daemora 1.0.0-alpha.0

package/dist/server/routes/memory.d.ts

@@ -0,0 +1,15 @@
+/**
+ * /api/memory — tagged memory CRUD + declarative memory read/write.
+ *
+ * Two memory surfaces:
+ *   /api/memory        — tagged FTS5 notebook (MemoryStore)
+ *   /api/brain/*       — declarative MEMORY.md + USER.md (DeclarativeMemoryStore)
+ */
+import type { Express } from "express";
+import type { DeclarativeMemoryStore } from "../../memory/DeclarativeMemoryStore.js";
+import type { ServerDeps } from "../index.js";
+export interface MemoryRouteDeps extends ServerDeps {
+    readonly declarativeMemory?: DeclarativeMemoryStore;
+}
+export declare function mountMemoryRoutes(app: Express, deps: MemoryRouteDeps): void;
+//# sourceMappingURL=memory.d.ts.map

package/dist/server/routes/memory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory.d.ts","sourceRoot":"","sources":["../../../src/server/routes/memory.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAqB,MAAM,SAAS,CAAC;AAG1D,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,wCAAwC,CAAC;AAErF,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAa9C,MAAM,WAAW,eAAgB,SAAQ,UAAU;IACjD,QAAQ,CAAC,iBAAiB,CAAC,EAAE,sBAAsB,CAAC;CACrD;AAED,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,GAAG,IAAI,CAiF3E"}

package/dist/server/routes/memory.js

@@ -0,0 +1,104 @@
+/**
+ * /api/memory — tagged memory CRUD + declarative memory read/write.
+ *
+ * Two memory surfaces:
+ *   /api/memory        — tagged FTS5 notebook (MemoryStore)
+ *   /api/brain/*       — declarative MEMORY.md + USER.md (DeclarativeMemoryStore)
+ */
+import { z } from "zod";
+import { ValidationError } from "../../util/errors.js";
+const saveSchema = z.object({
+    content: z.string().min(1).max(4000),
+    tags: z.array(z.string()).max(16).optional(),
+    source: z.string().max(64).optional(),
+});
+const searchQuery = z.object({
+    q: z.string().min(1).max(500),
+    limit: z.coerce.number().int().min(1).max(100).optional(),
+});
+export function mountMemoryRoutes(app, deps) {
+    // ── Tagged memory (FTS5 notebook) ────────────────────────────────────
+    app.get("/api/memory", (req, res) => {
+        const limit = Math.min(Number(req.query["limit"] ?? 50), 500);
+        const offset = Math.max(Number(req.query["offset"] ?? 0), 0);
+        res.json({ entries: deps.memory.listRecentEntries({ limit, offset }) });
+    });
+    app.get("/api/memory/search", (req, res) => {
+        const parsed = searchQuery.safeParse(req.query);
+        if (!parsed.success)
+            throw new ValidationError(parsed.error.message);
+        const opts = {};
+        if (parsed.data.limit !== undefined)
+            opts.limit = parsed.data.limit;
+        const hits = deps.memory.search(parsed.data.q, opts);
+        res.json({ hits });
+    });
+    app.get("/api/memory/:id", (req, res) => {
+        const id = req.params.id ?? "";
+        const entry = deps.memory.getById(id);
+        if (!entry)
+            return res.status(404).json({ error: "entry not found" });
+        res.json({ entry });
+    });
+    app.post("/api/memory", (req, res) => {
+        const parsed = saveSchema.safeParse(req.body);
+        if (!parsed.success)
+            throw new ValidationError(parsed.error.message);
+        const opts = {
+            content: parsed.data.content,
+            ...(parsed.data.tags ? { tags: parsed.data.tags } : {}),
+            ...(parsed.data.source ? { source: parsed.data.source } : {}),
+        };
+        const entry = deps.memory.save(opts);
+        res.status(201).json({ entry });
+    });
+    app.delete("/api/memory/:id", (req, res) => {
+        const id = req.params.id ?? "";
+        const ok = deps.memory.delete(id);
+        if (!ok)
+            return res.status(404).json({ error: "entry not found" });
+        res.status(204).end();
+    });
+    // ── Declarative memory (MEMORY.md + USER.md) ─────────────────────────
+    if (deps.declarativeMemory) {
+        const decl = deps.declarativeMemory;
+        app.get("/api/brain/:target", (req, res) => {
+            const target = req.params.target;
+            if (target !== "memory" && target !== "user") {
+                return res.status(400).json({ error: "target must be 'memory' or 'user'" });
+            }
+            res.json({
+                target,
+                entries: decl.listEntries(target),
+                systemPromptBlock: decl.formatForSystemPrompt(target),
+            });
+        });
+        app.post("/api/brain/:target", async (req, res) => {
+            const target = req.params.target;
+            if (target !== "memory" && target !== "user") {
+                return res.status(400).json({ error: "target must be 'memory' or 'user'" });
+            }
+            const action = (req.body?.action ?? "add");
+            const content = req.body?.content;
+            const oldText = req.body?.old_text;
+            let r;
+            if (action === "add") {
+                if (!content)
+                    return res.status(400).json({ error: "content required" });
+                r = await decl.add(target, content);
+            }
+            else if (action === "replace") {
+                if (!oldText || !content)
+                    return res.status(400).json({ error: "old_text + content required" });
+                r = await decl.replace(target, oldText, content);
+            }
+            else {
+                if (!oldText)
+                    return res.status(400).json({ error: "old_text required" });
+                r = await decl.remove(target, oldText);
+            }
+            res.json(r);
+        });
+    }
+}
+//# sourceMappingURL=memory.js.map

