@xopcai/xopc 0.0.230 → 0.0.232

package/dist/src/gateway/hono/routes/shares.js

@@ -1,3 +1,5 @@
+import { loadCompactionSourceSnapshot } from "../../../storage/sqlite/transcript-repository.js";
+import "../../../storage/sqlite/index.js";
 import { resolveGatewayEffectiveHost } from "../../../config/gateway-bind.js";
 import { SHARE_CONFIG_DEFAULTS } from "../../../share/share-types.js";
 import { resolveSiteShareConfig } from "../../../share/site-share-config.js";
@@ -10,7 +12,9 @@ import { audienceDefaults, cleanupStagedSite, decideShareKind, forgetStagedSite,
 import { deleteThumbnail, placeholderSvg, readThumbnail, scheduleThumbnail, thumbnailContentType, thumbnailExists } from "../../../share/share-thumbnail.js";
 import { extractToken } from "../../auth.js";
 import { getClientIpFromHeaders } from "../../security/loopback.js";
-import { renderFolderLandingPage, renderNoteShareLandingPage, renderShareExpiredPage, renderShareLandingPage } from "../../../share/share-landing.js";
+import { renderFolderLandingPage, renderShareExpiredPage, renderShareLandingPage, renderSnapshotShareLandingPage } from "../../../share/share-landing.js";
+import { SessionShareService, SessionShareSnapshotConflictError } from "../../../share/session-share-service.js";
+import { HostedSessionShareBuilder, HostedSessionSharePublisher, HostedShareAuthorizationError, HostedShareBindingStore } from "../../../share/hosted-session-share.js";
 import { NoteShareService } from "../../../share/note-share-service.js";
 import { consumeSharePublicLimit } from "../../../share/share-rate-limit.js";
 import { createZipStream, planDirectoryFiles } from "../../../share/share-zip.js";
@@ -95,6 +99,7 @@ function rfc5987ContentDisposition(disposition, fileName) {
 function registerSharePublicRoutes(app, service) {
 	const store = getShareStore(resolveShareConfig(service));
 	const noteShares = new NoteShareService(store, service.notesServiceInstance);
+	const sessionShares = createSessionShareService(service, store);
 	/** Landing page — does NOT consume downloadCount. */
 	app.get("/s/:token", async (c) => {
 		const clientIp = getClientIpFromHeaders({ get: (n) => c.req.header(n) ?? void 0 });
@@ -117,12 +122,15 @@ function registerSharePublicRoutes(app, service) {
 			return c.html(renderShareExpiredPage(validation.reason), 410);
 		}
 		if (record.kind === "directory") return renderDirectoryLanding(c, store, service, record, token);
-		if (record.kind === "note") {
+		if (record.kind === "note" || record.kind === "session") {
 			const previewUrl = `/#/share/${encodeURIComponent(token)}`;
 			c.header("Content-Security-Policy", "default-src 'none'; script-src 'unsafe-inline'; base-uri 'none'; frame-ancestors 'none'");
 			c.header("X-Frame-Options", "DENY");
 			c.header("Referrer-Policy", "no-referrer");
-			return c.html(renderNoteShareLandingPage(record, previewUrl, { og: buildLandingOg(service, record) }));
+			return c.html(renderSnapshotShareLandingPage(record, previewUrl, {
+				label: record.kind === "note" ? "Note" : "conversation",
+				og: buildLandingOg(service, record)
+			}));
 		}
 		if (c.req.query("dl") === "1") return handleFileDownload(c, store, record, clientIp);
 		if (c.req.query("inline") === "1") {
@@ -169,7 +177,7 @@ function registerSharePublicRoutes(app, service) {
 		if (record.kind !== "file") return c.html(renderShareExpiredPage("not_found"), 404);
 		return handleFileDownload(c, store, record, clientIp);
 	});
-	/** Claim one Note view. POST prevents social unfurlers from consuming maxViews. */
+	/** Claim one state-owned snapshot view. POST prevents social unfurlers from consuming maxViews. */
 	app.post("/s/:token/view", async (c) => {
 		const clientIp = getClientIpFromHeaders({ get: (n) => c.req.header(n) ?? void 0 });
