@xopcai/xopc 0.0.264 → 0.0.266

package/dist/src/storage/sqlite/device-pairing-approval.js

@@ -1,6 +1,6 @@
 import { getSqliteDatabase, runSqliteWriteTransaction } from "./transaction.js";
 import { buildDevicePairingProof, devicePairingCompleteSchema, devicePairingDeviceSchema } from "../../../packages/gateway-contract/src/device-pairing.js";
-import { DEFAULT_MOBILE_SCOPES } from "../../gateway/security/gateway-scopes.js";
+import { DEFAULT_BROWSER_EXTENSION_SCOPES, DEFAULT_MOBILE_SCOPES } from "../../gateway/security/gateway-scopes.js";
 import { createDevice, getDevice, registerInitialDeviceRefreshToken, revokeDevice } from "./device-access-repository.js";
 import { getOrCreateGatewayIdentity } from "./gateway-identity-repository.js";
 import crypto from "node:crypto";
@@ -19,6 +19,7 @@ const hash = (value) => crypto.createHash("sha256").update(value).digest("hex");
 const fail = (code, status) => {
 	throw new DevicePairingError(code, status);
 };
+const scopesForPlatform = (platform) => platform === "chrome" ? DEFAULT_BROWSER_EXTENSION_SCOPES : DEFAULT_MOBILE_SCOPES;
 function requestRow(id, now) {
 	const db = getSqliteDatabase();
 	db.prepare(`UPDATE device_pairing_requests SET status = 'expired', revision = revision + 1
@@ -133,9 +134,10 @@ function operateDevicePairingRequest(action, body, now = Date.now()) {
 				return;
 			}
 			if (current.status !== "approved") fail("PAIRING_NOT_APPROVED");
+			const device = devicePairingDeviceSchema.parse(JSON.parse(current.device_json));
 			const created = createDevice({
-				...devicePairingDeviceSchema.parse(JSON.parse(current.device_json)),
-				scopes: DEFAULT_MOBILE_SCOPES,
+				...device,
+				scopes: scopesForPlatform(device.platform),
 				now
 			});
 			registerInitialDeviceRefreshToken(created.id, complete.initialRefreshToken, now);
@@ -147,7 +149,7 @@ function operateDevicePairingRequest(action, body, now = Date.now()) {
 	return {
 		request: statusFromRow(requestRow(row.request_id, now), now),
 		routes: JSON.parse(setup.routes_json),
-		...action === "complete" ? { scopes: DEFAULT_MOBILE_SCOPES } : {}
+		...action === "complete" ? { scopes: scopesForPlatform(devicePairingDeviceSchema.parse(JSON.parse(row.device_json)).platform) } : {}
 	};
 }
 //#endregion

package/dist/src/storage/sqlite/device-pairing-repository.d.ts

@@ -1,6 +1,6 @@
 export type DeviceRoute = {
     id: string;
-    kind: 'xopc-secure-link' | 'tailscale' | 'custom-https';
+    kind: 'xopc-secure-link' | 'tailscale' | 'custom-https' | 'local-browser';
     url: string;
 };
 export type DevicePairingSetup = {

package/dist/src/storage/sqlite/index.d.ts

@@ -6,6 +6,7 @@ export { discoverSqlMigrations, listRegisteredMigrationTargets } from './migrati
 export { closeXopcDatabase, getXopcDatabase, isXopcDatabaseOpen, openXopcDatabase, requireXopcDatabase, resetXopcDatabaseSingletonForTest, type OpenXopcDatabaseOptions, type XopcDatabase, } from './connection.js';
 export { getSqliteDatabase, runSqliteWriteTransaction } from './transaction.js';
 export { deleteEndpointSessionBinding, getEndpointSessionBinding, setEndpointSessionBinding, type StoredEndpointSessionBinding, } from './endpoint-session-binding-repository.js';
+export { deleteBrowserTabBinding, deleteBrowserTabBindingsByEndpoint, deleteBrowserTabBindingsByPrincipal, getBrowserTabBinding, getBrowserTabBindingById, setBrowserTabBinding, } from './browser-tab-binding-repository.js';
 export { authenticateDeviceAccessToken, buildRefreshProofMessage, createDevice, getDevice, issueDeviceTokenPair, listDevices, revokeDevice, rotateDeviceRefreshToken, type DeviceAccessIdentity, type DevicePlatform, type DevicePublicKeyJwk, type DeviceRecord, type DeviceTokenPair, } from './device-access-repository.js';
 export { clearGatewayIdentityForTest, getOrCreateGatewayIdentity, signGatewayPayload, type GatewayIdentity, } from './gateway-identity-repository.js';
 export { consumeDevicePairingToken, createDevicePairingSetup, isDevicePairingSetupActive, type DevicePairingSetup, type DeviceRoute, type PairingConsumeResult, } from './device-pairing-repository.js';

