@xopcai/xopc 0.0.222 → 0.0.224

package/dist/src/auth/oauth/registry.js

@@ -9,11 +9,12 @@ import { init_kimi_coding, kimiCodingOAuthProvider } from "./kimi-coding.js";
 import { init_minimax_cn, minimaxCnOAuthProvider } from "./minimax-cn.js";
 import { init_minimax, minimaxOAuthProvider } from "./minimax.js";
 import { init_openai_codex, openaiCodexOAuthProvider } from "./openai-codex.js";
-import { init_xopc_cloud, xopcCloudOAuthProvider } from "./xopc-cloud.js";
+import { init_xopc_cloud, xopcCloudOAuthProvider, xopcTunnelOAuthProvider } from "./xopc-cloud.js";
 //#region src/auth/oauth/registry.ts
-function definition(provider, displayName = provider.name) {
+function definition(provider, purpose, displayName = provider.name) {
 	return {
 		displayName,
+		purpose,
 		provider,
 		profileId: `${provider.id}:default`,
 		urlPrompt: "🌐 Please open this URL in your browser:\n"
@@ -28,6 +29,9 @@ function getOAuthProviderInterfaces() {
 function getOAuthProviderIds() {
 	return Object.keys(OAUTH_PROVIDER_DEFINITIONS);
 }
+function getModelOAuthProviderIds() {
+	return Object.entries(OAUTH_PROVIDER_DEFINITIONS).filter(([, definition]) => definition.purpose === "models").map(([id]) => id);
+}
 function isOAuthOnlyProvider(provider) {
 	return OAUTH_PROVIDER_DEFINITIONS[provider]?.oauthOnly === true;
 }
@@ -44,22 +48,26 @@ var init_registry = __esmMin((() => {
 	init_xopc_cloud();
 	OAUTH_PROVIDER_DEFINITIONS = {
 		"xopc-cloud": {
-			...definition(xopcCloudOAuthProvider),
+			...definition(xopcCloudOAuthProvider, "models"),
+			oauthOnly: true
+		},
+		"xopc-tunnel": {
+			...definition(xopcTunnelOAuthProvider, "tunnel"),
 			oauthOnly: true
 		},
-		anthropic: definition(anthropicOAuthProvider, "Anthropic (Claude)"),
-		minimax: definition(minimaxOAuthProvider, "MiniMax (幂维智能)"),
+		anthropic: definition(anthropicOAuthProvider, "models", "Anthropic (Claude)"),
+		minimax: definition(minimaxOAuthProvider, "models", "MiniMax (幂维智能)"),
 		"minimax-cn": {
-			...definition(minimaxCnOAuthProvider, "MiniMax CN"),
+			...definition(minimaxCnOAuthProvider, "models", "MiniMax CN"),
 			urlPrompt: "🌐 请在浏览器中打开以下 URL:\n"
 		},
-		"kimi-coding": definition(kimiCodingOAuthProvider, "Kimi For Coding (月之暗面)"),
-		"github-copilot": definition(githubCopilotOAuthProvider),
-		"google-gemini-cli": definition(geminiCliOAuthProvider),
-		"google-antigravity": definition(antigravityOAuthProvider),
-		"openai-codex": definition(openaiCodexOAuthProvider)
+		"kimi-coding": definition(kimiCodingOAuthProvider, "models", "Kimi For Coding (月之暗面)"),
+		"github-copilot": definition(githubCopilotOAuthProvider, "models"),
+		"google-gemini-cli": definition(geminiCliOAuthProvider, "models"),
+		"google-antigravity": definition(antigravityOAuthProvider, "models"),
+		"openai-codex": definition(openaiCodexOAuthProvider, "models")
 	};
 }));
 //#endregion
 init_registry();
-export { OAUTH_PROVIDER_DEFINITIONS, getOAuthProviderDefinition, getOAuthProviderIds, getOAuthProviderInterfaces, init_registry, isOAuthOnlyProvider };
+export { OAUTH_PROVIDER_DEFINITIONS, getModelOAuthProviderIds, getOAuthProviderDefinition, getOAuthProviderIds, getOAuthProviderInterfaces, init_registry, isOAuthOnlyProvider };

package/dist/src/auth/oauth/xopc-cloud.d.ts

@@ -1,2 +1,3 @@
 import type { OAuthProviderInterface } from './types.js';
 export declare const xopcCloudOAuthProvider: OAuthProviderInterface;
+export declare const xopcTunnelOAuthProvider: OAuthProviderInterface;

