@xopcai/xopc 0.0.268 → 0.0.269

package/dist/packages/gateway-contract/src/proactive.js

@@ -0,0 +1,104 @@
+import { z } from "zod";
+//#region packages/gateway-contract/src/proactive.ts
+const ProactiveLevelSchema = z.enum([
+	"off",
+	"quiet",
+	"balanced",
+	"active"
+]);
+const ProactiveTimezoneSchema = z.string().min(1).max(100).refine((value) => {
+	try {
+		new Intl.DateTimeFormat("en", { timeZone: value });
+		return true;
+	} catch {
+		return false;
+	}
+}, "Invalid timezone");
+const ProactivePreferencesSchema = z.object({
+	level: ProactiveLevelSchema.default("balanced"),
+	timezone: ProactiveTimezoneSchema.default("Asia/Shanghai"),
+	quietStartHour: z.number().int().min(0).max(23).default(22),
+	quietEndHour: z.number().int().min(0).max(23).default(8),
+	dailyNotificationLimit: z.number().int().min(0).max(30).default(3),
+	digestEnabled: z.boolean().default(false),
+	digestHour: z.number().int().min(0).max(23).default(18),
+	digestMinute: z.number().int().min(0).max(59).default(0),
+	preferredChannel: z.enum([
+		"all",
+		"auto",
+		"browser",
+		"mobile",
+		"telegram"
+	]).default("all"),
+	suppressWhileViewing: z.boolean().default(true),
+	telegram: z.object({
+		chatId: z.string().regex(/^-?[0-9]{1,20}$/),
+		accountId: z.string().min(1).max(100).optional(),
+		publicUrl: z.url().refine((value) => {
+			const url = new URL(value);
+			return url.protocol === "https:" && !url.username && !url.password && !url.search && !url.hash;
+		}, "Use an HTTPS console URL without credentials or query parameters")
+	}).nullable().default(null),
+	pausedUntil: z.iso.datetime().nullable().default(null),
+	revision: z.number().int().nonnegative().default(0)
+});
+const ProactivePreferencesUpdateSchema = z.object({
+	level: ProactivePreferencesSchema.shape.level.removeDefault().optional(),
+	timezone: ProactivePreferencesSchema.shape.timezone.removeDefault().optional(),
+	quietStartHour: ProactivePreferencesSchema.shape.quietStartHour.removeDefault().optional(),
+	quietEndHour: ProactivePreferencesSchema.shape.quietEndHour.removeDefault().optional(),
+	dailyNotificationLimit: ProactivePreferencesSchema.shape.dailyNotificationLimit.removeDefault().optional(),
+	digestEnabled: ProactivePreferencesSchema.shape.digestEnabled.removeDefault().optional(),
+	digestHour: ProactivePreferencesSchema.shape.digestHour.removeDefault().optional(),
+	digestMinute: ProactivePreferencesSchema.shape.digestMinute.removeDefault().optional(),
+	preferredChannel: ProactivePreferencesSchema.shape.preferredChannel.removeDefault().optional(),
+	suppressWhileViewing: ProactivePreferencesSchema.shape.suppressWhileViewing.removeDefault().optional(),
+	telegram: ProactivePreferencesSchema.shape.telegram.removeDefault().optional(),
+	pausedUntil: ProactivePreferencesSchema.shape.pausedUntil.removeDefault().optional(),
+	expectedRevision: z.number().int().nonnegative()
+}).strict();
+const ProactiveSubscriptionSettingsSchema = z.object({
+	level: ProactiveLevelSchema.nullable().default(null),
+	delivery: z.enum([
+		"inbox",
+		"important",
+		"digest"
+	]).default("important"),
+	preparationWorkflowId: z.string().min(1).max(160).nullable().default(null),
+	scanIntervalMinutes: z.number().int().min(15).max(10080).nullable().default(null),
+	userInstructions: z.string().max(12e3).default("")
+});
+const ProactiveSubscriptionCreateSchema = ProactiveSubscriptionSettingsSchema.extend({
+	scenarioKey: z.string().min(1).max(100),
+	scopeKind: z.enum(["workspace", "project"]),
+	scopeId: z.string().min(1).max(200),
+	enabled: z.boolean().default(true)
+}).strict();
+const ProactiveSubscriptionUpdateSchema = z.object({
+	level: ProactiveSubscriptionSettingsSchema.shape.level.removeDefault().optional(),
+	delivery: ProactiveSubscriptionSettingsSchema.shape.delivery.removeDefault().optional(),
+	preparationWorkflowId: ProactiveSubscriptionSettingsSchema.shape.preparationWorkflowId.removeDefault().optional(),
+	scanIntervalMinutes: ProactiveSubscriptionSettingsSchema.shape.scanIntervalMinutes.removeDefault().optional(),
+	userInstructions: ProactiveSubscriptionSettingsSchema.shape.userInstructions.removeDefault().optional(),
+	enabled: z.boolean().optional(),
+	expectedRevision: z.number().int().nonnegative()
+}).strict();
+const ProactiveCardActionSchema = z.object({
+	actionId: z.enum([
+		"read",
+		"resolve",
+		"snooze",
+		"decide",
+		"less",
+		"pause",
+		"useful",
+		"not_useful",
+		"retry"
+	]),
+	expectedRevision: z.number().int().positive(),
+	idempotencyKey: z.string().min(8).max(128),
+	choice: z.string().min(1).max(200).optional(),
+	snoozedUntil: z.iso.datetime().optional()
+}).strict();
+//#endregion
+export { ProactiveCardActionSchema, ProactivePreferencesSchema, ProactivePreferencesUpdateSchema, ProactiveSubscriptionCreateSchema, ProactiveSubscriptionSettingsSchema, ProactiveSubscriptionUpdateSchema };

