@xopcai/xopc 0.0.234 → 0.0.235

package/dist/src/gateway/hono/routes/file-references.js

@@ -0,0 +1,98 @@
+import { FileServiceError } from "../../../files/file-service.js";
+import { buildFilePathClassifierContext, classifyFileLocation, displayNameForPath, fileRefSessionKeysMatch, resolveFileReferenceCandidate } from "../../file-path-classifier.js";
+import { classifyFileReferenceFsError } from "../../file-reference-errors.js";
+import { FileReferenceRegistry } from "../../file-reference-registry.js";
+import { getGatewayFileSpaceService } from "../../file-space-service.js";
+import { realpath, stat } from "node:fs/promises";
+//#region src/gateway/hono/routes/file-references.ts
+/** Metadata and explicit desktop actions for links outside a managed workspace. */
+function registerFileReferenceRoutes(app, deps) {
+	const files = getGatewayFileSpaceService(deps.service);
+	const refs = new FileReferenceRegistry();
+	app.post("/api/files/resolve-reference", async (c) => {
+		const body = await c.req.json();
+		if (!body.spaceId || !body.path?.trim()) return c.json({ error: { message: "spaceId and path are required" } }, 400);
+		try {
+			const space = await files.get(body.spaceId);
+			const sessionKey = body.sessionKey?.trim();
+			const agentId = space.bindings.find((binding) => binding.kind === "agent")?.id;
+			const ctx = {
+				...buildFilePathClassifierContext(deps.service.currentConfig, sessionKey || (agentId ? `agent:${agentId}:main` : void 0)),
+				workspaceRoot: space.root
+			};
+			const inputPath = body.path.trim();
+			const base = {
+				inputPath,
+				displayName: displayNameForPath(inputPath)
+			};
+			const { candidate, invalid } = await resolveFileReferenceCandidate(inputPath, space.root, ctx);
+			if (!candidate || invalid) return c.json({ reference: {
+				...base,
+				scope: "invalid",
+				exists: false,
+				capabilities: []
+			} });
+			let absolutePath;
+			let info;
+			try {
+				absolutePath = await realpath(candidate);
+				info = await stat(absolutePath);
+			} catch (error) {
+				const failure = classifyFileReferenceFsError(error);
+				if (failure.code !== "FILE_NOT_FOUND") return c.json({ error: { message: failure.message } }, failure.status === 403 ? 403 : 500);
+				return c.json({ reference: {
+					...base,
+					scope: "missing",
+					absolutePath: candidate,
+					exists: false,
+					capabilities: ["copyPath"]
+				} });
+			}
+			const classified = classifyFileLocation(absolutePath, ctx);
+			const capabilities = info.isFile() || info.isDirectory() ? [
+				"openExternal",
+				"revealInFolder",
+				"copyPath"
+			] : ["copyPath"];
+			const ref = refs.register({
+				absolutePath,
+				sessionKey,
+				...classified,
+				capabilities
+			});
+			return c.json({ reference: {
+				...base,
+				...classified,
+				fileRefId: ref.id,
+				absolutePath,
+				exists: true,
+				isDirectory: info.isDirectory(),
+				capabilities,
+				mtimeMs: info.mtimeMs
+			} });
+		} catch (error) {
+			if (error instanceof FileServiceError) return c.json({ error: { message: error.message } }, error.status);
+			throw error;
+		}
+	});
+	app.post("/api/files/references/:id/action", async (c) => {
+		const ref = refs.resolve(c.req.param("id"));
+		if (!ref) return c.json({ error: { message: "File reference expired" } }, 404);
+		const body = await c.req.json();
+		if (!fileRefSessionKeysMatch(ref.sessionKey, body.sessionKey)) return c.json({ error: { message: "File reference forbidden" } }, 403);
+		if (body.action !== "openExternal" && body.action !== "revealInFolder" || !ref.capabilities.includes(body.action)) return c.json({ error: { message: "Action not allowed" } }, 403);
+		try {
+			if (await realpath(ref.absolutePath) !== ref.absolutePath) return c.json({ error: { message: "File reference changed" } }, 409);
+			const info = await stat(ref.absolutePath);
+			if (!info.isFile() && !info.isDirectory()) return c.json({ error: { message: "Not a file or directory" } }, 400);
+			return c.json({
+				absolutePath: ref.absolutePath,
+				isDirectory: info.isDirectory()
+			});
+		} catch {
+			return c.json({ error: { message: "File not found" } }, 404);
+		}
+	});
+}
+//#endregion
+export { registerFileReferenceRoutes };