package/dist/server/routes/memory.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"memory.js","sourceRoot":"","sources":["../../../src/server/routes/memory.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAGH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAGvD,MAAM,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC;IACpC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC5C,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;CACtC,CAAC,CAAC;AAEH,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3B,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC;IAC7B,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;CAC1D,CAAC,CAAC;AAMH,MAAM,UAAU,iBAAiB,CAAC,GAAY,EAAE,IAAqB;IACnE,wEAAwE;IACxE,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QACrD,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,CAAC;QAC9D,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC7D,GAAG,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC,CAAC;IAC1E,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,oBAAoB,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QAC5D,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,MAAM,IAAI,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACrE,MAAM,IAAI,GAAuB,EAAE,CAAC;QACpC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS;YAAE,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;QACpE,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QACrD,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;IACrB,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,iBAAiB,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QACzD,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACtC,IAAI,CAAC,KAAK;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC;QACtE,GAAG,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IACtB,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QACtD,MAAM,MAAM,GAAG,UAAU,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,MAAM,IAAI,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QACrE,MAAM,IAAI,GAA0D;YAClE,OAAO,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO;YAC5B,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvD,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9D,CAAC;QACF,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrC,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QAC5D,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC;QAC/B,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAClC,IAAI,CAAC,EAAE;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC;QACnE,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;IACxB,CAAC,CAAC,CAAC;IAEH,wEAAwE;IACxE,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,iBAAiB,CAAC;QAEpC,GAAG,CAAC,GAAG,CAAC,oBAAoB,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;YAC5D,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC;YACjC,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC7C,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC,CAAC;YAC9E,CAAC;YACD,GAAG,CAAC,IAAI,CAAC;gBACP,MAAM;gBACN,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC;gBACjC,iBAAiB,EAAE,IAAI,CAAC,qBAAqB,CAAC,MAAM,CAAC;aACtD,CAAC,CAAC;QACL,CAAC,CAAC,CAAC;QAEH,GAAG,CAAC,IAAI,CAAC,oBAAoB,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;YACnE,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC;YACjC,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;gBAC7C,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC,CAAC;YAC9E,CAAC;YACD,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,IAAI,KAAK,CAAiC,CAAC;YAC3E,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,OAA6B,CAAC;YACxD,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,QAA8B,CAAC;YACzD,IAAI,CAAC,CAAC;YACN,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;gBACrB,IAAI,CAAC,OAAO;oBAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBACzE,CAAC,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACtC,CAAC;iBAAM,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBAChC,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO;oBAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC,CAAC;gBAChG,CAAC,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YACnD,CAAC;iBAAM,CAAC;gBACN,IAAI,CAAC,OAAO;oBAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC,CAAC;gBAC1E,CAAC,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACzC,CAAC;YACD,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC;AACH,CAAC"}

package/dist/server/routes/providers.d.ts

@@ -0,0 +1,15 @@
+/**
+ * /api/providers — unified provider + model + voice endpoint.
+ *
+ * One call returns everything: every provider, its configuration
+ * status, dynamically-discovered models, voice capabilities, and
+ * active selections. The UI renders directly from this — zero
+ * client-side key checking or cross-referencing.
+ *
+ * /api/providers/:id/models — force-refresh models for one provider.
+ * /api/models + /api/models/all — backwards-compat for existing UI.
+ */
+import type { Express } from "express";
+import type { ServerDeps } from "../index.js";
+export declare function mountProviderRoutes(app: Express, deps: ServerDeps): void;
+//# sourceMappingURL=providers.d.ts.map

package/dist/server/routes/providers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"providers.d.ts","sourceRoot":"","sources":["../../../src/server/routes/providers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAqB,MAAM,SAAS,CAAC;AAoB1D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAE9C,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,GAAG,IAAI,CAuJxE"}

