@xopcai/xopc 0.0.232 → 0.0.233

package/dist/src/cli/command-manifest.js

@@ -83,6 +83,10 @@ const ROOT_HELP_COMMANDS = [
 		name: "doctor [options]",
 		description: "Check xopc installation health and diagnose common issues"
 	},
+	{
+		name: "support",
+		description: "Create a redacted diagnostic report for an xopc problem"
+	},
 	{
 		name: "runtime",
 		description: "Manage Node.js and Python tool runtimes used by agents"

package/dist/src/cli/commands/auth.js

@@ -4,9 +4,9 @@ import { CredentialResolver, init_credentials } from "../../auth/credentials.js"
 import { getAllProviders, init_providers } from "../../providers/index.js";
 import { formatExamples, register } from "../registry.js";
 import { disconnectProvider } from "../../providers/provider-disconnect.js";
+import { colorizeStatus, colors } from "../utils/colors.js";
 import { listAllProfiles, listProfilesForProvider, removeAuthProfile, upsertAuthProfile } from "../../auth/profiles/profiles.js";
 import { getOAuthProvider, getSupportedOAuthProviders } from "../utils/oauth-providers.js";
-import { colorizeStatus, colors } from "../utils/colors.js";
 import { runCliOAuthLogin } from "../utils/oauth-login.js";
 import { Command } from "commander";
 //#region src/cli/commands/auth.ts

package/dist/src/cli/commands/doctor/checks/database-schema.js

@@ -52,7 +52,7 @@ async function checkDatabaseSchema(ctx) {
 		id: "database-schema",
 		label: "Database schema",
 		status: "pass",
-		message: `SQLite schema v${status.dbVersion} (current release v138).`,
+		message: `SQLite schema v${status.dbVersion} (current release v140).`,
 		hints: []
 	};
 }

package/dist/src/cli/commands/onboard/model.js

@@ -10,9 +10,9 @@ import { discoverProviderModels, isProviderApiDiscoverable } from "../../../prov
 import { getXopcCloudCatalogCoordinator } from "../../../providers/xopc-cloud-catalog-coordinator.js";
 import { getDomesticProviderBaseUrl, getDomesticProviderPreset, getDomesticProviderPresetIds, providerConfigFromDomesticPreset } from "../../../providers/domestic-presets.js";
 import { getProviderHint, getRecommendedModelsForProvider, sortModelsForPicker, sortProvidersForPicker } from "../../../providers/presentation.js";
+import { colors } from "../../utils/colors.js";
 import { listProfilesForProvider } from "../../../auth/profiles/profiles.js";
 import { getOAuthProvider } from "../../utils/oauth-providers.js";
-import { colors } from "../../utils/colors.js";
 import { runCliOAuthLogin } from "../../utils/oauth-login.js";
 import { confirm, input, select } from "@inquirer/prompts";
 //#region src/cli/commands/onboard/model.ts

package/dist/src/cli/commands/providers.js

@@ -1,8 +1,8 @@
 import { PROVIDER_ENV_MAP, getApiKeyFromEnv } from "../../providers/env-keys.js";
 import { PROVIDER_META, getAllProviders, getSortedProviders, init_providers } from "../../providers/index.js";
 import { formatExamples, register } from "../registry.js";
-import { getProfile, listAllProfiles, listProfilesForProvider, removeAuthProfile, upsertAuthProfile } from "../../auth/profiles/profiles.js";
 import { colors } from "../utils/colors.js";
+import { getProfile, listAllProfiles, listProfilesForProvider, removeAuthProfile, upsertAuthProfile } from "../../auth/profiles/profiles.js";
 import { SETUP_EXIT } from "./setup-shared/types.js";
 import { emitTask } from "./setup-shared/output.js";
 import { isPromptCancelled, promptSecret } from "./setup-shared/prompts.js";

package/dist/src/cli/commands/support.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/src/cli/commands/support.js

