@xopcai/xopc 0.0.270 → 0.0.273

package/README.md

@@ -28,14 +28,10 @@
 
 <p align="center">
   <a href="https://xopcai.github.io/xopc/xopc-desktop.mp4">
-    <img src="docs/public/xopc-desktop-preview.gif" alt="xopc desktop onboarding demo" width="960">
+    <img src="docs/public/xopc-desktop-preview.gif" alt="xopc desktop app demo" width="960">
   </a>
 </p>
 
-<p align="center">
-  <a href="https://xopcai.github.io/xopc/xopc-desktop.mp4"><strong>Watch the full onboarding video (1:02) →</strong></a>
-</p>
-
 > After setup, try: **“One thing I want to move forward this week is ____. Help me find the smallest credible next step.”**
 
 <details>

package/README.zh-CN.md

@@ -28,14 +28,10 @@
 
 <p align="center">
   <a href="https://xopcai.github.io/xopc/xopc-desktop.mp4">
-    <img src="docs/public/xopc-desktop-preview.gif" alt="xopc 桌面端 onboarding 演示" width="960">
+    <img src="docs/public/xopc-desktop-preview.gif" alt="xopc 桌面应用演示" width="960">
   </a>
 </p>
 
-<p align="center">
-  <a href="https://xopcai.github.io/xopc/xopc-desktop.mp4"><strong>观看完整 onboarding 视频（1:02）→</strong></a>
-</p>
-
 > 安装后可以直接告诉它：**“这周我最想推进的一件事是 ____。帮我找到最小但可信的下一步。”**
 