package/dist/server/routes/providers.js

@@ -0,0 +1,209 @@
+/**
+ * /api/providers — unified provider + model + voice endpoint.
+ *
+ * One call returns everything: every provider, its configuration
+ * status, dynamically-discovered models, voice capabilities, and
+ * active selections. The UI renders directly from this — zero
+ * client-side key checking or cross-referencing.
+ *
+ * /api/providers/:id/models — force-refresh models for one provider.
+ * /api/models + /api/models/all — backwards-compat for existing UI.
+ */
+import { discoverModelsForProvider, discoverVoiceCatalog, invalidateModelCache, invalidateVoiceCache, } from "../../models/discovery.js";
+import { PROVIDER_CATALOG, PROVIDERS_BY_ID, defaultImageModelFor, defaultModelFor, defaultSttModelFor, defaultTtsModelFor, defaultTtsVoiceFor, defaultVideoModelFor, } from "../../models/providers.js";
+export function mountProviderRoutes(app, deps) {
+    // Invalidate caches when vault state changes — keys may have appeared
+    // or disappeared, so previous discovery results are no longer valid.
+    deps.cfg.vault.on("unlocked", () => { invalidateModelCache(); invalidateVoiceCache(); });
+    deps.cfg.vault.on("locked", () => { invalidateModelCache(); invalidateVoiceCache(); });
+    /**
+     * GET /api/providers — the one endpoint the UI needs for settings,
+     * setup wizard, model selector, and voice config.
+     */
+    app.get("/api/providers", async (_req, res) => {
+        const vaultUnlocked = deps.cfg.vault.isUnlocked();
+        // Discover models + voice catalog for all configured providers in parallel.
+        const providerResults = await Promise.all(PROVIDER_CATALOG.map(async (p) => {
+            const configured = isConfigured(p, deps);
+            const apiKey = getApiKey(p, deps);
+            const baseUrl = getBaseUrl(p, deps);
+            // LLM models: live if configured, static fallback on empty/failure.
+            let discovered = configured
+                ? await discoverModelsForProvider(p.id, apiKey, baseUrl)
+                : [];
+            if (discovered.length === 0 && p.models.length > 0) {
+                discovered = p.models.map((m) => ({ id: m.id, name: m.name }));
+            }
+            // Voice catalog: only fetch if provider has voice capabilities
+            // AND is configured. Otherwise fall back to the static seed so
+            // the UI can still render *something* for unconfigured providers.
+            const hasVoice = p.capabilities.includes("stt") || p.capabilities.includes("tts");
+            const voice = hasVoice && configured
+                ? await discoverVoiceCatalog(p.id, apiKey, baseUrl)
+                : { sttModels: [], ttsModels: [], ttsVoices: [] };
+            const sttModels = voice.sttModels.length > 0
+                ? voice.sttModels
+                : (p.sttModels ?? []).map((m) => ({ id: m.id, name: m.name }));
+            const ttsModels = voice.ttsModels.length > 0
+                ? voice.ttsModels
+                : (p.ttsModels ?? []).map((m) => ({ id: m.id, name: m.name }));
+            const ttsVoices = voice.ttsVoices.length > 0
+                ? voice.ttsVoices
+                : (p.ttsVoices ?? []).map((v) => ({ id: v.id, name: v.name }));
+            // Image / video — static catalogs only. No live discovery
+            // endpoint exists for image-gen catalogs across the providers
+            // we support, so the seed in providers.ts is the source of truth.
+            const imageModels = (p.imageModels ?? []).map((m) => ({ id: m.id, name: m.name }));
+            const videoModels = (p.videoModels ?? []).map((m) => ({ id: m.id, name: m.name }));
+            // Per-capability defaults — sourced from the catalog (first entry
+            // of each list, or the explicit `defaultXxx` field). The UI uses
+            // these to pre-fill the picker when a user first enables the
+            // provider, so we don't fall back to "voice is required" 400s.
+            const defaultLlmModel = defaultModelFor(p);
+            const defaultStt = defaultSttModelFor(p);
+            const defaultTts = defaultTtsModelFor(p);
+            const defaultVoice = defaultTtsVoiceFor(p);
+            const defaultImg = defaultImageModelFor(p);
+            const defaultVid = defaultVideoModelFor(p);
+            return {
+                id: p.id,
+                name: p.name,
+                capabilities: p.capabilities,
+                configured,
+                models: discovered.map((m) => ({
+                    id: `${p.id}:${m.id}`,
+                    name: m.name,
+                    ownedBy: m.ownedBy,
+                })),
+                ...(sttModels.length ? { sttModels } : {}),
+                ...(ttsModels.length ? { ttsModels } : {}),
+                ...(ttsVoices.length ? { ttsVoices } : {}),
+                ...(imageModels.length ? { imageModels } : {}),
+                ...(videoModels.length ? { videoModels } : {}),
+                defaults: {
+                    ...(defaultLlmModel ? { model: defaultLlmModel } : {}),
+                    ...(defaultStt ? { sttModel: defaultStt } : {}),
+                    ...(defaultTts ? { ttsModel: defaultTts } : {}),
+                    ...(defaultVoice ? { ttsVoice: defaultVoice } : {}),
+                    ...(defaultImg ? { imageModel: defaultImg } : {}),