 		const rateResult = consumeSharePublicLimit(clientIp);
@@ -182,7 +190,7 @@ function registerSharePublicRoutes(app, service) {
 		}
 		const token = c.req.param("token");
 		const record = store.getByToken(token);
-		if (!record || record.kind !== "note") return c.json({
+		if (!record || record.kind !== "note" && record.kind !== "session") return c.json({
 			ok: false,
 			error: { message: "not_found" }
 		}, 404);
@@ -192,6 +200,39 @@ function registerSharePublicRoutes(app, service) {
 			error: { message: validation.reason }
 		}, 410);
 		try {
+			if (record.kind === "session") {
+				const manifest = await sessionShares.readManifest(record);
+				const consumed = store.consumeAccess(record.id);
+				if (consumed.valid === false) return c.json({
+					ok: false,
+					error: { message: consumed.reason }
+				}, 410);
+				logShareAudit("share.access", {
+					shareId: record.id,
+					sourceSessionId: record.sourceSessionId,
+					tokenPrefix: token.slice(0, 8),
+					clientIp,
+					snapshotRevision: record.snapshotRevision
+				}, `Session share viewed: ${record.fileName}`);
+				const ticket = manifest.attachments.length ? sessionShares.issueAssetTicket(record) : null;
+				return c.json({
+					ok: true,
+					payload: {
+						kind: "session",
+						title: manifest.title,
+						snapshotAt: manifest.snapshotAt,
+						expiresAt: record.expiresAt,
+						description: record.description ?? null,
+						snapshotRevision: record.snapshotRevision,
+						messages: manifest.messages,
+						toolActivities: manifest.toolActivities,
+						attachments: manifest.attachments.map(({ artifactFileName: _artifactFileName, checksum: _checksum, ...attachment }) => ({
+							...attachment,
+							url: `/s/${encodeURIComponent(token)}/assets/${encodeURIComponent(attachment.id)}?ticket=${encodeURIComponent(ticket ?? "")}`
+						}))
+					}
+				});
+			}
 			const manifest = await noteShares.readManifest(record);
 			const consumed = store.consumeAccess(record.id);
 			if (consumed.valid === false) return c.json({
@@ -220,21 +261,21 @@ function registerSharePublicRoutes(app, service) {
 					attachments: manifest.attachments.map(({ artifactFileName: _artifactFileName, checksum: _checksum, ...attachment }) => attachment)
 				}
 			});
-		} catch (err) {
+		} catch {
 			logShareAudit("share.access_denied", {
 				shareId: record.id,
-				noteId: record.sourceNoteId,
+				...record.kind === "note" ? { noteId: record.sourceNoteId } : { sourceSessionId: record.sourceSessionId },
 				tokenPrefix: token.slice(0, 8),
 				clientIp,
 				reason: "artifact_missing"
-			}, "Note share artifact could not be read");
+			}, "Share artifact could not be read");
 			return c.json({
 				ok: false,
-				error: { message: err instanceof Error ? err.message : "artifact_missing" }
+				error: { message: "artifact_missing" }
 			}, 410);
 		}
 	});
-	/** Serve one snapshotted Note attachment through a short-lived view ticket. */
+	/** Serve one snapshotted attachment through a short-lived view ticket. */
 	app.get("/s/:token/assets/:attachmentId", async (c) => {
 		const rateResult = consumeSharePublicLimit(getClientIpFromHeaders({ get: (n) => c.req.header(n) ?? void 0 }));
 		if (!rateResult.allowed) {
@@ -242,15 +283,15 @@ function registerSharePublicRoutes(app, service) {
 			return c.text("Too many requests", 429);
 		}
 		const record = store.getByToken(c.req.param("token"));
-		if (!record || record.kind !== "note") return c.text("Not found", 404);
+		if (!record || record.kind !== "note" && record.kind !== "session") return c.text("Not found", 404);
 		if (record.revoked || Date.now() >= new Date(record.expiresAt).getTime()) return c.text("Gone", 410);
 		const ticket = c.req.query("ticket") ?? "";
-		if (!noteShares.verifyAssetTicket(record, ticket)) return c.text("Forbidden", 403);
