@xopcai/xopc 0.0.88 → 0.0.89

package/dist/src/gateway/hono/oauth.js

@@ -1,6 +1,6 @@
 import { CredentialResolver, init_credentials } from "../../auth/credentials.js";
+import { getProviderAuthState, init_providers, isProviderConfigured } from "../../providers/index.js";
 import { anthropicOAuthProvider } from "../../auth/oauth/anthropic.js";
-import { init_providers, isProviderConfigured } from "../../providers/index.js";
 import { minimaxOAuthProvider } from "../../auth/oauth/minimax.js";
 import { minimaxCnOAuthProvider } from "../../auth/oauth/minimax-cn.js";
 import { kimiCodingOAuthProvider } from "../../auth/oauth/kimi-coding.js";
@@ -61,6 +61,15 @@ function createOAuthHandler(_service) {
 						instructions: auth.instructions
 					};
 				},
+				onDeviceCode: (info) => {
+					authResult = {
+						url: info.verificationUri,
+						instructions: `Enter code ${info.userCode}`,
+						message: `Open ${info.verificationUri} and enter code ${info.userCode}`,
+						deviceCode: info.userCode,
+						verificationUri: info.verificationUri
+					};
+				},
 				onPrompt: async (prompt) => {
 					authResult = {
 						message: prompt.message,
@@ -75,11 +84,19 @@ function createOAuthHandler(_service) {
 				onManualCodeInput: async () => {
 					manualCodeRequested = true;
 					return "";
+				},
+				onSelect: async (prompt) => {
+					return prompt.options.find((option) => option.id === "browser")?.id ?? prompt.options[0]?.id;
 				}
 			});
 			setOAuthCredentialsToCache(provider, credentials);
-			const apiKey = oauthProvider.getApiKey(credentials);
-			await new CredentialResolver().saveApiKey(provider, apiKey, { profileName: "default" });
+			await new CredentialResolver().saveOAuthToken(provider, {
+				access: oauthProvider.getApiKey(credentials),
+				refresh: credentials.refresh,
+				expiresAt: credentials.expires,
+				scope: Array.isArray(credentials.scope) ? credentials.scope.filter((value) => typeof value === "string") : void 0,
+				createdAt: (/* @__PURE__ */ new Date()).toISOString()
+			});
 			return c.json({
 				ok: true,
 				payload: {
@@ -107,12 +124,15 @@ function createOAuthHandler(_service) {
 	oauth.get("/:provider", async (c) => {
 		const provider = c.req.param("provider");
 		const credentials = getOAuthCredentialsFromCache(provider);
+		const authState = await getProviderAuthState(provider);
 		const configured = await isProviderConfigured(provider);
 		return c.json({
 			ok: true,
 			payload: {
 				configured: configured || !!credentials,
-				expires: credentials?.expires
+				authMode: authState.authMode,
+				authStatus: authState.authStatus,
+				expiresAt: authState.expiresAt ?? credentials?.expires
 			}
 		});
 	});
@@ -121,8 +141,13 @@ function createOAuthHandler(_service) {
 	* Revoke OAuth credentials
 	*/
 	oauth.delete("/:provider", async (c) => {
-		deleteOAuthCredentialsFromCache(c.req.param("provider"));
-		return c.json({ ok: true });
+		const provider = c.req.param("provider");
+		deleteOAuthCredentialsFromCache(provider);
+		await new CredentialResolver().deleteProviderCredential(provider);
+		return c.json({
+			ok: true,
+			payload: { disconnected: provider }
+		});
 	});
 	/**
 	* GET /api/auth/oauth

