@xopcai/xopc 0.0.86 → 0.0.88

package/dist/src/gateway/hono/routes/config.js

@@ -68,6 +68,65 @@ function registerConfigRoutes(authenticated, deps) {
 			payload: { config: safeConfig }
 		});
 	});
+	/** POST /api/gateway/reveal-auth-secret — plaintext gateway.auth token/password from config only. */
+	authenticated.post("/api/gateway/reveal-auth-secret", strictRateLimitMiddleware, async (c) => {
+		let field;
+		try {
+			const body = await c.req.json();
+			field = body && typeof body === "object" ? body.field : void 0;
+		} catch {
+			field = void 0;
+		}
+		if (field !== "token" && field !== "password") return c.json({
+			ok: false,
+			error: { message: "field must be token or password" }
+		}, 400);
+		const config = service.currentConfig;
+		const secret = field === "token" ? config.gateway?.auth?.token?.trim() || null : config.gateway?.auth?.password?.trim() || null;
+		return c.json({
+			ok: true,
+			payload: {
+				field,
+				secret,
+				source: secret ? "config" : "none"
+			}
+		});
+	});
+	/** POST /api/agents/browser/reveal-cloud-api-key — plaintext browser cloud apiKey from config only. */
+	authenticated.post("/api/agents/browser/reveal-cloud-api-key", strictRateLimitMiddleware, async (c) => {
+		const apiKey = service.currentConfig.agents?.defaults?.browser?.cloud?.apiKey?.trim() || null;
+		return c.json({
+			ok: true,
+			payload: {
+				apiKey,
+				source: apiKey ? "config" : "none"
+			}
+		});
+	});
+	/** POST /api/tools/web/reveal-search-api-key — plaintext search provider apiKey by index. */
+	authenticated.post("/api/tools/web/reveal-search-api-key", strictRateLimitMiddleware, async (c) => {
+		let index = -1;
+		try {
+			const body = await c.req.json();
+			if (body && typeof body === "object" && typeof body.index === "number") index = Math.floor(body.index);
+		} catch {
+			index = -1;
+		}
+		const providers = service.currentConfig.tools?.web?.search?.providers ?? [];
+		if (index < 0 || index >= providers.length) return c.json({
+			ok: false,
+			error: { message: "Invalid provider index" }
+		}, 400);
+		const apiKey = providers[index]?.apiKey?.trim() || null;
+		return c.json({
+			ok: true,
+			payload: {
+				index,
+				apiKey,
+				source: apiKey ? "config" : "none"
+			}
+		});
+	});
 }
 //#endregion
 export { registerConfigRoutes };

package/dist/src/gateway/hono/routes/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","names":[],"sources":["../../../../../src/gateway/hono/routes/config.ts"],"sourcesContent":["import type { Hono } from 'hono';\n\nimport type { Config } from '../../../config/schema.js';\nimport { buildSafeWebConfigPayload } from '../lib/config-payload.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\nimport {\n  applyAgentsPatch,\n  applyChannelsPatch,\n  applyGatewayPatch,\n  applyMiscPatch,\n  validateGatewayAfterPatch,\n} from './config-patch/index.js';\n\nexport function registerConfigRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  const { service, strictRateLimitMiddleware } = deps;\n\n  authenticated.post('/api/config/reload', strictRateLimitMiddleware, async (c) => {\n    const result = await service.reloadConfig();\n    return c.json({ ok: true, payload: result });\n  });\n\n  authenticated.post('/api/heartbeat/trigger', strictRateLimitMiddleware, async (c) => {\n    let reason = 'manual';\n    try {\n      const body = await c.req.json();\n      if (body && typeof body === 'object' && typeof (body as { reason?: unknown }).reason === 'string') {\n        const r = (body as { reason: string }).reason.trim();\n        if (r) reason = r.slice(0, 120);\n      }\n    } catch {\n      /* empty or invalid body */\n    }\n    service.requestHeartbeatNow({ reason });\n    return c.json({ ok: true, payload: { scheduled: true } });\n  });\n\n  authenticated.get('/api/config', async (c) => {\n    const safeConfig = await buildSafeWebConfigPayload(service);\n    return c.json({ ok: true, payload: { config: safeConfig } });\n  });\n\n  // PATCH /api/config — section patchers run sequentially against the live\n  // config object (mutate-in-place is intentional: the route handler reads\n  // `service.currentConfig` and rewrites it through `saveConfig`). Each\n  // patcher only touches the keys it owns and returns `{ ok: false }` with a\n  // 400 body when validation fails; we surface the first failure verbatim.\n  authenticated.patch('/api/config', strictRateLimitMiddleware, async (c) => {\n    const body = await c.req.json();\n    const config: Config = service.currentConfig as Config;\n\n    applyAgentsPatch(config, body);\n    applyChannelsPatch(config, body);\n\n    const gatewayResult = applyGatewayPatch(config, body);\n    if (gatewayResult.ok === false) {\n      return c.json({ ok: false, error: gatewayResult.error }, gatewayResult.status as 400 | 500);\n    }\n\n    const miscResult = await applyMiscPatch(config, body);\n    if (miscResult.ok === false) {\n      return c.json({ ok: false, error: miscResult.error }, miscResult.status as 400 | 500);\n    }\n\n    const finalGwCheck = validateGatewayAfterPatch(config, body);\n    if (finalGwCheck.ok === false) {\n      return c.json({ ok: false, error: finalGwCheck.error }, finalGwCheck.status as 400 | 500);\n    }\n\n    const result = await service.saveConfig(config);\n    if (!result.saved) {\n      return c.json({ ok: false, error: result.error }, 500);\n    }\n\n    if (body.gateway?.heartbeat !== undefined && typeof body.gateway.heartbeat === 'object') {\n      service.reloadHeartbeatFromCurrentConfig();\n    }\n\n    const safeConfig = await buildSafeWebConfigPayload(service);\n    return c.json({ ok: true, payload: { config: safeConfig } });\n  });\n}\n"],"mappings":";;;;;;;AAaA,SAAgB,qBAAqB,eAAqB,MAAoC;CAC5F,MAAM,EAAE,SAAS,8BAA8B;AAE/C,eAAc,KAAK,sBAAsB,2BAA2B,OAAO,MAAM;EAC/E,MAAM,SAAS,MAAM,QAAQ,cAAc;AAC3C,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;GAAQ,CAAC;GAC5C;AAEF,eAAc,KAAK,0BAA0B,2BAA2B,OAAO,MAAM;EACnF,IAAI,SAAS;AACb,MAAI;GACF,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM;AAC/B,OAAI,QAAQ,OAAO,SAAS,YAAY,OAAQ,KAA8B,WAAW,UAAU;IACjG,MAAM,IAAK,KAA4B,OAAO,MAAM;AACpD,QAAI,EAAG,UAAS,EAAE,MAAM,GAAG,IAAI;;UAE3B;AAGR,UAAQ,oBAAoB,EAAE,QAAQ,CAAC;AACvC,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,WAAW,MAAM;GAAE,CAAC;GACzD;AAEF,eAAc,IAAI,eAAe,OAAO,MAAM;EAC5C,MAAM,aAAa,MAAM,0BAA0B,QAAQ;AAC3D,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,QAAQ,YAAY;GAAE,CAAC;GAC5D;AAOF,eAAc,MAAM,eAAe,2BAA2B,OAAO,MAAM;EACzE,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM;EAC/B,MAAM,SAAiB,QAAQ;AAE/B,mBAAiB,QAAQ,KAAK;AAC9B,qBAAmB,QAAQ,KAAK;EAEhC,MAAM,gBAAgB,kBAAkB,QAAQ,KAAK;AACrD,MAAI,cAAc,OAAO,MACvB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,cAAc;GAAO,EAAE,cAAc,OAAoB;EAG7F,MAAM,aAAa,MAAM,eAAe,QAAQ,KAAK;AACrD,MAAI,WAAW,OAAO,MACpB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,WAAW;GAAO,EAAE,WAAW,OAAoB;EAGvF,MAAM,eAAe,0BAA0B,QAAQ,KAAK;AAC5D,MAAI,aAAa,OAAO,MACtB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,aAAa;GAAO,EAAE,aAAa,OAAoB;EAG3F,MAAM,SAAS,MAAM,QAAQ,WAAW,OAAO;AAC/C,MAAI,CAAC,OAAO,MACV,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,OAAO;GAAO,EAAE,IAAI;AAGxD,MAAI,KAAK,SAAS,cAAc,KAAA,KAAa,OAAO,KAAK,QAAQ,cAAc,SAC7E,SAAQ,kCAAkC;EAG5C,MAAM,aAAa,MAAM,0BAA0B,QAAQ;AAC3D,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,QAAQ,YAAY;GAAE,CAAC;GAC5D"}
+{"version":3,"file":"config.js","names":[],"sources":["../../../../../src/gateway/hono/routes/config.ts"],"sourcesContent":["import type { Hono } from 'hono';\n\nimport type { Config } from '../../../config/schema.js';\nimport { buildSafeWebConfigPayload } from '../lib/config-payload.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\nimport {\n  applyAgentsPatch,\n  applyChannelsPatch,\n  applyGatewayPatch,\n  applyMiscPatch,\n  validateGatewayAfterPatch,\n} from './config-patch/index.js';\n\nexport function registerConfigRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  const { service, strictRateLimitMiddleware } = deps;\n\n  authenticated.post('/api/config/reload', strictRateLimitMiddleware, async (c) => {\n    const result = await service.reloadConfig();\n    return c.json({ ok: true, payload: result });\n  });\n\n  authenticated.post('/api/heartbeat/trigger', strictRateLimitMiddleware, async (c) => {\n    let reason = 'manual';\n    try {\n      const body = await c.req.json();\n      if (body && typeof body === 'object' && typeof (body as { reason?: unknown }).reason === 'string') {\n        const r = (body as { reason: string }).reason.trim();\n        if (r) reason = r.slice(0, 120);\n      }\n    } catch {\n      /* empty or invalid body */\n    }\n    service.requestHeartbeatNow({ reason });\n    return c.json({ ok: true, payload: { scheduled: true } });\n  });\n\n  authenticated.get('/api/config', async (c) => {\n    const safeConfig = await buildSafeWebConfigPayload(service);\n    return c.json({ ok: true, payload: { config: safeConfig } });\n  });\n\n  // PATCH /api/config — section patchers run sequentially against the live\n  // config object (mutate-in-place is intentional: the route handler reads\n  // `service.currentConfig` and rewrites it through `saveConfig`). Each\n  // patcher only touches the keys it owns and returns `{ ok: false }` with a\n  // 400 body when validation fails; we surface the first failure verbatim.\n  authenticated.patch('/api/config', strictRateLimitMiddleware, async (c) => {\n    const body = await c.req.json();\n    const config: Config = service.currentConfig as Config;\n\n    applyAgentsPatch(config, body);\n    applyChannelsPatch(config, body);\n\n    const gatewayResult = applyGatewayPatch(config, body);\n    if (gatewayResult.ok === false) {\n      return c.json({ ok: false, error: gatewayResult.error }, gatewayResult.status as 400 | 500);\n    }\n\n    const miscResult = await applyMiscPatch(config, body);\n    if (miscResult.ok === false) {\n      return c.json({ ok: false, error: miscResult.error }, miscResult.status as 400 | 500);\n    }\n\n    const finalGwCheck = validateGatewayAfterPatch(config, body);\n    if (finalGwCheck.ok === false) {\n      return c.json({ ok: false, error: finalGwCheck.error }, finalGwCheck.status as 400 | 500);\n    }\n\n    const result = await service.saveConfig(config);\n    if (!result.saved) {\n      return c.json({ ok: false, error: result.error }, 500);\n    }\n\n    if (body.gateway?.heartbeat !== undefined && typeof body.gateway.heartbeat === 'object') {\n      service.reloadHeartbeatFromCurrentConfig();\n    }\n\n    const safeConfig = await buildSafeWebConfigPayload(service);\n    return c.json({ ok: true, payload: { config: safeConfig } });\n  });\n\n  /** POST /api/gateway/reveal-auth-secret — plaintext gateway.auth token/password from config only. */\n  authenticated.post('/api/gateway/reveal-auth-secret', strictRateLimitMiddleware, async (c) => {\n    let field: unknown;\n    try {\n      const body = await c.req.json();\n      field = body && typeof body === 'object' ? (body as { field?: unknown }).field : undefined;\n    } catch {\n      field = undefined;\n    }\n    if (field !== 'token' && field !== 'password') {\n      return c.json({ ok: false, error: { message: 'field must be token or password' } }, 400);\n    }\n    const config = service.currentConfig as Config;\n    const secret =\n      field === 'token'\n        ? config.gateway?.auth?.token?.trim() || null\n        : config.gateway?.auth?.password?.trim() || null;\n    return c.json({\n      ok: true,\n      payload: { field, secret, source: secret ? ('config' as const) : ('none' as const) },\n    });\n  });\n\n  /** POST /api/agents/browser/reveal-cloud-api-key — plaintext browser cloud apiKey from config only. */\n  authenticated.post('/api/agents/browser/reveal-cloud-api-key', strictRateLimitMiddleware, async (c) => {\n    const config = service.currentConfig as Config;\n    const apiKey = config.agents?.defaults?.browser?.cloud?.apiKey?.trim() || null;\n    return c.json({\n      ok: true,\n      payload: { apiKey, source: apiKey ? ('config' as const) : ('none' as const) },\n    });\n  });\n\n  /** POST /api/tools/web/reveal-search-api-key — plaintext search provider apiKey by index. */\n  authenticated.post('/api/tools/web/reveal-search-api-key', strictRateLimitMiddleware, async (c) => {\n    let index = -1;\n    try {\n      const body = await c.req.json();\n      if (body && typeof body === 'object' && typeof (body as { index?: unknown }).index === 'number') {\n        index = Math.floor((body as { index: number }).index);\n      }\n    } catch {\n      index = -1;\n    }\n    const providers = service.currentConfig.tools?.web?.search?.providers ?? [];\n    if (index < 0 || index >= providers.length) {\n      return c.json({ ok: false, error: { message: 'Invalid provider index' } }, 400);\n    }\n    const apiKey = providers[index]?.apiKey?.trim() || null;\n    return c.json({\n      ok: true,\n      payload: { index, apiKey, source: apiKey ? ('config' as const) : ('none' as const) },\n    });\n  });\n}\n"],"mappings":";;;;;;;AAaA,SAAgB,qBAAqB,eAAqB,MAAoC;CAC5F,MAAM,EAAE,SAAS,8BAA8B;AAE/C,eAAc,KAAK,sBAAsB,2BAA2B,OAAO,MAAM;EAC/E,MAAM,SAAS,MAAM,QAAQ,cAAc;AAC3C,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;GAAQ,CAAC;GAC5C;AAEF,eAAc,KAAK,0BAA0B,2BAA2B,OAAO,MAAM;EACnF,IAAI,SAAS;AACb,MAAI;GACF,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM;AAC/B,OAAI,QAAQ,OAAO,SAAS,YAAY,OAAQ,KAA8B,WAAW,UAAU;IACjG,MAAM,IAAK,KAA4B,OAAO,MAAM;AACpD,QAAI,EAAG,UAAS,EAAE,MAAM,GAAG,IAAI;;UAE3B;AAGR,UAAQ,oBAAoB,EAAE,QAAQ,CAAC;AACvC,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,WAAW,MAAM;GAAE,CAAC;GACzD;AAEF,eAAc,IAAI,eAAe,OAAO,MAAM;EAC5C,MAAM,aAAa,MAAM,0BAA0B,QAAQ;AAC3D,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,QAAQ,YAAY;GAAE,CAAC;GAC5D;AAOF,eAAc,MAAM,eAAe,2BAA2B,OAAO,MAAM;EACzE,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM;EAC/B,MAAM,SAAiB,QAAQ;AAE/B,mBAAiB,QAAQ,KAAK;AAC9B,qBAAmB,QAAQ,KAAK;EAEhC,MAAM,gBAAgB,kBAAkB,QAAQ,KAAK;AACrD,MAAI,cAAc,OAAO,MACvB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,cAAc;GAAO,EAAE,cAAc,OAAoB;EAG7F,MAAM,aAAa,MAAM,eAAe,QAAQ,KAAK;AACrD,MAAI,WAAW,OAAO,MACpB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,WAAW;GAAO,EAAE,WAAW,OAAoB;EAGvF,MAAM,eAAe,0BAA0B,QAAQ,KAAK;AAC5D,MAAI,aAAa,OAAO,MACtB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,aAAa;GAAO,EAAE,aAAa,OAAoB;EAG3F,MAAM,SAAS,MAAM,QAAQ,WAAW,OAAO;AAC/C,MAAI,CAAC,OAAO,MACV,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,OAAO;GAAO,EAAE,IAAI;AAGxD,MAAI,KAAK,SAAS,cAAc,KAAA,KAAa,OAAO,KAAK,QAAQ,cAAc,SAC7E,SAAQ,kCAAkC;EAG5C,MAAM,aAAa,MAAM,0BAA0B,QAAQ;AAC3D,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,QAAQ,YAAY;GAAE,CAAC;GAC5D;;AAGF,eAAc,KAAK,mCAAmC,2BAA2B,OAAO,MAAM;EAC5F,IAAI;AACJ,MAAI;GACF,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM;AAC/B,WAAQ,QAAQ,OAAO,SAAS,WAAY,KAA6B,QAAQ,KAAA;UAC3E;AACN,WAAQ,KAAA;;AAEV,MAAI,UAAU,WAAW,UAAU,WACjC,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,mCAAmC;GAAE,EAAE,IAAI;EAE1F,MAAM,SAAS,QAAQ;EACvB,MAAM,SACJ,UAAU,UACN,OAAO,SAAS,MAAM,OAAO,MAAM,IAAI,OACvC,OAAO,SAAS,MAAM,UAAU,MAAM,IAAI;AAChD,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IAAE;IAAO;IAAQ,QAAQ,SAAU,WAAsB;IAAkB;GACrF,CAAC;GACF;;AAGF,eAAc,KAAK,4CAA4C,2BAA2B,OAAO,MAAM;EAErG,MAAM,SADS,QAAQ,cACD,QAAQ,UAAU,SAAS,OAAO,QAAQ,MAAM,IAAI;AAC1E,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IAAE;IAAQ,QAAQ,SAAU,WAAsB;IAAkB;GAC9E,CAAC;GACF;;AAGF,eAAc,KAAK,wCAAwC,2BAA2B,OAAO,MAAM;EACjG,IAAI,QAAQ;AACZ,MAAI;GACF,MAAM,OAAO,MAAM,EAAE,IAAI,MAAM;AAC/B,OAAI,QAAQ,OAAO,SAAS,YAAY,OAAQ,KAA6B,UAAU,SACrF,SAAQ,KAAK,MAAO,KAA2B,MAAM;UAEjD;AACN,WAAQ;;EAEV,MAAM,YAAY,QAAQ,cAAc,OAAO,KAAK,QAAQ,aAAa,EAAE;AAC3E,MAAI,QAAQ,KAAK,SAAS,UAAU,OAClC,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,0BAA0B;GAAE,EAAE,IAAI;EAEjF,MAAM,SAAS,UAAU,QAAQ,QAAQ,MAAM,IAAI;AACnD,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IAAE;IAAO;IAAQ,QAAQ,SAAU,WAAsB;IAAkB;GACrF,CAAC;GACF"}

package/dist/src/gateway/hono/routes/dreaming.js

@@ -5,8 +5,8 @@ import { getWorkspacePath } from "../../../config/workspace-path-helpers.js";
 import { parseDreamingLastRunFile } from "../../../agent/memory/dreaming/last-run.js";
 import { readDreamingEvents } from "../../../agent/memory/dreaming/events.js";
 import { previewDreamingDeepPromotion } from "../../../agent/memory/dreaming/preview.js";
-import path from "node:path";
 import fs from "node:fs/promises";
+import path from "node:path";
 //#region src/gateway/hono/routes/dreaming.ts
 function isRecord(v) {
 	return v !== null && typeof v === "object" && !Array.isArray(v);

package/dist/src/gateway/hono/routes/goals.js

@@ -9,7 +9,7 @@ function isGoalAction(x) {
 }
 /** Webchat persistent `/goal` REST API. */
 function registerGoalsRoutes(authenticated, deps) {
-	const sm = deps.service.sessionManagerInstance;
+	const sm = deps.service.sessionIndexInstance;
 	const cfg = () => deps.service.currentConfig;
 	authenticated.get("/api/goals/webchat", async (c) => {
 		const sessionKey = c.req.query("sessionKey")?.trim();

