npm - @xopcai/xopc - Versions diffs - 0.0.176 → 0.0.178 - Mend

@xopcai/xopc 0.0.176 → 0.0.178

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (238) hide show

package/dist/gateway/static/root/index.html CHANGED Viewed

@@ -11,7 +11,7 @@
     <link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png?v=20260713-1" />
     <link rel="manifest" href="/site.webmanifest?v=20260713-1" />
     <title>XOPC — Turn goals into loops. Keep what matters moving.</title>
-    <script type="module" crossorigin src="/assets/index-2UImfRDC.js"></script>
+    <script type="module" crossorigin src="/assets/index-C0CGebQ1.js"></script>
     <link rel="modulepreload" crossorigin href="/assets/rolldown-runtime-aKtaBQYM.js">
     <link rel="modulepreload" crossorigin href="/assets/preload-helper-zJ_50EbN.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-react-BOUWij0V.js">
@@ -24,17 +24,17 @@
     <link rel="modulepreload" crossorigin href="/assets/check-DUBLcKHA.js">
     <link rel="modulepreload" crossorigin href="/assets/circle-alert-BEjgurr2.js">
     <link rel="modulepreload" crossorigin href="/assets/middleware-Pd0e8Igk.js">
-    <link rel="modulepreload" crossorigin href="/assets/messages-CarlxqXV.js">
-    <link rel="modulepreload" crossorigin href="/assets/locale-store-sToMfHX_.js">
+    <link rel="modulepreload" crossorigin href="/assets/messages-DP6tPKk-.js">
+    <link rel="modulepreload" crossorigin href="/assets/locale-store-CTwSy7yW.js">
     <link rel="modulepreload" crossorigin href="/assets/cn-JdwAhgNB.js">
     <link rel="modulepreload" crossorigin href="/assets/schemas-DgQq6Z5S.js">
     <link rel="modulepreload" crossorigin href="/assets/product-delivery-BTRT9kCS.js">
     <link rel="modulepreload" crossorigin href="/assets/config-reload-event-Bjh2zoKp.js">
     <link rel="modulepreload" crossorigin href="/assets/copy-to-clipboard-HOJ79TWv.js">
-    <link rel="modulepreload" crossorigin href="/assets/gateway-startup-retry-BlSLh1TF.js">
-    <link rel="modulepreload" crossorigin href="/assets/activity-store-DsFM1upC.js">
-    <link rel="modulepreload" crossorigin href="/assets/theme-store-CBNcGOfj.js">
-    <link rel="stylesheet" crossorigin href="/assets/index-CS9sVShT.css">
+    <link rel="modulepreload" crossorigin href="/assets/gateway-startup-retry-BZEkOdPm.js">
+    <link rel="modulepreload" crossorigin href="/assets/activity-store-BzGX__8I.js">
+    <link rel="modulepreload" crossorigin href="/assets/theme-store-DFLyzoLO.js">
+    <link rel="stylesheet" crossorigin href="/assets/index-eqq25gvV.css">
   </head>
   <body>
     <div id="root"></div>

package/dist/package.js CHANGED Viewed

@@ -1,4 +1,4 @@
 //#region package.json
-var version = "0.0.176";
+var version = "0.0.178";
 //#endregion
 export { version };

package/dist/src/agent/embedded/model-runtime.js CHANGED Viewed

@@ -2,6 +2,7 @@ import { init_paths, resolveModelsJsonPath } from "../../config/paths.js";
 import { init_sync_provider_auth, resolveProviderApiKeySync } from "../../auth/sync-provider-auth.js";
 import { CredentialResolver, init_credentials } from "../../auth/credentials.js";
 import { XopcModelCredentialStore, init_model_credential_store } from "../../auth/model-credential-store.js";
+import { init_register_bundled_oauth_flows, registerBundledOAuthFlows } from "../../providers/register-bundled-oauth-flows.js";
 import { init_register_runtime_providers, registerRuntimeProviders } from "../../providers/register-runtime-providers.js";
 import { getApiKeySync, init_providers } from "../../providers/index.js";
 import { InMemoryModelsStore } from "@earendil-works/pi-ai";
@@ -12,11 +13,13 @@ init_model_credential_store();
 init_sync_provider_auth();
 init_paths();
 init_providers();
+init_register_bundled_oauth_flows();
 init_register_runtime_providers();
 function resolveEmbeddedProviderApiKeySync(providerId) {
 	return resolveProviderApiKeySync(providerId) ?? getApiKeySync(providerId);
 }
 async function createEmbeddedModelRuntime(providerId) {
+	registerBundledOAuthFlows();
 	const resolver = new CredentialResolver();
 	const credentials = new XopcModelCredentialStore(resolver);
 	const modelRuntime = await ModelRuntime.create({

