@nextclaw/server 0.10.55 → 0.10.57

package/dist/index.d.ts

@@ -6,6 +6,29 @@ import { NcpHttpAgentStreamProvider } from '@nextclaw/ncp-http-agent-server';
 import { IncomingMessage } from 'node:http';
 import { Hono } from 'hono';
 
+type UiNcpStoredAttachmentRecord = {
+    id: string;
+    uri: string;
+    storageKey: string;
+    originalName: string;
+    storedName: string;
+    mimeType: string;
+    sizeBytes: number;
+    createdAt: string;
+    sha256: string;
+};
+type UiNcpAttachmentView = {
+    id: string;
+    name: string;
+    mimeType: string;
+    sizeBytes: number;
+    attachmentUri: string;
+    url: string;
+};
+type UiNcpAttachmentUploadView = {
+    attachments: UiNcpAttachmentView[];
+};
+
 type MarketplaceItemType = "plugin" | "skill" | "mcp";
 type MarketplaceSort = "relevance" | "updated";
 type MarketplacePluginInstallKind = "npm";
@@ -327,6 +350,7 @@ type UiRouterOptions = {
     configPath: string;
     productVersion?: string;
     publish: (event: UiServerEvent) => void;
+    applyLiveConfigReload?: () => Promise<void>;
     marketplace?: MarketplaceApiConfig;
     cronService?: InstanceType<typeof NextclawCore.CronService>;
     chatRuntime?: UiChatRuntime;
@@ -942,6 +966,16 @@ type UiNcpAgent = {
     streamProvider?: NcpHttpAgentStreamProvider;
     sessionApi?: NcpSessionApi;
     listSessionTypes?: (params?: SessionTypeDescribeParams) => Promise<ChatSessionTypesView> | ChatSessionTypesView;
+    attachmentApi?: {
+        saveAttachment: (input: {
+            fileName: string;
+            mimeType?: string | null;
+            bytes: Uint8Array;
+            createdAt?: Date;
+        }) => Promise<UiNcpStoredAttachmentRecord>;
+        statAttachment: (uri: string) => Promise<UiNcpStoredAttachmentRecord | null> | UiNcpStoredAttachmentRecord | null;
+        resolveContentPath: (uri: string) => string | null;
+    };
     basePath?: string;
 };
 type ConfigView = {
@@ -1159,7 +1193,10 @@ type UiServerHandle = {
     publish: (event: UiServerEvent) => void;
 };
 
-declare function startUiServer(options: UiServerOptions): UiServerHandle;
+type UiServerStartOptions = UiServerOptions & {
+    applyLiveConfigReload?: () => Promise<void>;
+};
+declare function startUiServer(options: UiServerStartOptions): UiServerHandle;
 
 declare function createUiRouter(options: UiRouterOptions): Hono;
 
@@ -1217,4 +1254,4 @@ declare function getUiBridgeSecretPath(): string;
 declare function readUiBridgeSecret(): string | null;
 declare function ensureUiBridgeSecret(): string;
 
-export { type AgentBindingView, type AgentProfileView, type ApiError, type ApiResponse, type AppMetaView, type AuthEnabledUpdateRequest, type AuthLoginRequest, type AuthPasswordUpdateRequest, type AuthSetupRequest, type AuthStatusView, type BindingPeerView, type BochaFreshnessValue, type ChannelAuthPollRequest, type ChannelAuthPollResult, type ChannelAuthStartRequest, type ChannelAuthStartResult, type ChannelSpecView, type ChatCapabilitiesView, type ChatCommandOptionView, type ChatCommandView, type ChatCommandsView, type ChatRunListView, type ChatRunState, type ChatRunView, type ChatSessionTypeCtaView, type ChatSessionTypeOptionView, type ChatSessionTypesView, type ChatTurnRequest, type ChatTurnResult, type ChatTurnStopRequest, type ChatTurnStopResult, type ChatTurnStreamEvent, type ChatTurnView, type ConfigActionExecuteRequest, type ConfigActionExecuteResult, type ConfigActionManifest, type ConfigActionType, type ConfigMetaView, type ConfigSchemaResponse, type ConfigUiHint, type ConfigUiHints, type ConfigView, type CronActionResult, type CronEnableRequest, type