@xopcai/xopc 0.0.235 → 0.0.239

package/dist/src/gateway/hono/routes/sessions.js

@@ -3,8 +3,12 @@ import { resolveProjectAgentId } from "../../../projects/project-agent.js";
 import "../../../projects/index.js";
 import { evictEmbeddedSessionRunner } from "../../../agent/embedded/session-runner.js";
 import { messagesToClientHistory } from "../../../session/client-history.js";
+import { SessionEnvironmentService } from "../../../execution-environments/session-environment-service.js";
 import { deleteMediaUrisNoLongerReferenced } from "../../../media/session-references.js";
+import { getGatewayPrincipal } from "../../security/gateway-principal.js";
 import { createGatewayRouteLogger, logRouteError } from "../lib/route-logger.js";
+import { patchChatModelConfig } from "./chat-model-config.js";
+import { getSessionContextSummary } from "../../session-context-summary.js";
 import { respondStartupUnavailable } from "../lib/startup-unavailable.js";
 import { randomUUID } from "node:crypto";
 //#region src/gateway/hono/routes/sessions.ts
@@ -21,6 +25,9 @@ const DEFAULT_SIDEBAR_STALE_DAYS = 60;
 function isSessionType(value) {
 	return SESSION_TYPES.has(value);
 }
+function parseExecutionMode(value) {
+	return value === "local_checkout" || value === "managed_worktree" ? value : void 0;
+}
 function ensureGatewayReadyForSessions(c, service, method) {
 	if (service.isGatewayReady()) return null;
 	return respondStartupUnavailable(c, method);
@@ -60,6 +67,14 @@ function buildDirectSessionMetadata(params) {
 }
 function registerSessionsRoutes(authenticated, deps) {
 	const { service } = deps;
+	const environments = new SessionEnvironmentService();
+	authenticated.get("/api/sessions/:key/context-summary", async (c) => {
+		const blocked = ensureGatewayReadyForSessions(c, service, "sessions.list");
+		if (blocked) return blocked;
+		c.header("Cache-Control", "no-store");
+		const summary = await getSessionContextSummary(service.currentConfig, c.req.param("key"), getGatewayPrincipal(c).scopes);
+		return summary ? c.json({ summary }) : c.json({ error: "Session not found" }, 404);
+	});
 	authenticated.get("/api/session-runs", (c) => {
 		const blocked = ensureGatewayReadyForSessions(c, service, "sessions.list");
 		if (blocked) return blocked;
@@ -132,10 +147,16 @@ function registerSessionsRoutes(authenticated, deps) {
 		const channel = typeof body.channel === "string" && body.channel.trim() ? body.channel.trim() : "webchat";
 		const projectId = typeof body.projectId === "string" && body.projectId.trim() ? body.projectId.trim() : void 0;
 		const routingCfg = service.currentConfig;
-		if (projectId && !service.projects.get(projectId)) return c.json({
+		const project = projectId ? service.projects.get(projectId) : null;
+		if (projectId && !project) return c.json({
 			ok: false,
 			error: "Project not found"
 		}, 404);
+		const requestedExecutionMode = parseExecutionMode(body.executionMode);
+		if (body.executionMode !== void 0 && !requestedExecutionMode) return c.json({
+			ok: false,
+			error: "Invalid execution mode"
+		}, 400);
 		const agentId = resolveProjectAgentId({
 			config: routingCfg,
 			projects: service.projects,
@@ -150,13 +171,34 @@ function registerSessionsRoutes(authenticated, deps) {
 			peerKind: "direct",
 			peerId: chatId
 		});
-		await service.sessionIndexInstance.saveMessages(sessionKey, [], { metadata: buildDirectSessionMetadata({
-			agentId,
-			source: channel,
-			accountId: "default",
-			peerId: chatId
-		}) });
-		if (projectId) service.projects.attachSession(sessionKey, projectId);
+		let environment;
+		if (project && (project.workspaceRoot?.trim() || requestedExecutionMode)) try {
+			environment = await environments.attach({
+				sessionKey,
+				project,
+				mode: requestedExecutionMode,
+				baseRef: typeof body.baseRef === "string" ? body.baseRef : void 0
+			});
+		} catch (error) {
+			return c.json({
+				ok: false,
+				code: "execution_environment_unavailable",
+				error: error instanceof Error ? error.message : String(error)
+			}, 409);
+		}
+		try {
+			await service.sessionIndexInstance.saveMessages(sessionKey, [], { metadata: buildDirectSessionMetadata({
+				agentId,
+				source: channel,
+				accountId: "default",
+				peerId: chatId
+			}) });
+			if (projectId) service.projects.attachSession(sessionKey, projectId);
+		} catch (error) {
+			await service.sessions.delete(sessionKey).catch(() => void 0);
+			await environments.release(sessionKey).catch(() => void 0);
+			throw error;
+		}