package/dist/src/agent/embedded/run-for-session.js CHANGED Viewed

@@ -91,13 +91,15 @@ async function runEmbeddedTurnForSession(params) {
 			}, "Agent model fallback candidates resolved");
 			let lastResult;
 			let lastError;
+			let resumeLastUserMessage = false;
 			const primaryModelRef = modelRef;
-			const beforeLen = Array.isArray(agent.state?.messages) ? agent.state.messages.length : void 0;
 			for (let i = 0; i < resolvedCandidates.length; i++) {
 				const candidate = resolvedCandidates[i];
 				const candidateModelRef = candidate.ref;
 				const isFallbackAttempt = i > 0;
 				const candidateModel = candidate.model;
+				const hasNextCandidate = i + 1 < resolvedCandidates.length;
+				const rowsBeforeAttempt = hasNextCandidate ? await sessionStore.loadTranscriptRows(sessionKey) : void 0;
 				if (typeof mm.applyResolvedModel === "function") mm.applyResolvedModel(agent, candidateModel, candidateModelRef);
 				agentManager.setModelForSession(sessionKey, candidateModelRef);
 				if (isFallbackAttempt) log.info({
@@ -123,7 +125,8 @@ async function runEmbeddedTurnForSession(params) {
 						sessionStore,
 						timeoutMs: resolveAgentTurnTimeoutMs(config),
 						abortSignal: params.abortSignal,
-						onEvent: params.onEvent
+						onEvent: params.onEvent,
+						resumeLastUserMessage
 					});
 					if (turnResult.ok) {
 						if (isFallbackAttempt) log.info({
@@ -137,7 +140,6 @@ async function runEmbeddedTurnForSession(params) {
 						return turnResult;
 					}
 					lastResult = turnResult;
-					const hasNextCandidate = i + 1 < resolvedCandidates.length;
 					log.warn({
 						sessionKey,
 						runId,
@@ -150,7 +152,6 @@ async function runEmbeddedTurnForSession(params) {
 				} catch (err) {
 					lastError = err;
 					if (err instanceof DOMException && err.name === "AbortError") throw err;
-					const hasNextCandidate = i + 1 < resolvedCandidates.length;
 					log.warn({
 						err,
 						sessionKey,
@@ -161,7 +162,19 @@ async function runEmbeddedTurnForSession(params) {
 						hasNextCandidate
 					}, hasNextCandidate ? "Agent model call threw, trying fallback" : "Agent model call threw, no fallback remains");
 				}
-				if (beforeLen !== void 0 && Array.isArray(agent.state?.messages)) agent.state.messages = agent.state.messages.slice(0, beforeLen);
+				if (hasNextCandidate && rowsBeforeAttempt) {
+					const preparation = await sessionStore.prepareModelFallback(sessionKey, rowsBeforeAttempt);
+					if (preparation === "unsafe") {
+						log.warn({
+							sessionKey,
+							runId,
+							modelRef: candidateModelRef,
+							attempt: i + 1
+						}, "Agent model fallback skipped because the failed attempt changed the transcript");
+						break;
+					}
+					resumeLastUserMessage = preparation === "resume";
+				}
 			}
 			if (lastResult) return lastResult;
 			if (lastError instanceof Error) throw lastError;

package/dist/src/agent/embedded/run-turn.js CHANGED Viewed

@@ -206,9 +206,12 @@ async function runXopcEmbeddedTurn(params) {
 		}
 		try {
 			await runAgentTurnWithTimeout(session.agent, async () => {
-				const text = userMessageToPromptText(userMessage);
-				const images = params.images ?? [];
-				await session.prompt(text, images.length > 0 ? { images } : void 0);
+				if (params.resumeLastUserMessage) await session.agent.continue();
+				else {
+					const text = userMessageToPromptText(userMessage);
+					const images = params.images ?? [];
+					await session.prompt(text, images.length > 0 ? { images } : void 0);
+				}
 				await session.agent.waitForIdle();
 				await maybeRetryTurnAfterTransientLlmFailure(session.agent, {
 					sessionKey,