CronJobStateView, type CronJobView, type CronListView, type CronPayloadView, type CronRunRequest, type CronScheduleView, DEFAULT_SESSION_TYPE, type MarketplaceApiConfig, type MarketplaceInstallKind, type MarketplaceInstallSkillParams, type MarketplaceInstallSpec, type MarketplaceInstalledRecord, type MarketplaceInstalledView, type MarketplaceInstaller, type MarketplaceItemSummary, type MarketplaceItemType, type MarketplaceItemView, type MarketplaceListView, type MarketplaceLocalizedTextMap, type MarketplaceMcpContentView, type MarketplaceMcpDoctorResult, type MarketplaceMcpInstallKind, type MarketplaceMcpInstallRequest, type MarketplaceMcpInstallResult, type MarketplaceMcpInstallSpec, type MarketplaceMcpManageAction, type MarketplaceMcpManageRequest, type MarketplaceMcpManageResult, type MarketplaceMcpTemplateInput, type MarketplacePluginContentView, type MarketplacePluginInstallKind, type MarketplacePluginInstallRequest, type MarketplacePluginInstallResult, type MarketplacePluginManageAction, type MarketplacePluginManageRequest, type MarketplacePluginManageResult, type MarketplaceRecommendationView, type MarketplaceSkillContentView, type MarketplaceSkillInstallKind, type MarketplaceSkillInstallRequest, type MarketplaceSkillInstallResult, type MarketplaceSkillManageAction, type MarketplaceSkillManageRequest, type MarketplaceSkillManageResult, type MarketplaceSort, type ProviderAuthImportResult, type ProviderAuthPollRequest, type ProviderAuthPollResult, type ProviderAuthStartRequest, type ProviderAuthStartResult, type ProviderConfigUpdate, type ProviderConfigView, type ProviderConnectionTestRequest, type ProviderConnectionTestResult, type ProviderCreateRequest, type ProviderCreateResult, type ProviderDeleteResult, type ProviderSpecView, type RemoteAccessView, type RemoteAccountView, type RemoteBrowserAuthPollRequest, type RemoteBrowserAuthPollResult, type RemoteBrowserAuthStartRequest, type RemoteBrowserAuthStartResult, type RemoteDoctorCheckView, type RemoteDoctorView, type RemoteLoginRequest, type RemoteRuntimeView, type RemoteServiceAction, type RemoteServiceActionResult, type RemoteServiceView, type RemoteSettingsUpdateRequest, type RemoteSettingsView, type RuntimeConfigUpdate, type SearchConfigUpdate, type SearchConfigView, type SearchProviderConfigView, type SearchProviderName, type SearchProviderSpecView, type SecretProviderEnvView, type SecretProviderExecView, type SecretProviderFileView, type SecretProviderView, type SecretRefView, type SecretSourceView, type SecretsConfigUpdate, type SecretsView, type SessionConfigView, type SessionEntryView, type SessionEventView, type SessionHistoryView, type SessionMessageView, type SessionPatchUpdate, SessionPatchValidationError, type SessionTypeDescribeParams, type SessionsListView, type UiChatRuntime, type UiNcpAgent, type UiNcpSessionListView, type UiNcpSessionMessagesView, type UiRemoteAccessHost, type UiServerEvent, type UiServerHandle, type UiServerOptions, buildConfigMeta, buildConfigSchemaView, buildConfigView, createCustomProvider, createUiRouter, deleteCustomProvider, deleteSession, ensureUiBridgeSecret, executeConfigAction, getSessionHistory, getUiBridgeSecretPath, listSessions, loadConfigOrDefault, patchSession, readUiBridgeSecret, startUiServer, testProviderConnection, updateChannel, updateModel, updateProvider, updateRuntime, updateSearch, updateSecrets };