@@ -0,0 +1,51 @@
+import { init_paths_state, resolveStateDir } from "../../config/paths-state.js";
+import { formatExamples, register } from "../registry.js";
+import { collectSupportReport } from "../../support/collect-support-report.js";
+import { SupportReportInputSchema } from "../../support/types.js";
+import { resolve } from "node:path";
+import { writeFile } from "node:fs/promises";
+import { Command } from "commander";
+//#region src/cli/commands/support.ts
+init_paths_state();
+function defaultOutputPath(capturedAt) {
+	return resolve(`xopc-diagnostics-${capturedAt.replace(/[:.]/g, "-")}.json`);
+}
+async function runSupportReport(ctx, options) {
+	const report = await collectSupportReport(SupportReportInputSchema.parse({
+		problem: options.problem ?? "xopc startup or runtime problem",
+		occurredAt: (/* @__PURE__ */ new Date()).toISOString()
+	}), { paths: {
+		configPath: ctx.configPath,
+		stateDir: resolveStateDir(),
+		workspaceDir: ctx.workspacePath
+	} });
+	const outputPath = options.output ? resolve(options.output) : defaultOutputPath(report.capturedAt);
+	await writeFile(outputPath, `${JSON.stringify(report, null, 2)}\n`, {
+		encoding: "utf8",
+		flag: "wx",
+		mode: 384
+	});
+	console.log(report.markdown);
+	console.log(`\nDiagnostic file: ${outputPath}`);
+}
+function createSupportCommand(ctx) {
+	const command = new Command("support").description("Create a redacted diagnostic report for an xopc problem").addHelpText("after", formatExamples([
+		"xopc support report",
+		"xopc support report --problem \"Telegram receives messages but does not reply\"",
+		"xopc support report --output ./xopc-diagnostics.json"
+	]));
+	command.command("report").description("Collect Doctor results and nearby warning/error logs").option("-p, --problem <text>", "Short description of the problem").option("-o, --output <path>", "Diagnostic JSON output path (must not already exist)").action((options) => runSupportReport(ctx, options));
+	return command;
+}
+register({
+	id: "support",
+	name: "support",
+	description: "Create a redacted diagnostic report for an xopc problem",
+	factory: createSupportCommand,
+	metadata: {
+		category: "maintenance",
+		examples: ["xopc support report"]
+	}
+});
+//#endregion
+export {};

package/dist/src/endpoint-tools/binding-service.d.ts

@@ -0,0 +1,22 @@
+import type { EndpointConnectionSnapshot } from './registry.js';
+import { EndpointRegistry } from './registry.js';
+export interface EndpointSessionBinding {
+    sessionKey: string;
+    endpointId: string;
+    boundAt: number;
+}
+export interface EndpointSessionBindingStore {
+    get(sessionKey: string): EndpointSessionBinding | undefined;
+    set(binding: EndpointSessionBinding): EndpointSessionBinding;
+    delete(sessionKey: string): boolean;
+}
+export declare class EndpointBindingService {
+    private readonly registry;
+    private readonly store;
+    constructor(registry: EndpointRegistry, store?: EndpointSessionBindingStore);
+    bind(sessionKey: string, endpointId: string, now?: number): EndpointSessionBinding;
+    get(sessionKey: string): EndpointSessionBinding | undefined;
+    resolve(sessionKey: string): EndpointConnectionSnapshot | undefined;
+    unbind(sessionKey: string): boolean;
+    private normalizeSessionKey;
+}

package/dist/src/endpoint-tools/binding-service.js

@@ -0,0 +1,45 @@
+//#region src/endpoint-tools/binding-service.ts
+function memoryStore() {
+	const bindings = /* @__PURE__ */ new Map();
+	return {
+		get: (sessionKey) => bindings.get(sessionKey),
+		set: (binding) => {
+			bindings.set(binding.sessionKey, binding);
+			return binding;
+		},
+		delete: (sessionKey) => bindings.delete(sessionKey)
+	};
+}
+var EndpointBindingService = class {
+	constructor(registry, store = memoryStore()) {
+		this.registry = registry;
+		this.store = store;
+	}
+	bind(sessionKey, endpointId, now = Date.now()) {
+		const normalizedSessionKey = this.normalizeSessionKey(sessionKey);
+		if (!this.registry.get(endpointId)) throw new Error("Endpoint is offline");
+		const binding = {
+			sessionKey: normalizedSessionKey,
+			endpointId,
+			boundAt: now
+		};
+		return this.store.set(binding);
+	}
+	get(sessionKey) {
+		return this.store.get(this.normalizeSessionKey(sessionKey));
+	}
+	resolve(sessionKey) {
+		const binding = this.get(sessionKey);
+		return binding ? this.registry.get(binding.endpointId) : void 0;
+	}
+	unbind(sessionKey) {
+		return this.store.delete(this.normalizeSessionKey(sessionKey));
+	}
+	normalizeSessionKey(sessionKey) {
+		const normalized = sessionKey.trim();
+		if (!normalized || normalized.length > 500) throw new TypeError("Invalid session key");
+		return normalized;
+	}
+};
+//#endregion
+export { EndpointBindingService };

