@xopcai/xopc 0.0.269 → 0.0.272

package/dist/src/gateway/hono/routes/site-shares.js

@@ -3,10 +3,10 @@ import { resolveSiteShareConfig } from "../../../share/site-share-config.js";
 import { getSiteShareStore } from "../../../share/site-share-store.js";
 import { resolveSiteShareUrl } from "../../../share/share-url.js";
 import { resolveReverseProxyPublicUrl } from "../../public-url.js";
-import { extractToken } from "../../auth.js";
+import { getGatewayPrincipal } from "../../security/gateway-principal.js";
 import { createHash } from "node:crypto";
 //#region src/gateway/hono/routes/site-shares.ts
-function hashGatewayToken(token) {
+function hashPrincipal(token) {
 	return createHash("sha256").update(token, "utf8").digest("hex").slice(0, 12);
 }
 function buildShareUrls(record, publicHostSuffix, service) {
@@ -42,11 +42,7 @@ function registerSiteShareRoutes(authenticated, deps) {
 		return resolveAgentWorkspaceDir(cfg, resolveDefaultAgentId(cfg));
 	}
 	authenticated.post("/api/site-shares", async (c) => {
-		const gatewayToken = extractToken({ authorization: c.req.header("authorization") ?? void 0 });
-		if (!gatewayToken) return c.json({
-			ok: false,
-			error: { message: "Token required" }
-		}, 401);
+		const principalId = getGatewayPrincipal(c).principalId;
 		let body;
 		try {
 			body = await c.req.json();
@@ -96,7 +92,7 @@ function registerSiteShareRoutes(authenticated, deps) {
 				sessionKey,
 				agentId,
 				workspaceRoot,
-				gatewayTokenHash: hashGatewayToken(gatewayToken)
+				gatewayTokenHash: hashPrincipal(principalId)
 			});
 			const urls = buildShareUrls(record, store.getConfig().publicHostSuffix, service);
 			return c.json({

package/dist/src/gateway/hono/routes/tunnel.js

@@ -2,10 +2,11 @@ import { init_public_url, validatePublicUrl } from "../../../config/public-url.j
 import { TUNNEL_REGISTRATION_SECRET_REQUIRED_CODE, TunnelRegistrationSecretError, getTunnelRegistrationSecretMeta, readTunnelRegistrationSecretFromConfigOnly, resolveTunnelBrokerUrl } from "../../../tunnel/env.js";
 import { logTunnelAudit } from "../../../tunnel/tunnel-audit.js";
 import { getTunnelService, hashGatewayToken } from "../../../tunnel/tunnel-service.js";
-import { extractToken } from "../../auth.js";
+import { requireTunnelGatewayToken } from "../../../tunnel/auth-policy.js";
 import { TUNNEL_CONSENT_REQUIRED_CODE, TunnelConsentError, assertTunnelMayStart, getTunnelConsentState } from "../../../tunnel/consent.js";
 import { configureTunnelFromGatewayConfig } from "../../../tunnel/gateway-lifecycle.js";
 import { applyTunnelConsentToConfig, mergeTunnelConfigPatch, setTunnelEnabledInConfig } from "../../../tunnel/tunnel-config.js";
+import { getGatewayPrincipal } from "../../security/gateway-principal.js";
 import { consumeTunnelMutationLimit } from "../../../tunnel/tunnel-rate-limit.js";
 import "../../../tunnel/index.js";
 import { provisionTunnelRegistrationKey } from "../../../tunnel/xopc-cloud-registration.js";
@@ -36,14 +37,9 @@ function enrichTunnelStatus(config, status) {
 		registrationSecret
 	};
 }
-function requireGatewayToken(c) {
-	return extractToken({ authorization: c.req.header("authorization") ?? void 0 }) ?? null;
-}
 function createTunnelMutationRateLimitMiddleware() {
 	return async (c, next) => {
-		const token = requireGatewayToken(c);
-		if (!token) return c.json({ error: "Gateway token required" }, 401);
-		const result = consumeTunnelMutationLimit(token);
+		const result = consumeTunnelMutationLimit(getGatewayPrincipal(c).principalId);
 		if (!result.allowed) {
 			c.header("Retry-After", String(Math.ceil(result.retryAfterMs / 1e3)));
 			return c.json({
@@ -66,7 +62,6 @@ function registerTunnelRoutes(authenticated, deps) {
 	* the UI can render targeted hints (TLS / DNS / wrong service / blocked path).
 	*/
 	authenticated.post("/api/tunnel/probe-public", tunnelMutationLimit, async (c) => {
-		if (!requireGatewayToken(c)) return c.json({ error: "Gateway token required" }, 401);
 		let body;
 		try {
 			body = await c.req.json();
@@ -142,8 +137,6 @@ function registerTunnelRoutes(authenticated, deps) {
 		return c.json(enrichTunnelStatus(config, tunnel.getStatus()));
 	});
 	authenticated.post("/api/tunnel/consent", tunnelMutationLimit, async (c) => {
-		const token = requireGatewayToken(c);
-		if (!token) return c.json({ error: "Gateway token required" }, 401);
 		const config = deps.service.currentConfig;
 		applyTunnelConsentToConfig(config);
 		const result = await deps.service.saveConfig(config);
@@ -154,7 +147,7 @@ function registerTunnelRoutes(authenticated, deps) {
 		const consent = getTunnelConsentState(config);
 		logTunnelAudit("tunnel.consent", {
 			consentVersion: consent.currentVersion,
-			gatewayTokenHash: hashGatewayToken(token).slice(0, 12)
+			principalId: getGatewayPrincipal(c).principalId
 		}, "Remote access security consent recorded");
 		return c.json({
 			ok: true,
@@ -190,10 +183,17 @@ function registerTunnelRoutes(authenticated, deps) {
 		}
 	});
 	authenticated.post("/api/tunnel/start", tunnelMutationLimit, async (c) => {
+		let token;
+		try {
+			token = requireTunnelGatewayToken(deps.service.getResolvedAuth());
+		} catch (error) {
+			return c.json({
+				error: error.message,
+				code: "TUNNEL_AUTH_REQUIRED"
+			}, 403);
+		}
 		await configureTunnelFromService(deps, { force: true });
 		const config = deps.service.currentConfig;
-		const token = requireGatewayToken(c);
-		if (!token) return c.json({ error: "Gateway token required" }, 401);
 		try {
 			assertTunnelMayStart(config);
 		} catch (err) {