 		const rawInitialConfig = body.initialAgentConfig && typeof body.initialAgentConfig === "object" ? body.initialAgentConfig : {};
 		const model = typeof rawInitialConfig.model === "string" && rawInitialConfig.model.trim() ? rawInitialConfig.model.trim() : void 0;
 		const thinkingLevel = typeof rawInitialConfig.thinkingLevel === "string" && rawInitialConfig.thinkingLevel.trim() ? rawInitialConfig.thinkingLevel.trim() : void 0;
@@ -165,15 +207,47 @@ function registerSessionsRoutes(authenticated, deps) {
 			...thinkingLevel ? { thinkingLevel } : {},
 			...body.temporary === true ? { userContextMode: "temporary" } : {}
 		};
+		if (channel === "webchat" && model) {
+			const result = await service.sessions.initializeChatModel(sessionKey, model, thinkingLevel);
+			if (!result.ok) {
+				await service.sessions.delete(sessionKey).catch(() => void 0);
+				await environments.release(sessionKey).catch((error) => {
+					log.warn({
+						err: error,
+						sessionKey
+					}, "Invalid new session model and execution environment cleanup failed");
+				});
+				return c.json({
+					ok: false,
+					error: result.error
+				}, 400);
+			}
+			delete initialAgentConfig.model;
+			delete initialAgentConfig.thinkingLevel;
+		}
 		if (Object.keys(initialAgentConfig).length > 0) {
 			const result = await service.sessions.patchAgentConfig(sessionKey, initialAgentConfig);
-			if (!result.ok) return c.json({
-				ok: false,
-				error: result.error
-			}, 400);
+			if (!result.ok) {
+				await service.sessions.delete(sessionKey).catch(() => void 0);
+				await environments.release(sessionKey).catch((error) => {
+					log.warn({
+						err: error,
+						sessionKey
+					}, "Invalid new session config and execution environment cleanup failed");
+				});
+				return c.json({
+					ok: false,
+					error: result.error
+				}, 400);
+			}
 		}
 		const session = await service.sessions.getSession(sessionKey);
-		return c.json({ session }, 201);
+		const agentConfig = channel === "webchat" ? await service.sessions.getFixedAgentConfig(sessionKey) : void 0;
+		return c.json({
+			session,
+			agentConfig,
+			...environment ? { environment } : {}
+		}, 201);
 	});
 	authenticated.get("/api/sessions", async (c) => {
 		const blocked = ensureGatewayReadyForSessions(c, service, "sessions.list");
@@ -253,21 +327,14 @@ function registerSessionsRoutes(authenticated, deps) {
 	});
 	authenticated.get("/api/sessions/:key/agent-config", async (c) => {
 		const key = c.req.param("key");
-		const payload = await service.sessions.getAgentConfig(key);
+		const payload = await service.sessions.getFixedAgentConfig(key);
 		return c.json({
 			ok: true,
 			payload
 		});
 	});
 	authenticated.patch("/api/sessions/:key/agent-config", async (c) => {
-		const key = c.req.param("key");
-		const body = await c.req.json().catch(() => ({}));
-		const result = await service.sessions.patchAgentConfig(key, body);
-		if (!result.ok) return c.json({
-			ok: false,
-			error: result.error
-		}, 400);
-		return c.json({ ok: true });
+		return patchChatModelConfig(c, service, c.req.param("key"), await c.req.json().catch(() => ({})));
 	});
 	authenticated.get("/api/sessions/:key/messages", async (c) => {
 		const blocked = ensureGatewayReadyForSessions(c, service, "sessions.messages");
@@ -574,6 +641,12 @@ function registerSessionsRoutes(authenticated, deps) {
 				ok: false,
 				error: "Project not found"
 			}, 404);
+			const currentProjectId = (await service.sessions.getSession(key))?.projectId ?? null;
+			if (requestedProjectId !== currentProjectId && environments.get(key)) return c.json({
+				ok: false,
+				code: "execution_environment_active",
+				error: "Release the session execution environment before changing its project"
+			}, 409);
 		}
 		const result = await service.sessions.patch(key, patch);
 		if (result.ok === false) return c.json({
@@ -747,7 +820,17 @@ function registerSessionsRoutes(authenticated, deps) {
 	});
 	authenticated.delete("/api/sessions/:key", async (c) => {
 		const key = c.req.param("key");
+		if (environments.get(key) && service.getActiveWebchatRunId(key)) return c.json({
+			ok: false,
+			error: "Stop the active session run before deleting its environment"
+		}, 409);
 		const result = await service.sessions.delete(key);
+		if (result.deleted) await environments.release(key).catch((error) => {
+			log.warn({
+				err: error,
+				sessionKey: key
+			}, "Session deleted but execution environment cleanup failed");
+		});
 		return c.json(result);
 	});
 	authenticated.post("/api/sessions/:key/archive", async (c) => {