 <details>

package/dist/browser-ext/dist/assets/{auth-cwEj8rFb.js → auth-DkwOUI6_.js}

@@ -5655,6 +5655,7 @@ class RealtimeClient {
   }
 }
 
+_enum(["mobile", "browser"]);
 const devicePairingKeySchema = strictObject({
   kty: literal("EC"),
   crv: literal("P-256"),
@@ -5981,6 +5982,7 @@ const KEY_DATABASE = "xopc-browser-identity";
 const KEY_STORE = "identity";
 const KEY_NAME = "device-key";
 const NATIVE_HOST_NAME = "ai.xopc.browser";
+const GATEWAY_REQUEST_TIMEOUT_MS = 8e3;
 let refreshTask;
 async function browserPublicKeyThumbprint(jwk) {
   const canonical = JSON.stringify({ crv: jwk.crv, kty: jwk.kty, x: jwk.x, y: jwk.y });
@@ -6047,16 +6049,25 @@ function randomNonce(bytes = 24) {
 function createRefreshToken() {
   return `xopc_rt_${crypto.randomUUID()}_${randomNonce(32)}`;
 }
-function parsePairingLink(value) {
+function parseBrowserPairingLink(value) {
   const url = new URL(value.trim());
+  if (url.protocol !== "https:" || url.hostname !== "link.xopc.ai" || url.pathname !== "/connect") {
+    throw new Error("Pairing link is not from xopc");
+  }
   const encoded = new URLSearchParams(url.hash.slice(1)).get("p");
   if (!encoded) throw new Error("Pairing link is invalid");
   const payload = decodeJson(encoded);
-  if (payload.version !== 3 || !payload.gatewayId || !payload.pairingToken || !payload.gatewayPublicKey) {
+  if (payload.version !== 3 || payload.targetKind !== "browser" || !payload.gatewayId || !payload.pairingToken || !payload.gatewayPublicKey || !Array.isArray(payload.routes)) {
     throw new Error("Pairing link version is not supported");
   }
   if (payload.expiresAt <= Date.now()) throw new Error("Pairing link has expired");
   if (!payload.routes.length) throw new Error("Pairing link has no Gateway route");
+  for (const route of payload.routes) {
+    const routeUrl = new URL(route.url);
+    if (!route.id || !["http:", "https:"].includes(routeUrl.protocol)) {
+      throw new Error("Pairing link has an invalid Gateway route");
+    }
+  }
   return payload;
 }
 function openIdentityDatabase() {
@@ -6135,22 +6146,46 @@ async function verifyGateway(publicKey, payload, signature) {
     return false;
   }
 }
-async function requestGatewayOriginPermission(origin) {
-  const url = new URL(origin);
-  const pattern = `${url.origin}/*`;
-  if (await chrome.permissions.contains({ origins: [pattern] })) return;
-  if (!await chrome.permissions.request({ origins: [pattern] })) {
-    throw new Error("Gateway site permission was not granted");
+function requestGatewayOriginPermissions(origins) {
+  const patterns = origins.filter((origin) => {
+    const url = new URL(origin);
+    return !(url.protocol === "http:" && ["127.0.0.1", "localhost"].includes(url.hostname));
+  }).map((origin) => `${new URL(origin).origin}/*`);
+  if (!patterns.length) return Promise.resolve(true);
+  return chrome.permissions.request({ origins: patterns });
+}
+class GatewayHttpError extends Error {
+  constructor(message, status) {
+    super(message);
+    this.status = status;
+    this.name = "GatewayHttpError";
   }
+  status;
 }
 async function post(origin, path, body) {
-  const response = await fetch(`${origin}${path}`, {
-    method: "POST",
-    headers: { "Content-Type": "application/json" },
-    body: JSON.stringify(body)
-  });
-  const json = await response.json();
-  if (!response.ok) throw new Error(json.error?.code ?? json.error?.message ?? `Gateway returned ${response.status}`);
+  const controller = new AbortController();
+  const timeout = setTimeout(() => controller.abort(), GATEWAY_REQUEST_TIMEOUT_MS);
+  let response;
+  try {
+    response = await fetch(`${origin}${path}`, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify(body),
+      signal: controller.signal
+    });
+  } catch (cause) {
+    if (controller.signal.aborted) throw new Error(`Gateway did not respond within ${GATEWAY_REQUEST_TIMEOUT_MS / 1e3} seconds`);
+    throw cause;
+  } finally {
+    clearTimeout(timeout);
+  }
+  const json = await response.json().catch(() => ({}));
+  if (!response.ok) {
+    throw new GatewayHttpError(
+      json.error?.code ?? json.error?.message ?? `Gateway returned ${response.status}`,
+      response.status
+    );
+  }
   return json;
 }
 async function signedPairingRequest(pair, payload, origin, requestId, action, completion) {
@@ -6186,7 +6221,22 @@ async function signedPairingRequest(pair, payload, origin, requestId, action, co
   }
   return decoded;
 }
-async function refreshAccessToken(gatewayUrl, refreshToken, pair) {
+function shouldTryNextRoute(cause) {
+  return !(cause instanceof GatewayHttpError) || cause.status >= 500 || [404, 408, 425, 429].includes(cause.status);
+}
+async function signedPairingRequestAcrossRoutes(pair, payload, origins, requestId, action, completion) {
+  let lastRouteError;
+  for (const origin of origins) {
+    try {
+      return { origin, result: await signedPairingRequest(pair, payload, origin, requestId, action, completion) };
+    } catch (cause) {
+      if (!shouldTryNextRoute(cause)) throw cause;
+      lastRouteError = cause;
+    }
+  }
+  throw lastRouteError instanceof Error ? lastRouteError : new Error("No Gateway route could be reached");
+}
+async function refreshAccessToken(gatewayUrls, refreshToken, pair, gateway) {
   const nextRefreshToken = createRefreshToken();
   const requestId = crypto.randomUUID();
   const timestamp = Date.now();
@@ -6199,50 +6249,94 @@ ${nonce}
 ${requestId}
 ${nextRefreshToken}`;
   const signature = await sign(pair, proof);
