@xopcai/xopc 0.0.233 → 0.0.235

package/dist/src/gateway/file-reference-registry.js

@@ -0,0 +1,45 @@
+import { randomUUID } from "node:crypto";
+//#region src/gateway/file-reference-registry.ts
+const DEFAULT_TTL_MS = 1800 * 1e3;
+var FileReferenceRegistry = class {
+	refs = /* @__PURE__ */ new Map();
+	register(input) {
+		this.expire();
+		const id = randomUUID();
+		const ref = {
+			id,
+			absolutePath: input.absolutePath,
+			sessionKey: input.sessionKey?.trim() || void 0,
+			scope: input.scope,
+			locationKind: input.locationKind,
+			capabilities: [...new Set(input.capabilities)],
+			expiresAt: Date.now() + (input.ttlMs ?? DEFAULT_TTL_MS)
+		};
+		this.refs.set(id, ref);
+		return ref;
+	}
+	resolve(id) {
+		this.expire();
+		const ref = this.refs.get(id);
+		if (!ref) return null;
+		if (ref.expiresAt <= Date.now()) {
+			this.refs.delete(id);
+			return null;
+		}
+		return ref;
+	}
+	/**
+	* Remove a specific reference (used after a one-shot action like
+	* import-to-workspace completes so the source card can't be re-triggered).
+	* Returns true if the reference existed and was removed.
+	*/
+	expireById(id) {
+		return this.refs.delete(id);
+	}
+	expire(now = Date.now()) {
+		for (const [id, ref] of this.refs) if (ref.expiresAt <= now) this.refs.delete(id);
+	}
+};
+const fileReferenceRegistry = new FileReferenceRegistry();
+//#endregion
+export { FileReferenceRegistry, fileReferenceRegistry };

package/dist/src/gateway/file-space-service.d.ts

@@ -0,0 +1,4 @@
+import { FileSpaceService } from '../files/file-service.js';
+import type { GatewayService } from './service.js';
+/** Share the file registry, including session-specific spaces, across gateway routes. */
+export declare function getGatewayFileSpaceService(service: GatewayService): FileSpaceService;

package/dist/src/gateway/file-space-service.js

@@ -0,0 +1,19 @@
+import { listSessionWorkspaceOverrides } from "../storage/sqlite/config-repository.js";
+import { effectiveWorkspacePathForSession } from "../session/session-workspace.js";
+import { getProjectForSession } from "../projects/workspace.js";
+import { FileSpaceService } from "../files/file-service.js";
+//#region src/gateway/file-space-service.ts
+const services = /* @__PURE__ */ new WeakMap();
+/** Share the file registry, including session-specific spaces, across gateway routes. */
+function getGatewayFileSpaceService(service) {
+	const existing = services.get(service);
+	if (existing) return existing;
+	const created = new FileSpaceService(() => service.currentConfig, service.projects, (sessionKey) => service.sessions.getEffectiveWorkspacePath(sessionKey), () => listSessionWorkspaceOverrides().map(({ sessionKey, workingDirectoryOverride }) => ({
+		sessionKey,
+		root: effectiveWorkspacePathForSession(service.currentConfig, sessionKey, { workingDirectoryOverride }, getProjectForSession(sessionKey))
+	})));
+	services.set(service, created);
+	return created;
+}
+//#endregion
+export { getGatewayFileSpaceService };

package/dist/src/gateway/hono/app.js

@@ -21,6 +21,7 @@ import { resetLazyRouteBundlesForTests } from "./routes/lazy-fallback.js";
 import { registerAuthenticatedRoutes } from "./routes/index.js";
 import { prewarmStaticUiCache } from "./lib/static-ui.js";
 import { registerPublicGatewayRoutes } from "./routes/public-gateway.js";
+import { registerPublicHtmlPreviewRoute } from "./routes/html-preview.js";
 import { registerSiteShareMiddleware } from "../../share/site-share-router.js";
 import { Hono } from "hono";
 import { cors } from "hono/cors";
@@ -109,7 +110,7 @@ function createHonoApp(config) {
 	const gatewayConsoleCsp = buildGatewayConsoleCspHeader();
 	app.use(createMiddleware(async (c, next) => {
 		await next();
-		if (isExtensionGatewayUiAssetPath(c.req.path)) return;
+		if (isExtensionGatewayUiAssetPath(c.req.path) || c.req.path === "/api/preview/html" && (c.req.method === "GET" || c.req.method === "HEAD")) return;
 		c.header("X-Frame-Options", "DENY");
 		c.header("X-Content-Type-Options", "nosniff");
 		c.header("Referrer-Policy", "strict-origin-when-cross-origin");
@@ -194,6 +195,7 @@ function createHonoApp(config) {
 		})(c, next);
 	});
 	registerPublicGatewayRoutes(app, service);
+	registerPublicHtmlPreviewRoute(app);
 	registerDeviceAuthPublicRoutes(app);
 	registerPublicExtensionAssetRoutes(app, service);
 	registerPublicLocalAppPreviewRoutes(app, service);

