@xopcai/xopc 0.0.230 → 0.0.232

package/dist/src/gateway/file-reference-registry.js

@@ -1,45 +0,0 @@
-import { randomUUID } from "node:crypto";
-//#region src/gateway/file-reference-registry.ts
-const DEFAULT_TTL_MS = 1800 * 1e3;
-var FileReferenceRegistry = class {
-	refs = /* @__PURE__ */ new Map();
-	register(input) {
-		this.expire();
-		const id = randomUUID();
-		const ref = {
-			id,
-			absolutePath: input.absolutePath,
-			sessionKey: input.sessionKey?.trim() || void 0,
-			scope: input.scope,
-			locationKind: input.locationKind,
-			capabilities: [...new Set(input.capabilities)],
-			expiresAt: Date.now() + (input.ttlMs ?? DEFAULT_TTL_MS)
-		};
-		this.refs.set(id, ref);
-		return ref;
-	}
-	resolve(id) {
-		this.expire();
-		const ref = this.refs.get(id);
-		if (!ref) return null;
-		if (ref.expiresAt <= Date.now()) {
-			this.refs.delete(id);
-			return null;
-		}
-		return ref;
-	}
-	/**
-	* Remove a specific reference (used after a one-shot action like
-	* import-to-workspace completes so the source card can't be re-triggered).
-	* Returns true if the reference existed and was removed.
-	*/
-	expireById(id) {
-		return this.refs.delete(id);
-	}
-	expire(now = Date.now()) {
-		for (const [id, ref] of this.refs) if (ref.expiresAt <= now) this.refs.delete(id);
-	}
-};
-const fileReferenceRegistry = new FileReferenceRegistry();
-//#endregion
-export { FileReferenceRegistry, fileReferenceRegistry };

package/dist/src/gateway/hono/lib/agent-model.d.ts

@@ -1,35 +0,0 @@
-import type { AgentTypedModel } from '../../../config/schema.js';
-/**
- * Coerce PATCH body `{ roles: Record<id, role> }` into validated typed model roles.
- * Returns `null` to clear, `undefined` when input should be skipped, or cleaned roles.
- * Empty roles after filtering → `null` (same as clear).
- */
-export declare function normalizePatchTypedModels(v: unknown): Record<string, Omit<AgentTypedModel, 'id'>> | null | undefined;
-/** Read `primary` from an `AgentModelConfig` object. */
-export declare function agentModelRefToString(ref: unknown): string | undefined;
-export declare function agentModelFallbacksToArray(ref: unknown): string[];
-/**
- * Coerce a PATCH body `model` value into the canonical `{ primary, fallbacks? }`
- * object form. Returns `undefined` when the input has no usable primary so the
- * caller can skip the assignment.
- */
-export declare function normalizePatchAgentModel(v: unknown): {
-    primary: string;
-    fallbacks?: string[];
-} | undefined;
-/** Read `timeoutMs` from an image-generation model ref (only set when ref is an object). */
-export declare function agentImageGenerationModelTimeoutMs(ref: unknown): number | null;
-/** Read `autoProviderFallback` from an image-generation model ref. Defaults to false. */
-export declare function agentImageGenerationModelAutoProviderFallback(ref: unknown): boolean;
-/**
- * PATCH body normalizer for image-generation model refs. Always
- * emits `{ primary, fallbacks?, timeoutMs?, autoProviderFallback? }`. Returns
- * `undefined` when the input has no usable primary so the caller can skip the
- * assignment.
- */
-export declare function normalizePatchAgentImageGenerationModel(v: unknown): {
-    primary: string;
-    fallbacks?: string[];
-    timeoutMs?: number;
-    autoProviderFallback?: true;
-} | undefined;