+export { type AgentBindingView, type AgentProfileView, type ApiError, type ApiResponse, type AppMetaView, type AuthEnabledUpdateRequest, type AuthLoginRequest, type AuthPasswordUpdateRequest, type AuthSetupRequest, type AuthStatusView, type BindingPeerView, type BochaFreshnessValue, type ChannelAuthPollRequest, type ChannelAuthPollResult, type ChannelAuthStartRequest, type ChannelAuthStartResult, type ChannelSpecView, type ChatCapabilitiesView, type ChatCommandOptionView, type ChatCommandView, type ChatCommandsView, type ChatRunListView, type ChatRunState, type ChatRunView, type ChatSessionTypeCtaView, type ChatSessionTypeOptionView, type ChatSessionTypesView, type ChatTurnRequest, type ChatTurnResult, type ChatTurnStopRequest, type ChatTurnStopResult, type ChatTurnStreamEvent, type ChatTurnView, type ConfigActionExecuteRequest, type ConfigActionExecuteResult, type ConfigActionManifest, type ConfigActionType, type ConfigMetaView, type ConfigSchemaResponse, type ConfigUiHint, type ConfigUiHints, type ConfigView, type CronActionResult, type CronEnableRequest, type CronJobStateView, type CronJobView, type CronListView, type CronPayloadView, type CronRunRequest, type CronScheduleView, DEFAULT_SESSION_TYPE, type MarketplaceApiConfig, type MarketplaceInstallKind, type MarketplaceInstallSkillParams, type MarketplaceInstallSpec, type MarketplaceInstalledRecord, type MarketplaceInstalledView, type MarketplaceInstaller, type MarketplaceItemSummary, type MarketplaceItemType, type MarketplaceItemView, type MarketplaceListView, type MarketplaceLocalizedTextMap, type MarketplaceMcpContentView, type MarketplaceMcpDoctorResult, type MarketplaceMcpInstallKind, type MarketplaceMcpInstallRequest, type MarketplaceMcpInstallResult, type MarketplaceMcpInstallSpec, type MarketplaceMcpManageAction, type MarketplaceMcpManageRequest, type MarketplaceMcpManageResult, type MarketplaceMcpTemplateInput, type MarketplacePluginContentView, type MarketplacePluginInstallKind, type MarketplacePluginInstallRequest, type MarketplacePluginInstallResult, type MarketplacePluginManageAction, type MarketplacePluginManageRequest, type MarketplacePluginManageResult, type MarketplaceRecommendationView, type MarketplaceSkillContentView, type MarketplaceSkillInstallKind, type MarketplaceSkillInstallRequest, type MarketplaceSkillInstallResult, type MarketplaceSkillManageAction, type MarketplaceSkillManageRequest, type MarketplaceSkillManageResult, type MarketplaceSort, type ProviderAuthImportResult, type ProviderAuthPollRequest, type ProviderAuthPollResult, type ProviderAuthStartRequest, type ProviderAuthStartResult, type ProviderConfigUpdate, type ProviderConfigView, type ProviderConnectionTestRequest, type ProviderConnectionTestResult, type ProviderCreateRequest, type ProviderCreateResult, type ProviderDeleteResult, type ProviderSpecView, type RemoteAccessView, type RemoteAccountView, type RemoteBrowserAuthPollRequest, type RemoteBrowserAuthPollResult, type RemoteBrowserAuthStartRequest, type RemoteBrowserAuthStartResult, type RemoteDoctorCheckView, type RemoteDoctorView, type RemoteLoginRequest, type RemoteRuntimeView, type RemoteServiceAction, type RemoteServiceActionResult, type RemoteServiceView, type RemoteSettingsUpdateRequest, type RemoteSettingsView, type RuntimeConfigUpdate, type SearchConfigUpdate, type SearchConfigView, type SearchProviderConfigView, type SearchProviderName, type SearchProviderSpecView, type SecretProviderEnvView, type SecretProviderExecView, type SecretProviderFileView, type SecretProviderView, type SecretRefView, type SecretSourceView, type SecretsConfigUpdate, type SecretsView, type SessionConfigView, type SessionEntryView, type SessionEventView, type SessionHistoryView, type SessionMessageView, type SessionPatchUpdate, SessionPatchValidationError, type SessionTypeDescribeParams, type SessionsListView, type