@xopcai/xopc 0.0.251 → 0.0.253

package/dist/src/gateway/ephemeral-clarification-waiter.js

@@ -0,0 +1,46 @@
+//#region src/gateway/ephemeral-clarification-waiter.ts
+/** In-memory waiter exclusively for caller-owned ephemeral runs such as side chat. */
+var EphemeralClarificationWaiter = class {
+	pending = /* @__PURE__ */ new Map();
+	start(input) {
+		const requestId = crypto.randomUUID();
+		return new Promise((resolve, reject) => {
+			this.pending.set(requestId, {
+				runId: input.runId,
+				resolve,
+				reject,
+				beforeResponse: input.beforeResponse
+			});
+			input.publish({
+				type: "clarify_request",
+				requestId,
+				kind: input.request.kind ?? "input",
+				question: input.request.question,
+				choices: input.request.choices,
+				suggestedAnswer: input.request.suggestedAnswer,
+				version: 1,
+				createdAt: Date.now()
+			});
+		});
+	}
+	answer(requestId, answer) {
+		const pending = this.pending.get(requestId);
+		if (!pending || pending.beforeResponse?.() === false) return false;
+		this.pending.delete(requestId);
+		pending.resolve(answer.trim());
+		return true;
+	}
+	cancelForRun(runId) {
+		for (const [requestId, pending] of this.pending) {
+			if (pending.runId !== runId) continue;
+			this.pending.delete(requestId);
+			pending.reject(/* @__PURE__ */ new Error("Ephemeral clarification cancelled"));
+		}
+	}
+	dispose() {
+		for (const pending of this.pending.values()) pending.reject(/* @__PURE__ */ new Error("Gateway shutting down"));
+		this.pending.clear();
+	}
+};
+//#endregion
+export { EphemeralClarificationWaiter };

package/dist/src/gateway/file-path-classifier.js

@@ -1,7 +1,7 @@
 import { init_paths_state, resolveStateDir } from "../config/paths-state.js";
 import { init_agent_scope, resolveAgentProfileDir } from "../agent/agent-scope.js";
-import { init_paths, resolveConfigPath, resolveSkillsDir } from "../config/paths.js";
 import { extractProfileAgentId } from "../config/agent-profile.js";
+import { init_paths, resolveConfigPath, resolveSkillsDir } from "../config/paths.js";
 import { isBareProfileMarkdownFileName, resolveProfileMarkdownPathIfBareName } from "../agent/tools/tool-paths.js";
 import { isPathUnderWorkspace, resolveWorkspaceSafePath } from "./workspace-editor-path.js";
 import { basename, isAbsolute, resolve } from "node:path";

package/dist/src/gateway/heartbeat/service.js

@@ -1,9 +1,9 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
 import { shouldSilence, stripHeartbeatToken } from "../../heartbeat/tokens.js";
+import { appendCronEventLines } from "../../heartbeat/event-prompt.js";
 import { isWithinActiveHours } from "../../heartbeat/active-hours.js";
 import { isHeartbeatContentEmpty } from "../../heartbeat/content-check.js";
-import { appendCronEventLines } from "../../heartbeat/event-prompt.js";
 import { createHeartbeatWake } from "../../heartbeat/wake.js";
 import { resolveHeartbeatMdPath } from "../workspace-heartbeat-path.js";
 import { readFile } from "fs/promises";

package/dist/src/gateway/hono/lib/config-payload.d.ts

@@ -6,20 +6,13 @@ export declare function buildSafeMcpConfigForWeb(config: Config): {
     sessionIdleTtlMs?: number;
 };
 export declare function buildSafeBrowserConfigForWeb(browser: unknown): {
+    security?: unknown;
+    limits?: unknown;
+    observation?: unknown;
+    driver?: {
+        [x: string]: unknown;
+    };
     enabled: boolean;
-    headless: boolean;
-    allowPrivateUrls: boolean;
-    commandTimeout: number;
-    backend: unknown;
-    cloudProvider: unknown;
-    cloud: Record<string, unknown>;
-    cdpUrl: string;
-    extension: unknown;
-    cloakbrowser: unknown;
-    humanize: unknown;
-    humanPreset: unknown;
-    dialogPolicy: unknown;
-    dialogTimeoutSeconds: number;
 };
 /** Sanitized config snapshot for GET/PATCH `/api/config` (matches persisted `service.currentConfig`). */
 export declare function buildSafeWebConfigPayload(service: GatewayService, options?: {
@@ -192,20 +185,13 @@ export declare function buildSafeWebConfigPayload(service: GatewayService, optio
         skillsStoreBaseUrl: string;
     };
     browser: {
+        security?: unknown;
+        limits?: unknown;
+        observation?: unknown;
+        driver?: {
+            [x: string]: unknown;
+        };
         enabled: boolean;
-        headless: boolean;
-        allowPrivateUrls: boolean;
-        commandTimeout: number;
-        backend: unknown;
-        cloudProvider: unknown;
-        cloud: Record<string, unknown>;
-        cdpUrl: string;
-        extension: unknown;
-        cloakbrowser: unknown;
-        humanize: unknown;
-        humanPreset: unknown;
-        dialogPolicy: unknown;
-        dialogTimeoutSeconds: number;
     };
     session: {
         dmScope: "main" | "per-peer" | "per-channel-peer" | "per-account-channel-peer";