package/dist/src/gateway/hono/routes/tasks.js

@@ -18,6 +18,7 @@ import { TaskHandoffService } from "../../../tasks/task-handoff-service.js";
 import { TaskDeletionService } from "../../../tasks/task-deletion-service.js";
 import { TaskSignalService } from "../../../tasks/task-signal-service.js";
 import { submitSessionInput } from "./session-input-handler.js";
+import { patchChatModelConfig } from "./chat-model-config.js";
 import { TaskConversationQueryService } from "../../service/task-conversation-query-service.js";
 //#region src/gateway/hono/routes/tasks.ts
 function registerTaskRoutes(authenticated, deps) {
@@ -219,25 +220,16 @@ function registerTaskRoutes(authenticated, deps) {
 	});
 	authenticated.patch("/api/tasks/:id/conversation/config", taskRateLimit, async (c) => {
 		const body = await c.req.json().catch(() => null);
-		const model = typeof body?.model === "string" ? body.model.trim() : "";
-		if (!model) return c.json({
+		if (!body) return c.json({
 			ok: false,
-			error: "Missing model"
+			error: "Invalid configuration"
 		}, 400);
 		const active = conversations.getActiveSession(c.req.param("id"));
 		if (!active?.sessionKey) return c.json({
 			ok: false,
 			error: "Task has no active conversation"
 		}, 404);
-		const result = await deps.service.sessions.patchAgentConfig(active.sessionKey, { model });
-		if (!result.ok) return c.json({
-			ok: false,
-			error: result.error
-		}, 400);
-		return c.json({
-			ok: true,
-			activeSessionKey: active.sessionKey
-		});
+		return patchChatModelConfig(c, deps.service, active.sessionKey, body);
 	});
 	authenticated.get("/api/tasks/:id/conversation/history", async (c) => {
 		const parsedLimit = Number.parseInt(c.req.query("limit") ?? "50", 10);