package/dist/src/endpoint-tools/index.d.ts

@@ -1,4 +1,5 @@
 export { EndpointToolRuntime } from './runtime.js';
+export { EndpointBindingService, type EndpointSessionBinding, type EndpointSessionBindingStore, } from './binding-service.js';
 export { EndpointInvocationService, EndpointToolExecutionError, type EndpointInvocationAuditSink, type EndpointInvocationResult, } from './invocation-service.js';
 export { EndpointToolPolicy, EndpointToolPolicyError } from './policy.js';
 export { EndpointRegistry, endpointToolRevision, type EndpointConnectionSnapshot, type RegisteredEndpointTool, } from './registry.js';

package/dist/src/endpoint-tools/index.js

@@ -1,6 +1,7 @@
+import { EndpointBindingService } from "./binding-service.js";
 import { EndpointToolPolicy, EndpointToolPolicyError } from "./policy.js";
 import { EndpointInvocationService, EndpointToolExecutionError } from "./invocation-service.js";
 import { EndpointRegistry, endpointToolRevision } from "./registry.js";
 import { ENDPOINT_UPLOAD_MAX_BYTES, EndpointUploadError, EndpointUploadService } from "./upload-service.js";
 import { EndpointToolRuntime } from "./runtime.js";
-export { ENDPOINT_UPLOAD_MAX_BYTES, EndpointInvocationService, EndpointRegistry, EndpointToolExecutionError, EndpointToolPolicy, EndpointToolPolicyError, EndpointToolRuntime, EndpointUploadError, EndpointUploadService, endpointToolRevision };
+export { ENDPOINT_UPLOAD_MAX_BYTES, EndpointBindingService, EndpointInvocationService, EndpointRegistry, EndpointToolExecutionError, EndpointToolPolicy, EndpointToolPolicyError, EndpointToolRuntime, EndpointUploadError, EndpointUploadService, endpointToolRevision };

package/dist/src/endpoint-tools/invocation-service.d.ts

@@ -43,6 +43,7 @@ export declare class EndpointInvocationService {
     private readonly options;
     private readonly pending;
     private readonly policy;
+    private readonly ajv;
     constructor(registry: EndpointRegistry, options?: EndpointInvocationServiceOptions);
     invoke(params: {
         endpointId: string;

package/dist/src/endpoint-tools/invocation-service.js

@@ -1,6 +1,7 @@
 import { ENDPOINT_INVOCATION_RECEIPT_TIMEOUT_MS, canonicalJson } from "../../packages/endpoint-tools-protocol/src/index.js";
 import { EndpointToolPolicy, EndpointToolPolicyError } from "./policy.js";
 import crypto from "node:crypto";
+import Ajv2020 from "ajv/dist/2020.js";
 //#region src/endpoint-tools/invocation-service.ts
 var EndpointToolExecutionError = class extends Error {
 	constructor(code, message) {
@@ -12,6 +13,10 @@ var EndpointToolExecutionError = class extends Error {
 var EndpointInvocationService = class {
 	pending = /* @__PURE__ */ new Map();
 	policy;
+	ajv = new Ajv2020({
+		allErrors: true,
+		strict: true
+	});
 	constructor(registry, options = {}) {
 		this.registry = registry;
 		this.options = options;
@@ -58,6 +63,7 @@ var EndpointInvocationService = class {
 				id: invocationId,
 				endpointId: params.endpointId,
 				toolName: params.toolName,
+				descriptor: tool.descriptor,
 				state: "sent",
 				receiptTimer: setTimeout(() => {
 					this.fail(invocationId, this.error("TOOL_TIMEOUT", "Endpoint did not receive the invocation"));
@@ -111,6 +117,8 @@ var EndpointInvocationService = class {
 			case "tool.result":
 				if (pending.state !== "running") return;
 				try {
+					const validate = this.ajv.compile(pending.descriptor.outputSchema);
+					if (!validate(message.payload.content)) throw new Error(`Endpoint result does not match its contract: ${this.ajv.errorsText(validate.errors)}`);
 					this.options.uploads?.validateAndClose(invocationId, message.payload.content);
 				} catch (error) {
 					this.fail(invocationId, this.error("PROTOCOL_ERROR", error instanceof Error ? error.message : String(error)));

package/dist/src/endpoint-tools/policy.d.ts

@@ -1,10 +1,13 @@
-import type { EndpointAvailability, EndpointKind, EndpointToolDescriptor } from '@xopcai/endpoint-tools-protocol';
+import { type EndpointAvailability, type EndpointKind, type EndpointToolDescriptor } from '@xopcai/endpoint-tools-protocol';
 export interface EndpointToolPolicyDecision {
     confirmationRequired: boolean;
 }
 export declare class EndpointToolPolicyError extends Error {
 }
 export declare class EndpointToolPolicy {
+    private readonly ajv;
     validateDescriptor(kind: EndpointKind, descriptor: EndpointToolDescriptor): void;
     evaluate(descriptor: EndpointToolDescriptor, availability: EndpointAvailability): EndpointToolPolicyDecision;
+    private validatePolicyFields;
+    private assertFields;
 }