-  const response = await post(gatewayUrl, "/api/device-auth/refresh", {
+  const body = {
     refreshToken,
     nextRefreshToken,
     requestId,
     timestamp,
     nonce,
     signature
-  });
-  if (!response.payload?.accessToken || !response.payload.accessTokenExpiresAt || response.payload.refreshToken !== nextRefreshToken) {
+  };
+  let gatewayUrl;
+  let response;
+  let lastRouteError;
+  for (const origin of gatewayUrls) {
+    try {
+      response = await post(origin, "/api/device-auth/refresh", body);
+      gatewayUrl = origin;
+      break;
+    } catch (cause) {
+      if (!shouldTryNextRoute(cause)) throw cause;
+      lastRouteError = cause;
+    }
+  }
+  if (!response || !gatewayUrl) {
+    throw lastRouteError instanceof Error ? lastRouteError : new Error("No Gateway route could be reached");
+  }
+  if (typeof response.signedPayload !== "string" || typeof response.signature !== "string" || !await verifyGateway(gateway.gatewayPublicKey, response.signedPayload, response.signature)) throw new Error("Gateway identity could not be verified");
+  const responseProof = decodeJson(response.signedPayload);
+  if (responseProof.purpose !== "device-refresh-v3" || responseProof.gatewayId !== gateway.gatewayId || responseProof.requestId !== requestId || responseProof.nonce !== nonce || !(responseProof.expiresAt > Date.now()) || responseProof.expiresAt > Date.now() + 6e4) throw new Error("Gateway refresh response does not match this request");
+  const payload = responseProof.tokens;
+  if (!payload?.accessToken || !payload.accessTokenExpiresAt || payload.refreshToken !== nextRefreshToken) {
     throw new Error("Gateway returned invalid browser credentials");
   }
-  return response.payload;
+  return { ...payload, gatewayUrl };
 }
 function wait(milliseconds) {
   return new Promise((resolve) => setTimeout(resolve, milliseconds));
 }
 async function pairGateway(link, onApproval) {
-  const payload = parsePairingLink(link);
-  const origin = new URL(payload.routes[0].url).origin;
-  await requestGatewayOriginPermission(origin);
+  const payload = parseBrowserPairingLink(link);
+  const origins = [...new Set(payload.routes.map((route) => new URL(route.url).origin))];
+  const permissionTask = requestGatewayOriginPermissions(origins);
+  if (!await permissionTask) throw new Error("Gateway site permission was not granted");
   const pair = await getOrCreateKeyPair();
   const requestId = crypto.randomUUID();
   const initialRefreshToken = createRefreshToken();
-  let result = await signedPairingRequest(pair, payload, origin, requestId, "request");
+  let { origin, result } = await signedPairingRequestAcrossRoutes(
+    pair,
+    payload,
+    origins,
+    requestId,
+    "request"
+  );
   if (result.request.status === "pending") onApproval(result.request.confirmationCode);
   while (result.request.status === "pending") {
     await wait(1500);
-    result = await signedPairingRequest(pair, payload, origin, requestId, "status");
+    const response = await signedPairingRequestAcrossRoutes(
+      pair,
+      payload,
+      [origin, ...origins.filter((candidate) => candidate !== origin)],
+      requestId,
+      "status"
+    );
+    ({ origin, result } = response);
   }
   if (result.request.status !== "approved" && result.request.status !== "completed") {
     throw new Error(`Pairing ${result.request.status}`);
   }
   if (result.request.status !== "completed") {
-    result = await signedPairingRequest(pair, payload, origin, requestId, "complete", {
-      idempotencyKey: crypto.randomUUID(),
-      initialRefreshToken
-    });
+    const response = await signedPairingRequestAcrossRoutes(
+      pair,
+      payload,
+      [origin, ...origins.filter((candidate) => candidate !== origin)],
+      requestId,
+      "complete",
+      {
+        idempotencyKey: crypto.randomUUID(),
+        initialRefreshToken
+      }
+    );
+    ({ origin, result } = response);
   }
   if (!result.request.deviceId) throw new Error("Gateway did not register the browser");
-  const tokens = await refreshAccessToken(origin, initialRefreshToken, pair);
+  const orderedOrigins = [origin, ...origins.filter((candidate) => candidate !== origin)];
+  const tokens = await refreshAccessToken(orderedOrigins, initialRefreshToken, pair, payload);
   const profile = {
     gatewayId: payload.gatewayId,
     gatewayName: result.gateway.name,
-    gatewayUrl: origin,
+    gatewayUrl: tokens.gatewayUrl,
+    gatewayUrls: [tokens.gatewayUrl, ...orderedOrigins.filter((candidate) => candidate !== tokens.gatewayUrl)],
     gatewayPublicKey: payload.gatewayPublicKey,
     deviceId: result.request.deviceId,
     refreshToken: tokens.refreshToken,
@@ -6263,8 +6357,13 @@ async function getAccessProfile() {
   if (profile.accessTokenExpiresAt > Date.now() + 3e4) return profile;
   if (refreshTask) return refreshTask;
   refreshTask = (async () => {
-    const tokens = await refreshAccessToken(profile.gatewayUrl, profile.refreshToken, await getOrCreateKeyPair());
-    const next = { ...profile, ...tokens };
+    const gatewayUrls = profile.gatewayUrls?.length ? profile.gatewayUrls : [profile.gatewayUrl];
+    const tokens = await refreshAccessToken(gatewayUrls, profile.refreshToken, await getOrCreateKeyPair(), profile);
+    const next = {
+      ...profile,
+      ...tokens,
+      gatewayUrls: [tokens.gatewayUrl, ...gatewayUrls.filter((candidate) => candidate !== tokens.gatewayUrl)]
+    };
     await chrome.storage.local.set({ [PROFILE_KEY]: next });
     return next;
   })();

