@xopcai/xopc 0.0.189 → 0.0.191

package/dist/src/gateway/dreaming-automation-reconciler.js

@@ -1,100 +1,60 @@
-import { DREAMING_AUTOMATION_TAG, DREAMING_DEEP_AUTOMATION_NAME, DREAMING_LIGHT_AUTOMATION_NAME, DREAMING_LIGHT_SWEEP_TOKEN, DREAMING_REM_AUTOMATION_NAME, DREAMING_REM_SWEEP_TOKEN, DREAMING_SWEEP_TOKEN } from "../agent/memory/dreaming/constants.js";
-import { compileDreamingSchedule } from "../agent/memory/dreaming/schedule.js";
-import { resolveDreamingAgentScope } from "../agent/memory/dreaming/scope.js";
+import { init_agent_scope, normalizeAgentId, resolveAgentWorkspaceDir, resolveDefaultAgentId } from "../agent/agent-scope.js";
+import { USER_CONTEXT_CONSOLIDATION_AUTOMATION_ID, USER_CONTEXT_CONSOLIDATION_TOKEN, compileContextConsolidationCron, resolveContextConsolidationConfig } from "../user-context/consolidation.js";
 //#region src/gateway/dreaming-automation-reconciler.ts
-const DREAMING_AUTOMATIONS = [
-	{
-		phase: "light",
-		name: DREAMING_LIGHT_AUTOMATION_NAME,
-		token: DREAMING_LIGHT_SWEEP_TOKEN
-	},
-	{
-		phase: "deep",
-		name: DREAMING_DEEP_AUTOMATION_NAME,
-		token: DREAMING_SWEEP_TOKEN
-	},
-	{
-		phase: "rem",
-		name: DREAMING_REM_AUTOMATION_NAME,
-		token: DREAMING_REM_SWEEP_TOKEN
-	}
-];
-function phaseDescription(phase) {
-	return `${phase === "light" ? "Light sweep" : phase === "deep" ? "Deep promotion" : "REM pattern discovery"} for memory dreaming. ${DREAMING_AUTOMATION_TAG}`;
-}
-function buildTrigger(config, phase) {
-	const phaseConfig = config.phases[phase];
-	return {
+init_agent_scope();
+async function reconcileDreamingAutomations(params) {
+	const result = {
+		created: false,
+		updated: false,
+		disabled: false
+	};
+	const resolved = resolveContextConsolidationConfig(params.config);
+	const agentId = normalizeAgentId(resolveDefaultAgentId(params.config));
+	const workingDirectory = resolveAgentWorkspaceDir(params.config, agentId);
+	const trigger = {
 		kind: "schedule",
 		schedule: {
 			kind: "cron",
-			expr: compileDreamingSchedule(phaseConfig.schedule),
-			tz: config.timezone
+			expr: compileContextConsolidationCron(resolved.time),
+			tz: resolved.timezone
 		}
 	};
-}
-function dreamingAutomationId(phase) {
-	return `system-user-context-dreaming:${phase}`;
-}
-function buildAction(scope, token) {
-	return {
+	const action = {
 		kind: "agent",
-		agentId: scope.agentId,
-		instruction: token,
-		workingDirectory: scope.workspaceDir,
-		timeoutSeconds: 3600
+		agentId,
+		instruction: USER_CONTEXT_CONSOLIDATION_TOKEN,
+		workingDirectory,
+		timeoutSeconds: 300
 	};
-}
-function automationNeedsUpdate(current, next) {
-	return current.name !== next.name || current.description !== next.description || current.enabled !== next.enabled || JSON.stringify(current.trigger) !== JSON.stringify(next.trigger) || JSON.stringify(current.action) !== JSON.stringify(next.action) || current.safety?.mode !== "auto_apply" || current.afterRun?.kind !== "none" || current.reliability?.disableAfterConsecutiveFailures !== 3;
