@xopcai/xopc 0.0.211 → 0.0.214

package/dist/src/gateway/runtime-config.js

@@ -1,8 +1,8 @@
 import { isAllInterfacesHost, isLoopbackHost, resolveGatewayCorsOrigins } from "./host.js";
-import { isAuthRateLimitGloballyDisabled, isGatewayStrictSecurityEnabled } from "./rate-limit/env-flags.js";
-import "./rate-limit/index.js";
 import { resolveGatewayListenPlan } from "./listen.js";
 import { assertTailscaleExposureCompatible } from "./tailscale-lifecycle.js";
+import { isAuthRateLimitGloballyDisabled, isGatewayStrictSecurityEnabled } from "./rate-limit/env-flags.js";
+import "./rate-limit/index.js";
 //#region src/gateway/runtime-config.ts
 function hasSharedSecret(auth) {
 	if (auth.mode === "trusted-proxy") return true;

package/dist/src/gateway/security/audit.js

@@ -1,10 +1,10 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
-import { isAuthRateLimitGloballyDisabled, isGatewayStrictSecurityEnabled } from "../rate-limit/env-flags.js";
-import "../rate-limit/index.js";
 import { assertGatewayAuthConfigured, resolveGatewayAuth } from "../auth.js";
 import { resolveGatewayListenPlan } from "../listen.js";
 import { collectExposureConflicts, isRemoteGatewayInsecure, isTailnetBindUnavailable } from "../../remote-access/exposure-guards.js";
+import { isAuthRateLimitGloballyDisabled, isGatewayStrictSecurityEnabled } from "../rate-limit/env-flags.js";
+import "../rate-limit/index.js";
 import { assertGatewayRuntimeConfig } from "../runtime-config.js";
 //#region src/gateway/security/audit.ts
 init_logger();

package/dist/src/gateway/service/config-coordinator.js

@@ -1,15 +1,15 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
-import { loadConfig, saveConfig } from "../../config/loader.js";
 import { getModelRegistry } from "../../providers/model-registry.js";
+import { loadConfig, saveConfig } from "../../config/loader.js";
 import { init_providers } from "../../providers/index.js";
 import { disposeAllSessionMcpRuntimes } from "../../agent/mcp/bundle-mcp-runtime.js";
-import { sanitizeTunnelConfig } from "../../tunnel/tunnel-config.js";
 import { reloadImageGenerationProviders } from "../../agent/image/generation/provider-registry.js";
 import "../../agent/mcp/bundle-mcp-tools.js";
 import { ConfigHotReloader } from "../../config/reload.js";
 import "../../config/index.js";
 import { computeBundledExtensionExtensionsPatch } from "../../extensions/bundled-extension-activation.js";
+import { sanitizeTunnelConfig } from "../../tunnel/tunnel-config.js";
 //#region src/gateway/service/config-coordinator.ts
 init_providers();
 init_logger();

package/dist/src/gateway/service.d.ts

@@ -67,6 +67,7 @@ export declare class GatewayService {
     private workflowRunServiceInstance;
     private taskRunDispatcher;
     private taskRunDispatchTimer;
+    private managedComposioEventPoller?;
     private mobileNotifications;
     private connectorSupervisor;
     private connectorLearningCoordinator;