package/dist/src/auth/oauth/xopc-cloud.js

@@ -213,7 +213,7 @@ function callbackHtml(title, message, tone, returnToAppUrl) {
 </body>
 </html>`;
 }
-async function loginWithBrowser(callbacks) {
+async function loginWithBrowser(callbacks, scope) {
 	if (callbacks.signal?.aborted) throw callbacks.signal.reason instanceof Error ? callbacks.signal.reason : /* @__PURE__ */ new Error("XOPC OAuth login cancelled");
 	const { verifier, challenge } = await generatePKCE();
 	const state = randomBytes(24).toString("base64url");
@@ -274,7 +274,7 @@ async function loginWithBrowser(callbacks) {
 		response_type: "code",
 		client_id: CLIENT_ID,
 		redirect_uri: redirectUri,
-		scope: DEFAULT_SCOPE,
+		scope,
 		code_challenge: challenge,
 		code_challenge_method: "S256",
 		state,
@@ -309,7 +309,7 @@ async function loginWithBrowser(callbacks) {
 		server.close();
 	}
 }
-async function loginWithDeviceCode(callbacks) {
+async function loginWithDeviceCode(callbacks, scope) {
 	const response = await fetch(`${consoleUrl()}/oauth/device_authorization`, {
 		method: "POST",
 		headers: {
@@ -318,7 +318,7 @@ async function loginWithDeviceCode(callbacks) {
 		},
 		body: new URLSearchParams({
 			client_id: CLIENT_ID,
-			scope: DEFAULT_SCOPE,
+			scope,
 			device_name: hostname() || "XOPC client",
 			client_type: "cli"
 		}),
@@ -353,9 +353,9 @@ async function loginWithDeviceCode(callbacks) {
 	}
 	throw new Error("XOPC OAuth authorization expired");
 }
-async function login(callbacks) {
+async function login(callbacks, options) {
 	return await callbacks.onSelect({
-		message: "Choose how to authorize XOPC Model Service",
+		message: `Choose how to authorize ${options.serviceName}`,
 		options: [{
 			id: "browser",
 			label: "Browser (recommended for this device)"
@@ -363,7 +363,7 @@ async function login(callbacks) {
 			id: "device_code",
 			label: "Device code (remote or headless)"
 		}]
-	}) === "device_code" ? loginWithDeviceCode(callbacks) : loginWithBrowser(callbacks);
+	}) === "device_code" ? loginWithDeviceCode(callbacks, options.scope) : loginWithBrowser(callbacks, options.scope);
 }
 async function refreshToken(current, signal) {
 	const response = await tokenRequest(new URLSearchParams({
@@ -375,23 +375,39 @@ async function refreshToken(current, signal) {
 	if (!response.ok) throw new Error(body.error_description ?? body.error ?? "XOPC OAuth refresh failed");
 	return credentials(body);
 }
-var CLIENT_ID, DEFAULT_CONSOLE_URL, DEFAULT_SCOPE, CALLBACK_PATH, AUTHORIZATION_TIMEOUT_MS, xopcCloudOAuthProvider;
+function createXopcOAuthProvider(options) {
+	return {
+		id: options.id,
+		name: options.name,
+		loginMethods: ["browser", "device_code"],
+		login: (callbacks) => login(callbacks, {
+			scope: options.scope,
+			serviceName: options.name
+		}),
+		refreshToken,
+		getApiKey: (value) => value.access
+	};
+}
+var CLIENT_ID, DEFAULT_CONSOLE_URL, MODEL_SERVICE_SCOPE, TUNNEL_REGISTRATION_SCOPE, CALLBACK_PATH, AUTHORIZATION_TIMEOUT_MS, xopcCloudOAuthProvider, xopcTunnelOAuthProvider;
 var init_xopc_cloud = __esmMin((() => {
 	init_pkce();
 	CLIENT_ID = "xopc-native";
 	DEFAULT_CONSOLE_URL = "https://console.xopc.ai";
-	DEFAULT_SCOPE = "models:read models:invoke account:usage connectors:read connectors:manage connectors:execute offline_access";
+	MODEL_SERVICE_SCOPE = "models:read models:invoke account:usage connectors:read connectors:manage connectors:execute offline_access";
+	TUNNEL_REGISTRATION_SCOPE = "tunnel:register";
 	CALLBACK_PATH = "/oauth/callback";
 	AUTHORIZATION_TIMEOUT_MS = 5 * 6e4;
-	xopcCloudOAuthProvider = {
+	xopcCloudOAuthProvider = createXopcOAuthProvider({
 		id: "xopc-cloud",
 		name: "XOPC Model Service",
-		loginMethods: ["browser", "device_code"],
-		login,
-		refreshToken,
-		getApiKey: (value) => value.access
-	};
+		scope: MODEL_SERVICE_SCOPE
+	});
+	xopcTunnelOAuthProvider = createXopcOAuthProvider({
+		id: "xopc-tunnel",
+		name: "XOPC Public Tunnel",
+		scope: TUNNEL_REGISTRATION_SCOPE
+	});
 }));
 //#endregion
 init_xopc_cloud();
-export { init_xopc_cloud, xopcCloudOAuthProvider };
+export { init_xopc_cloud, xopcCloudOAuthProvider, xopcTunnelOAuthProvider };