package/dist/packages/realtime-protocol/src/voice.js

@@ -1,6 +1,7 @@
 import "./voice-audio.js";
 import { z } from "zod";
 const VOICE_REALTIME_WS_PATH = "/api/voice/realtime/v3/ws";
+const VOICE_REALTIME_PROXY_WS_PATH = "/api/realtime/v1/ws?transport=voice-v3";
 const VOICE_REALTIME_MAX_BINARY_FRAME_BYTES = 64 * 1024;
 const VOICE_REALTIME_START_TIMEOUT_MS = 1e4;
 const VOICE_REALTIME_HEARTBEAT_INTERVAL_MS = 15e3;
@@ -258,4 +259,4 @@ function parseVoiceClientJsonFrame(text) {
 	return JSON.parse(text);
 }
 //#endregion
-export { VOICE_REALTIME_HEARTBEAT_INTERVAL_MS, VOICE_REALTIME_MAX_BINARY_FRAME_BYTES, VOICE_REALTIME_START_TIMEOUT_MS, VOICE_REALTIME_WS_PATH, createVoiceSessionRequestSchema, parseVoiceClientJsonFrame, parseVoiceClientMessage };
+export { VOICE_REALTIME_HEARTBEAT_INTERVAL_MS, VOICE_REALTIME_MAX_BINARY_FRAME_BYTES, VOICE_REALTIME_PROXY_WS_PATH, VOICE_REALTIME_START_TIMEOUT_MS, VOICE_REALTIME_WS_PATH, createVoiceSessionRequestSchema, parseVoiceClientJsonFrame, parseVoiceClientMessage };

package/dist/src/agent/workflow/subagent-runner.d.ts

@@ -42,3 +42,4 @@ export declare class DelegateSubagentRunner implements SubagentRunner {
     run<T = string>(prompt: string, opts: SubagentRunOptions<T>): Promise<T | null>;
     private preparePersistentSubagentSession;
 }
+export declare function resolveAllowedToolNames(requested: string[] | undefined, wantStructured: boolean): string[];

package/dist/src/agent/workflow/subagent-runner.js

@@ -129,7 +129,7 @@ var DelegateSubagentRunner = class {
 	}
 };
 function resolveAllowedToolNames(requested, wantStructured) {
-	const filtered = (requested && requested.length > 0 ? requested : [...DEFAULT_DELEGATE_TOOLS]).map((s) => String(s).trim()).filter((s) => s.length > 0).filter((s) => !DELEGATE_BLOCKED_TOOLS.has(s));
+	const filtered = (requested ?? [...DEFAULT_DELEGATE_TOOLS]).map((s) => String(s).trim()).filter((s) => s.length > 0).filter((s) => !DELEGATE_BLOCKED_TOOLS.has(s));
 	if (wantStructured && !filtered.includes("structured_output")) filtered.push(STRUCTURED_OUTPUT_TOOL_NAME);
 	return [...new Set(filtered)];
 }
@@ -195,4 +195,4 @@ function mapChildProgressEvent(event) {
 	}
 }
 //#endregion
-export { DelegateSubagentRunner };
+export { DelegateSubagentRunner, resolveAllowedToolNames };

package/dist/src/cli/commands/connectors.js

@@ -1,6 +1,6 @@
 import { init_loader, loadConfig, saveConfig } from "../../config/loader.js";
-import { getStoreConnectorInstallPlan, installStoreConnector, listStoreConnectors } from "../../capabilities/store-connector.js";
 import { register } from "../registry.js";
+import { getStoreConnectorInstallPlan, installStoreConnector, listStoreConnectors } from "../../capabilities/store-connector.js";
 import { confirm } from "@inquirer/prompts";
 import { Command } from "commander";
 //#region src/cli/commands/connectors.ts