package/dist/browser-ext/dist/background.js

@@ -1,4 +1,4 @@
-import { h as endpointToolContentSchema, E as ENDPOINT_PROTOCOL_VERSION, c as canonicalJson, T as TAB_BINDING_PREFIX, b as captureTabWithPermission, P as PENDING_CONTEXT_KEY, k as readProfile, l as registerBrowserEndpoint, j as getAccessProfile, R as RealtimeClient, d as createBrowserEndpointHello, i as gatewayFetch } from './assets/auth-cwEj8rFb.js';
+import { h as endpointToolContentSchema, E as ENDPOINT_PROTOCOL_VERSION, c as canonicalJson, T as TAB_BINDING_PREFIX, b as captureTabWithPermission, P as PENDING_CONTEXT_KEY, k as readProfile, l as registerBrowserEndpoint, j as getAccessProfile, R as RealtimeClient, d as createBrowserEndpointHello, i as gatewayFetch } from './assets/auth-DkwOUI6_.js';
 
 const BROWSER_EXTENSION_PROTOCOL_VERSION = 4;
 const BROWSER_CONTROL_ENDPOINT_TOOL_NAME = "browser.control";
@@ -1253,7 +1253,7 @@ function connectWithLogging() {
     if (generation !== connectionGeneration && !realtime) connectWithLogging();
   });
 }
-chrome.runtime.onMessage.addListener((message, _sender, sendResponse) => {
+chrome.runtime.onMessage.addListener((message, sender, sendResponse) => {
   if (message.type === "browser/get-status") {
     sendResponse({ connected: Boolean(endpointClaim), transport: "gateway-realtime", error: lastConnectionError });
   } else if (message.type === "browser/get-endpoint-claim") {

package/dist/browser-ext/dist/sidepanel.html

@@ -5,7 +5,7 @@
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
     <title>xopc</title>
     <script type="module" crossorigin src="./sidepanel.js"></script>
-    <link rel="modulepreload" crossorigin href="./assets/auth-cwEj8rFb.js">
+    <link rel="modulepreload" crossorigin href="./assets/auth-DkwOUI6_.js">
     <link rel="stylesheet" crossorigin href="./assets/sidepanel-C86O7q5Y.css">
   </head>
   <body>

package/dist/browser-ext/dist/sidepanel.js

@@ -1,4 +1,4 @@
-import { R as RealtimeClient, i as gatewayFetch, a as activeTabId, r as readBrowserOutbox, w as writeBrowserOutbox, f as deleteBrowserOutbox, e as currentTabDescriptor, T as TAB_BINDING_PREFIX, j as getAccessProfile, n as runWithTabSiteAccess, P as PENDING_CONTEXT_KEY, b as captureTabWithPermission, k as readProfile, g as discoverLocalGateway, p as pairGateway, s as setAutoConnectEnabled, m as revokeAndForgetProfile } from './assets/auth-cwEj8rFb.js';
+import { R as RealtimeClient, i as gatewayFetch, a as activeTabId, r as readBrowserOutbox, w as writeBrowserOutbox, f as deleteBrowserOutbox, e as currentTabDescriptor, T as TAB_BINDING_PREFIX, j as getAccessProfile, n as runWithTabSiteAccess, P as PENDING_CONTEXT_KEY, b as captureTabWithPermission, p as pairGateway, s as setAutoConnectEnabled, k as readProfile, g as discoverLocalGateway, m as revokeAndForgetProfile } from './assets/auth-DkwOUI6_.js';
 