package/dist/src/gateway/hono/lib/config-payload.js

@@ -1,9 +1,9 @@
 import { ContextCompactionPolicySchema, UserContextDreamingSchema, UserContextPrivacySchema, init_config } from "../../../user-context/config.js";
 import { init_agent_scope, listAgentEntries, normalizeAgentId, resolveDefaultAgentId } from "../../../agent/agent-scope.js";
 import { resolveModelsJsonPath } from "../../../config/paths.js";
-import { buildChannelCatalogForConfig, buildChannelCatalogFromSnapshot, getChannelSetupStatus, init_channel_catalog_service } from "../../../channels/catalog/channel-catalog-service.js";
 import { init_models_json, loadModelsJson } from "../../../config/models-json.js";
 import { CredentialResolver, init_credentials } from "../../../auth/credentials.js";
+import { buildChannelCatalogForConfig, buildChannelCatalogFromSnapshot, getChannelSetupStatus, init_channel_catalog_service } from "../../../channels/catalog/channel-catalog-service.js";
 import { getProviderRegistry, init_plugin_registry } from "../../../providers/plugin-registry.js";
 import { getAllProviders, init_providers, isProviderConfigured } from "../../../providers/index.js";
 import { normalizeConfiguredMcpServers } from "../../../config/mcp-config-normalize.js";

package/dist/src/gateway/hono/routes/connectors.js

@@ -15,7 +15,6 @@ import { listUnderstandingSourceGrants, revokeUnderstandingSourceGrant } from ".
 import { recordConnectorHealthUsage } from "../../../connectors/usage.js";
 import { getConnectorInstance, getInstalledConnectorDefinition, listConnectorInstances } from "../../../connectors/instances.js";
 import { installConnector, installConnectorDefinition, uninstallConnector, updateConnectorConfig } from "../../../connectors/install.js";
-import { ConfigPersistenceError, persistConfigMutation } from "../../../config/config-mutation.js";
 import { getMcpOAuthManager } from "../../../agent/mcp/oauth/mcp-oauth-manager.js";
 import { startConnectorAuthorization } from "../../../connectors/auth-provider-registry.js";
 import { composioLogoResponse } from "../../../connectors/composio-logo.js";
@@ -25,6 +24,7 @@ import { ingestLocalFolderSource } from "../../../connectors/connected-source-in
 import { previewConnectorDefinition, testConnectorInstance } from "../../../connectors/health.js";
 import { setConnectorEnabled } from "../../../connectors/lifecycle.js";
 import { projectComposioConnectionStatus } from "../../../connectors/runtime-status.js";
+import { ConfigPersistenceError, persistConfigMutation } from "../../../config/config-mutation.js";
 import { applySourceRevocationChoices, sourceRevocationImpact } from "./understanding-sources.js";
 //#region src/gateway/hono/routes/connectors.ts
 init_agent_scope();

package/dist/src/gateway/hono/routes/file-references.d.ts

@@ -0,0 +1,4 @@
+import type { Hono } from 'hono';
+import type { AuthenticatedRouteDeps } from './deps.js';
+/** Metadata and explicit desktop actions for links outside a managed workspace. */
+export declare function registerFileReferenceRoutes(app: Hono, deps: AuthenticatedRouteDeps): void;

