@xopcai/xopc 0.0.88 → 0.0.90

package/dist/src/gateway/hono/routes/agents.js.map

@@ -1 +1 @@
-{"version":3,"file":"agents.js","names":[],"sources":["../../../../../src/gateway/hono/routes/agents.ts"],"sourcesContent":["import type { Hono } from 'hono';\n\nimport { type Config, parseModelRef } from '../../../config/schema.js';\nimport { getVoiceModelsConfig } from '../../../config/voice.js';\nimport {\n  isProviderConfigured,\n  resolveModel,\n} from '../../../providers/index.js';\nimport { normalizeAgentId } from '../../../agent/agent-scope.js';\nimport {\n  deleteAgentAvatarFile,\n  finalizeCreateAgentDirs,\n  listAgentProfileFiles,\n  listGatewayAgents,\n  prepareCreateAgent,\n  prepareCreateAgentsBatch,\n  prepareDeleteAgent,\n  prepareUpdateAgent,\n  readAgentAvatarFile,\n  readAgentProfileFile,\n  runAfterDeletePurge,\n  writeAgentAvatarFromBase64,\n  writeAgentProfileFile,\n  type CreateAgentBody,\n} from '../../agents-admin.js';\nimport {\n  resolveImageGenerationCapabilities,\n  resolveImageUnderstandingCapabilities,\n} from '../../image-capabilities.js';\nimport {\n  agentModelFallbacksToArray,\n  agentModelRefToString,\n} from '../lib/agent-model.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\n\nfunction parseProfileFiles(raw: unknown): Record<string, string> | undefined | { error: string } {\n  if (raw === undefined) {\n    return undefined;\n  }\n  if (raw === null || typeof raw !== 'object' || Array.isArray(raw)) {\n    return { error: 'profileFiles must be an object' };\n  }\n  const profileFiles: Record<string, string> = {};\n  for (const [name, content] of Object.entries(raw as Record<string, unknown>)) {\n    if (typeof content !== 'string') {\n      return { error: `profileFiles[\"${name}\"] must be a string` };\n    }\n    profileFiles[name] = content;\n  }\n  return profileFiles;\n}\n\nfunction isParseError(value: unknown): value is { error: string } {\n  return (\n    typeof value === 'object' &&\n    value !== null &&\n    'error' in value &&\n    typeof (value as { error: string }).error === 'string'\n  );\n}\n\nfunction parseCreateAgentBody(raw: unknown): CreateAgentBody | { error: string } {\n  if (raw === null || typeof raw !== 'object' || Array.isArray(raw)) {\n    return { error: 'each agent must be an object' };\n  }\n  const body = raw as Record<string, unknown>;\n  const name = typeof body.name === 'string' ? body.name : '';\n  const workspace = typeof body.workspace === 'string' ? body.workspace : '';\n  const model = typeof body.model === 'string' ? body.model : undefined;\n  const agentDir = typeof body.agentDir === 'string' ? body.agentDir : undefined;\n  const description = typeof body.description === 'string' ? body.description : undefined;\n  const id = typeof body.id === 'string' ? body.id : undefined;\n  const toolsDisable = Array.isArray(body.toolsDisable)\n    ? body.toolsDisable.map((x: unknown) => String(x).trim()).filter(Boolean)\n    : undefined;\n  let profileFiles: Record<string, string> | undefined;\n  if (Object.hasOwn(body, 'profileFiles')) {\n    const parsed = parseProfileFiles(body.profileFiles);\n    if (isParseError(parsed)) {\n      return parsed;\n    }\n    profileFiles = parsed;\n  }\n  return {\n    name,\n    workspace,\n    ...(model !== undefined ? { model } : {}),\n    ...(agentDir !== undefined ? { agentDir } : {}),\n    ...(id !== undefined ? { id } : {}),\n    ...(description !== undefined ? { description } : {}),\n    ...(toolsDisable !== undefined ? { toolsDisable } : {}),\n    ...(profileFiles !== undefined ? { profileFiles } : {}),\n  };\n}\n\nexport function registerAgentsRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  const { service, strictRateLimitMiddleware } = deps;\n\n  authenticated.get('/api/agents', async (c) => {\n    const cfg = service.currentConfig as Config;\n    const payload = await listGatewayAgents(cfg);\n    return c.json({ ok: true, payload });\n  });\n\n  authenticated.post('/api/agents/batch', strictRateLimitMiddleware, async (c) => {\n    let body: Record<string, unknown> = {};\n    try {\n      body = (await c.req.json()) as Record<string, unknown>;\n    } catch {\n      return c.json({ ok: false, error: { message: 'Invalid JSON' } }, 400);\n    }\n    const rawAgents = body.agents;\n    if (!Array.isArray(rawAgents)) {\n      return c.json({ ok: false, error: { message: 'agents must be an array' } }, 400);\n    }\n    const parsedAgents: CreateAgentBody[] = [];\n    for (const raw of rawAgents) {\n      const parsed = parseCreateAgentBody(raw);\n      if ('error' in parsed) {\n        return c.json({ ok: false, error: { message: parsed.error } }, 400);\n      }\n      parsedAgents.push(parsed);\n    }\n    const prep = prepareCreateAgentsBatch(service.currentConfig as Config, parsedAgents);\n    if (prep.ok === false) {\n      return c.json({ ok: false, error: { message: prep.error } }, prep.status ?? 400);\n    }\n    const { nextConfig, created } = prep.data;\n    const save = await service.saveConfig(nextConfig);\n    if (!save.saved) {\n      return c.json({ ok: false, error: { message: save.error ?? 'save failed' } }, 500);\n    }\n    const cfg = service.currentConfig as Config;\n    const agentIds: string[] = [];\n    for (const item of created) {\n      const finalized = await finalizeCreateAgentDirs(cfg, item.agentId, {\n        ...(item.profileFiles !== undefined ? { profileFiles: item.profileFiles } : {}),\n      });\n      if (finalized.ok === false) {\n        return c.json({ ok: false, error: { message: finalized.error } }, finalized.status ?? 400);\n      }\n      agentIds.push(item.agentId);\n    }\n    const agentsPayload = await listGatewayAgents(cfg);\n    return c.json({\n      ok: true,\n      payload: {\n        agentIds,\n        agents: agentsPayload,\n      },\n    });\n  });\n\n  authenticated.post('/api/agents', strictRateLimitMiddleware, async (c) => {\n    let body: Record<string, unknown> = {};\n    try {\n      body = (await c.req.json()) as Record<string, unknown>;\n    } catch {\n      return c.json({ ok: false, error: { message: 'Invalid JSON' } }, 400);\n    }\n    const parsed = parseCreateAgentBody(body);\n    if ('error' in parsed) {\n      return c.json({ ok: false, error: { message: parsed.error } }, 400);\n    }\n    const prep = prepareCreateAgent(service.currentConfig as Config, parsed);\n    if (prep.ok === false) {\n      return c.json({ ok: false, error: { message: prep.error } }, prep.status ?? 400);\n    }\n    const { nextConfig, agentId } = prep.data;\n    const save = await service.saveConfig(nextConfig);\n    if (!save.saved) {\n      return c.json({ ok: false, error: { message: save.error ?? 'save failed' } }, 500);\n    }\n    const finalized = await finalizeCreateAgentDirs(service.currentConfig as Config, agentId, {\n      ...(parsed.profileFiles !== undefined ? { profileFiles: parsed.profileFiles } : {}),\n    });\n    if (finalized.ok === false) {\n      return c.json({ ok: false, error: { message: finalized.error } }, finalized.status ?? 400);\n    }\n    const agentsPayload = await listGatewayAgents(service.currentConfig as Config);\n    return c.json({\n      ok: true,\n      payload: {\n        agentId,\n        agents: agentsPayload,\n      },\n    });\n  });\n\n  authenticated.patch('/api/agents/:id', strictRateLimitMiddleware, async (c) => {\n    const id = normalizeAgentId(c.req.param('id') ?? '');\n    let body: Record<string, unknown> = {};\n    try {\n      body = (await c.req.json()) as Record<string, unknown>;\n    } catch {\n      return c.json({ ok: false, error: { message: 'Invalid JSON' } }, 400);\n    }\n    const skillsPatch =\n      body.skills === null\n        ? null\n        : Array.isArray(body.skills)\n          ? body.skills.map((x: unknown) => String(x).trim()).filter(Boolean)\n          : undefined;\n    const toolsDisablePatch =\n      body.toolsDisable === null\n        ? null\n        : Array.isArray(body.toolsDisable)\n          ? body.toolsDisable.map((x: unknown) => String(x).trim()).filter(Boolean)\n          : undefined;\n\n    const descriptionPatch: string | null | undefined = Object.hasOwn(body, 'description')\n      ? body.description === null\n        ? null\n        : typeof body.description === 'string'\n          ? body.description\n          : undefined\n      : undefined;\n\n    const prep = prepareUpdateAgent(service.currentConfig as Config, id, {\n      name: typeof body.name === 'string' ? body.name : undefined,\n      ...(descriptionPatch !== undefined ? { description: descriptionPatch } : {}),\n      workspace: typeof body.workspace === 'string' ? body.workspace : undefined,\n      model:\n        body.model === null\n          ? null\n          : typeof body.model === 'string'\n            ? body.model\n            : undefined,\n      agentDir:\n        body.agentDir === null\n          ? null\n          : typeof body.agentDir === 'string'\n            ? body.agentDir\n            : undefined,\n      setDefault: body.setDefault === true,\n      ...(skillsPatch !== undefined ? { skills: skillsPatch } : {}),\n      ...(toolsDisablePatch !== undefined ? { toolsDisable: toolsDisablePatch } : {}),\n    });\n    if (prep.ok === false) {\n      return c.json({ ok: false, error: { message: prep.error } }, prep.status ?? 400);\n    }\n    const save = await service.saveConfig(prep.data.nextConfig);\n    if (!save.saved) {\n      return c.json({ ok: false, error: { message: save.error ?? 'save failed' } }, 500);\n    }\n    const agentsPayload = await listGatewayAgents(service.currentConfig as Config);\n    return c.json({ ok: true, payload: agentsPayload });\n  });\n\n  authenticated.delete('/api/agents/:id', strictRateLimitMiddleware, async (c) => {\n    const id = normalizeAgentId(c.req.param('id') ?? '');\n    const purge = c.req.query('purge') === '1' || c.req.query('purge') === 'true';\n    const prep = prepareDeleteAgent(service.currentConfig as Config, id);\n    if (prep.ok === false) {\n      return c.json({ ok: false, error: { message: prep.error } }, prep.status ?? 400);\n    }\n    const { nextConfig, agentId } = prep.data;\n    const save = await service.saveConfig(nextConfig);\n    if (!save.saved) {\n      return c.json({ ok: false, error: { message: save.error ?? 'save failed' } }, 500);\n    }\n    if (purge) {\n      await runAfterDeletePurge(service.currentConfig as Config, agentId);\n    }\n    const agentsPayload = await listGatewayAgents(service.currentConfig as Config);\n    return c.json({\n      ok: true,\n      payload: { agentId, purged: purge, agents: agentsPayload },\n    });\n  });\n\n  authenticated.get('/api/agents/:id/avatar', async (c) => {\n    const id = normalizeAgentId(c.req.param('id') ?? '');\n    const res = await readAgentAvatarFile(service.currentConfig as Config, id);\n    if (res.ok === false) {\n      return c.json({ ok: false, error: { message: res.error } }, res.status ?? 400);\n    }\n    return new Response(res.data.buffer, {\n      status: 200,\n      headers: {\n        'Content-Type': res.data.contentType,\n        'Cache-Control': 'private, max-age=3600',\n      },\n    });\n  });\n\n  authenticated.put('/api/agents/:id/avatar', strictRateLimitMiddleware, async (c) => {\n    const id = normalizeAgentId(c.req.param('id') ?? '');\n    let body: Record<string, unknown> = {};\n    try {\n      body = (await c.req.json()) as Record<string, unknown>;\n    } catch {\n      return c.json({ ok: false, error: { message: 'Invalid JSON' } }, 400);\n    }\n    const base64 = typeof body.base64 === 'string' ? body.base64 : '';\n    const mimeType = typeof body.mimeType === 'string' ? body.mimeType : '';\n    const res = await writeAgentAvatarFromBase64(service.currentConfig as Config, id, base64, mimeType);\n    if (res.ok === false) {\n      return c.json({ ok: false, error: { message: res.error } }, res.status ?? 400);\n    }\n    return c.json({ ok: true, payload: { agentId: res.data.agentId } });\n  });\n\n  authenticated.delete('/api/agents/:id/avatar', strictRateLimitMiddleware, async (c) => {\n    const id = normalizeAgentId(c.req.param('id') ?? '');\n    const res = await deleteAgentAvatarFile(service.currentConfig as Config, id);\n    if (res.ok === false) {\n      return c.json({ ok: false, error: { message: res.error } }, res.status ?? 400);\n    }\n    return c.json({ ok: true, payload: { agentId: res.data.agentId } });\n  });\n\n  authenticated.get('/api/agents/:id/files', async (c) => {\n    const id = normalizeAgentId(c.req.param('id') ?? '');\n    const res = await listAgentProfileFiles(service.currentConfig as Config, id);\n    if (res.ok === false) {\n      return c.json({ ok: false, error: { message: res.error } }, res.status ?? 400);\n    }\n    return c.json({ ok: true, payload: res.data });\n  });\n\n  authenticated.get('/api/agents/:id/files/:name', async (c) => {\n    const id = normalizeAgentId(c.req.param('id') ?? '');\n    const name = decodeURIComponent(c.req.param('name') ?? '');\n    const res = await readAgentProfileFile(service.currentConfig as Config, id, name);\n    if (res.ok === false) {\n      return c.json({ ok: false, error: { message: res.error } }, res.status ?? 400);\n    }\n    return c.json({ ok: true, payload: { agentId: res.data.agentId, name, content: res.data.content } });\n  });\n\n  authenticated.put('/api/agents/:id/files/:name', strictRateLimitMiddleware, async (c) => {\n    const id = normalizeAgentId(c.req.param('id') ?? '');\n    const name = decodeURIComponent(c.req.param('name') ?? '');\n    let content = '';\n    try {\n      const body = (await c.req.json()) as { content?: unknown };\n      content = typeof body.content === 'string' ? body.content : '';\n    } catch {\n      return c.json({ ok: false, error: { message: 'Invalid JSON' } }, 400);\n    }\n    const res = await writeAgentProfileFile(service.currentConfig as Config, id, name, content);\n    if (res.ok === false) {\n      return c.json({ ok: false, error: { message: res.error } }, res.status ?? 