package/dist/src/gateway/hono/routes/goals.js.map

@@ -1 +1 @@
-{"version":3,"file":"goals.js","names":[],"sources":["../../../../../src/gateway/hono/routes/goals.ts"],"sourcesContent":["import type { Hono } from 'hono';\n\nimport {\n  defaultMaxTurns,\n  mergeCustomDataPatch,\n  readPersistentGoal,\n  serializePersistentGoal,\n  PERSISTENT_GOAL_CUSTOM_KEY,\n} from '../../../agent/goals/state.js';\nimport {\n  applyPersistentGoalUserAction,\n  type PersistentGoalUserAction,\n} from '../../../agent/goals/patch-from-user-action.js';\nimport { mergePersistentGoalUiLocale, normalizeGoalUiLocale } from '../../../agent/goals/goal-locale.js';\nimport { listGoalRuns } from '../../../agent/goals/goal-run-store.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\nimport { applyChecklistUserMutation } from '../../../agent/goals/checklist-user.js';\n\nfunction isGoalAction(x: unknown): x is PersistentGoalUserAction {\n  return x === 'pause' || x === 'resume' || x === 'clear' || x === 'restart';\n}\n\n/** Webchat persistent `/goal` REST API. */\nexport function registerGoalsRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  const sm = deps.service.sessionManagerInstance;\n  const cfg = () => deps.service.currentConfig;\n\n  authenticated.get('/api/goals/webchat', async (c) => {\n    const sessionKey = c.req.query('sessionKey')?.trim();\n    if (!sessionKey) {\n      return c.json({ ok: false, error: 'Missing sessionKey' }, 400);\n    }\n    const uiLocale = normalizeGoalUiLocale(c.req.query('uiLocale'));\n    let m = await sm.getSessionMetadata(sessionKey);\n    if (uiLocale && m) {\n      const merged = mergePersistentGoalUiLocale(m.customData as Record<string, unknown> | undefined, uiLocale);\n      if (merged !== m.customData) {\n        await sm.updateSessionMetadata(sessionKey, { customData: merged });\n        m = await sm.getSessionMetadata(sessionKey);\n      }\n    }\n    const goal = readPersistentGoal(m?.customData as Record<string, unknown> | undefined);\n    return c.json({ ok: true, sessionKey, persistentGoal: goal });\n  });\n\n  authenticated.get('/api/goals/webchat/runs', async (c) => {\n    const sessionKey = c.req.query('sessionKey')?.trim();\n    if (!sessionKey) {\n      return c.json({ ok: false, error: 'Missing sessionKey' }, 400);\n    }\n    const limitRaw = c.req.query('limit')?.trim();\n    let limit = 50;\n    if (limitRaw) {\n      const n = Number.parseInt(limitRaw, 10);\n      if (Number.isFinite(n)) {\n        limit = Math.min(500, Math.max(1, n));\n      }\n    }\n    const runs = await listGoalRuns(cfg(), sessionKey, { limit });\n    return c.json({ ok: true, sessionKey, runs });\n  });\n\n  authenticated.post('/api/goals/webchat', async (c) => {\n    const body = (await c.req.json().catch(() => ({}))) as Record<string, unknown>;\n    const sessionKey = typeof body.sessionKey === 'string' ? body.sessionKey.trim() : '';\n    if (!sessionKey) {\n      return c.json({ ok: false, error: 'Missing sessionKey' }, 400);\n    }\n\n    const goalsSlice = cfg().goals;\n    const actionRaw = body.action ?? (body.clear === true ? 'clear' : undefined);\n    if (isGoalAction(actionRaw)) {\n      const meta = await sm.getSessionMetadata(sessionKey);\n      if (!meta) {\n        return c.json({ ok: false, error: 'Session not found' }, 404);\n      }\n      const applied = applyPersistentGoalUserAction(\n        meta.customData as Record<string, unknown> | undefined,\n        actionRaw,\n        goalsSlice,\n      );\n      if (applied.kind === 'error') {\n        return c.json({ ok: false, error: applied.error }, 400);\n      }\n      if (applied.kind === 'noop') {\n        const persistentGoal = readPersistentGoal(meta.customData as Record<string, unknown> | undefined);\n        return c.json({ ok: true, sessionKey, noop: true, message: applied.message, persistentGoal });\n      }\n      const uiLocale = normalizeGoalUiLocale(body.uiLocale);\n      const customData =\n        uiLocale != null\n          ? (mergePersistentGoalUiLocale(applied.customData, uiLocale) ?? applied.customData)\n          : applied.customData;\n      await sm.updateSessionMetadata(sessionKey, { customData });\n      const m2 = await sm.getSessionMetadata(sessionKey);\n      const persistentGoal = readPersistentGoal(m2?.customData as Record<string, unknown> | undefined);\n      if (applied.kickoff) {\n        deps.service.enqueueWebchatPersistentGoalKickoff(sessionKey, applied.kickoff);\n      }\n      return c.json({ ok: true, sessionKey, action: actionRaw, persistentGoal });\n    }\n\n    if (body.clear === true) {\n      const meta = await sm.getSessionMetadata(sessionKey);\n      if (!meta) {\n        return c.json({ ok: false, error: 'Session not found' }, 404);\n      }\n      const base = { ...(meta.customData as Record<string, unknown> | undefined) };\n      delete base[PERSISTENT_GOAL_CUSTOM_KEY];\n      await sm.updateSessionMetadata(sessionKey, { customData: base });\n      return c.json({ ok: true, sessionKey, cleared: true });\n    }\n    const goalText = typeof body.goalText === 'string' ? body.goalText.trim() : '';\n    if (!goalText) {\n      return c.json({ ok: false, error: 'Missing goalText (or set clear:true)' }, 400);\n    }\n    const meta = await sm.getSessionMetadata(sessionKey);\n    if (!meta) {\n      return c.json({ ok: false, error: 'Session not found' }, 404);\n    }\n    const maxTurns =\n      typeof body.maxTurns === 'number' && Number.isFinite(body.maxTurns)\n        ? Math.max(1, Math.min(500, Math.floor(body.maxTurns)))\n        : defaultMaxTurns(cfg().goals);\n    const judgeModelRef =\n      typeof body.judgeModelRef === 'string' && body.judgeModelRef.trim()\n        ? body.judgeModelRef.trim()\n        : typeof cfg().goals?.judgeModelRef === 'string'\n          ? cfg().goals!.judgeModelRef!.trim()\n          : undefined;\n\n    const uiLocale = normalizeGoalUiLocale(body.uiLocale);\n\n    const next = {\n      goal: goalText,\n      status: 'active' as const,\n      turnsUsed: 0,\n      maxTurns,\n      createdAt: Date.now(),\n      lastTurnAt: 0,\n      decomposed: false,\n      consecutiveParseFailures: 0,\n      ...(judgeModelRef ? { judgeModelRef } : {}),\n      ...(uiLocale ? { uiLocale } : {}),\n    };\n\n    const base = { ...(meta.customData as Record<string, unknown> | undefined) };\n    const customData = mergeCustomDataPatch(base, {\n      [PERSISTENT_GOAL_CUSTOM_KEY]: serializePersistentGoal(next),\n    });\n    await sm.updateSessionMetadata(sessionKey, { customData });\n    const m2 = await sm.getSessionMetadata(sessionKey);\n    const persistentGoal = readPersistentGoal(m2?.customData as Record<string, unknown> | undefined);\n    deps.service.enqueueWebchatPersistentGoalKickoff(sessionKey, goalText);\n    return c.json({ ok: true, sessionKey, persistentGoal });\n  });\n\n  /** Checklist CRUD for standing goals (`/subgoal` parity for webchat). */\n  authenticated.post('/api/goals/webchat/checklist', async (c) => {\n    const body = (await c.req.json().catch(() => ({}))) as Record<string, unknown>;\n    const sessionKey = typeof body.sessionKey === 'string' ? body.sessionKey.trim() : '';\n    if (!sessionKey) {\n      return c.json({ ok: false, error: 'Missing sessionKey' }, 400);\n    }\n    const op = typeof body.op === 'string' ? body.op.trim().toLowerCase() : '';\n    const meta = await sm.getSessionMetadata(sessionKey);\n    if (!meta) {\n      return c.json({ ok: false, error: 'Session not found' }, 404);\n    }\n\n    let mutation: ReturnType<typeof applyChecklistUserMutation> | null = null;\n    if (op === 'reset') {\n      mutation = applyChecklistUserMutation(meta.customData as Record<string, unknown> | undefined, {\n        type: 'reset',\n      });\n    } else if (op === 'add') {\n      const text = typeof body.text === 'string' ? body.text : '';\n      mutation = applyChecklistUserMutation(meta.customData as Record<string, unknown> | undefined, {\n        type: 'add',\n        text,\n      });\n    } else if (op === 'remove') {\n      const index =\n        typeof body.index === 'number' && Number.isFinite(body.index) ? Math.floor(body.index) : undefined;\n      if (index === undefined || index < 1) {\n        return c.json({ ok: false, error: 'Missing or invalid index (1-based)' }, 400);\n      }\n      mutation = applyChecklistUserMutation(meta.customData as Record<string, unknown> | undefined, {\n        type: 'remove',\n        index1Based: index,\n      });\n    } else if (op === 'mark') {\n      const index =\n        typeof body.index === 'number' && Number.isFinite(body.index) ? Math.floor(body.index) : undefined;\n      const status = typeof body.status === 'string' ? body.status.trim().toLowerCase() : '';\n      if (index === undefined || index < 1) {\n        return c.json({ ok: false, error: 'Missing or invalid index (1-based)' }, 400);\n      }\n      if (status !== 'pending' && status !== 'completed' && status !== 'impossible') {\n        return c.json({ ok: false, error: 'status must be pending, completed, or impossible' }, 400);\n      }\n      mutation = applyChecklistUserMutation(meta.customData as Record<string, unknown> | undefined, {\n        type: 'mark',\n        index1Based: index,\n        status,\n      });\n    } else {\n      return c.json({ ok: false, error: 'Invalid op (add|remove|mark|reset)' }, 400);\n    }\n\n    if (mutation.kind === 'error') {\n      return c.json({ ok: false, error: mutation.error }, 400);\n    }\n    if (mutation.kind === 'noop') {\n      const persistentGoal = readPersistentGoal(meta.customData as Record<string, unknown> | undefined);\n      return c.json({ ok: true, sessionKey, noop: true, message: mutation.message, persistentGoal });\n    }\n    const uiLocale = normalizeGoalUiLocale(body.uiLocale);\n    const customData =\n      uiLocale != null\n        ? (mergePersistentGoalUiLocale(mutation.customData, uiLocale) ?? mutation.customData)\n        : mutation.customData;\n    await sm.updateSessionMetadata(sessionKey, { customData });\n    const m2 = await sm.getSessionMetadata(sessionKey);\n    const persistentGoal = readPersistentGoal(m2?.customData as Record<string, unknown> | undefined);\n    return c.json({ ok: true, sessionKey, op, persistentGoal });\n  });\n}\n"],"mappings":";;;;;;AAkBA,SAAS,aAAa,GAA2C;AAC/D,QAAO,MAAM,WAAW,MAAM,YAAY,MAAM,WAAW,MAAM;;;AAInE,SAAgB,oBAAoB,eAAqB,MAAoC;CAC3F,MAAM,KAAK,KAAK,QAAQ;CACxB,MAAM,YAAY,KAAK,QAAQ;AAE/B,eAAc,IAAI,sBAAsB,OAAO,MAAM;EACnD,MAAM,aAAa,EAAE,IAAI,MAAM,aAAa,EAAE,MAAM;AACpD,MAAI,CAAC,WACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAsB,EAAE,IAAI;EAEhE,MAAM,WAAW,sBAAsB,EAAE,IAAI,MAAM,WAAW,CAAC;EAC/D,IAAI,IAAI,MAAM,GAAG,mBAAmB,WAAW;AAC/C,MAAI,YAAY,GAAG;GACjB,MAAM,SAAS,4BAA4B,EAAE,YAAmD,SAAS;AACzG,OAAI,WAAW,EAAE,YAAY;AAC3B,UAAM,GAAG,sBAAsB,YAAY,EAAE,YAAY,QAAQ,CAAC;AAClE,QAAI,MAAM,GAAG,mBAAmB,WAAW;;;EAG/C,MAAM,OAAO,mBAAmB,GAAG,WAAkD;AACrF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM;GAAY,gBAAgB;GAAM,CAAC;GAC7D;AAEF,eAAc,IAAI,2BAA2B,OAAO,MAAM;EACxD,MAAM,aAAa,EAAE,IAAI,MAAM,aAAa,EAAE,MAAM;AACpD,MAAI,CAAC,WACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAsB,EAAE,IAAI;EAEhE,MAAM,WAAW,EAAE,IAAI,MAAM,QAAQ,EAAE,MAAM;EAC7C,IAAI,QAAQ;AACZ,MAAI,UAAU;GACZ,MAAM,IAAI,OAAO,SAAS,UAAU,GAAG;AACvC,OAAI,OAAO,SAAS,EAAE,CACpB,SAAQ,KAAK,IAAI,KAAK,KAAK,IAAI,GAAG,EAAE,CAAC;;EAGzC,MAAM,OAAO,MAAM,aAAa,KAAK,EAAE,YAAY,EAAE,OAAO,CAAC;AAC7D,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM;GAAY;GAAM,CAAC;GAC7C;AAEF,eAAc,KAAK,sBAAsB,OAAO,MAAM;EACpD,MAAM,OAAQ,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EAClD,MAAM,aAAa,OAAO,KAAK,eAAe,WAAW,KAAK,WAAW,MAAM,GAAG;AAClF,MAAI,CAAC,WACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAsB,EAAE,IAAI;EAGhE,MAAM,aAAa,KAAK,CAAC;EACzB,MAAM,YAAY,KAAK,WAAW,KAAK,UAAU,OAAO,UAAU,KAAA;AAClE,MAAI,aAAa,UAAU,EAAE;GAC3B,MAAM,OAAO,MAAM,GAAG,mBAAmB,WAAW;AACpD,OAAI,CAAC,KACH,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAAqB,EAAE,IAAI;GAE/D,MAAM,UAAU,8BACd,KAAK,YACL,WACA,WACD;AACD,OAAI,QAAQ,SAAS,QACnB,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,QAAQ;IAAO,EAAE,IAAI;AAEzD,OAAI,QAAQ,SAAS,QAAQ;IAC3B,MAAM,iBAAiB,mBAAmB,KAAK,WAAkD;AACjG,WAAO,EAAE,KAAK;KAAE,IAAI;KAAM;KAAY,MAAM;KAAM,SAAS,QAAQ;KAAS;KAAgB,CAAC;;GAE/F,MAAM,WAAW,sBAAsB,KAAK,SAAS;GACrD,MAAM,aACJ,YAAY,OACP,4BAA4B,QAAQ,YAAY,SAAS,IAAI,QAAQ,aACtE,QAAQ;AACd,SAAM,GAAG,sBAAsB,YAAY,EAAE,YAAY,CAAC;GAE1D,MAAM,iBAAiB,oBAAmB,MADzB,GAAG,mBAAmB,WAAW,GACJ,WAAkD;AAChG,OAAI,QAAQ,QACV,MAAK,QAAQ,oCAAoC,YAAY,QAAQ,QAAQ;AAE/E,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM;IAAY,QAAQ;IAAW;IAAgB,CAAC;;AAG5E,MAAI,KAAK,UAAU,MAAM;GACvB,MAAM,OAAO,MAAM,GAAG,mBAAmB,WAAW;AACpD,OAAI,CAAC,KACH,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAAqB,EAAE,IAAI;GAE/D,MAAM,OAAO,EAAE,GAAI,KAAK,YAAoD;AAC5E,UAAO,KAAK;AACZ,SAAM,GAAG,sBAAsB,YAAY,EAAE,YAAY,MAAM,CAAC;AAChE,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM;IAAY,SAAS;IAAM,CAAC;;EAExD,MAAM,WAAW,OAAO,KAAK,aAAa,WAAW,KAAK,SAAS,MAAM,GAAG;AAC5E,MAAI,CAAC,SACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAwC,EAAE,IAAI;EAElF,MAAM,OAAO,MAAM,GAAG,mBAAmB,WAAW;AACpD,MAAI,CAAC,KACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAqB,EAAE,IAAI;EAE/D,MAAM,WACJ,OAAO,KAAK,aAAa,YAAY,OAAO,SAAS,KAAK,SAAS,GAC/D,KAAK,IAAI,GAAG,KAAK,IAAI,KAAK,KAAK,MAAM,KAAK,SAAS,CAAC,CAAC,GACrD,gBAAgB,KAAK,CAAC,MAAM;EAClC,MAAM,gBACJ,OAAO,KAAK,kBAAkB,YAAY,KAAK,cAAc,MAAM,GAC/D,KAAK,cAAc,MAAM,GACzB,OAAO,KAAK,CAAC,OAAO,kBAAkB,WACpC,KAAK,CAAC,MAAO,cAAe,MAAM,GAClC,KAAA;EAER,MAAM,WAAW,sBAAsB,KAAK,SAAS;EAErD,MAAM,OAAO;GACX,MAAM;GACN,QAAQ;GACR,WAAW;GACX;GACA,WAAW,KAAK,KAAK;GACrB,YAAY;GACZ,YAAY;GACZ,0BAA0B;GAC1B,GAAI,gBAAgB,EAAE,eAAe,GAAG,EAAE;GAC1C,GAAI,WAAW,EAAE,UAAU,GAAG,EAAE;GACjC;EAGD,MAAM,aAAa,qBAAqB,EADzB,GAAI,KAAK,YACoB,EAAE,GAC3C,6BAA6B,wBAAwB,KAAK,EAC5D,CAAC;AACF,QAAM,GAAG,sBAAsB,YAAY,EAAE,YAAY,CAAC;EAE1D,MAAM,iBAAiB,oBAAmB,MADzB,GAAG,mBAAmB,WAAW,GACJ,WAAkD;AAChG,OAAK,QAAQ,oCAAoC,YAAY,SAAS;AACtE,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM;GAAY;GAAgB,CAAC;GACvD;;AAGF,eAAc,KAAK,gCAAgC,OAAO,MAAM;EAC9D,MAAM,OAAQ,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EAClD,MAAM,aAAa,OAAO,KAAK,eAAe,WAAW,KAAK,WAAW,MAAM,GAAG;AAClF,MAAI,CAAC,WACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAsB,EAAE,IAAI;EAEhE,MAAM,KAAK,OAAO,KAAK,OAAO,WAAW,KAAK,GAAG,MAAM,CAAC,aAAa,GAAG;EACxE,MAAM,OAAO,MAAM,GAAG,mBAAmB,WAAW;AACpD,MAAI,CAAC,KACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAqB,EAAE,IAAI;EAG/D,IAAI,WAAiE;AACrE,MAAI,OAAO,QACT,YAAW,2BAA2B,KAAK,YAAmD,EAC5F,MAAM,SACP,CAAC;WACO,OAAO,OAAO;GACvB,MAAM,OAAO,OAAO,KAAK,SAAS,WAAW,KAAK,OAAO;AACzD,cAAW,2BAA2B,KAAK,YAAmD;IAC5F,MAAM;IACN;IACD,CAAC;aACO,OAAO,UAAU;GAC1B,MAAM,QACJ,OAAO,KAAK,UAAU,YAAY,OAAO,SAAS,KAAK,MAAM,GAAG,KAAK,MAAM,KAAK,MAAM,GAAG,KAAA;AAC3F,OAAI,UAAU,KAAA,KAAa,QAAQ,EACjC,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAAsC,EAAE,IAAI;AAEhF,cAAW,2BAA2B,KAAK,YAAmD;IAC5F,MAAM;IACN,aAAa;IACd,CAAC;aACO,OAAO,QAAQ;GACxB,MAAM,QACJ,OAAO,KAAK,UAAU,YAAY,OAAO,SAAS,KAAK,MAAM,GAAG,KAAK,MAAM,KAAK,MAAM,GAAG,KAAA;GAC3F,MAAM,SAAS,OAAO,KAAK,WAAW,WAAW,KAAK,OAAO,MAAM,CAAC,aAAa,GAAG;AACpF,OAAI,UAAU,KAAA,KAAa,QAAQ,EACjC,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAAsC,EAAE,IAAI;AAEhF,OAAI,WAAW,aAAa,WAAW,eAAe,WAAW,aAC/D,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAAoD,EAAE,IAAI;AAE9F,cAAW,2BAA2B,KAAK,YAAmD;IAC5F,MAAM;IACN,aAAa;IACb;IACD,CAAC;QAEF,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAsC,EAAE,IAAI;AAGhF,MAAI,SAAS,SAAS,QACpB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,SAAS;GAAO,EAAE,IAAI;AAE1D,MAAI,SAAS,SAAS,QAAQ;GAC5B,MAAM,iBAAiB,mBAAmB,KAAK,WAAkD;AACjG,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM;IAAY,MAAM;IAAM,SAAS,SAAS;IAAS;IAAgB,CAAC;;EAEhG,MAAM,WAAW,sBAAsB,KAAK,SAAS;EACrD,MAAM,aACJ,YAAY,OACP,4BAA4B,SAAS,YAAY,SAAS,IAAI,SAAS,aACxE,SAAS;AACf,QAAM,GAAG,sBAAsB,YAAY,EAAE,YAAY,CAAC;EAE1D,MAAM,iBAAiB,oBAAmB,MADzB,GAAG,mBAAmB,WAAW,GACJ,WAAkD;AAChG,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM;GAAY;GAAI;GAAgB,CAAC;GAC3D"}