package/dist/src/gateway/hono/routes/files.js

@@ -1,8 +1,10 @@
-import { FileServiceError, FileSpaceService, fileResourceFromPath, resolveFilePath } from "../../../files/file-service.js";
+import { FileServiceError, fileResourceFromPath, resolveFilePath } from "../../../files/file-service.js";
+import { getGatewayFileSpaceService } from "../../file-space-service.js";
+import { fuzzySearchWorkspaceFiles, fuzzySubsequenceScore } from "../../workspace-file-search.js";
+import { registerFileReferenceRoutes } from "./file-references.js";
 import { basename, join } from "node:path";
 import { readFile, writeFile } from "node:fs/promises";
 //#region src/gateway/hono/routes/files.ts
-const services = /* @__PURE__ */ new WeakMap();
 const mutationLocks = /* @__PURE__ */ new Map();
 async function withMutationLock(key, action) {
 	const previous = mutationLocks.get(key) ?? Promise.resolve();
@@ -20,13 +22,6 @@ async function withMutationLock(key, action) {
 		if (mutationLocks.get(key) === tail) mutationLocks.delete(key);
 	}
 }
-function getFiles(deps) {
-	const existing = services.get(deps.service);
-	if (existing) return existing;
-	const created = new FileSpaceService(() => deps.service.currentConfig, deps.service.projects, (sessionKey) => deps.service.agentService.getResolvedWorkspaceForSession(sessionKey));
-	services.set(deps.service, created);
-	return created;
-}
 function publicSpace(space) {
 	const { root: _root, ...value } = space;
 	return value;
@@ -39,22 +34,28 @@ function contentDisposition(disposition, fileName) {
 	const sanitized = fileName.replace(/[\u0000-\u001f\u007f]/g, "_");
 	return `${disposition}; filename="${sanitized.replace(/[^\x20-\x7e]/g, "_").replace(/["\\]/g, "_")}"; filename*=UTF-8''${encodeURIComponent(sanitized).replace(/['()*]/g, (character) => `%${character.charCodeAt(0).toString(16).toUpperCase()}`)}`;
 }
-async function collectFiles(files, spaceId, query, max) {
+async function collectFiles(files, spaceId, max) {
 	const output = [];
 	const directories = [""];
+	const visited = /* @__PURE__ */ new Set();
+	const space = await files.get(spaceId);
 	while (directories.length && output.length < max) {
 		const directory = directories.shift();
+		const canonical = await resolveFilePath(space.root, directory).catch(() => null);
+		if (!canonical || visited.has(canonical)) continue;
+		visited.add(canonical);
 		const children = await files.children(spaceId, directory);
 		for (const child of children) {
 			if (child.kind === "directory") directories.push(child.relativePath);
-			else if (!query || child.name.toLocaleLowerCase().includes(query)) output.push(child);
+			else output.push(child);
 			if (output.length >= max) break;
 		}
 	}
 	return output;
 }
 function registerFilesRoutes(authenticated, deps) {
-	const files = getFiles(deps);
+	const files = getGatewayFileSpaceService(deps.service);
+	registerFileReferenceRoutes(authenticated, deps);
 	authenticated.get("/api/files/spaces", async (c) => {
 		try {
 			return c.json({ spaces: (await files.list()).map(publicSpace) });
@@ -62,6 +63,13 @@ function registerFilesRoutes(authenticated, deps) {
 			return errorResponse(c, error);
 		}
 	});
+	authenticated.get("/api/files/default-space", async (c) => {
+		try {
+			return c.json({ space: publicSpace(await files.defaultSpace()) });
+		} catch (error) {
+			return errorResponse(c, error);
+		}
+	});
 	authenticated.get("/api/files/contexts/:kind/:id", async (c) => {
 		try {
 			const kind = c.req.param("kind");
@@ -82,7 +90,7 @@ function registerFilesRoutes(authenticated, deps) {
 		try {
 			const limit = Math.min(100, Math.max(1, Number(c.req.query("limit")) || 50));
 			const spaces = await files.list();
-			const items = (await Promise.all(spaces.map((space) => collectFiles(files, space.id, "", 5e3)))).flat().sort((a, b) => b.modifiedAt - a.modifiedAt).slice(0, limit);
+			const items = (await Promise.all(spaces.map((space) => collectFiles(files, space.id, 5e3)))).flat().sort((a, b) => b.modifiedAt - a.modifiedAt).slice(0, limit);
 			return c.json({ items });
 		} catch (error) {
 			return errorResponse(c, error);
@@ -91,11 +99,23 @@ function registerFilesRoutes(authenticated, deps) {
 	authenticated.get("/api/files/search", async (c) => {
 		try {
 			const query = (c.req.query("q") ?? "").trim().toLocaleLowerCase();
-			if (!query) return c.json({ items: [] });
 			const limit = Math.min(100, Math.max(1, Number(c.req.query("limit")) || 50));
 			const requestedSpaceId = c.req.query("spaceId");
 			const spaces = requestedSpaceId ? [await files.get(requestedSpaceId)] : await files.list();
-			const items = (await Promise.all(spaces.map((space) => collectFiles(files, space.id, query, 5e3)))).flat().sort((a, b) => b.modifiedAt - a.modifiedAt).slice(0, limit);
+			const items = (await Promise.all(spaces.map(async (space) => {
+				const candidates = await fuzzySearchWorkspaceFiles(space.root, query, limit);
+				return Promise.all(candidates.map(async (candidate) => {
+					try {
+						return await fileResourceFromPath(space, await resolveFilePath(space.root, candidate.path));
+					} catch (error) {
+						if (error instanceof FileServiceError) return null;
+						throw error;
+					}
+				}));
+			}))).flat().filter((file) => file !== null).map((file) => ({
+				file,
+				score: Math.max(fuzzySubsequenceScore(query, file.relativePath) ?? -Infinity, fuzzySubsequenceScore(query, file.name) ?? -Infinity)
+			})).sort((a, b) => b.score - a.score || a.file.relativePath.localeCompare(b.file.relativePath)).slice(0, limit).map((row) => row.file);
 			return c.json({ items });
 		} catch (error) {
 			return errorResponse(c, error);
@@ -144,12 +164,14 @@ function registerFilesRoutes(authenticated, deps) {
 			const body = await c.req.json();
 			if (typeof body.content !== "string" || !body.revision) throw new FileServiceError(400, "content and revision are required");
 			const id = c.req.param("id");
-			const resource = await withMutationLock(id, async () => {
+			const initial = await files.resource(id);
+			const resource = await withMutationLock(initial.absolutePath, async () => {
 				const current = await files.resource(id);
+				if (current.absolutePath !== initial.absolutePath) throw new FileServiceError(409, "File has changed");
 				if (!current.resource.capabilities.includes("edit")) throw new FileServiceError(403, "File is not editable");
 				if (body.revision !== current.resource.revision) throw new FileServiceError(409, "File has changed");
 				await writeFile(current.absolutePath, body.content, "utf8");
-				return fileResourceFromPath(current.space, current.absolutePath);
+				return (await files.resource(id)).resource;
 			});
 			return c.json({ resource });
 		} catch (error) {