-		const resolved = await noteShares.resolveAsset(record, c.req.param("attachmentId")).catch(() => null);
+		if (!(record.kind === "note" ? noteShares.verifyAssetTicket(record, ticket) : sessionShares.verifyAssetTicket(record, ticket))) return c.text("Forbidden", 403);
+		const resolved = record.kind === "note" ? await noteShares.resolveAsset(record, c.req.param("attachmentId")).catch(() => null) : await sessionShares.resolveAsset(record, c.req.param("attachmentId")).catch(() => null);
 		if (!resolved) return c.text("Not found", 404);
 		const fileStat = await stat(resolved.path).catch(() => null);
 		if (!fileStat?.isFile()) return c.text("Not found", 404);
-		const inline = resolved.attachment.type !== "file";
+		const inline = record.kind === "session" ? isSafeInlineSessionMime(resolved.attachment.mimeType) : "type" in resolved.attachment && resolved.attachment.type !== "file";
 		const stream = createReadStream(resolved.path);
 		return new Response(Readable.toWeb(stream), {
 			status: 200,
@@ -261,7 +302,8 @@ function registerSharePublicRoutes(app, service) {
 				"Cache-Control": "private, no-store",
 				"X-Content-Type-Options": "nosniff",
 				"X-Frame-Options": "DENY",
-				"Referrer-Policy": "no-referrer"
+				"Referrer-Policy": "no-referrer",
+				...record.kind === "session" ? { "Content-Security-Policy": "sandbox; default-src 'none'" } : {}
 			}
 		});
 	});
@@ -361,6 +403,12 @@ function registerSharePublicRoutes(app, service) {
 				sourceVersion: record.sourceVersion,
 				snapshotRevision: record.snapshotRevision,
 				attachmentCount: record.attachmentCount
+			} : record.kind === "session" ? {
+				cutoffSeq: record.cutoffSeq,
+				snapshotRevision: record.snapshotRevision,
+				messageCount: record.messageCount,
+				attachmentCount: record.attachmentCount,
+				includeToolActivities: record.includeToolActivities
 			} : {}
 		});
 	});
@@ -392,7 +440,7 @@ function registerSharePublicRoutes(app, service) {
 				"X-Content-Type-Options": "nosniff"
 			}
 		});
-		if (record.kind === "note") {
+		if (record.kind === "note" || record.kind === "session") {
 			const placeholder = placeholderSvg(record.fileName, "text");
 			return new Response(placeholder, {
 				status: 200,
@@ -474,10 +522,285 @@ function registerShareRoutes(authenticated, deps) {
 	const { service } = deps;
 	const store = getShareStore(resolveShareConfig(service));
 	const noteShares = new NoteShareService(store, service.notesServiceInstance);
+	const sessionShares = createSessionShareService(service, store);
+	const hostedBuilder = new HostedSessionShareBuilder(createSessionShareSource(service));
+	const hostedPublisher = new HostedSessionSharePublisher();
+	const hostedBindings = new HostedShareBindingStore();
 	getSiteShareStore(resolveSiteShareConfig(service)).setCleanupHook((rec) => {
 		const dir = forgetStagedSite(rec.id);
 		if (dir) cleanupStagedSite(dir);
 	});
+	authenticated.get("/api/sessions/:key/share-preview", async (c) => {
+		try {
+			const preview = await sessionShares.preview(c.req.param("key"));
+			return c.json({
+				ok: true,
+				payload: preview
+			});
+		} catch (err) {
+			const message = err instanceof Error ? err.message : String(err);
+			return c.json({
+				ok: false,
+				error: { message }
+			}, message === "Session not found" ? 404 : 400);
+		}
+	});
+	authenticated.get("/api/sessions/:key/shares", async (c) => {
+		const metadata = await service.sessionIndexInstance.getSessionMetadata(c.req.param("key"));
+		if (!metadata?.sessionId) return c.json({
+			ok: false,
+			error: { message: "Session not found" }
+		}, 404);
+		const urlCtx = getShareUrlContext(service);
+		const now = Date.now();
+		const items = sessionShares.list(metadata.sessionId).map((record) => {
+			const resolved = resolveShareUrl(record.token, urlCtx);
