@xopcai/xopc 0.0.211 → 0.0.213

package/dist/src/extensions/install.js

@@ -7,8 +7,9 @@ import { checkEngineCompatibility } from "./engine-check.js";
 import { collectExtensionPackageDependencyIssues } from "./package-contract.js";
 import { dirname, isAbsolute, join, resolve, sep } from "path";
 import { cpSync, existsSync, mkdirSync, mkdtempSync, readFileSync, readdirSync, rmSync, writeFileSync } from "fs";
-import { execSync } from "child_process";
+import { execFileSync } from "node:child_process";
 import AdmZip from "adm-zip";
+import semver from "semver";
 import { tmpdir } from "os";
 //#region src/extensions/install.ts
 /**
@@ -21,6 +22,58 @@ init_package_version();
 init_logger();
 const log = createLogger("ExtensionInstall");
 const NPM_INSTALL_ENV = process.env.XOPC_EXTENSION_NPM_INSTALL?.trim().toLowerCase();
+const NPM_INSTALL_SCRIPTS_ENV = process.env.XOPC_EXTENSION_NPM_INSTALL_SCRIPTS?.trim().toLowerCase();
+const ALLOW_NPM_INSTALL_SCRIPTS = [
+	"1",
+	"true",
+	"allow"
+].includes(NPM_INSTALL_SCRIPTS_ENV ?? "");
+const NPM_PACKAGE_PART_RE = /^(?![._])[a-z0-9][a-z0-9._~-]*$/;
+/** Accept registry package names with an optional exact semver; reject URLs, paths, tags, and ranges. */
+function validateNpmPackageSpec(packageSpec) {
+	if (!packageSpec || packageSpec !== packageSpec.trim() || /\s/.test(packageSpec)) return {
+		ok: false,
+		error: "npm package spec must not be empty or contain whitespace"
+	};
+	let packageName = packageSpec;
+	let version;
+	if (packageSpec.startsWith("@")) {
+		const slashIndex = packageSpec.indexOf("/");
+		const versionSeparator = packageSpec.lastIndexOf("@");
+		if (slashIndex <= 1) return {
+			ok: false,
+			error: "Invalid scoped npm package name"
+		};
+		if (versionSeparator > slashIndex) {
+			packageName = packageSpec.slice(0, versionSeparator);
+			version = packageSpec.slice(versionSeparator + 1);
+		}
+	} else {
+		const versionSeparator = packageSpec.lastIndexOf("@");
+		if (versionSeparator > 0) {
+			packageName = packageSpec.slice(0, versionSeparator);
+			version = packageSpec.slice(versionSeparator + 1);
+		}
+	}
+	if (packageName.length > 214) return {
+		ok: false,
+		error: "npm package name exceeds 214 characters"
+	};
+	const parts = packageName.startsWith("@") ? packageName.slice(1).split("/") : [packageName];
+	if (parts.length !== (packageName.startsWith("@") ? 2 : 1) || parts.some((part) => !NPM_PACKAGE_PART_RE.test(part))) return {
+		ok: false,
+		error: "Only npm registry package names are allowed (for example pkg or @scope/pkg)"
+	};
+	if (version !== void 0 && !semver.valid(version)) return {
+		ok: false,
+		error: "npm package versions must be exact semver values; tags and ranges are not allowed"
+	};
+	return {
+		ok: true,
+		packageName,
+		...version ? { version } : {}
+	};
+}
 function extractExecSyncOutput(error) {
 	if (!error || typeof error !== "object") return "";
 	const o = error;
@@ -41,8 +94,9 @@ function truncateOutput(text, max = 4500) {
 }
 /**
 * Install production `node_modules` for an unpacked extension (package.json dependencies).
-* Uses pnpm when `pnpm-lock.yaml` is present, otherwise npm. Set `XOPC_EXTENSION_NPM_INSTALL=skip`
-* to skip (extensions must ship runnable code or you install deps manually).
+* Uses pnpm when `pnpm-lock.yaml` is present, otherwise npm. Lifecycle scripts are disabled by
+* default; set `XOPC_EXTENSION_NPM_INSTALL_SCRIPTS=allow` only for a reviewed extension that needs
+* them. Set `XOPC_EXTENSION_NPM_INSTALL=skip` to skip dependency installation entirely.
 */
 function installExtensionProdDependencies(extensionDir) {
 	if (NPM_INSTALL_ENV === "skip" || NPM_INSTALL_ENV === "0" || NPM_INSTALL_ENV === "false") {
@@ -65,9 +119,9 @@ function installExtensionProdDependencies(extensionDir) {
 		env: process.env,
 		...process.platform === "win32" ? { shell: process.env.ComSpec && process.env.ComSpec.trim() || "cmd.exe" } : {}
