@xopcai/xopc 0.0.232 → 0.0.234

package/dist/src/endpoint-tools/binding-service.js

@@ -0,0 +1,45 @@
+//#region src/endpoint-tools/binding-service.ts
+function memoryStore() {
+	const bindings = /* @__PURE__ */ new Map();
+	return {
+		get: (sessionKey) => bindings.get(sessionKey),
+		set: (binding) => {
+			bindings.set(binding.sessionKey, binding);
+			return binding;
+		},
+		delete: (sessionKey) => bindings.delete(sessionKey)
+	};
+}
+var EndpointBindingService = class {
+	constructor(registry, store = memoryStore()) {
+		this.registry = registry;
+		this.store = store;
+	}
+	bind(sessionKey, endpointId, now = Date.now()) {
+		const normalizedSessionKey = this.normalizeSessionKey(sessionKey);
+		if (!this.registry.get(endpointId)) throw new Error("Endpoint is offline");
+		const binding = {
+			sessionKey: normalizedSessionKey,
+			endpointId,
+			boundAt: now
+		};
+		return this.store.set(binding);
+	}
+	get(sessionKey) {
+		return this.store.get(this.normalizeSessionKey(sessionKey));
+	}
+	resolve(sessionKey) {
+		const binding = this.get(sessionKey);
+		return binding ? this.registry.get(binding.endpointId) : void 0;
+	}
+	unbind(sessionKey) {
+		return this.store.delete(this.normalizeSessionKey(sessionKey));
+	}
+	normalizeSessionKey(sessionKey) {
+		const normalized = sessionKey.trim();
+		if (!normalized || normalized.length > 500) throw new TypeError("Invalid session key");
+		return normalized;
+	}
+};
+//#endregion
+export { EndpointBindingService };

package/dist/src/endpoint-tools/index.d.ts

@@ -1,4 +1,5 @@
 export { EndpointToolRuntime } from './runtime.js';
+export { EndpointBindingService, type EndpointSessionBinding, type EndpointSessionBindingStore, } from './binding-service.js';
 export { EndpointInvocationService, EndpointToolExecutionError, type EndpointInvocationAuditSink, type EndpointInvocationResult, } from './invocation-service.js';
 export { EndpointToolPolicy, EndpointToolPolicyError } from './policy.js';
 export { EndpointRegistry, endpointToolRevision, type EndpointConnectionSnapshot, type RegisteredEndpointTool, } from './registry.js';

package/dist/src/endpoint-tools/index.js

@@ -1,6 +1,7 @@
+import { EndpointBindingService } from "./binding-service.js";
 import { EndpointToolPolicy, EndpointToolPolicyError } from "./policy.js";
 import { EndpointInvocationService, EndpointToolExecutionError } from "./invocation-service.js";
 import { EndpointRegistry, endpointToolRevision } from "./registry.js";
 import { ENDPOINT_UPLOAD_MAX_BYTES, EndpointUploadError, EndpointUploadService } from "./upload-service.js";
 import { EndpointToolRuntime } from "./runtime.js";
-export { ENDPOINT_UPLOAD_MAX_BYTES, EndpointInvocationService, EndpointRegistry, EndpointToolExecutionError, EndpointToolPolicy, EndpointToolPolicyError, EndpointToolRuntime, EndpointUploadError, EndpointUploadService, endpointToolRevision };
+export { ENDPOINT_UPLOAD_MAX_BYTES, EndpointBindingService, EndpointInvocationService, EndpointRegistry, EndpointToolExecutionError, EndpointToolPolicy, EndpointToolPolicyError, EndpointToolRuntime, EndpointUploadError, EndpointUploadService, endpointToolRevision };

package/dist/src/endpoint-tools/invocation-service.d.ts

@@ -43,6 +43,7 @@ export declare class EndpointInvocationService {
     private readonly options;
     private readonly pending;
     private readonly policy;
+    private readonly ajv;
     constructor(registry: EndpointRegistry, options?: EndpointInvocationServiceOptions);
     invoke(params: {
         endpointId: string;