400);\n    }\n    return c.json({ ok: true, payload: { agentId: res.data.agentId, name } });\n  });\n\n  // GET /api/voice/models - Get available STT/TTS models\n  authenticated.get('/api/voice/models', (c) => {\n    const models = getVoiceModelsConfig();\n    return c.json({ ok: true, payload: { models } });\n  });\n\n  authenticated.get('/api/image/capabilities', async (c) => {\n    const config = service.currentConfig as Config;\n    const imageGenerationProviders = await resolveImageGenerationCapabilities(config);\n    const imageUnderstandingProviders = await resolveImageUnderstandingCapabilities(config);\n    return c.json({\n      ok: true,\n      payload: {\n        current: {\n          imageModel: agentModelRefToString(config.agents?.defaults?.imageModel) ?? null,\n          imageModelFallbacks: agentModelFallbacksToArray(config.agents?.defaults?.imageModel),\n          imageGenerationModel: agentModelRefToString(config.agents?.defaults?.imageGenerationModel) ?? null,\n          imageGenerationModelFallbacks: agentModelFallbacksToArray(\n            config.agents?.defaults?.imageGenerationModel,\n          ),\n          mediaMaxMb: config.agents?.defaults?.mediaMaxMb ?? null,\n        },\n        imageGeneration: { providers: imageGenerationProviders },\n        imageUnderstanding: { providers: imageUnderstandingProviders },\n      },\n    });\n  });\n\n  authenticated.post('/api/image/validate-model', strictRateLimitMiddleware, async (c) => {\n    let body: { modelRef?: unknown };\n    try {\n      body = (await c.req.json()) as { modelRef?: unknown };\n    } catch {\n      return c.json({ ok: false, error: 'Invalid JSON' }, 400);\n    }\n    const modelRef = body.modelRef;\n    if (!modelRef || typeof modelRef !== 'string') {\n      return c.json({ ok: false, error: 'modelRef is required' }, 400);\n    }\n\n    const parsed = parseModelRef(modelRef);\n    if (!parsed) {\n      return c.json({\n        ok: true,\n        payload: {\n          valid: false,\n          reason: 'invalid_format',\n          message: 'Model reference must be in \"provider/model\" format',\n        },\n      });\n    }\n\n    const configured = await isProviderConfigured(parsed.provider);\n    if (!configured) {\n      return c.json({\n        ok: true,\n        payload: {\n          valid: false,\n          reason: 'provider_not_configured',\n          message: `Provider \"${parsed.provider}\" is not configured. Set the API key first.`,\n          provider: parsed.provider,\n        },\n      });\n    }\n\n    try {\n      resolveModel(modelRef);\n    } catch {\n      return c.json({\n        ok: true,\n        payload: {\n          valid: false,\n          reason: 'model_not_found',\n          message: `Model not found in registry: ${modelRef}`,\n          provider: parsed.provider,\n          model: parsed.model,\n        },\n      });\n    }\n\n    return c.json({\n      ok: true,\n      payload: {\n        valid: true,\n        provider: parsed.provider,\n        model: parsed.model,\n      },\n    });\n  });\n\n}\n"],"mappings":";;;;;;;;aAEuE;gBAKlC;kBAC4B;AA2BjE,SAAS,kBAAkB,KAAsE;AAC/F,KAAI,QAAQ,KAAA,EACV;AAEF,KAAI,QAAQ,QAAQ,OAAO,QAAQ,YAAY,MAAM,QAAQ,IAAI,CAC/D,QAAO,EAAE,OAAO,kCAAkC;CAEpD,MAAM,eAAuC,EAAE;AAC/C,MAAK,MAAM,CAAC,MAAM,YAAY,OAAO,QAAQ,IAA+B,EAAE;AAC5E,MAAI,OAAO,YAAY,SACrB,QAAO,EAAE,OAAO,iBAAiB,KAAK,sBAAsB;AAE9D,eAAa,QAAQ;;AAEvB,QAAO;;AAGT,SAAS,aAAa,OAA4C;AAChE,QACE,OAAO,UAAU,YACjB,UAAU,QACV,WAAW,SACX,OAAQ,MAA4B,UAAU;;AAIlD,SAAS,qBAAqB,KAAmD;AAC/E,KAAI,QAAQ,QAAQ,OAAO,QAAQ,YAAY,MAAM,QAAQ,IAAI,CAC/D,QAAO,EAAE,OAAO,gCAAgC;CAElD,MAAM,OAAO;CACb,MAAM,OAAO,OAAO,KAAK,SAAS,WAAW,KAAK,OAAO;CACzD,MAAM,YAAY,OAAO,KAAK,cAAc,WAAW,KAAK,YAAY;CACxE,MAAM,QAAQ,OAAO,KAAK,UAAU,WAAW,KAAK,QAAQ,KAAA;CAC5D,MAAM,WAAW,OAAO,KAAK,aAAa,WAAW,KAAK,WAAW,KAAA;CACrE,MAAM,cAAc,OAAO,KAAK,gBAAgB,WAAW,KAAK,cAAc,KAAA;CAC9E,MAAM,KAAK,OAAO,KAAK,OAAO,WAAW,KAAK,KAAK,KAAA;CACnD,MAAM,eAAe,MAAM,QAAQ,KAAK,aAAa,GACjD,KAAK,aAAa,KAAK,MAAe,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC,OAAO,QAAQ,GACvE,KAAA;CACJ,IAAI;AACJ,KAAI,OAAO,OAAO,MAAM,eAAe,EAAE;EACvC,MAAM,SAAS,kBAAkB,KAAK,aAAa;AACnD,MAAI,aAAa,OAAO,CACtB,QAAO;AAET,iBAAe;;AAEjB,QAAO;EACL;EACA;EACA,GAAI,UAAU,KAAA,IAAY,EAAE,OAAO,GAAG,EAAE;EACxC,GAAI,aAAa,KAAA,IAAY,EAAE,UAAU,GAAG,EAAE;EAC9C,GAAI,OAAO,KAAA,IAAY,EAAE,IAAI,GAAG,EAAE;EAClC,GAAI,gBAAgB,KAAA,IAAY,EAAE,aAAa,GAAG,EAAE;EACpD,GAAI,iBAAiB,KAAA,IAAY,EAAE,cAAc,GAAG,EAAE;EACtD,GAAI,iBAAiB,KAAA,IAAY,EAAE,cAAc,GAAG,EAAE;EACvD;;AAGH,SAAgB,qBAAqB,eAAqB,MAAoC;CAC5F,MAAM,EAAE,SAAS,8BAA8B;AAE/C,eAAc,IAAI,eAAe,OAAO,MAAM;EAC5C,MAAM,MAAM,QAAQ;EACpB,MAAM,UAAU,MAAM,kBAAkB,IAAI;AAC5C,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM;GAAS,CAAC;GACpC;AAEF,eAAc,KAAK,qBAAqB,2BAA2B,OAAO,MAAM;EAC9E,IAAI,OAAgC,EAAE;AACtC,MAAI;AACF,UAAQ,MAAM,EAAE,IAAI,MAAM;UACpB;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS,gBAAgB;IAAE,EAAE,IAAI;;EAEvE,MAAM,YAAY,KAAK;AACvB,MAAI,CAAC,MAAM,QAAQ,UAAU,CAC3B,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,2BAA2B;GAAE,EAAE,IAAI;EAElF,MAAM,eAAkC,EAAE;AAC1C,OAAK,MAAM,OAAO,WAAW;GAC3B,MAAM,SAAS,qBAAqB,IAAI;AACxC,OAAI,WAAW,OACb,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS,OAAO,OAAO;IAAE,EAAE,IAAI;AAErE,gBAAa,KAAK,OAAO;;EAE3B,MAAM,OAAO,yBAAyB,QAAQ,eAAyB,aAAa;AACpF,MAAI,KAAK,OAAO,MACd,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,KAAK,OAAO;GAAE,EAAE,KAAK,UAAU,IAAI;EAElF,MAAM,EAAE,YAAY,YAAY,KAAK;EACrC,MAAM,OAAO,MAAM,QAAQ,WAAW,WAAW;AACjD,MAAI,CAAC,KAAK,MACR,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,KAAK,SAAS,eAAe;GAAE,EAAE,IAAI;EAEpF,MAAM,MAAM,QAAQ;EACpB,MAAM,WAAqB,EAAE;AAC7B,OAAK,MAAM,QAAQ,SAAS;GAC1B,MAAM,YAAY,MAAM,wBAAwB,KAAK,KAAK,SAAS,EACjE,GAAI,KAAK,iBAAiB,KAAA,IAAY,EAAE,cAAc,KAAK,cAAc,GAAG,EAAE,EAC/E,CAAC;AACF,OAAI,UAAU,OAAO,MACnB,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS,UAAU,OAAO;IAAE,EAAE,UAAU,UAAU,IAAI;AAE5F,YAAS,KAAK,KAAK,QAAQ;;EAE7B,MAAM,gBAAgB,MAAM,kBAAkB,IAAI;AAClD,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP;IACA,QAAQ;IACT;GACF,CAAC;GACF;AAEF,eAAc,KAAK,eAAe,2BAA2B,OAAO,MAAM;EACxE,IAAI,OAAgC,EAAE;AACtC,MAAI;AACF,UAAQ,MAAM,EAAE,IAAI,MAAM;UACpB;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS,gBAAgB;IAAE,EAAE,IAAI;;EAEvE,MAAM,SAAS,qBAAqB,KAAK;AACzC,MAAI,WAAW,OACb,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,OAAO,OAAO;GAAE,EAAE,IAAI;EAErE,MAAM,OAAO,mBAAmB,QAAQ,eAAyB,OAAO;AACxE,MAAI,KAAK,OAAO,MACd,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,KAAK,OAAO;GAAE,EAAE,KAAK,UAAU,IAAI;EAElF,MAAM,EAAE,YAAY,YAAY,KAAK;EACrC,MAAM,OAAO,MAAM,QAAQ,WAAW,WAAW;AACjD,MAAI,CAAC,KAAK,MACR,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,KAAK,SAAS,eAAe;GAAE,EAAE,IAAI;EAEpF,MAAM,YAAY,MAAM,wBAAwB,QAAQ,eAAyB,SAAS,EACxF,GAAI,OAAO,iBAAiB,KAAA,IAAY,EAAE,cAAc,OAAO,cAAc,GAAG,EAAE,EACnF,CAAC;AACF,MAAI,UAAU,OAAO,MACnB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,UAAU,OAAO;GAAE,EAAE,UAAU,UAAU,IAAI;EAE5F,MAAM,gBAAgB,MAAM,kBAAkB,QAAQ,cAAwB;AAC9E,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP;IACA,QAAQ;IACT;GACF,CAAC;GACF;AAEF,eAAc,MAAM,mBAAmB,2BAA2B,OAAO,MAAM;EAC7E,MAAM,KAAK,iBAAiB,EAAE,IAAI,MAAM,KAAK,IAAI,GAAG;EACpD,IAAI,OAAgC,EAAE;AACtC,MAAI;AACF,UAAQ,MAAM,EAAE,IAAI,MAAM;UACpB;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS,gBAAgB;IAAE,EAAE,IAAI;;EAEvE,MAAM,cACJ,KAAK,WAAW,OACZ,OACA,MAAM,QAAQ,KAAK,OAAO,GACxB,KAAK,OAAO,KAAK,MAAe,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC,OAAO,QAAQ,GACjE,KAAA;EACR,MAAM,oBACJ,KAAK,iBAAiB,OAClB,OACA,MAAM,QAAQ,KAAK,aAAa,GAC9B,KAAK,aAAa,KAAK,MAAe,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC,OAAO,QAAQ,GACvE,KAAA;EAER,MAAM,mBAA8C,OAAO,OAAO,MAAM,cAAc,GAClF,KAAK,gBAAgB,OACnB,OACA,OAAO,KAAK,gBAAgB,WAC1B,KAAK,cACL,KAAA,IACJ,KAAA;EAEJ,MAAM,OAAO,mBAAmB,QAAQ,eAAyB,IAAI;GACnE,MAAM,OAAO,KAAK,SAAS,WAAW,KAAK,OAAO,KAAA;GAClD,GAAI,qBAAqB,KAAA,IAAY,EAAE,aAAa,kBAAkB,GAAG,EAAE;GAC3E,WAAW,OAAO,KAAK,cAAc,WAAW,KAAK,YAAY,KAAA;GACjE,OACE,KAAK,UAAU,OACX,OACA,OAAO,KAAK,UAAU,WACpB,KAAK,QACL,KAAA;GACR,UACE,KAAK,aAAa,OACd,OACA,OAAO,KAAK,aAAa,WACvB,KAAK,WACL,KAAA;GACR,YAAY,KAAK,eAAe;GAChC,GAAI,gBAAgB,KAAA,IAAY,EAAE,QAAQ,aAAa,GAAG,EAAE;GAC5D,GAAI,sBAAsB,KAAA,IAAY,EAAE,cAAc,mBAAmB,GAAG,EAAE;GAC/E,CAAC;AACF,MAAI,KAAK,OAAO,MACd,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,KAAK,OAAO;GAAE,EAAE,KAAK,UAAU,IAAI;EAElF,MAAM,OAAO,MAAM,QAAQ,WAAW,KAAK,KAAK,WAAW;AAC3D,MAAI,CAAC,KAAK,MACR,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,KAAK,SAAS,eAAe;GAAE,EAAE,IAAI;EAEpF,MAAM,gBAAgB,MAAM,kBAAkB,QAAQ,cAAwB;AAC9E,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;GAAe,CAAC;GACnD;AAEF,eAAc,OAAO,mBAAmB,2BAA2B,OAAO,MAAM;EAC9E,MAAM,KAAK,iBAAiB,EAAE,IAAI,MAAM,KAAK,IAAI,GAAG;EACpD,MAAM,QAAQ,EAAE,IAAI,MAAM,QAAQ,KAAK,OAAO,EAAE,IAAI,MAAM,QAAQ,KAAK;EACvE,MAAM,OAAO,mBAAmB,QAAQ,eAAyB,GAAG;AACpE,MAAI,KAAK,OAAO,MACd,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,KAAK,OAAO;GAAE,EAAE,KAAK,UAAU,IAAI;EAElF,MAAM,EAAE,YAAY,YAAY,KAAK;EACrC,MAAM,OAAO,MAAM,QAAQ,WAAW,WAAW;AACjD,MAAI,CAAC,KAAK,MACR,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,KAAK,SAAS,eAAe;GAAE,EAAE,IAAI;AAEpF,MAAI,MACF,OAAM,oBAAoB,QAAQ,eAAyB,QAAQ;EAErE,MAAM,gBAAgB,MAAM,kBAAkB,QAAQ,cAAwB;AAC9E,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IAAE;IAAS,QAAQ;IAAO,QAAQ;IAAe;GAC3D,CAAC;GACF;AAEF,eAAc,IAAI,0BAA0B,OAAO,MAAM;EACvD,MAAM,KAAK,iBAAiB,EAAE,IAAI,MAAM,KAAK,IAAI,GAAG;EACpD,MAAM,MAAM,MAAM,oBAAoB,QAAQ,eAAyB,GAAG;AAC1E,MAAI,IAAI,OAAO,MACb,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,IAAI,OAAO;GAAE,EAAE,IAAI,UAAU,IAAI;AAEhF,SAAO,IAAI,SAAS,IAAI,KAAK,QAAQ;GACnC,QAAQ;GACR,SAAS;IACP,gBAAgB,IAAI,KAAK;IACzB,iBAAiB;IAClB;GACF,CAAC;GACF;AAEF,eAAc,IAAI,0BAA0B,2BAA2B,OAAO,MAAM;EAClF,MAAM,KAAK,iBAAiB,EAAE,IAAI,MAAM,KAAK,IAAI,GAAG;EACpD,IAAI,OAAgC,EAAE;AACtC,MAAI;AACF,UAAQ,MAAM,EAAE,IAAI,MAAM;UACpB;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS,gBAAgB;IAAE,EAAE,IAAI;;EAEvE,MAAM,SAAS,OAAO,KAAK,WAAW,WAAW,KAAK,SAAS;EAC/D,MAAM,WAAW,OAAO,KAAK,aAAa,WAAW,KAAK,WAAW;EACrE,MAAM,MAAM,MAAM,2BAA2B,QAAQ,eAAyB,IAAI,QAAQ,SAAS;AACnG,MAAI,IAAI,OAAO,MACb,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,IAAI,OAAO;GAAE,EAAE,IAAI,UAAU,IAAI;AAEhF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,SAAS,IAAI,KAAK,SAAS;GAAE,CAAC;GACnE;AAEF,eAAc,OAAO,0BAA0B,2BAA2B,OAAO,MAAM;EACrF,MAAM,KAAK,iBAAiB,EAAE,IAAI,MAAM,KAAK,IAAI,GAAG;EACpD,MAAM,MAAM,MAAM,sBAAsB,QAAQ,eAAyB,GAAG;AAC5E,MAAI,IAAI,OAAO,MACb,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,IAAI,OAAO;GAAE,EAAE,IAAI,UAAU,IAAI;AAEhF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,SAAS,IAAI,KAAK,SAAS;GAAE,CAAC;GACnE;AAEF,eAAc,IAAI,yBAAyB,OAAO,MAAM;EACtD,MAAM,KAAK,iBAAiB,EAAE,IAAI,MAAM,KAAK,IAAI,GAAG;EACpD,MAAM,MAAM,MAAM,sBAAsB,QAAQ,eAAyB,GAAG;AAC5E,MAAI,IAAI,OAAO,MACb,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,IAAI,OAAO;GAAE,EAAE,IAAI,UAAU,IAAI;AAEhF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,IAAI;GAAM,CAAC;GAC9C;AAEF,eAAc,IAAI,+BAA+B,OAAO,MAAM;EAC5D,MAAM,KAAK,iBAAiB,EAAE,IAAI,MAAM,KAAK,IAAI,GAAG;EACpD,MAAM,OAAO,mBAAmB,EAAE,IAAI,MAAM,OAAO,IAAI,GAAG;EAC1D,MAAM,MAAM,MAAM,qBAAqB,QAAQ,eAAyB,IAAI,KAAK;AACjF,MAAI,IAAI,OAAO,MACb,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,IAAI,OAAO;GAAE,EAAE,IAAI,UAAU,IAAI;AAEhF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;IAAE,SAAS,IAAI,KAAK;IAAS;IAAM,SAAS,IAAI,KAAK;IAAS;GAAE,CAAC;GACpG;AAEF,eAAc,IAAI,+BAA+B,2BAA2B,OAAO,MAAM;EACvF,MAAM,KAAK,iBAAiB,EAAE,IAAI,MAAM,KAAK,IAAI,GAAG;EACpD,MAAM,OAAO,mBAAmB,EAAE,IAAI,MAAM,OAAO,IAAI,GAAG;EAC1D,IAAI,UAAU;AACd,MAAI;GACF,MAAM,OAAQ,MAAM,EAAE,IAAI,MAAM;AAChC,aAAU,OAAO,KAAK,YAAY,WAAW,KAAK,UAAU;UACtD;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS,gBAAgB;IAAE,EAAE,IAAI;;EAEvE,MAAM,MAAM,MAAM,sBAAsB,QAAQ,eAAyB,IAAI,MAAM,QAAQ;AAC3F,MAAI,IAAI,OAAO,MACb,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,IAAI,OAAO;GAAE,EAAE,IAAI,UAAU,IAAI;AAEhF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;IAAE,SAAS,IAAI,KAAK;IAAS;IAAM;GAAE,CAAC;GACzE;AAGF,eAAc,IAAI,sBAAsB,MAAM;EAC5C,MAAM,SAAS,sBAAsB;AACrC,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,QAAQ;GAAE,CAAC;GAChD;AAEF,eAAc,IAAI,2BAA2B,OAAO,MAAM;EACxD,MAAM,SAAS,QAAQ;EACvB,MAAM,2BAA2B,MAAM,mCAAmC,OAAO;EACjF,MAAM,8BAA8B,MAAM,sCAAsC,OAAO;AACvF,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,SAAS;KACP,YAAY,sBAAsB,OAAO,QAAQ,UAAU,WAAW,IAAI;KAC1E,qBAAqB,2BAA2B,OAAO,QAAQ,UAAU,WAAW;KACpF,sBAAsB,sBAAsB,OAAO,QAAQ,UAAU,qBAAqB,IAAI;KAC9F,+BAA+B,2BAC7B,OAAO,QAAQ,UAAU,qBAC1B;KACD,YAAY,OAAO,QAAQ,UAAU,cAAc;KACpD;IACD,iBAAiB,EAAE,WAAW,0BAA0B;IACxD,oBAAoB,EAAE,WAAW,6BAA6B;IAC/D;GACF,CAAC;GACF;AAEF,eAAc,KAAK,6BAA6B,2BAA2B,OAAO,MAAM;EACtF,IAAI;AACJ,MAAI;AACF,UAAQ,MAAM,EAAE,IAAI,MAAM;UACpB;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAAgB,EAAE,IAAI;;EAE1D,MAAM,WAAW,KAAK;AACtB,MAAI,CAAC,YAAY,OAAO,aAAa,SACnC,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAwB,EAAE,IAAI;EAGlE,MAAM,SAAS,cAAc,SAAS;AACtC,MAAI,CAAC,OACH,QAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,OAAO;IACP,QAAQ;IACR,SAAS;IACV;GACF,CAAC;AAIJ,MAAI,CAAC,MADoB,qBAAqB,OAAO,SAAS,CAE5D,QAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,OAAO;IACP,QAAQ;IACR,SAAS,aAAa,OAAO,SAAS;IACtC,UAAU,OAAO;IAClB;GACF,CAAC;AAGJ,MAAI;AACF,gBAAa,SAAS;UAChB;AACN,UAAO,EAAE,KAAK;IACZ,IAAI;IACJ,SAAS;KACP,OAAO;KACP,QAAQ;KACR,SAAS,gCAAgC;KACzC,UAAU,OAAO;KACjB,OAAO,OAAO;KACf;IACF,CAAC;;AAGJ,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,OAAO;IACP,UAAU,OAAO;IACjB,OAAO,OAAO;IACf;GACF,CAAC;GACF"}
+{"version":3,"file":"agents.js","names":[],"sources":["../../../../../src/gateway/hono/routes/agents.ts"],"sourcesContent":["import type { Hono } from 'hono';\n\nimport { type Config, parseModelRef } from '../../../config/schema.js';\nimport type { LocalizedText } from '../../../config/localized-text.js';\nimport { normalizeLocalizedText } from '../../../config/localized-text.js';\nimport { getVoiceModelsConfig } from '../../../config/voice.js';\nimport {\n  isProviderConfigured,\n  resolveModel,\n} from '../../../providers/index.js';\nimport { normalizeAgentId } from '../../../agent/agent-scope.js';\nimport {\n  deleteAgentAvatarFile,\n  finalizeCreateAgentDirs,\n  listAgentProfileFiles,\n  listGatewayAgents,\n  prepareCreateAgent,\n  prepareCreateAgentsBatch,\n  prepareDeleteAgent,\n  prepareUpdateAgent,\n  readAgentAvatarFile,\n  readAgentProfileFile,\n  runAfterDeletePurge,\n  writeAgentAvatarFromBase64,\n  writeAgentProfileFile,\n  type CreateAgentBody,\n} from '../../agents-admin.js';\nimport {\n  resolveImageGenerationCapabilities,\n  resolveImageUnderstandingCapabilities,\n} from '../../image-capabilities.js';\nimport {\n  agentModelFallbacksToArray,\n  agentModelRefToString,\n} from '../lib/agent-model.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\n\nfunction parseProfileFiles(raw: unknown): Record<string, string> | undefined | { error: string } {\n  if (raw === undefined) {\n    return undefined;\n  }\n  if (raw === null || typeof raw !== 'object' || Array.isArray(raw)) {\n    return { error: 'profileFiles must be an object' };\n  }\n  const profileFiles: Record<string, string> = {};\n  for (const [name, content] of Object.entries(raw as Record<string, unknown>)) {\n    if (typeof content !== 'string') {\n      return { error: `profileFiles[\"${name}\"] must be a string` };\n    }\n    profileFiles[name] = content;\n  }\n  return profileFiles;\n}\n\nfunction isParseError(value: unknown): value is { error: string } {\n  return (\n    typeof value === 'object' &&\n    value !== null &&\n    'error' in value &&\n    typeof (value as { error: string }).error === 'string'\n  );\n}\n\nfunction parseLocalizedText(raw: unknown, fieldName: string): LocalizedText | undefined | { error: string } {\n  if (raw === undefined) {\n    return undefined;\n  }\n  if (typeof raw === 'string') {\n    return raw;\n  }\n  if (raw === null || typeof raw !