package/dist/src/gateway/hono/lib/agent-model.js

@@ -1,97 +0,0 @@
-//#region src/gateway/hono/lib/agent-model.ts
-const TYPED_MODEL_ID_RE = /^[a-z][a-z0-9_-]{0,63}$/;
-function isValidProviderModelRef(ref) {
-	const trimmed = ref.trim();
-	const idx = trimmed.indexOf("/");
-	return idx > 0 && idx < trimmed.length - 1;
-}
-/**
-* Coerce PATCH body `{ roles: Record<id, role> }` into validated typed model roles.
-* Returns `null` to clear, `undefined` when input should be skipped, or cleaned roles.
-* Empty roles after filtering → `null` (same as clear).
-*/
-function normalizePatchTypedModels(v) {
-	if (v === void 0) return void 0;
-	if (v === null) return null;
-	if (!v || typeof v !== "object" || Array.isArray(v) || !("roles" in v)) return void 0;
-	const rawRoles = v.roles;
-	if (!rawRoles || typeof rawRoles !== "object" || Array.isArray(rawRoles)) return void 0;
-	const rows = Object.entries(rawRoles).map(([id, role]) => ({
-		id,
-		...role
-	}));
-	const byId = /* @__PURE__ */ new Map();
-	for (const raw of rows) {
-		if (!raw || typeof raw !== "object" || Array.isArray(raw)) continue;
-		const o = raw;
-		const id = typeof o.id === "string" ? o.id.trim() : "";
-		const model = typeof o.model === "string" ? o.model.trim() : "";
-		if (!id || !TYPED_MODEL_ID_RE.test(id) || !model || !isValidProviderModelRef(model)) continue;
-		const description = typeof o.description === "string" && o.description.trim() ? o.description.trim().slice(0, 500) : void 0;
-		byId.set(id, description ? {
-			description,
-			model
-		} : { model });
-	}
-	if (byId.size === 0) return null;
-	return Object.fromEntries(byId.entries());
-}
-/** Read `primary` from an `AgentModelConfig` object. */
-function agentModelRefToString(ref) {
-	if (!ref || typeof ref !== "object" || Array.isArray(ref)) return void 0;
-	const p = ref.primary;
-	return typeof p === "string" && p.trim() ? p : void 0;
-}
-function agentModelFallbacksToArray(ref) {
-	if (!ref || typeof ref !== "object" || Array.isArray(ref)) return [];
-	const f = ref.fallbacks;
-	if (!Array.isArray(f)) return [];
-	return f.filter((x) => typeof x === "string" && x.trim().length > 0);
-}
-/**
-* Coerce a PATCH body `model` value into the canonical `{ primary, fallbacks? }`
-* object form. Returns `undefined` when the input has no usable primary so the
-* caller can skip the assignment.
-*/
-function normalizePatchAgentModel(v) {
-	if (!v || typeof v !== "object" || Array.isArray(v)) return void 0;
-	const o = v;
-	const primary = typeof o.primary === "string" ? o.primary.trim() : "";
-	if (!primary) return void 0;
-	const fallbacks = Array.isArray(o.fallbacks) ? o.fallbacks.filter((x) => typeof x === "string" && x.trim().length > 0) : [];
-	return fallbacks.length > 0 ? {
-		primary,
-		fallbacks
-	} : { primary };
-}
-/** Read `timeoutMs` from an image-generation model ref (only set when ref is an object). */
-function agentImageGenerationModelTimeoutMs(ref) {
-	if (!ref || typeof ref !== "object" || Array.isArray(ref)) return null;
-	const v = ref.timeoutMs;
-	return typeof v === "number" && Number.isFinite(v) && v > 0 ? v : null;
-}
-/** Read `autoProviderFallback` from an image-generation model ref. Defaults to false. */
-function agentImageGenerationModelAutoProviderFallback(ref) {
-	if (!ref || typeof ref !== "object" || Array.isArray(ref)) return false;
-	return ref.autoProviderFallback === true;
-}
-/**
-* PATCH body normalizer for image-generation model refs. Always
-* emits `{ primary, fallbacks?, timeoutMs?, autoProviderFallback? }`. Returns
-* `undefined` when the input has no usable primary so the caller can skip the
-* assignment.
-*/
-function normalizePatchAgentImageGenerationModel(v) {
-	if (!v || typeof v !== "object" || Array.isArray(v)) return void 0;
-	const o = v;
-	const primary = typeof o.primary === "string" ? o.primary.trim() : "";
-	if (!primary) return void 0;
-	const out = { primary };
-	const fallbacks = Array.isArray(o.fallbacks) ? o.fallbacks.filter((x) => typeof x === "string" && x.trim().length > 0).map((x) => x.trim()) : [];
-	if (fallbacks.length > 0) out.fallbacks = fallbacks;
-	if (typeof o.timeoutMs === "number" && Number.isFinite(o.timeoutMs) && o.timeoutMs > 0) out.timeoutMs = Math.floor(o.timeoutMs);
-	if (o.autoProviderFallback === true) out.autoProviderFallback = true;
-	return out;
-}
-//#endregion
-export { agentImageGenerationModelAutoProviderFallback, agentImageGenerationModelTimeoutMs, agentModelFallbacksToArray, agentModelRefToString, normalizePatchAgentImageGenerationModel, normalizePatchAgentModel, normalizePatchTypedModels };