package/dist/src/storage/sqlite/index.js

@@ -7,6 +7,7 @@ import { ensureXopcDatabaseSchema } from "./schema.js";
 import { closeXopcDatabase, getXopcDatabase, isXopcDatabaseOpen, openXopcDatabase, requireXopcDatabase, resetXopcDatabaseSingletonForTest } from "./connection.js";
 import { getSqliteDatabase, runSqliteWriteTransaction } from "./transaction.js";
 import { deleteEndpointSessionBinding, getEndpointSessionBinding, setEndpointSessionBinding } from "./endpoint-session-binding-repository.js";
+import { deleteBrowserTabBinding, deleteBrowserTabBindingsByEndpoint, deleteBrowserTabBindingsByPrincipal, getBrowserTabBinding, getBrowserTabBindingById, setBrowserTabBinding } from "./browser-tab-binding-repository.js";
 import { authenticateDeviceAccessToken, buildRefreshProofMessage, createDevice, getDevice, issueDeviceTokenPair, listDevices, revokeDevice, rotateDeviceRefreshToken } from "./device-access-repository.js";
 import { clearGatewayIdentityForTest, getOrCreateGatewayIdentity, signGatewayPayload } from "./gateway-identity-repository.js";
 import { consumeDevicePairingToken, createDevicePairingSetup, isDevicePairingSetupActive } from "./device-pairing-repository.js";
@@ -39,4 +40,4 @@ import { appendConnectorExecutionAudit, claimConnectorWebhookDelivery, completeC
 import { getConnectorAccount, listConnectorAccounts, reconcileConnectorAccount, refreshConnectorAccountCurrent } from "./connector-account-repository.js";
 import { getConnectorSyncPolicy, getConnectorSyncPolicyForConnection, listConnectorSyncPolicies, upsertConnectorSyncPolicy } from "./connector-sync-policy-repository.js";
 import { getUserTrustPolicy, setUserTrustPolicy } from "./user-trust-repository.js";
-export { COMPOSER_INPUT_HISTORY_LIMIT, DatabaseSchemaMigrationGapError, DatabaseSchemaTooNewError, SCHEMA_META_SCHEMA_VERSION_KEY, XOPC_DB_BASELINE_SCHEMA_VERSION, XOPC_DB_FILENAME, XOPC_DB_SCHEMA_VERSION, acknowledgeHomeAttention, appendCompactionBoundaryIfUnchanged, appendComposerInputHistory, appendConnectorExecutionAudit, appendTranscriptEntry, applyPendingMigrations, authenticateDeviceAccessToken, bindEndpointPrincipal, buildDefaultSessionMetadata, buildGlobalSessionStats, buildRefreshProofMessage, buildRelationshipPrompt, cancelQueuedSessionInput, claimConnectorWebhookDelivery, claimContextExtractionRun, claimKnowledgeSourceItems, claimNextConnectorLearningJob, claimNextSessionInput, classifyStoredRow, clearComposerInputHistory, clearGatewayIdentityForTest, closeTemporalAssertions, closeXopcDatabase, completeConnectorWebhookDelivery, completeKnowledgeSourceItemSynthesis, consumeClarificationApproval, consumeClarificationResume, consumeConnectorApproval, consumeDevicePairingToken, countKnowledgeSourceItems, createClarificationWait, createCollaborationRule, createConnectorApproval, createContextEvidence, createDevice, createDevicePairingSetup, createEndpointPrincipal, createObjectLinkRecord, createTemporalAssertion, decideConnectorApproval, deleteConnectorConnection, deleteConnectorInstallation, deleteEndpointSessionBinding, deleteKnowledgeSourceItems, deleteNoteAgentContextRecord, deleteNoteRecord, deleteObjectLinkRecord, deleteSessionConfig, deleteSessionRecord, discoverSqlMigrations, enqueueConnectorLearningJob, ensureSessionRecord, ensureXopcDatabaseSchema, estimateTokensFromMessages, extractFtsContent, findSessionInput, findSessionKeyBySessionId, finishContextExtractionRun, finishEndpointToolInvocationAudit, finishKnowledgeSyncRun, finishSessionInputRun, getActiveClarification, getActivityEventRecord, getCachedConnectorCatalogEntry, getClarification, getClarificationResumeInput, getClarificationSnapshot, getCollaborationRule, getConnectorAccount, getConnectorApproval, getConnectorConnection, getConnectorInstallation, getConnectorSyncPolicy, getConnectorSyncPolicyForConnection, getContextExtractionRun, getCurrentSessionId, getDevice, getEndpointPrincipal, getEndpointSessionBinding, getGlobalSessionStats, getInteractionState, getKnowledgeConsumerWatermark, getKnowledgeSourceCursor, getKnowledgeSourceItem, getNoteAgentContextRecord, getNoteRecord, getOrCreateGatewayIdentity, getRelationshipSettings, getSessionConfig, getSessionInputById, getSessionInputState, getSessionMetadata, getSessionPersistedLevels, getSessionTaskPlan, getSqliteDatabase, getUserPeopleIndexState, getUserPerson, getUserTrustPolicy, getXopcDatabase, hasIndependentExtractionOutput, hasSessionConfig, incrementSessionStatsOnAppend, insertSessionInput, inspectSchemaMigrationStatus, isClarificationSuspended, isDevicePairingSetupActive, isHomeAttentionAcknowledged, isProactiveSupportAllowed, isXopcDatabaseOpen, issueDeviceTokenPair, linkContextObjects, listActiveSessionInputRuns, listActivityRecords, listCachedConnectorCatalogEntries, listCollaborationRules, listCompactionBoundaries, listComposerInputHistory, listConnectorAccounts, listConnectorActionMetadata, listConnectorApprovals, listConnectorConnections, listConnectorExecutionAudit, listConnectorInstallations, listConnectorLearningJobs, listConnectorSyncPolicies, listContextExtractionOutputs, listContextExtractionRuns, listContextObjectRelations, listDevices, listEndpointPrincipals, listEndpointToolInvocationAudits, listKnowledgeSourceChanges, listKnowledgeSourceItems, listKnowledgeSyncRuns, listNoteRecords, listObjectActivityRecords, listObjectLinkRecords, listProjectActivityRecords, listRegisteredMigrationTargets, listSessionMetadata, listSessionsByAgent, listTemporalAssertions, listUserPeople, loadCompactionSourceSnapshot, loadLlmMessagesForSession, loadTranscriptHistoryRowsForSession, loadTranscriptRows, loadTranscriptRowsForSession, mergeUserPeople, metadataToSessionInsert, mutateQueuedSessionInput, openXopcDatabase, paginateTranscriptMessages, patchSessionMetadata, pruneBoundedKnowledgeSourceItems, readSchemaVersion, readSchemaVersionForTest, reconcileConnectorAccount, recordActivityEvent, recoverSessionInputState, recoverStaleConnectorLearningJobs, refreshConnectorAccountCurrent, releaseConnectorWebhookDelivery, replaceConnectorCatalogEntries, replaceLatestSessionTurnAndQueueInput, replaceTranscriptRows, replaceUserPeopleIndex, requireXopcDatabase, resetSessionRecord, resetXopcDatabaseSingletonForTest, resolveClarification, resolveMigrationsDir, resolveSessionAgentId, resolveXopcDatabasePath, restoreBeforeCompactionBoundary, revokeDevice, revokeEndpointPrincipal, rotateDeviceRefreshToken, runSqliteWriteTransaction, searchSessionTranscript, sessionConfigRowToConfig, sessionRowToMetadata, setCollaborationRuleStatus, setConnectorLearningPaused, setEndpointSessionBinding, setInteractionState, setKnowledgeConsumerWatermark, setKnowledgeSourceCursor, setKnowledgeSourceItemSynthesisStatus, setSessionConfig, setSessionInputStatus, setSessionTaskPlan, setUserTrustPolicy, signGatewayPayload, startEndpointToolInvocationAudit, startKnowledgeSyncRun, summarizeUserPeople, supersedeActiveClarification, touchEndpointPrincipal, transcriptEntryRowToStoredRow, updateConnectorLearningJob, updateInteractionStateFromMessage, updateRelationshipSettings, updateSessionConfig, updateSessionStats, updateUserPerson, upsertConnectorActionMetadata, upsertConnectorCatalogEntry, upsertConnectorConnection, upsertConnectorInstallation, upsertConnectorSyncPolicy, upsertKnowledgeSourceItems, upsertNoteAgentContextRecord, upsertNoteRecord, validateLatestSessionTurnTarget };