package/dist/src/gateway/mobile-privacy.d.ts

@@ -0,0 +1,7 @@
+import type { MobilePrivacyDisclosure, MobilePrivacyRecipient } from '@xopcai/gateway-contract';
+import type { Config } from '../config/schema.js';
+/** Only expose origins: provider URLs can contain credentials, query tokens and tenant paths. */
+export declare function privacyRecipientOrigin(value: unknown): string | undefined;
+export declare function buildMobilePrivacyDisclosure(recipients: MobilePrivacyRecipient[]): MobilePrivacyDisclosure;
+/** Catalog of potential recipients, including configured fallbacks, without content or credentials. */
+export declare function getMobilePrivacyDisclosure(config: Config): Promise<MobilePrivacyDisclosure>;

package/dist/src/gateway/mobile-privacy.js

@@ -0,0 +1,102 @@
+import { getProviderRegistry, init_plugin_registry } from "../providers/plugin-registry.js";
+import { PROVIDER_META, getAvailableModels, init_providers } from "../providers/index.js";
+import { resolveSpeechProviderChain } from "../voice/tts/factory.js";
+import { mergeTtsConfigFromAppConfig } from "../voice/tts/merge-config.js";
+import { resolveSTTProviderChain } from "../voice/stt/factory.js";
+import { mergeSttConfigFromAppConfig } from "../voice/stt/config.js";
+import { getVoiceProviderMetadata } from "../voice/metadata/registry.js";
+import "../voice/metadata/index.js";
+import { getImageGenerationCatalog } from "./image-generation-setup.js";
+import { createHash } from "node:crypto";
+//#region src/gateway/mobile-privacy.ts
+init_providers();
+init_plugin_registry();
+/** Only expose origins: provider URLs can contain credentials, query tokens and tenant paths. */
+function privacyRecipientOrigin(value) {
+	if (typeof value !== "string") return void 0;
+	try {
+		const url = new URL(value);
+		if (!["https:", "http:"].includes(url.protocol)) return void 0;
+		return url.origin;
+	} catch {
+		return;
+	}
+}
+function buildMobilePrivacyDisclosure(recipients) {
+	const unique = /* @__PURE__ */ new Map();
+	for (const recipient of recipients) {
+		const safe = {
+			id: recipient.id,
+			name: recipient.name,
+			capability: recipient.capability,
+			...privacyRecipientOrigin(recipient.origin) ? { origin: privacyRecipientOrigin(recipient.origin) } : {}
+		};
+		unique.set(JSON.stringify(safe), safe);
+	}
+	const sorted = [...unique.entries()].sort(([a], [b]) => a.localeCompare(b)).map(([, value]) => value);
+	return {
+		version: 1,
+		revision: createHash("sha256").update(JSON.stringify({
+			version: 1,
+			recipients: sorted
+		})).digest("hex"),
+		recipients: sorted
+	};
+}
+/** Catalog of potential recipients, including configured fallbacks, without content or credentials. */
+async function getMobilePrivacyDisclosure(config) {
+	const recipients = [];
+	const registry = getProviderRegistry();
+	for (const model of await getAvailableModels()) recipients.push({
+		id: model.provider,
+		name: registry.get(model.provider)?.name ?? PROVIDER_META[model.provider]?.name ?? model.provider,
+		capability: "model",
+		origin: privacyRecipientOrigin(model.baseUrl)
+	});
+	const stt = mergeSttConfigFromAppConfig(config.tools?.media?.audio, config.tools?.media);
+	for (const provider of resolveSTTProviderChain(stt)) recipients.push({
+		id: provider.id,
+		name: getVoiceProviderMetadata("stt", provider.id)?.displayName ?? provider.id,
+		capability: "transcription",
+		origin: privacyRecipientOrigin(provider.baseUrl)
+	});
+	const tts = mergeTtsConfigFromAppConfig(config.messages?.tts);
+	if (tts.enabled) {
+		let speech = [];
+		try {
+			speech = resolveSpeechProviderChain(tts);
+		} catch {}
+		for (const provider of speech) recipients.push({
+			id: provider.providerId,
+			name: getVoiceProviderMetadata("tts", provider.providerId)?.displayName ?? provider.providerId,
+			capability: "speech",
+			origin: privacyRecipientOrigin(provider.providerConfig.baseUrl)
+		});
+	}
+	for (const provider of getImageGenerationCatalog(config).filter((entry) => entry.configured)) recipients.push({
+		id: provider.id,
+		name: provider.label,
+		capability: "image",
+		origin: privacyRecipientOrigin(provider.config.baseUrl)
+	});
+	for (const provider of config.tools?.web?.search?.providers ?? []) if (!provider.disabled) recipients.push({
+		id: provider.type,
+		name: provider.type,
+		capability: "search",
+		origin: privacyRecipientOrigin(provider.url)
+	});
+	recipients.push({
+		id: "bing-html",
+		name: "Microsoft Bing",
+		capability: "search",
+		origin: "https://cn.bing.com"
+	}, {
+		id: "duckduckgo-html",
+		name: "DuckDuckGo",
+		capability: "search",
+		origin: "https://html.duckduckgo.com"
+	});
+	return buildMobilePrivacyDisclosure(recipients);
+}
+//#endregion
+export { buildMobilePrivacyDisclosure, getMobilePrivacyDisclosure, privacyRecipientOrigin };