package/dist/src/gateway/image-generation-setup.d.ts

@@ -19,6 +19,23 @@ export declare function getAgentImageGenerationConfig(config: Config, agentIdRaw
         timeoutMs?: number;
     };
 };
+export declare function getDefaultImageGenerationConfig(config: Config): {
+    model: {
+        primary: string;
+        fallbacks: string[];
+        autoProviderFallback: boolean;
+        timeoutMs?: number;
+    };
+};
+export declare function prepareDefaultImageGenerationSetup(config: Config, input: ImageGenerationSetupInput): {
+    ok: true;
+    config: Config;
+    providerId: string;
+    modelId: string;
+} | {
+    ok: false;
+    error: string;
+};
 export declare function prepareImageGenerationSetup(config: Config, agentIdRaw: string, input: ImageGenerationSetupInput): {
     ok: true;
     config: Config;

package/dist/src/gateway/image-generation-setup.js

@@ -59,12 +59,10 @@ function getAgentImageGenerationConfig(config, agentIdRaw) {
 		model: resolveEffectiveAgentConfigForAgent(config, agentId).config.models.imageGeneration ?? null
 	};
 }
-function prepareImageGenerationSetup(config, agentIdRaw, input) {
-	const agentId = normalizeAgentId(agentIdRaw);
-	if (!config.agents.list.some((entry) => entry.enabled !== false && normalizeAgentId(entry.id) === agentId)) return {
-		ok: false,
-		error: `Agent not found: ${agentId}`
-	};
+function getDefaultImageGenerationConfig(config) {
+	return { model: config.agents.defaults.models.imageGeneration ?? null };
+}
+function prepareImageGenerationConfig(config, input, applyModel) {
 	const providerId = input.providerId.trim();
 	const provider = getImageGenerationProvider(providerId);
 	if (!provider) return {
@@ -82,11 +80,6 @@ function prepareImageGenerationSetup(config, agentIdRaw, input) {
 		error: parsedProviderConfig.error
 	};
 	const next = structuredClone(config);
-	const index = next.agents.list.findIndex((entry) => entry.enabled !== false && normalizeAgentId(entry.id) === agentId);
-	if (index < 0) return {
-		ok: false,
-		error: `Agent not found: ${agentId}`
-	};
 	next.providers = {
 		...next.providers ?? {},
 		[providerId]: {
@@ -94,15 +87,11 @@ function prepareImageGenerationSetup(config, agentIdRaw, input) {
 			...parsedProviderConfig.value
 		}
 	};
-	const entry = next.agents.list[index];
-	entry.models = {
-		...entry.models ?? {},
-		imageGeneration: {
-			primary: `${providerId}/${modelId}`,
-			fallbacks: [],
-			autoProviderFallback: false
-		}
-	};
+	applyModel(next, {
+		primary: `${providerId}/${modelId}`,
+		fallbacks: [],
+		autoProviderFallback: false
+	});
 	const parsed = ConfigSchema.safeParse(next);
 	if (!parsed.success) return {
 		ok: false,
@@ -115,6 +104,26 @@ function prepareImageGenerationSetup(config, agentIdRaw, input) {
 		modelId
 	};
 }
+function prepareDefaultImageGenerationSetup(config, input) {
+	return prepareImageGenerationConfig(config, input, (next, model) => {
+		next.agents.defaults.models.imageGeneration = model;
+	});
+}
+function prepareImageGenerationSetup(config, agentIdRaw, input) {
+	const agentId = normalizeAgentId(agentIdRaw);
+	if (!config.agents.list.some((entry) => entry.enabled !== false && normalizeAgentId(entry.id) === agentId)) return {
+		ok: false,
+		error: `Agent not found: ${agentId}`
+	};
+	return prepareImageGenerationConfig(config, input, (next, model) => {
+		const index = next.agents.list.findIndex((entry) => entry.enabled !== false && normalizeAgentId(entry.id) === agentId);
+		const entry = next.agents.list[index];
+		entry.models = {
+			...entry.models ?? {},
+			imageGeneration: model
+		};
+	});
+}
 async function verifyImageGenerationCredential(input) {
 	const apiKey = input.apiKey.trim();
 	if (!apiKey) return {
@@ -165,4 +174,4 @@ async function verifyImageGenerationCredential(input) {
 	}
 }
 //#endregion
-export { getAgentImageGenerationConfig, getImageGenerationCatalog, prepareImageGenerationSetup, verifyImageGenerationCredential };
+export { getAgentImageGenerationConfig, getDefaultImageGenerationConfig, getImageGenerationCatalog, prepareDefaultImageGenerationSetup, prepareImageGenerationSetup, verifyImageGenerationCredential };