 true              &&(function polyfill() {
   const relList = document.createElement("link").relList;
@@ -27544,6 +27544,22 @@ function watchSidePanelTheme(gatewayUrl) {
 async function reconnectBrowserBridge() {
   await chrome.runtime.sendMessage({ type: "browser/reconnect" }).catch(() => void 0);
 }
+function pairingErrorMessage(cause) {
+  const message = cause instanceof Error ? cause.message : String(cause);
+  if (message === "Gateway site permission was not granted") {
+    return "Chrome needs access to the Gateway address. Select Connect again and allow the site permission.";
+  }
+  if (message === "PAIRING_EXPIRED" || message === "Pairing expired" || message === "Pairing link has expired") {
+    return "This invitation expired. Create and copy a new invitation from Device access.";
+  }
+  if (message === "PAIRING_DEVICE_MISMATCH") {
+    return "This invitation was created for a phone. Create a browser invitation instead.";
+  }
+  if (message === "No Gateway route could be reached") {
+    return "None of the Gateway addresses responded. Check that the Gateway is online and its secure connection is active.";
+  }
+  return message;
+}
 function SidePanelApp() {
   const [profile, setProfile] = reactExports.useState();
   const [pairingLink, setPairingLink] = reactExports.useState("");
@@ -27552,6 +27568,27 @@ function SidePanelApp() {
   const [error, setError] = reactExports.useState("");
   const [localPairingLink, setLocalPairingLink] = reactExports.useState("");
   const initializationStarted = reactExports.useRef(false);
+  const pairingStarted = reactExports.useRef(false);
+  const connect = reactExports.useCallback(async (link) => {
+    if (pairingStarted.current) return;
+    pairingStarted.current = true;
+    setState("pairing");
+    setError("");
+    setConfirmationCode("");
+    setPairingLink(link);
+    try {
+      const paired = await pairGateway(link, setConfirmationCode);
+      await setAutoConnectEnabled(true);
+      await reconnectBrowserBridge();
+      setProfile(paired);
+      setState("online");
+    } catch (cause) {
+      setError(pairingErrorMessage(cause));
+      setState("unpaired");
+    } finally {
+      pairingStarted.current = false;
+    }
+  }, []);
   reactExports.useEffect(() => {
     if (initializationStarted.current) return;
     initializationStarted.current = true;
@@ -27569,33 +27606,10 @@ function SidePanelApp() {
         return;
       }
       setLocalPairingLink(local.pairingLink);
-      setState("pairing");
-      try {
-        const paired = await pairGateway(local.pairingLink, setConfirmationCode);
-        await reconnectBrowserBridge();
-        setProfile(paired);
-        setState("online");
-      } catch (cause) {
-        setError(cause instanceof Error ? cause.message : String(cause));
-        setState("unpaired");
-      }
+      await connect(local.pairingLink);
     })();
-  }, []);
+  }, [connect]);
   reactExports.useEffect(() => watchSidePanelTheme(profile?.gatewayUrl), [profile?.gatewayUrl]);
-  async function connect(link = pairingLink) {
-    setState("pairing");
-    setError("");
-    try {
-      const paired = await pairGateway(link, setConfirmationCode);
-      await setAutoConnectEnabled(true);
-      await reconnectBrowserBridge();
-      setProfile(paired);
-      setState("online");
-    } catch (cause) {
-      setError(cause instanceof Error ? cause.message : String(cause));
-      setState("unpaired");
-    }
-  }
   async function disconnect() {
     await revokeAndForgetProfile();
     setProfile(void 0);
@@ -27629,18 +27643,18 @@ function SidePanelApp() {
     state !== "online" ? /* @__PURE__ */ jsxRuntimeExports.jsxs("section", { className: "center", children: [
       state === "loading" ? /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "muted", children: "Loading…" }) : null,
       state === "unpaired" || state === "pairing" ? /* @__PURE__ */ jsxRuntimeExports.jsxs("div", { className: "card", children: [
-        /* @__PURE__ */ jsxRuntimeExports.jsx("h1", { children: "Connect to xopc" }),
+        /* @__PURE__ */ jsxRuntimeExports.jsx("h1", { children: "Connect a Gateway" }),
         localPairingLink ? /* @__PURE__ */ jsxRuntimeExports.jsxs(jsxRuntimeExports.Fragment, { children: [
           /* @__PURE__ */ jsxRuntimeExports.jsx("p", { className: "muted", children: "A local xopc Gateway was found. xopc connects automatically on this computer." }),
           /* @__PURE__ */ jsxRuntimeExports.jsx("button", { className: "primary local-connect", onClick: () => void connect(localPairingLink), disabled: state === "pairing", children: state === "pairing" ? "Connecting…" : "Retry local connection" }),
-          /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "pairing-divider", children: "or use a pairing link" })
+          /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "pairing-divider", children: "or paste an invitation" })
         ] }) : /* @__PURE__ */ jsxRuntimeExports.jsxs(jsxRuntimeExports.Fragment, { children: [
-          /* @__PURE__ */ jsxRuntimeExports.jsx("p", { className: "muted", children: "Connect to a local Gateway, or paste a pairing link for another Gateway." }),
+          /* @__PURE__ */ jsxRuntimeExports.jsx("p", { className: "muted", children: "Connect locally, or paste the one-time invitation copied from Device access." }),
           /* @__PURE__ */ jsxRuntimeExports.jsx("button", { className: "primary local-connect", onClick: () => void connectLocalGateway(), disabled: state === "pairing", children: state === "pairing" ? "Connecting…" : "Connect local Gateway" }),
-          /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "pairing-divider", children: "or use a pairing link" })
+          /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "pairing-divider", children: "or paste an invitation" })
         ] }),
         /* @__PURE__ */ jsxRuntimeExports.jsxs("label", { className: "field", children: [
-          "Pairing link",
+          "One-time invitation",
           /* @__PURE__ */ jsxRuntimeExports.jsx("textarea", { rows: 4, value: pairingLink, onChange: (event) => setPairingLink(event.target.value), disabled: state === "pairing" })
         ] }),
         confirmationCode ? /* @__PURE__ */ jsxRuntimeExports.jsxs(jsxRuntimeExports.Fragment, { children: [
@@ -27648,7 +27662,7 @@ function SidePanelApp() {
           /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "approval-code", children: confirmationCode })
         ] }) : null,
         error ? /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "error-text", children: error }) : null,
-        /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "actions", children: /* @__PURE__ */ jsxRuntimeExports.jsx("button", { className: "primary", onClick: () => void connect(), disabled: !pairingLink.trim() || state === "pairing", children: state === "pairing" ? "Waiting for approval…" : "Connect" }) })
+        /* @__PURE__ */ jsxRuntimeExports.jsx("div", { className: "actions", children: /* @__PURE__ */ jsxRuntimeExports.jsx("button", { className: "primary", onClick: () => void connect(pairingLink), disabled: !pairingLink.trim() || state === "pairing", children: state === "pairing" ? "Waiting for approval…" : "Connect" }) })
       ] }) : null
     ] }) : /* @__PURE__ */ jsxRuntimeExports.jsx(ChatPanel, {}),
     state === "online" && profile ? /* @__PURE__ */ jsxRuntimeExports.jsx("button", { className: "disconnect-link", onClick: disconnect, title: `Disconnect ${profile.gatewayName}`, children: "Disconnect" }) : null