package/dist/src/endpoint-tools/invocation-service.js

@@ -1,6 +1,7 @@
 import { ENDPOINT_INVOCATION_RECEIPT_TIMEOUT_MS, canonicalJson } from "../../packages/endpoint-tools-protocol/src/index.js";
 import { EndpointToolPolicy, EndpointToolPolicyError } from "./policy.js";
 import crypto from "node:crypto";
+import Ajv2020 from "ajv/dist/2020.js";
 //#region src/endpoint-tools/invocation-service.ts
 var EndpointToolExecutionError = class extends Error {
 	constructor(code, message) {
@@ -12,6 +13,10 @@ var EndpointToolExecutionError = class extends Error {
 var EndpointInvocationService = class {
 	pending = /* @__PURE__ */ new Map();
 	policy;
+	ajv = new Ajv2020({
+		allErrors: true,
+		strict: true
+	});
 	constructor(registry, options = {}) {
 		this.registry = registry;
 		this.options = options;
@@ -58,6 +63,7 @@ var EndpointInvocationService = class {
 				id: invocationId,
 				endpointId: params.endpointId,
 				toolName: params.toolName,
+				descriptor: tool.descriptor,
 				state: "sent",
 				receiptTimer: setTimeout(() => {
 					this.fail(invocationId, this.error("TOOL_TIMEOUT", "Endpoint did not receive the invocation"));
@@ -111,6 +117,8 @@ var EndpointInvocationService = class {
 			case "tool.result":
 				if (pending.state !== "running") return;
 				try {
+					const validate = this.ajv.compile(pending.descriptor.outputSchema);
+					if (!validate(message.payload.content)) throw new Error(`Endpoint result does not match its contract: ${this.ajv.errorsText(validate.errors)}`);
 					this.options.uploads?.validateAndClose(invocationId, message.payload.content);
 				} catch (error) {
 					this.fail(invocationId, this.error("PROTOCOL_ERROR", error instanceof Error ? error.message : String(error)));

package/dist/src/endpoint-tools/policy.d.ts

@@ -1,10 +1,13 @@
-import type { EndpointAvailability, EndpointKind, EndpointToolDescriptor } from '@xopcai/endpoint-tools-protocol';
+import { type EndpointAvailability, type EndpointKind, type EndpointToolDescriptor } from '@xopcai/endpoint-tools-protocol';
 export interface EndpointToolPolicyDecision {
     confirmationRequired: boolean;
 }
 export declare class EndpointToolPolicyError extends Error {
 }
 export declare class EndpointToolPolicy {
+    private readonly ajv;
     validateDescriptor(kind: EndpointKind, descriptor: EndpointToolDescriptor): void;
     evaluate(descriptor: EndpointToolDescriptor, availability: EndpointAvailability): EndpointToolPolicyDecision;
+    private validatePolicyFields;
+    private assertFields;
 }