package/dist/src/cli/commands/doctor/checks/database-schema.js

@@ -52,7 +52,7 @@ async function checkDatabaseSchema(ctx) {
 		id: "database-schema",
 		label: "Database schema",
 		status: "pass",
-		message: `SQLite schema v${status.dbVersion} (current release v158).`,
+		message: `SQLite schema v${status.dbVersion} (current release v161).`,
 		hints: []
 	};
 }

package/dist/src/connectors/connected-source-ingestion.js

@@ -6,8 +6,8 @@ import { ComposioSessionsAdapter } from "./composio-sessions.js";
 import { decodeConnectedSourceCursor, encodeConnectedSourceCursor } from "./connected-source-cursor.js";
 import { scopeForComposioAction } from "./composio.js";
 import { getConnectorDefinition } from "./catalog.js";
-import { getConnectorInstance } from "./instances.js";
 import { getWorkspacePath } from "../config/workspace-path-helpers.js";
+import { getConnectorInstance } from "./instances.js";
 import { KnowledgeIngestionService } from "../knowledge/ingestion-service.js";
 import { ConnectedKnowledgePipeline } from "../knowledge/connected-knowledge-pipeline.js";
 import { LocalFolderKnowledgeSourceAdapter } from "../knowledge/local-folder-adapter.js";

package/dist/src/connectors/connection-recovery-service.js

@@ -13,9 +13,9 @@ import { getConnectorDefinition } from "./catalog.js";
 import { capabilityActions, isToolInputSchema, missingConnectionCapabilities } from "./connection-capabilities.js";
 import { connectorPrincipalForSession } from "./principal.js";
 import { resolveConnectionCandidate } from "./connection-candidates.js";
+import { persistConfigMutation } from "../config/config-mutation.js";
 import { listConnectorInstances } from "./instances.js";
 import { installConnector } from "./install.js";
-import { persistConfigMutation } from "../config/config-mutation.js";
 import { randomUUID } from "node:crypto";
 //#region src/connectors/connection-recovery-service.ts
 init_logger();

package/dist/src/connectors/health.js

@@ -1,6 +1,6 @@
+import { getWorkspacePath } from "../config/workspace-path-helpers.js";
 import { materializeConnectorMcpServer } from "./materialize.js";
 import { getConnectorInstance } from "./instances.js";
-import { getWorkspacePath } from "../config/workspace-path-helpers.js";
 import { listBundleMcpServerCapabilitiesForGateway } from "../agent/mcp/bundle-mcp-gateway.js";
 //#region src/connectors/health.ts
 function classifyConnectorHealthError(error) {

package/dist/src/gateway/hono/routes/capabilities.js

@@ -1,5 +1,5 @@
-import { getStoreConnectorInstallPlan, installStoreConnector, listStoreConnectors } from "../../../capabilities/store-connector.js";
 import { ConfigPersistenceError, persistConfigMutation } from "../../../config/config-mutation.js";
+import { getStoreConnectorInstallPlan, installStoreConnector, listStoreConnectors } from "../../../capabilities/store-connector.js";
 //#region src/gateway/hono/routes/capabilities.ts
 function errorMessage(error) {
 	return error instanceof Error ? error.message : String(error);

package/dist/src/gateway/hono/routes/connectors.js

@@ -12,10 +12,10 @@ import { createConnectorSetupSecretRequest, submitConnectorSetupSecret } from ".
 import { configureComposioApiKey, executeComposioTool, getComposioInstallationPolicy, getComposioToolkitAuthState, getComposioToolkitScope, inspectComposioConnectorHealth, listComposioConnections, listComposioTools, refreshComposioConnection, revokeComposioConnection, setComposioToolkitScope, updateComposioConnection, updateComposioInstallationPolicy } from "../../../connectors/composio.js";
 import { listConnectorProviders } from "../../../connectors/providers.js";
 import { getConnectorDefinition, listConnectorCatalog } from "../../../connectors/catalog.js";
+import { ConfigPersistenceError, persistConfigMutation } from "../../../config/config-mutation.js";
 import { recordConnectorHealthUsage } from "../../../connectors/usage.js";
 import { getConnectorInstance, getInstalledConnectorDefinition, listConnectorInstances } from "../../../connectors/instances.js";
 import { installConnector, installConnectorDefinition, uninstallConnector, updateConnectorConfig } from "../../../connectors/install.js";
-import { ConfigPersistenceError, persistConfigMutation } from "../../../config/config-mutation.js";
 import { getMcpOAuthManager } from "../../../agent/mcp/oauth/mcp-oauth-manager.js";
 import { startConnectorAuthorization } from "../../../connectors/auth-provider-registry.js";
 import { composioLogoResponse } from "../../../connectors/composio-logo.js";