UiChatRuntime, type UiNcpAgent, type UiNcpAttachmentUploadView, type UiNcpAttachmentView, type UiNcpSessionListView, type UiNcpSessionMessagesView, type UiNcpStoredAttachmentRecord, type UiRemoteAccessHost, type UiServerEvent, type UiServerHandle, type UiServerOptions, buildConfigMeta, buildConfigSchemaView, buildConfigView, createCustomProvider, createUiRouter, deleteCustomProvider, deleteSession, ensureUiBridgeSecret, executeConfigAction, getSessionHistory, getUiBridgeSecretPath, listSessions, loadConfigOrDefault, patchSession, readUiBridgeSecret, startUiServer, testProviderConnection, updateChannel, updateModel, updateProvider, updateRuntime, updateSearch, updateSecrets };

package/dist/index.js

@@ -4,7 +4,7 @@ import { compress } from "hono/compress";
 import { serve } from "@hono/node-server";
 import { WebSocketServer, WebSocket } from "ws";
 import { existsSync as existsSync2, readFileSync as readFileSync2 } from "fs";
-import { readFile as readFile2, stat } from "fs/promises";
+import { readFile as readFile3, stat } from "fs/promises";
 import { join as join2 } from "path";
 
 // src/ui/auth.service.ts
@@ -836,6 +836,7 @@ var PREFERRED_PROVIDER_ORDER = [
   "anthropic",
   "gemini",
   "openrouter",
+  "dashscope-coding-plan",
   "dashscope",
   "deepseek",
   "minimax",
@@ -3240,6 +3241,12 @@ var ConfigRoutesController = class {
       pluginUiMetadata: this.options.getPluginUiMetadata?.() ?? []
     };
   }
+  async publishConfigUpdates(paths) {
+    for (const path of paths) {
+      this.options.publish({ type: "config.updated", payload: { path } });
+    }
+    await this.options.applyLiveConfigReload?.();
+  }
   getConfig = (c) => {
     const config = loadConfigOrDefault(this.options.configPath);
     return c.json(ok(buildConfigView(config, this.getPluginConfigOptions())));
@@ -3265,12 +3272,14 @@ var ConfigRoutesController = class {
       model: body.data.model,
       workspace: body.data.workspace
     });
+    const changedPaths = [];
     if (hasModel) {
-      this.options.publish({ type: "config.updated", payload: { path: "agents.defaults.model" } });
+      changedPaths.push("agents.defaults.model");
     }
     if (typeof body.data.workspace === "string") {
-      this.options.publish({ type: "config.updated", payload: { path: "agents.defaults.workspace" } });
+      changedPaths.push("agents.defaults.workspace");
     }
+    await this.publishConfigUpdates(changedPaths);
     return c.json(ok({
       model: view.agents.defaults.model,
       workspace: view.agents.defaults.workspace
@@ -3282,7 +3291,7 @@ var ConfigRoutesController = class {
       return c.json(err("INVALID_BODY", "invalid json body"), 400);
     }
     const result = updateSearch(this.options.configPath, body.data);
-    this.options.publish({ type: "config.updated", payload: { path: "search" } });
+    await this.publishConfigUpdates(["search"]);
     return c.json(ok(result));
   };
   updateProvider = async (c) => {
@@ -3295,7 +3304,7 @@ var ConfigRoutesController = class {
     if (!result) {
       return c.json(err("NOT_FOUND", `unknown provider: ${provider}`), 404);
     }
-    this.options.publish({ type: "config.updated", payload: { path: `providers.${provider}` } });
+    await this.publishConfigUpdates([`providers.${provider}`]);
     return c.json(ok(result));
   };
   createProvider = async (c) => {
@@ -3307,7 +3316,7 @@ var ConfigRoutesController = class {
       this.options.configPath,
       body.data
     );
-    this.options.publish({ type: "config.updated", payload: { path: `providers.${result.name}` } });