package/dist/src/gateway/hono/routes/file-references.js

@@ -0,0 +1,98 @@
+import { FileServiceError } from "../../../files/file-service.js";
+import { buildFilePathClassifierContext, classifyFileLocation, displayNameForPath, fileRefSessionKeysMatch, resolveFileReferenceCandidate } from "../../file-path-classifier.js";
+import { classifyFileReferenceFsError } from "../../file-reference-errors.js";
+import { FileReferenceRegistry } from "../../file-reference-registry.js";
+import { getGatewayFileSpaceService } from "../../file-space-service.js";
+import { realpath, stat } from "node:fs/promises";
+//#region src/gateway/hono/routes/file-references.ts
+/** Metadata and explicit desktop actions for links outside a managed workspace. */
+function registerFileReferenceRoutes(app, deps) {
+	const files = getGatewayFileSpaceService(deps.service);
+	const refs = new FileReferenceRegistry();
+	app.post("/api/files/resolve-reference", async (c) => {
+		const body = await c.req.json();
+		if (!body.spaceId || !body.path?.trim()) return c.json({ error: { message: "spaceId and path are required" } }, 400);
+		try {
+			const space = await files.get(body.spaceId);
+			const sessionKey = body.sessionKey?.trim();
+			const agentId = space.bindings.find((binding) => binding.kind === "agent")?.id;
+			const ctx = {
+				...buildFilePathClassifierContext(deps.service.currentConfig, sessionKey || (agentId ? `agent:${agentId}:main` : void 0)),
+				workspaceRoot: space.root
+			};
+			const inputPath = body.path.trim();
+			const base = {
+				inputPath,
+				displayName: displayNameForPath(inputPath)
+			};
+			const { candidate, invalid } = await resolveFileReferenceCandidate(inputPath, space.root, ctx);
+			if (!candidate || invalid) return c.json({ reference: {
+				...base,
+				scope: "invalid",
+				exists: false,
+				capabilities: []
+			} });
+			let absolutePath;
+			let info;
+			try {
+				absolutePath = await realpath(candidate);
+				info = await stat(absolutePath);
+			} catch (error) {
+				const failure = classifyFileReferenceFsError(error);
+				if (failure.code !== "FILE_NOT_FOUND") return c.json({ error: { message: failure.message } }, failure.status === 403 ? 403 : 500);
+				return c.json({ reference: {
+					...base,
+					scope: "missing",
+					absolutePath: candidate,
+					exists: false,
+					capabilities: ["copyPath"]
+				} });
+			}
+			const classified = classifyFileLocation(absolutePath, ctx);
+			const capabilities = info.isFile() || info.isDirectory() ? [
+				"openExternal",
+				"revealInFolder",
+				"copyPath"
+			] : ["copyPath"];
+			const ref = refs.register({
+				absolutePath,
+				sessionKey,
+				...classified,
+				capabilities
+			});
+			return c.json({ reference: {
+				...base,
+				...classified,
+				fileRefId: ref.id,
+				absolutePath,
+				exists: true,
+				isDirectory: info.isDirectory(),
+				capabilities,
+				mtimeMs: info.mtimeMs
+			} });
+		} catch (error) {
+			if (error instanceof FileServiceError) return c.json({ error: { message: error.message } }, error.status);
+			throw error;
+		}
+	});
+	app.post("/api/files/references/:id/action", async (c) => {
+		const ref = refs.resolve(c.req.param("id"));
+		if (!ref) return c.json({ error: { message: "File reference expired" } }, 404);
+		const body = await c.req.json();
+		if (!fileRefSessionKeysMatch(ref.sessionKey, body.sessionKey)) return c.json({ error: { message: "File reference forbidden" } }, 403);
+		if (body.action !== "openExternal" && body.action !== "revealInFolder" || !ref.capabilities.includes(body.action)) return c.json({ error: { message: "Action not allowed" } }, 403);
+		try {
+			if (await realpath(ref.absolutePath) !== ref.absolutePath) return c.json({ error: { message: "File reference changed" } }, 409);
+			const info = await stat(ref.absolutePath);
+			if (!info.isFile() && !info.isDirectory()) return c.json({ error: { message: "Not a file or directory" } }, 400);
+			return c.json({
+				absolutePath: ref.absolutePath,
+				isDirectory: info.isDirectory()
+			});
+		} catch {
+			return c.json({ error: { message: "File not found" } }, 404);
+		}
+	});
+}
+//#endregion
+export { registerFileReferenceRoutes };