package/dist/src/gateway/hono/routes/index.js

@@ -20,7 +20,6 @@ import { registerLocalAppsRoutes } from "./local-apps.js";
 import { registerWorkDiscoveryRoutes } from "./work-discovery.js";
 import { registerContextSourceRoutes } from "./context-sources.js";
 import { registerTaskRoutes } from "./tasks.js";
-import { registerProactiveRoutes } from "./proactive.js";
 import { registerMobilePrivacyRoutes } from "./mobile-privacy.js";
 import { mountAppLazyRoutePrefixes, registerAuthenticatedLazyRouteFallback } from "./lazy-fallback.js";
 //#region src/gateway/hono/routes/index.ts
@@ -40,7 +39,6 @@ function registerCoreAuthenticatedRoutes(authenticated, deps) {
 	registerWorkDiscoveryRoutes(authenticated, deps);
 	registerContextSourceRoutes(authenticated, deps);
 	registerTaskRoutes(authenticated, deps);
-	registerProactiveRoutes(authenticated, deps);
 	registerSearchRoutes(authenticated, deps);
 	registerDevicePushRoutes(authenticated);
 	registerNotificationRoutes(authenticated, deps);

package/dist/src/gateway/hono/routes/lazy-bundles.js

@@ -3,6 +3,18 @@ function startsWithAny(path, prefixes) {
 	return prefixes.some((prefix) => path === prefix || path.startsWith(`${prefix}/`));
 }
 const AUTHENTICATED_LAZY_ROUTE_BUNDLES = [
+	{
+		id: "proactive",
+		match: (path) => startsWithAny(path, [
+			"/api/proactive",
+			"/api/inbox/judgments",
+			"/api/internal/proactive"
+		]),
+		load: async () => {
+			const { registerProactiveRoutes } = await import("./proactive.js");
+			return { register: registerProactiveRoutes };
+		}
+	},
 	{
 		id: "runtime-tools",
 		match: (path) => startsWithAny(path, ["/api/runtime-tools"]),

package/dist/src/gateway/hono/routes/mcp.js

@@ -1,7 +1,7 @@
 import { canonicalizeConfiguredMcpServer, normalizeConfiguredMcpServers } from "../../../config/mcp-config-normalize.js";
 import { loadMergedBundleMcpConfig } from "../../../agent/mcp/bundle-mcp-config.js";
-import { isManagedConnectorServer } from "../../../connectors/materialize.js";
 import { getWorkspacePath } from "../../../config/workspace-path-helpers.js";
+import { isManagedConnectorServer } from "../../../connectors/materialize.js";
 import { getMcpOAuthManager } from "../../../agent/mcp/oauth/mcp-oauth-manager.js";
 import { listBundleMcpServerCapabilitiesForGateway, listBundleMcpServerToolsForGateway } from "../../../agent/mcp/bundle-mcp-gateway.js";
 //#region src/gateway/hono/routes/mcp.ts

package/dist/src/gateway/hono/routes/proactive-control.d.ts

@@ -0,0 +1,3 @@
+import type { Hono } from 'hono';
+import type { AuthenticatedRouteDeps } from './deps.js';
+export declare function registerProactiveControlRoutes(app: Hono, deps: AuthenticatedRouteDeps): void;