+			return {
+				id: record.id,
+				kind: record.kind,
+				delivery: "local",
+				fileName: record.fileName,
+				shareUrl: resolved.shareUrl,
+				lanUrl: resolved.lanUrl,
+				reachability: resolved.reachability,
+				reachabilityHint: resolved.reachabilityHint,
+				createdAt: record.createdAt,
+				expiresAt: record.expiresAt,
+				viewCount: record.downloadCount,
+				maxViews: record.maxViews,
+				revoked: record.revoked,
+				expired: now >= new Date(record.expiresAt).getTime(),
+				description: record.description ?? null,
+				cutoffSeq: record.cutoffSeq,
+				snapshotRevision: record.snapshotRevision,
+				messageCount: record.messageCount,
+				attachmentCount: record.attachmentCount,
+				includeToolActivities: record.includeToolActivities
+			};
+		});
+		return c.json({
+			ok: true,
+			payload: { shares: items }
+		});
+	});
+	authenticated.post("/api/sessions/:key/shares", async (c) => {
+		const gatewayToken = extractToken({ authorization: c.req.header("authorization") ?? void 0 });
+		if (!gatewayToken) return c.json({
+			ok: false,
+			error: { message: "Token required" }
+		}, 401);
+		const body = await c.req.json().catch(() => ({}));
+		if (typeof body.expectedSessionId !== "string" || typeof body.expectedCutoffSeq !== "number" || typeof body.expectedMetadataUpdatedAt !== "string") return c.json({
+			ok: false,
+			error: { message: "Share preview fingerprint is required" }
+		}, 400);
+		try {
+			const record = await sessionShares.create(c.req.param("key"), {
+				expectedSessionId: body.expectedSessionId,
+				expectedCutoffSeq: body.expectedCutoffSeq,
+				expectedMetadataUpdatedAt: body.expectedMetadataUpdatedAt,
+				ttlMs: typeof body.ttlMs === "number" ? body.ttlMs : void 0,
+				maxViews: body.maxViews === null ? null : typeof body.maxViews === "number" ? body.maxViews : void 0,
+				description: typeof body.description === "string" ? body.description.trim() || void 0 : void 0,
+				includeToolActivities: body.includeToolActivities === true,
+				attachmentIds: Array.isArray(body.attachmentIds) ? body.attachmentIds.filter((id) => typeof id === "string") : void 0,
+				gatewayTokenHash: hashGatewayToken(gatewayToken)
+			});
+			const resolved = resolveShareUrl(record.token, getShareUrlContext(service));
+			return c.json({
+				ok: true,
+				payload: {
+					id: record.id,
+					kind: record.kind,
+					delivery: "local",
+					shareUrl: resolved.shareUrl,
+					lanUrl: resolved.lanUrl,
+					reachability: resolved.reachability,
+					reachabilityHint: resolved.reachabilityHint,
+					expiresAt: record.expiresAt,
+					maxViews: record.maxViews,
+					fileName: record.fileName,
+					messageCount: record.messageCount,
+					attachmentCount: record.attachmentCount,
+					snapshotRevision: record.snapshotRevision,
+					includeToolActivities: record.includeToolActivities
+				}
+			}, 201);
+		} catch (err) {
+			const message = err instanceof Error ? err.message : String(err);
+			const status = err instanceof SessionShareSnapshotConflictError ? 409 : message === "Session not found" ? 404 : 400;
+			return c.json({
+				ok: false,
+				error: {
+					message,
+					code: status === 409 ? "session_snapshot_conflict" : void 0
+				}
+			}, status);
+		}
+	});
+	authenticated.post("/api/sessions/:key/shares/:shareId/refresh", async (c) => {
+		const body = await c.req.json().catch(() => ({}));
+		if (typeof body.expectedSessionId !== "string" || typeof body.expectedCutoffSeq !== "number" || typeof body.expectedMetadataUpdatedAt !== "string") return c.json({
+			ok: false,
+			error: { message: "Share preview fingerprint is required" }
+		}, 400);
+		try {
+			const record = await sessionShares.refresh(c.req.param("key"), c.req.param("shareId"), {
+				expectedSessionId: body.expectedSessionId,
