 'localhost' || host.endsWith('.localhost')) return true;\n  if (host.endsWith('.local')) return true;\n  // IPv6 loopback / link-local\n  if (host === '::1' || host === '[::1]') return true;\n  if (host.startsWith('fe80:') || host.startsWith('[fe80:')) return true;\n  if (host.startsWith('fc') || host.startsWith('fd')) {\n    // fc00::/7 ULA\n    if (net.isIPv6(host.replace(/^\\[|\\]$/g, ''))) return true;\n  }\n  // IPv4 private + loopback ranges\n  if (net.isIPv4(host)) {\n    const parts = host.split('.').map((p) => Number.parseInt(p, 10));\n    if (parts.length !== 4 || parts.some((n) => !Number.isFinite(n))) return false;\n    const [a, b] = parts;\n    if (a === 10) return true;\n    if (a === 127) return true;\n    if (a === 169 && b === 254) return true; // link-local\n    if (a === 172 && b >= 16 && b <= 31) return true;\n    if (a === 192 && b === 168) return true;\n    if (a === 100 && b >= 64 && b <= 127) return true; // CGNAT — common for tailnet / mesh\n  }\n  return false;\n}\n\n/**\n * Validate a candidate publicUrl. Strict by design — we reject anything that\n * looks ambiguous so the QR payload is always a clean origin.\n */\nexport function validatePublicUrl(raw: string): PublicUrlValidation {\n  const trimmed = (raw ?? '').trim();\n  if (!trimmed) {\n    return { ok: false, code: 'invalid_url', message: 'publicUrl is empty' };\n  }\n  let parsed: URL;\n  try {\n    parsed = new URL(trimmed);\n  } catch {\n    return { ok: false, code: 'invalid_url', message: 'publicUrl is not a valid URL' };\n  }\n  const protocol = parsed.protocol.toLowerCase();\n  if (protocol !== 'https:' && protocol !== 'http:') {\n    return { ok: false, code: 'invalid_scheme', message: 'publicUrl must use http(s)' };\n  }\n  if (parsed.username || parsed.password) {\n    return { ok: false, code: 'has_userinfo', message: 'publicUrl must not contain userinfo' };\n  }\n  // pathname may be \"/\" (trailing slash) but nothing else\n  const path = parsed.pathname;\n  if (path && path !== '/' && path !== '') {\n    return { ok: false, code: 'has_path', message: 'publicUrl must not contain a path' };\n  }\n  if (parsed.search || parsed.hash) {\n    return {\n      ok: false,\n      code: 'has_query_or_fragment',\n      message: 'publicUrl must not contain query or fragment',\n    };\n  }\n  const hostname = parsed.hostname.toLowerCase();\n  if (protocol === 'http:' && !isPrivateOrLocalHostname(hostname)) {\n    return {\n      ok: false,\n      code: 'requires_https',\n      message:\n        'publicUrl must use https for public hostnames (http is only allowed for RFC1918 / .local)',\n    };\n  }\n  // Normalize: drop trailing slash, lowercase host.