package/dist/src/gateway/hono/routes/files.js

@@ -1,8 +1,10 @@
-import { FileServiceError, FileSpaceService, fileResourceFromPath, resolveFilePath } from "../../../files/file-service.js";
+import { FileServiceError, fileResourceFromPath, resolveFilePath } from "../../../files/file-service.js";
+import { getGatewayFileSpaceService } from "../../file-space-service.js";
+import { fuzzySearchWorkspaceFiles, fuzzySubsequenceScore } from "../../workspace-file-search.js";
+import { registerFileReferenceRoutes } from "./file-references.js";
 import { basename, join } from "node:path";
 import { readFile, writeFile } from "node:fs/promises";
 //#region src/gateway/hono/routes/files.ts
-const services = /* @__PURE__ */ new WeakMap();
 const mutationLocks = /* @__PURE__ */ new Map();
 async function withMutationLock(key, action) {
 	const previous = mutationLocks.get(key) ?? Promise.resolve();
@@ -20,13 +22,6 @@ async function withMutationLock(key, action) {
 		if (mutationLocks.get(key) === tail) mutationLocks.delete(key);
 	}
 }
-function getFiles(deps) {
-	const existing = services.get(deps.service);
-	if (existing) return existing;
-	const created = new FileSpaceService(() => deps.service.currentConfig, deps.service.projects, (sessionKey) => deps.service.agentService.getResolvedWorkspaceForSession(sessionKey));
-	services.set(deps.service, created);
-	return created;
-}
 function publicSpace(space) {
 	const { root: _root, ...value } = space;
 	return value;
@@ -39,22 +34,28 @@ function contentDisposition(disposition, fileName) {
 	const sanitized = fileName.replace(/[\u0000-\u001f\u007f]/g, "_");
 	return `${disposition}; filename="${sanitized.replace(/[^\x20-\x7e]/g, "_").replace(/["\\]/g, "_")}"; filename*=UTF-8''${encodeURIComponent(sanitized).replace(/['()*]/g, (character) => `%${character.charCodeAt(0).toString(16).toUpperCase()}`)}`;
 }
-async function collectFiles(files, spaceId, query, max) {
+async function collectFiles(files, spaceId, max) {
 	const output = [];
 	const directories = [""];
+	const visited = /* @__PURE__ */ new Set();
+	const space = await files.get(spaceId);
 	while (directories.length && output.length < max) {
 		const directory = directories.shift();
+		const canonical = await resolveFilePath(space.root, directory).catch(() => null);
+		if (!canonical || visited.has(canonical)) continue;
+		visited.add(canonical);
 		const children = await files.children(spaceId, directory);
 		for (const child of children) {
 			if (child.kind === "directory") directories.push(child.relativePath);
-			else if (!query || child.name.toLocaleLowerCase().includes(query)) output.push(child);
+			else output.push(child);
 			if (output.length >= max) break;
 		}
 	}
 	return output;
 }
 function registerFilesRoutes(authenticated, deps) {
-	const files = getFiles(deps);
+	const files = getGatewayFileSpaceService(deps.service);
+	registerFileReferenceRoutes(authenticated, deps);
 	authenticated.get("/api/files/spaces", async (c) => {
 		try {
 			return c.json({ spaces: (await files.list()).map(publicSpace) });
@@ -62,6 +63,13 @@ function registerFilesRoutes(authenticated, deps) {
 			return errorResponse(c, error);
 		}
 	});
+	authenticated.get("/api/files/default-space", async (c) => {
+		try {
+			return c.json({ space: publicSpace(await files.defaultSpace()) });
+		} catch (error) {
+			return errorResponse(c, error);
+		}
+	});
 	authenticated.get("/api/files/contexts/:kind/:id", async (c) => {
 		try {
 			const kind = c.req.param("kind");
@@ -82,7 +90,7 @@ function registerFilesRoutes(authenticated, deps) {
 		try {
 			const limit = Math.min(100, Math.max(1, Number(c.req.query("limit")) || 50));
 			const spaces = await files.list();
-			const items = (await Promise.all(spaces.map((space) => collectFiles(files, space.id, "", 5e3)))).flat().sort((a, b) => b.modifiedAt - a.modifiedAt).slice(0, limit);
+			const items = (await Promise.all(spaces.map((space) => collectFiles(files, space.id, 5e3)))).flat().sort((a, b) => b.modifiedAt - a.modifiedAt).slice(0, limit);
 			return c.json({ items });
 		} catch (error) {
 			return errorResponse(c, error);
@@ -91,11 +99,23 @@ function registerFilesRoutes(authenticated, deps) {
 	authenticated.get("/api/files/search", async (c) => {
 		try {
 			const query = (c.req.query("q") ?? "").trim().toLocaleLowerCase();
-			if (!query) return c.json({ items: [] });
 			const limit = Math.min(100, Math.max(1, Number(c.req.query("limit")) || 50));
 			const requestedSpaceId = c.req.query("spaceId");
 			const spaces = requestedSpaceId ? [await files.get(requestedSpaceId)] : await files.list();
-			const items = (await Promise.all(spaces.map((space) => collectFiles(files, space.id, query, 5e3)))).flat().sort((a, b) => b.modifiedAt - a.modifiedAt).slice(0, limit);
+			const items = (await Promise.all(spaces.map(async (space) => {
+				const candidates = await fuzzySearchWorkspaceFiles(space.root, query, limit);
+				return Promise.all(candidates.map(async (candidate) => {
+					try {
+						return await fileResourceFromPath(space, await resolveFilePath(space.root, candidate.path));
+					} catch (error) {
+						if (error instanceof FileServiceError) return null;
+						throw error;
+					}
+				}));
+			}))).flat().filter((file) => file !== null).map((file) => ({
+				file,
+				score: Math.max(fuzzySubsequenceScore(query, file.relativePath) ?? -Infinity, fuzzySubsequenceScore(query, file.name) ?? -Infinity)
+			})).sort((a, b) => b.score - a.score || a.file.relativePath.localeCompare(b.file.relativePath)).slice(0, limit).map((row) => row.file);
 			return c.json({ items });
 		} catch (error) {
 			return errorResponse(c, error);
@@ -144,12 +164,14 @@ function registerFilesRoutes(authenticated, deps) {
 			const body = await c.req.json();
 			if (typeof body.content !== "string" || !body.revision) throw new FileServiceError(400, "content and revision are required");
 			const id = c.req.param("id");
-			const resource = await withMutationLock(id, async () => {
+			const initial = await files.resource(id);
+			const resource = await withMutationLock(initial.absolutePath, async () => {
 				const current = await files.resource(id);
+				if (current.absolutePath !== initial.absolutePath) throw new FileServiceError(409, "File has changed");
 				if (!current.resource.capabilities.includes("edit")) throw new FileServiceError(403, "File is not editable");
 				if (body.revision !== current.resource.revision) throw new FileServiceError(409, "File has changed");
 				await writeFile(current.absolutePath, body.content, "utf8");
-				return fileResourceFromPath(current.space, current.absolutePath);
+				return (await files.resource(id)).resource;
 			});
 			return c.json({ resource });
 		} catch (error) {