package/dist/src/gateway/service.js

@@ -9,14 +9,14 @@ import { closeXopcDatabase, openXopcDatabase } from "../storage/sqlite/connectio
 import "../storage/sqlite/index.js";
 import { getAgentDefaultModelRef, init_schema } from "../config/schema.js";
 import { init_agent_scope, listAgentEntries, normalizeAgentId, resolveDefaultAgentId } from "../agent/agent-scope.js";
-import { buildSessionKey, init_session_key, sanitizeSegment } from "../routing/session-key.js";
-import { getDefaultAgentId, init_resolve_route } from "../routing/resolve-route.js";
 import { init_paths, resolveAgentDir, resolveConfigPath, resolveExtensionsDir } from "../config/paths.js";
+import { prewarmModelRegistry } from "../providers/model-registry.js";
 import { areExtensionsGloballyDisabled } from "../extensions/discover-extensions.js";
 import { buildExtensionMetadataSnapshot } from "../extensions/extension-metadata-snapshot.js";
 import { buildChannelCatalogForConfig, buildChannelCatalogFromSnapshot, init_channel_catalog_service } from "../channels/catalog/channel-catalog-service.js";
 import { loadConfig, saveConfig } from "../config/loader.js";
-import { prewarmModelRegistry } from "../providers/model-registry.js";
+import { buildSessionKey, init_session_key, sanitizeSegment } from "../routing/session-key.js";
+import { getDefaultAgentId, init_resolve_route } from "../routing/resolve-route.js";
 import { init_providers, providers_exports } from "../providers/index.js";
 import { TaskRepository } from "../tasks/task-repository.js";
 import { TaskConversationRepository } from "../tasks/task-conversation-repository.js";
@@ -28,11 +28,6 @@ import "../automations/index.js";
 import { ProjectService } from "../projects/project-service.js";
 import { resolveProjectAgentId } from "../projects/project-agent.js";
 import "../projects/index.js";
-import { sanitizeTunnelConfig } from "../tunnel/tunnel-config.js";
-import { wireTunnelEventsToGateway } from "../tunnel/gateway-lifecycle.js";
-import { buckets } from "./rate-limit/buckets.js";
-import { isGatewayStrictSecurityEnabled } from "./rate-limit/env-flags.js";
-import "./rate-limit/index.js";
 import { TaskApplicationService } from "../tasks/task-application-service.js";
 import { ProactiveScenarioService } from "../proactive/scenarios/service.js";
 import { TaskOutboxDispatcher } from "../tasks/task-outbox-dispatcher.js";
@@ -55,6 +50,7 @@ import { registerClarifyBridge } from "./clarify-runtime.js";
 import { ChannelManager } from "../channels/manager.js";
 import { getWorkspacePath } from "../config/workspace-path-helpers.js";
 import "../config/index.js";
+import { ManagedComposioEventPoller } from "../connectors/composio-managed-events.js";
 import { startConnectedKnowledgeCoordinator } from "../knowledge/coordinator.js";
 import "../knowledge/index.js";
 import { startConnectorLearningCoordinator } from "../connectors/learning-coordinator.js";
@@ -83,9 +79,14 @@ import "./heartbeat/index.js";
 import { EphemeralSideChatManager } from "./side-chat/manager.js";
 import { SideChatRunService } from "./side-chat/run-service.js";
 import "./side-chat/index.js";
+import { wireTunnelEventsToGateway } from "../tunnel/gateway-lifecycle.js";
 import { stopTailscaleExposure } from "./tailscale-lifecycle.js";
 import { getExposureManager } from "../remote-access/exposure-manager.js";
+import { sanitizeTunnelConfig } from "../tunnel/tunnel-config.js";
 import { assertGatewayAuthNotKnownWeak } from "./security/known-weak-secrets.js";
+import { buckets } from "./rate-limit/buckets.js";
+import { isGatewayStrictSecurityEnabled } from "./rate-limit/env-flags.js";
+import "./rate-limit/index.js";
 import { assertGatewayRuntimeConfig } from "./runtime-config.js";
 import { auditGatewayConfig } from "./security/audit.js";
 import { getXopcCloudCatalogCoordinator } from "../providers/xopc-cloud-catalog-coordinator.js";
@@ -183,6 +184,7 @@ var GatewayService = class {
 	workflowRunServiceInstance = null;
 	taskRunDispatcher = null;
 	taskRunDispatchTimer = null;
+	managedComposioEventPoller;
 	mobileNotifications = null;
 	connectorSupervisor = null;
 	connectorLearningCoordinator = null;
@@ -941,6 +943,17 @@ var GatewayService = class {
 			getMemoryManager: () => this.agentService.getMemoryManager(),
 			emit: (type, payload) => this.emit(type, payload)
 		});
+		this.managedComposioEventPoller = new ManagedComposioEventPoller({
+			getConfig: () => this.config,
+			triggerAutomation: (event) => this.automationService.triggerEvent(event),
+			requestLearning: (toolkit) => {
+				this.requestConnectorLearningForToolkit(toolkit);
+			},
+			setLearningPaused: (connectionId, paused) => {
+				this.setConnectorLearningPaused(connectionId, paused);
+			}
+		});
+		this.managedComposioEventPoller.start();
 		this.connectedSourceChangePublisher = new ConnectedSourceChangePublisher(this.proactive);
 		this.connectedSourceChangePublisher.start();
 		this.connectedKnowledgeCoordinator = startConnectedKnowledgeCoordinator({ resolvePipelineOptions: () => ({
@@ -1096,6 +1109,8 @@ var GatewayService = class {
 		this.connectorSupervisor = null;
 		this.connectorLearningCoordinator?.stop();
 		this.connectorLearningCoordinator = null;
+		this.managedComposioEventPoller?.stop();
+		this.managedComposioEventPoller = void 0;
 		this.connectedSourceChangePublisher?.stop();
 		this.connectedSourceChangePublisher = null;
 		this.connectedKnowledgeCoordinator?.stop();