-}
-async function reconcileDreamingAutomations(params) {
-	const { config, automationService } = params;
-	const result = {
-		created: [],
-		updated: [],
-		disabled: []
-	};
-	const scope = resolveDreamingAgentScope(config);
-	const resolved = scope.config;
-	for (const spec of DREAMING_AUTOMATIONS) {
-		const id = dreamingAutomationId(spec.phase);
-		const current = await automationService.get(id);
-		const enabled = resolved.enabled && resolved.phases[spec.phase].enabled;
-		if (!resolved.enabled) {
-			if (current?.enabled) {
-				await automationService.update(id, { enabled: false });
-				result.disabled.push(id);
-			}
-			continue;
-		}
-		const next = {
-			name: spec.name,
-			description: phaseDescription(spec.phase),
-			enabled,
-			trigger: buildTrigger(resolved, spec.phase),
-			action: buildAction(scope, spec.token)
-		};
-		if (!current) {
-			await automationService.create({
-				id,
-				...next,
-				safety: { mode: "auto_apply" },
-				afterRun: { kind: "none" },
-				reliability: { disableAfterConsecutiveFailures: 3 }
-			});
-			result.created.push(id);
-			continue;
-		}
-		if (automationNeedsUpdate(current, next)) {
-			await automationService.update(id, {
-				...next,
-				safety: { mode: "auto_apply" },
-				afterRun: { kind: "none" },
-				reliability: { disableAfterConsecutiveFailures: 3 }
-			});
-			result.updated.push(id);
+	const current = await params.automationService.get(USER_CONTEXT_CONSOLIDATION_AUTOMATION_ID);
+	if (!resolved.enabled) {
+		if (current?.enabled) {
+			await params.automationService.update(USER_CONTEXT_CONSOLIDATION_AUTOMATION_ID, { enabled: false });
+			result.disabled = true;
 		}
+		return result;
+	}
+	const next = {
+		name: "User context review",
+		description: "Deterministically review structured user understanding for expiry and sufficient evidence.",
+		enabled: true,
+		trigger,
+		action,
+		safety: { mode: "auto_apply" },
+		afterRun: { kind: "none" },
+		reliability: { disableAfterConsecutiveFailures: 3 }
+	};
+	if (!current) {
+		await params.automationService.create({
+			id: USER_CONTEXT_CONSOLIDATION_AUTOMATION_ID,
+			...next
+		});
+		result.created = true;
+		return result;
+	}
+	if (current.name !== next.name || current.description !== next.description || !current.enabled || JSON.stringify(current.trigger) !== JSON.stringify(trigger) || JSON.stringify(current.action) !== JSON.stringify(action) || current.safety?.mode !== "auto_apply" || current.afterRun?.kind !== "none" || current.reliability?.disableAfterConsecutiveFailures !== 3) {
+		await params.automationService.update(USER_CONTEXT_CONSOLIDATION_AUTOMATION_ID, next);
+		result.updated = true;
 	}
 	return result;
 }