package/dist/src/endpoint-tools/policy.js

@@ -1,17 +1,80 @@
+import { ENDPOINT_CONTACT_LIST_OUTPUT_SCHEMA, ENDPOINT_CONTACT_OUTPUT_SCHEMA, ENDPOINT_FILE_OUTPUT_SCHEMA, ENDPOINT_TEXT_OUTPUT_SCHEMA, canonicalJson } from "../../packages/endpoint-tools-protocol/src/index.js";
+import Ajv2020 from "ajv/dist/2020.js";
 //#region src/endpoint-tools/policy.ts
 var EndpointToolPolicyError = class extends Error {};
+function contract(policyId, outputSchema, resultKinds, permissions) {
+	return {
+		policyId,
+		outputSchema,
+		resultKinds,
+		permissions
+	};
+}
+const POLICY_BY_TOOL = {
+	"web.file.pick": contract("personal.foreground-read", ENDPOINT_FILE_OUTPUT_SCHEMA, ["file"], ["file-read"]),
+	"web.file.download": contract("user.foreground-write", ENDPOINT_TEXT_OUTPUT_SCHEMA, ["text"], ["file-download"]),
+	"web.page.get_selection": contract("public.foreground-read", ENDPOINT_TEXT_OUTPUT_SCHEMA, ["text"], []),
+	"web.clipboard.write": contract("user.foreground-write", ENDPOINT_TEXT_OUTPUT_SCHEMA, ["text"], ["clipboard-write"]),
+	"web.page.navigate": contract("user.foreground-write", ENDPOINT_TEXT_OUTPUT_SCHEMA, ["text"], ["navigation"]),
+	"desktop.file.pick": contract("personal.foreground-read", ENDPOINT_FILE_OUTPUT_SCHEMA, ["file"], ["file-read"]),
+	"desktop.file.save": contract("user.foreground-write", ENDPOINT_TEXT_OUTPUT_SCHEMA, ["text"], ["file-write"]),
+	"desktop.notification.show": contract("user.foreground-write", ENDPOINT_TEXT_OUTPUT_SCHEMA, ["text"], ["notifications"]),
+	"desktop.clipboard.read": contract("personal.foreground-read", ENDPOINT_TEXT_OUTPUT_SCHEMA, ["text"], ["clipboard-read"]),
+	"desktop.clipboard.write": contract("user.foreground-write", ENDPOINT_TEXT_OUTPUT_SCHEMA, ["text"], ["clipboard-write"]),
+	"desktop.app.open_external": contract("user.foreground-write", ENDPOINT_TEXT_OUTPUT_SCHEMA, ["text"], ["open-external-url"]),
+	"mobile.contacts.pick": contract("personal.foreground-read", ENDPOINT_CONTACT_OUTPUT_SCHEMA, ["json"], ["contacts-read-selected"]),
+	"mobile.contacts.search": contract("personal.foreground-read", ENDPOINT_CONTACT_LIST_OUTPUT_SCHEMA, ["json"], ["contacts-read"]),
+	"mobile.contacts.get": contract("personal.foreground-read", ENDPOINT_CONTACT_OUTPUT_SCHEMA, ["json"], ["contacts-read"]),
+	"mobile.file.pick": contract("personal.foreground-read", ENDPOINT_FILE_OUTPUT_SCHEMA, ["file"], ["file-read"]),
+	"mobile.file.share": contract("user.foreground-write", ENDPOINT_TEXT_OUTPUT_SCHEMA, ["text"], ["file-share"]),
+	"mobile.notification.show": contract("user.foreground-write", ENDPOINT_TEXT_OUTPUT_SCHEMA, ["text"], ["notifications"]),
+	"mobile.device.get_info": contract("public.background-read", ENDPOINT_TEXT_OUTPUT_SCHEMA, ["text"], []),
+	"mobile.clipboard.write": contract("user.foreground-write", ENDPOINT_TEXT_OUTPUT_SCHEMA, ["text"], ["clipboard-write"]),
+	"mobile.app.open_url": contract("user.foreground-write", ENDPOINT_TEXT_OUTPUT_SCHEMA, ["text"], ["open-external-url"])
+};
 var EndpointToolPolicy = class {
+	ajv = new Ajv2020({
+		allErrors: true,
+		strict: true
+	});
 	validateDescriptor(kind, descriptor) {
 		if (!descriptor.name.startsWith(`${kind}.`)) throw new EndpointToolPolicyError(`Tool ${descriptor.name} does not belong to ${kind}`);
-		if (descriptor.effect !== "read") {
-			if (descriptor.confirmation !== "always") throw new EndpointToolPolicyError(`Mutating tool ${descriptor.name} must always require confirmation`);
-			if (!descriptor.requiresForeground) throw new EndpointToolPolicyError(`Mutating tool ${descriptor.name} must require foreground`);
-			if (descriptor.requiredPermissions.length === 0) throw new EndpointToolPolicyError(`Mutating tool ${descriptor.name} must declare a permission`);
+		const contract = POLICY_BY_TOOL[descriptor.name];
+		if (!contract) throw new EndpointToolPolicyError(`Tool ${descriptor.name} has no trusted server policy`);
+		if (descriptor.policyId !== contract.policyId) throw new EndpointToolPolicyError(`Tool ${descriptor.name} does not match its trusted server policy`);
+		if (canonicalJson(descriptor.outputSchema) !== canonicalJson(contract.outputSchema) || canonicalJson(descriptor.resultKinds) !== canonicalJson(contract.resultKinds) || canonicalJson([...descriptor.requiredPermissions].sort()) !== canonicalJson([...contract.permissions].sort())) throw new EndpointToolPolicyError(`Tool ${descriptor.name} does not match its trusted server contract`);
+		this.validatePolicyFields(descriptor);
+		try {
+			this.ajv.compile(descriptor.outputSchema);
+		} catch (error) {
+			throw new EndpointToolPolicyError(`Tool ${descriptor.name} has an invalid output schema: ${error instanceof Error ? error.message : String(error)}`);
 		}
 	}
 	evaluate(descriptor, availability) {
 		if (descriptor.requiresForeground && availability !== "foreground") throw new EndpointToolPolicyError("Endpoint is not in the foreground");
-		return { confirmationRequired: descriptor.confirmation === "always" || descriptor.effect !== "read" };
+		return { confirmationRequired: descriptor.confirmation === "always" };
+	}
+	validatePolicyFields(descriptor) {
+		switch (descriptor.policyId) {
+			case "public.background-read":
+				this.assertFields(descriptor, "read", "never", false, "public");
+				return;
+			case "public.foreground-read":
+				this.assertFields(descriptor, "read", "never", true, "public");
+				return;
+			case "personal.foreground-read":
+				this.assertFields(descriptor, "read", "always", true, "personal");
+				if (descriptor.requiredPermissions.length === 0) throw new EndpointToolPolicyError(`Personal tool ${descriptor.name} must declare a permission`);
+				return;
+			case "user.foreground-write":
+				if (descriptor.effect === "read") throw new EndpointToolPolicyError(`Mutating tool ${descriptor.name} cannot declare a read effect`);
+				if (descriptor.confirmation !== "always" || !descriptor.requiresForeground || descriptor.sensitivity !== "personal" || descriptor.requiredPermissions.length === 0) throw new EndpointToolPolicyError(`Mutating tool ${descriptor.name} violates its trusted policy`);
+				return;
+			default: throw new EndpointToolPolicyError(`Unknown endpoint policy: ${descriptor.policyId}`);
+		}
+	}
+	assertFields(descriptor, effect, confirmation, requiresForeground, sensitivity) {
+		if (descriptor.effect !== effect || descriptor.confirmation !== confirmation || descriptor.requiresForeground !== requiresForeground || descriptor.sensitivity !== sensitivity) throw new EndpointToolPolicyError(`Tool ${descriptor.name} violates its trusted policy`);
 	}
 };
 //#endregion