package/dist/src/gateway/hono/routes/html-preview.d.ts

@@ -0,0 +1,4 @@
+import type { Hono } from 'hono';
+export declare const HTML_PREVIEW_PATH = "/api/preview/html";
+/** Public static shell only: file contents arrive from the authenticated UI, never a URL. */
+export declare function registerPublicHtmlPreviewRoute(app: Hono): void;

package/dist/src/gateway/hono/routes/html-preview.js

@@ -0,0 +1,45 @@
+//#region src/gateway/hono/routes/html-preview.ts
+const HTML_PREVIEW_PATH = "/api/preview/html";
+const HTML_PREVIEW_SANDBOX = "allow-scripts allow-popups allow-popups-to-escape-sandbox allow-downloads allow-forms allow-modals";
+const HTML_PREVIEW_CSP = [
+	"default-src 'none'",
+	`sandbox ${HTML_PREVIEW_SANDBOX}`,
+	"script-src 'unsafe-inline' https: blob:",
+	"style-src 'unsafe-inline' https:",
+	"img-src https: data: blob:",
+	"media-src https: data: blob:",
+	"font-src https: data:",
+	"connect-src https:",
+	"frame-src 'self' about:",
+	"frame-ancestors 'self'",
+	"base-uri 'none'",
+	"object-src 'none'",
+	"form-action https:"
+].join("; ");
+const HTML_PREVIEW_SHELL = `<!doctype html>
+<html><head><meta charset="utf-8"><title>HTML preview</title>
+<style>html,body{height:100%;margin:0;overflow:hidden}iframe{display:block;width:100%;height:100%;border:0}</style>
+</head><body><iframe title="HTML preview" sandbox="${HTML_PREVIEW_SANDBOX}"></iframe>
+<script>
+const preview = document.querySelector('iframe');
+window.addEventListener('message', (event) => {
+  if (event.source !== window.parent || window.parent === window) return;
+  const data = event.data;
+  if (!data || data.type !== 'xopc-html-preview' || typeof data.html !== 'string') return;
+  // Repeated load notifications must not restart scripts or discard preview state.
+  if (preview.srcdoc !== data.html) preview.srcdoc = data.html;
+});
+<\/script></body></html>`;
+/** Public static shell only: file contents arrive from the authenticated UI, never a URL. */
+function registerPublicHtmlPreviewRoute(app) {
+	app.get(HTML_PREVIEW_PATH, (c) => c.html(HTML_PREVIEW_SHELL, 200, {
+		"Content-Security-Policy": HTML_PREVIEW_CSP,
+		"X-Frame-Options": "SAMEORIGIN",
+		"X-Content-Type-Options": "nosniff",
+		"Referrer-Policy": "no-referrer",
+		"Permissions-Policy": "camera=(), microphone=(), geolocation=()",
+		"Cache-Control": "no-store"
+	}));
+}
+//#endregion
+export { HTML_PREVIEW_PATH, registerPublicHtmlPreviewRoute };

package/dist/src/gateway/hono/routes/shares.js

@@ -1,5 +1,6 @@
 import { loadCompactionSourceSnapshot } from "../../../storage/sqlite/transcript-repository.js";
 import "../../../storage/sqlite/index.js";
+import { FileServiceError } from "../../../files/file-service.js";
 import { resolveGatewayEffectiveHost } from "../../../config/gateway-bind.js";
 import { SHARE_CONFIG_DEFAULTS } from "../../../share/share-types.js";
 import { resolveSiteShareConfig } from "../../../share/site-share-config.js";
@@ -11,6 +12,7 @@ import { resolveReverseProxyPublicUrl } from "../../public-url.js";
 import { audienceDefaults, cleanupStagedSite, decideShareKind, forgetStagedSite, makeDescription, makeTitle, probeShareTarget, rememberStagedSite, stageSingleHtmlAsSite } from "../../../share/share-auto.js";