+export { COMPOSER_INPUT_HISTORY_LIMIT, DatabaseSchemaMigrationGapError, DatabaseSchemaTooNewError, SCHEMA_META_SCHEMA_VERSION_KEY, XOPC_DB_BASELINE_SCHEMA_VERSION, XOPC_DB_FILENAME, XOPC_DB_SCHEMA_VERSION, acknowledgeHomeAttention, appendCompactionBoundaryIfUnchanged, appendComposerInputHistory, appendConnectorExecutionAudit, appendTranscriptEntry, applyPendingMigrations, authenticateDeviceAccessToken, bindEndpointPrincipal, buildDefaultSessionMetadata, buildGlobalSessionStats, buildRefreshProofMessage, buildRelationshipPrompt, cancelQueuedSessionInput, claimConnectorWebhookDelivery, claimContextExtractionRun, claimKnowledgeSourceItems, claimNextConnectorLearningJob, claimNextSessionInput, classifyStoredRow, clearComposerInputHistory, clearGatewayIdentityForTest, closeTemporalAssertions, closeXopcDatabase, completeConnectorWebhookDelivery, completeKnowledgeSourceItemSynthesis, consumeClarificationApproval, consumeClarificationResume, consumeConnectorApproval, consumeDevicePairingToken, countKnowledgeSourceItems, createClarificationWait, createCollaborationRule, createConnectorApproval, createContextEvidence, createDevice, createDevicePairingSetup, createEndpointPrincipal, createObjectLinkRecord, createTemporalAssertion, decideConnectorApproval, deleteBrowserTabBinding, deleteBrowserTabBindingsByEndpoint, deleteBrowserTabBindingsByPrincipal, deleteConnectorConnection, deleteConnectorInstallation, deleteEndpointSessionBinding, deleteKnowledgeSourceItems, deleteNoteAgentContextRecord, deleteNoteRecord, deleteObjectLinkRecord, deleteSessionConfig, deleteSessionRecord, discoverSqlMigrations, enqueueConnectorLearningJob, ensureSessionRecord, ensureXopcDatabaseSchema, estimateTokensFromMessages, extractFtsContent, findSessionInput, findSessionKeyBySessionId, finishContextExtractionRun, finishEndpointToolInvocationAudit, finishKnowledgeSyncRun, finishSessionInputRun, getActiveClarification, getActivityEventRecord, getBrowserTabBinding, getBrowserTabBindingById, getCachedConnectorCatalogEntry, getClarification, getClarificationResumeInput, getClarificationSnapshot, getCollaborationRule, getConnectorAccount, getConnectorApproval, getConnectorConnection, getConnectorInstallation, getConnectorSyncPolicy, getConnectorSyncPolicyForConnection, getContextExtractionRun, getCurrentSessionId, getDevice, getEndpointPrincipal, getEndpointSessionBinding, getGlobalSessionStats, getInteractionState, getKnowledgeConsumerWatermark, getKnowledgeSourceCursor, getKnowledgeSourceItem, getNoteAgentContextRecord, getNoteRecord, getOrCreateGatewayIdentity, getRelationshipSettings, getSessionConfig, getSessionInputById, getSessionInputState, getSessionMetadata, getSessionPersistedLevels, getSessionTaskPlan, getSqliteDatabase, getUserPeopleIndexState, getUserPerson, getUserTrustPolicy, getXopcDatabase, hasIndependentExtractionOutput, hasSessionConfig, incrementSessionStatsOnAppend, insertSessionInput, inspectSchemaMigrationStatus, isClarificationSuspended, isDevicePairingSetupActive, isHomeAttentionAcknowledged, isProactiveSupportAllowed, isXopcDatabaseOpen, issueDeviceTokenPair, linkContextObjects, listActiveSessionInputRuns, listActivityRecords, listCachedConnectorCatalogEntries, listCollaborationRules, listCompactionBoundaries, listComposerInputHistory, listConnectorAccounts, listConnectorActionMetadata, listConnectorApprovals, listConnectorConnections, listConnectorExecutionAudit, listConnectorInstallations, listConnectorLearningJobs, listConnectorSyncPolicies, listContextExtractionOutputs, listContextExtractionRuns, listContextObjectRelations, listDevices, listEndpointPrincipals, listEndpointToolInvocationAudits, listKnowledgeSourceChanges, listKnowledgeSourceItems, listKnowledgeSyncRuns, listNoteRecords, listObjectActivityRecords, listObjectLinkRecords, listProjectActivityRecords, listRegisteredMigrationTargets, listSessionMetadata, listSessionsByAgent, listTemporalAssertions, listUserPeople, loadCompactionSourceSnapshot, loadLlmMessagesForSession, loadTranscriptHistoryRowsForSession, loadTranscriptRows, loadTranscriptRowsForSession, mergeUserPeople, metadataToSessionInsert, mutateQueuedSessionInput, openXopcDatabase, paginateTranscriptMessages, patchSessionMetadata, pruneBoundedKnowledgeSourceItems, readSchemaVersion, readSchemaVersionForTest, reconcileConnectorAccount, recordActivityEvent, recoverSessionInputState, recoverStaleConnectorLearningJobs, refreshConnectorAccountCurrent, releaseConnectorWebhookDelivery, replaceConnectorCatalogEntries, replaceLatestSessionTurnAndQueueInput, replaceTranscriptRows, replaceUserPeopleIndex, requireXopcDatabase, resetSessionRecord, resetXopcDatabaseSingletonForTest, resolveClarification, resolveMigrationsDir, resolveSessionAgentId, resolveXopcDatabasePath, restoreBeforeCompactionBoundary, revokeDevice, revokeEndpointPrincipal, rotateDeviceRefreshToken, runSqliteWriteTransaction, searchSessionTranscript, sessionConfigRowToConfig, sessionRowToMetadata, setBrowserTabBinding, setCollaborationRuleStatus, setConnectorLearningPaused, setEndpointSessionBinding, setInteractionState, setKnowledgeConsumerWatermark, setKnowledgeSourceCursor, setKnowledgeSourceItemSynthesisStatus, setSessionConfig, setSessionInputStatus, setSessionTaskPlan, setUserTrustPolicy, signGatewayPayload, startEndpointToolInvocationAudit, startKnowledgeSyncRun, summarizeUserPeople, supersedeActiveClarification, touchEndpointPrincipal, transcriptEntryRowToStoredRow, updateConnectorLearningJob, updateInteractionStateFromMessage, updateRelationshipSettings, updateSessionConfig, updateSessionStats, updateUserPerson, upsertConnectorActionMetadata, upsertConnectorCatalogEntry, upsertConnectorConnection, upsertConnectorInstallation, upsertConnectorSyncPolicy, upsertKnowledgeSourceItems, upsertNoteAgentContextRecord, upsertNoteRecord, validateLatestSessionTurnTarget };