package/dist/src/gateway/hono/routes/html-preview.d.ts

@@ -0,0 +1,4 @@
+import type { Hono } from 'hono';
+export declare const HTML_PREVIEW_PATH = "/api/preview/html";
+/** Public static shell only: file contents arrive from the authenticated UI, never a URL. */
+export declare function registerPublicHtmlPreviewRoute(app: Hono): void;

package/dist/src/gateway/hono/routes/html-preview.js

@@ -0,0 +1,45 @@
+//#region src/gateway/hono/routes/html-preview.ts
+const HTML_PREVIEW_PATH = "/api/preview/html";
+const HTML_PREVIEW_SANDBOX = "allow-scripts allow-popups allow-popups-to-escape-sandbox allow-downloads allow-forms allow-modals";
+const HTML_PREVIEW_CSP = [
+	"default-src 'none'",
+	`sandbox ${HTML_PREVIEW_SANDBOX}`,
+	"script-src 'unsafe-inline' https: blob:",
+	"style-src 'unsafe-inline' https:",
+	"img-src https: data: blob:",
+	"media-src https: data: blob:",
+	"font-src https: data:",
+	"connect-src https:",
+	"frame-src 'self' about:",
+	"frame-ancestors 'self'",
+	"base-uri 'none'",
+	"object-src 'none'",
+	"form-action https:"
+].join("; ");
+const HTML_PREVIEW_SHELL = `<!doctype html>
+<html><head><meta charset="utf-8"><title>HTML preview</title>
+<style>html,body{height:100%;margin:0;overflow:hidden}iframe{display:block;width:100%;height:100%;border:0}</style>
+</head><body><iframe title="HTML preview" sandbox="${HTML_PREVIEW_SANDBOX}"></iframe>
+<script>
+const preview = document.querySelector('iframe');
+window.addEventListener('message', (event) => {
+  if (event.source !== window.parent || window.parent === window) return;
+  const data = event.data;
+  if (!data || data.type !== 'xopc-html-preview' || typeof data.html !== 'string') return;
+  // Repeated load notifications must not restart scripts or discard preview state.
+  if (preview.srcdoc !== data.html) preview.srcdoc = data.html;
+});
+<\/script></body></html>`;
+/** Public static shell only: file contents arrive from the authenticated UI, never a URL. */
+function registerPublicHtmlPreviewRoute(app) {
+	app.get(HTML_PREVIEW_PATH, (c) => c.html(HTML_PREVIEW_SHELL, 200, {
+		"Content-Security-Policy": HTML_PREVIEW_CSP,
+		"X-Frame-Options": "SAMEORIGIN",
+		"X-Content-Type-Options": "nosniff",
+		"Referrer-Policy": "no-referrer",
+		"Permissions-Policy": "camera=(), microphone=(), geolocation=()",
+		"Cache-Control": "no-store"
+	}));
+}
+//#endregion
+export { HTML_PREVIEW_PATH, registerPublicHtmlPreviewRoute };

package/dist/src/gateway/hono/routes/models.js

@@ -1,5 +1,5 @@
-import { resolveModelsJsonPath } from "../../../config/paths.js";
 import { init_resolve_config_value, testApiKeyResolution } from "../../../config/resolve-config-value.js";
+import { resolveModelsJsonPath } from "../../../config/paths.js";
 import { init_models_json, loadModelsJson, saveModelsJson, validateModelsConfig } from "../../../config/models-json.js";
 import { getModelCatalogStore, init_model_catalog_store } from "../../../providers/model-catalog-store.js";
 import { getModelRegistry } from "../../../providers/model-registry.js";