+    await this.publishConfigUpdates([`providers.${result.name}`]);
     return c.json(ok({
       name: result.name,
       provider: result.provider
@@ -3319,7 +3328,7 @@ var ConfigRoutesController = class {
     if (result === null) {
       return c.json(err("NOT_FOUND", `custom provider not found: ${provider}`), 404);
     }
-    this.options.publish({ type: "config.updated", payload: { path: `providers.${provider}` } });
+    await this.publishConfigUpdates([`providers.${provider}`]);
     return c.json(ok({
       deleted: true,
       provider
@@ -3385,7 +3394,7 @@ var ConfigRoutesController = class {
       return c.json(err("NOT_FOUND", "provider auth session not found"), 404);
     }
     if (result.status === "authorized") {
-      this.options.publish({ type: "config.updated", payload: { path: `providers.${provider}` } });
+      await this.publishConfigUpdates([`providers.${provider}`]);
     }
     return c.json(ok(result));
   };
@@ -3396,7 +3405,7 @@ var ConfigRoutesController = class {
       if (!result) {
         return c.json(err("NOT_SUPPORTED", `provider cli auth import is not supported: ${provider}`), 404);
       }
-      this.options.publish({ type: "config.updated", payload: { path: `providers.${provider}` } });
+      await this.publishConfigUpdates([`providers.${provider}`]);
       return c.json(ok(result));
     } catch (error) {
       const message = error instanceof Error ? error.message : String(error);
@@ -3413,7 +3422,7 @@ var ConfigRoutesController = class {
     if (!result) {
       return c.json(err("NOT_FOUND", `unknown channel: ${channel}`), 404);
     }
-    this.options.publish({ type: "config.updated", payload: { path: `channels.${channel}` } });
+    await this.publishConfigUpdates([`channels.${channel}`]);
     return c.json(ok(result));
   };
   startChannelAuth = async (c) => {
@@ -3466,7 +3475,7 @@ var ConfigRoutesController = class {
       return c.json(err("NOT_FOUND", "channel auth session not found"), 404);
     }
     if (result.status === "authorized") {
-      this.options.publish({ type: "config.updated", payload: { path: `channels.${channel}` } });
+      await this.publishConfigUpdates([`channels.${channel}`]);
     }
     return c.json(ok(result));
   };
@@ -3476,7 +3485,7 @@ var ConfigRoutesController = class {
       return c.json(err("INVALID_BODY", "invalid json body"), 400);
     }
     const result = updateSecrets(this.options.configPath, body.data);
-    this.options.publish({ type: "config.updated", payload: { path: "secrets" } });
+    await this.publishConfigUpdates(["secrets"]);
     return c.json(ok(result));
   };
   updateRuntime = async (c) => {
@@ -3485,18 +3494,18 @@ var ConfigRoutesController = class {
       return c.json(err("INVALID_BODY", "invalid json body"), 400);
     }
     const result = updateRuntime(this.options.configPath, body.data);
+    const changedPaths = [];
     if (body.data.agents?.defaults && Object.prototype.hasOwnProperty.call(body.data.agents.defaults, "contextTokens")) {
-      this.options.publish({ type: "config.updated", payload: { path: "agents.defaults.contextTokens" } });
+      changedPaths.push("agents.defaults.contextTokens");
     }
     if (body.data.agents?.defaults && Object.prototype.hasOwnProperty.call(body.data.agents.defaults, "engine")) {
-      this.options.publish({ type: "config.updated", payload: { path: "agents.defaults.engine" } });
+      changedPaths.push("agents.defaults.engine");
     }
     if (body.data.agents?.defaults && Object.prototype.hasOwnProperty.call(body.data.agents.defaults, "engineConfig")) {