package/dist/src/gateway/hono/lib/config-payload.d.ts

@@ -66,7 +66,7 @@ export declare function buildSafeWebConfigPayload(service: GatewayService, optio
             };
             tools: {
                 builtin?: Record<string, {
-                    mode: "allow" | "confirm" | "deny";
+                    mode: "allow" | "deny" | "confirm";
                     scope?: "workspace" | "readonly" | "unrestricted";
                     limits?: {
                         maxCallsPerTurn?: number;
@@ -75,7 +75,7 @@ export declare function buildSafeWebConfigPayload(service: GatewayService, optio
                 }>;
                 mcp?: {
                     servers?: Record<string, {
-                        mode: "allow" | "confirm" | "deny";
+                        mode: "allow" | "deny" | "confirm";
                         scope?: "workspace" | "readonly" | "unrestricted";
                         limits?: {
                             maxCallsPerTurn?: number;
@@ -83,7 +83,7 @@ export declare function buildSafeWebConfigPayload(service: GatewayService, optio
                         };
                     }>;
                     tools?: Record<string, {
-                        mode: "allow" | "confirm" | "deny";
+                        mode: "allow" | "deny" | "confirm";
                         scope?: "workspace" | "readonly" | "unrestricted";
                         limits?: {
                             maxCallsPerTurn?: number;
@@ -143,7 +143,7 @@ export declare function buildSafeWebConfigPayload(service: GatewayService, optio
             };
             tools?: {
                 builtin?: Record<string, {
-                    mode: "allow" | "confirm" | "deny";
+                    mode: "allow" | "deny" | "confirm";
                     scope?: "workspace" | "readonly" | "unrestricted";
                     limits?: {
                         maxCallsPerTurn?: number;
@@ -152,7 +152,7 @@ export declare function buildSafeWebConfigPayload(service: GatewayService, optio
                 }>;
                 mcp?: {
                     servers?: Record<string, {
-                        mode: "allow" | "confirm" | "deny";
+                        mode: "allow" | "deny" | "confirm";
                         scope?: "workspace" | "readonly" | "unrestricted";
                         limits?: {
                             maxCallsPerTurn?: number;
@@ -160,7 +160,7 @@ export declare function buildSafeWebConfigPayload(service: GatewayService, optio
                         };
                     }>;
                     tools?: Record<string, {
-                        mode: "allow" | "confirm" | "deny";
+                        mode: "allow" | "deny" | "confirm";
                         scope?: "workspace" | "readonly" | "unrestricted";
                         limits?: {
                             maxCallsPerTurn?: number;
@@ -290,6 +290,18 @@ export declare function buildSafeWebConfigPayload(service: GatewayService, optio
         preferences: {
             responseLanguage: "auto" | "zh-CN" | "en";
         };
+        dreaming: {
+            mode: "off" | "review";
+            schedule: {
+                time: string;
+            };
+            minEvidenceSources: number;
+            limit: number;
+            timezone?: string;
+        };
+        privacy: {
+            sensitiveWritePolicy: "allow" | "deny" | "confirm";
+        };
         memory: {
             retention: {
                 compaction: {
@@ -345,7 +357,7 @@ export declare function buildSafeWebConfigPayload(service: GatewayService, optio
         language?: "en" | "zh";
         input?: {
             refinement?: {
-                mode: "off" | "light" | "custom" | "punctuation";
+                mode: "off" | "custom" | "punctuation" | "light";
                 model?: string;
                 customInstruction?: string;
             };

package/dist/src/gateway/hono/lib/config-payload.js

@@ -1,4 +1,4 @@
-import { ContextCompactionPolicySchema, init_config } from "../../../user-context/config.js";
+import { ContextCompactionPolicySchema, UserContextDreamingSchema, UserContextPrivacySchema, init_config } from "../../../user-context/config.js";
 import { init_agent_scope, listAgentEntries, normalizeAgentId, resolveDefaultAgentId } from "../../../agent/agent-scope.js";
 import { resolveModelsJsonPath } from "../../../config/paths.js";
 import { buildChannelCatalogForConfig, buildChannelCatalogFromSnapshot, getChannelSetupStatus, init_channel_catalog_service } from "../../../channels/catalog/channel-catalog-service.js";
@@ -178,6 +178,8 @@ async function buildSafeWebConfigPayload(service, options = {}) {
 		session: resolveSessionConfigForWeb(config),
 		userContext: {
 			preferences: config.userContext?.preferences ?? { responseLanguage: "auto" },
+			dreaming: UserContextDreamingSchema.parse(config.userContext?.dreaming),
+			privacy: UserContextPrivacySchema.parse(config.userContext?.privacy),
 			memory: { retention: { compaction: ContextCompactionPolicySchema.parse(config.userContext?.memory.retention?.compaction) } }
 		},
 		tui: { defaultAgent: config.tui?.defaultAgent ?? "coder" },

