@xopcai/xopc 0.0.225 → 0.0.228

package/dist/src/cli/command-loaders.js

@@ -11,6 +11,7 @@ const REGISTRY_COMMAND_MODULES = {
 	tui: () => import("./commands/tui.js"),
 	resume: () => import("./commands/resume.js"),
 	gateway: () => import("./commands/gateway.js"),
+	history: () => import("./commands/history.js"),
 	session: () => import("./commands/session.js"),
 	project: () => import("./commands/project.js"),
 	config: () => import("./commands/config.js"),

package/dist/src/cli/command-manifest.js

@@ -67,6 +67,10 @@ const ROOT_HELP_COMMANDS = [
 		name: "gateway [options]",
 		description: "Start the xopc gateway server"
 	},
+	{
+		name: "history",
+		description: "Export XOPC session history for external tools"
+	},
 	{
 		name: "session",
 		description: "Session management commands"

package/dist/src/cli/commands/doctor/checks/database-schema.js

@@ -52,7 +52,7 @@ async function checkDatabaseSchema(ctx) {
 		id: "database-schema",
 		label: "Database schema",
 		status: "pass",
-		message: `SQLite schema v${status.dbVersion} (current release v134).`,
+		message: `SQLite schema v${status.dbVersion} (current release v136).`,
 		hints: []
 	};
 }

package/dist/src/cli/commands/gateway/lifecycle.js

@@ -1,8 +1,8 @@
 import { init_paths, resolveConfigPath } from "../../../config/paths.js";
 import { loadConfig } from "../../../config/loader.js";
 import "../../../config/index.js";
-import { resolveGatewayService } from "../../../daemon/service.js";
 import { isRestartEnabled } from "../../../config/commands.flags.js";
+import { resolveGatewayService } from "../../../daemon/service.js";
 import { authorizeGatewaySigusr1Restart, writeGatewayRestartIntentSync } from "../../../infra/restart.js";
 import { findVerifiedGatewayListenerPidsOnPortSync, formatGatewayPidList, signalVerifiedGatewayPidSync } from "../../../infra/gateway-processes.js";
 import { runServiceRestart, runServiceStop } from "./lifecycle-core.js";

package/dist/src/cli/commands/history.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/src/cli/commands/history.js

@@ -0,0 +1,50 @@
+import { requireXopcDatabase } from "../../storage/sqlite/connection.js";
+import "../../storage/sqlite/index.js";
+import { formatExamples, register } from "../registry.js";
+import { exportCtxHistory } from "../../history/ctx/exporter.js";
+import { Command } from "commander";
+//#region src/cli/commands/history.ts
+async function runCtxExport(options) {
+	try {
+		const { db } = requireXopcDatabase();
+		const result = await exportCtxHistory(db, { outputDir: options.outputDir });
+		const importCommand = `ctx import --history-source-manifest ${result.manifestPath}`;
+		if (options.json) {
+			console.log(JSON.stringify({
+				...result,
+				importCommand
+			}, null, 2));
+			return;
+		}
+		const action = result.changed ? "Exported" : "Already up to date";
+		console.log(`${action}: ${result.sessionCount} sessions, ${result.eventCount} events`);
+		console.log(`History: ${result.historyPath}`);
+		console.log(`Manifest: ${result.manifestPath}`);
+		console.log(`\nRegister or refresh it in ctx:\n  ${importCommand}`);
+	} catch (error) {
+		const message = error instanceof Error ? error.message : String(error);
+		console.error(`Failed to export history for ctx: ${message}`);
+		process.exit(1);
+	}
+}
+function createHistoryCommand(_ctx) {
+	const command = new Command("history").description("Export XOPC session history for external tools").addHelpText("after", formatExamples([
+		"xopc history export ctx",
+		"xopc history export ctx --output-dir ./xopc-ctx-history",
+		"xopc history export ctx --json"
+	]));
+	command.command("export").description("Export session history").command("ctx").description("Export a provider-owned ctx-history-jsonl-v2 source").option("--output-dir <path>", "Output directory (default: <xopc-state>/exports/ctx)").option("--json", "Output the result as JSON").action(runCtxExport);
+	return command;
+}
+register({
+	id: "history",
+	name: "history",
+	description: "Export XOPC session history for external tools",
+	factory: createHistoryCommand,
+	metadata: {
+		category: "utility",
+		examples: ["xopc history export ctx"]
+	}
+});
+//#endregion
+export {};