+{"version":3,"file":"goals.js","names":[],"sources":["../../../../../src/gateway/hono/routes/goals.ts"],"sourcesContent":["import type { Hono } from 'hono';\n\nimport {\n  defaultMaxTurns,\n  mergeCustomDataPatch,\n  readPersistentGoal,\n  serializePersistentGoal,\n  PERSISTENT_GOAL_CUSTOM_KEY,\n} from '../../../agent/goals/state.js';\nimport {\n  applyPersistentGoalUserAction,\n  type PersistentGoalUserAction,\n} from '../../../agent/goals/patch-from-user-action.js';\nimport { mergePersistentGoalUiLocale, normalizeGoalUiLocale } from '../../../agent/goals/goal-locale.js';\nimport { listGoalRuns } from '../../../agent/goals/goal-run-store.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\nimport { applyChecklistUserMutation } from '../../../agent/goals/checklist-user.js';\n\nfunction isGoalAction(x: unknown): x is PersistentGoalUserAction {\n  return x === 'pause' || x === 'resume' || x === 'clear' || x === 'restart';\n}\n\n/** Webchat persistent `/goal` REST API. */\nexport function registerGoalsRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  const sm = deps.service.sessionIndexInstance;\n  const cfg = () => deps.service.currentConfig;\n\n  authenticated.get('/api/goals/webchat', async (c) => {\n    const sessionKey = c.req.query('sessionKey')?.trim();\n    if (!sessionKey) {\n      return c.json({ ok: false, error: 'Missing sessionKey' }, 400);\n    }\n    const uiLocale = normalizeGoalUiLocale(c.req.query('uiLocale'));\n    let m = await sm.getSessionMetadata(sessionKey);\n    if (uiLocale && m) {\n      const merged = mergePersistentGoalUiLocale(m.customData as Record<string, unknown> | undefined, uiLocale);\n      if (merged !== m.customData) {\n        await sm.updateSessionMetadata(sessionKey, { customData: merged });\n        m = await sm.getSessionMetadata(sessionKey);\n      }\n    }\n    const goal = readPersistentGoal(m?.customData as Record<string, unknown> | undefined);\n    return c.json({ ok: true, sessionKey, persistentGoal: goal });\n  });\n\n  authenticated.get('/api/goals/webchat/runs', async (c) => {\n    const sessionKey = c.req.query('sessionKey')?.trim();\n    if (!sessionKey) {\n      return c.json({ ok: false, error: 'Missing sessionKey' }, 400);\n    }\n    const limitRaw = c.req.query('limit')?.trim();\n    let limit = 50;\n    if (limitRaw) {\n      const n = Number.parseInt(limitRaw, 10);\n      if (Number.isFinite(n)) {\n        limit = Math.min(500, Math.max(1, n));\n      }\n    }\n    const runs = await listGoalRuns(cfg(), sessionKey, { limit });\n    return c.json({ ok: true, sessionKey, runs });\n  });\n\n  authenticated.post('/api/goals/webchat', async (c) => {\n    const body = (await c.req.json().catch(() => ({}))) as Record<string, unknown>;\n    const sessionKey = typeof body.sessionKey === 'string' ? body.sessionKey.trim() : '';\n    if (!sessionKey) {\n      return c.json({ ok: false, error: 'Missing sessionKey' }, 400);\n    }\n\n    const goalsSlice = cfg().goals;\n    const actionRaw = body.action ?? (body.clear === true ? 'clear' : undefined);\n    if (isGoalAction(actionRaw)) {\n      const meta = await sm.getSessionMetadata(sessionKey);\n      if (!meta) {\n        return c.json({ ok: false, error: 'Session not found' }, 404);\n      }\n      const applied = applyPersistentGoalUserAction(\n        meta.customData as Record<string, unknown> | undefined,\n        actionRaw,\n        goalsSlice,\n      );\n      if (applied.kind === 'error') {\n        return c.json({ ok: false, error: applied.error }, 400);\n      }\n      if (applied.kind === 'noop') {\n        const persistentGoal = readPersistentGoal(meta.customData as Record<string, unknown> | undefined);\n        return c.json({ ok: true, sessionKey, noop: true, message: applied.message, persistentGoal });\n      }\n      const uiLocale = normalizeGoalUiLocale(body.uiLocale);\n      const customData =\n        uiLocale != null\n          ? (mergePersistentGoalUiLocale(applied.customData, uiLocale) ?? applied.customData)\n          : applied.customData;\n      await sm.updateSessionMetadata(sessionKey, { customData });\n      const m2 = await sm.getSessionMetadata(sessionKey);\n      const persistentGoal = readPersistentGoal(m2?.customData as Record<string, unknown> | undefined);\n      if (applied.kickoff) {\n        deps.service.enqueueWebchatPersistentGoalKickoff(sessionKey, applied.kickoff);\n      }\n      return c.json({ ok: true, sessionKey, action: actionRaw, persistentGoal });\n    }\n\n    if (body.clear === true) {\n      const meta = await sm.getSessionMetadata(sessionKey);\n      if (!meta) {\n        return c.json({ ok: false, error: 'Session not found' }, 404);\n      }\n      const base = { ...(meta.customData as Record<string, unknown> | undefined) };\n      delete base[PERSISTENT_GOAL_CUSTOM_KEY];\n      await sm.updateSessionMetadata(sessionKey, { customData: base });\n      return c.json({ ok: true, sessionKey, cleared: true });\n    }\n    const goalText = typeof body.goalText === 'string' ? body.goalText.trim() : '';\n    if (!goalText) {\n      return c.json({ ok: false, error: 'Missing goalText (or set clear:true)' }, 400);\n    }\n    const meta = await sm.getSessionMetadata(sessionKey);\n    if (!meta) {\n      return c.json({ ok: false, error: 'Session not found' }, 404);\n    }\n    const maxTurns =\n      typeof body.maxTurns === 'number' && Number.isFinite(body.maxTurns)\n        ? Math.max(1, Math.min(500, Math.floor(body.maxTurns)))\n        : defaultMaxTurns(cfg().goals);\n    const judgeModelRef =\n      typeof body.judgeModelRef === 'string' && body.judgeModelRef.trim()\n        ? body.judgeModelRef.trim()\n        : typeof cfg().goals?.judgeModelRef === 'string'\n          ? cfg().goals!.judgeModelRef!.trim()\n          : undefined;\n\n    const uiLocale = normalizeGoalUiLocale(body.uiLocale);\n\n    const next = {\n      goal: goalText,\n      status: 'active' as const,\n      turnsUsed: 0,\n      maxTurns,\n      createdAt: Date.now(),\n      lastTurnAt: 0,\n      decomposed: false,\n      consecutiveParseFailures: 0,\n      ...(judgeModelRef ? { judgeModelRef } : {}),\n      ...(uiLocale ? { uiLocale } : {}),\n    };\n\n    const base = { ...(meta.customData as Record<string, unknown> | undefined) };\n    const customData = mergeCustomDataPatch(base, {\n      [PERSISTENT_GOAL_CUSTOM_KEY]: serializePersistentGoal(next),\n    });\n    await sm.updateSessionMetadata(sessionKey, { customData });\n    const m2 = await sm.getSessionMetadata(sessionKey);\n    const persistentGoal = readPersistentGoal(m2?.customData as Record<string, unknown> | undefined);\n    deps.service.enqueueWebchatPersistentGoalKickoff(sessionKey, goalText);\n    return c.json({ ok: true, sessionKey, persistentGoal });\n  });\n\n  /** Checklist CRUD for standing goals (`/subgoal` parity for webchat). */\n  authenticated.post('/api/goals/webchat/checklist', async (c) => {\n    const body = (await c.req.json().catch(() => ({}))) as Record<string, unknown>;\n    const sessionKey = typeof body.sessionKey === 'string' ? body.sessionKey.trim() : '';\n    if (!sessionKey) {\n      return c.json({ ok: false, error: 'Missing sessionKey' }, 400);\n    }\n    const op = typeof body.op === 'string' ? body.op.trim().toLowerCase() : '';\n    const meta = await sm.getSessionMetadata(sessionKey);\n    if (!meta) {\n      return c.json({ ok: false, error: 'Session not found' }, 404);\n    }\n\n    let mutation: ReturnType<typeof applyChecklistUserMutation> | null = null;\n    if (op === 'reset') {\n      mutation = applyChecklistUserMutation(meta.customData as Record<string, unknown> | undefined, {\n        type: 'reset',\n      });\n    } else if (op === 'add') {\n      const text = typeof body.text === 'string' ? body.text : '';\n      mutation = applyChecklistUserMutation(meta.customData as Record<string, unknown> | undefined, {\n        type: 'add',\n        text,\n      });\n    } else if (op === 'remove') {\n      const index =\n        typeof body.index === 'number' && Number.isFinite(body.index) ? Math.floor(body.index) : undefined;\n      if (index === undefined || index < 1) {\n        return c.json({ ok: false, error: 'Missing or invalid index (1-based)' }, 400);\n      }\n      mutation = applyChecklistUserMutation(meta.customData as Record<string, unknown> | undefined, {\n        type: 'remove',\n        index1Based: index,\n      });\n    } else if (op === 'mark') {\n      const index =\n        typeof body.index === 'number' && Number.isFinite(body.index) ? Math.floor(body.index) : undefined;\n      const status = typeof body.status === 'string' ? body.status.trim().toLowerCase() : '';\n      if (index === undefined || index < 1) {\n        return c.json({ ok: false, error: 'Missing or invalid index (1-based)' }, 400);\n      }\n      if (status !== 'pending' && status !== 'completed' && status !== 'impossible') {\n        return c.json({ ok: false, error: 'status must be pending, completed, or impossible' }, 400);\n      }\n      mutation = applyChecklistUserMutation(meta.customData as Record<string, unknown> | undefined, {\n        type: 'mark',\n        index1Based: index,\n        status,\n      });\n    } else {\n      return c.json({ ok: false, error: 'Invalid op (add|remove|mark|reset)' }, 400);\n    }\n\n    if (mutation.kind === 'error') {\n      return c.json({ ok: false, error: mutation.error }, 400);\n    }\n    if (mutation.kind === 'noop') {\n      const persistentGoal = readPersistentGoal(meta.customData as Record<string, unknown> | undefined);\n      return c.json({ ok: true, sessionKey, noop: true, message: mutation.message, persistentGoal });\n    }\n    const uiLocale = normalizeGoalUiLocale(body.uiLocale);\n    const customData =\n      uiLocale != null\n        ? (mergePersistentGoalUiLocale(mutation.customData, uiLocale) ?? mutation.customData)\n        : mutation.customData;\n    await sm.updateSessionMetadata(sessionKey, { customData });\n    const m2 = await sm.getSessionMetadata(sessionKey);\n    const persistentGoal = readPersistentGoal(m2?.customData as Record<string, unknown> | undefined);\n    return c.json({ ok: true, sessionKey, op, persistentGoal });\n  });\n}\n"],"mappings":";;;;;;AAkBA,SAAS,aAAa,GAA2C;AAC/D,QAAO,MAAM,WAAW,MAAM,YAAY,MAAM,WAAW,MAAM;;;AAInE,SAAgB,oBAAoB,eAAqB,MAAoC;CAC3F,MAAM,KAAK,KAAK,QAAQ;CACxB,MAAM,YAAY,KAAK,QAAQ;AAE/B,eAAc,IAAI,sBAAsB,OAAO,MAAM;EACnD,MAAM,aAAa,EAAE,IAAI,MAAM,aAAa,EAAE,MAAM;AACpD,MAAI,CAAC,WACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAsB,EAAE,IAAI;EAEhE,MAAM,WAAW,sBAAsB,EAAE,IAAI,MAAM,WAAW,CAAC;EAC/D,IAAI,IAAI,MAAM,GAAG,mBAAmB,WAAW;AAC/C,MAAI,YAAY,GAAG;GACjB,MAAM,SAAS,4BAA4B,EAAE,YAAmD,SAAS;AACzG,OAAI,WAAW,EAAE,YAAY;AAC3B,UAAM,GAAG,sBAAsB,YAAY,EAAE,YAAY,QAAQ,CAAC;AAClE,QAAI,MAAM,GAAG,mBAAmB,WAAW;;;EAG/C,MAAM,OAAO,mBAAmB,GAAG,WAAkD;AACrF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM;GAAY,gBAAgB;GAAM,CAAC;GAC7D;AAEF,eAAc,IAAI,2BAA2B,OAAO,MAAM;EACxD,MAAM,aAAa,EAAE,IAAI,MAAM,aAAa,EAAE,MAAM;AACpD,MAAI,CAAC,WACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAsB,EAAE,IAAI;EAEhE,MAAM,WAAW,EAAE,IAAI,MAAM,QAAQ,EAAE,MAAM;EAC7C,IAAI,QAAQ;AACZ,MAAI,UAAU;GACZ,MAAM,IAAI,OAAO,SAAS,UAAU,GAAG;AACvC,OAAI,OAAO,SAAS,EAAE,CACpB,SAAQ,KAAK,IAAI,KAAK,KAAK,IAAI,GAAG,EAAE,CAAC;;EAGzC,MAAM,OAAO,MAAM,aAAa,KAAK,EAAE,YAAY,EAAE,OAAO,CAAC;AAC7D,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM;GAAY;GAAM,CAAC;GAC7C;AAEF,eAAc,KAAK,sBAAsB,OAAO,MAAM;EACpD,MAAM,OAAQ,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EAClD,MAAM,aAAa,OAAO,KAAK,eAAe,WAAW,KAAK,WAAW,MAAM,GAAG;AAClF,MAAI,CAAC,WACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAsB,EAAE,IAAI;EAGhE,MAAM,aAAa,KAAK,CAAC;EACzB,MAAM,YAAY,KAAK,WAAW,KAAK,UAAU,OAAO,UAAU,KAAA;AAClE,MAAI,aAAa,UAAU,EAAE;GAC3B,MAAM,OAAO,MAAM,GAAG,mBAAmB,WAAW;AACpD,OAAI,CAAC,KACH,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAAqB,EAAE,IAAI;GAE/D,MAAM,UAAU,8BACd,KAAK,YACL,WACA,WACD;AACD,OAAI,QAAQ,SAAS,QACnB,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,QAAQ;IAAO,EAAE,IAAI;AAEzD,OAAI,QAAQ,SAAS,QAAQ;IAC3B,MAAM,iBAAiB,mBAAmB,KAAK,WAAkD;AACjG,WAAO,EAAE,KAAK;KAAE,IAAI;KAAM;KAAY,MAAM;KAAM,SAAS,QAAQ;KAAS;KAAgB,CAAC;;GAE/F,MAAM,WAAW,sBAAsB,KAAK,SAAS;GACrD,MAAM,aACJ,YAAY,OACP,4BAA4B,QAAQ,YAAY,SAAS,IAAI,QAAQ,aACtE,QAAQ;AACd,SAAM,GAAG,sBAAsB,YAAY,EAAE,YAAY,CAAC;GAE1D,MAAM,iBAAiB,oBAAmB,MADzB,GAAG,mBAAmB,WAAW,GACJ,WAAkD;AAChG,OAAI,QAAQ,QACV,MAAK,QAAQ,oCAAoC,YAAY,QAAQ,QAAQ;AAE/E,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM;IAAY,QAAQ;IAAW;IAAgB,CAAC;;AAG5E,MAAI,KAAK,UAAU,MAAM;GACvB,MAAM,OAAO,MAAM,GAAG,mBAAmB,WAAW;AACpD,OAAI,CAAC,KACH,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAAqB,EAAE,IAAI;GAE/D,MAAM,OAAO,EAAE,GAAI,KAAK,YAAoD;AAC5E,UAAO,KAAK;AACZ,SAAM,GAAG,sBAAsB,YAAY,EAAE,YAAY,MAAM,CAAC;AAChE,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM;IAAY,SAAS;IAAM,CAAC;;EAExD,MAAM,WAAW,OAAO,KAAK,aAAa,WAAW,KAAK,SAAS,MAAM,GAAG;AAC5E,MAAI,CAAC,SACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAwC,EAAE,IAAI;EAElF,MAAM,OAAO,MAAM,GAAG,mBAAmB,WAAW;AACpD,MAAI,CAAC,KACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAqB,EAAE,IAAI;EAE/D,MAAM,WACJ,OAAO,KAAK,aAAa,YAAY,OAAO,SAAS,KAAK,SAAS,GAC/D,KAAK,IAAI,GAAG,KAAK,IAAI,KAAK,KAAK,MAAM,KAAK,SAAS,CAAC,CAAC,GACrD,gBAAgB,KAAK,CAAC,MAAM;EAClC,MAAM,gBACJ,OAAO,KAAK,kBAAkB,YAAY,KAAK,cAAc,MAAM,GAC/D,KAAK,cAAc,MAAM,GACzB,OAAO,KAAK,CAAC,OAAO,kBAAkB,WACpC,KAAK,CAAC,MAAO,cAAe,MAAM,GAClC,KAAA;EAER,MAAM,WAAW,sBAAsB,KAAK,SAAS;EAErD,MAAM,OAAO;GACX,MAAM;GACN,QAAQ;GACR,WAAW;GACX;GACA,WAAW,KAAK,KAAK;GACrB,YAAY;GACZ,YAAY;GACZ,0BAA0B;GAC1B,GAAI,gBAAgB,EAAE,eAAe,GAAG,EAAE;GAC1C,GAAI,WAAW,EAAE,UAAU,GAAG,EAAE;GACjC;EAGD,MAAM,aAAa,qBAAqB,EADzB,GAAI,KAAK,YACoB,EAAE,GAC3C,6BAA6B,wBAAwB,KAAK,EAC5D,CAAC;AACF,QAAM,GAAG,sBAAsB,YAAY,EAAE,YAAY,CAAC;EAE1D,MAAM,iBAAiB,oBAAmB,MADzB,GAAG,mBAAmB,WAAW,GACJ,WAAkD;AAChG,OAAK,QAAQ,oCAAoC,YAAY,SAAS;AACtE,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM;GAAY;GAAgB,CAAC;GACvD;;AAGF,eAAc,KAAK,gCAAgC,OAAO,MAAM;EAC9D,MAAM,OAAQ,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;EAClD,MAAM,aAAa,OAAO,KAAK,eAAe,WAAW,KAAK,WAAW,MAAM,GAAG;AAClF,MAAI,CAAC,WACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAsB,EAAE,IAAI;EAEhE,MAAM,KAAK,OAAO,KAAK,OAAO,WAAW,KAAK,GAAG,MAAM,CAAC,aAAa,GAAG;EACxE,MAAM,OAAO,MAAM,GAAG,mBAAmB,WAAW;AACpD,MAAI,CAAC,KACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAqB,EAAE,IAAI;EAG/D,IAAI,WAAiE;AACrE,MAAI,OAAO,QACT,YAAW,2BAA2B,KAAK,YAAmD,EAC5F,MAAM,SACP,CAAC;WACO,OAAO,OAAO;GACvB,MAAM,OAAO,OAAO,KAAK,SAAS,WAAW,KAAK,OAAO;AACzD,cAAW,2BAA2B,KAAK,YAAmD;IAC5F,MAAM;IACN;IACD,CAAC;aACO,OAAO,UAAU;GAC1B,MAAM,QACJ,OAAO,KAAK,UAAU,YAAY,OAAO,SAAS,KAAK,MAAM,GAAG,KAAK,MAAM,KAAK,MAAM,GAAG,KAAA;AAC3F,OAAI,UAAU,KAAA,KAAa,QAAQ,EACjC,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAAsC,EAAE,IAAI;AAEhF,cAAW,2BAA2B,KAAK,YAAmD;IAC5F,MAAM;IACN,aAAa;IACd,CAAC;aACO,OAAO,QAAQ;GACxB,MAAM,QACJ,OAAO,KAAK,UAAU,YAAY,OAAO,SAAS,KAAK,MAAM,GAAG,KAAK,MAAM,KAAK,MAAM,GAAG,KAAA;GAC3F,MAAM,SAAS,OAAO,KAAK,WAAW,WAAW,KAAK,OAAO,MAAM,CAAC,aAAa,GAAG;AACpF,OAAI,UAAU,KAAA,KAAa,QAAQ,EACjC,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAAsC,EAAE,IAAI;AAEhF,OAAI,WAAW,aAAa,WAAW,eAAe,WAAW,aAC/D,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAAoD,EAAE,IAAI;AAE9F,cAAW,2BAA2B,KAAK,YAAmD;IAC5F,MAAM;IACN,aAAa;IACb;IACD,CAAC;QAEF,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAsC,EAAE,IAAI;AAGhF,MAAI,SAAS,SAAS,QACpB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,SAAS;GAAO,EAAE,IAAI;AAE1D,MAAI,SAAS,SAAS,QAAQ;GAC5B,MAAM,iBAAiB,mBAAmB,KAAK,WAAkD;AACjG,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM;IAAY,MAAM;IAAM,SAAS,SAAS;IAAS;IAAgB,CAAC;;EAEhG,MAAM,WAAW,sBAAsB,KAAK,SAAS;EACrD,MAAM,aACJ,YAAY,OACP,4BAA4B,SAAS,YAAY,SAAS,IAAI,SAAS,aACxE,SAAS;AACf,QAAM,GAAG,sBAAsB,YAAY,EAAE,YAAY,CAAC;EAE1D,MAAM,iBAAiB,oBAAmB,MADzB,GAAG,mBAAmB,WAAW,GACJ,WAAkD;AAChG,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM;GAAY;GAAI;GAAgB,CAAC;GAC3D"}