== 'object' || Array.isArray(raw)) {\n    return { error: `${fieldName} must be a string or locale map` };\n  }\n  const localized: Record<string, string> = {};\n  for (const [locale, text] of Object.entries(raw as Record<string, unknown>)) {\n    if (typeof text !== 'string') {\n      return { error: `${fieldName}.${locale} must be a string` };\n    }\n    localized[locale] = text;\n  }\n  const normalized = normalizeLocalizedText(localized);\n  return normalized;\n}\n\nfunction parseCreateAgentBody(raw: unknown): CreateAgentBody | { error: string } {\n  if (raw === null || typeof raw !== 'object' || Array.isArray(raw)) {\n    return { error: 'each agent must be an object' };\n  }\n  const body = raw as Record<string, unknown>;\n  const parsedName = parseLocalizedText(body.name, 'name');\n  if (isParseError(parsedName)) {\n    return parsedName;\n  }\n  const parsedDescription = parseLocalizedText(body.description, 'description');\n  if (isParseError(parsedDescription)) {\n    return parsedDescription;\n  }\n  const name = parsedName ?? '';\n  const workspace = typeof body.workspace === 'string' ? body.workspace : '';\n  const model = typeof body.model === 'string' ? body.model : undefined;\n  const agentDir = typeof body.agentDir === 'string' ? body.agentDir : undefined;\n  const description = parsedDescription;\n  const id = typeof body.id === 'string' ? body.id : undefined;\n  const toolsDisable = Array.isArray(body.toolsDisable)\n    ? body.toolsDisable.map((x: unknown) => String(x).trim()).filter(Boolean)\n    : undefined;\n  let profileFiles: Record<string, string> | undefined;\n  if (Object.hasOwn(body, 'profileFiles')) {\n    const parsed = parseProfileFiles(body.profileFiles);\n    if (isParseError(parsed)) {\n      return parsed;\n    }\n    profileFiles = parsed;\n  }\n  const cloneFrom = typeof body.cloneFrom === 'string' ? body.cloneFrom : undefined;\n  return {\n    name,\n    workspace,\n    ...(model !== undefined ? { model } : {}),\n    ...(agentDir !== undefined ? { agentDir } : {}),\n    ...(id !== undefined ? { id } : {}),\n    ...(description !== undefined ? { description } : {}),\n    ...(toolsDisable !== undefined ? { toolsDisable } : {}),\n    ...(profileFiles !== undefined ? { profileFiles } : {}),\n    ...(cloneFrom !== undefined ? { cloneFrom } : {}),\n  };\n}\n\nexport function registerAgentsRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  const { service, strictRateLimitMiddleware } = deps;\n\n  authenticated.get('/api/agents', async (c) => {\n    const cfg = service.currentConfig as Config;\n    const locale = c.req.query('locale') || c.req.header('Accept-Language')?.split(',')[0]?.trim();\n    const payload = await listGatewayAgents(cfg, { locale });\n    return c.json({ ok: true, payload });\n  });\n\n  authenticated.post('/api/agents/batch', strictRateLimitMiddleware, async (c) => {\n    let body: Record<string, unknown> = {};\n    try {\n      body = (await c.req.json()) as Record<string, unknown>;\n    } catch {\n      return c.json({ ok: false, error: { message: 'Invalid JSON' } }, 400);\n    }\n    const rawAgents = body.agents;\n    if (!Array.isArray(rawAgents)) {\n      return c.json({ ok: false, error: { message: 'agents must be an array' } }, 400);\n    }\n    const parsedAgents: CreateAgentBody[] = [];\n    for (const raw of rawAgents) {\n      const parsed = parseCreateAgentBody(raw);\n      if ('error' in parsed) {\n        return c.json({ ok: false, error: { message: parsed.error } }, 400);\n      }\n      parsedAgents.push(parsed);\n    }\n    const prep = prepareCreateAgentsBatch(service.currentConfig as Config, parsedAgents);\n    if (prep.ok === false) {\n      return c.json({ ok: false, error: { message: prep.error } }, prep.status ?? 400);\n    }\n    const { nextConfig, created } = prep.data;\n    const save = await service.saveConfig(nextConfig);\n    if (!save.saved) {\n      return c.json({ ok: false, error: { message: save.error ?? 'save failed' } }, 500);\n    }\n    const cfg = service.currentConfig as Config;\n    const agentIds: string[] = [];\n    for (const item of created) {\n      const finalized = await finalizeCreateAgentDirs(cfg, item.agentId, {\n        ...(item.profileFiles !== undefined ? { profileFiles: item.profileFiles } : {}),\n      });\n      if (finalized.ok === false) {\n        return c.json({ ok: false, error: { message: finalized.error } }, finalized.status ?? 400);\n      }\n      agentIds.push(item.agentId);\n    }\n    const locale = c.req.query('locale') || c.req.header('Accept-Language')?.split(',')[0]?.trim();\n    const agentsPayload = await listGatewayAgents(cfg, { locale });\n    return c.json({\n      ok: true,\n      payload: {\n        agentIds,\n        agents: agentsPayload,\n      },\n    });\n  });\n\n  authenticated.post('/api/agents', strictRateLimitMiddleware, async (c) => {\n    let body: Record<string, unknown> = {};\n    try {\n      body = (await c.req.json()) as Record<string, unknown>;\n    } catch {\n      return c.json({ ok: false, error: { message: 'Invalid JSON' } }, 400);\n    }\n    const parsed = parseCreateAgentBody(body);\n    if ('error' in parsed) {\n      return c.json({ ok: false, error: { message: parsed.error } }, 400);\n    }\n    const prep = prepareCreateAgent(service.currentConfig as Config, parsed);\n    if (prep.ok === false) {\n      return c.json({ ok: false, error: { message: prep.error } }, prep.status ?? 400);\n    }\n    const { nextConfig, agentId } = prep.data;\n    const save = await service.saveConfig(nextConfig);\n    if (!save.saved) {\n      return c.json({ ok: false, error: { message: save.error ?? 'save failed' } }, 500);\n    }\n    const finalized = await finalizeCreateAgentDirs(service.currentConfig as Config, agentId, {\n      ...(parsed.profileFiles !== undefined ? { profileFiles: parsed.profileFiles } : {}),\n      ...(parsed.cloneFrom ? { cloneFrom: parsed.cloneFrom } : {}),\n    });\n    if (finalized.ok === false) {\n      return c.json({ ok: false, error: { message: finalized.error } }, finalized.status ?? 400);\n    }\n    const locale = c.req.query('locale') || c.req.header('Accept-Language')?.split(',')[0]?.trim();\n    const agentsPayload = await listGatewayAgents(service.currentConfig as Config, { locale });\n    return c.json({\n      ok: true,\n      payload: {\n        agentId,\n        agents: agentsPayload,\n      },\n    });\n  });\n\n  authenticated.patch('/api/agents/:id', strictRateLimitMiddleware, async (c) => {\n    const id = normalizeAgentId(c.req.param('id') ?? '');\n    let body: Record<string, unknown> = {};\n    try {\n      body = (await c.req.json()) as Record<string, unknown>;\n    } catch {\n      return c.json({ ok: false, error: { message: 'Invalid JSON' } }, 400);\n    }\n    const skillsPatch =\n      body.skills === null\n        ? null\n        : Array.isArray(body.skills)\n          ? body.skills.map((x: unknown) => String(x).trim()).filter(Boolean)\n          : undefined;\n    const toolsDisablePatch =\n      body.toolsDisable === null\n        ? null\n        : Array.isArray(body.toolsDisable)\n          ? body.toolsDisable.map((x: unknown) => String(x).trim()).filter(Boolean)\n          : undefined;\n\n    let namePatch: LocalizedText | undefined;\n    if (Object.hasOwn(body, 'name')) {\n      const parsedName = parseLocalizedText(body.name, 'name');\n      if (isParseError(parsedName)) {\n        return c.json({ ok: false, error: { message: parsedName.error } }, 400);\n      }\n      namePatch = parsedName;\n    }\n    let descriptionPatch: LocalizedText | null | undefined;\n    if (Object.hasOwn(body, 'description')) {\n      if (body.description === null) {\n        descriptionPatch = null;\n      } else {\n        const parsedDescription = parseLocalizedText(body.description, 'description');\n        if (isParseError(parsedDescription)) {\n          return c.json({ ok: false, error: { message: parsedDescription.error } }, 400);\n        }\n        descriptionPatch = parsedDescription;\n      }\n    }\n\n    const prep = prepareUpdateAgent(service.currentConfig as Config, id, {\n      name: namePatch,\n      ...(descriptionPatch !== undefined ? { description: descriptionPatch } : {}),\n      workspace: typeof body.workspace === 'string' ? body.workspace : undefined,\n      model:\n        body.model === null\n          ? null\n          : typeof body.model === 'string'\n            ? body.model\n            : undefined,\n      agentDir:\n        body.agentDir === null\n          ? null\n          : typeof body.agentDir === 'string'\n            ? body.agentDir\n            : undefined,\n      setDefault: body.setDefault === true,\n      ...(skillsPatch !== undefined ? { skills: skillsPatch } : {}),\n      ...(toolsDisablePatch !== undefined ? { toolsDisable: toolsDisablePatch } : {}),\n    });\n    if (prep.ok === false) {\n      return c.json({ ok: false, error: { message: prep.error } }, prep.status ?? 400);\n    }\n    const save = await service.saveConfig(prep.data.nextConfig);\n    if (!save.saved) {\n      return c.json({ ok: false, error: { message: save.error ?? 'save failed' } }, 500);\n    }\n    const locale = c.req.query('locale') || c.req.header('Accept-Language')?.split(',')[0]?.trim();\n    const agentsPayload = await listGatewayAgents(service.currentConfig as Config, { locale });\n    return c.json({ ok: true, payload: agentsPayload });\n  });\n\n  authenticated.delete('/api/agents/:id', strictRateLimitMiddleware, async (c) => {\n    const id = normalizeAgentId(c.req.param('id') ?? '');\n    const purge = c.req.query('purge') === '1' || c.req.query('purge') === 'true';\n    const prep = prepareDeleteAgent(service.currentConfig as Config, id);\n    if (prep.ok === false) {\n      return c.json({ ok: false, error: { message: prep.error } }, prep.status ?? 400);\n    }\n    const { nextConfig, agentId } = prep.data;\n    const save = await service.saveConfig(nextConfig);\n    if (!save.saved) {\n      return c.json({ ok: false, error: { message: save.error ?? 'save failed' } }, 500);\n    }\n    if (purge) {\n      await runAfterDeletePurge(service.currentConfig as Config, agentId);\n    }\n    const locale = c.req.query('locale') || c.req.header('Accept-Language')?.split(',')[0]?.trim();\n    const agentsPayload = await listGatewayAgents(service.currentConfig as Config, { locale });\n    return c.json({\n      ok: true,\n      payload: { agentId, purged: purge, agents: agentsPayload },\n    });\n  });\n\n  authenticated.get('/api/agents/:id/avatar', async (c) => {\n    const id = normalizeAgentId(c.req.param('id') ?? '');\n    const res = await readAgentAvatarFile(service.currentConfig as Config, id);\n    if (res.ok === false) {\n      return c.json({ ok: false, error: { message: res.error } }, res.status ?? 400);\n    }\n    return new Response(res.data.buffer, {\n      status: 200,\n      headers: {\n        'Content-Type': res.data.contentType,\n        'Cache-Control': 'private, max-age=3600',\n      },\n    });\n  });\n\n  authenticated.put('/api/agents/:id/avatar', strictRateLimitMiddleware, async (c) => {\n    const id = normalizeAgentId(c.req.param('id') ?? '');\n    let body: Record<string, unknown> = {};\n    try {\n      body = (await c.req.json()) as Record<string, unknown>;\n    } catch {\n      return c.json({ ok: false, error: { message: 'Invalid JSON' } }, 400);\n    }\n    const base64 = typeof body.base64 === 'string' ? body.base64 : '';\n    const mimeType = typeof body.mimeType === 'string' ? body.mimeType : '';\n    const res = await writeAgentAvatarFromBase64(service.currentConfig as Config, id, base64, mimeType);\n    if (res.ok === false) {\n      return c.json({ ok: false, error: { message: res.error } }, res.status ?? 400);\n    }\n    return c.json({ ok: true, payload: { agentId: res.data.agentId } });\n  });\n\n  authenticated.delete('/api/agents/:id/avatar', strictRateLimitMiddleware, async (c) => {\n    const id = normalizeAgentId(c.req.param('id') ?? '');\n    const res = await deleteAgentAvatarFile(service.currentConfig as Config, id);\n    if (res.ok === false) {\n      return c.json({ ok: false, error: { message: res.error } }, res.status ?? 400);\n    }\n    return c.json({ ok: true, payload: { agentId: res.data.agentId } });\n  });\n\n  authenticated.get('/api/agents/:id/files', async (c) => {\n    const id = normalizeAgentId(c.req.param('id') ?? '');\n    const res = await listAgentProfileFiles(service.currentConfig as Config, id);\n    if (res.ok === false) {\n      return c.json({ ok: false, error: { message: res.error } }, res.status ?? 400);\n    }\n    return c.json({ ok: true, payload: res.data });\n  });\n\n  authenticated.get('/api/agents/:id/files/:name', async (c) => {\n    const id = normalizeAgentId(c.req.param('id') ?? '');\n    const name = decodeURIComponent(c.req.param('name') ?? '');\n    const res = await readAgentProfileFile(service.currentConfig as Config, id, name);\n    if (res.ok === false) {\n      return c.json({ ok: false, error: { message: res.error } }, res.status ?? 400);\n    }\n    return c.json({ ok: true, payload: { agentId: res.data.agentId, name, content: res.data.content } });\n  });\n\n  authenticated.put('/api/agents/:id/files/:name', strictRateLimitMiddleware, async (c) => {\n    const id = normalizeAgentId(c.req.param('id') ?? '');\n    const name = decodeURIComponent(c.req.param('name') ?? '');\n    let content = '';\n    try {\n      const body = (await c.req.json()) as { content?: unknown };\n      content = typeof body.content === 'string' ? body.content : '';\n    } catch {\n      return c.json({ ok: false, error: { message: 'Invalid JSON' } }, 400);\n    }\n    const res = await writeAgentProfileFile(service.currentConfig as Config, id, name, content);\n    if (res.ok === false) {\n      return c.json({ ok: false, error: { message: res.error } }, res.status ?? 