package/dist/src/config/agent-profile.js

@@ -1,6 +1,6 @@
+import { init_agent_scope, normalizeAgentId, resolveAgentWorkspaceDir } from "../agent/agent-scope.js";
 import { resolveEffectiveAgentManifest } from "../agent-manifest/resolver.js";
 import "../agent-manifest/index.js";
-import { init_agent_scope, normalizeAgentId, resolveAgentWorkspaceDir } from "../agent/agent-scope.js";
 import { init_session_key, parseSessionKey } from "../routing/session-key.js";
 import { agentExists, getDefaultAgentId, init_resolve_route } from "../routing/resolve-route.js";
 //#region src/config/agent-profile.ts

package/dist/src/connectors/connected-source-understanding.js

@@ -1,9 +1,9 @@
 import { finishContextExtractionRun } from "../storage/sqlite/context-extraction-repository.js";
 import { listKnowledgeSourceItems } from "../storage/sqlite/knowledge-repository.js";
 import "../storage/sqlite/index.js";
+import { focusLifecycle } from "../user-context/focus-lifecycle.js";
 import { upsertUserFocus } from "../user-context/sources/repository.js";
 import { claimRegisteredExtraction } from "../user-context/extraction/registry.js";
-import { focusLifecycle } from "../user-context/focus-lifecycle.js";
 import { allowsRemoteSourceProcessing } from "../user-context/sources/processing-policy.js";
 import { analyzeUnderstandingSources } from "../work-discovery/analyzer.js";
 import { createHash } from "node:crypto";

package/dist/src/gateway/agents-admin.js

@@ -1,5 +1,5 @@
-import { resolveCapabilityPresetLayer, resolveEffectiveAgentManifest } from "../agent-manifest/resolver.js";
 import { init_agent_scope, listAgentEntries, normalizeAgentId, resolveAgentDir, resolveAgentProfileDir, resolveAgentWorkspaceDir, resolveDefaultAgentId, resolveUserPath, validateAgentIdForNewAgent } from "../agent/agent-scope.js";
+import { resolveCapabilityPresetLayer, resolveEffectiveAgentManifest } from "../agent-manifest/resolver.js";
 import { resolveEffectiveAgentProfile } from "../config/agent-profile.js";
 import { WORKSPACE_FILES, init_paths } from "../config/paths.js";
 import { AGENT_PROFILE_MARKDOWN_SYSTEM_FILES, REQUIRED_AGENT_PROFILE_MARKDOWN_FILE_SET } from "../agent/context/workspace.js";