package/dist/src/gateway/security/gateway-scopes.js

@@ -43,6 +43,7 @@ function methodScope(method, read, write) {
 	return method === "GET" ? read : write;
 }
 function requiredGatewayScope(method, path) {
+	if (method === "GET" && path === "/api/mobile/privacy") return "gateway.status";
 	if (path === "/api/realtime/tickets" || path.startsWith("/api/status")) return "gateway.status";
 	if (path === "/api/device-auth/refresh" || path === "/api/devices/me") return "device.self";
 	if (path.startsWith("/api/devices/me/push")) return "notifications.self";

package/dist/src/gateway/service/agent-runner.d.ts

@@ -84,7 +84,7 @@ export declare class GatewayAgentRunner {
         state: import("../../storage/sqlite/session-input-repository.js").SessionInputState;
     } | {
         ok: false;
-        code: "BAD_REQUEST" | "QUEUE_FULL" | "CONTEXT_UNAVAILABLE";
+        code: "BAD_REQUEST" | "QUEUE_FULL" | "CONTEXT_UNAVAILABLE" | "SESSION_CHANGED";
     }>;
     replaceLatestSessionTurn(input: ReplaceLatestTurnInput): Promise<{
         ok: true;

package/dist/src/gateway/service/config-coordinator.js

@@ -1,15 +1,15 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
-import { getModelRegistry } from "../../providers/model-registry.js";
 import { loadConfig, saveConfig } from "../../config/loader.js";
+import { getModelRegistry } from "../../providers/model-registry.js";
 import { init_providers } from "../../providers/index.js";
 import { disposeAllSessionMcpRuntimes } from "../../agent/mcp/bundle-mcp-runtime.js";
 import { reloadImageGenerationProviders } from "../../agent/image/generation/provider-registry.js";
 import "../../agent/mcp/bundle-mcp-tools.js";
 import { ConfigHotReloader } from "../../config/reload.js";
 import "../../config/index.js";
-import { computeBundledExtensionExtensionsPatch } from "../../extensions/bundled-extension-activation.js";
 import { sanitizeTunnelConfig } from "../../tunnel/tunnel-config.js";
+import { computeBundledExtensionExtensionsPatch } from "../../extensions/bundled-extension-activation.js";
 //#region src/gateway/service/config-coordinator.ts
 init_providers();
 init_logger();