package/dist/src/gateway/hono/routes/proactive-control.js

@@ -0,0 +1,161 @@
+import { getSqliteDatabase } from "../../../storage/sqlite/transaction.js";
+import { getDefaultAgentId, init_resolve_route } from "../../../routing/resolve-route.js";
+import { resolveProjectAgentId } from "../../../projects/project-agent.js";
+import "../../../projects/index.js";
+import { ProactiveConflict, proactivePreferences, updateProactivePreferences } from "../../../proactive/policy/service.js";
+import { recordProactivePresence } from "../../../proactive/policy/presence.js";
+import { controlledSubscriptions, createControlledSubscription, requireSubscription, templateCatalog, updateControlledSubscription } from "../../../proactive/scenarios/control.js";
+import { cardChanges, getCard, listCards, performCardAction } from "../../../proactive/inbox/cards.js";
+import { digestCards } from "../../../proactive/inbox/digest.js";
+import { acknowledgeBrowserProbe, listBrowserProbes, prepareBrowserPush, registerBrowserPush, testBrowserPush, unregisterBrowserPush } from "../../../notifications/web-push.js";
+import { ReadonlyProactiveAgentExecutor } from "../../../proactive/execution/agent-executor.js";
+import { proactiveMetrics } from "../../../proactive/metrics.js";
+import { prepareCardWorkflow, workflowForCard } from "../../../proactive/actions/workflow.js";
+import { previewSubscription } from "../../../proactive/scenarios/preview.js";
+import { ZodError } from "zod";
+//#region src/gateway/hono/routes/proactive-control.ts
+init_resolve_route();
+function registerProactiveControlRoutes(app, deps) {
+	app.onError((error, c) => c.json({
+		ok: false,
+		error: error instanceof ZodError ? "Invalid request" : error.message
+	}, error instanceof ProactiveConflict ? 409 : 400));
+	const workspace = () => deps.service.currentWorkspacePath;
+	for (const path of ["/api/proactive/*", "/api/inbox/judgments/*"]) app.use(path, async (c, next) => {
+		try {
+			const id = c.req.path.match(/^\/api\/inbox\/judgments\/([^/]+)/)?.[1];
+			if (id && id !== "changes") getCard(decodeURIComponent(id), workspace());
+			await next();
+		} catch (error) {
+			return c.json({
+				ok: false,
+				error: error instanceof ZodError ? "Invalid request" : error instanceof Error ? error.message : "Request failed"
+			}, error instanceof ProactiveConflict ? 409 : 400);
+		}
+	});
+	app.get("/api/proactive/web-push/probes", (c) => c.json({
+		ok: true,
+		probes: listBrowserProbes(workspace())
+	}));
+	app.post("/api/proactive/web-push/subscriptions/:id/test", deps.strictRateLimitMiddleware, async (c) => c.json({
+		ok: true,
+		...await testBrowserPush(workspace(), c.req.param("id"))
+	}));
+	app.post("/api/proactive/web-push/probes/:id/opened", deps.strictRateLimitMiddleware, (c) => {
+		acknowledgeBrowserProbe(workspace(), c.req.param("id"));
+		return c.json({ ok: true });
+	});
+	app.post("/api/proactive/web-push/prepare", deps.strictRateLimitMiddleware, (c) => c.json({
+		ok: true,
+		...prepareBrowserPush()
+	}));
+	app.post("/api/proactive/web-push/subscriptions", deps.strictRateLimitMiddleware, async (c) => c.json({
+		ok: true,
+		...registerBrowserPush(workspace(), await c.req.json())
+	}, 201));
+	app.delete("/api/proactive/web-push/subscriptions/:id", deps.strictRateLimitMiddleware, (c) => {
+		unregisterBrowserPush(workspace(), c.req.param("id"));
+		return c.json({ ok: true });
+	});
+	app.get("/api/inbox/judgments/:itemId/workflow", async (c) => c.json({
+		ok: true,
+		workflow: await workflowForCard(c.req.param("itemId"), workspace(), deps.service.createWorkflowRunService())
+	}));
+	app.post("/api/inbox/judgments/:itemId/prepare", deps.strictRateLimitMiddleware, async (c) => {
+		const card = getCard(c.req.param("itemId"), workspace());
+		const sub = requireSubscription(card.subscriptionId, workspace());
+		const config = deps.service.currentConfig;
+		const agentId = sub.scopeKind === "project" ? resolveProjectAgentId({
+			config,
+			projects: deps.service.projects,
+			projectId: sub.scopeId
+		}) : getDefaultAgentId(config);
+		return c.json({
+			ok: true,
+			workflow: await prepareCardWorkflow(workspace(), card.id, await c.req.json(), agentId, deps.service.createWorkflowRunService())
+		}, 202);
+	});
+	app.post("/api/proactive/presence", deps.strictRateLimitMiddleware, async (c) => {
+		recordProactivePresence(workspace(), await c.req.json());
+		return c.json({ ok: true });
+	});
+	app.get("/api/proactive/metrics", (c) => c.json({
+		ok: true,
+		metrics: proactiveMetrics(workspace())
+	}));
+	app.get("/api/proactive/digests/:id", (c) => c.json({
+		ok: true,
+		cards: digestCards(c.req.param("id"), workspace())
+	}));
+	app.post("/api/proactive/subscriptions/:id/preview", deps.strictRateLimitMiddleware, async (c) => c.json({
+		ok: true,
+		...await previewSubscription(workspace(), c.req.param("id"), new ReadonlyProactiveAgentExecutor(() => deps.service.getConfig()), c.req.raw.signal)
+	}));
+	app.get("/api/proactive/templates", (c) => c.json({
+		ok: true,
+		templates: templateCatalog(workspace())
+	}));
+	app.get("/api/proactive/preferences", (c) => c.json({
+		ok: true,
+		preferences: proactivePreferences(workspace())
+	}));
+	app.patch("/api/proactive/preferences", deps.strictRateLimitMiddleware, async (c) => c.json({
+		ok: true,
+		preferences: updateProactivePreferences(workspace(), await c.req.json())
+	}));
+	app.get("/api/proactive/subscriptions", (c) => c.json({
+		ok: true,
+		subscriptions: controlledSubscriptions(workspace())
+	}));
+	app.post("/api/proactive/subscriptions", deps.strictRateLimitMiddleware, async (c) => c.json({
+		ok: true,
+		subscription: createControlledSubscription(workspace(), await c.req.json())
+	}, 201));
+	app.patch("/api/proactive/subscriptions/:id", deps.strictRateLimitMiddleware, async (c) => c.json({
+		ok: true,
+		subscription: updateControlledSubscription(workspace(), c.req.param("id"), await c.req.json())
+	}));
+	app.get("/api/proactive/subscriptions/:id/runs", (c) => {
+		requireSubscription(c.req.param("id"), workspace());
+		return c.json({
+			ok: true,
+			runs: getSqliteDatabase().prepare(`SELECT run_id AS id, status, outcome_reason AS reason,
+      started_at AS startedAt, completed_at AS completedAt, error_message AS error FROM proactive_runs WHERE subscription_id = ? ORDER BY started_at DESC LIMIT 30`).all(c.req.param("id"))
+		});
+	});
+	app.get("/api/proactive/cards", (c) => c.json({
+		ok: true,
+		...listCards(workspace(), {
+			status: c.req.query("status"),
+			before: c.req.query("before")
+		})
+	}));
+	app.get("/api/inbox/judgments/changes", (c) => {
+		const cursor = Number(c.req.query("cursor") ?? 0);
+		if (!Number.isSafeInteger(cursor) || cursor < 0) return c.json({
+			ok: false,
+			error: "Invalid cursor"
+		}, 400);
+		return c.json({
+			ok: true,
+			...cardChanges(workspace(), cursor)
+		});
+	});
+	app.get("/api/inbox/judgments/:itemId", (c) => c.json({
+		ok: true,
+		card: getCard(c.req.param("itemId"), workspace())
+	}));
+	app.post("/api/inbox/judgments/:itemId/actions", deps.strictRateLimitMiddleware, async (c) => {
+		const card = performCardAction(c.req.param("itemId"), workspace(), await c.req.json());
+		deps.service.emit("proactive.card.changed", {
+			cardId: card.id,
+			revision: card.revision
+		});
+		return c.json({
+			ok: true,
+			card
+		});
+	});
+}
+//#endregion
+export { registerProactiveControlRoutes };