 	};
-	const run = (label, command) => {
+	const run = (label, executable, args) => {
 		try {
-			execSync(command, execOpts);
+			execFileSync(executable, args, execOpts);
 			return { ok: true };
 		} catch (err) {
 			const out = truncateOutput(extractExecSyncOutput(err));
@@ -77,17 +131,38 @@ function installExtensionProdDependencies(extensionDir) {
 			};
 		}
 	};
-	if (existsSync(join(extensionDir, "pnpm-lock.yaml"))) {
-		const pnpm = run("pnpm", "pnpm install --prod --no-frozen-lockfile");
+	const usePnpm = existsSync(join(extensionDir, "pnpm-lock.yaml"));
+	const scriptArgs = ALLOW_NPM_INSTALL_SCRIPTS ? [] : ["--ignore-scripts"];
+	const npmExecutable = process.platform === "win32" ? "npm.cmd" : "npm";
+	const pnpmExecutable = process.platform === "win32" ? "pnpm.cmd" : "pnpm";
+	if (usePnpm) {
+		const pnpm = run("pnpm", pnpmExecutable, [
+			"install",
+			"--prod",
+			"--no-frozen-lockfile",
+			...scriptArgs
+		]);
 		if (pnpm.ok) return pnpm;
-		const npmFallback = run("npm", "npm install --omit=dev --no-audit --no-fund");
+		const npmFallback = run("npm", npmExecutable, [
+			"install",
+			"--omit=dev",
+			"--no-audit",
+			"--no-fund",
+			...scriptArgs
+		]);
 		if (npmFallback.ok) {
 			log.warn({ extensionDir }, "pnpm failed; extension dependencies installed with npm instead");
 			return { ok: true };
 		}
 		return npmFallback;
 	}
-	return run("npm", "npm install --omit=dev --no-audit --no-fund");
+	return run("npm", npmExecutable, [
+		"install",
+		"--omit=dev",
+		"--no-audit",
+		"--no-fund",
+		...scriptArgs
+	]);
 }
 function isSafeZipPath(name) {
 	if (!name) return false;
@@ -261,11 +336,20 @@ function resolveExtensionsDir(workspaceDir, global = false) {
 * Install extension from npm package
 */
 async function installFromNpm(packageSpec, extensionsDir, timeoutMs = 12e4) {
-	const tmpDir = join(tmpdir(), `xopc-install-${Date.now()}`);
+	const validation = validateNpmPackageSpec(packageSpec);
+	if (validation.ok === false) return {
+		ok: false,
+		error: `Invalid npm package spec: ${validation.error}`
+	};
+	const tmpDir = mkdtempSync(join(tmpdir(), "xopc-install-"));
 	try {
 		console.log(`📦 Downloading ${packageSpec} from npm...`);
-		mkdirSync(tmpDir, { recursive: true });
-		const packedFile = execSync(`npm pack ${packageSpec} --pack-destination ${tmpDir}`, {
+		const packedFile = execFileSync(process.platform === "win32" ? "npm.cmd" : "npm", [
+			"pack",
+			packageSpec,
+			"--pack-destination",
+			tmpDir
+		], {
 			timeout: timeoutMs,
 			encoding: "utf-8",
 			stdio: "pipe"
@@ -274,9 +358,22 @@ async function installFromNpm(packageSpec, extensionsDir, timeoutMs = 12e4) {
 			ok: false,
 			error: "Failed to download package from npm"
 		};
+		if (packedFile !== packedFile.split(/[\\/]/).pop() || !packedFile.endsWith(".tgz")) return {
+			ok: false,
+			error: "npm returned an invalid archive filename"
+		};
 		const archivePath = join(tmpDir, packedFile);
+		if (!existsSync(archivePath)) return {
+			ok: false,
+			error: "npm package archive was not created"
+		};
 		console.log(`📂 Extracting ${packedFile}...`);
-		execSync(`tar -xzf ${archivePath} -C ${tmpDir}`, {
+		execFileSync("tar", [
+			"-xzf",
+			archivePath,
+			"-C",
+			tmpDir
+		], {
 			timeout: 3e4,
 			stdio: "pipe"
 		});
@@ -532,4 +629,4 @@ function readManifest(extensionDir) {
 	}
 }
 //#endregion
-export { installExtensionFromStoreZip, installFromLocal, installFromNpm, listAllExtensions, peekExtensionIdFromStoreZip, peekExtensionManifestFromStoreZip, peekExtensionPackageJsonFromStoreZip, removeExtension, resolveExtensionsDir };
+export { installExtensionFromStoreZip, installFromLocal, installFromNpm, listAllExtensions, peekExtensionIdFromStoreZip, peekExtensionManifestFromStoreZip, peekExtensionPackageJsonFromStoreZip, removeExtension, resolveExtensionsDir, validateNpmPackageSpec };

