@xopcai/xopc 0.0.229 → 0.0.231

package/dist/gateway/static/root/index.html

@@ -11,7 +11,7 @@
     <link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png?v=20260713-1" />
     <link rel="manifest" href="/site.webmanifest?v=20260713-1" />
     <title>XOPC — Keep what matters moving.</title>
-    <script type="module" crossorigin src="/assets/index-BNWhgmjs.js"></script>
+    <script type="module" crossorigin src="/assets/index-0xQO5B_Q.js"></script>
     <link rel="modulepreload" crossorigin href="/assets/rolldown-runtime-aKtaBQYM.js">
     <link rel="modulepreload" crossorigin href="/assets/preload-helper-zJ_50EbN.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-react-BOUWij0V.js">
@@ -31,13 +31,14 @@
     <link rel="modulepreload" crossorigin href="/assets/schemas-zIBW3wiV.js">
     <link rel="modulepreload" crossorigin href="/assets/product-delivery-tRr-7IxY.js">
     <link rel="modulepreload" crossorigin href="/assets/copy-to-clipboard-HOJ79TWv.js">
-    <link rel="modulepreload" crossorigin href="/assets/markdown-view-DvM5PWEH.js">
+    <link rel="modulepreload" crossorigin href="/assets/markdown-view-RxNHwlNo.js">
     <link rel="modulepreload" crossorigin href="/assets/dist-J_ySZvz0.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-swr-BIWyz7Rc.js">
     <link rel="modulepreload" crossorigin href="/assets/check-DUBLcKHA.js">
     <link rel="modulepreload" crossorigin href="/assets/settings-shell-dialog-layer-BU3UuiJr.js">
     <link rel="modulepreload" crossorigin href="/assets/popover-select-CccGri5Y.js">
     <link rel="modulepreload" crossorigin href="/assets/circle-check-C23XjkUj.js">
+    <link rel="modulepreload" crossorigin href="/assets/cloud-C4-yfnnk.js">
     <link rel="modulepreload" crossorigin href="/assets/copy-Dv6d4Dvw.js">
     <link rel="modulepreload" crossorigin href="/assets/ellipsis-0k4rZLoy.js">
     <link rel="modulepreload" crossorigin href="/assets/external-link-DjqjBmc3.js">
@@ -45,25 +46,28 @@
     <link rel="modulepreload" crossorigin href="/assets/eye-CABVeTq0.js">
     <link rel="modulepreload" crossorigin href="/assets/file-code-corner-byQA1VfD.js">
     <link rel="modulepreload" crossorigin href="/assets/globe-DSSGFWFn.js">
-    <link rel="modulepreload" crossorigin href="/assets/notes-api-BFsOGYkd.js">
+    <link rel="modulepreload" crossorigin href="/assets/notes-api-EpgG-OQc.js">
     <link rel="modulepreload" crossorigin href="/assets/loader-circle-CifKLtgG.js">
     <link rel="modulepreload" crossorigin href="/assets/rotate-cw-LIg3Am9S.js">
     <link rel="modulepreload" crossorigin href="/assets/search-DA7gz22f.js">
     <link rel="modulepreload" crossorigin href="/assets/middleware-Pd0e8Igk.js">
+    <link rel="modulepreload" crossorigin href="/assets/files-Dp8_uGTO.js">
     <link rel="modulepreload" crossorigin href="/assets/tool-activity-R8V9l6nk.js">
     <link rel="modulepreload" crossorigin href="/assets/button-CSEbl4zT.js">
     <link rel="modulepreload" crossorigin href="/assets/gateway-startup-retry-B_zrtccP.js">
     <link rel="modulepreload" crossorigin href="/assets/registry-api-BFZrVYfy.js">
     <link rel="modulepreload" crossorigin href="/assets/config-reload-event-Bjh2zoKp.js">
     <link rel="modulepreload" crossorigin href="/assets/gateway-config-swr-BWGjnmDl.js">
+    <link rel="modulepreload" crossorigin href="/assets/models-hub-cache-0RjEwafI.js">
     <link rel="modulepreload" crossorigin href="/assets/electron-env-DH5wF8X8.js">
+    <link rel="modulepreload" crossorigin href="/assets/oauth-api-BwNLwbI8.js">
     <link rel="modulepreload" crossorigin href="/assets/form-field-width-DJw_jULe.js">
     <link rel="modulepreload" crossorigin href="/assets/interaction-BmQogeqz.js">
     <link rel="modulepreload" crossorigin href="/assets/is-masked-secret-DOkL5b_X.js">
     <link rel="modulepreload" crossorigin href="/assets/activity-store-M0nAY5XB.js">
-    <link rel="modulepreload" crossorigin href="/assets/theme-store-DOdCjyuw.js">
-    <link rel="stylesheet" crossorigin href="/assets/markdown-view-CLzTdVLW.css">
-    <link rel="stylesheet" crossorigin href="/assets/index-D_hrEKXM.css">
+    <link rel="modulepreload" crossorigin href="/assets/theme-store-Qgvo0Ga7.js">
+    <link rel="stylesheet" crossorigin href="/assets/markdown-view-B1bGSQqt.css">
+    <link rel="stylesheet" crossorigin href="/assets/index-CCyIdGuQ.css">
   </head>
   <body>
     <div id="root"></div>