package/dist/src/gateway/hono/oauth.js.map

@@ -1 +1 @@
-{"version":3,"file":"oauth.js","names":["googleGeminiCliOAuthProvider","googleAntigravityOAuthProvider"],"sources":["../../../../src/gateway/hono/oauth.ts"],"sourcesContent":["/**\n * OAuth HTTP Handler\n * \n * Provides HTTP endpoints for OAuth login flow.\n */\n\nimport { Hono } from 'hono';\nimport type { GatewayService } from '../service.js';\nimport { \n  type OAuthProviderInterface, \n  type OAuthLoginCallbacks,\n  type OAuthCredentials \n} from '../../auth/oauth/types.js';\nimport {\n  kimiCodingOAuthProvider,\n  minimaxOAuthProvider,\n  minimaxCnOAuthProvider,\n  anthropicOAuthProvider,\n  githubCopilotOAuthProvider,\n  googleGeminiCliOAuthProvider,\n  googleAntigravityOAuthProvider,\n  openaiCodexOAuthProvider,\n} from '../../auth/oauth/index.js';\nimport { CredentialResolver } from '../../auth/credentials.js';\nimport { isProviderConfigured } from '../../providers/index.js';\n\n// Static OAuth providers map\nconst OAUTH_PROVIDERS: Record<string, OAuthProviderInterface> = {\n  'kimi-coding': kimiCodingOAuthProvider,\n  'minimax': minimaxOAuthProvider,\n  'minimax-cn': minimaxCnOAuthProvider,\n  'anthropic': anthropicOAuthProvider,\n  'github-copilot': githubCopilotOAuthProvider,\n  'google-gemini-cli': googleGeminiCliOAuthProvider,\n  'google-antigravity': googleAntigravityOAuthProvider,\n  'openai-codex': openaiCodexOAuthProvider,\n};\n\n// Simple in-memory cache for OAuth credentials\nconst oauthCredentialsCache: Map<string, OAuthCredentials> = new Map();\n\nfunction getOAuthCredentialsFromCache(provider: string): OAuthCredentials | undefined {\n  return oauthCredentialsCache.get(provider);\n}\n\nfunction setOAuthCredentialsToCache(provider: string, creds: OAuthCredentials): void {\n  oauthCredentialsCache.set(provider, creds);\n}\n\nfunction deleteOAuthCredentialsFromCache(provider: string): void {\n  oauthCredentialsCache.delete(provider);\n}\n\n/** No-op: OAuth tokens live on disk under auth paths; cache is populated during login. */\nexport function loadOAuthCredentialsToCache(_service: GatewayService): void {}\n\nexport function createOAuthHandler(_service: GatewayService) {\n  const oauth = new Hono();\n\n  /**\n   * POST /api/auth/oauth/start\n   * Start OAuth flow for a provider\n   */\n  oauth.post('/start', async (c) => {\n    const { provider } = await c.req.json().catch(() => ({}));\n    \n    if (!provider) {\n      return c.json({ error: 'Provider is required' }, 400);\n    }\n\n    const oauthProvider = OAUTH_PROVIDERS[provider];\n    if (!oauthProvider) {\n      return c.json({ error: `Unknown OAuth provider: ${provider}` }, 400);\n    }\n\n    try {\n      let authResult: any = null;\n      let manualCodeRequested = false;\n      \n      const callbacks: OAuthLoginCallbacks = {\n        onAuth: (auth: { url: string; instructions?: string }) => {\n          authResult = { url: auth.url, instructions: auth.instructions };\n        },\n        onPrompt: async (prompt: { message: string; deviceCode?: string; verificationUri?: string }) => {\n          authResult = { \n            message: prompt.message, \n            deviceCode: prompt.deviceCode,\n            verificationUri: prompt.verificationUri,\n          };\n          return prompt.deviceCode || '';\n        },\n        onProgress: (message: string) => {\n          console.log('OAuth progress:', message);\n        },\n        onManualCodeInput: async () => {\n          // For callback server providers, signal that manual code input is needed\n          manualCodeRequested = true;\n          // Return empty - frontend will handle manual input\n          return '';\n        },\n      };\n\n      const credentials = await oauthProvider.login(callbacks);\n      setOAuthCredentialsToCache(provider, credentials);\n\n      // Get API key from OAuth credentials\n      const apiKey = oauthProvider.getApiKey(credentials);\n\n      // Save API key to credential system\n      const resolver = new CredentialResolver();\n      await resolver.saveApiKey(provider, apiKey, { profileName: 'default' });\n\n      return c.json({ \n        ok: true, \n        payload: { \n          success: true,\n          provider,\n          message: 'OAuth login successful',\n          expires: credentials.expires,\n          authUrl: authResult?.url,\n          deviceCode: authResult?.deviceCode,\n          verificationUri: authResult?.verificationUri,\n          instructions: authResult?.instructions,\n          usesCallbackServer: oauthProvider.usesCallbackServer ?? false,\n          manualCodeRequested,\n        } \n      });\n    } catch (err) {\n      console.error('OAuth login error:', err);\n      return c.json({ \n        error: err instanceof Error ? err.message : 'OAuth login failed' \n      }, 500);\n    }\n  });\n\n  /**\n   * GET /api/auth/oauth/:provider\n   * Check OAuth status for a provider\n   */\n  oauth.get('/:provider', async (c) => {\n    const provider = c.req.param('provider');\n    const credentials = getOAuthCredentialsFromCache(provider);\n    const configured = await isProviderConfigured(provider);\n\n    return c.json({ \n      ok: true, \n      payload: { \n        configured: configured || !!credentials,\n        expires: credentials?.expires \n      } \n    });\n  });\n\n  /**\n   * DELETE /api/auth/oauth/:provider\n   * Revoke OAuth credentials\n   */\n  oauth.delete('/:provider', async (c) => {\n    const provider = c.req.param('provider');\n    \n    deleteOAuthCredentialsFromCache(provider);\n\n    return c.json({ ok: true });\n  });\n\n  /**\n   * GET /api/auth/oauth\n   * List available OAuth providers\n   */\n  oauth.get('/', (c) => {\n    const result = Object.entries(OAUTH_PROVIDERS).map(([id, p]) => ({\n      id,\n      name: p.name,\n    }));\n\n    return c.json({ ok: true, payload: { providers: result } });\n  });\n\n  return oauth;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;kBAuB+D;gBACC;AAGhE,MAAM,kBAA0D;CAC9D,eAAe;CACf,WAAW;CACX,cAAc;CACd,aAAa;CACb,kBAAkB;CAClB,qBAAqBA;CACrB,sBAAsBC;CACtB,gBAAgB;CACjB;AAGD,MAAM,wCAAuD,IAAI,KAAK;AAEtE,SAAS,6BAA6B,UAAgD;AACpF,QAAO,sBAAsB,IAAI,SAAS;;AAG5C,SAAS,2BAA2B,UAAkB,OAA+B;AACnF,uBAAsB,IAAI,UAAU,MAAM;;AAG5C,SAAS,gCAAgC,UAAwB;AAC/D,uBAAsB,OAAO,SAAS;;;AAIxC,SAAgB,4BAA4B,UAAgC;AAE5E,SAAgB,mBAAmB,UAA0B;CAC3D,MAAM,QAAQ,IAAI,MAAM;;;;;AAMxB,OAAM,KAAK,UAAU,OAAO,MAAM;EAChC,MAAM,EAAE,aAAa,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;AAEzD,MAAI,CAAC,SACH,QAAO,EAAE,KAAK,EAAE,OAAO,wBAAwB,EAAE,IAAI;EAGvD,MAAM,gBAAgB,gBAAgB;AACtC,MAAI,CAAC,cACH,QAAO,EAAE,KAAK,EAAE,OAAO,2BAA2B,YAAY,EAAE,IAAI;AAGtE,MAAI;GACF,IAAI,aAAkB;GACtB,IAAI,sBAAsB;GAyB1B,MAAM,cAAc,MAAM,cAAc,MAAM;IAtB5C,SAAS,SAAiD;AACxD,kBAAa;MAAE,KAAK,KAAK;MAAK,cAAc,KAAK;MAAc;;IAEjE,UAAU,OAAO,WAA+E;AAC9F,kBAAa;MACX,SAAS,OAAO;MAChB,YAAY,OAAO;MACnB,iBAAiB,OAAO;MACzB;AACD,YAAO,OAAO,cAAc;;IAE9B,aAAa,YAAoB;AAC/B,aAAQ,IAAI,mBAAmB,QAAQ;;IAEzC,mBAAmB,YAAY;AAE7B,2BAAsB;AAEtB,YAAO;;IAI4C,CAAC;AACxD,8BAA2B,UAAU,YAAY;GAGjD,MAAM,SAAS,cAAc,UAAU,YAAY;AAInD,SAAM,IADe,oBACP,CAAC,WAAW,UAAU,QAAQ,EAAE,aAAa,WAAW,CAAC;AAEvE,UAAO,EAAE,KAAK;IACZ,IAAI;IACJ,SAAS;KACP,SAAS;KACT;KACA,SAAS;KACT,SAAS,YAAY;KACrB,SAAS,YAAY;KACrB,YAAY,YAAY;KACxB,iBAAiB,YAAY;KAC7B,cAAc,YAAY;KAC1B,oBAAoB,cAAc,sBAAsB;KACxD;KACD;IACF,CAAC;WACK,KAAK;AACZ,WAAQ,MAAM,sBAAsB,IAAI;AACxC,UAAO,EAAE,KAAK,EACZ,OAAO,eAAe,QAAQ,IAAI,UAAU,sBAC7C,EAAE,IAAI;;GAET;;;;;AAMF,OAAM,IAAI,cAAc,OAAO,MAAM;EACnC,MAAM,WAAW,EAAE,IAAI,MAAM,WAAW;EACxC,MAAM,cAAc,6BAA6B,SAAS;EAC1D,MAAM,aAAa,MAAM,qBAAqB,SAAS;AAEvD,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,YAAY,cAAc,CAAC,CAAC;IAC5B,SAAS,aAAa;IACvB;GACF,CAAC;GACF;;;;;AAMF,OAAM,OAAO,cAAc,OAAO,MAAM;AAGtC,kCAFiB,EAAE,IAAI,MAAM,WAEW,CAAC;AAEzC,SAAO,EAAE,KAAK,EAAE,IAAI,MAAM,CAAC;GAC3B;;;;;AAMF,OAAM,IAAI,MAAM,MAAM;EACpB,MAAM,SAAS,OAAO,QAAQ,gBAAgB,CAAC,KAAK,CAAC,IAAI,QAAQ;GAC/D;GACA,MAAM,EAAE;GACT,EAAE;AAEH,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,WAAW,QAAQ;GAAE,CAAC;GAC3D;AAEF,QAAO"}
+{"version":3,"file":"oauth.js","names":["googleGeminiCliOAuthProvider","googleAntigravityOAuthProvider"],"sources":["../../../../src/gateway/hono/oauth.ts"],"sourcesContent":["/**\n * OAuth HTTP Handler\n * \n * Provides HTTP endpoints for OAuth login flow.\n */\n\nimport { Hono } from 'hono';\nimport type { GatewayService } from '../service.js';\nimport { \n  type OAuthProviderInterface, \n  type OAuthLoginCallbacks,\n  type OAuthCredentials \n} from '../../auth/oauth/types.js';\nimport {\n  kimiCodingOAuthProvider,\n  minimaxOAuthProvider,\n  minimaxCnOAuthProvider,\n  anthropicOAuthProvider,\n  githubCopilotOAuthProvider,\n  googleGeminiCliOAuthProvider,\n  googleAntigravityOAuthProvider,\n  openaiCodexOAuthProvider,\n} from '../../auth/oauth/index.js';\nimport { CredentialResolver } from '../../auth/credentials.js';\nimport { getProviderAuthState, isProviderConfigured } from '../../providers/index.js';\n\n// Static OAuth providers map\nconst OAUTH_PROVIDERS: Record<string, OAuthProviderInterface> = {\n  'kimi-coding': kimiCodingOAuthProvider,\n  'minimax': minimaxOAuthProvider,\n  'minimax-cn': minimaxCnOAuthProvider,\n  'anthropic': anthropicOAuthProvider,\n  'github-copilot': githubCopilotOAuthProvider,\n  'google-gemini-cli': googleGeminiCliOAuthProvider,\n  'google-antigravity': googleAntigravityOAuthProvider,\n  'openai-codex': openaiCodexOAuthProvider,\n};\n\n// Simple in-memory cache for OAuth credentials\nconst oauthCredentialsCache: Map<string, OAuthCredentials> = new Map();\n\nfunction getOAuthCredentialsFromCache(provider: string): OAuthCredentials | undefined {\n  return oauthCredentialsCache.get(provider);\n}\n\nfunction setOAuthCredentialsToCache(provider: string, creds: OAuthCredentials): void {\n  oauthCredentialsCache.set(provider, creds);\n}\n\nfunction deleteOAuthCredentialsFromCache(provider: string): void {\n  oauthCredentialsCache.delete(provider);\n}\n\n/** No-op: OAuth tokens live on disk under auth paths; cache is populated during login. */\nexport function loadOAuthCredentialsToCache(_service: GatewayService): void {}\n\nexport function createOAuthHandler(_service: GatewayService) {\n  const oauth = new Hono();\n\n  /**\n   * POST /api/auth/oauth/start\n   * Start OAuth flow for a provider\n   */\n  oauth.post('/start', async (c) => {\n    const { provider } = await c.req.json().catch(() => ({}));\n    \n    if (!provider) {\n      return c.json({ error: 'Provider is required' }, 400);\n    }\n\n    const oauthProvider = OAUTH_PROVIDERS[provider];\n    if (!oauthProvider) {\n      return c.json({ error: `Unknown OAuth provider: ${provider}` }, 400);\n    }\n\n    try {\n      let authResult: any = null;\n      let manualCodeRequested = false;\n      \n      const callbacks: OAuthLoginCallbacks = {\n        onAuth: (auth: { url: string; instructions?: string }) => {\n          authResult = { url: auth.url, instructions: auth.instructions };\n        },\n        onDeviceCode: (info) => {\n          authResult = {\n            url: info.verificationUri,\n            instructions: `Enter code ${info.userCode}`,\n            message: `Open ${info.verificationUri} and enter code ${info.userCode}`,\n            deviceCode: info.userCode,\n            verificationUri: info.verificationUri,\n          };\n        },\n        onPrompt: async (prompt: { message: string; deviceCode?: string; verificationUri?: string }) => {\n          authResult = { \n            message: prompt.message, \n            deviceCode: prompt.deviceCode,\n            verificationUri: prompt.verificationUri,\n          };\n          return prompt.deviceCode || '';\n        },\n        onProgress: (message: string) => {\n          console.log('OAuth progress:', message);\n        },\n        onManualCodeInput: async () => {\n          // For callback server providers, signal that manual code input is needed\n          manualCodeRequested = true;\n          // Return empty - frontend will handle manual input\n          return '';\n        },\n        onSelect: async (prompt) => {\n          const browserOption = prompt.options.find((option) => option.id === 'browser');\n          return browserOption?.id ?? prompt.options[0]?.id;\n        },\n      };\n\n      const credentials = await oauthProvider.login(callbacks);\n      setOAuthCredentialsToCache(provider, credentials);\n\n      const resolver = new CredentialResolver();\n      await resolver.saveOAuthToken(provider, {\n        access: oauthProvider.getApiKey(credentials),\n        refresh: credentials.refresh,\n        expiresAt: credentials.expires,\n        scope: Array.isArray(credentials.scope) ? credentials.scope.filter((value): value is string => typeof value === 'string') : undefined,\n        createdAt: new Date().toISOString(),\n      });\n\n      return c.json({ \n        ok: true, \n        payload: { \n          success: true,\n          provider,\n          message: 'OAuth login successful',\n          expires: credentials.expires,\n          authUrl: authResult?.url,\n          deviceCode: authResult?.deviceCode,\n          verificationUri: authResult?.verificationUri,\n          instructions: authResult?.instructions,\n          usesCallbackServer: oauthProvider.usesCallbackServer ?? false,\n          manualCodeRequested,\n        } \n      });\n    } catch (err) {\n      console.error('OAuth login error:', err);\n      return c.json({ \n        error: err instanceof Error ? err.message : 'OAuth login failed' \n      }, 500);\n    }\n  });\n\n  /**\n   * GET /api/auth/oauth/:provider\n   * Check OAuth status for a provider\n   */\n  oauth.get('/:provider', async (c) => {\n    const provider = c.req.param('provider');\n    const credentials = getOAuthCredentialsFromCache(provider);\n    const authState = await getProviderAuthState(provider);\n    const configured = await isProviderConfigured(provider);\n\n    return c.json({ \n      ok: true, \n      payload: { \n        configured: configured || !!credentials,\n        authMode: authState.authMode,\n        authStatus: authState.authStatus,\n        expiresAt: authState.expiresAt ?? credentials?.expires,\n      } \n    });\n  });\n\n  /**\n   * DELETE /api/auth/oauth/:provider\n   * Revoke OAuth credentials\n   */\n  oauth.delete('/:provider', async (c) => {\n    const provider = c.req.param('provider');\n    \n    deleteOAuthCredentialsFromCache(provider);\n    const resolver = new CredentialResolver();\n    await resolver.deleteProviderCredential(provider);\n\n    return c.json({ ok: true, payload: { disconnected: provider } });\n  });\n\n  /**\n   * GET /api/auth/oauth\n   * List available OAuth providers\n   */\n  oauth.get('/', (c) => {\n    const result = Object.entries(OAUTH_PROVIDERS).map(([id, p]) => ({\n      id,\n      name: p.name,\n    }));\n\n    return c.json({ ok: true, payload: { providers: result } });\n  });\n\n  return oauth;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;kBAuB+D;gBACuB;AAGtF,MAAM,kBAA0D;CAC9D,eAAe;CACf,WAAW;CACX,cAAc;CACd,aAAa;CACb,kBAAkB;CAClB,qBAAqBA;CACrB,sBAAsBC;CACtB,gBAAgB;CACjB;AAGD,MAAM,wCAAuD,IAAI,KAAK;AAEtE,SAAS,6BAA6B,UAAgD;AACpF,QAAO,sBAAsB,IAAI,SAAS;;AAG5C,SAAS,2BAA2B,UAAkB,OAA+B;AACnF,uBAAsB,IAAI,UAAU,MAAM;;AAG5C,SAAS,gCAAgC,UAAwB;AAC/D,uBAAsB,OAAO,SAAS;;;AAIxC,SAAgB,4BAA4B,UAAgC;AAE5E,SAAgB,mBAAmB,UAA0B;CAC3D,MAAM,QAAQ,IAAI,MAAM;;;;;AAMxB,OAAM,KAAK,UAAU,OAAO,MAAM;EAChC,MAAM,EAAE,aAAa,MAAM,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;AAEzD,MAAI,CAAC,SACH,QAAO,EAAE,KAAK,EAAE,OAAO,wBAAwB,EAAE,IAAI;EAGvD,MAAM,gBAAgB,gBAAgB;AACtC,MAAI,CAAC,cACH,QAAO,EAAE,KAAK,EAAE,OAAO,2BAA2B,YAAY,EAAE,IAAI;AAGtE,MAAI;GACF,IAAI,aAAkB;GACtB,IAAI,sBAAsB;GAsC1B,MAAM,cAAc,MAAM,cAAc,MAAM;IAnC5C,SAAS,SAAiD;AACxD,kBAAa;MAAE,KAAK,KAAK;MAAK,cAAc,KAAK;MAAc;;IAEjE,eAAe,SAAS;AACtB,kBAAa;MACX,KAAK,KAAK;MACV,cAAc,cAAc,KAAK;MACjC,SAAS,QAAQ,KAAK,gBAAgB,kBAAkB,KAAK;MAC7D,YAAY,KAAK;MACjB,iBAAiB,KAAK;MACvB;;IAEH,UAAU,OAAO,WAA+E;AAC9F,kBAAa;MACX,SAAS,OAAO;MAChB,YAAY,OAAO;MACnB,iBAAiB,OAAO;MACzB;AACD,YAAO,OAAO,cAAc;;IAE9B,aAAa,YAAoB;AAC/B,aAAQ,IAAI,mBAAmB,QAAQ;;IAEzC,mBAAmB,YAAY;AAE7B,2BAAsB;AAEtB,YAAO;;IAET,UAAU,OAAO,WAAW;AAE1B,YADsB,OAAO,QAAQ,MAAM,WAAW,OAAO,OAAO,UAChD,EAAE,MAAM,OAAO,QAAQ,IAAI;;IAII,CAAC;AACxD,8BAA2B,UAAU,YAAY;AAGjD,SAAM,IADe,oBACP,CAAC,eAAe,UAAU;IACtC,QAAQ,cAAc,UAAU,YAAY;IAC5C,SAAS,YAAY;IACrB,WAAW,YAAY;IACvB,OAAO,MAAM,QAAQ,YAAY,MAAM,GAAG,YAAY,MAAM,QAAQ,UAA2B,OAAO,UAAU,SAAS,GAAG,KAAA;IAC5H,4BAAW,IAAI,MAAM,EAAC,aAAa;IACpC,CAAC;AAEF,UAAO,EAAE,KAAK;IACZ,IAAI;IACJ,SAAS;KACP,SAAS;KACT;KACA,SAAS;KACT,SAAS,YAAY;KACrB,SAAS,YAAY;KACrB,YAAY,YAAY;KACxB,iBAAiB,YAAY;KAC7B,cAAc,YAAY;KAC1B,oBAAoB,cAAc,sBAAsB;KACxD;KACD;IACF,CAAC;WACK,KAAK;AACZ,WAAQ,MAAM,sBAAsB,IAAI;AACxC,UAAO,EAAE,KAAK,EACZ,OAAO,eAAe,QAAQ,IAAI,UAAU,sBAC7C,EAAE,IAAI;;GAET;;;;;AAMF,OAAM,IAAI,cAAc,OAAO,MAAM;EACnC,MAAM,WAAW,EAAE,IAAI,MAAM,WAAW;EACxC,MAAM,cAAc,6BAA6B,SAAS;EAC1D,MAAM,YAAY,MAAM,qBAAqB,SAAS;EACtD,MAAM,aAAa,MAAM,qBAAqB,SAAS;AAEvD,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,YAAY,cAAc,CAAC,CAAC;IAC5B,UAAU,UAAU;IACpB,YAAY,UAAU;IACtB,WAAW,UAAU,aAAa,aAAa;IAChD;GACF,CAAC;GACF;;;;;AAMF,OAAM,OAAO,cAAc,OAAO,MAAM;EACtC,MAAM,WAAW,EAAE,IAAI,MAAM,WAAW;AAExC,kCAAgC,SAAS;AAEzC,QAAM,IADe,oBACP,CAAC,yBAAyB,SAAS;AAEjD,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,cAAc,UAAU;GAAE,CAAC;GAChE;;;;;AAMF,OAAM,IAAI,MAAM,MAAM;EACpB,MAAM,SAAS,OAAO,QAAQ,gBAAgB,CAAC,KAAK,CAAC,IAAI,QAAQ;GAC/D;GACA,MAAM,EAAE;GACT,EAAE;AAEH,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,WAAW,QAAQ;GAAE,CAAC;GAC3D;AAEF,QAAO"}