package/dist/src/gateway/hono/oauth-async.d.ts

@@ -8,6 +8,7 @@
 import { Hono } from 'hono';
 import type { GatewayService } from '../service.js';
 import { type OAuthCredentials } from '../../auth/oauth/types.js';
+export declare function refreshModelCatalogAfterOAuth(provider: string, service: Pick<GatewayService, 'getModelCatalogSync'>): Promise<void>;
 export declare function resolveOAuthLoginMethodPreference(params: {
     requestedMethod?: unknown;
     supportedMethods?: readonly string[];

package/dist/src/gateway/hono/oauth-async.js

@@ -17,6 +17,19 @@ init_registry();
 init_credentials();
 init_logger();
 const log = createLogger("OAuthAsync");
+async function refreshModelCatalogAfterOAuth(provider, service) {
+	if (provider !== "xopc-cloud") return;
+	try {
+		await service.getModelCatalogSync().refreshNow();
+	} catch (err) {
+		const errorMessage = err instanceof Error ? err.message : String(err);
+		log.warn({
+			err,
+			provider,
+			errorMessage
+		}, `OAuth completed, but the model catalog could not be refreshed: ${errorMessage}`);
+	}
+}
 /** User-facing message when undici/fetch fails (often DNS, firewall, or wrong machine for localhost callback). */
 function formatOAuthAsyncError(err) {
 	const base = err instanceof Error ? err.message : "OAuth login failed";
@@ -200,7 +213,7 @@ function createOAuthAsyncHandler(service) {
 /**
 * Run OAuth flow in background
 */
-async function runOAuthFlow(session, oauthProvider, _service) {
+async function runOAuthFlow(session, oauthProvider, service) {
 	const abortController = new AbortController();
 	session.abortController = abortController;
 	let manualCodePromise = null;
@@ -276,6 +289,8 @@ async function runOAuthFlow(session, oauthProvider, _service) {
 		const credentials = await oauthProvider.login(callbacks);
 		setOAuthCredentialsToCache(session.provider, credentials);
 		await new CredentialResolver().saveOAuthCredentials(session.provider, credentials);
+		session.message = session.provider === "xopc-cloud" ? "OAuth login successful. Syncing available models..." : "OAuth login successful";
+		await refreshModelCatalogAfterOAuth(session.provider, service);
 		session.status = "completed";
 		session.credentials = credentials;
 		session.message = "OAuth login successful";
@@ -313,4 +328,4 @@ function deleteOAuthCredentialsFromCache(provider) {
 	oauthCredentialsCache.delete(provider);
 }
 //#endregion
-export { createOAuthAsyncHandler, deleteOAuthCredentialsFromCache, getOAuthCredentialsFromCache, resolveOAuthLoginMethodPreference, setOAuthCredentialsToCache };
+export { createOAuthAsyncHandler, deleteOAuthCredentialsFromCache, getOAuthCredentialsFromCache, refreshModelCatalogAfterOAuth, resolveOAuthLoginMethodPreference, setOAuthCredentialsToCache };