package/dist/src/endpoint-tools/policy.js

@@ -1,17 +1,80 @@
+import { ENDPOINT_CONTACT_LIST_OUTPUT_SCHEMA, ENDPOINT_CONTACT_OUTPUT_SCHEMA, ENDPOINT_FILE_OUTPUT_SCHEMA, ENDPOINT_TEXT_OUTPUT_SCHEMA, canonicalJson } from "../../packages/endpoint-tools-protocol/src/index.js";
+import Ajv2020 from "ajv/dist/2020.js";
 //#region src/endpoint-tools/policy.ts
 var EndpointToolPolicyError = class extends Error {};
+function contract(policyId, outputSchema, resultKinds, permissions) {
+	return {
+		policyId,
+		outputSchema,
+		resultKinds,
+		permissions
+	};
+}
+const POLICY_BY_TOOL = {
+	"web.file.pick": contract("personal.foreground-read", ENDPOINT_FILE_OUTPUT_SCHEMA, ["file"], ["file-read"]),
+	"web.file.download": contract("user.foreground-write", ENDPOINT_TEXT_OUTPUT_SCHEMA, ["text"], ["file-download"]),
+	"web.page.get_selection": contract("public.foreground-read", ENDPOINT_TEXT_OUTPUT_SCHEMA, ["text"], []),
+	"web.clipboard.write": contract("user.foreground-write", ENDPOINT_TEXT_OUTPUT_SCHEMA, ["text"], ["clipboard-write"]),
+	"web.page.navigate": contract("user.foreground-write", ENDPOINT_TEXT_OUTPUT_SCHEMA, ["text"], ["navigation"]),
+	"desktop.file.pick": contract("personal.foreground-read", ENDPOINT_FILE_OUTPUT_SCHEMA, ["file"], ["file-read"]),
+	"desktop.file.save": contract("user.foreground-write", ENDPOINT_TEXT_OUTPUT_SCHEMA, ["text"], ["file-write"]),
+	"desktop.notification.show": contract("user.foreground-write", ENDPOINT_TEXT_OUTPUT_SCHEMA, ["text"], ["notifications"]),
+	"desktop.clipboard.read": contract("personal.foreground-read", ENDPOINT_TEXT_OUTPUT_SCHEMA, ["text"], ["clipboard-read"]),
+	"desktop.clipboard.write": contract("user.foreground-write", ENDPOINT_TEXT_OUTPUT_SCHEMA, ["text"], ["clipboard-write"]),
+	"desktop.app.open_external": contract("user.foreground-write", ENDPOINT_TEXT_OUTPUT_SCHEMA, ["text"], ["open-external-url"]),
+	"mobile.contacts.pick": contract("personal.foreground-read", ENDPOINT_CONTACT_OUTPUT_SCHEMA, ["json"], ["contacts-read-selected"]),
+	"mobile.contacts.search": contract("personal.foreground-read", ENDPOINT_CONTACT_LIST_OUTPUT_SCHEMA, ["json"], ["contacts-read"]),
+	"mobile.contacts.get": contract("personal.foreground-read", ENDPOINT_CONTACT_OUTPUT_SCHEMA, ["json"], ["contacts-read"]),
+	"mobile.file.pick": contract("personal.foreground-read", ENDPOINT_FILE_OUTPUT_SCHEMA, ["file"], ["file-read"]),
+	"mobile.file.share": contract("user.foreground-write", ENDPOINT_TEXT_OUTPUT_SCHEMA, ["text"], ["file-share"]),
+	"mobile.notification.show": contract("user.foreground-write", ENDPOINT_TEXT_OUTPUT_SCHEMA, ["text"], ["notifications"]),
+	"mobile.device.get_info": contract("public.background-read", ENDPOINT_TEXT_OUTPUT_SCHEMA, ["text"], []),
+	"mobile.clipboard.write": contract("user.foreground-write", ENDPOINT_TEXT_OUTPUT_SCHEMA, ["text"], ["clipboard-write"]),
+	"mobile.app.open_url": contract("user.foreground-write", ENDPOINT_TEXT_OUTPUT_SCHEMA, ["text"], ["open-external-url"])
+};
 var EndpointToolPolicy = class {
+	ajv = new Ajv2020({
+		allErrors: true,
+		strict: true
+	});
 	validateDescriptor(kind, descriptor) {
 		if (!descriptor.name.startsWith(`${kind}.`)) throw new EndpointToolPolicyError(`Tool ${descriptor.name} does not belong to ${kind}`);
-		if (descriptor.effect !== "read") {
-			if (descriptor.confirmation !== "always") throw new EndpointToolPolicyError(`Mutating tool ${descriptor.name} must always require confirmation`);
-			if (!descriptor.requiresForeground) throw new EndpointToolPolicyError(`Mutating tool ${descriptor.name} must require foreground`);
-			if (descriptor.requiredPermissions.length === 0) throw new EndpointToolPolicyError(`Mutating tool ${descriptor.name} must declare a permission`);
+		const contract = POLICY_BY_TOOL[descriptor.name];
+		if (!contract) throw new EndpointToolPolicyError(`Tool ${descriptor.name} has no trusted server policy`);
+		if (descriptor.policyId !== contract.policyId) throw new EndpointToolPolicyError(`Tool ${descriptor.name} does not match its trusted server policy`);
+		if (canonicalJson(descriptor.outputSchema) !== canonicalJson(contract.outputSchema) || canonicalJson(descriptor.resultKinds) !== canonicalJson(contract.resultKinds) || canonicalJson([...descriptor.requiredPermissions].sort()) !== canonicalJson([...contract.permissions].sort())) throw new EndpointToolPolicyError(`Tool ${descriptor.name} does not match its trusted server contract`);
+		this.validatePolicyFields(descriptor);
+		try {
+			this.ajv.compile(descriptor.outputSchema);
+		} catch (error) {
+			throw new EndpointToolPolicyError(`Tool ${descriptor.name} has an invalid output schema: ${error instanceof Error ? error.message : String(error)}`);
 		}
 	}
 	evaluate(descriptor, availability) {
 		if (descriptor.requiresForeground && availability !== "foreground") throw new EndpointToolPolicyError("Endpoint is not in the foreground");
-		return { confirmationRequired: descriptor.confirmation === "always" || descriptor.effect !== "read" };
+		return { confirmationRequired: descriptor.confirmation === "always" };
+	}
+	validatePolicyFields(descriptor) {
+		switch (descriptor.policyId) {
+			case "public.background-read":
+				this.assertFields(descriptor, "read", "never", false, "public");
+				return;
+			case "public.foreground-read":
+				this.assertFields(descriptor, "read", "never", true, "public");
+				return;
+			case "personal.foreground-read":
+				this.assertFields(descriptor, "read", "always", true, "personal");
+				if (descriptor.requiredPermissions.length === 0) throw new EndpointToolPolicyError(`Personal tool ${descriptor.name} must declare a permission`);
+				return;
+			case "user.foreground-write":
+				if (descriptor.effect === "read") throw new EndpointToolPolicyError(`Mutating tool ${descriptor.name} cannot declare a read effect`);
+				if (descriptor.confirmation !== "always" || !descriptor.requiresForeground || descriptor.sensitivity !== "personal" || descriptor.requiredPermissions.length === 0) throw new EndpointToolPolicyError(`Mutating tool ${descriptor.name} violates its trusted policy`);
+				return;
+			default: throw new EndpointToolPolicyError(`Unknown endpoint policy: ${descriptor.policyId}`);
+		}
+	}
+	assertFields(descriptor, effect, confirmation, requiresForeground, sensitivity) {
+		if (descriptor.effect !== effect || descriptor.confirmation !== confirmation || descriptor.requiresForeground !== requiresForeground || descriptor.sensitivity !== sensitivity) throw new EndpointToolPolicyError(`Tool ${descriptor.name} violates its trusted policy`);
 	}
 };
 //#endregion