package/dist/src/gateway/rate-limit/buckets.d.ts

@@ -34,6 +34,7 @@ export declare function authPolicyConfig(cfg: ResolvedAuthRateLimitConfig): Auth
 declare class BucketRegistry {
     private authFailureLimiter?;
     private authFailureSignature?;
+    private identityChallengeLimiter?;
     private strictApiLimiter?;
     private chatApiLimiter?;
     private mediaApiLimiter?;
@@ -50,6 +51,8 @@ declare class BucketRegistry {
      * config read.
      */
     authFailure(cfg: ResolvedAuthRateLimitConfig): FailureLimiter;
+    /** Global pre-authentication signing budget; independent of authenticated traffic. */
+    identityChallenge(): RateLimiter;
     /** Authenticated admin / mutation endpoints — 150 req / 60 s per client IP. */
     strictApi(): RateLimiter;
     /** Interactive chat actions — 180 req / 60 s per client IP. */

package/dist/src/gateway/rate-limit/buckets.js

@@ -46,6 +46,7 @@ function authPolicyConfig(cfg) {
 var BucketRegistry = class {
 	authFailureLimiter;
 	authFailureSignature;
+	identityChallengeLimiter;
 	strictApiLimiter;
 	chatApiLimiter;
 	mediaApiLimiter;
@@ -75,6 +76,13 @@ var BucketRegistry = class {
 		}
 		return this.authFailureLimiter;
 	}
+	/** Global pre-authentication signing budget; independent of authenticated traffic. */
+	identityChallenge() {
+		return this.identityChallengeLimiter ??= new RateLimiter({
+			maxRequests: 300,
+			windowMs: 6e4
+		});
+	}
 	/** Authenticated admin / mutation endpoints — 150 req / 60 s per client IP. */
 	strictApi() {
 		if (!this.strictApiLimiter) this.strictApiLimiter = new RateLimiter({
@@ -158,6 +166,7 @@ var BucketRegistry = class {
 	}
 	destroyAll() {
 		this.authFailureLimiter?.destroy();
+		this.identityChallengeLimiter?.destroy();
 		this.strictApiLimiter?.destroy();
 		this.chatApiLimiter?.destroy();
 		this.mediaApiLimiter?.destroy();
@@ -169,6 +178,7 @@ var BucketRegistry = class {
 		this.sharePublicShortLimiter?.destroy();
 		this.sharePublicLongLimiter?.destroy();
 		this.authFailureLimiter = void 0;
+		this.identityChallengeLimiter = void 0;
 		this.strictApiLimiter = void 0;
 		this.chatApiLimiter = void 0;
 		this.mediaApiLimiter = void 0;