package/dist/src/extensions/loader.js

@@ -290,13 +290,6 @@ var ExtensionLoader = class {
 	}
 	async loadExtension(config) {
 		try {
-			const cacheKey = this.cache.buildKey(this.options, [config.id]);
-			const cached = this.cache.get(cacheKey);
-			if (cached) {
-				log.debug({ extensionId: config.id }, "Extension loaded from cache");
-				return cached;
-			}
-			if (this.extensionInstances.has(config.id)) return this.extensionInstances.get(config.id);
 			let extensionPath;
 			if (isAbsolute(config.path)) extensionPath = config.path;
 			else extensionPath = resolveExtensionPath(config.path, this.options) || resolveExtensionPath(config.id, this.options);
@@ -314,19 +307,30 @@ var ExtensionLoader = class {
 			}, "Resolved extension path");
 			const source = config.source || "bundled";
 			const safetyResult = checkExtensionPathSafety(extensionPath, extensionPath, source);
-			if (!safetyResult.safe) {
+			if (this.securityConfig.checkPermissions && !safetyResult.safe) {
 				logSecurityIssue(config.id, safetyResult);
-				if (this.securityConfig.checkPermissions && source !== "bundled") {
-					if (!isExtensionAllowed(config.id, this.securityConfig)) {
-						this.diagnostics.error(config.id, `Extension not allowed: ${safetyResult.detail}`);
-						log.error({
-							extensionId: config.id,
-							reason: safetyResult.reason
-						}, "Extension blocked by security policy");
-						return null;
-					}
-				}
+				this.diagnostics.error(config.id, `Unsafe extension path: ${safetyResult.detail}`);
+				log.error({
+					extensionId: config.id,
+					reason: safetyResult.reason
+				}, "Extension blocked because its path is unsafe");
+				return null;
 			}
+			if (source !== "bundled" && !isExtensionAllowed(config.id, this.securityConfig)) {
+				this.diagnostics.error(config.id, "Extension is not present in extensions.security.allow");
+				log.error({
+					extensionId: config.id,
+					source
+				}, "Extension blocked because it is not trusted by security policy");
+				return null;
+			}
+			const cacheKey = this.cache.buildKey(this.options, [config.id]);
+			const cached = this.cache.get(cacheKey);
+			if (cached) {
+				log.debug({ extensionId: config.id }, "Extension loaded from cache");
+				return cached;
+			}
+			if (this.extensionInstances.has(config.id)) return this.extensionInstances.get(config.id);
 			provenanceTracker.track(config.id, source);
 			const manifest = this.loadManifest(extensionPath);
 			if (!manifest) {

package/dist/src/gateway/agents-admin.js

@@ -1,5 +1,5 @@
-import { init_agent_scope, listAgentEntries, normalizeAgentId, resolveAgentDir, resolveAgentProfileDir, resolveAgentWorkspaceDir, resolveDefaultAgentId, resolveUserPath, validateAgentIdForNewAgent } from "../agent/agent-scope.js";
 import { resolveCapabilityPresetLayer, resolveEffectiveAgentManifest } from "../agent-manifest/resolver.js";
+import { init_agent_scope, listAgentEntries, normalizeAgentId, resolveAgentDir, resolveAgentProfileDir, resolveAgentWorkspaceDir, resolveDefaultAgentId, resolveUserPath, validateAgentIdForNewAgent } from "../agent/agent-scope.js";
 import { resolveEffectiveAgentProfile } from "../config/agent-profile.js";
 import { WORKSPACE_FILES, init_paths } from "../config/paths.js";
 import { AGENT_PROFILE_MARKDOWN_SYSTEM_FILES, REQUIRED_AGENT_PROFILE_MARKDOWN_FILE_SET } from "../agent/context/workspace.js";

package/dist/src/gateway/heartbeat/service.js

@@ -1,9 +1,9 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
 import { shouldSilence, stripHeartbeatToken } from "../../heartbeat/tokens.js";
+import { appendCronEventLines } from "../../heartbeat/event-prompt.js";
 import { isWithinActiveHours } from "../../heartbeat/active-hours.js";
 import { isHeartbeatContentEmpty } from "../../heartbeat/content-check.js";
-import { appendCronEventLines } from "../../heartbeat/event-prompt.js";
 import { createHeartbeatWake } from "../../heartbeat/wake.js";
 import { resolveHeartbeatMdPath } from "../workspace-heartbeat-path.js";
 import { readFile } from "fs/promises";