package/dist/src/endpoint-tools/registry.js

@@ -93,7 +93,7 @@ var EndpointRegistry = class {
 		const connection = this.connectionByEndpointId.get(endpointId);
 		if (!connection || connection.transport.readyState !== 1) throw new Error(`Endpoint is offline: ${endpointId}`);
 		const message = {
-			protocolVersion: 1,
+			protocolVersion: 2,
 			messageId: crypto.randomUUID(),
 			type,
 			sentAt: Date.now(),

package/dist/src/endpoint-tools/runtime.d.ts

@@ -1,5 +1,6 @@
 import { type ClientEndpointMessage, type EndpointHelloPayload } from '@xopcai/endpoint-tools-protocol';
 import { type EndpointAuthenticatorDeps } from './auth.js';
+import { EndpointBindingService } from './binding-service.js';
 import { EndpointInvocationService, type EndpointInvocationAuditSink } from './invocation-service.js';
 import { EndpointRegistry, type EndpointRegistration, type EndpointTransport } from './registry.js';
 import { EndpointUploadService } from './upload-service.js';
@@ -7,6 +8,7 @@ export declare class EndpointToolRuntime {
     readonly registry: EndpointRegistry;
     readonly invocations: EndpointInvocationService;
     readonly uploads: EndpointUploadService;
+    readonly bindings: EndpointBindingService;
     private readonly authenticator;
     private closed;
     constructor(options?: {

package/dist/src/endpoint-tools/runtime.js

@@ -1,11 +1,13 @@
 import { resolveStateDir } from "../config/paths-state.js";
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
+import { deleteEndpointSessionBinding, getEndpointSessionBinding, setEndpointSessionBinding } from "../storage/sqlite/endpoint-session-binding-repository.js";
 import { bindEndpointPrincipal, getEndpointPrincipal, touchEndpointPrincipal } from "../storage/sqlite/endpoint-principal-repository.js";
 import { finishEndpointToolInvocationAudit, startEndpointToolInvocationAudit } from "../storage/sqlite/endpoint-tool-invocation-repository.js";
 import "../storage/sqlite/index.js";
 import { init_paths } from "../config/paths.js";
 import { EndpointAuthenticator } from "./auth.js";
+import { EndpointBindingService } from "./binding-service.js";
 import { EndpointToolPolicy } from "./policy.js";
 import { EndpointInvocationService } from "./invocation-service.js";
 import { EndpointRegistry } from "./registry.js";
@@ -20,11 +22,17 @@ var EndpointToolRuntime = class {
 	registry;
 	invocations;
 	uploads;
+	bindings;
 	authenticator;
 	closed = false;
 	constructor(options = {}) {
 		const policy = new EndpointToolPolicy();
 		this.registry = new EndpointRegistry(policy);
+		this.bindings = new EndpointBindingService(this.registry, {
+			get: getEndpointSessionBinding,
+			set: setEndpointSessionBinding,
+			delete: deleteEndpointSessionBinding
+		});
 		this.authenticator = new EndpointAuthenticator(options.auth ?? {
 			getPrincipal: getEndpointPrincipal,
 			bindEndpoint: bindEndpointPrincipal,

package/dist/src/extensions/lockfile.js

@@ -1,7 +1,7 @@
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
-import { init_paths, resolveExtensionsDir, resolveExtensionsLockPath } from "../config/paths.js";
 import { init_write_file_atomic, writeTextAtomic } from "../infra/write-file-atomic.js";
+import { init_paths, resolveExtensionsDir, resolveExtensionsLockPath } from "../config/paths.js";
 import { dirname, join } from "path";
 import { existsSync } from "fs";
 import { mkdir, readFile } from "fs/promises";