package/dist/src/agent/embedded/types.d.ts CHANGED Viewed

@@ -89,6 +89,8 @@ export type RunXopcEmbeddedTurnParams = {
     abortSignal?: AbortSignal;
     onEvent?: (event: EmbeddedStreamEvent) => void;
     images?: ImageContent[];
+    /** Continue from the persisted trailing user row instead of appending it again. */
+    resumeLastUserMessage?: boolean;
 };
 export type RunXopcEmbeddedTurnResult = {
     ok: boolean;

package/dist/src/automations/service/automation-service.d.ts CHANGED Viewed

@@ -1,3 +1,4 @@
+import type { ProactiveSignalPublisher } from '../../proactive/events/publisher.js';
 import type { Automation, AutomationDeps, AutomationEvent, AutomationMetrics, AutomationProductEventRun, AutomationRun, AutomationRunEvent } from '../domain/types.js';
 import { type CreateAutomationInput, type UpdateAutomationInput } from '../domain/validation.js';
 export declare class AutomationAlreadyRunningError extends Error {
@@ -6,6 +7,7 @@ export declare class AutomationAlreadyRunningError extends Error {
     constructor(automationId: string, runningRunId?: string);
 }
 export declare class AutomationService {
+    private readonly signals?;
     private readonly executor;
     private timer;
     private stopped;
@@ -13,6 +15,7 @@ export declare class AutomationService {
     private deps;
     private maxConcurrentRuns;
     private readonly activeRuns;
+    constructor(signals?: ProactiveSignalPublisher);
     setDeps(deps: AutomationDeps): void;
     initialize(options?: {
         maxConcurrentRuns?: number;

package/dist/src/automations/service/automation-service.js CHANGED Viewed

@@ -1,5 +1,6 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
+import { runSqliteWriteTransaction } from "../../storage/sqlite/transaction.js";
 import { computeNextAutomationRunAtMs, timerDelayUntil } from "../domain/schedule.js";
 import { AutomationSchema, CreateAutomationSchema, UpdateAutomationSchema } from "../domain/validation.js";
 import { AutomationActionExecutor } from "./action-executor.js";
@@ -28,6 +29,9 @@ var AutomationService = class {
 	deps = {};
 	maxConcurrentRuns = DEFAULT_MAX_CONCURRENT_RUNS;
 	activeRuns = /* @__PURE__ */ new Map();
+	constructor(signals) {
+		this.signals = signals;
+	}
 	setDeps(deps) {
 		this.deps = {
 			...this.deps,
@@ -321,14 +325,40 @@ var AutomationService = class {
 				endedAtMs,
 				durationMs: endedAtMs - startedAtMs
 			};
-			saveAutomationRun(run);
-			this.appendRunEvent(run, "run.completed", `Automation run ${status}`, {
-				status,
-				durationMs: run.durationMs,
-				error
-			});
 			this.activeRuns.delete(initialRun.id);
-			this.finishAutomationRun(automation.id, status, error, endedAtMs);
+			runSqliteWriteTransaction(() => {
+				saveAutomationRun(run);
+				this.appendRunEvent(run, "run.completed", `Automation run ${status}`, {
+					status,
+					durationMs: run.durationMs,
+					error
+				});
+				this.finishAutomationRun(automation.id, status, error, endedAtMs);
+				if (status === "failed" || status === "timeout") this.signals?.publish({
+					type: "automation.run_failed.v1",
+					schemaVersion: 1,
+					source: {
+						kind: "automations",
+						id: automation.id
+					},
+					subject: {
+						kind: "automation_run",
+						id: run.id
+					},
+					actor: { kind: "system" },
+					scope: { workspaceId: "default" },
+					occurredAt: new Date(endedAtMs).toISOString(),
+					dedupeKey: `automation_run:${run.id}:failed`,
+					sensitivity: "personal",
+					payload: {
+						automationId: automation.id,
+						status,
+						error,
+						summary: run.summary,
+						durationMs: run.durationMs
+					}
+				});
+			});
 			try {
 				this.deps.onRunCompleted?.(run);
 			} catch (err) {

package/dist/src/cli/commands/doctor/checks/database-schema.js CHANGED Viewed

@@ -52,7 +52,7 @@ async function checkDatabaseSchema(ctx) {
 		id: "database-schema",
 		label: "Database schema",
 		status: "pass",
-		message: `SQLite schema v${status.dbVersion} (current release v67).`,
+		message: `SQLite schema v${status.dbVersion} (current release v74).`,
 		hints: []
 	};
 }