 import { deleteThumbnail, placeholderSvg, readThumbnail, scheduleThumbnail, thumbnailContentType, thumbnailExists } from "../../../share/share-thumbnail.js";
 import { extractToken } from "../../auth.js";
+import { getGatewayFileSpaceService } from "../../file-space-service.js";
 import { getClientIpFromHeaders } from "../../security/loopback.js";
 import { renderFolderLandingPage, renderShareExpiredPage, renderShareLandingPage, renderSnapshotShareLandingPage } from "../../../share/share-landing.js";
 import { SessionShareService, SessionShareSnapshotConflictError } from "../../../share/session-share-service.js";
@@ -902,10 +904,11 @@ function registerShareRoutes(authenticated, deps) {
 				error: { message: "Invalid JSON" }
 			}, 400);
 		}
-		const path = typeof body.path === "string" ? body.path.trim() : "";
-		if (!path) return c.json({
+		const fileId = typeof body.fileId === "string" ? body.fileId.trim() : "";
+		let path = typeof body.path === "string" ? body.path.trim() : "";
+		if (!fileId && !path) return c.json({
 			ok: false,
-			error: { message: "Missing path" }
+			error: { message: "Missing path or fileId" }
 		}, 400);
 		const sessionKey = typeof body.sessionKey === "string" ? body.sessionKey.trim() : void 0;
 		const agentId = typeof body.agentId === "string" ? body.agentId.trim() : void 0;
@@ -921,20 +924,25 @@ function registerShareRoutes(authenticated, deps) {
 		const ttlOverride = typeof body.ttlMs === "number" ? body.ttlMs : void 0;
 		const maxViewsOverride = body.maxViews === null ? null : typeof body.maxViews === "number" ? body.maxViews : void 0;
 		const wantThumbnail = body.thumbnail !== false;
-		const workspaceRoot = await resolveWorkspaceRootForShare(service, sessionKey, agentId);
-		if (!workspaceRoot) return c.json({
-			ok: false,
-			error: { message: "Workspace not configured" }
-		}, 400);
+		let workspaceRoot;
 		let probe;
 		try {
+			if (fileId) {
+				const target = await getGatewayFileSpaceService(service).resource(fileId);
+				workspaceRoot = target.space.root;
+				path = target.resource.relativePath || ".";
+			} else workspaceRoot = await resolveWorkspaceRootForShare(service, sessionKey, agentId);
+			if (!workspaceRoot) return c.json({
+				ok: false,
+				error: { message: "Workspace not configured" }
+			}, 400);
 			probe = await probeShareTarget(workspaceRoot, path);
 		} catch (err) {
 			const message = err instanceof Error ? err.message : String(err);
 			return c.json({
 				ok: false,
 				error: { message }
-			}, 400);
+			}, err instanceof FileServiceError ? err.status : 400);
 		}
 		let decision;
 		try {
@@ -1438,7 +1446,7 @@ async function createFileShareResponse(args) {
 }
 function relPathFromAbs(workspaceRoot, abs) {
 	const root = workspaceRoot.replace(/[\\/]+$/, "");
-	if (abs === root) return "";
+	if (abs === root) return ".";
 	if (abs.startsWith(`${root}/`)) return abs.slice(root.length + 1);
 	if (abs.startsWith(`${root}\\`)) return abs.slice(root.length + 1).replace(/\\/g, "/");
 	return abs.split(/[\\/]/).pop() ?? abs;

