@xopcai/xopc 0.0.179 → 0.0.187

package/dist/src/gateway/hono/routes/agent-stream.js

@@ -1,12 +1,10 @@
-import { createGatewayRouteLogger, logRouteWarn } from "../lib/route-logger.js";
-import { createAgentResumeHandler, createAgentSSEHandler, createEventsSSEHandler, createSendHandler } from "../sse.js";
+import { validateWebchatAttachments, validateWebchatContent } from "../../chat-limits.js";
+import { createAgentResumeHandler, createEventsSSEHandler, createSendHandler } from "../sse.js";
 //#region src/gateway/hono/routes/agent-stream.ts
-const log = createGatewayRouteLogger("AgentStream");
 function registerAgentStreamRoutes(authenticated, deps) {
-	const { service, strictRateLimitMiddleware, sseConfig } = deps;
-	authenticated.post("/api/agent", strictRateLimitMiddleware, createAgentSSEHandler(sseConfig));
-	authenticated.post("/api/agent/resume", strictRateLimitMiddleware, createAgentResumeHandler(sseConfig));
-	authenticated.post("/api/agent/abort", strictRateLimitMiddleware, async (c) => {
+	const { service, chatRateLimitMiddleware, sseConfig } = deps;
+	authenticated.post("/api/agent/resume", chatRateLimitMiddleware, createAgentResumeHandler(sseConfig));
+	authenticated.post("/api/agent/abort", chatRateLimitMiddleware, async (c) => {
 		const body = await c.req.json().catch(() => null);
 		const runId = body && typeof body === "object" && typeof body.runId === "string" ? body.runId.trim() : "";
 		if (!runId) return c.json({
@@ -16,53 +14,156 @@ function registerAgentStreamRoutes(authenticated, deps) {
 				message: "Missing runId"
 			}
 		}, 400);
-		const aborted = service.abortAgentRun(runId);
+		const result = await service.abortAgentRun(runId);
 		return c.json({
 			ok: true,
-			payload: { aborted }
+			payload: result
 		});
 	});
-	authenticated.post("/api/agent/steer", strictRateLimitMiddleware, async (c) => {
+	authenticated.get("/api/sessions/:sessionKey/input-state", (c) => {
+		const sessionKey = (c.req.param("sessionKey") ?? "").trim();
+		if (!sessionKey) return c.json({
+			ok: false,
+			error: {
+				code: "BAD_REQUEST",
+				message: "Missing sessionKey"
+			}
+		}, 400);
+		return c.json({
+			ok: true,
+			payload: service.getSessionInputState(sessionKey)
+		});
+	});
+	authenticated.post("/api/sessions/:sessionKey/inputs", chatRateLimitMiddleware, async (c) => {
+		const sessionKey = (c.req.param("sessionKey") ?? "").trim();
 		const body = await c.req.json().catch(() => null);
-		if (!body || typeof body !== "object") return c.json({
+		if (!body || !sessionKey) return c.json({
 			ok: false,
 			error: {
 				code: "BAD_REQUEST",
-				message: "Invalid JSON body"
+				message: "Invalid request"
 			}
 		}, 400);
-		const sessionKey = typeof body.sessionKey === "string" ? body.sessionKey.trim() : "";
-		const message = typeof body.message === "string" ? body.message : "";
-		if (!sessionKey) return c.json({
+		const attachments = Array.isArray(body.attachments) ? body.attachments : void 0;
+		const content = typeof body.content === "string" ? body.content : "";
+		const contentError = validateWebchatContent(content);
+		if (contentError) return c.json({
 			ok: false,
 			error: {
 				code: "BAD_REQUEST",
-				message: "Missing sessionKey"
+				message: contentError
+			}
+		}, 400);
+		const attachmentError = validateWebchatAttachments(attachments);
+		if (attachmentError) return c.json({
+			ok: false,
+			error: {
+				code: "BAD_REQUEST",
+				message: attachmentError
+			}
+		}, 400);
+		const delivery = body.delivery === "next" || body.delivery === "steer" ? body.delivery : null;
+		if (!delivery) return c.json({
+			ok: false,
+			error: {
+				code: "BAD_REQUEST",
+				message: "Missing delivery"
 			}
 		}, 400);
-		const result = await service.steerWebchatAgent(sessionKey, message);
-		if (result.ok === false) {
-			logRouteWarn(log, c, `Agent steer failed: ${result.code}`, "gateway.route.agent", {
-				sessionKey,