package/dist/src/gateway/chat-stream/protocol.d.ts

@@ -1,4 +1,4 @@
-import type { ToolActivity } from '@xopcai/gateway-contract';
+import type { ToolActivity, TurnOutcome } from '@xopcai/gateway-contract';
 export type ChatStreamStatus = 'success' | 'error' | 'cancelled';
 export type PetFeedbackTaskState = 'working' | 'waiting' | 'success' | 'error';
 export type PetFeedbackSensitivity = 'public' | 'private';
@@ -142,6 +142,7 @@ export type TurnDiffEvent = ChatStreamEnvelope<'turn_diff', {
     added: number;
     removed: number;
 }>;
+export type TurnOutcomeEvent = ChatStreamEnvelope<'turn_outcome', TurnOutcome>;
 export type ReviewStartEvent = ChatStreamEnvelope<'review_start', {
     messageId: string;
     reviewId: string;
@@ -237,4 +238,4 @@ export type StreamErrorEvent = ChatStreamEnvelope<'error', {
     recoverable?: boolean;
     petFeedback: PetFeedback;
 }>;
-export type ChatStreamEvent = RunStartEvent | UserMessageEvent | UserTranscriptEvent | AssistantMessageStartEvent | AssistantDeltaEvent | ThinkingDeltaEvent | ThinkingEndEvent | ToolStartEvent | ToolUpdateEvent | ToolEndEvent | CommandStartedEvent | CommandOutputDeltaEvent | CommandCompletedEvent | PatchAppliedEvent | TurnPlanUpdatedEvent | TaskPlanUpdatedEvent | TurnDiffEvent | ReviewStartEvent | ReviewDeltaEvent | ReviewEndEvent | ReviewEvent | AssistantMessageEndEvent | ProgressEvent | CompactionEvent | TtsAudioEvent | ClarifyRequestEvent | MemoryConsentRequiredEvent | MemoryCapturedEvent | MemoryCandidateEvent | RunEndEvent | StreamErrorEvent;
+export type ChatStreamEvent = RunStartEvent | UserMessageEvent | UserTranscriptEvent | AssistantMessageStartEvent | AssistantDeltaEvent | ThinkingDeltaEvent | ThinkingEndEvent | ToolStartEvent | ToolUpdateEvent | ToolEndEvent | CommandStartedEvent | CommandOutputDeltaEvent | CommandCompletedEvent | PatchAppliedEvent | TurnPlanUpdatedEvent | TaskPlanUpdatedEvent | TurnDiffEvent | TurnOutcomeEvent | ReviewStartEvent | ReviewDeltaEvent | ReviewEndEvent | ReviewEvent | AssistantMessageEndEvent | ProgressEvent | CompactionEvent | TtsAudioEvent | ClarifyRequestEvent | MemoryConsentRequiredEvent | MemoryCapturedEvent | MemoryCandidateEvent | RunEndEvent | StreamErrorEvent;

package/dist/src/gateway/chat-stream/turn-outcome-collector.d.ts

@@ -0,0 +1,16 @@
+import type { AgentStreamRunStatus, TurnOutcome } from '@xopcai/gateway-contract';
+import type { ChatStreamEvent } from './protocol.js';
+export declare class TurnOutcomeCollector {
+    private readonly runId;
+    private readonly environment;
+    private readonly deliverables;
+    private readonly evidence;
+    private readonly files;
+    private readonly diffs;
+    private added;
+    private removed;
+    private failedToolCount;
+    constructor(runId: string, environment?: 'workspace' | 'worktree' | 'remote_runtime');
+    capture(event: ChatStreamEvent): void;
+    finalize(status: AgentStreamRunStatus, summary?: string): TurnOutcome;
+}