package/dist/src/storage/sqlite/migrations/155_browser_extension.sql

@@ -0,0 +1,120 @@
+PRAGMA defer_foreign_keys = ON;
+
+-- Rebuild the device table and every table that references it. SQLite rewrites
+-- foreign-key targets on table rename, so rebuilding only `devices` would leave
+-- references pointing at the temporary table name.
+ALTER TABLE notification_deliveries RENAME TO notification_deliveries_v154;
+ALTER TABLE device_pairing_requests RENAME TO device_pairing_requests_v154;
+ALTER TABLE device_refresh_credentials RENAME TO device_refresh_credentials_v154;
+ALTER TABLE device_access_sessions RENAME TO device_access_sessions_v154;
+ALTER TABLE device_push_endpoints RENAME TO device_push_endpoints_v154;
+ALTER TABLE devices RENAME TO devices_v154;
+
+DROP INDEX idx_notification_deliveries_due;
+DROP INDEX idx_device_pairing_requests_expiry;
+DROP INDEX idx_device_refresh_credentials_device;
+DROP INDEX idx_device_access_sessions_device;
+
+CREATE TABLE devices (
+  device_id TEXT PRIMARY KEY,
+  display_name TEXT NOT NULL,
+  platform TEXT NOT NULL CHECK (platform IN ('ios', 'android', 'chrome')),
+  extension_id TEXT CHECK (extension_id IS NULL OR length(extension_id) = 32),
+  public_key_jwk TEXT NOT NULL,
+  scopes_json TEXT NOT NULL,
+  created_at INTEGER NOT NULL,
+  last_seen_at INTEGER,
+  revoked_at INTEGER,
+  CHECK ((platform = 'chrome') = (extension_id IS NOT NULL))
+);
+
+CREATE TABLE device_refresh_credentials (
+  credential_id TEXT PRIMARY KEY,
+  device_id TEXT NOT NULL REFERENCES devices(device_id) ON DELETE CASCADE,
+  token_hash TEXT NOT NULL,
+  expires_at INTEGER NOT NULL,
+  created_at INTEGER NOT NULL,
+  last_used_at INTEGER,
+  replaced_by TEXT REFERENCES device_refresh_credentials(credential_id),
+  rotation_request_id TEXT,
+  revoked_at INTEGER
+);
+
+CREATE TABLE device_access_sessions (
+  session_id TEXT PRIMARY KEY,
+  device_id TEXT NOT NULL REFERENCES devices(device_id) ON DELETE CASCADE,
+  token_hash TEXT NOT NULL,
+  expires_at INTEGER NOT NULL,
+  created_at INTEGER NOT NULL,
+  revoked_at INTEGER
+);
+
+CREATE TABLE device_push_endpoints (
+  device_id TEXT PRIMARY KEY REFERENCES devices(device_id) ON DELETE CASCADE,
+  platform TEXT NOT NULL CHECK (platform IN ('ios', 'android')),
+  push_token TEXT NOT NULL UNIQUE,
+  enabled INTEGER NOT NULL DEFAULT 1,
+  permissions TEXT NOT NULL CHECK (permissions IN ('granted', 'denied', 'unknown')),
+  preferences_json TEXT NOT NULL DEFAULT '{}',
+  locale TEXT NOT NULL CHECK (locale IN ('en', 'zh')),
+  app_version TEXT,
+  lease_expires_at INTEGER NOT NULL,
+  last_seen_at INTEGER NOT NULL,
+  created_at INTEGER NOT NULL,
+  updated_at INTEGER NOT NULL
+);
+
+CREATE TABLE device_pairing_requests (
+  request_id TEXT PRIMARY KEY,
+  pairing_id TEXT NOT NULL UNIQUE REFERENCES device_pairing_sessions(pairing_id) ON DELETE CASCADE,
+  device_json TEXT NOT NULL,
+  status TEXT NOT NULL CHECK (status IN ('pending', 'approved', 'completed', 'rejected', 'cancelled', 'expired')),
+  revision INTEGER NOT NULL DEFAULT 1,
+  confirmation_code TEXT NOT NULL,
+  expires_at INTEGER NOT NULL,
+  recovery_until INTEGER NOT NULL,
+  completion_key TEXT,
+  initial_token_hash TEXT,
+  device_id TEXT REFERENCES devices(device_id),
+  created_at INTEGER NOT NULL
+);
+
+CREATE TABLE notification_deliveries (
+  event_id TEXT NOT NULL,
+  device_id TEXT NOT NULL,
+  status TEXT NOT NULL CHECK (status IN ('pending', 'accepted', 'delivered', 'dead')),
+  attempts INTEGER NOT NULL DEFAULT 0,
+  next_attempt_at INTEGER NOT NULL,
+  provider_ticket_id TEXT,
+  last_error TEXT,
+  updated_at INTEGER NOT NULL,
+  PRIMARY KEY (event_id, device_id),
+  FOREIGN KEY (event_id) REFERENCES notification_events(event_id) ON DELETE CASCADE,
+  FOREIGN KEY (device_id) REFERENCES device_push_endpoints(device_id) ON DELETE CASCADE
+);
+
+INSERT INTO devices
+SELECT device_id, display_name, platform, NULL, public_key_jwk, scopes_json,
+  created_at, last_seen_at, revoked_at
+FROM devices_v154;
+INSERT INTO device_refresh_credentials SELECT * FROM device_refresh_credentials_v154;
+INSERT INTO device_access_sessions SELECT * FROM device_access_sessions_v154;
+INSERT INTO device_push_endpoints SELECT * FROM device_push_endpoints_v154;
+INSERT INTO device_pairing_requests SELECT * FROM device_pairing_requests_v154;
+INSERT INTO notification_deliveries SELECT * FROM notification_deliveries_v154;
+
+DROP TABLE notification_deliveries_v154;
+DROP TABLE device_pairing_requests_v154;
+DROP TABLE device_refresh_credentials_v154;
+DROP TABLE device_access_sessions_v154;
+DROP TABLE device_push_endpoints_v154;
+DROP TABLE devices_v154;
+
+CREATE INDEX idx_notification_deliveries_due
+  ON notification_deliveries(status, next_attempt_at);
+CREATE INDEX idx_device_pairing_requests_expiry
+  ON device_pairing_requests(recovery_until);
+CREATE INDEX idx_device_refresh_credentials_device
+  ON device_refresh_credentials(device_id, expires_at);
+CREATE INDEX idx_device_access_sessions_device
+  ON device_access_sessions(device_id, expires_at);