+                    ...(defaultVid ? { videoModel: defaultVid } : {}),
+                },
+            };
+        }));
+        // Active user selections.
+        const defaultModel = deps.cfg.setting("DEFAULT_MODEL");
+        const sttProvider = deps.cfg.settings.getGeneric("DAEMORA_STT_PROVIDER");
+        const sttModel = deps.cfg.settings.getGeneric("STT_MODEL");
+        const ttsProvider = deps.cfg.settings.getGeneric("DAEMORA_TTS_PROVIDER");
+        const ttsModel = deps.cfg.settings.getGeneric("TTS_MODEL");
+        const ttsVoice = deps.cfg.settings.getGeneric("TTS_VOICE");
+        const imageGenModel = deps.cfg.setting("IMAGE_GEN_MODEL");
+        const videoGenModel = deps.cfg.setting("VIDEO_GEN_MODEL");
+        res.json({
+            providers: providerResults,
+            active: {
+                llm: defaultModel ? parseModelId(defaultModel) : null,
+                stt: sttProvider ? { provider: sttProvider, model: sttModel ?? null } : null,
+                tts: ttsProvider ? { provider: ttsProvider, model: ttsModel ?? null, voice: ttsVoice ?? null } : null,
+                image: imageGenModel ? parseModelId(imageGenModel) : null,
+                video: videoGenModel ? parseModelId(videoGenModel) : null,
+            },
+            vault: { exists: deps.cfg.vault.exists(), unlocked: vaultUnlocked },
+        });
+    });
+    /**
+     * GET /api/providers/:id/models — force-refresh for a single provider.
+     */
+    app.get("/api/providers/:id/models", async (req, res) => {
+        const id = req.params.id ?? "";
+        const def = PROVIDERS_BY_ID.get(id);
+        if (!def)
+            return res.status(404).json({ error: `Unknown provider: ${id}` });
+        const apiKey = getApiKey(def, deps);
+        const baseUrl = getBaseUrl(def, deps);
+        // Force cache invalidation for this provider.
+        const { invalidateProvider } = await import("../../models/discovery.js");
+        invalidateProvider(id);
+        const models = await discoverModelsForProvider(id, apiKey, baseUrl);
+        res.json({
+            provider: id,
+            configured: isConfigured(def, deps),
+            models: models.map((m) => ({ id: `${id}:${m.id}`, name: m.name, ownedBy: m.ownedBy })),
+        });
+    });
+    // ── Backwards-compat: /api/models for existing UI code ────────
+    app.get("/api/models", async (_req, res) => {
+        const available = await getAllConfiguredModels(deps);
+        res.json({
+            default: deps.cfg.setting("DEFAULT_MODEL"),
+            available,
+            models: available,
+        });
+    });
+    app.get("/api/models/all", async (_req, res) => {
+        const all = await getAllModels(deps);
+        res.json({ models: all });
+    });
+}
+// ── Helpers ─────────────────────────────────────────────────────
+function isConfigured(p, deps) {
+    if (!p.secretKey)
+        return true;
+    if (!deps.cfg.vault.isUnlocked())
+        return false;
+    return deps.cfg.vault.has(p.secretKey);
+}
+function getApiKey(p, deps) {
+    if (!p.secretKey || !deps.cfg.vault.isUnlocked())
+        return undefined;
+    return deps.cfg.vault.get(p.secretKey)?.reveal();
+}
+function getBaseUrl(p, deps) {
+    if (!p.baseUrlSetting)
+        return p.defaultBaseUrl;
+    const custom = deps.cfg.settings.getGeneric(p.baseUrlSetting);
+    return custom ?? p.defaultBaseUrl;
+}
+/** All models from configured providers only. Falls back to static catalog on discovery failure. */
+async function getAllConfiguredModels(deps) {
+    const results = [];
+    await Promise.all(PROVIDER_CATALOG.filter((p) => isConfigured(p, deps) && p.capabilities.includes("llm")).map(async (p) => {
+        let models = await discoverModelsForProvider(p.id, getApiKey(p, deps), getBaseUrl(p, deps));
+        if (models.length === 0 && p.models.length > 0) {
+            models = p.models.map((m) => ({ id: m.id, name: m.name }));
+        }
+        for (const m of models) {
+            results.push({ id: `${p.id}:${m.id}`, provider: p.id, name: m.name, model: m.id, available: true });
+        }
+    }));
+    return results;
+}
+/** All models across all providers, with availability flag. */
+async function getAllModels(deps) {
+    const results = [];
+    await Promise.all(PROVIDER_CATALOG.filter((p) => p.capabilities.includes("llm")).map(async (p) => {
+        const configured = isConfigured(p, deps);
+        let models = configured
+            ? await discoverModelsForProvider(p.id, getApiKey(p, deps), getBaseUrl(p, deps))
+            : [];
+        // Fall back to static catalog if discovery returned empty.
+        if (models.length === 0 && p.models.length > 0) {
+            models = staticFallback(p);
+        }
+        for (const m of models) {
+            results.push({ id: `${p.id}:${m.id}`, provider: p.id, name: m.name, model: m.id, available: configured });
+        }
+    }));
+    return results;
+}
+/** For unconfigured providers, show their static catalog so "All" tab isn't empty. */
+function staticFallback(p) {
+    return p.models.map((m) => ({ id: m.id, name: m.name }));
+}
+function parseModelId(id) {
+    const i = id.indexOf(":");
+    if (i <= 0)
+        return null;
+    return { provider: id.slice(0, i), model: id.slice(i + 1) };
+}
+//# sourceMappingURL=providers.js.map