package/dist/src/gateway/hono/routes/host-fs.js

@@ -1,8 +1,8 @@
 import { createLogger } from "../../../utils/logger/index.js";
 import { init_logger } from "../../../utils/logger.js";
-import * as os$1 from "node:os";
-import * as path$1 from "node:path";
 import { readdir, realpath, stat } from "node:fs/promises";
+import * as path$1 from "node:path";
+import * as os$1 from "node:os";
 //#region src/gateway/hono/routes/host-fs.ts
 init_logger();
 const log = createLogger("HostFs");

package/dist/src/gateway/hono/routes/lazy-bundles.js

@@ -126,6 +126,14 @@ const AUTHENTICATED_LAZY_ROUTE_BUNDLES = [
 			return { register: registerGoalsRoutes };
 		}
 	},
+	{
+		id: "workflows",
+		match: (path) => startsWithAny(path, ["/api/workflows"]),
+		load: async () => {
+			const { registerWorkflowRoutes } = await import("./workflows.js");
+			return { register: registerWorkflowRoutes };
+		}
+	},
 	{
 		id: "logs",
 		match: (path) => startsWithAny(path, ["/api/logs"]),

package/dist/src/gateway/hono/routes/lazy-bundles.js.map

@@ -1 +1 @@
-{"version":3,"file":"lazy-bundles.js","names":[],"sources":["../../../../../src/gateway/hono/routes/lazy-bundles.ts"],"sourcesContent":["import type { Hono } from 'hono';\n\nimport type { GatewayService } from '../../service.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\n\nexport type AuthenticatedLazyRouteBundle = {\n  id: string;\n  match: (path: string) => boolean;\n  load: () => Promise<{ register: (authenticated: Hono, deps: AuthenticatedRouteDeps) => void }>;\n};\n\nexport type AppLazyRouteBundle = {\n  id: string;\n  prefixes: readonly string[];\n  match: (path: string) => boolean;\n  load: () => Promise<{\n    registerOnApp: (app: Hono, service: GatewayService) => void;\n  }>;\n};\n\nfunction startsWithAny(path: string, prefixes: readonly string[]): boolean {\n  return prefixes.some((prefix) => path === prefix || path.startsWith(`${prefix}/`));\n}\n\nexport const AUTHENTICATED_LAZY_ROUTE_BUNDLES: readonly AuthenticatedLazyRouteBundle[] = [\n  {\n    id: 'workspace',\n    match: (path) => startsWithAny(path, ['/api/workspace']),\n    load: async () => {\n      const { registerWorkspaceRoutes } = await import('./workspace.js');\n      return { register: registerWorkspaceRoutes };\n    },\n  },\n  {\n    id: 'host-fs',\n    match: (path) => startsWithAny(path, ['/api/host/fs']),\n    load: async () => {\n      const { registerHostFsRoutes } = await import('./host-fs.js');\n      return { register: registerHostFsRoutes };\n    },\n  },\n  {\n    id: 'channels',\n    match: (path) => startsWithAny(path, ['/api/channels']),\n    load: async () => {\n      const { registerChannelRoutes } = await import('./channels.js');\n      return { register: registerChannelRoutes };\n    },\n  },\n  {\n    id: 'browser-install',\n    match: (path) =>\n      path === '/api/browser/playwright/install/stream' ||\n      path === '/api/browser/cloakbrowser/install/stream',\n    load: async () => {\n      const { registerBrowserInstallRoutes } = await import('./browser-install.js');\n      return { register: registerBrowserInstallRoutes };\n    },\n  },\n  {\n    id: 'browser',\n    // `browser-install` above already matched the SSE install streams; this\n    // catches the remaining /api/browser/* handlers (extension, cdp,\n    // cloakbrowser doctor/launch/install, playwright doctor/install, cloud).\n    match: (path) => startsWithAny(path, ['/api/browser']),\n    load: async () => {\n      const { registerBrowserRoutes } = await import('./browser.js');\n      return { register: registerBrowserRoutes };\n    },\n  },\n  {\n    id: 'config',\n    match: (path) =>\n      startsWithAny(path, ['/api/config', '/api/heartbeat/trigger']),\n    load: async () => {\n      const { registerConfigRoutes } = await import('./config.js');\n      return { register: registerConfigRoutes };\n    },\n  },\n  {\n    id: 'doctor',\n    match: (path) => startsWithAny(path, ['/api/doctor']),\n    load: async () => {\n      const { registerDoctorRoutes } = await import('./doctor.js');\n      return { register: registerDoctorRoutes };\n    },\n  },\n  {\n    id: 'dreaming',\n    match: (path) => startsWithAny(path, ['/api/dreaming']),\n    load: async () => {\n      const { registerDreamingRoutes } = await import('./dreaming.js');\n      return { register: registerDreamingRoutes };\n    },\n  },\n  {\n    id: 'agents',\n    match: (path) => startsWithAny(path, ['/api/agents', '/api/voice/models']),\n    load: async () => {\n      const { registerAgentsRoutes } = await import('./agents.js');\n      return { register: registerAgentsRoutes };\n    },\n  },\n  {\n    id: 'auth-registry-extensions',\n    match: (path) =>\n      startsWithAny(path, [\n        '/api/auth',\n        '/api/registry',\n        '/api/extensions',\n        '/api/context',\n        '/api/marketplace',\n      ]),\n    load: async () => {\n      const { registerAuthRegistryExtensionsRoutes } = await import('./auth-registry-extensions.js');\n      return { register: registerAuthRegistryExtensionsRoutes };\n    },\n  },\n  {\n    id: 'models',\n    match: (path) =>\n      startsWithAny(path, ['/api/models', '/api/models-json', '/api/providers', '/api/image']),\n    load: async () => {\n      const { registerModelsRoutes } = await import('./models.js');\n      return { register: registerModelsRoutes };\n    },\n  },\n  {\n    id: 'commands-skills',\n    match: (path) => startsWithAny(path, ['/api/commands', '/api/skills']),\n    load: async () => {\n      const { registerCommandsSkillsRoutes } = await import('./commands-skills.js');\n      return { register: registerCommandsSkillsRoutes };\n    },\n  },\n  {\n    id: 'cron',\n    match: (path) => startsWithAny(path, ['/api/cron']),\n    load: async () => {\n      const { registerCronRoutes } = await import('./cron.js');\n      return { register: registerCronRoutes };\n    },\n  },\n  {\n    id: 'goals',\n    match: (path) => startsWithAny(path, ['/api/goals']),\n    load: async () => {\n      const { registerGoalsRoutes } = await import('./goals.js');\n      return { register: registerGoalsRoutes };\n    },\n  },\n  {\n    id: 'logs',\n    match: (path) => startsWithAny(path, ['/api/logs']),\n    load: async () => {\n      const { registerLogsRoutes } = await import('./logs.js');\n      return { register: registerLogsRoutes };\n    },\n  },\n  {\n    id: 'shares',\n    match: (path) => startsWithAny(path, ['/api/shares']),\n    load: async () => {\n      const { registerShareRoutes } = await import('./shares.js');\n      return { register: registerShareRoutes };\n    },\n  },\n  {\n    id: 'site-shares',\n    match: (path) => startsWithAny(path, ['/api/site-shares']),\n    load: async () => {\n      const { registerSiteShareRoutes } = await import('./site-shares.js');\n      return { register: registerSiteShareRoutes };\n    },\n  },\n  {\n    id: 'tunnel',\n    match: (path) => startsWithAny(path, ['/api/tunnel']),\n    load: async () => {\n      const { registerTunnelRoutes } = await import('./tunnel.js');\n      return { register: registerTunnelRoutes };\n    },\n  },\n  {\n    id: 'exposure',\n    match: (path) => startsWithAny(path, ['/api/exposure']),\n    load: async () => {\n      const { registerExposureRoutes } = await import('./exposure.js');\n      return { register: registerExposureRoutes };\n    },\n  },\n  {\n    id: 'extension-gateway',\n    match: (path) => startsWithAny(path, ['/api/gateway']),\n    load: async () => {\n      const { registerExtensionGatewayRoutes } = await import('./extension-gateway.js');\n      return { register: registerExtensionGatewayRoutes };\n    },\n  },\n  {\n    id: 'update',\n    match: (path) => startsWithAny(path, ['/api/update']),\n    load: async () => {\n      const { registerUpdateRoutes } = await import('./update.js');\n      return { register: registerUpdateRoutes };\n    },\n  },\n  {\n    id: 'voice',\n    match: (path) => startsWithAny(path, ['/api/voice']) && path !== '/api/voice/models',\n    load: async () => {\n      const { registerVoiceRoutes } = await import('./voice.js');\n      return { register: registerVoiceRoutes };\n    },\n  },\n  {\n    id: 'mcp',\n    match: (path) => startsWithAny(path, ['/api/mcp']),\n    load: async () => {\n      const { registerMcpRoutes } = await import('./mcp.js');\n      return { register: registerMcpRoutes };\n    },\n  },\n];\n\nexport const APP_LAZY_ROUTE_BUNDLES: readonly AppLazyRouteBundle[] = [\n  {\n    id: 'shares-public',\n    prefixes: ['/s'],\n    match: (path) => startsWithAny(path, ['/s']),\n    load: async () => {\n      const { registerSharePublicRoutes } = await import('./shares.js');\n      return { registerOnApp: registerSharePublicRoutes };\n    },\n  },\n  {\n    id: 'tunnel-public',\n    prefixes: [\n      '/api/tunnel/pair/ping',\n      '/api/tunnel/pair/validate-url',\n      '/api/tunnel/exchange-token',\n    ],\n    match: (path) =>\n      path === '/api/tunnel/exchange-token' ||\n      path === '/api/tunnel/pair/ping' ||\n      path === '/api/tunnel/pair/validate-url',\n    load: async () => {\n      const { registerTunnelPublicRoutes } = await import('./tunnel.js');\n      return { registerOnApp: registerTunnelPublicRoutes };\n    },\n  },\n];\n\nexport function findAuthenticatedLazyRouteBundle(path: string): AuthenticatedLazyRouteBundle | undefined {\n  return AUTHENTICATED_LAZY_ROUTE_BUNDLES.find((bundle) => bundle.match(path));\n}\n"],"mappings":";AAoBA,SAAS,cAAc,MAAc,UAAsC;AACzE,QAAO,SAAS,MAAM,WAAW,SAAS,UAAU,KAAK,WAAW,GAAG,OAAO,GAAG,CAAC;;AAGpF,MAAa,mCAA4E;CACvF;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,iBAAiB,CAAC;EACxD,MAAM,YAAY;GAChB,MAAM,EAAE,4BAA4B,MAAM,OAAO;AACjD,UAAO,EAAE,UAAU,yBAAyB;;EAE/C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,eAAe,CAAC;EACtD,MAAM,YAAY;GAChB,MAAM,EAAE,yBAAyB,MAAM,OAAO;AAC9C,UAAO,EAAE,UAAU,sBAAsB;;EAE5C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,gBAAgB,CAAC;EACvD,MAAM,YAAY;GAChB,MAAM,EAAE,0BAA0B,MAAM,OAAO;AAC/C,UAAO,EAAE,UAAU,uBAAuB;;EAE7C;CACD;EACE,IAAI;EACJ,QAAQ,SACN,SAAS,4CACT,SAAS;EACX,MAAM,YAAY;GAChB,MAAM,EAAE,iCAAiC,MAAM,OAAO;AACtD,UAAO,EAAE,UAAU,8BAA8B;;EAEpD;CACD;EACE,IAAI;EAIJ,QAAQ,SAAS,cAAc,MAAM,CAAC,eAAe,CAAC;EACtD,MAAM,YAAY;GAChB,MAAM,EAAE,0BAA0B,MAAM,OAAO;AAC/C,UAAO,EAAE,UAAU,uBAAuB;;EAE7C;CACD;EACE,IAAI;EACJ,QAAQ,SACN,cAAc,MAAM,CAAC,eAAe,yBAAyB,CAAC;EAChE,MAAM,YAAY;GAChB,MAAM,EAAE,yBAAyB,MAAM,OAAO;AAC9C,UAAO,EAAE,UAAU,sBAAsB;;EAE5C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,cAAc,CAAC;EACrD,MAAM,YAAY;GAChB,MAAM,EAAE,yBAAyB,MAAM,OAAO;AAC9C,UAAO,EAAE,UAAU,sBAAsB;;EAE5C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,gBAAgB,CAAC;EACvD,MAAM,YAAY;GAChB,MAAM,EAAE,2BAA2B,MAAM,OAAO;AAChD,UAAO,EAAE,UAAU,wBAAwB;;EAE9C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,eAAe,oBAAoB,CAAC;EAC1E,MAAM,YAAY;GAChB,MAAM,EAAE,yBAAyB,MAAM,OAAO;AAC9C,UAAO,EAAE,UAAU,sBAAsB;;EAE5C;CACD;EACE,IAAI;EACJ,QAAQ,SACN,cAAc,MAAM;GAClB;GACA;GACA;GACA;GACA;GACD,CAAC;EACJ,MAAM,YAAY;GAChB,MAAM,EAAE,yCAAyC,MAAM,OAAO;AAC9D,UAAO,EAAE,UAAU,sCAAsC;;EAE5D;CACD;EACE,IAAI;EACJ,QAAQ,SACN,cAAc,MAAM;GAAC;GAAe;GAAoB;GAAkB;GAAa,CAAC;EAC1F,MAAM,YAAY;GAChB,MAAM,EAAE,yBAAyB,MAAM,OAAO;AAC9C,UAAO,EAAE,UAAU,sBAAsB;;EAE5C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,iBAAiB,cAAc,CAAC;EACtE,MAAM,YAAY;GAChB,MAAM,EAAE,iCAAiC,MAAM,OAAO;AACtD,UAAO,EAAE,UAAU,8BAA8B;;EAEpD;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,YAAY,CAAC;EACnD,MAAM,YAAY;GAChB,MAAM,EAAE,uBAAuB,MAAM,OAAO;AAC5C,UAAO,EAAE,UAAU,oBAAoB;;EAE1C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,aAAa,CAAC;EACpD,MAAM,YAAY;GAChB,MAAM,EAAE,wBAAwB,MAAM,OAAO;AAC7C,UAAO,EAAE,UAAU,qBAAqB;;EAE3C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,YAAY,CAAC;EACnD,MAAM,YAAY;GAChB,MAAM,EAAE,uBAAuB,MAAM,OAAO;AAC5C,UAAO,EAAE,UAAU,oBAAoB;;EAE1C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,cAAc,CAAC;EACrD,MAAM,YAAY;GAChB,MAAM,EAAE,wBAAwB,MAAM,OAAO;AAC7C,UAAO,EAAE,UAAU,qBAAqB;;EAE3C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,mBAAmB,CAAC;EAC1D,MAAM,YAAY;GAChB,MAAM,EAAE,4BAA4B,MAAM,OAAO;AACjD,UAAO,EAAE,UAAU,yBAAyB;;EAE/C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,cAAc,CAAC;EACrD,MAAM,YAAY;GAChB,MAAM,EAAE,yBAAyB,MAAM,OAAO;AAC9C,UAAO,EAAE,UAAU,sBAAsB;;EAE5C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,gBAAgB,CAAC;EACvD,MAAM,YAAY;GAChB,MAAM,EAAE,2BAA2B,MAAM,OAAO;AAChD,UAAO,EAAE,UAAU,wBAAwB;;EAE9C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,eAAe,CAAC;EACtD,MAAM,YAAY;GAChB,MAAM,EAAE,mCAAmC,MAAM,OAAO;AACxD,UAAO,EAAE,UAAU,gCAAgC;;EAEtD;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,cAAc,CAAC;EACrD,MAAM,YAAY;GAChB,MAAM,EAAE,yBAAyB,MAAM,OAAO;AAC9C,UAAO,EAAE,UAAU,sBAAsB;;EAE5C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,aAAa,CAAC,IAAI,SAAS;EACjE,MAAM,YAAY;GAChB,MAAM,EAAE,wBAAwB,MAAM,OAAO;AAC7C,UAAO,EAAE,UAAU,qBAAqB;;EAE3C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,WAAW,CAAC;EAClD,MAAM,YAAY;GAChB,MAAM,EAAE,sBAAsB,MAAM,OAAO;AAC3C,UAAO,EAAE,UAAU,mBAAmB;;EAEzC;CACF;AAED,MAAa,yBAAwD,CACnE;CACE,IAAI;CACJ,UAAU,CAAC,KAAK;CAChB,QAAQ,SAAS,cAAc,MAAM,CAAC,KAAK,CAAC;CAC5C,MAAM,YAAY;EAChB,MAAM,EAAE,8BAA8B,MAAM,OAAO;AACnD,SAAO,EAAE,eAAe,2BAA2B;;CAEtD,EACD;CACE,IAAI;CACJ,UAAU;EACR;EACA;EACA;EACD;CACD,QAAQ,SACN,SAAS,gCACT,SAAS,2BACT,SAAS;CACX,MAAM,YAAY;EAChB,MAAM,EAAE,+BAA+B,MAAM,OAAO;AACpD,SAAO,EAAE,eAAe,4BAA4B;;CAEvD,CACF;AAED,SAAgB,iCAAiC,MAAwD;AACvG,QAAO,iCAAiC,MAAM,WAAW,OAAO,MAAM,KAAK,CAAC"}
+{"version":3,"file":"lazy-bundles.js","names":[],"sources":["../../../../../src/gateway/hono/routes/lazy-bundles.ts"],"sourcesContent":["import type { Hono } from 'hono';\n\nimport type { GatewayService } from '../../service.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\n\nexport type AuthenticatedLazyRouteBundle = {\n  id: string;\n  match: (path: string) => boolean;\n  load: () => Promise<{ register: (authenticated: Hono, deps: AuthenticatedRouteDeps) => void }>;\n};\n\nexport type AppLazyRouteBundle = {\n  id: string;\n  prefixes: readonly string[];\n  match: (path: string) => boolean;\n  load: () => Promise<{\n    registerOnApp: (app: Hono, service: GatewayService) => void;\n  }>;\n};\n\nfunction startsWithAny(path: string, prefixes: readonly string[]): boolean {\n  return prefixes.some((prefix) => path === prefix || path.startsWith(`${prefix}/`));\n}\n\nexport const AUTHENTICATED_LAZY_ROUTE_BUNDLES: readonly AuthenticatedLazyRouteBundle[] = [\n  {\n    id: 'workspace',\n    match: (path) => startsWithAny(path, ['/api/workspace']),\n    load: async () => {\n      const { registerWorkspaceRoutes } = await import('./workspace.js');\n      return { register: registerWorkspaceRoutes };\n    },\n  },\n  {\n    id: 'host-fs',\n    match: (path) => startsWithAny(path, ['/api/host/fs']),\n    load: async () => {\n      const { registerHostFsRoutes } = await import('./host-fs.js');\n      return { register: registerHostFsRoutes };\n    },\n  },\n  {\n    id: 'channels',\n    match: (path) => startsWithAny(path, ['/api/channels']),\n    load: async () => {\n      const { registerChannelRoutes } = await import('./channels.js');\n      return { register: registerChannelRoutes };\n    },\n  },\n  {\n    id: 'browser-install',\n    match: (path) =>\n      path === '/api/browser/playwright/install/stream' ||\n      path === '/api/browser/cloakbrowser/install/stream',\n    load: async () => {\n      const { registerBrowserInstallRoutes } = await import('./browser-install.js');\n      return { register: registerBrowserInstallRoutes };\n    },\n  },\n  {\n    id: 'browser',\n    // `browser-install` above already matched the SSE install streams; this\n    // catches the remaining /api/browser/* handlers (extension, cdp,\n    // cloakbrowser doctor/launch/install, playwright doctor/install, cloud).\n    match: (path) => startsWithAny(path, ['/api/browser']),\n    load: async () => {\n      const { registerBrowserRoutes } = await import('./browser.js');\n      return { register: registerBrowserRoutes };\n    },\n  },\n  {\n    id: 'config',\n    match: (path) =>\n      startsWithAny(path, ['/api/config', '/api/heartbeat/trigger']),\n    load: async () => {\n      const { registerConfigRoutes } = await import('./config.js');\n      return { register: registerConfigRoutes };\n    },\n  },\n  {\n    id: 'doctor',\n    match: (path) => startsWithAny(path, ['/api/doctor']),\n    load: async () => {\n      const { registerDoctorRoutes } = await import('./doctor.js');\n      return { register: registerDoctorRoutes };\n    },\n  },\n  {\n    id: 'dreaming',\n    match: (path) => startsWithAny(path, ['/api/dreaming']),\n    load: async () => {\n      const { registerDreamingRoutes } = await import('./dreaming.js');\n      return { register: registerDreamingRoutes };\n    },\n  },\n  {\n    id: 'agents',\n    match: (path) => startsWithAny(path, ['/api/agents', '/api/voice/models']),\n    load: async () => {\n      const { registerAgentsRoutes } = await import('./agents.js');\n      return { register: registerAgentsRoutes };\n    },\n  },\n  {\n    id: 'auth-registry-extensions',\n    match: (path) =>\n      startsWithAny(path, [\n        '/api/auth',\n        '/api/registry',\n        '/api/extensions',\n        '/api/context',\n        '/api/marketplace',\n      ]),\n    load: async () => {\n      const { registerAuthRegistryExtensionsRoutes } = await import('./auth-registry-extensions.js');\n      return { register: registerAuthRegistryExtensionsRoutes };\n    },\n  },\n  {\n    id: 'models',\n    match: (path) =>\n      startsWithAny(path, ['/api/models', '/api/models-json', '/api/providers', '/api/image']),\n    load: async () => {\n      const { registerModelsRoutes } = await import('./models.js');\n      return { register: registerModelsRoutes };\n    },\n  },\n  {\n    id: 'commands-skills',\n    match: (path) => startsWithAny(path, ['/api/commands', '/api/skills']),\n    load: async () => {\n      const { registerCommandsSkillsRoutes } = await import('./commands-skills.js');\n      return { register: registerCommandsSkillsRoutes };\n    },\n  },\n  {\n    id: 'cron',\n    match: (path) => startsWithAny(path, ['/api/cron']),\n    load: async () => {\n      const { registerCronRoutes } = await import('./cron.js');\n      return { register: registerCronRoutes };\n    },\n  },\n  {\n    id: 'goals',\n    match: (path) => startsWithAny(path, ['/api/goals']),\n    load: async () => {\n      const { registerGoalsRoutes } = await import('./goals.js');\n      return { register: registerGoalsRoutes };\n    },\n  },\n  {\n    id: 'workflows',\n    match: (path) => startsWithAny(path, ['/api/workflows']),\n    load: async () => {\n      const { registerWorkflowRoutes } = await import('./workflows.js');\n      return { register: registerWorkflowRoutes };\n    },\n  },\n  {\n    id: 'logs',\n    match: (path) => startsWithAny(path, ['/api/logs']),\n    load: async () => {\n      const { registerLogsRoutes } = await import('./logs.js');\n      return { register: registerLogsRoutes };\n    },\n  },\n  {\n    id: 'shares',\n    match: (path) => startsWithAny(path, ['/api/shares']),\n    load: async () => {\n      const { registerShareRoutes } = await import('./shares.js');\n      return { register: registerShareRoutes };\n    },\n  },\n  {\n    id: 'site-shares',\n    match: (path) => startsWithAny(path, ['/api/site-shares']),\n    load: async () => {\n      const { registerSiteShareRoutes } = await import('./site-shares.js');\n      return { register: registerSiteShareRoutes };\n    },\n  },\n  {\n    id: 'tunnel',\n    match: (path) => startsWithAny(path, ['/api/tunnel']),\n    load: async () => {\n      const { registerTunnelRoutes } = await import('./tunnel.js');\n      return { register: registerTunnelRoutes };\n    },\n  },\n  {\n    id: 'exposure',\n    match: (path) => startsWithAny(path, ['/api/exposure']),\n    load: async () => {\n      const { registerExposureRoutes } = await import('./exposure.js');\n      return { register: registerExposureRoutes };\n    },\n  },\n  {\n    id: 'extension-gateway',\n    match: (path) => startsWithAny(path, ['/api/gateway']),\n    load: async () => {\n      const { registerExtensionGatewayRoutes } = await import('./extension-gateway.js');\n      return { register: registerExtensionGatewayRoutes };\n    },\n  },\n  {\n    id: 'update',\n    match: (path) => startsWithAny(path, ['/api/update']),\n    load: async () => {\n      const { registerUpdateRoutes } = await import('./update.js');\n      return { register: registerUpdateRoutes };\n    },\n  },\n  {\n    id: 'voice',\n    match: (path) => startsWithAny(path, ['/api/voice']) && path !== '/api/voice/models',\n    load: async () => {\n      const { registerVoiceRoutes } = await import('./voice.js');\n      return { register: registerVoiceRoutes };\n    },\n  },\n  {\n    id: 'mcp',\n    match: (path) => startsWithAny(path, ['/api/mcp']),\n    load: async () => {\n      const { registerMcpRoutes } = await import('./mcp.js');\n      return { register: registerMcpRoutes };\n    },\n  },\n];\n\nexport const APP_LAZY_ROUTE_BUNDLES: readonly AppLazyRouteBundle[] = [\n  {\n    id: 'shares-public',\n    prefixes: ['/s'],\n    match: (path) => startsWithAny(path, ['/s']),\n    load: async () => {\n      const { registerSharePublicRoutes } = await import('./shares.js');\n      return { registerOnApp: registerSharePublicRoutes };\n    },\n  },\n  {\n    id: 'tunnel-public',\n    prefixes: [\n      '/api/tunnel/pair/ping',\n      '/api/tunnel/pair/validate-url',\n      '/api/tunnel/exchange-token',\n    ],\n    match: (path) =>\n      path === '/api/tunnel/exchange-token' ||\n      path === '/api/tunnel/pair/ping' ||\n      path === '/api/tunnel/pair/validate-url',\n    load: async () => {\n      const { registerTunnelPublicRoutes } = await import('./tunnel.js');\n      return { registerOnApp: registerTunnelPublicRoutes };\n    },\n  },\n];\n\nexport function findAuthenticatedLazyRouteBundle(path: string): AuthenticatedLazyRouteBundle | undefined {\n  return AUTHENTICATED_LAZY_ROUTE_BUNDLES.find((bundle) => bundle.match(path));\n}\n"],"mappings":";AAoBA,SAAS,cAAc,MAAc,UAAsC;AACzE,QAAO,SAAS,MAAM,WAAW,SAAS,UAAU,KAAK,WAAW,GAAG,OAAO,GAAG,CAAC;;AAGpF,MAAa,mCAA4E;CACvF;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,iBAAiB,CAAC;EACxD,MAAM,YAAY;GAChB,MAAM,EAAE,4BAA4B,MAAM,OAAO;AACjD,UAAO,EAAE,UAAU,yBAAyB;;EAE/C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,eAAe,CAAC;EACtD,MAAM,YAAY;GAChB,MAAM,EAAE,yBAAyB,MAAM,OAAO;AAC9C,UAAO,EAAE,UAAU,sBAAsB;;EAE5C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,gBAAgB,CAAC;EACvD,MAAM,YAAY;GAChB,MAAM,EAAE,0BAA0B,MAAM,OAAO;AAC/C,UAAO,EAAE,UAAU,uBAAuB;;EAE7C;CACD;EACE,IAAI;EACJ,QAAQ,SACN,SAAS,4CACT,SAAS;EACX,MAAM,YAAY;GAChB,MAAM,EAAE,iCAAiC,MAAM,OAAO;AACtD,UAAO,EAAE,UAAU,8BAA8B;;EAEpD;CACD;EACE,IAAI;EAIJ,QAAQ,SAAS,cAAc,MAAM,CAAC,eAAe,CAAC;EACtD,MAAM,YAAY;GAChB,MAAM,EAAE,0BAA0B,MAAM,OAAO;AAC/C,UAAO,EAAE,UAAU,uBAAuB;;EAE7C;CACD;EACE,IAAI;EACJ,QAAQ,SACN,cAAc,MAAM,CAAC,eAAe,yBAAyB,CAAC;EAChE,MAAM,YAAY;GAChB,MAAM,EAAE,yBAAyB,MAAM,OAAO;AAC9C,UAAO,EAAE,UAAU,sBAAsB;;EAE5C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,cAAc,CAAC;EACrD,MAAM,YAAY;GAChB,MAAM,EAAE,yBAAyB,MAAM,OAAO;AAC9C,UAAO,EAAE,UAAU,sBAAsB;;EAE5C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,gBAAgB,CAAC;EACvD,MAAM,YAAY;GAChB,MAAM,EAAE,2BAA2B,MAAM,OAAO;AAChD,UAAO,EAAE,UAAU,wBAAwB;;EAE9C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,eAAe,oBAAoB,CAAC;EAC1E,MAAM,YAAY;GAChB,MAAM,EAAE,yBAAyB,MAAM,OAAO;AAC9C,UAAO,EAAE,UAAU,sBAAsB;;EAE5C;CACD;EACE,IAAI;EACJ,QAAQ,SACN,cAAc,MAAM;GAClB;GACA;GACA;GACA;GACA;GACD,CAAC;EACJ,MAAM,YAAY;GAChB,MAAM,EAAE,yCAAyC,MAAM,OAAO;AAC9D,UAAO,EAAE,UAAU,sCAAsC;;EAE5D;CACD;EACE,IAAI;EACJ,QAAQ,SACN,cAAc,MAAM;GAAC;GAAe;GAAoB;GAAkB;GAAa,CAAC;EAC1F,MAAM,YAAY;GAChB,MAAM,EAAE,yBAAyB,MAAM,OAAO;AAC9C,UAAO,EAAE,UAAU,sBAAsB;;EAE5C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,iBAAiB,cAAc,CAAC;EACtE,MAAM,YAAY;GAChB,MAAM,EAAE,iCAAiC,MAAM,OAAO;AACtD,UAAO,EAAE,UAAU,8BAA8B;;EAEpD;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,YAAY,CAAC;EACnD,MAAM,YAAY;GAChB,MAAM,EAAE,uBAAuB,MAAM,OAAO;AAC5C,UAAO,EAAE,UAAU,oBAAoB;;EAE1C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,aAAa,CAAC;EACpD,MAAM,YAAY;GAChB,MAAM,EAAE,wBAAwB,MAAM,OAAO;AAC7C,UAAO,EAAE,UAAU,qBAAqB;;EAE3C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,iBAAiB,CAAC;EACxD,MAAM,YAAY;GAChB,MAAM,EAAE,2BAA2B,MAAM,OAAO;AAChD,UAAO,EAAE,UAAU,wBAAwB;;EAE9C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,YAAY,CAAC;EACnD,MAAM,YAAY;GAChB,MAAM,EAAE,uBAAuB,MAAM,OAAO;AAC5C,UAAO,EAAE,UAAU,oBAAoB;;EAE1C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,cAAc,CAAC;EACrD,MAAM,YAAY;GAChB,MAAM,EAAE,wBAAwB,MAAM,OAAO;AAC7C,UAAO,EAAE,UAAU,qBAAqB;;EAE3C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,mBAAmB,CAAC;EAC1D,MAAM,YAAY;GAChB,MAAM,EAAE,4BAA4B,MAAM,OAAO;AACjD,UAAO,EAAE,UAAU,yBAAyB;;EAE/C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,cAAc,CAAC;EACrD,MAAM,YAAY;GAChB,MAAM,EAAE,yBAAyB,MAAM,OAAO;AAC9C,UAAO,EAAE,UAAU,sBAAsB;;EAE5C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,gBAAgB,CAAC;EACvD,MAAM,YAAY;GAChB,MAAM,EAAE,2BAA2B,MAAM,OAAO;AAChD,UAAO,EAAE,UAAU,wBAAwB;;EAE9C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,eAAe,CAAC;EACtD,MAAM,YAAY;GAChB,MAAM,EAAE,mCAAmC,MAAM,OAAO;AACxD,UAAO,EAAE,UAAU,gCAAgC;;EAEtD;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,cAAc,CAAC;EACrD,MAAM,YAAY;GAChB,MAAM,EAAE,yBAAyB,MAAM,OAAO;AAC9C,UAAO,EAAE,UAAU,sBAAsB;;EAE5C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,aAAa,CAAC,IAAI,SAAS;EACjE,MAAM,YAAY;GAChB,MAAM,EAAE,wBAAwB,MAAM,OAAO;AAC7C,UAAO,EAAE,UAAU,qBAAqB;;EAE3C;CACD;EACE,IAAI;EACJ,QAAQ,SAAS,cAAc,MAAM,CAAC,WAAW,CAAC;EAClD,MAAM,YAAY;GAChB,MAAM,EAAE,sBAAsB,MAAM,OAAO;AAC3C,UAAO,EAAE,UAAU,mBAAmB;;EAEzC;CACF;AAED,MAAa,yBAAwD,CACnE;CACE,IAAI;CACJ,UAAU,CAAC,KAAK;CAChB,QAAQ,SAAS,cAAc,MAAM,CAAC,KAAK,CAAC;CAC5C,MAAM,YAAY;EAChB,MAAM,EAAE,8BAA8B,MAAM,OAAO;AACnD,SAAO,EAAE,eAAe,2BAA2B;;CAEtD,EACD;CACE,IAAI;CACJ,UAAU;EACR;EACA;EACA;EACD;CACD,QAAQ,SACN,SAAS,gCACT,SAAS,2BACT,SAAS;CACX,MAAM,YAAY;EAChB,MAAM,EAAE,+BAA+B,MAAM,OAAO;AACpD,SAAO,EAAE,eAAe,4BAA4B;;CAEvD,CACF;AAED,SAAgB,iCAAiC,MAAwD;AACvG,QAAO,iCAAiC,MAAM,WAAW,OAAO,MAAM,KAAK,CAAC"}