package/dist/src/gateway/hono/routes/capability-presets.d.ts

@@ -1,3 +0,0 @@
-import type { Hono } from 'hono';
-import type { AuthenticatedRouteDeps } from './deps.js';
-export declare function registerCapabilityPresetsRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void;

package/dist/src/gateway/hono/routes/capability-presets.js

@@ -1,187 +0,0 @@
-import { CapabilityPresetSchema, init_schema } from "../../../agent-manifest/schema.js";
-import { init_agent_scope, normalizeAgentId } from "../../../agent/agent-scope.js";
-import { listCapabilityPresets, prepareCreateCapabilityPreset, prepareDeleteCapabilityPreset, prepareUpdateCapabilityPreset, previewCapabilityPresetUpdate } from "../../capability-presets-admin.js";
-//#region src/gateway/hono/routes/capability-presets.ts
-init_schema();
-init_agent_scope();
-function parseJsonObject(raw) {
-	if (raw === null || typeof raw !== "object" || Array.isArray(raw)) return { error: "body must be an object" };
-	return raw;
-}
-function isParseError(value) {
-	return typeof value === "object" && value !== null && "error" in value && typeof value.error === "string";
-}
-function parseCreateBody(raw) {
-	const body = parseJsonObject(raw);
-	if (isParseError(body)) return body;
-	const out = {
-		id: typeof body.id === "string" ? body.id : void 0,
-		name: typeof body.name === "string" ? body.name : void 0,
-		description: typeof body.description === "string" ? body.description : void 0
-	};
-	if (Object.hasOwn(body, "version")) out.version = Number(body.version);
-	if (Object.hasOwn(body, "memory")) return { error: "memory is not a capability preset field" };
-	for (const key of [
-		"extends",
-		"models",
-		"tools",
-		"skills",
-		"workflows",
-		"boundaries",
-		"runtime",
-		"locks"
-	]) {
-		if (!Object.hasOwn(body, key)) continue;
-		const parsed = CapabilityPresetSchema.pick({ [key]: true }).safeParse({ [key]: body[key] });
-		if (!parsed.success) return { error: `${key} ${parsed.error.issues[0]?.message ?? "is invalid"}` };
-		out[key] = parsed.data[key];
-	}
-	return out;
-}
-function parseUpdateBody(raw) {
-	const body = parseJsonObject(raw);
-	if (isParseError(body)) return body;
-	const out = {};
-	if (Object.hasOwn(body, "name")) out.name = String(body.name ?? "");
-	if (Object.hasOwn(body, "description")) out.description = body.description === null ? null : String(body.description ?? "");
-	if (Object.hasOwn(body, "version")) out.version = Number(body.version);
-	if (Object.hasOwn(body, "memory")) return { error: "memory is not a capability preset field" };
-	for (const key of [
-		"extends",
-		"models",
-		"tools",
-		"skills",
-		"workflows",
-		"boundaries",
-		"runtime",
-		"locks"
-	]) {
-		if (!Object.hasOwn(body, key)) continue;
-		if (body[key] === null) {
-			out[key] = null;
-			continue;
-		}
-		const parsed = CapabilityPresetSchema.pick({ [key]: true }).safeParse({ [key]: body[key] });
-		if (!parsed.success) return { error: `${key} ${parsed.error.issues[0]?.message ?? "is invalid"}` };
-		out[key] = parsed.data[key];
-	}
-	return out;
-}
-function registerCapabilityPresetsRoutes(authenticated, deps) {
-	const { service, strictRateLimitMiddleware } = deps;
-	authenticated.get("/api/capability-presets", async (c) => {
-		return c.json({
-			ok: true,
-			payload: listCapabilityPresets(service.currentConfig)