package/dist/src/cli/commands/channels.js

@@ -1,8 +1,8 @@
 import { buildChannelCatalogForConfig, init_channel_catalog_service } from "../../channels/catalog/channel-catalog-service.js";
 import { init_loader, loadConfig, saveConfig } from "../../config/loader.js";
+import { formatExamples, register } from "../registry.js";
 import { listChannelPairingState } from "../../channels/pairing/pairing-service.js";
 import { approveChannelPairingFromCli } from "../../channels/pairing/approve-cli.js";
-import { formatExamples, register } from "../registry.js";
 import { colors } from "../utils/colors.js";
 import { Command } from "commander";
 //#region src/cli/commands/channels.ts

package/dist/src/cli/commands/connectors.js

@@ -1,8 +1,8 @@
 import { init_loader, loadConfig, saveConfig } from "../../config/loader.js";
 import { getStoreConnectorInstallPlan, installStoreConnector, listStoreConnectors } from "../../capabilities/store-connector.js";
 import { register } from "../registry.js";
-import { confirm } from "@inquirer/prompts";
 import { Command } from "commander";
+import { confirm } from "@inquirer/prompts";
 //#region src/cli/commands/connectors.ts
 init_loader();
 function parsePairs(values, option) {

package/dist/src/cli/commands/extension-marketplace.js

@@ -13,8 +13,8 @@ import { existsSync, readFileSync, rmSync, statSync } from "node:fs";
 import { execSync } from "node:child_process";
 import { createHash } from "node:crypto";
 import semver from "semver";
-import { confirm } from "@inquirer/prompts";
 import { Command } from "commander";
+import { confirm } from "@inquirer/prompts";
 //#region src/cli/commands/extension-marketplace.ts
 init_loader();
 init_paths();

package/dist/src/cli/commands/models.js

@@ -9,8 +9,8 @@ import { prepareUpdateGlobalDefaults } from "../../gateway/global-defaults-admin
 import { disconnectProvider } from "../../providers/provider-disconnect.js";
 import { colors } from "../utils/colors.js";
 import { runCliOAuthLogin } from "../utils/oauth-login.js";
-import { input } from "@inquirer/prompts";
 import { Command } from "commander";
+import { input } from "@inquirer/prompts";
 //#region src/cli/commands/models.ts
 init_credentials();
 init_schema();

package/dist/src/cli/commands/onboard.js

@@ -10,8 +10,8 @@ import { initWorkspace } from "../utils/init-workspace.js";
 import { setupModel } from "./onboard/model.js";
 import { getChannelConfigurators } from "./onboard/channels/registry.js";
 import { setupChannels } from "./onboard/channels/index.js";
-import { select } from "@inquirer/prompts";
 import { Command } from "commander";
+import { select } from "@inquirer/prompts";
 //#region src/cli/commands/onboard.ts
 init_schema();
 init_paths_state();