package/dist/src/storage/sqlite/migrations/156_browser_tab_bindings.sql

@@ -0,0 +1,14 @@
+CREATE TABLE browser_tab_bindings (
+  binding_id TEXT PRIMARY KEY,
+  session_key TEXT NOT NULL UNIQUE,
+  principal_id TEXT NOT NULL REFERENCES devices(device_id) ON DELETE CASCADE,
+  endpoint_id TEXT NOT NULL,
+  tab_id TEXT NOT NULL,
+  window_id TEXT NOT NULL,
+  document_id TEXT NOT NULL,
+  url_origin TEXT NOT NULL,
+  mode TEXT NOT NULL CHECK (mode IN ('read', 'act')),
+  created_at INTEGER NOT NULL,
+  expires_at INTEGER NOT NULL
+);
+CREATE INDEX idx_browser_tab_bindings_expiry ON browser_tab_bindings(expires_at);

package/dist/src/storage/sqlite/migrations/runner.d.ts

@@ -3,7 +3,7 @@ import type { ApplyMigrationsOptions } from './types.js';
 /** Baseline schema version applied from schema.sql on first open. */
 export declare const XOPC_DB_BASELINE_SCHEMA_VERSION = 11;
 /** Latest schema version this release supports (increment when adding migrations). */
-export declare const XOPC_DB_SCHEMA_VERSION = 154;
+export declare const XOPC_DB_SCHEMA_VERSION = 156;
 export declare function resolveMigrationsDir(override?: string): string;
 /**
  * Apply sequential SQL migrations from (currentVersion + 1) through targetVersion.

package/dist/src/storage/sqlite/migrations/runner.js

@@ -12,7 +12,7 @@ const log = createLogger("Sqlite:Migrations");
 /** Baseline schema version applied from schema.sql on first open. */
 const XOPC_DB_BASELINE_SCHEMA_VERSION = 11;
 /** Latest schema version this release supports (increment when adding migrations). */
-const XOPC_DB_SCHEMA_VERSION = 154;
+const XOPC_DB_SCHEMA_VERSION = 156;
 const MODULE_DIR = dirname(fileURLToPath(import.meta.url));
 function backupBeforeTaskCutover(db, databasePath) {
 	db.exec("PRAGMA wal_checkpoint(FULL)");
@@ -57,7 +57,7 @@ function applySingleMigration(db, migration) {
 * Each step runs in its own transaction and updates schema_meta on success.
 */
 function applyPendingMigrations(db, options = {}) {
-	const targetVersion = options.targetVersion ?? 154;
+	const targetVersion = options.targetVersion ?? 156;
 	let currentVersion = readSchemaVersion(db);
 	if (currentVersion > targetVersion) throw new DatabaseSchemaTooNewError(currentVersion, targetVersion);
 	if (currentVersion >= targetVersion) return currentVersion;
@@ -94,7 +94,7 @@ function applyPendingMigrations(db, options = {}) {
 }
 /** Inspect schema version without mutating the database. */
 function inspectSchemaMigrationStatus(db, options = {}) {
-	const appVersion = options.targetVersion ?? 154;
+	const appVersion = options.targetVersion ?? 156;
 	const dbVersion = readSchemaVersion(db);
 	if (dbVersion > appVersion) return {
 		dbVersion,

package/dist/src/storage/sqlite/migrations/runner.ts

@@ -19,7 +19,7 @@ const log = createLogger('Sqlite:Migrations');
 export const XOPC_DB_BASELINE_SCHEMA_VERSION = 11;
 