package/dist/src/gateway/hono/routes/tasks.js

@@ -1,12 +1,12 @@
 import { runSqliteWriteTransaction } from "../../../storage/sqlite/transaction.js";
+import { TaskPhaseSchema } from "../../../../packages/gateway-contract/src/task-lifecycle.js";
+import { TaskBoardPositionRequestSchema, TaskCommandRequestSchema, TaskContextInputSchema, TaskCreateRequestSchema, TaskDependencyUpdateRequestSchema, TaskHandoffRequestSchema, TaskPatchRequestSchema } from "../../../../packages/gateway-contract/src/tasks.js";
+import { ProjectMonitoringUpdateSchema } from "../../../../packages/gateway-contract/src/project-monitoring.js";
 import { TaskRepository } from "../../../tasks/task-repository.js";
 import { TaskConversationRepository } from "../../../tasks/task-conversation-repository.js";
 import { enqueueTaskChangedEvent } from "../../../tasks/task-change-events.js";
 import { TaskRunRepository } from "../../../tasks/task-run-repository.js";
 import { TaskReadModelProjector } from "../../../tasks/task-read-model-projector.js";
-import { TaskPhaseSchema } from "../../../../packages/gateway-contract/src/task-lifecycle.js";
-import { TaskBoardPositionRequestSchema, TaskCommandRequestSchema, TaskContextInputSchema, TaskCreateRequestSchema, TaskDependencyUpdateRequestSchema, TaskHandoffRequestSchema, TaskPatchRequestSchema } from "../../../../packages/gateway-contract/src/tasks.js";
-import { ProjectMonitoringUpdateSchema } from "../../../../packages/gateway-contract/src/project-monitoring.js";
 import { resolveProjectAgentId } from "../../../projects/project-agent.js";
 import { TaskContextRepository } from "../../../tasks/task-context-repository.js";
 import { TaskDependencyError, TaskDependencyService } from "../../../tasks/task-dependency-service.js";