package/dist/src/gateway/chat-stream/turn-outcome-collector.js

@@ -0,0 +1,111 @@
+import { TurnOutcomeDeliverableSchema } from "../../../packages/gateway-contract/src/turn-outcome.js";
+//#region src/gateway/chat-stream/turn-outcome-collector.ts
+const VERIFICATION_COMMAND = /(^|[\s:/_-])(test|vitest|jest|pytest|lint|typecheck|type-check|build)([\s:/_-]|$)/i;
+const MAX_OUTCOME_DIFF_CHARS = 2e5;
+function asRecord(value) {
+	return value && typeof value === "object" && !Array.isArray(value) ? value : null;
+}
+function optionalString(value) {
+	return typeof value === "string" && value.trim() ? value.trim() : void 0;
+}
+function fileStatus(kind) {
+	if (kind === "add") return "added";
+	if (kind === "delete") return "deleted";
+	if (kind === "move") return "renamed";
+	if (kind === "update") return "modified";
+}
+function changedFiles(changes) {
+	return changes.flatMap((value) => {
+		const row = asRecord(value);
+		const path = optionalString(row?.moveTo) ?? optionalString(row?.path);
+		if (!path) return [];
+		return [{
+			path,
+			...fileStatus(row?.kind) ? { status: fileStatus(row?.kind) } : {},
+			...typeof row?.added === "number" ? { added: Math.max(0, row.added) } : {},
+			...typeof row?.removed === "number" ? { removed: Math.max(0, row.removed) } : {}
+		}];
+	});
+}
+function structuredDeliverables(details) {
+	if (!Array.isArray(details.artifacts)) return [];
+	return details.artifacts.flatMap((value) => {
+		const parsed = TurnOutcomeDeliverableSchema.safeParse(value);
+		return parsed.success ? [parsed.data] : [];
+	});
+}
+var TurnOutcomeCollector = class {
+	deliverables = /* @__PURE__ */ new Map();
+	evidence = /* @__PURE__ */ new Map();
+	files = /* @__PURE__ */ new Map();
+	diffs = [];
+	added = 0;
+	removed = 0;
+	failedToolCount = 0;
+	constructor(runId, environment = "workspace") {
+		this.runId = runId;
+		this.environment = environment;
+	}
+	capture(event) {
+		if (event.type === "tool_end") {
+			if (event.payload.status !== "success") {
+				this.failedToolCount += 1;
+				return;
+			}
+			const details = asRecord(event.payload.result?.details);
+			if (!details) return;
+			for (const artifact of structuredDeliverables(details)) this.deliverables.set(artifact.artifactId, artifact);
+			return;
+		}
+		if (event.type === "patch_applied") {
+			for (const file of changedFiles(event.payload.changes)) this.files.set(file.path, file);
+			return;
+		}
+		if (event.type === "turn_diff") {
+			for (const path of event.payload.files) if (!this.files.has(path)) this.files.set(path, { path });
+			if (event.payload.diff.trim()) this.diffs.push(event.payload.diff);
+			this.added += Math.max(0, event.payload.added);
+			this.removed += Math.max(0, event.payload.removed);
+			return;
+		}
+		if (event.type === "command_completed" && VERIFICATION_COMMAND.test(event.payload.command)) {
+			const status = event.payload.exitCode === 0 && !event.payload.timedOut ? "passed" : "failed";
+			this.evidence.set(event.payload.toolCallId, {
+				evidenceId: `${this.runId}:${event.payload.toolCallId}:check`,
+				kind: "check",
+				label: event.payload.command,
+				status,
+				command: event.payload.command,
+				...event.payload.durationMs !== void 0 ? { durationMs: event.payload.durationMs } : {}
+			});
+		}
+	}
+	finalize(status, summary) {
+		const evidence = [...this.evidence.values()];
+		const partial = this.failedToolCount > 0 || evidence.some((item) => item.status === "failed");
+		const fullDiff = this.diffs.join("\n");
+		const diffTruncated = fullDiff.length > MAX_OUTCOME_DIFF_CHARS;
+		return {
+			version: 1,
+			outcomeId: `${this.runId}:outcome`,
+			runId: this.runId,
+			turnId: this.runId,
+			status: status === "error" ? "failed" : status === "cancelled" || partial ? "partial" : "succeeded",
+			...summary?.trim() ? { summary: summary.trim() } : {},
+			deliverables: [...this.deliverables.values()],
+			...this.files.size > 0 || this.diffs.length > 0 ? { changeSet: {
+				changeSetId: `${this.runId}:changes`,
+				files: [...this.files.values()],
+				added: this.added,
+				removed: this.removed,
+				diff: diffTruncated ? fullDiff.slice(0, MAX_OUTCOME_DIFF_CHARS) : fullDiff,
+				...diffTruncated ? { diffTruncated: true } : {},
+				environment: this.environment
+			} } : {},
+			evidence,
+			createdAt: (/* @__PURE__ */ new Date()).toISOString()
+		};
+	}
+};
+//#endregion
+export { TurnOutcomeCollector };

package/dist/src/gateway/heartbeat/service.js

@@ -1,9 +1,9 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
 import { shouldSilence, stripHeartbeatToken } from "../../heartbeat/tokens.js";
-import { appendCronEventLines } from "../../heartbeat/event-prompt.js";
 import { isWithinActiveHours } from "../../heartbeat/active-hours.js";
 import { isHeartbeatContentEmpty } from "../../heartbeat/content-check.js";
+import { appendCronEventLines } from "../../heartbeat/event-prompt.js";
 import { createHeartbeatWake } from "../../heartbeat/wake.js";
 import { resolveHeartbeatMdPath } from "../workspace-heartbeat-path.js";
 import { readFile } from "fs/promises";