package/dist/src/gateway/hono/lib/config-payload.js

@@ -1,9 +1,9 @@
 import { ContextPlanningConfigSchema, KnowledgeMemoryConfigSchema, UserModelConfigSchema, init_config } from "../../../user-context/config.js";
 import { init_agent_scope, listAgentEntries, normalizeAgentId, resolveDefaultAgentId } from "../../../agent/agent-scope.js";
 import { resolveModelsJsonPath } from "../../../config/paths.js";
+import { buildChannelCatalogForConfig, buildChannelCatalogFromSnapshot, getChannelSetupStatus, init_channel_catalog_service } from "../../../channels/catalog/channel-catalog-service.js";
 import { init_models_json, loadModelsJson } from "../../../config/models-json.js";
 import { CredentialResolver, init_credentials } from "../../../auth/credentials.js";
-import { buildChannelCatalogForConfig, buildChannelCatalogFromSnapshot, getChannelSetupStatus, init_channel_catalog_service } from "../../../channels/catalog/channel-catalog-service.js";
 import { getProviderRegistry, init_plugin_registry } from "../../../providers/plugin-registry.js";
 import { getAllProviders, init_providers, isProviderConfigured } from "../../../providers/index.js";
 import { normalizeConfiguredMcpServers } from "../../../config/mcp-config-normalize.js";
@@ -46,47 +46,18 @@ function buildSafeMcpConfigForWeb(config) {
 		servers: normalizeConfiguredMcpServers(mcp.servers)
 	};
 }
-function maskBrowserCloudConfigForWeb(cloud) {
-	if (!cloud || typeof cloud !== "object" || Array.isArray(cloud)) return null;
-	const raw = cloud;
-	const safe = {};
-	if (typeof raw.apiKey === "string" && raw.apiKey.trim()) safe.apiKey = maskSecretLength(raw.apiKey);
-	if (typeof raw.projectId === "string" && raw.projectId.trim()) safe.projectId = raw.projectId.trim();
-	if (typeof raw.region === "string" && raw.region.trim()) safe.region = raw.region.trim();
-	return Object.keys(safe).length > 0 ? safe : null;
-}
 function buildSafeBrowserConfigForWeb(browser) {
-	if (!browser || typeof browser !== "object") return {
-		enabled: false,
-		headless: false,
-		allowPrivateUrls: false,
-		commandTimeout: null,
-		backend: null,
-		cloudProvider: null,
-		cloud: null,
-		cdpUrl: null,
-		extension: null,
-		cloakbrowser: null,
-		humanize: null,
-		humanPreset: null,
-		dialogPolicy: null,
-		dialogTimeoutSeconds: null
-	};
+	if (!browser || typeof browser !== "object") return { enabled: false };
+	const raw = browser;
+	const rawDriver = raw.driver && typeof raw.driver === "object" && !Array.isArray(raw.driver) ? raw.driver : void 0;
+	const driver = rawDriver ? { ...rawDriver } : void 0;
+	if (driver?.kind === "remote" && typeof driver.apiKey === "string" && driver.apiKey.trim()) driver.apiKey = maskSecretLength(driver.apiKey);
 	return {
-		enabled: browser.enabled !== false,
-		headless: browser.headless === true,
-		allowPrivateUrls: browser.allowPrivateUrls === true,
-		commandTimeout: typeof browser.commandTimeout === "number" && Number.isFinite(browser.commandTimeout) ? Math.floor(browser.commandTimeout) : null,
-		backend: browser.backend === "local" || browser.backend === "cdp" || browser.backend === "cloud" || browser.backend === "extension" || browser.backend === "cloakbrowser" ? browser.backend : null,
-		cloudProvider: browser.cloudProvider === "browserbase" || browser.cloudProvider === "browser-use" ? browser.cloudProvider : null,
-		cloud: maskBrowserCloudConfigForWeb(browser.cloud),
-		cdpUrl: typeof browser.cdpUrl === "string" && browser.cdpUrl.trim() ? browser.cdpUrl.trim() : null,
-		extension: browser.extension && typeof browser.extension === "object" && !Array.isArray(browser.extension) ? browser.extension : null,
-		cloakbrowser: browser.cloakbrowser && typeof browser.cloakbrowser === "object" && !Array.isArray(browser.cloakbrowser) ? browser.cloakbrowser : null,
-		humanize: typeof browser.humanize === "boolean" ? browser.humanize : null,
-		humanPreset: browser.humanPreset === "default" || browser.humanPreset === "careful" ? browser.humanPreset : null,
-		dialogPolicy: browser.dialogPolicy === "must_respond" || browser.dialogPolicy === "auto_accept" || browser.dialogPolicy === "auto_dismiss" ? browser.dialogPolicy : null,
-		dialogTimeoutSeconds: typeof browser.dialogTimeoutSeconds === "number" && Number.isFinite(browser.dialogTimeoutSeconds) ? Math.floor(browser.dialogTimeoutSeconds) : null
+		enabled: raw.enabled === true,
+		...driver ? { driver } : {},
+		...raw.observation ? { observation: raw.observation } : {},
+		...raw.limits ? { limits: raw.limits } : {},
+		...raw.security ? { security: raw.security } : {}
 	};
 }
 /** Sanitized config snapshot for GET/PATCH `/api/config` (matches persisted `service.currentConfig`). */