package/dist/src/gateway/hono/routes/models.js

@@ -1,8 +1,8 @@
 import { resolveModelsJsonPath } from "../../../config/paths.js";
+import { CredentialResolver, init_credentials } from "../../../auth/credentials.js";
 import { init_resolve_config_value, testApiKeyResolution } from "../../../config/resolve-config-value.js";
 import { init_models_json, loadModelsJson, saveModelsJson, validateModelsConfig } from "../../../config/models-json.js";
 import { getModelRegistry } from "../../../providers/model-registry.js";
-import { CredentialResolver, init_credentials } from "../../../auth/credentials.js";
 import { getProviderRegistry, init_plugin_registry } from "../../../providers/plugin-registry.js";
 import { PROVIDER_META, getAllModels, getAllProviders, getAvailableModels, getProviderActiveKeySource, init_providers, isProviderConfigured } from "../../../providers/index.js";
 import { getImageGenerationProvider } from "../../../agent/image/generation/provider-registry.js";
@@ -14,6 +14,11 @@ init_resolve_config_value();
 init_providers();
 init_credentials();
 init_plugin_registry();
+function readModelsJsonProviderApiKey(providerId) {
+	const { config } = loadModelsJson(resolveModelsJsonPath());
+	const key = (config.providers?.[providerId.trim()])?.apiKey;
+	return typeof key === "string" && key.trim() ? key.trim() : void 0;
+}
 /** Plaintext key only when persisted under `cfg.providers.<id>.apiKey` (not env / credential store). */
 function readProviderApiKeyFromConfigFileOnly(cfg, providerId) {
 	const id = providerId.trim().toLowerCase();
@@ -22,6 +27,18 @@ function readProviderApiKeyFromConfigFileOnly(cfg, providerId) {
 	const k = bucket.apiKey;
 	return typeof k === "string" && k.trim() ? k.trim() : void 0;
 }
+/** Extension id from manifest `providers[]` (e.g. provider `demo` → extension `demo-provider`). */
+function resolveExtensionIdForProvider(service, providerId) {
+	const loader = service.getExtensionLoader();
+	if (!loader) return void 0;
+	return loader.buildManifestRegistry().findByProvider(providerId)?.id;
+}
+/** Effective LLM REST base URL for a provider (models.json overrides included). */
+function resolveProviderApiBaseUrl(providerId) {
+	const model = getModelRegistry().getAll().find((m) => m.provider === providerId);
+	if (!model?.baseUrl || model.baseUrl === "extension://provider-plugin") return void 0;
+	return model.baseUrl;
+}
 function mapPluginModel(providerId, model, available) {
 	return {
 		id: `${providerId}/${model.id}`,
@@ -250,31 +267,77 @@ function registerModelsRoutes(authenticated, deps) {
 		const pluginRegistry = getProviderRegistry();
 		const meta = await Promise.all(providers.map(async (provider) => {
 			const plugin = pluginRegistry.get(provider);
+			const extensionId = plugin ? resolveExtensionIdForProvider(service, provider) : void 0;
 			return {
 				id: provider,
 				name: plugin?.name ?? PROVIDER_META[provider]?.name ?? provider,
 				category: plugin ? "extension" : PROVIDER_META[provider]?.category || "specialty",
 				supportsOAuth: plugin ? false : PROVIDER_META[provider]?.supportsOAuth ?? false,
-				supportsApiKey: plugin ? true : PROVIDER_META[provider]?.supportsApiKey ?? true,
+				supportsApiKey: plugin ? false : PROVIDER_META[provider]?.supportsApiKey ?? true,
 				configured: await isProviderConfigured(provider),
-				activeKeySource: await getProviderActiveKeySource(provider)
+				activeKeySource: await getProviderActiveKeySource(provider),
+				baseUrl: resolveProviderApiBaseUrl(provider),
+				...extensionId ? { extensionId } : {}
 			};
 		}));
 		const knownProviderIds = new Set(providers);
-		for (const plugin of pluginRegistry.listAll()) if (!knownProviderIds.has(plugin.id)) meta.push({
-			id: plugin.id,
-			name: plugin.name,
-			category: "extension",
-			supportsOAuth: false,
-			supportsApiKey: true,
-			configured: true,
-			activeKeySource: "extension"
-		});
+		for (const plugin of pluginRegistry.listAll()) if (!knownProviderIds.has(plugin.id)) {
+			const extensionId = resolveExtensionIdForProvider(service, plugin.id);
+			meta.push({
+				id: plugin.id,
+				name: plugin.name,
+				category: "extension",
+				supportsOAuth: false,
+				supportsApiKey: false,
+				configured: true,
+				activeKeySource: "extension",
+				baseUrl: resolveProviderApiBaseUrl(plugin.id),
+				...extensionId ? { extensionId } : {}
+			});
+		}
 		return c.json({
 			ok: true,
 			payload: { providers: meta }
 		});
 	});
+	/**
+	* POST /api/providers/:providerId/reveal-api-key — plaintext key when stored in the
+	* gateway credential store or models.json (not env vars or OAuth tokens).
+	*/
+	authenticated.post("/api/providers/:providerId/reveal-api-key", strictRateLimitMiddleware, async (c) => {
+		const rawId = c.req.param("providerId")?.trim();
+		if (!rawId) return c.json({
+			ok: false,
+			error: { message: "Missing providerId" }
+		}, 400);
+		const providerId = rawId.toLowerCase();
+		const stored = await new CredentialResolver().revealGatewayStoredApiKey(providerId);
+		if (stored) return c.json({
+			ok: true,
+			payload: {
+				id: providerId,
+				apiKey: stored,
+				source: "credential"
+			}
+		});
+		const fromModelsJson = readModelsJsonProviderApiKey(providerId);
+		if (fromModelsJson) return c.json({
+			ok: true,
+			payload: {
+				id: providerId,
+				apiKey: fromModelsJson,
+				source: "models_json"
+			}
+		});
+		return c.json({
+			ok: true,
+			payload: {
+				id: providerId,
+				apiKey: null,
+				source: "none"
+			}
+		});
+	});
 	authenticated.delete("/api/providers/:providerId/key", strictRateLimitMiddleware, async (c) => {
 		const providerId = c.req.param("providerId");
 		if (!providerId) return c.json({

