@xopcai/xopc 0.0.230 → 0.0.232

package/dist/src/tui/backends/gateway-realtime-backend.js

@@ -121,10 +121,18 @@ var GatewayRealtimeBackend = class {
 			const params = new URLSearchParams();
 			params.set("q", query);
 			params.set("limit", String(options?.limit ?? 15));
-			params.set("sessionKey", sessionKey);
-			const res = await gatewayFetch(this.baseUrl, `/api/workspace/editor/files/search?${params.toString()}`, this.credential);
+			const context = await gatewayFetch(this.baseUrl, `/api/files/contexts/session/${encodeURIComponent(sessionKey)}`, this.credential);
+			if (!context.ok) return [];
+			const contextJson = await context.json();
+			if (!contextJson.space?.id) return [];
+			params.set("spaceId", contextJson.space.id);
+			const res = await gatewayFetch(this.baseUrl, `/api/files/search?${params.toString()}`, this.credential);
 			if (!res.ok) return [];
-			return (await res.json()).payload?.entries ?? [];
+			return ((await res.json()).items ?? []).map((item) => ({
+				name: item.name,
+				path: item.relativePath,
+				isDirectory: item.kind === "directory"
+			}));
 		} catch (err) {
 			const errorMessage = err instanceof Error ? err.message : String(err);
 			log.warn({

package/dist/src/tunnel/consent.d.ts

@@ -28,4 +28,4 @@ export declare function assertTunnelMayStart(config: Config): void;
 export declare function assertTunnelAutoStartAllowed(config: Config): void;
 export declare function buildTunnelConsentRecord(): NonNullable<Config['tunnel']>['consent'];
 /** Short risk summary for CLI (keep in sync with web i18n). */
-export declare const TUNNEL_RISK_SUMMARY_LINES: readonly ["Starting remote access exposes your gateway on the public internet via frp.xopc.ai.", "Anyone with the public URL or pairing QR may use your gateway Bearer token.", "Traffic is proxied through third-party infrastructure; use a strong token and stop the tunnel when not needed."];
+export declare const TUNNEL_RISK_SUMMARY_LINES: readonly ["Starting remote access exposes your gateway on the public internet via frp.xopc.ai.", "A public URL exposes the gateway authentication surface to the internet.", "Traffic is proxied through third-party infrastructure; use a strong token and stop the tunnel when not needed."];

package/dist/src/tunnel/consent.js

@@ -57,7 +57,7 @@ function buildTunnelConsentRecord() {
 /** Short risk summary for CLI (keep in sync with web i18n). */
 const TUNNEL_RISK_SUMMARY_LINES = [
 	"Starting remote access exposes your gateway on the public internet via frp.xopc.ai.",
-	"Anyone with the public URL or pairing QR may use your gateway Bearer token.",
+	"A public URL exposes the gateway authentication surface to the internet.",
 	"Traffic is proxied through third-party infrastructure; use a strong token and stop the tunnel when not needed."
 ];
 //#endregion

package/dist/src/tunnel/gateway-lifecycle.js

@@ -1,9 +1,9 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
 import { resolveGatewayEffectiveHost } from "../config/gateway-bind.js";
-import { hasValidTunnelConsent } from "./consent.js";
 import { resolveOptionalTunnelRegistrationSecret, resolveTunnelBrokerUrl } from "./env.js";
 import { getTunnelService } from "./tunnel-service.js";
+import { hasValidTunnelConsent } from "./consent.js";
 import { resolveFrpSubdomainHost } from "./frp-subdomain-host.js";
 import { fetchTunnelWellKnown } from "./well-known.js";
 //#region src/tunnel/gateway-lifecycle.ts