-				code: result.code
-			});
-			const code = result.code;
-			const status = code === "BAD_REQUEST" ? 400 : code === "NO_ACTIVE_RUN" ? 409 : 500;
-			const msg = code === "NO_ACTIVE_RUN" ? "No active agent run for this session" : code === "STEER_FAILED" ? "Steer failed" : "Message required";
-			return c.json({
+		const result = await service.submitSessionInput({
+			sessionKey,
+			clientMessageId: typeof body.clientMessageId === "string" ? body.clientMessageId : "",
+			delivery,
+			content,
+			attachments,
+			thinking: typeof body.thinking === "string" ? body.thinking : void 0
+		});
+		if (result.ok === false) return c.json({
+			ok: false,
+			error: {
+				code: result.code,
+				message: "Input was not accepted"
+			}
+		}, result.code === "QUEUE_FULL" ? 409 : 400);
+		return c.json({
+			ok: true,
+			payload: result
+		}, 202);
+	});
+	authenticated.patch("/api/sessions/:sessionKey/inputs/:inputId", chatRateLimitMiddleware, async (c) => {
+		const sessionKey = (c.req.param("sessionKey") ?? "").trim();
+		const inputId = c.req.param("inputId")?.trim() ?? "";
+		const body = await c.req.json().catch(() => null);
+		if (!body || typeof body.version !== "number") return c.json({
+			ok: false,
+			error: {
+				code: "BAD_REQUEST",
+				message: "Missing version"
+			}
+		}, 400);
+		const attachments = Array.isArray(body.attachments) ? body.attachments : void 0;
+		if (body.content !== void 0) {
+			const contentError = validateWebchatContent(body.content);
+			if (contentError) return c.json({
 				ok: false,
 				error: {
-					code,
-					message: msg
+					code: "BAD_REQUEST",
+					message: contentError
 				}
-			}, status);
+			}, 400);
 		}
-		return c.json({
-			ok: true,
-			payload: { steered: true }
+		const attachmentError = validateWebchatAttachments(attachments);
+		if (attachmentError) return c.json({
+			ok: false,
+			error: {
+				code: "BAD_REQUEST",
+				message: attachmentError
+			}
+		}, 400);
+		const result = await service.updateSessionInput(sessionKey, inputId, {
+			version: body.version,
+			content: typeof body.content === "string" ? body.content : void 0,
+			attachments,
+			thinking: typeof body.thinking === "string" ? body.thinking : void 0,
+			position: typeof body.position === "number" ? body.position : void 0
 		});
+		return result.ok ? c.json({
+			ok: true,
+			payload: result.state
+		}) : c.json({
+			ok: false,
+			error: {
+				code: "CONFLICT",
+				message: "Input changed"
+			},
+			payload: result.state
+		}, 409);
+	});
+	authenticated.delete("/api/sessions/:sessionKey/inputs/:inputId", chatRateLimitMiddleware, (c) => {
+		const sessionKey = (c.req.param("sessionKey") ?? "").trim();
+		const inputId = c.req.param("inputId")?.trim() ?? "";
+		const version = Number(c.req.query("version"));
+		if (!Number.isFinite(version)) return c.json({
+			ok: false,
+			error: {
+				code: "BAD_REQUEST",
+				message: "Missing version"
+			}
+		}, 400);
+		const result = service.removeSessionInput(sessionKey, inputId, version);
+		return result.ok ? c.json({
+			ok: true,
+			payload: result.state
+		}) : c.json({
+			ok: false,
+			error: {
+				code: "CONFLICT",
+				message: "Input changed"
+			},
+			payload: result.state
+		}, 409);
 	});
-	authenticated.post("/api/clarify/:requestId", strictRateLimitMiddleware, async (c) => {
+	authenticated.post("/api/clarify/:requestId", chatRateLimitMiddleware, async (c) => {
 		const requestId = c.req.param("requestId")?.trim() ?? "";
 		if (!requestId) return c.json({
 			ok: false,
@@ -94,7 +195,7 @@ function registerAgentStreamRoutes(authenticated, deps) {
 			payload: { received: true }
 		});
 	});
-	authenticated.post("/api/send", strictRateLimitMiddleware, createSendHandler(sseConfig));
+	authenticated.post("/api/send", chatRateLimitMiddleware, createSendHandler(sseConfig));
 	authenticated.get("/api/events", createEventsSSEHandler(sseConfig));
 }
 //#endregion