\n  const normalized = `${protocol}//${parsed.host.toLowerCase()}`;\n  return {\n    ok: true,\n    url: normalized,\n    protocol: protocol as 'http:' | 'https:',\n    hostname,\n  };\n}\n\n/** Convenience: return the normalized origin or `null` when invalid. */\nexport function normalizePublicUrlOrNull(raw: string | null | undefined): string | null {\n  if (!raw) return null;\n  const result = validatePublicUrl(raw);\n  return result.ok ? result.url : null;\n}\n"],"mappings":";;;;;;;;;;;;AAwBA,SAAgB,yBAAyB,UAA2B;CAClE,MAAM,OAAO,SAAS,MAAM,CAAC,aAAa;AAC1C,KAAI,CAAC,KAAM,QAAO;AAClB,KAAI,SAAS,eAAe,KAAK,SAAS,aAAa,CAAE,QAAO;AAChE,KAAI,KAAK,SAAS,SAAS,CAAE,QAAO;AAEpC,KAAI,SAAS,SAAS,SAAS,QAAS,QAAO;AAC/C,KAAI,KAAK,WAAW,QAAQ,IAAI,KAAK,WAAW,SAAS,CAAE,QAAO;AAClE,KAAI,KAAK,WAAW,KAAK,IAAI,KAAK,WAAW,KAAK;MAE5C,IAAI,OAAO,KAAK,QAAQ,YAAY,GAAG,CAAC,CAAE,QAAO;;AAGvD,KAAI,IAAI,OAAO,KAAK,EAAE;EACpB,MAAM,QAAQ,KAAK,MAAM,IAAI,CAAC,KAAK,MAAM,OAAO,SAAS,GAAG,GAAG,CAAC;AAChE,MAAI,MAAM,WAAW,KAAK,MAAM,MAAM,MAAM,CAAC,OAAO,SAAS,EAAE,CAAC,CAAE,QAAO;EACzE,MAAM,CAAC,GAAG,KAAK;AACf,MAAI,MAAM,GAAI,QAAO;AACrB,MAAI,MAAM,IAAK,QAAO;AACtB,MAAI,MAAM,OAAO,MAAM,IAAK,QAAO;AACnC,MAAI,MAAM,OAAO,KAAK,MAAM,KAAK,GAAI,QAAO;AAC5C,MAAI,MAAM,OAAO,MAAM,IAAK,QAAO;AACnC,MAAI,MAAM,OAAO,KAAK,MAAM,KAAK,IAAK,QAAO;;AAE/C,QAAO;;;;;;AAOT,SAAgB,kBAAkB,KAAkC;CAClE,MAAM,WAAW,OAAO,IAAI,MAAM;AAClC,KAAI,CAAC,QACH,QAAO;EAAE,IAAI;EAAO,MAAM;EAAe,SAAS;EAAsB;CAE1E,IAAI;AACJ,KAAI;AACF,WAAS,IAAI,IAAI,QAAQ;SACnB;AACN,SAAO;GAAE,IAAI;GAAO,MAAM;GAAe,SAAS;GAAgC;;CAEpF,MAAM,WAAW,OAAO,SAAS,aAAa;AAC9C,KAAI,aAAa,YAAY,aAAa,QACxC,QAAO;EAAE,IAAI;EAAO,MAAM;EAAkB,SAAS;EAA8B;AAErF,KAAI,OAAO,YAAY,OAAO,SAC5B,QAAO;EAAE,IAAI;EAAO,MAAM;EAAgB,SAAS;EAAuC;CAG5F,MAAM,OAAO,OAAO;AACpB,KAAI,QAAQ,SAAS,OAAO,SAAS,GACnC,QAAO;EAAE,IAAI;EAAO,MAAM;EAAY,SAAS;EAAqC;AAEtF,KAAI,OAAO,UAAU,OAAO,KAC1B,QAAO;EACL,IAAI;EACJ,MAAM;EACN,SAAS;EACV;CAEH,MAAM,WAAW,OAAO,SAAS,aAAa;AAC9C,KAAI,aAAa,WAAW,CAAC,yBAAyB,SAAS,CAC7D,QAAO;EACL,IAAI;EACJ,MAAM;EACN,SACE;EACH;AAIH,QAAO;EACL,IAAI;EACJ,KAAK,GAHe,SAAS,IAAI,OAAO,KAAK,aAAa;EAIhD;EACV;EACD;;;AAIH,SAAgB,yBAAyB,KAA+C;AACtF,KAAI,CAAC,IAAK,QAAO;CACjB,MAAM,SAAS,kBAAkB,IAAI;AACrC,QAAO,OAAO,KAAK,OAAO,MAAM"}

package/dist/src/config/schema.d.ts

@@ -220,6 +220,12 @@ export declare const AgentDefaultsSchema: z.ZodObject<{
     executeCode: z.ZodOptional<z.ZodObject<{
         enabled: z.ZodOptional<z.ZodBoolean>;
     }, z.core.$strip>>;
+    workflow: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        maxConcurrency: z.ZodDefault<z.ZodNumber>;
+        maxSubagents: z.ZodDefault<z.ZodNumber>;
+        defaultTimeoutSec: z.ZodDefault<z.ZodNumber>;
+    }, z.core.$strip>>;
     systemPromptOverride: z.ZodOptional<z.ZodString>;
     skills: z.ZodOptional<z.ZodArray<z.ZodString>>;
     tools: z.ZodOptional<z.ZodObject<{
@@ -470,6 +476,12 @@ export declare const AgentsConfigSchema: z.ZodDefault<z.ZodObject<{
         executeCode: z.ZodOptional<z.ZodObject<{
             enabled: z.ZodOptional<z.ZodBoolean>;
         }, z.core.$strip>>;
+        workflow: z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            maxConcurrency: z.ZodDefault<z.ZodNumber>;
+            maxSubagents: z.ZodDefault<z.ZodNumber>;