package/dist/src/notes/note-attachment-sync.js

@@ -8,7 +8,7 @@ function partitionAttachmentsByReference(note) {
 	const attachments = note.attachments ?? [];
 	const kept = [];
 	const removed = [];
-	for (const attachment of attachments) if (referenced.has(attachment.id)) kept.push(attachment);
+	for (const attachment of attachments) if (attachment.retainWithoutReference || referenced.has(attachment.id)) kept.push(attachment);
 	else removed.push(attachment);
 	return {
 		kept,

package/dist/src/notes/service.d.ts

@@ -48,6 +48,7 @@ export declare class NotesService {
         buffer: Buffer;
         mimeType: string;
         duration?: number;
+        retainWithoutReference?: boolean;
     }): Promise<NoteAttachment | null>;
     removeAttachment(noteId: string, attachmentId: string): Promise<boolean>;
     getAttachmentPath(noteId: string, attachmentId: string): Promise<{

package/dist/src/notes/service.js

@@ -474,7 +474,8 @@ var NotesService = class {
 			fileName: file.name,
 			size,
 			relativePath,
-			duration: file.duration
+			duration: file.duration,
+			retainWithoutReference: file.retainWithoutReference
 		};
 		const attachments = [...note.attachments || [], attachment];
 		const kind = note.kind === "thought" && attachment.type === "audio" ? "voice" : note.kind === "thought" ? "media" : note.kind;

package/dist/src/notes/types.d.ts

@@ -45,6 +45,8 @@ export interface NoteAttachment {
     relativePath: string;
     transcript?: string;
     duration?: number;
+    /** Retained by a structured note feature even when absent from user-owned Markdown. */
+    retainWithoutReference?: boolean;
 }
 export interface NoteAiMeta {
     summary?: string;

package/dist/src/providers/auth-runtime/resolve-auth.js

@@ -1,5 +1,5 @@
-import { init_sync_provider_auth, resolveProviderApiKeyForAgentSync } from "../../auth/sync-provider-auth.js";
 import { getApiKeyFromEnv, init_env_keys } from "../env-keys.js";
+import { init_sync_provider_auth, resolveProviderApiKeyForAgentSync } from "../../auth/sync-provider-auth.js";
 import { getDefaultAuthProfileStore } from "./auth-profile-store.js";
 //#region src/providers/auth-runtime/resolve-auth.ts
 init_env_keys();

package/dist/src/providers/index.js

@@ -1,11 +1,11 @@
 import { __esmMin, __exportAll } from "../../_virtual/_rolldown/runtime.js";
 import { getAgentDefaultModelRef, init_schema } from "../config/schema.js";
-import { getOAuthProviderIds, init_registry } from "../auth/oauth/registry.js";
-import { hasProviderAuthOnDiskSync, init_sync_provider_auth } from "../auth/sync-provider-auth.js";
 import { PROVIDER_ENV_MAP, getApiKeyFromEnv, init_env_keys } from "./env-keys.js";
 import { init_model_ref, splitProviderModelRef } from "./model-ref.js";
 import { ModelRegistry, getModelRegistry, init_model_registry, prewarmModelRegistry, resetModelRegistry } from "./model-registry.js";
+import { getOAuthProviderIds, init_registry } from "../auth/oauth/registry.js";
 import { CredentialResolver, hasCredentials, init_credentials } from "../auth/credentials.js";
+import { hasProviderAuthOnDiskSync, init_sync_provider_auth } from "../auth/sync-provider-auth.js";
 import { EXTENSION_PROVIDER_BASE_URL, init_constants } from "./constants.js";
 import { applyOfficialModelMetadataCorrections, getSupplementalModels, init_model_supplements } from "./model-supplements.js";
 import { getProviderRegistry, init_plugin_registry } from "./plugin-registry.js";

package/dist/src/providers/model-catalog-persistence.d.ts

@@ -1,4 +1,4 @@
-import type { CatalogSource } from './model-catalog-store.js';
+import type { CatalogSource } from './model-catalog-types.js';
 export declare class ModelCatalogPersistence {
     private readonly path;
     constructor(path?: string);

package/dist/src/providers/model-catalog-store.d.ts

@@ -1,63 +1,5 @@
-export interface CatalogModel {
-    id: string;
-    name: string;
-    availability: 'available' | 'unavailable';
-    kind: 'language' | 'image' | 'stt' | 'tts';
-    input: Array<'text' | 'image' | 'audio'>;
-    output: Array<'text' | 'image' | 'audio'>;
-    operations: Array<'chat.completions' | 'responses' | 'images.generate' | 'images.edit' | 'audio.transcription' | 'audio.speech'>;
-    reasoning: boolean;
-    contextWindow: number;
-    maxOutputTokens: number | null;
-    stability?: 'stable' | 'preview' | 'deprecated';
-    priority?: number;
-    tier?: string;
-    bestEffort?: boolean;
-    imageGeneration?: {
-        maxCount: number;
-        sizes: string[];
-        aspectRatios?: string[];
-        qualities: Array<'low' | 'medium' | 'high' | 'auto'>;
-        formats: Array<'png' | 'jpeg' | 'webp'>;
-        backgrounds: Array<'transparent' | 'opaque' | 'auto'>;
-        maxInputImages: number;
-    };
-    stt?: {
-        inputFormats: string[];
-        maxBytes: number;
-        maxDurationSeconds: number;
-        languages: string[];
-        languageHint: boolean;
-        prompt: boolean;
-        timestamps: Array<'segment' | 'word'>;
-        diarization: boolean;
-    };
-    tts?: {
-        maxCharacters: number;
-        languages: string[];
-        outputFormats: Array<'mp3' | 'opus' | 'aac' | 'flac' | 'wav' | 'pcm'>;
-        streaming: boolean;
-        speed: boolean;
-        pitch: boolean;
-        instructions: boolean;
-        defaultVoice?: string;
-    };
-}
-export interface CatalogSource {
-    providerId: string;
-    baseUrl: string;
-    api: 'openai-completions' | 'openai-responses';
-    etag: string | null;
-    recommendedModel: string | null;
-    recommended?: Partial<Record<'vision' | 'image-generation' | 'stt' | 'tts', string>>;
-    lastSuccessAt: number;
-    models: CatalogModel[];
-}
-export interface ModelCatalogSnapshot {
-    sources: Record<string, CatalogSource>;
-}
-export type CatalogSourceOrigin = 'memory' | 'disk' | 'network';
-export type AvailableCatalogModel = Omit<CatalogModel, 'availability'>;
+import type { AvailableCatalogModel, CatalogSource, CatalogSourceOrigin, ModelCatalogSnapshot } from './model-catalog-types.js';
+export type { AvailableCatalogModel, CatalogModel, CatalogSource, CatalogSourceOrigin, ModelCatalogSnapshot, } from './model-catalog-types.js';
 export declare class ModelCatalogStore {
     private sources;
     private origins;

