@xopcai/xopc 0.0.264 → 0.0.265

package/dist/src/gateway/service.js

@@ -6,7 +6,7 @@ import { getRuntimeLogStats } from "../utils/logger/stats.js";
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
 import { closeXopcDatabase, openXopcDatabase } from "../storage/sqlite/connection.js";
-import { insertSessionInput } from "../storage/sqlite/session-input-repository.js";
+import { findSessionInput, insertSessionInput } from "../storage/sqlite/session-input-repository.js";
 import { notifyUserContextChange } from "../user-context/changes.js";
 import { getSessionConfig } from "../storage/sqlite/config-repository.js";
 import "../storage/sqlite/index.js";
@@ -123,6 +123,7 @@ import { GatewayConfigCoordinator } from "./service/config-coordinator.js";
 import { GatewayAgentRunner } from "./service/agent-runner.js";
 import { RealtimeRuntime } from "../realtime/runtime.js";
 import { VoiceRealtimeRuntime } from "../voice/realtime/runtime.js";
+import { DurableVoiceAgentBroker } from "../voice/realtime/agentBroker.js";
 import { reconcileMemoryMaintenanceAutomations } from "./memory-maintenance-automation-reconciler.js";
 import { GatewayReadiness } from "./startup-readiness.js";
 import { createGatewayStartupTrace } from "./startup-trace.js";
@@ -228,16 +229,16 @@ var GatewayService = class {
 				interruptedDuring: entry.interruptedDuring
 			}
 		}),
-		runAgent: (text, sessionKey, signal) => {
-			if (this.agentRunner.hasActiveRun(sessionKey)) throw new Error("Conversation session already has an active response");
-			return this.agentRunner.runAgent(text, "webchat", sessionKey, {
-				type: "channel",
-				channel: "webchat"
-			}, void 0, void 0, {
-				signal,
-				presentation: "voice"
-			});
-		}
+		agentBroker: new DurableVoiceAgentBroker({
+			submit: (input) => this.agentRunner.submitSessionInput(input),
+			find: findSessionInput,
+			snapshot: (sessionKey) => this.agentRunner.inputs.snapshot(sessionKey),
+			currentSequence: (topic) => this.realtime.broker.currentSequence(topic),
+			subscribe: (topic, afterSeq, listener) => this.realtime.broker.subscribe(topic, afterSeq, listener),
+			cancelRun: async (runId) => {
+				await this.agentRunner.abortAgentRun(runId);
+			}
+		})
 	});
 	getConfig() {
 		return this.config;

package/dist/src/realtime/runtime.js

@@ -194,7 +194,8 @@ var RealtimeRuntime = class {
 				connectionId = crypto.randomUUID();
 				let endpointReady;
 				if (message.payload.endpoint) {
-					if (!this.endpointTools || message.payload.endpoint.kind !== message.payload.clientKind) {
+					const endpointKindMatches = message.payload.endpoint.kind === message.payload.clientKind || message.payload.clientKind === "browser_extension" && message.payload.endpoint.kind === "browser";
+					if (!this.endpointTools || !endpointKindMatches) {
 						socket.close(4401, "Realtime endpoint identity is invalid");
 						return;
 					}

package/dist/src/session/client-history.d.ts

@@ -15,12 +15,15 @@ export interface ClientHistoryMessage {
     /** Whitelisted display metadata; never includes source snapshot text. */
     metadata?: {
         sourceContexts?: Array<{
-            kind: 'note';
+            kind: 'note' | 'browser_page';
             sourceId: string;
             version: string;
             title: string;
             tokenEstimate?: number;
             truncated?: boolean;
+            url?: string;
+            capturedAt?: number;
+            documentId?: string;
         }>;
         turnOutcome?: TurnOutcome;
     };

package/dist/src/session/client-history.js

@@ -9,14 +9,17 @@ function sourceContextDisplayMetadata(metadata) {
 	const sourceContexts = rows.flatMap((value) => {
 		if (!value || typeof value !== "object" || Array.isArray(value)) return [];
 		const row = value;
-		if (row.kind !== "note" || typeof row.sourceId !== "string" || typeof row.version !== "string" || typeof row.title !== "string") return [];
+		if (row.kind !== "note" && row.kind !== "browser_page" || typeof row.sourceId !== "string" || typeof row.version !== "string" || typeof row.title !== "string") return [];
 		return [{
-			kind: "note",
+			kind: row.kind,
 			sourceId: row.sourceId,
 			version: row.version,
 			title: row.title,
 			...typeof row.tokenEstimate === "number" ? { tokenEstimate: row.tokenEstimate } : {},
-			...row.truncated === true ? { truncated: true } : {}
+			...row.truncated === true ? { truncated: true } : {},
+			...typeof row.url === "string" ? { url: row.url } : {},
+			...typeof row.capturedAt === "number" ? { capturedAt: row.capturedAt } : {},
+			...typeof row.documentId === "string" ? { documentId: row.documentId } : {}
 		}];
 	});
 	return sourceContexts.length ? { sourceContexts } : void 0;

package/dist/src/storage/sqlite/browser-tab-binding-repository.d.ts

@@ -0,0 +1,7 @@
+import type { BrowserTabBinding } from '@xopcai/gateway-contract';
+export declare function getBrowserTabBinding(sessionKey: string, now?: number): BrowserTabBinding | undefined;
+export declare function getBrowserTabBindingById(bindingId: string, now?: number): BrowserTabBinding | undefined;
+export declare function setBrowserTabBinding(input: Omit<BrowserTabBinding, 'id' | 'createdAt' | 'expiresAt'>, now?: number): BrowserTabBinding;
+export declare function deleteBrowserTabBinding(sessionKey: string): boolean;
+export declare function deleteBrowserTabBindingsByEndpoint(endpointId: string): number;
+export declare function deleteBrowserTabBindingsByPrincipal(principalId: string): number;