+				expectedCutoffSeq: body.expectedCutoffSeq,
+				expectedMetadataUpdatedAt: body.expectedMetadataUpdatedAt,
+				includeToolActivities: typeof body.includeToolActivities === "boolean" ? body.includeToolActivities : void 0,
+				attachmentIds: Array.isArray(body.attachmentIds) ? body.attachmentIds.filter((id) => typeof id === "string") : void 0
+			});
+			const resolved = resolveShareUrl(record.token, getShareUrlContext(service));
+			return c.json({
+				ok: true,
+				payload: {
+					id: record.id,
+					kind: record.kind,
+					delivery: "local",
+					shareUrl: resolved.shareUrl,
+					lanUrl: resolved.lanUrl,
+					reachability: resolved.reachability,
+					reachabilityHint: resolved.reachabilityHint,
+					expiresAt: record.expiresAt,
+					maxViews: record.maxViews,
+					fileName: record.fileName,
+					messageCount: record.messageCount,
+					attachmentCount: record.attachmentCount,
+					snapshotRevision: record.snapshotRevision,
+					includeToolActivities: record.includeToolActivities
+				}
+			});
+		} catch (err) {
+			const message = err instanceof Error ? err.message : String(err);
+			const status = err instanceof SessionShareSnapshotConflictError ? 409 : message === "Session share not found" || message === "Session not found" ? 404 : 400;
+			return c.json({
+				ok: false,
+				error: {
+					message,
+					code: status === 409 ? "session_snapshot_conflict" : void 0
+				}
+			}, status);
+		}
+	});
+	authenticated.get("/api/sessions/:key/hosted-shares", async (c) => {
+		const metadata = await service.sessionIndexInstance.getSessionMetadata(c.req.param("key"));
+		if (!metadata?.sessionId) return c.json({
+			ok: false,
+			error: { message: "Session not found" }
+		}, 404);
+		try {
+			await hostedBindings.reconcile(await hostedPublisher.list());
+			return c.json({
+				ok: true,
+				payload: { shares: (await hostedBindings.list(metadata.sessionId)).map(hostedBindingResponse) }
+			});
+		} catch (err) {
+			return hostedShareErrorResponse(c, err);
+		}
+	});
+	authenticated.post("/api/sessions/:key/hosted-shares", async (c) => {
+		const body = await c.req.json().catch(() => ({}));
+		if (typeof body.expectedSessionId !== "string" || typeof body.expectedCutoffSeq !== "number" || typeof body.expectedMetadataUpdatedAt !== "string") return c.json({
+			ok: false,
+			error: { message: "Share preview fingerprint is required" }
+		}, 400);
+		try {
+			const snapshot = await hostedBuilder.build(c.req.param("key"), hostedBuildInput(body));
+			const result = await hostedPublisher.create(snapshot, {
+				ttlMs: typeof body.ttlMs === "number" ? body.ttlMs : 864e5,
+				maxViews: body.maxViews === null ? null : typeof body.maxViews === "number" ? body.maxViews : null
+			});
+			const now = (/* @__PURE__ */ new Date()).toISOString();
+			const binding = {
+				...result,
+				sessionId: snapshot.sessionId,
+				cutoffSeq: snapshot.cutoffSeq,
+				title: snapshot.manifest.title,
+				description: snapshot.manifest.description ?? null,
+				messageCount: snapshot.manifest.messages.length,
+				attachmentCount: snapshot.manifest.attachments.length,
+				includeToolActivities: body.includeToolActivities === true,
+				attachmentIds: snapshot.manifest.attachments.map((attachment) => attachment.id),
+				createdAt: now,
+				updatedAt: now,
+				revoked: false
+			};
+			await hostedBindings.upsert(binding);
+			return c.json({
+				ok: true,
+				payload: hostedBindingResponse(binding)
+			}, 201);
+		} catch (err) {
+			return hostedShareErrorResponse(c, err);
+		}
+	});
+	authenticated.post("/api/sessions/:key/hosted-shares/:shareId/refresh", async (c) => {
+		const body = await c.req.json().catch(() => ({}));
+		if (typeof body.expectedSessionId !== "string" || typeof body.expectedCutoffSeq !== "number" || typeof body.expectedMetadataUpdatedAt !== "string") return c.json({