+            defaultTimeoutSec: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strip>>;
         systemPromptOverride: z.ZodOptional<z.ZodString>;
         skills: z.ZodOptional<z.ZodArray<z.ZodString>>;
         tools: z.ZodOptional<z.ZodObject<{
@@ -965,6 +977,7 @@ export declare const GatewayConfigSchema: z.ZodDefault<z.ZodObject<{
     }, z.core.$strip>>>;
     maxSseConnections: z.ZodOptional<z.ZodNumber>;
     corsOrigins: z.ZodOptional<z.ZodArray<z.ZodString>>;
+    publicUrl: z.ZodOptional<z.ZodString>;
     dangerouslyAllowHostHeaderOriginFallback: z.ZodOptional<z.ZodBoolean>;
     trustedProxies: z.ZodOptional<z.ZodArray<z.ZodString>>;
     allowRealIpFallback: z.ZodOptional<z.ZodBoolean>;
@@ -987,6 +1000,37 @@ export declare const GatewayConfigSchema: z.ZodDefault<z.ZodObject<{
         maxActiveShares: z.ZodDefault<z.ZodNumber>;
         maxFileSize: z.ZodDefault<z.ZodNumber>;
         inlinePreviewMimes: z.ZodDefault<z.ZodArray<z.ZodString>>;
+        directory: z.ZodDefault<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            maxFolderSize: z.ZodDefault<z.ZodNumber>;
+            maxFileCount: z.ZodDefault<z.ZodNumber>;
+            maxDepth: z.ZodDefault<z.ZodNumber>;
+            listingCacheMs: z.ZodDefault<z.ZodNumber>;
+            zipConcurrency: z.ZodDefault<z.ZodNumber>;
+        }, z.core.$strip>>;
+    }, z.core.$strip>>;
+    siteShare: z.ZodOptional<z.ZodObject<{
+        enabled: z.ZodDefault<z.ZodBoolean>;
+        publicHostSuffix: z.ZodDefault<z.ZodString>;
+        defaultTtlMs: z.ZodDefault<z.ZodNumber>;
+        maxTtlMs: z.ZodDefault<z.ZodNumber>;
+        maxActiveSites: z.ZodDefault<z.ZodNumber>;
+        static: z.ZodDefault<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            maxRootDirSize: z.ZodDefault<z.ZodNumber>;
+            maxFileCount: z.ZodDefault<z.ZodNumber>;
+            rewriteEnabledByDefault: z.ZodDefault<z.ZodBoolean>;
+        }, z.core.$strip>>;
+        proxy: z.ZodDefault<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            allowedUpstreamHosts: z.ZodDefault<z.ZodArray<z.ZodString>>;
+            allowedUpstreamPorts: z.ZodDefault<z.ZodArray<z.ZodNumber>>;
+            forwardWebSocket: z.ZodDefault<z.ZodBoolean>;
+            bodySizeLimit: z.ZodDefault<z.ZodNumber>;
+            requestTimeoutMs: z.ZodDefault<z.ZodNumber>;
+            wsIdleTimeoutMs: z.ZodDefault<z.ZodNumber>;
+            rewriteSetCookiePath: z.ZodDefault<z.ZodBoolean>;
+        }, z.core.$strip>>;
     }, z.core.$strip>>;
 }, z.core.$strip>>;
 export declare const CronConfigSchema: z.ZodDefault<z.ZodObject<{
@@ -1709,6 +1753,12 @@ export declare const ConfigSchema: z.ZodDefault<z.ZodObject<{
             executeCode: z.ZodOptional<z.ZodObject<{
                 enabled: z.ZodOptional<z.ZodBoolean>;
             }, z.core.$strip>>;
+            workflow: z.ZodOptional<z.ZodObject<{
+                enabled: z.ZodDefault<z.ZodBoolean>;