package/dist/src/gateway/service/session-input-coordinator.d.ts

@@ -3,6 +3,7 @@ import type { UserTurnAttachment } from '../user-turn-input.js';
 import { type AgentSourceContext, type TurnContextRef } from '../../agent/source-context/types.js';
 import { type SessionInputDelivery, type SessionInputState } from '../../storage/sqlite/index.js';
 export type SubmitSessionInput = {
+    expectedSessionId?: string;
     sessionKey: string;
     clientMessageId: string;
     delivery: SessionInputDelivery;
@@ -47,7 +48,7 @@ export declare class SessionInputCoordinator {
         state: SessionInputState;
     } | {
         ok: false;
-        code: 'BAD_REQUEST' | 'QUEUE_FULL' | 'CONTEXT_UNAVAILABLE';
+        code: 'BAD_REQUEST' | 'QUEUE_FULL' | 'CONTEXT_UNAVAILABLE' | 'SESSION_CHANGED';
     }>;
     replaceLatestTurn(input: ReplaceLatestTurnInput, beforeReplace: () => Promise<void>): Promise<{
         ok: true;

package/dist/src/gateway/service/session-input-coordinator.js

@@ -1,6 +1,6 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
-import { cancelQueuedSessionInput, claimNextSessionInput, findSessionInput, finishSessionInputRun, getSessionInputById, getSessionInputState, insertSessionInput, mutateQueuedSessionInput, recoverSessionInputState, setSessionInputStatus } from "../../storage/sqlite/session-input-repository.js";
+import { SessionInstanceChangedError, cancelQueuedSessionInput, claimNextSessionInput, findSessionInput, finishSessionInputRun, getSessionInputById, getSessionInputState, insertSessionInput, mutateQueuedSessionInput, recoverSessionInputState, setSessionInputStatus } from "../../storage/sqlite/session-input-repository.js";
 import { replaceLatestSessionTurnAndQueueInput, validateLatestSessionTurnTarget } from "../../storage/sqlite/session-turn-replace-repository.js";
 import "../../storage/sqlite/index.js";
 import { summarizeSourceContext } from "../../agent/source-context/types.js";
@@ -49,10 +49,18 @@ var SessionInputCoordinator = class {
 	}
 	async submit(input) {
 		const sessionKey = input.sessionKey.trim();
-		return this.runSubmissionExclusive(sessionKey, () => this.submitLocked({
-			...input,
-			sessionKey
-		}));
+		try {
+			return await this.runSubmissionExclusive(sessionKey, () => this.submitLocked({
+				...input,
+				sessionKey
+			}));
+		} catch (error) {
+			if (error instanceof SessionInstanceChangedError) return {
+				ok: false,
+				code: "SESSION_CHANGED"
+			};
+			throw error;
+		}
 	}
 	async replaceLatestTurn(input, beforeReplace) {
 		const sessionKey = input.sessionKey.trim();
@@ -161,6 +169,7 @@ var SessionInputCoordinator = class {
 		const canSteer = input.origin.type !== "endpoint" && input.delivery === "steer" && runtime.activeRunId !== void 0 && !attachments?.length && !sourceContexts?.length;
 		const effectiveDelivery = canSteer ? "steer" : "next";
 		const row = insertSessionInput({
+			expectedSessionId: input.expectedSessionId,
 			id: crypto.randomUUID(),
 			sessionKey,
 			clientMessageId,