package/dist/src/gateway/hono/routes/capability-presets.js

@@ -1,6 +1,6 @@
 import { CapabilityPresetSchema, init_schema } from "../../../agent-manifest/schema.js";
 import { init_agent_scope, normalizeAgentId } from "../../../agent/agent-scope.js";
-import { listCapabilityPresets, prepareCreateCapabilityPreset, prepareDeleteCapabilityPreset, prepareUpdateCapabilityPreset } from "../../capability-presets-admin.js";
+import { listCapabilityPresets, prepareCreateCapabilityPreset, prepareDeleteCapabilityPreset, prepareUpdateCapabilityPreset, previewCapabilityPresetUpdate } from "../../capability-presets-admin.js";
 //#region src/gateway/hono/routes/capability-presets.ts
 init_schema();
 init_agent_scope();
@@ -139,6 +139,32 @@ function registerCapabilityPresetsRoutes(authenticated, deps) {
 			payload: listCapabilityPresets(service.currentConfig)
 		});
 	});
+	authenticated.post("/api/capability-presets/:id/preview", strictRateLimitMiddleware, async (c) => {
+		const id = normalizeAgentId(c.req.param("id") ?? "");
+		let raw;
+		try {
+			raw = await c.req.json();
+		} catch {
+			return c.json({
+				ok: false,
+				error: { message: "Invalid JSON" }
+			}, 400);
+		}
+		const body = parseUpdateBody(raw);
+		if (isParseError(body)) return c.json({
+			ok: false,
+			error: { message: body.error }
+		}, 400);
+		const preview = previewCapabilityPresetUpdate(service.currentConfig, id, body);
+		if (preview.ok === false) return c.json({
+			ok: false,
+			error: { message: preview.error }
+		}, preview.status ?? 400);
+		return c.json({
+			ok: true,
+			payload: preview.data
+		});
+	});
 	authenticated.delete("/api/capability-presets/:id", strictRateLimitMiddleware, async (c) => {
 		const id = normalizeAgentId(c.req.param("id") ?? "");
 		const prep = prepareDeleteCapabilityPreset(service.currentConfig, id);

package/dist/src/gateway/hono/routes/composer-history.js

@@ -6,7 +6,7 @@ function registerComposerHistoryRoutes(authenticated, deps) {
 	authenticated.get("/api/composer-history", (c) => {
 		return c.json({ items: listComposerInputHistory() });
 	});
-	authenticated.post("/api/composer-history", deps.strictRateLimitMiddleware, async (c) => {
+	authenticated.post("/api/composer-history", deps.chatRateLimitMiddleware, async (c) => {
 		const body = await c.req.json().catch(() => null);
 		const text = body && typeof body === "object" && typeof body.text === "string" ? body.text.trim() : "";
 		if (!text) return c.json({ error: "text is required" }, 400);

package/dist/src/gateway/hono/routes/config-patch/misc.d.ts

@@ -1,6 +1,6 @@
 /**
  * `PATCH /api/config` — tail sections that are each <50 lines:
- *   update / goals / session / gateway.{skillsMarketplaceProvider,
+ *   update / session / gateway.{skillsMarketplaceProvider,
  *   skillsStoreBaseUrl} / providers / providersConfig / stt / tts / tools /
  *   userContext.memory.retention.compaction / tunnel / bindings / mcp.
  *