package/dist/src/cli/commands/gateway/lifecycle.js CHANGED Viewed

@@ -3,8 +3,8 @@ import { loadConfig } from "../../../config/loader.js";
 import "../../../config/index.js";
 import { isRestartEnabled } from "../../../config/commands.flags.js";
 import { resolveGatewayService } from "../../../daemon/service.js";
-import { findVerifiedGatewayListenerPidsOnPortSync, formatGatewayPidList, signalVerifiedGatewayPidSync } from "../../../infra/gateway-processes.js";
 import { authorizeGatewaySigusr1Restart, writeGatewayRestartIntentSync } from "../../../infra/restart.js";
+import { findVerifiedGatewayListenerPidsOnPortSync, formatGatewayPidList, signalVerifiedGatewayPidSync } from "../../../infra/gateway-processes.js";
 import { runServiceRestart, runServiceStop } from "./lifecycle-core.js";
 import { DEFAULT_RESTART_HEALTH_ATTEMPTS, renderGatewayPortHealthDiagnostics, waitForGatewayHealthyListener } from "./restart-health.js";
 import { parsePortFromArgs, renderGatewayServiceStartHints, resolveGatewayPortFromConfig } from "./shared.js";

package/dist/src/cli/commands/update.js CHANGED Viewed

@@ -2,9 +2,9 @@ import { PACKAGE_VERSION, init_package_version } from "../../package-version.js"
 import { loadConfig } from "../../config/loader.js";
 import { formatExamples, register } from "../registry.js";
 import "../../config/index.js";
+import { acquireUpdateLock } from "../../infra/update-lock.js";
 import { normalizeUpdateChannel } from "../../infra/update-channels.js";
 import { compareSemver, resolveNpmChannelTag } from "../../infra/update-check.js";
-import { acquireUpdateLock } from "../../infra/update-lock.js";
 import { formatUpdateApiResult, resolveUpdateInstallSurface, runGatewayUpdateWithPostSteps } from "../../infra/update-runner.js";
 import { Command } from "commander";
 //#region src/cli/commands/update.ts

package/dist/src/connectors/composio-sessions.js CHANGED Viewed

@@ -76,7 +76,7 @@ var ComposioSessionsAdapter = class {
 			try {
 				[{Composio}, {PiProvider}] = await Promise.all([import("@composio/core"), import("@composio/experimental")]);
 			} catch (cause) {
-				throw new Error("Composio support requires @composio/core and @composio/experimental. Install them alongside @xopcai/xopc; use npm install -g when xopc is installed globally.", { cause });
+				throw new Error("The xopc installation is missing the bundled Composio runtime. Reinstall @xopcai/xopc and restart the gateway.", { cause });
 			}
 			return new Composio({
 				apiKey,

package/dist/src/gateway/hono/routes/home.d.ts CHANGED Viewed

@@ -1,8 +1,8 @@
 import type { Hono } from 'hono';
 import { type HomeAttentionSubjectKind } from '../../../storage/sqlite/index.js';
 import type { AuthenticatedRouteDeps } from './deps.js';
-type HomeDecisionKind = 'work_item' | 'goal' | 'connector_approval' | 'goal_evidence';
-type HomeDecisionReason = 'needs_input' | 'in_review' | 'blocked' | 'overdue' | 'due_soon' | 'approval_required';
+type HomeDecisionKind = 'agent_judgment' | 'work_item' | 'goal' | 'connector_approval' | 'goal_evidence';
+type HomeDecisionReason = 'needs_input' | 'in_review' | 'blocked' | 'overdue' | 'due_soon' | 'decision_needed' | 'approval_required';
 type HomeAttention = {
     id: string;
     kind: HomeAttentionSubjectKind;
@@ -25,6 +25,22 @@ type HomeDecision = {
     projectId?: string;
     projectName?: string;
     updatedAt: number;
+    judgment?: {
+        inboxItemId: string;
+        whyNow: string;
+        impact: string;
+        workDone: string;
+        recommendation: string;
+        confidence: number;
+        decision?: {
+            question: string;
+            options: Array<{
+                id: string;
+                label: string;
+                consequence: string;
+            }>;
+        };
+    };
     response?: {
         kind: 'connector_approval';
         approvalId: string;