400);\n    }\n    return c.json({ ok: true, payload: { agentId: res.data.agentId, name } });\n  });\n\n  // GET /api/voice/models - Get available STT/TTS models\n  authenticated.get('/api/voice/models', (c) => {\n    const models = getVoiceModelsConfig();\n    return c.json({ ok: true, payload: { models } });\n  });\n\n  authenticated.get('/api/image/capabilities', async (c) => {\n    const config = service.currentConfig as Config;\n    const imageGenerationProviders = await resolveImageGenerationCapabilities(config);\n    const imageUnderstandingProviders = await resolveImageUnderstandingCapabilities(config);\n    return c.json({\n      ok: true,\n      payload: {\n        current: {\n          imageModel: agentModelRefToString(config.agents?.defaults?.imageModel) ?? null,\n          imageModelFallbacks: agentModelFallbacksToArray(config.agents?.defaults?.imageModel),\n          imageGenerationModel: agentModelRefToString(config.agents?.defaults?.imageGenerationModel) ?? null,\n          imageGenerationModelFallbacks: agentModelFallbacksToArray(\n            config.agents?.defaults?.imageGenerationModel,\n          ),\n          mediaMaxMb: config.agents?.defaults?.mediaMaxMb ?? null,\n        },\n        imageGeneration: { providers: imageGenerationProviders },\n        imageUnderstanding: { providers: imageUnderstandingProviders },\n      },\n    });\n  });\n\n  authenticated.post('/api/image/validate-model', strictRateLimitMiddleware, async (c) => {\n    let body: { modelRef?: unknown };\n    try {\n      body = (await c.req.json()) as { modelRef?: unknown };\n    } catch {\n      return c.json({ ok: false, error: 'Invalid JSON' }, 400);\n    }\n    const modelRef = body.modelRef;\n    if (!modelRef || typeof modelRef !== 'string') {\n      return c.json({ ok: false, error: 'modelRef is required' }, 400);\n    }\n\n    const parsed = parseModelRef(modelRef);\n    if (!parsed) {\n      return c.json({\n        ok: true,\n        payload: {\n          valid: false,\n          reason: 'invalid_format',\n          message: 'Model reference must be in \"provider/model\" format',\n        },\n      });\n    }\n\n    const configured = await isProviderConfigured(parsed.provider);\n    if (!configured) {\n      return c.json({\n        ok: true,\n        payload: {\n          valid: false,\n          reason: 'provider_not_configured',\n          message: `Provider \"${parsed.provider}\" is not configured. Set the API key first.`,\n          provider: parsed.provider,\n        },\n      });\n    }\n\n    try {\n      resolveModel(modelRef);\n    } catch {\n      return c.json({\n        ok: true,\n        payload: {\n          valid: false,\n          reason: 'model_not_found',\n          message: `Model not found in registry: ${modelRef}`,\n          provider: parsed.provider,\n          model: parsed.model,\n        },\n      });\n    }\n\n    return c.json({\n      ok: true,\n      payload: {\n        valid: true,\n        provider: parsed.provider,\n        model: parsed.model,\n      },\n    });\n  });\n\n}\n"],"mappings":";;;;;;;;;aAEuE;qBAEI;gBAKtC;kBAC4B;AA2BjE,SAAS,kBAAkB,KAAsE;AAC/F,KAAI,QAAQ,KAAA,EACV;AAEF,KAAI,QAAQ,QAAQ,OAAO,QAAQ,YAAY,MAAM,QAAQ,IAAI,CAC/D,QAAO,EAAE,OAAO,kCAAkC;CAEpD,MAAM,eAAuC,EAAE;AAC/C,MAAK,MAAM,CAAC,MAAM,YAAY,OAAO,QAAQ,IAA+B,EAAE;AAC5E,MAAI,OAAO,YAAY,SACrB,QAAO,EAAE,OAAO,iBAAiB,KAAK,sBAAsB;AAE9D,eAAa,QAAQ;;AAEvB,QAAO;;AAGT,SAAS,aAAa,OAA4C;AAChE,QACE,OAAO,UAAU,YACjB,UAAU,QACV,WAAW,SACX,OAAQ,MAA4B,UAAU;;AAIlD,SAAS,mBAAmB,KAAc,WAAkE;AAC1G,KAAI,QAAQ,KAAA,EACV;AAEF,KAAI,OAAO,QAAQ,SACjB,QAAO;AAET,KAAI,QAAQ,QAAQ,OAAO,QAAQ,YAAY,MAAM,QAAQ,IAAI,CAC/D,QAAO,EAAE,OAAO,GAAG,UAAU,kCAAkC;CAEjE,MAAM,YAAoC,EAAE;AAC5C,MAAK,MAAM,CAAC,QAAQ,SAAS,OAAO,QAAQ,IAA+B,EAAE;AAC3E,MAAI,OAAO,SAAS,SAClB,QAAO,EAAE,OAAO,GAAG,UAAU,GAAG,OAAO,oBAAoB;AAE7D,YAAU,UAAU;;AAGtB,QADmB,uBAAuB,UACzB;;AAGnB,SAAS,qBAAqB,KAAmD;AAC/E,KAAI,QAAQ,QAAQ,OAAO,QAAQ,YAAY,MAAM,QAAQ,IAAI,CAC/D,QAAO,EAAE,OAAO,gCAAgC;CAElD,MAAM,OAAO;CACb,MAAM,aAAa,mBAAmB,KAAK,MAAM,OAAO;AACxD,KAAI,aAAa,WAAW,CAC1B,QAAO;CAET,MAAM,oBAAoB,mBAAmB,KAAK,aAAa,cAAc;AAC7E,KAAI,aAAa,kBAAkB,CACjC,QAAO;CAET,MAAM,OAAO,cAAc;CAC3B,MAAM,YAAY,OAAO,KAAK,cAAc,WAAW,KAAK,YAAY;CACxE,MAAM,QAAQ,OAAO,KAAK,UAAU,WAAW,KAAK,QAAQ,KAAA;CAC5D,MAAM,WAAW,OAAO,KAAK,aAAa,WAAW,KAAK,WAAW,KAAA;CACrE,MAAM,cAAc;CACpB,MAAM,KAAK,OAAO,KAAK,OAAO,WAAW,KAAK,KAAK,KAAA;CACnD,MAAM,eAAe,MAAM,QAAQ,KAAK,aAAa,GACjD,KAAK,aAAa,KAAK,MAAe,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC,OAAO,QAAQ,GACvE,KAAA;CACJ,IAAI;AACJ,KAAI,OAAO,OAAO,MAAM,eAAe,EAAE;EACvC,MAAM,SAAS,kBAAkB,KAAK,aAAa;AACnD,MAAI,aAAa,OAAO,CACtB,QAAO;AAET,iBAAe;;CAEjB,MAAM,YAAY,OAAO,KAAK,cAAc,WAAW,KAAK,YAAY,KAAA;AACxE,QAAO;EACL;EACA;EACA,GAAI,UAAU,KAAA,IAAY,EAAE,OAAO,GAAG,EAAE;EACxC,GAAI,aAAa,KAAA,IAAY,EAAE,UAAU,GAAG,EAAE;EAC9C,GAAI,OAAO,KAAA,IAAY,EAAE,IAAI,GAAG,EAAE;EAClC,GAAI,gBAAgB,KAAA,IAAY,EAAE,aAAa,GAAG,EAAE;EACpD,GAAI,iBAAiB,KAAA,IAAY,EAAE,cAAc,GAAG,EAAE;EACtD,GAAI,iBAAiB,KAAA,IAAY,EAAE,cAAc,GAAG,EAAE;EACtD,GAAI,cAAc,KAAA,IAAY,EAAE,WAAW,GAAG,EAAE;EACjD;;AAGH,SAAgB,qBAAqB,eAAqB,MAAoC;CAC5F,MAAM,EAAE,SAAS,8BAA8B;AAE/C,eAAc,IAAI,eAAe,OAAO,MAAM;EAC5C,MAAM,MAAM,QAAQ;EAEpB,MAAM,UAAU,MAAM,kBAAkB,KAAK,EAAE,QADhC,EAAE,IAAI,MAAM,SAAS,IAAI,EAAE,IAAI,OAAO,kBAAkB,EAAE,MAAM,IAAI,CAAC,IAAI,MAAM,EACvC,CAAC;AACxD,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM;GAAS,CAAC;GACpC;AAEF,eAAc,KAAK,qBAAqB,2BAA2B,OAAO,MAAM;EAC9E,IAAI,OAAgC,EAAE;AACtC,MAAI;AACF,UAAQ,MAAM,EAAE,IAAI,MAAM;UACpB;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS,gBAAgB;IAAE,EAAE,IAAI;;EAEvE,MAAM,YAAY,KAAK;AACvB,MAAI,CAAC,MAAM,QAAQ,UAAU,CAC3B,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,2BAA2B;GAAE,EAAE,IAAI;EAElF,MAAM,eAAkC,EAAE;AAC1C,OAAK,MAAM,OAAO,WAAW;GAC3B,MAAM,SAAS,qBAAqB,IAAI;AACxC,OAAI,WAAW,OACb,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS,OAAO,OAAO;IAAE,EAAE,IAAI;AAErE,gBAAa,KAAK,OAAO;;EAE3B,MAAM,OAAO,yBAAyB,QAAQ,eAAyB,aAAa;AACpF,MAAI,KAAK,OAAO,MACd,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,KAAK,OAAO;GAAE,EAAE,KAAK,UAAU,IAAI;EAElF,MAAM,EAAE,YAAY,YAAY,KAAK;EACrC,MAAM,OAAO,MAAM,QAAQ,WAAW,WAAW;AACjD,MAAI,CAAC,KAAK,MACR,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,KAAK,SAAS,eAAe;GAAE,EAAE,IAAI;EAEpF,MAAM,MAAM,QAAQ;EACpB,MAAM,WAAqB,EAAE;AAC7B,OAAK,MAAM,QAAQ,SAAS;GAC1B,MAAM,YAAY,MAAM,wBAAwB,KAAK,KAAK,SAAS,EACjE,GAAI,KAAK,iBAAiB,KAAA,IAAY,EAAE,cAAc,KAAK,cAAc,GAAG,EAAE,EAC/E,CAAC;AACF,OAAI,UAAU,OAAO,MACnB,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS,UAAU,OAAO;IAAE,EAAE,UAAU,UAAU,IAAI;AAE5F,YAAS,KAAK,KAAK,QAAQ;;EAG7B,MAAM,gBAAgB,MAAM,kBAAkB,KAAK,EAAE,QADtC,EAAE,IAAI,MAAM,SAAS,IAAI,EAAE,IAAI,OAAO,kBAAkB,EAAE,MAAM,IAAI,CAAC,IAAI,MAAM,EACjC,CAAC;AAC9D,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP;IACA,QAAQ;IACT;GACF,CAAC;GACF;AAEF,eAAc,KAAK,eAAe,2BAA2B,OAAO,MAAM;EACxE,IAAI,OAAgC,EAAE;AACtC,MAAI;AACF,UAAQ,MAAM,EAAE,IAAI,MAAM;UACpB;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS,gBAAgB;IAAE,EAAE,IAAI;;EAEvE,MAAM,SAAS,qBAAqB,KAAK;AACzC,MAAI,WAAW,OACb,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,OAAO,OAAO;GAAE,EAAE,IAAI;EAErE,MAAM,OAAO,mBAAmB,QAAQ,eAAyB,OAAO;AACxE,MAAI,KAAK,OAAO,MACd,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,KAAK,OAAO;GAAE,EAAE,KAAK,UAAU,IAAI;EAElF,MAAM,EAAE,YAAY,YAAY,KAAK;EACrC,MAAM,OAAO,MAAM,QAAQ,WAAW,WAAW;AACjD,MAAI,CAAC,KAAK,MACR,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,KAAK,SAAS,eAAe;GAAE,EAAE,IAAI;EAEpF,MAAM,YAAY,MAAM,wBAAwB,QAAQ,eAAyB,SAAS;GACxF,GAAI,OAAO,iBAAiB,KAAA,IAAY,EAAE,cAAc,OAAO,cAAc,GAAG,EAAE;GAClF,GAAI,OAAO,YAAY,EAAE,WAAW,OAAO,WAAW,GAAG,EAAE;GAC5D,CAAC;AACF,MAAI,UAAU,OAAO,MACnB,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,UAAU,OAAO;GAAE,EAAE,UAAU,UAAU,IAAI;EAE5F,MAAM,SAAS,EAAE,IAAI,MAAM,SAAS,IAAI,EAAE,IAAI,OAAO,kBAAkB,EAAE,MAAM,IAAI,CAAC,IAAI,MAAM;EAC9F,MAAM,gBAAgB,MAAM,kBAAkB,QAAQ,eAAyB,EAAE,QAAQ,CAAC;AAC1F,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP;IACA,QAAQ;IACT;GACF,CAAC;GACF;AAEF,eAAc,MAAM,mBAAmB,2BAA2B,OAAO,MAAM;EAC7E,MAAM,KAAK,iBAAiB,EAAE,IAAI,MAAM,KAAK,IAAI,GAAG;EACpD,IAAI,OAAgC,EAAE;AACtC,MAAI;AACF,UAAQ,MAAM,EAAE,IAAI,MAAM;UACpB;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS,gBAAgB;IAAE,EAAE,IAAI;;EAEvE,MAAM,cACJ,KAAK,WAAW,OACZ,OACA,MAAM,QAAQ,KAAK,OAAO,GACxB,KAAK,OAAO,KAAK,MAAe,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC,OAAO,QAAQ,GACjE,KAAA;EACR,MAAM,oBACJ,KAAK,iBAAiB,OAClB,OACA,MAAM,QAAQ,KAAK,aAAa,GAC9B,KAAK,aAAa,KAAK,MAAe,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC,OAAO,QAAQ,GACvE,KAAA;EAER,IAAI;AACJ,MAAI,OAAO,OAAO,MAAM,OAAO,EAAE;GAC/B,MAAM,aAAa,mBAAmB,KAAK,MAAM,OAAO;AACxD,OAAI,aAAa,WAAW,CAC1B,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS,WAAW,OAAO;IAAE,EAAE,IAAI;AAEzE,eAAY;;EAEd,IAAI;AACJ,MAAI,OAAO,OAAO,MAAM,cAAc,CACpC,KAAI,KAAK,gBAAgB,KACvB,oBAAmB;OACd;GACL,MAAM,oBAAoB,mBAAmB,KAAK,aAAa,cAAc;AAC7E,OAAI,aAAa,kBAAkB,CACjC,QAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS,kBAAkB,OAAO;IAAE,EAAE,IAAI;AAEhF,sBAAmB;;EAIvB,MAAM,OAAO,mBAAmB,QAAQ,eAAyB,IAAI;GACnE,MAAM;GACN,GAAI,qBAAqB,KAAA,IAAY,EAAE,aAAa,kBAAkB,GAAG,EAAE;GAC3E,WAAW,OAAO,KAAK,cAAc,WAAW,KAAK,YAAY,KAAA;GACjE,OACE,KAAK,UAAU,OACX,OACA,OAAO,KAAK,UAAU,WACpB,KAAK,QACL,KAAA;GACR,UACE,KAAK,aAAa,OACd,OACA,OAAO,KAAK,aAAa,WACvB,KAAK,WACL,KAAA;GACR,YAAY,KAAK,eAAe;GAChC,GAAI,gBAAgB,KAAA,IAAY,EAAE,QAAQ,aAAa,GAAG,EAAE;GAC5D,GAAI,sBAAsB,KAAA,IAAY,EAAE,cAAc,mBAAmB,GAAG,EAAE;GAC/E,CAAC;AACF,MAAI,KAAK,OAAO,MACd,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,KAAK,OAAO;GAAE,EAAE,KAAK,UAAU,IAAI;EAElF,MAAM,OAAO,MAAM,QAAQ,WAAW,KAAK,KAAK,WAAW;AAC3D,MAAI,CAAC,KAAK,MACR,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,KAAK,SAAS,eAAe;GAAE,EAAE,IAAI;EAEpF,MAAM,SAAS,EAAE,IAAI,MAAM,SAAS,IAAI,EAAE,IAAI,OAAO,kBAAkB,EAAE,MAAM,IAAI,CAAC,IAAI,MAAM;EAC9F,MAAM,gBAAgB,MAAM,kBAAkB,QAAQ,eAAyB,EAAE,QAAQ,CAAC;AAC1F,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;GAAe,CAAC;GACnD;AAEF,eAAc,OAAO,mBAAmB,2BAA2B,OAAO,MAAM;EAC9E,MAAM,KAAK,iBAAiB,EAAE,IAAI,MAAM,KAAK,IAAI,GAAG;EACpD,MAAM,QAAQ,EAAE,IAAI,MAAM,QAAQ,KAAK,OAAO,EAAE,IAAI,MAAM,QAAQ,KAAK;EACvE,MAAM,OAAO,mBAAmB,QAAQ,eAAyB,GAAG;AACpE,MAAI,KAAK,OAAO,MACd,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,KAAK,OAAO;GAAE,EAAE,KAAK,UAAU,IAAI;EAElF,MAAM,EAAE,YAAY,YAAY,KAAK;EACrC,MAAM,OAAO,MAAM,QAAQ,WAAW,WAAW;AACjD,MAAI,CAAC,KAAK,MACR,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,KAAK,SAAS,eAAe;GAAE,EAAE,IAAI;AAEpF,MAAI,MACF,OAAM,oBAAoB,QAAQ,eAAyB,QAAQ;EAErE,MAAM,SAAS,EAAE,IAAI,MAAM,SAAS,IAAI,EAAE,IAAI,OAAO,kBAAkB,EAAE,MAAM,IAAI,CAAC,IAAI,MAAM;EAC9F,MAAM,gBAAgB,MAAM,kBAAkB,QAAQ,eAAyB,EAAE,QAAQ,CAAC;AAC1F,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IAAE;IAAS,QAAQ;IAAO,QAAQ;IAAe;GAC3D,CAAC;GACF;AAEF,eAAc,IAAI,0BAA0B,OAAO,MAAM;EACvD,MAAM,KAAK,iBAAiB,EAAE,IAAI,MAAM,KAAK,IAAI,GAAG;EACpD,MAAM,MAAM,MAAM,oBAAoB,QAAQ,eAAyB,GAAG;AAC1E,MAAI,IAAI,OAAO,MACb,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,IAAI,OAAO;GAAE,EAAE,IAAI,UAAU,IAAI;AAEhF,SAAO,IAAI,SAAS,IAAI,KAAK,QAAQ;GACnC,QAAQ;GACR,SAAS;IACP,gBAAgB,IAAI,KAAK;IACzB,iBAAiB;IAClB;GACF,CAAC;GACF;AAEF,eAAc,IAAI,0BAA0B,2BAA2B,OAAO,MAAM;EAClF,MAAM,KAAK,iBAAiB,EAAE,IAAI,MAAM,KAAK,IAAI,GAAG;EACpD,IAAI,OAAgC,EAAE;AACtC,MAAI;AACF,UAAQ,MAAM,EAAE,IAAI,MAAM;UACpB;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS,gBAAgB;IAAE,EAAE,IAAI;;EAEvE,MAAM,SAAS,OAAO,KAAK,WAAW,WAAW,KAAK,SAAS;EAC/D,MAAM,WAAW,OAAO,KAAK,aAAa,WAAW,KAAK,WAAW;EACrE,MAAM,MAAM,MAAM,2BAA2B,QAAQ,eAAyB,IAAI,QAAQ,SAAS;AACnG,MAAI,IAAI,OAAO,MACb,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,IAAI,OAAO;GAAE,EAAE,IAAI,UAAU,IAAI;AAEhF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,SAAS,IAAI,KAAK,SAAS;GAAE,CAAC;GACnE;AAEF,eAAc,OAAO,0BAA0B,2BAA2B,OAAO,MAAM;EACrF,MAAM,KAAK,iBAAiB,EAAE,IAAI,MAAM,KAAK,IAAI,GAAG;EACpD,MAAM,MAAM,MAAM,sBAAsB,QAAQ,eAAyB,GAAG;AAC5E,MAAI,IAAI,OAAO,MACb,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,IAAI,OAAO;GAAE,EAAE,IAAI,UAAU,IAAI;AAEhF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,SAAS,IAAI,KAAK,SAAS;GAAE,CAAC;GACnE;AAEF,eAAc,IAAI,yBAAyB,OAAO,MAAM;EACtD,MAAM,KAAK,iBAAiB,EAAE,IAAI,MAAM,KAAK,IAAI,GAAG;EACpD,MAAM,MAAM,MAAM,sBAAsB,QAAQ,eAAyB,GAAG;AAC5E,MAAI,IAAI,OAAO,MACb,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,IAAI,OAAO;GAAE,EAAE,IAAI,UAAU,IAAI;AAEhF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,IAAI;GAAM,CAAC;GAC9C;AAEF,eAAc,IAAI,+BAA+B,OAAO,MAAM;EAC5D,MAAM,KAAK,iBAAiB,EAAE,IAAI,MAAM,KAAK,IAAI,GAAG;EACpD,MAAM,OAAO,mBAAmB,EAAE,IAAI,MAAM,OAAO,IAAI,GAAG;EAC1D,MAAM,MAAM,MAAM,qBAAqB,QAAQ,eAAyB,IAAI,KAAK;AACjF,MAAI,IAAI,OAAO,MACb,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,IAAI,OAAO;GAAE,EAAE,IAAI,UAAU,IAAI;AAEhF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;IAAE,SAAS,IAAI,KAAK;IAAS;IAAM,SAAS,IAAI,KAAK;IAAS;GAAE,CAAC;GACpG;AAEF,eAAc,IAAI,+BAA+B,2BAA2B,OAAO,MAAM;EACvF,MAAM,KAAK,iBAAiB,EAAE,IAAI,MAAM,KAAK,IAAI,GAAG;EACpD,MAAM,OAAO,mBAAmB,EAAE,IAAI,MAAM,OAAO,IAAI,GAAG;EAC1D,IAAI,UAAU;AACd,MAAI;GACF,MAAM,OAAQ,MAAM,EAAE,IAAI,MAAM;AAChC,aAAU,OAAO,KAAK,YAAY,WAAW,KAAK,UAAU;UACtD;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS,gBAAgB;IAAE,EAAE,IAAI;;EAEvE,MAAM,MAAM,MAAM,sBAAsB,QAAQ,eAAyB,IAAI,MAAM,QAAQ;AAC3F,MAAI,IAAI,OAAO,MACb,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,IAAI,OAAO;GAAE,EAAE,IAAI,UAAU,IAAI;AAEhF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS;IAAE,SAAS,IAAI,KAAK;IAAS;IAAM;GAAE,CAAC;GACzE;AAGF,eAAc,IAAI,sBAAsB,MAAM;EAC5C,MAAM,SAAS,sBAAsB;AACrC,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,QAAQ;GAAE,CAAC;GAChD;AAEF,eAAc,IAAI,2BAA2B,OAAO,MAAM;EACxD,MAAM,SAAS,QAAQ;EACvB,MAAM,2BAA2B,MAAM,mCAAmC,OAAO;EACjF,MAAM,8BAA8B,MAAM,sCAAsC,OAAO;AACvF,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,SAAS;KACP,YAAY,sBAAsB,OAAO,QAAQ,UAAU,WAAW,IAAI;KAC1E,qBAAqB,2BAA2B,OAAO,QAAQ,UAAU,WAAW;KACpF,sBAAsB,sBAAsB,OAAO,QAAQ,UAAU,qBAAqB,IAAI;KAC9F,+BAA+B,2BAC7B,OAAO,QAAQ,UAAU,qBAC1B;KACD,YAAY,OAAO,QAAQ,UAAU,cAAc;KACpD;IACD,iBAAiB,EAAE,WAAW,0BAA0B;IACxD,oBAAoB,EAAE,WAAW,6BAA6B;IAC/D;GACF,CAAC;GACF;AAEF,eAAc,KAAK,6BAA6B,2BAA2B,OAAO,MAAM;EACtF,IAAI;AACJ,MAAI;AACF,UAAQ,MAAM,EAAE,IAAI,MAAM;UACpB;AACN,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO;IAAgB,EAAE,IAAI;;EAE1D,MAAM,WAAW,KAAK;AACtB,MAAI,CAAC,YAAY,OAAO,aAAa,SACnC,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;GAAwB,EAAE,IAAI;EAGlE,MAAM,SAAS,cAAc,SAAS;AACtC,MAAI,CAAC,OACH,QAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,OAAO;IACP,QAAQ;IACR,SAAS;IACV;GACF,CAAC;AAIJ,MAAI,CAAC,MADoB,qBAAqB,OAAO,SAAS,CAE5D,QAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,OAAO;IACP,QAAQ;IACR,SAAS,aAAa,OAAO,SAAS;IACtC,UAAU,OAAO;IAClB;GACF,CAAC;AAGJ,MAAI;AACF,gBAAa,SAAS;UAChB;AACN,UAAO,EAAE,KAAK;IACZ,IAAI;IACJ,SAAS;KACP,OAAO;KACP,QAAQ;KACR,SAAS,gCAAgC;KACzC,UAAU,OAAO;KACjB,OAAO,OAAO;KACf;IACF,CAAC;;AAGJ,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,OAAO;IACP,UAAU,OAAO;IACjB,OAAO,OAAO;IACf;GACF,CAAC;GACF"}

package/dist/src/gateway/hono/routes/config-patch/agents.js

@@ -1,5 +1,5 @@
-import { normalizePatchAgentImageGenerationModel, normalizePatchAgentModel, normalizePatchTypedModels } from "../../lib/agent-model.js";
 import { isMaskedSecretPatchValue } from "../../lib/mask-secret-length.js";
+import { normalizePatchAgentImageGenerationModel, normalizePatchAgentModel, normalizePatchTypedModels } from "../../lib/agent-model.js";
 //#region src/gateway/hono/routes/config-patch/agents.ts
 function applyAgentsPatch(config, body) {
 	if (!body.agents?.defaults) return;

package/dist/src/gateway/hono/routes/models.js

@@ -4,7 +4,7 @@ import { init_resolve_config_value, testApiKeyResolution } from "../../../config
 import { init_models_json, loadModelsJson, saveModelsJson, validateModelsConfig } from "../../../config/models-json.js";
 import { getModelRegistry } from "../../../providers/model-registry.js";