package/dist/src/gateway/hono/lib/static-ui.js

@@ -52,7 +52,7 @@ function resolveCacheControl(relativePath) {
 function resolveContentType(relativePath) {
 	return MIME_TYPES[relativePath.split(".").pop()?.toLowerCase() || ""] || "application/octet-stream";
 }
-function loadIntoCache(relativePath) {
+function readStaticFile(relativePath, cache) {
 	const filePath = resolve(UI_STATIC_ROOT, relativePath);
 	try {
 		const content = readFileSync(filePath);
@@ -62,8 +62,10 @@ function loadIntoCache(relativePath) {
 			etag: computeEtag(content),
 			cacheControl: resolveCacheControl(relativePath)
 		};
-		fileCache.set(relativePath, cached);
-		stats.entries = fileCache.size;
+		if (cache) {
+			fileCache.set(relativePath, cached);
+			stats.entries = fileCache.size;
+		}
 		stats.misses += 1;
 		return cached;
 	} catch {
@@ -71,12 +73,13 @@ function loadIntoCache(relativePath) {
 	}
 }
 function getCachedFile(relativePath) {
+	if (relativePath === "index.html") return readStaticFile(relativePath, false);
 	const cached = fileCache.get(relativePath);
 	if (cached) {
 		stats.hits += 1;
 		return cached;
 	}
-	return loadIntoCache(relativePath);
+	return readStaticFile(relativePath, true);
 }
 function getStaticUiCacheStats() {
 	return { ...stats };
@@ -92,7 +95,6 @@ function resolveStaticUiRootForTests() {
 	return UI_STATIC_ROOT;
 }
 const DEFAULT_PREWARM_PATHS = [
-	"index.html",
 	"favicon.ico",
 	"logo.svg",
 	"logo-dark.svg"

package/dist/src/gateway/hono/routes/connectors.js

@@ -15,18 +15,17 @@ import { listUnderstandingSourceGrants, revokeUnderstandingSourceGrant } from ".
 import { recordConnectorHealthUsage } from "../../../connectors/usage.js";
 import { getConnectorInstance, getInstalledConnectorDefinition, listConnectorInstances } from "../../../connectors/instances.js";
 import { installConnector, installConnectorDefinition, uninstallConnector, updateConnectorConfig } from "../../../connectors/install.js";
+import { ConfigPersistenceError, persistConfigMutation } from "../../../config/config-mutation.js";
 import { getMcpOAuthManager } from "../../../agent/mcp/oauth/mcp-oauth-manager.js";
 import { startConnectorAuthorization } from "../../../connectors/auth-provider-registry.js";
 import { composioLogoResponse } from "../../../connectors/composio-logo.js";
 import { inspectManagedComposioStatus } from "../../../connectors/composio-managed-client.js";
 import { appendComposioTriggerEvent, listComposioTriggerEvents } from "../../../connectors/composio-triggers.js";
-import { buildConnectedPeopleGraph } from "../../../knowledge/people-graph.js";
-import "../../../knowledge/index.js";
 import { ingestLocalFolderSource } from "../../../connectors/connected-source-ingestion.js";
 import { previewConnectorDefinition, testConnectorInstance } from "../../../connectors/health.js";
 import { setConnectorEnabled } from "../../../connectors/lifecycle.js";
 import { projectComposioConnectionStatus } from "../../../connectors/runtime-status.js";
-import { ConfigPersistenceError, persistConfigMutation } from "../../../config/config-mutation.js";
+import { applySourceRevocationChoices, sourceRevocationImpact } from "./understanding-sources.js";
 //#region src/gateway/hono/routes/connectors.ts
 init_agent_scope();
 function errorMessage(error) {
@@ -196,7 +195,14 @@ function registerConnectorRoutes(authenticated, deps) {
 		if (connectionId && !policy.scanEnabled) {
 			service.setConnectorLearningPaused(connectionId, true);
 			const grant = listUnderstandingSourceGrants().find((item) => item.sourceKey === `connector-account:${account.id}`);
-			if (grant) revokeUnderstandingSourceGrant(grant.id);
+			if (grant) {
+				const impact = sourceRevocationImpact(grant.id);
+				revokeUnderstandingSourceGrant(grant.id);
+				if (impact) applySourceRevocationChoices(impact, {
+					derived: "retain",
+					raw: "retain"
+				});
+			}
 		} else if (connectionId && previous?.scanEnabled === false) {
 			if (service.setConnectorLearningPaused(connectionId, false) === 0) service.requestConnectorLearning(connectionId, {
 				mode: "incremental",
@@ -288,7 +294,14 @@ function registerConnectorRoutes(authenticated, deps) {
 			await revokeComposioConnection(connectionId);
 			if (connection?.accountId) {
 				const grant = listUnderstandingSourceGrants().find((item) => item.sourceKey === `connector-account:${connection.accountId}`);
-				if (grant) revokeUnderstandingSourceGrant(grant.id);
+				if (grant) {
+					const impact = sourceRevocationImpact(grant.id);
+					revokeUnderstandingSourceGrant(grant.id);
+					if (impact) applySourceRevocationChoices(impact, {
+						derived: "retain",
+						raw: "retain"
+					});
+				}
 			}
 			return c.json({
 				ok: true,
@@ -450,17 +463,6 @@ function registerConnectorRoutes(authenticated, deps) {
 			}, 400);
 		}
 	});
-	authenticated.get("/api/connectors/people", (c) => {
-		const query = c.req.query("q") ?? "";
-		const limit = Number(c.req.query("limit") ?? "100");
-		return c.json({
-			ok: true,
-			payload: buildConnectedPeopleGraph({
-				query,
-				limit
-			})
-		});
-	});
 	authenticated.get("/api/connectors/:id", (c) => {
 		const connectorId = c.req.param("id");
 		const connector = getConnectorDefinition(connectorId);