package/dist/src/gateway/hono/routes/home.js CHANGED Viewed

@@ -245,6 +245,25 @@ function registerHomeRoutes(authenticated, deps) {
 		const latestAutomationRuns = [...automationRuns].sort((left, right) => right.createdAtMs - left.createdAtMs).filter((run, index, all) => all.findIndex((candidate) => candidate.automationId === run.automationId) === index);
 		const automationsById = new Map(automations.map((automation) => [automation.id, automation]));
 		const decisions = [
+			...service.proactiveInbox.list({ limit: 20 }).filter((item) => item.status === "unread" || item.status === "read").map((item) => ({
+				id: `agent-judgment:${item.id}`,
+				kind: "agent_judgment",
+				title: item.insight.title,
+				detail: item.insight.summary,
+				reason: "decision_needed",
+				urgency: item.insight.urgency === "critical" || item.insight.urgency === "high" ? "now" : "soon",
+				href: `/work?judgment=${encodeURIComponent(item.id)}`,
+				updatedAt: Date.parse(item.updatedAt),
+				judgment: {
+					inboxItemId: item.id,
+					whyNow: item.insight.whyNow,
+					impact: item.insight.impact,
+					workDone: item.insight.workDone,
+					recommendation: item.insight.recommendation,
+					confidence: item.insight.confidence,
+					...item.insight.decision ? { decision: item.insight.decision } : {}
+				}
+			})),
 			...activeWorkItems.map((item) => decisionFromWorkItem(item, projectsById.get(item.projectId)?.name ?? "Project", nowMs)).filter((item) => Boolean(item)),
 			...activeGoals.map((goal) => decisionFromGoal(goal, goal.projectId ? projectsById.get(goal.projectId)?.name : void 0)).filter((item) => Boolean(item)),
 			...connectorApprovals.filter((approval) => Date.parse(approval.expiresAt) > nowMs).map((approval) => ({

package/dist/src/gateway/hono/routes/index.js CHANGED Viewed

@@ -12,7 +12,7 @@ import { registerInteractionStateRoutes } from "./interaction-state.js";
 import { registerComposerHistoryRoutes } from "./composer-history.js";
 import { registerLocalAppsRoutes } from "./local-apps.js";
 import { registerWorkDiscoveryRoutes } from "./work-discovery.js";
-import { registerFocusRoutes } from "./focuses.js";
+import { registerProactiveRoutes } from "./proactive.js";
 import { mountAppLazyRoutePrefixes, registerAuthenticatedLazyRouteFallback } from "./lazy-fallback.js";
 //#region src/gateway/hono/routes/index.ts
 function registerCoreAuthenticatedRoutes(authenticated, deps) {
@@ -25,7 +25,7 @@ function registerCoreAuthenticatedRoutes(authenticated, deps) {
 	registerProjectSkillRoutes(authenticated, deps);
 	registerLocalAppsRoutes(authenticated, deps);
 	registerWorkDiscoveryRoutes(authenticated, deps);
-	registerFocusRoutes(authenticated, deps);
+	registerProactiveRoutes(authenticated, deps);
 	registerSearchRoutes(authenticated, deps);
 	registerMobileRoutes(authenticated, deps);
 	registerTaskOutcomeRoutes(authenticated, deps);

package/dist/src/gateway/hono/routes/local-apps.js CHANGED Viewed

@@ -1,6 +1,6 @@
 import { readLocalAppAcceptanceConfig } from "../../../local-apps/acceptance.js";
-import { LOCAL_APP_RUNTIME_BRIDGE_HASH, injectLocalAppRuntimeBridge } from "../../../local-apps/preview-runtime-bridge.js";
 import { extensionAssetMimeType } from "../lib/extension-assets.js";
+import { LOCAL_APP_RUNTIME_BRIDGE_HASH, injectLocalAppRuntimeBridge } from "../../../local-apps/preview-runtime-bridge.js";
 import { relative, resolve } from "node:path";
 import { existsSync, readFileSync, statSync } from "node:fs";
 //#region src/gateway/hono/routes/local-apps.ts

package/dist/src/gateway/hono/routes/proactive.d.ts ADDED Viewed

@@ -0,0 +1,4 @@
+import type { Hono } from 'hono';
+import type { AuthenticatedRouteDeps } from './deps.js';
+/** User-facing judgment inbox plus internal diagnostics. There is intentionally no proactive control-panel API. */
+export declare function registerProactiveRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void;