package/dist/src/files/file-service.js

@@ -26,6 +26,7 @@ const TEXT_EXTENSIONS = new Set([
 	"svg",
 	"ts",
 	"tsx",
+	"tsv",
 	"txt",
 	"xml",
 	"yaml",
@@ -50,10 +51,18 @@ const MIME_TYPES = {
 	ts: "text/typescript",
 	tsx: "text/typescript",
 	csv: "text/csv",
+	tsv: "text/tab-separated-values",
 	xml: "application/xml",
 	yaml: "application/yaml",
 	yml: "application/yaml",
 	pdf: "application/pdf",
+	doc: "application/msword",
+	docx: "application/vnd.openxmlformats-officedocument.wordprocessingml.document",
+	xls: "application/vnd.ms-excel",
+	xlsx: "application/vnd.openxmlformats-officedocument.spreadsheetml.sheet",
+	ppt: "application/vnd.ms-powerpoint",
+	pptx: "application/vnd.openxmlformats-officedocument.presentationml.presentation",
+	zip: "application/zip",
 	mp3: "audio/mpeg",
 	wav: "audio/wav",
 	ogg: "audio/ogg",
@@ -106,13 +115,13 @@ async function resolveFilePath(root, path, mustExist = true) {
 	const canonicalRoot = await realpath(root).catch(() => {
 		throw new FileServiceError(404, "File space is unavailable");
 	});
-	const candidate = resolve(canonicalRoot, normalizeRelativePath(path));
-	if (!isWithin(canonicalRoot, candidate)) throw new FileServiceError(400, "Invalid file path");
+	const candidate = isAbsolute(path) ? resolve(path) : resolve(canonicalRoot, normalizeRelativePath(path));
 	if (!mustExist) {
-		if (!isWithin(canonicalRoot, await realpath(dirname(candidate)).catch(() => {
+		const parent = await realpath(dirname(candidate)).catch(() => {
 			throw new FileServiceError(404, "Parent directory not found");
-		}))) throw new FileServiceError(400, "Invalid file path");
-		return candidate;
+		});
+		if (!isWithin(canonicalRoot, parent)) throw new FileServiceError(400, "Invalid file path");
+		return resolve(parent, basename(candidate));
 	}
 	const canonicalTarget = await realpath(candidate).catch(() => {
 		throw new FileServiceError(404, "File not found");

package/dist/src/gateway/agent-builtin-tools.d.ts

@@ -247,4 +247,4 @@ export declare const GATEWAY_BUILTIN_TOOLS: readonly [{
         readonly zh: "使用已验证的参数执行选定的外部工具。";
     };
 }];
-export declare const GATEWAY_BUILTIN_TOOL_IDS: ("automation" | "workflow" | "find" | "todo" | "image" | "clarify" | "dreaming" | "memory_search" | "memory_get" | "web_search" | "web_fetch" | "browser_use" | "grep" | "session_search" | "read_file" | "list_dir" | "write_file" | "apply_patch" | "exec_command" | "update_plan" | "xopc_tool_search" | "xopc_tool_describe" | "xopc_tool_execute" | "web_extract" | "image_generate" | "skills_list" | "skill_view" | "skill_manage" | "skills_marketplace_search" | "send_message" | "send_media" | "read_media" | "create_share" | "session_status" | "tool_manual" | "delegate_task" | "skill_install" | "text_to_speech" | "execute_code" | "create_desktop_pet")[];
+export declare const GATEWAY_BUILTIN_TOOL_IDS: ("automation" | "workflow" | "find" | "todo" | "image" | "clarify" | "dreaming" | "memory_search" | "memory_get" | "web_search" | "web_fetch" | "browser_use" | "grep" | "session_search" | "read_file" | "list_dir" | "write_file" | "apply_patch" | "exec_command" | "update_plan" | "web_extract" | "image_generate" | "skills_list" | "skill_view" | "skill_manage" | "skills_marketplace_search" | "xopc_tool_search" | "xopc_tool_describe" | "xopc_tool_execute" | "send_message" | "send_media" | "read_media" | "create_share" | "session_status" | "tool_manual" | "delegate_task" | "skill_install" | "text_to_speech" | "execute_code" | "create_desktop_pet")[];