-      this.options.publish({ type: "config.updated", payload: { path: "agents.defaults.engineConfig" } });
+      changedPaths.push("agents.defaults.engineConfig");
     }
-    this.options.publish({ type: "config.updated", payload: { path: "agents.list" } });
-    this.options.publish({ type: "config.updated", payload: { path: "bindings" } });
-    this.options.publish({ type: "config.updated", payload: { path: "session" } });
+    changedPaths.push("agents.list", "bindings", "session");
+    await this.publishConfigUpdates(changedPaths);
     return c.json(ok(result));
   };
   executeAction = async (c) => {
@@ -3612,6 +3621,87 @@ var CronRoutesController = class {
   };
 };
 
+// src/ui/router/ncp-attachment.controller.ts
+import { readFile as readFile2 } from "fs/promises";
+var ATTACHMENT_CONTENT_BASE_PATH = "/api/ncp/attachments/content";
+function buildAttachmentContentUrl(attachmentUri) {
+  const query = new URLSearchParams({ uri: attachmentUri });
+  return `${ATTACHMENT_CONTENT_BASE_PATH}?${query.toString()}`;
+}
+function encodeContentDispositionFileName(fileName) {
+  return encodeURIComponent(fileName).replace(/\*/g, "%2A");
+}
+function toAttachmentView(record) {
+  return {
+    id: record.id,
+    name: record.originalName,
+    mimeType: record.mimeType,
+    sizeBytes: record.sizeBytes,
+    attachmentUri: record.uri,
+    url: buildAttachmentContentUrl(record.uri)
+  };
+}
+var NcpAttachmentRoutesController = class {
+  constructor(options) {
+    this.options = options;
+  }
+  uploadAttachments = async (c) => {
+    const attachmentApi = this.options.ncpAgent?.attachmentApi;
+    if (!attachmentApi) {
+      return c.json(err("NOT_AVAILABLE", "ncp attachment api unavailable"), 503);
+    }
+    let formData;
+    try {
+      formData = await c.req.raw.formData();
+    } catch {
+      return c.json(err("INVALID_BODY", "invalid multipart body"), 400);
+    }
+    const files = Array.from(formData.values()).reduce((result, value) => {
+      if (typeof value !== "string") {
+        result.push(value);
+      }
+      return result;
+    }, []);
+    if (files.length === 0) {
+      return c.json(err("INVALID_BODY", "no files provided"), 400);
+    }
+    const attachments = [];
+    for (const file of files) {
+      const record = await attachmentApi.saveAttachment({
+        fileName: file.name,
+        mimeType: file.type || null,
+        bytes: new Uint8Array(await file.arrayBuffer())
+      });
+      attachments.push(toAttachmentView(record));
+    }
+    const payload = { attachments };
+    return c.json(ok(payload));
+  };
+  getAttachmentContent = async (c) => {
+    const attachmentApi = this.options.ncpAgent?.attachmentApi;
+    if (!attachmentApi) {
+      return c.json(err("NOT_AVAILABLE", "ncp attachment api unavailable"), 503);
+    }
+    const uri = c.req.query("uri")?.trim();
+    if (!uri) {
+      return c.json(err("INVALID_URI", "attachment uri is required"), 400);
+    }
+    const record = await attachmentApi.statAttachment(uri);
+    const contentPath = attachmentApi.resolveContentPath(uri);
+    if (!record || !contentPath) {
+      return c.json(err("NOT_FOUND", `attachment not found: ${uri}`), 404);
+    }
+    const body = await readFile2(contentPath);
+    return new Response(body, {
+      headers: {
+        "content-length": String(body.byteLength),
+        "content-type": record.mimeType || "application/octet-stream",
+        "content-disposition": `inline; filename*=UTF-8''${encodeContentDispositionFileName(record.originalName)}`
+      }
+    });
+  };
+};
+
 // src/ui/router/ncp-session.controller.ts
 function readPositiveInt(value) {