package/dist/src/gateway/service/sessions-api.d.ts

@@ -1,15 +1,3 @@
-/**
- * GatewaySessionsApi — session CRUD, search, compaction, tag/pin/archive,
- * stats, and chat-id grouping for the gateway REST surface.
- *
- * Twenty-four methods, previously sitting on `GatewayService` as a mix of
- * one-line `sessionIndex.*` delegations and small composite operations (e.g.
- * `restoreCheckpoint` also evicts the in-memory agent, `runCompaction` also
- * appends a transcript context entry). Centralising them here lets routes
- * depend on the narrow `GatewaySessionsApi` surface instead of the full
- * `GatewayService`, and keeps the gateway composition root focused on
- * lifecycle + wiring.
- */
 import type { AgentService } from '../../agent/service.js';
 import type { CompactionResult } from '../../agent/memory/compaction.js';
 import { SessionIndex } from '../../session/index.js';
@@ -92,10 +80,14 @@ export declare class GatewaySessionsApi {
         error: string;
     }>;
     getAgentConfig(sessionKey: string): Promise<import("../../agent/session/session-inspector.js").SessionAgentConfigView>;
+    getFixedAgentConfig(sessionKey: string): Promise<import("../../agent/session/session-inspector.js").SessionAgentConfigView>;
+    initializeChatModel(sessionKey: string, model: string, thinkingLevel?: string): Promise<import("../../agent/session/session-config-service.js").PatchSessionAgentConfigResult>;
     /** Resolved markdown workspace for a session (after hydration / mkdir). */
     getEffectiveWorkspacePath(sessionKey: string): Promise<string>;
     patchAgentConfig(sessionKey: string, body: {
         thinkingLevel?: string;
+        fixedModel?: boolean;
+        configVersion?: number;
         model?: string | null;
         activityDetailLevel?: string | null;
         reasoningLevel?: string | null;

package/dist/src/gateway/service/sessions-api.js

@@ -4,6 +4,7 @@ import { retireSessionMcpRuntimeForSessionKey } from "../../agent/mcp/bundle-mcp
 import "../../agent/mcp/bundle-mcp-tools.js";
 import { buildSessionTimeline } from "../../session/transcript-outline.js";
 import { transcriptRowsToClientHistory } from "../../session/client-history.js";
+import { withModelConfigLock } from "../../session/model-config-lock.js";
 import { collectMediaUrisFromValues, deleteMediaUris } from "../../media/session-references.js";
 import { getDistinctSessionChatIds } from "./session-chat-ids.js";
 import { performSessionReset } from "../session-reset-service.js";
@@ -106,6 +107,18 @@ var GatewaySessionsApi = class {
 	async getAgentConfig(sessionKey) {
 		return this.opts.getAgentService().sessionInspector.agentConfig(sessionKey);
 	}
+	async getFixedAgentConfig(sessionKey) {
+		return withModelConfigLock(sessionKey, async () => {
+			const config = await this.getAgentConfig(sessionKey);
+			if (!config.fixedModel && !this.getActiveRun(sessionKey).active) {
+				if ((await this.opts.getAgentService().sessionConfig.initializeModelSelection(sessionKey, config.model, config.thinkingLevel, config.configVersion)).ok) return this.getAgentConfig(sessionKey);
+			}
+			return config;
+		});
+	}
+	initializeChatModel(sessionKey, model, thinkingLevel) {
+		return this.opts.getAgentService().sessionConfig.initializeModelSelection(sessionKey, model, thinkingLevel);
+	}
 	/** Resolved markdown workspace for a session (after hydration / mkdir). */
 	getEffectiveWorkspacePath(sessionKey) {
 		return this.opts.getAgentService().getEffectiveWorkspacePathForSession(sessionKey);

package/dist/src/gateway/service.d.ts

@@ -139,7 +139,7 @@ export declare class GatewayService {
         state: import("../storage/sqlite/session-input-repository.js").SessionInputState;
     } | {
         ok: false;
-        code: "BAD_REQUEST" | "QUEUE_FULL" | "CONTEXT_UNAVAILABLE";
+        code: "BAD_REQUEST" | "QUEUE_FULL" | "CONTEXT_UNAVAILABLE" | "SESSION_CHANGED";
     }>;
     replaceLatestSessionTurn(...args: Parameters<GatewayAgentRunner['replaceLatestSessionTurn']>): Promise<{
         ok: true;