package/dist/src/cli/commands/tunnel.js

@@ -38,7 +38,7 @@ function configureTunnel(ctx) {
 	const brokerUrl = resolveTunnelBrokerUrl(config.tunnel?.brokerUrl);
 	getTunnelService().configure({
 		brokerUrl,
-		registrationSecret: resolveTunnelRegistrationSecret(process.env, brokerUrl, config.tunnel?.registrationSecret),
+		registrationSecret: resolveTunnelRegistrationSecret(brokerUrl, config.tunnel?.registrationSecret),
 		autoStart: config.tunnel?.autoStart ?? false,
 		gatewayHost: host,
 		frpSubdomainHost: resolveFrpSubdomainHost(resolveTunnelBrokerUrl(config.tunnel?.brokerUrl))
@@ -131,13 +131,12 @@ function createTunnelCommand(ctx) {
 		});
 		console.log("Tunnel security consent recorded.");
 	});
-	cmd.command("secret").description("Manage tunnel broker registration secret in config").command("set").description("Save tunnel.registrationSecret to xopc.json (env XOPC_TUNNEL_REGISTRATION_SECRET overrides at runtime)").argument("[secret]", "Registration secret (prompts securely when omitted in a TTY)").option("--stdin", "Read secret from stdin (single line, trimmed)").action(async (secretArg, opts) => {
+	cmd.command("secret").description("Manage tunnel broker registration secret in config").command("set").description("Save tunnel.registrationSecret to xopc.json").argument("[secret]", "Registration secret (prompts securely when omitted in a TTY)").option("--stdin", "Read secret from stdin (single line, trimmed)").action(async (secretArg, opts) => {
 		try {
 			await saveTunnelRegistrationSecret(ctx, await readTunnelRegistrationSecretFromCli({
 				secretArg,
 				stdin: opts.stdin
 			}));
-			if (process.env.XOPC_TUNNEL_REGISTRATION_SECRET?.trim()) console.log("Note: XOPC_TUNNEL_REGISTRATION_SECRET is set in the environment and overrides the saved config at runtime.");
 			console.log(`Saved tunnel registration secret to ${ctx.configPath}.`);
 		} catch (err) {
 			const em = err instanceof Error ? err.message : String(err);
@@ -227,7 +226,7 @@ function createTunnelCommand(ctx) {
 		console.log(`# Self-hosted FRP broker sketch for ${domain}`);
 		console.log("# 1. Run frps with vhost HTTP/HTTPS and a registration token");
 		console.log(`# 2. Point tunnel.brokerUrl to https://${domain}/api`);
-		console.log(`# 3. Set XOPC_TUNNEL_REGISTRATION_SECRET in the gateway environment`);
+		console.log("# 3. Save the broker registration key as tunnel.registrationSecret");
 		console.log("");
 		console.log(JSON.stringify({
 			frps: {
@@ -237,7 +236,7 @@ function createTunnelCommand(ctx) {
 			},
 			broker: {
 				apiUrl: `https://${domain}/api`,
-				registrationSecretEnv: "XOPC_TUNNEL_REGISTRATION_SECRET"
+				registrationSecretConfig: "tunnel.registrationSecret"
 			}
 		}, null, 2));
 	}));

package/dist/src/config/agent-profile.js

@@ -1,6 +1,6 @@
-import { init_agent_scope, normalizeAgentId, resolveAgentWorkspaceDir } from "../agent/agent-scope.js";
 import { resolveEffectiveAgentManifest } from "../agent-manifest/resolver.js";
 import "../agent-manifest/index.js";
+import { init_agent_scope, normalizeAgentId, resolveAgentWorkspaceDir } from "../agent/agent-scope.js";
 import { init_session_key, parseSessionKey } from "../routing/session-key.js";
 import { agentExists, getDefaultAgentId, init_resolve_route } from "../routing/resolve-route.js";
 //#region src/config/agent-profile.ts

package/dist/src/config/schema.d.ts

@@ -991,6 +991,15 @@ export declare const GatewayConfigSchema: z.ZodDefault<z.ZodObject<{
             listingCacheMs: z.ZodDefault<z.ZodNumber>;
             zipConcurrency: z.ZodDefault<z.ZodNumber>;
         }, z.core.$strip>>;
+        note: z.ZodDefault<z.ZodObject<{
+            enabled: z.ZodDefault<z.ZodBoolean>;
+            maxMarkdownBytes: z.ZodDefault<z.ZodNumber>;
+            maxAttachmentCount: z.ZodDefault<z.ZodNumber>;
+            maxAttachmentSize: z.ZodDefault<z.ZodNumber>;
+            maxTotalSize: z.ZodDefault<z.ZodNumber>;
+            assetTicketTtlMs: z.ZodDefault<z.ZodNumber>;
+            revokeOnSourceDelete: z.ZodDefault<z.ZodBoolean>;
+        }, z.core.$strip>>;
     }, z.core.$strip>>;
     siteShare: z.ZodOptional<z.ZodObject<{
         enabled: z.ZodDefault<z.ZodBoolean>;
@@ -2067,6 +2076,15 @@ export declare const ConfigSchema: z.ZodDefault<z.ZodObject<{
                 listingCacheMs: z.ZodDefault<z.ZodNumber>;
                 zipConcurrency: z.ZodDefault<z.ZodNumber>;
             }, z.core.$strip>>;
+            note: z.ZodDefault<z.ZodObject<{
+                enabled: z.ZodDefault<z.ZodBoolean>;
+                maxMarkdownBytes: z.ZodDefault<z.ZodNumber>;
+                maxAttachmentCount: z.ZodDefault<z.ZodNumber>;
+                maxAttachmentSize: z.ZodDefault<z.ZodNumber>;
+                maxTotalSize: z.ZodDefault<z.ZodNumber>;
+                assetTicketTtlMs: z.ZodDefault<z.ZodNumber>;
+                revokeOnSourceDelete: z.ZodDefault<z.ZodBoolean>;
+            }, z.core.$strip>>;
         }, z.core.$strip>>;
         siteShare: z.ZodOptional<z.ZodObject<{
             enabled: z.ZodDefault<z.ZodBoolean>;