package/dist/src/gateway/hono/routes/shares.js

@@ -1,5 +1,6 @@
 import { loadCompactionSourceSnapshot } from "../../../storage/sqlite/transcript-repository.js";
 import "../../../storage/sqlite/index.js";
+import { FileServiceError } from "../../../files/file-service.js";
 import { resolveGatewayEffectiveHost } from "../../../config/gateway-bind.js";
 import { SHARE_CONFIG_DEFAULTS } from "../../../share/share-types.js";
 import { resolveSiteShareConfig } from "../../../share/site-share-config.js";
@@ -11,6 +12,7 @@ import { resolveReverseProxyPublicUrl } from "../../public-url.js";
 import { audienceDefaults, cleanupStagedSite, decideShareKind, forgetStagedSite, makeDescription, makeTitle, probeShareTarget, rememberStagedSite, stageSingleHtmlAsSite } from "../../../share/share-auto.js";
 import { deleteThumbnail, placeholderSvg, readThumbnail, scheduleThumbnail, thumbnailContentType, thumbnailExists } from "../../../share/share-thumbnail.js";
 import { extractToken } from "../../auth.js";
+import { getGatewayFileSpaceService } from "../../file-space-service.js";
 import { getClientIpFromHeaders } from "../../security/loopback.js";
 import { renderFolderLandingPage, renderShareExpiredPage, renderShareLandingPage, renderSnapshotShareLandingPage } from "../../../share/share-landing.js";
 import { SessionShareService, SessionShareSnapshotConflictError } from "../../../share/session-share-service.js";
@@ -902,10 +904,11 @@ function registerShareRoutes(authenticated, deps) {
 				error: { message: "Invalid JSON" }
 			}, 400);
 		}
-		const path = typeof body.path === "string" ? body.path.trim() : "";
-		if (!path) return c.json({
+		const fileId = typeof body.fileId === "string" ? body.fileId.trim() : "";
+		let path = typeof body.path === "string" ? body.path.trim() : "";
+		if (!fileId && !path) return c.json({
 			ok: false,
-			error: { message: "Missing path" }
+			error: { message: "Missing path or fileId" }
 		}, 400);
 		const sessionKey = typeof body.sessionKey === "string" ? body.sessionKey.trim() : void 0;
 		const agentId = typeof body.agentId === "string" ? body.agentId.trim() : void 0;
@@ -921,20 +924,25 @@ function registerShareRoutes(authenticated, deps) {
 		const ttlOverride = typeof body.ttlMs === "number" ? body.ttlMs : void 0;
 		const maxViewsOverride = body.maxViews === null ? null : typeof body.maxViews === "number" ? body.maxViews : void 0;
 		const wantThumbnail = body.thumbnail !== false;
-		const workspaceRoot = await resolveWorkspaceRootForShare(service, sessionKey, agentId);
-		if (!workspaceRoot) return c.json({
-			ok: false,
-			error: { message: "Workspace not configured" }
-		}, 400);
+		let workspaceRoot;
 		let probe;
 		try {
+			if (fileId) {
+				const target = await getGatewayFileSpaceService(service).resource(fileId);
+				workspaceRoot = target.space.root;
+				path = target.resource.relativePath || ".";
+			} else workspaceRoot = await resolveWorkspaceRootForShare(service, sessionKey, agentId);
+			if (!workspaceRoot) return c.json({
+				ok: false,
+				error: { message: "Workspace not configured" }
+			}, 400);
 			probe = await probeShareTarget(workspaceRoot, path);
 		} catch (err) {
 			const message = err instanceof Error ? err.message : String(err);
 			return c.json({
 				ok: false,
 				error: { message }
-			}, 400);
+			}, err instanceof FileServiceError ? err.status : 400);
 		}
 		let decision;
 		try {
@@ -1438,7 +1446,7 @@ async function createFileShareResponse(args) {
 }
 function relPathFromAbs(workspaceRoot, abs) {
 	const root = workspaceRoot.replace(/[\\/]+$/, "");
-	if (abs === root) return "";
+	if (abs === root) return ".";
 	if (abs.startsWith(`${root}/`)) return abs.slice(root.length + 1);
 	if (abs.startsWith(`${root}\\`)) return abs.slice(root.length + 1).replace(/\\/g, "/");
 	return abs.split(/[\\/]/).pop() ?? abs;