package/dist/src/gateway/hono/routes/agent-stream.js

@@ -122,38 +122,64 @@ function registerAgentStreamRoutes(authenticated, deps) {
 			payload: result.state
 		}, 409);
 	});
-	authenticated.post("/api/clarify/:requestId", chatRateLimitMiddleware, async (c) => {
-		const requestId = c.req.param("requestId")?.trim() ?? "";
-		if (!requestId) return c.json({
-			ok: false,
-			error: {
-				code: "BAD_REQUEST",
-				message: "Missing requestId"
-			}
-		}, 400);
-		const body = await c.req.json().catch(() => null);
-		const skip = body && typeof body === "object" && body.skip === true;
-		const rawAnswer = body && typeof body === "object" && typeof body.answer === "string" ? body.answer : "";
-		const answer = typeof rawAnswer === "string" ? rawAnswer.trim() : "";
-		if (!skip && !answer) return c.json({
+	authenticated.get("/api/sessions/:sessionKey/clarification", (c) => {
+		const sessionKey = (c.req.param("sessionKey") ?? "").trim();
+		if (!sessionKey) return c.json({
 			ok: false,
 			error: {
 				code: "BAD_REQUEST",
-				message: "Missing answer field"
+				message: "Missing sessionKey"
 			}
 		}, 400);
-		if (!service.submitClarifyResponse(requestId, skip ? "" : answer)) return c.json({
+		const snapshot = service.getClarificationState(sessionKey);
+		if (!snapshot) return c.json({
 			ok: false,
 			error: {
 				code: "NOT_FOUND",
-				message: "No pending clarification with this ID"
+				message: "Session not found"
 			}
 		}, 404);
 		return c.json({
 			ok: true,
-			payload: { received: true }
+			payload: snapshot
 		});
 	});
+	authenticated.post("/api/clarifications/:id/responses", chatRateLimitMiddleware, async (c) => {
+		const id = c.req.param("id")?.trim() ?? "";
+		const body = await c.req.json().catch(() => null);
+		const record = body && typeof body === "object" ? body : {};
+		const action = record.action;
+		const expectedVersion = record.expectedVersion;
+		const idempotencyKey = typeof record.idempotencyKey === "string" ? record.idempotencyKey.trim() : "";
+		if (!id || !idempotencyKey || typeof expectedVersion !== "number" || !Number.isInteger(expectedVersion) || action !== "answer" && action !== "agent_decide" && action !== "cancel") return c.json({
+			ok: false,
+			error: {
+				code: "BAD_REQUEST",
+				message: "Invalid clarification response"
+			}
+		}, 400);
+		const result = service.resolveClarificationResponse({
+			id,
+			expectedVersion,
+			idempotencyKey,
+			action,
+			answer: typeof record.answer === "string" ? record.answer : void 0
+		});
+		if (result.ok === true) return c.json({
+			ok: true,
+			payload: result
+		}, result.queued ? 202 : 200);
+		const status = result.code === "NOT_FOUND" ? 404 : result.code === "EXPIRED" ? 410 : result.code === "INVALID" ? 400 : 409;
+		const message = result.code === "NOT_FOUND" ? "This clarification is no longer active" : result.code === "EXPIRED" ? "This approval has expired" : result.code === "INVALID" ? "The clarification response is invalid" : "The clarification changed; reload and try again";
+		return c.json({
+			ok: false,
+			error: {
+				code: result.code,
+				message
+			},
+			payload: result.clarification
+		}, status);
+	});
 	authenticated.post("/api/send", chatRateLimitMiddleware, async (c) => {
 		const body = await c.req.json().catch(() => null);
 		const channel = typeof body?.channel === "string" ? body.channel : "";