 /** Latest schema version this release supports (increment when adding migrations). */
-export const XOPC_DB_SCHEMA_VERSION = 154;
+export const XOPC_DB_SCHEMA_VERSION = 156;
 
 const MODULE_DIR = dirname(fileURLToPath(import.meta.url));
 

package/dist/src/storage/sqlite/schema.js

@@ -32,7 +32,7 @@ function ensureXopcDatabaseSchema(db, options = {}) {
 		currentVersion = 11;
 	}
 	applyPendingMigrations(db, {
-		targetVersion: 154,
+		targetVersion: 156,
 		databasePath: options.databasePath
 	});
 }

package/dist/src/tui/tui-startup-resources.js

@@ -1,6 +1,6 @@
 import { resolveStateDir } from "../config/paths-state.js";
-import { resolveEffectiveAgentProfileForSession } from "../config/agent-profile.js";
 import { init_paths, resolveAgentProfileDir, resolveBundledSkillsDir } from "../config/paths.js";
+import { resolveEffectiveAgentProfileForSession } from "../config/agent-profile.js";
 import { resolveBootstrapFilesSync } from "../agent/bootstrap/bootstrap-files.js";
 import { createSkillConfigManager, isSkillEnabled } from "../agent/skills/config.js";
 import { loadSkills } from "../agent/skills/index.js";

package/dist/src/tui/tui.js

@@ -2,10 +2,10 @@ import { version } from "../../package.js";
 import { resolveStateDir, resolveXopcDatabasePath } from "../config/paths-state.js";
 import { parseAgentSessionKey } from "../routing/session-key-utils.js";
 import { init_agent_session_key, normalizeAgentId } from "../routing/agent-session-key.js";
-import { resolveEffectiveAgentProfileForSession } from "../config/agent-profile.js";
 import { init_paths } from "../config/paths.js";
 import { loadConfig } from "../config/loader.js";
 import { getAllModels, getAllProviders, getApiKey, init_providers, isProviderConfiguredSync } from "../providers/index.js";
+import { resolveEffectiveAgentProfileForSession } from "../config/agent-profile.js";
 import { ProjectTrustStore, hasTrustRequiringProjectResources } from "../project-trust/trust-store.js";
 import { renderWorkflowFinalSummary, renderWorkflowPanel } from "../agent/workflow/snapshot.js";
 import { ensureStarterAgentsInitialized } from "../agent/starter-agents.js";

package/dist/src/voice/realtime/agentBroker.d.ts

@@ -0,0 +1,54 @@
+import type { RealtimeEvent, RealtimeSubscriptionHandle } from '../../realtime/broker.js';
+import type { SessionInput, SessionInputState } from '../../storage/sqlite/session-input-repository.js';
+import type { SubmitSessionInput } from '../../gateway/service/session-input-coordinator.js';
+export interface VoiceAgentEvent {
+    type: string;
+    payload?: Record<string, unknown>;
+}
+export interface VoiceAgentTask {
+    taskId: string;
+    runId: string;
+    events: AsyncIterable<VoiceAgentEvent>;
+}
+export interface VoiceAgentBroker {
+    delegate(input: {
+        sessionKey: string;
+        expectedSessionId: string;
+        turnId: string;
+        text: string;
+        signal: AbortSignal;
+    }): Promise<VoiceAgentTask>;
+    cancel(taskId: string): Promise<boolean>;
+}
+type SubmitResult = {
+    ok: true;
+    effectiveDelivery: 'next' | 'steer';
+    state: SessionInputState;
+} | {
+    ok: false;
+    code: string;
+};
+type BrokerDependencies = {
+    submit(input: SubmitSessionInput): Promise<SubmitResult>;
+    find(sessionKey: string, clientMessageId: string): SessionInput | undefined;
+    snapshot(sessionKey: string): SessionInputState;
+    currentSequence(topic: string): number;
+    subscribe(topic: string, afterSeq: number, listener: (event: RealtimeEvent) => void): RealtimeSubscriptionHandle;
+    cancelRun(runId: string): Promise<void>;
+};
+/** Durable voice-to-Agent boundary. Playback and socket cancellation only detach event delivery. */
+export declare class DurableVoiceAgentBroker implements VoiceAgentBroker {
+    private readonly deps;
+    private readonly runByTask;
+    constructor(deps: BrokerDependencies);
+    delegate(input: {
+        sessionKey: string;
+        expectedSessionId: string;
+        turnId: string;
+        text: string;
+        signal: AbortSignal;
+    }): Promise<VoiceAgentTask>;
+    cancel(taskId: string): Promise<boolean>;
+    private events;
+}
+export {};