package/dist/src/gateway/hono/routes/index.js

@@ -8,6 +8,7 @@ import { registerProjectsRoutes } from "./projects.js";
 import { registerProjectSkillRoutes } from "./project-skills.js";
 import { registerSearchRoutes } from "./search.js";
 import { registerMobileRoutes } from "./mobile.js";
+import { registerNotificationRoutes } from "./notifications.js";
 import { registerInteractionStateRoutes } from "./interaction-state.js";
 import { registerComposerHistoryRoutes } from "./composer-history.js";
 import { registerEndpointToolRoutes } from "./endpoint-tools.js";
@@ -35,6 +36,7 @@ function registerCoreAuthenticatedRoutes(authenticated, deps) {
 	registerProactiveRoutes(authenticated, deps);
 	registerSearchRoutes(authenticated, deps);
 	registerMobileRoutes(authenticated, deps);
+	registerNotificationRoutes(authenticated, deps);
 	registerInteractionStateRoutes(authenticated, deps);
 	registerComposerHistoryRoutes(authenticated, deps);
 	registerEndpointToolRoutes(authenticated, deps);

package/dist/src/gateway/hono/routes/mobile.js

@@ -1,4 +1,4 @@
-import { acknowledgeMobileActivityEvent, listMobileActivityEvents, registerMobileDevice, removeMobileDevice, updateMobileDevicePreferences } from "../../../mobile/notification-store.js";
+import { registerNotificationDevice, removeNotificationDevice, updateNotificationDevicePreferences } from "../../../notifications/device-store.js";
 //#region src/gateway/hono/routes/mobile.ts
 function stringField(value, maxLength) {
 	return typeof value === "string" && value.trim().length > 0 && value.trim().length <= maxLength ? value.trim() : null;
@@ -9,10 +9,15 @@ function parsePreferences(value) {
 	const source = value;
 	const result = {};
 	for (const key of [
-		"needsInput",
-		"failed",
-		"completed",
-		"automationFailed"
+		"chatCompleted",
+		"chatFailed",
+		"taskNeedsInput",
+		"taskBlocked",
+		"taskFailed",
+		"taskCompleted",
+		"automationCompleted",
+		"automationFailed",
+		"proactiveInsight"
 	]) {
 		if (source[key] === void 0) continue;
 		if (typeof source[key] !== "boolean") return null;
@@ -26,15 +31,8 @@ function parsePlatform(value) {
 function parsePermission(value) {
 	return value === "granted" || value === "denied" || value === "unknown" ? value : null;
 }
-function parseCursor(value) {
-	if (!value) return void 0;
-	const parsed = Number.parseInt(value, 10);
-	return Number.isFinite(parsed) && parsed > 0 ? parsed : void 0;
-}
-function parseLimit(value) {
-	if (!value) return void 0;
-	const parsed = Number.parseInt(value, 10);
-	return Number.isFinite(parsed) ? Math.max(1, Math.min(100, parsed)) : void 0;
+function parseLocale(value) {
+	return value === "en" || value === "zh" ? value : null;
 }