package/dist/browser-ext/manifest.json

@@ -2,7 +2,7 @@
   "manifest_version": 3,
   "minimum_chrome_version": "120",
   "name": "xopc",
-  "version": "0.0.270",
+  "version": "0.0.273",
   "description": "Chat with xopc and explicitly share or control the current page.",
   "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnpr4vpLC/nmvy+wiOWk3SWlp2nEZkFijfk8ivGw7StNZgCK90nOMvwhdEtlkk3GOWDvdVnq8HxCsM3UNQ8FnGUyerpH1FJXqXuradxeHf8ZxFjiQU/mIWfnKbUuONWQORon3/pigyoXoK/VUXgg0Wbm/rbVwsS0bv+25R6m+mZgBspOLeKuoH7ivhL+48WV6POtMBsFPZweY26477EM7ukh+56Ff5ENevB8ymxBBn7qK5ZoeZd2a23U8ioX5TsHfe6fnrjitPWjIxD8G0NoKQxcaa/Mo+xs+T6UiLKxP0wjz5bm7jB5H+CXtkRJqzBWUB0h+RSLJckzZfA8BAJrRwIDAQAB",
   "permissions": [

package/dist/extensions/telegram/xopc.extension.json

@@ -2,7 +2,7 @@
   "id": "telegram",
   "name": "Telegram Channel",
   "description": "Bundled Telegram Bot channel (private workspace sources; ships inside @xopcai/xopc dist/)",
-  "version": "0.0.270",
+  "version": "0.0.273",
   "kind": "channel",
   "main": "src/index.js",
   "channels": [

package/dist/gateway/static/root/assets/{activity-store-D_0FmdRj.js → activity-store-cF7IX2RP.js}

