@xopcai/xopc 0.0.270 → 0.0.272

package/dist/src/cli/commands/extension.js

@@ -5,10 +5,10 @@ import { init_paths, resolveExtensionsDir } from "../../config/paths.js";
 import { init_loader, loadConfig, saveConfig } from "../../config/loader.js";
 import { checkEngineCompatibility } from "../../extensions/engine-check.js";
 import { ExtensionLoader } from "../../extensions/loader.js";
+import { getContextWithOpts } from "../context.js";
 import { getExtensionLockfileManager } from "../../extensions/lockfile.js";
 import { checkAllExtensionsHealth, getExtensionHealthChecker } from "../../extensions/health.js";
 import { collectExtensionPackageDependencyIssues } from "../../extensions/package-contract.js";
-import { getContextWithOpts } from "../context.js";
 import { colors } from "../utils/colors.js";
 import { createExtensionCreateCommand } from "./extension-create.js";
 import { createExtensionDevCommand } from "./extension-dev.js";

package/dist/src/cli/commands/gateway/lifecycle.js

@@ -1,7 +1,7 @@
 import { init_paths, resolveConfigPath } from "../../../config/paths.js";
 import { loadConfig } from "../../../config/loader.js";
-import { isRestartEnabled } from "../../../config/commands.flags.js";
 import "../../../config/index.js";
+import { isRestartEnabled } from "../../../config/commands.flags.js";
 import { resolveGatewayService } from "../../../daemon/service.js";
 import { authorizeGatewaySigusr1Restart, writeGatewayRestartIntentSync } from "../../../infra/restart.js";
 import { findVerifiedGatewayListenerPidsOnPortSync, formatGatewayPidList, signalVerifiedGatewayPidSync } from "../../../infra/gateway-processes.js";

package/dist/src/cli/commands/gateway-ssh-tunnel.js

@@ -1,5 +1,5 @@
-import { startSshPortForward } from "../../infra/ssh-tunnel.js";
 import { formatExamples } from "../registry.js";
+import { startSshPortForward } from "../../infra/ssh-tunnel.js";
 import { Command } from "commander";
 //#region src/cli/commands/gateway-ssh-tunnel.ts
 function registerGatewaySshTunnelCommand(parent, ctx) {

package/dist/src/cli/commands/models.js

@@ -2,11 +2,11 @@ import { getAgentDefaultModelRef, init_schema } from "../../config/schema.js";
 import { loadConfig, saveConfig } from "../../config/loader.js";
 import { CredentialResolver, init_credentials } from "../../auth/credentials.js";
 import { getAllModels, getAvailableModels, getConfiguredProviders, getProviderAuthState, getProviderDisplayName, init_providers, isProviderConfigured, providerSupportsApiKey, providerSupportsOAuth, resolveModel } from "../../providers/index.js";
+import { formatExamples, register } from "../registry.js";
+import { getContextWithOpts } from "../context.js";
 import "../../config/index.js";
 import { prepareUpdateGlobalDefaults } from "../../gateway/global-defaults-admin.js";
 import { disconnectProvider } from "../../providers/provider-disconnect.js";
-import { formatExamples, register } from "../registry.js";
-import { getContextWithOpts } from "../context.js";
 import { colors } from "../utils/colors.js";
 import { runCliOAuthLogin } from "../utils/oauth-login.js";
 import { input } from "@inquirer/prompts";

package/dist/src/cli/commands/onboard.js

@@ -2,8 +2,8 @@ import { init_paths_state, resolveStateDir } from "../../config/paths-state.js";
 import { ConfigSchema, init_schema } from "../../config/schema.js";
 import { saveConfig } from "../../config/loader.js";
 import { resolveGatewayLocalClientHost } from "../../config/gateway-bind.js";
-import "../../config/index.js";
 import { formatExamples, register } from "../registry.js";
+import "../../config/index.js";
 import { provisionEagerRuntimes } from "../../runtime-tools/bootstrap.js";
 import { colors } from "../utils/colors.js";
 import { initWorkspace } from "../utils/init-workspace.js";