package/dist/src/gateway/hono/routes/proactive.js ADDED Viewed

@@ -0,0 +1,157 @@
+//#region src/gateway/hono/routes/proactive.ts
+function positiveInt(value, fallback) {
+	const parsed = Number(value);
+	return Number.isInteger(parsed) && parsed > 0 ? parsed : fallback;
+}
+/** User-facing judgment inbox plus internal diagnostics. There is intentionally no proactive control-panel API. */
+function registerProactiveRoutes(authenticated, deps) {
+	authenticated.get("/api/inbox/judgments", (c) => {
+		const status = c.req.query("status");
+		if (status && ![
+			"unread",
+			"read",
+			"snoozed",
+			"resolved"
+		].includes(status)) return c.json({
+			ok: false,
+			error: "Invalid inbox status"
+		}, 400);
+		return c.json({
+			ok: true,
+			items: deps.service.proactiveInbox.list({
+				...status ? { status } : {},
+				limit: positiveInt(c.req.query("limit"), 50)
+			})
+		});
+	});
+	authenticated.post("/api/inbox/judgments/:itemId/transition", deps.strictRateLimitMiddleware, async (c) => {
+		const body = await c.req.json().catch(() => null);
+		if (!body || ![
+			"unread",
+			"read",
+			"snoozed",
+			"resolved"
+		].includes(String(body.status))) return c.json({
+			ok: false,
+			error: "Valid status is required"
+		}, 400);
+		try {
+			return c.json({
+				ok: true,
+				item: deps.service.proactiveInbox.transition(c.req.param("itemId"), {
+					status: body.status,
+					...typeof body.snoozedUntil === "string" ? { snoozedUntil: body.snoozedUntil } : {},
+					...typeof body.resolution === "string" ? { resolution: body.resolution } : {}
+				})
+			});
+		} catch (error) {
+			return c.json({
+				ok: false,
+				error: error instanceof Error ? error.message : String(error)
+			}, 400);
+		}
+	});
+	authenticated.post("/api/inbox/judgments/:itemId/decisions", deps.strictRateLimitMiddleware, async (c) => {
+		const body = await c.req.json().catch(() => null);
+		if (!body || typeof body.choice !== "string") return c.json({
+			ok: false,
+			error: "choice is required"
+		}, 400);
+		try {
+			return c.json({
+				ok: true,
+				item: deps.service.proactiveInbox.decide(c.req.param("itemId"), body.choice, typeof body.note === "string" ? body.note : "")
+			}, 201);
+		} catch (error) {
+			return c.json({
+				ok: false,
+				error: error instanceof Error ? error.message : String(error)
+			}, 400);
+		}
+	});
+	authenticated.post("/api/inbox/judgments/:itemId/feedback", deps.strictRateLimitMiddleware, async (c) => {
+		const body = await c.req.json().catch(() => null);
+		if (!body || body.rating !== "useful" && body.rating !== "not_useful") return c.json({
+			ok: false,
+			error: "Valid rating is required"
+		}, 400);
+		try {
+			deps.service.proactiveInbox.feedback(c.req.param("itemId"), body.rating, typeof body.note === "string" ? body.note : "");
+			return c.json({ ok: true }, 201);
+		} catch (error) {
+			return c.json({
+				ok: false,
+				error: error instanceof Error ? error.message : String(error)
+			}, 400);
+		}
+	});
+	authenticated.post("/api/inbox/judgments/:itemId/instructions", deps.strictRateLimitMiddleware, async (c) => {
+		const body = await c.req.json().catch(() => null);
+		if (!body || typeof body.instruction !== "string" || !body.instruction.trim()) return c.json({
+			ok: false,
+			error: "instruction is required"
+		}, 400);
+		try {
+			return c.json({
+				ok: true,
+				...deps.service.proactiveInbox.instruct(c.req.param("itemId"), body.instruction)
+			}, 201);
+		} catch (error) {
+			return c.json({
+				ok: false,
+				error: error instanceof Error ? error.message : String(error)
+			}, 400);
+		}
+	});
+	authenticated.get("/api/internal/proactive/insights", (c) => c.json({
+		ok: true,
+		insights: deps.service.proactiveInsights()
+	}));
+	authenticated.get("/api/internal/proactive/scenarios", (c) => c.json({
+		ok: true,
+		scenarios: deps.service.proactiveScenarios.list(),
+		subscriptions: deps.service.proactiveScenarios.subscriptions()
+	}));
+	authenticated.post("/api/internal/proactive/events", deps.strictRateLimitMiddleware, async (c) => {
+		const body = await c.req.json().catch(() => null);
+		if (!body || typeof body !== "object" || Array.isArray(body)) return c.json({
+			ok: false,
+			error: "Event body must be an object"
+		}, 400);
+		try {
+			const result = deps.service.proactive.publish(body);
+			return c.json({
+				ok: true,
+				...result
+			}, result.inserted ? 201 : 200);
+		} catch (error) {
+			return c.json({
+				ok: false,
+				error: error instanceof Error ? error.message : String(error)
+			}, 400);
+		}
+	});
+	authenticated.get("/api/internal/proactive/events", (c) => {
+		const events = deps.service.proactive.listEvents({
+			limit: positiveInt(c.req.query("limit"), 50),
+			...c.req.query("type") ? { type: c.req.query("type") } : {}
+		}).map((event) => event.sensitivity === "public" || event.sensitivity === "personal" ? event : {
+			...event,
+			payload: { redacted: true }
+		});
+		return c.json({
+			ok: true,
+			events
+		});
+	});
+	authenticated.get("/api/internal/proactive/batches", (c) => c.json({
+		ok: true,
+		batches: deps.service.proactive.listBatches({ limit: positiveInt(c.req.query("limit"), 50) })
+	}));
+	authenticated.get("/api/internal/proactive/health", (c) => c.json({
+		ok: true,
+		health: deps.service.proactive.health()
+	}));
+}
+//#endregion
+export { registerProactiveRoutes };