-		});
-	});
-	authenticated.post("/api/capability-presets", strictRateLimitMiddleware, async (c) => {
-		let raw;
-		try {
-			raw = await c.req.json();
-		} catch {
-			return c.json({
-				ok: false,
-				error: { message: "Invalid JSON" }
-			}, 400);
-		}
-		const body = parseCreateBody(raw);
-		if (isParseError(body)) return c.json({
-			ok: false,
-			error: { message: body.error }
-		}, 400);
-		const prep = prepareCreateCapabilityPreset(service.currentConfig, body);
-		if (prep.ok === false) return c.json({
-			ok: false,
-			error: { message: prep.error }
-		}, prep.status ?? 400);
-		const save = await service.saveConfig(prep.data.nextConfig);
-		if (!save.saved) return c.json({
-			ok: false,
-			error: { message: save.error ?? "save failed" }
-		}, 500);
-		return c.json({
-			ok: true,
-			payload: {
-				presetId: prep.data.presetId,
-				presets: listCapabilityPresets(service.currentConfig)
-			}
-		});
-	});
-	authenticated.patch("/api/capability-presets/:id", strictRateLimitMiddleware, async (c) => {
-		const id = normalizeAgentId(c.req.param("id") ?? "");
-		let raw;
-		try {
-			raw = await c.req.json();
-		} catch {
-			return c.json({
-				ok: false,
-				error: { message: "Invalid JSON" }
-			}, 400);
-		}
-		const body = parseUpdateBody(raw);
-		if (isParseError(body)) return c.json({
-			ok: false,
-			error: { message: body.error }
-		}, 400);
-		const prep = prepareUpdateCapabilityPreset(service.currentConfig, id, body);
-		if (prep.ok === false) return c.json({
-			ok: false,
-			error: { message: prep.error }
-		}, prep.status ?? 400);
-		const save = await service.saveConfig(prep.data.nextConfig);
-		if (!save.saved) return c.json({
-			ok: false,
-			error: { message: save.error ?? "save failed" }
-		}, 500);
-		return c.json({
-			ok: true,
-			payload: listCapabilityPresets(service.currentConfig)
-		});
-	});
-	authenticated.post("/api/capability-presets/:id/preview", strictRateLimitMiddleware, async (c) => {
-		const id = normalizeAgentId(c.req.param("id") ?? "");
-		let raw;
-		try {
-			raw = await c.req.json();
-		} catch {
-			return c.json({
-				ok: false,
-				error: { message: "Invalid JSON" }
-			}, 400);
-		}
-		const body = parseUpdateBody(raw);
-		if (isParseError(body)) return c.json({
-			ok: false,
-			error: { message: body.error }
-		}, 400);
-		const preview = previewCapabilityPresetUpdate(service.currentConfig, id, body);
-		if (preview.ok === false) return c.json({
-			ok: false,
-			error: { message: preview.error }
-		}, preview.status ?? 400);
-		return c.json({
-			ok: true,
-			payload: preview.data
-		});
-	});
-	authenticated.delete("/api/capability-presets/:id", strictRateLimitMiddleware, async (c) => {
-		const id = normalizeAgentId(c.req.param("id") ?? "");
-		const prep = prepareDeleteCapabilityPreset(service.currentConfig, id);
-		if (prep.ok === false) return c.json({
-			ok: false,
-			error: { message: prep.error }
-		}, prep.status ?? 400);
-		const save = await service.saveConfig(prep.data.nextConfig);
-		if (!save.saved) return c.json({
-			ok: false,
-			error: { message: save.error ?? "save failed" }
-		}, 500);
-		return c.json({
-			ok: true,
-			payload: listCapabilityPresets(service.currentConfig)
-		});
-	});
-}
-//#endregion
-export { registerCapabilityPresetsRoutes };