+			ok: false,
+			error: { message: "Share preview fingerprint is required" }
+		}, 400);
+		const previous = (await hostedBindings.list(body.expectedSessionId)).find((binding) => binding.id === c.req.param("shareId") && !binding.revoked);
+		if (!previous) return c.json({
+			ok: false,
+			error: { message: "Hosted share not found" }
+		}, 404);
+		try {
+			const snapshot = await hostedBuilder.build(c.req.param("key"), {
+				...hostedBuildInput(body),
+				description: previous.description ?? void 0,
+				includeToolActivities: typeof body.includeToolActivities === "boolean" ? body.includeToolActivities : previous.includeToolActivities,
+				attachmentIds: Array.isArray(body.attachmentIds) ? body.attachmentIds.filter((id) => typeof id === "string") : previous.attachmentIds
+			});
+			const result = await hostedPublisher.refresh(previous.id, previous.snapshotRevision, previous.shareUrl, snapshot);
+			const binding = {
+				...previous,
+				...result,
+				cutoffSeq: snapshot.cutoffSeq,
+				title: snapshot.manifest.title,
+				messageCount: snapshot.manifest.messages.length,
+				attachmentCount: snapshot.manifest.attachments.length,
+				includeToolActivities: typeof body.includeToolActivities === "boolean" ? body.includeToolActivities : previous.includeToolActivities,
+				attachmentIds: snapshot.manifest.attachments.map((attachment) => attachment.id),
+				updatedAt: (/* @__PURE__ */ new Date()).toISOString()
+			};
+			await hostedBindings.upsert(binding);
+			return c.json({
+				ok: true,
+				payload: hostedBindingResponse(binding)
+			});
+		} catch (err) {
+			return hostedShareErrorResponse(c, err);
+		}
+	});
+	authenticated.delete("/api/sessions/:key/hosted-shares/:shareId", async (c) => {
+		const metadata = await service.sessionIndexInstance.getSessionMetadata(c.req.param("key"));
+		if (!metadata?.sessionId) return c.json({
+			ok: false,
+			error: { message: "Session not found" }
+		}, 404);
+		const binding = (await hostedBindings.list(metadata.sessionId)).find((item) => item.id === c.req.param("shareId"));
+		if (!binding) return c.json({
+			ok: false,
+			error: { message: "Hosted share not found" }
+		}, 404);
+		try {
+			await hostedPublisher.revoke(binding.id);
+			await hostedBindings.upsert({
+				...binding,
+				revoked: true,
+				updatedAt: (/* @__PURE__ */ new Date()).toISOString()
+			});
+			return c.json({
+				ok: true,
+				payload: { revoked: binding.id }
+			});
+		} catch (err) {
+			return hostedShareErrorResponse(c, err);
+		}
+	});
 	authenticated.post("/api/shares", async (c) => {
 		const gatewayToken = extractToken({ authorization: c.req.header("authorization") ?? void 0 });
 		if (!gatewayToken) return c.json({
@@ -756,6 +1079,13 @@ function registerShareRoutes(authenticated, deps) {
 					sourceVersion: r.sourceVersion,
 					snapshotRevision: r.snapshotRevision,
 					attachmentCount: r.attachmentCount
+				} : r.kind === "session" ? {
+					sourceSessionId: r.sourceSessionId,
+					cutoffSeq: r.cutoffSeq,
+					snapshotRevision: r.snapshotRevision,
+					messageCount: r.messageCount,
+					attachmentCount: r.attachmentCount,
+					includeToolActivities: r.includeToolActivities
 				} : {}
 			};
 		});
@@ -795,6 +1125,7 @@ function registerShareRoutes(authenticated, deps) {
 			error: { message: "Not found" }
 		}, 404);
 		if (record?.kind === "note") await noteShares.removeArtifact(record.id);
+		if (record?.kind === "session") await sessionShares.removeArtifact(record.id);
 		return c.json({ ok: true });
 	});
 	authenticated.delete("/api/shares", async (c) => {
@@ -803,9 +1134,9 @@ function registerShareRoutes(authenticated, deps) {
 			body = await c.req.json();
 		} catch {}
 		if (body.expired === true) {