package/dist/src/providers/model-catalog-types.d.ts

@@ -0,0 +1,60 @@
+export interface CatalogModel {
+    id: string;
+    name: string;
+    availability: 'available' | 'unavailable';
+    kind: 'language' | 'image' | 'stt' | 'tts';
+    input: Array<'text' | 'image' | 'audio'>;
+    output: Array<'text' | 'image' | 'audio'>;
+    operations: Array<'chat.completions' | 'responses' | 'images.generate' | 'images.edit' | 'audio.transcription' | 'audio.speech'>;
+    reasoning: boolean;
+    contextWindow: number;
+    maxOutputTokens: number | null;
+    stability?: 'stable' | 'preview' | 'deprecated';
+    priority?: number;
+    tier?: string;
+    bestEffort?: boolean;
+    imageGeneration?: {
+        maxCount: number;
+        sizes: string[];
+        aspectRatios?: string[];
+        qualities: Array<'low' | 'medium' | 'high' | 'auto'>;
+        formats: Array<'png' | 'jpeg' | 'webp'>;
+        backgrounds: Array<'transparent' | 'opaque' | 'auto'>;
+        maxInputImages: number;
+    };
+    stt?: {
+        inputFormats: string[];
+        maxBytes: number;
+        maxDurationSeconds: number;
+        languages: string[];
+        languageHint: boolean;
+        prompt: boolean;
+        timestamps: Array<'segment' | 'word'>;
+        diarization: boolean;
+    };
+    tts?: {
+        maxCharacters: number;
+        languages: string[];
+        outputFormats: Array<'mp3' | 'opus' | 'aac' | 'flac' | 'wav' | 'pcm'>;
+        streaming: boolean;
+        speed: boolean;
+        pitch: boolean;
+        instructions: boolean;
+        defaultVoice?: string;
+    };
+}
+export interface CatalogSource {
+    providerId: string;
+    baseUrl: string;
+    api: 'openai-completions' | 'openai-responses';
+    etag: string | null;
+    recommendedModel: string | null;
+    recommended?: Partial<Record<'vision' | 'image-generation' | 'stt' | 'tts', string>>;
+    lastSuccessAt: number;
+    models: CatalogModel[];
+}
+export interface ModelCatalogSnapshot {
+    sources: Record<string, CatalogSource>;
+}
+export type CatalogSourceOrigin = 'memory' | 'disk' | 'network';
+export type AvailableCatalogModel = Omit<CatalogModel, 'availability'>;

package/dist/src/providers/model-catalog-types.js

@@ -0,0 +1 @@
+export {};

package/dist/src/providers/model-registry.js

@@ -1,8 +1,8 @@
 import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
-import { resolveModelsJsonPath } from "../config/paths.js";
 import { init_resolve_config_value, resolveConfigValue, resolveHeaders } from "../config/resolve-config-value.js";
+import { resolveModelsJsonPath } from "../config/paths.js";
 import { getDefaultModelValues, init_models_json, validateModelsConfig } from "../config/models-json.js";
 import { getApiKeyFromEnv, init_env_keys } from "./env-keys.js";
 import { getModelCatalogStore, init_model_catalog_store } from "./model-catalog-store.js";

package/dist/src/providers/provider-disconnect-core.d.ts

@@ -0,0 +1,11 @@
+import { CredentialResolver } from '../auth/credentials.js';
+export interface ProviderDisconnectOptions {
+    resolver?: Pick<CredentialResolver, 'deleteProviderCredential'>;
+    invalidateAuth?: () => void;
+    clearCloudCatalog?: () => Promise<void>;
+    refreshModels?: () => void;
+    evictRunners?: () => void;
+    withLock?: <T>(providerId: string, operation: () => Promise<T>) => Promise<T>;
+}
+/** Low-level disconnect operation. Cloud callers must inject catalog cleanup. */
+export declare function disconnectProviderCore(providerId: string, options?: ProviderDisconnectOptions): Promise<void>;