package/dist/src/gateway/hono/routes/tasks.js

@@ -1,12 +1,12 @@
 import { runSqliteWriteTransaction } from "../../../storage/sqlite/transaction.js";
+import { TaskPhaseSchema } from "../../../../packages/gateway-contract/src/task-lifecycle.js";
+import { TaskBoardPositionRequestSchema, TaskCommandRequestSchema, TaskContextInputSchema, TaskCreateRequestSchema, TaskDependencyUpdateRequestSchema, TaskHandoffRequestSchema, TaskPatchRequestSchema } from "../../../../packages/gateway-contract/src/tasks.js";
+import { ProjectMonitoringUpdateSchema } from "../../../../packages/gateway-contract/src/project-monitoring.js";
 import { TaskRepository } from "../../../tasks/task-repository.js";
 import { TaskConversationRepository } from "../../../tasks/task-conversation-repository.js";
 import { enqueueTaskChangedEvent } from "../../../tasks/task-change-events.js";
 import { TaskRunRepository } from "../../../tasks/task-run-repository.js";
 import { TaskReadModelProjector } from "../../../tasks/task-read-model-projector.js";
-import { TaskPhaseSchema } from "../../../../packages/gateway-contract/src/task-lifecycle.js";
-import { TaskBoardPositionRequestSchema, TaskCommandRequestSchema, TaskContextInputSchema, TaskCreateRequestSchema, TaskDependencyUpdateRequestSchema, TaskHandoffRequestSchema, TaskPatchRequestSchema } from "../../../../packages/gateway-contract/src/tasks.js";
-import { ProjectMonitoringUpdateSchema } from "../../../../packages/gateway-contract/src/project-monitoring.js";
 import { resolveProjectAgentId } from "../../../projects/project-agent.js";
 import { TaskContextRepository } from "../../../tasks/task-context-repository.js";
 import { TaskDependencyError, TaskDependencyService } from "../../../tasks/task-dependency-service.js";

package/dist/src/gateway/security/csp.d.ts

@@ -11,7 +11,7 @@ export declare function computeInlineScriptHashes(html: string): string[];
  * - `style-src 'self' 'unsafe-inline'` (Tailwind + runtime style injection)
  * - `media-src 'self' blob:` (chat voice previews / recorded clips use blob URLs)
  * - `frame-ancestors 'none'` (prevent clickjacking)
- * - `frame-src 'none'` (the console never embeds frames)
+ * - `frame-src 'self'` (sandboxed previews and extension UI)
  * - `form-action 'self'` (prevent form submissions to untrusted origins)
  * - `base-uri 'none'` (prevent base tag hijacking)
  * - `object-src 'none'` (prevent plugin execution)

package/dist/src/gateway/security/csp.js

@@ -29,7 +29,7 @@ function hasSrcAttribute(openTag) {
 * - `style-src 'self' 'unsafe-inline'` (Tailwind + runtime style injection)
 * - `media-src 'self' blob:` (chat voice previews / recorded clips use blob URLs)
 * - `frame-ancestors 'none'` (prevent clickjacking)
-* - `frame-src 'none'` (the console never embeds frames)
+* - `frame-src 'self'` (sandboxed previews and extension UI)
 * - `form-action 'self'` (prevent form submissions to untrusted origins)
 * - `base-uri 'none'` (prevent base tag hijacking)
 * - `object-src 'none'` (prevent plugin execution)
@@ -41,7 +41,7 @@ function buildGatewayConsoleCspHeader(options) {
 		"base-uri 'none'",
 		"object-src 'none'",
 		"frame-ancestors 'none'",
-		"frame-src 'none'",
+		"frame-src 'self'",
 		"form-action 'self'",
 		hashes?.length ? `script-src 'self' ${hashes.map((hash) => `'${hash}'`).join(" ")}` : "script-src 'self'",
 		"style-src 'self' 'unsafe-inline'",

package/dist/src/gateway/service/config-coordinator.js

@@ -1,7 +1,7 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
-import { loadConfig, saveConfig } from "../../config/loader.js";
 import { getModelRegistry } from "../../providers/model-registry.js";
+import { loadConfig, saveConfig } from "../../config/loader.js";
 import { init_providers } from "../../providers/index.js";
 import { disposeAllSessionMcpRuntimes } from "../../agent/mcp/bundle-mcp-runtime.js";
 import { reloadImageGenerationProviders } from "../../agent/image/generation/provider-registry.js";