package/dist/src/gateway/hono/routes/models.js.map

@@ -1 +1 @@
-{"version":3,"file":"models.js","names":["getModelsJsonPath"],"sources":["../../../../../src/gateway/hono/routes/models.ts"],"sourcesContent":["import type { Hono } from 'hono';\n\nimport {\n  getModelsJsonPath,\n  loadModelsJson,\n  saveModelsJson,\n  validateModelsConfig,\n} from '../../../config/models-json.js';\nimport type { Config } from '../../../config/schema.js';\nimport { testApiKeyResolution } from '../../../config/resolve-config-value.js';\nimport {\n  getImageGenerationProvider,\n  listImageGenerationProvidersSummary,\n} from '../../../agent/image/generation/runtime.js';\nimport {\n  getAllModels,\n  getAvailableModels,\n  getModelRegistry,\n  getAllProviders,\n  getProviderActiveKeySource,\n  isProviderConfigured,\n  PROVIDER_META,\n} from '../../../providers/index.js';\nimport { CredentialResolver } from '../../../auth/credentials.js';\nimport { getProviderRegistry } from '../../../providers/plugin-registry.js';\nimport type { ProviderModelDefinition } from '../../../extensions/types/providers.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\nimport { respondStartupUnavailable } from '../lib/startup-unavailable.js';\n\n/** Plaintext key only when persisted under `cfg.providers.<id>.apiKey` (not env / credential store). */\nfunction readProviderApiKeyFromConfigFileOnly(cfg: Config, providerId: string): string | undefined {\n  const id = providerId.trim().toLowerCase();\n  const bucket = cfg.providers?.[id];\n  if (!bucket || typeof bucket !== 'object' || Array.isArray(bucket)) return undefined;\n  const k = (bucket as { apiKey?: unknown }).apiKey;\n  return typeof k === 'string' && k.trim() ? k.trim() : undefined;\n}\n\nfunction mapPluginModel(providerId: string, model: ProviderModelDefinition, available: boolean) {\n  return {\n    id: `${providerId}/${model.id}`,\n    name: model.name,\n    provider: providerId,\n    contextWindow: model.contextWindow ?? 128000,\n    maxTokens: model.maxOutputTokens ?? 4096,\n    reasoning: false,\n    vision: model.supportsImages ?? false,\n    cost: { input: model.pricing?.input ?? 0, output: model.pricing?.output ?? 0 },\n    available,\n    source: 'extension' as const,\n  };\n}\n\nexport function registerModelsRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  const { service, strictRateLimitMiddleware } = deps;\n\n  // GET /api/models-json - Get models.json configuration\n  authenticated.get('/api/models-json', async (c) => {\n    const path = getModelsJsonPath();\n    const { config, error } = loadModelsJson(path);\n    const registry = getModelRegistry();\n    \n    return c.json({\n      ok: true,\n      payload: {\n        config,\n        path,\n        exists: error === undefined,\n        loadError: error || registry.getError(),\n      },\n    });\n  });\n\n  // POST /api/models-json/validate - Validate models.json configuration\n  authenticated.post('/api/models-json/validate', async (c) => {\n    const body = await c.req.json();\n    const { config } = body;\n    \n    const result = validateModelsConfig(config);\n    \n    return c.json({\n      ok: true,\n      payload: result,\n    });\n  });\n\n  // PATCH /api/models-json - Save models.json configuration\n  authenticated.patch('/api/models-json', async (c) => {\n    const body = await c.req.json();\n    const { config } = body;\n    \n    const path = getModelsJsonPath();\n    const result = saveModelsJson(path, config);\n    \n    if (!result.success) {\n      return c.json({ ok: false, error: result.error }, 400);\n    }\n    \n    // Refresh registry\n    const registry = getModelRegistry();\n    registry.refresh();\n    \n    // Emit event\n    service.emit('models-json.updated', { \n      modelCount: registry.getAll().length,\n    });\n    \n    return c.json({ \n      ok: true, \n      payload: { \n        saved: true,\n        modelCount: registry.getAll().length,\n      },\n    });\n  });\n\n  // POST /api/models-json/reload - Hot reload models.json\n  authenticated.post('/api/models-json/reload', async (c) => {\n    const registry = getModelRegistry();\n    registry.refresh();\n    \n    const error = registry.getError();\n    const models = registry.getAll();\n    \n    service.emit('models-json.reloaded', { \n      modelCount: models.length,\n      error: error || undefined,\n    });\n    \n    return c.json({\n      ok: true,\n      payload: {\n        modelCount: models.length,\n        error,\n      },\n    });\n  });\n\n  // POST /api/models-json/test-api-key - Test API key resolution\n  authenticated.post('/api/models-json/test-api-key', async (c) => {\n    const body = await c.req.json();\n    const { value } = body;\n    \n    const result = testApiKeyResolution(value);\n    \n    return c.json({\n      ok: true,\n      payload: result,\n    });\n  });\n\n  // GET /api/models - Get available models (only configured providers)\n  authenticated.get('/api/models', async (c) => {\n    if (!service.isGatewayReady()) {\n      return respondStartupUnavailable(c, 'models.list');\n    }\n    const pluginRegistry = getProviderRegistry();\n    const models = (await getAvailableModels()).map(m => ({\n      id: `${m.provider}/${m.id}`,\n      name: m.name,\n      provider: m.provider,\n      contextWindow: m.contextWindow ?? 128000,\n      maxTokens: m.maxTokens ?? 4096,\n      reasoning: m.reasoning ?? false,\n      vision: m.input?.includes('image') ?? false,\n      cost: {\n        input: m.cost?.input ?? 0,\n        output: m.cost?.output ?? 0,\n      },\n      ...(pluginRegistry.has(m.provider) ? { source: 'extension' as const } : {}),\n    }));\n\n    const existingIds = new Set(models.map(m => m.id));\n    for (const plugin of pluginRegistry.listAll()) {\n      for (const model of plugin.models) {\n        const compositeId = `${plugin.id}/${model.id}`;\n        if (!existingIds.has(compositeId)) {\n          models.push(mapPluginModel(plugin.id, model, true));\n          existingIds.add(compositeId);\n        }\n      }\n    }\n\n    // Sort by provider then name\n    models.sort((a, b) => {\n      if (a.provider !== b.provider) return a.provider.localeCompare(b.provider);\n      return a.name.localeCompare(b.name);\n    });\n\n    return c.json({ ok: true, payload: { models } });\n  });\n\n  // GET /api/image/providers — registered image generation providers and models (not in LLM model registry)\n  authenticated.get('/api/image/providers', (c) => {\n    const cfg = deps.service.currentConfig;\n    const summaries = listImageGenerationProvidersSummary(cfg);\n    const providers = summaries.map((p) => {\n      const provider = getImageGenerationProvider(p.id, cfg);\n      let configured = false;\n      try {\n        configured = provider?.isConfigured?.({ cfg }) === true;\n      } catch {\n        configured = false;\n      }\n      return { ...p, configured };\n    });\n    return c.json({ ok: true, payload: { providers } });\n  });\n\n  // POST /api/image/providers/:id/test — lightweight credential probe; does NOT\n  // hit the vendor (no quota burn). Returns `{ ok, configured, reason }`.\n  authenticated.post('/api/image/providers/:id/test', (c) => {\n    const id = c.req.param('id');\n    const cfg = deps.service.currentConfig;\n    const provider = getImageGenerationProvider(id, cfg);\n    if (!provider) {\n      return c.json(\n        { ok: false, error: { message: `Image generation provider not found: ${id}` } },\n        404,\n      );\n    }\n    let configured = false;\n    let reason: string | undefined;\n    try {\n      configured = provider.isConfigured?.({ cfg }) === true;\n      if (!configured) reason = 'Missing API key (set via config or environment).';\n    } catch (err) {\n      reason = err instanceof Error ? err.message : String(err);\n    }\n    return c.json({\n      ok: true,\n      payload: {\n        id: provider.id,\n        configured,\n        ...(reason ? { reason } : {}),\n        defaultModel: provider.defaultModel ?? null,\n      },\n    });\n  });\n\n  /**\n   * POST /api/image/providers/:id/reveal-api-key — return `cfg.providers.<id>.apiKey` plaintext for the\n   * gateway console (same auth as PATCH /api/config). Does not resolve env vars or credential files.\n   */\n  authenticated.post(\n    '/api/image/providers/:id/reveal-api-key',\n    strictRateLimitMiddleware,\n    async (c) => {\n      const rawId = c.req.param('id');\n      const cfg = deps.service.currentConfig;\n      const provider = getImageGenerationProvider(rawId, cfg);\n      if (!provider) {\n        return c.json(\n          { ok: false, error: { message: `Image generation provider not found: ${rawId}` } },\n          404,\n        );\n      }\n      const apiKey = readProviderApiKeyFromConfigFileOnly(cfg, provider.id);\n      return c.json({\n        ok: true,\n        payload: {\n          id: provider.id,\n          apiKey: apiKey ?? null,\n          source: apiKey ? ('config' as const) : ('none' as const),\n        },\n      });\n    },\n  );\n\n  // GET /api/providers - Get ALL available providers and models\n  authenticated.get('/api/providers', async (c) => {\n    const pluginRegistry = getProviderRegistry();\n    const allModels = getAllModels();\n    const availableModels = await getAvailableModels();\n    const configured = new Set(availableModels.map(m => `${m.provider}/${m.id}`));\n\n    const models = allModels.map(m => ({\n      id: `${m.provider}/${m.id}`,\n      name: m.name,\n      provider: m.provider,\n      contextWindow: m.contextWindow ?? 128000,\n      maxTokens: m.maxTokens ?? 4096,\n      reasoning: m.reasoning ?? false,\n      vision: m.input?.includes('image') ?? false,\n      cost: {\n        input: m.cost?.input ?? 0,\n        output: m.cost?.output ?? 0,\n      },\n      available: configured.has(`${m.provider}/${m.id}`),\n      ...(pluginRegistry.has(m.provider) ? { source: 'extension' as const } : {}),\n    }));\n\n    const existingIds = new Set(models.map(m => m.id));\n    for (const plugin of pluginRegistry.listAll()) {\n      for (const model of plugin.models) {\n        const compositeId = `${plugin.id}/${model.id}`;\n        if (!existingIds.has(compositeId)) {\n          models.push(mapPluginModel(plugin.id, model, configured.has(compositeId)));\n          existingIds.add(compositeId);\n        }\n      }\n    }\n\n    // Sort by provider then name\n    models.sort((a, b) => {\n      if (a.provider !== b.provider) return a.provider.localeCompare(b.provider);\n      return a.name.localeCompare(b.name);\n    });\n\n    return c.json({ ok: true, payload: { models } });\n  });\n\n  // GET /api/providers/meta - Get provider metadata (categories, display names)\n  authenticated.get('/api/providers/meta', async (c) => {\n    const providers = getAllProviders();\n    const pluginRegistry = getProviderRegistry();\n\n    const meta = await Promise.all(\n      providers.map(async (provider) => {\n        const plugin = pluginRegistry.get(provider);\n        return {\n          id: provider,\n          name: plugin?.name ?? PROVIDER_META[provider]?.name ?? provider,\n          category: plugin ? ('extension' as const) : PROVIDER_META[provider]?.category || 'specialty',\n          supportsOAuth: plugin ? false : (PROVIDER_META[provider]?.supportsOAuth ?? false),\n          supportsApiKey: plugin ? true : (PROVIDER_META[provider]?.supportsApiKey ?? true),\n          configured: await isProviderConfigured(provider),\n          activeKeySource: await getProviderActiveKeySource(provider),\n        };\n      }),\n    );\n\n    const knownProviderIds = new Set(providers);\n    for (const plugin of pluginRegistry.listAll()) {\n      if (!knownProviderIds.has(plugin.id)) {\n        meta.push({\n          id: plugin.id,\n          name: plugin.name,\n          category: 'extension',\n          supportsOAuth: false,\n          supportsApiKey: true,\n          configured: true,\n          activeKeySource: 'extension',\n        });\n      }\n    }\n\n    return c.json({ ok: true, payload: { providers: meta } });\n  });\n\n  // DELETE /api/providers/:providerId/key - Remove a provider's stored API key\n  authenticated.delete('/api/providers/:providerId/key', strictRateLimitMiddleware, async (c) => {\n    const providerId = c.req.param('providerId');\n    if (!providerId) {\n      return c.json({ ok: false, error: { message: 'Missing providerId' } }, 400);\n    }\n\n    const normalizedProvider = providerId.toLowerCase();\n    const profileId = `${normalizedProvider}:default`;\n    const resolver = new CredentialResolver();\n\n    try {\n      await resolver.deleteProfile(profileId);\n      return c.json({ ok: true, payload: { deleted: normalizedProvider } });\n    } catch (error) {\n      const errorMessage = error instanceof Error ? error.message : String(error);\n      return c.json({ ok: false, error: { message: `Failed to delete key: ${errorMessage}` } }, 500);\n    }\n  });\n}\n"],"mappings":";;;;;;;;;;;kBAOwC;2BAEuC;gBAa1C;kBAC6B;sBACU;;AAM5E,SAAS,qCAAqC,KAAa,YAAwC;CACjG,MAAM,KAAK,WAAW,MAAM,CAAC,aAAa;CAC1C,MAAM,SAAS,IAAI,YAAY;AAC/B,KAAI,CAAC,UAAU,OAAO,WAAW,YAAY,MAAM,QAAQ,OAAO,CAAE,QAAO,KAAA;CAC3E,MAAM,IAAK,OAAgC;AAC3C,QAAO,OAAO,MAAM,YAAY,EAAE,MAAM,GAAG,EAAE,MAAM,GAAG,KAAA;;AAGxD,SAAS,eAAe,YAAoB,OAAgC,WAAoB;AAC9F,QAAO;EACL,IAAI,GAAG,WAAW,GAAG,MAAM;EAC3B,MAAM,MAAM;EACZ,UAAU;EACV,eAAe,MAAM,iBAAiB;EACtC,WAAW,MAAM,mBAAmB;EACpC,WAAW;EACX,QAAQ,MAAM,kBAAkB;EAChC,MAAM;GAAE,OAAO,MAAM,SAAS,SAAS;GAAG,QAAQ,MAAM,SAAS,UAAU;GAAG;EAC9E;EACA,QAAQ;EACT;;AAGH,SAAgB,qBAAqB,eAAqB,MAAoC;CAC5F,MAAM,EAAE,SAAS,8BAA8B;AAG/C,eAAc,IAAI,oBAAoB,OAAO,MAAM;EACjD,MAAM,OAAOA,uBAAmB;EAChC,MAAM,EAAE,QAAQ,UAAU,eAAe,KAAK;EAC9C,MAAM,WAAW,kBAAkB;AAEnC,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP;IACA;IACA,QAAQ,UAAU,KAAA;IAClB,WAAW,SAAS,SAAS,UAAU;IACxC;GACF,CAAC;GACF;AAGF,eAAc,KAAK,6BAA6B,OAAO,MAAM;EAE3D,MAAM,EAAE,WAAW,MADA,EAAE,IAAI,MAAM;EAG/B,MAAM,SAAS,qBAAqB,OAAO;AAE3C,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;GACV,CAAC;GACF;AAGF,eAAc,MAAM,oBAAoB,OAAO,MAAM;EAEnD,MAAM,EAAE,WAAW,MADA,EAAE,IAAI,MAAM;EAI/B,MAAM,SAAS,eADFA,uBACqB,EAAE,OAAO;AAE3C,MAAI,CAAC,OAAO,QACV,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,OAAO;GAAO,EAAE,IAAI;EAIxD,MAAM,WAAW,kBAAkB;AACnC,WAAS,SAAS;AAGlB,UAAQ,KAAK,uBAAuB,EAClC,YAAY,SAAS,QAAQ,CAAC,QAC/B,CAAC;AAEF,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,OAAO;IACP,YAAY,SAAS,QAAQ,CAAC;IAC/B;GACF,CAAC;GACF;AAGF,eAAc,KAAK,2BAA2B,OAAO,MAAM;EACzD,MAAM,WAAW,kBAAkB;AACnC,WAAS,SAAS;EAElB,MAAM,QAAQ,SAAS,UAAU;EACjC,MAAM,SAAS,SAAS,QAAQ;AAEhC,UAAQ,KAAK,wBAAwB;GACnC,YAAY,OAAO;GACnB,OAAO,SAAS,KAAA;GACjB,CAAC;AAEF,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,YAAY,OAAO;IACnB;IACD;GACF,CAAC;GACF;AAGF,eAAc,KAAK,iCAAiC,OAAO,MAAM;EAE/D,MAAM,EAAE,UAAU,MADC,EAAE,IAAI,MAAM;EAG/B,MAAM,SAAS,qBAAqB,MAAM;AAE1C,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;GACV,CAAC;GACF;AAGF,eAAc,IAAI,eAAe,OAAO,MAAM;AAC5C,MAAI,CAAC,QAAQ,gBAAgB,CAC3B,QAAO,0BAA0B,GAAG,cAAc;EAEpD,MAAM,iBAAiB,qBAAqB;EAC5C,MAAM,UAAU,MAAM,oBAAoB,EAAE,KAAI,OAAM;GACpD,IAAI,GAAG,EAAE,SAAS,GAAG,EAAE;GACvB,MAAM,EAAE;GACR,UAAU,EAAE;GACZ,eAAe,EAAE,iBAAiB;GAClC,WAAW,EAAE,aAAa;GAC1B,WAAW,EAAE,aAAa;GAC1B,QAAQ,EAAE,OAAO,SAAS,QAAQ,IAAI;GACtC,MAAM;IACJ,OAAO,EAAE,MAAM,SAAS;IACxB,QAAQ,EAAE,MAAM,UAAU;IAC3B;GACD,GAAI,eAAe,IAAI,EAAE,SAAS,GAAG,EAAE,QAAQ,aAAsB,GAAG,EAAE;GAC3E,EAAE;EAEH,MAAM,cAAc,IAAI,IAAI,OAAO,KAAI,MAAK,EAAE,GAAG,CAAC;AAClD,OAAK,MAAM,UAAU,eAAe,SAAS,CAC3C,MAAK,MAAM,SAAS,OAAO,QAAQ;GACjC,MAAM,cAAc,GAAG,OAAO,GAAG,GAAG,MAAM;AAC1C,OAAI,CAAC,YAAY,IAAI,YAAY,EAAE;AACjC,WAAO,KAAK,eAAe,OAAO,IAAI,OAAO,KAAK,CAAC;AACnD,gBAAY,IAAI,YAAY;;;AAMlC,SAAO,MAAM,GAAG,MAAM;AACpB,OAAI,EAAE,aAAa,EAAE,SAAU,QAAO,EAAE,SAAS,cAAc,EAAE,SAAS;AAC1E,UAAO,EAAE,KAAK,cAAc,EAAE,KAAK;IACnC;AAEF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,QAAQ;GAAE,CAAC;GAChD;AAGF,eAAc,IAAI,yBAAyB,MAAM;EAC/C,MAAM,MAAM,KAAK,QAAQ;EAEzB,MAAM,YADY,oCAAoC,IAC3B,CAAC,KAAK,MAAM;GACrC,MAAM,WAAW,2BAA2B,EAAE,IAAI,IAAI;GACtD,IAAI,aAAa;AACjB,OAAI;AACF,iBAAa,UAAU,eAAe,EAAE,KAAK,CAAC,KAAK;WAC7C;AACN,iBAAa;;AAEf,UAAO;IAAE,GAAG;IAAG;IAAY;IAC3B;AACF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,WAAW;GAAE,CAAC;GACnD;AAIF,eAAc,KAAK,kCAAkC,MAAM;EACzD,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK;EAC5B,MAAM,MAAM,KAAK,QAAQ;EACzB,MAAM,WAAW,2BAA2B,IAAI,IAAI;AACpD,MAAI,CAAC,SACH,QAAO,EAAE,KACP;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,wCAAwC,MAAM;GAAE,EAC/E,IACD;EAEH,IAAI,aAAa;EACjB,IAAI;AACJ,MAAI;AACF,gBAAa,SAAS,eAAe,EAAE,KAAK,CAAC,KAAK;AAClD,OAAI,CAAC,WAAY,UAAS;WACnB,KAAK;AACZ,YAAS,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;;AAE3D,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,IAAI,SAAS;IACb;IACA,GAAI,SAAS,EAAE,QAAQ,GAAG,EAAE;IAC5B,cAAc,SAAS,gBAAgB;IACxC;GACF,CAAC;GACF;;;;;AAMF,eAAc,KACZ,2CACA,2BACA,OAAO,MAAM;EACX,MAAM,QAAQ,EAAE,IAAI,MAAM,KAAK;EAC/B,MAAM,MAAM,KAAK,QAAQ;EACzB,MAAM,WAAW,2BAA2B,OAAO,IAAI;AACvD,MAAI,CAAC,SACH,QAAO,EAAE,KACP;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,wCAAwC,SAAS;GAAE,EAClF,IACD;EAEH,MAAM,SAAS,qCAAqC,KAAK,SAAS,GAAG;AACrE,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,IAAI,SAAS;IACb,QAAQ,UAAU;IAClB,QAAQ,SAAU,WAAsB;IACzC;GACF,CAAC;GAEL;AAGD,eAAc,IAAI,kBAAkB,OAAO,MAAM;EAC/C,MAAM,iBAAiB,qBAAqB;EAC5C,MAAM,YAAY,cAAc;EAChC,MAAM,kBAAkB,MAAM,oBAAoB;EAClD,MAAM,aAAa,IAAI,IAAI,gBAAgB,KAAI,MAAK,GAAG,EAAE,SAAS,GAAG,EAAE,KAAK,CAAC;EAE7E,MAAM,SAAS,UAAU,KAAI,OAAM;GACjC,IAAI,GAAG,EAAE,SAAS,GAAG,EAAE;GACvB,MAAM,EAAE;GACR,UAAU,EAAE;GACZ,eAAe,EAAE,iBAAiB;GAClC,WAAW,EAAE,aAAa;GAC1B,WAAW,EAAE,aAAa;GAC1B,QAAQ,EAAE,OAAO,SAAS,QAAQ,IAAI;GACtC,MAAM;IACJ,OAAO,EAAE,MAAM,SAAS;IACxB,QAAQ,EAAE,MAAM,UAAU;IAC3B;GACD,WAAW,WAAW,IAAI,GAAG,EAAE,SAAS,GAAG,EAAE,KAAK;GAClD,GAAI,eAAe,IAAI,EAAE,SAAS,GAAG,EAAE,QAAQ,aAAsB,GAAG,EAAE;GAC3E,EAAE;EAEH,MAAM,cAAc,IAAI,IAAI,OAAO,KAAI,MAAK,EAAE,GAAG,CAAC;AAClD,OAAK,MAAM,UAAU,eAAe,SAAS,CAC3C,MAAK,MAAM,SAAS,OAAO,QAAQ;GACjC,MAAM,cAAc,GAAG,OAAO,GAAG,GAAG,MAAM;AAC1C,OAAI,CAAC,YAAY,IAAI,YAAY,EAAE;AACjC,WAAO,KAAK,eAAe,OAAO,IAAI,OAAO,WAAW,IAAI,YAAY,CAAC,CAAC;AAC1E,gBAAY,IAAI,YAAY;;;AAMlC,SAAO,MAAM,GAAG,MAAM;AACpB,OAAI,EAAE,aAAa,EAAE,SAAU,QAAO,EAAE,SAAS,cAAc,EAAE,SAAS;AAC1E,UAAO,EAAE,KAAK,cAAc,EAAE,KAAK;IACnC;AAEF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,QAAQ;GAAE,CAAC;GAChD;AAGF,eAAc,IAAI,uBAAuB,OAAO,MAAM;EACpD,MAAM,YAAY,iBAAiB;EACnC,MAAM,iBAAiB,qBAAqB;EAE5C,MAAM,OAAO,MAAM,QAAQ,IACzB,UAAU,IAAI,OAAO,aAAa;GAChC,MAAM,SAAS,eAAe,IAAI,SAAS;AAC3C,UAAO;IACL,IAAI;IACJ,MAAM,QAAQ,QAAQ,cAAc,WAAW,QAAQ;IACvD,UAAU,SAAU,cAAwB,cAAc,WAAW,YAAY;IACjF,eAAe,SAAS,QAAS,cAAc,WAAW,iBAAiB;IAC3E,gBAAgB,SAAS,OAAQ,cAAc,WAAW,kBAAkB;IAC5E,YAAY,MAAM,qBAAqB,SAAS;IAChD,iBAAiB,MAAM,2BAA2B,SAAS;IAC5D;IACD,CACH;EAED,MAAM,mBAAmB,IAAI,IAAI,UAAU;AAC3C,OAAK,MAAM,UAAU,eAAe,SAAS,CAC3C,KAAI,CAAC,iBAAiB,IAAI,OAAO,GAAG,CAClC,MAAK,KAAK;GACR,IAAI,OAAO;GACX,MAAM,OAAO;GACb,UAAU;GACV,eAAe;GACf,gBAAgB;GAChB,YAAY;GACZ,iBAAiB;GAClB,CAAC;AAIN,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,WAAW,MAAM;GAAE,CAAC;GACzD;AAGF,eAAc,OAAO,kCAAkC,2BAA2B,OAAO,MAAM;EAC7F,MAAM,aAAa,EAAE,IAAI,MAAM,aAAa;AAC5C,MAAI,CAAC,WACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,sBAAsB;GAAE,EAAE,IAAI;EAG7E,MAAM,qBAAqB,WAAW,aAAa;EACnD,MAAM,YAAY,GAAG,mBAAmB;EACxC,MAAM,WAAW,IAAI,oBAAoB;AAEzC,MAAI;AACF,SAAM,SAAS,cAAc,UAAU;AACvC,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,SAAS,oBAAoB;IAAE,CAAC;WAC9D,OAAO;GACd,MAAM,eAAe,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;AAC3E,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS,yBAAyB,gBAAgB;IAAE,EAAE,IAAI;;GAEhG"}