package/dist/src/voice/realtime/agentBroker.js

@@ -0,0 +1,116 @@
+//#region src/voice/realtime/agentBroker.ts
+const RUN_ASSIGNMENT_TIMEOUT_MS = 5e3;
+const RUN_ASSIGNMENT_POLL_MS = 20;
+const MAX_TRACKED_TASKS = 256;
+function sleep(ms, signal) {
+	return new Promise((resolve, reject) => {
+		const finish = () => {
+			signal.removeEventListener("abort", abort);
+			resolve();
+		};
+		const timer = setTimeout(finish, ms);
+		const abort = () => {
+			clearTimeout(timer);
+			reject(signal.reason ?? /* @__PURE__ */ new Error("Voice task subscription cancelled"));
+		};
+		signal.addEventListener("abort", abort, { once: true });
+		if (signal.aborted) abort();
+	});
+}
+function eventData(delivery) {
+	if (delivery.kind !== "realtime.event") return void 0;
+	const value = delivery.payload.data;
+	return value && typeof value === "object" && typeof value.type === "string" ? value : void 0;
+}
+/** Durable voice-to-Agent boundary. Playback and socket cancellation only detach event delivery. */
+var DurableVoiceAgentBroker = class {
+	runByTask = /* @__PURE__ */ new Map();
+	constructor(deps) {
+		this.deps = deps;
+	}
+	async delegate(input) {
+		const clientMessageId = `voice:${input.expectedSessionId}:${input.turnId}`;
+		const activeRunId = this.deps.snapshot(input.sessionKey).activeRunId;
+		const activeRunCursor = activeRunId ? this.deps.currentSequence(`run:${activeRunId}`) : 0;
+		const result = await this.deps.submit({
+			sessionKey: input.sessionKey,
+			expectedSessionId: input.expectedSessionId,
+			clientMessageId,
+			delivery: activeRunId ? "steer" : "next",
+			content: input.text,
+			origin: {
+				type: "channel",
+				channel: "voice"
+			}
+		});
+		if (result.ok === false) throw new Error(`Voice task submission failed: ${result.code}`);
+		const deadline = Date.now() + RUN_ASSIGNMENT_TIMEOUT_MS;
+		let row = this.deps.find(input.sessionKey, clientMessageId);
+		while (!row?.runId && !row?.targetRunId) {
+			if (row && [
+				"completed",
+				"cancelled",
+				"failed",
+				"interrupted"
+			].includes(row.status)) throw new Error(row.error ?? `Voice task ended before assignment: ${row.status}`);
+			if (Date.now() >= deadline) throw new Error("Voice task run assignment timed out");
+			await sleep(RUN_ASSIGNMENT_POLL_MS, input.signal);
+			row = this.deps.find(input.sessionKey, clientMessageId);
+		}
+		const runId = row.runId ?? row.targetRunId;
+		this.runByTask.set(row.id, runId);
+		if (this.runByTask.size > MAX_TRACKED_TASKS) this.runByTask.delete(this.runByTask.keys().next().value);
+		const afterSeq = result.effectiveDelivery === "steer" && runId === activeRunId ? activeRunCursor : 0;
+		return {
+			taskId: row.id,
+			runId,
+			events: this.events(row.id, runId, afterSeq, input.signal)
+		};
+	}
+	async cancel(taskId) {
+		const runId = this.runByTask.get(taskId);
+		if (!runId) return false;
+		await this.deps.cancelRun(runId);
+		this.runByTask.delete(taskId);
+		return true;
+	}
+	async *events(taskId, runId, afterSeq, signal) {
+		const queued = [];
+		let wake;
+		const push = (event) => {
+			queued.push(event);
+			wake?.();
+			wake = void 0;
+		};
+		const subscription = this.deps.subscribe(`run:${runId}`, afterSeq, push);
+		subscription.initial.forEach(push);
+		const abort = () => {
+			wake?.();
+			wake = void 0;
+		};
+		signal.addEventListener("abort", abort, { once: true });
+		try {
+			while (!signal.aborted) {
+				if (!queued.length) await new Promise((resolve) => {
+					wake = resolve;
+				});
+				if (signal.aborted) return;
+				const delivery = queued.shift();
+				if (!delivery) continue;
+				if (delivery.kind === "realtime.gap") throw new Error("Voice task event history is unavailable");
+				const event = eventData(delivery);
+				if (!event) continue;
+				yield event;
+				if (event.type === "stream_end") {
+					this.runByTask.delete(taskId);
+					return;
+				}
+			}
+		} finally {
+			signal.removeEventListener("abort", abort);
+			subscription.unsubscribe();
+		}
+	}
+};
+//#endregion
+export { DurableVoiceAgentBroker };