@@ -1 +1 @@
-import{f as e}from"./locale-store-BThkG0W5.js";var t=`xopc.activity-center.v1`,n=80,r=720*60*60*1e3;function i(e){return e===`error`?`failed`:e===`warning`?`attention`:`done`}function a(){if(!(typeof window>`u`))return window.location.hash.replace(/^#/,``)||`${window.location.pathname}${window.location.search}`||void 0}function o(){try{let e=globalThis.localStorage?.getItem(t);if(!e)return[];let i=JSON.parse(e);if(!Array.isArray(i.items))return[];let a=Date.now()-r,o=i.items.filter(e=>e&&typeof e.id==`string`&&typeof e.title==`string`).filter(e=>Number.isFinite(e.updatedAt)&&e.updatedAt>=a).slice(0,n);return o.length!==i.items.length&&s(o),o}catch{return[]}}function s(e){try{globalThis.localStorage?.setItem(t,JSON.stringify({items:e}))}catch{}}function c(e){return`${e.toString(36)}-${Math.random().toString(36).slice(2,8)}`}var l=e(e=>({items:o(),add:t=>e(e=>{let r=t.title.trim();if(!r)return e;let o=Date.now(),l=t.tone??`info`,u=t.dedupeKey?e.items.findIndex(e=>e.dedupeKey===t.dedupeKey):-1,d=[{id:u>=0?e.items[u].id:c(o),tone:l,status:t.status??i(l),title:r,message:t.message?.trim()||void 0,source:t.source?.trim()||void 0,href:t.href??a(),dedupeKey:t.dedupeKey,createdAt:u>=0?e.items[u].createdAt:o,updatedAt:o,read:t.read??!1,occurrences:u>=0?e.items[u].occurrences+1:1},...u>=0?e.items.filter((e,t)=>t!==u):e.items].slice(0,n);return s(d),{items:d}}),markAllRead:()=>e(e=>{let t=e.items.map(e=>({...e,read:!0}));return s(t),{items:t}}),remove:t=>e(e=>{let n=e.items.filter(e=>e.id!==t);return s(n),{items:n}}),clearFinished:()=>e(e=>{let t=e.items.filter(e=>e.status!==`done`);return s(t),{items:t}}),clear:()=>{s([]),e({items:[]})}}));function u(e){l.getState().add(e)}export{u as t};
+import{p as e}from"./locale-store-BBSCIl4I.js";var t=`xopc.activity-center.v1`,n=80,r=720*60*60*1e3;function i(e){return e===`error`?`failed`:e===`warning`?`attention`:`done`}function a(){if(!(typeof window>`u`))return window.location.hash.replace(/^#/,``)||`${window.location.pathname}${window.location.search}`||void 0}function o(){try{let e=globalThis.localStorage?.getItem(t);if(!e)return[];let i=JSON.parse(e);if(!Array.isArray(i.items))return[];let a=Date.now()-r,o=i.items.filter(e=>e&&typeof e.id==`string`&&typeof e.title==`string`).filter(e=>Number.isFinite(e.updatedAt)&&e.updatedAt>=a).slice(0,n);return o.length!==i.items.length&&s(o),o}catch{return[]}}function s(e){try{globalThis.localStorage?.setItem(t,JSON.stringify({items:e}))}catch{}}function c(e){return`${e.toString(36)}-${Math.random().toString(36).slice(2,8)}`}var l=e(e=>({items:o(),add:t=>e(e=>{let r=t.title.trim();if(!r)return e;let o=Date.now(),l=t.tone??`info`,u=t.dedupeKey?e.items.findIndex(e=>e.dedupeKey===t.dedupeKey):-1,d=[{id:u>=0?e.items[u].id:c(o),tone:l,status:t.status??i(l),title:r,message:t.message?.trim()||void 0,source:t.source?.trim()||void 0,href:t.href??a(),dedupeKey:t.dedupeKey,createdAt:u>=0?e.items[u].createdAt:o,updatedAt:o,read:t.read??!1,occurrences:u>=0?e.items[u].occurrences+1:1},...u>=0?e.items.filter((e,t)=>t!==u):e.items].slice(0,n);return s(d),{items:d}}),markAllRead:()=>e(e=>{let t=e.items.map(e=>({...e,read:!0}));return s(t),{items:t}}),remove:t=>e(e=>{let n=e.items.filter(e=>e.id!==t);return s(n),{items:n}}),clearFinished:()=>e(e=>{let t=e.items.filter(e=>e.status!==`done`);return s(t),{items:t}}),clear:()=>{s([]),e({items:[]})}}));function u(e){l.getState().add(e)}export{u as t};