package/dist/server/routes/providers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"providers.js","sourceRoot":"","sources":["../../../src/server/routes/providers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAIH,OAAO,EACL,yBAAyB,EACzB,oBAAoB,EACpB,oBAAoB,EACpB,oBAAoB,GAErB,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,gBAAgB,EAChB,eAAe,EACf,oBAAoB,EACpB,eAAe,EACf,kBAAkB,EAClB,kBAAkB,EAClB,kBAAkB,EAClB,oBAAoB,GAErB,MAAM,2BAA2B,CAAC;AAGnC,MAAM,UAAU,mBAAmB,CAAC,GAAY,EAAE,IAAgB;IAChE,sEAAsE;IACtE,qEAAqE;IACrE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,UAAU,EAAE,GAAG,EAAE,GAAG,oBAAoB,EAAE,CAAC,CAAC,oBAAoB,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IACzF,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,GAAG,oBAAoB,EAAE,CAAC,CAAC,oBAAoB,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;IAEvF;;;OAGG;IACH,GAAG,CAAC,GAAG,CAAC,gBAAgB,EAAE,KAAK,EAAE,IAAa,EAAE,GAAa,EAAE,EAAE;QAC/D,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE,CAAC;QAElD,4EAA4E;QAC5E,MAAM,eAAe,GAAG,MAAM,OAAO,CAAC,GAAG,CACvC,gBAAgB,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;YAC/B,MAAM,UAAU,GAAG,YAAY,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;YACzC,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;YAClC,MAAM,OAAO,GAAG,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;YAEpC,oEAAoE;YACpE,IAAI,UAAU,GAAG,UAAU;gBACzB,CAAC,CAAC,MAAM,yBAAyB,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC;gBACxD,CAAC,CAAC,EAAE,CAAC;YACP,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACnD,UAAU,GAAG,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YACjE,CAAC;YAED,+DAA+D;YAC/D,+DAA+D;YAC/D,kEAAkE;YAClE,MAAM,QAAQ,GAAG,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;YAClF,MAAM,KAAK,GAAG,QAAQ,IAAI,UAAU;gBAClC,CAAC,CAAC,MAAM,oBAAoB,CAAC,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC;gBACnD,CAAC,CAAC,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;YAEpD,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC;gBAC1C,CAAC,CAAC,KAAK,CAAC,SAAS;gBACjB,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YACjE,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC;gBAC1C,CAAC,CAAC,KAAK,CAAC,SAAS;gBACjB,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YACjE,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC;gBAC1C,CAAC,CAAC,KAAK,CAAC,SAAS;gBACjB,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YAEjE,0DAA0D;YAC1D,8DAA8D;YAC9D,kEAAkE;YAClE,MAAM,WAAW,GAAG,CAAC,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YACnF,MAAM,WAAW,GAAG,CAAC,CAAC,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YAEnF,kEAAkE;YAClE,iEAAiE;YACjE,6DAA6D;YAC7D,+DAA+D;YAC/D,MAAM,eAAe,GAAG,eAAe,CAAC,CAAC,CAAC,CAAC;YAC3C,MAAM,UAAU,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC;YACzC,MAAM,UAAU,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC;YACzC,MAAM,YAAY,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC;YAC3C,MAAM,UAAU,GAAG,oBAAoB,CAAC,CAAC,CAAC,CAAC;YAC3C,MAAM,UAAU,GAAG,oBAAoB,CAAC,CAAC,CAAC,CAAC;YAE3C,OAAO;gBACL,EAAE,EAAE,CAAC,CAAC,EAAE;gBACR,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,YAAY,EAAE,CAAC,CAAC,YAAY;gBAC5B,UAAU;gBACV,MAAM,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;oBAC7B,EAAE,EAAE,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE;oBACrB,IAAI,EAAE,CAAC,CAAC,IAAI;oBACZ,OAAO,EAAE,CAAC,CAAC,OAAO;iBACnB,CAAC,CAAC;gBACH,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1C,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1C,GAAG,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1C,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC9C,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC9C,QAAQ,EAAE;oBACR,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACtD,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC/C,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC/C,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACnD,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACjD,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBAClD;aACF,CAAC;QACJ,CAAC,CAAC,CACH,CAAC;QAEF,0BAA0B;QAC1B,MAAM,YAAY,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;QACvD,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,sBAAsB,CAAuB,CAAC;QAC/F,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAuB,CAAC;QACjF,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,sBAAsB,CAAuB,CAAC;QAC/F,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAuB,CAAC;QACjF,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAuB,CAAC;QACjF,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAC1D,MAAM,aAAa,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QAE1D,GAAG,CAAC,IAAI,CAAC;YACP,SAAS,EAAE,eAAe;YAC1B,MAAM,EAAE;gBACN,GAAG,EAAE,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI;gBACrD,GAAG,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI;gBAC5E,GAAG,EAAE,WAAW,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,IAAI,IAAI,EAAE,KAAK,EAAE,QAAQ,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI;gBACrG,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI;gBACzD,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,IAAI;aAC1D;YACD,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,aAAa,EAAE;SACpE,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH;;OAEG;IACH,GAAG,CAAC,GAAG,CAAC,2BAA2B,EAAE,KAAK,EAAE,GAAY,EAAE,GAAa,EAAE,EAAE;QACzE,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,CAAC;QAC/B,MAAM,GAAG,GAAG,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpC,IAAI,CAAC,GAAG;YAAE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,EAAE,EAAE,CAAC,CAAC;QAE5E,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACpC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAEtC,8CAA8C;QAC9C,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,2BAA2B,CAAC,CAAC;QACzE,kBAAkB,CAAC,EAAE,CAAC,CAAC;QAEvB,MAAM,MAAM,GAAG,MAAM,yBAAyB,CAAC,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;QACpE,GAAG,CAAC,IAAI,CAAC;YACP,QAAQ,EAAE,EAAE;YACZ,UAAU,EAAE,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC;YACnC,MAAM,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;SACvF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,iEAAiE;IAEjE,GAAG,CAAC,GAAG,CAAC,aAAa,EAAE,KAAK,EAAE,IAAa,EAAE,GAAa,EAAE,EAAE;QAC5D,MAAM,SAAS,GAAG,MAAM,sBAAsB,CAAC,IAAI,CAAC,CAAC;QACrD,GAAG,CAAC,IAAI,CAAC;YACP,OAAO,EAAE,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,eAAe,CAAC;YAC1C,SAAS;YACT,MAAM,EAAE,SAAS;SAClB,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,GAAG,CAAC,iBAAiB,EAAE,KAAK,EAAE,IAAa,EAAE,GAAa,EAAE,EAAE;QAChE,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;QACrC,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,mEAAmE;AAEnE,SAAS,YAAY,CAAC,CAAc,EAAE,IAAgB;IACpD,IAAI,CAAC,CAAC,CAAC,SAAS;QAAE,OAAO,IAAI,CAAC;IAC9B,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE;QAAE,OAAO,KAAK,CAAC;IAC/C,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,SAAS,CAAC,CAAc,EAAE,IAAgB;IACjD,IAAI,CAAC,CAAC,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,UAAU,EAAE;QAAE,OAAO,SAAS,CAAC;IACnE,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;AACnD,CAAC;AAED,SAAS,UAAU,CAAC,CAAc,EAAE,IAAgB;IAClD,IAAI,CAAC,CAAC,CAAC,cAAc;QAAE,OAAO,CAAC,CAAC,cAAc,CAAC;IAC/C,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,cAAc,CAAuB,CAAC;IACpF,OAAO,MAAM,IAAI,CAAC,CAAC,cAAc,CAAC;AACpC,CAAC;AAED,oGAAoG;AACpG,KAAK,UAAU,sBAAsB,CAAC,IAAgB;IACpD,MAAM,OAAO,GAAqB,EAAE,CAAC;IACrC,MAAM,OAAO,CAAC,GAAG,CACf,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;QACtG,IAAI,MAAM,GAAG,MAAM,yBAAyB,CAAC,CAAC,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;QAC5F,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/C,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QAC7D,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtG,CAAC;IACH,CAAC,CAAC,CACH,CAAC;IACF,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,+DAA+D;AAC/D,KAAK,UAAU,YAAY,CAAC,IAAgB;IAC1C,MAAM,OAAO,GAAqB,EAAE,CAAC;IACrC,MAAM,OAAO,CAAC,GAAG,CACf,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;QAC7E,MAAM,UAAU,GAAG,YAAY,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;QACzC,IAAI,MAAM,GAAG,UAAU;YACrB,CAAC,CAAC,MAAM,yBAAyB,CAAC,CAAC,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,UAAU,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;YAChF,CAAC,CAAC,EAAE,CAAC;QACP,2DAA2D;QAC3D,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC/C,MAAM,GAAG,cAAc,CAAC,CAAC,CAAC,CAAC;QAC7B,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;YACvB,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,CAAC,CAAC;QAC5G,CAAC;IACH,CAAC,CAAC,CACH,CAAC;IACF,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,sFAAsF;AACtF,SAAS,cAAc,CAAC,CAAc;IACpC,OAAO,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,SAAS,YAAY,CAAC,EAAU;IAC9B,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1B,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACxB,OAAO,EAAE,QAAQ,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;AAC9D,CAAC"}