package/dist/src/gateway/hono/routes/browser-automations.d.ts

@@ -0,0 +1,3 @@
+import type { Hono } from 'hono';
+import type { AuthenticatedRouteDeps } from './deps.js';
+export declare function registerBrowserAutomationRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void;

package/dist/src/gateway/hono/routes/browser-automations.js

@@ -0,0 +1,77 @@
+//#region src/gateway/hono/routes/browser-automations.ts
+function presentRun(run) {
+	return {
+		id: run.id,
+		automationId: run.automationId,
+		status: run.status,
+		inputs: run.inputs,
+		result: run.result,
+		error: run.error,
+		createdAtMs: run.createdAtMs,
+		startedAtMs: run.startedAtMs,
+		endedAtMs: run.endedAtMs,
+		durationMs: run.durationMs
+	};
+}
+function parseStatus(value) {
+	if (value === void 0) return void 0;
+	if (value === "enabled" || value === "disabled") return value;
+	throw new Error("status must be enabled or disabled.");
+}
+function registerBrowserAutomationRoutes(authenticated, deps) {
+	const service = deps.service.browserAutomations;
+	authenticated.get("/api/browser/automations", (c) => c.json({ automations: service.list() }));
+	authenticated.post("/api/browser/automations", deps.strictRateLimitMiddleware, async (c) => {
+		try {
+			const body = await c.req.json();
+			return c.json({ automation: service.save({
+				definition: body.definition,
+				status: parseStatus(body.status)
+			}) }, 201);
+		} catch (error) {
+			return c.json({ error: error instanceof Error ? error.message : String(error) }, 400);
+		}
+	});
+	authenticated.get("/api/browser/automations/:id", (c) => {
+		const automation = service.get(c.req.param("id"));
+		return automation ? c.json({ automation }) : c.json({ error: "Browser automation not found." }, 404);
+	});
+	authenticated.patch("/api/browser/automations/:id", deps.strictRateLimitMiddleware, async (c) => {
+		try {
+			const current = service.get(c.req.param("id"));
+			if (!current) return c.json({ error: "Browser automation not found." }, 404);
+			const body = await c.req.json();
+			return c.json({ automation: service.save({
+				definition: body.definition ?? current.definition,
+				status: parseStatus(body.status) ?? current.status,
+				expectedId: current.id
+			}) });
+		} catch (error) {
+			return c.json({ error: error instanceof Error ? error.message : String(error) }, 400);
+		}
+	});
+	authenticated.delete("/api/browser/automations/:id", deps.strictRateLimitMiddleware, (c) => {
+		try {
+			return c.json({ removed: service.remove(c.req.param("id")) });
+		} catch (error) {
+			return c.json({ error: error instanceof Error ? error.message : String(error) }, 409);
+		}
+	});
+	authenticated.post("/api/browser/automations/:id/run", deps.strictRateLimitMiddleware, async (c) => {
+		try {
+			const inputs = (await c.req.json().catch(() => ({}))).inputs ?? {};
+			if (!inputs || typeof inputs !== "object" || Array.isArray(inputs)) return c.json({ error: "inputs must be an object." }, 400);
+			return c.json({ run: presentRun(service.startRun(c.req.param("id"), inputs)) }, 202);
+		} catch (error) {
+			return c.json({ error: error instanceof Error ? error.message : String(error) }, 400);
+		}
+	});
+	authenticated.get("/api/browser/automation-runs", (c) => c.json({ runs: service.listRuns(c.req.query("automationId")).map(presentRun) }));
+	authenticated.get("/api/browser/automation-runs/:id", (c) => {
+		const run = service.getRun(c.req.param("id"));
+		return run ? c.json({ run: presentRun(run) }) : c.json({ error: "Run not found." }, 404);
+	});
+	authenticated.post("/api/browser/automation-runs/:id/cancel", deps.strictRateLimitMiddleware, (c) => c.json({ cancelled: service.cancel(c.req.param("id")) }));
+}
+//#endregion
+export { registerBrowserAutomationRoutes };