package/dist/src/storage/sqlite/browser-tab-binding-repository.js

@@ -0,0 +1,60 @@
+import { getSqliteDatabase } from "./transaction.js";
+import { randomUUID } from "node:crypto";
+//#region src/storage/sqlite/browser-tab-binding-repository.ts
+function bindingFromRow(row) {
+	return {
+		id: row.binding_id,
+		sessionKey: row.session_key,
+		principalId: row.principal_id,
+		endpointId: row.endpoint_id,
+		tabId: row.tab_id,
+		windowId: row.window_id,
+		documentId: row.document_id,
+		urlOrigin: row.url_origin,
+		mode: row.mode,
+		createdAt: row.created_at,
+		expiresAt: row.expires_at
+	};
+}
+function getBrowserTabBinding(sessionKey, now = Date.now()) {
+	const db = getSqliteDatabase();
+	db.prepare("DELETE FROM browser_tab_bindings WHERE expires_at <= ?").run(now);
+	const row = db.prepare(`SELECT * FROM browser_tab_bindings WHERE session_key = ?`).get(sessionKey);
+	return row ? bindingFromRow(row) : void 0;
+}
+function getBrowserTabBindingById(bindingId, now = Date.now()) {
+	const db = getSqliteDatabase();
+	db.prepare("DELETE FROM browser_tab_bindings WHERE expires_at <= ?").run(now);
+	const row = db.prepare(`SELECT * FROM browser_tab_bindings WHERE binding_id = ?`).get(bindingId);
+	return row ? bindingFromRow(row) : void 0;
+}
+function setBrowserTabBinding(input, now = Date.now()) {
+	const binding = {
+		...input,
+		id: randomUUID(),
+		createdAt: now,
+		expiresAt: now + 480 * 60 * 1e3
+	};
+	getSqliteDatabase().prepare(`INSERT INTO browser_tab_bindings (
+    binding_id, session_key, principal_id, endpoint_id, tab_id, window_id,
+    document_id, url_origin, mode, created_at, expires_at
+  ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+  ON CONFLICT(session_key) DO UPDATE SET
+    binding_id = excluded.binding_id, principal_id = excluded.principal_id,
+    endpoint_id = excluded.endpoint_id, tab_id = excluded.tab_id,
+    window_id = excluded.window_id, document_id = excluded.document_id,
+    url_origin = excluded.url_origin, mode = excluded.mode,
+    created_at = excluded.created_at, expires_at = excluded.expires_at`).run(binding.id, binding.sessionKey, binding.principalId, binding.endpointId, binding.tabId, binding.windowId, binding.documentId, binding.urlOrigin, binding.mode, binding.createdAt, binding.expiresAt);
+	return binding;
+}
+function deleteBrowserTabBinding(sessionKey) {
+	return getSqliteDatabase().prepare("DELETE FROM browser_tab_bindings WHERE session_key = ?").run(sessionKey).changes > 0;
+}
+function deleteBrowserTabBindingsByEndpoint(endpointId) {
+	return Number(getSqliteDatabase().prepare("DELETE FROM browser_tab_bindings WHERE endpoint_id = ?").run(endpointId).changes);
+}
+function deleteBrowserTabBindingsByPrincipal(principalId) {
+	return Number(getSqliteDatabase().prepare("DELETE FROM browser_tab_bindings WHERE principal_id = ?").run(principalId).changes);
+}
+//#endregion
+export { deleteBrowserTabBinding, deleteBrowserTabBindingsByEndpoint, deleteBrowserTabBindingsByPrincipal, getBrowserTabBinding, getBrowserTabBindingById, setBrowserTabBinding };

package/dist/src/storage/sqlite/device-access-repository.d.ts

@@ -1,11 +1,12 @@
 import crypto from 'node:crypto';
 import type { GatewayScope } from '../../gateway/security/gateway-scopes.js';
-export type DevicePlatform = 'ios' | 'android';
+export type DevicePlatform = 'ios' | 'android' | 'chrome';
 export type DevicePublicKeyJwk = crypto.webcrypto.JsonWebKey;
 export type DeviceRecord = {
     id: string;
     displayName: string;
     platform: DevicePlatform;
+    extensionId?: string;
     publicKeyJwk: DevicePublicKeyJwk;
     scopes: GatewayScope[];
     createdAt: number;
@@ -28,6 +29,7 @@ export declare function createDevice(input: {
     displayName: string;
     platform: DevicePlatform;
     publicKeyJwk: DevicePublicKeyJwk;
+    extensionId?: string;
     scopes: readonly GatewayScope[];
     now?: number;
 }): DeviceRecord;

package/dist/src/storage/sqlite/device-access-repository.js

@@ -26,6 +26,7 @@ function deviceFromRow(row) {
 		displayName: row.display_name,
 		platform: row.platform,
 		publicKeyJwk: JSON.parse(row.public_key_jwk),
+		...row.extension_id ? { extensionId: row.extension_id } : {},
 		scopes: parseGatewayScopes(row.scopes_json),
 		createdAt: row.created_at,
 		...row.last_seen_at === null ? {} : { lastSeenAt: row.last_seen_at },
@@ -37,9 +38,9 @@ function createDevice(input) {
 	const createdAt = input.now ?? Date.now();
 	getSqliteDatabase().prepare(`
     INSERT INTO devices (
-      device_id, display_name, platform, public_key_jwk, scopes_json, created_at
-    ) VALUES (?, ?, ?, ?, ?, ?)
-  `).run(id, input.displayName, input.platform, JSON.stringify(input.publicKeyJwk), JSON.stringify([...new Set(input.scopes)]), createdAt);
+      device_id, display_name, platform, extension_id, public_key_jwk, scopes_json, created_at
+    ) VALUES (?, ?, ?, ?, ?, ?, ?)
+  `).run(id, input.displayName, input.platform, input.extensionId ?? null, JSON.stringify(input.publicKeyJwk), JSON.stringify([...new Set(input.scopes)]), createdAt);
 	return getDevice(id);
 }
 function getDevice(deviceId) {