package/dist/src/endpoint-tools/registry.js

@@ -93,7 +93,7 @@ var EndpointRegistry = class {
 		const connection = this.connectionByEndpointId.get(endpointId);
 		if (!connection || connection.transport.readyState !== 1) throw new Error(`Endpoint is offline: ${endpointId}`);
 		const message = {
-			protocolVersion: 1,
+			protocolVersion: 2,
 			messageId: crypto.randomUUID(),
 			type,
 			sentAt: Date.now(),

package/dist/src/endpoint-tools/runtime.d.ts

@@ -1,5 +1,6 @@
 import { type ClientEndpointMessage, type EndpointHelloPayload } from '@xopcai/endpoint-tools-protocol';
 import { type EndpointAuthenticatorDeps } from './auth.js';
+import { EndpointBindingService } from './binding-service.js';
 import { EndpointInvocationService, type EndpointInvocationAuditSink } from './invocation-service.js';
 import { EndpointRegistry, type EndpointRegistration, type EndpointTransport } from './registry.js';
 import { EndpointUploadService } from './upload-service.js';
@@ -7,6 +8,7 @@ export declare class EndpointToolRuntime {
     readonly registry: EndpointRegistry;
     readonly invocations: EndpointInvocationService;
     readonly uploads: EndpointUploadService;
+    readonly bindings: EndpointBindingService;
     private readonly authenticator;
     private closed;
     constructor(options?: {