 import { getProviderRegistry, init_plugin_registry } from "../../../providers/plugin-registry.js";
-import { PROVIDER_META, getAllModels, getAllProviders, getAvailableModels, getProviderActiveKeySource, init_providers, isProviderConfigured } from "../../../providers/index.js";
+import { PROVIDER_META, getAllModels, getAllProviders, getAvailableModels, getProviderAuthState, init_providers, isProviderConfigured } from "../../../providers/index.js";
 import { getImageGenerationProvider } from "../../../agent/image/generation/provider-registry.js";
 import { listImageGenerationProvidersSummary } from "../../../agent/image/generation/runtime.js";
 import { respondStartupUnavailable } from "../lib/startup-unavailable.js";
@@ -268,14 +268,19 @@ function registerModelsRoutes(authenticated, deps) {
 		const meta = await Promise.all(providers.map(async (provider) => {
 			const plugin = pluginRegistry.get(provider);
 			const extensionId = plugin ? resolveExtensionIdForProvider(service, provider) : void 0;
+			const authState = await getProviderAuthState(provider);
+			const configured = authState.authMode !== "none" || await isProviderConfigured(provider);
 			return {
 				id: provider,
 				name: plugin?.name ?? PROVIDER_META[provider]?.name ?? provider,
 				category: plugin ? "extension" : PROVIDER_META[provider]?.category || "specialty",
 				supportsOAuth: plugin ? false : PROVIDER_META[provider]?.supportsOAuth ?? false,
 				supportsApiKey: plugin ? false : PROVIDER_META[provider]?.supportsApiKey ?? true,
-				configured: await isProviderConfigured(provider),
-				activeKeySource: await getProviderActiveKeySource(provider),
+				configured,
+				activeKeySource: authState.authMode,
+				authMode: authState.authMode,
+				authStatus: authState.authStatus,
+				...authState.expiresAt ? { expiresAt: authState.expiresAt } : {},
 				baseUrl: resolveProviderApiBaseUrl(provider),
 				...extensionId ? { extensionId } : {}
 			};
@@ -291,6 +296,8 @@ function registerModelsRoutes(authenticated, deps) {
 				supportsApiKey: false,
 				configured: true,
 				activeKeySource: "extension",
+				authMode: "extension",
+				authStatus: "connected",
 				baseUrl: resolveProviderApiBaseUrl(plugin.id),
 				...extensionId ? { extensionId } : {}
 			});
@@ -345,10 +352,9 @@ function registerModelsRoutes(authenticated, deps) {
 			error: { message: "Missing providerId" }
 		}, 400);
 		const normalizedProvider = providerId.toLowerCase();
-		const profileId = `${normalizedProvider}:default`;
 		const resolver = new CredentialResolver();
 		try {
-			await resolver.deleteProfile(profileId);
+			await resolver.deleteProviderCredential(normalizedProvider);
 			return c.json({
 				ok: true,
 				payload: { deleted: normalizedProvider }

package/dist/src/gateway/hono/routes/models.js.map

@@ -1 +1 @@
-{"version":3,"file":"models.js","names":["getModelsJsonPath"],"sources":["../../../../../src/gateway/hono/routes/models.ts"],"sourcesContent":["import type { Hono } from 'hono';\n\nimport {\n  getModelsJsonPath,\n  loadModelsJson,\n  saveModelsJson,\n  validateModelsConfig,\n} from '../../../config/models-json.js';\nimport type { Config } from '../../../config/schema.js';\nimport { testApiKeyResolution } from '../../../config/resolve-config-value.js';\nimport {\n  getImageGenerationProvider,\n  listImageGenerationProvidersSummary,\n} from '../../../agent/image/generation/runtime.js';\nimport {\n  EXTENSION_PROVIDER_BASE_URL,\n  getAllModels,\n  getAvailableModels,\n  getModelRegistry,\n  getAllProviders,\n  getProviderActiveKeySource,\n  isProviderConfigured,\n  PROVIDER_META,\n} from '../../../providers/index.js';\nimport { CredentialResolver } from '../../../auth/credentials.js';\nimport { getProviderRegistry } from '../../../providers/plugin-registry.js';\nimport type { ProviderModelDefinition } from '../../../extensions/types/providers.js';\nimport type { GatewayService } from '../../service.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\nimport { respondStartupUnavailable } from '../lib/startup-unavailable.js';\n\nfunction readModelsJsonProviderApiKey(providerId: string): string | undefined {\n  const { config } = loadModelsJson(getModelsJsonPath());\n  const entry = config.providers?.[providerId.trim()];\n  const key = entry?.apiKey;\n  return typeof key === 'string' && key.trim() ? key.trim() : undefined;\n}\n\n/** Plaintext key only when persisted under `cfg.providers.<id>.apiKey` (not env / credential store). */\nfunction readProviderApiKeyFromConfigFileOnly(cfg: Config, providerId: string): string | undefined {\n  const id = providerId.trim().toLowerCase();\n  const bucket = cfg.providers?.[id];\n  if (!bucket || typeof bucket !== 'object' || Array.isArray(bucket)) return undefined;\n  const k = (bucket as { apiKey?: unknown }).apiKey;\n  return typeof k === 'string' && k.trim() ? k.trim() : undefined;\n}\n\n/** Extension id from manifest `providers[]` (e.g. provider `demo` → extension `demo-provider`). */\nfunction resolveExtensionIdForProvider(service: GatewayService, providerId: string): string | undefined {\n  const loader = service.getExtensionLoader();\n  if (!loader) return undefined;\n  return loader.buildManifestRegistry().findByProvider(providerId)?.id;\n}\n\n/** Effective LLM REST base URL for a provider (models.json overrides included). */\nfunction resolveProviderApiBaseUrl(providerId: string): string | undefined {\n  const model = getModelRegistry().getAll().find((m) => m.provider === providerId);\n  if (!model?.baseUrl || model.baseUrl === EXTENSION_PROVIDER_BASE_URL) return undefined;\n  return model.baseUrl;\n}\n\nfunction mapPluginModel(providerId: string, model: ProviderModelDefinition, available: boolean) {\n  return {\n    id: `${providerId}/${model.id}`,\n    name: model.name,\n    provider: providerId,\n    contextWindow: model.contextWindow ?? 128000,\n    maxTokens: model.maxOutputTokens ?? 4096,\n    reasoning: false,\n    vision: model.supportsImages ?? false,\n    cost: { input: model.pricing?.input ?? 0, output: model.pricing?.output ?? 0 },\n    available,\n    source: 'extension' as const,\n  };\n}\n\nexport function registerModelsRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  const { service, strictRateLimitMiddleware } = deps;\n\n  // GET /api/models-json - Get models.json configuration\n  authenticated.get('/api/models-json', async (c) => {\n    const path = getModelsJsonPath();\n    const { config, error } = loadModelsJson(path);\n    const registry = getModelRegistry();\n    \n    return c.json({\n      ok: true,\n      payload: {\n        config,\n        path,\n        exists: error === undefined,\n        loadError: error || registry.getError(),\n      },\n    });\n  });\n\n  // POST /api/models-json/validate - Validate models.json configuration\n  authenticated.post('/api/models-json/validate', async (c) => {\n    const body = await c.req.json();\n    const { config } = body;\n    \n    const result = validateModelsConfig(config);\n    \n    return c.json({\n      ok: true,\n      payload: result,\n    });\n  });\n\n  // PATCH /api/models-json - Save models.json configuration\n  authenticated.patch('/api/models-json', async (c) => {\n    const body = await c.req.json();\n    const { config } = body;\n    \n    const path = getModelsJsonPath();\n    const result = saveModelsJson(path, config);\n    \n    if (!result.success) {\n      return c.json({ ok: false, error: result.error }, 400);\n    }\n    \n    // Refresh registry\n    const registry = getModelRegistry();\n    registry.refresh();\n    \n    // Emit event\n    service.emit('models-json.updated', { \n      modelCount: registry.getAll().length,\n    });\n    \n    return c.json({ \n      ok: true, \n      payload: { \n        saved: true,\n        modelCount: registry.getAll().length,\n      },\n    });\n  });\n\n  // POST /api/models-json/reload - Hot reload models.json\n  authenticated.post('/api/models-json/reload', async (c) => {\n    const registry = getModelRegistry();\n    registry.refresh();\n    \n    const error = registry.getError();\n    const models = registry.getAll();\n    \n    service.emit('models-json.reloaded', { \n      modelCount: models.length,\n      error: error || undefined,\n    });\n    \n    return c.json({\n      ok: true,\n      payload: {\n        modelCount: models.length,\n        error,\n      },\n    });\n  });\n\n  // POST /api/models-json/test-api-key - Test API key resolution\n  authenticated.post('/api/models-json/test-api-key', async (c) => {\n    const body = await c.req.json();\n    const { value } = body;\n    \n    const result = testApiKeyResolution(value);\n    \n    return c.json({\n      ok: true,\n      payload: result,\n    });\n  });\n\n  // GET /api/models - Get available models (only configured providers)\n  authenticated.get('/api/models', async (c) => {\n    if (!service.isGatewayReady()) {\n      return respondStartupUnavailable(c, 'models.list');\n    }\n    const pluginRegistry = getProviderRegistry();\n    const models = (await getAvailableModels()).map(m => ({\n      id: `${m.provider}/${m.id}`,\n      name: m.name,\n      provider: m.provider,\n      contextWindow: m.contextWindow ?? 128000,\n      maxTokens: m.maxTokens ?? 4096,\n      reasoning: m.reasoning ?? false,\n      vision: m.input?.includes('image') ?? false,\n      cost: {\n        input: m.cost?.input ?? 0,\n        output: m.cost?.output ?? 0,\n      },\n      ...(pluginRegistry.has(m.provider) ? { source: 'extension' as const } : {}),\n    }));\n\n    const existingIds = new Set(models.map(m => m.id));\n    for (const plugin of pluginRegistry.listAll()) {\n      for (const model of plugin.models) {\n        const compositeId = `${plugin.id}/${model.id}`;\n        if (!existingIds.has(compositeId)) {\n          models.push(mapPluginModel(plugin.id, model, true));\n          existingIds.add(compositeId);\n        }\n      }\n    }\n\n    // Sort by provider then name\n    models.sort((a, b) => {\n      if (a.provider !== b.provider) return a.provider.localeCompare(b.provider);\n      return a.name.localeCompare(b.name);\n    });\n\n    return c.json({ ok: true, payload: { models } });\n  });\n\n  // GET /api/image/providers — registered image generation providers and models (not in LLM model registry)\n  authenticated.get('/api/image/providers', (c) => {\n    const cfg = deps.service.currentConfig;\n    const summaries = listImageGenerationProvidersSummary(cfg);\n    const providers = summaries.map((p) => {\n      const provider = getImageGenerationProvider(p.id, cfg);\n      let configured = false;\n      try {\n        configured = provider?.isConfigured?.({ cfg }) === true;\n      } catch {\n        configured = false;\n      }\n      return { ...p, configured };\n    });\n    return c.json({ ok: true, payload: { providers } });\n  });\n\n  // POST /api/image/providers/:id/test — lightweight credential probe; does NOT\n  // hit the vendor (no quota burn). Returns `{ ok, configured, reason }`.\n  authenticated.post('/api/image/providers/:id/test', (c) => {\n    const id = c.req.param('id');\n    const cfg = deps.service.currentConfig;\n    const provider = getImageGenerationProvider(id, cfg);\n    if (!provider) {\n      return c.json(\n        { ok: false, error: { message: `Image generation provider not found: ${id}` } },\n        404,\n      );\n    }\n    let configured = false;\n    let reason: string | undefined;\n    try {\n      configured = provider.isConfigured?.({ cfg }) === true;\n      if (!configured) reason = 'Missing API key (set via config or environment).';\n    } catch (err) {\n      reason = err instanceof Error ? err.message : String(err);\n    }\n    return c.json({\n      ok: true,\n      payload: {\n        id: provider.id,\n        configured,\n        ...(reason ? { reason } : {}),\n        defaultModel: provider.defaultModel ?? null,\n      },\n    });\n  });\n\n  /**\n   * POST /api/image/providers/:id/reveal-api-key — return `cfg.providers.<id>.apiKey` plaintext for the\n   * gateway console (same auth as PATCH /api/config). Does not resolve env vars or credential files.\n   */\n  authenticated.post(\n    '/api/image/providers/:id/reveal-api-key',\n    strictRateLimitMiddleware,\n    async (c) => {\n      const rawId = c.req.param('id');\n      const cfg = deps.service.currentConfig;\n      const provider = getImageGenerationProvider(rawId, cfg);\n      if (!provider) {\n        return c.json(\n          { ok: false, error: { message: `Image generation provider not found: ${rawId}` } },\n          404,\n        );\n      }\n      const apiKey = readProviderApiKeyFromConfigFileOnly(cfg, provider.id);\n      return c.json({\n        ok: true,\n        payload: {\n          id: provider.id,\n          apiKey: apiKey ?? null,\n          source: apiKey ? ('config' as const) : ('none' as const),\n        },\n      });\n    },\n  );\n\n  // GET /api/providers - Get ALL available providers and models\n  authenticated.get('/api/providers', async (c) => {\n    const pluginRegistry = getProviderRegistry();\n    const allModels = getAllModels();\n    const availableModels = await getAvailableModels();\n    const configured = new Set(availableModels.map(m => `${m.provider}/${m.id}`));\n\n    const models = allModels.map(m => ({\n      id: `${m.provider}/${m.id}`,\n      name: m.name,\n      provider: m.provider,\n      contextWindow: m.contextWindow ?? 128000,\n      maxTokens: m.maxTokens ?? 4096,\n      reasoning: m.reasoning ?? false,\n      vision: m.input?.includes('image') ?? false,\n      cost: {\n        input: m.cost?.input ?? 0,\n        output: m.cost?.output ?? 0,\n      },\n      available: configured.has(`${m.provider}/${m.id}`),\n      ...(pluginRegistry.has(m.provider) ? { source: 'extension' as const } : {}),\n    }));\n\n    const existingIds = new Set(models.map(m => m.id));\n    for (const plugin of pluginRegistry.listAll()) {\n      for (const model of plugin.models) {\n        const compositeId = `${plugin.id}/${model.id}`;\n        if (!existingIds.has(compositeId)) {\n          models.push(mapPluginModel(plugin.id, model, configured.has(compositeId)));\n          existingIds.add(compositeId);\n        }\n      }\n    }\n\n    // Sort by provider then name\n    models.sort((a, b) => {\n      if (a.provider !