package/dist/src/gateway/runtime-config.js

@@ -1,6 +1,7 @@
 import { isAllInterfacesHost, isLoopbackHost, resolveGatewayCorsOrigins } from "./host.js";
 import { resolveGatewayListenPlan } from "./listen.js";
 import { assertTailscaleExposureCompatible } from "./tailscale-lifecycle.js";
+import { requireTunnelGatewayToken } from "../tunnel/auth-policy.js";
 import { isAuthRateLimitGloballyDisabled, isGatewayStrictSecurityEnabled } from "./rate-limit/env-flags.js";
 import "./rate-limit/index.js";
 //#region src/gateway/runtime-config.ts
@@ -15,6 +16,7 @@ function hasSharedSecret(auth) {
 * Throws when bind/auth/origin combinations are unsafe for network exposure.
 */
 function assertGatewayRuntimeConfig(params) {
+	if (params.cfg.tunnel?.enabled) requireTunnelGatewayToken(params.auth);
 	const { bindMode, bindHost, customBindHost } = resolveGatewayListenPlan({
 		cfg: params.cfg,
 		bindOverride: params.bindOverride

package/dist/src/gateway/security/browser-session.d.ts

@@ -0,0 +1,5 @@
+import type { Context } from 'hono';
+export declare function readBrowserSessionCookie(c: Context): string | undefined;
+export declare function browserCookieRequestAllowed(c: Context): boolean;
+export declare function writeBrowserSessionCookie(c: Context, token: string, expiresAt: number): void;
+export declare function clearBrowserSessionCookie(c: Context): void;

package/dist/src/gateway/security/browser-session.js

@@ -0,0 +1,45 @@
+import { isLoopbackHost } from "../host.js";
+import { deleteCookie, getCookie, setCookie } from "hono/cookie";
+//#region src/gateway/security/browser-session.ts
+function origin(c) {
+	return new URL(`http://${c.req.header("host") ?? new URL(c.req.url).host}`);
+}
+function secure(c) {
+	return !isLoopbackHost(origin(c).hostname.replace(/^\[|\]$/g, ""));
+}
+function name(c) {
+	return secure(c) ? "__Host-xopc-session" : "xopc-local-session";
+}
+function readBrowserSessionCookie(c) {
+	return getCookie(c, name(c));
+}
+function browserCookieRequestAllowed(c) {
+	const requestOrigin = c.req.header("origin");
+	if (requestOrigin) try {
+		const parsed = new URL(requestOrigin);
+		const localOrigin = isLoopbackHost(parsed.hostname.replace(/^\[|\]$/g, ""));
+		return (parsed.host === origin(c).host || !secure(c) && localOrigin) && (parsed.protocol === "https:" || !secure(c) && parsed.protocol === "http:");
+	} catch {
+		return false;
+	}
+	return ["GET", "HEAD"].includes(c.req.method) && c.req.header("sec-fetch-site") !== "cross-site";
+}
+function writeBrowserSessionCookie(c, token, expiresAt) {
+	setCookie(c, name(c), token, {
+		httpOnly: true,
+		secure: secure(c),
+		sameSite: "Strict",
+		path: "/",
+		expires: new Date(expiresAt)
+	});
+}
+function clearBrowserSessionCookie(c) {
+	deleteCookie(c, name(c), {
+		httpOnly: true,
+		secure: secure(c),
+		sameSite: "Strict",
+		path: "/"
+	});
+}
+//#endregion
+export { browserCookieRequestAllowed, clearBrowserSessionCookie, readBrowserSessionCookie, writeBrowserSessionCookie };

package/dist/src/gateway/security/gateway-principal.d.ts

@@ -5,6 +5,7 @@ export type GatewayPrincipal = {
     principalId: string;
     deviceId?: string;
     accessSessionId?: string;
+    browserSessionId?: string;
     scopes: readonly GatewayScope[];
 };
 export declare function setGatewayPrincipal(c: Context, principal: GatewayPrincipal): void;

package/dist/src/gateway/service.d.ts

@@ -48,6 +48,7 @@ export declare class GatewayService {
     private readonly modelCatalogSync;
     private auth;
     readonly endpointTools: EndpointToolRuntime;
+    private isRealtimePrincipalActive;
     readonly realtime: RealtimeRuntime;
     readonly voiceRealtime: VoiceRealtimeRuntime;
     getConfig(): Config;