package/dist/src/gateway/security/csp.d.ts

@@ -11,7 +11,7 @@ export declare function computeInlineScriptHashes(html: string): string[];
  * - `style-src 'self' 'unsafe-inline'` (Tailwind + runtime style injection)
  * - `media-src 'self' blob:` (chat voice previews / recorded clips use blob URLs)
  * - `frame-ancestors 'none'` (prevent clickjacking)
- * - `frame-src 'none'` (the console never embeds frames)
+ * - `frame-src 'self'` (sandboxed previews and extension UI)
  * - `form-action 'self'` (prevent form submissions to untrusted origins)
  * - `base-uri 'none'` (prevent base tag hijacking)
  * - `object-src 'none'` (prevent plugin execution)

package/dist/src/gateway/security/csp.js

@@ -29,7 +29,7 @@ function hasSrcAttribute(openTag) {
 * - `style-src 'self' 'unsafe-inline'` (Tailwind + runtime style injection)
 * - `media-src 'self' blob:` (chat voice previews / recorded clips use blob URLs)
 * - `frame-ancestors 'none'` (prevent clickjacking)
-* - `frame-src 'none'` (the console never embeds frames)
+* - `frame-src 'self'` (sandboxed previews and extension UI)
 * - `form-action 'self'` (prevent form submissions to untrusted origins)
 * - `base-uri 'none'` (prevent base tag hijacking)
 * - `object-src 'none'` (prevent plugin execution)
@@ -41,7 +41,7 @@ function buildGatewayConsoleCspHeader(options) {
 		"base-uri 'none'",
 		"object-src 'none'",
 		"frame-ancestors 'none'",
-		"frame-src 'none'",
+		"frame-src 'self'",
 		"form-action 'self'",
 		hashes?.length ? `script-src 'self' ${hashes.map((hash) => `'${hash}'`).join(" ")}` : "script-src 'self'",
 		"style-src 'self' 'unsafe-inline'",

package/dist/src/gateway/service.js

@@ -18,6 +18,9 @@ import { loadConfig, saveConfig } from "../config/loader.js";
 import { buildSessionKey, init_session_key, sanitizeSegment } from "../routing/session-key.js";
 import { getDefaultAgentId, init_resolve_route } from "../routing/resolve-route.js";
 import { init_providers, providers_exports } from "../providers/index.js";
+import { AutomationService } from "../automations/service/automation-service.js";
+import { onAutomationProductEvent, publishAutomationProductEvent } from "../automations/product-events.js";
+import "../automations/index.js";
 import { TaskRepository } from "../tasks/task-repository.js";
 import { TaskConversationRepository } from "../tasks/task-conversation-repository.js";
 import { disposeAllSessionMcpRuntimes } from "../agent/mcp/bundle-mcp-runtime.js";
@@ -25,9 +28,6 @@ import { ProjectService } from "../projects/project-service.js";
 import { resolveProjectAgentId } from "../projects/project-agent.js";
 import "../projects/index.js";
 import { resolveEffectiveGatewayPort } from "./host.js";
-import { AutomationService } from "../automations/service/automation-service.js";
-import { onAutomationProductEvent, publishAutomationProductEvent } from "../automations/product-events.js";
-import "../automations/index.js";
 import { TaskApplicationService } from "../tasks/task-application-service.js";
 import { ProactiveScenarioService } from "../proactive/scenarios/service.js";
 import { TaskOutboxDispatcher } from "../tasks/task-outbox-dispatcher.js";
@@ -45,11 +45,11 @@ import { MessageBus, MessageBusShutdownError } from "../infra/bus/queue.js";
 import "../infra/bus/index.js";
 import { AgentService } from "../agent/service.js";
 import { ensureStarterAgentsInitialized } from "../agent/starter-agents.js";
+import { getWorkspacePath } from "../config/workspace-path-helpers.js";
+import "../config/index.js";
 import { setPairingBroadcastSink } from "../channels/pairing/pairing-events.js";
 import { registerClarifyBridge } from "./clarify-runtime.js";
 import { ChannelManager } from "../channels/manager.js";
-import { getWorkspacePath } from "../config/workspace-path-helpers.js";
-import "../config/index.js";
 import { ManagedComposioEventPoller } from "../connectors/composio-managed-events.js";
 import { startConnectedKnowledgeCoordinator } from "../knowledge/coordinator.js";
 import "../knowledge/index.js";