package/dist/package.js

@@ -1,4 +1,4 @@
 //#region package.json
-var version = "0.0.229";
+var version = "0.0.231";
 //#endregion
 export { version };

package/dist/src/agent/inbound/turn-dispatcher.js

@@ -1,8 +1,8 @@
 import { queueEmbeddedSteer } from "../embedded/runs.js";
 import { buildDirectUserMessageContent } from "../service/build-direct-message-content.js";
+import { maybeEmitWebchatTts } from "../service/webchat-tts.js";
 import { runProcessDirectStreaming } from "../service/process-direct-streaming.js";
 import { runProcessDirect } from "../service/process-direct-one-shot.js";
-import { maybeEmitWebchatTts } from "../service/webchat-tts.js";
 //#region src/agent/inbound/turn-dispatcher.ts
 var TurnDispatcher = class {
 	cfg;

package/dist/src/agent/service/process-direct-streaming.js

@@ -13,6 +13,7 @@ import { isSessionSourceBinding, summarizeSourceContext } from "../source-contex
 import { injectSourceContextsIntoUserMessage } from "../source-context/injector.js";
 import { AsyncQueue, AsyncQueueOverflowError } from "./async-queue.js";
 import { hydratePerTurnState, runDirectAgentTurn, tryRunSlashCommand } from "./direct-turn-helpers.js";
+import { isSuccessfulWebchatTtsToolEvent } from "./webchat-tts.js";
 //#region src/agent/service/process-direct-streaming.ts
 const MAX_BUFFERED_STREAM_EVENTS = 512;
 const LOSSY_STREAM_EVENT_TYPES = new Set([
@@ -151,6 +152,7 @@ async function* runProcessDirectStreaming(deps, input) {
 	let userAborted = false;
 	let abortHandled = false;
 	let inboundVoice = false;
+	let explicitTtsEmitted = false;
 	let ranSlashCommand = false;
 	let mergedUserText = input.content;
 	let webchatSlashReceipt;
@@ -299,6 +301,7 @@ async function* runProcessDirectStreaming(deps, input) {
 					runId: input.runId,
 					onEvent: (embeddedEvent) => {
 						const event = { ...embeddedEvent };
+						if (isSuccessfulWebchatTtsToolEvent(event)) explicitTtsEmitted = true;
 						if (event.type === "error" && typeof event.content === "string") event.content = formatStreamError(event.content);
 						pushVisible(event);
 					}
@@ -329,7 +332,7 @@ async function* runProcessDirectStreaming(deps, input) {
 				sessionKey,
 				droppedEvents: queue.droppedCount
 			}, "Coalesced stream progress events because the consumer fell behind");
-			if (!userAborted && !streamOverflowed && channel === "webchat") try {
+			if (!userAborted && !streamOverflowed && channel === "webchat" && !explicitTtsEmitted) try {
 				const ttsAudioEvent = await deps.maybeEmitWebchatTts(sessionKey, inboundVoice);
 				if (ttsAudioEvent) queue.push(ttsAudioEvent);
 			} catch (ttsErr) {

package/dist/src/agent/service/webchat-tts.d.ts

@@ -15,6 +15,8 @@ export type WebchatTtsDeps = {
         warn: (obj: Record<string, unknown>, msg: string) => void;
     };
 };
+/** True when the explicit TTS tool already produced durable Webchat audio. */
+export declare function isSuccessfulWebchatTtsToolEvent(event: unknown): boolean;
 /**
  * Generate TTS for webchat when config allows; persist under `{stateDir}/media/tts/`.
  */