package/dist/server/routes/security.d.ts

@@ -0,0 +1,15 @@
+/**
+ * /api/security/fs — read + edit the FilesystemGuard config from the UI.
+ *
+ *   GET  /api/security/fs   → current mode + allow + deny + effective
+ *                             (post-resolution) paths.
+ *   PUT  /api/security/fs   → write to settings, hot-update the live guard.
+ *
+ * The guard is mutated in place via `guard.update()` so all tools holding
+ * a reference pick up the new policy on the very next call. Settings are
+ * persisted via `cfg.settings.setGeneric` so changes survive restarts.
+ */
+import type { Express } from "express";
+import type { ServerDeps } from "../index.js";
+export declare function mountSecurityRoutes(app: Express, deps: ServerDeps): void;
+//# sourceMappingURL=security.d.ts.map

package/dist/server/routes/security.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.d.ts","sourceRoot":"","sources":["../../../src/server/routes/security.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAqB,MAAM,SAAS,CAAC;AAM1D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AA4B9C,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,GAAG,IAAI,CAgFxE"}

package/dist/server/routes/security.js

@@ -0,0 +1,117 @@
+/**
+ * /api/security/fs — read + edit the FilesystemGuard config from the UI.
+ *
+ *   GET  /api/security/fs   → current mode + allow + deny + effective
+ *                             (post-resolution) paths.
+ *   PUT  /api/security/fs   → write to settings, hot-update the live guard.
+ *
+ * The guard is mutated in place via `guard.update()` so all tools holding
+ * a reference pick up the new policy on the very next call. Settings are
+ * persisted via `cfg.settings.setGeneric` so changes survive restarts.
+ */
+import { z } from "zod";
+import { ValidationError } from "../../util/errors.js";
+import { createLogger } from "../../util/logger.js";
+const log = createLogger("security.routes");
+const MODES = ["off", "moderate", "strict", "sandbox"];
+const fsBody = z.object({
+    mode: z.enum(["off", "moderate", "strict", "sandbox"]).optional(),
+    allow: z.array(z.string().min(1).max(4096)).max(64).optional(),
+    deny: z.array(z.string().min(1).max(4096)).max(64).optional(),
+});
+function readListSetting(value) {
+    if (Array.isArray(value))
+        return value.filter((x) => typeof x === "string");
+    if (typeof value === "string" && value.length > 0) {
+        return value.split(",").map((s) => s.trim()).filter(Boolean);
+    }
+    return [];
+}
+function validatePath(p) {
+    if (!p)
+        throw new ValidationError("Path cannot be empty");
+    if (!p.startsWith("/") && !/^[A-Za-z]:[\\\/]/.test(p)) {
+        throw new ValidationError(`Path must be absolute: ${p}`);
+    }
+    if (p.includes("\0"))
+        throw new ValidationError(`Path contains NUL: ${p}`);
+}
+export function mountSecurityRoutes(app, deps) {
+    /**
+     * Current FilesystemGuard config + the resolved (canonical) view of
+     * the allow / deny lists the live guard is enforcing right now.
+     */
+    app.get("/api/security/fs", (_req, res) => {
+        const liveDescribe = deps.guard.describe();
+        const allow = readListSetting(deps.cfg.settings.getGeneric("DAEMORA_FS_ALLOW"));
+        const deny = readListSetting(deps.cfg.settings.getGeneric("DAEMORA_FS_DENY"));
+        res.json({
+            mode: liveDescribe.mode,
+            allow, // raw user-entered values (what to display in the editor)
+            deny,
+            effective: {
+                // What the live guard is actually enforcing — handy for debugging
+                // when a user wonders why their `~` got expanded or a path got
+                // canonicalised through a symlink.
+                mode: liveDescribe.mode,
+                allow: liveDescribe.allow,
+                deny: liveDescribe.deny,
+                dataDir: liveDescribe.dataDir ?? null,
+            },
+            modes: MODES,
+            doc: {
+                off: "No checks. Escape hatch — only for trusted environments.",
+                moderate: "Block sensitive dirs (.ssh, .aws, /etc, ...) + Daemora's own DB. Default.",
+                strict: "Only $HOME and the configured allow-list paths are reachable.",
+                sandbox: "Only the configured allow-list paths are reachable. $HOME is NOT auto-included — use this to confine the agent to a specific project directory.",
+            },
+        });
+    });
+    /**
+     * Update the FilesystemGuard. Body:
+     *   { mode?: "off"|"moderate"|"strict"|"sandbox",
+     *     allow?: string[],
+     *     deny?: string[] }
+     *
+     * Persists each provided field to settings. Then mutates the live guard
+     * via `update()` so all FS-touching tools immediately see the new policy.
+     */
+    app.put("/api/security/fs", (req, res) => {
+        const parsed = fsBody.safeParse(req.body ?? {});
+        if (!parsed.success)
+            throw new ValidationError(parsed.error.message);
+        if (parsed.data.allow)
+            parsed.data.allow.forEach(validatePath);
+        if (parsed.data.deny)
+            parsed.data.deny.forEach(validatePath);
+        if (parsed.data.mode !== undefined) {
+            deps.cfg.settings.setGeneric("DAEMORA_FS_GUARD", parsed.data.mode);
+        }
+        if (parsed.data.allow !== undefined) {
+            deps.cfg.settings.setGeneric("DAEMORA_FS_ALLOW", parsed.data.allow);
+        }
+        if (parsed.data.deny !== undefined) {
+            deps.cfg.settings.setGeneric("DAEMORA_FS_DENY", parsed.data.deny);
+        }
+        // Read back the merged state so we update the guard with the FULL
+        // current config — `update()` replaces, doesn't merge per-field.
+        const mode = deps.cfg.settings.getGeneric("DAEMORA_FS_GUARD") ?? "moderate";
+        const allow = readListSetting(deps.cfg.settings.getGeneric("DAEMORA_FS_ALLOW"));
+        const deny = readListSetting(deps.cfg.settings.getGeneric("DAEMORA_FS_DENY"));
+        deps.guard.update({ mode, extraAllow: allow, extraDeny: deny });
+        log.info({ mode, allow, deny }, "filesystem guard reconfigured");
+        const live = deps.guard.describe();
+        res.json({
+            mode,
+            allow,
+            deny,
+            effective: {
+                mode: live.mode,
+                allow: live.allow,
+                deny: live.deny,
+                dataDir: live.dataDir ?? null,
+            },
+        });
+    });
+}
+//# sourceMappingURL=security.js.map