package/dist/src/cli/commands/platform.js

@@ -1,6 +1,6 @@
 import { loadConfig, saveConfig } from "../../config/loader.js";
-import "../../config/index.js";
 import { formatExamples, register } from "../registry.js";
+import "../../config/index.js";
 import { PLATFORM_RUNTIME_PROFILE, PLATFORM_RUNTIME_PROVIDER, PlatformRuntimeClient, discoverPlatform } from "../../platform/client.js";
 import "../../platform/index.js";
 import { getProfile, upsertAuthProfile } from "../../auth/profiles/profiles.js";

package/dist/src/cli/commands/profile.js

@@ -1,7 +1,7 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
-import { createProfile, deleteProfile, getCurrentProfile, getSwitchCommand, listProfiles, resolveProfileStateDir } from "../../config/profile.js";
 import { formatExamples, register } from "../registry.js";
+import { createProfile, deleteProfile, getCurrentProfile, getSwitchCommand, listProfiles, resolveProfileStateDir } from "../../config/profile.js";
 import { colors } from "../utils/colors.js";
 import { Command } from "commander";
 import Table from "cli-table3";

package/dist/src/cli/commands/tunnel.js

@@ -1,16 +1,19 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
+import { isXopcDatabaseOpen, openXopcDatabase } from "../../storage/sqlite/connection.js";
 import { loadConfig, saveConfig } from "../../config/loader.js";
 import { resolveGatewayEffectiveHost } from "../../config/gateway-bind.js";
 import { ensureFrpcBinary } from "../../tunnel/frpc-binary.js";
 import { resolveTunnelBrokerUrl, resolveTunnelRegistrationSecret } from "../../tunnel/env.js";
 import { loadTunnelState } from "../../tunnel/tunnel-state.js";
 import { getTunnelService } from "../../tunnel/tunnel-service.js";
+import { formatExamples, register } from "../registry.js";
 import "../../config/index.js";
+import { resolveGatewayAuth } from "../../gateway/auth.js";
+import { requireTunnelGatewayToken } from "../../tunnel/auth-policy.js";
 import { TUNNEL_RISK_SUMMARY_LINES, TunnelConsentError, assertTunnelMayStart, hasValidTunnelConsent } from "../../tunnel/consent.js";
 import { resolveFrpSubdomainHost } from "../../tunnel/frp-subdomain-host.js";
 import { applyTunnelConsentToConfig, mergeTunnelConfigPatch, setTunnelEnabledInConfig } from "../../tunnel/tunnel-config.js";
-import { formatExamples, register } from "../registry.js";
 import "../../tunnel/index.js";
 import { Command } from "commander";
 //#region src/cli/commands/tunnel.ts
@@ -26,6 +29,7 @@ function resolveGatewayPortHost(config) {
 	};
 }
 function resolveGatewayToken(config) {
+	requireTunnelGatewayToken(resolveGatewayAuth({ authConfig: config.gateway.auth }));
 	const fromEnv = process.env.XOPC_GATEWAY_TOKEN?.trim();
 	if (fromEnv) return fromEnv;
 	const token = config.gateway.auth?.token?.trim();
@@ -155,6 +159,7 @@ function createTunnelCommand(ctx) {
 		});
 		const config = loadConfig(ctx.configPath);
 		assertTunnelMayStart(config);
+		if (!isXopcDatabaseOpen()) openXopcDatabase();
 		const { port, host } = resolveGatewayPortHost(config);
 		const token = resolveGatewayToken(config);
 		const tunnel = getTunnelService();

package/dist/src/cli/commands/update.js

@@ -1,11 +1,11 @@
 import { PACKAGE_VERSION, init_package_version } from "../../package-version.js";
 import { loadConfig } from "../../config/loader.js";
+import { formatExamples, register } from "../registry.js";
 import "../../config/index.js";
 import { acquireUpdateLock } from "../../infra/update-lock.js";
 import { normalizeUpdateChannel } from "../../infra/update-channels.js";
 import { compareSemver, resolveNpmChannelTag } from "../../infra/update-check.js";
 import { formatUpdateApiResult, resolveUpdateInstallSurface, runGatewayUpdateWithPostSteps } from "../../infra/update-runner.js";
-import { formatExamples, register } from "../registry.js";
 import { Command } from "commander";
 //#region src/cli/commands/update.ts
 init_package_version();