package/dist/src/gateway/hono/routes/agents.js

@@ -1,7 +1,7 @@
 import { ToolPolicySetSchema, init_schema } from "../../../agent-manifest/schema.js";
 import { AgentModelsSchema, init_schema as init_schema$1 } from "../../../config/schema.js";
 import { init_agent_scope, normalizeAgentId } from "../../../agent/agent-scope.js";
-import { deleteAgentAvatarFile, finalizeCreateAgentDirs, getGatewayAgentEffectiveManifest, listAgentProfileFiles, listGatewayAgents, prepareCreateAgent, prepareDeleteAgent, prepareUpdateAgent, readAgentAvatarFile, readAgentProfileFile, readUserProfileFile, runAfterDeletePurge, writeAgentAvatarFromBase64, writeAgentProfileFile, writeUserProfileFile } from "../../agents-admin.js";
+import { deleteAgentAvatarFile, finalizeCreateAgentDirs, getGatewayAgentEffectiveManifest, listAgentProfileFiles, listGatewayAgents, prepareCreateAgent, prepareDeleteAgent, prepareUpdateAgent, readAgentAvatarFile, readAgentProfileFile, runAfterDeletePurge, writeAgentAvatarFromBase64, writeAgentProfileFile } from "../../agents-admin.js";
 import { getVoiceModelsConfig } from "../../../config/voice.js";
 //#region src/gateway/hono/routes/agents.ts
 init_schema$1();
@@ -89,38 +89,6 @@ function registerAgentsRoutes(authenticated, deps) {
 			payload
 		});
 	});
-	authenticated.get("/api/user-profile", async (c) => {
-		const res = await readUserProfileFile();
-		if (res.ok === false) return c.json({
-			ok: false,
-			error: { message: res.error }
-		}, res.status ?? 400);
-		return c.json({
-			ok: true,
-			payload: res.data
-		});
-	});
-	authenticated.put("/api/user-profile", strictRateLimitMiddleware, async (c) => {
-		let content = "";
-		try {
-			const body = await c.req.json();
-			content = typeof body.content === "string" ? body.content : "";
-		} catch {
-			return c.json({
-				ok: false,
-				error: { message: "Invalid JSON" }
-			}, 400);
-		}
-		const res = await writeUserProfileFile(content);
-		if (res.ok === false) return c.json({
-			ok: false,
-			error: { message: res.error }
-		}, res.status ?? 400);
-		return c.json({
-			ok: true,
-			payload: res.data
-		});
-	});
 	authenticated.post("/api/agents", strictRateLimitMiddleware, async (c) => {
 		let body = {};
 		try {

package/dist/src/gateway/hono/routes/config-patch/misc.js

@@ -1,4 +1,4 @@
-import { ContextCompactionPolicySchema, init_config } from "../../../../user-context/config.js";
+import { ContextCompactionPolicySchema, UserContextDreamingSchema, UserContextPrivacySchema, init_config } from "../../../../user-context/config.js";
 import { BindingsConfigSchema, BrowserConfigSchema, McpConfigSchema, VoiceConfigSchema, init_schema } from "../../../../config/schema.js";
 import { CredentialResolver, init_credentials } from "../../../../auth/credentials.js";
 import { canonicalizeConfiguredMcpServer } from "../../../../config/mcp-config-normalize.js";
@@ -28,6 +28,22 @@ async function applyMiscPatch(config, body) {
 	if (body.userContext !== void 0) {
 		if (typeof body.userContext !== "object" || body.userContext === null || Array.isArray(body.userContext)) return patchError("userContext must be an object");
 		const userContextPatch = body.userContext;
+		if (userContextPatch.dreaming !== void 0) {
+			const parsed = UserContextDreamingSchema.safeParse(userContextPatch.dreaming);
+			if (!parsed.success) return patchError(parsed.error.issues.map((issue) => issue.message).join("; "));
+			config.userContext = {
+				...config.userContext,
+				dreaming: parsed.data
+			};
+		}
+		if (userContextPatch.privacy !== void 0) {
+			const parsed = UserContextPrivacySchema.safeParse(userContextPatch.privacy);
+			if (!parsed.success) return patchError(parsed.error.issues.map((issue) => issue.message).join("; "));
+			config.userContext = {
+				...config.userContext,
+				privacy: parsed.data
+			};
+		}
 		if (userContextPatch.memory !== void 0) {
 			if (typeof userContextPatch.memory !== "object" || userContextPatch.memory === null || Array.isArray(userContextPatch.memory)) return patchError("userContext.memory must be an object");
 			const memoryPatch = userContextPatch.memory;