package/dist/src/gateway/hono/routes/mobile.d.ts

@@ -1,3 +0,0 @@
-import type { Hono } from 'hono';
-import type { AuthenticatedRouteDeps } from './deps.js';
-export declare function registerMobileRoutes(authenticated: Hono, _deps: AuthenticatedRouteDeps): void;

package/dist/src/gateway/security/operator-scopes.d.ts

@@ -1,37 +0,0 @@
-/**
- * Operator scope system for fine-grained gateway API authorization.
- *
- * Each gateway API method maps to one or more required scopes.
- * Clients declare their scopes at connection time; the gateway enforces
- * that the declared scopes cover the method being invoked.
- */
-export declare const ADMIN_SCOPE: "operator.admin";
-export declare const READ_SCOPE: "operator.read";
-export declare const WRITE_SCOPE: "operator.write";
-export type OperatorScope = typeof ADMIN_SCOPE | typeof READ_SCOPE | typeof WRITE_SCOPE;
-export declare const KNOWN_OPERATOR_SCOPES: ReadonlySet<OperatorScope>;
-export declare function isOperatorScope(value: unknown): value is OperatorScope;
-/** Default scopes granted to authenticated CLI / direct connections. */
-export declare const DEFAULT_OPERATOR_SCOPES: OperatorScope[];
-/**
- * Check whether a set of granted scopes satisfies the required scope for a route.
- */
-export declare function authorizeRouteScope(routePath: string, grantedScopes: readonly OperatorScope[]): {
-    allowed: true;
-} | {
-    allowed: false;
-    requiredScope: OperatorScope;
-};
-/**
- * Check whether any of the granted scopes satisfies the required scope.
- */
-export declare function authorizeScope(requiredScope: OperatorScope, grantedScopes: readonly OperatorScope[]): {
-    allowed: true;
-} | {
-    allowed: false;
-    requiredScope: OperatorScope;
-};
-/**
- * Parse scopes from a comma-separated header value.
- */
-export declare function parseScopesHeader(headerValue: string | undefined): OperatorScope[];