package/dist/src/tunnel/index.d.ts

@@ -14,8 +14,5 @@ export { consumeTunnelMutationLimit, resetTunnelMutationLimitsForTests } from '.
 export { getTunnelService, hashGatewayToken, TunnelService } from './tunnel-service.js';
 export type { TunnelServiceConfig } from './tunnel-service.js';
 export { resolveFrpSubdomainHost } from './frp-subdomain-host.js';
-export { createPairingSecret, consumePairingSecret, resetPairingSessionsForTests } from './pairing.js';
-export type { PairingSecretResult } from './pairing.js';
-export { buildMobileConnectQrPayload, resolveLanGatewayUrl } from './tunnel-qr.js';
 export { loadTunnelState, saveTunnelState, resolveTunnelStatePath } from './tunnel-state.js';
-export type { PersistedTunnelState, TunnelQrPayload, TunnelStatus, TunnelRegistration } from './tunnel-types.js';
+export type { PersistedTunnelState, TunnelStatus, TunnelRegistration } from './tunnel-types.js';

package/dist/src/tunnel/index.js

@@ -1,15 +1,13 @@
 import { loadTunnelState, resolveTunnelStatePath, saveTunnelState } from "./tunnel-state.js";
-import { buildMobileConnectQrPayload, resolveLanGatewayUrl } from "./tunnel-qr.js";
-import { CURRENT_TUNNEL_CONSENT_VERSION, TUNNEL_CONSENT_REQUIRED_CODE, TUNNEL_RISK_SUMMARY_LINES, TunnelConsentError, assertTunnelMayStart, getTunnelConsentState, hasValidTunnelConsent } from "./consent.js";
-import { TUNNEL_REGISTRATION_SECRET_REQUIRED_CODE, TunnelRegistrationSecretError, getTunnelRegistrationSecretMeta, isLocalDevelopmentTunnelBroker, isMaskedTunnelSecretPatchValue, resolveOptionalTunnelRegistrationSecret, resolveTunnelBrokerUrl, resolveTunnelRegistrationSecret, tunnelRegistrationSecretRequiredMessage } from "./env.js";
 import { TunnelBrokerClient, resolveBrokerApiBase } from "./broker-client.js";
 import { FRPC_VERSION, clearFrpcPathForProcess, ensureFrpcBinary, publishFrpcPathForProcess } from "./frpc-binary.js";
-import { consumePairingSecret, createPairingSecret, resetPairingSessionsForTests } from "./pairing.js";
+import { TUNNEL_REGISTRATION_SECRET_REQUIRED_CODE, TunnelRegistrationSecretError, getTunnelRegistrationSecretMeta, isLocalDevelopmentTunnelBroker, isMaskedTunnelSecretPatchValue, resolveOptionalTunnelRegistrationSecret, resolveTunnelBrokerUrl, resolveTunnelRegistrationSecret, tunnelRegistrationSecretRequiredMessage } from "./env.js";
 import { logTunnelAudit } from "./tunnel-audit.js";
 import { TunnelService, getTunnelService, hashGatewayToken } from "./tunnel-service.js";
+import { CURRENT_TUNNEL_CONSENT_VERSION, TUNNEL_CONSENT_REQUIRED_CODE, TUNNEL_RISK_SUMMARY_LINES, TunnelConsentError, assertTunnelMayStart, getTunnelConsentState, hasValidTunnelConsent } from "./consent.js";
 import { resolveFrpSubdomainHost } from "./frp-subdomain-host.js";
 import { clearTunnelWellKnownCache, fetchTunnelWellKnown } from "./well-known.js";
 import { configureTunnelFromGatewayConfig, maybeAutoStartTunnelFromConfig, wireTunnelEventsToGateway } from "./gateway-lifecycle.js";
 import { applyTunnelConsentToConfig, mergeTunnelConfigPatch, sanitizeTunnelConfig, setTunnelEnabledInConfig } from "./tunnel-config.js";
 import { consumeTunnelMutationLimit, resetTunnelMutationLimitsForTests } from "./tunnel-rate-limit.js";
-export { CURRENT_TUNNEL_CONSENT_VERSION, FRPC_VERSION, TUNNEL_CONSENT_REQUIRED_CODE, TUNNEL_REGISTRATION_SECRET_REQUIRED_CODE, TUNNEL_RISK_SUMMARY_LINES, TunnelBrokerClient, TunnelConsentError, TunnelRegistrationSecretError, TunnelService, applyTunnelConsentToConfig, assertTunnelMayStart, buildMobileConnectQrPayload, clearFrpcPathForProcess, clearTunnelWellKnownCache, configureTunnelFromGatewayConfig, consumePairingSecret, consumeTunnelMutationLimit, createPairingSecret, ensureFrpcBinary, fetchTunnelWellKnown, getTunnelConsentState, getTunnelRegistrationSecretMeta, getTunnelService, hasValidTunnelConsent, hashGatewayToken, isLocalDevelopmentTunnelBroker, isMaskedTunnelSecretPatchValue, loadTunnelState, logTunnelAudit, maybeAutoStartTunnelFromConfig, mergeTunnelConfigPatch, publishFrpcPathForProcess, resetPairingSessionsForTests, resetTunnelMutationLimitsForTests, resolveBrokerApiBase, resolveFrpSubdomainHost, resolveLanGatewayUrl, resolveOptionalTunnelRegistrationSecret, resolveTunnelBrokerUrl, resolveTunnelRegistrationSecret, resolveTunnelStatePath, sanitizeTunnelConfig, saveTunnelState, setTunnelEnabledInConfig, tunnelRegistrationSecretRequiredMessage, wireTunnelEventsToGateway };
+export { CURRENT_TUNNEL_CONSENT_VERSION, FRPC_VERSION, TUNNEL_CONSENT_REQUIRED_CODE, TUNNEL_REGISTRATION_SECRET_REQUIRED_CODE, TUNNEL_RISK_SUMMARY_LINES, TunnelBrokerClient, TunnelConsentError, TunnelRegistrationSecretError, TunnelService, applyTunnelConsentToConfig, assertTunnelMayStart, clearFrpcPathForProcess, clearTunnelWellKnownCache, configureTunnelFromGatewayConfig, consumeTunnelMutationLimit, ensureFrpcBinary, fetchTunnelWellKnown, getTunnelConsentState, getTunnelRegistrationSecretMeta, getTunnelService, hasValidTunnelConsent, hashGatewayToken, isLocalDevelopmentTunnelBroker, isMaskedTunnelSecretPatchValue, loadTunnelState, logTunnelAudit, maybeAutoStartTunnelFromConfig, mergeTunnelConfigPatch, publishFrpcPathForProcess, resetTunnelMutationLimitsForTests, resolveBrokerApiBase, resolveFrpSubdomainHost, resolveOptionalTunnelRegistrationSecret, resolveTunnelBrokerUrl, resolveTunnelRegistrationSecret, resolveTunnelStatePath, sanitizeTunnelConfig, saveTunnelState, setTunnelEnabledInConfig, tunnelRegistrationSecretRequiredMessage, wireTunnelEventsToGateway };