package/dist/src/cli/extension-cli-register.js

@@ -4,9 +4,9 @@ import { ExtensionLoader } from "../extensions/loader.js";
 import "../extensions/index.js";
 import { MessageBus } from "../infra/bus/queue.js";
 import "../infra/bus/index.js";
+import { createDefaultContext } from "./registry.js";
 import { getWorkspacePath } from "../config/workspace-path-helpers.js";
 import "../config/index.js";
-import { createDefaultContext } from "./registry.js";
 import { registerExtensionCliProgram } from "../extensions/sdk/channel-helpers.js";
 import { join } from "path";
 //#region src/cli/extension-cli-register.ts

package/dist/src/config/index.js

@@ -13,10 +13,10 @@ import { clearConfigValueCache, getAllowedCommands, getCacheStats, init_resolve_
 import { CustomModelSchema, ImageGenerationCapabilitiesSchema, ImageGenerationModelSchema, ImageGenerationProviderSchema, ModelOverrideSchema, ModelsJsonSchema, OpenAICompatSchema, OpenAICompletionsCompatSchema, OpenAIResponsesCompatSchema, OpenRouterRoutingSchema, ProviderConfigSchema, VercelGatewayRoutingSchema, getDefaultModelValues, init_models_json, loadModelsJson, modelsJsonExists, saveModelsJson, validateModelsConfig } from "./models-json.js";
 import { canonicalizeConfiguredMcpServer, isKnownCliMcpTypeAlias, normalizeConfiguredMcpServers, resolveXopcMcpTransportAlias } from "./mcp-config-normalize.js";
 import { formatThinkingLevels, listThinkingLevels, normalizeElevatedMode, normalizeReasoningLevel, normalizeThinkLevel, normalizeVerboseLevel, thinkLevelToNumber } from "../agent/transcript/thinking-types.js";
-import { diffConfigPaths } from "./diff.js";
 import { getWorkspacePath } from "./workspace-path-helpers.js";
 import { listAgentProfileMarkdownDirs, listAgentWorkspaceDirs } from "./workspace-dirs.js";
 import { ProfileManager, createProfile, deleteProfile, getCurrentProfile, getProfileManager, getProfileNameFromDir, getSwitchCommand, listProfiles, resolveProfileStateDir } from "./profile.js";
+import { diffConfigPaths } from "./diff.js";
 import { BASE_RELOAD_RULES, buildReloadPlan, matchReloadRule } from "./rules.js";
 import { ConfigHotReloader } from "./reload.js";
 //#region src/config/index.ts

package/dist/src/gateway/heartbeat/service.js

@@ -1,9 +1,9 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
 import { shouldSilence, stripHeartbeatToken } from "../../heartbeat/tokens.js";
+import { appendCronEventLines } from "../../heartbeat/event-prompt.js";
 import { isWithinActiveHours } from "../../heartbeat/active-hours.js";
 import { isHeartbeatContentEmpty } from "../../heartbeat/content-check.js";
-import { appendCronEventLines } from "../../heartbeat/event-prompt.js";
 import { createHeartbeatWake } from "../../heartbeat/wake.js";
 import { resolveHeartbeatMdPath } from "../workspace-heartbeat-path.js";
 import { readFile } from "fs/promises";

package/dist/src/gateway/hono/app.js

@@ -225,6 +225,7 @@ function createHonoApp(config) {
 	authenticated.use(auth({
 		getGatewayAuth: () => service.currentConfig.gateway?.auth,
 		getResolvedAuth: () => service.getResolvedAuth(),
+		isPublicTunnelEnabled: () => service.currentConfig.tunnel?.enabled === true,
 		getTrustedProxyContext: () => ({
 			trustedProxies: service.currentConfig.gateway?.trustedProxies,
 			allowRealIpFallback: service.currentConfig.gateway?.allowRealIpFallback === true

package/dist/src/gateway/hono/middleware/auth.d.ts

@@ -4,13 +4,12 @@ export interface AuthConfig {
     /** Current gateway auth from config (for rate-limit settings); optional. */
     getGatewayAuth?: () => GatewayAuthConfig | undefined;
     getResolvedAuth?: () => ResolvedGatewayAuth;
+    isPublicTunnelEnabled?: () => boolean;
     getTrustedProxyContext?: () => {
         trustedProxies?: string[];
         allowRealIpFallback?: boolean;
     };
 }
-/** Exported for gateway security tests. */
-export declare function isQueryTokenAllowedPath(path: string, method: string): boolean;
 export declare function auth(config?: AuthConfig): import("hono").MiddlewareHandler<any, string, {}, (Response & import("hono").TypedResponse<{
     error: string;
     code: string;