package/dist/src/gateway/hono/routes/projects.js CHANGED Viewed

@@ -15,7 +15,7 @@ import { inferProjectKind } from "../../../projects/project-kind.js";
 import { inferSuggestedProjectDefaultAgentId } from "../../../projects/project-agent-suggestion.js";
 import { buildProjectLoopOverview } from "../../../projects/project-loop.js";
 import "../../../projects/index.js";
-import { WORK_ITEM_ATTACHMENT_MAX_BYTES, WorkItemService } from "../../../work-items/work-item-service.js";
+import { WORK_ITEM_ATTACHMENT_MAX_BYTES } from "../../../work-items/work-item-service.js";
 import { buildWorkItemAgentContext } from "../../../work-items/agent-context.js";
 import "../../../work-items/index.js";
 import { createGatewayRouteLogger } from "../lib/route-logger.js";
@@ -373,7 +373,7 @@ function registerProjectsRoutes(authenticated, deps) {
 	const { service } = deps;
 	const activity = new ActivityService();
 	const goals = new GoalService();
-	const workItems = new WorkItemService();
+	const workItems = service.workItems;
 	authenticated.post("/api/projects", async (c) => {
 		const body = await c.req.json().catch(() => ({}));
 		const name = textField(body, "name")?.trim();

package/dist/src/gateway/hono/routes/update.js CHANGED Viewed

@@ -1,11 +1,11 @@
 import { PACKAGE_VERSION, init_package_version } from "../../../package-version.js";
 import { loadConfig } from "../../../config/loader.js";
 import "../../../config/index.js";
-import { normalizeUpdateChannel } from "../../../infra/update-channels.js";
 import { acquireUpdateLock } from "../../../infra/update-lock.js";
-import { formatUpdateApiResult, runGatewayUpdateWithPostSteps } from "../../../infra/update-runner.js";
+import { normalizeUpdateChannel } from "../../../infra/update-channels.js";
 import { getUpdateAvailable, runGatewayUpdateCheck } from "../../../infra/update-startup.js";
 import { createGatewayRouteLogger } from "../lib/route-logger.js";
+import { formatUpdateApiResult, runGatewayUpdateWithPostSteps } from "../../../infra/update-runner.js";
 import { streamSSE } from "hono/streaming";
 //#region src/gateway/hono/routes/update.ts
 init_package_version();