package/dist/src/agent/service/webchat-tts.js

@@ -3,9 +3,22 @@ import { speak } from "../../voice/tts/speak-core.js";
 import { mergeTtsConfigFromAppConfig } from "../../voice/tts/merge-config.js";
 import { getChannelOutputFormat, shouldUseTTS } from "../../voice/tts/service.js";
 import { compressAudio } from "../../voice/tts/audio.js";
-import "../../voice/tts/index.js";
 import { persistOutboundTtsAudio } from "../../channels/attachments/outbound-tts-persist.js";
+import "../../voice/tts/index.js";
 //#region src/agent/service/webchat-tts.ts
+/** True when the explicit TTS tool already produced durable Webchat audio. */
+function isSuccessfulWebchatTtsToolEvent(event) {
+	if (!event || typeof event !== "object" || Array.isArray(event)) return false;
+	const row = event;
+	if (row.type !== "tool_execution_end" || row.toolName !== "text_to_speech" || row.isError === true) return false;
+	const result = row.result && typeof row.result === "object" && !Array.isArray(row.result) ? row.result : null;
+	const details = result?.details && typeof result.details === "object" && !Array.isArray(result.details) ? result.details : null;
+	return Array.isArray(details?.media) && details.media.some((item) => {
+		if (!item || typeof item !== "object" || Array.isArray(item)) return false;
+		const media = item;
+		return typeof media.uri === "string" && media.uri.trim().length > 0;
+	});
+}
 /**
 * Generate TTS for webchat when config allows; persist under `{stateDir}/media/tts/`.
 */
@@ -57,4 +70,4 @@ async function appendMediaToLastAssistant(sessionStore, sessionKey, ref) {
 	}
 }
 //#endregion
-export { appendMediaToLastAssistant, maybeEmitWebchatTts };
+export { appendMediaToLastAssistant, isSuccessfulWebchatTtsToolEvent, maybeEmitWebchatTts };

package/dist/src/agent/service.d.ts

@@ -108,6 +108,7 @@ export declare class AgentService {
     getAgentSkillAvailability(agentId: string): AgentSkillAvailabilityPayload;
     getSessionSkillAvailability(sessionKey: string): Promise<AgentSkillAvailabilityPayload>;
     getSessionWorkspaceTrust(sessionKey: string): Promise<WorkspaceTrustState>;
+    getResolvedWorkspaceForSession(sessionKey: string): string;
     setSessionWorkspaceTrust(sessionKey: string, trusted: boolean): Promise<WorkspaceTrustState>;
     getWorkspaceTrust(workspacePath: string): WorkspaceTrustState;
     setWorkspaceTrust(workspacePath: string, trusted: boolean): WorkspaceTrustState;

package/dist/src/agent/service.js

@@ -10,12 +10,12 @@ import { init_providers, resolveModel } from "../providers/index.js";
 import { extractTextContent } from "./context/workspace.js";
 import { effectiveWorkspacePathForSession } from "../session/session-workspace.js";
 import { getProjectForSession } from "../projects/workspace.js";
-import { resolveAgentTurnTimeoutMs } from "./orchestration/run-agent-turn-with-timeout.js";
-import { resolveResponseLanguageForSession } from "./prompt/response-language.js";
 import { resolveWorkspaceSkillsDir, resolveWorkspaceSkillsLockPath } from "./skills/workspace-skills-dir.js";
 import { removeSkillsLockEntry } from "./skills/hub-lock.js";
 import { installSkillFromZip } from "./skills/managed-store.js";
 import { pullSkillFromSource } from "./skills/hub-pull.js";
+import { resolveAgentTurnTimeoutMs } from "./orchestration/run-agent-turn-with-timeout.js";
+import { resolveResponseLanguageForSession } from "./prompt/response-language.js";
 import { normalizeSkillInstallTarget } from "./skills/install-target.js";
 import { onSessionTranscriptUpdate } from "../session/transcript-events.js";
 import { persistInboundAttachments } from "../channels/attachments/inbound-persist.js";
@@ -509,6 +509,9 @@ var AgentService = class {
 		await this.sessionHydrator.workspace(sessionKey);
 		return this.agentManager.getSessionWorkspaceTrust(sessionKey);
 	}
+	getResolvedWorkspaceForSession(sessionKey) {
+		return this.agentManager.getResolvedWorkspaceForSession(sessionKey);
+	}
 	async setSessionWorkspaceTrust(sessionKey, trusted) {
 		await this.sessionHydrator.workspace(sessionKey);
 		return this.agentManager.setSessionWorkspaceTrust(sessionKey, trusted);