package/dist/src/gateway/service.js

@@ -31,11 +31,13 @@ import { resolveProjectAgentId } from "../projects/project-agent.js";
 import "../projects/index.js";
 import { resolveEffectiveGatewayPort } from "./host.js";
 import { onSessionTranscriptUpdate } from "../session/transcript-events.js";
+import { ProactiveScenarioService } from "../proactive/scenarios/service.js";
+import { ProactiveEventService } from "../proactive/service.js";
+import { TaskApplicationService } from "../tasks/task-application-service.js";
+import { ProactiveInboxService } from "../proactive/inbox/service.js";
 import { AutomationService } from "../automations/service/automation-service.js";
 import { onAutomationProductEvent, publishAutomationProductEvent } from "../automations/product-events.js";
 import "../automations/index.js";
-import { TaskApplicationService } from "../tasks/task-application-service.js";
-import { ProactiveScenarioService } from "../proactive/scenarios/service.js";
 import { TaskOutboxDispatcher } from "../tasks/task-outbox-dispatcher.js";
 import { TaskRunDispatcher } from "../tasks/task-run-dispatcher.js";
 import { TaskSignalService } from "../tasks/task-signal-service.js";
@@ -54,12 +56,6 @@ import { registerClarificationChannelRuntime } from "./clarify-runtime.js";
 import { ChannelManager } from "../channels/manager.js";
 import { getWorkspacePath } from "../config/workspace-path-helpers.js";
 import "../config/index.js";
-import { DiscussionService } from "../discussions/service.js";
-import { DiscussionOrganizer } from "../discussions/organizer.js";
-import { DiscussionLiveWorker } from "../discussions/live-worker.js";
-import { DiscussionOrganizerWorker } from "../discussions/organizer-worker.js";
-import { DiscussionSealer } from "../discussions/sealer.js";
-import "../discussions/index.js";
 import { ManagedComposioEventPoller } from "../connectors/composio-managed-events.js";
 import { startConnectedKnowledgeCoordinator } from "../knowledge/coordinator.js";
 import "../knowledge/index.js";
@@ -67,12 +63,17 @@ import { ConnectionRecoveryService } from "../connectors/connection-recovery-ser
 import { startConnectorLearningCoordinator } from "../connectors/learning-coordinator.js";
 import { ConnectedSourceChangePublisher } from "../connectors/source-change-publisher.js";
 import { startConnectorSupervisor } from "../connectors/supervisor.js";
+import { DiscussionService } from "../discussions/service.js";
+import { DiscussionOrganizer } from "../discussions/organizer.js";
+import { DiscussionLiveWorker } from "../discussions/live-worker.js";
+import { DiscussionOrganizerWorker } from "../discussions/organizer-worker.js";
+import { DiscussionSealer } from "../discussions/sealer.js";
+import "../discussions/index.js";
 import { EndpointToolRuntime } from "../endpoint-tools/runtime.js";
 import "../endpoint-tools/index.js";
 import { assertGatewayAuthConfigured, extractToken, resolveGatewayAuth, validateToken } from "./auth.js";
 import { prepareAutomationAgentSession } from "./automation-agent-session.js";
 import { stopTailscaleExposure } from "./tailscale-lifecycle.js";
-import { ProactiveInboxService } from "../proactive/inbox/service.js";
 import { deliverProactiveCard } from "../proactive/inbox/delivery.js";
 import { buildVoiceMemoryContext } from "../voice/realtime/memory-context.js";
 import { buildVoicePersonaContext } from "../voice/realtime/persona-context.js";
@@ -108,7 +109,6 @@ import "../local-apps/index.js";
 import { createRuntimeBrowserAutomationService } from "../browser/automations/runtime-service.js";
 import "../browser/automations/index.js";
 import { mapProductEventToProactive } from "../proactive/events/product-event-bridge.js";
-import { ProactiveEventService } from "../proactive/service.js";
 import { ReadonlyProactiveAgentExecutor } from "../proactive/execution/agent-executor.js";
 import { listInsights } from "../proactive/execution/repository.js";
 import { ProactiveWorker } from "../proactive/execution/worker.js";
@@ -122,6 +122,7 @@ import { GatewaySessionsApi } from "./service/sessions-api.js";
 import { GatewayMarketplaceService } from "./service/marketplace-service.js";
 import { GatewayConfigCoordinator } from "./service/config-coordinator.js";
 import { GatewayAgentRunner } from "./service/agent-runner.js";
+import { isBrowserSessionActive } from "../storage/sqlite/browser-session-repository.js";
 import { RealtimeRuntime } from "../realtime/runtime.js";
 import { VoiceRealtimeRuntime } from "../voice/realtime/runtime.js";
 import { DurableVoiceAgentBroker } from "../voice/realtime/agentBroker.js";
@@ -165,8 +166,17 @@ var GatewayService = class {
 	});
 	auth;
 	endpointTools = new EndpointToolRuntime();
-	realtime = new RealtimeRuntime(this.endpointTools);
+	isRealtimePrincipalActive = (principalId) => {
+		if (!principalId.startsWith("browser:")) return true;
+		try {
+			return isBrowserSessionActive(principalId.slice(8), this.auth);
+		} catch {
+			return false;
+		}
+	};
+	realtime = new RealtimeRuntime(this.endpointTools, this.isRealtimePrincipalActive);
 	voiceRealtime = new VoiceRealtimeRuntime({
+		isPrincipalActive: this.isRealtimePrincipalActive,
 		getConversationContext: async (sessionKey, expectedSessionId) => {
 			if ((await this.sessionIndex.getSessionMetadata(sessionKey))?.sessionId !== expectedSessionId) throw new Error("Conversation changed before voice connection");
 			const messages = await this.sessionIndex.loadMessages(sessionKey);