package/dist/src/storage/sqlite/device-pairing-approval.js

@@ -1,6 +1,6 @@
 import { getSqliteDatabase, runSqliteWriteTransaction } from "./transaction.js";
 import { buildDevicePairingProof, devicePairingCompleteSchema, devicePairingDeviceSchema } from "../../../packages/gateway-contract/src/device-pairing.js";
-import { DEFAULT_MOBILE_SCOPES } from "../../gateway/security/gateway-scopes.js";
+import { DEFAULT_BROWSER_EXTENSION_SCOPES, DEFAULT_MOBILE_SCOPES } from "../../gateway/security/gateway-scopes.js";
 import { createDevice, getDevice, registerInitialDeviceRefreshToken, revokeDevice } from "./device-access-repository.js";
 import { getOrCreateGatewayIdentity } from "./gateway-identity-repository.js";
 import crypto from "node:crypto";
@@ -19,6 +19,7 @@ const hash = (value) => crypto.createHash("sha256").update(value).digest("hex");
 const fail = (code, status) => {
 	throw new DevicePairingError(code, status);
 };
+const scopesForPlatform = (platform) => platform === "chrome" ? DEFAULT_BROWSER_EXTENSION_SCOPES : DEFAULT_MOBILE_SCOPES;
 function requestRow(id, now) {
 	const db = getSqliteDatabase();
 	db.prepare(`UPDATE device_pairing_requests SET status = 'expired', revision = revision + 1
@@ -133,9 +134,10 @@ function operateDevicePairingRequest(action, body, now = Date.now()) {
 				return;
 			}
 			if (current.status !== "approved") fail("PAIRING_NOT_APPROVED");
+			const device = devicePairingDeviceSchema.parse(JSON.parse(current.device_json));
 			const created = createDevice({
-				...devicePairingDeviceSchema.parse(JSON.parse(current.device_json)),
-				scopes: DEFAULT_MOBILE_SCOPES,
+				...device,
+				scopes: scopesForPlatform(device.platform),
 				now
 			});
 			registerInitialDeviceRefreshToken(created.id, complete.initialRefreshToken, now);
@@ -147,7 +149,7 @@ function operateDevicePairingRequest(action, body, now = Date.now()) {
 	return {
 		request: statusFromRow(requestRow(row.request_id, now), now),
 		routes: JSON.parse(setup.routes_json),
-		...action === "complete" ? { scopes: DEFAULT_MOBILE_SCOPES } : {}
+		...action === "complete" ? { scopes: scopesForPlatform(devicePairingDeviceSchema.parse(JSON.parse(row.device_json)).platform) } : {}
 	};
 }
 //#endregion

package/dist/src/storage/sqlite/device-pairing-repository.d.ts

@@ -1,6 +1,6 @@
 export type DeviceRoute = {
     id: string;
-    kind: 'xopc-secure-link' | 'tailscale' | 'custom-https';
+    kind: 'xopc-secure-link' | 'tailscale' | 'custom-https' | 'local-browser';
     url: string;
 };
 export type DevicePairingSetup = {

package/dist/src/storage/sqlite/index.d.ts

@@ -6,6 +6,7 @@ export { discoverSqlMigrations, listRegisteredMigrationTargets } from './migrati
 export { closeXopcDatabase, getXopcDatabase, isXopcDatabaseOpen, openXopcDatabase, requireXopcDatabase, resetXopcDatabaseSingletonForTest, type OpenXopcDatabaseOptions, type XopcDatabase, } from './connection.js';
 export { getSqliteDatabase, runSqliteWriteTransaction } from './transaction.js';
 export { deleteEndpointSessionBinding, getEndpointSessionBinding, setEndpointSessionBinding, type StoredEndpointSessionBinding, } from './endpoint-session-binding-repository.js';
+export { deleteBrowserTabBinding, deleteBrowserTabBindingsByEndpoint, deleteBrowserTabBindingsByPrincipal, getBrowserTabBinding, getBrowserTabBindingById, setBrowserTabBinding, } from './browser-tab-binding-repository.js';
 export { authenticateDeviceAccessToken, buildRefreshProofMessage, createDevice, getDevice, issueDeviceTokenPair, listDevices, revokeDevice, rotateDeviceRefreshToken, type DeviceAccessIdentity, type DevicePlatform, type DevicePublicKeyJwk, type DeviceRecord, type DeviceTokenPair, } from './device-access-repository.js';
 export { clearGatewayIdentityForTest, getOrCreateGatewayIdentity, signGatewayPayload, type GatewayIdentity, } from './gateway-identity-repository.js';
 export { consumeDevicePairingToken, createDevicePairingSetup, isDevicePairingSetupActive, type DevicePairingSetup, type DeviceRoute, type PairingConsumeResult, } from './device-pairing-repository.js';