package/dist/src/gateway/hono/routes/proactive.d.ts

@@ -1,4 +1,4 @@
 import type { Hono } from 'hono';
 import type { AuthenticatedRouteDeps } from './deps.js';
-/** User-facing judgment inbox plus internal diagnostics. There is intentionally no proactive control-panel API. */
+/** Proactive controls, cards and internal diagnostics. */
 export declare function registerProactiveRoutes(authenticated: Hono, deps: AuthenticatedRouteDeps): void;

package/dist/src/gateway/hono/routes/proactive.js

@@ -1,10 +1,14 @@
+import { getInboxItem } from "../../../proactive/inbox/repository.js";
+import { listCards } from "../../../proactive/inbox/cards.js";
+import { registerProactiveControlRoutes } from "./proactive-control.js";
 //#region src/gateway/hono/routes/proactive.ts
 function positiveInt(value, fallback) {
 	const parsed = Number(value);
 	return Number.isInteger(parsed) && parsed > 0 ? parsed : fallback;
 }
-/** User-facing judgment inbox plus internal diagnostics. There is intentionally no proactive control-panel API. */
+/** Proactive controls, cards and internal diagnostics. */
 function registerProactiveRoutes(authenticated, deps) {
+	registerProactiveControlRoutes(authenticated, deps);
 	authenticated.get("/api/inbox/judgments", (c) => {
 		const status = c.req.query("status");
 		if (status && ![
@@ -16,12 +20,15 @@ function registerProactiveRoutes(authenticated, deps) {
 			ok: false,
 			error: "Invalid inbox status"
 		}, 400);
+		const page = listCards(deps.service.currentWorkspacePath, {
+			status,
+			limit: positiveInt(c.req.query("limit"), 50),
+			before: c.req.query("before")
+		});
 		return c.json({
 			ok: true,
-			items: deps.service.proactiveInbox.list({
-				...status ? { status } : {},
-				limit: positiveInt(c.req.query("limit"), 50)
-			})
+			...page,
+			items: page.cards.map((card) => getInboxItem(card.id))
 		});
 	});
 	authenticated.post("/api/inbox/judgments/:itemId/transition", deps.strictRateLimitMiddleware, async (c) => {

package/dist/src/gateway/hono/routes/voice.js

@@ -256,7 +256,7 @@ function registerVoiceRoutes(authenticated, deps) {
 			}
 		}, 400);
 		const principal = getGatewayPrincipal(c);
-		service.voiceRealtime.cancelSession(parsed.data.sessionId, parsed.data.ticket, principal.principalId);
+		await service.voiceRealtime.cancelSession(parsed.data.sessionId, parsed.data.ticket, principal.principalId);
 		return c.json({ ok: true });
 	});
 	authenticated.post("/api/voice/language", strictRateLimitMiddleware, async (c) => {