+{"version":3,"file":"models.js","names":["getModelsJsonPath"],"sources":["../../../../../src/gateway/hono/routes/models.ts"],"sourcesContent":["import type { Hono } from 'hono';\n\nimport {\n  getModelsJsonPath,\n  loadModelsJson,\n  saveModelsJson,\n  validateModelsConfig,\n} from '../../../config/models-json.js';\nimport type { Config } from '../../../config/schema.js';\nimport { testApiKeyResolution } from '../../../config/resolve-config-value.js';\nimport {\n  getImageGenerationProvider,\n  listImageGenerationProvidersSummary,\n} from '../../../agent/image/generation/runtime.js';\nimport {\n  EXTENSION_PROVIDER_BASE_URL,\n  getAllModels,\n  getAvailableModels,\n  getModelRegistry,\n  getAllProviders,\n  getProviderActiveKeySource,\n  isProviderConfigured,\n  PROVIDER_META,\n} from '../../../providers/index.js';\nimport { CredentialResolver } from '../../../auth/credentials.js';\nimport { getProviderRegistry } from '../../../providers/plugin-registry.js';\nimport type { ProviderModelDefinition } from '../../../extensions/types/providers.js';\nimport type { GatewayService } from '../../service.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\nimport { respondStartupUnavailable } from '../lib/startup-unavailable.js';\n\nfunction readModelsJsonProviderApiKey(providerId: string): string | undefined {\n  const { config } = loadModelsJson(getModelsJsonPath());\n  const entry = config.providers?.[providerId.trim()];\n  const key = entry?.apiKey;\n  return typeof key === 'string' && key.trim() ? key.trim() : undefined;\n}\n\n/** Plaintext key only when persisted under `cfg.providers.<id>.apiKey` (not env / credential store). */\nfunction readProviderApiKeyFromConfigFileOnly(cfg: Config, providerId: string): string | undefined {\n  const id = providerId.trim().toLowerCase();\n  const bucket = cfg.providers?.[id];\n  if (!bucket || typeof bucket !== 'object' || Array.isArray(bucket)) return undefined;\n  const k = (bucket as { apiKey?: unknown }).apiKey;\n  return typeof k === 'string' && k.trim() ? k.trim() : undefined;\n}\n\n/** Extension id from manifest `providers[]` (e.g. provider `demo` → extension `demo-provider`). */\nfunction resolveExtensionIdForProvider(service: GatewayService, providerId: string): string | undefined {\n  const loader = service.getExtensionLoader();\n  if (!loader) return undefined;\n  return loader.buildManifestRegistry().findByProvider(providerId)?.id;\n}\n\n/** Effective LLM REST base URL for a provider (models.json overrides included). */\nfunction resolveProviderApiBaseUrl(providerId: string): string | undefined {\n  const model = getModelRegistry().getAll().find((m) => m.provider === providerId);\n  if (!model?.baseUrl || model.baseUrl === EXTENSION_PROVIDER_BASE_URL) return undefined;\n  return model.baseUrl;\n}\n\nfunction mapPluginModel(providerId: string, model: ProviderModelDefinition, available: boolean) {\n  return {\n    id: `${providerId}/${model.id}`,\n    name: model.name,\n    provider: providerId,\n    contextWindow: model.contextWindow ?? 128000,\n    maxTokens: model.maxOutputTokens ?? 4096,\n    reasoning: false,\n    vision: model.supportsImages ?? false,\n    cost: { input: model.pricing?.input ?? 0, output: model.pricing?.output ?? 0 },\n    available,\n    source: 'extension' as const,\n  };\n}\n\nexport function registerModelsRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  const { service, strictRateLimitMiddleware } = deps;\n\n  // GET /api/models-json - Get models.json configuration\n  authenticated.get('/api/models-json', async (c) => {\n    const path = getModelsJsonPath();\n    const { config, error } = loadModelsJson(path);\n    const registry = getModelRegistry();\n    \n    return c.json({\n      ok: true,\n      payload: {\n        config,\n        path,\n        exists: error === undefined,\n        loadError: error || registry.getError(),\n      },\n    });\n  });\n\n  // POST /api/models-json/validate - Validate models.json configuration\n  authenticated.post('/api/models-json/validate', async (c) => {\n    const body = await c.req.json();\n    const { config } = body;\n    \n    const result = validateModelsConfig(config);\n    \n    return c.json({\n      ok: true,\n      payload: result,\n    });\n  });\n\n  // PATCH /api/models-json - Save models.json configuration\n  authenticated.patch('/api/models-json', async (c) => {\n    const body = await c.req.json();\n    const { config } = body;\n    \n    const path = getModelsJsonPath();\n    const result = saveModelsJson(path, config);\n    \n    if (!result.success) {\n      return c.json({ ok: false, error: result.error }, 400);\n    }\n    \n    // Refresh registry\n    const registry = getModelRegistry();\n    registry.refresh();\n    \n    // Emit event\n    service.emit('models-json.updated', { \n      modelCount: registry.getAll().length,\n    });\n    \n    return c.json({ \n      ok: true, \n      payload: { \n        saved: true,\n        modelCount: registry.getAll().length,\n      },\n    });\n  });\n\n  // POST /api/models-json/reload - Hot reload models.json\n  authenticated.post('/api/models-json/reload', async (c) => {\n    const registry = getModelRegistry();\n    registry.refresh();\n    \n    const error = registry.getError();\n    const models = registry.getAll();\n    \n    service.emit('models-json.reloaded', { \n      modelCount: models.length,\n      error: error || undefined,\n    });\n    \n    return c.json({\n      ok: true,\n      payload: {\n        modelCount: models.length,\n        error,\n      },\n    });\n  });\n\n  // POST /api/models-json/test-api-key - Test API key resolution\n  authenticated.post('/api/models-json/test-api-key', async (c) => {\n    const body = await c.req.json();\n    const { value } = body;\n    \n    const result = testApiKeyResolution(value);\n    \n    return c.json({\n      ok: true,\n      payload: result,\n    });\n  });\n\n  // GET /api/models - Get available models (only configured providers)\n  authenticated.get('/api/models', async (c) => {\n    if (!service.isGatewayReady()) {\n      return respondStartupUnavailable(c, 'models.list');\n    }\n    const pluginRegistry = getProviderRegistry();\n    const models = (await getAvailableModels()).map(m => ({\n      id: `${m.provider}/${m.id}`,\n      name: m.name,\n      provider: m.provider,\n      contextWindow: m.contextWindow ?? 128000,\n      maxTokens: m.maxTokens ?? 4096,\n      reasoning: m.reasoning ?? false,\n      vision: m.input?.includes('image') ?? false,\n      cost: {\n        input: m.cost?.input ?? 0,\n        output: m.cost?.output ?? 0,\n      },\n      ...(pluginRegistry.has(m.provider) ? { source: 'extension' as const } : {}),\n    }));\n\n    const existingIds = new Set(models.map(m => m.id));\n    for (const plugin of pluginRegistry.listAll()) {\n      for (const model of plugin.models) {\n        const compositeId = `${plugin.id}/${model.id}`;\n        if (!existingIds.has(compositeId)) {\n          models.push(mapPluginModel(plugin.id, model, true));\n          existingIds.add(compositeId);\n        }\n      }\n    }\n\n    // Sort by provider then name\n    models.sort((a, b) => {\n      if (a.provider !== b.provider) return a.provider.localeCompare(b.provider);\n      return a.name.localeCompare(b.name);\n    });\n\n    return c.json({ ok: true, payload: { models } });\n  });\n\n  // GET /api/image/providers — registered image generation providers and models (not in LLM model registry)\n  authenticated.get('/api/image/providers', (c) => {\n    const cfg = deps.service.currentConfig;\n    const summaries = listImageGenerationProvidersSummary(cfg);\n    const providers = summaries.map((p) => {\n      const provider = getImageGenerationProvider(p.id, cfg);\n      let configured = false;\n      try {\n        configured = provider?.isConfigured?.({ cfg }) === true;\n      } catch {\n        configured = false;\n      }\n      return { ...p, configured };\n    });\n    return c.json({ ok: true, payload: { providers } });\n  });\n\n  // POST /api/image/providers/:id/test — lightweight credential probe; does NOT\n  // hit the vendor (no quota burn). Returns `{ ok, configured, reason }`.\n  authenticated.post('/api/image/providers/:id/test', (c) => {\n    const id = c.req.param('id');\n    const cfg = deps.service.currentConfig;\n    const provider = getImageGenerationProvider(id, cfg);\n    if (!provider) {\n      return c.json(\n        { ok: false, error: { message: `Image generation provider not found: ${id}` } },\n        404,\n      );\n    }\n    let configured = false;\n    let reason: string | undefined;\n    try {\n      configured = provider.isConfigured?.({ cfg }) === true;\n      if (!configured) reason = 'Missing API key (set via config or environment).';\n    } catch (err) {\n      reason = err instanceof Error ? err.message : String(err);\n    }\n    return c.json({\n      ok: true,\n      payload: {\n        id: provider.id,\n        configured,\n        ...(reason ? { reason } : {}),\n        defaultModel: provider.defaultModel ?? null,\n      },\n    });\n  });\n\n  /**\n   * POST /api/image/providers/:id/reveal-api-key — return `cfg.providers.<id>.apiKey` plaintext for the\n   * gateway console (same auth as PATCH /api/config). Does not resolve env vars or credential files.\n   */\n  authenticated.post(\n    '/api/image/providers/:id/reveal-api-key',\n    strictRateLimitMiddleware,\n    async (c) => {\n      const rawId = c.req.param('id');\n      const cfg = deps.service.currentConfig;\n      const provider = getImageGenerationProvider(rawId, cfg);\n      if (!provider) {\n        return c.json(\n          { ok: false, error: { message: `Image generation provider not found: ${rawId}` } },\n          404,\n        );\n      }\n      const apiKey = readProviderApiKeyFromConfigFileOnly(cfg, provider.id);\n      return c.json({\n        ok: true,\n        payload: {\n          id: provider.id,\n          apiKey: apiKey ?? null,\n          source: apiKey ? ('config' as const) : ('none' as const),\n        },\n      });\n    },\n  );\n\n  // GET /api/providers - Get ALL available providers and models\n  authenticated.get('/api/providers', async (c) => {\n    const pluginRegistry = getProviderRegistry();\n    const allModels = getAllModels();\n    const availableModels = await getAvailableModels();\n    const configured = new Set(availableModels.map(m => `${m.provider}/${m.id}`));\n\n    const models = allModels.map(m => ({\n      id: `${m.provider}/${m.id}`,\n      name: m.name,\n      provider: m.provider,\n      contextWindow: m.contextWindow ?? 128000,\n      maxTokens: m.maxTokens ?? 4096,\n      reasoning: m.reasoning ?? false,\n      vision: m.input?.includes('image') ?? false,\n      cost: {\n        input: m.cost?.input ?? 0,\n        output: m.cost?.output ?? 0,\n      },\n      available: configured.has(`${m.provider}/${m.id}`),\n      ...(pluginRegistry.has(m.provider) ? { source: 'extension' as const } : {}),\n    }));\n\n    const existingIds = new Set(models.map(m => m.id));\n    for (const plugin of pluginRegistry.listAll()) {\n      for (const model of plugin.models) {\n        const compositeId = `${plugin.id}/${model.id}`;\n        if (!existingIds.has(compositeId)) {\n          models.push(mapPluginModel(plugin.id, model, configured.has(compositeId)));\n          existingIds.add(compositeId);\n        }\n      }\n    }\n\n    // Sort by provider then name\n    models.sort((a, b) => {\n      if (a.provider !== b.provider) return a.provider.localeCompare(b.provider);\n      return a.name.localeCompare(b.name);\n    });\n\n    return c.json({ ok: true, payload: { models } });\n  });\n\n  // GET /api/providers/meta - Get provider metadata (categories, display names)\n  authenticated.get('/api/providers/meta', async (c) => {\n    const providers = getAllProviders();\n    const pluginRegistry = getProviderRegistry();\n\n    const meta = await Promise.all(\n      providers.map(async (provider) => {\n        const plugin = pluginRegistry.get(provider);\n        const extensionId = plugin\n          ? resolveExtensionIdForProvider(service, provider)\n          : undefined;\n        return {\n          id: provider,\n          name: plugin?.name ?? PROVIDER_META[provider]?.name ?? provider,\n          category: plugin ? ('extension' as const) : PROVIDER_META[provider]?.category || 'specialty',\n          supportsOAuth: plugin ? false : (PROVIDER_META[provider]?.supportsOAuth ?? false),\n          supportsApiKey: plugin ? false : (PROVIDER_META[provider]?.supportsApiKey ?? true),\n          configured: await isProviderConfigured(provider),\n          activeKeySource: await getProviderActiveKeySource(provider),\n          baseUrl: resolveProviderApiBaseUrl(provider),\n          ...(extensionId ? { extensionId } : {}),\n        };\n      }),\n    );\n\n    const knownProviderIds = new Set(providers);\n    for (const plugin of pluginRegistry.listAll()) {\n      if (!knownProviderIds.has(plugin.id)) {\n        const extensionId = resolveExtensionIdForProvider(service, plugin.id);\n        meta.push({\n          id: plugin.id,\n          name: plugin.name,\n          category: 'extension',\n          supportsOAuth: false,\n          supportsApiKey: false,\n          configured: true,\n          activeKeySource: 'extension',\n          baseUrl: resolveProviderApiBaseUrl(plugin.id),\n          ...(extensionId ? { extensionId } : {}),\n        });\n      }\n    }\n\n    return c.json({ ok: true, payload: { providers: meta } });\n  });\n\n  /**\n   * POST /api/providers/:providerId/reveal-api-key — plaintext key when stored in the\n   * gateway credential store or models.json (not env vars or OAuth tokens).\n   */\n  authenticated.post(\n    '/api/providers/:providerId/reveal-api-key',\n    strictRateLimitMiddleware,\n    async (c) => {\n      const rawId = c.req.param('providerId')?.trim();\n      if (!rawId) {\n        return c.json({ ok: false, error: { message: 'Missing providerId' } }, 400);\n      }\n      const providerId = rawId.toLowerCase();\n      const resolver = new CredentialResolver();\n      const stored = await resolver.revealGatewayStoredApiKey(providerId);\n      if (stored) {\n        return c.json({\n          ok: true,\n          payload: { id: providerId, apiKey: stored, source: 'credential' as const },\n        });\n      }\n      const fromModelsJson = readModelsJsonProviderApiKey(providerId);\n      if (fromModelsJson) {\n        return c.json({\n          ok: true,\n          payload: { id: providerId, apiKey: fromModelsJson, source: 'models_json' as const },\n        });\n      }\n      return c.json({\n        ok: true,\n        payload: { id: providerId, apiKey: null, source: 'none' as const },\n      });\n    },\n  );\n\n  // DELETE /api/providers/:providerId/key - Remove a provider's stored API key\n  authenticated.delete('/api/providers/:providerId/key', strictRateLimitMiddleware, async (c) => {\n    const providerId = c.req.param('providerId');\n    if (!providerId) {\n      return c.json({ ok: false, error: { message: 'Missing providerId' } }, 400);\n    }\n\n    const normalizedProvider = providerId.toLowerCase();\n    const profileId = `${normalizedProvider}:default`;\n    const resolver = new CredentialResolver();\n\n    try {\n      await resolver.deleteProfile(profileId);\n      return c.json({ ok: true, payload: { deleted: normalizedProvider } });\n    } catch (error) {\n      const errorMessage = error instanceof Error ? error.message : String(error);\n      return c.json({ ok: false, error: { message: `Failed to delete key: ${errorMessage}` } }, 500);\n    }\n  });\n}\n"],"mappings":";;;;;;;;;;;kBAOwC;2BAEuC;gBAc1C;kBAC6B;sBACU;AAM5E,SAAS,6BAA6B,YAAwC;CAC5E,MAAM,EAAE,WAAW,eAAeA,uBAAmB,CAAC;CAEtD,MAAM,OADQ,OAAO,YAAY,WAAW,MAAM,IAC/B;AACnB,QAAO,OAAO,QAAQ,YAAY,IAAI,MAAM,GAAG,IAAI,MAAM,GAAG,KAAA;;;AAI9D,SAAS,qCAAqC,KAAa,YAAwC;CACjG,MAAM,KAAK,WAAW,MAAM,CAAC,aAAa;CAC1C,MAAM,SAAS,IAAI,YAAY;AAC/B,KAAI,CAAC,UAAU,OAAO,WAAW,YAAY,MAAM,QAAQ,OAAO,CAAE,QAAO,KAAA;CAC3E,MAAM,IAAK,OAAgC;AAC3C,QAAO,OAAO,MAAM,YAAY,EAAE,MAAM,GAAG,EAAE,MAAM,GAAG,KAAA;;;AAIxD,SAAS,8BAA8B,SAAyB,YAAwC;CACtG,MAAM,SAAS,QAAQ,oBAAoB;AAC3C,KAAI,CAAC,OAAQ,QAAO,KAAA;AACpB,QAAO,OAAO,uBAAuB,CAAC,eAAe,WAAW,EAAE;;;AAIpE,SAAS,0BAA0B,YAAwC;CACzE,MAAM,QAAQ,kBAAkB,CAAC,QAAQ,CAAC,MAAM,MAAM,EAAE,aAAa,WAAW;AAChF,KAAI,CAAC,OAAO,WAAW,MAAM,YAAA,8BAAyC,QAAO,KAAA;AAC7E,QAAO,MAAM;;AAGf,SAAS,eAAe,YAAoB,OAAgC,WAAoB;AAC9F,QAAO;EACL,IAAI,GAAG,WAAW,GAAG,MAAM;EAC3B,MAAM,MAAM;EACZ,UAAU;EACV,eAAe,MAAM,iBAAiB;EACtC,WAAW,MAAM,mBAAmB;EACpC,WAAW;EACX,QAAQ,MAAM,kBAAkB;EAChC,MAAM;GAAE,OAAO,MAAM,SAAS,SAAS;GAAG,QAAQ,MAAM,SAAS,UAAU;GAAG;EAC9E;EACA,QAAQ;EACT;;AAGH,SAAgB,qBAAqB,eAAqB,MAAoC;CAC5F,MAAM,EAAE,SAAS,8BAA8B;AAG/C,eAAc,IAAI,oBAAoB,OAAO,MAAM;EACjD,MAAM,OAAOA,uBAAmB;EAChC,MAAM,EAAE,QAAQ,UAAU,eAAe,KAAK;EAC9C,MAAM,WAAW,kBAAkB;AAEnC,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP;IACA;IACA,QAAQ,UAAU,KAAA;IAClB,WAAW,SAAS,SAAS,UAAU;IACxC;GACF,CAAC;GACF;AAGF,eAAc,KAAK,6BAA6B,OAAO,MAAM;EAE3D,MAAM,EAAE,WAAW,MADA,EAAE,IAAI,MAAM;EAG/B,MAAM,SAAS,qBAAqB,OAAO;AAE3C,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;GACV,CAAC;GACF;AAGF,eAAc,MAAM,oBAAoB,OAAO,MAAM;EAEnD,MAAM,EAAE,WAAW,MADA,EAAE,IAAI,MAAM;EAI/B,MAAM,SAAS,eADFA,uBACqB,EAAE,OAAO;AAE3C,MAAI,CAAC,OAAO,QACV,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,OAAO;GAAO,EAAE,IAAI;EAIxD,MAAM,WAAW,kBAAkB;AACnC,WAAS,SAAS;AAGlB,UAAQ,KAAK,uBAAuB,EAClC,YAAY,SAAS,QAAQ,CAAC,QAC/B,CAAC;AAEF,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,OAAO;IACP,YAAY,SAAS,QAAQ,CAAC;IAC/B;GACF,CAAC;GACF;AAGF,eAAc,KAAK,2BAA2B,OAAO,MAAM;EACzD,MAAM,WAAW,kBAAkB;AACnC,WAAS,SAAS;EAElB,MAAM,QAAQ,SAAS,UAAU;EACjC,MAAM,SAAS,SAAS,QAAQ;AAEhC,UAAQ,KAAK,wBAAwB;GACnC,YAAY,OAAO;GACnB,OAAO,SAAS,KAAA;GACjB,CAAC;AAEF,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,YAAY,OAAO;IACnB;IACD;GACF,CAAC;GACF;AAGF,eAAc,KAAK,iCAAiC,OAAO,MAAM;EAE/D,MAAM,EAAE,UAAU,MADC,EAAE,IAAI,MAAM;EAG/B,MAAM,SAAS,qBAAqB,MAAM;AAE1C,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;GACV,CAAC;GACF;AAGF,eAAc,IAAI,eAAe,OAAO,MAAM;AAC5C,MAAI,CAAC,QAAQ,gBAAgB,CAC3B,QAAO,0BAA0B,GAAG,cAAc;EAEpD,MAAM,iBAAiB,qBAAqB;EAC5C,MAAM,UAAU,MAAM,oBAAoB,EAAE,KAAI,OAAM;GACpD,IAAI,GAAG,EAAE,SAAS,GAAG,EAAE;GACvB,MAAM,EAAE;GACR,UAAU,EAAE;GACZ,eAAe,EAAE,iBAAiB;GAClC,WAAW,EAAE,aAAa;GAC1B,WAAW,EAAE,aAAa;GAC1B,QAAQ,EAAE,OAAO,SAAS,QAAQ,IAAI;GACtC,MAAM;IACJ,OAAO,EAAE,MAAM,SAAS;IACxB,QAAQ,EAAE,MAAM,UAAU;IAC3B;GACD,GAAI,eAAe,IAAI,EAAE,SAAS,GAAG,EAAE,QAAQ,aAAsB,GAAG,EAAE;GAC3E,EAAE;EAEH,MAAM,cAAc,IAAI,IAAI,OAAO,KAAI,MAAK,EAAE,GAAG,CAAC;AAClD,OAAK,MAAM,UAAU,eAAe,SAAS,CAC3C,MAAK,MAAM,SAAS,OAAO,QAAQ;GACjC,MAAM,cAAc,GAAG,OAAO,GAAG,GAAG,MAAM;AAC1C,OAAI,CAAC,YAAY,IAAI,YAAY,EAAE;AACjC,WAAO,KAAK,eAAe,OAAO,IAAI,OAAO,KAAK,CAAC;AACnD,gBAAY,IAAI,YAAY;;;AAMlC,SAAO,MAAM,GAAG,MAAM;AACpB,OAAI,EAAE,aAAa,EAAE,SAAU,QAAO,EAAE,SAAS,cAAc,EAAE,SAAS;AAC1E,UAAO,EAAE,KAAK,cAAc,EAAE,KAAK;IACnC;AAEF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,QAAQ;GAAE,CAAC;GAChD;AAGF,eAAc,IAAI,yBAAyB,MAAM;EAC/C,MAAM,MAAM,KAAK,QAAQ;EAEzB,MAAM,YADY,oCAAoC,IAC3B,CAAC,KAAK,MAAM;GACrC,MAAM,WAAW,2BAA2B,EAAE,IAAI,IAAI;GACtD,IAAI,aAAa;AACjB,OAAI;AACF,iBAAa,UAAU,eAAe,EAAE,KAAK,CAAC,KAAK;WAC7C;AACN,iBAAa;;AAEf,UAAO;IAAE,GAAG;IAAG;IAAY;IAC3B;AACF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,WAAW;GAAE,CAAC;GACnD;AAIF,eAAc,KAAK,kCAAkC,MAAM;EACzD,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK;EAC5B,MAAM,MAAM,KAAK,QAAQ;EACzB,MAAM,WAAW,2BAA2B,IAAI,IAAI;AACpD,MAAI,CAAC,SACH,QAAO,EAAE,KACP;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,wCAAwC,MAAM;GAAE,EAC/E,IACD;EAEH,IAAI,aAAa;EACjB,IAAI;AACJ,MAAI;AACF,gBAAa,SAAS,eAAe,EAAE,KAAK,CAAC,KAAK;AAClD,OAAI,CAAC,WAAY,UAAS;WACnB,KAAK;AACZ,YAAS,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;;AAE3D,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,IAAI,SAAS;IACb;IACA,GAAI,SAAS,EAAE,QAAQ,GAAG,EAAE;IAC5B,cAAc,SAAS,gBAAgB;IACxC;GACF,CAAC;GACF;;;;;AAMF,eAAc,KACZ,2CACA,2BACA,OAAO,MAAM;EACX,MAAM,QAAQ,EAAE,IAAI,MAAM,KAAK;EAC/B,MAAM,MAAM,KAAK,QAAQ;EACzB,MAAM,WAAW,2BAA2B,OAAO,IAAI;AACvD,MAAI,CAAC,SACH,QAAO,EAAE,KACP;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,wCAAwC,SAAS;GAAE,EAClF,IACD;EAEH,MAAM,SAAS,qCAAqC,KAAK,SAAS,GAAG;AACrE,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,IAAI,SAAS;IACb,QAAQ,UAAU;IAClB,QAAQ,SAAU,WAAsB;IACzC;GACF,CAAC;GAEL;AAGD,eAAc,IAAI,kBAAkB,OAAO,MAAM;EAC/C,MAAM,iBAAiB,qBAAqB;EAC5C,MAAM,YAAY,cAAc;EAChC,MAAM,kBAAkB,MAAM,oBAAoB;EAClD,MAAM,aAAa,IAAI,IAAI,gBAAgB,KAAI,MAAK,GAAG,EAAE,SAAS,GAAG,EAAE,KAAK,CAAC;EAE7E,MAAM,SAAS,UAAU,KAAI,OAAM;GACjC,IAAI,GAAG,EAAE,SAAS,GAAG,EAAE;GACvB,MAAM,EAAE;GACR,UAAU,EAAE;GACZ,eAAe,EAAE,iBAAiB;GAClC,WAAW,EAAE,aAAa;GAC1B,WAAW,EAAE,aAAa;GAC1B,QAAQ,EAAE,OAAO,SAAS,QAAQ,IAAI;GACtC,MAAM;IACJ,OAAO,EAAE,MAAM,SAAS;IACxB,QAAQ,EAAE,MAAM,UAAU;IAC3B;GACD,WAAW,WAAW,IAAI,GAAG,EAAE,SAAS,GAAG,EAAE,KAAK;GAClD,GAAI,eAAe,IAAI,EAAE,SAAS,GAAG,EAAE,QAAQ,aAAsB,GAAG,EAAE;GAC3E,EAAE;EAEH,MAAM,cAAc,IAAI,IAAI,OAAO,KAAI,MAAK,EAAE,GAAG,CAAC;AAClD,OAAK,MAAM,UAAU,eAAe,SAAS,CAC3C,MAAK,MAAM,SAAS,OAAO,QAAQ;GACjC,MAAM,cAAc,GAAG,OAAO,GAAG,GAAG,MAAM;AAC1C,OAAI,CAAC,YAAY,IAAI,YAAY,EAAE;AACjC,WAAO,KAAK,eAAe,OAAO,IAAI,OAAO,WAAW,IAAI,YAAY,CAAC,CAAC;AAC1E,gBAAY,IAAI,YAAY;;;AAMlC,SAAO,MAAM,GAAG,MAAM;AACpB,OAAI,EAAE,aAAa,EAAE,SAAU,QAAO,EAAE,SAAS,cAAc,EAAE,SAAS;AAC1E,UAAO,EAAE,KAAK,cAAc,EAAE,KAAK;IACnC;AAEF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,QAAQ;GAAE,CAAC;GAChD;AAGF,eAAc,IAAI,uBAAuB,OAAO,MAAM;EACpD,MAAM,YAAY,iBAAiB;EACnC,MAAM,iBAAiB,qBAAqB;EAE5C,MAAM,OAAO,MAAM,QAAQ,IACzB,UAAU,IAAI,OAAO,aAAa;GAChC,MAAM,SAAS,eAAe,IAAI,SAAS;GAC3C,MAAM,cAAc,SAChB,8BAA8B,SAAS,SAAS,GAChD,KAAA;AACJ,UAAO;IACL,IAAI;IACJ,MAAM,QAAQ,QAAQ,cAAc,WAAW,QAAQ;IACvD,UAAU,SAAU,cAAwB,cAAc,WAAW,YAAY;IACjF,eAAe,SAAS,QAAS,cAAc,WAAW,iBAAiB;IAC3E,gBAAgB,SAAS,QAAS,cAAc,WAAW,kBAAkB;IAC7E,YAAY,MAAM,qBAAqB,SAAS;IAChD,iBAAiB,MAAM,2BAA2B,SAAS;IAC3D,SAAS,0BAA0B,SAAS;IAC5C,GAAI,cAAc,EAAE,aAAa,GAAG,EAAE;IACvC;IACD,CACH;EAED,MAAM,mBAAmB,IAAI,IAAI,UAAU;AAC3C,OAAK,MAAM,UAAU,eAAe,SAAS,CAC3C,KAAI,CAAC,iBAAiB,IAAI,OAAO,GAAG,EAAE;GACpC,MAAM,cAAc,8BAA8B,SAAS,OAAO,GAAG;AACrE,QAAK,KAAK;IACR,IAAI,OAAO;IACX,MAAM,OAAO;IACb,UAAU;IACV,eAAe;IACf,gBAAgB;IAChB,YAAY;IACZ,iBAAiB;IACjB,SAAS,0BAA0B,OAAO,GAAG;IAC7C,GAAI,cAAc,EAAE,aAAa,GAAG,EAAE;IACvC,CAAC;;AAIN,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,WAAW,MAAM;GAAE,CAAC;GACzD;;;;;AAMF,eAAc,KACZ,6CACA,2BACA,OAAO,MAAM;EACX,MAAM,QAAQ,EAAE,IAAI,MAAM,aAAa,EAAE,MAAM;AAC/C,MAAI,CAAC,MACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,sBAAsB;GAAE,EAAE,IAAI;EAE7E,MAAM,aAAa,MAAM,aAAa;EAEtC,MAAM,SAAS,MAAM,IADA,oBACQ,CAAC,0BAA0B,WAAW;AACnE,MAAI,OACF,QAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IAAE,IAAI;IAAY,QAAQ;IAAQ,QAAQ;IAAuB;GAC3E,CAAC;EAEJ,MAAM,iBAAiB,6BAA6B,WAAW;AAC/D,MAAI,eACF,QAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IAAE,IAAI;IAAY,QAAQ;IAAgB,QAAQ;IAAwB;GACpF,CAAC;AAEJ,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IAAE,IAAI;IAAY,QAAQ;IAAM,QAAQ;IAAiB;GACnE,CAAC;GAEL;AAGD,eAAc,OAAO,kCAAkC,2BAA2B,OAAO,MAAM;EAC7F,MAAM,aAAa,EAAE,IAAI,MAAM,aAAa;AAC5C,MAAI,CAAC,WACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,sBAAsB;GAAE,EAAE,IAAI;EAG7E,MAAM,qBAAqB,WAAW,aAAa;EACnD,MAAM,YAAY,GAAG,mBAAmB;EACxC,MAAM,WAAW,IAAI,oBAAoB;AAEzC,MAAI;AACF,SAAM,SAAS,cAAc,UAAU;AACvC,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,SAAS,oBAAoB;IAAE,CAAC;WAC9D,OAAO;GACd,MAAM,eAAe,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;AAC3E,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS,yBAAyB,gBAAgB;IAAE,EAAE,IAAI;;GAEhG"}