-			const expiredNoteShares = store.getAllShares().filter((record) => record.kind === "note" && !record.revoked && Date.now() >= new Date(record.expiresAt).getTime());
+			const expiredStateShares = store.getAllShares().filter((record) => (record.kind === "note" || record.kind === "session") && !record.revoked && Date.now() >= new Date(record.expiresAt).getTime());
 			const count = store.revokeExpired();
-			await Promise.all(expiredNoteShares.map((record) => noteShares.removeArtifact(record.id)));
+			await Promise.all(expiredStateShares.map((record) => record.kind === "note" ? noteShares.removeArtifact(record.id) : sessionShares.removeArtifact(record.id)));
 			return c.json({
 				ok: true,
 				payload: { revokedCount: count }
@@ -816,9 +1147,9 @@ function registerShareRoutes(authenticated, deps) {
 			ok: false,
 			error: { message: "Provide ids array or expired: true" }
 		}, 400);
-		const noteRecords = ids.map((id) => store.getById(id)).filter((record) => record?.kind === "note");
+		const stateRecords = ids.map((id) => store.getById(id)).filter((record) => record?.kind === "note" || record?.kind === "session");
 		const count = store.revokeMany(ids);
-		await Promise.all(noteRecords.map((record) => noteShares.removeArtifact(record.id)));
+		await Promise.all(stateRecords.map((record) => record.kind === "note" ? noteShares.removeArtifact(record.id) : sessionShares.removeArtifact(record.id)));
 		return c.json({
 			ok: true,
 			payload: { revokedCount: count }
@@ -856,6 +1187,60 @@ function registerShareRoutes(authenticated, deps) {
 		});
 	});
 }
+function createSessionShareService(service, store) {
+	return new SessionShareService(store, createSessionShareSource(service));
+}
+function createSessionShareSource(service) {
+	return {
+		getMetadata: (sessionKey) => service.sessionIndexInstance.getSessionMetadata(sessionKey),
+		getSnapshot: async (sessionKey) => loadCompactionSourceSnapshot(sessionKey)
+	};
+}
+function hostedBuildInput(body) {
+	return {
+		expectedSessionId: String(body.expectedSessionId),
+		expectedCutoffSeq: Number(body.expectedCutoffSeq),
+		expectedMetadataUpdatedAt: String(body.expectedMetadataUpdatedAt),
+		description: typeof body.description === "string" ? body.description.trim() || void 0 : void 0,
+		includeToolActivities: body.includeToolActivities === true,
+		attachmentIds: Array.isArray(body.attachmentIds) ? body.attachmentIds.filter((id) => typeof id === "string") : void 0
+	};
+}
+function hostedBindingResponse(binding) {
+	return {
+		id: binding.id,
+		kind: "session",
+		delivery: "hosted",
+		shareUrl: binding.shareUrl,
+		lanUrl: null,
+		reachability: "public",
+		reachabilityHint: null,
+		expiresAt: binding.expiresAt,
+		maxViews: binding.maxViews,
+		fileName: binding.title,
+		messageCount: binding.messageCount,
+		attachmentCount: binding.attachmentCount,
+		snapshotRevision: binding.snapshotRevision,
+		includeToolActivities: binding.includeToolActivities,
+		createdAt: binding.createdAt,
+		viewCount: binding.viewCount,
+		revoked: binding.revoked,
+		expired: Date.now() >= new Date(binding.expiresAt).getTime(),
+		description: binding.description,
+		cutoffSeq: binding.cutoffSeq
+	};
+}
+function hostedShareErrorResponse(c, err) {
+	const message = err instanceof Error ? err.message : String(err);
+	const status = err instanceof HostedShareAuthorizationError ? 401 : err instanceof SessionShareSnapshotConflictError ? 409 : message === "Session not found" || message === "Hosted share not found" ? 404 : 400;
+	return c.json({
+		ok: false,
+		error: {
+			message,
+			code: err instanceof HostedShareAuthorizationError ? "hosted_share_auth_required" : status === 409 ? "session_snapshot_conflict" : void 0
+		}
+	}, status);
+}
 async function renderDirectoryLanding(c, store, service, record, token, subPath = "") {