package/dist/src/gateway/security/gateway-scopes.js

@@ -63,6 +63,11 @@ function requiredGatewayScope(method, path) {
 	if (path.startsWith("/api/agents") || path.startsWith("/api/models")) return methodScope(method, "agents.read", "gateway.admin");
 	if (path.startsWith("/api/sessions") || path.startsWith("/api/side-chats")) return methodScope(method, "sessions.read", "sessions.write");
 	if (path.startsWith("/api/tasks")) return methodScope(method, "tasks.read", "tasks.write");
+	if (method === "POST" && /^\/api\/proactive\/subscriptions\/[^/]+\/preview$/.test(path)) return "agents.run";
+	if (/^\/api\/inbox\/judgments\/[^/]+\/workflow$/.test(path)) return methodScope(method, "automations.read", "automations.write");
+	if (method === "POST" && /^\/api\/inbox\/judgments\/[^/]+\/prepare$/.test(path)) return "automations.write";
+	if (path.startsWith("/api/proactive/web-push")) return "notifications.self";
+	if (path === "/api/proactive" || path.startsWith("/api/proactive/")) return methodScope(method, "tasks.read", "tasks.write");
 	if (path.startsWith("/api/home") || path.startsWith("/api/inbox")) return methodScope(method, "tasks.read", "tasks.write");
 	if (path.startsWith("/api/automations") || path.startsWith("/api/automation-runs")) return methodScope(method, "automations.read", "automations.write");
 	if (path.startsWith("/api/workflows")) return methodScope(method, "automations.read", "automations.write");

package/dist/src/gateway/service.d.ts

@@ -179,7 +179,6 @@ export declare class GatewayService {
     private schedulePostReadySidecars;
     private runPostReadySidecars;
     start(): Promise<void>;
-    private ensureDefaultProactiveScenarioSubscriptions;
     /** Called when the HTTP listener is bound (before deferred channel work). */
     markHttpListening(): void;
     isGatewayReady(): boolean;