package/dist/src/gateway/hono/routes/config-patch/misc.js

@@ -4,7 +4,7 @@ import { CredentialResolver, init_credentials } from "../../../../auth/credentia
 import { setTuiDefaultAgentConfig } from "../../../../commands/agents.config.js";
 import { mergeTunnelConfigPatch } from "../../../../tunnel/tunnel-config.js";
 import { canonicalizeConfiguredMcpServer } from "../../../../config/mcp-config-normalize.js";
-import { mergeGatewaySkillsMarketplacePatch, mergeGoalsConfigPatch, mergeSessionConfigPatch, mergeUpdateConfigPatch } from "../../../../config/web-patch.js";
+import { mergeGatewaySkillsMarketplacePatch, mergeSessionConfigPatch, mergeUpdateConfigPatch } from "../../../../config/web-patch.js";
 import { assertGatewayAuthConfigured, resolveGatewayAuth } from "../../../auth.js";
 import { isMaskedSecretPatchValue } from "../../lib/mask-secret-length.js";
 import { applyToolsWebPatch } from "../../../config-tools-web.js";
@@ -20,11 +20,6 @@ async function applyMiscPatch(config, body) {
 		const updateResult = mergeUpdateConfigPatch(config, body.update);
 		if (updateResult.ok === false) return patchError(updateResult.message);
 	}
-	if (body.goals !== void 0) {
-		if (typeof body.goals !== "object" || body.goals === null || Array.isArray(body.goals)) return patchError("goals must be an object");
-		const goalsResult = mergeGoalsConfigPatch(config, body.goals);
-		if (goalsResult.ok === false) return patchError(goalsResult.message);
-	}
 	if (body.session !== void 0) {
 		if (typeof body.session !== "object" || body.session === null || Array.isArray(body.session)) return patchError("session must be an object");
 		const sessionResult = mergeSessionConfigPatch(config, body.session);