package/dist/src/config/schema.js

@@ -490,7 +490,7 @@ strict: z.boolean().optional() }).optional();
 	TunnelConfigSchema = z.object({
 		enabled: z.boolean().default(false),
 		brokerUrl: z.string().url().default("https://frp.xopc.ai/api"),
-		/** Broker register API secret (env `XOPC_TUNNEL_REGISTRATION_SECRET` overrides when set). */
+		/** Broker register API secret. */
 		registrationSecret: z.string().min(1).optional(),
 		autoStart: z.boolean().default(false),
 		subdomain: z.string().optional(),
@@ -620,6 +620,24 @@ activityDetailDefault: z.enum([
 				maxDepth: 20,
 				listingCacheMs: 6e4,
 				zipConcurrency: 1
+			}),
+			/** Note snapshot-sharing controls. */
+			note: z.object({
+				enabled: z.boolean().default(true),
+				maxMarkdownBytes: z.number().int().min(1024).max(10485760).default(2097152),
+				maxAttachmentCount: z.number().int().min(0).max(500).default(50),
+				maxAttachmentSize: z.number().int().min(1024).max(1073741824).default(104857600),
+				maxTotalSize: z.number().int().min(1024).max(2147483648).default(262144e3),
+				assetTicketTtlMs: z.number().int().min(6e4).max(36e5).default(6e5),
+				revokeOnSourceDelete: z.boolean().default(true)
+			}).default({
+				enabled: true,
+				maxMarkdownBytes: 2097152,
+				maxAttachmentCount: 50,
+				maxAttachmentSize: 104857600,
+				maxTotalSize: 262144e3,
+				assetTicketTtlMs: 6e5,
+				revokeOnSourceDelete: true
 			})
 		}).optional(),
 		/** Site-share configuration (static directory or reverse-proxy a local dev server). */

package/dist/src/extensions/sdk/index.js

@@ -7,8 +7,8 @@ import { SlotRegistry, getSlotRegistry, registerSlotType } from "../slots.js";
 import { ExtensionDiagnostics, ExtensionLoaderCacheImpl, getExtensionCache, getExtensionDiagnostics } from "../diagnostics.js";
 import "../loader.js";
 import { ExtensionHookRunner, createHookContext, isHookEvent } from "../hooks.js";
-import { defineChannelPluginEntry } from "./channel-entry.js";
 import { registerExtensionCliProgram } from "./channel-helpers.js";
+import { defineChannelPluginEntry } from "./channel-entry.js";
 import { lazyFunction, lazyModule } from "./lazy.js";
 import { createMockExtensionApi, createTestGateway } from "./testing.js";
 //#region src/extensions/sdk/index.ts

package/dist/src/gateway/agents-admin.js

@@ -1,5 +1,5 @@
-import { init_agent_scope, listAgentEntries, normalizeAgentId, resolveAgentDir, resolveAgentProfileDir, resolveAgentWorkspaceDir, resolveDefaultAgentId, resolveUserPath, validateAgentIdForNewAgent } from "../agent/agent-scope.js";
 import { resolveCapabilityPresetLayer, resolveEffectiveAgentManifest } from "../agent-manifest/resolver.js";
+import { init_agent_scope, listAgentEntries, normalizeAgentId, resolveAgentDir, resolveAgentProfileDir, resolveAgentWorkspaceDir, resolveDefaultAgentId, resolveUserPath, validateAgentIdForNewAgent } from "../agent/agent-scope.js";
 import { resolveEffectiveAgentProfile } from "../config/agent-profile.js";
 import { WORKSPACE_FILES, init_paths } from "../config/paths.js";
 import { AGENT_PROFILE_MARKDOWN_SYSTEM_FILES, REQUIRED_AGENT_PROFILE_MARKDOWN_FILE_SET } from "../agent/context/workspace.js";