package/dist/src/gateway/service.js

@@ -54,6 +54,12 @@ import { registerClarificationChannelRuntime } from "./clarify-runtime.js";
 import { ChannelManager } from "../channels/manager.js";
 import { getWorkspacePath } from "../config/workspace-path-helpers.js";
 import "../config/index.js";
+import { DiscussionService } from "../discussions/service.js";
+import { DiscussionOrganizer } from "../discussions/organizer.js";
+import { DiscussionLiveWorker } from "../discussions/live-worker.js";
+import { DiscussionOrganizerWorker } from "../discussions/organizer-worker.js";
+import { DiscussionSealer } from "../discussions/sealer.js";
+import "../discussions/index.js";
 import { ManagedComposioEventPoller } from "../connectors/composio-managed-events.js";
 import { startConnectedKnowledgeCoordinator } from "../knowledge/coordinator.js";
 import "../knowledge/index.js";
@@ -61,17 +67,13 @@ import { ConnectionRecoveryService } from "../connectors/connection-recovery-ser
 import { startConnectorLearningCoordinator } from "../connectors/learning-coordinator.js";
 import { ConnectedSourceChangePublisher } from "../connectors/source-change-publisher.js";
 import { startConnectorSupervisor } from "../connectors/supervisor.js";
-import { DiscussionService } from "../discussions/service.js";
-import { DiscussionOrganizer } from "../discussions/organizer.js";
-import { DiscussionLiveWorker } from "../discussions/live-worker.js";
-import { DiscussionOrganizerWorker } from "../discussions/organizer-worker.js";
-import { DiscussionSealer } from "../discussions/sealer.js";
-import "../discussions/index.js";
 import { EndpointToolRuntime } from "../endpoint-tools/runtime.js";
 import "../endpoint-tools/index.js";
 import { assertGatewayAuthConfigured, extractToken, resolveGatewayAuth, validateToken } from "./auth.js";
 import { prepareAutomationAgentSession } from "./automation-agent-session.js";
 import { stopTailscaleExposure } from "./tailscale-lifecycle.js";
+import { ProactiveInboxService } from "../proactive/inbox/service.js";
+import { deliverProactiveCard } from "../proactive/inbox/delivery.js";
 import { buildVoiceMemoryContext } from "../voice/realtime/memory-context.js";
 import { buildVoicePersonaContext } from "../voice/realtime/persona-context.js";
 import { voiceMemoryBudget, voicePersonaBudget } from "../voice/realtime/conversation-context.js";
@@ -111,7 +113,6 @@ import { ReadonlyProactiveAgentExecutor } from "../proactive/execution/agent-exe
 import { listInsights } from "../proactive/execution/repository.js";
 import { ProactiveWorker } from "../proactive/execution/worker.js";
 import { ProactiveTemporalWorker } from "../proactive/temporal/worker.js";
-import { ProactiveInboxService } from "../proactive/inbox/service.js";
 import { ProactiveInboxWorker } from "../proactive/inbox/worker.js";
 import "../proactive/index.js";
 import { scheduleGatewayUpdateCheck } from "../infra/update-startup.js";
@@ -317,7 +318,7 @@ var GatewayService = class {
 		this.proactiveWorker = new ProactiveWorker(new ReadonlyProactiveAgentExecutor(() => this.config));
 		this.proactiveTemporalWorker = new ProactiveTemporalWorker(this.proactive);
 		this.proactiveInboxWorker = new ProactiveInboxWorker({ deliver: async ({ inboxItem }) => {
-			this.emit("proactive.inbox.created", inboxItem);
+			return deliverProactiveCard(inboxItem, this.createNotificationService(), (type, payload) => this.realtime.broker.publish("gateway", type, payload));
 		} });
 		let bootstrapConfigChanged = initializeVoiceDefaults(this.config, inferProductLanguageFromEnvironment());
 		const starterResult = ensureStarterAgentsInitialized(this.config);
@@ -680,7 +681,21 @@ var GatewayService = class {
 		return this.taskRunDispatcher;
 	}
 	createNotificationService() {
-		if (!this.notificationService) this.notificationService = new NotificationService({ publish: (type, payload) => this.realtime.broker.publish("gateway", type, payload) });
+		if (!this.notificationService) this.notificationService = new NotificationService({
+			publish: (type, payload) => this.realtime.broker.publish("gateway", type, payload),
+			sendChannel: async (target, text) => {
+				const outbound = this.channelManager.getPlugin("telegram")?.outbound;
+				if (!outbound?.sendText || !this.channelManager.getRunningChannels().includes("telegram")) throw new Error("Telegram is not connected");
+				const result = await outbound.sendText({
+					cfg: this.config,
+					to: target.chatId,
+					accountId: target.accountId,
+					text
+				});
+				if (!result.success) throw new Error("Telegram delivery failed");
+				return { messageId: result.messageId };
+			}
+		});
 		return this.notificationService;
 	}
 	dispatchTaskRuns() {
@@ -921,7 +936,6 @@ var GatewayService = class {
 		this.running = true;
 		this.taskRunDispatchTimer = setInterval(() => this.dispatchTaskRuns(), 1e3);
 		this.taskRunDispatchTimer.unref?.();
-		this.ensureDefaultProactiveScenarioSubscriptions();
 		this.proactiveWorker.start();
 		this.proactiveTemporalWorker.start();
 		this.proactiveInboxWorker.start();
@@ -1115,22 +1129,6 @@ var GatewayService = class {
 		else trace.mark("service.started-awaiting-http");
 		log.debug("Gateway service started");
 	}
-	ensureDefaultProactiveScenarioSubscriptions() {
-		for (const scenarioKey of [
-			"automation_failure_impact",
-			"meeting_preparation",
-			"discussion_follow_up"
-		]) {
-			if (this.proactiveScenarios.subscriptions(scenarioKey).some((subscription) => subscription.workspaceId === this.currentWorkspacePath)) continue;
-			this.proactiveScenarios.subscribe({
-				scenarioKey,
-				workspaceId: this.currentWorkspacePath,
-				scopeKind: "workspace",
-				scopeId: this.currentWorkspacePath,
-				enabled: true
-			});
-		}
-	}
 	/** Called when the HTTP listener is bound (before deferred channel work). */
 	markHttpListening() {
 		this.readiness.markHttpListening();

package/dist/src/notifications/planner.js

@@ -122,7 +122,7 @@ function automationPlan(payload) {
 function proactivePlan(payload) {
 	if (!payload || typeof payload !== "object") return null;
 	const item = payload;
-	if (typeof item.id !== "string" || typeof item.insightId !== "string" || typeof item.insight.title !== "string") return null;
+	if (typeof item.id !== "string" || typeof item.insightId !== "string" || typeof item.insight?.title !== "string") return null;
 	const requiresDecision = item.insight.attentionKind === "decision";
 	const highUrgency = item.insight.urgency === "high" || item.insight.urgency === "critical";
 	if (item.insight.attentionKind === "receipt") return null;
@@ -130,7 +130,7 @@ function proactivePlan(payload) {
 	const title = item.insight.title.trim().slice(0, 120);
 	const summary = typeof item.insight.summary === "string" ? item.insight.summary.trim().slice(0, 180) : "";
 	return {
-		dedupeKey: `proactive.insight:${item.id}`,
+		dedupeKey: `proactive.insight:${item.id}${item.notificationRevision && item.notificationRevision > 1 ? `:${item.notificationRevision}` : ""}`,
 		notification: {
 			type: "proactive.insight",
 			target: {
@@ -148,7 +148,8 @@ function proactivePlan(payload) {
 			} } : {},
 			payload: {
 				inboxItemId: item.id,
-				insightId: item.insightId
+				insightId: item.insightId,
+				notificationRevision: item.notificationRevision ?? 1
 			}
 		}
 	};