package/dist/src/gateway/hono/routes/sessions.js

@@ -26,7 +26,7 @@ function registerSessionsRoutes(authenticated, deps) {
 				peerKind: "direct",
 				peerId: body.chat_id
 			});
-			await service.sessionManagerInstance.saveMessages(sessionKey, []);
+			await service.sessionIndexInstance.saveMessages(sessionKey, []);
 			const session = await service.sessions.getSession(sessionKey);
 			return c.json({ session }, 201);
 		}
@@ -54,7 +54,7 @@ function registerSessionsRoutes(authenticated, deps) {
 			peerKind: "direct",
 			peerId: chatId
 		});
-		await service.sessionManagerInstance.saveMessages(sessionKey, []);
+		await service.sessionIndexInstance.saveMessages(sessionKey, []);
 		const session = await service.sessions.getSession(sessionKey);
 		return c.json({ session }, 201);
 	});
@@ -162,7 +162,7 @@ function registerSessionsRoutes(authenticated, deps) {
 	});
 	authenticated.post("/api/sessions/:key/transcript/context", async (c) => {
 		const key = c.req.param("key");
-		if (!await service.sessionManagerInstance.getSessionMetadata(key)) return c.json({
+		if (!await service.sessionIndexInstance.getSessionMetadata(key)) return c.json({
 			ok: false,
 			error: "Session not found"
 		}, 404);
@@ -170,7 +170,7 @@ function registerSessionsRoutes(authenticated, deps) {
 		const id = typeof body.id === "string" && body.id.trim() ? body.id.trim() : void 0;
 		const text = typeof body.text === "string" ? body.text : void 0;
 		const data = body.data !== void 0 && typeof body.data === "object" && body.data !== null && !Array.isArray(body.data) ? body.data : void 0;
-		await service.sessionManagerInstance.appendTranscriptContextEntry(key, {
+		await service.sessionIndexInstance.appendTranscriptContextEntry(key, {
 			id,
 			text,
 			data
@@ -179,7 +179,7 @@ function registerSessionsRoutes(authenticated, deps) {
 	});
 	authenticated.get("/api/sessions/:key/compaction/checkpoints", async (c) => {
 		const key = c.req.param("key");
-		if (!await service.sessionManagerInstance.getSessionMetadata(key)) return c.json({
+		if (!await service.sessionIndexInstance.getSessionMetadata(key)) return c.json({
 			ok: false,
 			error: "Session not found"
 		}, 404);
@@ -310,7 +310,7 @@ function registerSessionsRoutes(authenticated, deps) {
 	authenticated.delete("/api/sessions/:key/messages", async (c) => {
 		const key = c.req.param("key");
 		const body = await c.req.json().catch(() => ({}));
-		const loaded = await service.sessionManagerInstance.loadMessages(key);
+		const loaded = await service.sessionIndexInstance.loadMessages(key);
 		if (!loaded) return c.json({ error: "Session not found" }, 404);
 		let startIndex = typeof body.startIndex === "number" ? body.startIndex : -1;
 		let count = typeof body.count === "number" ? body.count : 0;
@@ -325,12 +325,33 @@ function registerSessionsRoutes(authenticated, deps) {
 		if (startIndex >= loaded.length) return c.json({ error: "Index out of range" }, 400);
 		const deleteCount = Math.min(count, loaded.length - startIndex);
 		const next = loaded.slice(0, startIndex).concat(loaded.slice(startIndex + deleteCount));
-		await service.sessionManagerInstance.saveMessages(key, next);
+		await service.sessionIndexInstance.saveMessages(key, next);
 		return c.json({
 			ok: true,
 			deleted: deleteCount
 		});
 	});
+	authenticated.post("/api/sessions/:key/reset", async (c) => {
+		const blocked = ensureGatewayReadyForSessions(c, service, "sessions.reset");
+		if (blocked) return blocked;
+		const key = c.req.param("key");
+		const result = await service.sessions.reset(key);
+		if (result.ok === false) {
+			const status = result.error === "Session not found" ? 404 : 400;
+			return c.json({
+				ok: false,
+				error: result.error
+			}, status);
+		}
+		const session = await service.sessions.getSession(key);
+		return c.json({
+			ok: true,
+			reset: true,
+			sessionId: result.sessionId,
+			previousSessionId: result.previousSessionId,
+			session
+		});
+	});
 	authenticated.delete("/api/sessions/:key", async (c) => {
 		const key = c.req.param("key");
 		const result = await service.sessions.delete(key);