package/dist/src/endpoint-tools/runtime.js

@@ -1,11 +1,13 @@
 import { resolveStateDir } from "../config/paths-state.js";
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
+import { deleteEndpointSessionBinding, getEndpointSessionBinding, setEndpointSessionBinding } from "../storage/sqlite/endpoint-session-binding-repository.js";
 import { bindEndpointPrincipal, getEndpointPrincipal, touchEndpointPrincipal } from "../storage/sqlite/endpoint-principal-repository.js";
 import { finishEndpointToolInvocationAudit, startEndpointToolInvocationAudit } from "../storage/sqlite/endpoint-tool-invocation-repository.js";
 import "../storage/sqlite/index.js";
 import { init_paths } from "../config/paths.js";
 import { EndpointAuthenticator } from "./auth.js";
+import { EndpointBindingService } from "./binding-service.js";
 import { EndpointToolPolicy } from "./policy.js";
 import { EndpointInvocationService } from "./invocation-service.js";
 import { EndpointRegistry } from "./registry.js";
@@ -20,11 +22,17 @@ var EndpointToolRuntime = class {
 	registry;
 	invocations;
 	uploads;
+	bindings;
 	authenticator;
 	closed = false;
 	constructor(options = {}) {
 		const policy = new EndpointToolPolicy();
 		this.registry = new EndpointRegistry(policy);
+		this.bindings = new EndpointBindingService(this.registry, {
+			get: getEndpointSessionBinding,
+			set: setEndpointSessionBinding,
+			delete: deleteEndpointSessionBinding
+		});
 		this.authenticator = new EndpointAuthenticator(options.auth ?? {
 			getPrincipal: getEndpointPrincipal,
 			bindEndpoint: bindEndpointPrincipal,

package/dist/src/files/file-service.js

@@ -26,6 +26,7 @@ const TEXT_EXTENSIONS = new Set([
 	"svg",
 	"ts",
 	"tsx",
+	"tsv",
 	"txt",
 	"xml",
 	"yaml",
@@ -50,10 +51,18 @@ const MIME_TYPES = {
 	ts: "text/typescript",
 	tsx: "text/typescript",
 	csv: "text/csv",
+	tsv: "text/tab-separated-values",
 	xml: "application/xml",
 	yaml: "application/yaml",
 	yml: "application/yaml",
 	pdf: "application/pdf",
+	doc: "application/msword",
+	docx: "application/vnd.openxmlformats-officedocument.wordprocessingml.document",
+	xls: "application/vnd.ms-excel",
+	xlsx: "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet",
+	ppt: "application/vnd.ms-powerpoint",
+	pptx: "application/vnd.openxmlformats-officedocument.presentationml.presentation",
+	zip: "application/zip",
 	mp3: "audio/mpeg",
 	wav: "audio/wav",
 	ogg: "audio/ogg",
@@ -106,13 +115,13 @@ async function resolveFilePath(root, path, mustExist = true) {
 	const canonicalRoot = await realpath(root).catch(() => {
 		throw new FileServiceError(404, "File space is unavailable");
 	});
-	const candidate = resolve(canonicalRoot, normalizeRelativePath(path));
-	if (!isWithin(canonicalRoot, candidate)) throw new FileServiceError(400, "Invalid file path");
+	const candidate = isAbsolute(path) ? resolve(path) : resolve(canonicalRoot, normalizeRelativePath(path));
 	if (!mustExist) {
-		if (!isWithin(canonicalRoot, await realpath(dirname(candidate)).catch(() => {
+		const parent = await realpath(dirname(candidate)).catch(() => {
 			throw new FileServiceError(404, "Parent directory not found");
-		}))) throw new FileServiceError(400, "Invalid file path");
-		return candidate;
+		});
+		if (!isWithin(canonicalRoot, parent)) throw new FileServiceError(400, "Invalid file path");
+		return resolve(parent, basename(candidate));
 	}
 	const canonicalTarget = await realpath(candidate).catch(() => {
 		throw new FileServiceError(404, "File not found");