package/dist/src/gateway/hono/lib/config-payload.js

@@ -8,10 +8,10 @@ import { getProviderRegistry, init_plugin_registry } from "../../../providers/pl
 import { getAllProviders, init_providers, isProviderConfigured } from "../../../providers/index.js";
 import { normalizeConfiguredMcpServers } from "../../../config/mcp-config-normalize.js";
 import { resolveShareConfig } from "../../../share/share-config.js";
-import { maskTunnelSecretForWeb } from "../../../tunnel/env.js";
 import { resolveSessionConfigForWeb, resolveUpdateConfigForWeb } from "../../../config/web-patch.js";
 import { GENERIC_MASKED_SECRET, maskSecretLength } from "./mask-secret-length.js";
 import { safeToolsWebForGet } from "../../config-tools-web.js";
+import { maskTunnelSecretForWeb } from "../../../tunnel/env.js";
 import { buildSafeProvidersConfigForWeb } from "./safe-providers-config.js";
 import { maskSttConfigForWeb, maskTtsConfigForWeb } from "./safe-voice-config.js";
 //#region src/gateway/hono/lib/config-payload.ts

package/dist/src/gateway/hono/middleware/auth.js

@@ -1,13 +1,13 @@
 import { logAuthEvent } from "../../../utils/logger/audit.js";
 import { createLogger } from "../../../utils/logger/index.js";
 import { init_logger } from "../../../utils/logger.js";
+import { safeEqualSecret } from "../../security/secret-equal.js";
+import { resolveClientIpFromRequest } from "../../client-ip.js";
 import { authPolicyConfig, buckets, resolveAuthRateLimit } from "../../rate-limit/buckets.js";
 import { getClientIpFromHeaders } from "../../security/loopback.js";
 import { resolveAuthTracking } from "../../rate-limit/auth-policy.js";
 import { isAuthRateLimitGloballyDisabled } from "../../rate-limit/env-flags.js";
 import "../../rate-limit/index.js";
-import { safeEqualSecret } from "../../security/secret-equal.js";
-import { resolveClientIpFromRequest } from "../../client-ip.js";
 import { authorizeTrustedProxy } from "../../trusted-proxy.js";
 import { createMiddleware } from "hono/factory";
 import { getConnInfo } from "@hono/node-server/conninfo";

package/dist/src/gateway/hono/middleware/logger.js

@@ -1,7 +1,7 @@
 import { createLogger } from "../../../utils/logger/index.js";
 import { init_logger } from "../../../utils/logger.js";
-import { getClientIpFromHeaders } from "../../security/loopback.js";
 import { resolveClientIpFromRequest } from "../../client-ip.js";
+import { getClientIpFromHeaders } from "../../security/loopback.js";
 import { createMiddleware } from "hono/factory";
 import { getConnInfo } from "@hono/node-server/conninfo";
 //#region src/gateway/hono/middleware/logger.ts

package/dist/src/gateway/hono/middleware/strict-rate-limit.js

@@ -1,9 +1,9 @@
 import { createLogger } from "../../../utils/logger/index.js";
 import { init_logger } from "../../../utils/logger.js";
+import { resolveClientIpFromRequest } from "../../client-ip.js";
 import { buckets } from "../../rate-limit/buckets.js";
 import { getClientIpFromHeaders } from "../../security/loopback.js";
 import "../../rate-limit/index.js";
-import { resolveClientIpFromRequest } from "../../client-ip.js";
 import { createMiddleware } from "hono/factory";
 import { getConnInfo } from "@hono/node-server/conninfo";
 //#region src/gateway/hono/middleware/strict-rate-limit.ts

package/dist/src/gateway/hono/routes/config-patch/misc.js

@@ -3,11 +3,11 @@ import { BindingsConfigSchema, BrowserConfigSchema, McpConfigSchema, VoiceConfig
 import { CredentialResolver, init_credentials } from "../../../../auth/credentials.js";
 import { canonicalizeConfiguredMcpServer } from "../../../../config/mcp-config-normalize.js";
 import { setTuiDefaultAgentConfig } from "../../../../commands/agents.config.js";
-import { mergeTunnelConfigPatch } from "../../../../tunnel/tunnel-config.js";
 import { mergeGatewaySkillsMarketplacePatch, mergeSessionConfigPatch, mergeUpdateConfigPatch } from "../../../../config/web-patch.js";
 import { assertGatewayAuthConfigured, resolveGatewayAuth } from "../../../auth.js";
 import { isMaskedSecretPatchValue } from "../../lib/mask-secret-length.js";
 import { applyToolsWebPatch } from "../../../config-tools-web.js";
+import { mergeTunnelConfigPatch } from "../../../../tunnel/tunnel-config.js";
 import { assertGatewayRuntimeConfig } from "../../../runtime-config.js";
 import { mergeSttConfigPatch, mergeTtsConfigPatch } from "../../lib/safe-voice-config.js";
 import { PATCH_OK, patchError } from "./result.js";