package/dist/src/gateway/hono/routes/connectors.js

@@ -11,6 +11,7 @@ import { createConnectorSetupSecretRequest, submitConnectorSetupSecret } from ".
 import { configureComposioApiKey, executeComposioTool, getComposioInstallationPolicy, getComposioToolkitScope, inspectComposioConnectorHealth, listComposioConnections, listComposioTools, refreshComposioConnection, revokeComposioConnection, setComposioToolkitScope, updateComposioConnection, updateComposioInstallationPolicy } from "../../../connectors/composio.js";
 import { listConnectorProviders } from "../../../connectors/providers.js";
 import { getConnectorDefinition, listConnectorCatalog } from "../../../connectors/catalog.js";
+import { listUnderstandingSourceGrants, revokeUnderstandingSourceGrant } from "../../../user-context/sources/repository.js";
 import { recordConnectorHealthUsage } from "../../../connectors/usage.js";
 import { getConnectorInstance, listConnectorInstances } from "../../../connectors/instances.js";
 import { installConnector, installConnectorDefinition, uninstallConnector, updateConnectorConfig } from "../../../connectors/install.js";
@@ -159,8 +160,11 @@ function registerConnectorRoutes(authenticated, deps) {
 			...allowedScenarioKeys ? { allowedScenarioKeys } : {}
 		});
 		const connectionId = account.currentConnectionId;
-		if (connectionId && !policy.scanEnabled) service.setConnectorLearningPaused(connectionId, true);
-		else if (connectionId && previous?.scanEnabled === false) {
+		if (connectionId && !policy.scanEnabled) {
+			service.setConnectorLearningPaused(connectionId, true);
+			const grant = listUnderstandingSourceGrants().find((item) => item.sourceKey === `connector-account:${account.id}`);
+			if (grant) revokeUnderstandingSourceGrant(grant.id);
+		} else if (connectionId && previous?.scanEnabled === false) {
 			if (service.setConnectorLearningPaused(connectionId, false) === 0) service.requestConnectorLearning(connectionId, {
 				mode: "incremental",
 				reason: "schedule"
@@ -179,15 +183,6 @@ function registerConnectorRoutes(authenticated, deps) {
 				ok: false,
 				error: "Connector account has no usable authorization."
 			}, 409);
-			const config = service.currentConfig;
-			if (!config.userContext.memory.sources.includes("connectedSources")) {
-				config.userContext.memory.sources = [...config.userContext.memory.sources, "connectedSources"];
-				const saved = await service.saveConfig(config);
-				if (!saved.saved) return c.json({
-					ok: false,
-					error: saved.error
-				}, 500);
-			}
 			const job = service.requestConnectorLearning(account.currentConnectionId, { reason: "manual" });
 			if (!job) return c.json({
 				ok: false,
@@ -255,7 +250,13 @@ function registerConnectorRoutes(authenticated, deps) {
 	});
 	authenticated.delete("/api/connectors/composio/connections/:id", strictRateLimitMiddleware, async (c) => {
 		try {
-			await revokeComposioConnection(c.req.param("id"));
+			const connectionId = c.req.param("id");
+			const connection = listConnectorConnections().find((item) => item.id === connectionId);
+			await revokeComposioConnection(connectionId);
+			if (connection?.accountId) {
+				const grant = listUnderstandingSourceGrants().find((item) => item.sourceKey === `connector-account:${connection.accountId}`);
+				if (grant) revokeUnderstandingSourceGrant(grant.id);
+			}
 			return c.json({
 				ok: true,
 				payload: { revoked: true }