package/dist/src/gateway/agents-admin.js

@@ -1,6 +1,6 @@
 import { init_agent_scope, listAgentEntries, normalizeAgentId, resolveAgentDir, resolveAgentProfileDir, resolveAgentWorkspaceDir, resolveDefaultAgentId, resolveUserPath, validateAgentIdForNewAgent } from "../agent/agent-scope.js";
-import { resolveEffectiveAgentProfile } from "../config/agent-profile.js";
 import { WORKSPACE_FILES, init_paths } from "../config/paths.js";
+import { resolveEffectiveAgentProfile } from "../config/agent-profile.js";
 import { AGENT_PROFILE_MARKDOWN_SYSTEM_FILES, REQUIRED_AGENT_PROFILE_MARKDOWN_FILE_SET } from "../agent/context/workspace.js";
 import { isPathUnderWorkspace, resolveWorkspaceSafePath } from "./workspace-editor-path.js";
 import { seedAgentProfileMarkdownFiles } from "../agent/context/workspace-seed.js";

package/dist/src/gateway/chat-stream/mapper.js

@@ -1,3 +1,4 @@
+import { parseTurnOutcome } from "../../../packages/gateway-contract/src/turn-outcome.js";
 import { resolveToolActivity } from "../../../packages/gateway-contract/src/tool-activity.js";
 import { createPetFeedback } from "./pet-feedback.js";
 //#region src/gateway/chat-stream/mapper.ts
@@ -126,6 +127,10 @@ var ChatStreamMapper = class {
 					kind
 				}] : [];
 			}) : [] })];
+			case "turn_outcome": {
+				const outcome = parseTurnOutcome(event.outcome);
+				return outcome ? [this.make("turn_outcome", outcome)] : [];
+			}
 			case "error": return [this.make("error", {
 				code: "AGENT_RUN_ERROR",
 				message: String(event.content ?? event.message ?? "Unknown error"),

package/dist/src/gateway/hono/lib/config-payload.js

@@ -1,9 +1,9 @@
 import { ContextCompactionPolicySchema, UserContextDreamingSchema, UserContextPrivacySchema, init_config } from "../../../user-context/config.js";
 import { init_agent_scope, listAgentEntries, normalizeAgentId, resolveDefaultAgentId } from "../../../agent/agent-scope.js";
 import { resolveModelsJsonPath } from "../../../config/paths.js";
-import { buildChannelCatalogForConfig, buildChannelCatalogFromSnapshot, getChannelSetupStatus, init_channel_catalog_service } from "../../../channels/catalog/channel-catalog-service.js";
 import { init_models_json, loadModelsJson } from "../../../config/models-json.js";
 import { CredentialResolver, init_credentials } from "../../../auth/credentials.js";
+import { buildChannelCatalogForConfig, buildChannelCatalogFromSnapshot, getChannelSetupStatus, init_channel_catalog_service } from "../../../channels/catalog/channel-catalog-service.js";
 import { getProviderRegistry, init_plugin_registry } from "../../../providers/plugin-registry.js";
 import { getAllProviders, init_providers, isProviderConfigured } from "../../../providers/index.js";
 import { normalizeConfiguredMcpServers } from "../../../config/mcp-config-normalize.js";

package/dist/src/gateway/hono/middleware/auth.js

@@ -31,7 +31,7 @@ function extractTokenFromHeader(authHeader) {
 }
 /**
 * SECURITY: query-string tokens leak into server logs, Referer headers, and
-* browser history. We accept them only for agent avatar `<img>` loads, where an
+* browser history. We accept them only for avatar `<img>` loads, where an
 * Authorization header cannot be set. Realtime WebSocket authentication uses a
 * one-time ticket acquired over authenticated HTTP.
 */
@@ -39,9 +39,10 @@ function extractTokenFromQuery(url) {
 	return new URL(url).searchParams.get("token");
 }
 const AGENT_AVATAR_GET_PATH = /^\/api\/agents\/[^/]+\/avatar$/;
+const USER_AVATAR_GET_PATH = "/api/you/avatar";
 /** Exported for gateway security tests. */
 function isQueryTokenAllowedPath(path, method) {
-	if (method === "GET" && AGENT_AVATAR_GET_PATH.test(path)) return true;
+	if (method === "GET" && (AGENT_AVATAR_GET_PATH.test(path) || path === USER_AVATAR_GET_PATH)) return true;
 	return false;
 }
 function resolveRemoteAddress(c) {