package/dist/src/tunnel/tunnel-audit.d.ts

@@ -1,2 +1,2 @@
-export type TunnelAuditEvent = 'tunnel.consent' | 'tunnel.start' | 'tunnel.stop' | 'tunnel.release' | 'tunnel.start_denied' | 'tunnel.pair' | 'tunnel.exchange_token' | 'tunnel.registration_authorized' | 'tunnel.enable_lan_pairing';
+export type TunnelAuditEvent = 'tunnel.consent' | 'tunnel.start' | 'tunnel.stop' | 'tunnel.release' | 'tunnel.start_denied' | 'tunnel.registration_authorized';
 export declare function logTunnelAudit(event: TunnelAuditEvent, fields: Record<string, unknown>, message: string): void;

package/dist/src/tunnel/tunnel-config.js

@@ -1,6 +1,6 @@
 import { TunnelConfigSchema, TunnelConsentSchema, init_schema } from "../config/schema.js";
-import { assertTunnelAutoStartAllowed, buildTunnelConsentRecord, hasValidTunnelConsent } from "./consent.js";
 import { getTunnelRegistrationSecretMeta, isMaskedTunnelSecretPatchValue } from "./env.js";
+import { assertTunnelAutoStartAllowed, buildTunnelConsentRecord, hasValidTunnelConsent } from "./consent.js";
 import { z } from "zod";
 //#region src/tunnel/tunnel-config.ts
 init_schema();