package/dist/src/gateway/hono/routes/index.js

@@ -3,7 +3,6 @@ import { registerAgentStreamRoutes } from "./agent-stream.js";
 import { registerDiscussionRoutes } from "./discussions.js";
 import { registerSessionsRoutes } from "./sessions.js";
 import { registerStatusRoutes } from "./status.js";
-import { registerMemoryRoutes } from "./memory.js";
 import { registerProjectsRoutes } from "./projects.js";
 import { registerProjectSkillRoutes } from "./project-skills.js";
 import { registerSearchRoutes } from "./search.js";
@@ -14,6 +13,7 @@ import { registerEndpointToolRoutes } from "./endpoint-tools.js";
 import { registerRealtimeRoutes } from "./realtime.js";
 import { registerLocalAppsRoutes } from "./local-apps.js";
 import { registerWorkDiscoveryRoutes } from "./work-discovery.js";
+import { registerUnderstandingSourceRoutes } from "./understanding-sources.js";
 import { registerTaskRoutes } from "./tasks.js";
 import { registerProactiveRoutes } from "./proactive.js";
 import { mountAppLazyRoutePrefixes, registerAuthenticatedLazyRouteFallback } from "./lazy-fallback.js";
@@ -22,13 +22,13 @@ function registerCoreAuthenticatedRoutes(authenticated, deps) {
 	registerStatusRoutes(authenticated, deps);
 	registerAgentStreamRoutes(authenticated, deps);
 	registerSessionsRoutes(authenticated, deps);
-	registerMemoryRoutes(authenticated, deps);
 	registerActivityRoutes(authenticated, deps);
 	registerDiscussionRoutes(authenticated, deps);
 	registerProjectsRoutes(authenticated, deps);
 	registerProjectSkillRoutes(authenticated, deps);
 	registerLocalAppsRoutes(authenticated, deps);
 	registerWorkDiscoveryRoutes(authenticated, deps);
+	registerUnderstandingSourceRoutes(authenticated, deps);
 	registerTaskRoutes(authenticated, deps);
 	registerProactiveRoutes(authenticated, deps);
 	registerSearchRoutes(authenticated, deps);

package/dist/src/gateway/hono/routes/lazy-bundles.js

@@ -94,11 +94,7 @@ const AUTHENTICATED_LAZY_ROUTE_BUNDLES = [
 	},
 	{
 		id: "agents",
-		match: (path) => startsWithAny(path, [
-			"/api/agents",
-			"/api/user-profile",
-			"/api/voice/models"
-		]),
+		match: (path) => startsWithAny(path, ["/api/agents", "/api/voice/models"]),
 		load: async () => {
 			const { registerAgentsRoutes } = await import("./agents.js");
 			return { register: registerAgentsRoutes };

package/dist/src/gateway/hono/routes/local-apps.js

@@ -1,6 +1,6 @@
 import { readLocalAppAcceptanceConfig } from "../../../local-apps/acceptance.js";
-import { extensionAssetMimeType } from "../lib/extension-assets.js";
 import { LOCAL_APP_RUNTIME_BRIDGE_HASH, injectLocalAppRuntimeBridge } from "../../../local-apps/preview-runtime-bridge.js";
+import { extensionAssetMimeType } from "../lib/extension-assets.js";
 import { relative, resolve } from "node:path";
 import { existsSync, readFileSync, statSync } from "node:fs";
 //#region src/gateway/hono/routes/local-apps.ts