package/dist/src/heartbeat/index.js

@@ -1,6 +1,6 @@
 import { DEFAULT_ACK_MAX_CHARS, HEARTBEAT_OK, NO_REPLY, shouldSilence, stripHeartbeatToken } from "./tokens.js";
+import { appendCronEventLines } from "./event-prompt.js";
 import { isWithinActiveHours } from "./active-hours.js";
 import { isHeartbeatContentEmpty } from "./content-check.js";
-import { appendCronEventLines } from "./event-prompt.js";
 import { createHeartbeatWake } from "./wake.js";
 export { DEFAULT_ACK_MAX_CHARS, HEARTBEAT_OK, NO_REPLY, appendCronEventLines, createHeartbeatWake, isHeartbeatContentEmpty, isWithinActiveHours, shouldSilence, stripHeartbeatToken };

package/dist/src/infra/rate-limit/keyed-store.d.ts

@@ -11,6 +11,7 @@ export type Clock = () => number;
 export type KeyedStoreOptions = {
     /** Drop entries whose `lastTouchedMs` is older than this. */
     staleAfterMs: number;
+    maxEntries?: number;
     /** How often the sweep runs. Defaults to `staleAfterMs / 4` (capped at 10min). */
     cleanupIntervalMs?: number;
     /** Injected clock for deterministic tests. */
@@ -20,6 +21,8 @@ export declare class KeyedStore<V extends {
     lastTouchedMs: number;
 }> {
     private readonly map;
+    private readonly maxEntries;
+    private overflow?;
     private readonly clock;
     private readonly staleAfterMs;
     private cleanupTimer?;

package/dist/src/infra/rate-limit/keyed-store.js

@@ -1,10 +1,13 @@
 //#region src/infra/rate-limit/keyed-store.ts
 var KeyedStore = class {
 	map = /* @__PURE__ */ new Map();
+	maxEntries;
+	overflow;
 	clock;
 	staleAfterMs;
 	cleanupTimer;
 	constructor(opts) {
+		this.maxEntries = Math.max(1, opts.maxEntries ?? 1e4);
 		this.clock = opts.clock ?? Date.now;
 		this.staleAfterMs = Math.max(1e3, opts.staleAfterMs);
 		const interval = Math.min(600 * 1e3, Math.max(1e3, opts.cleanupIntervalMs ?? Math.floor(this.staleAfterMs / 4)));
@@ -12,10 +15,11 @@ var KeyedStore = class {
 		this.cleanupTimer.unref?.();
 	}
 	get(key) {
-		return this.map.get(key);
+		return this.map.get(key) ?? (this.map.size >= this.maxEntries ? this.overflow : void 0);
 	}
 	set(key, value) {
-		this.map.set(key, value);
+		if (this.map.has(key) || this.map.size < this.maxEntries) this.map.set(key, value);
+		else this.overflow ??= value;
 	}
 	delete(key) {
 		this.map.delete(key);
@@ -25,6 +29,7 @@ var KeyedStore = class {
 	}
 	clear() {
 		this.map.clear();
+		this.overflow = void 0;
 	}
 	destroy() {
 		if (this.cleanupTimer) {
@@ -32,9 +37,11 @@ var KeyedStore = class {
 			this.cleanupTimer = void 0;
 		}
 		this.map.clear();
+		this.overflow = void 0;
 	}
 	sweep() {
 		const now = this.clock();
+		if (this.overflow && now - this.overflow.lastTouchedMs > this.staleAfterMs) this.overflow = void 0;
 		for (const [k, v] of this.map.entries()) if (now - v.lastTouchedMs > this.staleAfterMs) this.map.delete(k);
 	}
 };

package/dist/src/notifications/web-push.js

@@ -152,7 +152,7 @@ async function testBrowserPush(workspaceId, subscriptionId, send = webPush.sendN
 			id,
 			title: "xopc 推送测试 / Push test",
 			body: "点击此通知确认打开 / Tap to confirm opening",
-			route: `/proactive?probe=${encodeURIComponent(id)}`
+			route: `/assistant-work?probe=${encodeURIComponent(id)}`
 		}), {
 			vapidDetails: {
 				subject: "https://xopc.ai",