package/dist/src/gateway/hono/app.js

@@ -147,6 +147,7 @@ function createHonoApp(config) {
 	const DEFAULT_API_BODY_MAX = 1 * 1024 * 1024;
 	const SKILL_UPLOAD_BODY_MAX = 10 * 1024 * 1024;
 	const NOTE_MEDIA_BODY_MAX = 25 * 1024 * 1024;
+	const MEDIA_UPLOAD_BODY_MAX = 33 * 1024 * 1024;
 	const VOICE_TRANSCRIBE_BODY_MAX = 26 * 1024 * 1024;
 	const SESSION_INPUT_BODY_MAX = maxSessionInputRequestBodyBytes();
 	const isNoteMediaUploadRequest = (path, method, contentType) => {
@@ -175,7 +176,7 @@ function createHonoApp(config) {
 	}));
 	app.use("/api/*", async (c, next) => {
 		const contentType = c.req.header("content-type");
-		const maxSize = c.req.method === "POST" && c.req.path === "/api/tasks" || c.req.method === "POST" && /^\/api\/sessions\/[^/]+\/inputs$/.test(c.req.path) || c.req.method === "POST" && /^\/api\/tasks\/[^/]+\/inputs$/.test(c.req.path) || c.req.method === "PATCH" && /^\/api\/sessions\/[^/]+\/inputs\/[^/]+$/.test(c.req.path) ? SESSION_INPUT_BODY_MAX : c.req.path === "/api/skills/upload" ? SKILL_UPLOAD_BODY_MAX : c.req.path === "/api/voice/transcriptions" ? VOICE_TRANSCRIBE_BODY_MAX : isNoteMediaUploadRequest(c.req.path, c.req.method, contentType) ? NOTE_MEDIA_BODY_MAX : isProjectFileUploadRequest(c.req.path, c.req.method, contentType) ? NOTE_MEDIA_BODY_MAX : discussionUploadBodyMax(c.req.path, c.req.method, contentType) ?? DEFAULT_API_BODY_MAX;
+		const maxSize = c.req.method === "POST" && c.req.path === "/api/tasks" || c.req.method === "POST" && /^\/api\/sessions\/[^/]+\/inputs$/.test(c.req.path) || c.req.method === "POST" && /^\/api\/tasks\/[^/]+\/inputs$/.test(c.req.path) || c.req.method === "PATCH" && /^\/api\/sessions\/[^/]+\/inputs\/[^/]+$/.test(c.req.path) ? SESSION_INPUT_BODY_MAX : c.req.path === "/api/skills/upload" ? SKILL_UPLOAD_BODY_MAX : c.req.path === "/api/voice/transcriptions" ? VOICE_TRANSCRIBE_BODY_MAX : c.req.path === "/api/media" && c.req.method === "POST" ? MEDIA_UPLOAD_BODY_MAX : isNoteMediaUploadRequest(c.req.path, c.req.method, contentType) ? NOTE_MEDIA_BODY_MAX : isProjectFileUploadRequest(c.req.path, c.req.method, contentType) ? NOTE_MEDIA_BODY_MAX : discussionUploadBodyMax(c.req.path, c.req.method, contentType) ?? DEFAULT_API_BODY_MAX;
 		const maxSizeMb = Math.ceil(maxSize / (1024 * 1024));
 		return bodyLimit({
 			maxSize,

package/dist/src/gateway/hono/oauth-async.d.ts

@@ -23,6 +23,7 @@ export interface OAuthCompletionReadiness {
 export declare function buildOAuthCompletionReadiness(config: Config, catalog: CatalogReadiness): OAuthCompletionReadiness;
 export declare function refreshModelCatalogAfterOAuth(provider: string, service: Pick<GatewayService, 'getModelCatalogSync'>): Promise<CatalogReadiness | undefined>;
 export declare function normalizeDesktopOAuthReturnPath(value: unknown): string | undefined;
+export declare function buildDesktopOAuthReturnUrl(provider: string, sessionId: string, returnPath: unknown): string | undefined;
 export declare function resolveOAuthLoginMethodPreference(params: {
     requestedMethod?: unknown;
     supportedMethods?: readonly string[];