package/dist/src/providers/provider-disconnect-core.js

@@ -0,0 +1,35 @@
+import { createLogger } from "../utils/logger/index.js";
+import { init_logger } from "../utils/logger.js";
+import { getModelRegistry, init_model_registry } from "./model-registry.js";
+import { init_oauth_provider_lock, withOAuthProviderLock } from "../auth/oauth-provider-lock.js";
+import { CredentialResolver, init_credentials } from "../auth/credentials.js";
+import { getProviderAuthService, init_provider_auth_service } from "./provider-auth-service.js";
+import { evictAllEmbeddedSessionRunners } from "../agent/embedded/session-runner.js";
+//#region src/providers/provider-disconnect-core.ts
+init_credentials();
+init_oauth_provider_lock();
+init_logger();
+init_model_registry();
+init_provider_auth_service();
+const log = createLogger("ProviderDisconnect");
+/** Low-level disconnect operation. Cloud callers must inject catalog cleanup. */
+async function disconnectProviderCore(providerId, options = {}) {
+	const provider = providerId.trim().toLowerCase();
+	if (!provider) throw new Error("Provider id is required");
+	const resolver = options.resolver ?? new CredentialResolver();
+	await (options.withLock ?? ((id, operation) => withOAuthProviderLock(id, operation)))(provider, async () => {
+		await resolver.deleteProviderCredential(provider);
+		(options.invalidateAuth ?? (() => getProviderAuthService().invalidate()))();
+		if (provider === "xopc-cloud") {
+			if (!options.clearCloudCatalog) throw new Error("XOPC Cloud disconnect requires a catalog cleanup hook");
+			await options.clearCloudCatalog();
+		} else (options.refreshModels ?? (() => getModelRegistry().refresh()))();
+		(options.evictRunners ?? (() => evictAllEmbeddedSessionRunners("provider_disconnected")))();
+	});
+	log.info({
+		provider,
+		phase: "provider_revoked"
+	}, `Disconnected provider: ${provider}`);
+}
+//#endregion
+export { disconnectProviderCore };

package/dist/src/providers/provider-disconnect.d.ts

@@ -1,11 +1,3 @@
-import { CredentialResolver } from '../auth/credentials.js';
-interface ProviderDisconnectOptions {
-    resolver?: Pick<CredentialResolver, 'deleteProviderCredential'>;
-    invalidateAuth?: () => void;
-    clearCloudCatalog?: () => Promise<void>;
-    refreshModels?: () => void;
-    evictRunners?: () => void;
-    withLock?: <T>(providerId: string, operation: () => Promise<T>) => Promise<T>;
-}
+import { type ProviderDisconnectOptions } from './provider-disconnect-core.js';
+export type { ProviderDisconnectOptions } from './provider-disconnect-core.js';
 export declare function disconnectProvider(providerId: string, options?: ProviderDisconnectOptions): Promise<void>;
-export {};

package/dist/src/providers/provider-disconnect.js

@@ -1,33 +1,11 @@
-import { createLogger } from "../utils/logger/index.js";
-import { init_logger } from "../utils/logger.js";
-import { getModelRegistry, init_model_registry } from "./model-registry.js";
-import { init_oauth_provider_lock, withOAuthProviderLock } from "../auth/oauth-provider-lock.js";
-import { CredentialResolver, init_credentials } from "../auth/credentials.js";
-import { getProviderAuthService, init_provider_auth_service } from "./provider-auth-service.js";
-import { evictAllEmbeddedSessionRunners } from "../agent/embedded/session-runner.js";
+import { disconnectProviderCore } from "./provider-disconnect-core.js";
 import { getXopcCloudCatalogCoordinator } from "./xopc-cloud-catalog-coordinator.js";
 //#region src/providers/provider-disconnect.ts
-init_credentials();
-init_oauth_provider_lock();
-init_logger();
-init_model_registry();
-init_provider_auth_service();
-const log = createLogger("ProviderDisconnect");
 async function disconnectProvider(providerId, options = {}) {
-	const provider = providerId.trim().toLowerCase();
-	if (!provider) throw new Error("Provider id is required");
-	const resolver = options.resolver ?? new CredentialResolver();
-	await (options.withLock ?? ((id, operation) => withOAuthProviderLock(id, operation)))(provider, async () => {
-		await resolver.deleteProviderCredential(provider);
-		(options.invalidateAuth ?? (() => getProviderAuthService().invalidate()))();
-		if (provider === "xopc-cloud") await (options.clearCloudCatalog ?? (() => getXopcCloudCatalogCoordinator().clear("revoke")))();
-		else (options.refreshModels ?? (() => getModelRegistry().refresh()))();
-		(options.evictRunners ?? (() => evictAllEmbeddedSessionRunners("provider_disconnected")))();
+	return disconnectProviderCore(providerId, {
+		...options,
+		clearCloudCatalog: options.clearCloudCatalog ?? (() => getXopcCloudCatalogCoordinator().clear("revoke"))
 	});
-	log.info({
-		provider,
-		phase: "provider_revoked"
-	}, `Disconnected provider: ${provider}`);
 }
 //#endregion
 export { disconnectProvider };