package/dist/src/gateway/hono/routes/connectors.js

@@ -14,14 +14,15 @@ import { getConnectorDefinition, listConnectorCatalog } from "../../../connector
 import { listUnderstandingSourceGrants, revokeUnderstandingSourceGrant } from "../../../user-context/sources/repository.js";
 import { recordConnectorHealthUsage } from "../../../connectors/usage.js";
 import { getConnectorInstance, listConnectorInstances } from "../../../connectors/instances.js";
+import { installConnector, installConnectorDefinition, uninstallConnector, updateConnectorConfig } from "../../../connectors/install.js";
 import { startConnectorAuthorization } from "../../../connectors/auth-provider-registry.js";
 import { composioLogoResponse } from "../../../connectors/composio-logo.js";
+import { inspectManagedComposioStatus } from "../../../connectors/composio-managed-client.js";
 import { appendComposioTriggerEvent, listComposioTriggerEvents } from "../../../connectors/composio-triggers.js";
 import { buildConnectedPeopleGraph } from "../../../knowledge/people-graph.js";
 import "../../../knowledge/index.js";
 import { ingestLocalFolderSource } from "../../../connectors/connected-source-ingestion.js";
 import { previewConnectorDefinition, testConnectorInstance } from "../../../connectors/health.js";
-import { installConnector, installConnectorDefinition, uninstallConnector, updateConnectorConfig } from "../../../connectors/install.js";
 import { setConnectorEnabled } from "../../../connectors/lifecycle.js";
 import { projectComposioConnectionStatus } from "../../../connectors/runtime-status.js";
 //#region src/gateway/hono/routes/connectors.ts
@@ -592,10 +593,13 @@ function registerConnectorRoutes(authenticated, deps) {
 		}
 	});
 	authenticated.get("/api/connectors/composio/setup-status", async (c) => {
-		const configured = Boolean(await resolveComposioApiKey());
+		const status = Boolean(await resolveComposioApiKey()) ? {
+			configured: true,
+			mode: "byok"
+		} : await inspectManagedComposioStatus();
 		return c.json({
 			ok: true,
-			payload: { configured }
+			payload: status
 		});
 	});
 	authenticated.post("/api/connectors/composio/setup", strictRateLimitMiddleware, async (c) => {
@@ -605,7 +609,10 @@ function registerConnectorRoutes(authenticated, deps) {
 			await configureComposioApiKey(apiKey);
 			return c.json({
 				ok: true,
-				payload: { configured: true }
+				payload: {
+					configured: true,
+					mode: "byok"
+				}
 			});
 		} catch (error) {
 			return c.json({

package/dist/src/gateway/hono/routes/exposure.js

@@ -1,6 +1,6 @@
-import { consumeTunnelMutationLimit } from "../../../tunnel/tunnel-rate-limit.js";
 import { extractToken } from "../../auth.js";
 import { getExposureManager } from "../../../remote-access/exposure-manager.js";
+import { consumeTunnelMutationLimit } from "../../../tunnel/tunnel-rate-limit.js";
 //#region src/gateway/hono/routes/exposure.ts
 function requireGatewayToken(c) {
 	return extractToken({ authorization: c.req.header("authorization") ?? void 0 }) ?? null;

package/dist/src/gateway/hono/routes/home.d.ts

@@ -1,5 +1,5 @@
 import type { Hono } from 'hono';
 import type { AuthenticatedRouteDeps } from './deps.js';
-export { buildHomeBriefing, buildHomeFocusItems } from '../../../tasks/home-query-service.js';
+export { buildHomeWorkbench, decisionFromTask } from '../../../tasks/home-query-service.js';
 /** Register the unified work-home read model and its decision actions. */
 export declare function registerHomeRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void;

package/dist/src/gateway/hono/routes/home.js

@@ -2,7 +2,7 @@ import { acknowledgeHomeAttention } from "../../../storage/sqlite/home-attention
 import { decideConnectorApproval } from "../../../storage/sqlite/connector-repository.js";
 import "../../../storage/sqlite/index.js";
 import { listGatewayAgents } from "../../agents-admin.js";
-import { HomeQueryService, buildHomeBriefing, buildHomeFocusItems } from "../../../tasks/home-query-service.js";
+import { HomeQueryService, buildHomeWorkbench, decisionFromTask } from "../../../tasks/home-query-service.js";
 //#region src/gateway/hono/routes/home.ts
 /** Register the unified work-home read model and its decision actions. */
 function registerHomeRoutes(authenticated, deps) {
@@ -90,4 +90,4 @@ function registerHomeRoutes(authenticated, deps) {
 	});
 }
 //#endregion
-export { buildHomeBriefing, buildHomeFocusItems, registerHomeRoutes };
+export { buildHomeWorkbench, decisionFromTask, registerHomeRoutes };