package/dist/src/gateway/hono/routes/endpoint-tools.js

@@ -1,4 +1,4 @@
-import { endpointPrincipalRegistrationSchema } from "../../../../packages/endpoint-tools-protocol/src/index.js";
+import { endpointPrincipalRegistrationSchema, endpointSessionBindingRequestSchema } from "../../../../packages/endpoint-tools-protocol/src/index.js";
 import { createEndpointPrincipal, getEndpointPrincipal, listEndpointPrincipals, revokeEndpointPrincipal } from "../../../storage/sqlite/endpoint-principal-repository.js";
 import { listEndpointToolInvocationAudits } from "../../../storage/sqlite/endpoint-tool-invocation-repository.js";
 import "../../../storage/sqlite/index.js";
@@ -130,6 +130,73 @@ function registerEndpointToolRoutes(authenticated, deps) {
 			payload: listEndpointToolInvocationAudits(Number.isFinite(limit) ? limit : 100)
 		});
 	});
+	authenticated.get("/api/endpoint-tools/bindings/:sessionKey", (c) => {
+		try {
+			const binding = deps.service.endpointTools.bindings.get(c.req.param("sessionKey"));
+			return binding ? c.json({
+				ok: true,
+				payload: binding
+			}) : c.json({
+				ok: false,
+				error: {
+					code: "NOT_FOUND",
+					message: "Endpoint binding not found"
+				}
+			}, 404);
+		} catch {
+			return c.json({
+				ok: false,
+				error: {
+					code: "BAD_REQUEST",
+					message: "Invalid session key"
+				}
+			}, 400);
+		}
+	});
+	authenticated.put("/api/endpoint-tools/bindings/:sessionKey", async (c) => {
+		const parsed = endpointSessionBindingRequestSchema.safeParse(await c.req.json().catch(() => null));
+		if (!parsed.success) return c.json({
+			ok: false,
+			error: {
+				code: "BAD_REQUEST",
+				message: "Invalid endpoint binding"
+			}
+		}, 400);
+		try {
+			const binding = deps.service.endpointTools.bindings.bind(c.req.param("sessionKey"), parsed.data.endpointId);
+			return c.json({
+				ok: true,
+				payload: binding
+			});
+		} catch (error) {
+			const message = error instanceof Error ? error.message : String(error);
+			const status = message === "Endpoint is offline" ? 409 : 400;
+			return c.json({
+				ok: false,
+				error: {
+					code: "BINDING_FAILED",
+					message
+				}
+			}, status);
+		}
+	});
+	authenticated.delete("/api/endpoint-tools/bindings/:sessionKey", (c) => {
+		try {
+			const removed = deps.service.endpointTools.bindings.unbind(c.req.param("sessionKey"));
+			return c.json({
+				ok: true,
+				payload: { removed }
+			});
+		} catch {
+			return c.json({
+				ok: false,
+				error: {
+					code: "BAD_REQUEST",
+					message: "Invalid session key"
+				}
+			}, 400);
+		}
+	});
 	authenticated.post("/api/endpoint-tools/invocations/:invocationId/files", async (c) => {
 		const invocationId = c.req.param("invocationId");
 		const endpointId = c.req.header("x-endpoint-id") ?? "";

package/dist/src/gateway/hono/routes/files.js

@@ -119,6 +119,13 @@ function registerFilesRoutes(authenticated, deps) {
 			return errorResponse(c, error);
 		}
 	});
+	authenticated.get("/api/files/:id/host-path", async (c) => {
+		try {
+			return c.json({ absolutePath: (await files.resource(c.req.param("id"))).absolutePath });
+		} catch (error) {
+			return errorResponse(c, error);
+		}
+	});
 	authenticated.get("/api/files/:id/content", async (c) => {
 		try {
 			const { resource, absolutePath } = await files.resource(c.req.param("id"));

package/dist/src/gateway/hono/routes/lazy-bundles.js

@@ -100,6 +100,14 @@ const AUTHENTICATED_LAZY_ROUTE_BUNDLES = [
 			} };
 		}
 	},
+	{
+		id: "support",
+		match: (path) => startsWithAny(path, ["/api/support"]),
+		load: async () => {
+			const { registerSupportRoutes } = await import("./support.js");
+			return { register: registerSupportRoutes };
+		}
+	},
 	{
 		id: "image-generation",
 		match: (path) => startsWithAny(path, ["/api/image-generation"]) || /^\/api\/agents\/[^/]+\/image-generation(?:\/setup)?$/.test(path),