package/dist/src/gateway/hono/middleware/auth.js

@@ -5,11 +5,12 @@ import { authenticateDeviceAccessToken, getDevice } from "../../../storage/sqlit
 import { safeEqualSecret } from "../../security/secret-equal.js";
 import { resolveClientIpFromRequest } from "../../client-ip.js";
 import { authPolicyConfig, buckets, resolveAuthRateLimit } from "../../rate-limit/buckets.js";
-import { getClientIpFromHeaders } from "../../security/loopback.js";
 import { resolveAuthTracking } from "../../rate-limit/auth-policy.js";
 import { isAuthRateLimitGloballyDisabled } from "../../rate-limit/env-flags.js";
 import "../../rate-limit/index.js";
+import { authenticateBrowserSession } from "../../../storage/sqlite/browser-session-repository.js";
 import { isChromeExtensionOrigin } from "../../security/origin-check.js";
+import { browserCookieRequestAllowed, readBrowserSessionCookie, writeBrowserSessionCookie } from "../../security/browser-session.js";
 import { authorizeTrustedProxy } from "../../trusted-proxy.js";
 import { setGatewayPrincipal } from "../../security/gateway-principal.js";
 import { createMiddleware } from "hono/factory";
@@ -30,21 +31,6 @@ function extractTokenFromHeader(authHeader) {
 	if (parts.length === 2 && parts[0].toLowerCase() === "bearer") return parts[1];
 	return authHeader;
 }
-/**
-* SECURITY: query-string tokens leak into server logs, Referer headers, and
-* browser history. We accept them only for avatar `<img>` loads, where an
-* Authorization header cannot be set. Realtime WebSocket authentication uses a
-* one-time ticket acquired over authenticated HTTP.
-*/
-function extractTokenFromQuery(url) {
-	return new URL(url).searchParams.get("token");
-}
-const AGENT_AVATAR_GET_PATH = /^\/api\/agents\/[^/]+\/avatar$/;
-/** Exported for gateway security tests. */
-function isQueryTokenAllowedPath(path, method) {
-	if (method === "GET" && AGENT_AVATAR_GET_PATH.test(path)) return true;
-	return false;
-}
 function resolveRemoteAddress(c) {
 	try {
 		return getConnInfo(c).remote.address;
@@ -53,17 +39,16 @@ function resolveRemoteAddress(c) {
 	}
 }
 function resolveMiddlewareClientIp(c, trustedProxies, allowRealIpFallback) {
-	if (trustedProxies?.length) return resolveClientIpFromRequest({
+	return resolveClientIpFromRequest({
 		remoteAddress: resolveRemoteAddress(c),
 		getHeader: (name) => c.req.header(name),
 		trustedProxies,
 		allowRealIpFallback
 	});
-	return getClientIpFromHeaders({ get: (name) => c.req.header(name) ?? void 0 });
 }
-function buildRateLimitContext(getGatewayAuth, clientIp, origin) {
+function buildRateLimitContext(getGatewayAuth, clientIp, origin, enforce = false) {
 	const cfg = resolveAuthRateLimit(getGatewayAuth?.()?.rateLimit);
-	if (!(cfg.enabled && !isAuthRateLimitGloballyDisabled())) return {
+	if (!(cfg.enabled && (enforce || !isAuthRateLimitGloballyDisabled()))) return {
 		active: false,
 		cfg,
 		trackingKey: void 0
@@ -101,7 +86,18 @@ function blockedResponse(c, retryAfterSec) {
 	}, 429);
 }
 function auth(config) {
-	const { getGatewayAuth, getResolvedAuth, getTrustedProxyContext } = config || {};
+	const { getGatewayAuth: readGatewayAuth, getResolvedAuth, getTrustedProxyContext, isPublicTunnelEnabled } = config || {};
+	const getGatewayAuth = () => {
+		const current = readGatewayAuth?.();