package/dist/src/gateway/security/operator-scopes.js

@@ -1,147 +0,0 @@
-//#region src/gateway/security/operator-scopes.ts
-/**
-* Operator scope system for fine-grained gateway API authorization.
-*
-* Each gateway API method maps to one or more required scopes.
-* Clients declare their scopes at connection time; the gateway enforces
-* that the declared scopes cover the method being invoked.
-*/
-const ADMIN_SCOPE = "operator.admin";
-const READ_SCOPE = "operator.read";
-const WRITE_SCOPE = "operator.write";
-const KNOWN_OPERATOR_SCOPES = new Set([
-	ADMIN_SCOPE,
-	READ_SCOPE,
-	WRITE_SCOPE
-]);
-function isOperatorScope(value) {
-	return typeof value === "string" && KNOWN_OPERATOR_SCOPES.has(value);
-}
-/** Default scopes granted to authenticated CLI / direct connections. */
-const DEFAULT_OPERATOR_SCOPES = [
-	ADMIN_SCOPE,
-	READ_SCOPE,
-	WRITE_SCOPE
-];
-/**
-* Route-level scope requirements.
-* Maps HTTP route path prefixes to required minimum scope.
-*/
-const ROUTE_SCOPE_REQUIREMENTS = [
-	{
-		prefix: "/api/config",
-		scope: ADMIN_SCOPE
-	},
-	{
-		prefix: "/api/update",
-		scope: ADMIN_SCOPE
-	},
-	{
-		prefix: "/api/extensions/registry",
-		scope: ADMIN_SCOPE
-	},
-	{
-		prefix: "/api/agent",
-		scope: WRITE_SCOPE
-	},
-	{
-		prefix: "/api/sessions",
-		scope: WRITE_SCOPE
-	},
-	{
-		prefix: "/api/automations",
-		scope: WRITE_SCOPE
-	},
-	{
-		prefix: "/api/automation-runs",
-		scope: WRITE_SCOPE
-	},
-	{
-		prefix: "/api/channels",
-		scope: WRITE_SCOPE
-	},
-	{
-		prefix: "/api/agents",
-		scope: WRITE_SCOPE
-	},
-	{
-		prefix: "/api/workspace",
-		scope: WRITE_SCOPE
-	},
-	{
-		prefix: "/api/skills",
-		scope: WRITE_SCOPE
-	},
-	{
-		prefix: "/api/marketplace/install",
-		scope: ADMIN_SCOPE
-	},
-	{
-		prefix: "/api/marketplace/uninstall",
-		scope: ADMIN_SCOPE
-	},
-	{
-		prefix: "/api/commands",
-		scope: WRITE_SCOPE
-	},
-	{
-		prefix: "/api/host-fs",
-		scope: WRITE_SCOPE
-	},
-	{
-		prefix: "/api/status",
-		scope: READ_SCOPE
-	},
-	{
-		prefix: "/api/models",
-		scope: READ_SCOPE
-	},
-	{
-		prefix: "/api/logs",
-		scope: READ_SCOPE
-	},
-	{
-		prefix: "/api/doctor",
-		scope: READ_SCOPE
-	},
-	{
-		prefix: "/api/realtime",
-		scope: READ_SCOPE
-	}
-];
-/** Scope hierarchy: admin > write > read. */
-const SCOPE_HIERARCHY = {
-	[ADMIN_SCOPE]: 3,
-	[WRITE_SCOPE]: 2,
-	[READ_SCOPE]: 1
-};
-function scopeSatisfies(granted, required) {
-	return SCOPE_HIERARCHY[granted] >= SCOPE_HIERARCHY[required];
-}
-/**
-* Check whether a set of granted scopes satisfies the required scope for a route.
-*/
-function authorizeRouteScope(routePath, grantedScopes) {
-	const routeRequirement = ROUTE_SCOPE_REQUIREMENTS.find((entry) => routePath.startsWith(entry.prefix));
-	if (!routeRequirement) return authorizeScope(READ_SCOPE, grantedScopes);
-	return authorizeScope(routeRequirement.scope, grantedScopes);
-}
-/**
-* Check whether any of the granted scopes satisfies the required scope.
-*/
-function authorizeScope(requiredScope, grantedScopes) {
-	if (grantedScopes.some((granted) => scopeSatisfies(granted, requiredScope))) return { allowed: true };
-	return {
-		allowed: false,
-		requiredScope
-	};
-}
-/**
-* Parse scopes from a comma-separated header value.
-*/
-function parseScopesHeader(headerValue) {
-	if (!headerValue?.trim()) return [...DEFAULT_OPERATOR_SCOPES];
-	return headerValue.split(",").map((scope) => scope.trim()).filter(isOperatorScope);
-}
-//#endregion
-export { ADMIN_SCOPE, DEFAULT_OPERATOR_SCOPES, KNOWN_OPERATOR_SCOPES, READ_SCOPE, WRITE_SCOPE, authorizeRouteScope, authorizeScope, isOperatorScope, parseScopesHeader };

package/dist/src/migrations/config/default-capability-preset.d.ts

@@ -1,10 +0,0 @@
-import { type CapabilityPreset } from '../../agent-manifest/schema.js';
-import { type Config } from '../../config/schema.js';
-import type { Migration } from '../types.js';
-export declare const DEFAULT_CAPABILITY_PRESET_MIGRATION_ID = "2026-07-ensure-default-capability-preset";
-export declare function createDefaultCapabilityPreset(): CapabilityPreset;
-export declare function ensureDefaultCapabilityPresetInitialized(config: Config): {
-    config: Config;
-    changed: boolean;
-};
-export declare const defaultCapabilityPresetMigration: Migration;