 function registerMobileRoutes(authenticated, _deps) {
 	authenticated.post("/api/mobile/devices/register", async (c) => {
@@ -44,17 +42,19 @@ function registerMobileRoutes(authenticated, _deps) {
 		const platform = parsePlatform(body?.platform);
 		const permissions = parsePermission(body?.permissions);
 		const preferences = parsePreferences(body?.preferences);
+		const locale = parseLocale(body?.locale);
 		const appVersion = body?.appVersion === void 0 ? void 0 : stringField(body.appVersion, 128);
-		if (!id || !pushToken || !platform || !permissions || preferences === null || appVersion === null) return c.json({
+		if (!id || !pushToken || !platform || !permissions || !locale || preferences === null || appVersion === null) return c.json({
 			ok: false,
 			error: "Invalid mobile device registration"
 		}, 400);
-		const device = registerMobileDevice({
+		const device = registerNotificationDevice({
 			id,
 			pushToken,
 			platform,
 			permissions,
 			preferences,
+			locale,
 			appVersion
 		});
 		return c.json({
@@ -68,7 +68,7 @@ function registerMobileRoutes(authenticated, _deps) {
 			ok: false,
 			error: "Invalid notification preferences"
 		}, 400);
-		const device = updateMobileDevicePreferences(c.req.param("id"), preferences);
+		const device = updateNotificationDevicePreferences(c.req.param("id"), preferences);
 		if (!device) return c.json({
 			ok: false,
 			error: "Mobile device not found"
@@ -81,31 +81,9 @@ function registerMobileRoutes(authenticated, _deps) {
 	authenticated.delete("/api/mobile/devices/:id", (c) => {
 		return c.json({
 			ok: true,
-			removed: removeMobileDevice(c.req.param("id"))
-		});
-	});
-	authenticated.get("/api/mobile/activity", (c) => {
-		const result = listMobileActivityEvents({
-			cursor: parseCursor(c.req.query("cursor")),
-			limit: parseLimit(c.req.query("limit"))
-		});
-		return c.json({
-			ok: true,
-			...result
+			removed: removeNotificationDevice(c.req.param("id"))
 		});
 	});
-	authenticated.post("/api/mobile/activity/:id/ack", async (c) => {
-		const deviceId = stringField((await c.req.json().catch(() => null))?.deviceId, 160);
-		if (!deviceId) return c.json({
-			ok: false,
-			error: "deviceId is required"
-		}, 400);
-		if (!acknowledgeMobileActivityEvent(c.req.param("id"), deviceId)) return c.json({
-			ok: false,
-			error: "Activity event or mobile device not found"
-		}, 404);
-		return c.json({ ok: true });
-	});
 }
 //#endregion
 export { registerMobileRoutes };

package/dist/src/gateway/hono/routes/notifications.d.ts

@@ -0,0 +1,3 @@
+import type { Hono } from 'hono';
+import type { AuthenticatedRouteDeps } from './deps.js';
+export declare function registerNotificationRoutes(authenticated: Hono, _deps: AuthenticatedRouteDeps): void;