package/dist/src/tunnel/tunnel-service.d.ts

@@ -1,5 +1,5 @@
 import { EventEmitter } from 'node:events';
-import type { TunnelQrPayload, TunnelStatus } from './tunnel-types.js';
+import type { TunnelStatus } from './tunnel-types.js';
 export type TunnelServiceConfig = {
     brokerUrl: string;
     registrationSecret?: string;
@@ -27,8 +27,7 @@ export declare class TunnelService extends EventEmitter {
     getStatus(): TunnelStatus;
     private setStartPhase;
     private clearStartProgress;
-    buildQr(gatewayPort: number, gatewayHost: string): Promise<TunnelQrPayload>;
-    start(gatewayPort: number, gatewayToken: string): Promise<TunnelQrPayload>;
+    start(gatewayPort: number, gatewayToken: string): Promise<void>;
     stop(opts?: {
         release?: boolean;
     }): Promise<{

package/dist/src/tunnel/tunnel-service.js

@@ -2,13 +2,11 @@ import { PACKAGE_VERSION, init_package_version } from "../package-version.js";
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
 import { clearTunnelState, loadTunnelState, saveTunnelState, updateTunnelState } from "./tunnel-state.js";
-import { buildMobileConnectQrPayload, resolveLanGatewayUrl } from "./tunnel-qr.js";
-import { TunnelRegistrationSecretError } from "./env.js";
 import { TunnelBrokerClient, resolveBrokerApiBase } from "./broker-client.js";
 import { clearFrpcPathForProcess, ensureFrpcBinary, publishFrpcPathForProcess } from "./frpc-binary.js";
 import { writeFrpcConfig } from "./frpc-config.js";
 import { spawnFrpcProcess } from "./frpc-process.js";
-import { createPairingSecret } from "./pairing.js";
+import { TunnelRegistrationSecretError } from "./env.js";
 import { canResumePersistedTunnel, persistedFromRegistration, registrationFromPersisted } from "./tunnel-persist.js";
 import { logTunnelAudit } from "./tunnel-audit.js";
 import { createHash } from "node:crypto";
@@ -81,21 +79,6 @@ var TunnelService = class extends EventEmitter {
 		this.startProgress = null;
 		this.emit("tunnel:progress");
 	}
-	async buildQr(gatewayPort, gatewayHost) {
-		const publicUrl = loadTunnelState()?.publicUrl ?? null;
-		if (!publicUrl) return {
-			qrPayload: "",
-			publicUrl: null,
-			lanUrl: null
-		};
-		const { secret, expiresAt } = createPairingSecret();
-		return buildMobileConnectQrPayload({
-			publicUrl,
-			lanUrl: resolveLanGatewayUrl(gatewayHost, gatewayPort),
-			pairingSecret: secret,
-			expiresAt: expiresAt.toISOString()
-		});
-	}
 	async start(gatewayPort, gatewayToken) {
 		const cfg = this.serviceConfig;
 		if (!cfg) throw new Error("Tunnel service not configured");
@@ -159,14 +142,12 @@ var TunnelService = class extends EventEmitter {
 		this.connectedSince = (/* @__PURE__ */ new Date()).toISOString();
 		this.reconnectAttempt = 0;
 		this.emit("tunnel:connected");
-		const qr = await this.buildQr(gatewayPort, cfg.gatewayHost);
 		logTunnelAudit("tunnel.start", {
 			subdomain: registration.subdomain,
 			publicUrl: registration.publicUrl,
 			tunnelId: registration.tunnelId,
 			gatewayTokenHash: hashGatewayToken(gatewayToken).slice(0, 12)
 		}, "Remote access tunnel started");
-		return qr;
 	}
 	async stop(opts) {
 		const release = opts?.release === true;

package/dist/src/tunnel/tunnel-types.d.ts

@@ -58,9 +58,3 @@ export type TunnelStatus = {
         };
     };
 };
-export type TunnelQrPayload = {
-    qrPayload: string;
-    publicUrl: string | null;
-    lanUrl: string | null;
-    expiresAt?: string;
-};