package/dist/src/gateway/hono/routes/connectors.js

@@ -1,9 +1,11 @@
 import { listConnectorLearningJobs } from "../../../storage/sqlite/connector-learning-repository.js";
 import { decideConnectorApproval, getConnectorApproval, listConnectorApprovals, listConnectorConnections } from "../../../storage/sqlite/connector-repository.js";
+import { getConnectorAccount } from "../../../storage/sqlite/connector-account-repository.js";
 import { getConnectorSyncPolicy, upsertConnectorSyncPolicy } from "../../../storage/sqlite/connector-sync-policy-repository.js";
 import "../../../storage/sqlite/index.js";
 import { init_agent_scope, resolveDefaultAgentId } from "../../../agent/agent-scope.js";
 import { resolveComposioApiKey } from "../../../connectors/composio-sessions.js";
+import { getConnectorLearningPlan } from "../../../connectors/learning-recipes.js";
 import { listComposioConnectorCatalog } from "../../../connectors/composio-catalog.js";
 import { createConnectorSetupSecretRequest, submitConnectorSetupSecret } from "../../../connectors/setup-secrets.js";
 import { configureComposioApiKey, executeComposioTool, getComposioInstallationPolicy, getComposioToolkitScope, inspectComposioConnectorHealth, listComposioConnections, listComposioTools, refreshComposioConnection, revokeComposioConnection, setComposioToolkitScope, updateComposioConnection, updateComposioInstallationPolicy } from "../../../connectors/composio.js";
@@ -19,7 +21,6 @@ import { buildConnectedPeopleGraph } from "../../../knowledge/people-graph.js";
 import "../../../knowledge/index.js";
 import { ingestLocalFolderSource } from "../../../connectors/connected-source-ingestion.js";
 import { previewConnectorDefinition, testConnectorInstance } from "../../../connectors/health.js";
-import { getConnectorLearningPlan } from "../../../connectors/learning-recipes.js";
 import { setConnectorEnabled } from "../../../connectors/lifecycle.js";
 import { projectComposioConnectionStatus } from "../../../connectors/runtime-status.js";
 //#region src/gateway/hono/routes/connectors.ts
@@ -98,33 +99,31 @@ function registerConnectorRoutes(authenticated, deps) {
 			payload: { jobs: listConnectorLearningJobs({ limit: 100 }) }
 		});
 	});
-	authenticated.get("/api/connectors/composio/connections/:id/sync-policy", (c) => {
-		const connection = listConnectorConnections({ principalId: "local-owner" }).find((item) => item.id === c.req.param("id"));
-		if (!connection) return c.json({
+	authenticated.get("/api/connectors/composio/accounts/:id/sync-policy", (c) => {
+		const account = getConnectorAccount(c.req.param("id"));
+		if (!account || account.principalId !== "local-owner") return c.json({
 			ok: false,
-			error: "Connector connection not found."
+			error: "Connector account not found."
 		}, 404);
-		const defaultInterval = defaultConnectorSyncInterval(connection.connectorId);
-		const policy = getConnectorSyncPolicy(connection.id) ?? {
-			connectionId: connection.id,
+		const policy = getConnectorSyncPolicy(account.id) ?? {
+			accountId: account.id,
 			scanEnabled: true,
 			proactiveEnabled: false,
-			intervalMinutes: defaultInterval,
+			intervalMinutes: defaultConnectorSyncInterval(account.connectorId),
 			allowedScenarioKeys: [],
 			revision: 0,
-			updatedAt: connection.updatedAt
+			updatedAt: account.updatedAt
 		};
 		return c.json({
 			ok: true,
 			payload: { policy }
 		});
 	});
-	authenticated.patch("/api/connectors/composio/connections/:id/sync-policy", strictRateLimitMiddleware, async (c) => {
-		const connectionId = c.req.param("id");
-		const connection = listConnectorConnections({ principalId: "local-owner" }).find((item) => item.id === connectionId);
-		if (!connection) return c.json({
+	authenticated.patch("/api/connectors/composio/accounts/:id/sync-policy", strictRateLimitMiddleware, async (c) => {
+		const account = getConnectorAccount(c.req.param("id"));
+		if (!account || account.principalId !== "local-owner") return c.json({
 			ok: false,
-			error: "Connector connection not found."
+			error: "Connector account not found."
 		}, 404);
 		const body = await c.req.json().catch(() => ({}));
 		const row = body && typeof body === "object" && !Array.isArray(body) ? body : {};
@@ -150,17 +149,18 @@ function registerConnectorRoutes(authenticated, deps) {
 			ok: false,
 			error: "allowedScenarioKeys contains an unknown scenario."