package/dist/src/agent/skills/skill-manage-ops.js

@@ -1,8 +1,8 @@
 import { init_paths, resolveSkillsDir } from "../../config/paths.js";
 import { parseFrontmatter } from "../../markdown/frontmatter.js";
-import { fuzzyFindText, normalizeForFuzzyMatch, normalizeToLF, restoreLineEndings } from "../tools/edit-diff.js";
 import { resolveWorkspaceSkillsDir } from "./workspace-skills-dir.js";
 import { formatScanSummary, scanSkillDirectory } from "./scanner.js";
+import { fuzzyFindText, normalizeForFuzzyMatch, normalizeToLF, restoreLineEndings } from "../tools/edit-diff.js";
 import { join, resolve, sep } from "path";
 import { existsSync, realpathSync } from "fs";
 import { mkdir, writeFile } from "fs/promises";

package/dist/src/agent/tools/tts-tool.js

@@ -4,6 +4,7 @@ import { speak } from "../../voice/tts/speak-core.js";
 import { mergeTtsConfigFromAppConfig } from "../../voice/tts/merge-config.js";
 import { getChannelOutputFormat } from "../../voice/tts/service.js";
 import { compressAudio } from "../../voice/tts/audio.js";
+import { persistOutboundTtsAudio } from "../../channels/attachments/outbound-tts-persist.js";
 import { Type } from "@sinclair/typebox";
 //#region src/agent/tools/tts-tool.ts
 init_logger();
@@ -72,30 +73,35 @@ function createTextToSpeechTool(deps) {
 				});
 				const wavTarget = outFmt.format === "mp3" ? "mp3" : "opus";
 				const { buffer: compressedAudio, format: compressedFormat } = await compressAudio(Buffer.from(result.audio), result.format, wavTarget);
-				const dataUrl = `data:${compressedFormat === "opus" ? "audio/ogg" : compressedFormat === "mp3" || compressedFormat === "mpeg" ? "audio/mpeg" : `audio/${compressedFormat}`};base64,${compressedAudio.toString("base64")}`;
-				const msg = {
-					channel: ctx.channel,
-					chat_id: ctx.chatId,
-					content: "",
-					mediaUrl: dataUrl,
-					mediaType: "audio",
-					audioAsVoice: outFmt.voiceCompatible
-				};
-				await deps.bus.publishOutbound(msg);
+				const mimeType = compressedFormat === "opus" ? "audio/ogg" : compressedFormat === "mp3" || compressedFormat === "mpeg" ? "audio/mpeg" : `audio/${compressedFormat}`;
+				const media = ctx.channel === "webchat" ? await persistOutboundTtsAudio(compressedAudio, compressedFormat) : void 0;
+				if (!media) {
+					const msg = {
+						channel: ctx.channel,
+						chat_id: ctx.chatId,
+						content: "",
+						mediaUrl: `data:${mimeType};base64,${compressedAudio.toString("base64")}`,
+						mediaType: "audio",
+						audioAsVoice: outFmt.voiceCompatible
+					};
+					await deps.bus.publishOutbound(msg);
+				}
 				log.info({
 					provider: result.provider,
 					format: compressedFormat,
+					channel: ctx.channel,
 					textLength: params.text.length,
 					audioSize: compressedAudio.length
-				}, "TTS tool sent audio");
+				}, ctx.channel === "webchat" ? "TTS tool attached audio" : "TTS tool sent audio");
 				return {
 					content: [{
 						type: "text",
-						text: `✅ Sent voice message (${result.provider}, ${compressedFormat}).`
+						text: ctx.channel === "webchat" ? `✅ Attached voice message (${result.provider}, ${compressedFormat}).` : `✅ Sent voice message (${result.provider}, ${compressedFormat}).`
 					}],
 					details: {
 						provider: result.provider,
-						format: compressedFormat
+						format: compressedFormat,
+						...media ? { media: [media] } : {}
 					}
 				};
 			} catch (error) {