package/dist/src/voice/realtime/agentEngine.js

@@ -2,8 +2,9 @@ import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
 import { speakStream } from "../tts/speak-core.js";
 import { AudioPlaybackWindow } from "./audio-playback-window.js";
-import { ConversationTurn } from "./conversationTurn.js";
+import { TurnCoordinator } from "./turnPolicy.js";
 import { isLikelyPlaybackEcho } from "./playback-echo.js";
+import { PcmFrameBuffer } from "./pcmFrameBuffer.js";
 import { SpeakableSegmenter } from "./speakable-segmenter.js";
 import crypto from "node:crypto";
 //#region src/voice/realtime/agentEngine.ts
@@ -34,8 +35,24 @@ function createAgentVoiceEngine(options) {
 	let committing = false;
 	const finalizedUtterances = /* @__PURE__ */ new Set();
 	let pendingTurn;
-	const turn = new ConversationTurn(claim.silenceDurationMs, (text) => {
+	const turn = new TurnCoordinator(claim.silenceDurationMs, (text, decision, turnId) => {
 		if (closed || muted) return;
+		log.info({
+			sessionId: claim.sessionId,
+			turnId,
+			disposition: decision.disposition,
+			confidence: decision.confidence,
+			source: decision.source,
+			transcriptCharacters: text.length
+		}, "Realtime voice turn committed");
+		send("turn.decision", {
+			turnId,
+			disposition: decision.disposition,
+			confidence: decision.confidence,
+			source: decision.source,
+			committed: true
+		});
+		send("turn.committed", { turnId });
 		if (queuedTurns >= 8) {
 			send("session.error", {
 				code: "INPUT_BACKPRESSURE",
@@ -48,13 +65,14 @@ function createAgentVoiceEngine(options) {
 		queuedTurns += 1;
 		const generation = inputGeneration;
 		const pending = {
+			turnId,
 			text,
 			cancelled: false
 		};
 		pendingTurn = pending;
 		conversationTail = conversationTail.then(() => {
 			if (pendingTurn === pending) pendingTurn = void 0;
-			if (generation === inputGeneration && !pending.cancelled) return runConversationTurn(text);
+			if (generation === inputGeneration && !pending.cancelled) return runAssistantTurn(text, turnId);
 		}).finally(() => {
 			if (generation === inputGeneration) queuedTurns -= 1;
 		});
@@ -129,11 +147,10 @@ function createAgentVoiceEngine(options) {
 						}
 					});
 				}
-				for (let offset = 0; offset < item.value.byteLength; offset += 24e3) {
-					const chunk = item.value.subarray(offset, offset + 24e3);
-					await response.playback.reserve(chunk.byteLength, response.abortController.signal);
+				for (const frame of response.pcm.push(item.value)) {
+					await response.playback.reserve(frame.byteLength, response.abortController.signal);
 					if (activeResponse !== response || closed) return;
-					options.sendAudio(response.id, chunk);
+					options.sendAudio(response.id, frame);
 				}
 			}
 		} finally {
@@ -204,7 +221,7 @@ function createAgentVoiceEngine(options) {
 		if (response.speechWorker) prefetchNextSpeech(response);
 		else startSpeechWorker(response);
 	}
-	async function runConversationTurn(text) {
+	async function runAssistantTurn(text, turnId) {
 		if (!claim.tts || !claim.request.sessionKey || !text.trim() || closed) return;
 		cancelActiveResponse("barge_in");
 		const response = {
@@ -219,14 +236,28 @@ function createAgentVoiceEngine(options) {
 			queuedSpeechCharacters: 0,
 			startedAt: Date.now(),
 			firstTextSeen: false,
-			awaitingClarification: false
+			awaitingClarification: false,
+			pcm: new PcmFrameBuffer()
 		};
 		activeResponse = response;
 		send("response.created", { responseId: response.id });
 		try {
 			await interruptionWrites;
 			if (response.abortController.signal.aborted || closed) return;
-			for await (const event of options.runtime.runAgent(text, claim.request.sessionKey, response.abortController.signal)) {
+			if (!claim.conversationSessionId) throw new Error("Conversation identity is unavailable");
+			const task = await options.runtime.agentBroker.delegate({
+				text,
+				turnId,
+				sessionKey: claim.request.sessionKey,
+				expectedSessionId: claim.conversationSessionId,
+				signal: response.abortController.signal
+			});
+			response.taskId = task.taskId;
+			send("task.created", {
+				responseId: response.id,
+				taskId: task.taskId
+			});
+			for await (const event of task.events) {
 				if (activeResponse !== response || response.abortController.signal.aborted) return;
 				if (event.type === "assistant_delta" || event.type === "tool_end" && event.payload?.toolName !== "clarify") response.awaitingClarification = false;
 				if (event.type === "assistant_delta" && typeof event.payload?.delta === "string") {
@@ -247,12 +278,19 @@ function createAgentVoiceEngine(options) {
 					queuePhrases(response, response.segmenter.push(event.payload.delta));
 				}
 				if (event.type === "tool_start") queuePhrases(response, response.segmenter.flush());
-				if ((event.type === "tool_start" || event.type === "tool_end") && typeof event.payload?.toolCallId === "string" && typeof event.payload?.toolName === "string") send("response.activity", {
-					responseId: response.id,
+				if ((event.type === "tool_start" || event.type === "tool_end") && typeof event.payload?.toolCallId === "string" && typeof event.payload?.toolName === "string") send("task.activity", {
+					taskId: task.taskId,
 					toolCallId: event.payload.toolCallId.slice(0, 160),
 					toolName: event.payload.toolName.slice(0, 256),
 					status: event.type === "tool_start" ? "running" : event.payload.status === "error" ? "failed" : "completed"
 				});
+				if (event.type === "stream_end") {
+					const status = event.payload?.status;
+					send("task.done", {
+						taskId: task.taskId,
+						status: status === "cancelled" ? "cancelled" : status === "suspended" ? "suspended" : status === "error" ? "failed" : "completed"
+					});
+				}
 				if (event.type === "clarify_request" && typeof event.payload?.requestId === "string" && typeof event.payload?.question === "string") {
 					response.awaitingClarification = true;
 					send("response.clarification", {
@@ -274,6 +312,12 @@ function createAgentVoiceEngine(options) {
 			send("response.text.done", { responseId: response.id });
 			await waitForSpeech(response);
 			if (response.speechError) throw response.speechError;
+			const finalFrame = response.pcm.finish();
+			if (finalFrame) {
+				await response.playback.reserve(finalFrame.byteLength, response.abortController.signal);
+				if (activeResponse !== response || closed) return;
+				options.sendAudio(response.id, finalFrame);
+			}
 			await response.playback.drain(response.abortController.signal);
 			if (activeResponse !== response || response.abortController.signal.aborted) return;
 			if (response.audioStarted) send("response.audio.done", { responseId: response.id });
@@ -367,7 +411,7 @@ function createAgentVoiceEngine(options) {
 			if (claim.request.purpose === "conversation") {
 				if (pendingTurn) {
 					pendingTurn.cancelled = true;
-					turn.restore(pendingTurn.text);
+					turn.restore(pendingTurn.turnId, pendingTurn.text);
 					pendingTurn = void 0;
 				}
 				turn.start(event.utteranceId);
@@ -500,8 +544,11 @@ function createAgentVoiceEngine(options) {
 			});
 			return cancelActiveResponse(reason);
 		},
-		acknowledge(responseId, playedBytes) {
-			if (activeResponse?.id === responseId) activeResponse.playback.acknowledge(playedBytes);
+		cancelTask(taskId) {
+			return options.runtime.agentBroker.cancel(taskId);
+		},
+		acknowledge(responseId, playedDurationMs) {
+			if (activeResponse?.id === responseId) activeResponse.playback.acknowledge(playedDurationMs * 48);
 		},
 		close() {
 			if (closing) return closing;

package/dist/src/voice/realtime/engine.d.ts

@@ -8,6 +8,7 @@ export interface VoiceEngine {
     setInputMuted(muted: boolean): void | Promise<void>;
     commit(): Promise<void>;
     cancel(responseId: string, reason: 'client_cancelled' | 'barge_in'): boolean;
-    acknowledge(responseId: string, playedBytes: number): void;
+    cancelTask(taskId: string): Promise<boolean>;
+    acknowledge(responseId: string, playedDurationMs: number): void;
     close(): void | Promise<void>;
 }