package/dist/src/gateway/hono/oauth-async.js

@@ -82,11 +82,17 @@ function normalizeDesktopOAuthReturnPath(value) {
 	if (path.length === 0 || path.length > 2048 || !path.startsWith("/") || path.startsWith("//") || path.includes("\\") || /[\u0000-\u001f\u007f]/.test(path)) return;
 	return path;
 }
-function desktopOAuthReturnUrl(sessionId, returnPath) {
+const DESKTOP_OAUTH_CALLBACK_PATHS = {
+	"xopc-cloud": "model-connected",
+	"xopc-tunnel": "tunnel-connected"
+};
+function buildDesktopOAuthReturnUrl(provider, sessionId, returnPath) {
+	const callbackPath = DESKTOP_OAUTH_CALLBACK_PATHS[provider];
+	if (!callbackPath) return void 0;
 	const params = new URLSearchParams({ request_id: sessionId });
 	const normalizedReturnPath = normalizeDesktopOAuthReturnPath(returnPath);
 	if (normalizedReturnPath) params.set("return_path", normalizedReturnPath);
-	return `xopc://cloud/model-connected?${params.toString()}`;
+	return `xopc://cloud/${callbackPath}?${params.toString()}`;
 }
 function cancelOAuthSession(session, message = "OAuth flow cancelled") {
 	if (session.abortController) session.abortController.abort();
@@ -142,10 +148,11 @@ function createOAuthAsyncHandler(service) {
 		const oauthProvider = OAUTH_PROVIDERS[provider];
 		if (!oauthProvider) return c.json({ error: `Unknown OAuth provider: ${provider}` }, 400);
 		const sessionId = generateSessionId();
+		const returnToAppUrl = body.client === "desktop" ? buildDesktopOAuthReturnUrl(provider, sessionId, body.returnPath) : void 0;
 		const session = {
 			id: sessionId,
 			provider,
-			...body.client === "desktop" && provider === "xopc-cloud" ? { returnToAppUrl: desktopOAuthReturnUrl(sessionId, body.returnPath) } : {},
+			...returnToAppUrl ? { returnToAppUrl } : {},
 			preferredLoginMethod: preferredOAuthLoginMethod({
 				provider,
 				requestedMethod: body.loginMethod,
@@ -378,4 +385,4 @@ async function runOAuthFlow(session, oauthProvider, service) {
 	}
 }
 //#endregion
-export { buildOAuthCompletionReadiness, createOAuthAsyncHandler, normalizeDesktopOAuthReturnPath, refreshModelCatalogAfterOAuth, resolveOAuthLoginMethodPreference };
+export { buildDesktopOAuthReturnUrl, buildOAuthCompletionReadiness, createOAuthAsyncHandler, normalizeDesktopOAuthReturnPath, refreshModelCatalogAfterOAuth, resolveOAuthLoginMethodPreference };

package/dist/src/gateway/hono/routes/config.js

@@ -1,4 +1,5 @@
 import { enumerateLanGatewayCandidates } from "../../host.js";
+import { getTunnelService } from "../../../tunnel/tunnel-service.js";
 import { prepareLocalVoiceModelAfterProviderSwitch } from "../../../voice/local/provider-switch.js";
 import { buildSafeWebConfigPayload } from "../lib/config-payload.js";
 import { applyAgentsPatch } from "./config-patch/agents.js";
@@ -70,6 +71,15 @@ function registerConfigRoutes(authenticated, deps) {
 			ok: false,
 			error: finalGwCheck.error
 		}, finalGwCheck.status);
+		if (body?.tunnel && typeof body.tunnel === "object" && !Array.isArray(body.tunnel) && body.tunnel.registrationSecret === null) try {
+			await getTunnelService().stop();
+		} catch (err) {
+			const message = err instanceof Error ? err.message : String(err);
+			return c.json({
+				ok: false,
+				error: `Failed to stop tunnel before clearing key: ${message}`
+			}, 500);
+		}
 		const result = await service.saveConfig(config);
 		if (!result.saved) return c.json({
 			ok: false,