package/dist/src/gateway/hono/routes/agents.js

@@ -1,5 +1,5 @@
-import { init_agent_scope, normalizeAgentId } from "../../../agent/agent-scope.js";
 import { init_schema, parseModelRef } from "../../../config/schema.js";
+import { init_agent_scope, normalizeAgentId } from "../../../agent/agent-scope.js";
 import { init_providers, isProviderConfigured, resolveModel } from "../../../providers/index.js";
 import { getVoiceModelsConfig } from "../../../config/voice.js";
 import { agentModelFallbacksToArray, agentModelRefToString } from "../lib/agent-model.js";

package/dist/src/gateway/hono/routes/auth-registry-extensions.js

@@ -7,8 +7,8 @@ import { createOAuthHandler } from "../oauth.js";
 import { createOAuthAsyncHandler } from "../oauth-async.js";
 import { extensionAssetMimeType } from "../lib/extension-assets.js";
 import { loadExtensionStore, saveExtensionStore } from "../lib/extension-store.js";
-import { existsSync, readFileSync, statSync } from "node:fs";
 import { relative, resolve } from "node:path";
+import { existsSync, readFileSync, statSync } from "node:fs";
 //#region src/gateway/hono/routes/auth-registry-extensions.ts
 init_providers();
 const EXTENSION_ASSET_CSP = "default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; connect-src 'none'; frame-ancestors 'self'; frame-src 'none'; base-uri 'none'; object-src 'none'; form-action 'none'";

package/dist/src/gateway/hono/routes/config-patch/misc.js

@@ -1,5 +1,5 @@
-import { CredentialResolver, init_credentials } from "../../../../auth/credentials.js";
 import { BindingsConfigSchema, McpConfigSchema, init_schema } from "../../../../config/schema.js";
+import { CredentialResolver, init_credentials } from "../../../../auth/credentials.js";
 import { canonicalizeConfiguredMcpServer } from "../../../../config/mcp-config-normalize.js";
 import { mergeCronConfigPatch, mergeGatewaySkillsMarketplacePatch, mergeGoalsConfigPatch, mergeSessionConfigPatch, mergeUpdateConfigPatch } from "../../../../config/web-patch.js";
 import { assertGatewayAuthConfigured, resolveGatewayAuth } from "../../../auth.js";

package/dist/src/gateway/hono/routes/dreaming.js

@@ -5,8 +5,8 @@ import { getWorkspacePath } from "../../../config/workspace-path-helpers.js";
 import { parseDreamingLastRunFile } from "../../../agent/memory/dreaming/last-run.js";
 import { readDreamingEvents } from "../../../agent/memory/dreaming/events.js";
 import { previewDreamingDeepPromotion } from "../../../agent/memory/dreaming/preview.js";
-import fs from "node:fs/promises";
 import path from "node:path";
+import fs from "node:fs/promises";
 //#region src/gateway/hono/routes/dreaming.ts
 function isRecord(v) {
 	return v !== null && typeof v === "object" && !Array.isArray(v);

package/dist/src/gateway/hono/routes/host-fs.js

@@ -1,8 +1,8 @@
 import { createLogger } from "../../../utils/logger/index.js";
 import { init_logger } from "../../../utils/logger.js";
-import { readdir, realpath, stat } from "node:fs/promises";
-import * as path$1 from "node:path";
 import * as os$1 from "node:os";
+import * as path$1 from "node:path";
+import { readdir, realpath, stat } from "node:fs/promises";
 //#region src/gateway/hono/routes/host-fs.ts
 init_logger();
 const log = createLogger("HostFs");

package/dist/src/gateway/hono/routes/models.js

@@ -1,10 +1,10 @@
 import { resolveModelsJsonPath } from "../../../config/paths.js";
-import { CredentialResolver, init_credentials } from "../../../auth/credentials.js";
 import { init_resolve_config_value, testApiKeyResolution } from "../../../config/resolve-config-value.js";
 import { init_models_json, loadModelsJson, saveModelsJson, validateModelsConfig } from "../../../config/models-json.js";
 import { getModelRegistry } from "../../../providers/model-registry.js";
+import { CredentialResolver, init_credentials } from "../../../auth/credentials.js";
 import { getProviderRegistry, init_plugin_registry } from "../../../providers/plugin-registry.js";
-import { PROVIDER_META, getAllModels, getAllProviders, getAvailableModels, getProviderActiveKeySource, init_providers, isProviderConfigured } from "../../../providers/index.js";
+import { PROVIDER_META, getAllModels, getAllProviders, getAvailableModels, getProviderAuthState, init_providers, isProviderConfigured } from "../../../providers/index.js";
 import { getImageGenerationProvider } from "../../../agent/image/generation/provider-registry.js";
 import { listImageGenerationProvidersSummary } from "../../../agent/image/generation/runtime.js";
 import { respondStartupUnavailable } from "../lib/startup-unavailable.js";
@@ -268,14 +268,19 @@ function registerModelsRoutes(authenticated, deps) {
 		const meta = await Promise.all(providers.map(async (provider) => {
 			const plugin = pluginRegistry.get(provider);
 			const extensionId = plugin ? resolveExtensionIdForProvider(service, provider) : void 0;
+			const authState = await getProviderAuthState(provider);
+			const configured = authState.authMode !== "none" || await isProviderConfigured(provider);
 			return {
 				id: provider,
 				name: plugin?.name ?? PROVIDER_META[provider]?.name ?? provider,
 				category: plugin ? "extension" : PROVIDER_META[provider]?.category || "specialty",
 				supportsOAuth: plugin ? false : PROVIDER_META[provider]?.supportsOAuth ?? false,
 				supportsApiKey: plugin ? false : PROVIDER_META[provider]?.supportsApiKey ?? true,
-				configured: await isProviderConfigured(provider),
-				activeKeySource: await getProviderActiveKeySource(provider),
+				configured,
+				activeKeySource: authState.authMode,
+				authMode: authState.authMode,
+				authStatus: authState.authStatus,
+				...authState.expiresAt ? { expiresAt: authState.expiresAt } : {},
 				baseUrl: resolveProviderApiBaseUrl(provider),
 				...extensionId ? { extensionId } : {}
 			};
@@ -291,6 +296,8 @@ function registerModelsRoutes(authenticated, deps) {
 				supportsApiKey: false,
 				configured: true,
 				activeKeySource: "extension",
+				authMode: "extension",
+				authStatus: "connected",
 				baseUrl: resolveProviderApiBaseUrl(plugin.id),
 				...extensionId ? { extensionId } : {}
 			});
@@ -345,10 +352,9 @@ function registerModelsRoutes(authenticated, deps) {
 			error: { message: "Missing providerId" }
 		}, 400);
 		const normalizedProvider = providerId.toLowerCase();
-		const profileId = `${normalizedProvider}:default`;
 		const resolver = new CredentialResolver();
 		try {
-			await resolver.deleteProfile(profileId);
+			await resolver.deleteProviderCredential(normalizedProvider);
 			return c.json({
 				ok: true,
 				payload: { deleted: normalizedProvider }