package/dist/src/agent/tools/write.js

@@ -1,9 +1,10 @@
 import { checkFileSafety } from "../prompt/safety.js";
 import { isBareProfileMarkdownFileName, resolvePathUnderWorkspace, resolveProfileMarkdownPathIfBareName } from "./tool-paths.js";
 import { appendProductDeliveryText } from "../../../packages/gateway-contract/src/product-delivery.js";
+import { fileResourceId, fileSpaceId } from "../../files/file-service.js";
 import { evaluateFilePolicy } from "../sandbox/exec-policy.js";
-import { basename, dirname } from "path";
-import { mkdir, writeFile } from "fs/promises";
+import { basename, dirname, relative, sep } from "path";
+import { mkdir, realpath, writeFile } from "fs/promises";
 import { Type } from "@sinclair/typebox";
 //#region src/agent/tools/write.ts
 const MAX_FILE_SIZE = 10 * 1024 * 1024;
@@ -59,30 +60,26 @@ function createWriteFileTool(workspace, options) {
 				const target = writesProfileFile ? resolveProfileMarkdownPathIfBareName(p.path, options.profileMarkdownRoot) : resolvePathUnderWorkspace(p.path, workspace);
 				await mkdir(dirname(target), { recursive: true });
 				await writeFile(target, p.content, "utf-8");
-				const delivery = {
+				const delivery = writesProfileFile ? void 0 : await Promise.all([realpath(workspace), realpath(target)]).then(([root, canonicalTarget]) => ({
 					version: 1,
 					operation: "updated",
 					primary: {
 						kind: "file",
-						id: target,
+						id: fileResourceId(fileSpaceId(root), relative(root, canonicalTarget).split(sep).join("/")),
 						title: basename(target),
 						summary: `${contentBytes} bytes written`,
-						capabilities: [
-							"preview",
-							"reveal",
-							"share"
-						]
+						capabilities: ["preview", "share"]
 					}
-				};
+				}));
 				return {
 					content: [{
 						type: "text",
-						text: appendProductDeliveryText(`File written: ${target}`, delivery)
+						text: delivery ? appendProductDeliveryText(`File written: ${target}`, delivery) : `File written: ${target}`
 					}],
 					details: {
 						size: contentBytes,
 						path: target,
-						delivery
+						...delivery ? { delivery } : {}
 					}
 				};
 			} catch (error) {

package/dist/src/agent/tools/xopc-use-tool.js

@@ -11,10 +11,10 @@ import { TaskRunRepository } from "../../tasks/task-run-repository.js";
 import { TaskReadModelProjector } from "../../tasks/task-read-model-projector.js";
 import { TaskCommandSchema, TaskContextInputSchema } from "../../../packages/gateway-contract/src/tasks.js";
 import { appendProductDeliveryText } from "../../../packages/gateway-contract/src/product-delivery.js";
-import { CreateAutomationSchema, UpdateAutomationSchema } from "../../automations/domain/validation.js";
-import "../../automations/index.js";
 import { isValidProjectAgentId, normalizeProjectAgentId, resolveProjectAgentId } from "../../projects/project-agent.js";
 import "../../projects/index.js";
+import { CreateAutomationSchema, UpdateAutomationSchema } from "../../automations/domain/validation.js";
+import "../../automations/index.js";
 import { TaskContextRepository } from "../../tasks/task-context-repository.js";
 import { TaskDependencyError, TaskDependencyService } from "../../tasks/task-dependency-service.js";
 import { TaskApplicationService } from "../../tasks/task-application-service.js";