package/dist/src/proactive/actions/service.js

@@ -1,8 +1,8 @@
 import { getSqliteDatabase, runSqliteWriteTransaction } from "../../storage/sqlite/transaction.js";
-import { TaskApplicationService } from "../../tasks/task-application-service.js";
+import { insightSourcesAuthorized, insightSourcesChanged } from "../execution/authorization.js";
 import { effectiveProactivePolicy } from "../policy/service.js";
-import { insightSourcesAuthorized } from "../execution/authorization.js";
 import { insightCorrelation } from "../inbox/lifecycle.js";
+import { TaskApplicationService } from "../../tasks/task-application-service.js";
 //#region src/proactive/actions/service.ts
 function projectIdFromAggregationKey(value) {
 	if (!value.startsWith("project:") || value.length === 8) throw new Error("Proactive action has no project scope");
@@ -13,6 +13,7 @@ function executeClaimedAction(row, now = /* @__PURE__ */ new Date()) {
 	try {
 		if (getSqliteDatabase().prepare("SELECT 1 FROM proactive_inbox_items WHERE insight_id = ? AND withdrawn_at IS NOT NULL").get(row.insight_id)) throw new Error("Card was withdrawn");
 		if (!insightSourcesAuthorized(row.insight_id)) throw new Error("Source permission is no longer available");
+		if (insightSourcesChanged(row.insight_id)) throw new Error("Source changed; review updated work before acting");
 		if (!effectiveProactivePolicy(row.subscription_id).enabled) throw new Error("Proactive subscription paused");
 		const permission = getSqliteDatabase().prepare(`SELECT mode, allowed_actions_json FROM project_monitoring_policies WHERE project_id = ?`).get(projectIdFromAggregationKey(row.aggregation_key));
 		if (!getSqliteDatabase().prepare(`SELECT 1 FROM proactive_decisions d JOIN proactive_inbox_items i USING(inbox_item_id) WHERE i.insight_id = ? AND d.choice = 'approve'`).get(row.insight_id) && !(permission?.mode === "auto_low_risk" && JSON.parse(permission.allowed_actions_json).includes(action.id))) throw new Error("Action permission is no longer available");
@@ -48,6 +49,7 @@ function executeClaimedAction(row, now = /* @__PURE__ */ new Date()) {
 		getSqliteDatabase().prepare(`UPDATE proactive_insights
       SET action_status = 'completed', action_result_json = ?, action_error = NULL, action_updated_at = ?
       WHERE insight_id = ? AND action_status = 'executing'`).run(JSON.stringify({ taskId: result.model.task.id }), now.toISOString(), row.insight_id);
+		getSqliteDatabase().prepare("UPDATE proactive_inbox_items SET status = 'read', resolution = NULL, updated_at = ? WHERE insight_id = ?").run(now.toISOString(), row.insight_id);
 	} catch (error) {
 		getSqliteDatabase().prepare(`UPDATE proactive_insights
       SET action_status = 'failed', action_error = ?, action_updated_at = ?

package/dist/src/proactive/execution/authorization.d.ts

@@ -1,3 +1,5 @@
 /** Recheck connector consent for stored cards and actions, not just model input. */
 export declare function insightSourcesAuthorized(insightId: string): boolean;
+/** Compare versions, not generated prose, before showing or executing prepared work. */
+export declare function insightSourcesChanged(insightId: string): boolean;
 export declare function authorizedConnectedSource(itemId: string, workspaceId: string, scenarioKey: string, agentId?: string | null): import("../../knowledge/types.js").KnowledgeSourceItem;