package/dist/src/storage/sqlite/index.js

@@ -7,6 +7,7 @@ import { ensureXopcDatabaseSchema } from "./schema.js";
 import { closeXopcDatabase, getXopcDatabase, isXopcDatabaseOpen, openXopcDatabase, requireXopcDatabase, resetXopcDatabaseSingletonForTest } from "./connection.js";
 import { getSqliteDatabase, runSqliteWriteTransaction } from "./transaction.js";
 import { deleteEndpointSessionBinding, getEndpointSessionBinding, setEndpointSessionBinding } from "./endpoint-session-binding-repository.js";
+import { deleteBrowserTabBinding, deleteBrowserTabBindingsByEndpoint, deleteBrowserTabBindingsByPrincipal, getBrowserTabBinding, getBrowserTabBindingById, setBrowserTabBinding } from "./browser-tab-binding-repository.js";
 import { authenticateDeviceAccessToken, buildRefreshProofMessage, createDevice, getDevice, issueDeviceTokenPair, listDevices, revokeDevice, rotateDeviceRefreshToken } from "./device-access-repository.js";
 import { clearGatewayIdentityForTest, getOrCreateGatewayIdentity, signGatewayPayload } from "./gateway-identity-repository.js";
 import { consumeDevicePairingToken, createDevicePairingSetup, isDevicePairingSetupActive } from "./device-pairing-repository.js";
@@ -39,4 +40,4 @@ import { appendConnectorExecutionAudit, claimConnectorWebhookDelivery, completeC
 import { getConnectorAccount, listConnectorAccounts, reconcileConnectorAccount, refreshConnectorAccountCurrent } from "./connector-account-repository.js";
 import { getConnectorSyncPolicy, getConnectorSyncPolicyForConnection, listConnectorSyncPolicies, upsertConnectorSyncPolicy } from "./connector-sync-policy-repository.js";
 import { getUserTrustPolicy, setUserTrustPolicy } from "./user-trust-repository.js";
-export { COMPOSER_INPUT_HISTORY_LIMIT, DatabaseSchemaMigrationGapError, DatabaseSchemaTooNewError, SCHEMA_META_SCHEMA_VERSION_KEY, XOPC_DB_BASELINE_SCHEMA_VERSION, XOPC_DB_FILENAME, XOPC_DB_SCHEMA_VERSION, acknowledgeHomeAttention, appendCompactionBoundaryIfUnchanged, appendComposerInputHistory, appendConnectorExecutionAudit, appendTranscriptEntry, applyPendingMigrations, authenticateDeviceAccessToken, bindEndpointPrincipal, buildDefaultSessionMetadata, buildGlobalSessionStats, buildRefreshProofMessage, buildRelationshipPrompt, cancelQueuedSessionInput, claimConnectorWebhookDelivery, claimContextExtractionRun, claimKnowledgeSourceItems, claimNextConnectorLearningJob, claimNextSessionInput, classifyStoredRow, clearComposerInputHistory, clearGatewayIdentityForTest, closeTemporalAssertions, closeXopcDatabase, completeConnectorWebhookDelivery, completeKnowledgeSourceItemSynthesis, consumeClarificationApproval, consumeClarificationResume, consumeConnectorApproval, consumeDevicePairingToken, countKnowledgeSourceItems, createClarificationWait, createCollaborationRule, createConnectorApproval, createContextEvidence, createDevice, createDevicePairingSetup, createEndpointPrincipal, createObjectLinkRecord, createTemporalAssertion, decideConnectorApproval, deleteConnectorConnection, deleteConnectorInstallation, deleteEndpointSessionBinding, deleteKnowledgeSourceItems, deleteNoteAgentContextRecord, deleteNoteRecord, deleteObjectLinkRecord, deleteSessionConfig, deleteSessionRecord, discoverSqlMigrations, enqueueConnectorLearningJob, ensureSessionRecord, ensureXopcDatabaseSchema, estimateTokensFromMessages, extractFtsContent, findSessionInput, findSessionKeyBySessionId, finishContextExtractionRun, finishEndpointToolInvocationAudit, finishKnowledgeSyncRun, finishSessionInputRun, getActiveClarification, getActivityEventRecord, getCachedConnectorCatalogEntry, getClarification, getClarificationResumeInput, getClarificationSnapshot, getCollaborationRule, getConnectorAccount, getConnectorApproval, getConnectorConnection, getConnectorInstallation, getConnectorSyncPolicy, getConnectorSyncPolicyForConnection, getContextExtractionRun, getCurrentSessionId, getDevice, getEndpointPrincipal, getEndpointSessionBinding, getGlobalSessionStats, getInteractionState, getKnowledgeConsumerWatermark, getKnowledgeSourceCursor, getKnowledgeSourceItem, getNoteAgentContextRecord, getNoteRecord, getOrCreateGatewayIdentity, getRelationshipSettings, getSessionConfig, getSessionInputById, getSessionInputState, getSessionMetadata, getSessionPersistedLevels, getSessionTaskPlan, getSqliteDatabase, getUserPeopleIndexState, getUserPerson, getUserTrustPolicy, getXopcDatabase, hasIndependentExtractionOutput