package/dist/src/gateway/index.js CHANGED Viewed

@@ -1,6 +1,5 @@
 import { buildDefaultCorsOrigins, isAllInterfacesHost, isLoopbackHost, resolveEffectiveGatewayPort, resolveGatewayServiceListenPort } from "./host.js";
 import { defaultGatewayBindMode, isContainerEnvironment, resolveGatewayBindHost, resolveGatewayBindHostSync, resolveGatewayBindMode, resolveGatewayEffectiveHost } from "../config/gateway-bind.js";
-import { checkPortAvailable, forceFreePortAndWait, listPortListeners, parseLsofOutput } from "./ports.js";
 import { assertGatewayAuthConfigured, extractToken, resolveGatewayAuth, validateToken } from "./auth.js";
 import { resolveGatewayListenHost, resolveGatewayListenPlan } from "./listen.js";
 import { buckets } from "./rate-limit/buckets.js";
@@ -14,6 +13,7 @@ import { createHonoApp } from "./hono/app.js";
 import { GatewayServer } from "./server.js";
 import { GatewayLockError, acquireGatewayLock } from "./lock.js";
 import { runGatewayLoop } from "./run-loop.js";
+import { checkPortAvailable, forceFreePortAndWait, listPortListeners, parseLsofOutput } from "./ports.js";
 import { apiError, apiOk } from "./protocol.js";
 import "./hono/index.js";
 import { assertSecureGatewayHttpUrl, assertSecureWebSocketUrl, isInsecurePrivateWsAllowed, isSecureWebSocketUrl } from "./ws-security.js";

package/dist/src/gateway/run-loop.js CHANGED Viewed

@@ -1,10 +1,10 @@
 import { loadConfig } from "../config/loader.js";
 import "../config/index.js";
 import { isRestartEnabled } from "../config/commands.flags.js";
-import { consumeGatewayRestartIntentSync, consumeGatewaySigusr1RestartAuthorization, isGatewaySigusr1RestartExternallyAllowed, resetGatewayRestartStateForInProcessRestart, scheduleGatewaySigusr1Restart, setGatewaySigusr1RestartPolicy } from "../infra/restart.js";
 import { runBootstrapMigrationsSync } from "../migrations/runner.js";
 import { restartGatewayProcessWithFreshPid } from "./respawn.js";
 import { acquireGatewayLock } from "./lock.js";
+import { consumeGatewayRestartIntentSync, consumeGatewaySigusr1RestartAuthorization, isGatewaySigusr1RestartExternallyAllowed, resetGatewayRestartStateForInProcessRestart, scheduleGatewaySigusr1Restart, setGatewaySigusr1RestartPolicy } from "../infra/restart.js";
 //#region src/gateway/run-loop.ts
 /**
 * Gateway Run Loop - Core run loop for gateway process management

package/dist/src/gateway/service.d.ts CHANGED Viewed

@@ -12,7 +12,9 @@ import { AgentRunRelay } from './agent-run-relay.js';
 import { type EnqueueGoalRunOptions } from '../goals/index.js';
 import { ProjectService } from '../projects/index.js';
 import { LocalAppService } from '../local-apps/index.js';
+import { WorkItemService } from '../work-items/index.js';
 import { type BrowserRecipeService } from '../browser/recipes/index.js';
+import { listInsights, ProactiveEventService, ProactiveInboxService, ProactiveInboxWorker, ProactiveScenarioService, ProactiveWorker } from '../proactive/index.js';
 import { GatewaySessionsApi } from './service/sessions-api.js';
 import { GatewayMarketplaceService } from './service/marketplace-service.js';
 import { GatewayAgentRunner } from './service/agent-runner.js';
@@ -68,7 +70,6 @@ export declare class GatewayService {
     private connectedKnowledgeCoordinator;
     private stopAutomationProductEventBridge;
     private stopSessionTranscriptAutomationEvents;
-    private stopFocusReconciler;
     /**
      * Webchat agent invocation surface (`runAgent`, `abortAgentRun`, `steer*`,
      * `submitClarifyResponse`, clarify-bridge dispatch). Owns the
@@ -90,8 +91,16 @@ export declare class GatewayService {
     readonly marketplace: GatewayMarketplaceService;
     /** First-class project grouping surface. */
     readonly projects: ProjectService;
+    readonly workItems: WorkItemService;
     /** Local user-created apps, their coder projects, previews, and installs. */
     readonly localApps: LocalAppService;
+    /** Unified durable event spine for proactive scenarios. */
+    readonly proactiveScenarios: ProactiveScenarioService;
+    readonly proactive: ProactiveEventService;
+    readonly proactiveInbox: ProactiveInboxService;
+    readonly proactiveInsights: typeof listInsights;
+    readonly proactiveWorker: ProactiveWorker;
+    readonly proactiveInboxWorker: ProactiveInboxWorker;
     constructor(serviceConfig?: GatewayServiceConfig);
     /** Lazy AgentService — constructed on first use or during `start()`. */
     get agentService(): AgentService;