package/dist/src/heartbeat/index.js

@@ -1,6 +1,6 @@
 import { DEFAULT_ACK_MAX_CHARS, HEARTBEAT_OK, NO_REPLY, shouldSilence, stripHeartbeatToken } from "./tokens.js";
-import { appendCronEventLines } from "./event-prompt.js";
 import { isWithinActiveHours } from "./active-hours.js";
 import { isHeartbeatContentEmpty } from "./content-check.js";
+import { appendCronEventLines } from "./event-prompt.js";
 import { createHeartbeatWake } from "./wake.js";
 export { DEFAULT_ACK_MAX_CHARS, HEARTBEAT_OK, NO_REPLY, appendCronEventLines, createHeartbeatWake, isHeartbeatContentEmpty, isWithinActiveHours, shouldSilence, stripHeartbeatToken };

package/dist/src/infra/update-restart.js

@@ -2,8 +2,8 @@ import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
 import { init_paths, resolveConfigPath } from "../config/paths.js";
 import { init_loader, loadConfig } from "../config/loader.js";
-import { isRestartEnabled } from "../config/commands.flags.js";
 import { resolveGatewayService } from "../daemon/service.js";
+import { isRestartEnabled } from "../config/commands.flags.js";
 import { authorizeGatewaySigusr1Restart, writeGatewayRestartIntentSync } from "./restart.js";
 import { findVerifiedGatewayListenerPidsOnPortSync, signalVerifiedGatewayPidSync } from "./gateway-processes.js";
 import { refreshGatewayServiceAfterUpdate } from "./update-service-refresh.js";

package/dist/src/storage/sqlite/config-repository.d.ts

@@ -1,5 +1,10 @@
 import type { SessionAgentConfig } from '../../session/config-types.js';
 export declare function getSessionConfig(sessionKey: string): SessionAgentConfig | null;
+/** Persisted file locations must be discoverable before a session runs again. */
+export declare function listSessionWorkspaceOverrides(): Array<{
+    sessionKey: string;
+    workingDirectoryOverride: string;
+}>;
 export declare function setSessionConfig(sessionKey: string, config: SessionAgentConfig, cwd: string): SessionAgentConfig;
 export declare function updateSessionConfig(sessionKey: string, partial: Partial<SessionAgentConfig>, cwd: string): SessionAgentConfig;
 export declare function deleteSessionConfig(sessionKey: string): void;

package/dist/src/storage/sqlite/config-repository.js

@@ -13,6 +13,13 @@ function getSessionConfig(sessionKey) {
 	if (!row) return null;
 	return sessionConfigRowToConfig(row);
 }
+/** Persisted file locations must be discoverable before a session runs again. */
+function listSessionWorkspaceOverrides() {
+	return getSqliteDatabase().prepare(`
+    SELECT session_key AS sessionKey, working_directory_override AS workingDirectoryOverride
+    FROM session_config WHERE length(trim(working_directory_override)) > 0
+  `).all();
+}
 function setSessionConfig(sessionKey, config, cwd) {
 	return runSqliteWriteTransaction((db) => {
 		ensureSessionInTransaction(db, sessionKey, cwd);
@@ -54,4 +61,4 @@ function hasSessionConfig(sessionKey) {
 	return getSqliteDatabase().prepare(`SELECT 1 AS ok FROM session_config WHERE session_key = ?`).get(sessionKey)?.ok === 1;
 }
 //#endregion
-export { deleteSessionConfig, getSessionConfig, hasSessionConfig, setSessionConfig, updateSessionConfig };
+export { deleteSessionConfig, getSessionConfig, hasSessionConfig, listSessionWorkspaceOverrides, setSessionConfig, updateSessionConfig };

package/dist/src/tasks/home-query-service.js

@@ -2,10 +2,10 @@ import { isHomeAttentionAcknowledged } from "../storage/sqlite/home-attention-re
 import { getRelationshipSettings } from "../storage/sqlite/relationship-settings-repository.js";
 import { listConnectorApprovals } from "../storage/sqlite/connector-repository.js";
 import "../storage/sqlite/index.js";
-import { TaskRepository } from "./task-repository.js";
-import { TaskReadModelProjector } from "./task-read-model-projector.js";
 import "../automations/domain/defaults.js";
 import "../automations/index.js";
+import { TaskRepository } from "./task-repository.js";
+import { TaskReadModelProjector } from "./task-read-model-projector.js";
 import { AttentionGovernor } from "./attention-governor.js";
 import { listGatewayAgents } from "../gateway/agents-admin.js";
 //#region src/tasks/home-query-service.ts