package/dist/src/gateway/chat-stream/turn-outcome-collector.js

@@ -1,4 +1,6 @@
-import { TurnOutcomeDeliverableSchema } from "../../../packages/gateway-contract/src/turn-outcome.js";
+import { TurnOutcomeDeliverableSchema, fileResourceArtifactUri, turnOutcomeKindFromFileName, turnOutcomeMimeTypeFromFileName } from "../../../packages/gateway-contract/src/turn-outcome.js";
+import { parseProductDeliveryEnvelope } from "../../../packages/gateway-contract/src/product-delivery.js";
+import { parseFileResourceId } from "../../files/file-service.js";
 //#region src/gateway/chat-stream/turn-outcome-collector.ts
 const VERIFICATION_COMMAND = /(^|[\s:/_-])(test|vitest|jest|pytest|lint|typecheck|type-check|build)([\s:/_-]|$)/i;
 const MAX_OUTCOME_DIFF_CHARS = 2e5;
@@ -27,13 +29,46 @@ function changedFiles(changes) {
 		}];
 	});
 }
-function structuredDeliverables(details) {
+function explicitArtifacts(details) {
 	if (!Array.isArray(details.artifacts)) return [];
 	return details.artifacts.flatMap((value) => {
 		const parsed = TurnOutcomeDeliverableSchema.safeParse(value);
 		return parsed.success ? [parsed.data] : [];
 	});
 }
+function fileReferenceDeliverable(reference, operation, environment) {
+	if (reference.kind !== "file") return null;
+	let workspaceRelativePath;
+	try {
+		workspaceRelativePath = parseFileResourceId(reference.id).relativePath;
+	} catch {}
+	const mimeType = turnOutcomeMimeTypeFromFileName(reference.title);
+	const available = operation !== "failed";
+	const capabilities = available ? [
+		...reference.capabilities.includes("preview") ? ["preview"] : [],
+		"download",
+		...reference.capabilities.includes("share") ? ["share"] : []
+	] : ["regenerate"];
+	return {
+		artifactId: reference.id,
+		title: reference.title,
+		kind: turnOutcomeKindFromFileName(reference.title),
+		...mimeType ? { mimeType } : {},
+		availability: available ? "available" : "failed",
+		location: environment,
+		capabilities,
+		...available && environment === "workspace" ? { uri: fileResourceArtifactUri(reference.id) } : {},
+		...workspaceRelativePath ? { workspaceRelativePath } : {}
+	};
+}
+function productDeliveryArtifacts(delivery, environment) {
+	if (!delivery) return [];
+	return [delivery.primary, ...delivery.related ?? []].flatMap((reference) => {
+		if (!reference) return [];
+		const artifact = fileReferenceDeliverable(reference, delivery.operation, environment);
+		return artifact ? [artifact] : [];
+	});
+}
 var TurnOutcomeCollector = class {
 	deliverables = /* @__PURE__ */ new Map();
 	evidence = /* @__PURE__ */ new Map();
@@ -52,9 +87,9 @@ var TurnOutcomeCollector = class {
 				this.failedToolCount += 1;
 				return;
 			}
-			const details = asRecord(event.payload.result?.details);
-			if (!details) return;
-			for (const artifact of structuredDeliverables(details)) this.deliverables.set(artifact.artifactId, artifact);
+			const details = asRecord(event.payload.result?.details) ?? {};
+			const artifacts = [...explicitArtifacts(details), ...productDeliveryArtifacts(parseProductDeliveryEnvelope(details.delivery), this.environment)];
+			for (const artifact of artifacts) this.deliverables.set(artifact.artifactId, artifact);
 			return;
 		}
 		if (event.type === "patch_applied") {
@@ -82,7 +117,7 @@ var TurnOutcomeCollector = class {
 	}
 	finalize(status, summary) {
 		const evidence = [...this.evidence.values()];
-		const partial = this.failedToolCount > 0 || evidence.some((item) => item.status === "failed");
+		const partial = this.failedToolCount > 0 || evidence.some((item) => item.status === "failed") || [...this.deliverables.values()].some((item) => item.availability === "failed");
 		const fullDiff = this.diffs.join("\n");
 		const diffTruncated = fullDiff.length > MAX_OUTCOME_DIFF_CHARS;
 		return {

package/dist/src/gateway/heartbeat/service.js

@@ -1,9 +1,9 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
 import { shouldSilence, stripHeartbeatToken } from "../../heartbeat/tokens.js";
-import { appendCronEventLines } from "../../heartbeat/event-prompt.js";
 import { isWithinActiveHours } from "../../heartbeat/active-hours.js";
 import { isHeartbeatContentEmpty } from "../../heartbeat/content-check.js";
+import { appendCronEventLines } from "../../heartbeat/event-prompt.js";
 import { createHeartbeatWake } from "../../heartbeat/wake.js";
 import { resolveHeartbeatMdPath } from "../workspace-heartbeat-path.js";
 import { readFile } from "fs/promises";