package/dist/src/gateway/hono/routes/mcp.js

@@ -1,7 +1,7 @@
 import { canonicalizeConfiguredMcpServer, normalizeConfiguredMcpServers } from "../../../config/mcp-config-normalize.js";
 import { loadMergedBundleMcpConfig } from "../../../agent/mcp/bundle-mcp-config.js";
-import { getWorkspacePath } from "../../../config/workspace-path-helpers.js";
 import { isManagedConnectorServer } from "../../../connectors/materialize.js";
+import { getWorkspacePath } from "../../../config/workspace-path-helpers.js";
 import { listBundleMcpServerCapabilitiesForGateway, listBundleMcpServerToolsForGateway } from "../../../agent/mcp/bundle-mcp-gateway.js";
 //#region src/gateway/hono/routes/mcp.ts
 function registerMcpRoutes(authenticated, deps) {

package/dist/src/gateway/hono/routes/shares.js

@@ -8,8 +8,8 @@ import { resolveShareUrl, resolveSiteShareUrl } from "../../../share/share-url.j
 import { resolveReverseProxyPublicUrl } from "../../public-url.js";
 import { audienceDefaults, cleanupStagedSite, decideShareKind, forgetStagedSite, makeDescription, makeTitle, probeShareTarget, rememberStagedSite, stageSingleHtmlAsSite } from "../../../share/share-auto.js";
 import { deleteThumbnail, placeholderSvg, readThumbnail, scheduleThumbnail, thumbnailContentType, thumbnailExists } from "../../../share/share-thumbnail.js";
-import { getClientIpFromHeaders } from "../../security/loopback.js";
 import { extractToken } from "../../auth.js";
+import { getClientIpFromHeaders } from "../../security/loopback.js";
 import { renderFolderLandingPage, renderShareExpiredPage, renderShareLandingPage } from "../../../share/share-landing.js";
 import { consumeSharePublicLimit } from "../../../share/share-rate-limit.js";
 import { createZipStream, planDirectoryFiles } from "../../../share/share-zip.js";

package/dist/src/gateway/hono/routes/tunnel.js

@@ -2,18 +2,18 @@ import { init_public_url, validatePublicUrl } from "../../../config/public-url.j
 import { resolveGatewayEffectiveHost } from "../../../config/gateway-bind.js";
 import { loadTunnelState } from "../../../tunnel/tunnel-state.js";
 import { resolveReverseProxyPublicUrl } from "../../public-url.js";
+import { extractToken } from "../../auth.js";
 import { TUNNEL_CONSENT_REQUIRED_CODE, TunnelConsentError, assertTunnelMayStart, getTunnelConsentState } from "../../../tunnel/consent.js";
 import { getTunnelRegistrationSecretMeta, readTunnelRegistrationSecretFromConfigOnly, resolveTunnelBrokerUrl } from "../../../tunnel/env.js";
-import { applyTunnelConsentToConfig, setTunnelEnabledInConfig } from "../../../tunnel/tunnel-config.js";
 import { createPairingSecret, exchangePairingSecretOnce, getCachedPairingExchange } from "../../../tunnel/pairing.js";
 import { logTunnelAudit } from "../../../tunnel/tunnel-audit.js";
 import { getTunnelService, hashGatewayToken } from "../../../tunnel/tunnel-service.js";
 import { configureTunnelFromGatewayConfig } from "../../../tunnel/gateway-lifecycle.js";
+import { applyTunnelConsentToConfig, setTunnelEnabledInConfig } from "../../../tunnel/tunnel-config.js";
 import { getClientIpFromHeaders } from "../../security/loopback.js";
+import { applyLanPairingGatewayPatch } from "../../../tunnel/enable-lan-pairing.js";
 import { consumeTunnelMutationLimit } from "../../../tunnel/tunnel-rate-limit.js";
 import "../../../tunnel/index.js";
-import { extractToken } from "../../auth.js";
-import { applyLanPairingGatewayPatch } from "../../../tunnel/enable-lan-pairing.js";
 import { buildMobileConnectUrlOrder, resolveMobilePairLanUrl, validateMobilePairBaseUrl } from "../../../tunnel/pair-url.js";
 import { buildMobilePairContext } from "../../../tunnel/pair-context.js";
 import { consumePairingExchangeFailLimit } from "../../../tunnel/pairing-rate-limit.js";