package/dist/src/gateway/hono/routes/models.js

@@ -7,7 +7,7 @@ import { CredentialResolver, init_credentials } from "../../../auth/credentials.
 import "../../../providers/constants.js";
 import { getProviderRegistry, init_plugin_registry } from "../../../providers/plugin-registry.js";
 import { PROVIDER_META, getAllModels, getAllProviders, getAvailableModels, getProviderAuthState, init_providers, isProviderConfigured } from "../../../providers/index.js";
-import { getImageGenerationProvider, reloadImageGenerationProviders } from "../../../agent/image/generation/provider-registry.js";
+import { getImageGenerationProvider, reloadImageGenerationProviders, resolveImageGenerationCredentialMode } from "../../../agent/image/generation/provider-registry.js";
 import { SessionConfigStore } from "../../../session/config-store.js";
 import { deleteCustomImageProvider, listCustomImageProviders, upsertCustomImageProvider } from "../../custom-image-providers.js";
 import { getDomesticProviderPreset, getDomesticProviderPresetIds } from "../../../providers/domestic-presets.js";
@@ -346,7 +346,7 @@ function registerModelsRoutes(authenticated, deps) {
 			ok: false,
 			error: { message: `Unknown image provider: ${providerId}` }
 		}, 404);
-		if (provider.credentialMode === "none") return c.json({
+		if (resolveImageGenerationCredentialMode(provider) !== "api-key") return c.json({
 			ok: false,
 			error: { message: "This provider does not use an API key" }
 		}, 400);
@@ -473,14 +473,15 @@ function registerModelsRoutes(authenticated, deps) {
 			error: { message: prepared.error }
 		}, 400);
 		const resolver = new CredentialResolver();
-		const previousKey = await resolver.revealGatewayStoredApiKey(prepared.providerId);
+		const usesApiKey = resolveImageGenerationCredentialMode(getImageGenerationProvider(prepared.providerId)) === "api-key";
+		const previousKey = usesApiKey ? await resolver.revealGatewayStoredApiKey(prepared.providerId) : void 0;
 		const suppliedKey = typeof body.apiKey === "string" ? body.apiKey.trim() : "";
-		const effectiveKey = suppliedKey || await resolver.resolveApiKey(prepared.providerId);
-		if (getImageGenerationProvider(prepared.providerId).credentialMode !== "none" && !effectiveKey) return c.json({
+		const effectiveKey = usesApiKey ? suppliedKey || await resolver.resolveApiKey(prepared.providerId) : void 0;
+		if (usesApiKey && !effectiveKey) return c.json({
 			ok: false,
 			error: { message: "API key is required" }
 		}, 400);
-		const verification = suppliedKey ? await verifyImageGenerationCredential({
+		const verification = usesApiKey && suppliedKey ? await verifyImageGenerationCredential({
 			providerId: prepared.providerId,
 			apiKey: suppliedKey,
 			baseUrl: typeof body.baseUrl === "string" ? body.baseUrl : void 0
@@ -492,10 +493,10 @@ function registerModelsRoutes(authenticated, deps) {
 			ok: false,
 			error: { message: verification.message ?? "Credential verification failed" }
 		}, 400);
-		if (suppliedKey) await resolver.saveApiKey(prepared.providerId, suppliedKey, { profileName: "default" });
+		if (usesApiKey && suppliedKey) await resolver.saveApiKey(prepared.providerId, suppliedKey, { profileName: "default" });
 		const saved = await service.saveConfig(prepared.config);
 		if (!saved.saved) {
-			if (suppliedKey) if (previousKey) await resolver.saveApiKey(prepared.providerId, previousKey, { profileName: "default" });
+			if (usesApiKey && suppliedKey) if (previousKey) await resolver.saveApiKey(prepared.providerId, previousKey, { profileName: "default" });
 			else await resolver.deleteProfile(`${prepared.providerId}:default`);
 			return c.json({
 				ok: false,

package/dist/src/gateway/hono/routes/status.js

@@ -34,7 +34,6 @@ function buildEvalRuntimeIdentity(service, agentId) {
 	const models = asRecord(manifest.models);
 	const tools = asRecord(manifest.tools);
 	const skills = manifest.skills ?? [];
-	const codeIntelligence = config.codeIntelligence;
 	return {
 		ok: true,
 		payload: {
@@ -48,12 +47,6 @@ function buildEvalRuntimeIdentity(service, agentId) {
 			systemPromptConfigHash: contentHash(manifest.systemPrompt ?? null),
 			toolPolicyHash: contentHash(tools),
 			skillPolicyHash: contentHash(skills),
-			codeIntelligence: {
-				enabled: codeIntelligence?.enabled === true,
-				configuredForAgent: codeIntelligence?.agentIds?.includes(agentId) === true,
-				indexMode: codeIntelligence?.indexMode ?? null,
-				configHash: contentHash(codeIntelligence ?? null)
-			},
 			presetChain: effective.data.sources
 		}
 	};

package/dist/src/gateway/hono/routes/understanding-sources.d.ts

@@ -0,0 +1,3 @@
+import type { Hono } from 'hono';
+import type { AuthenticatedRouteDeps } from './deps.js';
+export declare function registerUnderstandingSourceRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void;