package/dist/src/auth/oauth/index.js

@@ -8,7 +8,7 @@ import { init_kimi_coding, kimiCodingOAuthProvider } from "./kimi-coding.js";
 import { init_minimax_cn, minimaxCnOAuthProvider } from "./minimax-cn.js";
 import { init_minimax, minimaxOAuthProvider } from "./minimax.js";
 import { init_openai_codex, loginOpenAICodex, openaiCodexOAuthProvider, refreshOpenAICodexToken } from "./openai-codex.js";
-import { init_xopc_cloud, xopcCloudOAuthProvider, xopcTunnelOAuthProvider } from "./xopc-cloud.js";
+import { init_xopc_cloud, xopcCloudOAuthProvider, xopcShareOAuthProvider, xopcTunnelOAuthProvider } from "./xopc-cloud.js";
 import { OAUTH_PROVIDER_DEFINITIONS, getModelOAuthProviderIds, getOAuthProviderDefinition, getOAuthProviderIds, getOAuthProviderInterfaces, init_registry, isOAuthOnlyProvider } from "./registry.js";
 //#region src/auth/oauth/index.ts
 init_anthropic();
@@ -22,4 +22,4 @@ init_openai_codex();
 init_xopc_cloud();
 init_registry();
 //#endregion
-export { OAUTH_PROVIDER_DEFINITIONS, anthropicOAuthProvider, getModelOAuthProviderIds, getOAuthProviderDefinition, getOAuthProviderIds, getOAuthProviderInterfaces, githubCopilotOAuthProvider, antigravityOAuthProvider as googleAntigravityOAuthProvider, geminiCliOAuthProvider as googleGeminiCliOAuthProvider, isOAuthOnlyProvider, kimiCodingOAuthProvider, loginAnthropic, loginAntigravity, loginGeminiCli, loginOpenAICodex, minimaxCnOAuthProvider, minimaxOAuthProvider, openaiCodexOAuthProvider, refreshAnthropicToken, refreshAntigravityToken, refreshGoogleCloudToken, refreshOpenAICodexToken, xopcCloudOAuthProvider, xopcTunnelOAuthProvider };
+export { OAUTH_PROVIDER_DEFINITIONS, anthropicOAuthProvider, getModelOAuthProviderIds, getOAuthProviderDefinition, getOAuthProviderIds, getOAuthProviderInterfaces, githubCopilotOAuthProvider, antigravityOAuthProvider as googleAntigravityOAuthProvider, geminiCliOAuthProvider as googleGeminiCliOAuthProvider, isOAuthOnlyProvider, kimiCodingOAuthProvider, loginAnthropic, loginAntigravity, loginGeminiCli, loginOpenAICodex, minimaxCnOAuthProvider, minimaxOAuthProvider, openaiCodexOAuthProvider, refreshAnthropicToken, refreshAntigravityToken, refreshGoogleCloudToken, refreshOpenAICodexToken, xopcCloudOAuthProvider, xopcShareOAuthProvider, xopcTunnelOAuthProvider };

package/dist/src/auth/oauth/registry.d.ts

@@ -2,7 +2,7 @@ import type { OAuthProviderInterface } from './types.js';
 export interface OAuthProviderDefinition {
     displayName: string;
     oauthOnly?: boolean;
-    purpose: 'models' | 'tunnel';
+    purpose: 'models' | 'tunnel' | 'share';
     provider: OAuthProviderInterface;
     profileId: string;
     urlPrompt: string;

package/dist/src/auth/oauth/registry.js

@@ -9,7 +9,7 @@ import { init_kimi_coding, kimiCodingOAuthProvider } from "./kimi-coding.js";
 import { init_minimax_cn, minimaxCnOAuthProvider } from "./minimax-cn.js";
 import { init_minimax, minimaxOAuthProvider } from "./minimax.js";
 import { init_openai_codex, openaiCodexOAuthProvider } from "./openai-codex.js";
-import { init_xopc_cloud, xopcCloudOAuthProvider, xopcTunnelOAuthProvider } from "./xopc-cloud.js";
+import { init_xopc_cloud, xopcCloudOAuthProvider, xopcShareOAuthProvider, xopcTunnelOAuthProvider } from "./xopc-cloud.js";
 //#region src/auth/oauth/registry.ts
 function definition(provider, purpose, displayName = provider.name) {
 	return {
@@ -55,6 +55,10 @@ var init_registry = __esmMin((() => {
 			...definition(xopcTunnelOAuthProvider, "tunnel"),
 			oauthOnly: true
 		},
+		"xopc-share": {
+			...definition(xopcShareOAuthProvider, "share"),
+			oauthOnly: true
+		},
 		anthropic: definition(anthropicOAuthProvider, "models", "Anthropic (Claude)"),
 		minimax: definition(minimaxOAuthProvider, "models", "MiniMax (幂维智能)"),
 		"minimax-cn": {

package/dist/src/auth/oauth/xopc-cloud.d.ts

@@ -1,3 +1,4 @@
 import type { OAuthProviderInterface } from './types.js';
 export declare const xopcCloudOAuthProvider: OAuthProviderInterface;
 export declare const xopcTunnelOAuthProvider: OAuthProviderInterface;
+export declare const xopcShareOAuthProvider: OAuthProviderInterface;