package/dist/src/gateway/hono/routes/workflows.js

@@ -10,10 +10,39 @@ import { WorkflowDraftService } from "../../../workflows/draft/workflow-draft-se
 import { WorkflowDraftConflictError, WorkflowDraftStore } from "../../../workflows/authoring/workflow-draft-store.js";
 import "../../../workflows/authoring/index.js";
 import "../../../workflows/draft/index.js";
+import { ProjectWorkflowPresetRepository } from "../../../workflows/project-presets/project-workflow-preset-repository.js";
 import { basename, join } from "node:path";
 import { readFile, stat } from "node:fs/promises";
 //#region src/gateway/hono/routes/workflows.ts
 init_agent_scope();
+const WORKFLOW_CONTEXT_KINDS = new Set([
+	"project",
+	"task",
+	"note",
+	"session",
+	"attachment",
+	"memory"
+]);
+function parseWorkflowContextRefs(value) {
+	if (value === void 0) return void 0;
+	if (!Array.isArray(value) || value.length > 50) throw new Error("contextRefs must be an array with at most 50 items");
+	return value.map((candidate) => {
+		if (!candidate || typeof candidate !== "object" || Array.isArray(candidate)) throw new Error("Invalid workflow context reference");
+		const ref = candidate;
+		const kind = typeof ref.kind === "string" ? ref.kind : "";
+		const id = typeof ref.id === "string" ? ref.id.trim() : "";
+		if (!WORKFLOW_CONTEXT_KINDS.has(kind) || !id || id.length > 512) throw new Error("Invalid workflow context reference");
+		const role = typeof ref.role === "string" ? ref.role.trim() : void 0;
+		const title = typeof ref.title === "string" ? ref.title.trim() : void 0;
+		if ((role?.length ?? 0) > 64 || (title?.length ?? 0) > 256) throw new Error("Invalid workflow context reference");
+		return {
+			kind,
+			id,
+			...role ? { role } : {},
+			...title ? { title } : {}
+		};
+	});
+}
 function registerWorkflowRoutes(authenticated, deps) {
 	const { service } = deps;
 	const workflowRunService = service.createWorkflowRunService();
@@ -38,6 +67,38 @@ function registerWorkflowRoutes(authenticated, deps) {
 			return c.json({ error: err instanceof Error ? err.message : "Workflow definition not found" }, 404);
 		}
 	});
+	authenticated.get("/api/workflows/project-presets", (c) => {
+		const projectId = c.req.query("projectId")?.trim();
+		if (!projectId) return c.json({ error: "projectId is required" }, 400);
+		if (!service.projects.get(projectId)) return c.json({ error: "Project not found" }, 404);
+		return c.json({ presets: new ProjectWorkflowPresetRepository().list(projectId) });
+	});
+	authenticated.put("/api/workflows/project-presets/:definitionId", async (c) => {
+		const definitionId = c.req.param("definitionId").trim();
+		const body = await readJsonBody(c.req.raw);
+		const projectId = body.projectId?.trim();
+		if (!projectId) return c.json({ error: "projectId is required" }, 400);
+		if (!service.projects.get(projectId)) return c.json({ error: "Project not found" }, 404);
+		try {
+			createWorkflowCatalog().load(definitionId);
+			const contextRefs = parseWorkflowContextRefs(body.contextRefs) ?? [];
+			if (contextRefs.some((ref) => ref.kind !== "task" && ref.kind !== "note")) return c.json({ error: "Project workflow presets support task and note context only" }, 400);
+			const preset = new ProjectWorkflowPresetRepository().save({
+				projectId,
+				definitionId,
+				contextRefs
+			});
+			return c.json({ preset });
+		} catch (cause) {
+			return c.json({ error: cause instanceof Error ? cause.message : "Could not save project workflow" }, 400);
+		}
+	});
+	authenticated.delete("/api/workflows/project-presets/:definitionId", (c) => {
+		const projectId = c.req.query("projectId")?.trim();
+		if (!projectId) return c.json({ error: "projectId is required" }, 400);
+		const removed = new ProjectWorkflowPresetRepository().remove(projectId, c.req.param("definitionId"));
+		return c.json({ removed });
+	});
 	authenticated.post("/api/workflows/definitions/validate", async (c) => {
 		const body = await readJsonBody(c.req.raw);
 		const result = validateWorkflowDefinitionInput({
@@ -206,6 +267,7 @@ function registerWorkflowRoutes(authenticated, deps) {
 		const catalog = createWorkflowCatalog();
 		try {
 			if (!catalog.remove(id)) return c.json({ error: "User workflow not found or cannot delete built-in workflow" }, 404);
+			new ProjectWorkflowPresetRepository().removeDefinition(id);
 			const drafts = new WorkflowDraftStore().list(id);
 			for (const draft of drafts) new WorkflowDraftStore().remove(draft.id);
 			return c.json({ removed: true });
@@ -228,6 +290,12 @@ function registerWorkflowRoutes(authenticated, deps) {
 		const taskRunId = body.taskRunId?.trim();
 		const projectId = body.projectId?.trim();
 		if (projectId && !service.projects.get(projectId)) return c.json({ error: "Project not found" }, 404);
+		let contextRefs;
+		try {
+			contextRefs = parseWorkflowContextRefs(body.contextRefs);
+		} catch (cause) {
+			return c.json({ error: cause instanceof Error ? cause.message : "Invalid workflow context references" }, 400);
+		}
 		const explicitAgentId = body.agentId ?? c.req.query("agentId");
 		const agentId = projectId ? resolveProjectAgentId({
 			config: service.currentConfig,
@@ -240,6 +308,7 @@ function registerWorkflowRoutes(authenticated, deps) {
 			definitionId,
 			taskRunId,
 			projectId,
+			contextRefs,
 			input: body.inputEnvelope ? void 0 : body.input,
 			inputEnvelope: body.inputEnvelope,
 			goal: body.goal,