 		}, 400);
-		const previous = getConnectorSyncPolicy(connectionId);
+		const previous = getConnectorSyncPolicy(account.id);
 		const policy = upsertConnectorSyncPolicy({
-			connectionId,
-			defaultIntervalMinutes: defaultConnectorSyncInterval(connection.connectorId),
+			accountId: account.id,
+			defaultIntervalMinutes: defaultConnectorSyncInterval(account.connectorId),
 			...typeof row.scanEnabled === "boolean" ? { scanEnabled: row.scanEnabled } : {},
 			...typeof row.proactiveEnabled === "boolean" ? { proactiveEnabled: row.proactiveEnabled } : {},
 			...typeof row.intervalMinutes === "number" ? { intervalMinutes: row.intervalMinutes } : {},
 			...allowedScenarioKeys ? { allowedScenarioKeys } : {}
 		});
-		if (!policy.scanEnabled) service.setConnectorLearningPaused(connectionId, true);
-		else if (previous?.scanEnabled === false) {
+		const connectionId = account.currentConnectionId;
+		if (connectionId && !policy.scanEnabled) service.setConnectorLearningPaused(connectionId, true);
+		else if (connectionId && previous?.scanEnabled === false) {
 			if (service.setConnectorLearningPaused(connectionId, false) === 0) service.requestConnectorLearning(connectionId, {
 				mode: "incremental",
 				reason: "schedule"
@@ -171,9 +171,14 @@ function registerConnectorRoutes(authenticated, deps) {
 			payload: { policy }
 		});
 	});
-	authenticated.post("/api/connectors/composio/connections/:id/learning", strictRateLimitMiddleware, async (c) => {
+	authenticated.post("/api/connectors/composio/accounts/:id/learning", strictRateLimitMiddleware, async (c) => {
 		try {
 			await listComposioConnections();
+			const account = getConnectorAccount(c.req.param("id"));
+			if (!account || account.principalId !== "local-owner" || !account.currentConnectionId) return c.json({
+				ok: false,
+				error: "Connector account has no usable authorization."
+			}, 409);
 			const config = service.currentConfig;
 			if (!config.userContext.memory.sources.includes("connectedSources")) {
 				config.userContext.memory.sources = [...config.userContext.memory.sources, "connectedSources"];
@@ -183,10 +188,10 @@ function registerConnectorRoutes(authenticated, deps) {
 					error: saved.error
 				}, 500);
 			}
-			const job = service.requestConnectorLearning(c.req.param("id"), { reason: "manual" });
+			const job = service.requestConnectorLearning(account.currentConnectionId, { reason: "manual" });
 			if (!job) return c.json({
 				ok: false,
-				error: "The connection is not active or does not support learning."
+				error: "The account is not active or does not support learning."
 			}, 409);
 			return c.json({
 				ok: true,
@@ -199,15 +204,17 @@ function registerConnectorRoutes(authenticated, deps) {
 			}, 400);
 		}
 	});
-	authenticated.post("/api/connectors/composio/connections/:id/learning/pause", strictRateLimitMiddleware, (c) => {
-		const changed = service.setConnectorLearningPaused(c.req.param("id"), true);
+	authenticated.post("/api/connectors/composio/accounts/:id/learning/pause", strictRateLimitMiddleware, (c) => {
+		const account = getConnectorAccount(c.req.param("id"));
+		const changed = account?.currentConnectionId ? service.setConnectorLearningPaused(account.currentConnectionId, true) : 0;
 		return c.json({
 			ok: true,
 			payload: { changed }
 		});
 	});
-	authenticated.post("/api/connectors/composio/connections/:id/learning/resume", strictRateLimitMiddleware, (c) => {
-		const changed = service.setConnectorLearningPaused(c.req.param("id"), false);
+	authenticated.post("/api/connectors/composio/accounts/:id/learning/resume", strictRateLimitMiddleware, (c) => {
+		const account = getConnectorAccount(c.req.param("id"));
+		const changed = account?.currentConnectionId ? service.setConnectorLearningPaused(account.currentConnectionId, false) : 0;
 		return c.json({
 			ok: true,
 			payload: { changed }
@@ -248,9 +255,7 @@ function registerConnectorRoutes(authenticated, deps) {
 	});
 	authenticated.delete("/api/connectors/composio/connections/:id", strictRateLimitMiddleware, async (c) => {
 		try {
-			const connectionId = c.req.param("id");
-			await revokeComposioConnection(connectionId);
-			service.setConnectorLearningPaused(connectionId, true);
+			await revokeComposioConnection(c.req.param("id"));
 			return c.json({
 				ok: true,
 				payload: { revoked: true }