package/dist/src/providers/register-runtime-providers.js

@@ -1,6 +1,6 @@
 import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
-import { getOAuthProviderDefinition, init_registry } from "../auth/oauth/registry.js";
 import { getModelCatalogStore, init_model_catalog_store } from "./model-catalog-store.js";
+import { getOAuthProviderDefinition, init_registry } from "../auth/oauth/registry.js";
 import { XOPC_CLOUD_PROVIDER_ID, init_xopc_cloud_config, resolveXopcModelRouterUrl } from "./xopc-cloud-config.js";
 //#region src/providers/register-runtime-providers.ts
 function registerRuntimeProvider(modelRuntime, source) {

package/dist/src/providers/xopc-cloud-catalog-coordinator.js

@@ -5,6 +5,7 @@ import { getModelCatalogStore, init_model_catalog_store } from "./model-catalog-
 import { getModelRegistry, init_model_registry } from "./model-registry.js";
 import { init_oauth_provider_lock, withOAuthProviderLock } from "../auth/oauth-provider-lock.js";
 import { reloadImageGenerationProviders } from "../agent/image/generation/provider-registry.js";
+import { disconnectProviderCore } from "./provider-disconnect-core.js";
 import { XopcCloudModelSource } from "./xopc-cloud-model-source.js";
 //#region src/providers/xopc-cloud-catalog-coordinator.ts
 init_oauth_provider_lock();
@@ -36,8 +37,7 @@ var XopcCloudCatalogCoordinator = class {
 		this.reloadImageProviders = options.reloadImageProviders ?? reloadImageGenerationProviders;
 		this.withLock = options.withLock ?? ((operation) => withOAuthProviderLock("xopc-cloud", operation));
 		this.onPermanentAuthFailure = options.onPermanentAuthFailure ?? (async () => {
-			const { disconnectProvider } = await import("./provider-disconnect.js");
-			await disconnectProvider("xopc-cloud");
+			await disconnectProviderCore("xopc-cloud", { clearCloudCatalog: () => this.clear("invalid-grant") });
 		});
 	}
 	async hydrate() {

package/dist/src/runtime-tools/manager.js

@@ -1,5 +1,6 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
+import { applyPathPrepend } from "../infra/path-prepend.js";
 import { RuntimeError } from "./errors.js";
 import { atomicInstallRuntime, extractRuntimeArchive } from "./archive.js";
 import { runRuntimeCommand } from "./command.js";
@@ -46,6 +47,40 @@ function uvExecutables(installDir) {
 		uvx: join(installDir, executableName("uvx"))
 	};
 }
+function managedNodeProbeEnvironment(executables) {
+	const env = { ...process.env };
+	applyPathPrepend(env, [dirname(executables.node ?? executables.primary)]);
+	return env;
+}
+async function probeNodePackageManagers(executables) {
+	if (!executables.npm || !executables.npx) return null;
+	const env = managedNodeProbeEnvironment(executables);
+	const [npm, npx] = await Promise.all([runRuntimeCommand({
+		command: executables.npm,
+		args: ["--version"],
+		env
+	}), runRuntimeCommand({
+		command: executables.npx,
+		args: ["--version"],
+		env
+	})]);
+	return {
+		npm,
+		npx
+	};
+}
+function packageManagerProbeFailure(name, result) {
+	if (result.ok) return null;
+	const output = result.stderr || result.stdout;
+	if (output) return `${name}: ${output}`;
+	if (result.timedOut) return `${name}: timed out`;
+	if (result.aborted) return `${name}: aborted`;
+	return `${name}: exited with code ${result.exitCode ?? "unknown"}`;
+}
+function packageManagerProbeFailureMessage(results) {
+	if (!results) return "npm or npx executable is missing";
+	return [packageManagerProbeFailure("npm", results.npm), packageManagerProbeFailure("npx", results.npx)].filter((message) => message !== null).join("; ");
+}
 function runtimeConfig(options, runtime) {
 	if (runtime === "node") return options.config.node;
 	if (runtime === "python") return options.config.python;
@@ -125,17 +160,8 @@ var ManagedRuntimeManager = class extends EventEmitter {
 			const version = parseRuntimeVersion(`${result.stdout}\n${result.stderr}`);
 			if (!result.ok || !version || !versionSatisfies(version, requestedVersion)) return null;
 			if (runtime === "node") {
-				const npm = manifest.executables.npm;
-				const npx = manifest.executables.npx;
-				if (!npm || !npx) return null;
-				const [npmProbe, npxProbe] = await Promise.all([runRuntimeCommand({
-					command: npm,
-					args: ["--version"]
-				}), runRuntimeCommand({
-					command: npx,
-					args: ["--version"]
-				})]);
-				if (!npmProbe.ok || !npxProbe.ok) return null;
+				const packageManagers = await probeNodePackageManagers(manifest.executables);
+				if (!packageManagers?.npm.ok || !packageManagers.npx.ok) return null;
 			}
 			return {
 				runtime,
@@ -271,22 +297,15 @@ var ManagedRuntimeManager = class extends EventEmitter {
 			}
 			let packageManagerVersion;
 			if (runtime === "node") {
-				const npmProbe = await runRuntimeCommand({
-					command: executables.npm,
-					args: ["--version"]
-				});
-				const npxProbe = await runRuntimeCommand({
-					command: executables.npx,
-					args: ["--version"]
-				});
-				if (!npmProbe.ok || !npxProbe.ok) {
+				const packageManagers = await probeNodePackageManagers(executables);
+				if (!packageManagers?.npm.ok || !packageManagers.npx.ok) {
 					await rm(installDir, {
 						recursive: true,
 						force: true
 					});
-					throw new RuntimeError(`Node ${version} is missing npm or npx`, "RUNTIME_PROBE_FAILED", runtime, "probe_package_manager", true);
+					throw new RuntimeError(`Node ${version} failed its npm or npx installation probe: ${packageManagerProbeFailureMessage(packageManagers)}`, "RUNTIME_PROBE_FAILED", runtime, "probe_package_manager", true);
 				}
-				packageManagerVersion = npmProbe.stdout;
+				packageManagerVersion = packageManagers.npm.stdout;
 			}
 			const now = (/* @__PURE__ */ new Date()).toISOString();
 			const manifest = {