package/dist/src/gateway/hono/routes/browser-install.js

@@ -4,13 +4,6 @@ import { runPlaywrightChromiumInstallWithProgress } from "../../../browser/provi
 import { streamSSE } from "hono/streaming";
 //#region src/gateway/hono/routes/browser-install.ts
 const log = createGatewayRouteLogger("BrowserInstall");
-function parseCloakInstallBody(body) {
-	const input = body && typeof body === "object" && !Array.isArray(body) ? body : {};
-	return {
-		cacheDir: typeof input.cacheDir === "string" && input.cacheDir.trim() ? input.cacheDir.trim() : void 0,
-		binaryPath: typeof input.binaryPath === "string" && input.binaryPath.trim() ? input.binaryPath.trim() : void 0
-	};
-}
 function isInstallCancelled(err, signal) {
 	if (signal?.aborted) return true;
 	return err instanceof Error && err.message === "Install cancelled";
@@ -109,7 +102,6 @@ function registerInstallCancelRoute(authenticated, deps, kind, path) {
 function registerBrowserInstallRoutes(authenticated, deps) {
 	const { strictRateLimitMiddleware } = deps;
 	registerInstallCancelRoute(authenticated, deps, "playwright", "/api/browser/playwright/install/cancel");
-	registerInstallCancelRoute(authenticated, deps, "cloakbrowser", "/api/browser/cloakbrowser/install/cancel");
 	authenticated.post("/api/browser/playwright/install/stream", strictRateLimitMiddleware, async (c) => {
 		return streamSSE(c, async (stream) => {
 			await runBrowserInstallStream("playwright", stream, async (signal, emitProgress) => {
@@ -125,30 +117,6 @@ function registerBrowserInstallRoutes(authenticated, deps) {
 			});
 		});
 	});
-	authenticated.post("/api/browser/cloakbrowser/install/stream", strictRateLimitMiddleware, async (c) => {
-		let body;
-		try {
-			body = await c.req.json();
-		} catch {
-			body = {};
-		}
-		const { cacheDir, binaryPath } = parseCloakInstallBody(body);
-		return streamSSE(c, async (stream) => {
-			await runBrowserInstallStream("cloakbrowser", stream, async (signal, emitProgress) => {
-				log.info({
-					cacheDir,
-					binaryPath: binaryPath ? "(custom)" : void 0
-				}, "Gateway: starting streamed CloakBrowser install");
-				const { installCloakBrowser } = await import("../../../browser/providers/cloakbrowser.js");
-				return installCloakBrowser({
-					cacheDir,
-					binaryPath,
-					signal,
-					onProgress: emitProgress
-				});
-			});
-		});
-	});
 }
 //#endregion
 export { registerBrowserInstallRoutes };

package/dist/src/gateway/hono/routes/browser.d.ts

@@ -1,20 +1,3 @@
-/**
- * Browser/extension settings routes: `/api/browser/*` except for the
- * long-running install streams under `/api/browser/{playwright,cloakbrowser}/install/stream`
- * (those live in `browser-install.ts` so the SSE pump doesn't have to load
- * with the rest of settings).
- *
- * Four backend families:
- *   - **Extension WS bridge** — pair Chrome via the xopc browser extension.
- *     Owns a module-scoped manual handle so the bridge can outlive a config
- *     save (UI flow: Start → pair → Save).
- *   - **CloakBrowser** — install / launch / probe runtime status.
- *   - **Playwright Chromium** — doctor + on-demand install of bundled browser.
- *   - **Local CDP** — launch / list / stop user-driven debug Chrome instances.
- *   - **Cloud providers** (browserbase / browser-use) — connection test.
- *
- * Extracted from `config.ts` (which was 2237 lines and 80% browser routes).
- */
 import type { Hono } from 'hono';
 import type { AuthenticatedRouteDeps } from './deps.js';
 export declare function registerBrowserRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void;