+		return isPublicTunnelEnabled?.() ? {
+			...current,
+			rateLimit: {
+				...current?.rateLimit,
+				enabled: true,
+				exemptLoopback: false
+			}
+		} : current;
+	};
 	return createMiddleware(async (c, next) => {
 		const resolvedAuth = getResolvedAuth?.();
 		if (!resolvedAuth) {
@@ -115,13 +111,17 @@ function auth(config) {
 			}, 401);
 		}
 		const authMode = resolvedAuth.mode;
+		if (isPublicTunnelEnabled?.() && authMode !== "token") return c.json({
+			error: "Unauthorized",
+			code: "unsafe_tunnel_auth"
+		}, 401);
 		if (authMode === "trusted-proxy") {
 			const proxyContext = getTrustedProxyContext?.();
 			const trustedProxies = proxyContext?.trustedProxies;
 			const trustedProxyConfig = resolvedAuth?.trustedProxy;
 			const clientIp = resolveMiddlewareClientIp(c, trustedProxies, proxyContext?.allowRealIpFallback);
 			const origin = c.req.header("origin");
-			const rl = buildRateLimitContext(getGatewayAuth, clientIp, origin);
+			const rl = buildRateLimitContext(getGatewayAuth, clientIp, origin, isPublicTunnelEnabled?.());
 			if (!trustedProxyConfig) {
 				log.warn({
 					path: c.req.path,
@@ -199,16 +199,34 @@ function auth(config) {
 		const proxyContext = getTrustedProxyContext?.();
 		const clientIp = resolveMiddlewareClientIp(c, proxyContext?.trustedProxies, proxyContext?.allowRealIpFallback);
 		const origin = c.req.header("origin");
-		const rl = buildRateLimitContext(getGatewayAuth, clientIp, origin);
+		const rl = buildRateLimitContext(getGatewayAuth, clientIp, origin, isPublicTunnelEnabled?.());
 		const authHeader = extractTokenFromHeader(c.req.header("authorization"));
+		const browserCookie = readBrowserSessionCookie(c);
+		if (!authHeader && browserCookie) {
+			if (!browserCookieRequestAllowed(c)) return c.json({
+				error: "Forbidden",
+				code: "csrf_rejected"
+			}, 403);
+			const session = authenticateBrowserSession(browserCookie, resolvedAuth);
+			if (!session) {
+				recordFailure(rl);
+				return c.json({
+					error: "Unauthorized",
+					code: "browser_session_expired"
+				}, 401);
+			}
+			if (session.renewed) writeBrowserSessionCookie(c, browserCookie, session.expiresAt);
+			setGatewayPrincipal(c, {
+				kind: "owner",
+				principalId: `browser:${session.sessionId}`,
+				browserSessionId: session.sessionId,
+				scopes: ["gateway.admin"]
+			});
+			recordSuccess(rl);
+			return next();
+		}
 		const requestPath = new URL(c.req.url).pathname;
-		const queryToken = authMode === "token" && isQueryTokenAllowedPath(requestPath, c.req.method) ? extractTokenFromQuery(c.req.url) : null;
-		if (!authHeader && queryToken === null && new URL(c.req.url).searchParams.has("token")) log.warn({
-			path: requestPath,
-			method: c.req.method,
-			clientIp
-		}, "Credential in query string rejected: use Authorization header for this endpoint");
-		const providedCredential = authHeader || queryToken;
+		const providedCredential = authHeader;
 		const browserExtensionOrigin = isChromeExtensionOrigin(origin) ? origin.toLowerCase() : void 0;
 		if (providedCredential && validateCredential(providedCredential, expectedCredential)) {
 			if (browserExtensionOrigin) return c.json({
@@ -294,4 +312,4 @@ function auth(config) {
 	});
 }
 //#endregion
-export { auth, isQueryTokenAllowedPath };
+export { auth };