package/dist/src/gateway/hono/routes/models.js.map

@@ -1 +1 @@
-{"version":3,"file":"models.js","names":["getModelsJsonPath"],"sources":["../../../../../src/gateway/hono/routes/models.ts"],"sourcesContent":["import type { Hono } from 'hono';\n\nimport {\n  getModelsJsonPath,\n  loadModelsJson,\n  saveModelsJson,\n  validateModelsConfig,\n} from '../../../config/models-json.js';\nimport type { Config } from '../../../config/schema.js';\nimport { testApiKeyResolution } from '../../../config/resolve-config-value.js';\nimport {\n  getImageGenerationProvider,\n  listImageGenerationProvidersSummary,\n} from '../../../agent/image/generation/runtime.js';\nimport {\n  EXTENSION_PROVIDER_BASE_URL,\n  getAllModels,\n  getAvailableModels,\n  getModelRegistry,\n  getAllProviders,\n  getProviderActiveKeySource,\n  isProviderConfigured,\n  PROVIDER_META,\n} from '../../../providers/index.js';\nimport { CredentialResolver } from '../../../auth/credentials.js';\nimport { getProviderRegistry } from '../../../providers/plugin-registry.js';\nimport type { ProviderModelDefinition } from '../../../extensions/types/providers.js';\nimport type { GatewayService } from '../../service.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\nimport { respondStartupUnavailable } from '../lib/startup-unavailable.js';\n\nfunction readModelsJsonProviderApiKey(providerId: string): string | undefined {\n  const { config } = loadModelsJson(getModelsJsonPath());\n  const entry = config.providers?.[providerId.trim()];\n  const key = entry?.apiKey;\n  return typeof key === 'string' && key.trim() ? key.trim() : undefined;\n}\n\n/** Plaintext key only when persisted under `cfg.providers.<id>.apiKey` (not env / credential store). */\nfunction readProviderApiKeyFromConfigFileOnly(cfg: Config, providerId: string): string | undefined {\n  const id = providerId.trim().toLowerCase();\n  const bucket = cfg.providers?.[id];\n  if (!bucket || typeof bucket !== 'object' || Array.isArray(bucket)) return undefined;\n  const k = (bucket as { apiKey?: unknown }).apiKey;\n  return typeof k === 'string' && k.trim() ? k.trim() : undefined;\n}\n\n/** Extension id from manifest `providers[]` (e.g. provider `demo` → extension `demo-provider`). */\nfunction resolveExtensionIdForProvider(service: GatewayService, providerId: string): string | undefined {\n  const loader = service.getExtensionLoader();\n  if (!loader) return undefined;\n  return loader.buildManifestRegistry().findByProvider(providerId)?.id;\n}\n\n/** Effective LLM REST base URL for a provider (models.json overrides included). */\nfunction resolveProviderApiBaseUrl(providerId: string): string | undefined {\n  const model = getModelRegistry().getAll().find((m) => m.provider === providerId);\n  if (!model?.baseUrl || model.baseUrl === EXTENSION_PROVIDER_BASE_URL) return undefined;\n  return model.baseUrl;\n}\n\nfunction mapPluginModel(providerId: string, model: ProviderModelDefinition, available: boolean) {\n  return {\n    id: `${providerId}/${model.id}`,\n    name: model.name,\n    provider: providerId,\n    contextWindow: model.contextWindow ?? 128000,\n    maxTokens: model.maxOutputTokens ?? 4096,\n    reasoning: false,\n    vision: model.supportsImages ?? false,\n    cost: { input: model.pricing?.input ?? 0, output: model.pricing?.output ?? 0 },\n    available,\n    source: 'extension' as const,\n  };\n}\n\nexport function registerModelsRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  const { service, strictRateLimitMiddleware } = deps;\n\n  // GET /api/models-json - Get models.json configuration\n  authenticated.get('/api/models-json', async (c) => {\n    const path = getModelsJsonPath();\n    const { config, error } = loadModelsJson(path);\n    const registry = getModelRegistry();\n    \n    return c.json({\n      ok: true,\n      payload: {\n        config,\n        path,\n        exists: error === undefined,\n        loadError: error || registry.getError(),\n      },\n    });\n  });\n\n  // POST /api/models-json/validate - Validate models.json configuration\n  authenticated.post('/api/models-json/validate', async (c) => {\n    const body = await c.req.json();\n    const { config } = body;\n    \n    const result = validateModelsConfig(config);\n    \n    return c.json({\n      ok: true,\n      payload: result,\n    });\n  });\n\n  // PATCH /api/models-json - Save models.json configuration\n  authenticated.patch('/api/models-json', async (c) => {\n    const body = await c.req.json();\n    const { config } = body;\n    \n    const path = getModelsJsonPath();\n    const result = saveModelsJson(path, config);\n    \n    if (!result.success) {\n      return c.json({ ok: false, error: result.error }, 400);\n    }\n    \n    // Refresh registry\n    const registry = getModelRegistry();\n    registry.refresh();\n    \n    // Emit event\n    service.emit('models-json.updated', { \n      modelCount: registry.getAll().length,\n    });\n    \n    return c.json({ \n      ok: true, \n      payload: { \n        saved: true,\n        modelCount: registry.getAll().length,\n      },\n    });\n  });\n\n  // POST /api/models-json/reload - Hot reload models.json\n  authenticated.post('/api/models-json/reload', async (c) => {\n    const registry = getModelRegistry();\n    registry.refresh();\n    \n    const error = registry.getError();\n    const models = registry.getAll();\n    \n    service.emit('models-json.reloaded', { \n      modelCount: models.length,\n      error: error || undefined,\n    });\n    \n    return c.json({\n      ok: true,\n      payload: {\n        modelCount: models.length,\n        error,\n      },\n    });\n  });\n\n  // POST /api/models-json/test-api-key - Test API key resolution\n  authenticated.post('/api/models-json/test-api-key', async (c) => {\n    const body = await c.req.json();\n    const { value } = body;\n    \n    const result = testApiKeyResolution(value);\n    \n    return c.json({\n      ok: true,\n      payload: result,\n    });\n  });\n\n  // GET /api/models - Get available models (only configured providers)\n  authenticated.get('/api/models', async (c) => {\n    if (!service.isGatewayReady()) {\n      return respondStartupUnavailable(c, 'models.list');\n    }\n    const pluginRegistry = getProviderRegistry();\n    const models = (await getAvailableModels()).map(m => ({\n      id: `${m.provider}/${m.id}`,\n      name: m.name,\n      provider: m.provider,\n      contextWindow: m.contextWindow ?? 128000,\n      maxTokens: m.maxTokens ?? 4096,\n      reasoning: m.reasoning ?? false,\n      vision: m.input?.includes('image') ?? false,\n      cost: {\n        input: m.cost?.input ?? 0,\n        output: m.cost?.output ?? 0,\n      },\n      ...(pluginRegistry.has(m.provider) ? { source: 'extension' as const } : {}),\n    }));\n\n    const existingIds = new Set(models.map(m => m.id));\n    for (const plugin of pluginRegistry.listAll()) {\n      for (const model of plugin.models) {\n        const compositeId = `${plugin.id}/${model.id}`;\n        if (!existingIds.has(compositeId)) {\n          models.push(mapPluginModel(plugin.id, model, true));\n          existingIds.add(compositeId);\n        }\n      }\n    }\n\n    // Sort by provider then name\n    models.sort((a, b) => {\n      if (a.provider !== b.provider) return a.provider.localeCompare(b.provider);\n      return a.name.localeCompare(b.name);\n    });\n\n    return c.json({ ok: true, payload: { models } });\n  });\n\n  // GET /api/image/providers — registered image generation providers and models (not in LLM model registry)\n  authenticated.get('/api/image/providers', (c) => {\n    const cfg = deps.service.currentConfig;\n    const summaries = listImageGenerationProvidersSummary(cfg);\n    const providers = summaries.map((p) => {\n      const provider = getImageGenerationProvider(p.id, cfg);\n      let configured = false;\n      try {\n        configured = provider?.isConfigured?.({ cfg }) === true;\n      } catch {\n        configured = false;\n      }\n      return { ...p, configured };\n    });\n    return c.json({ ok: true, payload: { providers } });\n  });\n\n  // POST /api/image/providers/:id/test — lightweight credential probe; does NOT\n  // hit the vendor (no quota burn). Returns `{ ok, configured, reason }`.\n  authenticated.post('/api/image/providers/:id/test', (c) => {\n    const id = c.req.param('id');\n    const cfg = deps.service.currentConfig;\n    const provider = getImageGenerationProvider(id, cfg);\n    if (!provider) {\n      return c.json(\n        { ok: false, error: { message: `Image generation provider not found: ${id}` } },\n        404,\n      );\n    }\n    let configured = false;\n    let reason: string | undefined;\n    try {\n      configured = provider.isConfigured?.({ cfg }) === true;\n      if (!configured) reason = 'Missing API key (set via config or environment).';\n    } catch (err) {\n      reason = err instanceof Error ? err.message : String(err);\n    }\n    return c.json({\n      ok: true,\n      payload: {\n        id: provider.id,\n        configured,\n        ...(reason ? { reason } : {}),\n        defaultModel: provider.defaultModel ?? null,\n      },\n    });\n  });\n\n  /**\n   * POST /api/image/providers/:id/reveal-api-key — return `cfg.providers.<id>.apiKey` plaintext for the\n   * gateway console (same auth as PATCH /api/config). Does not resolve env vars or credential files.