, hasSessionConfig, incrementSessionStatsOnAppend, insertSessionInput, inspectSchemaMigrationStatus, isClarificationSuspended, isDevicePairingSetupActive, isHomeAttentionAcknowledged, isProactiveSupportAllowed, isXopcDatabaseOpen, issueDeviceTokenPair, linkContextObjects, listActiveSessionInputRuns, listActivityRecords, listCachedConnectorCatalogEntries, listCollaborationRules, listCompactionBoundaries, listComposerInputHistory, listConnectorAccounts, listConnectorActionMetadata, listConnectorApprovals, listConnectorConnections, listConnectorExecutionAudit, listConnectorInstallations, listConnectorLearningJobs, listConnectorSyncPolicies, listContextExtractionOutputs, listContextExtractionRuns, listContextObjectRelations, listDevices, listEndpointPrincipals, listEndpointToolInvocationAudits, listKnowledgeSourceChanges, listKnowledgeSourceItems, listKnowledgeSyncRuns, listNoteRecords, listObjectActivityRecords, listObjectLinkRecords, listProjectActivityRecords, listRegisteredMigrationTargets, listSessionMetadata, listSessionsByAgent, listTemporalAssertions, listUserPeople, loadCompactionSourceSnapshot, loadLlmMessagesForSession, loadTranscriptHistoryRowsForSession, loadTranscriptRows, loadTranscriptRowsForSession, mergeUserPeople, metadataToSessionInsert, mutateQueuedSessionInput, openXopcDatabase, paginateTranscriptMessages, patchSessionMetadata, pruneBoundedKnowledgeSourceItems, readSchemaVersion, readSchemaVersionForTest, reconcileConnectorAccount, recordActivityEvent, recoverSessionInputState, recoverStaleConnectorLearningJobs, refreshConnectorAccountCurrent, releaseConnectorWebhookDelivery, replaceConnectorCatalogEntries, replaceLatestSessionTurnAndQueueInput, replaceTranscriptRows, replaceUserPeopleIndex, requireXopcDatabase, resetSessionRecord, resetXopcDatabaseSingletonForTest, resolveClarification, resolveMigrationsDir, resolveSessionAgentId, resolveXopcDatabasePath, restoreBeforeCompactionBoundary, revokeDevice, revokeEndpointPrincipal, rotateDeviceRefreshToken, runSqliteWriteTransaction, searchSessionTranscript, sessionConfigRowToConfig, sessionRowToMetadata, setCollaborationRuleStatus, setConnectorLearningPaused, setEndpointSessionBinding, setInteractionState, setKnowledgeConsumerWatermark, setKnowledgeSourceCursor, setKnowledgeSourceItemSynthesisStatus, setSessionConfig, setSessionInputStatus, setSessionTaskPlan, setUserTrustPolicy, signGatewayPayload, startEndpointToolInvocationAudit, startKnowledgeSyncRun, summarizeUserPeople, supersedeActiveClarification, touchEndpointPrincipal, transcriptEntryRowToStoredRow, updateConnectorLearningJob, updateInteractionStateFromMessage, updateRelationshipSettings, updateSessionConfig, updateSessionStats, updateUserPerson, upsertConnectorActionMetadata, upsertConnectorCatalogEntry, upsertConnectorConnection, upsertConnectorInstallation, upsertConnectorSyncPolicy, upsertKnowledgeSourceItems, upsertNoteAgentContextRecord, upsertNoteRecord, validateLatestSessionTurnTarget };
+export { COMPOSER_INPUT_HISTORY_LIMIT, DatabaseSchemaMigrationGapError, DatabaseSchemaTooNewError, SCHEMA_META_SCHEMA_VERSION_KEY, XOPC_DB_BASELINE_SCHEMA_VERSION, XOPC_DB_FILENAME, XOPC_DB_SCHEMA_VERSION, acknowledgeHomeAttention, appendCompactionBoundaryIfUnchanged, appendComposerInputHistory, appendConnectorExecutionAudit, appendTranscriptEntry, applyPendingMigrations, authenticateDeviceAccessToken, bindEndpointPrincipal, buildDefaultSessionMetadata, buildGlobalSessionStats, buildRefreshProofMessage, buildRelationshipPrompt, cancelQueuedSessionInput, claimConnectorWebhookDelivery, claimContextExtractionRun, claimKnowledgeSourceItems, claimNextConnectorLearningJob, claimNextSessionInput, classifyStoredRow, clearComposerInputHistory, clearGatewayIdentityForTest, closeTemporalAssertions, closeXopcDatabase, completeConnectorWebhookDelivery, completeKnowledgeSourceItemSynthesis, consumeClarificationApproval, consumeClarificationResume, consumeConnectorApproval, consumeDevicePairingToken, countKnowledgeSourceItems, createClarificationWait, createCollaborationRule, createConnectorApproval, createContextEvidence, createDevice, createDevicePairingSetup, createEndpointPrincipal, createObjectLinkRecord, createTemporalAssertion, decideConnectorApproval, deleteBrowserTabBinding, deleteBrowserTabBindingsByEndpoint, deleteBrowserTabBindingsByPrincipal, deleteConnectorConnection, deleteConnectorInstallation, deleteEndpointSessionBinding, deleteKnowledgeSourceItems, deleteNoteAgentContextRecord, deleteNoteRecord, deleteObjectLinkRecord, deleteSessionConfig, deleteSessionRecord, discoverSqlMigrations, enqueueConnectorLearningJob, ensureSessionRecord, ensureXopcDatabaseSchema, estimateTokensFromMessages, extractFtsContent, findSessionInput, findSessionKeyBySessionId, finishContextExtractionRun, finishEndpointToolInvocationAudit, finishKnowledgeSyncRun, finishSessionInputRun, getActiveClarification, getActivityEventRecord, getBrowserTabBinding, getBrowserTabBindingById, getCachedConnectorCatalogEntry, getClarification, getClarificationResumeInput, getClarificationSnapshot, getCollaborationRule, getConnectorAccount, getConnectorApproval, getConnectorConnection, getConnectorInstallation, getConnectorSyncPolicy, getConnectorSyncPolicyForConnection, getContextExtractionRun, getCurrentSessionId, getDevice, getEndpointPrincipal, getEndpointSessionBinding, getGlobalSessionStats, getInteractionState, getKnowledgeConsumerWatermark, getKnowledgeSourceCursor, getKnowledgeSourceItem, getNoteAgentContextRecord, getNoteRecord, getOrCreateGatewayIdentity, getRelationshipSettings, getSessionConfig, getSessionInputById, getSessionInputState, getSessionMetadata, getSessionPersistedLevels, getSessionTaskPlan, getSqliteDatabase, getUserPeopleIndexState, getUserPerson, getUserTrustPolicy, getXopcDatabase, hasIndependentExtractionOutput, hasSessionConfig, incrementSessionStatsOnAppend, insertSessionInput, inspectSchemaMigrationStatus, isClarificationSuspended, isDevicePairingSetupActive, isHomeAttentionAcknowledged, isProactiveSupportAllowed, isXopcDatabaseOpen, issueDeviceTokenPair, linkContextObjects, listActiveSessionInputRuns, listActivityRecords, listCachedConnectorCatalogEntries, listCollaborationRules, listCompactionBoundaries, listComposerInputHistory, listConnectorAccounts, listConnectorActionMetadata, listConnectorApprovals, listConnectorConnections, listConnectorExecutionAudit, listConnectorInstallations, listConnectorLearningJobs, listConnectorSyncPolicies, listContextExtractionOutputs, listContextExtractionRuns, listContextObjectRelations, listDevices, listEndpointPrincipals, listEndpointToolInvocationAudits, listKnowledgeSourceChanges, listKnowledgeSourceItems, listKnowledgeSyncRuns, listNoteRecords, listObjectActivityRecords, listObjectLinkRecords, listProjectActivityRecords, listRegisteredMigrationTargets, listSessionMetadata, listSessionsByAgent, listTemporalAssertions, listUserPeople, loadCompactionSourceSnapshot, loadLlmMessagesForSession, loadTranscriptHistoryRowsForSession, loadTranscriptRows, loadTranscriptRowsForSession, mergeUserPeople, metadataToSessionInsert, mutateQueuedSessionInput, openXopcDatabase, paginateTranscriptMessages, patchSessionMetadata, pruneBoundedKnowledgeSourceItems, readSchemaVersion, readSchemaVersionForTest, reconcileConnectorAccount, recordActivityEvent, recoverSessionInputState, recoverStaleConnectorLearningJobs, refreshConnectorAccountCurrent, releaseConnectorWebhookDelivery, replaceConnectorCatalogEntries, replaceLatestSessionTurnAndQueueInput, replaceTranscriptRows, replaceUserPeopleIndex, requireXopcDatabase, resetSessionRecord, resetXopcDatabaseSingletonForTest, resolveClarification, resolveMigrationsDir, resolveSessionAgentId, resolveXopcDatabasePath, restoreBeforeCompactionBoundary, revokeDevice, revokeEndpointPrincipal, rotateDeviceRefreshToken, runSqliteWriteTransaction, searchSessionTranscript, sessionConfigRowToConfig, sessionRowToMetadata, setBrowserTabBinding, setCollaborationRuleStatus, setConnectorLearningPaused, setEndpointSessionBinding, setInteractionState, setKnowledgeConsumerWatermark, setKnowledgeSourceCursor, setKnowledgeSourceItemSynthesisStatus, setSessionConfig, setSessionInputStatus, setSessionTaskPlan, setUserTrustPolicy, signGatewayPayload, startEndpointToolInvocationAudit, startKnowledgeSyncRun, summarizeUserPeople, supersedeActiveClarification, touchEndpointPrincipal, transcriptEntryRowToStoredRow, updateConnectorLearningJob, updateInteractionStateFromMessage, updateRelationshipSettings, updateSessionConfig, updateSessionStats, updateUserPerson, upsertConnectorActionMetadata, upsertConnectorCatalogEntry, upsertConnectorConnection, upsertConnectorInstallation, upsertConnectorSyncPolicy, upsertKnowledgeSourceItems, upsertNoteAgentContextRecord, upsertNoteRecord, validateLatestSessionTurnTarget };