package/dist/src/gateway/hono/routes/deps.d.ts

@@ -4,6 +4,7 @@ import type { SSEHandlerConfig } from '../sse.js';
 export interface AuthenticatedRouteDeps {
     service: GatewayService;
     strictRateLimitMiddleware: MiddlewareHandler;
+    chatRateLimitMiddleware: MiddlewareHandler;
     xopcCloudPollRateLimitMiddleware: MiddlewareHandler;
     channelRateLimitMiddleware?: MiddlewareHandler;
     sseConfig: SSEHandlerConfig;

package/dist/src/gateway/hono/routes/discussions.js

@@ -1,5 +1,5 @@
-import { DiscussionServiceError } from "../../../discussions/service.js";
 import { DISCUSSION_STATUSES } from "../../../discussions/types.js";
+import { DiscussionServiceError } from "../../../discussions/service.js";
 import "../../../discussions/index.js";
 //#region src/gateway/hono/routes/discussions.ts
 function errorResponse(error) {
@@ -103,6 +103,16 @@ function registerDiscussionRoutes(authenticated, deps) {
 			throw error;
 		}
 	});
+	authenticated.patch("/api/discussions/:id/segments/:sequence", strictRateLimitMiddleware, async (c) => {
+		const body = await c.req.json().catch(() => ({}));
+		try {
+			return c.json(service.discussions.correctSegment(c.req.param("id"), Number.parseInt(c.req.param("sequence"), 10), typeof body.displayText === "string" ? body.displayText : "", Number(body.expectedRevision)));
+		} catch (error) {
+			const response = errorResponse(error);
+			if (response) return c.json(response.body, response.status);
+			throw error;
+		}
+	});
 	authenticated.put("/api/discussions/:id/recording", strictRateLimitMiddleware, async (c) => {
 		const body = await multipart(c);
 		if (!body) return c.json({ error: "Invalid multipart body" }, 400);
@@ -121,10 +131,10 @@ function registerDiscussionRoutes(authenticated, deps) {
 			throw error;
 		}
 	});
-	authenticated.post("/api/discussions/:id/finish", strictRateLimitMiddleware, async (c) => {
+	authenticated.post("/api/discussions/:id/stop", strictRateLimitMiddleware, async (c) => {
 		const body = await c.req.json().catch(() => ({}));
 		try {
-			const detail = await service.discussions.finish(c.req.param("id"), Number(body.lastSequence), Number(body.durationMs));
+			const detail = await service.discussions.stop(c.req.param("id"), Number(body.lastSequence), Number(body.durationMs));
 			return detail ? c.json(detail) : c.json({ error: "Discussion not found" }, 404);
 		} catch (error) {
 			const response = errorResponse(error);

package/dist/src/gateway/hono/routes/home.d.ts

@@ -1,5 +1,5 @@
 import type { Hono } from 'hono';
 import type { AuthenticatedRouteDeps } from './deps.js';
-export { buildHomeBriefing } from '../../../work/home-query-service.js';
+export { buildHomeBriefing } from '../../../tasks/home-query-service.js';
 /** Register the unified work-home read model and its decision actions. */
 export declare function registerHomeRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void;

package/dist/src/gateway/hono/routes/home.js

@@ -2,12 +2,12 @@ import { acknowledgeHomeAttention } from "../../../storage/sqlite/home-attention
 import { decideConnectorApproval } from "../../../storage/sqlite/connector-repository.js";
 import "../../../storage/sqlite/index.js";
 import { listGatewayAgents } from "../../agents-admin.js";
-import { WorkHomeQueryService, buildHomeBriefing } from "../../../work/home-query-service.js";
+import { HomeQueryService, buildHomeBriefing } from "../../../tasks/home-query-service.js";
 //#region src/gateway/hono/routes/home.ts
 /** Register the unified work-home read model and its decision actions. */
 function registerHomeRoutes(authenticated, deps) {
 	const { service } = deps;
-	const home = new WorkHomeQueryService(service);
+	const home = new HomeQueryService(service);
 	authenticated.get("/api/home", async (c) => c.json(await home.getSnapshot(c.req.query("locale"))));
 	authenticated.post("/api/home/decisions/respond", deps.strictRateLimitMiddleware, async (c) => {
 		const body = await c.req.json().catch(() => ({}));

package/dist/src/gateway/hono/routes/index.js

@@ -8,12 +8,11 @@ import { registerProjectsRoutes } from "./projects.js";
 import { registerProjectSkillRoutes } from "./project-skills.js";
 import { registerSearchRoutes } from "./search.js";
 import { registerMobileRoutes } from "./mobile.js";
-import { registerExecutionReceiptRoutes } from "./execution-receipts.js";
 import { registerInteractionStateRoutes } from "./interaction-state.js";
 import { registerComposerHistoryRoutes } from "./composer-history.js";
 import { registerLocalAppsRoutes } from "./local-apps.js";
 import { registerWorkDiscoveryRoutes } from "./work-discovery.js";
-import { registerWorkRoutes } from "./work.js";
+import { registerTaskRoutes } from "./tasks.js";
 import { registerProactiveRoutes } from "./proactive.js";
 import { mountAppLazyRoutePrefixes, registerAuthenticatedLazyRouteFallback } from "./lazy-fallback.js";
 //#region src/gateway/hono/routes/index.ts
@@ -28,11 +27,10 @@ function registerCoreAuthenticatedRoutes(authenticated, deps) {
 	registerProjectSkillRoutes(authenticated, deps);
 	registerLocalAppsRoutes(authenticated, deps);
 	registerWorkDiscoveryRoutes(authenticated, deps);
-	registerWorkRoutes(authenticated, deps);
+	registerTaskRoutes(authenticated, deps);
 	registerProactiveRoutes(authenticated, deps);
 	registerSearchRoutes(authenticated, deps);
 	registerMobileRoutes(authenticated, deps);
-	registerExecutionReceiptRoutes(authenticated, deps);
 	registerInteractionStateRoutes(authenticated, deps);
 	registerComposerHistoryRoutes(authenticated, deps);
 }