\n   */\n  authenticated.post(\n    '/api/image/providers/:id/reveal-api-key',\n    strictRateLimitMiddleware,\n    async (c) => {\n      const rawId = c.req.param('id');\n      const cfg = deps.service.currentConfig;\n      const provider = getImageGenerationProvider(rawId, cfg);\n      if (!provider) {\n        return c.json(\n          { ok: false, error: { message: `Image generation provider not found: ${rawId}` } },\n          404,\n        );\n      }\n      const apiKey = readProviderApiKeyFromConfigFileOnly(cfg, provider.id);\n      return c.json({\n        ok: true,\n        payload: {\n          id: provider.id,\n          apiKey: apiKey ?? null,\n          source: apiKey ? ('config' as const) : ('none' as const),\n        },\n      });\n    },\n  );\n\n  // GET /api/providers - Get ALL available providers and models\n  authenticated.get('/api/providers', async (c) => {\n    const pluginRegistry = getProviderRegistry();\n    const allModels = getAllModels();\n    const availableModels = await getAvailableModels();\n    const configured = new Set(availableModels.map(m => `${m.provider}/${m.id}`));\n\n    const models = allModels.map(m => ({\n      id: `${m.provider}/${m.id}`,\n      name: m.name,\n      provider: m.provider,\n      contextWindow: m.contextWindow ?? 128000,\n      maxTokens: m.maxTokens ?? 4096,\n      reasoning: m.reasoning ?? false,\n      vision: m.input?.includes('image') ?? false,\n      cost: {\n        input: m.cost?.input ?? 0,\n        output: m.cost?.output ?? 0,\n      },\n      available: configured.has(`${m.provider}/${m.id}`),\n      ...(pluginRegistry.has(m.provider) ? { source: 'extension' as const } : {}),\n    }));\n\n    const existingIds = new Set(models.map(m => m.id));\n    for (const plugin of pluginRegistry.listAll()) {\n      for (const model of plugin.models) {\n        const compositeId = `${plugin.id}/${model.id}`;\n        if (!existingIds.has(compositeId)) {\n          models.push(mapPluginModel(plugin.id, model, configured.has(compositeId)));\n          existingIds.add(compositeId);\n        }\n      }\n    }\n\n    // Sort by provider then name\n    models.sort((a, b) => {\n      if (a.provider !== b.provider) return a.provider.localeCompare(b.provider);\n      return a.name.localeCompare(b.name);\n    });\n\n    return c.json({ ok: true, payload: { models } });\n  });\n\n  // GET /api/providers/meta - Get provider metadata (categories, display names)\n  authenticated.get('/api/providers/meta', async (c) => {\n    const providers = getAllProviders();\n    const pluginRegistry = getProviderRegistry();\n\n    const meta = await Promise.all(\n      providers.map(async (provider) => {\n        const plugin = pluginRegistry.get(provider);\n        const extensionId = plugin\n          ? resolveExtensionIdForProvider(service, provider)\n          : undefined;\n        return {\n          id: provider,\n          name: plugin?.name ?? PROVIDER_META[provider]?.name ?? provider,\n          category: plugin ? ('extension' as const) : PROVIDER_META[provider]?.category || 'specialty',\n          supportsOAuth: plugin ? false : (PROVIDER_META[provider]?.supportsOAuth ?? false),\n          supportsApiKey: plugin ? false : (PROVIDER_META[provider]?.supportsApiKey ?? true),\n          configured: await isProviderConfigured(provider),\n          activeKeySource: await getProviderActiveKeySource(provider),\n          baseUrl: resolveProviderApiBaseUrl(provider),\n          ...(extensionId ? { extensionId } : {}),\n        };\n      }),\n    );\n\n    const knownProviderIds = new Set(providers);\n    for (const plugin of pluginRegistry.listAll()) {\n      if (!knownProviderIds.has(plugin.id)) {\n        const extensionId = resolveExtensionIdForProvider(service, plugin.id);\n        meta.push({\n          id: plugin.id,\n          name: plugin.name,\n          category: 'extension',\n          supportsOAuth: false,\n          supportsApiKey: false,\n          configured: true,\n          activeKeySource: 'extension',\n          baseUrl: resolveProviderApiBaseUrl(plugin.id),\n          ...(extensionId ? { extensionId } : {}),\n        });\n      }\n    }\n\n    return c.json({ ok: true, payload: { providers: meta } });\n  });\n\n  /**\n   * POST /api/providers/:providerId/reveal-api-key — plaintext key when stored in the\n   * gateway credential store or models.json (not env vars or OAuth tokens).\n   */\n  authenticated.post(\n    '/api/providers/:providerId/reveal-api-key',\n    strictRateLimitMiddleware,\n    async (c) => {\n      const rawId = c.req.param('providerId')?.trim();\n      if (!rawId) {\n        return c.json({ ok: false, error: { message: 'Missing providerId' } }, 400);\n      }\n      const providerId = rawId.toLowerCase();\n      const resolver = new CredentialResolver();\n      const stored = await resolver.revealGatewayStoredApiKey(providerId);\n      if (stored) {\n        return c.json({\n          ok: true,\n          payload: { id: providerId, apiKey: stored, source: 'credential' as const },\n        });\n      }\n      const fromModelsJson = readModelsJsonProviderApiKey(providerId);\n      if (fromModelsJson) {\n        return c.json({\n          ok: true,\n          payload: { id: providerId, apiKey: fromModelsJson, source: 'models_json' as const },\n        });\n      }\n      return c.json({\n        ok: true,\n        payload: { id: providerId, apiKey: null, source: 'none' as const },\n      });\n    },\n  );\n\n  // DELETE /api/providers/:providerId/key - Remove a provider's stored API key\n  authenticated.delete('/api/providers/:providerId/key', strictRateLimitMiddleware, async (c) => {\n    const providerId = c.req.param('providerId');\n    if (!providerId) {\n      return c.json({ ok: false, error: { message: 'Missing providerId' } }, 400);\n    }\n\n    const normalizedProvider = providerId.toLowerCase();\n    const profileId = `${normalizedProvider}:default`;\n    const resolver = new CredentialResolver();\n\n    try {\n      await resolver.deleteProfile(profileId);\n      return c.json({ ok: true, payload: { deleted: normalizedProvider } });\n    } catch (error) {\n      const errorMessage = error instanceof Error ? error.message : String(error);\n      return c.json({ ok: false, error: { message: `Failed to delete key: ${errorMessage}` } }, 500);\n    }\n  });\n}\n"],"mappings":";;;;;;;;;;;kBAOwC;2BAEuC;gBAc1C;kBAC6B;sBACU;AAM5E,SAAS,6BAA6B,YAAwC;CAC5E,MAAM,EAAE,WAAW,eAAeA,uBAAmB,CAAC;CAEtD,MAAM,OADQ,OAAO,YAAY,WAAW,MAAM,IAC/B;AACnB,QAAO,OAAO,QAAQ,YAAY,IAAI,MAAM,GAAG,IAAI,MAAM,GAAG,KAAA;;;AAI9D,SAAS,qCAAqC,KAAa,YAAwC;CACjG,MAAM,KAAK,WAAW,MAAM,CAAC,aAAa;CAC1C,MAAM,SAAS,IAAI,YAAY;AAC/B,KAAI,CAAC,UAAU,OAAO,WAAW,YAAY,MAAM,QAAQ,OAAO,CAAE,QAAO,KAAA;CAC3E,MAAM,IAAK,OAAgC;AAC3C,QAAO,OAAO,MAAM,YAAY,EAAE,MAAM,GAAG,EAAE,MAAM,GAAG,KAAA;;;AAIxD,SAAS,8BAA8B,SAAyB,YAAwC;CACtG,MAAM,SAAS,QAAQ,oBAAoB;AAC3C,KAAI,CAAC,OAAQ,QAAO,KAAA;AACpB,QAAO,OAAO,uBAAuB,CAAC,eAAe,WAAW,EAAE;;;AAIpE,SAAS,0BAA0B,YAAwC;CACzE,MAAM,QAAQ,kBAAkB,CAAC,QAAQ,CAAC,MAAM,MAAM,EAAE,aAAa,WAAW;AAChF,KAAI,CAAC,OAAO,WAAW,MAAM,YAAA,8BAAyC,QAAO,KAAA;AAC7E,QAAO,MAAM;;AAGf,SAAS,eAAe,YAAoB,OAAgC,WAAoB;AAC9F,QAAO;EACL,IAAI,GAAG,WAAW,GAAG,MAAM;EAC3B,MAAM,MAAM;EACZ,UAAU;EACV,eAAe,MAAM,iBAAiB;EACtC,WAAW,MAAM,mBAAmB;EACpC,WAAW;EACX,QAAQ,MAAM,kBAAkB;EAChC,MAAM;GAAE,OAAO,MAAM,SAAS,SAAS;GAAG,QAAQ,MAAM,SAAS,UAAU;GAAG;EAC9E;EACA,QAAQ;EACT;;AAGH,SAAgB,qBAAqB,eAAqB,MAAoC;CAC5F,MAAM,EAAE,SAAS,8BAA8B;AAG/C,eAAc,IAAI,oBAAoB,OAAO,MAAM;EACjD,MAAM,OAAOA,uBAAmB;EAChC,MAAM,EAAE,QAAQ,UAAU,eAAe,KAAK;EAC9C,MAAM,WAAW,kBAAkB;AAEnC,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP;IACA;IACA,QAAQ,UAAU,KAAA;IAClB,WAAW,SAAS,SAAS,UAAU;IACxC;GACF,CAAC;GACF;AAGF,eAAc,KAAK,6BAA6B,OAAO,MAAM;EAE3D,MAAM,EAAE,WAAW,MADA,EAAE,IAAI,MAAM;EAG/B,MAAM,SAAS,qBAAqB,OAAO;AAE3C,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;GACV,CAAC;GACF;AAGF,eAAc,MAAM,oBAAoB,OAAO,MAAM;EAEnD,MAAM,EAAE,WAAW,MADA,EAAE,IAAI,MAAM;EAI/B,MAAM,SAAS,eADFA,uBACqB,EAAE,OAAO;AAE3C,MAAI,CAAC,OAAO,QACV,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,OAAO;GAAO,EAAE,IAAI;EAIxD,MAAM,WAAW,kBAAkB;AACnC,WAAS,SAAS;AAGlB,UAAQ,KAAK,uBAAuB,EAClC,YAAY,SAAS,QAAQ,CAAC,QAC/B,CAAC;AAEF,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,OAAO;IACP,YAAY,SAAS,QAAQ,CAAC;IAC/B;GACF,CAAC;GACF;AAGF,eAAc,KAAK,2BAA2B,OAAO,MAAM;EACzD,MAAM,WAAW,kBAAkB;AACnC,WAAS,SAAS;EAElB,MAAM,QAAQ,SAAS,UAAU;EACjC,MAAM,SAAS,SAAS,QAAQ;AAEhC,UAAQ,KAAK,wBAAwB;GACnC,YAAY,OAAO;GACnB,OAAO,SAAS,KAAA;GACjB,CAAC;AAEF,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,YAAY,OAAO;IACnB;IACD;GACF,CAAC;GACF;AAGF,eAAc,KAAK,iCAAiC,OAAO,MAAM;EAE/D,MAAM,EAAE,UAAU,MADC,EAAE,IAAI,MAAM;EAG/B,MAAM,SAAS,qBAAqB,MAAM;AAE1C,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;GACV,CAAC;GACF;AAGF,eAAc,IAAI,eAAe,OAAO,MAAM;AAC5C,MAAI,CAAC,QAAQ,gBAAgB,CAC3B,QAAO,0BAA0B,GAAG,cAAc;EAEpD,MAAM,iBAAiB,qBAAqB;EAC5C,MAAM,UAAU,MAAM,oBAAoB,EAAE,KAAI,OAAM;GACpD,IAAI,GAAG,EAAE,SAAS,GAAG,EAAE;GACvB,MAAM,EAAE;GACR,UAAU,EAAE;GACZ,eAAe,EAAE,iBAAiB;GAClC,WAAW,EAAE,aAAa;GAC1B,WAAW,EAAE,aAAa;GAC1B,QAAQ,EAAE,OAAO,SAAS,QAAQ,IAAI;GACtC,MAAM;IACJ,OAAO,EAAE,MAAM,SAAS;IACxB,QAAQ,EAAE,MAAM,UAAU;IAC3B;GACD,GAAI,eAAe,IAAI,EAAE,SAAS,GAAG,EAAE,QAAQ,aAAsB,GAAG,EAAE;GAC3E,EAAE;EAEH,MAAM,cAAc,IAAI,IAAI,OAAO,KAAI,MAAK,EAAE,GAAG,CAAC;AAClD,OAAK,MAAM,UAAU,eAAe,SAAS,CAC3C,MAAK,MAAM,SAAS,OAAO,QAAQ;GACjC,MAAM,cAAc,GAAG,OAAO,GAAG,GAAG,MAAM;AAC1C,OAAI,CAAC,YAAY,IAAI,YAAY,EAAE;AACjC,WAAO,KAAK,eAAe,OAAO,IAAI,OAAO,KAAK,CAAC;AACnD,gBAAY,IAAI,YAAY;;;AAMlC,SAAO,MAAM,GAAG,MAAM;AACpB,OAAI,EAAE,aAAa,EAAE,SAAU,QAAO,EAAE,SAAS,cAAc,EAAE,SAAS;AAC1E,UAAO,EAAE,KAAK,cAAc,EAAE,KAAK;IACnC;AAEF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,QAAQ;GAAE,CAAC;GAChD;AAGF,eAAc,IAAI,yBAAyB,MAAM;EAC/C,MAAM,MAAM,KAAK,QAAQ;EAEzB,MAAM,YADY,oCAAoC,IAC3B,CAAC,KAAK,MAAM;GACrC,MAAM,WAAW,2BAA2B,EAAE,IAAI,IAAI;GACtD,IAAI,aAAa;AACjB,OAAI;AACF,iBAAa,UAAU,eAAe,EAAE,KAAK,CAAC,KAAK;WAC7C;AACN,iBAAa;;AAEf,UAAO;IAAE,GAAG;IAAG;IAAY;IAC3B;AACF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,WAAW;GAAE,CAAC;GACnD;AAIF,eAAc,KAAK,kCAAkC,MAAM;EACzD,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK;EAC5B,MAAM,MAAM,KAAK,QAAQ;EACzB,MAAM,WAAW,2BAA2B,IAAI,IAAI;AACpD,MAAI,CAAC,SACH,QAAO,EAAE,KACP;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,wCAAwC,MAAM;GAAE,EAC/E,IACD;EAEH,IAAI,aAAa;EACjB,IAAI;AACJ,MAAI;AACF,gBAAa,SAAS,eAAe,EAAE,KAAK,CAAC,KAAK;AAClD,OAAI,CAAC,WAAY,UAAS;WACnB,KAAK;AACZ,YAAS,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;;AAE3D,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,IAAI,SAAS;IACb;IACA,GAAI,SAAS,EAAE,QAAQ,GAAG,EAAE;IAC5B,cAAc,SAAS,gBAAgB;IACxC;GACF,CAAC;GACF;;;;;AAMF,eAAc,KACZ,2CACA,2BACA,OAAO,MAAM;EACX,MAAM,QAAQ,EAAE,IAAI,MAAM,KAAK;EAC/B,MAAM,MAAM,KAAK,QAAQ;EACzB,MAAM,WAAW,2BAA2B,OAAO,IAAI;AACvD,MAAI,CAAC,SACH,QAAO,EAAE,KACP;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,wCAAwC,SAAS;GAAE,EAClF,IACD;EAEH,MAAM,SAAS,qCAAqC,KAAK,SAAS,GAAG;AACrE,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,IAAI,SAAS;IACb,QAAQ,UAAU;IAClB,QAAQ,SAAU,WAAsB;IACzC;GACF,CAAC;GAEL;AAGD,eAAc,IAAI,kBAAkB,OAAO,MAAM;EAC/C,MAAM,iBAAiB,qBAAqB;EAC5C,MAAM,YAAY,cAAc;EAChC,MAAM,kBAAkB,MAAM,oBAAoB;EAClD,MAAM,aAAa,IAAI,IAAI,gBAAgB,KAAI,MAAK,GAAG,EAAE,SAAS,GAAG,EAAE,KAAK,CAAC;EAE7E,MAAM,SAAS,UAAU,KAAI,OAAM;GACjC,IAAI,GAAG,EAAE,SAAS,GAAG,EAAE;GACvB,MAAM,EAAE;GACR,UAAU,EAAE;GACZ,eAAe,EAAE,iBAAiB;GAClC,WAAW,EAAE,aAAa;GAC1B,WAAW,EAAE,aAAa;GAC1B,QAAQ,EAAE,OAAO,SAAS,QAAQ,IAAI;GACtC,MAAM;IACJ,OAAO,EAAE,MAAM,SAAS;IACxB,QAAQ,EAAE,MAAM,UAAU;IAC3B;GACD,WAAW,WAAW,IAAI,GAAG,EAAE,SAAS,GAAG,EAAE,KAAK;GAClD,GAAI,eAAe,IAAI,EAAE,SAAS,GAAG,EAAE,QAAQ,aAAsB,GAAG,EAAE;GAC3E,EAAE;EAEH,MAAM,cAAc,IAAI,IAAI,OAAO,KAAI,MAAK,EAAE,GAAG,CAAC;AAClD,OAAK,MAAM,UAAU,eAAe,SAAS,CAC3C,MAAK,MAAM,SAAS,OAAO,QAAQ;GACjC,MAAM,cAAc,GAAG,OAAO,GAAG,GAAG,MAAM;AAC1C,OAAI,CAAC,YAAY,IAAI,YAAY,EAAE;AACjC,WAAO,KAAK,eAAe,OAAO,IAAI,OAAO,WAAW,IAAI,YAAY,CAAC,CAAC;AAC1E,gBAAY,IAAI,YAAY;;;AAMlC,SAAO,MAAM,GAAG,MAAM;AACpB,OAAI,EAAE,aAAa,EAAE,SAAU,QAAO,EAAE,SAAS,cAAc,EAAE,SAAS;AAC1E,UAAO,EAAE,KAAK,cAAc,EAAE,KAAK;IACnC;AAEF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,QAAQ;GAAE,CAAC;GAChD;AAGF,eAAc,IAAI,uBAAuB,OAAO,MAAM;EACpD,MAAM,YAAY,iBAAiB;EACnC,MAAM,iBAAiB,qBAAqB;EAE5C,MAAM,OAAO,MAAM,QAAQ,IACzB,UAAU,IAAI,OAAO,aAAa;GAChC,MAAM,SAAS,eAAe,IAAI,SAAS;GAC3C,MAAM,cAAc,SAChB,8BAA8B,SAAS,SAAS,GAChD,KAAA;AACJ,UAAO;IACL,IAAI;IACJ,MAAM,QAAQ,QAAQ,cAAc,WAAW,QAAQ;IACvD,UAAU,SAAU,cAAwB,cAAc,WAAW,YAAY;IACjF,eAAe,SAAS,QAAS,cAAc,WAAW,iBAAiB;IAC3E,gBAAgB,SAAS,QAAS,cAAc,WAAW,kBAAkB;IAC7E,YAAY,MAAM,qBAAqB,SAAS;IAChD,iBAAiB,MAAM,2BAA2B,SAAS;IAC3D,SAAS,0BAA0B,SAAS;IAC5C,GAAI,cAAc,EAAE,aAAa,GAAG,EAAE;IACvC;IACD,CACH;EAED,MAAM,mBAAmB,IAAI,IAAI,UAAU;AAC3C,OAAK,MAAM,UAAU,eAAe,SAAS,CAC3C,KAAI,CAAC,iBAAiB,IAAI,OAAO,GAAG,EAAE;GACpC,MAAM,cAAc,8BAA8B,SAAS,OAAO,GAAG;AACrE,QAAK,KAAK;IACR,IAAI,OAAO;IACX,MAAM,OAAO;IACb,UAAU;IACV,eAAe;IACf,gBAAgB;IAChB,YAAY;IACZ,iBAAiB;IACjB,SAAS,0BAA0B,OAAO,GAAG;IAC7C,GAAI,cAAc,EAAE,aAAa,GAAG,EAAE;IACvC,CAAC;;AAIN,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,WAAW,MAAM;GAAE,CAAC;GACzD;;;;;AAMF,eAAc,KACZ,6CACA,2BACA,OAAO,MAAM;EACX,MAAM,QAAQ,EAAE,IAAI,MAAM,aAAa,EAAE,MAAM;AAC/C,MAAI,CAAC,MACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,sBAAsB;GAAE,EAAE,IAAI;EAE7E,MAAM,aAAa,MAAM,aAAa;EAEtC,MAAM,SAAS,MAAM,IADA,oBACQ,CAAC,0BAA0B,WAAW;AACnE,MAAI,OACF,QAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IAAE,IAAI;IAAY,QAAQ;IAAQ,QAAQ;IAAuB;GAC3E,CAAC;EAEJ,MAAM,iBAAiB,6BAA6B,WAAW;AAC/D,MAAI,eACF,QAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IAAE,IAAI;IAAY,QAAQ;IAAgB,QAAQ;IAAwB;GACpF,CAAC;AAEJ,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IAAE,IAAI;IAAY,QAAQ;IAAM,QAAQ;IAAiB;GACnE,CAAC;GAEL;AAGD,eAAc,OAAO,kCAAkC,2BAA2B,OAAO,MAAM;EAC7F,MAAM,aAAa,EAAE,IAAI,MAAM,aAAa;AAC5C,MAAI,CAAC,WACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,sBAAsB;GAAE,EAAE,IAAI;EAG7E,MAAM,qBAAqB,WAAW,aAAa;EACnD,MAAM,YAAY,GAAG,mBAAmB;EACxC,MAAM,WAAW,IAAI,oBAAoB;AAEzC,MAAI;AACF,SAAM,SAAS,cAAc,UAAU;AACvC,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,SAAS,oBAAoB;IAAE,CAAC;WAC9D,OAAO;GACd,MAAM,eAAe,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;AAC3E,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS,yBAAyB,gBAAgB;IAAE,EAAE,IAAI;;GAEhG"}
+{"version":3,"file":"models.js","names":["getModelsJsonPath"],"sources":["../../../../../src/gateway/hono/routes/models.ts"],"sourcesContent":["import type { Hono } from 'hono';\n\nimport {\n  getModelsJsonPath,\n  loadModelsJson,\n  saveModelsJson,\n  validateModelsConfig,\n} from '../../../config/models-json.js';\nimport type { Config } from '../../../config/schema.js';\nimport { testApiKeyResolution } from '../../../config/resolve-config-value.js';\nimport {\n  getImageGenerationProvider,\n  listImageGenerationProvidersSummary,\n} from '../../../agent/image/generation/runtime.js';\nimport {\n  EXTENSION_PROVIDER_BASE_URL,\n  getAllModels,\n  getAvailableModels,\n  getModelRegistry,\n  getAllProviders,\n  getProviderAuthState,\n  isProviderConfigured,\n  PROVIDER_META,\n} from '../../../providers/index.js';\nimport { CredentialResolver } from '../../../auth/credentials.js';\nimport { getProviderRegistry } from '../../../providers/plugin-registry.js';\nimport type { ProviderModelDefinition } from '../../../extensions/types/providers.js';\nimport type { GatewayService } from '../../service.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\nimport { respondStartupUnavailable } from '../lib/startup-unavailable.js';\n\nfunction readModelsJsonProviderApiKey(providerId: string): string | undefined {\n  const { config } = loadModelsJson(getModelsJsonPath());\n  const entry = config.providers?.[providerId.trim()];\n  const key = entry?.apiKey;\n  return typeof key === 'string' && key.trim() ? key.trim() : undefined;\n}\n\n/** Plaintext key only when persisted under `cfg.providers.<id>.apiKey` (not env / credential store). */\nfunction readProviderApiKeyFromConfigFileOnly(cfg: Config, providerId: string): string | undefined {\n  const id = providerId.trim().toLowerCase();\n  const bucket = cfg.providers?.[id];\n  if (!bucket || typeof bucket !== 'object' || Array.isArray(bucket)) return undefined;\n  const k = (bucket as { apiKey?: unknown }).apiKey;\n  return typeof k === 'string' && k.trim() ? k.trim() : undefined;\n}\n\n/** Extension id from manifest `providers[]` (e.g. provider `demo` → extension `demo-provider`). */\nfunction resolveExtensionIdForProvider(service: GatewayService, providerId: string): string | undefined {\n  const loader = service.getExtensionLoader();\n  if (!loader) return undefined;\n  return loader.buildManifestRegistry().findByProvider(providerId)?.id;\n}\n\n/** Effective LLM REST base URL for a provider (models.json overrides included). */\nfunction resolveProviderApiBaseUrl(providerId: string): string | undefined {\n  const model = getModelRegistry().getAll().find((m) => m.provider === providerId);\n  if (!model?.baseUrl || model.baseUrl === EXTENSION_PROVIDER_BASE_URL) return undefined;\n  return model.baseUrl;\n}\n\nfunction mapPluginModel(providerId: string, model: ProviderModelDefinition, available: boolean) {\n  return {\n    id: `${providerId}/${model.id}`,\n    name: model.name,\n    provider: providerId,\n    contextWindow: model.contextWindow ?? 128000,\n    maxTokens: model.maxOutputTokens ?? 4096,\n    reasoning: false,\n    vision: model.supportsImages ?? false,\n    cost: { input: model.pricing?.input ?? 0, output: model.pricing?.output ?? 0 },\n    available,\n    source: 'extension' as const,\n  };\n}\n\nexport function registerModelsRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  const { service, strictRateLimitMiddleware } = deps;\n\n  // GET /api/models-json - Get models.json configuration\n  authenticated.get('/api/models-json', async (c) => {\n    const path = getModelsJsonPath();\n    const { config, error } = loadModelsJson(path);\n    const registry = getModelRegistry();\n    \n    return c.json({\n      ok: true,\n      payload: {\n        config,\n        path,\n        exists: error === undefined,\n        loadError: error || registry.getError(),\n      },\n    });\n  });\n\n  // POST /api/models-json/validate - Validate models.json configuration\n  authenticated.post('/api/models-json/validate', async (c) => {\n    const body = await c.req.json();\n    const { config } = body;\n    \n    const result = validateModelsConfig(config);\n    \n    return c.json({\n      ok: true,\n      payload: result,\n    });\n  });\n\n  // PATCH /api/models-json - Save models.json configuration\n  authenticated.patch('/api/models-json', async (c) => {\n    const body = await c.req.json();\n    const { config } = body;\n    \n    const path = getModelsJsonPath();\n    const result = saveModelsJson(path, config);\n    \n    if (!result.success) {\n      return c.json({ ok: false, error: result.error }, 400);\n    }\n    \n    // Refresh registry\n    const registry = getModelRegistry();\n    registry.refresh();\n    \n    // Emit event\n    service.emit('models-json.updated', { \n      modelCount: registry.getAll().length,\n    });\n    \n    return c.json({ \n      ok: true, \n      payload: { \n        saved: true,\n        modelCount: registry.getAll().length,\n      },\n    });\n  });\n\n  // POST /api/models-json/reload - Hot reload models.json\n  authenticated.post('/api/models-json/reload', async (c) => {\n    const registry = getModelRegistry();\n    registry.refresh();\n    \n    const error = registry.getError();\n    const models = registry.getAll();\n    \n    service.emit('models-json.reloaded', { \n      modelCount: models.length,\n      error: error || undefined,\n    });\n    \n    return c.json({\n      ok: true,\n      payload: {\n        modelCount: models.length,\n        error,\n      },\n    });\n  });\n\n  // POST /api/models-json/test-api-key - Test API key resolution\n  authenticated.post('/api/models-json/test-api-key', async (c) => {\n    const body = await c.req.json();\n    const { value } = body;\n    \n    const result = testApiKeyResolution(value);\n    \n    return c.json({\n      ok: true,\n      payload: result,\n    });\n  });\n\n  // GET /api/models - Get available models (only configured providers)\n  authenticated.get('/api/models', async (c) => {\n    if (!service.isGatewayReady()) {\n      return respondStartupUnavailable(c, 'models.list');\n    }\n    const pluginRegistry = getProviderRegistry();\n    const models = (await getAvailableModels()).map(m => ({\n      id: `${m.provider}/${m.id}`,\n      name: m.name,\n      provider: m.provider,\n      contextWindow: m.contextWindow ?? 