package/dist/src/workflows/draft/workflow-draft-service.js

@@ -3,7 +3,7 @@ import { init_logger } from "../../utils/logger.js";
 import { getAgentDefaultModelRef, init_schema } from "../../config/schema.js";
 import { getDefaultModelSync, init_providers, resolveModel } from "../../providers/index.js";
 import { completeWithResolvedCredentials } from "../../providers/model-call.js";
-import { resolveModelRef } from "../../config/agent-typed-models.js";
+import { resolveModelSelector } from "../../config/agent-model-intents.js";
 import { buildWorkflowDraftPrompt, buildWorkflowDraftRepairPrompt } from "./workflow-draft-prompt.js";
 import { buildWorkflowDraftResponse, parseGeneratedWorkflowDraft } from "./workflow-draft-validator.js";
 //#region src/workflows/draft/workflow-draft-service.ts
@@ -83,7 +83,7 @@ var WorkflowDraftService = class {
 };
 function resolveDraftModelRef(config, agentId) {
 	try {
-		return resolveModelRef(config, agentId, "large");
+		return resolveModelSelector(config, agentId, "reasoning");
 	} catch {
 		return getAgentDefaultModelRef(config) ?? getDefaultModelSync(config);
 	}

package/dist/src/workflows/service/workflow-run-service.js

@@ -6,9 +6,9 @@ import { TaskConversationRepository } from "../../tasks/task-conversation-reposi
 import { TaskRunRepository } from "../../tasks/task-run-repository.js";
 import { getProjectWorkspacePathForSession } from "../../projects/workspace.js";
 import { publishAutomationProductEvent } from "../../automations/product-events.js";
-import { resolveModelRef } from "../../config/agent-typed-models.js";
 import { TaskContextRepository } from "../../tasks/task-context-repository.js";
 import { TaskApplicationService } from "../../tasks/task-application-service.js";
+import { resolveModelSelector } from "../../config/agent-model-intents.js";
 import { DelegateSubagentRunner } from "../../agent/workflow/subagent-runner.js";
 import { preflightWorkflowConnectors } from "../../connectors/workflow-preflight.js";
 import { CatalogWorkflowDefinitionRegistry } from "../registry/catalog-workflow-definition-registry.js";
@@ -90,7 +90,7 @@ var WorkflowRunService = class {
 	}
 	async startWorkflowRun(params) {
 		const config = this.options.service.currentConfig;
-		const workflowPolicy = config.agents?.list ? resolveEffectiveAgentProfileForSession(config, params.parentSessionKey ?? `agent:${params.agentId}`).manifest.workflows : void 0;
+		const workflowPolicy = config.agents?.list ? resolveEffectiveAgentProfileForSession(config, params.parentSessionKey ?? `agent:${params.agentId}`).config.workflows : void 0;
 		if (workflowPolicy?.allowed && !workflowPolicy.allowed.includes(params.definitionId)) return {
 			ok: false,
 			code: "policy_denied",
@@ -568,7 +568,7 @@ var WorkflowRunService = class {
 			runner,
 			hooks: [{ afterRun: ({ runId, status }) => new WorkflowWritebackService().apply(params.runStore, runId, status) }],
 			resolveModelId: (modelId) => {
-				return resolveModel(resolveModelRef(gatewayService.currentConfig, profileAgentId, modelId));
+				return resolveModel(resolveModelSelector(gatewayService.currentConfig, profileAgentId, modelId));
 			},
 			parentSessionKey: params.sessionKey,
 			subagentSessionKeyFactory: ({ runId, agentId }) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xopcai/xopc",
-  "version": "0.0.230",
+  "version": "0.0.232",
   "description": "Local-first personal AI assistant with reviewable user understanding, durable tasks, workflows, automations, and local or cloud models.",
   "type": "module",
   "main": "dist/src/index.js",
@@ -165,8 +165,8 @@
     "vue": "^3.5.35",
     "@xopcai/endpoint-tools-protocol": "0.0.0",
     "@xopcai/gateway-contract": "0.0.0",
-    "@xopcai/realtime-client": "0.0.0",
-    "@xopcai/realtime-protocol": "0.0.0"
+    "@xopcai/realtime-protocol": "0.0.0",
+    "@xopcai/realtime-client": "0.0.0"
   },
   "scripts": {
     "assets:brand": "node scripts/generate-brand-assets.mjs",