package/dist/src/storage/sqlite/migrations/155_browser_extension.sql

@@ -0,0 +1,120 @@
+PRAGMA defer_foreign_keys = ON;
+
+-- Rebuild the device table and every table that references it. SQLite rewrites
+-- foreign-key targets on table rename, so rebuilding only `devices` would leave
+-- references pointing at the temporary table name.
+ALTER TABLE notification_deliveries RENAME TO notification_deliveries_v154;
+ALTER TABLE device_pairing_requests RENAME TO device_pairing_requests_v154;
+ALTER TABLE device_refresh_credentials RENAME TO device_refresh_credentials_v154;
+ALTER TABLE device_access_sessions RENAME TO device_access_sessions_v154;
+ALTER TABLE device_push_endpoints RENAME TO device_push_endpoints_v154;
+ALTER TABLE devices RENAME TO devices_v154;
+
+DROP INDEX idx_notification_deliveries_due;
+DROP INDEX idx_device_pairing_requests_expiry;
+DROP INDEX idx_device_refresh_credentials_device;
+DROP INDEX idx_device_access_sessions_device;
+
+CREATE TABLE devices (
+  device_id TEXT PRIMARY KEY,
+  display_name TEXT NOT NULL,
+  platform TEXT NOT NULL CHECK (platform IN ('ios', 'android', 'chrome')),
+  extension_id TEXT CHECK (extension_id IS NULL OR length(extension_id) = 32),
+  public_key_jwk TEXT NOT NULL,
+  scopes_json TEXT NOT NULL,
+  created_at INTEGER NOT NULL,
+  last_seen_at INTEGER,
+  revoked_at INTEGER,
+  CHECK ((platform = 'chrome') = (extension_id IS NOT NULL))
+);
+
+CREATE TABLE device_refresh_credentials (
+  credential_id TEXT PRIMARY KEY,
+  device_id TEXT NOT NULL REFERENCES devices(device_id) ON DELETE CASCADE,
+  token_hash TEXT NOT NULL,
+  expires_at INTEGER NOT NULL,
+  created_at INTEGER NOT NULL,
+  last_used_at INTEGER,
+  replaced_by TEXT REFERENCES device_refresh_credentials(credential_id),
+  rotation_request_id TEXT,
+  revoked_at INTEGER
+);
+
+CREATE TABLE device_access_sessions (
+  session_id TEXT PRIMARY KEY,
+  device_id TEXT NOT NULL REFERENCES devices(device_id) ON DELETE CASCADE,
+  token_hash TEXT NOT NULL,
+  expires_at INTEGER NOT NULL,
+  created_at INTEGER NOT NULL,
+  revoked_at INTEGER
+);
+
+CREATE TABLE device_push_endpoints (
+  device_id TEXT PRIMARY KEY REFERENCES devices(device_id) ON DELETE CASCADE,
+  platform TEXT NOT NULL CHECK (platform IN ('ios', 'android')),
+  push_token TEXT NOT NULL UNIQUE,
+  enabled INTEGER NOT NULL DEFAULT 1,
+  permissions TEXT NOT NULL CHECK (permissions IN ('granted', 'denied', 'unknown')),
+  preferences_json TEXT NOT NULL DEFAULT '{}',
+  locale TEXT NOT NULL CHECK (locale IN ('en', 'zh')),
+  app_version TEXT,
+  lease_expires_at INTEGER NOT NULL,
+  last_seen_at INTEGER NOT NULL,
+  created_at INTEGER NOT NULL,
+  updated_at INTEGER NOT NULL
+);
+
+CREATE TABLE device_pairing_requests (
+  request_id TEXT PRIMARY KEY,
+  pairing_id TEXT NOT NULL UNIQUE REFERENCES device_pairing_sessions(pairing_id) ON DELETE CASCADE,
+  device_json TEXT NOT NULL,
+  status TEXT NOT NULL CHECK (status IN ('pending', 'approved', 'completed', 'rejected', 'cancelled', 'expired')),
+  revision INTEGER NOT NULL DEFAULT 1,
+  confirmation_code TEXT NOT NULL,
+  expires_at INTEGER NOT NULL,
+  recovery_until INTEGER NOT NULL,
+  completion_key TEXT,
+  initial_token_hash TEXT,
+  device_id TEXT REFERENCES devices(device_id),
+  created_at INTEGER NOT NULL
+);
+
+CREATE TABLE notification_deliveries (
+  event_id TEXT NOT NULL,
+  device_id TEXT NOT NULL,
+  status TEXT NOT NULL CHECK (status IN ('pending', 'accepted', 'delivered', 'dead')),
+  attempts INTEGER NOT NULL DEFAULT 0,
+  next_attempt_at INTEGER NOT NULL,
+  provider_ticket_id TEXT,
+  last_error TEXT,
+  updated_at INTEGER NOT NULL,
+  PRIMARY KEY (event_id, device_id),
+  FOREIGN KEY (event_id) REFERENCES notification_events(event_id) ON DELETE CASCADE,
+  FOREIGN KEY (device_id) REFERENCES device_push_endpoints(device_id) ON DELETE CASCADE
+);
+
+INSERT INTO devices
+SELECT device_id, display_name, platform, NULL, public_key_jwk, scopes_json,
+  created_at, last_seen_at, revoked_at
+FROM devices_v154;
+INSERT INTO device_refresh_credentials SELECT * FROM device_refresh_credentials_v154;
+INSERT INTO device_access_sessions SELECT * FROM device_access_sessions_v154;
+INSERT INTO device_push_endpoints SELECT * FROM device_push_endpoints_v154;
+INSERT INTO device_pairing_requests SELECT * FROM device_pairing_requests_v154;
+INSERT INTO notification_deliveries SELECT * FROM notification_deliveries_v154;
+
+DROP TABLE notification_deliveries_v154;
+DROP TABLE device_pairing_requests_v154;
+DROP TABLE device_refresh_credentials_v154;
+DROP TABLE device_access_sessions_v154;
+DROP TABLE device_push_endpoints_v154;
+DROP TABLE devices_v154;
+
+CREATE INDEX idx_notification_deliveries_due
+  ON notification_deliveries(status, next_attempt_at);
+CREATE INDEX idx_device_pairing_requests_expiry
+  ON device_pairing_requests(recovery_until);
+CREATE INDEX idx_device_refresh_credentials_device
+  ON device_refresh_credentials(device_id, expires_at);
+CREATE INDEX idx_device_access_sessions_device
+  ON device_access_sessions(device_id, expires_at);

package/dist/src/storage/sqlite/migrations/156_browser_tab_bindings.sql

@@ -0,0 +1,14 @@
+CREATE TABLE browser_tab_bindings (
+  binding_id TEXT PRIMARY KEY,
+  session_key TEXT NOT NULL UNIQUE,
+  principal_id TEXT NOT NULL REFERENCES devices(device_id) ON DELETE CASCADE,
+  endpoint_id TEXT NOT NULL,
+  tab_id TEXT NOT NULL,
+  window_id TEXT NOT NULL,
+  document_id TEXT NOT NULL,
+  url_origin TEXT NOT NULL,
+  mode TEXT NOT NULL CHECK (mode IN ('read', 'act')),
+  created_at INTEGER NOT NULL,
+  expires_at INTEGER NOT NULL
+);
+CREATE INDEX idx_browser_tab_bindings_expiry ON browser_tab_bindings(expires_at);