== b.provider) return a.provider.localeCompare(b.provider);\n      return a.name.localeCompare(b.name);\n    });\n\n    return c.json({ ok: true, payload: { models } });\n  });\n\n  // GET /api/providers/meta - Get provider metadata (categories, display names)\n  authenticated.get('/api/providers/meta', async (c) => {\n    const providers = getAllProviders();\n    const pluginRegistry = getProviderRegistry();\n\n    const meta = await Promise.all(\n      providers.map(async (provider) => {\n        const plugin = pluginRegistry.get(provider);\n        const extensionId = plugin\n          ? resolveExtensionIdForProvider(service, provider)\n          : undefined;\n        return {\n          id: provider,\n          name: plugin?.name ?? PROVIDER_META[provider]?.name ?? provider,\n          category: plugin ? ('extension' as const) : PROVIDER_META[provider]?.category || 'specialty',\n          supportsOAuth: plugin ? false : (PROVIDER_META[provider]?.supportsOAuth ?? false),\n          supportsApiKey: plugin ? false : (PROVIDER_META[provider]?.supportsApiKey ?? true),\n          configured: await isProviderConfigured(provider),\n          activeKeySource: await getProviderActiveKeySource(provider),\n          baseUrl: resolveProviderApiBaseUrl(provider),\n          ...(extensionId ? { extensionId } : {}),\n        };\n      }),\n    );\n\n    const knownProviderIds = new Set(providers);\n    for (const plugin of pluginRegistry.listAll()) {\n      if (!knownProviderIds.has(plugin.id)) {\n        const extensionId = resolveExtensionIdForProvider(service, plugin.id);\n        meta.push({\n          id: plugin.id,\n          name: plugin.name,\n          category: 'extension',\n          supportsOAuth: false,\n          supportsApiKey: false,\n          configured: true,\n          activeKeySource: 'extension',\n          baseUrl: resolveProviderApiBaseUrl(plugin.id),\n          ...(extensionId ? { extensionId } : {}),\n        });\n      }\n    }\n\n    return c.json({ ok: true, payload: { providers: meta } });\n  });\n\n  /**\n   * POST /api/providers/:providerId/reveal-api-key — plaintext key when stored in the\n   * gateway credential store or models.json (not env vars or OAuth tokens).\n   */\n  authenticated.post(\n    '/api/providers/:providerId/reveal-api-key',\n    strictRateLimitMiddleware,\n    async (c) => {\n      const rawId = c.req.param('providerId')?.trim();\n      if (!rawId) {\n        return c.json({ ok: false, error: { message: 'Missing providerId' } }, 400);\n      }\n      const providerId = rawId.toLowerCase();\n      const resolver = new CredentialResolver();\n      const stored = await resolver.revealGatewayStoredApiKey(providerId);\n      if (stored) {\n        return c.json({\n          ok: true,\n          payload: { id: providerId, apiKey: stored, source: 'credential' as const },\n        });\n      }\n      const fromModelsJson = readModelsJsonProviderApiKey(providerId);\n      if (fromModelsJson) {\n        return c.json({\n          ok: true,\n          payload: { id: providerId, apiKey: fromModelsJson, source: 'models_json' as const },\n        });\n      }\n      return c.json({\n        ok: true,\n        payload: { id: providerId, apiKey: null, source: 'none' as const },\n      });\n    },\n  );\n\n  // DELETE /api/providers/:providerId/key - Remove a provider's stored API key\n  authenticated.delete('/api/providers/:providerId/key', strictRateLimitMiddleware, async (c) => {\n    const providerId = c.req.param('providerId');\n    if (!providerId) {\n      return c.json({ ok: false, error: { message: 'Missing providerId' } }, 400);\n    }\n\n    const normalizedProvider = providerId.toLowerCase();\n    const profileId = `${normalizedProvider}:default`;\n    const resolver = new CredentialResolver();\n\n    try {\n      await resolver.deleteProfile(profileId);\n      return c.json({ ok: true, payload: { deleted: normalizedProvider } });\n    } catch (error) {\n      const errorMessage = error instanceof Error ? error.message : String(error);\n      return c.json({ ok: false, error: { message: `Failed to delete key: ${errorMessage}` } }, 500);\n    }\n  });\n}\n"],"mappings":";;;;;;;;;;;kBAOwC;2BAEuC;gBAc1C;kBAC6B;sBACU;AAM5E,SAAS,6BAA6B,YAAwC;CAC5E,MAAM,EAAE,WAAW,eAAeA,uBAAmB,CAAC;CAEtD,MAAM,OADQ,OAAO,YAAY,WAAW,MAAM,IAC/B;AACnB,QAAO,OAAO,QAAQ,YAAY,IAAI,MAAM,GAAG,IAAI,MAAM,GAAG,KAAA;;;AAI9D,SAAS,qCAAqC,KAAa,YAAwC;CACjG,MAAM,KAAK,WAAW,MAAM,CAAC,aAAa;CAC1C,MAAM,SAAS,IAAI,YAAY;AAC/B,KAAI,CAAC,UAAU,OAAO,WAAW,YAAY,MAAM,QAAQ,OAAO,CAAE,QAAO,KAAA;CAC3E,MAAM,IAAK,OAAgC;AAC3C,QAAO,OAAO,MAAM,YAAY,EAAE,MAAM,GAAG,EAAE,MAAM,GAAG,KAAA;;;AAIxD,SAAS,8BAA8B,SAAyB,YAAwC;CACtG,MAAM,SAAS,QAAQ,oBAAoB;AAC3C,KAAI,CAAC,OAAQ,QAAO,KAAA;AACpB,QAAO,OAAO,uBAAuB,CAAC,eAAe,WAAW,EAAE;;;AAIpE,SAAS,0BAA0B,YAAwC;CACzE,MAAM,QAAQ,kBAAkB,CAAC,QAAQ,CAAC,MAAM,MAAM,EAAE,aAAa,WAAW;AAChF,KAAI,CAAC,OAAO,WAAW,MAAM,YAAA,8BAAyC,QAAO,KAAA;AAC7E,QAAO,MAAM;;AAGf,SAAS,eAAe,YAAoB,OAAgC,WAAoB;AAC9F,QAAO;EACL,IAAI,GAAG,WAAW,GAAG,MAAM;EAC3B,MAAM,MAAM;EACZ,UAAU;EACV,eAAe,MAAM,iBAAiB;EACtC,WAAW,MAAM,mBAAmB;EACpC,WAAW;EACX,QAAQ,MAAM,kBAAkB;EAChC,MAAM;GAAE,OAAO,MAAM,SAAS,SAAS;GAAG,QAAQ,MAAM,SAAS,UAAU;GAAG;EAC9E;EACA,QAAQ;EACT;;AAGH,SAAgB,qBAAqB,eAAqB,MAAoC;CAC5F,MAAM,EAAE,SAAS,8BAA8B;AAG/C,eAAc,IAAI,oBAAoB,OAAO,MAAM;EACjD,MAAM,OAAOA,uBAAmB;EAChC,MAAM,EAAE,QAAQ,UAAU,eAAe,KAAK;EAC9C,MAAM,WAAW,kBAAkB;AAEnC,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP;IACA;IACA,QAAQ,UAAU,KAAA;IAClB,WAAW,SAAS,SAAS,UAAU;IACxC;GACF,CAAC;GACF;AAGF,eAAc,KAAK,6BAA6B,OAAO,MAAM;EAE3D,MAAM,EAAE,WAAW,MADA,EAAE,IAAI,MAAM;EAG/B,MAAM,SAAS,qBAAqB,OAAO;AAE3C,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;GACV,CAAC;GACF;AAGF,eAAc,MAAM,oBAAoB,OAAO,MAAM;EAEnD,MAAM,EAAE,WAAW,MADA,EAAE,IAAI,MAAM;EAI/B,MAAM,SAAS,eADFA,uBACqB,EAAE,OAAO;AAE3C,MAAI,CAAC,OAAO,QACV,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,OAAO;GAAO,EAAE,IAAI;EAIxD,MAAM,WAAW,kBAAkB;AACnC,WAAS,SAAS;AAGlB,UAAQ,KAAK,uBAAuB,EAClC,YAAY,SAAS,QAAQ,CAAC,QAC/B,CAAC;AAEF,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,OAAO;IACP,YAAY,SAAS,QAAQ,CAAC;IAC/B;GACF,CAAC;GACF;AAGF,eAAc,KAAK,2BAA2B,OAAO,MAAM;EACzD,MAAM,WAAW,kBAAkB;AACnC,WAAS,SAAS;EAElB,MAAM,QAAQ,SAAS,UAAU;EACjC,MAAM,SAAS,SAAS,QAAQ;AAEhC,UAAQ,KAAK,wBAAwB;GACnC,YAAY,OAAO;GACnB,OAAO,SAAS,KAAA;GACjB,CAAC;AAEF,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,YAAY,OAAO;IACnB;IACD;GACF,CAAC;GACF;AAGF,eAAc,KAAK,iCAAiC,OAAO,MAAM;EAE/D,MAAM,EAAE,UAAU,MADC,EAAE,IAAI,MAAM;EAG/B,MAAM,SAAS,qBAAqB,MAAM;AAE1C,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;GACV,CAAC;GACF;AAGF,eAAc,IAAI,eAAe,OAAO,MAAM;AAC5C,MAAI,CAAC,QAAQ,gBAAgB,CAC3B,QAAO,0BAA0B,GAAG,cAAc;EAEpD,MAAM,iBAAiB,qBAAqB;EAC5C,MAAM,UAAU,MAAM,oBAAoB,EAAE,KAAI,OAAM;GACpD,IAAI,GAAG,EAAE,SAAS,GAAG,EAAE;GACvB,MAAM,EAAE;GACR,UAAU,EAAE;GACZ,eAAe,EAAE,iBAAiB;GAClC,WAAW,EAAE,aAAa;GAC1B,WAAW,EAAE,aAAa;GAC1B,QAAQ,EAAE,OAAO,SAAS,QAAQ,IAAI;GACtC,MAAM;IACJ,OAAO,EAAE,MAAM,SAAS;IACxB,QAAQ,EAAE,MAAM,UAAU;IAC3B;GACD,GAAI,eAAe,IAAI,EAAE,SAAS,GAAG,EAAE,QAAQ,aAAsB,GAAG,EAAE;GAC3E,EAAE;EAEH,MAAM,cAAc,IAAI,IAAI,OAAO,KAAI,MAAK,EAAE,GAAG,CAAC;AAClD,OAAK,MAAM,UAAU,eAAe,SAAS,CAC3C,MAAK,MAAM,SAAS,OAAO,QAAQ;GACjC,MAAM,cAAc,GAAG,OAAO,GAAG,GAAG,MAAM;AAC1C,OAAI,CAAC,YAAY,IAAI,YAAY,EAAE;AACjC,WAAO,KAAK,eAAe,OAAO,IAAI,OAAO,KAAK,CAAC;AACnD,gBAAY,IAAI,YAAY;;;AAMlC,SAAO,MAAM,GAAG,MAAM;AACpB,OAAI,EAAE,aAAa,EAAE,SAAU,QAAO,EAAE,SAAS,cAAc,EAAE,SAAS;AAC1E,UAAO,EAAE,KAAK,cAAc,EAAE,KAAK;IACnC;AAEF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,QAAQ;GAAE,CAAC;GAChD;AAGF,eAAc,IAAI,yBAAyB,MAAM;EAC/C,MAAM,MAAM,KAAK,QAAQ;EAEzB,MAAM,YADY,oCAAoC,IAC3B,CAAC,KAAK,MAAM;GACrC,MAAM,WAAW,2BAA2B,EAAE,IAAI,IAAI;GACtD,IAAI,aAAa;AACjB,OAAI;AACF,iBAAa,UAAU,eAAe,EAAE,KAAK,CAAC,KAAK;WAC7C;AACN,iBAAa;;AAEf,UAAO;IAAE,GAAG;IAAG;IAAY;IAC3B;AACF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,WAAW;GAAE,CAAC;GACnD;AAIF,eAAc,KAAK,kCAAkC,MAAM;EACzD,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK;EAC5B,MAAM,MAAM,KAAK,QAAQ;EACzB,MAAM,WAAW,2BAA2B,IAAI,IAAI;AACpD,MAAI,CAAC,SACH,QAAO,EAAE,KACP;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,wCAAwC,MAAM;GAAE,EAC/E,IACD;EAEH,IAAI,aAAa;EACjB,IAAI;AACJ,MAAI;AACF,gBAAa,SAAS,eAAe,EAAE,KAAK,CAAC,KAAK;AAClD,OAAI,CAAC,WAAY,UAAS;WACnB,KAAK;AACZ,YAAS,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;;AAE3D,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,IAAI,SAAS;IACb;IACA,GAAI,SAAS,EAAE,QAAQ,GAAG,EAAE;IAC5B,cAAc,SAAS,gBAAgB;IACxC;GACF,CAAC;GACF;;;;;AAMF,eAAc,KACZ,2CACA,2BACA,OAAO,MAAM;EACX,MAAM,QAAQ,EAAE,IAAI,MAAM,KAAK;EAC/B,MAAM,MAAM,KAAK,QAAQ;EACzB,MAAM,WAAW,2BAA2B,OAAO,IAAI;AACvD,MAAI,CAAC,SACH,QAAO,EAAE,KACP;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,wCAAwC,SAAS;GAAE,EAClF,IACD;EAEH,MAAM,SAAS,qCAAqC,KAAK,SAAS,GAAG;AACrE,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,IAAI,SAAS;IACb,QAAQ,UAAU;IAClB,QAAQ,SAAU,WAAsB;IACzC;GACF,CAAC;GAEL;AAGD,eAAc,IAAI,kBAAkB,OAAO,MAAM;EAC/C,MAAM,iBAAiB,qBAAqB;EAC5C,MAAM,YAAY,cAAc;EAChC,MAAM,kBAAkB,MAAM,oBAAoB;EAClD,MAAM,aAAa,IAAI,IAAI,gBAAgB,KAAI,MAAK,GAAG,EAAE,SAAS,GAAG,EAAE,KAAK,CAAC;EAE7E,MAAM,SAAS,UAAU,KAAI,OAAM;GACjC,IAAI,GAAG,EAAE,SAAS,GAAG,EAAE;GACvB,MAAM,EAAE;GACR,UAAU,EAAE;GACZ,eAAe,EAAE,iBAAiB;GAClC,WAAW,EAAE,aAAa;GAC1B,WAAW,EAAE,aAAa;GAC1B,QAAQ,EAAE,OAAO,SAAS,QAAQ,IAAI;GACtC,MAAM;IACJ,OAAO,EAAE,MAAM,SAAS;IACxB,QAAQ,EAAE,MAAM,UAAU;IAC3B;GACD,WAAW,WAAW,IAAI,GAAG,EAAE,SAAS,GAAG,EAAE,KAAK;GAClD,GAAI,eAAe,IAAI,EAAE,SAAS,GAAG,EAAE,QAAQ,aAAsB,GAAG,EAAE;GAC3E,EAAE;EAEH,MAAM,cAAc,IAAI,IAAI,OAAO,KAAI,MAAK,EAAE,GAAG,CAAC;AAClD,OAAK,MAAM,UAAU,eAAe,SAAS,CAC3C,MAAK,MAAM,SAAS,OAAO,QAAQ;GACjC,MAAM,cAAc,GAAG,OAAO,GAAG,GAAG,MAAM;AAC1C,OAAI,CAAC,YAAY,IAAI,YAAY,EAAE;AACjC,WAAO,KAAK,eAAe,OAAO,IAAI,OAAO,WAAW,IAAI,YAAY,CAAC,CAAC;AAC1E,gBAAY,IAAI,YAAY;;;AAMlC,SAAO,MAAM,GAAG,MAAM;AACpB,OAAI,EAAE,aAAa,EAAE,SAAU,QAAO,EAAE,SAAS,cAAc,EAAE,SAAS;AAC1E,UAAO,EAAE,KAAK,cAAc,EAAE,KAAK;IACnC;AAEF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,QAAQ;GAAE,CAAC;GAChD;AAGF,eAAc,IAAI,uBAAuB,OAAO,MAAM;EACpD,MAAM,YAAY,iBAAiB;EACnC,MAAM,iBAAiB,qBAAqB;EAE5C,MAAM,OAAO,MAAM,QAAQ,IACzB,UAAU,IAAI,OAAO,aAAa;GAChC,MAAM,SAAS,eAAe,IAAI,SAAS;GAC3C,MAAM,cAAc,SAChB,8BAA8B,SAAS,SAAS,GAChD,KAAA;AACJ,UAAO;IACL,IAAI;IACJ,MAAM,QAAQ,QAAQ,cAAc,WAAW,QAAQ;IACvD,UAAU,SAAU,cAAwB,cAAc,WAAW,YAAY;IACjF,eAAe,SAAS,QAAS,cAAc,WAAW,iBAAiB;IAC3E,gBAAgB,SAAS,QAAS,cAAc,WAAW,kBAAkB;IAC7E,YAAY,MAAM,qBAAqB,SAAS;IAChD,iBAAiB,MAAM,2BAA2B,SAAS;IAC3D,SAAS,0BAA0B,SAAS;IAC5C,GAAI,cAAc,EAAE,aAAa,GAAG,EAAE;IACvC;IACD,CACH;EAED,MAAM,mBAAmB,IAAI,IAAI,UAAU;AAC3C,OAAK,MAAM,UAAU,eAAe,SAAS,CAC3C,KAAI,CAAC,iBAAiB,IAAI,OAAO,GAAG,EAAE;GACpC,MAAM,cAAc,8BAA8B,SAAS,OAAO,GAAG;AACrE,QAAK,KAAK;IACR,IAAI,OAAO;IACX,MAAM,OAAO;IACb,UAAU;IACV,eAAe;IACf,gBAAgB;IAChB,YAAY;IACZ,iBAAiB;IACjB,SAAS,0BAA0B,OAAO,GAAG;IAC7C,GAAI,cAAc,EAAE,aAAa,GAAG,EAAE;IACvC,CAAC;;AAIN,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,WAAW,MAAM;GAAE,CAAC;GACzD;;;;;AAMF,eAAc,KACZ,6CACA,2BACA,OAAO,MAAM;EACX,MAAM,QAAQ,EAAE,IAAI,MAAM,aAAa,EAAE,MAAM;AAC/C,MAAI,CAAC,MACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,sBAAsB;GAAE,EAAE,IAAI;EAE7E,MAAM,aAAa,MAAM,aAAa;EAEtC,MAAM,SAAS,MAAM,IADA,oBACQ,CAAC,0BAA0B,WAAW;AACnE,MAAI,OACF,QAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IAAE,IAAI;IAAY,QAAQ;IAAQ,QAAQ;IAAuB;GAC3E,CAAC;EAEJ,MAAM,iBAAiB,6BAA6B,WAAW;AAC/D,MAAI,eACF,QAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IAAE,IAAI;IAAY,QAAQ;IAAgB,QAAQ;IAAwB;GACpF,CAAC;AAEJ,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IAAE,IAAI;IAAY,QAAQ;IAAM,QAAQ;IAAiB;GACnE,CAAC;GAEL;AAGD,eAAc,OAAO,kCAAkC,2BAA2B,OAAO,MAAM;EAC7F,MAAM,aAAa,EAAE,IAAI,MAAM,aAAa;AAC5C,MAAI,CAAC,WACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,sBAAsB;GAAE,EAAE,IAAI;EAG7E,MAAM,qBAAqB,WAAW,aAAa;EACnD,MAAM,YAAY,GAAG,mBAAmB;EACxC,MAAM,WAAW,IAAI,oBAAoB;AAEzC,MAAI;AACF,SAAM,SAAS,cAAc,UAAU;AACvC,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,SAAS,oBAAoB;IAAE,CAAC;WAC9D,OAAO;GACd,MAAM,eAAe,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;AAC3E,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS,yBAAyB,gBAAgB;IAAE,EAAE,IAAI;;GAEhG"}
+{"version":3,"file":"models.js","names":["getModelsJsonPath"],"sources":["../../../../../src/gateway/hono/routes/models.ts"],"sourcesContent":["import type { Hono } from 'hono';\n\nimport {\n  getModelsJsonPath,\n  loadModelsJson,\n  saveModelsJson,\n  validateModelsConfig,\n} from '../../../config/models-json.js';\nimport type { Config } from '../../../config/schema.js';\nimport { testApiKeyResolution } from '../../../config/resolve-config-value.js';\nimport {\n  getImageGenerationProvider,\n  listImageGenerationProvidersSummary,\n} from '../../../agent/image/generation/runtime.js';\nimport {\n  EXTENSION_PROVIDER_BASE_URL,\n  getAllModels,\n  getAvailableModels,\n  getModelRegistry,\n  getAllProviders,\n  getProviderAuthState,\n  isProviderConfigured,\n  PROVIDER_META,\n} from '../../../providers/index.js';\nimport { CredentialResolver } from '../../../auth/credentials.js';\nimport { getProviderRegistry } from '../../../providers/plugin-registry.js';\nimport type { ProviderModelDefinition } from '../../../extensions/types/providers.js';\nimport type { GatewayService } from '../../service.js';\nimport type { AuthenticatedRouteDeps } from './deps.js';\nimport { respondStartupUnavailable } from '../lib/startup-unavailable.js';\n\nfunction readModelsJsonProviderApiKey(providerId: string): string | undefined {\n  const { config } = loadModelsJson(getModelsJsonPath());\n  const entry = config.providers?.[providerId.trim()];\n  const key = entry?.apiKey;\n  return typeof key === 'string' && key.trim() ? key.trim() : undefined;\n}\n\n/** Plaintext key only when persisted under `cfg.providers.<id>.apiKey` (not env / credential store). */\nfunction readProviderApiKeyFromConfigFileOnly(cfg: Config, providerId: string): string | undefined {\n  const id = providerId.trim().toLowerCase();\n  const bucket = cfg.providers?.[id];\n  if (!bucket || typeof bucket !== 'object' || Array.isArray(bucket)) return undefined;\n  const k = (bucket as { apiKey?: unknown }).apiKey;\n  return typeof k === 'string' && k.trim() ? k.trim() : undefined;\n}\n\n/** Extension id from manifest `providers[]` (e.g. provider `demo` → extension `demo-provider`). */\nfunction resolveExtensionIdForProvider(service: GatewayService, providerId: string): string | undefined {\n  const loader = service.getExtensionLoader();\n  if (!loader) return undefined;\n  return loader.buildManifestRegistry().findByProvider(providerId)?.id;\n}\n\n/** Effective LLM REST base URL for a provider (models.json overrides included). */\nfunction resolveProviderApiBaseUrl(providerId: string): string | undefined {\n  const model = getModelRegistry().getAll().find((m) => m.provider === providerId);\n  if (!model?.baseUrl || model.baseUrl === EXTENSION_PROVIDER_BASE_URL) return undefined;\n  return model.baseUrl;\n}\n\nfunction mapPluginModel(providerId: string, model: ProviderModelDefinition, available: boolean) {\n  return {\n    id: `${providerId}/${model.id}`,\n    name: model.name,\n    provider: providerId,\n    contextWindow: model.contextWindow ?? 128000,\n    maxTokens: model.maxOutputTokens ?? 4096,\n    reasoning: false,\n    vision: model.supportsImages ?? false,\n    cost: { input: model.pricing?.input ?? 0, output: model.pricing?.output ?? 