   if (typeof value !== "string") {
@@ -5388,7 +5478,7 @@ function registerSessionRoutes(app, sessionController) {
   app.put("/api/sessions/:key", sessionController.patchSession);
   app.delete("/api/sessions/:key", sessionController.deleteSession);
 }
-function registerNcpRoutes(app, options, ncpSessionController) {
+function registerNcpRoutes(app, options, ncpSessionController, ncpAttachmentController) {
   if (!options.ncpAgent) {
     return;
   }
@@ -5403,6 +5493,8 @@ function registerNcpRoutes(app, options, ncpSessionController) {
   app.put("/api/ncp/sessions/:sessionId", ncpSessionController.patchSession);
   app.get("/api/ncp/sessions/:sessionId/messages", ncpSessionController.listSessionMessages);
   app.delete("/api/ncp/sessions/:sessionId", ncpSessionController.deleteSession);
+  app.post("/api/ncp/attachments", ncpAttachmentController.uploadAttachments);
+  app.get("/api/ncp/attachments/content", ncpAttachmentController.getAttachmentContent);
 }
 function registerCronRoutes(app, cronController) {
   app.get("/api/cron", cronController.listJobs);
@@ -5434,6 +5526,7 @@ function createUiRouter(options) {
   const sessionController = new SessionRoutesController(options);
   const cronController = new CronRoutesController(options);
   const ncpSessionController = new NcpSessionRoutesController(options);
+  const ncpAttachmentController = new NcpAttachmentRoutesController(options);
   const remoteController = options.remoteAccess ? new RemoteRoutesController(options.remoteAccess) : null;
   const pluginMarketplaceController = new PluginMarketplaceController(options, marketplaceBaseUrl);
   const skillMarketplaceController = new SkillMarketplaceController(options, marketplaceBaseUrl);
@@ -5458,7 +5551,7 @@ function createUiRouter(options) {
   registerConfigRoutes(app, configController);
   registerChatRoutes(app, chatController);
   registerSessionRoutes(app, sessionController);
-  registerNcpRoutes(app, options, ncpSessionController);
+  registerNcpRoutes(app, options, ncpSessionController, ncpAttachmentController);
   registerCronRoutes(app, cronController);
   registerRemoteRoutes(app, remoteController);
   mountMarketplaceRoutes(app, {
@@ -5564,6 +5657,7 @@ function startUiServer(options) {
       configPath: options.configPath,
       productVersion: options.productVersion,
       publish,
+      applyLiveConfigReload: options.applyLiveConfigReload,
       marketplace: options.marketplace,
       cronService: options.cronService,
       chatRuntime: options.chatRuntime,
@@ -5584,7 +5678,7 @@ function startUiServer(options) {
         join: join2,
         getContent: async (path) => {
           try {
-            return await readFile2(path);
+            return await readFile3(path);
           } catch {
             return null;
           }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nextclaw/server",
-  "version": "0.10.55",
+  "version": "0.10.57",
   "private": false,
   "description": "Nextclaw UI/API server.",
   "type": "module",
@@ -18,12 +18,12 @@
     "@hono/node-server": "^1.13.3",
     "hono": "^4.6.2",
     "ws": "^8.18.0",
-    "@nextclaw/mcp": "0.1.50",
-    "@nextclaw/ncp": "0.3.2",
-    "@nextclaw/ncp-http-agent-server": "0.3.2",
-    "@nextclaw/runtime": "0.2.15",
-    "@nextclaw/openclaw-compat": "0.3.31",
-    "@nextclaw/core": "0.11.1"
+    "@nextclaw/mcp": "0.1.51",
+    "@nextclaw/ncp-http-agent-server": "0.3.3",
+    "@nextclaw/ncp": "0.3.3",
+    "@nextclaw/runtime": "0.2.16",
+    "@nextclaw/core": "0.11.2",
+    "@nextclaw/openclaw-compat": "0.3.33"
   },
   "devDependencies": {
     "@types/node": "^20.17.6",