package/dist/src/gateway/service/run-gateway-agent.js

@@ -13,7 +13,6 @@ import { ChatStreamMapper } from "../chat-stream/mapper.js";
 import { resolveWebchatSessionKey } from "../resolve-webchat-session-key.js";
 import { recordExplicitRelationshipFollowUp } from "../../user-context/relationship-continuity.js";
 import { coalesceThinkingDeltas } from "../chat-stream/thinking-delta-coalescer.js";
-import { TurnOutcomeCollector } from "../chat-stream/turn-outcome-collector.js";
 import crypto from "crypto";
 //#region src/gateway/service/run-gateway-agent.ts
 init_logger();
@@ -39,7 +38,6 @@ async function* runGatewayAgent(deps, message, channel, chatId, origin, attachme
 	let webchatSessionKey;
 	let webchatSessionId;
 	let webchatMetadata;
-	let outcomeEnvironment = "workspace";
 	if (channel === "webchat") {
 		const resolved = resolveWebchatSessionKey({ sessionKey: chatId });
 		if (resolved.ok === false) throw new Error(resolved.error);
@@ -68,8 +66,6 @@ async function* runGatewayAgent(deps, message, channel, chatId, origin, attachme
 			channel,
 			metadata: webchatMetadata
 		});
-		if (/remote/i.test(executionContext.strategy ?? "")) outcomeEnvironment = "remote_runtime";
-		else if (/worktree/i.test(executionContext.strategy ?? "")) outcomeEnvironment = "worktree";
 		taskRun = TaskRunCoordinator.start({
 			runId,
 			context: executionContext,
@@ -81,11 +77,8 @@ async function* runGatewayAgent(deps, message, channel, chatId, origin, attachme
 		sessionKey: streamSessionKey,
 		channel
 	});
-	const outcomeCollector = new TurnOutcomeCollector(runId, outcomeEnvironment);
-	let outcomeFinalized = false;
 	let registeredActiveWebchatRun = false;
 	const captureTaskEvent = (event) => {
-		outcomeCollector.capture(event);
 		if (event.type === "task_plan_updated") {
 			taskRun?.capturePlan(event.payload.items);
 			return;
@@ -110,30 +103,6 @@ async function* runGatewayAgent(deps, message, channel, chatId, origin, attachme
 			yield event;
 		}
 	};
-	const finalizeOutcome = async (status, summary) => {
-		if (outcomeFinalized) return [];
-		outcomeFinalized = true;
-		const outcome = outcomeCollector.finalize(status, summary);
-		if (webchatSessionKey) try {
-			await sessionIndex.appendTranscriptCustomEntry(webchatSessionKey, {
-				customType: "turn_outcome",
-				data: outcome
-			});
-		} catch (err) {
-			log.warn({
-				err,
-				runId,
-				sessionKey: webchatSessionKey
-			}, `Turn outcome persistence failed: ${err instanceof Error ? err.message : String(err)}`);
-		}
-		return [{
-			type: "turn_outcome",
-			runId,
-			sessionKey: streamSessionKey,
-			timestamp: Date.now(),
-			payload: outcome
-		}];
-	};
 	try {
 		yield* emitAndYield(mapper.start());
 		if (channel === "webchat" && webchatSessionKey) {
@@ -173,7 +142,6 @@ async function* runGatewayAgent(deps, message, channel, chatId, origin, attachme
 				taskRunStatus = mergedSignal.aborted ? "cancelled" : "succeeded";
 				terminalStatus = endStatus;
 				taskRunSummary = endSummary;
-				yield* emitAndYield(await finalizeOutcome(endStatus, endSummary));
 				yield* emitAndYield(mapper.end(endStatus, endSummary));
 				completeRealtimeTopic(`run:${runId}`);
 				runTopicCompleted = true;
@@ -197,7 +165,6 @@ async function* runGatewayAgent(deps, message, channel, chatId, origin, attachme
 				taskRunSummary = em;
 				const errorContent = formatAgentRunErrorForClient(streamError);
 				yield* emitAndYield(mapper.error(errorContent));
-				yield* emitAndYield(await finalizeOutcome("error", streamError));
 				yield* emitAndYield(mapper.end("error", streamError));
 				completeRealtimeTopic(`run:${runId}`);
 				runTopicCompleted = true;
@@ -283,7 +250,6 @@ async function* runGatewayAgent(deps, message, channel, chatId, origin, attachme
 				presentation: "answer"
 			}
 		}]);
-		yield* emitAndYield(await finalizeOutcome("success", "Message processed"));
 		yield* emitAndYield(mapper.end("success", "Message processed"));
 		taskRunStatus = "succeeded";
 		taskRunSummary = "Message processed";
@@ -306,7 +272,6 @@ async function* runGatewayAgent(deps, message, channel, chatId, origin, attachme
 		}, `Agent run failed: ${em}`);
 		if (channel === "webchat" && !runTopicCompleted) {
 			yield* emitAndYield(mapper.error(formatAgentRunErrorForClient(em)));
-			yield* emitAndYield(await finalizeOutcome("error", em));
 			yield* emitAndYield(mapper.end("error", em));
 			completeRealtimeTopic(`run:${runId}`);
 			runTopicCompleted = true;