package/dist/src/gateway/service.js

@@ -9,18 +9,15 @@ import { closeXopcDatabase, openXopcDatabase } from "../storage/sqlite/connectio
 import "../storage/sqlite/index.js";
 import { getAgentDefaultModelRef, init_schema } from "../config/schema.js";
 import { init_agent_scope, listAgentEntries, normalizeAgentId, resolveDefaultAgentId } from "../agent/agent-scope.js";
+import { buildSessionKey, init_session_key, sanitizeSegment } from "../routing/session-key.js";
+import { getDefaultAgentId, init_resolve_route } from "../routing/resolve-route.js";
 import { init_paths, resolveAgentDir, resolveConfigPath, resolveExtensionsDir } from "../config/paths.js";
-import { prewarmModelRegistry } from "../providers/model-registry.js";
 import { areExtensionsGloballyDisabled } from "../extensions/discover-extensions.js";
 import { buildExtensionMetadataSnapshot } from "../extensions/extension-metadata-snapshot.js";
 import { buildChannelCatalogForConfig, buildChannelCatalogFromSnapshot, init_channel_catalog_service } from "../channels/catalog/channel-catalog-service.js";
 import { loadConfig, saveConfig } from "../config/loader.js";
-import { buildSessionKey, init_session_key, sanitizeSegment } from "../routing/session-key.js";
-import { getDefaultAgentId, init_resolve_route } from "../routing/resolve-route.js";
+import { prewarmModelRegistry } from "../providers/model-registry.js";
 import { init_providers, providers_exports } from "../providers/index.js";
-import { AutomationService } from "../automations/service/automation-service.js";
-import { onAutomationProductEvent, publishAutomationProductEvent } from "../automations/product-events.js";
-import "../automations/index.js";
 import { TaskRepository } from "../tasks/task-repository.js";
 import { TaskConversationRepository } from "../tasks/task-conversation-repository.js";
 import { disposeAllSessionMcpRuntimes } from "../agent/mcp/bundle-mcp-runtime.js";
@@ -28,6 +25,9 @@ import { ProjectService } from "../projects/project-service.js";
 import { resolveProjectAgentId } from "../projects/project-agent.js";
 import "../projects/index.js";
 import { resolveEffectiveGatewayPort } from "./host.js";
+import { AutomationService } from "../automations/service/automation-service.js";
+import { onAutomationProductEvent, publishAutomationProductEvent } from "../automations/product-events.js";
+import "../automations/index.js";
 import { TaskApplicationService } from "../tasks/task-application-service.js";
 import { ProactiveScenarioService } from "../proactive/scenarios/service.js";
 import { TaskOutboxDispatcher } from "../tasks/task-outbox-dispatcher.js";
@@ -45,11 +45,11 @@ import { MessageBus, MessageBusShutdownError } from "../infra/bus/queue.js";
 import "../infra/bus/index.js";
 import { AgentService } from "../agent/service.js";
 import { ensureStarterAgentsInitialized } from "../agent/starter-agents.js";
-import { getWorkspacePath } from "../config/workspace-path-helpers.js";
-import "../config/index.js";
 import { setPairingBroadcastSink } from "../channels/pairing/pairing-events.js";
 import { registerClarifyBridge } from "./clarify-runtime.js";
 import { ChannelManager } from "../channels/manager.js";
+import { getWorkspacePath } from "../config/workspace-path-helpers.js";
+import "../config/index.js";
 import { ManagedComposioEventPoller } from "../connectors/composio-managed-events.js";
 import { startConnectedKnowledgeCoordinator } from "../knowledge/coordinator.js";
 import "../knowledge/index.js";

package/dist/src/gateway/session-context-summary.d.ts

@@ -0,0 +1,5 @@
+import type { SessionContextSummary } from '@xopcai/gateway-contract';
+import type { Config } from '../config/schema.js';
+import { type GatewayScope } from './security/gateway-scopes.js';
+/** A bounded metadata-only query. It never prepares Note context or starts an agent. */
+export declare function getSessionContextSummary(config: Config, sessionKey: string, scopes: readonly GatewayScope[]): Promise<SessionContextSummary | null>;