package/dist/src/gateway/hono/middleware/auth.js

@@ -31,7 +31,7 @@ function extractTokenFromHeader(authHeader) {
 }
 /**
 * SECURITY: query-string tokens leak into server logs, Referer headers, and
-* browser history. We accept them only for agent avatar `<img>` loads, where an
+* browser history. We accept them only for avatar `<img>` loads, where an
 * Authorization header cannot be set. Realtime WebSocket authentication uses a
 * one-time ticket acquired over authenticated HTTP.
 */
@@ -39,9 +39,10 @@ function extractTokenFromQuery(url) {
 	return new URL(url).searchParams.get("token");
 }
 const AGENT_AVATAR_GET_PATH = /^\/api\/agents\/[^/]+\/avatar$/;
+const USER_AVATAR_GET_PATH = "/api/you/avatar";
 /** Exported for gateway security tests. */
 function isQueryTokenAllowedPath(path, method) {
-	if (method === "GET" && AGENT_AVATAR_GET_PATH.test(path)) return true;
+	if (method === "GET" && (AGENT_AVATAR_GET_PATH.test(path) || path === USER_AVATAR_GET_PATH)) return true;
 	return false;
 }
 function resolveRemoteAddress(c) {

package/dist/src/gateway/hono/routes/endpoint-tools.js

@@ -1,4 +1,4 @@
-import { endpointPrincipalRegistrationSchema } from "../../../../packages/endpoint-tools-protocol/src/index.js";
+import { endpointPrincipalRegistrationSchema, endpointSessionBindingRequestSchema } from "../../../../packages/endpoint-tools-protocol/src/index.js";
 import { createEndpointPrincipal, getEndpointPrincipal, listEndpointPrincipals, revokeEndpointPrincipal } from "../../../storage/sqlite/endpoint-principal-repository.js";
 import { listEndpointToolInvocationAudits } from "../../../storage/sqlite/endpoint-tool-invocation-repository.js";
 import "../../../storage/sqlite/index.js";
@@ -130,6 +130,73 @@ function registerEndpointToolRoutes(authenticated, deps) {
 			payload: listEndpointToolInvocationAudits(Number.isFinite(limit) ? limit : 100)
 		});
 	});
+	authenticated.get("/api/endpoint-tools/bindings/:sessionKey", (c) => {
+		try {
+			const binding = deps.service.endpointTools.bindings.get(c.req.param("sessionKey"));
+			return binding ? c.json({
+				ok: true,
+				payload: binding
+			}) : c.json({
+				ok: false,
+				error: {
+					code: "NOT_FOUND",
+					message: "Endpoint binding not found"
+				}
+			}, 404);
+		} catch {
+			return c.json({
+				ok: false,
+				error: {
+					code: "BAD_REQUEST",
+					message: "Invalid session key"
+				}
+			}, 400);
+		}
+	});
+	authenticated.put("/api/endpoint-tools/bindings/:sessionKey", async (c) => {
+		const parsed = endpointSessionBindingRequestSchema.safeParse(await c.req.json().catch(() => null));
+		if (!parsed.success) return c.json({
+			ok: false,
+			error: {
+				code: "BAD_REQUEST",
+				message: "Invalid endpoint binding"
+			}
+		}, 400);
+		try {
+			const binding = deps.service.endpointTools.bindings.bind(c.req.param("sessionKey"), parsed.data.endpointId);
+			return c.json({
+				ok: true,
+				payload: binding
+			});
+		} catch (error) {
+			const message = error instanceof Error ? error.message : String(error);
+			const status = message === "Endpoint is offline" ? 409 : 400;
+			return c.json({
+				ok: false,
+				error: {
+					code: "BINDING_FAILED",
+					message
+				}
+			}, status);
+		}
+	});
+	authenticated.delete("/api/endpoint-tools/bindings/:sessionKey", (c) => {
+		try {
+			const removed = deps.service.endpointTools.bindings.unbind(c.req.param("sessionKey"));
+			return c.json({
+				ok: true,
+				payload: { removed }
+			});
+		} catch {
+			return c.json({
+				ok: false,
+				error: {
+					code: "BAD_REQUEST",
+					message: "Invalid session key"
+				}
+			}, 400);
+		}
+	});
 	authenticated.post("/api/endpoint-tools/invocations/:invocationId/files", async (c) => {
 		const invocationId = c.req.param("invocationId");
 		const endpointId = c.req.header("x-endpoint-id") ?? "";