package/dist/src/auth/oauth/xopc-cloud.js

@@ -388,13 +388,14 @@ function createXopcOAuthProvider(options) {
 		getApiKey: (value) => value.access
 	};
 }
-var CLIENT_ID, DEFAULT_CONSOLE_URL, MODEL_SERVICE_SCOPE, TUNNEL_REGISTRATION_SCOPE, CALLBACK_PATH, AUTHORIZATION_TIMEOUT_MS, xopcCloudOAuthProvider, xopcTunnelOAuthProvider;
+var CLIENT_ID, DEFAULT_CONSOLE_URL, MODEL_SERVICE_SCOPE, TUNNEL_REGISTRATION_SCOPE, HOSTED_SHARE_SCOPE, CALLBACK_PATH, AUTHORIZATION_TIMEOUT_MS, xopcCloudOAuthProvider, xopcTunnelOAuthProvider, xopcShareOAuthProvider;
 var init_xopc_cloud = __esmMin((() => {
 	init_pkce();
 	CLIENT_ID = "xopc-native";
 	DEFAULT_CONSOLE_URL = "https://console.xopc.ai";
 	MODEL_SERVICE_SCOPE = "models:read models:invoke account:usage connectors:read connectors:manage connectors:execute offline_access";
 	TUNNEL_REGISTRATION_SCOPE = "tunnel:register";
+	HOSTED_SHARE_SCOPE = "shares:read shares:write offline_access";
 	CALLBACK_PATH = "/oauth/callback";
 	AUTHORIZATION_TIMEOUT_MS = 5 * 6e4;
 	xopcCloudOAuthProvider = createXopcOAuthProvider({
@@ -407,7 +408,12 @@ var init_xopc_cloud = __esmMin((() => {
 		name: "XOPC Public Tunnel",
 		scope: TUNNEL_REGISTRATION_SCOPE
 	});
+	xopcShareOAuthProvider = createXopcOAuthProvider({
+		id: "xopc-share",
+		name: "XOPC Hosted Share",
+		scope: HOSTED_SHARE_SCOPE
+	});
 }));
 //#endregion
 init_xopc_cloud();
-export { init_xopc_cloud, xopcCloudOAuthProvider, xopcTunnelOAuthProvider };
+export { init_xopc_cloud, xopcCloudOAuthProvider, xopcShareOAuthProvider, xopcTunnelOAuthProvider };

package/dist/src/files/file-service.d.ts

@@ -0,0 +1,36 @@
+import type { FileResource, FileSpace } from '@xopcai/gateway-contract';
+import type { Config } from '../config/schema.js';
+import { type ProjectService } from '../projects/index.js';
+export type ResolvedFileSpace = FileSpace & {
+    root: string;
+};
+export declare function fileSpaceId(root: string): string;
+export declare function fileResourceId(spaceId: string, relativePath: string): string;
+export declare function parseFileResourceId(id: string): {
+    spaceId: string;
+    relativePath: string;
+};
+export declare function resolveFilePath(root: string, path: string, mustExist?: boolean): Promise<string>;
+export declare class FileServiceError extends Error {
+    readonly status: 400 | 403 | 404 | 409;
+    constructor(status: 400 | 403 | 404 | 409, message: string);
+}
+export declare function fileResourceFromPath(space: ResolvedFileSpace, absolutePath: string): Promise<FileResource>;
+export declare class FileSpaceService {
+    private readonly getConfig;
+    private readonly projects;
+    private readonly resolveSessionWorkspace;
+    private readonly dynamicSpaces;
+    private cache;
+    constructor(getConfig: () => Config, projects: ProjectService, resolveSessionWorkspace: (sessionKey: string) => string);
+    private createSpace;
+    list(): Promise<ResolvedFileSpace[]>;
+    forContext(kind: 'agent' | 'project' | 'session', id: string): Promise<ResolvedFileSpace>;
+    get(id: string): Promise<ResolvedFileSpace>;
+    resource(id: string): Promise<{
+        space: ResolvedFileSpace;
+        resource: FileResource;
+        absolutePath: string;
+    }>;
+    children(spaceId: string, path?: string): Promise<FileResource[]>;
+}