128000,\n      maxTokens: m.maxTokens ?? 4096,\n      reasoning: m.reasoning ?? false,\n      vision: m.input?.includes('image') ?? false,\n      cost: {\n        input: m.cost?.input ?? 0,\n        output: m.cost?.output ?? 0,\n      },\n      ...(pluginRegistry.has(m.provider) ? { source: 'extension' as const } : {}),\n    }));\n\n    const existingIds = new Set(models.map(m => m.id));\n    for (const plugin of pluginRegistry.listAll()) {\n      for (const model of plugin.models) {\n        const compositeId = `${plugin.id}/${model.id}`;\n        if (!existingIds.has(compositeId)) {\n          models.push(mapPluginModel(plugin.id, model, true));\n          existingIds.add(compositeId);\n        }\n      }\n    }\n\n    // Sort by provider then name\n    models.sort((a, b) => {\n      if (a.provider !== b.provider) return a.provider.localeCompare(b.provider);\n      return a.name.localeCompare(b.name);\n    });\n\n    return c.json({ ok: true, payload: { models } });\n  });\n\n  // GET /api/image/providers — registered image generation providers and models (not in LLM model registry)\n  authenticated.get('/api/image/providers', (c) => {\n    const cfg = deps.service.currentConfig;\n    const summaries = listImageGenerationProvidersSummary(cfg);\n    const providers = summaries.map((p) => {\n      const provider = getImageGenerationProvider(p.id, cfg);\n      let configured = false;\n      try {\n        configured = provider?.isConfigured?.({ cfg }) === true;\n      } catch {\n        configured = false;\n      }\n      return { ...p, configured };\n    });\n    return c.json({ ok: true, payload: { providers } });\n  });\n\n  // POST /api/image/providers/:id/test — lightweight credential probe; does NOT\n  // hit the vendor (no quota burn). Returns `{ ok, configured, reason }`.\n  authenticated.post('/api/image/providers/:id/test', (c) => {\n    const id = c.req.param('id');\n    const cfg = deps.service.currentConfig;\n    const provider = getImageGenerationProvider(id, cfg);\n    if (!provider) {\n      return c.json(\n        { ok: false, error: { message: `Image generation provider not found: ${id}` } },\n        404,\n      );\n    }\n    let configured = false;\n    let reason: string | undefined;\n    try {\n      configured = provider.isConfigured?.({ cfg }) === true;\n      if (!configured) reason = 'Missing API key (set via config or environment).';\n    } catch (err) {\n      reason = err instanceof Error ? err.message : String(err);\n    }\n    return c.json({\n      ok: true,\n      payload: {\n        id: provider.id,\n        configured,\n        ...(reason ? { reason } : {}),\n        defaultModel: provider.defaultModel ?? null,\n      },\n    });\n  });\n\n  /**\n   * POST /api/image/providers/:id/reveal-api-key — return `cfg.providers.<id>.apiKey` plaintext for the\n   * gateway console (same auth as PATCH /api/config). Does not resolve env vars or credential files.\n   */\n  authenticated.post(\n    '/api/image/providers/:id/reveal-api-key',\n    strictRateLimitMiddleware,\n    async (c) => {\n      const rawId = c.req.param('id');\n      const cfg = deps.service.currentConfig;\n      const provider = getImageGenerationProvider(rawId, cfg);\n      if (!provider) {\n        return c.json(\n          { ok: false, error: { message: `Image generation provider not found: ${rawId}` } },\n          404,\n        );\n      }\n      const apiKey = readProviderApiKeyFromConfigFileOnly(cfg, provider.id);\n      return c.json({\n        ok: true,\n        payload: {\n          id: provider.id,\n          apiKey: apiKey ?? null,\n          source: apiKey ? ('config' as const) : ('none' as const),\n        },\n      });\n    },\n  );\n\n  // GET /api/providers - Get ALL available providers and models\n  authenticated.get('/api/providers', async (c) => {\n    const pluginRegistry = getProviderRegistry();\n    const allModels = getAllModels();\n    const availableModels = await getAvailableModels();\n    const configured = new Set(availableModels.map(m => `${m.provider}/${m.id}`));\n\n    const models = allModels.map(m => ({\n      id: `${m.provider}/${m.id}`,\n      name: m.name,\n      provider: m.provider,\n      contextWindow: m.contextWindow ?? 128000,\n      maxTokens: m.maxTokens ?? 4096,\n      reasoning: m.reasoning ?? false,\n      vision: m.input?.includes('image') ?? false,\n      cost: {\n        input: m.cost?.input ?? 0,\n        output: m.cost?.output ?? 0,\n      },\n      available: configured.has(`${m.provider}/${m.id}`),\n      ...(pluginRegistry.has(m.provider) ? { source: 'extension' as const } : {}),\n    }));\n\n    const existingIds = new Set(models.map(m => m.id));\n    for (const plugin of pluginRegistry.listAll()) {\n      for (const model of plugin.models) {\n        const compositeId = `${plugin.id}/${model.id}`;\n        if (!existingIds.has(compositeId)) {\n          models.push(mapPluginModel(plugin.id, model, configured.has(compositeId)));\n          existingIds.add(compositeId);\n        }\n      }\n    }\n\n    // Sort by provider then name\n    models.sort((a, b) => {\n      if (a.provider !== b.provider) return a.provider.localeCompare(b.provider);\n      return a.name.localeCompare(b.name);\n    });\n\n    return c.json({ ok: true, payload: { models } });\n  });\n\n  // GET /api/providers/meta - Get provider metadata (categories, display names)\n  authenticated.get('/api/providers/meta', async (c) => {\n    const providers = getAllProviders();\n    const pluginRegistry = getProviderRegistry();\n\n    const meta = await Promise.all(\n      providers.map(async (provider) => {\n        const plugin = pluginRegistry.get(provider);\n        const extensionId = plugin\n          ? resolveExtensionIdForProvider(service, provider)\n          : undefined;\n        const authState = await getProviderAuthState(provider);\n        const configured = authState.authMode !== 'none' || (await isProviderConfigured(provider));\n        return {\n          id: provider,\n          name: plugin?.name ?? PROVIDER_META[provider]?.name ?? provider,\n          category: plugin ? ('extension' as const) : PROVIDER_META[provider]?.category || 'specialty',\n          supportsOAuth: plugin ? false : (PROVIDER_META[provider]?.supportsOAuth ?? false),\n          supportsApiKey: plugin ? false : (PROVIDER_META[provider]?.supportsApiKey ?? true),\n          configured,\n          activeKeySource: authState.authMode,\n          authMode: authState.authMode,\n          authStatus: authState.authStatus,\n          ...(authState.expiresAt ? { expiresAt: authState.expiresAt } : {}),\n          baseUrl: resolveProviderApiBaseUrl(provider),\n          ...(extensionId ? { extensionId } : {}),\n        };\n      }),\n    );\n\n    const knownProviderIds = new Set(providers);\n    for (const plugin of pluginRegistry.listAll()) {\n      if (!knownProviderIds.has(plugin.id)) {\n        const extensionId = resolveExtensionIdForProvider(service, plugin.id);\n        meta.push({\n          id: plugin.id,\n          name: plugin.name,\n          category: 'extension',\n          supportsOAuth: false,\n          supportsApiKey: false,\n          configured: true,\n          activeKeySource: 'extension',\n          authMode: 'extension',\n          authStatus: 'connected',\n          baseUrl: resolveProviderApiBaseUrl(plugin.id),\n          ...(extensionId ? { extensionId } : {}),\n        });\n      }\n    }\n\n    return c.json({ ok: true, payload: { providers: meta } });\n  });\n\n  /**\n   * POST /api/providers/:providerId/reveal-api-key — plaintext key when stored in the\n   * gateway credential store or models.json (not env vars or OAuth tokens).