package/dist/src/gateway/hono/routes/host-fs.js

@@ -1,7 +1,7 @@
 import { createGatewayRouteLogger } from "../lib/route-logger.js";
 import * as os$1 from "node:os";
 import * as path$1 from "node:path";
-import { readdir, realpath, stat } from "node:fs/promises";
+import { mkdir, readdir, realpath, stat } from "node:fs/promises";
 //#region src/gateway/hono/routes/host-fs.ts
 const log = createGatewayRouteLogger("HostFs");
 function jsonError(status, message) {
@@ -172,6 +172,45 @@ function registerHostFsRoutes(authenticated, _deps) {
 			return jsonError(500, msg || "Failed to read directory");
 		}
 	});
+	/** Create one directory below an existing absolute directory on the gateway host. */
+	authenticated.post("/api/host/fs/directory", async (c) => {
+		const body = await c.req.json().catch(() => null);
+		const parentPath = body && typeof body === "object" && typeof body.parentPath === "string" ? body.parentPath.trim() : "";
+		const name = body && typeof body === "object" && typeof body.name === "string" ? body.name.trim() : "";
+		if (!parentPath || !path$1.isAbsolute(parentPath)) return jsonError(400, "An absolute parent path is required");
+		if (!name || name === "." || name === ".." || name.includes("/") || name.includes("\\") || name.includes("\0") || name.length > 255) return jsonError(400, "Invalid folder name");
+		let resolvedParent;
+		try {
+			resolvedParent = await realpath(path$1.normalize(parentPath));
+			if (!(await stat(resolvedParent)).isDirectory()) return jsonError(400, "Parent path is not a directory");
+		} catch (err) {
+			log.warn({
+				err,
+				path: parentPath
+			}, "Host fs create parent lookup failed");
+			return jsonError(404, "Parent path not found");
+		}
+		const directoryPath = path$1.join(resolvedParent, name);
+		try {
+			await mkdir(directoryPath);
+			const createdPath = await realpath(directoryPath);
+			log.info({ path: createdPath }, "Host fs directory created");
+			return c.json({
+				ok: true,
+				payload: { absolutePath: createdPath }
+			}, 201);
+		} catch (err) {
+			const code = err?.code;
+			if (code === "EEXIST") return jsonError(409, "A file or folder with this name already exists");
+			log.warn({
+				err,
+				path: directoryPath
+			}, "Host fs directory create failed");
+			if (code === "EACCES" || code === "EPERM" || code === "EROFS") return jsonError(403, "Permission denied");
+			if (code === "ENOENT") return jsonError(404, "Parent path not found");
+			return jsonError(500, "Failed to create folder");
+		}
+	});
 }
 //#endregion
 export { registerHostFsRoutes };

package/dist/src/gateway/hono/routes/media.js

@@ -1,15 +1,47 @@
 import { TaskRepository } from "../../../tasks/task-repository.js";
 import { parseMediaUri } from "../../../media/uri.js";
-import { mimeTypeFromMediaPath } from "../../../media/store.js";
+import { mimeTypeFromMediaPath, saveMediaBuffer } from "../../../media/store.js";
 import { readMediaReference } from "../../../media/media-reference.js";
 import { TaskContextRepository } from "../../../tasks/task-context-repository.js";
 import { pendingTranscriptReferencesMediaUri } from "../../../agent/inbound/attachment-pipeline.js";
+import { MAX_WEBCHAT_ATTACHMENT_FILE_BYTES } from "../../chat-limits.js";
 import { messagesReferenceMediaUri } from "../../../media/session-references.js";
 import { createGatewayRouteLogger } from "../lib/route-logger.js";
 //#region src/gateway/hono/routes/media.ts
 const log = createGatewayRouteLogger("Media");
 function registerMediaRoutes(authenticated, deps) {
 	const tasks = new TaskRepository();
+	authenticated.post("/api/media", deps.strictRateLimitMiddleware, async (c) => {
+		const file = (await c.req.formData().catch(() => null))?.get("file");
+		if (!(file instanceof Blob)) return c.json({
+			ok: false,
+			error: { message: "Missing required file field: file" }
+		}, 400);
+		if (file.size === 0) return c.json({
+			ok: false,
+			error: { message: "Uploaded file is empty" }
+		}, 400);
+		if (file.size > 33554432) return c.json({
+			ok: false,
+			error: { message: "Uploaded file exceeds 32 MB limit" }
+		}, 413);
+		const name = "name" in file && typeof file.name === "string" && file.name.trim() ? file.name.trim() : `upload-${Date.now()}`;
+		const saved = await saveMediaBuffer(Buffer.from(await file.arrayBuffer()), {
+			bucket: "inbound",
+			contentType: file.type || "application/octet-stream",
+			maxBytes: MAX_WEBCHAT_ATTACHMENT_FILE_BYTES,
+			originalFilename: name
+		});
+		return c.json({
+			ok: true,
+			payload: {
+				uri: saved.uri,
+				mimeType: saved.contentType,
+				name,
+				size: saved.size
+			}
+		}, 201);
+	});
 	authenticated.get("/api/media/read", async (c) => {
 		const uriRaw = c.req.query("uri");
 		if (!uriRaw || typeof uriRaw !== "string") return c.json({