package/dist/src/gateway/hono/routes/lazy-bundles.js

@@ -84,14 +84,6 @@ const AUTHENTICATED_LAZY_ROUTE_BUNDLES = [
 			} };
 		}
 	},
-	{
-		id: "dreaming",
-		match: (path) => startsWithAny(path, ["/api/dreaming"]),
-		load: async () => {
-			const { registerDreamingRoutes } = await import("./dreaming.js");
-			return { register: registerDreamingRoutes };
-		}
-	},
 	{
 		id: "image-generation",
 		match: (path) => startsWithAny(path, ["/api/image-generation"]) || /^\/api\/agents\/[^/]+\/image-generation(?:\/setup)?$/.test(path),
@@ -180,14 +172,6 @@ const AUTHENTICATED_LAZY_ROUTE_BUNDLES = [
 			return { register: registerAutomationRoutes };
 		}
 	},
-	{
-		id: "goals",
-		match: (path) => startsWithAny(path, ["/api/goals"]),
-		load: async () => {
-			const { registerGoalsRoutes } = await import("./goals.js");
-			return { register: registerGoalsRoutes };
-		}
-	},
 	{
 		id: "notes",
 		match: (path) => startsWithAny(path, ["/api/notes"]),

package/dist/src/gateway/hono/routes/media.js

@@ -1,12 +1,15 @@
+import { TaskRepository } from "../../../tasks/task-repository.js";
 import { parseMediaUri } from "../../../media/uri.js";
 import { mimeTypeFromMediaPath } from "../../../media/store.js";
 import { readMediaReference } from "../../../media/media-reference.js";
+import { TaskContextRepository } from "../../../tasks/task-context-repository.js";
 import { pendingTranscriptReferencesMediaUri } from "../../../agent/inbound/attachment-pipeline.js";
 import { messagesReferenceMediaUri } from "../../../media/session-references.js";
 import { createGatewayRouteLogger } from "../lib/route-logger.js";
 //#region src/gateway/hono/routes/media.ts
 const log = createGatewayRouteLogger("Media");
 function registerMediaRoutes(authenticated, deps) {
+	const tasks = new TaskRepository();
 	authenticated.get("/api/media/read", async (c) => {
 		const uriRaw = c.req.query("uri");
 		if (!uriRaw || typeof uriRaw !== "string") return c.json({
@@ -14,13 +17,16 @@ function registerMediaRoutes(authenticated, deps) {
 			error: { message: "Missing uri" }
 		}, 400);
 		const sessionKey = c.req.query("sessionKey");
-		if (!sessionKey || typeof sessionKey !== "string") return c.json({
+		const taskId = c.req.query("taskId");
+		if (!sessionKey && !taskId) return c.json({
 			ok: false,
-			error: { message: "Missing sessionKey" }
+			error: { message: "Missing media scope" }
 		}, 400);
 		try {
 			const parsed = parseMediaUri(uriRaw.trim());
-			if (!messagesReferenceMediaUri(await deps.service.sessionIndexInstance.loadMessages(sessionKey), parsed.uri) && !pendingTranscriptReferencesMediaUri(sessionKey, parsed.uri)) return c.json({
+			const sessionReferencesUri = sessionKey ? messagesReferenceMediaUri(await deps.service.sessionIndexInstance.loadMessages(sessionKey), parsed.uri) || pendingTranscriptReferencesMediaUri(sessionKey, parsed.uri) : false;
+			const taskReferencesUri = taskId && tasks.get(taskId) ? new TaskContextRepository().list(taskId).some((edge) => edge.targetKind === "file" && edge.targetId === parsed.uri) : false;
+			if (!sessionReferencesUri && !taskReferencesUri) return c.json({
 				ok: false,
 				error: { message: "Not found" }
 			}, 404);