package/dist/src/gateway/hono/routes/notifications.js

@@ -0,0 +1,45 @@
+import { acknowledgeNotification, listNotificationEvents, notificationDeliveryMetrics } from "../../../notifications/store.js";
+//#region src/gateway/hono/routes/notifications.ts
+function integerQuery(value, min, max) {
+	if (!value) return void 0;
+	const parsed = Number.parseInt(value, 10);
+	return Number.isFinite(parsed) ? Math.max(min, Math.min(max, parsed)) : void 0;
+}
+function stringField(value, maxLength) {
+	return typeof value === "string" && value.trim().length > 0 && value.trim().length <= maxLength ? value.trim() : null;
+}
+function registerNotificationRoutes(authenticated, _deps) {
+	authenticated.get("/api/notifications", (c) => {
+		const result = listNotificationEvents({
+			afterId: c.req.query("after")?.trim() || void 0,
+			since: integerQuery(c.req.query("since"), 0, Number.MAX_SAFE_INTEGER),
+			limit: integerQuery(c.req.query("limit"), 1, 100)
+		});
+		return c.json({
+			ok: true,
+			...result
+		});
+	});
+	authenticated.post("/api/notifications/:id/ack", async (c) => {
+		const body = await c.req.json().catch(() => null);
+		const consumerId = stringField(body?.consumerId, 160);
+		const surface = body?.surface;
+		if (!consumerId || surface !== "web" && surface !== "electron" && surface !== "mobile") return c.json({
+			ok: false,
+			error: "Invalid notification acknowledgement"
+		}, 400);
+		if (!acknowledgeNotification(c.req.param("id"), consumerId, surface)) return c.json({
+			ok: false,
+			error: "Notification not found"
+		}, 404);
+		return c.json({ ok: true });
+	});
+	authenticated.get("/api/notifications/metrics", (c) => {
+		return c.json({
+			ok: true,
+			deliveries: notificationDeliveryMetrics()
+		});
+	});
+}
+//#endregion
+export { registerNotificationRoutes };

package/dist/src/gateway/hono/routes/project-skills.js

@@ -5,6 +5,8 @@ function projectSkills(deps) {
 	return new ProjectSkillService({
 		projects: deps.service.projects,
 		getConfig: () => deps.service.currentConfig,
+		getWorkspaceTrust: (workspaceRoot) => deps.service.agentService.getWorkspaceTrust(workspaceRoot),
+		setWorkspaceTrust: (workspaceRoot, trusted) => deps.service.agentService.setWorkspaceTrust(workspaceRoot, trusted),
 		refreshSkills: () => deps.service.agentService.refreshSkillsAfterDiskChange()
 	});
 }
@@ -31,11 +33,37 @@ function registerProjectSkillRoutes(authenticated, deps) {
 			return errorResponse(c, error);
 		}
 	});
-	authenticated.get("/api/projects/:projectId/skills/:skillId", (c) => {
+	authenticated.get("/api/projects/:projectId/workspace-trust", (c) => {
 		try {
 			return c.json({
 				ok: true,
-				skill: projectSkills(deps).getContent(c.req.param("projectId"), c.req.param("skillId"))
+				trust: projectSkills(deps).getWorkspaceTrust(c.req.param("projectId"))
+			});
+		} catch (error) {
+			return errorResponse(c, error);
+		}
+	});
+	authenticated.patch("/api/projects/:projectId/workspace-trust", async (c) => {
+		try {
+			const body = await c.req.json();
+			if (typeof body.trusted !== "boolean") return c.json({
+				ok: false,
+				error: "Expected { trusted: boolean }"
+			}, 400);
+			const trust = projectSkills(deps).setWorkspaceTrust(c.req.param("projectId"), body.trusted);
+			return c.json({
+				ok: true,
+				trust
+			});
+		} catch (error) {
+			return errorResponse(c, error);
+		}
+	});
+	authenticated.get("/api/projects/:projectId/skills/:skillKey", (c) => {
+		try {
+			return c.json({
+				ok: true,
+				skill: projectSkills(deps).getContent(c.req.param("projectId"), c.req.param("skillKey"))
 			});
 		} catch (error) {
 			return errorResponse(c, error);