package/dist/src/gateway/index.js

@@ -1,10 +1,10 @@
 import { buildDefaultCorsOrigins, isAllInterfacesHost, isLoopbackHost, resolveEffectiveGatewayPort, resolveGatewayServiceListenPort } from "./host.js";
 import { defaultGatewayBindMode, isContainerEnvironment, resolveGatewayBindHost, resolveGatewayBindHostSync, resolveGatewayBindMode, resolveGatewayEffectiveHost } from "../config/gateway-bind.js";
+import { assertGatewayAuthConfigured, extractToken, resolveGatewayAuth, validateToken } from "./auth.js";
+import { resolveGatewayListenHost, resolveGatewayListenPlan } from "./listen.js";
 import { buckets } from "./rate-limit/buckets.js";
 import { isGatewayStrictSecurityEnabled } from "./rate-limit/env-flags.js";
 import "./rate-limit/index.js";
-import { assertGatewayAuthConfigured, extractToken, resolveGatewayAuth, validateToken } from "./auth.js";
-import { resolveGatewayListenHost, resolveGatewayListenPlan } from "./listen.js";
 import { assertGatewayRuntimeConfig } from "./runtime-config.js";
 import { restartGatewayProcessWithFreshPid } from "./respawn.js";
 import { GatewayService } from "./service.js";

package/dist/src/gateway/runtime-config.js

@@ -1,8 +1,8 @@
 import { isAllInterfacesHost, isLoopbackHost, resolveGatewayCorsOrigins } from "./host.js";
-import { isAuthRateLimitGloballyDisabled, isGatewayStrictSecurityEnabled } from "./rate-limit/env-flags.js";
-import "./rate-limit/index.js";
 import { resolveGatewayListenPlan } from "./listen.js";
 import { assertTailscaleExposureCompatible } from "./tailscale-lifecycle.js";
+import { isAuthRateLimitGloballyDisabled, isGatewayStrictSecurityEnabled } from "./rate-limit/env-flags.js";
+import "./rate-limit/index.js";
 //#region src/gateway/runtime-config.ts
 function hasSharedSecret(auth) {
 	if (auth.mode === "trusted-proxy") return true;

package/dist/src/gateway/security/audit.js

@@ -1,10 +1,10 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
-import { isAuthRateLimitGloballyDisabled, isGatewayStrictSecurityEnabled } from "../rate-limit/env-flags.js";
-import "../rate-limit/index.js";
 import { assertGatewayAuthConfigured, resolveGatewayAuth } from "../auth.js";
 import { resolveGatewayListenPlan } from "../listen.js";
 import { collectExposureConflicts, isRemoteGatewayInsecure, isTailnetBindUnavailable } from "../../remote-access/exposure-guards.js";
+import { isAuthRateLimitGloballyDisabled, isGatewayStrictSecurityEnabled } from "../rate-limit/env-flags.js";
+import "../rate-limit/index.js";
 import { assertGatewayRuntimeConfig } from "../runtime-config.js";
 //#region src/gateway/security/audit.ts
 init_logger();

package/dist/src/gateway/service/config-coordinator.js

@@ -4,12 +4,12 @@ import { loadConfig, saveConfig } from "../../config/loader.js";
 import { getModelRegistry } from "../../providers/model-registry.js";
 import { init_providers } from "../../providers/index.js";
 import { disposeAllSessionMcpRuntimes } from "../../agent/mcp/bundle-mcp-runtime.js";
-import { sanitizeTunnelConfig } from "../../tunnel/tunnel-config.js";
 import { reloadImageGenerationProviders } from "../../agent/image/generation/provider-registry.js";
 import "../../agent/mcp/bundle-mcp-tools.js";
 import { ConfigHotReloader } from "../../config/reload.js";
 import "../../config/index.js";
 import { computeBundledExtensionExtensionsPatch } from "../../extensions/bundled-extension-activation.js";
+import { sanitizeTunnelConfig } from "../../tunnel/tunnel-config.js";
 //#region src/gateway/service/config-coordinator.ts
 init_providers();
 init_logger();

package/dist/src/gateway/service.d.ts

@@ -67,6 +67,7 @@ export declare class GatewayService {
     private workflowRunServiceInstance;
     private taskRunDispatcher;
     private taskRunDispatchTimer;
+    private managedComposioEventPoller?;
     private mobileNotifications;
     private connectorSupervisor;
     private connectorLearningCoordinator;