package/dist/src/gateway/hono/middleware/strict-rate-limit.js

@@ -2,7 +2,6 @@ import { createLogger } from "../../../utils/logger/index.js";
 import { init_logger } from "../../../utils/logger.js";
 import { resolveClientIpFromRequest } from "../../client-ip.js";
 import { buckets } from "../../rate-limit/buckets.js";
-import { getClientIpFromHeaders } from "../../security/loopback.js";
 import "../../rate-limit/index.js";
 import { createMiddleware } from "hono/factory";
 import { getConnInfo } from "@hono/node-server/conninfo";
@@ -15,21 +14,18 @@ init_logger();
 const log = createLogger("Hono:StrictRateLimit");
 function resolveClientIp(c, deps) {
 	const { trustedProxies, allowRealIpFallback } = deps.getTrustedProxyContext();
-	if (trustedProxies?.length) {
-		let remoteAddress;
-		try {
-			remoteAddress = getConnInfo(c).remote.address;
-		} catch {
-			remoteAddress = void 0;
-		}
-		return resolveClientIpFromRequest({
-			remoteAddress,
-			getHeader: (name) => c.req.header(name),
-			trustedProxies,
-			allowRealIpFallback
-		});
+	let remoteAddress;
+	try {
+		remoteAddress = getConnInfo(c).remote.address;
+	} catch {
+		remoteAddress = void 0;
 	}
-	return getClientIpFromHeaders({ get: (name) => c.req.header(name) ?? void 0 });
+	return resolveClientIpFromRequest({
+		remoteAddress,
+		getHeader: (name) => c.req.header(name),
+		trustedProxies,
+		allowRealIpFallback
+	});
 }
 function createClientRateLimitMiddleware(deps, options) {
 	return createMiddleware(async (c, next) => {

package/dist/src/gateway/hono/routes/browser-session.d.ts

@@ -0,0 +1,3 @@
+import type { Hono } from 'hono';
+import type { AuthenticatedRouteDeps } from './deps.js';
+export declare function registerBrowserSessionRoutes(app: Hono, deps: AuthenticatedRouteDeps): void;

package/dist/src/gateway/hono/routes/browser-session.js

@@ -0,0 +1,43 @@
+import { BrowserSessionLimitError, createBrowserSession, deleteBrowserSession } from "../../../storage/sqlite/browser-session-repository.js";
+import { browserCookieRequestAllowed, clearBrowserSessionCookie, writeBrowserSessionCookie } from "../../security/browser-session.js";
+import { getGatewayPrincipal } from "../../security/gateway-principal.js";
+//#region src/gateway/hono/routes/browser-session.ts
+function registerBrowserSessionRoutes(app, deps) {
+	app.get("/api/browser-session", (c) => {
+		c.header("Cache-Control", "no-store");
+		const principal = getGatewayPrincipal(c);
+		return c.json({ sessionKey: principal.principalId });
+	});
+	app.post("/api/browser-session", deps.strictRateLimitMiddleware, (c) => {
+		const principal = getGatewayPrincipal(c);
+		if (principal.kind !== "owner" || !browserCookieRequestAllowed(c)) return c.json({ error: "Forbidden" }, 403);
+		let session;
+		try {
+			session = createBrowserSession(deps.service.getResolvedAuth(), principal.browserSessionId);
+		} catch (error) {
+			if (error instanceof BrowserSessionLimitError) return c.json({ error: "Browser session limit reached" }, 409);
+			throw error;
+		}
+		if (principal.browserSessionId) {
+			deps.service.realtime.disconnectPrincipal(principal.principalId);
+			deps.service.voiceRealtime.disconnectPrincipal(principal.principalId);
+		}
+		writeBrowserSessionCookie(c, session.token, session.expiresAt);
+		c.header("Cache-Control", "no-store");
+		return c.json({ sessionKey: `browser:${session.sessionId}` });
+	});
+	app.delete("/api/browser-session", (c) => {
+		if (!browserCookieRequestAllowed(c)) return c.json({ error: "Forbidden" }, 403);
+		const principal = getGatewayPrincipal(c);
+		if (principal.browserSessionId) {
+			deleteBrowserSession(principal.browserSessionId);
+			deps.service.realtime.disconnectPrincipal(principal.principalId);
+			deps.service.voiceRealtime.disconnectPrincipal(principal.principalId);
+		}
+		clearBrowserSessionCookie(c);
+		c.header("Cache-Control", "no-store");
+		return c.json({ ok: true });
+	});
+}
+//#endregion
+export { registerBrowserSessionRoutes };