 	store.updateConfig(resolveShareConfig(service));
 	const urls = {
@@ -885,9 +1270,13 @@ function buildLandingOg(service, record) {
 		absoluteShareUrl: resolved.shareUrl,
 		absoluteThumbnailUrl: `${resolved.shareUrl}/thumbnail`,
 		title: record.fileName,
-		description: record.description ?? void 0
+		description: record.description ?? (record.kind === "session" ? `${record.messageCount} messages shared via xopc` : void 0)
 	};
 }
+function isSafeInlineSessionMime(mimeType) {
+	const normalized = mimeType.split(";")[0]?.trim().toLowerCase();
+	return normalized === "image/png" || normalized === "image/jpeg" || normalized === "image/gif" || normalized === "image/webp" || normalized?.startsWith("audio/") === true || normalized?.startsWith("video/") === true;
+}
 async function handleDirectoryFile(c, store, service, record, relPath, clientIp, inline) {
 	if (!acquireDownloadSlot(record.token)) return new Response("Too many concurrent downloads for this share", { status: 429 });
 	try {

package/dist/src/gateway/hono/routes/status.js

@@ -1,5 +1,5 @@
 import { getDefaultModelSync, init_providers, resolveModel } from "../../../providers/index.js";
-import { getGatewayAgentEffectiveManifest } from "../../agents-admin.js";
+import { getGatewayAgentEffectiveConfig } from "../../agents-admin.js";
 import { isSTTAvailable } from "../../../voice/stt/availability.js";
 import { mergeSttConfigFromAppConfig } from "../../../voice/stt/config.js";
 import "../../../voice/stt/index.js";
@@ -14,9 +14,6 @@ function stableValue(value) {
 function contentHash(value) {
 	return createHash("sha256").update(JSON.stringify(stableValue(value))).digest("hex");
 }
-function asRecord(value) {
-	return value && typeof value === "object" && !Array.isArray(value) ? value : {};
-}
 function buildEvalRuntimeIdentity(service, agentId) {
 	const config = service.currentConfig;
 	if (!config) return {
@@ -24,16 +21,13 @@ function buildEvalRuntimeIdentity(service, agentId) {
 		error: "Gateway configuration is unavailable",
 		status: 503
 	};
-	const effective = getGatewayAgentEffectiveManifest(config, agentId);
+	const effective = getGatewayAgentEffectiveConfig(config, agentId);
 	if ("error" in effective) return {
 		ok: false,
 		error: effective.error,
 		status: effective.status ?? 400
 	};
-	const manifest = asRecord(effective.data.manifest);
-	const models = asRecord(manifest.models);
-	const tools = asRecord(manifest.tools);
-	const skills = manifest.skills ?? [];
+	const agentConfig = effective.data.config;
 	return {
 		ok: true,
 		payload: {
@@ -41,13 +35,12 @@ function buildEvalRuntimeIdentity(service, agentId) {
 			version: service.getHealth().version,
 			buildCommit: process.env.XOPC_BUILD_COMMIT?.trim() || process.env.GITHUB_SHA?.trim() || null,
 			agentId,
-			modelRef: models.primary ?? null,
-			thinkingLevel: manifest.thinkingDefault ?? null,
-			manifestHash: contentHash(effective.data.manifest),
-			systemPromptConfigHash: contentHash(manifest.systemPrompt ?? null),
-			toolPolicyHash: contentHash(tools),
-			skillPolicyHash: contentHash(skills),
-			presetChain: effective.data.sources
+			modelRef: agentConfig.models.chat.primary,
+			thinkingLevel: null,
+			configHash: contentHash(agentConfig),
+			toolPolicyHash: contentHash(agentConfig.tools),
+			skillPolicyHash: contentHash(agentConfig.skills),
+			sources: effective.data.sources
 		}
 	};
 }

package/dist/src/gateway/hono/routes/tunnel.d.ts

@@ -1,5 +1,3 @@
 import type { Hono } from 'hono';
 import type { AuthenticatedRouteDeps } from './deps.js';
-import type { GatewayService } from '../../service.js';
-export declare function registerTunnelPublicRoutes(app: Hono, service: GatewayService): void;
 export declare function registerTunnelRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void;