package/dist/src/storage/sqlite/migrations/124_workflow_context_snapshots.sql

@@ -0,0 +1,15 @@
+CREATE TABLE workflow_context_snapshots (
+  snapshot_id TEXT PRIMARY KEY,
+  trace_id TEXT NOT NULL UNIQUE,
+  run_id TEXT NOT NULL,
+  project_id TEXT,
+  selected_items_json TEXT NOT NULL,
+  estimated_tokens INTEGER NOT NULL DEFAULT 0,
+  content_hash TEXT NOT NULL,
+  created_at INTEGER NOT NULL
+);
+
+CREATE INDEX idx_workflow_context_snapshots_run
+  ON workflow_context_snapshots(run_id, created_at DESC);
+CREATE INDEX idx_workflow_context_snapshots_project
+  ON workflow_context_snapshots(project_id, created_at DESC);

package/dist/src/storage/sqlite/migrations/125_project_workflow_presets.sql

@@ -0,0 +1,12 @@
+CREATE TABLE project_workflow_presets (
+  project_id TEXT NOT NULL,
+  definition_id TEXT NOT NULL,
+  context_refs_json TEXT NOT NULL DEFAULT '[]',
+  created_at INTEGER NOT NULL,
+  updated_at INTEGER NOT NULL,
+  PRIMARY KEY (project_id, definition_id),
+  FOREIGN KEY (project_id) REFERENCES projects(project_id) ON DELETE CASCADE
+);
+
+CREATE INDEX idx_project_workflow_presets_updated
+  ON project_workflow_presets(project_id, updated_at DESC);

package/dist/src/storage/sqlite/migrations/runner.d.ts

@@ -3,7 +3,7 @@ import type { ApplyMigrationsOptions } from './types.js';
 /** Baseline schema version applied from schema.sql on first open. */
 export declare const XOPC_DB_BASELINE_SCHEMA_VERSION = 11;
 /** Latest schema version this release supports (increment when adding migrations). */
-export declare const XOPC_DB_SCHEMA_VERSION = 123;
+export declare const XOPC_DB_SCHEMA_VERSION = 125;
 export declare function resolveMigrationsDir(override?: string): string;
 /**
  * Apply sequential SQL migrations from (currentVersion + 1) through targetVersion.