package/dist/server/routes/security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.js","sourceRoot":"","sources":["../../../src/server/routes/security.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAGH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AACvD,OAAO,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAGpD,MAAM,GAAG,GAAG,YAAY,CAAC,iBAAiB,CAAC,CAAC;AAE5C,MAAM,KAAK,GAA2B,CAAC,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;AAE/E,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IACtB,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,UAAU,EAAE,QAAQ,EAAE,SAAS,CAAoC,CAAC,CAAC,QAAQ,EAAE;IACpG,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC9D,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC9D,CAAC,CAAC;AAEH,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;IACzF,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClD,OAAO,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAS,YAAY,CAAC,CAAS;IAC7B,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,eAAe,CAAC,sBAAsB,CAAC,CAAC;IAC1D,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACtD,MAAM,IAAI,eAAe,CAAC,0BAA0B,CAAC,EAAE,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,eAAe,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC;AAC7E,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,GAAY,EAAE,IAAgB;IAChE;;;OAGG;IACH,GAAG,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC,IAAa,EAAE,GAAa,EAAE,EAAE;QAC3D,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;QAC3C,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC,CAAC;QAChF,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,CAAC;QAC9E,GAAG,CAAC,IAAI,CAAC;YACP,IAAI,EAAE,YAAY,CAAC,IAAI;YACvB,KAAK,EAAqB,0DAA0D;YACpF,IAAI;YACJ,SAAS,EAAE;gBACT,kEAAkE;gBAClE,+DAA+D;gBAC/D,mCAAmC;gBACnC,IAAI,EAAE,YAAY,CAAC,IAAI;gBACvB,KAAK,EAAE,YAAY,CAAC,KAAK;gBACzB,IAAI,EAAE,YAAY,CAAC,IAAI;gBACvB,OAAO,EAAE,YAAY,CAAC,OAAO,IAAI,IAAI;aACtC;YACD,KAAK,EAAE,KAAK;YACZ,GAAG,EAAE;gBACH,GAAG,EAAE,0DAA0D;gBAC/D,QAAQ,EAAE,2EAA2E;gBACrF,MAAM,EAAE,+DAA+D;gBACvE,OAAO,EAAE,iJAAiJ;aAC3J;SACF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH;;;;;;;;OAQG;IACH,GAAG,CAAC,GAAG,CAAC,kBAAkB,EAAE,CAAC,GAAY,EAAE,GAAa,EAAE,EAAE;QAC1D,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;QAChD,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,MAAM,IAAI,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAErE,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK;YAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAC/D,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI;YAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAE7D,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACnC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,kBAAkB,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrE,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YACpC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,kBAAkB,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACtE,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACnC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,iBAAiB,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpE,CAAC;QAED,kEAAkE;QAClE,iEAAiE;QACjE,MAAM,IAAI,GAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,kBAAkB,CAA6B,IAAI,UAAU,CAAC;QACzG,MAAM,KAAK,GAAG,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,kBAAkB,CAAC,CAAC,CAAC;QAChF,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,CAAC;QAC9E,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAEhE,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,+BAA+B,CAAC,CAAC;QAEjE,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;QACnC,GAAG,CAAC,IAAI,CAAC;YACP,IAAI;YACJ,KAAK;YACL,IAAI;YACJ,SAAS,EAAE;gBACT,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,KAAK,EAAE,IAAI,CAAC,KAAK;gBACjB,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,IAAI;aAC9B;SACF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/server/routes/sessions.d.ts

@@ -0,0 +1,12 @@
+/**
+ * /api/sessions — chat session CRUD.
+ *
+ * - GET    /api/sessions          list, most-recently-updated first
+ * - GET    /api/sessions/:id      full history (oldest-first)
+ * - PATCH  /api/sessions/:id      rename
+ * - DELETE /api/sessions/:id      hard delete (cascades messages)
+ */
+import type { Express } from "express";
+import type { ServerDeps } from "../index.js";
+export declare function mountSessionRoutes(app: Express, deps: ServerDeps): void;
+//# sourceMappingURL=sessions.d.ts.map

package/dist/server/routes/sessions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sessions.d.ts","sourceRoot":"","sources":["../../../src/server/routes/sessions.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAMH,OAAO,KAAK,EAAE,OAAO,EAAqB,MAAM,SAAS,CAAC;AAK1D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAkD9C,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,GAAG,IAAI,CA6GvE"}