package/dist/src/storage/sqlite/migrations/runner.d.ts

@@ -3,7 +3,7 @@ import type { ApplyMigrationsOptions } from './types.js';
 /** Baseline schema version applied from schema.sql on first open. */
 export declare const XOPC_DB_BASELINE_SCHEMA_VERSION = 11;
 /** Latest schema version this release supports (increment when adding migrations). */
-export declare const XOPC_DB_SCHEMA_VERSION = 154;
+export declare const XOPC_DB_SCHEMA_VERSION = 156;
 export declare function resolveMigrationsDir(override?: string): string;
 /**
  * Apply sequential SQL migrations from (currentVersion + 1) through targetVersion.

package/dist/src/storage/sqlite/migrations/runner.js

@@ -12,7 +12,7 @@ const log = createLogger("Sqlite:Migrations");
 /** Baseline schema version applied from schema.sql on first open. */
 const XOPC_DB_BASELINE_SCHEMA_VERSION = 11;
 /** Latest schema version this release supports (increment when adding migrations). */
-const XOPC_DB_SCHEMA_VERSION = 154;
+const XOPC_DB_SCHEMA_VERSION = 156;
 const MODULE_DIR = dirname(fileURLToPath(import.meta.url));
 function backupBeforeTaskCutover(db, databasePath) {
 	db.exec("PRAGMA wal_checkpoint(FULL)");
@@ -57,7 +57,7 @@ function applySingleMigration(db, migration) {
 * Each step runs in its own transaction and updates schema_meta on success.
 */
 function applyPendingMigrations(db, options = {}) {
-	const targetVersion = options.targetVersion ?? 154;
+	const targetVersion = options.targetVersion ?? 156;
 	let currentVersion = readSchemaVersion(db);
 	if (currentVersion > targetVersion) throw new DatabaseSchemaTooNewError(currentVersion, targetVersion);
 	if (currentVersion >= targetVersion) return currentVersion;
@@ -94,7 +94,7 @@ function applyPendingMigrations(db, options = {}) {
 }
 /** Inspect schema version without mutating the database. */
 function inspectSchemaMigrationStatus(db, options = {}) {
-	const appVersion = options.targetVersion ?? 154;
+	const appVersion = options.targetVersion ?? 156;
 	const dbVersion = readSchemaVersion(db);
 	if (dbVersion > appVersion) return {
 		dbVersion,

package/dist/src/storage/sqlite/migrations/runner.ts

@@ -19,7 +19,7 @@ const log = createLogger('Sqlite:Migrations');
 export const XOPC_DB_BASELINE_SCHEMA_VERSION = 11;
 
 /** Latest schema version this release supports (increment when adding migrations). */
-export const XOPC_DB_SCHEMA_VERSION = 154;
+export const XOPC_DB_SCHEMA_VERSION = 156;
 
 const MODULE_DIR = dirname(fileURLToPath(import.meta.url));
 

package/dist/src/storage/sqlite/schema.js

@@ -32,7 +32,7 @@ function ensureXopcDatabaseSchema(db, options = {}) {
 		currentVersion = 11;
 	}
 	applyPendingMigrations(db, {
-		targetVersion: 154,
+		targetVersion: 156,
 		databasePath: options.databasePath
 	});
 }

package/dist/src/voice/realtime/agentBroker.d.ts

@@ -0,0 +1,54 @@
+import type { RealtimeEvent, RealtimeSubscriptionHandle } from '../../realtime/broker.js';
+import type { SessionInput, SessionInputState } from '../../storage/sqlite/session-input-repository.js';
+import type { SubmitSessionInput } from '../../gateway/service/session-input-coordinator.js';
+export interface VoiceAgentEvent {
+    type: string;
+    payload?: Record<string, unknown>;
+}
+export interface VoiceAgentTask {
+    taskId: string;
+    runId: string;
+    events: AsyncIterable<VoiceAgentEvent>;
+}
+export interface VoiceAgentBroker {
+    delegate(input: {
+        sessionKey: string;
+        expectedSessionId: string;
+        turnId: string;
+        text: string;
+        signal: AbortSignal;
+    }): Promise<VoiceAgentTask>;
+    cancel(taskId: string): Promise<boolean>;
+}
+type SubmitResult = {
+    ok: true;
+    effectiveDelivery: 'next' | 'steer';
+    state: SessionInputState;
+} | {
+    ok: false;
+    code: string;
+};
+type BrokerDependencies = {
+    submit(input: SubmitSessionInput): Promise<SubmitResult>;
+    find(sessionKey: string, clientMessageId: string): SessionInput | undefined;
+    snapshot(sessionKey: string): SessionInputState;
+    currentSequence(topic: string): number;
+    subscribe(topic: string, afterSeq: number, listener: (event: RealtimeEvent) => void): RealtimeSubscriptionHandle;
+    cancelRun(runId: string): Promise<void>;
+};
+/** Durable voice-to-Agent boundary. Playback and socket cancellation only detach event delivery. */
+export declare class DurableVoiceAgentBroker implements VoiceAgentBroker {
+    private readonly deps;
+    private readonly runByTask;
+    constructor(deps: BrokerDependencies);
+    delegate(input: {
+        sessionKey: string;
+        expectedSessionId: string;
+        turnId: string;
+        text: string;
+        signal: AbortSignal;
+    }): Promise<VoiceAgentTask>;
+    cancel(taskId: string): Promise<boolean>;
+    private events;
+}
+export {};