0 },\n    available,\n    source: 'extension' as const,\n  };\n}\n\nexport function registerModelsRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void {\n  const { service, strictRateLimitMiddleware } = deps;\n\n  // GET /api/models-json - Get models.json configuration\n  authenticated.get('/api/models-json', async (c) => {\n    const path = getModelsJsonPath();\n    const { config, error } = loadModelsJson(path);\n    const registry = getModelRegistry();\n    \n    return c.json({\n      ok: true,\n      payload: {\n        config,\n        path,\n        exists: error === undefined,\n        loadError: error || registry.getError(),\n      },\n    });\n  });\n\n  // POST /api/models-json/validate - Validate models.json configuration\n  authenticated.post('/api/models-json/validate', async (c) => {\n    const body = await c.req.json();\n    const { config } = body;\n    \n    const result = validateModelsConfig(config);\n    \n    return c.json({\n      ok: true,\n      payload: result,\n    });\n  });\n\n  // PATCH /api/models-json - Save models.json configuration\n  authenticated.patch('/api/models-json', async (c) => {\n    const body = await c.req.json();\n    const { config } = body;\n    \n    const path = getModelsJsonPath();\n    const result = saveModelsJson(path, config);\n    \n    if (!result.success) {\n      return c.json({ ok: false, error: result.error }, 400);\n    }\n    \n    // Refresh registry\n    const registry = getModelRegistry();\n    registry.refresh();\n    \n    // Emit event\n    service.emit('models-json.updated', { \n      modelCount: registry.getAll().length,\n    });\n    \n    return c.json({ \n      ok: true, \n      payload: { \n        saved: true,\n        modelCount: registry.getAll().length,\n      },\n    });\n  });\n\n  // POST /api/models-json/reload - Hot reload models.json\n  authenticated.post('/api/models-json/reload', async (c) => {\n    const registry = getModelRegistry();\n    registry.refresh();\n    \n    const error = registry.getError();\n    const models = registry.getAll();\n    \n    service.emit('models-json.reloaded', { \n      modelCount: models.length,\n      error: error || undefined,\n    });\n    \n    return c.json({\n      ok: true,\n      payload: {\n        modelCount: models.length,\n        error,\n      },\n    });\n  });\n\n  // POST /api/models-json/test-api-key - Test API key resolution\n  authenticated.post('/api/models-json/test-api-key', async (c) => {\n    const body = await c.req.json();\n    const { value } = body;\n    \n    const result = testApiKeyResolution(value);\n    \n    return c.json({\n      ok: true,\n      payload: result,\n    });\n  });\n\n  // GET /api/models - Get available models (only configured providers)\n  authenticated.get('/api/models', async (c) => {\n    if (!service.isGatewayReady()) {\n      return respondStartupUnavailable(c, 'models.list');\n    }\n    const pluginRegistry = getProviderRegistry();\n    const models = (await getAvailableModels()).map(m => ({\n      id: `${m.provider}/${m.id}`,\n      name: m.name,\n      provider: m.provider,\n      contextWindow: m.contextWindow ?? 128000,\n      maxTokens: m.maxTokens ?? 4096,\n      reasoning: m.reasoning ?? false,\n      vision: m.input?.includes('image') ?? false,\n      cost: {\n        input: m.cost?.input ?? 0,\n        output: m.cost?.output ?? 0,\n      },\n      ...(pluginRegistry.has(m.provider) ? { source: 'extension' as const } : {}),\n    }));\n\n    const existingIds = new Set(models.map(m => m.id));\n    for (const plugin of pluginRegistry.listAll()) {\n      for (const model of plugin.models) {\n        const compositeId = `${plugin.id}/${model.id}`;\n        if (!existingIds.has(compositeId)) {\n          models.push(mapPluginModel(plugin.id, model, true));\n          existingIds.add(compositeId);\n        }\n      }\n    }\n\n    // Sort by provider then name\n    models.sort((a, b) => {\n      if (a.provider !== b.provider) return a.provider.localeCompare(b.provider);\n      return a.name.localeCompare(b.name);\n    });\n\n    return c.json({ ok: true, payload: { models } });\n  });\n\n  // GET /api/image/providers — registered image generation providers and models (not in LLM model registry)\n  authenticated.get('/api/image/providers', (c) => {\n    const cfg = deps.service.currentConfig;\n    const summaries = listImageGenerationProvidersSummary(cfg);\n    const providers = summaries.map((p) => {\n      const provider = getImageGenerationProvider(p.id, cfg);\n      let configured = false;\n      try {\n        configured = provider?.isConfigured?.({ cfg }) === true;\n      } catch {\n        configured = false;\n      }\n      return { ...p, configured };\n    });\n    return c.json({ ok: true, payload: { providers } });\n  });\n\n  // POST /api/image/providers/:id/test — lightweight credential probe; does NOT\n  // hit the vendor (no quota burn). Returns `{ ok, configured, reason }`.\n  authenticated.post('/api/image/providers/:id/test', (c) => {\n    const id = c.req.param('id');\n    const cfg = deps.service.currentConfig;\n    const provider = getImageGenerationProvider(id, cfg);\n    if (!provider) {\n      return c.json(\n        { ok: false, error: { message: `Image generation provider not found: ${id}` } },\n        404,\n      );\n    }\n    let configured = false;\n    let reason: string | undefined;\n    try {\n      configured = provider.isConfigured?.({ cfg }) === true;\n      if (!configured) reason = 'Missing API key (set via config or environment).';\n    } catch (err) {\n      reason = err instanceof Error ? err.message : String(err);\n    }\n    return c.json({\n      ok: true,\n      payload: {\n        id: provider.id,\n        configured,\n        ...(reason ? { reason } : {}),\n        defaultModel: provider.defaultModel ?? null,\n      },\n    });\n  });\n\n  /**\n   * POST /api/image/providers/:id/reveal-api-key — return `cfg.providers.<id>.apiKey` plaintext for the\n   * gateway console (same auth as PATCH /api/config). Does not resolve env vars or credential files.\n   */\n  authenticated.post(\n    '/api/image/providers/:id/reveal-api-key',\n    strictRateLimitMiddleware,\n    async (c) => {\n      const rawId = c.req.param('id');\n      const cfg = deps.service.currentConfig;\n      const provider = getImageGenerationProvider(rawId, cfg);\n      if (!provider) {\n        return c.json(\n          { ok: false, error: { message: `Image generation provider not found: ${rawId}` } },\n          404,\n        );\n      }\n      const apiKey = readProviderApiKeyFromConfigFileOnly(cfg, provider.id);\n      return c.json({\n        ok: true,\n        payload: {\n          id: provider.id,\n          apiKey: apiKey ?? null,\n          source: apiKey ? ('config' as const) : ('none' as const),\n        },\n      });\n    },\n  );\n\n  // GET /api/providers - Get ALL available providers and models\n  authenticated.get('/api/providers', async (c) => {\n    const pluginRegistry = getProviderRegistry();\n    const allModels = getAllModels();\n    const availableModels = await getAvailableModels();\n    const configured = new Set(availableModels.map(m => `${m.provider}/${m.id}`));\n\n    const models = allModels.map(m => ({\n      id: `${m.provider}/${m.id}`,\n      name: m.name,\n      provider: m.provider,\n      contextWindow: m.contextWindow ?? 128000,\n      maxTokens: m.maxTokens ?? 4096,\n      reasoning: m.reasoning ?? false,\n      vision: m.input?.includes('image') ?? false,\n      cost: {\n        input: m.cost?.input ?? 0,\n        output: m.cost?.output ?? 0,\n      },\n      available: configured.has(`${m.provider}/${m.id}`),\n      ...(pluginRegistry.has(m.provider) ? { source: 'extension' as const } : {}),\n    }));\n\n    const existingIds = new Set(models.map(m => m.id));\n    for (const plugin of pluginRegistry.listAll()) {\n      for (const model of plugin.models) {\n        const compositeId = `${plugin.id}/${model.id}`;\n        if (!existingIds.has(compositeId)) {\n          models.push(mapPluginModel(plugin.id, model, configured.has(compositeId)));\n          existingIds.add(compositeId);\n        }\n      }\n    }\n\n    // Sort by provider then name\n    models.sort((a, b) => {\n      if (a.provider !== b.provider) return a.provider.localeCompare(b.provider);\n      return a.name.localeCompare(b.name);\n    });\n\n    return c.json({ ok: true, payload: { models } });\n  });\n\n  // GET /api/providers/meta - Get provider metadata (categories, display names)\n  authenticated.get('/api/providers/meta', async (c) => {\n    const providers = getAllProviders();\n    const pluginRegistry = getProviderRegistry();\n\n    const meta = await Promise.all(\n      providers.map(async (provider) => {\n        const plugin = pluginRegistry.get(provider);\n        const extensionId = plugin\n          ? resolveExtensionIdForProvider(service, provider)\n          : undefined;\n        const authState = await getProviderAuthState(provider);\n        const configured = authState.authMode !== 'none' || (await isProviderConfigured(provider));\n        return {\n          id: provider,\n          name: plugin?.name ?? PROVIDER_META[provider]?.name ?? provider,\n          category: plugin ? ('extension' as const) : PROVIDER_META[provider]?.category || 'specialty',\n          supportsOAuth: plugin ? false : (PROVIDER_META[provider]?.supportsOAuth ?? false),\n          supportsApiKey: plugin ? false : (PROVIDER_META[provider]?.supportsApiKey ?? true),\n          configured,\n          activeKeySource: authState.authMode,\n          authMode: authState.authMode,\n          authStatus: authState.authStatus,\n          ...(authState.expiresAt ? { expiresAt: authState.expiresAt } : {}),\n          baseUrl: resolveProviderApiBaseUrl(provider),\n          ...(extensionId ? { extensionId } : {}),\n        };\n      }),\n    );\n\n    const knownProviderIds = new Set(providers);\n    for (const plugin of pluginRegistry.listAll()) {\n      if (!knownProviderIds.has(plugin.id)) {\n        const extensionId = resolveExtensionIdForProvider(service, plugin.id);\n        meta.push({\n          id: plugin.id,\n          name: plugin.name,\n          category: 'extension',\n          supportsOAuth: false,\n          supportsApiKey: false,\n          configured: true,\n          activeKeySource: 'extension',\n          authMode: 'extension',\n          authStatus: 'connected',\n          baseUrl: resolveProviderApiBaseUrl(plugin.id),\n          ...(extensionId ? { extensionId } : {}),\n        });\n      }\n    }\n\n    return c.json({ ok: true, payload: { providers: meta } });\n  });\n\n  /**\n   * POST /api/providers/:providerId/reveal-api-key — plaintext key when stored in the\n   * gateway credential store or models.json (not env vars or OAuth tokens).\n   */\n  authenticated.post(\n    '/api/providers/:providerId/reveal-api-key',\n    strictRateLimitMiddleware,\n    async (c) => {\n      const rawId = c.req.param('providerId')?.trim();\n      if (!rawId) {\n        return c.json({ ok: false, error: { message: 'Missing providerId' } }, 400);\n      }\n      const providerId = rawId.toLowerCase();\n      const resolver = new CredentialResolver();\n      const stored = await resolver.revealGatewayStoredApiKey(providerId);\n      if (stored) {\n        return c.json({\n          ok: true,\n          payload: { id: providerId, apiKey: stored, source: 'credential' as const },\n        });\n      }\n      const fromModelsJson = readModelsJsonProviderApiKey(providerId);\n      if (fromModelsJson) {\n        return c.json({\n          ok: true,\n          payload: { id: providerId, apiKey: fromModelsJson, source: 'models_json' as const },\n        });\n      }\n      return c.json({\n        ok: true,\n        payload: { id: providerId, apiKey: null, source: 'none' as const },\n      });\n    },\n  );\n\n  // DELETE /api/providers/:providerId/key - Remove a provider's stored API key\n  authenticated.delete('/api/providers/:providerId/key', strictRateLimitMiddleware, async (c) => {\n    const providerId = c.req.param('providerId');\n    if (!providerId) {\n      return c.json({ ok: false, error: { message: 'Missing providerId' } }, 400);\n    }\n\n    const normalizedProvider = providerId.toLowerCase();\n    const resolver = new CredentialResolver();\n\n    try {\n      await resolver.deleteProviderCredential(normalizedProvider);\n      return c.json({ ok: true, payload: { deleted: normalizedProvider } });\n    } catch (error) {\n      const errorMessage = error instanceof Error ? error.message : String(error);\n      return c.json({ ok: false, error: { message: `Failed to delete key: ${errorMessage}` } }, 500);\n    }\n  });\n}\n"],"mappings":";;;;;;;;;;;kBAOwC;2BAEuC;gBAc1C;kBAC6B;sBACU;AAM5E,SAAS,6BAA6B,YAAwC;CAC5E,MAAM,EAAE,WAAW,eAAeA,uBAAmB,CAAC;CAEtD,MAAM,OADQ,OAAO,YAAY,WAAW,MAAM,IAC/B;AACnB,QAAO,OAAO,QAAQ,YAAY,IAAI,MAAM,GAAG,IAAI,MAAM,GAAG,KAAA;;;AAI9D,SAAS,qCAAqC,KAAa,YAAwC;CACjG,MAAM,KAAK,WAAW,MAAM,CAAC,aAAa;CAC1C,MAAM,SAAS,IAAI,YAAY;AAC/B,KAAI,CAAC,UAAU,OAAO,WAAW,YAAY,MAAM,QAAQ,OAAO,CAAE,QAAO,KAAA;CAC3E,MAAM,IAAK,OAAgC;AAC3C,QAAO,OAAO,MAAM,YAAY,EAAE,MAAM,GAAG,EAAE,MAAM,GAAG,KAAA;;;AAIxD,SAAS,8BAA8B,SAAyB,YAAwC;CACtG,MAAM,SAAS,QAAQ,oBAAoB;AAC3C,KAAI,CAAC,OAAQ,QAAO,KAAA;AACpB,QAAO,OAAO,uBAAuB,CAAC,eAAe,WAAW,EAAE;;;AAIpE,SAAS,0BAA0B,YAAwC;CACzE,MAAM,QAAQ,kBAAkB,CAAC,QAAQ,CAAC,MAAM,MAAM,EAAE,aAAa,WAAW;AAChF,KAAI,CAAC,OAAO,WAAW,MAAM,YAAA,8BAAyC,QAAO,KAAA;AAC7E,QAAO,MAAM;;AAGf,SAAS,eAAe,YAAoB,OAAgC,WAAoB;AAC9F,QAAO;EACL,IAAI,GAAG,WAAW,GAAG,MAAM;EAC3B,MAAM,MAAM;EACZ,UAAU;EACV,eAAe,MAAM,iBAAiB;EACtC,WAAW,MAAM,mBAAmB;EACpC,WAAW;EACX,QAAQ,MAAM,kBAAkB;EAChC,MAAM;GAAE,OAAO,MAAM,SAAS,SAAS;GAAG,QAAQ,MAAM,SAAS,UAAU;GAAG;EAC9E;EACA,QAAQ;EACT;;AAGH,SAAgB,qBAAqB,eAAqB,MAAoC;CAC5F,MAAM,EAAE,SAAS,8BAA8B;AAG/C,eAAc,IAAI,oBAAoB,OAAO,MAAM;EACjD,MAAM,OAAOA,uBAAmB;EAChC,MAAM,EAAE,QAAQ,UAAU,eAAe,KAAK;EAC9C,MAAM,WAAW,kBAAkB;AAEnC,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP;IACA;IACA,QAAQ,UAAU,KAAA;IAClB,WAAW,SAAS,SAAS,UAAU;IACxC;GACF,CAAC;GACF;AAGF,eAAc,KAAK,6BAA6B,OAAO,MAAM;EAE3D,MAAM,EAAE,WAAW,MADA,EAAE,IAAI,MAAM;EAG/B,MAAM,SAAS,qBAAqB,OAAO;AAE3C,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;GACV,CAAC;GACF;AAGF,eAAc,MAAM,oBAAoB,OAAO,MAAM;EAEnD,MAAM,EAAE,WAAW,MADA,EAAE,IAAI,MAAM;EAI/B,MAAM,SAAS,eADFA,uBACqB,EAAE,OAAO;AAE3C,MAAI,CAAC,OAAO,QACV,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,OAAO;GAAO,EAAE,IAAI;EAIxD,MAAM,WAAW,kBAAkB;AACnC,WAAS,SAAS;AAGlB,UAAQ,KAAK,uBAAuB,EAClC,YAAY,SAAS,QAAQ,CAAC,QAC/B,CAAC;AAEF,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,OAAO;IACP,YAAY,SAAS,QAAQ,CAAC;IAC/B;GACF,CAAC;GACF;AAGF,eAAc,KAAK,2BAA2B,OAAO,MAAM;EACzD,MAAM,WAAW,kBAAkB;AACnC,WAAS,SAAS;EAElB,MAAM,QAAQ,SAAS,UAAU;EACjC,MAAM,SAAS,SAAS,QAAQ;AAEhC,UAAQ,KAAK,wBAAwB;GACnC,YAAY,OAAO;GACnB,OAAO,SAAS,KAAA;GACjB,CAAC;AAEF,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,YAAY,OAAO;IACnB;IACD;GACF,CAAC;GACF;AAGF,eAAc,KAAK,iCAAiC,OAAO,MAAM;EAE/D,MAAM,EAAE,UAAU,MADC,EAAE,IAAI,MAAM;EAG/B,MAAM,SAAS,qBAAqB,MAAM;AAE1C,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;GACV,CAAC;GACF;AAGF,eAAc,IAAI,eAAe,OAAO,MAAM;AAC5C,MAAI,CAAC,QAAQ,gBAAgB,CAC3B,QAAO,0BAA0B,GAAG,cAAc;EAEpD,MAAM,iBAAiB,qBAAqB;EAC5C,MAAM,UAAU,MAAM,oBAAoB,EAAE,KAAI,OAAM;GACpD,IAAI,GAAG,EAAE,SAAS,GAAG,EAAE;GACvB,MAAM,EAAE;GACR,UAAU,EAAE;GACZ,eAAe,EAAE,iBAAiB;GAClC,WAAW,EAAE,aAAa;GAC1B,WAAW,EAAE,aAAa;GAC1B,QAAQ,EAAE,OAAO,SAAS,QAAQ,IAAI;GACtC,MAAM;IACJ,OAAO,EAAE,MAAM,SAAS;IACxB,QAAQ,EAAE,MAAM,UAAU;IAC3B;GACD,GAAI,eAAe,IAAI,EAAE,SAAS,GAAG,EAAE,QAAQ,aAAsB,GAAG,EAAE;GAC3E,EAAE;EAEH,MAAM,cAAc,IAAI,IAAI,OAAO,KAAI,MAAK,EAAE,GAAG,CAAC;AAClD,OAAK,MAAM,UAAU,eAAe,SAAS,CAC3C,MAAK,MAAM,SAAS,OAAO,QAAQ;GACjC,MAAM,cAAc,GAAG,OAAO,GAAG,GAAG,MAAM;AAC1C,OAAI,CAAC,YAAY,IAAI,YAAY,EAAE;AACjC,WAAO,KAAK,eAAe,OAAO,IAAI,OAAO,KAAK,CAAC;AACnD,gBAAY,IAAI,YAAY;;;AAMlC,SAAO,MAAM,GAAG,MAAM;AACpB,OAAI,EAAE,aAAa,EAAE,SAAU,QAAO,EAAE,SAAS,cAAc,EAAE,SAAS;AAC1E,UAAO,EAAE,KAAK,cAAc,EAAE,KAAK;IACnC;AAEF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,QAAQ;GAAE,CAAC;GAChD;AAGF,eAAc,IAAI,yBAAyB,MAAM;EAC/C,MAAM,MAAM,KAAK,QAAQ;EAEzB,MAAM,YADY,oCAAoC,IAC3B,CAAC,KAAK,MAAM;GACrC,MAAM,WAAW,2BAA2B,EAAE,IAAI,IAAI;GACtD,IAAI,aAAa;AACjB,OAAI;AACF,iBAAa,UAAU,eAAe,EAAE,KAAK,CAAC,KAAK;WAC7C;AACN,iBAAa;;AAEf,UAAO;IAAE,GAAG;IAAG;IAAY;IAC3B;AACF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,WAAW;GAAE,CAAC;GACnD;AAIF,eAAc,KAAK,kCAAkC,MAAM;EACzD,MAAM,KAAK,EAAE,IAAI,MAAM,KAAK;EAC5B,MAAM,MAAM,KAAK,QAAQ;EACzB,MAAM,WAAW,2BAA2B,IAAI,IAAI;AACpD,MAAI,CAAC,SACH,QAAO,EAAE,KACP;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,wCAAwC,MAAM;GAAE,EAC/E,IACD;EAEH,IAAI,aAAa;EACjB,IAAI;AACJ,MAAI;AACF,gBAAa,SAAS,eAAe,EAAE,KAAK,CAAC,KAAK;AAClD,OAAI,CAAC,WAAY,UAAS;WACnB,KAAK;AACZ,YAAS,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;;AAE3D,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,IAAI,SAAS;IACb;IACA,GAAI,SAAS,EAAE,QAAQ,GAAG,EAAE;IAC5B,cAAc,SAAS,gBAAgB;IACxC;GACF,CAAC;GACF;;;;;AAMF,eAAc,KACZ,2CACA,2BACA,OAAO,MAAM;EACX,MAAM,QAAQ,EAAE,IAAI,MAAM,KAAK;EAC/B,MAAM,MAAM,KAAK,QAAQ;EACzB,MAAM,WAAW,2BAA2B,OAAO,IAAI;AACvD,MAAI,CAAC,SACH,QAAO,EAAE,KACP;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,wCAAwC,SAAS;GAAE,EAClF,IACD;EAEH,MAAM,SAAS,qCAAqC,KAAK,SAAS,GAAG;AACrE,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IACP,IAAI,SAAS;IACb,QAAQ,UAAU;IAClB,QAAQ,SAAU,WAAsB;IACzC;GACF,CAAC;GAEL;AAGD,eAAc,IAAI,kBAAkB,OAAO,MAAM;EAC/C,MAAM,iBAAiB,qBAAqB;EAC5C,MAAM,YAAY,cAAc;EAChC,MAAM,kBAAkB,MAAM,oBAAoB;EAClD,MAAM,aAAa,IAAI,IAAI,gBAAgB,KAAI,MAAK,GAAG,EAAE,SAAS,GAAG,EAAE,KAAK,CAAC;EAE7E,MAAM,SAAS,UAAU,KAAI,OAAM;GACjC,IAAI,GAAG,EAAE,SAAS,GAAG,EAAE;GACvB,MAAM,EAAE;GACR,UAAU,EAAE;GACZ,eAAe,EAAE,iBAAiB;GAClC,WAAW,EAAE,aAAa;GAC1B,WAAW,EAAE,aAAa;GAC1B,QAAQ,EAAE,OAAO,SAAS,QAAQ,IAAI;GACtC,MAAM;IACJ,OAAO,EAAE,MAAM,SAAS;IACxB,QAAQ,EAAE,MAAM,UAAU;IAC3B;GACD,WAAW,WAAW,IAAI,GAAG,EAAE,SAAS,GAAG,EAAE,KAAK;GAClD,GAAI,eAAe,IAAI,EAAE,SAAS,GAAG,EAAE,QAAQ,aAAsB,GAAG,EAAE;GAC3E,EAAE;EAEH,MAAM,cAAc,IAAI,IAAI,OAAO,KAAI,MAAK,EAAE,GAAG,CAAC;AAClD,OAAK,MAAM,UAAU,eAAe,SAAS,CAC3C,MAAK,MAAM,SAAS,OAAO,QAAQ;GACjC,MAAM,cAAc,GAAG,OAAO,GAAG,GAAG,MAAM;AAC1C,OAAI,CAAC,YAAY,IAAI,YAAY,EAAE;AACjC,WAAO,KAAK,eAAe,OAAO,IAAI,OAAO,WAAW,IAAI,YAAY,CAAC,CAAC;AAC1E,gBAAY,IAAI,YAAY;;;AAMlC,SAAO,MAAM,GAAG,MAAM;AACpB,OAAI,EAAE,aAAa,EAAE,SAAU,QAAO,EAAE,SAAS,cAAc,EAAE,SAAS;AAC1E,UAAO,EAAE,KAAK,cAAc,EAAE,KAAK;IACnC;AAEF,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,QAAQ;GAAE,CAAC;GAChD;AAGF,eAAc,IAAI,uBAAuB,OAAO,MAAM;EACpD,MAAM,YAAY,iBAAiB;EACnC,MAAM,iBAAiB,qBAAqB;EAE5C,MAAM,OAAO,MAAM,QAAQ,IACzB,UAAU,IAAI,OAAO,aAAa;GAChC,MAAM,SAAS,eAAe,IAAI,SAAS;GAC3C,MAAM,cAAc,SAChB,8BAA8B,SAAS,SAAS,GAChD,KAAA;GACJ,MAAM,YAAY,MAAM,qBAAqB,SAAS;GACtD,MAAM,aAAa,UAAU,aAAa,UAAW,MAAM,qBAAqB,SAAS;AACzF,UAAO;IACL,IAAI;IACJ,MAAM,QAAQ,QAAQ,cAAc,WAAW,QAAQ;IACvD,UAAU,SAAU,cAAwB,cAAc,WAAW,YAAY;IACjF,eAAe,SAAS,QAAS,cAAc,WAAW,iBAAiB;IAC3E,gBAAgB,SAAS,QAAS,cAAc,WAAW,kBAAkB;IAC7E;IACA,iBAAiB,UAAU;IAC3B,UAAU,UAAU;IACpB,YAAY,UAAU;IACtB,GAAI,UAAU,YAAY,EAAE,WAAW,UAAU,WAAW,GAAG,EAAE;IACjE,SAAS,0BAA0B,SAAS;IAC5C,GAAI,cAAc,EAAE,aAAa,GAAG,EAAE;IACvC;IACD,CACH;EAED,MAAM,mBAAmB,IAAI,IAAI,UAAU;AAC3C,OAAK,MAAM,UAAU,eAAe,SAAS,CAC3C,KAAI,CAAC,iBAAiB,IAAI,OAAO,GAAG,EAAE;GACpC,MAAM,cAAc,8BAA8B,SAAS,OAAO,GAAG;AACrE,QAAK,KAAK;IACR,IAAI,OAAO;IACX,MAAM,OAAO;IACb,UAAU;IACV,eAAe;IACf,gBAAgB;IAChB,YAAY;IACZ,iBAAiB;IACjB,UAAU;IACV,YAAY;IACZ,SAAS,0BAA0B,OAAO,GAAG;IAC7C,GAAI,cAAc,EAAE,aAAa,GAAG,EAAE;IACvC,CAAC;;AAIN,SAAO,EAAE,KAAK;GAAE,IAAI;GAAM,SAAS,EAAE,WAAW,MAAM;GAAE,CAAC;GACzD;;;;;AAMF,eAAc,KACZ,6CACA,2BACA,OAAO,MAAM;EACX,MAAM,QAAQ,EAAE,IAAI,MAAM,aAAa,EAAE,MAAM;AAC/C,MAAI,CAAC,MACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,sBAAsB;GAAE,EAAE,IAAI;EAE7E,MAAM,aAAa,MAAM,aAAa;EAEtC,MAAM,SAAS,MAAM,IADA,oBACQ,CAAC,0BAA0B,WAAW;AACnE,MAAI,OACF,QAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IAAE,IAAI;IAAY,QAAQ;IAAQ,QAAQ;IAAuB;GAC3E,CAAC;EAEJ,MAAM,iBAAiB,6BAA6B,WAAW;AAC/D,MAAI,eACF,QAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IAAE,IAAI;IAAY,QAAQ;IAAgB,QAAQ;IAAwB;GACpF,CAAC;AAEJ,SAAO,EAAE,KAAK;GACZ,IAAI;GACJ,SAAS;IAAE,IAAI;IAAY,QAAQ;IAAM,QAAQ;IAAiB;GACnE,CAAC;GAEL;AAGD,eAAc,OAAO,kCAAkC,2BAA2B,OAAO,MAAM;EAC7F,MAAM,aAAa,EAAE,IAAI,MAAM,aAAa;AAC5C,MAAI,CAAC,WACH,QAAO,EAAE,KAAK;GAAE,IAAI;GAAO,OAAO,EAAE,SAAS,sBAAsB;GAAE,EAAE,IAAI;EAG7E,MAAM,qBAAqB,WAAW,aAAa;EACnD,MAAM,WAAW,IAAI,oBAAoB;AAEzC,MAAI;AACF,SAAM,SAAS,yBAAyB,mBAAmB;AAC3D,UAAO,EAAE,KAAK;IAAE,IAAI;IAAM,SAAS,EAAE,SAAS,oBAAoB;IAAE,CAAC;WAC9D,OAAO;GACd,MAAM,eAAe,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;AAC3E,UAAO,EAAE,KAAK;IAAE,IAAI;IAAO,OAAO,EAAE,SAAS,yBAAyB,gBAAgB;IAAE,EAAE,IAAI;;GAEhG"}

package/dist/src/gateway/hono/routes/update.js

@@ -5,61 +5,22 @@ import { loadConfig } from "../../../config/loader.js";
 import "../../../config/index.js";
 import { acquireUpdateLock } from "../../../infra/update-lock.js";
 import { normalizeUpdateChannel } from "../../../infra/update-channels.js";
-import { detectInstallKind, resolvePackageRoot } from "../../../infra/update-check.js";
 import { getUpdateAvailable, runGatewayUpdateCheck } from "../../../infra/update-startup.js";
-import { runAutoUpdateCommand, runAutoUpdateCommandWithProgress } from "../../../infra/update-runner.js";
+import { formatUpdateApiResult, runGatewayUpdateWithPostSteps } from "../../../infra/update-runner.js";
 import { streamSSE } from "hono/streaming";
 //#region src/gateway/hono/routes/update.ts
 init_package_version();
 init_logger();
 const log = createLogger("GatewayUpdate");
-function parseUpdateCliJson(stdout) {
-	const t = stdout.trim();
-	if (!t) return null;
-	try {
-		const parsed = JSON.parse(t);
-		return parsed && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : null;
-	} catch {
-		const lines = t.split("\n").filter(Boolean);
-		for (let i = lines.length - 1; i >= 0; i--) {
-			const line = lines[i].trim();
-			if (!line.startsWith("{")) continue;
-			try {
-				const parsed = JSON.parse(line);
-				if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) return parsed;
-			} catch {}
-		}
-	}
-	return null;
-}
-function isPreconditionFail(x) {
-	return !x.ok;
-}
-async function npmUpdatePreconditions(service) {
-	const channel = normalizeUpdateChannel(loadConfig(service.getHealth().configPath).update?.channel) ?? "stable";
-	const root = await resolvePackageRoot();
-	if (root) {
-		if (await detectInstallKind(root) === "git") return {
-			ok: false,
-			status: 400,
-			body: {
-				ok: false,
-				error: "git-checkout",
-				message: "Running from a git checkout. Use `git pull` in the repo, or install from npm to use one-click update."
-			}
-		};
-	}
+function mapUpdateFailure(result, channel) {
+	const apiResult = formatUpdateApiResult(result, channel);
 	return {
-		ok: true,
-		channel,
-		root
+		apiResult,
+		message: typeof apiResult.message === "string" ? apiResult.message : result.reason ?? "Update failed"
 	};
 }
 function registerUpdateRoutes(authenticated, deps) {
 	const { strictRateLimitMiddleware, service } = deps;
-	/**
-	* GET /api/update/status
-	*/
 	authenticated.get("/api/update/status", (c) => {
 		const update = getUpdateAvailable();
 		return c.json({
@@ -72,9 +33,6 @@ function registerUpdateRoutes(authenticated, deps) {
 			}
 		});
 	});
-	/**
-	* POST /api/update/check
-	*/
 	authenticated.post("/api/update/check", strictRateLimitMiddleware, async (c) => {
 		await runGatewayUpdateCheck({
 			config: loadConfig(service.getHealth().configPath),
@@ -94,55 +52,49 @@ function registerUpdateRoutes(authenticated, deps) {
 			}
 		});
 	});
-	/**
-	* POST /api/update/run — one-click npm install (OpenClaw-style). Rejects git checkouts.
-	*/
 	authenticated.post("/api/update/run", strictRateLimitMiddleware, async (c) => {
-		const pre = await npmUpdatePreconditions(service);
-		if (isPreconditionFail(pre)) return c.json(pre.body, pre.status);
+		const channel = normalizeUpdateChannel(loadConfig(service.getHealth().configPath).update?.channel) ?? "stable";
 		const lock = await acquireUpdateLock("gateway");
 		if (!lock) return c.json({
 			ok: false,
 			error: "busy",
 			message: "Another update is already in progress."
 		}, 409);
-		const { channel, root } = pre;
 		try {
-			log.info({ channel }, "Gateway: starting one-click npm update");
-			const result = await runAutoUpdateCommand({
+			log.info({ channel }, "Gateway: starting in-process update");
+			const result = await runGatewayUpdateWithPostSteps({
 				channel,
-				root
+				cwd: process.cwd(),
+				argv1: process.argv[1],
+				triggerInProcessRestart: () => service.triggerGatewayProcessRestart()
 			});
-			const parsed = parseUpdateCliJson(result.stdout ?? "");
-			if (result.ok && parsed?.status === "skipped" && parsed?.reason === "git-checkout") return c.json({
-				ok: false,
-				error: "git-checkout",
-				message: String(parsed.message ?? "Git checkout — use git pull instead.")
-			}, 400);
-			if (!result.ok) {
-				const installMessage = typeof parsed?.message === "string" ? parsed.message : typeof parsed?.stderrTail === "string" ? parsed.stderrTail : void 0;
+			const apiResult = formatUpdateApiResult(result, channel);
+			if (result.status === "error") {
+				const { message } = mapUpdateFailure(result, channel);
 				log.warn({
 					channel,
-					exitCode: result.exitCode,
 					reason: result.reason
-				}, "Gateway: one-click npm update failed");
+				}, "Gateway: update failed");
 				return c.json({
 					ok: false,
 					error: "update-failed",
-					message: installMessage || result.stderr?.trim() || result.reason || `Update exited with code ${result.exitCode ?? "unknown"}`,
-					result: parsed
+					message,
+					result: apiResult
 				});
 			}
-			log.info({ channel }, "Gateway: one-click npm update finished");
+			log.info({
+				channel,
+				mode: result.mode
+			}, "Gateway: update finished");
 			return c.json({
 				ok: true,
-				result: parsed
+				result: apiResult
 			});
 		} catch (err) {
 			log.error({
 				err,
 				channel
-			}, "Gateway: one-click npm update threw");
+			}, "Gateway: update threw");
 			return c.json({
 				ok: false,
 				error: "internal",
@@ -152,13 +104,8 @@ function registerUpdateRoutes(authenticated, deps) {
 			await lock.release();
 		}
 	});
-	/**
-	* POST /api/update/run/stream — SSE-streamed npm update with progress lines.
-	*/
 	authenticated.post("/api/update/run/stream", strictRateLimitMiddleware, async (c) => {
-		const pre = await npmUpdatePreconditions(service);
-		if (isPreconditionFail(pre)) return c.json(pre.body, pre.status);
-		const { channel, root } = pre;
+		const channel = normalizeUpdateChannel(loadConfig(service.getHealth().configPath).update?.channel) ?? "stable";
 		return streamSSE(c, async (stream) => {
 			const lock = await acquireUpdateLock("gateway");
 			if (!lock) {
@@ -173,42 +120,43 @@ function registerUpdateRoutes(authenticated, deps) {
 				return;
 			}
 			try {
-				log.info({ channel }, "Gateway: starting streamed one-click npm update");
-				const result = await runAutoUpdateCommandWithProgress({
+				log.info({ channel }, "Gateway: starting streamed in-process update");
+				const result = await runGatewayUpdateWithPostSteps({
 					channel,
-					root,
-					onProgress: async (line, source) => {
-						await stream.writeSSE({
-							event: "progress",
-							data: JSON.stringify({
-								line,
-								source
-							})
-						});
+					cwd: process.cwd(),
+					argv1: process.argv[1],
+					triggerInProcessRestart: () => service.triggerGatewayProcessRestart(),
+					progress: {
+						onStepStart: async (step) => {
+							await stream.writeSSE({
+								event: "progress",
+								data: JSON.stringify({
+									line: `[${step.index + 1}/${step.total}] ${step.name}: ${step.command}`,
+									source: "stdout"
+								})
+							});
+						},
+						onStepComplete: async (step) => {
+							if (step.stderrTail) await stream.writeSSE({
+								event: "progress",
+								data: JSON.stringify({
+									line: step.stderrTail,
+									source: "stderr"
+								})
+							});
+						}
 					}
 				});
-				const parsed = parseUpdateCliJson(result.stdout ?? "");
-				if (result.ok && parsed?.status === "skipped" && parsed?.reason === "git-checkout") {
-					await stream.writeSSE({
-						event: "result",
-						data: JSON.stringify({
-							ok: false,
-							error: "git-checkout",
-							message: String(parsed.message ?? "Git checkout — use git pull instead.")
-						})
-					});
-					return;
-				}
-				if (!result.ok) {
-					const installMessage = typeof parsed?.message === "string" ? parsed.message : typeof parsed?.stderrTail === "string" ? parsed.stderrTail : void 0;
+				const apiResult = formatUpdateApiResult(result, channel);
+				if (result.status === "error") {
+					const { message } = mapUpdateFailure(result, channel);
 					await stream.writeSSE({
 						event: "result",
 						data: JSON.stringify({
 							ok: false,
 							error: "update-failed",
-							message: installMessage || result.stderr?.trim() || result.reason || `Update exited with code ${result.exitCode ?? "unknown"}`,
-							result: parsed,
-							exitCode: result.exitCode,
+							message,
+							result: apiResult,
 							reason: result.reason
 						})
 					});
@@ -218,14 +166,14 @@ function registerUpdateRoutes(authenticated, deps) {
 					event: "result",
 					data: JSON.stringify({
 						ok: true,
-						result: parsed
+						result: apiResult
 					})
 				});
 			} catch (err) {
 				log.error({
 					err,
 					channel
-				}, "Gateway: streamed npm update threw");
+				}, "Gateway: streamed update threw");
 				await stream.writeSSE({
 					event: "result",
 					data: JSON.stringify({