+                maxConcurrency: z.ZodDefault<z.ZodNumber>;
+                maxSubagents: z.ZodDefault<z.ZodNumber>;
+                defaultTimeoutSec: z.ZodDefault<z.ZodNumber>;
+            }, z.core.$strip>>;
             systemPromptOverride: z.ZodOptional<z.ZodString>;
             skills: z.ZodOptional<z.ZodArray<z.ZodString>>;
             tools: z.ZodOptional<z.ZodObject<{
@@ -1871,6 +1921,7 @@ export declare const ConfigSchema: z.ZodDefault<z.ZodObject<{
         }, z.core.$strip>>>;
         maxSseConnections: z.ZodOptional<z.ZodNumber>;
         corsOrigins: z.ZodOptional<z.ZodArray<z.ZodString>>;
+        publicUrl: z.ZodOptional<z.ZodString>;
         dangerouslyAllowHostHeaderOriginFallback: z.ZodOptional<z.ZodBoolean>;
         trustedProxies: z.ZodOptional<z.ZodArray<z.ZodString>>;
         allowRealIpFallback: z.ZodOptional<z.ZodBoolean>;
@@ -1893,6 +1944,37 @@ export declare const ConfigSchema: z.ZodDefault<z.ZodObject<{
             maxActiveShares: z.ZodDefault<z.ZodNumber>;
             maxFileSize: z.ZodDefault<z.ZodNumber>;
             inlinePreviewMimes: z.ZodDefault<z.ZodArray<z.ZodString>>;
+            directory: z.ZodDefault<z.ZodObject<{
+                enabled: z.ZodDefault<z.ZodBoolean>;
+                maxFolderSize: z.ZodDefault<z.ZodNumber>;
+                maxFileCount: z.ZodDefault<z.ZodNumber>;
+                maxDepth: z.ZodDefault<z.ZodNumber>;
+                listingCacheMs: z.ZodDefault<z.ZodNumber>;
+                zipConcurrency: z.ZodDefault<z.ZodNumber>;
+            }, z.core.$strip>>;
+        }, z.core.$strip>>;
+        siteShare: z.ZodOptional<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            publicHostSuffix: z.ZodDefault<z.ZodString>;
+            defaultTtlMs: z.ZodDefault<z.ZodNumber>;
+            maxTtlMs: z.ZodDefault<z.ZodNumber>;
+            maxActiveSites: z.ZodDefault<z.ZodNumber>;
+            static: z.ZodDefault<z.ZodObject<{
+                enabled: z.ZodDefault<z.ZodBoolean>;
+                maxRootDirSize: z.ZodDefault<z.ZodNumber>;
+                maxFileCount: z.ZodDefault<z.ZodNumber>;
+                rewriteEnabledByDefault: z.ZodDefault<z.ZodBoolean>;
+            }, z.core.$strip>>;
+            proxy: z.ZodDefault<z.ZodObject<{
+                enabled: z.ZodDefault<z.ZodBoolean>;
+                allowedUpstreamHosts: z.ZodDefault<z.ZodArray<z.ZodString>>;
+                allowedUpstreamPorts: z.ZodDefault<z.ZodArray<z.ZodNumber>>;
+                forwardWebSocket: z.ZodDefault<z.ZodBoolean>;
+                bodySizeLimit: z.ZodDefault<z.ZodNumber>;
+                requestTimeoutMs: z.ZodDefault<z.ZodNumber>;
+                wsIdleTimeoutMs: z.ZodDefault<z.ZodNumber>;
+                rewriteSetCookiePath: z.ZodDefault<z.ZodBoolean>;
+            }, z.core.$strip>>;
         }, z.core.$strip>>;
     }, z.core.$strip>>;
     tunnel: z.ZodOptional<z.ZodDefault<z.ZodObject<{