package/dist/src/tasks/task-signal-service.js

@@ -1,7 +1,7 @@
 import { getSqliteDatabase } from "../storage/sqlite/transaction.js";
+import { TaskExecutorSelectionSchema } from "../../packages/gateway-contract/src/tasks.js";
 import { TaskRepository } from "./task-repository.js";
 import { TaskRunRepository } from "./task-run-repository.js";
-import { TaskExecutorSelectionSchema } from "../../packages/gateway-contract/src/tasks.js";
 import { TaskApplicationService } from "./task-application-service.js";
 import { randomUUID } from "node:crypto";
 //#region src/tasks/task-signal-service.ts

package/dist/src/tui/backends/embedded-backend.js

@@ -23,9 +23,9 @@ import { parseModelRef } from "../../agent/models/selection.js";
 import { buildReviewContext, resolveGitRoot } from "../../review/review-git.js";
 import { MessageBus, MessageBusShutdownError } from "../../infra/bus/queue.js";
 import "../../infra/bus/index.js";
-import { prependEnvelopeTimestamp } from "../../channels/envelope-timestamp.js";
 import { getWorkspacePath } from "../../config/workspace-path-helpers.js";
 import "../../config/index.js";
+import { prependEnvelopeTimestamp } from "../../channels/envelope-timestamp.js";
 import { buildWorkflowChildTools } from "../../agent/workflow/workflow-child-tools.js";
 import { WorkflowRunService } from "../../workflows/service/workflow-run-service.js";
 import { WorkflowSessionBridge } from "../../workflows/service/workflow-session-bridge.js";

package/dist/src/workflows/service/workflow-run-service.js

@@ -1,11 +1,11 @@
 import { getDefaultAgentId, init_resolve_route } from "../../routing/resolve-route.js";
 import { init_providers, resolveModel } from "../../providers/index.js";
+import { publishAutomationProductEvent } from "../../automations/product-events.js";
 import { extractProfileAgentId, resolveEffectiveAgentProfileForSession } from "../../config/agent-profile.js";
 import { TaskRepository } from "../../tasks/task-repository.js";
 import { TaskConversationRepository } from "../../tasks/task-conversation-repository.js";
 import { TaskRunRepository } from "../../tasks/task-run-repository.js";
 import { getProjectWorkspacePathForSession } from "../../projects/workspace.js";
-import { publishAutomationProductEvent } from "../../automations/product-events.js";
 import { TaskContextRepository } from "../../tasks/task-context-repository.js";
 import { TaskApplicationService } from "../../tasks/task-application-service.js";
 import { resolveModelSelector } from "../../config/agent-model-intents.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xopcai/xopc",
-  "version": "0.0.234",
+  "version": "0.0.235",
   "description": "Local-first personal AI assistant with reviewable user understanding, durable tasks, workflows, automations, and local or cloud models.",
   "type": "module",
   "main": "dist/src/index.js",
@@ -163,10 +163,10 @@
     "vitepress": "^1.6.4",
     "vitest": "4.1.5",
     "vue": "^3.5.35",
-    "@xopcai/gateway-contract": "0.0.0",
-    "@xopcai/realtime-protocol": "0.0.0",
     "@xopcai/endpoint-tools-protocol": "0.0.0",
-    "@xopcai/realtime-client": "0.0.0"
+    "@xopcai/realtime-protocol": "0.0.0",
+    "@xopcai/realtime-client": "0.0.0",
+    "@xopcai/gateway-contract": "0.0.0"
   },
   "scripts": {
     "assets:brand": "node scripts/generate-brand-assets.mjs",

package/dist/gateway/static/root/assets/settings-advanced-gate-DlYBA2N-.js

@@ -1 +0,0 @@
-import{$n as e}from"./index-CXGQihfj.js";function t(t){let{children:n,fallback:r}=t,i=r===void 0?null:r;return e()?n:i}export{t};