package/dist/src/proactive/execution/authorization.js

@@ -1,14 +1,52 @@
 import { getSqliteDatabase } from "../../storage/sqlite/transaction.js";
 import { getKnowledgeSourceItem } from "../../storage/sqlite/knowledge-repository.js";
 import { getConnectorSyncPolicyForConnection } from "../../storage/sqlite/connector-sync-policy-repository.js";
+import { readMailThread } from "../mail-thread.js";
 //#region src/proactive/execution/authorization.ts
 /** Recheck connector consent for stored cards and actions, not just model input. */
 function insightSourcesAuthorized(insightId) {
+	const snapshot = getSqliteDatabase().prepare(`SELECT s.workspace_id, x.scenario_key, c.evidence_ids_json
+    FROM proactive_insights x JOIN proactive_scenario_subscriptions s USING(subscription_id)
+    JOIN proactive_runs r USING(run_id) LEFT JOIN proactive_context_snapshots c ON c.snapshot_id = r.context_snapshot_id
+    WHERE x.insight_id = ?`).get(insightId);
+	if (snapshot?.evidence_ids_json) {
+		if (JSON.parse(snapshot.evidence_ids_json).some((id) => id.startsWith("source-item:") && !authorizedConnectedSource(id.slice(12), snapshot.workspace_id, snapshot.scenario_key))) return false;
+	}
 	return getSqliteDatabase().prepare(`SELECT e.subject_id, e.workspace_id, x.scenario_key
     FROM proactive_insights x JOIN proactive_runs r USING(run_id)
     JOIN proactive_batch_events be ON be.batch_id = r.batch_id JOIN proactive_events e USING(event_id)
     WHERE x.insight_id = ? AND e.type LIKE 'connected_source.%'`).all(insightId).every((row) => Boolean(authorizedConnectedSource(row.subject_id, row.workspace_id, row.scenario_key)));
 }
+/** Compare versions, not generated prose, before showing or executing prepared work. */
+function insightSourcesChanged(insightId) {
+	const db = getSqliteDatabase();
+	const row = db.prepare(`SELECT c.content_json FROM proactive_insights x JOIN proactive_runs r USING(run_id)
+    JOIN proactive_context_snapshots c ON c.snapshot_id = r.context_snapshot_id WHERE x.insight_id = ?`).get(insightId);
+	if (!row) return false;
+	const snapshot = JSON.parse(row.content_json);
+	if (snapshot.follow_up?.followUpId) {
+		const follow = db.prepare("SELECT source_item_id, revision, status, due_at FROM proactive_follow_ups WHERE id = ?").get(snapshot.follow_up.followUpId);
+		if (!follow || follow.status !== "watching" || follow.revision !== snapshot.follow_up.revision || Date.parse(follow.due_at) <= Date.now() !== snapshot.follow_up.deadlinePassed || readMailThread(follow.source_item_id)?.fingerprint !== snapshot.follow_up.fingerprint) return true;
+	}
+	for (const source of [...snapshot.connected_source?.items ?? [], ...snapshot.follow_up?.items ?? []]) {
+		const current = getKnowledgeSourceItem(source.sourceItemId);
+		if (!current || current.deletedAt || current.contentHash !== source.contentHash || current.occurredAt !== source.occurredAt) return true;
+	}
+	const project = snapshot.project_state?.project;
+	if (project) {
+		const current = db.prepare("SELECT updated_at FROM projects WHERE project_id = ?").get(project.project_id);
+		if (!current || current.updated_at !== project.updated_at) return true;
+	}
+	for (const task of [...snapshot.project_state?.activeTasks ?? [], ...snapshot.meeting_workspace?.activeTasks ?? []]) {
+		const current = db.prepare("SELECT updated_at FROM tasks WHERE task_id = ?").get(task.task_id);
+		if (!current || current.updated_at !== task.updated_at) return true;
+	}
+	for (const note of snapshot.meeting_workspace?.recentNotes ?? []) {
+		const current = db.prepare("SELECT updated_at FROM notes WHERE note_id = ?").get(note.note_id);
+		if (!current || current.updated_at !== note.updated_at) return true;
+	}
+	return false;
+}
 function authorizedConnectedSource(itemId, workspaceId, scenarioKey, agentId) {
 	const item = getKnowledgeSourceItem(itemId);
 	if (!item || item.deletedAt || item.metadata.workspaceId !== workspaceId || item.sensitivity === "secret" || item.sensitivity === "regulated") return null;
@@ -20,4 +58,4 @@ function authorizedConnectedSource(itemId, workspaceId, scenarioKey, agentId) {
 	return policy?.scanEnabled && policy.proactiveEnabled && (!policy.allowedScenarioKeys.length || policy.allowedScenarioKeys.includes(scenarioKey)) ? item : null;
 }
 //#endregion
-export { authorizedConnectedSource, insightSourcesAuthorized };
+export { authorizedConnectedSource, insightSourcesAuthorized, insightSourcesChanged };

package/dist/src/proactive/execution/context.d.ts

@@ -33,6 +33,10 @@ export declare class DiscussionContextProvider implements ContextProvider {
     readonly id = "discussion";
     collect(input: ContextInput): Promise<ResolvedContext>;
 }
+export declare class MailFollowUpContextProvider implements ContextProvider {
+    readonly id = "follow_up";
+    collect(input: ContextInput): Promise<ResolvedContext>;
+}
 export declare class ContextProviderRegistry {
     private readonly providers;
     constructor(providers?: ContextProvider[]);