\n   */\n  authenticated.post(\n    '/api/providers/:providerId/reveal-api-key',\n    strictRateLimitMiddleware,\n    async (c) => {\n      const rawId = c.req.param('providerId')?.trim();\n      if (!rawId) {\n        return c.json({ ok: false, error: { message: 'Missing providerId' } }, 400);\n      }\n      const providerId = rawId.toLowerCase();\n      const resolver = new CredentialResolver();\n      const stored = await resolver.revealGatewayStoredApiKey(providerId);\n      if (stored) {\n        return c.json({\n          ok: true,\n          payload: { id: providerId, apiKey: stored, source: 'credential' as const },\n        });\n      }\n      const fromModelsJson = readModelsJsonProviderApiKey(providerId);\n      if (fromModelsJson) {\n        return c.json({\n          ok: true,\n          payload: { id: providerId, apiKey: fromModelsJson, source: 'models_json' as const },\n        });\n      }\n      return c.json({\n        ok: true,\n        payload: { id: providerId, apiKey: null, source: 'none' as const },\n      });\n    },\n  );\n\n  // DELETE /api/providers/:providerId/key - Remove a provider's stored API key\n  authenticated.delete('/api/providers/:providerId/key', strictRateLimitMiddleware, async (c) => {\n    const providerId = c.req.param('providerId');\n    if (!providerId) {\n      return c.json({ ok: false, error: { message: 'Missing providerId' } }, 400);\n    }\n\n    const normalizedProvider = providerId.toLowerCase();\n    const resolver = new CredentialResolver();\n\n    try {\n      await resolver.deleteProviderCredential(normalizedProvider);\n      return c.json({ ok: true, payload: { deleted: normalizedProvider } });\n    } catch (error) {\n      const errorMessage = error instanceof Error ? error.message : String(error);\n      return c.json({ ok: false, error: { message: `Failed to delete key: ${errorMessage}` } }, 500);\n    }\n  });\n}\n"],"mappings":";;;;;;;;;;;kBAOwC;2BAEuC;gBAc1C;kBAC6B;sBACU;AAM5E,SAAS,6BAA6B,YAAwC;CAC5E,MAAM,EAAE,WAAW,eAAeA,uBAAmB,CAAC;CAEtD,MAAM,OADQ,OAAO,YAAY,WAAW,MAAM,IAC/B;AACnB,QAAO,OAAO,QAAQ,YAAY,IAAI,MAAM,GAAG,IAAI,MAAM,GAAG,KAAA;;;AAI9D,SAAS,qCAAqC,KAAa,YAAwC;CACjG,MAAM,KAAK,WAAW,MAAM,CAAC,aAAa;CAC1C,MAAM,SAAS,IAAI,YAAY;AAC/B,KAAI,CAAC,UAAU,OAAO,WAAW,YAAY,MAAM,QAAQ,OAAO,CAAE,QAAO,KAAA;CAC3E,MAAM,IAAK,OAAgC;AAC3C,QAAO,OAAO,MAAM,YAAY,EAAE,MAAM,GAAG,EAAE,MAAM,GAAG,KAAA;;;AAIxD,SAAS,8BAA8B,SAAyB,YAAwC;CACtG,MAAM,SAAS,QAAQ,oBAAoB;AAC3C,KAAI,CAAC,OAAQ,QAAO,KAAA;AACpB,QAAO,OAAO,uBAAuB,CAAC,eAAe,WAAW,EAAE;;;AAIpE,SAAS,0BAA0B,YAAwC;CACzE,MAAM,QAAQ,kBAAkB,CAAC,QAAQ,CAAC,MAAM,MAAM,EAAE,aAAa,WAAW;AAChF,KAAI,CAAC,OAAO,WAAW,MAAM,YAAA,8BAAyC,QAAO,KAAA;AAC7E,QAAO,MAAM;;AAGf,SAAS,eAAe,YAAoB,OAAgC,WAAoB;AAC9F,QAAO;EACL,IAAI,GAAG,WAAW,GAAG,MAAM;EAC3B,MAAM,MAAM;EACZ,UAAU;EACV,eAAe,MAAM,iBAAiB;EACtC,WAAW,MAAM,mBAAmB;EACpC,WAAW;EACX,QAAQ,MAAM,kBAAkB;EAChC,MAAM;GAAE,OAAO,MAAM,SAAS,SAAS;GAAG,QAAQ,MAAM,SAAS,UAAU;GAAG;EAC9E;EACA,QAAQ;EACT;;AAGH,SAAgB,qBAAqB,eAAqB,MAAoC;CAC5F,MAAM,EAAE,SAAS,8BAA8B;AAG/C,eAAc,IAAI,oBAAoB,OAAO,MAAM;EACjD,MAAM,OAAOA,uBAAmB;EAChC,MAAM,EAAE,QAAQ,UAAU,eAAe,KAAK;EAC9C,MAAM,WAAW,kBAAkB;AAEnC,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP;IACA;IACA,QAAQ,UAAU,KAAA;IAClB,WAAW,SAAS,SAAS,UAAU;IACxC;GACF,CAAC;GACF;AAGF,eAAc,KAAK,6BAA6B,OAAO,MAAM;EAE3D,MAAM,EAAE,WAAW,MADA,EAAE,IAAI,MAAM;EAG/B,MAAM,SAAS,qBAAqB,OAAO;AAE3C,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;GACV,CAAC;GACF;AAGF,eAAc,MAAM,oBAAoB,OAAO,MAAM;EAEnD,MAAM,EAAE,WAAW,MADA,EAAE,IAAI,MAAM;EAI/B,MAAM,SAAS,eADFA,uBACqB,EAAE,OAAO;AAE3C,MAAI,CAAC,OAAO,QACV,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,OAAO;GAAO,EAAE,IAAI;EAIxD,MAAM,WAAW,kBAAkB;AACnC,WAAS,SAAS;AAGlB,UAAQ,KAAK,uBAAuB,EAClC,YAAY,SAAS,QAAQ,CAAC,QAC/B,CAAC;AAEF,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,OAAO;IACP,YAAY,SAAS,QAAQ,CAAC;IAC/B;GACF,CAAC;GACF;AAGF,eAAc,KAAK,2BAA2B,OAAO,MAAM;EACzD,MAAM,WAAW,kBAAkB;AACnC,WAAS,SAAS;EAElB,MAAM,QAAQ,SAAS,UAAU;EACjC,MAAM,SAAS,SAAS,QAAQ;AAEhC,UAAQ,KAAK,wBAAwB;GACnC,YAAY,OAAO;GACnB,OAAO,SAAS,KAAA;GACjB,CAAC;AAEF,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,YAAY,OAAO;IACnB;IACD;GACF,CAAC;GACF;AAGF,eAAc,KAAK,iCAAiC,OAAO,MAAM;EAE/D,MAAM,EAAE,UAAU,MADC,EAAE,IAAI,MAAM;EAG/B,MAAM,SAAS,qBAAqB,MAAM;AAE1C,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;GACV,CAAC;GACF;AAGF,eAAc,IAAI,eAAe,OAAO,MAAM;AAC5C,MAAI,CAAC,QAAQ,gBAAgB,CAC3B,QAAO,0BAA0B,GAAG,cAAc;EAEpD,MAAM,iBAAiB,qBAAqB;EAC5C,MAAM,UAAU,MAAM,oBAAoB,EAAE,KAAI,OAAM;GACpD,IAAI,GAAG,EAAE,SAAS,GAAG,EAAE;GACvB,MAAM,EAAE;GACR,UAAU,EAAE;GACZ,eAAe,EAAE,iBAAiB;GAClC,WAAW,EAAE,aAAa;GAC1B,WAAW,EAAE,aAAa;GAC1B,QAAQ,EAAE,OAAO,SAAS,QAAQ,IAAI;GACtC,MAAM;IACJ,OAAO,EAAE,MAAM,SAAS;IACxB,QAAQ,EAAE,MAAM,UAAU;IAC3B;GACD,GAAI,eAAe,IAAI,EAAE,SAAS,GAAG,EAAE,QAAQ,aAAsB,GAAG,EAAE;GAC3E,EAAE;EAEH,MAAM,cAAc,IAAI,IAAI,OAAO,KAAI,MAAK,EAAE,GAAG,CAAC;AAClD,OAAK,MAAM,UAAU,eAAe,SAAS,CAC3C,MAAK,MAAM,SAAS,OAAO,QAAQ;GACjC,MAAM,cAAc,GAAG,OAAO,GAAG,GAAG,MAAM;AAC1C,OAAI,CAAC,YAAY,IAAI,YAAY,EAAE;AACjC,WAAO,KAAK,eAAe,OAAO,IAAI,OAAO,KAAK,CAAC;AACnD,gBAAY,IAAI,YAAY;;;AAMlC,SAAO,MAAM,GAAG,MAAM;AACpB,OAAI,EAAE,aAAa,EAAE,SAAU,QAAO,EAAE,SAAS,cAAc,EAAE,SAAS;AAC1E,UAAO,EAAE,KAAK,cAAc,EAAE,KAAK;IACnC;AAEF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,QAAQ;GAAE,CAAC;GAChD;AAGF,eAAc,IAAI,yBAAyB,MAAM;EAC/C,MAAM,MAAM,KAAK,QAAQ;EAEzB,MAAM,YADY,oCAAoC,IAC3B,CAAC,KAAK,MAAM;GACrC,MAAM,WAAW,2BAA2B,EAAE,IAAI,IAAI;GACtD,IAAI,aAAa;AACjB,OAAI;AACF,iBAAa,UAAU,eAAe,EAAE,KAAK,CAAC,KAAK;WAC7C;AACN,iBAAa;;AAEf,UAAO;IAAE,GAAG;IAAG;IAAY;IAC3B;AACF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,WAAW;GAAE,CAAC;GACnD;AAIF,eAAc,KAAK,kCAAkC,MAAM;EACzD,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK;EAC5B,MAAM,MAAM,KAAK,QAAQ;EACzB,MAAM,WAAW,2BAA2B,IAAI,IAAI;AACpD,MAAI,CAAC,SACH,QAAO,EAAE,KACP;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,wCAAwC,MAAM;GAAE,EAC/E,IACD;EAEH,IAAI,aAAa;EACjB,IAAI;AACJ,MAAI;AACF,gBAAa,SAAS,eAAe,EAAE,KAAK,CAAC,KAAK;AAClD,OAAI,CAAC,WAAY,UAAS;WACnB,KAAK;AACZ,YAAS,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;;AAE3D,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,IAAI,SAAS;IACb;IACA,GAAI,SAAS,EAAE,QAAQ,GAAG,EAAE;IAC5B,cAAc,SAAS,gBAAgB;IACxC;GACF,CAAC;GACF;;;;;AAMF,eAAc,KACZ,2CACA,2BACA,OAAO,MAAM;EACX,MAAM,QAAQ,EAAE,IAAI,MAAM,KAAK;EAC/B,MAAM,MAAM,KAAK,QAAQ;EACzB,MAAM,WAAW,2BAA2B,OAAO,IAAI;AACvD,MAAI,CAAC,SACH,QAAO,EAAE,KACP;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,wCAAwC,SAAS;GAAE,EAClF,IACD;EAEH,MAAM,SAAS,qCAAqC,KAAK,SAAS,GAAG;AACrE,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,IAAI,SAAS;IACb,QAAQ,UAAU;IAClB,QAAQ,SAAU,WAAsB;IACzC;GACF,CAAC;GAEL;AAGD,eAAc,IAAI,kBAAkB,OAAO,MAAM;EAC/C,MAAM,iBAAiB,qBAAqB;EAC5C,MAAM,YAAY,cAAc;EAChC,MAAM,kBAAkB,MAAM,oBAAoB;EAClD,MAAM,aAAa,IAAI,IAAI,gBAAgB,KAAI,MAAK,GAAG,EAAE,SAAS,GAAG,EAAE,KAAK,CAAC;EAE7E,MAAM,SAAS,UAAU,KAAI,OAAM;GACjC,IAAI,GAAG,EAAE,SAAS,GAAG,EAAE;GACvB,MAAM,EAAE;GACR,UAAU,EAAE;GACZ,eAAe,EAAE,iBAAiB;GAClC,WAAW,EAAE,aAAa;GAC1B,WAAW,EAAE,aAAa;GAC1B,QAAQ,EAAE,OAAO,SAAS,QAAQ,IAAI;GACtC,MAAM;IACJ,OAAO,EAAE,MAAM,SAAS;IACxB,QAAQ,EAAE,MAAM,UAAU;IAC3B;GACD,WAAW,WAAW,IAAI,GAAG,EAAE,SAAS,GAAG,EAAE,KAAK;GAClD,GAAI,eAAe,IAAI,EAAE,SAAS,GAAG,EAAE,QAAQ,aAAsB,GAAG,EAAE;GAC3E,EAAE;EAEH,MAAM,cAAc,IAAI,IAAI,OAAO,KAAI,MAAK,EAAE,GAAG,CAAC;AAClD,OAAK,MAAM,UAAU,eAAe,SAAS,CAC3C,MAAK,MAAM,SAAS,OAAO,QAAQ;GACjC,MAAM,cAAc,GAAG,OAAO,GAAG,GAAG,MAAM;AAC1C,OAAI,CAAC,YAAY,IAAI,YAAY,EAAE;AACjC,WAAO,KAAK,eAAe,OAAO,IAAI,OAAO,WAAW,IAAI,YAAY,CAAC,CAAC;AAC1E,gBAAY,IAAI,YAAY;;;AAMlC,SAAO,MAAM,GAAG,MAAM;AACpB,OAAI,EAAE,aAAa,EAAE,SAAU,QAAO,EAAE,SAAS,cAAc,EAAE,SAAS;AAC1E,UAAO,EAAE,KAAK,cAAc,EAAE,KAAK;IACnC;AAEF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,QAAQ;GAAE,CAAC;GAChD;AAGF,eAAc,IAAI,uBAAuB,OAAO,MAAM;EACpD,MAAM,YAAY,iBAAiB;EACnC,MAAM,iBAAiB,qBAAqB;EAE5C,MAAM,OAAO,MAAM,QAAQ,IACzB,UAAU,IAAI,OAAO,aAAa;GAChC,MAAM,SAAS,eAAe,IAAI,SAAS;GAC3C,MAAM,cAAc,SAChB,8BAA8B,SAAS,SAAS,GAChD,KAAA;GACJ,MAAM,YAAY,MAAM,qBAAqB,SAAS;GACtD,MAAM,aAAa,UAAU,aAAa,UAAW,MAAM,qBAAqB,SAAS;AACzF,UAAO;IACL,IAAI;IACJ,MAAM,QAAQ,QAAQ,cAAc,WAAW,QAAQ;IACvD,UAAU,SAAU,cAAwB,cAAc,WAAW,YAAY;IACjF,eAAe,SAAS,QAAS,cAAc,WAAW,iBAAiB;IAC3E,gBAAgB,SAAS,QAAS,cAAc,WAAW,kBAAkB;IAC7E;IACA,iBAAiB,UAAU;IAC3B,UAAU,UAAU;IACpB,YAAY,UAAU;IACtB,GAAI,UAAU,YAAY,EAAE,WAAW,UAAU,WAAW,GAAG,EAAE;IACjE,SAAS,0BAA0B,SAAS;IAC5C,GAAI,cAAc,EAAE,aAAa,GAAG,EAAE;IACvC;IACD,CACH;EAED,MAAM,mBAAmB,IAAI,IAAI,UAAU;AAC3C,OAAK,MAAM,UAAU,eAAe,SAAS,CAC3C,KAAI,CAAC,iBAAiB,IAAI,OAAO,GAAG,EAAE;GACpC,MAAM,cAAc,8BAA8B,SAAS,OAAO,GAAG;AACrE,QAAK,KAAK;IACR,IAAI,OAAO;IACX,MAAM,OAAO;IACb,UAAU;IACV,eAAe;IACf,gBAAgB;IAChB,YAAY;IACZ,iBAAiB;IACjB,UAAU;IACV,YAAY;IACZ,SAAS,0BAA0B,OAAO,GAAG;IAC7C,GAAI,cAAc,EAAE,aAAa,GAAG,EAAE;IACvC,CAAC;;AAIN,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,WAAW,MAAM;GAAE,CAAC;GACzD;;;;;AAMF,eAAc,KACZ,6CACA,2BACA,OAAO,MAAM;EACX,MAAM,QAAQ,EAAE,IAAI,MAAM,aAAa,EAAE,MAAM;AAC/C,MAAI,CAAC,MACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,sBAAsB;GAAE,EAAE,IAAI;EAE7E,MAAM,aAAa,MAAM,aAAa;EAEtC,MAAM,SAAS,MAAM,IADA,oBACQ,CAAC,0BAA0B,WAAW;AACnE,MAAI,OACF,QAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IAAE,IAAI;IAAY,QAAQ;IAAQ,QAAQ;IAAuB;GAC3E,CAAC;EAEJ,MAAM,iBAAiB,6BAA6B,WAAW;AAC/D,MAAI,eACF,QAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IAAE,IAAI;IAAY,QAAQ;IAAgB,QAAQ;IAAwB;GACpF,CAAC;AAEJ,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IAAE,IAAI;IAAY,QAAQ;IAAM,QAAQ;IAAiB;GACnE,CAAC;GAEL;AAGD,eAAc,OAAO,kCAAkC,2BAA2B,OAAO,MAAM;EAC7F,MAAM,aAAa,EAAE,IAAI,MAAM,aAAa;AAC5C,MAAI,CAAC,WACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,sBAAsB;GAAE,EAAE,IAAI;EAG7E,MAAM,qBAAqB,WAAW,aAAa;EACnD,MAAM,WAAW,IAAI,oBAAoB;AAEzC,MAAI;AACF,SAAM,SAAS,yBAAyB,mBAAmB;AAC3D,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,SAAS,oBAAoB;IAAE,CAAC;WAC9D,OAAO;GACd,MAAM,eAAe,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;AAC3E,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS,yBAAyB,gBAAgB;IAAE,EAAE,IAAI;;GAEhG"}

package/dist/src/gateway/hono/routes/shares.js

@@ -13,8 +13,8 @@ import { getClientIpFromHeaders } from "../../security/loopback.js";
 import { renderFolderLandingPage, renderShareExpiredPage, renderShareLandingPage } from "../../../share/share-landing.js";
 import { consumeSharePublicLimit } from "../../../share/share-rate-limit.js";
 import { createZipStream, planDirectoryFiles } from "../../../share/share-zip.js";
-import { createHash } from "node:crypto";
 import { createReadStream } from "node:fs";
+import { createHash } from "node:crypto";
 import { stat } from "node:fs/promises";
 import { Readable } from "node:stream";
 //#region src/gateway/hono/routes/shares.ts