package/dist/src/gateway/hono/routes/media.js

@@ -9,6 +9,26 @@ import { messagesReferenceMediaUri } from "../../../media/session-references.js"
 import { createGatewayRouteLogger } from "../lib/route-logger.js";
 //#region src/gateway/hono/routes/media.ts
 const log = createGatewayRouteLogger("Media");
+function parseByteRange(header, size) {
+	if (!header) return null;
+	const match = /^bytes=(\d*)-(\d*)$/i.exec(header.trim());
+	if (!match || !match[1] && !match[2] || size <= 0) return "invalid";
+	if (!match[1]) {
+		const suffixLength = Number(match[2]);
+		if (!Number.isSafeInteger(suffixLength) || suffixLength <= 0) return "invalid";
+		return {
+			start: Math.max(0, size - suffixLength),
+			end: size - 1
+		};
+	}
+	const start = Number(match[1]);
+	const requestedEnd = match[2] ? Number(match[2]) : size - 1;
+	if (!Number.isSafeInteger(start) || !Number.isSafeInteger(requestedEnd) || start < 0 || start >= size || requestedEnd < start) return "invalid";
+	return {
+		start,
+		end: Math.min(requestedEnd, size - 1)
+	};
+}
 function registerMediaRoutes(authenticated, deps) {
 	const tasks = new TaskRepository();
 	authenticated.post("/api/media", deps.strictRateLimitMiddleware, async (c) => {
@@ -64,9 +84,33 @@ function registerMediaRoutes(authenticated, deps) {
 			}, 404);
 			const { buffer, path } = await readMediaReference(parsed.uri);
 			const contentType = mimeTypeFromMediaPath(path);
+			const range = parseByteRange(c.req.header("Range"), buffer.byteLength);
+			const commonHeaders = {
+				"Accept-Ranges": "bytes",
+				"Cache-Control": "private, max-age=3600",
+				"Content-Type": contentType
+			};
+			if (range === "invalid") return new Response(null, {
+				status: 416,
+				headers: {
+					...commonHeaders,
+					"Content-Range": `bytes */${buffer.byteLength}`
+				}
+			});
+			if (range) {
+				const body = buffer.subarray(range.start, range.end + 1);
+				return new Response(body, {
+					status: 206,
+					headers: {
+						...commonHeaders,
+						"Content-Length": String(body.byteLength),
+						"Content-Range": `bytes ${range.start}-${range.end}/${buffer.byteLength}`
+					}
+				});
+			}
 			return new Response(buffer, { headers: {
-				"Content-Type": contentType,
-				"Cache-Control": "private, max-age=3600"
+				...commonHeaders,
+				"Content-Length": String(buffer.byteLength)
 			} });
 		} catch (err) {
 			const em = err instanceof Error ? err.message : String(err);

package/dist/src/gateway/hono/routes/models.js

@@ -1,5 +1,5 @@
-import { resolveModelsJsonPath } from "../../../config/paths.js";
 import { init_resolve_config_value, testApiKeyResolution } from "../../../config/resolve-config-value.js";
+import { resolveModelsJsonPath } from "../../../config/paths.js";
 import { init_models_json, loadModelsJson, saveModelsJson, validateModelsConfig } from "../../../config/models-json.js";
 import { getModelCatalogStore, init_model_catalog_store } from "../../../providers/model-catalog-store.js";
 import { getModelRegistry } from "../../../providers/model-registry.js";

package/dist/src/gateway/hono/routes/support.d.ts

@@ -0,0 +1,3 @@
+import type { Hono } from 'hono';
+import type { AuthenticatedRouteDeps } from './deps.js';
+export declare function registerSupportRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void;

package/dist/src/gateway/hono/routes/support.js

@@ -0,0 +1,28 @@
+import { buildSupportInvestigationPrompt } from "../../../support/build-support-investigation-prompt.js";
+import { collectSupportReport } from "../../../support/collect-support-report.js";
+import { SupportReportInputSchema } from "../../../support/types.js";
+//#region src/gateway/hono/routes/support.ts
+function registerSupportRoutes(authenticated, deps) {
+	authenticated.post("/api/support/report", deps.strictRateLimitMiddleware, async (c) => {
+		const parsed = SupportReportInputSchema.safeParse(await c.req.json().catch(() => null));
+		if (!parsed.success) return c.json({
+			ok: false,
+			error: "Invalid support report input"
+		}, 400);
+		const health = deps.service.getHealth();
+		const channels = Object.fromEntries(deps.service.getChannelsStatus().map((channel) => [channel.name, !channel.enabled ? "disabled" : channel.connected ? "connected" : "disconnected"]));
+		const report = await collectSupportReport(parsed.data, { runtime: {
+			gatewayStatus: health.status,
+			gatewayVersion: health.version,
+			gatewayUptimeMs: health.uptime,
+			channels
+		} });
+		return c.json({
+			ok: true,
+			report,
+			investigationPrompt: buildSupportInvestigationPrompt(report)
+		});
+	});
+}
+//#endregion
+export { registerSupportRoutes };